webauth-weblogin_4.1.1-2_all.deb


Advertisement

Description

webauth-weblogin - Central login server for WebAuth authentication

Property Value
Distribution Debian 7 (Wheezy)
Repository Debian Main amd64
Package name webauth-weblogin
Package version 4.1.1
Package release 2
Package architecture all
Package type deb
Installed size 176 B
Download size 94.19 KB
Official Mirror ftp.br.debian.org
WebAuth is a cookie-based web authentication system built on top of
Kerberos.  It relies on a central authentication server that handles all
user authentication for a domain and creates user authentication
credentials for any web server that needs strong authentication.
This package contains the CGI-based WebLogin server that handles initial
user authentication and building authentication tokens for WebAuth
servers.  Only one WebLogin server is needed to support a site WebAuth
installation.  It is normally run on the same system as the WebKDC.

Alternatives

Package Version Architecture Repository
webauth-weblogin_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
webauth-weblogin_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
webauth-weblogin_4.1.1-2_all.deb 4.1.1 all Debian Main
webauth-weblogin - - -

Requires

Name Value
libwebauth-perl >= 4.0.0~
libwebkdc-perl >= 4.0.0~
perl -

Download

Type URL
Binary Package webauth-weblogin_4.1.1-2_all.deb
Source Package webauth

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install webauth-weblogin deb package:
    # sudo apt-get install webauth-weblogin

Files

Path
/usr/share/doc/webauth-weblogin/NEWS.Debian.gz
/usr/share/doc/webauth-weblogin/README.Debian.gz
/usr/share/doc/webauth-weblogin/README.gz
/usr/share/doc/webauth-weblogin/TODO.gz
/usr/share/doc/webauth-weblogin/changelog.Debian.gz
/usr/share/doc/webauth-weblogin/changelog.gz
/usr/share/doc/webauth-weblogin/copyright
/usr/share/doc/webauth-weblogin/install-spnego.gz
/usr/share/doc/webauth-weblogin/weblogin-config.gz
/usr/share/doc/webauth-weblogin/weblogin-cookies
/usr/share/doc/webauth-weblogin/weblogin-flow.gz
/usr/share/doc/webauth-weblogin/weblogin-passcheck.gz
/usr/share/weblogin/login.fcgi
/usr/share/weblogin/logout.fcgi
/usr/share/weblogin/pwchange.fcgi
/usr/share/weblogin/generic/images/confirm.png
/usr/share/weblogin/generic/images/error.png
/usr/share/weblogin/generic/images/help.png
/usr/share/weblogin/generic/images/login.png
/usr/share/weblogin/generic/images/logout.png
/usr/share/weblogin/generic/templates/confirm.tmpl
/usr/share/weblogin/generic/templates/error.tmpl
/usr/share/weblogin/generic/templates/help.html
/usr/share/weblogin/generic/templates/login.tmpl
/usr/share/weblogin/generic/templates/logout.tmpl
/usr/share/weblogin/generic/templates/multifactor.tmpl
/usr/share/weblogin/generic/templates/pwchange.tmpl

