# changelog

author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus,
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability.
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works.
  - make mysql dir world readable to they can access the
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Harald Hoyer <harald@redhat.com> 095-14.30
changelog:
  - unignore device mapper devices
  Resolves: rhbz#214639
  - fixed grammar in man page
  Resolves: rhbz#481349
  - report syntax errors in rules
  Resolves: rhbz#573785
  - improved network interface renaming
  Resolves: rhbz#520722


author: Harald Hoyer <harald@redhat.com> 095-14.29
changelog:
  - set time for wait_for_sys to 10 seconds (was 3)
  Resolves: rhbz#769169
  - fixed sas path_id for hot-remove/add
  Resolves: rhbz#812286


author: Harald Hoyer <harald@redhat.com> 095-14.23
changelog:
  - vol_id: check if device is readable
  Resolves: rhbz#456447
  - fix race condition, to prevent udevd from SIGBUS
  Resolves: rhbz#521318
  - fix rename interface bug 
  Resolves: rhbz#520453
  - kill loop in post and preun, so the new udevd can start
  Resolves: rhbz#567406
  - set umask 022 in start_udev
  Resolves: rhbz#596774
  - let scd* be a symlink to sr*
  Resolves: rhbz#610897
  - add by-path symlinks for tape devices
  Resolves: rhbz#611664
  - add virtio-ports symlinks
  Resolves: rhbz#624928


author: Harald Hoyer <harald@redhat.com> 095-14.21
changelog:
  - remove old udev queue,
    which might be leftover from udev in initrd (rhbz#487858)
  - add cciss support to scsi_id (rhbz#449057)
  - Resolves: rhbz#487858, rhbz#449057


author: Harald Hoyer <harald@redhat.com> 095-14.19
changelog:
  - removed zaptel rules (rhbz #294061)
  - fixed segfault for empty lines in passwd (rhbz#413831)
  - added patch for iscsi ids (Daniel Berrange) (rhbz#427640)
  - added /etc/sysconfig/udev-stw, which makes MODULES 
    configurable (Jeff Bastian) (rhbz#437979)
  - added ext4 support to vol_id (rhbz#444528)
  - updated dasd_id from dasdinfo of s390-tools-1.6.2 (rhbz#430532)
  - Resolves: rhbz#294061, rhbz#413831, rhbz#427640
  - Resolves: rhbz#437979, rhbz#444528, rhbz#430532


author: Harald Hoyer <harald@redhat.com> 095-14.16
changelog:
  - set selinux context for .udev dirs and symlinks (rhbz#442886)
  - fixed rule for hp iLO2 virtual mouse device (rhbz#429215)
  - Resolves: rhbz#429215, rhbz#442886


author: Harald Hoyer <harald@redhat.com> 095-14.12
changelog:
  - fix for looping vol_id, because of a malformed passwd (rhbz#425941)
  - revised fix for tape devices (rhbz#231990)
  - Resolves: rhbz#425941, rhbz#231990


author: Harald Hoyer <harald@redhat.com> 095-14.11
changelog:
  - moved "ignore_device" for dm devices to 90-dm.rules (rhbz#275441)
  - added cciss support (rhbz#250484)
  - support more than 10 nst devices in the persistent rules (rhbz#231990)
  - extra double check for symlinks improved (rhbz#217917)
  - Resolves: rhbz#217917, rhbz#231990, rhbz#250484, rhbz#275441


author: Harald Hoyer <harald@redhat.com> - 095-14.8
changelog:
  - removed pie link flag from static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.7
changelog:
  - added RPM_OPT_FLAGS and pie to static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.6
changelog:
  - do not fail, if EEXIST on mkdir() (#217917)
  - configure process numbers dynamically according to CPU and MEM (#226997)
  - link statically (#236242, #233307)
  - fixed rule for raw1394 (#233956)
  - added persistent device names for tape devices (#231990)
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242 
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.5
changelog:
  - added symlink to /sbin/dasd_id (#219181)
  - added more debugging possibilities (#219621)
  - Resolves: rhbz#219181, rhbz#219621


author: Harald Hoyer <harald@redhat.com> - 095-14.1
changelog:
  - Do not ignore dm devices completly (rhbz#204157, rhbz#214639)
  - Remove tty devices from udev.nodes (rhbz#209204)
  - Resolves: rhbz#204157, rhbz#214639, rhbz#209204


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
  	e.g. /dev/cdrom -> hdd
  	     /dev/cdrom-hdc -> hdc
               /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-1
changelog:
  - Rebase nss to 3.19.1
  - Pick up upstream fix for client auth. regression caused by 3.19.1
  - Revert upstream change to minimum key sizes
  - Remove patches that rendered obsolote by the rebase
  - Update existing patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-7
changelog:
  - Pick up upstream patch from nss-3.19.1
  - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  - Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269359 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-407.el5]
changelog:
  - [utrace] check ->utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.1
changelog:
  - Drop java-1.6.0-openjdk-pstack.patch. 6310967, the upstream version, is applied in OpenJDK 6.
  - Resolves: rhbz#1271926


author: Jason Corley <jason.corley@gmail.com> 0:3.1-9jpp
changelog:
  - update copyright to contain current year
  - rebuild on RHEL4 to avoid broken jar repack script in FC6


author: Matt Wringe <mwringe@redhat.com> - 0:3.1-7jpp
changelog:
  - Add tomcat5 subpackage
  - Add versioning to provides and obsoletes
  - Move rm -rf %RPM_BUILD_ROOT from %prep to %install
  - Add missing maven dependencies


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:3.1-4jpp-1fc
changelog:
  - Add conditional native compilation.
  - Update commons-collections-3.1-project_xml.patch to exclude reference
    to maven-plugin-changelog which requires netbeans-svc etc.
  - Set test.failonerror to false and add patch for build.xml for ant builds
    with gcj to avoid stopping the build on test failures on GCJ.
  - Merge with latest JPP version.


author: Aizaz Ahmed <aahmed@redhat.com> 0:2.1-4jpp_5rh
changelog:
  - Added trigger to restore symlinks that are removed if ugrading
    from a commons-collections rhug package


author: Henri Gomez <hgomez@users.sourceforge.net> 2.0-3jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible 
    with distro using bash 1.1x


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-5jpp
changelog:
  - renamed to %{name}
  - additional sources in individual archives
  - versioned dir for javadoc
  - section macro


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-408.el5]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Replace addition of -fno-strict-overflow to IndicRearrangementProcessor{,2}.cpp with -fwrapv
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.0
changelog:
  - Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
  - Resolves: rhbz#1295772


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-38
changelog:
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method (can be reenabled
    by setting environment variable OPENSSL_ENABLE_SSL2)


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-409.el5]
changelog:
  - [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
  - [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [sched] prevent division by zero x->cpu_power (Denys Vlasenko) [1209728]
  - [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
  - Resolves: rhbz#1320655


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320655


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.33.el5
changelog:
  - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
    CVE-2011-2522, CVE-2011-1678, CVE-2011-2724
  - resolves: #722553


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.24.el5
changelog:
  - Fix smbget, rpcclient, smbtree, pdbedit, smbclient and smbcacls manpage
  - resolves: #457195, #457082, #457203, #457384, #457192, #457097


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.15.el5
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526661


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.9.el5
changelog:
  - Raise log level for annoying messages that are normal with
    some idmap backends.
  - resolves: #485382


author: Guenther Deschner <gdeschner@redhat.com> 3.0.28-3.2.el5
changelog:
  - Fix joining and authentication with NT4 and Windows 2000 domains.
  - resolves: #449000
  - resolves: #450533


author: Simo Sorce <ssorce@redhat.com> 3.0.28-1.el5_2.1
changelog:
  - Security fix for CVE-2008-1105
  - Fix join verification
  - Fix smb signing
  - resolves: CVE-2008-1105
  - resolves: #447380
  - resolves: #444637


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.8
changelog:
  - Yet another 2 patches for regressions related to operations on a DC with
    trusted domains. Fiux idmap with legacy configuration options, and fix the
    pam module, pam logins were broken for trusted domains
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.7
changelog:
  - Add another 2 patches to solve 429024 completely, as some cases were not
    covered:
    - Fix domain trusts while running as a DC
    - Fix credential chain with windows 2008
  - Make some configure flag explicit even if they are on by default so that we
    can catch build errors if something is wrong instead of silently missing
    features supposed to be compiled in
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
changelog:
  - Back out moiunt cifs patches for prepath, as the corresponding
    kernel changes can't be put in at this time
  - Add a minor SPNEGO fix
  - related: #370501
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.4
changelog:
  - Add another set of fixes for 429024, turned out this was not
    completely fixed as expected
  - Add some other patches from Guenther to join Windows 2008 (Rc1)
    domain controllers
  - Make sure bad port numbers are reported and smbd exits if it
    can't bind to any port (completes fix for #429003)
  - Fix a regression in ACLs code that was causing samba to set the
    wrong inherited permissions
  - resolves: #429024
  - related: #291501
  - resolves: #429003
  - resolves: #431243


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.3
changelog:
  - Add 2 more patches to fix a Samba DC talking to trusted
    domains.
  - resolves: #429024
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.1
changelog:
  - Add more fixes on top 3.0.28 as committed upstream
  - Fixes typo and removes trailing spaces in default smb.conf file
  - resolves: #426244
  - related: #291501
  - resolves: #426623
  - resolves: #383351
  - resolves: #425996


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5
changelog:
  - rebase to 3.0.28 (3.0.x is in bugfix/security fix only mode
    since 3.2.x was announced) + later Vista fixes
  - resolves: #291501
  - resolves: #370501


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: CVE-2007-6015
  - resolves: CVE-2007-4572


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.2
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351511
  - resolves: #350771
  - resolves: #359161
  - resolves: #338141


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use /etc/rc.d/init.d instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved /usr/bin/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that 0 is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for /usr/lib/samba and /usr/lib/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="gcc -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to /usr/share/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Guenther Deschner <gdeschner@redhat.com> - 3.6.23-10
changelog:
  - resolves: #1322685 - Fix CVE-2015-5370
  - resolves: #1322685 - Fix CVE-2016-2110
  - resolves: #1322685 - Fix CVE-2016-2111
  - resolves: #1322685 - Fix CVE-2016-2112
  - resolves: #1322685 - Fix CVE-2016-2115
  - resolves: #1322685 - Fix CVE-2016-2118 (Known as Badlock)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1325424


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-0.1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss 3.21
  - Resolves: Bug 1297944 - Rebase RHEL 5.11.z to NSS 3.21 in preparation for Firefox 45


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.39-1.13.11.0
changelog:
  - Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
  - Resolves: rhbz#1325429


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350038


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.0.116-124.3
changelog:
  - fence_cisco_ucs: default to TLSv1.3 as SSLv3 is being deprecated in the
    latest firmware due to security concerns

    Resolves: rhbz#1321592


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.116-124
changelog:
  - qdisk: Make qdiskd warn if not all nodes are running qdiskd
    Resolves: rhbz#994187
  - qdisk: Waits tko cycles to complete initialization instead of tko_up
    Resolves: rhbz#1029191


author: Marek Grac <mgrac@redhat.com> - 2.0.115-115
changelog:
  - fencing: fence_ipmilan does not return correct code when used with 'cycle'
    Resolves: rhbz#961119


author: Marek Grac <mgrac@redhat.com> - 2.0.115-113
changelog:
  - fencing: Add suport for APC with firmware 5.x
    Resolves: rhbz#886612
  - fencing: Solve regression with Dell DRAC 5/CMC due to invalid EOL
    Resolves: rhbz#904195


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-112
changelog:
  - cman|fenced: Fix node killing in case of a 2node cluster that
    suffers brief network outage
    Resolves: rhbz#876731


author: Jan Pokorny <jpokorny@redhat.com> - 2.0.115-111
changelog:
  - ccs_tool: Fix several segfaults
    Resolves: rhbz#714042
  - Install man pages with mode 0644
    Resolves: rhbz#883816
  - fenced: Prevent a rare but possible spinning in poll on the cman fd
    Resolves: rhbz#856214
  - fenced: reconnect to ccs if connection times out
    Resolves: rhbz#881217


author: Marek Grac <mgrac@redhat.com> - 2.0.115-108
changelog:
  - fence_vmware_soap: Speed up fencing process and do not crash on VM without valid UUID
    Resolves: rhbz#836654


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-103
changelog:
  - fenced: increase MAX_DEVICES to 8
    Resolves: rhbz#821857
  - fenced: fix double free when second method has no devices
    Resolves: rhbz#809390
  - cman init: allow dlm hash table sizes to be tunable at startup
    Resolves: rhbz#836963


author: Marek Grac <mgrac@redhat.com> - 2.0.115-101
changelog:
  - new fence agent for IBM iPDU (SNMP)
    Resolves: rhbz#741985
  - fence agent can fail to login if eol is not set properly
    Resolves: rhbz#810949


author: Ryan O'Hara <rohara@redhat.com> - Version: 2.0.115-100
changelog:
  - fence_scsi: fix typos in debug messages
    Resolves: rhbz#674497
  - fence_scsi: remove limitations section from man page
    Resolves: rhbz#753839


author: Ryan O'Hara <rohara@redhat.com> - 2.0.115-98
changelog:
  - fence_scsi_test: add option for strict verification
    Resolves: rhbz#782919
  - fence_scsi_test: increment error count when reservation fails
    Resolves: rhbz#809481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-97
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#786485


author: Marek Grac <mgrac@redhat.com> - 2.0.115-95
changelog:
  - fence_vmware_soap -o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#715107


author: Marek Grac <mgrac@redhat.com> - 2.0.115-94
changelog:
  - fence_ipmilan will not parse args with passwd_script option in cluster.conf
    Resolves: rhbz#732773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-93
changelog:
  - cman: Clean shutdown_con if the controlling process is killed.
    Resolves: rhbz#590101
  - qdisk: Fix man page example
    Resolves: rhbz#745536
  - cman: fix building of debuginfo package (enable -g)
    Resolves: rhbz#746599


author: Marek Grac <mgrac@redhat.com> - 2.0.115-90
changelog:
  - fence_rhevm needs to change "UP" status to "up" state as the REST-API has changed
    Resolves: rhbz#731167
  - fence_ipmilan should honor ipmilan's -L option
    Resolves: rhbz#726731


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-89
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#727492
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#704243


author: Marek Grac <mgrac@redhat.com> - 2.0.115-88
changelog:
  - fence_bladecenter: Reboot operation did not work correctly with --missing-as-off
    Resolves: rhbz#689851
  - fence_drac5: Fix list support for Dell DRAC CMC
    Resolves: rhbz#718194
  - fence_drac5: drac5 firmware does not close ssh session correctly
    Resolves: rhbz#730634


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-86
changelog:
  - cman: do not free shutdown connection untill the very end to prevent
    spurious messages to be written to syslog
    Resolves: rhbz#727215


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85
changelog:
  - fence_vmware_soap: Fix RHEL5-specific path issue
    (fence_vmware_soap_fix_rhel5_specific_path_issue.patch)
    Resolves: rhbz#717372


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-82
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Ancillary fix for 678061
    Resolves: rhbz#678061


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-81
changelog:
  - cman: Don't increment on LEAVING->MEMBER transition
    (don_t_increment_on_leaving_>member_transition.patch)
    Resolves: rhbz#649533
  - cman: Clarify 'expected' option
    (clarify_expected_option.patch)
    Resolves: rhbz#688701


author: Marek Grac <mgrac@redhat.com> - 2.0.115-80
changelog:
  - fence agents: Fix problems with SSL support 
    (fence_cisco_ucs-fence_rhevm-Problems-with-SSL-support.patch)
    Resolves: rhbz#693395

  - fence_ipmilan: Operation monitor should return correct exit code
    (fence_ipmilan-returns-incorrect-status-on-monitor-op.patch)
    Resolves: rhbz#693427

  - fence_vmware_soap: New fence agent for VMWare using SOAP API
    (Add-support-for-UUID.patch)
    (fence_vmware_soap-New-fence-agent-for-VMWare-using-SOAP.patch)
    Resolves: rhbz#634567


author: Marek Grac <mgrac@redhat.com> - 2.0.115-79
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Marek Grac <mgrac@redhat.com> - 2.0.115-77
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-76
changelog:
  - fence-agents: Fence_rhevm needs to change "RUNNING" status to "UP" status as the REST-API has changed.
    (fence_rhevm_needs_to_change_running_status_to_up_status_as_the_rest_api_has_changed.patch)
    Resolves: rhbz#681670
  - fence_rhevm: Update URL to RHEV-M REST API
    (fence_rhevm_update_url_to_rhev_m_rest_api.patch)
    Resolves: rhbz#681676


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-75
changelog:
  - fence_ipmilan: Fix manual page to describe usage with HP iLO 3
    (fence_ipmilan_fix_manual_page_to_describe_usage_with_hp_ilo_3.patch)
    Resolves: rhbz#671089
  - qdiskd: Fix bad timer check - RHEL5
    (qdiskd_fix_bad_timer_check_rhel5.patch)
    Resolves: rhbz#679274


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-74
changelog:
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into_part2.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-73
changelog:
  - Add "diag" option to fence_ipmilan
    (fence_ipmilan-Add-diag-option-to-support-ipmitool.patch)
    Resolves: rhbz#678061
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-72
changelog:
  - Improve error handling in RSA fence agent
    (fence_rsa-Better-error-handling.patch)
    Resolves: rhbz#678018
  - Automatic generation of manual pages
    (fence-agents-Automatic-generation-of-manual-pages.patch)
    (fence-agents-add-XSLT-template.patch)
    (library-Metadata-are-not-correct-if-agent-does-not-s.patch)
    Resolves: rhbz#488959


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-71
changelog:
  - Display the node's votes in cman_tool status
    (display_the_node_s_votes_in_cman_tool_status.patch)
    Resolves: rhbz#653508
  - cman: Fix cman_tool reporting with quorum disk
    (cman_fix_cman_tool_reporting_with_quorum_disk.patch)
    Resolves: rhbz#654894


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-70
changelog:
  - ccs: Allow ccs_tool to use alternate base ports
    (ccs_allow_ccs_tool_to_use_alternate_base_ports.patch)
    ccs: Update manual page for ccs_tool
    (ccs_update_manual_page_for_ccs_tool.patch)
    Resolves: rhbz#656427


author: Lon Hohberger <lhh@redhat.com> 2.0.115-69
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#663808


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-64
changelog:
  - cman: Fix fail_recv_const length calculation
    (fix_fail_recv_const_length_calculation.patch)
    Resolves: rhbz#587080
  - Replace incorrect patch for "ccsd: Add error when bind fails" 
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996


author: Lon Hohberger <lhh@redhat.com> 2.0.115-63
changelog:
  - Updated patch for mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246


author: Lon Hohberger <lhh@redhat.com> 2.0.115-62
changelog:
  - fence_scsi_test: Add man page to Makefile.
    (fence_scsi_test_add_man_page_to_makefile.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-59
changelog:
  - fence_scsi_test: rewrite to more accurately test
    (fence_scsi_test_rewrite_to_more_accurately_test.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-58
changelog:
  - Disable fence_cisco_ucs & fence_rhevm since they depend
    on a package which is not available at this point.
    Related: rhbz#595385 rhbz#579859


author: Marek Grac <mgrac@redhat.com> - 2.0.115-56
changelog:
  - fence agents: fix build system for fence_rhevm
    (fence_rhevm-fix_build_system.patch)
    Resolves: rhbz#595385
  - fence agents: fix path to library
    (fence_cisco_ucs-library_path.patch)
    Resolves: rhbz#579859
  - fence agents: new fence agent for IF-MIB
    (fence_ifmib.patch)
    Resolves: rhbz#572863


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-55
changelog:
  - GFS2 mount fails incorrectly after correctly failed second-mount attempt
    (gfs2_mount_fails_incorrectly_after_correctly_failed_second_mount_attempt.patch)
    Resolves: rhbz#559735
  - cman: Make qdiskd heuristics time out
    (make_qdiskd_heuristics_time_out.patch)
    Resolves: rhbz#589266


author: Marek Grac <mgrac@redhat.com> - 2.0.115-54
changelog:
  - fence agents: New fence agent for RHEV-M REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595385
  - fence agents: New fence agent for Cisco UCS
    (fence_cisco_ucs.patch)
    Resolves: rhbz#579859
  - New dependency added: python-pycurl


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-53
changelog:
  - Fence agents: Rename power-wait to power_wait and add
    help information, replacing previous patch.
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-52
changelog:
  - Fence agents: add power-wait to fence_ipmilan for iLO3 devices
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: David Teigland <teigland@redhat.com> - 2.0.115-51
changelog:
  - fenced: use post_join_delay after cluster join
    (fenced-use-post_join_delay-after-cluster-join.patch)
    Resolves: rhbz#575952
  - gfs_controld: fix plock owner syncing
    (gfs_controld-fix-plock-owner-syncing.patch)
    Resolves: rhbz#624156
  - gfs_controld: fix plock owner in unmount
    (gfs_controld-fix-plock-owner-in-unmount.patch)
    Resolves: rhbz#624554


author: David Teigland <teigland@redhat.com> - 2.0.115-50
changelog:
  - group_tool: list more than 64 groups
    (group_tool-list-more-than-64-groups.patch)
    Resolves: rhbz#561509


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-49
changelog:
  - cman: Change flags to be values instead of bitmasks
    (cman_change_flags_to_be_values_instead_of_bitmasks.patch)
    Resolves: rhbz#595394


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-48
changelog:
  - gfs_controld: set last_plock_time for ownership operations
    (gfs_controld_set_last_plock_time_for_ownership_operations.patch)
    Resolves: rhbz#578632


author: Marek Grac <mgrac@redhat.com> - 2.0.115-47
changelog:
  - Method to cause one node to delay fencing in a cluster
    (fencing-delay_1.patch)
    (fencing-delay_2.patch)
    (fencing-delay_3.patch)
    (fencing-delay_4.patch)
    Resolves: rhbz#613064


author: Marek Grac <mgrac@redhat.com> - 2.0.115-46
changelog:
  - Not all parameters appear in metadata
    (fencing_Not_all_parameters_in_metadata.patch)
    Resolves: rhbz#619034
  - make "port" a synonym of "module_name" for drac5 
    (fence_drac5-synonym-for_modulename.patch)
    Resolves: rhbz#619776
  - Return codes of fencing agent 
    (fence_correct_return_codes.patch)
    (fence_correct_return_codes-ipmilan.patch)
    Resolves: rhbz#583034


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-45
changelog:
  - qdisk: mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246
  - ccsd: Add error when bind fails
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996
  - fence-agents: Update fence_ack_manual man page
    (update_fence_ack_manual_man_page.patch)
    Resolves: rhbz#578604


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-44
changelog:
  - reorder patches
  - gfs_controld: Add extended information to 'group_tool dump plocks' (gfs)
    (add_extended_information_to_group_tool_dump_plocks_gfs.patch)
    Resolves: rhbz#514264
  - cman: make libcman /dev/zero fd close-on-exec
    (cman_make_libcman_dev_zero_fd_close_on_exec.patch)
    Resolves: rhbz#585218
  - cman: set fail_recv_const to 2500
    (cman_set_fail_recv_const_to_2500.patch)
    Resolves: rhbz#587080
  - cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#611391


author: Marek Grac <mgrac@redhat.com> 2.0.115-42
changelog:
  - fence_egenera: possible symlink vulnerability
  - fencing: Some fencing agents do not support login using keys
  - Resolves: rhbz#519682 rhbz#582334


author: Marek Grac <mgrac@redhat.com> 2.0.115-41
changelog:
  - fence_ilo: will throw exception if user does not 
    have power priviledges
  - Resolves: rhbz#576176


author: Marek Grac <mgrac@redhat.com> 2.0.115-40
changelog:
  - fence_rsb: force stdout close for fence_rsb
  - fence_rackswitch: fix warnings in build process
  - fence_rackswitch: should accept unknown parameters
  - fence_wti: add direct support for WTI VMR
  - fence_apc: fails for some port numbers 
  - Resolves: rhbz#583045 rhbz#578615 rhbz#606315 rhbz#607265


author: Marek Grac <mgrac@redhat.com> 2.0.115-39
changelog:
  - fence_vmware: fix building for fence_vmware_helper.pl
  - fence_wti: support non-default TCP ports for telnet/ssh
  - Resolves: rhbz#590304 rhbz#572996


author: Marek Grac <mgrac@redhat.com>
changelog:
  - fence_ipmilan: correct return codes + manual page info
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-37
changelog:
  - fencing: work around bad nss/nspr headers which contain
    non-ANSI prototypes
  - Resolves: rhbz#575157


author: Marek Grac <mgrac@redhat.com> - 2.0.115-36
changelog:
  - fencing: correct return codes (perl + python based agents)
  - fence_ilo: remove import of openSSL into fence agent
  - fencing: preliminary support for generating manual pages
  - Resolves: rhbz#583049 rhbz#583053
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-412.el5]
changelog:
  - [s390] kernel: Fix tlb flushing with idte. (Hendrik Brueckner) [1350541]
  - [fs] Do not double unlock the dcache_lock in d_materialise_unique (Miklos Szeredi) [1198315]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-415.el5]
changelog:
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
  - Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-413.el5]
changelog:
  - [redhat] Disable 'Invalid version (double separator '-')' error (Alexander Gordeev) [1375746]
  - [fs] jbd: Fix oops in journal_remove_journal_head() (Lukas Czerner) [1067708]
  - [fs] jbd: Fix race between CP and journal_get_write_access() (Lukas Czerner) [1067708]
  - [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347100] {CVE-2016-1583}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Resolves: rhbz#1381990


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-417.el5]
changelog:
  - [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
  - Ignore any xz tarballs as RHEL 5.11 does not support them.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Introduce bootstrapping variable to test whether we are bootstrapping or not.
  - Add build requirement of xsltproc when bootstrapping.
  - Resolves: rhbz#1350043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - No need to require openssl at run time.
  - Drop old_gcc patch as this is now supported upstream (S8161262)
  - Resolves: rhbz#1350043


author: Petr Mensik <pemensik@redhat.com> - 30:9.3.6-25.P1.12
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate RH1022017 against 2.6.9.
  - Resolves: rhbz#1410612


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-419.el5]
changelog:
  - [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
  - [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.186.el5
changelog:
  - bz1130829 - Memory leak in get_exports
    - fix package revision in spec file.
  - Related: rhbz#1130829


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.185.el5
changelog:
  - bz1130829 - Memory leak in get_exports
    - fix memory leak in get_exports().
  - Resolves: rhbz#1130829


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.184.el5
changelog:
  - bz1049017 - Regression: autofs mounts hang if maps are reloaded while the
    mount is expiring
    - check for existing offset mount before mounting.
  - Resolves: rhbz#1049017


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.183.el5
changelog:
  - bz947604 - "autofs reload" causes automount to stop running when multiple maps
    are removed from auto.master
    - fix syncronize handle_mounts() shutdown.
  - bz909263 - Wildcard in nested mounts regression
    - fix fix wildcard multi map regression.
  - Related: rhbz#947604 rhbz#909263


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.181.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - remove patch to disable hosts map HUP signal processing.
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.180.el5
changelog:
  - bz918843 - RHEL 5.9 cannot browse /net on servers with mountd v2 disabled
    - fix mountd vers retry.
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - fix map entry duplicate offset detection.
    - fix submount offset delete.
  - Resolves: rhbz#918843
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.179.el5
changelog:
  - bz865309 - Wrong MOUNT_WAIT description in /etc/sysconfig/autofs
    - documentation fix some typos and misleading comments.
  - Related: rhbz#865309


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.178.el5
changelog:
  - bz909263 - Wildcard in nested mounts regression
    - fix wildcard multi map regression.
  - bz947604 - "autofs reload" causes automount to stop running when multiple maps
    are removed from auto.master
    - syncronize handle_mounts() shutdown.
  - bz865309 - Wrong MOUNT_WAIT description in /etc/sysconfig/autofs
    - make description of default MOUNT_WAIT setting clear.
  - bz866337 - update the man pages to describe 'nobind' option current behaviour
    - fix nobind man page description.
  - Resolves: rhbz#909263 rhbz#947604 rhbz#865309 rhbz#866337


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.177.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - disable hosts map HUP signal update.
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.176.el5
changelog:
  - bz859890 - no --timeout option usage demonstrated in auto.master FORMAT
    options man page section
    - add timeout option description to man page.
  - Resolves: rhbz#859890


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.175.el5
changelog:
  - bz845503 - autofs initscript problems
    - fix status() return code now gets lost due to adding lock file check.
  - Related: rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.174.el5
changelog:
  - bz585058 - autofs5 init script times out before automount exits and
    incorrectly shows that autofs5 stop failed
    - fix don't wait forever for shutdown.
  - bz845503 - autofs initscript problems
    - don't unconditionaly call stop on restart.
    - fix usage message.
    - fix status return code when daemon is dead but lock file exists.
  - Related: rhbz#585058 rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.173.el5
changelog:
  - bz845503 - autofs initscript problems
    - don't use status() function in restart, it can't be relied upon.
  - Related: rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.172.el5
changelog:
  - bz845503 - autofs initscript problems
    - fix status call in restart must specify pid file name.
  - Related: rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.171.el5
changelog:
  - bz845503 - autofs initscript problems
    - make redhat init script more lsb compliant.
  - Resolves: rhbz#845503


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.170.el5
changelog:
  - bz847101 - System unresponsiveness and CPU starvation when launching source code script
    - check negative cache much earlier. 
    - dont use pthread_rwlock_tryrdlock().
    - remove state machine timed wait.
  - Related: rhbz#847101


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.169.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - fix offset dir removal.
  - Related: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.168.el5
changelog:
  - bz585058 - autofs5 init script times out before automount exits and
    incorrectly shows that autofs5 stop failed
    - make autofs wait longer for shutdown.
  - Resolves: rhbz#585058


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.167.el5
changelog:
  - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server
    - fix expire race.
    - fix remount deadlock.
    - fix umount recovery of busy direct mount.
    - fix offset mount point directory removal.
    - remove move mount code.
    - fix remount of multi mount.
    - fix devce ioctl alloc path check.
    - refactor hosts lookup module.
    - remove cache update from parse_mount().
    - add function to delete offset cache entry.
    - allow update of multi mount offset entries.
    - add hup signal handling to hosts map.
  - Resolves: rhbz#714766


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.166.el5
changelog:
  - bz826633 - autofs crashes on lookup of a key containing a backslash
    - fix fix LDAP result leaks on error paths.
    - fix result null check in read_one_map().
  - Resolves: rhbz#826633


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.165.el5
changelog:
  - bz767428 - Fix autofs attempting to download entire LDAP map at startup
    - always read file maps multi map fix update.
    - report map not read when debug logging.
  - bz690404 - RFE: timeout option cannot be configured individually with
    multiple direct map entries
    - move timeout to map_source.
  - Resolves: rhbz#767428 rhbz#690404


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.164.el5
changelog:
  - bz798448 - autofs-5.0.1-0.rc2.163.el5 fails to load some LDAP maps
    - fix improve mount location error reporting.
  - Resolves: rhbz#798448


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.162.el5
changelog:
  - bz759221 - automount is seg faulting regularly in lookup_ghost()
    - fix bad alloca usage.
  - Resolves: rhbz#759221


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.161.el5
changelog:
  - bz747020 - autofs-5.0.1-0.rc2.156.el5_7.3 breaks indirect NIS maps
    - fix fix map source check in file lookup.
  - Resolves: rhbz#747020


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.160.el5
changelog:
  - bz692814 - automount does not perform a sanity check of server name in configuration
    - correct patch name in spec file.
  - bz700896 - autofs should support paged results from ldap server on ppc64 and s390x
    - correct patch names in spec file.
  - Related: rhbz#692814 rhbz#700896


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.159.el5
changelog:
  - bz692814 - automount does not perform a sanity check of server name in configuration
    - fix sanity checks for brackets in server name.
  - bz732332 - Lock ordering problem on re-load of direct maps
    - fix null cache deadlock.
  - bz734675 - autofs does not use local mounts on non-replicated entries
    - add nobind option.
    - dont bind nfs mount if nobind is set.
    - fix not bind mounting local filesystem.
  - bz700142 - autofs/automount error in mounting expanded entry
    - improve mount location error reporting.
  - bz700896 - autofs should support paged results from ldap server on ppc64 and s390x
    - fix paged query more results check.
    - Fix LDAP result leaks on error paths.
  - bz655685 - automount deadlocking
    - fix submount shutdown wait.
    - fix wait for master source mutex.
    - fix submount shutdown race.
  - bz732334 - RFE: automounter to dump maps (fix)
    - fix dumpmaps not reading maps.
  -Resolves: rhbz#692814 rhbz#732332 rhbz#734675 rhbz#700142 rhbz#700896
  -Resolves: rhbz#655685 rhbz#732334


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.158.el5
changelog:
  - bz731514 - autofs mount access hangs after reload
  - bz732333 - autofs fails to find duplicate key after key removal
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - Resolves: rhbz#731514 rhbz#732333


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.157.el5
changelog:
  - bz725536 - autofs mounts show IP rather than hostname after upgrade to RHEL 5.7
    - fix name list check
  - Resolves: rhbz#725536


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5
changelog:
  - bz538408 - RFE: automounter to dump maps
    - allow dumping of maps when daemon is already running.
  - bz547510 - [RFE] autofs should honor admin supplied server weights
    in maps
    - fix back port error adding replicated host to list.
  - Related: rhbz#538408 rhbz#547510


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.155.el5
changelog:
  - bz563956 - autofs should support paged results from ldap server
    - fix paged ldap map read.
  - bz519281 - [RFE] resolve negative cache invalidation on signal to automount
    - reset negative status on cache prune
  - bz692524 - autofs with null maps specified in auto.master segfaults on reload
    - fix null cache clean
  - Resolves: rhbz#519281 rhbz#692524
  - Related: rhbz#563956


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.154.el5
changelog:
  - bz560124 - autofs-5.0.1-0.rc2.131.el5_4.1 is missing man 8 auto.master
    - automount(8) man page correction
  - Resolves: rhbz#560124


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.153.el5
changelog:
  - bz610266 - [RFE] Support for encrypted secret in /etc/autofs_ldap_auth.conf
    - add base64 password encode
  - Resolves: rhbz#610266


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.152.el5
changelog:
  - bz632006 - [RFE] Lustre MDT failover mountpoints fail to mount
    - handle colon in Lustre failover mounts
  - bz579312 - autmount maps stored in LDAP can not be read using simple
    authenticated binds
    - add simple bind authentication 
  - bz632471 - "service autofs reload" does not pick the updated entry
    from NIS autofs direct map
    - fix direct map not updating on reread.
    - fix stale map read.
  - bz668354 - autofs handle isspace() char incorrectly
    - fix isspace() wild card substition.
  - bz538408 - RFE: automounter to dump maps
    - add dump maps option.
  - bz562703 - [RHEL 5.4] automounter dies with pthreads error
    - wait for master source mutex.
  - Resolves: rhbz#632006 rhbz#579312 rhbz#632471 rhbz#668354 rhbz#538408
  - Resolves: rhbz#562703


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.151.el5
changelog:
  - bz559796 - autofs cannot mount the folder name including "&"
    - fix ampersand escape in auto.smb.
  - bz561213 - automount hangs with nested mounts using YP lookups
    - don't hold lock for simple mount.
  - bz549607 - Autofs can not mount hidden share from windows server
    with auto.smb
    - special case cifs escapes.
  - bz547510 - [RFE] autofs should honor admin supplied server weights
    in maps
    - fix random selection for host on different network.
    - use weight only for server selection.
  - bz629357 - [RFE] Automounter debug mode should include IP addresses
    - include ip address in debug logging.
    - mount using address for rr.
  - Resolves: rhbz#559796 rhbz#561213 rhbz#549607 rhbz#547510 rhbz#629357


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.150.el5
changelog:
  - bz570783 - Segmentation fault when looking up '*.'
    - fix wildcard map entry match.
  - bz566481 - RFE: Add locality LDAP attribute to
    - add locality as valid ldap master map attribute.
  - bz551599 - automount segfaults in lookup_mount
    - mapent becomes negative during lookup.
  - bz563956 - autofs should support paged results from ldap server
    - add ldap page control handling.
    - ldap paged query configure fix.
    - auto adjust ldap page size.
  - Resolves: rhbz#570783 rhbz#566481 rhbz#551599 rhbz#563956


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.149.el5
changelog:
  - bz667273 - automount occasionally crashes with a lot of negative cache lookups
    - add fix remount locking patch.
  - Resolves: rhbz#667273


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.148.el5
changelog:
  - Bug 576775 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
  - Resolves: rhbz#576775


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.147.el5
changelog:
  - bz607785 - [RFE] include autofs support for SASL External authentication using
    certificates.
    - fix check authtype is non-null before comparison.
    - fix check ctxt->sasl_mech is non-null before comparison.
  - Related: rhbz#607785


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.146.el5
changelog:
  - bz607785 - [RFE] include autofs support for SASL External authentication using
    certificates.
    - add external bind method.
    - add configuration entries for certificate path and certificate key path.
  - Resolves: rhbz#607785


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.145.el5
changelog:
  - bz601935 - Race condition or other deadlocking issue on expire code path
    - fix incorrect pthreads condition handling for expire requests.
    - expire thread use pending mutex.
  - Resolves: rhbz#601935


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.136.el5
changelog:
  - fix error in patch causing segv at start (bz543554).
  - fix random selection option (bz548746).
  - Related: rhbz#543554
  - Resolves: rhbz#548746


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.133.el5
changelog:
  - fix included map read fail handling (bz506034).
  - add mount wait parameter (bz517349).
  - allow for "#" and "@" in hostname validation for sshfs mounts (bz520745).
  - fix incorrect host name lookup error message (bz533323).
  - fix typo in init script (bz534012).
  - fix timeout in connect_nb() (bz539747).
  - check for path mount location in generic module (bz537403).
  - dont fail mount on access fail (bz537403).
  - refactor ldap sasl bind (bz537793).
  - fix pidof init script usage (bz541144).
  - Resolves: rhbz#506034 rhbz#517349 rhbz#520745 rhbz#533323 rhbz#534012
  - Resolves: rhbz#539747 rhbz#537403 rhbz#537793 rhbz#541144


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.132.el5
changelog:
  - fix libxml2 non-thread-safe calls (bz513289).
  - fix direct map cache locking (bz514412).
  - fix dont umount existing direct mount on reread (bz514412).
  - Resolves: rhbz#513289 rhbz#514412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.131.el5
changelog:
  - also use actual package version instead of macro for Version tag.
  - add dist tag to revision.
  - Related: rhbz#471385


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.129
changelog:
  - Bug 452122 - lazy umount causes pwd to fal silently
    - fix error in remount check to set mount point removal flag at umount.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.128
changelog:
  - Bug 501612 - [5.3]automount aborts when automount accesses to ldap server.
    - add provided patch to resolve double free issue.
  - Resolves: rhbz#501612


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.127
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix not releasing mount resources at submount mount thread termination.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - drop manual umount improvement patch as it causes submount breakage.
    - this patch deosn't affect the fix for the root cause of this issue.
  - Related: rhbz#493223 rhnz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.126
changelog:
  - Bug 452122 - lazy umount causes pwd to fal silently
    - fix inconsistent notify mount message path.
    - fix remount check to set mount point removal flag at umount, as best we can.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - check for the absence of a mount before doing the manual umount checks.
    - take map entry write lock before check so any mount requests are complete.
  - Related: rhbz#452122 rhbz#493223


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.125
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix endianness.
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.124
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - fix device node ioctl parameter passing type mismatch (evident on ppc).
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.123
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix incorrect free of dclist in find_server().
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.122
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix get dns name when needed for domain dn.
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.121
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - add RFE patch.
  - Resolves: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.120
changelog:
  - Bug 487986 - autofs should always read file maps.
    - correction to always read file maps nonexistent key lookup fix.
    - always read file maps key lookup fix.
    - always read file maps key non existent key logging fix.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.119
changelog:
  - Bug 487986 - autofs should always read file maps.
    - always read file maps multi map fix.
    - always read file maps nonexistent key lookup fix.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.118
changelog:
  - Bug 493223 - Mounts aren't being auto expired correctly
    - fix incorrect cache unlock in manual umount improvement patch.
  - Related: rhbz#493223


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.117
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix shutdown signal processing regression introduced by this bug fix.
  - Related: rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.116
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix reload signal processing regression introduced by this bug fix.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - fix initialization of fd on rpc create.
    - improve manual umount recovery
  - Bug 495895 - autofs5: large number of DNS lookups for hostnames associated
    with multiple ip addresses
    - eliminate redundant DNS name lookups.
  - Resolves: rhbz#493223 rhbz#495895
  - Related: rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.115
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - fix parse bug discovered while testing active re-start.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.114
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - use misc device as default.
    - add restorecon for autofs misc device.
  - Bug 466673 - RFE: Make "intr" default option for /net -hosts mounts
    - use "intr" as default option for hosts map unless overridden.
  - Bug 487151 - Aufofs indirect mount timeout disabled on s390x
    - fix bad token declaration.
  - Bug 491351 - automount segfault after lookup failure
    - clear rpc client on host name lookup fail.
  - Bug 493074 - autofs5 duplicate entries (ldap percent hack)
    - use percent hack for master map keys.
  - Bug 493791 - RHEL5.1 and erroneous autofs after reload
    - dont umount existing direct mount on master re-read.
  - Bug 494319 - segfault in st_remove_tasks()
    - fix st_remove_tasks() locking.
  - Resolves: rhbz#466673 rhbz#487151 rhbz#491351 rhbz#493074 rhbz#493791
  - Resolves: rhbz#494319
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.113
changelog:
  - Bug 452122 -  lazy umount causes pwd to fail silently
    - add active restart patches.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.112
changelog:
  - Bug 487986 - autofs should always read file maps.
    - fix file map lookup when reading included or nsswitch sources.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.111
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - fix clear the quoted flag after each character.
  - Related: rhbz#469387


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.110
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - remove redundant debug log call.
  - Related: rhbz#469387


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.108
changelog:
  - Bug 487656 - Read and write size of startup status report buffer is incorrect
  - Bug 244117 - service autofs start when the service is running does not return success
  - Bug 487653 - Using a large number of direct mounts causes autofs to hang
    - convert select(2) to poll(2) to avoid 1024 file descriptor limit.
  - Bug 487985 - The autofs cache lookup performs poorly for large maps.
  - Bug 487986 - autofs should always read file maps.
  - Resolves: rhbz#487656 rhbz#244117 rhbz#487653 rhbz#487985 rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.106
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - fix negative cache non-existent keys.
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - prevent shared libraries from being unloaded at map re-read.
    - make sure main thread cannot exit until mount handling threads have completed.
    - add check for alternate libxml2 library name.
  - Resolves: rhbz#469387 rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.105
changelog:
  - Bug 481139 - [RHEL 4] autofs5 SASL badness
    - LDAP uris list locking fix.
    - attempt to refresh Kerberos creds upon connect fail.
  - initial commit to sync autofs (RHEL-5) with autofs5 (RHEL-4).
  - Resolves: rhbz#481139


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.102
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix nested submount expire deadlock.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.101
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix rootless direct multi-mount expire.
    - wait for submount shutdown completion.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.100
changelog:
  - Bug 465809: automount issues with RHEL5 and NIS+ auto_home map containing wildcard
    - add patch to handle NIS_PARTIAL return when key not found.
  - Resolves: rhbz#465809


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.99
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - replace state check patch with patch to not issue readmap on new mount
      during HUP signal processing.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.98
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - Fix state checks now incorrect due to optimnizations in task queueing.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.97
changelog:
  - Bug 435960: autofs with map file auto.nis not working.
    - Fix incorrect match of map type as a host name.
  - Related: rhbz#435960


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.96
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix fd leak at multi-mount non-fatal mount fail.
    - fix incorrect multi-mount mountpoint calcualtion.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.95
changelog:
  - Bug 448038: expire_indirect: fstat failed: Bad file descriptor
    - Look in the correct mount table for kernel automounted "nohide" mounts.
  - Related: rhbz#448038


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.94
changelog:
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
    - remember the maximum allocation size and use it in subsequent ifc buf allocations.
  - Related: rhbz#458252


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.93
changelog:
  - Bug 448667: [RHEL4] autofs4 multi-map doesn't pickup NIS updates automatically
    - add patch to fix this issue in RHEL-5.
  - Resolves: rhbz#448667


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.92
changelog:
  - Bug 443933: automount segfaults upon start
    - update patch to also check for single character non-printable map key.
  - Related: rhbz#443933


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.91
changelog:
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
    - add correction patch for setting of buffer length.
  - Bug 457524: Automounter does not work in the diskless environment
    - update patch for this bug.
  - Related: rhbz#458252 rhbz#457524


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.90
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - update fix submount shutdown recovery handling patch.
  - Bug 435960: autofs with map file auto.nis not working,
    error: automount master_error: syntax error while parsing map
  - Bug 252032: autofs does not log enough data to troubleshoot replicated server selection
  - Bug 436017: RHEL5 autofs doesn't handle replicated server entries like Solaris
  - Bug 439497: autofs hang on startup
  - Bug 443933: automount segfaults upon start
  - Bug 448036: autofs parses /etc/nsswitch.conf incorrectly
  - Bug 448468: Program maps do not set pwd  
  - Bug 448674: X/Open Federated Naming service master map entry should be handled by autofs
  - Bug 457524: Automounter does not work in the diskless environment
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
  - Bug 458464: AutoFS Crashes if non-alpha numerics are tried as map names (LDAP maps)
  - Related: rhbz#439580
  - Resolves: rhbz#435960 rhbz#252032 rhbz#436017 rhbz#439497 rhbz#443933
  - Resolves: rhbz#448036 rhbz#448468 rhbz#448674 rhbz#457524 rhbz#458252
  - Resolves: rhbz#458464


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.89
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix incorrect pthreads condition handling for mount requests.
    - don't abuse the ap->ghost field on NFS mount.
    - fix fail on included browse map not found.
    - clear stale flag on map read.
    - refactor mount request variable setting code.
    - make handle_mounts startup condition distinct
    - fix submount shutdown recovery handling.
    - don't call blocking functions during expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - note that this change depends on the kernel changes in bug 452139.
  - Bug 448038: expire_indirect: fstat failed: Bad file descriptor
    - check for exported mounts automatically mounted by kernel.
  - Bug 455550: [CRM#1837798] automount NULL pointer dereference segmentation fault
    - check replicated list after probe.
  Resolves: rhbz#439580 rhbz#448038 rhbz#455550


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - init SASL callbacks on every ldap lookup library load.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.87
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - fix incorrect initialization which causes unpredictable behavior.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.86
changelog:
  - 254226: autofs reload and condrestart fail if map is originally empty
    - another fix for don't fail on empty master map.
  - Related: rhbz#254226


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.85
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - yet another correction to the patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.84
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - add error message to notify when no valid URIs found in configured list.
    - fix base dn search not trying all configured search bases.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.83
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - correction for "fix race during sub-mount shutdown" patch.
  - Related: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.82
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - fix race during sub-mount shutdown.
  - Resolves: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.81
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - correct patch for the missed case.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.80
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - add missed case for this correction.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.79
changelog:
  - Bug 426220: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-5.2]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426220


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.78
changelog:
  - Bug 404231: CRM #1598404 Automount process shuts down unexpectedly
    - fix for improve server down handling patch.
  - Related: rhbz#404231


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.77
changelog:
  - Bug 250922: automount[2281]: open_mount: (mount):cannot open mount module iso9660 
       (/usr/lib/autofs/mount_iso9660.so: cannot open shared object file: No such file or directory)
    - quell annoying "cannot open mount module" message
  - Resolves: rhbz#250922


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.76
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - second attempt fixing quoting for exports gathered by hosts map.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.75
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - fix transcription error in exports quoting fix patch.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.74
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - fix to quoting for exports gathered by hosts map.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.73
changelog:
  - Bug 336971: Add support for the "%" hack for case insensitive attribute schemas
    - expand cases covering "%" hack handling.
  - Related: rhbz#336971


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.72
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - fix LDAP_URI server selection.
    - add authentication option for using an external credential cache.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.71
changelog:
  - Bug 410051: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - missed changing the revision number
  - Related: rhbz#410051


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.71
changelog:
  - Bug 410051: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - Resolves: rhbz#410051


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.70
changelog:
  - Bug 404231: CRM #1598404 Automount process shuts down unexpectedly
    - update improve server down handling patch.
  - Related: rhbz#404231


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.68
changelog:
  - Bug 399041: If a map entry is > 255 chars, automounter fails
    - fix off-by-one error on key lookup.
  - Resolves: rhbz#399041


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.67
changelog:
  - Bug 357551: [RFE] Autofs [4 & 5]: Remove replicated host testing from default single host mount case
    - merge corresponding autofs 4 patch.
  - Resolves: rhbz#357551


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.66
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - fix for dynamic logging breaking non-sasl build.
  - Bug 238529: autofs can return incorrect status from mount under heavy load
    - add wait between retries.
    - force umount and return fail if mtab not updated after retries.
  Related: rhbz#251993 rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.65
changelog:
  - Bug 228144: NFS/AutoFS fails to accurately report non-existent mount points
    - Logging warnings on failed lookups means we actually have to use the
      error() macro, since we only log warn and below when debugging is
      enabled.
  - Resolves: rhbz#228144


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.64
changelog:
  - Bug 263081: autofs 5 and large groups
  - Bug 256781: Program maps never see changes
    - update the daemon negative mount timeout implementation
  - Bug 359661: RHEL3 U5: [autofs4] automounter won't use auto_master in LDAP
  - Bug 306681: autofs version 5 should not require common schema to be pre-configured
    - correction to schema discovery patch.
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - another correction to the patch.
  - Related: rhbz#350171 rhbz#306681
  - Resolves: rhbz#359661 rhbz#256781 rhbz#263081


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.63
changelog:
  - Bug 238529: autofs can return incorrect status from mount under heavy load
    - reviewed previously reverted patch and updated it in line with v4.
  - Resolves: rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.62
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correct transcription error with patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.61
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correction two to patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.60
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correction to patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.59
changelog:
  - 254227: log "/etc/init.d/autofs reload" invocations to the system log
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
  - Resolves: rhbz#254227 rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.58
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - fix fifo create location.
    - patch cleanups.
  - Related: rhbz#251993


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.57
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - add set close on exec flag for fifos.
    - make fifo setup failure non-fatal.
    - add configure option to enable fifo dir specification.
    - set default fifo dir to /var/run as first preference.
  - Related: rhbz#251993


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.56
changelog:
  - Bug 253870: RHEL5 automounter and undefined variables.
  - Bug 322741: minor typo in autofs(5) manpage page in "wildcard" section
  - Bug 332291: autofs fails if nsswitch.conf doesn't have automount entry
  - Bug 246111: multi-mount maps fail, can not map a hierarchy
  - Bug 333771: autofs fails if LDAP attribute value is the same as a standard autofs attribute name
  - Bug 249738: Autofs5 failed unmounting Solaris NFS server share
  - Bug 333701: auto.master(5) needs to document the mount options append entry
  - Bug 253625: autofs fails to mount nfs4 when client and server are same machine
  - Bug 249574: autofs passes a wrong program version to the nfs NULL proc
  - Bug 333691: autofs should use acturate time when using pthread_cond_timedwait
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
  - Bug 333821: Export directory with spaces in the name causes problems
  - Bug 333831: /net does not seem to work with 5.0.1-19 or 5.0.2-6
  - Bug 306681: autofs version 5 should not require common schema to be pre-configured
  - Bug 337431: automounter load balancing with replicated servers
  - Bug 332181: [RHEL4] autofs initscript doesn't support '--timeout' with whitespace
  - Bug 336971: Add support for the "%" hack for case insensitive attribute schemas
  - Bug 336991: autofs should match LDAP wildcard entries with "*" as the key as well as "/"
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
  - Bug 286541: autofs-5.0.1-0.rc2.43.0.2.x86_64 segfaults when '/etc/init.d/autofs stop' is run
  - Bug 333781: autofs can deadlock with multiple simulaneous access to a program map
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
  - Resolves: rhbz#253870 rhbz#322741 rhbz#332291 rhbz#246111 rhbz#333771 rhbz#249738
  - Resolves: rhbz#333701 rhbz#253625 rhbz#249574 rhbz#333691 rhbz#336961 rhbz#333821
  - Resolves: rhbz#333831 rhbz#306681 rhbz#337431 rhbz#332181 rhbz#336971 rhbz#336991
  - Resolves: rhbz#286541 rhbz#333781 rhbz#251993
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.53
changelog:
  - change random selection option name to be consistent with autofs v4 (bz 227604).
  - Related: rhbz#227604


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.50
changelog:
  - update master map lexer to also allow "." in macro name (bz 243645).
  - add missing "multi" map support (bz 241717).
  - Resolves: rhbz#243645 rhbz#241717


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.49
changelog:
  - update ldaps protocol support patch (bz 185443).
  - local variable initialization error.
  - Related: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.48
changelog:
  - allow for older schemas that allow "*" as a key value (bz 241291).
  - fix deadlock in alarm manager module (bz 243717).
  - Resolves: rhbz#241291 rhbz#243717


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.47
changelog:
  - update ldaps protocol support patch (bz 185443).
  - missed change of ldap_init to ldap_initialize.
  - Related: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.46
changelog:
  - add ldaps protocol support (bz 185443).
    - note: it's no longer possible to use multiple hosts in an ldap map spec.
    - note: multiple hosts must now be configured using the URI entry in LDAP config.
  - Resolves: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.44
changelog:
  - ignore "winbind" if it appears in "automount" nsswitch.conf (bz 231953).
  - fix handling of trailing white space in wildcard lookup (bz 241094).
  - check fqdn of each interface when matching export access list (bz 231950).
  - fix race when setting task done (bz 231951).
  - correct return status from do_mkdir (bz 223480).
  - fix localhost replicated mounts not working (bzs 233149, 231954).
  - fix display map name in mount entry for "-hosts" map (bz 238531).
  - add "condrestart" to init script (bz 231956).
  - fix return check for getpwuid_r and getgrgid_r (bz 231949).
  - change file map lexer to allow white-space only blank lines (bz 237066).
  - add option to select replicated server at random (instead of ping response time) (bz 227604).
  - fix directory creation for browse mounts (bz 238532).
  - fix wildcard map handling and improve nsswitch source map update (bz 238533).
  - add configuration variable to control appending of global options (bz 238652).
  - add command option to set a global mount options string (bz 238652).
  - disable exports access control check (bz 238534).
  - fix incorect cast causing directory cleanup after expire to fail on PPC (bz 231948).
  - check for fstab update and retry if not updated (bz 238529).
  - Resolves: rhbz#231953 rhbz#241094 rhbz#231950 rhbz#231951 rhbz#238534
  - Resolves: rhbz#223480 rhbz#233149 rhbz#238531 rhbz#231956 rhnz#231949
  - Resolves: rhbz#237066 rhbz#227604 rhbz#238532 rhbz#238533 rhbz#238652
  - Resolves: rhbz#231948 rhbz#231954 rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.43
changelog:
  - fix another expire regression introduced in the "mitigate manual umount"
    patch (bz 225124).
  - correct check for busy offset mounts before offset umount (bz 225122).
  - Resolves: rhbz#225124 rhbz#225122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.39
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.37
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp. 
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.27
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757.
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.24
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.
  - deal with changed semantics of mkdir in recent kernels.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.18
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.15
changelog:
  - fix parsing of numeric host names in LDAP map specs (bz 205997).
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


