~ubuntu-branches/debian/sid/nss-pam-ldapd/sid : changes

~ubuntu-branches/debian/sid/nss-pam-ldapd/sid » Changes from revision 35

From Revision 35 to 16

Rev	Summary	Authors	Tags	Date
35	avoid-signal-race.patch: avoid a signal mask race condition ... avoid-signal-race.patch: avoid a signal mask race condition that could prevent nslcd from starting correctly during boot (closes: #759544)	Arthur de Jong	0.9.5-2	9 years ago
34	* new upstream release: * new upstream release: - handle situation better when server (or firewall) closed the connection (thanks Tim Harder) - make daemonising a little more robust and try to log more failures - fix integer format strings (thanks Jianhai Luan and Patrick McLean) - documentation updates (thanks Dalibor Pospíšil) - fix range check for search access (thanks David Binderma) - fix a bug in the NSS library when encountering IPv6 addresses in the hosts map (thanks Mark R Bannister) - adjust the Linux OOM (Out-Of-Memory) killer score to avoid killing nslcd (thanks Patrick McLean) * drop use-ip-range-for-tests.patch which is part of 0.9.5 * debian/copyright: copyright year updates * upgrade to standards-version 3.9.6 (no changes needed)	Arthur de Jong	0.9.5-1	9 years ago
33	* use-ip-range-for-tests.patch: use a different IP range for... * use-ip-range-for-tests.patch: use a different IP range for running the autopkgtest tests to avoid conflicts in test environments * debconf translation updates: - Norwegian Bokmål by Petter Reinholdtsen (closes: #758693) * prefer nslcd as nslcd-2 implementation (closes: #760287) * do not remove PAM profile when another architecture remains (taken from the libpam_ldap package)	Arthur de Jong	0.9.4-3	9 years ago
32	* debconf translation updates: * debconf translation updates: - Portuguese by Américo Monteiro (closes: #751047) - French by Christian Perrier (closes: #751100) - Japanese by Kenshi Muto (closes: #752515) - Russian by Yuri Kozlov (closes: #752550) - Dutch by Arthur de Jong - Swedish by Martin Bagge (closes: #753691) (with corrections by Anders Jonsson) - Czech by Miroslav Kure (closes: #753710) - Danish by Joe Hansen (closes: #753948) - Turkish by Mert Dirik (closes: #754101) - Slovak by Slavko (closes: #754284) - German by Chris Leick (closes: #754476) - Polish by Michał Kułach (closes: #754989) - Spanish by Matías A. Bellone (closes: #755037) - Italian by Beatrice Torracca (closes: #755282) * for new installs add tls_cacertfile /etc/ssl/certs/ca-certificates.crt to nslcd.conf (closes: #750949) * provide a debconf prompt for tls_cacertfile if TLS is enabled and reqcert is configured (closes: #750949, #661872) * update autopkgtest tests to dump daemon debug info if tests fail and not stop the tests on first failure	Arthur de Jong	0.9.4-2	9 years ago
31	* upload to unstable * upload to unstable * new upstream release: - also handle password policy information on BIND failure (this makes it possible to distinguish between a wrong password and an expired password) - fix mapping the member attribute to an empty string - any buffers that may have held passwords are cleared before the memory is released - increase buffer size for passwords to support extremely long passwords (thanks ushi) - increase buffer size for DN to support very long names or names with non-ASCII characters - log an error in almost all places where a defined buffer is not large enough to hold the provided data instead of just (sometimes silently) failing - logging improvements (start-up problems, login failures) * add signature checking option to watch file * add a debian/upstream/metadata file	Arthur de Jong	0.9.4-1	9 years ago
30	* new upstream release: * new upstream release: - implement an -n switch to not daemonise (by Caleb Callaway) - increase password value buffer size (by Bersl) - fix for pwdLastSet attribute value handling (thanks Joshua Shire) - fix buffer overflow on interrupted read that is hard to trigger (thanks John Sullivan) - fix a possible crash in the NSS module when retrieving large networks entries (thanks Lukas Slebodnik) - avoid more broken pipe errors by using a low timeout when aborting reading requested information from nslcd (thanks John Sullivan) - only log broken pipe errors in debugging mode - ignore SIGUSR1 and SIGUSR2 for future compatibility * drop implement-nofork.patch which is part of 0.8.14 * upgrade to standards-version 3.9.5 (no changes needed)	Arthur de Jong	0.8.14-1	10 years ago
