These are the upstream changelog entries since the last debian
version. I suspect the new upstream version fixes the segfaults, as
reported in bug #323580.
Please make a new debian package of libnss-ldap using the newer
upstream version.
249 Luke Howard <[EMAIL PROTECTED]>
* fix for BUG#253: build broken on AIX
* fix for BUG#255: deadlock in initgroups
248 Luke Howard <[EMAIL PROTECTED]>
* fix regression in per-objectclass attribute mapping
introduced in nss_ldap-246
247 Luke Howard <[EMAIL PROTECTED]>
* double-check *ld != NULL even if mapped eror return
from ldap_initialize() returns NSS_SUCCESS
246 Luke Howard <[EMAIL PROTECTED]>
* paged results and RFC2307bis support are now always
compiled in; they are by default disabled unless
you configured with --enable-paged-results and
--enable-rfc2307bis, respectively. See nss_ldap(5)
for configuration options.
* fix for BUG#219: paged results delivers wrong results
* fix for BUG#222: use asynchronous start TLS if
available, using bind_timeout value
* fix for BUG#235: make DNS SRV lookup domain
configurable (nss_srv_domain)
* fix for BUG#240: return "*" rather than "x" for
userPassword if not present
* fix for BUG#245: paged results broken since nss_ldap-241
* patch from Ralf Haferkamp <[EMAIL PROTECTED]>:
compile fix for IPv6
* compile for Solaris
* schema mapping is always enabled, cleanup schema
mapping code
* allow for map-specific objectclass mapping
* partial implementation of Solaris Simplified LDAP
API, allows automountd support on Solaris via nss_ldap
* for Linux automounter, always close connection after
endautomntent() to avoid persistent connection
* add nss_connect_policy argument to ldap.conf
245 Luke Howard <[EMAIL PROTECTED]>
* don't leak LDAP connection if do_bind() failed or
descriptor owner had changed. If do_bind() failed the
underlying descriptor would also be leaked, causing a
large number of sockets to be consumed during failover
* add nss_initgroups_ignoreusers parameter to ldap.conf,
returns NOTFOUND if nss_ldap's initgroups() is called
for users (comma separated)
* try to deal with systems that have headers for both
versions of the SASL library installed
* better logging of failed connections and reconnections
* patch from Dean Michaels <[EMAIL PROTECTED]>:
build with Netscape 5 library on Solaris
* patch from Ralf Haferkamp <[EMAIL PROTECTED]>:
manual page fix to bind_policy
244 Luke Howard <[EMAIL PROTECTED]>
* patch from Ralf Haferkamp <[EMAIL PROTECTED]>:
enusre bytesleft macro does not return values < 0
* include <sys/param.h> in ldap-nss.c
243 Luke Howard <[EMAIL PROTECTED]>
* fix for BUG#225: invalid pointer dereferencing when
reading rootpw
242 Luke Howard <[EMAIL PROTECTED]>
* fixes for compiling on Solaris 10
241 Luke Howard <[EMAIL PROTECTED]>
* new, more robust reconnection logic
* both "host" and "uri" directives can be used in
ldap.conf
* new (undocumented) nss_reconnect_tries,
nss_reconnect_sleeptime, nss_reconnect_maxsleeptime,
nss_reconnect_maxconntries directives
* reload configuration file if changed
240 Luke Howard <[EMAIL PROTECTED]>
* new API for resolving automounts (requires custom
autofs plugin for Linux at present):
_nss_ldap_setautomntent(), _nss_ldap_getautomntent(),
_nss_ldap_endautomntent(), _nss_ldap_getautomntbyname_r()
* fix for BUG#200: rename SOCKLEN_T as it conflicts on AIX
* fix for BUG#205: accept line feeds in ldap.conf
* fix for BUG#211: nss_ldap fails to start TLS on referred
connections
* fix for BUG#213: initgroups crash if RFC2307bis undefined
* turn down reconnection logging volume
239 Luke Howard <[EMAIL PROTECTED]>
* support for initgroups using backlinks (selectable
at runtime if RFC2307bis support is enabled, using
the nss_initgroups backlink configuration directive)
* support for dynamically expanding filter sizes
* from Peter Marschall <[EMAIL PROTECTED]>:
revert the deletion of blanks/tabs in ldap.conf that
happened between 235 and 238
* from Peter Marschall <[EMAIL PROTECTED]>:
This patch changes configure.in and Makefile.am so that
ldap.conf gets installed in the place and with the name
that is given to the configure option --with-ldap-conf-file.
In addition to that it fixes a long standing bug in
Makefile.am that tries to install a file before the
destination directory is guaranteed to be created (hunk #3),
and uses $(mkinstalldirs) for AIX (hunk #2).
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
