2011-05-13 13:02 arthur * [r1461] debian/libnss-ldapd.postinst: don't unconditionally restart nscd but just try to invalidate the cache for the maps that change 2011-05-13 13:01 arthur * [r1460] debian/libnss-ldapd.config: correctly pick up current configuration of /etc/nsswitch.conf when running dpkg-reconfigure 2011-05-13 12:41 arthur * [r1459] debian/control: upgrade to standards-version 3.9.2 2011-05-13 12:15 arthur * [r1458] common/expr.c, common/expr.h: switch variable expander function type name because _t suffix is reserved 2011-05-13 11:57 arthur * [r1457] debian/control, debian/nslcd.config: search for LDAP server by looking for SRV _ldap._tcp DNS records and try to query LDAP server for base DN during package configuration (based on work by Petter Reinholdtsen for the sssd package) 2011-05-13 07:48 arthur * [r1456] debian/nslcd.config: fix domain to basedn expansion when having more than two domain parts (patch by Per Carlson) 2011-05-13 07:04 arthur * [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: simplify request handling by passing read parameters around in a dict instead of setting object properties (this mainly simplifies search filter building) 2011-05-01 19:08 arthur * [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py, pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement attribute mapping functionality and do some refactoring 2011-05-01 12:18 arthur * [r1453] pynslcd/pam.py: remove unneeded import 2011-05-01 12:14 arthur * [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn and attributes to functions separately 2011-05-01 12:06 arthur * [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py: small code improvements 2011-04-30 21:28 arthur * [r1450] pam/common.h: make log message clearer when nslcd returns an empty response (user not handled) 2011-04-30 21:26 arthur * [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP server unavailable to PAM module 2011-04-30 21:01 arthur * [r1448] pam/pam.c: split setting up of configuration into separate function 2011-04-30 19:54 arthur * [r1447] nslcd/pam.c: improve password change failed error message 2011-04-30 14:37 arthur * [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow properties (similarly to what pam_unix does) in the PAM handling code 2011-04-30 09:15 arthur * [r1445] pam/pam.c: do not attempt to change password as root when changing an expired password 2011-04-30 08:39 arthur * [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no match found 2011-04-30 08:12 arthur * [r1443] nslcd/pam.c: use the right DN in the pam_authz_search option 2011-04-30 08:00 arthur * [r1442] nslcd/shadow.c: move code for getting shadow expiry properties to a separate function 2011-04-29 21:06 arthur * [r1441] nslcd/pam.c: move most of the code for building the authorisation search into the try_autzsearch() function 2011-04-29 18:21 arthur * [r1440] nslcd.h, pam/pam.c: support more PAM status codes over the nslcd protocol 2011-04-29 18:19 arthur * [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to indicate no expiry (instead of a long time) 2011-04-28 18:47 arthur * [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: put standard library imports before application imports and remove some unused imports 2011-04-28 18:32 arthur * [r1437] pynslcd/group.py: remove duplicate and wrong write() method 2011-04-24 21:01 arthur * [r1436] nslcd/pam.c: make request indicator shorter 2011-04-24 20:54 arthur * [r1435] nslcd.h: document use of returned authorisation message 2011-04-24 20:52 arthur * [r1434] nslcd/pam.c: no longer use the userdn parameter passed along with each request (this may mean one or two more lookups when doing authentication but simplifies things) 2011-04-24 20:26 arthur * [r1433] tests/test_pamcmds.expect: improve handling of test_login_unknown 2011-04-22 10:02 arthur * [r1431] nslcd/myldap.c: report correct reported error from ldap_abandon() 2011-04-18 21:30 arthur * [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of RTLD_NODELETE 2011-04-18 20:53 arthur * [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE 2011-04-16 14:00 arthur * [r1428] nslcd.conf: add example configuration provided by Wesley Mason 2011-04-15 21:20 arthur * [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h, configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement implementation for strndup() for systems that don't have it 2011-04-15 21:20 arthur * [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing from r1425) 2011-04-15 21:16 arthur * [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h, nslcd/group.c, nslcd/passwd.c: support using the objectSid attribute to provide numeric user and group ids, based on a patch by Wesley Mason 2011-04-15 19:10 arthur * [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect, tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests from another directory 2011-04-03 21:10 arthur * [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and group name validation errors a little more informative 2011-03-31 20:50 arthur * [r1422] AUTHORS: add some people who seemed to be missing from the AUTHORS file 2011-03-31 20:22 arthur * [r1421] common/tio.c: tv_usec in struct timeval must be lower than 1000000 (patch by SATOH Fumiyasu) 2011-03-31 20:16 arthur * [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of $(INSTALL_DATA) -D because -D is not supported on all operating systems (patch by SATOH Fumiyasu) 2011-03-31 19:16 arthur * [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of only two characters 2011-03-26 20:51 arthur * [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for 0.8.2 release 2011-03-26 16:16 arthur * [r1416] tests/Makefile.am, tests/test_nsscmds.sh, tests/test_pamcmds.sh: ensure that all test source files are distibuted and can tests can be run when source directory differs from build directory 2011-03-26 14:36 arthur * [r1415] pynslcd/common.py: sync validname regular expression with nslcd 2011-03-25 21:39 arthur * [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait for all worker threads to finish before exiting (but wait a few seconds on platforms with pthread_timedjoin_np()) 2011-03-25 16:15 arthur * [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c, tests/test_myldap.c: re-organise tests somewhat making things more consistent 2011-03-25 16:08 arthur * [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate patch by Daniel Dehennin to not loose debconf values of previously set options with dpkg-reconfigure 2011-03-25 13:30 arthur * [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h, nslcd/common.c, tests/Makefile.am, tests/test_common.c: implement a validnames option that can be used to fine-tune the test for valid user and group names using a regular expression 2011-03-24 22:19 arthur * [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py, pynslcd/service.py: implement service, protocol and rpc lookups 2011-03-24 22:18 arthur * [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where the RDN is for some reason not in the cn 2011-03-24 22:15 arthur * [r1408] pynslcd/pam.py: fix configuration name 2011-03-24 22:09 arthur * [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains of previous value is gone 2011-03-23 21:55 arthur * [r1406] pynslcd/host.py: fix use of spaces 2011-03-23 21:43 arthur * [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of files 2011-03-23 21:28 arthur * [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a definition of daemon() for systems that lack it 2011-03-23 20:30 arthur * [r1402] compat/ether.h: typo fix in comment 2011-03-19 15:14 arthur * [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests, tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c: more tests and general test improvements 2011-03-19 15:14 arthur * [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c, nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small code improvements 2011-03-19 15:13 arthur * [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality that isn't used 2011-03-18 14:33 arthur * [r1398] tests, tests/Makefile.am, tests/in_testenv.sh, tests/test_nsscmds.sh, tests/test_pamcmds.expect, tests/test_pamcmds.sh: implement test cases for some of the common PAM actions (test environment required for this) 2011-03-17 21:02 arthur * [r1397] configure.ac, tests/Makefile.am, tests/common.h, tests/test_cfg.c, tests/test_common.c, tests/test_expr.c, tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c: put all assertion functions and compatibility code into one header file 2011-03-17 21:01 arthur * [r1396] nslcd.conf: put idle_timelimit option in Active Directory example with low enough default 2011-03-16 21:54 arthur * [r1395] tests/Makefile.am, tests/test_aliases.c, tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c, tests/test_netgroup.c, tests/test_networks.c, tests/test_nslcd_group.c, tests/test_passwd.c, tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c, tests/test_shadow.c: remove legacy test code that is no longer used 2011-03-14 21:42 arthur * [r1394] pam/pam.c: check for user existence before trying password change 2011-03-14 20:19 arthur * [r1393] common/tio.c: fix a problem in the timeout paramater that was being passed to select() and could contain too many µsec (fixes Solaris runtime issue) 2011-03-13 15:25 arthur * [r1392] tests/test_nsscmds.sh: fix name of script in header 2011-03-12 08:41 arthur * [r1391] configure.ac: include the resolv library for hstrerror() on platforms that need it (thanks Peter Bray) 2011-03-12 08:34 arthur * [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX (thanks Peter Bray) 2011-03-11 20:37 arthur * [r1389] Makefile.am: ensure that permissions are sane in the distributed tarball 2011-03-11 18:02 arthur * [r1388] nslcd/myldap.c: fix problem with endless loop on incorrect password 2011-03-11 15:49 arthur * [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX fallback definition to header file 2011-03-10 21:45 arthur * [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog, man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for 0.8.1 release 2011-03-10 20:35 arthur * [r1384] Makefile.am, common/tio.c, compat/Makefile.am, compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c, man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c, nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py, pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to add missing years 2011-03-09 22:33 arthur * [r1383] nslcd/pam.c: fix compiler warning 2011-03-09 22:32 arthur * [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle user-not-found errors when doing authentication (CVE-2011-0438) 2011-03-06 15:58 arthur * [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py, pynslcd/pynslcd.py: implement module for netgroup lookups 2011-03-06 15:09 arthur * [r1380] pynslcd/Makefile.am, pynslcd/network.py, pynslcd/pynslcd.py: add network name lookups 2011-03-06 15:06 arthur * [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test groups and add the arthur user to them to test whether all are returned correctly 2011-03-06 14:52 arthur * [r1378] Makefile.am: pass --enable-pynslcd with distcheck 2011-03-06 14:52 arthur * [r1377] pynslcd/Makefile.am: clean up compiled python files 2011-03-06 14:49 arthur * [r1376] pynslcd/host.py: fix search filter objectClass for hosts 2011-03-06 14:23 arthur * [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that session id is only logged while handling a connection 2011-03-06 13:01 arthur * [r1374] man/nslcd.conf.5.xml: note that attribute mapping expressions cannot be used for all attributes 2011-02-14 21:12 arthur * [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py, pynslcd/tio.py: implement module for hostname lookups 2011-02-14 21:11 arthur * [r1372] pynslcd/ether.py: fix comment 2011-02-14 21:08 arthur * [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add missing files to installation 2011-02-11 22:18 arthur * [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in current FreeBSD packaging) 2011-02-11 22:16 arthur * [r1369] nslcd/nslcd.c: create the directory for the socket and pidfile 2011-01-29 20:19 arthur * [r1368] man/nslcd.conf.5.xml: document a proper replacement for pam_check_host_attr (thanks Luca Capello) and add a section on quoting 2011-01-29 20:15 arthur * [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c, nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can be used inside pam_authz_search filters 2011-01-23 20:59 arthur * [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and pam_check_host_attr options in manual page and indicate how pam_authz_search replaces them 2011-01-05 19:39 arthur * [r1365] AUTHORS, HACKING, configure.ac, debian/copyright, nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd, nss/prototypes.h: add FreeBSD support, partially imported from the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and Alexander V. Chernikov) 2011-01-01 14:46 arthur * [r1364] nss/Makefile.am: put solnss.c under EXTRA_nss_ldap_so_SOURCES 2011-01-01 14:25 arthur * [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: add ids to options so we can more easily reference them from elsewhere (especially useful for generated HTML) 2011-01-01 14:12 arthur * [r1362] nslcd/myldap.c: include definition of rc in all code paths because it's used most of the time 2011-01-01 14:10 arthur * [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression to one that is supported by more shells 2011-01-01 14:07 arthur * [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball