Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

openldap2-ppolicy-check-password-1.2-lp150.7.1 RPM for ppc64le

From OpenSuSE Ports Leap 15.0 for ppc64le

Name: openldap2-ppolicy-check-password Distribution: openSUSE Leap 15.0
Version: 1.2 Vendor: openSUSE
Release: lp150.7.1 Build date: Tue May 1 12:25:02 2018
Group: Productivity/Networking/LDAP/Servers Build host: obs-power8-02
Size: 80143 Source RPM: openldap2-2.4.46-lp150.7.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/onyxpoint/ppolicy-check-password
Summary: Password quality check module for OpenLDAP
An implementation of password quality check module, based on the original
work done by LDAP Toolbox Project (https://ltd-project.org), that works
together with OpenLDAP password policy overlay (ppolicy), to enforce
password strength policies.

Provides

Requires

License

OLDAP-2.8

Changelog

* Tue Apr 24 2018 zsolt.kalmar@suse.com
  - bsc#1085064 Packaging issues have been discovered around the
    openldap_update_modules_path.sh which has been corrected:
    - the spec file was wrongly configured, therefore the script has
    never been called
    - the script should create the symlinks first, as slapcat is
    useless on a system which is already affected.
* Fri Apr 06 2018 zsolt.kalmar@suse.com
  - bsc#1085064 Add script "openldap_update_modules_path.sh" which
    which removes the configuration item olcModulePath in cn=config
    which is after upgrade from SLE12 to SLE15 holds inappropriate
    information. If the cn=config is being used on a system, the
    conflicting items in slapd.conf are ignored, despite of it, the
    backend DB configuration section has been also commented out in
    the default slapd.conf.
    In case of correct cn=config (the olcModulePath has been already
    removed), the script stops without touching anything.
* Fri Mar 23 2018 michael@stroeder.com
  - Upgrade to upstream 2.4.46 release
  - removed obsolete back-port patches:
    * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
    * 0016-ITS-8782-fix-cancel-memleak.patch
    OpenLDAP 2.4.46 Release (2018/03/22)
    Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
    Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
    Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
    Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
    Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
    Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
    Fixed libldap MozNSS initialization (ITS#8484)
    Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
    Fixed libldap memory leak with cancel operations (ITS#8782)
    Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
    Fixed slapd to maintain SSF across SASL binds (ITS#8796)
    Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
    Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
    Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
    Fixed slapd CSN queue processing (ITS#8801)
    Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
    Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
    Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
    Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
    Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
    Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
    Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
    Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
    Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
    Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
    Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
    Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
    Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
    Build Environment
    Fixed Windows build with newer MINGW version (ITS#8697)
    Fixed compiler warnings and removed unused variables (ITS#8578)
    Contrib
    Fixed ldapc++ Control structure (ITS#8583)
    Documentation
    Delete stub manpage for back-ldbm (ITS#8713)
    Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
    Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
    Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
    Fixed slapo-syncprov(5) indexing requirements (ITS#5048)
* Thu Feb 22 2018 fvogt@suse.com
  - Use %license (boo#1082318)
* Mon Dec 11 2017 michael@stroeder.com
  - added 0016-ITS-8782-fix-cancel-memleak.patch
* Thu Nov 23 2017 rbrown@suse.com
  - Replace references to /var/adm/fillup-templates with new
    %_fillupdir macro (boo#1069468)
* Mon Oct 02 2017 jengelh@inai.de
  - Add openldap-r-only.dif so that openldap2's own tools also
    link against libldap_r rather than libldap.
  - Make libldap equivalent to libldap_r (like Debian) to avoid
    crashes in threaded programs which unknowingly get both
    libraries inserted into their process image.
    [rh#1370065, boo#996551]
* Mon Oct 02 2017 mrueckert@suse.de
  - use existing groups instead of inventing new ones
* Mon Sep 18 2017 michael@stroeder.com
  - added 0012-ITS8051-sockdnpat.patch
* Wed Sep 06 2017 michael@stroeder.com
  - updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch
* Fri Aug 18 2017 michael@stroeder.com
  - Added OpenLDAP new feature implementing OpenLDAP ITS#8714
    0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch
* Thu Jul 20 2017 michael@stroeder.com
  - added overlay trace to package openldap2-contrib
* Wed Jul 12 2017 michael@stroeder.com
  - Upgrade to upstream 2.4.45 release
  - removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
    and  0012-use-system-wide-cert-dir-by-default.patch
  - added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
    for supporting modify increment operations with back-sock
  - added overlay addpartial to package openldap2-contrib
* Wed Jun 07 2017 hguo@suse.com
  - Remove legacy daemon control that was used to migrate from SLE 11
    to 12. (bsc#1038405)
* Tue Jun 06 2017 hguo@suse.com
  - There is no change made about the package itself, this is only
    copying over some changelog texts from SLE package:
  - bug#976172 owned by hguo@suse.com: openldap2 - missing
    /usr/share/doc/packages/openldap2/guide/admin/guide.html
  - bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
    openldap2: slapd crash in valueReturnFilter cleanup
  - [fate#319300](https://fate.suse.com/319300)
  - [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
  - bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
    "Connection 0" in a Multi Master setup normal ?
  - [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
  - bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
    openldap2: slapd crashes on search with deref control and empty attr list
* Fri Apr 07 2017 jengelh@inai.de
  - Drop binutils requirement; the code using /usr/bin/strings has
    been dropped in openSUSE:Factory/openldap2 revision 112.
* Sat Feb 18 2017 kukuk@suse.com
  - Remove superfluous insserv PreReq.
* Thu Nov 10 2016 hguo@suse.com
  - Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
    to let OpenLDAP read system wide certificate directory by
    default and avoid hiding the error if user specified CA location
    cannot be read (bsc#1009470).
* Fri Oct 14 2016 hguo@suse.com
  - Add more details in the comments of slapd.conf concerning
    file permission and StartTLS capability.
* Thu Jun 23 2016 jengelh@inai.de
  - Test for user/group existence before trying to add them.
    Summary spello update.
* Thu Jun 16 2016 hguo@suse.com
  - Move schema files into tarball addonschema.tar.gz:
    ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
    yast.ldif yast.schema
  - Package previously missing schema files in LDIF format:
    amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
    sudo.ldif suse-mailserver.ldif (bsc#984691)
  - Fix a minor issue in schema2ldif script that led to missing
    attribute in the generated LDIF.
* Tue May 17 2016 hguo@suse.com
  - Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.
* Thu Feb 25 2016 hguo@suse.com
  - Move ldap.conf into libldap-data package, per convention.
* Sun Feb 21 2016 jengelh@inai.de
  - Move ldap.conf out of shlib package again, they are not allowed
    there for obvious reasons (conflict with future package).
* Thu Feb 18 2016 hguo@suse.com
  - Build password strength enforcer as an implementation of ppolicy
    password checker, introducing:
    ppolicy-check-password-1.2.tar.gz
    ppolicy-check-password.Makefile
    ppolicy-check-password.conf
    ppolicy-check-password.5
    0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
    (Implements fate#319461)
* Thu Feb 18 2016 lmuelle@suse.com
  - Remove redundant -n openldap2- package name prefix.
* Mon Feb 08 2016 hguo@suse.com
  - Remove openldap2-client.spec and openldap2-client.changes
    openldap2.spec now builds client utilities and libraries.
    Thus pre_checkin.sh is removed.
  - Move ldap.conf and its manual page from openldap2-client package
    to libldap-2_4-2 package, which is more appropriate.
  - Use RPM_OPT_FLAGS in build flags.
  - Macros dealing with old/unsupported distributions are removed.
  - Remove 0002-slapd.conf.dif and install improved slapd.conf from
    new source file slapd.conf.
  - Install slapd.conf.olctemplate to assist in preparing slapd.d
    for OLC.
  - Be explicit in sysconfig that by default openldap will use
    static file configuration.
  - Add the following schemas in LDIF format:
    * rfc2307bis.ldif
    * ldapns.ldif
    * yast.ldif
  - Other minor clean-ups in the spec file.
* Mon Feb 08 2016 mpluskal@suse.com
  - Use optflags when building
* Sat Feb 06 2016 michael@stroeder.com
  - Upgrade to upstream 2.4.44 release with accumulated bug fixes.
  - Specify source with FTP URL
  - Removed obsolete 0012-openldap-re24-its8336.patch
* Mon Jan 25 2016 hguo@suse.com
  - Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
    into 0010-Enforce-minimum-DH-size-of-1024.patch
* Tue Dec 08 2015 michael@stroeder.com
  - Upgrade to upstream 2.4.43 release with accumulated bug fixes.
  - Still build on SLES12
  - Loadable backend and overlay modules are now installed
    into arch-specific path %{_libdir}/openldap
  - All backends and overlays as modules for smaller memory footprint
    on memory constrained systems
  - Added extra package for back-sock
  - Consequent use of %{_rundir} everywhere
  - Rely on upstream ./configure script instead of any other
    macro foo
  - Dropped linking with libwrap
  - Dropped 0004-libldap-use-gethostbyname_r.dif because this
    work-around for nss_ldap is obsolete
  - New sub-package openldap2-contrib with selected contrib/ overlays
  - Replaced addonschema.tar.gz with separate schema sources
  - Updated ldapns.schema from recent slapo-nssov source tree
  - Added symbolic link to slapd executable in /usr/sbin/
  - Added more complex example configuration file
    /etc/openldap/slapd.conf.example
  - Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
  - Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
  - Added patch for OpenLDAP ITS#7796 to avoid excessive
    "not index" logging:
    0011-openldap-re24-its7796.patch
  - Replaced openldap-rc.tgz with single source files
  - Added soft dependency (Recommends) to cyrus-sasl
  - Added soft dependency (Recommends) to cyrus-sasl-devel
    to openldap2-devel
  - Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
    0012-openldap-re24-its8336.patch
  - Remove obsolete patch 0001-build-adjustments.dif
* Wed Dec 02 2015 hguo@suse.com
  - Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
    to fix CVE-2015-6908. (bsc#945582)
  - Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
    to address weak DH size vulnerability (bsc#937766)
* Mon Nov 30 2015 hguo@suse.com
  - Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
    to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
    (bsc#955210)
* Fri Oct 09 2015 hguo@suse.com
  - Remove OpenLDAP 2.3 code and patches from build source.
    Compatibility libraries for OpenLDAP 2.3 are built in package:
    compat-libldap-2_3-0
    Removed source files:
      openldap-2.3.37-liblber-length-decoding.dif
      openldap-2.3.37-libldap-ntlm.diff
      openldap-2.3.37-libldap-ssl.dif
      openldap-2.3.37-libldap-sasl-max-buff-size.dif
      openldap-2.3.37-libldap-tls_chkhost-its6239.dif
      openldap-2.3.37-libldap-gethostbyname_r.dif
      openldap-2.3.37-libldap-suid.diff
      openldap-2.3.37.dif
      openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
      openldap-2.3.37-libldap-ldapi_url.dif
      openldap-2.3.37.tgz
      openldap-2.3.37-libldap-utf8-ADcanonical.dif
      README.update
      check-build.sh
* Thu Oct 01 2015 hguo@suse.com
  - Upgrade to upstream 2.4.42 release with accumulated bug fixes.
* Tue Jul 21 2015 hguo@suse.com
  - Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
    * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
    * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
    * Remove already applied patch 0009-gcc5.patch
    (Implements fate#319301)
* Thu Feb 19 2015 rguenther@suse.com
  - Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
    for Berkeley DB version
* Wed Nov 26 2014 jengelh@inai.de
  - binutils is required for "strings" utility invocation in %pre
    [bnc#904028]
  - Remove SLE10 definitions
* Sun Oct 12 2014 jengelh@inai.de
  - Use %_smp_mflags for parallel build
* Mon Sep 22 2014 tchvatal@suse.com
  - Add baselibs.conf to sources list
* Wed Sep 10 2014 varkoly@suse.com
  - Do not bypass output of useradd and groupadd
* Tue Sep 02 2014 ro@suse.de
  - sanitize release line in specfile
* Wed Jul 16 2014 ckornacker@suse.com
  - segfault on certain queries with rwm overlay (bnc#846389)
    0008-ITS-7723-fix-reference-counting.patch
* Fri Jun 06 2014 ckornacker@suse.com
  - enable systemd slapd service if SysV ldap was enabled (bnc#881476)
* Tue May 13 2014 coolo@suse.com
  - use %_rundir if available, otherwise /var/run
* Wed Apr 23 2014 dmueller@suse.com
  - move systemd requires to server package
* Tue Feb 18 2014 ckornacker@suse.com
  - Fix systemd service installation
* Sun Feb 16 2014 ro@suse.de
  - use configure macro also for building the 2.3.37 version
* Wed Feb 12 2014 varkoly@suse.com
  - Remove PidFile from service definition
  - Update to 2.4.39
    * Fixed libldap MozNSS crash (ITS#7783)
    * Fixed libldap memory leak with SASL (ITS#7757)
    * Fixed libldap assert in parse_passwdpolicy_control (ITS#7759)
    * Fixed libldap shortcut NULL RDNs (ITS#7762)
    * Fixed libldap deref to use correct control
    * Fixed liblmdb keysizes with mdb_update_key (ITS#7756)
    * Fixed slapd cn=config olcDbConfig modification (ITS#7750)
    * Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761)
    * Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778)
    * Fixed slapd-mdb to bail out of search if config is paused (ITS#7761)
    * Fixed slapd-mdb indexing issue with derived attributes (ITS#7778)
    * Fixed slapd-perl to bail out of search if config is paused (ITS#7761)
    * Fixed slapd-sql to bail out of search if config is paused (ITS#7761)
    * Fixed slapo-constraint handling of softadd/softdel (ITS#7773)
    * Fixed slapo-syncprov assert with findbase (ITS#7749)
    * Build Environment
      Test suite: Use $(MAKE) for tests (ITS#7753)
    * Documentation
      admin24 fix TLSDHParamFile to be correct (ITS#7684)
* Tue Feb 11 2014 varkoly@suse.com
  - Add systemd style service definition
  - FATE#315028 remove memory limit for slapd
  - FATE#315415: LDAP compat packages required for older SLES versions
    For this reson following patches were applied:
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-ssl.dif
* Wed Dec 11 2013 matz@suse.de
  - Make /etc/sasl2 owned by openldap2.
* Wed Dec 11 2013 varkoly@suse.com
  - Update to 2.4.38
    * Fixed liblmdb nordahead flag (ITS#7734)
    * Fixed liblmdb to check cursor index before cursor_del (ITS#7733)
    * Fixed liblmdb wasted space on split (ITS#7589)
    * Fixed slapd for certs with a NULL issuerDN (ITS#7746)
    * Fixed slapd cn=config with empty nested includes (ITS#7739)
    * Fixed slapd syncrepl memory leak with delta-sync MMR (ITS#7735)
    * Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741)
    * Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743)
    * Fixed slapd-mdb to stop processing on dn not found (ITS#7741)
    * Fixed slapd-mdb dangling reader (ITS#7662)
    * Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737)
    * Fixed slapd-mdb with indexed ANDed filters (ITS#7743)
    * Fixed slapd-meta from blocking other threads (ITS#7740)
    * Fixed slapo-syncprov assert with findbase (ITS#7749)
      Changes in 2.4.37
    * Added liblmdb nordahead environment flag (ITS#7725)
    * Fixed client tools CLDAP with IPv6 (ITS#7695)
    * Fixed libldap CLDAP with IPv6 (ITS#7695)
    * Fixed libldap lock ordering with abandon op (ITS#7712)
    * Fixed liblmdb segfault with mdb_cursor_del (ITS#7718)
    * Fixed liblmdb when converting to writemap (ITS#7715)
    * Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722)
    * Fixed liblmdb wasted space on split (ITS#7589)
    * Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685)
    * Fixed slapd-bdb/hdb optimize index updates (ITS#7329)
    * Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434)
    * Fixed slapd-ldap chaning with controls (ITS#7687)
    * Fixed slapd-mdb optimize index updates (ITS#7329)
    * Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434)
    * Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692)
    * Fixed slapo-dds assert on startup (ITS#7699)
    * Fixed slapo-memberof to not replicate internal ops (ITS#7710)
    * Fixed slapo-refint to not replicate internal ops (ITS#7710)
      Changes in 2.4.36
    * Added back-meta target filter patterns (ITS#7609)
    * Added liblmdb mdb_txn_env to API (ITS#7660)
    * Fixed libldap CLDAP with uninit'd memory (ITS#7582)
    * Fixed libldap with UDP (ITS#7583)
    * Fixed libldap OpenSSL TLS versions (ITS#7645)
    * Fixed liblmdb MDB_PREV behavior (ITS#7556)
    * Fixed liblmdb transaction issues (ITS#7515)
    * Fixed liblmdb mdb_drop overflow page return (ITS#7561)
    * Fixed liblmdb nested split (ITS#7592)
    * Fixed liblmdb overflow page behavior (ITS#7620)
    * Fixed liblmdb race condition with read and write txns (ITS#7635)
    * Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658)
    * Fixed slapd cn=config with unknown schema elements (ITS#7608)
    * Fixed slapd cn=config with loglevel 0 (ITS#7611)
    * Fixed slapd slapi filterlist free behavior (ITS#7636)
    * Fixed slapd slapi control free behavior (ITS#7641)
    * Fixed slapd schema countryString as directoryString (ITS#7659)
    * Fixed slapd schema telephoneNumber as directoryString (ITS#7659)
    * Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365)
    * Fixed slapd-mdb behavior with alias dereferencing (ITS#7577 )
    * Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604)
    * Fixed slapd-mdb refcount behavior (ITS#7628)
    * Fixed slapd-meta binding flag is set (ITS#7524)
    * Fixed slapd-meta with minimal config (ITS#7581)
    * Fixed slapd-meta missing results messages (ITS#7591)
    * Added slapd-meta TCP keepalive support (ITS#7513)
    * Fixed slapo-sssvlv double free (ITS#7588)
    * Fixed slaptest to list -Q option (ITS#7568)
      Changes in 2.4.35
    * Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551)
    * Fixed liblmdb page rebalance (ITS#7536)
    * Fixed liblmdb missing parens (ITS#7377)
    * Fixed liblmdb mdb_cursor_del crash (ITS#7553)
    * Fixed slapd syncrepl updateCookie status (ITS#7531)
    * Fixed slapd connection logging (ITS#7543)
    * Fixed slapd segfault on modify (ITS#7542, ITS#7432)
    * Fixed slapd-mdb to reject undefined attrs (ITS#7540)
    * Fixed slapo-pcache with +/- attrsets (ITS#7552)
      Changes in 2.4.34
    * Fixed libldap connections with EINTR (ITS#7476)
    * Fixed libldap lineno overflow in ldif_read_record (ITS#7497)
    * Fixed liblmdb mdb_env_open flag handling (ITS#7453)
    * Fixed liblmdb mdb_midl_sort array optimization (ITS#7432)
    * Fixed liblmdb freelist with large entries (ITS#7455)
    * Fixed liblmdb to check for filled dirty page list (ITS#7491)
    * Fixed liblmdb to validate data limits (ITS#7485)
    * Fixed liblmdb mdb_update_key for large keys (ITS#7505)
    * Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477)
    * Fixed slapd syncrepl for old entries in MMR setup (ITS#7427)
    * Fixed slapd signedness for index_substr_any_* (ITS#7449)
    * Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450)
    * Fixed slapd mutex in send_ldap_ber (ITS#6164)
    * Added slapd-ldap onerr option (ITS#7492)
    * Added slapd-ldap keepalive support (ITS#7501)
    * Fixed slapd-ldif with empty dir (ITS#7451)
    * Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416)
    * Fixed slapd-mdb handling of missing entries (ITS#7483,7496)
    * Fixed slapd-mdb environment flag setting (ITS#7452)
    * Fixed slapd-mdb with sub db slapcat (ITS#7469)
    * Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527)
    * Fixed slapd-mdb subtree search speed (ITS#7473)
    * Fixed slapd-meta conversion to cn=config (ITS#7525)
    * Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526)
    * Fixed slapd-sql back-config support (ITS#7499)
    * Fixed slapo-constraint handle uri and restrict correctly (ITS#7418)
    * Fixed slapo-constraint with multi-master replication (ITS#7426)
    * Fixed slapo-constraint segfault (ITS#7431)
    * Fixed slapo-deref control initialization (ITS#7436)
    * Fixed slapo-deref control exposure (ITS#7445)
    * Fixed slapo-memberof with internal ops (ITS#7487)
    * Fixed slapo-pcache matching rules for config db (ITS#7459)
    * Fixed slapo-rwm modrdn cleanup (ITS#7414)
    * Fixed slapo-sssvlv maxperconn parameter (ITS#7484)
* Mon Jun 17 2013 jengelh@inai.de
  - For now, avoid automatic use of libdb-6_0 by explicitly selecting
    libdb-4_8 as BuildRequire.
* Mon Mar 25 2013 jengelh@inai.de
  - Put static libs into openldap2-devel-static and relieve
    openldap2-devel of static-only deps
* Sat Nov 17 2012 ro@suse.de
  - fix check-build.sh for kernel > 3.0
* Fri Nov 16 2012 rhafer@suse.com
  - Fixed initscript to avoid endless loop when no configuration
    is present in /etc/openldap/slapd.d/ (bnc#767464)
  - cleaned up SLES10 buildrequires and dependencies
  - removed support for building on SLES9, didn't work anyway anymore
  - Don't buildrequire krb5-mini on Distributions where it does not
    exist
* Fri Oct 26 2012 rhafer@suse.com
  - enabled mdb backend
  - Update to 2.4.33
    * Added slapd-meta cn=config support
    * Fixed slapd alock handling on Windows (ITS#7361)
    * Fixed slapd acl handling with zero-length values (ITS#7350)
    * Fixed slapd syncprov to not reference ops inside a lock (ITS#7172)
    * Fixed slapd delta-syncrepl MMR with large attribute values (ITS#7354)
    * Fixed slapd slapd_rw_destroy function (ITS#7390)
    * Fixed slapd-ldap idassert bind handling (ITS#7403)
    * Fixed slapo-constraint with multiple modifications (ITS#7168)
    Changes in 2.4.32:
    * Added slappasswd loadable module support (ITS#7284)
    * Fixed tools to not clobber SASL_NOCANON (ITS#7271)
    * Fixed libldap function declarations (ITS#7293)
    * Fixed libldap double free (ITS#7270)
    * Fixed libldap debug level setting (ITS#7290)
    * Fixed libldap gettime() regression (ITS#6262)
    * Fixed libldap sasl handling (ITS#7118, ITS#7133)
    * Fixed libldap to correctly free socket with TLS (ITS#7241)
    * Fixed slapd config index renumbering (ITS#6987)
    * Fixed slapd duplicate error response (ITS#7076)
    * Fixed slapd parsing of PermissiveModify control (ITS#7298)
    * Fixed slapd-bdb/hdb cache hang under high load (ITS#7222)
    * Fixed slapd-bdb/hdb alias checking (ITS#7303)
    * Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338)
    * Fixed slapd-ldap to encode user DN during password change (ITS#7319)
    * Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851)
    * Fixed slapd-ldap monitoring (ITS#7182, ITS#7225)
    * Fixed slapd-perl panic (ITS#7325)
    * Fixed slapo-accesslog memory leaks with sync replication (ITS#7292)
    * Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)
* Fri Oct 26 2012 coolo@suse.com
  - add explicit buildrequire on groff - needed to build manuals
* Tue Oct 16 2012 coolo@suse.com
  - buildrequire krb5-mini in openldap2-client to avoid cycle
  - move Summary out of the %if as prepare_spec is confused about
    the license otherwise
* Thu May 10 2012 rhafer@suse.de
  - update to 2.4.31
    * Added slapo-accesslog support for reqEntryUUID (ITS#6656)
    * Fixed libldap IPv6 URL detection (ITS#7194)
    * Fixed libldap rebinding on failed connection (ITS#7207)
    * Fixed slapd listener initialization (ITS#7233)
    * Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197)
    * Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195)
    * Fixed slapd to reject MMR setups with bad serverID setting
      (ITS#7200)
    * Fixed slapd approxIndexer key generation (ITS#7203)
    * Fixed slapd modification of olcSuffix (ITS#7205)
    * Fixed slapd schema validation with missing definitions
      (ITS#7224)
    * Fixed slapd syncrepl -c with supplied CSN values (ITS#7245)
    * Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231)
    * Fixed slapo-accesslog deadlock with non-logged write ops
      (ITS#7088)
    * Fixed slapo-syncprov sessionlog check (ITS#7218)
    * Fixed slapo-syncprov entry leak (ITS#7234)
    * Fixed slapo-syncprov startup initialization (ITS#7235)
* Mon Apr 23 2012 rhafer@suse.de
  - Disabled testsuite for now. Causes problems in the buildserivce
* Tue Mar 06 2012 rhafer@suse.de
  - Update to 2.4.30
    * Fixed libldap socket polling for writes (ITS#7167)
    * Fixed liblutil string modifications (ITS#7174)
    * Fixed slapd crash when attrsOnly is true (ITS#7143)
    * Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162)
    * Fixed slapo-pcache time-to-refesh handling (ITS#7178)
    * Fixed slapo-syncprov loop detection (ITS#6024)
* Mon Feb 27 2012 rhafer@suse.de
  - Update to 2.4.29
    * Fixed slapd cn=config modification of first schema element
      (ITS#7098)
    * Fixed slapd operation reuse (ITS#7107)
    * Fixed slapd blocked writers to not interfere with pool pause
      (ITS#7115)
    * Fixed slapd connection loop connindex usage (ITS#7131)
    * Fixed slapd double mutex unlock via connection_done (ITS#7125)
    * Fixed slapd check order in connection_write (ITS#7113)
    * Fixed slapd slapadd to exit on failure (ITS#7142)
    * Fixed slapd syncrepl reference to freed memory
      (ITS#7127,ITS#7132)
    * Fixed slapd syncrepl to ignore some errors on delete
      (ITS#7052)
    * Fixed slapd syncrepl to handle missing oldRDN (ITS#7144)
    * Fixed slapd-monitor compare op to update cached entry
      (ITS#7123)
    * Fixed slapo-syncprov with already abandoned operation
      (ITS#7150)
  - Included patches from RE24 branch:
    * only poll sockets for write as needed (ITS#7167, bnc#749082)
    * sycnrepl Fixes (ITS#7162)
* Wed Dec 07 2011 cfarrell@suse.com
  - license update: OLDAP-2.8
    SPDX format (http://www.spdx.org/licenses)
* Fri Dec 02 2011 rhafer@suse.de
  - Update to 2.4.28
    * Fixed back-mdb out of order slapadd (ITS#7090)
    changes in OpenLDAP 2.4.27 Release (2011/11/24):
    * Added slapd delta-syncrepl MMR (ITS#6734,ITS#7029,ITS#7031)
    * Fixed ldapmodify crash with LDIF controls (ITS#7039)
    * Fixed ldapsearch to honor timeout and timelimit (ITS#7009)
    * Fixed libldap endless looping (ITS#7035)
    * Fixed libldap TLS to not check hostname when using 'allow'
      (ITS#7014)
    * Fixed slapadd common code into slapcommon (ITS#6737)
    * Fixed slapd backend connection initialization (ITS#6993)
    * Fixed slapd frontend DB parsing in cn=config (ITS#7016)
    * Fixed slapd hang with {numbered} overlay insertion (ITS#7030)
    * Fixed slapd inet_ntop usage (ITS#6925)
    * Fixed slapd cn=config deletion of bitmasks (ITS#7083)
    * Fixed slapd cn=config modify replace/delete crash (ITS#7065)
    * Fixed slapd schema UTF8StringNormalize with 0 length values
      (ITS#7059)
    * Fixed slapd with dynamic acls for cn=config (ITS#7066)
    * Fixed slapd response callbacks (ITS#6059,ITS#7062)
    * Fixed slapd no_connection warnings with ldapi
      (ITS#6548,ITS#7092)
    * Fixed slapd return code processing (ITS#7060)
    * Fixed slapd sl_malloc various issues (ITS#6437)
    * Fixed slapd startup behavior (ITS#6848)
    * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892)
    * Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472)
    * Fixed slapd syncrepl timeout when using refreshAndPersist
      (ITS#6999)
    * Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052)
    * Fixed slapd syncrepl glue for empty suffix (ITS#7037)
    * Fixed slapd results cleanup (ITS#6763,ITS#7053)
    * Fixed slapd validation of args for TLSCertificateFile
      (ITS#7012)
    * Fixed slapd-bdb/hdb to build entry DN based on parent DN
      (ITS#5326)
    * Fixed slapd-hdb with zero-length entries (ITS#7073)
    * Fixed slapd-hdb duplicate entries in subtree IDL cache
      (ITS#6983)
    * Fixed slapo-pcache response cleanup (ITS#6981)
    * Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021)
    * Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985)
    * Fixed slapo-sssvlv to only return requested attrs (ITS#7061)
    * Fixed slapo-syncprov DSA attribute filtering for Persist mode
      (ITS#7019)
    * Fixed slapo-syncprov when consumer has newer state of our SID
      (ITS#7040)
    * Fixed slapo-syncprov crash (ITS#7025)
    * Added missing LDIF form of schema files (ITS#7063)
* Fri Nov 25 2011 coolo@suse.com
  - add libtool as buildrequire to avoid implicit dependency
* Mon Oct 24 2011 rhafer@suse.de
  - ACL changes to the config database only got active after slapd
    restart in certain cases (bnc#716895, ITS#7066).
  - Adjusted default DB_CONFIG to increase max values for locks and
    lock objects (bnc#719803)
  - Fix UTF8StringNormalize overrun on zero-length string
    (bnc#724201, ITS#7059)
* Thu Jul 07 2011 rhafer@suse.de
  - Update to 2.4.26
    * Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969)
    * Fixed libldap descriptor leak (ITS#6929)
    * Fixed libldap socket leak (ITS#6930)
    * Fixed libldap get option crash (ITS#6931)
    * Fixed libldap lockup (ITS#6898)
    * Fixed libldap ASYNC TLS setup (ITS#6828)
    * Fixed libldap with missing \n terminations (ITS#6947)
    * Fixed tools double free (ITS#6946)
    * Fixed tools verbose output (ITS#6977)
    * Fixed ldapmodify SEGV on invalid LDIF (ITS#6978)
    * Added slapd extra_attrs database option (ITS#6513)
    * Fixed slapd asserts (ITS#6932)
    * Fixed slapd configfile param on windows (ITS#6933)
    * Fixed slapd config with global chaining (ITS#6843)
    * Fixed slapd uninitialized variables (ITS#6935)
    * Fixed slapd config objectclass is readonly (ITS#6963)
    * Fixed slapd entry response with control (ITS#6899)
    * Fixed slapd with unknown attrs (ITS#6819)
    * Fixed slapd normalization of schema RDN (ITS#6967)
    * Fixed slapd operations cache to 10 op limit (ITS#6944)
    * Fixed slapd syncrepl crash with non-replicated ops (ITS#6892)
    * Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961)
    * Fixed back-ldap ppolicy updates (ITS#6711)
    * Fixed back-ldap with id-assert (ITS#6817)
    * Fixed various slapo-pcache issues (ITS#6823, ITS#6950,
      ITS#6951, ITS#6953, ITS#6954)
    * Fixed slapo-pcache database corruption (ITS#6831)
    * Fixed slapo-syncprov with replicated subtrees (ITS#6872)
  - backported delete support for child entries of overlays from
    master (bnc#704398)
* Tue Mar 29 2011 rhafer@suse.de
  - Updated to 2.4.25, important changes:
    * Fixed ldapsearch pagedresults loop (ITS#6755)
    * Fixed tools for incompatible args (ITS#6849)
    * Fixed libldap MozNSS crash (ITS#6863)
    * Fixed slapd add objectclasses in order (ITS#6837)
    * Added slapd ordering for uidNumber and gidNumber (ITS#6852)
    * Fixed slapd segfault when adding values out of order (ITS#6858)
    * Fixed slapd sortval handling (ITS#6845)
    * Fixed slapd-bdb with slapadd/index quick option (ITS#6853)
    * Fixed slapd-ldap chain cn=config support (ITS#6837)
    * Fixed slapd-ldap chain with slapd.conf (ITS#6857)
    * Fixed slapd-meta deadlock (ITS#6846)
    * Fixed slapo-sssvlv with multiple requests (ITS#6850)
    * Fixed contrib/lastbind install rules (ITS#6238)
    * Fixed contrib/cloak install rules (ITS#6877)
* Tue Feb 22 2011 rhafer@suse.de
  - Surpress gcc warnings about extra format string arguments for 2.3.x
    built as well.
* Mon Feb 14 2011 rhafer@suse.de
  - Updated to 2.4.24, important changes:
    * Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421)
    * Added slapadd attribute value checking (ITS#6592)
    * Added slapcat continue mode for problematic DBs (ITS#6482)
    * Added slapd syncrepl suffixmassage support (ITS#6781)
    * Fixed liblber to not close invalid sockets (ITS#6585)
    * Fixed libldap referral chasing (ITS#6602)
    * Fixed libldap leak when chasing referrals (ITS#6744)
    * Fixed slapd acl parsing overflow (ITS#6611)
    * Fixed slapd acl when resuming parsing (ITS#6804)
    * Fixed slapd default config acls with overlays (ITS#6822)
    * Fixed slapd config leak with olcDbDirectory (ITS#6634)
    * Fixed slapd when first acl is value dependent (ITS#6693)
    * Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794)
    * Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608)
    * Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620)
    * Fixed slapo-syncprov to send error if consumer is newer (ITS#6606)
    * Fixed slapo-syncprov filter race condition (ITS#6708)
    * Fixed slapo-syncprov active mod race (ITS#6709)
    * Fixed slapo-syncprov to refresh if context is dirty (ITS#6710)
    * Fixed slapo-syncprov CSN updates to all replicas (ITS#6718)
    * Fixed slapo-syncprov sessionlog ordering (ITS#6716)
    * Fixed slapo-syncprov sessionlog with adds (ITS#6503)
    * Fixed slapo-syncprov mutex (ITS#6438)
    * Fixed slapo-syncprov mincsn check with MMR (ITS#6717)
    * Fixed slapo-syncprov control leak (ITS#6795)
    * Fixed slapo-syncprov error codes (ITS#6812)
    * For a comprehensive list of changes please consult the CHANGES
      file
  - removed unneeded openSUSE 11.0 specifc patch
* Tue Feb 01 2011 rhafer@suse.de
  - slapadd -q could crash for glued bdb/hdb databases
* Wed Jan 19 2011 rhafer@suse.de
  - Install the correct schema2ldif script (bnc#665530)
* Wed Jan 05 2011 rhafer@novell.com
  - Fixed quotation in init-script to avoid errors when calling it
    from within /etc/openldap/slapd.d/cn=config/ (bnc#660492).
* Fri Nov 12 2010 rhafer@novell.com
  - Surpress gcc warnings about extra format string arguments.
  - Split-off openldap2-doc (noarch) package (Admin Guide and IDs)
  - Backported -VVV commandline switch for slapd from HEAD
    (to list enabled static overlays)
  - Build all overlays except syncprov and ppolicy as dynamic modules
    (Fixes bnc#648479, FATE#307837)
  - Added README.dynamic-overlays to point out some details about
    dynamic overlays
  - simplified pie-compile patch and adjusted it to work with
    dynamic overlays
* Tue Oct 05 2010 rhafer@novell.com
  - Handle the libdb-4_5 -> libdb-4_8 Version update by opening the
    Databases with DB_RECOVER if a version mismatch is detected.
* Sun Oct 03 2010 cristian.rodriguez@opensuse.org
  - Do not include Build date and time in binaries, this
    avoids build-compare failures and unhelpful rebuilds/republishes
* Wed Sep 29 2010 rhafer@novell.com
  - Don't build 2.3 slapcat anymore for 11.3 and newer. We switch to
    2.4 long ago.
  - Removed automatic 2.3->2.4 migration in %post
  - moved back-sql examples to make rpmlint happy
* Thu Aug 26 2010 rhafer@novell.com
  - Fix listener URIs in init script to make SLP registration work
    again (bnc#620389)
* Fri Jul 23 2010 rhafer@novell.com
  - Fixed RPM Group and Summary Tags (bnc#624980)
* Thu Jul 01 2010 rhafer@novell.com
  - Updated to 2.4.23:
    * Fixed libldap to return server's error code (ITS#6569)
    * Fixed libldap memleaks (ITS#6568)
    * Fixed liblutil off-by-one with delta (ITS#6541)
    * Fixed slapd acls with glued databases (ITS#6468)
    * Fixed slapd syncrepl rid logging (ITS#6533)
    * Fixed slapd modrdn handling of invalid values (bnc#612430,
      ITS#6570)
    * Fixed slapd-bdb hasSubordinates computation (ITS#6549)
    * Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474)
    * Fixed slapd-bdb entry cache delete failure (ITS#6577)
    * Fixed slapd-ldap to return control responses (ITS#6530)
    * Fixed slapo-ppolicy to use Debug (ITS#6566)
    * Fixed slapo-refint to zero out freed DN vals (ITS#6572)
    * Fixed slapo-rwm to use Debug (ITS#6566)
    * Fixed slapo-sssvlv to use Debug (ITS#6566)
    * Fixed slapo-syncprov lost deletes in refresh phase (bnc#606294,
      ITS#6555)
    * Fixed slapo-valsort to use Debug (ITS#6566)
    * Fixed contrib/nssov network.c missing patch (ITS#6562)
  - New subpackage openldap2-back-sql. Contains the SQL backend
    module plus some documentation (bnc#395719)
  - generate Patches from git tree (resulted in all patches being
    renamed)
  - installing binaries without stripping them is done by setting
    the STRIP enviroment variable instead for patching the Makefile
    now
  - Fixed a bug in the syncprov overlay which could lead to not
    replicate delete Operations (ITS#6555, bnc#606294)
  - BuildRequires cleanup
* Thu Jul 01 2010 rhafer@novell.com
  - LDAP clients could crash the server by submitting a specially
    crafted LDAP ModRDN operation.  (bnc#612430, ITS#6570)
  - Delete Operations happening during the "Refresh" phase of
    "refreshAndPersist" replication failed to replicate under
    certain circumstances (bnc#606294, ITS#6555)
* Mon May 10 2010 rhafer@novell.com
  - Create /var/run/slapd on demand. /var/run might be mounted on
    tmpfs.
* Thu Apr 15 2010 adrian@suse.de
  - fix build dependency cycle for -client package with openslp
* Wed Mar 17 2010 rhafer@novell.com
  - Fixed quotation in sed expression to escape ldapi path in init
    script
* Tue Mar 16 2010 rhafer@novell.com
  - Removed obsolete hunk from openldap2.dif
  - Remove ldap.conf patch to use saner default for Certificate
    verification (bnc#575146)
* Sat Feb 13 2010 rguenther@suse.de
  - Add fix for stricter fortification checks of GCC 4.5.
* Thu Jan 07 2010 rhafer@novell.com
  - Updated to 2.4.21:
    * Fixed liblutil for negative microsecond offsets (ITS#6405)
    * Fixed slapd global settings to work without restart (ITS#6428)
    * Fixed slapd looping with SSL/TLS connections (ITS#6412)
    * Fixed slapd syncrepl freeing tasks from queue (ITS#6413)
    * Fixed slapd syncrepl parsing of tls defaults (ITS#6419)
    * Fixed slapd syncrepl uninitialized variables (ITS#6425)
    * Fixed slapd-config Adds with Abstract classes (ITS#6408)
    * Fixed slapo-dynlist behavior with simple filters (ITS#6421)
    * Fixed slapd-ldif access outside database directory (ITS#6414)
    * Fixed slapo-translucent with back-null (ITS#6403)
    * Fixed slapo-unique criteria checking (ITS#6270)
  - removed some obsolete RPM dependencies
  - Added missing tags to init script to silence rpmlint warnings
* Thu Dec 10 2009 rhafer@novell.com
  - Fixed an issue in back-config's objectclass inheritence code that
    could cause the server to fail to start or to spin in an endless
    loop (bnc#558059,ITS#6408)
  - default the tls_reqcert parameter of a syncrepl config to
    "demand" as documented even if other tls_ options are absent
    (bnc#558397, ITS#6319)
  - apply changes to the global size and timelimits to all database
    that don't specify limits themself. (bnc#562184, ITS#6428)
* Mon Nov 30 2009 rhafer@novell.com
  - Update to 2.4.20 (fate#306593), most important fixes since 2.4.19
    * Fixed liblber embedded NUL values in BerValues (ITS#6353)
    * Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334)
    * Fixed libldap uninitialized return value (ITS#6355)
    * Fixed libldap unlimited timeout (ITS#6388)
    * Added slapd handling of hex server IDs (ITS#6297)
    * Fixed slapd checks of str2filter (ITS#6391)
    * Fixed slapd configArgs initialization (ITS#6363)
    * Fixed slapd db_open with connection_fake_init (ITS#6381)
    * Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379)
    * Fixed slapd inclusion of ac/unistd.h (ITS#6342)
    * Fixed slapd sl_free to better reclaim memory (ITS#6380)
    * Fixed slapd syncrepl deletes in MirrorMode (ITS#6368)
    * Fixed slapd syncrepl to use correct SID (ITS#6367)
    * Fixed slapd tls_accept to retry in certain cases (ITS#6304)
    * Fixed slapd-bdb/hdb cache corruption (ITS#6341)
    * Fixed slapd-bdb/hdb entry cache (ITS#6360)
    * Fixed slapo-syncprov checkpoint conversion (ITS#6370)
    * Fixed slapo-syncprov deadlock (ITS#6335)
    * Fixed slapo-syncprov out of order changes (ITS#6346)
  - Added switch to enable/disable testsuite (%run_test_suite)
* Tue Nov 03 2009 coolo@novell.com
  - updated patches to apply with fuzz=0
* Mon Sep 28 2009 rhafer@novell.com
  - Added schema2ldif tool to openldap2-client subpackage
    (bnc#541819)
* Wed Sep 23 2009 rhafer@novell.com
  - Changed permissions on /var/run/slapd to a saner default for
    ldapi:/// (bnc#536729)
* Wed Sep 09 2009 rhafer@novell.com
  - libldap's check of the hostname against the TLS Certificate's CN
    Attribute did not handle possible NUL bytes in the CN correctly
    and was vulnerable against attacks with spoofed Certificates.
    (bnc#537143, ITS#6239)
* Tue Jul 14 2009 rhafer@novell.com
  - Update to 2.4.17. Most important changes:
    * Fixed liblber to use ber_strnlen (ITS#6080)
    * Fixed libldap openssl digest initialization (ITS#6192)
    * Fixed libldap tls NULL error messages (ITS#6079)
    * Added slapd sasl auxprop support (ITS#6147)
    * Added slapd schema checking tool (ITS#6150)
    * Added slapd writetimeout keyword (ITS#5836)
    * Fixed slapd abandon/cancel handling for some ops (ITS#6157)
    * Fixed slapd access setstyle to expand (ITS#6179)
    * Fixed slapd assert with closing connections (ITS#6111)
    * Fixed slapd bind race condition (ITS#6189)
    * Fixed slapd cert validation (ITS#6098)
    * Fixed slapd connection_destroy assert (ITS#6089)
    * Fixed slapd csn normalization (ITS#6195)
    * Fixed slapd errno handling (ITS#6037)
    * Fixed slapd hung writers (ITS#5836)
    * Fixed slapd ldapi issues (ITS#6056)
    * Fixed slapd normalization of updated schema attributes (ITS#5540)
    * Fixed slapd olcLimits handling (ITS#6159)
    * Fixed slapd olcLogLevel with hex levels (ITS#6162)
    * Fixed slapd sending cancelled operations results (ITS#6103)
    * Fixed slapd slapi_entry_has_children (ITS#6132)
    * Fixed slapd sockets usage on windows (ITS#6039)
    * Fixed slapd some abandon and cancel race conditions (ITS#6104)
    * Fixed slapd tls context after changes (ITS#6135)
    * Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176)
    * Fixed slapd-bdb/hdb crashes during delete (ITS#6177)
    * Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196)
    * Fixed slapd-hdb freeing of already freed entries (ITS#6074)
    * Fixed slapd-hdb entryinfo cleanup (ITS#6088)
    * Fixed slapd-hdb dncache lockups (ITS#6095)
    * Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167)
    * Fixed slapo-ppolicy to honor pwdLockout (ITS#6168)
    * Fixed slapo-ppolicy to return check modules error message (ITS#6082)
    * Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057)
    * Fixed slapo-rwm dn passing (ITS#6070)
    * Fixed slapo-rwm entry free/release (ITS#6058, ITS#6081)
    * Fixed tools returning ldif errors (ITS#5892)
  - Backported fix for failing back-monitor test from HEAD
  - re-enabled some formerly disabled tests from the testsuite
* Mon Jun 29 2009 rhafer@novell.com
  - Fixed Summary/Description for -client subpackage
* Thu Jun 25 2009 rhafer@novell.com
  - Improved connection check in init script (bnc#510295)
* Mon Jun 15 2009 rhafer@novell.com
  - Fixed complilation with newer glibc (2.3.X release needs
    GNU_SOURCE defined as well in getpeerid.c)
* Wed Apr 29 2009 rhafer@novell.com
  - gcc 4.4 fixes
* Mon Apr 06 2009 rhafer@suse.de
  - Update to 2.4.16. Most important fixes:
    * Fixed libldap segfault in checking cert/DN (ITS#5976)
    * Fixed libldap peer cert double free (ITS#5849)
    * Fixed libldap referral chasing (ITS#5980)
    * Fixed slapd backglue with empty DBs (ITS#5986)
    * Fixed slapd ctxcsn race condition (ITS#6001)
    * Fixed slapd debug message (ITS#6027)
    * Fixed slapd redundant module loading (ITS#6030)
    * Fixed slapd schema_init freed value (ITS#6036)
    * Fixed slapd syncrepl newCookie sync messages (ITS#5972)
    * Fixed slapd syncrepl hang during shutdown (ITS#6011)
    * Fixed slapd syncrepl too many MMR messages (ITS#6020)
    * Fixed slapd syncrepl skipped entries with MMR (ITS#5988)
    * Fixed slapd-bdb/hdb cachesize handling (ITS#5860)
    * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006)
    * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012)
    * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916)
    * Fixed slapd-ldap/meta with broken AD results (ITS#5977)
    * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959)
    * Fixed slapo-accesslog interaction with ppolicy (ITS#5979)
    * Fixed slapo-dynlist conversion to cn=config (ITS#6002)
    * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020,
      ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988)
  - Fix building on older openSUSE releases
* Fri Mar 20 2009 rhafer@suse.de
  - Update to 2.4.15. Most important changes:
    * Fixed slapd bconfig conversion again (ITS#5346)
    * Fixed slapd behavior with superior objectClasses again (ITS#5517)
    * Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968)
    * Fixed slapd corrupt contextCSN (ITS#5947)
    * Fixed slapd syncrepl order to match on add/delete (ITS#5954)
    * Fixed slapd adding rdn with other values (ITS#5965)
    * Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956)
    * Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959)
    * Fixed slapo-pcache caching invalid entries (ITS#5927)
    * Fixed slapo-syncprov csn updates (ITS#5969)
    * Added libldap option to disable SASL host canonicalization (ITS#5812)
    * Fixed libldap chasing multiple referrals (ITS#5853)
    * Fixed libldap setuid usage with .ldaprc (ITS#4750)
    * Fixed libldap deref handling (ITS#5768)
    * Fixed libldap NULL pointer deref (ITS#5934)
    * Fixed libldap peer cert memory leak (ITS#5849)
    * Fixed libldap intermediate response behavior (ITS#5896)
    * Fixed libldap IPv6 address handling (ITS#5937)
    * Fixed libldap_r deref building (ITS#5768)
    * Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841)
    * Fixed slapd acl checks on ADD (ITS#4556,ITS#5723)
    * Fixed slapd acl application to newly created backends (ITS#5572)
    * Fixed slapd bconfig to return error codes (ITS#5867)
    * Fixed slapd bconfig encoding incorrectly (ITS#5897)
    * Fixed slapd bconfig dangling pointers (ITS#5924)
    * Fixed slapd epoll handling (ITS#5886)
    * Fixed slapd glue with MMR (ITS#5925)
    * Fixed slapd listener comparison (ITS#5613)
    * Fixed various syncrepl issues (ITS#5809,ITS#5850, ITS#5843,
      ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710,
      ITS#5781, ITS#5809, ITS#5798, ITS#5826)
    * Fixed slapd-bdb/hdb dncachesize handling (ITS#5860)
    * Fixed slapd-bdb/hdb trickle task usage (ITS#5864)
    * Fixed slapd-hdb idlcache with empty suffix (ITS#5859)

Files

/etc/openldap/check_password.conf
/usr/lib64/openldap/ppolicy-check-password.la
/usr/lib64/openldap/ppolicy-check-password.so
/usr/lib64/openldap/ppolicy-check-password.so.0
/usr/lib64/openldap/ppolicy-check-password.so.0.0.0
/usr/share/doc/packages/openldap-ppolicy-check-password-1.2
/usr/share/doc/packages/openldap-ppolicy-check-password-1.2/LICENSE
/usr/share/doc/packages/openldap-ppolicy-check-password-1.2/README
/usr/share/man/man5/ppolicy-check-password.5.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Apr 9 10:34:41 2022