Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/ChangeLog-2011
blob: e1e1734c2f8a6eef56d526fc13669f8ddf447c9a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
2011-12-31  arthur

	* [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.5 release

2011-12-30  arthur

	* [r1583] debian/control: fix versioned build dependency on
	  debhelper

2011-12-28  arthur

	* [r1582] pynslcd/config.py.in: remove some information from config
	  that we don't expect to use
	* [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py,
	  pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py:
	  support for reading the configuration file (not all options are
	  used though)
	* [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state
	  variables (from command line) from the configuration to the main
	  module
	* [r1579] pynslcd/pam.py: fall back to trying to authenticate with
	  provided password (in case rootpwmodpw is not set or unusable)
	* [r1578] pynslcd/group.py: never request group members for
	  GroupByMemberRequest
	* [r1577] pynslcd/group.py: instead of modifying attmap, modify
	  attribute list
	* [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to
	  attmap (broken in r1571)
	* [r1575] nslcd/nslcd.c: typo fix in comment

2011-12-27  arthur

	* [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py,
	  pynslcd/passwd.py, pynslcd/shadow.py: make logging more
	  consistent and remove test bases from shadow and passwd maps
	* [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py,
	  pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py,
	  pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes
	* [r1572] debian/copyright: update copyright information

2011-12-12  arthur

	* [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the
	  search separately from the request
	* [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: move check of required attributes and other
	  common tests to the Request.handle_entry() method

2011-12-10  arthur

	* [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV
	  records
	* [r1568] nslcd/nslcd.c: properly handle failures to truncate the
	  pid file
	* [r1567] debian/nslcd.config: get the first configuration value
	  instead of the last because that one is also written
	* [r1566] debian/nslcd.config: fix a deprecated use of head without
	  the -n option
	* [r1565] debian/rules: enable more hardening options (-fPIE
	  doesn't work yet because we use -fPIC in some places)
	* [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm:
	  ensure that the output of nss_list_configured() is space
	  separated
	* [r1563] m4/ax_pthread.m4: update macro from autoconf-archive

2011-12-09  jhrozek

	* [r1560] nslcd/myldap.c: Fix a typo in disconnect logic

2011-12-01  arthur

	* [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are
	  properly initialised and log denied requests

2011-11-30  arthur

	* [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only
	  loaded once after start-up

2011-11-18  arthur

	* [r1556] debian/libnss-ldapd.config: simplification of logic to
	  overwrite list of enabled /etc/nsswitch.conf services in debconf
	  (based on r1555 of 0.7 branch)

2011-10-12  arthur

	* [r1554] debian/control: add versioned dependency on libpam for
	  mutiarch support
	* [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS
	  function by Tom Judge (taken from FreeBSD PR 154000)

2011-10-10  arthur

	* [r1552] debian/rules: keep nslcd running during package upgrades

2011-10-02  arthur

	* [r1551] nslcd/pam.c: reduce loglevel of user not found messages
	  to avoid spamming the logs with useless information (thanks Wakko
	  Warner)

2011-09-30  jhrozek

	* [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  Use an explicit base of 10 for strtouid()/strtogid()/strtol()
	  calls

2011-09-21  arthur

	* [r1546] debian/nslcd.config: treat the "hard" value for
	  tls_reqcert as if it was "demand"

2011-09-14  arthur

	* [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm,
	  debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst:
	  make whitespace matching consistent in regular expressions
	  (thanks Nick)

2011-09-09  arthur

	* [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c,
	  nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c,
	  nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  make validation log messages consistent
	* [r1541] nslcd/nsswitch.c: add missing include

2011-09-08  arthur

	* [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size
	  and consistency improvements to other buffers
	* [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string
	  representations of addresses more logical names

2011-09-07  arthur

	* [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv)
	  translation of debconf templates by Martin Bagge

2011-09-04  arthur

	* [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac,
	  debian/changelog, debian/copyright, man/nslcd.8.xml,
	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
	  0.8.4 release
	* [r1535] tests/test_getpeercred.c: warn when we couldn't get the
	  gid or pid, the uid is the only really interesting bit
	* [r1534] tests/test_tio.c: add casts from size_t to int for printf
	* [r1533] debian/rules: ignore failures in tests
	* [r1532] debian/rules: use auto-detection for LDAP library and
	  defaults for config file, socket and pidfile (no changes)

2011-09-03  arthur

	* [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,
	  debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support
	  spaces before and after database name while parsing
	  /etc/nsswitch.conf and reduce the number of places where parsing
	  is done

2011-08-30  arthur

	* [r1530] debian/nslcd.postinst: correctly handle leading and
	  trailing spaces in preseeded uri option (patch by Andreas B.
	  Mundt)
	* [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and
	  LDAP_REFERRALS to configure.ac to ensure that tests from
	  configure see the same API

2011-08-29  arthur

	* [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement
	  and use a strtoui() function if uid_t or gid_t is of size
	  unsigned int (thanks Jakub Hrozek)
	* [r1527] pynslcd/Makefile.am: get rid of automake warning
	* [r1526] configure.ac: silence autoconf warnings, patch by Jakub
	  Hrozek
	* [r1525] debian/po/nl.po: some changes based on feedback by Jeroen
	  Schot

2011-08-27  arthur

	* [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c,
	  nslcd/passwd.c: provide strtouid() and strtogid() functions that
	  use strtoul() or strtoull() (thanks Jakub Hrozek)
	* [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  check errno after calls to strtol() to ensure that numbers that
	  are too large for type will be reported (thanks Jakub Hrozek)
	* [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated
	  callback structure to OpenLDAP because it doesn't make it's own
	  copy (thanks Jakub Hrozek) (fixes a problem in r1490)
	* [r1521] debian/po/nl.po: some changes based on feedback by Paul
	  Gevers

2011-08-26  arthur

	* [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation
	* [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po,
	  debian/po/it.po, debian/po/nb.po, debian/po/nl.po,
	  debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small
	  formatting changes to header

2011-08-25  arthur

	* [r1518] debian/po/es.po: updated Spanish (es) translation of
	  debconf templates by Francisco Javier Cuadrado

2011-08-24  arthur

	* [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai)
	* [r1515] nslcd/cfg.c: fix a problem with uninitialised memory
	  while parsing the tls_ciphers option (was broken in r853, similar
	  problem was fixed in r910, reported by Isaac Freeman)
	* [r1514] debian/po/de.po: updated German (de) translation of
	  debconf templates by Chris Leick
	* [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support
	  querying DNS SRV records from a different domain than the current
	  one (based on a patch by James M. Leddy)

2011-08-23  arthur

	* [r1512] debian/po/cs.po: updated Czech (cs) translation of
	  debconf templates by Miroslav Kure

2011-08-19  arthur

	* [r1511] debian/po/fr.po: typo fix provided by Christian Perrier

2011-08-17  arthur

	* [r1510] AUTHORS: add new translators to AUTHORS file
	* [r1509] debian/po/ja.po: updated Japanese (ja) translation of
	  debconf templates by Kenshi Muto
	* [r1508] debian/po/pt.po: updated Portuguese (pt) translation of
	  debconf templates by Américo Monteiro

2011-08-14  arthur

	* [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
	  translation of debconf templates by Denis Doria
	* [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am:
	  split 2009 and 2010 changes to separate ChangeLog files
	* [r1505] nss/networks.c: remove unused variable
	* [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am:
	  put external libraries at the end when linking
	* [r1503] configure.ac: remove some tests for symbols we aren't
	  using
	* [r1502] debian/libnss-ldapd.lintian-overrides: add lintian
	  override for SONAME check
	* [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
	  translation of debconf templates by Denis Doria
	* [r1500] debian/po/da.po: update Danish (da) translation of
	  debconf templates by Joe Hansen
	* [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf
	  templates by Slavko
	* [r1498] debian/po/fr.po: updated French (fr) translation of
	  debconf templates by Christian Perrier
	* [r1497] debian/po/ru.po: updated Russian (ru) translation of
	  debconf templates by Yuri Kozlov

2011-08-10  arthur

	* [r1496] AUTHORS: fix spelling of name (sorry about that)

2011-08-09  arthur

	* [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether
	  file should be reloaded
	* [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
	  debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po
	  files
	* [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small
	  language updates based on feedback by Justin B Rye

2011-08-08  arthur

	* [r1492] debian/nslcd.templates: incorporate feedback on debconf
	  templates by debian-l10n-english@lists.debian.org (thanks Justin
	  B Rye and Christian PERRIER)

2011-08-07  arthur

	* [r1491] Makefile.am, debian/compat, debian/control,
	  debian/libnss-ldapd.install,
	  debian/libnss-ldapd.lintian-overrides,
	  debian/libnss-ldapd.postinst, debian/libpam-ldapd.install,
	  debian/rules, debian/source/lintian-overrides: build Debian
	  packages with multiarch support
	* [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a
	  connection callback to avoid timeout issues during the SSL
	  handshake (based on a patch by Stefan Völkel)

2011-08-06  arthur

	* [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD
	  from http://www.gnu.org/software/autoconf-archive/ax_pthread.html

2011-08-05  arthur

	* [r1488] pynslcd/group.py, tests/test_myldap.c: replace last
	  traces of groupOfUniqueNames
	* [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c,
	  nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow
	  map queries LDAP before returning x as a password has for shadow
	  users
	* [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
	  update tests with change of member/uniqueMember default change
	  (r1484)
	* [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h,
	  nslcd/passwd.c: implementation of myldap_get_values_len() to use
	  ldap_get_values_len() instead of ldap_get_values() to fix some
	  problems with binary data in returned attribute values (patch by
	  Wesley Mason)

2011-08-03  arthur

	* [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h,
	  nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to
	  using the member attribute by default instead of uniqueMember

2011-07-21  arthur

	* [r1483] README: remove obsolete attribute from documentation

2011-07-15  arthur

	* [r1482] debian/nslcd.init: on restart only log_end_msg once

2011-07-04  arthur

	* [r1481] configure.ac: show the default value for the
	  pam-seclib-dir option

2011-07-03  arthur

	* [r1480] compat/getpeercred.c: fix header
	* [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for
	  systems with only PAM_AUTHTOK_RECOVER_ERR

2011-07-02  arthur

	* [r1478] Makefile.am, debian/compat, debian/control,
	  debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update,
	  debian/nslcd.install, debian/pam-configs,
	  debian/pam-configs/ldap, debian/rules: switch to dh for
	  debian/rules and bump debhelper compatibility to 8
	* [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c,
	  nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent,
	  grow gidNumber buffer to hold larger numbers and small
	  consistency improvements

2011-06-10  arthur

	* [r1475] nslcd/pam.c: correctly only check password expiration
	  when authenticating, only check account expiration when doing
	  authorisation check

2011-06-05  arthur

	* [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in
	  pam_authz_search to see if they exist
	* [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const
	  and don't free() data returned by cfg_getdomainname()
	* [r1471] common/expr.c, tests/test_expr.c: handle expressions
	  where the expander function returns NULL (handle it as an empty
	  string)
	* [r1470] nslcd/myldap.c: fix r1468
	* [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to
	  handle splitting attribute and value correctly
	* [r1467] config.guess, config.sub: include updated files

2011-05-23  arthur

	* [r1466] tests/test_common.c: add test case for two-character user
	  name

2011-05-21  arthur

	* [r1464] nslcd/myldap.c: fix problem with partial attribute name
	  matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White
	  for the fix)

2011-05-13  arthur

	* [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.3 release
	* [r1461] debian/libnss-ldapd.postinst: don't unconditionally
	  restart nscd but just try to invalidate the cache for the maps
	  that change
	* [r1460] debian/libnss-ldapd.config: correctly pick up current
	  configuration of /etc/nsswitch.conf when running dpkg-reconfigure
	* [r1459] debian/control: upgrade to standards-version 3.9.2
	* [r1458] common/expr.c, common/expr.h: switch variable expander
	  function type name because _t suffix is reserved
	* [r1457] debian/control, debian/nslcd.config: search for LDAP
	  server by looking for SRV _ldap._tcp DNS records and try to query
	  LDAP server for base DN during package configuration (based on
	  work by Petter Reinholdtsen for the sssd package)
	* [r1456] debian/nslcd.config: fix domain to basedn expansion when
	  having more than two domain parts (patch by Per Carlson)
	* [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: simplify request handling by passing read
	  parameters around in a dict instead of setting object properties
	  (this mainly simplifies search filter building)

2011-05-01  arthur

	* [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,
	  pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,
	  pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement
	  attribute mapping functionality and do some refactoring
	* [r1453] pynslcd/pam.py: remove unneeded import
	* [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,
	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn
	  and attributes to functions separately
	* [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:
	  small code improvements

2011-04-30  arthur

	* [r1450] pam/common.h: make log message clearer when nslcd returns
	  an empty response (user not handled)
	* [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP
	  server unavailable to PAM module
	* [r1448] pam/pam.c: split setting up of configuration into
	  separate function
	* [r1447] nslcd/pam.c: improve password change failed error message
	* [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow
	  properties (similarly to what pam_unix does) in the PAM handling
	  code
	* [r1445] pam/pam.c: do not attempt to change password as root when
	  changing an expired password
	* [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no
	  match found
	* [r1443] nslcd/pam.c: use the right DN in the pam_authz_search
	  option
	* [r1442] nslcd/shadow.c: move code for getting shadow expiry
	  properties to a separate function

2011-04-29  arthur

	* [r1441] nslcd/pam.c: move most of the code for building the
	  authorisation search into the try_autzsearch() function
	* [r1440] nslcd.h, pam/pam.c: support more PAM status codes over
	  the nslcd protocol
	* [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to
	  indicate no expiry (instead of a long time)

2011-04-28  arthur

	* [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: put standard library imports before
	  application imports and remove some unused imports
	* [r1437] pynslcd/group.py: remove duplicate and wrong write()
	  method

2011-04-24  arthur

	* [r1436] nslcd/pam.c: make request indicator shorter
	* [r1435] nslcd.h: document use of returned authorisation message
	* [r1434] nslcd/pam.c: no longer use the userdn parameter passed
	  along with each request (this may mean one or two more lookups
	  when doing authentication but simplifies things)
	* [r1433] tests/test_pamcmds.expect: improve handling of
	  test_login_unknown

2011-04-22  arthur

	* [r1431] nslcd/myldap.c: report correct reported error from
	  ldap_abandon()

2011-04-18  arthur

	* [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of
	  RTLD_NODELETE
	* [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE

2011-04-16  arthur

	* [r1428] nslcd.conf: add example configuration provided by Wesley
	  Mason

2011-04-15  arthur

	* [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,
	  configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement
	  implementation for strndup() for systems that don't have it
	* [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing
	  from r1425)
	* [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,
	  nslcd/group.c, nslcd/passwd.c: support using the objectSid
	  attribute to provide numeric user and group ids, based on a patch
	  by Wesley Mason
	* [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,
	  tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests
	  from another directory

2011-04-03  arthur

	* [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and
	  group name validation errors a little more informative

2011-03-31  arthur

	* [r1422] AUTHORS: add some people who seemed to be missing from
	  the AUTHORS file
	* [r1421] common/tio.c: tv_usec in struct timeval must be lower
	  than 1000000 (patch by SATOH Fumiyasu)
	* [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of
	  $(INSTALL_DATA) -D because -D is not supported on all operating
	  systems (patch by SATOH Fumiyasu)
	* [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of
	  only two characters

2011-03-26  arthur

	* [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.2 release
	* [r1416] tests/Makefile.am, tests/test_nsscmds.sh,
	  tests/test_pamcmds.sh: ensure that all test source files are
	  distibuted and can tests can be run when source directory differs
	  from build directory
	* [r1415] pynslcd/common.py: sync validname regular expression with
	  nslcd

2011-03-25  arthur

	* [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait
	  for all worker threads to finish before exiting (but wait a few
	  seconds on platforms with pthread_timedjoin_np())
	* [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c,
	  tests/test_myldap.c: re-organise tests somewhat making things
	  more consistent
	* [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate
	  patch by Daniel Dehennin to not loose debconf values of
	  previously set options with dpkg-reconfigure
	* [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c,
	  nslcd/cfg.h, nslcd/common.c, tests/Makefile.am,
	  tests/test_common.c: implement a validnames option that can be
	  used to fine-tune the test for valid user and group names using a
	  regular expression

2011-03-24  arthur

	* [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py,
	  pynslcd/service.py: implement service, protocol and rpc lookups
	* [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where
	  the RDN is for some reason not in the cn
	* [r1408] pynslcd/pam.py: fix configuration name
	* [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains
	  of previous value is gone

2011-03-23  arthur

	* [r1406] pynslcd/host.py: fix use of spaces
	* [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of
	  files
	* [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a
	  definition of daemon() for systems that lack it
	* [r1402] compat/ether.h: typo fix in comment

2011-03-19  arthur

	* [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests,
	  tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c:
	  more tests and general test improvements
	* [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c,
	  nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small
	  code improvements
	* [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality
	  that isn't used

