sssd (1.5.15-0ubuntu6) precise; urgency=low

  * Merge from debian git:
    - Fix upstart job to pass options to the daemon. (LP: #914436)

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Wed, 11 Jan 2012 02:08:27 +0200

sssd (1.5.15-0ubuntu5) precise; urgency=low

  * Merge changes from debian git:
    - control: Add libsasl2-modules-gssapi-mit and libsasl2-modules-ldap
      to Recommends for sssd. (LP: #902902)
    - rules: Move the rule for purging .la files before dh_install.
    - sssd.install: Fix the wildcard for plugins to include .so symlinks.

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Mon, 02 Jan 2012 14:34:44 +0200

sssd (1.5.15-0ubuntu4) precise; urgency=low

  * Fix prerm invoke_failure hook to simply return as empty functions
    are invalid shell syntax.
  * Drop auto-generated debian changes as they have most likely been
    generated by mistake (changelog indicated a no change rebuild)

 -- Stéphane Graber <stgraber@ubuntu.com>  Sat, 31 Dec 2011 17:56:57 +0100

sssd (1.5.15-0ubuntu3) precise; urgency=low

  * Rebuild for new libldb1 (1.1.4)

 -- Stéphane Graber <stgraber@ubuntu.com>  Sat, 31 Dec 2011 17:30:54 +0100

sssd (1.5.15-0ubuntu2) precise; urgency=low

  * Merged changes from debian git:
    - sssd.upstart.in: Test if the config file exists, and exit if not.
    - Fail gracefully if invoke-rc.d returns an error on postinst/prerm,
      like when the daemon fails to start when there is no config file.

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Fri, 25 Nov 2011 00:29:51 +0200

sssd (1.5.15-0ubuntu1) precise; urgency=low

  * Merge from Debian git, remaining changes: none.
  * Rebuild against current ldb (LP: #893043).

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Thu, 24 Nov 2011 19:57:41 +0200

sssd (1.5.15-1) UNRELEASED; urgency=low

  [ Petter Reinholdtsen ]
  * New upstream version 1.2.4:
    - Resolves long-standing issues related to group processing with
      RFC2307bis LDAP servers.
    - Fixed bugs in RFC2307bis group memberships related to initgroups
      (Closes: #595564).
    - Fix tight-loop bug on systems with older OpenLDAP client
      libraries (such as Red Hat Enterprise Linux 5)
  * New Upstream Version 1.2.3:
    - Resolves CVE-2010-2940.
  * New Upstream Version 1.2.2:
    - The LDAP provider no longer requires access to the LDAP
      RootDSE. If it is unavailable, we will continue on with our best
      guess.
    - The LDAP provider will now log issues with TLS and GSSAPI to the
      syslog.
    - Significant performance improvement when performing initgroups
      on users who are members of large groups in LDAP.
    - The sss_client will now reconnect properly to the SSSD if the
      daemon is restarted.
      * This resolves an issue causing GDM to crash when logging out
        of a user after the SSSD had been restarted.
  * Correct package description for python-sss (Closes: #596215).
  * Update Standards-Version from 3.8.4 to 3.9.1.  No changes needed.

  [ Timo Aaltonen ]
  * New upstream release (1.5.15) (Closes: #595564, #624194, #640678).
    - Add libunistring-dev to build-deps.
  * Drop patch to ensure LDAP authentication never accept a zero
    length password, which is now included upstream.
  * sssd.upstart.ubuntu:
    - Don't start before net-device-up. (LP: 812943)
    - Source /etc/default/sssd. (LP: 812943)
  * sssd.default: Added a file to include the sssd daemon defaults,
    currently has '-D -f'.
  * sssd.init: Drop separate OPTIONS, '-D' comes from /etc/default/sssd
    now..
  * rules: Install the Python API files to /usr/share/sssd, as discussed
    with upstream. (LP: 859611)
  * fix-python-api-path.dpatch: Use the new location for the API files.
    (LP: 859611)
  * libpam-sss.pam-auth-update:
    - Add 'forward_pass' to auth stack to fix ecryptfs mounts. (LP: 826643)
    - Add pam_localuser.so to account stack to allow local users to log in.
      (LP: 860488)
    - Drop the priority so that pam_unix is always before pam_sss.
  * control: sssd now Recommends libpam-sss and libnss-sss, since sssd is
    mostly useless without them. (LP: 767337)
  * control, compat: Bump debhelper build-dep and compat level to 8.
  * Switch to source format 3.0 (quilt).
  * Do not install a working config file by default. The local domain
    definition was broken (upstream #1014). The daemon will need to be
    configured by other means before it's usable.
  * Add fix-format-security.diff (Closes: #643806)
  * Add support for Multi-Arch.
  * Migrate to dh, drop cdbs build-dep, add quilt, dh-autoreconf and
    autopoint to build-deps.
  * Remove unnecessary libnss-sss.links.
  * Add libdhash-dev, libcollection-dev and libini-config-dev to build-deps.
  * Drop cvs from build-depends.
  * Add new packages: libipa-hbac0, libipa-hbac-dev, python-libipa-hbac.
  * libnss-sss.overrides: Add an override for 
    "package-name-doesnt-match-sonames".
  * Determine the used init system during build, add lsb-release to
    build-deps. Default to sysvinit, use upstart if Ubuntu.
  * Add ensure-all-input-valid-utf8.diff from upsream: Ensure that all
    input strings are valid UTF-8.
  * sssd.upstart.in: Test if the config file exists, and exit if not.
  * Fail gracefully if invoke-rc.d returns an error on postinst/prerm, like
    when the daemon fails to start when there is no config file.
  * sssd.init.in: Check that /etc/default/sssd is a real file before sourcing
    it (Closes: #587895).
  * control: Add libsasl2-modules-gssapi-mit and libsasl2-modules-ldap to
    Recommends for sssd.
  * rules: Move the rule for purging .la files before dh_install.
  * sssd.install: Fix the wildcard for plugins to include .so symlinks.

  [ Stéphane Graber ]
  * Fix prerm invoke_failure hook to simply return as empty functions
    are invalid shell syntax.

 -- Petter Reinholdtsen <pere@debian.org>  Tue, 14 Sep 2010 12:06:37 +0200

sssd (1.2.1-4.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Adjust install path to consider GNU triplet (Closes: #640626).

 -- Luca Falavigna <dktrkranz@debian.org>  Tue, 20 Sep 2011 20:02:34 +0200

sssd (1.2.1-4.2) unstable; urgency=low

  * Non-maintainer upload.
  * debian/sssd.install
    - updated location for ldb modules; Closes: #618159

 -- Sandro Tosi <morph@debian.org>  Fri, 03 Jun 2011 23:53:59 +0200

sssd (1.2.1-4.1) unstable; urgency=medium

   * Non-maintainer upload by the Security Team
   * Fix CVE-2010-4341 (Closes: #610032)

 -- Moritz Muehlenhoff <jmm@debian.org>  Tue, 25 Jan 2011 22:09:21 +0100

sssd (1.2.1-4) unstable; urgency=low

  * Add patch from Stephen Gallagher to ensure LDAP authentication
    never accept a zero length password (Closes: #594413).  Solves
    CVE-2010-2940.

 -- Petter Reinholdtsen <pere@debian.org>  Wed, 25 Aug 2010 22:33:40 +0200

sssd (1.2.1-3) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Look for /etc/default/sssd, not /etc/defaults/sssd in init.d
    script (Closes: #588252).
  * Make sssd.conf generation more robust, and make sure missing SRV
    records are ignored and not handled as host names.
  * Add code in generate-config to look up Kerberos realm using
    _kerberos TXT record in DNS if it exist.
  * Recommend bind9-host used by generate-config for SRV and TXT
    lookups.
  
  [ Morten Werner Forsbring ]
  * Check if /etc/default/sssd is a file and executable, not a directory,
    before sourcing in init-script. Thanks to lintian.

 -- Morten Werner Forsbring <werner@debian.org>  Thu, 12 Aug 2010 16:31:14 +0200

sssd (1.2.1-2) unstable; urgency=low

  * Make sure init.d script sources /etc/default/sssd (Closes: #588252).
  * Drop /etc/default/sssd from package, to avoid conffile question
    from dpkg during upgrades.
  * Make sure to only remove obsolete sssd conffiles on upgrades, not
    on first time installation.
  * Add new script generate-config and call it from the sssd postinst
    during first time installation to try to generate the sssd.conf
    file dynamically for LDAP and Kerberos using DNS entries, and fall
    back to the static example configuration if this fail.
  * Let sssd suggest libnss-sss and libpam-sss, to make those
    installing sssd aware of the other packages.
  * Add netgroup to nsswitch.conf entries added at first time
    installation, to make sure those installing now get working
    netgroups when sssd get netgroup support
  * Let sssd recommend ldap-utils as ldapsearch is used for generating
    the configuration.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 06 Aug 2010 23:44:26 +0200

sssd (1.2.1-1) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Move calls to pam-auth-update from the package scripts in sssd to
    libpam-sss, and correct prerm call to remove the correct pam config.
    Add versioned dependency on libpam-runtime to make sure
    pam-auth-update is available.
  * Add code to the postinst and postrm of libnss-sss to update
    passwd, group and shadow entries in /etc/nsswitch.conf.
  * Make sure init.d/sssd start after $named, to ensure it can look up
    in DNS also when the DNS server is on the local machine.

  [ Morten Werner Forsbring ]
  * New upstream release.

 -- Morten Werner Forsbring <werner@debian.org>  Thu, 24 Jun 2010 14:16:30 +0200

sssd (1.2.0-1) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * New upstream release.
    - Add libsemanage1-dev as build dependency, as it is now required.
    - Drop python-build-with-deb-layout.dpatch, now handled upstream.
    - Adjust provide-default-working-sssd-config-file.dpatch to
      work with new package source layout and config file content.
    - Adjust build rules to cope with server/ changing to src/ in the
      source tarball.
    - Add --enable-krb5-locator-plugin to keep building the plugin.
  * Change the pam-auth-update configuration to make the session
    script optional instead of sufficient, to make sure the other
    session modules are executed too.
  * Change initial pam password entry from requisite to sufficient,
    to make sure local users can have their password set even if
    sssd is enabled.
  * Rename pam-configs/sssd to pam-configs/sss, to have a name that
    is consistent with the package name libpam-sss.
  * Add VCS links to the GIT repository.
  * Move configuration API documentation from /etc/sssd/ to
    /usr/share/doc/sssd/.  It is not configuration and do not belong
    in /etc/.
  * Drop autoconf, automake, libtool, m4 and autotools-dev from
    build-depends.  There is no need to regenerate the build files any
    more.

  [ Morten Werner Forsbring ]
  * Add dnsutils as build-dependency.

 -- Morten Werner Forsbring <werner@debian.org>  Tue, 01 Jun 2010 20:41:59 +0200

sssd (1.0.5-1) unstable; urgency=low

  * Initial upload based on package from Ubuntu (Closes: #579593).
  * Update standards-version from 3.8.3 to 3.8.4.  No changes needed.
  * Add init.d script and rename sssd.upstart to sssd.upstart.ubuntu
    to make sure init.d script is installed instead of upstart job.
  * Add draft pam-auth-update configuration based on proposals in
    Launcepad bug #557398.
  * Update address to FSF in copyright file.  Thanks lintian.
  * Set section for python-sss to python after advice from lintian.
  * Rewrite python-build-with-deb-layout.dpatch to patch Makefile.in
    instead of Makefile.am, to avoid having to run autoreconf.
  * Make sssd depend on python for its upgrade script.
  * Extend clean rule to remove generated file server/config/.files.
  * Make sure sssd.api.conf is installed into the sssd package, and
    put it in /etc/sssd/sssd.api.conf.  Fixes typo in Ubuntu package.

 -- Petter Reinholdtsen <pere@debian.org>  Wed, 05 May 2010 21:53:29 +0200

sssd (1.5.13-0ubuntu1) oneiric; urgency=low

  * FFE: New upstream release. (LP: #860297)
    - control: Add libunistring-dev to build-depends.
    - sssd.install: Include libipa_hbac.so*.
  * Rebuild against current libldb1, and use the multiarch path
    for libldb modules. (LP: #746981)
  * sssd.default:
    - Move the option to run as daemon here.
    - Add option that makes the daemon to use logfiles. (LP: #859602)
  * sssd.upstart:
    - Don't start before net-device-up. (LP: #812943)
    - Source /etc/default/sssd. (LP: #812943)
  * rules: Install the Python API files to /usr/share/sssd, as discussed
    with upstream. (LP: #859611)
  * fix-python-api-path.dpatch: Use the new location for the API files.
    (LP: #859611)
  * libpam-sss.pam-auth-update:
    - Add 'forward_pass' to auth stack to fix ecryptfs mounts. (LP: #826643)
    - Add pam_localuser.so to account stack to allow local users to log in.
      (LP: #860488)
  * control: sssd now Recommends libpam-sss and libnss-sss, since sssd is
    mostly useless without them. (LP: #767337)

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Tue, 27 Sep 2011 06:03:41 +0300

sssd (1.5.8-0ubuntu3) oneiric; urgency=low

  * No change rebuild for libldb version change.

 -- Stéphane Graber <stgraber@ubuntu.com>  Thu, 04 Aug 2011 16:20:58 -0400

sssd (1.5.8-0ubuntu2) oneiric; urgency=low

  [ Fabrice Coutadeur ]
  * Build with packaging from Fabrice's:
    - Multiarch:
      - Add Multi-Arch fields to control
      - Generate libnss-sss.links for multiarch
      - Drop hardcoded path from libnss-sss.install
      - Drop hardcoded path from libnss-sss.overrides
      - Drop hardcoded path from libpam-sss.install
      - Drop hardcoded path from sssd.install

    - Patches:
      - Drop python-build-with-deb-layout.dpatch
      - Refresh provide-default-working-sssd-config-file.dpatch

    - Dependencies:
      - Make libpam-sss depend on libpam-runtime and libpam0g
        for pam-auth-config (maintainer scripts)
      - Make libnss-sss depend on perl and multiarch
      - Update build-depends for new upstream (mostly ding-libs)
      - Recommend bind9-host and ldap-utils when installing sssd
      - Suggest libnss-sss and libpam-sss when installing sssd

    - Maintainer scripts:
      - Add libnss-sss.postinst/postrm to add/remove entries in nssswitch.conf
      - Add pam-auth-update configuration and hooks for libpam-sss
      - Add sssd.preinst to clean up old configuration files (1.0.5 serie)
      - Extend sssd.postinst to use generate-config

    - Other:
      - Add missing Section for python-sss
      - Add generate-config script to build the default configuration
        based on auto-detection of kerberos and ldap servers
      - Add a sysvinit script for cases where we don't have upstart
      - Update FSF address in debian/copyright
      - Rewrite rules for new major upstream release and packaging changes
      - Add /var/lib/sss/pubconf to sssd.dirs
      - Update sssd.examples for new file location

  [ Stéphane Graber ]
  * Messed up the version number, sorry...
  * Changes done on top of Fabrice's packaging:
    - Do not remove sssd.default from packaging
    - Do not rename the upstart script
    - Remove empty sssd.prerm script
    - Bump standards to 3.9.2
    - Rebase control and changelog on Ubuntu's
    - Remove two unneeded lintian override:
      - shlib-without-versioned-soname
      - postinst-must-call-ldconfig
    - Move multiarch-support to Pre-Depends
    - Write a short description of python-sss
    - Fix typo in package description
    - Bump pam-auth-update priority to 960 (512 + 256 + 128 + 64)

 -- Stéphane Graber <stgraber@ubuntu.com>  Tue, 21 Jun 2011 13:18:15 -0400

sssd (1.0.5-0ubuntu1) lucid; urgency=low

  * New upstream bugfix release. (LP: #510290)
  * sssd.dirs: Add /var/lib/sss/pubconf (LP: #557394)

 -- Timo Aaltonen <tjaalton@ubuntu.com>  Fri, 16 Apr 2010 11:37:16 +0300

sssd (1.0.2-0ubuntu2) lucid; urgency=low

  * No change rebuild due to libldb downgrade

 -- Scott Kitterman <scott@kitterman.com>  Fri, 02 Apr 2010 17:48:19 -0400

sssd (1.0.2-0ubuntu1) lucid; urgency=low

  * New upstream release (LP: #473262):
    - python API for managing sssd daemon configuration and
      native SSSD users.
    - support for asynchronous cache refreshes.
    - support password changing in LDAP and Kerberos providers.
    - support for server failover.
  * debian/control:
    - update tdb build dependency to use libtdb-dev.
    - add libselinux1-dev and libsasl2-dev build dependencies.
  * debian/sssd.upstart: replace init script with an upstart job.
  * Turn sssd.conf into a configuration file.
  * Create sssd log directory.

 -- Mathias Gug <mathiaz@ubuntu.com>  Tue, 19 Jan 2010 15:17:13 -0500

sssd (0.5.0-0ubuntu2) karmic; urgency=low

  * debian/libnss-sss.overrides, debian/sssd.overrides:
    + Fix linitian errors and warnings (LP: #425697):
      sssd ships an nss library - these are false-positives.
  * debian/fix-dbus-watch.dpatch: Update dbus-patch to final
    upstream version.
  * debian/fix-proxy-segfault.dpatch: Fix proxy enumeration.

 -- Mathias Gug <mathiaz@ubuntu.com>  Wed, 09 Sep 2009 20:21:04 -0400

sssd (0.5.0-0ubuntu1) karmic; urgency=low

  * Initial release.

 -- Mathias Gug <mathiaz@ubuntu.com>  Mon, 24 Aug 2009 16:35:11 -0400
