~ubuntu-branches/ubuntu/natty/openldap/natty : changes

~ubuntu-branches/ubuntu/natty/openldap/natty » Changes from revision 36

From Revision 36 to 17

Rev	Summary	Authors	Tags	Date
36	* SECURITY UPDATE: fix successful anonymous bind via chain o... * SECURITY UPDATE: fix successful anonymous bind via chain overlay when using forwarded authentication failures - debian/patches/CVE-2011-1024 - CVE-2011-1024 * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb backend. Note: Ubuntu is not compiled with --enable-ndb by default - debian/patches/CVE-2011-1025 - CVE-2011-1025 * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests and requestDN is empty - debian/patches/CVE-2011-1081 - CVE-2011-1081 - LP: #742104	Jamie Strandboge	2.4.23-6ubuntu6	13 years ago
35	debian/patches/service-operational-before-detach: New patch ... debian/patches/service-operational-before-detach: New patch replacing old one of same name as previous could cause database corruption, based on upstream commits. (LP: #727973)	Dave Walker (Daviey)	2.4.23-6ubuntu5	13 years ago
34	Fix FTBFS with ld.gold. Fix FTBFS with ld.gold.	Matthias Klose	2.4.23-6ubuntu4	13 years ago
33	debian/patches/gssapi.diff: debian/patches/gssapi.diff: Update patch so that likewise-open is usable again (LP: #661547)	Thierry Carrez (ttx)	2.4.23-6ubuntu3	13 years ago
32	* Install nss overlay (LP: #675391): * Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema.	Mathias Gug	2.4.23-6ubuntu2	13 years ago
31	* Merge from Debian unstable: * Merge from Debian unstable: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style.	Mathias Gug	2.4.23-6ubuntu1	13 years ago
30	debian/slapd.templates: amended typo in slapd/move_old_datab... debian/slapd.templates: amended typo in slapd/move_old_database (LP: #666028)	James Page	2.4.23-0ubuntu4	13 years ago
29	* debian/slapd.templates: re-add slapd/move_old_database tem... * debian/slapd.templates: re-add slapd/move_old_database template as it's used during the package upgrade. Thanks to James Page for pointing it. * debian/slapd.config: restore debconf question slapd/move_old_database.	Mathias Gug	2.4.23-0ubuntu3.2	13 years ago
28	debian/rules: move dh_apparmor before dh_installinit debian/rules: move dh_apparmor before dh_installinit	Jamie Strandboge	2.4.23-0ubuntu3	13 years ago
27	* convert to using dh_apparmor: * convert to using dh_apparmor: - debian/rules, debian/slapd.post{inst,rm}: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 * debian/apparmor-profile: use local include	Jamie Strandboge	2.4.23-0ubuntu2	13 years ago
26	* New release, features include: * New release, features include: + Fixed libldap to return server's error code (ITS#6569) + Fixed libldap memleaks (ITS#6568) + Fixed liblutil off-by-one with delta (ITS#6541) + Fixed slapd acls with glued databases (ITS#6468) + Fixed slapd syncrepl rid logging (ITS#6533) + Fixed slapd modrdn handling of invalid values (ITS#6570) + Fixed slapd-bdb hasSubordinates computation (ITS#6549) + Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) + Fixed slapd-bdb entry cache delete failure (ITS#6577) + Fixed slapd-ldap to return control responses (ITS#6530) + Fixed slapo-ppolicy to use Debug (ITS#6566) + Fixed slapo-refint to zero out freed DN vals (ITS#6572) + Fixed slapo-rwm to use Debug (ITS#6566) + Fixed slapo-sssvlv to use Debug (ITS#6566) + Fixed slapo-syncprov lost deletes in refresh phase (ITS#6555) + Fixed slapo-valsort to use Debug (ITS#6566) + Fixed contrib/nssov network.c missing patch (ITS#6562) + Fixed test043 attribute sorting (ITS#6553) + slapd-config(5) note default rootdn (ITS#6546) * Rebased patches debian/patches/dropped nssov-build * Resynchronize with Debian: + debian/control: - Bump standards-version to 3.9.0 - Use libdb4.8-dev (LP: #572489) + Added debian/patches/issue-6534-patch + Added debian/patches/ldap-conf-tls-cacertdir * Add ufw support, thanks to PatRiehecky (LP: #423246) [Adam Sommer] * debian/rules, debian/slapd.py: Add apport hook. (LP: #610544)	Chuck Short	2.4.23-0ubuntu1	13 years ago
25	Fix local root connection access: replace olcAuthzRegexp map... Fix local root connection access: replace olcAuthzRegexp mapping to cn=localroot,cn=config with using the SASL dn directly in olcAccess. Makes upgrades much simpler and robust (LP: #563829).	Mathias Gug	2.4.21-0ubuntu5	13 years ago
24	[ Simon Olofsson ] [ Simon Olofsson ] * debian/slapd.postinst: - Show a message after successful migration (LP: #538848) [ Jorgen Rosink ] * debian/slapd.init: add simple status checking with LSB compatible exit codes (LP: #562377) * debian/slapd.init.ldif: - remove admin user in default config database (LP: #556176) - in default config, add olcAccess entries giving access to controls available and cn=subschema (LP: #427842) [ Scott Moser ] * debian/slapd.scripts-common: Do not create /nonexistent directory for openldap user's home (LP: #556176) * debian/slapd.postinst: fix cn=config olcAccess migration (LP: #559070)	Scott Moser	2.4.21-0ubuntu4	14 years ago
23	* debian/slapd.postinst, debian/slapd.scripts-common: Upgrad... * debian/slapd.postinst, debian/slapd.scripts-common: Upgrade databases before trying to convert to slapd.d, to avoid upgrade failure from hardy (LP: #536958) * debian/slapd.postinst: Add a {1} numeric index to olcAccess entry in olcDatabase={0}config.ldif to avoid upgrade failures (LP: #538516, #526230)	Thierry Carrez	2.4.21-0ubuntu3	14 years ago
22	debian/apparmor-profile: Update apparmor profile. (LP: #5081... debian/apparmor-profile: Update apparmor profile. (LP: #508190)	Chuck Short	2.4.21-0ubuntu2	14 years ago
21	* New upstream release. * New upstream release. * debian/rules, debian/schema/extra/: Fix get-orig-source rule to supports extra schemas shipped as part of the debian/schema/ directory.	Mathias Gug	2.4.21-0ubuntu1	14 years ago
20	* debian/patches/gssapi.diff, thanks to Jerry Carter (Likewi... * debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal * Enable GSSAPI support (LP: #495418): - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend	Thierry Carrez	2.4.18-0ubuntu2	14 years ago
19	* New upstream release: (LP: #419515): * New upstream release: (LP: #419515): + pcache overlay supports disconnected mode. * Fix nss overlay load (LP: #417163).	Mathias Gug	2.4.18-0ubuntu1	14 years ago
18	* Install a minimal slapd configuration instead of creating ... * Install a minimal slapd configuration instead of creating a default database with a default DIT: + Move openldap user home from /var/lib/ldap to /nonexistent. + Remove all code and templates dealing with the default database and DIT creation. + Add an Authz map from root user (UID=0) to cn=localroot,cn=config and grant all access to the latter in the cn=config database as well as the default backend configuration. * Add cn=localroot,cn=config authz mapping on upgrades.	Mathias Gug	2.4.17-1ubuntu3	14 years ago
17	[ Thierry Carrez ] [ Thierry Carrez ] * debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) [ Mathias Gug ] * debian/patches/its6077-uniqueness-overlay: fixes some issues with the uniqueness overlay. * debian/patches/its6220-writetimeout-directive: fixes a problem with the writetimeout directive being in effect even if it wasn't set, closing connections incorrectly. * debian/patches/its6222-dncachesize-parameter: fixes the behavior of the dncachesize parameter that was added in RE24, so that if it is set to "0" (now the default), it has an unlimited DN cache (RE23 always had an unlimited DN cache).	Mathias Gug	2.4.17-1ubuntu2	14 years ago

Older »