+userdir-ldap-cgi (0.3.41) UNRELEASED; urgency=medium
+
+ * Remove html/domains.tab from the source, it's autogenerated at
+ build time.
+ * remove gender attribute from ud-ldap: How one identifies is not relevant
+ to their work in Debian.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 04 Nov 2018 13:13:10 +0100
+
+userdir-ldap-cgi (0.3.40) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * Add dependency on libcrypt-cbc-perl.
+ * Use $config{maildomain} in update.cgi instead of hardcoded db.d.o.
+ * Use $config{sslcafile} instead of hardcoding the path to the SSL CA
+ in Util.pm.
+
+ [ Paul Wise ]
+ * ravel is no longer recommended for general shell usage
+ * Add a hint about how to merge existing SSH keys
+ * Update LDAP search docs for the usergroups changes
+ * Drop SSH key fingerprint info from machines.cgi pages
+ * Give an example of the show command
+
+ [ Tollef Fog Heen ]
+ * Use a bit more modern perl in Util.pm, drop defined for an array check.
+ * Add debian/compat with level 10.
+ * Add missing Build-Depends for libhtml-parser-perl.
+ * New debhelper version installs in debian/$package, adjust debian/rules
+ appropriately.
+ * Reformat list of dependencies and drop "perl5", which is no longer a
+ thing.
+
+ [ Martin Zobel-Helas ]
+ * Drop link to old CA. http://ca.debian.org does not exist any more.
+
+ -- Martin Zobel-Helas <zobel@debian.org> Mon, 18 Sep 2017 19:21:06 +0200
+
+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * Fix changelog entries. The previos "UNRELEASED" version
+ was actually released.
+ * Use new CA root cert in Util.pm.
+ * Fix a XSS reported in
+ https://trac.torproject.org/projects/tor/ticket/14037
+ * Fix horrible use of crypto primitives.
+ * Add HMAC authentication to authtoken.
+ * Verify that the uid passed as a get parameters matches the
+ one stored in authtoken.
+
+ [ Hector Oron ]
+ * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 03 Jan 2015 13:30:18 +0100
+
+userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
+
+ [ Moritz Naumann ]
+ * Fix XSS bug in search.cgi
+
+ [ Luca Filipozzi ]
+ * rename voipPassword to rtcPassword
+ * store as HA1 hash rather than as plaintext
+
+ [ Tollef Fog Heen ]
+ * Exclude users with accountStatus set from the search.
+
+ [ Paul Wise ]
+ * Fix the type and location of the VCS repository.
+ * Joey is no longer involved in the debian-admin team.
+ * Fix typo in doctype
+ * Switch from http to https links where possible.
+ * Slightly nicer attribute list output
+
+ -- Luca Filipozzi <lfilipoz@emyr.net> Thu, 16 Jan 2014 23:22:03 +0000
+
+userdir-ldap-cgi (0.3.37) unstable; urgency=low
+
+ [ Martin Zobel-Helas ]
+ * use libjs-jquery-tablesorter to sort machines.cgi
+ * promote documentation on searchform.wml
+ * auto-generate html/domains.tab
+
+ [ Ramakrishnan Muthukrishnan ]
+ * typo: mail default handling incorrectly pointing to the greylist option.
+
+ [ Nick Mathewson ]
+ * Use the changes@ address consistently in preference to change@.
+
+ -- Martin Zobel-Helas <zobel@debian.org> Sun, 25 Aug 2013 13:47:23 +0200
+
+userdir-ldap-cgi (0.3.36) unstable; urgency=low
+
+ * use Crypt::PasswdMD5 to ship apache passwords for webPassword
+
+ -- Martin Zobel-Helas <zobel@debian.org> Fri, 09 Mar 2012 10:01:15 +0100
+
+userdir-ldap-cgi (0.3.35) unstable; urgency=low
+
+ * add webPassword handling
+
+ -- Martin Zobel-Helas <zobel@debian.org> Thu, 08 Mar 2012 19:24:05 +0100
+
+userdir-ldap-cgi (0.3.34) unstable; urgency=low
+
+ * fix quoting in machines.cgi
+
+ -- Martin Zobel-Helas <zobel@debian.org> Fri, 06 Jan 2012 12:47:09 +0100
+
+userdir-ldap-cgi (0.3.33) unstable; urgency=low
+
+ [ Peter Palfrader ]
+ * Change import of Net::LDAP to work on squeeze.
+ * cracklib-packer does not like '*' as input. Filter it out in
+ password-qualify-check.
+ * Util.pm:UpgradeConnection(): properly concatenate strings.
+ * machines.cgi: generate fingerprints for ecdsa-sha2-nistp256 ssh keys.
+
+ [ Martin Zobel-Helas ]
+ * correct mail address in password.wml
+ * adopt to spacefun theme
+
+ -- Martin Zobel-Helas <zobel@debian.org> Wed, 04 Jan 2012 23:22:06 +0100
+
+userdir-ldap-cgi (0.3.32) unstable; urgency=low
+
+ [ Luca Filipozzi ]
+ * fix link to SPI CA; add link to Debian CA
+
+ [ Peter Palfrader ]
+ * password-qualify-check: Only import cracklib (do not fallback to crack).
+ Also makes setting cracklib.min_length actually work
+
+ [ Martin Zobel-Helas ]
+ * Replace the sentence fragment at the beginning of the documentation on
+ DNS records with a complete sentence that uses the actual field name, making
+ the documentation more searchable. (Patch by Steve Langasek
+ <vorlon@debian.org>)
+
+ -- Luca Filipozzi <lfilipoz@debian.org> Mon, 01 Jan 2011 15:03:18 -0700
+
+userdir-ldap-cgi (0.3.31) unstable; urgency=low
+
+ [ Stephen Gran ]
+ * Actually install new doc.
+
+ [ Martin Zobel-Helas ]
+ * Fix typo in update.wml spotted by Sylvain Beucler
+
+ -- Martin Zobel-Helas <zobel@debian.org> Tue, 01 Jun 2010 22:25:49 +0200
+
+userdir-ldap-cgi (0.3.30) unstable; urgency=low
+
+ [ Peter Palfrader ]
+ * Fix building of wml things [Erinn Clark (helix)].
+
+ [ Martin Zobel-Helas ]
+ * Move navbar move to CSS (as suggested by Simon Paillard).
+ * Download debian.css and debian-en.css while building, as we run on https
+ * Add documentation about allowed_hosts feature.
+
+ -- Martin Zobel-Helas <zobel@debian.org> Sun, 31 Jan 2010 12:25:51 +0100
+
+userdir-ldap-cgi (0.3.29) unstable; urgency=low
+
+ * Move html into the cgi
+ * Support for defaultMailOptions attribute
+ * Doc fixups
+
+ -- Stephen Gran <sgran@debian.org> Mon, 16 Nov 2009 00:18:15 +0000
+
+userdir-ldap-cgi (0.3.28) unstable; urgency=low
+
+ * Add myself to uploaders
+ * Remove Ryan and Joey from Uploaders: thanks for all the fish!
+ * Initial BATV token support
+
+ -- Stephen Gran <sgran@debian.org> Sun, 15 Nov 2009 12:31:38 +0000
+
+userdir-ldap-cgi (0.3.27) unstable; urgency=low
+
+ * Fix showing echelon information. It needs unescaped input.
+
+ -- Peter Palfrader <weasel@debian.org> Wed, 13 May 2009 00:11:34 +0200
+
+userdir-ldap-cgi (0.3.26) unstable; urgency=low
+
+ * In machines.cgi: do not skip [[- purposes. "[[-<hostname>]]" gets
+ stuff added to ssh_known_hosts but not http linked.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 09 May 2009 01:29:52 +0200
+
+userdir-ldap-cgi (0.3.25) unstable; urgency=low
+
+ * Util.pm: change capath /etc/ssl/certs to
+ cafile /etc/ssl/certs/spi-cacert-2008.pem because the libldap
+ folks thought it was a good idea to remove that feature for lenny.
+ I hate you ldap and gnutls.
+
+ -- Peter Palfrader <weasel@debian.org> Fri, 27 Feb 2009 11:34:59 +0100
+
+userdir-ldap-cgi (0.3.24) unstable; urgency=low
+
+ * Ignore the * in [[*host]] links, and ignore [[- ]] in [[-hostname]]
+ entries. Both are special to the ssh_known_hosts generation.
+ [Thomas Viehmann]
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 23 Nov 2008 21:42:09 +0100
+
userdir-ldap-cgi (0.3.23) unstable; urgency=low
* New hmac scheme for sudo passwords.