From 1e889ea42a280bcac89065c11ba0c21a337d564e Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Sat, 31 Dec 2011 12:40:45 +0000 Subject: get files ready for 0.8.5 release git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1584 ef36b2f9-881f-0410-afb5-c4e39611909c --- ChangeLog | 210 ++++++++++++++++++++++++++++++++++++++++++++++++++- NEWS | 17 +++++ TODO | 11 ++- configure.ac | 4 +- debian/changelog | 29 +++++++ man/nslcd.8.xml | 4 +- man/nslcd.conf.5.xml | 4 +- man/pam_ldap.8.xml | 4 +- 8 files changed, 268 insertions(+), 15 deletions(-) diff --git a/ChangeLog b/ChangeLog index 660214f..4f5a126 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,211 @@ +2011-12-30 17:41 arthur + + * [r1583] debian/control: fix versioned build dependency on + debhelper + +2011-12-28 23:06 arthur + + * [r1582] pynslcd/config.py.in: remove some information from config + that we don't expect to use + +2011-12-28 22:52 arthur + + * [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py, + pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py: + support for reading the configuration file (not all options are + used though) + +2011-12-28 22:44 arthur + + * [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state + variables (from command line) from the configuration to the main + module + +2011-12-28 22:29 arthur + + * [r1579] pynslcd/pam.py: fall back to trying to authenticate with + provided password (in case rootpwmodpw is not set or unusable) + +2011-12-28 22:10 arthur + + * [r1578] pynslcd/group.py: never request group members for + GroupByMemberRequest + +2011-12-28 22:09 arthur + + * [r1577] pynslcd/group.py: instead of modifying attmap, modify + attribute list + +2011-12-28 21:29 arthur + + * [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to + attmap (broken in r1571) + +2011-12-28 17:07 arthur + + * [r1575] nslcd/nslcd.c: typo fix in comment + +2011-12-27 21:05 arthur + + * [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py, + pynslcd/passwd.py, pynslcd/shadow.py: make logging more + consistent and remove test bases from shadow and passwd maps + +2011-12-27 18:04 arthur + + * [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py, + pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py, + pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes + +2011-12-27 17:53 arthur + + * [r1572] debian/copyright: update copyright information + +2011-12-12 22:59 arthur + + * [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, + pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, + pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py, + pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the + search separately from the request + +2011-12-12 21:53 arthur + + * [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, + pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, + pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py, + pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, + pynslcd/shadow.py: move check of required attributes and other + common tests to the Request.handle_entry() method + +2011-12-10 22:17 arthur + + * [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV + records + +2011-12-10 22:17 arthur + + * [r1568] nslcd/nslcd.c: properly handle failures to truncate the + pid file + +2011-12-10 21:09 arthur + + * [r1567] debian/nslcd.config: get the first configuration value + instead of the last because tha one is also written + +2011-12-10 21:03 arthur + + * [r1566] debian/nslcd.config: fix a deprecated use of head without + the -n option + +2011-12-10 20:15 arthur + + * [r1565] debian/rules: enable more hardening options (-fPIE + doesn't work yet because we use -fPIC in some places) + +2011-12-10 13:29 arthur + + * [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm: + ensure that the output of nss_list_configured() is space + separated + +2011-12-10 11:45 arthur + + * [r1563] m4/ax_pthread.m4: update macro from autoconf-archive + +2011-12-09 08:58 jhrozek + + * [r1560] nslcd/myldap.c: Fix a typo in disconnect logic + +2011-12-01 21:43 arthur + + * [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are + properly initialised and log denied requests + +2011-11-30 21:51 arthur + + * [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only + loaded once after start-up + +2011-11-18 13:24 arthur + + * [r1556] debian/libnss-ldapd.config: simplification of logic to + overwrite list of enabled /etc/nsswitch.conf services in debconf + (based on r1555 of 0.7 branch) + +2011-10-12 20:50 arthur + + * [r1554] debian/control: add versioned dependency on libpam for + mutiarch support + +2011-10-12 20:07 arthur + + * [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS + function by Tom Judge (taken from FreeBSD PR 154000) + +2011-10-10 19:05 arthur + + * [r1552] debian/rules: keep nslcd running during package upgrades + +2011-10-02 11:17 arthur + + * [r1551] nslcd/pam.c: reduce loglevel of user not found messages + to avoid spamming the logs with useless information (thanks Wakko + Warner) + +2011-09-30 11:48 jhrozek + + * [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c, + nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: + Use an explicit base of 10 for strtouid()/strtogid()/strtol() + calls + +2011-09-21 18:59 arthur + + * [r1546] debian/nslcd.config: treat the "hard" value for + tls_reqcert as if it was "demand" + +2011-09-14 19:13 arthur + + * [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm, + debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst: + make whitespace matching consistent in regular expressions + (thanks Nick) + +2011-09-09 16:08 arthur + + * [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c, + nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c, + nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c, + nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: + make validation log messages consistent + +2011-09-09 16:02 arthur + + * [r1541] nslcd/nsswitch.c: add missing include + +2011-09-08 20:57 arthur + + * [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size + and consistency improvements to other buffers + +2011-09-08 20:52 arthur + + * [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string + representations of addresses more logical names + +2011-09-07 20:04 arthur + + * [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv) + translation of debconf templates by Martin Bagge + +2011-09-04 19:19 arthur + + * [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac, + debian/changelog, debian/copyright, man/nslcd.8.xml, + man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for + 0.8.4 release + 2011-09-04 08:48 arthur * [r1535] tests/test_getpeercred.c: warn when we couldn't get the @@ -73,7 +281,7 @@ * [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated callback structure to OpenLDAP because it doesn't make it's own - copy (thanks Jakub Hrozek) + copy (thanks Jakub Hrozek) (fixes a problem in r1490) 2011-08-27 14:48 arthur diff --git a/NEWS b/NEWS index e6fa736..7857751 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,20 @@ +changes from 0.8.4 to 0.8.5 +--------------------------- + +* support larger gecos values +* reduce loglevel of user not found messages to avoid spamming the logs + with useless information (thanks Wakko Warner) +* other logging improvements +* explicitly parse numbers as base 10 (thanks Jakub Hrozek) +* implement FreeBSD group membership NSS function (thanks Tom Judge) +* fix an issue with detecting the uid of the calling process and log + denied shadow requests in debug mode +* fix a typo in the disconnect logic code (thanks Martin Poole) +* implement configuration file handling in pynslcd and other pynslcd + improvements +* Debian packaging improvements + + changes from 0.8.3 to 0.8.4 --------------------------- diff --git a/TODO b/TODO index fb0d1c0..9fd3eb4 100644 --- a/TODO +++ b/TODO @@ -15,17 +15,16 @@ it become available when it determines it can (other timeout/retry mechanism on startup) * implement requesting and handling password policy information when binding - as a user + as a user (see pam_ldap) * implement nested groups * implement other services in nslcd: sudo and autofs are candidates -* restart unscd on postinst, just like nscd (or perhaps do nscd -i ) -* instead of library symbol, use environment variable to disable NSS module -* properly test Solaris support * fix buffer handling in read_**string() functions (Solaris support) * complete pynslcd implementation * implement chsh and chfn in nslcd PAM code and make chsh.ldap and chfn.ldap binaries * have nslcd flush the nscd caches when reconnecting to the LDAP server after an error -* have PAM code support password policy of server (see pam_ldap) -* also add a max uid option for PAM module +* add a max uid option for PAM module +* support changing Samba password attributes on password change +* while running NSS tests, check if nscd isn't running +* implement keepalives on the LDAP connection diff --git a/configure.ac b/configure.ac index f073ff2..4f43313 100644 --- a/configure.ac +++ b/configure.ac @@ -33,10 +33,10 @@ configure.ac file for more details.]) # initialize and set version and bugreport address AC_INIT([nss-pam-ldapd], - [0.8.4], + [0.8.5], [nss-pam-ldapd-users@lists.arthurdejong.org],, [http://arthurdejong.org/nss-pam-ldapd/]) -RELEASE_MONTH="Sep 2011" +RELEASE_MONTH="Dec 2011" AC_SUBST(RELEASE_MONTH) AC_CONFIG_SRCDIR([nslcd.h]) diff --git a/debian/changelog b/debian/changelog index 1e770b9..f2d9c88 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,32 @@ +nss-pam-ldapd (0.8.5) unstable; urgency=low + + * support larger gecos values (closes: #640781) + * updated Swedish debconf translation by Martin Bagge (closes: #640623) + * consistently handle whitespace in configuration file during package + configuration (thanks Nick) (closes: #641619) + * add a versioned dependency on libpam0g to ensure the PAM libraries are + multiarch-aware + * in debconf, treat the "hard" value for tls_reqcert as if it was "demand" + (closes: #642347) + * reduce loglevel of user not found messages to avoid spamming the logs + with useless information (thanks Wakko Warner) (closes: #641820) + * other logging improvements + * keep nslcd running during package upgrades (closes: #644892) + * explicitly parse numbers as base 10 (thanks Jakub Hrozek) + * implement FreeBSD group membership NSS function (thanks Tom Judge) + * fix an issue where changes in /etc/nsswitch.conf were not correctly + picked up and could lead to lookups being disabled on upgrade + (closes: #645599) + * fix an issue with detecting the uid of the calling process and log + denied shadow requests in debug mode + * fix a typo in the disconnect logic code (thanks Martin Poole) + * enable hardening options during build + * implement configuration file handling in pynslcd and other pynslcd + improvements (pynslcd is not in a Debian package yet) + * update debian/copyright + + -- Arthur de Jong Sat, 31 Dec 2011 13:30:00 +0100 + nss-pam-ldapd (0.8.4) unstable; urgency=low * Upload to unstable diff --git a/man/nslcd.8.xml b/man/nslcd.8.xml index 3f9d96e..4c79e08 100644 --- a/man/nslcd.8.xml +++ b/man/nslcd.8.xml @@ -36,9 +36,9 @@ nslcd 8 - Version 0.8.4 + Version 0.8.5 System Manager's Manual - Sep 2011 + Dec 2011 diff --git a/man/nslcd.conf.5.xml b/man/nslcd.conf.5.xml index 97d22f7..7507c55 100644 --- a/man/nslcd.conf.5.xml +++ b/man/nslcd.conf.5.xml @@ -36,9 +36,9 @@ nslcd.conf 5 - Version 0.8.4 + Version 0.8.5 System Manager's Manual - Sep 2011 + Dec 2011 diff --git a/man/pam_ldap.8.xml b/man/pam_ldap.8.xml index b1c34ec..89001d0 100644 --- a/man/pam_ldap.8.xml +++ b/man/pam_ldap.8.xml @@ -35,9 +35,9 @@ pam_ldap 8 - Version 0.8.4 + Version 0.8.5 System Manager's Manual - Sep 2011 + Dec 2011 -- cgit v1.2.3