diff options
author | Arthur de Jong <arthur@arthurdejong.org> | 2008-02-03 22:55:41 +0100 |
---|---|---|
committer | Arthur de Jong <arthur@arthurdejong.org> | 2008-02-03 22:55:41 +0100 |
commit | bc2ccd2da84cd3dcffc3db8a121e30af07818c0e (patch) | |
tree | 601fa24cfa6cd1d59fc021bae27ff35bd4159410 | |
parent | 5cffc046ba5480f1023c188b85401ef234903a40 (diff) |
get files ready for 0.6 release0.6
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-ldapd@618 ef36b2f9-881f-0410-afb5-c4e39611909c
-rw-r--r-- | ChangeLog | 404 | ||||
-rw-r--r-- | NEWS | 22 | ||||
-rw-r--r-- | TODO | 10 | ||||
-rw-r--r-- | configure.ac | 4 | ||||
-rw-r--r-- | debian/changelog | 28 | ||||
-rw-r--r-- | man/nslcd.8.xml | 6 | ||||
-rw-r--r-- | man/nss-ldapd.conf.5.xml | 6 |
7 files changed, 468 insertions, 12 deletions
@@ -1,3 +1,407 @@ +2008-02-03 11:31 arthur + + * [r617] configure.ac: also check for sasl2 library + +2008-02-03 11:30 arthur + + * [r616] tests/test_myldap.c, tests/test_nsscmds.sh: add tests for + new LDAP lookups + +2008-02-03 11:24 arthur + + * [r615] nslcd/attmap.c, nslcd/attmap.h, nslcd/group.c: support the + uniqueMember LDAP attribute that holds DN values (they are + translated with dn2uid() from passwd.c) + +2008-02-03 11:19 arthur + + * [r614] debian/libnss-ldapd.postinst, debian/libnss-ldapd.postrm, + debian/rules: don't use dh_makeshlibs any more because we don't + need the shlibs file; call ldconfig from maintainer scripts + ourselves + +2008-02-03 10:17 arthur + + * [r613] debian/rules: install the NSS library under /lib instead + of /usr/lib to make it easyer to unmount /usr if it's on a + separate filesystem + +2008-02-02 15:58 arthur + + * [r612] debian/rules: don't pass options to configure which are + not used + +2008-02-02 15:57 arthur + + * [r611] configure.ac: remove --with-ngroups option because it + isn't used + +2008-02-02 15:50 arthur + + * [r610] nslcd/common.h, nslcd/passwd.c: implement a dn2uid() + function to transform a DN into a username (looking inside the DN + or doing an LDAP lookup if neede) + +2008-02-02 15:46 arthur + + * [r609] nslcd/myldap.c, nslcd/myldap.h: implement + myldap_cpy_rdn_value() function to copy rdn value into a buffer + (functionality like myldap_get_rdn_value()) + +2008-02-02 12:02 arthur + + * [r608] nslcd/myldap.c: log and otherwise ignore errors in + ldap_parse_page_control() + +2008-02-02 12:00 arthur + + * [r607] nslcd/myldap.c: fix copy-pasto + +2008-02-02 11:57 arthur + + * [r606] nslcd/myldap.c: don't request paging when doing a search + with scope base and ignore errors of ldap_create_page_control() + +2008-02-02 11:42 arthur + + * [r605] nslcd/myldap.c: reset LDAP error flag if ldap_get_values() + returned an error because some LDAP functions don't do this + correctly + +2008-02-01 22:41 arthur + + * [r604] nslcd/myldap.c: have proper checks and logs of all ldap + operations + +2008-02-01 22:25 arthur + + * [r603] tests/test_group.c: enable _nss_ldap_initgroups_dyn() test + because it's working now + +2008-02-01 22:19 arthur + + * [r602] nslcd-common.h: fix buffer size debug message + +2008-02-01 22:18 arthur + + * [r601] nss/common.h, nss/hosts.c, nss/netgroup.c, nss/networks.c: + do not set errno (and h_errno) if we got the last entry from + get*ent() (this apparently is needed by coreutils' id and groups + commands) + +2008-02-01 22:01 arthur + + * [r600] tests/Makefile.am: pagectrl module has moved + +2008-02-01 21:58 arthur + + * [r599] tests/test_nsscmds.sh: test for hugegroup + +2008-02-01 21:57 arthur + + * [r598] tests/test_nsscmds.sh: the groups command no longer lists + the username + +2008-02-01 19:59 arthur + + * [r597] nss/common.c, nss/common.h, nss/group.c, nss/hosts.c, + nss/netgroup.c, nss/networks.c: remove the