# changelog

author: Tomáš Mráz <tmraz@redhat.com> - 6.2.6-1
changelog:
  - add use_first_pass to pam_sss in password stack
  - more robust initialization of sssdConfig
  - check whether base DN value is a real base DN
  - use non-deprecated pam_pwquality option authtok_type= instead of type=
  - update lastlog for su


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
changelog:
  - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
  - do not drop sss from nsswitch.conf on --update (#980861)
  - writing out smartcard/fingerprint auth policy to dconf (original patch by
    Ray Strode) (#990625)
  - document other possible return codes from authconfig invocation (#991804)
  - print error message if config file save fails (#994596)
  - never stop rpcbind (#990788)
  - do not disable sssd.service when --enablesssd is used (#953851)
  - revert use_first_pass addition to pam_sss in password stack (#953116)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
changelog:
  - detect invalid LDAP uri and report error
  - fix handling of IPA domain join errors and uninstall
  - add support for winbind authentication over Kerberos 5
  - set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
  - better error checking for password quality options


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.9-1
changelog:
  - support screensaver lock handling by GDM
  - fix pam_pkcs11 options
  - enable/disable/restart only services that are affected by the configuration
    changes
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - translation updates


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.10-1
changelog:
  - allow multiple LDAP URIs in the setting again
  - winbind modules are now in samba-winbind package
  - add support for keeping myhostname in nsswitch.conf hosts entry
  - do not misinterpret comment for realm in krb5.conf
  - warn about unsupported locale, do not bail out with exception
  - python 3 compatibility for authconfig command line


author: Tomáš Mráz <tmraz@redhat.com> - 7.0.0-1
changelog:
  - dropped authconfig-gtk (system-config-authentication) (no GTK3 support)
  - dropped authconfig-tui (deprecated long ago)
  - dropped IPA domain join support (conflicts with the recommended way to
    install IPA client on a machine)
  - dropped support for Hesiod, Wins, AFS, and other obsolete cruft


author: Tomáš Mráz <tmraz@redhat.com> - 7.0.1-1
changelog:
  - fix CVE-2017-7488 incorrect PAM configuration with SSSD (#1441604)
    (if you use configuration with pam_sss, use authconfig --updateall
    to fix the PAM configuration)
  - support locking accounts after multiple authentication failures via
    pam_faillock
  - enable SSSD smartcard support if module sssd is used


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.8-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config
  - chkconfig: use isXinetdEnabled instead of isOn
  - leveldb: trim leading whitespaces from systemctl
  - leveldb: suppress error messages when selinux is turned off
  - alternatives: always recreate symlinks when the alternative is updated
  - test-alternatives: basic tests for slave links
  - chkconfig: resetpriorities should work on all runlevels


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


