summaryrefslogtreecommitdiff
path: root/ChangeLog-2010
blob: 3adbb477f14e3d48c0760b132a32d28aca300bee (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
2010-12-30  arthur

	* [r1358] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.8.0 release
	* [r1357] README, debian/copyright: update copyright information
	* [r1356] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
	  debian/po/zh_CN.po: run debconf-updatepo (new and updated
	  templates)
	* [r1355] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
	  debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: put headers
	  of .po files in a consistent format
	* [r1354] ., AUTHORS, HACKING, README, configure.ac,
	  debian/copyright, nss/Makefile.am, nss/common.h, nss/ethers.c,
	  nss/exports.solaris, nss/group.c, nss/hosts.c, nss/netgroup.c,
	  nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,
	  nss/rpc.c, nss/services.c, nss/shadow.c, nss/solnss.c: integrate
	  Solaris support developed by Ted C. Cheng of Symas Corporation
	  that was developed on the -solaris branch

2010-12-29  arthur

	* [r1348] Makefile.am, pam/Makefile.am: fix distcheck by passing
	  --with-pam-seclib-dir to configure and remove unneeded slashes
	* [r1347] Makefile.am, configure.ac, py-compile, pynslcd,
	  pynslcd/Makefile.am, pynslcd/alias.py, pynslcd/cfg.py,
	  pynslcd/common.py, pynslcd/config.py.in, pynslcd/debugio.py,
	  pynslcd/ether.py, pynslcd/group.py, pynslcd/mypidfile.py,
	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/pynslcd.py,
	  pynslcd/shadow.py, pynslcd/tio.py: add an experimental (currently
	  partial) Python implementation of nslcd to see if we can get the
	  same features with easier to maintain code

2010-12-28  arthur

	* [r1346] man/nslcd.conf.5.xml, nslcd/attmap.c, nslcd/common.c,
	  nslcd/common.h, nslcd/group.c, nslcd/passwd.c, nslcd/shadow.c:
	  allow attribute mapping with an expression for the userPassword
	  attribute for passwd, group and shadow entries and by default map
	  it to the unmatchable password ("*") to avoid accidentally
	  leaking password information

2010-12-26  arthur

	* [r1345] nslcd/common.h, nslcd/myldap.c, nslcd/myldap.h,
	  nslcd/pam.c, nslcd/shadow.c: try to update the shadowLastChange
	  attribute of a user on password change (the update is only tried
	  if the attribute is present to begin with)
	* [r1344] common/tio.c: return connection reset when connection was
	  closed by the other end
	* [r1343] tests/nslcd-test.conf: paging isn't supported by OpenLDAP
	  when chasing referrals
	* [r1342] nslcd/cfg.c: also support the tls_cacert option as an
	  alias for tls_cacertfile
	* [r1341] man/nslcd.conf.5.xml: add notes on ignored options when
	  using GnuTLS (based on #513270 which was reported against the
	  openldap package by Peter Palfrader)

2010-12-24  arthur

	* [r1340] nslcd/common.c: also support tilde (~) in user and group
	  names, except as first character
	* [r1339] nslcd/common.c: make logic of character tests easier to
	  read

2010-12-20  arthur

	* [r1338] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/group.c, nslcd/passwd.c: implement a nss_min_uid option to
	  filter user entries returned by LDAP

2010-12-18  arthur

	* [r1337] tests/test_nsscmds.sh: sort group members by alphabet to
	  not be dependant on the order of attributes returned and the
	  internal softing of the set
	* [r1336] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
	  update tests with current test set-up (with chasing a referral
	  and some other minor changes)

2010-12-12  arthur

	* [r1328] nslcd/myldap.c: pass the ld to do_bind() instead of the
	  session to use the correct ld from do_rebind()
	* [r1327] nslcd/pam.c: always return a positive authorisation
	  result during authentication because we don't do any
	  authorisation checks during authentication and this may confuse
	  the PAM module if it's only used for authorisation
	* [r1326] pam/pam.c: fallback to standard PAM error message if one
	  wasn't returned by nslcd
	* [r1325] nslcd/myldap.c: fix comment

2010-12-11  arthur

	* [r1322] tests/test_myldap.c: include extra assertion checks

2010-12-08  arthur

	* [r1319] nslcd/myldap.c, nslcd/myldap.h, nslcd/nslcd.c: in each
	  worker wake up once in a while to check whether any existing LDAP
	  connections should be closed

2010-12-03  arthur

	* [r1318] nslcd/pam.c: in try_bind(), perform the search ourselves
	  instead of using lookup_dn2uid() to also be able to match
	  administrator DNs (thanks to Thaddeus J. Kollar for spotting
	  this)
	* [r1317] nslcd/pam.c: fix handling of try_bind() result code in
	  nslcd_pam_authc() (patch by Thaddeus J. Kollar)

