4563d9
%if 0%{?fedora} >= 14 || 0%{?rhel} >= 6
4563d9
%define ldap_impl openldap
4563d9
%else
4563d9
%define ldap_impl mozldap
4563d9
%endif
4563d9
%if 0%{?fedora} >= 18 || 0%{?rhel} >= 6
4563d9
%define betxn_opts --enable-be-txns-by-default
4563d9
%else
4563d9
%define betxn_opts --disable-be-txns-by-default
4563d9
%endif
4563d9
4563d9
Name:		slapi-nis
69588d
Version:	0.56.6
169452
Release:	4%{?dist}
4563d9
Summary:	NIS Server and Schema Compatibility plugins for Directory Server
4563d9
Group:		System Environment/Daemons
4563d9
License:	GPLv2
4563d9
URL:		http://pagure.io/slapi-nis/
4563d9
Source0:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
24aca9
Source1:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
a2e462
Patch1: 	cve-2021-3480-fix.patch
a2e462
Patch2:         slapi-nis-bz1978189.patch
a2e462
Patch3:         slapi-nis-bz1958909.patch
169452
Patch4:         slapi-nis-bz2000919.patch
9c7f46
4563d9
BuildRequires:  autoconf
4563d9
BuildRequires:  automake
4563d9
BuildRequires:  libtool
4563d9
BuildRequires:	389-ds-base-devel >= 1.3.5.6, %{ldap_impl}-devel
4563d9
BuildRequires:	nspr-devel, nss-devel, /usr/bin/rpcgen
4563d9
%if 0%{?fedora} > 18 || 0%{?rhel} > 6
4563d9
BuildRequires:	libsss_nss_idmap-devel > 1.16.0-5
4563d9
%define sss_nss_opts --with-sss-nss-idmap --with-idviews
4563d9
%else
4563d9
%define sss_nss_opts %{nil}
4563d9
%endif
4563d9
BuildRequires:	pam-devel
4563d9
%if (0%{?fedora} > 14 && 0%{?fedora} < 28) || (0%{?rhel} > 6 && 0%{?rhel} < 8)
4563d9
BuildRequires:	libtirpc-devel
24aca9
%else
4563d9
BuildRequires:  libnsl2-devel
4563d9
%endif
4563d9
%if 0%{?fedora} > 27 || 0%{?rhel} > 7
4563d9
ExcludeArch: %{ix86}
4563d9
%endif
4563d9
Requires: 389-ds-base >= 1.3.5.6
4563d9
4563d9
%description
4563d9
This package provides two plugins for Red Hat and 389 Directory Server.
4563d9
4563d9
The NIS Server plugin allows the directory server to act as a NIS server
4563d9
for clients, dynamically generating and updating NIS maps according to
4563d9
its configuration and the contents of the DIT, and serving the results to
4563d9
clients using the NIS protocol as if it were an ordinary NIS server.
4563d9
4563d9
The Schema Compatibility plugin allows the directory server to provide an
4563d9
alternate view of entries stored in part of the DIT, optionally adding,
4563d9
dropping, or renaming attribute values, and optionally retrieving values
4563d9
for attributes from multiple entries in the tree.
4563d9
4563d9
%prep
4563d9
%setup -q
a2e462
%patch1 -p1
a2e462
%patch2 -p1
a2e462
%patch3 -p1
169452
%patch4 -p1
4563d9
4563d9
%build
4563d9
autoconf --force
4563d9
%configure --disable-static --with-ldap=%{ldap_impl} \
4563d9
	--with-nsswitch --with-pam --with-pam-service=system-auth \
4563d9
	%{sss_nss_opts} %{betxn_opts}
4563d9
sed -i -e 's,%{_libdir}/dirsrv/plugins/,,g' -e 's,.so$,,g' doc/examples/*.ldif
4563d9
make %{?_smp_mflags}
4563d9
4563d9
%install
4563d9
rm -rf $RPM_BUILD_ROOT
4563d9
make install DESTDIR=$RPM_BUILD_ROOT
4563d9
rm $RPM_BUILD_ROOT/%{_libdir}/dirsrv/plugins/*.la
4563d9
4563d9
%if 0
4563d9
# ns-slapd doesn't want to start in koji, so no tests get run
4563d9
%check
4563d9
make check
4563d9
%endif
4563d9
4563d9
%files
4563d9
%defattr(-,root,root,-)
4563d9
%doc COPYING NEWS README STATUS doc/*.txt doc/examples/*.ldif doc/ipa
4563d9
%{_mandir}/man1/*
4563d9
%{_libdir}/dirsrv/plugins/*.so
4563d9
%{_sbindir}/nisserver-plugin-defs
4563d9
4563d9
%changelog
169452
* Mon Sep 13 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-4
169452
- Resolves: rhbz#2000919 - memory leak in backend_search_cb
169452
a2e462
* Thu Jul 01 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
a2e462
- Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
a2e462
- Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap
a2e462
a2e462
* Wed Apr 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
a2e462
- CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
a2e462
- Resolves: rhbz#1944713
a2e462
69588d
* Fri Dec 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-1
69588d
- Upstream release 0.56.6
69588d
- Resolves rhbz#1891741
69588d
69588d
* Mon Sep 14 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-4
69588d
- Ignore unmatched searches
69588d
- Resolves: rhbz#1874015
69588d
69588d
* Thu Sep 10 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-3
69588d
- Fix memory leaks in ID views processing
69588d
- Resolves: rhbz#1875348
69588d
24aca9
* Wed May 06 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-2
24aca9
- Initialize map lock in NIS plugin
24aca9
- Resolves: rhbz#1832331
24aca9
24aca9
* Mon May 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
24aca9
- Upstream release 0.56.5
24aca9
- Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
24aca9
- Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
24aca9
9c7f46
* Fri Aug 16 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-2
9c7f46
- Resolves rhbz#1741881
9c7f46
  ns-slapd is crashing intermittently
9c7f46
4563d9
* Wed Jun 05 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-1
4563d9
- New upstream release
4563d9
- Resolves rhbz#1684563
4563d9
4563d9
* Mon Jul 23 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-7
4563d9
- 389-ds is not available on i686 architecture, don't build there
4563d9
4563d9
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-6
4563d9
- Force rebuild of configure
4563d9
4563d9
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
4563d9
- Link with libnsl explicitly in Fedora 28 or later
4563d9
- Require libnsl2-devel for build
4563d9
- Resolves rhbz#1573636
4563d9
4563d9
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-4
4563d9
- Remove tcpwrappers support as they aren't available in Fedora anymore
4563d9
4563d9
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
4563d9
- Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
4563d9
- Resolves rhbz#1556448
4563d9
- Remove outdated ExclusiveArch for RHEL6
4563d9
4563d9
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
4563d9
4563d9
* Fri Jan 19 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
4563d9
- New upstream release
4563d9
- Update links to the upstream project page and releases
4563d9
- Use extended SSSD API to signal that an entry should not be cached anymore
4563d9
- Add support for timeout-based NSS queries with libsss_nss_idmap
4563d9
4563d9
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-4
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
4563d9
4563d9
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-3
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
4563d9
4563d9
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
4563d9
4563d9
* Mon Aug 08 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.1-1
4563d9
- Support querying external users by UPN alias
4563d9
- Don't clobber target of the pblock for ID views
4563d9
4563d9
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
4563d9
- Updated upstream tarball
4563d9
4563d9
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56-1
4563d9
- Add support for changing passwords for users from a primary tree
4563d9
  - requires DS 1.3.5.6 or later
4563d9
4563d9
* Mon May 30 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-3
4563d9
- Add support to properly shutdown priming cache from RHEL 7.2.4
4563d9
4563d9
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.55-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
4563d9
4563d9
* Tue Jan 26 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
4563d9
- Support external members of IPA groups in schema compat
4563d9
- Support bind over ID overrides when uid is not overridden
4563d9
- Populate schema compat trees in parallel to LDAP server startup
4563d9
4563d9
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.54.2-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
4563d9
4563d9
* Thu Mar 26 2015 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
4563d9
- CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
4563d9
- Make sure nss_sss.so.2 module is used directly
4563d9
- Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases
4563d9
4563d9
* Thu Nov  6 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
4563d9
- support FreeIPA overrides in LDAP BIND callback
4563d9
- ignore FreeIPA override searchs outside configured schema compat subtrees
4563d9
4563d9
* Fri Oct 10 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
4563d9
- Add support for FreeIPA's ID views
4563d9
- Allow searching SSSD-provided users as memberUid case-insensitevly
4563d9
  Fixes bug #1130131
4563d9
4563d9
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-3
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
4563d9
4563d9
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
4563d9
4563d9
* Tue Apr 22 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
4563d9
- correct the default NIS map settings for hosts.byname and hosts.byaddr,
4563d9
  from report by Rik Megens
4563d9
- fix several problems when hitting out-of-memory conditions, spotted by
4563d9
  static analysis
4563d9
4563d9
* Mon Jan 20 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
4563d9
- remove ExclusiveArch if %%{rhel} is 7 or higher, because 389-ds-base gets
4563d9
  built for everything now (#1055711)
4563d9
4563d9
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 0.52-2
4563d9
- Mass rebuild 2013-12-27
4563d9
4563d9
* Mon Dec 16 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
4563d9
- correctly reflect whether or not we're built with transaction support in
4563d9
  the module's nsslapd-pluginVersion attribute
4563d9
- fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
4563d9
  would hit when removing maps or groups of maps (#1043546/#1043638)
4563d9
4563d9
* Mon Dec  9 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
4563d9
- fix another request argument memory leak in NIS server (#1040159)
4563d9
- fix miscellaneous items found by static analysis
4563d9
4563d9
* Tue Oct  1 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
4563d9
- if we get an EPIPE while registering with rpcbind, try to reconnect and
4563d9
  retransmit before giving up
4563d9
4563d9
* Thu Sep 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
4563d9
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
4563d9
  which should let us avoid deadlocks when tasks are modifying data in
4563d9
  the backend database (#1007451)
4563d9
4563d9
* Mon Aug 12 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
4563d9
- try to gracefully handle failures obtaining internal locks
4563d9
- fix locating-by-name of entries with names that require escaping
4563d9
- add self-tests for nsswitch and PAM functionality
4563d9
- make nsswitch mode properly handle user and group names with commas in them
4563d9
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
4563d9
- drop the "schema-compat-origin" attribute
4563d9
4563d9
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
4563d9
- fix building against versions of directory server older than 1.3.0, which
4563d9
  first introduced slapi_escape_filter_value()
4563d9
4563d9
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
4563d9
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
4563d9
  version 1.10 or later, where it first appeared
4563d9
4563d9
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
4563d9
- merge Alexander Bokovoy's patches to
4563d9
  - teach the schema compatibility plugin to optionally serve user and group
4563d9
    information retrieved from libc as part of a set of compat entries
4563d9
  - handle simple bind requests for those entries by calling out to PAM
4563d9
  - to rewrite the DN of incoming bind requests to compat entries to point
4563d9
    at the source entries, instead of returning a referral which most clients
4563d9
    won't handle
4563d9
- include IPA-specific docs as docs
4563d9
4563d9
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.47-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
4563d9
4563d9
* Fri May 24 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47-1
4563d9
- fix request argument memory leaks in NIS server
4563d9
- add a %%sort function
4563d9
4563d9
* Thu Apr  4 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
4563d9
- when checking if we can skip processing for a given change, pay attention to
4563d9
  whether or not the changes cause the entry to need to be added or removed
4563d9
  from a map (#912673)
4563d9
- check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
4563d9
  to update things but the server called us anyway
4563d9
4563d9
* Tue Mar 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.45-1
4563d9
- fix dispatching for multiple connected clients in the NIS plugin (#923336)
4563d9
4563d9
* Tue Feb  5 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.44-3
4563d9
- work around multilib differences in the example .ldif files (internal
4563d9
  tooling)
4563d9
4563d9
* Tue Nov 20 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
4563d9
- set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
4563d9
  which have versions of IPA < 3.0, per mkosek on freeipa-devel
4563d9
4563d9
* Wed Nov 14 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
4563d9
- add missing newline to a couple of debug log messages
4563d9
- note whether or not betxn support is compiled in as part of the
4563d9
  nsslapd-pluginVersion value we report to the server
4563d9
- register callbacks in the same order in both plugins, so that
4563d9
  their log messages are logged in the same order
4563d9
4563d9
* Tue Nov 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
4563d9
- reintroduce support for directory server transactions (nhosoi, IPA#3046)
4563d9
- control transaction support at run-time, deciding when to do things based
4563d9
  on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
4563d9
- NIS: add default settings for shadow.byname and passwd.adjunct.byname maps
4563d9
4563d9
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.42-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
4563d9
4563d9
* Wed Jun 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.42-1
4563d9
- drop support for directory server transactions (richm, #766320)
4563d9
4563d9
* Tue May 22 2012 Nalin Dahyabhai <nalin@redhat.com>
4563d9
- fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
4563d9
  of an smod along with its contents, when it just keeps the contents
4563d9
4563d9
* Tue Apr 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
4563d9
- log errors evaluating pad expressions in %%link rather than continuing on
4563d9
  until we hit an arithmetic exception (#810258)
4563d9
4563d9
* Fri Mar 30 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
4563d9
- treat padding values passed to the "link" function as expressions to be
4563d9
  evaluated rather than simply as literal values (part of #767372)
4563d9
4563d9
* Wed Mar 28 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
4563d9
- add a "default" function for trying to evaluate one expression, then
4563d9
  another, then another... (part of #767372)
4563d9
- when creating a compat entry based on a real entry, set an entryUSN based on
4563d9
  the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
4563d9
  won't have them
4563d9
4563d9
* Tue Mar  6 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.38-1
4563d9
- properly escape RDN values when building compat entries (#796509, #800625)
4563d9
4563d9
* Mon Feb 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
4563d9
- fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
4563d9
  (reported by Christian Neuhold)
4563d9
- conditionalize whether we have a build dependency on tcp_wrappers (older
4563d9
  releases) or tcp_wrappers-devel (newer releases)
4563d9
4563d9
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
4563d9
- take steps to avoid making yp_first/yp_next clients loop indefinitely
4563d9
  when a single LDAP entry produces multiple copies of the same NIS key
4563d9
  for a given map
4563d9
4563d9
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
4563d9
- add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
4563d9
  match/regmatch[i]/regsub[i], but which can handle and return lists of
4563d9
  zero or more results (part of #783274)
4563d9
4563d9
* Thu Jan 19 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
4563d9
- do entry comparisons ourselves, albeit less throughly, to avoid the worst
4563d9
  case in pathological cases (more of #771444)
4563d9
4563d9
* Tue Jan 17 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
4563d9
- get more aggressive about skipping unnecessary calculations (most of
4563d9
  the problem in #771444, though not the approach described there)
4563d9
4563d9
* Mon Jan 16 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.32-1
4563d9
- add support for directory server transactions (#758830,#766320)
4563d9
4563d9
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.28-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
4563d9
4563d9
* Wed Jan 11 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.31-1
4563d9
- fix some memory leaks (more of #771493)
4563d9
4563d9
* Tue Jan 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
4563d9
- skip recalculations when the attributes which changed don't factor into
4563d9
  our calculations (part of #771493)
4563d9
4563d9
* Wed Jan  4 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
4563d9
- add regmatchi/regsubi formatting functions which work like regmatch/regsub,
4563d9
  but do matching in a case-insensitive manner
4563d9
- update NIS map defaults to match {CRYPT} userPassword values in a
4563d9
  case-insensitive manner so that we also use {crypt} userPassword values
4563d9
- fix inconsistencies in the NIS service stemming from using not-normalized DNs
4563d9
  in some places where it should have used normalized DNs
4563d9
4563d9
* Mon Dec 19 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
4563d9
- when configured with --with-ldap=openldap, link with -lldap_r rather
4563d9
  than -lldap (rmeggins, #769107)
4563d9
4563d9
* Tue Dec  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
4563d9
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
4563d9
  (the rest of #730394/#730403)
4563d9
4563d9
* Fri Aug 12 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
4563d9
- when building for 389-ds, use libpthread's read-write locks instead of
4563d9
  NSPR's (part of #730394/#730403)
4563d9
4563d9
* Wed Jul 27 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
4563d9
- speed up building compat entries which reference thousands of other entries
4563d9
  (more of #692690)
4563d9
- 389-ds-base is apparently exclusive to x86_64 and %%{ix86} on EL, so we have
4563d9
  to be, too
4563d9
4563d9
* Fri May 13 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
4563d9
- carry our own yp.x, so that we don't get bitten if libc doesn't include
4563d9
  yp client routines
4563d9
- we need rpcgen at build-time now
4563d9
4563d9
* Thu Mar 31 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.23-1
4563d9
- speed up building compat entries with attributes with thousands of literal
4563d9
  values (#692690)
4563d9
4563d9
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.22-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
4563d9
4563d9
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.22-1
4563d9
- fix a number of scanner-uncovered defects
4563d9
4563d9
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
4563d9
- make sure we always pull in nss-devel and nspr-devel, and the right
4563d9
  ldap toolkit for the Fedora or RHEL version
4563d9
4563d9
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
4563d9
- update to 0.21
4563d9
  - schema-compat: don't look at standalone compat containers for a search,
4563d9
    since we'll already have looked at the group container
4563d9
4563d9
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.20-1
4563d9
- update to 0.20
4563d9
  - add a deref_f function
4563d9
4563d9
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.19-1
4563d9
- fix a brown-paper-bag crash
4563d9
4563d9
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
4563d9
- update to 0.18
4563d9
  - add a deref_rf function
4563d9
  - schema-compat: don't respond to search requests for which there's no backend
4563d9
  - schema-compat: add the ability to do standalone compat containers
4563d9
4563d9
* Wed Nov 17 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-6
4563d9
- revert that last change, it's unnecessary
4563d9
4563d9
* Thu Nov 11 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-5
4563d9
- build against either 389-ds-base or redhat-ds-base, whichever is probably
4563d9
  more appropriate here
4563d9
4563d9
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.17-4
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
4563d9
4563d9
* Wed Jul 15 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
4563d9
- change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
4563d9
  should avoid multilib conflicts from installing both arches of the new
4563d9
  package (#511504)
4563d9
4563d9
* Tue Jul 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-2
4563d9
- fixup changelog entries that resemble possible macro invocations
4563d9
4563d9
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-1
4563d9
- actually send portmap registrations to the right server
4563d9
4563d9
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
4563d9
- fix NIS server startup problem when no port is explicitly configured and
4563d9
  we're using portmap instead of rpcbind (#500903)
4563d9
4563d9
* Fri May  8 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
4563d9
- fix %%deref and %%referred to fail rather than return a valid-but-empty
4563d9
  result when they fail to evaluate (reported by Rob Crittenden)
4563d9
4563d9
* Wed May  6 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.14-1
4563d9
- correctly handle being loaded but disabled (#499404)
4563d9
4563d9
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.13-1
4563d9
- update to 0.13, reworking %%link() to correct some bugs (#498432)
4563d9
4563d9
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.12-1
4563d9
- correct test suite failures that 0.11 started triggering
4563d9
4563d9
* Tue Apr 28 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.11-1
4563d9
- update to 0.11 (#497904)
4563d9
4563d9
* Wed Mar  4 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.10-1
4563d9
- update to 0.10
4563d9
4563d9
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-2
4563d9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
4563d9
4563d9
* Tue Dec  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
4563d9
- make the example nsslapd-pluginpath values the same on 32- and 64-bit
4563d9
  systems, because we can depend on the directory server "knowing" which
4563d9
  directory to search for the plugins
4563d9
4563d9
* Mon Dec  8 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-1
4563d9
- update to 0.8.5 to suppress duplicate values for attributes in the schema
4563d9
  compatibility plugin
4563d9
4563d9
* Thu Dec  4 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
4563d9
- update to 0.8.4 to fix:
4563d9
  - problems updating references, particularly those for %%referred() (#474478)
4563d9
  - inability to notice internal add/modify/modrdn/delete operations (really
4563d9
    this time) (#474426)
4563d9
4563d9
* Wed Dec  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
4563d9
- update to 0.8.3 to also notice and reflect changes caused by internal
4563d9
  add/modify/modrdn/delete operations
4563d9
 
4563d9
* Wed Nov 19 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.2-1
4563d9
- update to 0.8.2 to remove a redundant read lock in the schema-compat plugin
4563d9
4563d9
* Fri Nov  7 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.9-1
4563d9
- update to 0.9
4563d9
4563d9
* Fri Oct  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.1-1
4563d9
- update to 0.8.1 to fix a heap corruption (Rich Megginson)
4563d9
4563d9
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8-1
4563d9
- update to 0.8
4563d9
4563d9
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.7-1
4563d9
- update to 0.7
4563d9
4563d9
* Wed Jul 23 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.6-1
4563d9
- rebuild (and make rpmlint happy)
4563d9
4563d9
* Wed Jul  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.2-1
4563d9
- initial package