kstart (4.3-1) unstable; urgency=medium

  * New upstream release.
    - Add support for kafs.  If AFS is not available but the -t option is
      provided, create a new session keyring, link it to the user keyring,
      and then run the configured program (via the AKLOG environment
      variable).  This can be set to aklog-kafs (from kafs-client) and
      k5start and krenew should then work correctly with kafs.
    - If a program run by k5start or krenew is killed by a signal, exit
      with status signal number plus 128, not 0.
    - Use explicit_bzero to clear the password for k5start -s.
  * Update standards version to 4.6.0 (no changes required).

 -- Russ Allbery <rra@debian.org>  Mon, 30 Aug 2021 21:10:40 -0700

kstart (4.2-3) unstable; urgency=medium

  * Add debian/upstream/metadata file.
  * Change the Debian packaging branch to debian/unstable.
  * Change the canonical packaging repository to Salsa.
  * Update to debhelper compatibility level v13.
    - Depend on debhelper-compat instead of using debian/compat.
  * Update standards version to 4.5.1 (no changes required).
  * Remove package copyright and license stanzas from debian/copyright,
    since they just repeat the Files: * stanza.
  * Refresh upstream signing key.

 -- Russ Allbery <rra@debian.org>  Sun, 27 Dec 2020 22:40:44 -0800

kstart (4.2-2) unstable; urgency=medium

  * Update to debhelper compatibility level V11.
    - Remove --parallel flags, no longer needed.
    - Remove dh-autoreconf dependency and sequence, no longer needed.
  * Update standards version to 4.2.1.
    - Enable verbose test output.
    - Install the upstream release notes as NEWS.gz, not changelog.gz.
    - Add Rules-Requires-Root: no.
    - Use https for URLs in debian/control and debian/copyright.
  * Bump watch file version to 4 and use https for URL.
  * Switch to the DEP-14 branch layout and update debian/gbp.conf and
    Vcs-Git accordingly.
  * Refresh upstream signing key.
  * Run wrap-and-sort -ast.

 -- Russ Allbery <rra@debian.org>  Sun, 26 Aug 2018 13:34:55 -0700

kstart (4.2-1) unstable; urgency=medium

  * New upstream release.
    - k5start with -K or a command no longer exits if the initial
      authentication fails (unless -x was given).  (Closes: #705063)
    - k5start and krenew retry the initial authentication with exponential
      backoff, before running any command.  (Closes: #725175)
    - k5start cleans up temporary ticket caches in failures.
    - The -H flag can now be used in combination with -K.
    - Add new -a flag to both k5start and krenew to attempt authentication
      or ticket renewal each time the daemon wakes up.
    - Fix k5start and krenew to not reject the -b flag with -K or a
      command.
  * Drop all patches, merged upstream.
  * Add debian/gbp.conf reflecting the branch layout of the default
    packaging repository.
  * Refresh upstream signing key.
  * Enable all compiler hardening options.
  * Update standards version to 3.9.6 (no changes required).

 -- Russ Allbery <rra@debian.org>  Fri, 25 Dec 2015 17:19:54 -0800

kstart (4.1-3) unstable; urgency=medium

  * Regenerate the Autotools build system with dh_autoreconf during the
    build.  (Closes: #727915, #744443)
  * Add upstream patch to add AM_PROG_AR to configure.ac, needed by more
    recent Automake versions.
  * Enable parallel builds.
  * Remove now-ignored --disable-k4start flag from configure invocation.
  * Add the upstream release signing key and verify it in debian/watch.
  * Update standards version to 3.9.5.
    - Convert debian/copyright to copyright-format 1.0.
    - Specify the Debian packaging branch in the Vcs-Git control field.

 -- Russ Allbery <rra@debian.org>  Sun, 13 Apr 2014 11:34:08 -0700

kstart (4.1-2) unstable; urgency=low

  * Update to debhelper compatibility level V9.
    - Enable compiler hardening flags, including bindnow and PIE.
  * Move single-debian-patch to local-options and patch-header to
    local-patch-header so that they only apply to the packages I build and
    NMUs get regular version-numbered patches.

 -- Russ Allbery <rra@debian.org>  Sat, 04 Feb 2012 18:05:16 -0800

kstart (4.1-1) unstable; urgency=low

  * New upstream release.
    - Fix k5start -H and krenew -H with non-renewable tickets.
    - Fix k5start -H with a ticket cache for the wrong principal.
    - Shorten the wake-up interval when running as a daemon if refreshing
      the ticket cache fails.
    - Add krenew -s to send SIGHUP to child on krenew exit.
    - Clean up PID files on exit via SIGHUP or SIGTERM.

 -- Russ Allbery <rra@debian.org>  Sat, 07 Jan 2012 20:10:53 -0800

kstart (4.0-1) unstable; urgency=low

  * New upstream release.
    - Ticket caches passed to k5start or krenew via -k are now used as-is
      without prepending FILE and therefore can be of any ticket cache
      type (unless k5start is called with -o, -g, or -m).  This may change
      the ticket cache name exposed to programs run under them.
    - Always canonicalize the ticket cache name for passing to commands.
    - krenew now stays running if obtaining renewed credentials fails, and
      only exits if the ticket cache disappears or is not renewable.  (-i
      still keeps it running in those cases as well.)  -x restores the
      previous behavior.
    - k5start now keeps running despite failures.  -x restores the
      previous behavior.
    - When k5start is run with the -o, -g, or -m options, it generates a
      temporary ticket cache first, sets ownership and permissions, and
      then renames it to the real ticket cache.
    - k5start and krenew now propagate SIGINT (Ctrl-C) to the child
      process rather than just exiting.
    - Set signal handlers with sigaction instead of signal to fix a bug in
      SIGCHLD handling.
    - Reject -U combined with -u or -i, or -H combined with a command.
  * Remove reference to arla from README.Debian.  That package was removed
    from Debian some years ago.
  * Update source package format to 3.0 (quilt).
  * Update to debhelper compatibility level V8.
  * Update to standards version 3.9.2 (no changes required).

 -- Russ Allbery <rra@debian.org>  Thu, 29 Dec 2011 20:34:54 -0800

kstart (3.16-3) unstable; urgency=low

  * Skip the xmalloc test by default.  It's too fragile and isn't catching
    actual bugs.

 -- Russ Allbery <rra@debian.org>  Thu, 21 Jan 2010 15:27:57 -0800

kstart (3.16-2) unstable; urgency=low

  * Don't attempt to build with setpag support on non-Linux systems.
    kfreebsd-* isn't supported by OpenAFS (at least yet).

 -- Russ Allbery <rra@debian.org>  Tue, 19 Jan 2010 11:28:18 -0800

kstart (3.16-1) unstable; urgency=low

  * New upstream release.
    - Add -L option to log messages to syslog.
    - In k5start, fix use of -o, -g, and -m when -k was not given.
    - Allow the argument to k5start -k to start with FILE:.
  * Install the upstream krenew-agent example script in examples now that
    it's included in the distribution.
  * Update standards version to 3.8.3 (no changes required).

 -- Russ Allbery <rra@debian.org>  Tue, 19 Jan 2010 10:44:24 -0800

kstart (3.15-1) unstable; urgency=low

  * New upstream release.
    - k5start and krenew now catch SIGALRM and refresh the cache.
    - Add krenew -i to keep running despite errors.
    - Rerun aklog with k5start -H even if the ticket is valid.
    - Fix segfault when there is no default local realm.
    - Improve documentation of working directory with -b.
  * Use debhelper overrides to further minimize debian/rules.
  * Update standards version to 3.8.2 (no changes required).

 -- Russ Allbery <rra@debian.org>  Sat, 15 Aug 2009 14:52:36 -0700

kstart (3.14-2) unstable; urgency=low

  * Drop k4start since libkrb4 is being dropped from the Kerberos library
    packages.  (Closes: #517789)
  * Add mode to open call in daemon test suite.  Thanks, James Westby.
    (Closes: #507180)
  * Update debhelper compatibility level to V7.
    - Partially minimize debian/rules.
    - Add ${misc:Depends} to dependencies.

 -- Russ Allbery <rra@debian.org>  Sun, 01 Mar 2009 19:18:01 -0800

kstart (3.14-1) unstable; urgency=low

  * New upstream release.
    - Add -F and -P flags to k5start to force nonforwardable and
      nonproxiable tickets respectively.
  * Fixed the configure-stamp dependencies.
  * Add Vcs-Git and Vcs-Browser control fields.
  * Update standards version to 3.8.0 (no changes required).

 -- Russ Allbery <rra@debian.org>  Tue, 22 Jul 2008 20:12:38 -0700

kstart (3.13-1) unstable; urgency=low

  * New upstream release.
    - AKLOG environment variable now recognized to set the path to aklog
      in addition to the misnamed KINIT_PROG.
    - Allow -o/-g/-m with -K or a command.
  * Minor improvement to the package short description.

 -- Russ Allbery <rra@debian.org>  Wed, 28 May 2008 18:08:45 -0700

kstart (3.12-1) unstable; urgency=low

  * New upstream release.
    - krenew now copies the ticket cache when running a command.
    - Fix command-line parsing problems in k4start and k5start.

 -- Russ Allbery <rra@debian.org>  Wed, 23 Apr 2008 14:25:55 -0700

kstart (3.11-1) unstable; urgency=low

  * New upstream release.
    - New -c option to all programs for a child PID file.
    - New -H option to krenew similar to k5start's -H.
    - New -o, -g, and -m options to k4start and k5start to set the
      ownership and permissions of the created cache file.
    - New internal AFS setpag support.
    - Reauthenticate before writing out the PID file when backgrounding.
    - Close the keytab after determining the principal with k5start -U.
  * kstart can now use internal setpag support and hence doesn't need to
    depend on libopenafs-dev.
  * Build-depend on perl and libtest-pod-perl for the test suite.
  * Use touch $@ to create stamp files and use explicit stamp files for
    configure and install.
  * Install TODO as a documentation file.
  * Move Homepage to a real control header.
  * Update debian/copyright based on the upstream LICENSE file.
  * Update standards version to 3.7.3 (no changes required).
  * Update watch version to 3.

 -- Russ Allbery <rra@debian.org>  Thu, 10 Apr 2008 17:49:45 -0700

kstart (3.10-1) unstable; urgency=low

  * New upstream release.
    - Fix compilation issue with newer MIT Kerberos libraries.
  * Update debhelper compatibility level to V5.
  * Stop mentioning kerberos4kth-clients in README.Debian.

 -- Russ Allbery <rra@debian.org>  Tue, 10 Apr 2007 11:41:19 -0700

kstart (3.9-1) unstable; urgency=low

  * New upstream release.
    - When running a command with -H, run aklog appropriately.

 -- Russ Allbery <rra@debian.org>  Sat,  3 Mar 2007 22:36:12 -0800

kstart (3.8-1) unstable; urgency=low

  * New upstream release.
    - Correctly honor the argument to -H for k4start and k5start.
    - Allow -H to be used with commands.
    - Support new MIT Kerberos error message functions.
    - Improvements to -K documentation.

 -- Russ Allbery <rra@debian.org>  Sat,  3 Mar 2007 16:27:42 -0800

kstart (3.6-1) unstable; urgency=low

  * New upstream release.

 -- Russ Allbery <rra@debian.org>  Wed,  4 Oct 2006 18:12:37 -0700

kstart (3.5-1) unstable; urgency=low

  * New upstream release.
    - Propagate HUP, TERM, and QUIT signals to child processes.

 -- Russ Allbery <rra@debian.org>  Tue, 13 Jun 2006 13:58:50 -0700

kstart (3.4-1) unstable; urgency=low

  * New upstream release.
    - Fix bug in krenew that ran aklog even when -t wasn't given.
  * Update to standards version 3.7.2 (no changes required).

 -- Russ Allbery <rra@debian.org>  Fri,  5 May 2006 22:27:20 -0700

kstart (3.3-1) unstable; urgency=low

  * New upstream release.

 -- Russ Allbery <rra@debian.org>  Mon, 10 Apr 2006 16:30:44 -0700

kstart (3.2-1) unstable; urgency=low

  * New upstream release.
    - Revert the -g option, which turns out not to be useful.
    - Fix a serious bug in k5start's and krenew's aklog support.
  * Always pass the correct architecture into configure per the
    autotools-dev recommendations.

 -- Russ Allbery <rra@debian.org>  Sun,  5 Mar 2006 14:53:58 -0800

kstart (3.1-1) unstable; urgency=low

  * New upstream release.
    - Add -g option to generate group readable ticket.
  * Remove build-stamp first thing in debian/rules clean.

