- Added pam_canonicalize_user.so to system-auth-common (closes: #47426).
- Added pam_canonicalize_user control (closes: #47713).
- Disabled legacy pam_propperpwnam.so in system-auth-common during upgrade.

- gse_krb5: gain root privilege during get server keytab (thx Ivan Volchenko).
  Fix PAM Winbind kerberos auth requires user access to keytab (Samba#12491).

- Fix typo in sss_ec_get_key() for OpenSSL older than 3.0.

- initial first build for Sisyphus

- Added additional methods on the bus for forced downloading of gpt (thx greh@)

- Update to latest stable release supported latest kernel 6.11.
- Major fixes from upstream:
  + LDAP Ping capability (to find the closest site);
  + smbinfo adds gettconinfo command (allowed dumping session and tcon id);
  + Various improvements to man pages.
- Backport bash completion support for smbinfo (with filestreaminfo, keys,
  gettconinfo) from Fedora.

- Update to the 2.8.2 for samba-4.19.9 and later releases

- Updates to new version 1.4.3 (released 2024-06-12)
- Fixes from upstream:
  + Fixed socket_wrapper running with jemalloc compiled binaries
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed swrap_fake_uid_wrapper test

- Updated to new version 1.3.1 (released 2024-06-12)
- Fixes from upstream:
  + Added support to find libc via LIBC_SO define
  + Fixed uid_wrapper running with jemalloc compiled binaries
  + Fixed socket_wrapper interaction test
  + Fixed thread sanitizer on modern Linux Kernels

- Add compatibility with stable releases of samba-4.18 and later (closes: 49404).
- Replace python3 build to new pyproject_build process.

- Fix cmocka >= 1.1.6 find_package()

- Fix cmocka >= 1.1.6 find_package()

- New version for samba-4.19

- Update to release for samba-4.19

- Update to latest release for samba-4.19

- Add support the openssl security level

- Update to latest stable bugfix and security release (fixes: CVE-2023-42465):
 + The sudoers plugin has been modified to make it more resilient to ROWHAMMER
   attacks on authentication and policy matching.
 + The sudoers plugin now constructs the user time stamp file path name using
   the user-ID instead of the user name. This avoids a potential problem with
   user names that contain a path separator ('/') being interpreted as part of
   the path name. A similar issue in sudo-rs has been assigned CVE-2023-42456.
- Fixes in behavior:
 + The visudo utility will no longer create an empty file when the specified
   sudoers file does not exist and the user exits the editor without making any
   changes (GitHub#294).
 + Fixed a bug where output could go to the wrong terminal if "use_pty" is
   enabled (the default) and the standard input, output or error is redirected
   to a different terminal. Bug #1056.
 + A path separator ('/') in a user, group or host name is now replaced with an
   underbar character ('_') when expanding escapes in @include and @includedir
   directives as well as the "iolog_file" and "iolog_dir" sudoers Default
   settings.
- Fixes in user output:
 + Running "sudo -ll command" now produces verbose output that includes matching
   rule as well as the path to the sudoers file the matching rule came from.
 + Changes to terminal settings are now performed atomically, where possible.
   If the command is being run in a pseudo-terminal and the user's terminal is
   already in raw mode, sudo will not change the user's terminal settings. This
   prevents concurrent sudo processes from restoring the terminal settings to
   the wrong values (GitHub#312).
 + Better log message when rejecting a command if the "intercept" option is
   enabled and the "intercept_allow_setid" option is disabled. Previously,
   "command not allowed" would be logged and the user had no way of knowing
   what the actual problem was.
- Fixes in logging:
 + The sudoers source is now logged in the JSON event log. This makes it
   possible to tell which rule resulted in a match.
 + Sudo will now log the invoking user's environment as "submitenv" in the JSON
   logs. The command's environment ("runenv") is no longer logged for commands
   rejected by the sudoers file or an approval plugin.
 + The sudo_logsrvd server will now raise its open file descriptor limit to the
   maximum allowed value when it starts up. Each connection can require up to
   nine open file descriptors so the default soft limit may be too low.
- Fixed regressions:
 + Fixed the warning message for "sudo -l command" when the command is not
   permitted. There was a missing space between "list" and the actual command
   due to changes in sudo 1.9.14.
 + The "intercept_verify" sudoers option is now only applied when the
   "intercept" option is set in sudoers. Previously, it was also applied when
   "log_subcmds" was enabled. Sudo 1.9.14 contained an incorrect fix for this.
 + Reverted a change from sudo 1.9.4 that resulted in PAM session modules being
   called with the environment of the command to be run instead of the
   environment of the invoking user (GitHub#318).

- Initial build for Sisyphus.

- Initial release

- Fix man building

- Update Policy templates for Firefox 106 and Firefox ESR 102.4
- This release contains some typo fixes and new Russian translations
  thanks to lepata@

- Update to latest release 106.0-5249.119

- Add support LDAP add/mod operation to set/change password:
 + fix unable to join to active directory after KB5008380/CVE-2021-42287 with
   option '--ldap-passwd';
 + https://gitlab.freedesktop.org/realmd/adcli/-/issues/27
- Add support fall back to LDAPS if CLDAP ping was not successful
 + If the --use-ldaps option is used and there is no reply on the CLDAP 389/udp
   port adcli will try to send the request to the LDAPS port 636/tcp.
- Fix write SID before secret to Samba's db looks like 'net changesecretpw'
- Add passwd-user sub-command for (re)set a user password.
- Add dont-expire-password option for computer.

- NMU: spec: adapted to new cmake macros.

- NMU: spec: adapt to new cmake macros.

- Updated spec to allow any compression of man page

- Initial build for Sisyphus

- Add options to initscript

- Fixed build: remove RPATH entry from libtool

- Rebuilt with boost-1.76.0.

- require libkbibtexpart9 again
- obsoletes libkbibtexpart4 (needed for upgrade)
- fix descriptions

- Update to latest release

- Initial build

- new version 1.1.4

- Build on aarch64 fixed

- fix broken libftdi1.pc file
- built python3 bindings

- Disable ubt macros due binary package identity change

- Build new version for python3.8.

- NMU: rebuilt for debuginfo.

- Add support of alterator web interface aka ajax support
- Remove BuildArch is noarch due ajax part of module

- Update to latest 4.x release

- add fix for Ice build

- Updated to 0.9.23.

- exclude tests from package due to excessive reqs

- 0.17.1

- Don't stop with error if DESTDIR already exists

- FTBFS: fix install using %__python.

- Initial build for Sisyphus

- Initial build for Sisyphus

- Update spec template to newest rpm-build-haskel supports haskell(abi)