2f14ed
%if 0%{?fedora} >= 14 || 0%{?rhel} >= 6
2f14ed
%define ldap_impl openldap
2f14ed
%else
2f14ed
%define ldap_impl mozldap
2f14ed
%endif
2f14ed
%if 0%{?fedora} >= 18 || 0%{?rhel} >= 6
2f14ed
%define betxn_opts --enable-be-txns-by-default
2f14ed
%else
2f14ed
%define betxn_opts --disable-be-txns-by-default
2f14ed
%endif
2f14ed
2f14ed
Name:		slapi-nis
c4084f
Version:	0.56.6
46db87
Release:	4%{?dist}
2f14ed
Summary:	NIS Server and Schema Compatibility plugins for Directory Server
2f14ed
Group:		System Environment/Daemons
2f14ed
License:	GPLv2
2f14ed
URL:		http://pagure.io/slapi-nis/
2f14ed
Source0:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
2f14ed
Source1:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
63a0a3
Patch1: 	cve-2021-3480-fix.patch
63a0a3
Patch2:         slapi-nis-bz1978189.patch
63a0a3
Patch3:         slapi-nis-bz1958909.patch
46db87
Patch4:         slapi-nis-bz1967906.patch
2f14ed
2f14ed
BuildRequires:  autoconf
2f14ed
BuildRequires:  automake
2f14ed
BuildRequires:  libtool
2f14ed
BuildRequires:	389-ds-base-devel >= 1.3.5.6, %{ldap_impl}-devel
2f14ed
BuildRequires:	nspr-devel, nss-devel, /usr/bin/rpcgen
2f14ed
%if 0%{?fedora} > 18 || 0%{?rhel} > 6
2f14ed
BuildRequires:	libsss_nss_idmap-devel > 1.16.0-5
2f14ed
%define sss_nss_opts --with-sss-nss-idmap --with-idviews
2f14ed
%else
2f14ed
%define sss_nss_opts %{nil}
2f14ed
%endif
2f14ed
BuildRequires:	pam-devel
2f14ed
%if (0%{?fedora} > 14 && 0%{?fedora} < 28) || (0%{?rhel} > 6 && 0%{?rhel} < 8)
2f14ed
BuildRequires:	libtirpc-devel
2f14ed
%else
2f14ed
BuildRequires:  libnsl2-devel
2f14ed
%endif
2f14ed
%if 0%{?fedora} > 27 || 0%{?rhel} > 7
2f14ed
ExcludeArch: %{ix86}
2f14ed
%endif
2f14ed
Requires: 389-ds-base >= 1.3.5.6
2f14ed
2f14ed
%description
2f14ed
This package provides two plugins for Red Hat and 389 Directory Server.
2f14ed
2f14ed
The NIS Server plugin allows the directory server to act as a NIS server
2f14ed
for clients, dynamically generating and updating NIS maps according to
2f14ed
its configuration and the contents of the DIT, and serving the results to
2f14ed
clients using the NIS protocol as if it were an ordinary NIS server.
2f14ed
2f14ed
The Schema Compatibility plugin allows the directory server to provide an
2f14ed
alternate view of entries stored in part of the DIT, optionally adding,
2f14ed
dropping, or renaming attribute values, and optionally retrieving values
2f14ed
for attributes from multiple entries in the tree.
2f14ed
2f14ed
%prep
2f14ed
%setup -q
63a0a3
%patch1 -p1
63a0a3
%patch2 -p1
63a0a3
%patch3 -p1
46db87
%patch4 -p1
2f14ed
2f14ed
%build
2f14ed
autoconf --force
2f14ed
%configure --disable-static --with-ldap=%{ldap_impl} \
2f14ed
	--with-nsswitch --with-pam --with-pam-service=system-auth \
2f14ed
	%{sss_nss_opts} %{betxn_opts}
2f14ed
sed -i -e 's,%{_libdir}/dirsrv/plugins/,,g' -e 's,.so$,,g' doc/examples/*.ldif
2f14ed
make %{?_smp_mflags}
2f14ed
2f14ed
%install
2f14ed
rm -rf $RPM_BUILD_ROOT
2f14ed
make install DESTDIR=$RPM_BUILD_ROOT
2f14ed
rm $RPM_BUILD_ROOT/%{_libdir}/dirsrv/plugins/*.la
2f14ed
2f14ed
%if 0
2f14ed
# ns-slapd doesn't want to start in koji, so no tests get run
2f14ed
%check
2f14ed
make check
2f14ed
%endif
2f14ed
2f14ed
%files
2f14ed
%defattr(-,root,root,-)
2f14ed
%doc COPYING NEWS README STATUS doc/*.txt doc/examples/*.ldif doc/ipa
2f14ed
%{_mandir}/man1/*
2f14ed
%{_libdir}/dirsrv/plugins/*.so
2f14ed
%{_sbindir}/nisserver-plugin-defs
2f14ed
2f14ed
%changelog
46db87
* Mon Sep 13 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-4
46db87
- Resolves: rhbz#1967906 - fix memory leak in backend_search_cb
46db87
63a0a3
* Thu Jul 01 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
63a0a3
- Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
63a0a3
- Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap
63a0a3
63a0a3
* Wed Apr 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
63a0a3
- CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
63a0a3
- Resolves: rhbz#1944713
63a0a3
c4084f
* Fri Dec 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-1
c4084f
- Upstream release 0.56.6
c4084f
- Resolves rhbz#1891741
c4084f
2dcd3a
* Mon Sep 14 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-4
2dcd3a
- Ignore unmatched searches
2dcd3a
- Resolves: rhbz#1874015
2dcd3a
2dcd3a
* Thu Sep 10 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-3
2dcd3a
- Fix memory leaks in ID views processing
2dcd3a
- Resolves: rhbz#1875348
2dcd3a
2f14ed
* Wed May 06 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-2
2f14ed
- Initialize map lock in NIS plugin
2f14ed
- Resolves: rhbz#1832331
2f14ed
2f14ed
* Mon May 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
2f14ed
- Upstream release 0.56.5
2f14ed
- Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
2f14ed
- Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
2f14ed
2f14ed
* Fri Aug 16 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-2
2f14ed
- Resolves rhbz#1741881
2f14ed
  ns-slapd is crashing intermittently
2f14ed
2f14ed
* Wed Jun 05 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-1
2f14ed
- New upstream release
2f14ed
- Resolves rhbz#1684563
2f14ed
2f14ed
* Mon Jul 23 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-7
2f14ed
- 389-ds is not available on i686 architecture, don't build there
2f14ed
2f14ed
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-6
2f14ed
- Force rebuild of configure
2f14ed
2f14ed
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
2f14ed
- Link with libnsl explicitly in Fedora 28 or later
2f14ed
- Require libnsl2-devel for build
2f14ed
- Resolves rhbz#1573636
2f14ed
2f14ed
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-4
2f14ed
- Remove tcpwrappers support as they aren't available in Fedora anymore
2f14ed
2f14ed
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
2f14ed
- Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
2f14ed
- Resolves rhbz#1556448
2f14ed
- Remove outdated ExclusiveArch for RHEL6
2f14ed
2f14ed
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
2f14ed
2f14ed
* Fri Jan 19 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
2f14ed
- New upstream release
2f14ed
- Update links to the upstream project page and releases
2f14ed
- Use extended SSSD API to signal that an entry should not be cached anymore
2f14ed
- Add support for timeout-based NSS queries with libsss_nss_idmap
2f14ed
2f14ed
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-4
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2f14ed
2f14ed
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-3
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2f14ed
2f14ed
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2f14ed
2f14ed
* Mon Aug 08 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.1-1
2f14ed
- Support querying external users by UPN alias
2f14ed
- Don't clobber target of the pblock for ID views
2f14ed
2f14ed
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
2f14ed
- Updated upstream tarball
2f14ed
2f14ed
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56-1
2f14ed
- Add support for changing passwords for users from a primary tree
2f14ed
  - requires DS 1.3.5.6 or later
2f14ed
2f14ed
* Mon May 30 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-3
2f14ed
- Add support to properly shutdown priming cache from RHEL 7.2.4
2f14ed
2f14ed
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.55-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2f14ed
2f14ed
* Tue Jan 26 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
2f14ed
- Support external members of IPA groups in schema compat
2f14ed
- Support bind over ID overrides when uid is not overridden
2f14ed
- Populate schema compat trees in parallel to LDAP server startup
2f14ed
2f14ed
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.54.2-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2f14ed
2f14ed
* Thu Mar 26 2015 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
2f14ed
- CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
2f14ed
- Make sure nss_sss.so.2 module is used directly
2f14ed
- Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases
2f14ed
2f14ed
* Thu Nov  6 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
2f14ed
- support FreeIPA overrides in LDAP BIND callback
2f14ed
- ignore FreeIPA override searchs outside configured schema compat subtrees
2f14ed
2f14ed
* Fri Oct 10 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
2f14ed
- Add support for FreeIPA's ID views
2f14ed
- Allow searching SSSD-provided users as memberUid case-insensitevly
2f14ed
  Fixes bug #1130131
2f14ed
2f14ed
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-3
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2f14ed
2f14ed
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2f14ed
2f14ed
* Tue Apr 22 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
2f14ed
- correct the default NIS map settings for hosts.byname and hosts.byaddr,
2f14ed
  from report by Rik Megens
2f14ed
- fix several problems when hitting out-of-memory conditions, spotted by
2f14ed
  static analysis
2f14ed
2f14ed
* Mon Jan 20 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
2f14ed
- remove ExclusiveArch if %%{rhel} is 7 or higher, because 389-ds-base gets
2f14ed
  built for everything now (#1055711)
2f14ed
2f14ed
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 0.52-2
2f14ed
- Mass rebuild 2013-12-27
2f14ed
2f14ed
* Mon Dec 16 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
2f14ed
- correctly reflect whether or not we're built with transaction support in
2f14ed
  the module's nsslapd-pluginVersion attribute
2f14ed
- fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
2f14ed
  would hit when removing maps or groups of maps (#1043546/#1043638)
2f14ed
2f14ed
* Mon Dec  9 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
2f14ed
- fix another request argument memory leak in NIS server (#1040159)
2f14ed
- fix miscellaneous items found by static analysis
2f14ed
2f14ed
* Tue Oct  1 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
2f14ed
- if we get an EPIPE while registering with rpcbind, try to reconnect and
2f14ed
  retransmit before giving up
2f14ed
2f14ed
* Thu Sep 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
2f14ed
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
2f14ed
  which should let us avoid deadlocks when tasks are modifying data in
2f14ed
  the backend database (#1007451)
2f14ed
2f14ed
* Mon Aug 12 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
2f14ed
- try to gracefully handle failures obtaining internal locks
2f14ed
- fix locating-by-name of entries with names that require escaping
2f14ed
- add self-tests for nsswitch and PAM functionality
2f14ed
- make nsswitch mode properly handle user and group names with commas in them
2f14ed
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
2f14ed
- drop the "schema-compat-origin" attribute
2f14ed
2f14ed
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
2f14ed
- fix building against versions of directory server older than 1.3.0, which
2f14ed
  first introduced slapi_escape_filter_value()
2f14ed
2f14ed
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
2f14ed
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
2f14ed
  version 1.10 or later, where it first appeared
2f14ed
2f14ed
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
2f14ed
- merge Alexander Bokovoy's patches to
2f14ed
  - teach the schema compatibility plugin to optionally serve user and group
2f14ed
    information retrieved from libc as part of a set of compat entries
2f14ed
  - handle simple bind requests for those entries by calling out to PAM
2f14ed
  - to rewrite the DN of incoming bind requests to compat entries to point
2f14ed
    at the source entries, instead of returning a referral which most clients
2f14ed
    won't handle
2f14ed
- include IPA-specific docs as docs
2f14ed
2f14ed
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.47-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2f14ed
2f14ed
* Fri May 24 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47-1
2f14ed
- fix request argument memory leaks in NIS server
2f14ed
- add a %%sort function
2f14ed
2f14ed
* Thu Apr  4 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
2f14ed
- when checking if we can skip processing for a given change, pay attention to
2f14ed
  whether or not the changes cause the entry to need to be added or removed
2f14ed
  from a map (#912673)
2f14ed
- check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
2f14ed
  to update things but the server called us anyway
2f14ed
2f14ed
* Tue Mar 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.45-1
2f14ed
- fix dispatching for multiple connected clients in the NIS plugin (#923336)
2f14ed
2f14ed
* Tue Feb  5 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.44-3
2f14ed
- work around multilib differences in the example .ldif files (internal
2f14ed
  tooling)
2f14ed
2f14ed
* Tue Nov 20 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
2f14ed
- set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
2f14ed
  which have versions of IPA < 3.0, per mkosek on freeipa-devel
2f14ed
2f14ed
* Wed Nov 14 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
2f14ed
- add missing newline to a couple of debug log messages
2f14ed
- note whether or not betxn support is compiled in as part of the
2f14ed
  nsslapd-pluginVersion value we report to the server
2f14ed
- register callbacks in the same order in both plugins, so that
2f14ed
  their log messages are logged in the same order
2f14ed
2f14ed
* Tue Nov 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
2f14ed
- reintroduce support for directory server transactions (nhosoi, IPA#3046)
2f14ed
- control transaction support at run-time, deciding when to do things based
2f14ed
  on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
2f14ed
- NIS: add default settings for shadow.byname and passwd.adjunct.byname maps
2f14ed
2f14ed
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.42-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2f14ed
2f14ed
* Wed Jun 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.42-1
2f14ed
- drop support for directory server transactions (richm, #766320)
2f14ed
2f14ed
* Tue May 22 2012 Nalin Dahyabhai <nalin@redhat.com>
2f14ed
- fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
2f14ed
  of an smod along with its contents, when it just keeps the contents
2f14ed
2f14ed
* Tue Apr 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
2f14ed
- log errors evaluating pad expressions in %%link rather than continuing on
2f14ed
  until we hit an arithmetic exception (#810258)
2f14ed
2f14ed
* Fri Mar 30 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
2f14ed
- treat padding values passed to the "link" function as expressions to be
2f14ed
  evaluated rather than simply as literal values (part of #767372)
2f14ed
2f14ed
* Wed Mar 28 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
2f14ed
- add a "default" function for trying to evaluate one expression, then
2f14ed
  another, then another... (part of #767372)
2f14ed
- when creating a compat entry based on a real entry, set an entryUSN based on
2f14ed
  the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
2f14ed
  won't have them
2f14ed
2f14ed
* Tue Mar  6 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.38-1
2f14ed
- properly escape RDN values when building compat entries (#796509, #800625)
2f14ed
2f14ed
* Mon Feb 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
2f14ed
- fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
2f14ed
  (reported by Christian Neuhold)
2f14ed
- conditionalize whether we have a build dependency on tcp_wrappers (older
2f14ed
  releases) or tcp_wrappers-devel (newer releases)
2f14ed
2f14ed
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
2f14ed
- take steps to avoid making yp_first/yp_next clients loop indefinitely
2f14ed
  when a single LDAP entry produces multiple copies of the same NIS key
2f14ed
  for a given map
2f14ed
2f14ed
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
2f14ed
- add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
2f14ed
  match/regmatch[i]/regsub[i], but which can handle and return lists of
2f14ed
  zero or more results (part of #783274)
2f14ed
2f14ed
* Thu Jan 19 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
2f14ed
- do entry comparisons ourselves, albeit less throughly, to avoid the worst
2f14ed
  case in pathological cases (more of #771444)
2f14ed
2f14ed
* Tue Jan 17 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
2f14ed
- get more aggressive about skipping unnecessary calculations (most of
2f14ed
  the problem in #771444, though not the approach described there)
2f14ed
2f14ed
* Mon Jan 16 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.32-1
2f14ed
- add support for directory server transactions (#758830,#766320)
2f14ed
2f14ed
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.28-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
2f14ed
2f14ed
* Wed Jan 11 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.31-1
2f14ed
- fix some memory leaks (more of #771493)
2f14ed
2f14ed
* Tue Jan 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
2f14ed
- skip recalculations when the attributes which changed don't factor into
2f14ed
  our calculations (part of #771493)
2f14ed
2f14ed
* Wed Jan  4 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
2f14ed
- add regmatchi/regsubi formatting functions which work like regmatch/regsub,
2f14ed
  but do matching in a case-insensitive manner
2f14ed
- update NIS map defaults to match {CRYPT} userPassword values in a
2f14ed
  case-insensitive manner so that we also use {crypt} userPassword values
2f14ed
- fix inconsistencies in the NIS service stemming from using not-normalized DNs
2f14ed
  in some places where it should have used normalized DNs
2f14ed
2f14ed
* Mon Dec 19 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
2f14ed
- when configured with --with-ldap=openldap, link with -lldap_r rather
2f14ed
  than -lldap (rmeggins, #769107)
2f14ed
2f14ed
* Tue Dec  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
2f14ed
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
2f14ed
  (the rest of #730394/#730403)
2f14ed
2f14ed
* Fri Aug 12 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
2f14ed
- when building for 389-ds, use libpthread's read-write locks instead of
2f14ed
  NSPR's (part of #730394/#730403)
2f14ed
2f14ed
* Wed Jul 27 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
2f14ed
- speed up building compat entries which reference thousands of other entries
2f14ed
  (more of #692690)
2f14ed
- 389-ds-base is apparently exclusive to x86_64 and %%{ix86} on EL, so we have
2f14ed
  to be, too
2f14ed
2f14ed
* Fri May 13 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
2f14ed
- carry our own yp.x, so that we don't get bitten if libc doesn't include
2f14ed
  yp client routines
2f14ed
- we need rpcgen at build-time now
2f14ed
2f14ed
* Thu Mar 31 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.23-1
2f14ed
- speed up building compat entries with attributes with thousands of literal
2f14ed
  values (#692690)
2f14ed
2f14ed
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.22-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2f14ed
2f14ed
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.22-1
2f14ed
- fix a number of scanner-uncovered defects
2f14ed
2f14ed
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
2f14ed
- make sure we always pull in nss-devel and nspr-devel, and the right
2f14ed
  ldap toolkit for the Fedora or RHEL version
2f14ed
2f14ed
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
2f14ed
- update to 0.21
2f14ed
  - schema-compat: don't look at standalone compat containers for a search,
2f14ed
    since we'll already have looked at the group container
2f14ed
2f14ed
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.20-1
2f14ed
- update to 0.20
2f14ed
  - add a deref_f function
2f14ed
2f14ed
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.19-1
2f14ed
- fix a brown-paper-bag crash
2f14ed
2f14ed
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
2f14ed
- update to 0.18
2f14ed
  - add a deref_rf function
2f14ed
  - schema-compat: don't respond to search requests for which there's no backend
2f14ed
  - schema-compat: add the ability to do standalone compat containers
2f14ed
2f14ed
* Wed Nov 17 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-6
2f14ed
- revert that last change, it's unnecessary
2f14ed
2f14ed
* Thu Nov 11 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-5
2f14ed
- build against either 389-ds-base or redhat-ds-base, whichever is probably
2f14ed
  more appropriate here
2f14ed
2f14ed
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.17-4
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2f14ed
2f14ed
* Wed Jul 15 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
2f14ed
- change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
2f14ed
  should avoid multilib conflicts from installing both arches of the new
2f14ed
  package (#511504)
2f14ed
2f14ed
* Tue Jul 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-2
2f14ed
- fixup changelog entries that resemble possible macro invocations
2f14ed
2f14ed
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-1
2f14ed
- actually send portmap registrations to the right server
2f14ed
2f14ed
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
2f14ed
- fix NIS server startup problem when no port is explicitly configured and
2f14ed
  we're using portmap instead of rpcbind (#500903)
2f14ed
2f14ed
* Fri May  8 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
2f14ed
- fix %%deref and %%referred to fail rather than return a valid-but-empty
2f14ed
  result when they fail to evaluate (reported by Rob Crittenden)
2f14ed
2f14ed
* Wed May  6 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.14-1
2f14ed
- correctly handle being loaded but disabled (#499404)
2f14ed
2f14ed
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.13-1
2f14ed
- update to 0.13, reworking %%link() to correct some bugs (#498432)
2f14ed
2f14ed
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.12-1
2f14ed
- correct test suite failures that 0.11 started triggering
2f14ed
2f14ed
* Tue Apr 28 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.11-1
2f14ed
- update to 0.11 (#497904)
2f14ed
2f14ed
* Wed Mar  4 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.10-1
2f14ed
- update to 0.10
2f14ed
2f14ed
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-2
2f14ed
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
2f14ed
2f14ed
* Tue Dec  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
2f14ed
- make the example nsslapd-pluginpath values the same on 32- and 64-bit
2f14ed
  systems, because we can depend on the directory server "knowing" which
2f14ed
  directory to search for the plugins
2f14ed
2f14ed
* Mon Dec  8 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-1
2f14ed
- update to 0.8.5 to suppress duplicate values for attributes in the schema
2f14ed
  compatibility plugin
2f14ed
2f14ed
* Thu Dec  4 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
2f14ed
- update to 0.8.4 to fix:
2f14ed
  - problems updating references, particularly those for %%referred() (#474478)
2f14ed
  - inability to notice internal add/modify/modrdn/delete operations (really
2f14ed
    this time) (#474426)
2f14ed
2f14ed
* Wed Dec  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
2f14ed
- update to 0.8.3 to also notice and reflect changes caused by internal
2f14ed
  add/modify/modrdn/delete operations
2f14ed
 
2f14ed
* Wed Nov 19 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.2-1
2f14ed
- update to 0.8.2 to remove a redundant read lock in the schema-compat plugin
2f14ed
2f14ed
* Fri Nov  7 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.9-1
2f14ed
- update to 0.9
2f14ed
2f14ed
* Fri Oct  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.1-1
2f14ed
- update to 0.8.1 to fix a heap corruption (Rich Megginson)
2f14ed
2f14ed
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8-1
2f14ed
- update to 0.8
2f14ed
2f14ed
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.7-1
2f14ed
- update to 0.7
2f14ed
2f14ed
* Wed Jul 23 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.6-1
2f14ed
- rebuild (and make rpmlint happy)
2f14ed
2f14ed
* Wed Jul  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.2-1
2f14ed
- initial package