 -- Russ Allbery <rra@debian.org>  Thu, 23 Feb 2006 17:12:58 -0800

kstart (3.0-1) unstable; urgency=low

  * New upstream release.
    - Adds krenew, like k5start but renewing existing renewable ticket
      caches without the need for a keytab.
    - Allow KINIT_PROG to be set to a command with options.
  * Add build-arch and build-indep targets.
  * Use a cleaner way to optionally run make distclean.

 -- Russ Allbery <rra@debian.org>  Sun, 22 Jan 2006 01:13:19 -0800

kstart (2.9-1) unstable; urgency=low

  * New upstream release.
    - Build with --enable-reduced-depends to reduce library dependencies.
    - Improved error reporting.
  * Update copyright years.

 -- Russ Allbery <rra@debian.org>  Sun,  1 Jan 2006 18:25:50 -0800

kstart (2.8-3) unstable; urgency=low

  * Providing binary-indep in debian/rules is required by Policy even if
    there are no arch-independent packages.  Whoops.

 -- Russ Allbery <rra@debian.org>  Wed,  7 Dec 2005 15:20:44 -0800

kstart (2.8-2) unstable; urgency=low

  * Use a better method to optionally run make distclean.
  * Fixes to upstream Makefile mean that debian/dirs is no longer needed.
  * Update copyright to my current format and add an explicit packaging
    copyright and license statement.
  * Remove the export clause in the license in debian/copyright following
    the change made upstream.
  * Remove unused code in debian/rules.
  * Update maintainer address.

 -- Russ Allbery <rra@debian.org>  Sat, 19 Nov 2005 16:10:49 -0800

kstart (2.8-1) unstable; urgency=low

  * New upstream release.
    - Add the -b option to run as a daemon in the background.
    - Add the -p option to write out the PID of the process.  -p is no
      longer an undocumented synonym for -s.
  * Update standards version to 3.6.2 (no changes required).
  * Delete debian/docs; its one line is handled in debian/rules instead.

 -- Russ Allbery <rra@stanford.edu>  Tue,  9 Aug 2005 22:09:36 -0700

kstart (2.7-1) unstable; urgency=low

  * New upstream release.
    - Add the -U option to get the client principal from a keytab.
    - Fix bugs in -H and -I handling.
  * Indent Homepage in the description for better wrapping.
  * README.Debian should refer to k4start, not kstart.
  * Update copyright to match upstream wording and include 2005.

 -- Russ Allbery <rra@stanford.edu>  Sat,  4 Jun 2005 13:39:42 -0700

kstart (2.5-1) unstable; urgency=low

  * New upstream release.
    - Create a new, temporary ticket cache when running a command without
      the -k option, to avoid interference with other ticket caches owned
      by the same user.
    - Fix k5start bug in setting KRB5CCNAME.
  * Only build with setpag support on architectures OpenAFS supports.

 -- Russ Allbery <rra@stanford.edu>  Sun,  1 May 2005 13:59:17 -0700

kstart (2.4-1) unstable; urgency=low

  * New upstream release.
    - Renamed kstart to k4start.  (Closes: #305512)
    - Added support for maintaining credentials for a command.
    - Added preliminary support for running a command in a PAG.
    - Removed unnecessary export clause in license.  (Closes: #305516)

 -- Russ Allbery <rra@stanford.edu>  Sun, 24 Apr 2005 23:44:48 -0700

kstart (2.3-2) unstable; urgency=low

  * Uploaded to Debian.  (Closes: #304745)
  * Reword the short description to mention Kerberos and add a homepage
    link to the long description.

 -- Russ Allbery <rra@stanford.edu>  Fri, 15 Apr 2005 00:17:15 -0700

kstart (2.3-1) unstable; urgency=low

  * New upstream release.
    - Upstream tarball no longer includes debian/ directory.
  * Remove references to fixed bug #262192 in README.Debian.

 -- Russ Allbery <rra@stanford.edu>  Tue, 22 Feb 2005 20:11:36 -0800

kstart (2.2-1) unstable; urgency=low

  * Initial release.

 -- Russ Allbery <rra@stanford.edu>  Thu, 29 Jul 2004 23:54:00 -0700
