-
Notifications
You must be signed in to change notification settings - Fork 16
/
NEWS
336 lines (240 loc) · 6.92 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
pam-config NEWS -- history of user-visible changes.
Copyright (C) 2006-2024 Thorsten Kukuk <[email protected]>.
Please enter bug reports at https://github.com/SUSE/pam-config/issues
Version 2.11
* pam_gnome_keyring: use option in AUTH
Version 2.10
* Enable session and account support for kanidm and himmelblau
Version 2.9
* Add support for kanidm
Version 2.8
* Replace aad PAM module with himmelblau
Version 2.7
* Add support for PAM aad module
Version 2.6
* pam-config: Remove pam_cracklib if not installed, and no successor
Version 2.5
* pam_wtmpdb: add skip_if option
Version 2.4
* Read postlogin files, too
Version 2.3
* Add silent_if option to pam_lastlog2
Version 2.2
* Fix ecryptfs and fscrypt support
* Add support for pam_wtmpdb
Version 2.1
* Bug fix release
Version 2.0
* Add support for pam_fscrypt
* Add support for pam.d/common-session-nonlogin
* Add support for pam.d/postlogin-{account,auth,password,session}
Version 1.9
* Add support for pam_lastlog2
Version 1.8
* Move systemd_home after all optional modules (#13)
* Add pam_u2f support [bsc#1115512]
Version 1.7
* Correctly handle --service option with /usr/lib/pam.d and /usr/etc/pam.d
Version 1.6
* Create /etc/pam.d if it does not exist
* Support file option of pam_pwhistory
Version 1.5
* Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
* Drop pam_systemd_home again [bsc#1191528]
Version 1.4
* Fix support for mulitple locations for configuration files
Version 1.3
* Add support for pam_pwquality
* Replace pam_cracklib with pam_pwquality
* Add pam_systemd if installed and we create a new configuration
* Change check for existence of a Module
Version 1.2
* Change /usr/share/defaults to /usr/etc
Version 1.1
* Enhance comments in common-*-pc files
Version 1.0
* Implement search path for config files, so that they /etc/pam.d/
can only contain the changes, but not the original files.
Version 0.96
* Add missing pam_cracklib options [bsc#1114835]
Version 0.95
* Fix replacing pam_unix2 and pam_pwcheck
Version 0.94
* Add support for pam_keyinit
Version 0.93
* pam_cracklib: add enforce_for_root option
Version 0.92
* Add support for pam_kwallet5
Version 0.91
* Automatically replace obsolete PAM modules if no longer installed.
* Extend error messages for wrong arguments.
Version 0.90
* pam_unix: adjust for changes made in Linux-PAM 1.3.0
Version 0.89
* Add pam_google_authenticator [bsc#888149].
* For dual stack, check for libpam.so.0, too.
Version 0.88
* Add pam_ecryptfs to password section [bsc#895096].
Version 0.87
* Add support for pam_access.
Version 0.86
* Revert last change regarding sha512.
Version 0.85
* pam_unix: use sha512 and shadow flags by default on new installations.
Version 0.84
* pam-config: don't print wrong error messages.
Version 0.83
* pam_unix: Fix pam_unix.so handling, add more options.
Version 0.82
* pam-config: use pam_unix and pam_cracklib per default.
Version 0.81
* pam_ssh: Fix usage of try_first_pass option
* pam_ecryptfs: Move after pam_unix2, even if this will not work with krb5
Version 0.80
* Add pam_systemd and pam_ecryptfs [bnc#752851].
Version 0.79
* Make pam_lastlog optional [bnc#686034].
* Document that if symlinks don't point to *-pc files config is ignored
[FATE#310739].
Version 0.78
* Add support for pam_fprintd
* Move pam_env.so at the end of session stack
Version 0.77
* Fix lib64 checks
* Add support for pam_sss.so
Version 0.76
* Add support for pam_fprint.so
Version 0.75
* Add support for pam_exec.so in password rules
* Rewrite pam_make.so statements to use pam_exec.so
Version 0.74
* Fix typo
* Update translations
Version 0.73
* Add support for pam_passwdqc
* Print warning if cracklib-minlen <= 5 is used
Version 0.72
* enable use_authtok and support new option only_if in
pam_gnome_keyring.
Version 0.71
* re-add lost query option
Version 0.70
* Fix try_first_pass option for pam_ssh.
Version 0.69
* Add --verify option.
* pam_cracklib is now default instead of pam_pwcheck.
Version 0.68
* Update translations.
* use relative links.
Version 0.67
* Update translations.
* Add type option for pam_pwhistory.
Version 0.66
* Add support for pam_gnome_keyring.
Version 0.65
* fix error at option parsing.
* update translations.
Version 0.64
* Add support for pam_selinux.
Version 0.63
* Add support for pam_pwhistory.
Version 0.62
* Add support for pam_fp.
Version 0.61
* Print correct error message if sanity check fails
* Fix the lost of values in case of some string options.
Version 0.60
* Create manual page from internal pam-config data
* Remove obsolete pam_pwcheck options
Version 0.59
* skip unix password change for uid > 999 in case of krb5 is used.
* set LANG=C when running checks
* Update translations.
Version 0.58
* return correct query result in case of --ldap vs. --ldap-account_only
Version 0.57
* Bug fix
Version 0.56
* Modifications for autobuild
Version 0.55
* Add pam_csync support
Version 0.54
* Add pam_ssh support (to start ssh-agent, not for authentication)
Version 0.53
* Better debug messages on writing config files
* Fix handling of backup files
* Update translations
Version 0.52
* fix missing pam_localuser
* update localization files
Version 0.51
* adapt krb5 support to new pam_krb5 version
Version 0.50
* Rewrite commandline option handling for all modules
* Add support for pam_group and pam_time
Version 0.27
* Move write_config after sanitize_check calles
Version 0.26
* Add support for ldap-account_only
Version 0.25
* Bug fixes
Version 0.24
* Bug fixes
* Added testsuite
Version 0.23
* Bug fixes
* Add support for pam_thinkfinger
Version 0.22
* Bug fixes
* Add pam_ck_connector support
Version 0.21
* Add translations
* Bug fixes
* Add pam_mount and pam_cryptpass support
Version 0.20
* Rewrite of internal interfaces
Version 0.16
* Add support for pam_loginuid.so and pam_lastlog.so
Version 0.15
* Fix -d handling of minlen option of pam_pwcheck
Version 0.14
* Support ignore_unknown_principals option of pam_krb5
* Support minlen=0 option for pam_pwcheck
Version 0.13
* Bug fixes
* Add support for pam_capability
* Add pam_apparmor only as optional
Version 0.12
* Fix debug flag handling if changing from pam_cracklib to pam_pwcheck
Version 0.11
* Changes to account stack with krb5 and ldap
* Add support for pam_umask.so
Version 0.10
* Fix first install if pam-modules was updated before
* Document missing options in manual page
Version 0.9
* Support minimum_uid option of pam_krb5.so
* Rename pam_krb5afs.so to pam_krb5.so
Version 0.8
* Add pam_nam.so support (LUM)
* Add no_obscure_checks for pam_pwcheck.so
Version 0.7
* Add pam_cracklib support.
* Add pam_apparmor support.
* Fix stacking of pam_ldap in auth section.
Version 0.6
* Add query option for YaST2
Version 0.5
* Bug fixes
* Implement --update
Version 0.4
* Add pam_ccreds and pam_pkcs11 support
* Add sanity checks
* Check if modules are installed
Version 0.3
* Add pam_ldap and pam_krb5 support
Version 0.2
* Add documentation
Version 0.1
* Initial release