source: NEWS @ 1579:1114f9b1a156

Revision 1579:1114f9b1a156, 19.1 KB checked in by Miloslav Trmač <mitr@…>, 3 years ago (diff)

Release libuser-0.57.

2011-01-10 Miloslav Trmač <mitr@…>

  • configure.in: Release 0.57.
  • NEWS: Update.
  • po/LINGUAS: Update.
  • Makefile.am (lib_libuser_la_LDFLAGS): Update version info.
Line 
10.57
2* Resolve an ambiguity about "password" value format that could cause setting
3  a known plaintext password in LDAP accounts: the "files"/"shadow" and LDAP
4  modules may not be used together any more, and the module interface ABI has
5  changed to support this.
6* Don't authenticate the user (in lchfn, lchsh, lpasswd) if the application
7  is not set*id and it does not need elevated privileges.  In particular, this
8  allows the above programs to be used for LDAP administration by unprivileged
9  users.
10* Change default crypt_style to sha512.
11* Don't abort on invalid ID values.
12* Miscellaneous bug fixes.
13
140.56.18
15* Update translations.
16
170.56.17
18* New Python constant VALUE_INVALID_ID and function validateIdValue.
19* Update translations.
20
210.56.16
22* Update translations.
23
240.56.15
25* Update translations.
26
270.56.14
28* Use dgettext() inside the library.
29* Allow passing passwords using a pipe.
30* Allow specifying the LDAP password in a config file (patch by Rob Myers
31  <rob.myers@gtri.gatech.edu>).
32
330.56.13
34* Report error in lid if the specified name does not exist.
35* Don't default a home directory to a path that contains a "." or ".." component
36  derived from the user name (explicitly specified home directories that contain
37  such components are accepted).
38* Detect naming conflicts when renaming an entry in the "files" or "shadow"
39  module.
40* Add new arguments to luseradd and lusermod, to support creating and modifying
41  LDAP user entries with the inetOrgPerson objectClass.
42
430.56.12
44* Update translations.
45
460.56.11
47* Remove user's mail spool as well in (luserdel -r).
48* Refuse GID and UID values (id_t)-1.
49* Verify name validity when renaming an entity.
50* Fix flushing of nscd cache by luser* utilities.
51
520.56.10
53* Prohibit entity values that contain ':' in the files and shadow module
54  (except for the last field on the line).
55* Don't corrupt LDAP passwords that use an unsupported password encryption
56  scheme.
57* When the user name is used as a default group name, don't interpret it as
58  a number.
59* Minor test suite and man page fixes.
60
610.56.9
62* Warn in lusermod if changing a primary group ID to a group that does not
63  exist. (#1)
64* Fix pastos in man pages.
65
660.56.8
67* New home page at https://fedorahosted.org/libuser/ .
68
690.56.7
70* Fix a crash with disabled SELinux
71* Add support for SHA256 and SHA512 in password hashes.
72* Fix file locking on some architectures
73* Remove default.-c, moving the provided functions to libuser proper.
74
750.56.6
76* Set SELinux file contexts when creating home directories and preserve them
77  when moving home directories
78
790.56.5
80* Work around spurious error messages when run against the Fedora Directory
81  server
82* Fix error reporting when creating home directories and creating / removing
83  mail spool files
84
850.56.4
86* Update the last password change date field when changing passwords.
87
880.56.3
89* Allow specifying a SASL mechanism (#240904, original patch by Simo Sorce).
90
910.56.2
92* Update translations
93
940.56.1
95* When changing passwords, only silently ignore known shadow markers, not all
96  invalid hashes
97
980.56
99* Document the correct types used for attribute values.  Use these types for
100  parsing, to avoid corrupting number-like strings, e.g. '07' -> 7; this
101  expands the API requirements
102* Miscellaneous bug fixes, optimizations and cleanups; module interface ABI
103  has changed
104
1050.55
106* Remove the quota library and Python module.  It doesn't even compile and
107  has no known users.
108* Add support for the 64-bit API of Python 2.5
109* Minor cleanups
110
1110.54.8
112* Add importing of HOME from default/useradd.
113
1140.54.7
115* Update translations
116
1170.54.6
118* Fix bugs in handling of invalid lines in the files and shadow modules.
119* Fix pattern matching in lu_*_enumerate_full in the files and shadow modules.
120* Add more error reporting, return non-zero exit status on error from utils.
121* Use the skeleton directory specified in libuser.conf by Python
122  admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser.
123
1240.54.5
125* Don't reference @pkglibdir@ in libuser.conf.5 to avoid multilib file
126  conflicts.
127
1280.54.4
129* Fix compilation with pre-C99 compilers (#179385, patch by Dan Yefimov).
130* Allow building without Python (#179384, original patch by Dan Yefimov).
131
1320.54.3
133* Fix a crash when lpasswd is run without specifying an user name
134
1350.54.2
136* Avoid using deprecated openldap functions
137
1380.54.1
139* Support for importing of configuration from shadow (/etc/login.defs and
140  /etc/default/useradd)
141* New libuser.conf(5) man page
142* Minor cleanups and bug fixes all over the code
143
1440.54
145* Make sure attributes with no values can never appear
146* Fix crash in the "files" module when an attribute is missing
147* Use hidden visibility for internal functions, remove them from
148  libuser/user_private.h; this changes module interface ABI
149* Miscellaneous source code simplifications
150
1510.53.8
152* Permit "portable" user and group names as defined by SUSv3, plus trailing $
153* Disable building static libraries by default
154* Miscellaneous build machinery improvements
155
1560.53.7
157* Add missing translations
158* Update translations
159
1600.53.6
161* Allow empty configuration values.
162
1630.53.5
164* Ignore nss_compat lines in the "files" module.
165* Autodetect Python version.
166
1670.53.4
168* Fix adding of objectclasses to LDAP user accounts.
169
1700.53.3
171* Handle more I/O failures.
172
1730.53.2
174* Important bug fixes in lchage, lgroupmod, lnewusers and lusermod; minor bug
175  fixes in lpasswd and luseradd.
176* Add man pages for the utilities.
177
1780.53.1
179* Export UT_NAMESIZE from <utmp.h> to Python
180
1810.53
182* Support UID and GID values larger than LONG_MAX (#124967)
183* Fix updating of groups after user renaming in lusermod
184* Allow setting a shadow password even if the current shadow password is
185  invalid (#131180)
186* Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has
187  changed
188* Miscellaneous bug and memory leak fixes
189
1900.52.6
191* Mark more strings for translation
192* Make error reporting more consistent and more verbose, output error messages
193  on stderr.
194* Port sasldb backend to Cyrus SASL v2, make it at least minimally usable
195
1960.52.5
197* Fix home directory renaming in ADMIN.modifyUser (#135280)
198* Further Python reference counting fixes
199
2000.52.4
201* Memory leak fixes
202
2030.52.3
204* Fix compilation without libuser headers already installed (#134085)
205
2060.52.2
207* Allow LDAP connection using ldaps, custom ports or without TLS (original
208  patch from Pawel Salek).
209
2100.52.1
211* Fix freecon() of uninitialized value in files/shadow module
212
2130.52
214* Usable LDAP backend
215* Miscellaneous bug fixes
216
2170.51.12
218* Don't claim success and exception at the same time (#133479)
219* LDAP fixes, second round
220* Various other bug fixes
221
2220.51.11
223* Allow documented optional arguments in Python
224  ADMIN.{addUser,modifyUser,deleteUser} (#119812)
225* Add man pages for lchfn and lchsh
226* LDAP fixes, first round
227* Avoid file conflict on multilib systems
228* Call ldconfig correctly
229
2300.51.10
231* Don't attempt to lookup using original entity name after entity
232  modification (rename in particular) (#78376, #121252)
233* Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
234* Make --enable-quota work, and fix the quota code to at least compile (#89114)
235* Fix several bugs (#120168, original patch from Steve Grubb)
236* Don't hardcode python version in spec file (#130952, from Robert Scheck)
237* Properly integrate the SELinux patch, it should actually be used now, even
238  though it was "enabled" since 0.51.7-6
239
2400.51.9
241* Fix various typos
242* Document library interfaces
243* Build all shared libraries with -fPIC (#72536)
244
2450.51.8
246* Update to build with latest autotools and gtk-doc
247* Update ALL_LINGUAS and POTFILES.in
248* Rebuild to depend on newer openldap
249
2500.51.7-7
251* fix is_selinux_enabled call
252
2530.51.7-3
254* Add SELinux support
255
2560.51.7
257* ldap: set error codes correctly when we encounter failures initializing
258* don't double-close modules which fail initialization
259* ldap: don't set an error in cases where one is already set
260
2610.51.6
262* use a crypt salt consistent with the defaults/crypt_style setting when
263  setting new passwords (#79337)
264
2650.51.5
266* expose lu_get_first_unused_id() as a package-private function
267* provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
268  in python
269
2700.51.4
271* fix not freeing resources properly in files.c(generic_is_locked), spotted by
272  Zou Pengcheng
273
2740.51.2
275* degrade gracefully
276* build with --with-pic and -fPIC
277* remove unpackaged man page
278
2790.51.1-2
280* translation updates
281
2820.51.1-1
283* doc updates -- cvs tree moved
284* language updates
285* disallow weird characters in account names
286
287* automated rebuild
288
2890.51
290* files: ignore blank lines in files
291* libuser: disallow creation of accounts with names containing whitespace,
292  control characters, or non-ASCII characters
293
2940.50.2
295* refresh translations
296* fix a heap-corruption bug in the python bindings
297
2980.50
299* bump version
300* refresh translations
301
3020.49.102
303* ldap: cache an entity's dn in the entity structure to try to speed things up
304
3050.49.101-2
306* add missing buildreqs on cyrus-sasl-devel and openldap-devel (#59456)
307* translation refresh
308
3090.49.101-1
310* fix python bindings of enumerateFull functions
311* adjust prompter wrapping to not error out on successful returns
312
3130.49.100
314* be more careful about printing error messages
315* fix refreshing after adding of accounts
316* ldap: try to use a search to convert names to DNs, and only fall back to
317  guessing if it turns up nothing
318* files: fix an off-by-one in removal of entries
319
3200.49.99
321* refresh translations
322* fix admin() constructor comments in the python module
323
3240.49.98
325* automatically refresh entities after add, modify, setpass, removepass,
326  lock, and unlock operations
327* remove debug spewage when creating and removing mail spools
328* files: fix saving of multi-valued attributes
329* rename MEMBERUID attribute for groups to MEMBERNAME
330
3310.49.97
332* files: fix bug in removals
333* ldap: revert attempts at being smart at startup time, because it makes UIs
334  very messy (up the three whole dialogs just to start the ldap stuff!)
335
3360.49.96
337* fix thinko in dispatch routines
338
3390.49.95
340* lgroupmod: fix thinko
341
3420.49.93
343* move shadow initialization for groups to the proper callback
344* rework locking in the files module to not require that files be writable
345
346* expose lu_strerror()
347* add various typedefs for types used by the library
348
3490.49.92
350* add removepass() functions
351
352* lchfn,lchsh,lpasswd - reorder PAM authentication calls
353* include API docs in the package
354
3550.49.91
356* ldap: finish port to new API
357* sasl: finish port to new API (needs test)
358* libuser: don't commit object changes before passing data to service
359  functions which might need differing data sets to figure out what to
360  change (for example, ldap)
361
3620.49.90
363* bind the internal mail spool creation/removal functions for python
364
365* renamed the python module
366* revamped internals to use gobject's gvalues and gvaluearrays instead of
367  glists of cached strings
368* add enumeration-with-data functions to the C library
369
370* require linuxdoc-tools instead of sgml-tools for rawhide
371
372* fixup build files to allow building for arbitrary versions of python
373
3740.32
375* link the python module against libpam
376* attempt to import the python modules at build-time to verify dependencies
377
3780.31
379* fix a file-parsing bug that popped up in 0.29's mmap modifications
380
3810.30
382* quotaq: fix argument order when reading quota information
383* user_quota: set quota grace periods correctly
384* luseradd: never create home directories for system accounts
385
386* add da translation files
387* update translations
388
3890.29
390* add an explicit build dependency on jade (for the docs)
391
392* HUP nscd on modifications
393* userutil.c: mmap files we're reading for probable speed gain
394* userutil.c: be conservative with the amount of random data we read
395* docs fixes
396
3970.28
398* apps: print usage on errors
399* lnewusers.c: initialize groups as groups, not users
400* lnewusers.c: set passwords for new accounts
401* luseradd.c: accept group names in addition to IDs for the -g flag
402* luseradd.c: allow the primary GID to be a preexisting group
403
4040.27
405* add ko translation files
406* files.c: fix a heap corruption bug in lock/unlock (#51750)
407* files.c: close a memory leak in reading of files
408
409* files.c: remove implementation limits on lengths of lines
410
4110.26
412* lusermod: change user name in groups the user is a member of during renames
413* lgroupmod: change primary GID for users who are in the group during renumbers
414* ldap.c: handle new attributes more gracefully if possible
415* add ru translation files
416
4170.25.1
418* rename the quota source files to match the library, which clears up a
419  file conflict with older quota packages
420* add ja translation files
421
422* add lu_ent_clear_all() function
423
4240.25
425* close up some memory leaks
426* add the ability to include resident versions of modules in the library
427
4280.24-4
429* fix incorrect Py_BuildValue invocation in python module
430
4310.24-3
432* stop leaking descriptors in the files module
433* speed up user creation by reordering some checks for IDs being in use
434* update the shadowLastChanged attribute when we set a password
435* adjust usage of getXXXXX_r where needed
436* fix assorted bugs in python binding which break prompting
437
4380.23
439* install sv translation
440* make lpasswd prompt for passwords when none are given on the command line
441* make sure all user-visible strings are marked for translation
442* clean up some user-visible strings
443* require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules
444
445* print uids and gids of users and names in lid app
446* fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
447* implement enumerate_by_group and enumerate_by_user in ldap module
448* fix id-based lookups in the ldap module
449* implement islocked() method in ldap module
450* implement setpass() method in ldap module
451* add lchfn and lchsh apps
452* add %d substitution to libuser.conf
453
4540.21
455* finish adding a sasldb module which manipulates a sasldb file
456* add users_enumerate_by_group and groups_enumerate_by_users
457
458
459* luserdel: remove the user's primary group if it has the same name as
460  the user and has no members configured (-G disables)
461* fixup some configure stuff to make libuser.conf get generated correctly
462  even when execprefix isn't specified
463
4640.20
465* only call the auth module when setting passwords (oops)
466* use GTrees instead of GHashTables for most internal tables
467* files: complain properly about unset attributes
468* files: group passwords are single-valued, not multiple-valued
469* add lpasswd app, make sure all apps start up popt with the right names
470
4710.18
472* actually make the new optional arguments optional
473* fix lu_error_new() to actually report errors right
474* fix part of the python bindings
475* include tools in the binary package again
476* fixup modules so that password-changing works right again
477* add a "key" field to prompt structures for use by apps which like to
478  cache these things
479* add an optional "mvhomedir" argument to userModify (python)
480
4810.16.1
482* finish home directory population
483* implement home directory moving
484* change entity get semantics in the python bindings to allow default values for .get()
485* add lu_ent_has(), and a python has_key() method to Entity types
486* don't include tools in the binary package
487* add translated strings
488
489* lib/user.c: catch and ignore errors when running stacks
490* lusermod: fix slightly bogus help messages
491* luseradd: when adding a user and group, use the gid of the group
492  instead of the user's uid as the primary group
493* properly set the password field in user accounts created using
494  auth-only auth modules (shadow needs "x" instead of "!!")
495* implement home directory removal, start on population
496
497* fix group password setting in the files module
498* setpass affects both auth and info, so run both stacks
499
500* make the testbed apps noinst
501
502* fix errors due to uninitialized fields in the python bindings
503* add kwargs support to all python wrappers
504* add a mechanism for passing arguments to python callbacks
505
506* stub out the krb5 and ldap modules so that they'll at least compile again
507 
508* don't bail when writing empty fields to colon-delimited files
509* use permissions of the original file when making backup files instead of 0600
510
511* finish implementing is_locked methods in files/shadow module
512* finish cleanup of the python bindings
513* allow conditional builds of modules so that we can build without
514  all of the prereqs for all of the modules
515
516* add error reporting facilities
517* split public header into pieces by function
518* backend cleanups
519
520* make %{name}-devel require %{name} and not %{name}-devel
521
522* clean up quota bindings some more
523* finish most of the ldap bindings
524* fix a subtle bug in the files module that would show up when renaming accounts
525* fix mapping methods for entity structures in python
526
527* get bindings for prompts to work correctly
528* clean up some of the add/remove semantics (set source on add)
529* ldap: implement enumeration
530* samples/enum: fix the argument order
531
532* clean up python bindings for quota
533
5340.11
535* finish up python bindings for quota support
536
537* finish up quota support libs
538
539* start quota support library to get some type safety
540
541* start looking at quota manipulation
542
543* add functions for enumerating users and groups, optionally per-module
544* lusermod.c: -s should specify the shell, not the home directory
545
5460.10
547* finish the python bindings and verify that the file backend works again
548
549* remove a redundant check which was breaking modifications
550
551* finish adding setpass methods
552
5530.9
554* get a start on some Python bindings
555
5560.8.2
557* make binary-incompatible change in headers
558
5590.8.1
560* add doxygen docs and a "doc" target for them
561
5620.8
563* add a "quiet" prompter
564* add --interactive flag to sample apps and default to using quiet prompter
565* ldap: attempt a "self" bind if other attempts fail
566* krb5: connect to the password-changing service if the user principal has
567  the NULL instance
568
569* the great adding-of-the-copyright-statements
570* take more care when creating backup files in the files module
571
5720.7
573* add openldap-devel as a buildprereq
574* krb5: use a continuous connection
575* krb5: add "realm" config directive
576* ldap: use a continuous connection
577* ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
578* ldap: actually finish the account deletion function
579* ldap: don't send cleartext passwords to the directory
580* fix naming attribute for users (should be uid, not gid)
581* refine the search-by-id,convert-to-name,search-by-name logic
582* fix handling of defaults when the config file is read in but contains no value
583* implement an LDAP information store
584* try to clean up module naming with libtool
585* luseradd: pass plaintext passwords along
586* luseradd: use symbolic attribute names instead of hard-coded
587* lusermod: pass plaintext passwords along
588* lgroupadd: pass plaintext passwords along
589* lgroupmod: pass plaintext passwords along
590* add libuser as a dependency of libuser-devel
591
5920.6
593* See changelog in libuser.spec.in from here on.
594
5950.5
596* Implemented the krb5 back-end (user add, modify, delete only).
597* Lookups in the files module use O_RDONLY instead of O_RDWR.
598
5990.4
600* Modify lu_start prototype and add semantics for non-superuser use (we'll
601  need this later).
602
6030.3
604* Remove recursive account locking from the files/shadow module.
605* Fixup popt help text.
606* Remove dependency on krb5 profile sublibrary for reading config files.
607
6080.2
609* Implemented prompting.
610* Added macros for LU_USERNAME and LU_GROUPNAME, found a bug in the files module
611  while converting to use them.
612* Switched from getopt() to popt for argument parsing to get autohelp in the
613  various test/demo programs.
614
6150.1
616* Finished up most of the internals and the files back-end.
617* Simple shadow-like programs.
Note: See TracBrowser for help on using the repository browser.