2012-10-14 16:09  arthur

	* [r1797] configure.ac: remove extra code that sets PACKAGE_URL
	  (which isn't used)

2012-10-14 15:20  arthur

	* [r1796] nss/netgroup.c: do not clear the netgroup struct because
	  it contains information for others as well (fixes r1767)

2012-10-14 14:51  arthur

	* [r1795] nslcd/nslcd.c: if nslcd creates the state directory, try
	  to set the right ownership

2012-10-13 21:41  arthur

	* [r1794] nss/passwd.c: include missing definition (fixes r1793)

2012-10-13 21:38  arthur

	* [r1793] nss/passwd.c: do proper range checking and replace
	  READ_RESULT macro with read_result function (Solaris)

2012-10-13 21:14  arthur

	* [r1792] nss/hosts.c: return correct error for buffer too small
	  (Solaris)

2012-10-13 21:08  arthur

	* [r1791] HACKING, nss/ethers.c: in ether handling only write to
	  output values and return correct error for buffer too small

2012-10-13 21:05  arthur

	* [r1790] nss/common.h: on Solaris initialise the output values

2012-10-13 20:03  arthur

	* [r1789] nss/common.h: fix code indentation

2012-10-13 13:35  arthur

	* [r1787] tests/common.h: provide alternatives for assertion
	  failures on Solaris and FreeBSD

2012-10-13 13:04  arthur

	* [r1786] Makefile.am: pass CPPFLAGS and LDFLAGS to distcheck's
	  configure and put nslcd.conf under prefix

2012-10-13 13:02  arthur

	* [r1785] pynslcd/Makefile.am: use $(top_srcdir)/nslcd.h instead of
	  $< to avoid problems with FreeBSD's make

2012-10-13 12:15  arthur

	* [r1784] tests/test_tio.c: update tests to new tio interface
	  (fixes r1783)

2012-10-12 19:49  arthur

	* [r1783] common/nslcd-prot.c, common/tio.c, common/tio.h,
	  nslcd/nslcd.c: use poll() instead of select() for checking file
	  descriptor activity to also correctly work if more than
	  FD_SETSIZE files are already open

2012-10-12 15:25  arthur

	* [r1781] common/tio.c: check if the file descriptor can be stored
	  in the select() file descriptor set

2012-10-12 15:11  arthur

	* [r1780] README: small clarifications to shadow properties

2012-09-16 15:57  arthur

	* [r1771] nslcd/passwd.c: fix problem storing negative hit to
	  dn2uid cache (thanks scan-build)

2012-09-16 15:51  arthur

	* [r1770] nslcd/myldap.c: fix logic error when falling back to
	  getting ranged attribute values for possibly binary attributes
	  (thanks scan-build)

2012-09-16 15:47  arthur

	* [r1769] nslcd/myldap.c: swap values and buf assignment to avoid
	  compiler alignment warnings

2012-09-15 18:18  arthur

	* [r1768] nslcd/passwd.c: only check nsswitch.conf for shadow
	  mapping on glibc (Solaris shadow map follows passwd's mapping and
	  FreeBSD doesn't have shadow at all)

2012-09-15 17:51  arthur

	* [r1767] nss/aliases.c, nss/ethers.c, nss/group.c, nss/hosts.c,
	  nss/netgroup.c, nss/networks.c, nss/passwd.c, nss/protocols.c,
	  nss/rpc.c, nss/services.c, nss/shadow.c: clear the *ent structs
	  before writing fields to avoid problems with extra fields (fixes
	  password field weirdness on Solaris 10)

2012-09-14 21:08  arthur

	* [r1766] nss/hosts.c: fix host name lookups for Solaris (tested
	  with Solaris 10)

2012-09-14 18:57  arthur

	* [r1765] nss/ethers.c: use the standard constructor and destructor
	  eventhough be->fp isn't used

2012-09-14 18:54  arthur

	* [r1764] nss/ethers.c: fix ethernet lookups for Solaris (tested
	  with Solaris 10)

