Changelog for nss_ldap-debuginfo-253-5.el4_7.1.i386.rpm :

* Tue Jan 27 2009 Nalin Dahyabhai 253-5.%{_dist}.1- backport changes to group parsing from version 254 to fix heap corruption when parsing nested groups (#481745)
* Fri Jun 06 2008 Nalin Dahyabhai 253-5- build with strict-aliasing disabled, because pam_ldap breaks strict-aliasing rules without it (tools)
* Thu May 29 2008 Nalin Dahyabhai 253-4- block SIGPIPE in the atfork handler, so that it doesn\'t trip up when attempting to drop a connection to the server (#448833)
* Wed Mar 26 2008 Nalin Dahyabhai 253-3- add patch to make netgroup enumeration fail due to lack of entries in setnetgrent(), rather than in getnetgrent(), to match how other mechanisms work (Jose Plans, #253997)
* Tue Mar 25 2008 Nalin Dahyabhai 253-2- add fix for not double-freeing the result list when we try to initialize an internal enumeration context while we have one active (#233382)
* Tue Mar 25 2008 Nalin Dahyabhai 253-1- rebase to nss_ldap 253 (#401731) - fixes leftover lock problem in nss_initgroups_ignoreusers handling (#429101) - fixes re-use of connections across fork() (#155187)
* Sat Oct 13 2007 Nalin Dahyabhai 226-22- suppress password-expired errors encountered during referral chases during modify requests (#300251)
* Fri Oct 05 2007 Nalin Dahyabhai 226-21- rebuild
* Fri Oct 05 2007 Nalin Dahyabhai 226-20.0.0.3- interpret server-supplied policy controls when chasing referrals, so that we don\'t give up when following a referral for a password change after reset (#300251)
* Thu Oct 04 2007 Nalin Dahyabhai - don\'t attempt to change the password using ldap_modify if the password change mode is \"exop_send_old\" (we already didn\'t for \"exop\")
* Wed Oct 03 2007 Nalin Dahyabhai 226-20.0.0.1- don\'t drop the supplied password if the directory server indicates that the password needs to be changed because it\'s just been reset: we may need it to chase a referral later (#300251)
* Thu Aug 02 2007 Nalin Dahyabhai 226-20- add backported fix to not ignore connections to the server if the socket descriptor is somehow 0 and LDAP_OPT_DESC isn\'t defined (part of #230572)
* Tue Jul 31 2007 Nalin Dahyabhai - add backported fix for upstream #219 - also apply filter from a service search descriptor for enumerations (part of #230572)- log the LDAP error and server name in case of bind failures (part of #230573)- log the server name on successful reconnect (part of #230573)- add backported implementation of the \"nss_initgroups_ignoreusers\" option (part of #230573)
* Mon Jul 30 2007 Nalin Dahyabhai - add backported patch to delay the bind from initialization-time to when the first query is made (#230578)- backport patch to report a mapped error based on the LDAP result of the bind attempt rather than just treating an LDAP result as an NSS result, and to only try a reconnect if we had probems connecting (#230577)
* Sat Jul 28 2007 Nalin Dahyabhai - add backported \"initgroups backlink\" support (#230576)
* Fri Jul 27 2007 Nalin Dahyabhai - backport fix to not barf if we\'re told to fill in a GID array which initially has no elements in it (#230567)
* Wed Mar 21 2007 Nalin Dahyabhai 226-19- resize the supplemental GID array when it gets too large and an array size limit isn\'t set (Gavin Romig-Koch, #232713)
* Thu Jan 11 2007 Nalin Dahyabhai 226-18- reenable fixes for #190256 and #206438
* Thu Oct 12 2006 Nalin Dahyabhai 226-17- temporarily disable fixes for #190256 and #206438 for security update
* Wed Oct 04 2006 Nalin Dahyabhai 226-16- include backported fix for off-by-one crasher in various result parsing functions (Carsten Clashom, #206438)
* Sat Sep 23 2006 Nalin Dahyabhai 226-15- don\'t suppress policy errors encountered during authentication if the specific policy error isn\'t one which the PAM spec indicates should be reported during account management (CVE-2006-5170, #207286, upstream #291)
* Thu May 18 2006 Nalin Dahyabhai 226-14- return PAM_NEW_AUTHTOK_REQD instead of PAM_PERM_DENIED in case of a POLICY_ERROR_CHANGE_AFTER_RESET policy response from the server (#190256)
* Sat Apr 29 2006 Nalin Dahyabhai 226-13- rebuild
* Wed Apr 26 2006 Nalin Dahyabhai 226-12- don\'t drop the supplied password if the directory server indicates that the password is expired: we may need it to chase a referral later (#175549, upstream #232, Vince Worthington)- temporarily disable the fix for upstream #240- require a sufficiently-new openldap-devel to ensure that we incorporate the fix for #186095 (#179730), which also fixes #186447 (#186465)- configure default time limits for binding/searching/idling (#181388)
* Wed Jan 11 2006 Nalin Dahyabhai 226-11- backport fix from nss_ldap 246 to change the placeholder used when userPassword is unreadable from \"x\" to \"
*\" (upstream #240)
* Wed Sep 28 2005 Nalin Dahyabhai 226-10- backport fix from nss_ldap 242 to issue a start_tls exop when chasing referrals received over a connection on which we used start_tls (#162482, CAN-2005-2069, upstream #211)- backport fix from pam_ldap 180 to issue a start_tls exop when chasing referrals received over a connection on which we used start_tls (#162482, CAN-2005-2069, upstream #210)
* Sat Sep 17 2005 Nalin Dahyabhai 226-9- rebuild
* Fri Aug 26 2005 Nalin Dahyabhai 226-8- add fix for stripping off the last ldap.secret character, even if it\'s not a newline (#166647, upstream #138,#199)
* Thu Aug 18 2005 Nalin Dahyabhai 226-7- backport fix from pam_ldap 180 to fix vulnerability when parsing password policy controls which don\'t contain error numbers (#166163, CAN-2005-2497)
* Thu Mar 03 2005 Nalin Dahyabhai 226-6- correctly observe the libc version number at install-time
* Thu Mar 03 2005 Nalin Dahyabhai 226-5- rebuild
* Fri Dec 31 2004 Nalin Dahyabhai 226-4- rebuild
* Fri Dec 31 2004 Nalin Dahyabhai 226-3- fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows libldap\'s default, which is dependent on the version of OpenLDAP which which this package is linked (part of #143622)- force nss_ldap to mimic pam_ldap\'s behavior when the tls_checkpeer setting is unconfigured in ldap.conf
* Fri Oct 29 2004 Nalin Dahyabhai 226-2- rebuild
* Fri Oct 29 2004 Nalin Dahyabhai 226-1- update to nss_ldap 226, pam_ldap 176- rework pam_ldap dns autoconfig patch- require automake instead of automake15, because autoreconf uses the current version (#129877)
* Wed Sep 01 2004 Nalin Dahyabhai 220-3- rebuild
* Wed Jun 16 2004 Elliot Lee - rebuilt
* Tue Jun 08 2004 Nalin Dahyabhai 220-1- update to 220, pam_ldap 169
* Fri Apr 16 2004 Nalin Dahyabhai - fail at build-time if the modules produced can\'t be loaded- fix missing module in pam_ldap build
* Thu Mar 25 2004 Nalin Dahyabhai 217-1- include patch to set errno to ENOENT when returning NSS_STATUS_NOTFOUND to glibc
* Tue Mar 23 2004 Nalin Dahyabhai - update to 217
* Wed Mar 10 2004 Nalin Dahyabhai 212-1- update to 212, pam_ldap 167- link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi mech, at least for now, and we pick up its unresolved symbols at link-time- fix out-of-bounds error at initialization-time (part of #101269)- include pam_ldap\'s authorization schema files for slapd as a doc file
* Tue Mar 02 2004 Elliot Lee - rebuilt
* Fri Feb 13 2004 Elliot Lee - rebuilt
* Tue Nov 25 2003 Nalin Dahyabhai 207-6- rebuild
* Thu Nov 20 2003 Nalin Dahyabhai 207-5- fix objectclass and attribute mapping, which failed due to uninitialized fields in mapping index structures, fixed upstream in 210 (#110547)
* Mon Nov 10 2003 Nalin Dahyabhai 207-4- link with the proper libsasl (1 or 2) for the version of OpenLDAP we are linking with (#106801)
* Fri Aug 15 2003 Nalin Dahyabhai 207-3- link dynamically with libcom_err if it isn\'t in /usr/kerberos/lib (which we assume means that it\'s in /lib)
* Thu Aug 14 2003 Nalin Dahyabhai 207-2- relax openldap-devel buildreq to 2.0.27
* Fri Jun 06 2003 Nalin Dahyabhai 207-1- update to build with newer OpenLDAP- add README.TLS to remind people that in order for TLS support to be usable, the server\'s certificate has to pass validation checks made by the client
* Sun Mar 09 2003 Florian La Roche - move pam into /lib64/security directory
* Wed Jan 22 2003 Tim Powers - rebuilt
* Wed Jan 15 2003 Nalin Dahyabhai 202-4- rework static link order to account for libssl requiring libkrb5- force assembly locking on %ix86 systems- link with libz, which libssl also requires
* Thu Dec 12 2002 Elliot Lee 202-3- Fix wildcard for symlink in %install
* Thu Nov 14 2002 Nalin Dahyabhai 202-2- apply DB patches from sleepycat.com- correctly point nss_ldap at the bundled DB library- create /%{_lib} instead of /lib to install into
* Thu Oct 03 2002 Nalin Dahyabhai 202-1- update to nss_ldap 202, pam_ldap 153- update DB from 4.0.14 to 4.1.24.NC- try to address multilib path changes
* Wed Aug 28 2002 Nalin Dahyabhai 198-3- rebuild
* Sat Aug 10 2002 Nalin Dahyabhai 198-2- handle larger-than-expected DNS responses correctly
* Thu Aug 08 2002 Nalin Dahyabhai 198-1- update to nss_ldap 198, closing a possible buffer overflow in DNS autoconfig
* Sat Jul 20 2002 Nalin Dahyabhai 197-1- update to nss_ldap 197, pam_ldap 150
* Sat Jun 22 2002 Tim Powers - automated rebuild
* Tue Jun 11 2002 Nalin Dahyabhai 194-1- update to nss_ldap 194, pam_ldap 148
* Mon May 27 2002 Tim Powers - automated rebuild
* Tue May 21 2002 Nalin Dahyabhai 189-3- rebuild in new environment
* Fri May 17 2002 Nalin Dahyabhai 189-2- build for RHL 7.2/7.3
* Fri May 17 2002 Nalin Dahyabhai 189-1.7- build for RHL 7/7.1
* Fri May 17 2002 Nalin Dahyabhai 189-1.6- fix up logic generated by authconfig from RHL 7.2 in %post- build for RHL 6.x
* Thu May 16 2002 Nalin Dahyabhai - the triggerun should be a trigger postun
* Wed May 08 2002 Nalin Dahyabhai 189-1- rebuild for RHL 7.2/7.3
* Wed May 08 2002 Nalin Dahyabhai 189-0.7- rebuild for RHL 7/7.1
* Wed May 08 2002 Nalin Dahyabhai 189-0.6- update to nss_ldap 189, pam_ldap 145
* Wed May 08 2002 Nalin Dahyabhai 188-1- rebuild for RHL 7.2/7.3
* Wed May 08 2002 Nalin Dahyabhai 188-0.7- rebuild for RHL 7/7.1
* Wed May 08 2002 Nalin Dahyabhai 188-0.6- rebuild for RHL 6.2- change dependency on pam-devel to /usr/include/security/pam_modules.h- drop build deps on cyrus-sasl-devel and openldap >= 2.x- modify pam_ldap versions file so that binutils from RHL 6.2 can parse it- update to nss_ldap 188- update to pam_ldap 144
* Sat Apr 06 2002 Nalin Dahyabhai 185-1- update to nss_ldap 185- update to pam_ldap 140
