debathena-pam-config (1.21) unstable; urgency=low

  * Build-dep on debathena-gdm
  * And actually transform /etc/pam.d/gdm3 correctly

 -- Jonathan Reed <jdreed@mit.edu>  Thu, 16 Aug 2012 16:35:06 -0400

debathena-pam-config (1.20) unstable; urgency=low

  * Set XDG_CACHE_HOME to something on local disk if the user's homedir is
    in AFS (or an approximation thereof) (Trac: #1109 and #1162)
  * Bump Standards-Version

 -- Jonathan Reed <jdreed@mit.edu>  Sat, 30 Jun 2012 10:31:39 -0400

debathena-pam-config (1.19) unstable; urgency=low

  * Explain that Kerberos errors can be caused by @ signs (Trac: #612)

 -- Jonathan Reed <jdreed@mit.edu>  Thu, 31 May 2012 09:24:41 -0400

debathena-pam-config (1.18.3) unstable; urgency=low

  * No change rebuild to pick up config-package-dev 4.13 changes

 -- Jonathan Reed <jdreed@mit.edu>  Wed, 26 Oct 2011 18:30:33 -0400

debathena-pam-config (1.18.2) unstable; urgency=low

  * DEB_REMOVE_FILES conflicting pam-auth-update config file shipped in
    libpam-afs-session 1.7-2. We do this for two reasons: we want to get
    tokens in the cell of the user's home directory and the reason
    documented in README.pam-afs-session. (Trac: #679)

 -- Liz A. Denys <lizdenys@mit.edu>  Wed, 06 Oct 2010 02:24:04 -0400

debathena-pam-config (1.18.1) unstable; urgency=low

  * Only configure libpam-afs-session as a session module, not an auth
    module, to work around a bad interaction with sudo.

 -- Evan Broder <broder@mit.edu>  Tue, 06 Apr 2010 23:50:25 -0400

debathena-pam-config (1.18) unstable; urgency=low

  * Replace libpam-athena-locker with libpam-afs-session. (Trac: #316)
  * Bump debhelper compatibility.
  * Bump standards version.

 -- Evan Broder <broder@mit.edu>  Sun, 04 Apr 2010 13:05:47 -0400

debathena-pam-config (1.17) unstable; urgency=low

  * Only enable libpam-krb524 if krb4 is actually available. (Trac: #418)

 -- Evan Broder <broder@mit.edu>  Sun, 15 Nov 2009 16:36:44 -0500

debathena-pam-config (1.16.3) unstable; urgency=low

  * Make that a Breaks and not a Conflicts, because Conflicting with
    earlier-than versions is wrong.

 -- Evan Broder <broder@mit.edu>  Sun, 25 Oct 2009 17:39:29 -0400

debathena-pam-config (1.16.2) unstable; urgency=low

  * Explicitly conflict with the old libpam-krb5-config, because
    apparently just conflicting with diverts-usr++share++pam-configs++krb5
    isn't always good enough.

 -- Evan Broder <broder@mit.edu>  Sun, 25 Oct 2009 16:37:17 -0400

debathena-pam-config (1.16.1) unstable; urgency=low

  * Un-word-wrap the missing network connection message, beacuse gdm
    includes the carriage return, and it looks weird.

 -- Evan Broder <broder@mit.edu>  Thu, 22 Oct 2009 15:11:53 -0400

debathena-pam-config (1.16) unstable; urgency=low

  * Configure the Kerberos authentication to print an error message if
    pam_krb5 can't reach the KDC. (Trac: #208)
  * Merge in the libpam-krb5-config package.

 -- Evan Broder <broder@mit.edu>  Sun, 11 Oct 2009 12:37:26 -0400

debathena-pam-config (1.15) unstable; urgency=low

  * Don't accept root's Kerberos password, only the local root password.

 -- Evan Broder <broder@mit.edu>  Fri, 29 May 2009 17:54:17 -0400

debathena-pam-config (1.14) unstable; urgency=low

  * Avoid a harmless OMINOUS WARNING on upgrades.
  * Fix FTBFS on squeeze due to a missing newline in the generated
    debathena-pam-config.substvars.

 -- Anders Kaseorg <andersk@mit.edu>  Thu, 02 Apr 2009 13:47:39 -0400

debathena-pam-config (1.13) unstable; urgency=low

  * Fix a missing "var=" in the pam_mktemp configuration for
    intrepid/jaunty.

 -- Tim Abbott <tabbott@mit.edu>  Sat, 14 Mar 2009 13:15:49 -0400

debathena-pam-config (1.12) unstable; urgency=low

  * Remove DEB_AUTO_UPDATE_DEBIAN_CONTROL.
  * Change "Debian-Athena Project" to "Debathena Project".
  * Remove debian/control from version control.
  * Clean up debian/copyright.

