# changelog

author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-4
changelog:
  - fix various testsuite failures
  - fix exception propagation from private key passphrase callback (#1227505)
  - add optional digest parameter to CRL.export method (#1523772)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Paul Howarth <paul@city-fan.org> - 0.6-1.p24.9
changelog:
  - add missing buildreq latex2html, needed to build HTML docs
  - rewrite to be more in line with Fedora python spec template and use
    %{python_sitearch} rather than a script-generated %files list
  - package is not relocatable - drop Prefix: tag
  - buildreq perl not necessary
  - fix permissions for files going into debuginfo package


author: Mihai Ibanescu <misa@redhat.com> 0.5.1-12
changelog:
  - lynx no longer supported, using elinks instead (patch from
    Michael Redinger <michael.redinger@uibk.ac.at>, bug #101947 )


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fix for bug 73967: site-packages/OpenSSL not owned by this package
  - Adding hacks around the lack of latex2html on ia64


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Building 0.5.1rc1 with version number 0.5.0.91 (this should also fix the big
    error of pushing 0.5pre previously, since it breaks rpm's version comparison
    algorithm).
  - We use %{__python}. Too bad I can't pass --define's to distutils.


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.2-4
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
  - Skip sysinit gtests properly
  - Fix shell syntax error in tests/ssl/ssl.sh
  - Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Rebase to NSS 3.44
  - Restore fix-min-library-version-in-SSLVersionRange.patch to keep
    SSL3 supported in the code level while it is disabled by policy
  - Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
  - Don't override date in man-pages
  - Revert the change to use XDG basedirs (mozilla#818686)
  - Enable SSL2 compatible ClientHello by default
  - Disable SSL3 and RC4 by default


author: Bob Relyea <rrelyea@redhat.com> - 3.43.0-2
changelog:
  - Expand IPSEC usage to include ssl and email certs. Remove special
    processing of the usage based on the critical flag


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-7
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-11
changelog:
  - Backport patch to simplify transcript calculation for CertificateVerify
  - Enable TLS 1.3 and RSA-PSS
  - Disable some upstream tests failing due to downstream ciphersuites changes


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-3
changelog:
  - Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - Switch default hash algorithm used by tools from SHA-1 to SHA-256
  - Avoid race condition in nssSlot_IsTokenPresent()
  - Enable SHA-2 and AES in pk12util
  - Disable RSA-PSS for now


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-4
changelog:
  - Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
  - Backport changes adding SSL alert callbacks from upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel7.config


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-3
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka
  - Enable new algorithms supported by the new nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-3
changelog:
  - Remove %nss_cycles setting, which was also mistakenly added
  - Re-enable BUILD_OPT, mistakenly disabled in the previous build
  - Prevent ABI incompatibilty of SECKEYECPublicKey
  - Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
  - Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
    patch in the previous release
  - Fix crash with tstclnt -W
  - Always enable gtests for supported features
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Build with support for SSLKEYLOGFILE
  - Disable the use of RSA-PSS with SSL/TLS


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.0
changelog:
  - Rebase to NSS 3.28.2
  - Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
    is no-op now
  - Enable gtests when requested
  - Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
    not necessary
  - Remove sslauth-no-v2.patch and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
    already disabled in upstream
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove local patches for SHA384 cipher suites (now supported in
    upstream): dhe-sha384-dss-support.patch,
    client_auth_for_sha384_prf_support.patch,
    nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
    nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
    fix-allowed-sig-alg.patch, tests-extra.patch
  - Remove upstreamed patches: rh1238290.patch,
    fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
    call-restartmodules-in-nssinit.patch


author: Kai Engert <kaie@redhat.com> - 3.21.0-16
changelog:
  - enable ssl_gtests (without extended master secret tests), Bug 1298692
  - call SECMOD_RestartModules in nss_Init, Bug 1317691


author: Kai Engert <kaie@redhat.com> - 3.21.0-14
changelog:
  - Support TLS 1.2 certificate_verify hashes other than PRF,
    backported fix from NSS 3.25 (upstream bug 1179338).


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-13
changelog:
  - Fix reuse of session cache entry
  - Resolves: Bug 1241172 - Certificate verification fails with multiple https urls


author: Kai Engert <kaie@redhat.com> - 3.21.0-5
changelog:
  - Merge fixes from the rhel-7.2 branch
  - Fix the SigAlgs sent in certificate_request
  - Ensure all ssl.sh tests are executed
  - Update sslauth test patch to run additional tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-19
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Fix a mockbuild reported bad %if condition when using the __isa_bits macro instead of list of 64-bit architectures
  - Change the test to %if 0%{__isa_bits} == 64 as required for building the srpm which is noarch
  - Resolves: Bug 1289884


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-17
changelog:
  - Change the required_softokn_build_version back to -13
  - Ensure we use nss-softokn-3.16.2.3-13.el7_1


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-16
changelog:
  - Fix check for public key size of DSA certificates
  - Use size of prime P not the size of dsa.publicValue


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-14
changelog:
  - Update the required_softokn_build_version to -14
  - Add references to bugs filed upstream for new patches
  - Merge ocsp stapling and sslauth sni tests patches into one


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-13
changelog:
  - Reorder the cipher suites and enable two more by default
  - Fix some of the ssauth sni and ocsp stapling tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-12
changelog:
  - Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
  - Enable ECDSA cipher suites by default, a subset of the ones requested


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
  - Fix libssl ssl2/export disabling patch to handle NULL cipher cases
  - Enable additional cipher suites by default


author: Kai Engert <kaie@redhat.com> - 3.19.1-5
changelog:
  - Incremental patches to fix SSL/TLS test suite execution,
    fix the earlier SHA384 patch, and inform clients to use SHA384 with
    certificate_verify if required by NSS.


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-4
changelog:
  - Add support for sha384 tls cipher suites
  - Add support for server-side hde key exchange
  - Add support for DSS+SHA256 ciphersuites


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Reverse the sense of a test in patch to fix pk12util segfault
  - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Fix race condition
  - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
  - under the replication replay failure condition


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-10
changelog:
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <pbrobinson@redhat.com> 3.16.2-3
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Fix libssl and test patches that disable ssl2 support
  - Resolves: Bug 1123435
  - Replace expired PayPal test certificate with current one


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-4
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem module fixes verified on RHEL and applied upstream
  - Remove no loger needed pem patches on acccount on this update
  - Add comments documenting the iquote.patch 
  - Resolves: Bug 1054457 - CVE-2013-1740


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Remove spurious man5 wildcard entry as all manpages are listed by name
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
  - Remove no longer needed patches for manpages that were applied upstream
  - Remove no longer needed patch to disable ocsp stapling tests
  - Update iquote.patch on account of upstream changes
  - Update and rename patch to pem/rsawrapr.c on account of upstream changes
  - Use the pristine upstream sources for nss without repackaging
  - Avoid unneeded manual step which may introduce errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Fix the spec file to apply the nss ecc list patch for bug 752980
  - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Move several nss-sysinit manpages tar archives to the %files
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Fix a coverity scan compile time warning for the pem module
  - Resolves: Bug 1002271 - NSS pem module should not require unique base file names


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Improve pluggable ECC support for ECDSA
  - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-10
changelog:
  - Fix path to script and remove -- from some options in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-9
changelog:
  - Fix certutil man page options names to be consistent with help
  - Resolves: rhbz#948495 - man page scan results for nss
  - Remove incorrect count argument in status description in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-8
changelog:
  - Fix patch for disabling ssl2 in ssl to correctly set error code
  - Fix syntax error reported in the build.log even tough it succeeds
  - Add patch top ignore setpolicy result 
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
  - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-7
changelog:
  - Fix bash syntax error in patch for disabling ssl2 tests
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-6
changelog:
  - Fix errors in ssl disabling patches for both library and tests
  - Add s390x to the multilib_arches definition used for alt_ckbi
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-4
changelog:
  - Enable fips when system is in fips mode
  - Resolves: rhbz#852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Add description of the certutil's --email option to it's manpage
  - Resolves: rhbz#Bug 948495 - Man page scan results for nss


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-3.15.2
  - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Install symlink to nss-sysinit.sh without the .sh suffix
  - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Update to NSS_3_15_1_RTM
  - Apply various fixes to the man pages and add new ones
  - Enable the iquote.patch to access newly introduced types
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Add missing option descriptions for {cert|cms|crl}util
  - Resolves: rhbz#948495 - Man page scan results for nss
  - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer 
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792) 
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Phil Sutter <psutter@redhat.com> [0.8-13.el7]
changelog:
  - doc: Add minimal description of (v)map statements (Phil Sutter) [1628974]
  - nft.8: Update meta pkt_type value description (Phil Sutter) [1628694]


author: Phil Sutter <psutter@redhat.com> [0.8-11.el7]
changelog:
  - src: Reject 'export vm json' command (Phil Sutter) [1646336]
  - monitor: Drop fake XML support (Phil Sutter) [1646336]
  - src: bail out when exporting ruleset with unsupported output (Phil Sutter) [1646336]


author: Phil Sutter <psutter@redhat.com> [0.8-9.el7]
changelog:
  - evaluate: explicitly deny concatenated types in interval sets (Phil Sutter) [1576426]
  - Deprecate add/insert rule 'position' argument (Phil Sutter) [1571968]
  - doc: reword insert position, this expects rule handle to insert, not a relative postition (Phil Sutter) [1571968]
  - nft.8: Fix reject statement documentation (Phil Sutter) [1571938]
  - netlink_delinearize: Fix resource leaks (Phil Sutter) [1504157]
  - netlink: Complain if setting O_NONBLOCK fails (Phil Sutter) [1504157]
  - hash: Fix potential null-pointer dereference in hash_expr_cmp() (Phil Sutter) [1504157]
  - evaluate: Fix memleak in stmt_reject_gen_dependency() (Phil Sutter) [1504157]
  - erec: Avoid passing negative offset to fseek() (Phil Sutter) [1504157]
  - cli: Drop pointless check in cli_append_multiline() (Phil Sutter) [1504157]
  - monitor: Make JSON/XML output respect output_fp (Phil Sutter) [1504157]
  - monitor: Make trace events respect output_fp (Phil Sutter) [1504157]
  - Review switch statements for unmarked fall through cases (Phil Sutter) [1504157]


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
  - netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
  - src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Phil Sutter <psutter@redhat.com> [0.6-4.el7]
changelog:
  - evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
  - src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
  - include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
  - datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
  - meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
  - src: meta priority support using tc classid (Phil Sutter) [1380326]
  - src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
  - src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
  - payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
  - evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]


author: Phil Sutter <psutter@redhat.com> [0.6-3.el7]
changelog:
  - nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
  - evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
  - netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
  - src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Tim Powers <timp@redhat.com> 1:1.4.2-7
changelog:
  - include dejagnu.h
  - move %{_libexecdir}/config.guess into %{_datadir}/dejagnu 
  - include overview docs (bug #59095)


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.22.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS now)
  - remove buildrequires for nss-devel (#550770)


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Ondrej Vasik <ovasik@redhat.com> 0.12-0.1.pre1
changelog:
  - unstable elinks-0.12 pre1, solves several long-term issues 
    unsolvable (or very hard to solve) in 0.11.4 (like #173411),
    in general is elinks-0.12pre1 considered better than 0.11.4
  - dropped patches negotiate-auth, chunkedgzip - included in 0.12pre1,
    modified few others due source code changes


author: Ondrej Vasik <ovasik@redhat.com> 0.11.3-2
changelog:
  - cleanup of duplicates in buildreq, added license file to doc 
  - (package review by Tyler Owen(#225725))


author: Ondrej Vasik <ovasik@redhat.com> 0.11.3-1
changelog:
  - update to new upstream version
  - removed patch for #210103 , included in upstream release
  - updated patch elinks-0.11.1-negotiate.patch to pass build


author: Karel Zak <kzak@redhat.com> 0.11.0-1
changelog:
  - update to new upstream version
  - fix 0.11.0 build system (srcdir.patch)
  - regenerate patches:
       elinks-0.11.0-getaddrinfo.patch, 
       elinks-0.11.0-ssl-noegd.patch,
       elinks-0.11.0-sysname.patch,
       elinks-0.11.0-union.patch


author: Miloslav Trmac <mitr@redhat.com> - 0.10.3-2
changelog:
  - Fix checking for numeric command prefix (#152953, patch by Jonas Fonseca)
  - Fix invalid C causing assertion errors on ppc and ia64 (#156647)


author: Tim Waugh <twaugh@redhat.com> 0.4.2-6
changelog:
  - Make getaddrinfo call use AI_ADDRCONFIG.
  - Don't put so much information in the user-agent header string (bug #97273).


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - update to 0.3.2 to fix the DNS Ctrl-C segfaults
  - update URLs, the project moved
  - include man page


author: Rahul Sundaram <sundaram@fedoraproject.org> 20110227-1
changelog:
  - New upstream release.  Resolves rhbz#654800
  - Update spec to match current guidelines
  - Some spec file fixes from Alexander Todorov. Resolves rhbz#632559
  - Drop patch


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.8
changelog:
  - Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.7
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.6
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.5
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.4
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.3
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.2
changelog:
  - Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.1
changelog:
  - Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4
changelog:
  - Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1660544 config: recursive include check doesn't work
  - Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-2
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229


author: Paul Wouters <pwouters@redhat.com> - 3.21-2
changelog:
  - Resolves: rhbz#1499845 libreswan does not establish IKE with xauth enabled but modecfg disabled
  - Resolves: rhbz#1497158 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Miroslav Lichvar <mlichvar@redhat.com> 5.7-5.20100116
changelog:
  - fix narrow/wide libtinfo compatibility
  - fix wattrset macro to not produce warning with current gcc (#556645)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-13.20080112
changelog:
  - update to patch 20080112
  - make -libs, -base, -term subpackages
  - obsolete termcap and libtermcap
  - update urxvt entry


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-10.20070812
changelog:
  - fix comp_hash string output
  - avoid comparing padding in cchar_t structure
  - remove gawk from buildrequires


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-6.20070303
changelog:
  - update to patch 20070303
  - use one libtinfo for both libncurses and libncursesw
  - shorten -devel description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-4.20070210
changelog:
  - update to patch 20070210
  - generate separate terminfo library
  - move static libraries to -static subpackage
  - avoid unnecessary linking with libdl


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-2.20070120
changelog:
  - update to patch 20070120
  - don't depend on bash, drop resetall script
  - include rxvt-unicode description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-27.20061209
changelog:
  - update to patch 20061209
  - strip large tables from shared libraries, reduce number of relocations
  - package utils linked with libncurses instead of libncursesw
  - package only wide-character headers


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-25.20060715
changelog:
  - move libncurses and some terminfo entries out of /usr
  - drop console symlink and sparc terminfo entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 5.5-11
changelog:
  - According Henrik Nordstrom (hno@squid-cache.org)
    Diff between the two versions of curses.h on x86_64
    Patch ncurses-5.5-chtypeaslong2.patch
    See #178824


author: Petr Raszyk <praszyk@redhat.com> 5.4-21
changelog:
  - Clear window after: filter()+'terminal-resizing'+endwin()
    doupdate()+endwin()
    See bug #174498, patch ncurses-5.4-endwinfilter.patch


author: 5.4-19 <praszyk@redhat.com> 5.4-19
changelog:
  - Clear window after: filter()+initscr()+endwin()+refresh()
    See bug #2966, patch ncurses-5.4-filter.patch


author: Petr Rockai <prockai@redhat.com> - 5.4-17
changelog:
  - apply patch from Hans de Goede, fixing BR142659 [The
    terminfo data for kbs changed from \177 to ^H]


author: Adrian Havill <havill@redhat.com> 5.4-11
changelog:
  - add latest rollup patches and weekly patches
  - remove home/end patch, which is now included in latest
    terminfo.src and termcap.src
  - add term.sh to /etc/profile.d, reference in /etc/bashrc
  - modify term.sh to support rxvt (#122815 comment 93)


author: Adrian Havill <havill@redhat.com> 5.4-9
changelog:
  - remove terminfo try-to-please-all xterm hackery; it's now ptty
    and profile's job to point to the correct terminal. (#122815)


author: Adrian Havill <havill@redhat.com> 5.4-5
changelog:
  - remove --with-gpm from configure, as it adds a pkg
    dependency (#122336) and causes too many problems vs its benefits


author: Adrian Havill <havill@redhat.com> 5.4-3
changelog:
  - link "xterm" to "xterm-color" as temp fix for escape problem (#115448)
  - remove old zcat for PATCH1


author: Adrian Havill <havill@redhat.com> 5.3-9
changelog:
  - remove not-so safe-sprintf configure option because the code does
    not appear to be stable enough for some apps. (#103790)


author: Adrian Havill <havill@redhat.com> 5.3-7
changelog:
  - fixed the safe sprintf code that was enabled in the previous release
    by the configure parameter. (#101486)


author: Adrian Havill <havill@redhat.com> 5.3-5
changelog:
  - added latest rollup patch with widec/UTF8 centric weekly (20030517)
  - added --enable-widec to configure (#86311)
    original work done by Mr. Sam <sam@email-scan.com>
  - require sharutils (#86605)
  - add gpm, xmc support
  - add debug syms back into package
  - updated autoconf/configure patch


author: Adrian Havill <havill@redhat.com> 5.3-3
changelog:
  - remunged xterm changes from 5.2 patch for 5.3
  - updated screen entry (#82951)
  - fixed ka3, kb2 and kf0 entries (#77506)


author: Adrian Havill <havill@redhat.com> 5.3-1
changelog:
  - upgrade to 5.3 for sake of utf-8, wide chars (#77585 ...)
  - spec file summary/desc grammar (#73583)
  - add Requires: for c++ devel subpkg (#74002)
  - terminfo.src patches no longer needed
  - adjust autoconf patch


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26
changelog:
  - Remove duplicated files (#62752)
  - Don't strip libraries (#60398)
  - Remove cbt capability from xterm description (#61077)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17
changelog:
  - Patchlevel 20020209
  - Fix zero-substitution of cf_cv_type_of_bool (#59450)
  - Fix rebuilding of configure script with autoconf 2.5x


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.2
  - Fix typo in man page (Bug #20205)
  - update the "screen" terminfo entries to the version supplied with
    screen 3.9.8


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Add xterm patch from Hans de Goede <hans@highrise.nl>
  - Patch 20000108, this fixes a problem with a header file.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - revert to the old major number - because the ABI is not changed (and we
    should be handling the changes via symbol versioning anyway)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix a typo in spec
  - Add the 19991006 patch, fixing some C++ STL compatibility problems.
  - get rid of profiling and debugging versions - we need to save space...


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.0
  - some spec cleanups to make updating easier
  - add links *.so.5 to *.so.4 - they are fully binary compatible.
    (Why did they change the invocation number???)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - don't build the C++ demo code
  - update patch set to the current as of today (redid all the individual
    patches in a single one)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added terminfo entry for the poor guys using lat1 and/or lat-2 on their
    consoles... Enjoy linux-lat ! Thanks, Erik !


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - new patch to get xterm-color and nxterm terminfo entries
  - aliased them to rxvt, as that seems to satisfy everybody


author: Petr Pisar <ppisar@redhat.com> - 1.8.5-4
changelog:
  - Start service independently on network state (bug #824205)
  - Do not force systemd logging to syslog (bug #824205)


author: Jiri Skala <jskala@redhat.com> - 1.5-3
changelog:
  - spec file uses Source1 for radvd.init no more init from tarball
  - radvd.init modified to make rmplint more silent
  - removed userdel usage from postun


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - remove '-g %{RADVD_GID}' when creating the user, which may be problematic
    if the user didn't exist before.


author: Bernhard Rosenkraenzer <bero@redhat.com> 0.7.1-1
changelog:
  - 0.7.1 (bugfix release, #61023), fixes:
    - Check that forwarding is enabled when starting radvd
      (helps avoid odd problems) 
    - Check configuration file permissions (note: in setuid operation, must not
      be writable by the user.group) 
    - Cleanups and enhancements for radvdump
    - Ensure NULL-termination with strncpy even with overlong strings
      (non-criticals, but better safe than sorry) 
    - Update config.{guess,sub} to cope with some newer architectures 
    - Minor fixes and cleanups


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - License unfortunately is BSD *with* advertising clause, so to be pedantic,
    change License: to 'BSD-style'.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - update to 0.62pl1.  Bye bye patches!
  - Require: initscripts (should really be with a version providing IPv6)
  - clean up the init script, make condrestart work properly
  - Use a static /etc/rc.d/init.d; init.d/radvd required it anyway.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add patch to chroot (doesn't work well yet, as /proc is used directly)
  - clean up droproot patch, drop the rights earlier; require user-writable
  pidfile directory
  - set up the pidfile directory at compile time.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add select/kill signals patch from Nathan Lutchansky <lutchann@litech.org>.
  - add address syntax checked fix from Marko Myllynen <myllynen@lut.fi>.
  - add patch to check the pid file before fork.
  - add support for OPTIONS sourced from /etc/sysconfig/radvd, provide a nice
  default one.
  - add/delete radvd user, change the pidfile to /var/run/radvd/radvd.pid.
  - fix initscript NETWORKING_IPV6 check.


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch supplied by Pekka Savola in #30508
  - made changes to initscript as per Pekka's suggestions


author: Tim Powers <timp@redhat.com>
changelog:
  - use %configure and %makeinstall, just glob the manpages, cleans
    things up
  - fixed initscript so that it can be internationalized in the future


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Create a single package(source) for glibc21 and glibc22 (automatic
  Requires can handle this just fine).
  - use %{_mandir} and friends
  - add more flesh to %doc
  - streamline %config file %attrs
  - streamline init.d file a bit:
     * add a default chkconfig: (default to disable for security etc. reasons; 
       also, the default config isn't generic enough..)
     * add reload/condrestart
     * minor tweaks
     * missing: localization support (initscripts-5.60)
  - use %initdir macro


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Patrice Dumas <pertusus[AT]free.fr> - 5.1.1-4
changelog:
  - separate subpackage for static library
  - keep timestamps
  - add more paths to t1libconfig and use rpm macros for those paths
  - fix the -maxdepth position in find
  - put t1lib.config and FontDatabase in %{_datadir} these are not
    config files, they are generated
  - fix a segfault in t1lib with long TYPE1 lines


author: Michael A. Peters <mpeters@mac.com> - 5.1.0-1
changelog:
  - updated version
  - remove Patch0 (in upstream), added Patch6
  - Does not BuildRequire xfree/xorg devel
  - no longer BuildRequire autoconf (Patch0 removed)


author: Paul Howarth <paul@city-fan.org> - 0.73-1
changelog:
  - Update to 0.73
    - Constrain the user-specified digest name to /^\w+\d+$/
    - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)


author: Paul Howarth <paul@city-fan.org> - 0.69-1
changelog:
  - Update to 0.69
    - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2
  - This release by AUDREYT -> update source URL
  - BR:/R: perl(Text::Diff)
  - Include Andreas Koenig's GPG key in the SRPM and import it in %prep so
    that we don't need to get it from a keyserver in %check


author: Paul Howarth <paul@city-fan.org> - 0.68-5
changelog:
  - BR: perl(constant), perl(Data::Dumper) and perl(lib)
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.68-3
changelog:
  - BR: perl(Exporter) and perl(ExtUtils::Manifest)
  - Use %{_fixperms} macro rather than our own chmod incantation


author: Ville Skyttä <ville.skytta@iki.fi> - 0.52-1
changelog:
  - 0.52
  - Run non-live tests during build and make live ones optional, enabled
    when building with "--with livetests"


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.38-0.fdr.4
changelog:
  - Really use pure_install (bug 1606)
  - Fix build with older mktemp versions which require a template (bug 1606)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.38-0.fdr.3
changelog:
  - Fix build in setups which do not generate debug packages (bug 1606)
  - Require perl >= 1:5.6.1 for vendor install dir support
  - Use pure_install to avoid perllocal.pod workarounds


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Nalin Dahyabhai <nalin@redhat.com> - 2.9.0-1
changelog:
  - update to 2.9.0 (#970065)
    - adds FascistCheckUser()
  - go ahead and compress the main dictionary, since we're linking with zlib
    anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.22-1
changelog:
  - update to 2.8.22 (#887461), which now returns an error instead of exiting
    when there's a failure opening the dictionary in FascistCheck()


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.19-3
changelog:
  - update the copy of the debian source package to one that can currently be
    retrieved using the URL we list for it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.18-1
changelog:
  - update to 2.8.18
  - add man pages from Debian (#583932)
  - replace zh_CN translation (related to #627449)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.13-1
changelog:
  - update to 2.8.13, which overhauls the python bindings and revises
    FascistCheck()'s behavior:
    2.8.12 success: returns None, fail: returns error text, other: exceptions
    2.8.13 success: returns candidate, fail: throws ValueError, other: exceptions


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.12-1
changelog:
  - update to 2.8.12, which was relicensed to GPLv2
  - package the now-bundled cracklib-small dictionary in cracklib-dicts


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-11
changelog:
  - improve reports of out-of-memory exceptions so that they don't include a
    bogus filename
  - improve reports of file-missing exceptions from the python module so that
    they give the right filename (#225858)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-10
changelog:
  - explicitly include required headers from <packer.h> (#228698)
  - attempt to provide doc strings in the python module


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-9
changelog:
  - drop final "." from summaries (Jef Spaleta, #225659)
  - drop static library from -devel subpackage (Jef Spaleta, #225659)
  - note that the most recently-added wordlist came from bugzilla (#225659)
  - remove explicit dependency on gzip, as it's implicit (Jef Spaleta, #225659)
  - convert %triggerpostun to not use a shell as an interpreter (#225659)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-7
changelog:
  - fix check for the existence of dictionaries when the caller specifies a
    location (#224347, upstream #1644628)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-2
changelog:
  - update to 2.8.9
  - only create compat symlinks for the dictionaries if we aren't installing
    them into the old locations


author: Nalin Dahyabhai <nalin@redhat.com> 2.8.1-1
changelog:
  - update to 2.8.1
    - moves dictionary to new default location under %{_datadir} -- the
      dictionary format is the same across all architectures
    - renames "packer" to "cracklib-packer"
  - conflict with cracklib-dicts < 2.8, where the on-disk format was not
    compatible on 64-bit arches due to now-fixed cleanliness bugs
  - move binaries for manipulating and checking words against dictionaries
    from -dicts into the main package


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-29
changelog:
  - correctly build on 64-bit systems (part of #143417)
  - patch so that 32- and 64-bit libcrack can read dictionaries which were
    incorrectly generated on 64-bit systems of the same endianness (more #143417)
  - include a sample cracklib magic file
  - stop using /usr/dict/* when building the dictionary
  - list words as a build requirement, which it is, instead of a run-time
    requirement
  - provide a virtual arch-specific dep in cracklib-dicts, require it in
    cracklib (part of #143417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-25
changelog:
  - fix ldconfig invocation in trigger for older versions which included the
    soname symlink (#114620)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-24
changelog:
  - include packer.h for reading dictionaries directly, since we already include
    packer in the -dicts subpackage (#68339)
  - don't include the soname symlink in the package, let ldconfig do its job


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-12
changelog:
  - remove cruft that ldconfig already knows how to manage
  - don't explicitly strip anything -- the brp setup decides that
  - tweak the header so that it can be used in C++ (#46685)
  - buildprereq the words package


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
  - Merge tests sub-package back into main package
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Mark Tutorial.pod as %doc
  - Drop explicit dependency on perl-devel


author: Michal Nowak <mnowak@redhat.com> - 20020502-1
changelog:
  - renamed from unikurd-web-font -> kurdit-unikurd-web-fonts
  - enhanced %description field
  - changes for F11 fonts rules
  - add Obsoletes: unikurd-web-font <= 20020502-1


author: Michal Nowak <mnowak@redhat.com> - 20020502
changelog:
  - version is now based on date of last issue of the font
  - %defattr(-,root,root,-) -> %defattr(644,root,root,755)


author: Michal Nowak <mnowak@redhat.com> - 1.00-2
changelog:
  - got rid of -web sub-package
  - changed name from unikurd-fonts-web to unikurd-web-font
  - minor structural changes in SPEC file


author: Michal Nowak <mnowak@redhat.com> - 1.00-1
changelog:
  - initial packaging
  - this package should be prepared for another unikurd fonts
    in sub-packages because on the KurdIT group/unikurd web there
    are plenthora of them, but probably not under suitable licenses


author: Than Ngo <than@redhat.com> - 3.11-1
changelog:
  - 3.11
  - bz#540763, add IP allocation by pppd ability to pppoe-server
  - bz#808676, add missing % symbol for triggerun


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Than Ngo <than@redhat.com>
changelog:
  - Copyright -> License
  - fix activate ethernet device problem
  - get rid of pppoe initscript, use ifup/ifdown
    to activate/shutdown xDSL connection
  - convert old pppoe config format into new format
  - remove adsl-setup, Users have to use netconf to setup xDSL connection
  - excludearch s390


author: Than Ngo <than@redhat.com>
changelog:
  - fixed so that pppoe script does not kill adsl connection when
    the runlevel is changed. 
  - remove excludearch ia64


author: Than Ngo <than@redhat.de>
changelog:
  - /etc/rc.d/init.d -> /etc/init.d
  - add condrestart directive
  - fix post/preun/postun scripts
  - prereq initscripts >= 5.20


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.00-1
changelog:
  - Upstream update.
  - Deactivate t/release-pod-coverage.t 
    (Add Params-Validate-1.00-no-pod-coverage.patch).


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.99-3
changelog:
  - Fix up bogus Tue Jun 28 2011 changelog entry.
  - Fix License (Artistic2.0).
  - Add BR: perl(Test::CPAN:Changes).


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.98-1
changelog:
  - Upstream update.
  - Spec cleanup.
  - Rework BR's.
  - Reflect upstream having abandoned AUTHOR_TESTING.
  - Make spell-checking tests working/work-around aspell/hunspell/perl(Test::Spelling)
    issues (add Params-Validate-0.98.diff).


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-11
changelog:
  - Resolves: rhbz#1350012 - kinit / sssd kerberos fail over
  - Resolves: rhbz#720688 - [RFE] return multiple server addresses to the
                            Kerberos locator plugin


author: Michal Židek <mzidek@redhat.com> - 1.16.4-9
changelog:
  - Resolves: rhbz#1666819 - SSSD can trigger a NSS lookup when parsing the
                             filter_users/groups lists on startup, this can
                             block the startup


author: Michal Židek <mzidek@redhat.com> - 1.16.4-8
changelog:
  - Resolves: rhbz#1645461 - Slow ldb search causes blocking during startup
                             which might cause the registration to time out


author: Michal Židek <mzidek@redhat.com> - 1.16.4-7
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover
                             subdomains / trusts


author: Michal Židek <mzidek@redhat.com> - 1.16.4-6
changelog:
  - Resolves: rhbz#1671138 - User is unable to perform sudo as a user on IPA
                             Server, even though `sudo -l` shows permissions
                             to do so


author: Michal Židek <mzidek@redhat.com> - 1.16.4-5
changelog:
  - Resolves: rhbz#1657806 - [RFE]: Optionally disable generating auto private
                             groups for subdomains of an AD provider


author: Michal Židek <mzidek@redhat.com> - 1.16.4-4
changelog:
  - Resolves: rhbz#1641131 - [RFE] Need an option in SSSD so that it will skip
                             GPOs that have groupPolicyContainers, unreadable
                             by SSSD.
  - Resolves: rhbz#1660874 - CVE-2018-16838 sssd: improper implementation of
                             GPOs due to too restrictive permissions [rhel-7]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-3
changelog:
  - Resolves: rhbz#1631656 - KCM: kinit: Matching credential not found while
                             getting default ccache


author: Michal Židek <mzidek@redhat.com> - 1.16.4-2
changelog:
  - Resolves: rhbz#1406678 - sssd service is starting before network service
  - Resolves: rhbz#1616853 - SSSD always boots in Offline mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-17
changelog:
  - Resolves: rhbz#1603311 - Enable generating user private groups only for
                             users with uid == gid where gid does not
                             correspond to a real LDAP group


author: Michal Židek <mzidek@redhat.com> - 1.16.2-16
changelog:
  - Resolves: rhbz#1602172 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 1.16.2-14
changelog:
  - Resolves: rhbz#1619706 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13
changelog:
  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12
changelog:
  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10
changelog:
  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8
changelog:
  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7
changelog:
  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6
changelog:
  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5
changelog:
  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4
changelog:
  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-3
changelog:
  - Resolves: rhbz#1494690 - kdcinfo files are not created for subdomains of a directly joined AD client
  - Resolves: rhbz#1583343 - Login with sshkeys stored in ipa not working after update to RHEL-7.5
  - Resolves: rhbz#1527662 - Handle conflicting e-mail addresses more gracefully
  - Resolves: rhbz#1509691 - Document how to change the regular expression for SSSD so that group names with an @-sign can be parsed


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Resolves: rhbz#1558498 - Rebase sssd to the latests upstream release of the 1.16 branch
  - Resolves: rhbz#1523019 - Reset password with two factor authentication fails
  - Resolves: rhbz#1534749 - Requesting an AD user's private group and then the user itself returns an emty homedir
  - Resolves: rhbz#1537272 - SSH public key authentication keeps working after keys are removed from ID view
  - Resolves: rhbz#1537279 - Certificate is not removed from cache when it's removed from the override
  - Resolves: rhbz#1562025 - externalUser sudo attribute must be fully-qualified
  - Resolves: rhbz#1577335 - /usr/libexec/sssd/sssd_autofs SIGABRT crash daily
  - Resolves: rhbz#1508530 - How should sudo behave without sudoHost attribute?
  - Resolves: rhbz#1546754 - The man page of sss_ssh_authorizedkeys can be enhanced to better explain how the keys are retrieved and how X.509 certificates can be used
  - Resolves: rhbz#1572790 - getgrgid/getpwuid fails in setups with multiple domains if the first domain uses mid_id/max_id
  - Resolves: rhbz#1561562 - sssd not honoring dyndns_server if the DNS update process is terminated with a signal
  - Resolves: rhbz#1583251 - home dir disappear in sssd cache on the IPA master for AD users
  - Resolves: rhbz#1514061 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set
  - Resolves: rhbz#1571466 - Utilizing domain_resolution_order in sssd.conf breaks SELinux user map
  - Resolves: rhbz#1571526 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-25
changelog:
  - Resolves: rhbz#1547782 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-24
changelog:
  - Related: rhbz#1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-23
changelog:
  - Resolves: rhbz#1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-22
changelog:
  - Resolves: rhbz#1516266 - Give a more detailed debug and system-log message if krb5_init_context() failed
  - Resolves: rhbz#1503802 - Smartcard authentication fails if SSSD is offline and 'krb5_store_password_if_offline = True'
  - Resolves: rhbz#1385665 - Incorrect error code returned from krb5_child (updated)
  - Resolves: rhbz#1547234 - SSSD's GPO code ignores ad_site option
  - Resolves: rhbz#1459348 - extend sss-certmap man page regarding priority processing
  - Resolves: rhbz#1220767 - Group renaming issue when "id_provider = ldap" is set
  - Resolves: rhbz#1538555 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-20
changelog:
  - Resolves: rhbz#1566782 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-18
changelog:
  - Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
  - Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-17
changelog:
  - Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                             server


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-16
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-15
changelog:
  - Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                             subdomain initialization - IPA AD Trust
  - Related: rhbz#1482555 - sysdb index improvements - missing ghost
                            attribute indexing, unneeded objectclass index
                            etc..
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                             gidNumber = 0
  - Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                            a primed cache
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-13
changelog:
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked cert
                             on smart card


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-12
changelog:
  - Resolves: rhbz#1512027 - NSS by-id requests are not checked against
                             max_id/min_id ranges before triggering the
                             backend


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-11
changelog:
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked
                             cert on smart card
  - Resolves: rhbz#1520984 - getent output is not showing home directory
                             for IPA AD trusted user
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-10
changelog:
  - Resolves: rhbz#1421194 - SSSD doesn't use AD global catalog for
                             gidnumber lookup, resulting in unacceptable
                             delay for large forests


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-9
changelog:
  - Resolves: rhbz#1482231 - sssd_nss consumes more memory until
                             restarted or machine swaps
  - Resolves: rhbz#1512508 - SSSD fails to fetch group information after
                             switching IPA client to a non-default view


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-8
changelog:
  - Resolves: rhbz#1490120 - SSSD complaining about corrupted mmap cache
                             and logging error in /var/log/messages and
                             /var/log/sssd/sssd_nss.log


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-7
changelog:
  - Resolves: rhbz#1272214 - [RFE] Create a local per system report about
                             who can access that IDM client (attestation)
  - Resolves: rhbz#1482555 - sysdb index improvements - missing ghost
                             attribute indexing, unneeded objectclass index
                             etc..
  - Resolves: rhbz#888739 -  Enumerating large number of users makes sssd_be
                             hog the cpu for a long time.
  - Resolves: rhbz#1373547 - SSSD performance issue with malloc and brk
                             calls
  - Resolves: rhbz#1472255 - Improve SSSD performance in the 7.5 release


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-6
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1432010 - SSSD ships a drop-in configuration snippet in
                            /etc/systemd/system
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-5
changelog:
  - Resolves: rhbz#1507614 - Improve Smartcard integration if multiple
                             certificates or multiple mapped identities are
                             available
  - Related: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                            searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1408294 - SSSD authentication fails when two IPA
                             accounts share an email address without a
                             clear way to debug the problem
  - Resolves: rhbz#1502686 - crash - /usr/libexec/sssd/sssd_nss in
                             nss_setnetgrent_timeout


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-4
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1459609 - When sssd is configured with id_provider proxy
                            and auth_provider ldap, login fails if the LDAP
                            server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-3
changelog:
  - Resolves: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                             threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-2
changelog:
  - Resolves: rhbz#1484376 - [RFE] Add a configuration option to SSSD to
                             disable the memory cache
  - Resolves: rhbz#1327705 - Automatic creation of user private groups on
                             RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1505277 - Race condition between refreshing the cr_domain
                             list and a request that is using the list can
                             cause a segfault is sssd_nss
  - Resolves: rhbz#1462343 - document information on why SSSD does not use
                             host-based security filtering when processing
                             AD GPOs
  - Resolves: rhbz#1498734 - sssd_be stuck in an infinite loop after
                             completing full refresh of sudo rules
  - Resolves: rhbz#1400614 - [RFE] sssd should remember DNS sites from
                             first search
  - Resolves: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Resolves: rhbz#1459609 - When sssd is configured with id_provider proxy
                             and auth_provider ldap, login fails if the LDAP
                             server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-1
changelog:
  - Resolves: rhbz#1469791 - Rebase SSSD to version 1.16+
  - Resolves: rhbz#1132264 - Allow sssd to retrieve sudo rules of local
                             users whose sudo rules stored in ldap server
  - Resolves: rhbz#1301740 - sssd can be marked offline if a trusted domain
                             is not reachable
  - Resolves: rhbz#1399262 - Use TCP for kerberos with AD by default
  - Resolves: rhbz#1416150 - RFE: Log to syslog when sssd cannot contact
                             servers, goes offline
  - Resolves: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Resolves: rhbz#1454559 - python-sssdconfig doesn't parse hexadecimal debug
                             _level, resulting in set_option():
                             /usr/lib/python2.7/site-packages/SSSDConfig/__init__.py
                             killed by TypeError
  - Resolves: rhbz#1456968 - MAN: document that attribute 'provider' is not
                             allowed in section 'secrets'
  - Resolves: rhbz#1460689 - KCM/secrets: Storing many secrets in a rapid
                             succession segfaults the secrets responder
  - Resolves: rhbz#1464049 - Idle nss file descriptors should be closed
  - Resolves: rhbz#1468610 - sssd_be is utilizing more CPU during sudo rules
                             refresh
  - Resolves: rhbz#1474711 - Querying the AD domain for external domain's ID can
                             mark the AD domain offline
  - Resolves: rhbz#1479398 - samba shares with sssd authentication broken on 7.4
  - Resolves: rhbz#1479983 - id root triggers an LDAP lookup
  - Resolves: rhbz#1489895 - Issues with certificate mapping rules
  - Resolves: rhbz#1490501 - sssd incorrectly checks 'try_inotify' thinking it is
                             the wrong section
  - Resolves: rhbz#1490913 - MAN: Document that full_name_format must be set if
                             the output of trusted domains user resolution should
                             be shortnames only
  - Resolves: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1461899 - Loading enterprise principals doesn't work with a
                             primed cache
  - Resolves: rhbz#1482674 - SUDO doesn't work for IPA users on IPA clients after
                             applying ID Views for them in IPA server
  - Resolves: rhbz#1486053 - Accessing IdM kerberos ticket fails while id mapping
                             is applied
  - Resolves: rhbz#1486786 - sssd going in offline mode due to sudo search filter.
  - Resolves: rhbz#1500087 - SSSD creates bad override search filter due to AD
                             Trust object with parenthesis
  - Resolves: rhbz#1502713 - SSSD can crash due to ABI changes in libldb >= 1.2.0
                             (1.1.30)
  - Resolves: rhbz#1461462 - sssd_client: add mutex protected call to the PAC
                             responder
  - Resolves: rhbz#1489666 - Combination sssd-ad and postfix recieve incorrect
                             mail with asterisks or spaces
  - Resolves: rhbz#1525052 - sssd_krb5_localauth_plugin fails to fallback to otheri
                             localname rules


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-51
changelog:
  - Require the 7.5 libldb version which broke ABI
  - Related: rhbz#1469791 - Rebase SSSD to version 1.16+


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-41
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-40
changelog:
  - Resolves: rhbz#1449729 - org.freedesktop.sssd.infopipe.GetUserGroups
                             does not resolve groups into names with AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-39
changelog:
  - Resolves: rhbz#1450094 - Properly support IPA's promptusername config
                             option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-38
changelog:
  - Resolves: rhbz#1457644 - Segfault in access_provider = krb5 is set in
                             sssd.conf due to an off-by-one error when
                             constructing the child send buffer
  - Resolves: rhbz#1456531 - Option name typos are not detected with validator
                             function of sssctl config-check command in domain
                             sections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-37
changelog:
  - Resolves: rhbz#1428906 - sssd intermittently failing to resolve groups
                             for an AD user in IPA-AD trust environment.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-36
changelog:
  - Resolves: rhbz#1389796 - Smartcard authentication with UPN as logon name
                             might fail
  - Fix Coverity issues in patches for rhbz#1445445


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-34
changelog:
  - Resolves: rhbz#1446302 - crash in sssd-kcm due to a race-condition
                             between two concurrent requests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-32
changelog:
  - Resolves: rhbz#1306707 - Need better debug message when krb5_child
                             returns an unhandled error, leading to a
                             System Error PAM code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-31
changelog:
  - Resolves: rhbz#1446535 - Group resolution does not work in subdomain
                             without ad_server option


author: Sumit Bose <sbose@redhat.com> - 1.15.2-30
changelog:
  - Resolves: rhbz#1449726 - sss_nss_getlistbycert() does not return results from
                             multiple domains
  - Resolves: rhbz#1447098 - sssd unable to search dbus for ipa user by
                             certificate
  - Additional patch for rhbz#1440132


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-29
changelog:
  - Reapply patch by Lukas Slebodnik to fix upgrade issues with libwbclient
  - Resolves: rhbz#1439457 - SSSD does not start after upgrade from 7.3 to 7.4 
  - Resolves: rhbz#1449107 - error: %pre(sssd-common-1.15.2-26.el7.x86_64)
                             scriptlet failed, exit status 3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-28
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15
  - Also apply an additional patch for rhbz#1441545


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-24
changelog:
  - Resolves: rhbz#1434992 - Wrong pam return code for user from subdomain
                             with ad_access_filter


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.2-23
changelog:
  - Resolves: rhbz#1430494 - expect sss_ssh_authorizedkeys and
                             sss_ssh_knownhostsproxy manuals to be packaged
                             into sssd-common package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-22
changelog:
  - Resolves: rhbz#1427749 - SSSD in server mode iterates over all domains
                             for group-by-GID requests, causing unnecessary
                             searches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-21
changelog:
  - Resolves: rhbz#1446139 - Infopipe method ListByCertificate does not
                             return the users with overrides


