archive older ChangeLog entries in year files

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1761 ef36b2f9-881f-0410-afb5-c4e39611909c

1 files changed, 744 insertions, 0 deletions

diff --git a/ChangeLog-2011 b/ChangeLog-2011
new file mode 100644
index 0000000..e1e1734
--- /dev/null
+++ b/ChangeLog-2011
@@ -0,0 +1,744 @@
+2011-12-31  arthur
+
+	* [r1584] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
+	  files ready for 0.8.5 release
+
+2011-12-30  arthur
+
+	* [r1583] debian/control: fix versioned build dependency on
+	  debhelper
+
+2011-12-28  arthur
+
+	* [r1582] pynslcd/config.py.in: remove some information from config
+	  that we don't expect to use
+	* [r1581] configure.ac, pynslcd/cfg.py, pynslcd/common.py,
+	  pynslcd/config.py.in, pynslcd/group.py, pynslcd/pynslcd.py:
+	  support for reading the configuration file (not all options are
+	  used though)
+	* [r1580] pynslcd/cfg.py, pynslcd/pynslcd.py: move the state
+	  variables (from command line) from the configuration to the main
+	  module
+	* [r1579] pynslcd/pam.py: fall back to trying to authenticate with
+	  provided password (in case rootpwmodpw is not set or unusable)
+	* [r1578] pynslcd/group.py: never request group members for
+	  GroupByMemberRequest
+	* [r1577] pynslcd/group.py: instead of modifying attmap, modify
+	  attribute list
+	* [r1576] pynslcd/group.py, pynslcd/passwd.py: fix references to
+	  attmap (broken in r1571)
+	* [r1575] nslcd/nslcd.c: typo fix in comment
+
+2011-12-27  arthur
+
+	* [r1574] pynslcd/common.py, pynslcd/group.py, pynslcd/netgroup.py,
+	  pynslcd/passwd.py, pynslcd/shadow.py: make logging more
+	  consistent and remove test bases from shadow and passwd maps
+	* [r1573] pynslcd/cfg.py, pynslcd/ether.py, pynslcd/group.py,
+	  pynslcd/netgroup.py, pynslcd/pam.py, pynslcd/passwd.py,
+	  pynslcd/pynslcd.py, pynslcd/shadow.py, pynslcd/tio.py: PEP8 fixes
+	* [r1572] debian/copyright: update copyright information
+
+2011-12-12  arthur
+
+	* [r1571] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
+	  pynslcd/network.py, pynslcd/passwd.py, pynslcd/protocol.py,
+	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: define the
+	  search separately from the request
+	* [r1570] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
+	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
+	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/passwd.py,
+	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
+	  pynslcd/shadow.py: move check of required attributes and other
+	  common tests to the Request.handle_entry() method
+
+2011-12-10  arthur
+
+	* [r1569] nslcd/cfg.c: properly log failures to lookup DNS SRV
+	  records
+	* [r1568] nslcd/nslcd.c: properly handle failures to truncate the
+	  pid file
+	* [r1567] debian/nslcd.config: get the first configuration value
+	  instead of the last because that one is also written
+	* [r1566] debian/nslcd.config: fix a deprecated use of head without
+	  the -n option
+	* [r1565] debian/rules: enable more hardening options (-fPIE
+	  doesn't work yet because we use -fPIC in some places)
+	* [r1564] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm:
+	  ensure that the output of nss_list_configured() is space
+	  separated
+	* [r1563] m4/ax_pthread.m4: update macro from autoconf-archive
+
+2011-12-09  jhrozek
+
+	* [r1560] nslcd/myldap.c: Fix a typo in disconnect logic
+
+2011-12-01  arthur
+
+	* [r1558] nslcd/nslcd.c: ensure that uid, gid and pid vars are
+	  properly initialised and log denied requests
+
+2011-11-30  arthur
+
+	* [r1557] nslcd/passwd.c: ensure that /etc/nsswitch.conf is only
+	  loaded once after start-up
+
+2011-11-18  arthur
+
+	* [r1556] debian/libnss-ldapd.config: simplification of logic to
+	  overwrite list of enabled /etc/nsswitch.conf services in debconf
+	  (based on r1555 of 0.7 branch)
+
+2011-10-12  arthur
+
+	* [r1554] debian/control: add versioned dependency on libpam for
+	  mutiarch support
+	* [r1553] AUTHORS, nss/bsdnss.c: implement group membership NSS
+	  function by Tom Judge (taken from FreeBSD PR 154000)
+
+2011-10-10  arthur
+
+	* [r1552] debian/rules: keep nslcd running during package upgrades
+
+2011-10-02  arthur
+
+	* [r1551] nslcd/pam.c: reduce loglevel of user not found messages
+	  to avoid spamming the logs with useless information (thanks Wakko
+	  Warner)
+
+2011-09-30  jhrozek
+
+	* [r1547] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
+	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
+	  Use an explicit base of 10 for strtouid()/strtogid()/strtol()
+	  calls
+
+2011-09-21  arthur
+
+	* [r1546] debian/nslcd.config: treat the "hard" value for
+	  tls_reqcert as if it was "demand"
+
+2011-09-14  arthur
+
+	* [r1543] debian/libnss-ldapd.config, debian/libnss-ldapd.postrm,
+	  debian/nslcd.config, debian/nslcd.init, debian/nslcd.postinst:
+	  make whitespace matching consistent in regular expressions
+	  (thanks Nick)
+
+2011-09-09  arthur
+
+	* [r1542] nslcd/alias.c, nslcd/attmap.c, nslcd/common.c,
+	  nslcd/common.h, nslcd/ether.c, nslcd/group.c, nslcd/host.c,
+	  nslcd/netgroup.c, nslcd/network.c, nslcd/pam.c, nslcd/passwd.c,
+	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
+	  make validation log messages consistent
+	* [r1541] nslcd/nsswitch.c: add missing include
+
+2011-09-08  arthur
+
+	* [r1540] nslcd/network.c, nslcd/passwd.c: grow gecos buffer size
+	  and consistency improvements to other buffers
+	* [r1539] nslcd/ether.c, nslcd/host.c, nslcd/network.c: give string
+	  representations of addresses more logical names
+
+2011-09-07  arthur
+
+	* [r1538] debian/copyright, debian/po/sv.po: updated Swedish (sv)
+	  translation of debconf templates by Martin Bagge
+
+2011-09-04  arthur
+
+	* [r1536] AUTHORS, ChangeLog, NEWS, TODO, configure.ac,
+	  debian/changelog, debian/copyright, man/nslcd.8.xml,
+	  man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get files ready for
+	  0.8.4 release
+	* [r1535] tests/test_getpeercred.c: warn when we couldn't get the
+	  gid or pid, the uid is the only really interesting bit
+	* [r1534] tests/test_tio.c: add casts from size_t to int for printf
+	* [r1533] debian/rules: ignore failures in tests
+	* [r1532] debian/rules: use auto-detection for LDAP library and
+	  defaults for config file, socket and pidfile (no changes)
+
+2011-09-03  arthur
+
+	* [r1531] debian/libnss-ldapd.config, debian/libnss-ldapd.postinst,
+	  debian/libnss-ldapd.postrm, debian/libpam-ldapd.postinst: support
+	  spaces before and after database name while parsing
+	  /etc/nsswitch.conf and reduce the number of places where parsing
+	  is done
+
+2011-08-30  arthur
+
+	* [r1530] debian/nslcd.postinst: correctly handle leading and
+	  trailing spaces in preseeded uri option (patch by Andreas B.
+	  Mundt)
+	* [r1529] configure.ac, nslcd/myldap.c: move LDAP_DEPRECATED and
+	  LDAP_REFERRALS to configure.ac to ensure that tests from
+	  configure see the same API
+
+2011-08-29  arthur
+
+	* [r1528] configure.ac, nslcd/common.c, nslcd/common.h: implement
+	  and use a strtoui() function if uid_t or gid_t is of size
+	  unsigned int (thanks Jakub Hrozek)
+	* [r1527] pynslcd/Makefile.am: get rid of automake warning
+	* [r1526] configure.ac: silence autoconf warnings, patch by Jakub
+	  Hrozek
+	* [r1525] debian/po/nl.po: some changes based on feedback by Jeroen
+	  Schot
+
+2011-08-27  arthur
+
+	* [r1524] configure.ac, nslcd/cfg.c, nslcd/common.h, nslcd/group.c,
+	  nslcd/passwd.c: provide strtouid() and strtogid() functions that
+	  use strtoul() or strtoull() (thanks Jakub Hrozek)
+	* [r1523] nslcd/cfg.c, nslcd/group.c, nslcd/passwd.c,
+	  nslcd/protocol.c, nslcd/rpc.c, nslcd/service.c, nslcd/shadow.c:
+	  check errno after calls to strtol() to ensure that numbers that
+	  are too large for type will be reported (thanks Jakub Hrozek)
+	* [r1522] AUTHORS, nslcd/myldap.c: pass a statically allocated
+	  callback structure to OpenLDAP because it doesn't make it's own
+	  copy (thanks Jakub Hrozek) (fixes a problem in r1490)
+	* [r1521] debian/po/nl.po: some changes based on feedback by Paul
+	  Gevers
+
+2011-08-26  arthur
+
+	* [r1520] debian/po/nl.po: first attempt at Dutch (nl) translation
+	* [r1519] debian/po/ca.po, debian/po/fi.po, debian/po/gl.po,
+	  debian/po/it.po, debian/po/nb.po, debian/po/nl.po,
+	  debian/po/sv.po, debian/po/vi.po, debian/po/zh_CN.po: small
+	  formatting changes to header
+
+2011-08-25  arthur
+
+	* [r1518] debian/po/es.po: updated Spanish (es) translation of
+	  debconf templates by Francisco Javier Cuadrado
+
+2011-08-24  arthur
+
+	* [r1517] nslcd/cfg.c: fix typo (thanks Nalin Dahyabhai)
+	* [r1515] nslcd/cfg.c: fix a problem with uninitialised memory
+	  while parsing the tls_ciphers option (was broken in r853, similar
+	  problem was fixed in r910, reported by Isaac Freeman)
+	* [r1514] debian/po/de.po: updated German (de) translation of
+	  debconf templates by Chris Leick
+	* [r1513] AUTHORS, man/nslcd.conf.5.xml, nslcd/cfg.c: support
+	  querying DNS SRV records from a different domain than the current
+	  one (based on a patch by James M. Leddy)
+
+2011-08-23  arthur
+
+	* [r1512] debian/po/cs.po: updated Czech (cs) translation of
+	  debconf templates by Miroslav Kure
+
+2011-08-19  arthur
+
+	* [r1511] debian/po/fr.po: typo fix provided by Christian Perrier
+
+2011-08-17  arthur
+
+	* [r1510] AUTHORS: add new translators to AUTHORS file
+	* [r1509] debian/po/ja.po: updated Japanese (ja) translation of
+	  debconf templates by Kenshi Muto
+	* [r1508] debian/po/pt.po: updated Portuguese (pt) translation of
+	  debconf templates by Américo Monteiro
+
+2011-08-14  arthur
+
+	* [r1507] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
+	  translation of debconf templates by Denis Doria
+	* [r1506] ChangeLog, ChangeLog-2009, ChangeLog-2010, Makefile.am:
+	  split 2009 and 2010 changes to separate ChangeLog files
+	* [r1505] nss/networks.c: remove unused variable
+	* [r1504] nslcd/Makefile.am, pam/Makefile.am, tests/Makefile.am:
+	  put external libraries at the end when linking
+	* [r1503] configure.ac: remove some tests for symbols we aren't
+	  using
+	* [r1502] debian/libnss-ldapd.lintian-overrides: add lintian
+	  override for SONAME check
+	* [r1501] debian/po/pt_BR.po: updated Brazilian Portuguese (pt_BR)
+	  translation of debconf templates by Denis Doria
+	* [r1500] debian/po/da.po: update Danish (da) translation of
+	  debconf templates by Joe Hansen
+	* [r1499] debian/po/sk.po: added Slovak (sk) translation of debconf
+	  templates by Slavko
+	* [r1498] debian/po/fr.po: updated French (fr) translation of
+	  debconf templates by Christian Perrier
+	* [r1497] debian/po/ru.po: updated Russian (ru) translation of
+	  debconf templates by Yuri Kozlov
+
+2011-08-10  arthur
+
+	* [r1496] AUTHORS: fix spelling of name (sorry about that)
+
+2011-08-09  arthur
+
+	* [r1495] nslcd/passwd.c: check nsswitch.conf mtime to see whether
+	  file should be reloaded
+	* [r1494] debian/po/ca.po, debian/po/cs.po, debian/po/da.po,
+	  debian/po/de.po, debian/po/es.po, debian/po/fi.po,
+	  debian/po/fr.po, debian/po/gl.po, debian/po/it.po,
+	  debian/po/ja.po, debian/po/nb.po, debian/po/nl.po,
+	  debian/po/pt.po, debian/po/pt_BR.po, debian/po/ru.po,
+	  debian/po/sv.po, debian/po/templates.pot, debian/po/vi.po,
+	  debian/po/zh_CN.po: run debconf-updatepo to update .pot and .po
+	  files
+	* [r1493] debian/nslcd.templates, man/nslcd.conf.5.xml: small
+	  language updates based on feedback by Justin B Rye
+
+2011-08-08  arthur
+
+	* [r1492] debian/nslcd.templates: incorporate feedback on debconf
+	  templates by debian-l10n-english@lists.debian.org (thanks Justin
+	  B Rye and Christian PERRIER)
+
+2011-08-07  arthur
+
+	* [r1491] Makefile.am, debian/compat, debian/control,
+	  debian/libnss-ldapd.install,
+	  debian/libnss-ldapd.lintian-overrides,
+	  debian/libnss-ldapd.postinst, debian/libpam-ldapd.install,
+	  debian/rules, debian/source/lintian-overrides: build Debian
+	  packages with multiarch support
+	* [r1490] AUTHORS, nslcd/myldap.c: set the socket timeout in a
+	  connection callback to avoid timeout issues during the SSL
+	  handshake (based on a patch by Stefan Völkel)
+
+2011-08-06  arthur
+
+	* [r1489] debian/copyright, m4/ax_pthread.m4: update AX_PTHREAD
+	  from http://www.gnu.org/software/autoconf-archive/ax_pthread.html
+
+2011-08-05  arthur
+
+	* [r1488] pynslcd/group.py, tests/test_myldap.c: replace last
+	  traces of groupOfUniqueNames
+	* [r1487] nslcd/Makefile.am, nslcd/common.h, nslcd/nsswitch.c,
+	  nslcd/passwd.c, tests/Makefile.am: check whether the NSS shadow
+	  map queries LDAP before returning x as a password has for shadow
+	  users
+	* [r1486] tests/README, tests/test.ldif.gz, tests/test_nsscmds.sh:
+	  update tests with change of member/uniqueMember default change
+	  (r1484)
+	* [r1485] nslcd/group.c, nslcd/myldap.c, nslcd/myldap.h,
+	  nslcd/passwd.c: implementation of myldap_get_values_len() to use
+	  ldap_get_values_len() instead of ldap_get_values() to fix some
+	  problems with binary data in returned attribute values (patch by
+	  Wesley Mason)
+
+2011-08-03  arthur
+
+	* [r1484] README, nslcd.conf, nslcd/attmap.c, nslcd/attmap.h,
+	  nslcd/group.c, pynslcd/group.py, tests/test_myldap.c: switch to
+	  using the member attribute by default instead of uniqueMember
+
+2011-07-21  arthur
+
+	* [r1483] README: remove obsolete attribute from documentation
+
+2011-07-15  arthur
+
+	* [r1482] debian/nslcd.init: on restart only log_end_msg once
+
+2011-07-04  arthur
+
+	* [r1481] configure.ac: show the default value for the
+	  pam-seclib-dir option
+
+2011-07-03  arthur
+
+	* [r1480] compat/getpeercred.c: fix header
+	* [r1479] compat/pam_compat.h: provide PAM_AUTHTOK_RECOVERY_ERR for
+	  systems with only PAM_AUTHTOK_RECOVER_ERR
+
+2011-07-02  arthur
+
+	* [r1478] Makefile.am, debian/compat, debian/control,
+	  debian/libpam-ldapd.install, debian/libpam-ldapd.pam-auth-update,
+	  debian/nslcd.install, debian/pam-configs,
+	  debian/pam-configs/ldap, debian/rules: switch to dh for
+	  debian/rules and bump debhelper compatibility to 8
+	* [r1476] nslcd/group.c, nslcd/host.c, nslcd/network.c,
+	  nslcd/passwd.c, nslcd/shadow.c: make buffer sizes consistent,
+	  grow gidNumber buffer to hold larger numbers and small
+	  consistency improvements
+
+2011-06-10  arthur
+
+	* [r1475] nslcd/pam.c: correctly only check password expiration
+	  when authenticating, only check account expiration when doing
+	  authorisation check
+
+2011-06-05  arthur
+
+	* [r1474] nslcd/cfg.c, nslcd/pam.c: check all variables in
+	  pam_authz_search to see if they exist
+	* [r1473] nslcd/cfg.c, nslcd/common.c: mark more strings as const
+	  and don't free() data returned by cfg_getdomainname()
+	* [r1471] common/expr.c, tests/test_expr.c: handle expressions
+	  where the expander function returns NULL (handle it as an empty
+	  string)
+	* [r1470] nslcd/myldap.c: fix r1468
+	* [r1468] nslcd/myldap.c: simplify and correct find_rdn_value() to
+	  handle splitting attribute and value correctly
+	* [r1467] config.guess, config.sub: include updated files
+
+2011-05-23  arthur
+
+	* [r1466] tests/test_common.c: add test case for two-character user
+	  name
+
+2011-05-21  arthur
+
+	* [r1464] nslcd/myldap.c: fix problem with partial attribute name
+	  matches in DN (e.g. uid vs. uidNumber) (thanks to Timothy White
+	  for the fix)
+
+2011-05-13  arthur
+
+	* [r1462] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
+	  files ready for 0.8.3 release
+	* [r1461] debian/libnss-ldapd.postinst: don't unconditionally
+	  restart nscd but just try to invalidate the cache for the maps
+	  that change
+	* [r1460] debian/libnss-ldapd.config: correctly pick up current
+	  configuration of /etc/nsswitch.conf when running dpkg-reconfigure
+	* [r1459] debian/control: upgrade to standards-version 3.9.2
+	* [r1458] common/expr.c, common/expr.h: switch variable expander
+	  function type name because _t suffix is reserved
+	* [r1457] debian/control, debian/nslcd.config: search for LDAP
+	  server by looking for SRV _ldap._tcp DNS records and try to query
+	  LDAP server for base DN during package configuration (based on
+	  work by Petter Reinholdtsen for the sssd package)
+	* [r1456] debian/nslcd.config: fix domain to basedn expansion when
+	  having more than two domain parts (patch by Per Carlson)
+	* [r1455] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
+	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
+	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
+	  pynslcd/shadow.py: simplify request handling by passing read
+	  parameters around in a dict instead of setting object properties
+	  (this mainly simplifies search filter building)
+
+2011-05-01  arthur
+
+	* [r1454] pynslcd/alias.py, pynslcd/attmap.py, pynslcd/common.py,
+	  pynslcd/ether.py, pynslcd/group.py, pynslcd/host.py,
+	  pynslcd/netgroup.py, pynslcd/network.py, pynslcd/pam.py,
+	  pynslcd/passwd.py, pynslcd/protocol.py, pynslcd/rpc.py,
+	  pynslcd/service.py, pynslcd/shadow.py, pynslcd/tio.py: implement
+	  attribute mapping functionality and do some refactoring
+	* [r1453] pynslcd/pam.py: remove unneeded import
+	* [r1452] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+	  pynslcd/host.py, pynslcd/netgroup.py, pynslcd/network.py,
+	  pynslcd/pam.py, pynslcd/passwd.py, pynslcd/protocol.py,
+	  pynslcd/rpc.py, pynslcd/service.py, pynslcd/shadow.py: pass dn
+	  and attributes to functions separately
+	* [r1451] pynslcd/group.py, pynslcd/pam.py, pynslcd/pynslcd.py:
+	  small code improvements
+
+2011-04-30  arthur
+
+	* [r1450] pam/common.h: make log message clearer when nslcd returns
+	  an empty response (user not handled)
+	* [r1449] nslcd/pam.c: close the nslcd connection to signal LDAP
+	  server unavailable to PAM module
+	* [r1448] pam/pam.c: split setting up of configuration into
+	  separate function
+	* [r1447] nslcd/pam.c: improve password change failed error message
+	* [r1446] nslcd/common.h, nslcd/pam.c, nslcd/shadow.c: check shadow
