courier-authlib-0.71.3-bp154.1.35

- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service

- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.

- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile

- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile

- update to 0.71.1
  * Clean up header files, do not install autoconf-generated
    courier_auth_config.h

- update to 0.71.0
  * userdb: Make userdb script accept UTF-8 domain names. Document
    it in the man page.
  * Configure and installed versioned shared libraries, both shared
    and the authentication modules.
  * Update INSTALL. Remove obsolete pre-courier authlib migration
    script and documentation. It's been long enough.
  * Add _meta API functions with an extra auth_meta parameter,
    keep the original functions as wrappers that provide a stub meta
    parameter. Use this to pass arbitrary variables to authdaemon.
  * authdaemond.c: retrieve the TCPREMOTEIP variable if it's provided.
  * authpam.c: TCPREMOTEIP, if set, sets PAM_RHOST.
  * Makefile.am (commonldflags): Link all libraries with the
  - -enable-new-dtags flag.
- rpmlint
  o addFilter shared-lib-calls-exit

- update to 0.70.0
  * authsasl.c (auth_sasl_ex): For EXTERNAL, base64-decode the
    initial authorization string, since if none is provided the
    callback's reply is base64-decoded.

- BuildRequires postgresql-server-devel on Leap >= 15.2

- update to 0.69.1
  * authldaplib.cpp (ldapopen): Make sure that we rebind if we reconnect,
    if so configured.
  * authldaplib.cpp: Fix handling of LDAP configurations that use the
    same LDAP attribute for two or more variables.
- update to 0.69.0
  * authdaemond.c: set FD_CLOEXEC on socket file descriptors, to avoid
    leaks to child processes.
  * authldaplib.cpp: improve automatic reconnection logic to the LDAP
    server.
  * authsaslclient.h (SASL_LIST): Reorder SASL methods, strongest
    first.
- add courier-authlib.keyring for source verification
- remove obsolete SysV courier-authdaemon.init
- cleanup spec

- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini

- Add the missing dependencies for Tumbleweed.

- update to 0.68.0
  * authldaplib.cpp: Rewrite authldap in modern C++. Autodetect
    and automatically reload authldaprc when it is changed. No server
    restart is required.
  * authldaplib.cpp (operator): Fix compilation warning.
  * checkpassword.c (do_authcheckpassword): Check for a null return
    value from crypt().
  * authsqlite, authmysql, authpgsql: Rewrite these modules in
    modern C++. Autodetect and automatically reload the configuration
    file when it's changed, no server restart is needed.
  * userdb/userdbpw.c (main): Use bcrypt_gensalt() on OpenBSD
  * courierauth.h: Move declarations from cramlib.h into courierauth.h,
    exporting them as part of the public API.
  * configure.ac: Rebuild against updated courier-unicode API.

- Drop redundant %clean section. Dissolve %__-type macros.

- Don't install init script if we use systemd

- Don't call insserv if we use systemd

- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.

- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis <giovanni@paclan.it>.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql >= 9.1

- fix bashism in preun script

- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.

- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch

- fix for bnc#751125
  * maildrop can not access courier-authlib socket

- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch

- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog

- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite

- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl

- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -> GPL-3.0+)

- fix init script
  * add ldap mysql to Should-Start/Stop

- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup

- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build

- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.

- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix