Changelog for openldap-servers-2.4.11-3.1mdv2009.0.i586.rpm :
Thu Aug 6 00:00:00 2009 Vincent Guardiola 2.4.11-3.1mdv2009.0
+ Revision: 410252
- Tighten up db4-util requires (fix bug #52478)

Tue Sep 16 00:00:00 2008 Guillaume Rousse 2.4.11-3mdv2009.0
+ Revision: 284964
- devel packages requires libwrap-devel

Thu Jul 24 00:00:00 2008 Guillaume Rousse 2.4.11-2mdv2009.0
+ Revision: 242559
- patch5: ensure libs are installed with executable bit set, so as to have debug symbols included indebug package

Sat Jul 19 00:00:00 2008 Buchan Milne 2.4.11-1mdv2009.0
+ Revision: 238145
- New version 2.4.11

Thu Jul 17 00:00:00 2008 Buchan Milne 2.4.10-3mdv2009.0
+ Revision: 236365
- Initial support for back-config configurations in init script

Wed Jul 16 00:00:00 2008 Buchan Milne 2.4.10-2mdv2009.0
+ Revision: 236103
- ITS #5580 (CVS-2008-2952 / MDVSA-2008:144)
- Alternative fix for ITS #5569
- Bump release
- Add patch for ITS #5569 (smbk5pwd interferes with ppolicy)

Thu Jun 12 00:00:00 2008 Buchan Milne 2.4.10-1mdv2009.0
+ Revision: 218095
- New version 2.4.10
Fix smbpwd overlay symlinks
Avoid stripping binaries at install time to get usable debug packages

Tue Jun 10 00:00:00 2008 Buchan Milne 2.4.9-2mdv2009.0
+ Revision: 217233
- Workaround struct ucred glibc 2.8 issue
Fix overlinking/underliking for contrib overlays
- Maintain backportability

+ Pixel
- do not call ldconfig in %post/%postun, it is now handled by filetriggers

Fri May 9 00:00:00 2008 Oden Eriksson 2.4.9-1mdv2009.0
+ Revision: 204515
- 2.4.9
- added P200 (db46-update-4.6.21.1.diff) from the db46 package for completeness

Sun Mar 23 23:00:00 2008 Buchan Milne 2.4.8-2mdv2008.1
+ Revision: 189682
- Ship slapd headers in devel package to allow out-of-tree module compilation
(Guillaume Rousse)
- Ship addpartial and autogroup overlays
- Ship smbk5pwd overlay without heimdal support as smbpwd to not conflict
with heimdal-enabled smbk5pwd overlay from openldap-smbk5pwd package
- Drop explicit perl-MIME-Base64 dependency in migration subpackage
- Ship the allop overlay from contrib/ (Guillaume Rousse)
Avoid conflicting with other openldap packages, and make bash completion work
for non-system case

Mon Feb 25 23:00:00 2008 Buchan Milne 2.4.8-1mdv2008.1
+ Revision: 174893
- Drop patches which are no longer required
- rediff ntlm patch
- Always ship db4 source, so srpm rebuilds more easily on older distros
- New version 2.4.8
- Rework backend options (so new backends will be enabled as modules by default)

+ Thierry Vignaud
- fix description-line-too-long

+ Guillaume Rousse
- fix bash completion

+ Olivier Blin
- restore BuildRoot

Fri Dec 21 23:00:00 2007 Oden Eriksson 2.4.7-4mdv2008.1
+ Revision: 136101
- fix krb5-devel <-> openldap-devel cross linkage (take one)

Fri Dec 21 23:00:00 2007 Oden Eriksson 2.4.7-3mdv2008.1
+ Revision: 136062
- really build system (silly bs bug...)
- added db-4.6.21.tar.gz
- 2.4.7

+ Thierry Vignaud
- kill re-definition of %buildroot on Pixel\'s request

Sun Dec 9 23:00:00 2007 Guillaume Rousse 2.3.39-5mdv2008.1
+ Revision: 116780
- use correct source file for bash completion

Sat Dec 8 23:00:00 2007 Guillaume Rousse 2.3.39-4mdv2008.1
+ Revision: 116519
- bash completion

Wed Dec 5 23:00:00 2007 Buchan Milne 2.3.39-3mdv2008.1
+ Revision: 115711
- Add fix for slapadd hang when not using quick mode (-q)

