Commit Graph

43 Commits

Author SHA1 Message Date
Michel Decima
7dabad2684 packaging: bump version number 2026-05-11 11:42:04 +02:00
Michel Decima
5f43c954be packaging: bump version number 2026-04-17 09:34:59 +02:00
Michel Decima
a1e5400b1d Merge branch '15-dconf-default-proxy' into develop
Closes issue #15
2026-04-17 09:34:20 +02:00
Michel Decima
bb4eb10c54 packaging: remove obsolete config file in d/preinst 2026-04-17 09:33:21 +02:00
Michel Decima
df15139b15 fix(postinst): options for certupdate and dongle-aladdin 2026-04-03 15:45:04 +02:00
Michel Decima
2b0446465b chore: update .gitignore 2025-03-02 17:48:49 +01:00
Michel Decima
3b65668d7f packaging: bump version number 2025-02-05 10:37:50 +01:00
Michel Decima
4d5cfa9d91 packaging: use non-interactive mode for pam-auth-update in d/postinst
Force non-interactive mode to avoid useless debconf message
about conflict between sss and yourdev profiles.

Solves #12
2025-02-05 09:02:15 +01:00
Michel Decima
f3b9b7020e packaging: bump version number 2025-02-03 09:57:51 +01:00
Michel Decima
21bc076683 packaging: bump version number 2025-01-24 14:46:51 +01:00
Michel Decima
342f5350aa chore: typo in debian/preinst 2024-10-09 10:58:37 +02:00
Michel Decima
d496b2cfda packaging: bump version number 2023-09-11 13:52:22 +02:00
Michel Decima
de85d1ce72 packaging: bump version number 2023-01-18 14:11:26 +01:00
Michel Decima
5a6fe5ecc6 chore: use drop-in fragment for pwquality.conf
Solves issue #6
2023-01-18 14:09:41 +01:00
jfv
7c370fded7 Update rule about password min size from 12 to 10 2023-01-13 16:09:10 +01:00
jfv
a489398c4a Improve password rules for local accounts 2023-01-12 09:07:14 +01:00
Michel Decima
a650c659fd license: update debian/copyright 2022-09-14 16:23:24 +02:00
Michel Decima
807f7118e3 license: add common license header 2022-09-14 16:22:57 +02:00
Michel Decima
98527371ba packaging: bump version number 2022-06-29 11:47:44 +02:00
Michel Decima
171ac09f3e packaging: bump version number 2022-04-27 12:26:56 +02:00
Michel Decima
78883988f2 fix: only recommends orange-dongle-aladdin
Safenet PKI driver is not mandatory for default behaviour
2022-04-27 12:12:21 +02:00
Michel Decima
31e4133eac packaging: update Vcs-{Git,Browser} properties in d/control 2022-04-26 11:25:04 +02:00
Michel Decima
e1361a3c32 packaging: bump version number 2022-03-09 17:49:51 +01:00
Michel Decima
ae9387d8b5 fix: in d/control, breaks/conflicts to orange-yourdev-pki-login 2022-03-09 17:48:22 +01:00
Michel Decima
cba722355d packaging: update changelog 2022-01-02 17:25:51 +01:00
Michel Decima
b03d583f88 chore: mark some PAM profiles as seen in d/postinst
Mark PAM profiles krb5, sss and yourdev as "seen" in /var/lib/pam so
next execution of command /usr/sbin/pam-auth-update in interactive
mode will ignore the values of 'Default' properties.
This avoids the automatic selection of the sss profile, which conflicts
with the yourdev profile.
2022-01-02 17:23:53 +01:00
Michel Decima
a5ab24a3cb packaging: bump version number 2022-01-02 13:32:57 +01:00
Michel Decima
5b195034a8 chore: add d/sources/options 2021-12-13 09:34:02 +01:00
Michel Decima
7699651803 fix: remove comments in pam-configs/yourdev
Presence of comments in pam-configs/ file cause several warnings when
invoking command `pam-auth-updates` (use of uninitialized value), and
then later the PAM configuration is broken:
  - SSH login fails immediately (connection closed)
  - opening a session with `sudo su -` is impossible (authorisation refused)
  - and maybe more...

Without comments in /usr/share/pam-configs/yourdev, everything works as
expected, no warnings in `pam-auth-updates`, no authentication problems.
2021-11-08 10:59:52 +01:00
Michel Decima
7b32c73c76 packaging: bump version number 2021-11-08 09:29:02 +01:00
Michel Decima
25db8873f7 chore: use common prefix for dconf/db/gdm.d files 2021-11-02 18:03:22 +01:00
Michel Decima
61a7d53cbf packaging: bump version number 2021-11-01 19:08:35 +01:00
Michel Decima
8fd5ffc46a packaging: bump version number 2021-10-20 02:56:53 -07:00
Michel Decima
ccb17c7352 feat: give higher priority to pam_sss module
With default priority (128), pam-auth-update put module pam_sss after
module pam_unix in /etc/pam.d/common-auth, and then a user with a
local account and local password synchronized with AD password will
never be granted a Kerberos TGT on session opening.
2021-10-20 02:54:46 -07:00
Michel Decima
af60473e89 fix: do not use --force with pam-auth-update
According to pam-auth-update(8), it is an error to use option --force
in postinst script:

    This  option  must not be used by package maintainer scripts;
    it is intended for use by administrators only.
2021-10-19 23:38:16 -07:00
Michel Decima
151c17f676 packaging: remove lintian warnings 2021-10-13 09:27:12 +02:00
Michel Decima
361e52fec6 packaging: bump version number 2021-10-13 09:10:19 +02:00
Michel Decima
6c7a4fd683 feat: add pam-pkcs11 configuration
Recommends sssd, sssd-tools, libpam-sss
Add SSSD configuration (sssd.conf)
Configure certificates for SSSD (postinst)
Restart SSSD service (postinst)
2021-10-13 09:08:02 +02:00
Michel Decima
d0cbb5093f packaging: bump version number 2021-10-12 13:48:21 +02:00
Michel Decima
1574958cf5 feat: add pam-pkcs11 configuration
Recommends libpam-pkcs11 package.
Add configuration for Safenet module (pam_pkcs11.conf)
Add UID mapper generator (pkcs11_generate_uids)
Configure certificates for pam_pkcs11 from postinst.
2021-10-12 12:08:41 +02:00
Michel Decima
3ad734c384 fix: debhelper-compat version in d/control 2021-10-12 09:56:39 +02:00
Michel Decima
df1b0f8c36 feat: add GDM customization
disable fingerprint and smartcard login
add a banner text and logo on login screen
2021-10-08 18:10:39 +02:00
Michel Decima
433849aaad Add debian packaging
Auto configure PAM with pam-auth-update:
  - enable ccreds-check ccreds-save
  - enable krb5
2021-10-08 11:06:56 +02:00