-
Notifications
You must be signed in to change notification settings - Fork 39
/
ChangeLog-2011
744 lines (584 loc) · 27.9 KB
/
ChangeLog-2011
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
2011-12-31 arthur
* [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.8.5 release
2011-12-30 arthur
* [r1583] debian/control: fix versioned build dependency on
debhelper
2011-12-28 arthur
* [r1582] pynslcd/config.py.in: remove some information from config
that we don't expect to use
* [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py,
pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py:
support for reading the configuration file (not all options are
used though)
* [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state
variables (from command line) from the configuration to the main
module
* [r1579] pynslcd/pam.py: fall back to trying to authenticate with
provided password (in case rootpwmodpw is not set or unusable)
* [r1578] pynslcd/group.py: never request group members for
GroupByMemberRequest
* [r1577] pynslcd/group.py: instead of modifying attmap, modify
attribute list
* [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to
attmap (broken in r1571)
* [r1575] nslcd/nslcd.c: typo fix in comment
2011-12-27 arthur
* [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py,
pynslcd/passwd.py, pynslcd/shadow.py: make logging more
consistent and remove test bases from shadow and passwd maps
* [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py,
pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py,
pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes
* [r1572] debian/copyright: update copyright information
2011-12-12 arthur
* [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,
pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the
search separately from the request
* [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,
pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
pynslcd/shadow.py: move check of required attributes and other
common tests to the Request.handle_entry() method
2011-12-10 arthur
* [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV
records
* [r1568] nslcd/nslcd.c: properly handle failures to truncate the
pid file
* [r1567] debian/nslcd.config: get the first configuration value
instead of the last because that one is also written
* [r1566] debian/nslcd.config: fix a deprecated use of head without
the -n option
* [r1565] debian/rules: enable more hardening options (-fPIE
doesn't work yet because we use -fPIC in some places)
* [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm:
ensure that the output of nss_list_configured() is space
separated
* [r1563] m4/ax_pthread.m4: update macro from autoconf-archive
2011-12-09 jhrozek
* [r1560] nslcd/myldap.c: Fix a typo in disconnect logic
2011-12-01 arthur
* [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are
properly initialised and log denied requests
2011-11-30 arthur
* [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only
loaded once after start-up
2011-11-18 arthur
* [r1556] debian/libnss-ldapd.config: simplification of logic to
overwrite list of enabled /etc/nsswitch.conf services in debconf
(based on r1555 of 0.7 branch)
2011-10-12 arthur
* [r1554] debian/control: add versioned dependency on libpam for
mutiarch support
* [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS
function by Tom Judge (taken from FreeBSD PR 154000)
2011-10-10 arthur
* [r1552] debian/rules: keep nslcd running during package upgrades
2011-10-02 arthur
* [r1551] nslcd/pam.c: reduce loglevel of user not found messages
to avoid spamming the logs with useless information (thanks Wakko
Warner)
2011-09-30 jhrozek
* [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
Use an explicit base of 10 for strtouid()/strtogid()/strtol()
calls
2011-09-21 arthur
* [r1546] debian/nslcd.config: treat the "hard" value for
tls_reqcert as if it was "demand"
2011-09-14 arthur
* [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm,
debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst:
make whitespace matching consistent in regular expressions
(thanks Nick)
2011-09-09 arthur
* [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c,
nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c,
nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,
nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
make validation log messages consistent
* [r1541] nslcd/nsswitch.c: add missing include
2011-09-08 arthur
* [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size
and consistency improvements to other buffers
* [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string
representations of addresses more logical names
2011-09-07 arthur
* [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv)
translation of debconf templates by Martin Bagge
2011-09-04 arthur
* [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac,
debian/changelog, debian/copyright, man/nslcd.8.xml,
man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
0.8.4 release
* [r1535] tests/test_getpeercred.c: warn when we couldn't get the
gid or pid, the uid is the only really interesting bit
* [r1534] tests/test_tio.c: add casts from size_t to int for printf
* [r1533] debian/rules: ignore failures in tests
* [r1532] debian/rules: use auto-detection for LDAP library and
defaults for config file, socket and pidfile (no changes)
2011-09-03 arthur
* [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,
debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support
spaces before and after database name while parsing
/etc/nsswitch.conf and reduce the number of places where parsing
is done
2011-08-30 arthur
* [r1530] debian/nslcd.postinst: correctly handle leading and
trailing spaces in preseeded uri option (patch by Andreas B.
Mundt)
* [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and
LDAP_REFERRALS to configure.ac to ensure that tests from
configure see the same API
2011-08-29 arthur
* [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement
and use a strtoui() function if uid_t or gid_t is of size
unsigned int (thanks Jakub Hrozek)
* [r1527] pynslcd/Makefile.am: get rid of automake warning
* [r1526] configure.ac: silence autoconf warnings, patch by Jakub
Hrozek
* [r1525] debian/po/nl.po: some changes based on feedback by Jeroen
Schot
2011-08-27 arthur
* [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c,
nslcd/passwd.c: provide strtouid() and strtogid() functions that
use strtoul() or strtoull() (thanks Jakub Hrozek)
* [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
check errno after calls to strtol() to ensure that numbers that
are too large for type will be reported (thanks Jakub Hrozek)
* [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated
callback structure to OpenLDAP because it doesn't make it's own
copy (thanks Jakub Hrozek) (fixes a problem in r1490)
* [r1521] debian/po/nl.po: some changes based on feedback by Paul
Gevers
2011-08-26 arthur
* [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation
* [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po,
debian/po/it.po, debian/po/nb.po, debian/po/nl.po,
debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small
formatting changes to header
2011-08-25 arthur
* [r1518] debian/po/es.po: updated Spanish (es) translation of
debconf templates by Francisco Javier Cuadrado
2011-08-24 arthur
* [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai)
* [r1515] nslcd/cfg.c: fix a problem with uninitialised memory
while parsing the tls_ciphers option (was broken in r853, similar
problem was fixed in r910, reported by Isaac Freeman)
* [r1514] debian/po/de.po: updated German (de) translation of
debconf templates by Chris Leick
* [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support
querying DNS SRV records from a different domain than the current
one (based on a patch by James M. Leddy)
2011-08-23 arthur
* [r1512] debian/po/cs.po: updated Czech (cs) translation of
debconf templates by Miroslav Kure
2011-08-19 arthur
* [r1511] debian/po/fr.po: typo fix provided by Christian Perrier
2011-08-17 arthur
* [r1510] AUTHORS: add new translators to AUTHORS file
* [r1509] debian/po/ja.po: updated Japanese (ja) translation of
debconf templates by Kenshi Muto
* [r1508] debian/po/pt.po: updated Portuguese (pt) translation of
debconf templates by Américo Monteiro
2011-08-14 arthur
* [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
translation of debconf templates by Denis Doria
* [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am:
split 2009 and 2010 changes to separate ChangeLog files
* [r1505] nss/networks.c: remove unused variable
* [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am:
put external libraries at the end when linking
* [r1503] configure.ac: remove some tests for symbols we aren't
using
* [r1502] debian/libnss-ldapd.lintian-overrides: add lintian
override for SONAME check
* [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
translation of debconf templates by Denis Doria
* [r1500] debian/po/da.po: update Danish (da) translation of
debconf templates by Joe Hansen
* [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf
templates by Slavko
* [r1498] debian/po/fr.po: updated French (fr) translation of
debconf templates by Christian Perrier
* [r1497] debian/po/ru.po: updated Russian (ru) translation of
debconf templates by Yuri Kozlov
2011-08-10 arthur
* [r1496] AUTHORS: fix spelling of name (sorry about that)
2011-08-09 arthur
* [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether
file should be reloaded
* [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
debian/po/de.po, debian/po/es.po, debian/po/fi.po,
debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po
files
* [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small
language updates based on feedback by Justin B Rye
2011-08-08 arthur
* [r1492] debian/nslcd.templates: incorporate feedback on debconf
templates by debian-l10n-english@lists.debian.org (thanks Justin
B Rye and Christian PERRIER)
2011-08-07 arthur
* [r1491] Makefile.am, debian/compat, debian/control,
debian/libnss-ldapd.install,
debian/libnss-ldapd.lintian-overrides,
debian/libnss-ldapd.postinst, debian/libpam-ldapd.install,
debian/rules, debian/source/lintian-overrides: build Debian
packages with multiarch support
* [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a
connection callback to avoid timeout issues during the SSL
handshake (based on a patch by Stefan Völkel)
2011-08-06 arthur
* [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD
from http://www.gnu.org/software/autoconf-archive/ax_pthread.html
2011-08-05 arthur
* [r1488] pynslcd/group.py, tests/test_myldap.c: replace last
traces of groupOfUniqueNames
* [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c,
nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow
map queries LDAP before returning x as a password has for shadow
users
* [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
update tests with change of member/uniqueMember default change
(r1484)
* [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h,
nslcd/passwd.c: implementation of myldap_get_values_len() to use
ldap_get_values_len() instead of ldap_get_values() to fix some
problems with binary data in returned attribute values (patch by
Wesley Mason)
2011-08-03 arthur
* [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h,
nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to
using the member attribute by default instead of uniqueMember
2011-07-21 arthur
* [r1483] README: remove obsolete attribute from documentation
2011-07-15 arthur
* [r1482] debian/nslcd.init: on restart only log_end_msg once
2011-07-04 arthur
* [r1481] configure.ac: show the default value for the
pam-seclib-dir option
2011-07-03 arthur
* [r1480] compat/getpeercred.c: fix header
* [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for
systems with only PAM_AUTHTOK_RECOVER_ERR
2011-07-02 arthur
* [r1478] Makefile.am, debian/compat, debian/control,
debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update,
debian/nslcd.install, debian/pam-configs,
debian/pam-configs/ldap, debian/rules: switch to dh for
debian/rules and bump debhelper compatibility to 8
* [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c,
nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent,
grow gidNumber buffer to hold larger numbers and small
consistency improvements
2011-06-10 arthur
* [r1475] nslcd/pam.c: correctly only check password expiration
when authenticating, only check account expiration when doing
authorisation check
2011-06-05 arthur
* [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in
pam_authz_search to see if they exist
* [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const
and don't free() data returned by cfg_getdomainname()
* [r1471] common/expr.c, tests/test_expr.c: handle expressions
where the expander function returns NULL (handle it as an empty
string)
* [r1470] nslcd/myldap.c: fix r1468
* [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to
handle splitting attribute and value correctly
* [r1467] config.guess, config.sub: include updated files
2011-05-23 arthur
* [r1466] tests/test_common.c: add test case for two-character user
name
2011-05-21 arthur
* [r1464] nslcd/myldap.c: fix problem with partial attribute name
matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White
for the fix)
2011-05-13 arthur
* [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.8.3 release
* [r1461] debian/libnss-ldapd.postinst: don't unconditionally
restart nscd but just try to invalidate the cache for the maps
that change
* [r1460] debian/libnss-ldapd.config: correctly pick up current
configuration of /etc/nsswitch.conf when running dpkg-reconfigure
* [r1459] debian/control: upgrade to standards-version 3.9.2
* [r1458] common/expr.c, common/expr.h: switch variable expander
function type name because _t suffix is reserved
* [r1457] debian/control, debian/nslcd.config: search for LDAP
server by looking for SRV _ldap._tcp DNS records and try to query
LDAP server for base DN during package configuration (based on
work by Petter Reinholdtsen for the sssd package)
* [r1456] debian/nslcd.config: fix domain to basedn expansion when
having more than two domain parts (patch by Per Carlson)
* [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
pynslcd/shadow.py: simplify request handling by passing read
parameters around in a dict instead of setting object properties
(this mainly simplifies search filter building)
2011-05-01 arthur
* [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,
pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,
pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement
attribute mapping functionality and do some refactoring
* [r1453] pynslcd/pam.py: remove unneeded import
* [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,
pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn
and attributes to functions separately
* [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:
small code improvements
2011-04-30 arthur
* [r1450] pam/common.h: make log message clearer when nslcd returns
an empty response (user not handled)
* [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP
server unavailable to PAM module
* [r1448] pam/pam.c: split setting up of configuration into
separate function
* [r1447] nslcd/pam.c: improve password change failed error message
* [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow
properties (similarly to what pam_unix does) in the PAM handling
code
* [r1445] pam/pam.c: do not attempt to change password as root when
changing an expired password
* [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no
match found
* [r1443] nslcd/pam.c: use the right DN in the pam_authz_search
option
* [r1442] nslcd/shadow.c: move code for getting shadow expiry
properties to a separate function
2011-04-29 arthur
* [r1441] nslcd/pam.c: move most of the code for building the
authorisation search into the try_autzsearch() function
* [r1440] nslcd.h, pam/pam.c: support more PAM status codes over
the nslcd protocol
* [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to
indicate no expiry (instead of a long time)
2011-04-28 arthur
* [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
pynslcd/shadow.py: put standard library imports before
application imports and remove some unused imports
* [r1437] pynslcd/group.py: remove duplicate and wrong write()
method
2011-04-24 arthur
* [r1436] nslcd/pam.c: make request indicator shorter
* [r1435] nslcd.h: document use of returned authorisation message
* [r1434] nslcd/pam.c: no longer use the userdn parameter passed
along with each request (this may mean one or two more lookups
when doing authentication but simplifies things)
* [r1433] tests/test_pamcmds.expect: improve handling of
test_login_unknown
2011-04-22 arthur
* [r1431] nslcd/myldap.c: report correct reported error from
ldap_abandon()
2011-04-18 arthur
* [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of
RTLD_NODELETE
* [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE
2011-04-16 arthur
* [r1428] nslcd.conf: add example configuration provided by Wesley
Mason
2011-04-15 arthur
* [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,
configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement
implementation for strndup() for systems that don't have it
* [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing
from r1425)
* [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,
nslcd/group.c, nslcd/passwd.c: support using the objectSid
attribute to provide numeric user and group ids, based on a patch
by Wesley Mason
* [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,
tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests
from another directory
2011-04-03 arthur
* [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and
group name validation errors a little more informative
2011-03-31 arthur
* [r1422] AUTHORS: add some people who seemed to be missing from
the AUTHORS file
* [r1421] common/tio.c: tv_usec in struct timeval must be lower
than 1000000 (patch by SATOH Fumiyasu)
* [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of
$(INSTALL_DATA) -D because -D is not supported on all operating
systems (patch by SATOH Fumiyasu)
* [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of
only two characters
2011-03-26 arthur
* [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.8.2 release
* [r1416] tests/Makefile.am, tests/test_nsscmds.sh,
tests/test_pamcmds.sh: ensure that all test source files are
distibuted and can tests can be run when source directory differs
from build directory
* [r1415] pynslcd/common.py: sync validname regular expression with
nslcd
2011-03-25 arthur
* [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait
for all worker threads to finish before exiting (but wait a few
seconds on platforms with pthread_timedjoin_np())
* [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c,
tests/test_myldap.c: re-organise tests somewhat making things
more consistent
* [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate
patch by Daniel Dehennin to not loose debconf values of
previously set options with dpkg-reconfigure
* [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c,
nslcd/cfg.h, nslcd/common.c, tests/Makefile.am,
tests/test_common.c: implement a validnames option that can be
used to fine-tune the test for valid user and group names using a
regular expression
2011-03-24 arthur
* [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py,
pynslcd/service.py: implement service, protocol and rpc lookups
* [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where
the RDN is for some reason not in the cn
* [r1408] pynslcd/pam.py: fix configuration name
* [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains
of previous value is gone
2011-03-23 arthur
* [r1406] pynslcd/host.py: fix use of spaces
* [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of
files
* [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a
definition of daemon() for systems that lack it
* [r1402] compat/ether.h: typo fix in comment
2011-03-19 arthur
* [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests,
tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c:
more tests and general test improvements
* [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c,
nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small
code improvements
* [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality
that isn't used
2011-03-18 arthur
* [r1398] tests, tests/Makefile.am, tests/in_testenv.sh,
tests/test_nsscmds.sh, tests/test_pamcmds.expect,
tests/test_pamcmds.sh: implement test cases for some of the
common PAM actions (test environment required for this)
2011-03-17 arthur
* [r1397] configure.ac, tests/Makefile.am, tests/common.h,
tests/test_cfg.c, tests/test_common.c, tests/test_expr.c,
tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c:
put all assertion functions and compatibility code into one
header file
* [r1396] nslcd.conf: put idle_timelimit option in Active Directory
example with low enough default
2011-03-16 arthur
* [r1395] tests/Makefile.am, tests/test_aliases.c,
tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c,
tests/test_netgroup.c, tests/test_networks.c,
tests/test_nslcd_group.c, tests/test_passwd.c,
tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
tests/test_shadow.c: remove legacy test code that is no longer
used
2011-03-14 arthur
* [r1394] pam/pam.c: check for user existence before trying
password change
* [r1393] common/tio.c: fix a problem in the timeout paramater that
was being passed to select() and could contain too many µsec
(fixes Solaris runtime issue)
2011-03-13 arthur
* [r1392] tests/test_nsscmds.sh: fix name of script in header
2011-03-12 arthur
* [r1391] configure.ac: include the resolv library for hstrerror()
on platforms that need it (thanks Peter Bray)
* [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX
fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX
(thanks Peter Bray)
2011-03-11 arthur
* [r1389] Makefile.am: ensure that permissions are sane in the
distributed tarball
* [r1388] nslcd/myldap.c: fix problem with endless loop on
incorrect password
* [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX
fallback definition to header file
2011-03-10 arthur
* [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
files ready for 0.8.1 release
* [r1384] Makefile.am, common/tio.c, compat/Makefile.am,
compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c,
man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c,
nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py,
pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to
add missing years
2011-03-09 arthur
* [r1383] nslcd/pam.c: fix compiler warning
* [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle
user-not-found errors when doing authentication (CVE-2011-0438)
2011-03-06 arthur
* [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py,
pynslcd/pynslcd.py: implement module for netgroup lookups
* [r1380] pynslcd/Makefile.am, pynslcd/network.py,
pynslcd/pynslcd.py: add network name lookups
* [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test
groups and add the arthur user to them to test whether all are
returned correctly
* [r1378] Makefile.am: pass --enable-pynslcd with distcheck
* [r1377] pynslcd/Makefile.am: clean up compiled python files
* [r1376] pynslcd/host.py: fix search filter objectClass for hosts
* [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that
session id is only logged while handling a connection
* [r1374] man/nslcd.conf.5.xml: note that attribute mapping
expressions cannot be used for all attributes
2011-02-14 arthur
* [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py,
pynslcd/tio.py: implement module for hostname lookups
* [r1372] pynslcd/ether.py: fix comment
* [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add
missing files to installation
2011-02-11 arthur
* [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in
current FreeBSD packaging)
* [r1369] nslcd/nslcd.c: create the directory for the socket and
pidfile
2011-01-29 arthur
* [r1368] man/nslcd.conf.5.xml: document a proper replacement for
pam_check_host_attr (thanks Luca Capello) and add a section on
quoting
* [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c,
nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can
be used inside pam_authz_search filters
2011-01-23 arthur
* [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and
pam_check_host_attr options in manual page and indicate how
pam_authz_search replaces them
2011-01-05 arthur
* [r1365] AUTHORS, HACKING, configure.ac, debian/copyright,
nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd,
nss/prototypes.h: add FreeBSD support, partially imported from
the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and
Alexander V. Chernikov)
2011-01-01 arthur
* [r1364] nss/Makefile.am: put solnss.c under
EXTRA_nss_ldap_so_SOURCES
* [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml,
man/pam_ldap.8.xml: add ids to options so we can more easily
reference them from elsewhere (especially useful for generated
HTML)
* [r1362] nslcd/myldap.c: include definition of rc in all code
paths because it's used most of the time
* [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression
to one that is supported by more shells
* [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball