ud-gpgimport: handle guest keyrings

[mirror/userdir-ldap.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 8221e53..5da345c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,42 @@
 userdir-ldap (0.3.7X) Xnstable; urgency=low
 
+  * Add ud-sync-accounts-to-afs, a script to sync accounts to an
+    AFS protection database.
+  * ud-generate: support host ACLs that expire.
+  * ud-useradd: A new -g switch for adding guest accounts, with
+    proper setting hostacls and shadowexpire and picking the
+    right keyring.
+  * Remove .pgp (v3 pgp key) keyrings from config.
+  * Update guest welcome template.
+  * ud-gpgimport: handle guest keyrings.
+
+ -- Peter Palfrader <weasel@debian.org>  Wed, 20 Oct 2010 11:41:04 +0000
+
+userdir-ldap (0.3.78) unstable; urgency=low
+
+  * Start refactoring ud-generate:
+    - If environment variables UD_CREDENTIALS, UD_GENERATEDIR, UD_HMAC_KEY
+      are set, use their respective value instead of the default.  This
+      makes it possible to run ud-generate as a non-privileged user for
+      testing purposes.
+    - Start wrapping ldap search results in classes. For now we have done
+      this with just an ldap account.
+    - Also got rid of the global PasswdAttrs variable.  Now functions
+      get the account list (now a list of Account classes instead of
+      ldap result array of tuples of hashes) passed to them like well-behaved
+      functions.
+  * userdir-ldap-slapd.conf: Fix ACL rule for keyring maintainers
+    (we want group=..., not dn=...).
+  * Add ud-krb-reset, and make ud-mailgate call it when
+    receiving a mail at chpasswd@ saying
+    'Please change my Kerberos password'.
+  * ud-generate: Add an extra output file called all-users.json that
+    can be used on one of the AFS hosts to create afs users.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 13 Sep 2010 19:08:34 +0200
+
+userdir-ldap (0.3.77) unstable; urgency=low
+
   [ Peter Palfrader ]
   * ud-mailgate: Remove a global declaration after a variable has
     already been assigned globally.
@@ -11,12 +48,18 @@ userdir-ldap (0.3.7X) Xnstable; urgency=low
   * ud-gpgimport: Get rid of "0x" when printing keyids/fingerprints.
   * Add ud-lock.
   * Fix a typo in welcome-message-800 noticed by Tommi Vainikainen.
+  * Refactor the LDAP acls to be easier to manage.
+    Effective changes:
+    - Keyring Maintainers ldap group gets to write to the keyFingerPrint
+      attribute.
+    - sshrsaauthkey is no longer compareable by *.
+  * ud-generate: refuse to run as root.
 
   [ Stephen Gran ]
   * Add txt record support to ud-mailgate
   * Clean up addition of identifying txt records to debian.net slightly
 
- -- Peter Palfrader <weasel@debian.org>  Sun, 09 May 2010 18:03:13 +0200
+ -- Peter Palfrader <weasel@debian.org>  Fri, 30 Jul 2010 19:46:48 +0200
 
 userdir-ldap (0.3.76) unstable; urgency=low