|
|
 |
|
|
Changelog for slapi-nis-0.60.0-4.el7_9.x86_64.rpm :
Tue Oct 24 14:00:00 2023 Alexander Bokovoy - 0.60.0-4
- Ignore updates from non-tracked subtrees during modify/modrdn/update
to avoid deadlocks with retro changelog
- Resolves: RHEL-11869
Thu Apr 27 14:00:00 2023 Alexander Bokovoy - 0.60.0-3
- Also handle base searches within the compat tree
- Resolves: rhbz#2168893
Wed Mar 22 13:00:00 2023 Alexander Bokovoy - 0.60.0-2
- Fix base DN searches outside the compat tree
- Resolves: rhbz#2168893
Fri Sep 9 14:00:00 2022 Alexander Bokovoy - 0.60.0-1
- upstream release 0.60.0
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
- Resolves: rhbz#1978748
Release adds following fixes:
- Fix ID views integration
- Fix base scope lookups
- Bump NIS max dgram size to 8KB by default instead of 1KB
- Allow to rebuild the compat tree
Wed Apr 7 14:00:00 2021 Alexander Bokovoy - 0.56.5-4
- CVE 2021-3480: slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1942937
Fri Jan 29 13:00:00 2021 Alexander Bokovoy - 0.56.5-3
- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113
Wed May 6 14:00:00 2020 Alexander Bokovoy - 0.56.5-2
- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190
Mon May 4 14:00:00 2020 Alexander Bokovoy - 0.56.5-1
- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides
Fri Aug 16 14:00:00 2019 Alexander Bokovoy - 0.56.0-13
- Fixed: #1725845
ns-slapd is crashing intermittently
- Compiler fixes
Tue Apr 23 14:00:00 2019 Alexander Bokovoy - 0.56.0-12
- Related: #1435663
Covscan fixes
Wed Mar 27 13:00:00 2019 Alexander Bokovoy - 0.56.0-11
- Fixed: #1435663
Additional set of fixes for conflicts over cn=config updates
Wed Mar 27 13:00:00 2019 Alexander Bokovoy - 0.56.0-10
- Fixed: #1435663
Wed Dec 5 13:00:00 2018 Alexander Bokovoy - 0.56.0-9
- Fixed: #1502429
- Update upstream reference to http://pagure.io/slapi-nis/
Fri Dec 8 13:00:00 2017 Alexander Bokovoy - 0.56.0-8
- Fixed: #1473572
- Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
- Related: #1473577
- Synchronize timeout-enabled code with ipa-extdom-extop
Mon Nov 6 13:00:00 2017 Alexander Bokovoy - 0.56.0-7
- Related: #1473577
- Force at least SSSD 1.16.0-3 for timeout-enabled NSS API
Fri Nov 3 13:00:00 2017 Alexander Bokovoy - 0.56.0-6
- Related: #1473577
- Update configure and make files over the old release
- Fix nss_sss usage
Fri Nov 3 13:00:00 2017 Alexander Bokovoy - 0.56.0-5
- Resolves: #1473572
- Fixed: Make changes in overrides available in the compat tree at runtime
- Resolves: #1473577
- Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout
Tue Aug 9 14:00:00 2016 Alexander Bokovoy - 0.56.0-4
- Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
- Resolves: #1361123
- Fixed: slapi-nis plugin modifies DS data
- Resolves: #1360245
Tue Jul 12 14:00:00 2016 Alexander Bokovoy - 0.56.0-3
- Fix double free in SSSD 1.14+ support
- Resolves: #1353549
Mon Jun 20 14:00:00 2016 Alexander Bokovoy - 0.56.0-2
- Fix reported coverity issues
- Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
- Resolves: #1292148
Mon Jun 20 14:00:00 2016 Alexander Bokovoy - 0.56.0-1
- New upstream release:
- support updating passwords for the users from the primary tree
- populate map cache in a separate thread to avoid blocking the DS
- Resolves: #1292148
Tue Apr 26 14:00:00 2016 Alexander Bokovoy - 0.54-9
- Reworked priming thread shutdown support
- Resolves: #1327197
Fri Apr 15 14:00:00 2016 Alexander Bokovoy - 0.54-8
- Wait for priming thread to finish before shutdown
- Resolves: #1327197
Tue Feb 23 13:00:00 2016 Alexander Bokovoy - 0.54-7
- Resolves: #1138797
- Resolves: #1301300
Fri Nov 13 13:00:00 2015 Alexander Bokovoy - 0.54-6
- delay sending responses from compat tree after map cache search
- Resolves: #1273587
- fix processing of ID views
- Resolves: #1277576, #1265465
Tue Jul 28 14:00:00 2015 Alexander Bokovoy - 0.54-5
- Don\'t lookup groups in SSSD for memberUid without AATTdomain
- Resolves: #1243823
Wed Jul 15 14:00:00 2015 Alexander Bokovoy - 0.54-4
- Fix CVE-2015-0283 for RHEL 7.2
- Resolves: #1202996
Wed Mar 18 13:00:00 2015 Alexander Bokovoy - 0.54-3
- Fix CVE-2015-0283
- Resolves: #1202995
Thu Oct 30 13:00:00 2014 Alexander Bokovoy - 0.54-2
- Complete ID views support to BIND operation
- Ignore ID views outside schema-compat subtrees
- Use 389-ds API compatible with RHEL 7.0
- Resolves: #1151436
Mon Oct 13 14:00:00 2014 Alexander Bokovoy - 0.54-1
- Add support for IDM\'s ID views
- Allow searching SSSD-provided users as memberUid case-insensitevly
- Resolves: #1151436
Tue Sep 9 14:00:00 2014 Nalin Dahyabhai - 0.52-5
- backport correction to the default settings for hosts.byname and
hosts.byaddr NIS maps, so that their data items start with the host\'s
address rather than a name (#1090948)
Fri Jan 24 13:00:00 2014 Daniel Mach - 0.52-4
- Mass rebuild 2014-01-24
Mon Jan 20 13:00:00 2014 Nalin Dahyabhai - 0.52-3
- remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
built for everything now (#1055711)
Fri Dec 27 13:00:00 2013 Daniel Mach - 0.52-2
- Mass rebuild 2013-12-27
Mon Dec 16 13:00:00 2013 Nalin Dahyabhai - 0.52-1
- correctly reflect whether or not we\'re built with transaction support in
the module\'s nsslapd-pluginVersion attribute
- fix a couple of should\'ve-used-memmove()-instead-of-memcpy() cases which
would hit when removing maps or groups of maps (#1043546/#1043638)
Mon Dec 9 13:00:00 2013 Nalin Dahyabhai - 0.51-1
- fix another request argument memory leak in NIS server (#1040159)
- fix miscellaneous items found by static analysis
Tue Oct 1 14:00:00 2013 Nalin Dahyabhai - 0.50-1
- if we get an EPIPE while registering with rpcbind, try to reconnect and
retransmit before giving up
Thu Sep 19 14:00:00 2013 Nalin Dahyabhai - 0.49-1
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
which should let us avoid deadlocks when tasks are modifying data in
the backend database (#1007451)
Mon Aug 12 14:00:00 2013 Nalin Dahyabhai - 0.48-1
- try to gracefully handle failures obtaining internal locks
- fix locating-by-name of entries with names that require escaping
- add self-tests for nsswitch and PAM functionality
- make nsswitch mode properly handle user and group names with commas in them
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
- drop the \"schema-compat-origin\" attribute
Wed Aug 7 14:00:00 2013 Nalin Dahyabhai - 0.47.7-1
- fix building against versions of directory server older than 1.3.0, which
first introduced slapi_escape_filter_value()
Wed Aug 7 14:00:00 2013 Nalin Dahyabhai - 0.47.6-1
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
version 1.10 or later, where it first appeared
Wed Aug 7 14:00:00 2013 Nalin Dahyabhai - 0.47.5-1
- merge Alexander Bokovoy\'s patches to
- teach the schema compatibility plugin to optionally serve user and group
information retrieved from libc as part of a set of compat entries
- handle simple bind requests for those entries by calling out to PAM
- to rewrite the DN of incoming bind requests to compat entries to point
at the source entries, instead of returning a referral which most clients
won\'t handle
- include IPA-specific docs as docs
Sun Aug 4 14:00:00 2013 Fedora Release Engineering - 0.47-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
Fri May 24 14:00:00 2013 Nalin Dahyabhai - 0.47-1
- fix request argument memory leaks in NIS server
- add a %sort function
Thu Apr 4 14:00:00 2013 Nalin Dahyabhai - 0.46-1
- when checking if we can skip processing for a given change, pay attention to
whether or not the changes cause the entry to need to be added or removed
from a map (#912673)
- check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
to update things but the server called us anyway
Tue Mar 19 13:00:00 2013 Nalin Dahyabhai - 0.45-1
- fix dispatching for multiple connected clients in the NIS plugin (#923336)
Tue Feb 5 13:00:00 2013 Nalin Dahyabhai - 0.44-3
- work around multilib differences in the example .ldif files (internal
tooling)
Tue Nov 20 13:00:00 2012 Nalin Dahyabhai - 0.44-2
- set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
which have versions of IPA < 3.0, per mkosek on freeipa-devel
Wed Nov 14 13:00:00 2012 Nalin Dahyabhai - 0.44-1
- add missing newline to a couple of debug log messages
- note whether or not betxn support is compiled in as part of the
nsslapd-pluginVersion value we report to the server
- register callbacks in the same order in both plugins, so that
their log messages are logged in the same order
Tue Nov 13 13:00:00 2012 Nalin Dahyabhai - 0.43-1
- reintroduce support for directory server transactions (nhosoi, IPA#3046)
- control transaction support at run-time, deciding when to do things based
on the value of the nsslapd-pluginbetxn attribute in the plugin\'s entry
- NIS: add default settings for shadow.byname and passwd.adjunct.byname maps
Sat Jul 21 14:00:00 2012 Fedora Release Engineering - 0.42-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
Wed Jun 13 14:00:00 2012 Nalin Dahyabhai - 0.42-1
- drop support for directory server transactions (richm, #766320)
Tue May 22 14:00:00 2012 Nalin Dahyabhai
- fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
of an smod along with its contents, when it just keeps the contents
Tue Apr 10 14:00:00 2012 Nalin Dahyabhai - 0.41-1
- log errors evaluating pad expressions in %link rather than continuing on
until we hit an arithmetic exception (#810258)
Fri Mar 30 14:00:00 2012 Nalin Dahyabhai - 0.40-1
- treat padding values passed to the \"link\" function as expressions to be
evaluated rather than simply as literal values (part of #767372)
Wed Mar 28 14:00:00 2012 Nalin Dahyabhai - 0.39-1
- add a \"default\" function for trying to evaluate one expression, then
another, then another... (part of #767372)
- when creating a compat entry based on a real entry, set an entryUSN based on
the source entry or the rootDSE (freeipa #864); the \"scaffolding\" entries
won\'t have them
Tue Mar 6 13:00:00 2012 Nalin Dahyabhai - 0.38-1
- properly escape RDN values when building compat entries (#796509, #800625)
Mon Feb 13 13:00:00 2012 Nalin Dahyabhai - 0.37-1
- fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn\'t defined
(reported by Christian Neuhold)
- conditionalize whether we have a build dependency on tcp_wrappers (older
releases) or tcp_wrappers-devel (newer releases)
Tue Jan 24 13:00:00 2012 Nalin Dahyabhai - 0.36-1
- take steps to avoid making yp_first/yp_next clients loop indefinitely
when a single LDAP entry produces multiple copies of the same NIS key
for a given map
Tue Jan 24 13:00:00 2012 Nalin Dahyabhai - 0.35-1
- add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
match/regmatch[i]/regsub[i], but which can handle and return lists of
zero or more results (part of #783274)
Thu Jan 19 13:00:00 2012 Nalin Dahyabhai - 0.34-1
- do entry comparisons ourselves, albeit less throughly, to avoid the worst
case in pathological cases (more of #771444)
Tue Jan 17 13:00:00 2012 Nalin Dahyabhai - 0.33-1
- get more aggressive about skipping unnecessary calculations (most of
the problem in #771444, though not the approach described there)
Mon Jan 16 13:00:00 2012 Nalin Dahyabhai - 0.32-1
- add support for directory server transactions (#758830,#766320)
Sat Jan 14 13:00:00 2012 Fedora Release Engineering - 0.28-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
Wed Jan 11 13:00:00 2012 Nalin Dahyabhai - 0.31-1
- fix some memory leaks (more of #771493)
Tue Jan 10 13:00:00 2012 Nalin Dahyabhai - 0.30-1
- skip recalculations when the attributes which changed don\'t factor into
our calculations (part of #771493)
Wed Jan 4 13:00:00 2012 Nalin Dahyabhai - 0.29-1
- add regmatchi/regsubi formatting functions which work like regmatch/regsub,
but do matching in a case-insensitive manner
- update NIS map defaults to match {CRYPT} userPassword values in a
case-insensitive manner so that we also use {crypt} userPassword values
- fix inconsistencies in the NIS service stemming from using not-normalized DNs
in some places where it should have used normalized DNs
Mon Dec 19 13:00:00 2011 Nalin Dahyabhai - 0.28-1
- when configured with --with-ldap=openldap, link with -lldap_r rather
than -lldap (rmeggins, #769107)
Tue Dec 6 13:00:00 2011 Nalin Dahyabhai - 0.27-1
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
(the rest of #730394/#730403)
Fri Aug 12 14:00:00 2011 Nalin Dahyabhai - 0.26-1
- when building for 389-ds, use libpthread\'s read-write locks instead of
NSPR\'s (part of #730394/#730403)
Wed Jul 27 14:00:00 2011 Nalin Dahyabhai - 0.25-1
- speed up building compat entries which reference thousands of other entries
(more of #692690)
- 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
to be, too
Fri May 13 14:00:00 2011 Nalin Dahyabhai - 0.24-1
- carry our own yp.x, so that we don\'t get bitten if libc doesn\'t include
yp client routines
- we need rpcgen at build-time now
Thu Mar 31 14:00:00 2011 Nalin Dahyabhai - 0.23-1
- speed up building compat entries with attributes with thousands of literal
values (#692690)
Wed Feb 9 13:00:00 2011 Fedora Release Engineering - 0.22-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
Thu Jan 6 13:00:00 2011 Nalin Dahyabhai - 0.22-1
- fix a number of scanner-uncovered defects
Thu Jan 6 13:00:00 2011 Nalin Dahyabhai - 0.21-2
- make sure we always pull in nss-devel and nspr-devel, and the right
ldap toolkit for the Fedora or RHEL version
Tue Nov 23 13:00:00 2010 Nalin Dahyabhai - 0.21-1
- update to 0.21
- schema-compat: don\'t look at standalone compat containers for a search,
since we\'ll already have looked at the group container
Tue Nov 23 13:00:00 2010 Nalin Dahyabhai - 0.20-1
- update to 0.20
- add a deref_f function
Mon Nov 22 13:00:00 2010 Nalin Dahyabhai - 0.19-1
- fix a brown-paper-bag crash
Mon Nov 22 13:00:00 2010 Nalin Dahyabhai - 0.18-1
- update to 0.18
- add a deref_rf function
- schema-compat: don\'t respond to search requests for which there\'s no backend
- schema-compat: add the ability to do standalone compat containers
Wed Nov 17 13:00:00 2010 Nalin Dahyabhai - 0.17-6
- revert that last change, it\'s unnecessary
Thu Nov 11 13:00:00 2010 Nalin Dahyabhai - 0.17-5
- build against either 389-ds-base or redhat-ds-base, whichever is probably
more appropriate here
Sun Jul 26 14:00:00 2009 Fedora Release Engineering - 0.17-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
Wed Jul 15 14:00:00 2009 Nalin Dahyabhai - 0.17-3
- change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
should avoid multilib conflicts from installing both arches of the new
package (#511504)
Tue Jul 14 14:00:00 2009 Nalin Dahyabhai - 0.17-2
- fixup changelog entries that resemble possible macro invocations
Thu May 14 14:00:00 2009 Nalin Dahyabhai - 0.17-1
- actually send portmap registrations to the right server
Thu May 14 14:00:00 2009 Nalin Dahyabhai - 0.16-1
- fix NIS server startup problem when no port is explicitly configured and
we\'re using portmap instead of rpcbind (#500903)
Fri May 8 14:00:00 2009 Nalin Dahyabhai - 0.15-1
- fix %deref and %referred to fail rather than return a valid-but-empty
result when they fail to evaluate (reported by Rob Crittenden)
Wed May 6 14:00:00 2009 Nalin Dahyabhai - 0.14-1
- correctly handle being loaded but disabled (#499404)
Thu Apr 30 14:00:00 2009 Nalin Dahyabhai - 0.13-1
- update to 0.13, reworking %link() to correct some bugs (#498432)
Thu Apr 30 14:00:00 2009 Nalin Dahyabhai - 0.12-1
- correct test suite failures that 0.11 started triggering
Tue Apr 28 14:00:00 2009 Nalin Dahyabhai - 0.11-1
- update to 0.11 (#497904)
Wed Mar 4 13:00:00 2009 Nalin Dahyabhai - 0.10-1
- update to 0.10
Wed Feb 25 13:00:00 2009 Fedora Release Engineering - 0.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Tue Dec 9 13:00:00 2008 Nalin Dahyabhai - 0.8.5-2
- make the example nsslapd-pluginpath values the same on 32- and 64-bit
systems, because we can depend on the directory server \"knowing\" which
directory to search for the plugins
Mon Dec 8 13:00:00 2008 Nalin Dahyabhai - 0.8.5-1
- update to 0.8.5 to suppress duplicate values for attributes in the schema
compatibility plugin
Thu Dec 4 13:00:00 2008 Nalin Dahyabhai - 0.8.4-1
- update to 0.8.4 to fix:
- problems updating references, particularly those for %referred() (#474478)
- inability to notice internal add/modify/modrdn/delete operations (really
this time) (#474426)
Wed Dec 3 13:00:00 2008 Nalin Dahyabhai - 0.8.3-1
- update to 0.8.3 to also notice and reflect changes caused by internal
add/modify/modrdn/delete operations
Wed Nov 19 13:00:00 2008 Nalin Dahyabhai - 0.8.2-1
- update to 0.8.2 to remove a redundant read lock in the schema-compat plugin
Fri Nov 7 13:00:00 2008 Nalin Dahyabhai - 0.9-1
- update to 0.9
Fri Oct 3 14:00:00 2008 Nalin Dahyabhai - 0.8.1-1
- update to 0.8.1 to fix a heap corruption (Rich Megginson)
Wed Aug 6 14:00:00 2008 Nalin Dahyabhai - 0.8-1
- update to 0.8
Wed Aug 6 14:00:00 2008 Nalin Dahyabhai - 0.7-1
- update to 0.7
Wed Jul 23 14:00:00 2008 Nalin Dahyabhai - 0.6-1
- rebuild (and make rpmlint happy)
Wed Jul 9 14:00:00 2008 Nalin Dahyabhai - 0.2-1
- initial package
|
|
|
