2012-06-29 09:55  arthur

	* [r1706] config.sub: update from latest automake

2012-06-17 09:25  arthur

	* [r1705] HACKING: minor documentation touch-ups

2012-06-15 21:29  arthur

	* [r1704] Makefile.am: install the default configuration file with
	  reduced permissions (further protection for CVE-2009-1073)

2012-06-15 21:15  arthur

	* [r1703] nslcd/pam.c: log successful password change in nslcd and
	  correctly terminate protocol on password change failure

2012-06-15 21:04  arthur

	* [r1702] pam/pam.c: fix problem with returning wrong error code
	  when changing password with wrong old password (thanks Anton
	  Helwart)

2012-05-25 09:04  arthur

	* [r1701] README: reword section on bug reporting and add a
	  reference to the ignorecase option on the case sensitivity
	  section

2012-05-25 08:47  arthur

	* [r1700] HACKING: include list of required libraries and do not
	  put information on AUTHORS file on the patch requirements

2012-05-20 20:35  arthur

	* [r1695] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.9 release

2012-05-20 19:53  arthur

	* [r1694] nslcd/cfg.c, nslcd/common.c, nslcd/group.c,
	  nslcd/passwd.c, nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c,
	  nslcd/shadow.c: implement extra range checking of all numeric
	  values

2012-05-18 14:21  arthur

	* [r1693] configure.ac, nslcd/myldap.c, nslcd/nslcd.c,
	  nss/bsdnss.c: get rid of a few compiler warnings on FreeBSD

2012-05-11 12:27  arthur

	* [r1690] compat/nss_compat.h, configure.ac: provide a
	  compatibility version of struct spwd for systems without it

2012-05-11 09:28  arthur

	* [r1688] compat/socket.h: fix fallback definition of SUN_LEN()
	  (fixes r1686)

2012-05-09 20:16  arthur

	* [r1686] common/nslcd-prot.c, compat/Makefile.am,
	  compat/nss_compat.h, compat/socket.h, nslcd/nslcd.c: provide a
	  compatibility definition of SUN_LEN() for systems that lack it

2012-05-09 19:47  arthur

	* [r1685] nslcd/nslcd.c: remove duplicate debug from log message

2012-05-04 21:24  arthur

	* [r1684] pynslcd/pam.py: implement PAM authorisation check using
	  pam_authz_search option

2012-05-04 20:20  arthur

	* [r1683] pynslcd/pam.py: ignore user-supplied DN for PAM requests
	  and don't send it back

2012-05-04 20:13  arthur

	* [r1682] pynslcd/Makefile.am, pynslcd/attmap.py, pynslcd/cfg.py,
	  pynslcd/expr.py: move expression handling to own module

2012-05-04 20:10  arthur

	* [r1681] pynslcd/common.py: ensure search also works without
	  attribute map

2012-05-04 20:06  arthur

	* [r1680] pynslcd/cfg.py: small code style improvements

2012-05-04 13:36  arthur

	* [r1679] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/pam.c, pynslcd/cfg.py: allow the pam_authz_search option to
	  be specified multiple times

2012-05-04 13:31  arthur

	* [r1678] nslcd/nslcd.c: don't try to close _SC_OPEN_MAX file
	  descriptor

2012-05-02 21:11  arthur

	* [r1677] compat/pam_compat.h, compat/pam_get_authtok.c: move all
	  PAM_AUTHTOK_RECOVERY_ERR compatibility definitions to
	  compat/pam_compat.h

2012-04-29 20:46  arthur

	* [r1673] README: documentation touch-ups

2012-04-27 07:56  arthur

	* [r1662] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.8 release

2012-04-27 07:37  arthur

	* [r1660] Makefile.am, ldapns.schema: add a schema file that some
	  people use for PAM

2012-04-26 19:42  arthur

	* [r1659] common/tio.c, common/tio.h, nss/common.h: split the
	  functionality to read everything from the stream into a separate
	  function and don't assume we use non-blocking IO (fix r1637)

2012-04-26 19:39  arthur

	* [r1658] tests/test_pamcmds.expect: support alternative unknown
	  user response

2012-04-22 19:28  arthur

	* [r1653] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.7 release

2012-04-09 13:48  arthur

	* [r1649] compile, depcomp: update files from recent automake

2012-03-23 10:18  arthur

	* [r1643] nslcd/pam.c: increase buffer for pam_authz_search as
	  suggested by Chris J Arges

2012-03-16 15:00  arthur

	* [r1642] pynslcd/attmap.py: support the upper and lower functions
	  in attribute mapping expressions

2012-03-16 13:53  arthur

	* [r1641] pynslcd/attmap.py, pynslcd/common.py, pynslcd/pam.py:
	  refactor some of the attribute mapping code to introduce a
	  mapping instance that does the hard work and support the lower()
	  and upper() attribute mapping functions

2012-03-16 12:48  arthur

	* [r1640] pynslcd/pynslcd.py: implement a getpeercred() function

2012-03-16 09:46  arthur

	* [r1639] nslcd/myldap.c: always try to log the ldap error, the
	  diagnostic message and errno if available in a consistent format

2012-03-16 08:28  arthur

	* [r1638] nss/common.h: put both tio_skip() and tio_close() within
	  if (fixes r1637) and clarify documentation of one part of the
	  code

2012-03-14 20:31  arthur

	* [r1637] common/tio.c, common/tio.h, nss/common.h: read any
	  remaining available data from the stream when closing the
	  connection in a normal way to prevent Broken pipe messages in
	  nslcd

2012-03-14 20:26  arthur

	* [r1636] common/tio.c: ensure that we don't try to read more than
	  SSIZE_MAX bytes

2012-03-13 19:32  arthur

	* [r1635] AUTHORS, man/nslcd.conf.5.xml: document the fact that
	  each thread opens it's own connection (patch by Chris Hiestand)

2012-03-13 18:29  arthur

	* [r1634] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/common.h, nslcd/group.c, nslcd/netgroup.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  make whether or not to do case-sensitive filtering configurable
	  (patch by Matthew L. Dailey)

2012-03-13 18:03  arthur

	* [r1633] compile, config.guess, config.sub, missing: update from
	  latest automake

2012-03-10 20:57  arthur

	* [r1632] nslcd/cfg.c: when doing DNS queries for SRV records
	  recognise default ldap and ldaps ports

2012-03-10 20:41  arthur

	* [r1631] nslcd/common.h: add missing include for
	  _POSIX_HOST_NAME_MAX (thanks Mel Flynn)

2012-03-10 20:17  arthur

	* [r1628] nslcd/pam.c: fix log message for invalid pam_authz_search
	  as reported by Matt Rae

2012-03-05 22:27  arthur

	* [r1627] nslcd/myldap.c: remove extra newline from log message

2012-03-05 21:53  arthur

	* [r1626] compat/ldap_compat.h, nslcd/myldap.c: provide more
	  detailed logging information for ldap_start_tls_s() failures
	  (based on a patch by Mel Flynn)

2012-02-29 21:44  arthur

	* [r1625] nslcd/myldap.c: log the first 10 search results in debug
	  mode to make debugging easier (patch by Matthijs Kooijman)

2012-02-29 21:26  arthur

	* [r1624] README, nslcd/nslcd.c: update copyright years

2012-01-29 15:37  arthur

	* [r1616] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.6 release

2012-01-29 15:13  arthur

	* [r1615] pynslcd/alias.py, pynslcd/cache.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: implement a naive offline cache

2012-01-29 14:50  arthur

	* [r1614] pynslcd/group.py: small simplification in group lookups
	  (member attributes are not requested anyway)

2012-01-29 14:39  arthur

	* [r1613] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: split the
	  result handling into a convert() and write() step

2012-01-20 20:08  arthur

	* [r1611] nslcd/netgroup.c, pynslcd/pynslcd.py: formatting fixes

2012-01-20 16:18  arthur

	* [r1605] nslcd/nslcd.c: clarify error messages and fix typo in
	  comment

2012-01-20 16:01  arthur

	* [r1604] Makefile.am, debian: separate the Debian packaging from
	  main sources switching to non-native Debian package (using
	  svn-buildpackage)

2012-01-20 15:43  arthur

	* [r1603] pynslcd/Makefile.am: add missing Python modules to
	  tarball

2012-01-17 19:41  arthur

	* [r1597] AUTHORS, nss/bsdnss.c: FreeBSD compilation fixes by Maxim
	  Vetrov

2012-01-17 19:38  arthur

	* [r1596] common/nslcd-prot.c, nslcd/nslcd.c: pass the correct size
	  of named socket address (fixes FreeBSD issue, fixes r1295)

2012-01-16 21:17  arthur

	* [r1595] INSTALL, compile, depcomp, install-sh, py-compile: update
	  files from recent automake

2012-01-09 12:15  jhrozek

	* [r1594] nslcd/common.c: Add a matching va_end() for va_start() in
	  mysnprintf()

2012-01-09 12:11  jhrozek

	* [r1593] nslcd/myldap.c: Warn if ldap_set_option() fails for
	  LDAP_OPT_ERROR_NUM

2012-01-09 12:10  jhrozek

	* [r1592] nslcd/nslcd.c: Warn if fd cannot be closed in is_locked()

2012-01-09 12:07  jhrozek

	* [r1591] nslcd/netgroup.c: Check NULL return in write_netgroup()

2012-01-09 12:04  jhrozek

	* [r1590] nslcd/pam.c: Do not leak memory if myldap_escape() fails

2012-01-09 11:54  jhrozek

	* [r1589] nslcd/pam.c: Return from update_username() if
	  myldap_get_values() returns invalid value
	  
	  If myldap_get_values() failed for the attmap_passwd_uid,
	  nss-pam-ldapd
	  would dereference a NULL pointer.

2012-01-06 13:59  arthur

	* [r1588] pynslcd/alias.py, pynslcd/cfg.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/mypidfile.py, pynslcd/netgroup.py, pynslcd/network.py,
	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/pynslcd.py, pynslcd/rpc.py: user the logging framework,
	  handle exceptions properly and some cleanups

2012-01-05 21:30  arthur

	* [r1587] debian/po/zh_CN.po: updated Simplified Chinese (zh_CN)
	  translation of debconf templates by zym

2012-01-02 20:46  arthur

	* [r1586] debian/po/nb.po: updated Norwegian Bokmål (nb)
	  translation of debconf templates by Bjørn Steensrud