libapache2-webkdc_4.1.1-2_i386.deb


Advertisement

Description

libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC

Property Value
Distribution Debian 7 (Wheezy)
Repository Debian Main i386
Package name libapache2-webkdc
Package version 4.1.1
Package release 2
Package architecture i386
Package type deb
Installed size 225 B
Download size 93.36 KB
Official Mirror ftp.br.debian.org
WebAuth is a cookie-based web authentication system built on top of
Kerberos.  It relies on a central authentication server that handles all
user authentication for a domain and creates user authentication
credentials for any web server that needs strong authentication.
This package contains the Apache 2 module for the central authentication
server for a particular site.  Only one such server is needed; all web
servers that use WebAuth will talk to this server to obtain and verify
authentication credentials.

Alternatives

Package Version Architecture Repository
libapache2-webkdc_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
libapache2-webkdc_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
libapache2-webkdc_4.1.1-2_amd64.deb 4.1.1 amd64 Debian Main
libapache2-webkdc - - -

Requires

Name Value
apache2.2-common -
libc6 >= 2.3.6-6~
libwebauth6 >= 4.1.0

Download

Type URL
Binary Package libapache2-webkdc_4.1.1-2_i386.deb
Source Package webauth

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install libapache2-webkdc deb package:
    # sudo apt-get install libapache2-webkdc

Files

Path
/etc/apache2/mods-available/webkdc.conf
/etc/apache2/mods-available/webkdc.load
/etc/webkdc/token.acl
/usr/lib/apache2/modules/mod_webkdc.so
/usr/share/doc/libapache2-webkdc/NEWS.Debian.gz
/usr/share/doc/libapache2-webkdc/README.Debian
/usr/share/doc/libapache2-webkdc/README.gz
/usr/share/doc/libapache2-webkdc/TODO.gz
/usr/share/doc/libapache2-webkdc/changelog.Debian.gz
/usr/share/doc/libapache2-webkdc/changelog.gz
/usr/share/doc/libapache2-webkdc/copyright
/usr/share/doc/libapache2-webkdc/mod_webkdc.html.en
/usr/share/doc/libapache2-webkdc/mod_webkdc.xml.gz

Changelog

2012-11-04 - Russ Allbery <rra@debian.org>
webauth (4.1.1-2) unstable; urgency=low
* Add Breaks of libwebkdc-perl and webauth-weblogin << 4.0.0 to
libwebauth-perl and of webauth-weblogin << 4.0.0 to libwebkdc-perl.
The API of the Perl modules changed in 4.0.0.  Thanks, Dameon Wagner.
(Closes: #691878)
2012-04-25 - Russ Allbery <rra@debian.org>
webauth (4.1.1-1) unstable; urgency=low
* New upstream release (no Apache 2.4 support yet; that's next).
- Fix webauth_user_info bug in interpreting login history timestamps.
- Fix login history timestamp handling in sample confirm template.
- Suppress history and token rights in sample confirm template when
those data elements are empty.  (Closes: #664735)
- Add explicit HTML filters to all sample template variable
interpolations as an additional security measure.
- Update the mod_webkdc manual for changes in 4.1.0.
* If Apache is running and has the module loaded, restart Apache on
configure of libapache2-webauth or libapache2-webkdc.
* Remove the conditional around the postinst actions for
libapache2-webauth and libapache2-webkdc and just always configure the
package.  This is at least arguably more correct for the various abort
cases, is simpler, and shouldn't hurt.
2012-03-15 - Russ Allbery <rra@debian.org>
webauth (4.1.0-1) unstable; urgency=low
* New upstream release.
- New mod_webkdc WebKdcUserInfoTimeout option to set a network timeout
for user information service queries.  The new default is 30
seconds.
- New mod_webkdc WebKdcUserInfoIgnoreFail error to allow users to
authenticate with password and use pre-existing single sign-on
cookies even if the user information service is down.  Be aware that
this can allow bypassing a centrally-mandated multifactor
requirement.
- Use remctl_set_ccache instead of setting KRB5CCNAME when available
to avoid memory leaks on calling the user information service and to
not leak settings across threads.
- Fix WebLogin error handling when the password field is left blank.
- Fix WebLogin error handling of empty usernames.
- Drop library support for base64-encoded token attributes (which was
never used by WebAuth).
- Drop webauth_info_{build,version} library APIs.
- Document Apache/Tomcat security interaction around URL parsing in
the mod_webauth manual.  This affects any Apache security mechanism
used in conjunction with Tomcat.
* Bump libremctl-dev build dependency to >= 3.1 for consistent builds.
* Add Build-Depends-Package to the symbols file for better dependency
handling.
* Update standards version to 3.9.3 (no changes required).
2011-12-02 - Russ Allbery <rra@debian.org>
webauth (4.0.2-1) unstable; urgency=low
* New upstream release.
- Fix setting of the REMOTE_USER preference cookie in WebLogin.
- Ignore undefined cookies in WebLogin to reduce error logs.
- Document factor codes in the mod_webauth manual.
* Remove ${shlibs:Depends} from libwebauth-dev dependencies to remove a
warning.  This package won't contain compiled binaries.
2011-09-23 - Russ Allbery <rra@debian.org>
webauth (4.0.1-1) unstable; urgency=low
* New upstream release.
- Change user information service and WebKDC to WebLogin protocols for
conveying suspicious login information to use the IP address as the
CDATA and put the hostname in an attribute.
- Display suspicious logins in WebLogin, forcing a confirmation page.
- Log the return URL of authentication requests to the WebKDC.
- Reduce mod_webauth log level when retrieving credentials.
2011-09-03 - Russ Allbery <rra@debian.org>
webauth (4.0.0-2) unstable; urgency=low
* Fix a variety of uninitialized variables and memory leaks in the
libwebauth library and the test suite.  Thanks, Christoph Egger and
Aaron M. Ucko.  (Closes: #640259)
* Don't attempt to chown files in libwebkdc-perl when doing a
binary-only build.  Thanks, Aaron M. Ucko.  (Closes: #640268)

See Also

Package Description
libapertium3-3.1-0-dev_3.1.0-2_i386.deb Development library for Apertium
libapertium3-3.1-0_3.1.0-2_i386.deb Shared library for Apertium
libapm-dev_3.2.2-14_i386.deb Library for interacting with APM driver in kernel
libapm1_3.2.2-14_i386.deb Library for interacting with APM driver in kernel
libapol-dev_3.3.7-3_i386.deb Security Enhanced Linux policy analysis development
libapol4_3.3.7-3_i386.deb Security Enhanced Linux policy analysis library
libapp-cache-perl_0.37-1_all.deb Easy application-level caching library for perl
libapp-cli-perl_0.313-1_all.deb Dispatcher module for command line interface programs
libapp-cmd-perl_0.318-1_all.deb Perl interface to write command line apps with less suffering
libapp-control-perl_1.02-2_all.deb Perl module for apachectl style control of another executable
libapp-daemon-perl_0.15-1_all.deb Perl module to start an Application as a Daemon
libapp-info-perl_0.56-1_all.deb Provide metadata about software packages installed
libapp-nopaste-perl_0.33-1_all.deb application for easy access to any pastebin
libapp-options-perl_1.12-1_all.deb command-line option values processing system
libapp-rad-perl_1.04-1_all.deb Perl module for rapid and easy creation of command line applications
Advertisement
Advertisement