2011-03-18  arthur

	* [r1398] tests, tests/Makefile.am, tests/in_testenv.sh,
	  tests/test_nsscmds.sh, tests/test_pamcmds.expect,
	  tests/test_pamcmds.sh: implement test cases for some of the
	  common PAM actions (test environment required for this)

2011-03-17  arthur

	* [r1397] configure.ac, tests/Makefile.am, tests/common.h,
	  tests/test_cfg.c, tests/test_common.c, tests/test_expr.c,
	  tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c:
	  put all assertion functions and compatibility code into one
	  header file
	* [r1396] nslcd.conf: put idle_timelimit option in Active Directory
	  example with low enough default

2011-03-16  arthur

	* [r1395] tests/Makefile.am, tests/test_aliases.c,
	  tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c,
	  tests/test_netgroup.c, tests/test_networks.c,
	  tests/test_nslcd_group.c, tests/test_passwd.c,
	  tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
	  tests/test_shadow.c: remove legacy test code that is no longer
	  used

2011-03-14  arthur

	* [r1394] pam/pam.c: check for user existence before trying
	  password change
	* [r1393] common/tio.c: fix a problem in the timeout paramater that
	  was being passed to select() and could contain too many µsec
	  (fixes Solaris runtime issue)

2011-03-13  arthur

	* [r1392] tests/test_nsscmds.sh: fix name of script in header

2011-03-12  arthur

	* [r1391] configure.ac: include the resolv library for hstrerror()
	  on platforms that need it (thanks Peter Bray)
	* [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX
	  fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX
	  (thanks Peter Bray)

2011-03-11  arthur

	* [r1389] Makefile.am: ensure that permissions are sane in the
	  distributed tarball
	* [r1388] nslcd/myldap.c: fix problem with endless loop on
	  incorrect password
	* [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX
	  fallback definition to header file

2011-03-10  arthur

	* [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.1 release
	* [r1384] Makefile.am, common/tio.c, compat/Makefile.am,
	  compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c,
	  man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c,
	  nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py,
	  pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to
	  add missing years

2011-03-09  arthur

	* [r1383] nslcd/pam.c: fix compiler warning
	* [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle
	  user-not-found errors when doing authentication (CVE-2011-0438)

2011-03-06  arthur

	* [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py,
	  pynslcd/pynslcd.py: implement module for netgroup lookups
	* [r1380] pynslcd/Makefile.am, pynslcd/network.py,
	  pynslcd/pynslcd.py: add network name lookups
	* [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test
	  groups and add the arthur user to them to test whether all are
	  returned correctly
	* [r1378] Makefile.am: pass --enable-pynslcd with distcheck
	* [r1377] pynslcd/Makefile.am: clean up compiled python files
	* [r1376] pynslcd/host.py: fix search filter objectClass for hosts
	* [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that
	  session id is only logged while handling a connection
	* [r1374] man/nslcd.conf.5.xml: note that attribute mapping
	  expressions cannot be used for all attributes

2011-02-14  arthur

	* [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py,
	  pynslcd/tio.py: implement module for hostname lookups
	* [r1372] pynslcd/ether.py: fix comment
	* [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add
	  missing files to installation

2011-02-11  arthur

	* [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in
	  current FreeBSD packaging)
	* [r1369] nslcd/nslcd.c: create the directory for the socket and
	  pidfile

2011-01-29  arthur

	* [r1368] man/nslcd.conf.5.xml: document a proper replacement for
	  pam_check_host_attr (thanks Luca Capello) and add a section on
	  quoting
	* [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c,
	  nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can
	  be used inside pam_authz_search filters

2011-01-23  arthur

	* [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and
	  pam_check_host_attr options in manual page and indicate how
	  pam_authz_search replaces them

2011-01-05  arthur

	* [r1365] AUTHORS, HACKING, configure.ac, debian/copyright,
	  nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd,
	  nss/prototypes.h: add FreeBSD support, partially imported from
	  the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and
	  Alexander V. Chernikov)

2011-01-01  arthur

	* [r1364] nss/Makefile.am: put solnss.c under
	  EXTRA_nss_ldap_so_SOURCES
	* [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml,
	  man/pam_ldap.8.xml: add ids to options so we can more easily
	  reference them from elsewhere (especially useful for generated
	  HTML)
	* [r1362] nslcd/myldap.c: include definition of rc in all code
	  paths because it's used most of the time
	* [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression
	  to one that is supported by more shells
	* [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball