path: root/ChangeLog

2011-05-13 13:02  arthur

	* [r1461] debian/libnss-ldapd.postinst: don't unconditionally
	  restart nscd but just try to invalidate the cache for the maps
	  that change

2011-05-13 13:01  arthur

	* [r1460] debian/libnss-ldapd.config: correctly pick up current
	  configuration of /etc/nsswitch.conf when running dpkg-reconfigure

2011-05-13 12:41  arthur

	* [r1459] debian/control: upgrade to standards-version 3.9.2

2011-05-13 12:15  arthur

	* [r1458] common/expr.c, common/expr.h: switch variable expander
	  function type name because _t suffix is reserved

2011-05-13 11:57  arthur

	* [r1457] debian/control, debian/nslcd.config: search for LDAP
	  server by looking for SRV _ldap._tcp DNS records and try to query
	  LDAP server for base DN during package configuration (based on
	  work by Petter Reinholdtsen for the sssd package)

2011-05-13 07:48  arthur

	* [r1456] debian/nslcd.config: fix domain to basedn expansion when
	  having more than two domain parts (patch by Per Carlson)

2011-05-13 07:04  arthur

	* [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: simplify request handling by passing read
	  parameters around in a dict instead of setting object properties
	  (this mainly simplifies search filter building)

2011-05-01 19:08  arthur

	* [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,
	  pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,
	  pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement
	  attribute mapping functionality and do some refactoring

2011-05-01 12:18  arthur

	* [r1453] pynslcd/pam.py: remove unneeded import

2011-05-01 12:14  arthur

	* [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,
	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn
	  and attributes to functions separately

2011-05-01 12:06  arthur

	* [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:
	  small code improvements

2011-04-30 21:28  arthur

	* [r1450] pam/common.h: make log message clearer when nslcd returns
	  an empty response (user not handled)

2011-04-30 21:26  arthur

	* [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP
	  server unavailable to PAM module

2011-04-30 21:01  arthur

	* [r1448] pam/pam.c: split setting up of configuration into
	  separate function

2011-04-30 19:54  arthur

	* [r1447] nslcd/pam.c: improve password change failed error message

2011-04-30 14:37  arthur

	* [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow
	  properties (similarly to what pam_unix does) in the PAM handling
	  code

2011-04-30 09:15  arthur

	* [r1445] pam/pam.c: do not attempt to change password as root when
	  changing an expired password

2011-04-30 08:39  arthur

	* [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no
	  match found

2011-04-30 08:12  arthur

	* [r1443] nslcd/pam.c: use the right DN in the pam_authz_search
	  option

2011-04-30 08:00  arthur

	* [r1442] nslcd/shadow.c: move code for getting shadow expiry
	  properties to a separate function

2011-04-29 21:06  arthur

	* [r1441] nslcd/pam.c: move most of the code for building the
	  authorisation search into the try_autzsearch() function

2011-04-29 18:21  arthur

	* [r1440] nslcd.h, pam/pam.c: support more PAM status codes over
	  the nslcd protocol

2011-04-29 18:19  arthur

	* [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to
	  indicate no expiry (instead of a long time)

2011-04-28 18:47  arthur

	* [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
	  pynslcd/shadow.py: put standard library imports before
	  application imports and remove some unused imports

2011-04-28 18:32  arthur

	* [r1437] pynslcd/group.py: remove duplicate and wrong write()
	  method

2011-04-24 21:01  arthur

	* [r1436] nslcd/pam.c: make request indicator shorter

2011-04-24 20:54  arthur

	* [r1435] nslcd.h: document use of returned authorisation message

2011-04-24 20:52  arthur

	* [r1434] nslcd/pam.c: no longer use the userdn parameter passed
	  along with each request (this may mean one or two more lookups
	  when doing authentication but simplifies things)

2011-04-24 20:26  arthur

	* [r1433] tests/test_pamcmds.expect: improve handling of
	  test_login_unknown

2011-04-22 10:02  arthur

	* [r1431] nslcd/myldap.c: report correct reported error from
	  ldap_abandon()

2011-04-18 21:30  arthur

	* [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of
	  RTLD_NODELETE

2011-04-18 20:53  arthur

	* [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE

2011-04-16 14:00  arthur

	* [r1428] nslcd.conf: add example configuration provided by Wesley
	  Mason

2011-04-15 21:20  arthur

	* [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,
	  configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement
	  implementation for strndup() for systems that don't have it

