1 userdir-ldap-cgi (0.3.40) unstable; urgency=medium
4 * Add dependency on libcrypt-cbc-perl.
5 * Use $config{maildomain} in update.cgi instead of hardcoded db.d.o.
6 * Use $config{sslcafile} instead of hardcoding the path to the SSL CA
10 * ravel is no longer recommended for general shell usage
11 * Add a hint about how to merge existing SSH keys
12 * Update LDAP search docs for the usergroups changes
13 * Drop SSH key fingerprint info from machines.cgi pages
14 * Give an example of the show command
17 * Use a bit more modern perl in Util.pm, drop defined for an array check.
18 * Add debian/compat with level 10.
19 * Add missing Build-Depends for libhtml-parser-perl.
20 * New debhelper version installs in debian/$package, adjust debian/rules
22 * Reformat list of dependencies and drop "perl5", which is no longer a
25 [ Martin Zobel-Helas ]
26 * Drop link to old CA. http://ca.debian.org does not exist any more.
28 -- Martin Zobel-Helas <zobel@debian.org> Mon, 18 Sep 2017 19:21:06 +0200
30 userdir-ldap-cgi (0.3.39) unstable; urgency=medium
33 * Fix changelog entries. The previos "UNRELEASED" version
34 was actually released.
35 * Use new CA root cert in Util.pm.
36 * Fix a XSS reported in
37 https://trac.torproject.org/projects/tor/ticket/14037
38 * Fix horrible use of crypto primitives.
39 * Add HMAC authentication to authtoken.
40 * Verify that the uid passed as a get parameters matches the
41 one stored in authtoken.
44 * machines.cgi: add description field, more informative.
46 -- Peter Palfrader <weasel@debian.org> Sat, 03 Jan 2015 13:30:18 +0100
48 userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
51 * Fix XSS bug in search.cgi
54 * rename voipPassword to rtcPassword
55 * store as HA1 hash rather than as plaintext
58 * Exclude users with accountStatus set from the search.
61 * Fix the type and location of the VCS repository.
62 * Joey is no longer involved in the debian-admin team.
64 * Switch from http to https links where possible.
65 * Slightly nicer attribute list output
67 -- Luca Filipozzi <lfilipoz@emyr.net> Thu, 16 Jan 2014 23:22:03 +0000
69 userdir-ldap-cgi (0.3.37) unstable; urgency=low
71 [ Martin Zobel-Helas ]
72 * use libjs-jquery-tablesorter to sort machines.cgi
73 * promote documentation on searchform.wml
74 * auto-generate html/domains.tab
76 [ Ramakrishnan Muthukrishnan ]
77 * typo: mail default handling incorrectly pointing to the greylist option.
80 * Use the changes@ address consistently in preference to change@.
82 -- Martin Zobel-Helas <zobel@debian.org> Sun, 25 Aug 2013 13:47:23 +0200
84 userdir-ldap-cgi (0.3.36) unstable; urgency=low
86 * use Crypt::PasswdMD5 to ship apache passwords for webPassword
88 -- Martin Zobel-Helas <zobel@debian.org> Fri, 09 Mar 2012 10:01:15 +0100
90 userdir-ldap-cgi (0.3.35) unstable; urgency=low
92 * add webPassword handling
94 -- Martin Zobel-Helas <zobel@debian.org> Thu, 08 Mar 2012 19:24:05 +0100
96 userdir-ldap-cgi (0.3.34) unstable; urgency=low
98 * fix quoting in machines.cgi
100 -- Martin Zobel-Helas <zobel@debian.org> Fri, 06 Jan 2012 12:47:09 +0100
102 userdir-ldap-cgi (0.3.33) unstable; urgency=low
105 * Change import of Net::LDAP to work on squeeze.
106 * cracklib-packer does not like '*' as input. Filter it out in
107 password-qualify-check.
108 * Util.pm:UpgradeConnection(): properly concatenate strings.
109 * machines.cgi: generate fingerprints for ecdsa-sha2-nistp256 ssh keys.
111 [ Martin Zobel-Helas ]
112 * correct mail address in password.wml
113 * adopt to spacefun theme
115 -- Martin Zobel-Helas <zobel@debian.org> Wed, 04 Jan 2012 23:22:06 +0100
117 userdir-ldap-cgi (0.3.32) unstable; urgency=low
120 * fix link to SPI CA; add link to Debian CA
123 * password-qualify-check: Only import cracklib (do not fallback to crack).
124 Also makes setting cracklib.min_length actually work
126 [ Martin Zobel-Helas ]
127 * Replace the sentence fragment at the beginning of the documentation on
128 DNS records with a complete sentence that uses the actual field name, making
129 the documentation more searchable. (Patch by Steve Langasek
132 -- Luca Filipozzi <lfilipoz@debian.org> Mon, 01 Jan 2011 15:03:18 -0700
134 userdir-ldap-cgi (0.3.31) unstable; urgency=low
137 * Actually install new doc.
139 [ Martin Zobel-Helas ]
140 * Fix typo in update.wml spotted by Sylvain Beucler
142 -- Martin Zobel-Helas <zobel@debian.org> Tue, 01 Jun 2010 22:25:49 +0200
144 userdir-ldap-cgi (0.3.30) unstable; urgency=low
147 * Fix building of wml things [Erinn Clark (helix)].
149 [ Martin Zobel-Helas ]
150 * Move navbar move to CSS (as suggested by Simon Paillard).
151 * Download debian.css and debian-en.css while building, as we run on https
152 * Add documentation about allowed_hosts feature.
154 -- Martin Zobel-Helas <zobel@debian.org> Sun, 31 Jan 2010 12:25:51 +0100
156 userdir-ldap-cgi (0.3.29) unstable; urgency=low
158 * Move html into the cgi
159 * Support for defaultMailOptions attribute
162 -- Stephen Gran <sgran@debian.org> Mon, 16 Nov 2009 00:18:15 +0000
164 userdir-ldap-cgi (0.3.28) unstable; urgency=low
166 * Add myself to uploaders
167 * Remove Ryan and Joey from Uploaders: thanks for all the fish!
168 * Initial BATV token support
170 -- Stephen Gran <sgran@debian.org> Sun, 15 Nov 2009 12:31:38 +0000
172 userdir-ldap-cgi (0.3.27) unstable; urgency=low
174 * Fix showing echelon information. It needs unescaped input.
176 -- Peter Palfrader <weasel@debian.org> Wed, 13 May 2009 00:11:34 +0200
178 userdir-ldap-cgi (0.3.26) unstable; urgency=low
180 * In machines.cgi: do not skip [[- purposes. "[[-<hostname>]]" gets
181 stuff added to ssh_known_hosts but not http linked.
183 -- Peter Palfrader <weasel@debian.org> Sat, 09 May 2009 01:29:52 +0200
185 userdir-ldap-cgi (0.3.25) unstable; urgency=low
187 * Util.pm: change capath /etc/ssl/certs to
188 cafile /etc/ssl/certs/spi-cacert-2008.pem because the libldap
189 folks thought it was a good idea to remove that feature for lenny.
190 I hate you ldap and gnutls.
192 -- Peter Palfrader <weasel@debian.org> Fri, 27 Feb 2009 11:34:59 +0100
194 userdir-ldap-cgi (0.3.24) unstable; urgency=low
196 * Ignore the * in [[*host]] links, and ignore [[- ]] in [[-hostname]]
197 entries. Both are special to the ssh_known_hosts generation.
200 -- Peter Palfrader <weasel@debian.org> Sun, 23 Nov 2008 21:42:09 +0100
202 userdir-ldap-cgi (0.3.23) unstable; urgency=low
204 * New hmac scheme for sudo passwords.
206 -- Peter Palfrader <weasel@debian.org> Fri, 14 Nov 2008 20:01:38 +0100
208 userdir-ldap-cgi (0.3.22) unstable; urgency=low
210 * Verify confirmed hmac in web display, showing status as either 'confirmed'
211 (which now means also verified, i.e. it will make it to the host), or
214 -- Peter Palfrader <weasel@debian.org> Tue, 16 Sep 2008 22:10:27 +0200
216 userdir-ldap-cgi (0.3.21) unstable; urgency=low
218 * Slightly change find call in cronjob.
220 -- Peter Palfrader <weasel@debian.org> Tue, 16 Sep 2008 16:41:50 +0200
222 userdir-ldap-cgi (0.3.20) unstable; urgency=low
224 * Install a cron job to get rid of old sessions.
226 -- Peter Palfrader <weasel@debian.org> Tue, 16 Sep 2008 16:39:48 +0200
228 userdir-ldap-cgi (0.3.19) unstable; urgency=low
230 * Do not HTML escape stuff we just got from the user before
231 writing it to LDAP, set it as passwords, etc. Instead
232 escape stuff we did read from LDAP.
234 -- Peter Palfrader <weasel@debian.org> Tue, 16 Sep 2008 16:21:32 +0200
236 userdir-ldap-cgi (0.3.18) unstable; urgency=low
238 * Add password checking via a python wrapper.
239 * Add myself to uploaders.
241 -- Peter Palfrader <weasel@debian.org> Mon, 15 Sep 2008 14:25:51 +0200
243 userdir-ldap-cgi (0.3.17) unstable; urgency=low
245 * Comment out uuid - nobody will get it's just an identifier.
247 -- Peter Palfrader <weasel@debian.org> Mon, 15 Sep 2008 00:47:52 +0200
249 userdir-ldap-cgi (0.3.16) unstable; urgency=low
251 * Switch host and hostname in update cgi for sudopasswd (so "gluck" gets
252 displayed and "gluck.debian.org" stored).
254 -- Peter Palfrader <weasel@debian.org> Mon, 15 Sep 2008 00:43:55 +0200
256 userdir-ldap-cgi (0.3.15) unstable; urgency=low
258 * Allow setting of userpassword.
260 -- Peter Palfrader <weasel@debian.org> Sun, 14 Sep 2008 23:42:20 +0200
262 userdir-ldap-cgi (0.3.14) unstable; urgency=low
264 * Hide hosts on website whose status starts with unlisted.
266 -- Peter Palfrader <weasel@debian.org> Tue, 15 Jul 2008 21:46:07 +0200
268 userdir-ldap-cgi (0.3.13) unstable; urgency=low
270 * Remove distribution from summary, add purpose and sponsor
272 -- Peter Palfrader <weasel@debian.org> Tue, 15 Jul 2008 16:34:10 +0200
274 userdir-ldap-cgi (0.3.12) unstable; urgency=low
276 * Also support [[link|wiki links with alternate link text]].
277 * Use wikilink format for sponsors too - requires changing ldap.
279 -- Peter Palfrader <weasel@debian.org> Tue, 15 Jul 2008 16:00:50 +0200
281 userdir-ldap-cgi (0.3.11) unstable; urgency=low
283 * Show purposes as a bullet list
284 * support [[wikistylelinks]] in purpose
286 -- Peter Palfrader <weasel@debian.org> Tue, 15 Jul 2008 15:26:57 +0200
288 userdir-ldap-cgi (0.3.10) unstable; urgency=low
290 * Make machines.cgi display the purpose attribute from LDAP [HE].
291 * Add VoIP field to CGI [zobel].
292 * make summaryattrs sortable [zobel].
293 * Use SSL/TLS when configured to do so, and Depend on libio-socket-ssl-perl
296 -- Peter Palfrader <weasel@debian.org> Sun, 25 May 2008 18:21:45 +0200
298 userdir-ldap-cgi (0.3.9) unstable; urgency=low
301 - Reimplement ssh fingerprint without using temp files and external
303 - Remove access-restricted date fields.
305 - Add support for mailGreylisting and mailCallout
307 -- Ryan Murray <rmurray@debian.org> Wed, 27 Dec 2006 19:42:28 -0700
309 userdir-ldap-cgi (0.3.8) unstable; urgency=low
311 Changes by Martin Schulze:
313 - Added support for displaying the Jabber ID
314 - Ignore the vacation request when the user hasn't logged in
316 - Added support for updating the Jabber ID
318 Changes by Ryan Murray:
319 - change charset to utf-8, as our LDAP schema is utf-8
320 - Add support for gender, birthDate, and mailDisableMessage
321 - Other misc. output cleanups and fixes.
323 -- Ryan Murray <rmurray@debian.org> Fri, 22 Dec 2006 02:05:18 -0700
325 userdir-ldap-cgi (0.3.7) stable; urgency=low
327 * Forked package to only contain web scripts
329 -- Martin Schulze <joey@infodrom.org> Thu, 18 Nov 2004 13:06:14 +0100
331 userdir-ldap (0.3.6) unstable; urgency=low
333 * Specify full path to postmap
335 -- Ryan Murray <rmurray@debian.org> Fri, 26 Sep 2003 11:48:25 -0600
337 userdir-ldap (0.3.5) unstable; urgency=low
339 * Add depends on rsync
340 * Generate db of debian.org on postfix systems
342 -- Ryan Murray <rmurray@debian.org> Sat, 30 Aug 2003 18:41:29 -0600
344 userdir-ldap (0.3.4) unstable; urgency=low
346 * Use the right python version in the maintainer scripts
348 -- Ryan Murray <rmurray@debian.org> Tue, 18 Mar 2003 19:26:31 -0700
350 userdir-ldap (0.3.3) unstable; urgency=low
352 * Rebuild for python2.1 and woody
354 -- Ryan Murray <rmurray@debian.org> Wed, 12 Mar 2003 21:30:12 -0700
356 userdir-ldap (0.3.2) unstable; urgency=low
358 * Seperation of bsmtp and zoneupdate
360 -- Ryan Murray <rmurray@debian.org> Thu, 8 Aug 2002 12:07:00 -0700
362 userdir-ldap (0.3.1) unstable; urgency=low
364 * Add ud-zoneupdate from klecker's /usr/local/bin
366 -- Ryan Murray <rmurray@debian.org> Tue, 6 Aug 2002 22:42:05 -0700
368 userdir-ldap (0.3) unstable; urgency=low
370 * Only use sshrsa{host,}key variable, and store all three types of keys
373 -- Jason Gunthrope <jgg@debian.org> Sun, 2 Dec 2001 20:21:26 -0800
375 userdir-ldap (0.2) unstable; urgency=low
377 * What the hey, a new version number.
379 -- Jason Gunthrope <jgg@debian.org> Sun, 11 Feb 2001 18:37:27 -0800
381 userdir-ldap (0.1) unstable; urgency=low
385 -- Jason Gunthrope <jgg@debian.org> Fri, 30 Apr 1999 00:39:31 -0600