~ubuntu-branches/debian/sid/nss-pam-ldapd/sid

2011-12-31  arthur

	* [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.8.5 release

2011-12-30  arthur

	* [r1583] debian/control: fix versioned build dependency on

	  debhelper

2011-12-28  arthur

	* [r1582] pynslcd/config.py.in: remove some information from config

	  that we don't expect to use

	* [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py,

	  pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py:

	  support for reading the configuration file (not all options are

	  used though)

	* [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state

	  variables (from command line) from the configuration to the main

	  module

	* [r1579] pynslcd/pam.py: fall back to trying to authenticate with

	  provided password (in case rootpwmodpw is not set or unusable)

	* [r1578] pynslcd/group.py: never request group members for

	  GroupByMemberRequest

	* [r1577] pynslcd/group.py: instead of modifying attmap, modify

	  attribute list

	* [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to

	  attmap (broken in r1571)

	* [r1575] nslcd/nslcd.c: typo fix in comment

2011-12-27  arthur

	* [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py,

	  pynslcd/passwd.py, pynslcd/shadow.py: make logging more

	  consistent and remove test bases from shadow and passwd maps

	* [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py,

	  pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py,

	  pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes

	* [r1572] debian/copyright: update copyright information

2011-12-12  arthur

	* [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,

	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,

	  pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,

	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the

	  search separately from the request

	* [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,

	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,

	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,

	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,

	  pynslcd/shadow.py: move check of required attributes and other

	  common tests to the Request.handle_entry() method

2011-12-10  arthur

	* [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV

	  records

	* [r1568] nslcd/nslcd.c: properly handle failures to truncate the

	  pid file

	* [r1567] debian/nslcd.config: get the first configuration value

	  instead of the last because that one is also written

	* [r1566] debian/nslcd.config: fix a deprecated use of head without

	  the -n option

	* [r1565] debian/rules: enable more hardening options (-fPIE

	  doesn't work yet because we use -fPIC in some places)

	* [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm:

	  ensure that the output of nss_list_configured() is space

	  separated

	* [r1563] m4/ax_pthread.m4: update macro from autoconf-archive

2011-12-09  jhrozek

	* [r1560] nslcd/myldap.c: Fix a typo in disconnect logic

2011-12-01  arthur

	* [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are

	  properly initialised and log denied requests

2011-11-30  arthur

	* [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only

	  loaded once after start-up

2011-11-18  arthur

	* [r1556] debian/libnss-ldapd.config: simplification of logic to

	  overwrite list of enabled /etc/nsswitch.conf services in debconf

	  (based on r1555 of 0.7 branch)

2011-10-12  arthur

	* [r1554] debian/control: add versioned dependency on libpam for

	  mutiarch support

	* [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS

	  function by Tom Judge (taken from FreeBSD PR 154000)

2011-10-10  arthur

	* [r1552] debian/rules: keep nslcd running during package upgrades

2011-10-02  arthur

	* [r1551] nslcd/pam.c: reduce loglevel of user not found messages

	  to avoid spamming the logs with useless information (thanks Wakko

	  Warner)

2011-09-30  jhrozek

	* [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,

	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:

	  Use an explicit base of 10 for strtouid()/strtogid()/strtol()

	  calls

2011-09-21  arthur

	* [r1546] debian/nslcd.config: treat the "hard" value for

	  tls_reqcert as if it was "demand"

2011-09-14  arthur

	* [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm,

	  debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst:

	  make whitespace matching consistent in regular expressions

	  (thanks Nick)

2011-09-09  arthur

	* [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c,

	  nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c,

	  nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,

	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:

	  make validation log messages consistent

	* [r1541] nslcd/nsswitch.c: add missing include

2011-09-08  arthur

	* [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size

	  and consistency improvements to other buffers

	* [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string

	  representations of addresses more logical names

2011-09-07  arthur

	* [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv)

	  translation of debconf templates by Martin Bagge

2011-09-04  arthur

	* [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac,

	  debian/changelog, debian/copyright, man/nslcd.8.xml,

	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for

	  0.8.4 release

	* [r1535] tests/test_getpeercred.c: warn when we couldn't get the

	  gid or pid, the uid is the only really interesting bit

	* [r1534] tests/test_tio.c: add casts from size_t to int for printf

	* [r1533] debian/rules: ignore failures in tests

	* [r1532] debian/rules: use auto-detection for LDAP library and

	  defaults for config file, socket and pidfile (no changes)

2011-09-03  arthur

	* [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,

	  debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support

	  spaces before and after database name while parsing

	  /etc/nsswitch.conf and reduce the number of places where parsing

	  is done

2011-08-30  arthur

	* [r1530] debian/nslcd.postinst: correctly handle leading and

	  trailing spaces in preseeded uri option (patch by Andreas B.

	  Mundt)

	* [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and

	  LDAP_REFERRALS to configure.ac to ensure that tests from

	  configure see the same API

2011-08-29  arthur

	* [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement

	  and use a strtoui() function if uid_t or gid_t is of size

	  unsigned int (thanks Jakub Hrozek)

	* [r1527] pynslcd/Makefile.am: get rid of automake warning

	* [r1526] configure.ac: silence autoconf warnings, patch by Jakub

	  Hrozek

	* [r1525] debian/po/nl.po: some changes based on feedback by Jeroen

	  Schot

2011-08-27  arthur

	* [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c,

	  nslcd/passwd.c: provide strtouid() and strtogid() functions that

	  use strtoul() or strtoull() (thanks Jakub Hrozek)

	* [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,

	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:

	  check errno after calls to strtol() to ensure that numbers that

	  are too large for type will be reported (thanks Jakub Hrozek)

	* [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated

	  callback structure to OpenLDAP because it doesn't make it's own

	  copy (thanks Jakub Hrozek) (fixes a problem in r1490)

	* [r1521] debian/po/nl.po: some changes based on feedback by Paul

	  Gevers

2011-08-26  arthur

	* [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation

	* [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po,

	  debian/po/it.po, debian/po/nb.po, debian/po/nl.po,

	  debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small

	  formatting changes to header

2011-08-25  arthur

	* [r1518] debian/po/es.po: updated Spanish (es) translation of

	  debconf templates by Francisco Javier Cuadrado

2011-08-24  arthur

	* [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai)

	* [r1515] nslcd/cfg.c: fix a problem with uninitialised memory

	  while parsing the tls_ciphers option (was broken in r853, similar

	  problem was fixed in r910, reported by Isaac Freeman)

	* [r1514] debian/po/de.po: updated German (de) translation of

	  debconf templates by Chris Leick

	* [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support

	  querying DNS SRV records from a different domain than the current

	  one (based on a patch by James M. Leddy)

2011-08-23  arthur

	* [r1512] debian/po/cs.po: updated Czech (cs) translation of

	  debconf templates by Miroslav Kure

2011-08-19  arthur

	* [r1511] debian/po/fr.po: typo fix provided by Christian Perrier

2011-08-17  arthur

	* [r1510] AUTHORS: add new translators to AUTHORS file

	* [r1509] debian/po/ja.po: updated Japanese (ja) translation of

	  debconf templates by Kenshi Muto

	* [r1508] debian/po/pt.po: updated Portuguese (pt) translation of

	  debconf templates by Américo Monteiro

2011-08-14  arthur

	* [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)

	  translation of debconf templates by Denis Doria

	* [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am:

	  split 2009 and 2010 changes to separate ChangeLog files

	* [r1505] nss/networks.c: remove unused variable

	* [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am:

	  put external libraries at the end when linking

	* [r1503] configure.ac: remove some tests for symbols we aren't

	  using

	* [r1502] debian/libnss-ldapd.lintian-overrides: add lintian

	  override for SONAME check

	* [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)

	  translation of debconf templates by Denis Doria

	* [r1500] debian/po/da.po: update Danish (da) translation of

	  debconf templates by Joe Hansen

	* [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf

	  templates by Slavko

	* [r1498] debian/po/fr.po: updated French (fr) translation of

	  debconf templates by Christian Perrier

	* [r1497] debian/po/ru.po: updated Russian (ru) translation of

	  debconf templates by Yuri Kozlov

2011-08-10  arthur

	* [r1496] AUTHORS: fix spelling of name (sorry about that)

