From 677ad9ae2b143a61a76d463375c6f3026a941ad1 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 00:01:45 -0400
Subject: [PATCH 01/12] Install krb5-auth gem

---
 Gemfile      | 2 +-
 Gemfile.lock | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Gemfile b/Gemfile
index d1962a8..720506d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,7 @@ gem 'sqlite3'
 gem 'thin'
 
 gem 'devise'
-
+gem 'krb5-auth'
 gem 'cancan'
 
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 3e48fa1..9111999 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -79,6 +79,7 @@ GEM
       railties (>= 3.0, < 5.0)
       thor (>= 0.14, < 2.0)
     json (1.7.7)
+    krb5-auth (0.7)
     less (2.3.1)
       commonjs (~> 0.2.6)
     less-rails (2.3.2)
@@ -182,6 +183,7 @@ DEPENDENCIES
   coffee-rails (~> 3.2.1)
   devise
   jquery-rails
+  krb5-auth
   less-rails
   meta_request
   rack-mini-profiler

From 336965d8459eac807cabcf7a0f536b6dde57667a Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 01:35:18 -0400
Subject: [PATCH 02/12] Add custom Devise authentication strategy for Kerberos

---
 config/application.rb         |  1 +
 config/initializers/devise.rb |  4 ++++
 lib/custom_auth.rb            | 36 +++++++++++++++++++++++++++++++++++
 3 files changed, 41 insertions(+)
 create mode 100644 lib/custom_auth.rb

diff --git a/config/application.rb b/config/application.rb
index f33fb55..b34cdb2 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -17,6 +17,7 @@ module MsuCourseAlerter
 
     # Custom directories with classes and modules you want to be autoloadable.
     # config.autoload_paths += %W(#{config.root}/extras)
+    config.autoload_paths += %W(#{config.root}/lib)
 
     # Only load the plugins named here, in the order given (default is alphabetical).
     # :all can be used as a placeholder for all plugins not explicitly named.
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
index d2b2cfe..c455f22 100644
--- a/config/initializers/devise.rb
+++ b/config/initializers/devise.rb
@@ -223,6 +223,10 @@ Devise.setup do |config|
   #   manager.intercept_401 = false
   #   manager.default_strategies(:scope => :user).unshift :some_external_strategy
   # end
+  config.warden do |manager|
+    manager.strategies.add(:kerb, CustomAuth::Devise::Strategies::Kerb)
+    manager.default_strategies :kerb
+  end
 
   # ==> Mountable engine configurations
   # When using Devise inside an engine, let's call it `MyEngine`, and this engine
diff --git a/lib/custom_auth.rb b/lib/custom_auth.rb
new file mode 100644
index 0000000..dc63362
--- /dev/null
+++ b/lib/custom_auth.rb
@@ -0,0 +1,36 @@
+module CustomAuth
+  module Devise
+    module Strategies
+      class Kerb < ::Devise::Strategies::Base
+        def valid?
+          params[:user] && (params[:user][:username] || params[:user][:password])
+        end
+
+        def authenticate!
+          if check_kerb_auth(params[:username], params[:password])
+            u = User.find(:first, 
+              :conditions => { :username => params[:username] }) || 
+              User.create({ :username => login }
+            )
+          else
+            fail!("Could not log in")
+          end
+        end
+
+        def check_kerb_auth(username, password)
+          require 'krb5_auth'
+          include Krb5Auth
+
+          return false if username.blank? or password.blank?
+
+          begin
+            kerberos = Krb5.new
+            return kerberos.get_init_creds_password(username, password)
+          rescue Krb5Auth::Krb5::Exception
+            return false
+          end
+        end
+      end
+    end
+  end
+end

From 35f2a92576722bccaeab8c6a1e3be7ea5eb1e59e Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 01:44:25 -0400
Subject: [PATCH 03/12] Update Devise to allow the login field to be username
 instead of email

---
 app/models/user.rb                                 | 2 +-
 app/views/devise/sessions/new.html.erb             | 4 ++--
 config/initializers/devise.rb                      | 2 +-
 db/migrate/20130413054153_add_username_to_users.rb | 5 +++++
 db/schema.rb                                       | 3 ++-
 5 files changed, 11 insertions(+), 5 deletions(-)
 create mode 100644 db/migrate/20130413054153_add_username_to_users.rb

diff --git a/app/models/user.rb b/app/models/user.rb
index 02543cc..c7bb5cc 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -6,6 +6,6 @@ class User < ActiveRecord::Base
          :recoverable, :rememberable, :trackable, :validatable
 
   # Setup accessible (or protected) attributes for your model
-  attr_accessible :email, :password, :password_confirmation, :remember_me
+  attr_accessible :email, :password, :password_confirmation, :remember_me, :username
   # attr_accessible :title, :body
 end
diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
index f9bc2c1..3d526fb 100644
--- a/app/views/devise/sessions/new.html.erb
+++ b/app/views/devise/sessions/new.html.erb
@@ -1,8 +1,8 @@
 <h2>Sign in</h2>
 
 <%= form_for(resource, :as => resource_name, :url => session_path(resource_name)) do |f| %>
-  <div><%= f.label :email %><br />
-  <%= f.email_field :email, :autofocus => true %></div>
+  <div><%= f.label :username %><br />
+  <%= f.text_field :username, :autofocus => true %></div>
 
   <div><%= f.label :password %><br />
   <%= f.password_field :password %></div>
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
index c455f22..d4445de 100644
--- a/config/initializers/devise.rb
+++ b/config/initializers/devise.rb
@@ -23,7 +23,7 @@ Devise.setup do |config|
   # session. If you need permissions, you should implement that in a before filter.
   # You can also supply a hash where the value is a boolean determining whether
   # or not authentication should be aborted when the value is not present.
-  # config.authentication_keys = [ :email ]
+  config.authentication_keys = [ :username ]
 
   # Configure parameters from the request object used for authentication. Each entry
   # given should be a request method and it will automatically be passed to the
diff --git a/db/migrate/20130413054153_add_username_to_users.rb b/db/migrate/20130413054153_add_username_to_users.rb
new file mode 100644
index 0000000..3b71a27
--- /dev/null
+++ b/db/migrate/20130413054153_add_username_to_users.rb
@@ -0,0 +1,5 @@
+class AddUsernameToUsers < ActiveRecord::Migration
+  def change
+    add_column :users, :username, :string
+  end
+end
diff --git a/db/schema.rb b/db/schema.rb
index 5c80be9..41b8f56 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -11,7 +11,7 @@
 #
 # It's strongly recommended to check this file into your version control system.
 
-ActiveRecord::Schema.define(:version => 20130412012722) do
+ActiveRecord::Schema.define(:version => 20130413054153) do
 
   create_table "alerts", :force => true do |t|
     t.integer  "user_id"
@@ -55,6 +55,7 @@ ActiveRecord::Schema.define(:version => 20130412012722) do
     t.string   "last_sign_in_ip"
     t.datetime "created_at",                             :null => false
     t.datetime "updated_at",                             :null => false
+    t.string   "username"
   end
 
   add_index "users", ["email"], :name => "index_users_on_email", :unique => true

From e6bef83ddf945e73f37cdf9826f4afd00e7634bc Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 01:50:22 -0400
Subject: [PATCH 04/12] Update views to not include signup option

---
 app/views/devise/sessions/new.html.erb | 4 ++--
 app/views/layouts/application.html.erb | 3 ---
 2 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
index 3d526fb..f9bc2c1 100644
--- a/app/views/devise/sessions/new.html.erb
+++ b/app/views/devise/sessions/new.html.erb
@@ -1,8 +1,8 @@
 <h2>Sign in</h2>
 
 <%= form_for(resource, :as => resource_name, :url => session_path(resource_name)) do |f| %>
-  <div><%= f.label :username %><br />
-  <%= f.text_field :username, :autofocus => true %></div>
+  <div><%= f.label :email %><br />
+  <%= f.email_field :email, :autofocus => true %></div>
 
   <div><%= f.label :password %><br />
   <%= f.password_field :password %></div>
diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
index 3c56e94..9711eda 100644
--- a/app/views/layouts/application.html.erb
+++ b/app/views/layouts/application.html.erb
@@ -54,9 +54,6 @@
               <% else %>
               <li><%= link_to "Sign in", new_user_session_path,
                         :method => :get %></li>
-              <li><%= link_to "Register", new_user_registration_path,
-                        :method => :get %></li>
-
               <% end %>
             </ul>
           </div><!--/.nav-collapse -->

From a2915388d99270dc52820b90816149dc3cd9e3e4 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 01:51:41 -0400
Subject: [PATCH 05/12] And fix rebuilt view to use username...again

---
 app/views/devise/sessions/new.html.erb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
index f9bc2c1..3d526fb 100644
--- a/app/views/devise/sessions/new.html.erb
+++ b/app/views/devise/sessions/new.html.erb
@@ -1,8 +1,8 @@
 <h2>Sign in</h2>
 
