archive older ChangeLog entries in year files

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1170 ef36b2f9-881f-0410-afb5-c4e39611909c

1 files changed, 792 insertions, 0 deletions

diff --git a/ChangeLog-2008 b/ChangeLog-2008
new file mode 100644
index 0000000..f9c5229
--- /dev/null
+++ b/ChangeLog-2008
@@ -0,0 +1,792 @@
+2008-12-15  arthur
+
+	* [r806] man/nss-ldapd.conf.5.xml: add a note about permissions of
+	  configfile when bindpw is used
+
+2008-12-06  arthur
+
+	* [r805] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
+	  nslcd/myldap.c, nss-ldapd.conf: rename the tls_checkpeer option
+	  to tls_reqcert, deprecating the old name and supporting all
+	  options that OpenLDAP supports for that value
+
+2008-12-03  arthur
+
+	* [r804] nslcd/common.c, tests/test_common.c: allow backslashes in
+	  names execpt as first or last character
+	* [r803] configure.ac, nslcd/nslcd.c: clean the environment and set
+	  LDAPNOINIT to disable parsing of LDAP configfiles (.ldaprc,
+	  /etc/ldap/ldap.conf, etc)
+
+2008-11-29  arthur
+
+	* [r802] nslcd/myldap.c: use tls_* options also for StartTLS
+	  connections
+	* [r801] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h: remove
+	  sslpath option because it wasn't used for anything
+	* [r800] debian/changelog: add missing pound sign
+
+2008-11-14  arthur
+
+	* [r798] ChangeLog, NEWS, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.7 release
+
+2008-11-13  arthur
+
+	* [r797] debian/libnss-ldapd.templates: also leave out empty
+	  Default line for libnss-ldapd/ldap-binddn
+	* [r796] debian/libnss-ldapd.config, debian/libnss-ldapd.templates:
+	  set debconf values from the environment only when they are empty
+	  or if configfile is present to fix installation problem
+
+2008-11-11  arthur
+
+	* [r795] debian/libnss-ldapd.postinst: any output should go to
+	  stderr to not confuse debconf
+
+2008-11-04  arthur
+
+	* [r793] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.6 release
+	* [r792] NEWS: some spelling fixes
+	* [r791] man/nss-ldapd.conf.5.xml: update manual page with current
+	  timeout numbers
+
+2008-11-01  arthur
+
+	* [r790] debian/libnss-ldapd.postrm: fail on errors
+
+2008-10-31  arthur
+
+	* [r789] debian/libnss-ldapd.postinst: check for existance of init
+	  script instead of daemon
+
+2008-10-01  arthur
+
+	* [r788] nslcd/common.c: also allow spaces in user and group names
+	  because it was causing problems in some environments
+
+2008-09-24  arthur
+
+	* [r787] nslcd/myldap.c: also retry if ldap_result() failed and
+	  getting error number returned LDAP_SUCCESS
+	* [r786] nslcd/myldap.c: log option name instead of option value
+	  for ldap_set_option() value
+	* [r785] debian/control: clarify relationship to nss_ldap in
+	  package description
+
+2008-08-22  arthur
+
+	* [r783] ChangeLog, NEWS, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.5 release
+
+2008-08-07  arthur
+
+	* [r782] debian/copyright, debian/po/da.po: updated Danish (da)
+	  translation of debconf templates by Jonas Smedegaard
+	  <dr@jones.dk>
+	* [r781] debian/po/sv.po: updated Swedish (sv) translation of
+	  debconf templates by Martin Ågren <martin.agren@gmail.com>
+
+2008-07-20  arthur
+
+	* [r778] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.4 release
+	* [r777] nslcd/cfg.c: rename get_base_from_dse() to
+	  get_base_from_rootdse()
+	* [r776] nslcd/cfg.c: make the get_base_from_dse() function cleaner
+	  and add a comment describing the function
+	* [r775] man/nss-ldapd.conf.5.xml, nslcd/cfg.c: implement looking
+	  up search base in DSE of LDAP server
+	* [r774] tests/test_nsscmds.sh: reflect change in test LDAP setup
+
+2008-07-10  arthur
+
+	* [r773] nslcd/myldap.c: LDAP_OPT_X_TLS_REQUIRE_CERT is not a
+	  boolean
+
+2008-06-21  arthur
+
+	* [r772] README: small change to documentation
+	* [r771] nss-ldapd.conf: further improvements to Active Directory
+	  filters and attribute mappings by Petter Reinholdtsen
+	  <pere@hungry.com>
+
+2008-06-17  arthur
+
+	* [r770] nslcd/cfg.c, nslcd/myldap.c: replace https:// by ldaps://
+	  (stupid typo)
+	* [r769] nss-ldapd.conf: Active Directory sample configuration
+	  improvement by Jelmer Jaarsma <jelmer.jaarsma@sara.nl>
+
+2008-06-15  arthur
+
+	* [r767] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.3 release
+	* [r766] Makefile.am, debian/libnss-ldapd.lintian-overrides,
+	  debian/rules: lintian override seems to be no longer necessary
+	* [r765] debian/control: upgrade to standards-version 3.8.0 (no
+	  changes needed)
+	* [r764] debian/libnss-ldapd.nslcd.init: create /var/run/nslcd
+	  directory with owner nslcd:nslcd by default so nslcd can remove
+	  socket and pidfile at exit
+	* [r763] nslcd/nslcd.c: give pidfile and socket creation functions
+	  more logical names
+
+2008-06-14  arthur
+
+	* [r762] AUTHORS, configure.ac, man/nss-ldapd.conf.5.xml,
+	  nslcd/cfg.c, nslcd/cfg.h, nslcd/myldap.c: implement SASL
+	  authentication based on a patch by Dan White <dwhite@olp.net>
+	* [r761] man/nss-ldapd.conf.5.xml: make formatting of manual page
+	  options consistent
+
+2008-06-13  arthur
+
+	* [r760] tests, tests/Makefile.am, tests/test_common.c: add some
+	  very basic tests for the isvalidname() function
+	* [r759] nslcd/common.c, nslcd/common.h, nslcd/group.c,
+	  nslcd/passwd.c: combine isvalidusername() and isvalidgroupname()
+	  into isvalidname() because they are similar enough and we just
+	  want to check to see if it is a reasonable name (e.g. not a DN)
+
+2008-06-12  arthur
+
+	* [r758] common/tio.c: restore the old writing code which masks
+	  SIGPIPE on platforms that can't use send()
+	* [r757] nslcd/cfg.c: don't perform SSL/TLS sanity checks if it
+	  isn't available on the platform
+	* [r756] tests: ignore test_getpeercred
+
+2008-06-11  arthur
+
+	* [r755] tests: ignore core files
+	* [r754] tests/test_getpeercred.c: remove test socket at end of
+	  test
+
+2008-06-06  arthur
+
+	* [r753] compat/getpeercred.c: use the cr_ prefix when getting a
+	  xucred struct (needed for kfreebsd)
+	* [r752] tests/Makefile.am, tests/test_getpeercred.c: implement a
+	  very basic test for getpeercred()
+	* [r751] nslcd/cfg.c: remove warning on using ssl option
+	* [r750] nslcd/cfg.c: check that all URLs start with https:// if
+	  "ssl on" is specified
+	* [r749] nslcd/myldap.c: also set TLS options if an ldaps:// URL is
+	  specified
+	* [r748] debian/control: add dependency on adduser as required by
+	  the previous commit
+	* [r747] debian/libnss-ldapd.postinst: create a nslcd user in
+	  postinst and ensure that it is used by default
+	* [r746] man/nss-ldapd.conf.5.xml: add uid and gid options to
+	  manual page
+	* [r745] nslcd/cfg.c, nslcd/cfg.h, nslcd/nslcd.c: add uid and gid
+	  configuration keywords that set the user id and group id of the
+	  running nslcd process
+	* [r744] nslcd/nslcd.c: environ is defined in unistd.h
+	* [r743] nslcd/nslcd.c, nss/common.c: increase write buffer size in
+	  nslcd to free up threads earlier and increase timeout for nslcd
+	  to nss communication to one minute (at both places)
+	* [r742] common/dict.c, compat/ether.c, nslcd/group.c,
+	  nslcd/myldap.c, nslcd/passwd.c, tests/test_tio.c: miscellaneous
+	  portability improvements
+
+2008-05-18  arthur
+
+	* [r741] TODO: from a review of glibc 2.3.6 code it shows that
+	  strerror() is only non-threadsafe in some very unlikely
+	  circumstances
+
+2008-05-17  arthur
+
+	* [r740] common/tio.c: use send() with a flag to ignore SIGPIPE
+	  instead of write() so we don't have to muck with signal handlers
+
+2008-05-16  arthur
+
+	* [r739] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: include a random
+	  string in every log message to be able to group log messages for
+	  a single request
+	* [r738] common/tio.c, nslcd/myldap.c: add sanity checks to sleep
+	  calls to never sleep too long (problems could occur when the
+	  clock moves backwards)
+	* [r737] nss/group.c: remove comment about limitation that has now
+	  been removed
+	* [r736] nss/common.c: grow the read buffer maximum size to 2Mbyte
+	  to allow for groups with about 150000 members maximum
+
+2008-05-15  arthur
+
+	* [r735] README: add some documentation on supported group to
+	  member mappings
+	* [r734] nslcd/myldap.h: improve documentation for
+	  myldap_get_rdn_value() function
+
+2008-05-11  arthur
+
+	* [r733] nslcd/myldap.c: close the connection and retry the search
+	  (once) if the search fails with the first call to
+	  myldap_get_entry() (starting a search doesn't always give an
+	  error when the connection has been broken)
+	* [r732] nslcd/myldap.c: split retry mechanism of myldap_search()
+	  into a new do_retry_search() function
+	* [r731] nslcd/myldap.c: allocate the search memory region in
+	  myldap_search() instead of in do_try_search() and have the latter
+	  return an LDAP status code
+	* [r730] nslcd/myldap.c: also allow closing of searches that no
+	  longer have a valid connection and integrate myldap_search_free()
+	  into myldap_search_close()
+
+2008-05-04  arthur
+
+	* [r728] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.2 release
+	* [r727] HACKING, README: some documentation cleanups and updates
+	* [r726] tests/test_nslcd_group.c: add some tests for
+	  isvalidgroupname()
+	* [r725] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
+	  nslcd/nslcd.c: make number of threads configurable with the
+	  threads keyword
+	* [r724] nslcd/myldap.h: add reference to note about
+	  thread-safeness of OpenLDAP
+	* [r723] nslcd/nslcd.c: fix copyright year
+
+2008-05-03  arthur
+
+	* [r722] nslcd/passwd.c: implement a cache for dn2uid() lookups
+	  that saves some time doing LDAP searches for groups with a lot of
+	  members, based on a patch by Petter Reinholdtsen
+	  <pere@hungry.com>
+	* [r721] debian/libnss-ldapd.nslcd.init: add soft dependency on
+	  slapd, simplify network and file system dependencies and add
+	  reverse dependencies on some common daemons that may want to do
+	  NSS lookups
+
+2008-05-02  arthur
+
+	* [r720] nss/netgroup.c, nss/prototypes.h: remove checking for
+	  first entry and always return NSS_STATUS_RETURN when no more data
+	  is available in the netgroup (this has the side effect of not
+	  returning NSS_STATUS_NOTFOUND for non-existing netgroups but
+	  seems to be what other NSS modules do) to properly handle empty
+	  netgroups
+	* [r719] tests, tests/Makefile.am, tests/test_nslcd_group.c: add
+	  file for testing nslcd/group.c
+	* [r718] tests/Makefile.am: don't even compile the test programs on
+	  make check
+	* [r717] tests/Makefile.am: don't compile test code on every build
+	  and fix LDADD lists to include correct objects
+	* [r716] nslcd/cfg.c, nslcd/cfg.h, nslcd/myldap.c: only support
+	  tls-related options if LDAP library supports TLS, only add rebind
+	  code if ldap_set_rebind_proc() is found and only set
+	  LDAP_X_OPT_CONNECT_TIMEOUT if that option is supported
+
+2008-05-01  arthur
+
+	* [r715] nslcd/myldap.c: support ranged attribute values
+	* [r714] nss/common.h: fix comment of return value of
+	  NSS_STATUS_TRYAGAIN
+	* [r713] tests/test_myldap.c: fix a warning
+	* [r712] tests/test_myldap.c: ensure that filter_get_var() and
+	  filter_get_var() return non-NULL to enable parsing of config file
+	  with attribute mapping and filter settings and use base from
+	  config file
+
+2008-04-29  arthur
+
+	* [r711] man/nss-ldapd.conf.5.xml: make language about pagesize
+	  option a little clearer
+
+2008-04-27  arthur
+
+	* [r710] nslcd/cfg.c: support the case where an attribute mapping
+	  variable is NULL
+
+2008-04-26  arthur
+
+	* [r709] nslcd/myldap.c: also close the LDAP connection on
+	  LDAP_SERVER_DOWN (besides LDAP_UNAVAILABLE)
+	* [r708] man/nss-ldapd.conf.5.xml, nss/common.c: increase time out
+	  values because now nslcd will error out more quickly if the LDAP
+	  server is known to be unavailable
+	* [r707] nslcd/nslcd.c: spelling fix in comment
+	* [r706] man/nss-ldapd.conf.5.xml: some spelling fixes and a
+	  clarification of the retry mechanism
+	* [r705] nslcd/cfg.c: fix log message of incorrect map statement
+	* [r704] nslcd/passwd.c: make log message a little more descriptive
+	* [r703] configure.ac: fix quote in comment
+	* [r702] nslcd/myldap.c: ensure that the connection to the LDAP
+	  server is closed whenever any of the ldap_*() functions return
+	  LDAP_UNAVAILABLE
+
+2008-04-25  arthur
+
+	* [r701] man/nss-ldapd.conf.5.xml, nslcd/cfg.c, nslcd/cfg.h,
+	  nslcd/myldap.c, tests/nss-ldapd-test.conf, tests/test_cfg.c,
+	  tests/test_myldap.c: implement new timing mechanism for retries
+	  to quickly fail lookups to LDAP server that have been failing for
+	  some time, removing the reconnect_tries option and giving
+	  reconnect_sleeptime and reconnect_maxsleeptime options a new
+	  meaning
+	* [r700] tests/test_myldap.c: include missing include
+	* [r699] tests/test_myldap.c: ignore SIGPIPE in myldap tests
+	* [r698] tests/test_myldap.c: fix assert to be test instead of
+	  assignment
+	* [r697] tests/test_myldap.c, tests/test_myldap.sh: have the binary
+	  look up the file name and only use the shell script wrapper to
+	  determine if LDAP server is available
+	* [r696] compat/ether.h: fix typos in references to
+	  HAVE_ETHER_NTOA_R and HAVE_ETHER_ATON_R macros
+
+2008-04-23  arthur
+
+	* [r695] tests/test_nsscmds.sh: fix order of members in group in
+	  tests because of new hashing dict (maybe we should fix the script
+	  instead to always sort members properly)
+	* [r694] common/dict.c: fix problem where first item in the
+	  hashtable could be returned twice while looping
+	* [r693] tests/test_dict.c: add test for problem with duplicate
+	  entries being returned while looping over results
+	* [r692] nslcd/passwd.c: don't issue warning when
+	  myldap_get_entry() returns NULL and LDAP_SUCCESS
+
+2008-04-21  arthur
+
+	* [r691] common/dict.c: allocate room for key string just after
+	  entry to save on calls to malloc() and make it simpler
+
+2008-04-20  arthur
+
+	* [r690] nslcd/group.c, nslcd/passwd.c: fix tests for valid user
+	  and group names
+	* [r689] nslcd/common.h, nslcd/group.c, nslcd/passwd.c: add checks
+	  for valid user and group names in incoming requests and for data
+	  returned from LDAP
+	* [r688] nslcd/group.c: only support uniqueMember containing DN
+	  values
+	* [r687] nslcd/group.c: fix warning message to not refer to alias
+	* [r686] nslcd/myldap.c: make warning message more verbose, fix
+	  comment and don't try to store empty results
+
+2008-04-19  arthur
+
+	* [r685] debian/libnss-ldapd.config: only guess the searchbase if
+	  the value doesn't seem to be preseeded (based on a patch by
+	  Petter Reinholdtsen <pere@hungry.com>)
+	* [r684] common/dict.c: fix wrapping and indenting of comments
+	* [r683] nslcd/group.c: correctly call set_free() instead of free()
+	* [r682] nslcd/group.c: use the new set data structure to gather
+	  the group members
+	* [r681] common/Makefile.am, common/set.c, common/set.h, tests,
+	  tests/Makefile.am, tests/test_set.c: implement a set that uses
+	  the dict module as back-end
+	* [r680] common/dict.c: implement new dict module that uses a
+	  hashtable which is around 40 times faster for large (around 2000)
+	  entries but with around 40% more memory used
+	* [r679] tests/Makefile.am, tests/test_dict.c, tests/usernames.txt:
+	  some new tests for the dictionary module
+	* [r678] nslcd/passwd.c: add test for emtpy DN
+
+2008-04-18  arthur
+
+	* [r677] nslcd/myldap.c: instead of using the dict module to build
+	  a cache just store the values in an fixed-sized array because no
+	  more than 9 attributes are currently retrieved from an entry and
+	  we never retrieve the same value more than once (so the cache is
+	  useless)
+
+2008-04-17  arthur
+
+	* [r676] common/dict.h: add note about freed values
+	* [r675] common/dict.c, common/dict.h, nslcd/myldap.c,
+	  tests/test_dict.c: change dict_values_first() and
