Imported Upstream version 0.63.0
[hcoop/debian/courier-authlib.git] / ChangeLog
CommitLineData
8d138742
CE
10.63.0
2
32009-12-17 Sam Varshavchik <mrsam@courier-mta.com>
4
5 * authldapescape.c: Factor out LDAP string escape function.
6
7 * authldap.schema: Various fixes
8
9 * authldap.ldif (olcObjectClasses): Create LDIF format schema from
10 authldap.schema
11
122009-11-21 Sam Varshavchik <mrsam@courier-mta.com>
13
14 * authoption.c (auth_getoptionenvint): For account options that
15 are parsed to an int, an option value that begins with t, T, y, or Y
16 is evaluated as 1, other alphabetic values as 0; so that 'true'
17 or 'yes' get evaluated as 1.
18
190.62.4
20
212009-06-13 Sam Varshavchik <mrsam@courier-mta.com>
22
23 * Various compilation fixes for gcc 4.4 and libtool 2.2
24
250.62.3
26
272009-04-26 Sam Varshavchik <mrsam@courier-mta.com>
28
29 * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
30
312009-03-15 Sam Varshavchik <mrsam@courier-mta.com>
32
33 * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
34
352009-02-22 Sam Varshavchik <mrsam@courier-mta.com>
36
37 * authmigrate.in (rc): Add /etc/courier-imap
38
390.62.2
40
412009-02-03 Sam Varshavchik <mrsam@courier-mta.com>
42
43 * Makefile.am: Compatibility fix for bash 4
44
450.62.1
46
472008-12-25 Mr. Sam <mrsam@courier-mta.com>
48
49 * cryptpassword.c: Fix compiler warnings
50
51 * checkpasswordsha1.c: Fix compiler warnings.
52
53 * authldaplib.c (auth_ldap_enumerate): Fix typo.
54
550.62.0
56
572008-12-17 Sam Varshavchik <mrsam@courier-mta.com>
58
59 * authpgsqllib.c: Use PQescapeStringConn() instead of removing all
60 apostrophes from query parameters. This fixes a potential SQL injection
61 vulnerability if the Postgres database uses a non-Latin locale.
62
632008-12-06 Sam Varshavchik <mrsam@courier-mta.com>
64
65 * Added support for {SSHA}-encrypted passwords. Based on a patch
66 by Zou bin <zb@bisp.com>.
67
68 * Added support for {SHA512} hash function.
69
700.61.1
71
722008-11-30 Sam Varshavchik <mrsam@courier-mta.com>
73
74 * authsasllogin.c (authsasl_login): Fix memory leak.
75
76 * authldaplib.c (read_env): Fix resource leak. authldap did not close
77 the authldaprc configuration file after reading it on startup.
78
79 * authldaplib.c (auth_ldap_do2): Fix used ptr after free(). When an
80 email map feature is enabled, and the map failed, the resulting
81 error message was formed from a buffer that was recently free()ed.
82
83 * authpipe.c (auth_pipe): Fix memory leak. If the fork() system call
84 failed (unlikely), a buffer wasn't getting released.
85
862008-11-30 Sam Varshavchik <mrsam@courier-mta.com>
87
88 * Fix spec file to invoke authmksock with a short pathname.
89
902008-08-07 Mr. Sam <mrsam@courier-mta.com>
91
92 * courier-authlib.spec.in: Add -C option to configure invocation.
93 Remove the authmigrate script, only needed when upgrading from
94 pre-2004 Courier, and the current packaging causes an error.
95
962008-07-20 "Hanno Böck" <hanno@hboeck.de>
97
98 * authmigrate.in (rc): Use ${DESTDIR}, if set.
99
ac40fd9e 1000.61.0
101
1022008-07-13 Mr. Sam <mrsam@courier-mta.com>
103
104 * courier-authlib.spec: Dummy provides: for symlinks, to allow upgrade
105 with older packages that require <libname>.so.0.
106
1072008-07-09 Mr. Sam <mrsam@courier-mta.com>
108
109 * Makefile.am: Switch to versionless shared libraries.
110 Install all shared libraries just as <libname>.so. make install manually
111 removes *.so.0.0 files that were left over from previous versions,
112 and installs a temporary *.so.0 symlink to *.so, for temporary
113 binary ABI compatibility with 0.60. The symlinks will be removed in
114 0.62.
115
1162008-07-08 Mr. Sam <mrsam@courier-mta.com>
117
118 * Cleanup: always compile md5, sha* and hmac stuff, and remove all
119 conditionally-compiled cruft. Move SASL list to an internal header.
120 Add client-side support for AUTH EXTERNAL.
121
1222008-06-29 Mr. Sam <mrsam@courier-mta.com>
123
124 * authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(),
125 invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL
126 by going through the motions, then setting up a dummy authentication
127 request.
128
129 * authdaemon.c (auth_generic): Check for the dummy EXTERNAL
130 authentication request, and handle it by invoking auth_getuserinfo(),
131 rather than sending it down the pipe. This avoid having to implement
132 a stub in every authentication module.
133
1340.60.6
135
1362008-06-08 Alessandro Vesely <vesely@tana.it>
137
138 * authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES
139
1400.60.5
141
1422008-05-16 Mr. Sam <mrsam@courier-mta.com>
143
144 * authmysqllib.c: Fix domain-less queries.
145
1460.60.4
147
1482008-05-08 Mr. Sam <sam@email-scan.com>
149
150 * Makefile: Drop the unmaintained authvchkpw module.
151
1522008-05-04 Mr. Sam <mrsam@courier-mta.com>
153
154 * authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of
155 crude filtering.
156
1570.60.3
158
1592007-11-11 Mr. Sam <sam@email-scan.com>
160
161 * Makefile.am: Use _LIBADD properly.
162
1632007-10-15 "Johnny C. Lam" <jlam-courier@buildlink.org>
164
165 * configure.in: More portability fixes.
166
84870c69 1670.60.2
168
1692007-10-10 "Johnny C. Lam" <jlam-courier@buildlink.org>
170
171 * liblock/lockdaemon.c: Portability fix for checking the highest
172 available file descriptor.
173
dd184caf 1740.60.1
175
1762007-10-06 Anton Dobkin <adobkin@viansib.ru>
177
178 * MYSQL_CHARACTER_SET option.
179
1802007-10-06 Oliver Lehmann <lehmann@ans-netz.de>
181
182 * authvchkpw.c: Fix typo.
183
1842007-10-06 Wayne Pascoe <courier@penguinpowered.org>
185
186 * courier-authlib.spec.in (BuildRequires): on redhat-rpm-config.
187
1882007-10-06 Mr. Sam <mrsam@courier-mta.com>
189
190 * userdb/userdb.pl.in (usage): Allow colons and pluses, in account
191 names.
192
1932007-10-06 Martin <psiplus@gmail.com>
194
195 * checkpasswordmd5.c (authcheckpasswordmd5): Add {MD5RAW} hash method.
196
1970.60
198
1992007-09-25 "Johnny C. Lam" <jlam-courier@buildlink.org>
200
201 * liblock/lockdaemon.c (OPEN_MAX): Use OPEN_MAX, instead of hardcoded
202 99
203
2042007-09-25 Mr. Sam <mrsam@courier-mta.com>
205
206 * liblock/lockdaemon.c (OPEN_MAX): Even better, use
207 sysconf(_SC_OPEN_MAX), where available.
208
2092007-09-20 Mr. Sam <sam@email-scan.com>
210
211 * userdb/userdb.pl.in: Allow underscores in account names.
212
2132007-08-29 "Noel (Sourceforge)" <noelb@users.sourceforge.net>
214
215 * authvchkpw.c: Compilation error.
216
2172007-07-26 Mr. Sam <sam@email-scan.com>
218
219 * COPYING: GPL 3
220
2212007-04-25 Mr. Sam <mrsam@courier-mta.com>
222
223 * authvchkpw.c: Quell a compiler warning about a fwd declaration.
224
d9898ee8 2250.59.3
226
2272007-04-22 Bill Shupp <hostmaster@shupp.org>
228
229 * Implement CRAM authentication in the vchpw module.
230
2312007-04-22 Mr. Sam <mrsam@courier-mta.com>
232
233 * courier-authlib.spec.in: spec files requires redhat-rpm-config
234
2352007-04-15 Mr. Sam <mrsam@courier-mta.com>
236
237 * man pages: work around for some bugs in Docbook XML stylesheets.
238
2392007-04-13 Mr. Sam <mrsam@courier-mta.com>
240
241 * authpipe.c (auth_pipe_pre): Fix leak when authpipe module is
242 enabled, but the actual authpipe script/external prog is not
243 installed.
244
245 * authpipe.c (auth_pipe_chgpwd): Pedantic resource cleanup,
246 after fork() fails.
247
248 * userdb/userdb.c (userdb): Pedantic resource cleanup, after
249 a malloc failure.
250
251 * userdb/userdb2.c (userdbshadow): Ditto.
