[ubuntu/karmic] openldap 2.4.17-1ubuntu1 (Accepted)

Mathias Gug mathiaz at ubuntu.com
Thu Jul 30 21:50:14 BST 2009


openldap (2.4.17-1ubuntu1) karmic; urgency=low

  [ Steve Langasek ]
  * Fix up the lintian warnings:
    - add missing misc-depends on all packages
    - slapd, libldap-2.4-2-dbg sections changed to 'debug' to match archive
      overrides
    - bump Standards-Version to 3.8.2, no changes required.

  [ Mathias Gug ]
  * Resynchronise with Debian. Remaining changes:
    - AppArmor support:
      - debian/apparmor-profile: add AppArmor profile
      - updated debian/slapd.README.Debian for note on AppArmor
      - debian/slapd.dirs: add etc/apparmor.d/force-complain
      - debian/slapd.postrm: remove symlink in force-complain/ on purge
      - debian/rules: install apparmor profile.
    - Don't use local statement in config script as it fails if /bin/sh
      points to bash.
    - debian/slapd.postinst, debian/slapd.script-common: set correct
      ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group
      readable) and /var/run/slapd (world readable).
    - Enable nssoverlay:
      - debian/patches/nssov-build, debian/rules: Build and package the nss
        overlay.
      - debian/schema/misc.ldif: add ldif file for the misc schema which
        defines rfc822MailMember (required by the nss overlay).
    - debian/{control,rules}: enable PIE hardening
    - Use cn=config as the default configuration backend instead of
      slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade
      asking the end user to enter a new password to control the access to
      the cn=config tree.
    - debian/slapd.postinst: create /var/run/slapd before updating its
      permissions.
    - debian/slapd.init: Correctly set slapd config backend option even if
      the pidfile is configured in slapd default file.
  * Dropped:
    - Merged in Debian:
      - Update priority of libldap-2.4-2 to match the archive override.
      - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as
        the ldapurl(1) manpage.
      - Bump build-dependency on debhelper to 6 instead of 5, since that's
        what we're using.
      - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using
        the built-in default of ldap:/// only.
    - Fixed in upstream release:
      - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034
        failure when built with PIE.
      - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be
        trusted.
    - Update Apparmor profile support: don't support upgrade from pre-hardy
      systems:
      - debian/slapd.postinst: Reload AA profile on configuration
      - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6
      - debian/control: Conflicts with apparmor-profiles <<
        2.1+1075-0ubuntu4 to make sure that if earlier version of
        apparmor-profiles gets installed it won't overwrite our profile.
      - follow ApparmorProfileMigration and force apparmor complain mode on
        some upgrades
      - debian/slapd.preinst: create symlink for force-complain on
        pre-feisty upgrades, upgrades where apparmor-profiles profile is
        unchanged (ie non-enforcing) and upgrades where apparmor profile
        does not exist.
    - debian/patches/autogen.sh: no longer needed with karmic libtool.
      - Call libtoolize with the --install option to install
        config.{guess,sub} files.

openldap (2.4.17-1) unstable; urgency=low

  * New upstream version.
    - Fixes FTBFS on ia64 with -fPIE. Closes: #524770.
    - Fixes some TLS issues with GnuTLS.  Closes: #505191.
  * Update priority of libldap-2.4-2 to match the archive override.
  * Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the
    ldapurl(1) manpage.  Thanks to Peter Marschall for the patch.
    Closes: #496749.
  * Bump build-dependency on debhelper to 6 instead of 5, since that's
    what we're using.  Closes: #498116.
  * Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using
    the built-in default of ldap:/// only.
  * Build-depend on libltdl-dev | libltdl3-dev (>= 1.4.3), for the package
    name change.  Closes: #522965.

  [ Updated debconf translations ]
  * Spanish, thanks to Francisco Javier Cuadrado <fcocuadrado at gmail.com>.
    Closes: #521804.