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-20
changelog:
  - Resolves: rhbz#1441545 - With multiple subdomain sections id command
                             output for user is not displayed for both domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-19
changelog:
  - Resolves: rhbz#1428866 - Using ad_enabled_domains configuration option
                             in sssd.conf causes nameservice lookups to fail.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-18
changelog:
  - Remove an unused variable from the sssd-secrets responder
  - Related: rhbz#1398701 - [sssd-secrets] https proxy talks plain http
  - Improve two DEBUG messages in the client trust code to aid troubleshooting
  - Fix standalone application domains
  - Related: rhbz#1425891 - Support delivering non-POSIX users and groups
                            through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-17
changelog:
  - Allow completely server-side unqualified name resolution if the domain order is set,
    do not require any client-side changes
  - Related: rhbz#1330196 - [RFE] Short name input format with SSSD for users from
                            all domains when domain autodiscovery is used or when
                            IPA client resolves trusted AD domain users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-16
changelog:
  - Resolves: rhbz#1402532 - D-Bus interface of sssd is giving inappropriate
                             group information for trusted AD users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-15
changelog:
  - Resolves: rhbz#1431858 - Wrong principal found with ad provider and long
                             host name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-14
changelog:
  - Resolves: rhbz#1415167 - pam_acct_mgmt with pam_sss.so fails in
                             unprivileged container unless
                             selinux_provider = none is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-13
changelog:
  - Resolves: rhbz#1438388 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_pam killed by 6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-12
changelog:
  - Resolves: rhbz#1432112 - sssctl config-check does not give any error
                             when default configuration file is not present


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-11
changelog:
  - Resolves: rhbz#1438374 - [abrt] [faf] sssd: vfprintf():
                             /usr/libexec/sssd/sssd_be killed by 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-10
changelog:
  - Resolves: rhbz#1427195 - sssd_nss consumes more memory until restarted
                             or machine swaps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-9
changelog:
  - Resolves: rhbz#1414023 - Create troubleshooting tool to determine if a
                             failure is in SSSD or not when using layered
                             products like RH-SSO/CFME etc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-7
changelog:
  - Fix off-by-one error in the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-6
changelog:
  - Resolves: rhbz#1425891 - Support delivering non-POSIX users and groups
                             through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-5
changelog:
  - Resolves: rhbz#1434991 - Issue processing ssh keys from certificates in
                             ssh respoder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-4
changelog:
  - Resolves: rhbz#1330196 - [RFE] Short name input format with SSSD for
                             users from all domains when domain autodiscovery
                             is used or when IPA client resolves trusted AD
                             domain users
  - Also backport some buildtime fixes for the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-2
changelog:
  - Resolves: rhbz#1340711 - [RFE] Use one smartcard and certificate for
                             authentication to distinct logon accounts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-1
changelog:
  - Update to upstream 1.15.2
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
  - Resolves: rhbz#1418728 - IPA - sudo does not handle associated conflict
                             entries
  - Resolves: rhbz#1386748 - sssd doesn't update PTR records if A/PTR zones
                             are configured as non-secure and secure
  - Resolves: rhbz#1214491 - [RFE] Make it possible to configure AD subdomain
                             in the SSSD server mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream 1.15.1
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
  - Resolves: rhbz#1327085 - Don't prompt for password if there is already
                             one on the stack
  - Resolves: rhbz#1378722 - [RFE] Make GETSIDBYNAME and GETORIGBYNAME
                             request aware of UPNs and aliases
  - Resolves: rhbz#1405075 - [RFE] Add PKINIT support to SSSD Kerberos provider
  - Resolves: rhbz#1416526 - Need correction in sssd-krb5 man page
  - Resolves: rhbz#1418752 - pam_sss crashes in do_pam_conversation if no
                             conversation function is provided by the
                             client app
  - Resolves: rhbz#1419356 - Fails to accept any sudo rules if there are
                             two user entries in an ldap role with the same
                             sudo user
  - Resolves: rhbz#1421622 - SSSD - Users/Groups are cached as mixed-case
                             resulting in users unable to sign in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-2
changelog:
  - Fix several packaging issues, notably the p11_child is no longer setuid
    and the libwbclient used a wrong version number in the symlink


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-1
changelog:
  - Update to upstream 1.15.0
  - Resolves: rhbz#1393824 - Rebase SSSD to version 1.15
  - Resolves: rhbz#1407960 - wbcLookupSid() fails in pdomain is NULL
  - Resolves: rhbz#1406437 - sssctl netgroup-show Cannot allocate memory
  - Resolves: rhbz#1400422 - Use-after free in resolver in case the fd is
                             writeable and readable at the same time
  - Resolves: rhbz#1393085 - bz - ldap group names don't resolve after
                             upgrading sssd to 1.14.0 if ldap_nesting_level is set to 0
  - Resolves: rhbz#1392444 - sssd_be keeps crashing
  - Resolves: rhbz#1392441 - sssd fails to start after upgrading to RHEL 7.3
  - Resolves: rhbz#1382602 - autofs map resolution doesn't work offline
  - Resolves: rhbz#1380436 - sudo: ignore case on case insensitive domains
  - Resolves: rhbz#1378251 - Typo In SSSD-AD Man Page
  - Resolves: rhbz#1373427 - Clock skew makes SSSD return System Error
  - Resolves: rhbz#1306707 - Need better handling of "Server not found in
                             Kerberos database"
  - Resolves: rhbz#1297462 - Don't include 'enable_only=sssd' in the localauth
                             plugin config


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-45
changelog:
  - Resolves: rhbz#1378911 - No supplementary groups are resolved for users
                             in nested OUs when domain stanza differs from AD
                             domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-44
changelog:
  - Resolves: rhbz#1372075 - AD provider: SSSD does not retrieve a domain-local
                             group with the AD provider when following AGGUDLP
                             group structure across domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-42
changelog:
  - Resolves: rhbz#1371631 - login using gdm calls for gdm-smartcard when
                             smartcard authentication is not enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-40
changelog:
  - Resolves: rhbz#1375299 - sss_groupshow <user> fails with error "No such
                             group in local domain. Printing groups only
                             allowed in local domain"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-39
changelog:
  - Resolves: rhbz#1375182 - SSSD goes offline when the LDAP server returns
                             sizelimit exceeded


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-38
changelog:
  - Resolves: rhbz#1372753 - Access denied for user when access_provider =
                             krb5 is set in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-37
changelog:
  - Resolves: rhbz#1373444 - unable to create group in sssd cache
  - Resolves: rhbz#1373577 - unable to add local user in sssd to a group in sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-35
changelog:
  - Fix permissions for the private pipe directory
  - Resolves: rhbz#1362716 - selinux avc denial for vsftp login as ipa user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-32
changelog:
  - Resolves: rhbz#1371152 - SSSD qualifies principal twice in IPA-AD trust
                             if the principal attribute doesn't exist on the
                             AD side


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-31
changelog:
  - Apply forgotten patch
  - Resolves: rhbz#1368496 - sssd is not able to authenticate with alias
  - Resolves: rhbz#1366470 - sssd: throw away the timestamp cache if
                             re-initializing the persistent cache
  - Fix deleting non-existent secret
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-28
changelog:
  - Resolves: rhbz#1364033 - sssd exits if clock is adjusted backwards
                             after boot


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-27
changelog:
  - Resolves: rhbz#1362023 - SSSD fails to start when ldap_user_extra_attrs
                             contains mail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-26
changelog:
  - Resolves: rhbz#1368324 - libsss_autofs.so is packaged in two packages
                             sssd-common and libsss_autofs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-25
changelog:
  - Fix RPM scriptlet plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-24
changelog:
  - Add socket-activation plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-22
changelog:
  - Resolves: rhbz#1268874 - Add an option to disable checking for trusted
                             domains in the subdomains provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-21
changelog:
  - Resolves: rhbz#1271280 - sssd stores and returns incorrect information
                             about empty netgroup (ldap-server: 389-ds)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-20
changelog:
  - Resolves: rhbz#1290500 - [feat] command to manually list
                             fo_add_server_to_list information


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-19
changelog:
  - Add several small fixes related to the config API
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-18
changelog:
  - Resolves: rhbz#1349900 - gpo search errors out and gpo_cache file is
                             never created


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-17
changelog:
  - Fix regressions in the simple access provider
  - Resolves: rhbz#1360806 - sssd does not start if sub-domain user is used
                             with simple access provider
  - Apply a number of specfile patches to better match the upstream spefile
  - Related: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-16
changelog:
  - Cherry-pick patches from upstream that fix several regressions
  - Avoid checking local users in all cases
  - Resolves: rhbz#1353951 - sssd_pam leaks file descriptors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-15
changelog:
  - Resolves: rhbz#1364118 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_nss killed by 11
  - Resolves: rhbz#1361563 - Wrong pam error code returned for password
                             change in offline mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-13
changelog:
  - Resolves: rhbz#1304992 - Handle overriden name of members in the
                             memberUid attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-12
changelog:
  - handle unresolvable sites more gracefully
  - Resolves: rhbz#1346011 - sssd is looking at a server in the GC of a
                             subdomain, not the root domain.
  - fix compilation warnings in unit tests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-11
changelog:
  - fix capaths output
  - Resolves: rhbz#1344940 - GSSAPI error causes failures for child domain
                             user logins across IPA - AD trust
  - also fix Coverity issues in the secrets responder and suppress noisy
    debug messages when setting the timestamp cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-9
changelog:
  - Resolves: rhbz#1354414 - New or modified ID-View User overrides are not
                             visible unless rm -f /var/lib/sss/db/*cache*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-7
changelog:
  - Resolves: rhbz#1350520 - [abrt] sssd-common: ipa_dyndns_update_send():
                             sssd_be killed by SIGSEGV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-6
changelog:
  - Resolves: rhbz#1349882 - sssd does not work under non-root user
  - Also cherry-pick a few patches from upstream to fix config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-5
changelog:
  - Sync a few minor patches from upstream
  - Fix sssctl manpage
  - Fix nss-tests unit test on big-endian machines
  - Fix several issues in the config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-3
changelog:
  - Sync a few minor patches from upstream
  - Fix a failover issue
  - Resolves: rhbz#1334749 - sssd fails to mark a connection as bad on
                             searches that time out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-2
changelog:
  - Explicitly BuildRequire newer ding-libs
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-1
changelog:
  - New upstream release 1.14.0
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#835492 - [RFE] SSSD admin tool request - force reload
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)
  - Resolves: rhbz#1278691 - Please fix rfc2307 autofs schema defaults
  - Resolves: rhbz#1287209 - default_domain_suffix Appended to User Name
  - Resolves: rhbz#1300663 - Improve sudo protocol to support configurations
                             with default_domain_suffix
  - Resolves: rhbz#1312275 - Support authentication indicators from IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0beta1-2
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#790113 - [RFE] "include" directive in sssd.conf
  - Resolves: rhbz#874985 - [RFE] AD provider support for automount lookups
  - Resolves: rhbz#879333 - [RFE] SSSD admin tool request - status overview
  - Resolves: rhbz#1140022 - [RFE]Allow sssd to add a new option that would
                             specify which server to update DNS with
  - Resolves: rhbz#1290380 - RFE: Improve SSSD performance in large
                             environments
  - Resolves: rhbz#883886 - sssd: incorrect checks on length values during
                            packet decoding
  - Resolves: rhbz#988207 - sssd does not detail which line in configuration
                            is invalid
  - Resolves: rhbz#1007969 - sssd_cache does not remove have an option to
                             remove the sssd database
  - Resolves: rhbz#1103249 - PAC responder needs much time to process large
                             group lists
  - Resolves: rhbz#1118257 - Users in ipa groups, added to netgroups are
                             not resovable
  - Resolves: rhbz#1269018 - Too much logging from sssd_be
  - Resolves: rhbz#1293695 - sssd mixup nested group from AD trusted domains
  - Resolves: rhbz#1308935 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user
  - Resolves: rhbz#1315766 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo
  - Resolves: rhbz#1316164 - SSSD fails to process GPO from Active Directory
  - Resolves: rhbz#1322458 - sssd_be[11010]: segfault at 0 ip 00007ff889ff61bb
                             sp 00007ffc7d66a3b0 error 4 in
                             libsss_ipa.so[7ff889fcf000+5d000]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0alpha-1
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - The rebase includes fixes for the following bugzillas:
  - Resolves: rhbz#789477 - [RFE] SUDO: Support the IPA schema
  - Resolves: rhbz#1059972 - RFE: SSSD: Automatically assign new slices for
                             any AD domain
  - Resolves: rhbz#1233200 - man sssd.conf should clarify details about
                             subdomain_inherit option.
  - Resolves: rhbz#1238144 - Need better libhbac debuging added to sssd
  - Resolves: rhbz#1265366 - sss_override segfaults when accidentally adding
                             --help flag to some commands
  - Resolves: rhbz#1269512 - sss_override: memory violation
  - Resolves: rhbz#1278566 - crash in sssd when non-Englsh locale is used
                             and pam_strerror prints non-ASCII characters
  - Resolves: rhbz#1283686 - groups get deleted from the cache
  - Resolves: rhbz#1290378 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1292238 - extreme memory usage in libnfsidmap sss.so
                             plug-in when resolving groups with many members
  - Resolves: rhbz#1292456 - sssd_be AD segfaults on missing A record
  - Resolves: rhbz#1294670 - Local users with local sudo rules causes
                             LDAP queries
  - Resolves: rhbz#1296618 - Properly remove OriginalMemberOf attribute in
                             SSSD cache if user has no secondary groups anymore
  - Resolves: rhbz#1299553 - Cannot retrieve users after upgrade from 1.12
                             to 1.13
  - Resolves: rhbz#1302821 - Cannot start sssd after switching to non-root
  - Resolves: rhbz#1310877 - [RFE] Support Automatic Renewing of Kerberos
                             Host Keytabs
  - Resolves: rhbz#1313014 - sssd is not closing sockets properly
  - Resolves: rhbz#1318996 - SSSD does not fail over to next GC
  - Resolves: rhbz#1327270 - local overrides: issues with sub-domain users
                             and mixed case names
  - Resolves: rhbz#1342547 - sssd-libwbclient: wbcSidsToUnixIds should not
                             fail on lookup errors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-50
changelog:
  - Build the PAC plugin with krb5-1.14
  - Related: rhbz#1336688 - sssd tries to resolve global catalog servers
                            from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-49
changelog:
  - Resolves: rhbz#1336688 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-48
changelog:
  - Resolves: rhbz#1290853 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-47
changelog:
  - Resolves: rhbz#1336706 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-46
changelog:
  - Resolves: rhbz#1296902 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-45
changelog:
  - Resolves: rhbz#1334159 - IPA provider crashes if a netgroup from a
                             trusted domain is requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-44
changelog:
  - Resolves: rhbz#1308913 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-42
changelog:
  - Resolves: rhbz#1300740 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-30
changelog:
  - Patches required for better handling of failover with one-way trusts
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA subdomain
                            code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-29
changelog:
  - Resolves: rhbz#1263587 - sss_override --name doesn't work with RFC2307
                             and ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-26
changelog:
  - Resolves: rhbz#1256398 - sssd cannot resolve user names containing
                             backslash with ldap provider


author: Martin Kosek <mkosek@redhat.com> - 1.13.0-25
changelog:
  - Resolves: rhbz#1254189 - sss_override contains an extra parameter --debug
                             but is not listed in the man page or in
                             the arguments help


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-23
changelog:
  - Support import/export for local overrides
  - Support FQDNs for local overrides
  - Resolves: rhbz#1254184 - sss_override does not work correctly when
                             'use_fully_qualified_names = True'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-22
changelog:
  - Resolves: rhbz#1244950 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-20
changelog:
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA
                            subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-19
changelog:
  - Resolves: rhbz#1202724 - [RFE] Add a way to lookup users based on CAC
                             identity certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-16
changelog:
  - Fix race condition in invalidating the memory cache
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-15
changelog:
  - Resolves: rhbz#1249015 - KDC proxy not working with SSSD krb5_use_kdcinfo
                             enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-14
changelog:
  - Bump release number
  - Related: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                            named pysss"


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-13
changelog:
  - Fix missing dependency of sssd-tools
  - Resolves: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                             named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-12
changelog:
  - More memory cache related fixes
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-11
changelog:
  - Remove binary blob from SC patches as patch(1) can't handle those
  - Related: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-10
changelog:
  - Resolves: rhbz#1244949 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-9
changelog:
  - Fix memory cache integration tests
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-8
changelog:
  - Remove OTP from PAM stack correctly
  - Related: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                            user logs in with password and token code from IPA
  - Handle sssd-owned keytabs when sssd runs as root
  - Related: rhbz#1205144 - RFE: Support one-way trusts for IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1206565 - [RFE] Add dualstack and multihomed support
  - Resolves: rhbz#1187146 - If v4 address exists, will not create nonexistant
                             v6 in ipa domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-3
changelog:
  - Add support for InfoPipe wildcard requests
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 upstream
  - Related: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Resolves: rhbz#910187 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0.1alpha
changelog:
  - Resolves: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Relax the libldb requirement
  - Resolves: rhbz#1221992 - sssd_be segfault at 0 ip sp error 6 in
                             libtevent.so.0.9.21
  - Resolves: rhbz#1221839 - SSSD group enumeration inconsistent due to
                             binary SIDs
  - Resolves: rhbz#1219285 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Resolves: rhbz#1217559 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1217350 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1217127 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1216285 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set
  - Resolves: rhbz#1214719 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1214718 - Overridde with --login fails trusted adusers
                             group membership resolution
  - Resolves: rhbz#1214716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1214337 - Overrides with --login work in second attempt
  - Resolves: rhbz#1212489 - Disable the cleanup task by default
  - Resolves: rhbz#1211830 - external users do not resolve with
                             "default_domain_suffix" set in IPA server sssd.conf
  - Resolves: rhbz#1210854 - Only set the selinux context if the context
                             differs from the local one
  - Resolves: rhbz#1209483 - When using id_provider=proxy with
                             auth_provider=ldap, it does not work as expected
  - Resolves: rhbz#1209374 - Man sssd-ad(5) lists Group Policy Management
                             Editor naming for some policies but not for all
  - Resolves: rhbz#1208507 - sysdb sudo search doesn't escape special characters
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface
  - Resolves: rhbz#1206566 - SSSD does not update Dynamic DNS records if
                             the IPA domain differs from machine hostname's
                             domain
  - Resolves: rhbz#1206189 - [bug] sssd always appends default_domain_suffix
                             when checking for host keys
  - Resolves: rhbz#1204203 - sssd crashes intermittently
  - Resolves: rhbz#1203945 - [FJ7.0 Bug]: getgrent returns error because
                             sss is written in nsswitch.conf as default
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only
  - Resolves: rhbz#1202245 - SSSD's HBAC processing is not permissive enough
                             with broken replication entries
  - Resolves: rhbz#1201271 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything
  - Resolves: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                             user logs in with password and token code from IPA
  - Resolves: rhbz#1199541 - Read and use the TTL value when resolving a
                             SRV query
  - Resolves: rhbz#1199533 - [RFE] Implement background refresh for users,
                             groups or other cache objects
  - Resolves: rhbz#1199445 - Does sssd-ad use the most suitable attribute
                             for group name?
  - Resolves: rhbz#1198477 - ccname_file_dummy is not unlinked on error
  - Resolves: rhbz#1187103 - [RFE] User's home directories are not taken
                             from AD when there is an IPA trust with AD
  - Resolves: rhbz#1185536 - In ipa-ad trust, with 'default_domain_suffix' set
                             to AD domain, IPA user are not able to log unless
                             use_fully_qualified_names is set
  - Resolves: rhbz#1175760 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires
  - Resolves: rhbz#1163806 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1205160 - Complain loudly if backend doesn't start due
                             to missing or invalid keytab


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-60
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1201840 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-59
changelog:
  - Resolves: rhbz#1201840 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1192314 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-37
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-2
changelog:
  - make link checking optional, to avoid needing to pull in linkchecker and
  its dependencies (rbhz#823930)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-2
changelog:
  - fix broken link to "Global Module Index", and add a %check, verifying the
  absence of broken links (rhbz#670493)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-1
changelog:
  - move to 2.6.4
  - drop build requirement on python-jinja; python-sphinx requires python-jinja2
  (bug 532135)


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.2-1
changelog:
  - Update to 7.18.2
  - Thanks to Ville Skyttä re-enable the tests and fix a minor problem
    with the setup.py. (Bug # 45400)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.1-1
changelog:
  - Update to 7.18.1
  - Disable tests because it's not testing the built library, it's trying to
    test an installed library.


author: Fabian Affolter <mail@fabian-affolter.ch> - 20060917-2
changelog:
  - Switch to ExclusiveArch
  - Remove %doc from man page and general changes to the man page installation


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Alexey Kurov <nucleo@fedoraproject.org> - 4.9.50-1
changelog:
  - libkdcraw update from digikam-3.0.0-beta2
  - enable build against lcms2
  - enable RawSpeed libraw codec


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc5
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.3-1
changelog:
  - Tools now open the metadata device in O_EXCL mode to stop
    running the tools on active metadata.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.1-1
changelog:
  - Add space map checking for thin_check.
  - Add --clear-needs-check option for cache_check.
  - Update to latest upstream release.


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.2-1
changelog:
  - New upstream version with missing man pages, thin_metadata_size
    calculator and thin_dump metadata snapshot support.
  - Manual page header fixes


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-2
changelog:
  - Changed conf.xml to reference softhsm at /usr/lib64/pkcs11/libsofthsm2.so
  - Updated Requires: to softhsm >= 2.0.0b1-2


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-10
changelog:
  - Add ibus-hangul-hangul-toggle.patch
  - Fix bug 1071351 - Cannot switch English input mode and Hangul
    (Korean) input mode by Hangul key


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-7
changelog:
  - Invoke ibus-setup-hangul with the absolute path.
  - Fix bug 1012732 - Click ibus hangul setup on gnome-shell top bar's
    ibus -> No Response


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-3
changelog:
  - Remove have_bridge_hotkey and need_pygobject3 macros which does no
    longer make sense after F17
  - Add ibus-hangul-dconf-prefix.patch
  - Fix bug 909509 - Hangul Keybaord doesn't be changed in IBusHangul Setup


author: Daiki Ueno <dueno@redhat.com> - 1.4.1-7
changelog:
  - Re-add ibus-hangul-HEAD.patch based on recent upstream change
  - Apply ibus-hangul-add-hangul-hotkey.patch only for F-15 and F-16


author: Daiki Ueno <dueno@redhat.com> - 1.4.1-6
changelog:
  - Add ibus-hangul-engine-name.patch
  - Update ibus-hangul-setup-gi.patch
  - Fix bug 870318 - Change of “Automatic reordering” setup option
    cannot be applied in ibus-hangul setup (thanks Mike FABIAN for the patch)


author: Daiki Ueno <dueno@redhat.com> - 1.4.1-4
changelog:
  - Fix ibus-hangul-setup-gi.patch
  - Remove previously applied ibus-hangul-setup-race-condition.patch
  - Fix bug 828597 - [abrt] ibus-hangul-1.4.1-2.fc16:
    main.py:184:on_value_changed:TypeError: 'NoneType' object is not
    iterable


author: Daiki Ueno <dueno@redhat.com> - 1.4.1-3
changelog:
  - Fix ibus-setup-hangul race condition
  - Fix bug 828597 - [abrt] ibus-hangul-1.4.1-2.fc16:
    main.py:184:on_value_changed:TypeError: 'NoneType' object is not
    iterable


author: Daiki Ueno <dueno@redhat.com> - 1.4.1-2
changelog:
  - Add pygobject3 to dependencies on F-16.
  - Fix bug 816890 - [abrt] ibus-hangul-1.4.0-5.fc16:
    main.py:23:<module>:ImportError: No module named gi.repository


author: Daiki Ueno <dueno@redhat.com> - 1.4.0-5
changelog:
  - Revive <hotkey> in hangul.xml.
  - Remove unnecessary BR: ibus.
  - Port ibus-setup-hangul to use gobject-introspection.


author: Daiki Ueno <dueno@redhat.com> - 1.4.0-4
changelog:
  - Package the latest git master.
  - Fix bug 799776 - [abrt] ibus-hangul-1.4.0-3.fc17
  - Remove upstreamed patches: ibus-hangul-xx-icon-symbol.patch,
    ibus-hangul-no-ibus-daemon.patch, and
    ibus-hangul-use-system-icon.patch


author: Daiki Ueno <dueno@redhat.com> - 1.4.0-3
changelog:
  - Add ibus-hangul-use-system-icon.patch
  - Fix bug 789230 - ibus hangul Icon missing in gnome-shell (fedora 17)


author: Daiki Ueno <dueno@redhat.com> - 1.4.0-1
changelog:
  - Update version to 1.4.0.
  - Remove ibus-hangul-ibus-1.4.patch.
  - Drop %defattr(-,root,root,-) from %files.
  - Pass -p to install to preserve file timestamps.
  - Install ibus-setup-hangul.desktop properly.


author: Daiki Ueno <ueno@unixuser.org> - 1.3.1-6
changelog:
  - Fix entity reference for icon symbol.
  - Fix bug 722566 - Cannot select Hangul Input Method on Ibus Preferences


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-3
changelog:
  - Update ibus-1.4 patch.
  - Move the ibus version check into the patch from this spec.
  - Fix bug 695971 - Hangul Keybaord Layout works to only dubeolsik


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-2
changelog:
  - Apply ibus-1.4 patch conditionally for SRPM compatibility.
  - Drop buildroot, %clean and cleaning of buildroot in %install


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Warren Togami <wtogami@redhat.com> - 1.1.0.20090330-2
changelog:
  - Bug 493706: ibus-hangul Hanja arrow keys are wrong
  - Bug 493509: ibus-hangul missing right Ctrl for Hanja button
    These fixes are not ideal, but they make it usable for Fedora 11.
    These must become configurable in a future version.


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090330-1
changelog:
  - Update version to 1.1.0.20090330.
  - Fix bug 486056 - missing options for 2bul, 3bul and other Korean layouts
  - Fix bug 487269 - missing Hanja Conversion


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
  - let rhnsd.service be enabled after installation
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Milan Zazrivec <mzazrivec@redhat.com> 5.0.9-1
changelog:
  - Update .po and .pot files for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Jan Pazdziora 5.0.7-1
changelog:
  - Only run chkconfig if we are in the SysV world.
  - rhnsd needs to be marked as forking.
  - When talking to systemctl, we need to say .service.


author: Michael Calmer <mc@suse.de> 5.0.5-1
changelog:
  - use systemd on openSUSE >= 12.1
  - do not start rhnsd in runlevel 2 which has no network
  - no use of /var/lock/subsys/ anymore


author: Jan Pazdziora 4.9.12-1
changelog:
  - Merging Transifex changes for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Tomas Lestach <tlestach@redhat.com> 4.9.8-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhnsd (tlestach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 4.9.4-1
changelog:
  - l10n: Updates to Czech (cs) translation (msuchy@fedoraproject.org)
  - cleanup - removing translation file, which does not match any language code
    (msuchy@redhat.com)
  - update po files for rhnsd (msuchy@redhat.com)
  - generate new pot file for rhnsd (msuchy@redhat.com)
  - l10n: Updates to Polish (pl) translation (raven@fedoraproject.org)


author: Hans de Goede <hdegoede@redhat.com> - 0.45-2
changelog:
  - Change python_sitelib macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html
  - And rename python_sitelib macro to python_sitearch, as that is what it is
    in our case
  - Mark our documentation files as %doc


author: Hans de Goede <hdegoede@redhat.com> - 0.44-1
changelog:
  - Use dmraid's status instead of figuring out if a set is degraded ourselves
    (#524168)
  - Fix typo causing backtrace when doing activate deactivate 2x for dmraid 10


author: Hans de Goede <hdegoede@redhat.com> - 0.42-1
changelog:
  - Create assertion function to return PyErrors (jgranados)
  - Do a thorough search for the Raid Sets (jgranados)
  - RaidSet.level is broken atm (hansg)


author: Joel Granados <jgranado@redhat.com> - 0.41-1
changelog:
  - Make build/tagging easier (jgranados).
  - Do not try to find and activate partitions on raid subsets (hansg).


author: Hans de Goede <hdegoede@redhat.com> - 0.38-1
changelog:
  - Add additional functionality for the anaconda storage rewrite (jgranados)
  - Do not Py_DECREF imported dm module reference (hansg)
  - Only install our own dm_log handler while doing dm stuff (hansg)


author: Hans de Goede <hdegoede@redhat.com> - 0.37-1
changelog:
  - Handle dmraid dm table's with multiple rows / targets properly, this fixes
    dmraid jbod configurations (hansg)
  - Various small cleanups and bugfixes (hansg)


author: Joel Granados <jgranado@redhat.com> - 0.35-1
changelog:
  - Make pyblock compatible with new pyparted (jgranado).
  - Stop confusing raiddevs and raidsets (hansg).
  - pyparted now trhows an IOException when it does not recognize the part (hansg).
  - Fix traceback when activating already active dmraid set (hansg).
  - Refactor and make functional the getDmDeps and getDmTarget functions (dlehman).
  - Implement compare function for dm-tables (jgranado).


author: Hans de Goede <hdegoede@redhat.com> - 0.34-1
changelog:
  - Add functions that relate dm nodes and dm names (jgranados)
  - Make dmraid devices recursive (fixes dmraid 10 / 01) (jgranados)
  - When importing dm from C-code import it as block.dm, this fixes pyblock
    not working with python 2.6 (hansg)


author: Hans de Goede <hdegoede@redhat.com> - 0.33-1
changelog:
  - Allow use as non root (for pychecker)
  - Forward port: "ERROR: only one argument allowed for this option"
    workaround from RHEL-5 (#468649, #474399)


author: Jeremy Katz <katzj@redhat.com> - 0.27-1
changelog:
  - fix build for other python versions, build against python 2.5
  - fix for Py_ssize_t changes in python 2.5


author: Peter Jones <pjones@redhat.com> - 0.25-1
changelog:
  - fix refcounting of map names and partition building for new maps (#210412)
  - fix naming so device names on a single controller are in LUN order


author: Peter Jones <pjones@redhat.com> - 0.24-1
changelog:
  - add block.load() to load specific bdevid probes instead of always
    doing loadAll() (#208423)
  - make block.getMPaths() return a sorted list (#208337, #208431)


author: Peter Jones <pjones@redhat.com> - 0.22-1
changelog:
  - Fix partition removal when we've changed the partition table out from
    under a RaidSet or MultiPath.


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - Make RaidSet deactivation work like MultiPath deactivation.  Fixes a
    traceback when removing partition maps.


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - make multipath support more robust
  - fix leaky file descriptor on volumes without partition tables


author: Peter Jones <pjones@redhat.com> - 0.14-1
changelog:
  - remove member partitions when we activate, rebuild them when we deactivate
  - add another "count_devices(ctx->lc, NATIVE)" in discover_raiddevs.  it
    seems to help...


author: Peter Jones <pjones@redhat.com> - 0.12-1
changelog:
  - split __init__.py into separate files according to function
  - disable "nosync" hack for now
  - fix a refcounting bug in pydmraid_raidset_get_dm_table()
  - add block.RaidDev.__cmp__()
  - fix some type errors gcc can't check for when using pyblock_potoll
  - be a little pickier about types for mode, devices, and sizes.
  - add make rules for debugging
  - fix "_init__" typo
  - always use local import paths, and be much more strict about namespaces
  - always make a new dm.device in BlockDev.From*()
  - better defaults in BlockDev.create()
  - add setter for block.dmraid.raidset.name, and rework RaidSet.set_name()
  - rework RaidDev.get_bdev()
  - rework "prefix" for RaidSet and RaidDev
  - add getter for block.dmraid.raidset.map
  - change arg order on block.dm.map.__init__() since there's no way to pass
    keyword args through the "abstract" interface.
  - use self.name not self.rs.name in the RaidSet, and make changing the name
    work.
  - make pydm_map_compare() compare names _last_, so we can compare a map
    that's been renamed with its earlier instantiations correctly.
  - mark a device as degraded if there's any descrepancy at all between
    the number of members we find vs what we expect


author: Peter Jones <pjones@redhat.com> - 0.11-1
changelog:
  - never trust dmraid on sync vs nosync; right now, always transform the
    table to "default" (no argument), which is to sync only when necessary,
    whatever that means.  Seems to lock up less often.


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - prevent getRaidSets() from returning devices with missing members
  - add "make flat_install" to make installing in RHupdates easier ;)


author: Peter Jones <pjones@redhat.com> - 0.5-1
changelog:
  - make it possible to easily build dm maps from dmraid tables
  - support for partition table scanning


author: Matthias Clasen <mclasen@redhat.com> - 2.22.1-1
changelog:
  - Update to 2.22.1 (filechooser crash fixes)
  - Implement authentication support for the file chooser (Tomas Bzatek)


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1.cvs20060505-2
changelog:
  - Update to a cvs snapshot that supports the new GTK+ filechooser
    backend API
  - Require GTK+ 2.9.0


author: Ray Strode <rstrode@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0

  -* Thu Jan 27 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.1-1
  - Update to 2.9.1
  - Drop upstreamed patches


author: Colin Walters <walters@redhat.com> 2.6.0-5
changelog:
  - Backport fileselector crash fix from HEAD
  - Remove unneeded calls to autotools
  - Remove BR on autotools


author: Alexander Larsson <alexl@redhat.com> 2.6.0-3
changelog:
  - Backport fixes from cvs
  -  fix fileselector crashes
  -  fix auth callback threadsafeness
  -  fix auth callback modal dialog bug


author: Tim Powers <timp@redhat.com> 2.2.0.1-5
changelog:
  - fixed requires so that we no longer require Xft and Xft-devel, but
    instead XFree86 and XFree86-devel >= 4.2.99


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.106.0.90 snap, glib 1.3.11
  - add explicit-versioned requires on dependency libs
  - do gconftool stuff, put schemas in file list
  - use makeinstall instead of destdir to avoid broken makefiles


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-89
changelog:
  - bz1548922 - automount crashes due to segfault
    - and fix incorrect month in changelog entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-88
changelog:
  - bz1548922 - automount crashes due to segfault
    - fix changelog date on previous two entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-87
changelog:
  - bz1548922 - automount crashes due to segfault
    - fix package revision and changelog.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-86
changelog:
  - bz1548922 - automount crashes due to segfault
    - fix fd leak in rpc_do_create_client().
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-85
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - dont allow trailing slash in master map mount points.
  -Resolves: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-84
changelog:
  - bz1548922 - automount crashes due to segfault
    - fix create_client() RPC client handling.
  -Resolves: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-83
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - dont use array for path when not necessary.
    - fix prefix option handling in expand_entry().
    - fix sublink handling in do_nfs_mount().
    - add fix error return in do_nfs_mount().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-82
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix deadlock in dumpmaps.
  - Related: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-81
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix use after free in do_master_list_reset()
  - Resolves: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-80
changelog:
  - bz1509088 - autofs hangs due to race condition in do_spawn
    - update configure to check for pipe2(2).
    - fix open calls not using open_xxxx() calls.
    - move open_xxxx() functions to spawn.c.
    - serialize calls to open_xxxx() functions.
  - Resolves: rhbz#1509088


author: Ian Kent <ikent@redhat.com> - 5.0.7-79
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - fix memory leak in umount_amd_ext_mount().
    - fix strerror_r() parameter declaration in do program_mount().
    - fix incorrect check in validate_program_options().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-78
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - improve debug logging of lookup key.
    - fix cachefs parse message not being logged.
    - fix typo in amd_parse.c.
    - add missing MODPREFIX to logging in amd parser.
    - fix symlink false negative in umount_multi().
    - remove expand_selectors() call on amd parser entry.
    - fix amd defaults map entry handling.
    - refactor amd_parse.c.
    - fix amd parser double quote handling.
    - fix expandamdent() quote handling.
    - fix possible memory leak during amd parse.
    - remove path restriction of amd external mount.
    - add function umount_amd_ext_mount().
    - add function ext_mount_inuse().
    - add function construct_argv().
    - add amd mount type program mount support.
  - Resolves: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-77
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - fix reject in patch changelog hunk.
  - Related: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-76
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - reset master map list on startup retry.
  - Resolves: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-75
changelog:
  - bz1489247 - autofs: config mount_nfs_default_protocol doesn't work
    - improve description of mount_nfs_default_protocol.
  - Resolves: rhbz#1489247


author: Ian Kent <ikent@redhat.com> - 5.0.7-74
changelog:
  - bz1486035 - autofs map entry options field does not accept dot character
    - handle additional nfs versions in mount_nfs.c.
  - Related: rhbz#1486035


author: Ian Kent <ikent@redhat.com> - 5.0.7-73
changelog:
  - bz1489648 - autofs missing dependency with libsss_autofs cause missing file
    messages during boot
    - fix nisplus lookup init not configured check.
    - make open_lookup() error handling more consistent.
    - be silent about sss library not found.
    - be silent about nis domain not set.
    - make map source reference message debug only.
  - Resolves: rhbz#1489648


author: Ian Kent <ikent@redhat.com> - 5.0.7-72
changelog:
  - bz1499287 - Autofs processes hung while waiting for the release of an entry
    master_lock that is held by another thread waiting on a bind mount
    - only take master map mutex for master map update.
  - Resolves: rhbz#1499287


author: Ian Kent <ikent@redhat.com> - 5.0.7-71
changelog:
  - bz1497846 - Macro definitions specified in mount entries are no longer getting set
    - revert fix argc off by one in mount_autofs.c.
  - Resolves: rhbz#1497846


author: Ian Kent <ikent@redhat.com> - 5.0.7-70
changelog:
  - bz1442926 - Systemd kills autofs fuse mount on service restart
    - set systemd KillMode to process.
  - bz1466256 - autofs: unable to mount nfs share after reboot
    - fix mount.nfs blocks on first mount.
  - bz1476850 - Man page: Make auto.master 's summary findable via 'man -k autofs'
    - fix typos in autofs man pages.
    - fix some man page problems.
  - bz1486035 - autofs map entry options field does not accept dot character
    - allow dot in OPTIONSTR value lexer pattern.
  -Resolves: rhbz#1442926 rhbz#1466256 rhbz#1476850 rhbz#1486035


author: Ian Kent <ikent@redhat.com> - 5.0.7-69
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix a couple of covarity warning resulting in group name handling change.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-68
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix unset tsd group name handling.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-66
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - increase worker thread per-thread stack size.
    - limit getgrgid_r() buffer size.
    - add congigure option for limiting getgrgid_r() stack usage.
    - use above option to limit getgrgid_r() stack usage with configure.
  - Resolves: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-65
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix invalid reference in remount_active_mount().
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-64
changelog:
  - bz1440769 - autofs is facing scalability issues
    - improve scalability of direct mount path component creation.
  - Resolves: rhbz#1440769


author: Ian Kent <ikent@redhat.com> - 5.0.7-63
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - fix work around sss startup delay.
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix possible NULL derefernce.
  - Related: rhbz#1101782 rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-62
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - use autofs_point to store expire timeout where possibe.
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-61
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - work around sss startup delay.
    - add sss master map wait config option (wait initially 0, disabled).
  - Resolves: rhbz#1101782


author: Ian Kent <ikent@redhat.com> - 5.0.7-60
changelog:
  - bz1382093 - Improve logging in autofs
     - add the mount requestor's pid to pending_args.
     - create thread-local ID for mount attempts.
     - log functions to prefix messages with attempt_id if available.
     - factor out set_thread_mount_request_log_id().
     - add config option to use mount request log id.
  - Resolves: rhbz#1382093


author: Ian Kent <ikent@redhat.com> - 5.0.7-59
changelog:
  - bz1383910 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix short memory allocation in lookup_amd_instance().
    - fix count_mounts() function.
    - fix argc off by one in mount_autofs.c.
    - fix _strncmp() usage.
    - fix typos in README.amd-maps.
    - add ref counting to struct map_source.
    - add support for amd browsable option.
    - add function conf_amd_get_map_name().
    - add function conf_amd_get_mount_paths().
    - include amd mount section mounts in master mounts list.
    - check for conflicting amd section mounts.
    - add function conf_amd_get_map_options().
    - capture cache option and its settings during parsing.
    - handle map_option cache for top level mounts.
    - handle amd cache option all in amd type auto mounts.
    - fix bogus check in expire_cleanup().
    - delay submount exit for amd submounts.
  - Resolves: rhbz#1383910 rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-58
changelog:
  - bz1420584 - RHEL7.3: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit.
  - bz1396403 - Trying to access a non-existent directory using automount
    results in 4 minute hang as not checking the local mount availability
    - check NFS server availability on local mount fallback.
  - bz1399796 - local nfs share being bind-mounted by autofs is mounted
    read-only even when marked rw in its map
    - honor last rw in mount options when doing a bind mount.
  - Resolves: rhbz#1420584 rhbz#1396403 rhbz#1399796


author: Ian Kent <ikent@redhat.com> - 5.0.7-57
changelog:
  - bz1383194 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
    - don't return until after master map retry read.
    - make lookup_nss_read_master() return nss status.
  - Resolves: rhbz#1383194


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-56
changelog:
  - bz1327388 - Fix use-after-free in st_queue_handler
    - fix use-after-free in st_queue_handler().
  - bz1252071 - [RFE] Disable alerting on non-existent automounts
    - add config option to suppress not found log message.
  - Resolves: rhbz#1327388 rhbz#1252071


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-55
changelog:
  - bz1298115 - The autofs service fails to load maps on boot if the maps
    are stored on a NFS mount
    - make service want network-online.
    - add remote-fs.target systemd dependency.
  - bz1300496 - Duplicate mounts created or leftovers in mtab
    - revert special case cifs escapes.
  - bz1300498 - Parent directory in nested mount gets unmounted while the
    child remains mounted
    - guard against incorrect umount return.
  - bz1305721 - autofs.conf: Fix 'nameing' typo
    - fix 'nameing' typo in autofs.conf.
  - bz1329869 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - log pipe read errors.
    - fix rwlock unlock crash.
    - fix handle_mounts() termination condition check.
  - bz1300500 - double free or corruption (fasttop) causes abort in
    ldap_int_tls_destroy
    - fix config old name lookup.
    - fix error handling on ldap bind fail.
    - fix gcc5 complaints.
    - fix fix gcc5 complaints.
    - fix missing source sss in multi map lookup.
    - fix update_hosts_mounts() return.
    - change lookup to use reinit instead of reopen.
    - fix unbind sasl external mech.
    - fix sasl connection concurrancy problem.
    - add some Coverity fixes identified for recent changes.
  - bz1300501 - Request to add a configuration option to force use of the map
    entry hostname for mounts
    - add configuration option to use fqdn in mounts
  - Resolves: rhbz#1298115 rhbz#1300496 rhbz#1300498 rhbz#1305721
  - Resolves: rhbz#1329869 rhbz#1300500 rhbz#1300501


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-54
changelog:
  - bz1263508 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - Resolves: rhbz#1263508


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-53
changelog:
  - bz1238573 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - Resolves: rhbz#1238573


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-52
changelog:
  - bz1233069 - Direct map does not expire if map is initially empty
    - update patch to fix expiry problem.
  - Related: rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-51
changelog:
  - bz1233065 - 'service autofs reload' does not reloads new mounts only
    when 'sss' or 'ldap' is used in '/etc/nsswitch.conf' file
    - init qdn before use in get_query_dn().
    - fix left mount count return from umount_multi_triggers().
    - fix return handling in sss lookup module.
    - move query dn calculation from do_bind() to do_connect().
    - make do_connect() return a status.
    - make connect_to_server() return a status.
    - make find_dc_server() return a status.
    - make find_server() return a status.
    - fix return handling of do_reconnect() in ldap module.
  - bz1233067 - autofs is performing excessive direct mount map re-reads
    - fix direct mount stale instance flag reset.
  - bz1233069 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initial empty map.
  - Resolves: rhbz#1233065 rhbz#1233067 rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-50
changelog:
  - bz1218045 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - Resolves: rhbz#1218045


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-49
changelog:
  - bz1166457 - Autofs unable to mount indirect after attempt to mount wildcard
    - make negative cache update consistent for all lookup modules.
    - ensure negative cache isn't updated on remount.
    - dont add wildcard to negative cache.
  - bz1162041 - priv escalation via interpreter load path for program based
    automount maps
    - add a prefix to program map stdvars.
    - add config option to force use of program map stdvars.
  - bz1161474 - automount segment fault in parse_sun.so for negative parser tests
    - fix incorrect check in parse_mount().
  - bz1205600 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - handle duplicates in multi mounts.
  - bz1201582 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1166457 rhbz#1162041 rhbz#1161474 rhbz#1205600 rhbz#1201582


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-48
changelog:
  - bz1164957 - The default installed autofs.conf doesn't have default nfs
    protocol set to 4
    - add missing line to copy RedHat customized config to spec file.
  - Resolves: rhbz#1164957


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-47
changelog:
  - bz1156662 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix typo in update_hosts_mounts().
    - fix hosts map update on reload.
  - Resolves: rhbz#1156662


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-46
changelog:
  - bz1153414 - autofs-5.0.5-109 with upgrade to RHEL 6.6 no longer recognizes
    +yp: in auto.master
    - fix fix master map type check.
  - Resolves: rhbz#1153414


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-45
changelog:
  - bz1152862 - autofs shouldn't have kernel as a dependency
    - remove an ancient kernel Requires.
  - Resolves: rhbz#1152862


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-44
changelog:
  - bz1099800 - man page of /etc/init.d/autofs: /usr/share/man/man8/autofs.8.gz
    is not needed in RHEL-7
    - update man page autofs(8) for systemd
  - Resolves: rhbz#1099800


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-43
changelog:
  - bz1066772 - Clarify autofs(5) man page sections "Multiple Mounts" and
    "Replicated Server"
    - clarify multiple mounts description.
  - Resolves: rhbz#1066772


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-42
changelog:
  - bz1116184 - RFE: RHEL7: Add am-utils RPM or equivalent am-utils functionality
    to other packages
    - add amd map format parser.
  - bz1132236 - Memory leak in get_exports
    - fix memory leak in create_client().
    - fix memory leak in get_exports().
  - bz1135158 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix deadlock in init_ldap_connection().
    - extend libldap serialization.
  - Resolves: rhbz#1116184 rhbz#1132236 rhbz#1135158


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-41
changelog:
  - bz1094661 - autofs can ghost non-existent map entries given the right timing
    - fix negative status being reset on map read.
    - fix fix negative status being reset on map read.
    - check for non existent negative entries in lookup_ghost().
  - bz1124389 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - allow use of hosts map in maps (dependent patch).
    - fix options compare.
    - fix fix options compare.
  - Resolves: rhbz#1094661 rhbz#1124389


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-40
changelog:
  - bz1063139 - autofs regression test failure.
    - fix fix ipv6 libtirpc getport.
    - get_nfs_info() should query portmapper if port is not given.
    - fix rpc_portmap_getport() proto not set.
    - fix portmap not trying proto v2.
  - Resolves: rhbz#1063139


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-37
changelog:
  - bz1035977 - with IPv6 address automount fail with "hostname lookup failed"
    - fix ipv6 link local address handling.
  - Resolves: rhbz#1035977


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1030705 - Default unmount is in 10 seconds, man page says 10 minutes
    - improve timeout option description.
  - Related: rhbz#1030705


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix ipv6 libtirpc getport function.
  - Related: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-34
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix revision in spec file.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-33
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - regenerate configure due to missing function.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-32
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - only probe specific nfs version if requested.
  - Related: rhbz#1011909


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-31
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - fix get_nfs_info() probe.
    - fix portmap lookup.
  - bz995979 - RFE: feature to dump automount maps in native file format
    - update dumpmaps patch with latest changes from QE testing.
  - Resolves: rhbz#1011909 rhbz#995979


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-30
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - fix dumpmaps multi output.
    - try and cleanup after dumpmaps.
    - teach dumpmaps to output simple key value pairs.
  - Resolves: rhbz#852327


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-29
changelog:
  - bz994352 - "autofs reload" causes automount to stop running when multiple
    maps are removed from auto.master
    - fix syncronize handle_mounts() shutdown.
  - bz994359 - Wildcard in nested mounts regression
    - fix fix wildcard multi map regression.
  - Resolves: rhbz#994352 rhbz#994359


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-28
changelog:
  - bz983160 Package autofs-5.0.7-22.el7 failed RHEL7 RPMdiff testing
    - fix add null check in parse_server_string() (bz979155).
    - check for protocol option.
    - use ulimit max open files if greater than internal maximum.
    - fix default path used for unitdir.
    - fix changelog inconsistent dates.
    - fix default path used for unitdir.
    - fix changelog inconsistent dates.
    - link with full reloc options.
    - fix a couple of compiler warnings.
    - add after sssd dependency to unit file (bz984089).
  - Resolves: rhbz#983160
  +


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-16
changelog:
  - make dump maps check for duplicate indirect mounts (bz961312).
  - document allowed map sources in auto.master(5) (bz961312).
  - add enable sloppy mount option to configure.


author: Ian Kent <kent@redhat.com> - 1:5.0.7-14
changelog:
  - fix some automount(8) typos (bz664178).
  - fix syncronize of handle_mounts() shutdown.
  - fix submount tree not all expiring.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-12
changelog:
  - dont fail on master map self include.
  - fix wildcard multi map regression.
  - fix file descriptor leak when reloading the daemon.
  - depricate nosymlink pseudo option.
  - add symlink pseudo option.
  - update kernel include files.
  - fix requires in spec file.
  - fix libtirpc build option.
  - fix systemd unidir in spec file.
  - document browse option in man page.
  - fix automounter support on parisc.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-10
changelog:
  - fix submount offset delete.
  - fix init script status return.
  - fix use get_proximity() without libtirpc.
  - don't use dirent d_type to filter out files in scandir().
  - don't schedule new alarms after readmap.
  - use numeric protocol ids instead of protoent structs.
  - lib/defaults.c: use WITH_LDAP conditional around LDAP types.
  - make yellow pages support optional.
  - modules/replicated.c: use sin6_addr.s6_addr32.
  - workaround missing GNU versionsort extension.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-8
changelog:
  - fix map entry duplicate offset detection.
  - Allow nsswitch.conf to not contain "automount:" lines.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-6
changelog:
  - fix recursive mount deadlock.
  - increase file map read buffer size.
  - handle new location of systemd.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-4
changelog:
  - include usage in usage message.
  - dont wait forever to restart.
  - add option description to man page.
  - fix null map entry order handling.
  - make description of default MOUNT_WAIT setting clear.
  - configure.in: allow cross compilation.
  - README: update mailing list subscription info.
  - allow non root user to check status.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-3
changelog:
  - fix nobind sun escaped map entries.
  - fix use cache entry after free mistake.
  - fix ipv6 proximity calculation.
  - fix parse buffer initialization.
  - fix typo in automount(8).


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix systemd argument passing.
  - fix get_nfs_info() can incorrectly fail.
  - fix offset directory removal.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix fix LDAP result leaks on error paths.
  - report map not read when debug logging.
  - duplicate parent options for included maps.
  - update ->timeout() function to not return timeout.
  - move timeout to map_source.
  - fix kernel verion check of version components.
  - dont retry ldap connect if not required.
  - check if /etc/mtab is a link to /proc/self/mounts.
  - fix nfs4 contacts portmap.
  - make autofs wait longer for shutdown.
  - fix sss map age not updated.
  - fix remount deadlock.
  - fix umount recovery of busy direct mount.
  - fix offset mount point directory removal.
  - remove move mount code and configure option.
  - fix remount of multi mount.
  - fix devce ioctl alloc path check.
  - refactor hosts lookup module.
  - remove cache update from parse_mount().
  - add function to delete offset cache entry.
  - allow update of multi mount offset entries.
  - add hup signal handling to hosts map.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-15
changelog:
  - fix typo in libtirpc file name.
  - fix rework error return handling in rpc code.
  - allow MOUNT_WAIT to override probe.
  - improve UDP RPC timeout handling.
  - fix segfault in get_query_dn().
  - use strtok_r() in linux_version_code().
  - fix sss wildcard match.
  - fix dlopen() error handling in sss module.
  - fix configure string length tests for sss library.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-12
changelog:
  - ignore duplicate exports in auto.net.
  - add kernel verion check function.
  - add function to check mount.nfs version.
  - reinstate singleton mount probe.
  - rework error return handling in rpc code.
  - catch EHOSTUNREACH and bail out early.
  - systemd support fixes.
  - fix segmentation fault in do_remount_indirect().


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-9
changelog:
  - add correct patch for "fix improve mount location error reporting".
  - add correct patch for "fix fix wait for master source mutex".


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-5
changelog:
  - fix ipv6 name lookup check.
  - fix ipv6 rpc calls.
  - fix ipv6 configure check.
  - add piddir to configure.
  - add systemd unit support.
  - fix MNT_DETACH define.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-3
changelog:
  - improve mount location error reporting.
  - fix paged query more results check.
  - fix dumpmaps not reading maps.
  - fix result null check in read_one_map().
  - Fix LDAP result leaks on error paths.
  - code analysis fixes 1.
  - fix not bind mounting local filesystem.
  - update dir map-type patch for changed patch order.
  - fix wait for master source mutex.
  - fix submount shutdown race
  - fix fix map source check in file lookup.
  - add disable move mount configure option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-36
changelog:
  - use weight only for server selection.
  - fix isspace() wild card substition.
  - auto adjust ldap page size.
  - fix prune cache valid check.
  - fix mountd vers retry.
  - fix expire race.
  - add lsb force-reload and try-restart.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-32.fc15
changelog:
  - always read file maps mount lookup map read fix.
  - fix direct map not updating on reread.
  - add external bind method.
  - fix add simple bind auth.
  - add option to dump configured automount maps.
  - wait for master map to be available at start.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-28
changelog:
  - remove extra read master map call.
  - remove extra cache create call in master_add_map_source().
  - fix error handing in do_mount_indirect().
  - expire thread use pending mutex.
  - explicity link against the Kerberos library.
  - remove some log message duplication for verbose logging.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-27.fc14
changelog:
  - fix master map source server unavailable handling.
  - add autofs_ldap_auth.conf man page.
  - fix random selection for host on different network.
  - make redhat init script more lsb compliant.
  - don't hold lock for simple mounts.
  - fix remount locking.
  - fix wildcard map entry match.
  - fix parse_sun() module init.
  - dont check null cache on expire.
  - fix null cache race.
  - fix cache_init() on source re-read.
  - fix mapent becomes negative during lookup.
  - check each dc server individually.
  - fix negative cache included map lookup.
  - remove state machine timed wait.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-25.fc14
changelog:
  - make nfs4 default for replicated selection configuration (bz579949).
  - add simple bind authentication option (bz579951).


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-22
changelog:
  - fix get query dn failure.
  - fix ampersand escape in auto.smb.
  - add locality as valid ldap master map attribute.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-17
changelog:
  - dont connect at ldap lookup module init.
  - fix random selection option.
  - fix disable timeout.
  - fix strdup() return value check.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-6
changelog:
  - don't use master_lex_destroy() to clear parse buffer.
  - make documentation for set-log-priority clearer.


author: Ian Kent <kent@redhat.com> - 1:5.0.5-2
changelog:
  - fix included map read fail handling.
  - refactor ldap sasl authentication bind to eliminate extra connect
    causing some servers to reject the request. 
  - add mount wait parameter to allow timeout of mount requests to
    unresponsive servers.
  - special case cifs escape handling.
  - fix libxml2 workaround configure.
  - more code analysis corrections (and fix a typo in an init script).
  - fix backwards #ifndef INET6.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-1
changelog:
  - update source to latest upstream version.
    - this is essentially a consolidation of the patches already in this rpm.
  - add dist tag to match latest RHEL-5 package tag format.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-39
changelog:
  - fix libxml2 non-thread-safe calls.
  - fix direct map cache locking.
  - fix patch "dont umount existing direct mount on reread" deadlock.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-32
changelog:
  - fix an RPC fd leak.
  - don't block signals we expect to dump core.
  - fix pthread push order in expire_proc_direct().


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-30
changelog:
  - fix incorrect dclist free.
  - srv lookup handle endianness.
  - fix bug introduced by library reload changes which causes autofs to
    not release mount thread resources when using submounts.
  - fix notify mount message path.
  - try harder to work out if we created mount point at remount.
  - fix double free in do_sasl_bind().
  - manual umount recovery fixes.
  - fix map type info parse error.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-28
changelog:
  - use intr option as hosts mount default.
  - sync kernel includes with upstream kernel.
  - dont umount existing direct mount on master re-read.
  - fix incorrect shutdown introduced by library relaod fixes.
  - improve manual umount recovery.
  - dont fail on ipv6 address when adding host.
  - always read file maps multi map fix.
  - always read file maps key lookup fixes.
  - add support for LDAP_URI="ldap:///<domain db>" SRV RR lookup.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-26
changelog:
  - fix lsb init script header.
  - fix memory leak reading ldap master map.
  - fix st_remove_tasks() locking.
  - reset flex scanner when setting buffer.
  - zero s_magic is valid.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-21
changelog:
  - fix file map lookup when reading included or nsswitch sources.
    - a regression introduced by file map lookup optimisation in rev 9.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-15
changelog:
  - fix array out of bounds accesses and cleanup couple of other alloca() calls.
  - Undo mistake in copy order for submount path introduced by rev 11 patch.
  - add check for alternate libxml2 library for libxml2 tsd workaround.
  - add check for alternate libtirpc library for libtirpc tsd workaround.
  - cleanup configure defines for libtirpc.
  - add WITH_LIBTIRPC to -V status report.
  - add libtirpc-devel to BuildRequires.
  - add nfs mount protocol default configuration option.


author: Ian Kent <ikent@redhat.com> - 5.0.4-9
changelog:
  - fix hosts map use after free.
  - fix uri list locking (again).
  - check for stale SASL credentials upon connect fail.
  - add "forcestart" and "forcerestart" init script options to allow
    use of 5.0.3 strartup behavior if required.
  - always read entire file map into cache to speed lookups.
  - make MAX_ERR_BUF and PARSE_MAX_BUF use easier to audit.
  - make some easy alloca replacements.
  - update to configure libtirpc if present.
  - update to provide ipv6 name and address support.
  - update to provide ipv6 address parsing.


author: Ian Kent <ikent@redhat.com> - 5.0.4-8
changelog:
  - rename program map parsing bug fix patch.
  - use CLOEXEC flag functionality for setmntent also, if present.


author: Ian Kent <kent@redhat.com> - 5.0.4-5
changelog:
  - fix negative caching of non-existent keys.
  - fix ldap library detection in configure.
  - use CLOEXEC flag functionality if present.
  - fix select(2) fd limit.
  - make hash table scale to thousands of entries.


author: Ian Kent <kent@redhat.com> - 5.0.3-30
changelog:
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
  - fix master map lexer eval order.
  - fix bad alloca usage.


author: Ian Kent <ikent@redhat.com> - 5.0.3-28
changelog:
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.


author: Ian Kent <ikent@redhat.com> - 5.0.3-26
changelog:
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.


author: Ian Kent <ikent@redhat.com> - 5.0.3-25
changelog:
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.


author: Ian Kent <ikent@redhat.com> - 5.0.3-23
changelog:
  - add upstream bug fixes
    - bug fix for mtab check.
    - bug fix for zero length nis key.
    - update for ifc buffer handling.
    - bug fix for kernel automount handling.
  - warning: I found a bunch of patches that were present but not
    being applied.


author: Ian Kent <ikent@redhat.com> - 5.0.3-21
changelog:
  - add upstream bug fix patches
    - add command line option to override is running check.
    - don't use proc fs for is running check.
    - fix fail on included browse map not found.
    - fix incorrect multi source messages.
    - clear stale flag on map read.
    - fix proximity other rpc ping timeout.
    - refactor mount request vars code.
    - make handle_mounts startup condition distinct.
    - fix submount shutdown handling.
    - try not to block on expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - fix nfs4 colon escape handling.
    - check replicated list after probe.
    - add replicated server selection debug logging.
    - update replicated server selection documentation.
    - use /dev/urandom instead of /dev/random.
    - check for mtab pointing to /proc/mounts.
    - fix interface config buffer size.
    - fix percent hack heap corruption.


author: Ian Kent <ikent@redhat.com> - 5.0.3-18
changelog:
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.3-8
changelog:
  - revert miscellaneous device node related patches.
  - add missing check for zero length NIS key.
  - fix incorrect match of map type name when included in map name.
  - update rev 7 sasl callbacks patch.


author: Ian Kent <ikent@redhat.com> - 5.0.3-6
changelog:
  - fix expire calling kernel more often than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
  - add miscellaneous device node interface library.
  - use miscellaneous device node, if available, for active restart.
  - device node and active restart fixes.
  - update is_mounted to use device node ioctl, if available.


author: Ian Kent <ikent@redhat.com> - 5.0.3-4
changelog:
  - correction to the correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r.


author: Ian Kent <ikent@redhat.com> - 5.0.3-3
changelog:
  - catch "-xfn" map type and issue "no supported" message.
  - another correction for handling of LDAP base dns with spaces.


author: Ian Kent <ikent@redhat.com> - 5.0.2-25
changelog:
  - Bug 426401: CVE-2007-6285 autofs default doesn't set nodev in /net [rawhide]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-23
changelog:
  - Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
    - prevent fork between fd open and setting of FD_CLOEXEC.


author: Ian Kent <ikent@redhat.com> - 5.0.2-21
changelog:
  - Bug 421371: CVE-2007-5964 autofs defaults don't restrict suid in /net [rawhide]
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-18
changelog:
  - fix schema selection in LDAP schema discovery.
  - check for "*" when looking up wildcard in LDAP.
  - fix couple of edge case parse fails of timeout option.
  - add SEARCH_BASE configuration option.
  - add random selection as a master map entry option.
  - re-read config on HUP signal.
  - add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
  - fix deadlock in submount mount module.
  - fix lack of ferror() checking when reading files.
  - fix typo in autofs(5) man page.
  - fix map entry expansion when undefined macro is present.
  - remove unused export validation code.
  - add dynamic logging (adapted from v4 patch from Jeff Moyer).
  - fix recursive loopback mounts (Matthias Koenig).
  - add map re-load to verbose logging.
  - fix handling of LDAP base dns with spaces.
  - handle MTAB_NOTUPDATED status return from mount.
  - when default master map, auto.master, is used also check for auto_master.
  - update negative mount timeout handling.
  - fix large group handling (Ryan Thomas).
  - fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
  - eliminate NULL proc ping for singleton host or local mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.2-16
changelog:
  - add descriptive comments to config about LDAP schema discovery.
  - work around segfault at exit caused by libxml2.
  - fix foreground logging (also fixes shutdown needing extra signal bug).


author: Ian Kent <ikent@redhat.com> - 5.0.2-14
changelog:
  - update patch to prevent failure on empty master map.
  - if there's no "automount" entry in nsswitch.conf use "files" source.
  - add LDAP schema discovery if no schema is configured.


author: Ian Kent <ikent@redhat.com> - 5.0.2-11
changelog:
  - don't fail on empty master map.
  - add support for the "%" hack for case insensitive attribute schemas.


author: Ian Kent <ikent@redhat.com> - 5.0.2-10
changelog:
  - mark map instances stale so they aren't "cleaned" during updates.
  - fix large file compile time option.


author: Ian Kent <ikent@redhat.com> - 5.0.2-5
changelog:
  - fix mount point directory creation for bind mounts.
  - add quoting for exports gathered by hosts map.


author: Ian Kent <ikent@redhat.com> - 5.0.2-2
changelog:
  - include krb5.h in lookup_ldap.h (some openssl doesn't implicitly include it).
  - correct initialization of local var in parse_server_string.


author: Ian Kent <ikent@redhat.com> - 5.0.1-16
changelog:
  - add ldaps support.
    - note: it's no longer possible to have multiple hosts in an ldap map spec.
    - note: to do this you need to rely on the ldap client config.


author: Ian Kent <ikent@redhat.com> - 5.0.1-9
changelog:
  - upstream fix for filesystem is local check.
  - disable exports access control check (bz 203277).
  - fix patch to add command option for set a global mount options (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-8
changelog:
  - add configuration variable to control appending of global options (bz 214684).
  - add command option to set a global mount options string (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-6
changelog:
  - fix directory creation for browse mounts.
  - fix wildcard map handling and improve nsswitch source map update.


author: Ian Kent <ikent@redhat.com> - 5.0.1-5
changelog:
  - drop "DEFAULT_" prefix from configuration names.
  - add option to select replicated server at random (instead of
    ping response time) (bz 227604).
  - fix incorrect cast in directory cleanup routines (bz 231864).


author: Ian Kent <ikent@redhat.com> - 5.0.1-1
changelog:
  - update to release tar.
  - fix return check for getpwuid_r and getgrgid_r.
  - patch to give up trying to update exports list while host is mounted.
  - fix to "@network" matching. 
  - patch to check for fstab update and retry if not updated.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.24
changelog:
  - add "condrestart" to init script (bz 228860).
  - add "@network" and .domain.name export check.
  - fix display map name in mount entry for "-hosts" map.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.18
changelog:
  - update the "task done race" patch to fix a deadlock.
  - added URL tag.
  - removed obsoletes autofs-ldap.
  - replaced init directory paths with %{_initrddir} macro.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.17
changelog:
  - make use of spaces and tabs in spec file consistent.
  - escape embedded macro text in %changelog.
  - eliminate redundant %version and %release.
  - remove redundant conditional check from %clean.
  - remove redundant exit from %preun.
  - correct %defattr spec.
  - remove empty %doc and redundant %dir misc lines.
  - combine program module spec lines into simpler one line form.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.13
changelog:
  - make double quote handing consistent (at least as much as we can).
  - fix handling of trailing white space in wildcard lookup (forward port bz 199720).
  - check fqdn of each interface when matching export access list (bz 213700).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.5
changelog:
  - remove fullstop from Summary tag.
  - change Buildroot to recommended form.
  - replace Prereq with Requires.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.41
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.38
changelog:
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.34
changelog:
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.33
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.29
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757).
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.26
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.23
changelog:
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.21
changelog:
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.20
changelog:
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.16
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.12
changelog:
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.11
changelog:
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Karsten Hopp <karsten@redhat.com> 0.2.1-7.1
changelog:
  - replace Requires(devel) with a simple Requires as the new rpm
    aborts otherwise with "Bad Requireflags: qualifiers: Requires(devel)"


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
  - Update to 0.9
  - Adjust BuildRequires to build with gtk3
  - Drop lxde patch, merged upstream
  - Validate the desktop file


author: Debarshi Ray <rishi@fedoraproject.org> - 3.12.12-4
changelog:
  - Fix certificate validation (use reference identities, handle validation
    failures correctly, fixed the test suite)
  - Resolves: #1386616


author: Brian Pepple <bpepple@fedoraproject.org> - 3.8.0-1
changelog:
  - Update to 3.8.0.
  - Remove nautilus extension, since nautilus-sendto has removed this functionality.


author: Brian Pepple <bpepple@fedoraproject.org> - 3.3.90.2-1
changelog:
  - Update to 3.3.90.2.
  - Add BR on telepathy-farstream-devel, gstreamer-devel and itstool.
  - Drop BR on tp-farsight.
  - Bump minimum version of tp-glib.
  - Drop requires on tp-butterfly. MSN will use tp-gabble from now on.


author: Brian Pepple <bpepple@fedoraproject.org> - 3.1.2-1
changelog:
  - Update to 3.1.2.
  - Add BR on gstreamer-devel and cheese-libs-devel.
  - Bump min required versions of folks, tp-logger, and tp-glib.


author: Brian Pepple <bpepple@fedoraproject.org> - 3.1.1-1
changelog:
  - Update to 3.1.1.
  - Enable maps again.
  - Drop obsoletes/provides. They should no longer be needed.
  - Bump minimum version of tp-glib.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.91.3-1
changelog:
  - Update to 2.91.3.
  - Drop folks api patch. Fixed upstream.
  - Add BR on gsettings-desktop-schemas-devel.
  - Drop ca-cert patch. Fixed upstream.
  - Drop BR on GConf2.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.91.2-2
changelog:
  - Bump min versions for gtk3, glib2, tp-glib, and folks.
  - Add patch to use Fedora's ca-cert.
  - Drop BR on unique3. No longer needed.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.91.0-5
changelog:
  - Backport libnotify patch for 0.7 api change.
  - Bump min BR version for libnotify.
  - Add patches to port to GtkComboBox & GtkComboBoxText.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.91.0-2
changelog:
  - Rebuild for new eds.
  - Disable webkitgtk support for now until a more recent version is in rawhide.
  - Add patch to fix build with gcr.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.91.0-1
changelog:
  - Update to 2.91.0.
  - Drop obsolete/provides on tp-haze-mission-control.
  - Drop keyname-fixes patch. Fixed upstream.
  - Drop empathy chat GDKKEY patch. Fixed upstream.
  - Drop avatar image gdkdisplay patch. Fixed upstream.
  - Drop depreciated gtk-dialog-separator patch. Fixed upstream.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.31.4-1
changelog:
  - Update to 2.31.4.
  - Disable libchamplain support for now due to api change.
  - Drop schemas regeneration since empathy uses gsettings now.
  - Add BR on telepathy-logger-devel.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.31.3-1
changelog:
  - Update to 2.31.3.
  - Bump min version of tp-glib needed.
  - Drop facebook server error patch. Fixed upstream.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.29.3-1
changelog:
  - Update to 2.29.3.
  - Drop nautilus sendto plugin linking patch. Fixed upstream.
  - Drop broken NetworkManager patch.  Fixed upstream.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.29.2-1
changelog:
  - Update to 2.29.2.
  - Remove devel, libs, and python subpackages since empathy no longer ships
    libempathy and libempathy-gtk as shared libraries.
  - Remove configure options no longer available.
  - Update source url.
  - Drop pkgconfig patch.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.27.92-1
changelog:
  - Update to 2.27.92.
  - Drop desktop category patch.  Fixed upstream.
  - Drop fix-nav-handling patch.  Fixed upstream.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.27.91.1-2
changelog:
  - Update broken pkgconfig patch to not include libmissioncontrol.
  - Drop BR on telepathy-mission-control-devel. mc is a runtime dep.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.27.91.1-1
changelog:
  - Update to 2.27.91.1.
  - Add BR on unique-devel.
  - Update presence-icons patch.
  - Add patch to fix invalid category in desktop file.
  - Drop clutter patch.  Fixed upstream.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.27.4-1
changelog:
  - Update to 2.27.4.
  - See http://download.gnome.org/sources/empathy/2.27/empathy-2.27.4.news
  - Drop mission-control-convert patch.
  - Add BR on NetworkManager-glib-devel.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.27.3-1
changelog:
  - Update to 2.27.3.
  - See http://download.gnome.org/sources/empathy/2.27/empathy-2.27.3.news
  - Add BR on webkitgtk-devel.
  - Bump version of tp-glib needed.
  - Update tp-mission-control-convert patch.
  - TODO: Enable libchamplain & geoclue support once deps are met.


author: Peter Gordon <peter@thecodergeek.com> - 2.26.0.1-1
changelog:
  - Update to new upstream release (2.26.0.1): updated translations, fixes a
    couple of crasher bugs and usage of the UNIX socket address.


author: Brian Pepple <bpepple@fedoraproject.org> - 2.25.90-1
changelog:
  - Update to 2.25.90.
  - Bump min version of tp-glib needed.
  - Add BR on tp-farsight-devel & libnotify-devel.
  - Drop Requires on tp-stream-engine.


author: Peter Gordon <peter@thecodergeek.com> - 2.23.90-2
changelog:
  - Now that Empathy will be the default IM client in F10+, hardcode a dependency
    on telepathy-haze to keep the same protocol functionality across upgrades,
    for a much improved "out of the box" experience.
  - Reference: bug 458935.


author: Peter Gordon <peter@thecodergeek.com> - 2.23.6-3
changelog:
  - Apply patch from Colin Walters to automagically update profile namings for
    the switch to using Empathy's provided profiles.
  - Drop the upgrade script (no longer needed since it's automatically done).
    - upgrade-haze-profiles.sh


author: Peter Gordon <peter@thecodergeek.com> - 2.23.6-2
changelog:
  - Use upstream's AIM, ICQ, MSN-Haze, and Yahoo profiles instead of recommending
    the telepathy-haze-mission-control package. (The Haze-provided ones have grown
    horribly stale...). This makes for better automagic functionality (if Haze is
    installed, Empathy/MC will autodetect it) and tracks upstream more closely.
    + upgrade-haze-profiles.sh


author: Peter Gordon <peter@thecodergeek.com> - 2.23.6-1
changelog:
  - Update to new upstream release (2.23.6)
  - Use the in-tarball libtool scripts instead of the system copy to workaround
    'make install' errors.


author: Brian Pepple <bpepple@fedoraproject.org> - 0.23.1-2
changelog:
  - Drop multiple copies of COPYING file.
  - Drop BR on gnome-vfs2-devel.
  - Require telepathy-stream-engine for VOIP support.
  - Add BR on iso-codes-devel, so spell-checking is enabled.


author: Peter Gordon <peter@thecodergeek.com> - 0.23.1-1
changelog:
  - Update to new upstream release (0.23.1)
  - Drop libtelepathy dependencies; upstream switched fully to telepathy-glib.


author: Peter Gordon <peter@thecodergeek.com> - 0.21.2-1
changelog:
  - Update to new upstream release (0.21.2)
  - Drop backported drag-and-drop patch (fixed upstream):
      - svn380-fix-contact-DnD.patch
  - Update README.ConnectionManagers: Include Haze package note, remove Galago
    note (a feed-only connection manager isn't useful for instant messaging),
    and fix some wording.


author: Peter Gordon <peter@thecodergeek.com> - 0.14-5
changelog:
  - Backport upstream patch to fixes crashes when using drag-and-drop of a
    contact from the buddy list to the current conversation window to initiate a
    conversation:
      + svn380-fix-contact-DnD.patch 
  - Resolves: GNOME bug 483168 (crash in Empathy Instant Messenger: I had
    dragged a contact ...)


author: Peter Gordon <peter@thecodergeek.com> - 0.14-4
changelog:
  - Depend on Salut and Gabble to enable XMPP by default. Otherwise, Empathy
    is essentially useless due to the need to install an external connection
    manager. Also, add a README.ConnectionManagers to the installed
    documentation which lists other possibilities.
  - Resolves: bug 308871 (Make empathy dependent at least on telepathy-gabble)
    and bug 334221 (Default empathy install is useless).


author: Peter Gordon <peter@thecodergeek.com> - 0.14-3
changelog:
  - Enable VoIP support for those brave enough to test/break/debug it (F9+
    only). Though it is functional, it is still deemed rather unstable by
    upstream. Use it at your own risk. :)


author: Peter Gordon <peter@thecodergeek.com> - 0.14-2
changelog:
  - Disable VoIP support at this time, since it is deemed unstable by upstream
    for now. (Thanks to Brian Pepple for the notice.)


author: Peter Gordon <peter@thecodergeek.com> - 0.13-1
changelog:
  - Update to new upstream release (0.13), which adds a panel applet (Megaphone)
    and python bindings.
  - Split shared libraries into a libs subpackage for easier handling
    in multi-lib environments.


author: Peter Gordon <peter@thecodergeek.com> - 0.12-1
changelog:
  - Update to new upstream release (0.12).
  - Build against new mission-control stack.
  - Update License tag (GPLv2+).
  - Alphabetize BuildRequires list (aesthetic-only change).


author: David Nielsen <david@lovesunix.net> - 0.6-3
changelog:
  - Add telepathy-filesystem to Requires
  - Move .desktop from autostart to applications
  - Nasty hackery to make empathy launch from the menu


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-5
changelog:
  - Resolves: rhbz#1049760 - [ALL LANG] Traceback produced when run ibus-table-createdb from terminal.
  - When tabcreatedb.py is called without any options, print a usage message. Do not just show a cryptic backtrace.


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-2
changelog:
  - Resolves: #911487 - Non-Chinese tables from the ibus-table-other package do not work
  - Add auto_select functionality to select the first phrase when typing.
    Useful for Cyrillic transliteration
  - Update cmode property in chinese mode only
  - Fall back to auto_select = False if neither dconf nor the table
    have a value for auto_select
  - Preedit needs to be updated on page-up and page-down


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-1
changelog:
  - update to latest upstream 1.5.0  from Caius ‘kaio’ Chance’s repository
  - add patches for better simplified/traditional Chinese detection
  - Resolves: #857967 - simplified/traditional Chinese detection in ibus-table does not work well


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130110-1
changelog:
  - Resolves: #513901 ibus-table setup does not store config settings
  - update to latest upstream 1.4.99.20130110 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - When detecting the Chinese mode from the environment, also check LC_ALL
  - Fix typo in self._chinese_mode variable (The typo broke the SC/TC property)
  - Make cursor in lookup table always visible (became invisible after the port to GObjectIntrospection)
  - apply changes in values of dconf keys immediately


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130108-1
changelog:
  - update to latest upstream 1.4.99.20130108 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - includes port to GObjectIntrospection now


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20121113-1
changelog:
  - update to latest upstream 1.4.99.20121113 from Caius ‘kaio’ Chance’s repository, using rel20121101 git tag
  - remove ibus-table-1.4.99.20120907-improve-chinese-category-check.patch (included upstream)
  - remove fix-ipa-x-sampa-table-and-phrases-containing-spaces.patch (included upstream)
  - Fix marking of translatable strings for gettext
  - update zh_??.po files
  - Add German translation
  - Do not fail if the ~/.ibus/byo-tables/ directory does not exist


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20120907-3
changelog:
  - Resolves: #856903
  - Fix ipa-x-sampa table and phrases containing spaces in emoji-table
    Currently there is a regular expression which filters out several
    lines defining valid phrases. The emoji-table for example has phrases
    containing spaces which are currently filtered out and the ipa-x-sampa
    table has trailing comments which are filtered out as well.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20120907-2
changelog:
  - Resolves: #856320
  - Improve check whether a phrase is simplified or traditional Chinese
    The improvement is to ignore all non-Han characters when
    doing the check.
    This is to avoid classifying a simplified Chinese string as
    traditional just because it happens to include some non-Chinese
    characters, for example box drawing characters, which cannot be
    converted to gb2312 but happen to be convertible to big5hkscs.
    This fixes the problem in the emoji-table input method that most
    phrases cannot be input at all.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20120907-1
changelog:
  - Relates: #855250
  - see comment#1 in #855250
  - update to latest upstream 1.4.99.20120907 from Caius 'kaio' Chance's repository
  - remove ibus-table-1.3.9.20110827-add-some-keys-for-translit.patch (included upstream)
  - remove ibus-table-1.3.9.20110827-enable-non-ascii.patch (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.3.9.20110827-4
changelog:
  - Resolves: #845798
  - add ibus-table-1.3.9.20110827-add-some-keys-for-translit.patch (from Yuwei YU, upstream)
  - add ibus-table-1.3.9.20110827-enable-non-ascii.patch  (from Yuwei YU, upstream)
  - add ibus-table-1.3.9.20110827-uppercase-umlauts.patch to allow uppercase as well in translit


author: Caius 'kaio' Chance <k at kaio.me> - 1.2.0.20100111-2.fc13
changelog:
  - Temporary keep files of additional available in ibus-table until 
    ibus-table-{code,latin} packages are ready in repository.


author: Caius 'kaio' Chance <k at kaio.me> - 1.2.0.20100111-1.fc13
changelog:
  - Updated source from upstream.
  - Migreate tables from ibus-table-additional to ibus-table-latin and ibus-table-code.


author: Caius Chance <cchance@redhat.com> - 1.1.0.20090316-1.fc11
changelog:
  - Resolves: rhbz#490396
  - Updated source tarball.
  - Disabled speedmeter until config option is implemented.


author: Jens Petersen <petersen@redhat.com> - 1.1.0.20090220-5
changelog:
  - make pkgconfig noarch with ibus-table-pkgconfig-noarch.patch
  - fix license field: actually LGPL
  - drop gettext-devel BR
  - require ibus > 1.1.0


author: Caius Chance <cchance@redhat.com> - 1.1.0.20090220-1.fc11
changelog:
  - Resolves: rhbz#484650
  - Updated to latest upstream release.
  - Splitted chinese input methods into modules.


author: Caius Chance <cchance@redhat.com> - 0.1.1.20081014-4
changelog:
  - Resolves: rhbz#466430 rhbz#466844
  - Added wildcard features.
  - Added preedit clearance on refocus.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
  - Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
  - Add BuildRequires to specify version tpm2-tss-devel needed
  - Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
  resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Akira TAGOH <tagoh@redhat.com> - 20120415-1
changelog:
  - Updates to 20120415.
  - Get rid of Japanese manpages that English manpages is not available in Fedora.


author: Akira TAGOH <tagoh@redhat.com> - 20101205-3
changelog:
  - Add deprecated notice for the usage of PORT in sink directives. (#600321)
  - Add descriptions for the extended and device format fields. (#669646)


author: Akira TAGOH <tagoh@redhat.com> - 20101110-1
changelog:
  - Updates to 20101110.
  - Get rid of the unnecessary patches:
    - man-pages-ja-missing-pkglist.patch
    - man-pages-ja-fix-mdoc.patch


author: Akira TAGOH <tagoh@redhat.com> - 20101028-1
changelog:
  - Updates to 20101028.
  - Get rid of patches since applied upstream:
    - man-pages-ja-IT603773-less.patch


author: Akira TAGOH <tagoh@redhat.com> - 20100315-1
changelog:
  - updates to 20100315.
  - get rid of SysVinit manpages according to #580465.
    - halt(8)
    - init(8)
    - poweroff(8)
    - reboot(8)
    - runlevel(8)
    - shutdown(8)
    - telinit(8)


author: Akira TAGOH <tagoh@redhat.com> - 20091215-1
changelog:
  - updates to 20091215.
  - apply some patches to correct typos:
    - man-pages-ja-486655-mkfs.8.patch
    - man-pages-ja-509048-less.1.patch
    - man-pages-ja-515467-strings.1.patch
    - man-pages-ja-527638-chgrp.1.patch
    - man-pages-ja-537103-ip.7.patch
    - man-pages-ja-fix-mdoc.patch
  - clean up the spec file.


author: Akira TAGOH <tagoh@redhat.com> - 20090615-1
changelog:
  - updates to 20090615.
  - Remove patches merged upstream:
    - man-pages-ja-20031215-crontab-0days.patch
    - man-pages-ja-432668-iptables.8.patch
    - man-pages-ja-20050215-ls.patch
  - Correct various typos:
    - sysctl(8), bash(1), echo(1), wall(1), vmstat(8), edquota(8).


author: Akira TAGOH <tagoh@redhat.com> - 20080815-1
changelog:
  - updates to 20080815.
  - correct the description of 'suspend' built-in command in bash(1).
  - correct the description of top(1) command.


author: Akira TAGOH <tagoh@redhat.com> - 20080415-2
changelog:
  - correct the description of --dscp option in iptables(8).
  - correct the description of the syntax for octadecimal and hexadecimal
    in printf(1).


author: Akira TAGOH <tagoh@redhat.com> - 20070915-1
changelog:
  - updates to 20070915.
    - remove man-pages-ja-222495-swapon.2.patch so that it's no longer needed.
  - clean up the spec file.
  - fix some warnings in perl script.


author: Akira TAGOH <tagoh@redhat.com> - 20070615-1
changelog:
  - updates to 20070615.
    - man-pages-ja-20051115-libaio.patch: removed.
    - man-pages-ja-20060815-204664-write.2.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> - 20060815-2
changelog:
  - man-pages-ja-20060815-204667-nfs.5.patch: fixed nfs.5
  - man-pages-ja-20060815-204664-write.2.patch: fixed write.2
  - man-pages-ja-20060815-178955-at.1.patch: fixed at.1


author: Akira TAGOH <tagoh@redhat.com> - 20051115-1
changelog:
  - updates to 20051115.
  - man-pages-ja-20051115-libaio.patch: fixed a misleading of the header file
    required and a typo.
  - man-pages-ja-20050215-ls.patch: fixed the -H option's explanation.


author: Akira TAGOH <tagoh@redhat.com> - 20051015-1
changelog:
  - updates to 20051015.
  - man-pages-ja-20050215-shmget.patch: no longer needed. merged into upstream.


author: Akira TAGOH <tagoh@redhat.com> - 20050215-1
changelog:
  - updates to 20050215.
  - fixed wrong argument type and structure member variable type
    in shmget(2) (#149217)


author: Akira TAGOH <tagoh@redhat.com> 20040515-1
changelog:
  - updates to 20040515.
  - fixed wrong manpage for kill(1). we prefers util-linux thing rather than procps.


author: Akira TAGOH <tagoh@redhat.com> 20030415-3
changelog:
  - include README and translation_list files. (#90543)
  - use sh-utils's su.1 instead of shadow's one (#90552)
  - fix summary and description. (#90548)


author: Xavier Bachelot <xavier@bachelot.org> 0.2.1-1
changelog:
  - First upstream official release.
  - Fix BD-J build (missing files in upstream tarball).
  - Have subpackages require an arch-specific base package.


author: Xavier Bachelot <xavier@bachelot.org> 0.2-0.1.20110107git0e5902ff9a6f1
changelog:
  - Update to latest snapshot.
  - Add BR: libxml2-devel for metadata parser.
  - Add BR: graphviz for doc generation.


author: Iain Arnell <iarnell@gmail.com> 1:1.4200-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - bump epoch to match that in perl.spec
  - install to privlib, not vendorlib


author: Steven Pritchard <steve@kspei.com> 0.04-1
changelog:
  - Update to 0.04.
  - Update Source0 URL.
  - Add version to Test::More dep.
  - LICENSE and README went away.


author: Ondrej Kozina <okozina@redhat.com> - 0.2.8-1
changelog:
  - Update to snapper 0.2.8
  - patch: rule out race while mounting lvm snapshot
  - Resolves: #1250371 #1262370


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-9
changelog:
  - patch: fix snapperd abort while passing large data over dbus
  - patch: workaround linkage issue on s390 and ppc64le
  - Resolves: #1229353


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
  - patch: fix empty-pre-post cleanup algorithm
  - patch: add conditionals for btrfs library versions
  - Resolves: #1071973 #1142954


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
  - patch: Add norecovery option mounting XFS read-only snapshot
  - patch: Fix ACL modification failure with XFS filesystem
  - patch: Sync SELinux context of .snapshots subvolume (btrfs only)
  - Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
  - patch: Fix failure in invoking btrfs internal comparison of subvolumes
  - patch: Remove references to missing programs from man pages
  - Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-3
changelog:
  - enable btrfs compare using send/receive in libbtrfs
  - patch: adapt sources to change in libtrfs API (btrfs_read_and_process_send_stream)
  - Resolves: #1055579


author: Ondrej Kozina <okozina@redhat.com> - 0.1.5-1
changelog:
  - updated to latest upstream
  - allow whitespace in ALLOW_USERS and ALLOW_GROUPS in snapper's config
  - enable new pam module
  - patch: pam module installed in proper libdir


author: Ondrej Kozina <okozina@redhat.com> - 0.1.3-1.20130418git7ca81a2
changelog:
  - updatet to latest upstream version
  - add support to compare extended attributes ('xadiff' command)
  - add support to revert modificiations in file's extended attributes
  - patch: avoid useless build dependency on libattr-devel


author: Ondrej Kozina <okozina@redhat.com> - 0.1.2-1.20130211git676556f
changelog:
  - updated to latest upstream version
  - fixed wrong include: "auto_ptr.h" -> <memory>
  - moved diffutils dependency to client


author: Ondrej Kozina <okozina@redhat.com> - 0.1.0-1.20121026git1aaa372
changelog:
  - removed python binding since python can use dbus interface instead
  - removed btrfs-progs and LVM dependecies (#852174)
  - patch: do not build zypp plugin
  - patch: avoid abrt when 'diff' command is executed without arguments
  - patch: do not check for btrfs-progs binary
  - patch: do not allow 'create-config' command on non-thin LVM volumes (#852174)
  - edit libtool script to link with: '-Wl, --as-needed'
  - spec file polishing


