# changelog

author: Dave Dykstra <dwd@fnal.gov> 1.8-1
changelog:
  - Allow a previous output file to have additional proxy layers added
    on to it when checking to see if it is still valid.  That is, strip
    off any number of /CN=[0-9]+ or /CN=proxy patterns appended to the
    certificate subject.  In particular this is useful for when someone
    does voms-proxy-init -noregen after a previous run of cigetcert.


author: Dave Dykstra <dwd@fnal.gov> 1.10-1
changelog:
  - Change default --minhours value from 12 to 1.
  - If the formula calculating the remaining hours in the myproxy cert
      (%hours - %proxyhours - %minhours) comes out to a value lower
      than %minhours, set it to %minhours


author: Dave Dykstra <dwd@fnal.gov> 1.11-1
changelog:
  - If the requested --hours is fractional, round the hours of the
    original certificate up to the next whole number rather than down.
    In this case generate a proxy with the requested fractional hours.


author: Dave Dykstra <dwd@fnal.gov> 1.13-1
changelog:
  - Choose a prefix for the temp output file in the same directory as the
    output file to avoid renaming across filesystems.


author: Dave Dykstra <dwd@fnal.gov> 1.14-1
changelog:
  - Limit the number of proxy levels stripped off of %certsubject to 5.
    This is to catch programming errors where people call voms-proxy-init
    -noregen after every call to cigetcert, even when cigetcert determines
    that the previous proxy can be reused.


author: Dave Dykstra <dwd@fnal.gov> 1.15-1
changelog:
  - Fix bug that caused the proxy to be stored into MyProxy under the DN
    of a previous certificate (if it existed but could not be reused)
    rather than the newly generated one.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Fix typo in the variable name added in the last version.  This was
    not noticed because it was caught in an exception and caused it to
    always behave as if a previous proxy stored in myproxy could not be
    used.


author: Paul Wouters <pwouters@redhat.com> - 0.98.3-1
changelog:
  - Upgrade to 0.98.3
  - Fix --with-libcurl parameter to avoid automatic path detection breakage
  - openssl-devel is now required for hashing code.
  - Added clamsubmit to main package
  - Re-enabled --with-llvm as this speeds up deployment a lot.
  - Fixed older changelog dates


author: Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
changelog:
  - Upgrade to 0.98.4 and updated daily.cvd (#1111811)
  - Add build requirement to libxml2 for DMG, OpenIOC and XAR


author: Robert Scheck <robert@fedoraproject.org> - 3.7.1-7
changelog:
  - Change run-time requirement from bind-utils to %{_bindir}/dig
    as it can be provided/satisfied by different packages


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-0.2
changelog:
  - Cleaned up the directories and init script names
  - Added Requires(postun)
  - Fixed logrotate script


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-1
changelog:
  - Use integer for release ver
  - Unified Requires(foo) style
  - Added missing Requires
  - Consistent macro useage
  - Remove dot from initscript filename


author: Akemi Yagi <toracat@elrepo.org> - 5-1
changelog:
  - Release number now has 5-x format
  - Added kernel repo
  - Removed fasttrack repo
  - Added mirror sites


author: Akemi Yagi <toracat@elrepo.org> - 6-4
changelog:
  - Added extras repo
  - Enable elrepo repo by default
  - Clean up the code in the spec file [Alan Bartlett <ajb@elrepo.org>]


author: Philip J Perry <phil@elrepo.org> - 6-5
changelog:
  - Add requires for kernel to prevent installing on wrong dist.
  - Fix name of Extras repository
    [http://elrepo.org/bugs/view.php?id=339]


author: Pat Riehecky <riehecky@fnal.gov>
changelog:
  - exclude openafs as it is in the release
  - exclude elrepo-release so we don't discard this for enabled repos
  - require yum-plugin-protectbase
  - disabled by default


author: Dave Dykstra <dwd@fnal.gov> 3.0-1
changelog:
  - Initial rpm packaging.  The numbering is starting with 3.0 to be 
    greater than the latest krb5-fermi-getcert, the package that this
    is replacing.


author: Frank Nagy <nagy@fnal.gov> 1.3-1.slf6
changelog:
  - Replace aklog symlink with executable in preparation for
  - upgrade of server code to support compound principals


author: Frank Nagy <nagy@fnal.gov> 1.3-1
changelog:
  - Replaced k5push with updated version from Marc Mengel
  - Modified new-portal-ticket to display obsolescence message and exit


author: Frank Nagy < nagy@fnal.gov > 2.1-9
changelog:
  - Another set of fixes for the permissions tests and fixes
  - Do stat and chmod on /usr/bin files, not symlinks
  - Correct kdestroy and v4rcp permissions (no setuid)


author: Frank Nagy < nagy@fnal.gov > 2.1-14
changelog:
  - Re-recorrect z_krb5.csh so path varialbe is setup with
  - correct word list.  Shell will automaintian PATH variable
  - to matxh


author: Frank Nagy < nagy@fnal.gov > 2.2-1
changelog:
  - Modified kinit and kinit-debug scripts to (1) invoke aklog
  - provided with OpenAFS (as /usr/bin/aklog) and (2) added the
  - -noprdb option to aklog call so it will work for both normal
  - user principals and compound principals


author: Frank Nagy < nagy@fnal.gov > 2.2-2
changelog:
  - Modify the aklog.csh/sh and z_krb5.csh/sh scripts for
  - /etc/profile.d/ replace "aklog" by "/usr/bin/aklog -noprdb"


author: Frank Nagy <nagy@fnal.gov> 4.5-1
changelog:
  - Added Nova Far Detector KDC to search list, edit and re-format
  - SysAdmin HowTo instructions for a local KDC search list and
  - set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
  - each other so only one gets installed


author: Frank Nagy <nagy@fnal.gov> 4.6-1
changelog:
  - Update krb5.conf to v4.6 updating list of Accelerator Division servers
  - Fixed bug in make-cron-keytab so it will take error exit if run
  - in shared account via ksu rather than ssh into the account.


author: Olga Terlyga <terlyga@fnal.gov> 4.8-1
changelog:
  - Update  krb5.conf to v4.8 adding kdc to PILOT realm
  - Added i-krb-22 and added pilot KDCs t domain-realm section


author: Olga Terlyga <terlyga@fnal.gov> 5.0a-1
changelog:
  - Update krb5.conf to v5.0a adding new enctypes
  - Added aes256-cts-hmac-sha1-96  aes128-cts-hmac-sha1-96 des3-cbc-sha1
  - to default tgs,tkt and permitted enctypes


author: Olga Terlyga <terlyga@fnal.gov> 5.1-1
changelog:
  - Update krb5.conf to v5.1 to remove aklog line
  - Added krb4_convert_524 = false and krb4_use_as_req = false
  - to pam section of appdefaults
  - Added SLAC realm definition


author: Olga Terlyga <terlyga@fnal.gov> 5.2-1
changelog:
  - Adjusted list of KDCs for SLAC realm
  - New version since Windows and Mac version will not have reference enctypes


author: Frank Nagy <nagy@fnal.gov> 1.1-2.slf6
changelog:
  - Remove the kx509-512bit client (not rebuilt) and added
  - (x86-32) to openssl, nspr and nss requirements


author: Frank Nagy <nagy@fnal.gov> 1.2-1.slf6
changelog:
  - Incorporated patch from Pat Riehecky to exit if auto-import is
  - selected and Firefox is running to avoid cert8.db corruption.
  - Extended code to check for Seamonkey running as well.


author: Frank Nagy <nagy@fnal.gov> 2.0-1.slf6
changelog:
  - Rebuild kx509 to write certificate directly to file as developed
  - under Mac OS X Lion and ported back to SLF5 and now SLF6.  Modified
  - get-cert.sh to remove call to kxlist


author: Frank Nagy <nagy@fnal.gov> 2.1-1.slf6
changelog:
  - Added -q (quiet) and -o (output file spec) options
  - to v2.1 of kx509.  Modified kxlist to just exit.


author: Frank Nagy <nagy@fnal.gov> 2.2-1.slf6
changelog:
  - Updated to get-cert v3.4 by replacing "ps -ef" with "ps ux" so
  - "Is Firefox running" test works on multiuser systems where other
  - users might be running Firefox.  Replaced certutil/pk12util with
  - scripts (unused) but modified get-cert.sh to user certutil/pk12util
  - from /usr/bin/ and added dependence on nss-tools package


author: Olga Terlyga <terlyga@fnal.gov> 4.8-1
changelog:
  - Update  krb5.conf to v4.8 adding kdc to PILOT realm 
  - Added i-krb-22 and added pilot KDCs t domain-realm section


author: Olga Terlyga <terlyga@fnal.gov> 5.0-1
changelog:
  - Update krb5.conf to v5.0 adding new enctypes        
  - Added aes256-cts-hmac-sha1-96  aes128-cts-hmac-sha1-96 des3-cbc-sha1
  - to default tgs,tkt and permitted enctypes


author: Pat Riehecky <riehecky@fnal.gov> 0.9.9-16
changelog:
  - made /etc/sysconfig/ocsinventory-fermi for control values
  - merged Connie's 'ip addr' patch for the cronjob
  - added requirement for iproute and iputils
  - added extra check for DNS resolution
  - added syntax check for cronjob at build time


author: Connie Sieh <csieh@fnal.gov> 0.9.9-17
changelog:
  - On SLF 6 some systems now use a name other than ethx for ethernet
  - On Dell systems in particular  em1 is used 
  - Symptom of this was no "NETWORKS" entry sent to server


author: Connie Sieh <csieh@fnal.gov> 0.9.9-19
changelog:
  - added ability to use a proxy via <PROXY>proxyurl<\PROXY> entry to
  - /etc/ocsinventory/ocsinv.conf
  - Also can define proxy with environment variable http_proxy
  - http_proxy overrides <PROXY>proxyurl<\PROXY> 
  - proxy has to be defined with full url -- http://proxyserver:port


author: Connie Sieh <csieh@fnal.gov> 0.9.9-24
changelog:
  - Changed from using "ifconfig" to "ip" for NETWORKS as more consistent between
  - versions.  This allows for same version for 5, 6 and 7


author: Connie Sieh <csieh@fnal.gov> 0.9.9-25
changelog:
  - Changed from hardcoding what interfaces we will look at to finding all
  - that are UP and have either a ipv4 or ipv6 address


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.8.0-1
changelog:
  - Upstream 1.8.0 (new features)
  - Exchange Calendar integration
  - New and updated translations
  - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.0-1
changelog:
  - Upstream 1.9.0:
          - Contributed File transfer functionality. File encryption is supported.
          - NTLMv2 and NTLMv2 Session Security support
          - Implemented SIP Authentication Extensions protocol version 4 and 3
          - another shot at presence update problems
          - fix crash caused by uninitialized security contexts
          - Updated translations: ru, de, es, pt_BR
          - Bugfixes and crash fixes
  - BR libpurple >= 2.4.0
  - Split into purple-sipe and pidgin-sipe
  - Other spec fixes to match upstream's spec file


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.1-1
changelog:
  - Upstream 1.9.1:
          - Fix Kerberos authentication for unix platforms (broken in 1.9.0)
          - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.10.1-1
changelog:
  - Upstream 1.10.1:
          - Fixes to build against pidgin-2.7
          - Initial support for Office 2007+ "Access Levels"
          - SVG icon artwork
          - Miscellaneous bugfixes


author: Connie Sieh <csieh@fnal.gov> 3.4-2
changelog:
  - Made the spec file generic.  Removed the references to CMS
  - Changed the rsync to a cp so we are not dependent on rsync


author: Dag Wieers <dag@wieers.com> - 0.3.5-1
changelog:
  - Add 'protect = 0' by default to yum configuration.
  - Don't import GPG key for older distributions.


author: Pat Riehecky <riehecky@fnal.gov> - 6.2-0.1.rolling
changelog:
  - Added EULA licence file
  - Removed Troy's key from the repos
  - Added CERN's key for if they start building packages for us
  - Added more abstraction to make making new release rpms easier


author: Pat Riehecky <riehecky@fnal.gov> 2-6.2
changelog:
  - Bugfix from Phil at UNIXADM for extra '\n' causing unwanted emails
  - now with consistent use of [[ and ]] in the script


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: yum-autoupdate_add_addons_repo.patch
  -->  create the addons repo
  - Added Patch: yum-autoupdate_install_from_addons.patch
  -->  make sure we use the addons repo for updates
  - Ran Regex: (Release: .*) => \1.slf
  -->  Modify release string to note changes
  - Added Source: yum-autoupdate-SPEC-add-addons-repo-to-install.patch
  -->  make sure the addons repo gets installed
  - Added Source: yum-autoupdate.ini
  -->  Config file for automated patch script


author: Troy Dawson <dawson@fnal.gov> 5x-1-4.SL
changelog:
  - Added comments in yum.conf for installonlyn
  - Changed flash.repo to adobe.repo
  - Changed repo's to use http first, and then try ftp


author: Troy Dawson (dawson@fnal.gov) 1.0-3
changelog:
  - First round - Changed everything over from zz_pine_user_domain
  - changed the sed's to the more compact way of doing things.


author: Pat Riehecky <riehecky@fnal.gov> 1.0-3
changelog:
  - Sets up mod_userdir with no indexes too
  - Now leaves a comment behind saying what it did
  - Now archives httpd.conf before making the edits


author: Pat Riehecky <riehecky@fnal.gov> 1.0-4
changelog:
  - Comment addition is now in its own block so that failure
     to leave a comment doesn't prevent the config changes
     from happening.


author: Troy Dawson <dawson@fnal.gov> 1.0-1
changelog:
  - First go round
  - Remove each part individually so that this can be more general and work 
    on more releases.


author: Connie Sieh <csieh@fnal.gov> 1.0-0.6
changelog:
  - Added code to make sure the service was running before it was stopped
  - Added code to make sure the service is actually installed before chkconfiging


author: Troy Dawson <dawson@fnal.gov> 1.1-1
changelog:
  - Putting the changes at the beginning of the config file
  - Changed the host to have 131.225.* *.fnal.gov *soudan.org


author: Pat Riehecky <riehecky@fnal.gov> 5.3-2
changelog:
  - added policycoreutils dependency (for restorecon)
  - added restorecon on /root/.k5login to get selinux context right
      should be krb5_home_t


author: Pat Riehecky <riehecky@fnal.gov> 5.3-3
changelog:
  - added xorg-x11-xauth dependency so X11 forwarding works out of the box
  - returned UsePrivilegeSeparation to default (yes), since we've no cryptocard for 6
  - moved to augeas based configuration to preserve some user options


author: Pat Riehecky <riehecky@fnal.gov> 1.0-7
changelog:
  - Updated logic for states where LANG is an unknown to avoid
    saying the work is done when it actually isn't
  - Added extra logic for providing a notice when the config can't be parsed
  - Ensure permissions are what you would expect for /etc/sysconfig/i18n


author: Pat Riehecky <riehecky@fnal.gov> 3-0.1
changelog:
  - fixed a minor chmod problem
  - switched search from /etc/sysconfig/network-scripts/ifcfg-eth* to /etc/sysconfig/network-scripts/ifcfg-*|grep -v ifcfg-lo to account for strangly named cards


author: Pat Riehecky <riehecky@fnal.gov> 3-0.2
changelog:
  - try and hardlink /etc/named.rfc1912.zones before soft link
  - moved the blocks which actually start the named server to the 'fresh install only' space
  - made the /etc/resolv.conf edit smarter so that it doesn't do anything if named isn't running


author: Pat Riehecky <riehecky@fnal.gov> 3-0.3
changelog:
  - clean up stray /etc/named.conf link
  - added nscd restart
  - made smarter about when it starts bind and when it doesn't


author: Pat Riehecky <riehecky@fnal.gov> 3-1
changelog:
  - moved most of the config work to a trigger on 'bind'
    this way the config is validated on each update.  This should
    keep things working longer through updates
  - made nscd restart silent (oops)


author: Pat Riehecky <riehecky@fnal.gov> 3-1.1
changelog:
  - Yet another check on nscd, this really shouldn't start it unless you want it
  - Standardized the trigger interface a bit further
  - Updated grep checks, thanks Steve Timm


author: Pat Riehecky <riehecky@fnal.gov> 3-1.2
changelog:
  - nscd process searches now seach by process ownership.
  - resolv.conf settings are more accuratly preserved.


author: Pat Riehecky <riehecky@fnal.gov> 3-1.3
changelog:
  - yet another update to the resolv.conf preservation
  - fixed the NetworkManager scripts so that they correctly clean up upon removal


author: Pat Riehecky <riehecky@fnal.gov> 3-1.3.1
changelog:
  - better checks for upgrades of various things
  - clearer doc on what triggers are running off of which events and why
  - fixed the NetworkManager scripts to only modify controlled interfaces


author: Troy Dawson <dawson@fnal.gov> 4.2.6-1
changelog:
  - added ntpdate to the requirements
  - Changed the step-tickers section to trigger on ntpdate
  - Removed the change that added -A to /etc/sysconfig/ntpd


author: Tyler Parsons <tparsons@fnal.gov> 4.2.6-2
changelog:
  - added secondary and tertiary time servers to ntp.conf (131.225.17.150 and 131.225.8.120)
  - changed references to servers from (131.225.8.200 and 131.225.17.200) to (131.225.17.150 and 131.225.8.120)


author: Connie Sieh <csieh@fnal.gov> 4.2.6-3
changelog:
  - Modified ntpd-fermi code from "RH-Firewall-1-INPUT" to "INPUT" as TUV
    Does not use "RH-Firewall-1-INPUT" anymore.


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-4
changelog:
  - switched to a define based ntp server list
  - updated ntp server list
  - made version independent, now works on SLF5 and SLF6
  - added comments to help explain the configuration options


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-5
changelog:
  - switched to 'bash' for triggers and post to avoid errors
  - updated requires list to get things more in order


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-6
changelog:
  - removing "restrict 131.225.0.0 mask 255.255.0.0 nomodify noquery"
      per RITM0088723
  - switched to augeas based config to try and simplify the transition


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-7
changelog:
  - New NTP servers
  - Prep for SLF7
  - Moved somewhat away from triggers so you can customize your config after
  - per: RITM0096493 no more default broadcast client


author: Connie Sieh (csieh@fnal.gov) 6.0
changelog:
  - First version for SLF 6 and thus changed the version to 6.0 series
  - By definition no upgrades from SLF 4 or 5 so new version should be ok
  - Since we are going to make everything immutable then just going to add the fil


author: Pat Riehecky <riehecky@fnal.gov> 2.1-2
changelog:
  - fixed typo where on reinstall of the rpm, the sed statement didn't match and therefore nothing happened