29	* implement-nofork.patch: introduce a -n, --nofork option th... * implement-nofork.patch: introduce a -n, --nofork option that skips the daemonising step on start-up (this is related to Ubuntu bug 806761 and may be required to get nslcd working with upstart) * add init script dependency on $network to ensure that network is up before starting nslcd (closes: #726435) * clean generated manual pages to allow the package to be built tice in a row	Arthur de Jong	0.8.13-3	10 years ago
28	* debian/copyright: copyright year updates * debian/copyright: copyright year updates * feedback from the debian-l10n-english contributors on the debconf templates and package descriptions (closes: #707193) (thanks Christian PERRIER and Justin B Rye) * debconf translation updates: - Japanese by Kenshi Muto (closes: #711867) - Russian by Yuri Kozlov (closes: #711884) - Slovak by Slavko (closes: #711889) - Portuguese by Américo Monteiro (closes: #712231) - Danish by Joe Hansen (closes: #712311) - German by Chris Leick (closes: #712728) - French by Christian Perrier (closes: #712847) - Turkish by Atila KOÇ (closes: #712876) - Czech by Miroslav Kure (closes: #713047) - Italian by Beatrice Torracca (closes: #713987) - Dutch by Arthur de Jong - Swedish by Martin Bagge (closes: #714651) * new debconf translations: - Polish by Michał Kułach (closes: #713921) * debian/nslcd.config: properly handle preseeding and reading values from the configuration file by forcefully overwriting debconf values from nslcd.conf and not overwriting debconf values when reading other configuration files (closes: #717063)	Arthur de Jong	0.8.13-2	10 years ago
27	* New upstream release * New upstream release - include an extra sanity check to ensure not too many file descriptors are open - fix handling of gid configuration option if it listed before the uid option - return NSS_STATUS_TRYAGAIN on zero-length (but not-NULL) buffer (thanks Jakub Hrozek) - provide an _nss_ldap_version symbol in the NSS module to help debug problems with a newer nslcd - retry updating the lastChange attribute with the normal nslcd LDAP connection if the update with the user's connection failed - avoid processing passwd_byuid requests for uids below nss_min_uid - fix a few minor or very unlikely to occur memory leaks - miscellaneous minor changes, fixes and compatibility improvements * drop 01-fix-set-usec-instead-of-sec.patch which is part of 0.8.13 * remove compatibility code that converted nss-ldapd.conf to nslcd.conf for upgrading from pre-0.7 versions of nss-ldapd (thanks Dominik George) * remove code for fixing permissions when upgrading from a pre-0.6.7.1 version * updated Turkish debconf translation by Atila KOÇ (closes: #701067) * drop Richard A Nelson from uploaders * add build dependency on autotools-dev to ensure config.sub and config.guess are automatically updated during build	Arthur de Jong	0.8.13-1	11 years ago
26	01-use-poll-instead-of-select.patch: update patch to fix a p... 01-use-poll-instead-of-select.patch: update patch to fix a problem in the timeout calculation used in the communication protocol between nslcd and the NSS and PAM modules, thanks Julien Cristau	Arthur de Jong	0.8.10-4	11 years ago
25	* fix a problem in sed logic for commenting out disabled opt... * fix a problem in sed logic for commenting out disabled options (closes: #689296) * support "EXTERNAL" SASL mechanism in debconf configuration (LP: #1063923) (the debconf template has been postponed to avoid having to update all translations for a relatively minor change) * 01-use-poll-instead-of-select.patch: use poll() instead of select() for checking file descriptor activity to also correctly work if more than FD_SETSIZE files are already open (closes: #690319)	Arthur de Jong	0.8.10-3	11 years ago
24	* fix typo in comment (thanks Caleb Callaway) * fix typo in comment (thanks Caleb Callaway) * install a ldapns.ldif in nslcd doc directory (closes: #674591) * ensure that time is set before starting k5start to ensure that Kerberos ticket is granted (closes: #659227) * properly parse and write configuration options with an optional map parameter during debconf configuration (LP: #1029062)	Arthur de Jong	0.8.10-2	11 years ago
23	* New upstream release: * New upstream release: - documentation improvements - fix a problem that causes the PAM module to prompt for a new password even though the old one was wrong - log successful password change in nslcd	Arthur de Jong	0.8.10-1	11 years ago
