* New upstream release.

* Initial packaging of all components of wallet.

9 files changed, 89 insertions, 10 deletions

diff --git a/debian/changelog b/debian/changelog
index 143d553..944ec3b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+wallet (0.3-1) unstable; urgency=low
+
+  * New upstream release.
+  * Initial packaging of all components of wallet.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 30 Nov 2007 20:30:30 -0800
+
 wallet (0.1-1) unstable; urgency=low
 
   * Initial release building only kasetkey.
diff --git a/debian/control b/debian/control
index b48b7e7..afd38b1 100644
--- a/debian/control
+++ b/debian/control
@@ -1,13 +1,13 @@
 Source: wallet
 Section: net
-Priority: optional
+Priority: extra
 Maintainer: Russ Allbery <rra@debian.org>
-Build-Depends: debhelper (>= 4.0.0), libremctl-dev, libkrb5-dev,
- libopenafs-dev
+Build-Depends: debhelper (>= 4.0.0), libdbi-perl, libdbd-sqlite3-perl,
+ libio-string-perl, libkrb5-dev, libremctl-dev, libtest-pod-perl, perl,
+ libopenafs-dev [i386 powerpc sparc alpha s390 ia64 hppa amd64 ppc64]
 Standards-Version: 3.7.2
 
 Package: kasetkey
-Priority: extra
 Architecture: i386 powerpc sparc alpha s390 ia64 hppa amd64 ppc64
 Depends: ${shlibs:Depends}
 Description: Set AFS kaserver keys and generate srvtabs
@@ -16,3 +16,49 @@ Description: Set AFS kaserver keys and generate srvtabs
  It's intended for automated generation of service srvtabs and for
  synchronization between Kerberos v5 keytabs and Kerberos v4 keys in an
  AFS kaserver.  It only works with an AFS kaserver KDC.
+
+Package: keytab-backend
+Architecture: any
+Depends: krb5-admin-server, perl, remctl-server
+Description: Provide existing Kerberos keytabs via remctl
+ keytab-backend is a service that runs under remctld and allows
+ authenticated clients to download Kerberos keytabs without changing the
+ key stored in the Kerberos KDC.  It must run on the same host as the
+ Kerberos KDC and uses kadmin.local to extract the existing key.  It
+ applies additional ACLs to limit which keys may be extracted in this
+ way.
+
+Package: wallet-client
+Architecture: any
+Depends: ${shlibs:Depends}
+Description: Kerberos-authenticated secure data management client
+ The wallet is a system for managing secure data, authorization rules to
+ retrieve or change that data, and audit rules for documenting actions
+ taken on that data.  Objects of various types may be stored in the
+ wallet or generated on request and retrieved by authorized users.  The
+ wallet tracks ACLs, metadata, and trace information.  It uses Kerberos
+ authentication.  One of the object types it supports is Kerberos keytabs,
+ making it suitable as a user-accessible front-end to Kerberos kadmind
+ with richer ACL and metadata operations.
+ .
+ This package contains the wallet client, which talks to a remote wallet
+ server to store, download, and manage objects.
+
+Package: wallet-server
+Architecture: all
+Depends: krb5-user, libdbi-perl, libdbd-sqlite3-perl | libdbd-mysql-perl,
+ remctl-server, ${perl:Depends}
+Suggests: libauthen-krb5-perl, libnet-remctl-perl
+Description: Kerberos-authenticated secure data management server
+ The wallet is a system for managing secure data, authorization rules to
+ retrieve or change that data, and audit rules for documenting actions
+ taken on that data.  Objects of various types may be stored in the
+ wallet or generated on request and retrieved by authorized users.  The
+ wallet tracks ACLs, metadata, and trace information.  It uses Kerberos
+ authentication.  One of the object types it supports is Kerberos keytabs,
+ making it suitable as a user-accessible front-end to Kerberos kadmind
+ with richer ACL and metadata operations.
+ .
+ This package contains the wallet server, which runs under remctl,
+ maintains the database of object metadata and secure objects, and
+ responds to requests from the wallet client.
diff --git a/debian/copyright b/debian/copyright
index db8e5d4..d426f23 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -1,7 +1,8 @@
 Packaged for Debian by Russ Allbery <rra@debian.org>            2007-03-08
 