 <%= form_for(resource, :as => resource_name, :url => session_path(resource_name)) do |f| %>
-  <div><%= f.label :email %><br />
-  <%= f.email_field :email, :autofocus => true %></div>
+  <div><%= f.label :username %><br />
+  <%= f.text_field :username, :autofocus => true %></div>
 
   <div><%= f.label :password %><br />
   <%= f.password_field :password %></div>

From 9247af6deae4d170845d84ee4f5aa2c48bb22b69 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 01:52:12 -0400
Subject: [PATCH 06/12] Remove password related options from Devise model

---
 app/models/user.rb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/models/user.rb b/app/models/user.rb
index c7bb5cc..aae6a0b 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -2,10 +2,10 @@ class User < ActiveRecord::Base
   # Include default devise modules. Others available are:
   # :token_authenticatable, :confirmable,
   # :lockable, :timeoutable and :omniauthable
-  devise :database_authenticatable, :registerable,
-         :recoverable, :rememberable, :trackable, :validatable
+  devise :database_authenticatable, :rememberable, :trackable, :validatable
 
   # Setup accessible (or protected) attributes for your model
-  attr_accessible :email, :password, :password_confirmation, :remember_me, :username
+  attr_accessible :email, :password, :password_confirmation, :remember_me
+  attr_accessible :username
   # attr_accessible :title, :body
 end

From ef55355bbb0a65996f140e76f8f75f795d4d681f Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 02:30:42 -0400
Subject: [PATCH 07/12] Remove custom strategy

---
 Gemfile                       | 2 +-
 config/application.rb         | 1 -
 config/initializers/devise.rb | 4 ----
 3 files changed, 1 insertion(+), 6 deletions(-)

diff --git a/Gemfile b/Gemfile
index 720506d..d1962a8 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,7 @@ gem 'sqlite3'
 gem 'thin'
 
 gem 'devise'
-gem 'krb5-auth'
+
 gem 'cancan'
 
 
diff --git a/config/application.rb b/config/application.rb
index b34cdb2..f33fb55 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -17,7 +17,6 @@ module MsuCourseAlerter
 
     # Custom directories with classes and modules you want to be autoloadable.
     # config.autoload_paths += %W(#{config.root}/extras)
-    config.autoload_paths += %W(#{config.root}/lib)
 
     # Only load the plugins named here, in the order given (default is alphabetical).
     # :all can be used as a placeholder for all plugins not explicitly named.
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
index d4445de..fa4f494 100644
--- a/config/initializers/devise.rb
+++ b/config/initializers/devise.rb
@@ -223,10 +223,6 @@ Devise.setup do |config|
   #   manager.intercept_401 = false
   #   manager.default_strategies(:scope => :user).unshift :some_external_strategy
   # end
-  config.warden do |manager|
-    manager.strategies.add(:kerb, CustomAuth::Devise::Strategies::Kerb)
-    manager.default_strategies :kerb
-  end
 
   # ==> Mountable engine configurations
   # When using Devise inside an engine, let's call it `MyEngine`, and this engine

From 8b8360ea8ee828b9ce9ed1b5211acf95a0c83314 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 04:30:07 -0400
Subject: [PATCH 08/12] Note package req in README

---
 README.md   |   1 +
 README.rdoc | 261 ----------------------------------------------------
 2 files changed, 1 insertion(+), 261 deletions(-)
 create mode 100644 README.md
 delete mode 100644 README.rdoc

