[el5_latest] nss_ldap-253-51.el5.i386

Name:	nss_ldap
Version:	253
Release:	51.el5
Architecture:	i386
Group:	System Environment/Base
Size:	3468234
License:	LGPL
RPM:	nss_ldap-253-51.el5.i386.rpm
Source RPM:	nss_ldap-253-51.el5.src.rpm
Build Date:	Wed Sep 26 2012
Build Host:	ca-build10.us.oracle.com
Vendor:	Oracle America
URL:	http://www.padl.com/
Summary:	NSS library and PAM module for LDAP.
Description:	This package includes two LDAP access clients: nss_ldap and pam_ldap. Nss_ldap is a set of C library extensions that allow X.500 and LDAP directory servers to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services, and shadow passwords (instead of or in addition to using flat files or NIS). Pam_ldap is a module for Linux-PAM that supports password changes, V2 clients, Netscape's SSL, ypldapd, Netscape Directory Server password policies, access authorization, and crypted hashes.

Changelog (Show File list) (Show related packages)

Thu Jul 26 2012 Jakub Hrozek <jhrozek@redhat.com> - 253-51

- Add hosts with ldaps:// schema when SSL is specified (#761281)

Wed Jul 25 2012 Jakub Hrozek <jhrozek@redhat.com> - 253-50

- Free ldap_result when search does not return anything (#835555)
- Use contents of ldap.secret even if it does not contain a newline (#797410)

Mon Dec 05 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-49
```
- Don't free config on every _nss_ldap_leave (#756783)
```
Thu Dec 01 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-48
```
- Do not segfault on config cleanup (#756783)
```

Tue Oct 25 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-47

- Switch to using dynamic lists for multivalued string options completely
  (#705841)

Fri Oct 21 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-46

- Require openldap libs with a fix for #609722 - libldap ignores a directory
  of CA certificates if any of them can't be read (#593242)
- when closing a context, clean it up so that we won't try to issue an abandon
  when we go to use it again for something else (#696707)

Thu Oct 20 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-45

- fix a regression caused by patch #39 - SRV records processing
  would crash if there was no basedn set (#705841)

Fri Oct 07 2011 Jakub Hrozek <jhrozek@redhat.com> - 253-44
```
- sort SRV replies by weight and priority (#741419)
```

Tue Oct 04 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-43

- incorporate Martin Poole's patch to handle larger-than-previously-expected
  configuration files (#705841)

Fri Mar 18 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-42

- add Ross Tyler's patch to always require authentication during password
  change requests for expired passwords, so that modules which check password
  quality (pam_cracklib) will always have the old password on-hand to examine
  as well (#667758)

Tue Mar 15 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-41

- backport fixes for upstream #350 (parsing results when the connection is
  gone) and #351 (double-free of message chain) (#684889)

Fri Mar 11 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-40

- return any non-success errors in setnetgrent(), not just netgroup-not-found
  errors (#664609, more of #445972)

Fri Mar 11 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-39

- add backport of the "nss_getgrent_skipmembers" option (via Masahiro Matsuya,

Thu Mar 10 2011 Nalin Dahyabhai <nalin@redhat.com> - 253-38

- add a build-time requirement on a sufficiently-new openssl-devel to ensure
  that we get SHA-2 hashes when we're using TLS, because we still static-link
  the nss_ldap module (#683349)

Fri Dec 10 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-37

- add proposed patch for upstream #421: sometimes errno gets reset before we
  return control to libc (#661630)

Fri Dec 10 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-36

- tweak patch for postponing the connection drop in a newly-forked child until
  we're first called so that it doesn't try to close sockets which we just
  assumed were our own (more of #474181)

Fri Dec 03 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-35

- don't unconditionaly set up a new LDAP structure every time we try to read
  someone's supplemental groups list, regardless of whether or not we did so
  previously, and clean the connection up completely if we fail to get a
  response or parse it (#654650, from upstream #418 and #392 via Olivier
  Fourdan)

Thu Dec 02 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-34

- link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
  library dependencies which is lost at unload doesn't leak, for the sake
  of applications which call PAM for authentication many times over (Mark
  Goodwin, #511238)
- fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
- fix an uninitialized variable error (Mark Goodwin, part of #511238)

Fri Sep 24 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-33

- drop patch for #546151, not needed after all
- tweak the patch for #537358 a bit

Wed Sep 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-32

- add revised testing patch to postpone the connection drop in a newly-forked
  child until we're first called (#474181)

Fri Aug 06 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-31

- add testing patch to postpone the connection drop in a newly-forked child
  until we're first called (#474181)

Sat Jul 31 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-30

- report the remaining life of soon-to-be-expired passwords with granularity
  in hours, if possible (Masahiro Matsuya, #537358)

Sat Jul 31 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-29

- when the user's password has expired, come right out and say it (Masahiro
  Matsuya, #546151)

Tue Jul 13 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-28

- set close-on-exec on the dummy socket created in the child atfork() (#500397)

Tue Jul 13 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-27

- pull in backported fix for upstream #378, which returns NETDB_INTERNAL in
  h_errno in cases when nss_ldap's run out of space in the supplied buffer and
  libc provided us with an h_errno variable to set for it to also check
  (Jason Luo, #468807)

Fri Jun 11 2010 Nalin Dahyabhai <nalin@redhat.com> - 253-26

- pull in fix for upstream #313, which returns a clean error when we've
  failed to parse our configuration correctly, in this case due either to a
  larger-than-handled nss_initgroups_ignoreusers setting (#584157) or the
  lack of any servers being configured (#538498)

Sat Dec 12 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-25

- avoid deadlock when one of our lookups recurses into our own host resolution
  routine, which would otherwise cause a deadlock or a crash (#448883)
- provisionally add an "nss_check_case" option which, when enabled, will
  ignore entries for which the result didn't case-exact match the query,
  regardless of the comparison performed by the directory (#508621,#518911)

Fri Dec 11 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-24

- update build dependency on openldap to 2.3.43-7 to get fixes for referral
  chasing (#510522) which affected nss_ldap (#472920)

Thu Dec 10 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-23

- unblock SIGPIPE while closing the connection in the child's part of
  atfork(), so that it can get delivered before we reset the signal
  handler (#454315)

Wed Sep 30 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-22

- add patch to not assume we got a result for our start_tls request within the
  bind timelimit (Jatin Nansi, #499302)

Wed May 27 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-21

- drop build requirement and explicit link with fipscheck (#502593)

Wed May 20 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-20

- re-enable patch for #457258, accidentally disabled for previous build

Wed May 20 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-19

- don't close a oneshot connection while we're in the middle of answering a
  specific query (#488857)

Wed May 06 2009 Nalin Dahyabhai <nalin@redhat.com> - 253-18

- turn the default for paged results back off (#486321)
- pull in fix for leaking descriptors from version 255 (#428837)
- replace our proposed patch for being stricter about malformed entries with
  the version upstream went with, and start applying it (#457258)

Fri Oct 17 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-17
```
- add buildrequirement on fipscheck-devel
```

Tue Oct 07 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-16

- add nscd,gdm to the default list of nss_initgroups_ignoreusers (#466526)

Fri Aug 29 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-15

- build nss_ldap with --enable-paged-results (#444185)
- add patch to make netgroup enumeration fail due to lack of entries in
  setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
  work (Jose Plans, #445972)

Tue Jul 15 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-14

- build with -fno-strict-aliasing, mainly for pam_ldap (internal
  toolset, #455285)

Tue Jul 08 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-13

- block SIGPIPE in the atfork handler, so that it doesn't trip up when
  attempting to drop a connection to the server (#448014)

Tue Apr 29 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-12
```
- rebuild
```

Fri Apr 25 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-11

- backport changes to group parsing from version 254 to fix heap corruption
  when parsing nested groups (#444031)

Sat Jan 19 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-10

- remove unnecessary nss_ldap linkage to libnsl (part of #427370)

Fri Jan 04 2008 Nalin Dahyabhai <nalin@redhat.com> - 253-9
```
- rebuild
```

Wed Nov 14 2007 Nalin Dahyabhai <nalin@redhat.com> - 253-8

- incorporate Tomas Janousek's fix to prevent re-use of connections across
  fork() (#252337)

Sat Nov 03 2007 Nalin Dahyabhai <nalin@redhat.com> - 253-7

- add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
  static link with newer Kerberos (#427370)

Sat Nov 03 2007 Nalin Dahyabhai <nalin@redhat.com> - 253-6

- suppress password-expired errors encountered during referral chases during
  modify requests (#335661)
- interpret server-supplied policy controls when chasing referrals, so that
  we don't give up when following a referral for a password change after
  reset (#335661)
- don't attempt to change the password using ldap_modify if the password
  change mode is "exop_send_old" (we already didn't for "exop") (#364501)
- don't drop the supplied password if the directory server indicates that
  the password needs to be changed because it's just been reset: we may need
  it to chase a referral later (#335661)
- correctly detect libresolv and build a URI using discovered settings, so that
  server discovery can work again (#254172)
- honor the "port" setting again by correctly detecting when a URI doesn't
  already specify one (#326351)

Fri Jul 06 2007 Nalin Dahyabhai <nalin@redhat.com> - 253-5
```
- drop unnecessary patch for #246541
```

Wed Jul 04 2007 Nalin Dahyabhai <nalin@redhat.com> - 253-4

- add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
  nss_initgroups_ignoreusers (#243753)

Wed Jul 04 2007 Nalin Dahyabhai <nalin@redhat.com>

- resize the supplemental GID array when it gets too large and an array size
  limit isn't set (Gavin Romig-Koch, #246541)

Tue Nov 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 253-3
```
- rebuild
```

Tue Nov 21 2006 Nalin Dahyabhai <nalin@redhat.com> - 253-2

- update to pam_ldap 183, resolving CVE-2006-5170 (#216421)

Sat Sep 23 2006 Nalin Dahyabhai <nalin@redhat.com> - 253-1

- update to 253
  - closes a crasher when glibc's initgroups backend passes in a zero-length,
    NULL buffer to start
  - includes lookup_nssldap updates for autofs

Wed Sep 13 2006 Nalin Dahyabhai <nalin@redhat.com> - 251-2

- configure with --enable-configurable-krb5-ccname-gssapi instead of
  --enable-configurable-krb5-ccname, the latter of which doesn't actually
  do anything (Howard Wilkinson)

Fri Aug 04 2006 Nalin Dahyabhai <nalin@redhat.com> - 251-1
```
- update to 251
```

Wed Jul 26 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-6

- note the location of the man pages in /etc/ldap.conf (part of #146815)

Thu Jul 13 2006 Jesse Keating <jkeating@redhat.com> - 250-5.1
```
- rebuild
```

Wed May 17 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-5

- adjust nss_ldap's makefile rule to more correctly deduce the right soversion
  for nsswitch modules (#191927)

Tue May 09 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-4

- update the list of local users to include named,avahi,haldaemon (from #186527)

Wed May 03 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-3
```
- update to pam_ldap 182
```

Tue May 02 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-2

- update to pam_ldap 181
- fix syntax error in pam_ldap.c (upstream #269)

Fri Apr 28 2006 Nalin Dahyabhai <nalin@redhat.com> - 250-1

- update to 250
- configure default time limits for binding/searching/idling

Sat Feb 25 2006 Nalin Dahyabhai <nalin@redhat.com> - 249-1
```
- update to 249, which incorporates the fix for #182464
```
Fri Feb 24 2006 Nalin Dahyabhai <nalin@redhat.com> - 248-3
```
- fix deadlock in initgroups() (#182464, upstream #255)
```
Tue Feb 14 2006 Jesse Keating <jkeating@redhat.com> - 248-2.2
```
- rebump for build order issues during double-long bump
```
Sat Feb 11 2006 Jesse Keating <jkeating@redhat.com> - 248-2.1
```
- bump again for double-long bug on ppc(64)
```

Fri Feb 10 2006 Nalin Dahyabhai <nalin@redhat.com> - 248-2

- set "nss_initgroups_ignoreusers root,ldap" in the default configuration
  file, so that nss_ldap will assume that there are no supplemental groups
  for this user to be found in the directory server (#180657)

Wed Feb 08 2006 Jesse Keating <jkeating@redhat.com> - 248-1.1
```
- rebuilt for new gcc4.1 snapshot and glibc changes
```
Thu Jan 26 2006 Nalin Dahyabhai <nalin@redhat.com> 248-1
```
- update to nss_ldap 248
```
Wed Jan 25 2006 Nalin Dahyabhai <nalin@redhat.com> 246-1
```
- update to nss_ldap 246
```

Thu Jan 12 2006 Nalin Dahyabhai <nalin@redhat.com> 245-1

- update to nss_ldap 245
- add patch from upcoming 246 release to change the placeholder used when
  userPassword is unreadable from "x" to "*" (upstream #240)

Sat Dec 10 2005 Jesse Keating <jkeating@redhat.com>
```
- rebuilt
```
Tue Nov 22 2005 Nalin Dahyabhai <nalin@redhat.com> 244-2
```
- rebuild with new libldap and friends (#173794)
```
Fri Oct 28 2005 Nalin Dahyabhai <nalin@redhat.com> 244-1
```
- update to nss_ldap 244
```
Wed Oct 05 2005 Nalin Dahyabhai <nalin@redhat.com> 243-1
```
- update to nss_ldap 243
```
Thu Sep 29 2005 Nalin Dahyabhai <nalin@redhat.com> 242-2
```
- own the symlink for the module's soname (#169288)
```
Wed Sep 28 2005 Nalin Dahyabhai <nalin@redhat.com> 242-1
```
- update to nss_ldap 242
```
Tue Sep 13 2005 Nalin Dahyabhai <nalin@redhat.com> 241-1
```
- update to nss_ldap 241
```
Thu Sep 08 2005 Nalin Dahyabhai <nalin@redhat.com> 240-2
```
- install the pam_ldap man page (part of #167764)
```
Thu Sep 01 2005 Nalin Dahyabhai <nalin@redhat.com> 240-1
```
- update to nss_ldap 240
```

Thu Aug 18 2005 Nalin Dahyabhai <nalin@redhat.com> 239-1

- update to nss_ldap 239
- provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
  does for the modules it provides

Thu Aug 18 2005 Nalin Dahyabhai <nalin@redhat.com> 234-6
```
- rebuild
```

Thu Aug 18 2005 Nalin Dahyabhai <nalin@redhat.com> 234-5

- update to pam_ldap 180 to get fix for vulnerability from parsing password
  policy controls which don't contain error numbers (#166164, CAN-2005-2497)

Sat May 21 2005 Nalin Dahyabhai <nalin@redhat.com> 234-4

- override glibc version detection so that mismatches between the versions of
  32- and 64-bit glibc don't result in our %install installing the module
  with a different name than the 'make install' target uses

Sat May 21 2005 Nalin Dahyabhai <nalin@redhat.com> 234-3

- fix type mismatch bug in patch for using non-blocking start_tls in
  preference to the blocking version when it's available (#156582)

Thu Mar 17 2005 Nalin Dahyabhai <nalin@redhat.com> 234-2
```
- rebuild
```

Tue Mar 01 2005 Nalin Dahyabhai <nalin@redhat.com> 234-1

- update to nss_ldap 234
- configure with --enable-configurable-krb5-ccname

Thu Feb 03 2005 Nalin Dahyabhai <nalin@redhat.com> 232-2

- prefer using libraries in /usr/lib/nss_ldap-openldap if we find any
- use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
  we can time out if the server has gone catatonic

Tue Jan 25 2005 Nalin Dahyabhai <nalin@redhat.com> 232-1
```
- update to version 232
```

Sat Jan 01 2005 Nalin Dahyabhai <nalin@redhat.com> 227-1

- update to version 227
- force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
  unconfigured in ldap.conf

Sat Jan 01 2005 Nalin Dahyabhai <nalin@redhat.com> 226-3

- fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
  libldap's default, which is dependent on the version of OpenLDAP which which
  this package is linked (part of #143622)

Fri Oct 29 2004 Nalin Dahyabhai <nalin@redhat.com> 226-2
```
- rebuild
```

Fri Oct 29 2004 Nalin Dahyabhai <nalin@redhat.com> 226-1

- update to nss_ldap 226, pam_ldap 176
- rework pam_ldap dns autoconfig patch
- require automake instead of automake15, because autoreconf uses the current
  version (#129877)

Wed Sep 01 2004 Nalin Dahyabhai <nalin@redhat.com> 220-3
```
- rebuild
```
Wed Jun 16 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Tue Jun 08 2004 Nalin Dahyabhai <nalin@redhat.com> 220-1
```
- update to 220, pam_ldap 169
```

Fri Apr 16 2004 Nalin Dahyabhai <nalin@redhat.com>

- fail at build-time if the modules produced can't be loaded
- fix missing module in pam_ldap build

Fri Mar 26 2004 Nalin Dahyabhai <nalin@redhat.com> 217-1

- include patch to set errno to ENOENT when returning NSS_STATUS_NOTFOUND to
  glibc

Wed Mar 24 2004 Nalin Dahyabhai <nalin@redhat.com>
```
- update to 217
```

Thu Mar 11 2004 Nalin Dahyabhai <nalin@redhat.com> 212-1

- update to 212, pam_ldap 167
- link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
  mech, at least for now, and we pick up its unresolved symbols at link-time
- fix out-of-bounds error at initialization-time (part of #101269)
- include pam_ldap's authorization schema files for slapd as a doc file

Wed Mar 03 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Sat Feb 14 2004 Elliot Lee <sopwith@redhat.com>
```
- rebuilt
```
Wed Nov 26 2003 Nalin Dahyabhai <nalin@redhat.com> 207-6
```
- rebuild
```

Fri Nov 21 2003 Nalin Dahyabhai <nalin@redhat.com> 207-5

- fix objectclass and attribute mapping, which failed due to uninitialized
  fields in mapping index structures, fixed upstream in 210 (#110547)

Tue Nov 11 2003 Nalin Dahyabhai <nalin@redhat.com> 207-4

- link with the proper libsasl (1 or 2) for the version of OpenLDAP we
  are linking with (#106801)

Fri Aug 15 2003 Nalin Dahyabhai <nalin@redhat.com> 207-3

- link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
  we assume means that it's in /lib)

Thu Aug 14 2003 Nalin Dahyabhai <nalin@redhat.com> 207-2
```
- relax openldap-devel buildreq to 2.0.27
```

Fri Jun 06 2003 Nalin Dahyabhai <nalin@redhat.com> 207-1

- update to build with newer OpenLDAP
- add README.TLS to remind people that in order for TLS support to be usable,
  the server's certificate has to pass validation checks made by the client

Mon Mar 10 2003 Florian La Roche <Florian.LaRoche@redhat.de>
```
- move pam into /lib64/security directory
```
Thu Jan 23 2003 Tim Powers <timp@redhat.com>
```
- rebuilt
```

Thu Jan 16 2003 Nalin Dahyabhai <nalin@redhat.com> 202-4

- rework static link order to account for libssl requiring libkrb5
- force assembly locking on %ix86 systems
- link with libz, which libssl also requires

Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 202-3
```
- Fix wildcard for symlink in %install
```

Fri Nov 15 2002 Nalin Dahyabhai <nalin@redhat.com> 202-2

- apply DB patches from sleepycat.com
- correctly point nss_ldap at the bundled DB library
- create /%{_lib} instead of /lib to install into

Thu Oct 03 2002 Nalin Dahyabhai <nalin@redhat.com> 202-1

- update to nss_ldap 202, pam_ldap 153
- update DB from 4.0.14 to 4.1.24.NC
- try to address multilib path changes

Wed Aug 28 2002 Nalin Dahyabhai <nalin@redhat.com> 198-3
```
- rebuild
```
Sat Aug 10 2002 Nalin Dahyabhai <nalin@redhat.com> 198-2
```
- handle larger-than-expected DNS responses correctly
```

Thu Aug 08 2002 Nalin Dahyabhai <nalin@redhat.com> 198-1

- update to nss_ldap 198, closing a possible buffer overflow in DNS autoconfig

Sat Jul 20 2002 Nalin Dahyabhai <nalin@redhat.com> 197-1
```
- update to nss_ldap 197, pam_ldap 150
```
Sat Jun 22 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Tue Jun 11 2002 Nalin Dahyabhai <nalin@redhat.com> 194-1
```
- update to nss_ldap 194, pam_ldap 148
```
Mon May 27 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Tue May 21 2002 Nalin Dahyabhai <nalin@redhat.com> 189-3
```
- rebuild in new environment
```
Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 189-2
```
- build for RHL 7.2/7.3
```
Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 189-1.7
```
- build for RHL 7/7.1
```

Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 189-1.6

- fix up logic generated by authconfig from RHL 7.2 in %post
- build for RHL 6.x

Thu May 16 2002 Nalin Dahyabhai <nalin@redhat.com>
```
- the triggerun should be a trigger postun
```
Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 189-1
```
- rebuild for RHL 7.2/7.3
```
Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 189-0.7
```
- rebuild for RHL 7/7.1
```
Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 189-0.6
```
- update to nss_ldap 189, pam_ldap 145
```
Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 188-1
```
- rebuild for RHL 7.2/7.3
```
Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 188-0.7
```
- rebuild for RHL 7/7.1
```

Wed May 08 2002 Nalin Dahyabhai <nalin@redhat.com> 188-0.6

- rebuild for RHL 6.2
- change dependency on pam-devel to /usr/include/security/pam_modules.h
- drop build deps on cyrus-sasl-devel and openldap >= 2.x
- modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
- update to nss_ldap 188
- update to pam_ldap 144

Sat Apr 06 2002 Nalin Dahyabhai <nalin@redhat.com> 185-1
```
- update to nss_ldap 185
- update to pam_ldap 140
```

Fri Mar 01 2002 Nalin Dahyabhai <nalin@redhat.com> 184-1

- update to pam_ldap 138
- enable rfc2307bis schema support
- version the pam_ldap module
- add the proper soname to the nss_ldap module and remove the symlink
- add a trigger to run ldconfig again when an upgrade removes the symlink,
  which used to be in this package (doh!)
- fix the symlink from %{_libdir} to the module (for linking directly to it)

Fri Feb 15 2002 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 184, pam_ldap 137
```
Thu Jan 24 2002 Nalin Dahyabhai <nalin@redhat.com> 181-1
```
- update to nss_ldap 181, pam_ldap 136
```
Fri Dec 21 2001 Nalin Dahyabhai <nalin@redhat.com> 175-1
```
- update to nss_ldap 175, pam_ldap 135
```
Wed Nov 28 2001 Nalin Dahyabhai <nalin@redhat.com> 174-1
```
- update to nss_ldap 174
```
Sat Nov 17 2001 Nalin Dahyabhai <nalin@redhat.com> 173-3
```
- update to pam_ldap 134
```
Thu Nov 01 2001 Nalin Dahyabhai <nalin@redhat.com> 173-2
```
- build nss_ldap with --enable-schema-mapping
```

Tue Oct 30 2001 Nalin Dahyabhai <nalin@redhat.com> 173-1

- update to nss_ldap 173, which includes doc updates
- update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit

Fri Sep 07 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to pam_ldap 125, making checking of host attributes configurable

Sat Sep 01 2001 Nalin Dahyabhai <nalin@redhat.com>

- link statically with libldap again, because libldap is linked with other
  shared libraries now (keeping us from having files in /usr open when we
  go to shut the system down)

Fri Aug 31 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 172, fixing schema mapping code
- update to pam_ldap 124, incorporating TLS default option and doc fixes

Tue Aug 07 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 167, adding support for rebinds

Wed Jul 25 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 164, fixing the timeout problem correctly
- update to pam_ldap 122, fixing escaping of user name in filters

Fri Jul 13 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 163, fixing the timeout problem
- update to pam_ldap 120
- add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
- add db3-devel as a buildprereq (#48999)
- add pam-devel as a buildprereq (#48999)

Wed Jul 11 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 161
- attempt to fix hangs when no timeout is specified, or the timeout is 0

Tue Jul 10 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 160, pam_ldap 119
```
Fri Jun 29 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- patch cleanups
```
Wed Jun 27 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 159, pam_ldap 118
```
Wed Jun 20 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 153, pam_ldap 117
```
Wed May 30 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 152, pam_ldap 111
```
Tue May 22 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to pam_ldap 108
```
Thu Apr 26 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to pam_ldap 107
```

Fri Apr 20 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 150 (incorporates the fail patch)
- update to pam_ldap 106

Thu Mar 08 2001 Nalin Dahyabhai <nalin@redhat.com>

- make nss_ldap fail when attempting to startup TLS fails, because that's what
  we do when LDAPS doesn't work (and what pam_ldap does already)
- add DNS autoconfiguration to pam_ldap

Wed Mar 07 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 149, minor fixes for compile glitches
- update to pam_ldap 105, minor fixes (as above) and handles shadow expiration

Sat Mar 03 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- rebuild in new environment
```

Thu Mar 01 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 146 to get a faster initgroups() back-end

Tue Feb 13 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 143 to get the official fix for the heap corruption

Sat Feb 10 2001 Nalin Dahyabhai <nalin@redhat.com>

- fix heap corruption when falling back to DNS SRV records for configuration

Tue Feb 06 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 142, fixes a memory leak
```

Tue Jan 30 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 140, fixes a configure bug and an alignment problem

Sat Jan 20 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 139
```

Tue Jan 16 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 138, which folds in our patch for initgroups
- change the default search base in ldap.conf to dc=example,dc=com

Thu Jan 11 2001 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 137 and pam_ldap 99
- try to not cause a segfault in _nss_ldap_initgroups

Thu Jan 04 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 124 and pam_ldap 82
```
Fri Dec 29 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- add a requires: for nscd
```

Fri Dec 15 2000 Nalin Dahyabhai <nalin@redhat.com>

- version the NSS module so that it works properly with programs which have
  been linked statically to a different version of an LDAP library, like
  Netscape Communicator

Thu Dec 07 2000 Nalin Dahyabhai <nalin@redhat.com>

- BuildPrereq gdbm-devel
- pass RPM_OPT_FLAGS as CFLAGS to %configure
- if protocol version is 2, explicitly set protocol version to 3 before trying
  to start TLS
- add STARTTLS support to nss_ldap
- work around a build-time problem on ia64

Wed Dec 06 2000 Nalin Dahyabhai <nalin@redhat.com>

- BuildPrereq cyrus-sasl-devel instead of cyrus-sasl

Tue Nov 21 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 123 and pam_ldap 82
```

Sat Oct 28 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 122
- link statically with libsasl, require the first devel package that supplied it

Fri Oct 20 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 120 and pam_ldap 77
```
Thu Oct 05 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 116 and pam_ldap 74
```
Fri Sep 08 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- rebuild in new environment
```

Fri Jul 28 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to pam_ldap 67 to fix a bug in template user code
- convert symlink in /usr/lib to a relative one (#16132)

Fri Jul 28 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 113 and pam_ldap 66
```
Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
```
- automatic rebuild
```

Wed Jun 28 2000 Matt Wilson <msw@redhat.com>

- changed all the -,- in attr statements to root,root

Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update pam_ldap to 63
```
Thu Jun 01 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update pam_ldap to 56
```

Wed May 31 2000 Nalin Dahyabhai <nalin@redhat.com>

- update pam_ldap to 55
- back out no-threads patch for pam_ldap, not needed any more

Fri May 26 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to 110
- revert prototype patch, looks like a problem with the new glibc after all

Sat May 20 2000 Nalin Dahyabhai <nalin@redhat.com>

- get libpthread out of the NSS module
- fix prototype problems in getpwXXX()

Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 109
```
Sun Apr 30 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update pam_ldap 51
```
Wed Apr 26 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 108 and pam_ldap 49
```
Fri Apr 21 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to pam_ldap 48
```

Fri Mar 31 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 107
- note: check http://www.advogato.org/person/lukeh/ for Luke's changelog

Wed Mar 22 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 106
```
Thu Feb 10 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 105
```

Tue Feb 08 2000 Nalin Dahyabhai <nalin@redhat.com>

- update to nss_ldap 104 and pam_ldap 46
- disable link against libpthread in pam_ldap

Wed Feb 02 2000 Nalin Dahyabhai <nalin@redhat.com>

- remove migration tools, because this package requires openldap now, which
  also includes them

Sat Jan 29 2000 Nalin Dahyabhai <nalin@redhat.com>
```
- update to nss_ldap 103
```

Tue Jan 25 2000 Preston Brown <pbrown@redhat.com>

- fix typo in linuxconf-pair pam cfg file (#7800)

Wed Jan 12 2000 Preston Brown <pbrown@redhat.com>

- v99, made it require pam_ldap
- added perl migration tools
- integrate pam_ldap stuff

Sat Oct 23 1999 Bill Nottingham <notting@redhat.com>

- statically link ldap libraries (they're in /usr/lib)

Wed Aug 11 1999 Cristian Gafton <gafton@redhat.com>

- use the ldap.conf file as an external source
- don't forcibly build the support for version 3
- imported the default spec file from the tarball and fixed it up for RH 6.1