* Thu Feb 28 2002 Nalin Dahyabhai 184-1- update to pam_ldap 138- enable rfc2307bis schema support- version the pam_ldap module- add the proper soname to the nss_ldap module and remove the symlink- add a trigger to run ldconfig again when an upgrade removes the symlink, which used to be in this package (doh!)- fix the symlink from %{_libdir} to the module (for linking directly to it)
* Thu Feb 14 2002 Nalin Dahyabhai - update to nss_ldap 184, pam_ldap 137
* Wed Jan 23 2002 Nalin Dahyabhai 181-1- update to nss_ldap 181, pam_ldap 136
* Thu Dec 20 2001 Nalin Dahyabhai 175-1- update to nss_ldap 175, pam_ldap 135
* Tue Nov 27 2001 Nalin Dahyabhai 174-1- update to nss_ldap 174
* Fri Nov 16 2001 Nalin Dahyabhai 173-3- update to pam_ldap 134
* Wed Oct 31 2001 Nalin Dahyabhai 173-2- build nss_ldap with --enable-schema-mapping
* Mon Oct 29 2001 Nalin Dahyabhai 173-1- update to nss_ldap 173, which includes doc updates- update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit
* Fri Sep 07 2001 Nalin Dahyabhai - update to pam_ldap 125, making checking of host attributes configurable
* Sat Sep 01 2001 Nalin Dahyabhai - link statically with libldap again, because libldap is linked with other shared libraries now (keeping us from having files in /usr open when we go to shut the system down)
* Fri Aug 31 2001 Nalin Dahyabhai - update to nss_ldap 172, fixing schema mapping code- update to pam_ldap 124, incorporating TLS default option and doc fixes
* Tue Aug 07 2001 Nalin Dahyabhai - update to nss_ldap 167, adding support for rebinds
* Wed Jul 25 2001 Nalin Dahyabhai - update to nss_ldap 164, fixing the timeout problem correctly- update to pam_ldap 122, fixing escaping of user name in filters
* Fri Jul 13 2001 Nalin Dahyabhai - update to nss_ldap 163, fixing the timeout problem- update to pam_ldap 120- add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)- add db3-devel as a buildprereq (#48999)- add pam-devel as a buildprereq (#48999)
* Wed Jul 11 2001 Nalin Dahyabhai - update to nss_ldap 161- attempt to fix hangs when no timeout is specified, or the timeout is 0
* Tue Jul 10 2001 Nalin Dahyabhai - update to nss_ldap 160, pam_ldap 119
* Fri Jun 29 2001 Nalin Dahyabhai - patch cleanups
* Wed Jun 27 2001 Nalin Dahyabhai - update to nss_ldap 159, pam_ldap 118
* Wed Jun 20 2001 Nalin Dahyabhai - update to nss_ldap 153, pam_ldap 117
* Wed May 30 2001 Nalin Dahyabhai - update to nss_ldap 152, pam_ldap 111
* Tue May 22 2001 Nalin Dahyabhai - update to pam_ldap 108
* Thu Apr 26 2001 Nalin Dahyabhai - update to pam_ldap 107
* Fri Apr 20 2001 Nalin Dahyabhai - update to nss_ldap 150 (incorporates the fail patch)- update to pam_ldap 106
* Wed Mar 07 2001 Nalin Dahyabhai - make nss_ldap fail when attempting to startup TLS fails, because that\'s what we do when LDAPS doesn\'t work (and what pam_ldap does already)- add DNS autoconfiguration to pam_ldap
* Tue Mar 06 2001 Nalin Dahyabhai - update to nss_ldap 149, minor fixes for compile glitches- update to pam_ldap 105, minor fixes (as above) and handles shadow expiration
* Fri Mar 02 2001 Nalin Dahyabhai - rebuild in new environment
* Wed Feb 28 2001 Nalin Dahyabhai - update to nss_ldap 146 to get a faster initgroups() back-end
* Mon Feb 12 2001 Nalin Dahyabhai - update to nss_ldap 143 to get the official fix for the heap corruption
* Fri Feb 09 2001 Nalin Dahyabhai - fix heap corruption when falling back to DNS SRV records for configuration
* Mon Feb 05 2001 Nalin Dahyabhai - update to nss_ldap 142, fixes a memory leak
* Mon Jan 29 2001 Nalin Dahyabhai - update to nss_ldap 140, fixes a configure bug and an alignment problem
* Fri Jan 19 2001 Nalin Dahyabhai - update to nss_ldap 139
* Mon Jan 15 2001 Nalin Dahyabhai - update to nss_ldap 138, which folds in our patch for initgroups- change the default search base in ldap.conf to dc=example,dc=com
* Wed Jan 10 2001 Nalin Dahyabhai - update to nss_ldap 137 and pam_ldap 99- try to not cause a segfault in _nss_ldap_initgroups
* Wed Jan 03 2001 Nalin Dahyabhai - update to nss_ldap 124 and pam_ldap 82
* Thu Dec 28 2000 Nalin Dahyabhai - add a requires: for nscd
* Thu Dec 14 2000 Nalin Dahyabhai - version the NSS module so that it works properly with programs which have been linked statically to a different version of an LDAP library, like Netscape Communicator
* Wed Dec 06 2000 Nalin Dahyabhai - BuildPrereq gdbm-devel- pass RPM_OPT_FLAGS as CFLAGS to %configure- if protocol version is 2, explicitly set protocol version to 3 before trying to start TLS- add STARTTLS support to nss_ldap- work around a build-time problem on ia64
* Tue Dec 05 2000 Nalin Dahyabhai - BuildPrereq cyrus-sasl-devel instead of cyrus-sasl
* Mon Nov 20 2000 Nalin Dahyabhai - update to nss_ldap 123 and pam_ldap 82
* Sat Oct 28 2000 Nalin Dahyabhai - update to nss_ldap 122- link statically with libsasl, require the first devel package that supplied it
* Fri Oct 20 2000 Nalin Dahyabhai - update to nss_ldap 120 and pam_ldap 77
* Thu Oct 05 2000 Nalin Dahyabhai - update to nss_ldap 116 and pam_ldap 74
* Fri Sep 08 2000 Nalin Dahyabhai - rebuild in new environment
* Fri Jul 28 2000 Nalin Dahyabhai - update to pam_ldap 67 to fix a bug in template user code- convert symlink in /usr/lib to a relative one (#16132)
* Fri Jul 28 2000 Nalin Dahyabhai - update to nss_ldap 113 and pam_ldap 66
* Thu Jul 13 2000 Prospector - automatic rebuild
* Wed Jun 28 2000 Matt Wilson - changed all the -,- in attr statements to root,root
* Wed Jun 28 2000 Nalin Dahyabhai - update pam_ldap to 63
* Thu Jun 01 2000 Nalin Dahyabhai - update pam_ldap to 56
* Wed May 31 2000 Nalin Dahyabhai - update pam_ldap to 55- back out no-threads patch for pam_ldap, not needed any more
* Fri May 26 2000 Nalin Dahyabhai - update to 110- revert prototype patch, looks like a problem with the new glibc after all
* Sat May 20 2000 Nalin Dahyabhai - get libpthread out of the NSS module- fix prototype problems in getpwXXX()
* Tue May 16 2000 Nalin Dahyabhai - update to nss_ldap 109
* Sun Apr 30 2000 Nalin Dahyabhai - update pam_ldap 51
* Wed Apr 26 2000 Nalin Dahyabhai - update to nss_ldap 108 and pam_ldap 49
* Fri Apr 21 2000 Nalin Dahyabhai - update to pam_ldap 48
* Fri Mar 31 2000 Nalin Dahyabhai - update to nss_ldap 107- note: check http://www.advogato.org/person/lukeh/ for Luke\'s changelog
* Tue Mar 21 2000 Nalin Dahyabhai - update to nss_ldap 106
* Wed Feb 09 2000 Nalin Dahyabhai - update to nss_ldap 105
* Mon Feb 07 2000 Nalin Dahyabhai - update to nss_ldap 104 and pam_ldap 46- disable link against libpthread in pam_ldap
* Tue Feb 01 2000 Nalin Dahyabhai - remove migration tools, because this package requires openldap now, which also includes them
* Fri Jan 28 2000 Nalin Dahyabhai - update to nss_ldap 103
* Mon Jan 24 2000 Preston Brown - fix typo in linuxconf-pair pam cfg file (#7800)
* Tue Jan 11 2000 Preston Brown - v99, made it require pam_ldap- added perl migration tools- integrate pam_ldap stuff
* Sat Oct 23 1999 Bill Nottingham - statically link ldap libraries (they\'re in /usr/lib)
* Wed Aug 11 1999 Cristian Gafton - use the ldap.conf file as an external source- don\'t forcibly build the support for version 3- imported the default spec file from the tarball and fixed it up for RH 6.1