Wed Nov 7 23:00:00 2007 Guillaume Rousse 2.3.39-2mdv2008.1
+ Revision: 106742
- rebuild

Mon Oct 29 23:00:00 2007 Buchan Milne 2.3.39-1mdv2008.1
+ Revision: 103016
- New version 2.3.39
- Drop ITS4873 patch, applied upstream
- Optional support (--with heimdal) for changing Heimdal passwords in smbk5pwd

Wed Sep 19 00:00:00 2007 Anssi Hannula 2.3.38-3mdv2008.0
+ Revision: 89723
- rebuild due to package loss

+ Andreas Hasenack
- fix indentation error in sudo.schema

Fri Aug 24 00:00:00 2007 Thierry Vignaud 2.3.38-2mdv2008.0
+ Revision: 69740
- fileutils, sh-utils & textutils have been obsoleted by coreutils a long time ago

Thu Aug 23 00:00:00 2007 Buchan Milne 2.3.38-1mdv2008.0
+ Revision: 69115
- New version 2.3.38
- Fix program names in test scripts in non-system case

Fri Aug 17 00:00:00 2007 Buchan Milne 2.3.37-1mdv2008.0
+ Revision: 64124
- Double the size of the SRPM by always shipping db4 source (to avoid build system
problems)
- New version 2.3.37
-Update URLs for Berkeley DB
-Add 4.2.52.5 patch from upstream
-Add Howards cache memory leak fix
-Fix building with internal db4 (and activate it for anything without the above
patches)

+ Andreas Hasenack
- updated dhcp schema from version 3.0.5 of the dhcp patch

Sat Jun 23 00:00:00 2007 Andreas Hasenack 2.3.36-1mdv2008.0
+ Revision: 43205
- use better rpm group for test packages

+ Buchan Milne
- New version 2.3.36

Sat Jun 2 00:00:00 2007 Oden Eriksson 2.3.35-2mdv2008.0
+ Revision: 33634
- rebuilt due to fixed initscript
- make sure slurpd is shut down

Mon Apr 23 00:00:00 2007 Buchan Milne 2.3.35-1mdv2008.0
+ Revision: 17103
- New version 2.3.35
- Patches from CVS:
- Fixed slapd-bdb no-op crasher (ITS#4925)
- Fixed libldap response code handling on rebind (ITS#4924)

Fri Mar 23 23:00:00 2007 Buchan Milne 2.3.34-5mdv2007.1
+ Revision: 148682
- Fix syslog facility selection with new default syslog.conf (Bug #29687)

Fri Mar 16 23:00:00 2007 Buchan Milne 2.3.34-4mdv2007.1
+ Revision: 144974
- Last fixes for test suite

Thu Mar 15 23:00:00 2007 Buchan Milne 2.3.34-3mdv2007.1
+ Revision: 144262
- ITS #4873 - user contributed fix for ACL set memory leak
- fix up syslog configuration in postinstall a bit

Tue Mar 13 23:00:00 2007 Buchan Milne 2.3.34-2mdv2007.1
+ Revision: 143193
- Fix some missing system vs non-system issues
- Apply patch derived from my changes to HEAD for tests not writing to the test
dir
- ITS #4854 - Fixed str2anlist handling of undefined attrs/OCs (segfault)
- ITS #4851 - Fixed slapd-bdb/hdb startup with missing shm env
- ITS #4853 - Fixed slapo-refint config message
- ITS #4855 - Fixed libldap_r tpool reset
- Ship the test suite in a working condition

Sat Feb 17 23:00:00 2007 Buchan Milne 2.3.34-1mdv2007.1
+ Revision: 122184
- New version 2.3.34
- Drop link-ltdl-before-odbc patch (applied upstream)
- reenable meta-concurrency test as it doesnt chase referrals anymore
(according to hyc)
- New version 2.3.33
- Fix issue with back-meta not working (by linking to ltdl before odbc)

Fri Jan 5 23:00:00 2007 Buchan Milne 2.3.32-1mdv2007.1
+ Revision: 104331
-New version 2.3.32
-Post-2.3.31 fixes:
- ACL set memory leak(#4780)
- syncrepl shutdown hang (#4790)
- values return filter control leak(ITS#4794)
- Debug typo (ITS#4784)
-Add additional password modules from contrib (pw-netscape tested and working)
-Add acl-posixgroup from contrib (not tested yet)