Changelog

2012-11-04 - Russ Allbery <rra@debian.org>
webauth (4.1.1-2) unstable; urgency=low
* Add Breaks of libwebkdc-perl and webauth-weblogin << 4.0.0 to
libwebauth-perl and of webauth-weblogin << 4.0.0 to libwebkdc-perl.
The API of the Perl modules changed in 4.0.0.  Thanks, Dameon Wagner.
(Closes: #691878)
2012-04-25 - Russ Allbery <rra@debian.org>
webauth (4.1.1-1) unstable; urgency=low
* New upstream release (no Apache 2.4 support yet; that's next).
- Fix webauth_user_info bug in interpreting login history timestamps.
- Fix login history timestamp handling in sample confirm template.
- Suppress history and token rights in sample confirm template when
those data elements are empty.  (Closes: #664735)
- Add explicit HTML filters to all sample template variable
interpolations as an additional security measure.
- Update the mod_webkdc manual for changes in 4.1.0.
* If Apache is running and has the module loaded, restart Apache on
configure of libapache2-webauth or libapache2-webkdc.
* Remove the conditional around the postinst actions for
libapache2-webauth and libapache2-webkdc and just always configure the
package.  This is at least arguably more correct for the various abort
cases, is simpler, and shouldn't hurt.
2012-03-15 - Russ Allbery <rra@debian.org>
webauth (4.1.0-1) unstable; urgency=low
* New upstream release.
- New mod_webkdc WebKdcUserInfoTimeout option to set a network timeout
for user information service queries.  The new default is 30
seconds.
- New mod_webkdc WebKdcUserInfoIgnoreFail error to allow users to
authenticate with password and use pre-existing single sign-on
cookies even if the user information service is down.  Be aware that
this can allow bypassing a centrally-mandated multifactor
requirement.
- Use remctl_set_ccache instead of setting KRB5CCNAME when available
to avoid memory leaks on calling the user information service and to
not leak settings across threads.
- Fix WebLogin error handling when the password field is left blank.
- Fix WebLogin error handling of empty usernames.
- Drop library support for base64-encoded token attributes (which was
never used by WebAuth).
- Drop webauth_info_{build,version} library APIs.
- Document Apache/Tomcat security interaction around URL parsing in
the mod_webauth manual.  This affects any Apache security mechanism
used in conjunction with Tomcat.
* Bump libremctl-dev build dependency to >= 3.1 for consistent builds.
* Add Build-Depends-Package to the symbols file for better dependency
handling.
* Update standards version to 3.9.3 (no changes required).
2011-12-02 - Russ Allbery <rra@debian.org>
webauth (4.0.2-1) unstable; urgency=low
* New upstream release.
- Fix setting of the REMOTE_USER preference cookie in WebLogin.
- Ignore undefined cookies in WebLogin to reduce error logs.
- Document factor codes in the mod_webauth manual.
* Remove ${shlibs:Depends} from libwebauth-dev dependencies to remove a
warning.  This package won't contain compiled binaries.
2011-09-23 - Russ Allbery <rra@debian.org>
webauth (4.0.1-1) unstable; urgency=low
* New upstream release.
- Change user information service and WebKDC to WebLogin protocols for
conveying suspicious login information to use the IP address as the
CDATA and put the hostname in an attribute.
- Display suspicious logins in WebLogin, forcing a confirmation page.
- Log the return URL of authentication requests to the WebKDC.
- Reduce mod_webauth log level when retrieving credentials.
2011-09-03 - Russ Allbery <rra@debian.org>
webauth (4.0.0-2) unstable; urgency=low
* Fix a variety of uninitialized variables and memory leaks in the
libwebauth library and the test suite.  Thanks, Christoph Egger and
Aaron M. Ucko.  (Closes: #640259)
* Don't attempt to chown files in libwebkdc-perl when doing a
binary-only build.  Thanks, Aaron M. Ucko.  (Closes: #640268)

See Also

Package Description
webcam_3.102-3_amd64.deb image grabber and uploader
webcamd_0.7.6-5_all.deb Capture images from video devices
webcheck_1.10.4_all.deb website link and structure checker
webdruid_0.5.4-12.1_amd64.deb A web server log file analysis tool
webfs_1.21+ds1-8.1_amd64.deb lightweight HTTP server for static content
webgen0.4-doc_0.4.7-8_all.deb template based static website generator
webgen0.4_0.4.7-8_all.deb template based static website generator
webgen0.5-doc_0.5.14+dfsg1-3_all.deb fast, powerful, and extensible static website generator -- API documentation
webgen0.5_0.5.14+dfsg1-3_all.deb fast, powerful, and extensible static website generator
webhttrack-common_3.46.1-1_all.deb webhttrack common files
webhttrack_3.46.1-1_amd64.deb Copy websites to your computer, httrack with a Web interface
webissues-server_0.8.5-3_all.deb a network system supporting team collaboration (server)
webissues_1.0.2-1_amd64.deb network system supporting team collaboration
webkit-image-gtk_0.0.svn25399-3_amd64.deb generate images from webpages - GTK+ version
webkit-image-qt_0.0.svn25399-3_amd64.deb generate images from webpages - Qt version
Advertisement
Advertisement