+0.69.0
+
+2018-08-16 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authdaemond.c: set FD_CLOEXEC on socket file descriptors, to avoid
+ leaks to child processes.
+
+2018-05-25 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authldaplib.cpp: improve automatic reconnection logic to the LDAP
+ server.
+
+2017-11-27 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * rpm packaging fixes.
+
+2017-09-08 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courier-authlib.spec.in: Fix several problems with the package
+ scripts. Remove 'authdaemond stop' from %preun. Add explicit
+ systemctl daemon-reload to %post and %postun
+
+2017-07-23 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authsaslclient.h (SASL_LIST): Reorder SASL methods, strongest
+ first.
+
+0.68.0
+
+2017-03-16 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * configure.ac: Rebuild against updated courier-unicode API.
+
+0.67.0
+
+2017-01-27 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courierauth.h: Move declarations from cramlib.h into courierauth.h,
+ exporting them as part of the public API.
+
+2016-09-04 Giovanni Bechis <giovanni@paclan.it>
+
+ * userdb/userdbpw.c (main): Use bcrypt_gensalt() on OpenBSD
+
+2016-05-07 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authsqlite, authmysql, authpgsql: Rewrite these modules in
+ modern C++. Autodetect and automatically reload the configuration
+ file when it's changed, no server restart is needed.
+
+2016-03-20 Giovanni Bechis <giovanni@openbsd.org>
+
+ * checkpassword.c (do_authcheckpassword): Check for a null return
+ value from crypt().
+
+2016-01-17 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authldaplib.cpp (operator): Fix compilation warning.
+
+2016-01-04 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authldaplib.cpp: Rewrite authldap in modern C++. Autodetect
+ and automatically reload authldaprc when it is changed. No server
+ restart is required.
+
+0.66.4
+
+2015-11-14 "Hanno Böck" <hanno@hboeck.de>
+
+ * authgetconfig.c (authgetconfig): avoid invalid memory read.
+
+0.66.3
+
+2015-06-09 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authdaemon.c: auth_callback_default_autocreate, default callback
+ used by clients that autocreates a home directory, if one does not
+ exist already.
+
+0.66.2
+
+2015-02-28 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Update to courier-unicode 1.2.
+
+2014-07-13 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * liblock, couriertls: fix compilation for OpenBSD -- based on a
+ patch from Giovanni Bechis <giovanni@paclan.it>.
+
+2014-07-04 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
+
+2014-04-27 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courier.spec.in: Update to use systemd macros.
+
+ * Check for NULL return value from crypt().
+
+2014-01-12 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Factored out the unicode library into a separate package.
+
+2013-10-08 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Makefile.am: run sysconftool on authsqliterc, in install-configure.
+ Remove .la files for authentication modules, keep then for actual
+ API libraries. Install them in the -devel RPM package.
+
+ * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
+
+ * courier-authlib.service.in: Added Install target.
+
+0.66
+
+2013-03-02 Eray Aslan <eray.aslan@caf.com.tr>
+
+ * sqlite fixes.
+
+2013-02-24 Lutz Behnke <cypherfox@users.sourceforge.net>
+
+ * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
+
+2013-01-06 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
+
+2012-10-25 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courier-authlib.spec.in: Typo.
+
+0.65.0
+
+2012-10-06 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * New authsqlite authentication module.
+
+ * Fixed: when using authpgsql, if the Postgres server goes down
+ authpgsql will then start leaking memory.
+
+ * Fixed error codes returned by several authentication modules that
+ prevent certain combinations of authentication modules from being
+ used together.
+
+0.64.0
+
+2012-04-23 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authpam.c (callback_pam): Call pam_end() after an authentication
+ attempt.
+
+2011-08-02 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
+ added it to the list of header files that 'make install' puts into
+ includedir.
+
+2011-06-19 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Fix gcc 4.6 warnings
+
+ * courier.spec.in: switch to systemd.
+
+2011-05-25 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Fix autoconf warnings.
+
+2010-03-08 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courier-authlib.spec: Make rmplint happy.
+
+0.63.1
+
+2010-03-06 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Remove the bundled libtdl library. Require the system-installed
+ libltdl library.
+
+2010-01-31 Brian Costello <dolemite@gmail.com>
+
+ * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
+ is not set in the config file.
+
+0.63.0
+
+2009-12-17 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authldapescape.c: Factor out LDAP string escape function.
+
+ * authldap.schema: Various fixes
+
+ * authldap.ldif (olcObjectClasses): Create LDIF format schema from
+ authldap.schema
+
+2009-11-21 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authoption.c (auth_getoptionenvint): For account options that
+ are parsed to an int, an option value that begins with t, T, y, or Y
+ is evaluated as 1, other alphabetic values as 0; so that 'true'
+ or 'yes' get evaluated as 1.
+
+0.62.4
+
+2009-06-13 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Various compilation fixes for gcc 4.4 and libtool 2.2
+
+0.62.3
+
+2009-04-26 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
+
+2009-03-15 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
+
+2009-02-22 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authmigrate.in (rc): Add /etc/courier-imap
+
+0.62.2
+
+2009-02-03 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Makefile.am: Compatibility fix for bash 4
+
+0.62.1
+
+2008-12-25 Mr. Sam <mrsam@courier-mta.com>
+
+ * cryptpassword.c: Fix compiler warnings
+
+ * checkpasswordsha1.c: Fix compiler warnings.
+
+ * authldaplib.c (auth_ldap_enumerate): Fix typo.
+
+0.62.0
+
+2008-12-17 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authpgsqllib.c: Use PQescapeStringConn() instead of removing all
+ apostrophes from query parameters. This fixes a potential SQL injection
+ vulnerability if the Postgres database uses a non-Latin locale.
+
+2008-12-06 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Added support for {SSHA}-encrypted passwords. Based on a patch
+ by Zou bin <zb@bisp.com>.
+
+ * Added support for {SHA512} hash function.
+
+0.61.1
+
+2008-11-30 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * authsasllogin.c (authsasl_login): Fix memory leak.
+
+ * authldaplib.c (read_env): Fix resource leak. authldap did not close
+ the authldaprc configuration file after reading it on startup.
+
+ * authldaplib.c (auth_ldap_do2): Fix used ptr after free(). When an
+ email map feature is enabled, and the map failed, the resulting
+ error message was formed from a buffer that was recently free()ed.
+
+ * authpipe.c (auth_pipe): Fix memory leak. If the fork() system call
+ failed (unlikely), a buffer wasn't getting released.
+
+2008-11-30 Sam Varshavchik <mrsam@courier-mta.com>
+
+ * Fix spec file to invoke authmksock with a short pathname.
+
+2008-08-07 Mr. Sam <mrsam@courier-mta.com>
+
+ * courier-authlib.spec.in: Add -C option to configure invocation.
+ Remove the authmigrate script, only needed when upgrading from
+ pre-2004 Courier, and the current packaging causes an error.
+
+2008-07-20 "Hanno Böck" <hanno@hboeck.de>
+
+ * authmigrate.in (rc): Use ${DESTDIR}, if set.
+
+0.61.0
+
+2008-07-13 Mr. Sam <mrsam@courier-mta.com>
+
+ * courier-authlib.spec: Dummy provides: for symlinks, to allow upgrade
+ with older packages that require <libname>.so.0.
+
+2008-07-09 Mr. Sam <mrsam@courier-mta.com>
+
+ * Makefile.am: Switch to versionless shared libraries.
+ Install all shared libraries just as <libname>.so. make install manually
+ removes *.so.0.0 files that were left over from previous versions,
+ and installs a temporary *.so.0 symlink to *.so, for temporary
+ binary ABI compatibility with 0.60. The symlinks will be removed in
+ 0.62.
+
+2008-07-08 Mr. Sam <mrsam@courier-mta.com>
+
+ * Cleanup: always compile md5, sha* and hmac stuff, and remove all
+ conditionally-compiled cruft. Move SASL list to an internal header.
+ Add client-side support for AUTH EXTERNAL.
+
+2008-06-29 Mr. Sam <mrsam@courier-mta.com>
+
+ * authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(),
+ invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL
+ by going through the motions, then setting up a dummy authentication
+ request.
+
+ * authdaemon.c (auth_generic): Check for the dummy EXTERNAL
+ authentication request, and handle it by invoking auth_getuserinfo(),
+ rather than sending it down the pipe. This avoid having to implement
+ a stub in every authentication module.
+
+0.60.6
+
+2008-06-08 Alessandro Vesely <vesely@tana.it>
+
+ * authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES
+
+0.60.5
+
+2008-05-16 Mr. Sam <mrsam@courier-mta.com>
+
+ * authmysqllib.c: Fix domain-less queries.
+
+0.60.4
+
+2008-05-08 Mr. Sam <sam@email-scan.com>
+
+ * Makefile: Drop the unmaintained authvchkpw module.
+
+2008-05-04 Mr. Sam <mrsam@courier-mta.com>
+
+ * authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of
+ crude filtering.
+
+0.60.3
+
+2007-11-11 Mr. Sam <sam@email-scan.com>
+
+ * Makefile.am: Use _LIBADD properly.
+
+2007-10-15 "Johnny C. Lam" <jlam-courier@buildlink.org>
+
+ * configure.in: More portability fixes.
+
+0.60.2
+
+2007-10-10 "Johnny C. Lam" <jlam-courier@buildlink.org>
+
+ * liblock/lockdaemon.c: Portability fix for checking the highest
+ available file descriptor.
+
0.60.1
2007-10-06 Anton Dobkin <adobkin@viansib.ru>
0.59.3
2007-04-22 Bill Shupp <hostmaster@shupp.org>
-
+
* Implement CRAM authentication in the vchpw module.
2007-04-22 Mr. Sam <mrsam@courier-mta.com>
- * courier-authlib.spec.in: spec files requires redhat-rpm-config
+ * courier-authlib.spec.in: spec files requires redhat-rpm-config
2007-04-15 Mr. Sam <mrsam@courier-mta.com>
* authpipe.c (auth_pipe_pre): Fix leak when authpipe module is
enabled, but the actual authpipe script/external prog is not
installed.
-
+
* authpipe.c (auth_pipe_chgpwd): Pedantic resource cleanup,
after fork() fails.
2005-07-02 Mr. Sam <mrsam@courier-mta.com>
- * liblog/logger.c: Added -droproot option to courierlogger.
+ * liblog/logger.c: Added -droproot option to courierlogger.
* liblock/lockdaemon.c: Try to recover if upgraded daemon process runs
under a different uid.
2005-07-01 Brian Candler <B.Candler@pobox.com>
-
+
* Changed -uid and -gid options to -user and -group for consistency
with couriertcpd. Change them to affect courierlogger itself,
after it has spawned any child.
-
+
* Optional default domain for authentication requests.
2005-07-02 Mr. Sam <mrsam@courier-mta.com>
2004-11-03 Mr. Sam <mrsam@courier-mta.com>
- * Makefile.am (SUBDIRS): Ok, only build in bdbobj/gdbmobj according
+ * Makefile.am (SUBDIRS): Ok, only build in bdbobj/gdbmobj according
to what autoconf finds.
* authldaplib.c (auth_ldap_do3): Fix LDAP driver.
* Merged authuserdb with authcram. Fixed CRAM password changes.
Do not reset the environment before exec-ing userdb and makeuserdb.
-
-