nslcd2nss() function + because it's not needed with the current protocol + +2008-02-01 19:32 arthur + + * [r596] nss/common.h: fail with a permanent error if resetting the + stream failed to prevent indefinite retries + +2008-01-31 22:20 arthur + + * [r595] nslcd/myldap.c: defined LDAP_DEPRECATED to also have + definitions for deprecated functions + +2008-01-31 22:11 arthur + + * [r594] compat/attrs.h: only define MUST_USE attribute if gcc + version is more recent than 3.4 + +2008-01-31 22:07 arthur + + * [r593] debian/copyright: update copyright information + +2008-01-31 22:04 arthur + + * [r592] compat/Makefile.am, compat/pagectrl.c, compat/pagectrl.h, + configure.ac, debian/copyright, nslcd/Makefile.am, + nslcd/myldap.c, nslcd/pagectrl.c, nslcd/pagectrl.h: move pagectrl + code into compat directory + +2008-01-31 21:55 arthur + + * [r591] configure.ac: make comments lowercase for consistency + +2008-01-31 21:50 arthur + + * [r590] tests/test_myldap.c: re-add test URIs that accidentally + got commented out in the last commit + +2008-01-31 21:45 arthur + + * [r589] tests/Makefile.am, tests/test_cfg.c, tests/test_myldap.c, + tests/test_nsscmds.sh: pass the correct pthread flags for all + calls to compiler and linker and link in compat code, handle + other assert.h setups and avoid some ! in if statements in shell + scripts + +2008-01-31 21:41 arthur + + * [r588] configure.ac: improve LDAP library autodetection and make + if statements consistent + +2008-01-31 20:59 arthur + + * [r587] configure.ac: move finding of replacement functions to a + more logical place + +2008-01-31 20:58 arthur + + * [r586] configure.ac: define extra macros to import system + extensions from system header files and remove duplicate check + for ldap_set_rebind_proc() + +2008-01-31 20:57 arthur + + * [r585] configure.ac: test to see if the compiler supports certain + -W flags before using them + +2008-01-30 22:40 arthur + + * [r584] nslcd/ether.c: include stdint.h + +2008-01-30 22:36 arthur + + * [r583] nslcd.h, nslcd/ether.c, nss/ethers.c: use uint8_t instead + of u_int8_t because the former seems to be available on more + platforms + +2008-01-30 22:31 arthur + + * [r582] INSTALL, depcomp, install-sh: update some files from + recent automake + +2008-01-30 21:58 arthur + + * [r581] compat/Makefile.am, compat/daemon.c, compat/daemon.h, + compat/getopt_long.c, compat/getopt_long.h, configure.ac: provide + replacement functions for daemon() and getopt_long() when they + are not available on the system + +2008-01-30 21:57 arthur + + * [r580] configure.ac: remove duplicate warning flags + +2008-01-30 21:29 arthur + + * [r579] compat/attrs.h: define __STRING() if it's not defined by + the system + +2008-01-30 21:15 arthur + + * [r578] tests/test_tio.c: include errno in assertion statement + +2008-01-30 21:13 arthur + + * [r577] compat/getpeercred.c: some fixes for LOCAL_PEERCRED (still + untested) + +2008-01-27 20:42 arthur + + * [r576] AUTHORS, debian/po/de.po: updated German (de) translation + of debconf templates by Erik Schanze <eriks@debian.org> + +2008-01-27 16:51 arthur + + * [r575] compat/ldap.h, nslcd/Makefile.am, nslcd/myldap.c: + integrate some compatibility code into myldap.c, the only place + it's used + +2008-01-27 10:22 arthur + + * [r573] nslcd/myldap.c: work around some LDAP libraries not having + all options + +2008-01-27 10:20 arthur + + * [r572] configure.ac, nslcd/myldap.h: on some systems lber.h needs + to be included before ldap.h + +2008-01-27 10:16 arthur + + * [r571] common/tio.c, nslcd-common.h, nslcd/nslcd.c, nss/common.c, + tests/test_tio.c: when including stdint.h check if we actually + have it + +2008-01-27 10:14 arthur + + * [r570] nslcd/pagectrl.c, nslcd/pagectrl.h: correct #endif