forked from arthurdejong/nss-pam-ldapd
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ChangeLog-2010
934 lines (740 loc) · 35.9 KB
/
ChangeLog-2010
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
2010-12-30 arthur
* [r1358] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.8.0 release
* [r1357] README, debian/copyright: update copyright information
* [r1356] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/es.po, debian/po/fi.po,
debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
debian/po/zh_CN.po: run debconf-updatepo (new and updated
templates)
* [r1355] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/es.po, debian/po/fi.po,
debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: put headers
of .po files in a consistent format
* [r1354] ., AUTHORS, HACKING, README, configure.ac,
debian/copyright, nss/Makefile.am, nss/common.h, nss/ethers.c,
nss/exports.solaris, nss/group.c, nss/hosts.c, nss/netgroup.c,
nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,
nss/rpc.c, nss/services.c, nss/shadow.c, nss/solnss.c: integrate
Solaris support developed by Ted C. Cheng of Symas Corporation
that was developed on the -solaris branch
2010-12-29 arthur
* [r1348] Makefile.am, pam/Makefile.am: fix distcheck by passing
--with-pam-seclib-dir to configure and remove unneeded slashes
* [r1347] Makefile.am, configure.ac, py-compile, pynslcd,
pynslcd/Makefile.am, pynslcd/alias.py, pynslcd/cfg.py,
pynslcd/common.py, pynslcd/config.py.in, pynslcd/debugio.py,
pynslcd/ether.py, pynslcd/group.py, pynslcd/mypidfile.py,
pynslcd/pam.py, pynslcd/passwd.py, pynslcd/pynslcd.py,
pynslcd/shadow.py, pynslcd/tio.py: add an experimental (currently
partial) Python implementation of nslcd to see if we can get the
same features with easier to maintain code
2010-12-28 arthur
* [r1346] man/nslcd.conf.5.xml, nslcd/attmap.c, nslcd/common.c,
nslcd/common.h, nslcd/group.c, nslcd/passwd.c, nslcd/shadow.c:
allow attribute mapping with an expression for the userPassword
attribute for passwd, group and shadow entries and by default map
it to the unmatchable password ("*") to avoid accidentally
leaking password information
2010-12-26 arthur
* [r1345] nslcd/common.h, nslcd/myldap.c, nslcd/myldap.h,
nslcd/pam.c, nslcd/shadow.c: try to update the shadowLastChange
attribute of a user on password change (the update is only tried
if the attribute is present to begin with)
* [r1344] common/tio.c: return connection reset when connection was
closed by the other end
* [r1343] tests/nslcd-test.conf: paging isn't supported by OpenLDAP
when chasing referrals
* [r1342] nslcd/cfg.c: also support the tls_cacert option as an
alias for tls_cacertfile
* [r1341] man/nslcd.conf.5.xml: add notes on ignored options when
using GnuTLS (based on #513270 which was reported against the
openldap package by Peter Palfrader)
2010-12-24 arthur
* [r1340] nslcd/common.c: also support tilde (~) in user and group
names, except as first character
* [r1339] nslcd/common.c: make logic of character tests easier to
read
2010-12-20 arthur
* [r1338] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/group.c, nslcd/passwd.c: implement a nss_min_uid option to
filter user entries returned by LDAP
2010-12-18 arthur
* [r1337] tests/test_nsscmds.sh: sort group members by alphabet to
not be dependant on the order of attributes returned and the
internal softing of the set
* [r1336] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
update tests with current test set-up (with chasing a referral
and some other minor changes)
2010-12-12 arthur
* [r1328] nslcd/myldap.c: pass the ld to do_bind() instead of the
session to use the correct ld from do_rebind()
* [r1327] nslcd/pam.c: always return a positive authorisation
result during authentication because we don't do any
authorisation checks during authentication and this may confuse
the PAM module if it's only used for authorisation
* [r1326] pam/pam.c: fallback to standard PAM error message if one
wasn't returned by nslcd
* [r1325] nslcd/myldap.c: fix comment
2010-12-11 arthur
* [r1322] tests/test_myldap.c: include extra assertion checks
2010-12-08 arthur
* [r1319] nslcd/myldap.c, nslcd/myldap.h, nslcd/nslcd.c: in each
worker wake up once in a while to check whether any existing LDAP
connections should be closed
2010-12-03 arthur
* [r1318] nslcd/pam.c: in try_bind(), perform the search ourselves
instead of using lookup_dn2uid() to also be able to match
administrator DNs (thanks to Thaddeus J. Kollar for spotting
this)
* [r1317] nslcd/pam.c: fix handling of try_bind() result code in
nslcd_pam_authc() (patch by Thaddeus J. Kollar)
2010-11-26 arthur
* [r1316] nslcd/nslcd.c: close all open file descriptors on start
2010-11-17 arthur
* [r1315] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: return
correct PAM status code for when LDAP server is unavailable
(based on a patch by Pierre Gambarotto)
* [r1314] nslcd/pam.c: switch all internal functions to return an
LDAP status code
* [r1313] nslcd/pam.c: return correct kind of error code from
try_pwmod() (bug)
2010-11-10 arthur
* [r1312] debian/nslcd.config, debian/nslcd.postinst,
debian/nslcd.templates: implement configuring SASL authentication
using Debconf, based on a patch by Daniel Dehennin
* [r1311] debian/nslcd.config: fix for problem with undefined
values in read_config() function
2010-11-07 arthur
* [r1310] debian/nslcd.config: split reading values from a
configfile into a separate function and also ensure that
tls_reqcert is correctly read
* [r1309] debian/nslcd.postinst: add comment describing function
* [r1308] debian/nslcd.postinst: split updating configuration file
based on debconf value to separate function and make config
option renaming consistent
* [r1307] pam/Makefile.am: fix installation directory for PAM
module (was broken in r1239)
* [r1306] debian/nslcd.postinst: move special casing of handling
bindpw removal to cfg_disable() function
* [r1305] debian/nslcd.config, debian/nslcd.postinst: handle
tls_reqcert option consistently with other options
* [r1304] debian/nslcd.config: remove extra slash character
* [r1303] configure.ac: guess NSS SONAME on freebsd
* [r1302] configure.ac: use NSS flavour to determine which exports
file to use
* [r1301] nslcd/alias.c, nslcd/common.h, nslcd/ether.c,
nslcd/group.c, nslcd/host.c, nslcd/log.c, nslcd/log.h,
nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,
nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
log the request with any logged messages
* [r1300] compat/ldap_compat.h: SASL compatibility definition
2010-11-04 arthur
* [r1298] nslcd/nslcd.c: move acceptconnection() function body
inside the worker() so we can more easily break out of the
connection handling thread, close the server socket inside the
signal handler to cause all threads waiting on accept() to fail
and ensure that signals are handled in the main thread by
blocking them in the worker threads (r1290 from -solaris branch)
* [r1297] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: avoid
unneeded strdup()s by using a passed buffer to lookup_dn2uid()
and using strcmp() in dn2uid() to see if the existing cached
value is ok
* [r1296] nslcd/passwd.c: fix race condition that could cause a
memory leak
* [r1295] common/nslcd-prot.c, nslcd/nslcd.c: pass the actual size
of the address family and the path length to bind() and connect()
for named sockets
2010-11-03 arthur
* [r1294] nslcd/myldap.c: call myldap_session_check() before adding
a new search to the session so the connection actually gets
closed on timeout (the connection isn't closed when there are
active searches)
2010-10-16 arthur
* [r1288] configure.ac: chage test for compiling with gcc to be
simpler and not use deprecated ac_cv_prog_gcc
* [r1287] nslcd/nslcd.c: fix log message
* [r1286] nslcd/cfg.h: remove obsolete note
2010-10-15 arthur
* [r1279] common/dict.c, common/dict.h, common/set.c, common/set.h,
tests/test_set.c: implement dict_getany() and set_pop() functions
to be able to pick and remove entries
* [r1278] common/dict.c, common/dict.h, common/set.h,
tests/test_dict.c, tests/test_set.c: make DICTs and SETs
case-sensitive
* [r1277] nss/common.h: split out checking of NSS module
availability and buffer correctness to separate macros (taken
from the -solaris branch)
* [r1276] nslcd/myldap.c: set a longer socket timout for the normal
connection (just in case mostly) and a short one to use when
shutting down the connection (also see
http://www.openldap.org/its/index.cgi?selectid=6673)
2010-10-14 arthur
* [r1274] configure.ac: set {nss,pam}_ldap_so_LINK from configure
to allow custom linker properties for Solaris (r1261 and r1263
from -solaris branch)
* [r1273] configure.ac: also include sys/types.h for
ethernet-related tests (same as in compat/ether.h) (r1259 from
-solaris branch)
* [r1272] nss/group.c: move _nss_ldap_initgroups_dyn() definition
to the end to have more logical order
* [r1271] nslcd/myldap.c: simplify SASL includes
2010-10-13 arthur
* [r1270] nss/Makefile.am: link local modules before .a files from
common directory to pick symbols up in correct order
* [r1269] configure.ac: move ethernet function checks outside
nslcd-specific tests to also compile without warnings when only
compiling NSS module
* [r1267] nslcd/pam.c: make buffer sizes for PAM requests
consistent (and large enough for most situations)
* [r1266] configure.ac: rename --with-nss-ldap-maps to
--with-nss-maps
* [r1265] compat/ldap_passwd_s.c: small fix
2010-10-12 arthur
* [r1264] nslcd/myldap.c: set timeout options on LDAP socket to
avoid problems when the LDAP library hangs on a read() (e.g. at
ldap_unbind())
2010-10-10 arthur
* [r1256] nslcd/myldap.c, nss/netgroup.c, pam/pam.c: make use of
UNUSED() consistent throughout the code
* [r1255] nss/rpc.c: correctly name shared file handle
* [r1254] ChangeLog: undo changes to ChangeLog accidentally checked
in in r1253)
* [r1253] ChangeLog, configure.ac, nss/Makefile.am,
nss/exports.glibc, nss/exports.solaris, nss/nss_ldap.map,
pam/Makefile.am: put all logic on how to run linker for NSS and
PAM components in configure script (remove stuff from
Makefile.ams) and add Solaris version script (renaming version
scripts as needed) (r1250 from -solaris branch)
* [r1252] compat/ether.c, compat/ether.h: move missing declarations
of ether_ntoa() and ether_aton() to header file so they are
available for other sources also (r1243 from -solaris branch)
* [r1251] configure.ac: fix test of returnlen struct member check
(r1244 from -solaris branch)
2010-10-08 arthur
* [r1245] nss/services.c: correctly name shared file handle
2010-10-04 arthur
* [r1240] nss/Makefile.am, nss/aliases.c, nss/ethers.c,
nss/group.c, nss/hosts.c, nss/netgroup.c, nss/networks.c,
nss/passwd.c, nss/protocols.c, nss/rpc.c, nss/services.c,
nss/shadow.c, pam/Makefile.am: improve consistency of code layout
* [r1239] compat/nss_compat.h, configure.ac, nss/Makefile.am,
nss/common.h, nss/hosts.c, nss/networks.c, nss/prototypes.h,
pam/Makefile.am: merge some of the changes for Solaris
portability to ease merging, adding --with-pam-seclib-dir,
--with-pam-ldap-soname and --with-nss-flavour options and having
some auto-detection for SONAMEs and NSS flavour
2010-10-02 arthur
* [r1235] .: ignore configure.lineno
2010-10-01 arthur
* [r1233] compat/ether.c, compat/ldap_passwd_s.c, configure.ac: use
AC_CHECK_DECLS to check for definitions of functions we provide a
replacement definition for
2010-09-30 arthur
* [r1229] debian/po/vi.po: updated Vietnamese (vi) translation of
debconf templates by Clytie Siddall
* [r1228] configure.ac: fix test quoting
2010-09-29 arthur
* [r1227] compat/ether.c, configure.ac: only provide definitions
for ether_aton() and ether_ntoa() for platforms missing a
definition
* [r1226] compat/ether.c: fix definitions of ether_aton() and
ether_ntoa()
2010-09-28 arthur
* [r1225] compat/nss_compat.h, compat/pam_get_authtok.c,
configure.ac: begin merging some of the compatibility
improvements from Ted C. Cheng of Symas Corporation
* [r1224] compat/nss_compat.h: no need to provide a enum nss_status
replacement because we don't use it
* [r1223] tests/test_aliases.c, tests/test_ethers.c,
tests/test_group.c, tests/test_hosts.c, tests/test_netgroup.c,
tests/test_networks.c, tests/test_passwd.c,
tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
tests/test_shadow.c: also switch to nss_status_t for test code
* [r1222] configure.ac: simplify appending OBJEXT sed expression
2010-09-27 arthur
* [r1221] nslcd/myldap.c: remove variables which are no longer
necessary due to r1220
* [r1220] nslcd/myldap.c: remove disabling keepalives since we
handle SIGPIPE anyway
2010-09-26 arthur
* [r1219] nslcd/myldap.c: remove ugly empty line
* [r1218] configure.ac: properly define PACKAGE_URL
