Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/ChangeLog-2008
blob: f9c522926489d6f17339a370d85d6059a9e96132 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
2008-12-15  arthur

	* [r806] man/nss-ldapd.conf.5.xml: add a note about permissions of
	  configfile when bindpw is used

2008-12-06  arthur

	* [r805] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/myldap.c, nss-ldapd.conf: rename the tls_checkpeer option
	  to tls_reqcert, deprecating the old name and supporting all
	  options that OpenLDAP supports for that value

2008-12-03  arthur

	* [r804] nslcd/common.c, tests/test_common.c: allow backslashes in
	  names execpt as first or last character
	* [r803] configure.ac, nslcd/nslcd.c: clean the environment and set
	  LDAPNOINIT to disable parsing of LDAP configfiles (.ldaprc,
	  /etc/ldap/ldap.conf, etc)

2008-11-29  arthur

	* [r802] nslcd/myldap.c: use tls_* options also for StartTLS
	  connections
	* [r801] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h: remove
	  sslpath option because it wasn't used for anything
	* [r800] debian/changelog: add missing pound sign

2008-11-14  arthur

	* [r798] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.7 release

2008-11-13  arthur

	* [r797] debian/libnss-ldapd.templates: also leave out empty
	  Default line for libnss-ldapd/ldap-binddn
	* [r796] debian/libnss-ldapd.config, debian/libnss-ldapd.templates:
	  set debconf values from the environment only when they are empty
	  or if configfile is present to fix installation problem

2008-11-11  arthur

	* [r795] debian/libnss-ldapd.postinst: any output should go to
	  stderr to not confuse debconf

2008-11-04  arthur

	* [r793] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.6 release
	* [r792] NEWS: some spelling fixes
	* [r791] man/nss-ldapd.conf.5.xml: update manual page with current
	  timeout numbers

2008-11-01  arthur

	* [r790] debian/libnss-ldapd.postrm: fail on errors

2008-10-31  arthur

	* [r789] debian/libnss-ldapd.postinst: check for existance of init
	  script instead of daemon

2008-10-01  arthur

	* [r788] nslcd/common.c: also allow spaces in user and group names
	  because it was causing problems in some environments

2008-09-24  arthur

	* [r787] nslcd/myldap.c: also retry if ldap_result() failed and
	  getting error number returned LDAP_SUCCESS
	* [r786] nslcd/myldap.c: log option name instead of option value
	  for ldap_set_option() value
	* [r785] debian/control: clarify relationship to nss_ldap in
	  package description

2008-08-22  arthur

	* [r783] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.5 release

2008-08-07  arthur

	* [r782] debian/copyright, debian/po/da.po: updated Danish (da)
	  translation of debconf templates by Jonas Smedegaard
	  <dr@jones.dk>
	* [r781] debian/po/sv.po: updated Swedish (sv) translation of
	  debconf templates by Martin Ågren <martin.agren@gmail.com>

2008-07-20  arthur

	* [r778] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.4 release
	* [r777] nslcd/cfg.c: rename get_base_from_dse() to
	  get_base_from_rootdse()
	* [r776] nslcd/cfg.c: make the get_base_from_dse() function cleaner
	  and add a comment describing the function
	* [r775] man/nss-ldapd.conf.5.xml, nslcd/cfg.c: implement looking
	  up search base in DSE of LDAP server
	* [r774] tests/test_nsscmds.sh: reflect change in test LDAP setup

2008-07-10  arthur

	* [r773] nslcd/myldap.c: LDAP_OPT_X_TLS_REQUIRE_CERT is not a
	  boolean

2008-06-21  arthur

	* [r772] README: small change to documentation
	* [r771] nss-ldapd.conf: further improvements to Active Directory
	  filters and attribute mappings by Petter Reinholdtsen
	  <pere@hungry.com>

2008-06-17  arthur

	* [r770] nslcd/cfg.c, nslcd/myldap.c: replace https:// by ldaps://
	  (stupid typo)
	* [r769] nss-ldapd.conf: Active Directory sample configuration
	  improvement by Jelmer Jaarsma <jelmer.jaarsma@sara.nl>

2008-06-15  arthur

	* [r767] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.3 release
	* [r766] Makefile.am, debian/libnss-ldapd.lintian-overrides,
	  debian/rules: lintian override seems to be no longer necessary
	* [r765] debian/control: upgrade to standards-version 3.8.0 (no
	  changes needed)
	* [r764] debian/libnss-ldapd.nslcd.init: create /var/run/nslcd
	  directory with owner nslcd:nslcd by default so nslcd can remove
	  socket and pidfile at exit
	* [r763] nslcd/nslcd.c: give pidfile and socket creation functions
	  more logical names

2008-06-14  arthur

	* [r762] AUTHORS, configure.ac, man/nss-ldapd.conf.5.xml,
	  nslcd/cfg.c, nslcd/cfg.h, nslcd/myldap.c: implement SASL
	  authentication based on a patch by Dan White <dwhite@olp.net>
	* [r761] man/nss-ldapd.conf.5.xml: make formatting of manual page
	  options consistent

2008-06-13  arthur

	* [r760] tests, tests/Makefile.am, tests/test_common.c: add some
	  very basic tests for the isvalidname() function
	* [r759] nslcd/common.c, nslcd/common.h, nslcd/group.c,
	  nslcd/passwd.c: combine isvalidusername() and isvalidgroupname()
	  into isvalidname() because they are similar enough and we just
	  want to check to see if it is a reasonable name (e.g. not a DN)

2008-06-12  arthur

	* [r758] common/tio.c: restore the old writing code which masks
	  SIGPIPE on platforms that can't use send()
	* [r757] nslcd/cfg.c: don't perform SSL/TLS sanity checks if it
	  isn't available on the platform
	* [r756] tests: ignore test_getpeercred

2008-06-11  arthur

	* [r755] tests: ignore core files
	* [r754] tests/test_getpeercred.c: remove test socket at end of
	  test

2008-06-06  arthur

	* [r753] compat/getpeercred.c: use the cr_ prefix when getting a
	  xucred struct (needed for kfreebsd)
	* [r752] tests/Makefile.am, tests/test_getpeercred.c: implement a
	  very basic test for getpeercred()
	* [r751] nslcd/cfg.c: remove warning on using ssl option
	* [r750] nslcd/cfg.c: check that all URLs start with https:// if
	  "ssl on" is specified
	* [r749] nslcd/myldap.c: also set TLS options if an ldaps:// URL is
	  specified
	* [r748] debian/control: add dependency on adduser as required by
	  the previous commit
	* [r747] debian/libnss-ldapd.postinst: create a nslcd user in
	  postinst and ensure that it is used by default
	* [r746] man/nss-ldapd.conf.5.xml: add uid and gid options to
	  manual page
	* [r745] nslcd/cfg.c, nslcd/cfg.h, nslcd/nslcd.c: add uid and gid
	  configuration keywords that set the user id and group id of the
	  running nslcd process
	* [r744] nslcd/nslcd.c: environ is defined in unistd.h
	* [r743] nslcd/nslcd.c, nss/common.c: increase write buffer size in
	  nslcd to free up threads earlier and increase timeout for nslcd
	  to nss communication to one minute (at both places)
	* [r742] common/dict.c, compat/ether.c, nslcd/group.c,
	  nslcd/myldap.c, nslcd/passwd.c, tests/test_tio.c: miscellaneous
	  portability improvements

2008-05-18  arthur

	* [r741] TODO: from a review of glibc 2.3.6 code it shows that
	  strerror() is only non-threadsafe in some very unlikely
	  circumstances

2008-05-17  arthur

	* [r740] common/tio.c: use send() with a flag to ignore SIGPIPE
	  instead of write() so we don't have to muck with signal handlers

2008-05-16  arthur

	* [r739] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: include a random
	  string in every log message to be able to group log messages for
	  a single request
	* [r738] common/tio.c, nslcd/myldap.c: add sanity checks to sleep
	  calls to never sleep too long (problems could occur when the
	  clock moves backwards)
	* [r737] nss/group.c: remove comment about limitation that has now
	  been removed
	* [r736] nss/common.c: grow the read buffer maximum size to 2Mbyte
	  to allow for groups with about 150000 members maximum

2008-05-15  arthur

	* [r735] README: add some documentation on supported group to
	  member mappings
	* [r734] nslcd/myldap.h: improve documentation for
	  myldap_get_rdn_value() function

2008-05-11  arthur

	* [r733] nslcd/myldap.c: close the connection and retry the search
	  (once) if the search fails with the first call to
	  myldap_get_entry() (starting a search doesn't always give an
	  error when the connection has been broken)
	* [r732] nslcd/myldap.c: split retry mechanism of myldap_search()
	  into a new do_retry_search() function
	* [r731] nslcd/myldap.c: allocate the search memory region in
	  myldap_search() instead of in do_try_search() and have the latter
	  return an LDAP status code
	* [r730] nslcd/myldap.c: also allow closing of searches that no
	  longer have a valid connection and integrate myldap_search_free()
	  into myldap_search_close()

2008-05-04  arthur

	* [r728] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.2 release
	* [r727] HACKING, README: some documentation cleanups and updates
	* [r726] tests/test_nslcd_group.c: add some tests for
	  isvalidgroupname()
	* [r725] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/nslcd.c: make number of threads configurable with the
	  threads keyword
	* [r724] nslcd/myldap.h: add reference to note about
	  thread-safeness of OpenLDAP
	* [r723] nslcd/nslcd.c: fix copyright year

2008-05-03  arthur

	* [r722] nslcd/passwd.c: implement a cache for dn2uid() lookups
	  that saves some time doing LDAP searches for groups with a lot of
	  members, based on a patch by Petter Reinholdtsen
	  <pere@hungry.com>
	* [r721] debian/libnss-ldapd.nslcd.init: add soft dependency on
	  slapd, simplify network and file system dependencies and add
	  reverse dependencies on some common daemons that may want to do
	  NSS lookups

2008-05-02  arthur

	* [r720] nss/netgroup.c, nss/prototypes.h: remove checking for
	  first entry and always return NSS_STATUS_RETURN when no more data
	  is available in the netgroup (this has the side effect of not
	  returning NSS_STATUS_NOTFOUND for non-existing netgroups but
	  seems to be what other NSS modules do) to properly handle empty
	  netgroups
	* [r719] tests, tests/Makefile.am, tests/test_nslcd_group.c: add
	  file for testing nslcd/group.c
	* [r718] tests/Makefile.am: don't even compile the test programs on
	  make check
	* [r717] tests/Makefile.am: don't compile test code on every build
	  and fix LDADD lists to include correct objects
	* [r716] nslcd/cfg.c, nslcd/cfg.h, nslcd/myldap.c: only support
	  tls-related options if LDAP library supports TLS, only add rebind
	  code if ldap_set_rebind_proc() is found and only set
	  LDAP_X_OPT_CONNECT_TIMEOUT if that option is supported

2008-05-01  arthur

	* [r715] nslcd/myldap.c: support ranged attribute values
	* [r714] nss/common.h: fix comment of return value of
	  NSS_STATUS_TRYAGAIN
	* [r713] tests/test_myldap.c: fix a warning
	* [r712] tests/test_myldap.c: ensure that filter_get_var() and
	  filter_get_var() return non-NULL to enable parsing of config file
	  with attribute mapping and filter settings and use base from
	  config file

2008-04-29  arthur

	* [r711] man/nss-ldapd.conf.5.xml: make language about pagesize
	  option a little clearer

2008-04-27  arthur

	* [r710] nslcd/cfg.c: support the case where an attribute mapping
	  variable is NULL

2008-04-26  arthur

	* [r709] nslcd/myldap.c: also close the LDAP connection on
	  LDAP_SERVER_DOWN (besides LDAP_UNAVAILABLE)
	* [r708] man/nss-ldapd.conf.5.xml, nss/common.c: increase time out
	  values because now nslcd will error out more quickly if the LDAP
	  server is known to be unavailable
	* [r707] nslcd/nslcd.c: spelling fix in comment
	* [r706] man/nss-ldapd.conf.5.xml: some spelling fixes and a
	  clarification of the retry mechanism
	* [r705] nslcd/cfg.c: fix log message of incorrect map statement
	* [r704] nslcd/passwd.c: make log message a little more descriptive
	* [r703] configure.ac: fix quote in comment
	* [r702] nslcd/myldap.c: ensure that the connection to the LDAP
	  server is closed whenever any of the ldap_*() functions return
	  LDAP_UNAVAILABLE