 -- Tim Abbott <tabbott@mit.edu>  Sat, 24 Jan 2009 16:24:05 -0500

debathena-pam-config (1.11) unstable; urgency=low

  * work around a pam-auth-update bug: force it to re-read the Default:
    lines in our pam-configs

 -- Greg Price <price@mit.edu>  Mon,  3 Nov 2008 23:57:08 -0500

debathena-pam-config (1.10) unstable; urgency=low

  * force pam-auth-update on stock Hardy /etc/pam.d/common-*
    as well as stock Debathena Hardy
  * trivial clarification in dependency versions

 -- Greg Price <price@mit.edu>  Sun,  2 Nov 2008 00:17:36 -0400

debathena-pam-config (1.9) unstable; urgency=low

  * change pam-auth-update message to be clearer in menu

 -- Greg Price <price@mit.edu>  Sat,  1 Nov 2008 07:57:48 -0400

debathena-pam-config (1.8) unstable; urgency=low

  * fix dependencies in new-style case, to account for ~ suffixes

 -- Greg Price <price@mit.edu>  Sat,  1 Nov 2008 07:39:32 -0400

debathena-pam-config (1.7) unstable; urgency=low

  * Take advantage of pam-auth-update in libpam-runtime (>= 1.0.1-4ubuntu1),
    which is in intrepid.  This means no munging of /etc/pam.d/common-*
    directly, so users and other packages can make their own changes.
    * libpam-krb524, libpam-athena-locker, libpam-debathena-home-type
      now enable themselves
    * new libpam-krb5-config package configures libpam-krb5 the new way
    * add a file to apply mktemp to ATHENA_SESSION_TMPDIR the new way
    * on upgrade from older versions, if /etc/pam.d/common-* match what
      old debathena-pam-config versions supplied then replace them

 -- Greg Price <price@mit.edu>  Sat,  1 Nov 2008 05:52:00 -0400

debathena-pam-config (1.6) unstable; urgency=low

  * Check if common-* templates are available in /usr/share/pam/
  * Handle pam_unix.so in temlate being requisitie instead of required.

 -- Tim Abbott <tabbott@mit.edu>  Thu, 01 May 2008 12:46:42 -0400

debathena-pam-config (1.5) unstable; urgency=low

  * Convert to use config-package.mk interface, new in config-package-
    dev 4.5
  * Replace DEB_REPLACE_FILES with DEB_TRANSFORM_FILES, as this was
    renamed in config-package-dev 4.5

 -- Tim Abbott <tabbott@mit.edu>  Mon, 21 Apr 2008 19:05:54 -0400

debathena-pam-config (1.4) unstable; urgency=low

  [ Shreevatsa R ]
  * Convert (mostly) to the new config-package-dev interface

  [ Tim Abbott ]
  * Handle /etc/pam.d/ssh => /etc/pam.d/sshd rename in Debian upstream.

 -- Tim Abbott <tabbott@mit.edu>  Sun, 06 Apr 2008 22:17:16 -0400

debathena-pam-config (1.3debathena5) unstable; urgency=low

  * Make access.conf.append mimic Athena workstations more closely.

 -- Tim Abbott <tabbott@mit.edu>  Fri,  1 Feb 2008 18:21:09 -0500

debathena-pam-config (1.3debathena4) unstable; urgency=low

  * Only set XAUTHORITY in /etc/pam.d/ssh due to gdm problems.
  * Correctly clean auto-generated debian/access.conf.debathena

 -- Tim Abbott <tabbott@mit.edu>  Thu, 24 Jan 2008 22:31:23 -0500

debathena-pam-config (1.3debathena3) unstable; urgency=low

  * Replace pam_xauthority.so with more general pam_mktemp.so
  * Use pam_mktemp.so to create/set ATHENA_SESSION_TMPDIR
  * Use nss_nonlocal 1.3 to give better /etc/security/access.conf
    default for private workstations: access is allowed if and only if
    the user has a local account on the system

 -- Tim Abbott <tabbott@mit.edu>  Tue, 22 Jan 2008 22:02:50 -0500

debathena-pam-config (1.3debathena2) unstable; urgency=low

  * Add /etc/security/access.conf default to no remote access.
  * Use pam_xauthority.so by default.

 -- Tim Abbott <tabbott@mit.edu>  Wed, 12 Dec 2007 22:41:02 -0500

debathena-pam-config (1.3debathena1) unstable; urgency=low

  * Make /etc/pam.d/{login,ssh,gdm} include pam_access.so
  * Add pam_debathena_home_type.so /etc/pam.d/common-session

 -- Tim Abbott <tabbott@mit.edu>  Tue, 13 Nov 2007 01:19:19 -0500

debathena-pam-config (1.2debathena2) unstable; urgency=low

  * Base original configuration on libpam-runtime templates.

 -- Anders Kaseorg <andersk@mit.edu>  Thu, 06 Sep 2007 01:57:27 -0400

debathena-pam-config (1.2debathena1) unstable; urgency=low

  * Rebuild against debathena-config-build-common 3.4.

 -- Anders Kaseorg <andersk@mit.edu>  Mon, 06 Aug 2007 21:57:15 -0400

debathena-pam-config (1.2) unstable; urgency=low

  * Renamed libpam-krb4 to libpam-krb524.

 -- Anders Kaseorg <andersk@mit.edu>  Tue, 24 Jul 2007 21:59:08 -0400

debathena-pam-config (1.1debathena1) unstable; urgency=low

  * Rebuild with debathena-config-build-common 3.1.

 -- Anders Kaseorg <andersk@mit.edu>  Wed, 18 Jul 2007 02:14:52 -0400

debathena-pam-config (1.1) unstable; urgency=low

  * Updated to use libpam-krb4 and libpam-athena-locker, rather than
    debathena-libpam-krb5 and debathena-libpam-openafs-session

 -- Tim Abbott <tabbott@mit.edu>  Fri, 13 Jul 2007 17:34:34 -0400

debathena-pam-config (1.0) unstable; urgency=low

  * Initial release.

 -- Anders Kaseorg <andersk@mit.edu>  Fri, 13 Jul 2007 16:04:50 -0400
