--- dynalogin-1.0.0.orig/debian/compat +++ dynalogin-1.0.0/debian/compat @@ -0,0 +1 @@ +8 --- dynalogin-1.0.0.orig/debian/copyright +++ dynalogin-1.0.0/debian/copyright @@ -0,0 +1,25 @@ + +Copyright 2010-2012 Daniel Pocock + +Software package: dynalogin + +Version: all + +License: GNU General Public License v3 + +Copyright owner: Copyright (C) 2010-2012 Daniel Pocock + +Code from third parties: + libdynalogin/lib/* from gnulib (LGPL v2 or later) + Copyright (C) 1998-2006 Free Software Foundation, Inc. + +Debian packaging copyright: + Copyright (C) 2010-2012 Daniel Pocock + The Debian packaging is licensed under the GPL v3 + +The full text of the GPL v3 can be found in /usr/share/common-licenses/GPL-3 +on your Debian system + +The full text of the LGPL v2 can be found in /usr/share/common-licenses/LGPL-2 +on your Debian system + --- dynalogin-1.0.0.orig/debian/docs +++ dynalogin-1.0.0/debian/docs @@ -0,0 +1 @@ +doc/* --- dynalogin-1.0.0.orig/debian/dynalogin-server.README.Debian +++ dynalogin-1.0.0/debian/dynalogin-server.README.Debian @@ -0,0 +1,32 @@ +dynalogin on Debian +------------------- + + This is the initial packaging of dynalogin for Debian. + + IMPORTANT: the PAM module, pam_dynalogin (package libpam-dynalogin) + can only talk to the server using TLS. Therefore, you must create + a TLS certificate and set up the two config options that tell + dynalogind where to find the certificate and key file. + + The administrator must create the database manually (if database is + used) and configure the UNIX ODBC properties files in /etc + + => see /usr/share/doc/libdynalogin-1-0/odbc for schema and sample + ODBC ini file + + For example, + + apt-get install unixodbc-dev libmyodbc mysql-server + + and then follow all the steps in + + /usr/share/doc/libdynalogin-1-0/odbc/README.mysql + + Config location, by default, is /etc/dynalogind.conf + + Debian is the primary development and test platform for dynalogin + + Please see the web page and wiki for more detailed documentation: + + http://www.dynalogin.org + --- dynalogin-1.0.0.orig/debian/dynalogin-server.docs +++ dynalogin-1.0.0/debian/dynalogin-server.docs @@ -0,0 +1,5 @@ +doc/Protocol.txt +doc/README.txt +doc/TESTING.txt +doc/BUILD.txt +doc/Architecture.txt --- dynalogin-1.0.0.orig/debian/dynalogin-server.init +++ dynalogin-1.0.0/debian/dynalogin-server.init @@ -0,0 +1,47 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: dynalogin-server +# Required-Start: $network $named $remote_fs $syslog +# Required-Stop: $network $named $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Enable dynalogin +# Description: Enable the TCP socket for handling dynalogin auth. +### END INIT INFO +PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin +DAEMON=/usr/sbin/dynalogind +NAME=dynalogind +DESC="dynalogin server daemon" + +test -x $DAEMON || exit 0 + +set -e + +case "$1" in + start) + echo -n "Starting $DESC: " + start-stop-daemon --start --quiet -m --pidfile /var/run/$NAME.pid \ + --exec $DAEMON + echo "$NAME." + ;; + stop) + echo -n "Stopping $DESC: " + start-stop-daemon --stop --quiet --oknodo --name $NAME \ + 2>&1 > /dev/null + echo "$NAME." + ;; + reload) + ;; + restart|force-reload) + $0 stop + $0 start + ;; + *) + N=/etc/init.d/$NAME + # echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2 + echo "Usage: $N {start|stop|restart|force-reload}" >&2 + exit 1 + ;; +esac + +exit 0 --- dynalogin-1.0.0.orig/debian/dynalogin-server.install +++ dynalogin-1.0.0/debian/dynalogin-server.install @@ -0,0 +1 @@ +usr/sbin/dynalogind --- dynalogin-1.0.0.orig/debian/dynalogin-server.manpages +++ dynalogin-1.0.0/debian/dynalogin-server.manpages @@ -0,0 +1 @@ +dynalogind/dynalogind.1 --- dynalogin-1.0.0.orig/debian/dynalogind.conf +++ dynalogin-1.0.0/debian/dynalogind.conf @@ -0,0 +1,68 @@ +; configuration file for dynalogin +; +; lines beginning with ; are ignored +; + +; *** SETTINGS FOR THE DAEMON PROCESS *** + +; set the address and port where the dynalogind server listens for +; validation requests: +;dynalogind.bind_addr=0.0.0.0 +dynalogind.bind_addr=127.0.0.1 +dynalogind.bind_port=9050 + +; Whether the dynalogind process should detach (1) or stay on the console (0) +dynalogind.detach=1 + +; If TLS is required, declare both a certificate file and a key file +; The files must be in PEM format +; Any intermediate chained certificates should be in the cert file +; after the certificate, in order with the highest placed last +;dynalogind.tls_cert=/etc/ssl/ssl.crt/dynalogin-server.example.org.pem +;dynalogind.tls_key=/etc/ssl/private/dynalogin-server.example.org.key + +; *** SETTINGS FOR THE LIBDYNALOGIN INFRASTRUCTURE LIBRARY *** +; These settings do impact the operation of the dynalogind process +; but they are interpreted by the underlying library libdynalogin + +; set HOTP parameters + +; Number of digits to use, default = 6 +;dynalogin.hotp.digits=6 + +; Window to search for matching token +;dynalogin.hotp.window=20 + +; set TOTP parameters + +; Number of digits to use, default = 6 +;dynalogin.totp.digits=6 + +; Window/number of steps permitted in search for matching token +; default = 2 (should not be lower or it will always reject a +; user logging in just before a multiple of X below) +;dynalogin.totp.window=2 + +; Step size (time interval that each token is valid) +; default = 30 (value X from RFC) +;dynalogin.totp.X=20 + +; Offset from 0:00:00 on 1 Jan 1970 UTC +; default = 0 (value T0 from RFC) +;dynalogin.totp.T0=0 + +; set the backend datasource +; +; for testing, in-memory datasource with one user, +; +; name = testuser, secret = abc123 +;dynalogin.datasource=example_ds +; +; filesystem datasource +; default file is $(LOCALSTATEDIR)/dynalogin-passwd +;dynalogin.datasource=fs_ds +; +; ODBC datasource +; looks for an ODBC datasource named `dynalogin', no other configuration +; is specified in this config file +dynalogin.datasource=odbc_ds --- dynalogin-1.0.0.orig/debian/libdynalogin-1-0.README.Debian +++ dynalogin-1.0.0/debian/libdynalogin-1-0.README.Debian @@ -0,0 +1,9 @@ +dynalogin on Debian +------------------- + +This package contains the library implementing the server-side +functionality. + +For server documentation, please see documents installed under: + + /usr/share/doc/dynalogin-server/ --- dynalogin-1.0.0.orig/debian/libdynalogin-1-0.docs +++ dynalogin-1.0.0/debian/libdynalogin-1-0.docs @@ -0,0 +1 @@ +doc/odbc/* --- dynalogin-1.0.0.orig/debian/libdynalogin-1-0.install +++ dynalogin-1.0.0/debian/libdynalogin-1-0.install @@ -0,0 +1,2 @@ +usr/lib*/libdynalogin-1.so* +usr/lib*/dynalogin/*.so --- dynalogin-1.0.0.orig/debian/libdynaloginclient-1-0.install +++ dynalogin-1.0.0/debian/libdynaloginclient-1-0.install @@ -0,0 +1 @@ +usr/lib*/libdynaloginclient-1.so* --- dynalogin-1.0.0.orig/debian/libpam-dynalogin.README.Debian +++ dynalogin-1.0.0/debian/libpam-dynalogin.README.Debian @@ -0,0 +1,10 @@ +dynalogin on Debian +------------------- + +This package contains the PAM module + +For server documentation, please see documents installed under: + + /usr/share/doc/dynalogin-server/ + +by installing the dynalogin-server package. --- dynalogin-1.0.0.orig/debian/libpam-dynalogin.docs +++ dynalogin-1.0.0/debian/libpam-dynalogin.docs @@ -0,0 +1 @@ +pam_dynalogin/README_PAM.txt --- dynalogin-1.0.0.orig/debian/rules +++ dynalogin-1.0.0/debian/rules @@ -0,0 +1,28 @@ +#!/usr/bin/make -f + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/autotools.mk + +CFLAGS = `apr-1-config --cflags --cppflags --includes` -I/usr/include/liboath + +DEB_DH_STRIP_ARGS = +#DEB_MAKE_CHECK_TARGET = VERBOSE=t check + +install/libdynalogin-1-0:: + mkdir -p debian/libdynalogin-1-0/usr/share/doc/libdynalogin-1-0/odbc + cp libdynalogin/datasources/odbc/*sample debian/libdynalogin-1-0/usr/share/doc/libdynalogin-1-0/odbc + cp libdynalogin/datasources/odbc/README* debian/libdynalogin-1-0/usr/share/doc/libdynalogin-1-0/odbc + cp libdynalogin/datasources/odbc/schema* debian/libdynalogin-1-0/usr/share/doc/libdynalogin-1-0/odbc + +install/dynalogin-client-php:: + mkdir -p debian/dynalogin-client-php/usr/share/dynalogin-client-php + cp php/dynalogin.php debian/dynalogin-client-php/usr/share/dynalogin-client-php + +install/dynalogin-server:: + mkdir -p debian/dynalogin-server/etc + cp debian/dynalogind.conf debian/dynalogin-server/etc + +install/libpam-dynalogin:: + mkdir -p debian/libpam-dynalogin/lib/security + mv debian/tmp/usr/lib/security/pam_dynalogin.so debian/libpam-dynalogin/lib/security + --- dynalogin-1.0.0.orig/debian/simpleid-store-dynalogin.README.Debian +++ dynalogin-1.0.0/debian/simpleid-store-dynalogin.README.Debian @@ -0,0 +1,31 @@ + + +Quickstart +---------- + +This package should have installed all the files in the right places + +You just need to edit your server hostname/port in: + + /etc/simpleid/dynalogin-filesystem.store.config.php + +and create/edit your user identities. + +A sample dynalogin identity file is located in: + + /usr/share/simpleid/sample/example-dynalogin.identity.dist + +It should be copied to: + + /var/lib/simpleid/identities/.identity + +and then modified to suit your requirements. In particular, you must +set these new parameters for each user who exists in dynalogin: + + auth_method="DYNALOGIN" + dynalogin_user="whatever" + +where the `dynalogin_user' value should match the username stored +in the dynalogin database (for example, if you want to log in +as `daniel', but your dynalogin database expects `daniel@example.org') + --- dynalogin-1.0.0.orig/debian/simpleid-store-dynalogin.dirs +++ dynalogin-1.0.0/debian/simpleid-store-dynalogin.dirs @@ -0,0 +1,3 @@ +usr/share/simpleid/sample +usr/share/simpleid/www +etc/simpleid --- dynalogin-1.0.0.orig/debian/simpleid-store-dynalogin.docs +++ dynalogin-1.0.0/debian/simpleid-store-dynalogin.docs @@ -0,0 +1 @@ +simpleid/README.txt --- dynalogin-1.0.0.orig/debian/simpleid-store-dynalogin.install +++ dynalogin-1.0.0/debian/simpleid-store-dynalogin.install @@ -0,0 +1,4 @@ +simpleid/example-dynalogin.identity.dist usr/share/simpleid/sample +simpleid/dynalogin-filesystem.store.inc usr/share/simpleid/www +simpleid/dynalogin-filesystem.store.config.php etc/simpleid +simpleid/README.txt usr/share/doc/simpleid-store-dynalogin --- dynalogin-1.0.0.orig/debian/simpleid-store-dynalogin.links +++ dynalogin-1.0.0/debian/simpleid-store-dynalogin.links @@ -0,0 +1 @@ +etc/simpleid/dynalogin-filesystem.store.config.php usr/share/simpleid/www/dynalogin-filesystem.store.config.php --- dynalogin-1.0.0.orig/debian/watch +++ dynalogin-1.0.0/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://sf.net/dynalogin/dynalogin-(.+)\.tar\.gz --- dynalogin-1.0.0.orig/debian/control +++ dynalogin-1.0.0/debian/control @@ -0,0 +1,127 @@ +Source: dynalogin +Section: admin +Priority: optional +Maintainer: Debian Authentication Maintainers +Uploaders: Daniel Pocock +Build-Depends: cdbs, debhelper (>= 8.0.0), libapr1-dev, liboath-dev, unixodbc-dev, autotools-dev, pkg-config, libgnutls28-dev, libpam-dev +Homepage: http://www.dynalogin.org/ +Standards-Version: 3.9.3 +Vcs-Git: git://git.debian.org/pkg-auth/dynalogin.git +Vcs-Browser: http://git.debian.org/?p=pkg-auth/dynalogin.git;a=summary + +Package: libdynalogin-1-0 +Section: libs +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: two-factor HOTP/TOTP authentication - implementation libs + dynalogin is a two-factor authentication framework based on HOTP/TOTP + (Open Authentication) algorithms. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This library is used by a dynalogin authentication server or any other + software component that wants to implement the HOTP/TOTP algorithm + internally. The package also includes various storage modules (file + storage and UNIXODBC) for retaining the user credentials and algorithm + data. + +Package: dynalogin-server +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: two-factor HOTP/TOTP authentication - server daemon + dynalogin is a two-factor authentication framework based on the HOTP/TOTP + (Open Authentication) algorithms. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This package provides dynalogind, the server daemon for a dynalogin + two-factor authentication server. + +Package: libdynaloginclient-1-0 +Section: libs +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: two-factor HOTP/TOTP authentication - implementation libs + dynalogin is a two-factor authentication framework based on the HOTP/TOTP + (Open Authentication) algorithms. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This library is used by any application that wants to authenticate + users against the dynalogin server. It is able to make the TLS + connection to the dynalogin server and communicate requests and + responses using the dynalogin wire protocol. It is used by + pam_dynalogin. + +Package: libpam-dynalogin +Section: admin +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: two-factor HOTP/TOTP authentication - implementation libs + dynalogin is a two-factor authentication framework based on the HOTP/TOTP + (Open Authentication) algorithms. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This PAM module allows authentication against a dynalogin server + anywhere in the network. + +Package: dynalogin-client-php +Section: web +Architecture: all +Depends: ${misc:Depends} +Description: two-factor HOTP/TOTP authentication - PHP client + dynalogin is a two-factor authentication framework based on the HOTP/TOTP + (Open Authentication) algorithm. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This package provides a PHP client for the dynalogin server. It allows + PHP applications to validate a user login attempt. It is intended as a + foundation for login forms, OpenID providers and similar code. + +Package: simpleid-store-dynalogin +Section: web +Architecture: all +Depends: ${misc:Depends}, simpleid, dynalogin-client-php +Description: two-factor HOTP/TOTP authentication - OpenID provider + dynalogin is a two-factor authentication framework based on the HOTP/TOTP + (Open Authentication) algorithm. Dynalogin can store credentials in + any database supported by UNIXODBC, which makes the solution + robust and scalable. It can also store credentials in flat files + if desired. dynalogin has been successfully integrated in solutions + for OpenID, making it possible to use two-factor authentication with + hundreds of other web applications and public web sites. There is a + dynalogin soft-token for Android and it also works with Google + Authenticator. + . + This package provides a datastore extension for the OpenID provider + SimpleID, which is implemented entirely in PHP and has minimal other + dependencies. The extension allows SimpleID users (configured in flat + files) to authenticate against a dynalogin server. + --- dynalogin-1.0.0.orig/debian/changelog +++ dynalogin-1.0.0/debian/changelog @@ -0,0 +1,44 @@ +dynalogin (1.0.0-3) unstable; urgency=low + + * Add missing build-dep libpam-dev (Closes: #707037) + + -- Daniel Pocock Tue, 07 May 2013 08:32:49 +0200 + +dynalogin (1.0.0-2) unstable; urgency=low + + * Update for unstable + + -- Daniel Pocock Sun, 05 May 2013 17:36:20 +0200 + +dynalogin (1.0.0-1) experimental; urgency=low + + * New upstream release + + -- Daniel Pocock Tue, 19 Feb 2013 23:11:49 +0100 + +dynalogin (0.10.8-1) experimental; urgency=low + + * New upstream release + + -- Daniel Pocock Wed, 06 Feb 2013 22:18:38 +0100 + +dynalogin (0.10.6-1) experimental; urgency=low + + * New upstream release + + -- Daniel Pocock Tue, 05 Feb 2013 23:16:41 +0100 + +dynalogin (0.10.5-1) experimental; urgency=low + + * New upstream release + * Make debian/compat consistent with debian/control debhelper version + * Tweak title and description text + * Update control file for migration from collab-maint to pkg-auth + + -- Daniel Pocock Tue, 05 Feb 2013 20:29:09 +0100 + +dynalogin (0.9.14-1) unstable; urgency=low + + * Initial packaging. (Closes: #665831). + + -- Daniel Pocock Sat, 10 Mar 2012 10:30:00 +0100 --- dynalogin-1.0.0.orig/debian/source/format +++ dynalogin-1.0.0/debian/source/format @@ -0,0 +1 @@ +1.0 --- dynalogin-1.0.0.orig/debian/source/options +++ dynalogin-1.0.0/debian/source/options @@ -0,0 +1,3 @@ +extend-diff-ignore = "^contrib/" +extend-diff-ignore = "Makefile.in$" +extend-diff-ignore = "cdbs-config_list$"