2010-11-26  arthur

	* [r1316] nslcd/nslcd.c: close all open file descriptors on start

2010-11-17  arthur

	* [r1315] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: return
	  correct PAM status code for when LDAP server is unavailable
	  (based on a patch by Pierre Gambarotto)
	* [r1314] nslcd/pam.c: switch all internal functions to return an
	  LDAP status code
	* [r1313] nslcd/pam.c: return correct kind of error code from
	  try_pwmod() (bug)

2010-11-10  arthur

	* [r1312] debian/nslcd.config, debian/nslcd.postinst,
	  debian/nslcd.templates: implement configuring SASL authentication
	  using Debconf, based on a patch by Daniel Dehennin
	* [r1311] debian/nslcd.config: fix for problem with undefined
	  values in read_config() function

2010-11-07  arthur

	* [r1310] debian/nslcd.config: split reading values from a
	  configfile into a separate function and also ensure that
	  tls_reqcert is correctly read
	* [r1309] debian/nslcd.postinst: add comment describing function
	* [r1308] debian/nslcd.postinst: split updating configuration file
	  based on debconf value to separate function and make config
	  option renaming consistent
	* [r1307] pam/Makefile.am: fix installation directory for PAM
	  module (was broken in r1239)
	* [r1306] debian/nslcd.postinst: move special casing of handling
	  bindpw removal to cfg_disable() function
	* [r1305] debian/nslcd.config, debian/nslcd.postinst: handle
	  tls_reqcert option consistently with other options
	* [r1304] debian/nslcd.config: remove extra slash character
	* [r1303] configure.ac: guess NSS SONAME on freebsd
	* [r1302] configure.ac: use NSS flavour to determine which exports
	  file to use
	* [r1301] nslcd/alias.c, nslcd/common.h, nslcd/ether.c,
	  nslcd/group.c, nslcd/host.c, nslcd/log.c, nslcd/log.h,
	  nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  log the request with any logged messages
	* [r1300] compat/ldap_compat.h: SASL compatibility definition

2010-11-04  arthur

	* [r1298] nslcd/nslcd.c: move acceptconnection() function body
	  inside the worker() so we can more easily break out of the
	  connection handling thread, close the server socket inside the
	  signal handler to cause all threads waiting on accept() to fail
	  and ensure that signals are handled in the main thread by
	  blocking them in the worker threads (r1290 from -solaris branch)
	* [r1297] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: avoid
	  unneeded strdup()s by using a passed buffer to lookup_dn2uid()
	  and using strcmp() in dn2uid() to see if the existing cached
	  value is ok
	* [r1296] nslcd/passwd.c: fix race condition that could cause a
	  memory leak
	* [r1295] common/nslcd-prot.c, nslcd/nslcd.c: pass the actual size
	  of the address family and the path length to bind() and connect()
	  for named sockets

2010-11-03  arthur

	* [r1294] nslcd/myldap.c: call myldap_session_check() before adding
	  a new search to the session so the connection actually gets
	  closed on timeout (the connection isn't closed when there are
	  active searches)

2010-10-16  arthur

	* [r1288] configure.ac: chage test for compiling with gcc to be
	  simpler and not use deprecated ac_cv_prog_gcc
	* [r1287] nslcd/nslcd.c: fix log message
	* [r1286] nslcd/cfg.h: remove obsolete note

2010-10-15  arthur

	* [r1279] common/dict.c, common/dict.h, common/set.c, common/set.h,
	  tests/test_set.c: implement dict_getany() and set_pop() functions
	  to be able to pick and remove entries
	* [r1278] common/dict.c, common/dict.h, common/set.h,
	  tests/test_dict.c, tests/test_set.c: make DICTs and SETs
	  case-sensitive
	* [r1277] nss/common.h: split out checking of NSS module
	  availability and buffer correctness to separate macros (taken
	  from the -solaris branch)
	* [r1276] nslcd/myldap.c: set a longer socket timout for the normal
	  connection (just in case mostly) and a short one to use when
	  shutting down the connection (also see
	  http://www.openldap.org/its/index.cgi?selectid=6673)

2010-10-14  arthur

	* [r1274] configure.ac: set {nss,pam}_ldap_so_LINK from configure
	  to allow custom linker properties for Solaris (r1261 and r1263
	  from -solaris branch)
	* [r1273] configure.ac: also include sys/types.h for
	  ethernet-related tests (same as in compat/ether.h) (r1259 from
	  -solaris branch)
	* [r1272] nss/group.c: move _nss_ldap_initgroups_dyn() definition
	  to the end to have more logical order
	* [r1271] nslcd/myldap.c: simplify SASL includes

2010-10-13  arthur

	* [r1270] nss/Makefile.am: link local modules before .a files from
	  common directory to pick symbols up in correct order
	* [r1269] configure.ac: move ethernet function checks outside
	  nslcd-specific tests to also compile without warnings when only
	  compiling NSS module
	* [r1267] nslcd/pam.c: make buffer sizes for PAM requests
	  consistent (and large enough for most situations)
	* [r1266] configure.ac: rename --with-nss-ldap-maps to
	  --with-nss-maps
	* [r1265] compat/ldap_passwd_s.c: small fix

2010-10-12  arthur

	* [r1264] nslcd/myldap.c: set timeout options on LDAP socket to
	  avoid problems when the LDAP library hangs on a read() (e.g. at
	  ldap_unbind())

2010-10-10  arthur

	* [r1256] nslcd/myldap.c, nss/netgroup.c, pam/pam.c: make use of
	  UNUSED() consistent throughout the code
	* [r1255] nss/rpc.c: correctly name shared file handle
	* [r1254] ChangeLog: undo changes to ChangeLog accidentally checked
	  in in r1253)
	* [r1253] ChangeLog, configure.ac, nss/Makefile.am,
	  nss/exports.glibc, nss/exports.solaris, nss/nss_ldap.map,
	  pam/Makefile.am: put all logic on how to run linker for NSS and
	  PAM components in configure script (remove stuff from
	  Makefile.ams) and add Solaris version script (renaming version
	  scripts as needed) (r1250 from -solaris branch)
	* [r1252] compat/ether.c, compat/ether.h: move missing declarations
	  of ether_ntoa() and ether_aton() to header file so they are
	  available for other sources also (r1243 from -solaris branch)
	* [r1251] configure.ac: fix test of returnlen struct member check
	  (r1244 from -solaris branch)

2010-10-08  arthur

	* [r1245] nss/services.c: correctly name shared file handle

2010-10-04  arthur

	* [r1240] nss/Makefile.am, nss/aliases.c, nss/ethers.c,
	  nss/group.c, nss/hosts.c, nss/netgroup.c, nss/networks.c,
	  nss/passwd.c, nss/protocols.c, nss/rpc.c, nss/services.c,
	  nss/shadow.c, pam/Makefile.am: improve consistency of code layout
	* [r1239] compat/nss_compat.h, configure.ac, nss/Makefile.am,
	  nss/common.h, nss/hosts.c, nss/networks.c, nss/prototypes.h,
	  pam/Makefile.am: merge some of the changes for Solaris
	  portability to ease merging, adding --with-pam-seclib-dir,
	  --with-pam-ldap-soname and --with-nss-flavour options and having
	  some auto-detection for SONAMEs and NSS flavour

2010-10-02  arthur

	* [r1235] .: ignore configure.lineno

2010-10-01  arthur

	* [r1233] compat/ether.c, compat/ldap_passwd_s.c, configure.ac: use
	  AC_CHECK_DECLS to check for definitions of functions we provide a
	  replacement definition for

2010-09-30  arthur

	* [r1229] debian/po/vi.po: updated Vietnamese (vi) translation of
	  debconf templates by Clytie Siddall
	* [r1228] configure.ac: fix test quoting

2010-09-29  arthur

	* [r1227] compat/ether.c, configure.ac: only provide definitions
	  for ether_aton() and ether_ntoa() for platforms missing a
	  definition
	* [r1226] compat/ether.c: fix definitions of ether_aton() and
	  ether_ntoa()

2010-09-28  arthur

	* [r1225] compat/nss_compat.h, compat/pam_get_authtok.c,
	  configure.ac: begin merging some of the compatibility
	  improvements from Ted C. Cheng of Symas Corporation
	* [r1224] compat/nss_compat.h: no need to provide a enum nss_status
	  replacement because we don't use it
	* [r1223] tests/test_aliases.c, tests/test_ethers.c,
	  tests/test_group.c, tests/test_hosts.c, tests/test_netgroup.c,
	  tests/test_networks.c, tests/test_passwd.c,
	  tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
	  tests/test_shadow.c: also switch to nss_status_t for test code
	* [r1222] configure.ac: simplify appending OBJEXT sed expression

2010-09-27  arthur

	* [r1221] nslcd/myldap.c: remove variables which are no longer
	  necessary due to r1220
	* [r1220] nslcd/myldap.c: remove disabling keepalives since we
	  handle SIGPIPE anyway

2010-09-26  arthur

	* [r1219] nslcd/myldap.c: remove ugly empty line
	* [r1218] configure.ac: properly define PACKAGE_URL
	* [r1217] nslcd/group.c: update description of group schema
	  supported
	* [r1216] Makefile.am: switch to nicer mechanism to specify
	  subdirectories to build

2010-09-25  arthur

	* [r1215] configure.ac, nss/Makefile.am: have a way to limit which
	  NSS maps should be built

2010-09-24  arthur

	* [r1214] compat/nss_compat.h, nss/aliases.c, nss/common.h,
	  nss/ethers.c, nss/group.c, nss/hosts.c, nss/netgroup.c,
	  nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,
	  nss/rpc.c, nss/services.c, nss/shadow.c: switch to using
	  nss_status_t throughout the code and provide compatibility code
	  to use whatever nss_status type is used on the system

2010-09-23  arthur

	* [r1208] nslcd/myldap.c: add some more error cases which should
	  trigger a disconnect

2010-09-20  arthur

	* [r1207] nslcd/myldap.c: handle errors from ldap_result()
	  consistently and also retry in case it times out

2010-09-05  arthur

	* [r1206] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/common.h, nslcd/nslcd.c, nslcd/pam.c, pam/pam.c: implement
	  a rootpwmodpw option that allows root users to change user
	  passwords without a password prompt

2010-08-28  arthur

	* [r1204] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.9 release
	* [r1203] debian/po/nl.po: unfuzzy a few Dutch translations and
	  improve some others
	* [r1202] debian/po/it.po: fix package name
	* [r1201] debian/po/es.po: updated Spanish (es) translation of
	  debconf templates by Francisco Javier Cuadrado
	* [r1200] debian/libpam-ldapd.templates, debian/po/ca.po,
	  debian/po/cs.po, debian/po/da.po, debian/po/de.po,
	  debian/po/es.po, debian/po/fi.po, debian/po/fr.po,
	  debian/po/gl.po, debian/po/it.po, debian/po/ja.po,
	  debian/po/nb.po, debian/po/nl.po, debian/po/pt.po,
	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
	  debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po: fix
	  incorrect reference from /etc/nsswitch to /etc/nsswitch.conf
	* [r1199] debian/po/da.po, debian/po/de.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nb.po, debian/po/ru.po,
	  debian/po/sv.po: fix wrapping of po files
	* [r1198] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/fr.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nb.po, debian/po/pt.po,
	  debian/po/ru.po, debian/po/sv.po, debian/po/zh_CN.po: correct
	  references to package name for up-to-date translations
	* [r1197] debian/po/es.po, debian/po/fr.po, debian/po/gl.po,
	  debian/po/ja.po: fix translations that had a reference to the old
	  location of the configuration file
	* [r1196] debian/po/sv.po: updated Swedish (sv) translation of
	  debconf templates by Martin Ågren
	* [r1195] debian/po/ca.po: unfuzzy translated string (confirmed OK
	  by Agustí Grau)

2010-08-27  arthur

	* [r1194] debian/po/ca.po: updated Catalan (ca) translation of
	  debconf templates by Agusti Grau

2010-08-26  arthur

	* [r1193] debian/po/de.po: updated German (de) translation of
	  debconf templates by Chris Leick

2010-08-25  arthur

	* [r1192] debian/po/fr.po: updated French (fr) translation of
	  debconf templates by Christian Perrier

2010-08-24  arthur

	* [r1191] debian/po/da.po: updated Danish (da) translation of
	  debconf templates by Joe Hansen

2010-08-20  arthur

	* [r1190] debian/po/ja.po: updated Japanese (ja) translation of
	  debconf templates by Kenshi Muto

2010-08-19  arthur

	* [r1189] debian/nslcd.templates, debian/po/ca.po, debian/po/cs.po,
	  debian/po/da.po, debian/po/de.po, debian/po/es.po,
	  debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,
	  debian/po/it.po, debian/po/ja.po, debian/po/nb.po,
	  debian/po/nl.po, debian/po/pt.po, debian/po/pt_BR.po,
	  debian/po/ru.po, debian/po/sv.po, debian/po/templates.pot,
	  debian/po/vi.po, debian/po/zh_CN.po: fix double "be" in English
	  template thanks to Christian PERRIER
	* [r1188] debian/po/it.po: updated Italian (it) translation of
	  debconf templates by Vincenzo Campanella
	* [r1187] debian/po/zh_CN.po: updated Simplified Chinese (zh_CN)
	  translation of debconf templates by zym
	* [r1186] debian/po/cs.po: updated Czech (cs) translation of
	  debconf templates by Miroslav Kure
	* [r1185] configure.ac: fix for --with-nss-ldap-soname option by
	  Julien Cristau

2010-08-18  arthur

	* [r1183] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.8 release
	* [r1182] debian/po/nb.po: added Norwegian Bokmål (nb) translation
	  of debconf templates by Bjørn Steensrud
	* [r1181] debian/po/ru.po: updated Russian (ru) translation of
	  debconf templates by Yuri Kozlov
	* [r1180] debian/po/pt.po: updated Portuguese (pt) translation of
	  debconf templates by Américo Monteir

2010-08-17  arthur

	* [r1179] debian/po/da.po, debian/po/vi.po, debian/po/zh_CN.po:
	  remove invalid and bouncing addresses
	* [r1178] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,
	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
	  debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po:
	  update debian/po files with modified template
	* [r1177] debian/libpam-ldapd.postinst: only offer to fix
	  nsswitch.conf if PAM has been converted with pam-auth-update
	* [r1176] debian/libpam-ldapd.templates: updated debconf template
	  thanks to Justin B Rye

2010-08-15  arthur

	* [r1175] debian/po/POTFILES.in, debian/po/ca.po, debian/po/cs.po,
	  debian/po/da.po, debian/po/de.po, debian/po/es.po,
	  debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,
	  debian/po/it.po, debian/po/ja.po, debian/po/nl.po,
	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
	  debian/po/zh_CN.po: update debian/po files with added template

2010-08-14  arthur

	* [r1174] debian/control: upgrade to standards-version 3.9.1
	* [r1173] debian/control: add libpam-sss as an alternative to
	  libpam-ldapd
	* [r1172] debian/control: merge the recommends from libnss-ldapd
	  and libpam-ldapd into those of nslcd so we can track all the PAM
	  alternatives in one place
	* [r1171] Makefile.am, debian/libnss-ldapd.postinst,
	  debian/libnss-ldapd.postrm,
	  debian/libpam-ldapd.lintian-overrides,
	  debian/libpam-ldapd.postinst, debian/libpam-ldapd.templates:
	  offer to add ldap to shadow in nsswitch.conf if a potential
	  broken configuration is found
	* [r1170] ChangeLog, ChangeLog-2006, ChangeLog-2007,
	  ChangeLog-2008, Makefile.am: archive older ChangeLog entries in
	  year files
	* [r1169] common/expr.c: also don't expand variables in rest of
	  ${var:+rest} expressions if var is not set or empty
	* [r1168] common/expr.c: do not expand variables in rest of
	  ${var:-rest} expressions if var is not blank or empty

2010-07-27  arthur

	* [r1167] nss/services.c: use htons() instead of ntohs() (thanks
	  Ted C. Cheng)

2010-07-18  arthur

	* [r1166] compat/nss_compat.h, configure.ac: compatibility
	  improvement: also check for nss_common.h and see if enum
	  nss_status exists
	* [r1165] nslcd/pam.c: fix comment
	* [r1164] nss/Makefile.am: use -h linker flag instead of -soname
	  which seems more portable
	* [r1163] compat/pam_compat.h: define pam_info(), pam_error() and
	  pam_syslog() compatibility macros to allow no arguments for
	  format

2010-07-17  arthur

	* [r1162] debian/nslcd.config: only go back one step on Debconf
	  back

2010-07-07  arthur

	* [r1161] configure.ac, nslcd/nslcd.c, nss/Makefile.am: allow
	  configuring NSS module's SONAME from configure and use this in
	  nslcd to dlopen() the correct library (thanks to Alexander V.
	  Chernikov for the idea)

2010-07-03  arthur

	* [r1159] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.7 release
	* [r1158] debian/control: upgrade to standards-version 3.9.0
	* [r1157] debian/libnss-ldapd.config, debian/nslcd.config: don't
	  use dh_title to set the Debconf title, the default should be fine
	* [r1156] debian/control: use Replaces/Breaks instead of Conflicts
	  for introduction of nslcd package (as per policy 3.9.0)

2010-06-25  arthur

	* [r1155] Makefile.am, debian/libpam-ldapd.manpages,
	  debian/nslcd.install, debian/nslcd.manpages: make sure the
	  pam_ldap manual page is in the libpam-ldapd package

2010-06-19  arthur

	* [r1154] nslcd/myldap.c: add logging to SASL interaction function
	* [r1153] nslcd/myldap.c: improve debug logging of SASL bind calls
	* [r1152] debian/nslcd.default: updated based on comments by Daniel
	  Dehennin <daniel.dehennin@baby-gnu.org>

2010-06-18  arthur

	* [r1151] AUTHORS, Makefile.am, debian/control,
	  debian/nslcd.conffile, debian/nslcd.default, debian/nslcd.init:
	  start k5start from the init script to keep the Kerberos ticket
	  active if nslcd is configured for SASL GSSAPI kerberos
	  authentication, based on a patch by Daniel Dehennin
	  <daniel.dehennin@baby-gnu.org>
	* [r1150] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h: remove
	  warning messages from parsing the sasl_* options and document
	  them in the nslcd.conf(5) manual page (they should be functional)
	* [r1149] nslcd/myldap.c: make SASL binding code a little earier to
	  read
	* [r1148] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/myldap.c: remove the use_sasl option and instead rely on
	  sasl_mech being specified
	* [r1147] debian/nslcd.init: group options more

2010-06-17  arthur

	* [r1146] compat/Makefile.am, compat/nss_compat.h, configure.ac,
	  nss/common.h, nss/prototypes.h: have more compatibility code for
	  NSS module and move compatibility code to compat directory

2010-06-16  arthur

	* [r1145] debian/nslcd.init: ensure that nslcd is started after
	  hostname lookups are available so getting to the LDAP server via
	  DNS lookups will work (patch by Petter Reinholdtsen)
	* [r1144] nslcd/nslcd.c: use RTLD_NODELETE during dlopen() instead
	  of not using dlclose()

2010-06-15  arthur

	* [r1143] configure.ac, nss/Makefile.am, nss/exports.linux,
	  nss/nss_ldap.map, pam/Makefile.am, pam/exports.linux,
	  pam/pam_ldap.map: rename symbol map files and check for the
	  linker option to specify the file with
	* [r1142] configure.ac, nslcd/Makefile.am: pass pthread flags
	  correctly to nslcd Makefile and rename save_ vars to not conflict
	  with AX_PTHREAD test

2010-06-14  arthur

	* [r1141] configure.ac, nslcd/nslcd.c, nss/Makefile.am,
	  nss/common.c, nss/common.h, nss/exports.linux, nss/netgroup.c,
	  nss/prototypes.h, tests/Makefile.am: implement a global symbol
	  inside the NSS module to allow applications to disable NSS
	  lookups over LDAP and use it in nslcd to avoid deadlocks
	* [r1140] common/dict.h, common/expr.h, common/nslcd-prot.h,
	  common/set.h, common/tio.h, compat/attrs.h, compat/daemon.h,
	  compat/ether.h, compat/getopt_long.h, compat/getpeercred.h,
	  compat/ldap_compat.h, compat/pam_compat.h, nslcd/attmap.h,
	  nslcd/cfg.h, nslcd/common.h, nslcd/log.h, nslcd/myldap.h,
	  nss/common.h, nss/prototypes.h, pam/common.h: make include guard
	  names consistent throughout the source and avoid conflicts with
	  system headers
	* [r1139] nss/aliases.c, nss/ethers.c, nss/group.c, nss/hosts.c,
	  nss/netgroup.c, nss/networks.c, nss/passwd.c, nss/protocols.c,
	  nss/rpc.c, nss/services.c, nss/shadow.c: remove some unused
	  include statements

2010-06-12  arthur

	* [r1138] README, common/tio.c, nslcd/attmap.c, nslcd/attmap.h,
	  nslcd/group.c, nslcd/network.c: remove commented out memberOf and
	  ipNetmaskNumber attributes and small cleanups
	* [r1137] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
	  debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,
	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,
	  debian/po/vi.po, debian/po/zh_CN.po: run translations through
	  debconf-updatepo -v

2010-06-11  arthur

	* [r1136] nslcd/nslcd.c: fix and remove source code comments

2010-06-04  arthur

	* [r1135] ChangeLog, debian/changelog: revert part of r1134 that
	  was accidentally commited
	* [r1134] ChangeLog, debian/changelog, pam/pam.c: fix nullok test
	  for password modification

2010-06-03  arthur

	* [r1133] debian/libpam-ldapd.pam-auth-update: also ignore other
	  ignorable PAM return codes

2010-06-02  arthur

	* [r1132] compat/pam_get_authtok.c: add a warning to the limitation
	  of our pam_get_authtok() implementation
	* [r1131] pam/pam.c: simplify PAM module splitting remapping for
	  ignore_* options to a separate function, parsing of
	  try_first_pass and use_first_pass is done by pam_get_authtok(),
	  don't report session errors to the user and make error handling
	  consistent

2010-06-01  arthur

	* [r1130] nslcd/pam.c: fix bug in test (r1127)
	* [r1129] man/pam_ldap.8.xml, pam/pam.c: implement an nullok PAM
	  option and disable empty passwords by default
	* [r1128] pam/pam.c: don't log failure to do nslcd request to user
	  and log authentication errors during password change
	* [r1127] nslcd/pam.c: add a debug log message when user
	  authentication was successful
	* [r1126] debian/libpam-ldapd.pam-auth-update: don't use
	  use_authtok for password modification by default

2010-05-31  arthur

	* [r1125] pam/pam.c: fix typo

2010-05-27  arthur

	* [r1123] AUTHORS, ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.6 release

2010-05-26  arthur

	* [r1122] debian/control: drop extra parts of package descriptions
	  that should no longer be really relevant and update libpam-ldapd
	  description

2010-05-24  arthur

	* [r1121] debian/libpam-ldapd.pam-auth-update: update
	  pam-auth-update configuration to always perform LDAP
	  autorisation, also pass use_authtok on password modification and
	  spell out session result handling
	* [r1120] pam/pam.c: make code more consistent
	* [r1119] man/pam_ldap.8.xml: fix typo
	* [r1118] pam/pam.c: don't store use_authtok because
	  pam_get_authtok() looks at the arguments itself

2010-05-23  arthur

	* [r1117] HACKING, README, man/nslcd.8.xml, man/nslcd.conf.5.xml:
	  update documentation
	* [r1116] nslcd.conf: include uid and gid options in default
	  configuration file
	* [r1115] configure.ac, m4/acx_pthread.m4, m4/ax_pthread.m4: update
	  AC?X_PTHREAD macro and update configure script to be simpler and
	  add some more checks
	* [r1114] debian/nslcd.init: use nslcd --check in init script's
	  status command

2010-05-22  arthur

	* [r1113] nslcd/pam.c: make debug logging for pam_authz_search
	  option a little more readable

2010-05-20  arthur

	* [r1112] debian/control: add libpam-heimdal as an alternative
	  recommends for libnss-ldapd

2010-05-15  arthur

	* [r1111] nslcd/attmap.c, nslcd/attmap.h: always clear returned
	  buffer when performing attribute mapping (based on a patch by
	  Nalin Dahyabhai <nalin@redhat.com>)

2010-05-14  arthur

	* [r1109] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.5 release
	* [r1108] Makefile.am, debian/source, debian/source/format: switch
	  to source format 3.0 (native)
	* [r1107] pam/pam.c: print uid as a long
	* [r1106] compat/pam_compat.h, configure.ac, man/pam_ldap.8.xml,
	  pam/common.h, pam/pam.c: perform logging from PAM module to
	  syslog and support the debug option to log debugging information

2010-05-13  arthur

	* [r1105] pam/pam.c: centralise initialising functions needed for
	  every PAM call into one function
	* [r1104] common/nslcd-prot.h, nslcd/common.h: make logging of
	  buffer checks consistent
	* [r1103] pam/pam.c: also use PAM username instead of one from
	  context for session open and close
	* [r1102] pam/pam.c: replace my_pam_get_authtok() with standard
	  pam_get_authtok() function, get rid of get_old_password() and
	  general cleanups and simplifications

2010-05-12  arthur

	* [r1101] pam/pam.c: make parsing configuration options global,
	  reorganise a bit and make code more consistent and easier to read
	* [r1100] compat/pam_compat.h, nslcd/pam.c: small compatibility
	  improvements

2010-05-10  arthur

	* [r1099] pam/pam.c: only log "LDAP session failed" if we actually
	  tried
	* [r1098] compat/Makefile.am, compat/pam_compat.h,
	  compat/pam_get_authtok.c, compat/pam_prompt.c, configure.ac,
	  pam/pam.c: replace my_pam_warn() with pam_info() and pam_error()
	  and provide replacement for pam_prompt() also using it in our
	  pam_get_authtok() replacement

2010-05-09  arthur

	* [r1096] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.4 release
	* [r1095] nslcd/myldap.c: only log "connected to LDAP server" if
	  the previous connect failed or we are failing over to a different
	  server
	* [r1094] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd/cfg.c,
	  nslcd/cfg.h, nslcd/myldap.c, tests/README, tests/nslcd-test.conf:
	  rename reconnect_maxsleeptime option to reconnect_retrytime
	* [r1093] nslcd/myldap.c: don't log errno if it is not set (make
	  error less confusing)
	* [r1092] nslcd/myldap.c: handle authentication searches a little
	  differently (only try once if an authentication error is
	  returned)
	* [r1091] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/myldap.c: refactor retry timing mechanism to use time
	  between first and last error to determin when to rerty and only
	  try once (and don't sleep) when we have been failing for a long
	  time

2010-05-08  arthur

	* [r1090] man/nslcd.conf.5.xml: fix wrapping of long line (thanks
	  lintian)
	* [r1089] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/pam.c: rename authz_search option to pam_authz_search

2010-05-07  arthur

	* [r1088] man/nslcd.conf.5.xml, man/pam_ldap.8.xml, nslcd/cfg.c,
	  nslcd/cfg.h, nslcd/pam.c: implement an authz_search option to
	  test whether the user is authorised
	* [r1087] nslcd/alias.c, nslcd/ether.c, nslcd/group.c,
	  nslcd/host.c, nslcd/netgroup.c, nslcd/network.c, nslcd/passwd.c,
	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
	  tune some buffer sizes and small cleanups
	* [r1086] tests/test_myldap.c: implement test for buffer overflow
	* [r1085] nslcd/myldap.c: fix buffer overflow
	* [r1084] man, man/Makefile.am: have the possibility to generate
	  HTML for manual pages (not done by default)
	* [r1083] man/nslcd.conf.5.xml, man/pam_ldap.8.xml: use docbook
	  elements where possible

2010-05-06  arthur

	* [r1082] compat/pam_compat.h, configure.ac,
	  debian/libpam-ldapd.pam-auth-update, man/pam_ldap.8.xml,
	  pam/pam.c: implement a minimum_uid option for the PAM module to
	  ignore users that have a lower numeric user id

2010-05-05  arthur

	* [r1081] config.guess, config.sub: include updated files

2010-05-03  arthur

	* [r1080] debian/nslcd.config: also parse /etc/ldap.conf for
	  systems that use that for NSS and PAM configuration

2010-04-13  arthur

	* [r1079] nslcd/myldap.c, nslcd/myldap.h, nslcd/pam.c: don't have
	  myldap_set_credentials() try to open a connection but have the
	  PAM code perform a search with the new credentials so we re-use
	  the fail-over mechanism in myldap_search()
	* [r1078] nslcd/cfg.c, nslcd/common.h, nslcd/myldap.c,
	  nslcd/myldap.h, nslcd/passwd.c, tests/test_myldap.c: also have
	  myldap_search() return an LDAP status code

2010-04-01  arthur

	* [r1077] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
	  small improvements to the test setup

2010-03-20  arthur

	* [r1076] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
	  nslcd/group.c: add an nss_initgroups_ignoreusers option to ignore
	  username to group lookups for the specified users

2010-03-13  arthur

	* [r1075] man/nslcd.conf.5.xml: remove commented-oud default option
	  because it is not implemented and we have a better mechanism now

2010-02-28  arthur

	* [r1074] nslcd/myldap.c: have less warnings when LDAP_OPT_X_TLS
	  isn't defined
	* [r1073] man/nslcd.conf.5.xml: document which attributes may be
	  mapped with an expression

2010-02-27  arthur

	* [r1071] ChangeLog, NEWS, configure.ac, debian/changelog,
	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
	  files ready for 0.7.3 release
	* [r1070] debian/NEWS: add blank line for apt-listchanges
	* [r1069] debian/control: upgrade to standards-version 3.8.4 (no
	  changes needed)
	* [r1068] common/dict.h: fix typo
	* [r1067] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd.conf,
	  nslcd.h, nslcd/cfg.c, nslcd/cfg.h, nslcd/pam.c: rename admindn
	  option to rootpwmoddn
	* [r1066] INSTALL, compile: update from latest automake
	* [r1065] HACKING, tests/README: small updates to documentation

2010-02-17  arthur

	* [r1064] nslcd/myldap.c: first try password modification without
	  the old password and if that fails with the old password
	* [r1063] compat/ldap_passwd_s.c: add pointer to RFC 3062

2010-01-28  arthur

	* [r1062] man/nslcd.8.xml, nslcd/nslcd.c: patch by Jan Schampera to
	  implement a --check option

2010-01-25  arthur

	* [r1061] nslcd/myldap.c: fix for type mismatch (thanks to Jan
	  Schampera)

2010-01-24  arthur

	* [r1060] configure.ac, nslcd/cfg.c: add --with-bindpw-file
	  configure option to enable reading the bindpw option from a file
	* [r1059] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd.conf,
	  nslcd.h, nslcd/cfg.c, nslcd/cfg.h, nslcd/pam.c, pam/pam.c: add
	  admindn configuration file option that is used when modifying
	  another user's password
	* [r1058] man/nslcd.conf.5.xml: fix example
	* [r1057] nslcd/myldap.c: make logging of passwords consistent and
	  support a NULL oldpassword value in myldap_passwd()
	* [r1056] nslcd/myldap.c: free data returned from ldap_passwd_s()
	  call if needed and add missing casts
	* [r1055] HACKING: general updates and add PAM module information

2010-01-23  arthur

	* [r1054] nss/prototypes.h: simple improvement for FreeBSD
	* [r1053] nslcd/nslcd.c: lock the pidfile at start-up to ensure
	  only one nslcd process is running (based on a patch by Jan
	  Schampera <jan.schampera@web.de>)

2010-01-21  arthur

	* [r1052] debian/nslcd.init: start nslcd before apache for systems
	  that use LDAP users to run virtual hosts
	* [r1051] HACKING, README, configure.ac: set contact address to
	  mailing list
	* [r1050] debian/NEWS: change format of NEWS entry based on
	  Developer's Reference
	* [r1049] debian/rules: install lintian overrides with dh_lintian

2010-01-08  arthur

	* [r1048] nslcd/cfg.c: improve getting of domain name by also
	  checking hostname aliases (based on patch by Jan Schampera
	  <jan.schampera@web.de>)
	* [r1047] AUTHORS: improve getting of domain name by also checking
	  hostname aliases (based on patch by Jan Schampera
	  <jan.schampera@web.de>)