univention-pam (15.3.1) unstable; urgency=medium

  * Bug #57976: Enable sssd to perform login using mailPrimaryAddress
    which is nice for mail authentication

 -- Julia Bremer <bremer@univention.de>  Mon, 06 Oct 2025 19:31:51 +0200

univention-pam (15.3.0) UNRELEASED; urgency=medium

  * Bug #58568: UCS 5.2-3 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 02 Sep 2025 16:18:26 +0200

univention-pam (15.2.0) UNRELEASED; urgency=medium

  * Bug #58344: UCS 5.2-2 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Wed, 28 May 2025 16:49:56 +0200

univention-pam (15.0.13-1) UNRELEASED; urgency=medium

  * Bug #58015 UCS 5.2-1 version bump

 -- Christian Castens <castens@univention.de>  Mon, 03 Mar 2025 10:45:40 +0100

univention-pam (15.0.12) unstable; urgency=medium

  * Bug #57855: don't die in common-auth if service_err or authinfo_unavail

 -- Felix Botner <botner@univention.de>  Tue, 14 Jan 2025 13:31:02 +0100

univention-pam (15.0.11) unstable; urgency=medium

  * Issue #2271: add UCR template for PAM config file "common-session-noninteractive"

 -- Christian Castens <castens@univention.de>  Fri, 17 May 2024 12:17:46 +0200

univention-pam (15.0.10) unstable; urgency=medium

  * Bug #56793: Set ldap_referrals to false in sssd.conf

 -- Arvid <requate@univention.de>  Fri, 10 May 2024 15:29:46 +0200

univention-pam (15.0.9) unstable; urgency=medium

  * Bug #56793: Avoid inline comments in sssd.conf, that can lead
    to non-starting service.

 -- Arvid <requate@univention.de>  Fri, 03 May 2024 10:41:16 +0200

univention-pam (15.0.8) unstable; urgency=medium

  * Bug #56793: Remove pam/unix/maximum_uid workaround entirely
    instead use "pwfield = x" in sssd.conf to make pam_unix
    properly return PAM_AUTHINFO_UNAVAIL for ldap users.

 -- Arvid <requate@univention.de>  Fri, 12 Apr 2024 15:41:45 +0200

univention-pam (15.0.7) unstable; urgency=medium

  * Bug #56793: Use pam/unix/maximum_uid only in UMC pam account

 -- Arvid <requate@univention.de>  Fri, 12 Apr 2024 10:37:57 +0200

univention-pam (15.0.6) unstable; urgency=medium

  * Issue #2185: remove mdns from nsswitch.conf

 -- Felix Botner <botner@univention.de>  Wed, 03 Apr 2024 14:16:29 +0200

univention-pam (15.0.5) unstable; urgency=medium

  * Bug #56793: Add UCR adjustable logrotate config for sssd

 -- Arvid <requate@univention.de>  Tue, 19 Mar 2024 22:15:15 +0100

univention-pam (15.0.4) unstable; urgency=medium

  * Bug #56793: New UCR variable pam/unix/maximum_uid

 -- Arvid <requate@univention.de>  Wed, 13 Mar 2024 21:09:04 +0100

univention-pam (15.0.3) unstable; urgency=medium

  * Bug #56793: Unify whitespace in pam config a bit

 -- Arvid Requate <requate@univention.de>  Fri, 08 Mar 2024 00:18:46 +0100

univention-pam (15.0.2) unstable; urgency=medium

  * Bug #46120: rebase UCR templates of univention-pam to Debian 12

 -- Mika Westphal <westphal@univention.de>  Fri, 08 Mar 2024 00:18:30 +0100

univention-pam (15.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.2-0 version bump

 -- Florian Best <best@univention.de>  Fri, 08 Mar 2024 00:12:28 +0100

univention-pam (14.0.7) unstable; urgency=medium

  * Bug #56604: remove workarounds for Python 2 compatibility

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:54:13 +0100

univention-pam (14.0.6) unstable; urgency=medium

  * Bug #56547: replace pam_tally with pam_faillock

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:53 +0100

univention-pam (14.0.5) unstable; urgency=medium

  * Bug #56002: replace upstream removed libpam-cracklib with libpam-
    pwquality

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:48 +0100

univention-pam (14.0.4) unstable; urgency=medium

  * Bug #55995: replace libnss-ldap with nss-pam-ldapd

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:44 +0100

univention-pam (14.0.3) unstable; urgency=medium

  * Bug #53127: upgrade to latest debhelper compat version

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:37 +0100

univention-pam (14.0.2) unstable; urgency=medium

  * Bug #56530: change Python 2 packages into transitional packages

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:18 +0100

univention-pam (14.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.1-0 version bump

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 22:19:39 +0100

univention-pam (13.0.8-1) UNRELEASED; urgency=medium

  * Bug #57118 UCS 5.0-7 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Mar 2024 15:51:51 +0100

univention-pam (13.0.7-1) UNRELEASED; urgency=medium

  * Bug #56832: UCS 5.0-6 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Dec 2023 19:17:26 +0100

univention-pam (13.0.6-2) unstable; urgency=medium

  * Bug #56383: The PAM stacks common-account and common-session must
    not call pam_krb5 for service samba to avoid pthread related problems
    between libheimbase1-heimdal and libheimbase-samba4.

 -- Arvid <requate@univention.de>  Mon, 07 Aug 2023 15:58:10 +0200

univention-pam (13.0.6-1) unstable; urgency=medium

  * Bug #31771: migrate tabs to spaces

 -- Florian Best <best@univention.de>  Fri, 03 Feb 2023 04:17:35 +0100

univention-pam (13.0.5-1) unstable; urgency=medium

  * Bug #55554: Corrected UCR type definitions of auth/methods and pamaccess/maxent

 -- Peter Stoll <stoll.extern@univention.de>  Tue, 19 Jul 2022 10:42:32 +0200

univention-pam (13.0.4-1) unstable; urgency=medium

  * Bug #54273: Include debug script in univention-nscd and univention-libnss-ldap subscripts

 -- Juan Carlos García García <garcia-garcia.extern@univention.de>  Tue, 05 Jul 2022 12:25:08 +0200

univention-pam (13.0.3-3) unstable; urgency=low

  * Bug #43211: Deprecate univention-skel

 -- Philipp Hahn <hahn@univention.de>  Wed, 17 Mar 2021 17:29:47 +0100

univention-pam (13.0.3-2) unstable; urgency=medium

  * Bug #52188: added pam/krb5/ticket_after_pwchange

 -- Felix Botner <botner@univention.de>  Tue, 02 Mar 2021 09:59:44 +0100

univention-pam (13.0.3-1) unstable; urgency=medium

  * Bug #52682: Avoid long delays during AD-Takeover due to
    repeated ucr commits to slapd.conf in well-known-sid-name-mapping.py

 -- Arvid <requate@univention.de>  Sun, 24 Jan 2021 20:35:14 +0100

univention-pam (13.0.2-2) unstable; urgency=low

  * Bug #43211: reanimate univention-skel for bash-completion

 -- Arvid <requate@univention.de>  Tue, 03 Nov 2020 09:24:15 +0100

univention-pam (13.0.2-1) unstable; urgency=medium

  * Bug #52250: migrate univention-pam to Python 3

 -- Florian Best <best@univention.de>  Fri, 23 Oct 2020 12:39:58 +0200

univention-pam (13.0.1-2) unstable; urgency=medium

  * Bug #49898: Switch to Python3

 -- Arvid <requate@univention.de>  Thu, 22 Oct 2020 21:49:10 +0200

univention-pam (13.0.1-1) unstable; urgency=medium

  * Bug #42374: Replace legacy Master/Slave wording by
    Primary/Backup/Replica/Managed Node

 -- Arvid <requate@univention.de>  Thu, 24 Sep 2020 13:48:37 +0200

univention-pam (13.0.0-5) unstable; urgency=low

  * Bug #43211: Remove univention-skel

 -- Philipp Hahn <hahn@univention.de>  Wed, 09 Sep 2020 14:33:05 +0200

univention-pam (13.0.0-4) unstable; urgency=low

  * Bug #28645: Fix LDAP filter syntax

 -- Philipp Hahn <hahn@univention.de>  Sat, 04 Jul 2020 08:40:27 +0200

univention-pam (13.0.0-3) unstable; urgency=medium

  * Bug #49060: Fix python3 migration related syntax issue

 -- Arvid <requate@univention.de>  Thu, 11 Jun 2020 22:03:01 +0200

univention-pam (13.0.0-2) unstable; urgency=low

  * Bug #43211: Remove univention-skel
  * Bug #51977: Remove univention-kde

 -- Philipp Hahn <hahn@univention.de>  Fri, 05 Jun 2020 18:06:15 +0200

univention-pam (13.0.0-1) unstable; urgency=medium

  * Bug #51419: UCS-5.0-0 version bump

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Fri, 05 Jun 2020 18:06:14 +0200

univention-pam (12.0.2-12) unstable; urgency=medium

  * Bug #51224: fix lambda expression for python 3 compatibility

 -- Florian Best <best@univention.de>  Tue, 05 May 2020 15:30:02 +0200

univention-pam (12.0.2-11) unstable; urgency=medium

  * Bug #51027: code cleanup

 -- Florian Best <best@univention.de>  Fri, 27 Mar 2020 20:28:07 +0100

univention-pam (12.0.2-10) unstable; urgency=medium

  * Bug #51027: code cleanup

 -- Florian Best <best@univention.de>  Fri, 27 Mar 2020 17:20:55 +0100

univention-pam (12.0.2-9) unstable; urgency=medium

  * Bug #51027: make UCR templates compatible to python3

 -- Florian Best <best@univention.de>  Thu, 26 Mar 2020 16:33:51 +0100

univention-pam (12.0.2-8) unstable; urgency=medium

  * Bug #50904: change check_member default

 -- Jürn Brodersen <brodersen@univention.de>  Mon, 09 Mar 2020 10:56:17 +0100

univention-pam (12.0.2-7) unstable; urgency=medium

  * Bug #50191: Change default value of nss/group/cachefile/invalidate_interval in postinst

 -- Julia Bremer <bremer@univention.de>  Fri, 24 Jan 2020 11:56:45 +0100

univention-pam (12.0.2-6) unstable; urgency=medium

  * Bug #50191: Change default interval of cronjob for ldap-group-to-name to 03:30 am with jitter 1800

 -- Julia Bremer <bremer@univention.de>  Fri, 17 Jan 2020 10:23:11 +0100

univention-pam (12.0.2-5) unstable; urgency=medium

  * Bug #50191: Randomize LDAP server selection for ldap-group-to-name.py

 -- Julia Bremer <bremer@univention.de>  Wed, 15 Jan 2020 12:54:13 +0100

univention-pam (12.0.2-4) unstable; urgency=medium

  * Bug #48698: Fix user visible spelling errors

 -- Philipp Hahn <hahn@univention.de>  Thu, 08 Aug 2019 05:46:38 +0200

univention-pam (12.0.2-3) unstable; urgency=low

  * Bug #49910: Disable pam_systemd by default

 -- Philipp Hahn <hahn@univention.de>  Tue, 23 Jul 2019 11:43:55 +0200

univention-pam (12.0.2-2) unstable; urgency=medium

  * Bug #35173: add locking for ldap-group-to-file

 -- Florian Best <best@univention.de>  Fri, 12 Jul 2019 15:59:01 +0200

univention-pam (12.0.2-1) unstable; urgency=medium

  * Bug #47233: close ssh connection properly when shutting down

 -- Jannik Ahlers <ahlers@univention.de>  Thu, 14 Mar 2019 11:21:10 +0100

univention-pam (12.0.1-1) unstable; urgency=medium

  * Bug #46969: bindpwdfile support

 -- Felix Botner <botner@univention.de>  Thu, 20 Dec 2018 16:34:08 +0100

univention-pam (12.0.0-1) unstable; urgency=medium

  * Bug #48326: UCS-4.4-0 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 14 Dec 2018 15:12:31 +0100

univention-pam (11.0.1-4) unstable; urgency=medium

  * Bug #39817: re-add the locking too, otherwise the faillog listener
    doesn't trigger to reset the counter

 -- Arvid Requate <requate@univention.de>  Thu, 22 Feb 2018 12:44:58 +0100

univention-pam (11.0.1-3) unstable; urgency=medium

  * Bug #39817: adjust lock-user script to actually disable a user

 -- Arvid Requate <requate@univention.de>  Thu, 22 Feb 2018 11:45:34 +0100

univention-pam (11.0.1-2) unstable; urgency=medium

  * Bug #39817: adjust faillog.py listener to new locked definition

 -- Arvid Requate <requate@univention.de>  Tue, 06 Feb 2018 17:30:36 +0100

univention-pam (11.0.1-1) unstable; urgency=medium

  * Bug #39817: unify disabled/locked

 -- Florian Best <best@univention.de>  Mon, 29 Jan 2018 16:17:27 +0100

univention-pam (11.0.0-1) unstable; urgency=medium

  * Bug #45841: UCS-4.3 version bump

 -- Jürn Brodersen <brodersen@univention.de>  Mon, 11 Dec 2017 14:40:44 +0100

univention-pam (10.0.0-4) unstable; urgency=low

  * Bug #43287: Switch to using user_envfile=

 -- Philipp Hahn <hahn@univention.de>  Wed, 04 Jan 2017 15:46:29 +0100

univention-pam (10.0.0-3) unstable; urgency=medium

  * Bug #42103: adjust pseudo tests

 -- Florian Best <best@univention.de>  Fri, 14 Oct 2016 14:04:17 +0200

univention-pam (10.0.0-2) unstable; urgency=medium

  * Bug #42103: enhance pam_unix password change configuration

 -- Florian Best <best@univention.de>  Fri, 14 Oct 2016 14:00:54 +0200

univention-pam (10.0.0-1) unstable; urgency=medium

  * Bug #41963: UCS-4.2 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 12 Aug 2016 13:57:16 +0200

univention-pam (9.0.0-6) unstable; urgency=medium

  * Bug #40968: Make timelimit for ldap searches in nss-ldap configurable
   via the UCR variable nssldap/timelimit

 -- Florian Best <best@univention.de>  Thu, 14 Apr 2016 08:26:58 +0200

univention-pam (9.0.0-5) unstable; urgency=low

  * Bug #38993: Create user 'messagebus'

 -- Philipp Hahn <hahn@univention.de>  Mon, 11 Jan 2016 17:09:19 +0100

univention-pam (9.0.0-4) unstable; urgency=low

  * fix postinst (Bug #37995)

 -- Daniel Troeder <troeder@univention.de>  Thu, 17 Dec 2015 13:00:01 +0100

univention-pam (9.0.0-3) unstable; urgency=low

  * Bug #37995: Add sudo support

 -- Philipp Hahn <hahn@univention.de>  Tue, 08 Dec 2015 10:34:13 +0100

univention-pam (9.0.0-2) unstable; urgency=low

  * Bug #24840: add dependency on german wordlist for cracklib

 -- Daniel Troeder <troeder@univention.de>  Tue, 24 Nov 2015 12:33:11 +0100

univention-pam (9.0.0-1) unstable; urgency=low

  * Bug #39369: overwrite HOME in univention-pam/lock-user
  * UCS 4.1-0 version bump

 -- Felix Botner <botner@univention.de>  Tue, 03 Nov 2015 14:16:17 +0100

univention-pam (8.0.3-3) unstable; urgency=medium

  * Make univention-home-mounter optional (Bug #39490)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 23 Oct 2015 17:02:46 +0200

univention-pam (8.0.3-2) unstable; urgency=low

  * Bug #37971: Delay auth/sshd/ restrictions until role is known

 -- Philipp Hahn <hahn@univention.de>  Mon, 30 Mar 2015 14:45:42 +0200

univention-pam (8.0.3-1) unstable; urgency=low

  * Bug #36743: Provide PAM configuration for KDM

 -- Philipp Hahn <hahn@univention.de>  Mon, 17 Nov 2014 12:31:41 +0100

univention-pam (8.0.2-1) unstable; urgency=medium

  * Bug #36436: add spaces to commatas in the description of auth/.*/restrict

 -- Alexander Kläser <klaeser@univention.de>  Thu, 06 Nov 2014 17:28:10 +0100

univention-pam (8.0.1-3) unstable; urgency=low

  * fixed quoting (Bug #32415)

 -- Felix Botner <botner@univention.de>  Thu, 28 Aug 2014 15:47:42 +0200

univention-pam (8.0.1-2) unstable; urgency=low

  * fixed default nofile limit (Bug #32415)

 -- Felix Botner <botner@univention.de>  Thu, 28 Aug 2014 15:12:28 +0200

univention-pam (8.0.1-1) unstable; urgency=low

  * Update to UCR templates to new upstream versions (Bug #35138)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 26 Aug 2014 17:35:41 +0200

univention-pam (8.0.0-2) unstable; urgency=low

  * merged changes from 3.2-2 (Bug #35501)
    [ Arvid Requate ]
     * Trigger well-known-sid-name-mapping on SID changes (Bug #35501)

 -- Felix Botner <botner@univention.de>  Wed, 06 Aug 2014 11:02:28 +0200

univention-pam (8.0.0-1) unstable; urgency=low

  * Update to UCS 4.0 (Bug #35138)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 30 Jun 2014 08:47:53 +0200

univention-pam (7.0.4-29) unstable; urgency=low

  * Fix PAM stack for password change (Bug #34315)

 -- Philipp Hahn <hahn@univention.de>  Tue, 06 May 2014 19:06:33 +0200

univention-pam (7.0.4-28) unstable; urgency=low

  * Trigger well-known-sid-name-mapping on UID changes(Bug #34742)

 -- Philipp Hahn <hahn@univention.de>  Fri, 02 May 2014 16:55:15 +0200

univention-pam (7.0.4-27) unstable; urgency=low

  * Fix $PATH for ucr (Bug #34315)

 -- Philipp Hahn <hahn@univention.de>  Mon, 14 Apr 2014 18:16:38 +0200

univention-pam (7.0.4-26) unstable; urgency=low

  * Limit LDAP and Kerberos password change to non-local accounts (Bug #34315)
  * Update copyright to 2014.
  * Fix deprecation warning.
  * Add unit test for pam/common.

 -- Philipp Hahn <hahn@univention.de>  Mon, 14 Apr 2014 08:57:29 +0200

univention-pam (7.0.4-25) unstable; urgency=medium

  * Increase open file limit to 32768 (Bug #32415)

 -- Arvid Requate <requate@univention.de>  Fri, 24 Jan 2014 16:23:38 +0100

univention-pam (7.0.4-24) unstable; urgency=medium

  * Communicate changes to the well-known-sid-name-mapping.d hooks
  * turn the hooks into python modules (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Wed, 22 Jan 2014 15:47:25 +0100

univention-pam (7.0.4-23) unstable; urgency=medium

  * use security/limits/default/user/ instead of security/limits/user/.*/
    (Bug #32415)

 -- Arvid Requate <requate@univention.de>  Wed, 22 Jan 2014 15:11:46 +0100

univention-pam (7.0.4-22) unstable; urgency=medium

  * Remove stray line in access-kde.conf (Bug #33650)

 -- Arvid Requate <requate@univention.de>  Tue, 21 Jan 2014 16:09:21 +0100

univention-pam (7.0.4-21) unstable; urgency=medium

  * use security/limits/user/.*/  also in postinst (Bug #32415)

 -- Arvid Requate <requate@univention.de>  Wed, 15 Jan 2014 16:14:59 +0100

univention-pam (7.0.4-20) unstable; urgency=medium

  * use security/limits/user/.*/ instead of security/limits/user/default/
    (Bug #32415)

 -- Arvid Requate <requate@univention.de>  Wed, 15 Jan 2014 16:10:49 +0100

univention-pam (7.0.4-19) unstable; urgency=medium

  * use custom_username and custom_groupname (Bug #33650)

 -- Arvid Requate <requate@univention.de>  Wed, 15 Jan 2014 12:32:57 +0100

univention-pam (7.0.4-18) unstable; urgency=medium

  * Register users/default/.* with /etc/security/.* templates (Bug #33650)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 19:15:11 +0100

univention-pam (7.0.4-17) unstable; urgency=medium

  * consider user name localization in templates (Bug #33650)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 18:18:41 +0100

univention-pam (7.0.4-16) unstable; urgency=medium

  * Improve logging of run-parts in postrun (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 17:20:04 +0100

univention-pam (7.0.4-15) unstable; urgency=medium

  * Only call run-parts if the directory exists (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 16:55:42 +0100

univention-pam (7.0.4-14) unstable; urgency=medium

  * Take care to handle modrdn correctly in well-known-sid-name-mapping
  * postrun restart slapd if name mappings have been changed (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 16:22:26 +0100

univention-pam (7.0.4-13) unstable; urgency=medium

  * Fix variable naming issue, improve code readability (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 12:44:52 +0100

univention-pam (7.0.4-11) unstable; urgency=medium

  * Use samba specific objectclasses to determine object type (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2014 11:10:51 +0100

univention-pam (7.0.4-10) unstable; urgency=medium

  * Turn group-name-mapping into well-known-sid-name-mapping (Bug #33897)

