Bug 924881

Summary: Install unixgroup from pwauth for group based auth
Product: [Fedora] Fedora EPEL Reporter: Spenser Gilliland <Spenser309>
Component: pwauthAssignee: Philip Prindeville <philipp>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: el6CC: philipp, pwouters, rdieter
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: pwauth-2.3.10-5.fc17 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-04-08 16:50:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Spenser Gilliland 2013-03-22 18:10:23 UTC
Description of problem:

The specfile for the pwauth package does not install the unixgroup executable.  This can be used to perform group based authentication.  

Version-Release number of selected component (if applicable):

2.3.10-1.el6

How reproducible:

Always

Steps to Reproduce:
1. yum install pwauth
2. ls /usr/bin/unixgroup
  
Actual results:

No such file.

Expected results:

/usr/bin/unixgroup

Additional info:

the following lines need to be added to the specfile.  

In %install
install -p -m 4750 -t %{buildroot}%{_bindir} unixgroup

In %files
%attr(4750,root,apache) %{_bindir}/unixgroup

Comment 1 Philip Prindeville 2013-03-22 19:05:05 UTC
(In reply to comment #0)
> [...]
> Additional info:
> 
> the following lines need to be added to the specfile.  
> 
> In %install
> install -p -m 4750 -t %{buildroot}%{_bindir} unixgroup
> 
> In %files
> %attr(4750,root,apache) %{_bindir}/unixgroup

Actually, making this setuid would be pointless. It does not need to read the /etc/shadow file, so doesn't need that capability. Group membership querying is an unprivileged operation.

0750 or 0755 would probably be adequate.

Comment 2 Fedora Update System 2013-03-22 22:18:49 UTC
pwauth-2.3.10-4.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/pwauth-2.3.10-4.el6

Comment 3 Fedora Update System 2013-03-22 22:32:08 UTC
pwauth-2.3.10-4.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/pwauth-2.3.10-4.fc17

Comment 4 Fedora Update System 2013-03-22 22:33:07 UTC
pwauth-2.3.10-4.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/pwauth-2.3.10-4.fc18

Comment 5 Fedora Update System 2013-03-23 18:16:23 UTC
Package pwauth-2.3.10-4.el6:
* should fix your issue,
* was pushed to the Fedora EPEL 6 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing pwauth-2.3.10-4.el6'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-0760/pwauth-2.3.10-4.el6
then log in and leave karma (feedback).

Comment 6 Fedora Update System 2013-04-08 16:50:48 UTC
pwauth-2.3.10-4.el6 has been pushed to the Fedora EPEL 6 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2013-06-03 16:57:10 UTC
pwauth-2.3.10-5.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/pwauth-2.3.10-5.fc18

Comment 8 Fedora Update System 2013-06-03 16:58:30 UTC
pwauth-2.3.10-5.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/pwauth-2.3.10-5.fc17

Comment 9 Fedora Update System 2013-06-14 02:30:59 UTC
pwauth-2.3.10-5.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2013-06-14 02:33:18 UTC
pwauth-2.3.10-5.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.