Group :: Sistema/Base
RPM: slapi-nis
Navegação
Main Changelog Spec Patches Sources Download Gear Bugs e FR Repocop
14 setembro 2022 Stanislav Levin <slev at altlinux.org> 0.60.0-alt1
- 0.56.7 -> 0.60.0.
- Fixed build deps for envs with glibc < 2.32.
- Applied upstream fixes (RHBZ#1958909, RHBZ#1967906).
- 0.56.6 -> 0.56.7 (fixes: CVE-2021-3480).
- 0.56.3 -> 0.56.6.
- 0.56.1 -> 0.56.3.
- Built without tcp-wrappers.
- Updated spec.
- Fixed url.
- Updated to 0.56.1.
- 0.53-alt1
- correct the default NIS map settings for hosts.byname and hosts.byaddr,
from report by Rik Megens - fix several problems when hitting out-of-memory conditions, spotted by
static analysis
- remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
built for everything now (#1055711)
- Mass rebuild 2013-12-27
- correctly reflect whether or not we're built with transaction support in
the module's nsslapd-pluginVersion attribute - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
would hit when removing maps or groups of maps (#1043546/#1043638)
- fix another request argument memory leak in NIS server (#1040159)
- fix miscellaneous items found by static analysis
- if we get an EPIPE while registering with rpcbind, try to reconnect and
retransmit before giving up
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
which should let us avoid deadlocks when tasks are modifying data in
the backend database (#1007451)
- try to gracefully handle failures obtaining internal locks
- fix locating-by-name of entries with names that require escaping
- add self-tests for nsswitch and PAM functionality
- make nsswitch mode properly handle user and group names with commas in them
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
- drop the "schema-compat-origin" attribute
- fix building against versions of directory server older than 1.3.0, which
first introduced slapi_escape_filter_value()
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
version 1.10 or later, where it first appeared
- merge Alexander Bokovoy's patches to
- teach the schema compatibility plugin to optionally serve user and group
information retrieved from libc as part of a set of compat entries - handle simple bind requests for those entries by calling out to PAM
- to rewrite the DN of incoming bind requests to compat entries to point
at the source entries, instead of returning a referral which most clients
won't handle - include IPA-specific docs as docs
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
- fix request argument memory leaks in NIS server
- add a %sort function
- when checking if we can skip processing for a given change, pay attention to
whether or not the changes cause the entry to need to be added or removed
from a map (#912673) - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
to update things but the server called us anyway
- fix dispatching for multiple connected clients in the NIS plugin (#923336)
- work around multilib differences in the example .ldif files (internal
tooling)
- set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
which have versions of IPA < 3.0, per mkosek on freeipa-devel
- add missing newline to a couple of debug log messages
- note whether or not betxn support is compiled in as part of the
nsslapd-pluginVersion value we report to the server - register callbacks in the same order in both plugins, so that
their log messages are logged in the same order
- reintroduce support for directory server transactions (nhosoi, IPA#3046)
- control transaction support at run-time, deciding when to do things based
on the value of the nsslapd-pluginbetxn attribute in the plugin's entry - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
- drop support for directory server transactions (richm, #766320)
- fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
of an smod along with its contents, when it just keeps the contents
- log errors evaluating pad expressions in %link rather than continuing on
until we hit an arithmetic exception (#810258)
- treat padding values passed to the "link" function as expressions to be
evaluated rather than simply as literal values (part of #767372)
- add a "default" function for trying to evaluate one expression, then
another, then another... (part of #767372) - when creating a compat entry based on a real entry, set an entryUSN based on
the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
won't have them
- properly escape RDN values when building compat entries (#796509, #800625)
- fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
(reported by Christian Neuhold) - conditionalize whether we have a build dependency on tcp_wrappers (older
releases) or tcp_wrappers-devel (newer releases)
- take steps to avoid making yp_first/yp_next clients loop indefinitely
when a single LDAP entry produces multiple copies of the same NIS key
for a given map
- add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
match/regmatch[i]/regsub[i], but which can handle and return lists of
zero or more results (part of #783274)
- do entry comparisons ourselves, albeit less throughly, to avoid the worst
case in pathological cases (more of #771444)
- get more aggressive about skipping unnecessary calculations (most of
the problem in #771444, though not the approach described there)
- add support for directory server transactions (#758830,#766320)
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
- fix some memory leaks (more of #771493)
- skip recalculations when the attributes which changed don't factor into
our calculations (part of #771493)
- add regmatchi/regsubi formatting functions which work like regmatch/regsub,
but do matching in a case-insensitive manner - update NIS map defaults to match {CRYPT} userPassword values in a
case-insensitive manner so that we also use {crypt} userPassword values - fix inconsistencies in the NIS service stemming from using not-normalized DNs
in some places where it should have used normalized DNs
- when configured with --with-ldap=openldap, link with -lldap_r rather
than -lldap (rmeggins, #769107)
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
(the rest of #730394/#730403)
- when building for 389-ds, use libpthread's read-write locks instead of
NSPR's (part of #730394/#730403)
- speed up building compat entries which reference thousands of other entries
(more of #692690) - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
to be, too
- carry our own yp.x, so that we don't get bitten if libc doesn't include
yp client routines - we need rpcgen at build-time now
- speed up building compat entries with attributes with thousands of literal
values (#692690)
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
- fix a number of scanner-uncovered defects
- make sure we always pull in nss-devel and nspr-devel, and the right
ldap toolkit for the Fedora or RHEL version
- update to 0.21
- schema-compat: don't look at standalone compat containers for a search,
since we'll already have looked at the group container
- update to 0.20
- add a deref_f function
- fix a brown-paper-bag crash
- update to 0.18
- add a deref_rf function
- schema-compat: don't respond to search requests for which there's no backend
- schema-compat: add the ability to do standalone compat containers
- revert that last change, it's unnecessary
- build against either 389-ds-base or redhat-ds-base, whichever is probably
more appropriate here
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
- change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
should avoid multilib conflicts from installing both arches of the new
package (#511504)
- fixup changelog entries that resemble possible macro invocations
- actually send portmap registrations to the right server
- fix NIS server startup problem when no port is explicitly configured and
we're using portmap instead of rpcbind (#500903)
- fix %deref and %referred to fail rather than return a valid-but-empty
result when they fail to evaluate (reported by Rob Crittenden)
- correctly handle being loaded but disabled (#499404)
- update to 0.13, reworking %link() to correct some bugs (#498432)
- correct test suite failures that 0.11 started triggering
- update to 0.11 (#497904)
- update to 0.10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
- make the example nsslapd-pluginpath values the same on 32- and 64-bit
systems, because we can depend on the directory server "knowing" which
directory to search for the plugins
- update to 0.8.5 to suppress duplicate values for attributes in the schema
compatibility plugin
- update to 0.8.4 to fix:
- problems updating references, particularly those for %referred() (#474478)
- inability to notice internal add/modify/modrdn/delete operations (really
this time) (#474426)
- update to 0.8.3 to also notice and reflect changes caused by internal
add/modify/modrdn/delete operations
- update to 0.8.2 to remove a redundant read lock in the schema-compat plugin
- update to 0.9
- update to 0.8.1 to fix a heap corruption (Rich Megginson)
- update to 0.8
- update to 0.7
- rebuild (and make rpmlint happy)
- initial package