Sophie

• Search
• Distribution
• Explorer
• Source & Patches
• Chat
• Help
• About

distrib > Scientific%20Linux > 5x > x86_64 > by-pkgid > 89b21245cc712b80fc95942f83cfbdd3 > changelog

openldap-servers-2.3.43-29.el5_11.x86_64.rpm

• Info
• Deps
• Files
• Scripts
• ChangeLog
• Location
• Others versions
• Analyse

• Fri Sep 18 2015 Matúš Honěk <mhonek@redhat.com> - 2.3.43-29

  - CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)

• Thu Apr 10 2014 Jan Synáček <jsynacek@redhat.com> - 2.3.43-28

  - fix: syncprov psearch race condition (#999811)

• Fri Feb 14 2014 Jan Synáček <jsynacek@redhat.com> - 2.3.43-27

  - fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)

• Wed Jun 27 2012 Jan Vcelak <jvcelak@redhat.com> 2.3.43-26

  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)

• Thu Jan 12 2012 Jan Vcelak <jvcelak@redhat.com> 2.3.43-25

  - fix: disable static libraries stripping (#684630)

• Wed Nov 2 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-24

  - fix: memory leaks in syncrepl and slap_sl_free (#741184)

• Thu Sep 22 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-23

  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)

• Tue Aug 30 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-22

  - new feature: honor priority/weight with ldap_domain2hostlist (#733435)

• Tue Aug 23 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-21

  - fix: strict aliasing warnings during package build (#732381)

• Fri Aug 19 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-20

  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)

• Tue Mar 1 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-19

  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success (#680486)

• Wed Feb 16 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-18

  - fix: slapd concurrent access to connections causes slapd to silently die (#641953)

• Fri Jan 21 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-17

  - backport: ldap_init_fd() API function

• Thu Jan 13 2011 Jan Vcelak <jvcelak@redhat.com> 2.3.43-16

  - fix: ppolicy crash while replace-deleting userPassword attribute (#665951)

• Wed Nov 17 2010 Jan Vcelak <jvcelak@redhat.com> 2.3.43-15

  - fix: connection freeze when using TLS (#591419)

• Sat Aug 7 2010 Adam Tkac <atkac redhat com> - 2.3.43-14

  - don't remove task twice during replication

• Wed Jun 23 2010 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13

  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
  (#606375, patch backported by Jan Vcelak )

• Thu Feb 18 2010 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-12

  - updated spec file, so the compat-libs linking patch applies
  correctly

• Tue Feb 9 2010 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-11

  - backported patch to handle null character in TLS
  certificates (#560912)

• Tue Feb 9 2010 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-10

  - updated chase-referral patch to compile cleanly
  - updated init script (#562714)

• Sat Jan 30 2010 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-9

  - updated ldap.sysconf to include SLAPD_LDAP, SLAPD_LDAPS and
  SLAPD_LDAPI options (#559520)

• Tue Nov 17 2009 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-8

  - fixed connection freeze when TLSVerifyClient = allow (#509230)

• Thu Nov 12 2009 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-7

  - fixed chasing referrals in libldap (#510522)

• Thu Nov 12 2009 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6

  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)

• Wed Nov 11 2009 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5

  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)

• Sat Oct 31 2009 Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4

  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)

• Fri Nov 7 2008 Jan Safranek <jsafranek@redhat.com> 2.3.43-3

  - fix smbk5pwd linking (#329441)

• Fri Aug 29 2008 Jan Safranek <jsafranek@redhat.com> 2.3.43-2

  - run ldconfig on openldap-devel install/uninstall to prevent dangling
  symlinks (#460307)

• Tue Aug 12 2008 Jan Safranek <jsafranek@redhat.com> 2.3.43-1

  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
  - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
  database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
  connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
  of the slurpd process (#428638)

• Wed Apr 9 2008 Jan Safranek <jsafranek@redhat.com> 2.3.27-11

  - fix syncrepl timeout option (#440693)
  - fix CVE-2008-2952 (#453640)

• Tue Feb 5 2008 Jan Safranek <jsafranek@redhat.com> 2.3.27-10

  - fix CVE-2007-6698 (#431408)

• Tue Nov 6 2007 Jan Safranek <jsafranek@redhat.com> 2.3.27-9

  - fix security issue CVE-2007-5707 (#360011)
  - fix manual bind timeout (#230388)

• Tue Jun 26 2007 Jan Safranek <jsafranek@redhat.com> 2.3.27-8

  - Fix initscript return codes again (#242665)

• Fri Jun 22 2007 Jan Safranek <jsafranek@redhat.com> 2.3.27-7

  - Fix package upgrade when previous instance was never started
  (part of #240834)

• Wed Jun 13 2007 Jan Safranek <jsafranek@redhat.com> 2.3.27-6

  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)

• Sat Dec 23 2006 Jay Fenlason <fenlason@redhat.com> 2.3.27-5

  - Include the -getdn patch to close
  bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
  Resolves: rhbz#214768

• Mon Oct 2 2006 Jesse Keating <jkeating@redhat.com> - 2.3.27-4

  - rebuilt for unwind info generation, broken in gcc-4.1.1-21

• Tue Sep 19 2006 Jay Fenlason <fenlason@redhat.com> 2.3.27-3

  - Include --enable-multimaster to close
  bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
  bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
  This closes one part of
  bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
  ldap.init, as suggested in
  bz#199322: RFE: perform cleanup in ldap.init

• Sat Aug 26 2006 Jay Fenlason <fenlason@redhat.com> 2.3.27-2

  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
  on recursive attemts to ldap_initialize.

• Thu Jul 13 2006 Jesse Keating <jkeating@redhat.com> - 2.3.24-2.1

  - rebuild

• Thu Jun 8 2006 Jay Fenlason <fenlason@redhat.com> 2.3.24-2

  - New upstream version

• Fri Apr 28 2006 Jay Fenlason <fenlason@redhat.com> 2.3.21-2

  - Upgrade to 2.3.21
  - Add two upstream patches for db-4.4.20

• Tue Feb 14 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-4

  - Re-fix ldap.init

• Sat Feb 11 2006 Jesse Keating <jkeating@redhat.com> - 2.3.19-3.1

  - bump again for double-long bug on ppc(64)

• Fri Feb 10 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-3

  - Modify the ldap.init script to call runuser correctly.

• Wed Feb 8 2006 Jesse Keating <jkeating@redhat.com> - 2.3.19-2.1

  - rebuilt for new gcc4.1 snapshot and glibc changes

• Wed Jan 11 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-2

  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
  pid file and args file in an ldap-owned openldap subdirectory under
  /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
  hand-moving slapd and slurpd to _sbindir, and recreating symlinks
  by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
  than as root. This solves
  bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
  database is slapcatted to /var/lib/ldap/upgrade.ldif and the
  database files are saved to /var/lib/ldap/rpmorig. On post, if
  /var/lib/ldap/upgrade.ldif exists, it is slapadded. This means that
  on upgrades from 2.3.16-2 to higher versions, the database files may
  be automatically upgraded. Unfortunatly, because of the changes to
  the preun scriptlet, users have to do the slapcat, etc by hand when
  upgrading to 2.3.16-2. Also note that the /var/lib/ldap/rpmorig
  files need to be removed by hand because automatically removing your
  emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20. For a clean upgrade, this will
  require that users slapcat their databases into a temp file, move
  /var/lib/ldap someplace safe, upgrade the openldap rpms, then
  slapadd the temp file.

• Sat Dec 10 2005 Jesse Keating <jkeating@redhat.com>

  - rebuilt

• Tue Nov 22 2005 Jay Fenlason <fenlason@redhat.com> 2.3.11-3

  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
  compat-openldap- to close
  bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'

• Fri Nov 11 2005 Jay Fenlason <fenlason@redhat.com> 2.3.11-2

  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
  number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
  the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
  server to work. Nalin wrote the patch, based on my
  broken first attempt.

• Fri Nov 11 2005 Tomas Mraz <tmraz@redhat.com> 2.2.29-3

  - rebuilt against new openssl

• Tue Oct 11 2005 Jay Fenlason <fenlason@redhat.com> 2.2.29-2

  - New upstream version.

• Fri Sep 30 2005 Jay Fenlason <fenlason@redhat.com> 2.2.28-2

  - Upgrade to nev upstream version. This makes the 2.2.*-hop patch obsolete.

• Tue Aug 23 2005 Jay Fenlason <fenlason@redhat.com> 2.2.26-2

  - Move the slapd.pem file to /etc/pki/tls/certs
  and edit the -config patch to match to close
  bz#143393 Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc

• Fri Aug 12 2005 Jay Fenlason <fenlason@redhat.com>

  - Add the tls-fix-connection-test patch to close
  bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
  OpenLDAP ITS #3578

• Sat Aug 6 2005 Nalin Dahyabhai <nalin@redhat.com>

  - fix typo in ldap.init (call $klist instead of klist, from Charles Lopes)

• Fri May 20 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1

  - run slaptest with the -u flag if no id2entry db files are found, because
  you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
  TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
  with embedded whitespace (#158111)

• Thu May 5 2005 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
  directories listed as the storage location for a given suffix in slapd.conf
  contains a readable file named __db.001 (#118678)

• Wed Apr 27 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.25-1

  - update to 2.2.25 (release)

• Wed Apr 27 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1

  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
  file but not exported

• Wed Mar 2 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-4

  - prefer libresolv to libbind

• Wed Mar 2 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-3

  - add bind-libbind-devel and libtool-ltdl-devel buildprereqs

• Wed Mar 2 2005 Tomas Mraz <tmraz@redhat.com> 2.2.23-2

  - rebuild with openssl-0.9.7e

• Tue Feb 1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1

  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files

• Wed Jan 5 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1

  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls

• Wed Nov 3 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.17-0

  - rebuild

• Fri Oct 1 2004 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586

• Wed Aug 25 2004 Nalin Dahyabhai <nalin@redhat.com>

  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
  from which it's compiled, otherwise would have to start 2.2.15 at release 3
  so that it upgrades correctly

• Fri Aug 20 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2

  - build a separate, static set of libraries for openldap-devel with the
  non-standard ntlm bind patch applied, for use by the evolution-connector
  package (#125579), and installing them under
  %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
  so that evolution-connector's source package can require a version of
  openldap-devel which provides what it wants

• Tue Jul 27 2004 Nalin Dahyabhai <nalin@redhat.com>

  - update administrator guide

• Thu Jun 17 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1

  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
  on systems with nptl now

• Wed Jun 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-0

  - preliminary 2.2.13 update
  - move ucdata to the -servers subpackage where it belongs

• Wed Jun 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-1

  - build experimental sql backend as a loadable module

• Wed Jun 16 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed May 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-0

  - update to 2.1.30

• Fri May 14 2004 Thomas Woerner <twoerner@redhat.com> 2.1.29-3

  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)

• Sat Apr 17 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-2

  - move rfc documentation from main to -devel (#121025)

• Thu Apr 15 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-1

  - rebuild

• Wed Apr 7 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-0

  - update to 2.1.29 (stable 20040329)

• Tue Mar 30 2004 Nalin Dahyabhai <nalin@redhat.com>

  - don't build servers with --with-kpasswd, that option hasn't been recognized
  since 2.1.23

• Wed Mar 3 2004 Elliot Lee <sopwith@redhat.com> 2.1.25-5.1

  - rebuilt

• Tue Feb 24 2004 Tim Waugh <twaugh@redhat.com> 2.1.25-5

  - Use ':' instead of '.' as separator for chown.

• Sat Feb 14 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed Feb 11 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-4

  - remove 'reload' from the init script -- it never worked as intended (#115310)

• Thu Feb 5 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-3

  - commit that last fix correctly this time

• Wed Feb 4 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2

  - fix incorrect use of find when attempting to detect a common permissions
  error in the init script (#114866)

• Sat Jan 17 2004 Nalin Dahyabhai <nalin@redhat.com>

  - add bug fix patch for DB 4.2.52

• Fri Jan 9 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1

  - change logging facility used from daemon to local4 (#112730, reversing #11047)
  BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.

• Thu Jan 8 2004 Nalin Dahyabhai <nalin@redhat.com>

  - incorporate fix for logic quasi-bug in slapd's SASL auxprop code (Dave Jones)

• Fri Dec 19 2003 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.1.25, now marked STABLE

• Fri Dec 12 2003 Jeff Johnson <jbj@jbj.org> 2.1.22-9

  - update to db-4.2.52.

• Fri Oct 24 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8

  - add another section to the ABI note for the TLS libdb so that it's marked as
  not needing an executable stack (from Arjan Van de Ven)

• Fri Oct 17 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-7

  - force bundled libdb to not use O_DIRECT by making it forget that we have it

• Thu Oct 16 2003 Nalin Dahyabhai <nalin@redhat.com>

  - build bundled libdb for slapd dynamically to make the package smaller,
  among other things
  - on tls-capable arches, build libdb both with and without shared posix
  mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
  them for the migration cases where it's used
  - update to MigrationTools 45

• Fri Sep 26 2003 Jeff Johnson <jbj@jbj.org> 2.1.22-6.1

  - upgrade db-4.1.25 to db-4.2.42.

• Sat Sep 13 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6

  - drop rfc822-MailMember.schema, merged into upstream misc.schema at some point

• Thu Aug 28 2003 Nalin Dahyabhai <nalin@redhat.com>

  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
  missed by Jim Richardson

• Sat Jul 26 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5

  - enable rlookups, they don't cost anything unless also enabled in slapd's
  configuration file

• Wed Jul 23 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-4

  - rebuild

• Fri Jul 18 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-3

  - rebuild

• Thu Jul 17 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-2

  - rebuild

• Wed Jul 16 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-1

  - build

• Tue Jul 15 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0

  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5

• Tue Jul 1 2003 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.1.22

• Thu Jun 5 2003 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed Jun 4 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1

  - update to 2.1.21
  - enable ldap, meta, monitor, null, rewrite in slapd

• Tue May 20 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-1

  - update to 2.1.20

• Fri May 9 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1

  - update to 2.1.19

• Tue May 6 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-1

  - switch to db with crypto

• Sat May 3 2003 Nalin Dahyabhai <nalin@redhat.com>

  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes

• Thu May 1 2003 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
  contains is only used if slapd is built with v2 kbind support

• Tue Feb 11 2003 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8

  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference

• Thu Jan 23 2003 Tim Powers <timp@redhat.com>

  - rebuilt

• Wed Jan 8 2003 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-6

  - rebuild

• Tue Dec 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-5

  - rebuild

• Sat Dec 14 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-4

  - check for setgid as well

• Fri Dec 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-3

  - rebuild

• Fri Dec 13 2002 Nalin Dahyabhai <nalin@redhat.com>

  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
  1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available

• Tue Nov 12 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-2

  - add patches for db 4.1.24 from sleepycat's updates page

• Tue Nov 5 2002 Nalin Dahyabhai <nalin@redhat.com>

  - add a sample TLSCACertificateFile directive to the default slapd.conf

• Wed Sep 25 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-1

  - update to 2.0.27

• Sat Sep 21 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.26-1

  - update to 2.0.26, db 4.1.24.NC

• Sat Sep 14 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2

  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
  /usr/kerberos/lib, which might not be right on some arches

• Tue Aug 27 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1

  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
  slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd

• Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-5

  - rebuild in new environment

• Thu Feb 21 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-3

  - use the gdbm backend again

• Tue Feb 19 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-2

  - make slapd.conf read/write by root, read by ldap

• Mon Feb 18 2002 Nalin Dahyabhai <nalin@redhat.com>

  - fix corner case in sendbuf fix
  - 2.0.23 now marked "stable"

• Wed Feb 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-1

  - update to 2.0.23

• Sat Feb 9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2

  - switch to an internalized Berkeley DB as the ldbm back-end (NOTE: this breaks
  access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
  is used by the server for checking {kerberos} passwords)

• Sat Feb 2 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.22-1

  - update to 2.0.22

• Sun Jan 27 2002 Florian La Roche <Florian.LaRoche@redhat.de> 2.0.21-5

  - prereq chkconfig for server subpackage

• Sat Jan 26 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-4

  - update migration tools to version 40

• Thu Jan 24 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-3

  - free ride through the build system

• Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-2

  - update to 2.0.21, now earmarked as STABLE

• Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2

  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess

• Tue Jan 15 2002 Nalin Dahyabhai <nalin@redhat.com>

  - and one for Raw Hide

• Tue Jan 15 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-0.7

  - build for RHL 7/7.1

• Tue Jan 15 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-1

  - update to 2.0.20 (security errata)

• Fri Dec 21 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.19-1

  - update to 2.0.19

• Wed Nov 7 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.18-2

  - fix the commented-out replication example in slapd.conf

• Sat Oct 27 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.18-1

  - update to 2.0.18

• Tue Oct 16 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.17-1

  - update to 2.0.17

• Thu Oct 11 2001 Nalin Dahyabhai <nalin@redhat.com>

  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads

• Fri Sep 28 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.15-2

  - rebuild, 2.0.15 is now designated stable

• Sat Sep 22 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.15-1

  - update to 2.0.15

• Tue Sep 11 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.14-1

  - update to 2.0.14

• Sat Sep 1 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1

  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
  other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release

• Wed Aug 22 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.11-13

  - install saucer correctly

• Fri Aug 17 2001 Nalin Dahyabhai <nalin@redhat.com>

  - try to fix ldap_set_options not being able to set global options related
  to TLS correctly

• Fri Aug 10 2001 Nalin Dahyabhai <nalin@redhat.com>

  - don't attempt to create a cert at install-time, it's usually going
  to get the wrong CN (#51352)

• Tue Aug 7 2001 Nalin Dahyabhai <nalin@redhat.com>

  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
  shared libraries to other shared libraries (which is needed in order
  for prelinking to work)

• Sat Aug 4 2001 Nalin Dahyabhai <nalin@redhat.com>

  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
  compliance) by name (follows from #43079, which split cyrus-sasl's
  cram-md5 and digest-md5 modules out into cyrus-sasl-md5)

• Sat Jul 21 2001 Nalin Dahyabhai <nalin@redhat.com>

  - enable passwd back-end (noted by Alan Sparks and Sergio Kessler)

• Thu Jul 19 2001 Nalin Dahyabhai <nalin@redhat.com>

  - start to prep for errata release

• Sat Jul 7 2001 Nalin Dahyabhai <nalin@redhat.com>

  - link libldap with liblber

• Thu Jul 5 2001 Than Ngo <than@redhat.com> 2.0.11-6

  - add symlink liblber.so libldap.so and libldap_r.so in /usr/lib

• Wed Jul 4 2001 Nalin Dahyabhai <nalin@redhat.com>

  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
  hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
  --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
  more (#43159)

• Tue Jul 3 2001 Nalin Dahyabhai <nalin@redhat.com>

  - make config files noreplace (#42831)

• Wed Jun 27 2001 Nalin Dahyabhai <nalin@redhat.com>

  - actually change the default config to use the dummy cert
  - update to MigrationTools 38

• Tue Jun 26 2001 Nalin Dahyabhai <nalin@redhat.com>

  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script

• Thu Jun 21 2001 Nalin Dahyabhai <nalin@redhat.com>

  - tweak migrate_automount and friends so that they can be run from anywhere

• Fri May 25 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.11

• Thu May 24 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.10

• Tue May 22 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.9

• Wed May 16 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.8
  - drop patch which came from upstream

• Sat Mar 3 2001 Nalin Dahyabhai <nalin@redhat.com>

  - rebuild in new environment

• Fri Feb 9 2001 Nalin Dahyabhai <nalin@redhat.com>

  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory

• Tue Feb 6 2001 Nalin Dahyabhai <nalin@redhat.com>

  - update to MigrationTools 36, adds netgroup support

• Tue Jan 30 2001 Nalin Dahyabhai <nalin@redhat.com>

  - fix thinko in that last patch

• Fri Jan 26 2001 Nalin Dahyabhai <nalin@redhat.com>

  - try to work around some buffering problems

• Wed Jan 24 2001 Nalin Dahyabhai <nalin@redhat.com>

  - gettextize the init script

• Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com>

  - gettextize the init script

• Sat Jan 13 2001 Nalin Dahyabhai <nalin@redhat.com>

  - move the RFCs to the base package (#21701)
  - update to MigrationTools 34

• Thu Jan 11 2001 Nalin Dahyabhai <nalin@redhat.com>

  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
  a /etc/sysconfig/ldap file (#23549)

• Sat Dec 30 2000 Nalin Dahyabhai <nalin@redhat.com>

  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
  per mail from the ldap-nis mailing list

• Wed Dec 6 2000 Nalin Dahyabhai <nalin@redhat.com>

  - force -fPIC so that shared libraries don't fall over

• Tue Dec 5 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
  (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
  ldaps in addition to the regular STARTTLS (suggested by Del)

• Tue Nov 28 2000 Nalin Dahyabhai <nalin@redhat.com>

  - correct mismatched-dn-cn bug in migrate_automount.pl

• Tue Nov 21 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to the correct OIDs for automount and automountInformation
  - add notes on upgrading

• Wed Nov 8 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.7
  - drop chdir patch (went mainstream)

• Fri Nov 3 2000 Nalin Dahyabhai <nalin@redhat.com>

  - change automount object classes from auxiliary to structural

• Wed Nov 1 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to Migration Tools 27
  - change the sense of the last simple patch

• Thu Oct 26 2000 Nalin Dahyabhai <nalin@redhat.com>

  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
  the child thread which listens have different pids

• Thu Oct 12 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
  our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script

• Tue Oct 10 2000 Nalin Dahyabhai <nalin@redhat.com>

  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration

• Fri Oct 6 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson

• Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries

• Sat Sep 23 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.4

• Sat Sep 16 2000 Nalin Dahyabhai <nalin@redhat.com>

  - remove prereq on /etc/init.d (#17531)
  - update to 2.0.3
  - add saucer to the included clients

• Thu Sep 7 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.1

• Sat Sep 2 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 2.0.0
  - patch to build against MIT Kerberos 1.1 and later instead of 1.0.x

• Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>

  - remove that pesky default password
  - change "Copyright:" to "License:"

• Mon Aug 14 2000 Nalin Dahyabhai <nalin@redhat.com>

  - adjust permissions in files lists
  - move libexecdir from %{_prefix}/sbin to %{_sbindir}

• Sat Aug 12 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add migrate_automount.pl to the migration scripts set

• Wed Aug 9 2000 Nalin Dahyabhai <nalin@redhat.com>

  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries

• Tue Aug 1 2000 Nalin Dahyabhai <nalin@redhat.com>

  - change logging facility used from local4 to daemon (#11047)

• Fri Jul 28 2000 Nalin Dahyabhai <nalin@redhat.com>

  - split off clients and servers to shrink down the package and remove the
  base package's dependency on Perl
  - make certain that the binaries have sane permissions

• Tue Jul 18 2000 Nalin Dahyabhai <nalin@redhat.com>

  - move the init script back

• Fri Jul 14 2000 Nalin Dahyabhai <nalin@redhat.com>

  - tweak the init script to only source /etc/sysconfig/network if it's found

• Thu Jul 13 2000 Prospector <bugzilla@redhat.com>

  - automatic rebuild

• Tue Jul 11 2000 Nalin Dahyabhai <nalin@redhat.com>

  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts

• Fri Jul 7 2000 Nalin Dahyabhai <nalin@redhat.com>

  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d

• Wed Jul 5 2000 Nalin Dahyabhai <nalin@redhat.com>

  - prereq initscripts
  - make migration scripts use mktemp

• Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com>

  - do condrestart in post and stop in preun
  - move init script to /etc/init.d

• Sat Jun 17 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
  /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run

• Tue Jun 6 2000 Nalin Dahyabhai <nalin@redhat.com>

  - FHS tweaks
  - fix for compiling with libdb2

• Fri May 5 2000 Bill Nottingham <notting@redhat.com>

  - minor tweak so it builds on ia64

• Thu May 4 2000 Nalin Dahyabhai <nalin@redhat.com>

  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch

• Wed May 3 2000 Nalin Dahyabhai <nalin@redhat.com>

  - fix segfaults from queries with commas in them in in.xfingerd (bug #11111)

• Wed Apr 26 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
  any non-root user
  - remove test suite from %build because of weirdness in the build system

• Thu Apr 13 2000 Nalin Dahyabhai <nalin@redhat.com>

  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems

• Tue Feb 15 2000 Bill Nottingham <notting@redhat.com>

  - start earlier, stop later.

• Fri Feb 4 2000 Nalin Dahyabhai <nalin@redhat.com>

  - auto rebuild in new environment (release 4)

• Wed Feb 2 2000 Nalin Dahyabhai <nalin@redhat.com>

  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
  like the sources define it, too
  - mark *.ph files in migration tools as config files

• Sat Jan 22 2000 Nalin Dahyabhai <nalin@redhat.com>

  - update to 1.2.9

• Tue Sep 14 1999 Bill Nottingham <notting@redhat.com>

  - strip files

• Sun Sep 12 1999 Bill Nottingham <notting@redhat.com>

  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package

• Sat Aug 28 1999 Jeff Johnson <jbj@redhat.com>

  - missing ;; in init script reload) (#4734).

• Wed Aug 25 1999 Cristian Gafton <gafton@redhat.com>

  - move stuff from /usr/libexec to /usr/sbin
  - relocate config dirs to /etc/openldap

• Tue Aug 17 1999 Bill Nottingham <notting@redhat.com>

  - initscript munging

• Thu Aug 12 1999 Cristian Gafton <gafton@redhat.com>

  - add the migration tools to the package

• Sat Aug 7 1999 Cristian Gafton <gafton@redhat.com>

  - upgrade to 1.2.6
  - add rc.d script
  - split -devel package

• Mon Feb 8 1999 Preston Brown <pbrown@redhat.com>

  - upgrade to latest stable (1.1.4), it now uses configure macro.

• Sat Jan 16 1999 Bill Nottingham <notting@redhat.com>

  - build on arm, glibc2.1

• Thu Oct 29 1998 Preston Brown <pbrown@redhat.com>

  - initial cut.
  - patches for signal handling on the alpha