Timo Aaltonen
13eccb0520
control: Add systemd to build-depends.
2015-04-02 10:07:42 +03:00
Timo Aaltonen
c45905e465
dont-check-for-systemd-pc.diff: Dropped, not needed anymore.
2015-04-02 10:06:18 +03:00
Timo Aaltonen
48ec7738c1
add-a-clear-openssl-exception.diff: Add a clear OpenSSL exception. ( Closes : #772136 )
2015-04-02 08:48:04 +03:00
Timo Aaltonen
c69b6d0ffd
freeipa-client.postrm: Purge /etc/pki if empty. ( Closes : #781114 )
2015-03-25 14:48:23 +02:00
Timo Aaltonen
f3e37256c0
control: Add systemd-sysv to server depends. ( Closes : #780386 )
2015-03-13 15:11:26 +02:00
Timo Aaltonen
dd9ca7dccc
further deps
2015-03-13 15:10:05 +02:00
Timo Aaltonen
43f0418d63
sort freeipa-tests deps
2015-03-05 15:50:32 +02:00
Timo Aaltonen
d275653d61
control: Fix freeipa-tests depends.
2015-03-05 15:49:14 +02:00
Timo Aaltonen
997da94cd0
releasing package freeipa version 4.0.5-3
2015-03-04 14:52:46 +02:00
Timo Aaltonen
122e36a6b4
fix stack size env typo
2015-03-04 14:35:20 +02:00
Timo Aaltonen
a935b07a70
freeipa-client.postinst: Fix bashism with echo. ( Closes : #772242 )
2015-03-04 12:27:33 +02:00
Timo Aaltonen
d80f5e3046
freeipa-client.postrm: Remove nssdb files on purge. ( Closes : #775387 )
2015-03-04 12:17:56 +02:00
Timo Aaltonen
d6095cbb02
rules: Set JAVA_STACK_SIZE to hopefully avoid FTBFS on exotic archs.
2015-03-04 12:11:27 +02:00
Benjamin Drung
f802f5bad7
releasing package freeipa version 4.0.5-2
2014-11-24 12:32:52 +01:00
Benjamin Drung
03c373b473
Fix paths of Javascript files
2014-11-24 12:16:12 +01:00
Benjamin Drung
3b7c2498a6
Drop unused PD license section
2014-11-24 12:12:33 +01:00
Benjamin Drung
78453a1c57
Let python-freeipa depend on python-pyasn1.
...
pyasn1 is imported by ipalib/pkcs10.py and ipalib/plugins/cert.py.
2014-11-24 11:44:39 +01:00
Benjamin Drung
671a50bc86
Run wrap-and-sort -s
2014-11-24 11:44:14 +01:00
Timo Aaltonen
ccb5ddc2dc
releasing package freeipa version 4.0.5-1
2014-11-11 10:54:59 +02:00
Timo Aaltonen
33eff3c548
platform: Handle /etc/default/nfs-common and /etc/default/autofs. ( Closes : #769037 )
...
and drop NSS_DB_DIR which is inherited already
2014-11-11 10:26:29 +02:00
Timo Aaltonen
0d8b1f1e95
bump dyndb-ldap dep
2014-11-07 11:43:26 +02:00
Timo Aaltonen
0fad84cc46
bump changelog, fix a typo
2014-11-07 11:42:40 +02:00
Timo Aaltonen
59e3ec9726
Merge branch 'upstream'
2014-11-07 11:36:22 +02:00
Timo Aaltonen
34d6b0f740
control: Add python-dateutils to server, and python-dbus and python- memcache to python-freeipa dependencies. ( Closes : #768187 )
2014-11-07 11:08:09 +02:00
Petr Vobornik
65a0b586ef
Become IPA 4.0.5
2014-11-06 12:47:20 +01:00
Nathaniel McCallum
013e2eae20
Ensure that a password exists after OTP validation
...
Before this patch users could log in using only the OTP value. This
arose because ipapwd_authentication() successfully determined that
an empty password was invalid, but 389 itself would see this as an
anonymous bind. An anonymous bind would never even get this far in
this code, so we simply deny requests with empty passwords.
This patch resolves CVE-2014-7828.
https://fedorahosted.org/freeipa/ticket/4690
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2014-11-06 10:56:19 +01:00
Thierry bordaz (tbordaz)
a56a6aff88
Deadlock in schema compat plugin (between automember_update_membership task and dse update)
...
Defining schema-compat-ignore-subtree values for schema compat plugin config entries removes the
default value (ignore: cn=tasks,cn=config). This default value prevented deadlocks.
Schema plugin needs to scope the $SUFFIX and also any updates to its configuration.
This change restrict the schema compat to those subtrees. It replaces the definition of ignored subtrees
that would be too long for cn=config (tasks, mapping tree, replication, snmp..)
https://fedorahosted.org/freeipa/ticket/4635
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2014-11-06 10:53:39 +01:00
Martin Basti
d6697b683d
Fix upgrade: do not use invalid ldap connection
...
Ticket: https://fedorahosted.org/freeipa/ticket/4670
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2014-11-06 10:45:16 +01:00
Timo Aaltonen
965d1073e8
control: Relax libxmlrpc-core-c3-dev buil-dep and 389-ds-base dep for easier backporting.
2014-11-05 20:37:34 +02:00
Timo Aaltonen
dadffcde1d
control: Move dependency on python-qrcode and python-yubico to python-freeipa and drop python-selinux which belongs to pki-server.
2014-11-05 20:34:28 +02:00
Timo Aaltonen
03eab6c951
bump bind9-dyndb-ldap dep again
2014-11-05 18:59:57 +02:00
Timo Aaltonen
04fcd775f8
update fix-bind-conf.diff to not use the dot zone, as that's already on default-zones
2014-11-05 18:44:08 +02:00
Timo Aaltonen
7a818c10fc
fix non-standard-dir-perm lintian overrides
2014-11-05 17:38:48 +02:00
Timo Aaltonen
14195ded65
set NAMED_CONF = named.conf
2014-11-05 17:14:07 +02:00
Timo Aaltonen
81567fcda6
control: Bump dependency on bind9-dyndb-ldap.
2014-11-05 14:44:24 +02:00
Timo Aaltonen
877759b7a1
copyright: Fix a typo.
2014-11-05 14:43:30 +02:00
Timo Aaltonen
bc8d3b377a
Add non-standard-dir-perm to server lintian overrides.
2014-11-05 14:42:37 +02:00
Timo Aaltonen
3c973969eb
rules: Fix var/lib/ipa/backup permissions.
2014-11-05 14:42:11 +02:00
Timo Aaltonen
3a985634e8
rules, -server.postinst: Create /var/cache/bind/data owned by bind user.
2014-11-05 14:33:50 +02:00
Timo Aaltonen
ae77a903eb
fix-bind-conf.diff: Fix bind config template to use Debian specific paths. ( Closes : #768122 )
2014-11-05 14:31:42 +02:00
Timo Aaltonen
2335913bd5
control: Update my email address.
2014-11-04 12:17:00 +02:00
Timo Aaltonen
6f5dc453f8
releasing package freeipa version 4.0.4-2
2014-10-31 11:57:47 +02:00
Timo Aaltonen
d0ad846c3b
fix -qrcode dep version
2014-10-31 11:31:05 +02:00
Timo Aaltonen
2093b2e159
control: Bump server dependency on -mod-nss to 1.0.10-2 which doesn't enable the module by default.
2014-10-31 11:18:06 +02:00
Timo Aaltonen
2382166101
freeipa-server.postinst: Enable mod_authz_user and mod_deflate too, but since they should be part of the default apache2 install, don't disable them on uninstall like the other modules. ( Closes : #767425 )
2014-10-31 08:12:06 +02:00
Timo Aaltonen
eafdec6dfe
control: Add python-qrcode, python-selinux, python-yubico to freeipa-server dependencies. ( Closes : #767427 )
2014-10-31 07:53:35 +02:00
Timo Aaltonen
0cc1e70d09
releasing package freeipa version 4.0.4-1
2014-10-28 12:07:21 +02:00
Timo Aaltonen
732a7fffcb
add patch descriptions, fix a typo
2014-10-25 02:07:43 +03:00
Timo Aaltonen
a2bdd48dd4
clean up changelog entries that have little meaning by now
2014-10-25 01:58:25 +03:00
Timo Aaltonen
f23f3aadce
bump 389-ds-base dep so that saslpath fix is there
2014-10-25 01:54:28 +03:00
