Move user and group creation to separate libnss-nonlocal-common package

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Rewrite packaging with Debhelper 7

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

New upstream release 2.1

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge tag '2.1' into debian

nss_nonlocal 2.1

Version 2.1

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

end{pw,gr}ent, initgroups_dyn: Call all functions from the nonlocal chain

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Succeed even if groups_nonlocal chain returned not found

We’ve already added the magic groups at this point, so we need to
return success.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Guard one-time initialization with memory barriers

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Organize #includes

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Makefile.am: Fix ‘make uninstall’

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Makefile.am: Add walk_nss.h

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

configure: Use AM_PROG_AR if available (needed by Automake 1.12)

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

configure: Remove redundant AC_PROG_INSTALL

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 2.0-0debathena2

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Don’t Build-Depend debhelper 9.

Since we only set DH_COMPAT=9 when the presence of multiarch is
detected at build time, this setting should be ignored for the purpose
of computing build dependencies.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Pre-Depend adduser

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

getspent: Pay attention to NSS_NONLOCAL_IGNORE

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 2.0-0debathena1

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Disable dh_buildinfo, which currently fails at multiarch

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add multiarch support for distros from the future

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use automake 1.10 and autoconf 2.61

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Remove obsolete exclusion of glibc-private dependency

The glibc-private hack was removed in glibc 2.9-2 in favor of stricter
versioned dependencies on libc6 for private symbols, so dh_shlibdeps
-xglibc-private is no longer required anywhere.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Create magic ‘nss-nonlocal-users’ user

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

New upstream release

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge branch 'master' into debian

Version 2.0

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Allow nonlocal users in local groups containing MAGIC_NONLOCAL_USERNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add the primary nonlocal gid to local users in MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add supplementary nonlocal gids to local users in MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Document nss-nonlocal-users and nss-local-users

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Always look up MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Rename is_local to !is_nonlocal

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Only look up MAGIC_LOCAL_GROUPNAME for local users

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Remove redundant test for MAGIC_LOCAL_GROUPNAME membership

check_nonlocal_gid already stops users from getting into
MAGIC_LOCAL_GROUPNAME from nonlocal reasons.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Refactor adding a group into an add_group function

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Define bool

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Move the repetitive NSS walking logic into an include file

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Fix errno saving and restoring

Previously, the errno from malloc and check_nonlocal_{uid,gid} was
getting lost when errnop == &errno.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add copyright notice to nonlocal.h

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Catch undefined symbols at link time

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.11-0debathena3.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Fix cross-compiling on karmic and lucid.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Remove the workaround for buggy CDBS $(CC) splitting (fixed upstream).

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.11-0debathena2.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Install lib32nss-nonlocal to the right place on Ubuntu.

Apparently make is picky about whitespace.  This was fixed by removing
spaces between function arguments in debian/rules.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.11-0debathena1.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add Vcs-Git and Vcs-Browser fields.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Set maintainer to me.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Bump Debhelper compatibility level to 6.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Don’t rely on non-matching wildcards in lib32nss-nonlocal.install.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Disable CDBS cross-building logic.

This fixes a mysterious FTBFS on squeeze, where configuring with
--host=x86_64-linux-gnu on i386 or --host=i486-linux-gnu on amd64
causes configure to fail to find nm.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Fix CDBS 0.4.77’s incorrect splitting of multiword $(CC).

See http://bugs.debian.org/576967 .

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Bump Standards-Version to 3.8.4 (no changes required).

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Update build flags for biarch packages.

Notably, fix the path for lib32nss-nonlocal on squeeze.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Update debian/copyright.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

New upstream release.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge commit '1.11' into debian

Version 1.11.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Change syslog priority when removing local groups from non-local users

Signed-off-by: Jonathan Reed <jdreed@mit.edu>

Update licensing to LGPLv2.1+.

Since nss_nonlocal uses glibc internal functions, it probably could
not be distributed outside the terms of the LGPL anyway.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Tim Abbott <tabbott@mit.edu>

Check that a nonlocal lookup by id returns the right id.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.10-0debathena1.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge commit '1.10' into debian

Version 1.10.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Disallow numeric nonlocal user/group names that look like local uid/gids.

This prevents nonlocal users and groups from disturbing a command like
‘chown 0:0 file’.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add check_nonlocal_passwd and check_nonlocal_group helper functions.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Check that a nonlocal lookup by name returns the right name.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use automake’s silent-rules mode if available, for quieter build output.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Change type of buflen to size_t.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Move declarations before code.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.9-0debathena2.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Allow old enough gcc in place of gcc-multilib, so it builds on etch.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Also build a biarch lib32nss-nonlocal or lib64nss-nonlocal package.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
q

Debian release 1.9-0debathena1.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge version 1.9.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.9.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Simplify get_local_group to return the allocated buffer instead of copying.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Enlarge buffer sizes beyond _SC_GET{PW,GR}_R_SIZE_MAX if necessary.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Pass the right buffer size to _nss_nonlocal_getgrnam_r in get_local_group.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.8-0debathena4.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Only exclude glibc-private for new enough libc6.

Old dpkg-shlibdeps does not support -x.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.8-0debathena3.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Force exclusion of glibc-private dependency.

This is necessary for libnss-nonlocal to build and install with libc6
2.9 in Ubuntu Jaunty and Debian experimental, which now generates an
invalid dependency on glibc-private for uses of private glibc symbols.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.8-0debathena2.

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Clean up debian/copyright.

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Change "Debian-Athena Project" to "Debathena Project".

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Remove debian/control from version control.

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Debian release 1.8-0debathena1.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge version 1.8.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.8.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Correct the buffer size passed to realloc.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Debian release 1.7-0debathena1.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Autotoolfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Merge version 1.7.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Unindent a bunch of code in get_local_group.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Skip the nonlocal handler, so we can expunge the magic buflen hack.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Replace recursive nss calls with explicit iteration over the nss chain.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

glibc uses regparms for internal functions on i386.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Automakefiscate and libtoolfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Autoheaderfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>