/[smeserver]/rpms/openldap/sme9/openldap.spec
ViewVC logotype

Annotation of /rpms/openldap/sme9/openldap.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Tue Nov 11 00:46:15 2014 UTC (9 years, 11 months ago) by vip-ire
Branch: MAIN
CVS Tags: openldap-2_4_39-8_el6_sme, HEAD
Import openldap

1 vip-ire 1.1 %define evolution_connector_prefix %{_libdir}/evolution-openldap
2     %define evolution_connector_includedir %{evolution_connector_prefix}/include
3     %define evolution_connector_libdir %{evolution_connector_prefix}/%{_lib}
4    
5     Name: openldap
6     Version: 2.4.39
7     Release: 8%{?dist}
8     Summary: LDAP support libraries
9     Group: System Environment/Daemons
10     License: OpenLDAP
11     URL: http://www.openldap.org/
12     Source0: ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-%{version}.tgz
13     Source1: ldap.init
14     Source2: ldap.sysconfig
15     Source3: README.evolution
16     Source4: slapd.conf
17     Source5: slapd.portreserve
18     Source6: ldap.conf
19     Source54: libexec-create-certdb.sh
20     Source55: libexec-generate-server-cert.sh
21    
22     # patches for 2.4
23     Patch0: openldap-manpages.patch
24     Patch1: openldap-security-pie.patch
25     Patch2: openldap-sql-linking.patch
26     Patch3: openldap-reentrant-gethostby.patch
27     Patch5: openldap-smbk5pwd-overlay.patch
28     Patch6: openldap-ldaprc-currentdir.patch
29     Patch7: openldap-userconfig-setgid.patch
30     Patch9: openldap-man-sasl-nocanon.patch
31     Patch10: openldap-memberof-disallow-global.patch
32     Patch11: openldap-rwm-reference-counting.patch
33     Patch12: openldap-nss-pk11-freeslot.patch
34     Patch13: openldap-nss-ignore-certdb-type-prefix.patch
35     Patch14: openldap-nss-certs-from-certdb-fallback-pem.patch
36     Patch15: openldap-dns-ipv6-queries.patch
37     Patch16: openldap-nss-hashed-cacertdir-filename-matching.patch
38     Patch17: openldap-dns-priority.patch
39     Patch18: openldap-nss-update-cipher-list.patch
40     Patch19: openldap-tls-reqcert-client-manpage.patch
41    
42     # patches for the evolution library (see README.evolution)
43     Patch200: openldap-evolution-ntlm.patch
44    
45     # provide a shim libldif for compatibility (its symbols have been merged into libldap)
46     Patch210: openldap-shim-ldif.patch
47    
48     BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
49    
50     BuildRequires: cyrus-sasl-devel >= 2.1, nss-devel, krb5-devel, tcp_wrappers-devel, unixODBC-devel
51     BuildRequires: glibc-devel, libtool, libtool-ltdl-devel, groff, perl
52     # smbk5pwd overlay:
53     BuildRequires: openssl-devel
54     Requires: nss-tools
55     Requires(post): rpm, coreutils
56    
57     Obsoletes: compat-openldap < 2.4
58     # used by migrationtools:
59     Provides: ldif2ldbm
60    
61     %description
62     OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
63     Protocol) applications and development tools. LDAP is a set of
64     protocols for accessing directory services (usually phone book style
65     information, but other information is possible) over the Internet,
66     similar to the way DNS (Domain Name System) information is propagated
67     over the Internet. The openldap package contains configuration files,
68     libraries, and documentation for OpenLDAP.
69    
70     %package devel
71     Summary: LDAP development libraries and header files
72     Group: Development/Libraries
73     Requires: openldap = %{version}-%{release}, cyrus-sasl-devel >= 2.1
74     Provides: openldap-evolution-devel = %{version}-%{release}
75    
76     %description devel
77     The openldap-devel package includes the development libraries and
78     header files needed for compiling applications that use LDAP
79     (Lightweight Directory Access Protocol) internals. LDAP is a set of
80     protocols for enabling directory services over the Internet. Install
81     this package only if you plan to develop or will need to compile
82     customized LDAP clients.
83    
84     %package servers
85     Summary: LDAP server
86     License: OpenLDAP
87     Requires: openldap = %{version}-%{release}, openssl, portreserve
88     Requires(pre): shadow-utils, initscripts
89     Requires(post): chkconfig, /sbin/runuser, make, initscripts
90     Requires(preun): chkconfig, initscripts
91     BuildRequires: db4-devel >= 4.4, db4-devel < 4.9
92     Group: System Environment/Daemons
93    
94     %description servers
95     OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access
96     Protocol) applications and development tools. LDAP is a set of
97     protocols for accessing directory services (usually phone book style
98     information, but other information is possible) over the Internet,
99     similar to the way DNS (Domain Name System) information is propagated
100     over the Internet. This package contains the slapd server and related files.
101    
102     %package servers-sql
103     Summary: SQL support module for OpenLDAP server
104     Requires: openldap-servers = %{version}-%{release}
105     Group: System Environment/Daemons
106    
107     %description servers-sql
108     OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access
109     Protocol) applications and development tools. LDAP is a set of
110     protocols for accessing directory services (usually phone book style
111     information, but other information is possible) over the Internet,
112     similar to the way DNS (Domain Name System) information is propagated
113     over the Internet. This package contains a loadable module which the
114     slapd server can use to read data from an RDBMS.
115    
116     %package clients
117     Summary: LDAP client utilities
118     Requires: openldap = %{version}-%{release}
119     Group: Applications/Internet
120    
121     %description clients
122     OpenLDAP is an open-source suite of LDAP (Lightweight Directory Access
123     Protocol) applications and development tools. LDAP is a set of
124     protocols for accessing directory services (usually phone book style
125     information, but other information is possible) over the Internet,
126     similar to the way DNS (Domain Name System) information is propagated
127     over the Internet. The openldap-clients package contains the client
128     programs needed for accessing and modifying OpenLDAP directories.
129    
130     %prep
131     %setup -q -c -a 0
132    
133     # setup tree for openldap
134    
135     pushd openldap-%{version}
136    
137     %patch0 -p1 -b .manpages
138     %patch1 -p1 -b .security-pie
139     %patch2 -p1 -b .sql-linking
140     %patch3 -p1 -b .reentrant-gethostby
141     %patch5 -p1 -b .smbk5pwd-overlay
142     %patch6 -p1 -b .ldaprc-currentdir
143     %patch7 -p1 -b .userconfig-setgid
144     %patch9 -p1 -b .man-sasl-nocanon
145     %patch10 -p1 -b .memberof-disallow-global
146     %patch11 -p1 -b .rwm-reference-counting
147     %patch12 -p1 -b .nss-leak
148     %patch13 -p1 -b .nss-ignore-certdb-type-prefix
149     %patch14 -p1 -b .nss-certs-from-certdb-fallback-pem
150     %patch15 -p1 -b .dns-ipv6-queries
151     %patch16 -p1 -b .nss-hashed-cacertdir-filename-matching
152     %patch17 -p1 -b .dns-priority
153     %patch18 -p1 -b .nss-update-cipher-list
154     %patch19 -p1 -b .tls-reqcert
155    
156     cp %{_datadir}/libtool/config/config.{sub,guess} build/
157    
158     for subdir in build-servers build-clients ; do
159     mkdir $subdir
160     ln -s ../configure $subdir
161     done
162    
163     # build smbk5pwd with other overlays
164     ln -s ../../../contrib/slapd-modules/smbk5pwd/smbk5pwd.c servers/slapd/overlays
165     mv contrib/slapd-modules/smbk5pwd/README contrib/slapd-modules/smbk5pwd/README.smbk5pwd
166    
167     popd
168    
169     # setup tree for openldap with evolution-specific patches
170    
171     if ! cp -al openldap-%{version} evo-openldap-%{version} ; then
172     rm -fr evo-openldap-%{version}
173     cp -a openldap-%{version} evo-openldap-%{version}
174     fi
175     pushd evo-openldap-%{version}
176     %patch200 -p1 -b .evolution-ntlm
177     popd
178    
179     %patch210 -p1
180    
181     %build
182    
183     libtool='%{_bindir}/libtool'
184     export tagname=CC
185    
186     %ifarch ia64
187     RPM_OPT_FLAGS="$RPM_OPT_FLAGS -O0"
188     %endif
189    
190     export CPPFLAGS="-I%_includedir/nss3 -I%_includedir/nspr4"
191     export CFLAGS="$RPM_OPT_FLAGS $CPPFLAGS -fno-strict-aliasing -fPIC -D_REENTRANT -DLDAP_CONNECTIONLESS -D_GNU_SOURCE -DHAVE_TLS -DHAVE_MOZNSS -DSLAPD_LMHASH"
192     export NSS_LIBS="-lssl3 -lsmime3 -lnss3 -lnssutil3 -lplds4 -lplc4 -lnspr4"
193     export LIBS=""
194     export LDFLAGS="$LDFLAGS -Wl,-z,relro"
195    
196     build() {
197    
198     %configure \
199     --enable-rlookups \
200     \
201     --with-tls=moznss \
202     --with-cyrus-sasl \
203     \
204     --enable-wrappers \
205     \
206     --enable-passwd \
207     \
208     --enable-cleartext \
209     --enable-crypt \
210     --enable-spasswd \
211     --disable-lmpasswd \
212     --enable-modules \
213     --disable-sql \
214     \
215     --libexecdir=%{_libdir} \
216     $@
217    
218     # allow #include <nss/file.h> and <nspr/file.h>
219     pushd include
220     if [ ! -d nss ] ; then
221     ln -s %{_includedir}/nss3 nss
222     fi
223     if [ ! -d nspr ] ; then
224     ln -s %{_includedir}/nspr4 nspr
225     fi
226     popd
227    
228     make %{_smp_mflags} LIBTOOL="$libtool"
229    
230     }
231    
232     # build servers
233     export LIBS="$NSS_LIBS -lpthread"
234     pushd openldap-%{version}/build-servers
235     build \
236     --enable-dynamic \
237     --enable-syslog \
238     \
239     --enable-bdb \
240     --enable-hdb \
241     --enable-ldap \
242     --enable-mdb \
243     --enable-meta \
244     --enable-monitor \
245     --disable-ndb \
246     --enable-null \
247     --enable-passwd \
248     --disable-perl \
249     --enable-relay \
250     --enable-shell \
251     --enable-sock \
252     --enable-sql=mod \
253     \
254     --enable-overlays=mod \
255     \
256     --enable-dynamic \
257     --enable-shared \
258     \
259     --with-pic \
260     --with-gnu-ld \
261     \
262     --libexecdir=%{_libdir}
263    
264     popd
265    
266     # build clients
267     export LIBS="$NSS_LIBS"
268     pushd openldap-%{version}/build-clients
269     build \
270     --disable-slapd \
271     --enable-shared \
272     --enable-dynamic \
273     --with-pic
274     popd
275    
276     # build evolution-specific clients