+	  dict_values_next() into dict_loop_first() and dict_loop_next() to
+	  have a looping mechanism over keys and values
+
+2008-04-13  arthur
+
+	* [r674] tests/nss-ldapd-test.conf: remote hopefully last reference
+	  to rootbind{dn,pw}
+
+2008-04-06  arthur
+
+	* [r673] nslcd/common.h: return values of dn2uid() and uid2dn()
+	  should always be used
+	* [r672] nslcd/group.c: properly handle the case where dn2uid()
+	  couldn't do a DN->uid lookup
+	* [r670] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6.1 release
+	* [r669] config.guess, config.sub: include updated files
+
+2008-04-05  arthur
+
+	* [r668] AUTHORS: include Petter Reinholdtsen for reporting many
+	  bugs and even some fixes
+	* [r667] debian/libnss-ldapd.postinst: handle case where value
+	  contains spaces properly
+	* [r666] debian/libnss-ldapd.postinst: support having a binddn set
+	  without a bindpw
+	* [r665] debian/libnss-ldapd.config: fix typo in comment
+	* [r664] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,
+	  debian/libnss-ldapd.templates, debian/po/ca.po, debian/po/cs.po,
+	  debian/po/da.po, debian/po/de.po, debian/po/es.po,
+	  debian/po/fr.po, debian/po/ja.po, debian/po/nl.po,
+	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
+	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po: remove
+	  rootbind{dn,pw} options from packaging because the options are
+	  not likely to be implemented in the future
+	* [r663] nslcd/common.h, nslcd/group.c, nslcd/passwd.c: fix
+	  member->group searches by also searching for DN in uniqueMember
+	  attribute
+	* [r662] nslcd/log.c: make log line a little bigger to properly log
+	  more search filters
+	* [r661] nslcd/nslcd.c: only return shadow entries to root users
+	* [r660] nss/group.c: correctly implement buffer handling in
+	  _nss_ldap_initgroups_dyn() to grow buffer when needed, check
+	  limits and handle extra group parameter (had a closer look at
+	  nis-initgroups.c)
+	* [r659] tests/test_nsscmds.sh: no problem to shout a little with
+	  failed tests
+	* [r658] nss/group.c: properly check the limit (as seen in
+	  nis-initgroups.c)
+	* [r657] nslcd/shadow.c: partial support for reading AD date format
+	  for pwdLastSet attribute
+	* [r656] nslcd/myldap.c: split closing of LDAP session to separate
+	  funtion to invalidate running searches always and closes
+	  connection if setting up search failed
+	* [r655] tests/test_group.c: use a larger buffer for group
+	  membership results
+	* [r654] tests/test_myldap.c: check that the last
+	  myldap_get_entry() returned success
+
+2008-04-04  arthur
+
+	* [r653] README, man/nss-ldapd.conf.5.xml, nslcd/cfg.c,
+	  nslcd/cfg.h, nslcd/myldap.c, nss-ldapd.conf: remove code that
+	  handles special cases when calling as root (removing rootbinddn,
+	  rootbindpw, rootuse_sasl and rootsasl_authid options)
+	* [r652] nslcd/myldap.c: revert r628 (using ldap_str2dn() instead
+	  of ldap_explode_r?dn()) for now to make this compile on older
+	  versions of OpenLDAP
+	* [r651] man/nss-ldapd.conf.5.xml: add some more documentation to
+	  the pagesize option
+
+2008-04-02  arthur
+
+	* [r650] debian/libnss-ldapd.nslcd.init: make start not fail if
+	  nslcd is already running and stop not fail if it wasn't running
+	  before
+
+2008-03-30  arthur
+
+	* [r649] nss-ldapd.conf: some fixes to the configuration when using
+	  Active Directory (provided by Petter Reinholdtsen
+	  <pere@hungry.com>)
+	* [r648] configure.ac, nslcd/myldap.c: only define and use
+	  do_sasl_interact() if we have a sasl library
+	* [r647] compat/attrs.h: make test for compiler versions simpler
+	  and per used attribute
+
+2008-03-29  arthur
+
+	* [r646] HACKING, README: add contact information on reporting bugs
+	  and contributing patches
+	* [r645] HACKING: add some more notes about the design and
+	  direction I want to go in
+
+2008-03-28  arthur
+
+	* [r644] nslcd/myldap.c: don't warn about problems retreiving the
+	  objectClass from en entry
+
+2008-03-27  arthur
+
+	* [r643] nslcd/group.c: fix a problem where the newly allocated
+	  storage by realloc() wasn't used (thanks to Petter Reinholdtsen
+	  <pere@hungry.com> for the patch)
+
+2008-03-16  arthur
+
+	* [r642] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst:
+	  comment out all rootbind{dn,pw} code as to not copy those
+	  directives because they are unsupported
+	* [r641] debian/libnss-ldapd.config: use tail instead of head to
+	  avoid conflicts becase nss_ldap seems to pick up the last option
+	  in the file
+	* [r640] debian/libnss-ldapd.config: handle the case where an
+	  option is defined multiple times
+
+2008-03-06  arthur
+
+	* [r639] AUTHORS, debian/copyright, debian/po/es.po: updated
+	  Spanish (es) translation of debconf templates by Rudy Godoy
+	  Guillén <rudy@debian.org>
+
+2008-03-04  arthur
+
+	* [r638] AUTHORS, debian/po/nl.po: updated Dutch (nl) translation
+	  of debconf templates by Bart Cornelis <cobaco@skolelinux.no>
+
+2008-02-19  arthur
+
+	* [r637] README: some updates to reflect recent changes
+	* [r636] man/Makefile.am: have a better way to specify the manual
+	  page rule
+
+2008-02-15  arthur
+
+	* [r635] common/tio.c: split out the flushing of the buffers to
+	  separate functions and see if we can flush some data from the
+	  buffer if it is overflowing before growing the buffer
+	* [r634] nslcd/myldap.c: add StartTLS support by Ralf Haferkamp
+	  <rhafer@suse.de>
+	* [r633] nslcd/myldap.c: pass URI to do_bind() to make it work with
+	  do_rebind() and use that URI (thanks Ralf Haferkamp
+	  <rhafer@suse.de>)
+	* [r632] tests/test_myldap.c: add tests for myldap_get_rdn_value()
+	  and myldap_cpy_rdn_value()
+
+2008-02-12  arthur
+
+	* [r631] configure.ac: make using implicit function definitions an
+	  error
+	* [r630] common/tio.c, common/tio.h, nslcd/nslcd.c, nss/common.c,
+	  tests/test_tio.c: implement resizable I/O buffers and tune buffer
+	  sizes to normal requests
+	* [r629] common/tio.c: always allocate the read and write buffers
+	  and make the struct tio_buffer inline in struct tio_fileinfo
+
+2008-02-10  arthur
+
+	* [r628] nslcd/myldap.c: replace the calls to ldap_explode_dn() and
+	  ldap_explode_rdn() with a call to ldap_str2dn() resulting in much
+	  simpler code
+
+2008-02-08  arthur
+
+	* [r627] nslcd/cfg.c: only support "dns" and "domain" values on
+	  platforms with the necessary functions available
+	* [r626] nslcd/ether.c: don't define struct ether_addr here, it was
+	  moved to compat/ether.h
+
+2008-02-04  arthur
+
+	* [r625] nslcd/myldap.c: make some changes to allow it to compile
+	  on more platforms
+	* [r624] compat/Makefile.am, compat/ether.c, compat/ether.h,
+	  configure.ac, nslcd/ether.c: provide replacements for
+	  ether_aton_r() and ether_ntoa_r() for platforms that don't have
+	  them
+	* [r623] configure.ac, nslcd/nslcd.c: only call
+	  __nss_configure_lookup() if it is available, if it isn't the
+	  platform is out of luck
+	* [r622] nslcd/myldap.h: defined LDAP_SCOPE_DEFAULT it's not
+	  defined elsewhere
+	* [r621] nslcd/nslcd.c: fix missing casts
+	* [r620] nslcd/nslcd.c: actually include the compat header files
+	  when needed
+
+2008-02-03  arthur
+
+	* [r618] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nss-ldapd.conf.5.xml: get files ready for
+	  0.6 release
+	* [r617] configure.ac: also check for sasl2 library
+	* [r616] tests/test_myldap.c, tests/test_nsscmds.sh: add tests for
+	  new LDAP lookups
+	* [r615] nslcd/attmap.c, nslcd/attmap.h, nslcd/group.c: support the
+	  uniqueMember LDAP attribute that holds DN values (they are
+	  translated with dn2uid() from passwd.c)
+	* [r614] debian/libnss-ldapd.postinst, debian/libnss-ldapd.postrm,
+	  debian/rules: don't use dh_makeshlibs any more because we don't
+	  need the shlibs file; call ldconfig from maintainer scripts
+	  ourselves
+	* [r613] debian/rules: install the NSS library under /lib instead
+	  of /usr/lib to make it easyer to unmount /usr if it's on a
+	  separate filesystem
+
+2008-02-02  arthur
