forked from urbanserj/entente
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathchangelog
104 lines (61 loc) · 3.24 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
lightldapd (1.0.1-1) experimental; urgency=low
* Not yet released.
-- Donovan Baarda (abo) <abo@minkirri.apana.org.au> Thu, 02 Jan 2020 15:19:30 +1100
lightldapd (1.0.0-1) experimental; urgency=low
* Forked LightLdapd project from entente.
With permission and thanks to Sergey Urbanovich, the author of entente.
* Changed name from entente to lightldapd.
The forked project is now named LightLdapd, and the binary and cfgs have
been renamed to lightldapd.
* Changed license from MIT to GPLv3.
This means we require contributions to come back rather than spawn private
forks. I have confirmed with the entente author this is OK.
* Improve project documentation:
Add documentation based on templates in
http://minkirri.apana.org.au/~abo/projects/prjdocs/.
* Tidy code.
Reformat again using a different preferred style without tabs. Change `make
tidy` target to reformat using tidyc tool.
* #9,#10 Improve design.
Restructured using ldap_server, ldap_connection, ldap_request, ldap_reply
structs, copying the design of https://github.com/taf2/libebb.
* Extend Search support.
Extended search support enough to support libnss-ldap clients, exporting the
local nsswitch view of passwd/group/etc.
#3 Add support for typesOnly and attribute selection.
* #2 Optimize Search.
Added Filter_scope() analysis to figure out what the search is constrained
to instead of scanning everything.
* #4 Add StartTLS support.
StartTLS support with security checking before allowing bind implemented
using mbedtls.
* #13 Make served users/groups configurable.
Support serving only some user/group ranges using `-U` and `-G` arguments to
specify uid/gid ranges to export.
-- Donovan Baarda (abo) <abo@minkirri.apana.org.au> Thu, 02 Jan 2020 14:18:30 +1100
entente (1.1-1) experimental; urgency=low
* Improve options.
Make -b basedn argument work. Make -l loopback argument work. Simplified and
removed environment based settings.
* Make pam authentication failures non-blocking:
It will nolonger stall all connections ~2 seconds whenever someone tries a
bad user/passwd. Instead only the connection that failed to bind is paused
for time configured by pam_fail_delay.
* Improved bind result failure returncodes.
Changed the bind failure response resultcode from "other" to
"invalidDNSyntax" or "invalidCredentials", depending on why it failed.
* Tidy code.
Reformated using "indent -linux -l120". Added a "tidy" make target to do
this automatically.
Tidied up lots of code, simplifying methods, renaming things to be more
consistant, and make better use of common library functions.
Made all memory allocation checking to use "alloc or die" macro's, since
libev will abort on alloc failures anyway.
* Improved/updated debian build:
Updated for debhelper v9. Added debclean make target.
-- Donovan Baarda (abo) <abo@minkirri.apana.org.au> Sat, 25 Jan 2014 12:00:00 +1100
entente (0.1-1) experimental; urgency=low
* Initial Release.
Published at https://github.com/urbanserj/entente. Does enough to work as
a pam_ldap auth server.
-- Sergey Urbanovich <sergey.urbanovich@gmail.com> Sat, 11 Dec 2010 02:43:00 +0300