kstart (4.3-1) unstable; urgency=medium

  * New upstream release.
    - Add support for kafs.  If AFS is not available but the -t option is
      provided, create a new session keyring, link it to the user keyring,
      and then run the configured program (via the AKLOG environment
      variable).  This can be set to aklog-kafs (from kafs-client) and
      k5start and krenew should then work correctly with kafs.
    - If a program run by k5start or krenew is killed by a signal, exit
      with status signal number plus 128, not 0.
    - Use explicit_bzero to clear the password for k5start -s.
  * Update standards version to 4.6.0 (no changes required).

 -- Russ Allbery <rra@debian.org>  Mon, 30 Aug 2021 21:10:40 -0700

kstart (4.2-3) unstable; urgency=medium

  * Add debian/upstream/metadata file.
  * Change the Debian packaging branch to debian/unstable.
  * Change the canonical packaging repository to Salsa.
  * Update to debhelper compatibility level v13.
    - Depend on debhelper-compat instead of using debian/compat.
  * Update standards version to 4.5.1 (no changes required).
  * Remove package copyright and license stanzas from debian/copyright,
    since they just repeat the Files: * stanza.
  * Refresh upstream signing key.

 -- Russ Allbery <rra@debian.org>  Sun, 27 Dec 2020 22:40:44 -0800

kstart (4.2-2) unstable; urgency=medium

  * Update to debhelper compatibility level V11.
    - Remove --parallel flags, no longer needed.
    - Remove dh-autoreconf dependency and sequence, no longer needed.
  * Update standards version to 4.2.1.
    - Enable verbose test output.
    - Install the upstream release notes as NEWS.gz, not changelog.gz.
    - Add Rules-Requires-Root: no.
    - Use https for URLs in debian/control and debian/copyright.
  * Bump watch file version to 4 and use https for URL.
  * Switch to the DEP-14 branch layout and update debian/gbp.conf and
    Vcs-Git accordingly.
  * Refresh upstream signing key.
  * Run wrap-and-sort -ast.

 -- Russ Allbery <rra@debian.org>  Sun, 26 Aug 2018 13:34:55 -0700

kstart (4.2-1) unstable; urgency=medium

  * New upstream release.
    - k5start with -K or a command no longer exits if the initial
      authentication fails (unless -x was given).  (Closes: #705063)
    - k5start and krenew retry the initial authentication with exponential
      backoff, before running any command.  (Closes: #725175)
    - k5start cleans up temporary ticket caches in failures.
    - The -H flag can now be used in combination with -K.
    - Add new -a flag to both k5start and krenew to attempt authentication
      or ticket renewal each time the daemon wakes up.
    - Fix k5start and krenew to not reject the -b flag with -K or a
      command.
  * Drop all patches, merged upstream.
  * Add debian/gbp.conf reflecting the branch layout of the default
    packaging repository.
  * Refresh upstream signing key.
  * Enable all compiler hardening options.
  * Update standards version to 3.9.6 (no changes required).

 -- Russ Allbery <rra@debian.org>  Fri, 25 Dec 2015 17:19:54 -0800

kstart (4.1-3) unstable; urgency=medium

  * Regenerate the Autotools build system with dh_autoreconf during the
    build.  (Closes: #727915, #744443)
  * Add upstream patch to add AM_PROG_AR to configure.ac, needed by more
    recent Automake versions.
  * Enable parallel builds.
  * Remove now-ignored --disable-k4start flag from configure invocation.
  * Add the upstream release signing key and verify it in debian/watch.
  * Update standards version to 3.9.5.
    - Convert debian/copyright to copyright-format 1.0.
    - Specify the Debian packaging branch in the Vcs-Git control field.

 -- Russ Allbery <rra@debian.org>  Sun, 13 Apr 2014 11:34:08 -0700

kstart (4.1-2) unstable; urgency=low

  * Update to debhelper compatibility level V9.
    - Enable compiler hardening flags, including bindnow and PIE.
  * Move single-debian-patch to local-options and patch-header to
    local-patch-header so that they only apply to the packages I build and
    NMUs get regular version-numbered patches.

 -- Russ Allbery <rra@debian.org>  Sat, 04 Feb 2012 18:05:16 -0800

kstart (4.1-1) unstable; urgency=low

  * New upstream release.
    - Fix k5start -H and krenew -H with non-renewable tickets.
    - Fix k5start -H with a ticket cache for the wrong principal.
    - Shorten the wake-up interval when running as a daemon if refreshing
      the ticket cache fails.
    - Add krenew -s to send SIGHUP to child on krenew exit.
    - Clean up PID files on exit via SIGHUP or SIGTERM.

 -- Russ Allbery <rra@debian.org>  Sat, 07 Jan 2012 20:10:53 -0800

kstart (4.0-1) unstable; urgency=low

  * New upstream release.
    - Ticket caches passed to k5start or krenew via -k are now used as-is
      without prepending FILE and therefore can be of any ticket cache
      type (unless k5start is called with -o, -g, or -m).  This may change
      the ticket cache name exposed to programs run under them.
    - Always canonicalize the ticket cache name for passing to commands.
    - krenew now stays running if obtaining renewed credentials fails, and
      only exits if the ticket cache disappears or is not renewable.  (-i
      still keeps it running in those cases as well.)  -x restores the
      previous behavior.
    - k5start now keeps running despite failures.  -x restores the
      previous behavior.
    - When k5start is run with the -o, -g, or -m options, it generates a
      temporary ticket cache first, sets ownership and permissions, and
      then renames it to the real ticket cache.
    - k5start and krenew now propagate SIGINT (Ctrl-C) to the child
      process rather than just exiting.
    - Set signal handlers with sigaction instead of signal to fix a bug in
      SIGCHLD handling.
    - Reject -U combined with -u or -i, or -H combined with a command.
  * Remove reference to arla from README.Debian.  That package was removed
    from Debian some years ago.
  * Update source package format to 3.0 (quilt).
  * Update to debhelper compatibility level V8.
  * Update to standards version 3.9.2 (no changes required).

 -- Russ Allbery <rra@debian.org>  Thu, 29 Dec 2011 20:34:54 -0800

kstart (3.16-3) unstable; urgency=low

  * Skip the xmalloc test by default.  It's too fragile and isn't catching
    actual bugs.

 -- Russ Allbery <rra@debian.org>  Thu, 21 Jan 2010 15:27:57 -0800

kstart (3.16-2) unstable; urgency=low

  * Don't attempt to build with setpag support on non-Linux systems.
    kfreebsd-* isn't supported by OpenAFS (at least yet).

 -- Russ Allbery <rra@debian.org>  Tue, 19 Jan 2010 11:28:18 -0800

# For older changelog entries, run 'apt-get changelog kstart'
