2010-12-30  arthur

	* [r1358] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.8.0 release

	* [r1357] README, debian/copyright: update copyright information

	* [r1356] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,

	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,

	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,

	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,

	  debian/po/zh_CN.po: run debconf-updatepo (new and updated

	  templates)

	* [r1355] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,

	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,

	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,

	  debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: put headers

	  of .po files in a consistent format

	* [r1354] ., AUTHORS, HACKING, README, configure.ac,

	  debian/copyright, nss/Makefile.am, nss/common.h, nss/ethers.c,

	  nss/exports.solaris, nss/group.c, nss/hosts.c, nss/netgroup.c,

	  nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,

	  nss/rpc.c, nss/services.c, nss/shadow.c, nss/solnss.c: integrate

	  Solaris support developed by Ted C. Cheng of Symas Corporation

	  that was developed on the -solaris branch

2010-12-29  arthur

	* [r1348] Makefile.am, pam/Makefile.am: fix distcheck by passing

	  --with-pam-seclib-dir to configure and remove unneeded slashes

	* [r1347] Makefile.am, configure.ac, py-compile, pynslcd,

	  pynslcd/Makefile.am, pynslcd/alias.py, pynslcd/cfg.py,

	  pynslcd/common.py, pynslcd/config.py.in, pynslcd/debugio.py,

	  pynslcd/ether.py, pynslcd/group.py, pynslcd/mypidfile.py,

	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/pynslcd.py,

	  pynslcd/shadow.py, pynslcd/tio.py: add an experimental (currently

	  partial) Python implementation of nslcd to see if we can get the

	  same features with easier to maintain code

2010-12-28  arthur

	* [r1346] man/nslcd.conf.5.xml, nslcd/attmap.c, nslcd/common.c,

	  nslcd/common.h, nslcd/group.c, nslcd/passwd.c, nslcd/shadow.c:

	  allow attribute mapping with an expression for the userPassword

	  attribute for passwd, group and shadow entries and by default map

	  it to the unmatchable password ("*") to avoid accidentally

	  leaking password information

2010-12-26  arthur

	* [r1345] nslcd/common.h, nslcd/myldap.c, nslcd/myldap.h,

	  nslcd/pam.c, nslcd/shadow.c: try to update the shadowLastChange

	  attribute of a user on password change (the update is only tried

	  if the attribute is present to begin with)

	* [r1344] common/tio.c: return connection reset when connection was

	  closed by the other end

	* [r1343] tests/nslcd-test.conf: paging isn't supported by OpenLDAP

	  when chasing referrals

	* [r1342] nslcd/cfg.c: also support the tls_cacert option as an

	  alias for tls_cacertfile

	* [r1341] man/nslcd.conf.5.xml: add notes on ignored options when

	  using GnuTLS (based on #513270 which was reported against the

	  openldap package by Peter Palfrader)

2010-12-24  arthur

	* [r1340] nslcd/common.c: also support tilde (~) in user and group

	  names, except as first character

	* [r1339] nslcd/common.c: make logic of character tests easier to

	  read

2010-12-20  arthur

	* [r1338] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/group.c, nslcd/passwd.c: implement a nss_min_uid option to

	  filter user entries returned by LDAP

2010-12-18  arthur

	* [r1337] tests/test_nsscmds.sh: sort group members by alphabet to

	  not be dependant on the order of attributes returned and the

	  internal softing of the set

	* [r1336] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:

	  update tests with current test set-up (with chasing a referral

	  and some other minor changes)

2010-12-12  arthur

	* [r1328] nslcd/myldap.c: pass the ld to do_bind() instead of the

	  session to use the correct ld from do_rebind()

	* [r1327] nslcd/pam.c: always return a positive authorisation

	  result during authentication because we don't do any

	  authorisation checks during authentication and this may confuse

	  the PAM module if it's only used for authorisation

	* [r1326] pam/pam.c: fallback to standard PAM error message if one

	  wasn't returned by nslcd

	* [r1325] nslcd/myldap.c: fix comment

2010-12-11  arthur

	* [r1322] tests/test_myldap.c: include extra assertion checks

2010-12-08  arthur

	* [r1319] nslcd/myldap.c, nslcd/myldap.h, nslcd/nslcd.c: in each

	  worker wake up once in a while to check whether any existing LDAP

	  connections should be closed

2010-12-03  arthur

	* [r1318] nslcd/pam.c: in try_bind(), perform the search ourselves

	  instead of using lookup_dn2uid() to also be able to match

	  administrator DNs (thanks to Thaddeus J. Kollar for spotting

	  this)