+	  properties (similarly to what pam_unix does) in the PAM handling
+	  code
+	* [r1445] pam/pam.c: do not attempt to change password as root when
+	  changing an expired password
+	* [r1444] nslcd/pam.c: fix return value of try_autzsearch() when no
+	  match found
+	* [r1443] nslcd/pam.c: use the right DN in the pam_authz_search
+	  option
+	* [r1442] nslcd/shadow.c: move code for getting shadow expiry
+	  properties to a separate function
+
+2011-04-29  arthur
+
+	* [r1441] nslcd/pam.c: move most of the code for building the
+	  authorisation search into the try_autzsearch() function
+	* [r1440] nslcd.h, pam/pam.c: support more PAM status codes over
+	  the nslcd protocol
+	* [r1439] nslcd/shadow.c, pynslcd/shadow.py: set maxdays to -1 to
+	  indicate no expiry (instead of a long time)
+
+2011-04-28  arthur
+
+	* [r1438] pynslcd/alias.py, pynslcd/common.py, pynslcd/ether.py,
+	  pynslcd/group.py, pynslcd/host.py, pynslcd/netgroup.py,
+	  pynslcd/network.py, pynslcd/pam.py, pynslcd/passwd.py,
+	  pynslcd/protocol.py, pynslcd/rpc.py, pynslcd/service.py,
+	  pynslcd/shadow.py: put standard library imports before
+	  application imports and remove some unused imports
+	* [r1437] pynslcd/group.py: remove duplicate and wrong write()
+	  method
+
+2011-04-24  arthur
+
+	* [r1436] nslcd/pam.c: make request indicator shorter
+	* [r1435] nslcd.h: document use of returned authorisation message
+	* [r1434] nslcd/pam.c: no longer use the userdn parameter passed
+	  along with each request (this may mean one or two more lookups
+	  when doing authentication but simplifies things)
+	* [r1433] tests/test_pamcmds.expect: improve handling of
+	  test_login_unknown
+
+2011-04-22  arthur
+
+	* [r1431] nslcd/myldap.c: report correct reported error from
+	  ldap_abandon()
+
+2011-04-18  arthur
+
+	* [r1430] nslcd/nslcd.c: fix r1429 to properly handle absence of
+	  RTLD_NODELETE
+	* [r1429] nslcd/nslcd.c: support systems without RTLD_NODELETE
+
+2011-04-16  arthur
+
+	* [r1428] nslcd.conf: add example configuration provided by Wesley
+	  Mason
+
+2011-04-15  arthur
+
+	* [r1427] compat/Makefile.am, compat/strndup.c, compat/strndup.h,
+	  configure.ac, nslcd/group.c, nslcd/passwd.c: provide replacement
+	  implementation for strndup() for systems that don't have it
+	* [r1426] AUTHORS: add Wesley Mason to AUTHOS file (was missing
+	  from r1425)
+	* [r1425] man/nslcd.conf.5.xml, nslcd/common.c, nslcd/common.h,
+	  nslcd/group.c, nslcd/passwd.c: support using the objectSid
+	  attribute to provide numeric user and group ids, based on a patch
+	  by Wesley Mason
+	* [r1424] tests/test_nsscmds.sh, tests/test_pamcmds.expect,
+	  tests/test_pamcmds.sh: allow running test_{nss,pam}cmds tests
+	  from another directory
+
+2011-04-03  arthur
+
+	* [r1423] nslcd/group.c, nslcd/pam.c, nslcd/passwd.c: make user and
+	  group name validation errors a little more informative
+
+2011-03-31  arthur
+
+	* [r1422] AUTHORS: add some people who seemed to be missing from
+	  the AUTHORS file
+	* [r1421] common/tio.c: tv_usec in struct timeval must be lower
+	  than 1000000 (patch by SATOH Fumiyasu)
+	* [r1420] AUTHORS, Makefile.am: use $(mkinstalldirs) instead of
+	  $(INSTALL_DATA) -D because -D is not supported on all operating
+	  systems (patch by SATOH Fumiyasu)
+	* [r1419] man/nslcd.conf.5.xml, nslcd/cfg.c: allow usernames of
+	  only two characters
+
+2011-03-26  arthur
+
+	* [r1417] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
+	  files ready for 0.8.2 release
+	* [r1416] tests/Makefile.am, tests/test_nsscmds.sh,
+	  tests/test_pamcmds.sh: ensure that all test source files are
+	  distibuted and can tests can be run when source directory differs
+	  from build directory
+	* [r1415] pynslcd/common.py: sync validname regular expression with
+	  nslcd
+
+2011-03-25  arthur
+
+	* [r1414] configure.ac, nslcd/nslcd.c: no longer indefinitely wait
+	  for all worker threads to finish before exiting (but wait a few
+	  seconds on platforms with pthread_timedjoin_np())
+	* [r1413] tests/Makefile.am, tests/test_cfg.c, tests/test_common.c,
+	  tests/test_myldap.c: re-organise tests somewhat making things
+	  more consistent
+	* [r1412] debian/nslcd.config, debian/nslcd.postinst: integrate
+	  patch by Daniel Dehennin to not loose debconf values of
+	  previously set options with dpkg-reconfigure
+	* [r1411] configure.ac, man/nslcd.conf.5.xml, nslcd/cfg.c,
+	  nslcd/cfg.h, nslcd/common.c, tests/Makefile.am,
+	  tests/test_common.c: implement a validnames option that can be
+	  used to fine-tune the test for valid user and group names using a
+	  regular expression
+
+2011-03-24  arthur
+
+	* [r1410] pynslcd/protocol.py, pynslcd/pynslcd.py, pynslcd/rpc.py,
+	  pynslcd/service.py: implement service, protocol and rpc lookups
+	* [r1409] pynslcd/host.py, pynslcd/network.py: fix the case where
+	  the RDN is for some reason not in the cn
+	* [r1408] pynslcd/pam.py: fix configuration name
+	* [r1407] pynslcd/mypidfile.py: truncate pidfile to ensure remains
+	  of previous value is gone
+
+2011-03-23  arthur
+
+	* [r1406] pynslcd/host.py: fix use of spaces
+	* [r1405] nslcd/protocol.c, nslcd/shadow.c: fix descriptions of
+	  files
+	* [r1403] compat/daemon.h, configure.ac, nslcd/nslcd.c: provide a
+	  definition of daemon() for systems that lack it
+	* [r1402] compat/ether.h: typo fix in comment
+
+2011-03-19  arthur
+
+	* [r1401] Makefile.am, common, compat, nslcd, nss, pam, tests,
+	  tests/test_expr.c, tests/test_pamcmds.expect, tests/test_tio.c:
+	  more tests and general test improvements
+	* [r1400] common/expr.c, nslcd/myldap.h, nslcd/nslcd.c,
+	  nss/common.h, nss/prototypes.h, pam/common.h, pam/pam.c: small
+	  code improvements
+	* [r1399] nslcd/log.c, nslcd/log.h: remove logging functionality
+	  that isn't used
+
+2011-03-18  arthur
+
+	* [r1398] tests, tests/Makefile.am, tests/in_testenv.sh,
+	  tests/test_nsscmds.sh, tests/test_pamcmds.expect,
+	  tests/test_pamcmds.sh: implement test cases for some of the
+	  common PAM actions (test environment required for this)
+
+2011-03-17  arthur
+
+	* [r1397] configure.ac, tests/Makefile.am, tests/common.h,
+	  tests/test_cfg.c, tests/test_common.c, tests/test_expr.c,
+	  tests/test_getpeercred.c, tests/test_myldap.c, tests/test_tio.c:
+	  put all assertion functions and compatibility code into one
+	  header file
+	* [r1396] nslcd.conf: put idle_timelimit option in Active Directory
+	  example with low enough default
+
+2011-03-16  arthur
+
+	* [r1395] tests/Makefile.am, tests/test_aliases.c,
+	  tests/test_ethers.c, tests/test_group.c, tests/test_hosts.c,
+	  tests/test_netgroup.c, tests/test_networks.c,
+	  tests/test_nslcd_group.c, tests/test_passwd.c,
+	  tests/test_protocols.c, tests/test_rpc.c, tests/test_services.c,
+	  tests/test_shadow.c: remove legacy test code that is no longer
+	  used
+
+2011-03-14  arthur
+
+	* [r1394] pam/pam.c: check for user existence before trying
+	  password change
+	* [r1393] common/tio.c: fix a problem in the timeout paramater that
+	  was being passed to select() and could contain too many µsec
+	  (fixes Solaris runtime issue)
+
+2011-03-13  arthur
+
+	* [r1392] tests/test_nsscmds.sh: fix name of script in header
+
+2011-03-12  arthur
+
+	* [r1391] configure.ac: include the resolv library for hstrerror()
+	  on platforms that need it (thanks Peter Bray)
+	* [r1390] nslcd/common.h, nslcd/pam.c: put all HOST_NAME_MAX
+	  fallbacks in common.h and fall back to _POSIX_HOST_NAME_MAX
+	  (thanks Peter Bray)
+
+2011-03-11  arthur
+
+	* [r1389] Makefile.am: ensure that permissions are sane in the
+	  distributed tarball
+	* [r1388] nslcd/myldap.c: fix problem with endless loop on
+	  incorrect password
+	* [r1387] nslcd/common.c, nslcd/common.h: move HOST_NAME_MAX
+	  fallback definition to header file
+
+2011-03-10  arthur
+
+	* [r1385] ChangeLog, NEWS, TODO, configure.ac, debian/changelog,
+	  man/nslcd.8.xml, man/nslcd.conf.5.xml, man/pam_ldap.8.xml: get
+	  files ready for 0.8.1 release
+	* [r1384] Makefile.am, common/tio.c, compat/Makefile.am,
+	  compat/ether.h, compat/ldap_compat.h, compat/pam_get_authtok.c,
+	  man/Makefile.am, nslcd/attmap.c, nslcd/attmap.h, nslcd/common.c,
+	  nslcd/common.h, nss/prototypes.h, pam/common.h, pynslcd/ether.py,
+	  pynslcd/pynslcd.py, pynslcd/tio.py: update copyright headers to
+	  add missing years
+
+2011-03-09  arthur
+
+	* [r1383] nslcd/pam.c: fix compiler warning
+	* [r1382] nslcd/pam.c, nslcd/passwd.c: properly handle
+	  user-not-found errors when doing authentication (CVE-2011-0438)
+
+2011-03-06  arthur
+
+	* [r1381] pynslcd/Makefile.am, pynslcd/netgroup.py,
+	  pynslcd/pynslcd.py: implement module for netgroup lookups
+	* [r1380] pynslcd/Makefile.am, pynslcd/network.py,
+	  pynslcd/pynslcd.py: add network name lookups
+	* [r1379] tests/test.ldif.gz, tests/test_nsscmds.sh: add some test
+	  groups and add the arthur user to them to test whether all are
+	  returned correctly
+	* [r1378] Makefile.am: pass --enable-pynslcd with distcheck
+	* [r1377] pynslcd/Makefile.am: clean up compiled python files
+	* [r1376] pynslcd/host.py: fix search filter objectClass for hosts
+	* [r1375] nslcd/log.c, nslcd/log.h, nslcd/nslcd.c: ensure that
+	  session id is only logged while handling a connection
+	* [r1374] man/nslcd.conf.5.xml: note that attribute mapping
+	  expressions cannot be used for all attributes
+
+2011-02-14  arthur
+
+	* [r1373] pynslcd/Makefile.am, pynslcd/host.py, pynslcd/pynslcd.py,
+	  pynslcd/tio.py: implement module for hostname lookups
+	* [r1372] pynslcd/ether.py: fix comment
+	* [r1371] pynslcd/Makefile.am, pynslcd/debugio.py: clean up and add
+	  missing files to installation
+
+2011-02-11  arthur
+
+	* [r1370] configure.ac: fix FreeBSD nss_ldap soname (as seen in
+	  current FreeBSD packaging)
+	* [r1369] nslcd/nslcd.c: create the directory for the socket and
+	  pidfile
+
+2011-01-29  arthur
+
+	* [r1368] man/nslcd.conf.5.xml: document a proper replacement for
+	  pam_check_host_attr (thanks Luca Capello) and add a section on
+	  quoting
+	* [r1367] man/nslcd.conf.5.xml, nslcd/cfg.c, nslcd/common.c,
+	  nslcd/common.h, nslcd/pam.c: implement a fqdn variable that can
+	  be used inside pam_authz_search filters
+
+2011-01-23  arthur
+
+	* [r1366] man/nslcd.conf.5.xml: name pam_check_service_attr and
+	  pam_check_host_attr options in manual page and indicate how
+	  pam_authz_search replaces them
+
+2011-01-05  arthur
+
+	* [r1365] AUTHORS, HACKING, configure.ac, debian/copyright,
+	  nss/Makefile.am, nss/bsdnss.c, nss/exports.freebsd,
+	  nss/prototypes.h: add FreeBSD support, partially imported from
+	  the FreeBSD port (thanks to Jacques Vidrine, Artem Kazakov and
+	  Alexander V. Chernikov)
+
+2011-01-01  arthur
+
+	* [r1364] nss/Makefile.am: put solnss.c under
+	  EXTRA_nss_ldap_so_SOURCES
+	* [r1363] man/nslcd.8.xml, man/nslcd.conf.5.xml,
+	  man/pam_ldap.8.xml: add ids to options so we can more easily
+	  reference them from elsewhere (especially useful for generated
+	  HTML)
+	* [r1362] nslcd/myldap.c: include definition of rc in all code
+	  paths because it's used most of the time
+	* [r1361] configure.ac: fix quoting of NSS_MODULE_OBJS expression
+	  to one that is supported by more shells
+	* [r1360] nss/Makefile.am: ensure that solnss.c ends up in tarball
+