Author: Arthur de Jong
Revision Date: 2015-08-13 21:00:00 UTC

ensure proper return code of init script (closes: #794686)

Author: Arthur de Jong
Revision Date: 2015-08-13 21:00:00 UTC

ensure proper return code of init script (closes: #794686)

Author: Ryan Tandy
Revision Date: 2015-02-12 11:10:41 UTC

return-partial-shadow-information-to-non-root-users.patch: backport
upstream patch to return partial shadow information (leaving out password
hashes) to non-root users. This fixes pam_unix failing in pam_acct_mgmt
while trying to get password expiry information from shadow, thereby
preventing the Unity lockscreen from being unlocked by LDAP users. (LP:
#1314095)

Author: Ryan Tandy
Revision Date: 2015-02-12 11:10:41 UTC

return-partial-shadow-information-to-non-root-users.patch: backport
upstream patch to return partial shadow information (leaving out password
hashes) to non-root users. This fixes pam_unix failing in pam_acct_mgmt
while trying to get password expiry information from shadow, thereby
preventing the Unity lockscreen from being unlocked by LDAP users. (LP:
#1314095)

Author: Arthur de Jong
Revision Date: 2014-09-28 15:00:00 UTC

* use-ip-range-for-tests.patch: use a different IP range for running the
  autopkgtest tests to avoid conflicts in test environments
* debconf translation updates:
  - Norwegian Bokmål by Petter Reinholdtsen (closes: #758693)
* prefer nslcd as nslcd-2 implementation (closes: #760287)
* do not remove PAM profile when another architecture remains (taken from
  the libpam_ldap package)

Author: Arthur de Jong
Revision Date: 2014-09-28 15:00:00 UTC

* use-ip-range-for-tests.patch: use a different IP range for running the
  autopkgtest tests to avoid conflicts in test environments
* debconf translation updates:
  - Norwegian Bokmål by Petter Reinholdtsen (closes: #758693)
* prefer nslcd as nslcd-2 implementation (closes: #760287)
* do not remove PAM profile when another architecture remains (taken from
  the libpam_ldap package)

Author: Rafael David Tinoco
Revision Date: 2014-08-14 07:27:54 UTC

* [bzr lp:ubuntu/nss-pam-ldapd revno:19 tag:0.8.8-1]:
  - debian/nslcd.config: properly handle preseeding and reading values
  from the configuration file by forcefully overwriting debconf values
  from nslcd.conf and not overwriting debconf values when reading other
  configuration files. (LP: #1229713)

Author: Rafael David Tinoco
Revision Date: 2014-08-14 07:27:54 UTC

* [bzr lp:ubuntu/nss-pam-ldapd revno:19 tag:0.8.8-1]:
  - debian/nslcd.config: properly handle preseeding and reading values
  from the configuration file by forcefully overwriting debconf values
  from nslcd.conf and not overwriting debconf values when reading other
  configuration files. (LP: #1229713)

Author: Nicola Heald
Revision Date: 2014-07-29 12:27:23 UTC

* SECURITY UPDATE: denial of service related to incorrect use
  of the FD_SET macro.
  - http://arthurdejong.org/nss-pam-ldapd/CVE-2013-0288
  - common/tio.c added checks to make sure the file descriptor
    can be stored in the file descriptor set, from upstream patch
    http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81
  - CVE-2013-0288
  - LP: #1347614

Author: Arthur de Jong
Revision Date: 2014-07-23 21:00:00 UTC

* debconf translation updates:
  - Portuguese by Américo Monteiro (closes: #751047)
  - French by Christian Perrier (closes: #751100)
  - Japanese by Kenshi Muto (closes: #752515)
  - Russian by Yuri Kozlov (closes: #752550)
  - Dutch by Arthur de Jong
  - Swedish by Martin Bagge (closes: #753691)
    (with corrections by Anders Jonsson)
  - Czech by Miroslav Kure (closes: #753710)
  - Danish by Joe Hansen (closes: #753948)
  - Turkish by Mert Dirik (closes: #754101)
  - Slovak by Slavko (closes: #754284)
  - German by Chris Leick (closes: #754476)
  - Polish by Michał Kułach (closes: #754989)
  - Spanish by Matías A. Bellone (closes: #755037)
  - Italian by Beatrice Torracca (closes: #755282)
* for new installs add tls_cacertfile /etc/ssl/certs/ca-certificates.crt to
  nslcd.conf (closes: #750949)
* provide a debconf prompt for tls_cacertfile if TLS is enabled and reqcert
  is configured (closes: #750949, #661872)
* update autopkgtest tests to dump daemon debug info if tests fail and not
  stop the tests on first failure

Author: Arthur de Jong
Revision Date: 2014-07-23 21:00:00 UTC

* debconf translation updates:
  - Portuguese by Américo Monteiro (closes: #751047)
  - French by Christian Perrier (closes: #751100)
  - Japanese by Kenshi Muto (closes: #752515)
  - Russian by Yuri Kozlov (closes: #752550)
  - Dutch by Arthur de Jong
  - Swedish by Martin Bagge (closes: #753691)
    (with corrections by Anders Jonsson)
  - Czech by Miroslav Kure (closes: #753710)
  - Danish by Joe Hansen (closes: #753948)
  - Turkish by Mert Dirik (closes: #754101)
  - Slovak by Slavko (closes: #754284)
  - German by Chris Leick (closes: #754476)
  - Polish by Michał Kułach (closes: #754989)
  - Spanish by Matías A. Bellone (closes: #755037)
  - Italian by Beatrice Torracca (closes: #755282)
* for new installs add tls_cacertfile /etc/ssl/certs/ca-certificates.crt to
  nslcd.conf (closes: #750949)
* provide a debconf prompt for tls_cacertfile if TLS is enabled and reqcert
  is configured (closes: #750949, #661872)
* update autopkgtest tests to dump daemon debug info if tests fail and not
  stop the tests on first failure

Author: Arthur de Jong
Revision Date: 2013-10-17 23:50:00 UTC

* implement-nofork.patch: introduce a -n, --nofork option that skips the
  daemonising step on start-up (this is related to Ubuntu bug 806761 and
  may be required to get nslcd working with upstart)
* add init script dependency on $network to ensure that network is up
  before starting nslcd (closes: #726435)
* clean generated manual pages to allow the package to be built tice in
  a row

Author: Arthur de Jong
Revision Date: 2013-05-05 20:00:00 UTC

* New upstream release
  - include an extra sanity check to ensure not too many file
    descriptors are open
  - fix handling of gid configuration option if it listed before the uid
    option
  - return NSS_STATUS_TRYAGAIN on zero-length (but not-NULL) buffer (thanks
    Jakub Hrozek)
  - provide an _nss_ldap_version symbol in the NSS module to help debug
    problems with a newer nslcd
  - retry updating the lastChange attribute with the normal nslcd LDAP
    connection if the update with the user's connection failed
  - avoid processing passwd_byuid requests for uids below nss_min_uid
  - fix a few minor or very unlikely to occur memory leaks
  - miscellaneous minor changes, fixes and compatibility improvements
* drop 01-fix-set-usec-instead-of-sec.patch which is part of 0.8.13
* remove compatibility code that converted nss-ldapd.conf to nslcd.conf
  for upgrading from pre-0.7 versions of nss-ldapd (thanks Dominik George)
* remove code for fixing permissions when upgrading from a pre-0.6.7.1
  version
* updated Turkish debconf translation by Atila KOÇ (closes: #701067)
* drop Richard A Nelson from uploaders
* add build dependency on autotools-dev to ensure config.sub and
  config.guess are automatically updated during build

Author: Arthur de Jong
Revision Date: 2013-05-05 20:00:00 UTC

* New upstream release
  - include an extra sanity check to ensure not too many file
    descriptors are open
  - fix handling of gid configuration option if it listed before the uid
    option
  - return NSS_STATUS_TRYAGAIN on zero-length (but not-NULL) buffer (thanks
    Jakub Hrozek)
  - provide an _nss_ldap_version symbol in the NSS module to help debug
    problems with a newer nslcd
  - retry updating the lastChange attribute with the normal nslcd LDAP
    connection if the update with the user's connection failed
  - avoid processing passwd_byuid requests for uids below nss_min_uid
  - fix a few minor or very unlikely to occur memory leaks
  - miscellaneous minor changes, fixes and compatibility improvements
* drop 01-fix-set-usec-instead-of-sec.patch which is part of 0.8.13
* remove compatibility code that converted nss-ldapd.conf to nslcd.conf
  for upgrading from pre-0.7 versions of nss-ldapd (thanks Dominik George)
* remove code for fixing permissions when upgrading from a pre-0.6.7.1
  version
* updated Turkish debconf translation by Atila KOÇ (closes: #701067)
* drop Richard A Nelson from uploaders
* add build dependency on autotools-dev to ensure config.sub and
  config.guess are automatically updated during build

Author: Arthur de Jong
Revision Date: 2012-12-09 16:00:00 UTC

01-use-poll-instead-of-select.patch: update patch to fix a problem in
the timeout calculation used in the communication protocol between
nslcd and the NSS and PAM modules, thanks Julien Cristau

Author: Arthur de Jong
Revision Date: 2012-12-09 16:00:00 UTC

01-use-poll-instead-of-select.patch: update patch to fix a problem in
the timeout calculation used in the communication protocol between
nslcd and the NSS and PAM modules, thanks Julien Cristau

Author: Chris J Arges
Revision Date: 2012-07-16 08:39:03 UTC

increase buffer used for pam_authz_search (LP: #951343)

Author: Chris J Arges
Revision Date: 2012-07-16 08:39:03 UTC

increase buffer used for pam_authz_search (LP: #951343)

Author: Arthur de Jong
Revision Date: 2012-08-31 23:30:00 UTC

* fix typo in comment (thanks Caleb Callaway)
* install a ldapns.ldif in nslcd doc directory (closes: #674591)
* ensure that time is set before starting k5start to ensure that Kerberos
  ticket is granted (closes: #659227)
* properly parse and write configuration options with an optional map
  parameter during debconf configuration (LP: #1029062)

Author: Chris J Arges
Revision Date: 2012-07-16 08:39:03 UTC

increase buffer used for pam_authz_search (LP: #951343)

Author: Chris J Arges
Revision Date: 2012-07-16 08:39:03 UTC

increase buffer used for pam_authz_search (LP: #951343)

Author: Arthur de Jong
Revision Date: 2011-09-04 21:00:00 UTC

* Upload to unstable
* switch to using the member attribute by default instead of
  uniqueMember (backwards incompatible change)
* only return "x" as a password hash when the object has the shadowAccount
  objectClass and nsswitch.conf is configured to do shadow lookups using
  LDAP (this avoids some problems with pam_unix)
* fix problem with partial attribute name matches in DN (thanks Timothy
  White)
* fix a problem with objectSid mappings with recent versions of OpenLDAP
  (patch by Wesley Mason)
* set the socket timeout in a connection callback to avoid timeout
  issues during the SSL handshake (patch by Stefan Völkel)
* check for unknown variables in pam_authz_search
* only check password expiration when authenticating, only check account
  expiration when doing authorisation
* make buffer sizes consistent and grow all buffers holding string
  representations of numbers to be able to hold 64-bit numbers
* update AX_PTHREAD from autoconf-archive
* support querying DNS SRV records from a different domain than the current
  one (based on a patch by James M. Leddy)
* fix a problem with uninitialised memory while parsing the tls_ciphers
  option (closes: #638872) (but doesn't work yet due to #640384)
* implement bounds checking of numeric values read from LDAP (patch by
  Jakub Hrozek)
* correctly support large uid and gid values from LDAP (patch by Jakub
  Hrozek)
* improvements to the configure script (patch by Jakub Hrozek)
* switch to dh for debian/rules and bump debhelper compatibility to 8
* build Debian packages with multiarch support
* ship shlibs (but still no symbol files) for libnss-ldapd since that was
  the easiest way to support multiarch
* fix output in init script when restarting nslcd (closes: #637132)
* correctly handle leading and trailing spaces in preseeded debconf uri
  option (patch by Andreas B. Mundt) (closes: #637863)
* support spaces around database names in /etc/nsswitch.conf while
  configuring package (closes: #640185)
* updated Russian debconf translation by Yuri Kozlov (closes: #637751)
* updated French debconf translation by Christian Perrier (closes: #637756)
* added Slovak debconf translation by Slavko (closes: #637759)
* updated Danish debconf translation by Joe Hansen (closes :#637763)
* updated Brazilian Portuguese debconf translation by Denis Doria
* updated Portuguese debconf translation by Américo Monteiro
* updated Japanese debconf translation by Kenshi Muto (closes: #638195)
* updated Czech debconf translation by Miroslav Kure (closes: #639026)
* updated German debconf translation by Chris Leick (closes: #639107)
* updated Spanish debconf translation by Francisco Javier Cuadrado
  (closes: #639236)
* updated Dutch debconf translation by Arthur de Jong with help from Paul
  Gevers and Jeroen Schot

Author: Arthur de Jong
Revision Date: 2010-12-11 22:00:00 UTC

* fix handling of idle_timelimit option
* fix error code for problem while doing password modification

Author: Arthur de Jong
Revision Date: 2010-12-11 22:00:00 UTC

* fix handling of idle_timelimit option
* fix error code for problem while doing password modification

Author: Arthur de Jong
Revision Date: 2010-05-27 21:00:00 UTC

* include libpam-heimdal in libnss-ldapd recommends list of PAM
  implementations (closes: #582407)
* fix a problem with empty attributes if expression-based attribute
  mapping is used (patch by Nalin Dahyabhai)
* make debug logging for pam_authz_search option a little more informative
* documentation improvements
* update pam-auth-update configuration to always perform LDAP autorisation
  for LDAP users

Author: Arthur de Jong
Revision Date: 2009-12-28 13:30:00 UTC

* some attributes may be mapped to a shell-like expression that expand
  attributes from LDAP entries; this allows attributes overrides, defaults
  and much more (as a result the passwd cn attribute mapping has been
  removed because the gecos mapping is now "${gecos:-$cn}" by default)
* update the NSS module to follow the change in Glibc where the addr
  parameter of getnetbyaddr_r() was changed from network-byte-order to
  host-byte-order
* properly escape searches for uniqueMember attributes for DN with a comma
  in an attribute value
* miscellaneous improvements to the configure script implementing better
  (and simpler) library detection
* some general refactoring and other miscellaneous improvements
* make configure check if we need to explicitly link to -llber
  (closes: #555779)
* libnss-ldapd: recommend libpam-krb5 as an alternative to libpam-ldapd for
  Kerberos environments
* updated Italian debconf translation by Vincenzo Campanella
  (closes: #556107)
* fix nslcd postrm to remove old config file (thanks piuparts)