2008-04-25  arthur

	* [r701] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/myldap.c, tests/nss-ldapd-test.conf, tests/test_cfg.c,
	  tests/test_myldap.c: implement new timing mechanism for retries
	  to quickly fail lookups to LDAP server that have been failing for
	  some time, removing the reconnect_tries option and giving
	  reconnect_sleeptime and reconnect_maxsleeptime options a new
	  meaning
	* [r700] tests/test_myldap.c: include missing include
	* [r699] tests/test_myldap.c: ignore SIGPIPE in myldap tests
	* [r698] tests/test_myldap.c: fix assert to be test instead of
	  assignment
	* [r697] tests/test_myldap.c, tests/test_myldap.sh: have the binary
	  look up the file name and only use the shell script wrapper to
	  determine if LDAP server is available
	* [r696] compat/ether.h: fix typos in references to
	  HAVE_ETHER_NTOA_R and HAVE_ETHER_ATON_R macros

2008-04-23  arthur

	* [r695] tests/test_nsscmds.sh: fix order of members in group in
	  tests because of new hashing dict (maybe we should fix the script
	  instead to always sort members properly)
	* [r694] common/dict.c: fix problem where first item in the
	  hashtable could be returned twice while looping
	* [r693] tests/test_dict.c: add test for problem with duplicate
	  entries being returned while looping over results
	* [r692] nslcd/passwd.c: don't issue warning when
	  myldap_get_entry() returns NULL and LDAP_SUCCESS

2008-04-21  arthur

	* [r691] common/dict.c: allocate room for key string just after
	  entry to save on calls to malloc() and make it simpler

2008-04-20  arthur

	* [r690] nslcd/group.c, nslcd/passwd.c: fix tests for valid user
	  and group names
	* [r689] nslcd/common.h, nslcd/group.c, nslcd/passwd.c: add checks
	  for valid user and group names in incoming requests and for data
	  returned from LDAP
	* [r688] nslcd/group.c: only support uniqueMember containing DN
	  values
	* [r687] nslcd/group.c: fix warning message to not refer to alias
	* [r686] nslcd/myldap.c: make warning message more verbose, fix
	  comment and don't try to store empty results

2008-04-19  arthur

	* [r685] debian/libnss-ldapd.config: only guess the searchbase if
	  the value doesn't seem to be preseeded (based on a patch by
	  Petter Reinholdtsen <pere@hungry.com>)
	* [r684] common/dict.c: fix wrapping and indenting of comments
	* [r683] nslcd/group.c: correctly call set_free() instead of free()
	* [r682] nslcd/group.c: use the new set data structure to gather
	  the group members
	* [r681] common/Makefile.am, common/set.c, common/set.h, tests,
	  tests/Makefile.am, tests/test_set.c: implement a set that uses
	  the dict module as back-end
	* [r680] common/dict.c: implement new dict module that uses a
	  hashtable which is around 40 times faster for large (around 2000)
	  entries but with around 40% more memory used
	* [r679] tests/Makefile.am, tests/test_dict.c, tests/usernames.txt:
	  some new tests for the dictionary module
	* [r678] nslcd/passwd.c: add test for emtpy DN

2008-04-18  arthur

	* [r677] nslcd/myldap.c: instead of using the dict module to build
	  a cache just store the values in an fixed-sized array because no
	  more than 9 attributes are currently retrieved from an entry and
	  we never retrieve the same value more than once (so the cache is
	  useless)

2008-04-17  arthur

	* [r676] common/dict.h: add note about freed values
	* [r675] common/dict.c, common/dict.h, nslcd/myldap.c,
	  tests/test_dict.c: change dict_values_first() and
	  dict_values_next() into dict_loop_first() and dict_loop_next() to
	  have a looping mechanism over keys and values

2008-04-13  arthur

	* [r674] tests/nss-ldapd-test.conf: remote hopefully last reference
	  to rootbind{dn,pw}