2012-09-14 12:25  arthur

	* [r1763] nslcd/alias.c, nslcd/ether.c, nslcd/group.c,
	  nslcd/host.c, nslcd/netgroup.c, nslcd/network.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  grow all search filter buffers to 4096 bytes (thanks flavio)

2012-09-14 12:23  arthur

	* [r1762] nslcd/pam.c: rename filter_buffer to filter for
	  consistency

2012-09-08 19:20  arthur

	* [r1761] ChangeLog, ChangeLog-2011, Makefile.am: archive older
	  ChangeLog entries in year files

2012-09-03 21:15  arthur

	* [r1749] nss/group.c: a few fixes in the Solaris group lookups

2012-09-03 21:07  arthur

	* [r1748] nss/common.h, nss/passwd.c: fix indenting of code

2012-09-03 21:04  arthur

	* [r1747] nss/ethers.c, nss/group.c, nss/hosts.c, nss/netgroup.c,
	  nss/networks.c, nss/passwd.c, nss/protocols.c, nss/rpc.c,
	  nss/services.c, nss/shadow.c: on Solaris store the errno value in
	  NSS_ARGS(args)->erange

2012-09-01 21:25  arthur

	* [r1746] compat/pam_get_authtok.c: include a missing cast

2012-09-01 20:17  arthur

	* [r1745] nslcd/myldap.c: provide an alternative do_rebind() for
	  Netscape LDAP

2012-09-01 20:14  arthur

	* [r1744] nslcd/nslcd.c: include an explicit cast to int when
	  printing gid_t (fixes r1723)

2012-08-31 09:07  arthur

	* [r1736] depcomp: mark file as executable

2012-08-31 08:30  arthur

	* [r1735] man/nslcd.conf.5.xml, nslcd/cfg.c, pynslcd/cfg.py: change
	  the default value of sasl_canonicalize to yes (thanks Marcus
	  Moeller)

2012-08-14 19:45  arthur

	* [r1734] nslcd/myldap.c: remove variable definition that was
	  introduced in r1626 but should have been removed in r1714

2012-08-14 19:34  arthur

	* [r1733] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/myldap.c, pynslcd/cfg.py, pynslcd/pynslcd.py: introduce a
	  sasl_canonicalize option that will now, by default, disable
	  reverse host name lookups in OpenLDAP

2012-07-23 21:52  arthur

	* [r1731] nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c: ensure
	  that all places where stdint.h is included it is surrounded by
	  #ifdefs

2012-07-21 21:33  arthur

	* [r1725] nslcd/common.h: only inlude stdint.h if we have it

2012-07-21 21:29  arthur

	* [r1724] nslcd/common.h: add missing includes to ensure all types
	  are defined in header

2012-07-20 12:27  arthur

	* [r1723] configure.ac, nslcd/cfg.c, nslcd/cfg.h, nslcd/nslcd.c,
	  pynslcd/pynslcd.py: on startup have the gid option default to the
	  primary group of the specified user and load the user's
	  supplementary groups

2012-07-20 11:00  arthur

	* [r1722] Makefile.am, ldapns.ldif: add an LDIF version of the
	  ldapns.schema schema file

2012-07-15 19:24  arthur

	* [r1721] pynslcd/pynslcd.py: avoid setting tls_randfile twice and
	  remove fixed FIXME (fixed in r1717)

2012-07-15 19:20  arthur

	* [r1720] pynslcd/pynslcd.py: set the pynslcd process name if
	  possible

2012-07-15 13:02  arthur

	* [r1719] pynslcd/cfg.py: support getting
	  pam_password_prohibit_message from configuration (but don't
	  handle it yet)

2012-07-15 12:59  arthur

	* [r1718] pynslcd/cfg.py, pynslcd/pam.py: rename internal
	  pam_authz_search to pam_authz_searches

2012-07-15 12:47  arthur

	* [r1717] pynslcd/pynslcd.py: properly set most LDAP options from
	  configuration

2012-07-11 21:21  arthur

	* [r1716] pam/pam.c: also check pam_password_prohibit_message in
	  pam_sm_authenticate() because Solaris does authentication before
	  pam_sm_chauthtok() (thanks Ted Cheng)

2012-07-08 08:26  arthur

	* [r1715] man/nslcd.conf.5.xml, nslcd.h, nslcd/Makefile.am,
	  nslcd/cfg.c, nslcd/cfg.h, nslcd/common.h, nslcd/config.c,
	  nslcd/nslcd.c, nslcd/pam.c, pam/pam.c: implement a
	  pam_password_prohibit_message nslcd.conf option to deny password
	  change introducing a NSLCD_ACTION_CONFIG_GET request thanks to
	  Ted Cheng

2012-07-08 07:17  arthur

	* [r1714] nslcd/myldap.c: remove duplicate getting of
	  LDAP_OPT_DIAGNOSTIC_MESSAGE (should have been part of r1639)

2012-07-07 15:35  arthur

	* [r1713] AUTHORS, pynslcd/Makefile.am: ensure that cache.py is
	  installed (thanks Jon Severinsson)

2012-06-29 09:56  arthur

	* [r1707] ChangeLog, NEWS, TODO, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.10 release

2012-06-29 09:55  arthur

	* [r1706] config.sub: update from latest automake

2012-06-17 09:25  arthur

	* [r1705] HACKING: minor documentation touch-ups

2012-06-15 21:29  arthur

	* [r1704] Makefile.am: install the default configuration file with
	  reduced permissions (further protection for CVE-2009-1073)

2012-06-15 21:15  arthur

	* [r1703] nslcd/pam.c: log successful password change in nslcd and
	  correctly terminate protocol on password change failure

2012-06-15 21:04  arthur

	* [r1702] pam/pam.c: fix problem with returning wrong error code
	  when changing password with wrong old password (thanks Anton
	  Helwart)

2012-05-25 09:04  arthur

	* [r1701] README: reword section on bug reporting and add a
	  reference to the ignorecase option on the case sensitivity
	  section

2012-05-25 08:47  arthur

	* [r1700] HACKING: include list of required libraries and do not
	  put information on AUTHORS file on the patch requirements

2012-05-20 20:35  arthur

	* [r1695] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.9 release

2012-05-20 19:53  arthur

	* [r1694] nslcd/cfg.c, nslcd/common.c, nslcd/group.c,
	  nslcd/passwd.c, nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c,
	  nslcd/shadow.c: implement extra range checking of all numeric
	  values

2012-05-18 14:21  arthur

	* [r1693] configure.ac, nslcd/myldap.c, nslcd/nslcd.c,
	  nss/bsdnss.c: get rid of a few compiler warnings on FreeBSD

2012-05-11 12:27  arthur

	* [r1690] compat/nss_compat.h, configure.ac: provide a
	  compatibility version of struct spwd for systems without it

2012-05-11 09:28  arthur

	* [r1688] compat/socket.h: fix fallback definition of SUN_LEN()
	  (fixes r1686)

2012-05-09 20:16  arthur

	* [r1686] common/nslcd-prot.c, compat/Makefile.am,
	  compat/nss_compat.h, compat/socket.h, nslcd/nslcd.c: provide a
	  compatibility definition of SUN_LEN() for systems that lack it

2012-05-09 19:47  arthur

	* [r1685] nslcd/nslcd.c: remove duplicate debug from log message

2012-05-04 21:24  arthur

	* [r1684] pynslcd/pam.py: implement PAM authorisation check using
	  pam_authz_search option

2012-05-04 20:20  arthur

	* [r1683] pynslcd/pam.py: ignore user-supplied DN for PAM requests
	  and don't send it back

2012-05-04 20:13  arthur

	* [r1682] pynslcd/Makefile.am, pynslcd/attmap.py, pynslcd/cfg.py,
	  pynslcd/expr.py: move expression handling to own module

2012-05-04 20:10  arthur

	* [r1681] pynslcd/common.py: ensure search also works without
	  attribute map

2012-05-04 20:06  arthur

	* [r1680] pynslcd/cfg.py: small code style improvements

2012-05-04 13:36  arthur

	* [r1679] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/pam.c, pynslcd/cfg.py: allow the pam_authz_search option to
	  be specified multiple times

2012-05-04 13:31  arthur

	* [r1678] nslcd/nslcd.c: don't try to close _SC_OPEN_MAX file
	  descriptor

2012-05-02 21:11  arthur

	* [r1677] compat/pam_compat.h, compat/pam_get_authtok.c: move all
	  PAM_AUTHTOK_RECOVERY_ERR compatibility definitions to
	  compat/pam_compat.h

2012-04-29 20:46  arthur

	* [r1673] README: documentation touch-ups

2012-04-27 07:56  arthur

	* [r1662] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.8 release

2012-04-27 07:37  arthur

	* [r1660] Makefile.am, ldapns.schema: add a schema file that some
	  people use for PAM

2012-04-26 19:42  arthur

	* [r1659] common/tio.c, common/tio.h, nss/common.h: split the
	  functionality to read everything from the stream into a separate
	  function and don't assume we use non-blocking IO (fix r1637)

2012-04-26 19:39  arthur

	* [r1658] tests/test_pamcmds.expect: support alternative unknown
	  user response

2012-04-22 19:28  arthur

	* [r1653] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.7 release

2012-04-09 13:48  arthur

	* [r1649] compile, depcomp: update files from recent automake

2012-03-23 10:18  arthur

	* [r1643] nslcd/pam.c: increase buffer for pam_authz_search as
	  suggested by Chris J Arges

2012-03-16 15:00  arthur

	* [r1642] pynslcd/attmap.py: support the upper and lower functions
	  in attribute mapping expressions

2012-03-16 13:53  arthur

	* [r1641] pynslcd/attmap.py, pynslcd/common.py, pynslcd/pam.py:
	  refactor some of the attribute mapping code to introduce a
	  mapping instance that does the hard work and support the lower()
	  and upper() attribute mapping functions

2012-03-16 12:48  arthur

	* [r1640] pynslcd/pynslcd.py: implement a getpeercred() function

2012-03-16 09:46  arthur

	* [r1639] nslcd/myldap.c: always try to log the ldap error, the
	  diagnostic message and errno if available in a consistent format

2012-03-16 08:28  arthur

	* [r1638] nss/common.h: put both tio_skip() and tio_close() within
	  if (fixes r1637) and clarify documentation of one part of the
	  code

2012-03-14 20:31  arthur

	* [r1637] common/tio.c, common/tio.h, nss/common.h: read any
	  remaining available data from the stream when closing the
	  connection in a normal way to prevent Broken pipe messages in
	  nslcd

2012-03-14 20:26  arthur

	* [r1636] common/tio.c: ensure that we don't try to read more than
	  SSIZE_MAX bytes

2012-03-13 19:32  arthur

	* [r1635] AUTHORS, man/nslcd.conf.5.xml: document the fact that
	  each thread opens it's own connection (patch by Chris Hiestand)

2012-03-13 18:29  arthur

	* [r1634] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/common.h, nslcd/group.c, nslcd/netgroup.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  make whether or not to do case-sensitive filtering configurable
	  (patch by Matthew L. Dailey)

2012-03-13 18:03  arthur

	* [r1633] compile, config.guess, config.sub, missing: update from
	  latest automake

2012-03-10 20:57  arthur

	* [r1632] nslcd/cfg.c: when doing DNS queries for SRV records
	  recognise default ldap and ldaps ports

2012-03-10 20:41  arthur

	* [r1631] nslcd/common.h: add missing include for
	  _POSIX_HOST_NAME_MAX (thanks Mel Flynn)

2012-03-10 20:17  arthur

	* [r1628] nslcd/pam.c: fix log message for invalid pam_authz_search
	  as reported by Matt Rae

2012-03-05 22:27  arthur

	* [r1627] nslcd/myldap.c: remove extra newline from log message

2012-03-05 21:53  arthur

	* [r1626] compat/ldap_compat.h, nslcd/myldap.c: provide more
	  detailed logging information for ldap_start_tls_s() failures
	  (based on a patch by Mel Flynn)

2012-02-29 21:44  arthur

	* [r1625] nslcd/myldap.c: log the first 10 search results in debug
	  mode to make debugging easier (patch by Matthijs Kooijman)

2012-02-29 21:26  arthur

	* [r1624] README, nslcd/nslcd.c: update copyright years

2012-01-29 15:37  arthur

	* [r1616] ChangeLog, NEWS, configure.ac, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.6 release

2012-01-29 15:13  arthur

	* [r1615] pynslcd/alias.py, pynslcd/cache.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: implement a naive offline cache

2012-01-29 14:50  arthur

	* [r1614] pynslcd/group.py: small simplification in group lookups
	  (member attributes are not requested anyway)

2012-01-29 14:39  arthur

	* [r1613] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: split the
	  result handling into a convert() and write() step

2012-01-20 20:08  arthur

	* [r1611] nslcd/netgroup.c, pynslcd/pynslcd.py: formatting fixes

2012-01-20 16:18  arthur

	* [r1605] nslcd/nslcd.c: clarify error messages and fix typo in
	  comment

2012-01-20 16:01  arthur

	* [r1604] Makefile.am, debian: separate the Debian packaging from
	  main sources switching to non-native Debian package (using
	  svn-buildpackage)

2012-01-20 15:43  arthur

	* [r1603] pynslcd/Makefile.am: add missing Python modules to
	  tarball

2012-01-17 19:41  arthur

	* [r1597] AUTHORS, nss/bsdnss.c: FreeBSD compilation fixes by Maxim
	  Vetrov

2012-01-17 19:38  arthur

	* [r1596] common/nslcd-prot.c, nslcd/nslcd.c: pass the correct size
	  of named socket address (fixes FreeBSD issue, fixes r1295)

2012-01-16 21:17  arthur

	* [r1595] INSTALL, compile, depcomp, install-sh, py-compile: update
	  files from recent automake

2012-01-09 12:15  jhrozek

	* [r1594] nslcd/common.c: Add a matching va_end() for va_start() in
	  mysnprintf()

2012-01-09 12:11  jhrozek

	* [r1593] nslcd/myldap.c: Warn if ldap_set_option() fails for
	  LDAP_OPT_ERROR_NUM

2012-01-09 12:10  jhrozek

	* [r1592] nslcd/nslcd.c: Warn if fd cannot be closed in is_locked()

2012-01-09 12:07  jhrozek

	* [r1591] nslcd/netgroup.c: Check NULL return in write_netgroup()

2012-01-09 12:04  jhrozek

	* [r1590] nslcd/pam.c: Do not leak memory if myldap_escape() fails

2012-01-09 11:54  jhrozek

	* [r1589] nslcd/pam.c: Return from update_username() if
	  myldap_get_values() returns invalid value
	  
	  If myldap_get_values() failed for the attmap_passwd_uid,
	  nss-pam-ldapd
	  would dereference a NULL pointer.

2012-01-06 13:59  arthur

	* [r1588] pynslcd/alias.py, pynslcd/cfg.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/mypidfile.py, pynslcd/netgroup.py, pynslcd/network.py,
	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/pynslcd.py, pynslcd/rpc.py: user the logging framework,
	  handle exceptions properly and some cleanups

2012-01-05 21:30  arthur

	* [r1587] debian/po/zh_CN.po: updated Simplified Chinese (zh_CN)
	  translation of debconf templates by zym

2012-01-02 20:46  arthur

	* [r1586] debian/po/nb.po: updated Norwegian Bokmål (nb)
	  translation of debconf templates by Bjørn Steensrud