252
2530.59.2
254
2552007-04-05 Mr. Sam <mrsam@courier-mta.com>
256
257 * Update man pages and documentation to Docbook XML V4.4
258
2592007-02-25 Mr. Sam <mrsam@courier-mta.com>
260
261 * More configure script cleanup
262
2632007-02-25 Kurt Roeckx <kurt@roeckx.be>
264
265 * Clean up configure scripts
266
2672007-02-09 Juraj Lutter <otis@wilbury.sk>
268
269 * authmysqlrc: Implement SSL-encrypted MySQL connections
270
2712007-01-20 Mr. Sam <mrsam@courier-mta.com>
272
273 * authldaplib.c: Fix pedantic C code.
274
2750.59.1
276
2772007-01-16 Mr. Sam <mrsam@courier-mta.com>
278
279 * authldaplib.c (l_simple_bind_s): Fix anon binds.
280
2810.59
282
2832006-12-30 Lars Timmann <Lars.Timmann@mcs.de>
284
285 * Makefile.am: Fixes for Solaris's linker.
286
2872006-10-28 Mr. Sam <mrsam@courier-mta.com>
288
289 * Ported code to gcc 4.1.1
290
291 * Ported authldap to openldap 2.3.27
292
2932006-09-17 Chris Petersen <rpm@forevermore.net>
294
295 - Make the spec a little prettier
296 - Replace BuildPreReq with BuildRequires
297 - Remove period from summaries (rpmlint)
298 - Fix release tag to use %{?dist} macro if it's present
299 - Change distro-detection to use "rh" and "fc" for version detection, and add support for mandriva
300
3012006-06-01 kabe@sra-tohoku.co.jp
302
303 * authldaplib.c (auth_ldap_enumerate): Fix LDAP account enumeration
304
3052006-05-28 Mr. Sam <mrsam@courier-mta.com>
306
307 * all: Fix many compiler warnings.
308
3092006-03-25 Rui Lopes <rui@ruilopes.com>
310
311 * userdb/makeuserdb.in: Added the -f option to makeuserdb
312
3132006-02-23 Mr. Sam <mrsam@courier-mta.com>
314
315 * authldaplib.c (authldap_read_config): Fix up an error message.
316
3172006-01-30 Mr. Sam <mrsam@courier-mta.com>
318
319 * authldaplib.c: Try to recover when the LDAP server closes the
320 persistent socket, for inactivity.
321
3222006-01-21 Mr. Sam <mrsam@courier-mta.com>
323
324 * configure.in: Fix libtool 1.9 breakage.
325
326 * Makefile.am: Ditto
327
328 * courier-authlib spec file (BuildRequires): Demand /usr/include/ltdl.h
329
330 * authdaemonlib.c (s_connect): Fix compiler warning.
331
332 * authdaemond.c (start): Ditto.
333
334 * authsaslclientcram.c (authsaslclient_cram): Ditto.
335
336 * libhmac/hmac.c (dohashkey): Ditto.
337
3380.58
339
3402005-12-08 Mr. Sam <mrsam@courier-mta.com>
341
342 * authpam.c (dopam): Re-enable pam_acct_mgmt hook.
343
3442005-11-16 Mr. Sam <mrsam@courier-mta.com>
345
346 * preauthshadow.c: Add support for shadow password expiration --
347 based on Krzysztof Oledzki <ole@ans.pl>'s patch.
348
3492005-10-04 Brian Candler <B.Candler@pobox.com>
350
351 * authdaemonrc.in (LOGGEROPTS): Add a section for LDAP environment
352 variable options.
353
3542005-09-30 Mr. Sam <mrsam@courier-mta.com>
355
356 * authdaemonlib.c (opensock): Configurable daemon socket timeout,
357 based on a patch by Rodrigo Salinas <rodrigo@facea.uchile.cl>.
358
3592005-09-30: Michael Richard <michael.richard@cesart.com>
360
361 * authldaplib: Replace LDAP_SERVER and LDAP_PORT settings with
362 LDAP_URI, which obsoletes LDAP_TLS.
363
3642005-09-18 Mr. Sam <mrsam@courier-mta.com>
365
366 * authldaplib.c (auth_ldap_do2): Fix LDAP error checking.
367
3682005-09-03 Mr. Sam <mrsam@courier-mta.com>
369
370 * authinfo.c (getmgid): Fix misleading error message.
371
3722005-08-10 "Johnny C. Lam" <jlam@NetBSD.org>
373
374 * authpipelib.c: Include sys/time.h
375
3760.57
377
3782005-07-16 Mr. Sam <mrsam@courier-mta.com>
379
380 * configure.in: Update to automake 1.9, autoconf 2.59, libtool 1.5.6.