22	* new upstream release: * new upstream release: - allow the pam_authz_search option to be specified multiple times - implement extra range checking of all numeric values - make documentation up-to-date - compatibility improvements	Arthur de Jong	0.8.9-1	12 years ago
21	don't clear the tls_reqcert option when using ssl without th... don't clear the tls_reqcert option when using ssl without the start_tls option or an ldaps:// URL (closes: #672301)	Arthur de Jong	0.8.8-3	12 years ago
20	switch PAM config back to additional because if shadow infor... switch PAM config back to additional because if shadow information is provided pam_unix accepts the user and causes pam_ldap to be skipped	Arthur de Jong	0.8.8-2	12 years ago
19	* new upstream release: * new upstream release: - fix a problem in the handling of PAM requests in nslcd (closes: #670419) - install the ldapns.schema in nslcd docs (closes: #669680) * use the configuration file contents to determine the authentication type, not the debconf database (closes: #670133) * switch PAM account type to primary because it now does all the authorisation checks that pam_unix also does * drop functionality to check whether shadow information is exposed in /etc/nsswitch.conf, it was no longer needed sine 0.8.4 * ensure that /var/run/nslcd is not removed during upgrades	Arthur de Jong	0.8.8-1	12 years ago
18	* new upstream release: * new upstream release: - log the first 10 search results in debug mode to make debugging easier (patch by Matthijs Kooijman) - provide more detailed logging information for LDAP errors, this should especially help for TLS related problems (based on a patch by Mel Flynn) - fix logging of invalid pam_authz_search value (LP: #951343) - when doing DNS queries for SRV records recognise default ldap and ldaps ports (closes: #661955) - make whether or not to do case-sensitive filtering configurable (patch by Matthew L. Dailey) - document the fact that each thread opens it's own connection (patch by Chris Hiestand) - some small portability improvements - try to prevent some of the Broken pipe messages in nslcd - increase buffer used for pam_authz_search as suggested by Chris J Arges * update the X-Start-Before header in the init script to ensure that nslcd is started before the display managers * update debhelper dependency and remove lintian override * mark nslcd as multi-arch foreign to allow it to satisfy dependencies on any arch * drop no-symbols-control-file lintian override which is no longer needed * upgrade to standards-version 3.9.3 (no changes needed)	Arthur de Jong	0.8.7-1	12 years ago
17	* new upstream release: * new upstream release: - a number of code improvements by Jakub Hrozek * switch to non-native packaging - add debian/watch file - update Vcs-Svn and Vcs-Browser control fields * updated Norwegian Bokmål debconf translation by Bjørn Steensrud (closes: #654273) * updated Simplified Chinese debconf translation by zym (closes: #654679) * automatically comment out mapping of uniqueMember to member on upgrades because member is default now * debian/copyright: copyright year updates	Arthur de Jong	0.8.6-1	12 years ago
16	* support larger gecos values (closes: #640781) * support larger gecos values (closes: #640781) * updated Swedish debconf translation by Martin Bagge (closes: #640623) * consistently handle whitespace in configuration file during package configuration (thanks Nick) (closes: #641619) * add a versioned dependency on libpam0g to ensure the PAM libraries are multiarch-aware * in debconf, treat the "hard" value for tls_reqcert as if it was "demand" (closes: #642347) * reduce loglevel of user not found messages to avoid spamming the logs with useless information (thanks Wakko Warner) (closes: #641820) * other logging improvements * keep nslcd running during package upgrades (closes: #644892) * explicitly parse numbers as base 10 (thanks Jakub Hrozek) * implement FreeBSD group membership NSS function (thanks Tom Judge) * fix an issue where changes in /etc/nsswitch.conf were not correctly picked up and could lead to lookups being disabled on upgrade (closes: #645599) * fix an issue with detecting the uid of the calling process and log denied shadow requests in debug mode * fix a typo in the disconnect logic code (thanks Martin Poole) * enable hardening options during build * implement configuration file handling in pynslcd and other pynslcd improvements (pynslcd is not in a Debian package yet) * update debian/copyright	Arthur de Jong	0.8.5	12 years ago

Older »