# changelog

author: Michal Hlavinka <mhlavink@redhat.com> 20080202-15
changelog:
  - fix wrong array size caused by typeset (#538857)
  - fix pids of forked commands (#520383)
  - fix memcmp-memcpy typo causing syntax error (#538655)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-12
changelog:
  - make braces non-optional for ${a[i]} inside [[...]] in the case
    where the argument can be a pattern.


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-11
changelog:
  - prevent rpmbuild creating debuginfo for %ghost files (#488798)
  - don't segfault for inaccessible history file (#494363)
  - add COMPATIBILITY file to the %doc (#494534)
  - use old language catalog, because the new one is broken (#493570)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-7
changelog:
  - fix unexpected behaviour of typeset [options] name=value
  - resolves: #489516
  - fix alternatives for ksh update, when there wasn't alternatives yet


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-5
changelog:
  - fix #488798 - use 'alternatives' for ksh switching
  - fix #485030 - Umask value not restored when returning from a subshell
  - fix #488934 - ksh does not declare shell variables with hyphen


author: Tomas Smetana <tsmetana@redhat.com> 20080202-2
changelog:
  - fix #459228 - option -R not clear
  - fix #459566 - segfault on set -o vi
  - fix #456652 - exit shifts vi to background


author: Tomas Smetana <tsmetana@redhat.com> 20080202-1
changelog:
  - rebase to the new version
  - fix #371441 - can't display international characters
  - fix #429488 - ksh -R can cause segmentation fault
  - fix #435159 - scripts failing under ksh
  - fix #441557 - the -m option removed from the manual page


author: Tomas Smetana <tsmetana@redhat.com> 20060214-1.5
changelog:
  - fix #242879 - memory leak
  - fix #232627 - call to exit(0) returns a status 19 
    to the calling shell script
  - fix #242878 - spins in stopped state
  - fix #243776 - ERR trap causes recursion
  - fix #219420 - unaligned access messages
  - fix #242877 - filesystem acl defaults are ignored
  - fix #278781 - fix handling of sigttou
  - fix #250362 - update manpage about subscript of index array


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-4
changelog:
  - enable hardcopy binding in default config (#521824)
  - apply some xterm tweaks also to xterm-* and reduce duplicates
    in default config (#474064)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-6
changelog:
  - fix BR 136234 by carrying out the suggested change in /etc/screenrc
  - drop screen-4.0.2-logname.patch (merged into screen-4.0.2-screenrc.patch)
  - grant wish 130674 by adding a (commented out) caption statement to default
    screenrc


author: Lon Hohberger <lhh@redhat.com> 4.0.1-1
changelog:
  - Import of 4.0.1 from upstream.
  - Removed screen-homedir hack introduced in 3.9.15-8.  (I
  was unable to reproduce the behavior described in #98320,
  and thus, the patch isn't necessary.)
  - Fix for buffer overflow from Timo Strainen (patch 7).
  - Fix for #111084 - we now require texinfo to build.
  - Comment out lines in screenrc causing screen to complain
  at startup.


author: Lon Hohberger <lhh@redhat.com> 3.9.15-8
changelog:
  - Change screen's behavior to do the following: Attempt to use
  ~/.screen as the screen directory.  Failing that (ie, on files
  systems without Unix sockets support), try using /tmp/screen-<USER>.
  This prevents a user from creating /tmp/screens (which inherits
  the sticky bit from /tmp, preventing other users from using screen),
  as well as *tries* to be more secure.


author: Lon Hohberger <lhh@redhat.com> 3.9.15-6
changelog:
  - Disable system-wide read/write dir in /tmp; use user's ~/.screen
  directory for screen sessions. (#98320)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 3.9.11
  - patch0/patch4 is not necessary anymore
  - do not compress man-pages/info-files in spec file
  - use configure to set telnet/screenrc instead of sed
  - add a hack to correctly install the new screenencodings
  - try to build up a better global /etc/screenrc instead of
    /etc/skel/.screenrc


author: Crutcher Dunnavant <crutcher@redhat.com> 3.9.9-3
changelog:
  - fixed screenrc path sed command; #50046
  - added ncurses-devel build dep; #49692
  - fix typo in specfile that broke screenrc, #49535


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Patched the documentation to change the 'C-a C-\' to 'C-a \',
  - which is what is the real behaviour. this fixes bug #16103


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Stuck an entry into the default screenrc file that forces
  - '^?' (backspace) to send '^H'.
  - Its an ugly fix for a termcap inheritance problem,
  - but it works, if anyone REALLY needs '^?' they can change it,
  - and I think we anger less people with this than the way it 
  - currently behaves. (Read: vi and emacs work now)
  - POST NOTE (Aug 15): emacs is NOT happy with ^H, BUT screen thinks
  - that this is what backspace is supposed to do, so we don't change it.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - got a patch from rzm@icm.edu.pl to fix bug #10353
  - which caused screen to crash when copying to a file buffer


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100
     resolves: #611854
   - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - fixed rpmlint warnings
   - added fix for bz537223


author: : Version 1.0.82
changelog:
  - Update the "ctdb lvsmaster" command to return -1 on error.
   - Add a -Y flag to "ctdb lvsmaster"
   - RHEL5 apache leaks semaphores when crashing. Add semaphore cleanup to the
     41.httpd eventscript and try to restart apache when it has crashed.
   - Fixes to some tests
   - Add a -o option to "onnode" which will redirect all stdout to a file for
     each of the nodes.
   - Add a natgw and a lvs node specifier to onnode so that we can use
     "onnode natgw ..."
   - Assign the natgw address to lo instead of the private network so it can also
     be used where private and public networks are the same.
   - Add GPL boilerplates to two missing scripts.
   - Change the natgw prefix NATGW_ to CTDB_NATGW_


author: : Version 1.0.81
changelog:
  - use smbstatus -np instead of smbstatus -n in the 50.samba eventscript
     since this avoids performing an expensive traverse on the locking and brlock
     databases.
   - make ctdb automatically terminate all traverse child processes clusterwide
     associated to a client application that terminates before the traversal is
     completed.
   - From Sumit Bose : fixes to AC_INIT handling.
   - From Michael Adam, add Tridge's "ping_pong" tool the the ctdb distro since
     this is very useful for testing the backend filesystem.
   - From Sumit bose, add support for additional 64 bit platforms.
   - Add a link from the webpage to Michael Adams SambaXP paper on CTDB.


author: : Version 1.0.80
changelog:
  - change init shutdown level to 01 for ctdb so it stops before any of the
     other services
   - if we can not pull a database from a remote node during recovery, mark that
     node as a culprit so it becomes banned
   - increase the loglevel when we volunteer to drop all ip addresses after
     beeing in recovery mode for too long. Make this timeout tuneable with
     "RecoveryDropAllIPs" and have it default to 60 seconds
   - Add a new flag TDB_NO_NESTING to the tdb layer to prevent nested
     transactions which ctdb does not use and does not expect. Have ctdb set this
     flag to prevent nested transactions from occuring.
   - dont unconditionally kill off ctdb and restrat it on "service ctdb start".
     Fail "service ctdb start" with an error if ctdb is already running.
   - Add a new tunable "VerifyRecoveryLock" that can be set to 0 to prevent the
     main ctdb daemon to verify that the recovery master has locked the reclock
     file correctly before allowing it to set the recovery mode to active.
   - fix a cosmetic bug with ctdb statistics where certain counters could become
     negative.


author: : Version 1.0.79
changelog:
  - From Mathieu Parent: add a ctdb pkgconfig file
   - Fix bug 6250
   - add a funciton remove_ip to safely remove an ip from an interface, taking
     care to workaround an issue with linux alias interfaces.
   - Update the natgw eventscript to use the safe remove_ip() function
   - fix a bug in the eventscript child process that would cause the socket to be
     removed.
   - dont verify nodemap on banned nodes during cluster monitoring
   - Update the dodgy SeqnumInterval to have ms resolution


author: : Version 1.0.78
changelog:
  - Add a notify mechanism so we can send snmptraps/email to external management
     systems when the node becomes unhealthy
   - include 11.natgw eventscript in thew install so that the NATGW feature works


author: : Version 1.0.77
changelog:
  - Update the 99.routing eventscript to also try to add the routes (back)
     during a releaseip event. Similar to the reasons why we must add addresses
     back during releaseip in 10.interfaces


author: : Version 1.0.76
changelog:
  - Add a debugging command "xpnn" which can print the pnn of the node even when
     ctdbd is not running.
   - Redo the NATGW implementation to allow multiple disjoing NATGW groups in the
     same cluster.


author: : Version 1.0.75
changelog:
  - Various updates to LVS
   - Fix a bug in the killtcp control where we did not set the port correctly
   - add a new "ctdb scriptstatus" command that shows the status of the
     eventrscripts.


author: : Version 1.0.74
changelog:
  - Fixes to AIX from C Cowan.
   - Fixes to ctdb_diagnostics so we collect correct GPFS data
   - Fixes to the net conf list command in ctdb_diagnostics
   - Check the static-routes file IFF it exists in ctdb_diagnostics


author: : Version 1.0.73
changelog:
  - Add possibility to disable the check of shares for NFS and Samba
   - From Sumit Bose, fix dependencies so make -j works


author: : Version 1.0.72
changelog:
  - Updates to test scripts by martin s
   - Adding a COPYING file
   - Use netstat to check for services and ports and fallback to netcat
     only if netstat is unavailable.


author: : Version 1.0.70
changelog:
  - IPv6 support is completed. this is backward compatible with ipv4-only
     systems. To use IPv6 with samba and ctdb you need current GIT of samba 3.3
     or michael adams samba-ctdeb branch.
   - Many enhancements to the build system and scripts to make it more SUSE
     friendly by Michael Adams.
   - Change of how the naming of the package is structured. We are now
     using "1.0.70" as a release and "-1" as the revision instead of as
     previously using "1.0" as release and ".70" as the revision.
     By Michael Adams.


author: : Version 1.0.69
changelog:
  - Various fixes to scripts by M Adam
   - Dont call ctdb_fatal() when the transport is down during shutdown


author: : Version 1.0.68
changelog:
  - Fixes for monitoring of interfaces status from Michael Adam.
   - Use -q instead of >/dev/null for grep to enhance readability of the
     scripts from Michael Adam.
   - Update to the "ctdb recover" command. This command now block until the
     has completed. This makes it much easier to use in scripts and avoids
     the common workaround :
        ctdb recover
        ... loop while waiting for recovery completes ...
        continue ...
   - Add a CTDB_TIMEOUT variable. If set, this variable provides an automatic
     timeout for "ctdb <command>", similar to using -T <timeout>
   - Set a unique errorcode for "ctdb <command>" when it terminates due to a
     timeout so that scripts can distinguish between a hung command and what was
     just a failure.
   - Update "ctdb ban/unban" so that if the cluster is in recovery these commands
     blocks and waits until after recovery is complete before the perform the
     ban/unban operation. This is necessary since the recovery process can cause
     nodes to become automatically unbanned.
   - Update "ctdb ban/unban" to block until the recovery that will follow shortly
     after this command has completed.
     This makes it much easier to use in scripts and avoids the common
     workaround :
        ctdb ban/unban
        ... loop while waiting for recovery completes ...
        continue ...
   - Bugfix for the new flags handling in 1.0.67. Abort and restart monitoring
     if we failed to get proper nodemaps from a remote node instead of
     dereferencing a null pointer.
   - If ctdbd was explicitely started with the '--socket' argument, make
     ctdbd automatically set CTDB_SOCKET to the specified argument.
     This ensures that eventscripts spawned by the ctdb daemon will default to
     using the same socket and talk to the correct daemon.
     This primarily affects running multiple daemons on the same host and where
     you want each instance of ctdb daemons have their eventscripts talk to the
     "correct" daemon.
   - Update "ctdb ping" to return an error code if the ping fail so that it
     can be used in scripts.
   - Update to how to synchronize management of node flags across the cluster.


author: : Version 1.0.67
changelog:
  - Add a document describing the recovery process.
   - Fix a bug in "ctdb setdebug" where it would refuse to set a negative
     debug level.
   - Print the list of literals for debug names if an invalid one was given
     to "ctdb setdebug"
   - Redesign how "ctdb reloadnodes" works and reduce the amont of tcp teardowns
     used during this event.
   - Make it possible to delete a public ip from all nodes at once using
     "ctdb delip -n all"


author: : Version 1.0.66
changelog:
  - Allow to change the recmaster even when we are not frozen.
   - Remove two redundant SAMBA_CHECK variables from the sysconf example
   - After a node failure it can take very long before some lock operations
     ctdb needs to perform are allowed/works with gpfs again. Workaround this
     by treating a hang/timeout as success.
   - Dont override CTDB_BASE is fet in the shell already
   - Always send keepalive packets regardless of whether the link is idle or not.
   - Rewrite the disable/enable flag update logic to prevent a race between
     "ctdb disable/enable" and the recovery daemon when updating the flags to
     all nodes.


author: : Version 1.0.65
changelog:
  - Update the sysconfig example: The default debug level is 2 (NOTICE) and not
     0 (ERROR)
   - Add support for a CTDB_SOCKET environment variable for the ctdb command
     line tool. If set, this overrides the default socket the ctdb tool will
     use.
   - Add logging of high latency operations.


author: : Version 1.0.64
changelog:
  - Add a context and a timed event so that once we have been in recovery for
     too long we drop all public addresses.


author: : Version 1.0.63
changelog:
  - Remove logging of "periodic cleanup ..." in 50.samba
   - When we reload a nodes file, we must detect this and reload the file also
     in the recovery daemon before we try to dereference somethoung beyond the end
     of the nodes array.


author: : Version 1.0.62
changelog:
  - Allow multiple eventscritps using the same prefix number.
     It is undefined which order scripts with the same prefix will execute in.


author: : Version 1.0.61
changelog:
  - Use "route add -net" instead of "ip route add" when adding routes in 99.routing
   - lower the loglevel os several debug statements
   - check the status returned from ctdb_ctrl_get_tickles() before we try to
     print them out to the screen.
   - install a new eventscript 20.multipathd whoich can be used to monitor that
     multipath devices are healthy


author: : Version 1.0.60
changelog:
  - Verify that nodes we try to ban/unban are reachable and print an error othervise.
   - Update the client and server sides of TAKEIP/RELEASEIP/GETPUBLICIPS and
     GETNODEMAP to fall back to the old style ipv4-only controls if the new
     ipv4/ipv6 controls fail. This allows an ipv4/v6 enabled ctdb daemon to
     interoperate with earlier ipv4-only versions of the daemons.
   - From Mathieu Parent : log debian systems log the package versions in ctdb
     diagnostics
   - From Mathieu Parent : specify logdir location for debian (this patch was
     later reversed)
   - From Michael Adams : allow # comments in nodes/public_addresses files


author: : Version 1.0.59
changelog:
  - Updated "reloadnodes" logic. Instead of bouncing the entire tcp layer it is
    sufficient to just close and reopen all outgoing tcp connections.
   - New eventscript 99.routing which can be used to re-attach routes to public
     interfaces after a takeip event. (routes may be deleted by the kernel when we
     release an ip)
   - IDR tree fix from Jim Houston
   - Better handling of critical events if the local clock is suddenly changed
     forward by a lot.
   - Fix three slow memory leaks in the recovery daemon
   - New ctdb command : ctdb recmaster   which prints the pnn of the recmaster
   - Onnode enhancements from Martin S : "healthy" and "connected" are now
     possible nodespecifiers
   - From Martin S : doc fixes
   - lowering some debug levels for some nonvital informational messages
   - Make the daemon daemon monitoring stronger and allow ctdbd to detect a hung
     recovery daemon.
   - From C Cowan : patches to compile ipv6 under AIX
   - zero out some structs to keep valgrind happy


author: : Version 1.0.58
changelog:
  - revert the name change tcp_tcp_client back to tcp_control_tcp so
     samba can build.
   - Updates to the init script from Abhijith Das <adas@redhat.com>


author: : Version 1.0.54
changelog:
  - fix a looping error in the transaction code
   - provide a more detailed error code for persistent store errors
     so clients can make more intelligent choices on how to try to recover


author: : Version 1.0.52
changelog:
  - Send an explicit gratious arp when starting sending the tcp tickles.
   - When doing failover, issue a killtcp to non-NFS/non-CIFS clients
     so that they fail quickly. NFS and CIFS already fail and recover
     quickly.
   - Update the test scripts to handle CTRL-C to kill off the test.


author: : Version 1.0.51
changelog:
  - Strip off the vlan tag from bond devices before we check in /proc
     if the interface is up or not.
   - Use testparm in the background in the scripts to allow probing
     that the shares do exist.
   - Fix a bug in the logging code to handle multiline entries better
   - Rename private elements from private to private_data


author: : Version 1.0.50
changelog:
  - Dont assume that just because we can establish a TCP connection
     that we are actually talking to a functioning ctdb daemon.
     So dont mark the node as CONNECTED just because the tcp handshake
     was successful.
   - Dont try to set the recmaster to ourself during elections for those
     cases we know this will fail. To remove some annoying benign but scary
     looking entries from the log.
   - Bugfix for eventsystem for signal handling that could cause a node to
     hang.


author: : Version 1.0.48
changelog:
  - Update the spec file.
   - Do not start new user-triggered eventscripts if we are already
     inside recovery mode.
   - Add two new controls to start/cancel a persistent update.
     A client such as samba can use these to tell ctdbd that it will soon
     be writing directly to the persistent database tdb file. So if
     samba is -9ed before it has eitehr done the persistent_store or
     canceled the operation, ctdb knows that the persistent databases
     'may' be out of sync and therefore a full blown recovery is called for.
   - Add two new options :
     CTDB_SAMBA_SKIP_CONF_CHECK and CTDB_SAMBA_CHECK_PORTS that can be used
     to override what checks to do when monitoring samba health.
     We can no longer use the smbstatus, net or testparm commands to check
     if samba or its config is healthy since these commands may block
     indefinitely and thus can not be used in scripts.


author: : Version 1.0.47
changelog:
  - Fix a double free bug where if a user striggered (ctdb eventscript)
     hung and while the timeout handler was being processed a new user
     triggered eventscript was started we would free state twice.
   - Rewrite of onnode and associated documentation.


author: : Version 1.0.46
changelog:
  - Document both the LVS:cingle-ip-address and the REMOTE-NODE:wan-accelerator
     capabilities.
   - Add commands "ctdb pnn", "ctdb lvs", "ctdb lvsmaster".
   - LVS improvements. LVS is the single-ip-address mode for a ctdb cluster.
   - Fixes to supress rpmlint warnings
   - AXI compile fixes.
   - Change \s to [[:space:]] in some scripts. Not all RHEL5 packages come
     with a egrep that handles \s   even same version but different arch.
   - Revert the change to NFS restart. CTDB should NOT attempt to restart
     failed services.
   - Rewrite of the waitpid() patch to use the eventsystem for handling
     signals.


author: : Version 1.0.45
changelog:
  - Try to restart the nfs service if it has failed to respond 3 times in a row.
   - waitpid() can block if the child does not respond promptly to SIGTERM.
     ignore all SIGCHILD signals by setting SIGCHLD to SIG_DEF.
     get rid of all calls to waitpid().
   - make handling of eventscripts hanging more liberal.
     only consider the script to have failed and making the node unhealthy
     IF the eventscript terminated wiht an error
     OR the eventscript hung 5 or more times in a row


author: : Version 1.0.44
changelog:
  - Add a CTDB_VALGRIND option to /etc/sysconfig/ctdb to make it start
     ctdb under valgrind. Logs go to /var/log/ctdb_valgrind.PID
   - Add a hack to show the control opcode that caused uninitialized data
     in the valgrind output by encoding the opcode as the line number.
   - Initialize structures and allocated memory in various places in
     ctdb to make it valgrind-clean and remove all valgrind errors/warnings.
   - If/when we destroy a lockwait child, also make sure we cancel any pending transactions
   - If a transaction_commit fails, delete/cancel any pending transactions and
     return an error instead of calling ctdb_fatal()
   - When running ctdb under valgrind, make sure we run it with --nosetsched and also
     ensure that we do not use mem-mapped i/o when accessing the tdb's.
   - zero out ctdb->freeze_handle when we free/destroy a freeze-child.
     This prevent a heap corruption/ctdb crash bug that could trigger
     if the freeze child times out.
   - we dont need to explicitely thaw the databases from the recovery daemon
     since this is done implicitely when we restore the recovery mode back to normal.
   - track when we start and stop a recovery. Add the 'time it took to complete the
     recovery' to the 'ctdb uptime' output.
     Ensure by tracking the start/stop recovery timestamps that we do not
     check that the ip allocation is consistend from inside the recovery daemon
     while a different node (recovery master) is performing a recovery.
     This prevent a race that could cause a full recovery to trigger if the
     'ctdb disable/enable' commands took very long.
   - The freeze child indicates to the master daemon that all databases are locked
     by writing data to the pipe shared with the master daemon.
     This write sometimes fail and thus the master daemon never notices that the databases
     are locked cvausing long timeouts and extra recoveries.
     Check that the write is successful and try the write again if it failed.
   - In each node, verify that the recmaster have the right node flags for us
     and force a push of our flags to the recmaster if wrong.


author: : Version 1.0.43
changelog:
  - Updates and bugfixes to the specfile to keep rpmlint happy
   - Force a global flags update after each recovery event.
   - Verify that the recmaster agrees with our node flags and update the
     recmaster othervise.
   - When writing back to the parent from a freeze-child across the pipe,
     loop over the write in case the write failed with an error  othervise
     the parent will never be notified tha the child has completed the operation.
   - Automatically thaw all databases when recmaster marks us as being in normal
     mode instead of recovery mode.


author: : Version 1.0.42
changelog:
  - When event scripts have hung/timedout more than EventScriptBanCount times
     in a row the node will ban itself.
   - Many updates to persistent write tests and the test scripts.


author: : Version 1.0.41
changelog:
  - Reactivate the safe writes to persistent databases and solve the
     locking issues. Locking issues are solved the only possible way,
     by using a child process to do the writes.  Expensive and slow but... .


author: : Version 1.0.40
changelog:
  - Read the samba sysconfig file from the 50.samba eventscript
   - Fix some emmory hierarchical bugs in the persistent write handling


author: : Version 1.0.39
changelog:
  - Moved a CTDB_MANAGES_NFS, CTDB_MANAGES_ISCSI and CTDB_MANAGES_CSFTPD
     into /etc/sysconfig/ctdb
   - Lowered some debug messages to not fill the logfile with entries
     that normally occur in the default configuration.


author: : Version 1.0.38
changelog:
  - Add machine readable output support to "ctdb getmonmode"
   - Lots of tweaks and enhancements if the event scripts are "slow"
   - Merge from tridge: an attempt to break the chicken-and-egg deadlock that
     net conf introduces if used from an eventscript.
   - Enhance tickles so we can tickle an ipv6 connection.
   - Start adding ipv6 support : create a new container to replace sockaddr_in.
   - Add a checksum routine for ipv6/tcp
   - When starting up ctdb, let the init script do a tdbdump on all
     persistent databases and verify that they are good (i.e. not corrupted).
   - Try to use "safe transactions" when writing to a persistent database
     that was opened with the TDB_NOSYNC flag. If we can get the transaction
     thats great, if we cant  we have to write anyway since we cant block here.


author: : Version 1.0.37
changelog:
  - When we shutdown ctdb we close the transport down before we run the
     "shutdown" eventscripts. If ctdb decides to send a packet to a remote node
     after we have shutdown the transport but before we have shutdown ctdbd
     itself this could lead to a SEGV instead of a clean shutdown. Fix.
   - When using the "exportfs" command to extract which NFS export directories
     to monitor,  exportfs violates the "principle of least surprise" and
     sometimes report a single export line as two lines of text output
     causing the monitoring to fail.


author: : Version 1.0.36
changelog:
  - fix a memory corruption bug that could cause the recovery daemon to crash.
   - fix a bug with distributing public ip addresses during recovery.
     If the node that is the recovery master did NOT use public addresses,
     then it assumed that no other node in the cluster used them either and
     thus skipped the entire step of reallocating public addresses.


author: : Version 1.0.35
changelog:
  - During recovery, when we define the new set of lmasters (vnnmap)
     only consider those nodes that have the can-be-lmaster capability
     when we create the vnnmap. unless there are no nodes available which
     supports this capability in which case we allow the recmaster to
     become lmaster capable (temporarily).
   - Extend the async framework so that we can use paralell async calls
     to controls that return data.
   - If we do not have the "can be recmaster" capability, make sure we will
     lose any recmaster elections, unless there are no nodes available that
     have the capability, in which case we "take/win" the election anyway.
   - Close and reopen the reclock pnn file at regular intervals.
     Make it a non-fatal event if we occasionally fail to open/read/write
     to this file.
   - Monitor that the recovery daemon is still running from the main ctdb
     daemon and shutdown the main daemon when recovery daemon has terminated.
   - Add a "ctdb getcapabilities" command to read the capabilities off a node.
   - Define two new capabilities : can be recmaster and can be lmaster
     and default both capabilities to YES.
   - Log denied tcp connection attempts with DEBUG_ERR and not DEBUG_WARNING


author: : Version 1.0.34
changelog:
  - When deleting a public ip from a node, try to migrate the ip to a different
     node first.
   - Change catdb to produce output similar to tdbdump
   - When adding a new public ip address, if this ip does not exist yet in
     the cluster, then grab the ip on the local node and activate it.
   - When a node disagrees with the recmaster on WHO is the recmaster, then
     mark that node as a recovery culprit so it will eventually become
     banned.
   - Make ctdb eventscript support the -n all argument.


author: : Version 1.0.33
changelog:
  - Add facilities to include site local adaptations to the eventscript
     by /etc/ctdb/rc.local which will be read by all eventscripts.
   - Add a "ctdb version" command.
   - Secure the domain socket with proper permissions from Chris Cowan
   - Bugfixes for AIX from Chris Cowan


author: : Version 1.0.32
changelog:
  - Add a control to have a node execute the eventscripts with arbitrary
     command line arguments.
   - Add a control "rddumpmemory" that will dump the talloc memory allocations
     for the recovery daemon.
   - Decorate the talloc memdump to produce better and easier memory leak
     tracking.
   - Update the RHEL5 iscsi tgtd scripts to allow one iscsi target for each
     public address.
   - Add two new controls "addip/delip" that can be used to add/remove public
     addresses to a node at runtime. After using these controls a "ctdb recover"
     ir required to make the changes take.
   - Fix a couple of slow memory leaks.


author: : Version 1.0.31
changelog:
  - Add back controls to disable/enable monitoring on a node.
   - Fix a memory leak where we used to attach CALL data to the ctdb structure
     when performing a local call. Memory which would be lost if the call was
     aborted.
   - Reduce the loglevel for the log output when someone connects to a non
     public ip address for samba.
   - Redo and optimize the vacuuming process to send only one control to each
     other node containing all records to be vacuumed instead of one
     control per node per record.


author: : Version 1.0.30
changelog:
  - Update documentation cor new commands and tuneables
   - Add machinereadable output to the ip,uptime and getdebug commands
   - Add a moveip command to manually failover/failback public ips
   - Add NoIPFallback tuneable that prevents ip address failback
   - Use file locking inside the CFS as alternative to verify when other nodes
     Are connected/disconnected to be able to recover from split network
   - Add DisableWhenUnhealthy tunable
   - Add CTDB_START_AS_DISABLED sysconfig param
   - Add --start-as-disabled flag to ctdb
   - Add ability to monitor for OOM condition


author: : Version 1.0.29
changelog:
  - Add a new command to make expansion of an existing cluster easier
   - Fix bug with references to freed objects in the ctdb structure
   - Propagate debuglevel changes to the recovery daemon
   - Merge patches to event scripts from Mathieu Parent :
   - MP: Simulate "service" on systems which do not provide this tool
   - MP: Set correct permissions for events.d/README
   - Add nice helper functions to start/stop nfs from the event scripts


author: : Version 1.0.28
changelog:
  - Fix a problem where we tried to use ethtool on non-ethernet interfaces
   - Warn if the ipvsadm packege is missing when LVS is used
   - Dont use absolute pathnames in some of the event scripts
   - Fix for persistent tdbs growing inifinitely.


author: : Version 1.0.25
changelog:
  - added async recovery code
   - make event scripts more portable
   - fixed ctdb dumpmemory
   - more efficient tdb allocation code
   - improved machine readable ctdb status output
   - added ctdb uptime


author: : Version 1.0.23
changelog:
  - fixed a memory leak in the recoveryd
   - fixed a corruption bug in the new transaction code
   - fixed a case where an packet for a disconnected client could be processed
   - added http event script
   - updated documentation


author: : Version 1.0.19
changelog:
  - fixed non-master bug
   - big speedup in recovery for large databases
   - lots of changes to improve tdb and ctdb for high churn databases


author: : Version 1.0.17
changelog:
  - fixed bugs related to ban/unban of nodes
   - fixed a race condition that could lead to monitoring being permanently disabled,
     which would lead to long recovery times
   - make deterministic IPs the default
   - fixed a bug related to continuous recovery
   - added a debugging option --node-ip


author: Karsten Hopp <karsten@redhat.com> 0.213.25-1
changelog:
  - update pci.ids and usb.ids
  - added missing Acer Monitor (#711121)
  - added sub device id for HB112AGN 802.11abgn 3x3 Wi-Fi Adapter (#713068)
  - added sub device ids for iLO4 (#714098)
  - added device ids for Sandy Bridge QPI (#720938)


author: Karsten Hopp <karsten@redhat.com> 0.213.9-1
changelog:
  - update to latest pci.ids, usb.ids
  - fix missing monitor entries
  - fix wrong ID of Proview 926w monitor


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Steve Traylen <steve.traylen@cern.ch> - 4.2.6-5
changelog:
  - Build with wxGtk for the purposes of releasing in SL, i.e with
    out EPEL.
  - Remove SL4 support case.


author: Steve Traylen <steve.traylen@cern.ch> - 4.2.6-3
changelog:
  - Convert F13s spec file to be a backport as gnuplot42 on EPEL5.
  - Remove all the emacs files since no sensible way to autoload
    these in conjuction with the existing RHEL packages and they are 
    the same files.


author: Ivana Varekova <varekova@redhat.com> - 4.2.4-5
changelog:
  - fix #489069 (update of the package from nonsplit version
    causes the absence of gnuplot binary -
    fixed using posttrans instead of post)


author: Jan Kaluza <jkaluza@redhat.com> - 3.7.4-12
changelog:
  - fix #474013 - mention scripts arguments in man page
  - fix #461494 - proper exit code when logrotate.status is corrupted
  - fix #484075 - logrotate "size" directive can exceed 1895825408 bytes
  - fix #485553 - add proper /var/log/btmp pattern into default logrotaet config
  - fix #540119 - fixed missingok problem with globs
  - fix #567365 - handle errors during rename call
  - fix #638591 - better documentation of "size" parameter
  - fix #622059 - mention authors in man page
  - fix #579680 - fixed logrotate postrotate script args with nosharedscripts
  - fix #642936 - mention all options in manpage
  - fix #574784 - prevent recursive include


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-9
changelog:
  - fix #431836 - memory error on corrupted status file
  - fix #445554 - lgrotate ignores pre/postrotating scripts arguments
  - fix #447022 - logrotate doesn't rotate logs if status file is corrupted


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-8
changelog:
  - fix #247410 - logrotate does not honor size directive
  - fix #250059 - logrotate manual page bug
  - fix #259281 - logrotates default config rotates wtmp irrationally often


author: Miloslav Trmac <mitr@redhat.com> - 3.7.1-2
changelog:
  - Fix sending mails (#131583)
  - Preserve file attributes when compressing files (#121523, original patch by
    Daniel Himler)


author: Erik Troan <ewt@redhat.com>
changelog:
  - always use compressext for the extension for compressed
    files; before compresscmd and compressext had to agree
  - moved all compression to one code block
  - compression, scripts don't use system() anymore
  - compress and maillast didn't work together properly
  - delaycompress and mailfirst didn't work properly
  - don't use system() for mailing (or uncompressing) logs anymore
  - use "-s" for speciying the subjected of mailed logs


author: Elliot Lee <sopwith@redhat.com> 3.6.2-1
changelog:
  - Fix bug #55809 (include logrotate.status in %files)
  - Fix bug #58328 (incorrect error detection when reading state file)
  - Allow 'G' size specifier from bug #57242


author: Preston Brown <pbrown@redhat.com> 3.6-1
changelog:
  - patch from Alexander Kourakos <awk@awks.org> to stop the shared
    postrotate/prerotate scripts from running if none of the log(s) need
    rotating.  All log files are now checked for rotation in one batch,
    rather than sequentially.
  - more fixes from Paul Martin <pm@debian.org>


author: Preston Brown <pbrown@redhat.com> 3.5.6-1
changelog:
  - enable LFS support (debian bug #100810)
  - quote filenames for running compress commands or pre/postrotate cmds (#21348)
  - deprecate "errors" directive (see bug #16544 for explanation)
  - update man page
  - configurable compression command by Colm Buckley <colm@tuatha.org>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.6.0-3
changelog:
  - Backport the fix for usage of IPv6 nameserves from 1.7 branch
  - Use default defattr
  - Comment patches
  - Convert the CHANGES file to UTF8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.6.0-2
changelog:
  - Backport the fix the order of search domains from 1.7 branch
  - Add patch do honor our CFLAGS (patch by Ville Skyttä)
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-5
changelog:
  - import of the RHEL-6 ebtables package without the buildid patch
  - added -fno-strict-aliasing to the compiler flags (rhbz#596158)
  - cleaned up description (rhbz#596158)
  - fixed install of /etc/ethertypes in running system (rhbz#596778)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform
    Resolves: rhbz#536828
  - fixed download link according to package review
    Related: rhbz#543948


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.8-4
changelog:
  - bump to 2.0.8-2 from upstream
  - keep _libdir/ebtables, even though upstream just moved away from it.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.8-3
changelog:
  - use _libdir/ebtables to match upstream RPATH (bugzilla 248865)
  - correct license tag
  - use upstream init script
  - enable build-id
  - use cflags for all compiles
  - be sane with DESTDIR


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.6-4
changelog:
  - remove INSTALL file
  - add some text to description, correct typos
  - fix %postun
  - add PreReqs
  - add %ghost config files


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1
changelog:
  - Rebase to upstream 2.1.3 (#753936)
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#752226)
  - Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
  - Set minimum n-v-r of sssd to 1.5.1-40


author: Rob Crittenden <rcritten@redhat.com> - 2.0-16
changelog:
  - _isa is not defined in RHEL 5, use alternate mechanism to require
    arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-15
changelog:
  - KDC autodiscovery may fail when domain != realm (#710143)
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#723667)
  - Set minimum curl and xmlrpc-c versions (#723667)
  - Require arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-12
changelog:
  - Update to upstream 2.0.0rc3 (#631907)
  - Add patch to work on Python 2.4
  - Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
  - Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
  - Add Requires for sssd, set minimum to sssd-1.5.1-18
  - Add Requires for bind-utils
  - Remove Requires on nss_ldap
  - Update license to GPLv3+


author: Rob Crittenden <rcritten@redhat.com> - 2.0-10
changelog:
  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-4
changelog:
  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package


author: Rob Crittenden <rcritten@redhat.com> - 2.0-2
changelog:
  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-1
changelog:
  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.


author: Akira TAGOH <tagoh@redhat.com> - 003.02-3.1
changelog:
  - Get rid of fontpackages dependency for RHEL-5.
  - Add Requires: fontconfig
  - Do not make a symlink onto /etc/fonts/conf.d.
  - roll back the release to keep it less than RHEL-6's.


author: Akira TAGOH <tagoh@redhat.com> - 003.02-4.1
changelog:
  - Backport from Fedora.
  - Improve the fontconfig config file further more to match ja as well. (#586837)


author: Akira TAGOH <tagoh@redhat.com> - 003.02-3.1
changelog:
  - Get rid of fontpackages dependency for RHEL-5.
  - Add Requires: fontconfig
  - Do not make a symlink into /etc/fonts/conf.d.
  - roll back the release to keep it less than RHEL-6's.


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Jiri Skala <jskala@redhat.com> - 2.0.5-24
changelog:
  - Resolves: #759364 - vsftpd child terminates when listing files with UID/GID larger than signed int


author: Jiri Skala <jskala@redhat.com> - 2.0.5-23
changelog:
  - Resolves: #513828 - vsftpd allows remote probing for valid usernames
  - Resolves: #717409 - Connection fails during upload - PORT is dropped by client
  - Resolves: #644083 - backport ssl_request_cert option vsftpd-2.0.7
  - Resolves: #641239 - [RFE] vsftpd can not handle square brackets in ls


author: Jiri Skala <jskala@redhat.com> - 2.0.5-20
changelog:
  - Resolves: #556795 - double call SSL_shutdown() makes some clients hang or slower
  - Resolves: #619731 - vsftpd OOPS when using Kerberos auth and no username/password
  - Resolves: #680823 - incorrect logging of virtual guest accounts as anonymous accounts in the xferlog file
  - Resolves: #676254 - vsftpd Timestamp problem


author: Jiri Skala <jskala@redhat.com> - 2.0.5-18
changelog:
  - Resolves: #530706 - vsftpd prematurely closes connection just before processing of post-auth command
  - Resolves: #579317 - vsftpd issues in RHEL5


author: Jiri Skala <jskala@redhat.com> - 2.0.5-16
changelog:
  - Resolves: #498548 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #236707 - vsftpd would crash without any error messages on bind fail
  - Resolves: #431451 - Wrong init script


author: Jiri Skala <jskala@redhat.com> - 2.0.5-15
changelog:
  - Resolves: #441485 - "service vsftpd stop" not stopping all vsftpd processes
  - Resolves: #478526 - man page error about some config options
  - Resolves: #460067 - RHEL5 vsftpd.conf lists incorrect default value for xferlog_file
  - Resolves: #431451 - Wrong init script
  - Resolves: #486259 - white space after chown_username value causes failure
  - Resolves: #236707 - vsftpd would crash without any error messages on bind fail


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-11
changelog:
  - add new option to log login failures based on user list
  - Resolves: #345791
  - fix user_config_dir option
  - Resolves: #400921
  - allow usernames starting with '_' or '.'
  - Resolves: #386561
  - fix the write/race condition when uploading files simultaneously
  - Resolves: #240553
  - fix the bug that causes every new file stored with STOU to have a prefix '.1'
  - Resolves: #392231
  - make vsftpd wildcard matching more greedy
  - Resolves: #392181


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-10
changelog:
  - Resolves: rhbz#677753 - ding-libs developer docs on RHEL 5 are not
  -                         multilib-clean
  - Removed API documentation from packages


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upstream release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49.1
changelog:
  - Add the ability to disable the LDAP simple paging control
  - Resolves: rhbz#806765 - Intermittent LDAP paging errors


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#680443 - Detect support for the nsupdate realm directive
  - Resolves: rhbz#773327 - The full dyndns update message should be logged
                            into debug logs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#758168 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Resolves: rhbz#760106 - cannot install sssd or sssd-tools
  - Resolves: rhbz#758168 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758163 - LDAP failover not working if server refuses
                            connections
  - Resolves: rhbz#760166 - HBAC rule evaluation does not support extended
                            UTF-8 languages


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#750229 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#692455 - rfc2307bis groups are being enumerated even when the gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#700168 - Users with a local group as their primary GID are denied access by the simple access provider
  - Resolves: rhbz#707975 - Unable to authenticate users when username contains "\0"
  - Resolves: rhbz#707999 - The IPA provider does not work with IPv6
  - Resolves: rhbz#708104 - "renew_all_tgts" and "renew_handlers" messages are being logged multiple times when the provider comes back online.
  - Resolves: rhbz#748818 - SSSD not functional after "self" reboot
  - Resolves: rhbz#748820 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#748822 - SSSD is not populating nested groups in Active Directory
  - Resolves: rhbz#748834 - IPA provider fails initgroups() if user is not a member of any group
  - Resolves: rhbz#748836 - Process /usr/libexec/sssd/sssd_be was killed by signal 11 (SIGSEGV) when ldap_uri is misconfigured.
  - Resolves: rhbz#748837 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#748842 - Include valid "ldap_uri" formats in sssd-ldap man page
  - Resolves: rhbz#748846 - During the change password operation the ccache is not replaced by a new one if the old one isn't active anymore.
  - Resolves: rhbz#748856 - sssd doesn't honor ldap supportedControls
  - Resolves: rhbz#748860 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#748862 - Resolve RPMDiff errors in SSSD
  - Resolves: rhbz#748864 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#748869 - "System error" appears in log during change password operation of a user in openldap server with ppolicy enabled.
  - Resolves: rhbz#748870 - sssd crashes during auth while there exists multiple external hosts along with managed host.
  - Resolves: rhbz#748871 - sssd blocks login of   ipa-users
  - Resolves: rhbz#748872 - Authentication fails when there exists an empty hbacsvcgroup.
  - Resolves: rhbz#748873 - Improve password policy error message
  - Resolves: rhbz#748874 - Unable to enumerate rfc2307bis group with non-default attribute names.
  - Resolves: rhbz#748875 - SSSD should pick a user/group name when there are multi-valued names
  - Resolves: rhbz#748877 - Group lookups doesn't return it's member for sometime when the member has multi-valued uid.
  - Resolves: rhbz#748878 - Lookup fails for non-primary usernames with multi-valued uid.
  - Resolves: rhbz#748879 - "Unknown (private extension) error(21853), (null)" messages are logged during change password operation of a user in openldap server with ppolicy enabled.
  - Resolves: rhbz#748882 - Rework the example config
  - Resolves: rhbz#748897 - HBAC processing is very slow when dealing with FreeIPA deployments with large numbers of hosts.
  - Resolves: rhbz#749255 - SSSD can crash due to dbus server removing a UNIX socket
  - Resolves: rhbz#748833 - latest sssd fails if ldap_default_authtok_type is not mentioned
  - Resolves: rhbz#748835 - SSSD's async resolver only tries the first nameserver in /etc/resolv.conf
  - Resolves: rhbz#748847 - sssd shuts down if inotify crashes
  - Resolves: rhbz#748848 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#748849 - Certificate validation fails with message "Connection error: TLS: hostname does not match CN in peer certificate"
  - Resolves: rhbz#748855 - sssd_pam leaks file descriptors.
  - Resolves: rhbz#748883 - HBAC rule evaluation does not properly handle host groups
  - Resolves: rhbz#748899 - HBAC: Hostname comparisons should be case-insensitive
  - Resolves: rhbz#748854 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#748857 - "groups user" and "finger gecos" fails
  - Resolves: rhbz#748893 - SSSD backend gets killed on slow systems
  - Resolves: rhbz#748895 - Only access sssd_nss internal hash table if it was initialized
  - Resolves: rhbz#748896 - sssd_pam segfaults on sssd restart
  - Resolves: rhbz#748853 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#748858 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#748861 - Provide a mechanism for vetoing the use of certain shells
  - Resolves: rhbz#748865 - When non-posix groups are skipped, initgroups returns random GID
  - Resolves: rhbz#748866 - Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#748867 - [RFE] Have SSSD cache properly with krb5_validate = True and SElinux enabled
  - Resolves: rhbz#748881 - Use an explicit base 10 when converting uidNumber to integer
  - Resolves: rhbz#748821 - [RFE] Support overriding attribute value
  - Resolves: rhbz#698724 - kpasswd fails when using sssd and kadmin server != kdc server
  - Resolves: rhbz#680443 - Dynamic DNS update fails if multiple servers are given in ipa_server config option
  - Resolves: rhbz#694580 - SSSD's man pages are missing information
  - Resolves: rhbz#709352 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#748898 - SSSD can crash due to dbus server removing a UNIX socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Reverts:  rhbz#680443 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#707574 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701702 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related:  rhbz#700858 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691900 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694853 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#695476 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694853 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694853 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692960 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691900 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690867 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690287 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690814 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-18
changelog:
  - Resolves: rhbz#690093 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#690096 - SSSD should skip over groups with multiple names
  - Resolves: rhbz#689887 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#688697 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688694 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-17
changelog:
  - Resolves: rhbz#688677 - Build SSSD in RHEL 5.7 against openldap24-libs
  - Adds support for following LDAP referrals and using Mozilla NSS for crypto
  - support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683260 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683585 - sssd consumes 100% CPU
  - Related: rhbz#680441  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Related: rhbz#680441 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#682853 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Resolves: rhbz#682803 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680441 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680443 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680933 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682808 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Related: rhbz#679087 - SSSD IPA provider should honor the krb5_realm option
  - Related: rhbz#678615 - SSSD needs to look at IPA's compat tree for netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#679087 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#679097 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Resolves: rhbz#678606 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678778 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#678780 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678412 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678615 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#665314 - Rebase SSSD to 1.5 in RHEL 5.7
  - Resolves: rhbz#676027 - sssd segfault when first entry of ldap_uri is
  -                         unreachable
  - Resolves: rhbz#678032 - Remove HBAC time rules from SSSD
  - Resolves: rhbz#675007 - sssd corrupts group cache
  - Resolves: rhbz#608864 - [RFE] Support obfuscated passwords in the SSSD
  -                         configuration


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-34
changelog:
  - Resolves: rhbz#645515 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#636055 - SSSD initgroups does not behave as expected
  - Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
  -                         libini_config-devel


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-31
changelog:
  - Resolves: rhbz#633863 - SSSD log fills up the disk
  - Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
  -                         libini_config-devel
  - Resolves: rhbz#636823 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#638241 - sssd stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-30
changelog:
  - Resolves: rhbz#634861 - error: %post(sssd-1.2.1-28.1.el5.s390x) scriptlet
  -                         failed, exit status 127


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP
  - Patch was included but not applied in previous version


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-27.1
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-51
changelog:
  - Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
  - Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-42
changelog:
  - Fix bz755935 (luci_admin man page is misleading)
  - Fix bz755941 (luci_admin restore is not consistent)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-35
changelog:
  - Fix bz739600 (conga allows erroneous characters in resource)
  - Fix bz734562 (Improve Luci's resource name validation)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-34
changelog:
  - Fix bz709478 (Ricci fails to detect if host if virtual machine capable)
  - Fix bz723000 (Modifying an existing shared resource will not update the reference in the cluster.conf)
  - Fix bz723188 (Luci does not allow to modify __max_restarts and __restart_expire_time for independent subtrees, only for non-critical resources)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-26
changelog:
  - Fix bz679866 (Add the ability to configure the "self_fence" attribute for the LVM resource)
  - Fix bz690936 (RFE: fence_cisco_ucs needs to support sub-organizations)
  - Fix bz643996 (luci_admin doesn't operate correctly if external zope3 packages are installed)
  - Fix bz640329 (fields in Luci are too short)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-24
changelog:
  - Fix bz493662 (RFE: Separate the Oracle 10g Failover Instance in Conga to two resources called "Oracle Instance" and "Oracle Listener")


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-19
changelog:
  - Fix bz602362 (ricci and luci_admin do not have man pages)
  - Fix bz636554 (Support ext4 and xfs file systems in conga for file system agents)
  - Fix bz637216 (Add luci support for fence_ifmib fencing agent)
  - Fix bz579859 (Add luci support for Cisco UCS fencing agent)
  - Fix bz637259 (RFE: Critical/Non-Critical services & resources luci support)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-18
changelog:
  - Fix bz626817 (Add luci support for Cisco MDS fencing agent)
  - Fix bz628102 (Add luci support for iLO MP fencing agent)
  - Fix bz525802 (Add support for configuring broadcast)
  - Modify fix for bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Modify fix for bz501780 (Luci invalidates some "system hostnames" that are valid)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-16
changelog:
  - Fix bz513004 (Conga does not remember SAP database type in IE6/8 from shared resource)
  - Fix bz533246 (Conga does not write "auth" or "password" when creating IPMI LAN fence device)
  - Fix bz555862 (Luci does not have an option to delete failover domain)
  - Fix bz577913 (Fence_drac5 will not popluate the luci interface correctly when adding fence device to node)
  - Fix bz582348 (Remove the "interface" field from the multicast configuration dialog)
  - Fix bz584633 (Add support for power_wait)
  - Fix bz587399 (Clarification on "type" when configuring oracledb resources)
  - Fix bz590143 (chkconfig on cman and rgmanager by default when adding a cluster node via conga)
  - Fix bz590311 (luci vmware fencing gui and fence_vmware script parameter conflict)
  - Fix bz603114 (Can't create KVM guest resources without a path to the XML file)
  - Fix bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Fix bz612300 (conga will fail to start a new node that is added via luci)


author: Chris Feist <cfeist@redhat.com> 0.12.2-14
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#564490


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-7
changelog:
  - Fix bz501780 (Luci invalidates some "system hostnames" that are valid)
  - Fix bz514051 (fs resource will remount itself if any config changes are made to cluster.conf)
  - Fix bz517114 (Conga should not tag clusternodes with multicast tags)
  - Fix bz519050 (Luci does not validate passwords and incorrect characters can be used)
  - Fix bz521884 (Fix instances of #!/usr/bin/env python in luci)
  - Fix bz530129 (conga does not properly handle HA LVM types)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-1
changelog:
  - Fix bz452704 (Unable to add existing RHEL4 clusters with RHEL5.2 Luci)
  - Fix bz467464 (adding qdisk to existing cluster fails to update cman entry in cluster.conf)
  - Fix bz460038 (Conga fs resource error when editing service)
  - Fix bz483067 (adding resource in conga doesn't work in IE)
  - Fix bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)
  - Fix bz450007 (cannot remove shared fence device through luci)
  - Fix bz466013 (Add luci GUI support for LPAR and vmware fencing)
  - Fix bz459160 (fenced config option to skip nodes with undefined fencing)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-4
changelog:
  - Fix bz459562 (charset configuration fix for luci)
  - Fix bz459469 (An unknown device type was given: "gnbd.")
  - Fix bz454933 (Add Support in Conga for Xen migration mapping)
  - Fix bz459623 (Conga error adding new node to existing cluster)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-1
changelog:
  - Fix bz444938 (conga fails to create proper cluster.conf entries for gfs2 filesystem type)
  - Fix bz444210 (Adding multiple fence devices at the same time causes duplicate entries)
  - Fix bz444381 (conga writes 'exportpath' instead of 'export' attribute for netfs)
  - Fix bz446907 (rpm -V luci fails)
  - Fix bz450854 (luci doesn't start because of a missing dep /usr/bin/dc)
  - Fix bz206570 (RFE: vm list from ricci)
  - Fix bz430737 (Conga should install the 'cmirror' package when clustered storage is requested)
  - Fix bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fix bz433089 (when adding multiple nodes the order is reversed.)
  - Fix bz441581 (Don't allow both label and device for qdisk config if only one can be specified)
  - Fix bz223785 (Storage 'Display Devices by' option does not work)
  - Fix bz250439 (conga is unable to delete snapshot volumes)
  - Fix bz414551 (Sector size list is improperly sorted)
  - Fix bz429350 (RFE: GUI support for failing over a service to another node after X number of restarts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-8
changelog:
  - Fix bz441580 (conga should install 'sg3_utils' and start service 'scsi_reserve' when scsi fencing is used)
  - Fix bz441573 ("nodename" field for fence_scsi disabled when adding a new fence device/instance)
  - Fix bz442997 (Luci inserts "hostname" instead of "ipaddr" for rsa II fencing device)
  - Fix bz442806 (luci shows wrong state for 'Monitor link' checkbox in IP resource)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-0
changelog:
  - Fixed bz230462 (RFE: Only reboot installation target machines when needed)
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz239387 (RFE: add timeouts for actions that can leave cluster unreachable)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz249619 (luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded)
  - Fixed bz252348 (RFE: should only have to enter a system's password once)
  - Fixed bz253223 (When deleting a node from conga, the fence device isn't deleted)
  - Fixed bz253720 ("trust" box shouldn't be an option if it is required)
  - Fixed bz253727 (RFE: graphical view should be default in partiton tables view)
  - Fixed bz253842 (luci ignores File System Resource Configuration)
  - Fixed bz253879 (RFE: drop the link/details column in the resource section table)
  - Fixed bz264161 (RFE: support setting the "__independent_subtree" attribute on cluster resources)
  - Fixed bz277661 (RFE: Better instructions on the luci login page if luci_admin not run.)
  - Fixed bz277711 (RFE: luci_admin should check that luci is running before asking for the password)
  - Fixed bz295771 (RFE: add ability to set self_fence attribute for clusterfs resources)
  - Fixed bz301411 (conga shouldn't turn on init scripts if the user turned them off)
  - Fixed bz303661 (Browser support to encompass Internet Explorer on Windows Vista and XP)
  - Fixed bz304891 (Browser support to encompass Firefox on Windows Vista and XP.)
  - Fixed bz315631 (conga doesn't handle the cluster restart operation properly)
  - Fixed bz317261 (Check for dual power fencing fails when adding new fence instances)
  - Fixed bz320411 (conga should use the node name in cluster.conf and not FQDN for fencing)
  - Fixed bz337041 (Add option to not fail-back service)
  - Fixed bz340111 (Storage redirection after probe does not work on WinXP with FF2)
  - Fixed bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fixed bz383071 (Virtual machine configuration - add field for "migration type" xml attr = "migrate")


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-3
changelog:
  - Fixed bz245947 (luci/Conga cluster configuration tool not initializing cluster node members)
  - Fixed bz249641 (conga is unable to do storage operations if there is an lvm snapshot present)
  - Fixed bz249342 (unknown ricci error when adding new node to cluster)
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz249091 (RFE: tell user they are about to kill all their nodes)
  - Fixed bz249066 (AttributeError when attempting to configure a fence device)
  - Fixed bz249086 (Unable to add a new fence device to cluster)
  - Fixed bz249868 (Use of failover domain not correctly shown)
  - Resolves bz245947, bz249641, bz249342, bz249291, bz249091,
  - Resolves bz249066, bz249086, bz249868
  - Related: bz249351


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-2
changelog:
  - Fixed bz245202 (Conga needs to support Internet Explorer 6.0 and later)
  - Fixed bz248317 (luci sets incorrect permissions on /usr/lib64/luci and /var/lib/luci)
  - Resolves: bz245202 bz248317


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz221899 (Node log displayed in partially random order)
  - Fixed bz225782 (Need more luci service information on startup - no info written to log about failed start cause)
  - Fixed bz227743 (Intermittent/recurring problem - when cluster is deleted, sometimes a node is not affected)
  - Fixed bz227682 (saslauthd[2274]: Deprecated pam_stack module called from service "ricci")
  - Fixed bz238726 (Conga provides no way to remove a dead node from a cluster)
  - Fixed bz239389 (conga cluster: make 'enable shared storage' the default)
  - Fixed bz239596
  - Fixed bz240034 (rpm verify fails on luci)
  - Fixed bz240361 (Conga storage UI front-end is too slow rendering storage)
  - Fixed bz241415 (Installation using Conga shows "error" in message during reboot cycle.)
  - Fixed bz241418 (Conga tries to configurage cluster snaps, though they are not available.)
  - Fixed bz241706 (Eliminate confusion in add fence flow)
  - Fixed bz241727 (can't set user permissions in luci)
  - Fixed bz242668 (luci init script can return non-LSB-compliant return codes)
  - Fixed bz243701 (ricci init script can exit with non-LSB-compliant return codes)
  - Fixed bz244146 (Add port number to message when ricci is not started/firewalled on cluster nodes.)
  - Fixed bz244878 (Successful login results in an infinite redirection loop with MSIE)
  - Fixed bz239388 (conga storage: default VG creation should be clustered if a cluster node)
  - Fixed bz239327 (Online User Manual needs modification)
  - Fixed bz227852 (Lack of debugging information in logs - support issue)
  - Fixed bz245025 (Conga does not accept '&amp;' character in password field for Fence configuration)
  - Fixed bz225588 (luci web app does not enforce selection of fence port)
  - Fixed bz212022 (cannot create cluster using ip addresses)
  - Fixed bz223162 (Error trying to create a new fence device for a cluster node)
  - Upgraded to the latest Plone (2.5.3)
  - Added a "reprobe storage" button that invalidates cached storage reports
    and forces a new probe.
  - Resolves: bz238655, bz221899, bz225782, bz227682, bz227743, bz239389,
  - Resolves: bz239596, bz240034, bz240361, bz241415, bz241418, bz241706,
  - Resolves: bz241727, bz242668, bz243701, bz244146, bz244878, bz238726,
  - Resolves: bz239388, bz239327, bz227852, bz245025, bz225588, bz212022


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Fixed bz225206 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz225164 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz227758 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Resolves: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz229027 (luci failover domain forms are missing/empty)
  - Fixed bz230447 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz230452 (Advanced options parameters settings don't do anything)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Fixed bz230457 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz230461 ('enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz230469 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Resolves: bz230461, bz230469, bz228637, bz233326, bz225747


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-27
changelog:
  - Fixed bz214989 (Package download not working for Conga during cluster creation)
  - Fixed bz219522 (Restarting a cluster via luci web gui = UnboundLocalError - local variable 'e' referenced before assignment)
  - Fixed bz201394 (luci doesn't verify ricci's SSL cert against trusted list)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212448 (release blocker: turn off debug mode of server)
  - Fixed bz212445 (release blocker: prevent management page access)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-26
changelog:
  - luci storage: fix bytes->TB conversion
  - Improved bz201394: luci doesn't verify ricci's SSL cert against trusted list (step 1 - backend)
  - Fixed bz217387 (luci - HTML error shows up in display (minor))
  - Fixed bz215031 (Cannot add a resource to a service via luci web app)
  - Fixed bz218040 (luci reports "unknown" as cluster name if cluster creation fails)
  - Fixed bz218941 (Conga/luci - cannot add node to cluster via luci web app)
  - Fixed bz219156 (Errors in performing node-specific tasks due to ricci outage not reflected in luci display)
  - Fixed bz217703 (clustered vg creation fails)
  - Resolves: bz217387, bz215031, bz218040, bz218941, bz219156, bz217703
  - Related: bz201394


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-24
changelog:
  - Fixed bz215039 (Cannot create a new resource via luci web app)
  - Fixed bz215034 (Cannot change daemon properties via luci web app)
  - Fixed bz214790 (Stop/restart cluster not working via luci web app)
  - Fixed bz213690 (luci - Reversed links in colophon (gui - minor))
  - Fixed bz213266 (Conga - modifying a cluster node's cluster membership in a subnet with other clusters results in the wrong cluster.conf)
  - Fixed bz213083 (luci - should display usernames in some logical/sorted order (usability))
  - Fixed bz212601 (luci - selecting cluster name or cluster node name indicates error in install and displays empty form)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212006 (create cluster does not show status as cluster is being created)
  - Fixed bz212584 (luci does not retrieve failed ricci queue elements)
  - Fixed bz212440 (luci persists possibly incorrect name for a system)
  - Improved bz213306 (ricci - log probing can take minutes to complete)
  - Fixed starting/stopping services
  - Fixed deleting cluster
  - Fixed deleting node
  - Fixed redirection for all async->busy wait calls
  - Storage module: properly probe cluster quorum if LVM locking
    is marked as clustered
  - Resolves: bz215039, bz215034, bz214790, bz213690, bz213266
  - Resolves: bz213083, bz212601, bz212021, bz212006, bz212584
  - Resolves: bz212440
  - Related: bz213306


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-21
changelog:
  - 211564: ricci allocates huge memory chunk, causing long swapping
  - 211345: cluster_adapters is missing import of Xenvm module
  - 211191: SELinux issues tracking bug
  - 211370: retrieving log from node fails
  - 211942: Xenvm moniker must be eradicated from UI
  - 211375: unable to reliably create a cluster
  - 211373: reboot node fails from storage tab


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-16
changelog:
  - Enable zope/plone inclusion on RHELs
  - Remove luci's dependency on ricci
  - Many improvements of cluster management interface
  - Add full GFS1/2 support; detect many other filesystems
  - Suppress msgs from init script (bz204235)
  - Upgrade zope to 2.9.4 (track Fedora Core)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Don't auto-start ricci after installation, do it manually
  - Under certain circumstances, default luci password would not get reset
  - Many Luci improvements


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11.7
changelog:
  - Move ricci-modrpm, ricci-modlog, ricci-modstorage, ricci-modservice
    from /usr/sbin to /usr/libexec


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11
changelog:
  - Spin off clustermon.srpm (modcluster, cluster-snmp and
    cluster-cim) from conga.srpm
  - Luci: tighten down security


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#757883)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if xmlrpc-c's struct xmlrpc_curl_xportparms has a gss_delegate field, set
    it to TRUE when we're doing Negotiate auth (#727864, #727863, #727866)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766)
  - when handling "getcert resubmit" requests, if we don't have a key yet,
    make sure we go all the way back to generating one (#694184)
  - getcert: try to clean up tests for NSS and PEM file locations (#699059)
  - don't try to set reconnect-on-exit policy unless we managed to connect
    to the bus (#712500)
  - handle cases where we specify a token but the storage token isn't
    known (#699552)
  - getcert: recognize -i and storage options to narrow down which requests
    the user wants to know about (#698772)
  - output hints when the daemon has startup problems, too (#712075)
  - add flags to specify whether we're bus-activated or not, so that we can
    exit if we have nothing to do after handling a request received over
    the bus if some specified amount of time has passed
  - explicitly disallow non-root access in the D-Bus configuration (#712072)
  - migrate to systemd on releases newer than Fedora 15 or RHEL 6 (#718172)
  - fix a couple of incorrect calls to talloc_asprintf() (#721392)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690892)


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.34-1
changelog:
  - update to 0.34
    - explicitly note the number of requests we're tracking in the output of
      "getcert list" (#681642)
    - try to offer some suggestions when we get certain specific errors back
      in "getcert" (#681641)
    - updated translations
      - es


author: Nalin Dahyabhai <nalin@redhat.com> 0.33-1
changelog:
  - update to 0.33
    - new translations
      - id by Okta Purnama Rahadian!
    - updated translations
      - pl, uk
    - roll up assorted fixes for defects


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-2
changelog:
  - depend on the e2fsprogs libuuid on Fedora and RHEL releases where it's
    not part of util-linux-ng


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - oops, rfc5280 says we shouldn't be populating unique identifiers, so
    make it a configuration option and default the behavior to off


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - explicitly require "dbus" to try to ensure we have a running system bus
    when we get started (#639126)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (#636876)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - update to 0.30
    - fix errors computing the time at the end of an interval that were
      caught by self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - update to 0.29
    - fix 64-bit cleanliness issue using libdbus
    - actually include the full set of tests in tarballs


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - update to 0.28
    - fix self-signing certificate notBefore and notAfter values on 32-bit
      machines


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26
    - when canceling a submission request that's being handled by a helper,
      reap the child process's status after killing it (#624120)


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25
    - new translations
      - in by Okta Purnama Rahadian!
    - fix detection of cases where we can't access a private key in an NSS
      database because we don't have the PIN
    - teach '*getcert start-tracking' about the -p and -P options which the
      '*getcert request' commands already understand (#621670), and also
      the -U, -K, -E, and -D flags
    - double-check that the nicknames of keys we get back from
      PK11_ListPrivKeysInSlot() match the desired nickname before accepting
      them as matches, so that our tests won't all blow up on EL5
    - fix dynamic addition and removal of CAs implemented through helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-4
changelog:
  - init script: ensure that the subsys lock is created whenever we're called to
    "start" when we're already running (even more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - more gracefully handle manual daemon startups and cleaning up of unexpected
    crashes (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-2
changelog:
  - don't create the daemon pidfile until after we've connected to the D-Bus
    (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24
    - keep the lock on the pid file, if we have one, when we fork, and cancel
      daemon startup if we can't gain ownership of the lock (the rest of #596719)
    - make the man pages note which external configuration files we consult when
      submitting requests to certmaster and ipa CAs


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - update to 0.23
    - new translations
      - pl by Piotr Drąg!
    - cancel daemon startup if we can't gain ownership of our well-known
      service name on the DBus (#596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - update to 0.22
    - new translations
      - de by Fabian Affolter!
    - certmaster-submit: don't fall over when we can't find a certmaster.conf
      or a minion.conf (i.e., certmaster isn't installed) (#588932)
    - when reading extension values from certificates, prune out duplicate
      principal names, email addresses, and hostnames


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - update to 0.21
    - getcert/*-getcert: relay the desired CA to the local service, whether
      specified on the command line (in getcert) or as a built-in hard-wired
      default (in *-getcert) (#584983)
    - flesh out the default certmonger.conf so that people can get a feel for
      the expected formatting (Jenny Galipeau)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
    - correctly parse certificate validity periods given in years (spotted by
      Stephen Gallagher)
    - setup for translation
      - es by Héctor Daniel Cabrera!
      - ru by Yulia Poyarkova!
      - uk by Yuri Chornoivan!
    - fix unpreprocessed defaults in certmonger.conf's man page
    - tweak the IPA-specific message that indicates a principal name also needs
      to be specified if we're not using the default subject name (#579542)
    - make the validity period of self-signed certificates into a configuration
      setting and not a piece of the state information we track about the signer
    - init script: exit with status 2 instead of 1 when invoked with an
      unrecognized argument (#584517)


author: Nalin Dahyabhai <nalin@redhat.com> 0.19-1
changelog:
  - update to 0.19
    - correctly initialize NSS databases that need to be using a PIN
    - add certmonger.conf, for customizing notification timings and settings,
      and use of digests other than the previously-hard-coded SHA256, and
      drop those settings from individual requests
    - up the default self-sign validity interval from 30 days to 365 days
    - drop the first default notification interval from 30 days to 28 days
      (these two combined to create a fun always-reissuing loop earlier)
    - record the token which contains the key or certificate when we're
      storing them in an NSS database, and report it
    - improve handling of cases where we're supposed to use a PIN but we
      either don't have one or we have the wrong one
    - teach getcert to accept a PIN file's name or a PIN value when adding
      a new entry
    - update the IPA submission helper to use the new 'request_cert' signature
      that's landing soon
    - more tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - update to 0.18
    - add support for using encrypted storage for keys, using PIN values
      supplied directly or read from files whose names are supplied
    - don't choke on NSS database locations that use the "sql:" or "dbm:"
      prefix


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-2
changelog:
  - make the D-Bus configuration file (noreplace) (#541072)
  - make the %check section and the deps we have just for it conditional on
    the same macro (#541072)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-1
changelog:
  - update to 0.17
    - fix a hang in the daemon (Rob Crittenden)
    - documentation updates
    - fix parsing of submission results from IPA (Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> 0.15-1
changelog:
  - update to 0.15
    - notice that a directory with a trailing '/' is the same location as the
      directory without it
    - fix handling of the pid file when we write one (by actually giving it
      contents)


author: Nalin Dahyabhai <nalin@redhat.com> 0.14-1
changelog:
  - update to 0.14
    - check key and certificate location at add-time to make sure they're
      absolute paths to files or directories, as appropriate
    - IPA: dig into the 'result' item if the named result value we're looking
      for isn't in the result struct


author: Nalin Dahyabhai <nalin@redhat.com> 0.13-1
changelog:
  - update to 0.13
    - change the default so that we default to trying to auto-refresh
      certificates unless told otherwise
    - preemptively enforce limitations on request nicknames so that they
      make valid D-Bus object path components


author: Nalin Dahyabhai <nalin@redhat.com> 0.12-1
changelog:
  - update to 0.12
    - add a crucial bit of error reporting when CAs reject our requests
    - count the number of configured CAs correctly


author: Nalin Dahyabhai <nalin@redhat.com> 0.11-1
changelog:
  - update to 0.11
    - add XML-RPC submission for certmaster and IPA
    - prune entries with duplicate names from the data store


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-1
changelog:
  - update to 0.9
    - run external submission helpers correctly
    - fix signing of signing requests generated for keys stored in files
    - only care about new interface and route notifications from netlink,
      and ignore notifications that don't come from pid 0
    - fix logic for determining expiration status
    - correct the version number in self-signed certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.8-1
changelog:
  - update to 0.8
    - encode windows UPN values in requests correctly
    - watch for netlink routing changes and restart stalled submission requests
    - 'getcert resubmit' can force a regeneration of the CSR and submission


author: Nalin Dahyabhai <nalin@redhat.com> 0.7-1
changelog:
  - update to 0.7
    - first cut at a getting-started document
    - refactor some internal key handling with NSS
    - check for duplicate request nicknames at add-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.6-1
changelog:
  - update to 0.6
    - man pages
    - 'getcert stop-tracking' actually makes the server forget now
    - 'getcert request -e' was redundant, dropped the -e option
    - 'getcert request -i' now sets the request nickname
    - 'getcert start-tracking -i' now sets the request nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.5-1
changelog:
  - update to 0.5
    - packaging fixes
    - add a selfsign-getcert client
    - self-signed certs now get basic constraints and their own serial numbers
    - accept id-ms-kp-sc-logon as a named EKU value in a request


author: Deepak Bhole <dbhole@redhat.com> - 0.9.94-0.9
changelog:
  - Fixed release
  - Removed maven build support
  - Removed javadoc sub-package as it needed maven
  - Removed demo subpackage -- it was never built
  - Fixed defattr
  - Removed pre-built jar in prep section


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib that crept in with multilib


author: Matthias Saou <http://freshrpms.net> 15.28.2.8-1
changelog:
  - Update to 15.28.2.8.
  - Keep both 2.14.4 (iwlwifi-3945.ucode) and 2.14.1.5 (iwlwifi-3945-1.ucode) as
    the new 15.28.2.8 is now iwlwifi-3945-2.ucode.


author: Matthias Saou <http://freshrpms.net> 2.14.4-1
changelog:
  - Rename package from iwlwifi-firmware to iwlwifi-3945-firmware.
  - Add provides and obsoletes.
  - Fix description to reference the right LICENSE file name.
  - Change from using dos2unix to chmod/sed/touch, preserve timestamps on docs.


author: Matthias Saou <http://freshrpms.net> 2.14.3-1
changelog:
  - Update to 2.14.3 (upstream name change iwlwifi-ucode -> iwlwifi-3945-ucode).
  - Remove the ".iwlwifi-3945-ucode" suffix from included LICENSE and README.
  - Use dos2unix on the LICENSE and the README to fix end of line encoding.
  - Switch from using ExclusiveArch hack to ExcludeArch hack for Koji build.


author: Matthias Saou <http://freshrpms.net> 2.14.1-3
changelog:
  - Change group and license fields to reflect latest firmware guidelines.
  - Replace "microcode" with "firmware" in summary and description.


author: Troy Dawson <dawson@fnal.gov> - 228.57.2.21-6
changelog:
  - Update to 228.57.2.21
  - Added older firmwares as well, it now has iwlwifi-4965-2.ucode
    iwlwifi-4965-1.ucode, and iwlwifi-4965.ucode
  - Added the README's to go along with the older firmwares


author: Radek Novacek <rnovacek@redhat.com> 0.5-4
changelog:
  - Make password for ESX not mandatory
  - Assume using https protocol when not given on ESX
  - Resolves: rhbz#772612, rhbz#772379


author: Radek Novacek <rnovacek@redhat.com> 0.5-3
changelog:
  - Fix logging exceptions
  - Fix using undefined variable
  - Don't report Domain-0 as guest
  - Resolves: rhbz#768112, rhbz#769170


author: Radek Novacek <rnovacek@redhat.com> 0.5-1
changelog:
  - Upstream version 0.5
  - vSphere support
  - Don't print logs to stderr when not in debug mode
  - Add workaround for xen for adding guests
  - Fix exporting variables from /etc/sysconfig in initscript
  - Resolves: rhbz#759631, rhbz#765728, rhbz#761569, rhbz#756380


author: Radek Novacek <rnovacek@redhat.com> 0.4-1
changelog:
  - Upstream version 0.4
  - Make main loop more robust
  - Workaround for removing machines using xen
  - Add vdsm mode
  - Resolves: rhbz#756380, rhbz#757974, rhbz#754330


author: Radek Novacek <rnovacek@redhat.com> 0.3-3
changelog:
  - Use updateConsumer API instead of updateConsumerFact (fixes limit 255 chars of uuid list)
  - Requires python-rhsm >= 0.96.13
  - Resolves: rhbz#749514


author: Pat Riehecky <riehecky@fnal.gov> 1.2-1.SL
changelog:
  - added PRERUN and POSTRUN from SL6
  - added /etc/yum.d/yum.cron.updateexec for configuring PRERUN and POSTRUN


author: Troy Dawson <dawson@fnal.gov> 1-1.SL
changelog:
  - Split off from yum-conf
  - Changed yum.cron so that when it builds the temporary yum.conf, all
    it is doing is just adding the excludes to the original yum.conf


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update to latest in EPEL5
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Related: rhbz#675232


author: David Sommerseth <davids@redhat.com> - 0.4-1
changelog:
  - David Sommerseth is now taking over the maintenance of python-ethtool
  - New URLs for upstream source code
  - Added new API: ethtool.get_interfaces_info() - returns list of etherinfo objects
  - Added support retrieving for IPv6 address, using etherinfo::get_ipv6_addresses()


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.3-1
changelog:
  - Add get_flags method from the first python-ethtool contributor, yay
  - Add pifconfig command, that mimics the ifconfig tool using the
    bindings available


author: William Poteat <wpoteat@redhat.com> 0.98.9-1
changelog:
  - 768983: When consuming a future subscription, the repos --list should be
    empty. (wpoteat@redhat.com)
  - 720360: Write *-key.pem files out with 0600 permissions. (awood@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.7-1
changelog:
  - 766895: Added hypervisorCheckIn call to allow sending a mapping of host/guest ids for
    creation/update. (mstead@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.6-1
changelog:
  * Tue Dec 06 2011 William Poteat <wpoteat@redhat.com> 0.98.5-1
  - 
  +- 754366: workaround a bug in httpslib.ProxyHttpsConnection
  +  (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.3-1
changelog:
  - 752854: Fixing error in iniparser around unpacking of a dictionary for
    default values. (awood@redhat.com)
  - 708362: remove entitlement keys on delete as well (alikins@redhat.com)
  - 734114: registering with --org="foo bar" throws a NetworkException instead of
    a RestlibException (awood@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.2-1
changelog:
  - 749853: backport new python-rhsm API calls present in 6.2 for 5.8
    (cduryee@redhat.com)
  - rev python-rhsm version to match sub-mgr (cduryee@redhat.com)
  - point master to rhel5 builder (cduryee@redhat.com)
  - fix python syntax for older versions (jbowes@redhat.com)
  - Fix yum repo location for EL6. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.97.1-1
changelog:
  - 746241: UEPConnection.updateConsumer now passes empty list in POST request
    (mstead@redhat.com)
  - 737935: overcome 255 char limit in uuid list (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.12-1
changelog:
  - Add makefile and targets for coverage and "stylish" checks
    (alikins@redhat.com)
  - Add tests for config parsing (cduryee@redhat.com)
  - 736166: move certs from subscription-manager to python-rhsm
    (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.11-1
changelog:
  - add future date bind (jesusr@redhat.com)
  - 735226: allow Keys to validate themselves (bkearney@redhat.com)
  - Add getVirtOnly() (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.10-1
changelog:
  - Submit a Content-Length when body of request is empty. (dgoodwin@redhat.com)
  - Support installed products when registering. (dgoodwin@redhat.com)
  - Add ability to update a consumer's installed products list.
    (dgoodwin@redhat.com)
  - Support for new bind method (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.9-1
changelog:
  - self.sanitize, and add support for quote_plus. (cduryee@redhat.com)
  - Enhance the insecure mode to not do peer checks. (bkearney@redhat.com)
  - Wrap urllib.quote in a helper method to cast int to str as needed.
    (cduryee@redhat.com)
  - 728266: Unsubscribe from subscription manager GUI is broken
    (cduryee@redhat.com)
  - Remove quantity for bind by product. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.8-1
changelog:
  - 719378: Encode whitespace in urls (bkearney@redhat.com)
  - Change package profile upload url. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.7-1
changelog:
  - Logging cleanup. (dgoodwin@redhat.com)
  - Remove unused add_ssl_certs method. (dgoodwin@redhat.com)
  - Load supported resources when UEPConnection is instantiated.
    (dgoodwin@redhat.com)
  - Send package profile. (dgoodwin@redhat.com)
  - Allow testing if package profiles equal one another. (dgoodwin@redhat.com)
  - Support creating package profile from a file descriptor.
    (dgoodwin@redhat.com)
  - Allow the attributes to be None for username and password in consumer
    selction. (bkearney@redhat.com)
  - Add a Package object. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.6-1
changelog:
  - Add support for new Katello error responses. (dgoodwin@redhat.com)
  - Log the response when there's an issue parsing error JSON.
    (dgoodwin@redhat.com)
  - Add support for registration to Katello environments. (dgoodwin@redhat.com)
  - Don't send an http body if we don't have one. (jbowes@redhat.com)
  - Add call to list environments. (dgoodwin@redhat.com)
  - Do not load CA certs if in insecure mode. (dgoodwin@redhat.com)
  - Cache supported resources after establishing connection.
    (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.96.5-1
changelog:
  - Fix backward compatability with old use of getPoolsList.
    (dgoodwin@redhat.com)
  - Remove one built in type issue. (bkearney@redhat.com)
  - Removed unused Bundle class (alikins@redhat.com)
  - quantity for subscription (wottop@dhcp231-152.rdu.redhat.com)
  - Add the activation key call, and remove subscription tokens
    (bkearney@redhat.com)
  - Improve the doco, referencing the candlepin site. (bkearney@redhat.com)
  - Improve the defualt values for the config (bkearney@redhat.com)
  - Fix bug with owner specification during registration. (dgoodwin@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.96.4-1
changelog:
  - Adding profile module and updating spec (pkilambi@redhat.com)
  - Added stacking Id to the certificate (wottop@dhcp231-152.rdu.redhat.com)
  - Changed call to CP for owner list (wottop@dhcp231-152.rdu.redhat.com)
  - added getOwners function for use with 'list --owners'
    (wottop@dhcp231-152.rdu.redhat.com)
  - change (wottop@dhcp231-152.rdu.redhat.com)
  - Added the owner entered in the cli to the post for register
    (wottop@dhcp231-152.rdu.redhat.com)
  - altered pool query to use both owner and consumer
    (wottop@dhcp231-152.rdu.redhat.com)
  - Added getOwner(consumerid) function (wottop@dhcp231-152.rdu.redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.3-1
changelog:
  - 700601: Don't set the Accept-Language if we don't have a valid locale
    (alikins@redhat.com)
  - 692210: remove a non critical warning message that is spamming the logs
    (alikins@redhat.com)
  - 691788: Fix bad check for missing order info. (dgoodwin@redhat.com)
  - Add a version of get_datetime from M2Crypto since it isnt avail on RHEL 5.7
    (alikins@redhat.com)
  - Use older strptime call format (cduryee@redhat.com)
  - 683550: fix parsing empty cert extensions (jbowes@redhat.com)
  - Add support for content tagging. (dgoodwin@redhat.com)
  - Use tlsv1 instead of sslv3, for fips compliance (cduryee@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - Add new extensions to order (jbowes@redhat.com)
  - remove shebang from certificate.py for rpmlint (jbowes@redhat.com)
  - Adding activateMachine to connection api. (jharris@redhat.com)
  - 668814: break out 404 and 500s into a different error (cduryee@redhat.com)
  - Initialized to use tito. (jbowes@redhat.com)
  - bump version (jbowes@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.12-1
changelog:
  - Related: #668006
  - Remove a missed translation. (dgoodwin@redhat.com)
  - Fix logger warning messages. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.10-1
changelog:
  - Related: #661863
  - Add certificate parsing library. (dgoodwin@redhat.com)
  - Fix build on F12/RHEL5 and earlier. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.2-1
changelog:
  - Remove I18N code. (dgoodwin@redhat.com)
  - Spec cleanup. (dgoodwin@redhat.com)
  - Cleaning out unused log parsing functions (jharris@redhat.com)
  - More tolerant with no rhsm.conf in place. (dgoodwin@redhat.com)
  - Switch to python-iniparse. (alikins@redhat.com)


author: Kyle VanderBeek <kylev@kylev.com> - 2.0.9-1
changelog:
  - Update to 2.0.9
  - Make sure to require gcc to the speedups get compiled
  - Fix description since we're not "pure" python
  - Change to pypi instead of cheesehop


author: jortel <jortel@redhat.com> - 0.4-1
changelog:
  - Fix spelling errors in spec description.
  - Fix source0 URL warning.
  - Updated caching to not cache intermediate wsdls.
  - Added DocumentCache which caches verified XML documents as text. User can choose.
  - Added cachingpolicy option to allow user to specify whether to cache XML documents or the WSDL object.
  - Provided for repeating values in reply for message parts consistent with way handled in nested objects.
  - Added charset=utf-8 to stock content-type http header.
  - Added <?xml version="1.0" encoding="UTF-8"?> to outgoing SOAP messages.
  - Detection of faults in successful (http=200) replies and raise WebFault. Search for <soapenv:Fault/>.
  - Add plugins facility. 
  - Fixed Tickets: #251, #313, #314, #334


author: jortel <jortel@redhat.com> - 0.3.9-1
changelog:
  - Bumped python requires to 2.4
  - Replaced stream-based caching in the transport package with document-based caching.
  - Caches pickled Document objects instead of XML text. 2x Faster!
  - No more SAX parsing exceptions on damaged or incomplete cached files. 
  - Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
  - Copy of soap encoding schema packaged with suds.
  - Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
  - Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token. 
  - Fixed Tickets: #256, #291, #294, #295, #296


author: jortel <jortel@redhat.com> - 0.3.8-1
changelog:
  - Includeds Windows NTLM Transport.
  - Add missing self.messages in Client.clone().
  - Changed default behavior for WSDL PartElement to be optional.
  - Add support for services/ports defined without <address/> element in WSDL.
  - Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
  - Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
  - Add null class to pass explicit NULL values for parameters and optional elements.
  - Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
    Arrays passed as python arrays - works like document/literal now.
    No more using the factory to create the Array.
    Automatically includes arrayType attribute.  Eg: soap-enc:arrayType="Array[2]".
    Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
  - Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.


author: jortel <jortel@redhat.com> - 0.3.7-1
changelog:
  - Better soap header support
  - Added new transport HttpAuthenticated for active (not passive) basic authentication.
  - New options (prefixes, timeout, retxml)
  - WSDL processing enhancements.
  - Expanded builtin XSD type support.
  - Fixed <xs:iniclude/>
  - Better XML date/datetime conversion.
  - Client.clone() method added for lightweight copy of client object.
  - XSD processing fixes/enhancements.
  - Better <simpleType/> by <xs:restriction/> support.
  - Performance enhancements. 
  - Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258


author: jortel <jortel@redhat.com> - 0.3.6-1
changelog:
  - Change hard coded /tmp/suds to tempfile.gettempdir() and create suds/ on demand.
  - Fix return type for Any.get_attribute().
  - Update http caching to ignore file:// urls.
  - Better logging of messages when only the reply is injected.
  - Fix XInteger and XFloat types to translate returned arrays properly.
  - Fix xs:import schema with same namespace.
  - Update parser to not load external references and add Import.bind() for XMLSchema.xsd location.
  - Add schema doctor - used to patch XSDs at runtime.  (See Options.doctor)
  - Fix deprecation warnings in python 2.6.
  - Add behavior for @default defined on <element/>.
  - Change @xsi:type value to always be qualified for doc/literal.
  - Add Option.xstq option to control when @xsi:type is qualified.
  - Fixed Tickets: #64, #129, #205, #206, #217, #221, #222, #224, #225, #228, #229, #230


author: jortel <jortel@redhat.com> - 0.3.5-1
changelog:
  - Adds http caching.  Default is (1) day.
  - Removed checking fc version in spec since no longer building < fc9.
  - Updated makefile to roll tarball with tar.sh.
  - Moved bare/wrapped determination to wsdl for document/literal.
  - Refactored Transport to provide better visibility into http headers.
  - Fixed Tickets: #207, #207, #209, #210, #212, #214, #215


author: jortel <jortel@redhat.com> - 0.3.4-1
changelog:
  - Static (automatic) Import.bind('http://schemas.xmlsoap.org/soap/encoding/')
  - Basic ws-security with {{{UsernameToken}}} and clear-text password only.
  - Add support for ''sparse'' soap headers via passing dictionary
  - Add support for arbitrary user defined soap headers
  - Fixes service operations with multiple soap header entries.
  - Schema loading and dereferencing algorithm enhancements.
  - Nested soap multirefs fixed.
  - Better (true) support for elementFormDefault="unqualified" provides more accurate namespaing.
  - WSDL part types no longer default to WSDL targetNamespace.
  - Fixed Tickets: #4, #6, #21, #32, #62, #66, #71, #72, #114, #155, #201.


author: jortel <jortel@redhat.com> - 0.3.3-1
changelog:
  - No longer installs (tests) package.
  - Implements API-3 proposal
      Pluggable transport
      Keyword method arguments
      Baisc http authentication in default transport
  - Add namespace prefix normalization in soap message.
  - Better soap message pruning of empty nodes.
  - Fixed Tickets: #51 - #60.


author: jortel <jortel@redhat.com> - 0.3.2-1
changelog:
  - Add SOAP MultiRef support
  - Add support for new schema tags:
      <xs:include/>
      <xs:simpleContent/>
      <xs:group/>
      <xs:attributeGroup/>
  - Added support for new xs <--> python type conversions:
      xs:int
      xs:long
      xs:float
      xs:double
  - Revise marshaller and binding to further sharpen the namespacing of nodes produced.
  - Infinite recursion fixed in ''xsd'' package dereference() during schema loading.
  - Add support for <wsdl:import/> of schema files into the wsdl root <definitions/>.
  - Fix double encoding of (&)
  - Add Client API:
      setheaders()  - Same as keyword but works for all invocations.
      addprefix()   - Mapping of namespace prefixes.
      setlocation() - Override the location in the wsdl.
      setproxy()    - Same as proxy keyword but for all invocations.
  - Add proper namespace prefix for soap headers.
  - Fixed Tickets: #5, #12, #34, #37, #40, #44, #45, #46, #48, #49, #50, #51


author: jortel <jortel@redhat.com> - 0.3.1-1
changelog:
  - Extends the support for multi-port services introduced earlier. This addition, 
    provides for multiple services to define the *same* method and suds will
    handle it properly.  See section 'SERVICES WITH MULTIPLE PORTS:'
  - Add support for multi-document document/literal soap binding style.
    See section 'MULTI-DOCUMENT Docuemnt/Literal:'
  - Add support for (xs:group, xs:attributeGroup) tags.
  - Add Client.last_sent() and Client.last_received().


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-4
changelog:
  - Fix requires not to depend on /usr/lib* libraries
  - Build with libtermcap-devel instead of ncurses-devel


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-3
changelog:
  - Fix status of pipelined/backquoted/list of commands
    Resolves: #638955
  - Don't allow illegal variable names to be set
    Resolves: #436901
  - Minor manpage fixes
    Resolves: #437079, #437080, #436439, #433908


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-1
changelog:
  - Import new package tcsh617, based on tcsh-6.17-12.el6
  - Link to libtermcap instead of libtinfo
  - Ship Copyright file
  - Remove extra fork when tcsh processes backquotes
    Resolves: #688170
  - Don't print history in verbose mode (upstream patch)
    Resolves: #688173
  - Don't set $REMOTEHOST on the local machine
    Resolves: #688175
  - Fix negative number of jobs with %j formatting parameter in prompt
  - Fix testsuite
  - Fix tcsh obeys printexitvalue for back-ticks
  - Ship README file
  - Fix tcsh globbing causing bad automount
  - Add new colorls variable


author: Richard W.M. Jones <rjones@redhat.com> - 1.11-2
changelog:
  - New upstream version 1.11 + patch to fix detection of IA64 Xen HVM guests.
    resolves: rhbz#707508


author: Richard W.M. Jones <rjones@redhat.com> - 1.9-1.3
changelog:
  - Import upstream version from Fedora Rawhide.
  - Fix dependencies for RHEL 5.
  - Ignore test errors caused by Python being broken.


author: Milan Zazrivec <mzazrivec@redhat.com> 0.5.4-22.el5_7.2
changelog:
  - Resolves: #736058 - re-allow rhn_check to run successfully without any
    command line arguments
  - Resolves: #736060 - re-allow pirut to see repositories provided by RHN
  - Don't attempt to re-register a registered system from package updater


author: Michael Mraka <michael.mraka@redhat.com> 0.5.4-22.el5_7.1
changelog:
  - Related: #732427 - fixed persistdir definition
  - Resolves: #732427 - reverted and reimplemented init_hook -> prereposetup_hook
    change


author: Miroslav Suchy <msuchy@redhat.com> 0.5.4-22.el5_7
changelog:
  - Related: #707241 - create progressbar even during groupinstall and do not
    delete rhnplugin.repos during groupinstall command


author: Miroslav Suchy <msuchy@redhat.com> 0.5.4-20.el5_7
changelog:
  - Resolves: #675220 - re-enable yum-rhn-plugin after package upgrade if
  the system is already registered


author: Miroslav Suchy <msuchy@redhat.com> 0.5.4-19.el5_7
changelog:
  - Resolves: #614138 - do not send info to rhnParent about removing packages if
    plugin is enabled, but machine is not registred - i.e. getSystemId()
  - Related: #614138 - moved communication with satellite server from init_hook
    to prereposetup_hook
  - Resolves: #667135 - don't report empty transactions as a successful action


author: Miroslav Suchy <msuchy@redhat.com> 0.5.4-18.el5_7
changelog:
  - Related: #675220 - specify RHN as "RHN Satellite or RHN Classic"
  - Related: #666534 - respect metadata_expire setting from yum config


author: Pradeep Kilambi <pkilambi@redhat.com> - 0.5.3-26.el5_7
changelog:
  - Resolves: #431082 #436043 #436804 #441265 #448012 #448044 #449726
  - Resolves: #450241 #453690 #455759 #455760 #456540 #457191  #462499


author: Pradeep Kilambi <pkilambi@redhat.com> - 0.5.3-3
changelog:
  - Resolves: #222327, #226151, #245013, #248385, #251915, #324141 
  - Resolves: #331001, #332011, #378911


author: James Bowes <jbowes@redhat.com> - 0.1.8-1
changelog:
  - Require a version of rhn-client-tools that doesn't provide up2date.
  - package the translation files.


author: Jan Pazdziora 2.5.22-5
changelog:
  - Resolves: #583020 - need to initialize self.send_handler for the class Server as well.
  - Resolves: #583980 - replace fcntl.O_NDELAY with os.O_NDELAY, for newer Pythons.


author: Miroslav Suchý <msuchy@redhat.com> 2.5.22-4
changelog:
  - Resolves: #618250 - encode latin-1 characters to unicode and 
    do not allow control characters in xmlrpc communication


author: Miroslav Suchý <msuchy@redhat.com> 2.5.15-1
changelog:
  - aamt is not Null in most cases, move it more to right
  - replace len() with ==
  - count length of buffer only once in loop


author: jesus m. rodriguez <jesusr@redhat.com> 2.5.12-1
changelog:
  - merging additional spec changes and minor edits from svn (pkilambi@redhat.com)
  - 499860 Ability to define location for the temporary transport file
    descriptors, uses /tmp by default (pkilambi@redhat.com)
  - use tempfile to create transport objects instead of an ugly loop (pkilambi@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 2.5.11-1
changelog:
  - fixing the rpc version checks (pkilambi@redhat.com)
  - 492638, 489921, 484245 - Adding redirect support to rhnlib for rhel-5 clients
    (pkilambi@redhat.com)


author: Mihai Ibanescu <misa@redhat.com> 2.0-1
changelog:
  - Fixed #165481 (setting socket timeouts causes uncaught SSL exceptions)
  - Fixed #143833 (memory leak in SSL, caused by the cert verification callback)
  - Finally incorporated patch from bug #135660 (basic HTTP authentication)


author: Mihai Ibanescu <misa@redhat.com> 1.8-6
changelog:
  - Fixed #128008 (internal _httplib, used with python 1.5.2, missed a
    HTTPResponse._read_chunked)
  - Fixed a typo


author: Mihai Ibanescu <misa@redhat.com> 1.8-4
changelog:
  - The previous fix in SSL.read uncovered a nastier bug in httplib:
    http://python.org/sf/988120
    Fixed it in our HTTPResponse subclass


author: Mihai Ibanescu <misa@redhat.com> 1.8-3
changelog:
  - Fixed bug in SSL.SSLSocket.read() (blocking when less data is in a pipe that
    has not closed yet).


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed bug #84803 (use OP_DONT_INSERT_EMPTY_FRAGMENTS to avoid breaking
    non-standard SSL implementations)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Use load_verify_locations instead of the SSL store functions, bug with
    multiple certs in the same file


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed #69518 (up2date seems to never properly reauthenticate after a auth
     timeout)
  - Fixed the typo introduced when fixing the above bug :-)
  - Completely deprecating rhnHTTPlib: swallowed reportError


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed some proxy-related bugs.
  - Fixed #68911 (and some other bugs that were related to this one).


author: Troy Dawson <dawson@fnal.gov> 51-0.1.rolling.SL
changelog:
  - Changed the repos from 50 to 5rolling
  - Changed the default from ftp to http, with ftp as the fallback


author: Troy Dawson <dawson@fnal.gov> 50-1.SL
changelog:
  - Change repositories from 5rolling to 50
  - Added sl-fastbugs, sl-bugfix-51, sl-contrib, sl-debuginfo, sl-srpms repositories


