Lowercasing hashed sudo passwords in ud-mailgate not considered smart

[mirror/userdir-ldap.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 74ae882..f4eec4b 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,16 +1,31 @@
-userdir-ldap (0.3.3xxx) unstable; urgency=low
+userdir-ldap (0.3.39) unstable; urgency=low
+
+  * Lowercasing hashed sudo passwords in ud-mailgate not considered smart.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:40:13 +0200
+
+userdir-ldap (0.3.38) unstable; urgency=low
+
+  * Fix order of some calls so stuff works again.
+  * And import pwd and os and the hmac crowed in userdir_ldap.py.
+  * Using the right variable name will also help.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 15 Sep 2008 00:18:37 +0200
+
+userdir-ldap (0.3.37) unstable; urgency=low
 
   * ud-mailgate: Do not commit any changes if one of the requests is invalid
     or could not be parsed or caused an error or anything.
   * Add sudoPassword to schema, and the slapd.conf/ACL snippet
     A sudoPassword entry in LDAP has the form of
-      "<uuid> (confirmed|unconfirmed) <hostlist> <cryptedpassword>"
+      "<uuid> unconfirmed <hostlist> <cryptedpassword>", or
+      "<uuid> confirmed:<hmac_sha1("password-is-confirmed:<uuid>:<hosts>:<cryptedpass>")> <hostlist> <cryptedpassword>"
   * ud-mailgate: Implement confirmation of sudoPassword field:
       A confirmationation is of the form
-      "confirm sudopassword <uuid> <hostlist> <hmac_sha1("<uuid>:<hosts>:<cryptedpass>")>"
+      "confirm sudopassword <uuid> <hostlist> <hmac_sha1("confirm-new-password:<uuid>:<hosts>:<cryptedpass>")>"
   * ud-generate: generate a sudo passwd file
 
- -- Peter Palfrader <weasel@debian.org>  Sat, 13 Sep 2008 20:16:04 +0200
+ -- Peter Palfrader <weasel@debian.org>  Sun, 14 Sep 2008 23:45:36 +0200
 
 userdir-ldap (0.3.36) unstable; urgency=low