* [r1217] nslcd/group.c: update description of group schema
supported
* [r1216] Makefile.am: switch to nicer mechanism to specify
subdirectories to build
2010-09-25 arthur
* [r1215] configure.ac, nss/Makefile.am: have a way to limit which
NSS maps should be built
2010-09-24 arthur
* [r1214] compat/nss_compat.h, nss/aliases.c, nss/common.h,
nss/ethers.c, nss/group.c, nss/hosts.c, nss/netgroup.c,
nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,
nss/rpc.c, nss/services.c, nss/shadow.c: switch to using
nss_status_t throughout the code and provide compatibility code
to use whatever nss_status type is used on the system
2010-09-23 arthur
* [r1208] nslcd/myldap.c: add some more error cases which should
trigger a disconnect
2010-09-20 arthur
* [r1207] nslcd/myldap.c: handle errors from ldap_result()
consistently and also retry in case it times out
2010-09-05 arthur
* [r1206] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/common.h, nslcd/nslcd.c, nslcd/pam.c, pam/pam.c: implement
a rootpwmodpw option that allows root users to change user
passwords without a password prompt
2010-08-28 arthur
* [r1204] ChangeLog, NEWS, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.9 release
* [r1203] debian/po/nl.po: unfuzzy a few Dutch translations and
improve some others
* [r1202] debian/po/it.po: fix package name
* [r1201] debian/po/es.po: updated Spanish (es) translation of
debconf templates by Francisco Javier Cuadrado
* [r1200] debian/libpam-ldapd.templates, debian/po/ca.po,
debian/po/cs.po, debian/po/da.po, debian/po/de.po,
debian/po/es.po, debian/po/fi.po, debian/po/fr.po,
debian/po/gl.po, debian/po/it.po, debian/po/ja.po,
debian/po/nb.po, debian/po/nl.po, debian/po/pt.po,
debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po: fix
incorrect reference from /etc/nsswitch to /etc/nsswitch.conf
* [r1199] debian/po/da.po, debian/po/de.po, debian/po/it.po,
debian/po/ja.po, debian/po/nb.po, debian/po/ru.po,
debian/po/sv.po: fix wrapping of po files
* [r1198] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/fr.po, debian/po/it.po,
debian/po/ja.po, debian/po/nb.po, debian/po/pt.po,
debian/po/ru.po, debian/po/sv.po, debian/po/zh_CN.po: correct
references to package name for up-to-date translations
* [r1197] debian/po/es.po, debian/po/fr.po, debian/po/gl.po,
debian/po/ja.po: fix translations that had a reference to the old
location of the configuration file
* [r1196] debian/po/sv.po: updated Swedish (sv) translation of
debconf templates by Martin Ågren
* [r1195] debian/po/ca.po: unfuzzy translated string (confirmed OK
by Agustí Grau)
2010-08-27 arthur
* [r1194] debian/po/ca.po: updated Catalan (ca) translation of
debconf templates by Agusti Grau
2010-08-26 arthur
* [r1193] debian/po/de.po: updated German (de) translation of
debconf templates by Chris Leick
2010-08-25 arthur
* [r1192] debian/po/fr.po: updated French (fr) translation of
debconf templates by Christian Perrier
2010-08-24 arthur
* [r1191] debian/po/da.po: updated Danish (da) translation of
debconf templates by Joe Hansen
2010-08-20 arthur
* [r1190] debian/po/ja.po: updated Japanese (ja) translation of
debconf templates by Kenshi Muto
2010-08-19 arthur
* [r1189] debian/nslcd.templates, debian/po/ca.po, debian/po/cs.po,
debian/po/da.po, debian/po/de.po, debian/po/es.po,
debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,
debian/po/it.po, debian/po/ja.po, debian/po/nb.po,
debian/po/nl.po, debian/po/pt.po, debian/po/pt_BR.po,
debian/po/ru.po, debian/po/sv.po, debian/po/templates.pot,
debian/po/vi.po, debian/po/zh_CN.po: fix double "be" in English
template thanks to Christian PERRIER
* [r1188] debian/po/it.po: updated Italian (it) translation of
debconf templates by Vincenzo Campanella
* [r1187] debian/po/zh_CN.po: updated Simplified Chinese (zh_CN)
translation of debconf templates by zym
* [r1186] debian/po/cs.po: updated Czech (cs) translation of
debconf templates by Miroslav Kure
* [r1185] configure.ac: fix for --with-nss-ldap-soname option by
Julien Cristau
2010-08-18 arthur
* [r1183] ChangeLog, NEWS, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.8 release
* [r1182] debian/po/nb.po: added Norwegian Bokmål (nb) translation
of debconf templates by Bjørn Steensrud