2011-08-09  arthur

	* [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether

	  file should be reloaded

	* [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,

	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,

	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,

	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,

	  debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po

	  files

	* [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small

	  language updates based on feedback by Justin B Rye

2011-08-08  arthur

	* [r1492] debian/nslcd.templates: incorporate feedback on debconf

	  templates by debian-l10n-english@lists.debian.org (thanks Justin

	  B Rye and Christian PERRIER)

2011-08-07  arthur

	* [r1491] Makefile.am, debian/compat, debian/control,

	  debian/libnss-ldapd.install,

	  debian/libnss-ldapd.lintian-overrides,

	  debian/libnss-ldapd.postinst, debian/libpam-ldapd.install,

	  debian/rules, debian/source/lintian-overrides: build Debian

	  packages with multiarch support

	* [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a

	  connection callback to avoid timeout issues during the SSL

	  handshake (based on a patch by Stefan Völkel)

2011-08-06  arthur

	* [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD

	  from http://www.gnu.org/software/autoconf-archive/ax_pthread.html

2011-08-05  arthur

	* [r1488] pynslcd/group.py, tests/test_myldap.c: replace last

	  traces of groupOfUniqueNames

	* [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c,

	  nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow

	  map queries LDAP before returning x as a password has for shadow

	  users

	* [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:

	  update tests with change of member/uniqueMember default change

	  (r1484)

	* [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h,

	  nslcd/passwd.c: implementation of myldap_get_values_len() to use

	  ldap_get_values_len() instead of ldap_get_values() to fix some

	  problems with binary data in returned attribute values (patch by

	  Wesley Mason)

2011-08-03  arthur

	* [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h,

	  nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to

	  using the member attribute by default instead of uniqueMember

2011-07-21  arthur

	* [r1483] README: remove obsolete attribute from documentation

2011-07-15  arthur

	* [r1482] debian/nslcd.init: on restart only log_end_msg once

2011-07-04  arthur

	* [r1481] configure.ac: show the default value for the

	  pam-seclib-dir option

2011-07-03  arthur

	* [r1480] compat/getpeercred.c: fix header

	* [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for

	  systems with only PAM_AUTHTOK_RECOVER_ERR

2011-07-02  arthur

	* [r1478] Makefile.am, debian/compat, debian/control,

	  debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update,

	  debian/nslcd.install, debian/pam-configs,

	  debian/pam-configs/ldap, debian/rules: switch to dh for

	  debian/rules and bump debhelper compatibility to 8

	* [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c,

	  nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent,

	  grow gidNumber buffer to hold larger numbers and small

	  consistency improvements

2011-06-10  arthur

	* [r1475] nslcd/pam.c: correctly only check password expiration

	  when authenticating, only check account expiration when doing

	  authorisation check

2011-06-05  arthur

	* [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in

	  pam_authz_search to see if they exist

	* [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const

	  and don't free() data returned by cfg_getdomainname()

	* [r1471] common/expr.c, tests/test_expr.c: handle expressions

	  where the expander function returns NULL (handle it as an empty

	  string)

	* [r1470] nslcd/myldap.c: fix r1468

	* [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to

	  handle splitting attribute and value correctly

	* [r1467] config.guess, config.sub: include updated files

2011-05-23  arthur

	* [r1466] tests/test_common.c: add test case for two-character user

	  name

2011-05-21  arthur

	* [r1464] nslcd/myldap.c: fix problem with partial attribute name

	  matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White

	  for the fix)

2011-05-13  arthur

	* [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.8.3 release

	* [r1461] debian/libnss-ldapd.postinst: don't unconditionally

	  restart nscd but just try to invalidate the cache for the maps

	  that change

	* [r1460] debian/libnss-ldapd.config: correctly pick up current

	  configuration of /etc/nsswitch.conf when running dpkg-reconfigure

	* [r1459] debian/control: upgrade to standards-version 3.9.2

	* [r1458] common/expr.c, common/expr.h: switch variable expander

	  function type name because _t suffix is reserved

	* [r1457] debian/control, debian/nslcd.config: search for LDAP

	  server by looking for SRV _ldap._tcp DNS records and try to query

	  LDAP server for base DN during package configuration (based on

	  work by Petter Reinholdtsen for the sssd package)

	* [r1456] debian/nslcd.config: fix domain to basedn expansion when

	  having more than two domain parts (patch by Per Carlson)

	* [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,

	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,

	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,

	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,

	  pynslcd/shadow.py: simplify request handling by passing read

	  parameters around in a dict instead of setting object properties

	  (this mainly simplifies search filter building)

2011-05-01  arthur

	* [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,

	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,

	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,

	  pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,

	  pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement

	  attribute mapping functionality and do some refactoring

	* [r1453] pynslcd/pam.py: remove unneeded import

	* [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,

	  pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,

	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,

	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn

	  and attributes to functions separately

	* [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:

	  small code improvements

2011-04-30  arthur

	* [r1450] pam/common.h: make log message clearer when nslcd returns

	  an empty response (user not handled)

	* [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP

	  server unavailable to PAM module

	* [r1448] pam/pam.c: split setting up of configuration into

	  separate function

	* [r1447] nslcd/pam.c: improve password change failed error message

	* [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow

	  properties (similarly to what pam_unix does) in the PAM handling

	  code

	* [r1445] pam/pam.c: do not attempt to change password as root when

	  changing an expired password

	* [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no

	  match found

	* [r1443] nslcd/pam.c: use the right DN in the pam_authz_search

	  option

	* [r1442] nslcd/shadow.c: move code for getting shadow expiry

	  properties to a separate function

2011-04-29  arthur

	* [r1441] nslcd/pam.c: move most of the code for building the

	  authorisation search into the try_autzsearch() function

	* [r1440] nslcd.h, pam/pam.c: support more PAM status codes over

	  the nslcd protocol

	* [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to

	  indicate no expiry (instead of a long time)

2011-04-28  arthur

	* [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,

	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,

	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,

	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,

	  pynslcd/shadow.py: put standard library imports before

	  application imports and remove some unused imports

	* [r1437] pynslcd/group.py: remove duplicate and wrong write()

	  method

2011-04-24  arthur

	* [r1436] nslcd/pam.c: make request indicator shorter

	* [r1435] nslcd.h: document use of returned authorisation message

	* [r1434] nslcd/pam.c: no longer use the userdn parameter passed

	  along with each request (this may mean one or two more lookups

	  when doing authentication but simplifies things)

	* [r1433] tests/test_pamcmds.expect: improve handling of

	  test_login_unknown

2011-04-22  arthur

	* [r1431] nslcd/myldap.c: report correct reported error from

	  ldap_abandon()

2011-04-18  arthur

	* [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of

	  RTLD_NODELETE

	* [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE

2011-04-16  arthur

	* [r1428] nslcd.conf: add example configuration provided by Wesley

	  Mason

2011-04-15  arthur

	* [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,

	  configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement

	  implementation for strndup() for systems that don't have it

	* [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing

	  from r1425)

	* [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,

	  nslcd/group.c, nslcd/passwd.c: support using the objectSid

	  attribute to provide numeric user and group ids, based on a patch

	  by Wesley Mason

	* [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,

	  tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests

	  from another directory