File smbldap-tools.changes of Package smbldap-tools
-------------------------------------------------------------------
Wed May 25 07:49:03 UTC 2016 - jweberhofer@weberhofer.at
- Build package smbldap-tools-migration which contains the migration
scripts to migrate from unix/samba accounts to ldap accounts
- Update to 0.9.11
* Disable lanmanPassword by default
* smbldap-config:
- Add POD text (Thanks to Paul Howarth <pghmcfc>, bug #3013)
- Do NOT assume "ou=..."-style value for "ldap users suffix",
"ldap groups suffix" and "ldap machine suffix" in smb.conf
* smbldap-config: Add support renamed and new parameters
(Thanks to Gervasio Susterman <gerv>, bug #2914)
* smbldap-useradd:
- Do not add dummy userPassword attribute
- Die on adding a user entry fails
- Set random password instead of insecure one on `smbpasswd -a`
- Check if specified UID is owned by local user (bug #2974)
* Report error on exec() failure
* smbldap.conf: New parameter: lanmanPassword
* smbldap_tools.pm: Export account_base_rid() for smbldap-usermod
- removed smbldap-tools-0.9.10-pod.patch (included into upstream)
- removed smbldap-tools-0.9.10-export.patch (included into upstream)
- replaced smbldap-tools-0.9.9-suse-migrationscripts.patch by
smbldap-tools-0.9.11-suse-migrationscripts.patch
-------------------------------------------------------------------
Tue Jun 9 13:18:53 UTC 2015 - jweberhofer@weberhofer.at
- Updated file and directory permissions
- Don't require jcode and other tools to be to be installed
- Add POD to smbldap-config so we don't generate an empty manpage
smbldap-tools-0.9.10-pod.patch
- Add missing export of account_base_rid, needed by smbldap_usermod:
smbldap-tools-0.9.10-export.patch
-------------------------------------------------------------------
Mon Mar 4 12:02:46 UTC 2013 - jweberhofer@weberhofer.at
- Update to 0.9.10
* smbldap_tools.pm: Add is_attr_single_value() to check if
a specified attribute is defined as single-value in the LDAP schema
* smbldap_tools.pm: read_user_human_readable: Protect attribute
values from Encode::decode_utf8() with Encode::FB_CROAK
* smbldap-useradd, smbldap-usermod: Check if mailRoutingAddress
attribute is single-value or not
* smbldap-usermod:
- Remove mailRoutingAddress attribute if empty
- Suppress "no such attribute" error on remove mail or
mailLocalAddress attribute when already absent
-------------------------------------------------------------------
Sun Sep 16 16:13:15 UTC 2012 - jweberhofer@weberhofer.at
- Rebased opensuse patches
- Added FSF-Address patch
-------------------------------------------------------------------
* Wed Aug 8 2012 Paul Howarth <paul@city-fan.org> - 0.9.9-1
- Update to 0.9.9
- smbldap-userlist, smbldap-grouplist: specify Net::LDAP search attributes
as an array ref, not a string
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681350)
- smbldap-useradd: fix smbldap-passwd name
- smbldap_tools.pm: $config{masterLDAP} and $config{slaveLDAP} can take a
LDAP URI
- smbldap_tools.pm: non-root user cannot run smbldap-passwd,
smbldap-userinfo, smbldap-userlist and smbldap-grouplist with SSL-enabled
LDAP server (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=647860)
- Update config patch to reflect use of URIs for LDAP servers
- Drop upstreamed samba net location patch
-------------------------------------------------------------------
* Wed Mar 7 2012 Paul Howarth <paul@city-fan.org> - 0.9.8-1
- NOTE: USERS THAT WISH TO KEEP USING THE LEGACY RID ALLOCATION ALGORITHM OF
samba 2.x, WHICH WAS THE DEFAULT IN PREVIOUS VERSIONS OF smbldap-tools,
SHOULD RUN THE smbldap-upgrade-0.9.6.pl SCRIPT AFTER UPGRADING TO THIS
VERSION
- Update to 0.9.8
- introduce autoconf (configure.in, Makefile.in and so on)
- smbldap_tools.pm: use Encode instead of Unicode::MapUTF8
- smbldap-populate, smbldap_tools.pm: use /nonexistent instead of /dev/null
for guest's and computer's homeDirectory
- smbldap_tools.pm: add read_password() to avoid `stty -echo` hacks
- use /usr/sbin/nscd -i instead of /etc/init.d/nscd
- smbldap-passwd: do not use permuted -s option for the smbpasswd(1)
command-line because the plain-old getopt(3) does not support it
- add shadowAccount parameter in smbldap.conf to control whether to treat
shadowAccount objectclass and attributes or not
- rename smbldap.conf parameters:
- hash_encrypt -> password_hash
- crypt_salt_format -> password_crypt_salt_format
- LDAPv3 Password Modify (RFC 3062) extended operation support when
password_hash="exop" in smbldap.conf
- use sambaNextRid attribute in sambaDomain entry for the next RID, same as
Samba 3.0+ (only when sambaAlgorithmicRidBase attribute does NOT exist in
sambaDomain entry for backward compatibility)
- smbldap-populate: use Net::LDAP::Entry for populating entries
- smbldap-usermod: new option: --ou NODE (move user entry to the specified
organizational unit)
- canonicalize user name to treat the memberUid as case-sensitive attribute
(but the uid attribute is case-insensitive)
- smbldap-useradd: new option: -p (allow to set password from STDIN without
verification, e.g. using a pipe)
- smbldap-useradd: new option: --non-unique (allow the creation of a user
account with a duplicate [non-unique] UID)
- smbldap-populate: create parent entry for $config{usersdn} (and others) if
it does not exist (e.g. usersdn="ou=Users,ou=parent,${suffix}" in
smbldap.conf)
- smbldap-config: rename from configure.pl
- smbldap-populate: create parent entry for $config{sambaUnixIdPooldn} if it
does not exist
- use Digest::SHA instead of Digest::SHA1 if Perl version > 5.10.0
- smbldap-usermod: -M, -O, -T option: remove associated attribute when the
null value is specified
- No longer need to remove IDEALX paths
- Drop now-redundant nscd and UTF-8 patches
- Use upstream build/install methodology
- Add patch to fix location of samba "net" command
-------------------------------------------------------------------
* Thu Aug 11 2011 Johannes Weberhofer <opendevel@weberhofer.at>
- fixed several opensuse LDAP-issues
- made importing-tools working
- moved importing-tools from doc to /use/share/smbldap-tools directory
-------------------------------------------------------------------
* Tue Jul 26 2011 Johannes Weberhofer <opendevel@weberhofer.at>
- adapted for opensuse
-------------------------------------------------------------------
* Mon Mar 7 2011 Paul Howarth <paul@city-fan.org> - 0.9.6-3
- update to upstream svn revision 36
- fix broken configure.pl script (#677272)
- smbldap_tools.pm: various minor fixes
- smbldap-populate: fix wrong sambaGroupType values for local groups
- smbldap-useradd: use -h option for chown of home directory
- smbldap-useradd: extend -Z option to take multiple options
- smbldap-usermod: set sambaPwdLastSet to the current time if "-B 0" is used
- smbldap-usermod: extend -Z (--attr) option:
- take multiple -Z options
- append a value to a multi-value attribute by -Z +name=value
- remove a value from a multi-value attribute by -Z -name=value
- remove an attribute by -Z -name
- drop UTF-8 patch, no longer needed
- renumber patches to separate upstream and downstream patches
- rediff patches to apply cleanly to new base
- use a patch to recode the docs as UTF-8 rather than brute-force iconv
-------------------------------------------------------------------
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.6-2
- rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
-------------------------------------------------------------------
* Thu Dec 9 2010 Paul Howarth <paul@city-fan.org> - 0.9.6-1
- update to 0.9.6
- new tool: smbldap-grouplist (list LDAP groups)
- smbldap-useradd, smbldap-usershow, smbldap-usermod:
- change default encoding of givenName and sn to UTF-8 (bug #11717)
- new option: -X (input/output encoding, defaults to UTF-8)
- new option: -O (localMailAddress attribute)
- changed option: -M (now sets only mail attribute)
- home directory is now chowned as $userUidNumber:$userGidNumber
to avoid race conditions (bug #11721)
- use gecos as displayName if givenName and userSN not provided
(bug #14517)
- smbldap-passwd:
- new option: -p (allow root to set password from STDIN without
verification, e.g. using a pipe) (bug #11964)
- change userPassword, shadowLastChange and shadowMax individually e.g. no
shadow class or user may not have rights (bug #15052)
- smbldap-groupmod: allow deletion of users from groups without a defined
samba group SID)
- remove references to smbldap_conf.pm
- fix Z option in smbldap-useradd (custom LDAP attribute) (fixes #590429)
- alphabetically reorganize options
- fix several mis-spellings and typos in smbldap-useradd
- update source URL to reflect new upstream file layout
- drop upstreamed chown patch
- update remaining patches to remove fuzz
- drop dependency on openldap-servers (for /usr/sbin/slappasswd) as the
default configuration is to hash passwords directly rather than calling out
to slappasswd (#609056)
- drop dependency on samba-common (for /usr/bin/smbpasswd) as the default
configuration handles the functionality directly rather than calling out to
smbpasswd
- drop execute permissions from configuration/migration scripts in %%doc
-------------------------------------------------------------------
* Wed Jun 2 2010 Marcela Maslanova <mmaslano@redhat.com> - 0.9.5-7
- mass rebuild with perl-5.12.0
-------------------------------------------------------------------
* Mon Dec 7 2009 Stepan Kasal <skasal@redhat.com> - 0.9.5-6
- rebuild against perl 5.10.1
-------------------------------------------------------------------
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-5
- rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
-------------------------------------------------------------------
* Fri Mar 6 2009 Paul Howarth <paul@city-fan.org> 0.9.5-4
- change dependencies on samba and openldap-clients to samba-common and
openldap-servers respectively
- invalidate nscd caches rather than restart nscd (#476504)
- add descriptions and bugzilla references to patch references in spec
-------------------------------------------------------------------
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 0.9.5-3
- rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
-------------------------------------------------------------------
* Thu May 22 2008 Paul Howarth <paul@city-fan.org> 0.9.5-2
- assume the user's locale uses UTF-8 rather than ISO-8859-1 (#441833)
- set ownership of home directory created by smbldap-useradd -m using UID
number rather than username so that delays in LDAP replication don't
affect the operation (#447758)
-------------------------------------------------------------------
* Wed Apr 23 2008 Paul Howarth <paul@city-fan.org> 0.9.5-1
- update to 0.9.5
- update config patch
-------------------------------------------------------------------
* Thu Mar 6 2008 Tom "spot" Callaway <tcallawa@redhat.com> 0.9.4-2
- rebuild for new perl
-------------------------------------------------------------------
* Wed Sep 26 2007 Paul Howarth <paul@city-fan.org> 0.9.4-1
- update to 0.9.4
- new upstream, new URLs
- drop useradd_option-o enhancement patch, new included upstream
- update config patch
- new script smbldap-userlist included
- convert docs to UTF-8
- HTML docs no longer included with upstream source
- make and include manpages
-------------------------------------------------------------------
* Thu Aug 23 2007 Paul Howarth <paul@city-fan.org> 0.9.2a-1
- update URLs, as original upstream source is now dead
- apply useradd_option-o enhancement patch from upstream
- clarify license as GPL version 2 or later
- add openssl buildreq for detection of TLS cert/key directory
-------------------------------------------------------------------
* Sun Oct 29 2006 Paul Howarth <paul@city-fan.org> 0.9.2-5
- perl(Unicode::MapUTF8) now available on x86_64, so remove ExcludeArch
and revert to noarch package (#211866)
-------------------------------------------------------------------
* Mon Oct 23 2006 Paul Howarth <paul@city-fan.org> 0.9.2-4
- Exclude x86_64 as perl(Unicode::MapUTF8) is unavailable (#211866)
- A consequence of this is that the package can no longer be noarch
- Install smbldap_tools.pm without unnecessary exec bits
- Fix example idmapdn entry in config file
-------------------------------------------------------------------
* Fri Sep 22 2006 Paul Howarth <paul@city-fan.org> 0.9.2-3
- Require IO::Socket::SSL to ensure we have SSL support even if perl-LDAP
doesn't enforce this dependency (#122066, #207430)
-------------------------------------------------------------------
* Fri Jan 27 2006 Paul Howarth <paul@city-fan.org> 0.9.2-2
- Incorporate smbldap.conf review suggestions from Steven Pritchard (#178905)
Undefine SID so it is fetched with "net getlocalsid"
Undefine sambaDomain so it is fetched from smb.conf
TLS keys and certs should go in /etc/pki/tls/certs
usersdn should be "ou=People,${suffix}" to match OpenLDAP migration tools
groupsdn should be "ou=Group,${suffix}" to match OpenLDAP migration tools
-------------------------------------------------------------------
* Wed Jan 25 2006 Paul Howarth <paul@city-fan.org> 0.9.2-1
- Update to 0.9.2
-------------------------------------------------------------------
* Tue Jan 17 2006 Paul Howarth <paul@city-fan.org> 0.9.1-2
- Unpack tarball quietly
- Clean up file list
- Put smbldap_tools.pm in %%{perl_vendorlib} rather than %%{_sbindir}
- Add %%{?dist} tag
-------------------------------------------------------------------
* Sat Jun 04 2005 Dag Wieers <dag@wieers.com> - 0.9.1-1 - 3108+/dag
- Updated to release 0.9.1.
-------------------------------------------------------------------
* Tue Apr 05 2005 Dag Wieers <dag@wieers.com> - 0.8.8-1
- Updated to release 0.8.8.
-------------------------------------------------------------------
* Wed Feb 16 2005 Dag Wieers <dag@wieers.com> - 0.8.7-2
- Fixed locations, removed /opt/IDEALX. (Alain Rykaert)
-------------------------------------------------------------------
* Tue Feb 15 2005 Dag Wieers <dag@wieers.com> - 0.8.7-1
- Updated to release 0.8.7.
-------------------------------------------------------------------
* Sat Jan 22 2005 Dag Wieers <dag@wieers.com> - 0.8.6-1
- Updated to release 0.8.6.
-------------------------------------------------------------------
* Sun Jun 20 2004 Dag Wieers <dag@wieers.com> - 0.8.5-1
- Updated to release 0.8.5.
-------------------------------------------------------------------
* Sat Mar 13 2004 Dag Wieers <dag@wieers.com> - 0.8.4-1
- Updated to release 0.8.4.
-------------------------------------------------------------------
* Fri Dec 05 2003 Dag Wieers <dag@wieers.com> - 0.8.2-0
- Updated to release 0.8.2.
-------------------------------------------------------------------
* Thu Oct 09 2003 Dag Wieers <dag@wieers.com> - 0.8.1-0
- Initial package. (using DAR)