comment + +2008-01-26 17:55 arthur + + * [r569] nslcd/cfg.c: have a fallback value for HOST_NAME_MAX if it + is not defined + +2008-01-26 17:51 arthur + + * [r568] tests/test_nsscmds.sh: handle the case where + /etc/nss-ldapd.conf does not exist a little more graceful + +2008-01-26 14:32 arthur + + * [r567] nslcd/nslcd.c: log error when getpeercred() returned + nothing + +2008-01-26 14:31 arthur + + * [r566] compat/getpeercred.c, compat/getpeercred.h, configure.ac: + add (untested) support for the Solaris getpeerucred() function + +2008-01-26 10:49 arthur + + * [r565] Makefile.am, compat, compat/Makefile.am, + compat/getpeercred.c, compat/getpeercred.h, configure.ac, + nslcd/Makefile.am, nslcd/nslcd.c: move code to get information + from socket peer to the compat directory because it is very + platform specific + +2008-01-26 08:33 arthur + + * [r564] tests/test_myldap.c, tests/test_nsscmds.sh, + tests/test_tio.c: somewhat improve the output from the tests + +2008-01-26 08:31 arthur + + * [r563] nslcd/cfg.c: fix marsing of map statement + +2008-01-26 08:31 arthur + + * [r562] tests/test_cfg.c: also test map filter and scope + configuration options + +2008-01-16 20:49 arthur + + * [r561] nslcd/cfg.c: fix problem in map statement end-of-line + handling + +2008-01-16 20:43 arthur + + * [r560] tests/test_cfg.c: add a test for the map statement + +2008-01-03 12:51 arthur + + * [r559] nslcd/nslcd.c: close connections in worker threads at + program termination + +2008-01-03 12:49 arthur + + * [r558] nslcd/nslcd.c: make code a little more compact, don't + include debug twice in the log message and remove the + capabilities code because it will probably never be used + +2008-01-03 10:36 arthur + + * [r557] tests/test_nsscmds.sh: support the case where + is in + /etc/group + +2008-01-03 10:34 arthur + + * [r556] nss/aliases.c, nss/common.h, nss/ethers.c, nss/group.c, + nss/hosts.c, nss/netgroup.c, nss/networks.c, nss/passwd.c, + nss/protocols.c, nss/rpc.c, nss/services.c, nss/shadow.c: only + start the NSLCD_ACTION_*_ALL requests with the first call to + getent() instead of with setent() to avoid unneeded requests if + compat is used (except with netgroups) + +2008-01-03 10:30 arthur + + * [r555] nslcd/passwd.c, nss/prototypes.h: update copyright year + +2008-01-03 09:45 arthur + + * [r554] tests/test_nsscmds.sh: get the number of groups and + services from files in /etc for comparison + +2008-01-03 09:21 arthur + + * [r553] nslcd/passwd.c: do not warn about missing loginShell + attribute because it is not mandatory + +2008-01-03 08:25 arthur + + * [r552] nss/group.c: increment value that is pointed to, not the + pointer (fixes segfault) + +2008-01-02 22:22 arthur + + * [r551] nslcd/common.h: immediatly bail out if write entity + function failed (prevents numerous "error writing to client" + messages from filling up the logs) + +2008-01-01 21:05 arthur + + * [r550] tests/test_nsscmds.sh: check to see if nslcd is running + and add test for a large group (100 members) + +2008-01-01 21:04 arthur + + * [r549] nss/exports.linux, nss/group.c, nss/prototypes.h: enable + the _nss_ldap_initgroups_dyn() function that is now implemented + in nslcd + +2008-01-01 21:02 arthur + + * [r548] nss/common.h: use the new tio_mark()/tio_reset() functions + to support retries of the getent() functions when + NSS_STATUS_TRYAGAIN would be returned + +2008-01-01 20:53 arthur + + * [r547] common/tio.c, common/tio.h, tests/test_tio.c: add limited + implementation of tio_mark() and tio_reset() functions to do + limited seeks in the read stream, clean up header file comments + and write tests for new code + +2007-12-31 16:47 arthur + + * [r546] nslcd/common.h: fix get_userpassword() function + description + +2007-12-31 