	* [r1317] nslcd/pam.c: fix handling of try_bind() result code in

	  nslcd_pam_authc() (patch by Thaddeus J. Kollar)

2010-11-26  arthur

	* [r1316] nslcd/nslcd.c: close all open file descriptors on start

2010-11-17  arthur

	* [r1315] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: return

	  correct PAM status code for when LDAP server is unavailable

	  (based on a patch by Pierre Gambarotto)

	* [r1314] nslcd/pam.c: switch all internal functions to return an

	  LDAP status code

	* [r1313] nslcd/pam.c: return correct kind of error code from

	  try_pwmod() (bug)

2010-11-10  arthur

	* [r1312] debian/nslcd.config, debian/nslcd.postinst,

	  debian/nslcd.templates: implement configuring SASL authentication

	  using Debconf, based on a patch by Daniel Dehennin

	* [r1311] debian/nslcd.config: fix for problem with undefined

	  values in read_config() function

2010-11-07  arthur

	* [r1310] debian/nslcd.config: split reading values from a

	  configfile into a separate function and also ensure that

	  tls_reqcert is correctly read

	* [r1309] debian/nslcd.postinst: add comment describing function

	* [r1308] debian/nslcd.postinst: split updating configuration file

	  based on debconf value to separate function and make config

	  option renaming consistent

	* [r1307] pam/Makefile.am: fix installation directory for PAM

	  module (was broken in r1239)

	* [r1306] debian/nslcd.postinst: move special casing of handling

	  bindpw removal to cfg_disable() function

	* [r1305] debian/nslcd.config, debian/nslcd.postinst: handle

	  tls_reqcert option consistently with other options

	* [r1304] debian/nslcd.config: remove extra slash character

	* [r1303] configure.ac: guess NSS SONAME on freebsd

	* [r1302] configure.ac: use NSS flavour to determine which exports

	  file to use

	* [r1301] nslcd/alias.c, nslcd/common.h, nslcd/ether.c,

	  nslcd/group.c, nslcd/host.c, nslcd/log.c, nslcd/log.h,

	  nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,

	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:

	  log the request with any logged messages

	* [r1300] compat/ldap_compat.h: SASL compatibility definition

2010-11-04  arthur

	* [r1298] nslcd/nslcd.c: move acceptconnection() function body

	  inside the worker() so we can more easily break out of the

	  connection handling thread, close the server socket inside the

	  signal handler to cause all threads waiting on accept() to fail

	  and ensure that signals are handled in the main thread by

	  blocking them in the worker threads (r1290 from -solaris branch)

	* [r1297] nslcd/common.h, nslcd/pam.c, nslcd/passwd.c: avoid

	  unneeded strdup()s by using a passed buffer to lookup_dn2uid()

	  and using strcmp() in dn2uid() to see if the existing cached

	  value is ok

	* [r1296] nslcd/passwd.c: fix race condition that could cause a

	  memory leak

	* [r1295] common/nslcd-prot.c, nslcd/nslcd.c: pass the actual size

	  of the address family and the path length to bind() and connect()

	  for named sockets

2010-11-03  arthur

	* [r1294] nslcd/myldap.c: call myldap_session_check() before adding

	  a new search to the session so the connection actually gets

	  closed on timeout (the connection isn't closed when there are

	  active searches)

2010-10-16  arthur

	* [r1288] configure.ac: chage test for compiling with gcc to be

	  simpler and not use deprecated ac_cv_prog_gcc

	* [r1287] nslcd/nslcd.c: fix log message

	* [r1286] nslcd/cfg.h: remove obsolete note

2010-10-15  arthur

	* [r1279] common/dict.c, common/dict.h, common/set.c, common/set.h,

	  tests/test_set.c: implement dict_getany() and set_pop() functions

	  to be able to pick and remove entries

	* [r1278] common/dict.c, common/dict.h, common/set.h,

	  tests/test_dict.c, tests/test_set.c: make DICTs and SETs

	  case-sensitive

	* [r1277] nss/common.h: split out checking of NSS module

	  availability and buffer correctness to separate macros (taken

	  from the -solaris branch)

	* [r1276] nslcd/myldap.c: set a longer socket timout for the normal

	  connection (just in case mostly) and a short one to use when

	  shutting down the connection (also see

	  http://www.openldap.org/its/index.cgi?selectid=6673)

2010-10-14  arthur

	* [r1274] configure.ac: set {nss,pam}_ldap_so_LINK from configure

	  to allow custom linker properties for Solaris (r1261 and r1263

	  from -solaris branch)

	* [r1273] configure.ac: also include sys/types.h for

	  ethernet-related tests (same as in compat/ether.h) (r1259 from

	  -solaris branch)

	* [r1272] nss/group.c: move _nss_ldap_initgroups_dyn() definition

	  to the end to have more logical order

	* [r1271] nslcd/myldap.c: simplify SASL includes

2010-10-13  arthur

	* [r1270] nss/Makefile.am: link local modules before .a files from

	  common directory to pick symbols up in correct order

	* [r1269] configure.ac: move ethernet function checks outside

	  nslcd-specific tests to also compile without warnings when only

	  compiling NSS module

	* [r1267] nslcd/pam.c: make buffer sizes for PAM requests

	  consistent (and large enough for most situations)

	* [r1266] configure.ac: rename --with-nss-ldap-maps to

	  --with-nss-maps

	* [r1265] compat/ldap_passwd_s.c: small fix

2010-10-12  arthur

	* [r1264] nslcd/myldap.c: set timeout options on LDAP socket to

	  avoid problems when the LDAP library hangs on a read() (e.g. at

	  ldap_unbind())

2010-10-10  arthur

	* [r1256] nslcd/myldap.c, nss/netgroup.c, pam/pam.c: make use of

	  UNUSED() consistent throughout the code

	* [r1255] nss/rpc.c: correctly name shared file handle

	* [r1254] ChangeLog: undo changes to ChangeLog accidentally checked

	  in in r1253)

	* [r1253] ChangeLog, configure.ac, nss/Makefile.am,

	  nss/exports.glibc, nss/exports.solaris, nss/nss_ldap.map,

	  pam/Makefile.am: put all logic on how to run linker for NSS and

	  PAM components in configure script (remove stuff from

	  Makefile.ams) and add Solaris version script (renaming version

	  scripts as needed) (r1250 from -solaris branch)

	* [r1252] compat/ether.c, compat/ether.h: move missing declarations

	  of ether_ntoa() and ether_aton() to header file so they are

	  available for other sources also (r1243 from -solaris branch)

	* [r1251] configure.ac: fix test of returnlen struct member check

	  (r1244 from -solaris branch)

2010-10-08  arthur

	* [r1245] nss/services.c: correctly name shared file handle

2010-10-04  arthur

	* [r1240] nss/Makefile.am, nss/aliases.c, nss/ethers.c,

	  nss/group.c, nss/hosts.c, nss/netgroup.c, nss/networks.c,

	  nss/passwd.c, nss/protocols.c, nss/rpc.c, nss/services.c,

	  nss/shadow.c, pam/Makefile.am: improve consistency of code layout

	* [r1239] compat/nss_compat.h, configure.ac, nss/Makefile.am,

	  nss/common.h, nss/hosts.c, nss/networks.c, nss/prototypes.h,

	  pam/Makefile.am: merge some of the changes for Solaris

	  portability to ease merging, adding --with-pam-seclib-dir,

	  --with-pam-ldap-soname and --with-nss-flavour options and having

	  some auto-detection for SONAMEs and NSS flavour

2010-10-02  arthur

	* [r1235] .: ignore configure.lineno

2010-10-01  arthur

	* [r1233] compat/ether.c, compat/ldap_passwd_s.c, configure.ac: use

	  AC_CHECK_DECLS to check for definitions of functions we provide a

	  replacement definition for

2010-09-30  arthur

	* [r1229] debian/po/vi.po: updated Vietnamese (vi) translation of

	  debconf templates by Clytie Siddall

	* [r1228] configure.ac: fix test quoting

2010-09-29  arthur

	* [r1227] compat/ether.c, configure.ac: only provide definitions

	  for ether_aton() and ether_ntoa() for platforms missing a

	  definition

	* [r1226] compat/ether.c: fix definitions of ether_aton() and

	  ether_ntoa()

2010-09-28  arthur

	* [r1225] compat/nss_compat.h, compat/pam_get_authtok.c,

	  configure.ac: begin merging some of the compatibility

	  improvements from Ted C. Cheng of Symas Corporation

	* [r1224] compat/nss_compat.h: no need to provide a enum nss_status

	  replacement because we don't use it

	* [r1223] tests/test_aliases.c, tests/test_ethers.c,

	  tests/test_group.c, tests/test_hosts.c, tests/test_netgroup.c,

	  tests/test_networks.c, tests/test_passwd.c,

	  tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,

	  tests/test_shadow.c: also switch to nss_status_t for test code

	* [r1222] configure.ac: simplify appending OBJEXT sed expression

2010-09-27  arthur

	* [r1221] nslcd/myldap.c: remove variables which are no longer

	  necessary due to r1220

	* [r1220] nslcd/myldap.c: remove disabling keepalives since we

	  handle SIGPIPE anyway

2010-09-26  arthur

	* [r1219] nslcd/myldap.c: remove ugly empty line

	* [r1218] configure.ac: properly define PACKAGE_URL

	* [r1217] nslcd/group.c: update description of group schema

	  supported

	* [r1216] Makefile.am: switch to nicer mechanism to specify

	  subdirectories to build

2010-09-25  arthur

	* [r1215] configure.ac, nss/Makefile.am: have a way to limit which

	  NSS maps should be built

2010-09-24  arthur

	* [r1214] compat/nss_compat.h, nss/aliases.c, nss/common.h,

	  nss/ethers.c, nss/group.c, nss/hosts.c, nss/netgroup.c,

	  nss/networks.c, nss/passwd.c, nss/protocols.c, nss/prototypes.h,

	  nss/rpc.c, nss/services.c, nss/shadow.c: switch to using

	  nss_status_t throughout the code and provide compatibility code

	  to use whatever nss_status type is used on the system

2010-09-23  arthur

	* [r1208] nslcd/myldap.c: add some more error cases which should

	  trigger a disconnect

2010-09-20  arthur

	* [r1207] nslcd/myldap.c: handle errors from ldap_result()

	  consistently and also retry in case it times out

2010-09-05  arthur

	* [r1206] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/common.h, nslcd/nslcd.c, nslcd/pam.c, pam/pam.c: implement

	  a rootpwmodpw option that allows root users to change user

	  passwords without a password prompt

2010-08-28  arthur

	* [r1204] ChangeLog, NEWS, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.9 release

	* [r1203] debian/po/nl.po: unfuzzy a few Dutch translations and

	  improve some others

	* [r1202] debian/po/it.po: fix package name

	* [r1201] debian/po/es.po: updated Spanish (es) translation of

	  debconf templates by Francisco Javier Cuadrado

	* [r1200] debian/libpam-ldapd.templates, debian/po/ca.po,

	  debian/po/cs.po, debian/po/da.po, debian/po/de.po,

	  debian/po/es.po, debian/po/fi.po, debian/po/fr.po,

	  debian/po/gl.po, debian/po/it.po, debian/po/ja.po,

	  debian/po/nb.po, debian/po/nl.po, debian/po/pt.po,

	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,

	  debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po: fix

	  incorrect reference from /etc/nsswitch to /etc/nsswitch.conf

	* [r1199] debian/po/da.po, debian/po/de.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nb.po, debian/po/ru.po,

	  debian/po/sv.po: fix wrapping of po files

	* [r1198] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/fr.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nb.po, debian/po/pt.po,

	  debian/po/ru.po, debian/po/sv.po, debian/po/zh_CN.po: correct

	  references to package name for up-to-date translations

	* [r1197] debian/po/es.po, debian/po/fr.po, debian/po/gl.po,

	  debian/po/ja.po: fix translations that had a reference to the old

	  location of the configuration file

	* [r1196] debian/po/sv.po: updated Swedish (sv) translation of

	  debconf templates by Martin Ågren

	* [r1195] debian/po/ca.po: unfuzzy translated string (confirmed OK

	  by Agustí Grau)

2010-08-27  arthur

	* [r1194] debian/po/ca.po: updated Catalan (ca) translation of

	  debconf templates by Agusti Grau

2010-08-26  arthur

	* [r1193] debian/po/de.po: updated German (de) translation of

	  debconf templates by Chris Leick

2010-08-25  arthur

	* [r1192] debian/po/fr.po: updated French (fr) translation of

	  debconf templates by Christian Perrier

2010-08-24  arthur

	* [r1191] debian/po/da.po: updated Danish (da) translation of

	  debconf templates by Joe Hansen

2010-08-20  arthur

	* [r1190] debian/po/ja.po: updated Japanese (ja) translation of

	  debconf templates by Kenshi Muto

2010-08-19  arthur

	* [r1189] debian/nslcd.templates, debian/po/ca.po, debian/po/cs.po,

	  debian/po/da.po, debian/po/de.po, debian/po/es.po,

	  debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,

	  debian/po/it.po, debian/po/ja.po, debian/po/nb.po,

	  debian/po/nl.po, debian/po/pt.po, debian/po/pt_BR.po,

	  debian/po/ru.po, debian/po/sv.po, debian/po/templates.pot,

	  debian/po/vi.po, debian/po/zh_CN.po: fix double "be" in English

	  template thanks to Christian PERRIER

	* [r1188] debian/po/it.po: updated Italian (it) translation of

	  debconf templates by Vincenzo Campanella

	* [r1187] debian/po/zh_CN.po: updated Simplified Chinese (zh_CN)

	  translation of debconf templates by zym

	* [r1186] debian/po/cs.po: updated Czech (cs) translation of

	  debconf templates by Miroslav Kure

	* [r1185] configure.ac: fix for --with-nss-ldap-soname option by

	  Julien Cristau

2010-08-18  arthur

	* [r1183] ChangeLog, NEWS, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.8 release

	* [r1182] debian/po/nb.po: added Norwegian Bokmål (nb) translation

	  of debconf templates by Bjørn Steensrud

	* [r1181] debian/po/ru.po: updated Russian (ru) translation of

	  debconf templates by Yuri Kozlov

	* [r1180] debian/po/pt.po: updated Portuguese (pt) translation of

	  debconf templates by Américo Monteir

2010-08-17  arthur

	* [r1179] debian/po/da.po, debian/po/vi.po, debian/po/zh_CN.po:

	  remove invalid and bouncing addresses

	* [r1178] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,

	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,

	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,

	  debian/po/templates.pot, debian/po/vi.po, debian/po/zh_CN.po:

	  update debian/po files with modified template

	* [r1177] debian/libpam-ldapd.postinst: only offer to fix

	  nsswitch.conf if PAM has been converted with pam-auth-update

	* [r1176] debian/libpam-ldapd.templates: updated debconf template

	  thanks to Justin B Rye

2010-08-15  arthur

	* [r1175] debian/po/POTFILES.in, debian/po/ca.po, debian/po/cs.po,

	  debian/po/da.po, debian/po/de.po, debian/po/es.po,

	  debian/po/fi.po, debian/po/fr.po, debian/po/gl.po,

	  debian/po/it.po, debian/po/ja.po, debian/po/nl.po,

	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,

	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,

	  debian/po/zh_CN.po: update debian/po files with added template

2010-08-14  arthur

	* [r1174] debian/control: upgrade to standards-version 3.9.1

	* [r1173] debian/control: add libpam-sss as an alternative to

	  libpam-ldapd

	* [r1172] debian/control: merge the recommends from libnss-ldapd

	  and libpam-ldapd into those of nslcd so we can track all the PAM

	  alternatives in one place

	* [r1171] Makefile.am, debian/libnss-ldapd.postinst,

	  debian/libnss-ldapd.postrm,

	  debian/libpam-ldapd.lintian-overrides,

	  debian/libpam-ldapd.postinst, debian/libpam-ldapd.templates:

	  offer to add ldap to shadow in nsswitch.conf if a potential

	  broken configuration is found

	* [r1170] ChangeLog, ChangeLog-2006, ChangeLog-2007,

	  ChangeLog-2008, Makefile.am: archive older ChangeLog entries in

	  year files

	* [r1169] common/expr.c: also don't expand variables in rest of

	  ${var:+rest} expressions if var is not set or empty

	* [r1168] common/expr.c: do not expand variables in rest of

	  ${var:-rest} expressions if var is not blank or empty

2010-07-27  arthur

	* [r1167] nss/services.c: use htons() instead of ntohs() (thanks

	  Ted C. Cheng)

2010-07-18  arthur

	* [r1166] compat/nss_compat.h, configure.ac: compatibility

	  improvement: also check for nss_common.h and see if enum

	  nss_status exists

	* [r1165] nslcd/pam.c: fix comment

	* [r1164] nss/Makefile.am: use -h linker flag instead of -soname

	  which seems more portable

	* [r1163] compat/pam_compat.h: define pam_info(), pam_error() and

	  pam_syslog() compatibility macros to allow no arguments for

	  format

2010-07-17  arthur

	* [r1162] debian/nslcd.config: only go back one step on Debconf

	  back

2010-07-07  arthur

	* [r1161] configure.ac, nslcd/nslcd.c, nss/Makefile.am: allow

	  configuring NSS module's SONAME from configure and use this in

	  nslcd to dlopen() the correct library (thanks to Alexander V.

	  Chernikov for the idea)

2010-07-03  arthur

	* [r1159] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.7 release

	* [r1158] debian/control: upgrade to standards-version 3.9.0

	* [r1157] debian/libnss-ldapd.config, debian/nslcd.config: don't

	  use dh_title to set the Debconf title, the default should be fine

	* [r1156] debian/control: use Replaces/Breaks instead of Conflicts

	  for introduction of nslcd package (as per policy 3.9.0)

2010-06-25  arthur

	* [r1155] Makefile.am, debian/libpam-ldapd.manpages,

	  debian/nslcd.install, debian/nslcd.manpages: make sure the

	  pam_ldap manual page is in the libpam-ldapd package

2010-06-19  arthur

	* [r1154] nslcd/myldap.c: add logging to SASL interaction function

	* [r1153] nslcd/myldap.c: improve debug logging of SASL bind calls

	* [r1152] debian/nslcd.default: updated based on comments by Daniel

	  Dehennin <daniel.dehennin@baby-gnu.org>

2010-06-18  arthur

	* [r1151] AUTHORS, Makefile.am, debian/control,

	  debian/nslcd.conffile, debian/nslcd.default, debian/nslcd.init:

	  start k5start from the init script to keep the Kerberos ticket

	  active if nslcd is configured for SASL GSSAPI kerberos

	  authentication, based on a patch by Daniel Dehennin

	  <daniel.dehennin@baby-gnu.org>

	* [r1150] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h: remove

	  warning messages from parsing the sasl_* options and document

	  them in the nslcd.conf(5) manual page (they should be functional)

	* [r1149] nslcd/myldap.c: make SASL binding code a little earier to

	  read

	* [r1148] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/myldap.c: remove the use_sasl option and instead rely on

	  sasl_mech being specified

	* [r1147] debian/nslcd.init: group options more

2010-06-17  arthur

	* [r1146] compat/Makefile.am, compat/nss_compat.h, configure.ac,

	  nss/common.h, nss/prototypes.h: have more compatibility code for

	  NSS module and move compatibility code to compat directory

2010-06-16  arthur

	* [r1145] debian/nslcd.init: ensure that nslcd is started after

	  hostname lookups are available so getting to the LDAP server via

	  DNS lookups will work (patch by Petter Reinholdtsen)

	* [r1144] nslcd/nslcd.c: use RTLD_NODELETE during dlopen() instead

	  of not using dlclose()

2010-06-15  arthur

	* [r1143] configure.ac, nss/Makefile.am, nss/exports.linux,

	  nss/nss_ldap.map, pam/Makefile.am, pam/exports.linux,

	  pam/pam_ldap.map: rename symbol map files and check for the

	  linker option to specify the file with

	* [r1142] configure.ac, nslcd/Makefile.am: pass pthread flags

	  correctly to nslcd Makefile and rename save_ vars to not conflict

	  with AX_PTHREAD test

2010-06-14  arthur

	* [r1141] configure.ac, nslcd/nslcd.c, nss/Makefile.am,

	  nss/common.c, nss/common.h, nss/exports.linux, nss/netgroup.c,

	  nss/prototypes.h, tests/Makefile.am: implement a global symbol

	  inside the NSS module to allow applications to disable NSS

	  lookups over LDAP and use it in nslcd to avoid deadlocks

	* [r1140] common/dict.h, common/expr.h, common/nslcd-prot.h,

	  common/set.h, common/tio.h, compat/attrs.h, compat/daemon.h,

	  compat/ether.h, compat/getopt_long.h, compat/getpeercred.h,

	  compat/ldap_compat.h, compat/pam_compat.h, nslcd/attmap.h,

	  nslcd/cfg.h, nslcd/common.h, nslcd/log.h, nslcd/myldap.h,

	  nss/common.h, nss/prototypes.h, pam/common.h: make include guard

	  names consistent throughout the source and avoid conflicts with

	  system headers

	* [r1139] nss/aliases.c, nss/ethers.c, nss/group.c, nss/hosts.c,

	  nss/netgroup.c, nss/networks.c, nss/passwd.c, nss/protocols.c,

	  nss/rpc.c, nss/services.c, nss/shadow.c: remove some unused

	  include statements

2010-06-12  arthur

	* [r1138] README, common/tio.c, nslcd/attmap.c, nslcd/attmap.h,

	  nslcd/group.c, nslcd/network.c: remove commented out memberOf and

	  ipNetmaskNumber attributes and small cleanups

	* [r1137] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,

	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,

	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,

	  debian/po/ja.po, debian/po/nl.po, debian/po/pt.po,

	  debian/po/pt_BR.po, debian/po/ru.po, debian/po/sv.po,

	  debian/po/vi.po, debian/po/zh_CN.po: run translations through

	  debconf-updatepo -v

2010-06-11  arthur

	* [r1136] nslcd/nslcd.c: fix and remove source code comments

2010-06-04  arthur

	* [r1135] ChangeLog, debian/changelog: revert part of r1134 that

	  was accidentally commited

	* [r1134] ChangeLog, debian/changelog, pam/pam.c: fix nullok test

	  for password modification

2010-06-03  arthur

	* [r1133] debian/libpam-ldapd.pam-auth-update: also ignore other

	  ignorable PAM return codes

2010-06-02  arthur

	* [r1132] compat/pam_get_authtok.c: add a warning to the limitation

	  of our pam_get_authtok() implementation

	* [r1131] pam/pam.c: simplify PAM module splitting remapping for

	  ignore_* options to a separate function, parsing of

	  try_first_pass and use_first_pass is done by pam_get_authtok(),

	  don't report session errors to the user and make error handling

	  consistent

2010-06-01  arthur

	* [r1130] nslcd/pam.c: fix bug in test (r1127)

	* [r1129] man/pam_ldap.8.xml, pam/pam.c: implement an nullok PAM

	  option and disable empty passwords by default

	* [r1128] pam/pam.c: don't log failure to do nslcd request to user

	  and log authentication errors during password change

	* [r1127] nslcd/pam.c: add a debug log message when user

	  authentication was successful

	* [r1126] debian/libpam-ldapd.pam-auth-update: don't use

	  use_authtok for password modification by default

2010-05-31  arthur

	* [r1125] pam/pam.c: fix typo

2010-05-27  arthur

	* [r1123] AUTHORS, ChangeLog, NEWS, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.6 release

2010-05-26  arthur

	* [r1122] debian/control: drop extra parts of package descriptions

	  that should no longer be really relevant and update libpam-ldapd

	  description

2010-05-24  arthur

	* [r1121] debian/libpam-ldapd.pam-auth-update: update

	  pam-auth-update configuration to always perform LDAP

	  autorisation, also pass use_authtok on password modification and

	  spell out session result handling

	* [r1120] pam/pam.c: make code more consistent

	* [r1119] man/pam_ldap.8.xml: fix typo

	* [r1118] pam/pam.c: don't store use_authtok because

	  pam_get_authtok() looks at the arguments itself

2010-05-23  arthur

	* [r1117] HACKING, README, man/nslcd.8.xml, man/nslcd.conf.5.xml:

	  update documentation

	* [r1116] nslcd.conf: include uid and gid options in default

	  configuration file

	* [r1115] configure.ac, m4/acx_pthread.m4, m4/ax_pthread.m4: update

	  AC?X_PTHREAD macro and update configure script to be simpler and

	  add some more checks

	* [r1114] debian/nslcd.init: use nslcd --check in init script's

	  status command

2010-05-22  arthur

	* [r1113] nslcd/pam.c: make debug logging for pam_authz_search

	  option a little more readable

2010-05-20  arthur

	* [r1112] debian/control: add libpam-heimdal as an alternative

	  recommends for libnss-ldapd

2010-05-15  arthur

	* [r1111] nslcd/attmap.c, nslcd/attmap.h: always clear returned

	  buffer when performing attribute mapping (based on a patch by

	  Nalin Dahyabhai <nalin@redhat.com>)

2010-05-14  arthur

	* [r1109] ChangeLog, NEWS, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.5 release

	* [r1108] Makefile.am, debian/source, debian/source/format: switch

	  to source format 3.0 (native)

	* [r1107] pam/pam.c: print uid as a long

	* [r1106] compat/pam_compat.h, configure.ac, man/pam_ldap.8.xml,

	  pam/common.h, pam/pam.c: perform logging from PAM module to

	  syslog and support the debug option to log debugging information

2010-05-13  arthur

	* [r1105] pam/pam.c: centralise initialising functions needed for

	  every PAM call into one function

	* [r1104] common/nslcd-prot.h, nslcd/common.h: make logging of

	  buffer checks consistent

	* [r1103] pam/pam.c: also use PAM username instead of one from

	  context for session open and close

	* [r1102] pam/pam.c: replace my_pam_get_authtok() with standard

	  pam_get_authtok() function, get rid of get_old_password() and

	  general cleanups and simplifications

2010-05-12  arthur

	* [r1101] pam/pam.c: make parsing configuration options global,

	  reorganise a bit and make code more consistent and easier to read

	* [r1100] compat/pam_compat.h, nslcd/pam.c: small compatibility

	  improvements

2010-05-10  arthur

	* [r1099] pam/pam.c: only log "LDAP session failed" if we actually

	  tried

	* [r1098] compat/Makefile.am, compat/pam_compat.h,

	  compat/pam_get_authtok.c, compat/pam_prompt.c, configure.ac,

	  pam/pam.c: replace my_pam_warn() with pam_info() and pam_error()

	  and provide replacement for pam_prompt() also using it in our

	  pam_get_authtok() replacement

2010-05-09  arthur

	* [r1096] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.4 release

	* [r1095] nslcd/myldap.c: only log "connected to LDAP server" if

	  the previous connect failed or we are failing over to a different

	  server

	* [r1094] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd/cfg.c,

	  nslcd/cfg.h, nslcd/myldap.c, tests/README, tests/nslcd-test.conf:

	  rename reconnect_maxsleeptime option to reconnect_retrytime

	* [r1093] nslcd/myldap.c: don't log errno if it is not set (make

	  error less confusing)

	* [r1092] nslcd/myldap.c: handle authentication searches a little

	  differently (only try once if an authentication error is

	  returned)

	* [r1091] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/myldap.c: refactor retry timing mechanism to use time

	  between first and last error to determin when to rerty and only

	  try once (and don't sleep) when we have been failing for a long

	  time

2010-05-08  arthur

	* [r1090] man/nslcd.conf.5.xml: fix wrapping of long line (thanks

	  lintian)

	* [r1089] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/pam.c: rename authz_search option to pam_authz_search

2010-05-07  arthur

	* [r1088] man/nslcd.conf.5.xml, man/pam_ldap.8.xml, nslcd/cfg.c,

	  nslcd/cfg.h, nslcd/pam.c: implement an authz_search option to

	  test whether the user is authorised

	* [r1087] nslcd/alias.c, nslcd/ether.c, nslcd/group.c,

	  nslcd/host.c, nslcd/netgroup.c, nslcd/network.c, nslcd/passwd.c,

	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:

	  tune some buffer sizes and small cleanups

	* [r1086] tests/test_myldap.c: implement test for buffer overflow

	* [r1085] nslcd/myldap.c: fix buffer overflow

	* [r1084] man, man/Makefile.am: have the possibility to generate

	  HTML for manual pages (not done by default)

	* [r1083] man/nslcd.conf.5.xml, man/pam_ldap.8.xml: use docbook

	  elements where possible

2010-05-06  arthur

	* [r1082] compat/pam_compat.h, configure.ac,

	  debian/libpam-ldapd.pam-auth-update, man/pam_ldap.8.xml,

	  pam/pam.c: implement a minimum_uid option for the PAM module to

	  ignore users that have a lower numeric user id

2010-05-05  arthur

	* [r1081] config.guess, config.sub: include updated files

2010-05-03  arthur

	* [r1080] debian/nslcd.config: also parse /etc/ldap.conf for

	  systems that use that for NSS and PAM configuration

2010-04-13  arthur

	* [r1079] nslcd/myldap.c, nslcd/myldap.h, nslcd/pam.c: don't have

	  myldap_set_credentials() try to open a connection but have the

	  PAM code perform a search with the new credentials so we re-use

	  the fail-over mechanism in myldap_search()

	* [r1078] nslcd/cfg.c, nslcd/common.h, nslcd/myldap.c,

	  nslcd/myldap.h, nslcd/passwd.c, tests/test_myldap.c: also have

	  myldap_search() return an LDAP status code

2010-04-01  arthur

	* [r1077] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:

	  small improvements to the test setup

2010-03-20  arthur

	* [r1076] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,

	  nslcd/group.c: add an nss_initgroups_ignoreusers option to ignore

	  username to group lookups for the specified users

2010-03-13  arthur

	* [r1075] man/nslcd.conf.5.xml: remove commented-oud default option

	  because it is not implemented and we have a better mechanism now

2010-02-28  arthur

	* [r1074] nslcd/myldap.c: have less warnings when LDAP_OPT_X_TLS

	  isn't defined

	* [r1073] man/nslcd.conf.5.xml: document which attributes may be

	  mapped with an expression

2010-02-27  arthur

	* [r1071] ChangeLog, NEWS, configure.ac, debian/changelog,

	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get

	  files ready for 0.7.3 release

	* [r1070] debian/NEWS: add blank line for apt-listchanges

	* [r1069] debian/control: upgrade to standards-version 3.8.4 (no

	  changes needed)

	* [r1068] common/dict.h: fix typo

	* [r1067] debian/nslcd.postinst, man/nslcd.conf.5.xml, nslcd.conf,

	  nslcd.h, nslcd/cfg.c, nslcd/cfg.h, nslcd/pam.c: rename admindn

	  option to rootpwmoddn

	* [r1066] INSTALL, compile: update from latest automake

	* [r1065] HACKING, tests/README: small updates to documentation

2010-02-17  arthur

	* [r1064] nslcd/myldap.c: first try password modification without