X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=debian%2Fchangelog;h=baca0e51654d71ece555d83b58966621491f4c24;hb=7065b4155d6edccfc64333beaa409411056f2b88;hp=310ee36e518b70008abeb9886290ae42cc05aeda;hpb=bfb0c6a2273f10ebffd6dfa15a45ae7f5671b467;p=mirror%2Fuserdir-ldap.git

diff --git a/debian/changelog b/debian/changelog
index 310ee36..baca0e5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,97 @@
+userdir-ldap (0.3.47) unstable; urgency=low
+
+  * Fix a typo on ud-mailgate.
+
+ -- Peter Palfrader <weasel@debian.org>  Fri, 14 Nov 2008 20:40:19 +0100
+
+userdir-ldap (0.3.46) unstable; urgency=low
+
+  * Change the hmac that protect sudopassword entries to also
+    hash the purpose ("sudo") and the owning user's uid into
+    the mac.
+
+ -- Peter Palfrader <weasel@debian.org>  Fri, 14 Nov 2008 20:27:38 +0100
+
+userdir-ldap (0.3.45) unstable; urgency=low
+
+  * ud-generate: Declare [UNTRSUTED] flag as obsolete.
+  * ud-generate: Add [NOMARKERS] flag to not push markers (gps coordinates) to host.
+  * ud-replicate: Use --delete-after with rsync.  Previously we didn't delete
+    stuff ever.
+  * ud-replicate: Sync only ssh_known_hosts into chroots, not ssh*.
+  * ud-replicate: Clean up better, correcting some mistakes done by earlier
+    versions.
+
+ -- Peter Palfrader <weasel@debian.org>  Sun, 26 Oct 2008 22:31:46 +0100
+
+userdir-ldap (0.3.44) unstable; urgency=low
+
+  * ud-mailgate: Do not support del requests for sshDSAAuthKey - there is no
+    such attribute.
+  * ud-generate: do not export sudopassword to untrusted or nopasswd hosts,
+    unless the password is explicitly added for this host and not just for '*'.
+
+ -- Peter Palfrader <weasel@debian.org>  Fri, 03 Oct 2008 13:23:22 +0200
+
+userdir-ldap (0.3.43) unstable; urgency=low
+
+  * FQHNs sometimes, well always, include dots.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Sep 2008 15:07:21 +0200
+
+userdir-ldap (0.3.42) unstable; urgency=low
+
+  * Export all accounts into sudo-passwd, even if they
+    do not have a sudo password set.  Set their password to '*' then.
+    etc/pam.d/sudo should look like this then:
+      auth [authinfo_unavail=ignore success=done ignore=ignore default=die] pam_pwdfile.so pwdfile=/var/lib/misc/thishost/sudo-passwd
+      auth required pam_unix.so nullok_secure try_first_pass
+      @include common-account
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Sep 2008 14:30:41 +0200
+
+userdir-ldap (0.3.41) unstable; urgency=low
+
+  * ud-generate: lower casing the sudopasswd ldap entry prior to parsing
+    and verifying it was a bad idea.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 19:26:14 +0200
+
+userdir-ldap (0.3.40) unstable; urgency=low
+
+  * Reading the hmac key only once is too troublesome.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 01:12:23 +0200
+
+userdir-ldap (0.3.39) unstable; urgency=low
+
+  * Lowercasing hashed sudo passwords in ud-mailgate not considered smart.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:40:13 +0200
+
+userdir-ldap (0.3.38) unstable; urgency=low
+
+  * Fix order of some calls so stuff works again.
+  * And import pwd and os and the hmac crowed in userdir_ldap.py.
+  * Using the right variable name will also help.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:18:37 +0200
+
+userdir-ldap (0.3.37) unstable; urgency=low
+
+  * ud-mailgate: Do not commit any changes if one of the requests is invalid
+    or could not be parsed or caused an error or anything.
+  * Add sudoPassword to schema, and the slapd.conf/ACL snippet
+    A sudoPassword entry in LDAP has the form of
+      "<uuid> unconfirmed <hostlist> <cryptedpassword>", or
+      "<uuid> confirmed:<hmac_sha1("password-is-confirmed:<uuid>:<hosts>:<cryptedpass>")> <hostlist> <cryptedpassword>"
+  * ud-mailgate: Implement confirmation of sudoPassword field:
+      A confirmationation is of the form
+      "confirm sudopassword <uuid> <hostlist> <hmac_sha1("confirm-new-password:<uuid>:<hosts>:<cryptedpass>")>"
+  * ud-generate: generate a sudo passwd file
+
+ -- Peter Palfrader <weasel@debian.org>  Sun, 14 Sep 2008 23:45:36 +0200
+
 userdir-ldap (0.3.36) unstable; urgency=low
 
   * Aha.  Error is not some magic variable or exception, it's a