From 4b2fdd3a207cb41b388f5e9f06ecea8d47841e29 Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Sat, 8 Sep 2012 19:20:23 +0000 Subject: archive older ChangeLog entries in year files git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1761 ef36b2f9-881f-0410-afb5-c4e39611909c --- ChangeLog | 1119 -------------------------------------------------------- ChangeLog-2011 | 744 +++++++++++++++++++++++++++++++++++++ Makefile.am | 2 +- 3 files changed, 745 insertions(+), 1120 deletions(-) create mode 100644 ChangeLog-2011 diff --git a/ChangeLog b/ChangeLog index c1536b1..9915f70 100644 --- a/ChangeLog +++ b/ChangeLog @@ -356,1122 +356,3 @@ * [r1586] debian/po/nb.po: updated Norwegian Bokmål (nb) translation of debconf templates by Bjørn Steensrud -2011-12-31 12:40 arthur - - * [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, - man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get - files ready for 0.8.5 release - -2011-12-30 17:41 arthur - - * [r1583] debian/control: fix versioned build dependency on - debhelper - -2011-12-28 23:06 arthur - - * [r1582] pynslcd/config.py.in: remove some information from config - that we don't expect to use - -2011-12-28 22:52 arthur - - * [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py, - pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py: - support for reading the configuration file (not all options are - used though) - -2011-12-28 22:44 arthur - - * [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state - variables (from command line) from the configuration to the main - module - -2011-12-28 22:29 arthur - - * [r1579] pynslcd/pam.py: fall back to trying to authenticate with - provided password (in case rootpwmodpw is not set or unusable) - -2011-12-28 22:10 arthur - - * [r1578] pynslcd/group.py: never request group members for - GroupByMemberRequest - -2011-12-28 22:09 arthur - - * [r1577] pynslcd/group.py: instead of modifying attmap, modify - attribute list - -2011-12-28 21:29 arthur - - * [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to - attmap (broken in r1571) - -2011-12-28 17:07 arthur - - * [r1575] nslcd/nslcd.c: typo fix in comment - -2011-12-27 21:05 arthur - - * [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py, - pynslcd/passwd.py, pynslcd/shadow.py: make logging more - consistent and remove test bases from shadow and passwd maps - -2011-12-27 18:04 arthur - - * [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py, - pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py, - pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes - -2011-12-27 17:53 arthur - - * [r1572] debian/copyright: update copyright information - -2011-12-12 22:59 arthur - - * [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, - pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, - pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py, - pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the - search separately from the request - -2011-12-12 21:53 arthur - - * [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, - pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, - pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py, - pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, - pynslcd/shadow.py: move check of required attributes and other - common tests to the Request.handle_entry() method - -2011-12-10 22:17 arthur - - * [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV - records - -2011-12-10 22:17 arthur - - * [r1568] nslcd/nslcd.c: properly handle failures to truncate the - pid file - -2011-12-10 21:09 arthur - - * [r1567] debian/nslcd.config: get the first configuration value - instead of the last because tha one is also written - -2011-12-10 21:03 arthur - - * [r1566] debian/nslcd.config: fix a deprecated use of head without - the -n option - -2011-12-10 20:15 arthur - - * [r1565] debian/rules: enable more hardening options (-fPIE - doesn't work yet because we use -fPIC in some places) - -2011-12-10 13:29 arthur - - * [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm: - ensure that the output of nss_list_configured() is space - separated - -2011-12-10 11:45 arthur - - * [r1563] m4/ax_pthread.m4: update macro from autoconf-archive - -2011-12-09 08:58 jhrozek - - * [r1560] nslcd/myldap.c: Fix a typo in disconnect logic - -2011-12-01 21:43 arthur - - * [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are - properly initialised and log denied requests - -2011-11-30 21:51 arthur - - * [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only - loaded once after start-up - -2011-11-18 13:24 arthur - - * [r1556] debian/libnss-ldapd.config: simplification of logic to - overwrite list of enabled /etc/nsswitch.conf services in debconf - (based on r1555 of 0.7 branch) - -2011-10-12 20:50 arthur - - * [r1554] debian/control: add versioned dependency on libpam for - mutiarch support - -2011-10-12 20:07 arthur - - * [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS - function by Tom Judge (taken from FreeBSD PR 154000) - -2011-10-10 19:05 arthur - - * [r1552] debian/rules: keep nslcd running during package upgrades - -2011-10-02 11:17 arthur - - * [r1551] nslcd/pam.c: reduce loglevel of user not found messages - to avoid spamming the logs with useless information (thanks Wakko - Warner) - -2011-09-30 11:48 jhrozek - - * [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c, - nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: - Use an explicit base of 10 for strtouid()/strtogid()/strtol() - calls - -2011-09-21 18:59 arthur - - * [r1546] debian/nslcd.config: treat the "hard" value for - tls_reqcert as if it was "demand" - -2011-09-14 19:13 arthur - - * [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm, - debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst: - make whitespace matching consistent in regular expressions - (thanks Nick) - -2011-09-09 16:08 arthur - - * [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c, - nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c, - nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c, - nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: - make validation log messages consistent - -2011-09-09 16:02 arthur - - * [r1541] nslcd/nsswitch.c: add missing include - -2011-09-08 20:57 arthur - - * [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size - and consistency improvements to other buffers - -2011-09-08 20:52 arthur - - * [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string - representations of addresses more logical names - -2011-09-07 20:04 arthur - - * [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv) - translation of debconf templates by Martin Bagge - -2011-09-04 19:19 arthur - - * [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac, - debian/changelog, debian/copyright, man/nslcd.8.xml, - man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for - 0.8.4 release - -2011-09-04 08:48 arthur - - * [r1535] tests/test_getpeercred.c: warn when we couldn't get the - gid or pid, the uid is the only really interesting bit - -2011-09-04 08:42 arthur - - * [r1534] tests/test_tio.c: add casts from size_t to int for printf - -2011-09-04 08:40 arthur - - * [r1533] debian/rules: ignore failures in tests - -2011-09-04 08:40 arthur - - * [r1532] debian/rules: use auto-detection for LDAP library and - defaults for config file, socket and pidfile (no changes) - -2011-09-03 15:57 arthur - - * [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst, - debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support - spaces before and after database name while parsing - /etc/nsswitch.conf and reduce the number of places where parsing - is done - -2011-08-30 