websms/freeipa
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Imported Debian patch 4.3.1-0ubuntu1

Browse Source
This commit is contained in:
Timo Aaltonen
2016-04-19 00:15:05 +03:00
committed by Mario Fetka
parent 1e13001953 2f177da8f2
commit c44de33144
2170 changed files with 424130 additions and 1705451 deletions
Download Patch File Download Diff File Expand all files Collapse all files

389
debian/changelog vendored
View File

@@ -1,391 +1,8 @@
freeipa (4.7.2-3) unstable; urgency=medium
freeipa (4.3.1-0ubuntu1) xenial; urgency=medium
* control: Move python-jwcrypto to python-ipaserver depends.
* Sync from Debian.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 06 May 2019 08:43:34 +0300
freeipa (4.7.2-2) unstable; urgency=medium
* tests: Disabled, they are for the server.
* Split server build-deps from the stub.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 12 Feb 2019 16:02:08 +0200
freeipa (4.7.2-1) unstable; urgency=medium
* New upstream release.
* client.tmpfile: Use /run instead of /var/run.
* control.common: Use same arch set on node-uglify build-dep as for
nodejs. (Closes: #918579)
* fix-fontawesome-path.diff: Refreshed.
* rules: Build only the client until Dogtag works again.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 05 Feb 2019 12:39:34 +0200
freeipa (4.7.1-3) unstable; urgency=medium
* control: Replace libsvrcore-dev build-dep with 389-ds-base-dev.
* tests: Install only the packages which are used for testing.
* rules: Don't run git on clean. (Closes: #912202)
* control: Nodejs is not available on all archs, build server packages
only where it is.
* control: Add systemd to python-ipalib depends. (Closes: #851158)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 06 Dec 2018 02:22:35 +0200
freeipa (4.7.1-2) unstable; urgency=medium
* control: Change python-nose to -mock on python-ipatests Depends.
* fix-oddjobd-conf.diff: Fix path to org.freeipa.server.conncheck.
* server.postinst: Fix a typo.
* fix-fontawesome-path.diff: Fix upgrade.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 18 Oct 2018 14:30:44 +0300
freeipa (4.7.1-1) unstable; urgency=medium
* New upstream release.
- fix-replicainstall.diff dropped, not applicable anymore
- ipa-httpd-pwdreader-force-fqdn.diff dropped, obsolete
- refresh patches
- server: drop ipa-replica-prepare
* dont-migrate-to-authselect.diff We don't have authselect, so just
return true when trying to migrate to it. (LP: #1793994)
* control: Move client dependency on chrony to recommends. (Closes:
#909803)
* control: Build server on any arch again.
* tests: Don't fail the tests, just dump the log if something goes
wrong.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 09 Oct 2018 10:30:09 +0300
freeipa (4.7.0-1) unstable; urgency=medium
* New upstream release. (LP: #1772447, #1772450)
- fix-version.diff: Dropped, not needed
- hack-duplicate-cert-directive.diff: Dropped, fixed upstream
- ldap-multiarch.diff: Dropped, fixed upstream
- support-pam-mkhomedir.diff: Dropped, fixed upstream
- fix-apache-ssl-setup.diff: Dropped, fixed upstream
- fix-httpd-group.diff: Dropped, fixed upstream
- fix-named-conf-template.diff: Dropped, fixed upstream
- fix-paths.diff: Dropped, fixed upstream
- refresh patches
* tests/server-install: Fix the fake domain, single label domains are not
supported anymore.
* server.postinst: Fix upgrade from earlier version.
* fix-fontawesome-path.diff: Fix the path to font-awesome. (LP:
#1772921)
* fix-krb5kdc-cert-path.diff: Apache can't access KDC certs, move them
to /var/lib/ipa/certs. (LP: #1772447)
* ipa-httpd-pwdreader-force-fqdn.diff: Make sure HOSTNAME is a FQDN. (LP:
#1769485)
* control: Add libjs-scriptaculous to server depends.
* fix-gzip-path.diff: Fix path to gzip. (LP: #1778236)
* control, rules: Switch rhino to nodejs for ui build.
* d/s/local-options: Add some files to ignore.
* control, copyright: Add node-uglify to build-depends, the embedded
copy was removed.
* control, fix-py3-lesscpy-name.diff: Add python3-lesscpy to build-
depends, call the binary with the correct name.
* control: Add python3-pkg-resources to build-depends.
* client.install: Add new template.
* control: Update vcs urls.
* control: Mark priority as optional.
* control, rules: Bump dh to 11.
* control: Add adduser to server depends.
* source/lintian-overrides: Updated.
* control: Bump policy to 4.1.5.
* control: Update maintainer list address.
* control: Build the server only on archs where 389-ds-base is
available.
* control: Bump python-ldap build-dep to 3.1.
-- Timo Aaltonen <tjaalton@debian.org> Fri, 28 Sep 2018 14:10:34 +0300
freeipa (4.7.0~pre1+git20180411-2) experimental; urgency=medium
* fix-bind-ldap-so-path.diff: Dropped, the plugin uses non-MA path
now, fix depends to match.
* control: Add python-augeas to python-ipaclient depends. (LP: #1764615)
* ldap-multiarch.diff: Replace hack-libarch.diff with a new patch to
support more than x86. (LP: #1600634)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 17 Apr 2018 23:47:32 +0300
freeipa (4.7.0~pre1+git20180411-1) experimental; urgency=medium
* New upstream prerelease + git snapshot.
* tests: Fix whitespace.
* client.dirs: Add /var/lib/ipa-client/pki.
* server.post*: Enable session, session_cookie apache modules.
* control: Add sssd-dbus to server Depends.
* fix-httpd-group.diff: Fix apache group for Debian.
* control: Bump dependency on certmonger.
* support-pam-mkhomedir.diff: Add support for enabling pam_mkhomedir.
(LP: #1336869)
* control: Add libsss-certmap-dev to build-depends.
* control: Drop hardcoded libcurl3 dependency from client.
* control*, rules: Add support for client-only build.
* Fold admintools into the client package.
* fix-bind-ldap-so-path.diff: Use multiarch path to bind/ldap.so.
* fix-ipa-conf.diff: Dropped, upstream.
* rules: Force building with python2.
* server.install: Updated.
* debian/.gitignore: Ignore d/control.
* rules: If git is installed, revert po/ on clean.
* server.dirs: Add missing directories, fix some permissions in
postinst.
* control.server: Bump dogtag dependencies to 10.6.0~.
* control.server: Drop mod-nss from Depends, mod_ssl is used instead.
* enable-mod-nss-during-setup.diff: Dropped, not needed anymore.
* server.postinst/postrm: Enable/disable mod_ssl.
* control: Bump 389-ds-base dependency.
* rules: Modify python scripts to use python2.
* fix-paths.diff: Add some paths to platform data.
* hack-tomcat-race.diff: Restarting pki-tomcatd takes time, and renew_ca_cert
does that several times in a row, so wait for 80s before starting migrating
profiles to ldap to make sure the instance is up.
* fix-apache-ssl-setup.diff: Fix mod_ssl setup.
* hack-duplicate-cert-directive.diff: Delete a duplicate
SSLCertificateFile directive until upstream is fixed.
* server.postinst: Enable default-ssl site.
* control: Depend on chrony instead of ntp.
* fix-paths.diff: Add CHRONY_CONF.
* python-ipaserver.install: Updated after dropping NTP.
* fix-version.diff: Append +git to prerelease tag, don't require git.
* pydist_overrides: Added.
* rules: Update clean target.
* control: Bump depends on bind9.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 12 Apr 2018 14:01:56 +0300
freeipa (4.6.3-1) unstable; urgency=medium
* New upstream release.
* support-kdb-dal-7.0.diff: Dropped, upstream.
* tests: Force hostname as 'autopkgtest' if the system didn't have
one.
-- Timo Aaltonen <tjaalton@debian.org> Fri, 02 Feb 2018 17:27:41 +0200
freeipa (4.6.2-4) unstable; urgency=medium
* client.postinst: Migrate from old nssdb only if it exists.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 30 Jan 2018 17:42:08 +0200
freeipa (4.6.2-3) unstable; urgency=medium
* tests: Add some debug info, and fail properly.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 29 Jan 2018 13:17:25 +0200
freeipa (4.6.2-2) unstable; urgency=medium
* server.postinst: Fix output redirection.
-- Timo Aaltonen <tjaalton@debian.org> Sat, 20 Jan 2018 21:33:26 +0200
freeipa (4.6.2-1) unstable; urgency=medium
* New upstream release.
- Remove upstreamed patches:
add-debian-platform.diff,
ipa-kdb-support-dal-version-5-and-6.diff,
purge-firefox-extension.diff,
fix-ipa-otpd-install.diff,
fix-ipa-otpd-service.diff,
purge-firefox-extension.diff,
prefix.patch,
fix-kdcproxy-path.diff,
fix-is-running.diff,
fix-pkcs11-helper.diff,
fix-dnssec-services.diff
- Remove obsolete patches: fix-memcached.diff,
fix-oddjobs.diff,
fix-kdcproxy-paths.diff
- Refresh rest of the patches
* control et al: Memcached is not used anymore.
* control, server.install: Depend on gssproxy.
* control: Build-depend on python-jinja2, add CSR files to python-
ipaclient.
* *.install: Updated.
* client.postinst: Fix update_ipa_nssdb import.
* rules, autoreconf: Refactor the build to match current upstream,
drop d/autoreconf.
* local-options: Ignore some files not on tarballs.
* rules: Migrate to dh_missing.
* Drop server tmpfile, ship upstream one, and create ipaapi/kdcproxy
users/groups on install and add www-data to ipaapi group.
* control: Add python-sss to python-ipaserver depends.
* rules: Disable building on a builddirectory, it's broken upstream
for now.
* control: Drop libcurl4-nss-dev from build-depends, bump libkrb5-dev
build-dependency.
* control: Bump dependency on bind9 and bind9-dyndb-ldap.
* control: add libapache2-mod-lookup-identity to server dependencies,
enable/disable it in postinst/postrm.
* control: Depend on newer custodia, move dep on python-custodia to
python-ipaserver.
* control: Add python-sss to client depends.
* Add support for krb 1.16. (Closes: #887814)
-- Timo Aaltonen <tjaalton@debian.org> Sat, 20 Jan 2018 12:41:28 +0200
freeipa (4.4.4-4) unstable; urgency=medium
[ Timo Aaltonen ]
* fix-opendnssec-setup.diff: Use /usr/sbin prefix for ods binaries.
* samba-4.7-fix-*: Add backported commits to allow building against
samba 4.7. (Closes: #880841)
[ Steve Langasek ]
* Fix autopkgtest to be robust in the face of changed iproute2 output.
-- Timo Aaltonen <tjaalton@debian.org> Sat, 16 Dec 2017 09:15:37 +0200
freeipa (4.4.4-3) unstable; urgency=medium
* fix-opendnssec-setup.diff: Fix a typo. (Closes: #878095)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 09 Oct 2017 23:51:56 +0300
freeipa (4.4.4-2) unstable; urgency=medium
* control: Add a dependency on fonts-open-sans. (LP: #1656236)
* fix-opendnssec-install.diff: Updated for opendnssec 2.1.x. (LP:
#1703836)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 09 Oct 2017 10:41:55 +0300
freeipa (4.4.4-1) unstable; urgency=medium
* Upload to unstable. (Closes: #862846)
* New upstream release.
- CVE-2017-2590
- ipa-kdb-support-dal-version-5-and-6.diff: Dropped, upstream.
- purge-firefox-extension.diff: Refreshed.
* fix-is-running.diff: Add a third argument to is_running() in
ipaplatform/debian/services.py. (Closes: #856533)
* fix-kdcproxy-path.diff: Update debian/paths.py to use correct path
for ipa-httpd-kdcproxy.
* client.dirs: Ship /etc/krb5.conf.d, because not having that breaks
the installer when krb5.conf tries to include that.
* copyright, watch: Update source/release location.
* control, ipaserver: Move adtrustinstance python files to python-
ipaserver, and add samba-common to python-ipaserver depends so that
uninstall works.
* fix-pkcs11-helper.diff: Fix ipa-dnskeysyncd setup which was broken
by softhsm 2.2.
* fix-opendnssec-setup.diff: Opendnssec 2.0.x broke DNSSEC setup, fix
it.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 17 May 2017 21:19:22 +0300
freeipa (4.4.3-3) experimental; urgency=medium
* client.postinst: Fix logfile location.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 16 Feb 2017 11:26:08 +0200
freeipa (4.4.3-2) experimental; urgency=medium
* control: Fix python-ipatests to depend on python-sss instead of
python-sssdconfig.
-- Timo Aaltonen <tjaalton@debian.org> Sat, 28 Jan 2017 00:15:53 +0200
freeipa (4.4.3-1) experimental; urgency=medium
* New upstream release. (Closes: #848762)
* configure-apache-from-installer.diff: Dropped, upstream.
* fix-cve-2016-5404.diff: Dropped, upstream.
* patches: Refreshed.
* work-around-apache-fail.diff: Dropped, apache supports systemd now
so this should not be needed.
* watch: Use https url.
* client.postinst: Use update_ipa_nssdb(), which also removes remnants
from /etc/pki/nssdb.
* control: Bump depends on slapi-nis to 0.56.1.
* control: Add python-custodia and python-requests to ipalib depends.
* control: Use python-netifaces instead of iproute.
* control: Add python-sssdconfig to python-ipatests depends.
* control: Bump depends on 389-ds-base to 1.3.5.6, upstream #5396
#2008.
* control: Bump bind9-dyndb-ldap depends to 10, upstream #2008.
* control: Add python-libsss-nss-idmap to build-depends.
* control: Bump depends on sssd to 1.14.0.
* install: Updated.
* platform:
- drop variables that were commented out
- add some comments to tasks.py
- migrate some services to use systemd
- add & update some paths
- add some stub services (LP: #1653245)
* control: Add krb5-otp to server depends. (LP: #1640732)
* control: Demote ntp to Recommends so that lxc containers can be
enrolled without it. (LP: #1630911)
-- Timo Aaltonen <tjaalton@debian.org> Sat, 14 Jan 2017 15:29:25 +0200
freeipa (4.3.2-5) unstable; urgency=medium
* fix-cve-2016-5404.diff: Fix permission check bypass (Closes: #835131)
- CVE-2016-5404
* ipa-kdb-support-dal-version-5-and-6.diff: Support mit-krb5 1.15.
(Closes: #844114)
-- Timo Aaltonen <tjaalton@debian.org> Sat, 03 Dec 2016 01:02:40 +0200
freeipa (4.3.2-4) unstable; urgency=medium
* freeipa-client.post*: Use /var/log/ipaclient-upgrade.log instead of
ipaupgrade.log, and remove it on purge. (Closes: #842071)
* control: Bump dependency on libapache2-mod-auth-gssapi to verify
upstream bug #5653 is resolved.
* platform: Add Debian mapping for rpcgssd and rpcidmapd service
files. (LP: #1645201)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 01 Dec 2016 08:12:27 +0200
freeipa (4.3.2-3) unstable; urgency=medium
* rules: Add a check to override_dh_fixperms so that chmod is not run
on arch-indep build where the targets don't exist. (Closes: #839844)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 06 Oct 2016 01:22:13 +0300
freeipa (4.3.2-2) unstable; urgency=medium
* copyright: Since ffb9a09a0d all original code should be GPL-3+, so
drop some exceptions.
* control: Add libnss-sss, libpam-sss and libsss-sudo to client depends
to ensure they get installed. (LP: #1600513)
* fix-ipa-otpd-service.diff: Use correct path for ipa-otpd. (LP:
#1628884)
* add-debian-platform.diff: Fix libsofthsm2.so install path.
* control: Bump dep on softhsm2 due to changed lib install path.
* tests: Add simple autopkgtest to check that ipa-server-install
works.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 05 Oct 2016 00:35:51 +0300
freeipa (4.3.2-1) experimental; urgency=medium
* New upstream release.
* copyright, missing-sources, README.source: Exclude minified javascript
that the runtime does not need. Add unminified versions of others,
update copyright to match. (Closes: #787593)
* source/lintian-overrides: Document minified javascript issues.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 14 Sep 2016 13:03:54 +0300
freeipa (4.3.1-2) experimental; urgency=medium
* control: python-ipalib can be arch:all now.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 25 Jul 2016 22:22:52 +0300
-- Timo Aaltonen <tjaalton@debian.org> Tue, 19 Apr 2016 00:15:05 +0300
freeipa (4.3.1-1) unstable; urgency=medium