Wed Dec 20 23:00:00 2006 Buchan Milne 2.3.31-1mdv2007.1
+ Revision: 100520
-New version 2.3.31
-ACL set memory leak patch from HEAD (ITS#4780)
- revert unnecessary libification of unixODBC-devel buildrequire

Tue Nov 14 23:00:00 2006 Andreas Hasenack 2.3.30-1mdv2007.1
+ Revision: 84112
- fixed odbc buildrequires
- updated to verison 2.3.30

Sat Nov 11 23:00:00 2006 Buchan Milne 2.3.29-1mdv2007.0
+ Revision: 81603
- new version 2.3.29

+ Andreas Hasenack
- we don\'t necessarily have libsasl-devel installed on the host that
builds the .src.rpm or parses it (-q --specfile ...)
- updated to version 2.3.28

Fri Aug 25 00:00:00 2006 Buchan Milne 2.3.27-1mdv2007.0
+ Revision: 57726
- New version 2.3.27
- Import openldap

Thu Aug 17 00:00:00 2006 Buchan Milne 2.3.25-1mdv2007.0
- 2.3.25
- init script: use subsys file named after process (fixes status),
fix status check in recover

Fri Jul 14 00:00:00 2006 Buchan Milne 2.3.24-3mdv2007.0
- include patch for ITS4589
- dont use wildcards in files list (some old versions of rpm dont like that)

Thu Jul 13 00:00:00 2006 Buchan Milne 2.3.24-2mdv2007.0
- apply file size limits during start (set in /etc/sysconfig/ldap)
- fix modulepath in slapd.conf on biarch platforms (#23400)
- put the ldapi socket in a more sensible place, /var/run/ldap/ldapi (#22420)
- use slapd -VV, not slapd -V (which starts slapd too) for version check,
fixes #19245.
- allow setting the maximum file descriptor limit in slapd at compile time,
use --define \'openldap_fd_setsize 8192\' or similar.
- update samba.schema

Thu Jun 8 00:00:00 2006 Buchan Milne 2.3.24-1mdv2007.0
- New release 2.3.24
- only disable linuxthreads check on cooker
- update ldap-hot-db-backup to remove old archived transaction logs (after
7 days by default)
- install cron symlinks for ldap-hot-db-backup, and adjust it for this
- fix ppolicy issues (ITS4576)

Sat May 20 00:00:00 2006 Buchan Milne 2.3.23-1mdk
- New release 2.3.23

Thu May 4 00:00:00 2006 Buchan Milne 3.2.21-2mdk
- add patches for ITSs 4499, 4500, 4503, 4504, 4512, 4513, and a slurpd
potential overflow from Quanahs page

Sat Apr 29 00:00:00 2006 Buchan Milne 2.3.21-1mdk
- New release 2.3.21
- merge fixes from CS4 branch:
- added patch to fix password policy control value
- enabled spasswd (fixes #21753)
- added indexes for syncprov replication
- updated samba schema file with what is provided in samba 3.0.21c
- added sample index line for when using syncprov
- fixed #21066 (limits must be in database section)
- fix ldap-common to only consider bdb and hdb (not ldbm)

Mon Feb 20 23:00:00 2006 Buchan Milne 2.3.20-1mdk
- New release 2.3.20

Thu Jan 26 23:00:00 2006 Buchan Milne 2.3.19-1mdk
- New release 2.3.19

Wed Jan 18 23:00:00 2006 Buchan Milne 2.3.18-1mdk
- New release 2.3.18

Mon Jan 9 23:00:00 2006 Olivier Blin 2.3.13-3mdk
- convert parallel init to LSB

Mon Jan 2 23:00:00 2006 Olivier Blin 2.3.13-2mdk
- parallel init support

Thu Dec 1 23:00:00 2005 Buchan Milne 2.3.13-1mdk
- 2.3.13
- run recovery by default again
- disable meta-concurrency test for now

Tue Nov 22 23:00:00 2005 Buchan Milne 2.3.12-1mdk
- 2.3.12
- no-transaction patch no longer necessary, drop db-4.2.52-6mdk requirement
- drop patches from cvs
- fix quoting of urls in init script (#19911)

Sun Nov 13 23:00:00 2005 Oden Eriksson 2.3.11-7mdk
- rebuilt against openssl-0.9.8a

Wed Nov 2 23:00:00 2005 Buchan Milne 2.3.11-6mdk
- ITS 4108 - thread crash, fix from CVS

Sun Oct 30 00:00:00 2005 Buchan Milne 2.3.11-5mdk
- fix logrotate (including for non-system case)

Fri Oct 28 00:00:00 2005 Buchan Milne 2.3.11-4mdk
- fix init script

Fri Oct 28 00:00:00 2005 Buchan Milne 2.3.11-3mdk
- fix slaptest modification in initscript in non-system case

Fri Oct 28 00:00:00 2005 Buchan Milne 2.3.11-2mdk
- fixes to scripts (put all backups under one place, handle empty suffix)
- check configuration file in init script before restarting, and add
check option (and force-restart if you really want to kill your slapd)

Sun Oct 16 00:00:00 2005 Buchan Milne 2.3.11-1mdk
- 2.3.11
- provide means to build without epoll (--without epoll)
- drop p100

Thu Oct 13 00:00:00 2005 Buchan Milne 2.3.9-2mdk
- disable epoll when building for distributions with a 2.4 kernel
- fix lib require for non-system case

Wed Oct 12 00:00:00 2005 Buchan Milne 2.3.9-1mdk
- 2.3.9
- test041 is disabled upstream
- ITS 4035 - rootdn incorrect in cn=config backend/database (Andreas)

Sat Oct 8 00:00:00 2005 Buchan Milne 2.3.8-1mdk
- New release 2.3.8
- drop upstream patches (p100-102)
- openldap (since 2.3.7) includes up-to-date libtool, ensure we keep it on
older distros (and no longer patch it in etc)
- only run tests for bdb backend by default (--define \'tests all\' to run all)
- test041 seems broken

Thu Sep 29 00:00:00 2005 Buchan Milne 2.3.7-1mdk
- ITS 3989 fix ID used for syncprov_findbase (p100)
- fix rwm-2.3.so.0: undefined symbol: rewrite_info_init (p101)
- ITS 4020 slapd dies with empty uniqueMember attributes (p102)
- fix database dir for build on RH

Wed Sep 21 00:00:00 2005 Buchan Milne 2.3.6-4mdk
- rework init script so permissions checking (which was only called during
recovery) is done by default again (#16518), and add \"recover\" option to handle
recovery sanely

Sun Sep 18 00:00:00 2005 Buchan Milne 2.3.6-3mdk
- check slapd version to avoid unnecessary export/import
- fix typo in previous change to init script
- add acl for sambaDomain to slapd.access.conf
- add some more slapd.conf examples (load overlays, limits for syncrepl)

Fri Sep 16 00:00:00 2005 Buchan Milne 2.3.6-2mdk
- hacks for clean building on other/older distros (mdk10.0, fc1->rhel4)
- fix test for db4_internal case
- return correct exit codes in init script

Wed Aug 31 00:00:00 2005 Buchan Milne 2.3.6-1mdk
- conflict with kolab with broken template slapd.conf

- Sun Aug 28 2005 Oden Eriksson
- fixed one %lib/%{_lib} error
- make the devel sub package conflict with libldap2.2_7-devel
- Mon Aug 22 2005 Buchan Milne
- 2.3.6
- drop p3 (sent upstream)
- use BerkelyDB4.2 patch from source distribution
- update docs from CVS, and add Mandriva section (re-used for README.mdk)
- test and update migration from previous versions with db migration

Wed Aug 10 00:00:00 2005 Buchan Milne 2.3.4-4mdk
- fixes from Christiaan Welvaart allowing building
with openldap-devel installed:
- use new libtool and autotools
- disable parallel make (make depend fails with icecream)

Thu Aug 4 00:00:00 2005 Buchan Milne 2.3.4-3mdk
- fix build with db4.3 run-time library present
- build with system db4.2 on 2006 and later

Fri Jul 22 00:00:00 2005 Buchan Milne 2.3.4-2mdk
- dont run db_recover in scriptlets or init script, not only is it
unnecessary, it can prevent startup
- update/sync configure options
- update built-in db4.2 for the db4_internal case (and default to it for now)
- ship overlays from contrib too (smbk5pwd)

Thu Jun 23 00:00:00 2005 Buchan Milne 2.3.4-1mdk
- 2.3.4
- drop patches included upstream (p20, p21)

Thu Jun 23 00:00:00 2005 Buchan Milne 2.2.27-2mdk
- init script fixes
- fix ownership of database directories (#16518)
- ease translations (inspired by #16491)
- factorise use of user to run slurpd and db tools (also in rpm scriptlets)
- enable SSL if SLAPDURLLIST is not set and we have certs
- fixes in preparation for openldap2.3
- macro-ize more hardcoded versions

Sun Jun 19 00:00:00 2005 Buchan Milne 2.2.27-1mdk
- New release 2.2.27
- drop migration subpackage (which will be packaged seperately)
- move \'make test\' to %check

Sat Jun 11 00:00:00 2005 Andreas Hasenack 2.2.24-4mdk
- added account objectclass to migration tools when EXTENDED_SCHEMA is not
being used (#15499)
- added preserve patch for migrationtools so that the temporary ldif file used
during the import is not removed in the event of an error

Fri Jun 3 00:00:00 2005 Andreas Hasenack 2.2.24-3mdk
- restart in %pre and %post has to deal with locales other than english
- rebuilt with newer sasl (2.1.22)

Sat Apr 23 00:00:00 2005 Christiaan Welvaart 2.2.24-2mdk
- fix smbk5pwd build:
- fix Patch20: use libtool archives in build dir for libldap_r and liblber
- build openldap first so these archives are available

Wed Apr 20 00:00:00 2005 Buchan Milne 2.2.24-1mdk
- 2.2.24
- update qmail schema (Tibor Pittich)
- buildconflicts with libdb4.3

Fri Apr 8 00:00:00 2005 Oden Eriksson 2.2.23-5mdk
- add -fPIC to cflags for librewrite to fix build on amd64
- fix deps

Sun Apr 3 00:00:00 2005 Buchan Milne 2.2.23-4mdk
- add conflict for devel package to allow upgrade (#14536)
- require the version of sasl we built against in post (#15056)
- dont use attributes in slapd.access.conf that were not available in
default schemas before to not break upgrade (#15056)
- build with modules, but not in seperate packages (fixes upgrade with
module packages installed)
- handle databases defined in included files (fix upgrade for Kolab)
- allow disabling of database recovery at startup
- ship smbk5passwd module from cvs (p20), and make it work right (p21)
- disable parallel build (breaks building with modules)
- build against system db4.2 again
- only backup to ldif once for upgrade

Mon Feb 7 23:00:00 2005 Buchan Milne 2.2.23-3mdk
- sync slapd.access.conf with version from openldap2.2 package
- unmark slapd.access.conf as noreplace, and warn the user to this fact

Fri Feb 4 23:00:00 2005 Buchan Milne 2.2.23-2mdk
- fix typo in migration
- migrate data only once, even if the first failed
- fix libtool file fix
- provide backends when built without module support

Wed Jan 26 23:00:00 2005 Buchan Milne 2.2.23-1mdk
- 2.2.23
- fix changelog (from bad merge)
- version the guide source
- run make test once
- fix migration (should migrate all ldbm or bdb database defined in slapd.conf)

Fri Jan 21 23:00:00 2005 Buchan Milne 2.2.20-3mdk
- buildconflicts with older openldap-devel, so we don\'t link to parts
of it in the devel package
- be able to disable tests (via --without test)
- fix typo in Contacts ACL
- add changelog for distro-specific release

Wed Jan 5 23:00:00 2005 Buchan Milne 2.2.20-2mdk
- run make test in build
- build against system db4.2 on 10.1

Tue Jan 4 23:00:00 2005 Buchan Milne 2.2.20-1mdk
- 2.2.20
- fix default slurpd replica path when not system ldap (#12745)
- stop slurpd if it is running, even if we couldn\'t stop slapd (#12760)
- allow overriding of replica detection in the init script when starting
slurpd, via STARTSLURPD in the sysconfig file (#11552)
- fix rpmlint summary-ended-with-dot
- fix requires for -migration
- build against internal db4.2, otherwise we segfault? (#12759)

Thu Dec 23 23:00:00 2004 Buchan Milne 2.2.19-3mdk
- really revert to db-4.2 (and enforce it now)
- fix conflict with system openldap (man pages)
- don\'t use attributes/objectclasses from obsolete samba2 schema in
slapd.access.conf

Wed Dec 15 23:00:00 2004 Buchan Milne 2.2.19-2mdk
- use mkrel (conditionally define it) for distribution specific release tag
- revert to db-4.2 until Sleepycat bug #11505 is fixed
- update ntlm patch (p53), and apply it now
- fix calls to slapd_db
* when not system ldap
- allow build-time setting of system (--with-system)
- macro-ise db4 libname
- update docs (finally) and document how to do it

Mon Nov 29 23:00:00 2004 Buchan Milne 2.2.19-1mdk
- 2.2.19
- only do hostname-based release maths on i586 for now (and fix it too)
- drop p55 (final fix in upstream) and p54 (merged upstream)
- build against system db-4.3 on 10.2 and later

Tue Nov 16 23:00:00 2004 Buchan Milne 2.2.18-3mdk
- better db4.3 patch (Quanah\'s)
- memleak fixes from HEAD (Quanah\'s)
- use original samba.schema, samba2 schema is now obsolete (samba2 retired)
- rename -devel-static to -static-devel
- don\'t provide unversioned -develprovides when not system

Wed Nov 10 23:00:00 2004 Buchan Milne 2.2.18-2mdk
- build with internal db4.3
- ship db4 patches even if we don\'t build with internal db4

Wed Oct 27 00:00:00 2004 Buchan Milne 2.2.18-1mdk
- 2.2.18
- drop buildconflicts
- fix last few \"parallel install\" issues (also fixes #12199)
- fix build without system db4
- add distribution-specific release number

Sun Oct 10 00:00:00 2004 Buchan Milne 2.2.17-1mdk
- 2.2.17
- allow building as non-system, provision to alternativise (taken from samba)
(syslog/logrotate config still needs fixing)

Tue Aug 24 00:00:00 2004 Buchan Milne 2.2.15-1mdk
- 2.2.15

Tue Aug 3 00:00:00 2004 Buchan Milne 2.1.29-6mdk
- slapd.init - only run recovery in start (don\'t destroy memory cache)
- rewrite of backup and reinitialise scripts
- slapd.conf, slapd.access.conf - better default ACLs
- add ldapns.schema, for migrating host attributes from \"account\" objectclass

Sat Jun 19 00:00:00 2004 Jean-Michel Dault 2.1.29-5mdk
- change ldap.conf permissions to 644 so anyone can read the file. It\'s
needed so Evolution and others can work.
- add autoconf2.5 and ed to buildrequires
- disable posix mutexes, this breaks setups with non-NPTL kernels,
low-end processors (VIA, K6, P1), and User-Mode Linux
- use assembler mutexes whenever possible, since they\'re the fastest on
Linux.

Thu May 20 00:00:00 2004 Florin 2.1.29-4mdk
- fix the awk lines in the scripts

Thu May 20 00:00:00 2004 Florin 2.1.29-3mdk
- add the ntlm.patch (required by fcrozat)

Sun Apr 25 00:00:00 2004 Florin 2.1.29-2mdk
- add the forgotten dhcp.schema

Sun Apr 4 00:00:00 2004 Buchan Milne 2.1.29-1mdk
- 2.1.29 marked as stable
- drop patch 3
- add some example scripts for hot database backups / removal of old
transaction logs.
- add schema for evolution, dnszone, sudo, dhcp, drop dns, cron (not valid,
and never implemented)
- update ACLs to allow users to add contacts (ie via Evo).

Thu Mar 25 23:00:00 2004 Florin 2.1.25-6mdk
- comment out the TLS_CACERT /etc/ssl/cacert.pem line in ldap.conf
the file doesn\'t exist anyway and it breaks the non TLS behaviour

Wed Mar 24 23:00:00 2004 Buchan Milne 2.1.25-5mdk
- db4.2.52.2
- fix replica uri support (patch from CVS/2.1.26/2.1.27)
- revert to using /etc/openldap/ldap.conf instead of /etc/ldap.conf (#4462)
- don\'t ship /var/run/ldap/openldap-slurpd
- merge fixes from amd64 branch (thanks Gwenole)
- set TMPDIR in init script to keep kerberos binds working after restart
(Denis Havlik)
- better default slapd.access.conf and ldap.conf (don\'t require CA-signed certs)