* [r1181] debian/po/ru.po: updated Russian (ru) translation of
debconf templates by Yuri Kozlov
* [r1180] debian/po/pt.po: updated Portuguese (pt) translation of
debconf templates by Américo Monteir
2010-08-17 arthur
* [r1179] debian/po/da.po, debian/po/vi.po, debian/po/zh_CN.po:
remove invalid and bouncing addresses
* [r1178] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/es.po, debian/po/fi.po,
debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,
debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po:
update debian/po files with modified template
* [r1177] debian/libpam-ldapd.postinst: only offer to fix
nsswitch.conf if PAM has been converted with pam-auth-update
* [r1176] debian/libpam-ldapd.templates: updated debconf template
thanks to Justin B Rye
2010-08-15 arthur
* [r1175] debian/po/POTFILES.in, debian/po/ca.po, debian/po/cs.po,
debian/po/da.po, debian/po/de.po, debian/po/es.po,
debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,
debian/po/it.po, debian/po/ja.po, debian/po/nl.po,
debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
debian/po/zh_CN.po: update debian/po files with added template
2010-08-14 arthur
* [r1174] debian/control: upgrade to standards-version 3.9.1
* [r1173] debian/control: add libpam-sss as an alternative to
libpam-ldapd
* [r1172] debian/control: merge the recommends from libnss-ldapd
and libpam-ldapd into those of nslcd so we can track all the PAM
alternatives in one place
* [r1171] Makefile.am, debian/libnss-ldapd.postinst,
debian/libnss-ldapd.postrm,
debian/libpam-ldapd.lintian-overrides,
debian/libpam-ldapd.postinst, debian/libpam-ldapd.templates:
offer to add ldap to shadow in nsswitch.conf if a potential
broken configuration is found
* [r1170] ChangeLog, ChangeLog-2006, ChangeLog-2007,
ChangeLog-2008, Makefile.am: archive older ChangeLog entries in
year files
* [r1169] common/expr.c: also don't expand variables in rest of
${var:+rest} expressions if var is not set or empty
* [r1168] common/expr.c: do not expand variables in rest of
${var:-rest} expressions if var is not blank or empty
2010-07-27 arthur
* [r1167] nss/services.c: use htons() instead of ntohs() (thanks
Ted C. Cheng)
2010-07-18 arthur
* [r1166] compat/nss_compat.h, configure.ac: compatibility
improvement: also check for nss_common.h and see if enum
nss_status exists
* [r1165] nslcd/pam.c: fix comment
* [r1164] nss/Makefile.am: use -h linker flag instead of -soname
which seems more portable
* [r1163] compat/pam_compat.h: define pam_info(), pam_error() and
pam_syslog() compatibility macros to allow no arguments for
format
2010-07-17 arthur
* [r1162] debian/nslcd.config: only go back one step on Debconf
back
2010-07-07 arthur
* [r1161] configure.ac, nslcd/nslcd.c, nss/Makefile.am: allow
configuring NSS module's SONAME from configure and use this in
nslcd to dlopen() the correct library (thanks to Alexander V.
Chernikov for the idea)
2010-07-03 arthur
* [r1159] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.7 release
* [r1158] debian/control: upgrade to standards-version 3.9.0
* [r1157] debian/libnss-ldapd.config, debian/nslcd.config: don't
use dh_title to set the Debconf title, the default should be fine
* [r1156] debian/control: use Replaces/Breaks instead of Conflicts
for introduction of nslcd package (as per policy 3.9.0)
2010-06-25 arthur
* [r1155] Makefile.am, debian/libpam-ldapd.manpages,
debian/nslcd.install, debian/nslcd.manpages: make sure the
pam_ldap manual page is in the libpam-ldapd package
2010-06-19 arthur
* [r1154] nslcd/myldap.c: add logging to SASL interaction function
* [r1153] nslcd/myldap.c: improve debug logging of SASL bind calls
* [r1152] debian/nslcd.default: updated based on comments by Daniel
Dehennin <[email protected]>
2010-06-18 arthur
* [r1151] AUTHORS, Makefile.am, debian/control,
debian/nslcd.conffile, debian/nslcd.default, debian/nslcd.init:
start k5start from the init script to keep the Kerberos ticket
active if nslcd is configured for SASL GSSAPI kerberos
authentication, based on a patch by Daniel Dehennin
* [r1150] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h: remove
warning messages from parsing the sasl_* options and document
them in the nslcd.conf(5) manual page (they should be functional)
* [r1149] nslcd/myldap.c: make SASL binding code a little earier to
read
* [r1148] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/myldap.c: remove the use_sasl option and instead rely on
sasl_mech being specified
* [r1147] debian/nslcd.init: group options more
2010-06-17 arthur
* [r1146] compat/Makefile.am, compat/nss_compat.h, configure.ac,
nss/common.h, nss/prototypes.h: have more compatibility code for
NSS module and move compatibility code to compat directory
2010-06-16 arthur
* [r1145] debian/nslcd.init: ensure that nslcd is started after
hostname lookups are available so getting to the LDAP server via
DNS lookups will work (patch by Petter Reinholdtsen)
* [r1144] nslcd/nslcd.c: use RTLD_NODELETE during dlopen() instead
of not using dlclose()
2010-06-15 arthur
* [r1143] configure.ac, nss/Makefile.am, nss/exports.linux,
nss/nss_ldap.map, pam/Makefile.am, pam/exports.linux,
pam/pam_ldap.map: rename symbol map files and check for the
linker option to specify the file with
* [r1142] configure.ac, nslcd/Makefile.am: pass pthread flags
correctly to nslcd Makefile and rename save_ vars to not conflict
with AX_PTHREAD test
2010-06-14 arthur
* [r1141] configure.ac, nslcd/nslcd.c, nss/Makefile.am,
nss/common.c, nss/common.h, nss/exports.linux, nss/netgroup.c,
nss/prototypes.h, tests/Makefile.am: implement a global symbol
inside the NSS module to allow applications to disable NSS
lookups over LDAP and use it in nslcd to avoid deadlocks
* [r1140] common/dict.h, common/expr.h, common/nslcd-prot.h,
common/set.h, common/tio.h, compat/attrs.h, compat/daemon.h,
compat/ether.h, compat/getopt_long.h, compat/getpeercred.h,
compat/ldap_compat.h, compat/pam_compat.h, nslcd/attmap.h,
nslcd/cfg.h, nslcd/common.h, nslcd/log.h, nslcd/myldap.h,
nss/common.h, nss/prototypes.h, pam/common.h: make include guard
names consistent throughout the source and avoid conflicts with
system headers
* [r1139] nss/aliases.c, nss/ethers.c, nss/group.c, nss/hosts.c,
nss/netgroup.c, nss/networks.c, nss/passwd.c, nss/protocols.c,
nss/rpc.c, nss/services.c, nss/shadow.c: remove some unused
include statements
2010-06-12 arthur
* [r1138] README, common/tio.c, nslcd/attmap.c, nslcd/attmap.h,
nslcd/group.c, nslcd/network.c: remove commented out memberOf and
ipNetmaskNumber attributes and small cleanups
* [r1137] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/es.po, debian/po/fi.po,
debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,
debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
debian/po/vi.po, debian/po/zh_CN.po: run translations through
debconf-updatepo -v
2010-06-11 arthur
* [r1136] nslcd/nslcd.c: fix and remove source code comments
2010-06-04 arthur
* [r1135] ChangeLog, debian/changelog: revert part of r1134 that
was accidentally commited
* [r1134] ChangeLog, debian/changelog, pam/pam.c: fix nullok test
for password modification
2010-06-03 arthur
* [r1133] debian/libpam-ldapd.pam-auth-update: also ignore other
ignorable PAM return codes
2010-06-02 arthur
* [r1132] compat/pam_get_authtok.c: add a warning to the limitation
of our pam_get_authtok() implementation
* [r1131] pam/pam.c: simplify PAM module splitting remapping for
ignore_* options to a separate function, parsing of
try_first_pass and use_first_pass is done by pam_get_authtok(),
don't report session errors to the user and make error handling
consistent
2010-06-01 arthur
* [r1130] nslcd/pam.c: fix bug in test (r1127)
* [r1129] man/pam_ldap.8.xml, pam/pam.c: implement an nullok PAM
option and disable empty passwords by default
* [r1128] pam/pam.c: don't log failure to do nslcd request to user
and log authentication errors during password change
* [r1127] nslcd/pam.c: add a debug log message when user
authentication was successful
* [r1126] debian/libpam-ldapd.pam-auth-update: don't use
use_authtok for password modification by default
2010-05-31 arthur
* [r1125] pam/pam.c: fix typo
2010-05-27 arthur
* [r1123] AUTHORS, ChangeLog, NEWS, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.6 release
2010-05-26 arthur
* [r1122] debian/control: drop extra parts of package descriptions
that should no longer be really relevant and update libpam-ldapd
description
2010-05-24 arthur
* [r1121] debian/libpam-ldapd.pam-auth-update: update
pam-auth-update configuration to always perform LDAP
autorisation, also pass use_authtok on password modification and
spell out session result handling
* [r1120] pam/pam.c: make code more consistent
* [r1119] man/pam_ldap.8.xml: fix typo
* [r1118] pam/pam.c: don't store use_authtok because
pam_get_authtok() looks at the arguments itself
2010-05-23 arthur
* [r1117] HACKING, README, man/nslcd.8.xml, man/nslcd.conf.5.xml:
update documentation
* [r1116] nslcd.conf: include uid and gid options in default
configuration file
* [r1115] configure.ac, m4/acx_pthread.m4, m4/ax_pthread.m4: update
AC?X_PTHREAD macro and update configure script to be simpler and
add some more checks
* [r1114] debian/nslcd.init: use nslcd --check in init script's
status command
2010-05-22 arthur
* [r1113] nslcd/pam.c: make debug logging for pam_authz_search
option a little more readable
2010-05-20 arthur
* [r1112] debian/control: add libpam-heimdal as an alternative
recommends for libnss-ldapd
2010-05-15 arthur
* [r1111] nslcd/attmap.c, nslcd/attmap.h: always clear returned
buffer when performing attribute mapping (based on a patch by
Nalin Dahyabhai <[email protected]>)
2010-05-14 arthur
* [r1109] ChangeLog, NEWS, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.5 release
* [r1108] Makefile.am, debian/source, debian/source/format: switch
to source format 3.0 (native)
* [r1107] pam/pam.c: print uid as a long
* [r1106] compat/pam_compat.h, configure.ac, man/pam_ldap.8.xml,
pam/common.h, pam/pam.c: perform logging from PAM module to
syslog and support the debug option to log debugging information
2010-05-13 arthur
* [r1105] pam/pam.c: centralise initialising functions needed for
every PAM call into one function
* [r1104] common/nslcd-prot.h, nslcd/common.h: make logging of
buffer checks consistent
* [r1103] pam/pam.c: also use PAM username instead of one from
context for session open and close
* [r1102] pam/pam.c: replace my_pam_get_authtok() with standard
pam_get_authtok() function, get rid of get_old_password() and
general cleanups and simplifications
2010-05-12 arthur
* [r1101] pam/pam.c: make parsing configuration options global,
reorganise a bit and make code more consistent and easier to read
* [r1100] compat/pam_compat.h, nslcd/pam.c: small compatibility
improvements
2010-05-10 arthur
* [r1099] pam/pam.c: only log "LDAP session failed" if we actually
tried
* [r1098] compat/Makefile.am, compat/pam_compat.h,
compat/pam_get_authtok.c, compat/pam_prompt.c, configure.ac,
pam/pam.c: replace my_pam_warn() with pam_info() and pam_error()
and provide replacement for pam_prompt() also using it in our
pam_get_authtok() replacement
2010-05-09 arthur
* [r1096] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.4 release
* [r1095] nslcd/myldap.c: only log "connected to LDAP server" if
the previous connect failed or we are failing over to a different
server
* [r1094] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd/cfg.c,
nslcd/cfg.h, nslcd/myldap.c, tests/README, tests/nslcd-test.conf:
rename reconnect_maxsleeptime option to reconnect_retrytime
* [r1093] nslcd/myldap.c: don't log errno if it is not set (make
error less confusing)
* [r1092] nslcd/myldap.c: handle authentication searches a little
differently (only try once if an authentication error is
returned)
* [r1091] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/myldap.c: refactor retry timing mechanism to use time
between first and last error to determin when to rerty and only
try once (and don't sleep) when we have been failing for a long
time
2010-05-08 arthur
* [r1090] man/nslcd.conf.5.xml: fix wrapping of long line (thanks
lintian)
* [r1089] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/pam.c: rename authz_search option to pam_authz_search
2010-05-07 arthur
* [r1088] man/nslcd.conf.5.xml, man/pam_ldap.8.xml, nslcd/cfg.c,
nslcd/cfg.h, nslcd/pam.c: implement an authz_search option to
test whether the user is authorised
* [r1087] nslcd/alias.c, nslcd/ether.c, nslcd/group.c,
nslcd/host.c, nslcd/netgroup.c, nslcd/network.c, nslcd/passwd.c,
nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
tune some buffer sizes and small cleanups
* [r1086] tests/test_myldap.c: implement test for buffer overflow
* [r1085] nslcd/myldap.c: fix buffer overflow
* [r1084] man, man/Makefile.am: have the possibility to generate
HTML for manual pages (not done by default)
* [r1083] man/nslcd.conf.5.xml, man/pam_ldap.8.xml: use docbook
elements where possible
2010-05-06 arthur
* [r1082] compat/pam_compat.h, configure.ac,
debian/libpam-ldapd.pam-auth-update, man/pam_ldap.8.xml,
pam/pam.c: implement a minimum_uid option for the PAM module to
ignore users that have a lower numeric user id
2010-05-05 arthur
* [r1081] config.guess, config.sub: include updated files
2010-05-03 arthur
* [r1080] debian/nslcd.config: also parse /etc/ldap.conf for
systems that use that for NSS and PAM configuration
2010-04-13 arthur
* [r1079] nslcd/myldap.c, nslcd/myldap.h, nslcd/pam.c: don't have
myldap_set_credentials() try to open a connection but have the
PAM code perform a search with the new credentials so we re-use
the fail-over mechanism in myldap_search()
* [r1078] nslcd/cfg.c, nslcd/common.h, nslcd/myldap.c,
nslcd/myldap.h, nslcd/passwd.c, tests/test_myldap.c: also have
myldap_search() return an LDAP status code
2010-04-01 arthur
* [r1077] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
small improvements to the test setup
2010-03-20 arthur
* [r1076] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
nslcd/group.c: add an nss_initgroups_ignoreusers option to ignore
username to group lookups for the specified users
2010-03-13 arthur
* [r1075] man/nslcd.conf.5.xml: remove commented-oud default option
because it is not implemented and we have a better mechanism now
2010-02-28 arthur
* [r1074] nslcd/myldap.c: have less warnings when LDAP_OPT_X_TLS
isn't defined
* [r1073] man/nslcd.conf.5.xml: document which attributes may be
mapped with an expression
2010-02-27 arthur
* [r1071] ChangeLog, NEWS, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.7.3 release
* [r1070] debian/NEWS: add blank line for apt-listchanges
* [r1069] debian/control: upgrade to standards-version 3.8.4 (no
changes needed)
* [r1068] common/dict.h: fix typo
* [r1067] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd.conf,
nslcd.h, nslcd/cfg.c, nslcd/cfg.h, nslcd/pam.c: rename admindn
option to rootpwmoddn
* [r1066] INSTALL, compile: update from latest automake
* [r1065] HACKING, tests/README: small updates to documentation
2010-02-17 arthur
* [r1064] nslcd/myldap.c: first try password modification without
the old password and if that fails with the old password
* [r1063] compat/ldap_passwd_s.c: add pointer to RFC 3062
2010-01-28 arthur
* [r1062] man/nslcd.8.xml, nslcd/nslcd.c: patch by Jan Schampera to
implement a --check option
2010-01-25 arthur
* [r1061] nslcd/myldap.c: fix for type mismatch (thanks to Jan
Schampera)
2010-01-24 arthur
* [r1060] configure.ac, nslcd/cfg.c: add --with-bindpw-file
configure option to enable reading the bindpw option from a file
* [r1059] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd.conf,
nslcd.h, nslcd/cfg.c, nslcd/cfg.h, nslcd/pam.c, pam/pam.c: add
admindn configuration file option that is used when modifying
another user's password
* [r1058] man/nslcd.conf.5.xml: fix example
* [r1057] nslcd/myldap.c: make logging of passwords consistent and
support a NULL oldpassword value in myldap_passwd()
* [r1056] nslcd/myldap.c: free data returned from ldap_passwd_s()
call if needed and add missing casts
* [r1055] HACKING: general updates and add PAM module information
2010-01-23 arthur
* [r1054] nss/prototypes.h: simple improvement for FreeBSD
* [r1053] nslcd/nslcd.c: lock the pidfile at start-up to ensure
only one nslcd process is running (based on a patch by Jan
Schampera <[email protected]>)
2010-01-21 arthur
* [r1052] debian/nslcd.init: start nslcd before apache for systems
that use LDAP users to run virtual hosts
* [r1051] HACKING, README, configure.ac: set contact address to
mailing list
* [r1050] debian/NEWS: change format of NEWS entry based on
Developer's Reference
* [r1049] debian/rules: install lintian overrides with dh_lintian
2010-01-08 arthur
* [r1048] nslcd/cfg.c: improve getting of domain name by also
checking hostname aliases (based on patch by Jan Schampera
* [r1047] AUTHORS: improve getting of domain name by also checking
hostname aliases (based on patch by Jan Schampera