diff --git a/.authconfig.metadata b/.authconfig.metadata
new file mode 100644
index 0000000..d0fab70
--- /dev/null
+++ b/.authconfig.metadata
@@ -0,0 +1 @@
+d292d761587662fd6ae51951061cecbd581e6c04 SOURCES/authconfig-6.2.8.tar.bz2
diff --git a/README.md b/README.md
deleted file mode 100644
index 0e7897f..0000000
--- a/README.md
+++ /dev/null
@@ -1,5 +0,0 @@
-The master branch has no content
-
-Look at the c7 branch if you are working with CentOS-7, or the c4/c5/c6 branch for CentOS-4, 5 or 6
-
-If you find this file in a distro specific branch, it means that no content has been checked in yet
diff --git a/SOURCES/authconfig-6.2.8-paramcheck.patch b/SOURCES/authconfig-6.2.8-paramcheck.patch
new file mode 100644
index 0000000..d97ef0c
--- /dev/null
+++ b/SOURCES/authconfig-6.2.8-paramcheck.patch
@@ -0,0 +1,26 @@
+diff -up authconfig-6.2.8/authconfig.glade.paramcheck authconfig-6.2.8/authconfig.glade
+--- authconfig-6.2.8/authconfig.glade.paramcheck 2013-11-01 16:08:01.000000000 +0100
++++ authconfig-6.2.8/authconfig.glade 2013-11-01 16:48:44.384106338 +0100
+@@ -638,7 +638,7 @@
+ False
+ True
+ True
+- 9 5 30 1 10 0
++ 9 6 30 1 10 0
+ True
+ True
+
+diff -up authconfig-6.2.8/authconfig.py.paramcheck authconfig-6.2.8/authconfig.py
+--- authconfig-6.2.8/authconfig.py.paramcheck 2013-11-01 16:08:01.000000000 +0100
++++ authconfig-6.2.8/authconfig.py 2013-11-01 16:47:30.468477475 +0100
+@@ -534,6 +534,10 @@ class Authconfig:
+ self.printError(_("The passminclass value must not be negative"))
+ self.options.passminclass = None
+ self.retval = 3
++ if val > 4:
++ self.printError(_("The passminclass value must not be higher than 4"))
++ self.options.passminclass = None
++ self.retval = 3
+ except ValueError:
+ self.printError(_("The passminclass option value is not an integer"))
+ self.options.passminclass = None
diff --git a/SPECS/authconfig.spec b/SPECS/authconfig.spec
new file mode 100644
index 0000000..ad1d4cb
--- /dev/null
+++ b/SPECS/authconfig.spec
@@ -0,0 +1,874 @@
+Summary: Command line tool for setting up authentication from network services
+Name: authconfig
+Version: 6.2.8
+Release: 1%{?dist}
+License: GPLv2+
+ExclusiveOS: Linux
+Group: System Environment/Base
+URL: https://fedorahosted.org/authconfig
+Source: https://fedorahosted.org/releases/a/u/%{name}/%{name}-%{version}.tar.bz2
+Patch1: authconfig-6.2.8-paramcheck.patch
+Requires: newt-python, pam >= 0.99.10.0, python, libpwquality > 0.9
+Conflicts: pam_krb5 < 1.49, samba-common < 3.0, samba-client < 3.0
+Conflicts: nss_ldap < 254, sssd < 0.99.1
+Conflicts: freeipa-client < 2.2.0, ipa-client < 2.2.0
+BuildRequires: glib2-devel, python >= 2.6, python-devel
+BuildRequires: desktop-file-utils, intltool, gettext, perl-XML-Parser
+Requires: /usr/bin/openssl
+
+%description
+Authconfig is a command line utility which can configure a workstation
+to use shadow (more secure) passwords. Authconfig can also configure a
+system to be a client for certain networked user information and
+authentication schemes.
+
+%package gtk
+Summary: Graphical tool for setting up authentication from network services
+Group: System Environment/Base
+Requires: %{name} = %{version}-%{release}, pygtk2-libglade >= 2.14.0
+Requires: usermode-gtk, hicolor-icon-theme
+
+%description gtk
+Authconfig-gtk is a GUI program which can configure a workstation
+to use shadow (more secure) passwords. Authconfig-gtk can also configure
+a system to be a client for certain networked user information and
+authentication schemes.
+
+%prep
+%setup -q -n %{name}-%{version}
+%patch1 -p 1 -b .paramcheck
+
+%build
+%configure
+make
+
+%install
+make install DESTDIR=$RPM_BUILD_ROOT
+rm $RPM_BUILD_ROOT/%{_libdir}/python*/site-packages/acutilmodule.a
+rm $RPM_BUILD_ROOT/%{_libdir}/python*/site-packages/acutilmodule.la
+rm $RPM_BUILD_ROOT/%{_datadir}/%{name}/authconfig-tui.py
+ln -s authconfig.py $RPM_BUILD_ROOT/%{_datadir}/%{name}/authconfig-tui.py
+
+%find_lang %{name}
+find $RPM_BUILD_ROOT%{_datadir} -name "*.mo" | xargs ./utf8ify-mo
+
+%post gtk
+touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
+
+%postun gtk
+if [ $1 -eq 0 ] ; then
+ touch --no-create %{_datadir}/icons/hicolor &>/dev/null
+ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
+fi
+
+%posttrans gtk
+gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
+
+%files -f %{name}.lang
+%defattr(-,root,root,-)
+%doc COPYING NOTES TODO README.samba3
+%ghost %config(noreplace) %{_sysconfdir}/sysconfig/authconfig
+%ghost %config(noreplace) %{_sysconfdir}/pam.d/system-auth-ac
+%ghost %config(noreplace) %{_sysconfdir}/pam.d/password-auth-ac
+%ghost %config(noreplace) %{_sysconfdir}/pam.d/fingerprint-auth-ac
+%ghost %config(noreplace) %{_sysconfdir}/pam.d/smartcard-auth-ac
+%ghost %config(noreplace) %{_sysconfdir}/pam.d/postlogin-ac
+%{_sbindir}/cacertdir_rehash
+%{_sbindir}/authconfig
+%{_sbindir}/authconfig-tui
+%exclude %{_mandir}/man8/system-config-authentication.*
+%exclude %{_mandir}/man8/authconfig-gtk.*
+%{_mandir}/man8/*
+%{_mandir}/man5/*
+%{_libdir}/python*/site-packages/acutilmodule.so
+%dir %{_datadir}/%{name}
+%{_datadir}/%{name}/authconfig.py*
+%{_datadir}/%{name}/authconfig-tui.py*
+%{_datadir}/%{name}/authinfo.py*
+%{_datadir}/%{name}/shvfile.py*
+%{_datadir}/%{name}/dnsclient.py*
+%{_datadir}/%{name}/msgarea.py*
+%attr(700,root,root) %dir %{_localstatedir}/lib/%{name}
+
+%files gtk
+%defattr(-,root,root,-)
+%{_bindir}/authconfig
+%{_bindir}/authconfig-tui
+%{_bindir}/authconfig-gtk
+%{_bindir}/system-config-authentication
+%{_sbindir}/authconfig-gtk
+%{_sbindir}/system-config-authentication
+%{_mandir}/man8/system-config-authentication.*
+%{_mandir}/man8/authconfig-gtk.*
+%{_datadir}/%{name}/authconfig.glade
+%{_datadir}/%{name}/authconfig-gtk.py*
+%config(noreplace) %{_sysconfdir}/pam.d/authconfig-gtk
+%config(noreplace) %{_sysconfdir}/pam.d/system-config-authentication
+%config(noreplace) %{_sysconfdir}/security/console.apps/authconfig-gtk
+%config(noreplace) %{_sysconfdir}/security/console.apps/system-config-authentication
+%config(noreplace) %{_sysconfdir}/pam.d/authconfig
+%config(noreplace) %{_sysconfdir}/pam.d/authconfig-tui
+%config(noreplace) %{_sysconfdir}/security/console.apps/authconfig
+%config(noreplace) %{_sysconfdir}/security/console.apps/authconfig-tui
+%{_datadir}/applications/*
+%{_datadir}/icons/hicolor/16x16/apps/system-config-authentication.*
+%{_datadir}/icons/hicolor/22x22/apps/system-config-authentication.*
+%{_datadir}/icons/hicolor/24x24/apps/system-config-authentication.*
+%{_datadir}/icons/hicolor/32x32/apps/system-config-authentication.*
+%{_datadir}/icons/hicolor/48x48/apps/system-config-authentication.*
+%{_datadir}/icons/hicolor/256x256/apps/system-config-authentication.*
+
+%changelog
+* Fri Nov 1 2013 Tomáš Mráz - 6.2.8-1
+- detect invalid LDAP uri and report error
+- fix handling of IPA domain join errors and uninstall
+- add support for winbind authentication over Kerberos 5
+- set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
+- better error checking for password quality options
+
+* Fri Aug 23 2013 Tomáš Mráz - 6.2.7-1
+- samba-winbind-clients package contains the nsswitch and pam modules (#919117)
+- do not drop sss from nsswitch.conf on --update (#980861)
+- writing out smartcard/fingerprint auth policy to dconf (original patch by
+ Ray Strode) (#990625)
+- document other possible return codes from authconfig invocation (#991804)
+- print error message if config file save fails (#994596)
+- never stop rpcbind (#990788)
+- do not disable sssd.service when --enablesssd is used (#953851)
+- revert use_first_pass addition to pam_sss in password stack (#953116)
+
+* Thu Mar 28 2013 Tomáš Mráz - 6.2.6-1
+- add use_first_pass to pam_sss in password stack
+- more robust initialization of sssdConfig
+- check whether base DN value is a real base DN
+- use non-deprecated pam_pwquality option authtok_type= instead of type=
+- update lastlog for su
+
+* Wed Dec 5 2012 Tomas Mraz - 6.2.5-1
+- fix missing cache_credentials option when saving sssd.conf
+- do not try to start/restart sssd with incomplete default domain
+- add autofs to sssd.conf activated services
+- add pam_winbind to session pam modules
+
+* Tue Sep 25 2012 Tomas Mraz - 6.2.4-1
+- backup also passwd and friends when toggling enableshadow (#853074)
+- use the new smb.conf idmap config range syntax (#850824)
+- use local_users_only with pam_pwquality (#849072)
+- enable the authlogin_nsswitch_use_ldap SELinux boolean when enabling LDAP (#846084)
+- preserve the value of cache_credentials in sssd.conf
+- do not fail PAM session if pam_lastlog module fails
+- use sssd also for automount map (#847823)
+- enable deferred_kinit if cache_credentials is enabled (#814384)
+
+* Thu Jul 19 2012 Tomas Mraz - 6.2.3-1
+- fix missing linkage to libresolv
+- add missing requires of openssl binary for cacertdir_rehash
+- install missing packages via PackageKit (original patch by Stef Walter)
+- add pam_lastlog to postlogin PAM configuration to display failed login
+ attempts
+- enable the allow_ypbind SELinux boolean when enabling NIS
+- try to preserve the dns_lookup_kdc and dns_lookup_realm settings
+- do not use cached_login in password stack for pam_winbind
+
+* Tue Mar 27 2012 Tomas Mraz - 6.2.2-1
+- use the new --noac option with ipa-client-install
+- add sss to the services entry in nsswitch.conf
+- call res_init() to reread resolv.conf before res_send()
+- updated translations
+
+* Sat Feb 18 2012 Tomas Mraz - 6.2.1-1
+- fix traceback in the command-line ui (#794900)
+- updated translations
+
+* Thu Feb 16 2012 Tomas Mraz - 6.2.0-1
+- add support for password requirements settings
+- add support for joining IPAv2 domains
+
+* Thu Nov 24 2011 Tomas Mraz - 6.1.17-1
+- fix wrong exit value of --savebackup action
+- do not crash on broken SSSD configuration
+- use pam_pwquality instead of pam_cracklib
+
+* Mon Sep 12 2011 Tomas Mraz - 6.1.16-1
+- fix broken --help output for languages without spaces (#734355)
+- enable translation of the --help option description (#734303)
+- updated translations from Transifex
+
+* Fri Jul 22 2011 Tomas Mraz - 6.1.15-1
+- add support for reading UID_MIN from login.defs (#717112)
+- use systemctl if available instead of chkconfig/service (#696490)
+- mention the /usr/sbin/authconfig in the manual page (#698377)
+- drop the no longer touched files from authconfig manual page
+ add the newly touched ones (#708850)
+
+* Tue May 17 2011 Tomas Mraz - 6.1.14-1
+- new hi-res icon (#702666)
+- use krb5_server instead of krb5_kdcip (#677766)
+- print error message if authconfig-gtk is not run within proper X environment
+
+* Tue Feb 8 2011 Tomas Mraz - 6.1.13-1
+- support for postlogin PAM configuration and pam_ecryptfs
+ patch by Paolo Bonzini
+
+* Thu Dec 23 2010 Tomas Mraz - 6.1.12-1
+- give proper warnings on missing packages if configuration
+ supported by SSSD (#663882)
+- do not delete mdns4_minimal from nsswitch.conf (#645295)
+- updated translations from Transifex
+
+* Wed Oct 6 2010 Tomas Mraz - 6.1.11-1
+- do not restart services when configuration did not change
+- dissallow setting identity or authentication services with missing
+ installed files (#590447)
+- eliminate unnecessary updates of PAM config files and sssd.conf (#639978)
+- updated translations from Transifex
+
+* Fri Sep 17 2010 Tomas Mraz - 6.1.10-1
+- netgroups are now supported by sssd
+- updated translations from Transifex
+
+* Wed Sep 15 2010 Tomas Mraz - 6.1.9-1
+- removed support for setting up pam_smb_auth authentication - long
+ ago deprecated
+- added code for better synchronization of files with duplicate
+ settings such as login.defs, libuser.conf and system-auth-ac (#565521)
+
+* Tue Aug 10 2010 Tomas Mraz - 6.1.8-1
+- add pam_systemd to the PAM configuration (#612712)
+- fix force smarcard setting read when Kerberos enabled (#620475)
+- fix duplication of dialogs when the revert is cancelled (#621632)
+- add --enable/disableforcelegacy option (#605857)
+
+* Thu Jul 15 2010 Tomas Mraz - 6.1.7-1
+- fix startup of NIS services (#614856)
+- fix packages for LDAP id and auth in authconfig-tui
+
+* Thu Jun 10 2010 Tomas Mraz - 6.1.6-1
+- remove superfluous space in nsswitch.conf (#595265)
+- always write to 'default' domain in sssd.conf only (#598558)
+- update pam and nsswitch config only when needed
+
+* Wed May 19 2010 Tomas Mraz - 6.1.5-1
+- fix FreeIPA configuration (#589751)
+- disable the krb5 inputs if using dns discovery (#591681)
+- fix GUI crash on revert
+- add pam_sss to password-auth password stack (#592872)
+
+* Tue May 4 2010 Tomas Mraz - 6.1.4-1
+- set the new icon also for the windows (#583330)
+- updated translations
+- disable non-smartcard PAM stacks if require smart card for authentication
+- remove pam_pkcs11 from the password PAM stack
+- set smartcard action also in gconf
+- properly set the options for pam_pkcs11
+- do not write pam_password option to nslcd.conf (#585953)
+
+* Wed Apr 7 2010 Tomas Mraz - 6.1.3-1
+- manual page improvements (#578258, #526164)
+- use ldap instead of sss for nsswitch maps unsupported by sssd (#578325)
+- call cacertdir_rehash also in case ldaps: server uri is used (#578219)
+- ldap_uri must be comma separated (#579881)
+- updated translations
+- new icon (#540249)
+
+* Mon Mar 29 2010 Tomas Mraz - 6.1.2-1
+- fix SSSD provider change (#577263)
+- drop LDAP authentication from FreeIPA choice
+- updated translations
+- use pam_oddjob_mkhomedir if the appropriate package is installed (#552485)
+
+* Fri Mar 19 2010 Tomas Mraz - 6.1.1-1
+- added credential caching enablement for SSSD
+- added msgarea for LDAP authentication requirements
+- fix spurious missing modules warnings and other minor changes
+
+* Thu Mar 18 2010 Tomas Mraz - 6.1.0-1
+- new very much simplified GUI
+- use SSSD instead of legacy ldap/krb5 if the configuration is
+ supported
+- drop krb4 config file write (#569612)
+- handle exception when running with insufficient priviledges (#572534)
+- support RFC2307bis LDAP schema
+
+* Tue Feb 2 2010 Tomas Mraz - 6.0.2-1
+- fix regression from the nss_ldap/pam_ldap nslcd split
+
+* Thu Jan 14 2010 Tomas Mraz - 6.0.1-1
+- do not try to write smartcard settings if pam_pkcs11 is not
+ installed (#528458)
+- make position of sss in nsswitch consistent with position in
+ system-auth (#552501)
+- support nss_ldap/pam_ldap split and nslcd
+
+* Thu Dec 10 2009 Tomas Mraz - 6.0.0-1
+- support for SSSD enabling/disabling and basic support for
+ SSSD domain setup
+- safe atomic overwrites of the config files
+
+* Wed Nov 11 2009 Tomas Mraz - 5.4.14-1
+- fixed missing truncation in the backup restores (#533881)
+
+* Fri Sep 25 2009 Tomas Mraz - 5.4.13-1
+- updated translations
+
+* Thu Sep 17 2009 Tomas Mraz - 5.4.12-1
+- fixed indentation error (#523534)
+
+* Mon Sep 14 2009 Tomas Mraz - 5.4.11-1
+- updated translations (#522444)
+- silence failures when restarting services (#500385)
+
+* Thu Apr 23 2009 Tomas Mraz - 5.4.10-1
+- update PAM configuration when updating from old authconfig versions (#495924)
+
+* Fri Apr 10 2009 Tomas Mraz - 5.4.9-1
+- add support for multiple PAM auth stacks (by Ray Strode) (#494874)
+
+* Thu Apr 2 2009 Tomas Mraz - 5.4.8-1
+- fix regression in authconfig-tui (#493576)
+
+* Mon Jan 26 2009 Tomas Mraz - 5.4.7-1
+- move the consolehelper symlinks to the gtk subpackage to remove
+ the dependency on usermode in the base package (#480014)
+- return nonzero exit codes on some more possible errors (#440461)
+
+* Fri Dec 19 2008 Tomas Mraz - 5.4.6-1
+- fix typo in the fingerprint reader patch (#477080)
+
+* Thu Nov 27 2008 Tomas Mraz - 5.4.5-1
+- improved cacertdir_rehash to be more robust
+- add fingerprint reader support (original patch by Bastien Nocera) (#469418)
+- remove pam_smb support from GUI and TUI
+- fix nscd pid file path (#471642)
+
+* Tue Aug 5 2008 Tomas Mraz - 5.4.4-1
+- do not call domainname when run with --nostart (#457697)
+
+* Fri Jun 6 2008 Tomas Mraz - 5.4.3-1
+- remove the --enableldapssl alias and add some help to GUI tooltips
+ to clear up some confusion (#220973)
+- add option --enablepreferdns to prefer DNS over NIS or WINS in
+ hostname resolution
+
+* Tue Apr 8 2008 Tomas Mraz - 5.4.2-1
+- read wins setting from nsswitch.conf correctly (#440459)
+- do not ignore --enablemd5/--disablemd5 options
+
+* Tue Mar 11 2008 Tomas Mraz - 5.4.1-1
+- fixed backup directory in Makefile and spec (#437040)
+
+* Mon Mar 10 2008 Tomas Mraz - 5.4.0-1
+- include config-util in console.apps files
+- add support for saving/restoring backups of configuration
+ files affected by authconfig (#433776)
+- improve the authconfig manual page (#432023, #432938)
+
+* Tue Jan 29 2008 Tomas Mraz - 5.3.21-1
+- correct the fix for bug #237956
+
+* Fri Jan 18 2008 Tomas Mraz - 5.3.20-1
+- update translations
+
+* Wed Jan 9 2008 Tomas Mraz - 5.3.19-1
+- support new sha256 and sha512 password hash algorithms
+- add support for pam_mkhomedir (#212790)
+- do not crash in authconfig --help (#237956) - thanks to Andy Shevchenko for
+ the idea how to fix that
+- setup password hash algorithm in /etc/login.defs (#218652)
+- update translations
+
+* Tue Sep 25 2007 Tomas Mraz - 5.3.18-1
+- improve krb5.conf handling (#238766)
+
+* Fri Aug 24 2007 Tomas Mraz - 5.3.17-1
+- remove obsolete pam_krb5afs support (#250704)
+- add support for pam_access (#251360)
+- update translations
+
+* Tue Aug 21 2007 Tomas Mraz - 5.3.16-3
+- license tag fix
+
+* Thu Aug 9 2007 Tomas Mraz - 5.3.16-2
+- require newt-python (#251359)
+
+* Wed Jul 25 2007 Tomas Mraz - 5.3.16-1
+- add support for winbind offline login (#232955)
+
+* Wed Jul 18 2007 Tomas Mraz - 5.3.15-1
+- dnsclient fixes by Simo Sorce
+- add Categories to .desktop file (#245868)
+- fixed traceback when calling joinDomain (#245374)
+- disable smart card action setting when gnome-screensaver
+ not installed (#209643)
+- do not change protocols and services in nsswitch.conf (#236669)
+
+* Tue Jun 12 2007 Tomas Mraz - 5.3.14-1
+- authconfig.8 synopsis fixed (patch by Eric Raymond) (#220574)
+- drop explicit requirement on python version as it is now
+ generated automatically
+- improve writing /etc/samba/smb.conf (based on patch by
+ Simo Sorce)
+- merge changes upstream
+
+* Fri May 4 2007 Tomas Mraz - 5.3.13-4
+- local nis domain is obtained from sysconfig/network (#235927)
+- set "local authorization is sufficient" on by default
+
+* Thu Apr 5 2007 Tomas Mraz - 5.3.13-3
+- minor changes and cleanups for merge review (#225293)
+
+* Mon Mar 19 2007 Tomas Mraz - 5.3.13-2
+- nss_ldap is now in /usr/lib (#232975)
+
+* Tue Dec 12 2006 Tomas Mraz - 5.3.13-1
+- another traceback in --probe and other fixes (#218874)
+- make smbRealm a default realm when appropriate (#219300)
+- added missing languages in LINGUAS
+
+* Wed Nov 29 2006 Tomas Mraz - 5.3.12-1
+- when pam_krb5 auth fails with smartcard login don't enforce it
+ in the account stack (#214931)
+- updated translations (#216570)
+- winbind should be added only to user tables (#216862)
+
+* Fri Oct 20 2006 Tomas Mraz - 5.3.11-1
+- fixed --smartcardaction command line option (#211552)
+
+* Fri Oct 6 2006 Tomas Mraz - 5.3.10-1
+- fixed passwd PAM stack when PKCS11 enabled (#195960)
+- make authconfig --probe work again (#209676)
+
+* Mon Oct 2 2006 Tomas Mraz - 5.3.9-1
+- updated translations (#207095)
+- correctly write pam_smb.conf with only one server specified (#208365)
+
+* Thu Sep 21 2006 Tomas Mraz - 5.3.8-1
+- move options to another tab to fit on 800x600 screen (#207357)
+
+* Tue Sep 19 2006 Tomas Mraz - 5.3.7-1
+- improve PAM setup for smart card login
+- support smart card login with kerberos (PKINIT)
+- add pam_pkcs11 to password PAM stack
+
+* Mon Sep 4 2006 Tomas Mraz - 5.3.6-1
+- skip pam_unix for session for crond service
+- fixed a bug in saving when smartcard settings changed (#204838)
+- removed allow_ypbind setsebool as it is now handled in ypbind
+
+* Tue Aug 29 2006 Tomas Mraz - 5.3.5-1
+- improve smart card related UI strings
+- removed possibility to set smart card type from authconfig-gtk
+ as only coolkey will be supported for now
+
+* Thu Aug 24 2006 Tomas Mraz - 5.3.4-1
+- pass options given to authconfig-gtk to authconfig (#203955)
+
+* Sun Jul 23 2006 Ray Strode - 5.3.3-2
+- write out new "wait_for_card" config option if we're
+ forcing smart card authentication
+- add "use_uid" option to smart card pam_succeed_if line to
+ work around bug where pam_succeed_if checks user information
+ even in cases where the conditional doesn't depend on it.
+- remove unimplemented "logout" smart card removal action from
+ settings
+- remove unnecessary "card_only" argument
+
+* Fri Jul 21 2006 Tomas Mraz - 5.3.3-1
+- don't start sceventd when smartcard login is enabled
+- improve pam config for smartcard login
+
+* Tue Jul 18 2006 Tomas Mraz - 5.3.2-1
+- don't require pam_pkcs11 to run
+
+* Tue Jul 18 2006 Tomas Mraz - 5.3.1-1
+- screensavers should be authenticated by smartcard too
+- add feature to download a CA certificate for LDAP from
+ an URL (#197103)
+- add pam_keyinit session module to the PAM configuration (#198638)
+
+* Fri Jul 7 2006 Tomas Mraz - 5.3.0-1
+- added support for smartcard authentication
+- fixed parsing kerberos realms
+
+* Thu May 18 2006 Tomas Mraz - 5.2.5-1
+- write ldap servers as URIs and not HOSTs (#191842)
+- fix a typo in --test output
+- updated summary, converted changelog to UTF-8
+
+* Fri May 12 2006 Tomas Mraz - 5.2.4-1
+- added crond to the services restarted after firstboot (#187334)
+- when checking nscd status redirect output to /dev/null (#188555)
+
+* Tue Mar 21 2006 Tomas Mraz - 5.2.3-1
+- make smb.conf and krb5.conf loading more robust (#185766)
+
+* Mon Feb 27 2006 Tomas Mraz - 5.2.2-1
+- add try_first_pass option to pam_unix for better integration
+ with individual service configurations (#182350)
+- updated translations
+
+* Mon Feb 20 2006 Tomas Mraz - 5.2.1-1
+- don't crash in TUI when some options aren't set (#182151)
+
+* Fri Feb 3 2006 Tomas Mraz - 5.2.0-1
+- redesigned GUI (#178112)
+- added man page for system-config-ac (#179584)
+- disable authentication of system accounts by network services
+ by default, added option for changing that (#179009)
+- updated translations, new languages
+
+* Mon Jan 9 2006 Tomas Mraz - 5.1.2-1
+- fixed regression when saving nsswitch.conf
+
+* Fri Jan 6 2006 Tomas Mraz - 5.1.1-1
+- print warning if PAM module is missing when the PAM configuration
+ is saved (#168880)
+
+* Fri Dec 23 2005 Tomas Mraz
+- make child dialog preset code more robust (#176462)
+
+* Sat Dec 17 2005 Tomas Mraz - 5.1.0-1
+- update only configuration files which settings were modified (#72290)
+
+* Mon Dec 5 2005 Tomas Mraz - 5.0.4-1
+- don't ignore krb5realm command line option (#174838)
+- read dns_lookup_realm and dns_lookup_kdc values correctly
+- the PAM configuration is now written in system-auth-ac file
+ which is then symlinked from system-auth, the symlink is not
+ overwritten so local PAM configuration is now possible (#165342)
+
+* Mon Nov 7 2005 Tomas Mraz - 5.0.3-1
+- add symlinks to python scripts in sbindir
+- don't override nullok setting from system-auth (#96996)
+
+* Fri Oct 14 2005 Tomas Mraz - 5.0.2-1
+- authinfo-tui.py is now symlink
+- reword the CA certificate message (#154317)
+- use include instead of pam_stack in pam config
+- don't break yp.conf with multiple domains (#127306)
+
+* Mon Sep 5 2005 Tomas Mraz - 5.0.1-1
+- fixed a few errors catched by pychecker
+
+* Sat Sep 3 2005 Tomas Mraz - 5.0.0-1
+- C code completely rewritten in Python
+- some bugs fixed in the process (and no doubt new introduced)
+- TUI deprecated, opens only when run as authconfig-tui
+
+* Mon Jun 20 2005 Tomas Mraz - 4.6.13-1
+- set domain and ypserver option correctly when multiple servers
+ specified in kickstart (#159214)
+
+* Tue Apr 12 2005 Tomas Mraz - 4.6.12-1
+- replaced deprecated gtk.TRUE/FALSE (#153034)
+- updated translations
+
+* Mon Mar 14 2005 Tomas Mraz
+- propagate the --enablewinbindauth option to the configuration (#151018)
+
+* Fri Mar 4 2005 Tomas Mraz - 4.6.11-1
+- changed version propagation
+
+* Thu Mar 3 2005 Tomas Mraz
+- updated translations
+- fixed build on gcc4
+
+* Wed Feb 23 2005 Tomas Mraz - 4.6.10-1
+- updated translations
+
+* Thu Feb 10 2005 Tomas Mraz - 4.6.9-1
+- improved the code that writes tls_cacertdir to ldap.conf
+
+* Tue Jan 25 2005 Tomas Mraz
+- renamed functions in authconfigmodule to be more clear
+- implemented cacertdir for LDAP with TLS
+
+* Mon Jan 24 2005 Tomas Mraz
+- fixed a bug in authinfo_differs when called from python
+
+* Fri Dec 17 2004 Tomas Mraz - 4.6.8-1
+- add option for making local authorization sufficient for local users
+ this is attempt to 'solve/workaround' the problem with blocking local logins by
+ pulling out network cable (#115181)
+
+* Wed Dec 15 2004 Tomas Mraz
+- remove dependency on nscd
+- don't show warning messages when switching options off
+
+* Mon Dec 6 2004 Tomas Mraz - 4.6.7-1
+- updated translations
+- winbind in authconfig-gtk.py was setting the nsswitch.conf on the auth tab
+- use GtkComboBox instead of deprecated GtkOptionMenu
+- disable options with not installed binaries, remove unnecessary deps of
+ authconfig-gtk
+
+* Thu Nov 18 2004 Tomas Mraz - 4.6.6-1
+- merged patches from dist
+- fix versioning
+
+* Mon Nov 8 2004 Jeremy Katz - 4.6.5-6
+- rebuild against python 2.4
+
+* Thu Oct 28 2004 Dan Walsh
+- Fix setsebool patch to turn off boolean
+
+* Thu Oct 28 2004 Dan Walsh
+- Add setsebool for NIS
+
+* Fri Oct 15 2004 Tomas Mraz
+- force broken_shadow option on network auth (#136760)
+
+* Fri Oct 15 2004 Tomas Mraz
+- force restart of autofs on firstboot call when using NIS (#133035, #124498)
+
+* Thu Oct 07 2004 Tomas Mraz
+- require python to install (#134654)
+
+* Mon Oct 04 2004 Jindrich Novy 4.6.5-1
+- updated translations from upstream
+- autogeneration of build stripts in prep phase
+
+* Thu Sep 30 2004 Jindrich Novy
+- fixed man page
+- added dependency on nscd
+
+* Wed Sep 29 2004 Jindrich Novy 4.6.4-6
+- regenerated build scripts
+
+* Wed Sep 29 2004 Jindrich Novy 4.6.4-5
+- fixed all po files to translate correctly messages with modified accelerators (#133742)
+- added translations for Arabic, Bulgarian and other languages (#133716, #133158)
+
+* Wed Sep 22 2004 Jindrich Novy 4.6.4-4
+- added "quiet" option to pam_success_if PAM module in sytem-auth (#133179)
+
+* Mon Sep 13 2004 Jindrich Novy 4.6.4-3
+- corrected package dependencies #132411
+- regenerated glade.strings.h #132369
+
+* Wed Aug 25 2004 Jindrich Novy 4.6.4-2
+- modified authconfig-gtk interface to fit lower resolution screens (#127175)
+- modified accelerators in authconfig-gtk (#125797)
+- updated package dependencies (#125306)
+
+* Tue Aug 24 2004 Jindrich Novy
+- updated configure scripts
+- warnfixes and minor hacks
+
+* Mon Jun 7 2004 Nalin Dahyabhai 4.6.4-1
+- tweak account management to fix #55193 correctly
+- require anything we might want to run in the gui subpackage because it
+ doesn't warn about missing things and you don't have a terminal to see
+ error messages about missing commands
+- properly display the domain in the GUI join dialog (#124621)
+
+* Tue May 11 2004 Nalin Dahyabhai 4.6.3-1
+- omit the "ads" or "rpc" when calling "net join", Samba's smarter now (#122802)
+- properly warn about missing "net" (samba-client) and libnss_winbind and
+ pam_winbind (samba-common) in text mode (#122802)
+
+* Wed Apr 21 2004 Nalin Dahyabhai 4.6.2-1
+- learn all about pam_passwdqc
+- preserve arguments to pam_cracklib and pam_passwdqc
+- short-circuit PAM authorization checks for users with UID < 100
+- remove redhat-config-authentication as a way to invoke the GUI tool (#115977)
+
+* Fri Feb 6 2004 Nalin Dahyabhai 4.6.1-1
+- fix man page: --enableldapssl should be --enableldaptls
+- make --enableldapssl an alias for --enableldaptls
+
+* Thu Jan 8 2004 Nalin Dahyabhai 4.6-1
+- authconfig-gtk.py: require rhpl, which is required by the script (#104209)
+- both: require usermode (authconfig-gtk transitively), else leave a dangling
+ symlink (#104209)
+- the great redhat-config-authentication/system-config-authentication renaming,
+ as was foretold in the fedora-config-list archives
+
+* Wed Jan 7 2004 Nalin Dahyabhai
+- preserve "compat" if it's used in /etc/nsswitch.conf
+
+* Tue Nov 18 2003 Nalin Dahyabhai 4.4-1
+- add options for toggling krb5's use of DNS
+
+* Mon Nov 17 2003 Nalin Dahyabhai
+- rework tui to include winbind options. there wasn't enough room in the old
+ dialog to include the important options, so the whole thing's been reworked
+
+* Thu Nov 13 2003 Nalin Dahyabhai
+- conflict with older versions of samba which expect different configuration
+
+* Mon Nov 10 2003 Nalin Dahyabhai
+- initial support for configuring winbind
+
+* Tue Oct 28 2003 Nalin Dahyabhai
+- make pam_cracklib requisite instead of required in generated PAM configs
+
+* Wed Oct 22 2003 Bill Nottingham 4.3.8-1
+- rebuild with current translations
+
+* Thu Aug 21 2003 Nalin Dahyabhai 4.3.7-2
+- make the tarball name include the release number
+
+* Thu Aug 21 2003 Nalin Dahyabhai 4.3.7-1
+- authconfig-gtk: condrestart certain additional services if invoked with
+ the --firstboot flag (half of #91268, needs cooperating firstboot)
+- translation updates
+
+* Mon Jul 7 2003 Nalin Dahyabhai 4.3.6-1
+- translation updates
+
+* Mon Jun 30 2003 Nalin Dahyabhai
+- add 'redhat-config-authentication' as an alias for authconfig-gtk
+- make authconfig-gtk exec authconfig if gui startup fails and it looks like
+ we're connected to a tty
+
+* Thu Jun 05 2003 Elliot Lee
+- rebuilt
+
+* Mon May 5 2003 Nalin Dahyabhai 4.3.5-1
+- translation updates
+- close unusable file descriptors if locking fails
+
+* Tue Feb 18 2003 Nalin Dahyabhai 4.3.4-1
+- learn how to toggle defaults/crypt_style in /etc/libuser.conf (#79337)
+
+* Fri Feb 7 2003 Nalin Dahyabhai 4.3.3-1
+- look in /lib64 for modules for nsswitch and PAM by default on
+ x86_64, ppc64, and s390x (#83049)
+
+* Wed Jan 22 2003 Tim Powers
+- rebuilt
+
+* Mon Nov 4 2002 Nalin Dahyabhai 4.3.2-1
+- update translations
+- update copyright strings (only took 10 months!)
+
+* Wed Oct 23 2002 Nalin Dahyabhai 4.3.1-1
+- require a version of PAM (0.75-43) which supports $ISA
+- use $ISA in our own PAM config files
+
+* Tue Oct 22 2002 Nalin Dahyabhai
+- add $ISA to the name of the directory in which we expect PAMs to be stored
+
+* Fri Sep 20 2002 Nalin Dahyabhai 4.3-1
+- build with -fPIC, necessary on some arches
+
+* Tue Sep 3 2002 Nalin Dahyabhai 4.2.11-3
+- update translations
+
+* Thu Aug 29 2002 Trond Eivind Glomsrød 4.2.12-2
+- Update translations
+
+* Fri Aug 23 2002 Nalin Dahyabhai 4.2.11-1
+- modify spacing and layout in authconfig-gtk
+
+* Thu Aug 15 2002 Nalin Dahyabhai 4.2.10-4
+- translation updates
+- rebuild to pick up dependency changes
+
+* Mon Jul 29 2002 Nalin Dahyabhai 4.2.10-3
+- include the userhelper configuration file
+- require sufficiently-new pam package in the gui subpackage
+
+* Fri Jul 26 2002 Nalin Dahyabhai 4.2.10-2
+- actually include the icon in the package
+- translation updates
+
+* Tue Jul 23 2002 Nalin Dahyabhai 4.2.10-1
+- use desktop-file-install (#69376)
+- include an icon for the menu item (#68577)
+
+* Wed Jul 17 2002 Nalin Dahyabhai 4.2.9-2
+- own the pkgdatadir
+- pull in translation updates
+
+* Mon Jun 3 2002 Nalin Dahyabhai 4.2.9-1
+- add --enable-experimental to enable some of that experimental code
+- add --enable-local to enable local policies
+- update translations
+
+* Thu May 30 2002 Nalin Dahyabhai 4.2.8-7
+- use the current revision of python by default
+- get the intltool/gettext situation sorted out
+
+* Thu May 23 2002 Tim Powers
+- automated rebuild
+
+* Fri May 3 2002 Nalin Dahyabhai 4.2.8-5
+- remove bogus buildrequires left over from when authconfig-gtk was C code
+- buildrequires python-devel in addition to python (to build the python module,
+ but we still need python to byte-compile the python script)
+
+* Thu Apr 18 2002 Nalin Dahyabhai 4.2.8-4
+- add missing translations back in
+- convert .mo files at install-time
+
+* Mon Apr 15 2002 Nalin Dahyabhai 4.2.8-3
+- refresh translations
+
+* Wed Apr 10 2002 Nalin Dahyabhai 4.2.8-2
+- actually add the .desktop files
+
+* Tue Apr 9 2002 Nalin Dahyabhai 4.2.8-1
+- refresh translations
+- destroy the python object correctly
+
+* Tue Mar 26 2002 Nalin Dahyabhai 4.2.7-2
+- add the .desktop file
+
+* Mon Mar 25 2002 Nalin Dahyabhai 4.2.7-1
+- rework the auth stack logic to require all applicable auth modules
+
+* Fri Mar 1 2002 Nalin Dahyabhai 4.2.6-1
+- allow pam_krb5afs to be used for account management, too
+
+* Mon Feb 25 2002 Nalin Dahyabhai 4.2.5-3
+- refresh translations
+
+* Fri Feb 22 2002 Nalin Dahyabhai 4.2.5-2
+- refresh translations
+
+* Tue Feb 12 2002 Nalin Dahyabhai 4.2.5-1
+- actually free authInfo structures when asked to
+- use pam_krb5's account management facilities
+- conflict with versions of pam_krb5 which don't offer account management
+
+* Mon Feb 4 2002 Nalin Dahyabhai 4.2.4-1
+- add python bindings for the back-end
+- redo the gui so that it exercises the python bindings
+- take a shot at getting authconfig to work in a firstboot container
+
+* Thu Jan 31 2002 Nalin Dahyabhai 4.2.3-4
+- rebuild again
+
+* Wed Jan 30 2002 Tim Powers 4.2.3-3
+- rebuilt against new glib
+
+* Wed Jan 23 2002 Nalin Dahyabhai 4.2.3-2
+- rebuild in new environment
+
+* Thu Jan 10 2002 Nalin Dahyabhai 4.2.3-1
+- add some more experimental options
+- clean up the glade files a bit
+- don't destroy a garbage pointer on main cancel, destroy the main dialog
+
+* Thu Jan 3 2002 Nalin Dahyabhai 4.2.2-2
+- bump release and rebuild
+
+* Thu Dec 20 2001 Nalin Dahyabhai 4.2.2-1
+- make setting of experimental options only possible through
+ /etc/sysconfig/authconfig, to keep accidents from happening
+- add some more support for experimental stuff
+
+* Tue Dec 11 2001 Nalin Dahyabhai 4.2.1-1
+- fix setting of LDAP TLS option in authconfig-gtk
+- change Apply to Ok, Close to Cancel, because that's how they work
+
+* Tue Dec 11 2001 Nalin Dahyabhai 4.2-2
+- add the glade XML file to the -gtk subpackage (fix from katzj)
+
+* Mon Dec 10 2001 Nalin Dahyabhai 4.2-1
+- port to glib2
+- move post code to the back-end
+- add a libglade GUI in a -gtk subpackage
+- set up to use userhelper