381
3822005-07-12 Mr. Sam <mrsam@courier-mta.com>
383
384 * authlib: create the authtest and authpasswd manual pages.
385
3862005-07-09 Mr. Sam <mrsam@courier-mta.com>
387
388 * authldaplib.c (auth_ldap_do3): Fix call of authcryptpasswd().
389
390 * authpgsqllib.c (auth_pgsql_setpass): Ditto.
391
392 * authmysqllib.c (auth_mysql_setpass): Ditto.
393
394 * cryptpassword.c (authcryptpasswd): Fix handling of encryption hints.
395
396 * checkpassword.c (do_authcheckpassword): Ignore {CRYPT} prefix on
397 crypted passwords.
398
399 * checkpasswordsha1.c (authcheckpasswordsha1): Fix {SHA256} passwords.
400
401 * authmysqllib.c (auth_mysql_setpass): Fix a memory leak.
402
4032005-07-06 Willi Mann <willi@wm1.at>
404
405 * authdaemond.c: Strip full name/gecos field after the first comma.
406
4072005-07-04 Brian Candler <B.Candler@pobox.com>
408
409 * liblog/logger.c: Fix wrong args to setuidgid().
410
411 * README_authlib.sgml: Document updated authpipe protocol.
412
413 * authdaemond: Pass LOGGEROPTS option to authdaemond.
414
4152005-07-02 Mr. Sam <mrsam@courier-mta.com>
416
417 * liblog/logger.c: Added -droproot option to courierlogger.
418
419 * liblock/lockdaemon.c: Try to recover if upgraded daemon process runs
420 under a different uid.
421
4222005-07-01 Brian Candler <B.Candler@pobox.com>
423
424 * Changed -uid and -gid options to -user and -group for consistency
425 with couriertcpd. Change them to affect courierlogger itself,
426 after it has spawned any child.
427
428 * Optional default domain for authentication requests.
429
4302005-07-02 Mr. Sam <mrsam@courier-mta.com>
431
432 * Makefile.am: Refactor the linking process to make it more portable.
433
4342005-06-30 Brian Candler <B.Candler@pobox.com>
435
436 * authdaemon.c (auth_generic): Silly bug in auth_generic().
437
438 * authpipe: more fixes to the authpipe module.
439
4402005-05-14 Christian Loitsch <christian@fgecko.com>
441
442 * authpipe: various fixes to the authpipe module.
443
4440.56
445
4462005-05-08 Mr. Sam <mrsam@courier-mta.com>
447
448 * courier-authlib.sysvinit: Remove lockfile after stop.
449
4502005-04-07 Mr. Sam <mrsam@courier-mta.com>
451
452 * authpipe.c (auth_pipe_pre): Fix zombies created by the authpipe
453 module.
454
4552005-03-20 Christian Loitsch <courier-imap@abc.fgecko.com>
456
457 * New authpipe authentication module.
458
4592005-03-20 Brian Candler <B.Candler@pobox.com>
460
461 * Fix the error code when an empty password is provided.
462
463 * authldap.schema: Add mailhost to the recommended LDAP schema.
464
4650.55
466
4672005-03-02 Mr. Sam <mrsam@courier-mta.com>
468
469 * authsystem.passwd.in: Explicitly set LC_ALL to en_US
470
4712005-02-20 Mr. Sam <mrsam@courier-mta.com>
472
473 * SASL: Added CRAM-SHA256 authentication method (experimental).
474
4752005-02-19 Mr. Sam <mrsam@courier-mta.com>
476
477 * courierauthdebug.h: Macro dprintf conflicts with new glibc.
478
4790.54
480
4812005-01-31 Mr. Sam <mrsam@courier-mta.com>
482
483 * authmigrate.in (rc): Fix - userdb file does not have to have a
484 leading ##VERSION
485
4862005-01-19 Brian Candler <B.Candler@pobox.com>
487
488 * userdb/makeuserdb.in: Report dangling symlinks.
489
4900.53
491
4922005-01-11 Mr. Sam <mrsam@courier-mta.com>
493
494 * configure.in: Typo fix.
495
4962005-01-05 Mr. Sam <mrsam@courier-mta.com>
497
498 * Makefile.am (uninstall-hook): pw2userdb was not being installed.
499
5000.52
501
5022005-01-01 Mr. Sam <mrsam@courier-mta.com>
503
504 * configure.in: Fix gdbm/bdb check. Try to autoprobe for Solaris
505 linker.
506
5072004-12-05 Mr. Sam <mrsam@courier-mta.com>
508
509 * configure.in: Fix courierauthconfig --cppflags, new option to the
510 configure script: --without-stdheaderdir
511
5122004-12-03 Mr. Sam <mrsam@courier-mta.com>
513
514 * courierauthconfig: --version prints package version.
515 --version=V print "yes" if package version is at least V.
516
5172004-12-01 Mr. Sam <mrsam@courier-mta.com>
518
519 * liblog/logger.c: Added -uid and -gid options to courierlogger.
520
5212004-11-29 Brian Candler <B.Candler@pobox.com>
522
523 * authldaplib.c: Use persistent connections for authenticated binds
524 when using LDAPv3. Use the LDAP_OPT_NETWORK_TIMEOUT setting,
525 initialized from the configuration file, if provided (OpenLDAP).
526 If using authenticated binds, a password change is done under the
527 user's credentials, instead of the admin's.
528
5292004-11-24 Brian Candler <B.Candler@pobox.com>
530
531 * README.authdebug.html: document temporary failure messages.
532
5332004-11-24 Mr. Sam <mrsam@courier-mta.com>
534
535 * courier-authlib.spec.in: Move the userdb scripts in sbindir from
536 main package to the userdb subpackage.
537
5382004-11-24 Brian Candler <B.Candler@pobox.com>
539
540 * authuserdb.c: Fix error handling in userdb CRAM.
541
542 * userdb-test-cram-md5: Helper script for verifying C/R authentication.
543
5442004-11-20 Brian Candler <B.Candler@pobox.com>
545
546 * Additional debug messages.
547
5482004-11-13 Brian Candler <B.Candler@pobox.com>
549
550 * mysql/pgsql fixes; other misc fixes
551
5522004-11-16 Mr. Sam <mrsam@courier-mta.com>
553
554 * configure.in: Fix mysql/pgslq autodetection
555
5562004-11-13 Brian Candler <B.Candler@pobox.com>
557
558 * authdaemond: Fix bug in account enumeration function.
559
560 * authdaemond: Return individual account options when enumerating
561 accounts. Affects mysql, ldap, pgsql modules. mysql and pgsql
562 enumeration filter must now return one more column. Added an ldap
563 enumeration filter. New option to authenumerate, -o, includes
564 account options in the output. New option, -s, suppressed accounts
565 that have the disableshared option set.
566
567 * authmysql, authpgsql: Additional debugging.
568
569 * authmysql, authpgsql, authldap: Replaced enumeration function,
570 more efficient memory usage with large accounts.
571
572 * authldap: Suggested account schema has uid and gid optional, because
573 global uid and gids may be set in authldaprc instead.
574
575 * authvchkpw: Fix vpopmail compilation.
576
5772004-11-10 Mr. Sam <mrsam@courier-mta.com>
578
579 * configure.in: Do not disable mysql + pgsql if vchkpw lib was found.
580
5812004-11-09 Brian Candler <B.Candler@pobox.com>
582
583 * authdaemond.c: New DEFAULTOPTIONS setting.
584
5852004-11-04 Mr. Sam <mrsam@courier-mta.com>
586
587 * authdaemonlib.c (s_connect): Wait for connection to authdaemond
588 only if async connect() failed with EINPROGRESS.
589
5902004-11-03 Mr. Sam <mrsam@courier-mta.com>
591
592 * Makefile.am (SUBDIRS): Ok, only build in bdbobj/gdbmobj according
593 to what autoconf finds.
594
595 * authldaplib.c (auth_ldap_do3): Fix LDAP driver.
596
5972004-11-03 Brian Candler <B.Candler@pobox.com>
598
599 * Makefile.am: Fixes.
600
6012004-10-30 Mr. Sam <mrsam@courier-mta.com>
602
603 * authinfo.c: Added mailuid= and mailgid=
604
6052004-10-21 Mr. Sam <mrsam@courier-mta.com>
606
607 * Makefile.am (libcourierauthsaslclient_la_SOURCES): Factored out
608 SASL client support into libcourierauthsaslclient.la
609
6102004-10-21 Brian Candler <B.Candler@pobox.com>
611
612 * Makefile.am: Fixes.
613
6142004-10-16 Mr. Sam <mrsam@courier-mta.com>
615
616 * authldap.schema: Added disableimap, disablepop3, disablewebmail,
617 and sharedgroup.
618
6192004-10-07 Mr. Sam <mrsam@courier-mta.com>
620
621 * authsyschangepwd.c (dochangepwd): Do not reset the environment
622 before exec-ing expect.
623
6242004-10-04 Mr. Sam <mrsam@courier-mta.com>
625
626 * Merged authuserdb with authcram. Fixed CRAM password changes.
627 Do not reset the environment before exec-ing userdb and makeuserdb.
628
629