16:46 arthur + + * [r545] nslcd/shadow.c: fix incorrect references to attribute map + entries + +2007-12-31 16:45 arthur + + * [r544] nslcd/group.c: remove TODO (was done) + +2007-12-31 16:43 arthur + + * [r543] nslcd/common.c: fix bug that would return a password of + one character short + +2007-12-27 21:39 arthur + + * [r542] nslcd/cfg.c: do not define variable if we're not going to + use it + +2007-12-27 21:38 arthur + + * [r541] configure.ac: check for all used ldap functions + +2007-12-27 10:42 arthur + + * [r539] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, + man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for + 0.5 release + 2007-12-26 22:35 arthur * [r538] tests/test_cfg.c: remove temporary file to make distcheck @@ -1,3 +1,25 @@ +changes from 0.5 to 0.6 +----------------------- + +* fix parsing of map option in nss-ldapd.conf +* fix bug in handling of userPassword values +* remove warning about missing loginShell attribute +* support the uniqueMember LDAP attribute that holds DN values +* support ldap as a compat service in /etc/nsswitch.conf +* implement _nss_ldap_initgroups_dyn() to allow username->groups searches +* fix retry mechanism with get*ent() functions where a too small buffer was + passed by libc (to support groups with a lot of members) +* fix a bug in reporting of communications problems between nslcd and the NSS + library +* test and log failures of all LDAP library calls +* improved tests +* miscellaneous compatibility improvements to try to support more LDAP + libraries and platforms +* support compilation with OpenLDAP 2.4 and newer +* some configure script improvements +* Debian packaging improvements + + changes from 0.4.1 to 0.5 ------------------------- @@ -1,13 +1,15 @@ probably before we can call this stable --------------------------------------- -* implement _nss_ldap_initgroups_dyn() * fix usage of strerror() as it is not thread safe * error out quickly when the LDAP server is down * fix race condition when setting signal mask in common/tio.c (using pthread_sigmask() adds a dependency on the pthread library, - maybe we should switch back to stdio) + we should probably just do locking) * find problem with reachability of LDAP server * get root/nonroot connections working +* find out why HAVE_GSSPAI is not always set to what configure outputs +* do not use LDAP_DEPRECATED enabled functions +* make tio module use dynamically sized buffers other items ----------- @@ -16,7 +18,7 @@ other items purge (maybe prompt?) * probably document that you should use libpam-ldap for authentication without exposing the passwords through NSS -* make a test suite (instructions for setting up environment (server), LDIF +* document test suite (instructions for setting up environment (server), LDIF file, nsswitch.conf and nss-ldapd.conf) * write more unit tests * maybe support bootparams (check README also) @@ -29,7 +31,6 @@ other items * add sanity checking code (e.g. not too large buffer allocation and checking that host, user, etc do not contain funky characters) in all server modules * implement running under a different uid/gid (maybe chroot jail) -* maybe remove dh_makeshlibs from debian/rules (probably not needed) * include a generic init script * log some statistics: "passwd=100 shadow=10 host=20 rpc=10" (10 req/minute) * in the server: once the request is done pass the flushing of the buffers to @@ -57,3 +58,4 @@ other items * test non-ASCII characters in fields (mostly cn) * implement attribute defaults (for when they're missing from the directory) * implement attribute overrides (to always return a specific value, not matter what the directory says) +* see if we can use LD_LIBRARY_PATH to run our tests in so we don't need to install NSS library in system path diff --git a/configure.ac b/configure.ac index 94b8fe9..e7818ba 100644 --- a/configure.ac +++ b/configure.ac @@ -32,8 +32,8 @@ version 2.1 of the License, or (at your option) any later version. See the configure.ac file for more details.]) # initialize and set version and bugreport address -AC_INIT([nss-ldapd],[0.5],[arthur@ch.tudelft.nl]) -RELEASE_MONTH="Dec 2007" +AC_INIT([nss-ldapd],[0.6],[arthur@ch.tudelft.nl]) +RELEASE_MONTH="Feb 2008" AC_SUBST(RELEASE_MONTH) AC_CONFIG_SRCDIR([nslcd.h]) diff --git a/debian/changelog b/debian/changelog index 1bed60e..8f53646 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,31 @@ +nss-ldapd (0.6) unstable; urgency=low + + * fix parsing of map option in nss-ldapd.conf + * fix bug in handling of userPassword values + * remove warning about missing loginShell attribute + * support the uniqueMember LDAP attribute that holds DN values + * support ldap as a compat service in /etc/nsswitch.conf + * implement _nss_ldap_initgroups_dyn() to allow username->groups searches + * fix retry mechanism with get*ent() functions where a too small buffer was + passed by libc (to support groups with a lot of members) (closes: #457936) + * fix a bug in reporting of communications problems between nslcd and the + NSS library + * test and log failures of all LDAP library calls + * improved tests + * miscellaneous compatibility improvements to try to support more LDAP + libraries and platforms + * support compilation with OpenLDAP 2.4 and newer + * define LDAP_DEPRECATED for now to have definitions for deprecated + functions (closes: #463421) + * some configure script improvements + * updated German debconf translation by Erik Schanze (closes: #462841) + * install the NSS library under /lib instead of /usr/lib to make it easier + to umount /usr if it's on a separate file system (closes: #439355) + * don't ship a shlibs file any more because we're not providing a normal + shared library + + -- Arthur de Jong <adejong@debian.org> Sun, 03 Feb 2008 22:00:00 +0100 + nss-ldapd (0.5) unstable; urgency=low * major structural changes in the LDAP lookup code using a newly implemented diff --git a/man/nslcd.8.xml b/man/nslcd.8.xml index 587a34c..2a7e1ba 100644 --- a/man/nslcd.8.xml +++ b/man/nslcd.8.xml @@ -6,7 +6,7 @@ nslcd.8.xml - docbook manual page for nslcd Copyright (C) 2006 West Consulting - Copyright (C) 2006, 2007 Arthur de Jong + Copyright (C) 2006, 2007, 2008 Arthur de Jong This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public @@ -36,9 +36,9 @@ <refmeta> <refentrytitle>nslcd</refentrytitle> <manvolnum>8</manvolnum> - <refmiscinfo class="version">Version 0.5</refmiscinfo> + <refmiscinfo class="version">Version 0.6</refmiscinfo> <refmiscinfo class="manual">System Manager's Manual</refmiscinfo> - <refmiscinfo class="date">Dec 2007</refmiscinfo> + <refmiscinfo class="date">Feb 2008</refmiscinfo> </refmeta> <refnamediv id="name"> diff --git a/man/nss-ldapd.conf.5.xml b/man/nss-ldapd.conf.5.xml index 593b283..de3dc03 100644 --- a/man/nss-ldapd.conf.5.xml +++ b/man/nss-ldapd.conf.5.xml @@ -6,7 +6,7 @@ nss-ldapd.conf.5.xml - docbook manual page for nss-ldapd.conf Copyright (C) 1997-2005 Luke Howard - Copyright (C) 2007 Arthur de Jong + Copyright (C) 2007, 2008 Arthur de Jong This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public @@ -36,9 +36,9 @@ <refmeta> <refentrytitle>nss-ldapd.conf</refentrytitle> <manvolnum>5</manvolnum> - <refmiscinfo class="version">Version 0.5</refmiscinfo> + <refmiscinfo class="version">Version 0.6</refmiscinfo> <refmiscinfo class="manual">System Manager's Manual</refmiscinfo> - <refmiscinfo class="date">Dec 2007</refmiscinfo> + <refmiscinfo class="date">Feb 2008</refmiscinfo> </refmeta> <refnamediv id="name"> |