2008-04-06  arthur

	* [r673] nslcd/common.h: return values of dn2uid() and uid2dn()
	  should always be used
	* [r672] nslcd/group.c: properly handle the case where dn2uid()
	  couldn't do a DN->uid lookup
	* [r670] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6.1 release
	* [r669] config.guess, config.sub: include updated files

2008-04-05  arthur

	* [r668] AUTHORS: include Petter Reinholdtsen for reporting many
	  bugs and even some fixes
	* [r667] debian/libnss-ldapd.postinst: handle case where value
	  contains spaces properly
	* [r666] debian/libnss-ldapd.postinst: support having a binddn set
	  without a bindpw
	* [r665] debian/libnss-ldapd.config: fix typo in comment
	* [r664] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,
	  debian/libnss-ldapd.templates, debian/po/ca.po, debian/po/cs.po,
	  debian/po/da.po, debian/po/de.po, debian/po/es.po,
	  debian/po/fr.po, debian/po/ja.po, debian/po/nl.po,
	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po: remove
	  rootbind{dn,pw} options from packaging because the options are
	  not likely to be implemented in the future
	* [r663] nslcd/common.h, nslcd/group.c, nslcd/passwd.c: fix
	  member->group searches by also searching for DN in uniqueMember
	  attribute
	* [r662] nslcd/log.c: make log line a little bigger to properly log
	  more search filters
	* [r661] nslcd/nslcd.c: only return shadow entries to root users
	* [r660] nss/group.c: correctly implement buffer handling in
	  _nss_ldap_initgroups_dyn() to grow buffer when needed, check
	  limits and handle extra group parameter (had a closer look at
	  nis-initgroups.c)
	* [r659] tests/test_nsscmds.sh: no problem to shout a little with
	  failed tests
	* [r658] nss/group.c: properly check the limit (as seen in
	  nis-initgroups.c)
	* [r657] nslcd/shadow.c: partial support for reading AD date format
	  for pwdLastSet attribute
	* [r656] nslcd/myldap.c: split closing of LDAP session to separate
	  funtion to invalidate running searches always and closes
	  connection if setting up search failed
	* [r655] tests/test_group.c: use a larger buffer for group
	  membership results
	* [r654] tests/test_myldap.c: check that the last
	  myldap_get_entry() returned success

2008-04-04  arthur

	* [r653] README, man/nss-ldapd.conf.5.xml, nslcd/cfg.c,
	  nslcd/cfg.h, nslcd/myldap.c, nss-ldapd.conf: remove code that
	  handles special cases when calling as root (removing rootbinddn,
	  rootbindpw, rootuse_sasl and rootsasl_authid options)
	* [r652] nslcd/myldap.c: revert r628 (using ldap_str2dn() instead
	  of ldap_explode_r?dn()) for now to make this compile on older
	  versions of OpenLDAP
	* [r651] man/nss-ldapd.conf.5.xml: add some more documentation to
	  the pagesize option

2008-04-02  arthur

	* [r650] debian/libnss-ldapd.nslcd.init: make start not fail if
	  nslcd is already running and stop not fail if it wasn't running
	  before

2008-03-30  arthur

	* [r649] nss-ldapd.conf: some fixes to the configuration when using
	  Active Directory (provided by Petter Reinholdtsen
	  <pere@hungry.com>)
	* [r648] configure.ac, nslcd/myldap.c: only define and use
	  do_sasl_interact() if we have a sasl library
	* [r647] compat/attrs.h: make test for compiler versions simpler
	  and per used attribute

2008-03-29  arthur

	* [r646] HACKING, README: add contact information on reporting bugs
	  and contributing patches
	* [r645] HACKING: add some more notes about the design and
	  direction I want to go in

2008-03-28  arthur

	* [r644] nslcd/myldap.c: don't warn about problems retreiving the
	  objectClass from en entry

2008-03-27  arthur

	* [r643] nslcd/group.c: fix a problem where the newly allocated
	  storage by realloc() wasn't used (thanks to Petter Reinholdtsen
	  <pere@hungry.com> for the patch)

2008-03-16  arthur

	* [r642] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst:
	  comment out all rootbind{dn,pw} code as to not copy those
	  directives because they are unsupported
	* [r641] debian/libnss-ldapd.config: use tail instead of head to
	  avoid conflicts becase nss_ldap seems to pick up the last option
	  in the file
	* [r640] debian/libnss-ldapd.config: handle the case where an
	  option is defined multiple times

