Changelog for
nss-pam-ldapd-0.9.13-1.1.i586.rpm :
* Mon Feb 10 2025 Michael Vetter
- Update to 0.9.13:
* add a command line -f, --config option to specify an alternate configuration file
* add a command line -t, --test option to check the configuration filevalidity
* support passwords with up to 255 characters
* fixes for potential memory issues in parsing configuration file
* fix NULL pointer deref on out of memory
* fix race condition in thread start-up
* fix issue with stopping threads on shutdown
* provide compatibility with musl libc
* fix compilation issues on NetBSD
* use closefrom() if available to fix slow invalidation on FreeBSD
* fix file descriptor leaking from process starting nslcd
* Sat Nov 20 2021 Michael Ströder - Update to 0.9.12
* allow explicitly configuring an empty search base (for LDAP servers that support that)
* support LDAP attributes with minus characters in attribute mapping expressions
* add tls_reqsan, tls_crlfile and tls_crlcheck options
* support generating ldaps:// URIs from DNS SRV records for port 389 by using DNSLDAPS in the uri option
* prefer the first URI listed in nslcd.conf after reconnecting after idle_timelimit
* fix handling of pam_authc_ppolicy no
* fix debug logging of ldap timeout values
* documentation improvements
* add pam_authc_ppolicy support to pynslcd
* fix Python 3 compatibility in chsh.ldap
* fix for running pynslcd without the uid option
* partial support for running tests with slapd 2.5
* miscellaneous test suite improvements
* test suite fixes for Solaris
* Mon Oct 18 2021 Michael Ströder - Define macro _pam_moduledir if not set to fix builds for Leap and SLE
* Mon Oct 11 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified:
* nslcd.service
* Tue Sep 28 2021 Dominique Leuenberger - Use %_pam_moduledir instead of hardcoding %{_lib}/security (boo#1191050).
* Mon Oct 07 2019 mvetterAATTsuse.com- Update to 0.9.11:
* add support for Python 3 in pynslcd and utilities
* fix crash in chsh.ldap (thanks Mizunashi Mana)
* test suite improvements
* Mon Sep 03 2018 mvetterAATTsuse.com- Update to 0.9.10:
* add FreeBSD netgroup support (thanks HWLin and Mango Yen)
* make password expiry messages correct and consistent (thanks Têko Mihinto)
* add domain variable for use in pam_authz_search
* allow logging longer lines
* create nslcd socket after dropping privileges to avoid slow start-ups
* Fri Mar 09 2018 dimstarAATTopensuse.org- Add the conflicts from the mainpackage also to the baselibs.conf generated ones: the -32bit packages conflict the same way.- Modernize spec file by calling spec-cleaner.
* Sun Feb 18 2018 mvetterAATTsuse.com- Update to 0.9.9:
* support spaces in attribute mapping expressions
* allow parsing longer lines in the configuration file
* allow for longer host names
* Tue Jun 27 2017 mvetterAATTsuse.com- Update to 0.9.8:
* add a pam_authc_search option that can be used to configure the search operation that is performed after authentication
* add nss_uid_offset and nss_gid_offset options that can be used to change returned numeric user and group ids from LDAP (thanks Seth Wright)
* do not retry failed user password on second LDAP server
* fix a crash in the PAM module on FreeBSD when showing password expiration messages
* the validnames option now also applies to shadow lookups
* support ethernet addresses in LDAP in compact and long formats
* improvements to getent.ldap command (a few minor bug fixes and preparations for Python 3 support)
* log entries and lookups failing nss_min_uid at debug level
* improvements to the test suite (including tests for getent.ldap)
