nss-pam-ldapd commit: r1462 - in nss-pam-ldapd: . debian man

[Date Prev][Date Next] [Thread Prev][Thread Next]
From: Commits of the nss-pam-ldapd project <nss-pam-ldapd-commits [at] lists.arthurdejong.org>
To: nss-pam-ldapd-commits [at] lists.arthurdejong.org
Reply-to: nss-pam-ldapd-users [at] lists.arthurdejong.org
Subject: nss-pam-ldapd commit: r1462 - in nss-pam-ldapd: . debian man
Date: Fri, 13 May 2011 15:10:49 +0200 (CEST)
Author: arthur
Date: Fri May 13 15:10:48 2011
New Revision: 1462
URL: http://arthurdejong.org/viewvc/nss-pam-ldapd?view=rev&revision=1462

Log:
get files ready for 0.8.3 release

Modified:
   nss-pam-ldapd/ChangeLog
   nss-pam-ldapd/NEWS
   nss-pam-ldapd/TODO
   nss-pam-ldapd/configure.ac
   nss-pam-ldapd/debian/changelog
   nss-pam-ldapd/man/nslcd.8.xml
   nss-pam-ldapd/man/nslcd.conf.5.xml
   nss-pam-ldapd/man/pam_ldap.8.xml

Modified: nss-pam-ldapd/ChangeLog
==============================================================================
--- nss-pam-ldapd/ChangeLog     Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/ChangeLog     Fri May 13 15:10:48 2011        (r1462)
@@ -1,3 +1,239 @@
+2011-05-13 13:02  arthur
+
+       * [r1461] debian/libnss-ldapd.postinst: don't unconditionally
+         restart nscd but just try to invalidate the cache for the maps
+         that change
+
+2011-05-13 13:01  arthur
+
+       * [r1460] debian/libnss-ldapd.config: correctly pick up current
+         configuration of /etc/nsswitch.conf when running dpkg-reconfigure
+
+2011-05-13 12:41  arthur
+
+       * [r1459] debian/control: upgrade to standards-version 3.9.2
+
+2011-05-13 12:15  arthur
+
+       * [r1458] common/expr.c, common/expr.h: switch variable expander
+         function type name because _t suffix is reserved
+
+2011-05-13 11:57  arthur
+
+       * [r1457] debian/control, debian/nslcd.config: search for LDAP
+         server by looking for SRV _ldap._tcp DNS records and try to query
+         LDAP server for base DN during package configuration (based on
+         work by Petter Reinholdtsen for the sssd package)
+
+2011-05-13 07:48  arthur
+
+       * [r1456] debian/nslcd.config: fix domain to basedn expansion when
+         having more than two domain parts (patch by Per Carlson)
+
+2011-05-13 07:04  arthur
+
+       * [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+         pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
+         pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
+         pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
+         pynslcd/shadow.py: simplify request handling by passing read
+         parameters around in a dict instead of setting object properties
+         (this mainly simplifies search filter building)
+
+2011-05-01 19:08  arthur
+
+       * [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
+         pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
+         pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,
+         pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,
+         pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement
+         attribute mapping functionality and do some refactoring
+
+2011-05-01 12:18  arthur
+
+       * [r1453] pynslcd/pam.py: remove unneeded import
+
+2011-05-01 12:14  arthur
+
+       * [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+         pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,
+         pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
+         pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn
+         and attributes to functions separately
+
+2011-05-01 12:06  arthur
+
+       * [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:
+         small code improvements
+
+2011-04-30 21:28  arthur
+
+       * [r1450] pam/common.h: make log message clearer when nslcd returns
+         an empty response (user not handled)
+
+2011-04-30 21:26  arthur
+
+       * [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP
+         server unavailable to PAM module
+
+2011-04-30 21:01  arthur
+
+       * [r1448] pam/pam.c: split setting up of configuration into
+         separate function
+
+2011-04-30 19:54  arthur
+
+       * [r1447] nslcd/pam.c: improve password change failed error message
+
+2011-04-30 14:37  arthur
+
+       * [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow
+         properties (similarly to what pam_unix does) in the PAM handling
+         code
+
+2011-04-30 09:15  arthur
+
+       * [r1445] pam/pam.c: do not attempt to change password as root when
+         changing an expired password
+
+2011-04-30 08:39  arthur
+
+       * [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no
+         match found
+
+2011-04-30 08:12  arthur
+
+       * [r1443] nslcd/pam.c: use the right DN in the pam_authz_search
+         option
+
+2011-04-30 08:00  arthur
+
+       * [r1442] nslcd/shadow.c: move code for getting shadow expiry
+         properties to a separate function
+
+2011-04-29 21:06  arthur
+
+       * [r1441] nslcd/pam.c: move most of the code for building the
+         authorisation search into the try_autzsearch() function
+
+2011-04-29 18:21  arthur
+
+       * [r1440] nslcd.h, pam/pam.c: support more PAM status codes over
+         the nslcd protocol
+
+2011-04-29 18:19  arthur
+
+       * [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to
+         indicate no expiry (instead of a long time)
+
+2011-04-28 18:47  arthur
+
+       * [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+         pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
+         pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
+         pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
+         pynslcd/shadow.py: put standard library imports before
+         application imports and remove some unused imports
+
+2011-04-28 18:32  arthur
+
+       * [r1437] pynslcd/group.py: remove duplicate and wrong write()
+         method
+
+2011-04-24 21:01  arthur
+
+       * [r1436] nslcd/pam.c: make request indicator shorter
+
+2011-04-24 20:54  arthur
+
+       * [r1435] nslcd.h: document use of returned authorisation message
+
+2011-04-24 20:52  arthur
+
+       * [r1434] nslcd/pam.c: no longer use the userdn parameter passed
+         along with each request (this may mean one or two more lookups
+         when doing authentication but simplifies things)
+
+2011-04-24 20:26  arthur
+
+       * [r1433] tests/test_pamcmds.expect: improve handling of
+         test_login_unknown
+
+2011-04-22 10:02  arthur
+
+       * [r1431] nslcd/myldap.c: report correct reported error from
+         ldap_abandon()
+
+2011-04-18 21:30  arthur
+
+       * [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of
+         RTLD_NODELETE
+
+2011-04-18 20:53  arthur
+
+       * [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE
+
+2011-04-16 14:00  arthur
+
+       * [r1428] nslcd.conf: add example configuration provided by Wesley
+         Mason
+
+2011-04-15 21:20  arthur
+
+       * [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,
+         configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement
+         implementation for strndup() for systems that don't have it
+
+2011-04-15 21:20  arthur
+
+       * [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing
+         from r1425)
+
+2011-04-15 21:16  arthur
+
+       * [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,
+         nslcd/group.c, nslcd/passwd.c: support using the objectSid
+         attribute to provide numeric user and group ids, based on a patch
+         by Wesley Mason
+
+2011-04-15 19:10  arthur
+
+       * [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,
+         tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests
+         from another directory
+
+2011-04-03 21:10  arthur
+
+       * [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and
+         group name validation errors a little more informative
+
+2011-03-31 20:50  arthur
+
+       * [r1422] AUTHORS: add some people who seemed to be missing from
+         the AUTHORS file
+
+2011-03-31 20:22  arthur
+
+       * [r1421] common/tio.c: tv_usec in struct timeval must be lower
+         than 1000000 (patch by SATOH Fumiyasu)
+
+2011-03-31 20:16  arthur
+
+       * [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of
+         $(INSTALL_DATA) -D because -D is not supported on all operating
+         systems (patch by SATOH Fumiyasu)
+
+2011-03-31 19:16  arthur
+
+       * [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of
+         only two characters
+
+2011-03-26 20:51  arthur
+
+       * [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+         man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
+         files ready for 0.8.2 release
+
 2011-03-26 16:16  arthur
 
        * [r1416] tests/Makefile.am, tests/test_nsscmds.sh,

Modified: nss-pam-ldapd/NEWS
==============================================================================
--- nss-pam-ldapd/NEWS  Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/NEWS  Fri May 13 15:10:48 2011        (r1462)
@@ -1,3 +1,21 @@
+changes from 0.8.2 to 0.8.3
+---------------------------
+
+* support using the objectSid attribute to provide numeric user and group
+  ids, based on a patch by Wesley Mason
+* check shadow account and password expiry properties (similarly to what
+  pam_unix does) in the PAM handling code
+* implement attribute mapping functionality in pynslcd
+* relax default for validnames option to allow user names of only two
+  characters
+* make user and group name validation errors a little more informative
+* small portability improvements
+* general code improvements and refactoring in pynslcd
+* some simplifications in the protocol between the PAM module and nslcd
+  (without actual protocol changes so far)
+* Debian packaging improvements
+
+
 changes from 0.8.1 to 0.8.2
 ---------------------------
 

Modified: nss-pam-ldapd/TODO
==============================================================================
--- nss-pam-ldapd/TODO  Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/TODO  Fri May 13 15:10:48 2011        (r1462)
@@ -2,20 +2,15 @@
 * add sanity checking code (e.g. not too large buffer allocation and checking
   that host, user, etc do not contain funky characters) in all server modules
 * log some statistics: "passwd=100 shadow=10 host=20 rpc=10" (10 req/minute)
-* in the server: once the request is done pass the flushing of the buffers to
-  a separate thread so our workers are available to handle new requests
-  (test whether this actually improves performace)
 * add an option to create an extra socket somewhere (so it may be used in
   chroot jails)
 * make I/O timeout between NSS lib and daemon configurable with configure
-* ethers: also look in ipHostNumber attribute to look up an IPv4 (IPv6)
-  address and return it as an alternative entry (investigate whether this is
-  sane)
 * protocols/rpc: the description attribute should be used as an alias?
 * review changes in nss_ldap and merge any useful changes
 * maybe rate-limit LDAP entry warnings
 * setnetgrent() may need to return an error if the netgroup is undefined
-* handle repeated calls to getent() better (see 
http://bugzilla.padl.com/show_bug.cgi?id=376)
+* handle repeated calls to getent() better
+  (see http://bugzilla.padl.com/show_bug.cgi?id=376)
 * make it possible to start nslcd real early in the boot process and have
   it become available when it determines it can (other timeout/retry mechanism
   on startup)
@@ -28,4 +23,8 @@
 * properly test Solaris support
 * fix buffer handling in read_**string() functions (Solaris support)
 * complete pynslcd implementation
-* in nslcd/pam.c check shadow properties if present
+* implement chsh and chfn in nslcd PAM code and make chsh.ldap and chfn.ldap
+  binaries
+* have nslcd flush the nscd caches when reconnecting to the LDAP server after
+  an error
+* have PAM code support password policy of server (see pam_ldap)

Modified: nss-pam-ldapd/configure.ac
==============================================================================
--- nss-pam-ldapd/configure.ac  Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/configure.ac  Fri May 13 15:10:48 2011        (r1462)
@@ -33,10 +33,10 @@
 
 # initialize and set version and bugreport address
 AC_INIT([nss-pam-ldapd],
-        [0.8.2],
+        [0.8.3],
         [nss-pam-ldapd-users@lists.arthurdejong.org],,
         [http://arthurdejong.org/nss-pam-ldapd/])
-RELEASE_MONTH="Mar 2011"
+RELEASE_MONTH="May 2011"
 AC_SUBST(RELEASE_MONTH)
 AC_CONFIG_SRCDIR([nslcd.h])
 

Modified: nss-pam-ldapd/debian/changelog
==============================================================================
--- nss-pam-ldapd/debian/changelog      Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/debian/changelog      Fri May 13 15:10:48 2011        (r1462)
@@ -1,3 +1,26 @@
+nss-pam-ldapd (0.8.3) experimental; urgency=low
+
+  * support using the objectSid attribute to provide numeric user and group
+    ids, based on a patch by Wesley Mason
+  * check shadow account and password expiry properties (similarly to what
+    pam_unix does) in the PAM handling code
+  * implement attribute mapping functionality in pynslcd
+  * relax default for validnames option to allow user names of only two
+    characters (closes: #620235)
+  * make user and group name validation errors a little more informative
+  * small portability improvements
+  * general code improvements and refactoring in pynslcd
+  * some simplifications in the protocol between the PAM module and nslcd
+    (without actual protocol changes so far)
+  * fix debconf LDAP search base suggestion when domain has more than two
+    parts (patch by Per Carlson) (closes: #626571)
+  * search for LDAP server by looking for SRV _ldap._tcp DNS records and
+    try to query LDAP server for base DN during package configuration
+    (based on work by Petter Reinholdtsen for the sssd package)
+  * upgrade to standards-version 3.9.2 (no changes needed)
+
+ -- Arthur de Jong <adejong@debian.org>  Fri, 13 May 2011 15:00:00 +0200
+
 nss-pam-ldapd (0.8.2) experimental; urgency=low
 
   * fix problem with endless loop on incorrect password

Modified: nss-pam-ldapd/man/nslcd.8.xml
==============================================================================
--- nss-pam-ldapd/man/nslcd.8.xml       Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/man/nslcd.8.xml       Fri May 13 15:10:48 2011        (r1462)
@@ -36,9 +36,9 @@
  <refmeta>
   <refentrytitle>nslcd</refentrytitle>
   <manvolnum>8</manvolnum>
-  <refmiscinfo class="version">Version 0.8.2</refmiscinfo>
+  <refmiscinfo class="version">Version 0.8.3</refmiscinfo>
   <refmiscinfo class="manual">System Manager's Manual</refmiscinfo>
-  <refmiscinfo class="date">Mar 2011</refmiscinfo>
+  <refmiscinfo class="date">May 2011</refmiscinfo>
  </refmeta>
 
  <refnamediv id="name">

Modified: nss-pam-ldapd/man/nslcd.conf.5.xml
==============================================================================
--- nss-pam-ldapd/man/nslcd.conf.5.xml  Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/man/nslcd.conf.5.xml  Fri May 13 15:10:48 2011        (r1462)
@@ -36,9 +36,9 @@
  <refmeta>
   <refentrytitle>nslcd.conf</refentrytitle>
   <manvolnum>5</manvolnum>
-  <refmiscinfo class="version">Version 0.8.2</refmiscinfo>
+  <refmiscinfo class="version">Version 0.8.3</refmiscinfo>
   <refmiscinfo class="manual">System Manager's Manual</refmiscinfo>
-  <refmiscinfo class="date">Mar 2011</refmiscinfo>
+  <refmiscinfo class="date">May 2011</refmiscinfo>
  </refmeta>
 
  <refnamediv id="name">

Modified: nss-pam-ldapd/man/pam_ldap.8.xml
==============================================================================
--- nss-pam-ldapd/man/pam_ldap.8.xml    Fri May 13 15:02:32 2011        (r1461)
+++ nss-pam-ldapd/man/pam_ldap.8.xml    Fri May 13 15:10:48 2011        (r1462)
@@ -35,9 +35,9 @@
  <refmeta>
   <refentrytitle>pam_ldap</refentrytitle>
   <manvolnum>8</manvolnum>
-  <refmiscinfo class="version">Version 0.8.2</refmiscinfo>
+  <refmiscinfo class="version">Version 0.8.3</refmiscinfo>
   <refmiscinfo class="manual">System Manager's Manual</refmiscinfo>
-  <refmiscinfo class="date">Mar 2011</refmiscinfo>
+  <refmiscinfo class="date">May 2011</refmiscinfo>
  </refmeta>
 
  <refnamediv id="name">
-- 
To unsubscribe send an email to
nss-pam-ldapd-commits-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-commits
nss-pam-ldapd commit: r1462 - in nss-pam-ldapd: . debian man, Commits of the nss-pam-ldapd project
Prev by Date: nss-pam-ldapd commit: r1461 - nss-pam-ldapd/debian
Next by Date: nss-pam-ldapd commit: r1463 - nss-pam-ldapd-0.8.3
Previous by thread: nss-pam-ldapd commit: r1461 - nss-pam-ldapd/debian
Next by thread: nss-pam-ldapd commit: r1463 - nss-pam-ldapd-0.8.3