2008-03-06  arthur

	* [r639] AUTHORS, debian/copyright, debian/po/es.po: updated
	  Spanish (es) translation of debconf templates by Rudy Godoy
	  Guillén <rudy@debian.org>

2008-03-04  arthur

	* [r638] AUTHORS, debian/po/nl.po: updated Dutch (nl) translation
	  of debconf templates by Bart Cornelis <cobaco@skolelinux.no>

2008-02-19  arthur

	* [r637] README: some updates to reflect recent changes
	* [r636] man/Makefile.am: have a better way to specify the manual
	  page rule

2008-02-15  arthur

	* [r635] common/tio.c: split out the flushing of the buffers to
	  separate functions and see if we can flush some data from the
	  buffer if it is overflowing before growing the buffer
	* [r634] nslcd/myldap.c: add StartTLS support by Ralf Haferkamp
	  <rhafer@suse.de>
	* [r633] nslcd/myldap.c: pass URI to do_bind() to make it work with
	  do_rebind() and use that URI (thanks Ralf Haferkamp
	  <rhafer@suse.de>)
	* [r632] tests/test_myldap.c: add tests for myldap_get_rdn_value()
	  and myldap_cpy_rdn_value()

2008-02-12  arthur

	* [r631] configure.ac: make using implicit function definitions an
	  error
	* [r630] common/tio.c, common/tio.h, nslcd/nslcd.c, nss/common.c,
	  tests/test_tio.c: implement resizable I/O buffers and tune buffer
	  sizes to normal requests
	* [r629] common/tio.c: always allocate the read and write buffers
	  and make the struct tio_buffer inline in struct tio_fileinfo

2008-02-10  arthur

	* [r628] nslcd/myldap.c: replace the calls to ldap_explode_dn() and
	  ldap_explode_rdn() with a call to ldap_str2dn() resulting in much
	  simpler code

2008-02-08  arthur

	* [r627] nslcd/cfg.c: only support "dns" and "domain" values on
	  platforms with the necessary functions available
	* [r626] nslcd/ether.c: don't define struct ether_addr here, it was
	  moved to compat/ether.h

2008-02-04  arthur

	* [r625] nslcd/myldap.c: make some changes to allow it to compile
	  on more platforms
	* [r624] compat/Makefile.am, compat/ether.c, compat/ether.h,
	  configure.ac, nslcd/ether.c: provide replacements for
	  ether_aton_r() and ether_ntoa_r() for platforms that don't have
	  them
	* [r623] configure.ac, nslcd/nslcd.c: only call
	  __nss_configure_lookup() if it is available, if it isn't the
	  platform is out of luck
	* [r622] nslcd/myldap.h: defined LDAP_SCOPE_DEFAULT it's not
	  defined elsewhere
	* [r621] nslcd/nslcd.c: fix missing casts
	* [r620] nslcd/nslcd.c: actually include the compat header files
	  when needed

2008-02-03  arthur

	* [r618] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
	  0.6 release
	* [r617] configure.ac: also check for sasl2 library
	* [r616] tests/test_myldap.c, tests/test_nsscmds.sh: add tests for
	  new LDAP lookups
	* [r615] nslcd/attmap.c, nslcd/attmap.h, nslcd/group.c: support the
	  uniqueMember LDAP attribute that holds DN values (they are
	  translated with dn2uid() from passwd.c)
	* [r614] debian/libnss-ldapd.postinst, debian/libnss-ldapd.postrm,
	  debian/rules: don't use dh_makeshlibs any more because we don't
	  need the shlibs file; call ldconfig from maintainer scripts
	  ourselves
	* [r613] debian/rules: install the NSS library under /lib instead
	  of /usr/lib to make it easyer to unmount /usr if it's on a
	  separate filesystem

2008-02-02  arthur

	* [r612] debian/rules: don't pass options to configure which are
	  not used
	* [r611] configure.ac: remove --with-ngroups option because it
	  isn't used
	* [r610] nslcd/common.h, nslcd/passwd.c: implement a dn2uid()
	  function to transform a DN into a username (looking inside the DN
	  or doing an LDAP lookup if neede)
	* [r609] nslcd/myldap.c, nslcd/myldap.h: implement
	  myldap_cpy_rdn_value() function to copy rdn value into a buffer
	  (functionality like myldap_get_rdn_value())
	* [r608] nslcd/myldap.c: log and otherwise ignore errors in
	  ldap_parse_page_control()
	* [r607] nslcd/myldap.c: fix copy-pasto
	* [r606] nslcd/myldap.c: don't request paging when doing a search
	  with scope base and ignore errors of ldap_create_page_control()
	* [r605] nslcd/myldap.c: reset LDAP error flag if ldap_get_values()
	  returned an error because some LDAP functions don't do this
	  correctly

2008-02-01  arthur

	* [r604] nslcd/myldap.c: have proper checks and logs of all ldap
	  operations
	* [r603] tests/test_group.c: enable _nss_ldap_initgroups_dyn() test
	  because it's working now
	* [r602] nslcd-common.h: fix buffer size debug message
	* [r601] nss/common.h, nss/hosts.c, nss/netgroup.c, nss/networks.c:
	  do not set errno (and h_errno) if we got the last entry from
	  get*ent() (this apparently is needed by coreutils' id and groups
	  commands)
	* [r600] tests/Makefile.am: pagectrl module has moved
	* [r599] tests/test_nsscmds.sh: test for hugegroup
	* [r598] tests/test_nsscmds.sh: the groups command no longer lists
	  the username
	* [r597] nss/common.c, nss/common.h, nss/group.c, nss/hosts.c,
	  nss/netgroup.c, nss/networks.c: remove the nslcd2nss() function
	  because it's not needed with the current protocol
	* [r596] nss/common.h: fail with a permanent error if resetting the
	  stream failed to prevent indefinite retries

2008-01-31  arthur

	* [r595] nslcd/myldap.c: defined LDAP_DEPRECATED to also have
	  definitions for deprecated functions
	* [r594] compat/attrs.h: only define MUST_USE attribute if gcc
	  version is more recent than 3.4
	* [r593] debian/copyright: update copyright information
	* [r592] compat/Makefile.am, compat/pagectrl.c, compat/pagectrl.h,
	  configure.ac, debian/copyright, nslcd/Makefile.am,
	  nslcd/myldap.c, nslcd/pagectrl.c, nslcd/pagectrl.h: move pagectrl
	  code into compat directory
	* [r591] configure.ac: make comments lowercase for consistency
	* [r590] tests/test_myldap.c: re-add test URIs that accidentally
	  got commented out in the last commit
	* [r589] tests/Makefile.am, tests/test_cfg.c, tests/test_myldap.c,
	  tests/test_nsscmds.sh: pass the correct pthread flags for all
	  calls to compiler and linker and link in compat code, handle
	  other assert.h setups and avoid some ! in if statements in shell
	  scripts
	* [r588] configure.ac: improve LDAP library autodetection and make
	  if statements consistent
	* [r587] configure.ac: move finding of replacement functions to a
	  more logical place
	* [r586] configure.ac: define extra macros to import system
	  extensions from system header files and remove duplicate check
	  for ldap_set_rebind_proc()
	* [r585] configure.ac: test to see if the compiler supports certain
	  -W flags before using them

2008-01-30  arthur

	* [r584] nslcd/ether.c: include stdint.h
	* [r583] nslcd.h, nslcd/ether.c, nss/ethers.c: use uint8_t instead
	  of u_int8_t because the former seems to be available on more
	  platforms
	* [r582] INSTALL, depcomp, install-sh: update some files from
	  recent automake
	* [r581] compat/Makefile.am, compat/daemon.c, compat/daemon.h,
	  compat/getopt_long.c, compat/getopt_long.h, configure.ac: provide
	  replacement functions for daemon() and getopt_long() when they
	  are not available on the system
	* [r580] configure.ac: remove duplicate warning flags
	* [r579] compat/attrs.h: define __STRING() if it's not defined by
	  the system
	* [r578] tests/test_tio.c: include errno in assertion statement
	* [r577] compat/getpeercred.c: some fixes for LOCAL_PEERCRED (still
	  untested)

2008-01-27  arthur

	* [r576] AUTHORS, debian/po/de.po: updated German (de) translation
	  of debconf templates by Erik Schanze <eriks@debian.org>
	* [r575] compat/ldap.h, nslcd/Makefile.am, nslcd/myldap.c:
	  integrate some compatibility code into myldap.c, the only place
	  it's used
	* [r573] nslcd/myldap.c: work around some LDAP libraries not having
	  all options
	* [r572] configure.ac, nslcd/myldap.h: on some systems lber.h needs
	  to be included before ldap.h
	* [r571] common/tio.c, nslcd-common.h, nslcd/nslcd.c, nss/common.c,
	  tests/test_tio.c: when including stdint.h check if we actually
	  have it
	* [r570] nslcd/pagectrl.c, nslcd/pagectrl.h: correct #endif comment

2008-01-26  arthur

	* [r569] nslcd/cfg.c: have a fallback value for HOST_NAME_MAX if it
	  is not defined
	* [r568] tests/test_nsscmds.sh: handle the case where
	  /etc/nss-ldapd.conf does not exist a little more graceful
	* [r567] nslcd/nslcd.c: log error when getpeercred() returned
	  nothing
	* [r566] compat/getpeercred.c, compat/getpeercred.h, configure.ac:
	  add (untested) support for the Solaris getpeerucred() function
	* [r565] Makefile.am, compat, compat/Makefile.am,
	  compat/getpeercred.c, compat/getpeercred.h, configure.ac,
	  nslcd/Makefile.am, nslcd/nslcd.c: move code to get information
	  from socket peer to the compat directory because it is very
	  platform specific
	* [r564] tests/test_myldap.c, tests/test_nsscmds.sh,
	  tests/test_tio.c: somewhat improve the output from the tests
	* [r563] nslcd/cfg.c: fix marsing of map statement
	* [r562] tests/test_cfg.c: also test map filter and scope
	  configuration options

2008-01-16  arthur

	* [r561] nslcd/cfg.c: fix problem in map statement end-of-line
	  handling
	* [r560] tests/test_cfg.c: add a test for the map statement

2008-01-03  arthur

	* [r559] nslcd/nslcd.c: close connections in worker threads at
	  program termination
	* [r558] nslcd/nslcd.c: make code a little more compact, don't
	  include debug twice in the log message and remove the
	  capabilities code because it will probably never be used
	* [r557] tests/test_nsscmds.sh: support the case where + is in
	  /etc/group
	* [r556] nss/aliases.c, nss/common.h, nss/ethers.c, nss/group.c,
	  nss/hosts.c, nss/netgroup.c, nss/networks.c, nss/passwd.c,
	  nss/protocols.c, nss/rpc.c, nss/services.c, nss/shadow.c: only
	  start the NSLCD_ACTION_*_ALL requests with the first call to
	  getent() instead of with setent() to avoid unneeded requests if
	  compat is used (except with netgroups)
	* [r555] nslcd/passwd.c, nss/prototypes.h: update copyright year
	* [r554] tests/test_nsscmds.sh: get the number of groups and
	  services from files in /etc for comparison
	* [r553] nslcd/passwd.c: do not warn about missing loginShell
	  attribute because it is not mandatory
	* [r552] nss/group.c: increment value that is pointed to, not the
	  pointer (fixes segfault)

2008-01-02  arthur

	* [r551] nslcd/common.h: immediatly bail out if write entity
	  function failed (prevents numerous "error writing to client"
	  messages from filling up the logs)

2008-01-01  arthur

	* [r550] tests/test_nsscmds.sh: check to see if nslcd is running
	  and add test for a large group (100 members)
	* [r549] nss/exports.linux, nss/group.c, nss/prototypes.h: enable
	  the _nss_ldap_initgroups_dyn() function that is now implemented
	  in nslcd
	* [r548] nss/common.h: use the new tio_mark()/tio_reset() functions
	  to support retries of the getent() functions when
	  NSS_STATUS_TRYAGAIN would be returned
	* [r547] common/tio.c, common/tio.h, tests/test_tio.c: add limited
	  implementation of tio_mark() and tio_reset() functions to do
	  limited seeks in the read stream, clean up header file comments
	  and write tests for new code