ud-mailgate: Implement confirmation of sudoPassword field

[mirror/userdir-ldap.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index b825cec..b284f07 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,11 +1,46 @@
-userdir-ldap (0.3.XX) unstable; urgency=low
+userdir-ldap (0.3.3xxx) unstable; urgency=low
+
+  * ud-mailgate: Do not commit any changes if one of the requests is invalid
+    or could not be parsed or caused an error or anything.
+  * Add sudoPassword to schema, and the slapd.conf/ACL snippet
+    A sudoPassword entry in LDAP has the form of
+      "<uuid> (confirmed|unconfirmed) <hostlist> <cryptedpassword>"
+  * ud-mailgate: Implement confirmation of sudoPassword field:
+      A confirmationation is of the form
+      "confirm sudopassword <uuid> <hostlist> <hmac_sha1("<uuid>:<hosts>:<cryptedpass>")>"
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 13 Sep 2008 18:27:47 +0200
+
+userdir-ldap (0.3.36) unstable; urgency=low
+
+  * Aha.  Error is not some magic variable or exception, it's a
+    normal string that needs defining when we use it.
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 19 Jul 2008 21:35:39 +0200
+
+userdir-ldap (0.3.35) unstable; urgency=low
+
+  * Check if a key has encryption capabilities and fail saying so when
+    trying to encrypt stuff (like passwords) to users.  All this does is
+    give nicer error messages, it previously failed with just "gpg failed".
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 19 Jul 2008 16:17:13 +0200
+
+userdir-ldap (0.3.34) unstable; urgency=low
 
   * ud-info: fix changing of DD status/DD status comment -
     we were missing prompt information so we got a backtrace.
   * ud-info: Warn when we don't have a prompt string for
     attributes on startup.
-
- -- Peter Palfrader <weasel@debian.org>  Tue, 08 Jul 2008 09:44:39 +0200
+  * ud-info: Change the "retired" status to "inactive".
+    inactive covers memorial, removed, expelled more clearly.
+  * userdir_gpg.py
+    - do not use SIGEXPIRED, it's deprecated
+    - use EXPKEYSIG to tell if a signature is made by an expired key.
+    - Check that the primary key is not expired, even if we get a
+      GOODSIG status from gnupg.  Based on patch by Jeremy T. Bouse.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 08 Jul 2008 14:33:08 +0200
 
 userdir-ldap (0.3.33) unstable; urgency=low