From 35b169178f052af069cd2c65159d71987a97708e Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Fri, 13 May 2011 13:10:48 +0000 Subject: get files ready for 0.8.3 release git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1462 ef36b2f9-881f-0410-afb5-c4e39611909c --- TODO | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) (limited to 'TODO') diff --git a/TODO b/TODO index 6b2ebfc..857331e 100644 --- a/TODO +++ b/TODO @@ -2,20 +2,15 @@ * add sanity checking code (e.g. not too large buffer allocation and checking that host, user, etc do not contain funky characters) in all server modules * log some statistics: "passwd=100 shadow=10 host=20 rpc=10" (10 req/minute) -* in the server: once the request is done pass the flushing of the buffers to - a separate thread so our workers are available to handle new requests - (test whether this actually improves performace) * add an option to create an extra socket somewhere (so it may be used in chroot jails) * make I/O timeout between NSS lib and daemon configurable with configure -* ethers: also look in ipHostNumber attribute to look up an IPv4 (IPv6) - address and return it as an alternative entry (investigate whether this is - sane) * protocols/rpc: the description attribute should be used as an alias? * review changes in nss_ldap and merge any useful changes * maybe rate-limit LDAP entry warnings * setnetgrent() may need to return an error if the netgroup is undefined -* handle repeated calls to getent() better (see http://bugzilla.padl.com/show_bug.cgi?id=376) +* handle repeated calls to getent() better + (see http://bugzilla.padl.com/show_bug.cgi?id=376) * make it possible to start nslcd real early in the boot process and have it become available when it determines it can (other timeout/retry mechanism on startup) @@ -28,4 +23,8 @@ * properly test Solaris support * fix buffer handling in read_**string() functions (Solaris support) * complete pynslcd implementation -* in nslcd/pam.c check shadow properties if present +* implement chsh and chfn in nslcd PAM code and make chsh.ldap and chfn.ldap + binaries +* have nslcd flush the nscd caches when reconnecting to the LDAP server after + an error +* have PAM code support password policy of server (see pam_ldap) -- cgit v1.2.3