lp:ubuntu/trusty/nss-ldapd

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/trusty/nss-ldapd
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Mature

Recent revisions

11. By Mathias Gug

debian/rules: revert nslcd socket location to /var/run/nslcd/. Both nslcd
and slapd nssov overlay will create the directory if it doesn't exist.

10. By Mathias Gug

* Split nslcd daemon in its own package:
  + create new nslcd package.
  + split nscld configuration logic in its own maintainer scripts.
  + move nslcd socket from /var/run/nslcd/ to /var/run/ as it's used by
    the nss library to connect to the server (which can be nslcd or slapd).
* debian/control: drop nscd, libpam-ldap from a Recommends to a Suggests to
  not install them by default since slapd with the nssov overlay will be
  the suggested option for local caching.

9. By Arthur de Jong

* fix user name to groups mapping (a bug in buffer checking in initgroups()
  that was introduced in 0.6.9)
* fix a possible buffer overflow with too many uidNumber or gidNumber
  attributes (thanks to David Binderman for finding this)
* lookups for group, netgroup, passwd, protocols, rpc, services and shadow
  maps are now case-sensitive
* test suite is now minimally documented
* added --disable-sasl and --disable-kerberos configure options
* changed references to home page and contact email addresses to use
  arthurdejong.org
* upgrade to standards-version 3.8.2 (no changes needed)
* make configuring SSL/TLS possible with debconf (closes: #529985)
* updated Finnish debconf translation by Esko Arajärvi (closes: #534343)
* updated Japanese debconf translation by Kenshi Muto (closes: #534399)
* updated Russian debconf translation by Yuri Kozlov (closes: #534780)
* updated Swedish debconf translation by Martin Ågren (closes: #534869)
* updated Spanish debconf translation by Francisco Javier Cuadrado
  (closes: #535438)
* updated Portuguese debconf translation by Américo Monteiro
  (closes: #535641)
* updated Czech debconf translation by Miroslav Kure (closes: #535678)
* updated French debconf translation by Christian Perrier (closes: #536717)

8. By Arthur de Jong

* implement searching through multiple search bases, based on a patch by
  Leigh Wedding
* fix a segmentation fault that could occur when using any of the tls_*
  options with a string parameter (closes: #531113)
* miscellaneous improvements to the experimental PAM module
* implement PAM authentication function in the nslcd daemon
* the code for reading and writing protocol entries between the NSS module
  and the daemon was improved
* documentation updates
* removed SSL/TLS related warnings during startup
* added Finnish debconf translation by Esko Arajärvi (closes: #530284)
* added Richard A Nelson (Rick) <email address hidden> to uploaders

7. By Arthur de Jong

* SECURITY FIX: the nss-ldapd.conf file that is installed was created
                world-readable which could cause problems if the bindpw
                option is used
                this has been fixed and warnings have been added to the
                manual page and sample nss-ldapd.conf (closes: #520476)
* clean the environment and set LDAPNOINIT to disable parsing of LDAP
  configuration files (.ldaprc, /etc/ldap/ldap.conf, etc)
* remove sslpath option because it wasn't used
* correctly set SSL/TLS options when using StartTLS
* rename the tls_checkpeer option to tls_reqcert, deprecating the old name
  and supporting all values that OpenLDAP supports
* allow backslashes in user and group names execpt as first or last
  character
* check user and group names against LOGIN_NAME_MAX if it is defined
* fix for getpeercred() on Solaris by David Bartley
* debian/control: change section to admin to follow change in override file
* add lintian override for missing shlibs and symbols control files (we are
  a shared library that should not be directly linked to)
* upgrade to standards-version 3.8.1 (no changes needed)
* upgrade to debhelper compatibility level 7

6. By Arthur de Jong

a fix for a problem in debconf configuration that would ignore user input
and use automatically detected values instead (closes: 505384)

5. By Arthur de Jong

* clarify relationship to nss_ldap in package description (closes: #499892)
* fix test for nscd init script in postinst (closes: #504142)
* allow spaces in user and group names (closes: #488635)
* if ldap_set_option() fails log the option name instead of number
* retry connecting to LDAP server in more cases

4. By Arthur de Jong

* updated Swedish debconf translation by Martin Ågren (closes: #492910)
* updated Danish debconf translation by Jonas Smedegaard (closes: #493973)

3. By Arthur de Jong

* major structural changes in the LDAP lookup code using a newly implemented
  module that does memory management, session handling, paging and all other
  painful things with a simple interface
* rewritten LDAP query and result handling code, now generating warnings
  about incorrect entries in the LDAP directory
* IPv6 addresses in host lookups are now supported
* added Kerberos ccname support (with the krb5_ccname option) thanks to
  Andreas Schneider and Ralf Haferkamp from SuSE and remove
  --with-gssapi-dir, --enable-configurable-krb5-ccname-gssapi and
  --enable-configurable-krb5-ccname-env configure options and having
  automatic detection instead
* added support for DNS SRV record lookups by specifying DNS as uri thanks
  to Ralf Haferkamp and Michael Calmer from SuSE
* added support for DOMAIN as base DN which uses the host's domain to
  construct a DN
* removed nss_connect_policy, bind_policy and sizelimit options
* cleaned up and documented reconnect logic with reconnect_tries,
  reconnect_sleeptime and reconnect_maxsleeptime options
* configuration values with spaces in them (e.g. distinguished names) are
  now handled properly
* fix a small memory leak in the I/O module
* miscellaneous code improvements (better source code comments, more
  consistent logging, portability improvements, more tests, etc)
* improvements to documentation

2. By Emmet Hikory

Rebuild against libldap2.4-2

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/utopic/nss-ldapd
This branch contains Public information 
Everyone can see this information.

Subscribers