-The source for this package currently isn't available except via the
-Debian package.  It will be released publicly later.
+It was downloaded from:
+
+    <http://www.eyrie.org/~eagle/software/wallet/>
 
 Upstream author:
 
diff --git a/debian/keytab-backend.install b/debian/keytab-backend.install
new file mode 100644
index 0000000..8d16b5d
--- /dev/null
+++ b/debian/keytab-backend.install
@@ -0,0 +1,5 @@
+debian/tmp/usr/sbin/keytab-backend
+debian/tmp/usr/share/man/man8/keytab-backend.8
+
+config/allow-extract            etc/krb5kdc
+config/keytab                   etc/remctl/conf.d
diff --git a/debian/rules b/debian/rules
index 70c594d..c4ba574 100755
--- a/debian/rules
+++ b/debian/rules
@@ -39,6 +39,9 @@ build-indep:
 build-stamp: config.status
 	dh_testdir
 	$(MAKE)
+	cd $(CURDIR)/perl && perl Makefile.PL INSTALLDIRS=vendor
+	cd $(CURDIR)/perl && $(MAKE)
+	$(MAKE) check
 	touch build-stamp
 
 clean:
@@ -52,8 +55,9 @@ install: build-stamp
 	dh_testdir
 	dh_testroot
 	dh_clean
-	$(MAKE) install prefix=$(CURDIR)/debian/tmp/usr
-	dh_install
+	$(MAKE) install DESTDIR=$(CURDIR)/debian/tmp
+	dh_installdirs
+	dh_install --fail-missing
 
 binary: binary-arch binary-indep
 binary-indep:
@@ -62,12 +66,13 @@ binary-arch: DH_OPTIONS=-a
 binary-arch: install
 	dh_testdir
 	dh_testroot
-	dh_installchangelogs
-	dh_installdocs
+	dh_installchangelogs NEWS
+	dh_installdocs -A README TODO
 	dh_installman
 	dh_link
 	dh_strip
 	dh_compress
+	dh_perl
 	dh_fixperms
 	dh_installdeb
 	dh_shlibdeps
diff --git a/debian/wallet-client.install b/debian/wallet-client.install
new file mode 100644
index 0000000..ec2d8c7
--- /dev/null
+++ b/debian/wallet-client.install
@@ -0,0 +1,2 @@
+debian/tmp/usr/bin/wallet
+debian/tmp/usr/share/man/man1/wallet.1
diff --git a/debian/wallet-server.dirs b/debian/wallet-server.dirs
new file mode 100644
index 0000000..0e856f2
--- /dev/null
+++ b/debian/wallet-server.dirs
@@ -0,0 +1 @@
+/etc/wallet
diff --git a/debian/wallet-server.docs b/debian/wallet-server.docs
new file mode 100644
index 0000000..db7ea6a
--- /dev/null
+++ b/debian/wallet-server.docs
@@ -0,0 +1,6 @@
+docs/design
+docs/design-acl
+docs/design-api
+docs/netdb-role-api
+docs/notes
+docs/setup
diff --git a/debian/wallet-server.install b/debian/wallet-server.install
new file mode 100644
index 0000000..980789e
--- /dev/null
+++ b/debian/wallet-server.install
@@ -0,0 +1,6 @@
+debian/tmp/usr/sbin/wallet-backend
+debian/tmp/usr/share/man/man3/*.3pm
+debian/tmp/usr/share/man/man8/wallet-backend.8
+debian/tmp/usr/share/perl5
+
+config/wallet                   etc/remctl/conf.d