~ubuntu-branches/ubuntu/trusty/openldap/trusty-updates : changes

~ubuntu-branches/ubuntu/trusty/openldap/trusty-updates » Changes to ANNOUNCEMENT from revision 64

From Revision 64

Rev	Summary	Authors	Tags	Date
54	* Merge from Debian unstable. Remaining changes: * Merge from Debian unstable. Remaining changes: - Enable AppArmor support: - d/apparmor-profile: add AppArmor profile - d/rules: use dh_apparmor - d/control: Build-Depends on dh-apparmor - d/slapd.README.Debian: add note about AppArmor - d/slapd.dirs: add etc/apparmor.d/force-complain - Enable GSSAPI support (LP: #495418): - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - d/configure.options: Configure with --with-gssapi - d/control: Added libkrb5-dev as a build depend - Enable ufw support (LP: #423246): - d/control: suggest ufw. - d/rules: install ufw profile. - d/slapd.ufw.profile: add ufw profile. - Enable nss overlay (LP: #675391): - d/{patches/nssov-build,/rules}: Apply, build and package the nss overlay. - d/{rules,slapd.py}: Add apport hook. (LP: #610544) - d/slapd.init.ldif: don't set olcRootDN since it's not defined in either the default DIT nor via an Authn mapping. - d/slapd.scripts-common: - add slapcat_opts to local variables. - Remove unused variable new_conf. - Fix backup directory naming for multiple reconfiguration. - d/{slapd.default,slapd.README.Debian}: use the new configuration style. - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) - d/{control,rules}: enable PIE hardening * Dropped changes: - d/patches/its-7107-fix-Operation-init-on-reuse.diff: Included in upstream release. - d/patches/CVE-2011-4079: Included in upstream release. - d/patches/service-operational-before-detach: Included in upstream release. - d/schema/extra/misc.ldif: Included upstream. - d/{rules,schema/extra}: Fix configure and clean rules to support extra schemas shipped as part of the debian/schema/ directory; no longer required. - Included in Debian: + Document cn=config in README file. + Install a default DIT; actually a minimal configuration. + d/patches/heimdal-fix. * General tidy of d/patches to remove obsolete patches being held in Ubuntu delta.	James Page	2.4.31-1ubuntu1	11 years ago
38	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973) + Dropped: - debian/patches/gold: Use the debian version instead - debian/patches/CVE-2011-1024: Fixed upstream - debian/patches/CVE-2011-1025: Fixed upstream - debian/patches/CVE-2011-1081: Fixed upstream	Chuck Short	2.4.25-1ubuntu1	13 years ago
31	* Merge from Debian unstable: * Merge from Debian unstable: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style.	Mathias Gug	2.4.23-6ubuntu1	13 years ago
26	* New release, features include: * New release, features include: + Fixed libldap to return server's error code (ITS#6569) + Fixed libldap memleaks (ITS#6568) + Fixed liblutil off-by-one with delta (ITS#6541) + Fixed slapd acls with glued databases (ITS#6468) + Fixed slapd syncrepl rid logging (ITS#6533) + Fixed slapd modrdn handling of invalid values (ITS#6570) + Fixed slapd-bdb hasSubordinates computation (ITS#6549) + Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474) + Fixed slapd-bdb entry cache delete failure (ITS#6577) + Fixed slapd-ldap to return control responses (ITS#6530) + Fixed slapo-ppolicy to use Debug (ITS#6566) + Fixed slapo-refint to zero out freed DN vals (ITS#6572) + Fixed slapo-rwm to use Debug (ITS#6566) + Fixed slapo-sssvlv to use Debug (ITS#6566) + Fixed slapo-syncprov lost deletes in refresh phase (ITS#6555) + Fixed slapo-valsort to use Debug (ITS#6566) + Fixed contrib/nssov network.c missing patch (ITS#6562) + Fixed test043 attribute sorting (ITS#6553) + slapd-config(5) note default rootdn (ITS#6546) * Rebased patches debian/patches/dropped nssov-build * Resynchronize with Debian: + debian/control: - Bump standards-version to 3.9.0 - Use libdb4.8-dev (LP: #572489) + Added debian/patches/issue-6534-patch + Added debian/patches/ldap-conf-tls-cacertdir * Add ufw support, thanks to PatRiehecky (LP: #423246) [Adam Sommer] * debian/rules, debian/slapd.py: Add apport hook. (LP: #610544)	Chuck Short	2.4.23-0ubuntu1	13 years ago
16	[ Steve Langasek ] [ Steve Langasek ] * Fix up the lintian warnings: - add missing misc-depends on all packages - slapd, libldap-2.4-2-dbg sections changed to 'debug' to match archive overrides - bump Standards-Version to 3.8.2, no changes required. [ Mathias Gug ] * Resynchronise with Debian. Remaining changes: - AppArmor support: - debian/apparmor-profile: add AppArmor profile - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/rules: install apparmor profile. - Don't use local statement in config script as it fails if /bin/sh points to bash. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). - Enable nssoverlay: - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. - debian/schema/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. - debian/slapd.postinst: create /var/run/slapd before updating its permissions. - debian/slapd.init: Correctly set slapd config backend option even if the pidfile is configured in slapd default file. * Dropped: - Merged in Debian: - Update priority of libldap-2.4-2 to match the archive override. - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the ldapurl(1) manpage. - Bump build-dependency on debhelper to 6 instead of 5, since that's what we're using. - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using the built-in default of ldap:/// only. - Fixed in upstream release: - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034 failure when built with PIE. - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be trusted. - Update Apparmor profile support: don't support upgrade from pre-hardy systems: - debian/slapd.postinst: Reload AA profile on configuration - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile. - follow ApparmorProfileMigration and force apparmor complain mode on some upgrades - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/patches/autogen.sh: no longer needed with karmic libtool. - Call libtoolize with the --install option to install config.{guess,sub} files.	Mathias Gug	2.4.17-1ubuntu1	14 years ago
15	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - AppArmor support: - debian/apparmor-profile: add AppArmor profile - debian/slapd.postinst: Reload AA profile on configuration - updated debian/slapd.README.Debian for note on AppArmor - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile. - follow ApparmorProfileMigration and force apparmor complain mode on some upgrades - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/patches/autogen.sh: - Call libtoolize with the --install option to install config.{guess,sub} files. - Don't use local statement in config script as it fails if /bin/sh points to bash. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). - Enable nssoverlay: - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. - debian/schema/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. - Update priority of libldap-2.4-2 to match the archive override. - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the ldapurl(1) manpage. - Bump build-dependency on debhelper to 6 instead of 5, since that's what we're using. - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using the built-in default of ldap:/// only. - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034 failure when built with PIE. - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be trusted. - debian/slapd.postinst: create /var/run/slapd before updating its permissions. - debian/slapd.init: Correctly set slapd config backend option even if the pidfile is configured in slapd default file. * Drop patch to avoid the test suite on hppa, as hppa is EOL.	Colin Watson	2.4.15-1.1ubuntu1	14 years ago
11	[ Steve Langasek ] [ Steve Langasek ] * New upstream version - Fixes a bug with the pcache overlay not returning cached entries (closes: #497697) - Update evolution-ntlm patch to apply to current Makefiles. - (tentatively) drop gnutls-ciphers, since this bug was reported to be fixed upstream in 2.4.8. The fix applied in 2.4.8 didn't match the patch from the bug report, so this should be watched for regressions. * Build against db4.7 instead of db4.2 at last! Closes: #421946. * Build with --disable-ndb, to avoid a misbuild when libmysqlclient is installed in the build environment. * New patch, no-crlcheck-for-gnutls, to fix a build failure when using --with-tls=gnutls. [ Mathias Gug ] * Merge from debian unstable, remaining changes: - debian/apparmor-profile: add AppArmor profile - debian/slapd.postinst: Reload AA profile on configuration - updated debian/slapd.README.Debian for note on AppArmor - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmour-profiles gets installed it won't overwrite our profile. - Modify Maintainer value to match the DebianMaintainerField speficication. - follow ApparmorProfileMigration and force apparmor compalin mode on some upgrades (LP: #203529) - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.preinst: create symlink for force-complain on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist. - debian/slapd.postrm: remove symlink in force-complain/ on purge - debian/patches/fix-ucred-libc due to changes how newer glibc handle the ucred struct now. - debian/control: - Build-depend on libltdl7-dev rather then libltdl3-dev. - debian/patches/autogen.sh: - Call libtoolize with the --install option to install config.{guess,sub} files. - Don't use local statement in config script as it fails if /bin/sh points to bash (LP: #286063). - Disable the testsuite on hppa. Allows building of packages on this architecture again, once this package is in the archive. LP: #288908. - debian/slapd.postinst, debian/slapd.script-common: set correct ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group readable) and /var/run/slapd (world readable). (LP: #257667). - debian/patches/nssov-build, debian/rules: Build and package the nss overlay. debian/schema/misc.ldif: add ldif file for the misc schema, which defines rfc822MailMember (required by the nss overlay). - debian/{control,rules}: enable PIE hardening - Use cn=config as the default configuration backend instead of slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade asking the end user to enter a new password to control the access to the cn=config tree. * debian/patches/corrupt-contextCSN: The contextCSN can get corrupted at times. (ITS: #5947)	Mathias Gug	2.4.14-0ubuntu1	15 years ago
1	Import upstream version 2.4.10 Import upstream version 2.4.10	Mathias Gug	upstream-2.4.10	15 years ago