+
+	* [r612] debian/rules: don't pass options to configure which are
+	  not used
+	* [r611] configure.ac: remove --with-ngroups option because it
+	  isn't used
+	* [r610] nslcd/common.h, nslcd/passwd.c: implement a dn2uid()
+	  function to transform a DN into a username (looking inside the DN
+	  or doing an LDAP lookup if neede)
+	* [r609] nslcd/myldap.c, nslcd/myldap.h: implement
+	  myldap_cpy_rdn_value() function to copy rdn value into a buffer
+	  (functionality like myldap_get_rdn_value())
+	* [r608] nslcd/myldap.c: log and otherwise ignore errors in
+	  ldap_parse_page_control()
+	* [r607] nslcd/myldap.c: fix copy-pasto
+	* [r606] nslcd/myldap.c: don't request paging when doing a search
+	  with scope base and ignore errors of ldap_create_page_control()
+	* [r605] nslcd/myldap.c: reset LDAP error flag if ldap_get_values()
+	  returned an error because some LDAP functions don't do this
+	  correctly
+
+2008-02-01  arthur
+
+	* [r604] nslcd/myldap.c: have proper checks and logs of all ldap
+	  operations
+	* [r603] tests/test_group.c: enable _nss_ldap_initgroups_dyn() test
+	  because it's working now
+	* [r602] nslcd-common.h: fix buffer size debug message
+	* [r601] nss/common.h, nss/hosts.c, nss/netgroup.c, nss/networks.c:
+	  do not set errno (and h_errno) if we got the last entry from
+	  get*ent() (this apparently is needed by coreutils' id and groups
+	  commands)
+	* [r600] tests/Makefile.am: pagectrl module has moved
+	* [r599] tests/test_nsscmds.sh: test for hugegroup
+	* [r598] tests/test_nsscmds.sh: the groups command no longer lists
+	  the username
+	* [r597] nss/common.c, nss/common.h, nss/group.c, nss/hosts.c,
+	  nss/netgroup.c, nss/networks.c: remove the nslcd2nss() function
+	  because it's not needed with the current protocol
+	* [r596] nss/common.h: fail with a permanent error if resetting the
+	  stream failed to prevent indefinite retries
+
+2008-01-31  arthur
+
+	* [r595] nslcd/myldap.c: defined LDAP_DEPRECATED to also have
+	  definitions for deprecated functions
+	* [r594] compat/attrs.h: only define MUST_USE attribute if gcc
+	  version is more recent than 3.4
+	* [r593] debian/copyright: update copyright information
+	* [r592] compat/Makefile.am, compat/pagectrl.c, compat/pagectrl.h,
+	  configure.ac, debian/copyright, nslcd/Makefile.am,
+	  nslcd/myldap.c, nslcd/pagectrl.c, nslcd/pagectrl.h: move pagectrl
+	  code into compat directory
+	* [r591] configure.ac: make comments lowercase for consistency
+	* [r590] tests/test_myldap.c: re-add test URIs that accidentally
+	  got commented out in the last commit
+	* [r589] tests/Makefile.am, tests/test_cfg.c, tests/test_myldap.c,
+	  tests/test_nsscmds.sh: pass the correct pthread flags for all
+	  calls to compiler and linker and link in compat code, handle
+	  other assert.h setups and avoid some ! in if statements in shell
+	  scripts
+	* [r588] configure.ac: improve LDAP library autodetection and make
+	  if statements consistent
+	* [r587] configure.ac: move finding of replacement functions to a
+	  more logical place
+	* [r586] configure.ac: define extra macros to import system
+	  extensions from system header files and remove duplicate check
+	  for ldap_set_rebind_proc()
+	* [r585] configure.ac: test to see if the compiler supports certain
+	  -W flags before using them
+
+2008-01-30  arthur
+
+	* [r584] nslcd/ether.c: include stdint.h
+	* [r583] nslcd.h, nslcd/ether.c, nss/ethers.c: use uint8_t instead
+	  of u_int8_t because the former seems to be available on more
+	  platforms
+	* [r582] INSTALL, depcomp, install-sh: update some files from
+	  recent automake
+	* [r581] compat/Makefile.am, compat/daemon.c, compat/daemon.h,
+	  compat/getopt_long.c, compat/getopt_long.h, configure.ac: provide
+	  replacement functions for daemon() and getopt_long() when they
+	  are not available on the system
+	* [r580] configure.ac: remove duplicate warning flags
+	* [r579] compat/attrs.h: define __STRING() if it's not defined by
+	  the system
+	* [r578] tests/test_tio.c: include errno in assertion statement
+	* [r577] compat/getpeercred.c: some fixes for LOCAL_PEERCRED (still
+	  untested)
+
+2008-01-27  arthur
+
+	* [r576] AUTHORS, debian/po/de.po: updated German (de) translation
+	  of debconf templates by Erik Schanze <eriks@debian.org>
+	* [r575] compat/ldap.h, nslcd/Makefile.am, nslcd/myldap.c:
+	  integrate some compatibility code into myldap.c, the only place
+	  it's used
+	* [r573] nslcd/myldap.c: work around some LDAP libraries not having
+	  all options
+	* [r572] configure.ac, nslcd/myldap.h: on some systems lber.h needs
+	  to be included before ldap.h
+	* [r571] common/tio.c, nslcd-common.h, nslcd/nslcd.c, nss/common.c,
+	  tests/test_tio.c: when including stdint.h check if we actually
+	  have it
+	* [r570] nslcd/pagectrl.c, nslcd/pagectrl.h: correct #endif comment
+
+2008-01-26  arthur
+
+	* [r569] nslcd/cfg.c: have a fallback value for HOST_NAME_MAX if it
+	  is not defined
+	* [r568] tests/test_nsscmds.sh: handle the case where
+	  /etc/nss-ldapd.conf does not exist a little more graceful
+	* [r567] nslcd/nslcd.c: log error when getpeercred() returned
+	  nothing
+	* [r566] compat/getpeercred.c, compat/getpeercred.h, configure.ac:
+	  add (untested) support for the Solaris getpeerucred() function
+	* [r565] Makefile.am, compat, compat/Makefile.am,
+	  compat/getpeercred.c, compat/getpeercred.h, configure.ac,
+	  nslcd/Makefile.am, nslcd/nslcd.c: move code to get information
+	  from socket peer to the compat directory because it is very
+	  platform specific
+	* [r564] tests/test_myldap.c, tests/test_nsscmds.sh,
+	  tests/test_tio.c: somewhat improve the output from the tests
+	* [r563] nslcd/cfg.c: fix marsing of map statement
+	* [r562] tests/test_cfg.c: also test map filter and scope
+	  configuration options
+
+2008-01-16  arthur
+
+	* [r561] nslcd/cfg.c: fix problem in map statement end-of-line
+	  handling
+	* [r560] tests/test_cfg.c: add a test for the map statement
+
+2008-01-03  arthur
+
+	* [r559] nslcd/nslcd.c: close connections in worker threads at
+	  program termination
+	* [r558] nslcd/nslcd.c: make code a little more compact, don't
+	  include debug twice in the log message and remove the
+	  capabilities code because it will probably never be used
+	* [r557] tests/test_nsscmds.sh: support the case where + is in
+	  /etc/group
+	* [r556] nss/aliases.c, nss/common.h, nss/ethers.c, nss/group.c,
+	  nss/hosts.c, nss/netgroup.c, nss/networks.c, nss/passwd.c,
+	  nss/protocols.c, nss/rpc.c, nss/services.c, nss/shadow.c: only
+	  start the NSLCD_ACTION_*_ALL requests with the first call to
+	  getent() instead of with setent() to avoid unneeded requests if
+	  compat is used (except with netgroups)
+	* [r555] nslcd/passwd.c, nss/prototypes.h: update copyright year
+	* [r554] tests/test_nsscmds.sh: get the number of groups and
+	  services from files in /etc for comparison
+	* [r553] nslcd/passwd.c: do not warn about missing loginShell
+	  attribute because it is not mandatory
+	* [r552] nss/group.c: increment value that is pointed to, not the
+	  pointer (fixes segfault)
+
+2008-01-02  arthur
+
+	* [r551] nslcd/common.h: immediatly bail out if write entity
+	  function failed (prevents numerous "error writing to client"
+	  messages from filling up the logs)
+
+2008-01-01  arthur
+
+	* [r550] tests/test_nsscmds.sh: check to see if nslcd is running
+	  and add test for a large group (100 members)
+	* [r549] nss/exports.linux, nss/group.c, nss/prototypes.h: enable
+	  the _nss_ldap_initgroups_dyn() function that is now implemented
+	  in nslcd
+	* [r548] nss/common.h: use the new tio_mark()/tio_reset() functions
+	  to support retries of the getent() functions when
+	  NSS_STATUS_TRYAGAIN would be returned
+	* [r547] common/tio.c, common/tio.h, tests/test_tio.c: add limited
+	  implementation of tio_mark() and tio_reset() functions to do
+	  limited seeks in the read stream, clean up header file comments
+	  and write tests for new code
+