2011-04-15 21:20  arthur

	* [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing
	  from r1425)

2011-04-15 21:16  arthur

	* [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,
	  nslcd/group.c, nslcd/passwd.c: support using the objectSid
	  attribute to provide numeric user and group ids, based on a patch
	  by Wesley Mason

2011-04-15 19:10  arthur

	* [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,
	  tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests
	  from another directory

2011-04-03 21:10  arthur

	* [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and
	  group name validation errors a little more informative

2011-03-31 20:50  arthur

	* [r1422] AUTHORS: add some people who seemed to be missing from
	  the AUTHORS file

2011-03-31 20:22  arthur

	* [r1421] common/tio.c: tv_usec in struct timeval must be lower
	  than 1000000 (patch by SATOH Fumiyasu)

2011-03-31 20:16  arthur

	* [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of
	  $(INSTALL_DATA) -D because -D is not supported on all operating
	  systems (patch by SATOH Fumiyasu)

2011-03-31 19:16  arthur

	* [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of
	  only two characters

2011-03-26 20:51  arthur

	* [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.2 release

2011-03-26 16:16  arthur

	* [r1416] tests/Makefile.am, tests/test_nsscmds.sh,
	  tests/test_pamcmds.sh: ensure that all test source files are
	  distibuted and can tests can be run when source directory differs
	  from build directory

2011-03-26 14:36  arthur

	* [r1415] pynslcd/common.py: sync validname regular expression with
	  nslcd

2011-03-25 21:39  arthur

	* [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait
	  for all worker threads to finish before exiting (but wait a few
	  seconds on platforms with pthread_timedjoin_np())

2011-03-25 16:15  arthur

	* [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c,
	  tests/test_myldap.c: re-organise tests somewhat making things
	  more consistent

2011-03-25 16:08  arthur

	* [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate
	  patch by Daniel Dehennin to not loose debconf values of
	  previously set options with dpkg-reconfigure

2011-03-25 13:30  arthur

	* [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c,
	  nslcd/cfg.h, nslcd/common.c, tests/Makefile.am,
	  tests/test_common.c: implement a validnames option that can be
	  used to fine-tune the test for valid user and group names using a
	  regular expression

2011-03-24 22:19  arthur

	* [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py,
	  pynslcd/service.py: implement service, protocol and rpc lookups

2011-03-24 22:18  arthur

	* [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where
	  the RDN is for some reason not in the cn

2011-03-24 22:15  arthur

	* [r1408] pynslcd/pam.py: fix configuration name

2011-03-24 22:09  arthur

	* [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains
	  of previous value is gone

2011-03-23 21:55  arthur

	* [r1406] pynslcd/host.py: fix use of spaces

2011-03-23 21:43  arthur

	* [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of
	  files

2011-03-23 21:28  arthur

	* [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a
	  definition of daemon() for systems that lack it

2011-03-23 20:30  arthur

	* [r1402] compat/ether.h: typo fix in comment

2011-03-19 15:14  arthur

	* [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests,
	  tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c:
	  more tests and general test improvements

2011-03-19 15:14  arthur

	* [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c,
	  nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small
	  code improvements

2011-03-19 15:13  arthur

	* [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality
	  that isn't used

2011-03-18 14:33  arthur

	* [r1398] tests, tests/Makefile.am, tests/in_testenv.sh,
	  tests/test_nsscmds.sh, tests/test_pamcmds.expect,
	  tests/test_pamcmds.sh: implement test cases for some of the
	  common PAM actions (test environment required for this)

2011-03-17 21:02  arthur

	* [r1397] configure.ac, tests/Makefile.am, tests/common.h,
	  tests/test_cfg.c, tests/test_common.c, tests/test_expr.c,
	  tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c:
	  put all assertion functions and compatibility code into one
	  header file

2011-03-17 21:01  arthur

	* [r1396] nslcd.conf: put idle_timelimit option in Active Directory
	  example with low enough default

2011-03-16 21:54  arthur

	* [r1395] tests/Makefile.am, tests/test_aliases.c,
	  tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c,
	  tests/test_netgroup.c, tests/test_networks.c,
	  tests/test_nslcd_group.c, tests/test_passwd.c,
	  tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
	  tests/test_shadow.c: remove legacy test code that is no longer
	  used