Date: Thu, 30 Jul 2009 16:42:58 -0400
Changed-By: Mathias Gug <mathiaz at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/openldap/2.4.17-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 30 Jul 2009 16:42:58 -0400
Source: openldap
Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.17-1ubuntu1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Mathias Gug <mathiaz at ubuntu.com>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
Closes: 496749 498116 505191 521804 522965 524770
Changes: 
 openldap (2.4.17-1ubuntu1) karmic; urgency=low
 .
   [ Steve Langasek ]
   * Fix up the lintian warnings:
     - add missing misc-depends on all packages
     - slapd, libldap-2.4-2-dbg sections changed to 'debug' to match archive
       overrides
     - bump Standards-Version to 3.8.2, no changes required.
 .
   [ Mathias Gug ]
   * Resynchronise with Debian. Remaining changes:
     - AppArmor support:
       - debian/apparmor-profile: add AppArmor profile
       - updated debian/slapd.README.Debian for note on AppArmor
       - debian/slapd.dirs: add etc/apparmor.d/force-complain
       - debian/slapd.postrm: remove symlink in force-complain/ on purge
       - debian/rules: install apparmor profile.
     - Don't use local statement in config script as it fails if /bin/sh
       points to bash.
     - debian/slapd.postinst, debian/slapd.script-common: set correct
       ownership and permissions on /var/lib/ldap, /etc/ldap/slapd.d (group
       readable) and /var/run/slapd (world readable).
     - Enable nssoverlay:
       - debian/patches/nssov-build, debian/rules: Build and package the nss
         overlay.
       - debian/schema/misc.ldif: add ldif file for the misc schema which
         defines rfc822MailMember (required by the nss overlay).
     - debian/{control,rules}: enable PIE hardening
     - Use cn=config as the default configuration backend instead of
       slapd.conf. Migrate slapd.conf file to /etc/ldap/slapd.d/ on upgrade
       asking the end user to enter a new password to control the access to
       the cn=config tree.
     - debian/slapd.postinst: create /var/run/slapd before updating its
       permissions.
     - debian/slapd.init: Correctly set slapd config backend option even if
       the pidfile is configured in slapd default file.
   * Dropped:
     - Merged in Debian:
       - Update priority of libldap-2.4-2 to match the archive override.
       - Add the missing ldapexop and ldapurl tools to ldap-utils, as well as
         the ldapurl(1) manpage.
       - Bump build-dependency on debhelper to 6 instead of 5, since that's
         what we're using.
       - Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using
         the built-in default of ldap:/// only.
     - Fixed in upstream release:
       - debian/patches/fix-ldap_back_entry_get_rwa.patch: fix test-0034
         failure when built with PIE.
       - debian/patches/gnutls-enable-v1-ca-certs: Enable V1 CA certs to be
         trusted.
     - Update Apparmor profile support: don't support upgrade from pre-hardy
       systems:
       - debian/slapd.postinst: Reload AA profile on configuration
       - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6
       - debian/control: Conflicts with apparmor-profiles <<
         2.1+1075-0ubuntu4 to make sure that if earlier version of
         apparmor-profiles gets installed it won't overwrite our profile.
       - follow ApparmorProfileMigration and force apparmor complain mode on
         some upgrades
       - debian/slapd.preinst: create symlink for force-complain on
         pre-feisty upgrades, upgrades where apparmor-profiles profile is
         unchanged (ie non-enforcing) and upgrades where apparmor profile
         does not exist.
     - debian/patches/autogen.sh: no longer needed with karmic libtool.
       - Call libtoolize with the --install option to install
         config.{guess,sub} files.
 .
 openldap (2.4.17-1) unstable; urgency=low
 .
   * New upstream version.
     - Fixes FTBFS on ia64 with -fPIE. Closes: #524770.
     - Fixes some TLS issues with GnuTLS.  Closes: #505191.
   * Update priority of libldap-2.4-2 to match the archive override.
   * Add the missing ldapexop and ldapurl tools to ldap-utils, as well as the
     ldapurl(1) manpage.  Thanks to Peter Marschall for the patch.
     Closes: #496749.
   * Bump build-dependency on debhelper to 6 instead of 5, since that's
     what we're using.  Closes: #498116.
   * Set the default SLAPD_SERVICES to ldap:/// ldapi:///, instead of using
     the built-in default of ldap:/// only.
   * Build-depend on libltdl-dev | libltdl3-dev (>= 1.4.3), for the package
     name change.  Closes: #522965.
 .
   [ Updated debconf translations ]
   * Spanish, thanks to Francisco Javier Cuadrado <fcocuadrado at gmail.com>.
     Closes: #521804.
Checksums-Sha1: 
 8e0a5e53afbd821ebc9092bbc91acf11069602c0 1951 openldap_2.4.17-1ubuntu1.dsc
 33c44d1ebc759e8baddb6fe9a0a7338577d3e453 4665057 openldap_2.4.17.orig.tar.gz
 71ce00787482305a8af42b9ccf811d360edafee6 153566 openldap_2.4.17-1ubuntu1.diff.gz
Checksums-Sha256: 
 eefd5f577281b2367c068786f5d69719924090568a4f89b069e1186a7707d8ad 1951 openldap_2.4.17-1ubuntu1.dsc
 e5d0b414e5546160dd054998a1e4224f069a97596854288c71a3b70ce579214e 4665057 openldap_2.4.17.orig.tar.gz
 2903cb83de55d602be9d4316b1fb884dd0ba5a1252dc5201685d65d00173d1ef 153566 openldap_2.4.17-1ubuntu1.diff.gz
Files: 
 33832daece3c6d9c0538d7d3a44a38b2 1951 net optional openldap_2.4.17-1ubuntu1.dsc
 b1380c3ec9e8c4def473dd8aef9ce352 4665057 net optional openldap_2.4.17.orig.tar.gz
 cffe2eecb078b33bc0710064fac92d3f 153566 net optional openldap_2.4.17-1ubuntu1.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkpyBscACgkQM0thG+z3pViYLACdEaixmWvU93tT4hpqTIOvqwHD
usUAnjVdU7SURukBZeVDNMowGRkTpS10
=Nh6O
-----END PGP SIGNATURE-----


More information about the Karmic-changes mailing list