--- courierpassd-1.1.2.orig/debian/README.Debian +++ courierpassd-1.1.2/debian/README.Debian @@ -0,0 +1,90 @@ +courierpassd for Debian +----------------------- + +The following is derived from courierpassd's INSTALL file: + +SUPER-SERVER SETUP: + +Because courierpassd relies on a super-server to handle network connections, +it is easy to set up courierpassd to listen on whatever port is desired. +Since courierpassd uses the poppassd protocol to talk to clients, however, +the use of port 106 is recommended unless there is a compelling reason to +do otherwise. + +A typical xinetd entry for courierpassd would look like this: + +service courierpassd +{ + port = 106 + socket_type = stream + protocol = tcp + user = (daemon|root) + server = /usr/sbin/courierpassd + server_args = -s imap + wait = no + only_from = 127.0.0.1 + instances = 4 + disable = no +} + +Courierpassd can also be used with tcpserver from the ucspi-tcp package +written by Dan Bernstein. A simple example of a courierpassd run script +would look like this: + + #!/bin/sh + + AUTHUID=`/usr/bin/id -u courier` + AUTHGID=`/usr/bin/id -g courier` + + tcpserver -R -x /etc/tcprules.d/tcp.poppassd.cdb \ + -u "$AUTHUID" -g "$AUTHGID" 0 106 courierpassd -s imap & + +If you use the daemontools package to control tcpserver, you can take +advantage of multilog and courierpassd's --stderr switch to provide +a consistent logging interface. In this case, the run script would look +something like this: + + #!/bin/sh + + AUTHUID=`/usr/bin/id -u courier` + AUTHGID=`/usr/bin/id -g courier` + + exec tcpserver -v -R -x /etc/tcprules.d/tcp.poppassd.cdb \ + -u "$AUTHUID" -g "$AUTHGID" 0 106 courierpassd -s imap --stderr 2>&1 + +And the corresponding log run script would look like this: + + #!/bin/sh + + exec multilog t /var/log/courierpassd + +See the documentation that comes with ucspi-tcp and daemontools for +more information on how to use these packages and why you might want +to. + + +SECURITY CONSIDERATIONS: + +The user you choose to run courierpassd as is determined by the ownership +of the directory in which the authdaemon domain socket, named 'socket', +resides. The location of the socket directory is listed in the +authdaemonrc configuration file as the parameter authdaemonvar. +You should run courierpassd as the user and group of this directory to +allow it to communicate with the authentication library. +The default owner for this directory is the user 'daemon'. + +Because courierpassd interacts with clients at remote locations, +careful thought must be given to access control. + +When configuring the super-server, restrict the machines from which +connections will be accepted. Restrict access to particular machines or +at least to particular subnets. If your network is protected by a firewall, +make sure the firewall blocks incoming requests to the port courierpassd +listens on. + +Using courierpassd means there will be plain text user IDs and passwords +transiting the network. If there is a possibility that passwords can be +captured on the wire by packet sniffers, use tunneling software such +as stunnel to encrypt the connection between server and clients. + + -- Sven Hoexter , Mon, 14 Feb 2011 16:04:22 +0100 --- courierpassd-1.1.2.orig/debian/changelog +++ courierpassd-1.1.2/debian/changelog @@ -0,0 +1,64 @@ +courierpassd (1.1.2-4) unstable; urgency=medium + + * Orphaning the package, maintainer set to QA, Vcs* removed. + * Bump Standards-Version to 3.9.6 - no changes required. + + -- Sven Hoexter Tue, 21 Jul 2015 20:03:23 +0200 + +courierpassd (1.1.2-3) unstable; urgency=low + + * According to dev-ref 6.2.2 the short description is no sentence so + we should start in lowercase letters. + * Increase Standards-Version to 3.9.5. + * Increase debhelper compat level to 9. + * Set DEB_BUILD_MAINT_OPTIONS = hardening=+all. + * Remove old manual set LDFLAGS. + * Fix lintian-overrides format for binary-or-shlib-defines-rpath + error. + * Replace debian/watch with a dummy. Parsing WordPress download sites + is not worth the trouble. + * Update upstream homepage and download location. + + -- Sven Hoexter Wed, 01 Jan 2014 21:11:32 +0100 + +courierpassd (1.1.2-2) unstable; urgency=low + + * Adopt the package. (Closes: #569469) + * Remove shlibs.local, build-depend on courier-authlib-dev (>= 0.63.0-3) + * Switch to dh style debian/rules: + + Remove build-depends on cdbs. + + Increase compat level to 8. + + Build-depend on debhelper (>= 8) to calm lintian. + * Add LDFLAGS += -Wl,-z,defs -Wl,--as-needed. + * Add override_dh_auto_configure and configure --with-minuid=1000. + (Closes: #544284) + * Move the Homepage from description to the source package. + * Increase S-V to 3.9.1 - no changes required. + * Suggest xinetd. + * Update the xinetd example in README.Debian. (Closes: #544282) + * Add VCS* entries to debian/control. + * Add debian/source/format 1.0. + * Add a lintian override for the rpath issue because the package will + be rejected otherwise. We actually link against a non-public lib in + /usr/lib/courier-authlib. + + -- Sven Hoexter Mon, 14 Feb 2011 19:33:06 +0100 + +courierpassd (1.1.2-1) unstable; urgency=low + + * New upstream release + + -- Charles Fry Tue, 25 Jul 2006 08:48:49 -0400 + +courierpassd (1.1.1-2) unstable; urgency=low + + * Include shlibs.local while waiting for courier-authlib to provide shlibs. + + -- Charles Fry Fri, 14 Jul 2006 14:02:58 -0400 + +courierpassd (1.1.1-1) unstable; urgency=low + + * Initial release (Closes: #244693) + + -- Charles Fry Tue, 11 Jul 2006 11:43:00 -0400 + --- courierpassd-1.1.2.orig/debian/compat +++ courierpassd-1.1.2/debian/compat @@ -0,0 +1 @@ +9 --- courierpassd-1.1.2.orig/debian/control +++ courierpassd-1.1.2/debian/control @@ -0,0 +1,20 @@ +Source: courierpassd +Section: mail +Priority: optional +Maintainer: Debian QA Group +Build-Depends: debhelper (>= 9), autotools-dev, + courier-authlib-dev (>= 0.63.0-3) +Standards-Version: 3.9.6 +Homepage: http://www.arda.homeunix.net/downloads/ + +Package: courierpassd +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Suggests: xinetd +Description: change courier user passwords using poppassd interface + Courierpassd works with the Courier mail server user authentication + mechanism to allow changing a user's password from across a network. It + uses the same protocol as poppassd to obtain user IDs and passwords. + It can be used, for example, to allow users to change their passwords + from within various webmail programs. + --- courierpassd-1.1.2.orig/debian/copyright +++ courierpassd-1.1.2/debian/copyright @@ -0,0 +1,34 @@ +This package was debianized by Charles Fry on +Tue, 11 Jul 2006 11:40:38 -0400. + +It's currently maintained by Sven Hoexter + +It was downloaded from http://www.arda.homeunix.net/downloads/ + + +The following copyright notice applies to courierpassd itself: + +Copyright (c) Andrew St. Jean 2002-2005 + +You are free to distribute this software under the terms of the GNU +General Public License. On Debian systems, the complete text of the GNU +General Public License can be found in the file +`/usr/share/common-licenses/GPL'. + + +The following copyright notice applies to strlcpy, used internally by +courierpassd: + +Copyright (c) 1998 Todd C. Miller + +Permission to use, copy, modify, and distribute this software for any +purpose with or without fee is hereby granted, provided that the above +copyright notice and this permission notice appear in all copies. + +THE SOFTWARE IS PROVIDED "AS IS" AND TODD C. MILLER DISCLAIMS ALL +WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES +OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL TODD C. MILLER BE LIABLE +FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION +OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN +CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. --- courierpassd-1.1.2.orig/debian/dirs +++ courierpassd-1.1.2/debian/dirs @@ -0,0 +1 @@ +usr/sbin --- courierpassd-1.1.2.orig/debian/gbp.conf +++ courierpassd-1.1.2/debian/gbp.conf @@ -0,0 +1,2 @@ +[DEFAULT] +pristine-tar = True --- courierpassd-1.1.2.orig/debian/lintian-overrides +++ courierpassd-1.1.2/debian/lintian-overrides @@ -0,0 +1 @@ +courierpassd binary: binary-or-shlib-defines-rpath usr/sbin/courierpassd /usr/lib/courier-authlib --- courierpassd-1.1.2.orig/debian/rules +++ courierpassd-1.1.2/debian/rules @@ -0,0 +1,10 @@ +#!/usr/bin/make -f + +export DEB_BUILD_MAINT_OPTIONS = hardening=+all + +%: + dh $@ --with autotools_dev + +override_dh_auto_configure: + dh_auto_configure -- \ + --with-minuid=1000 --- courierpassd-1.1.2.orig/debian/source/format +++ courierpassd-1.1.2/debian/source/format @@ -0,0 +1 @@ +1.0 --- courierpassd-1.1.2.orig/debian/watch +++ courierpassd-1.1.2/debian/watch @@ -0,0 +1,4 @@ +#Upstream switched to WordPress. It's not worth the trouble +#to try to parse the resulting HTML for a correct download. +#Page in question is: http://www.arda.homeunix.net/downloads/ +#Last download link is: http://www.arda.homeunix.net/?ddownload=375