277     # (specific patch, different installation directory, no shared libraries)
278     pushd evo-openldap-%{version}
279     build \
280     --disable-slapd \
281     --disable-shared \
282     --disable-dynamic \
283     --enable-static \
284     --with-pic \
285     --includedir=%{evolution_connector_includedir} \
286     --libdir=%{evolution_connector_libdir}
287     popd
288    
289     %install
290     rm -rf %{buildroot}
291     libtool='%{_bindir}/libtool'
292     export tagname=CC
293    
294     mkdir -p %{buildroot}/%{_libdir}/
295    
296     # install servers
297     pushd openldap-%{version}/build-servers
298     make install DESTDIR=%{buildroot} \
299     libdir=%{_libdir} \
300     LIBTOOL="$libtool" \
301     STRIP=""
302     popd
303    
304     # install evolution-specific clients (conflicting files will be overwriten by generic version)
305     pushd evo-openldap-%{version}
306     make install DESTDIR=%{buildroot} \
307     includedir=%{evolution_connector_includedir} \
308     libdir=%{evolution_connector_libdir} \
309     LIBTOOL="$libtool" \
310     STRIP=""
311     install -m 644 %SOURCE3 \
312     %{buildroot}/%{evolution_connector_prefix}/
313     popd
314    
315     # install clients
316     pushd openldap-%{version}/build-clients
317     make install DESTDIR=%{buildroot} \
318     libdir=%{_libdir} \
319     LIBTOOL="$libtool" \
320     STRIP=""
321     popd
322    
323     # setup directories for TLS certificates
324     mkdir -p %{buildroot}%{_sysconfdir}/openldap/certs
325    
326     # setup data and runtime directories
327     mkdir -p %{buildroot}/var/lib/ldap
328     mkdir -p %{buildroot}/var/run/openldap
329    
330     # remove build root from config files and manual pages
331     perl -pi -e "s|%{buildroot}||g" %{buildroot}/%{_sysconfdir}/openldap/*.conf
332     perl -pi -e "s|%{buildroot}||g" %{buildroot}%{_mandir}/*/*.*
333    
334     # we don't need the default files -- RPM handles changes
335     rm -f %{buildroot}/%{_sysconfdir}/openldap/*.default
336     rm -f %{buildroot}/%{_sysconfdir}/openldap/schema/*.default
337    
338     # install an init script for the servers
339     mkdir -p %{buildroot}%{_sysconfdir}/rc.d/init.d
340     install -m 755 %SOURCE1 %{buildroot}%{_sysconfdir}/rc.d/init.d/slapd
341    
342     # install syconfig/ldap
343     mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
344     install -m 644 %SOURCE2 %{buildroot}%{_sysconfdir}/sysconfig/ldap
345    
346     # install portreserve config
347     mkdir -p %{buildroot}%{_sysconfdir}/portreserve
348     install -m 644 %SOURCE5 %{buildroot}%{_sysconfdir}/portreserve/slapd
349    
350     # install default ldap.conf (customized)
351     rm -f %{buildroot}%{_sysconfdir}/openldap/ldap.conf
352     install -m 0644 %SOURCE6 %{buildroot}%{_sysconfdir}/openldap/ldap.conf
353    
354     # setup maintainance scripts
355     mkdir -p %{buildroot}%{_libexecdir}
356     install -m 0755 -d %{buildroot}%{_libexecdir}/openldap
357     install -m 0755 %SOURCE54 %{buildroot}%{_libexecdir}/openldap/create-certdb.sh
358     install -m 0755 %SOURCE55 %{buildroot}%{_libexecdir}/openldap/generate-server-cert.sh
359    
360     # move slapd out of _libdir
361     mv %{buildroot}/%{_libdir}/slapd %{buildroot}/%{_sbindir}/
362    
363     # setup tools as symlinks to slapd
364     rm -f %{buildroot}/%{_sbindir}/slap{acl,add,auth,cat,dn,index,passwd,test,schema}
365     rm -f %{buildroot}/%{_libdir}/slap{acl,add,auth,cat,dn,index,passwd,test,schema}
366     for X in acl add auth cat dn index passwd test schema; do ln -s slapd %{buildroot}/%{_sbindir}/slap$X ; done
367    
368     # tweak permissions on the libraries to make sure they're correct
369     chmod 755 %{buildroot}/%{_libdir}/lib*.so*
370     chmod 644 %{buildroot}/%{_libdir}/lib*.*a
371    
372     # slapd.conf(5) is obsoleted since 2.3, see slapd-config(5)
373     # new configuration will be generated in %post
374     mkdir -p %{buildroot}/%{_datadir}/openldap-servers
375     mkdir %{buildroot}/%{_sysconfdir}/openldap/slapd.d
376     rm -f %{buildroot}/%{_sysconfdir}/openldap/slapd.conf
377     install -m 644 %SOURCE4 %{buildroot}/%{_datadir}/openldap-servers/slapd.conf.obsolete
378    
379     # move example configuration
380     mv %{buildroot}/%{_sysconfdir}/openldap/slapd.ldif %{buildroot}/%{_datadir}/openldap-servers/slapd.ldif.example
381    
382     # move doc files out of _sysconfdir
383     mv %{buildroot}%{_sysconfdir}/openldap/schema/README README.schema
384     mv %{buildroot}%{_sysconfdir}/openldap/DB_CONFIG.example %{buildroot}/%{_datadir}/openldap-servers/DB_CONFIG.example
385     chmod 0644 openldap-%{version}/servers/slapd/back-sql/rdbms_depend/timesten/*.sh
386     chmod 0644 %{buildroot}/%{_datadir}/openldap-servers/DB_CONFIG.example
387    
388     # move all libraries from /usr/lib to /lib for disk-less booting
389     # devel symlinks will be left in the original location
390     mkdir -p %{buildroot}/%{_lib}
391     pushd %{buildroot}/%{_libdir}
392     # versioned libraries
393     mv {libldap,libldap_r,liblber,libldif}-*.so* %{buildroot}/%{_lib}
394     # update devel symlinks
395     for library in {libldap,libldap_r,liblber,libldif}.so; do
396     [ -h $library ] || exit 1
397     ln -sf /%{_lib}/$(readlink $library) $library
398     done
399     popd
400    
401     # remove files which we don't want packaged
402     rm -f %{buildroot}/%{_libdir}/*.la
403     rm -f %{buildroot}/%{_libdir}/*.a
404     rm -f %{buildroot}/%{evolution_connector_libdir}/*.la
405     rm -f %{buildroot}/%{evolution_connector_libdir}/*.so*
406     rm -f %{buildroot}/%{_libdir}/openldap/*.a
407     rm -f %{buildroot}/%{_libdir}/openldap/*.so
408    
409     rm -f %{buildroot}%{_localstatedir}/openldap-data/DB_CONFIG.example
410     rmdir %{buildroot}%{_localstatedir}/openldap-data
411    
412     %clean
413     rm -rf %{buildroot}
414    
415     %post
416     /sbin/ldconfig
417     # create certificate database
418     %{_libexecdir}/openldap/create-certdb.sh >&/dev/null || :
419    
420     %postun -p /sbin/ldconfig
421    
422     %pre servers
423    
424     # create ldap user and group
425     getent group ldap >/dev/null || groupadd -r -g 55 ldap
426     if ! getent passwd ldap >/dev/null; then
427     useradd -r -g ldap -u 55 -d %{_sharedstatedir}/ldap -s /sbin/nologin -c "LDAP User" ldap
428     # setup ownership of database files
429     if [ -d /var/lib/ldap ] ; then
430     for dbfile in /var/lib/ldap/* ; do
431     if [ -f $dbfile ] ; then
432     chown ldap:ldap $dbfile
433     fi
434     done
435     fi
436     fi
437    
438     # upgrade
439     if [ $1 -eq 2 ]; then
440     # safe way to migrate the database if version number changed
441     # http://www.openldap.org/doc/admin24/maintenance.html
442    
443     old_version=$(rpm -q --qf=%%{version} openldap-servers)
444     new_version=%{version}
445    
446     if [ "$old_version" != "$new_version" ]; then
447     pushd %{_sharedstatedir}/ldap &>/dev/null
448    
449     # stop the service
450     if /sbin/service slapd status &>/dev/null; then
451     touch need_start
452     /sbin/service slapd stop
453     else
454     rm -f need_start
455     fi
456    
457     if ls *.bdb &>/dev/null; then
458     # symlink to last backup
459     rm -f upgrade.ldif
460    
461     # backup location
462     backupdir=backup.$(date +%%s)
463     backupfile=${backupdir}/backup.ldif
464     backupcmd="cp -a"
465    
466     mkdir -p ${backupdir}
467    
468     # database recovery tool
469     # (this is necessary to handle upgrade from old openldap, which had embedded db4)
470     if [ -f /usr/sbin/slapd_db_recover ]; then
471     db_recover=/usr/sbin/slapd_db_recover
472     else
473     db_recover=/usr/bin/db_recover
474     fi
475    
476     # make sure the database is consistent
477     runuser -m -s $db_recover -- "ldap" -h %{_sharedstatedir}/ldap &>/dev/null
478    
479     # export the database if possible
480     if [ $? -eq 0 ]; then
481     if [ -f %{_sysconfdir}/openldap/slapd.conf ]; then
482     slapcat -f %{_sysconfdir}/openldap/slapd.conf -l $backupfile &>/dev/null
483     else
484     slapcat -F %{_sysconfdir}/openldap/slapd.d -l $backupfile &>/dev/null
485     fi
486    
487     if [ $? -eq 0 ]; then
488     chmod 0400 $backupfile
489     ln -sf $backupfile upgrade.ldif
490     backupcmd=mv
491     fi
492     fi
493    
494     # move or copy to backup directory
495     find -maxdepth 1 -type f \( -name alock -o -name "*.bdb" -o -name "__db.*" -o -name "log.*" \) \
496     | xargs -I '{}' $backupcmd '{}' $backupdir
497     cp -af DB_CONFIG $backupdir &>/dev/null
498    
499     # fix permissions
500     chown -R ldap: $backupdir
501     chmod -R a-w $backupdir
502     fi
503    
504     popd &>/dev/null
505     fi
506     fi
507    
508     exit 0
509    
510     %post servers
511    
512     /sbin/ldconfig
513     /sbin/chkconfig --add slapd
514    
515     # generate sample TLS certificates for server (will not replace)
516     %{_libexecdir}/openldap/generate-server-cert.sh -o &>/dev/null || :
517    
518     # generate configuration in slapd.d
519     if ! ls -d %{_sysconfdir}/openldap/slapd.d/* &>/dev/null; then
520    
521     # fresh installation
522     if [ ! -f %{_sysconfdir}/openldap/slapd.conf ]; then
523     # convert from old style config slapd.conf
524     mkdir -p %{_sysconfdir}/openldap/slapd.d/
525     slaptest -f %{_datadir}/openldap-servers/slapd.conf.obsolete -F %{_sysconfdir}/openldap/slapd.d &>/dev/null
526     chown -R ldap:ldap %{_sysconfdir}/openldap/slapd.d
527     chmod -R 000 %{_sysconfdir}/openldap/slapd.d
528     chmod -R u+rwX %{_sysconfdir}/openldap/slapd.d
529     rm -f %{_sharedstatedir}/ldap/__db* %{_sharedstatedir}/ldap/alock
530     fi
531     fi
532    
533     # finish database migration (see %pre)
534     if [ -f %{_sharedstatedir}/ldap/upgrade.ldif ]; then
535     runuser -m -s /usr/sbin/slapadd -- ldap -q -l %{_sharedstatedir}/ldap/upgrade.ldif &>/dev/null
536     rm -f %{_sharedstatedir}/ldap/upgrade.ldif
537     fi
538    
539     # restart after upgrade
540     if [ $1 -ge 1 ]; then
541     if [ -f %{_sharedstatedir}/ldap/need_start ]; then
542     /sbin/service slapd start
543     rm -f %{_sharedstatedir}/ldap/need_start
544     else
545     /sbin/service slapd condrestart
546     fi
547     fi
548    
549     exit 0
550    
551     %preun servers
552     if [ $1 -eq 0 ] ; then
553     /sbin/service slapd stop > /dev/null 2>&1 || :
554     /sbin/chkconfig --del slapd
555    
556     # openldap-servers are being removed from system
557     # do not touch the database!
558     fi
559    
560     %postun servers
561     /sbin/ldconfig
562    
563     %post devel -p /sbin/ldconfig
564    
565     %postun devel -p /sbin/ldconfig
566    
567     %triggerin servers -- db4
568    
569     # db4 upgrade (see %triggerun)
570     if [ $2 -eq 2 ]; then
571     pushd %{_sharedstatedir}/ldap &>/dev/null
572    
573     # we are interested in minor version changes (both versions of db4 are installed at this moment)
574     if [ "$(rpm -q --qf="%%{version}\n" db4 | sed 's/\.[0-9]*$//' | sort -u | wc -l)" != "1" ]; then
575     # stop the service
576     if /sbin/service slapd status &>/dev/null; then
577     touch need_start
578     /sbin/service slapd stop
579     fi
580    
581     # ensure the database is consistent
582     runuser -m -s /usr/bin/db_recover -- "ldap" -h %{_sharedstatedir}/ldap &>/dev/null
583    
584     # upgrade will be performed after removing old db4
585     touch upgrade_db4
586     else
587     rm -f upgrade_db4
588     fi
589    
590     popd &>/dev/null
591     fi
592    
593     exit 0
594    
595     %triggerun servers -- db4
596    
597     # db4 upgrade (see %triggerin)
598     if [ -f %{_sharedstatedir}/ldap/upgrade_db4 ]; then
599     pushd %{_sharedstatedir}/ldap &>/dev/null
600    
601     # perform the upgrade
602     if ls *.bdb &>/dev/null; then
603     runuser -m -s /usr/bin/db_upgrade -- "ldap" -h %{_sharedstatedir}/ldap %{_sharedstatedir}/ldap/*.bdb
604     runuser -m -s /usr/bin/db_checkpoint -- "ldap" -h %{_sharedstatedir}/ldap -1
605     fi
606    
607     # start the service
608     if [ -f need_start ]; then
609     /sbin/service slapd start
610     rm -f need_start
611     fi
612    
613     rm -f upgrade_db4
614     popd &>/dev/null
615     fi
616    
617     exit 0
618    
619     %files
620     %defattr(-,root,root)
621     %doc openldap-%{version}/ANNOUNCEMENT
622     %doc openldap-%{version}/CHANGES
623     %doc openldap-%{version}/COPYRIGHT
624     %doc openldap-%{version}/LICENSE
625     %doc openldap-%{version}/README
626     %attr(0755,root,root) %dir %{_sysconfdir}/openldap
627     %attr(0755,root,root) %dir %{_sysconfdir}/openldap/certs
628     %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/openldap/ldap*.conf
629     %attr(0755,root,root) /%{_lib}/libl*-2.4*.so.*
630     %attr(0644,root,root) %{_mandir}/man5/ldif.5*
631     %attr(0644,root,root) %{_mandir}/man5/ldap.conf.5*
632     %{_libexecdir}/openldap/create-certdb.sh
633    
634     %files servers
635     %defattr(-,root,root)
636     %doc openldap-%{version}/contrib/slapd-modules/smbk5pwd/README.smbk5pwd
637     %doc openldap-%{version}/doc/guide/admin/*.html
638     %doc openldap-%{version}/doc/guide/admin/*.png
639     %doc README.schema
640     %attr(0755,root,root) %{_sysconfdir}/rc.d/init.d/slapd
641     %attr(0750,ldap,ldap) %dir %config(noreplace) %{_sysconfdir}/openldap/slapd.d
642     %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/ldap
643     %attr(0755,root,root) %dir %config(noreplace) %{_sysconfdir}/openldap/schema
644     %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/openldap/schema/*.schema*
645     %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/openldap/schema/*.ldif
646     %attr(0644,root,root) %{_sysconfdir}/portreserve/slapd
647     %attr(0755,root,root) %{_sbindir}/sl*
648     %attr(0644,root,root) %{_mandir}/man8/*
649     %attr(0644,root,root) %{_mandir}/man5/slapd*.5*
650     %attr(0644,root,root) %{_mandir}/man5/slapo-*.5*
651     %attr(0700,ldap,ldap) %dir /var/lib/ldap
652     %attr(0755,ldap,ldap) %dir /var/run/openldap
653     %attr(0755,root,root) %dir %{_libdir}/openldap
654     %attr(0755,root,root) %{_libdir}/openldap/[^b]*
655     %attr(0755,root,root) %dir %{_datadir}/openldap-servers
656     %attr(0644,root,root) %{_datadir}/openldap-servers/*
657     # obsolete configuration
658     %attr(0640,ldap,ldap) %ghost %config(noreplace,missingok) %{_sysconfdir}/openldap/slapd.conf
659     %attr(0640,ldap,ldap) %ghost %config(noreplace,missingok) %{_sysconfdir}/openldap/slapd.conf.bak
660     %{_libexecdir}/openldap/generate-server-cert.sh
661    
662     %files servers-sql
663     %defattr(-,root,root)
664     %doc openldap-%{version}/servers/slapd/back-sql/docs/*
665     %doc openldap-%{version}/servers/slapd/back-sql/rdbms_depend
666     %attr(0755,root,root) %{_libdir}/openldap/back_sql*.so.*
667     %attr(0755,root,root) %{_libdir}/openldap/back_sql.la
668    
669     %files clients
670     %defattr(-,root,root)
671     %attr(0755,root,root) %{_bindir}/*
672     %attr(0644,root,root) %{_mandir}/man1/*
673    
674     %files devel
675     %defattr(-,root,root)
676     %doc openldap-%{version}/doc/drafts openldap-%{version}/doc/rfc
677     %attr(0755,root,root) %{_libdir}/libl*.so
678     %attr(0644,root,root) %{_includedir}/*
679     %attr(0644,root,root) %{_mandir}/man3/*
680     %attr(0755,root,root) %dir %{evolution_connector_prefix}
681     %attr(0644,root,root) %{evolution_connector_prefix}/README*
682     %attr(0755,root,root) %dir %{evolution_connector_includedir}
683     %attr(0644,root,root) %{evolution_connector_includedir}/*.h
684     %attr(0755,root,root) %dir %{evolution_connector_libdir}
685     %attr(0644,root,root) %{evolution_connector_libdir}/*.a
686    
687     %changelog
688     * Wed Jun 18 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-8
689     - fix: provide a shim libldif.so (#1110382)
690    
691     * Wed Jun 4 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-7
692     - fix: remove correct tmp file when generating server cert (#1102083)
693    
694     * Tue Apr 22 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-6
695     - remove unapplied patches
696    
697     * Tue Apr 22 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-5
698     - fix: TLS_REQCERT documentation in client manpage (#1027796)
699    
700     * Thu Mar 27 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-4
701     - review %%configure and remove nonexistent options
702    
703     * Mon Mar 24 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
704     - add another missing patch forgotten during the rebase
705     - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module
706    
707     * Tue Mar 18 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-2
708     - add missing patches that were removed by mistake during the rebase
709    
710     * Thu Mar 13 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
711     - rebase to 2.4.39 (#923680)
712     + drop a lot of upstreamed patches, backport the rest
713     + compile in mdb
714     + remove automatic slapd.conf -> slapd-config conversion
715    
716     * Thu Jan 23 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.23-35
717     - fix: segfault on certain queries with rwm overlay (#1003038)
718    
719     * Tue Jan 21 2014 Jan Synáček <jsynacek@redhat.com> - 2.4.23-34
720     - fix: deadlock during SSL_ForceHandshake (#996373)
721     + revert nss-handshake-threadsafe.patch
722    
723     * Tue Feb 26 2013 Jan Synáček <jsynacek@redhat.com> 2.4.23-32
724     - fix: segfault in syncprov overlay (#910241)
725     - fix: NSS related resource leak (#929358)
726    
727     * Wed Oct 31 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-31
728     - fix update: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
729    
730     * Fri Oct 12 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-30
731     - fix: slapd with rwm overlay segfault following ldapmodify (#864913)
732    
733     * Tue Sep 25 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
734     - fix: invalid order of TLS shutdown operations (#818572)
735     - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
736     - fix: reading pin from file can make all TLS connections hang (#829319)
737     - fix: replication with TLS does not work (#707599)
738     - fix: some TLS ciphers cannot be enabled (#852339)
739     - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
740     - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
741     - fix: MozNSS certificate database in SQL format cannot be used (#857390)
742     - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
743     - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
744     - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)
745    
746     * Tue Jul 31 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
747     - CVE-2012-2668 (#825875)
748     + cipher suite selection by name can be ignored
749     + default cipher suite is always selected
750    
751     * Mon Jul 30 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-27
752     - fix: smbk5pwd module computes invalid LM hashes (#820278)
753    
754     * Mon May 07 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
755     - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
756     - fix: memory leak: def_urlpre is not freed (#816168)
757     - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
758    
759     * Wed May 02 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-25
760     - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
761    
762     * Mon Apr 30 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
763     - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
764     - fix: memberof overlay on the frontend database causes server segfault (#730745)
765    
766     * Fri Apr 20 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
767     - security fix: CVE-2012-1164: assertion failure by processing search queries
768     requesting only attributes for particular entry (#813162)
769    
770     * Tue Apr 10 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-22
771     - fix: libraries leak memory when following referrals (#807363)
772    
773     * Thu Mar 01 2012 Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
774     - fix: ldapsearch crashes with invalid parameters (#743781)
775     - fix: replication (syncrepl) with TLS causes segfault (#783445)
776     - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
777     - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
778     - fix: missing options in manual pages of client tools (#745470)
779     - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
780     - fix: slapd segfaults when certificate key cannot be loaded (#796808)
781     - Jan Synáček <jsynacek@redhat.com>
782     + fix: overlay constraint with count option work bad with modify operation (#742163)
783     + fix: Default SSL certificate bundle is not found by openldap library (#742023)
784     + fix: Duplicate close() calls in OpenLDAP (#784203)
785    
786     * Tue Oct 04 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
787     - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
788     - fix regression: openldap built without tcp_wrappers (#742592)
789    
790     * Tue Sep 13 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-19
791     - fix: SSL_ForceHandshake function is not thread safe (#709407)
792    
793     * Fri Aug 26 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-18
794     - fix: overlay refint option refint_nothing doesn't function correctly (#725479)
795     - fix: Unwanted slash printed when installing openldap-servers (#732001)
796     - manpage fix: TLS options in documentation are not valid for MozNSS (#684810)
797     - fix: NSS_Init* functions are not thread safe (#731168)
798     - manpage fix: errors in manual page slapo-unique (#723521)
799     - new feature: honor priority/weight with ldap_domain2hostlist (#730311)
800    
801     * Mon Aug 15 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-17
802     - fix: strict aliasing warnings during package build (#723487)
803     - add partial RELRO support for libraries (#723999)
804     - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#729095)
805     - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#729087)
806     - fix: TLS_REQCERT=never ignored when the certificate is expired (#722959)
807     - fix: matching wildcard hostnames in certificate Subject field does not work (#726984)
808     - fix: OpenLDAP server segfaults when using back-sql (#727533)
809     - fix: conversion of constraint overlay settings to cn=config is incorrect (#722923)
810     - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#723514)
811    
812     * Mon Jul 18 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-16
813     - fix: memleak in tlsm_auth_cert_handler (#717738)
814     - fix: segmentation fault of client tool when LDIF input file is not terminated
815     by a new line character (#698921)
816     - fix: segmentation fault of client tool when input line in LDIF file
817     is splitted but indented incorrectly (#701227)
818     - fix: server scriptlets require initscripts package (#712358)
819     - enable ldapi:/// interface by default
820     - set cn=config management ACLs for root user, SASL external schema (#712494)
821     - fix: ldapsearch fails if no CA certificate is available (#713525)
822    
823     * Wed Apr 13 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
824     - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
825     (remove devel *.so symlinks from /lib and leave them in /usr/lib)
826    
827     * Fri Mar 18 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
828     - fix update: openldap startup script ignores ulimit settings (#679356)
829     - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)
830    
831     * Mon Mar 14 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
832     - fix update: openldap can't use TLS after a fork() (#671553)
833     - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
834     - fix: move libldif to /lib for consistency (#548475)
835     - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)
836    
837     * Tue Mar 01 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-12
838     - fix: security - DoS when submitting special MODRDN request (#680975)
839    
840     * Mon Feb 28 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
841     - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
842     - fix: CVE-2011-1025 rootpw is not verified for ndb backend
843     - fix: openldap startup script ignores ulimit settings (#679356)
844     - fix: add symlinks into /usr/lib*/ (#680139)
845    
846     * Mon Feb 21 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
847     - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
848     packages which require these libraries in the old location (#678105)
849    
850     * Wed Feb 02 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-9
851     - fix update: openldap can't use TLS after a fork() (#671553)
852    
853     * Tue Jan 25 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-8
854     - fix: openldap can't use TLS after a fork() (#671553)
855    
856     * Thu Jan 20 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
857     - fix: some server certificates refused with inadequate type error (#669846)
858     - fix: default encryption strength dropped in switch to using NSS (#669845)
859    
860     * Thu Jan 13 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
861     - fix update: openldap-devel symlinks to libraries were not moved correctly (#548475)
862    
863     * Thu Jan 13 2011 Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
864     - initscript: slaptest with '-u' to skip database opening (#613966)
865     - removed slurpd options from sysconfig/ldap
866     - fix: verification of self issued certificates (#667795)
867     - fix: move libraries from /usr/lib to /lib (#548475)
868    
869     * Sat Dec 04 2010 Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
870     - rebase to 2.4.23 (Fedora 14) (#644077)
871     - uses Mozilla NSS instead of OpenSSL for TLS/SSL
872     - added LDIF (ldif.h) to the public API
873     - removed embeded Berkeley DB
874     - removed autofs schema (use up-to-date version from autofs package instead)
875     - removed compat-openldap subpackage (use separate package instead)
876     - fixes: ldapsearch -Z hangs server if starttls fails (#652823)
877     - fixes: improve SSL/TLS log messages (#652819)
878     - fixes: crash when TLS_CACERTDIR contains a subdirectory (#652817)
879     - fixes: TLS_CACERTDIR takes precedence over TLS_CACERT (#652816)
880     - fixes: openldap should ignore files not in the openssl c_hash format in cacertdir (#652814)
881     - fixes: slapd init script gets stuck in an infinite loop (#644399)
882     - fixes: Remove lastmod.la from default slapd.conf.bak (#630637)
883     - fixes: Mozilla NSS - delay token auth until needed (#616558)
884     - fixes: Mozilla NSS - support use of self signed CA certs as server certs (#616554)
885    
886     * Fri Jun 25 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-15
887     - fixed regression caused by tls accept patch (#608112)
888    
889     * Tue Jun 22 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-14
890     - fixed segfault issue in modrdn (#606369)
891    
892     * Fri Jun 18 2010 Jan Vcelak <jvcelak@redhat.com> 2.4.19-13
893     - implementation of ulimit settings for slapd (#602458)
894    
895     * Wed May 26 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
896     - updated man pages - only slaptest can convert configuration schema
897     (#584787)
898     - openldap compiled with -fno-strict-aliasing (#596193)
899    
900     * Thu May 06 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-11
901     - added compat package
902    
903     * Tue Apr 27 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
904     - updated overlay list in config file (#586143)
905     - config dir slapd.d added to package payload (#585276)
906     - init script now creates only symlink, not harldink, in /var/run (#584870)
907    
908     * Mon Apr 19 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
909     - fixed broken link /usr/sbin/slapschema (#583568)
910     - removed some static libraries from openldap-devel (#583575)
911    
912     * Fri Apr 16 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-8
913     - updated spec file - clean files generated by configuration conversion
914     (#582327)
915    
916     * Mon Mar 22 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-7
917     - updated usage line in init script
918     - changed return code when calling init script with bad arguments
919    
920     * Mon Mar 22 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-6
921     - fixed segfault when using hdb backend (#575403)
922    
923     * Fri Mar 19 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-5
924     - minor corrections of init script (fedora bugs #571235, #570057, #573804)
925    
926     * Wed Feb 10 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-4
927     - removed syncprov.la from config file (#563472)
928    
929     * Wed Feb 03 2010 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-3
930     - updated post scriptlet (#561352)
931    
932     * Mon Nov 23 2009 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
933     - minor changes in init script
934    
935     * Wed Nov 18 2009 Jan Zeleny <jzeleny@redhat.com> - 2.4.19-1
936     - fixed tls connection accepting when TLSVerifyClient = allow
937     - /etc/openldap/ldap.conf removed from files owned by openldap-servers
938     - minor changes in spec file to supress warnings
939     - some changes in init script, so it would be possible to use it when
940     using old configuration style
941     - rebased openldap to 2.4.19
942     - rebased bdb to 4.8.24
943    
944     * Wed Oct 07 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.18-5
945     - updated smbk5pwd patch to be linked with libldap (#526500)
946    
947     * Wed Sep 30 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
948     - buffer overflow patch from upstream
949     - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
950     to files owned by openldap-servers
951    
952     * Thu Sep 24 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.18-3
953     - cleanup of previous patch fixing buffer overflow
954    
955     * Tue Sep 22 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
956     - changed configuration approach. Instead od slapd.conf slapd
957     is using slapd.d directory now
958     - fix of some issues caused by renaming of init script
959     - fix of buffer overflow issue in ldif.c pointed out by new glibc
960    
961     * Fri Sep 18 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.18-1
962     - rebase of openldap to 2.4.18
963    
964     * Wed Sep 16 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.16-7
965     - updated documentation (hashing the cacert dir)
966    
967     * Wed Sep 16 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.16-6
968     - updated init script to be LSB-compliant (#523434)
969     - init script renamed to slapd
970    
971     * Thu Aug 27 2009 Tomas Mraz <tmraz@redhat.com> - 2.4.16-5
972     - rebuilt with new openssl
973    
974     * Tue Aug 25 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.16-4
975     - updated %pre script to correctly install openldap group
976    
977     * Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.16-2
978     - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
979    
980     * Wed Jul 01 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
981     - rebase of openldap to 2.4.16
982     - fixed minor issue in spec file (output looking interactive
983     when installing servers)
984    
985     * Tue Jun 09 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.15-4
986     - added $SLAPD_URLS variable to init script (#504504)
987    
988     * Thu Apr 09 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
989     - extended previous patch (#481310) to remove options cfMP
990     from some client tools
991     - correction of patch setugid (#494330)
992    
993     * Thu Mar 26 2009 Jan Zeleny <jzeleny@redhat.com> 2.4.15-2
994     - removed -f option from some client tools (#481310)
995    
996     * Wed Feb 25 2009 Jan Safranek <jsafranek@redhat.com> 2.4.15-1
997     - new upstream release
998    
999     * Tue Feb 17 2009 Jan Safranek <jsafranek@redhat.com> 2.4.14-1
1000     - new upstream release
1001     - upgraded to db-4.7.25
1002    
1003     * Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> 2.4.12-3
1004     - rebuild with new openssl
1005    
1006     * Mon Dec 15 2008 Caolán McNamara <caolanm@redhat.com> 2.4.12-2
1007     - rebuild for libltdl, i.e. copy config.sub|guess from new location
1008    
1009     * Wed Oct 15 2008 Jan Safranek <jsafranek@redhat.com> 2.4.12-1
1010     - new upstream release
1011    
1012     * Mon Oct 13 2008 Jan Safranek <jsafranek@redhat.com> 2.4.11-3
1013     - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
1014     to set non-default slapd shutdown timeout
1015     - add checkpoint to default slapd.conf file (#458679)
1016    
1017     * Mon Sep 1 2008 Jan Safranek <jsafranek@redhat.com> 2.4.11-2
1018     - provide ldif2ldbm functionality for migrationtools
1019     - rediff all patches to get rid of patch fuzz
1020    
1021     * Mon Jul 21 2008 Jan Safranek <jsafranek@redhat.com> 2.4.11-1
1022     - new upstream release
1023     - apply official bdb-4.6.21 patches
1024    
1025     * Wed Jul 2 2008 Jan Safranek <jsafranek@redhat.com> 2.4.10-2
1026     - fix CVE-2008-2952 (#453728)
1027    
1028     * Thu Jun 12 2008 Jan Safranek <jsafranek@redhat.com> 2.4.10-1
1029     - new upstream release
1030    
1031     * Wed May 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.9-5
1032     - use /sbin/nologin as shell of ldap user (#447919)
1033    
1034     * Tue May 13 2008 Jan Safranek <jsafranek@redhat.com> 2.4.9-4
1035     - new upstream release
1036     - removed unnecessary MigrationTools patches
1037    
1038     * Thu Apr 10 2008 Jan Safranek <jsafranek@redhat.com> 2.4.8-4
1039     - bdb upgraded to 4.6.21
1040     - reworked upgrade logic again to run db_upgrade when bdb version
1041     changes
1042    
1043     * Wed Mar 5 2008 Jan Safranek <jsafranek@redhat.com> 2.4.8-3
1044     - reworked the upgrade logic, slapcat/slapadd of the whole database
1045     is needed only if minor version changes (2.3.x -> 2.4.y)
1046     - do not try to save database in LDIF format, if openldap-servers package
1047     is being removed (it's up to the admin to do so manually)
1048    
1049     * Thu Feb 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.8-2
1050     - migration tools carved out to standalone package "migrationtools"
1051     (#236697)
1052    
1053     * Fri Feb 22 2008 Jan Safranek <jsafranek@redhat.com> 2.4.8-1
1054     - new upstream release
1055    
1056     * Fri Feb 8 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-7
1057     - fix CVE-2008-0658 (#432014)
1058    
1059     * Mon Jan 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-6
1060     - init script fixes
1061    
1062     * Mon Jan 28 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-5
1063     - init script made LSB-compliant (#247012)
1064    
1065     * Fri Jan 25 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-4
1066     - fixed rpmlint warnings and errors
1067     - /etc/openldap/schema/README moved to /usr/share/doc/openldap
1068    
1069     * Tue Jan 22 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-3
1070     - obsoleting compat-openldap properly again :)
1071    
1072     * Tue Jan 22 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-2
1073     - obsoleting compat-openldap properly (#429591)
1074    
1075     * Mon Jan 14 2008 Jan Safranek <jsafranek@redhat.com> 2.4.7-1
1076     - new upstream version (openldap-2.4.7)
1077    
1078     * Mon Dec 3 2007 Jan Safranek <jsafranek@redhat.com> 2.4.6-1
1079     - new upstream version (openldap-2.4)
1080     - deprecating compat- package
1081    
1082     * Mon Nov 5 2007 Jan Safranek <jsafranek@redhat.com> 2.3.39-1
1083     - new upstream release
1084    
1085     * Tue Oct 23 2007 Jan Safranek <jsafranek@redhat.com> 2.3.38-4
1086     - fixed multilib issues - all platform independent files have the
1087     same content now (#342791)
1088    
1089     * Thu Oct 4 2007 Jan Safranek <jsafranek@redhat.com> 2.3.38-3
1090     - BDB downgraded back to 4.4.20 because 4.6.18 is not supported by
1091     openldap (#314821)
1092    
1093     * Mon Sep 17 2007 Jan Safranek <jsafranek@redhat.com> 2.3.38-2
1094     - skeleton /etc/sysconfig/ldap added
1095     - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
1096     - fixed checking of SSL (#292611)
1097     - fixed upgrade with empty database
1098    
1099     * Thu Sep 6 2007 Jan Safranek <jsafranek@redhat.com> 2.3.38-1
1100     - new upstream version
1101     - added images to the guide.html (#273581)
1102    
1103     * Wed Aug 22 2007 Jan Safranek <jsafranek@redhat.com> 2.3.37-3
1104     - just rebuild
1105    
1106     * Thu Aug 2 2007 Jan Safranek <jsafranek@redhat.com> 2.3.37-2
1107     - do not use specific automake and autoconf
1108     - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
1109     everywhere
1110     - db-4.6.18 integrated
1111     - updated openldap-servers License: field to reference BDB license
1112    
1113     * Tue Jul 31 2007 Jan Safranek <jsafranek@redhat.com> 2.3.37-1
1114     - new upstream version
1115    
1116     * Fri Jul 20 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-7
1117     - MigrationTools-47 integrated
1118    
1119     * Wed Jul 4 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-6
1120     - fix compat-slapcat compilation. Now it can be found in
1121     /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
1122     (#246581)
1123    
1124     * Fri Jun 29 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-5
1125     - smbk5pwd added (#220895)
1126     - correctly distribute modules between servers and servers-sql packages
1127    
1128     * Mon Jun 25 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-4
1129     - Fix initscript return codes (#242667)
1130     - Provide overlays (as modules; #246036, #245896)
1131     - Add available modules to config file
1132    
1133     * Tue May 22 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-3
1134     - do not create script in /tmp on startup (bz#188298)
1135     - add compat-slapcat to openldap-compat (bz#179378)
1136     - do not import ddp services with migrate_services.pl
1137     (bz#201183)
1138     - sort the hosts by adders, preventing duplicities
1139     in migrate*nis*.pl (bz#201540)
1140     - start slupd for each replicated database (bz#210155)
1141     - add ldconfig to devel post/postun (bz#240253)
1142     - include misc.schema in default slapd.conf (bz#147805)
1143    
1144     * Mon Apr 23 2007 Jan Safranek <jsafranek@redhat.com> 2.3.34-2
1145     - slapadd during package update is now quiet (bz#224581)
1146     - use _localstatedir instead of var/ during build (bz#220970)
1147     - bind-libbind-devel removed from BuildRequires (bz#216851)
1148     - slaptest is now quiet during service ldap start, if
1149     there is no error/warning (bz#143697)
1150     - libldap_r.so now links with pthread (bz#198226)
1151     - do not strip binaries to produce correct .debuginfo packages
1152     (bz#152516)
1153    
1154     * Mon Feb 19 2007 Jay Fenlason <fenlason<redhat.com> 2.3.34-1
1155     - New upstream release
1156     - Upgrade the scripts for migrating the database so that they might
1157     actually work.
1158     - change bind-libbind-devel to bind-devel in BuildPreReq
1159    
1160     * Mon Dec 4 2006 Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
1161     - tcp_wrappers has a new devel and libs sub package, therefore changing build
1162     requirement for tcp_wrappers to tcp_wrappers-devel
1163    
1164     * Wed Nov 15 2006 Jay Fenlason <fenlason@redhat.com> 2.3.30-1
1165     - New upstream version
1166    
1167     * Wed Oct 25 2006 Jay Fenlason <fenlason@redhat.com> 2.3.28-1
1168     - New upstream version
1169    
1170     * Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 2.3.27-4
1171     - rebuilt for unwind info generation, broken in gcc-4.1.1-21
1172    
1173     * Mon Sep 18 2006 Jay Fenlason <fenlason@redhat.com> 2.3.27-3
1174     - Include --enable-multimaster to close
1175     bz#185821: adding slapd_multimaster to the configure options
1176     - Upgade guide.html to the correct one for openladp-2.3.27, closing
1177     bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
1178     - Remove the quotes from around the slaptestflags in ldap.init
1179     This closes one part of
1180     bz#204593: service ldap fails after having added entries to ldap
1181     - include __db.* in the list of files to check ownership of in
1182     ldap.init, as suggested in
1183     bz#199322: RFE: perform cleanup in ldap.init
1184    
1185     * Fri Aug 25 2006 Jay Fenlason <fenlason@redhat.com> 2.3.27-2
1186     - New upstream release
1187     - Include the gethostbyname_r patch so that nss_ldap won't hang
1188     on recursive attemts to ldap_initialize.
1189    
1190     * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.3.24-2.1
1191     - rebuild
1192    
1193     * Wed Jun 7 2006 Jay Fenlason <fenlason@redhat.com> 2.3.24-2
1194     - New upstream version
1195    
1196     * Thu Apr 27 2006 Jay Fenlason <fenlason@redhat.com> 2.3.21-2
1197     - Upgrade to 2.3.21
1198     - Add two upstream patches for db-4.4.20
1199    
1200     * Mon Feb 13 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-4
1201     - Re-fix ldap.init
1202    
1203     * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.3.19-3.1
1204     - bump again for double-long bug on ppc(64)
1205    
1206     * Thu Feb 9 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-3
1207     - Modify the ldap.init script to call runuser correctly.
1208    
1209     * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2.3.19-2.1
1210     - rebuilt for new gcc4.1 snapshot and glibc changes
1211    
1212     * Tue Jan 10 2006 Jay Fenlason <fenlason@redhat.com> 2.3.19-2
1213     - Upgrade to 2.3.19, which upstream now considers stable
1214     - Modify the -config.patch, ldap.init, and this spec file to put the
1215     pid file and args file in an ldap-owned openldap subdirectory under
1216     /var/run.
1217     - Move back_sql* out of _sbindir/openldap , which requires
1218     hand-moving slapd and slurpd to _sbindir, and recreating symlinks
1219     by hand.
1220     - Retire openldap-2.3.11-ads.patch, which went upstream.