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Nathaniel McCallum <npmccallum@redhat.com> - 4-1
changelog:
  - Import SRPM from Fedora (tang-4-3.fc26)
  - Remove nagios dependency
  - Adjust http-parser version for RHEL


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added cscope-indexer helper and xcscope lisp addon
  - Added man page for xcscope
  - Added triggers to add xcscope.el pkg to (x)emacs
  - Thanks to Ville, Michael and Jens for thier help :)


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added upstream ocs fix
  - Added feature to find symbol assignments
  - Changed default SYSDIR directory to /var/lib/cs
  - Incoproated M. Schwendt's fix for ocs -s


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-6
changelog:
  - Rework the spec file formatting to match templates from rpmdev
  - Be explicit about file attributes, just in case


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-5
changelog:
  - Updates after reading packaging guide-lines more thoroughly:
  - Make license version more explicit
  - Add generate-tarball.sh, and associated comments
  - Added BuildRequires on kernel-headers
  - Added COPYING as a doc
  - Use dollar v.s. percent macros more consitently


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-4
changelog:
  - Repackage the source tarball to remove a3load.hex
  - Added instructions to spec file on how to do the above
  - Remove reference to a3load.hex from the man page too


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-3
changelog:
  - Update BuildRoot per Fedora wiki
  - Fixed rpmlint complaint about not cleaning buildroot
  - Updated source patch file to match latest kernel file layout
  - Add patch to remove reference to non-shipped non-free a3load.hex firmware


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111
changelog:
  - Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * Incorrect change, and the bug is already fixed.
  - Move 0218-RHBZ-1448576-3PAR-config.patch to
    0217-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-110
changelog:
  - Add 0215-RHBZ-1444194-fix-check-partitions.patch
    * make sure kpartx partions match the correct device
  - Add 0216-RHBZ-1448562-fix-reserve.patch
    * don't join threads that haven't been created
  - Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * blacklist db2.* devices
  - Add 0218-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1444194, #1448562, #1437329, #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-109
changelog:
  - Add 0214-RHBZ-1392115-set-paths-not-ready.patch
    * Set ENV{SYSTEMD_READY}="0" on multipath path devices
  - Resolves: bz #1392115


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-107
changelog:
  - Modify 0197-RHBZ-1394059-max-sectors-kb.patch
    * Make multipath only change max_sectors_kb on creates. On reloads, it
      just makes sure the new path matches the multipath device.
  - Refresh 0198-RHBZ-1372032-detect-path-checker.patch
  - Refresh 0201-RHBZ-1403552-silence-warning.patch
  - Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
  - Refresh 0207-UP-add-libmpathcmd.patch
  - Refresh 0212-RHBZ-1431562-for-read-only.patch
  - Resolves: bz #1394059


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-104
changelog:
  - Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
  - Modify 0209-UPBZ-1430097-multipath-C-API.patch
    * change _pkgconfdir and fixed double-closing fd
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Related: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-102
changelog:
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Resolves: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-101
changelog:
  - Modify 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * change print message
  - Add 0191-RHBZ-1169168-disable-changed-paths.patch
    * add "disabled_changed_wwids" multipath.conf parameter to disable
      paths whose wwid changes
  - Add 0192-RHBZ-1362409-infinibox-config.patch
  - Add 0194-RHBZ-1351964-kpartx-recurse.patch
    * fix recursion on corrupt dos partitions
  - Add 0195-RHBZ-1359510-no-daemon-msg.patch
    * print a messages when multipathd isn't running
  - Add 0196-RHBZ-1239173-dont-set-flag.patch
    * don't set reload flag on reloads when you gain your first
      valid path
  - Add 0197-RHBZ-1394059-max-sectors-kb.patch
    * add "max_sectors_kb" multipath.conf parameter to set max_sectors_kb
      on a multipath device and all its path devices
  - Add 0198-RHBZ-1372032-detect-path-checker.patch
    * add "detect_checker" multipath.conf parameter to detect ALUA arrays
      and set the path checker to TUR
  - Add 0199-RHBZ-1279355-3pardata-config.patch
  - Add 0200-RHBZ-1402092-orphan-status.patch
    * clear status on orphan paths
  - Add 0201-RHBZ-1403552-silence-warning.patch
  - Add 0202-RHBZ-1362120-skip-prio.patch
    * don't run prio on failed paths
  - Add 0203-RHBZ-1363718-add-msgs.patch
  - Add 0204-RHBZ-1406226-nimble-config.patch
  - Add 0205-RHBZ-1416569-reset-stats.patch
    * add "reset maps stats" and "reset map <map> stats" multipathd
      interactive commands to reset the stats tracked by multipathd
  - Add 0206-RHBZ-1239173-pt2-no-paths.patch
    * make multipath correctly disable scanning and rules running when
      it gets a uevent and there are not valid paths.
  - Resolves: bz #1169168, #1239173, #1279355, #1359510, #1362120, #1362409
  - Resolves: bz #1363718, #1394059, #1351964, #1372032, #1402092, #1403552
  - Resolves: bz #1406226, #1416569


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-100
changelog:
  - Add 0189-RHBZ-1368211-remove-retries.patch
    * add "remove_retries" multipath.conf parameter to make multiple attempts
      to remove a multipath device if it is busy.
  - Add 0190-RHBZ-1380602-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Resolves: bz #1368211, #1380602


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99
changelog:
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Resolves: bz #1368501


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-98
changelog:
  - Modified 0180-multipath-tools-Add-rbd-checker.patch
    * make the rbd path checker only compile if librados2-devel is installed
  - Make librados2-devel only be BuildRequired on x86_64
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-97
changelog:
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Added BuildRequires on librados2-devel
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-96
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * change missing_uev_msg_delay to missing_uev_msg_timeout, and make
      multipathd re-enable table loads if the timeout has passed
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0155-UPBZ-1300415-PURE-config.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Resolves: bz #1304687, #1362396, #1357382, #1363830


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-95
changelog:
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430
  - Resolves: bz #1350931, #1351430, #1352925, #1356651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-93
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Resolves: bz #1299600, #1347769, #1353357


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-92
changelog:
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Resolves: bz #1323429


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-91
changelog:
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Resolves: bz #1341748


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-90
changelog:
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Resolves: bz #1255885, #1311463, #1311659, #1333331, #1333492


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-89
changelog:
  - Modify 0151-RHBZ-1297456-weighted-fix.patch
    * add documentation
  - Add 0157-RHBZ-1319853-multipath-c-error-msg.patch
    * better error reporting for multipath -c
  - Add 0158-RHBZ-1318581-timestamp-doc-fix.patch
    * add documentation for -T
  - Add 0159-UPBZ-1255885-udev-waits.patch
    * make multipath and kpartx wait after for udev after each command
  - Resolves: bz #1297456, #1319853, #1318581, #1255885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-88
changelog:
  - Add 0151-RHBZ-1297456-weighted-fix.patch
    * add wwn keyword to weighted prioritizer for persistent naming
  - Add 0152-RHBZ-1269293-fix-blk-unit-file.patch
    * use "Wants" instead of "Requires"
  - Add 0153-RH-fix-i686-size-bug.patch
    * use 64-bit keycodes for multipathd client commands
  - Add 0154-UPBZ-1291406-disable-reinstate.patch
    * don't automatically reinstate ghost paths for implicit alua devices
  - Add 0155-UPBZ-1300415-PURE-config.patch
    * Add default config for PURE FlashArray
  - Add 0156-UPBZ-1313324-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Resolves: bz #1297456, #1269293, #1291406, #1300415, #1313324


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Add 0133-RHBZ-1241774-sun-partition-numbering.patch
    * makr kpartx device numbers match partition numbers
  - Add 0134-RHBZ-1241528-check-mpath-prefix.patch
    * only touch devices with a "mpath-" dm uuid prefix
  - Add 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger path uevent the first time a path is claimed by multipath
  - Add 0136-RHBZ-1304687-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Add 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Add 0138-RHBZ-1288660-fix-mpathconf-allow.patch
    * don't remove existing lines from blacklist_exceptions section
  - Add 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Add 0140-RHBZ-1299647-fix-help.patch
  - Add 0141-RHBZ-1303953-mpathpersist-typo.patch
  - Add 0142-RHBZ-1283750-kpartx-fix.patch
    * only remove devices if their uuid says that they are the correct
      partition device
  - Add 0143-RHBZ-1299648-kpartx-sync.patch
    * default to using udev sync mode
  - Add 0144-RHBZ-1299652-alua-pref-arg.patch
    * allow "exclusive_pref_bit" argument to alua prioritizer
  - Add 0145-UP-resize-help-msg.patch
  - Add 0146-UPBZ-1299651-raw-output.patch
    * allow raw format mutipathd show commands, that remove headers and padding
  - Add 0147-RHBZ-1272620-fail-rm-msg.patch
  - Add 0148-RHBZ-1292599-verify-before-remove.patch
    * verify that all partitions are unused before attempting to remove a device
  - Add 0149-RHBZ-1292599-restore-removed-parts.patch
    * don't disable kpartx when restoring the first path of a device.
  - Add 0150-RHBZ-1253913-fix-startup-msg.patch
    * wait for multipathd daemon to write pidfile before returning
  - Resolves: bz #1241528, #1241774, #1253913, #1272620, #1273173, #1280524
  - Resolves: bz #1283750, #1288660, #1292599, #1299600, #1299647, #1299648
  - Resolves: bz #1299651, #1299652, #1303953, #1304687


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Add 0132-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Resolves: bz # 1296979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-84
changelog:
  - 0131-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices
  - Resolves: bz# 1259831


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Add 0130-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Resolves: bz# 1259523


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Add 0129-UPBZ-1254292-iscsi-targetname.patch
    * check for targetname iscsi sysfs value
  - Resolves: bz #1254292


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-81
changelog:
  - Modify 0128-RHBZ-1222123-mpathconf-allow.patch
    * Fix up covscan complaints.
  - Related: bz #1222123


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Resolves: bz #1201030, #1222123


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-79
changelog:
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Resolves: bz #1153832, #1209275, #1211383


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-78
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Code refactor and minor fix.
  - Add 0106-RHBZ-1169935-no-new-devs.patch
    * add new configuration option "ignore_new_boot_devs"
  - Add 0107-RH-adapter-name-wildcard.patch
    * add new paths wildcard to show the host adapter
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch to kpartx -u in 62-multipath.rules to delete removed partitions
  - Add 0109-RH-read-only-bindings.patch
    * add -B support to multipathd
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * virtio-blk devices don't report a WWID so multipath can't use them
  - Add 0111-RH-dont-show-pg-timeout.patch
    * remove pg_timeout setting and displaying code
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * add new configuration option "config_dir"
  - Add 0113-RHBZ-1194917-cleanup.patch
    * code refactoring
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * add new configuration options "delay_watch_checks" and
      "delay_wait_checks"
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * fix crash when multipath fails adding a multipath device
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * New builtin config
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * update default config
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Modify mulfipth.conf default config file (bz #1194794)
  - Related: bz #1153832
  - Resolves: bz #631009, #1043093, #1081397, #1166072, #1169935, #1188179
  - Resolves: bz #1194794, #1194917, #1196394, #1197234, #1198418, #1198424
  - Resolves: bz #1200738, #1212590


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Add 0105-RHBZ-1180032-find-multipaths-man.patch
    * add find_multipaths to man page
  - Modify multipath.conf (bz #1069360)
    * add uid_attribute example
  - Resolves: bz #1180032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-76
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Fixed compiler warning message for builds with old device-mapper versions
  - Add 0104-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Resolves: bz #1159337
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0103-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1148979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Add 0101-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0102-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Resolves: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Re-add 0050-RH-listing-speedup.patch
  - Modify 0098-UPBZ-1067171-mutipath-i.patch
    * add dry_run cleanup code from upstream
  - Refresh 0099-RH-add-all-devs.patch
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Modify 0096-RHBZ-979474-new-wildcards.patch
    * Fix a faulty check
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Related: bz #979474
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-69
changelog:
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Resolves: bz #979474


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Resolves: bz #1069584, #1104605, #1086825, #1086825, #1127944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-67
changelog:
  - Modify multipath.conf (bz #1069360)
    * remove getuid_callout example
  - Add 0081-RHBZ-1066264-check-prefix-on-rename.patch
    * make multipath check the prefix on kpartx partitions during rename, and
      copy the existing behaviour
  - Add 0082-UPBZ-1109995-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Add 0083-RHBZ-1080055-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Add 0084-RHBZ-1110000-multipath-man.patch
    * fix errors in multipath man page
  - Add 0085-UPBZ-1110006-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0086-RHBZ-1110007-orphan-path-on-failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0087-RHBZ-1110013-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Add 0088-RHBZ-1069811-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0089-RHBZ-1110016-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the CPU
  - Add 0090-UPBZ-1080038-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Resolves: bz #1069360, #1066264, #1109995, #1080055, #1110000, #1110006
  - Resolves: bz #1110007, #1110013, #1069811, #1110016, #1080038


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-66
changelog:
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.
  - Resolves: bz #1075796


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-65
changelog:
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * Fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Resolves: bz #1054044, #1070581


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag, and
      change compilation flags for non-rpmbuild compiles
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.
  - Add 0077-RHBZ-1054806-mpathconf-always-reload.patch
    * Make mpathconf always reconfgure multipathd when you run it with
      a reconfigure option and --with-multipathd=y, even if the
      configuration doesn't change.
  - Update Requires and BuildRequires for device-mapper to 1.02.82-2
  - Install new udev rules file /usr/lib/udev/rules.d/11-dm-mpath.rules
  - Related: bz #1039199
  - Resolves: bz #1054806, #1056686, #1056976


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.
  - Resolves: bz #1039199


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't 
      wiped on the device add event 
  - Add 0068-RHBZ-1034578-label-partition-devices.patch   
    * Make sure that partition devices are labeled like the whole device 
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch   
    *  Use RTPG data in RDAC checker 
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch   
    * make multipathd interactive commands able to handle /dev/<devnode> 
      instead of just <devnode>
  - Resolves: bz #1022899, #1031546, #1033791, #1034578, #1036503


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1018439


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #995538


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-56
changelog:
  - Add 0064-RHBZ-1010040-fix-ID_FS-attrs.patch
    * make multipath create a timestamp file /run/multipathd/timestamp, and
      add -T<timestamp>:<valid> option to shortcut processing if the
      timestamp hasn't changed
  - Resolves: bz #1010040


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-55
changelog:
  - Add 0061-RH-display-find-mpaths.patch
  - Add 0062-RH-dont-free-vecs.patch
    * freeing vecs causes a number of races which can crash multipathd on
      shutdown.
  - Add 0063-RH-fix-warning.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-54
changelog:
  - Modify 0015-RH-fix-output-buffer.patch
    * Fix memory leak
  - Add 0047-RHBZ-kpartx-read-only-loop-devs.patch
    * Fix read only loop device handling
  - Add 0048-RH-print-defaults.patch
  - Add 0049-RH-remove-ID_FS_TYPE.patch
    * remove ID_FS_TYPE udev enviroment variable for multipath devices
  - Add 0051-UP-fix-cli-resize.patch
    * check before dereferencing variables
  - Add 0052-RH-fix-bad-derefs.patch
    * setup multipath free the multipath device when it fails, so don't keep
      using it.
  - Add 0053-UP-fix-failback.patch
    * setting failback in the devices section was broken
  - Add 0054-UP-keep-udev-ref.patch
    * multipathd needs to keep the same udev object across reconfigures
  - Add 0055-UP-handle-quiesced-paths.patch
    * quiesced paths should be treated as down
  - Add 0056-UP-alua-prio-fix.patch
    * Don't count the preferred bit for paths that are active/optimized
  - Add 0057-UP-fix-tmo.patch
    * Cleanup how multipath sets dev_loss_tmo and fast_io_fail_tmo.  Also
      make multipath get changing values directly from sysfs, instead of
      from udev, which caches them.
  - Add 0058-UP-fix-failback.patch
    * make failback print the default value when you show configs.
  - Add 0059-UP-flush-failure-queueing.patch
    * If you can't flush a multipath device, restore the queue_if_no_paths
      value
  - Add 0060-UP-uevent-loop-udev.patch
    * make ueventloop grab it's own udev reference, since it is cancelled
      asychnrously.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-53
changelog:
  - Add 0044-RHBZ-976688-fix-wipe-wwids.patch
    * Seek back to the start of the file after truncating it
  - Add 0045-RHBZ-977297-man-page-fix.patch
    * update man page to match actual defaults
  - Add 0046-RHBZ-883981-move-udev-rules.patch
    * move udev rules file from /lib to /usr/lib
  - Resolves: bz #883981, #976688, #977297


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-52
changelog:
  - Add 0038-RHBZ-799860-netapp-config.patch
  - Add 0039-RH-detect-prio-fix.patch
    * Don't autodetect ALUA prioritizer unless it actually can get a priority
  - Add 0040-RH-bindings-fix.patch
    * Do a better job of trying to get the first free user_friendly_name
  - Add 0041-RH-check-for-erofs.patch
    * Don't create/reload a device read-only unless doing it read/write fails
      with EROFS
  - Remove 0017-RH-fix-sigusr1.patch
    * fix signal handling upstream way instead
  - Add 0042-UP-fix-signal-handling.patch
    * uxlsnr now handles all the signals sent to multipathd. This makes its
      signal handling posix compliant, and harder to mess up.
  - Add 0043-RH-signal-waiter.patch
    * ioctl isn't a pthread cancellation point.  Send a signal to the waiter
      thread to break out of waiting in ioctl for a dm event.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-51
changelog:
  - Add 0032-RHBZ-956464-mpathconf-defaults.patch
    * fix defaults listed in usage
  - Add 0033-RHBZ-829963-e-series-conf.patch
  - Add 0034-RHBZ-851416-mpathconf-display.patch
    * display whether or not multipathd is running in the status
  - Add 0035-RHBZ-891921-list-mpp.patch
    * add a new path format wilcard to list the multipath device associated
      with a path
  - Add 0036-RHBZ-949239-load-multipath-module.patch
    * load the dm-multipath kernel module when multipathd starts
  - Add 0037-RHBZ-768873-fix-rename.patch
    * When deciding on a multipth devices name on reload, don't default to
      the existing name if there is no config file alias and user_friendly_names
      isn't set. Use the wwid.
  - Modify multipath.conf
  - Resolves: bz #768873, #950252


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-50
changelog:
  - Add 0031-RHBZ-957188-kpartx-use-dm-name.patch
    * use the basename of the devices that will be created to choose the
      delimiter instead of using the device name from the command line
  - Resolves: bz #957188


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-49
changelog:
  - Modify 0020-RHBZ-907360-static-pthread-init.patch
    * Don't initialize uevent list twice
  - Add 0029-RH-no-prio-put-msg.patch
  - Add 0030-RHBZ-916528-override-queue-no-daemon.patch
    * Default to "queue_without_daemon no"
    * Add "forcequeueing daemon" and "restorequeueing daemon" cli commands
  - Modify spec file to force queue_without_daemon when restarting
    multipathd on upgrades.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-48
changelog:
  - Add 0026-fix-checker-time.patch
    * Once multipathd hit it max checker interval, it was reverting to
      to shortest checker interval
  - Add 0027-RH-get-wwid.patch
    * Multipath wasn't correctly setting the multipath wwid when it read devices
      in from the kernel
  - Add 0028-RHBZ-929078-refresh-udev-dev.patch
    * Make multipath try to get the UID of down devices.  Also, on ev_add_path,
      make multipathd reinitialize existing devices that weren't fully
      initialized before.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-47
changelog:
  - Add 0021-RHBZ-919119-respect-kernel-cmdline.patch
    * keep the multipath.rules udev file from running and multipathd from
      starting if nompath is on the kernel command line
  - Add 0022-RH-multipathd-check-wwids.patch
    * Whenever multipath runs configure, it will check the wwids, and
      add any missing ones to the wwids file
  - Add 0023-RH-multipath-wipe-wwid.patch
    * multipath's -w command will remove a wwid from the wwids file
  - Add 0024-RH-multipath-wipe-wwids.patch
    * multipath's -W command will set reset the wwids file to just the current
      devices
  - Add 0025-UPBZ-916668_add_maj_min.patch
  - Resolves: bz #919119


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-46
changelog:
  - Add 0020-RHBZ-907360-static-pthread-init.patch
    * statically initialize the uevent pthread structures


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-45
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-130222
    (git commit id: 67b82ad6fe280caa1770025a6bb8110b633fa136)
  - Refresh 0001-RH-dont_start_with_no_config.patch
  - Modify 0002-RH-multipath.rules.patch
  - Modify 0003-RH-Make-build-system-RH-Fedora-friendly.patch
  - Refresh 0004-RH-multipathd-blacklist-all-by-default.patch
  - Refresh 0005-RH-add-mpathconf.patch
  - Refresh 0006-RH-add-find-multipaths.patch
  - Add 0008-RH-revert-partition-changes.patch
  - Rename 0008-RH-RHEL5-style-partitions.patch to
  	 0009-RH-RHEL5-style-partitions.patch
  - Rename 0009-RH-dont-remove-map-on-enomem.patch to
  	 0010-RH-dont-remove-map-on-enomem.patch
  - Rename 0010-RH-deprecate-uid-gid-mode.patch to
  	 0011-RH-deprecate-uid-gid-mode.patch
  - Rename 0013-RH-kpartx-msg.patch to 0012-RH-kpartx-msg.patch
  - Rename 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch to
           0013-RHBZ-883981-cleanup-rpmdiff-issues.patch
  - Rename 0039-RH-handle-other-sector-sizes.patch to
  	 0014-RH-handle-other-sector-sizes.patch
  - Rename 0040-RH-fix-output-buffer.patch to 0015-RH-fix-output-buffer.patch
  - Add 0016-RH-dont-print-ghost-messages.patch
  - Add 0017-RH-fix-sigusr1.patch
    * Actually this fixes a number of issues related to signals
  - Rename 0018-RH-remove-config-dups.patch to 0018-RH-fix-factorize.patch
    * just the part that isn't upstream
  - Add 0019-RH-fix-sockets.patch
    * makes abstract multipathd a cli sockets use the correct name.
  - Set find_multipaths in the default config


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-44
changelog:
  - Add 0036-UP-fix-state-handling.patch
    * handle transport-offline and quiesce sysfs state
  - Add 0037-UP-fix-params-size.patch
  - Add 0038-RH-fix-multipath.rules.patch
    * make sure multipath's link priority gets increased
  - Add 0039-RH-handle-other-sector-sizes.patch
    * allow gpt partitions on 4k sector size block devices.
  - Add 0040-RH-fix-output-buffer.patch
    * fix multipath -ll for large configuration.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-42
changelog:
  - Add 0034-RHBZ-887737-check-for-null-key.patch
  - Add 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch
    * Compile multipathd with full RELRO and PIE and install to /usr


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-41
changelog:
  - Add 0033-RH-dont-disable-libdm-failback-for-sync-case.patch
    * make kpartx -s and multipath use libdm failback device creation, so
      that they work in environments without udev


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-40
changelog:
  - Add 0032-RH-make-path-fd-readonly.patch
    * revert change made when adding persistent reservations, so that path fds
      are again opened O_RDONLY


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-38
changelog:
  - Add 0026-RH-fix-mpathpersist-fns.patch
  - Add 0027-RH-default-partition-delimiters.patch
    * Only use the -p delimiter when the device name ends in a number
  - Add 0028-RH-storagetek-config.patch
  - Add 0029-RH-kpartx-retry.patch
    * retry delete on busy loop devices
  - Add 0030-RH-early-blacklist.patch
    * multipath will now blacklist devices by device type and wwid in
      store_pathinfo, so that it doesn't do a bunch of unnecessary work
      on paths that it would only be removing later on.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-35
changelog:
  - Add 0022-RHBZ-864368-disable-libdm-failback.patch
    * make kpartx and multiapthd disable libdm failback device creation
  - Add 0023-RHBZ-866291-update-documentation.patch
  - Resolves: bz #864368, #866291


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-33
changelog:
  - Modify 0016-RH-retain_hwhandler.patch
    * Check the dm-multipath module version, and don't enable
      retain_attached_hw_handler if the kernel doesn't support it
  - Add 0019-RH-detect-prio.patch
    * add detect_prio option, to make multipath check if the device
      supports the ALUA prio, before defaulting to the configured prio
  - Remove 0017-RH-netapp_config.patch
  - Add 0020-RH-netapp-config.patch
    * new netapp config that uses retain_attached_hw_handler and
      detect_prio to autoconfigure ALUA and non-ALUA devices.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-32
changelog:
  - Modified 0018-RH-remove-config-dups.patch
    * Made modified config remove original only if the vendor/product
      exactly match


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-31
changelog:
  - Add 0014-RH-dm_reassign.patch
    * Fix reassign_maps option
  - Add 0015-RH-selector_change.patch
    * devices default to using service-time selector
  - Add 0016-RH-retain_hwhandler.patch
    * add retain_attached_hw_handler option, to let multipath keep an
      already attached scsi device handler
  - Add 0017-RH-netapp_config.patch
  - Add 0018-RH-remove-config-dups.patch
    * Clean up duplicates in the devices and blacklist sections


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-29
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-120821.tgz
    (git commit id: 050b24b33d3c60e29f7820d2fb75e84a9edde528)
    * includes 0001-RH-remove_callout.patch, 0002-RH-add-wwids-file.patch,
      0003-RH-add-followover.patch, 0004-RH-fix-cciss-names.patch
  - Add 0013-RH-kpartx-msg.patch
  - Modify 0002-RH-multipath.rules.patch
    * removed socket call from rules file


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-27
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120613.tgz
    (git commit id: cb0f7127ba90ab5e8e71fc534a0a16cdbe96a88f)
  - Add 0001-RH-remove_callout.patch
    * multipath no longer uses the getuid callout.  It now gets the
      wwid from the udev database or the environment variables
  - Add 0004-RH-fix-cciss-names.patch
    * convert cciss device names from cciss/cXdY to sysfs style cciss!cXdY
  - Split 0009-RH-add-find-multipaths.patch into 0002-RH-add-wwids-file.patch
          and 0010-RH-add-find-multipaths.patch
  - Add 0016-RH-change-configs.patch
    * default fast_io_fail to 5 and don't set the path selector in the
      builtin configs.
  Resolves: bz #831978


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-22
changelog:
  - Add 0012-RH-update-on-show-topology.patch
  - Add 0013-RH-manpage-update.patch
  - Add 0014-RH-RHEL5-style-partitions.patch
  - Add 0015-RH-add-followover.patch
  - Add 0016-RH-dont-remove-map-on-enomem.patch
  - Add 0017-RH-fix-shutdown-crash.patch
  - Add 0018-RH-warn-on-bad-dev-loss-tmo.patch
  - Add 0019-RH-deprecate-uid-gid-mode.patch
  - Add 0020-RH-dont-remove-map-twice.patch
  - Add 0021-RH-validate-guid-partitions.patch
  - Add 0022-RH-adjust-messages.patch
  - Add 0023-RH-manpage-update.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-21
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120123.tgz
    (git commit id: 63704387009443bdb37d9deaaafa9ab121d45bfb)
  - Add 0001-RH-fix-async-tur.patch
  - Add 0002-RH-dont_start_with_no_config.patch
  - Add 0003-RH-multipath.rules.patch
  - Add 0004-RH-update-init-script.patch
  - Add 0005-RH-cciss_id.patch
  - Add 0006-RH-Make-build-system-RH-Fedora-friendly.patch
  - Add 0007-RH-multipathd-blacklist-all-by-default.patch
  - Add 0008-RH-add-mpathconf.patch
  - Add 0009-RH-add-find-multipaths.patch
  - Add 0010-RH-check-if-multipath-owns-path.patch
  - Add 0011-RH-add-hp_tur-checker.patch


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-19
changelog:
  - Modify 0103-add-disable-sync-option.patch
  - Add 0104-RHBZ-737989-systemd-unit-fix.patch
    * systemd will only start multipathd if /etc/multipath.conf exists
  - Add 0105-fix-oom-adj.patch
    * first try setting oom_score_adj


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-17
changelog:
  - Add 0103-add-disable-sync-option.patch
    * add a -n (nosync) option to multipath. This disables synchronous
      file creation with udev.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch through
        0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * sync with current state of RHEL6. Next release should include a updated
      source tarball with most of these fixes rolled in.
  - Add 0102-RHBZ-690828-systemd-unit-file.patch
    * Add Jóhann B. Guðmundsson's unit file for systemd.
    * Add sub-package sysvinit for SysV init script.
  - Resolves: bz #690828


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix bug where mpathconf wouldn't create a multpath.conf file unless one
      already existed.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch
    with 0012-RH-udev-sync-support.patch
    * Add udev sync support to kpartx and multipath. In kpartx it is disabled
      unless you use the -s option.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates a 2 sector large device for dos extended
      partitions, just like the kernel does on the regular block devices.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * Multipath has a new option checker_timeout. If this is not set, 
      all path checker functions with explicit timeouts use
      /sys/block/sd<x>/device/timeout. If this is set, they use it instead.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.5.1-1
changelog:
  - Added _weakrefset requirement for Python 2.7.1.
  - Add support for PyPy.
  - Uses a proper temporary dir when installing environment requirements.
  - Add --prompt option to be able to override the default prompt prefix.
  - Add fish and csh activate scripts.


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.8-1
changelog:
  - update pip to 0.7
  - move regen-docs into bin/
  - Fix #31, make activate_this.py work on Windows (use Lib/site-packages)
  unset PYTHONHOME envioronment variable -- first step towards fixing the PYTHONHOME issue; see e.g. https://bugs.launchpad.net/virtualenv/+bug/290844
  - unset PYTHONHOME in the (Unix) activate script (and reset it in deactivate())
  - use the activate.sh in virtualenv.py via running bin/rebuild-script.py
  - add warning message if PYTHONHOME is set


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.6-1
changelog:
  - allow script creation without setuptools
  - fix problem with --relocate when bin/ has subdirs (fixes #12)
  - Allow more flexible .pth file fixup
  - make nt a required module, along with posix. it may not be a builtin module on jython
  - don't mess with PEP 302-supplied __file__, from CPython, and merge in a small startup optimization for Jython, from Jython


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2-1
changelog:
  - Update for new upstream release.  Doesn't add any new code, just switches
    from a snapshot to a release and bumps version


author: Miloslav Trmač <mitr@redhat.com> - 0.1-19.20090824bzr68
changelog:
  - Filter out bogus Provides: _gpgme.so
  - Drop no longer required references to BuildRoot:
  - s/%define/%global/g


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.1-3
changelog:
  - Add a patch to work under Python 2.3.
  - Stop shipping the tests as they are useless to the end user.


author: Martin Kolman <mkolman@redhat.com> - 0.25.3-1
changelog:
  - Update translations
    Resolves: rhbz#1688260
  - Switch from Transifex to Zanata for pulling translations (mkolman)
    Related: rhbz#1688260


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.25-1
changelog:
  - Add and use the safe_string module and the SafeStr class (vpodzime)
  - Give translators hint about the cryptic strings (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.23-1
changelog:
  - Use Sphinx syntax for docstrings (vpodzime)
  - Allow a change of the I/O functions (vpodzime)
  - Reword the 'Debug' button warning (#948256) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.22-1
changelog:
  - Some more stuff for ABRT/libreport (#929181) (vpodzime)
  - Tell ABRT we are reporting a Python excetion (vpodzime)
  - Use named tuples instead of our magic tuples (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.21-1
changelog:
  - New purely textual text interface (vpodzime)
  - Add dumb enableNetwork implementation to GraphicalIntf (vpodzime)
  - Destroy main window after running it (vpodzime)
  - Get rid of the accountManager and use new libreport API (vpodzime)
  - Add a way to override previously registered callback (vpodzime)
  - Allow callbacks marked as attachment only (vpodzime)
  - Add support for callbacks providing additional data (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.19-1
changelog:
  - Add test for handling unicode strings and files (vpodzime)
  - Read files as UTF-8 and ignore errors (#874250) (vpodzime)
  - Add %check section to the spec file (vpodzime)
  - Fix tests (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.18-1
changelog:
  - Handle tracebacks with no stack (#866441) (vpodzime)
  - Parse component name correctly (#866526) (vpodzime)
  - Spelling corrections (#865993) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.16-1
changelog:
  - Do not overwrite process information with files having the same basename (vpodzime)
  - Encode dump as utf-8 before writing to file (#854959) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.15-1
changelog:
  - Add main_window property to the MainExceptionWindow (vpodzime)
  - Don't try to dump objects without __dict__ (vpodzime)
  - Change require from rpm to rpm-python (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.14-1
changelog:
  - Use just a basename of the attached file as the item name (vpodzime)
  - Set the type hint for the mainExceptionWindow to Dialog (vpodzime)
  - Store and then write out the string representation of the traceback and object dump (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Add files specified in the Config object as attachments to bugreports (vpodzime)
  - Display hint how to quit the debugger (vpodzime)
  - Do not kill the process when 'continue' is used in pdb (vpodzime)
  - Port to Gtk3 and the new design (vpodzime)
  - Remove the rc attribute and getrc methods (vpodzime)
  - Fix 'all' and 'install' Makefile targets (vpodzime)
  - Migrate l10n to Transifex (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> 0.12
changelog:
  - Use new libreport API to get more information to bugzilla (vpodzime).
  - Adapt to the new API of libreport (vpodzime).
  - Move "import rpm" to where it's needed to avoid nameserver problems (clumens).
    Resolves: rhbz#749330
  - Change dependency to libreport-* (mtoman).
    Resolves: rhbz#730924
  - Add abrt-like information to bug reports (vpodzime).
    Resolves: rhbz#728871
  - Propagate the screen attr when using text mode (jmoskovc).


author: Chris Lumens <clumens@redhat.com> - 0.11-1
changelog:
  - Update the spec file URL to something valid (#670601). (clumens)
  - Don't use _D for Debug, since that's already used by the expander (#640929). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.9-1
changelog:
  - Remove the requirement on python-bugzilla (#602794). (clumens)
  - Rename ba.po -> bs.po (#583055). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.8-1
changelog:
  - And add a requirement for report as well. (clumens)
  - filer.py is now completely taken over by meh. (clumens)
  - Everything from savers.py has moved into report. (clumens)
  - Remove unused UI code now that report handles all this for me. (clumens)
  - Switch ExceptionHandler to use report (#562656). (clumens)
  - Don't allow an exception when writing out an attribute stop the whole dump. (clumens)
  - Credit where credit is due. (clumens)


author: Chris Lumens <clumens@redhat.com> - 0.7-1
changelog:
  - Add a test case framework.
  - Move src -> meh for ease of test case writing.
  - Another attempt at making the attrSkipList work (#532612, #532737).


author: Chris Lumens <clumens@redhat.com> - 0.6-1
changelog:
  - Make idSkipList work again.
  - Support dumping objects derived from Python's object.
  - Use the right method to set text on a snack.Entry (#526884).


author: Chris Lumens <clumens@redhat.com> - 0.4-1
changelog:
  - Add a default description to bug reports.
  - Handle the user pressing Escape by continuing to show the dialog.
  - Lots more translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.2-1
changelog:
  - Add a title to the main exception dialog so it looks right in anaconda.
  - Don't include an extra '/' in the displayed bug URL (#517515).
  - Now that there's .po files, package them.
  - Use the new exception icon (#517164).


author: EL Errata <el-errata_ww@oracle.com> - 2.11.0-5.0.1
changelog:
  - Added profiles-oci-recommend package [Orabug: 29632202]
  - Added iscsi plugin, and
    - added oci-rps-xps profile [Orabug: 28397039]
    - added oci-busy-polling profile [Orabug: 28748149]
    - added oci-cpu-power profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1643654
    - used dmidecode only on x86 architectures
      resolves: rhbz#1688371
    - recommend: fixed to work without tuned daemon running
      resolves: rhbz#1687397


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1643654
    - disable KSM only once, re-enable it only on full rollback
      resolves: rhbz#1622239
    - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
      resolves: rhbz#1649408
    - updated virtual-host profile
      resolves: rhbz#1569375
    - added log message for unsupported parameters in plugin_net
      resolves: rhbz#1533852
    - added range feature for cpu exclusion
      resolves: rhbz#1533908
    - make a copy of devices when verifying tuning
      resolves: rhbz#1592743
    - fixed disk plugin/plugout problem
      resolves: rhbz#1595156
    - fixed unit configuration reading
      resolves: rhbz#1613379
    - reload profile configuration on SIGHUP
      resolves: rhbz#1631744
    - use built-in functionality to apply system sysctl
      resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-3
changelog:
  - realtime-virtual-guest/host: start/stop rt-entsk daemon on
    initialization/shutdown
    resolves: rhbz#1616043


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
    - realtime-virtual-host: script.sh: add error checking
    - man: improved tuned-profiles-cpu-partitioning.7
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
    - plugin_scheduler: whitelist/blacklist processed also for thread names
    - bootloader: patch all GRUB2 config files
    - profiles: added mssql profile
    - tuned-adm: print log excerpt when changing profile
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
    - sysctl: support assignment modifiers as other plugins do
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.2.rc2
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1467576
    - fixed expansion of the variables in the 'devices' section
      related: rhbz#1490399
    - cpu-partitioning: add no_rebalance_cores= option
      resolves: rhbz#1497182


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1467576
    - added recommend.d functionality
      resolves: rhbz#1459146
    - recommend: added support for matching of processes
      resolves: rhbz#1461838
    - cpu-partitioning: used tuned instead of tuna for cores isolation
      resolves: rhbz#1442229
    - bootloader: splitted string for removal from cmdline
      resolves: rhbz#1461279
    - network-latency: added skew_tick=1 kernel command line parameter
      resolves: rhbz#1451073
    - bootloader: accepted only certain values for initrd_remove_dir
      resolves: rhbz#1455161
    - increased udev monitor buffer size, made it configurable
      resolves: rhbz#1442306
    - bootloader: don't add nonexistent overlay image to grub.cfg
      resolves: rhbz#1454340
    - plugin_cpu: don't log error in execute() if EPB is not supported
      resolves: rhbz#1443182
    - sap-hana: fixed description of the sap-hana profiles
      resolves: rhbz#1482005
    - plugin_systemd: on full_rollback notify about need of initrd regeneration
      resolves: rhbz#1469258
    - don't log errors about missing files on verify with ignore_missing set
      resolves: rhbz#1451435
    - plugin_scheduler: improved logging
      resolves: rhbz#1474961
    - improved checking if we are rebooting or not
      resolves: rhbz#1475571
    - started dbus exports after a profile is applied
      resolves: rhbz#1443142
    - sap-hana: changed force_latency to 70
      resolves: rhbz#1501252
    - plugin_video: added support for the 'dpm' power method
    - list available profiles on 'tuned-adm profile'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-2
changelog:
  - respin
    related: rhbz#1388454
  - systemd: added support for older systemd CPUAffinity syntax
    resolves: rhbz#1441791
  - scheduler: added workarounds for low level exceptions from
    python-linux-procfs
    resolves: rhbz#1441792
  - bootloader: workaround for adding tuned_initrd to new kernels on restart
    resolves: rhbz#1441797
  - cpu-partitioning: use tuna for cores isolation
    related: rhbz#1403309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed traceback caused by DBus paths copy&paste error
      related: rhbz#1356369
    - tuned-adm: fixed traceback of 'tuned-adm list' if daemon is not running
      resolves: rhbz#1358857


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-6
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1292117


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-5
changelog:
  - fixed various verification issues (by verification-fixes patch)
    resolves: rhbz#1252153
  - realtime profile now sets cpumask of unbound workqueues
    (by realtime-set-unbound-workqueues patch)
    resolves: rhbz#1259043
  - fixed lapic_timer_adv_ns cache in realtime-virtual-host profile
    (by lapic-timer-adv-ns-cache-fix patch)
    resolves: rhbz#1259452
  - fixed find-lapictscdeadline-optimal-fix in realtime-virtual-host profile
    (by find-lapictscdeadline-optimal-fix patch)
    resolves: rhbz#1267284
  - removed nohz_full from the realtime profile (by realtime-remove-nohz-full
    patch)
    resolves: rhbz#1274486


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes
    - defuzzified gtk-3.8 patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.0-1
changelog:
  - new-release
    resolves: rhbz#1155052
    - add support for ethtool -C to tuned network plugin
      resolves: rhbz#1152539
    - add support for ethtool -K to tuned network plugin
      resolves: rhbz#1152541
    - add support for calculation of values for the kernel command line
      resolves: rhbz#1191595
    - no error output if there is no hdparm installed
      resolves: rhbz#1191775
    - do not run hdparm on hotplug events if there is no hdparm tuning
      resolves: rhbz#1193682
    - add oracle tuned profile
      resolves: rhbz#1196298
    - fix bash completions for tuned-adm
      resolves: rhbz#1207668
    - add glob support to tuned sysfs plugin
      resolves: rhbz#1212831
    - add tuned-adm verify subcommand
      resolves: rhbz#1212836
    - do not install tuned kernel command line to rescue kernels
      resolves: rhbz#1223864
    - add variables support
      resolves: rhbz#1225124
    - add built-in support for unit conversion into tuned
      resolves: rhbz#1225135
    - fixed vm.max_map_count setting in sap-netweaver profile
      resolves: rhbz#1228562
    - create tuned profile for RHEL-RT
      resolves: rhbz#1228801
    - plugin_scheduler: added support for runtime tuning of processes
      resolves: rhbz#1148546
    - add support for changing elevators on xvd* devices (Amazon EC2)
      resolves: rhbz#1170152
    - add workaround to be run after systemd-sysctl
      resolves: rhbz#1189263
    - do not change settings of transparent hugepages if set in kernel cmdline
      resolves: rhbz#1189868
    - add tuned profiles for RHEL-NFV
      resolves: rhbz#1228803
    - plugin_bootloader: apply $tuned_params to existing kernels
      resolves: rhbz#1233004
    - add support for no daemon mode
      resolves: rhbz#1068663


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.0-1
changelog:
  - new-release
    resolves: rhbz#1093883
    - fixed traceback if profile cannot be loaded
      related: rhbz#953128
    - powertop2tuned: fixed traceback if rewriting file instead of dir
    - daemon: fixed race condition in start/stop
    - balanced: used medium_power ALPM policy
    - balanced: used conservative CPU governor
      resolves: rhbz#1124125
    - plugins: added selinux plugin
    - plugin_net: added nf_conntrack_hashsize parameter
    - profiles: included sap-hana and sap-hana-vmware profiles
    - profiles: sap-profiles in individual subpackages
      resolves: rhbz#1058483
    - man: structured profiles manual pages according to sub-packages
    - improved error handling of switch_profile
    - tuned-adm: active: detect whether tuned deamon is running
    - removed active_profile from RPM verification
      resolves: rhbz#1104126
    - plugin_disk: readahead value can be now specified in sectors
      resolves: rhbz#1127127
    - plugins: added bootloader plugin
      resolves: rhbz#1044111
    - plugin_disk: added error counter to hdparm calls
    - plugins: added scheduler plugin
      resolves: rhbz#1100826
    - added tuned-gui


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-15
changelog:
  - updated man page to include atomic-host and atomic-guest profiles
    related: rhbz#1091977, rhbz#1091979


