# changelog

author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.4.0-05]
  - use esmith::lockfile for lockfile stuff
  - add dependency on e-smith-lib >= 1.7.0-20 for esmith::lockfile


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.4.0-03]
  - Changed default network backup filename to "smeserver.tgz"
  - Note: We can still restore the old format "esmithsg.bak" files


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-05]
  - Default to .tgz for desktop backup/restore/verify
  - Allow uuencoded tar (esmithsg.bak) for restore/verify backwards compatability


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Avoid use of redundant temporary file, CGI.pm already creates one for us,
    and provides us with a file handle.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-09]
  - Add conf-backup to bootstrap-console-save.
  - Don't need templates-user-custom directory now, it's in e-smith-base RPM.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.2.0-04]
  - Zero pad minutes for backup and reminder times.
  - Fix nasty problem stopping flexbackup running in the background.
    Needed to dup STDOUT, close STDOUT, and reset STDOUT to duped fd.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.2.0-03]
  - Changed size calculations so that minimum size displayed is 1Mb.
  - Changed wording of size of snapshot.
  - Notify user how much free space exists in /tmp.
  - Remove uploaded file after restore.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-16]
  - /sbin/e-smith/backup zeroes tape before starting. This is a hack to
    work around talking to ide tapes via ide-scsi.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-13]
  - removed unnecessary /sbin/e-smith/tape-restore template
  - fixed html formatting problem in backup panel
  - fixed backgrounding problem in backup panel - need to close STDOUT in child
  - format fixes in backup panel


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-11]
  - Changed fork and signal handling again - doesn't seem to make much
    difference. Could be the lock file interaction - needs testing.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-10]
  - Fixed order of files to be restored
  - Moved signal handling but it makes no difference, still can't background


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-09]
  - /sbin/e-smith/backup now dumps mysql tables to /home/e-smith prior
    to running the tape backup


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-08]
  - fixed uninitialised variables
  - reboot action calls backgroundCommand instead of showing new panel


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-06]
  - flexbackup is merely the default backup program
  - cron job calls /sbin/e-smith/backup which is a templated file
  - restore-tape action now given to flexbackup as it is flexbackup specific


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-05]
  - Removed checks for uptime. The state in /etc/e-smith/restore is not
    changed, regardless of reboots. It is changed by bootstrap-console.
  - Lots of text changes for consistency and to reinforce the need to
    reboot after a restore
  - Mail is sent to the admin user after a tape restore indicating
    success or failure.
  - mysql tables are dumped to /home/e-smith prior to network backup.
  - Calculation of tarsize handles negative values sensibly.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-04]
  - No longer checks for current state of EthernetDrive1 and LocalIP.
  - Does not do a forced reboot under any circumstances.
  - Calls post-upgrade after the restore instead of post-restore.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-03]
  - Major changes to panel. Now does tape restore in background. Lots of
    checks and balances to avoid concurrent restores/backups etc.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [0.1-2] through [0.1-3]
  - completed the update section for configuration database
    of flexbackup
  - prepared the restore-tape option for the call to the
    proper event for restoring from tape


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-35
changelog:
  - [Back-port from 4.17.0-19]
  - And mark admin_raidreport as only available for local mail [SME: 2139]


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-34
changelog:
  - [Back-port from 4.17.0-17, 4.17.0-18]
  - Send raidmonitor output to admin_raidreport pseudonym [SME: 2139]
  - And mark admin_raidreport as non-Removable [SME: 2139]


author: Shad L. Lords <slords@mail.com>
changelog:
  - Disable raid based on /proc/partitions (which is dynamic) instead 
    of grub/device.map (which is static)


author: Shad L. Lords <slords@mail.com>
changelog:
  - Create partitions in order of size.  This makes sure boot is first and
    / is last.  Also last partitions fills all available space making resizing
    easier.


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-23
changelog:
  - Allow for admin account when locking null passwords, and perform
    check in post-upgrade so that the password screen will be presented
    after the reboot [SME: 1529]


author: Charlie Brady <charlie_brady@mitel.com> 4.16.0-20
changelog:
  - Change ssl.crt template so that cert is regenerated if issuer information
    has changed. [SME: 1484]


author: Charlie Brady <charlie_brady@mitel.com> 4.16.0-18
changelog:
  - Fix syntax error introduced in last change (and reuse $rc and $choice in
    raidManage.pl). [SME: 1285,1300]


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-17
changelog:
  - Force masq service to enabled for servergateway modes, but
    leave at current setting for serveronly. Revises -09 change [SME: 1209]


author: Charlie Brady <charlie_brady@mitel.com> 4.16.0-15
changelog:
  - Ensure that rmmod-bonding doesn't return error status if
    bonding is not enabled (e.g. during upgrade) [SME: 935]


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-09
changelog:
  - Enable the masq service to ensure that installs and upgrades
    are consistent. If someone really wants to disable it, they can 
    add a force fragment [SME: 1209]


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-02
changelog:
  - Rename anaconda logs, but leave a symlink. Do nothing if the log
    is already a symlink or missing [SME: 808]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-20
changelog:
  - Ensure that each user has a Shell property in post-upgrade. 
    If they didn't have one before, set it to the current value in
    /etc/passwd. [SME: 859]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-19
changelog:
  - Copy anaconda logs instead of renaming them in post-upgrade [SME: 808]
  - Adjust timestamp of copied logs to logfiles2timestamp format [SME: 808]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-14
changelog:
  - Display a message for single disk installs which catches that
    case and tells people that they can add a second disk and produce
    a mirrored pair [SME: 958]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-13
changelog:
  - Display a nicer message when a spare disk is available to be
    added to the pair [SME: 964]
  - Blank line for consistency with other messages [SME: 964]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-12
changelog:
  - Check whether a resync is in progress so we don't state that
    intervention is required when it is not [SME: 958]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-11
changelog:
  - Check whether destination drive of add_mirror is already part
    of a RAID device. If so, complain and exit [SME: 870]
  - Also ensure that /sbin is in the PATH


author: Mark Knox <mark_knox@mitel.com> 4.15.9-09
changelog:
  - Added NIC Bonding options screen in console [SME: 935]
  - Migrate old NICBondingOptions to new defaults, and added new default
    options [SME: 935]
  - rmmod bonding.ko in bootstrap-console-save so new options work
    without extra reboot [SME: 935]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.9-02
changelog:
  - Add requires for mdadm. We use it in the console and raid monitor
    and it won't get installed for 5.x upgrades [SME: 767]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-58
changelog:
  - Add /root/upgrade.log and /root/upgrade.log.syslog to 
    logfiles2timestamp in post-upgrade event so we preserve 
    them across multiple upgrades [SME: 808]


author: Gavin Weight <gweight@gmail.com> 4.15.8-57
changelog:
  - Added Reconfigure and Reboot option in console, changed
    main console menu to reflect Reconfigure option [SME: 2]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-55
changelog:
  - Adjust console title bar to 'SME Server' [SME: 726]
  - Change title on "Choose administrator password" screens


author: Charlie Brady <charlie_brady@mitel.com> 4.15.8-52
changelog:
  - Start bootstrap-console earlier - in particular before raidmonitor.
    Don't try to restart 'random'. [SME: 743]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-44
changelog:
  - Change logic for determining RAID partitions in use [SME: 516]
  - Add detailed output of the RAID state to messages log [SME: 516]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-43
changelog:
  - Only say that a RAID device is clean if truly clean [SME: 516]
  - Adjusted warning to say 'may be required' instead of 'is'


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-42
changelog:
  - Delete 'deny bootp' fragment from dhcpd.conf, reverting to
    default, which is to allow bootp. [SME: 660]


author: Charlie Brady <charlie_brady@mitel.com> 4.15.8-35
changelog:
  - Fix flip of access settings to default on first post-upgrade (e.g.
    sshd from public to private). [SME: 495]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-26
changelog:
  - Allow dot and underscore in account names [SME: 24]
  - Default maxAcctNameLength and maxGroupNameLength to 31 [SME: 24]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-16
changelog:
  - Removed accounts db default for 'common'
  - Added accounts db defaults for server-common and server-resources [SME: 77]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.8-06
changelog:
  - Initial cut at console menu item to (re)add RAID-1 mirror [SME: 253]
  - Needs to move to /sbin/e-smith/console-menu-items, once I work out
    what I believe is a taint issue.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.8-02]
  - Re-import head to CVS.
  - Regenerate both key and cert when cert expires, not just crt. [SF: 1365965]


author: Mark Knox <mark_knox@mitel.com>
changelog:
  - [4.15.7-01]
  - Imported to ClearCase
  - Changed console sort order from ASCII to numeric [MN00107120]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.6-09]
  - Add -f option to add_mirror to allow use of disks with existing
    partition tables [MN00101667]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.6-08]
  - Add reconfiguration reboot option to reboot panel [SF: 1349946]
  - TODO: Cleanup so that the red warning header doesn't display since
    the reboot is going to happen anyway


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.6-06]
  - Change DISABLED -> OFF in init script messages, and go back to standard
    alignment. [SF: 1264702, 134543]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.6-04]
  - Replace grub setup commands in add_mirror with an exec of an external
    script. This script will be provided by a bootloader specific package,
    e.g. e-smith-lilo or e-smith-grub. That package should include a
    "Provides: e-smith-bootloader" header, to satisfy a Requires in this
    package. [SF: 1335937]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.6-03]
  - Unload network drivers immediately after rc.sysinit runs, so that
    we can control the order of allocation of eth0 and eth1. [SF: 1332366]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.6-02]
  - Disable raid monitor if /boot/grub/device.map suggests that the system
    is a single disk system. [SF: 1269091]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-50]
  - Move user-create-unix action before template expansions, so
    that getpwnam can be used in template fragments. Ditto
    for group-create-unix. [SF. 1322231]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.4-48]
  - Revised translation of groups panel, reordered to match
    the English lexicon - Thanks Didier Rambeau [SF: 1305184]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.4-45]
  - Added Italian for Please wait - we should do this through gettext
    or similar [SF: 1309288]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.4-44]
  - Reword Master DNS Server screen as "Corporated DNS Server", in
    line with domains panel [gordonr MN00096914]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.4-41]
  - Added "de" to pleasewait ugliness case statement and
    sorted the list alphabetically [SF: 1293325]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-39]
  - Add preliminary support for ethernet bonding on local interface.
  - Modify user-modify-unix so that usermod is not called to change
    shell or GCOS field unless they need to change.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-38]
  - Update filelist entries for databases which have moved
    from /home/e-smith to /home/e-smith/db [SF: 1216546]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [4.15.4-37]
  - Create /mnt/floppy symlink if required in post-{install,upgrade}.
    [MN00095821]
  - Haldaemon race conditions seem quite recalcitrant, so don't try to create
    /mnt/cdrom symlink. [SF: 1260322]
  - Disable CTRL-C in console [tonyc SF: 1264697]
  - Catch CTRL-C in console during Test Internet [tonyc SF: 1264697]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-33]
  - Fix race condition in /mnt/cdrom symlink creation, by creating
    symlink from haldaemon action. [SF: 1260322]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-30]
  - Correctly handle multiple net specification in ValidFrom for httpd-admin.
    [SF: 1273756]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-27]
  - Modify /sbin/e-smith/service so that it runs /sbin/service unless
    runlevel is 7. [SF: 1237968]
  - Only prefix /sbin/e-smith to PATH if user is root. [SF: 1250579]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-24]
  - Update %ghost filelist entries for databases which have moved
    from /home/e-smith to /home/e-smith/db [SF: 1216546]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-22]
  - Add Requires: whiptail so that the out fork of whiptail from the
    newt package is installed on upgrade.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-21]
  - Add Requires: headers for all the additional standard daemons, to
    ensure they are installed on upgrade.


author: Shad Lords <slords@mail.com>
changelog:
  - [4.15.4-20]
  - Change httpd-admin access from local to localhost [SF: 1246986]
  - Change console to use 980 instead of https to avoid warnings [SF: 1246182]
  - tie console to new httpd-admin{TCPPort} property. [SF: 1246986]


author: Shad Lords <slords@email.com>
changelog:
  - [4.15.4-19]
  - Add TCPPort and access for httpd-admin [SF: 1246986]
  - Fix UnsavedChanges in console [SF: 1245238]


author: Shad Lords <slords@mail.com>
changelog:
  - [4.15.4-16]
  - Upgrade database APIs to latest standard.
  - Move databases from /home/e-smith to /home/e-smith/db [SF: 1216546]


author: Shad Lords <slords@mail.com>
changelog:
  - [4.15.4-15]
  - Use https to access server-manager from console, to avoid redirect
    problems. [SF: 1246182]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-13]
  - Remove checking against 32 group limit from UI. Thanks to Gordon Rowell
    for the main patch. [SF: 1245421]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-12]
  - Patches from Shad Lords.
  - Complete fix of user password validation started in 4.15.3-06.
    [SF: 1242098]
  - Change default password strength to "strong". [SF: 1246178]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-11]
  - Patches submitted by Gordon Rowell.
  - Change /etc/modules.conf templates to /etc/modprobe.conf
    and add templates.metadata/etc/modprobe.conf [SF: 1227251]
  - Remove fragments 10appletalk and 95ModulePaths, since they are
    for very old migrations of /etc/modules.conf


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-08]
  - Add messagebus and haldaemon services, so that cdrom mount point
    etc is created as required. [SF: 1225899]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.4-02]
  - Remove "random" service startup symlink - no longer required, as
    prng is seeded by rc.sysinit.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.3-07]
  - Move httpd-admin logging from inside /var/log/httpd to /var/log/httpd-admin.
  - Remove mouseconfig hack. [MN00057145]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.3-03]
  - Remove smbpasswd references from chap-secrets file. Don't re-expand
    chap-secrets file during various user related events. [SF: 1215401]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.3-02]
  - Break up template for /etc/shells into fragments, and add
    /usr/bin/rssh. [SF: 1220145]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-03]
  - Add safe_touch() and templates2events() functions to support use
    of the generic_template_expand action. [MN00064130]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.12.0-02]
  - Updated file list to handle /etc/rc.d/init.d/supervise and it's files.
    [msoulier 10648]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-12]
  - Enhance genfilelist to take command line options to extend its internal
    databases. Add /usr/lib/perl5/site_perl (and its components) to list
    of ignored directories. Reformat ignoredirs list to make it easier to extend.
    Strip trailing spaces from spec for dirs and files, and add it to the output
    print statements (so that we don't need a trailing space for every extra spec.
    [charlieb 7719]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.10.1-02]
  - Added /usr/lib/perl5/site_perl/esmith/FormMagick/Panel/ to the fileperms
    hash to set the panel libs to 0644 permissions. [msoulier 5516]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.2-01]
  - Added validate-lexicon which exits non-zero if the lexicon
    doesn't parse properly [gordonr 3155]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-06]
  - Add specs for /var/lock/fetchmail and /etc/diald/scripts/*.
  - Add execute permission for /etc/cron.d/* fragments
  - Add spec for /home/e-smith/files/netlogon/netlogon.bat, for when we
    need it.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-05]
  - Made /home/e-smith/files/samba/profiles 02750,admin,shared to allow
    users to search that directory when accessing their profile subdirectory


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-04]
  - Make /etc/e-smith/events/actions/create-machine-account 06554,root,root
    to allow "admin" to create machine accounts through Samba


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-03]
  - Explicitly list printer driver and profiles directories
  - Returned /home/e-smith/files/samba to default ownership by root


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-02]
  - Made /home/e-smith/files/samba 02755,admin,admin to allow admin write
    access to the printer drivers share


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-02]
  - Include /var/named, plus lots of other directories which are from the
    filesystem RPM.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Configure a list of directories to omit from RPMs - e.g., RedHat supplied
    directories.A
  - Fix permissions/ownership of ~admin and ~admin/home
  - Add space between %attr() and directory name


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-05]
  - Fix up misplaced defattr, so that files are root owned, unless stated
    otherwise (rather than by the developer building the package).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-02]
  - Mark netlogon.bat as a noreplace config file.
  - Add some horde config files rules, and rule for /root/.ssh
    directory
  - Add e-smith Maildir rules
  - Give admin ownership of admin home directory


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-3]
  - Remove "other" execute permission for console and action scripts
  - Add execute permission rule for /sbin/e-smith/dynamic-dns/*.
  - Add permission rules for /etc/cron.d/* and /etc/profile.d/* files


author: Adrian Chung <mac@e-smith.com>
changelog:
  - Moved %defattr below to under files section.
  - Changed genfilelist for new web permissions.
  - Changed genfilelist for new permissions on some other
    files.


author: Charlie Brady <charlieb@e-smith.net>
changelog:
  - Fix another stupid ordering problem - can't get ordered searching of 
    hash. We only need to key by file and containing directory anyway.


author: Charlie Brady <charlie_brady@mitel.com> 1.0.0-02
changelog:
  - Don't use NameServer property from networks database if it would
    cause feedback loop. [SME: 1343]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.1-05]
  - Add default name server delegation for domains without a Nameservers property.
    [SF: 1339875]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.1-03]
  - Expand templates and restart dnscache.forwarder in dns-update and console-save
    events. Expand templates in bootstrap-console-save rather than
    post-{install,upgrade} events. [SF: 1290325]
  - Add support for Forwarder2 property in template for root/servers/@ of
    dnscache.forwarder service.


author: Gordon Rowell <gordonr@gormand.com.au>
changelog:
  - [0.5.1-02]
  - Configure DNS servers for domains, depending on Nameservers
    property:
    - localhost: 127.0.0.1
    - corporate: dnscache{Forwarder}, dnscache{Forwarder2}
    - internet:  <nothing>
    - Comma separated list of IPs : To those listed servers
  - Add dns-update event and reconfigure dnscache there
  - Call initialise-default-databases in dns-update to cater for
    domain db migration which might be required due to modification
    of the Corporate DNS Servers
  - Migrate db and reconfigure dnscache in domain-modify as well, 
    since we might have changed nameservers.


author: Shad Lords <slords@email.com>
changelog:
  - [0.5.0-23]
  - Add TCPPort/UDPPort/access properties to dnscache [SF: 1246986]
  - Add COPYING file to distribution


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-22]
  - Only delegate domains if SystemPrimaryDomain or if NameServer
    property is defined. [SF: 1233662]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-21]
  - Add dnscache log file analysis script
    (from http://www.hungry.com/~fn/dnscache-log.pl.txt).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-20]
  - Update ICANN root hint name server address list
    (s/128.9.0.107/192.228.79.201/). The 128.9.0.107 address will continue
    answering queries until Jan, 2006.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-16]
  - Really fix creation of root/ip/127 access list file (i.e. put it
    in the correct place).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-13]
  - Adding missing execute permission on new run scripts.
  - Fix errors in config template for forwarding dnscache.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-10]
  - Add second dnscache instance which does all Internet queries.
    We run the first instance with a small cache, which we
    can happily lose whenever we might have changed any delegations.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-09]
  - Fix bug in delegation of local networks with NameServer
    property.
  - Fix bug in access list configuration.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-08]
  - Avoid chdir in run script.
  - Allow delegation to an alternative listen address for tinydns.
  - Avoid unnecessary delegation for 127.in-addr.arpa.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-05]
  - Use perl run script which does all env setup, access control and zone
    delegation without any templates.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-04]
  - Fix delegation of reverse lookup of local network. [MN00062867]
  - Use generic_template_expand and adjust-services actions in place of
    dnscache-conf. Update e-smith-lib dependency. [MN00064130, MN00065576]
  - Update genfilelist call and move to install section.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-02]
  - Remove any left-behind env/FORWARDONLY file in post scriptlet, so we can
    later simplify config. [charlieb MN00045628]
  - Don't attempt to configure dnscache in post-install and post-upgrade.
    [MN00065717]
  - Only delegate reverse name lookup when we know of a suitable
    name server. [MN00062867]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.3.0-02]
  - Updated to handle FORWARDONLY env var properly, to prevent unwanted requests
    for recursion. [msoulier MN00045628]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-20]
  - Restart dnscache except after configuration is complete, except for
    certain events (when dnscache will not be running). [gordonr 6762]
  - If forwarder is enabled, don't delegate any lookups to local tinydns.
    [charlieb 9032]
  - Change Forwarder1 property to Forwarder. Do migration of legacy values here -
    previously done in fragment in e-smith-base RPM.  [charlieb 9032]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-19]
  - Add "down" file so that dnscache does not start until rc7.d script
    runs. [charlieb 8745]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.8-17]
  - Add template for servers/@ and handle DNS forwarders [gordonr 8179]
  - Modify template for env/FORWARDONLY to handle DNS forwarders [gordonr 8179]
  - Restart dnscache in console-save in case we just changed forwarding
    policy [gordonr 8179]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-14]
  - Add/delete dnscache delegations for off-site domains/networks if we
    know about them. [charlieb 7845]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-12]
  - Add default db fragments, so dnscache is enabled by default.
    Updated e-smithlib dependency. [charlieb 7632]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-11]
  - Replace Copyright header in spec file with "License: GPL". [charlieb]
  - Add /etc/resolv.conf template nameserver fragment. Corresponding
    fragment must be removed from e-smith-base. [charlieb 4058].
  - Remove debugging print from dnscache-conf. [charlieb 4058]
  - Add 127.in-addr.arpa file - it is constant. [charlieb 4058]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.8-07]
  - Delegate domain-remote entries to the server defined in the
    Server property of that record.
  - Don't delegate remote subnets to the local nameserver - just
    skip them for now [gordonr 4058]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.8-06]
  - Wrong bug number last time
  - Standardised log/run script with mailfront/qmail/etc. [gordonr 4058]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.8-04]
  - Call dnscache-conf in post-{install,upgrade} - we need this running
    from the start, even if we need to change details after the bootstrap
    console [gordonr 6365]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.8-03]
  - Add missing pipe in genfilelist call so sticky bit preserverved
    on /var/service/dnscache [gordonr 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.8-02]
  - Add sticky bit to dnscache service directory, so that svscan starts logging.
  - Create /service symlink, so that supervise of dnscache is started by svscan.
    [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.7-02]
  - Added root/servers/@ file - we will need to update this some time, as the
    list recently changed.
  - Rewrote conf-dnscache to use new DB access classes. Renamed to dnscache-conf.
  - Add conf-dnscache links to domain-create and domain-delete events.
  - Use links for acl files and delegation files.
  - Add code to do local domain delegation (to tinydns).
  - We currently do lame delegation for local networks reverse lookup. We
    need to fix this, but currently can't do any better - we don't know any
    name servers for those reverse domains.
  - Add sticky bit to dnscache service directory
  - Hide output of "id" in %pre script.
    [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.4-01]
  - Use correct esmith::utils function names for netmask manip stuff
  - Remove trailing dot from network prefixes before creating access
    allow files


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.3-01]
  - Allow dnscache/dnslog users to already exist in %pre script
  - Remove bogus -g args from useradd commands
  - Update conf-dnscache action script to set up permission to
    query dnscache
  - Require supervise-scripts


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.2-01]
  - Create dnscache and dnslog users
  - Fix path error in conf-dnscache
  - Create /var/log/dnscache directory with correct ownership


author: Gordon Rowell <gordonr@gormand.com.au> 1.3.3-05
changelog:
  - Remove empty pre and post scriptlets. In some cases they cause
    package upgrade failures. [SME: 544]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.3-02]
  - Use a single validator for domain names and complain if the
    validation fails. Previously hyphens passed the panel validator
    but failed on add (or delete).
  - TODO: Strengthen the regexp [SF: 1352880]


author: Gordon Rowell <gordonr@gormand.com.au>
changelog:
  - [1.3.1-02]
  - Rewrite with CGI::FormMagick and HTML::Tabulate
  - Added corporate DNS settings with page to change them
  - Update to HTML::Tabulate 0.23 so that the remove link goes
    away when we don't want it - Thanks to Gavin Carr for the 
    immediate patch turnaround.
  - Only add "Corporate DNS Servers" to picklist if configured
  - Migrate all domains in domains db, defaulting system domain to
    'localhost', and others to 'internet'
  - Remove table border, and change stripe colour to match other buttons
  - Add calls to signal-event for create/modify/delete
  - TODO: Insert name of domain to be deleted on remove page
  - Signal the dns-update event when DNS configuration is changed
  - Migrate the Nameserver property to the Nameservers


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-01]
  - Roll new development stream prior to adding support for delegation to
    Corporate Nameservers.


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.1.0-02]
  - Removed reserved 'secure.domain' name as it is no longer a special
    case [markk 8989]


author: Ivana Varekova <varekova@redhat.com> 1.3.3-16.rhel4
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Ivana Varekova <varekova@redhat.com> 1.3.3-15.rhel4
changelog:
  - fix bug 156269 - CAN-2005-1228 directory traversal bug
   (using the patch from Ulf Harnhammar) (patch9)
  - fix bug 155746 - CAN-2005-0988 Race condition in gzip (patch8)


author: Jeff Johnson <jbj@redhat.com> 1.3.3-9
changelog:
  - enlarge window buffer to avoid accessing beyond end-of-buffer (#78413,#83095).
  - re-enable rsync ready patch.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.3.0-16
changelog:
  - replace tempfile patches with improved ones solar@openwall.com
  - Add less to the dependency chain - zless needs it


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed buzilla bug #26680. Wrong skip value after mktemp patch and forced
    overwrite for output file during decompression.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add HAVE_LSTAT define, to avoid it doing weird things to symlinks
    instead of ignoring them as the docs say it should (#22045)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Build system handles stripping
  - Don't do thing the system does, like creating directories
  - use --bindir /bin
  - Added URL
  - skip unnecesarry sed step
  - Include THANKS, AUTHORS, ChangeLog, TODO


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - adopt patch from Paul Eggert to fix detection of the improper tables in
    inflate.c(huft_build)
  - the latest released version 1.2.4a, which provides documentation updates
    only. But it lets us use small revision numbers again
  - add an dirinfo entry for gzip.info so we can get rid of the ugly --entry
    args to install-info


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added /usr/bin/gzip and /usr/bin/gunzip symlinks as some programs are too
    brain dead to figure out they should be at least trying to use $PATH
  - added BuildRoot


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.6-8
changelog:
  - incorporate patch from Werner to fix use of stack variable after it goes
    out of scope (CVE-2006-6235, #218480)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - back down to 1.2.6 for now
  - build assembly modules using CC instead of AS, so that flags such as -DPIC
    will be seen by the preprocessor
  - build assembly modules with -Wa,--noexecstack


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-4
changelog:
  - add patch from Werner Koch to error out on ambiguous armored signatures in
    message, with some more bits from Klaus Singvogel to handle argument parsing,
    backported (CVE-2006-0049, #184556)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-3
changelog:
  - add backport of patch from Werner Koch to fix the exit status when verifying
    signatures when no signature is provided (CVE-2006-0455, #183484)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-2
changelog:
  - incorporate patch from gnupg-announce which removes the ability to create
    ElGamal encrypt+sign keys or to sign messages with such keys


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.1-3
changelog:
  - modify g10defs to look for helpers in libexecdir, because that's where they
    get installed, per gnupg-users
  - actually drop updates for 1.0.7 which are no longer needed for 1.2.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.0-1
changelog:
  - update to 1.2.0
  - stop stripping files manually, let the buildroot policies handle it
  - add translations updates ca and fr


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.7-4
changelog:
  - add and install info pages (#67931)
  - don't include two copies of the faq, add new doc files (#67931)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.6-3
changelog:
  - set message output encoding to match the message encoding, based on a
    patch by goeran@uddeborg.pp.se (#49182)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a security patch for a problem with detached signature verification...
    might hold off for an impending 1.0.5, though


author: Charlie Brady <charlie_brady@mitel.com> 4.16.0-04
changelog:
  - In smtp-auth-proxy.pl, don't relay client's HELO/EHLO, as some servers
    (wrongly) reject more than 1. [SME: 103]


author: Gordon Rowell <gordonr@gormand.com.au> 4.16.0-03
changelog:
  - Detect dangling pseudonyms to avoid white screen of death [SME: 1054]
  - See also [SME: 762] for tools to tell you how to fix them


author: Gavin Weight <gweight@gmail.com> 4.15.4-19
changelog:
  - Add migrate fragment to get and delete "authentication" and 
    move to correct "Authentication". [SME: 894]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.4-07
changelog:
  - Made sectionbar its own item so that it is in the right place
    when the sections are hidden [SME: 561]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.4-06
changelog:
  - Hide webmail sections if imp isn't installed
  - Hide Spam filtering sections if spamassassin isn't installed
  - Hide Virus scan sections if clamav isn't installed [SME: 561]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.4-05
changelog:
  - Don't check whether the user exists when creating user@domain
    pseudonyms - i.e. allow support@dom.ain even if support itself
    hasn't been defined. Of course, dom.ain must exist. [SME: 368]


author: Gordon Rowell <gordonr@gormand.com.au> 4.15.4-04
changelog:
  - Don't attempt to recreate first.last and first_last pseudonyms
    in bootstrap-console-save. We create them when we create the user,
    and if someone deletes them, that's their choice. [SME: 387]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.15.2-41]
  - Change French translation of "Weekend" to the more
    universally acceptable "samedi et dimanche" [SF: 1293855]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-35]
  - Add requires header for Authen::SASL module, needed by SMTP auth
    proxy. [SF: 1269111]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-34]
  - Lexicon updates. Still need more French and Spanish translation
    done. [SF: 1280024]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-33]
  - Add UI toggles for private/public IMAP/IMAPS/POP/POPS. Thanks for
    patch go to Michael Weinberger! [SF: 1280024]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-32]
  - Handle upstream disconnect in smtp-auth-proxy. Use more concise
    proxy code, courtesy of the Perl Cookbook. [SF: 1269414]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-31]
  - Improve error reporting in smtp-auth-proxy - return 421 status, and
    log config errors and upstream connect errors to stderr. [SF: 1257015]


author: Shad Lords <slords@mail.com>
changelog:
  - [4.15.2-28]
  - Remove last qmail stuff [SF: 1255261]
  - Break out pop3 into its own package [SF: 1256055]
  - Rename popd service to pop3 [SF: 1256055]
  - Include imap database stuff [SF: 1256055]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-27]
  - Remove "Obsoletes: e-smith-qmail", and split out all qmail specific stuff.
    [SF: 1255261]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-25]
  - Complete the update to current db access APIs - a few esmith::db and
    esmith::config calls were found hiding.  [SF: 1216546, 1242331]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-23]
  - Fix pop* run scripts to find checkpassword binary via
    PATH search.  [SF: 1239720]
  - Various further muttrc configuration changes (from Shad) [SF: 1235454]
    . Fix braces
    . Configure "folder" to use IMAP as well, so we see all IMAP
      folders
    . use URLs instead of PINE style folder names, and use imaps directly


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-22]
  - Configure /etc/Muttrc to use IMAP
  - And expand /etc/Muttrc at same times as /etc/pine.conf
    Patch contributed by Gordon Rowell. [SF: 1235454]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-21]
  - French L10N Merci - Didier. [ SF:1227389 ] 
  - Add some missing Requires: headers. [SF: 1217914]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-19]
  - Four PIF file patterns (AHhUYXgg,AMlIbDk5Lm,AMkgICAg,AHhIYW5k) and
    one more EXE file pattern (TVoAACoAG) - Thanks Hans-Cees Speel


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-17]
  - Disable all mailpatterns by default [Gordon SF:1202391]
  - Change mailpatterns database back to one pattern per entry [Gordon SF:1202391]
  - Add two new EXE file patterns - Thanks Ray Mitchell


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-16]
  - Make sure that there are empty templates-default files in the
    peers/{o,local} templates directory. Fix up a couple of problems
    in the pop3s run script. [SF: 1206471]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-15]
  - Change db lookup of spamassassin{sortspam} to spamassassin{SortSpam}.
    Expand all users' .qmail files in email-update action. [SF: 1202402]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-14]
  - [Patch from Gordon's e-smith-email-4.15.2-13gr02]
  - Add missing qmail initscript links [SF:1201092]
  - Modify email-update-user to expand ~/.qmail-junkmail
  - Add templates for ~/.qmail-junkmail
  - This should probably be in e-smith-spamassassin, but that
    would mean another perl invocation for that template


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-13]
  - Big set of patches from Gordon Rowell.
  - Show public pop/public imap/http webmail/smtp auth if they
    are already enabled in that way. Otherwise, only show disabled
    and the pop3s/imaps/https webmail/ssmtp auth version
  - Change emailsettings.pm to store most properties in the virtual
    smtpd and ssmtpd records
  - Change URL in webmail text to https://
  - Various lexicon changes for consistency across the panel
  - Use $db->set_prop(thing,prop,value) instead of 
    $db->get(thing)->set_prop(prop,value)
  - TODO: The fetchmail settings could easily be done in a loop
  - Don't delete DelegateMailServer when empty, just clear the value
  - Changed Patterns property to PatternsScan to match VirusScan
  - Added lots of defaults for smtpd and ssmtpd:
      smtpd{access}: public
      smtpd{Authentication}: disabled
      smtpd{Instances}: 40
      smtpd{InstancesPerIP}: 5
      smtpd{PatternsScan}: disabled
      smtpd{Proxy}: enabled
      smtpd{status}: enabled
      smtpd{TCPPort}: 25
      smtpd{type}: service
      smtpd{VirusScan}: enabled

      ssmtpd{access}: public
      ssmtpd{Authentication}: enabled
      ssmtpd{Instances}: 10
      ssmtpd{status}: enabled
      ssmtpd{TCPPort}: 465
      ssmtpd{type}: service
  - Fix up masq fragment to look at smtpd{Proxy}
  - Add migrate frament for smtpfront-qmail properties
  - Move mailpatterns defaults to this package
  - Delete duplicate Requires: line
  - Fix check for smtpd{Authentication} when displaying options


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-11]
  - [All items in this change contributed by Gordon Rowell.]
  - Allow separation of mail for bob@domain1 from bob@domain2
  - To configure, enter pseudonyms of the form pseudo@domain => user 
    with the following restrictions:
      - pseudo must be a user already configured on the server
      - domain must be a domain alredy configured on the server
      - pseudo may not equal user (since that's the default for all domains)
  - Merged in the web interface from Shad Lords' e-smith-spamassassin
    onto the E-mail filtering sub-page
  - TODO: We should probably disallow this if only one domain is hosted
    on the server.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-10]
  - [All items in this change contributed by Gordon Rowell.]
  - Add e-mail filtering page
  - Prepare for migration to qpsmtpd by using $SMTPD and $SSMTPD 
    throughout the panel code
  - Changed Requires: from e-smith-mailfront to e-smith-smtpd (which
    is provided by e-smith-qpsmtpd and could be by e-smith-mailfront).
  - Add skeleton virus and spam scan toggles. Note that these set
    options in the $SMTPD services and each virus or spam scanner can
    use those as defaults and add additional options as required. For
    example, if $SMTPD{VirusScan} == 'disabled', no virus scanners should
    configure themselves to look at the mail.
  - Make patterns status depend on any being selected, which removes a
    redundant toggle


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-06]
  - [Patch from Gordon]
  - Complete L10N of front page of emailsettings
  - Move many panel option hashes into subroutines for re-use on status page
  - Move executable content blocking section from subroutine to FM XML
  - Open AccountsDB read-only since that's all we need
  - Actually fix the evil and unsafe part of the webmail settings code
  - Dormant prototype of optional display of multidrop settings regions
  - Removed percent from (percent)prep in 4.9.0-01 changelog entry
    to stop mezzanine/rpmbuild failures due to multiple (percent)prep 
    sections (sigh)


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-05]
  - Add template expansion of pop service peers files to email-update,
    as private/public may have changed.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.2-02]
  - Integrate Gordon's changes to break form up into subforms.
    TODO - non-en localisations.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-30]
  - Avoid warning from email panel if patterns are not enabled.
  - Avoid crash in panel if DelegateMailServer is being set.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-29]
  - Don't expand /var/qmail/users/assign in generic_template_expand,
    as users/groups may not yet be created. Instead, combine with
    qmail-newu in qmail service control/1 script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-28]
  - Add missing templates for popd/pop3s peers files.
  - Change port specification in popd run file from "pop3" to
    "pop" - tcpsvd doesn't grok "pop3".


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-27]
  - Use tcpsvd instead of tcpserver for popd and pop3d. Use sslio
    instead of stunnel for pop3d. TODO - configurable concurrency
    limits.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-21]
  - Include all content from e-smith-qmail (arguably lots of this
    content should move to e-smith-qmail, but this is easier).
  - Obsolete email-assign action.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-20]
  - Fix dangling symlink.
  - Add missing exports in FormMagick::Panel::emailsettings
  - Add missing templates for pop3s tcpserver cdb file.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-17]
  - Fix path to skeletal junkmail Maildir.
  - Up memory limits for popd and pop3s run files.
  - Add missing /var/log/pop3s directory.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-15]
  - Fold in most of Shad's panel changes, with support for
    imaps and pop3s.
  - Add supervised pop3s service.
  - Allow pseudonums of pseudonyms.
  - Obsolete email-update-shared and email-conf actions.
  - Add junkmail maildir to skeletal user dir
  - Remove db entry creation code from panel code - now done
    via default fragments.
  - Add TCPPort property of popd (and pop3s).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-13]
  - Remove obsolete email-startup-links action. [MN00065651]
  - Obsolete email-sighup and smtp-auth-proxy-restart by using generic
    services-adjust action. Remove unused email-restart action. 
    Update e-smith-lib dependency. [MN00065576]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-12]
  - Remove conf-fetchmail action - done by default fragments. [MN00064329]
  - Include ~alias/.qmail-default symlink in rpm. [MN00064230]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.15.1-10]
  - Remove no longer needed conf-migrate-* actions. [charlieb MN00062545]
  - Fix "Visisble" typo in default "everyone" pseudonym. [charlieb MN00046951]
  - Don't restart auth proxy in bootstrap-console-save [charlieb MN00062549]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.15.1-04]
  - Made filtering via SA the default preprocessing action for all email.
    [msoulier MN00027881]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.15.0-05]
  - Updated template for home directory .qmail files to support change in
    sortspam to allow .qmail files more control over mail delivery. 
    [msoulier dpar-20868]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.15.0-04]
  - Fwd port of 10064: fixed expansion of /etc/fetchmail in email-update event
    [markk 11026]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.15.0-02]
  - Adding Charlie's smtp-auth-proxy, and putting it under supervision.
    [msoulier 4728]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.14.0-08]
  - Remove duplicate primary domain name in multidrop fetchmail template
    [charlieb 10064]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.14.0-06]
  - Removed the conditional around the SMTPProxy creation code. [msoulier 9572]
  - Changed the trigger property for the SMTPProxy to "Proxy", in
    smtpfront-qmail. [msoulier 9572]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.14.0-05]
  - Added an smtp-proxy db record to permit enabling/disabling of the smtp
    proxy. [msoulier 9572]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.14.0-03]
  - Use qmail delivery properties to determine local delivery instructions for
    admin user. [charlieb 9198, 9255]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-58]
  - Use tcpserver/supervise rather than xinetd to handle POP connections. Need new
    genfilelist to handle the permissions under /var/service. [charlieb 8903]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-57]
  - Fix devnull pre-defined alias definition. Use defaults mechanism to reserve
    devnull alias. Use same mechanism for postmaster, mailer-daemon, and everyone
    pseudonyms. [charlieb 6460]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-54]
  - Fixed expectation of email-update-group so that it can handle user-deleted
    and group-deleted. [msoulier 6414]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [4.13.0-52]
  - Add default db fragments for qmail/popd/fetchmail services [tonyc 8537]
  - Remove dead email-startup action [tonyc 8537]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-51]
  - Changed the interface to email-update-group to accept either no second
    argument, or a group or user. [msoulier 8103]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-50]
  - Removed email-update-all-groups and modified email-update-group to handle
    its functionality. [msoulier 8103]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-49]
  - Remove email-relocate-maildirs action - it's moving to e-smith-imap.
    [charlieb 8273]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-46]
  - Using the createlinks script for symlink creation for consistency.
    [msoulier 6414]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-45]
  - Fixed lack of & in front of addresses generated by email-update-all-groups.
    [msoulier 6414]
  - Fixed lack of use of processTemplate in email-update-group. [msoulier 6414]
  - Added a symlink to email-update-all-groups in user-delete. [msoulier 6414]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-44]
  - Add creation of ~admin/.qmail-default symlink. Move email-update-user
    action from post-upgrade to bootstrap-console-save, so it is run
    at post-install as well. [charlieb 7660]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-41]
  - Change email-update-user action to loop through all users if
    username not given. Link into post-upgrade action. Create
    .qmail-default symlink if it doesn't already exist.
    [charlieb 7609]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-38]
  - Removed 'Mitel Networks SME Server' branding on emailsetting
    and pseudonyms [lijied 8016]
  - Changed Copyright header to License. [charlieb]
  - Add local delivery options in .qmail template - use
    DeliveryType and DeliveryInstruction properties of qmail.
    [charlieb 2600]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-37]
  - Modify email-relocate-maildirs to ensure that Mail/junkmail
    folder exists for all users. [charlieb 2600]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.13.0-29]
  - And make section bars only 80% of the width to its obvious there's one
    Save button for the page [gordonr 7911]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.13.0-24]
  - Rearranged panel order slightly to group like items [gordonr 1950]
  - Adjusted titles of the two delegate mail server (upstream/downstream)
    items [gordonr 1950]
  - TODO: Some missing French L10Ns (tagged in lexicon) [gordonr 1950]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.13.0-23]
  - Deleted emailretrieval/otheremail - now merged into emailsettings 
    [gordonr 1950]
  - Made emailsettings panel loop back to start and display 
    success/failure message [gordonr 1950]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.13.0-22]
  - Modified emailretrieval and emailsettings en-us text [lijied 4937]
  - Modified emailretrieval and emailsettings fr-ca text [lijied 4937]
    and modified the lexicons to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.13.0-20]
  - And add panel link [gordonr 1950]
  - Change page title to "E-mail settings' and nav bar to 'e-mail'
    in English and French [gordonr 1950]
  - Modified otheremail POP and IMAP server access text [lijied 4081]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.13.0-17]
  - Deleted ./etc/{fetchmail, startmail}/template-begin,
    and modified %build
  LANG=C
  export LANG
  unset DISPLAY
   [lijied 3295]
  - Reconfigure/reload /var/qmail/control/locals on ip-change [gordonr 6900]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.13.0-15]
  - Modified panel order for emailretrieval,otheremail 
    and pseudonyms
  - Modified en-us and fr-ca pseudonyms panel title [lijied 7356]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.13.0-14]
  - Split en-us lexicon from emailretrieval panel
    split en-us lexicon from otheremail panel
    split en-us lexicon from pseudonyms panel  [lijied 4030]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-11]
  - Added French lexicon for emailretrieval, otheremail
    and pseudonyms. [lijied 5003]
  - Re-do hosts.allow template to use esmith::ConfigDB::hosts_allow_spec.
    Add dependency on up-to-date e-smith-lib. [charlieb 5650]
  - Remove bogus mailfront dependency.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-10]
  - Convert virtualdomains template to use esmith::{Hosts,Domains}DB.
    [charlieb 2670]
  - Remove duplicate DomainName setting from virtualdomains template,
    now that the primary domain is added to the domains db. [charlieb 2670]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-07]
  - Change pattern match for ppp device in /etc/startmail, so that
    mail collection is triggered on a PCI ISDN dialup link [charlieb 5399]
  - Remove standard template-{begin,end} fragments where possible. The
    default ones will be used in their place [charlieb 3295]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-06]
  - Fixed incorrect page flow behaviour. Panel now returns to start page on
    completion, with a status message prefixed. [msoulier 6470]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.12.0-02]
  - If the user had a maildir called Mail/, rename it so it gets 
    relocated into the new directory Mail/. Attempt to relocate as
    many directories as possible - only warn when directories can't
    be renamed rather than calling die(). [gordonr 4767]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.8-04]
  - Re-add "use esmith::util" to email-update-group - it was lost in the
    esmith::AccountsDB rewrite. [charlieb 4932]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.8-02]
  - Modify email-update-group to iterate over all groups during post-upgrade
    event [charlieb 4932]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.11.7-03]
  - Relocate maildirs for all users and admin to Mail/ subdirectory
    in post-upgrade event. Directories which didn't exist in Mail/ 
    preserve their name. Directories which conflict with an existing
    directory in Mail/ become {name}.relocated and if that conflicts,
    we try {name}.relocated-time(). If that conflicts, we generate a
    warning to the log and give up. [gordonr 4767]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.7-02]
  - Update default pine configuration to deal with TLS capable imapd,
    and to support a few more features.  [charlieb 3669]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.7-01]
  - Use new adjust-masq action script to adjust packet filter, rather than
    restart-masq. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.6-01]
  - Return exit status from /etc/startmail if it is called, 0 otherwise.
    [charlieb 4487]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.4-01]
  - Call /etc/startmail from email-ipup, rather than /etc/fetchmail, so that
    $SMTP is set. [charlieb 4483]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.11.3-01]
  - Fixed faulty display of multidrop params [markk 4453]
  - Added fetch of POP password [markk 4453]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.11.2-01]
  - Added optional property fetchmail|AuthenticationMethod, defaulting to
    "password" so that people with working CRAM-MD5 or similar can still
    choose that (or indeed "any" if it works for them) [gordonr 3050]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.11.1-01]
  - Added --auth password to fetchmail call to force password
    authentication [gordonr 3050]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.25-01]
  - Fix multi-drop sort. 'on' and 'off' were confused in "select sort
    method" in the panel. [charlieb 3682]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.24-01]
  - Fix forward unknonw email to admin, which was broken in the FormMagick
    conversion. [charlieb 3683]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.18-01]
  - Remove migration of smtpfwdd properties and init of smtpfront-qmail
    service - moved to e-smith-mailfront. [charlieb 3442]
  - Fix fetchmail delivery - we need to use smtphost, not smtpaddress.
  - Append @$DomainName to "postmaster" for postmaster address - 
    fetchmail otherwise uses postmaster@a.b.c.d [charlieb 3469]
  - Remove commented out SMTP address lookup in /etc/fetchmail script -
    it's now passed in from /etc/startmail (and we have CVS for version
    control) [ charlieb 3469].


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.15-01]
  - Removed CVS detritus from changelog.
  - Changed references to smtpd db entries to smtpfront-qmail. [charlieb 2604]
  - Added blank or IP validator. Changed ip_number to new validation in
    emailretrieval [markk 3317]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.9.14-01]
  - Changed lexicon en -> en-us [markk 3320]
  - Removed unused "TITLE" on first page [markk 3320]
  - Added status message display on first page [markk 3320]
  - Cleaned up display in IE [markk 3320]
  - Localised "Everyone" [markk 3320]
  - Cleaned up die calls in module for better error handling [markk 3320]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.13-01]
  - Enable smtpd service by default. Migrate status and filter properties
    from smtpfwdd to smtpd service, if found. [charlieb 2604]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.9.9-01]
  - Added head/foot to pseudonyms [gordonr 3223]
  - Nav bar entries to all panels [gordonr 3155]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.9.8-01]
  - Removed bogus hard quotes on call to serviceControl [gordonr 2920]
  - Changed navigation for email retrieval to "E-mail" as per
    glossary [gordonr 3155]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.9.7-01]
  - Changed some db->get()s to check their return values. Was causing breakage
    in otheremail panel on fresh install. [markk]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.9.6-01]
  - Allow optional qmail|ConcurrencyRemote setting which overrides the
    memory sized based heuristic [gordonr 2920]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.9.4-01]
  - Pass SMTP on the command line as the env is cleared [markk 3161]
  - Pass LocalIP if ExternalIP doesn't exist [markk 3161]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [4.9.3-01]
  - Extract ExternalIP in /etc/startmail and export as ENV{SMTP} to 
    /etc/fetchmail to avoid calling privileged commands as user qmailr 
    [markk 3161]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.0-01]
  - rollRPM: Rolled version number to 4.9.0-01. Includes patches up to 4.8.0-07.
  - Removed empty directories from tarball and add code to make them in prep
    section, prior to CVS import.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.8.0-07]
  - Remove the current qmail rcpthosts template and replace it with a
    template directory containing zero length template-begin and template-end
    files. The current template containing "not used" comments is moved
    into the e-smith-obtuse-smtpd RPM.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.8.0-05]
  - Use external IP as SMTP address when using multidrop mail, so that
    external network smtpd rules are applied to address matches. We have to
    fall back to LocalIP in serveronly mode, unfortunately, because we have
    no other option.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.8.0-02]
  - Fix a few problems with email-ipup script which lead to warnings being
    logged.
  - Trucate the changelog, which is getting very large. For earlier changelog,
    see an earlier version of the package.


author: Charlie Brady <charlieb@e-smith.com> 1.9.0-16
changelog:
  - Autodetect tape block size and use that when extracting files, rather
    that what is in flexbackup.conf [SME: 375]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-11]
  - Allow a Prune property to specify a list of subtrees which are
    not included in the backup. [SF: 1332834]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-10]
  - Don't bother to backup /boot partition, as we never restore it
    anyway. We expect it all to be installed via CDROM or as part of
    an upgrade. [SF: 1332834]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-09]
  - Make buffer program to use configurable via a db property -
    default to 'buffer'.
  - Add Requires: mbuffer [SF: 1252345]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-07]
  - Fix missing semi-colon on erase_rewind_only line in conf.
    [SF: 1192822,1213076]
  - Adjust some default params. [SF: 1213076]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-04]
  - Use generic_template_expand action in place of conf-flexbackup.
    Add default db property fragments. Update e-smith-lib dependency. [MN00064130]
  - Simplify flexbackup.conf template, and remove anachronisms.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-06]
  - Autodetect tar/dump at restore time and DTRT. [charlieb 8965]
  - Disable buffering during restore. [charlieb 9053]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-05]
  - Change default backup type from dump to tar. Allow override from config
    db. [charlieb 8965]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-04]
  - Fix quoting error in 10Blocksize fragment, and split concepts of blocking
    for archive and blocking for tape drive, as latest flexbackup has done.
    [charlieb 9014]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-03]
  - Add tape-backup-flexbackup action, which will be used by
    /sbin/e-smith/do_backup harness. Remove remnant of templated backup
    program. [charlieb 7853]
  - Set $verbose to false, so we don't get list of all files as we backup.
    [charlieb 8965]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-02]
  - Port configuration to newest version of flexbackup. [charlieb 9014]
  - s/Copyright/License/.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.2-01]
  - Redo last fix, something's awry with my pattern match, so we'll use a
    pair of eqs instead. [charlieb 4588]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.1-01]
  - Change fstab grok in flexbackup.conf template to handle ext3 file
    systems. [charlieb 4588]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-01]
  - Changing version to maintained stream number to 1.4.0
  - Remove bogus "/sbin/console" reference in copyright notice in 
    tape restore script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-01]
  - rollRPM: Rolled version number to 1.3.0-01. Includes patches up to 1.2.0-08.
  - Add mkdir command to create event directories to %pre section, in preparation
    for CVS conversion.
  - Remove obsolete %post script.


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-08]
  - revised order of files to restore - doesn't really make any
    difference, but it keeps it consistent with e-smith-backup

  - [1.1.0-07]
  - added missing use esmith::db to tape-restore-flexbackup


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-05]
  - Added flexbackup specific tape-restore program (ripped out of
    e-smith-backup).
  - Removes /etc/cron.d/flexbackup as part of bootstrap-console-save
  - Createlinks is now a perl program.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-3]
  - Make e-smith-flexbackup a subpackage of e-smith-backup
  - Provide a template fragment for /sbin/e-smith/backup
  - Use Device property of backup service.
  - Mark flexbackup as a backupservice, not a service.
  - Add link into bootstrap-console-save and conf-backup events


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [0.1-9]
  - updated /etc/cron.d/flexbackup template and the conf-flexbackup
    actions to include new configuration database parameters
    of backupTime and reminderTime


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [0.1-6]
  - Crontab entry now uses mt to check for presence of tape before
    running flexbackup.
  - A reminder is mailed to root if there is no tape in the drive at 2pm.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Move crontab entry to /etc/cron.d
  - Make device and erase_backup_only configurable.
  - make this a service in the configuration db, by default service is
    disabled.


author: Gordon Rowell <gordonr@gormand.com.au> 1.3.2-03
changelog:
  - 'strong' passwords must meet both Cracklib and the standard password
     mantra: Upper Case AND Lower Case AND Digits AND Special characters
     AND at least seven characters long [SME: 161]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.3.0-10]
  - Update requires to CGI::FormMagick >= 0.91-28
  - Fix esmith::FormMagick constructor brokenness for IbayPlugin compatibility


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-07]
  - Move changelog to top of spec file. [charlieb]
  - Don't try to read from unopened file handle in _lexicon_read()
    [charlieb MN00056701]
  - Replace deprecated Copyright header with License header. [charlieb]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.3.0-06]
  - Added an error to the top of all pages with errors in them, instructing the
    user to scroll down for specifics. So far localised in English only.
    [msoulier MN00046857]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.3.0-04]
  - Added patch to permit "permitpipes" in validation, to turn off automagick
    addition of "nopipes". Thanks to Pascal Schirrmann <schirrms@schirrms.net>
    for the idea and the preliminary patch. 
    [msoulier MN00044774]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.3.0-03]
  - Updated _lexicon_filename_list to return lexicon from the preferred
    languages that exists, instead of referencing non-existant files.
    [msoulier 10397]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-14]
  - Replaced "MDP" with mot de passe in FormMagick general lexicon [gordonr 3793]
  - Added Spanish FM general lexicon [gordonr 3793]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-12]
  - Default status message to undecorated until we modify everyone to
    using $fm->error() and $fm->success() [gordonr 8289]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-09]
  - Apply div.success and div.error automatically around the status
    message in print_status_message as long as panels calls
    $self->error() or $self->success() [gordonr 7919]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.1.1-07]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.1.1-05]
  - Fixed a missing quote, and a subtle circular dependency in lexicon
    loader [markk 7677]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-04]
  - Ensure that the fallback_language is in the list of languages back from
    get_languages(). Log one "missing languages" line [gordonr 7677]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-03]
  - Override get_languages() to only return languages for which we have 
    lexica [gordonr 6787]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.1.0-07]
  - Moved locale-specific date generation code into esmith::FormMagick as
    gen_locale_date_string [markk 3357]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.2-02]
  - Add setting of $ENV{'HOME'} to BEGIN in esmith::FormMagick, specifically
    so that mysql can find ~root/.my.cnf. [charlieb 4778]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [0.3.2-01]
  - Removed now-superfluous nonblank() validation routine (it checked for 
    nopipes as well, but that's now automatic) [skud 3807]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.1.22-01]
  - Added validate_password method: checks a password using one of cracklib,
    FormMagick validator, or none. [markk 3592]
  - Added localisations for password validation messages [markk 3592]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [0.1.18-01]
  - Re-add fix from 0.1.13-01: pass charset option to fm constructor
    [tonyc 3027]
  - Re-add export_to_level line in esmith::formmagick::import
    [tonyc 3027]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.15-01]
  - Moved FormMagick session cookies to /var/cache/e-smith/formmagick/sessions 
  - Added added tmpwatch (daily, >8 hours old) for above directory [gordonr 3213]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.12-01]
  - Again set fallback_language("en-us") [gordonr 3031]
  - fix undefined value bug in FormMagick.pm when no external lexicons exist
    [tonyc]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.10-01]
  - Set fallback_language("en-us") [gordonr 3031]
  - Added optional filename=>"/path/to/script" to new() [gordonr 3155]
  - Added parsing of navigation headers [gordonr 3155]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.10-01]
  - Re-do symlink resolution using knowledge of e-smith hierarchy. The old
    one was ugly and would break in the general case anyway [gordonr #3031]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [0.1.6-01]
  - Fixed importing so that esmith::FormMagick exported functions are
    exported all the way out to scripts using subclasses [skud]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [0.1.1-01]
  - improved tests (skud)
  - improved documentation (skud)
  - print_button() now exported (skud)
  - security settings are now automatic (skud)


author: Gordon Rowell <gordonr@gormand.com.au> 0.0.1-24
changelog:
  - Add --no-floppy to the grub --batch calls. Systems with the
    floppy controller enabled but no floppy drive installed "hang"
    in post-upgrade otherwise. [SME: 696]


author: Gordon Rowell <gordonr@gormand.com.au> 0.0.1-22
changelog:
  - Add --no-floppy to grub-install call in grub-install-raid [SME: 151]
  - Don't call grub-install-raid in post-upgrade, only post-install  [SME: 151]
  - Cleaned up old comments in grub-install-raid


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.0.1-19]
  - Only update default kernel choice in the local event [MN00106104]
  - Update dependency on e-smith-lib to require version of 
    generic_template_expand which sets EVENT in the template hash


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-17]
  - Create "update-bootloader" symlink in /sbin/e-smith, for use by add_mirror
    script. Add "Provides: e-smith-bootloader", so that e-smith-base can add
    a generic "Requires:". [SF: 1335937]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-16]
  - Expand grub.conf template in post-install and post-upgrade, to correct
    errant hd1,0 references. [SF: 1233029]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-15]
  - Fix errant hd1,0 references in /boot/grub/grub.conf. This is just a
    workaround - we should be able to fix anaconda/booty so that they never
    appear. Tidy up UpdateDefault while we are here. [SF: 1233029]
  - Update grub-install-raid so that it runs grub for each disk, with each
    device set as hd0. [SF: 1233029]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.0.1-13]
  - Add grub-install-raid action to force to install onto a RAID1 set
    [MN00100874, SF: 1233029]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-12]
  - Preserve current default setting in grub.conf template if
    none of the available kernels matches the currently running
    kernel. This will allow anaconda SMP detection to determine
    initial boot setting. [MN00097833]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.3-02]
  - s/local_ip/global_ip/ when setting host to type Remote.
    Ensure that Remote hosts don't have local_ip set.
    [SF: 1293449]
  - Add missing "IP_ADDRESS" localisation.
  - Remove vestigial print_global_ip_field() function.
  - Deal gracefully with missing Nameservers property of domains.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.13.1-14]
  - Only display the DNS Forwarder message if there are no domains
    set with Nameservers==localhost [SF: 1303422]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-11]
  - Avoid double reformatting of old host records, which breaks HostType == self
    records. [SF: 1275450]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-10]
  - Remove some remnant ServiceLink code
  - Replace conf-migrate-hosts with some migrate fragments for the host db
  - Restart dnscache during host-{create,delete,modify} events, so that
    cached information on hostnames is purged. [SF: 1243418,1243423]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-08]
  - Complete the update to current db access APIs - a few esmith::db and
    esmith::config calls were found hiding. Rewrite conf-hostsdb as simple
    shell script. [SF: 1216546]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-07]
  - Greatly simplify delete-hosts, and rename to purge-domain. Purge user@domain
    pseudonyms for deleted domains. [SF: 1193570 (Gordon)]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-06]
  - Update to current db access APIs, in readiness for move of dbs to private
    directory. [SF: 1216546 (Shad)]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-04]
  - Include Shad's panel changes (publishglobal and formmagick patches)
    from e-smith-hosts-1.13.0-02sme04. [SF: 1234280]
  - Avoid multiple re-openings of config db in panel code.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-03]
  - Move all host db manipulation actions to before template
    expansions (in all events, not just bootstrap-console-save).
    [SF: 1234255]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.1-02]
  - Use services2adjust symlink to reconfigure tinydns (tinydns-conf
    is obsolete).
  - Move all host db manipulation actions to before template
    expansions in bootstrap-console-save.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-06]
  - Use generic_template_expand action in place of restart-dhcpd.
    Update e-smith-lib dependency. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-04]
  - Only check if host exists on create not modify. [MN00065708]
  - Remove stray ServiceLink action symlink. [MN00064757]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.13.0-02]
  - Fixing typo that prevented H&A panel from being disabled if a DNS forwarder
    was in use. [msoulier MN00034840]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.12.0-04]
  - Added a check in more_options() to reject the hostname if it's a dup.
    [msoulier dpar-20864]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.12.0-03]
  - Added further validation of the local IP address, to prevent the user using
    the external or internal interface IP, the gateway IP, or the loopback
    interface. [msoulier 8887]
  - Added further validation of a host being added as local, to prevent users
    adding "local" hosts with are not local. [msoulier dpar-20865]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.11.0-32]
  - Move force to lowercase to the correct place so we don't just bark
    if upper case hostnames are entered - we squash them to lower case
    before confirming [gordonr 8939]
  - Correct the migrate fragment [gordonr 8939]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.11.0-31]
  - Force hostnames to lowercase on h&a panel [gordonr 8939]
  - Sanitise hostsdb for old non-lowercase names (WIP) [gordonr 8939]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-30]
  - Updated delete-hosts to use esmith::HostsDB, and removed redundant bind db
    handling. [msoulier 8809]
  - Updated delete-hosts to scan the entire hostsdb, cross-referencing with the
    domainsdb, and remove any host for a domain that we do not manage.
    [msoulier 8809]
  - Added links to delete-hosts from bootstrap-console-save and
    registration-clear. [msoulier 8809]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-29]
  - Fixed indentation in lexicon files, and changed "Create/modify" to "Create
    or modify" in all lexicon files. [msoulier 8543]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.11.0-13]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-11]
  - Back out the check for duplicate hosts added at 1.9.0-04 - it prevents
    any modification of existing hostnames. [charlieb 3813]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-08]
  - Remove auto-creation of LocalDomainPrefix on upgrades. An existing
    value will be retained, but the implicit creation of e-smith.
    or mitel-networks. for the local prefix no longer happens. [gordonr 4811]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.8.4-01]
  - Validate that the (root of the) hostname matches [a-z][a-z0-9-]*
    Remove unused open of the ConfigDB [gordonr 3684]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.8.3-01]
  - Delete MACAddress when type is Remote
    Delete RemoteIP when type is Local [gordonr 3684]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.8.2-01]
  - Resolved more confusion with addresses not displaying, naming conventions,
    delete non-essential fields in modification, and stop allowing change of 
    domain during modification. [markk 3684]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.8.1-01]
  - Resolved a lot of confusion about HostType, Visbility, local and 
    remote hosts and global publishing. These were all mixed up.
    TODO: Need to ensure that InternalIP and ExternalIP are deleted when
    changing host types from Remote->Local->Self [gordonr 3684]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [1.7.20-01]
  - removed SL-specific service domain stuff, now just calls a routine
    elsewhere [skud 3731]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [1.7.17-01]
  - Default all hostentries props to empty string to avoid "odd number of
    elements in hash" warning and mixed up hosts config file. [skud 3684]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [1.7.15-01]
  - Fixed hostname/name CGI parameter mixup in hostentries.pm [skud 3684]
  - Fixed ethernet address validation (should be allowed to be blank)


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.8-01]
  - Removed whitespace from nav bar entries. For some reason it resulted
    in another Configuration group. Probably funkiness in the navigation
    routine, but that's for ron. [gordonr 3155]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.2-01]
  - InternalIP & ExternalIPs now translated correctly from 4.1.2 style
    hosts databases by conf-migrate-hosts (2495)
  - Added 'wpad' alias for Windows proxy autodetection - thanks Damien Curtain 
    [gordonr 3073]


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.7.1-01]
  - Rolling to new version 1.7.1-01, includes all patches up to 1.7.0-01,
    as part of testing that rpm2cvs was successfull


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.6.0-02]
  - Adding 'proxy' to the list of hostnames added to hosts database.
  - Use passed in visibility argument for systemName.FQDN rather than always
    using 'Global'.


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.5.0-01]
  - rollRPM: Rolled version number to 1.5.0-01. Includes patches up to 1.4.0-05.
  - s/march-networks/mitel-networks/ in conf-migrate-hosts


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-57]
  - Update conf-migrate-hosts to change default LocalDomainPrefix value from
    e-smith. to march-networks.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-50]
  - Update to hostentries panel to include a message about static
    host entries and why they are non-modifiable


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-49]
  - Update to create-default-hosts to create a new host for SystemName
    with property static=yes
  - Update to hostentries panel to not allow modifications for hosts
    that have the property static=yes


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-46]
  - Similar updates for createSelf(), createLocal(), createRemote(), modifyHost()
    as were done in 1.3.0-45.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-45]
  - Updates to the showInitial() subroutine in the hostentries panel to have
    better formatted warnings


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-44]
  - Updates to createSelfHost, createLocalHost, createRemoteHost, modifyHost
    subroutines inside the hostentries panel to show marketing information


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-37]
  - Changes various templates and web panels to check for publishDomain
  	- hostentries web panel
  	- conf-migrate-hosts action
  	- conf-service-name action


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-36]
  - Added an optional parameter to create-default-hosts to allow one to make
    all the default hosts Globally published [i.e. service domain name]


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-35]
  - Reorganization of createlinks
  - Added action delete-hosts which is symlinked into domain-delete
    to automatically delete the host values for a particular domain


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-34]
  - Re-added symlink for console-save -> conf-hostsdb as it would
    be required in the event that a domain is changed in the console
    configuration


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-32]
  - Changed showInitial() subroutine in hostentries panel to use the
    LocalDomainPrefix if one is set instead of DomainName
  - Changed the ordering of genDomainMenu() subroutine in hostentries so that
    the list of domains in the system appears as:
  	- Primary domain (with LocalDomainPrefix if applicable)
  	- Service domain
  	- Sorted i-bays


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-30]
  - Removed conf-hostsdb from console-save and host-delete events as it is not
    necessary
  - Added new action create-default-hosts (linked to domain-create event) which
    takes the passed $domainName value and generates default hosts for that domain
  - Changed conf-hostsdb to call create-default-hosts action passing it the
    primary domain


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-29]
  - Cleaned up the Cgi code that displays the table of hosts (hostentries panel)
    so that it would properly display in lynx


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-28]
  - Fixed up /etc/dhcpd.conf/60StaticEntries so that it also checks that
    MACAddress and LocalIP are defined AND not equal to ''


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-27]
  - More panel text corrections
  - Removed the autogeneration of hostname e-smith-manager.$DomainName as it
    won't work as expected anyways (needs an apache configuration to pass it
    on to the port 980)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-26]
  - More panel updates for textual content as well as some more cleanup of
    deprecated modules


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-24]
  - Panel updates for textual content for showInitial(), createSelfHost(),
    createLocalHost(), createRemoteHost()
  - Cleanup of several deprecated modules


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-23]
  - changes to the layout of the manager text for the various panels
    of createSelfHost(), createLocalHost(), createRemoteHost() and modifyHost()
  - changes to the display of some of the panels


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-21]
  - Made a generic modifyHostEntry() function that is meant for all three host
    types and includes a drop-down to choose that type.
  - Added 'FIXME' comments to locations that need to be removed


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-20]
  - Removed conf-hostsdb and conf-migrate-hosts out of post-install/post-upgrade
    as this is a duplicated action set (bootstrap-console-save) which shouldn't
    need to occur


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-19]
  - Changed conf-hostsdb and conf-migrate-hosts to not generate serviceDomain
    entries if configuration value for ServiceDomain = '' (default on install)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-18]
  - Added in the host-create and host-modify events to each of the performCreate()
    and performModify() sections so that named is updated with the new information


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-17]
  - Merged the working prototype webpanel into the normal hostentries panel
    (still keeping the old create/modify/delete scripts for reference)
  - Made stipulation to show hostname/addresses for the serviceDomainName
    if defined and not equal to '' (default on an installation)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-16]
  - Changed conf-migrate-hosts to be operation 06 in post-install/post-upgrade
    as it caused a failed dependency for 05init-accounts which MUST come first


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-15]
  - Added $ServiceDomainName to the list of domains for both
    conf-hostsdb and conf-migrate-hosts scripts


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-14]
  - added a new conf-migrate-hosts script to be included in
    post-install/post-upgrade (05) to migrate existing hosts to the new format
    as well as to check for special hosts being defined for all domains
    [note: this doesn't include service domain just yet]
  - changed the meaning of conf-hostsdb for the default domains that it generates
  - changed the panel to start using /home/e-smith/hosts instead of
    /home/e-smith/service_hosts (test centre)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-12]
  - created user interface for modifySelfHostEntry(), modifyLocalHostEntry(),
    and modifyRemoteHostEntry()


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-11]
  - prepared modify{$HostType}HostEntry and performModify{$HostType}Modify
    for actual content


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-09]
  - Updated performCreateSelfHostEntry() to do a check for a valid domain
    name first, and rearranged order of variable declarations
  - Completed the logic for performCreateLocalHostEntry()


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-07]
  - Created the interfaces for create self/local/remote
  - Implemented performCreateSelfHostEntry() and prepared
    the logic for performCreateLocalHostEntry() and
    performCreateRemoteHostEntry() to occur
  - Changed REGEX for HostName to not allow periods at all
  - Added genDomain() subroutine to generate a list of domains
    to create host for.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-06]
  - Further prepared the links for create/modify/remove to include the
    relevant host information and the appropriate subroutines to handle
    them [minus the handling portions]


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-04]
  - Added ability to store each service_host db value into a two-tiered hash
    which is then used to provide the host name values into the table structure
    previously layed out in the panel.
  - Added code to show a 'No hosts for this domain' message if no hosts exist


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-03]
  - Updated the new panel (service_hosts) to read from /home/e-smith/service_hosts
    and changed to reflect the new layout of host entries per domain on the system
    by providing menus only


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-14]
  - Changed descriptive text for hosts and addresses panel to emphasize
    don't do anything unless you know what you're doing


author: Paul Nesbit <pkn@e-smith.com>
changelog:
  - [1.1.0-11]
  - If $MACAddress isn't defined, set it to " " for display.  This fixes
    "Use of uninitialised..." warnings in admin_error_log.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-6]
  - updated createlinks to include conf-hostsdb in the post-install and
    post-upgrade events


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-4]
  - Actions may well be named dhcpd, but they shouldn't be here - they're
    duplicated in e-smith-base :-)


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - Branched to 1.1.0 for 4.1/7.0 release.
  - Modified conf-dhcpd to look in /var/lib instead of /var/state


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - Put minor version numbers into patch file
  - Changed test on web interface
  - Modified conf-hostsdb to work for any event (including host-delete)


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - Renamed from e-smith-named-conf to e-smith-hosts
  - Rewritten to use hosts database
  - /var/named template changes moved to e-smith-named


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.3-03]
  - Allow per-ibay override for PHP register_globals setting. To enable:
    /sbin/e-smith/db accounts setprop <ibay> PHPRegisterGlobals enabled
    Thanks John Bennett [SF: 1328236]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.1.1-14]
  - Add dependency on e-smith-formmagick >= 1.3.0-10
  - Fix default plugin display [SF: 1271745,1263740]
  - Clean up, add POD to IbayPlugin modules [SF: 1263740]
  - Support versioning of plugins, do version checks in ibay panel


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.1-12]
  - Fix missing "use esmith::util" in ibay plugin lib. [SF: 1265684]
  - Don't display ibay Plugin choice if "none" is the only choice. [SF: 1263740]


author: Shad Lords <slords@mail.com>
changelog:
  - [1.1.1-10]
  - Remove 90e-smithAccess10common (belongs in e-smith-apache)
  - Move some ibay options to database


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.1-08]
  - Update all uses of deprecated esmith::config and db_ APIs.
  - Rewrite ibay-delete action in shell.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.1-07]
  - Fix untaint RE. [charlieb MN00050161]
  - Fix "will not stay shared" warnings in IbayPlugin/none.pm


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.1-05]
  - Updated requires with new perl dependencies. [msoulier MN00040240]
  - Clean BuildRequires. [charlieb MN00043055]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.1.1-03]
  - Updating default repair method to set CGIs as executable if enabled.
    [msoulier 7475]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.1.1-02]
  - Fix processTemplate call in IbayPlugin::none [tonyc 9924]
  - Merge ibay-conf-plugin into ibay-modify action [tonyc 9924]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.1.0-02]
  - Adding 6.0 styling to ibay panel. [msoulier 10415]
  - Converted createlinks to new api.
  - Add IbayPlugin stuff [tonyc 9924]
  - Add dependency on perl-CGI-FormMagick >= 0.91-04 [tonyc 9924]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.1.0-01]
  - Changing version to development stream number - 1.1.0
  - Rolling to development stream [tonyc 9924]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.0.3-05]
  - Fixed the content ibay showing up in the ibay list of the primary domain's
    virtual host block. [msoulier 9649]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.0.3-04]
  - Correcting the previous revision, and limiting ibay access as sub-urls to
    the primary domain only. [msoulier 9649]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.0.3-03]
  - Unify ibay handling, since 15PrimaryContent is now obsolete, and changing
    the primary domain's content was breaking access to ibays. [msoulier 9649]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.3-02]
  - Fix path of created starter website index file (don't rely on symlink
    which "should" point to correct place). [charlieb 9241]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.1-01]
  - Fix typo in createlinks script. Rolling version of package
    to correct build problem. [charlieb 8841]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-02]
  - Add some code from init-accounts action which depends on
    /home/e-smith/files/ibays directory, which isn't included
    in base. New action is init-ibays. [charlieb 8841]


author: Charlie Brady <charlie_brady@mitel.com> 1.3.1-17
changelog:
  - Add default initializers for imap & imaps db records. [SME: 561]
  - Add db driven global and per IP concurrency controls. [SME: 884]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-13]
  - Ensure that ./peers/0 is only readable if "access" is set to
    "public". This change allows a "localhost" setting to do the
    right thing. [SF: 1294719]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-08]
  - Run ./control/1 from run script, to ensure that ACLs
    are set at startup. Don't bother with sigusr1 at
    bootstrap-console-save, as it will be ignored.
  - Fix imap folder relocations.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-06]
  - Use imap sigusr1 handler script to update network ACLs
    for both imap and imaps.
  - Be more careful about permissions for copied pem cert.
  - Remove dead imap-conf symlinks.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-05]
  - Remove imapd.pem templates, and just copy system pem file, via
    sigusr1 handler script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-03]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]
  - Convert from tcpserver to tcpsvd for imap service. Manage
    network ACLs and daemon environment using peers directory.
  - Update maildir relocate script to use standard dovecot
    hierarchy separator ('.').


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.1-02]
  - Fix spelling in IMAP_CAPABILITY setting. [MN00040881]
  - Create imapd.pem via template expansion, and merge into
    imap-conf action.
  - Add db default values for imaps service - to come later.
  - Clean up genfilelist call - remove sed invocation.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-05]
  - Fix quoting in IMAP_CAPABILITIES setting, and clean env before
    running envdir from run script. [MN00040881]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-02]
  - Provide new backend imap script so that setting of imapdpath in
    environment by tcpserver is effective. [MN00029842, MN00033394]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-02]
  - Move setup of cvm environment variables into CDB file. Saves
    execution of envdir, and allows customisation per IP address.
    [charlieb 10960]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-07]
  - Template /etc/dovecot.conf and runenv/* dovecot environment setup files.
    Rename conf-imap-tcprules to conf-imap to cover additional template
    expansions.  [charlieb 587]
  - Increase default ulimit setting to 128MB. [charlieb 9113]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-06]
  - Update tcpserver's cdb file in email-update and remoteaccess-update.
    [charlieb 9068]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-05]
  - Use create-system-user to create imaplog user. Add Requires header to ensure
    that %pre script can run. [charlieb 6033]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-04]
  - Fix %pre script so that uid other than expected generates warning,
    but install proceeds. [charlieb 6033]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-03]
  - Do maildir relocation in two steps, first move top level folders into
    ~/Mail, then do depthwise move and rename into Maildir. Much faster too.
    [charlieb 8273]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.5-02]
  - Redo maildir relocation to account for leading ;. [charlieb 8272]
  - Rewrite subscription files contents, to change hierarchy separator, and to
    omit leading Mail/. [charlieb 8272]
  - For now, do not relocate ~admin maildirs - we need to work out how to avoid walking
    all of /home/e-smith/files. [charlieb 8273]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.0.4-01]
  - Updated Summary to reflect actual contents [markk 8272]
  - Fixed file list generation to include all files [markk 8272]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.3-01]
  - Break runenv into runenv and imapfront.env - we don't need export
    this way. [charlieb 8281]
  - Make sure that PRNG file is initialisedbefore we run tcpserver.
    [charlieb 8281]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-15]
  - Ensure that runenv environment is exported (we should break this
    into exportenv and runenv). [charlieb 8281]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-14]
  - Remove %post creation of SSL PRNG seed file, and change filelist
    from %ghost to %config(noreplace). [charlieb 8281]
  - Setup SASL evvironment for imap run file via runenv directory.
    Allow override of imap path from runenv. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-12]
  - Fix chown => chmod typo. [charlieb 8281]
  - Move .mailboxlist files to Maildir/.subscriptions. [charlieb 8274]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-11]
  - Fix permissions problem in imapd certificate file. [charlieb 8281]
  - Add maildir relocate script (from e-smith-email) and rewrite it
    to provide new locations compatible with dovecot. [charlieb 8273]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-10]
  - Remove email-relocate-maildirs script - it lives in e-smith-email, and
    we haven't modified it yet. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-09]
  - Remove "-D debug" from stunnel args in imap/run - we can't have
    passwords logged in plaintext. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-07]
  - Create imapd.pem certificate in the place where it is required. Add
    rc7.d startup script so that imap runs on startup. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-06]
  - Fix tcpserver CDB file name. [charlieb 587]
  - Ansure that stunnel user is created in %pre. [charlieb 587]
  - Allow various settings for run script to be set from
    an envdir, including imap daemon executable path. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-05]
  - Fix spec file to generate filelist from repository (where possible).
    [charlieb 687]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-02]
  - Add dependency on e-smith-cvm-unix-local - which itself depends
    on cvm. [charlieb 587]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-01]
  - Add PEM certificate create/update action. Add tcprules update action.
    [charlieb 587]
  - Add Obsoletes headers to force removal of e-smith-wu-imap and imap RPMs.
    Add dependency on dovecot RPM. [charlieb 587]


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.13.0-07
changelog:
  - Added imp specific horde/config/registry.php settings.  These were previously
    kept in the e-smith-horde rpm.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.13.0-06
changelog:
  - Added an includes statement to 120Menusettings that will grab the information in 
    horde/conf.menu.apps.php.  This way each of the individual horde modules don't 
    have to repeatedly process the same template for the menu array section in conf.php.
  - Added the ability to enable or disable imp menu icon from showing up on the
    main webmail screen.  To enable- config setprop imp MenuArray disabled|enabled
    enabled by default


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.13.0-05
changelog:
  - Patch to move the items in the spec file that created the template-php symlinks
    to the createlinks section.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.13.0-03
changelog:
  - Patch to servers.php templates to reflect changes in imp 4.1.3
  - Patch to header.txt template that changes name to SME Server


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.11.2-11]
  - Revert last change - the dependency should be in e-smith-horde,
    which it is [SF: 1274096]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.2-08]
  - Add Requires headers to ensure that all php and pear stuff is
    pulled in on an upgrade.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.2-05]
  - Add templates.metadata file for prefs.php (courtesy of Greg Swallow)
    [SF: 1220563].


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.2-03]
  - Resolve duplication of webmail default db records (moved to
    e-smith-base).
  - Add domain entry in imp config for each virtual domain.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-03]
  - Obsolete conf-imp action by using generic_template_expand action and
    default db fragments. Update e-smith-lib dependency. [MN00064130]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.11.0-03]
  - Only catch ..../horde/... with slash after horde. This fixes
    an issue which stopped network installs of the server _from_
    the server when webmail was enabled for HTTPS access only.
    [gordonr MN00034938]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-02]
  - Removed "RewriteEngine on" directive, since it will be on already in new
    e-smith-apache version. [msoulier MN00020885]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-02]
  - Add 'allow_resume_all_in_drafts' user option in conf.php template.
    [charlieb 9410]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-06]
  - Fold back changes submitted by Dan Brown in 1.9.0-06db - hide option to change root
    folder, and allow choice about whether to include quoted message in
    reply. [charlieb 7694]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-05]
  - Fix imap port/protocol specification. [charlieb 7893]
  - Change Copyright => License in header. [charlieb]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.9.0-04]
  - Deleted empty template-end files
  - Deleted template-begin files, modified %build
  LANG=C
  export LANG
  unset DISPLAY
   [lijied 3295]
  - Deleted template-end files, modifed %build
  LANG=C
  export LANG
  unset DISPLAY
   [lijied 3295]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-05]
  - Do template expansion of imp config files unconditionally in conf-imp.
    Set required GID and PERMS parameters. Only do conf-imp in
    bootstrap-console-save and email-update, and only do db initialisation
    at bootstrap-console-save time. [charlieb 4782]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.6.6-01]
  - Fixed conf-imp test logic that was causing script failures on a clean install
    [markk]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.6.4-01]
  - Templated header.txt, trailer.txt, and prefs.php. Incorporated changes
    from Rich to activate "Expand Addresses" feature and include SME Server
    tagline in header. [markk 3230]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.6.2-01]
  - Updated to handle IMP 3.0, using Dan Brown's contributed packages 
    [markk 2825]
  - Updated conf-imp to process IMP 3.0 templates, converted to new DB APIs
    [markk 2825]
  - Moved 30WebmailAliases fragment from e-smith-base [markk]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.0-04]
  - Remove %post and %postun events. They contain an incorrect path for "cut"
    and don't do anything. They aren't required either.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.6.0-02]
  - Remove 86ImpAlias fragment that generates global aliases.  We do this on
    a per VirtualHost basis now instead.
  - Cleanup fragment code in 85ImpAccess and fix path:
    /home/e-smith/files/primary/html -> /home/httpd/html/horde/imp


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-02]
  - Provided empty template-begin to be HTML friendly
  - Referenced new server-manager.jpg
  - Changed text to be less technical


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.4.0-02]
  - Minor touch ups to the SSLonly index.html template.
  - Make banner span width of browser window, remove
    excessive whitespace from left side of text.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.2.0-03]
  - moved imp/SSLonly/index.html -> index.shtml so as to preserve
    URL that was used to access the page, and so it can be used in
    the "click here" link.
  - modified conf-imp to expand index.shtml instead of index.html


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.2.0-02]
  - changed dependency check in conf-imp so that the database
    entry is always initialized before checking dependencies 
    and expanding templates.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-14]
  - changed action to 60 instead of 55.  Must happen after
    php and subsequently, horde.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-12]
  - remove binaries that aren't installed from defaults.php
    includes: wvHtml, xlHtml, zipinfo
  - add RPM mime type and path to RPM.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-11]
  - properly template the index.html file in SSLonly.
  - it no longer reads "www.tonez.cqa". :)


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-4]
  - conditionally expand 85ImpAccess and 86ImpAlias fragments dependant
    on service being enabled.
  - default to disabled instead of enabled in conf-imp.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - Added /horde alias to httpd.conf template as well so that
    all graphics and libraries can be located.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.1-4
changelog:
  - Added ingo specific horde/config/registry.php settings.  These were previously
    kept in the e-smith-horde rpm.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.1-3
changelog:
  - Added an includes statement to 120Menu that will grab the information in 
    horde/conf.menu.apps.php.  This way each of the individual horde modules 
    don't have to repeatedly process the same template for the menu array 
    section in conf.php.
  - Added the ability to enable or disable ingo menu icon from showing up on the main 
    webmail screen.  To initially enable - config set ingo service MenuArray disabled|enabled
    After the DB entry is created you can enable or disable this by 
    config setprop ingo MenuArray disabled|enabled


author: chris burnat <cburnat@burnat.com>
changelog:
  - [0.5.1-01sme02]
  - Addentum: this package and its dependancy have been included into the 
    build to fix issues described in [SF:1276898] "webmail filters 
    disabled".  Thanks to Greg Swallow.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.3-02]
  - Work around slapd's failure to accept 'objectClass: group' (in spite
    of schema checking being disabled). [SF: 1362868]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-16]
  - Move masq fragement from template to db [SF: 1241415]
  - Remove all use of deprecated esmith::config API.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-13]
  - Drop back to simple schema, and 6.x version of ldap-update script.
    More thought needed about how to extend the schema and how to handle
    property deletions.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-12]
  - Remove full restart of apache from panel, and add sigusr1 to ldap-update
    event handling.
  - Update ldif file templates and ldap-update script to fill out the schema
    a little, to remove bogus adding of user attribute to group entries, and
    to allow removal of properties which have been nulled out.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-10]
  - Remove explicit generic_template_expand symlink in ldap-update
    event - not required.
  - Create "finish" script to do ldif file dump on shutdown.
  - Add templates for ldif file used during ldap rebuild.
  - Handle latin->utf8 conversion in ldif templates.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-07]
  - Remove ldap-delete-dumps from post-backup event. It leaves ldap
    stopped and with no directory contents. [MN00025069]
  - Added ldap-delete-dumps to post-backup to prevent potential ldap database
    clobbering on post-upgrade. [msoulier MN00025069]
  - Update e-smith-devtools BuildRequires, and createlinks script.
    [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-06]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-05]
  - Create missing /service symlink, and add down file to service
    directory to control startup sequence. [charlieb MN00062133]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.11.1-03]
  - Include redhat/rfc822-MailMember.schema specification from earlier
    RedHat openldap packages (missing in RHEL3). [charlieb MN00056724]
  - Remove deprecated ldap-startup script. Add ldap service default fragments
    and a migrate fragment to initialize the password. [charlieb MN00056726]
  - Remove obsolete conf-migrate-ldap-variables action [charlieb MN00056733]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.11.1-01]
  - Updated createlinks.
  - Added ldap-delete-dumps to post-backup to prevent potential ldap database
    clobbering on post-upgrade. [msoulier MN00025069]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.9.0-11]
  - Modified French translation [lijied 7949]
  - Modified ldap-dump to take its domainname from /etc/openldap/ldap.conf, and
    be aware of domainname changes. [msoulier 6747]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.9.0-09]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [4.9.0-03]
  - s/HostsAllowSpec/hosts_allow_spec/ [charlieb 5650]
  - Remodified the lexicon file  [lijied 5003]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.0-02]
  - Added French lexicon for directory [lijied 5003]
  - Re-do hosts.allow template to use esmith::ConfigDB::HostsAllowSpec.
    Add dependency on up-to-date e-smith-lib. [charlieb 5650]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.6-14]
  - Override the default backgrounding of ldap restart in 
    gentle-ldap-dump action [charlieb 2745]
  - Remove deprecated serviceControl enable/disable calls from
    ldap-startup [charlieb 4458]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.6-06]
  - Create new gentle-ldap-dump action, and include it in pre-backup
    event. [charlieb 2745]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.6-05]
  - Revert ldap-dump to slapcat version, and remove symlinks from all
    actions. The ldap init script is being modified to call ldap-dump
    after slapd shutdown. [charlieb 4739]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.6-04]
  - Rewrite ldap-dump to use Net::LDAP::LDIF so that it reads data from
    ldap daemon rather than directly from ldap db files. [charlieb 4057]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.6-02]
  - Change ldap-rebuild to build directory using LDIF dump if found,
    and new data otherwise.  [charlieb 4057]
  - Re-write ldap-update and ldap-rebuild to use OO db accesses,
    for clarity.  [charlieb 4057]
  - Dump LDAP directory every time we change it. [charlieb 4057]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.5-01]
  - Remove unnecessary actions: ldap-rebuild from console-save event and
    ldap-conf from ldap-update event. [charlieb 4057]
  - Change ldap-update action so that when run during the ldap-update
    event it iterates through user and group accounts and updates records
    with current values. Link ldap-update action into ldap-update event
    in place of ldap-rebuild action. [charlieb 4057]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.4-01]
  - Use new adjust-masq action rather than restart-masq during ldap-update.
    [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.3-01]
  - Add rc7.d symlink and don't set deprecated InitscriptsOrder property
    [charlieb 4458]
  - Change use of allow_tcp_in() function to allow dynamic reconfig.
    [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.2-01]
  - Change inbound rule to use allow_tcp_in() function. The
    function actually implements connection tracking. [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.5.8-01]
  - Remove /etc/e-smith/tests/.dummy. Make empty /etc/e-smith/tests in %build
  LANG=C
  export LANG
  unset DISPLAY
  .
    [charlieb 3343]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.5.6-01]
  - Added header and footer to page [gordonr 3223]
  - Added nav bar entries to lexicon [gordonr 3155]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-08]
  - Fix code which adds the "ldap" user - it was trying to use "ldap" as
    a supplementary group (using -G) rather than as initial group (-g).
  - Remove two $! from warn statements as they are won't contain useful
    information.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-06]
  - Fix regeneration of ldap password every time slapd.conf was
    re-expanded. See Bugzilla #1966 for details.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [4.4.0-03]
  - Add restart-httpd-full call to end of web panel, after
    user confirmation of update has been sent.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.3.1-05]
  - Use Net::LDAP module in ldap-delete and ldap-update. Something broke
    in the ldap{add,modify,delete} versions of the scripts, and it's easy
    to debug, and probably more efficient to just write to the perl API.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.3.1-04]
  - Change uid/gid before execing slapadd, so that created db files have
    correct ownership
  - Reformat ldap-rebuild to fit in 80 columns.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.3.1-03]
  - Use slapadd instead of ldif2ldbm program for ldap-rebuild. Use pipe
    rather than temp file.
  - Re-add "schemacheck off" to slapd.conf - we don't pass the strict
    checking which is recommended.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.3.1-02]
  - openldap v2 changes - change ownership of slapd.conf, use different
    bundled schema files, and add indexes.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.3.0-07]
  - Break slapd.conf template into fragments, and include in-line
    at.conf and co.conf fragements, rather than use include feature.
    This is to make configuration stable across versions of openldap.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.2.0-01]
  - Added packet filter fragment to selectively allow external LDAP access
  - Linked conf- and restart-masq actions into update-ldap event


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.1.0-16]
  - Remove ldap-conf from post-upgrade action (it was occuring before
    ldap-startup, which caused a problem).
  - Delete obsolete post-restore action.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.1.0-13]
  - Fix perl warning in migrate variables script - simplify a chunk of code
    while doing it.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.1.0-12]
  - Add genLdapPassword to ldap-startup - it somehow has been lost and never
    happens.
  - Remove ldap-startup from console-save
  - Add ldap-startup to post-restore action
  - Add new bootstrap-console-save event
  - Change demo phone number from 999... to 555.... to save UK emergency
    services


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [4.1.0-11]
  - updated ldap-startup to set the defaults on a fresh
    installation
  - undid some bad changes to the conf-migrate-ldap-variables
    script


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [4.1.0-5] through [4.1.0-9]
  - changed directory web panel to read from new configuration
    database parameters
  - updated action scripts to take into account the new ldap
    database parameters
  - added conf-migrate-ldap-variables as a new action in
    both post-upgrade and post-restore


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [4.1.0-4]
  - updated copyright and fixed directory panel error in
    not checking prototypes for subroutines


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [4.1.0-2]
  - upgraded ldap-rebuild action to conform to new processTemplate
  - created dependency on e-smith-lib-4.1.0-13


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Fix some old bugs in event scripts - esmith::db was not in use
    list.
  - Replace db_get_type calls with db_get_prop
  - Re-write ldap hosts.allow template.
  - Remove duplicate my $status in ldap-rebuild.


author: Adrian Chung <adrian.chung@e-smith.com>
changelog:
  - Update web/functions/directory script to pass merged
    confServicesCombined hash to esmith::cgi::gen...
    functions.


author: Jason Miller <jay@e-smith.com>
changelog:
  - %post event for enabling ldap service automatically
    (no more post-install code required)
  - dependencies on e-smith-lib > 0.1-21
  - only expand templates if ldapd enabled
  - only add to hosts.allow if ldapd enabled
  - enable/disable service dependant on services database


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Added build dependency on e-smith-devtools, and dependency on
    e-smith-lib. Generate file list with genfilelist.


author: Gordon Rowell <gordonr@gormand.com.au> 1.16.0-08
changelog:
  - Backport of 1.17.0-06
  - Allow optional path to peeers directory in
    esmith::tcpsvd::configure_peers() [SME: 2086]


author: Gordon Rowell <gordonr@gormand.com.au> 1.15.3-41
changelog:
  - Reworded text for template-begin and change URL to /development/
    rather than /custom/ [SME: 773]


author: Charlie Brady <charlieb@e-smith.com> 1.15.3-34
changelog:
  - Remove running of kudzu during NIC probing. TODO: Find a solution
    to system reconfiguration when new hardware is added. [SME: 192]


author: Charlie Brady <charlieb@e-smith.com> 1.15.3-33
changelog:
  - Fold a.b.c.d/255.255.255.255 to a.b.c.d in local_access_spec() to
    work around bugs in applications which don't accept such specs.
    [SME: 430]


author: Gordon Rowell <gordonr@gormand.com.au> 1.15.3-32
changelog:
  - Check whether an accounts db record exists before trying to create
    the dot and underscore pseudonyms (new_record will fail silently)
    and check that the records are pseudonyms before deleting them [SME: 24]


author: Gordon Rowell <gordonr@gormand.com.au> 1.15.3-28
changelog:
  - If db exists in both the old and new locations in 
    initialize_default_databases, rename the one in the new 
    location to db.time(), avoiding the conflict and saving the 
    evidence in case it is needed later [SME: 229]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-21]
  - Allow services2adjust directories to contain files rather than just dangling
    symlinks. Files can contain more than one actions to perform. [SF: 1270644]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-19]
  - Fix restart of enabled supervised services which we are attempting to stop.
    [SF: 1357629]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-18]
  - Set default for $type in esmith::cgi::genSmallCell, to prevent some log
    noise. [SF: 1357830]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-13]
  - Build driver list from .ko files as well as .o files. Untaint driver
    names while building list. [SF: 1323270]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-12]
  - Fix "defaults" handling so that values which evaluate to false are
    not overridden by default. [SF: 1303885]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-10]
  - Provide networks method in esmith::NetworksDB. [SF: 1296099]
  - Support a "localhost" configuration in esmith::tcpsvd:configure_peers
    [SF: 1294719]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-09]
  - Remove deprecated functions from esmith::utils. [SF: 1295851]
  - Include only "network" records in local_access_spec. [SF: 1296099]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.3-02]
  - Move databases default location from /home/e-smith to /home/e-smith/db.
    During esmith::utils::initialize_default_databases, move from old to new
    location before doing db migrate actions. [SF: 1216546]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.15.2-03]
  - Fixed misleading comment in util.pm
  - Added 'use' statements in Record classes for SOAP compatibility
  - Fixed undefined max_len warning
  - Added explicit writeconf calls in db::Record.pm, needed for setting props
    via SOAP


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.2-02]
  - Allow db open API to use default path if a simple filename
    is provided as arg. This is preparation for move of dbs to
    /home/e-smith/db. Patch by Shad Lords.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-43]
  - Ensure that esmith::util::LdapPassword returns bare string without
    newline terminator.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-42]
  - Remove .rpmsave and .rpmnew symlinks (as well as files). [SF: 1217969]
  - Handle missing description in pcitables entries.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-40]
  - Add preinstall scripting to create required accounts/groups if they
    don't already exist. [SF: 1210723]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-39]
  - Show Text::Template error text rather than inappropriate $! if template
    expansion fails.
  - Change error to warning if a config item is set with an empty "type"
    property.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-37]
  - Update directory list so that ethernet drivers from kernel-unsupported are
    added to "choose by driver" list.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-36]
  - Rework esmith::tcpsvd::configure_peers so that it doesn't chdir.
  - Fix generic_template_expand so that templates.metadata doesn't
    need to set OUTPUT_FILENAME is TEMPLATE_PATH is changed. This
    matches what expand-template already does.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-35]
  - Change numerous calls to "croak" in esmith::template
    to "carp ...; return", so that problem with any single
    template expansion doesn't terminate calling program.
    [MN00075009]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-31]
  - Remove pseudonyms of pseudonyms when removing user
    accounts. Adapted from patch submitted by Shad. [MN00039941]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-29]
  - Fix bug in output to empty file when FILTER is used
    during template expansion. [charlieb MN00050075]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-28]
  - Refresh contents of /etc/sysconfig/hwconf before listing
    network adaptors [MN00069993]
  - Fix typo in documentation of esmith::DB::db - reported from Tanna -
    http://www.livejournal.com/users/gcrumb/61169.html (thanks Dan!)


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-25]
  - Update perms and ownership when expanding templates, regardless of
    whether file content has changed or not. [MN00068043]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-24]
  - Fix the insertion of implicit actions into sorted action list in
    event.pm. Problem was perl syntax ambiguity.  [MN00066406]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-22]
  - Move /home/e-smith/* to e-smith-base. [MN00066635]
  - Move generic-template expand to S05 position in sort, and
    adjust-service to S90. Fix run-time error. [MN00066406]
  - Don't attempt to execute non-executable action scripts.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-21]
  - Implicitly include template expand and services adjust actions
    in each event if the respective metadata directory exists.
    [MN00066406]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-20]
  - Add "adjust" to list of verbs which serviceControl groks,
    to allow for "masq adjust". [MN00065576]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-18]
  - Fix typo. [MN00064412]
  - Improve die() message in esmith::config::STORE. [MN00064394]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-17]
  - Fix broken logging (and reduce logging) in initialize_default_databases.
    [MN00064412]
  - Fix inappropriate use of global $_ in initialize_default_databases.
    [MN00064415]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-16]
  - Read templated file metadata (if any) from file tree under 
    /etc/e-smith/templates.metadata. Update expand-template to
    use current API. [MN00061830]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-14]
  - Fix Authen::PAM dependency header [charlieb MN00040240]
  - Use kudzu's generated /etc/sysconfig/hwconf file for NIC detection
    [charlieb MN00056220]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.1-13]
  - Updated esmith::ethernet's search code to remove File::Find, as it doesn't
    get along with taint checking. [msoulier MN00052510]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.1-12]
  - Updated esmith::ethernet's search code such that is it more adaptable, and
    recurses the directories given. [msoulier MN00052510]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.1-11]
  - Updated esmith::ethernet's search paths for network drivers.
    [msoulier MN00052510]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-09]
  - Updated requires with new perl dependencies. [msoulier MN00040240]
  - Remove "AutoReqProv: no" so that "Provides" headers are auto-generated.
    [charlieb MN00040240]
  - Remove anachronistic "require v5.6.0" directives. [charlieb MN00050370]
  - Avoid use of Filter::Handle in esmith::template. [charlieb MN00050075]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-20]
  - Moved error handling from esmith::DB::db to esmith::DB, since it should not
    be database implementation specific. [msoulier MN00035059]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-19]
  - Propagated migration failures up to calling code for reporting to syslog.
  - Propagated creation failures up to calling code. 
  - Moved lexicon $Error in esmith::DB::db to a class property so it can be used
    by subclasses. [msoulier MN00035059]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-17]
  - Added print statements to initialize-default-databases for post-install
    debugging. [msoulier MN00035059]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-14]
  - Greatly simplified the _mysystem function by ripping out open3.
    [msoulier dpar-20385]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-13]
  - Backed-out change in esmith::util, as it's non-trivial there with the exec.
    Completed update of esmith::event, and separated the esmith::Logger class.
    [msoulier dpar-20385]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-12]
  - Removed use of the logger entirely, replacing it with an abstracted
    interface to the Sys::Syslog module. [msoulier dpar-20385]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-11]
  - Fixed esmith::util::network::isValidIP() so valid IP substrings no longer
    return true values. [msoulier 9308]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-10]
  - Added a check in STORE in esmith::config for invalid attempts to set a value
    without a type. Also escalated previous warnings for undef key and value to
    fatal exceptions. [msoulier 7386]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-09]
  - Now trimming whitespace around keys and values during esmith::config STORE
    events, to prevent invalid keys and values from being saved. [msoulier 7021]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-04]
  - Fixed AccountsDB.pm to handle group names with hyphens and periods, to match
    the error message in the groups panel, and the rest of the group/user
    behaviour. [msoulier 10236]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-03]
  - Skip any directries when iterating over action scripts in esmith::event.
    Add logfile timestamp symlinking to generic_template_expand action.
    Use templates2expand and logfiles2timestamp subdirectories of the event
    directory. Fix shebang line. [charlieb 10035]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [0.3.0-03]
  - Fix db/signal-event completion algorithms
  - Optimize expand-template completion algorithm


author: Gordon Rowell <gordonr@gormand.com.au> 1.11.0-13
changelog:
  - Changed the static CSS files into directory templates, which are
    expanded in bootstrap-console-save [SME: 408]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-05]
  - Added the sme_panel_menu.css file, for tabbed menu support. Added a link to
    it in the standard header.
    [msoulier MN00030141]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-03]
  - Added vertical-align: text-top; to td.sme-noborders-label to ensure that
    text is aligned vertically at the top of the cell. [msoulier dpar-22042]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-02]
  - Check that files are executable before listing in the
    manager navigation frame. [charlieb 9197]
  - s/Copyright/License/.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.5-15]
  - Removed borders around "warning" cells so they don't look like
    they are bleeding on some browsers (e.g. Mozilla) [gordonr 8127]


author: Mike Dickson <miked@e-smith.com>
changelog:
  - [1.9.5-08]
  - changed class for sme-noborders-label to width=33% rather than
    a fixed 250px wide, due to limitations in IE6 [miked 7676]
  - added class "sectionbar" for use [miked]
  - modified "td.noborders-label" colour [miked]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.5-04]
  - Move navigation dbs to /home/e-smith/db/navigation. We shouldn't generate
    them in /etc/e-smith/locale and we should name them by language, in case
    we share lexicons (e.g. fr/fr-ca) [gordonr 7733]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.3-13]
  - Made use of esmith::I18N in navigation-conf. Renamed locale->lang
    to make it more obvious that we are dealing with a langtag [gordonr 5212]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.3-08]
  - Generate navigation.info files (config db format) for each supported 
    language in /etc/e-smith/locale/{language}/etc/e-smith/web/functions
  - Read the navigation.info file for the preferred language when 
    displaying the navigation bar 
  - TODO: Actually select the correct navigation.info file [gordonr 5493]


author: Mike Dickson <miked@e-smith.com>
changelog:
  - [1.9.3-06]
  - updates and comments in the CSS files [miked 3185]
  - commented out the two links in the header that are not ready yet
    (log out and update available) [miked 5967 and 492]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.1-02]
  - templated header.htm [miked 5826]
  - modified header.htm template to link to online-manual and blades 
    [gordonr 5826]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-01]
  - Move admin apache SSL mutex and SSL session cache to files named admin_xxx
    to avoid name clash with main server. [charlieb 3830]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.5.8-01]
  - Remove unnecessary <p> tags in navigation html [tonyc 3377]
  - Fix navigation panel to not import symbols from fm subclasses 
    [tonyc 3109]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.3-01]
  - Back out gettext() calls - esmith::FormMagic was Croaking on
    bad lexicons for old panels. Now properly localises the navigation
    bar if the localisations exist [gordonr 3155]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.2-01]
  - Added explicit gettext() call to localize navigation bar while
    figuring out esmith::FormMagick won't do it for me [gordonr 3155]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.4.3-01]
  - Fixed regexp for ignoring pleasewait(-.*?). Two each in 
    pleasewait/noframes. Reduced to one in each [gordonr]


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.4.2-01]
  - rollRPM: Rolled version number to 1.4.2-01. Includes patches up to 1.4.1-02.
  - mkdir panels/manager/common in spec file for CVS migration


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.4.1-01]
  - rollRPM: Rolled version number to 1.4.1-01. Includes patches up to 1.4.0-02.
  - navigation now ignores pleasewait-* files


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-02]
  - Use dated log file for ssl_engine_log. Name the file ssl_engine_log.xxxxx
    to keep it distinct from the main web server's log file.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-07]
  - Move genNavigationHeader() down below the script grokking code in
    "navigation", to help Netscape's faulty rendering.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-02]
  - Removed image from top of navigation - now in separate frame
  - Added Provides: server-manager


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-03]
  - Adding SSL enabling templates for port 981.
  - Adding 01localAccessString fragment for use in SSL 
    enabling templates.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-02]
  - Prepend "/server-manager" to hrefs, to allow consistent path interpretation
    between admin and standard web server.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.1-03]
  - Change font setting in navigation - use css class instead.
  - Add newlines after each link in navigation frame - so that HTML
    source is readable.
  - Add manager.css, which came from e-smith-base. Let's have all look&feel
    in the one RPM.
  - Check whether "files" in cgi-bin directory are actually directories. Skip
    any directories.


author: Gordon Rowell <gordonr@gormand.com.au> 1.12.0-02
changelog:
  - Move expansion of user table into set.password so it works
    for command line runs as well as db restores [SME: 1229]


author: Charlie Brady <charlie_brady@mitel.com> 1.11.1-16
changelog:
  - Update dependencies to include mysql-server RPM. Remove obsolete
    dependency on e-smith-packetfilter. [SME: 737]


author: Charlie Brady <charlieb@e-smith.com> 1.11.1-14
changelog:
  - Ensure that mysql is restarted after restore, and avoid race conditions
    during mysqld restart during fix_privilege_tables. [SME: 73]
  - Remove unnecessary mkdirs in build section - they're done by createlinks
    script.


author: Gordon Rowell <gordonr@gormand.com.au> 1.11.1-13
changelog:
  - Call fix_privilege_tables much earlier and call mysqladmin shutdown 
    after doing so - Thanks Paul Floor [SME: 73]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-09]
  - Avoid error from db-delete action if db files are not present
    (e.g. because they have already been deleted). [SF: 1273797]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-08]
  - Fix restore of dumped tables after restore from backup.
    Reset root password after restore of dumped dbs. [SF: 1273797]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-05]
  - Use -f flag in mysql-delete-dumped-tables so that backup
    doesn't fail if the file is missing.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-04]
  - Change /root/.my.cnf template to use esmith::util::LdapPassword
    rather than read of ldap.pw file, to eliminate ordering
    depenendence on ldap.pw template expansion.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.1-03]
  - Restore old mysql.init behaviour, to leave any failed scripts
    behind for a later attempt, or for admin investigation. [MN00079643]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-16]
  - Fix typo and runtime error in run script. Detect table dump
    to be restored and set it up for mysql.init to restore it.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-15]
  - Remove trap stuff in run script (which works around mysqld brokenness)
    and add custom control/{t,q,d,i} scripts.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-14]
  - Remove obsolete e-smith-packetfilter Requires: header.
  - Do db initialisation in run script, as required, rather than via
    special action script.
  - Replace all restart-, start- and reload- actions with calls to
    'adjust-services'. Update e-smith-lib version dependency. [MN00065576]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-13]
  - Fix permissions on log/run script. Add missing /var/log/mysqld dir.
    [charlieb MN00061220]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-12]
  - Add missing down file in service directory.. Fix permissions
    on run script. [charlieb MN00061220]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-10]
  - Run mysqld under supervise. [charlieb MN00061220]
  - Replace deprecated Copyright header with License. [charlieb]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-08]
  - Fixed mysql.init leaving behind failed scripts, and the lack of proper
    initscript command-line arguments. [msoulier 10866]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-07]
  - Updating comments in my.cnf [tonyc 10862]
  - Don't show redundant log-error option in mysqld_safe [tonyc 10862]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-05]
  - Add /var/run/mysqld dir for mysql.com compatibility [tonyc 10862]
  - Fix initscript symlink [tonyc 10862]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-04]
  - Add initscript symlink for mysql.com compatibility [tonyc 10862]
  - Adding /etc/logrotate.d/mysqld templates [tonyc 8662]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-03]
  - Clean up /etc/my.cnf templates and add comments [tonyc 10862]
  - Add a more --user=mysql options to actions for 100% coverage [tonyc 10862]
  - Remove redundant basedir/datadir options from actions [tonyc 10862]
  - Clean up mysql-preload fork/exec stuff [tonyc 10862]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-02]
  - Add --user=mysql to mysqld args in conf-mysql-password [tonyc 10853]
  - Future-proof /etc/my.cnf for s/safe_mysqld/mysqld_safe/ change [tonyc 8662]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-02]
  - Restrict mysql by default to use only unix domain socket. [charlieb 6430]
  - Change mysql dump in pre-backup to use quotes, to fix backup/restore problem.
    [charlieb 7953]
  - Remove conf-mysql-startup - use db initialisation fragments instead
    [charlieb 5665]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.4-10]
  - Reverse the recent logic change in mysql.init, now that action() function
    in /etc/rc.d/init.d/functions is repaired. Replace deprecated use
    of backticks. [charlieb 4728]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.4-07]
  - Add fragment to my.cnf template to disable (for now) innoDB tables, and
    hence prevent log file noise. [charlieb 4731]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.4-05]
  - Set $HOME in mysql.init script itself, otherwise it's not set when
    run from the rc run script. Fix filenames displayed in progress message.
    [charlieb 4782]
  - Remove redundant mysql.conf action script [charlieb 4782]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.4-03]
  - Change mysql-dump-tables and mysql-delete-dumps events to pre-backup and
    post-backup events. [charlieb 2745]
  - Add mysql-start-if-required action, which checks if mysqld is running,
    and start it, then runs mysql.init, if not. Linked into email-update event.
    [charlieb 4782]
  - Redo conf-mysql-startup using ConfigDB and remove no longer necessary
    serviceControl() calls. [charlieb 4782]
  - Redo mysql-conf using esmith::templates. [charlieb 4782]
  - Change mysql.init script so that it can run programs or just load sql.
    [charlieb 4782]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.4-01]
  - Remove 45DenyMySQL template fragment - it's no longer needed since we
    are using connection tracking. [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.3-01]
  - Add rc7.d symlinks and don't set obsolete InitscriptsOrder property
    of services. [charlieb 4458]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.5.0-03]
  - Adding more verbose error messages to mysql-dump-tables.
  - It should exit 0 if an error occurs, it should exit 1, and complain.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.5.0-02]
  - mysql-restart now restarts mysql if it is running, rather
    than only starting it if it is stopped.
  - mysql-shutdown has been added
  - conf-mysql is now mysql-initialize-db
  - new template /etc/my.cnf added
  - new action mysql-conf which expands /etc/my.cnf linked to
    bootstrap-console-save


author: Adrian Chung <mac@e-smith.com>
changelog:
  - [1.5.0-01]
  - Rolled version number to 1.5.0-01. Includes patches upto 1.4.0-03.
  - Removed directive to remove post-restore event.


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.3.0-08]
  - fixed tie bug in conf-mysql-startup script which prevented the mysqld service
    from being initialized properly.


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.3.0-07]
  - created mysql.init initscript
  - added serviceControl code for mysql.init in conf-mysql-startup


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-07]
  - add packetfilter template fragment to deny tcp/3306
    Make packet filter fragment depend on the service db. Only block
    TCP SYN packets.
  - add Requires for e-smith-packetfilter.
  - Add required permissions parameter to mkdir calls.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-03]
  - Make packet filter fragment depend on the service db. Only block
    TCP SYN packets.
  - Add required permissions parameter to mkdir calls.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.0-02]
  - add packetfilter template fragment to deny tcp/3306
  - add Requires for e-smith-packetfilter.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.0-01]
  - Development stream, includes all patches up to and including
    1.2.0-05.
  - Ported Charlie's MySQL->mysql requires change to development
    stream.  Was 1.2.0-06, but not built.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-30]
  - leave logrotate.d/mysqld alone now, back out patch
  - expanding /root/.my.cnf with the password alleviates
    need to pass -p to mysqladmin


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-28]
  - Create new mysql-conf-account script - set up mysql account and add it
    to the accounts db. Called from post-install and post-upgrade


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-25]
  - mysql-dump-tables and mysql-import-tables actions do nothing if mysqld
    is not running.
  - mysql-dump-tables action does nothing if the dump directory does
    not exist.
  - mysql-import-tables action does nothing if there is no dump file from
    which to import.
  - created 2 new events - mysql-delete-dumps and mysql-dump-tables
  - removed mysql-import-tables action from post-restore
  - added mysql-import-tables action to post-upgrade
  - created new action mysql-delete-dumped-tables
  - added patch22 to list of patches to be applied - must have been
    missed in 1.1.0-24.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-23]
  - mysql-{import,dump}-tables checks for enabled status of mysqld
    before attempting to dump/import


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-16]
  - conf-mysql needs to run even if the service isn't enabled
    so that during runtime, it can be enabled, and just go.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-14]
  - conf-mysql-password checks for MySQL datadir first
  - mysql-{dump,import}-tables moved to
    /etc/e-smith/events/actions
  - mysql-import-tables added to post-restore action


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-13]
  - conf-mysql-password resets the root password, and
    gets rid of two blank account entries
  - /sbin/e-smith/mysql-dump-tables has been added
    which dumps mysql.dump to /home/e-smith/db/mysql
  - /sbin/e-smith/mysql-import-tables has been added
    which imports a mysql.dump text file back into a
    running system


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-12]
  - conf-mysql-password now runs in console-save as well.
  - if the system is started up without mysqld enabled, 
    a password won't be set, since there are no mysql tables
    initialized yet.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-11]
  - conf-mysql-password runs without checking whether mysql
    is enabled.  It does not require mysqld to be started, and
    should always at least keep the root password in sync, in
    case mysqld is enabled, and started during a running system
    session.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-9]
  - make conf-mysql-password set the mysql password, instead of
    setting up a once-run script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-8]
  - Create new mysql-conf-startup script - split from mysql-conf
  - Create new bootstrap-console-save event and install mysql-conf into it


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-6]
  - added UnsavedChanges wrapper around script so that it resets
    UnsavedChanges flag appropriately.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - Added conf-mysql-password to post-install which sets 
    up mysqld-password in rc7.d to be run once to set the 
    password.  The mysqld-password script removes it's link
    from runlevel 7 and updates the configuration/services
    database.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-05]
  - Add Requires headers for kernel module RPMs, to ensure that module RPMs are
    added during install/upgrade.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-04]
  - Update to current db access APIs, in readiness for move of dbs to private
    directory. [SF: 1216546 (Shad)]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-02]
  - Add new config params required for netatalk 2.x (thanks to
    Roger Buck for research).
  - Use only a single HUP signal to tell afpd to reload its
    config.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.12.0-05]
  - Optimise template expansion v event matrix. Don't call atalk-reload
    during network-{create,delete}.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.12.0-04]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]
  - Add config -> netatalk.conf symlink for compatibility with later netatalk
    package. [MN00064917]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-05]
  - Re-do hosts.allow template to use esmith::ConfigDB::HostsAllowSpec.
    Add dependency on up-to-date e-smith-lib. [charlieb 5650]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.11.0-02]
  - Remove special case for "Primary" in AppleValumes.default now
    that it is a pre-defined i-bay [charlieb 5652]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.2-01]
  - Remove dangling template fragments and don't create directories
    which we do not need. [charlieb 4626]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.1-01]
  - Move configuration file templates back to /etc/atalk. Rename
    netatalk.conf to config. Remove obsolete /etc/atalk/netatalk
    and /usr/atalk/netatalk directories if found. [charlieb 4626]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.8-01]
  - Let's get the "is it a link" test right. Use shell version, not perl version!
    [charlieb 3489]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.7-01]
  - Remove /usr/etc/netatalk symlink if it happens to be there, before installing
    new version which contains a /usr/etc/netatalk directory [charlieb 3489]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.6-01]
  - Netatalk won't follow a symlink to read its configuration. Regenerate
    the configuration files in /usr/etc/netatalk [gordonr 3489]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.4-01]
  - The netatalk package owns /etc/atalk/config, we shouldn't try to
    own it as well. Delete the file and adjust to a symlink when  
    configuring netatalk [gordonr 3489]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.3-01]
  - The latest version of netatalk has decided that some things should
    be in /usr/etc/netatalk (was /etc/atalk/netatalk last time). Some, 
    but, not all. The /etc/init.d/atalk file doesn't pass options to 
    point the config to another directory. So, let's just symlink
    /usr/etc/netatalk -> /etc/atalk/netatalk until this stabilises
    [gordonr 3489]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.2-01]
  - And it helps not to then unlink /etc/atalk/config in the action
    script [gordonr 3207]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.1-01]
  - Sigh - they've gone back to /etc/atalk/config - add a link to
    make it happen. [gordonr 3207]
  - Add /etc/atalk/netatalk directory for template output files [gordonr 3207]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.0-01]
  - Rolling development stream
  - Call atalk-restart instead of atalk-reload in printer-{create,delete}
    Note: This will disrupt existing shares, but reload does *nothing*
    with papd for printers [gordonr #2879]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.6.2-01]
  - Migrating atalk templates away from SambaServerName.
  - They now use atalk|ServerName, defaulting to $SystemName.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.0-03]
  - Remove randnum authentication option, as that required cleartext passwords
    on the server, and interferes with PAM authentication if it is enabled.
  - Remove the fragment which suggests -G for guest access - that doesn't work
    with this version.
  - Remove all template-{begin,end} fragments as they are provided by e-smith-lib.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.0-02]
  - Move all netatalk templates from .../etc/atalk into .../etc/atalk/netatalk
    and no longer use the OUTPUT_FILENAME feature to expand them into the
    correct directory. This will allow custom templates to work as advertised
    (but will break any existing custom templates).


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.5.0-05]
  - Add AFPD uams list fragment so that AFPD actually loads uams
    on startup.
  - Comment out 20Guest template, we don't want to support guest
    access anymore.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-03]
  - Migrate all config files to /etc/atalk/netatalk/ directory,
    for compatibility with netatalk 1.5pre8 RPM.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-02]
  - Move /etc/atalk/config to /etc/atalk/netatalk.conf
  - Change conf-atalk to expand the correct template
  - Remove template-{begin,end} fragments - not required.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-02]
  - Added atalk-reload - send _two_ SIGHUPs to all afpd processes
  - Removed restrictions on i-bay modes availabele for netatalk. This
    also needs a change to e-smith-base to remove comments from the panel.
  - Renamed conf-atalk,conf-atalk-startup,restart-atalk to atalk-*.
  - Updated Copyright notices


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.2.0-02]
  - Changed shares to show up directly to the files
    subdirectory if they have asked for public access = none


author: Charlie Brady <charlieb@e-smith.com)
changelog:
  - [1.1.0-6]
  - Create new bootstrap-console-save event which doesn't restart servers
  - Add links for post-restore event
  - Remove restart-atalk link for post-install


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-2]
  - Split /etc/atalk templates
  - Changed HomeDirectory to ~/home
  - Changed ATALK_NAME to variable $SambaServerName from fixed 'e-smith'


author: Brett Jensen <brett@e-smith.com>
changelog:
  - remove post-install checks from conf-atalk-startup file.
  - only expand templates if service is enabled
  - check is done in the conf-atalk script, not
    the templates.


author: Charlie Brady <charlieb@e-smith.com)
changelog:
  - Update services database when enabling/disabling startup.
  - Use genfilelist to maintain rpm filelist


author: Charlie Brady <charlieb@e-smith.net>
changelog:
  - Add /etc/hosts.allow template
  - use createlinks script rewritten in perl
  - Don't mark templates as config files.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-10]
  - Remove /etc/ntp.conf in %pre script, to work around
    problems with update of ntpd RPM. Add conditional expand-template
    to run script to be sure that file is regenerated before we need 
    it. [SF: 1237968]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-07]
  - Increase MemLimit setting to 6MB (for CentOS4 build). [SF: 1225925]
  - Remove obsolete "authenticate" directive from ntpd.conf. [SF: 1225925]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-04]
  - Remove explicity call of generic_template_expand - it's now
    implicit. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-03]
  - Fix template expansion of /etc/ntp/step-tickers and ./env/MEMLIMIT
    [MN00064130]
  - Use generic service adjust action for reload/restart. [MN00065576]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-02]
  - Combine set-date and set-clock, and use a shell script rather than
    perl. [MN00064941]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.13.0-21]
  - pool.ntp.org now uses 0, 1, 2 prefixes rather than relying on
    short DNS TTLs. So, we need to add the prefixes if we are talking
    with pool.ntp.org or {region}.pool.ntp.org and revert to listing 
    "normal" NTP servers once [gordonr MN00053174]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.13.0-20]
  - List the ntp server three times, for DNS round-robin servers, 
    such as pool.ntp.org, {region}.pool.ntp.org and time.nrc.ca
  - [gordonr MN00053174]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-19]
  - Convert ntp.conf/10localhost template fragment from DOS text format
    [charlieb MN00050805]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-18]
  - Convert ntp.conf/30other template fragment from DOS text format
    [charlieb MN00050805]
  - Don't create pid file, and remove one if we find an old one.
    [charlieb MN00050806]
  - ntpdate should log to standard output, not to syslog. [charlieb MN00049205]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-17]
  - Need to create empty /service/ntpd/env directory for template to be
    expanded into.  [charlieb MN00050192]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-16]
  - Increase memory limit for running ntpd. While we are at it,
    we'll make the value templated, and update code in conf-ntpd 
    to modern standards.  [charlieb MN00050192]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.13.0-07]
  - Fixed a typo in createlinks. The new ntpd initscript must not conflict with
    the one in the ntpd package. [msoulier 10586]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-02]
  - Remove deprecated -startup script, and add default db
    fragments [charlieb 9553]
  - s/Copyright/License/


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-19]
  - Fix datetime panel when ntp stays disabled [tonyc 1588]
  - Show date when ntp is enabled [tonyc 1588]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-13]
  - Fix datetime to loop back to Initial page w/ status report [tonyc 1588]
  - Fix link to Verify page [tonyc 1588]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.11.0-12]
  - Add container table to fix IE 6 handling of table-layout: fixed [tonyc 1588]
  - Remove redundant newlines from some print statements [tonyc 1588]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.11.0-10]
  - Major refactoring and cleanup of datetime.pm [tonyc 1588]
  - Expand tabs to spaces in datetime.pm [tonyc 1588]
  - Add radio buttons and don't allow setting date manually when ntp is enabled
    [tonyc 1588]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.11.0-09]
  - Deleted inappropriate template-begin file
    deleted empty template-end files [lijied 3295]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.3-01]
  - Remove masq script update and restart symlinks. They are no longer
    needed not that we have connection tracking enabled. [charlieb 4501]
  - Add rc7.d symlink, and don't set obsolete InitscriptsOrder property
    [charlieb 4458]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.2-01]
  - Remove NTP masq template fragment. We no longer need it, as netfilter
    connection tracking allows NTP replies. [charlieb 4499]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.3-01]
  - Localised "Network Time Server" heading [markk 3311]
  - Localised date display [markk 3311]
  - Added nav bar entry [gordonr 3155]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.7.2-01]
  - Moved all code into module datetime.pm [markk 3159]
  - Converted to FormMagick panel and internationalized [markk 3159]
  - Added POD and testsuite [markk 3159]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-02]
  - Initialise TimeZone db setting from /etc/sysconfig/clock if not set
  - Branding changes in web panel.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-12]
  - Expand ntp.conf always, even when ntpd is disabled. Otherwise ntpd
    refuses to shut down.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.2.0-05]
  - Updated datetime panel to run the timeserver-update
    event (added rules to make sure that updates to the
    configuration database aren't affected UnsavedChanges flag).


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.2.0-04]
  - Added a comment in the ipchains rules
  - Added symlinks for the conf-masq and restart-masq actions
    to be run as part of timeserver-update event (thereby
    expanding the /etc/rc.d/init.d/masq template).


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.2.0-02]
  - Fix perl syntax error in masq template fragment
  - Save/restore unsavedchanges flag around timezone change.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-28]
  - Remove restart-ntp from post-upgrade action
  - Remove post-restore event
  - Tighten up NTP packet filter rule.
  - Remove conf-ntpd from ip-change event
  - Remove duplication of timezone migration code - it is in base as well.


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-27]
  - Changed conf-timezone action so that during an upgrade
    it will preserve the existing symlink for /etc/localtime
    and use that value to set the configuration database
    value for TimeZone


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-25]
  - combined the timezone-update and datetime-set events
    into a single event (and might combine the action scripts
    as well)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-24]
  - added new service control mechanism to not background
    the proxy-stop action to shutdown squid


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - moved all date and time settings into a new event/action
    sequence (datetime-set) which then calls the proxy-stop,
    set-date, set-clock, proxy-start and removed the previous
    system calls from the web manager form 
  - removed the squid stop/start actions from conf-timezone
    action


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - Updated createlinks to have update-timezone and
    update-timeserver events link in the action restart-syslog
    to improve on the strange log times recorded otherwise


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - Added service control to stop the proxy server (squid)
    from running prior to changing the timezone information
    in conf-timezone, then starting it again after the change
    to remove squid hangups on shutdown


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - Removed the %postun section which was deleting ntpd
    configuration values after uninstalling e-smith-ntp
    (which occurs in an upgrade) and the %post section
    which expanded the templates for ntpd without checking
    the status (now done properly in the actions)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - Fixed the /etc/ntp.conf template expansion to pull
    the NTPServer value from the ntpd service configuration
    settings


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - Merged the conf-clock and reset-link into a single
    action script of conf-timezone
  - Removed symlinks to post-upgrade and update-timezone
  - Added symlink for conf-timezone to update-timezone
  - Added symlink for conf-timezone to bootstrap-console-save
   (instead of post-upgrade)


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-12]
  - updated datetime panel to take into account the new
    action scripts called by timezone-update event


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-9]
  - added conf-clock to configure /etc/sysconfig/clock
  - added reset-link to unlink and re-symlink
    /etc/localtime to the correct timezone


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.1.0-7]
  - Charlie changed spec file in %post and %postun to
    generate ntpd templates in runlevel 7 and to remove 
    it if e-smith-ntp is uninstalled
  - Added configuration parameter for timeZone which
    will be used by default as the timezone value for
    date and time, otherwise it defaults to /etc/localtime


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-6]
  - add new event timezone-update that calls restart httpd
  - datetime panel modified to call both time{server,zone}-update


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-5]
  - Disable ntpd by default - without an NTPServer setting there's no
    point in enabling ntpd.
  - Remove timeserver web form. Add Jay's new combined datetime and
    timeserver form.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - Changed NTPserver to NTPServer in 00timeServer fragment
  - Modified timeserver panel to record timeserver value to ntpd
    property instead of legacy variable.


author: Shad L. Lords <slords@mail.com>
changelog:
  - Make password secure for ups users
  - Allow local network to monitor ups as slaves
  - Make localhost master for ups
  - Make startup/shutdown scripts use upsdrvctl so poweroff works


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-05]
  - Remove unused /etc/usb/usb.usermap template fragment.
  - Add nut db entries to default configuration (Shad).
  - Add missing templates.metadata files for all templated
    files. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-03]
  - Port to version 2.0 of nut (contributed by Shad Lords).
  - Change nutups user to nut to confirm with new package
  - Upgrade templates to support new 2.0 format [SF: 1226389]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.3-04]
  - Change group and permissions of various configuration files, so that
    files can be reloaded by programs running non-root. This is a merge
    of Shad Lord's contributed code and my changes to use group read
    permission. [charlieb 8405]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [0.0.2-12]
  - Delete ./etc/rc.modules/template-begin,
    and modified %build
  LANG=C
  export LANG
  unset DISPLAY
   [lijied 3295]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [0.0.2-07]
  - load usb* modules in rc.modules for hidups support
  - add header to template-begin [tonyc 2753]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [0.0.2-06]
  - fix NOTIFYFLAG entries in upsmon.conf [tonyc 2753]
  - turn off nut service by default [tonyc 2753]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-05]
  - Move mknod of device node to %post script. It can't run in %pre, because
    the enclosing directory has not yet been pulled out of the RPM archive.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-04]
  - Fix syntax errors in one of the upsmon.conf template fragments.
  - Add ups runtime state directory. Create hiddev device node with
    appropriate permissions inside that directory.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-03]
  - Change configuration so that most UPS events are logged only to
    syslog, but SHUTDOWN is done using "signal-event". Response
    to UPS events can be tuned via config DB entries.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-02]
  - Add /etc/rc.d/init.d/nut symlink so that service starts up.
  - Fix up a few broken templates.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-09]
  - Use TCPPort fragment rather than explicit masq template fragment to
    create hole in firewall.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-08]
  - Use generic_template_expand action, in place of conf-oidentd.
    Update e-smith-lib and e-smith-devtools dependencies. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-04]
  - Add requires for later version of oidentd. Add -m option to enable
    masqueraded support (may be required, but needs custom template for
    full support). [charlieb 9546]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-02]
  - Run oidentd under supervise. Use default template fragments to init db
    entry. [charlieb 9546]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.2-01]
  - Fix template issue - need "esmith::util", otherwise expand-template succeeds
    but action script fails. [charlieb 4435]


author: Gordon Rowell <gordonr@gormand.com.au> 1.11.0-28
changelog:
  - A user is allowed access to rssh protocols if:
    - They have PasswordSet==yes 
    - They have AllowRSSH==yes or
      VPNClientAccess==yes but not AllowRSSH==no [SME: 877]


author: Gordon Rowell <gordonr@gormand.com.au> 1.11.0-27
changelog:
  - Remove defaults for sshd{Allow*} and the templates for rssh.conf [SME: 877]
  - Allow a user all of the rssh protocols if AllowSSH is yes [SME: 877]


author: Gordon Rowell <gordonr@gormand.com.au> 1.11.0-23
changelog:
  - Add template for /etc/rssh.conf [SME: 42]
  - Default sshd{AllowSCP, AllowSFTP} == yes [SME: 532]
  - Default sshd{AllowRDIST,AllowRSYNC,AllowCVS} == no


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-15]
  - Default to protocol 2 only on new installs, and '2,1' for
    upgrades where $sshd{Protocol} is not defined.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-14]
  - Use generic_template_expand action for all template expansions from
    sshd-conf.  Update e-smith-lib dependency. [MN00064130]
  - Replace sshd-reload with call to 'adjust-services'. [MN00065576]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-13]
  - Updated requires with new perl dependencies. [charlieb MN00040240]
  - Clean BuildRequires. [charlieb MN00043055]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-10]
  - Put full path to sshd in run script to work around assumption of full path
    in sshd sighup handler. [msoulier 9549]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-08]
  - Moved the shebang line to a place where it actually matters. Tell me it's
    friday. [msoulier 9549]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-02]
  - Re-do hosts.allow template to use esmith::ConfigDB::HostsAllowSpec.
    Add dependency on up-to-date e-smith-lib. [charlieb 5650]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.3-01]
  - Add rc7.d symlink and don't set deprecated InitscriptsOrder property
    [charlieb 4458]
  - Change use of allow_tcp_in() function to allow dynamic reconfig.
    [charlieb 4501]


author: Michael G Schwern <schwern@e-smith.com>
changelog:
  - [1.5.3-01]
  - Tested & documented sshd-reload action [schwern 2932]
  - Tested & documented sshd-conf and sshd-conf-startup actions [schwern 2932]
  - Changed all actions to use esmith::ConfigDB [schwern 2932]
  - Fixed dependencies. [schwern]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-03]
  - Change back to Protocol 1 until known_hosts2 and authorized_keys2 files are
    implemented on both sides.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-02]
  - Add template fragements to generate /root/.ssh/config host
    config sections for any hostnames added to %e_smith_hosts by
    other fragements numbered between 00 and 19.
  - Delete useless template-end for /root/.ssh/config.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-07]
  - Explicitly disable ChallengeResponseAuthentication and
    KbdInteractiveAuthentication


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-04]
  - Added links to /usr/libexec and /usr/local/libexec to enable
    sftp for more client systems under protocol V1


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-03]
  - Revised after comments from Charlie
  - Added documentation for MaxStartups and cleaner perl idiom for
    SubsystemSftp test


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-02]
  - Enabled sftp subsystem by default with correct path to sftp-server
  - Added MaxStartups configuration


author: Tony Clayton <tonyc@e-smith.com>
changelog:
  - [1.2.0-05]
  - Add /root/.ssh/config template-{begin,end} fragments
  - Expand config template from sshd-conf


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-18]
  - Make new bootstrap-console-save event - the Lite version
  - Make sshd-reload shut down sshd if it has been disabled
  - Don't redo conf-sshd-startup with every console-save


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-7]
  - Added sshd-restart to remoteaccess-update event (and others)
  - Renamed scripts to sshd-{conf,conf-startup,restart}
  - Enable private ssh access by default


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-4]
  - conf-ssh-startup: PasswordAuthentication=yes and RootLogin=no
  - Fixed ordering of Port/Listen fragments


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-3]
  - Changed sshd_config into a directory template
  - Used services notation to enable/disable
  - sshd_config: PasswordAuthentication and RootLogin - both disabled by default


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Ensure that conf-ssh-startup is run during post-upgrade event.
  - Fix missing " in hosts.allow template.


author: Adrian Chung <adrian.chung@e-smith.com>
changelog:
  - Move %post code to conf-ssh-startup instead
  - Default to enabled for sshd in services database if not
    already set.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Use db_get_type to get service status - to be safe against
    defined service properties
  - Do not init services database during post-install event -
    it is done during %post action.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Only initialise services database during post-install action.
  - Only expand hosts.allow/sshd if sshd service is enabled.


author: Charlie Brady <charlieb@e-smith.net>
changelog:
  - Rewrite createlinks in perl
  - Add sshd template for /etc/hosts.allow
  - Fix ssh-keygen options code


author: Charlie Brady <charlieb@e-smith.net>
changelog:
  - Remove /etc/rc.d/rc7.d symlink before (re-)creating it. Avoids logfile mess.
  - Change backgroundCommand call to use array instead of string - avoid shell
    parsing.


author: Gordon Rowell <gordonr@gormand.com.au> 1.16.0-05
changelog:
  - Remove redundant auto-generated service-specific denylog rules from 
    90InboundTCP10filter_{tcp,udp} [SME: 1776]


author: Gavin Weight <gweight@gmail.com> 1.2.0-02
changelog:
  - Make ident TCP reject configurable, based on oidentd status.
    If oidentd{status} is enabled, allow ident, otherwise REJECT it [SME: 85]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-11]
  - Remove force/masq/status fragment, and fix "masq adjust" so
    that it is harmless if firewall is disabled. This leaves unsolved
    the problem of whether to toggle disabled->enabled during upgrades.
    [SF: 1261356]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-09]
  - Add force/status fragment for masq service, to force enabled.
    This ensures that firewall is running after a system upgrade,
    to avoid various panel failure modes. Solution to be reviewed
    for alternatives later. [SF: 1261356]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.1-08]
  - Remove filtering of outbound ICMP - it's blocking legitimate ICMP
    redirects. [MN00093544]


author: Gordon Rowell <gordonr@gormand.com.au>
changelog:
  - [1.15.1-06]
  - Rejct IDENT with a TCP reset [SF: 1240659]
  - Add support for UDPPort (c.f. TCPPort) property to allow
    filtered UDP [SF: 1241398]
  - Add support for DenyHosts property (see 1.15.0-02 for AllowHosts)
    [SF: 1241398]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-15]
  - Set $OUTERNET to equal $LocalIP in masq script in serveronly mode,
    so that masq script (if enabled) does not block allowed public access.
  - Remove various 45Allow* fragments as TCPPort properties of services
    will allow access if public access is enabled.


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [1.15.0-13]
  - update to latest iptables-trace [tonyc] : 
  -  add logging for default chain policy fallback
  -  fix stop() bug causing _any_ rules with --log-prefix to be removed


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-12]
  - Made TOS settings configurable, with just ssh set by default.
    [msoulier dpar-28993]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-10]
  - Fixed iptables-trace "stop" removing rules from the denylog chain.
    [msoulier 10955]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.15.0-09]
  - Added a toggle of the trace option during adjust, so adjusts work with trace
    enabled. [msoulier 8117]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.15.0-05]
  - Ensure that masq script expands without error in serveronly mode.
    [charlieb 10162]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.15.0-02]
  - New fragment 90InboundTCP10filter_tcp, a further step towards
    auto-generation of rules, removing the 45Allow* fragments:

    For all services which have a TCPPort property defined:
      If the service is 'enabled' and the service is 'public', 
  	generate iptables rules as follows:
  	If an AllowHosts property is defined, allow only those hosts
  	Otherwise allow all hosts 

    AllowHosts is comma separated, and can contain IPs, IP/mask and CIDR

    This will generate duplicate rules until the 45Allow* fragments
    are removed, which can happen once the TCPPort property is defined
    for a service.

    QUERY: Should this be TCPPort (singular) or TCPPorts (plural)?
    TODO: Create db defaults fragments to deprecate the 45Allow* fragments
    TODO: Possibly add DenyHosts processing [gordonr 10050]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.13.0-22]
  - Added support for a PPPconn chain to track rules to permit PPTP connections.
    [msoulier 7695]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.13.0-18]
  - Removed acceptance of anything not from the external interface. The local
    networks list should be sufficient. [msoulier 8299]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.13.0-12]
  - Added ForwardedTCP and ForwardedUDP, as well as supporting code to
    permit certain ports to be opened for forwarded traffic inbound. Required
    for portforwarding. [msoulier 7284]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-11]
  - Add "use esmith::util" to 01localNetworks fragment. Needed if
    esmith::templates form of processTemplate is used. [charlieb 5650]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.13.0-09]
  - Make use of ExternalInterface definition in 00Definitions [gordonr 7343]
  - Update dependency on e-smithbase [gordonr 7343]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-05]
  - formatting changes in masq/00Functions template fragment [charlieb]
  - Use connection tracking on both INPUT and FORWARD tables [charlieb 6651]
  - Allow any local traffic on INPUT and FORWARD chains. Local traffic
    is currently defined as all traffic which didn't come in via the
    external interface. That definition can easily change, as there is
    a special chain for accepting local traffic. [charlieb 6709]
  - Remove explicit allow of multicast traffic, as it is a subset of "local"
    traffic [charlieb 6031, 6709]
  - Move ICMP type checking into "adjust" part of masq script [charlieb 6709]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.13.0-03]
  - Put back non-redundant DROP lines, but add a comment as to why
    they are there [gordonr 6580]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-07]
  - Added a get_safe_id function, to factor out firewall rule scanning code, and
    prevent chain name clashes in the extreme case. [msoulier 5696]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-06]
  - Removed specific tcp_in and udp_in chains in favour of the InboundTCP_$$ and
    InboundUDP__$$ chains. They are far, far easier to manage, especially for
    the portforwarding blade. [msoulier 5696]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-05]
  - Make sure that --numeric is used with any --list command, to avoid
    reverse lookup delays. [charlieb 5644]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-04]
  - Peel off ICMP for checking after packets for ESTABLISHED and RELATED
    connections are allowed. This allows outbound ping to work. [charlieb 5423]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-03]
  - Apply UDP filtering only on traffic entering via external
    interface. [charlieb 5644]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-02]
  - Add UDP input filter setup and adjust rules.
    Re-arrange 00Functions a bit so that perl block is
    shorter and the rest is in-line [charlieb 5644]
  - Move adjustEnd to 92, to allow 91 hole for any adjustments
    needing to be done after input filter rules are adjusted
    (e.g. port forwarding).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-08]
  - Send default packets on the FORWARD filter to denylog, rather than
    DROP. [charlieb 5246]
  - Revert 2) from 1.10.0-05 checkin. 5.5 ipchains forwarding rules do not allow
    IP masqueraded packets. [charlieb 5246]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-06]
  - Create a new intermediate TCP input chain, and create a new temporary
    TCP input chain whenever we run "masq adjust". This ensures that
    new TCP input checking rules occur at the same place during input
    checking as existing rules, and also means that rules previously created
    by now-removed packages disappear. [charlieb 4501, 5246]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-05]
  - Fix to the previous change 1) to restore some commented out rules,
    and 2) to fix those rules so that they match the 5.5 ipchains
    version. [charlieb 5246]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-04]
  - Changes so that local networks can be added/deleted and "masq adjust"
    will correctly re-adjust the filters. [charlieb 5246]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-03]
  - Change 00Functions so that "tcp_in" function can create chains as required
    during "masq adjust", so that new modules can add rules and still avoid
    "masq restart".  [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-01]
  - Roll to maintained version number to 1.10.0
  - Remove "perl createlinks" from %build
  LANG=C
  export LANG
  unset DISPLAY
   section, since we no longer
    have a createlinks file.


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.9.15-06]
  - Use denylog target for dropped ICMP packets [markk 5095]
  - Remove explicit echo-reply support (we use conntrack now) [markk 5095]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.9.15-05]
  - Drop ICMP echo-requests on ext i/f when in private s/g mode or if Stealth
    property is set. General cleanup of ICMP rules. [markk 5095]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.15-04]
  - Added extra slosh in tcp_in as one gets gobbled by template evaluation
    and we need one in the final output. Reformatted the lines and moved
    proto/port together on first line of pair for readability [gordonr 4792]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.15-03]
  - Fix tcp_in function - it doesn't work too well without the jump to the
    newly defined rule. Change DROP to denylog in the placeholder rule,
    even though it is short-lived. [charlieb 4792]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.15-02]
  - Remove createlinks script and network-{create,delete} event directories -
    the required change was made in e-smith-base, and this shouldn't have
    been checked in. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.14-04]
  - Remove 45AllowAUTH masq fragment - moved to e-smith-oidentd package.
    [charlieb 4435]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.14-01]
  - Use full iptables path in status fragment - allows "service masq status" to
    work. [charlieb 1268]
  - Fix local networks list [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.13-01]
  - Fix syntax in 30adjustTOS fragment. Move definitions to start of masq
    script where they can be used in functions. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.11-01]
  - Further re-arrangement to facilitate non-disruptive update of filtering
    rules. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.10-01]
  - Remove 98adjust, and split it into 49adjustStart, 50adjustTCP and 51adjustEnd
    fragments. Migrate network stack tuning stuff to sysctl.conf templates.
    Add TOS adjustment stuff. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.9-01]
  - Change masq template fragments to allow non-disruptive modification.
    Add "masq adjust" verb. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.8-01]
  - Remove deprecated split in masq template fragment, and add FIXME comment
    to code which looks to be wrong. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.7-01]
  - Use iptables state tracking to allow return traffic. Remove special
    rules set up to allow the return traffic. [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.6-01]
  - Allow local and masqueraded traffic on forward chain. Fix syntax for denylog
    chain. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.5-01]
  - Avoid a perl warning from use of ${httpd-e-smith}{status} - 
    change to ${'httpd-e-smith'}{status}. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.4-01]
  - Change syntax from ipchains (2.2 kernel) to iptables (2.4 kernel).
    [charlieb 1268]
  - Add "status" option to list tables.
  - Miscellaneous syntax cleanups.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.0-02]
  - Restore run time lookup of ExternalIP by /etc/rc.d/init.d/masq.
  - Make sure that OUTERNET is set to a valid IP address, even if
    ExternalIP is not set in config db, to avoid syntax errors in
    ipchains command in masq script.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.5.0-04]
  - Add $OUT = "" to 01localNetworks so that '1' isn't output
    into template when 01localNetworks generates no output.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.5.0-03]
  - Splitting @locals and $primaryLocalNet generation out of
    40AllowLocals into 01localNetworks.
  - transproxy fragment from e-smith-proxy needs these variables in
    35transproxy.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-02]
  - Fix variable naming error in setting up @locals array.
  - Remove forwarding rules from stopmasq section - and remove the 'stop'
    alias for this case - there is a separate stop section of the script.
  - Add bidirectional forwarding rules for each local network to our network.
    This both enables the forwarded traffic, and also prevents masquerading
    of the local traffic.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-02]
  - Allow packet forwarding from localnet to localnet in serveronly mode -
    this is necessary for PPTP VPN termination.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.0-06]
  - Multicast range is 224.0.0.0 to 239.255.255.255 which
    is 224.0.0.0/4 not 224.0.0.0/3.
    224.0.0.0/3 covers 255.255.255.255 which denies DHCP traffic


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.0-05]
  - Putback Charlie's change to add Stealth property to masq service, defaulting
    to "no". If set to "yes", external ICMP echo packets are ignored.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.2.0-06]
  - Two new properties of masq service - PermitHighUDP and PermitHighTCP.
    Both default to "yes", but provide an easy way to block unprivileged
    TCP/UDP or both.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.2.0-04]
  - masq service now has an optional property Logging, defaulting to "none"
  - Only log denied packets if Logging is other than "none" - this stops
    logging of the SMB chatter on cable and other shared networks
  - Ignore SMB and RIP packets unless Logging is "all"


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.0-02]
  - set rp_filter to 0 for 'default' interface, explicitly set
    it to 1 for eth0, eth1.
  - ipsec-restart will set eth1 to '0'.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-16]
  - removed 35DenyUnrouteable fragment, since it affects
    us, and anyone else using a provider who masquerades
    connections.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-10]
  - Added protocol option to icmp fragments
  - Removed masqstart/masqstop
  - Allowed icmp echo-request and echo-reply


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-8]
  - Move AllowSSH template fragment to e-smith-openssh.
  - Fix uninitialised value problem in  15Definitions.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-5]
  - Normalised structure of 45Allow* fragments
  - Moved 45AllowIONonPriv to 46AllowIONonPriv


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-2]
  - Determine ExternalIP at run time
  - Modified templates to check services entries
  - Added COPYING file and GPL Copyright


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-06]
  - Update to current db access APIs, in readiness for move of dbs to private
    directory. [SF: 1216546 (Shad)]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-04]
  - Use generic_template_expand action to expand /etc/php.ini.
    Add e-smith-lib dependency. Add e-smith-devtools dependency. [MN00064130]
  - Remove anachronisms in /etc/php.ini templates.
  - Fix loss of AllowUrlFopen property during post-install. [MN00064752]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-02]
  - Remove specification of dynamic extensions, as that is done with newer
    php via /etc/php.d/.  [charlieb MN00051515]
  - Replace deprecated Copyright header with License header.
  - Remove bogus WARNING text from spec file. [charlieb]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-12]
  - Wrappered the restart of the e-smith web server so that it is conditional on
    e-smith-apache being installed. [msoulier 8852]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-11]
  - Remembered that we can't query the rpm database during rpm installs.
    [msoulier 8852]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-10]
  - Wrappered the restart of the e-smith web server so that it is conditional on
    e-smith-apache being installed. [msoulier 8852]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-08]
  - Increase limits to allow webmail attachments of 10MB, rather than 2MB
    MemoryLimit 8M -> 32M, PostMaxSize 8M -> 20M, UploadMaxFilesize 2M -> 10M [gordonr 8478]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.8.0-05]
  - Backing out changes since 1.8.0-01, as they belong in a development stream.
    [msoulier 6543]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.8.0-04]
  - Fixed a syntax error that I should have caught before committing the last
    version. [msoulier 6543]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.8.0-02]
  - Added index.phtml to the DirectoryIndex directive, and made the code a
    little nicer to look at. [msoulier 6543]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.4-01]
  - Turned off display_errors, use error_log -> syslog instead, as per
    Dan Brown's PHP upgrade HOWTO
  - Tidied up formatting in that fragment [gordonr 3019]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-03]
  - Remove all comments from php.ini template fragments.
  - Allow some resource limits to be set by properties of the php service
    in the config db.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-02]
  - Template /etc/php.ini, and expand template during conf-php action.
  - Make some simplifications to the conf-php script, and remove a 
    potential error case (php is not in config db and event is neither
    post-install or post-upgrade).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-03]
  - Restrict PHP programs residing in an i-bay to only be able to open files
    which reside in the same i-bay. An i-bay property PHPBaseDir is available
    to override this restriction.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Load PHP modules late, not first. This corrects a compatibility problem
    with RedHat 7.1 RPMS.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-04]
  - Disable PHP MIME type by default
  - Enable PHP MIME type for each i-bay for which dynamic content is enabled.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-9]
  - rolling to 9, 8 is missing.
  - pulling expand httpd.conf, we'll leave conf-httpd
    to do it.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-2]
  - expand PHP httpd.conf fragments conditionally based on
    service status.
  - add PHP to the services database and default to disabled.


author: Charlie Brady <charlie_brady@mitel.com> 1.2.0-02
changelog:
  - Ensure that pop3 and pop3s are started or stopped if required,
    during email-update event. [SME: 1125]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-07]
  - Display text to indicate that portforwarding isn't available in
    serveronly mode.
  - Create new portforwarding-update event, as remoteaccess-update
    is rather heavyweight. use generic_template_expand and
    adjust-services.  [MN00064130, MN00065576]
  - Fix some run-time probs with Gordon's contributed patch.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.1.0-05]
  - Now detecting serveronly mode, and disabling the ability to add
    portforwarding rules while in that state. [msoulier MN00025609]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.1.0-03]
  - Refactored 91adjustPortForward to remove duplicate code. [msoulier 10203]
  - Added code to properly handle portforwarding to the external interface.
    Forwarding to localhost or the private interface is now explicitly blocked.
    [msoulier 10203]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.1.0-02]
  - Added better validation on the sort port to prevent conflicting rules.
    [msoulier 9262]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.1-18]
  - Redo (simplify) some of the code in the portforwarding panel, and make
    destination port explicit if not specified. [charlieb 8803]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.1-12]
  - Inserting PortForwarding chain as first entry in the PREROUTING chain.
    [msoulier 8089]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.1-06]
  - Added french lexicon for security, so it shows up in the right spot
    on the menu panel. [msoulier 7284]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.1-05]
  - Added proper styling to the tables. [msoulier 7284]
  - Added spacing around table elements. [msoulier 7284]
  - Put a 6.0 look on the buttons on the summary page. [msoulier 7284]
  - Removed the button-like style from the remove links. [msoulier 7284]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.1-04]
  - Added proper styles to make links that behave like buttons,
    look like buttons, for 6.0. [msoulier 7284]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.1-03]
  - Fixed a couple of typos in the english lexicon. [msoulier 7284]
  - Included the french lexicon. [msoulier 7284]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.1-01]
  - Modified to work with new e-smith-packetfilter changes for 6.0 
    [msoulier 7284]
  - Note: This breaks backwards-compatibility with 5.6.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-30]
  - Patched the masq fragments to accept an empty dport. [msoulier 5645]
  - Patched the interface to accept an empty destination port. 
    [msoulier 5645]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-28]
  - Additional tweaks to fix the iptables syntax and adjust the size of the
    fields in the UI. [msoulier 5645]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-25]
  - Fixed bad removal which set all destination ports to the same port.
    [msoulier 5645]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-24]
  - Updated dependency information to make it use the backported
    e-smith-packetfilter rpm for the 5.6 updates stream. [msoulier 5645]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-22]
  - Backed-out the changes in 0.1.0-21. They're incompatible with
    e-smith-packetfilter. We'll have to discuss this first. [msoulier 5696]


author: Mike Dickson <miked@e-smith.com>
changelog:
  - [0.1.0-19]
  - backed out previous patch since it applied too many changes at once.  I will
    re-submit in manageable chunks


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-17]
  - Added a feature to remove the "finished" page and cycle back to the start
    page with a status message instead. [msoulier 5696]
  - Found and fixed a bug permitting the addition of duplicate rules.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-15]
  - Fixed broken removal due to using the wrong variable set to repopulate the
    db entry. [msoulier 5696]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-11]
  - Made sure all messages are localised, and added better error handling.
    [msoulier 5696]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-10]
  - Updated to make use of changes to the packetfilter. Fixed the placement of
    the udp portforwarding rules, and the spelling of "completely".
    [msoulier 5696]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.1.0-06]
  - Basic functionality present. Still need to add the ability to
    delete rules, and display current rules. [msoulier 5696]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.0-03]
  - Fix portforwarding rules to match DB format used by panel code -
    which is $ip:[$dport], this allows forwarding to a port other than the
    listen port [charlieb 5645].


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.0-02]
  - Convert to iptables, and conform to "masq adjust" way of doing things.
    [charlieb 5645]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-6]
  - Renamed to e-smith-portforwarding.
  - Imported into CVS as baseline for further development.


author: Darrell May <dmay@netsourced.com>
changelog:
  - fixed spelling in rpm name, now to dmc-mitel-portforwarding
  - merged in e-smith-ipportfw-0.1.1-1.noarch.rpm
  - [0.0.1-3]


author: Darrell May <dmay@netsourced.com>
changelog:
  - added "Shad L. Lords" <lists@lordsfam.net>, e-smith-iportfw 35SetPortFW
  - templates-custom fragment supporting dest port addresses
  - updated portforwarding panel to match
  - removed first/last portforward panel bug by adding return on Operation Status
  - [0.0.1-2]


author: Charlie Brady <charlie_brady@mitel.com> 1.12.0-02
changelog:
  - Purge Interfaces property of pptpd record on bootup. [SME: 1073]
  - Remove multilink setting from pppd configuration used by pptpd. Add
    LCP timeout processing to autodisconnect stale links. [SME: 1064]
  - Control "passive" setting by db property - enabled by default. [SME: 1064]


author: Charlie Brady <charlie_brady@mitel.com> 1.11.0-21
changelog:
  - Dynamically calculate remote IP address range - dhcpd.conf won't
    necessarily be expanded before pptpd.conf, so we can't depend on
    a side effect. [SME: 797]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-18]
  - Add Requires headers for kernel module RPMs, to ensure that module RPMs are
    added during install/upgrade.


author: Shad L. Lords <slords@mail.com>
changelog:
  - [1.11.0-17]
  - Add noipparam parameter so that ppp gets called correctly [SF: 1228376]
  - Move masq fragment from template to db [SF: 1241414]
  - Default sessions to 0 like web panel


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-15]
  - Various options.pptpd config changes to support radius auth. [SF: 1225995]
  - Ensure that ppp_generic module is loaded before running pptpd. [SF: 1225995]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-14]
  - Add rc7.d startup symlink for pptpd. [SF: 1215401]
  - Add Requires: e-smith-radiusd [SF: 1215401]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-12]
  - Use radius plugin to access NT hash passwords and obsolete
    domain strip option. [SF: 1215401]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-11]
  - Fix path problem in adjust-services action symlinks. [MN00065576]
  - Remove explicit links to implicit actions.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.10.0-02]
  - Denylog inbound GRE unless pptpd is enabled. This allows
    masquerade to work better. [charlieb 9249]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-19]
  - Use esmith::ConfigDB::wins_server method to determine correct
    wins server. [charlieb 8951]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-17]
  - Add comment to dhcpd.conf to show which addresses have been
    "borrowed". Remove template fragment which generates static IP definitions
    for pptpd "hostnames" (these aren't useful).  [charlieb 8883]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-16]
  - Convert pptpd-conf script to use esmith::ConfigDB and remove use of
    deprecated CONFREF.
  - Expand dhcpd.conf in pptpd-conf script, to ensure that address range
    is configured. [charlieb 8883]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-12]
  - Removed processing of /etc/ppp/chap-secrets, now done in ppp-conf-users [gordonr 8849]
  - Removed creation of pptpd record - defaults fragments exist [gordonr 8849]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-09]
  - Rewrote chap-secrets fragment with new DB interface [gordonr 4847]
  - Use VPNClientAccess instead of PPTPAccess [gordonr 4847]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-08]
  - Skip users unless PPTPAccess property of user is "yes". We don't want the
    no/disabled ambiguity. [charlieb 4847]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.9.0-07]
  - Call pptpd-conf in user-modify as well as create & delete [markk 4847]
  - Skip users with PPTPAccess of 'off' or 'disabled' [markk 4847]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-06]
  - Added conf-masq and adjust-masq to ip-up.pptpd and ip-down events. 
    [msoulier 7695]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-05]
  - Fixed lack of /etc/ppp/ip-down.local file. [msoulier 7695]
  - Removed iptables code from pptp-interface-access. It now sets an Interfaces
    parameter in the pptpd record. [msoulier 7695]
  - Updated requirements. [msoulier 7695]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-02]
  - Gracefully handle undefined "sessions" property in hosts.allow fragment
    [charlieb 5650]
  - Move some db initiatisation into defaults directory fragments.
    [charlieb 7526]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.0-05]
  - Add hosts.allow template fragment (for new wrappers enabled pptpd)
    [charlieb 4278]
  - Update /etc/ppp/options.pptpd template to match options available
    with CVS version of pppd. Add property driven debug fragment
    while we are at it [charlieb 4278]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.0-04]
  - Remove listen directive - all interfaces is the default, and new
    pptpd segfaults on "listen 0.0.0.0". [charlieb 4797]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.0-02]
  - Listen on all interfaces to avoid race condition with external
    interface configuration [gordonr 4797]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.0-01]
  - Forced version update by co2rpm to 1.7.0
  - Bumped version number - this is a development stream [gordonr 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.6-02]
  - Roll back all PPP options changes so that we can use orig pppd binary.
    [charlieb 4278]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.6-01]
  - Add action script to enable/disable unrestricted traffic on
    an interface when PPTP comes up/goes down. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.5-01]
  - Change allow_tcp_in calling sequence, to facilitate non-disruptive
    change. [charlieb 4501]
  - Add GRE rules which are run-time switchable [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.3-01]
  - Use mschap and mppe configuration directives compatible with the latest
    pppd (from CVS).  [charlieb 4278]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.2-01]
  - Fix iptables usage - on OUTPUT chain, now use -o interface_name, not
    -i interface_name. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.5-01]
  - Include pptpd-conf action in workgroup-update event, so that WINS setting is
    added/deleted if required. [charlieb 3602]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.3-01]
  - Grab samba domain master setting from smb service, not from SambaDomainMaster.
    [charlieb 3160]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Fix pptpd-restart so that it won't log FAILED when it tries to shut down
    a pptpd which is not running.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.2.0-07]
  - Don't check for /var/lock/subsys/pptpd - pptp is managed by init
    and this lock file will not always be created


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-02]
  - Add "ipparam pptpd" to ppp options file.
  - Remove obsolete post-restore event.
  - Removed %postun script.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-28]
  - Users now have a property of PPTPAccess - defaults to allowed
    Set to "off" to disable individual user access to PPTP


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-18]
  - Fix remote address calculation in /etc/pptpd.conf
  - Disable deflate and bsdcomp in PPP config - can't combine compression 
    protocols successfully yet.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-16]
  - Adjust pptpd configuration to force mppe
  - Add chap secrets fragment to look up passwords in smbpasswd file


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-11]
  - Added pptpd-conf into remoteaccess-update

  - [1.1.0-10]
  - Added pptpd-conf-startup to initialise services entry
  - Renamed conf-pptpd -> pptpd-conf


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-7]
  - Changed to use single option "sessions" instead of ipstart/ipend
  - Steal addresses from dhcpd range


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-3]
  - Removed comments from output files
  - Fixed remoteip generation
  - Removed speed.orig file


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Remove .orig file
  - Add service configuration database data for pptpd.
  - Add configuration event to post-restore.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Strip comments from /etc/pptpd.conf file - they are still in
    the templates
  - Remove %postun section


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-25]
  - Filter out comments in peers files, to avoid log noise from
    tcpsvd. Fix name of peers/local templates.metadata file.
    [SF: 1324719]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-23]
  - Re-expand peers/{0,local} in remoteaccess-update, as permissions
    may have changed. [SF: 1220510]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-21]
  - Don't use sigusr1 in bootstrap-console-save, as the service is not
    up, and sigusr1 will be ignored. Instead, call ./control/1 from run
    script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-20]
  - Use sigusr1 in remoteaccess-update. This will generate the network ACL
    symlinks. 'adjust-services' implicitly starts any service which
    should be running.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-19]
  - Use tcpsvd in place of tcpserver. Manage network access lists
    using new esmith::tcpsvd library. Update e-smith-lib depenency.
  - Add symlink /var/service/ftp -> proftpd.
  - Add zero length template-begin files to peers/{0,local}, to avoid
    log noise from comment lines.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-17]
  - Optimise template expansions versus events - only expand files
    which may have changed.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-15]
  - Replace proftp-startstop action with call to 'adjust-services'.
    Update e-smith-lib version dependency. [MN00065576]
  - Use generic_template_expand action in place of proftpd-conf.
    [MN00064130]
  - Re-add missing restart patch to config.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-14]
  - Allow restarts of retreive and store. Patch from Shad. [MN00073802]
  - Avoid duplicate Primary section in config. Patch from Shad. [MN00073804]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-13]
  - Remove migrate fragment for very old FTPServerMode property. [MN00065931]
  - Clean BuildRequires. [charlieb MN00043055]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.11.0-04]
  - Service directory and rc7.d symlinks must be called ftp, since that is
    the service record name. Use /etc/rc.d/init.d/supervise directory, to
    avoid potential clash with stock init script. [charlieb 9547,9930]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-14]
  - Modify xinetd.conf/30ftp to properly handle enabled/disabled/missing cases [gordonr 8609]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-12]
  - Fix typo in path for anonymous login. [charlieb 5652]
  - Remove selective binding to interfaces for now - it requires
    a full xinetd restart, which we don't do in remoteaccess-update.
    [charlieb 951]
  - Change ScoreboardPath to ScoreboardFile - the former is deprecated
    (with extreme prejudice) in current proftpd. [charlieb 5411]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-10]
  - Add config migration fragment to migrate old ftp access properties
    to new. [charlieb 7683]
  - Change Copyright header to License. [charlieb]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-09]
  - Use LoginAccess property to control ftp login access - this replaces the
    "acccess" semantics of 5.5 and earlier. [charlieb 7466]
  - Add back the special case for Primary i-bay, as it's needed for anonymous
    ftp.  [charlieb 5652]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-08]
  - esmith::utils::processTemplate => esmith::templates::processTemplate.
    [charlieb 7466]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-05]
  - Fix migrate fragment problem. [charlieb 1507]
  - Remove legacy code from proftpd config templates, and simplify. [charlieb 7466]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-04]
  - Template /etc/logrotate.d/proftpd and remove postrotate sigHUP. [charlieb 6438]
  - Add default config db fragments to set type/access/status [charlieb 1507]
  - Replace migrate script in post-upgrade event with template fragment in
    db/configuration/migrate directory. [charlieb 1507]
  - Use "access" rather than "accessLimits" to control access to ftp from
    outside LAN. [charlieb 7466]
  - Bind to local interface only if access is private. [charlieb 951]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-03]
  - Re-do hosts.allow template to use esmith::ConfigDB::hosts_allow_spec.
    Add dependency on up-to-date e-smith-lib.
    TODO: fix accessLimits v access issue. [charlieb 5650]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-02]
  - Remove special cases for primary in proftpd.conf - primary
    is now a pre-defined i-bay. [charlieb 5652]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.3-01]
  - Preparing for rebuild as-source, to get rid of some patch detritus - see
    bug 4825. [charlieb 4793]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-04]
  - Replace deprecate AllowChmod with <Limit SITE_CHMOD>, which requires some
    fragment shuffling. Remove unnecessary template-{begin,end}, move
    10localAccess to 00localAccess. [charlieb 4793]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-03]
  - Fix esmith::Networks => esmith::NetworksDB snafu in /etc/proftpd.conf
    template. [charlieb 3786]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.7.2-02]
  - Change use of allow_tcp_in() function to allow dynamic reconfig.
    [charlieb 4501]
  - Remove deprecated split on pipe [markk 3786]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-01]
  - Remove 46AllowFTPActive masq template fragment, allow port 21 inbound
    access and allow netfilter connection tracking to do the rest of the
    job of FTP access control. [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.4.0-07]
  - Be sure to regenerate /etc/ftpusers during password-modify event, to allow
    access to password protected i-bays.
  - Remove proftpd-conf actions from post-install and post-upgrade events -
    bootstrap-console-save is sufficient.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-07]
  - Avoid proftp DoS attack with wildcards
  - Allow FTP ports, with optional "ForcePassive|yes" property, defaulting to no


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-11]
  - FTP now uses a new setting FTP access limits in remote access
    which completely governs access control to the service.
  - The old FTP setting governs only user logins.
  - updated xinetd.conf/ftp fragment to use new value


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - removed %postun deletion of ftp line in configuration
    to comply with the sillyness of rpm upgrade


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-5]
  - backed out bind local interface code, needs to be rethought
    to allow access to localhost


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-4]
  - changed 30ftp to only expand if ftp service is enabled.
  - if ftp access is set to private, only bind to LocalIP in
    xinetd.conf


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.2-02]
  - Allow squid to create a real pid file, so that "squid -k rotate"
    works. PID file needs to be created in a directory owned by 'squid'
    user - I've chosen /var/log/squid. [SF: 1327724]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-39]
  - Fix squid run script so that initialization output is also
    sent to the logger. [SF: 1200402]


author: Shad Lords <slords@email.com>
changelog:
  - [4.13.0-36]
  - Add TCPPort and access for firewall definitions [SF: 1246986]
  - Add squid{TCPProxyPort} for transparent redirects [SF: 1246986]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-34]
  - Update to current db access APIs, in readiness for move of dbs to private
    directory. [SF: 1216546 (Shad)]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-31]
  - Add extension_methods spec to squid.conf, to allow subversion
    passthrough - see http://subversion.tigris.org/faq.html#proxy.
    [SF: 1231333]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-30]
  - Reword the initial section of the proxy panel to remove reference
    to 6040 product. [Gordon SF:1201757]
  - Remove -s flag in run script, to avoid sending debug messages
    from squid via syslog. [SF: 1200402]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-29]
  - Replace all restart-* and most reload-* actions with calls to 'adjust-services'.
    Update e-smith-lib version dependency. [MN00065576]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-28]
  - Use /dev/null as pid_filename. Squid documentation lies - "none"
    doesn't work. [charlieb MN00062550]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-27]
  - Use e-smith-service for rc7.d symlink, so that "status" is respected.
    [charlieb MN00061795]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-26]
  - Better fix for logging problem. Log run script errors to /var/log/squid.run,
    and let squid own and manage /var/log/squid. Remove migration fragment
    which does chown/chmod. [charlieb MN00057027]
  - Don't try to create a pid file - we don't have permission anyway
    [charlieb MN00062550]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.13.0-25]
  - Have multilog run as user squid, logging to /var/log/squid
    (provided by squid package).  [charlieb MN00057027]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-21]
  - Forgot to export the change_settings function. [msoulier MN00037755]
  - Made the smtp proxy toggle display conditionally on the existence of the
    e-smith-email rpm. [msoulier MN00037755]
  - Made proxy-restart smarter, so it stops calling stop when the service is
    down. [msoulier MN00037755]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-20]
  - Added the initial version of the code, including a proxy-update event.
    [msoulier MN00037755]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-13]
  - Specified full path to logfile, as relative path did not work as expected.
    [msoulier 6449]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.13.0-12]
  - Changing permissions on /var/log/squid to permit smelog to use the directory
    beneath. [msoulier 6449]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.12.0-02]
  - Disable safe_ports ACL by default. Create squid{SafePorts}
    default ports list and squid{EnforceSafePorts} default to no [gordonr 9488]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [4.11.0-08]
  - Add default db fragments for squid [tonyc 8537]
  - Remove dead proxy-startup action [tonyc 8537]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.11.0-04]
  - Added port 81 to acl Safe_ports [gordonr 4430]
  - Sorted Safe_ports to make it easier to read [gordonr 4430]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.10.0-03]
  - Backed-out changes in 4.10.0-02, as this should be in a dev stream.
    [msoulier 4812]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [4.9.7-02]
  - Removing redundant iptables rule in PREROUTING chain which forwarded
  - any local network http traffic to the squid proxy, when the previous
  - rule already forwarded _all_ traffic there. [msoulier 5029]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.7-01]
  - Move proxy.pac file to /etc/httpd/conf/proxy/proxy.pac, and add
    two URL aliases to it (/wpad.dat and /proxy.pac). Add appropriate
    access rules. [charlieb 4838]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.6-02]
  - Dynamically adjust transparent proxy rules in "adjust" section of masq
    script. [charlieb 4501]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.6-01]
  - Remove 45DenySquid template fragment - it's no longer needed since we
    are using connection tracking. [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.3-01]
  - Add additional rules in nat table to protect local HTTP accesses from
    being forced through transparent proxy. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.9.2-01]
  - Get syntax correct for iptables form of REDIRECT target, for
    transparent proxy. [charlieb 1268]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.12-01]
  - Update proxy.pac to check host with isPlainHostName before doing DNS lookups.
    Go direct for any plain host names. This shouldn't be necessary, but IE
    is not going direct from WinXP with current setup. Remove redundent
    else clauses while we are at it. [charlieb 3715]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.7.11-01]
  - Add append_domain directive in squid.conf, so that squid can resolve
    unqualified names. (Why doesn't it use what's in resolv.conf?)
    [charlieb 3715]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.7.6-01]
  - Moved start of function to template-begin in case comments are 
    a problem for some clients [gordonr 3073]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.7.2-01]
  - Rewrote proxy-conf using ConfigDB [gordonr 3073]
  - Added support wpad.dat and proxy/pac files [gordonr 3073]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.6.0-05]
  - Rationalise distribution of actions to events (#2507)
    - Add proxy-restart to console-save event
    - Remove proxy-startup from console-save and bootstrap-console-save events
    - Remove proxy-conf from post-upgrade event
  - Move mkdir to create bootstrap-console-save event directory into prep
    section (from %build
  LANG=C
  export LANG
  unset DISPLAY
  ), so that it gets included in the tarball by the
    next rollRPM.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.6.0-03]
  - Add never_direct statements to parent cache case, as always_direct on 
    its own is not enough.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.6.0-02]
  - Fix runtime lookup of external IP in masq script fragment.
  - Use always_direct deny statement to force squid to use an external cache
    if a parent cache is specified.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.5.0-02]
  - Add transparent proxy feature, which is disabled by default. To enable,
    set Transparent property of "squid" service to "yes".


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-06]
  - Translate shell createlinks to perl createlinks
  - Add bootstrap-console-save symlinks via changes to createlinks script


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-05]
  - Add template fragment to set ftp_user used for password in anonymous ftp
  - Add template fragment to set cache administrator email address in messages.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-03]
  - Add template fragements to make sure that webdav protocols are not requested
    via an upstream cache.
  - Re-add template-begin, as the default template-begin is not yet inserted.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.4.0-02]
  - Break template-begin for squid.conf into fragments.
  - Change acl name of localhost into localsrc, and change all
    references to it.
  - Add acl of localdst for all local destinations. In future we should point
    client browsers directly at local web servers.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [4.2.0-04]
  - Removed dependency on e-smith-packetfilter. There is a filter fragment
    which will will be useless without it, but it's not really a dependency


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [4.2.0-03]
  - Add packet filter fragment to deny and log any connection attempt on
    the external interface. This filter fragment is only active if squid
    is enabled.
  - Add requires e-smith-packetfilter spec.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - Make sure that "squid" is enabled in the services database
  - Remove %post section.
  - Fixed some script errors in other action scripts.


author: Adrian Chung <adrian.chung@e-smith.com>
changelog:
  - Changed restart action to use serviceControl
  - Removed post-install event conditional.
  - Changed %post set to setdefault.


author: Paul Nesbit <pkn@e-smith.com>
changelog:
  - expand templates only if enabled in services database.
  - added /sbin/e-smith/db services set proxy enabled to %post


author: Gordon Rowell <gordonr@gormand.com.au> 1.10.0-09
changelog:
  - Allow optional EveryoneEmail property of user and 'admin' accounts
    If set to 'no', do not include this user in the shared/everyone
    email alias [SME: 1842]


author: Gordon Rowell <gordonr@gormand.com.au> 1.10.0-08
changelog:
  - Allow optional $smtpd{HeloHost} value for configuring HELO host,
    defaulting to $DomainName [SME: 1790]


author: Gordon Rowell <gordonr@gormand.com.au> 1.10.0-05sme01
changelog:
  - Allow optional MailServer property of domains db records and
    deliver mail in this order of preference:
    - As per the MailServer property of the domain
    - $DelegateMailServer 
    - localhost (i.e. locally)
    NOTE: 
    - If DelegateMailServer is not set, the users must exist on the
      gateway or mail will be rejected
    - If DelegateMailServer is set, all mail for the domain will be
      forwarded to the relevant internal mail server [SME: 1253]


author: Gordon Rowell <gordonr@gormand.com.au> 1.10.0-04sme01
changelog:
  - Remove virtualdomains entries for hosts db entries. We only
    handle mail for domains without customisation [SME: 1415]


author: Charlie Brady <charlieb@e-smith.com> 1.9.1-03
changelog:
  - Use standard user .qmail template for admin user. Migrate
    AdminEmail setting to $admin{ForwardAddress}. [SME: 818]


author: Charlie Brady <charlieb@e-smith.com> 1.9.1-02
changelog:
  - Fix duplicate symlink creation attempt in bootstrap-console-save
    directory (during RPM build). [SME: 555]


author: Gordon Rowell <gordonr@gormand.com.au> 1.9.1-01
changelog:
  - Roll patches to 1.9.0-16
  - Change ~alias/.qmail{default,localdelivery-default,shared} into
    directory templates [SME: 440]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-15]
  - Fix broken symlink in group-delete event. Delete -default .qmail file
    when deleting group. [SF: 1363973]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-14]
  - Improve /var/qmail/users/assign/70pseudonyms error handling. [SF: 1337029]
  - Fix error text from 60users template fragment. [SF: 1345206]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-13]
  - Add quotes around 'Recipient unknown' when calling bouncesaying.
    Otherwise we're trying to call a program called 'unknown' [SF: 1334002]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-11]
  - Expand virtualdomains in pseudonym-* events. Replace use of control/1
    by generic actions, plus qmail-newu symlinked into event directories.
    [SF: 1311349]


author: Gordon Rowell <gordonr@gormand.com.au>
changelog:
  - [1.9.0-10]
  - Split up templates-user/.qmail into fragments which return 
    one or zero lines. It's much cleaner and helps with add-ons.
    Move .qmail/20Forward -> 70Forward to leave more room for
    add-ons [SF: 1252336]
  - Minor fixups - thanks Stephen Noble [SF: 1252336]
  - TODO: Remove the 10Filter stuff and migrate 
    qmail{DeliveryInstruction} and qmail{DeliveryType}


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-09]
  - Correct /var/qmail/users/assign/50system fragment so that
    mail for system accounts is delivered to admin [SF: 1284311]


author: Shad Lords <slords@mail.com>
changelog:
  - [1.9.0-06]
  - Add empty template-begin header for users/assign
  - Add requires for e-smith-email
  - Add provides e-smith-mta


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-03]
  - Remove no longer needed conf-migrate-* action [charlieb MN00062545]
  - Replace deprecated Copyright header with License header.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-02]
  - Updating with esmith::Build::CreateLinks, and the new genfilelist options.
  - Yanked migrate-qmail-logfiles, as it was causing problems.
    [msoulier dpar-20522]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.1-01]
  - Remove bogus e-smith-base dependency, which shows as an unmet
    dependency on our workstations.
  - Add rc7.d symlink [charlieb 4458]


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.1.0-02]
  - added conf-migrate-qmail-variables actions to migrate qmail.init
    configuration variable to qmail
  - added e-smith header to files


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.9.0-06]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.4-01]
  - Set up PATH variable so that qmailanalog can find things like tr and awk.
    [charlieb 3598]
  - Redirect STDERR from cat so that errors due to there being no @* files yet
    do not appear in the admin error log. [charlieb 3598]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.5.1-01]
  - Moved all code into module qmailanalog.pm. [markk 3156]
  - Converted to FormMagick panel and internationalized [markk 3156]
  - added POD and testsuite [markk 3156]


author: Peter Samuel <peters@e-smith.com>
changelog:
  - [1.4.0-04]
  - Now handles multilog files instead of older cyclog files
  - Adds qmail-qstat and qmail-qread to reports


author: Jason Miller <jmiller@e-smith.com>
changelog:
  - [1.3.0-2]
  - Updated copyright information and removed warning
    messages sent to logs for lack of prototypes in
    qmail-analog panel


author: Charlie Brady <charlie_brady@mitel.com> 1.10.0-04
changelog:
  - Fix sanity checking of hard/soft quota values, and fix "no limit" display
    text (fixes thanks to Robert van den Aker). [SME: 1462]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.2-02]
  - In warnquota, give Text::Template::fill_in an aliased reference to
    $conf, rather than a copy. [SF: 1312772]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-06]
  - Update success and error messages to use new convention
    (patch submitted by Shad Lords).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-04]
  - Fix rc.quota_create's check for existing quota file, and add
    convertquota calls, in case of old style quota files.
    [MN00061221]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.9.0-03]
  - Run /etc/rc.d/rc.quota_create before rc.sysinit, to enable
    filesystem quota support. [charlieb MN00061221]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.7.0-20]
  - Create template output dir in %build
  LANG=C
  export LANG
  unset DISPLAY
  , and fragments need Locale::gettext 
    [markk 8847]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.7.0-12]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.7.0-10]
  - Modified en-us and fr-ca panel title
    modified en-us and fr-ca nav bar label [lijied 7356]
  - Modified e-smith-devtools version [lijied 7578]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.7.0-09]
  - Modified quotas panel order [lijied 7356]
  - Added French .po file to po/fr_CA, and modified the
    %build
  LANG=C
  export LANG
  unset DISPLAY
   in spec file  [lijied 7442]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.1-02]
  - Fix I18N of From header in warning emails. Quote "full name"
    part of From header (to be sure). [charlieb 5205]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.1-01]
  - Fix use of comma as string concat operator in overquota mail message
    templates. Break some long lines while we are at it. [charlieb 5178]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.5.3-03]
  - Improved unit suffix handling to more closely correspond to docs [markk 5102]
  - Allow "unlimited" hard quota with soft quota [markk 5102]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.5.2-02]
  - Display decimal values in summary screen [markk 4475]
  - Allow entry of KB, MB, or GB values in modify panel [markk 4475]
  - Choose and display "best" unit in modify panel [markk 4475]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.1-01]
  - Bump quota requirement to version 3.
  - Fix fstab template to handle ext3 file systems. [charlieb 4297]
  - Remove action script which runs quotacheck - this is now done by rc.sysinit
    during reboot. [charlieb 4297]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.8-01]
  - Move enable-quota back into post-{install,upgrade}. Skip the quotacheck
    if the quota files exist. For an install, they won't. For an upgrade
    from a previously quota'ed system, they will and we don't want to
    bother checking the whole filesystem during the upgrade. For an upgrade
    from a pre-quota system they won't exist, so we need to check.
    Note: /etc/fstab must have the quota options enabled before we attempt
    to run quotacheck or it exits silently [gordonr 3439]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.7-01]
  - Turn quotas on (well, off then on) after enabling quotas in case
    we didn't enable them at boot time in an upgrade from version which
    didn't have quotas [gordonr 3439]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.4-01]
  - Relocated the scaffolding for /etc/fstab templates to e-smith-base,
    leaving the enable quotas fragment here. The template is also expanded
    with an action in e-smith-base. Updated e-smith-base Requires [gordonr 3439]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.2-01]
  - Actually run enable-quotas in bootstrap-console-save and fix
    createlinks [gordonr 3439]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.3.1-01]
  - Moving to stream 1.3.1 (1.3.0 skipped by accidentally)
  - Check all quotas during bootstrap-console-save rather than 
    post-upgrade so that the install completes quickly, even on 
    a machine with lots of disk to check. [gordonr 3439]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.2.8-01]
  - Subst scanmail.tmpl -> template name in both quota templates [markk 3029]
  - Need to enable quotas before trying to restore them :-) [gordonr 2730]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.2.1-01]
  - Adding warning for Quota::query failure to warnquota & user-modify-quota
    [schwern 2730]
  - Testing user-modify-quota [schwern 2729 2730]
  - Converted to FormMagick panel and internationalized. Added some POD and
    tests. [markk 3159]
  - Added buildtests in %build
  LANG=C
  export LANG
  unset DISPLAY
   [markk 3159]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-01]
  - rollRPM: Rolled version number too 1.2.0-01. Includes patches up to 1.0.0-02.
  - DO NOT MAKE ANY FURTHER CHANGES TO THIS FILE, as this is the base version
    being imported into CVS.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-02]
  - Allow hard and soft quota to be equal. This also allows the quota to be
    removed. See #2729.
  - Set quota limits for all users in post-upgrade event. This allows for
    a system restore to have properly set up quotas.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [0.1.1-09]
  - Adding new warnquota script that sends mail to users who have exceeded their
    "limit with grace time", and a summary report to admin.
  - Adding admin summary template, and user quota warning template to
    /etc/e-smith/templates/usr/lib/e-smith-quota


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [0.1.1-08]
  - Adding check in panel to make sure that soft limit
    is less than hard limit.
  - Also insert missing subroutine prototype.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [0.1.1-07]
  - More text changes to the quota panel.
  - Changed kB sizing output to mB sizing.
  - Still no genSmallRedCellRightJustified.  Yet.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.1.1-06]
  - Add daily quota warning script. For now, just use a wrapper for
    /usr/sbin/warnquota. In time we will write our own script in perl
    and produce a customised report.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [0.1.1-05]
  - Update createlinks to create manager quota panel link
  - More text changes to quota panel.
  - Use genSmallCellRightJustified
  - Create "Modify" button.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [0.1.1-04]
  - Add some wording to panel, and change wording of
    soft and hard limits to "limit with grace time" and
    "immediate limit"
  - Still to roll in genSmallCellRight


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-10]
  - Make sure that the log/run script is executable, and that
    the log directory exists. [SF: 1280982]
  - Make sure that stunnel user exists, by making sure that
    %pre script works :-) (451 was not defined).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-7]
  - [More updates from Shad.]
  - Add accounting into radiusd
  - Let radius do its own normal logging


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-6]
  - Expand /etc/raddb/users in user-lock [SF: 1225995]
  - Expand sigterm in password-modify, ldap-update [SF: 1225995]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-3]
  - Use e-smith-services startup symlink for radiusd, so that 'status'
    property is honoured. [SF: 1215401]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.0-2]
  - Patches from Shad to automate radiusd startup, and to allow local hosts to
    be radius clients. [SF: 1215401]


author: Jeff Johnson <jbj@redhat.com> 0.97-4
changelog:
  - properly identify GPL'd sub-packages.
  - don't fail on missing doco.
  - don't fail on unpackaged files.


author: Jakub Jelinek <jakub@redhat.com> 0.92-1
changelog:
  - full version
  - macroized spec file for GPL or OSL builds
  - include only libelf under GPL plus wrapper scripts


author: Jakub Jelinek <jakub@redhat.com> 0.72-4
changelog:
  - fix arguments to gelf_getsymshndx and elf_getshstrndx
  - fix other warnings
  - reenable checks on s390x


author: Jeff Johnson <jbj@redhat.com> 0.69-4
changelog:
  - update to 0.69.
  - add "make check" and segfault avoidance patch.
  - elfutils-libelf needs to run ldconfig.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-04]
  - Reopen stdin from /dev/null before running runsvdir. This prevents any
    supervised services from stealing console input from VT1's getty/console.


author: Federico Simoncelli <federico.simoncelli@gmail.com> 1.14.0-13
changelog:
  - Modified the samba_check_password script to use the new validatePassword
    function in esmith::util. [SME: 2100]


author: Gordon Rowell <gordonr@gormand.com.au> 1.14.0-09
changelog:
  * Tue Nov 14 2006 Gordon Rowell <gordonr@gormand.com.au> 1.14.0-10
  - Add Requires: samba{,-client,-common} to complete dependency tree [SME: 2062]


author: Gordon Rowell <gordonr@gormand.com.au> 1.14.0-09
changelog:
  - Added templates.metadata/etc/smb.conf so that 
    expand-template /etc/smb.conf generates the file in /etc/samba/ [SME: 87]


author: Charlie Brady <charlie_brady@mitel.com> 1.14.0-05
changelog:
  - Add password strength checking to password change via samba (thanks
    Federico Simoncelli and Filippo Carletti. [SME: 1523]


author: Charlie Brady <charlie_brady@mitel.com> 1.14.0-03
changelog:
  - Clean up log noise from migrate fragment. [SME: 1257]
  - Clean up prep section of spec file (and renumber patches).


author: Gordon Rowell <gordonr@gormand.com.au> 1.13.2-16
changelog:
  - Revert veto appletalk files change. The patch is still in the SPEC
    file so we can apply it later. [SME: 668]


author: Gordon Rowell <gordonr@gormand.com.au> 1.13.2-14
changelog:
  - Relocate netlogon.bat from old location in post, not pre [SME: 768]
  - Remove empty /home/netlogon directory, if we can [SME: 768]


author: Gordon Rowell <gordonr@gormand.com.au> 1.13.2-09
changelog:
  - Fix logic in last change w.r.t. KeepVersions [SME: 429]
  - Add default smb{KeepVersions} == disabled [SME: 429]


author: Gordon Rowell <gordonr@gormand.com.au> 1.13.2-08
changelog:
  - Add fragment to add recycle bin if smb{RecycleBin} == enabled [SME: 429]
  - Default smb{RecycleBin} == disabled [SME: 429]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-24]
  - Remove redundent and deprecated use of esmith::config and esmith::db
    from action scripts.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-21]
  - Avoid use of deprecated tie interface to accounts db. Use "config"
    rather than "db" to fetch status in run script. [SF: 1216546]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-20]
  - Charset changes from Gordon: on new installs, default to UTF8.
  - Default smb{UnixCharSet} == UTF8
  - If smb record exists (i.e. upgrade), but UnixCharSet is not defined,
    set it to ISO8859-1 to maintain filenames on upgrade [SF: 1204695]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-16]
  - Last fix was wrong. Real problem was typo in default property setup.
  - Remove redundent restart-samba action.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-13]
  - Add service entries for smbd and nmbd, which slave their own
    status from the smb entry. This allows the generic service
    restart stuff to work. [MN00065576]
  - Fix dangling restart-dhcpd symlink. [MN00064130]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-09]
  - Add domain group mapping, contributed by Shad/Greg. [MN00070553]
  - Remove anachronisms in create-machine-account script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-08]
  - Fix small template breakages if $LocalIP is not defined.
  - Fix warnings from post install script. [MN00070549]
  - Remove obsolete "domain admin group" entry from /etc/smb.conf template.
    [MN00063515]
  - Revert to standard /etc/samba/smb.conf location for config file.
    [MN00063515]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-06]
  - Fix typo in template fragment. Commit new files omitted from previous
    checkin in error. [MN00063515]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-05]
  - Update samba configuration to use samba 3 features. Update to
    current APIs. [MN00063515]
  - Start nmbd before smbd. [MN00070113]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.13.0-04]
  - Use defaults mechanism to initialise database entries, and migrate
    fragment to convert from deprecated db entries to current style
    Obsolete conf-netlogon script. [MN00062545]
  - Use generic_template_expand action where possible, in place
    of specific actions. Update e-smith-lib dependency. [MN00064130]
  - Use generic service adjust action for reload/restart. [MN00065576]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.11.0-16]
  - Include rc1.d/K35smb symlink for proper shutdown in single user mode
    [markk 10958]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-12]
  - Stopped sourcing /etc/sysconfig/samba, and fixed a syntax error in the
    initscript. [msoulier 6442]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-05]
  - Added supervision of smbd and nmbd. First attempt. [msoulier 6442]
  - Updated createlinks script for new build library.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.11.0-02]
  - Added a "deadtime" option to kill connections, by default, after one week if
    they are no longer active. [msoulier 10486]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.10.0-03]
  - Always return "logon path" line, so that we return
    "logon path =" if roaming profiles are off [gordonr 9913]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.10.0-02]
  - Use samba defaults for preferred master and local master [gordonr 9208]
  - Turn on wins support if we are the domain master [gordonr 9208]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-31]
  - Added missing 02setupDomainMaster [gordonr 5053]
  - Corrected 11winsServer to deal with WINSServer == me [gordonr 5053]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-25]
  - Added a defaults fragment. [msoulier 8785]
  - Removed conf-samba-startup. [msoulier 8785]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.9.0-17]
  - Changed workgroup and servername to lower case before validation
    and storage [lijied 7371]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-16]
  - Create new netlogon directory before trying to relocate netlogon.bat
    [gordonr 8060]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-13]
  - Do the relocation in the SPEC file so we don't have a stray
    directory [gordonr 5241]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-12]
  - Relocate netlogon.bat -> /home/e-smith/files/samba/netlogon/netlogon.bat
    [gordonr 5241]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.9.0-10]
  - Re-worded the text in the workgroup panel. [msoulier 5311]
  - Added french translation of that re-wording. [msoulier 5311]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.9.0-09]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.9.0-03]
  - Split conf-samba-startup from e-smith-base/conf-startup 
  - Relocated reload-samba from e-smith-base [gordonr 5509]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.7.2-06]
  - Allow smb|WINSServerOverride property which is automagically pushed into
    the smb|WINSServer property before expanding Samba templates [gordonr 4590]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-01]
  - Change default for oplocks from false to true, and add enable of kernel
    oplocks (although it's the default anyway. [charlieb 4520]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.1-01]
  - Use PAM password change rather than external passwd program and chat
    script. [charlieb 4433]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.2-01]
  - Add "pid directory" template fragment to smb.conf, to make samba 2.2.4
    happy (it otherwise wants to use the non-existent /var/run/samba).
    [charlie 3685]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.6.1-01]
  - Revert the posix locking change to the Profile share. We have rebuilt
    samba 2.2.4 under the 2.2.19 kernel as a better fix to the locking problem.
    [charlie 3685]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.11-01]
  - Disable posix locking for the Profile share, as a workaround for
    some locking wierdness with Win2K when saving roaming profiles.
    [charlie 3685]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.7-01]
  - Update workgroup panel test code to no longer refer to legacy Samba*
    config entries. [charlieb 3160]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.6-01]
  - Migrate obsolete Samba{DomainMaster,Workgroup,ServerName} settings
    in conf-samba then delete any of these if found. [charlieb 3160]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.5-01]
  - Further rework of the 11logon{Home,Path} fragments to allow setting
    of smb|LogonPath and smb|LogonHome without having to choose 
    smb|RoamingProfiles [gordonr 3072]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.3-01]
  - Woops, create empty /etc/e-smith/tests in %build
  LANG=C
  export LANG
  unset DISPLAY
  . [charlieb 3343]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.2-01]
  - Remove /etc/e-smith/tests/.dummy, and instead create empty
    /etc/e-smith/tests in %build
  LANG=C
  export LANG
  unset DISPLAY
  . [charlieb 3343]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-01]
  - Rolling to development stream
  - Always set up logon home and logon path. The Samba defaults are not
    particularly useful, and we want them to be defined to empty if
    not defined in the config db and we are not domain master [gordonr 3072]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.4.2-01]
  - Stop workgroup panel from getting and setting old legacy Samba* values.
  - Panel now gets/sets 'smb' properties.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.4.0-01]
  - Remerging text change for domain controller setting into i18n'd panel. 
    [mac #3020]


author: Adrian Chung <mac@e-smith.com>
changelog:
  - [1.3.8-01]
  - Change quoting of %u to use single quotes in addUserScript template for
    smb.conf. [adrianc #3023]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.7-01]
  - Quote %u in add user script directive in smb.conf and remove unnecessary
    first line. [adrianc #3023]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.3-01]
  - Modify text in web panel to say "leave set to default, or no if another
    server is already performing this function" with respect to domain master
    setting. [mac - #3020]


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.3.2-01]
  - Make WINSServer property override value for DomainMaster, PreferredMaster,
    and LocalMaster.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.0-02]
  - Reconfigure and restart dhcpd in workgroup update event, in case a
    WINS server has been added. See #2364.
  - Purge prep section of lots of stuff which is no longer required
    since the rollRPM.


author: Adrian Chung <adrianc@e-smith.com>
changelog:
  - [1.1.0-34]
  - Adding workgroup panel, removed from e-smith-base.
  - Minor text change, s/a Windows server/another server


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-30]
  - Changed group of profiles parent directory to shared to make it searchable
  - Replaced %N (NIS server) with %L (Netbios name) in 11logon{Home,Path}
  - Reinstated [profiles] share and change logon path to use it
  - Added action to user-{create,delete} to add/remove the profile subdirectory
  - Added action to post-upgrade to create profiles for existing users
  - New smb property RoamingProfiles - defaulting to "no" in conf-samba, 
    which disables logon {home,path} and [profiles] share


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.1.0-28]
  - Undo the "Adminstrator" => "admin" mapping
  - Remove smb.conf fragment which adds reference to smbusers
  - Replace smbusers fragment so that the file now says "# this
    file is not used".


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-26]
  - Templated /etc/samba/smbusers
  - Map "Administrator" for domain logons -> admin
  - Note: a local (non-domain) logon still gets treated/ignored as guest
  - The property smb|AdminstratorAccount (default Administrator) can be
    used to specify an alternate Administrator account when that account is
    renamed on the Win* clients


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-25]
  - Make printer$ share writable in the normal way, restricted by Unix
    permissions (admin:admin)


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-24]
  - Make /etc/smbpasswd 0600,admin,root - allows "admin" to join domains 
  - create-machine-account: SUID/SGID root - the script is called as 
    "admin" by Samba, but needs to be "root" to add Unix accounts
  - create-machine-account: setRealToEffective really become root or locking
    the Unix account fails with "Only root can do that"
  - create-machine-account: Auto-create machine account in accounts database.
    This should be fixed by allowing admin to write to the db fragments


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-22]
  - Check for smb|...|LogonHome and smb|...|LogonPath in those fragments
    Default to ~/._winprofile as before, but allow overrides, for example
    set to empty for local profiles. 4.1.2+e-smith-netlogon and 5.0 both 
    defaulted to roaming profiles
  - Explicitly return an empty string from some fragments if 
    $SambaDomainMaster=no, just to be tidy
  - Used new e-smith-devtools to set /home/e-smith/files/samba to 
    02755,admin,admin and removed explicit chmod from prep


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-21]
  - Commented out code in create-machine-account which called smbpasswd.
  - Samba does this by itself, but we may want to enable it later if this 
    script is ever called outside Samba.


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-20]
  - Moved profiles to ~user/._winprofile - somewhat better that .profile :-)
  - Commented out [Profiles] share, since we are no longer using it


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-18]
  - Removed conf-samba from post-install - done in bootstrap-console-save
  - Moved all profiles (Win9x and WinNT/2K) under ~user/.profile
  - Rewrote machine-account-create as an event
  - Note: Unfortunately Samba currently requires the user "root" to 
    create machine accounts (i.e. enter "root" as the user on the client machine)
     A SUID script allows 'admin' to do all of the tasks, but the client gets:
    "Unable to add or change accounts on the domain. The account information
    entered does not grant sufficient privilege to create or change accounts".
  - Made printer driver directories world-writable


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-16]
  - Swapped 11logon{Home,Path}, added extra backslashes - thanks Greg Zartman
    and others


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-15]
  - Left-justified output
  - Removed some redundant use esmith::db lines and implied "return" statements


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-13]
  - Hid all commented-out parameters from output file (remove fragments later)
  - Removed more comments from output file
  - Unified indentation


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-12]
  - Added 11level2Oplocks fragment to disable level2 oplocks
  - Removed "share modes" options from [netlogon] share and cleaned up template


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-08]
  - Added printers and profiles directories
  - Need to verify permissions on these directories, Darrell had 777 for all


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.0-07]
  - Merged in changes from dmc-mitel-samba-2.2.2-0 - Thanks Darrell May
  - Moved machine-account-create from e-smith-base


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [0.1.0-02]
  - Modified the starterwebsite panel order [lijied 7356]
  - Split en-us lexicon from panel [lijied 4030]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.0.1-02]
  - Change deprecated "Copyright:" header to "License:".
  - Updated requires with new perl dependencies. [charlieb MN00040240]
  - Remove "AutoReqProv: no" so that "Provides" headers are auto-generated.
    [charlieb MN00040240]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.0.0-02]
  - Remove deprecated WebServerName setting from canned test data. [charlieb 6861]
  - Removed any references to LocalDomainPrefix. [msoulier 4812]

  - [1.0.0-01]
  - Roll to maintained version number to 1.0.0


author: Michael Schwern <schwern@e-smith.com>
changelog:
  - [0.1.21-01]
  - Fixed quicktest to use an absolute path to the CVS lib directory.
    Helpful or tests which chdir. [schwern 2743]


author: Michael Schwern <schwern@e-smith.com>
changelog:
  - [0.1.18-01]
  - quicktest now propagates the new libraris into any perl programs
    called in the tests [schwern]


author: Michael Schwern <schwern@e-smith.com>
changelog:
  - [0.1.17-01]
  - Added a --verbose switch to quicktest [schwern]
  - quicktest now running tests with warnings on [schwern]


author: Michael G Schwern <schwern@e-smith.com>
changelog:
  - [0.1.14-01]
  - Added -d option to quicktest for debugging [schwern]
  - Added scratch_copy() to esmith::TestUtils [schwern]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.1.13-01]
  - Run testing-conf in post-{install,upgrade} events rather than from %post
    Running it from %post won't work in a fresh install as the config 
    database doesn't yet exist [gordonr]


author: Michael G Schwern <schwern@e-smith.com>
changelog:
  - [0.1.10-01]
  - quicktest now closes STDIN so tests don't block waiting for it (3042)
  - Fixed bug in Test::Harness::Straps so tests that die are failures (3034)


author: Michael G Schwern <schwern@e-smith.com>
changelog:
  - [0.1.9-01]
  - Added files argument to quicktest [schwern]
  - 0.1.8-01 was tagged badly.  esmith::TestUtils was accidentally dropped
    and the temporary quiktest was accidentally installed [schwern 3026]
  - Adding dependeny on e-smith-lib for esmith::ConfigDB in testing-conf
    [schwern]


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [0.1.7-01]
  - General cleanup in esmith::TestUtils
  - moved dependency on e-smith-devtools from Requires to BuildRequires [skud]


author: Michael G Schwern <schwern@e-smith.com>
changelog:
  - [0.1.5-01]
  - Added dependency on e-smith-devtools for genfilelist update
  - smoketest now looks for local Perl libraries
  - fixed the sanity test


author: Kirrily Robert <skud@e-smith.com>
changelog:
  - [0.1.2-01]
  - Added an esmith::TestUtils perl module to assist in writing tests
  - Changes to the smoketest script; now accepts an optional directory to
    run tests from, among other (internal) changes


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-19]
  - Fix access default property for tinydns. [SF: 1246986]
  - Add missing control/2 script, possibly required for ip-change
    event handling.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-17]
  - Add tinydns stats file digester and pretty printer (from
    http://www.campin.net/DNS/tinydns-readstats.txt).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-15]
  - Work around ordering problem between template expansion and 
    hosts db migration scripts in e-smith-hosts rpm, by calling
    expand-template from tinydns/control/1. TODO: fix properly
    by moving hosts db munging scripts into migrate fragments.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-14]
  - Switch to updated calling convention for genfilelist.
  - Add control/1 script to rebuild data cdb file. Call ./control/1
    from run script, before starting tinydns.
  - Use generic_template_expand action in place of tinydns-conf.
    Update e-smith-lib dependency. [MN00064130]
  - Remove unused tinydns-restart.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.5.0-11]
  - Still another couple of fixes required to 20tinydns fragment.
    [charlieb MN00035059]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.5.0-09]
  - Beautified 20tinydns fragment, and s/exit/return, as it was killing
    initialize-default-databases processing in post-install.
    [msoulier MN00035059]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.5.0-08]
  - Don't die in post-install if there's no host record for the server [markk
    MN00034226]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.5.0-07]
  - Changed the name of the DNSAlias property to ReverseDNS, and reversed the
    logic, to improve readability. [msoulier 10890]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.5.0-06]
  - Added logic to key off of DNSAlias property in hosts db, so that the host
    that the PTR record is configured to for reverse DNS lookups can be
    configured, with the server itself defaulting to its proper name, via a
    migration fragment. [msoulier 10890]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [0.5.0-05]
  - Modified the previous fix to ensure that each IP resolves to only one
    hostname, followed by zero or more aliases. [msoulier 10890]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.5-05]
  - Various fixes to 00functions fragment of tinydns data file. Eliminate
    duplicate records for local domain. Fix non-empty output of fragment.
    Re-organise. [charlieb 9169]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.5-03]
  - Change %pre script which creates required userid, so that it uses
    preferred userids. [charlieb 6033]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.3.4-13]
  - Renamed conf-tinydns{,-startup} to tinydns-conf{,-startup} to match
    tinydns-restart [gordonr 4058]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.3.4-10]
  - Add missing pipe in genfilelist call so sticky bit preserverved
    on /var/service/tinydns [gordonr 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-08]
  - Add sticky bit to tinydns service directory, so that svscan starts logging.
    [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-07]
  - Remove bogus reverse DNS records from tinydns/root/data template - the
    correct records are implicit in "=" records. [charlieb 4058]
  - Remove A records for generic hostnames from all except the primary domain.
    This change is provisional - we will need to discuss the implications of
    doing this. [charlieb 5805]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-06]
  - Eliminate use of deprecated db_get_prop from templates for env files.
    [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-05]
  - Create "down" file to prevent scsvan from starting tinydns at initial
    boot time (before it is configured), and add rc7.d symlink to bring
    it up after bootstrap console runs. [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-04]
  - Change default listen address to 127.0.0.1 [charlieb 4058]
  - Hide irrelevant output in %pre script.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-03]
  - Add %pre actions to create dns and dnslog users if required.
  - Move root/data templates into correct directory and change
    conf-tinydns action script accordingly.
  - Create ROOT environment file required by tinydns
  - Create /service symlink.
  - Remove requirement on e-smith-packetfilter.
  - All changes done to get into running state. [charlieb 4058]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.4-02]
  - Add template fragments for local domain tinydns configuration (from
    Zac's e-smith-djbdns contrib). [charlieb 4058]
  - Convert all code to use current preferred APIs. [charlieb 4058]
  - Update Copyright notices in action scripts.
  - Change Copyright RPM header to License.
  - Remove masq template fragment as we now use connection tracking.
    [charlieb 4499]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.2-01]
  - Add missing /var/service/tinydns run scripts.
  - Add /var/service/tinydns/root directory.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.3.0-01]
  - Don't use tinydns-conf, instead include files and templates.
  - Move config db init to conf-tinydns-startup.
  - Remove tinydns-startup script.
  - Reorganise %build
  LANG=C
  export LANG
  unset DISPLAY
   to create init symlink, and to build log
    directory.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.2.0-01]
  - rollRPM: Rolled version number to 0.2.0-01. Includes patches up to 0.1.5-02.
  - added mkdir commands to prep section to create all required empty
    directories.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.7.0-08
changelog:
  - Turba 2.1.3 formally removed the bigfoot ldap search entry.  e-smith-turba had
    this entry as a 0 byte file, this change is to note that.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.7.0-07
changelog:
  - Added turba specific horde/config/registry.php settings.  These were previously
    kept in the e-smith-horde rpm.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.7.0-06
changelog:
  - Added a section to the template file 50LocalLDAP that will look for a db setting
    which will give the ability to enable or disable the storing of freebusy information
    for horde to the ldap database.  
  - This should help a lot in setting up a company wide directory with Free/Busy information
    already populated in the LDAP DB which should eliminate the need for each user to have to 
    setup a personal address book with everyone's name that they want to do free/busy searches 
    against.
  - To activate - config setprop horde freebusy enabled.  
    Default is disabled.  If you install the smeserver-kronolith that I maintain, then this
    setting will be changed to enabled after a post-upgrade ; reboot.


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.7.0-05
changelog:
  - Modified conf.php templates and added an includes statement to 120Menusettings 
    that will grab the information in horde/conf.menu.apps.php.  This way each of 
    the individual horde modules don't have to repeatedly process the same template 
    for the menu array section in conf.php.
  - Added the ability to enable or disable turba menu icon from showing up on the main 
    webmail screen.  To initially enable - config set turba service MenuArray disabled|enabled
    After the DB entry is created you can enable or disable this by 
    config setprop turba MenuArray disabled|enabled


author: John H. Bennett III <bennettj@johnbennettservices.com> 1.5.1-11
changelog:
  - Removed menu-apps line from 100Conf and added 120MenuSettings.
  - added %post and %postun lines to spec file that add/remove db settings
    that 120MenuSettings will reference. [SME: 883]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.1-03]
  - Combine 1.1->1.2 and 1.2->2.0 upgrade scripts. Fix path in turba db
    create script. Don't bother running migrate-imp-to-turba unless there
    is an imp address book table (very old hat now).


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-04]
  - Add templates.metadata files so that ownership and perms of conf.php
    and sources.php is correct.
  - Replace conf-turba-startup with templated shell scripts.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.5.0-02]
  - Obsolete conf-turba action by using generic_template_expand action and
    default db fragments. Update e-smith-lib dependency. [MN00064130]
  - Delete redundent db key deletion code in conf-turba-startup. [MN00064391]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.3.0-05]
  - Updated two actions to fetch the horde db password from configuration.
    [msoulier 4796]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-03]
  - Explicitly check for existence of turba_objects columns before attempting
    to add them. Don't try to create an owner_id index if one already
    exists. [charlieb 9971]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Do not skip turba table update if imp address book table does
    not exist (it usually won't exist). [charlieb 9971]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.2.1-02]
  - Unlink sql/init symlinks before creating new ones, in case
    symlink exists and points to the wrong place. [charlieb 9476]
  - Replace Copyright header with License header.


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.1.1-05]
  - Fixed up indenting slightly and added two missing fields to turba_objects
    insert statement [markk 8834]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [1.1.1-02]
  - Converted mysql_upgrade_1.1_to_1.2 to perl and linked as 
    50turba_upgrade_1.1_to_1.2 [markk 8581]
  - Added wrapper around turba db creation [markk 8581]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.1.1-01]
  - Include changes from Dan Brown's e-smith-turba-1.1.0-05db [gordonr 7794]
    * Sun Apr  6 2003 Dan Brown <dan@familybrown.org>
    - [1.1.0-05db]
    - changed menu settings to dynamically include all installed
      horde modules
    - created horde-update event
    * Wed Mar 26 2003 Dan Brown <dan@familybrown.org>
    - [1.1.0-04db]
    - uncommented objectclass and version lines in sources.php
    - added comma to 'root' line in sources.php
    * Sun Mar 23 2003 Dan Brown <dan@familybrown.org>
    - [1.1.0-03db]
    - commented out objectclass and version lines in sources.php
      for local LDAP.  Don't know why, but they break all sources.
    * Sun Mar 23 2003 Dan Brown <dan@familybrown.org>
    - [1.1.0-02db]
    - added objectclass definition to sources.php
    * Wed Mar 12 2003 Dan Brown <dan@familybrown.org>
    - [1.1.0-01db]
    - Update sources.php for compatibility with Turba 1.2
    - Add link to mysql_upgrade_1.1_to_1.2.sql
  - Updated Requires: line for turba to >= 1.2 [gordonr 7794]
  - Moved symlink noted in 1.1.0-01db0 into the %build
  LANG=C
  export LANG
  unset DISPLAY
   section (from %post)


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.0.0-02]
  - Deleted ./httpd/html/horde/turba/config/{conf.php, sources.php}
    /template-{begin,end}, modified %build
  LANG=C
  export LANG
  unset DISPLAY
   code [lijied 3295]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.21.3-05]
  - Rename migrate-imap-to-turba to migrate-imp-to-turba. We had the
    correct symlink name, but wrong filename [charlieb 4782]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.21.3-04]
  - Always run migrate-imp-to-turba script in mysql.init after
    install/upgrade/restore. [charlieb 4782]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.21.3-02]
  - Move migrate-imp-to-turba into events/actions, and set up symlink into
    /etc/e-smith/init/sql so that mysql.init can run the script [charlieb 4782]
  - Greatly simplify conf-turba and conf-turba-startup scripts, and
    remove duplication between them. Leave it to mysql.init to do the
    grunt work [charlieb 4782]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.21.3-01]
  - Don't set deprecated InitscriptsOrder property, it's already implicit in
    the rc7.d symlink [charlieb 4458]


author: Tony Clayton <apc@e-smith.com>
changelog:
  - [0.19.4-01]
  - rework the conf-turba-startup script, and add a conf-turba script in the
    email-update event in order to handle every upgrade scenario.  lots of inline
    comments. [tonyc 3751]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.19.2-01]
  - Don't run the migration script (and disable it) if there's no imp_addr
    table, or if webmail is disabled. [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.18-01]
  - Move action to post-{install,upgrade} and detect proper db migration based
    on event [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.14-01]
  - Need to ensure that horde db is created (by running mysql.init) before we
    try to add tables. [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.13-01]
  - Create turba tables in migrate script instead of conf action. We can't use
    mysql.init to create them because it runs after the migrate script.
    [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.12-01]
  - Change service name in migrate-imp-to-turba script as well, and don't run
    unless the service is enabled [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.10-01]
  - Changes to support running addressbook migration as an initscript 
    [markk 3197]
  - Removed migrate-imp-to-turba from events and moved into init.d [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.9-01]
  - Another try at fixing addressbook migration on upgrades: create sql fragment
    and let mysql.init import it [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.6-01]
  - Added 'equals 0' test to system call in conf-turba-startup. Action was
    failing before expading templates due to bad test logic. [markk 3197]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.4-01]
  - Removed %preun and %post scripts [markk]
  - Added new action conf-turba-startup to configure mysql and expand config 
    files. This is called via bootstrap-console-save. [markk]


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.3-01]
  - rollRPM: Rolled version number to 0.3-01. Includes patches up to 0.2-03.
  - Prepared for CVS import.


author: Mark Knox <markk@e-smith.com>
changelog:
  - [0.2-03]
  - Renamed to e-smith-turba for import into 5.5 distribution. Obsoletes
    equivalent dcb package. Renamed tarball and BUILD directory.
  - Removed events directory and example action.


author: Dan Brown <dan@familybrown.org>
changelog:
  - Release 0.2-2
  - Broke apart template fragments for sources.php
  - Added support for local LDAP server in sources.php
  - Added template for conf.php
  - Added link to IMP in top menu


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.2-02]
  - Avoid uninitialized variable warnings in logfile when highlistPattern is
    unset. [SF: 1227604]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.0-06]
  - Use Time::TAI64 module to convert multilog timestamps, rather than
    external invocation of tia64nlocal.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.0-05]
  - Remove false "fix" from previous change. [SF: 1227604]
  - Replace deprecated "Copyright" header with "License" header.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.7.0-04]
  - Fix "uninitialized value" warnings from viewlogfiles CGI. [SF: 1227604]
  - Replace all uses of the deprecated esmith::config and db_ APIs.


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.7.0-03]
  - Updated requires with new perl dependencies. [msoulier MN00040240]
  - Fixed Content disposition. [msoulier MN00049326]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.6.0-03]
  - Fixed escaping of HTML entities via HTML::Entities::encode_entities().
    [msoulier 10418]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.6.0-02]
  - Fixed odd FormMagick caching WSOD by removing intermediate page in log
    download. [msoulier 9223]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-16]
  - Added recognition of Mac clients, and made the .log extension unconditional.
    [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-14]
  - Added detection of windows client via the user-agent string, so .log
    extension is only added in that case. Additionally, in that case, CR/LF
    conversion is performed on the logfile. [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-13]
  - Added a .log extension to all logfiles to work around the fact that Windows
    ignores http response directives. [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-08]
  - Added the operation parameter to the refresh option to maintain the default
    in the configuration database. [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-07]
  - Changed the operation selection widget to being generated by the backend
    code, so we can control the default. [msoulier 8634]
  - Now caching the default choice in the configuration database.
    [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-06]
  - Updated dependencies for the download logfile feature. [msoulier 8634]
  - Added download logfile feature. [msoulier 8634]


author: Michael Soulier <msoulier@e-smith.com>
changelog:
  - [1.5.0-05]
  - Added a "Refresh" log button. [msoulier 6935]
  - Added lexicon changes for refresh feature. [msoulier 6935]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [1.5.0-03]
  - Make use of esmith::Tai64n to display multilog filenames and contents
    in local time [gordonr 6930]
  - Use a hash instead of an array for the filename list and let
    FM do the sorting for us, which allows the displayed name and the filename
    to differ [gordonr 6930]


author: Lijie Deng <lijied@e-smith.com>
changelog:
  - [1.4.0-05]
  - Modified French lexicon to use lang="fr", rename the lexicon
    directory to fr [lijied 6787]


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [1.3.0-02]
  - Fix warning about @logfiles variable [charlieb 4613]
  - Allow log files containing spaces in filename to be viewed [charlieb 5588]
  - Filter all logfiles using tai64nlocal, so that dates are in
    human readable form. [charlieb 5334]


author: Gordon Rowell <gordonr@e-smith.com>
changelog:
  - [0.0.1-04]
  - Disabled custom sort order - I find it non-intuitive
  - Display "No lines displayed" if this is true
  - Expanded text, describing filters in more depth
  - Display filename of viewed log file


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-03]
  - Introduce custom sort order, with messages at top and rotated logs at end.
  - Add feature to display gzipped files.


author: Charlie Brady <charlieb@e-smith.com>
changelog:
  - [0.0.1-02]
  - Replace fixed log file list with one generated at run time
  - Filter out known non-log files from the generated list
  - Clean more of the environment (although I don't think it matters)
  - Add brief text to explain the entry boxes


author: Thomas Woerner <twoerner@redhat.com> 1.35-12.3.EL4
changelog:
  - removed referenced to ext2resize from man pages (#164383)
  - fixed possible crash on a bad disconnected inode (#166093)
  - enabled tune2fs to set and clear resize_inode feature (#167816)


author: Thomas Woerner <twoerner@redhat.com> 1.35-12.2.EL4
changelog:
  - Fixed overflow handling for device size determination on 64-bit hosts
    (#158518) - Thanks to Stephen C. Tweedie for the patch.
  - Fixed SEGV on large partitions (#158931)
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
  - Fixed type aliasing problem (ext2fs abort) (#161183)
    Thanks to Stephen C. Tweedie for the patch.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-12.1.EL4
changelog:
  - Reenable offline resize
    + fix interactions with online resize
  - Many bugfixes from e2fsprogs-1.36:
    + Offline resize maintains the online resize inode
    + e2fsck fixes for online resize 
    + fix mke2fs -[R|E] resize= option
    + fix removal of the xattr feature
    + fix offline resize byte swapping on bigendian hosts
    + dumpe2fs/tune2fs will show the reserved GDT blocks on a filesystem
  - Fix determination of device size for devices >= 4TB (bugzilla #143907)
  - Fix gdt verification on bigendian hosts for online resize 
    (bugzilla #142493, #142480)
  - Never default to blocksize >4K in mke2fs
  - Supercede old double-kfree fix (bugzilla #132707)
  - Remove undesirable debug printfs from libe2fs resize code


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.6.EL4
changelog:
  - Disable offline resize for now: resize2fs is incompatible with
    online resize, and can result in corrupt filesystems.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.4.EL4
changelog:
  - More byte-order fixes for mke2fs and ext2online
  - Disable fallback to old-style resize if new kernel resize code is not
    available


author: Phil Knirsch <pknirsch@redhat.com> 1.35-2
changelog:
  - Updated s390 patch. It's not not arch dependant anymore but only changes the
    default blocksizes when necessary.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update the mainframe patch to its current version, but disable it
    until the change also properly supports SCSI and is usable also
    for non-mainframe archs


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.35-pre
  - use ldconfig to create symlinks to shared libs
  - remove some cruft from the spec file
  - man3 is now part of the devel rpm


author: Phil Knirsch <pknirsch@redhat.com> 1.32-7
changelog:
  - Fixed problem with mke2fs and default blocksize small partitions on dasd
  - Disabled Florians patch for now as it's a little incomplete. :-)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.30, leave out already integrated patches
  - clean up spec file
  - also package some missing files


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.23-4
changelog:
  - Fix headers of libext2fs - it wasn't possible to include them from
    C++ code (using private as a variable name isn't a good idea)
  - Fix build with autoconf 2.5x


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.23. This was requested to support the "auto" fstype
    to ease ext2 <-> ext3 conversions.


author: Alan Eldridge <alane@geeksrus.net>
changelog:
  - Added 16K buffer for reading /proc/partitions in 
    get_label_by_device.c to correct problems with LABEL= in fsck 
    caused by not reading /proc/partitions in a single read() call;
    if somebody has a "partitions" > 16K, it may still fail ...


author: Karel Zak <kzak@redhat.com> 0.9.2-3.1
changelog:
  - fix leak in history auto completion.
  - fix cookie domain security checking.
  - limit rowspan/colspan values prevents crashes reported at
    http://www.securityfocus.com/archive/1/378632  (#146446)


author: Tim Waugh <twaugh@redhat.com> 0.4.2-6
changelog:
  - Make getaddrinfo call use AI_ADDRCONFIG.
  - Don't put so much information in the user-agent header string (bug #97273).


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - update to 0.3.2 to fix the DNS Ctrl-C segfaults
  - update URLs, the project moved
  - include man page


author: Radek Vokal <rvokal@redhat.com> 4.10-2.EL4.1
changelog:
  - fixed output for 64bit core files (#139808) <kzak@redhat.com>
  - fixed crashes in threaded environment (#143871) <arjanv@redhat.com>


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - zlib patch deleted, note patch deleted, rh patch updated, debian patch updated
  - upgrade to file-4.10


author: Jeff Johnson <jbj@jbj.org> 4.07-1
changelog:
  - upgrade to 4.07.
  - deal gracefully with unreadable files (#113207).
  - detect PO files (from Debian).


author: Jeff Johnson <jbj@jbj.org> 4.02-3
changelog:
  - use zlib rather than exec'ing gzip.

  -* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com>
  -- Add Selinux support.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.37-1
changelog:
  - 3.37
  - s/Copyright/License/
  - build with --enable-fsect-man5, drop patch
  - disable two old patches


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix off-by-1 error when creating filename for use with -i.
  - include a copy of GNOME /etc/mime-types in /usr/share/magic.mime (#14741).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - identify ELF stripped files correctly (#4665).
  - use SPARC (not sparc) consistently throughout (#4665).
  - add entries for MS Office files (#4665).


author: Edwin Huffstutler <edwinh+flexbackup@edwinh.org>
changelog:
  - add more requires, update description, email address.
  - really goes in /usr/bin since it needs perl anyway --
    if you only have your root fs, run restore or tar by hand :)


author: Ray Strode <rstrode@redhat.com> - 2.1.9-4.el4
changelog:
  - assume any allocation over 32bits is an overflow, even
    on 64-bit platforms
  - remove memory debugging disabling patch


author: Ray Strode <rstrode@redhat.com> - 2.1.9-3
changelog:
  - add patch from Behdad Esfahbod <besfahbo@redhat.com> to
    correct freetype crasher issues (bugs 200033, 199397, 200179,
    200377)


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - gamin_data_conn_event fix
  - crash from bug gnome #303932
  - Inotify and mounted media #171201
  - mounted media did not show up on Desktop #159748
  - write may not be atomic
  - Monitoring a directory when it is a file
  - Portability to Hurd/Mach and various code cleanups
  - Added support for ~ as user home alias in .gaminrc


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - Close inherited file descriptors on exec of gam_server
  - Cancelling a monitor send back a FAMAcknowledge
  - Fixed for big files > 2GB
  - Bug when monitoring a non existing directory
  - Make client side thread safe
  - Unreadable directory fixes
  - Better flow control handling
  - Updated to latest inotify version: 0.23-6


author: Daniel Veillard <veillard@redhat.com> 0.0.26-1
changelog:
  - Fix an include problem showing up with gcc4</li>
  - Fix the crash on failed tree assert bug #150471 based on patch from Dean Brettle
  - removed an incompatibility with SGI FAM #149822


author: Daniel Veillard <veillard@redhat.com> 0.0.25-1
changelog:
  - Fix a configure problem reported by Martin Schlemmer
  - Fix the /media/* and /mnt/* mount blocking problems from 0.0.24 e.g. #142637
  - Fix the monitoring of directory using poll and not kernel


author: Daniel Veillard <veillard@redhat.com> 0.0.24-1
changelog:
  - more documentation
  - lot of serious bug fixes including Gnome Desktop refresh bug
  - extending the framework for more debug (configure --enable-debug-api)
  - extending the python bindings for watching the same resource multiple times
    and adding debug framework support
  - growing the regression tests a lot based on python bindings
  - inotify-0.19 patch from John McCutchan
  - renamed python private module to _gamin to follow Python PEP 8


author: Daniel Veillard <veillard@redhat.com> 0.0.23-1
changelog:
  - memory corruption fix from Mark on the client side
  - extending the protocol and API to allow skipping Exists and EndExists
    events to avoid deadlock on reconnect or when they are not used.


author: Daniel Veillard <veillard@redhat.com> 0.0.20-1
changelog:
  - Frederic Crozat seems to have found the GList corruption which may fix
    - Frederic Crozat also fixed poll only mode


author: Daniel Veillard <veillard@redhat.com> 0.0.19-1
changelog:
  - still chasing the loop bug, made another pass at checking GList,
    added own copy with memory poisonning of GList implementation.
  - fixed a compile issue when compiling without debug


author: Daniel Veillard <veillard@redhat.com> 0.0.18-1
changelog:
  - still chasing the loop bug, checked and cleaned up all GList use
  - patch from markmc to minimize load on busy apps


author: Daniel Veillard <veillard@redhat.com> 0.0.14-1
changelog:
  - Found and fixed the annoying bug where update were not received
    should fix bugs ##132429, #133665 and #134413
  - new mechanism to debug on-the-fly by sending SIGUSR2 to client or server
  - Added documentation about internals


author: Daniel Veillard <veillard@redhat.com> 0.0.11-1
changelog:
  - update to the latest version of inotify
  - inotify support compiled in by default
  - fix ABI FAM compatibility problems #133162


author: Daniel Veillard <veillard@redhat.com> 0.0.10-1
changelog:
  - more documentation
  - Added support for a configuration file $HOME/.gaminrc
  - fixes FAM compatibility issues with FAMErrno and FamErrlist #132944


author: Daniel Veillard <veillard@redhat.com> 0.0.7-1
changelog:
  - add support for both polling and dnotify simultaneously
  - fixes monitoring of initially missing files
  - load control on very busy resources #124361, desactivating
    dnotify and falling back to polling for CPU drain


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.24
changelog:
  - further NIS+ fixes (#190803)
  - fix regcomp and regexec with multibyte locales other than UTF-8 (#193873)
  - fix nscd -i {passwd,group,hosts}, protect db prunning with a lock
    (#191464)
  - include /lib*/rtkaio/ only if %{rtkaioarches} macro is set, by default
    don't include it
  - fix nscd SIGHUP database invalidation
  - fix posix_spawn (#193631)
  - fix enz_strip (BZ#2703)
  - fix insque (BZ#2766)
  - fix uninitialized len for alloca in ld.so $ORIGIN/$PLATFORM handling
    (BZ#2792)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.23
changelog:
  - remove SETENT_BATCH_READ=TRUE support from NIS+, use a different
    approach to speed up get*ent* requests (#188246, IT#91309, IT#91192)
  - search NIS+ parent domains if needed (#190803)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.21
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - don't segfault on invalid arguments to sched_getaffinity


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.20
changelog:
  - assorted NIS+ fixes (#174847, IT#86324)
  - support nscd database online growth (#186267, IT#88367, IT#92245)
  - fix ITIMER_PROF frequency (#181683, IT#87409, BZ#2268)
  - fix namespace macro nesting in <math.h> (#179525)
  - avoid crashes in heavy stdio threaded use during exit (#168266)
  - ignore prelink temporaries in ldconfig (#176570)
  - fix memccpy on ia64 (BZ#2013)
  - remove nonnull attribute from ctermid prototype
  - backported upstream BZ fixes:
    1201, 1566, 1913, 1920, 1951, 1952, 1955, 1962, 1978, 2066, 2072, 2080,
    2126, 2153, 2173, 2226, 2415, 2418, 2420, 2451, 2498, 2501, 2502, 2509,
    2571, 2632
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist
  - add auto-propagate switch to nscd.conf for passwd and group databases.  When
    set to no, byname requests don't add by[ug]id cache entries and vice versa
    (#187521, IT#85571)
  - avoid nscd segfault when killed with SIGHUP if one or more databases are
    disabled (#189978, IT#92297)
  - fix memory leak in getaddrinfo (#187087)
  - speed up NIS+ operation when SETENT_BATCH_READ is set in /etc/default/nss
    (#188246, IT#91309, IT#91192)
  - don't segfault on too large argp key values (#189545)
  - avoid segfaults with bogus MALLOC_CHECK_= in environment
  - make nscd paranoia mode working with non-root server-user (#189779)
  - fix ldd script if one of the dynamic linkers is not installed (#190259)
  - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - fix cancellation during fork ()


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.19
changelog:
  - adjust nptl_db for dtv_t changes from -2.16 (#179165)
  - fix setuid etc. hangs on i?86 if some thread exits during the call
    (#167766, IT#78380)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.17
changelog:
  - fix argument checking in yp_order (BZ#1925)
  - don't cache euid/egid in euidaccess
  - avoid unnecessary socket read in nscd client code if hostname has
    no aliases
  - fix do_ypcall in case of memory allocation failure


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.16
changelog:
  - fix strncmp on ppc{32,64} (#173643, IT#83510)
  - define shmatt_t type on ia64 in <sys/shm.h> (#173680, IT#82976)
  - remove LinuxThreads man pages to avoid confusion, section 3p
    man pages are much more accurate for NPTL
  - fix bindresvport to really try more ports if range 600 .. 1023 is full
    (#173837, IT#81365)
  - add to dtv_t array flags whether a pointer has been allocated statically
    or dynamically and only free the dynamically allocated ones
    (#172761, IT#82911)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.15
changelog:
  - update from CVS (glibc-2_3-branch)
    - alpha div/rem fix (BZ#1498)
    - fix mips syscall.h generation (BZ#758)
    - can compile source using gcc 4.0.x (BZ#721, BZ#1384)
    - update tzcode/tzdata to 2005m
  - make sure waitid syscall is used on ppc*/s390*
  - on ia64 don't abort on unhandled math function exception codes (#165693)
  - remove use of _RE_ARGS in <regex.h> (#167019, IT#78801)
  - fix setuid etc. hangs if some thread exits during the call
    (#167766, IT#78380)
  - fix memory leak in innetgr (#169051)
  - thread-safety fix for innetgr (#173476, IT#77263)
  - fix getent hosts IP for IPv4 IPs (#169831, IT#80831)
  - allow nscd log to grow beyond 2GB on 32-bit arches
    (#170282, IT#77309)
  - avoid freeing static buffer in getpw* when using nscd
    and nscd GC is in progress (BZ#1363, #169841, #173358)
  - fix a race in pthread_cancel_init on ia64 (#173353, IT#82991)
  - nscd persistent database checker (#170320)
  - fix resolving over TCP (#161181, #165802)
  - write LD_DEBUG= conflict processing message to LD_DEBUG_OUTPUT
    stream instead of stdout (#171767)
  - increase the size ELF header size read from the beginning
    of libraries on 64-bit arches to avoid unnecessary additional
    reads
  - handle EINTR in sigwait properly
  - use posix_fallocate instead of ftruncate in nscd
  - msync hash table and header in nscd for persistent caches
  - fix argp_error and argp_failure
  - print real thread number, max threads, restart interval and paranoia
    setting in nscd statistics
  - fix nis_leaf_of_r for buflen == 0
  - use stat64 instead of stat for nscd persistent caches
  - be more verbose in nscd -d -d -d debug mode
  - fix memory leaks in setlocale (BZ#1318)
  - handle EINTR properly in nscd
  - hypotf fix
  - fix getlogin_r call in glob (BZ#1061)
  - fix memory leak in getent netgroup printing
  - fix obstack.h (obstack_int_grow_fast) for !__STDC__ (BZ#1331)
  - fix typo in xtrace (BZ#217)
  - fix sockatmark (BZ#1010)
  - fix __stack_prot if RELRO region wasn't properly aligned (BZ#1346)
  - fix lddlibc4
  - don't use needlessly TLS LD model in libc.so
  - fix fmemopen (BZ#394)
  - fix mbrtowc (BZ#714)
  - add -a option to getconf (BZ#652)
  - fix fgets with last argument 1 (BZ#713)
  - fix fwrite (BZ#1078)
  - fix strto{f,d,ld}* in tr_TR locale (BZ#1230)
  - fix %n readonly string checks
  - -Wundef fix for features.h (BZ#1438)
  - fix csqrt{,f,l} (BZ#1466)
  - argp_usage inline can throw (BZ#1373)
  - fix handling of 2GB+ lines in getdelim (BZ#1405)
  - fix handling of very high year in {,as}ctime (BZ#1459)
  - fix {,as}ctime_r (BZ#1460)
  - fix tgmath.h (BZ#865)
  - fix strxfrm_l (BZ#968)
  - make sure LLONG_MAX etc. are defined with -D_GNU_SOURCE or
    -D_ISOC99_SOURCE, even when not using -std=c99 (BZ#1228)
  - fix address ordering in getaddrinfo (BZ#524, BZ#644)
  - fix __{BEGIN,END}_NAMESPACE_* pairing in headers (BZ#1051)
  - fix error handling in *printf
  - fix off by one error in NIS publickey handling
  - fix svc_getreqset on 64-bit arches (BZ#1548)
  - fix backtrace_symbols_fd comment (BZ#1579)
  - fix AI_ALL handling in getaddrinfo (BZ#1774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.13
changelog:
  - change sys/quota.h to default to -D_LINUX_QUOTA_VERSION=1.
    If you want to use sys/quota.h for the quota ABI that is actually
    used in RHEL3, you need to pass -D_LINUX_QUOTA_VERSION=2
    manually


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.12
changelog:
  - hack around ia32el bug when running glibc_post_upgrade in i?86.rpm
    glibc on ia64 under ia32el (#154415)
  - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
    poll when contacting nscd more gracefully
  - remove malloc attribute from posix_memalign
  - correctly size nscd buffer for grpcache key (#163538)
  - fix atan2f
  - avoid memory leaks in error(3)
  - use NVR rather than NV dependency on glibc package in
    glibc-{headers,devel} subpackages (#164073)
  - fix execvp if PATH is not set in environment and the call is about to fail
    (BZ#1125)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.11
changelog:
  - include program name in __chk_fail error message
  - don't write 0 to gid/uid column for group/username starting with + or -
    in putgrent/putpwent
  - fix Yen mapping in IBM93{0,9} charsets
  - add sr_CS{,.UTF-8} locales (BZ#38)
  - locale updates (mn_MN, fa_IR)
  - make sure EINVAL is returned from pthread_create if requested thread
    scheduling priority is invalid
  - change NPTL <pthread.h> initializers to avoid warnings, with both -pedantic
    and -W (BZ#915, #162722)
  - fix NPTL <pthread.h> with -ansi -fexceptions
  - fix tst-cancel17 testcase
  - avoid SIGPIPE in nscd
  - fix nscd -g yes/no strings
  - avoid using variable length arrays in regex internals unnecessarily
  - fix *scanf if decimal point is more than one byte long
  - fix rpcgen to output #include <rpc/pmap_clnt.h> even without -C
  - cosmetic fix for ia64 strlen (BZ#1016)
  - add GOT check to dl-execstack.c on i?86
  - avoid namespace pollution in ppc32 {,f}truncate64
  - handle 'z' in strptime*
  - properly propagate return values in nss_compat
  - avoid some unnecessary PLT relocations introduced in 2.3.4-2.10
    or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.10
changelog:
  - update from CVS (fedora-2_3-branch)
    - remove nonnull attribute from acct (BZ#877)
    - allow NLS of some strings that couldn't be translated before (BZ#253)
    - execvp fix (BZ#851)
    - update IA-64 libm from Intel 2005-04-05 (#142494, BZ#592)
    - fix initgroups when passed zero-size buffer (BZ#661)
    - update tzcode to 2005h (BZ#825)
  - add 19 UTF-8 locales where only non-UTF-8 locales existed before
    (#156115, IT#69940)
  - fix xdr_rmtcall_args on 64-bit architectures (#151686, IT#68590)
  - fix posix_fallocate{,64} (#156289, IT#71246)
  - use -laudit in nscd (#159217)
  - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583, IT#75029)
  - handle big amounts of networking interfaces in getifaddrs/if_nameindex
    (#159399, IT#73230)
  - fix nscd cache pruning (#150748)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773, #160091)
  - support classes keyword in /etc/hesiod.conf (#150350)
  - fix IBM939 iconv module (BZ#955)
  - fix malloc_trim (BZ#779)
  - change sys/quota.h to match current kernel's quotactl interface,
    include support for the obsoleted interface (no longer supported
    in current kernels) with -D_LINUX_QUOTA_VERSION=1 (#133095)
  - make regexec thread safe (BZ#934)
  - make -lrpcsvc and -lmcheck usable for PIEs and shared libraries (#149284)
  - fix sendfile{,64} prototypes (BZ#961)
  - fix pa_IN locale's am_pm (#158715, BZ#622)
  - don't use nisplus in nsswitch.conf examples, mention that nisplus is
    unsupported (#159729, IT#74024)
  - don't use symbolic register names %rdi and %rbx in x86-64 cfi directives
    to workaround GNU assembler bug (#162545)
  - fix strfry and initstate{,_r}
  - slightly optimize fnmatch in multi-byte locales
  - fix a typo in libc info wmemcpy description
  - fix nis memory handling when realloc fails
  - fix xdrstdio_putlong on 64-bit architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.9
changelog:
  - fix recursive dlclose (#157246, #154641, IT#72007)
  - fix a typo in WINDOWS-31J charmap (#151739)
  - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.7
changelog:
  - fix dlclose (#145810)
  - clear padding in gconv-modules.cache (#146614, BZ#776)
  - add libComplexFloat-GCC_3.2.so on ppc64, so that
    LD_PRELOAD=libComplexFloat-GCC_3.2.so can be used to work
    around ABI change in _Complex float passing for GCC 3.3 and
    earlier compiled programs using complex float functions from
    libm.so.6 (#149681)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.6
changelog:
  - resync with fedora-2_3-branch
  - fix handling of hosts with ~ 1K or bigger info per answer
    when using nscd (#140378)
  - handle partial writes in nscd and partial reads in nscd client
    code (#147478)
  - fix a bug in execvp introduced in 2.3.4-2.3, add testcases
    for the whole exec* family of functions
  - fix TLS handling in statically linked programs
  - provide symlink/readlink prototypes with -D_POSIX_C_SOURCE=200112L


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.4
changelog:
  - fix initstate{,_r} (BZ#710)
  - fix segfault if chrooted app attempts to dlopen a library
    and no standard library directory exists at all (#147067, #144303)
  - fix initgroups when nscd is running, but has group caching disabled
    (#146588)
  - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
    has not been called yet (#146710)
  - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
  - service nscd cosmetic fixes (#146776)
  - fix s390{,x} string.h


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.3
changelog:
  - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
  - fix zdump -v segfaults on x86-64 (#146210)
  - update IA-64 libm from Intel v2.1 (#142494)
  - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
  - declare ftruncate for POSIX 2003 (BZ#640)
  - fix errno values for futimes (BZ#633)
  - unconditionally include <features.h> in malloc.h (BZ#650)
  - change regex \B handling to match old GNU regex as well as perl/grep's dfa
    (from empty string inside of word to empty string not at a word boundary,
     BZ#693)
  - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
    and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
    %gs access with negative offsets
  - fix addseverity
  - fix fmemopen
  - fix rewinddir
  - increase svc{tcp,unix}_create listen backlog
  - fix vDSO l_map_end/l_text_end computation


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.1
changelog:
  - apply glibc-ppc-assume.patch for RHEL4 unconditionally (#144291)
  - don't apply glibc-nptl-check.patch for RHEL4
  - fix IA-32 stack alignment for LinuxThreads thread functions
    and functions passed to clone(2) directly
  - fix ecvt{,_r} on denormals (#143279)
  - fix __tls_get_addr typo
  - fix rounding in IA-64 alarm (#143710)
  - don't reinitialize __environ in __libc_start_main, so that
    effects of setenv/putenv done in DSO initializers are preserved
    (#144037, IT#57403)
  - fix ppc/ppc64 rint and other rounding functions (#144931, BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Tim Waugh <twaugh@redhat.com> 2.5.1-32.2
changelog:
  - Back-ported egf-speedup patch (bug #179636).  Also required fgrep,
    dfa-optional, and w patches to be back-ported.  Also fixes bug #176345.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-31
changelog:
  - Make 'grep -F' avoid UTF-8 processing if the pattern contains no
    multibyte characters (bug #133932).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-27
changelog:
  - Fix dfa multibyte character class matching when -i is used (bug #123363).
  - Use bracket patch before i18n patch to make it clear that the bug exists
    upstream.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-24
changelog:
  - Work around glibc bug #112869 (segfault in re_compile_pattern).
  - Avoid patching Makefile.am, to avoid automake/autoconf weirdness.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.2-7
changelog:
  - Fix up the i18n patch - it used to break "grep '[]a]'" (#49003)
  - revert to 2.4.2 (latest official release) for now


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.5e-2
changelog:
  - Fix up the --color option to behave like the one from ls (--color=auto)
    Sooner or later, some people will alias grep="grep --color" and wonder why
    their scripts break.
  - Update docs accordingly
  - Get rid of the annoying blinking in grep --color


author: John H. Bennett III <bennettj@johnbennettservices.com> 3.0.11-01sme01
changelog:
  - Patch to upgrade Horde 3.0.10 to 3.0.11 maintaing the go.php patch
  - http://lists.horde.org/archives/announce/2006/000287.html [SME: 1710]


author: Charlie Brady <charlie_brady@mitel.com> 3.0.9-02sme01
changelog:
  - Include go.php from php 3.1 - security patch to fix
    http://www.securityfocus.com/bid/17117/info [SME: 1061]
  - Replace deprecated Copyright: header with License: header.


author: Dan Brown <dan@familybrown.org>
changelog:
  - 2.1 release 1es
  - changed apache user and web root to comply with SME Server
  - removed horde.conf file, as this information is in e-smith-horde RPM


author: John (J5) Palmieri <johnp@redhat.com> - 0.4.2-4.EL4
changelog:
  - Add patch to stop HAL complaining about DEVPATH not being set on
    kernels that do not support it (Bug #169387)


author: John (J5) Palmieri <johnp@redhat.com> 0.4.2-2.EL4
changelog:
  - Add patch to fix segfault in fstab-sync when ejecting CD (Bug 163772)
  - Add patch to fix hotplug issues with USB cds (Bug 164777)
  - Add patch to run callouts synchronously (Bug 167811)


author: David Zeuthen <davidz@redhat,com> 0.4.2-1.EL4
changelog:
  - Upstream release 0.4.2
  - Drop all patches as they are committed upstream
  - Fixes for #140557, #139227, #139962, #139600, #136971
  - Workaround for #138148 through blacklisting certain IDE optical drives


author: David Zeuthen <davidz@redhat,com> 0.4.0-5
changelog:
  - Make hal work with PCMCIA IDE hotpluggable devices (#133943)
  - Fixup URL listed from rpm -qi (#136396)
  - Add Portuguese translations for hal
  - Fix addition of Russian and Hungarian translations


author: David Zeuthen <davidz@redhat.com> 0.4.0-4
changelog:
  - Make hald cope with missing hotplug events from buggy drivers (#135202)
  - Fix the order of mount options in fstab-sync (#136191)
  - Allow x86 legacy floppy drives in default policy (#133777)
  - Fix fstab-sync crashing without any options and not run from hald (#136214)
  - man page for fstab-sync references non-existing files (#136026)
  - Add Russian translations for hal (#135853)
  - Add Hungarian translations for hal


author: David Zeuthen <davidz@redhat.com> 0.4.0-3
changelog:
  - Fix bad use of O_NONBLOCK as the 2.6.8-1.624 kernel exposes this (#135886)
  - Never use the UUID as mount point candidate in the default policy 
    as it is unfriendly (#135907)
  - Fix a trivial bug in fstab-sync so the syslog messages actually expose
    the device name instead of just the word foo


author: David Zeuthen <davidz@redhat.com> 0.4.0-1
changelog:
  - Update to upstream stable version 0.4.0
  - Remove patch for libhal shutdown since that is now upstream
  - fstab-sync: man page, adds comment in /etc/fstab pointing to man page


author: David Zeuthen <davidz@redhat.com> 0.2.98-1
changelog:
  - Update to upstream release 0.2.98. 
  - Use --with-pid-file so we don't depend on /etc/redhat-release


author: David Zeuthen <davidz@redhat.com> 0.2.97.cvs20040823-1
changelog:
  - Update to upstream CVS HEAD
  - Remove symlinking of fstab-sync from specfile since this is now being
    done in the package


author: David Zeuthen <davidz@redhat.com> 0.2.97.cvs20040819-1
changelog:
  - Update to upstream CVS HEAD
  - Remove suid patch as it is fixed upstream
  - Fix some dependency issues (RH Bug #130202)


author: John (J5) Palmieri <johnp@redhat.com> 0.2.96-2
changelog:
  - fixed Requires lines to use % instead of ${}
  - made dbus related requires lines use the = condition instead of =<
    because the dbus API is still in flux


author: John (J5) Palmieri <johnp@redhat.com> 0.2.91.cvs20040527-1
changelog:
  - update to CVS head as of 5-27-2004 which contains fixes for PCMCIA
    and wireless network devices.


author: John (J5) Palmieri <johnp@redhat.com> 0.2.90.cvs20040511-3
changelog:
  - added hal-0.2.90.cvs20040511.callbackscripts.patch which installs 
    the file system mounting script in /etc/hal/device.d


author: John (J5) Palmieri <johnp@redhat.com> 0.2-1
changelog:
  - initial checkin to package repository
  - added dependency to the dbus-python package
  - added /usr/libexec/hal.dev to teh %files section


author: Johnny Hughes <johnny@centos.org> 2.0.52-28.ent.centos4
changelog:
  - Changed distro and vstring variables (in spec file) to CentOS.
  - added a powered by centos button
  - Changed index.html to centos_index.html


author: Joe Orton <jorton@redhat.com> 2.0.52-25.ent
changelog:
  - mod_rewrite: extend maximum text map line length to 8K (#185029)
  - mod_ssl: add SSL_CLIENT_V_REMAIN variable (#163488)


author: Joe Orton <jorton@redhat.com> 2.0.52-22.ent
changelog:
  - worker MPM: add security fix for memory consumption DoS (CVE-2005-2970),
    and bug fixes for handling resource allocation failures (#173509)


author: Joe Orton <jorton@redhat.com> 2.0.52-21.ent
changelog:
  - mod_ssl: add security fix for HTTP-on-SSL-port handling (CVE-2005-3357)
  - mod_imap: add security fix for XSS issue (CVE-2005-3352)


author: Joe Orton <jorton@redhat.com> 2.0.52-19.ent
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (#167194, CVE CAN-2005-2700)
  - add security fix for byterange filter DoS (#167102, CVE CAN-2005-2728)


author: Joe Orton <jorton@redhat.com> 2.0.52-18.ent
changelog:
  - mod_auth_ldap: fix issues with some authn/authz combinations
    (thanks to Jared Jennings, #159289)
  - mod_ldap: fix cache mutex permissions so that locking works
  - mod_ldap: fix child crashes if cache is disabled


author: Joe Orton <jorton@redhat.com> 2.0.52-14.ent
changelog:
  - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
  - mod_ssl: add fix to enable buffering (upstream #35279)
  - mod_ssl: immediately catch aborted connections (upstream #32699)
  - add htdbm(1) man page (Matt Brubeck, #114080)
  - mod_userdir: add fix for possible memory corruption (upstream #34588)
  - fail build if PIE support could not be enabled


author: Joe Orton <jorton@redhat.com> 2.0.52-13.ent
changelog:
  - fix fd leak if using piped loggers (#157832)
  - fix error messages in piped loggers respawn failure case
  - in children, close read fd of pipe to piped loggers (Jeff Trawick, #127981)
  - mod_ssl: apply ssl-*-shutdown settings correctly (upstream #34452)


author: Joe Orton <jorton@redhat.com> 2.0.52-11.ent
changelog:
  - restore use of $OPTIONS in apachectl again (#115910)
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)


author: Joe Orton <jorton@redhat.com> 2.0.52-10.ent
changelog:
  - mod_proxy: notice aborted client-connection (#138359)
  - mod_include: fix off-by-one in variable expansion (upstream #32985)
  - require apr with sendfile support on s390 (#146891)


author: Joe Orton <jorton@redhat.com> 2.0.52-8.ent
changelog:
  - apachectl: fix for final RHEL4 libselinux tools location
  - mod_ssl: revert to use builtin passphrase prompt again (#128667)


author: Joe Orton <jorton@redhat.com> 2.0.52-5.ent
changelog:
  - update htsslpass to be a filter rather than exec:
  - refuse to "reload" from init script if $HTTPD -t fails


author: Joe Orton <jorton@redhat.com> 2.0.52-4.ent
changelog:
  - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  - fix SSLSessionCache comment for distcache in ssl.conf
  - restart using SIGHUP not SIGUSR1 after logrotate
  - add ap_save_brigade fix (upstream #31247)
  - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  - apachectl: restore use of $OPTIONS
  - apachectl: refuse to restart if $HTTPD -t fails
  - apachectl: run $HTTPD -t in user SELinux context for configtest


author: Joe Orton <jorton@redhat.com> 2.0.50-8
changelog:
  - add improved child reclaim timing logic (#119128/#132360)
  - add BuildRequire zlib-devel for mod_deflate


author: Joe Orton <jorton@redhat.com> 2.0.50-6
changelog:
  - include /etc/sysconfig/httpd template (#112085)
  - pass $OPTIONS in httpd invocations in apachectl (#115910)
  - do not pass $OPTIONS to apachectl from init script
  - start httpd in C locale by default from apachectl


author: Joe Orton <jorton@redhat.com> 2.0.50-5
changelog:
  - move manual configuration into conf.d/manual.conf (#131208)
  - add test_hook from HEAD, -t -DDUMP_CERTS for mod_ssl
  - document AddDefaultCharset change since 1.3 in migration.html


author: Joe Orton <jorton@redhat.com> 2.0.50-4
changelog:
  - start httpd in the C locale by default (#128002)
  - fix CustomLog comments in default httpd.conf (#43223)
  - ensure correct mod_suexec vs mod_userdir hook ordering 
    (Joshua Slive, upstream #18156)


author: Joe Orton <jorton@redhat.com> 2.0.50-3
changelog:
  - update -proxy11 patch
  - explain where suexec went if SuexecUserGroup is used but
    /usr/sbin/suexec is not found


author: Joe Orton <jorton@redhat.com> 2.0.49-8
changelog:
  - split out suexec into httpd-suexec package (#77972)
  - link to system pcreposix.h to fix including httpd.h


author: Joe Orton <jorton@redhat.com> 2.0.49-7
changelog:
  - don't install or use bundled pcreposix.h
  - bump default MaxClients to 256
  - drop default Timeout to 2 minutes
  - merge from upstream:
   * add fix for VirtualHost multiple address handling (Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 2.0.49-5
changelog:
  - remove comments about ScoreBoardFile in httpd.conf
  - avoid redundant name lookup in pod code
  - mod_headers: add %{...}s feature for using SSL variables
  - mod_autoindex: don't truncate output on stat() failure (#117959)
  - mod_ssl: fix shmcb corruption with small caches (Geoff Thorpe)
  - mod_ssl: security fix for overflow in FakeBasicAuth (CVE CAN-2004-0488)
  - mod_deflate: fix memory consumption for large responses
  - check that suexec is setuid root (André Malo)
  - worker: add ThreadStackSize (Jeff Trawick) and ThreadGuardSize directives


author: Joe Orton <jorton@redhat.com> 2.0.49-4
changelog:
  - make "noindex" page valid XHTML 1.1 (Pascal Volk, #122020)
  - fix SEGV with no Listen directives (Michael Corcoran)
  - mod_cgi: synch with 2.0 backport proposed upstream


author: Joe Orton <jorton@redhat.com> 2.0.49-3
changelog:
  - conflict with older pcre (#121531)
  - include mod_ext_filter
  - mod_cgi: handle concurrent stderr/stdout from script


author: Joe Orton <jorton@redhat.com> 2.0.49-2
changelog:
  - mod_ssl: fix session cache memory leak (Madhu Mathihalli)
  - mod_ssl: fix SEGV when trying to shutdown during pool cleanup
  - merge the mod_proxy HTTP/1.1-compliance fixes
  - apply fix for #118020


author: Joe Orton <jorton@redhat.com> 2.0.49-1
changelog:
  - update to 2.0.49 (#118798, thanks to Robert Scheck)
  - only link ab and mod_ssl against SSL_LIBS
  - open log files using APR_LARGEFILE where available


author: Joe Orton <jorton@redhat.com> 2.0.48-17
changelog:
  - use "SSLMutex default" in default ssl.conf
  - limit to 128K XML request bodies in default httpd.conf; fix to 
    give a 413 error not a 400 if the limit is exceeded
  - mod_rewrite: add %{SSL:...} and %{HTTPS} variable lookups
  - mod_dav: propagate executable property across COPY/MOVE
  - mod_dav: give 507 on out-of-space errors in more places
  - mod_ssl: add ssl_is_https optional function
  - mod_ssl: support indexed lookup of DN components
  - mod_ssl: optimised variable lookup
  - mod_ssl: install only minimal mod_ssl.h
  - worker: fix potential hang at restart


author: Joe Orton <jorton@redhat.com> 2.0.48-16
changelog:
  - fix apxs -q installbuilddir
  - really update to ab from HEAD
  - remove check that accept() returns an fd < FD_SETSIZE


author: Joe Orton <jorton@redhat.com> 2.0.48-14
changelog:
  - mod_dav: fix 401 on destination and reject unescaped fragment in URI
  - remove redundant ldconfig invocation from mod_ssl %post
  - remove unnecessary -headusage patch


author: Joe Orton <jorton@redhat.com> 2.0.48-13
changelog:
  - allow further customisation of init script (Peter Bieringer, #114619)
  - worker fixes from upstream
  - use basename(filename) in APLOG_MARK to reduce noise levels at 
    "LogLevel debug"


author: Joe Orton <jorton@redhat.com> 2.0.48-10
changelog:
  - update to ab from HEAD
  - remove dbmmanage man page (part of #114080)
  - mod_ssl: fix streaming nph- CGI scripts over SSL
  - mod_autoindex: fixes from 2.0 branch (André Malo)
  - add NameVirtualHost vs mod_ssl warning to httpd.conf (#114315)
  - mod_proxy: HTTP/1.1-compliance fixes from HEAD


author: Joe Orton <jorton@redhat.com> 2.0.48-9
changelog:
  - use a large BSS in the test PIE executable to trigger bugs early
  - tighten check on CPP output in MMN check (#113934)


author: Joe Orton <jorton@redhat.com> 2.0.48-8
changelog:
  - add man page fixes
  - mod_include: use parser rewrite+fixes from 2.0 branch (André Malo et al)
  - mod_ssl: add distcache support (Geoff Thorpe)
  - mod_ssl: SSL variable handling fixes for non-SSL connections (various)
  - allow linking modules against specific libraries found during configure


author: Joe Orton <jorton@redhat.com> 2.0.48-7
changelog:
  - hack to ensure that /usr/sbin/suexec gets stripped
  - merges from upstream:
   * fix for CVE CAN-2003-0020 (André Malo)
   * open log files read-only (Jeff Trawick)
   * mod_cgi: fix logging of script exec failure messages (Jeff Trawick)
   * mod_proxy: fix leak in request body handling (Larry Toppi)
  - merges from Taroon:
   * move away /var/www/html/index.html before upgrade from 1.3 (#70705)
   * allow upgrade from Stronghold 4.0
   * migration guide updates 
   * mod_log_config: fix logging of timezone (upstream #23642)
   * mod_ssl: restore readable error descriptions in error log


author: Joe Orton <jorton@redhat.com> 2.0.48-6
changelog:
  - fix httpd.init issues reported by Behdad Esfahbod
  - add fix for mod_usertrack (#113269)
  - automatically raise RLIMIT_CORE if CoreDumpDirectory is used
  - emit warning at end of %prep if PIE support is not enabled
  - add symlink to libtool script from build directory (#113720)
  - don't link suexec against the world


author: Joe Orton <jorton@redhat.com> 2.0.48-5
changelog:
  - use graceful restart in logrotate
  - bump default MaxRequestsPerChild for prefork to 4000
  - move vendor string for Server header into spec file
  - include mod_status extension hook and use it in mod_ssl to include
    SSL session cache statistics in server-status output


author: Joe Orton <jorton@redhat.com> 2.0.48-2
changelog:
  - update to 2.0.48
  - includes security fix for CVE CAN-2003-0542
  - include mpm*.h to fix mod_fastcgi build (#108080)
  - increase DYNAMIC_MODULE_LIMIT to 128
  - re-enable ap_hack_* export trimming patch
  - only use -export-dynamic when linking httpd, not suexec etc
  - don't load mod_unique_id by default


author: Joe Orton <jorton@redhat.com> 2.0.47-10
changelog:
  - httpd.conf: configure test page in welcome.conf, load suexec, 
   don't use custom error docs by default, sync with upstream.
  - add "Powered by Fedora" icon (Garrett LeSage)
  - migration guide updates
  - drop mod_cgid
  - enable SSL_EXPERIMENTAL_ENGINE (#106858)
  - drop minimum suexec gid to 100 (#74753, #107083)
  - speed up graceful restarts in prefork (#105725)
  - mod_ssl fixes


author: Joe Orton <jorton@redhat.com> 2.0.47-6
changelog:
  - update httpd.conf for manual changes (alietss@yahoo.com, #101015)
  - use anonymous shm for LDAP auth cache (#103566)


author: Joe Orton <jorton@redhat.com> 2.0.47-4
changelog:
  - add mod_include fixes from upstream
  - httpd.conf updates: wording fixes from upstream; load
    mod_deflate by default, update AddLanguage section (#98455)
  - don't add eNULL cipher in default ssl.conf (#98401)
  - only bind to IPv4 addresses in default config (#98916)


author: Joe Orton <jorton@redhat.com> 2.0.45-6
changelog:
  - don't load /usr/sbin/envvars from apxs
  - add fix for mod_dav_fs namespace handling
  - add fix for mod_dav If header etag comparison
  - remove irrelevant warning from mod_proxy
  - don't conflict with thttpd (#91422)


author: Joe Orton <jorton@redhat.com> 2.0.45-5
changelog:
  - don't package any XML sources in httpd-manual
  - fix examples in default httpd.conf for enabling caching


author: Joe Orton <jorton@redhat.com> 2.0.45-3
changelog:
  - update httpd.conf for changes from default in 2.0.45
  - include conf.d/*.conf after loading standard modules
  - include LDAP and cache modules (#75370, #88277)
  - run buildconf in %build not %prep


author: Joe Orton <jorton@redhat.com> 2.0.45-1
changelog:
  - update to 2.0.45 (#82227)
  - use separate apr, apr-util packages (#74951)
  - mark logrotate file as noreplace (#85654)
  - mark all of /var/www/error as %config-not-noreplace
  - remove dates from error pages (#86474)
  - don't enable mod_cgid for worker MPM (#88819)


author: Joe Orton <jorton@redhat.com> 2.0.40-21.1
changelog:
  - add security fixes for CAN-2003-0020, CAN-2003-0132, CAN-2003-0083
  - add security fix for file descriptor leaks, #82142
  - add bug fix for #82587


author: Joe Orton <jorton@redhat.com> 2.0.40-21
changelog:
  - add security fix for CAN-2003-0020; replace non-printable characters
    with '!' when printing to error log.
  - disable debuginfo on IA64.


author: Joe Orton <jorton@redhat.com> 2.0.40-17
changelog:
  - add mod_cgid and httpd binary built with worker MPM (#75496)
  - allow choice of httpd binary in init script
  - pick appropriate CGI module based on loaded MPM in httpd.conf
  - source /etc/sysconfig/httpd in apachectl to get httpd choice
  - make "apachectl status" fail gracefully when links isn't found (#78159)


author: Joe Orton <jorton@redhat.com> 2.0.40-15
changelog:
  - fix possible infinite recursion in config dir processing (#77206)
  - fix memory leaks in request body processing (#79282)


author: Joe Orton <jorton@redhat.com> 2.0.40-14
changelog:
  - remove unstable shmht session cache from mod_ssl
  - get SSL libs from pkg-config if available (Nalin Dahyabhai)
  - stop "apxs -a -i" from inserting AddModule into httpd.conf (#78676)


author: Joe Orton <jorton@redhat.com> 2.0.40-12
changelog:
  - pass libdir to configure; clean up config_vars.mk
  - package instdso.sh, fixing apxs -i (#73428)
  - prevent build if upstream MMN differs from mmn macro
  - remove installed but unpackaged files


author: Joe Orton <jorton@redhat.com> 2.0.40-9
changelog:
  - security fixes for CAN-2002-0840 and CAN-2002-0843
  - fix for possible mod_dav segfault for certain requests


author: Joe Orton <jorton@redhat.com> 2.0.40-7
changelog:
  - add LoadModule lines for proxy modules in httpd.conf (#73349)
  - fix permissions of conf/ssl.*/ directories; add Makefiles for
    certificate management (#73352)


author: Joe Orton <jorton@redhat.com> 2.0.40-4
changelog:
  - set SIGXFSZ disposition to "ignored" (#69520)
  - make dummy connections to the first listener in config (#72692)


author: Joe Orton <jorton@redhat.com> 2.0.40-3
changelog:
  - allow "apachectl configtest" on a 1.3 httpd.conf
  - add mod_deflate
  - enable LDAP support in apr-util
  - don't package everything in /var/www/error as config(noreplace)


author: Joe Orton <jorton@redhat.com> 2.0.36-7
changelog:
  - use /sbin/nologin as shell for apache user (#68371)
  - add patch from CVS to fix possible infinite loop when processing
    internal redirects


author: Gary Benson <gbenson@redhat.com> 2.0.36-5
changelog:
  - patch apachectl to detect 1.3.x httpd.conf's and direct users
    to the migration guide
  - ship the migration guide


author: Joe Orton <jorton@redhat.com>
changelog:
  - move /etc/httpd2 back to /etc/httpd
  - add noindex.html page and poweredby logo; tweak default config
    to load noindex.html if no default "/" page is present.
  - add patch to prevent mutex errors on graceful restart


author: Joe Orton <jorton@redhat.com>
changelog:
  - initial build; based heavily on apache.spec and mod_ssl.spec
  - fixes: #65214, #58490, #57376, #61265, #65518, #58177, #57245


author: Bill Nottingham <notting@redhat.com> 2004_04_01-7.3
changelog:
  - fix fgrep for network device to not catch commented lines (#136531,
    expanded from <cww@redhat.com>)


author: Than Ngo <than@redhat.com> 3:2004_01_05-1
changelog:
  - update 2004_01_05, which is needed for loading firware
  - remove several patch files, which are included in new upstream


author: Bill Nottingham <notting@redhat.com> 2002_04_1-20
changelog:
  - fix bringing up of hotplug network devices that are configured as
    something other than their device name (#100622)
  - nuke hotplug-gtk package


author: Trond Eivind Glomsrød <teg@redhat.com> 2001_04_24-12
changelog:
  - Add patch from mlord@pobox.com to use gt, not ge for one of the comparions
    in the usb.agent script(#53435). We use usbmodules for this now, so the
    patch isn't in the path of execution.


author: Trond Eivind Glomsrød <teg@redhat.com> 2001_04_24-11
changelog:
  - Install usbmodules from usbutils to help sove various 
    module insertion problems (#52630, #52100, #51229, #52546)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Add extra identifiers for Wacom tablets (#50454)
  - Define IN_HOTPLUG before invoking ifup (part of #47483)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own /etc/hotplug
  - what dunderhead put that broken code in the wireless stuff? Oh yeah, me.
    (#49021)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make it sleep (20 intervals of 30 seconds) if /tmp is ro
    instead of exiting. This should make "hotplugging"
    of devices present at boot time work.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - run updfstab on remove events
  - remove the initscript, usbdevfs is now initialized before the controller


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add pci hotplug scripts (those weren't the ones bringing machines down)
  - activate the script
  - change initscript so it never tries to load usb controller modules, just synthesize events


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove init script - it makes some of the Dell servers hang.
  - remove chkconfig in post, preun
  - only include the usb files in /etc/hotplug - PCI hotplug
    doesn't work


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make summary and description match our old package
  - sanitize initscript, so it matches the others
  - Add Epoch, so we can upgrade older RPMs with Epoch: 2


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - First cut at a spec file for the hotplug scripts.
  - added patch to usb.rc to allow chkconfig to install and remove it.


author: Charlie Brady <charlieb@e-smith.com> 4.0.3-rc1-1sme02
changelog:
  - Add "Provides: imp" header.
  - Remove pre and post scripts, as they're not relevant (and potentially
    troublesome) during install from CD.


author: Gordon Rowell <gordon_rowell@mitel.com>
changelog:
  - [3.2.1-2es01]
  - Check name of "imp" registry item, rather than "horde" so that we display
    "Welcome to webmail" [gordonr 7694]


author: Dan Brown <dan@familybrown.org>
changelog:
  - 3.0 release 2es
  - removed httpd restart--it's giving errors on SME 5.1.2, and
    it's handled by the e-smith-horde RPM


author: Phil Knirsch <pknirsch@redhat.com> 0.146.19.EL-1
changelog:
  - Included pcitable update to support Nvidia FX3450 cards (#178462)
  - Updated PCI ids from upstream (#180521)
  - Fixed missing monitor entry in MonitorsDB (#189447)


author: Mike A. Harris <mharris@redhat.com> 0.146.3.EL-1
changelog:
  - Added many new nvidia PCI IDs to pcitable and Cards to synchronize it
    with X.Org X11 6.8.2. (#140601)


author: Bill Nottingham <notting@redhat.com> - 0.146.2.EL-1
changelog:
  - add sk98lin mapping (#145538)
  - fix emu10k1x mapping (#147787)
  - update usb.ids, pci.ids, MonitorsDB


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


