Changelog for nss_ldap-253-21.SEL5_4.i386.rpm :

* Tue Sep 15 2009 Anatoly Metetes - Rebuild for StartCom Linux 5.0.x
* Wed May 27 2009 Nalin Dahyabhai - 253-21- drop build requirement and explicit link with fipscheck (#502593)
* Wed May 20 2009 Nalin Dahyabhai - 253-20- re-enable patch for #457258, accidentally disabled for previous build
* Wed May 20 2009 Nalin Dahyabhai - 253-19- don\'t close a oneshot connection while we\'re in the middle of answering a specific query (#488857)
* Wed May 06 2009 Nalin Dahyabhai - 253-18- turn the default for paged results back off (#486321)- pull in fix for leaking descriptors from version 255 (#428837)- replace our proposed patch for being stricter about malformed entries with the version upstream went with, and start applying it (#457258)
* Fri Oct 17 2008 Nalin Dahyabhai - 253-17- add buildrequirement on fipscheck-devel
* Tue Oct 07 2008 Nalin Dahyabhai - 253-16- add nscd,gdm to the default list of nss_initgroups_ignoreusers (#466526)
* Fri Aug 29 2008 Nalin Dahyabhai - 253-15- build nss_ldap with --enable-paged-results (#444185)- add patch to make netgroup enumeration fail due to lack of entries in setnetgrent(), rather than in getnetgrent(), to match how other mechanisms work (Jose Plans, #445972)
* Tue Jul 15 2008 Nalin Dahyabhai - 253-14- build with -fno-strict-aliasing, mainly for pam_ldap (internal toolset, #455285)
* Tue Jul 08 2008 Nalin Dahyabhai - 253-13- block SIGPIPE in the atfork handler, so that it doesn\'t trip up when attempting to drop a connection to the server (#448014)
* Tue Apr 29 2008 Nalin Dahyabhai - 253-12- rebuild
* Fri Apr 25 2008 Nalin Dahyabhai - 253-11- backport changes to group parsing from version 254 to fix heap corruption when parsing nested groups (#444031)
* Fri Jan 18 2008 Nalin Dahyabhai - 253-10- remove unnecessary nss_ldap linkage to libnsl (part of #427370)
* Thu Jan 03 2008 Nalin Dahyabhai - 253-9- rebuild
* Tue Nov 13 2007 Nalin Dahyabhai - 253-8- incorporate Tomas Janousek\'s fix to prevent re-use of connections across fork() (#252337)
* Fri Nov 02 2007 Nalin Dahyabhai - 253-7- add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to static link with newer Kerberos (#427370)
* Fri Nov 02 2007 Nalin Dahyabhai - 253-6- suppress password-expired errors encountered during referral chases during modify requests (#335661)- interpret server-supplied policy controls when chasing referrals, so that we don\'t give up when following a referral for a password change after reset (#335661)- don\'t attempt to change the password using ldap_modify if the password change mode is \"exop_send_old\" (we already didn\'t for \"exop\") (#364501)- don\'t drop the supplied password if the directory server indicates that the password needs to be changed because it\'s just been reset: we may need it to chase a referral later (#335661)- correctly detect libresolv and build a URI using discovered settings, so that server discovery can work again (#254172)- honor the \"port\" setting again by correctly detecting when a URI doesn\'t already specify one (#326351)
* Fri Jul 06 2007 Nalin Dahyabhai - 253-5- drop unnecessary patch for #246541
* Wed Jul 04 2007 Nalin Dahyabhai - 253-4- add dbus,radvd,tomcat,radiusd,news,mailman to the default list of nss_initgroups_ignoreusers (#243753)
* Wed Jul 04 2007 Nalin Dahyabhai - resize the supplemental GID array when it gets too large and an array size limit isn\'t set (Gavin Romig-Koch, #246541)
* Mon Nov 20 2006 Nalin Dahyabhai - 253-3- rebuild
* Mon Nov 20 2006 Nalin Dahyabhai - 253-2- update to pam_ldap 183, resolving CVE-2006-5170 (#216421)
* Sat Sep 23 2006 Nalin Dahyabhai - 253-1- update to 253 - closes a crasher when glibc\'s initgroups backend passes in a zero-length, NULL buffer to start - includes lookup_nssldap updates for autofs
* Wed Sep 13 2006 Nalin Dahyabhai - 251-2- configure with --enable-configurable-krb5-ccname-gssapi instead of --enable-configurable-krb5-ccname, the latter of which doesn\'t actually do anything (Howard Wilkinson)
* Fri Aug 04 2006 Nalin Dahyabhai - 251-1- update to 251
* Wed Jul 26 2006 Nalin Dahyabhai - 250-6- note the location of the man pages in /etc/ldap.conf (part of #146815)
* Thu Jul 13 2006 Jesse Keating - 250-5.1- rebuild
* Wed May 17 2006 Nalin Dahyabhai - 250-5- adjust nss_ldap\'s makefile rule to more correctly deduce the right soversion for nsswitch modules (#191927)
* Tue May 09 2006 Nalin Dahyabhai - 250-4- update the list of local users to include named,avahi,haldaemon (from #186527)
* Wed May 03 2006 Nalin Dahyabhai - 250-3- update to pam_ldap 182
* Tue May 02 2006 Nalin Dahyabhai - 250-2- update to pam_ldap 181- fix syntax error in pam_ldap.c (upstream #269)
* Fri Apr 28 2006 Nalin Dahyabhai - 250-1- update to 250- configure default time limits for binding/searching/idling
* Fri Feb 24 2006 Nalin Dahyabhai - 249-1- update to 249, which incorporates the fix for #182464
* Thu Feb 23 2006 Nalin Dahyabhai - 248-3- fix deadlock in initgroups() (#182464, upstream #255)
* Mon Feb 13 2006 Jesse Keating - 248-2.2- rebump for build order issues during double-long bump
* Fri Feb 10 2006 Jesse Keating - 248-2.1- bump again for double-long bug on ppc(64)
* Thu Feb 09 2006 Nalin Dahyabhai - 248-2- set \"nss_initgroups_ignoreusers root,ldap\" in the default configuration file, so that nss_ldap will assume that there are no supplemental groups for this user to be found in the directory server (#180657)
* Tue Feb 07 2006 Jesse Keating - 248-1.1- rebuilt for new gcc4.1 snapshot and glibc changes
* Wed Jan 25 2006 Nalin Dahyabhai 248-1- update to nss_ldap 248
* Tue Jan 24 2006 Nalin Dahyabhai 246-1- update to nss_ldap 246
* Wed Jan 11 2006 Nalin Dahyabhai 245-1- update to nss_ldap 245- add patch from upcoming 246 release to change the placeholder used when userPassword is unreadable from \"x\" to \"
*\" (upstream #240)
* Fri Dec 09 2005 Jesse Keating - rebuilt
* Mon Nov 21 2005 Nalin Dahyabhai 244-2- rebuild with new libldap and friends (#173794)
* Fri Oct 28 2005 Nalin Dahyabhai 244-1- update to nss_ldap 244
* Wed Oct 05 2005 Nalin Dahyabhai 243-1- update to nss_ldap 243
* Thu Sep 29 2005 Nalin Dahyabhai 242-2- own the symlink for the module\'s soname (#169288)
* Wed Sep 28 2005 Nalin Dahyabhai 242-1- update to nss_ldap 242
* Tue Sep 13 2005 Nalin Dahyabhai 241-1- update to nss_ldap 241
* Thu Sep 08 2005 Nalin Dahyabhai 240-2- install the pam_ldap man page (part of #167764)
* Thu Sep 01 2005 Nalin Dahyabhai 240-1- update to nss_ldap 240
* Thu Aug 18 2005 Nalin Dahyabhai 239-1- update to nss_ldap 239- provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc does for the modules it provides
* Thu Aug 18 2005 Nalin Dahyabhai 234-6- rebuild
* Thu Aug 18 2005 Nalin Dahyabhai 234-5- update to pam_ldap 180 to get fix for vulnerability from parsing password policy controls which don\'t contain error numbers (#166164, CAN-2005-2497)
* Sat May 21 2005 Nalin Dahyabhai 234-4- override glibc version detection so that mismatches between the versions of 32- and 64-bit glibc don\'t result in our %install installing the module with a different name than the \'make install\' target uses
* Sat May 21 2005 Nalin Dahyabhai 234-3- fix type mismatch bug in patch for using non-blocking start_tls in preference to the blocking version when it\'s available (#156582)
* Wed Mar 16 2005 Nalin Dahyabhai 234-2- rebuild
* Mon Feb 28 2005 Nalin Dahyabhai 234-1- update to nss_ldap 234- configure with --enable-configurable-krb5-ccname
* Wed Feb 02 2005 Nalin Dahyabhai 232-2- prefer using libraries in /usr/lib/nss_ldap-openldap if we find any- use ldap_start_tls in preference to ldap_start_tls_s, if found, so that we can time out if the server has gone catatonic
* Mon Jan 24 2005 Nalin Dahyabhai 232-1- update to version 232
* Fri Dec 31 2004 Nalin Dahyabhai 227-1- update to version 227- force nss_ldap to mimic pam_ldap\'s behavior when the tls_checkpeer setting is unconfigured in ldap.conf
* Fri Dec 31 2004 Nalin Dahyabhai 226-3- fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows libldap\'s default, which is dependent on the version of OpenLDAP which which this package is linked (part of #143622)
* Fri Oct 29 2004 Nalin Dahyabhai 226-2- rebuild
* Fri Oct 29 2004 Nalin Dahyabhai 226-1- update to nss_ldap 226, pam_ldap 176- rework pam_ldap dns autoconfig patch- require automake instead of automake15, because autoreconf uses the current version (#129877)
* Wed Sep 01 2004 Nalin Dahyabhai 220-3- rebuild
* Wed Jun 16 2004 Elliot Lee - rebuilt
* Tue Jun 08 2004 Nalin Dahyabhai 220-1- update to 220, pam_ldap 169
* Fri Apr 16 2004 Nalin Dahyabhai - fail at build-time if the modules produced can\'t be loaded- fix missing module in pam_ldap build
* Thu Mar 25 2004 Nalin Dahyabhai 217-1- include patch to set errno to ENOENT when returning NSS_STATUS_NOTFOUND to glibc
* Tue Mar 23 2004 Nalin Dahyabhai - update to 217
* Wed Mar 10 2004 Nalin Dahyabhai 212-1- update to 212, pam_ldap 167- link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi mech, at least for now, and we pick up its unresolved symbols at link-time- fix out-of-bounds error at initialization-time (part of #101269)- include pam_ldap\'s authorization schema files for slapd as a doc file
* Tue Mar 02 2004 Elliot Lee - rebuilt
* Fri Feb 13 2004 Elliot Lee - rebuilt
* Tue Nov 25 2003 Nalin Dahyabhai 207-6- rebuild
* Thu Nov 20 2003 Nalin Dahyabhai 207-5- fix objectclass and attribute mapping, which failed due to uninitialized fields in mapping index structures, fixed upstream in 210 (#110547)
* Mon Nov 10 2003 Nalin Dahyabhai 207-4- link with the proper libsasl (1 or 2) for the version of OpenLDAP we are linking with (#106801)
* Fri Aug 15 2003 Nalin Dahyabhai 207-3- link dynamically with libcom_err if it isn\'t in /usr/kerberos/lib (which we assume means that it\'s in /lib)
* Thu Aug 14 2003 Nalin Dahyabhai 207-2- relax openldap-devel buildreq to 2.0.27
* Fri Jun 06 2003 Nalin Dahyabhai 207-1- update to build with newer OpenLDAP- add README.TLS to remind people that in order for TLS support to be usable, the server\'s certificate has to pass validation checks made by the client
* Sun Mar 09 2003 Florian La Roche - move pam into /lib64/security directory
* Wed Jan 22 2003 Tim Powers - rebuilt
* Wed Jan 15 2003 Nalin Dahyabhai 202-4- rework static link order to account for libssl requiring libkrb5- force assembly locking on %ix86 systems- link with libz, which libssl also requires
* Thu Dec 12 2002 Elliot Lee 202-3- Fix wildcard for symlink in %install
* Thu Nov 14 2002 Nalin Dahyabhai 202-2- apply DB patches from sleepycat.com- correctly point nss_ldap at the bundled DB library- create /%{_lib} instead of /lib to install into
* Thu Oct 03 2002 Nalin Dahyabhai 202-1- update to nss_ldap 202, pam_ldap 153- update DB from 4.0.14 to 4.1.24.NC- try to address multilib path changes
* Wed Aug 28 2002 Nalin Dahyabhai 198-3- rebuild
* Sat Aug 10 2002 Nalin Dahyabhai 198-2- handle larger-than-expected DNS responses correctly
* Thu Aug 08 2002 Nalin Dahyabhai 198-1- update to nss_ldap 198, closing a possible buffer overflow in DNS autoconfig
* Sat Jul 20 2002 Nalin Dahyabhai 197-1- update to nss_ldap 197, pam_ldap 150
* Sat Jun 22 2002 Tim Powers - automated rebuild
* Tue Jun 11 2002 Nalin Dahyabhai 194-1- update to nss_ldap 194, pam_ldap 148
* Mon May 27 2002 Tim Powers - automated rebuild
* Tue May 21 2002 Nalin Dahyabhai 189-3- rebuild in new environment
* Fri May 17 2002 Nalin Dahyabhai 189-2- build for RHL 7.2/7.3
* Fri May 17 2002 Nalin Dahyabhai 189-1.7- build for RHL 7/7.1
* Fri May 17 2002 Nalin Dahyabhai 189-1.6- fix up logic generated by authconfig from RHL 7.2 in %post- build for RHL 6.x
* Thu May 16 2002 Nalin Dahyabhai - the triggerun should be a trigger postun
* Wed May 08 2002 Nalin Dahyabhai 189-1- rebuild for RHL 7.2/7.3
* Wed May 08 2002 Nalin Dahyabhai 189-0.7- rebuild for RHL 7/7.1
* Wed May 08 2002 Nalin Dahyabhai 189-0.6- update to nss_ldap 189, pam_ldap 145
* Wed May 08 2002 Nalin Dahyabhai 188-1- rebuild for RHL 7.2/7.3
* Wed May 08 2002 Nalin Dahyabhai 188-0.7- rebuild for RHL 7/7.1
* Wed May 08 2002 Nalin Dahyabhai 188-0.6- rebuild for RHL 6.2- change dependency on pam-devel to /usr/include/security/pam_modules.h- drop build deps on cyrus-sasl-devel and openldap >= 2.x- modify pam_ldap versions file so that binutils from RHL 6.2 can parse it- update to nss_ldap 188- update to pam_ldap 144
* Sat Apr 06 2002 Nalin Dahyabhai 185-1- update to nss_ldap 185- update to pam_ldap 140
* Thu Feb 28 2002 Nalin Dahyabhai 184-1- update to pam_ldap 138- enable rfc2307bis schema support- version the pam_ldap module- add the proper soname to the nss_ldap module and remove the symlink- add a trigger to run ldconfig again when an upgrade removes the symlink, which used to be in this package (doh!)- fix the symlink from %{_libdir} to the module (for linking directly to it)
* Thu Feb 14 2002 Nalin Dahyabhai - update to nss_ldap 184, pam_ldap 137
* Wed Jan 23 2002 Nalin Dahyabhai 181-1- update to nss_ldap 181, pam_ldap 136
* Thu Dec 20 2001 Nalin Dahyabhai 175-1- update to nss_ldap 175, pam_ldap 135
* Tue Nov 27 2001 Nalin Dahyabhai 174-1- update to nss_ldap 174
* Fri Nov 16 2001 Nalin Dahyabhai 173-3- update to pam_ldap 134
* Wed Oct 31 2001 Nalin Dahyabhai 173-2- build nss_ldap with --enable-schema-mapping
* Mon Oct 29 2001 Nalin Dahyabhai 173-1- update to nss_ldap 173, which includes doc updates- update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit
* Fri Sep 07 2001 Nalin Dahyabhai - update to pam_ldap 125, making checking of host attributes configurable
* Sat Sep 01 2001 Nalin Dahyabhai - link statically with libldap again, because libldap is linked with other shared libraries now (keeping us from having files in /usr open when we go to shut the system down)
* Fri Aug 31 2001 Nalin Dahyabhai - update to nss_ldap 172, fixing schema mapping code- update to pam_ldap 124, incorporating TLS default option and doc fixes
* Tue Aug 07 2001 Nalin Dahyabhai - update to nss_ldap 167, adding support for rebinds
* Wed Jul 25 2001 Nalin Dahyabhai - update to nss_ldap 164, fixing the timeout problem correctly- update to pam_ldap 122, fixing escaping of user name in filters
* Fri Jul 13 2001 Nalin Dahyabhai - update to nss_ldap 163, fixing the timeout problem- update to pam_ldap 120- add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)- add db3-devel as a buildprereq (#48999)- add pam-devel as a buildprereq (#48999)
* Wed Jul 11 2001 Nalin Dahyabhai - update to nss_ldap 161- attempt to fix hangs when no timeout is specified, or the timeout is 0
* Tue Jul 10 2001 Nalin Dahyabhai - update to nss_ldap 160, pam_ldap 119
* Fri Jun 29 2001 Nalin Dahyabhai - patch cleanups
* Wed Jun 27 2001 Nalin Dahyabhai - update to nss_ldap 159, pam_ldap 118
* Wed Jun 20 2001 Nalin Dahyabhai - update to nss_ldap 153, pam_ldap 117
* Wed May 30 2001 Nalin Dahyabhai - update to nss_ldap 152, pam_ldap 111
* Tue May 22 2001 Nalin Dahyabhai - update to pam_ldap 108
* Thu Apr 26 2001 Nalin Dahyabhai - update to pam_ldap 107
* Fri Apr 20 2001 Nalin Dahyabhai - update to nss_ldap 150 (incorporates the fail patch)- update to pam_ldap 106
* Wed Mar 07 2001 Nalin Dahyabhai - make nss_ldap fail when attempting to startup TLS fails, because that\'s what we do when LDAPS doesn\'t work (and what pam_ldap does already)- add DNS autoconfiguration to pam_ldap
* Tue Mar 06 2001 Nalin Dahyabhai - update to nss_ldap 149, minor fixes for compile glitches- update to pam_ldap 105, minor fixes (as above) and handles shadow expiration
* Fri Mar 02 2001 Nalin Dahyabhai - rebuild in new environment
* Wed Feb 28 2001 Nalin Dahyabhai - update to nss_ldap 146 to get a faster initgroups() back-end
* Mon Feb 12 2001 Nalin Dahyabhai - update to nss_ldap 143 to get the official fix for the heap corruption
* Fri Feb 09 2001 Nalin Dahyabhai - fix heap corruption when falling back to DNS SRV records for configuration
* Mon Feb 05 2001 Nalin Dahyabhai - update to nss_ldap 142, fixes a memory leak
* Mon Jan 29 2001 Nalin Dahyabhai - update to nss_ldap 140, fixes a configure bug and an alignment problem
* Fri Jan 19 2001 Nalin Dahyabhai - update to nss_ldap 139
* Mon Jan 15 2001 Nalin Dahyabhai - update to nss_ldap 138, which folds in our patch for initgroups- change the default search base in ldap.conf to dc=example,dc=com
* Wed Jan 10 2001 Nalin Dahyabhai - update to nss_ldap 137 and pam_ldap 99- try to not cause a segfault in _nss_ldap_initgroups
* Wed Jan 03 2001 Nalin Dahyabhai - update to nss_ldap 124 and pam_ldap 82
* Thu Dec 28 2000 Nalin Dahyabhai - add a requires: for nscd
* Thu Dec 14 2000 Nalin Dahyabhai - version the NSS module so that it works properly with programs which have been linked statically to a different version of an LDAP library, like Netscape Communicator
* Wed Dec 06 2000 Nalin Dahyabhai - BuildPrereq gdbm-devel- pass RPM_OPT_FLAGS as CFLAGS to %configure- if protocol version is 2, explicitly set protocol version to 3 before trying to start TLS- add STARTTLS support to nss_ldap- work around a build-time problem on ia64
* Tue Dec 05 2000 Nalin Dahyabhai - BuildPrereq cyrus-sasl-devel instead of cyrus-sasl
* Mon Nov 20 2000 Nalin Dahyabhai - update to nss_ldap 123 and pam_ldap 82
* Sat Oct 28 2000 Nalin Dahyabhai - update to nss_ldap 122- link statically with libsasl, require the first devel package that supplied it
* Fri Oct 20 2000 Nalin Dahyabhai - update to nss_ldap 120 and pam_ldap 77
* Thu Oct 05 2000 Nalin Dahyabhai - update to nss_ldap 116 and pam_ldap 74
* Fri Sep 08 2000 Nalin Dahyabhai - rebuild in new environment
* Fri Jul 28 2000 Nalin Dahyabhai - update to pam_ldap 67 to fix a bug in template user code- convert symlink in /usr/lib to a relative one (#16132)
* Fri Jul 28 2000 Nalin Dahyabhai - update to nss_ldap 113 and pam_ldap 66
* Thu Jul 13 2000 Prospector - automatic rebuild
* Wed Jun 28 2000 Matt Wilson - changed all the -,- in attr statements to root,root
* Wed Jun 28 2000 Nalin Dahyabhai - update pam_ldap to 63
* Thu Jun 01 2000 Nalin Dahyabhai - update pam_ldap to 56
* Wed May 31 2000 Nalin Dahyabhai - update pam_ldap to 55- back out no-threads patch for pam_ldap, not needed any more
* Fri May 26 2000 Nalin Dahyabhai - update to 110- revert prototype patch, looks like a problem with the new glibc after all
* Sat May 20 2000 Nalin Dahyabhai - get libpthread out of the NSS module- fix prototype problems in getpwXXX()
* Tue May 16 2000 Nalin Dahyabhai - update to nss_ldap 109
* Sun Apr 30 2000 Nalin Dahyabhai - update pam_ldap 51
* Wed Apr 26 2000 Nalin Dahyabhai - update to nss_ldap 108 and pam_ldap 49
* Fri Apr 21 2000 Nalin Dahyabhai - update to pam_ldap 48
* Fri Mar 31 2000 Nalin Dahyabhai - update to nss_ldap 107- note: check http://www.advogato.org/person/lukeh/ for Luke\'s changelog
* Tue Mar 21 2000 Nalin Dahyabhai - update to nss_ldap 106
* Wed Feb 09 2000 Nalin Dahyabhai - update to nss_ldap 105
* Mon Feb 07 2000 Nalin Dahyabhai - update to nss_ldap 104 and pam_ldap 46- disable link against libpthread in pam_ldap
* Tue Feb 01 2000 Nalin Dahyabhai - remove migration tools, because this package requires openldap now, which also includes them
* Fri Jan 28 2000 Nalin Dahyabhai - update to nss_ldap 103
* Mon Jan 24 2000 Preston Brown - fix typo in linuxconf-pair pam cfg file (#7800)
* Tue Jan 11 2000 Preston Brown - v99, made it require pam_ldap- added perl migration tools- integrate pam_ldap stuff
* Sat Oct 23 1999 Bill Nottingham - statically link ldap libraries (they\'re in /usr/lib)
* Wed Aug 11 1999 Cristian Gafton - use the ldap.conf file as an external source- don\'t forcibly build the support for version 3- imported the default spec file from the tarball and fixed it up for RH 6.1