lp://staging/ubuntu/quantal/openldap

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

55. By Marc Deslauriers on 2012-08-20

debian/slapd.py: Add AppArmor info and logs to apport hook.

54. By James Page on 2012-07-20

* Merge from Debian unstable. Remaining changes:
  - Enable AppArmor support:
    - d/apparmor-profile: add AppArmor profile
    - d/rules: use dh_apparmor
    - d/control: Build-Depends on dh-apparmor
    - d/slapd.README.Debian: add note about AppArmor
    - d/slapd.dirs: add etc/apparmor.d/force-complain
  - Enable GSSAPI support (LP: #495418):
    - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
      - Add --with-gssapi support
      - Make guess_service_principal() more robust when determining
        principal
    - d/configure.options: Configure with --with-gssapi
    - d/control: Added libkrb5-dev as a build depend
  - Enable ufw support (LP: #423246):
    - d/control: suggest ufw.
    - d/rules: install ufw profile.
    - d/slapd.ufw.profile: add ufw profile.
  - Enable nss overlay (LP: #675391):
    - d/{patches/nssov-build,/rules}: Apply, build and package the
      nss overlay.
  - d/{rules,slapd.py}: Add apport hook. (LP: #610544)
  - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
    either the default DIT nor via an Authn mapping.
  - d/slapd.scripts-common:
    - add slapcat_opts to local variables.
    - Remove unused variable new_conf.
    - Fix backup directory naming for multiple reconfiguration.
  - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
  - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
    in the openldap library, as required by Likewise-Open (LP: #390579)
  - d/{control,rules}: enable PIE hardening
* Dropped changes:
  - d/patches/its-7107-fix-Operation-init-on-reuse.diff: Included in upstream release.
  - d/patches/CVE-2011-4079: Included in upstream release.
  - d/patches/service-operational-before-detach: Included in upstream release.
  - d/schema/extra/misc.ldif: Included upstream.
  - d/{rules,schema/extra}: Fix configure and clean rules to support
    extra schemas shipped as part of the debian/schema/ directory; no longer required.
  - Included in Debian:
    + Document cn=config in README file.
    + Install a default DIT; actually a minimal configuration.
    + d/patches/heimdal-fix.
* General tidy of d/patches to remove obsolete patches being held in Ubuntu delta.

53. By Pierre Fersing <email address hidden> on 2012-07-19

* Fix issue with intermittent connection issues when using LDAPv3
  protocol (LP: #1023025):
  - d/patches/its-7107-fix-Operation-init-on-reuse.diff: Cherry picked
    patch from upstream VCS which ensures objects are initialized before
    re-use.

52. By Stéphane Graber on 2012-07-18

releasing version 2.4.28-1.1ubuntu5

51. By Stéphane Graber on 2012-07-18

Re-introduce slapd-smbk5pwd as we now have heimdal-dev in main

50. By Jamie Strandboge on 2012-04-05

debian/control: Build-Depends on dh-apparmor (LP: #948481)

49. By Timo Aaltonen on 2012-02-21

Add its-7176-only-poll-sockets-for-write-as-needed.diff
(LP: #932823).

48. By Daniel T Chen on 2012-01-25

Remove debian/patches/CVE-2011-4079; it's already in this upstream
version. Fixes FTBFS.

47. By Chuck Short on 2012-01-23

* Merge from Debian testing. Remaining changes:
  - Install a default DIT (LP: #442498).
  - Document cn=config in README file (LP: #370784).
  - remaining changes:
    + AppArmor support:
      - debian/apparmor-profile: add AppArmor profile
      - use dh_apparmor:
        - debian/rules: use dh_apparmor
        - debian/control: Build-Depends on debhelper 7.4.20ubuntu5
      - updated debian/slapd.README.Debian for note on AppArmor
      - debian/slapd.dirs: add etc/apparmor.d/force-complain
    + Enable GSSAPI support (LP: #495418):
      - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - debian/patches/series: apply gssapi.diff patch.
      - debian/configure.options: Configure with --with-gssapi
      - debian/control: Added libkrb5-dev as a build depend
    + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open (LP: #390579)
   + Don't build smbk5pwd overlay since it uses heimdal instead of krb5:
      - debian/control:
        - remove build-dependency on heimdal-dev.
        - remove slapd-smbk5pwd binary package.
      - debian/rules: don't build smbk5pwd slapd module.
    + debian/{control,rules}: enable PIE hardening
    + ufw support (LP: #423246):
      - debian/control: suggest ufw.
      - debian/rules: install ufw profile.
      - debian/slapd.ufw.profile: add ufw profile.
    + Enable nssoverlay:
      - debian/patches/nssov-build, debian/series, debian/rules:
        Apply, build and package the nss overlay.
      - debian/schema/extra/misc.ldif: add ldif file for the misc schema
        which defines rfc822MailMember (required by the nss overlay).
    + debian/rules, debian/schema/extra/:
      Fix configure rule to supports extra schemas shipped as part
      of the debian/schema/ directory.
    + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544)
    + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in
     neither the default DIT nor via an Authn mapping.
    + debian/slapd.scripts-common: adjust minimum version that triggers a
      database upgrade. Upgrade from maverick shouldn't trigger database
      upgrade (which would happen with the version used in Debian).
    + debian/slapd.scripts-common: add slapcat_opts to local variables.
      Remove unused variable new_conf.
    + debian/slapd.script-common: Fix package reconfiguration.
      - Fix backup directory naming for multiple reconfiguration.
    + debian/slapd.default, debian/slapd.README.Debian:
      use the new configuration style.
    + Install nss overlay (LP: #675391):
      - debian/rules: run install target for nssov module.
      - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema
    + debian/patches/gssapi.diff:
      - Update patch so that likewise-open is usuable again. (LP: #661547)
    + debian/patches/service-operational-before-detach: New patch replacing old one
      of the same name as previous could cause database corruption based on upstream commits.
      (LP: #727973)
    + debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize()
      (CVE-2011-4079)

46. By Chuck Short on 2011-11-22

* Merge from Debian testing. Remaining changes:
  - Install a default DIT (LP: #442498).
  - Document cn=config in README file (LP: #370784).
  - remaining changes:
    + AppArmor support:
      - debian/apparmor-profile: add AppArmor profile
      - use dh_apparmor:
        - debian/rules: use dh_apparmor
        - debian/control: Build-Depends on debhelper 7.4.20ubuntu5
      - updated debian/slapd.README.Debian for note on AppArmor
      - debian/slapd.dirs: add etc/apparmor.d/force-complain
    + Enable GSSAPI support (LP: #495418):
      - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - debian/patches/series: apply gssapi.diff patch.
      - debian/configure.options: Configure with --with-gssapi
      - debian/control: Added libkrb5-dev as a build depend
    + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open (LP: #390579)
   + Don't build smbk5pwd overlay since it uses heimdal instead of krb5:
      - debian/control:
        - remove build-dependency on heimdal-dev.
        - remove slapd-smbk5pwd binary package.
      - debian/rules: don't build smbk5pwd slapd module.
    + debian/{control,rules}: enable PIE hardening
    + ufw support (LP: #423246):
      - debian/control: suggest ufw.
      - debian/rules: install ufw profile.
      - debian/slapd.ufw.profile: add ufw profile.
    + Enable nssoverlay:
      - debian/patches/nssov-build, debian/series, debian/rules:
        Apply, build and package the nss overlay.
      - debian/schema/extra/misc.ldif: add ldif file for the misc schema
        which defines rfc822MailMember (required by the nss overlay).
    + debian/rules, debian/schema/extra/:
      Fix configure rule to supports extra schemas shipped as part
      of the debian/schema/ directory.
    + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544)
    + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in
     neither the default DIT nor via an Authn mapping.
    + debian/slapd.scripts-common: adjust minimum version that triggers a
      database upgrade. Upgrade from maverick shouldn't trigger database
      upgrade (which would happen with the version used in Debian).
    + debian/slapd.scripts-common: add slapcat_opts to local variables.
      Remove unused variable new_conf.
    + debian/slapd.script-common: Fix package reconfiguration.
      - Fix backup directory naming for multiple reconfiguration.
    + debian/slapd.default, debian/slapd.README.Debian:
      use the new configuration style.
    + Install nss overlay (LP: #675391):
      - debian/rules: run install target for nssov module.
      - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema
    + debian/patches/gssapi.diff:
      - Update patch so that likewise-open is usuable again. (LP: #661547)
    + debian/patches/service-operational-before-detach: New patch replacing old one
      of the same name as previous could cause database corruption based on upstream commits.
      (LP: #727973)
    + debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize()
      (CVE-2011-4079)