nss-pam-ldapd-0.9.12-bp156.2.7

- Update to 0.9.12
  * allow explicitly configuring an empty search base (for LDAP servers that support that)
  * support LDAP attributes with minus characters in attribute mapping expressions
  * add tls_reqsan, tls_crlfile and tls_crlcheck options
  * support generating ldaps:// URIs from DNS SRV records for port 389 by using DNSLDAPS in the uri option
  * prefer the first URI listed in nslcd.conf after reconnecting after idle_timelimit
  * fix handling of pam_authc_ppolicy no
  * fix debug logging of ldap timeout values
  * documentation improvements
  * add pam_authc_ppolicy support to pynslcd
  * fix Python 3 compatibility in chsh.ldap
  * fix for running pynslcd without the uid option
  * partial support for running tests with slapd 2.5
  * miscellaneous test suite improvements
  * test suite fixes for Solaris

- Define macro _pam_moduledir if not set to fix builds for Leap and SLE

- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * nslcd.service

- Use %_pam_moduledir instead of hardcoding %{_lib}/security
  (boo#1191050).

- Update to 0.9.11:
  * add support for Python 3 in pynslcd and utilities
  * fix crash in chsh.ldap (thanks Mizunashi Mana)
  * test suite improvements

- Update to 0.9.10:
  * add FreeBSD netgroup support (thanks HWLin and Mango Yen)
  * make password expiry messages correct and consistent (thanks Têko Mihinto)
  * add domain variable for use in pam_authz_search
  * allow logging longer lines
  * create nslcd socket after dropping privileges to avoid slow start-ups

- Add the conflicts from the mainpackage also to the baselibs.conf
  generated ones: the -32bit packages conflict the same way.
- Modernize spec file by calling spec-cleaner.

- Update to 0.9.9:
  * support spaces in attribute mapping expressions
  * allow parsing longer lines in the configuration file
  * allow for longer host names

- Update to 0.9.8:
  * add a pam_authc_search option that can be used to configure the search operation that is performed after authentication
  * add nss_uid_offset and nss_gid_offset options that can be used to change returned numeric user and group ids from LDAP (thanks Seth Wright)
  * do not retry failed user password on second LDAP server
  * fix a crash in the PAM module on FreeBSD when showing password expiration messages
  * the validnames option now also applies to shadow lookups
  * support ethernet addresses in LDAP in compact and long formats
  * improvements to getent.ldap command (a few minor bug fixes and preparations for Python 3 support)
  * log entries and lookups failing nss_min_uid at debug level
  * improvements to the test suite (including tests for getent.ldap)

- Drop SysV support / %insserv_cleanup, it breaks package on TW

- Upgrade to 0.9.7 with accumulated bug fixes.

- Do not suppress errors from useradd/groupadd.
  Reduce dependencies for it.

- Explicityly disable nslcd-utils otherwise it will auto-enable them
  if python is present. This can lead to different builds depending on
  environment. And creation of files %{_datadir}/nslcd-utils/*.py?
  %{_bindir}/chsh.ldap, %{_bindir}/getent.ldap

- Package all installed files

- Create user and group nslcd.
- Remove nslcd-user-conf.dif:
  It shouldn't be run as root.

- Drop %clean section and authors list.
  %doc is already implicit for manpages.

- Upgrade source from upstream release 0.9.5 to 0.9.6 with accumulated
  bug fixes.
- Install rc-link.

- new upload to the build service after discontinuation in opensuse
  12.3