 -- Arvid Requate <requate@univention.de>  Mon, 13 Jan 2014 20:00:10 +0100

univention-pam (7.0.4-9) unstable; urgency=low

  * fixed template (Bug #32415)

 -- Felix Botner <botner@univention.de>  Fri, 10 Jan 2014 11:59:45 +0100

univention-pam (7.0.4-8) unstable; urgency=low

  * increase default nofile limit to 8192 (Bug #32415)

 -- Felix Botner <botner@univention.de>  Fri, 10 Jan 2014 11:37:32 +0100

univention-pam (7.0.4-7) unstable; urgency=low

  * added listener/module/groupnamemapping to deactivate
    group-name-mapping.py (Bug #33710)

 -- Felix Botner <botner@univention.de>  Fri, 13 Dec 2013 08:53:10 +0100

univention-pam (7.0.4-6) unstable; urgency=low

  * fixed debian/install (Bug #33710)

 -- Felix Botner <botner@univention.de>  Thu, 12 Dec 2013 11:22:49 +0100

univention-pam (7.0.4-5) unstable; urgency=low

  * fixed debug output in group-name-mapping.py (Bug #33710)

 -- Felix Botner <botner@univention.de>  Thu, 12 Dec 2013 09:22:46 +0100

univention-pam (7.0.4-4) unstable; urgency=low

  * added group-name-mapping.py for automatically
    setting group localization vars (Bug #33710)

 -- Felix Botner <botner@univention.de>  Wed, 11 Dec 2013 15:37:47 +0100

univention-pam (7.0.4-3) unstable; urgency=low

  * replaces spaces with tabs in conffiles/etc/security/limits.conf
    (Bug #33650)

 -- Felix Botner <botner@univention.de>  Mon, 09 Dec 2013 17:04:16 +0100

univention-pam (7.0.4-2) unstable; urgency=low

  * consider group name localization in
    templates (Bug #33650)

 -- Felix Botner <botner@univention.de>  Mon, 09 Dec 2013 16:17:42 +0100

univention-pam (7.0.4-1) unstable; urgency=low

  * fixed common spelling mistakes (Bug #32662)

 -- Lukas Walter <walter@univention.de>  Tue, 29 Oct 2013 13:18:59 +0100

univention-pam (7.0.3-2) unstable; urgency=low

  * Fixed typo in ldap-group-to-file.py, use null for stdin instead of
    False (Bug #32581)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 24 Sep 2013 17:06:32 +0200

univention-pam (7.0.3-1) unstable; urgency=low

  * Split hook handling in a separate function and use /dev/null instead
    of pipes (Bug #32581)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 24 Sep 2013 13:23:54 +0200

univention-pam (7.0.2-1) unstable; urgency=low

  * Remove duplicate description for nscd/autostart (Bug #30943)

 -- Philipp Hahn <hahn@univention.de>  Fri, 20 Sep 2013 10:05:01 +0200

univention-pam (7.0.1-2) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30943)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Thu, 19 Sep 2013 10:11:01 +0200

univention-pam (7.0.1-1) unstable; urgency=low

  * Added support for a hook directory which will be executed after the
    ldap-group-to-file.py wrote the group members (Bug #32581)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 13 Sep 2013 08:58:53 +0200

univention-pam (7.0.0-2) unstable; urgency=low

  * Move motd startup for welcome message from /etc/pam.d/common-session to
   /etc/pam.d/sshd   (Bug #32432)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Wed, 04 Sep 2013 10:21:16 +0200

univention-pam (7.0.0-1) unstable; urgency=low

  * Bump version for UCS 3.2, update copyright years for 2013
  * Update/review UCR variable descriptions (Bug #30943)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Mon, 17 Jun 2013 15:10:16 +0200

univention-pam (6.0.14-1) unstable; urgency=low

  * added ucrv nssldap/nss_srv for libnss-ldap.conf (Bug #30779)

 -- Felix Botner <botner@univention.de>  Thu, 25 Apr 2013 16:37:14 +0200

univention-pam (6.0.13-2) unstable; urgency=low

  * call join script in postinst (Bug #25368)

 -- Lukas Walter <walter@univention.de>  Fri, 08 Mar 2013 12:04:27 +0100

univention-pam (6.0.13-1) unstable; urgency=low

  * removed pam_ldap from pam.d/common-password (Bug #29438)

 -- Felix Botner <botner@univention.de>  Tue, 05 Mar 2013 16:44:07 +0100

univention-pam (6.0.12-1) unstable; urgency=low

  * added join script 11univention-pam.inst
  * commit UCR template for /etc/libnss-ldap.conf in join script
  (Bug #25368)

 -- Lukas Walter <walter@univention.de>  Tue, 05 Mar 2013 13:57:42 +0100

univention-pam (6.0.11-1) unstable; urgency=low

  * Fix disabling extrausers (Bug #29915)
  * Add UCR variable pamaccess/maxent (Bug #29393)
    Set default to 0x400001 = 4 MiB.
  * Re-add UCR registration for /etc/security/access-rlogin.conf

 -- Philipp Hahn <hahn@univention.de>  Tue, 15 Jan 2013 17:37:37 +0100

univention-pam (6.0.10-2) unstable; urgency=low

  * Removed debug message (Bug #29029)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 16 Nov 2012 23:07:19 +0100

univention-pam (6.0.10-1) unstable; urgency=low

  * ldap-group-to-file.py: don't use always the DC Master (Bug #29029)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 02 Nov 2012 09:03:38 +0100

univention-pam (6.0.9-1) unstable; urgency=low

  * added UCRV homedir/mount/required (Bug #23637)

 -- Felix Botner <botner@univention.de>  Mon, 29 Oct 2012 16:08:43 +0100

univention-pam (6.0.8-1) unstable; urgency=low

  * added binddn and bindpw to nssldap conf (Bug #28807)

 -- Felix Botner <botner@univention.de>  Mon, 22 Oct 2012 12:38:09 +0200

univention-pam (6.0.7-2) unstable; urgency=low

  * Fixed typo in ldap-group-to-file.py (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 14 Sep 2012 12:35:45 +0200

univention-pam (6.0.7-1) unstable; urgency=low

  * Use shuitl.move instead of os.rename to support /tmp and /var on
    different partitions (Bug #28361)
  * Really use --check_member in listener module if
    nss/group/cachefile/check_member is set

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 14 Sep 2012 12:15:49 +0200

univention-pam (6.0.6-2) unstable; urgency=low

  * Fixed python syntax error (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 05 Sep 2012 12:31:59 +0200

univention-pam (6.0.6-1) unstable; urgency=low

  * Catch exception if the member (group or host) does not exist
    (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 05 Sep 2012 12:27:54 +0200

univention-pam (6.0.5-1) unstable; urgency=low

  * Added option nss/group/cachefile/check_member and check the member
    by default (Bug #28401)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 04 Sep 2012 15:09:38 +0200

univention-pam (6.0.4-4) unstable; urgency=low

  * Restart listener later (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 31 Aug 2012 09:53:23 +0200

univention-pam (6.0.4-3) unstable; urgency=low

  * Disable nscd/group/invalidate_cache_on_changes on update
    (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 31 Aug 2012 09:45:36 +0200

univention-pam (6.0.4-2) unstable; urgency=low

  * Catch server down exception and use is_ucr_true in postinst
    (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 31 Aug 2012 09:31:01 +0200

univention-pam (6.0.4-1) unstable; urgency=low

  * nss/group/cachefile/invalidate_interval=disabled disables the cron
    job (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 30 Aug 2012 17:16:29 +0200

univention-pam (6.0.3-1) unstable; urgency=low

  * Create the NSS group database on upgrade (Bug #28361)
  * Removed duplicate group members (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 30 Aug 2012 16:32:16 +0200

univention-pam (6.0.2-1) unstable; urgency=low

  * Added missing cron file from last commit (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 30 Aug 2012 15:57:22 +0200

univention-pam (6.0.1-1) unstable; urgency=low

  * Replaced the libnss-ldap and nscd handling for groups with a dump of
    the LDAP groups and memberships to a single file which is used by
    nss-extrausers. The dump can be triggered via cron and with a
    listener module (nss.py). The old mechanism can be re-configured via
    UCR (Bug #28361)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 30 Aug 2012 15:52:34 +0200

univention-pam (6.0.0-1) unstable; urgency=low

  * UCS-3.1 version bump.
  * Add UCR variable descriptions (Bug #28134)

 -- Philipp Hahn <hahn@univention.de>  Thu, 02 Aug 2012 09:19:02 +0200

univention-pam (5.0.21-1) unstable; urgency=low

  * Removed pam_lastlog from sshd PAM configuration otherwise the last
    log will be displayed twice (Bug #27759)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 10 Jul 2012 16:31:27 +0200

univention-pam (5.0.20-1) unstable; urgency=low

  * fix handling multiple servers in ldap/server/addition (Bug #27050)

 -- Arvid Requate <requate@univention.de>  Tue, 10 Jul 2012 14:33:59 +0200

univention-pam (5.0.19-1) unstable; urgency=low

  * Allow '-' in addition to hard and soft in limits.conf (Bug #27709)
  * Update copyright.
  * debian/rules: Remove unneeded dh_fixperms_override.

 -- Philipp Hahn <hahn@univention.de>  Fri, 22 Jun 2012 19:51:45 +0200

univention-pam (5.0.18-1) unstable; urgency=low

  * added use_authtok in common-password (Bug #25898)

 -- Felix Botner <botner@univention.de>  Wed, 15 Feb 2012 13:22:40 +0100

univention-pam (5.0.17-2) unstable; urgency=low

  * also fix nscd.py listener (Bug #23984)

 -- Arvid Requate <requate@univention.de>  Tue, 25 Oct 2011 13:16:29 +0200

univention-pam (5.0.17-1) unstable; urgency=low

  * workaround for PEP 366 (Bug #23984)

 -- Arvid Requate <requate@univention.de>  Tue, 25 Oct 2011 13:07:57 +0200

univention-pam (5.0.16-3) unstable; urgency=low

  * Fix dependencies on u-c (Bug #22668)

 -- Philipp Hahn <hahn@univention.de>  Sat, 22 Oct 2011 04:11:13 +0200

univention-pam (5.0.16-2) unstable; urgency=low

  * fixed last commit (Bug #21358)

 -- Felix Botner <botner@univention.de>  Tue, 27 Sep 2011 14:06:47 +0200

univention-pam (5.0.16-1) unstable; urgency=low

  * increase nscd cache sizes if pre 3.0 default values
    are used (Bug #21358)

 -- Felix Botner <botner@univention.de>  Tue, 27 Sep 2011 13:59:47 +0200

univention-pam (5.0.15-1) unstable; urgency=low

  * made univention-nscd executable (Bug #23366)

 -- Felix Botner <botner@univention.de>  Tue, 20 Sep 2011 10:24:42 +0200

univention-pam (5.0.14-1) unstable; urgency=low

  * added password change script (Bug #23366)

 -- Felix Botner <botner@univention.de>  Mon, 19 Sep 2011 09:19:09 +0200

univention-pam (5.0.13-1) unstable; urgency=low

  * new host, group and passwd nscd cache size (Bug #21358)

 -- Felix Botner <botner@univention.de>  Fri, 16 Sep 2011 10:31:36 +0200

univention-pam (5.0.12-1) unstable; urgency=low

  * run univention-set-kdedirs as root in pam.d/common-session
    (univention_policy_result) (Bug #22882)

 -- Felix Botner <botner@univention.de>  Mon, 12 Sep 2011 14:25:16 +0200

univention-pam (5.0.11-1) unstable; urgency=low

  * fixed univention-pam.univention-config-registry-variables (Bug #20138)

 -- Felix Botner <botner@univention.de>  Thu, 01 Sep 2011 17:26:31 +0200

univention-pam (5.0.10-1) unstable; urgency=low

  * use port 7389 for pam_ldap and nssldap by default (Bug #23220)

 -- Arvid Requate <requate@univention.de>  Tue, 30 Aug 2011 11:32:10 +0200

univention-pam (5.0.9-1) unstable; urgency=low

  * Use binddn for pam_ldap and nssldap by default (Bug #17519)

 -- Arvid Requate <requate@univention.de>  Tue, 16 Aug 2011 11:36:31 +0200

univention-pam (5.0.8-1) unstable; urgency=low

  * Register ldap/hostdn for libnss-ldap.conf and pam_ldap.conf
    (Bug #17519)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 08 Aug 2011 09:55:04 +0200

univention-pam (5.0.7-1) unstable; urgency=low

  * Use binddn for pam_ldap and nssldap by default on all installations
    (Bug #17519)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 04 Aug 2011 09:06:32 +0200

univention-pam (5.0.6-1) unstable; urgency=low

  * Remove libpam-smbpass / samba-common dependency (Bug #22559)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 28 Jul 2011 19:03:00 +0200

univention-pam (5.0.5-1) unstable; urgency=low

  * allow ssh access to members of host groups on dc's (Bug #20138)

 -- Felix Botner <botner@univention.de>  Wed, 27 Jul 2011 11:11:50 +0200

univention-pam (5.0.4-2) unstable; urgency=low

  * fix ucslint (Bug #22776)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Mon, 20 Jun 2011 11:25:04 +0200

univention-pam (5.0.4-1) unstable; urgency=low

  * Consider ldap/server/port (Bug #20026)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 07 Jun 2011 07:39:58 +0200

univention-pam (5.0.3-2) unstable; urgency=low

  * restrict sshd on domaincontroller hosts Bug #20138

 -- Felix Botner <botner@univention.de>  Mon, 06 Jun 2011 09:13:07 +0200

univention-pam (5.0.2-1) unstable; urgency=low

  * merged common-* and admin-* pam schemes, removed admin-* and deny-* schemes
  * merged auth/admin/methods and auth/user/methods to auth/methods
  * added pam_access to every pam service
  * added pam_access config template for every service
  * Bug #20138

 -- Felix Botner <botner@univention.de>  Fri, 03 Jun 2011 13:01:25 +0200

univention-pam (5.0.1-4) unstable; urgency=low

  * rootbinddn is necessary for non-anonymous non-local LDAP searches
    only, i.e. on memberservers, mobile and fatclients and possibly
    on basesystems (Bug #17519)

 -- Arvid Requate <requate@univention.de>  Wed, 01 Jun 2011 18:32:53 +0200

univention-pam (5.0.1-3) unstable; urgency=low

  * fix typo (Bug #17519)

 -- Arvid Requate <requate@univention.de>  Tue, 31 May 2011 19:40:05 +0200

univention-pam (5.0.1-2) unstable; urgency=low

  * provide libnss-ldap.secret for libnss-ldap.conf
  * make nss_ldap and pam_ldap always use machine.secret (Bug #17519)

 -- Arvid Requate <requate@univention.de>  Tue, 31 May 2011 11:48:21 +0200

univention-pam (5.0.1-1) unstable; urgency=low

  * configure rootbinddn for nss_ldap and pam_ldap (Bug #17519)

 -- Arvid Requate <requate@univention.de>  Thu, 12 May 2011 20:10:48 +0200

univention-pam (5.0.0-2) unstable; urgency=low

  * added univention-pam.install (Bug #20138)

 -- Felix Botner <botner@univention.de>  Mon, 09 May 2011 16:20:28 +0200

univention-pam (5.0.0-1) unstable; urgency=low

  * UCS 3.0 (Bug #20138)
  * fixed ucr header in templates
  * added configRegistry.is_true in templates
  * updated copyright and python version to 2.6
  * reorganized debian dir ...

 -- Felix Botner <botner@univention.de>  Mon, 09 May 2011 09:53:56 +0200

univention-pam (4.0.11-1) unstable; urgency=low

  * new changelog (Bug #19851)

 -- Tim Petersen <petersen@univention.de>  Tue, 16 Sep 2010 15:36:27 +0200

univention-pam (4.0.10-1) unstable; urgency=low

  * change auth-check in access-admin, root - Domain Admins (Bug #19851)

 -- Tim Petersen <petersen@univention.de>  Tue, 16 Sep 2010 13:35:27 +0200

univention-pam (4.0.9-1) unstable; urgency=low

  * fix typo (Bug #18987)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Tue, 17 Aug 2010 09:30:27 +0200

univention-pam (4.0.8-1) unstable; urgency=low

  * support samba 3.3 packages. Bug #18426

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 22 Jul 2010 10:54:39 +0200

univention-pam (4.0.7-1) unstable; urgency=low

  * fix encoding (Bug #18987)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Wed, 21 Jul 2010 15:42:32 +0200

univention-pam (4.0.6-3) unstable; urgency=low

  * Work around broken univention-install-* (Bug #18884, Bug #18924)

 -- Philipp Hahn <hahn@univention.de>  Tue, 06 Jul 2010 14:05:33 +0200

univention-pam (4.0.6-2) unstable; urgency=low

  * Fix renaming conffile (Bug #18884)

 -- Philipp Hahn <hahn@univention.de>  Tue, 06 Jul 2010 13:00:40 +0200

univention-pam (4.0.6-1) unstable; urgency=low

  * Follow rename of /etc/pam.d/ssh to .../sshd (Bug #18884)

 -- Philipp Hahn <hahn@univention.de>  Tue, 06 Jul 2010 10:32:46 +0200

univention-pam (4.0.5-1) unstable; urgency=low

  * fixed another typo in pam_tally pam config. Bug #18750

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 04 Jul 2010 15:50:17 +0200

univention-pam (4.0.4-1) unstable; urgency=low

  * fixed a typo in pam_tally pam config. Bug #18750

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 02 Jul 2010 15:54:05 +0200

univention-pam (4.0.3-1) unstable; urgency=low

  * support umlauts in lock-user script. Bug #18750

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 02 Jul 2010 08:16:35 +0200

univention-pam (4.0.2-1) unstable; urgency=low

  * added faillog support which can be activated by setting
    auth/faillog*. Bug #18750

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 30 Jun 2010 06:52:23 +0200

univention-pam (4.0.1-1) unstable; urgency=low

  * convert to GNU APGL V3 (Bug #17543)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Tue, 22 Jun 2010 15:24:58 +0200

univention-pam (4.0.0-1) unstable; urgency=low

  * bump version for UCS 2.4
  * add ucrv's nssldap/nss_initgroups_ignoreusers and nssldap/nss_initgroups_ignoreusers/users Bug #16570

 -- Felix Botner <botner@univention.de>  Thu, 27 May 2010 12:05:32 +0200

univention-pam (3.0.19-1) unstable; urgency=low

  * make changes to UCR variables on installation (Bug #18394)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Wed, 26 May 2010 09:09:00 +0200

univention-pam (3.0.18-1) unstable; urgency=low

  * describe new UCR variables. (Bug #12928)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Wed, 12 May 2010 14:56:16 +0200

univention-pam (3.0.17-1) unstable; urgency=low

  * make /etc/security/limits.conf configurable via UCR. (Bug #12928)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Wed, 12 May 2010 14:16:18 +0200

univention-pam (3.0.16-1) unstable; urgency=low

  * really fixed a syntax error in admin-auth while writing the
    pam_passwdcache.so line. Bug #17502

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 29 Apr 2010 20:03:49 +0200

univention-pam (3.0.15-1) unstable; urgency=low

  * fixed a syntax error in admin-auth while writing the
    pam_passwdcache.so line. Bug #17502

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 29 Apr 2010 19:51:14 +0200

univention-pam (3.0.14-1) unstable; urgency=low

  * add description for nscd/autostart; Bug #18129

 -- Andreas Büsching <buesching@univention.de>  Mon, 26 Apr 2010 16:25:31 +0200

univention-pam (3.0.13-1) unstable; urgency=low

  * add descriptions for several UCR variables; Bug #18129

 -- Andreas Büsching <buesching@univention.de>  Mon, 26 Apr 2010 16:05:23 +0200

univention-pam (3.0.12-1) unstable; urgency=low

  * add a few more UCR variables to configure nscd; Bug #18129

 -- Andreas Büsching <buesching@univention.de>  Thu, 15 Apr 2010 13:26:35 +0200

univention-pam (3.0.11-1) unstable; urgency=low

  * add service screen to UCR variable auth/user/services; Bug #4630

 -- Andreas Büsching <buesching@univention.de>  Mon, 29 Mar 2010 15:02:44 +0200

univention-pam (3.0.10-1) unstable; urgency=low

  * added nscd/debug/level, Bug #17708
  * set max-db-size in relation to nscd/$service/size, Bug #17707
  * updated copyright

 -- Tim Petersen <petersen@univention.de>  Thu, 11 Mar 2010 09:01:42 +0100

univention-pam (3.0.9-1) unstable; urgency=low

  * save more then three users in passwd cache. It is configurable via
    auth/passwdcache/max_user. Bug #17502
  * do not remove users from the cache file if the authentication fails.
    As from now this will be done by the passwdcache listener module.
    Bug #13705

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 03 Mar 2010 08:53:42 +0100

univention-pam (3.0.8-1) unstable; urgency=low

  * fixed handling of cache only authentication (Bug #16488)

 -- Andreas Büsching <buesching@univention.de>  Tue, 24 Nov 2009 13:57:23 +0100

univention-pam (3.0.7-1) unstable; urgency=low

  * if cache authentication is available than unix must be defined as
    sufficient (Bug #16488)

 -- Andreas Büsching <buesching@univention.de>  Tue, 24 Nov 2009 10:00:23 +0100

univention-pam (3.0.6-2) unstable; urgency=low

  * fixed handling of nscd/group/invalidate_cache_on_changes in postinst
    (Bug #2174)

 -- Sönke Schwardt <schwardt@univention.de>  Fri, 20 Nov 2009 15:56:31 +0100

univention-pam (3.0.6-1) unstable; urgency=low

  * if 'unix' is the only authentication mechanism it is 'required' und
    'sufficient' (Bug #16488)

 -- Andreas Büsching <buesching@univention.de>  Fri, 20 Nov 2009 10:32:48 +0100

univention-pam (3.0.5-1) unstable; urgency=low

  * nscd listener module update (Bug: #2174)
  * always set nscd/group/invalidate_cache_on_changes to "true" if unset
  * restart univention-directory-listener in postinst
  * UCR variable description update
  * "nscd -i group" has to be called as root

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 19 Nov 2009 17:15:25 +0100

univention-pam (3.0.4-4) unstable; urgency=low

  *  edit nscd listener module #2174

 -- Tim Petersen <petersen@univention.de>  Thu,  2 Nov 2009 08:31:50 +0200

univention-pam (3.0.4-3) unstable; urgency=low

  *  edit variable name and description for nscd listener module #2174

 -- Tim Petersen <petersen@univention.de>  Thu,  2 Nov 2009 08:31:50 +0200

univention-pam (3.0.4-2) unstable; urgency=low

  * disable the verification of the server certificate as this fails with
    the old certificates (Bug #16159)

 -- Andreas Büsching <buesching@univention.de>  Fri, 30 Oct 2009 09:26:15 +0100

univention-pam (3.0.3-3) unstable; urgency=low

  * in preinst after diverting pam stack file due to UCR debhelper:
    copy back original files so a valid pam stack is present until
    UCR templates get committed (Bug: #15971)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 19 Oct 2009 09:10:08 +0200

univention-pam (3.0.3-1) unstable; urgency=low

  * set special pam stack for chfn and chsh during installation (Bug: #15971)

 -- Sönke Schwardt <schwardt@univention.de>  Fri, 16 Oct 2009 17:08:02 +0200

univention-pam (3.0.2-1) unstable; urgency=low

  * added comment to nsswitch.conf template to avoid modification by
    libnss-mdns (Bug: #12240)

 -- Sönke Schwardt <schwardt@univention.de>  Tue, 06 Oct 2009 10:17:49 +0200

univention-pam (3.0.1-2) unstable; urgency=low

  * added nscd.py Bug #2174

 -- Tim Petersen <petersen@univention.de>  Thu,  1 Oct 2009 14:15:50 +0200

univention-pam (3.0.1-1) unstable; urgency=low

  * fix error in pam.conf.d-generation (Bug #15265)

 -- Daniel Hofmann <dhofmann@univention.de>  Mon, 31 Aug 2009 15:16:56 +0200

univention-pam (3.0.0-0) unstable; urgency=low

  * bump version for UCS 2.3

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 10 Jun 2009 08:20:32 +0200

univention-pam (2.0.2-4) unstable; urgency=low

  * Added UCR Warning.

 -- Andre Fenske <fenske@univention.de>  Thu,  4 Dec 2008 14:04:27 +0100

univention-pam (2.0.2-3) unstable; urgency=low

  * adjusted ucr-headers in common-session.d and common-auth.d (Bug #8169)

 -- Arvid Requate <arequate@visdalen.knut.univention.de>  Wed,  3 Dec 2008 10:18:30 +0100

univention-pam (2.0.2-2) unstable; urgency=low

  * Give pam_krb5 a chance to update the ticket cache in pam.d/common-session (for Bug #10830)

 -- Arvid Requate <arequate@visdalen.knut.univention.de>  Mon, 20 Oct 2008 10:08:38 +0200

univention-pam (2.0.2-1) unstable; urgency=low

  * set nscd/group/size to 3001 if old value is 211 (Bug: #11223)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 01 Dec 2008 16:32:59 +0100

univention-pam (2.0.1-1) unstable; urgency=low

  * set new default of nscd/group/size to 3001 (old: 211)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 01 Dec 2008 13:34:58 +0100

univention-pam (2.0.0-1) unstable; urgency=low

  * added ucr variable nssldap/idle/timelimit for the idle_timelimit in libnss-ldap.conf

 -- Stefan Gohmann <gohmann@univention.de>  Wed,  6 Aug 2008 15:19:53 +0200

univention-pam (1.2.6-1) unstable; urgency=low

  * in default setting "bind_policy" entry is not written anymore to
    libnss-ldap.conf but it can be overridden by UCR variable
    nssldap/bindpolicy

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 30 Jun 2008 17:24:40 +0200

univention-pam (1.2.5-1) unstable; urgency=low

  * remove the libnss group mapping stuff. We made the change in the
    libnss-ldap source package.

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 19 Nov 2007 13:46:35 +0100

univention-pam (1.2.4-2) unstable; urgency=low

  * Fix schema mapping

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Wed, 14 Nov 2007 13:22:15 +0100

univention-pam (1.2.4-1) unstable; urgency=low

  * if the kerberos password failed during the login jump to the next
    pam module

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 14 Nov 2007 09:46:40 +0100

univention-pam (1.2.3-5) unstable; urgency=low

  * Apply the previous change to admin-account as well.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri,  9 Nov 2007 14:26:53 +0100

univention-pam (1.2.3-4) unstable; urgency=low

  * Rewrite pam_unix check in common-account. Newer PAM has more fine-grained
    permission validation, i.e. access roles like "sufficient" or "required"
    can be described more detailed. The previous "sufficient" translates to
    [success=done new_authtok_reqd=done default=ignore]. On
    top of that we add explicit an explicit condition to deny access if the
    Shadow account has expired: "acct_expired=bad".

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri,  9 Nov 2007 09:56:37 +0100

univention-pam (1.2.3-3) unstable; urgency=low

  * Map memberUid to uniqueMember in NSS. This resolves the problem that group
    members appear twice in getent(1) since the additional attribute is set.
    To disable this (which should hardly be necessary) the Config Registry
    setting ldap/nss/group_mapping can be set to "disabled".

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu,  8 Nov 2007 16:14:19 +0100

univention-pam (1.2.3-2) unstable; urgency=low

  * move chfn and chsh to user services during the update

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 19 Sep 2007 07:45:43 +0200

univention-pam (1.2.1-1) unstable; urgency=low

  * don't depend on libpam-smbpass when using/testing samba 4

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 12 Sep 2007 08:45:10 +0200

univention-pam (1.1.1-1) unstable; urgency=low

  * move chfn and chsh to user services

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 24 Aug 2007 07:36:09 +0200

univention-pam (1.1.0-15) unstable; urgency=low

  * fixed syntax for pam passwd cache for successful authentifications

 -- Bastian Neumann <neumann@univention.de>  Tue, 21 Aug 2007 10:57:36 +0200

univention-pam (1.1.0-14) unstable; urgency=low

  * more wording change univention-config-registry and univention-
    baseconfig

 -- Stefan Gohmann <gohmann@univention.de>  Fri,  3 Aug 2007 09:45:43 +0200

univention-pam (1.1.0-13) unstable; urgency=low

  * Always add pam_rootok lines, not conditionally on
    Univention Config Registry.

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Fri, 13 Jul 2007 11:52:52 +0200

univention-pam (1.1.0-12) unstable; urgency=low

  * Enable password-less modification of GECOS properties and the default
    shell through chfn and chsh by invoking pam_rootok.

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Fri, 13 Jul 2007 10:54:18 +0200

univention-pam (1.1.0-11) unstable; urgency=low

  *fixed wrong path to template in libnss-ldap.conf

 -- Bastian Neumann <neumann@univention.de>  Wed, 11 Jul 2007 11:38:32 +0200

univention-pam (1.1.0-10) unstable; urgency=low

  * fixed order of pam rules
  * made if clause more readable

 -- Janis Meybohm <meybohm@univention.de>  Thu, 14 Jun 2007 15:49:03 +0200

univention-pam (1.1.0-9) unstable; urgency=low

  * added access file baseconfig variables:
  *	auth/sshd/accessfile
  *	auth/ftpd/accessfile
  *	auth/gdm/accessfile
  * removed obsolete variable ssh/rootlogin

 -- Janis Meybohm <meybohm@univention.de>  Thu, 14 Jun 2007 13:41:35 +0200

univention-pam (1.1.0-8) unstable; urgency=low

  * encoded files utf-8

 -- Janis Meybohm <meybohm@univention.de>  Wed, 13 Jun 2007 11:21:43 +0200

univention-pam (1.1.0-7) unstable; urgency=low

  * fixed syntax error in common-auth

 -- Bastian Neumann <neumann@univention.de>  Fri,  1 Jun 2007 14:50:21 +0200

univention-pam (1.1.0-6) unstable; urgency=low

  * fixed syntax in common-auth

 -- Bastian Neumann <bastian@billy.knut.univention.de>  Thu, 31 May 2007 16:43:23 +0200

univention-pam (1.1.0-5) unstable; urgency=low

  * added underscores to baseconfig variables positive_time_to_live

 -- Tobias Scherer <scherer@univention.de>  Wed, 30 May 2007 11:13:24 +0200

univention-pam (1.1.0-4) unstable; urgency=low

  * added baseconfig-variables nscd/group/positive-time-to-live,
    nscd/hosts/positive-time-to-live, nscd/passwd/positive-time-to-live

 -- Tobias Scherer <scherer@univention.de>  Wed, 30 May 2007 10:28:26 +0200

univention-pam (1.1.0-3) unstable; urgency=low

  * changed name of baseconfig variable auth/max_user to
    auth/passwdcache/max_user

 -- Bastian Neumann <neumann@univention.de>  Tue, 29 May 2007 10:41:51 +0200

univention-pam (1.1.0-2) unstable; urgency=low

  * number of cached authentifications can be set with univention-baseconfig

 -- Bastian Neumann <neumann@univention.de>  Tue, 29 May 2007 09:17:43 +0200

univention-pam (1.1.0-1) unstable; urgency=low

  * switch to pam-heimdal package

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 May 2007 15:43:18 +0200

univention-pam (1.0.0-1) unstable; urgency=low

  * update to ucs 2.0 polcies

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 May 2007 15:25:23 +0200

univention-pam (0.15.1-1) unstable; urgency=low

  * add GPL headers

 -- Andreas BÃŒsching <buesching@univention.de>  Sat,  2 Dec 2006 18:58:41 +0100

univention-pam (0.14-1) unstable; urgency=low

  * support for samba bdc packages

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 22 Nov 2006 14:59:14 +0100

univention-pam (0.14-0) unstable; urgency=low

  * switch common-auth to multifile-template

 -- Ingo Steuwer <steuwer@univention.de>  Wed,  1 Nov 2006 10:31:31 +0100

univention-pam (0.13-6) unstable; urgency=low

  * added Template-Header in nscd.conf

 -- Tobias Scherer <scherer@univention.de>  Mon, 16 Oct 2006 13:43:04 +0200

univention-pam (0.13-5) unstable; urgency=low

  * run univention-set-kdeprofile in pam session stack

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 19 Jul 2006 16:50:59 +0200

univention-pam (0.13-3) unstable; urgency=low

  * added bind_policy parameter to libnss-ldap.conf template

 -- Lars Rehe <lars@billy.knut.univention.de>  Mon, 22 May 2006 16:13:18 +0200

univention-pam (0.13-2) unstable; urgency=low

  * remove minimum password length

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  9 Mar 2006 16:47:16 +0100

univention-pam (0.13-1) unstable; urgency=low

  * add baseconfig variable homedir/create

 -- Martin Kuehl <kuehl@univention.de>  Wed, 22 Feb 2006 14:13:49 +0100

univention-pam (0.13-0) unstable; urgency=low

  * merged to UCS 1.3

 -- Ingo Steuwer <steuwer@univention.de>  Wed, 16 Nov 2005 11:23:41 +0100

univention-pam (0.12) unstable; urgency=high

  * remove bug in template for common auth, which may allowed to set arbitrary
    passwords for system-users in passwd_cache if no connection to an ldap-
    server is present

 -- Ingo Steuwer <steuwer@univention.de>  Wed, 16 Nov 2005 10:45:34 +0100

univention-pam (0.11) unstable; urgency=low

  * added baseconfig variable ssh/rootlogin

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 12 Jul 2005 13:58:32 +0200

univention-pam (0.10) unstable; urgency=low

  * support multiple LDAP server, ldap/server/name and ldap/server/addition

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 21 Mar 2005 08:02:54 +0100

univention-pam (0.9) unstable; urgency=low

  * fix login bug on managed/mobile client

 -- Stefan Gohmann <gohmann@univention.de>  Wed,  2 Mar 2005 14:51:02 +0100

univention-pam (0.8) unstable; urgency=low

  * common-auth as baseconfg-multifile (for univention-quota)

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 17 Aug 2004 13:51:13 +0200

univention-pam (0.7) unstable; urgency=low

  * mount home directory from users fileserver

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 13 Jul 2004 13:13:22 +0200

univention-pam (0.6) unstable; urgency=low

  * die on user_unknown during last pam module

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 13 Jul 2004 06:50:53 +0200

univention-pam (0.5) unstable; urgency=low

  * Split home mounting into separate package: univention-home-mounter.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Tue, 18 May 2004 13:51:10 +0200

univention-pam (0.4) unstable; urgency=low

  * re-added nsswitch/ldap baseconfig variable

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 12 May 2004 09:13:13 +0200

univention-pam (0.3) unstable; urgency=low

  * Workaround for dpkg bug: Remove old configuration files from
    univention-ldap-client before installation.
  * Add proper package description.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Wed, 28 Apr 2004 11:29:35 +0200

univention-pam (0.2) unstable; urgency=low

  * nscd.conf include in univention-baseconf

 -- Thomas Kaminski <thomas@ds-work.office.univention.de>  Fri,  2 Apr 2004 10:26:56 +0200

univention-pam (0.1) unstable; urgency=low

  * Initial release.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Wed, 17 Mar 2004 13:30:38 +0100