18:58 arthur - - * [r1530] debian/nslcd.postinst: correctly handle leading and - trailing spaces in preseeded uri option (patch by Andreas B. - Mundt) - -2011-08-30 18:47 arthur - - * [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and - LDAP_REFERRALS to configure.ac to ensure that tests from - configure see the same API - -2011-08-29 20:57 arthur - - * [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement - and use a strtoui() function if uid_t or gid_t is of size - unsigned int (thanks Jakub Hrozek) - -2011-08-29 19:18 arthur - - * [r1527] pynslcd/Makefile.am: get rid of automake warning - -2011-08-29 19:16 arthur - - * [r1526] configure.ac: silence autoconf warnings, patch by Jakub - Hrozek - -2011-08-29 19:01 arthur - - * [r1525] debian/po/nl.po: some changes based on feedback by Jeroen - Schot - -2011-08-27 21:22 arthur - - * [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c, - nslcd/passwd.c: provide strtouid() and strtogid() functions that - use strtoul() or strtoull() (thanks Jakub Hrozek) - -2011-08-27 20:57 arthur - - * [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c, - nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: - check errno after calls to strtol() to ensure that numbers that - are too large for type will be reported (thanks Jakub Hrozek) - -2011-08-27 15:08 arthur - - * [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated - callback structure to OpenLDAP because it doesn't make it's own - copy (thanks Jakub Hrozek) (fixes a problem in r1490) - -2011-08-27 14:48 arthur - - * [r1521] debian/po/nl.po: some changes based on feedback by Paul - Gevers - -2011-08-26 19:21 arthur - - * [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation - -2011-08-26 10:11 arthur - - * [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po, - debian/po/it.po, debian/po/nb.po, debian/po/nl.po, - debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small - formatting changes to header - -2011-08-25 20:05 arthur - - * [r1518] debian/po/es.po: updated Spanish (es) translation of - debconf templates by Francisco Javier Cuadrado - -2011-08-24 20:47 arthur - - * [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai) - -2011-08-24 20:22 arthur - - * [r1515] nslcd/cfg.c: fix a problem with uninitialised memory - while parsing the tls_ciphers option (was broken in r853, similar - problem was fixed in r910, reported by Isaac Freeman) - -2011-08-24 19:02 arthur - - * [r1514] debian/po/de.po: updated German (de) translation of - debconf templates by Chris Leick - -2011-08-24 18:51 arthur - - * [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support - querying DNS SRV records from a different domain than the current - one (based on a patch by James M. Leddy) - -2011-08-23 20:03 arthur - - * [r1512] debian/po/cs.po: updated Czech (cs) translation of - debconf templates by Miroslav Kure - -2011-08-19 15:57 arthur - - * [r1511] debian/po/fr.po: typo fix provided by Christian Perrier - -2011-08-17 19:38 arthur - - * [r1510] AUTHORS: add new translators to AUTHORS file - -2011-08-17 19:04 arthur - - * [r1509] debian/po/ja.po: updated Japanese (ja) translation of - debconf templates by Kenshi Muto - -2011-08-17 18:44 arthur - - * [r1508] debian/po/pt.po: updated Portuguese (pt) translation of - debconf templates by Américo Monteiro - -2011-08-14 19:29 arthur - - * [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR) - translation of debconf templates by Denis Doria - -2011-08-14 17:03 arthur - - * [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am: - split 2009 and 2010 changes to separate ChangeLog files - -2011-08-14 15:39 arthur - - * [r1505] nss/networks.c: remove unused variable - -2011-08-14 14:09 arthur - - * [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am: - put external libraries at the end when linking - -2011-08-14 14:03 arthur - - * [r1503] configure.ac: remove some tests for symbols we aren't - using - -2011-08-14 14:02 arthur - - * [r1502] debian/libnss-ldapd.lintian-overrides: add lintian - override for SONAME check - -2011-08-14 12:54 arthur - - * [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR) - translation of debconf templates by Denis Doria - -2011-08-14 10:34 arthur - - * [r1500] debian/po/da.po: update Danish (da) translation of - debconf templates by Joe Hansen - -2011-08-14 10:27 arthur - - * [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf - templates by Slavko - -2011-08-14 10:18 arthur - - * [r1498] debian/po/fr.po: updated French (fr) translation of - debconf templates by Christian Perrier - -2011-08-14 10:04 arthur - - * [r1497] debian/po/ru.po: updated Russian (ru) translation of - debconf templates by Yuri Kozlov - -2011-08-10 20:02 arthur - - * [r1496] AUTHORS: fix spelling of name (sorry about that) - -2011-08-09 15:36 arthur - - * [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether - file should be reloaded - -2011-08-09 09:09 arthur - - * [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po, - debian/po/de.po, debian/po/es.po, debian/po/fi.po, - debian/po/fr.po, debian/po/gl.po, debian/po/it.po, - debian/po/ja.po, debian/po/nb.po, debian/po/nl.po, - debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po, - debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po, - debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po - files - -2011-08-09 09:02 arthur - - * [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small - language updates based on feedback by Justin B Rye - -2011-08-08 08:09 arthur - - * [r1492] debian/nslcd.templates: incorporate feedback on debconf - templates by debian-l10n-english@lists.debian.org (thanks Justin - B Rye and Christian PERRIER) - -2011-08-07 16:40 arthur - - * [r1491] Makefile.am, debian/compat, debian/control, - debian/libnss-ldapd.install, - debian/libnss-ldapd.lintian-overrides, - debian/libnss-ldapd.postinst, debian/libpam-ldapd.install, - debian/rules, debian/source/lintian-overrides: build Debian - packages with multiarch support - -2011-08-07 13:10 arthur - - * [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a - connection callback to avoid timeout issues during the SSL - handshake (based on a patch by Stefan Völkel) - -2011-08-06 20:36 arthur - - * [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD - from http://www.gnu.org/software/autoconf-archive/ax_pthread.html - -2011-08-05 21:42 arthur - - * [r1488] pynslcd/group.py, tests/test_myldap.c: replace last - traces of groupOfUniqueNames - -2011-08-05 21:28 arthur - - * [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c, - nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow - map queries LDAP before returning x as a password has for shadow - users - -2011-08-05 20:58 arthur - - * [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh: - update tests with change of member/uniqueMember default change - (r1484) - -2011-08-05 11:52 arthur - - * [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h, - nslcd/passwd.c: implementation of myldap_get_values_len() to use - ldap_get_values_len() instead of ldap_get_values() to fix some - problems with binary data in returned attribute values (patch by - Wesley Mason) - -2011-08-03 19:54 arthur - - * [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h, - nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to - using the member attribute by default instead of uniqueMember - -2011-07-21 20:41 arthur - - * [r1483] README: remove obsolete attribute from documentation - -2011-07-15 20:13 arthur - - * [r1482] debian/nslcd.init: on restart only log_end_msg once - -2011-07-04 21:18 arthur - - * [r1481] configure.ac: show the default value for the - pam-seclib-dir option - -2011-07-03 20:34 arthur - - * [r1480] compat/getpeercred.c: fix header - -2011-07-03 20:34 arthur - - * [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for - systems with only PAM_AUTHTOK_RECOVER_ERR - -2011-07-02 21:50 arthur - - * [r1478] Makefile.am, debian/compat, debian/control, - debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update, - debian/nslcd.install, debian/pam-configs, - debian/pam-configs/ldap, debian/rules: switch to dh for - debian/rules and bump debhelper compatibility to 8 - -2011-07-02 21:20 arthur - - * [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c, - nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent, - grow gidNumber buffer to hold larger numbers and small - consistency improvements - -2011-06-10 08:49 arthur - - * [r1475] nslcd/pam.c: correctly only check password expiration - when authenticating, only check account expiration when doing - authorisation check - -2011-06-05 20:18 arthur - - * [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in - pam_authz_search to see if they exist - -2011-06-05 20:15 arthur - - * [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const - and don't free() data returned by cfg_getdomainname() - -2011-06-05 09:14 arthur - - * [r1471] common/expr.c, tests/test_expr.c: handle expressions - where the expander function returns NULL (handle it as an empty - string) - -2011-06-05 08:58 arthur - - * [r1470] nslcd/myldap.c: fix r1468 - -2011-06-05 08:54 arthur - - * [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to - handle splitting attribute and value correctly - -2011-06-05 08:03 arthur - - * [r1467] config.guess, config.sub: include updated files - -2011-05-23 20:05 arthur - - * [r1466] tests/test_common.c: add test case for two-character user - name - -2011-05-21 14:52 arthur - - * [r1464] nslcd/myldap.c: fix problem with partial attribute name - matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White - for the fix) - -2011-05-13 13:10 arthur - - * [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, - man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get - files ready for 0.8.3 release - -2011-05-13 13:02 arthur - - * [r1461] debian/libnss-ldapd.postinst: don't unconditionally - restart nscd but just try to invalidate the cache for the maps - that change - -2011-05-13 13:01 arthur - - * [r1460] debian/libnss-ldapd.config: correctly pick up current - configuration of /etc/nsswitch.conf when running dpkg-reconfigure - -2011-05-13 12:41 arthur - - * [r1459] debian/control: upgrade to standards-version 3.9.2 - -2011-05-13 12:15 arthur - - * [r1458] common/expr.c, common/expr.h: switch variable expander - function type name because _t suffix is reserved - -2011-05-13 11:57 arthur - - * [r1457] debian/control, debian/nslcd.config: search for LDAP - server by looking for SRV _ldap._tcp DNS records and try to query - LDAP server for base DN during package configuration (based on - work by Petter Reinholdtsen for the sssd package) - -2011-05-13 07:48 arthur - - * [r1456] debian/nslcd.config: fix domain to basedn expansion when - having more than two domain parts (patch by Per Carlson) - -2011-05-13 07:04 arthur - - * [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, - pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, - pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, - pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, - pynslcd/shadow.py: simplify request handling by passing read - parameters around in a dict instead of setting object properties - (this mainly simplifies search filter building) - -2011-05-01 19:08 arthur - - * [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, - pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, - pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, - pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, - pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement - attribute mapping functionality and do some refactoring - -2011-05-01 12:18 arthur - - * [r1453] pynslcd/pam.py: remove unneeded import - -2011-05-01 12:14 arthur - - * [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, - pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, - pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, - pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn - and attributes to functions separately - -2011-05-01 12:06 arthur - - * [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py: - small code improvements - -2011-04-30 21:28 arthur - - * [r1450] pam/common.h: make log message clearer when nslcd returns - an empty response (user not handled) - -2011-04-30 21:26 arthur - - * [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP - server unavailable to PAM module - -2011-04-30 21:01 arthur - - * [r1448] pam/pam.c: split setting up of configuration into - separate function - -2011-04-30 19:54 arthur - - * [r1447] nslcd/pam.c: improve password change failed error message - -2011-04-30 14:37 arthur - - * [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow - properties (similarly to what pam_unix does) in the PAM handling - code - -2011-04-30 09:15 arthur - - * [r1445] pam/pam.c: do not attempt to change password as root when - changing an expired password - -2011-04-30 08:39 arthur - - * [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no - match found - -2011-04-30 08:12 arthur - - * [r1443] nslcd/pam.c: use the right DN in the pam_authz_search - option - -2011-04-30 08:00 arthur - - * [r1442] nslcd/shadow.c: move code for getting shadow expiry - properties to a separate function - -2011-04-29 21:06 arthur - - * [r1441] nslcd/pam.c: move most of the code for building the - authorisation search into the try_autzsearch() function - -2011-04-29 18:21 arthur - - * [r1440] nslcd.h, pam/pam.c: support more PAM status codes over - the nslcd protocol - -2011-04-29 18:19 arthur - - * [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to - indicate no expiry (instead of a long time) - -2011-04-28 18:47 arthur - - * [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, - pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, - pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, - pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, - pynslcd/shadow.py: put standard library imports before - application imports and remove some unused imports - -2011-04-28 18:32 arthur - - * [r1437] pynslcd/group.py: remove duplicate and wrong write() - method - -2011-04-24 21:01 arthur - - * [r1436] nslcd/pam.c: make request indicator shorter - -2011-04-24 20:54 arthur - - * [r1435] nslcd.h: document use of returned authorisation message - -2011-04-24 20:52 arthur - - * [r1434] nslcd/pam.c: no longer use the userdn parameter passed - along with each request (this may mean one or two more lookups - when doing authentication but simplifies things) - -2011-04-24 20:26 arthur - - * [r1433] tests/test_pamcmds.expect: improve handling of - test_login_unknown - -2011-04-22 10:02 arthur - - * [r1431] nslcd/myldap.c: report correct reported error from - ldap_abandon() - -2011-04-18 21:30 arthur - - * [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of - RTLD_NODELETE - -2011-04-18 20:53 arthur - - * [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE - -2011-04-16 14:00 arthur - - * [r1428] nslcd.conf: add example configuration provided by Wesley - Mason - -2011-04-15 21:20 arthur - - * [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h, - configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement - implementation for strndup() for systems that don't have it - -2011-04-15 21:20 arthur - - * [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing - from r1425) - -2011-04-15 21:16 arthur - - * [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h, - nslcd/group.c, nslcd/passwd.c: support using the objectSid - attribute to provide numeric user and group ids, based on a patch - by Wesley Mason - -2011-04-15 19:10 arthur - - * [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect, - tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests - from another directory - -2011-04-03 21:10 arthur - - * [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and - group name validation errors a little more informative - -2011-03-31 20:50 arthur - - * [r1422] AUTHORS: add some people who seemed to be missing from - the AUTHORS file - -2011-03-31 20:22 arthur - - * [r1421] common/tio.c: tv_usec in struct timeval must be lower - than 1000000 (patch by SATOH Fumiyasu) - -2011-03-31 20:16 arthur - - * [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of - $(INSTALL_DATA) -D because -D is not supported on all operating - systems (patch by SATOH Fumiyasu) - -2011-03-31 19:16 arthur - - * [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of - only two characters - -2011-03-26 20:51 arthur - - * [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, - man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get - files ready for 0.8.2 release - -2011-03-26 16:16 arthur - - * [r1416] tests/Makefile.am, tests/test_nsscmds.sh, - tests/test_pamcmds.sh: ensure that all test source files are - distibuted and can tests can be run when source directory differs - from build directory - -2011-03-26 14:36 arthur - - * [r1415] pynslcd/common.py: sync validname regular expression with - nslcd - -2011-03-25 21:39 arthur - - * [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait - for all worker threads to finish before exiting (but wait a few - seconds on platforms with pthread_timedjoin_np()) - -2011-03-25 16:15 arthur - - * [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c, - tests/test_myldap.c: re-organise tests somewhat making things - more consistent - -2011-03-25 16:08 arthur - - * [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate - patch by Daniel Dehennin to not loose debconf values of - previously set options with dpkg-reconfigure - -2011-03-25 13:30 arthur - - * [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c, - nslcd/cfg.h, nslcd/common.c, tests/Makefile.am, - tests/test_common.c: implement a validnames option that can be - used to fine-tune the test for valid user and group names using a - regular expression - -2011-03-24 22:19 arthur - - * [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py, - pynslcd/service.py: implement service, protocol and rpc lookups - -2011-03-24 22:18 arthur - - * [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where - the RDN is for some reason not in the cn - -2011-03-24 22:15 arthur - - * [r1408] pynslcd/pam.py: fix configuration name - -2011-03-24 22:09 arthur - - * [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains - of previous value is gone - -2011-03-23 21:55 arthur - - * [r1406] pynslcd/host.py: fix use of spaces - -2011-03-23 21:43 arthur - - * [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of - files - -2011-03-23 21:28 arthur - - * [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a - definition of daemon() for systems that lack it - -2011-03-23 20:30 arthur - - * [r1402] compat/ether.h: typo fix in comment - -2011-03-19 15:14 arthur - - * [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests, - tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c: - more tests and general test improvements - -2011-03-19 15:14 arthur - - * [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c, - nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small - code improvements - -2011-03-19 15:13 arthur - - * [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality - that isn't used - -2011-03-18 14:33 arthur - - * [r1398] tests, tests/Makefile.am, tests/in_testenv.sh, - tests/test_nsscmds.sh, tests/test_pamcmds.expect, - tests/test_pamcmds.sh: implement test cases for some of the - common PAM actions (test environment required for this) - -2011-03-17 21:02 arthur - - * [r1397] configure.ac, tests/Makefile.am, tests/common.h, - tests/test_cfg.c, tests/test_common.c, tests/test_expr.c, - tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c: - put all assertion functions and compatibility code into one - header file - -2011-03-17 21:01 arthur - - * [r1396] nslcd.conf: put idle_timelimit option in Active Directory - example with low enough default - -2011-03-16 21:54 arthur - - * [r1395] tests/Makefile.am, tests/test_aliases.c, - tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c, - tests/test_netgroup.c, tests/test_networks.c, - tests/test_nslcd_group.c, tests/test_passwd.c, - tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c, - tests/test_shadow.c: remove legacy test code that is no longer - used - -2011-03-14 21:42 arthur - - * [r1394] pam/pam.c: check for user existence before trying - password change - -2011-03-14 20:19 arthur - - * [r1393] common/tio.c: fix a problem in the timeout paramater that - was being passed to select() and could contain too many µsec - (fixes Solaris runtime issue) - -2011-03-13 15:25 arthur - - * [r1392] tests/test_nsscmds.sh: fix name of script in header - -2011-03-12 08:41 arthur - - * [r1391] configure.ac: include the resolv library for hstrerror() - on platforms that need it (thanks Peter Bray) - -2011-03-12 08:34 arthur - - * [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX - fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX - (thanks Peter Bray) - -2011-03-11 20:37 arthur - - * [r1389] Makefile.am: ensure that permissions are sane in the - distributed tarball - -2011-03-11 18:02 arthur - - * [r1388] nslcd/myldap.c: fix problem with endless loop on - incorrect password - -2011-03-11 15:49 arthur - - * [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX - fallback definition to header file - -2011-03-10 21:45 arthur - - * [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, - man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get - files ready for 0.8.1 release - -2011-03-10 20:35 arthur - - * [r1384] Makefile.am, common/tio.c, compat/Makefile.am, - compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c, - man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c, - nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py, - pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to - add missing years - -2011-03-09 22:33 arthur - - * [r1383] nslcd/pam.c: fix compiler warning - -2011-03-09 22:32 arthur - - * [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle - user-not-found errors when doing authentication (CVE-2011-0438) - -2011-03-06 15:58 arthur - - * [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py, - pynslcd/pynslcd.py: implement module for netgroup lookups - -2011-03-06 15:09 arthur - - * [r1380] pynslcd/Makefile.am, pynslcd/network.py, - pynslcd/pynslcd.py: add network name lookups - -2011-03-06 15:06 arthur - - * [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test - groups and add the arthur user to them to test whether all are - returned correctly - -2011-03-06 14:52 arthur - - * [r1378] Makefile.am: pass --enable-pynslcd with distcheck - -2011-03-06 14:52 arthur - - * [r1377] pynslcd/Makefile.am: clean up compiled python files - -2011-03-06 14:49 arthur - - * [r1376] pynslcd/host.py: fix search filter objectClass for hosts - -2011-03-06 14:23 arthur - - * [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that - session id is only logged while handling a connection - -2011-03-06 13:01 arthur - - * [r1374] man/nslcd.conf.5.xml: note that attribute mapping - expressions cannot be used for all attributes - -2011-02-14 21:12 arthur - - * [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py, - pynslcd/tio.py: implement module for hostname lookups - -2011-02-14 21:11 arthur - - * [r1372] pynslcd/ether.py: fix comment - -2011-02-14 21:08 arthur - - * [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add - missing files to installation - -2011-02-11 22:18 arthur - - * [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in - current FreeBSD packaging) - -2011-02-11 22:16 arthur - - * [r1369] nslcd/nslcd.c: create the directory for the socket and - pidfile - -2011-01-29 20:19 arthur - - * [r1368] man/nslcd.conf.5.xml: document a proper replacement for - pam_check_host_attr (thanks Luca Capello) and add a section on - quoting - -2011-01-29 20:15 arthur - - * [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c, - nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can - be used inside pam_authz_search filters - -2011-01-23 20:59 arthur - - * [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and - pam_check_host_attr options in manual page and indicate how - pam_authz_search replaces them - -2011-01-05 19:39 arthur - - * [r1365] AUTHORS, HACKING, configure.ac, debian/copyright, - nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd, - nss/prototypes.h: add FreeBSD support, partially imported from - the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and - Alexander V. Chernikov) - -2011-01-01 14:46 arthur - - * [r1364] nss/Makefile.am: put solnss.c under - EXTRA_nss_ldap_so_SOURCES - -2011-01-01 14:25 arthur - - * [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml, - man/pam_ldap.8.xml: add ids to options so we can more easily - reference them from elsewhere (especially useful for generated - HTML) - -2011-01-01 14:12 arthur - - * [r1362] nslcd/myldap.c: include definition of rc in all code - paths because it's used most of the time - -2011-01-01 14:10 arthur - - * [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression - to one that is supported by more shells - -2011-01-01 14:07 arthur - - * [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball - diff --git a/ChangeLog-2011 b/ChangeLog-2011 new file mode 100644 index 0000000..e1e1734 --- /dev/null +++ b/ChangeLog-2011 @@ -0,0 +1,744 @@ +2011-12-31 arthur + + * [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, + man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get + files ready for 0.8.5 release + +2011-12-30 arthur + + * [r1583] debian/control: fix versioned build dependency on + debhelper + +2011-12-28 arthur + + * [r1582] pynslcd/config.py.in: remove some information from config + that we don't expect to use + * [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py, + pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py: + support for reading the configuration file (not all options are + used though) + * [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state + variables (from command line) from the configuration to the main + module + * [r1579] pynslcd/pam.py: fall back to trying to authenticate with + provided password (in case rootpwmodpw is not set or unusable) + * [r1578] pynslcd/group.py: never request group members for + GroupByMemberRequest + * [r1577] pynslcd/group.py: instead of modifying attmap, modify + attribute list + * [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to + attmap (broken in r1571) + * [r1575] nslcd/nslcd.c: typo fix in comment + +2011-12-27 arthur + + * [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py, + pynslcd/passwd.py, pynslcd/shadow.py: make logging more + consistent and remove test bases from shadow and passwd maps + * [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py, + pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py, + pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes + * [r1572] debian/copyright: update copyright information + +2011-12-12 arthur + + * [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, + pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, + pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py, + pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the + search separately from the request + * [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, + pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, + pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py, + pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, + pynslcd/shadow.py: move check of required attributes and other + common tests to the Request.handle_entry() method + +2011-12-10 arthur + + * [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV + records + * [r1568] nslcd/nslcd.c: properly handle failures to truncate the + pid file + * [r1567] debian/nslcd.config: get the first configuration value + instead of the last because that one is also written + * [r1566] debian/nslcd.config: fix a deprecated use of head without + the -n option + * [r1565] debian/rules: enable more hardening options (-fPIE + doesn't work yet because we use -fPIC in some places) + * [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm: + ensure that the output of nss_list_configured() is space + separated + * [r1563] m4/ax_pthread.m4: update macro from autoconf-archive + +2011-12-09 jhrozek + + * [r1560] nslcd/myldap.c: Fix a typo in disconnect logic + +2011-12-01 arthur + + * [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are + properly initialised and log denied requests + +2011-11-30 arthur + + * [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only + loaded once after start-up + +2011-11-18 arthur + + * [r1556] debian/libnss-ldapd.config: simplification of logic to + overwrite list of enabled /etc/nsswitch.conf services in debconf + (based on r1555 of 0.7 branch) + +2011-10-12 arthur + + * [r1554] debian/control: add versioned dependency on libpam for + mutiarch support + * [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS + function by Tom Judge (taken from FreeBSD PR 154000) + +2011-10-10 arthur + + * [r1552] debian/rules: keep nslcd running during package upgrades + +2011-10-02 arthur + + * [r1551] nslcd/pam.c: reduce loglevel of user not found messages + to avoid spamming the logs with useless information (thanks Wakko + Warner) + +2011-09-30 jhrozek + + * [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c, + nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: + Use an explicit base of 10 for strtouid()/strtogid()/strtol() + calls + +2011-09-21 arthur + + * [r1546] debian/nslcd.config: treat the "hard" value for + tls_reqcert as if it was "demand" + +2011-09-14 arthur + + * [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm, + debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst: + make whitespace matching consistent in regular expressions + (thanks Nick) + +2011-09-09 arthur + + * [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c, + nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c, + nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c, + nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: + make validation log messages consistent + * [r1541] nslcd/nsswitch.c: add missing include + +2011-09-08 arthur + + * [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size + and consistency improvements to other buffers + * [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string + representations of addresses more logical names + +2011-09-07 arthur + + * [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv) + translation of debconf templates by Martin Bagge + +2011-09-04 arthur + + * [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac, + debian/changelog, debian/copyright, man/nslcd.8.xml, + man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for + 0.8.4 release + * [r1535] tests/test_getpeercred.c: warn when we couldn't get the + gid or pid, the uid is the only really interesting bit + * [r1534] tests/test_tio.c: add casts from size_t to int for printf + * [r1533] debian/rules: ignore failures in tests + * [r1532] debian/rules: use auto-detection for LDAP library and + defaults for config file, socket and pidfile (no changes) + +2011-09-03 arthur + + * [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst, + debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support + spaces before and after database name while parsing + /etc/nsswitch.conf and reduce the number of places where parsing + is done + +2011-08-30 arthur + + * [r1530] debian/nslcd.postinst: correctly handle leading and + trailing spaces in preseeded uri option (patch by Andreas B. + Mundt) + * [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and + LDAP_REFERRALS to configure.ac to ensure that tests from + configure see the same API + +2011-08-29 arthur + + * [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement + and use a strtoui() function if uid_t or gid_t is of size + unsigned int (thanks Jakub Hrozek) + * [r1527] pynslcd/Makefile.am: get rid of automake warning + * [r1526] configure.ac: silence autoconf warnings, patch by Jakub + Hrozek + * [r1525] debian/po/nl.po: some changes based on feedback by Jeroen + Schot + +2011-08-27 arthur + + * [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c, + nslcd/passwd.c: provide strtouid() and strtogid() functions that + use strtoul() or strtoull() (thanks Jakub Hrozek) + * [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c, + nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c: + check errno after calls to strtol() to ensure that numbers that + are too large for type will be reported (thanks Jakub Hrozek) + * [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated + callback structure to OpenLDAP because it doesn't make it's own + copy (thanks Jakub Hrozek) (fixes a problem in r1490) + * [r1521] debian/po/nl.po: some changes based on feedback by Paul + Gevers + +2011-08-26 arthur + + * [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation + * [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po, + debian/po/it.po, debian/po/nb.po, debian/po/nl.po, + debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small + formatting changes to header + +2011-08-25 arthur + + * [r1518] debian/po/es.po: updated Spanish (es) translation of + debconf templates by Francisco Javier Cuadrado + +2011-08-24 arthur + + * [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai) + * [r1515] nslcd/cfg.c: fix a problem with uninitialised memory + while parsing the tls_ciphers option (was broken in r853, similar + problem was fixed in r910, reported by Isaac Freeman) + * [r1514] debian/po/de.po: updated German (de) translation of + debconf templates by Chris Leick + * [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support + querying DNS SRV records from a different domain than the current + one (based on a patch by James M. Leddy) + +2011-08-23 arthur + + * [r1512] debian/po/cs.po: updated Czech (cs) translation of + debconf templates by Miroslav Kure + +2011-08-19 arthur + + * [r1511] debian/po/fr.po: typo fix provided by Christian Perrier + +2011-08-17 arthur + + * [r1510] AUTHORS: add new translators to AUTHORS file + * [r1509] debian/po/ja.po: updated Japanese (ja) translation of + debconf templates by Kenshi Muto + * [r1508] debian/po/pt.po: updated Portuguese (pt) translation of + debconf templates by Américo Monteiro + +2011-08-14 arthur + + * [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR) + translation of debconf templates by Denis Doria + * [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am: + split 2009 and 2010 changes to separate ChangeLog files + * [r1505] nss/networks.c: remove unused variable + * [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am: + put external libraries at the end when linking + * [r1503] configure.ac: remove some tests for symbols we aren't + using + * [r1502] debian/libnss-ldapd.lintian-overrides: add lintian + override for SONAME check + * [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR) + translation of debconf templates by Denis Doria + * [r1500] debian/po/da.po: update Danish (da) translation of + debconf templates by Joe Hansen + * [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf + templates by Slavko + * [r1498] debian/po/fr.po: updated French (fr) translation of + debconf templates by Christian Perrier + * [r1497] debian/po/ru.po: updated Russian (ru) translation of + debconf templates by Yuri Kozlov + +2011-08-10 arthur + + * [r1496] AUTHORS: fix spelling of name (sorry about that) + +2011-08-09 arthur + + * [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether + file should be reloaded + * [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po, + debian/po/de.po, debian/po/es.po, debian/po/fi.po, + debian/po/fr.po, debian/po/gl.po, debian/po/it.po, + debian/po/ja.po, debian/po/nb.po, debian/po/nl.po, + debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po, + debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po, + debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po + files + * [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small + language updates based on feedback by Justin B Rye + +2011-08-08 arthur + + * [r1492] debian/nslcd.templates: incorporate feedback on debconf + templates by debian-l10n-english@lists.debian.org (thanks Justin + B Rye and Christian PERRIER) + +2011-08-07 arthur + + * [r1491] Makefile.am, debian/compat, debian/control, + debian/libnss-ldapd.install, + debian/libnss-ldapd.lintian-overrides, + debian/libnss-ldapd.postinst, debian/libpam-ldapd.install, + debian/rules, debian/source/lintian-overrides: build Debian + packages with multiarch support + * [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a + connection callback to avoid timeout issues during the SSL + handshake (based on a patch by Stefan Völkel) + +2011-08-06 arthur + + * [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD + from http://www.gnu.org/software/autoconf-archive/ax_pthread.html + +2011-08-05 arthur + + * [r1488] pynslcd/group.py, tests/test_myldap.c: replace last + traces of groupOfUniqueNames + * [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c, + nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow + map queries LDAP before returning x as a password has for shadow + users + * [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh: + update tests with change of member/uniqueMember default change + (r1484) + * [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h, + nslcd/passwd.c: implementation of myldap_get_values_len() to use + ldap_get_values_len() instead of ldap_get_values() to fix some + problems with binary data in returned attribute values (patch by + Wesley Mason) + +2011-08-03 arthur + + * [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h, + nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to + using the member attribute by default instead of uniqueMember + +2011-07-21 arthur + + * [r1483] README: remove obsolete attribute from documentation + +2011-07-15 arthur + + * [r1482] debian/nslcd.init: on restart only log_end_msg once + +2011-07-04 arthur + + * [r1481] configure.ac: show the default value for the + pam-seclib-dir option + +2011-07-03 arthur + + * [r1480] compat/getpeercred.c: fix header + * [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for + systems with only PAM_AUTHTOK_RECOVER_ERR + +2011-07-02 arthur + + * [r1478] Makefile.am, debian/compat, debian/control, + debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update, + debian/nslcd.install, debian/pam-configs, + debian/pam-configs/ldap, debian/rules: switch to dh for + debian/rules and bump debhelper compatibility to 8 + * [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c, + nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent, + grow gidNumber buffer to hold larger numbers and small + consistency improvements + +2011-06-10 arthur + + * [r1475] nslcd/pam.c: correctly only check password expiration + when authenticating, only check account expiration when doing + authorisation check + +2011-06-05 arthur + + * [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in + pam_authz_search to see if they exist + * [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const + and don't free() data returned by cfg_getdomainname() + * [r1471] common/expr.c, tests/test_expr.c: handle expressions + where the expander function returns NULL (handle it as an empty + string) + * [r1470] nslcd/myldap.c: fix r1468 + * [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to + handle splitting attribute and value correctly + * [r1467] config.guess, config.sub: include updated files + +2011-05-23 arthur + + * [r1466] tests/test_common.c: add test case for two-character user + name + +2011-05-21 arthur + + * [r1464] nslcd/myldap.c: fix problem with partial attribute name + matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White + for the fix) + +2011-05-13 arthur + + * [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, + man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get + files ready for 0.8.3 release + * [r1461] debian/libnss-ldapd.postinst: don't unconditionally + restart nscd but just try to invalidate the cache for the maps + that change + * [r1460] debian/libnss-ldapd.config: correctly pick up current + configuration of /etc/nsswitch.conf when running dpkg-reconfigure + * [r1459] debian/control: upgrade to standards-version 3.9.2 + * [r1458] common/expr.c, common/expr.h: switch variable expander + function type name because _t suffix is reserved + * [r1457] debian/control, debian/nslcd.config: search for LDAP + server by looking for SRV _ldap._tcp DNS records and try to query + LDAP server for base DN during package configuration (based on + work by Petter Reinholdtsen for the sssd package) + * [r1456] debian/nslcd.config: fix domain to basedn expansion when + having more than two domain parts (patch by Per Carlson) + * [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, + pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, + pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, + pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, + pynslcd/shadow.py: simplify request handling by passing read + parameters around in a dict instead of setting object properties + (this mainly simplifies search filter building) + +2011-05-01 arthur + + * [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, + pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, + pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, + pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, + pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement + attribute mapping functionality and do some refactoring + * [r1453] pynslcd/pam.py: remove unneeded import + * [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, + pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, + pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, + pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn + and attributes to functions separately + * [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py: + small code improvements + +2011-04-30 arthur + + * [r1450] pam/common.h: make log message clearer when nslcd returns + an empty response (user not handled) + * [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP + server unavailable to PAM module + * [r1448] pam/pam.c: split setting up of configuration into + separate function + * [r1447] nslcd/pam.c: improve password change failed error message + * [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow + properties (similarly to what pam_unix does) in the PAM handling + code + * [r1445] pam/pam.c: do not attempt to change password as root when + changing an expired password + * [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no + match found + * [r1443] nslcd/pam.c: use the right DN in the pam_authz_search + option + * [r1442] nslcd/shadow.c: move code for getting shadow expiry + properties to a separate function + +2011-04-29 arthur + + * [r1441] nslcd/pam.c: move most of the code for building the + authorisation search into the try_autzsearch() function + * [r1440] nslcd.h, pam/pam.c: support more PAM status codes over + the nslcd protocol + * [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to + indicate no expiry (instead of a long time) + +2011-04-28 arthur + + * [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, + pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, + pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, + pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, + pynslcd/shadow.py: put standard library imports before + application imports and remove some unused imports + * [r1437] pynslcd/group.py: remove duplicate and wrong write() + method + +2011-04-24 arthur + + * [r1436] nslcd/pam.c: make request indicator shorter + * [r1435] nslcd.h: document use of returned authorisation message + * [r1434] nslcd/pam.c: no longer use the userdn parameter passed + along with each request (this may mean one or two more lookups + when doing authentication but simplifies things) + * [r1433] tests/test_pamcmds.expect: improve handling of + test_login_unknown + +2011-04-22 arthur + + * [r1431] nslcd/myldap.c: report correct reported error from + ldap_abandon() + +2011-04-18 arthur + + * [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of + RTLD_NODELETE + * [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE + +2011-04-16 arthur + + * [r1428] nslcd.conf: add example configuration provided by Wesley + Mason + +2011-04-15 arthur + + * [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h, + configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement + implementation for strndup() for systems that don't have it + * [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing + from r1425) + * [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h, + nslcd/group.c, nslcd/passwd.c: support using the objectSid + attribute to provide numeric user and group ids, based on a patch + by Wesley Mason + * [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect, + tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests + from another directory + +2011-04-03 arthur + + * [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and + group name validation errors a little more informative + +2011-03-31 arthur + + * [r1422] AUTHORS: add some people who seemed to be missing from + the AUTHORS file + * [r1421] common/tio.c: tv_usec in struct timeval must be lower + than 1000000 (patch by SATOH Fumiyasu) + * [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of + $(INSTALL_DATA) -D because -D is not supported on all operating + systems (patch by SATOH Fumiyasu) + * [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of + only two characters + +2011-03-26 arthur + + * [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, + man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get + files ready for 0.8.2 release + * [r1416] tests/Makefile.am, tests/test_nsscmds.sh, + tests/test_pamcmds.sh: ensure that all test source files are + distibuted and can tests can be run when source directory differs + from build directory + * [r1415] pynslcd/common.py: sync validname regular expression with + nslcd + +2011-03-25 arthur + + * [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait + for all worker threads to finish before exiting (but wait a few + seconds on platforms with pthread_timedjoin_np()) + * [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c, + tests/test_myldap.c: re-organise tests somewhat making things + more consistent + * [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate + patch by Daniel Dehennin to not loose debconf values of + previously set options with dpkg-reconfigure + * [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c, + nslcd/cfg.h, nslcd/common.c, tests/Makefile.am, + tests/test_common.c: implement a validnames option that can be + used to fine-tune the test for valid user and group names using a + regular expression + +2011-03-24 arthur + + * [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py, + pynslcd/service.py: implement service, protocol and rpc lookups + * [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where + the RDN is for some reason not in the cn + * [r1408] pynslcd/pam.py: fix configuration name + * [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains + of previous value is gone + +2011-03-23 arthur + + * [r1406] pynslcd/host.py: fix use of spaces + * [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of + files + * [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a + definition of daemon() for systems that lack it + * [r1402] compat/ether.h: typo fix in comment + +2011-03-19 arthur + + * [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests, + tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c: + more tests and general test improvements + * [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c, + nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small + code improvements + * [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality + that isn't used + +2011-03-18 arthur + + * [r1398] tests, tests/Makefile.am, tests/in_testenv.sh, + tests/test_nsscmds.sh, tests/test_pamcmds.expect, + tests/test_pamcmds.sh: implement test cases for some of the + common PAM actions (test environment required for this) + +2011-03-17 arthur + + * [r1397] configure.ac, tests/Makefile.am, tests/common.h, + tests/test_cfg.c, tests/test_common.c, tests/test_expr.c, + tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c: + put all assertion functions and compatibility code into one + header file + * [r1396] nslcd.conf: put idle_timelimit option in Active Directory + example with low enough default + +2011-03-16 arthur + + * [r1395] tests/Makefile.am, tests/test_aliases.c, + tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c, + tests/test_netgroup.c, tests/test_networks.c, + tests/test_nslcd_group.c, tests/test_passwd.c, + tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c, + tests/test_shadow.c: remove legacy test code that is no longer + used + +2011-03-14 arthur + + * [r1394] pam/pam.c: check for user existence before trying + password change + * [r1393] common/tio.c: fix a problem in the timeout paramater that + was being passed to select() and could contain too many µsec + (fixes Solaris runtime issue) + +2011-03-13 arthur + + * [r1392] tests/test_nsscmds.sh: fix name of script in header + +2011-03-12 arthur + + * [r1391] configure.ac: include the resolv library for hstrerror() + on platforms that need it (thanks Peter Bray) + * [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX + fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX + (thanks Peter Bray) + +2011-03-11 arthur + + * [r1389] Makefile.am: ensure that permissions are sane in the + distributed tarball + * [r1388] nslcd/myldap.c: fix problem with endless loop on + incorrect password + * [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX + fallback definition to header file + +2011-03-10 arthur + + * [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, + man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get + files ready for 0.8.1 release + * [r1384] Makefile.am, common/tio.c, compat/Makefile.am, + compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c, + man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c, + nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py, + pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to + add missing years + +2011-03-09 arthur + + * [r1383] nslcd/pam.c: fix compiler warning + * [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle + user-not-found errors when doing authentication (CVE-2011-0438) + +2011-03-06 arthur + + * [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py, + pynslcd/pynslcd.py: implement module for netgroup lookups + * [r1380] pynslcd/Makefile.am, pynslcd/network.py, + pynslcd/pynslcd.py: add network name lookups + * [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test + groups and add the arthur user to them to test whether all are + returned correctly + * [r1378] Makefile.am: pass --enable-pynslcd with distcheck + * [r1377] pynslcd/Makefile.am: clean up compiled python files + * [r1376] pynslcd/host.py: fix search filter objectClass for hosts + * [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that + session id is only logged while handling a connection + * [r1374] man/nslcd.conf.5.xml: note that attribute mapping + expressions cannot be used for all attributes + +2011-02-14 arthur + + * [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py, + pynslcd/tio.py: implement module for hostname lookups + * [r1372] pynslcd/ether.py: fix comment + * [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add + missing files to installation + +2011-02-11 arthur + + * [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in + current FreeBSD packaging) + * [r1369] nslcd/nslcd.c: create the directory for the socket and + pidfile + +2011-01-29 arthur + + * [r1368] man/nslcd.conf.5.xml: document a proper replacement for + pam_check_host_attr (thanks Luca Capello) and add a section on + quoting + * [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c, + nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can + be used inside pam_authz_search filters + +2011-01-23 arthur + + * [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and + pam_check_host_attr options in manual page and indicate how + pam_authz_search replaces them + +2011-01-05 arthur + + * [r1365] AUTHORS, HACKING, configure.ac, debian/copyright, + nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd, + nss/prototypes.h: add FreeBSD support, partially imported from + the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and + Alexander V. Chernikov) + +2011-01-01 arthur + + * [r1364] nss/Makefile.am: put solnss.c under + EXTRA_nss_ldap_so_SOURCES + * [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml, + man/pam_ldap.8.xml: add ids to options so we can more easily + reference them from elsewhere (especially useful for generated + HTML) + * [r1362] nslcd/myldap.c: include definition of rc in all code + paths because it's used most of the time + * [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression + to one that is supported by more shells + * [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball + diff --git a/Makefile.am b/Makefile.am index 04db2d5..f0ad039 100644 --- a/Makefile.am +++ b/Makefile.am @@ -64,7 +64,7 @@ dist-hook: # target for generating the ChangeLog file changelog: - svn2cl -i -r HEAD:1359 + svn2cl -i -r HEAD:1586 flawfinder.html: flawfinder --quiet --html --context --followdotdir . > $@ -- cgit v1.2.3