2011-03-14 21:42  arthur

	* [r1394] pam/pam.c: check for user existence before trying
	  password change

2011-03-14 20:19  arthur

	* [r1393] common/tio.c: fix a problem in the timeout paramater that
	  was being passed to select() and could contain too many µsec
	  (fixes Solaris runtime issue)

2011-03-13 15:25  arthur

	* [r1392] tests/test_nsscmds.sh: fix name of script in header

2011-03-12 08:41  arthur

	* [r1391] configure.ac: include the resolv library for hstrerror()
	  on platforms that need it (thanks Peter Bray)

2011-03-12 08:34  arthur

	* [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX
	  fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX
	  (thanks Peter Bray)

2011-03-11 20:37  arthur

	* [r1389] Makefile.am: ensure that permissions are sane in the
	  distributed tarball

2011-03-11 18:02  arthur

	* [r1388] nslcd/myldap.c: fix problem with endless loop on
	  incorrect password

2011-03-11 15:49  arthur

	* [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX
	  fallback definition to header file

2011-03-10 21:45  arthur

	* [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.1 release

2011-03-10 20:35  arthur

	* [r1384] Makefile.am, common/tio.c, compat/Makefile.am,
	  compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c,
	  man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c,
	  nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py,
	  pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to
	  add missing years

2011-03-09 22:33  arthur

	* [r1383] nslcd/pam.c: fix compiler warning

2011-03-09 22:32  arthur

	* [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle
	  user-not-found errors when doing authentication (CVE-2011-0438)

2011-03-06 15:58  arthur

	* [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py,
	  pynslcd/pynslcd.py: implement module for netgroup lookups

2011-03-06 15:09  arthur

	* [r1380] pynslcd/Makefile.am, pynslcd/network.py,
	  pynslcd/pynslcd.py: add network name lookups

2011-03-06 15:06  arthur

	* [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test
	  groups and add the arthur user to them to test whether all are
	  returned correctly

2011-03-06 14:52  arthur

	* [r1378] Makefile.am: pass --enable-pynslcd with distcheck

2011-03-06 14:52  arthur

	* [r1377] pynslcd/Makefile.am: clean up compiled python files

2011-03-06 14:49  arthur

	* [r1376] pynslcd/host.py: fix search filter objectClass for hosts

2011-03-06 14:23  arthur

	* [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that
	  session id is only logged while handling a connection

2011-03-06 13:01  arthur

	* [r1374] man/nslcd.conf.5.xml: note that attribute mapping
	  expressions cannot be used for all attributes

2011-02-14 21:12  arthur

	* [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py,
	  pynslcd/tio.py: implement module for hostname lookups

2011-02-14 21:11  arthur

	* [r1372] pynslcd/ether.py: fix comment

2011-02-14 21:08  arthur

	* [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add
	  missing files to installation

2011-02-11 22:18  arthur

	* [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in
	  current FreeBSD packaging)

2011-02-11 22:16  arthur

	* [r1369] nslcd/nslcd.c: create the directory for the socket and
	  pidfile

2011-01-29 20:19  arthur

	* [r1368] man/nslcd.conf.5.xml: document a proper replacement for
	  pam_check_host_attr (thanks Luca Capello) and add a section on
	  quoting

2011-01-29 20:15  arthur

	* [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c,
	  nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can
	  be used inside pam_authz_search filters

2011-01-23 20:59  arthur

	* [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and
	  pam_check_host_attr options in manual page and indicate how
	  pam_authz_search replaces them

2011-01-05 19:39  arthur

	* [r1365] AUTHORS, HACKING, configure.ac, debian/copyright,
	  nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd,
	  nss/prototypes.h: add FreeBSD support, partially imported from
	  the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and
	  Alexander V. Chernikov)

2011-01-01 14:46  arthur

	* [r1364] nss/Makefile.am: put solnss.c under
	  EXTRA_nss_ldap_so_SOURCES

2011-01-01 14:25  arthur

	* [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml,
	  man/pam_ldap.8.xml: add ids to options so we can more easily
	  reference them from elsewhere (especially useful for generated
	  HTML)

2011-01-01 14:12  arthur

	* [r1362] nslcd/myldap.c: include definition of rc in all code
	  paths because it's used most of the time

2011-01-01 14:10  arthur

	* [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression
	  to one that is supported by more shells

2011-01-01 14:07  arthur

	* [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball