faa6ff
%if 0%{?fedora} >= 14 || 0%{?rhel} >= 6
faa6ff
%define ldap_impl openldap
faa6ff
%else
faa6ff
%define ldap_impl mozldap
faa6ff
%endif
faa6ff
%if 0%{?fedora} >= 18 || 0%{?rhel} >= 6
faa6ff
%define betxn_opts --enable-be-txns-by-default
faa6ff
%else
faa6ff
%define betxn_opts --disable-be-txns-by-default
faa6ff
%endif
faa6ff
faa6ff
Name:		slapi-nis
8d552a
Version:	0.60.0
8d552a
Release:	2%{?dist}
faa6ff
Summary:	NIS Server and Schema Compatibility plugins for Directory Server
8d552a
License:	GPLv3
faa6ff
URL:		http://pagure.io/slapi-nis/
faa6ff
Source0:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
faa6ff
Source1:	https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
faa6ff
faa6ff
BuildRequires: make
faa6ff
BuildRequires:  autoconf
faa6ff
BuildRequires:  automake
faa6ff
BuildRequires:  libtool
faa6ff
BuildRequires:	389-ds-base-devel >= 1.3.5.6, %{ldap_impl}-devel
faa6ff
BuildRequires:	nspr-devel, nss-devel, /usr/bin/rpcgen
faa6ff
%if 0%{?fedora} > 18 || 0%{?rhel} > 6
faa6ff
BuildRequires:	libsss_nss_idmap-devel > 1.16.0-5
faa6ff
%define sss_nss_opts --with-sss-nss-idmap --with-idviews
faa6ff
%else
faa6ff
%define sss_nss_opts %{nil}
faa6ff
%endif
faa6ff
BuildRequires:	pam-devel
faa6ff
%if (0%{?fedora} > 14 && 0%{?fedora} < 28) || (0%{?rhel} > 6 && 0%{?rhel} < 8)
faa6ff
BuildRequires:	libtirpc-devel
faa6ff
%else
faa6ff
BuildRequires:  libnsl2-devel
faa6ff
%endif
faa6ff
%if 0%{?fedora} > 27 || 0%{?rhel} >= 9
faa6ff
ExcludeArch: %{ix86}
faa6ff
%endif
faa6ff
Requires: 389-ds-base >= 1.3.5.6
faa6ff
faa6ff
%description
faa6ff
This package provides two plugins for Red Hat and 389 Directory Server.
faa6ff
faa6ff
The NIS Server plugin allows the directory server to act as a NIS server
faa6ff
for clients, dynamically generating and updating NIS maps according to
faa6ff
its configuration and the contents of the DIT, and serving the results to
faa6ff
clients using the NIS protocol as if it were an ordinary NIS server.
faa6ff
faa6ff
The Schema Compatibility plugin allows the directory server to provide an
faa6ff
alternate view of entries stored in part of the DIT, optionally adding,
faa6ff
dropping, or renaming attribute values, and optionally retrieving values
faa6ff
for attributes from multiple entries in the tree.
faa6ff
faa6ff
%prep
faa6ff
%setup -q
faa6ff
faa6ff
%build
faa6ff
autoconf --force
faa6ff
%configure --disable-static --with-ldap=%{ldap_impl} \
faa6ff
	--with-nsswitch --with-pam --with-pam-service=system-auth \
faa6ff
	%{sss_nss_opts} %{betxn_opts}
faa6ff
sed -i -e 's,%{_libdir}/dirsrv/plugins/,,g' -e 's,.so$,,g' doc/examples/*.ldif
faa6ff
make %{?_smp_mflags}
faa6ff
faa6ff
%install
faa6ff
rm -rf $RPM_BUILD_ROOT
faa6ff
make install DESTDIR=$RPM_BUILD_ROOT
faa6ff
rm $RPM_BUILD_ROOT/%{_libdir}/dirsrv/plugins/*.la
faa6ff
faa6ff
%if 0
faa6ff
# ns-slapd doesn't want to start in koji, so no tests get run
faa6ff
%check
faa6ff
make check
faa6ff
%endif
faa6ff
faa6ff
%files
faa6ff
%doc COPYING NEWS README STATUS doc/*.txt doc/examples/*.ldif doc/ipa
faa6ff
%{_mandir}/man1/*
faa6ff
%{_libdir}/dirsrv/plugins/*.so
faa6ff
%{_sbindir}/nisserver-plugin-defs
faa6ff
faa6ff
%changelog
8d552a
* Sun Aug 21 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-2
8d552a
- Rebuild to fix changelog
8d552a
- Related: rhbz#2117299
8d552a
8d552a
* Sat Aug 20 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
8d552a
- upstream release 0.60.0
8d552a
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
8d552a
- Fix ID views integration
8d552a
- Fix base scope lookups
8d552a
- Bump NIS max dgram size to 8KB by default instead of 1KB
8d552a
- Resolves: rhbz#2117299
8d552a
  Allow to rebuild the compat tree
8d552a
13857c
* Fri Jan 21 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-4
13857c
- Rebuild against libnsl 2.0.0
13857c
- Related: rhbz#2039220
13857c
faa6ff
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 0.56.7-3
faa6ff
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
faa6ff
  Related: rhbz#1991688
faa6ff
faa6ff
* Wed Jul 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
faa6ff
- Resolves: rhbz#1979619
faa6ff
  IPA: High CPU utilization (over 1000% plus) by ns-slapd process
faa6ff
- Resolves: rhbz#1979623
faa6ff
  With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.
faa6ff
faa6ff
* Wed May 19 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-1
faa6ff
- CVE-2021-3480: invalid bind DN crash
faa6ff
- New upstream release
faa6ff
- Resolves: rhbz#1947351
faa6ff
faa6ff
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.56.6-3
faa6ff
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
faa6ff
faa6ff
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.6-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
faa6ff
faa6ff
* Fri Dec 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-1
faa6ff
- New upstream release
faa6ff
- Ignore searches which don't match any configured map
faa6ff
faa6ff
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.5-3
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
faa6ff
faa6ff
* Wed May 06 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-2
faa6ff
- Initialize map locks in NIS plugin to prevent crash
faa6ff
faa6ff
* Mon May 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
faa6ff
- New upstream release
faa6ff
- Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
faa6ff
- Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
faa6ff
faa6ff
* Fri Feb 07 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.4-1
faa6ff
- New upstream release
faa6ff
- Fix build with newer gcc versions
faa6ff
- Resolves rhbz#1800097
faa6ff
faa6ff
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.3-3
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
faa6ff
faa6ff
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.3-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
faa6ff
faa6ff
* Thu Jun 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-1
faa6ff
- New upstream release
faa6ff
faa6ff
* Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-8
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
faa6ff
faa6ff
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-7
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
faa6ff
faa6ff
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-6
faa6ff
- Force rebuild of configure
faa6ff
faa6ff
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
faa6ff
- Link with libnsl explicitly in Fedora 28 or later
faa6ff
- Require libnsl2-devel for build
faa6ff
- Resolves rhbz#1573636
faa6ff
faa6ff
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-4
faa6ff
- Remove tcpwrappers support as they aren't available in Fedora anymore
faa6ff
faa6ff
* Thu Mar 15 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
faa6ff
- Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
faa6ff
- Resolves rhbz#1556448
faa6ff
- Remove outdated ExclusiveArch for RHEL6
faa6ff
faa6ff
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
faa6ff
faa6ff
* Fri Jan 19 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
faa6ff
- New upstream release
faa6ff
- Update links to the upstream project page and releases
faa6ff
- Use extended SSSD API to signal that an entry should not be cached anymore
faa6ff
- Add support for timeout-based NSS queries with libsss_nss_idmap
faa6ff
faa6ff
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-4
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
faa6ff
faa6ff
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-3
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
faa6ff
faa6ff
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.1-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
faa6ff
faa6ff
* Mon Aug 08 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.1-1
faa6ff
- Support querying external users by UPN alias
faa6ff
- Don't clobber target of the pblock for ID views
faa6ff
faa6ff
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
faa6ff
- Updated upstream tarball
faa6ff
faa6ff
* Mon Jun 20 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.56-1
faa6ff
- Add support for changing passwords for users from a primary tree
faa6ff
  - requires DS 1.3.5.6 or later
faa6ff
faa6ff
* Mon May 30 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-3
faa6ff
- Add support to properly shutdown priming cache from RHEL 7.2.4
faa6ff
faa6ff
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.55-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
faa6ff
faa6ff
* Tue Jan 26 2016 Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
faa6ff
- Support external members of IPA groups in schema compat
faa6ff
- Support bind over ID overrides when uid is not overridden
faa6ff
- Populate schema compat trees in parallel to LDAP server startup
faa6ff
faa6ff
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.54.2-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
faa6ff
faa6ff
* Thu Mar 26 2015 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
faa6ff
- CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
faa6ff
- Make sure nss_sss.so.2 module is used directly
faa6ff
- Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases
faa6ff
faa6ff
* Thu Nov  6 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
faa6ff
- support FreeIPA overrides in LDAP BIND callback
faa6ff
- ignore FreeIPA override searchs outside configured schema compat subtrees
faa6ff
faa6ff
* Fri Oct 10 2014 Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
faa6ff
- Add support for FreeIPA's ID views
faa6ff
- Allow searching SSSD-provided users as memberUid case-insensitevly
faa6ff
  Fixes bug #1130131
faa6ff
faa6ff
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-3
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
faa6ff
faa6ff
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.53-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
faa6ff
faa6ff
* Tue Apr 22 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
faa6ff
- correct the default NIS map settings for hosts.byname and hosts.byaddr,
faa6ff
  from report by Rik Megens
faa6ff
- fix several problems when hitting out-of-memory conditions, spotted by
faa6ff
  static analysis
faa6ff
faa6ff
* Mon Jan 20 2014 Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
faa6ff
- remove ExclusiveArch if %%{rhel} is 7 or higher, because 389-ds-base gets
faa6ff
  built for everything now (#1055711)
faa6ff
faa6ff
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 0.52-2
faa6ff
- Mass rebuild 2013-12-27
faa6ff
faa6ff
* Mon Dec 16 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
faa6ff
- correctly reflect whether or not we're built with transaction support in
faa6ff
  the module's nsslapd-pluginVersion attribute
faa6ff
- fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
faa6ff
  would hit when removing maps or groups of maps (#1043546/#1043638)
faa6ff
faa6ff
* Mon Dec  9 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
faa6ff
- fix another request argument memory leak in NIS server (#1040159)
faa6ff
- fix miscellaneous items found by static analysis
faa6ff
faa6ff
* Tue Oct  1 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
faa6ff
- if we get an EPIPE while registering with rpcbind, try to reconnect and
faa6ff
  retransmit before giving up
faa6ff
faa6ff
* Thu Sep 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
faa6ff
- add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
faa6ff
  which should let us avoid deadlocks when tasks are modifying data in
faa6ff
  the backend database (#1007451)
faa6ff
faa6ff
* Mon Aug 12 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
faa6ff
- try to gracefully handle failures obtaining internal locks
faa6ff
- fix locating-by-name of entries with names that require escaping
faa6ff
- add self-tests for nsswitch and PAM functionality
faa6ff
- make nsswitch mode properly handle user and group names with commas in them
faa6ff
- handle attempts to PAM authenticate to compat groups (i.e., with failure)
faa6ff
- drop the "schema-compat-origin" attribute
faa6ff
faa6ff
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
faa6ff
- fix building against versions of directory server older than 1.3.0, which
faa6ff
  first introduced slapi_escape_filter_value()
faa6ff
faa6ff
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
faa6ff
- only buildrequire libsss_nss_idmap-devel on releases that included SSSD
faa6ff
  version 1.10 or later, where it first appeared
faa6ff
faa6ff
* Wed Aug  7 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
faa6ff
- merge Alexander Bokovoy's patches to
faa6ff
  - teach the schema compatibility plugin to optionally serve user and group
faa6ff
    information retrieved from libc as part of a set of compat entries
faa6ff
  - handle simple bind requests for those entries by calling out to PAM
faa6ff
  - to rewrite the DN of incoming bind requests to compat entries to point
faa6ff
    at the source entries, instead of returning a referral which most clients
faa6ff
    won't handle
faa6ff
- include IPA-specific docs as docs
faa6ff
faa6ff
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.47-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
faa6ff
faa6ff
* Fri May 24 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.47-1
faa6ff
- fix request argument memory leaks in NIS server
faa6ff
- add a %%sort function
faa6ff
faa6ff
* Thu Apr  4 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
faa6ff
- when checking if we can skip processing for a given change, pay attention to
faa6ff
  whether or not the changes cause the entry to need to be added or removed
faa6ff
  from a map (#912673)
faa6ff
- check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
faa6ff
  to update things but the server called us anyway
faa6ff
faa6ff
* Tue Mar 19 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.45-1
faa6ff
- fix dispatching for multiple connected clients in the NIS plugin (#923336)
faa6ff
faa6ff
* Tue Feb  5 2013 Nalin Dahyabhai <nalin@redhat.com> - 0.44-3
faa6ff
- work around multilib differences in the example .ldif files (internal
faa6ff
  tooling)
faa6ff
faa6ff
* Tue Nov 20 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
faa6ff
- set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
faa6ff
  which have versions of IPA < 3.0, per mkosek on freeipa-devel
faa6ff
faa6ff
* Wed Nov 14 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
faa6ff
- add missing newline to a couple of debug log messages
faa6ff
- note whether or not betxn support is compiled in as part of the
faa6ff
  nsslapd-pluginVersion value we report to the server
faa6ff
- register callbacks in the same order in both plugins, so that
faa6ff
  their log messages are logged in the same order
faa6ff
faa6ff
* Tue Nov 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
faa6ff
- reintroduce support for directory server transactions (nhosoi, IPA#3046)
faa6ff
- control transaction support at run-time, deciding when to do things based
faa6ff
  on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
faa6ff
- NIS: add default settings for shadow.byname and passwd.adjunct.byname maps
faa6ff
faa6ff
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.42-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
faa6ff
faa6ff
* Wed Jun 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.42-1
faa6ff
- drop support for directory server transactions (richm, #766320)
faa6ff
faa6ff
* Tue May 22 2012 Nalin Dahyabhai <nalin@redhat.com>
faa6ff
- fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
faa6ff
  of an smod along with its contents, when it just keeps the contents
faa6ff
faa6ff
* Tue Apr 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
faa6ff
- log errors evaluating pad expressions in %%link rather than continuing on
faa6ff
  until we hit an arithmetic exception (#810258)
faa6ff
faa6ff
* Fri Mar 30 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
faa6ff
- treat padding values passed to the "link" function as expressions to be
faa6ff
  evaluated rather than simply as literal values (part of #767372)
faa6ff
faa6ff
* Wed Mar 28 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
faa6ff
- add a "default" function for trying to evaluate one expression, then
faa6ff
  another, then another... (part of #767372)
faa6ff
- when creating a compat entry based on a real entry, set an entryUSN based on
faa6ff
  the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
faa6ff
  won't have them
faa6ff
faa6ff
* Tue Mar  6 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.38-1
faa6ff
- properly escape RDN values when building compat entries (#796509, #800625)
faa6ff
faa6ff
* Mon Feb 13 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
faa6ff
- fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
faa6ff
  (reported by Christian Neuhold)
faa6ff
- conditionalize whether we have a build dependency on tcp_wrappers (older
faa6ff
  releases) or tcp_wrappers-devel (newer releases)
faa6ff
faa6ff
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
faa6ff
- take steps to avoid making yp_first/yp_next clients loop indefinitely
faa6ff
  when a single LDAP entry produces multiple copies of the same NIS key
faa6ff
  for a given map
faa6ff
faa6ff
* Tue Jan 24 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
faa6ff
- add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
faa6ff
  match/regmatch[i]/regsub[i], but which can handle and return lists of
faa6ff
  zero or more results (part of #783274)
faa6ff
faa6ff
* Thu Jan 19 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
faa6ff
- do entry comparisons ourselves, albeit less throughly, to avoid the worst
faa6ff
  case in pathological cases (more of #771444)
faa6ff
faa6ff
* Tue Jan 17 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
faa6ff
- get more aggressive about skipping unnecessary calculations (most of
faa6ff
  the problem in #771444, though not the approach described there)
faa6ff
faa6ff
* Mon Jan 16 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.32-1
faa6ff
- add support for directory server transactions (#758830,#766320)
faa6ff
faa6ff
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.28-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
faa6ff
faa6ff
* Wed Jan 11 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.31-1
faa6ff
- fix some memory leaks (more of #771493)
faa6ff
faa6ff
* Tue Jan 10 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
faa6ff
- skip recalculations when the attributes which changed don't factor into
faa6ff
  our calculations (part of #771493)
faa6ff
faa6ff
* Wed Jan  4 2012 Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
faa6ff
- add regmatchi/regsubi formatting functions which work like regmatch/regsub,
faa6ff
  but do matching in a case-insensitive manner
faa6ff
- update NIS map defaults to match {CRYPT} userPassword values in a
faa6ff
  case-insensitive manner so that we also use {crypt} userPassword values
faa6ff
- fix inconsistencies in the NIS service stemming from using not-normalized DNs
faa6ff
  in some places where it should have used normalized DNs
faa6ff
faa6ff
* Mon Dec 19 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
faa6ff
- when configured with --with-ldap=openldap, link with -lldap_r rather
faa6ff
  than -lldap (rmeggins, #769107)
faa6ff
faa6ff
* Tue Dec  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
faa6ff
- when building for 389-ds, use Slapi_RWLocks if they appear to be available
faa6ff
  (the rest of #730394/#730403)
faa6ff
faa6ff
* Fri Aug 12 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
faa6ff
- when building for 389-ds, use libpthread's read-write locks instead of
faa6ff
  NSPR's (part of #730394/#730403)
faa6ff
faa6ff
* Wed Jul 27 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
faa6ff
- speed up building compat entries which reference thousands of other entries
faa6ff
  (more of #692690)
faa6ff
- 389-ds-base is apparently exclusive to x86_64 and %%{ix86} on EL, so we have
faa6ff
  to be, too
faa6ff
faa6ff
* Fri May 13 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
faa6ff
- carry our own yp.x, so that we don't get bitten if libc doesn't include
faa6ff
  yp client routines
faa6ff
- we need rpcgen at build-time now
faa6ff
faa6ff
* Thu Mar 31 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.23-1
faa6ff
- speed up building compat entries with attributes with thousands of literal
faa6ff
  values (#692690)
faa6ff
faa6ff
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.22-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
faa6ff
faa6ff
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.22-1
faa6ff
- fix a number of scanner-uncovered defects
faa6ff
faa6ff
* Thu Jan  6 2011 Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
faa6ff
- make sure we always pull in nss-devel and nspr-devel, and the right
faa6ff
  ldap toolkit for the Fedora or RHEL version
faa6ff
faa6ff
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
faa6ff
- update to 0.21
faa6ff
  - schema-compat: don't look at standalone compat containers for a search,
faa6ff
    since we'll already have looked at the group container
faa6ff
faa6ff
* Tue Nov 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.20-1
faa6ff
- update to 0.20
faa6ff
  - add a deref_f function
faa6ff
faa6ff
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.19-1
faa6ff
- fix a brown-paper-bag crash
faa6ff
faa6ff
* Mon Nov 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
faa6ff
- update to 0.18
faa6ff
  - add a deref_rf function
faa6ff
  - schema-compat: don't respond to search requests for which there's no backend
faa6ff
  - schema-compat: add the ability to do standalone compat containers
faa6ff
faa6ff
* Wed Nov 17 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-6
faa6ff
- revert that last change, it's unnecessary
faa6ff
faa6ff
* Thu Nov 11 2010 Nalin Dahyabhai <nalin@redhat.com> - 0.17-5
faa6ff
- build against either 389-ds-base or redhat-ds-base, whichever is probably
faa6ff
  more appropriate here
faa6ff
faa6ff
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.17-4
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
faa6ff
faa6ff
* Wed Jul 15 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
faa6ff
- change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
faa6ff
  should avoid multilib conflicts from installing both arches of the new
faa6ff
  package (#511504)
faa6ff
faa6ff
* Tue Jul 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-2
faa6ff
- fixup changelog entries that resemble possible macro invocations
faa6ff
faa6ff
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.17-1
faa6ff
- actually send portmap registrations to the right server
faa6ff
faa6ff
* Thu May 14 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
faa6ff
- fix NIS server startup problem when no port is explicitly configured and
faa6ff
  we're using portmap instead of rpcbind (#500903)
faa6ff
faa6ff
* Fri May  8 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
faa6ff
- fix %%deref and %%referred to fail rather than return a valid-but-empty
faa6ff
  result when they fail to evaluate (reported by Rob Crittenden)
faa6ff
faa6ff
* Wed May  6 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.14-1
faa6ff
- correctly handle being loaded but disabled (#499404)
faa6ff
faa6ff
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.13-1
faa6ff
- update to 0.13, reworking %%link() to correct some bugs (#498432)
faa6ff
faa6ff
* Thu Apr 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.12-1
faa6ff
- correct test suite failures that 0.11 started triggering
faa6ff
faa6ff
* Tue Apr 28 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.11-1
faa6ff
- update to 0.11 (#497904)
faa6ff
faa6ff
* Wed Mar  4 2009 Nalin Dahyabhai <nalin@redhat.com> - 0.10-1
faa6ff
- update to 0.10
faa6ff
faa6ff
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-2
faa6ff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
faa6ff
faa6ff
* Tue Dec  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
faa6ff
- make the example nsslapd-pluginpath values the same on 32- and 64-bit
faa6ff
  systems, because we can depend on the directory server "knowing" which
faa6ff
  directory to search for the plugins
faa6ff
faa6ff
* Mon Dec  8 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-1
faa6ff
- update to 0.8.5 to suppress duplicate values for attributes in the schema
faa6ff
  compatibility plugin
faa6ff
faa6ff
* Thu Dec  4 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
faa6ff
- update to 0.8.4 to fix:
faa6ff
  - problems updating references, particularly those for %%referred() (#474478)
faa6ff
  - inability to notice internal add/modify/modrdn/delete operations (really
faa6ff
    this time) (#474426)
faa6ff
faa6ff
* Wed Dec  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
faa6ff
- update to 0.8.3 to also notice and reflect changes caused by internal
faa6ff
  add/modify/modrdn/delete operations
faa6ff
 
faa6ff
* Wed Nov 19 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.2-1
faa6ff
- update to 0.8.2 to remove a redundant read lock in the schema-compat plugin
faa6ff
faa6ff
* Fri Nov  7 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.9-1
faa6ff
- update to 0.9
faa6ff
faa6ff
* Fri Oct  3 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8.1-1
faa6ff
- update to 0.8.1 to fix a heap corruption (Rich Megginson)
faa6ff
faa6ff
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.8-1
faa6ff
- update to 0.8
faa6ff
faa6ff
* Wed Aug  6 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.7-1
faa6ff
- update to 0.7
faa6ff
faa6ff
* Wed Jul 23 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.6-1
faa6ff
- rebuild (and make rpmlint happy)
faa6ff
faa6ff
* Wed Jul  9 2008 Nalin Dahyabhai <nalin@redhat.com> - 0.2-1
faa6ff
- initial package