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..4b96334
--- /dev/null
+++ b/README.md
@@ -0,0 +1 @@
+sudo apt-get install libpam0g-dev
\ No newline at end of file
diff --git a/README.rdoc b/README.rdoc
deleted file mode 100644
index 7c36f23..0000000
--- a/README.rdoc
+++ /dev/null
@@ -1,261 +0,0 @@
-== Welcome to Rails
-
-Rails is a web-application framework that includes everything needed to create
-database-backed web applications according to the Model-View-Control pattern.
-
-This pattern splits the view (also called the presentation) into "dumb"
-templates that are primarily responsible for inserting pre-built data in between
-HTML tags. The model contains the "smart" domain objects (such as Account,
-Product, Person, Post) that holds all the business logic and knows how to
-persist themselves to a database. The controller handles the incoming requests
-(such as Save New Account, Update Product, Show Post) by manipulating the model
-and directing data to the view.
-
-In Rails, the model is handled by what's called an object-relational mapping
-layer entitled Active Record. This layer allows you to present the data from
-database rows as objects and embellish these data objects with business logic
-methods. You can read more about Active Record in
-link:files/vendor/rails/activerecord/README.html.
-
-The controller and view are handled by the Action Pack, which handles both
-layers by its two parts: Action View and Action Controller. These two layers
-are bundled in a single package due to their heavy interdependence. This is
-unlike the relationship between the Active Record and Action Pack that is much
-more separate. Each of these packages can be used independently outside of
-Rails. You can read more about Action Pack in
-link:files/vendor/rails/actionpack/README.html.
-
-
-== Getting Started
-
-1. At the command prompt, create a new Rails application:
-       <tt>rails new myapp</tt> (where <tt>myapp</tt> is the application name)
-
-2. Change directory to <tt>myapp</tt> and start the web server:
-       <tt>cd myapp; rails server</tt> (run with --help for options)
-
-3. Go to http://localhost:3000/ and you'll see:
-       "Welcome aboard: You're riding Ruby on Rails!"
-
-4. Follow the guidelines to start developing your application. You can find
-the following resources handy:
-
-* The Getting Started Guide: http://guides.rubyonrails.org/getting_started.html
-* Ruby on Rails Tutorial Book: http://www.railstutorial.org/
-
-
-== Debugging Rails
-
-Sometimes your application goes wrong. Fortunately there are a lot of tools that
-will help you debug it and get it back on the rails.
-
-First area to check is the application log files. Have "tail -f" commands
-running on the server.log and development.log. Rails will automatically display
-debugging and runtime information to these files. Debugging info will also be
-shown in the browser on requests from 127.0.0.1.
-
-You can also log your own messages directly into the log file from your code
-using the Ruby logger class from inside your controllers. Example:
-
-  class WeblogController < ActionController::Base
-    def destroy
-      @weblog = Weblog.find(params[:id])
-      @weblog.destroy
-      logger.info("#{Time.now} Destroyed Weblog ID ##{@weblog.id}!")
-    end
-  end
-
-The result will be a message in your log file along the lines of:
-
-  Mon Oct 08 14:22:29 +1000 2007 Destroyed Weblog ID #1!
-
-More information on how to use the logger is at http://www.ruby-doc.org/core/
-
-Also, Ruby documentation can be found at http://www.ruby-lang.org/. There are
-several books available online as well:
-
-* Programming Ruby: http://www.ruby-doc.org/docs/ProgrammingRuby/ (Pickaxe)
-* Learn to Program: http://pine.fm/LearnToProgram/ (a beginners guide)
-
-These two books will bring you up to speed on the Ruby language and also on
-programming in general.
-
-
-== Debugger
-
-Debugger support is available through the debugger command when you start your
-Mongrel or WEBrick server with --debugger. This means that you can break out of
-execution at any point in the code, investigate and change the model, and then,
-resume execution! You need to install ruby-debug to run the server in debugging
-mode. With gems, use <tt>sudo gem install ruby-debug</tt>. Example:
-
-  class WeblogController < ActionController::Base
-    def index
-      @posts = Post.all
-      debugger
-    end
-  end
-
-So the controller will accept the action, run the first line, then present you
-with a IRB prompt in the server window. Here you can do things like:
-
-  >> @posts.inspect
-  => "[#<Post:0x14a6be8
-          @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>,
-       #<Post:0x14a6620
-          @attributes={"title"=>"Rails", "body"=>"Only ten..", "id"=>"2"}>]"
-  >> @posts.first.title = "hello from a debugger"
-  => "hello from a debugger"
-
-...and even better, you can examine how your runtime objects actually work:
-
-  >> f = @posts.first
-  => #<Post:0x13630c4 @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>
-  >> f.
-  Display all 152 possibilities? (y or n)
-
-Finally, when you're ready to resume execution, you can enter "cont".
-
-
-== Console
-
-The console is a Ruby shell, which allows you to interact with your
-application's domain model. Here you'll have all parts of the application
-configured, just like it is when the application is running. You can inspect
-domain models, change values, and save to the database. Starting the script
-without arguments will launch it in the development environment.
-
-To start the console, run <tt>rails console</tt> from the application
-directory.
-
-Options:
-
-* Passing the <tt>-s, --sandbox</tt> argument will rollback any modifications
-  made to the database.
-* Passing an environment name as an argument will load the corresponding
-  environment. Example: <tt>rails console production</tt>.
-
-To reload your controllers and models after launching the console run
-<tt>reload!</tt>
-
-More information about irb can be found at:
-link:http://www.rubycentral.org/pickaxe/irb.html
-
-
-== dbconsole
-
-You can go to the command line of your database directly through <tt>rails
-dbconsole</tt>. You would be connected to the database with the credentials
-defined in database.yml. Starting the script without arguments will connect you
-to the development database. Passing an argument will connect you to a different
-database, like <tt>rails dbconsole production</tt>. Currently works for MySQL,
-PostgreSQL and SQLite 3.
-
-== Description of Contents
-
-The default directory structure of a generated Ruby on Rails application:
-
-  |-- app
-  |   |-- assets
-  |       |-- images
-  |       |-- javascripts
-  |       `-- stylesheets
-  |   |-- controllers
-  |   |-- helpers
-  |   |-- mailers
-  |   |-- models
-  |   `-- views
-  |       `-- layouts
-  |-- config
-  |   |-- environments
-  |   |-- initializers
-  |   `-- locales
-  |-- db
-  |-- doc
-  |-- lib
-  |   `-- tasks
-  |-- log
-  |-- public
-  |-- script
-  |-- test
-  |   |-- fixtures
-  |   |-- functional
-  |   |-- integration
-  |   |-- performance
-  |   `-- unit
-  |-- tmp
-  |   |-- cache
-  |   |-- pids
-  |   |-- sessions
-  |   `-- sockets
-  `-- vendor
-      |-- assets
-          `-- stylesheets
-      `-- plugins
-
-app
-  Holds all the code that's specific to this particular application.
-
-app/assets
-  Contains subdirectories for images, stylesheets, and JavaScript files.
-
-app/controllers
-  Holds controllers that should be named like weblogs_controller.rb for
-  automated URL mapping. All controllers should descend from
-  ApplicationController which itself descends from ActionController::Base.
-
-app/models
-  Holds models that should be named like post.rb. Models descend from
-  ActiveRecord::Base by default.
-
-app/views
-  Holds the template files for the view that should be named like
-  weblogs/index.html.erb for the WeblogsController#index action. All views use
-  eRuby syntax by default.
-
-app/views/layouts
-  Holds the template files for layouts to be used with views. This models the
-  common header/footer method of wrapping views. In your views, define a layout
-  using the <tt>layout :default</tt> and create a file named default.html.erb.
-  Inside default.html.erb, call <% yield %> to render the view using this
-  layout.
-
-app/helpers
-  Holds view helpers that should be named like weblogs_helper.rb. These are
-  generated for you automatically when using generators for controllers.
-  Helpers can be used to wrap functionality for your views into methods.
-
-config
-  Configuration files for the Rails environment, the routing map, the database,
-  and other dependencies.
-
-db
-  Contains the database schema in schema.rb. db/migrate contains all the
-  sequence of Migrations for your schema.
-
-doc
-  This directory is where your application documentation will be stored when
-  generated using <tt>rake doc:app</tt>
-
-lib
-  Application specific libraries. Basically, any kind of custom code that
-  doesn't belong under controllers, models, or helpers. This directory is in
-  the load path.
-
-public
-  The directory available for the web server. Also contains the dispatchers and the
-  default HTML files. This should be set as the DOCUMENT_ROOT of your web
-  server.
-
-script
-  Helper scripts for automation and generation.
-
-test
-  Unit and functional tests along with fixtures. When using the rails generate
-  command, template test files will be generated for you and placed in this
-  directory.
-
-vendor
-  External libraries that the application depends on. Also includes the plugins
-  subdirectory. If the app has frozen rails, those gems also go here, under
-  vendor/rails/. This directory is in the load path.

From 53c7a606ce75628f186a4fb1e9db0df204ba76bc Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 04:30:27 -0400
Subject: [PATCH 09/12] Add devise pam authenticateable gem

---
 Gemfile      | 2 +-
 Gemfile.lock | 7 +++++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/Gemfile b/Gemfile
index d1962a8..2b795cc 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,7 @@ gem 'sqlite3'
 gem 'thin'
 
 gem 'devise'
-
+gem 'devise_pam_authenticatable'
 gem 'cancan'
 
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 9111999..84bf8f3 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -64,6 +64,9 @@ GEM
       orm_adapter (~> 0.1)
       railties (~> 3.1)
       warden (~> 1.2.1)
+    devise_pam_authenticatable (1.0.3)
+      devise (> 1.1.0)
+      rpam
     erubis (2.7.0)
     eventmachine (1.0.3)
     execjs (1.4.0)
@@ -79,7 +82,6 @@ GEM
       railties (>= 3.0, < 5.0)
       thor (>= 0.14, < 2.0)
     json (1.7.7)
-    krb5-auth (0.7)
     less (2.3.1)
       commonjs (~> 0.2.6)
     less-rails (2.3.2)
@@ -128,6 +130,7 @@ GEM
     rake (10.0.4)
     rdoc (3.12.2)
       json (~> 1.4)
+    rpam (1.0.1)
     ruby2ruby (2.0.3)
       ruby_parser (~> 3.1)
       sexp_processor (~> 4.0)
@@ -182,8 +185,8 @@ DEPENDENCIES
   cancan
   coffee-rails (~> 3.2.1)
   devise
+  devise_pam_authenticatable
   jquery-rails
-  krb5-auth
   less-rails
   meta_request
   rack-mini-profiler

From 3baf866760e1efe692533d24ab9eaa81698ec455 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 04:33:05 -0400
Subject: [PATCH 10/12] Note server config info

---
 README.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4b96334..088792a 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,6 @@
-sudo apt-get install libpam0g-dev
\ No newline at end of file
+sudo apt-get install libpam0g-dev
+
+/etc/pam.d/rpam:
+
+auth sufficient pam_krb5.so
+account sufficient pam_permit.so
\ No newline at end of file

From 4d3527466b8688e895ba7641ae471e015d294ef8 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 04:51:29 -0400
Subject: [PATCH 11/12] Update model to authenticate against pam

---
 app/models/user.rb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/models/user.rb b/app/models/user.rb
index aae6a0b..02717d9 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -2,7 +2,8 @@ class User < ActiveRecord::Base
   # Include default devise modules. Others available are:
   # :token_authenticatable, :confirmable,
   # :lockable, :timeoutable and :omniauthable
-  devise :database_authenticatable, :rememberable, :trackable, :validatable
+  devise :database_authenticatable, :rememberable, :trackable, :validatable,
+    :pam_authenticatable
 
   # Setup accessible (or protected) attributes for your model
   attr_accessible :email, :password, :password_confirmation, :remember_me

From 7d19c9d44d48c8d688cb2322ecaaae9264152030 Mon Sep 17 00:00:00 2001
From: Andrew Tomaka <atomaka@gmail.com>
Date: Sat, 13 Apr 2013 05:11:36 -0400
Subject: [PATCH 12/12] Update with ruby19 version of
 devise_pam_authenticatable

---
 Gemfile      |  4 +++-
 Gemfile.lock | 15 ++++++++++-----
 2 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/Gemfile b/Gemfile
index 2b795cc..c415bcf 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,9 @@ gem 'sqlite3'
 gem 'thin'
 
 gem 'devise'
-gem 'devise_pam_authenticatable'
+gem 'devise_pam_authenticatable',
+  :git      => 'git://github.com/atomaka/devise_pam_authenticatable.git',
+  :branch   => 'ruby19-update'
 gem 'cancan'
 
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 84bf8f3..bf864f8 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,3 +1,11 @@
+GIT
+  remote: git://github.com/atomaka/devise_pam_authenticatable.git
+  revision: 0f735fbb3926a46b649c5ef1fa35a7dcd0d6d1f8
+  branch: ruby19-update
+  specs:
+    devise_pam_authenticatable (1.0.3)
+      rpam-ruby19
+
 GEM
   remote: https://rubygems.org/
   specs:
@@ -64,9 +72,6 @@ GEM
       orm_adapter (~> 0.1)
       railties (~> 3.1)
       warden (~> 1.2.1)
-    devise_pam_authenticatable (1.0.3)
-      devise (> 1.1.0)
-      rpam
     erubis (2.7.0)
     eventmachine (1.0.3)
     execjs (1.4.0)
@@ -130,7 +135,7 @@ GEM
     rake (10.0.4)
     rdoc (3.12.2)
       json (~> 1.4)
-    rpam (1.0.1)
+    rpam-ruby19 (1.2.1)
     ruby2ruby (2.0.3)
       ruby_parser (~> 3.1)
       sexp_processor (~> 4.0)
@@ -185,7 +190,7 @@ DEPENDENCIES
   cancan
   coffee-rails (~> 3.2.1)
   devise
-  devise_pam_authenticatable
+  devise_pam_authenticatable!
   jquery-rails
   less-rails
   meta_request