~james-page/ubuntu/maverick/openldap/fix-666028 : changes

~james-page/ubuntu/maverick/openldap/fix-666028 » Changes to doc from revision 30

From Revision 30

Rev	Summary	Authors	Tags	Date
16	[ Steve Langasek ] [ Steve Langasek ] * Fix up the lintian warnings: - add missing misc-depends on all packages - slapd, libldap-2.4-2-dbg sections changed to 'debug' to match archive overrides - bump Standards-Version to 3.8.2, no changes required. [ Mathias Gug ] * Resynchronise with Debian. Remaining changes: - AppArmor support: - debian/apparmor-profile: add AppArmor profile - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/rules: install apparmor profile. - Don't use local statement in config script as it fails if /bin/sh points to bash. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). - Enable nssoverlay: - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. - debian/schema/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. - debian/slapd.postinst: create /var/run/slapd before updating its permissions. - debian/slapd.init: Correctly set slapd config backend option even if the pidfile is configured in slapd default file. * Dropped: - Merged in Debian: - Update priority of libldap-2.4-2 to match the archive override. - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the ldapurl(1) manpage. - Bump build-dependency on debhelper to 6 instead of 5, since that's what we're using. - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using the built-in default of ldap:/// only. - Fixed in upstream release: - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034 failure when built with PIE. - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be trusted. - Update Apparmor profile support: don't support upgrade from pre-hardy systems: - debian/slapd.postinst: Reload AA profile on configuration - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile. - follow ApparmorProfileMigration and force apparmor complain mode on some upgrades - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/patches/autogen.sh: no longer needed with karmic libtool. - Call libtoolize with the --install option to install config.{guess,sub} files.	Mathias Gug	2.4.17-1ubuntu1	14 years ago
15	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - AppArmor support: - debian/apparmor-profile: add AppArmor profile - debian/slapd.postinst: Reload AA profile on configuration - updated debian/slapd.README.Debian for note on AppArmor - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile. - follow ApparmorProfileMigration and force apparmor complain mode on some upgrades - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/patches/autogen.sh: - Call libtoolize with the --install option to install config.{guess,sub} files. - Don't use local statement in config script as it fails if /bin/sh points to bash. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). - Enable nssoverlay: - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. - debian/schema/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. - Update priority of libldap-2.4-2 to match the archive override. - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the ldapurl(1) manpage. - Bump build-dependency on debhelper to 6 instead of 5, since that's what we're using. - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using the built-in default of ldap:/// only. - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034 failure when built with PIE. - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be trusted. - debian/slapd.postinst: create /var/run/slapd before updating its permissions. - debian/slapd.init: Correctly set slapd config backend option even if the pidfile is configured in slapd default file. * Drop patch to avoid the test suite on hppa, as hppa is EOL.	Colin Watson	2.4.15-1.1ubuntu1	15 years ago
11	[ Steve Langasek ] [ Steve Langasek ] * New upstream version - Fixes a bug with the pcache overlay not returning cached entries (closes: #497697) - Update evolution-ntlm patch to apply to current Makefiles. - (tentatively) drop gnutls-ciphers, since this bug was reported to be fixed upstream in 2.4.8. The fix applied in 2.4.8 didn't match the patch from the bug report, so this should be watched for regressions. * Build against db4.7 instead of db4.2 at last! Closes: #421946. * Build with --disable-ndb, to avoid a misbuild when libmysqlclient is installed in the build environment. * New patch, no-crlcheck-for-gnutls, to fix a build failure when using --with-tls=gnutls. [ Mathias Gug ] * Merge from debian unstable, remaining changes: - debian/apparmor-profile: add AppArmor profile - debian/slapd.postinst: Reload AA profile on configuration - updated debian/slapd.README.Debian for note on AppArmor - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmour-profiles gets installed it won't overwrite our profile. - Modify Maintainer value to match the DebianMaintainerField speficication. - follow ApparmorProfileMigration and force apparmor compalin mode on some upgrades (LP: #203529) - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/patches/fix-ucred-libc due to changes how newer glibc handle the ucred struct now. - debian/control: - Build-depend on libltdl7-dev rather then libltdl3-dev. - debian/patches/autogen.sh: - Call libtoolize with the --install option to install config.{guess,sub} files. - Don't use local statement in config script as it fails if /bin/sh points to bash (LP: #286063). - Disable the testsuite on hppa. Allows building of packages on this architecture again, once this package is in the archive. LP: #288908. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). (LP: #257667). - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. debian/schema/misc.ldif: add ldif file for the misc schema, which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. * debian/patches/corrupt-contextCSN: The contextCSN can get corrupted at times. (ITS: #5947)	Mathias Gug	2.4.14-0ubuntu1	15 years ago
1	Import upstream version 2.4.10 Import upstream version 2.4.10	Mathias Gug	upstream-2.4.10	15 years ago