changelog

pwdutils是一套密码管理工具

2003-10-29  Thorsten Kukuk  <[e-mail]>

	* src/groupmod.8: New manual page.

2003-10-21  Thorsten Kukuk  <[e-mail]>

	* lib/group.h: Add fields for new name and gid to group_t.

	* src/groupmod.c: Initial version.

2003-10-19  Thorsten Kukuk  <[e-mail]>

	* src/usermod.c: Initial version.

	* lib/group.c: Reset errno if errno == ERANGE was returned.
	* lib/user.c: Likewise.

2003-10-18  Thorsten Kukuk  <[e-mail]>

	* src/tst-long-group-entry: Add new test.
	* src/tst-32bit-uid-gid: New test.
	* src/tst-userdel: New test.

	* src/useradd.c: Fix lseek calls.

2003-10-15  Thorsten Kukuk  <[e-mail]>

	* release version 2.3.96

	* src/chfn.c (chfn_main): Add SELinux support.
	* src/chsh.c (chsh_main): Likewise.

	* lib/selinux_utils.c (set_default_context): New.
	(restore_default_context): New.

	* src/vipw.c (edit): Set default security context before
	creating new file.
	* lib/user.c (write_user_data): Likewise.
	* lib/group.c (write_group_data): Likewise.

	* src/passwd.1: Document usage of PAM modules.

2003-10-14  Thorsten Kukuk  <[e-mail]>

	* src/passwd.c (passwd_main): Add SELinux support.
	* lib/selinux_utils.c: New.

	* lib/public.h (copy_xattr,selinux_check_access): Add prototypes.

	* lib/copy_xattr.c: New, function copying extended attributes.

	* src/vipw.c (edit): Copy extended attributes.
	* lib/group.c (write_group_data): Likewise.
	* lib/user.c (write_user_data): Likewise.
	* lib/copy_dir_rec.c (copy_dir_rec): Likewise.
	* src/useradd.c (write_defaults): Likewise.

2003-10-14  Andreas Schwab  <[e-mail]>

	* lib/passwd_nisplus.c: Fix alignment warnings.
	* lib/read-files-group.c: Likewise.

2003-10-12  Thorsten Kukuk  <[e-mail]>

	* release version 2.3.95

	* src/Makefile.am (man_MANS): Add vipw.8, vigr.8.

	* src/vipw.8: New file.
	* src/vigr.8: New file.
	* src/chsh.1: Fix format.
	* src/chfn.1: Fix format.

2003-10-09  Thorsten Kukuk  <[e-mail]>

	* src/groupadd.c: Fix -g handling.

	* src/vipw.c: New.

	* src/tst-groupadd: New, tests for groupadd.

	* src/Makefile.am: Add vipw.

	* lib/user.c (lock_database): Move from here ...
	* lib/lock_database.c: ... to here.
	* lib/Makefile.am: Add lock_database.

2003-10-08  Thorsten Kukuk  <[e-mail]>

	* release version 2.3.94

	* src/groupadd.8: New.

2003-10-07  Thorsten Kukuk  <[e-mail]>

	* src/groupdel.8: New.

	* src/userdel.8: Fix typo.

	* lib/group.c (write_group_data): Implement deletion of a group.

	* src/groupdel.c: New.

	* src/useradd.c: Fix format of ouput.

	* src/groupadd.c: New.

	* src/Makefile.am: Add groupadd.

2003-09-04  Thorsten Kukuk  <[e-mail]>

	* src/userdel.c (main): Flush nscd cache if account is removed.

	* src/chsh.c (chsh_main): Don't ask root for password on local accounts.
	* src/chfn.c (chfn_main): Likewise.

2003-08-29  Thorsten Kukuk  <[e-mail]>

	* src/useradd.8: Mention special handling of GROUPS in
	for system account.

2003-07-27  Thorsten Kukuk  <[e-mail]>

	* src/userdel.8: New manual page.

	* src/useradd.8: Add FILES section.

	* src/useradd.c (find_free_uid): Use SYSTEM_UID_MIN and
	SYSTEM_UID_MAX.

	* etc/login.defs: Add SYSTEM_UID_* and SYSTEM_GID_*

2003-07-25  Thorsten Kukuk  <[e-mail]>

	* src/useradd.8: New manual page
	* src/Makefile.am (man_MANS): add useradd.8 manual page.

	* src/userdel.c (main): Make -u shortcut for --usage.

2003-07-24  Thorsten Kukuk  <[e-mail]>

	* release 2.3.93

	* src/useradd.c: Allow -D option for binddn parameter.

	* src/userdel.c: Add --service option.

2003-07-23  Thorsten Kukuk  <[e-mail]>

	* src/useradd.c (main): Add support for creating LDAP accounts.

	* src/userdel.c (remove_from_secondary_groups): Fix typo
	in error message.
	(main): Lock local password file only, if we don't delete LDAP
	user.

	* lib/libldap.c (ldap_find_user_baseou): New function.
	(ldap_find_group_baseou): Likewise.
	(ldap_create_user): Creata a user in a LDAP database.

	* lib/libldap.h: Add ldap_find_user_baseou and
	ldap_find_group_baseou prototypes.

2003-07-21  Thorsten Kukuk  <[e-mail]>

	* src/userdel.c (remove_from_secondary_groups): fix query
	for ldap DN and password.
	* src/useradd.c (main): Likewise.

	* lib/group.c (write_group_data): Print error message, if
	LDAP operations fail.

	* lib/libldap.h (convert_user_to_dn): Add prototype.

	* lib/libldap.c (convert_to_dn): change bind data only if
	bind is not NULL.

	* src/chage.c: Don't include all ldap headers.
	* src/chpasswd.c: Likewise.

2003-07-20  Thorsten Kukuk  <[e-mail]>

	* lib/libldap.c: Implement deleting of user and group objects.
	* lib/libldap.h: Add prototypes for new functions.

	* src/userdel.c: Implement deleting of LDAP accounts.

2003-07-18  Thorsten Kukuk  <[e-mail]>

	* release version 2.3.92

	* etc/userdel-pre.local: New, called from userdel.
	* etc/userdel-post.local: New, called from userdel.

	* etc/login.defs: Add USERDEL_PRECMD and USERDEL_POSTCMD.

	* src/userdel.c: New, for userdel implementation.

	* src/chage.c (main): Use write_user_data.
	* src/useradd.c (main): Likewise.
	* src/chfn.c (chfn_main): Likewise.
	* src/chsh.c (chsh_main): Likewise.
	* src/passwd.c (passwd_main): Likewise.
	* src/chpasswd.c (main): Likewise.

	* lib/public.h (write_user_data): Renamed from do_setpwnam.

	* lib/user.c (do_setpwnam): Use new variable todo instead of
	new_user, implement deleting of accounts, rename to write_user_data.

	* lib/public.h (user_t): Add todo flag (modify, add, delete).

	* etc/login.defs: Add USERDEL_PRECMD and USERDEL_POSTCMD.

	* lib/libldap.c: Add LDAP_SET_REBIND_PROC_ARGS again.

2003-07-17  Thorsten Kukuk  <[e-mail]>

	* lib/is_logged_in.c: New, check if user is logged in.
	* lib/public.h (is_logged_in): Add prototype.

	* release version 2.3.91

	* src/rpasswd.c (main): Fix memory leak.

	* src/Makefile.am (install-exec-hook): Only change permissions
	of usr/bin binaries if we install as root. Reported by
	Arkadiusz Miskiewicz <[e-mail]>

	* src/chage.c (main): Close LDAP session.
	* lib/user.c (do_setpwnam): Likewise.
	* src/chpasswd.c (main): Likewise.

	* lib/libldap.c (close_ldap_session): New function.
	* lib/libldap.h (close_ldap_session): Add prototype.

	* lib/group.c: Include libldap.h instead of ldapfcn.h.
	* src/chage.c: Likewise.
	* src/chpasswd.c: Likewise.

	* lib/user.c (do_setpwnam): Use new ldaplib functions.

2003-07-16  Thorsten Kukuk  <[e-mail]>

	* lib/libldap.c: New, rewrite of ldapfcn to match our needs.
	* lib/libldap.h: New.
	* lib/ldapfcn.c: Replaced by libldap.c
	* lib/ldapfcn.h: Replaced by libldap.h
	* lib/Makefile.am: Replace ldapfcn with libldap.

	* lib/ldapfcn.c (ldap_authentication): Fix authentication with
	extra supplied binddn.

	* src/useradd.c (main): More error checking.

	* src/chpasswd.c (main): Call ldap_authentication.
	* src/chage.c (main): Likewise.

	* src/chfn.c (get_fields): Allow the user to abort with Ctrl-C.
	* src/chsh.c (chsh_main): Likewise.

	* lib/ldapfcn.h (ldap_authentication): Adjust prototype.

	* src/useradd.c (main): Call write_group_data with "is_locked" set.

	* lib/group.c (write_group_data): Add new parameter "is_locked".
	* lib/group.h (write_group_data): Adjust protype.

2003-07-15  Thorsten Kukuk  <[e-mail]>

	* etc/default/useradd: New, default options for useradd

	* lib/group.c (find_group_data): Allow searching for gid, too.

	* src/useradd.c (main): Fix check if group was found.
	(convert_grpopt_to_name): Search in correct service for group.

2003-07-14  Thorsten Kukuk  <[e-mail]>

	* lib/user.c (do_setpwnam): Implement changing of LDAP password.

	* lib/chpasswd.c: Enable LDAP support.

	* Release version 2.3.90

	* lib/remove_dir_rec.c (remove_dir_rec): New, remove directory tree.

	* lib/public.h (remove_dir_rec): Add prototype.

	* lib/copy_dir_rec.c (copy_dir_rec): New, copy directory recursive.
	* lib/public.h (copy_dir_rec): Add prototype.

	* src/chfn.1: Describe util-linux compatible options.

2003-07-11  Thorsten Kukuk  <[e-mail]>

	* lib/authentication.c (do_authentication): Don't dereference
	pw_data if it is NULL.

	* etc/useradd.pamd: New, pam config file for useradd.

	* src/useradd.c: Implement modifying of useradd defaults.

	* src/rpasswdd.c: Use rpasswd as name for PAM config file.
	* src/rpasswdd.8: Likewise.

	* etc/chage.pamd: New, pam config file for useradd.
	* etc/rpasswd.pamd: New, pam config file for rpasswd.

	* etc/init.d: New directory, move *.init scripts here.
	* etc/pam.d: New, move *.pamd config files here.

2003-07-10  Thorsten Kukuk  <[e-mail]>

	* src/useradd.c (main): Call shell script after creating account.

	* lib/call_script.c: New, call shell script.

	* lib/public.h (call_script): Add prototype.

	* lib/read-files-group.c: New, read entries from group files

	* etc/useradd.local: New, can be called by useradd
	* etc/userdel.local: New, can be called by userdel
	* etc/login.defs: Add new variables

2003-07-09  Thorsten Kukuk  <[e-mail]>

	* lib/group.c: New, for modifying group entries.
	* lib/group.h: New, contains prototypes.

2003-07-07  Thorsten Kukuk  <[e-mail]>

	* lib/read-files.h: Add files_getpwuid_r and files_getpwent_r.
	* lib/read-files.c: Implement this functions.

2003-07-06  Thorsten Kukuk  <[e-mail]>

	* src/passwd.c (passwd_main): Add -P option for not password
	changing mode.

2003-07-05  Thorsten Kukuk  <[e-mail]>

	* lib/user.c (do_setpwnam): Fix off-by-one error.
	* src/tst-chage: New, test for chage.
	* src/tst-passwd: New, tests for passwd.

2003-07-04  Thorsten Kukuk  <[e-mail]>

	* lib/user.c: Move do_authentication from here...
	* lib/authentication.c: ...to here.

	* lib/Makefile.am: Replace getdef.[ch] with logindefs.[ch].
	* lib/logindefs.c: New file for reading /etc/login.defs.
	* lib/logindefs.h: New file.
	* lib/getdef.c: Removed.
	* lib/getdef.h: Removed.
	* src/chfn.c: Use new getlogindefs functions.
	* src/chsh.c: Likewise.
	* src/passwd.c: Likewise.
	* src/useradd.c: Likewise.
	* src/rpasswdd.c: Likewise.

	* src/chfn.c: Make util-linux chfn options default, not shadow.

2003-07-03  Thorsten Kukuk  <[e-mail]>

	* lib/user.c (do_setpwnam): Add new account from
	pw/sp data to passwd/shadow file if new_user is set.

	* lib/public.h: Add new field "new_user" to user_t.

	* lib/user.c (lock_database): Wrapper for lckpwdf().

2003-07-02  Thorsten Kukuk  <[e-mail]>

	* Moved error_codes.h, ldapfcn.c, nsw.c, read-files.c,
	yppasswd_xdr.c, get_value.c, ldapfcn.h, nsw.h, read-files.h,
	getdef.c, nispasswd.h, passwd_nisplus.c, user.c, getdef.h,
	nscd.c, public.h, yppasswd.h to lib directory

	* lib/Makefile.am: New

	* src/Makefile.am: Link against new libpwdutils.a

	* src/chfn.c (chfn_main): Use new do_authentication/
	get_old_clear_password combo.
	* src/chsh.c (chsh_main): Likewise.

	* src/public.h (get_old_clear_password): Added prototype.
	(do_authentication): Adjust prototype.

	* src/user.c (do_authentication): Move special chfn/chsh hack
	to chfn.c/chsh.c, don't ask for old password in clear text.
	(get_old_clear_password): Ask for old password in clear text.

	* src/chage.c (main): Call get_old_clear_password() to make
	sure we have the old password in clear text.

2003-07-02  Thorsten Kukuk  <[e-mail]>

	* release version 2.3

	* configure.in: Move crypt header/function check before LDAP
	checks.
	* src/rpasswd.c (main): Fix setting/loading of SSL cert path.
	* src/chpasswd.c: Disable LDAP support.

	* src/ldapfcn.h: Protect with USE_LDAP.
	* src/chage.c: Make LDAP support compile option.

	* src/rpasswd.conf.5: Document reqcert option.

2003-07-01  Thorsten Kukuk  <[e-mail]>

	* src/rpasswd.c (load_config): Implement reqcert option.
	(main): Make certificate checking depending on reqcert value.

2003-06-20  Thorsten Kukuk  <[e-mail]>

	* src/chpasswd.c (main): Implement -c option, add preliminary
	LDAP support.

	* src/chpasswd.8: New.
	* src/Makefile.am (man_MANS): Add chpasswd.8

2003-06-17  Thorsten Kukuk  <[e-mail]>

	* src/rpasswd.c (main): Check server certificate and warn user
	if necessary.

	* src/rpasswdd.c (main): Initialise SSL before backgrouding.

	* src/read-files.c (parse_pwent): Don't inline.
	(parse_spent): Likewise.

	* src/rpasswd.c (main): Use SSLv23_client_method.

2003-04-07  Thorsten Kukuk  <[e-mail]>

	* src/ldapfcn.c: Export ldap_get_lderrno if needed
	* src/ldapfcn.h: Add prototype for ldap_get_lderrno if needed

2003-03-15  Thorsten Kukuk  <[e-mail]>

	* src/chage.c (print_help): Add help for -P.
	* src/chage.1: Add description for -D.

	* src/chpasswd.c: New file.

	* src/expiry.c (main): Drop all privilegs.

	* src/chage.c (main): Mark all output for translation.