1221     - Update the ldap.init script to run slaptest as the ldap user rather
1222     than as root. This solves
1223     bz#150172 Startup failure after database problem
1224     - Add to the servers post and preun scriptlets so that on preun, the
1225     database is slapcatted to /var/lib/ldap/upgrade.ldif and the
1226     database files are saved to /var/lib/ldap/rpmorig. On post, if
1227     /var/lib/ldap/upgrade.ldif exists, it is slapadded. This means that
1228     on upgrades from 2.3.16-2 to higher versions, the database files may
1229     be automatically upgraded. Unfortunatly, because of the changes to
1230     the preun scriptlet, users have to do the slapcat, etc by hand when
1231     upgrading to 2.3.16-2. Also note that the /var/lib/ldap/rpmorig
1232     files need to be removed by hand because automatically removing your
1233     emergency fallback files is a bad idea.
1234     - Upgrade internal bdb to db-4.4.20. For a clean upgrade, this will
1235     require that users slapcat their databases into a temp file, move
1236     /var/lib/ldap someplace safe, upgrade the openldap rpms, then
1237     slapadd the temp file.
1238    
1239    
1240     * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
1241     - rebuilt
1242    
1243     * Mon Nov 21 2005 Jay Fenlason <fenlason@redhat.com> 2.3.11-3
1244     - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
1245     compat-openldap- to close
1246     bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'
1247    
1248     * Thu Nov 10 2005 Jay Fenlason <fenlason@redhat.com> 2.3.11-2
1249     - Upgrade to 2.3.11, which upstream now considers stable.
1250     - Switch compat-openldap to 2.2.29
1251     - remove references to nss_ldap_build from the spec file
1252     - remove references to 2.0 and 2.1 from the spec file.
1253     - reorganize the build() function slightly in the spec file to limit the
1254     number of redundant and conflicting options passedto configure.
1255     - Remove the attempt to hardlink ldapmodify and ldapadd together, since
1256     the current make install make ldapadd a symlink to ldapmodify.
1257     - Include the -ads patches to allow SASL binds to an Active Directory
1258     server to work. Nalin <nalin@redhat.com> wrote the patch, based on my
1259     broken first attempt.
1260    
1261     * Thu Nov 10 2005 Tomas Mraz <tmraz@redhat.com> 2.2.29-3
1262     - rebuilt against new openssl
1263    
1264     * Mon Oct 10 2005 Jay Fenlason <fenlason@redhat.com> 2.2.29-2
1265     - New upstream version.
1266    
1267     * Thu Sep 29 2005 Jay Fenlason <fenlason@redhat.com> 2.2.28-2
1268     - Upgrade to nev upstream version. This makes the 2.2.*-hop patch obsolete.
1269    
1270     * Mon Aug 22 2005 Jay Fenlason <fenlason@redhat.com> 2.2.26-2
1271     - Move the slapd.pem file to /etc/pki/tls/certs
1272     and edit the -config patch to match to close
1273     bz#143393 Creates certificates + keys at an insecure/bad place
1274     - also use _sysconfdir instead of hard-coding /etc
1275    
1276     * Thu Aug 11 2005 Jay Fenlason <fenlason@redhat.com>
1277     - Add the tls-fix-connection-test patch to close
1278     bz#161991 openldap password disclosure issue
1279     - add the hop patches to prevent infinite looping when chasing referrals.
1280     OpenLDAP ITS #3578
1281    
1282     * Fri Aug 5 2005 Nalin Dahyabhai <nalin@redhat.com>
1283     - fix typo in ldap.init (call $klist instead of klist, from Charles Lopes)
1284    
1285     * Thu May 19 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
1286     - run slaptest with the -u flag if no id2entry db files are found, because
1287     you can't check for read-write access to a non-existent database (#156787)
1288     - add _sysconfdir/openldap/cacerts, which authconfig sets as the
1289     TLS_CACERTDIR path in /etc/openldap/ldap.conf now
1290     - use a temporary wrapper script to launch slapd, in case we have arguments
1291     with embedded whitespace (#158111)
1292    
1293     * Wed May 4 2005 Nalin Dahyabhai <nalin@redhat.com>
1294     - update to 2.2.26 (stable 20050429)
1295     - enable the lmpasswd scheme
1296     - print a warning if slaptest fails, slaptest -u succeeds, and one of the
1297     directories listed as the storage location for a given suffix in slapd.conf
1298     contains a readable file named __db.001 (#118678)
1299    
1300     * Tue Apr 26 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.25-1
1301     - update to 2.2.25 (release)
1302    
1303     * Tue Apr 26 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
1304     - update to 2.2.24 (stable 20050318)
1305     - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
1306     file but not exported
1307    
1308     * Tue Mar 1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-4
1309     - prefer libresolv to libbind
1310    
1311     * Tue Mar 1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-3
1312     - add bind-libbind-devel and libtool-ltdl-devel buildprereqs
1313    
1314     * Tue Mar 1 2005 Tomas Mraz <tmraz@redhat.com> 2.2.23-2
1315     - rebuild with openssl-0.9.7e
1316    
1317     * Mon Jan 31 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
1318     - update to 2.2.23 (stable-20050125)
1319     - update notes on upgrading from earlier versions
1320     - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files
1321    
1322     * Tue Jan 4 2005 Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
1323     - update to 2.2.20 (stable-20050103)
1324     - warn about unreadable krb5 keytab files containing "ldap" keys
1325     - warn about unreadable TLS-related files
1326     - own a ref to subdirectories which we create under _libdir/tls
1327    
1328     * Tue Nov 2 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.17-0
1329     - rebuild
1330    
1331     * Thu Sep 30 2004 Nalin Dahyabhai <nalin@redhat.com>
1332     - update to 2.2.17 (stable-20040923) (#135188)
1333     - move nptl libraries into arch-specific subdirectories on x86 boxes
1334     - require a newer glibc which can provide nptl libpthread on i486/i586
1335    
1336     * Tue Aug 24 2004 Nalin Dahyabhai <nalin@redhat.com>
1337     - move slapd startup to earlier in the boot sequence (#103160)
1338     - update to 2.2.15 (stable-20040822)
1339     - change version number on compat-openldap to include the non-compat version
1340     from which it's compiled, otherwise would have to start 2.2.15 at release 3
1341     so that it upgrades correctly
1342    
1343     * Thu Aug 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
1344     - build a separate, static set of libraries for openldap-devel with the
1345     non-standard ntlm bind patch applied, for use by the evolution-connector
1346     package (#125579), and installing them under
1347     evolution_connector_prefix)
1348     - provide openldap-evolution-devel = version-release in openldap-devel
1349     so that evolution-connector's source package can require a version of
1350     openldap-devel which provides what it wants
1351    
1352     * Mon Jul 26 2004 Nalin Dahyabhai <nalin@redhat.com>
1353     - update administrator guide
1354    
1355     * Wed Jun 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
1356     - add compat-openldap subpackage
1357     - default to bdb, as upstream does, gambling that we're only going to be
1358     on systems with nptl now
1359    
1360     * Tue Jun 15 2004 Nalin Dahyabhai <nalin@redhat.com> 2.2.13-0
1361     - preliminary 2.2.13 update
1362     - move ucdata to the -servers subpackage where it belongs
1363    
1364     * Tue Jun 15 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-1
1365     - build experimental sql backend as a loadable module
1366    
1367     * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
1368     - rebuilt
1369    
1370     * Tue May 18 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.30-0
1371     - update to 2.1.30
1372    
1373     * Thu May 13 2004 Thomas Woerner <twoerner@redhat.com> 2.1.29-3
1374     - removed rpath
1375     - added pie patch: slapd and slurpd are now pie
1376     - requires libtool >= 1.5.6-2 (PIC libltdl.a)
1377    
1378     * Fri Apr 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-2
1379     - move rfc documentation from main to -devel (#121025)
1380    
1381     * Wed Apr 14 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-1
1382     - rebuild
1383    
1384     * Tue Apr 6 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.29-0
1385     - update to 2.1.29 (stable 20040329)
1386    
1387     * Mon Mar 29 2004 Nalin Dahyabhai <nalin@redhat.com>
1388     - don't build servers with --with-kpasswd, that option hasn't been recognized
1389     since 2.1.23
1390    
1391     * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> 2.1.25-5.1
1392     - rebuilt
1393    
1394     * Mon Feb 23 2004 Tim Waugh <twaugh@redhat.com> 2.1.25-5
1395     - Use ':' instead of '.' as separator for chown.
1396    
1397     * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
1398     - rebuilt
1399    
1400     * Tue Feb 10 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-4
1401     - remove 'reload' from the init script -- it never worked as intended (#115310)
1402    
1403     * Wed Feb 4 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-3
1404     - commit that last fix correctly this time
1405    
1406     * Tue Feb 3 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
1407     - fix incorrect use of find when attempting to detect a common permissions
1408     error in the init script (#114866)
1409    
1410     * Fri Jan 16 2004 Nalin Dahyabhai <nalin@redhat.com>
1411     - add bug fix patch for DB 4.2.52
1412    
1413     * Thu Jan 8 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
1414     - change logging facility used from daemon to local4 (#112730, reversing #11047)
1415     BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.
1416    
1417     * Wed Jan 7 2004 Nalin Dahyabhai <nalin@redhat.com>
1418     - incorporate fix for logic quasi-bug in slapd's SASL auxprop code (Dave Jones)
1419    
1420     * Thu Dec 18 2003 Nalin Dahyabhai <nalin@redhat.com>
1421     - update to 2.1.25, now marked STABLE
1422    
1423     * Thu Dec 11 2003 Jeff Johnson <jbj@jbj.org> 2.1.22-9
1424     - update to db-4.2.52.
1425    
1426     * Thu Oct 23 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
1427     - add another section to the ABI note for the TLS libdb so that it's marked as
1428     not needing an executable stack (from Arjan Van de Ven)
1429    
1430     * Thu Oct 16 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-7
1431     - force bundled libdb to not use O_DIRECT by making it forget that we have it
1432    
1433     * Wed Oct 15 2003 Nalin Dahyabhai <nalin@redhat.com>
1434     - build bundled libdb for slapd dynamically to make the package smaller,
1435     among other things
1436     - on tls-capable arches, build libdb both with and without shared posix
1437     mutexes, otherwise just without
1438     - disable posix mutexes unconditionally for db 4.0, which shouldn't need
1439     them for the migration cases where it's used
1440     - update to MigrationTools 45
1441    
1442     * Thu Sep 25 2003 Jeff Johnson <jbj@jbj.org> 2.1.22-6.1
1443     - upgrade db-4.1.25 to db-4.2.42.
1444    
1445     * Fri Sep 12 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6
1446     - drop rfc822-MailMember.schema, merged into upstream misc.schema at some point
1447    
1448     * Wed Aug 27 2003 Nalin Dahyabhai <nalin@redhat.com>
1449     - actually require newer libtool, as was intended back in 2.1.22-0, noted as
1450     missed by Jim Richardson
1451    
1452     * Fri Jul 25 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5
1453     - enable rlookups, they don't cost anything unless also enabled in slapd's
1454     configuration file
1455    
1456     * Tue Jul 22 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-4
1457     - rebuild
1458    
1459     * Thu Jul 17 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-3
1460     - rebuild
1461    
1462     * Wed Jul 16 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-2
1463     - rebuild
1464    
1465     * Tue Jul 15 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-1
1466     - build
1467    
1468     * Mon Jul 14 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
1469     - 2.1.22 now badged stable
1470     - be more aggressive in what we index by default
1471     - use/require libtool 1.5
1472    
1473     * Mon Jun 30 2003 Nalin Dahyabhai <nalin@redhat.com>
1474     - update to 2.1.22
1475    
1476     * Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
1477     - rebuilt
1478    
1479     * Tue Jun 3 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
1480     - update to 2.1.21
1481     - enable ldap, meta, monitor, null, rewrite in slapd
1482    
1483     * Mon May 19 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-1
1484     - update to 2.1.20
1485    
1486     * Thu May 8 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
1487     - update to 2.1.19
1488    
1489     * Mon May 5 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-1
1490     - switch to db with crypto
1491    
1492     * Fri May 2 2003 Nalin Dahyabhai <nalin@redhat.com>
1493     - install the db utils for the bundled libdb as %%{_sbindir}/slapd_db_*
1494     - install slapcat/slapadd from 2.0.x for migration purposes
1495    
1496     * Wed Apr 30 2003 Nalin Dahyabhai <nalin@redhat.com>
1497     - update to 2.1.17
1498     - disable the shell backend, not expected to work well with threads
1499     - drop the kerberosSecurityObject schema, the krbName attribute it
1500     contains is only used if slapd is built with v2 kbind support
1501    
1502     * Mon Feb 10 2003 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
1503     - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
1504     - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference
1505    
1506     * Wed Jan 22 2003 Tim Powers <timp@redhat.com>
1507     - rebuilt
1508    
1509     * Tue Jan 7 2003 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-6
1510     - rebuild
1511    
1512     * Mon Dec 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-5
1513     - rebuild
1514    
1515     * Fri Dec 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-4
1516     - check for setgid as well
1517    
1518     * Thu Dec 12 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-3
1519     - rebuild
1520    
1521     * Thu Dec 12 2002 Nalin Dahyabhai <nalin@redhat.com>
1522     - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
1523     1936, 2007, 2009, which were included in 2.0.26.
1524     - add two more patches for db 4.1.24 from sleepycat's updates page
1525     - use openssl pkgconfig data, if any is available
1526    
1527     * Mon Nov 11 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-2
1528     - add patches for db 4.1.24 from sleepycat's updates page
1529    
1530     * Mon Nov 4 2002 Nalin Dahyabhai <nalin@redhat.com>
1531     - add a sample TLSCACertificateFile directive to the default slapd.conf
1532    
1533     * Tue Sep 24 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.27-1
1534     - update to 2.0.27
1535    
1536     * Fri Sep 20 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.26-1
1537     - update to 2.0.26, db 4.1.24.NC
1538    
1539     * Fri Sep 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
1540     - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
1541     /usr/kerberos/lib, which might not be right on some arches
1542    
1543     * Mon Aug 26 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
1544     - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
1545     slapd databases until we move to 2.1.x)
1546     - use %%{_smp_mflags} when running make
1547     - update to MigrationTools 44
1548     - enable dynamic module support in slapd
1549    
1550     * Thu May 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-5
1551     - rebuild in new environment
1552    
1553     * Wed Feb 20 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-3
1554     - use the gdbm backend again
1555    
1556     * Mon Feb 18 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-2
1557     - make slapd.conf read/write by root, read by ldap
1558    
1559     * Sun Feb 17 2002 Nalin Dahyabhai <nalin@redhat.com>
1560     - fix corner case in sendbuf fix
1561     - 2.0.23 now marked "stable"
1562    
1563     * Tue Feb 12 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.23-1
1564     - update to 2.0.23
1565    
1566     * Fri Feb 8 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
1567     - switch to an internalized Berkeley DB as the ldbm back-end (NOTE: this breaks
1568     access to existing on-disk directory data)
1569     - add slapcat/slapadd with gdbm for migration purposes
1570     - remove Kerberos dependency in client libs (the direct Kerberos dependency
1571     is used by the server for checking {kerberos} passwords)
1572    
1573     * Fri Feb 1 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.22-1
1574     - update to 2.0.22
1575    
1576     * Sat Jan 26 2002 Florian La Roche <Florian.LaRoche@redhat.de> 2.0.21-5
1577     - prereq chkconfig for server subpackage
1578    
1579     * Fri Jan 25 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-4
1580     - update migration tools to version 40
1581    
1582     * Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-3
1583     - free ride through the build system
1584    
1585     * Wed Jan 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.21-2
1586     - update to 2.0.21, now earmarked as STABLE
1587    
1588     * Wed Jan 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
1589     - temporarily disable optimizations for ia64 arches
1590     - specify pthreads at configure-time instead of letting configure guess
1591    
1592     * Mon Jan 14 2002 Nalin Dahyabhai <nalin@redhat.com>
1593     - and one for Raw Hide
1594    
1595     * Mon Jan 14 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-0.7
1596     - build for RHL 7/7.1
1597    
1598     * Mon Jan 14 2002 Nalin Dahyabhai <nalin@redhat.com> 2.0.20-1
1599     - update to 2.0.20 (security errata)
1600    
1601     * Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.19-1
1602     - update to 2.0.19
1603    
1604     * Tue Nov 6 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.18-2
1605     - fix the commented-out replication example in slapd.conf
1606    
1607     * Fri Oct 26 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.18-1
1608     - update to 2.0.18
1609    
1610     * Mon Oct 15 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.17-1
1611     - update to 2.0.17
1612    
1613     * Wed Oct 10 2001 Nalin Dahyabhai <nalin@redhat.com>
1614     - disable kbind support (deprecated, and I suspect unused)
1615     - configure with --with-kerberos=k5only instead of --with-kerberos=k5
1616     - build slapd with threads
1617    
1618     * Thu Sep 27 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.15-2
1619     - rebuild, 2.0.15 is now designated stable
1620    
1621     * Fri Sep 21 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.15-1
1622     - update to 2.0.15
1623    
1624     * Mon Sep 10 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.14-1
1625     - update to 2.0.14
1626    
1627     * Fri Aug 31 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
1628     - update to 2.0.12 to pull in fixes for setting of default TLS options, among
1629     other things
1630     - update to migration tools 39
1631     - drop tls patch, which was fixed better in this release
1632    
1633     * Tue Aug 21 2001 Nalin Dahyabhai <nalin@redhat.com> 2.0.11-13
1634     - install saucer correctly
1635    
1636     * Thu Aug 16 2001 Nalin Dahyabhai <nalin@redhat.com>
1637     - try to fix ldap_set_options not being able to set global options related
1638     to TLS correctly
1639    
1640     * Thu Aug 9 2001 Nalin Dahyabhai <nalin@redhat.com>
1641     - don't attempt to create a cert at install-time, it's usually going
1642     to get the wrong CN (#51352)
1643    
1644     * Mon Aug 6 2001 Nalin Dahyabhai <nalin@redhat.com>
1645     - add a build-time requirement on pam-devel
1646     - add a build-time requirement on a sufficiently-new libtool to link
1647     shared libraries to other shared libraries (which is needed in order
1648     for prelinking to work)
1649    
1650     * Fri Aug 3 2001 Nalin Dahyabhai <nalin@redhat.com>
1651     - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
1652     compliance) by name (follows from #43079, which split cyrus-sasl's
1653     cram-md5 and digest-md5 modules out into cyrus-sasl-md5)
1654    
1655     * Fri Jul 20 2001 Nalin Dahyabhai <nalin@redhat.com>
1656     - enable passwd back-end (noted by Alan Sparks and Sergio Kessler)
1657    
1658     * Wed Jul 18 2001 Nalin Dahyabhai <nalin@redhat.com>
1659     - start to prep for errata release
1660    
1661     * Fri Jul 6 2001 Nalin Dahyabhai <nalin@redhat.com>
1662     - link libldap with liblber
1663    
1664     * Wed Jul 4 2001 Than Ngo <than@redhat.com> 2.0.11-6
1665     - add symlink liblber.so libldap.so and libldap_r.so in /usr/lib
1666    
1667     * Tue Jul 3 2001 Nalin Dahyabhai <nalin@redhat.com>
1668     - move shared libraries to /lib
1669     - redo init script for better internationalization (#26154)
1670     - don't use ldaprc files in the current directory (#38402) (patch from
1671     hps@intermeta.de)
1672     - add BuildPrereq on tcp wrappers since we configure with
1673     --enable-wrappers (#43707)
1674     - don't overflow debug buffer in mail500 (#41751)
1675     - don't call krb5_free_creds instead of krb5_free_cred_contents any
1676     more (#43159)
1677    
1678     * Mon Jul 2 2001 Nalin Dahyabhai <nalin@redhat.com>
1679     - make config files noreplace (#42831)
1680    
1681     * Tue Jun 26 2001 Nalin Dahyabhai <nalin@redhat.com>
1682     - actually change the default config to use the dummy cert
1683     - update to MigrationTools 38
1684    
1685     * Mon Jun 25 2001 Nalin Dahyabhai <nalin@redhat.com>
1686     - build dummy certificate in %%post, use it in default config
1687     - configure-time shenanigans to help a confused configure script
1688    
1689     * Wed Jun 20 2001 Nalin Dahyabhai <nalin@redhat.com>
1690     - tweak migrate_automount and friends so that they can be run from anywhere
1691    
1692     * Thu May 24 2001 Nalin Dahyabhai <nalin@redhat.com>
1693     - update to 2.0.11
1694    
1695     * Wed May 23 2001 Nalin Dahyabhai <nalin@redhat.com>
1696     - update to 2.0.10
1697    
1698     * Mon May 21 2001 Nalin Dahyabhai <nalin@redhat.com>
1699     - update to 2.0.9
1700    
1701     * Tue May 15 2001 Nalin Dahyabhai <nalin@redhat.com>
1702     - update to 2.0.8
1703     - drop patch which came from upstream
1704    
1705     * Fri Mar 2 2001 Nalin Dahyabhai <nalin@redhat.com>
1706     - rebuild in new environment
1707    
1708     * Thu Feb 8 2001 Nalin Dahyabhai <nalin@redhat.com>
1709     - back out pidfile patches, which interact weirdly with Linux threads
1710     - mark non-standard schema as such by moving them to a different directory
1711    
1712     * Mon Feb 5 2001 Nalin Dahyabhai <nalin@redhat.com>
1713     - update to MigrationTools 36, adds netgroup support
1714    
1715     * Mon Jan 29 2001 Nalin Dahyabhai <nalin@redhat.com>
1716     - fix thinko in that last patch
1717    
1718     * Thu Jan 25 2001 Nalin Dahyabhai <nalin@redhat.com>
1719     - try to work around some buffering problems
1720    
1721     * Tue Jan 23 2001 Nalin Dahyabhai <nalin@redhat.com>
1722     - gettextize the init script
1723    
1724     * Thu Jan 18 2001 Nalin Dahyabhai <nalin@redhat.com>
1725     - gettextize the init script
1726    
1727     * Fri Jan 12 2001 Nalin Dahyabhai <nalin@redhat.com>
1728     - move the RFCs to the base package (#21701)
1729     - update to MigrationTools 34
1730    
1731     * Wed Jan 10 2001 Nalin Dahyabhai <nalin@redhat.com>
1732     - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
1733     a /etc/sysconfig/ldap file (#23549)
1734    
1735     * Fri Dec 29 2000 Nalin Dahyabhai <nalin@redhat.com>
1736     - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
1737     per mail from the ldap-nis mailing list
1738    
1739     * Tue Dec 5 2000 Nalin Dahyabhai <nalin@redhat.com>
1740     - force -fPIC so that shared libraries don't fall over
1741    
1742     * Mon Dec 4 2000 Nalin Dahyabhai <nalin@redhat.com>
1743     - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
1744     (OpenLDAP ITS #889)
1745     - add "-h ldaps:///" to server init when TLS is enabled, in order to support
1746     ldaps in addition to the regular STARTTLS (suggested by Del)
1747    
1748     * Mon Nov 27 2000 Nalin Dahyabhai <nalin@redhat.com>
1749     - correct mismatched-dn-cn bug in migrate_automount.pl
1750    
1751     * Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com>
1752     - update to the correct OIDs for automount and automountInformation
1753     - add notes on upgrading
1754    
1755     * Tue Nov 7 2000 Nalin Dahyabhai <nalin@redhat.com>
1756     - update to 2.0.7
1757     - drop chdir patch (went mainstream)
1758    
1759     * Thu Nov 2 2000 Nalin Dahyabhai <nalin@redhat.com>
1760     - change automount object classes from auxiliary to structural
1761    
1762     * Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
1763     - update to Migration Tools 27
1764     - change the sense of the last simple patch
1765    
1766     * Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com>
1767     - reorganize the patch list to separate MigrationTools and OpenLDAP patches
1768     - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
1769     - configure slapd to run as the non-root user "ldap" (#19370)
1770     - chdir() before chroot() (we don't use chroot, though) (#19369)
1771     - disable saving of the pid file because the parent thread which saves it and
1772     the child thread which listens have different pids
1773    
1774     * Wed Oct 11 2000 Nalin Dahyabhai <nalin@redhat.com>
1775     - add missing required attributes to conversion scripts to comply with schema
1776     - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
1777     our own OID tree to define attributes and classes migration scripts expect
1778     - tweak automounter migration script
1779    
1780     * Mon Oct 9 2000 Nalin Dahyabhai <nalin@redhat.com>
1781     - try adding the suffix first when doing online migrations
1782     - force ldapadd to use simple authentication in migration scripts
1783     - add indexing of a few attributes to the default configuration
1784     - add commented-out section on using TLS to default configuration
1785    
1786     * Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
1787     - update to 2.0.6
1788     - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
1789     - take the -s flag off of slapadd invocations in migration tools
1790     - add the cosine.schema to the default server config, needed by inetorgperson
1791    
1792     * Wed Oct 4 2000 Nalin Dahyabhai <nalin@redhat.com>
1793     - add the nis.schema and inetorgperson.schema to the default server config
1794     - make ldapadd a hard link to ldapmodify because they're identical binaries
1795    
1796     * Fri Sep 22 2000 Nalin Dahyabhai <nalin@redhat.com>
1797     - update to 2.0.4
1798    
1799     * Fri Sep 15 2000 Nalin Dahyabhai <nalin@redhat.com>
1800     - remove prereq on /etc/init.d (#17531)
1801     - update to 2.0.3
1802     - add saucer to the included clients
1803    
1804     * Wed Sep 6 2000 Nalin Dahyabhai <nalin@redhat.com>
1805     - update to 2.0.1
1806    
1807     * Fri Sep 1 2000 Nalin Dahyabhai <nalin@redhat.com>
1808     - update to 2.0.0
1809     - patch to build against MIT Kerberos 1.1 and later instead of 1.0.x
1810    
1811     * Tue Aug 22 2000 Nalin Dahyabhai <nalin@redhat.com>
1812     - remove that pesky default password
1813     - change "Copyright:" to "License:"
1814    
1815     * Sun Aug 13 2000 Nalin Dahyabhai <nalin@redhat.com>
1816     - adjust permissions in files lists
1817     - move libexecdir from %%{_prefix}/sbin to %%{_sbindir}
1818    
1819     * Fri Aug 11 2000 Nalin Dahyabhai <nalin@redhat.com>
1820     - add migrate_automount.pl to the migration scripts set
1821    
1822     * Tue Aug 8 2000 Nalin Dahyabhai <nalin@redhat.com>
1823     - build a semistatic slurpd with threads, everything else without
1824     - disable reverse lookups, per email on OpenLDAP mailing lists
1825     - make sure the execute bits are set on the shared libraries
1826    
1827     * Mon Jul 31 2000 Nalin Dahyabhai <nalin@redhat.com>
1828     - change logging facility used from local4 to daemon (#11047)
1829    
1830     * Thu Jul 27 2000 Nalin Dahyabhai <nalin@redhat.com>
1831     - split off clients and servers to shrink down the package and remove the
1832     base package's dependency on Perl
1833     - make certain that the binaries have sane permissions
1834    
1835     * Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>
1836     - move the init script back
1837    
1838     * Thu Jul 13 2000 Nalin Dahyabhai <nalin@redhat.com>
1839     - tweak the init script to only source /etc/sysconfig/network if it's found
1840    
1841     * Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
1842     - automatic rebuild
1843    
1844     * Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com>
1845     - switch to gdbm; I'm getting off the db merry-go-round
1846     - tweak the init script some more
1847     - add instdir to @INC in migration scripts
1848    
1849     * Thu Jul 6 2000 Nalin Dahyabhai <nalin@redhat.com>
1850     - tweak init script to return error codes properly
1851     - change initscripts dependency to one on /etc/init.d
1852    
1853     * Tue Jul 4 2000 Nalin Dahyabhai <nalin@redhat.com>
1854     - prereq initscripts
1855     - make migration scripts use mktemp
1856    
1857     * Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
1858     - do condrestart in post and stop in preun
1859     - move init script to /etc/init.d
1860    
1861     * Fri Jun 16 2000 Nalin Dahyabhai <nalin@redhat.com>
1862     - update to 1.2.11
1863     - add condrestart logic to init script
1864     - munge migration scripts so that you don't have to be
1865     /usr/share/openldap/migration to run them
1866     - add code to create pid files in /var/run
1867    
1868     * Mon Jun 5 2000 Nalin Dahyabhai <nalin@redhat.com>
1869     - FHS tweaks
1870     - fix for compiling with libdb2
1871    
1872     * Thu May 4 2000 Bill Nottingham <notting@redhat.com>
1873     - minor tweak so it builds on ia64
1874    
1875     * Wed May 3 2000 Nalin Dahyabhai <nalin@redhat.com>
1876     - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
1877     - backport replacement for the ldapuser patch
1878    
1879     * Tue May 2 2000 Nalin Dahyabhai <nalin@redhat.com>
1880     - fix segfaults from queries with commas in them in in.xfingerd (bug #11111)
1881    
1882     * Tue Apr 25 2000 Nalin Dahyabhai <nalin@redhat.com>
1883     - update to 1.2.10
1884     - add revamped version of patch from kos@bastard.net to allow execution as
1885     any non-root user
1886     - remove test suite from %%build because of weirdness in the build system
1887    
1888     * Wed Apr 12 2000 Nalin Dahyabhai <nalin@redhat.com>
1889     - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
1890     - fix some possible string-handling problems
1891    
1892     * Mon Feb 14 2000 Bill Nottingham <notting@redhat.com>
1893     - start earlier, stop later.
1894    
1895     * Thu Feb 3 2000 Nalin Dahyabhai <nalin@redhat.com>
1896     - auto rebuild in new environment (release 4)
1897    
1898     * Tue Feb 1 2000 Nalin Dahyabhai <nalin@redhat.com>
1899     - add -D_REENTRANT to make threaded stuff more stable, even though it looks
1900     like the sources define it, too
1901     - mark *.ph files in migration tools as config files
1902    
1903     * Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com>
1904     - update to 1.2.9
1905    
1906     * Mon Sep 13 1999 Bill Nottingham <notting@redhat.com>
1907     - strip files
1908    
1909     * Sat Sep 11 1999 Bill Nottingham <notting@redhat.com>
1910     - update to 1.2.7
1911     - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
1912     - take include files out of base package
1913    
1914     * Fri Aug 27 1999 Jeff Johnson <jbj@redhat.com>
1915     - missing ;; in init script reload) (#4734).
1916    
1917     * Tue Aug 24 1999 Cristian Gafton <gafton@redhat.com>
1918     - move stuff from /usr/libexec to /usr/sbin
1919     - relocate config dirs to /etc/openldap
1920    
1921     * Mon Aug 16 1999 Bill Nottingham <notting@redhat.com>
1922     - initscript munging
1923    
1924     * Wed Aug 11 1999 Cristian Gafton <gafton@redhat.com>
1925     - add the migration tools to the package
1926    
1927     * Fri Aug 06 1999 Cristian Gafton <gafton@redhat.com>
1928     - upgrade to 1.2.6
1929     - add rc.d script
1930     - split -devel package
1931    
1932     * Sun Feb 07 1999 Preston Brown <pbrown@redhat.com>
1933     - upgrade to latest stable (1.1.4), it now uses configure macro.
1934    
1935     * Fri Jan 15 1999 Bill Nottingham <notting@redhat.com>
1936     - build on arm, glibc2.1
1937    
1938     * Wed Oct 28 1998 Preston Brown <pbrown@redhat.com>
1939     - initial cut.
1940     - patches for signal handling on the alpha

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed