univention-ad-connector (14.0.36) unstable; urgency=medium

  * Bug #58845: Fixup for previous version

 -- Arvid Requate <requate@univention.de>  Mon, 01 Dec 2025 09:59:51 +0100

univention-ad-connector (14.0.35) unstable; urgency=medium

  * Bug #58845: Skip resync of reject for uSNCreated if < uSNChanged

 -- Arvid Requate <requate@univention.de>  Thu, 27 Nov 2025 17:33:02 +0100

univention-ad-connector (14.0.34) unstable; urgency=medium

  * Bug #58830: lookup samaccountname for olddn from adcache

 -- Felix Botner <botner@univention.de>  Sat, 22 Nov 2025 10:38:12 +0100

univention-ad-connector (14.0.33) unstable; urgency=medium

  * Bug #58818: Avoid ldap.ALREADY_EXISTS if move target exists in UCS

 -- Arvid Requate <requate@univention.de>  Tue, 18 Nov 2025 17:07:53 +0100

univention-ad-connector (14.0.32) unstable; urgency=medium

  * Bug #58800: Fix sync_to_ucs (UnboundLocalError)

 -- Felix Botner <botner@univention.de>  Thu, 13 Nov 2025 20:19:34 +0100

univention-ad-connector (14.0.31) unstable; urgency=medium

  * Bug #58787: Improve ad performance on non changes

 -- Julia Bremer <bremer@univention.de>  Sun, 09 Nov 2025 12:02:18 +0100

univention-ad-connector (14.0.28) unstable; urgency=medium

  * Bug #58787: Improve cache update when renaming or moving OUs

 -- Felix Botner <botner@univention.de>  Fri, 07 Nov 2025 09:25:31 +0100

univention-ad-connector (14.0.27) unstable; urgency=medium

  * Bug #58787: compare strings in__compare_lowercase*

 -- Felix Botner <botner@univention.de>  Wed, 05 Nov 2025 12:42:18 +0100

univention-ad-connector (14.0.26) unstable; urgency=medium

  * Bug #58739: Imrpoved cache update when renaming or moving OUs

 -- Arvid Requate <requate@univention.de>  Thu, 30 Oct 2025 15:47:43 +0100

univention-ad-connector (14.0.25) unstable; urgency=medium

  * Bug #58735: Allow synchronization of parents of allowed subtrees
  * Bug #58735: When resynchronizing with the resync_* scripts,
    automatically add ancestors of allowed subtrees to the
    resynchronization list.

 -- Arvid Requate <requate@univention.de>  Sat, 25 Oct 2025 19:15:07 +0200

univention-ad-connector (14.0.24) unstable; urgency=medium

  * Bug #58737: Update object['dn'] in modify_in_ucs because udm
    may have done a modrdn (in case the sAMAccountName changed),
    and we need this new dn for the post_ucs_modify_functions and
    for the cache `DN Mapping CON`.

 -- Arvid Requate <requate@univention.de>  Fri, 24 Oct 2025 13:52:12 +0200

univention-ad-connector (14.0.23) unstable; urgency=medium

  *  Bug #58547: Fix obect_mapping_ucs for overlapping position_mapping

 -- Julia Bremer <bremer@univention.de>  Fri, 03 Oct 2025 13:56:29 +0200

univention-ad-connector (14.0.22) unstable; urgency=medium

  * Bug #58487: Make univention-adsearch usable with LDAPS

 -- Johannes Königer <koeniger@univention.de>  Thu, 24 Jul 2025 14:52:28 +0200

univention-ad-connector (14.0.21-1) UNRELEASED; urgency=medium

  * Bug #58002 UCS 5.0-10 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 04 Mar 2025 15:48:29 +0100

univention-ad-connector (14.0.20-5) unstable; urgency=medium

  * Bug #57681: Handle case pwhistoryPolicy.expiryInterval == 0 (or undefined)

 -- Arvid Requate <requate@univention.de>  Tue, 04 Mar 2025 14:48:29 +0100

univention-ad-connector (14.0.20-4) unstable; urgency=medium

  * Bug #57681: set shadowMax to (pwhistoryPolicy.expiryInterval -1) to align
    password expiry behavior of pam_unix (and the OpenLDAP overlay shadowbind)
    with that of Heimdal Kerberos.

 -- Arvid Requate <requate@univention.de>  Mon, 03 Mar 2025 19:12:48 +0100

univention-ad-connector (14.0.20-3) unstable; urgency=medium

  * Bug #57737: Remove rejects in case AD object is not "readable"

 -- Felix Botner <botner@univention.de>  Fri, 08 Nov 2024 10:02:09 +0100

univention-ad-connector (14.0.20-2) unstable; urgency=medium

  * Bug #57565: Fix rewriting mixed case AD DNs in the presence
    of a "position_mapping".

 -- Arvid <requate@univention.de>  Tue, 24 Sep 2024 09:47:28 +0200

univention-ad-connector (14.0.20-1) UNRELEASED; urgency=medium

  * Bug #57581 UCS 5.0-9 version bump

 -- Arvid <requate@univention.de>  Thu, 12 Sep 2024 13:18:30 +0200

univention-ad-connector (14.0.19-11) unstable; urgency=medium

   * Bug #57510: Don't map the targetdn of a move operation
   through the s4 cache

 -- Julia Bremer <bremer@univention.de>  Thu, 29 Aug 2024 11:23:13 +0200

univention-ad-connector (14.0.19-10) unstable; urgency=medium

  * Bug #57504: change the dn argument to not be required by the script
  resync_object_from_ad.py

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 06 Aug 2024 13:50:14 +0200

univention-ad-connector (14.0.19-9) unstable; urgency=medium

  * Bug #57394: add connector/ad/mapping/{object type}/ignorefilter.

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 23 Jul 2024 13:20:42 +0200

univention-ad-connector (14.0.19-7) unstable; urgency=medium

  * Bug #57453: Make sqlite files only readable to root

 -- Julia Bremer <bremer@univention.de>  Fri, 19 Jul 2024 09:34:32 +0200

univention-ad-connector (14.0.19-3) unstable; urgency=medium

  * Bug #57442: add connector/ad/mapping/{object type}/allowfilter

 -- Felix Botner <botner@univention.de>  Wed, 10 Jul 2024 21:28:18 +0200

univention-ad-connector (14.0.19-2) unstable; urgency=medium

  * Bug #57394: add synchronization allowlist feature

 -- Christian Castens <castens@univention.de>  Thu, 20 Jun 2024 10:10:17 +0200

univention-ad-connector (14.0.19-1) UNRELEASED; urgency=medium

  * Bug #57350: UCS 5.0-8 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Mon, 03 Jun 2024 13:44:17 +0200

univention-ad-connector (14.0.18-1) UNRELEASED; urgency=medium

  * Bug #57118: UCS 5.0-7 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Mar 2024 15:51:55 +0100

univention-ad-connector (14.0.17-4) unstable; urgency=medium

  * Bug #57098: make StartTLS configurable in univention.uldap

 -- Maximilian Janßen <janssen@univention.de>  Tue, 5 Mar 2024 11:30:09 +0100

univention-ad-connector (14.0.17-3) unstable; urgency=medium

  * Bug #57072: Fix comparison of special DNs

 -- Arvid <requate@univention.de>  Mon, 26 Feb 2024 17:57:09 +0100

univention-ad-connector (14.0.17-2) unstable; urgency=medium

  * Bug #56954: Don't replicate objectClass=lock

 -- Arvid <requate@univention.de>  Mon, 08 Jan 2024 18:34:23 +0100

univention-ad-connector (14.0.17-1) unstable; urgency=medium

  * Bug #56832: UCS 5.0-6 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Dec 2023 19:17:34 +0100

univention-ad-connector (14.0.16-5) unstable; urgency=medium

  * Bug #56792: Make AD-Connector skip referrals to objects

 -- Arvid <requate@univention.de>  Mon, 06 Nov 2023 14:32:50 +0100

univention-ad-connector (14.0.16-4) unstable; urgency=medium

  * Bug #53944: Support AD forest child domains

 -- Arvid <requate@univention.de>  Mon, 23 Oct 2023 19:38:20 +0200

univention-ad-connector (14.0.16-3) unstable; urgency=medium

  * Bug #56603: Adjust to fixed post-read-control in python-ldap 4.0

 -- Florian Best <best@univention.de>  Thu, 05 Oct 2023 13:34:47 +0200

univention-ad-connector (14.0.16-2) unstable; urgency=medium

  * Bug #55936: use local ldap in resync_object_from_s4.py

 -- Felix Botner <botner@univention.de>  Wed, 14 Jun 2023 09:23:03 +0200

univention-ad-connector (14.0.16-1) unstable; urgency=medium

  * Bug #43633: fix request.options access with simple_response threaded
    d ecorator

 -- Florian Best <best@univention.de>  Tue, 13 Jun 2023 10:00:24 +0200

univention-ad-connector (14.0.15-1) unstable; urgency=medium

  * Bug #56137: fix AD-Connector configuration

 -- Florian Best <best@univention.de>  Mon, 12 Jun 2023 13:40:33 +0200

univention-ad-connector (14.0.14-1) unstable; urgency=medium

  * Bug #43633: replace notifier.popen with tornado

 -- Florian Best <best@univention.de>  Mon, 12 Jun 2023 07:48:31 +0200

univention-ad-connector (14.0.13-7) unstable; urgency=medium

  * Bug #55632: Updated the checks for checking if the AD connector is running

 -- Mika Westphal <westphal@univention.de>  Wed, 26 Apr 2023 18:23:13 +0100

univention-ad-connector (14.0.13-6) unstable; urgency=medium

  * Bug #55940: move server_password_change script univention-admember
    to univention-role-server-common

 -- Arvid <requate@univention.de>  Wed, 26 Apr 2023 18:23:05 +0200

univention-ad-connector (14.0.13-5) unstable; urgency=medium

  * Bug #54587: replace bytestrings in AD-Connector reject table which
    were leftover from UCS 4.4 upgrade

 -- Florian Best <best@univention.de>  Tue, 18 Apr 2023 17:16:16 +0200

univention-ad-connector (14.0.13-4) unstable; urgency=medium

  * Bug #55774: fix handling of rejects

 -- Florian Best <best@univention.de>  Fri, 03 Mar 2023 13:03:09 +0100

univention-ad-connector (14.0.13-3) unstable; urgency=medium

  * Bug #55582: new univention-admember script to change the password on AD

 -- Juan Pedro Torres <torres-munoz.extern@univention.de>  Thu, 16 Feb 2023 09:46:37 +0100

univention-ad-connector (14.0.13-2) unstable; urgency=medium

  * Bug #42330: Remove old maintainer script package update code

 -- Philipp Hahn <hahn@univention.de>  Mon, 06 Feb 2023 14:21:34 +0100

univention-ad-connector (14.0.13-1) unstable; urgency=medium

  * Bug #31771: migrate tabs to spaces

 -- Florian Best <best@univention.de>  Fri, 03 Feb 2023 04:17:43 +0100

univention-ad-connector (14.0.12-1) unstable; urgency=medium

  * Bug #53092: Added fail checks for the join scripts

 -- Mika Westphal <westphal@univention.de>  Thu, 02 Feb 2023 13:15:57 +0100

univention-ad-connector (14.0.11-1) unstable; urgency=medium

  * Bug #55554: Fix UCR variable typing

 -- Philipp Hahn <hahn@univention.de>  Fri, 27 Jan 2023 09:18:28 +0100

univention-ad-connector (14.0.10-8) unstable; urgency=medium

  * Bug #54781: Fix univention-adsearch for multi-connector setups

 -- Arvid <requate@univention.de>  Mon, 09 Jan 2023 19:52:37 +0100

univention-ad-connector (14.0.10-7) unstable; urgency=medium

  * Bug #55232: Set pwhistory_length to 0 when pwhistorylength
    policy is not defined in password history synchronization

 -- Juan Carlos García García <garcia-garcia.extern@univention.de>  Thu, 29 Sep 2022 20:10:20 +0200

univention-ad-connector (14.0.10-6) unstable; urgency=medium

  * Bug #55150: Adjust sync_to_ucs to only apply the ignore_filter to the old
    object specifically for the situation of Bug #37351 to avoid doing this
    to user objects as well.

 -- Ivan Barbecho Delgado <delgado.extern@univention.de>  Wed, 31 Aug 2022 08:19:58 +0200

univention-ad-connector (14.0.10-5) unstable; urgency=medium

  * Bug #52192: Check if pwdLastSet is 0 for users before skipping
    them in sync_to_ucs.

 -- Juan Carlos García García <garcia-garcia.extern@univention.de>  Mon, 29 Aug 2022 11:40:00 +0200

univention-ad-connector (14.0.10-4) unstable; urgency=medium

  * Bug #52230: Synchronize password history from AD to UCS

 -- Juan Carlos García García  <garcia-garcia.extern@univention.de>  Fri, 26 Aug 2022 10:36:37 +0200

univention-ad-connector (14.0.10-3) unstable; urgency=medium

  * Bug #55087: Fix regression in group_members_sync_to_ucs

 -- Arvid <requate@univention.de>  Thu, 11 Aug 2022 23:21:56 +0200

univention-ad-connector (14.0.10-2) unstable; urgency=medium

  * Bug #54780: get mapping with respect to configbasename

 -- Florian Best <best@univention.de>  Tue, 09 Aug 2022 13:20:31 +0200

univention-ad-connector (14.0.10-1) unstable; urgency=medium

  * Bug #54748: add dependencies to monitoring packages

 -- Florian Best <best@univention.de>  Thu, 23 Jun 2022 18:46:37 +0200

univention-ad-connector (14.0.9-2) unstable; urgency=medium

  * Bug #54682: option --debug-stderr became default, option has been removed

 -- Julia Bremer <bremer@univention.de>  Thu, 16 Jun 2022 14:26:29 +0200

univention-ad-connector (14.0.9-1) unstable; urgency=medium

  * Bug #54706: drop Python 2 packages

 -- Florian Best <best@univention.de>  Wed, 04 May 2022 08:17:55 +0200

univention-ad-connector (14.0.8-6) unstable; urgency=medium

  * Bug #54408: add OPT_X_TLS_NEWCTX option for TLS encrypted
    LDAP connections. This has become a requirement for
    python-ldap-3.3.0 (and higher)

 -- Christian Castens <castens@univention.de>  Thu, 17 Feb 2022 13:46:59 +0100

univention-ad-connector (14.0.8-5) unstable; urgency=medium

  * Bug #49867: Make number on retries of rejected changes configurable

 -- Julia Bremer <bremer@univention.de>  Tue, 23 Nov 2021 16:22:25 +0100

univention-ad-connector (14.0.8-1) unstable; urgency=medium

  * Bug #53757: Skip sambaNTPassword sync if invalid

 -- Arvid <requate@univention.de>  Tue, 07 Sep 2021 19:43:23 +0200

univention-ad-connector (14.0.7-6) unstable; urgency=medium

  * Bug #53209: Fix join script handling (univention-join debhelper) (2)

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Fri, 07 May 2021 12:45:56 +0200

univention-ad-connector (14.0.7-5) unstable; urgency=medium

  * Bug #53209: Fix join script handling (univention-join debhelper)

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Thu, 06 May 2021 22:02:31 +0200

univention-ad-connector (14.0.7-4) unstable; urgency=medium

  * Bug #52044: Adjust log level for paged LDAP search to INFO

 -- Arvid <requate@univention.de>  Mon, 26 Apr 2021 15:52:46 +0200

univention-ad-connector (14.0.7-3) unstable; urgency=medium

  * Bug #52941: added new icon design for AD connector

 -- Jan Luttermann <luttermann@univention.de>  Fri, 23 Apr 2021 14:02:39 +0200

univention-ad-connector (14.0.7-2) unstable; urgency=medium

  * Bug #52044: added help to univention-adsearch

 -- Felix Botner <botner@univention.de>  Thu, 22 Apr 2021 15:03:15 +0200

univention-ad-connector (14.0.7-1) unstable; urgency=medium

  * Bug #52044: Log mapping to /var/log/univention/connector-ad-
    mapping.log

 -- Florian Best <best@univention.de>  Wed, 14 Apr 2021 18:45:54 +0200

univention-ad-connector (14.0.6-2) unstable; urgency=medium

  * Bug #53020: Put well-known group Console Logon which is created
    by univention-samba4 on the ignorelist

 -- Julia Bremer <bremer@univention.de>  Tue, 30 Mar 2021 19:22:49 +0200

univention-ad-connector (14.0.6-1) unstable; urgency=medium

  * Bug #52044: replace UCR filter based mapping with a real python
    module

 -- Florian Best <best@univention.de>  Tue, 30 Mar 2021 12:59:05 +0200

univention-ad-connector (14.0.5-5) unstable; urgency=medium

  * Bug #52044: Transfer mapping from UCR template to real Python script

 -- Florian Best <best@univention.de>  Tue, 02 Mar 2021 18:29:24 +0100

univention-ad-connector (14.0.5-4) unstable; urgency=medium

  * Bug #52358: Use LDAP post read control to prevent synchronization
    loop

 -- Julia Bremer <bremer@univention.de>  Wed, 24 Feb 2021 19:41:05 +0100

univention-ad-connector (14.0.5-3) unstable; urgency=medium

  * Bug #52453: revert debug code

 -- Johannes Keiser <keiser@univention.de>  Tue, 23 Feb 2021 09:52:59 +0100

univention-ad-connector (14.0.5-2) unstable; urgency=medium

  * Bug #52453: Adjust design of module for UCS 5

 -- Johannes Keiser <keiser@univention.de>  Tue, 16 Feb 2021 13:17:20 +0100

univention-ad-connector (14.0.5-1) unstable; urgency=medium

  * Bug #52044: migrate univention-s4-connector to Python 3

 -- Florian Best <best@univention.de>  Tue, 02 Feb 2021 22:32:48 +0100

univention-ad-connector (14.0.4-1) unstable; urgency=medium

  * Bug #52044: make sure scripts run with latest mapping

 -- Florian Best <best@univention.de>  Tue, 02 Feb 2021 12:39:35 +0100

univention-ad-connector (14.0.3-2) unstable; urgency=medium

  * Bug #51336: Fix decoding traceback while parsing openssl output

 -- Arvid <requate@univention.de>  Thu, 28 Jan 2021 15:32:28 +0100

univention-ad-connector (14.0.3-1) unstable; urgency=medium

  * Bug #51336 ADC: Fix process detection in umc module

 -- Arvid <requate@univention.de>  Mon, 25 Jan 2021 19:13:32 +0100

univention-ad-connector (14.0.2-1) unstable; urgency=medium

  * Bug #49981: Made mappings user configurable

 -- Max Christian Pohle <pohle@univention.de>  Mon, 14 Dec 2020 12:26:36 +0100

univention-ad-connector (14.0.1-5) unstable; urgency=medium

  * Bug #52261: Set all values, if modtype is add, not just changed values

 -- Julia Bremer <bremer@univention.de>  Fri, 04 Dec 2020 12:36:45 +0100

univention-ad-connector (14.0.1-4) unstable; urgency=medium

  * Bug #52439: Create temporary password which is sufficient of mspasswordpolicy

 -- Julia Bremer <bremer@univention.de>  Fri, 04 Dec 2020 11:48:16 +0100

univention-ad-connector (14.0.1-3) unstable; urgency=medium

  * Bug #51929: update group member cache after move

 -- Felix Botner <botner@univention.de>  Mon, 09 Nov 2020 11:36:46 +0100

univention-ad-connector (14.0.2-1) unstable; urgency=medium

  * Bug #43686: use systemctl to start, stop or restart  UDL

 -- Sebastian Lobinger <lobinger@univention.de>  Fri, 30 Oct 2020 14:43:25 +0100

univention-ad-connector (14.0.1-2) unstable; urgency=medium

  * Bug #51904: Fix typo which lead to change of pwdChangeNextLogin if password resetted
    without changing the flag

 -- Julia Bremer <bremer@univention.de>  Thu, 08 Oct 2020 08:18:21 +0200

univention-ad-connector (14.0.1-1) unstable; urgency=medium

  * Bug #42374: Wording

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 22 Sep 2020 23:20:50 +0200

univention-ad-connector (14.0.1-0) unstable; urgency=medium

  * Bug #51336: migrate UMC module to Python 3

 -- Florian Best <best@univention.de>  Tue, 08 Sep 2020 15:41:19 +0200

univention-ad-connector (14.0.0-2) unstable; urgency=medium

  * Bug #51484: remove unused dependency on pysqlite2

 -- Florian Best <best@univention.de>  Tue, 08 Sep 2020 15:41:18 +0200

univention-ad-connector (14.0.0-1) unstable; urgency=medium

  * Bug #51419: UCS-5.0-0 version bump

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 08 Sep 2020 15:41:17 +0200

univention-ad-connector (13.0.0-53) unstable; urgency=medium

  * Bug #51501: reconnect if transport connection is disconnected

 -- Christian Castens <castens@univention.de>  Tue, 29 Sep 2020 18:17:08 +0200

univention-ad-connector (13.0.0-51) unstable; urgency=medium

  * Bug #51673: support ldaps in univention-adsearch/list-rejected

 -- Felix Botner <botner@univention.de>  Mon, 07 Sep 2020 16:54:17 +0200

univention-ad-connector (13.0.0-50) unstable; urgency=medium

  * Bug #51915: Fix error handling regression of Bug #51518

 -- Arvid <requate@univention.de>  Thu, 27 Aug 2020 11:08:13 +0200

univention-ad-connector (13.0.0-49) unstable; urgency=medium

  * Bug #51647: fix regression of Bug #18501:
    Synchronize AD:"mail" again to UDM:"mailPrimaryAddress"

 -- Arvid <requate@univention.de>  Wed, 15 Jul 2020 15:18:35 +0200

univention-ad-connector (13.0.0-48) unstable; urgency=medium

  * Bug #51585: Sync pwdChangeNextLogin to UCS if password is not set

 -- Julia Bremer <bremer@univention.de>  Sat, 27 Jun 2020 13:37:58 +0200

univention-ad-connector (13.0.0-46) unstable; urgency=medium

  * Bug #51567: Allow snyc_from_ucs synchronization model for
    otherHomePhone to coexist with that for proxyAddresses

 -- Arvid <requate@univention.de>  Wed, 24 Jun 2020 17:13:40 +0200

univention-ad-connector (13.0.0-45) unstable; urgency=medium

  * Bug #51567: Fix synchronization of otherHomePhone

 -- Arvid <requate@univention.de>  Wed, 24 Jun 2020 15:40:32 +0200

univention-ad-connector (13.0.0-44) unstable; urgency=medium

  * Bug #18501: Fix dummy default for object_old

 -- Arvid <requate@univention.de>  Mon, 22 Jun 2020 21:55:53 +0200

univention-ad-connector (13.0.0-43) unstable; urgency=medium

  * Bug #18501: Fix handling of proxyAddresses mapping
    in combination with the Diff-Mode code.

 -- Arvid <requate@univention.de>  Mon, 22 Jun 2020 19:38:35 +0200

univention-ad-connector (13.0.0-42) unstable; urgency=medium

  * Bug #51518: add UCR connector/ad/mapping/attributes/irrelevant

 -- Arvid <requate@univention.de>  Thu, 18 Jun 2020 23:40:51 +0200

univention-ad-connector (13.0.0-41) unstable; urgency=medium

  * Bug #51462: Add dependency to heimdal-clients and restart the umc-server
    after this update

 -- Julia Bremer <bremer@univention.de>  Thu, 18 Jun 2020 13:39:45 +0200

univention-ad-connector (13.0.0-37) unstable; urgency=medium

  * Bug #51518: Ignore changes to certain attributes
  * Bug #51518: Skip the LDAP redirects during AD search
  * Bug #51518: Basic profiling support via UCR con*/ad/poll/profiling

 -- Arvid <requate@univention.de>  Wed, 17 Jun 2020 18:53:20 +0200

univention-ad-connector (13.0.0-36) unstable; urgency=medium

  * Bug #18501: Mark single_value attributes programmatically
    and log the mapping on startup at INFO debug level.

 -- Arvid <requate@univention.de>  Wed, 17 Jun 2020 18:46:29 +0200

univention-ad-connector (13.0.0-35) unstable; urgency=medium

  * Bug #18501: Backport of Diff-Mode from S4-Connector

 -- Arvid <requate@univention.de>  Wed, 17 Jun 2020 18:41:02 +0200

univention-ad-connector (13.0.0-34) unstable; urgency=medium

  * Bug #51298: Sync pwdChangeNextLogin from/to AD

 -- Julia Bremer <bremer@univention.de>  Fri, 05 Jun 2020 20:46:40 +0200

univention-ad-connector (13.0.0-33) unstable; urgency=medium

  * Bug #51160: make UCR templates compatible to python3

 -- Florian Best <best@univention.de>  Thu, 23 Apr 2020 17:23:08 +0200

univention-ad-connector (13.0.0-32) unstable; urgency=medium

  * Bug #50492: Code cleanup

 -- Julia Bremer <bremer@univention.de>  Sun, 08 Mar 2020 16:39:06 +0100

univention-ad-connector (13.0.0-31) unstable; urgency=medium

  * Bug #50630: Fix  Group members are replaced as whole instead of applying a diff

 -- Julia Bremer <bremer@univention.de>  Thu, 05 Mar 2020 09:36:59 +0100

univention-ad-connector (13.0.0-30) unstable; urgency=medium

  * Bug #50492: Sync kerberos hashes

 -- Julia Bremer <bremer@univention.de>  Tue, 03 Mar 2020 17:36:35 +0100

univention-ad-connector (13.0.0-29) unstable; urgency=medium

  * Bug #50674: add "$@" to prepare-new-instance

 -- Jürn Brodersen <brodersen@univention.de>  Wed, 29 Jan 2020 10:37:06 +0100

univention-ad-connector (13.0.0-28) unstable; urgency=medium

  * Bug #50674: fix ad-connector prepare-new-instance

 -- Jürn Brodersen <brodersen@univention.de>  Tue, 28 Jan 2020 13:54:16 +0100

univention-ad-connector (13.0.0-27) unstable; urgency=medium

  * Bug #50674: fix translation in UCR variable description

 -- Johannes Keiser <keiser@univention.de>  Tue, 28 Jan 2020 11:43:27 +0100

univention-ad-connector (13.0.0-26) unstable; urgency=medium

  * Bug #50674: try to generate a valid ldap filter

 -- Jürn Brodersen <brodersen@univention.de>  Tue, 28 Jan 2020 09:23:53 +0100

univention-ad-connector (13.0.0-25) unstable; urgency=medium

  * Bug #50674: Add UCR variable 'connector/ad/mapping/user/ignorefilter'
    for bulk ignoring via LDAP-Filter

 -- Julia Bremer <bremer@univention.de>  Wed, 22 Jan 2020 18:42:18 +0100

univention-ad-connector (13.0.0-24) unstable; urgency=medium

  * Bug #50643: Feedback from QA

 -- Arvid Requate <requate@univention.de>  Tue, 14 Jan 2020 11:34:31 +0100

univention-ad-connector (13.0.0-19) unstable; urgency=medium

  * Bug #50643: turn self.group_members_cache_* into a set() to avoid
    unbound resource consumption due to unlimted appending to lists.

 -- Arvid Requate <requate@univention.de>  Thu, 19 Dec 2019 13:19:58 +0100

univention-ad-connector (13.0.0-18) unstable; urgency=medium

  * Bug #49168: add missing python-notifier dependency

 -- Florian Best <best@univention.de>  Thu, 05 Dec 2019 11:29:59 +0100

univention-ad-connector (13.0.0-17) unstable; urgency=medium

  * Bug #49168: migrate to dh_python

 -- Florian Best <best@univention.de>  Tue, 12 Nov 2019 10:16:29 +0100

univention-ad-connector (13.0.0-16) unstable; urgency=medium

  * Bug #50205: Update links from UCS 4.x-y to UCS 4.4-2

 -- Philipp Hahn <hahn@univention.de>  Fri, 20 Sep 2019 14:32:30 +0200

univention-ad-connector (13.0.0-15) unstable; urgency=medium

  * Bug #48027: Fix links to https

 -- Fathan Vidjaja <vidjaja@univention.de>  Wed, 14 Aug 2019 14:41:01 +0200

univention-ad-connector (13.0.0-14) unstable; urgency=medium

  * Bug #48027: Fix links in UMC to UCS 4.4 documentation

 -- Fathan Vidjaja <vidjaja@univention.de>  Wed, 14 Aug 2019 14:14:41 +0200

univention-ad-connector (13.0.0-13) unstable; urgency=medium

  *  Bug #48027: Fix links in UMC to the UCS 4.4 documentation

 -- Fathan Vidjaja <vidjaja@univention.de>  Wed, 14 Aug 2019 12:13:17 +0200

univention-ad-connector (13.0.0-12) unstable; urgency=medium

  * Bug #48698: Fix GUI visible spelling errors

 -- Philipp Hahn <hahn@univention.de>  Thu, 08 Aug 2019 07:10:48 +0200

univention-ad-connector (13.0.0-11) unstable; urgency=medium

  * Bug #48698: Fix user visible spelling errors

 -- Philipp Hahn <hahn@univention.de>  Thu, 08 Aug 2019 05:46:39 +0200

univention-ad-connector (13.0.0-10) unstable; urgency=medium

  * Bug #49640: fix sql evaluation in remove_{ucs,ad}_rejected.py

 -- Julia Bremer <bremer@univention.de>  Thu, 25 Jul 2019 13:43:05 +0200

univention-ad-connector (13.0.0-9) unstable; urgency=medium

  * Bug #49111: removed password service refs

 -- Felix Botner <botner@univention.de>  Tue, 30 Apr 2019 12:22:19 +0200

univention-ad-connector (13.0.0-8) unstable; urgency=medium

  * Bug #45127: fixed debug message

 -- Felix Botner <botner@univention.de>  Wed, 24 Apr 2019 09:56:08 +0200

univention-ad-connector (13.0.0-7) unstable; urgency=medium

  * Bug #45127: reconnect in get_password_from_ad if drs repl fails

 -- Felix Botner <botner@univention.de>  Tue, 23 Apr 2019 16:27:55 +0200

univention-ad-connector (13.0.0-6) unstable; urgency=medium

  * Bug #41553: remove dead custom attribute code

 -- Florian Best <best@univention.de>  Thu, 11 Apr 2019 09:17:21 +0200

univention-ad-connector (13.0.0-5) unstable; urgency=medium

  * Bug #48995: adjust require.toUrl() call for dojoConfig.cacheBust

 -- Johannes Keiser <keiser@univention.de>  Thu, 14 Mar 2019 15:30:34 +0100

univention-ad-connector (13.0.0-4) unstable; urgency=medium

  * Bug #27804: remove the use of univention.admin.config

 -- Florian Best <best@univention.de>  Thu, 14 Mar 2019 14:07:17 +0100

univention-ad-connector (13.0.0-3) unstable; urgency=medium

  * Bug #48714: added dependency to smbclient

 -- Felix Botner <botner@univention.de>  Wed, 20 Feb 2019 12:57:54 +0100

univention-ad-connector (13.0.0-2) unstable; urgency=medium

  * Bug #48700: Add reworked logo

 -- Ole Schwiegert <schwiegert@univention.de>  Tue, 19 Feb 2019 09:23:00 +0100

univention-ad-connector (13.0.0-1) unstable; urgency=medium

  * Bug #48326: UCS-4.4-0 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 14 Dec 2018 15:12:42 +0100

univention-ad-connector (12.0.0-41) unstable; urgency=medium

  * Bug #48227: version bump

 -- Arvid Requate <requate@univention.de>  Wed, 28 Nov 2018 15:09:23 +0100

univention-ad-connector (12.0.0-40) unstable; urgency=medium

  * Bug #48227: ad/member mode: Fix keberos authentication error
    in case of time skew also in univention-adsearch

 -- Arvid Requate <requate@univention.de>  Wed, 28 Nov 2018 14:58:47 +0100

univention-ad-connector (12.0.0-39) unstable; urgency=medium

  * Bug #46751: Fix proxyAddress attribute sync if it is empty

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 28 Nov 2018 12:41:58 +0100

univention-ad-connector (12.0.0-38) unstable; urgency=medium

  * Bug #47069: Fix AD to UCS password hash synchronization in case
    a custom Domain Admin account is used.

 -- Arvid Requate <requate@univention.de>  Tue, 27 Nov 2018 20:58:11 +0100

univention-ad-connector (12.0.0-37) unstable; urgency=medium

  * Bug #42430: The traceback failedToSetAdministratorPassword is
    currently thrown in different places. More tracebacks for different
    errors have been added.

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 27 Nov 2018 20:00:23 +0100

univention-ad-connector (12.0.0-36) unstable; urgency=medium

  * Bug #48227: ad/member mode: Fix keberos authentication error
    in case of time skew.

 -- Arvid Requate <requate@univention.de>  Tue, 27 Nov 2018 19:34:47 +0100

univention-ad-connector (12.0.0-35) unstable; urgency=medium

  * Bug #44024: Fix password sync AD to UCS on systems that have
    connector/ldap/server set to a server with read-only OpenLDAP.

 -- Arvid Requate <requate@univention.de>  Tue, 27 Nov 2018 12:29:15 +0100

univention-ad-connector (12.0.0-34) unstable; urgency=medium

  * Bug #48082: univention-adsearch encoding

 -- Felix Botner <botner@univention.de>  Thu, 22 Nov 2018 18:21:43 +0100

univention-ad-connector (12.0.0-33) unstable; urgency=medium

  * Bug #48082: univention-adsearch encoding

 -- Felix Botner <botner@univention.de>  Thu, 22 Nov 2018 11:28:42 +0100

univention-ad-connector (12.0.0-32) unstable; urgency=medium

  * Bug #48153: added connector/ad/mapping/sync/userPrincipalName

 -- Felix Botner <botner@univention.de>  Wed, 21 Nov 2018 12:19:36 +0100

univention-ad-connector (12.0.0-31) unstable; urgency=medium

  * Bug #48153: fixed last commit

 -- Felix Botner <botner@univention.de>  Wed, 21 Nov 2018 10:57:21 +0100

univention-ad-connector (12.0.0-30) unstable; urgency=medium

  * Bug #48153: update userPrincipalName in AD

 -- Felix Botner <botner@univention.de>  Tue, 20 Nov 2018 16:19:31 +0100

univention-ad-connector (12.0.0-29) unstable; urgency=medium

  * Bug #43189: space separated attribute list as parameter

 -- Felix Botner <botner@univention.de>  Thu, 08 Nov 2018 13:43:59 +0100

univention-ad-connector (12.0.0-28) unstable; urgency=medium

  * Bug #48082: univention-adsearch encoding

 -- Felix Botner <botner@univention.de>  Thu, 08 Nov 2018 13:25:06 +0100

univention-ad-connector (12.0.0-27) unstable; urgency=medium

  * Bug #47396: Fixed cn = Subschema rejects in ad-connector

 -- Julia Bremer <bremer@univention.de>  Mon, 29 Oct 2018 09:24:01 +0100

univention-ad-connector (12.0.0-26) unstable; urgency=medium

  * Bug #47856: Avoid overwriting customer UCR variable values in
    univention-ad-connector-exchange.postinst

 -- Arvid Requate <requate@univention.de>  Tue, 16 Oct 2018 21:02:36 +0200

univention-ad-connector (12.0.0-25) unstable; urgency=medium

  * Bug #47858: make univention-adsearch use the certificate chain file

 -- Arvid Requate <requate@univention.de>  Tue, 16 Oct 2018 19:29:36 +0200

univention-ad-connector (12.0.0-24) unstable; urgency=medium

  * Bug #47858: make univention-adsearch use the certificate chain file

 -- Arvid Requate <requate@univention.de>  Tue, 16 Oct 2018 15:59:42 +0200

univention-ad-connector (12.0.0-23) unstable; urgency=medium

  * Bug #47901: support sasl/gssapi in
    make-deleted-objects-readable-for-this-machine and
    well-known-sid-object-rename

 -- Felix Botner <botner@univention.de>  Mon, 08 Oct 2018 17:26:19 +0200

univention-ad-connector (12.0.0-22) unstable; urgency=medium

  * Bug #47209: do not remove post_attributes during add to ad

 -- Felix Botner <botner@univention.de>  Tue, 18 Sep 2018 16:50:51 +0200

univention-ad-connector (12.0.0-21) unstable; urgency=medium

  * Bug #47232: Fix broken code

 -- Arvid Requate <requate@univention.de>  Tue, 14 Aug 2018 20:57:49 +0200

univention-ad-connector (12.0.0-20) unstable; urgency=medium

  * Bug #47232: Improve robustness of object resync

 -- Arvid Requate <requate@univention.de>  Tue, 14 Aug 2018 10:33:34 +0200

univention-ad-connector (12.0.0-19) unstable; urgency=medium

  * Bug #47232: Improve robustness of object resync

 -- Arvid Requate <requate@univention.de>  Mon, 13 Aug 2018 19:23:39 +0200

univention-ad-connector (12.0.0-18) unstable; urgency=medium

  * Bug #47232: Improve robustness of object resync by skipping
    unidentified AD objects
  * Skip referrals in resync_object_from_ad.py
  * Fix exception handling in resync_object_from_ucs.py

 -- Arvid Requate <requate@univention.de>  Tue, 07 Aug 2018 19:28:02 +0200

univention-ad-connector (12.0.0-17) unstable; urgency=medium

  * Bug #47025: updated ad binary attributes list

 -- Felix Botner <botner@univention.de>  Thu, 02 Aug 2018 15:32:31 +0200

univention-ad-connector (12.0.0-16) unstable; urgency=medium

  * Bug #47430: Fix regression of Bug #45779

 -- Arvid Requate <requate@univention.de>  Wed, 01 Aug 2018 12:36:47 +0200

univention-ad-connector (12.0.0-15) unstable; urgency=medium

  * Bug #47232: Typo fixed in univention-ad-connector.install

 -- Arvid Requate <requate@univention.de>  Thu, 26 Jul 2018 14:34:43 +0200

univention-ad-connector (12.0.0-14) unstable; urgency=medium

  * Bug #47232: Add short options to resync_object_* and remove_*_rejected

 -- Arvid Requate <requate@univention.de>  Thu, 26 Jul 2018 10:23:12 +0200

univention-ad-connector (12.0.0-13) unstable; urgency=medium

  * Bug #47232: Add resync_object_from_* and remove_*_rejected

 -- Arvid Requate <requate@univention.de>  Wed, 25 Jul 2018 18:51:07 +0200

univention-ad-connector (12.0.0-12) unstable; urgency=medium

  * Bug #47049: restart connector on extended attribute changes

 -- Felix Botner <botner@univention.de>  Fri, 15 Jun 2018 12:21:37 +0200

univention-ad-connector (12.0.0-11) unstable; urgency=medium

  * Bug #47096: bindpwdfile support

 -- Felix Botner <botner@univention.de>  Mon, 28 May 2018 18:24:52 +0200

univention-ad-connector (12.0.0-10) unstable; urgency=medium

  * Bug #47091: Fix typo

 -- Arvid Requate <requate@univention.de>  Mon, 28 May 2018 12:18:31 +0200

univention-ad-connector (12.0.0-9) unstable; urgency=medium

  * Bug #47091: Improve error feedback

 -- Arvid Requate <requate@univention.de>  Mon, 28 May 2018 12:07:28 +0200

univention-ad-connector (12.0.0-8) unstable; urgency=medium

  * Bug #45779: fix econding issues in getting/setting rejects

 -- Felix Botner <botner@univention.de>  Tue, 08 May 2018 13:45:09 +0200

univention-ad-connector (12.0.0-7) unstable; urgency=medium

  * Bug #45760: update shadowMax, shadowLastChange and krb5PasswordEnd
    during password sync from ad

 -- Felix Botner <botner@univention.de>  Tue, 08 May 2018 11:59:42 +0200

univention-ad-connector (12.0.0-6) unstable; urgency=medium

  * Bug #44478: Output exception details in check_domain and admember_join

 -- Arvid Requate <requate@univention.de>  Thu, 22 Mar 2018 19:58:42 +0100

univention-ad-connector (12.0.0-5) unstable; urgency=medium

  * Bug #41574: fixed unix2ad_time, ad2unix_time revert

 -- Felix Botner <botner@univention.de>  Mon, 26 Feb 2018 14:37:20 +0100

univention-ad-connector (12.0.0-4) unstable; urgency=medium

  * Bug #41574: fixed unix2ad_time, ad2unix_time

 -- Felix Botner <botner@univention.de>  Thu, 22 Feb 2018 17:28:00 +0100

univention-ad-connector (12.0.0-3) unstable; urgency=medium

  * Bug #39817: unify disabled/locked

 -- Florian Best <best@univention.de>  Mon, 29 Jan 2018 16:16:33 +0100

univention-ad-connector (12.0.0-2) unstable; urgency=medium

  * Bug #43336: remove XS-Python-Version

 -- Florian Best <best@univention.de>  Thu, 21 Dec 2017 11:52:27 +0100

univention-ad-connector (12.0.0-1) unstable; urgency=medium

  * Bug #45841: UCS-4.3 version bump

 -- Jürn Brodersen <brodersen@univention.de>  Mon, 11 Dec 2017 14:40:33 +0100

univention-ad-connector (11.0.6-33) unstable; urgency=medium

  * Bug #43745: depend on explicit version of univention-lib

 -- Florian Best <best@univention.de>  Fri, 17 Nov 2017 15:56:28 +0100

univention-ad-connector (11.0.6-32) unstable; urgency=medium

  * Bug #43745: adapt to API change

 -- Florian Best <best@univention.de>  Thu, 09 Nov 2017 20:43:14 +0100

univention-ad-connector (11.0.6-31) unstable; urgency=medium

  * Bug #18680: Fix ignore_object logic

 -- Arvid Requate <requate@univention.de>  Wed, 25 Oct 2017 19:36:11 +0200

univention-ad-connector (11.0.6-30) unstable; urgency=medium

  * Bug #18501: Revert changes, they change the mapping file

 -- Arvid Requate <requate@univention.de>  Tue, 24 Oct 2017 18:04:23 +0200

univention-ad-connector (11.0.6-29) unstable; urgency=medium

  * Bug #36480: Revert changes, they are blocking revert of Bug #18501

 -- Arvid Requate <requate@univention.de>  Tue, 24 Oct 2017 18:04:23 +0200

univention-ad-connector (11.0.6-27) unstable; urgency=medium

  * Bug #41335: fix typo

 -- Florian Best <best@univention.de>  Thu, 31 Aug 2017 10:48:04 +0200

univention-ad-connector (11.0.6-26) unstable; urgency=medium

  * Bug #41335: restart AD Connector in postinst

 -- Florian Best <best@univention.de>  Wed, 30 Aug 2017 17:34:24 +0200

univention-ad-connector (11.0.6-25) unstable; urgency=medium

  * Bug #36480: adc: bump python-univention-lib dependency
  * Bug #36480: adc: implement correct `con_other_attribute` handling
  * Bug #36480: adc: fix deletion of `con_other_attribute` if non existent

 -- Lukas Oyen <oyen@univention.de>  Wed, 23 Aug 2017 14:23:47 +0200

univention-ad-connector (11.0.6-24) unstable; urgency=medium

  * Bug #45134: fix search filter replacing in univention-adsearch

 -- Florian Best <best@univention.de>  Tue, 22 Aug 2017 13:41:03 +0200

univention-ad-connector (11.0.6-23) unstable; urgency=medium

  * Bug #11658: adc: fix typo in ad/mapping.py
  * Bug #11658: adc: fix default_naming_context retrieval

 -- Lukas Oyen <oyen@univention.de>  Wed, 16 Aug 2017 17:08:16 +0200

univention-ad-connector (11.0.6-22) unstable; urgency=medium

  * Bug #45134: fixup

 -- Florian Best <best@univention.de>  Wed, 09 Aug 2017 14:04:36 +0200

univention-ad-connector (11.0.6-21) unstable; urgency=medium

  * Bug #45134: fix search filter in univention-adsearch

 -- Florian Best <best@univention.de>  Wed, 09 Aug 2017 13:43:44 +0200

univention-ad-connector (11.0.6-20) unstable; urgency=medium

  * Bug #45124: adc: fix __get_highestCommittedUSN()

 -- Lukas Oyen <oyen@univention.de>  Mon, 07 Aug 2017 08:50:21 +0200

univention-ad-connector (11.0.6-19) unstable; urgency=medium

  * Bug #18680: adc: improve logging on `__ignore_object()`
  * Bug #18680: adc: fix nested group deletion bug

 -- Lukas Oyen <oyen@univention.de>  Thu, 27 Jul 2017 14:52:13 +0200

univention-ad-connector (11.0.6-18) unstable; urgency=medium

  * Bug #38619: adc: update to class `configdb` as defined in s4c

 -- Lukas Oyen <oyen@univention.de>  Thu, 27 Jul 2017 14:45:15 +0200

univention-ad-connector (11.0.6-17) unstable; urgency=medium

  * Bug #11658: ad-connector: implement ldap filter escaping function
  * Bug #11658: ad-connector: unify ldap operations
  * Bug #11658: ad-connector: escape ldap filter expressions
  * Bug #11658: ad-connector: never return `None` from _decode_dn_from_config_option()
  * Bug #11658: ad-connector: fix error in group membership mapping.

 -- Lukas Oyen <oyen@univention.de>  Thu, 27 Jul 2017 14:35:44 +0200

univention-ad-connector (11.0.6-16) unstable; urgency=medium

  * Bug #36480: ad-connector deduplicate UCS LDAP attribute values
  * Bug #18501: ad-connector: implement diff-mode in `sync_from_ucs()`

 -- Lukas Oyen <oyen@univention.de>  Thu, 27 Jul 2017 14:21:29 +0200

univention-ad-connector (11.0.6-15) unstable; urgency=medium

  * Bug #41335: prevent starting multiple AD connector instances

 -- Florian Best <best@univention.de>  Tue, 25 Jul 2017 18:39:51 +0200

univention-ad-connector (11.0.6-14) unstable; urgency=medium

  * Bug #45011: merge S4 Connector changes

 -- Florian Best <best@univention.de>  Tue, 25 Jul 2017 18:30:10 +0200

univention-ad-connector (11.0.6-13) unstable; urgency=medium

  * Bug #45037: prevent IOError if f.close() was already called

 -- Florian Best <best@univention.de>  Mon, 24 Jul 2017 14:39:20 +0200

univention-ad-connector (11.0.6-11) unstable; urgency=medium

  * Bug #45011: don't log tracebacks for objects which are ignored
  	nevertheless

 -- Florian Best <best@univention.de>  Thu, 20 Jul 2017 15:38:55 +0200

univention-ad-connector (11.0.6-10) unstable; urgency=medium

  * Bug #45011: fix handling of object types
  * Bug #45037: add possibility to start AD connector in foreground

 -- Florian Best <best@univention.de>  Wed, 19 Jul 2017 10:56:38 +0200

univention-ad-connector (11.0.6-9) unstable; urgency=medium

  * Bug #41619: Applied patch from Florian Best - Catch NoSuchProcess
    exception

 -- Johannes Keiser <keiser@univention.de>  Thu, 06 Jul 2017 17:57:18 +0200

univention-ad-connector (11.0.6-8) unstable; urgency=medium

  * Bug #40813: port UDM skip recreation patches from s4-connector

 -- Lukas Oyen <oyen@univention.de>  Thu, 06 Jul 2017 11:25:38 +0200

univention-ad-connector (11.0.6-7) unstable; urgency=low

  * Bug #43470: Handle UCRV */autostart through systemd
  * Bug #43874: help systemd track pidfile

 -- Philipp Hahn <hahn@univention.de>  Wed, 15 Mar 2017 08:52:56 +0100

univention-ad-connector (11.0.6-6) unstable; urgency=low

  * Bug #42296: no need to restart apache

 -- Felix Botner <botner@univention.de>  Wed, 08 Feb 2017 12:45:31 +0100

univention-ad-connector (11.0.6-5) unstable; urgency=low

  * Bug #42296: removed config from system

 -- Felix Botner <botner@univention.de>  Wed, 08 Feb 2017 11:07:44 +0100

univention-ad-connector (11.0.6-4) unstable; urgency=low

  * Bug #42296: removed apache config, no longer needed

 -- Felix Botner <botner@univention.de>  Wed, 08 Feb 2017 10:44:19 +0100

univention-ad-connector (11.0.6-2) unstable; urgency=low

  * Bug #38438: start-stop-daemon --oknodo

 -- Philipp Hahn <hahn@univention.de>  Fri, 03 Feb 2017 08:53:55 +0100

univention-ad-connector (11.0.6-1) unstable; urgency=medium

  * Bug #39731: allow file uploads without XSRF protection

 -- Florian Best <best@univention.de>  Wed, 01 Feb 2017 14:36:32 +0100

univention-ad-connector (11.0.5-18) unstable; urgency=low

  * Bug #43216: Continue writing mailPrimaryAddress to AD attribute mail.

 -- Arvid Requate <requate@univention.de>  Mon, 30 Jan 2017 17:23:21 +0100

univention-ad-connector (11.0.5-17) unstable; urgency=low

  * Bug #43216: Revised mapping for MS-Exchange related 'proxyAddresses'
    (mailPrimaryAddress, mailAlternativeAddress) <-> proxyAddresses
    instead of
    (mailPrimaryAddress <-> mail, mailAlternativeAddress <-> proxyAddresses)
  * split proxyAddresses methods off into separate module
  * A sync_mode='read' hack for mailAlternativeAddress has been introduced
    to avoid duplicate ldap.MOD_REPLACE entries in sync_from_ucs modlist
  * Note: currently this leaves the "mail" attribute unsynchronized

 -- Arvid Requate <requate@univention.de>  Wed, 25 Jan 2017 18:27:38 +0100

univention-ad-connector (11.0.5-16) unstable; urgency=low

  * Bug #43216: remove ancient code from __set_values:
    If mapping[1] is defined for a post_attribute the method __set_values
    calls it and passes the result to set_values. Since the latter expects
    an object of class attribute this cannot work and must have been broken
    a long time ago. In the mapping I don't see any case where mapping
    functions are defined for a post_attribute.

 -- Arvid Requate <requate@univention.de>  Wed, 25 Jan 2017 15:31:57 +0100

univention-ad-connector (11.0.5-15) unstable; urgency=low

  * Bug #43216: backport from s4connector:
    support None for mapping functions in sync_to_ucs

 -- Arvid Requate <requate@univention.de>  Wed, 25 Jan 2017 15:24:12 +0100

univention-ad-connector (11.0.5-14) unstable; urgency=low

  * Bug #43216: backport from s4connector:
    debug output for addlist and modlist in sync_from_ucs

 -- Arvid Requate <requate@univention.de>  Mon, 30 Jan 2017 17:21:25 +0100

univention-ad-connector (11.0.5-13) unstable; urgency=low

  * Bug #42618: support attribute level sync_mode configuration

 -- Arvid Requate <requate@univention.de>  Mon, 30 Jan 2017 17:19:43 +0100

univention-ad-connector (11.0.5-12) unstable; urgency=low

  * Bug #40816: fixed "Determine ad_ldap_base" in open_ad()

 -- Felix Botner <botner@univention.de>  Wed, 25 Jan 2017 15:24:42 +0100

univention-ad-connector (11.0.5-11) unstable; urgency=low

  * Bug #43229: mapping -> windowscomputer -> samAccountName
    is write only (changes in ad are handled via cn)

 -- Felix Botner <botner@univention.de>  Wed, 25 Jan 2017 14:50:24 +0100

univention-ad-connector (11.0.5-10) unstable; urgency=medium

  * Bug #42507: code cleanup

 -- Florian Best <best@univention.de>  Thu, 22 Dec 2016 13:13:10 +0100

univention-ad-connector (11.0.5-9) unstable; urgency=low

  * Bug #42507: Fix race condition between writing and reading pickle files

 -- Florian Best <best@univention.de>  Wed, 21 Dec 2016 10:05:56 +0100

univention-ad-connector (11.0.5-8) unstable; urgency=low

  * Bug #42998: fixed group_members_sync_to_ucs

 -- Felix Botner <botner@univention.de>  Tue, 13 Dec 2016 09:45:43 +0100

univention-ad-connector (11.0.5-7) unstable; urgency=low

  * Bug #42998: support windowscomputer in group_members_sync_to_ucs

 -- Felix Botner <botner@univention.de>  Mon, 12 Dec 2016 15:14:32 +0100

univention-ad-connector (11.0.5-6) unstable; urgency=low

  * Bug #40659: Fix check for running proceeses with Docker

 -- Philipp Hahn <hahn@univention.de>  Fri, 02 Dec 2016 12:25:59 +0100

univention-ad-connector (11.0.5-5) unstable; urgency=low

  * Don't remove group members if the group exists during the first sync
    on both sides (Bug #43070)

 -- Felix Botner <botner@univention.de>  Wed, 30 Nov 2016 15:18:32 +0100

univention-ad-connector (11.0.5-4) unstable; urgency=low

  * Bug #36354: added get_ad_binddn_from_name

 -- Felix Botner <botner@univention.de>  Mon, 28 Nov 2016 17:43:28 +0100

univention-ad-connector (11.0.5-3) unstable; urgency=medium

  * Re-added univention-server-member conflict (Bug #42489)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 27 Sep 2016 16:14:17 +0200

univention-ad-connector (11.0.5-2) unstable; urgency=medium

  * Remove the slave and member server conflict (Bug #42489)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 23 Sep 2016 20:25:34 +0200

univention-ad-connector (11.0.5-1) unstable; urgency=medium

  * Moving an object to a non-readable LDAP position resulted to a wrong
    move. This issue has been fixed (Bug #41938)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 13 Sep 2016 14:10:16 +0200

univention-ad-connector (11.0.4-1) unstable; urgency=medium

  * Make the global_ignore_subtree configuration option configurable
    via the UCR variable connector/ad/mapping/ignoresubtree/* (Bug #41680)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 13 Sep 2016 13:27:53 +0200

univention-ad-connector (11.0.3-1) unstable; urgency=medium

  * Added support for the following UCR variables:
     - connector/ad/mapping/user/syncmode
     - connector/ad/mapping/group/syncmode
     - connector/ad/mapping/container/syncmode
     - connector/ad/mapping/ou/syncmode
    (Bug #41685)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 13 Sep 2016 11:46:40 +0200

univention-ad-connector (11.0.2-1) unstable; urgency=low

  * Bug #38438: Make init-script LSB compliant

 -- Philipp Hahn <hahn@univention.de>  Fri, 09 Sep 2016 15:47:10 +0200

univention-ad-connector (11.0.1-5) unstable; urgency=medium

  * Remove the master / backup dependency (Bug #41682)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 12 Sep 2016 07:40:58 +0200

univention-ad-connector (11.0.1-4) unstable; urgency=low

  * Bug #42078: Corrected a typo.

 -- Richard Ulmer <ulmer@univention.de>  Wed, 31 Aug 2016 13:36:09 +0200

univention-ad-connector (11.0.1-3) unstable; urgency=medium

  * Bug #41744: Fix regression by reverting a premature optimization

 -- Arvid Requate <requate@univention.de>  Wed, 17 Aug 2016 12:28:51 +0200

univention-ad-connector (11.0.1-2) unstable; urgency=medium

  * Bug #41248: Use paged search also in group_members_sync_to_ucs
    (Bug #26208 fixed this for group_members_sync_from_ucs)

 -- Arvid Requate <requate@univention.de>  Tue, 16 Aug 2016 22:19:21 +0200

univention-ad-connector (11.0.1-1) unstable; urgency=medium

  * Bug #41744: Support range retrieval for member attribute

 -- Arvid Requate <requate@univention.de>  Tue, 16 Aug 2016 22:15:54 +0200

univention-ad-connector (11.0.0-1) unstable; urgency=medium

  * Bug #41963: UCS-4.2 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 12 Aug 2016 13:58:43 +0200

univention-ad-connector (10.0.1-26) unstable; urgency=low

  * connector.samr.Close(user_handle) after password sync to ad (Bug #41247)

 -- Felix Botner <botner@univention.de>  Mon, 06 Jun 2016 12:59:19 +0200

univention-ad-connector (10.0.1-25) unstable; urgency=medium

  * Handle sync_from_ucs modify with unset con proxyAddresses (Bug #41246)

 -- Arvid Requate <requate@univention.de>  Wed, 25 May 2016 20:10:10 +0200

univention-ad-connector (10.0.1-24) unstable; urgency=low

  * fix mode (Bug #32265)

 -- Felix Botner <botner@univention.de>  Wed, 04 May 2016 15:43:43 +0200

univention-ad-connector (10.0.1-23) unstable; urgency=low

  * restart connector after rotating log files (Bug #32265)

 -- Felix Botner <botner@univention.de>  Mon, 02 May 2016 12:52:07 +0200

univention-ad-connector (10.0.1-22) unstable; urgency=medium

  * In case the user was just created in AD, the connector can't read a
    password hash for the new user in AD. An irritating debug message
    has been removed for this case (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 29 Apr 2016 06:14:48 +0200

univention-ad-connector (10.0.1-21) unstable; urgency=medium

  * Check if the cached group members really exist (Bug #41028)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 26 Apr 2016 15:22:19 +0200

univention-ad-connector (10.0.1-20) unstable; urgency=medium

  * Create only one drs and samr connection per connector instance
    instead of creating a connection for every password sync (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 20 Mar 2016 11:07:50 +0100

univention-ad-connector (10.0.1-19) unstable; urgency=medium

  * Remove the password service: Part VI (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 17 Mar 2016 08:24:48 +0100

univention-ad-connector (10.0.1-18) unstable; urgency=medium

  * Remove the password service: Part V (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 17 Mar 2016 07:55:56 +0100

univention-ad-connector (10.0.1-17) unstable; urgency=medium

  * Remove the password service: Part IV (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Mar 2016 09:18:32 +0100

univention-ad-connector (10.0.1-16) unstable; urgency=medium

  * Remove the password service: Part III (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Mar 2016 09:12:43 +0100

univention-ad-connector (10.0.1-15) unstable; urgency=medium

  * Remove the password service: Part II (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Mar 2016 09:07:17 +0100

univention-ad-connector (10.0.1-14) unstable; urgency=medium

  * Remove the password service: Part I (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Mar 2016 08:52:36 +0100

univention-ad-connector (10.0.1-13) unstable; urgency=medium

  * Replace the password synchronization by using
    drsuapi.DsGetNCChangesRequest8 and samr.SetUserInfo. Felix and Arvid
    did a lot of research and provide patches it. This will replace our
    own password service (Bug #40745)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Mar 2016 08:44:05 +0100

univention-ad-connector (10.0.1-12) unstable; urgency=medium

  * Bug #40357: Adjust mapping to renamed compare method

 -- Arvid Requate <requate@univention.de>  Thu, 03 Mar 2016 14:19:10 +0100

univention-ad-connector (10.0.1-11) unstable; urgency=medium

  * Bug #40357: Fix general value comparison in sync_to_ucs

 -- Arvid Requate <requate@univention.de>  Wed, 02 Mar 2016 17:30:11 +0100

univention-ad-connector (10.0.1-10) unstable; urgency=medium

  * Bug #40357: Preserve non-smtp values in AD proxyAdresses

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 21:31:36 +0100

univention-ad-connector (10.0.1-9) unstable; urgency=medium

  * Bug #40357: Fix passing of single mapped value in sync_to_ucs

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 21:29:16 +0100

univention-ad-connector (10.0.1-8) unstable; urgency=medium

  * Bug #40357: Make naming less confusing:
    ucs_value_map_function should map a ucs value to con (ucs2con)

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 20:50:08 +0100

univention-ad-connector (10.0.1-7) unstable; urgency=medium

  * Bug #40357: Reduce debug logging from proxyAddresses class

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 16:19:11 +0100

univention-ad-connector (10.0.1-6) unstable; urgency=medium

  * Bug #40357: Extend mapping to map proxyAddresses
  * Add support for ucs_value_map_function and con_value_map_function
  * New proxyAddresses class with compare, ucs2con and con2ucs methods

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 16:08:04 +0100

univention-ad-connector (10.0.1-5) unstable; urgency=medium

  * Bug #40357: sync_from_ucs refactoring to reduce nesting depth
    in preparation for next commit

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 15:50:18 +0100

univention-ad-connector (10.0.1-4) unstable; urgency=medium

  * Bug #40357: fix duplicate ldap modify in sync_from_ucs

 -- Arvid Requate <requate@univention.de>  Thu, 25 Feb 2016 15:47:52 +0100

univention-ad-connector (10.0.1-3) unstable; urgency=medium

  * Bug #40357: Add connector/ad/mapping/user/alternativemail and
    connector/ad/mapping/group/alternativemail

 -- Arvid Requate <requate@univention.de>  Tue, 16 Feb 2016 16:35:53 +0100

univention-ad-connector (10.0.1-2) unstable; urgency=low

  * added add_host_record_in_ad to ad member init (Bug #39574)

 -- Felix Botner <botner@univention.de>  Wed, 21 Oct 2015 12:24:18 +0200

univention-ad-connector (10.0.1-1) unstable; urgency=medium

  * Bug #38820: change /umcp/ to /univention-management-console/

 -- Florian Best <best@univention.de>  Mon, 28 Sep 2015 18:51:25 +0200

univention-ad-connector (10.0.0-1) unstable; urgency=medium

  * Bug #39322: support psutil 0.9 and >= 2.0

 -- Florian Best <best@univention.de>  Wed, 09 Sep 2015 15:53:18 +0200

univention-ad-connector (9.0.11-12) unstable; urgency=low

  * Bug #38147: fix documentation link

 -- Daniel Troeder <troeder@univention.de>  Thu, 30 Jul 2015 12:58:17 +0200

univention-ad-connector (9.0.11-11) unstable; urgency=medium

  * Bug #38147: fix documentation links

 -- Daniel Troeder <troeder@univention.de>  Fri, 15 May 2015 11:37:34 +0200

univention-ad-connector (9.0.11-10) unstable; urgency=medium

  * Before synchronizing an object from AD to UCS, the ignore status of
    the UCS object is checked. This prevents the move of an UCS DC on
    UCS side when it was moved in AD (Bug #37351)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 17 Mar 2015 17:05:09 +0100

univention-ad-connector (9.0.11-9) unstable; urgency=medium

  * Bug #35870: Adjust SDB link URL

 -- Arvid Requate <requate@univention.de>  Mon, 26 Jan 2015 13:46:47 +0100

univention-ad-connector (9.0.11-8) unstable; urgency=medium

  * Bug #35870: Fix translation file

 -- Arvid Requate <requate@univention.de>  Thu, 22 Jan 2015 15:35:26 +0100

univention-ad-connector (9.0.11-7) unstable; urgency=medium

  * Bug #35870: UMC notification if _domaincontroler_master SRV RR is missing

 -- Arvid Requate <requate@univention.de>  Thu, 22 Jan 2015 14:42:00 +0100

univention-ad-connector (9.0.11-6) unstable; urgency=medium

  * Bug #35562: Improved wording for error message

 -- Arvid Requate <requate@univention.de>  Wed, 21 Jan 2015 11:33:37 +0100

univention-ad-connector (9.0.11-5) unstable; urgency=medium

  * Bug #37450: Fix variable names

 -- Arvid Requate <requate@univention.de>  Tue, 06 Jan 2015 17:02:55 +0100

univention-ad-connector (9.0.11-4) unstable; urgency=medium

  * Bug #37450: Make object mapping to return properly cased LDAP base in DNs
  * Lookup AD LDAP base from AD Root DSE to get properly cased AD LDAP base

 -- Arvid Requate <requate@univention.de>  Tue, 06 Jan 2015 14:38:30 +0100

univention-ad-connector (9.0.11-3) unstable; urgency=medium

  * Bug #37450: Map DNs to UCR LDAP base case before calling position.setDn

 -- Arvid Requate <requate@univention.de>  Mon, 05 Jan 2015 20:54:54 +0100

univention-ad-connector (9.0.11-2) unstable; urgency=medium

  * Check that joining account is member of "Domain Admins" in AD
    before starting admember setup (Bug #35562)
  * Allow UMC Administrator to be renamed before admember setup (Bug #36778)

 -- Arvid Requate <requate@univention.de>  Wed, 03 Dec 2014 19:31:05 +0100

univention-ad-connector (9.0.11-1) unstable; urgency=medium

  * admember: check that joining account has RID 500 in AD (Bug #35562)
  * Adjust return code of well-known-sid-object-rename in case nothing has
    to be done (don't report this as failure).

 -- Arvid Requate <requate@univention.de>  Tue, 02 Dec 2014 17:02:22 +0100

univention-ad-connector (9.0.10-1) unstable; urgency=medium

  * Bug #36653: Adjust univention-adsearch to python-ldap 2.4
  * Bug #36654: Use sslv3 instead of sslv2

 -- Arvid Requate <requate@univention.de>  Thu, 13 Nov 2014 16:48:37 +0100

univention-ad-connector (9.0.9-1) unstable; urgency=medium

  * Bug #35837: adjust icon files

 -- Alexander Kläser <klaeser@univention.de>  Fri, 31 Oct 2014 21:13:42 +0100

univention-ad-connector (9.0.8-1) unstable; urgency=low

  * Bug #36321: moved label next to radio buttons

 -- Alexander Kramer <kramer@univention.de>  Tue, 28 Oct 2014 12:30:46 +0100

univention-ad-connector (9.0.7-1) unstable; urgency=medium

  * Bug #35654: fix wizard images

 -- Florian Best <best@univention.de>  Tue, 21 Oct 2014 18:25:07 +0200

univention-ad-connector (9.0.6-1) unstable; urgency=medium

  * Catch ADNotAvailable in connection testing (Bug #35701)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 15 Oct 2014 07:30:16 +0200

univention-ad-connector (9.0.5-1) unstable; urgency=medium

  * Added a new UCR variable connector/ad/mapping/user/password/disabled
    which allows the deactivation of the password synchronization
    (Bug #35895)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 15 Oct 2014 06:45:20 +0200

univention-ad-connector (9.0.4-1) unstable; urgency=low

  * Bug #35654: change handling of displaying helpText

 -- Florian Best <best@univention.de>  Wed, 08 Oct 2014 11:31:17 +0200

univention-ad-connector (9.0.3-1) unstable; urgency=low

  * Bug #35654: move module into domain category

 -- Florian Best <best@univention.de>  Wed, 01 Oct 2014 13:52:13 +0200

univention-ad-connector (9.0.2-1) unstable; urgency=medium

  * Feedback from QA (Bug #35602)

 -- Arvid Requate <requate@univention.de>  Wed, 03 Sep 2014 17:09:16 +0200

univention-ad-connector (9.0.1-1) unstable; urgency=medium

  * Fixed guess_ad_domain_language function() and call it after the ssl
    decision has been made (Bug #35572)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 02 Sep 2014 10:32:36 +0200

univention-ad-connector (9.0.0-3) unstable; urgency=medium

  * Adjust to python-ldap 2.4 (Bug #35320)

 -- Arvid Requate <requate@univention.de>  Mon, 01 Sep 2014 19:59:33 +0200

univention-ad-connector (9.0.0-2) unstable; urgency=medium

  * Another python2.7 fix (Bug #35320)

 -- Arvid Requate <requate@univention.de>  Mon, 25 Aug 2014 16:44:17 +0200

univention-ad-connector (9.0.0-1) unstable; urgency=medium

  * version bump for UCS 4.0 (Bug #35319)
  * Adjust for python2.7
  * raise debian/compat to 9
  * Update copyright year

 -- Arvid Requate <requate@univention.de>  Mon, 18 Aug 2014 18:22:09 +0200

univention-ad-connector (8.0.17-70) unstable; urgency=medium

  * Adjusted fuzzy messages (Bug #35602)

 -- Arvid Requate <requate@univention.de>  Thu, 14 Aug 2014 18:04:33 +0200

univention-ad-connector (8.0.17-69) unstable; urgency=medium

  * Adjusted a couple of wizard messages (Bug #35602)

 -- Arvid Requate <requate@univention.de>  Thu, 14 Aug 2014 17:51:24 +0200

univention-ad-connector (8.0.17-68) unstable; urgency=medium

  * Fix python syntax typo (Bug #35566)

 -- Arvid Requate <requate@univention.de>  Wed, 06 Aug 2014 11:35:06 +0200

univention-ad-connector (8.0.17-67) unstable; urgency=medium

  * Bugfixes for make_deleted_objects_readable_for_this_machine (Bug #35566)

 -- Arvid Requate <requate@univention.de>  Tue, 05 Aug 2014 19:04:46 +0200

univention-ad-connector (8.0.17-66) unstable; urgency=medium

  * DSACL needs to be adjusted in a separate step after initialization
    (Bug #35566)

 -- Arvid Requate <requate@univention.de>  Tue, 05 Aug 2014 18:28:36 +0200

univention-ad-connector (8.0.17-65) unstable; urgency=medium

  * Add dependency on current version of python-univention-lib (Bug #35566)

 -- Arvid Requate <requate@univention.de>  Tue, 05 Aug 2014 17:43:08 +0200

univention-ad-connector (8.0.17-64) unstable; urgency=medium

  * Add make_deleted_objects_readable_for_this_machine (Bug #35566)

 -- Arvid Requate <requate@univention.de>  Tue, 05 Aug 2014 17:40:22 +0200

univention-ad-connector (8.0.17-63) unstable; urgency=medium

  * Bug #35090: text adaptations

 -- Alexander Kläser <klaeser@univention.de>  Fri, 01 Aug 2014 13:54:52 +0200

univention-ad-connector (8.0.17-62) unstable; urgency=medium

  Bug #35090:
  * added piwik topic publishing
  * adjusted texts and added translations
  * pre-select AD member mode on start page
  * hide start/stop buttons for password service + fixed backend function
  * added missing images
  * enable 'cancel' button
  * fixed some internal page navigation logic
  * added hint to allow port for password sync on windows
  * added target="_blank" for UMCP based download links on IE
  * automatically advance in (connector config) wizard after uploading AD
    root certificate

 -- Alexander Kläser <klaeser@univention.de>  Thu, 31 Jul 2014 18:57:58 +0200

univention-ad-connector (8.0.17-61) unstable; urgency=low

  * don't test_connection in upload_certificate if
    connector settings are not valid Bug #35090

 -- Felix Botner <botner@univention.de>  Thu, 31 Jul 2014 15:40:11 +0200

univention-ad-connector (8.0.17-60) unstable; urgency=low

  * use ip for server_supports_ssl Bug #35090

 -- Felix Botner <botner@univention.de>  Thu, 31 Jul 2014 15:12:52 +0200

univention-ad-connector (8.0.17-59) unstable; urgency=medium

  Bug #35090:
  * Automatically add a host static entry in the connector configuration
  * Added translations [WIP]
  * Fixed jslint errors, removed unneeded parts

 -- Alexander Kläser <klaeser@univention.de>  Thu, 31 Jul 2014 14:13:22 +0200

univention-ad-connector (8.0.17-58) unstable; urgency=medium

  * Script well-known-sid-object-rename (Bug #35507):
    * Improved logging (also to stdout)
    * Improved docstrings
    * Avoid shady ucr hack

 -- Arvid Requate <requate@univention.de>  Wed, 30 Jul 2014 15:41:31 +0200

univention-ad-connector (8.0.17-57) unstable; urgency=low

  * Bug #35090: Improve certificate/SSL handling

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Wed, 30 Jul 2014 15:28:49 +0200

univention-ad-connector (8.0.17-56) unstable; urgency=low

  * disable_ssl() in admember_join (Bug #35090)

 -- Felix Botner <botner@univention.de>  Wed, 30 Jul 2014 13:20:42 +0200

univention-ad-connector (8.0.17-55) unstable; urgency=low

  * Set univentionObjectFlag to synced for cn and ou (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 30 Jul 2014 12:43:02 +0200

univention-ad-connector (8.0.17-54) unstable; urgency=medium

  * Script well-known-sid-object-rename (Bug #35507):
    * disable connector/ad/ldap/ssl as well for the scope of the script
    * correctly handle CONFIGBASENAME in ucr tweak for kerberos and ssl

 -- Arvid Requate <requate@univention.de>  Wed, 30 Jul 2014 10:28:35 +0200

univention-ad-connector (8.0.17-53) unstable; urgency=medium

  Bug #35090
  * finished integration of wizard path for connector
  * removed function lookup_ad_domain_info()
  * moved download links into separate widget DownloadInfo

 -- Alexander Kläser <klaeser@univention.de>  Tue, 29 Jul 2014 21:01:22 +0200

univention-ad-connector (8.0.17-52) unstable; urgency=medium

  Bug #35090 [WIP]:
  * fixed problem with reverting in if case after exception handling
  * rename syncmode to mode in wizard (to avoid naming collision)
  * guess AD domain language ('de' or 'en')
  * further integration of connector wizard

 -- Alexander Kläser <klaeser@univention.de>  Tue, 29 Jul 2014 19:37:40 +0200

univention-ad-connector (8.0.17-51) unstable; urgency=medium

  * Some fixes (Bug #35507)

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 19:26:45 +0200

univention-ad-connector (8.0.17-50) unstable; urgency=medium

  * Updated translations (Bug #35507)

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 18:41:56 +0200

univention-ad-connector (8.0.17-49) unstable; urgency=medium

  * admember.prepare_connector_settings has to be done before
    running admember.rename_well_known_sid_objects (Bug #35507)
  * Run admember.revert_connector_settings in case of error

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 18:22:31 +0200

univention-ad-connector (8.0.17-48) unstable; urgency=medium

  * Script well-known-sid-object-rename (Bug #35507)
    * Add options --binddn and --bindpw to override connector/ad/ldap/bind*
    * Mask connector/ad/ldap/kerberos in script if true to avoid cached creds

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 18:17:06 +0200

univention-ad-connector (8.0.17-47) unstable; urgency=medium

  Bug #35090 [WIP]:
  * integration of connector wizard path
  * clean up
  * adaptation of backend method for join into AD

 -- Alexander Kläser <klaeser@univention.de>  Tue, 29 Jul 2014 17:57:26 +0200

univention-ad-connector (8.0.17-46) unstable; urgency=low

  * Bug #35090 [WIP]: Remove debug code

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 29 Jul 2014 17:20:14 +0200

univention-ad-connector (8.0.17-45) unstable; urgency=low

  * Bug #35090 [WIP]: Send status of running ad connector service

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 29 Jul 2014 14:22:46 +0200

univention-ad-connector (8.0.17-44) unstable; urgency=medium

  * Script well-known-sid-object-rename: Strip down initialization
    of the univention.connector.ad.ad class (Bug #35507)

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 13:02:45 +0200

univention-ad-connector (8.0.17-43) unstable; urgency=medium

  * Script well-known-sid-object-rename
    Unset connector/ad/mapping/group/language (Bug #35507)

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 12:21:36 +0200

univention-ad-connector (8.0.17-42) unstable; urgency=medium

  * New script well-known-sid-object-rename (Bug #35507)

 -- Arvid Requate <requate@univention.de>  Tue, 29 Jul 2014 12:10:21 +0200

univention-ad-connector (8.0.17-41) unstable; urgency=low

  * Bug #35090 [WIP]: Added German translations for ConfigPage

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 29 Jul 2014 09:39:11 +0200

univention-ad-connector (8.0.17-40) unstable; urgency=low

  * Allow kerberos bind info for password sync (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Jul 2014 09:31:02 +0200

univention-ad-connector (8.0.17-39) unstable; urgency=low

  * Remove univention-ad-member from rules (Bug #34091)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Jul 2014 08:23:44 +0200

univention-ad-connector (8.0.17-38) unstable; urgency=low

  * Remove univention-ad-member from install file (Bug #34091)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Jul 2014 08:18:29 +0200

univention-ad-connector (8.0.17-37) unstable; urgency=low

  * Remove univention-ad-member (Bug #34091)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Jul 2014 08:10:12 +0200

univention-ad-connector (8.0.17-36) unstable; urgency=low

  * Bug #35090 [WIP]: Adaption of ConfigPage to Member/Connector mode

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Mon, 28 Jul 2014 15:53:51 +0200

univention-ad-connector (8.0.17-35) unstable; urgency=medium

  * Bug #35090 [WIP]: fixed ucslint error

 -- Alexander Kläser <klaeser@univention.de>  Mon, 28 Jul 2014 14:10:59 +0200

univention-ad-connector (8.0.17-34) unstable; urgency=medium

  Bug #35090 [WIP]
  * added UMC restart at the end of the AD member mode configuration
  * refactorization for integration of AD connector configuration via wizard
  * updated commands for join process
  * removed confirmation page for AD member mode
  * minor fixes and cleanups

 -- Alexander Kläser <klaeser@univention.de>  Mon, 28 Jul 2014 12:55:13 +0200

univention-ad-connector (8.0.17-33) unstable; urgency=low

  * univention-ad-member: use univention.debug (Bug #34091)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 25 Jul 2014 20:54:01 +0200

univention-ad-connector (8.0.17-32) unstable; urgency=medium

  * Bug #35090 [WIP]: fixed fuzzy translations

 -- Alexander Kläser <klaeser@univention.de>  Fri, 25 Jul 2014 18:41:40 +0200

univention-ad-connector (8.0.17-31) unstable; urgency=medium

  * Bug #35090 [WIP]: improved error/progress handling for AD member mode

 -- Alexander Kläser <klaeser@univention.de>  Fri, 25 Jul 2014 18:33:41 +0200

univention-ad-connector (8.0.17-30) unstable; urgency=low

  * Bug #35090 [WIP]: added some functionality for ad-connector path in wizard

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Fri, 25 Jul 2014 16:45:32 +0200

univention-ad-connector (8.0.17-29) unstable; urgency=low

  * Bug #35090 [WIP]: improved error handling for wizard in AD member mode

 -- Alexander Kläser <klaeser@univention.de>  Fri, 25 Jul 2014 16:23:38 +0200

univention-ad-connector (8.0.17-28) unstable; urgency=low

  * Give more feedback if the kerberos authentication fails (Bug #35349)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 25 Jul 2014 10:11:08 +0200

univention-ad-connector (8.0.17-27) unstable; urgency=low

  * Set univentionObjectFlag to synced for groups and computers
    (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 25 Jul 2014 08:55:41 +0200

univention-ad-connector (8.0.17-26) unstable; urgency=low

  * Added kerberos support for the AD connector (Bug #35349)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 25 Jul 2014 08:28:40 +0200

univention-ad-connector (8.0.17-25) unstable; urgency=medium

  * Bug #35090 [WIP]: fixed fuzzy translations

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 20:55:56 +0200

univention-ad-connector (8.0.17-24) unstable; urgency=medium

  * Bug #35090 [WIP]: prototype with integrated AD join

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 20:49:30 +0200

univention-ad-connector (8.0.17-23) unstable; urgency=medium

  * Bug #35090 [WIP]: enabled build of UMC module, fixed fuzzy entries

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 18:54:27 +0200

univention-ad-connector (8.0.17-22) unstable; urgency=medium

  * Bug #35090 [WIP]: removed temporary package adconnector2, install graphics

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 18:48:27 +0200

univention-ad-connector (8.0.17-21) unstable; urgency=medium

  * Bug #35090 [WIP]: integrated checks for initial connection and SSL

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 18:14:15 +0200

univention-ad-connector (8.0.17-20) unstable; urgency=medium

  * Bug #35090 [WIP]: fixed JavaScript syntax error, use admember lib

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 11:14:47 +0200

univention-ad-connector (8.0.17-19) unstable; urgency=medium

  * Bug #35090 [WIP]: integrated wizard prototype

 -- Alexander Kläser <klaeser@univention.de>  Thu, 24 Jul 2014 09:11:33 +0200

univention-ad-connector (8.0.17-18) unstable; urgency=low

  * Don't sync 'NO PASSWORD' hashes back to AD (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 Jul 2014 07:31:06 +0200

univention-ad-connector (8.0.17-17) unstable; urgency=low

  * remove admember from install file (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 23 Jul 2014 10:12:12 +0200

univention-ad-connector (8.0.17-16) unstable; urgency=low

  * Move admember lib to univention-lib (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 23 Jul 2014 08:19:02 +0200

univention-ad-connector (8.0.17-15) unstable; urgency=low

  * Fixed python traceback in AD member mode (Bug #35091)
  * Install univention-samba-ad-member instead of univention-samba

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 18 Jul 2014 07:36:28 +0200

univention-ad-connector (8.0.17-14) unstable; urgency=low

  * Check SSL/TLS settings (Bug #35091)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 14 Jul 2014 09:18:23 +0200

univention-ad-connector (8.0.17-13) unstable; urgency=low

  * More AD member updates (Bug #35091):
      Install univention-samba
      Stop heimdal and samba4

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 14 Jul 2014 08:16:15 +0200

univention-ad-connector (8.0.17-12) unstable; urgency=low

  * Make a secure LDAP connection possible without having the root
    certificate from AD (Bug #35253)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 04 Jul 2014 06:59:33 +0200

univention-ad-connector (8.0.17-11) unstable; urgency=low

  * Added missing graphics (Bug #35090)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 03 Jul 2014 12:14:02 +0200

univention-ad-connector (8.0.17-10) unstable; urgency=low

  * The group_members_cache_con is not be filled in write mode. So we
    have to ignore the previous AD memberships (Bug #35234)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 03 Jul 2014 10:03:25 +0200

univention-ad-connector (8.0.17-9) unstable; urgency=low

  * Fixed python tracebacks from last merge (Bug #35090)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 03 Jul 2014 09:03:00 +0200

univention-ad-connector (8.0.17-8) unstable; urgency=low

  * Added missing graphics (Bug #35090)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 02 Jul 2014 07:57:20 +0200

univention-ad-connector (8.0.17-7) unstable; urgency=low

  * Don't synchronize windows computers while updating (Bug #35091)
  * Use KINIT in AD member mode only (Bug #35091)
  * Set synced flag in AD member mode only (Bug #35091)
  * Bump version

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 02 Jul 2014 07:48:54 +0200

univention-ad-connector (8.0.17-5) unstable; urgency=low

  * Merge from ucs-in-ad-domain preview (Bug #35091)

    [ Stefan Gohmann ]
     * Install missing graphics (Bug #34091)
     * Use username if lastname is empty (Bug #34091)
     * Remove v2 from module name
     * Depend on new or old UMC module
     * Added univention-ad-member to configure the UCS in AD mode
       (Bug #34091)
     * Use KINIT instead of K5KEY (Bug #34091)
     * Use ad/member instead of samba/role (Bug #34091)
     * Allow synchronisation of Windows clients (Bug #34091)
     * Always set userPassword to {K5KEY} (Bug #34091)
     * Set univentionObjectFlag to synced (Bug #34091)

    [ Alexander Kläser ]
     * Bug #34091: update .svg icon files
     * Bug #34091: add translations
     * Bug #34091: added dummy wizard for new AD connector

    [ Arvid Requate ]
     * admember.lookup_adds_dc() requires python-ldb (Bug #34091)
     * Improve error handling for the time synchronization (Bug #34091)
     * Separate --lookup option for univention-ad-member
     * admember.lookup_adds_dc() requires samba-common-bin (Bug #34091)
     * admember.lookup_adds_dc() requires python-samba (Bug #34091)
     * Return DC IP in admember.lookup_adds_dc() (Bug #34091)
     * Use admember.lookup_adds_dc() in univention-ad-member
     * Refuse to revert system time by more than three minutes
     * Initial version of new module admember,
       providing function configure_ad_member (Bug #34091)

    [ Dirk Wiesenthal ]
     * Bug #34091: Change display property of users to displayName

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 02 Jul 2014 07:08:20 +0200

univention-ad-connector (8.0.17-4) unstable; urgency=medium

  * Bug #33657: Move the message to the wizzard window.

 -- Arvid Requate <requate@univention.de>  Tue, 04 Feb 2014 17:14:37 +0100

univention-ad-connector (8.0.17-3) unstable; urgency=medium

  * Bug #33657: wording improved.

 -- Arvid Requate <requate@univention.de>  Tue, 04 Feb 2014 14:29:29 +0100

univention-ad-connector (8.0.17-2) unstable; urgency=medium

  * Bug #33657: Point out the difference to Univention Ad Takeover
    in the UMC wizzard header.

 -- Arvid Requate <requate@univention.de>  Tue, 04 Feb 2014 13:41:39 +0100

univention-ad-connector (8.0.17-1) unstable; urgency=low

  * Bug #32698: remove target="_blank"

 -- Florian Best <best@univention.de>  Fri, 01 Nov 2013 13:42:05 +0100

univention-ad-connector (8.0.16-2) unstable; urgency=low

  * Bug #32698: remove private keys on update

 -- Florian Best <best@univention.de>  Wed, 30 Oct 2013 15:04:51 +0100

univention-ad-connector (8.0.16-1) unstable; urgency=low

  * Bug #32698: fix permissions of /univention-ad-connector/*

 -- Florian Best <best@univention.de>  Tue, 29 Oct 2013 15:04:50 +0100

univention-ad-connector (8.0.15-2) unstable; urgency=low

  * fixed common spelling mistakes (Bug #32662)

 -- Lukas Walter <walter@univention.de>  Tue, 29 Oct 2013 13:02:35 +0100

univention-ad-connector (8.0.15-1) unstable; urgency=low

  * revised UMC module description (Bug #32022)

 -- Lukas Walter <walter@univention.de>  Mon, 28 Oct 2013 16:00:59 +0100

univention-ad-connector (8.0.14-1) unstable; urgency=low

  * Bug #32698: serve private keys via UMCP

 -- Florian Best <best@univention.de>  Mon, 28 Oct 2013 13:15:24 +0100

univention-ad-connector (8.0.13-1) unstable; urgency=low

  * Bug #31990: fix quoting error in the UCR module

 -- Florian Best <best@univention.de>  Mon, 28 Oct 2013 09:06:38 +0100

univention-ad-connector (8.0.12-1) unstable; urgency=low

  * Bug #32698: fix indentation error

 -- Florian Best <best@univention.de>  Fri, 25 Oct 2013 15:18:53 +0200

univention-ad-connector (8.0.11-1) unstable; urgency=low

  * Bug #32698: fix buttons when unconfigured
  * Bug #32698: fix translation file from backend

 -- Florian Best <best@univention.de>  Fri, 25 Oct 2013 14:49:52 +0200

univention-ad-connector (8.0.10-1) unstable; urgency=low

  * Bug #30004: fixed scope handling for notifications

 -- Alexander Kläser <klaeser@univention.de>  Wed, 23 Oct 2013 17:27:37 +0200

univention-ad-connector (8.0.9-1) unstable; urgency=low

  * Bug #30004: adjusted handling of notifications

 -- Alexander Kläser <klaeser@univention.de>  Wed, 23 Oct 2013 15:44:51 +0200

univention-ad-connector (8.0.8-1) unstable; urgency=low

  * Bug #32698: fix download link to private.key and cert.pem

 -- Florian Best <best@univention.de>  Thu, 17 Oct 2013 13:17:55 +0200

univention-ad-connector (8.0.7-1) unstable; urgency=low

  * Synchronize the groupType (Bug #32768)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 17 Oct 2013 00:04:48 +0200

univention-ad-connector (8.0.6-2) unstable; urgency=low

  * Bug #32698: add XS-Python-Version to control file

 -- Florian Best <best@univention.de>  Wed, 09 Oct 2013 16:42:24 +0200

univention-ad-connector (8.0.6-1) unstable; urgency=low

  * Bug #32698: fix translations

 -- Florian Best <best@univention.de>  Tue, 08 Oct 2013 16:26:58 +0200

univention-ad-connector (8.0.5-1) unstable; urgency=low

  * Bug #32698: fix translations
  * Bug #31990: fix shell injections

 -- Florian Best <best@univention.de>  Tue, 08 Oct 2013 15:07:23 +0200

univention-ad-connector (8.0.4-1) unstable; urgency=low

  * Bug #32698: integrate download site into UMC module

 -- Florian Best <best@univention.de>  Mon, 07 Oct 2013 18:32:46 +0200

univention-ad-connector (8.0.3-3) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30948)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Tue, 24 Sep 2013 11:47:59 +0200

univention-ad-connector (8.0.3-2) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30948)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Tue, 24 Sep 2013 11:36:46 +0200

univention-ad-connector (8.0.3-1) unstable; urgency=low

  * Remove old cache files in unjoin script (Bug #32455)
  * First restart the listener and than remove the listener handler status
    file because the file is written when the listener is stopped
    (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 19 Sep 2013 07:58:41 +0200

univention-ad-connector (8.0.2-1) unstable; urgency=low

  * Bug #32048: Add keywords to UMC module definition

 -- Florian Best <best@univention.de>  Mon, 09 Sep 2013 13:23:40 +0200

univention-ad-connector (8.0.1-6) unstable; urgency=low

  * Fixed backup of db file in postrm (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 05 Sep 2013 08:54:14 +0200

univention-ad-connector (8.0.1-5) unstable; urgency=low

  * Remove old listener handler and backup the old sqlite db while
    uninstalling the package (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 05 Sep 2013 07:57:30 +0200

univention-ad-connector (8.0.1-4) unstable; urgency=low

  * Restart listener in postrm (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 05 Sep 2013 06:57:08 +0200

univention-ad-connector (8.0.1-3) unstable; urgency=low

  * Make join and unjoin scripts executable (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 04 Sep 2013 16:36:53 +0200

univention-ad-connector (8.0.1-2) unstable; urgency=low

  * Added copyright header to join and unjoin script (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 04 Sep 2013 16:28:15 +0200

univention-ad-connector (8.0.1-1) unstable; urgency=low

  * Added join and unjoin scripts for the AD Connector (Bug #32455)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 04 Sep 2013 16:17:46 +0200

univention-ad-connector (8.0.0-3) unstable; urgency=low

  * Added additional hints in the ad-connector setup wizard (Bug #24903)
  * Corrected generation of error message to avoid a traceback (a wrong
    variable name was used)

 -- Erik Damrose <damrose@univention.de>  Tue, 27 Aug 2013 16:13:34 +0200

univention-ad-connector (8.0.0-2) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30948)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Fri, 16 Aug 2013 16:24:27 +0200

univention-ad-connector (8.0.0-1) unstable; urgency=low

  * Bump version for UCS 3.2
  * Update/review UCR variable descriptions (Bug #30948)
  * Add missing depends on univention-base-files, spotted by ucslint
  * Fix the UCR service registration for univention-ad-connector-exchange

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Mon, 22 Jul 2013 12:56:06 +0200

univention-ad-connector (7.0.20-1) unstable; urgency=low

  * update copyright; Bug #24727

 -- Florian Best <best@univention.de>  Tue, 09 Jul 2013 13:09:27 +0200

univention-ad-connector (7.0.19-1) unstable; urgency=low

  * Bug #24727: adapt wording

 -- Florian Best <best@univention.de>  Tue, 09 Jul 2013 13:04:04 +0200

univention-ad-connector (7.0.18-1) unstable; urgency=low

  * Consider password/samba/lmhash for LM hash message and not for NT
    hash message (Bug #29294)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 15 Mar 2013 22:21:56 +0100

univention-ad-connector (7.0.17-1) unstable; urgency=low

  * only log LM hash warning if UCR variable password/samba/lmhash is set to
    true (Bug #29294)

 -- Lukas Walter <walter@univention.de>  Fri, 08 Mar 2013 11:51:30 +0100

univention-ad-connector (7.0.16-1) unstable; urgency=low

  * Remember if the user was just created in UCS and don't write the
    password back from AD/S4, because the password could be changed on
    UCS in this gap (Bug #30652)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 06 Mar 2013 14:54:42 +0100

univention-ad-connector (7.0.15-1) unstable; urgency=low

  * fixed listener module traceback which occurred when
    /var/lib/univention-connector/ad/ contained subdirectories (Bug #18125)

 -- Lukas Walter <walter@univention.de>  Wed, 06 Mar 2013 14:33:23 +0100

univention-ad-connector (7.0.14-2) unstable; urgency=low

  * Consider stopped LDAP server (Bug #30652)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 05 Mar 2013 14:22:16 +0100

univention-ad-connector (7.0.14-1) unstable; urgency=low

  * The group membership synchronisation could lack in an inconsistence
    result. The handling of the cache has been adapted (Bug #29874)
  * As long as changes come from one side, the connector reads these
    changes. This reduces the overwrite of changes just made to an
    object due to concurrent processes (Bug #30652)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 05 Mar 2013 07:46:35 +0100

univention-ad-connector (7.0.13-1) unstable; urgency=low

  * only try to poll changes from real files when syncing from UCS
    (Bug #18125)

 -- Lukas Walter <walter@univention.de>  Wed, 20 Feb 2013 10:40:33 +0100

univention-ad-connector (7.0.12-4) unstable; urgency=low

  * version bump (Bug #30150)

 -- Alexander Kläser <klaeser@univention.de>  Tue, 19 Feb 2013 18:00:09 +0100

univention-ad-connector (7.0.12-3) unstable; urgency=low

  * version bump (Bug #30150)

 -- Alexander Kläser <klaeser@univention.de>  Tue, 19 Feb 2013 17:57:53 +0100

univention-ad-connector (7.0.12-2) unstable; urgency=low

  * version bump (Bug #30150)

 -- Lukas Walter <walter@univention.de>  Tue, 19 Feb 2013 16:47:08 +0100

univention-ad-connector (7.0.12-1) unstable; urgency=low

  * moved daemon() call from connect() to main() to prevent it from being
    called multiple times (Bug #30150)

 -- Lukas Walter <walter@univention.de>  Tue, 19 Feb 2013 15:33:16 +0100

univention-ad-connector (7.0.11-3) unstable; urgency=low

  * Call _ignore_object and not __ignore_object (Bug #28845)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 08 Nov 2012 08:14:57 +0100

univention-ad-connector (7.0.11-2) unstable; urgency=low

  * Fixed the membership ignore object handling on the UCS side
    (Bug #28845)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 08 Nov 2012 07:59:38 +0100

univention-ad-connector (7.0.10-1) unstable; urgency=low

  * Check if the membership object is to be ignored (Bug #28845)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 08 Nov 2012 07:23:40 +0100

univention-ad-connector (7.0.9-1) unstable; urgency=low

  * Add priority (Bug #26961)

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Tue, 06 Nov 2012 18:25:56 +0100

univention-ad-connector (7.0.8-1) unstable; urgency=low

  * Remove the LANMAN hash warning because the LM hash is no longer
    required (Bug #28709)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 31 Oct 2012 09:12:08 +0100

univention-ad-connector (7.0.7-2) unstable; urgency=low

  * Wait 5 seconds before the kill result is checked (Bug #27175)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 19 Oct 2012 16:17:15 +0200

univention-ad-connector (7.0.7-1) unstable; urgency=low

  * abort join script on failing udm call (Bug #27753)

 -- Lukas Walter <walter@univention.de>  Wed, 10 Oct 2012 12:56:01 +0200

univention-ad-connector (7.0.6-1) unstable; urgency=low

  * Fixed a traceback which occurs if the LDAP and AD base DNs are not
    equal (Bug #28573)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 04 Oct 2012 20:35:46 +0200

univention-ad-connector (7.0.5-2) unstable; urgency=low

  * Add linking exception for OpenSSL (Bug #26440)

 -- Moritz Mühlenhoff <muehlenhoffunivention.de>  Thu, 04 Oct 2012 11:42:05 +0200

univention-ad-connector (7.0.5-1) unstable; urgency=low

  * Added a reverse attribute check for the mail attribute. This means
    mail from AD will be synced to mailPrimaryAddress in UCS. The UCS
    attribute mail will not be synced (Bug #28240)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Sep 2012 13:45:24 +0200

univention-ad-connector (7.0.4-1) unstable; urgency=low

  * Adjust the AD connector init script with the S4 connector init
    script (Bug #27175)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Sep 2012 10:59:38 +0200

univention-ad-connector (7.0.3-2) unstable; urgency=low

  * Fixed typo in last commit (Bug #20517)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Sep 2012 09:32:48 +0200

univention-ad-connector (7.0.3-1) unstable; urgency=low

  * Added UCR variables for ignrelists (users, groups, cn, ou)
    (Bug #20517)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Sep 2012 08:42:19 +0200

univention-ad-connector (7.0.2-1) unstable; urgency=low

  * Use a proper debug message if SSL is disabled (Bug #25835)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 24 Sep 2012 13:35:08 +0200

univention-ad-connector (7.0.1-1) unstable; urgency=low

  * version bump; Bug #26857

 -- Florian Best <best@univention.de>  Thu, 06 Sep 2012 13:51:18 +0200

univention-ad-connector (7.0.0-1) unstable; urgency=low

  * ported module to Dojo 1.8; Bug #26857

 -- Florian Best <best@univention.de>  Wed, 05 Sep 2012 09:48:43 +0200

univention-ad-connector (6.0.60-1) unstable; urgency=low

  * Check the primary group setting for new users (Bug #26809)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 27 Jun 2012 08:25:11 +0200

univention-ad-connector (6.0.59-1) unstable; urgency=low

  * Check for conflicted objects in poll (Bug #26710)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 27 Jun 2012 07:42:27 +0200

univention-ad-connector (6.0.58-1) unstable; urgency=low

  * Ignore conflicted objects from S4 (Bug #26710)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 27 Jun 2012 06:28:59 +0200

univention-ad-connector (6.0.57-1) unstable; urgency=low

  * The connector listener handler writes group objects into a global
    list. This is a performance improvement which was added with Bug
    #18619. This global group list is only needed in the the initialize
    phase. It is now considered and saves a lot of memory (Bug #24273)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 26 Jun 2012 06:31:16 +0200

univention-ad-connector (6.0.56-1) unstable; urgency=low

  * If a user was added in UCS, the primary group setting will be synced
    from UCS to S4 like expected. This means the user will no longer added
    automatically to the group Domain Users (Bug #26809)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 17 Apr 2012 11:11:54 +0200

univention-ad-connector (6.0.55-1) unstable; urgency=low

  * fixed spelling mistake (Bug #26287)

 -- Florian Best <best@univention.de>  Mon, 02 Apr 2012 14:06:51 +0200

univention-ad-connector (6.0.54-1) unstable; urgency=low

  * Don't try to add a user to his primary group in AD. This might
    happen, if we synchronize a rejected file with old information
    (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 24 Feb 2012 07:36:48 +0100

univention-ad-connector (6.0.53-1) unstable; urgency=low

  * Add the memberUid value to the group if the new member is a user
    (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 23 Feb 2012 06:55:34 +0100

univention-ad-connector (6.0.52-1) unstable; urgency=low

  * Use function __search_s4 (Bug #26208)
  * Fixed group membership sync (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 22 Feb 2012 08:12:05 +0100

univention-ad-connector (6.0.51-1) unstable; urgency=low

  * Check if group cache is empty (Bug #25709)
  * Don't build group cache while listing rejects (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 07 Feb 2012 14:48:54 +0100

univention-ad-connector (6.0.50-1) unstable; urgency=low

  * Use the correct group cache (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 01 Feb 2012 20:16:35 +0100

univention-ad-connector (6.0.49-1) unstable; urgency=low

  * Added support for referral handling (Bug #25986)
  * Group caching: Minor updates (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 01 Feb 2012 15:02:59 +0100

univention-ad-connector (6.0.48-1) unstable; urgency=low

  * Group caching: Add a user to the group cache even if he is already
    member of the group (Bug #25709)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 01 Feb 2012 07:53:07 +0100

univention-ad-connector (6.0.47-1) unstable; urgency=low

  * Support for a different binddn and bindpw for the UCS access,
    for example if the machine account should be used (Bug #25985)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 31 Jan 2012 15:59:00 +0100

univention-ad-connector (6.0.46-1) unstable; urgency=low

  * Build an internal group membership cache. This increases the group
    synchronisation performance (Bug #25709)
  * Use sqlite as backend for internal.cfg (Bug #13045)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 31 Jan 2012 09:21:52 +0100

univention-ad-connector (6.0.45-1) unstable; urgency=low

  * Don't skip the synchronization if the object was added in UCS
    (Bug #25847)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 23 Jan 2012 11:08:50 +0100

univention-ad-connector (6.0.44-1) unstable; urgency=low

  * Don't recode value if recoding raises an UnicodeDecodeError
    exception (Bug #25191)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 14 Dec 2011 15:47:06 +0100

univention-ad-connector (6.0.43-1) unstable; urgency=low

  * Don't reset lastUSN on connector restart (Bug #25037)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 01 Dec 2011 13:46:11 +0100

univention-ad-connector (6.0.42-1) unstable; urgency=low

  * Save lastUSN in cache and commit them after the sync is finished
    (Bug #25037)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 30 Nov 2011 18:06:35 +0100

univention-ad-connector (6.0.41-1) unstable; urgency=low

  * Fixed handling for con_other attributes. This allows the sync of two
    AD/S4 attributes (one single value and one multi value) to one multi
    value UCS attribute like homePhone, otherHomePhone to
    homeTelephoneNumber (Bug #24119 and Bug #20599)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Nov 2011 21:53:26 +0100

univention-ad-connector (6.0.40-1) unstable; urgency=low

  * Ignore uid=krbtgt too (Bug #20516)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 29 Nov 2011 14:15:36 +0100

univention-ad-connector (6.0.39-1) unstable; urgency=low

  * define exception class ConnectorError; Bug #23713
  * upload: hide clear button; Bug #24937
  * add scrollbar to main container
  * require hostname, LDAP base and sync user in wizard
  * update page after start/stop of service

 -- Andreas Büsching <buesching@univention.de>  Mon, 28 Nov 2011 17:30:45 +0100

univention-ad-connector (6.0.38-1) unstable; urgency=low

  * Since set_uid_umlauts is no longer available the udm syntax for the
    username will be changed to uid_umlauts (Bug #24941)
  * Ignore well known sid objects which are groups in UCS (Bug #24288):
    - World Authority
    - Everyone
    - Null Authority
    - Nobody
    - Authenticated Users

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 28 Nov 2011 15:16:52 +0100

univention-ad-connector (6.0.37-1) unstable; urgency=low

  * fixed service (start|stop); Bug #23713

 -- Andreas Büsching <buesching@univention.de>  Mon, 28 Nov 2011 12:17:09 +0100

univention-ad-connector (6.0.36-2) unstable; urgency=low

  * Update UCR variable descriptions (Bug #22829)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Mon, 28 Nov 2011 07:35:54 +0100

univention-ad-connector (6.0.36-1) unstable; urgency=low

  * fixed another typo; Bug #23713

 -- Andreas Büsching <buesching@univention.de>  Fri, 25 Nov 2011 16:09:29 +0100

univention-ad-connector (6.0.35-1) unstable; urgency=low

  * modified some descriptions
  * deactivate clean button of Uploader widget; Bug #23713

 -- Andreas Büsching <buesching@univention.de>  Fri, 25 Nov 2011 16:01:53 +0100

univention-ad-connector (6.0.34-1) unstable; urgency=low

  * Replace custom attributes by extended attributes in ad-connector-
    exchange package (Bug #24881)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 25 Nov 2011 07:14:23 +0100

univention-ad-connector (6.0.33-1) unstable; urgency=low

  * add upload widget for the certificate; Bug #22893

 -- Andreas Büsching <buesching@univention.de>  Sun, 20 Nov 2011 13:35:16 +0100

univention-ad-connector (6.0.32-1) unstable; urgency=low

  * fixed logrotate template (Bug #18002)

 -- Felix Botner <botner@univention.de>  Fri, 18 Nov 2011 16:49:33 +0100

univention-ad-connector (6.0.31-1) unstable; urgency=low

  * update download page design for UMC design (Bug #23188)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Fri, 18 Nov 2011 15:39:00 +0100

univention-ad-connector (6.0.30-1) unstable; urgency=low

  * add copyright headers to JavaScript files (Bug #23210)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Thu, 17 Nov 2011 13:13:43 +0100

univention-ad-connector (6.0.29-1) unstable; urgency=low

  * Wizard: of no LDAP base is known for the AD server, the checkbox for
    determination is activated by default; Bug #23713

 -- Andreas Büsching <buesching@univention.de>  Wed, 16 Nov 2011 20:02:02 +0100

univention-ad-connector (6.0.28-1) unstable; urgency=low

  * More attribute deletion handling (Bug #24635)
  * Don't hide the first traceback

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Nov 2011 19:40:16 +0100

univention-ad-connector (6.0.27-1) unstable; urgency=low

  * Use Unpickler for loading the object (Bug #24273)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 09 Nov 2011 22:18:58 +0100

univention-ad-connector (6.0.26-1) unstable; urgency=low

  * first usable version of the UMC module; Bug #22893

 -- Andreas Büsching <buesching@univention.de>  Wed, 09 Nov 2011 17:03:19 +0100

univention-ad-connector (6.0.25-1) unstable; urgency=low

  * first version of UMC frontend (incomplete); Bug #22893

 -- Andreas Büsching <buesching@univention.de>  Tue, 08 Nov 2011 20:01:04 +0100

univention-ad-connector (6.0.24-1) unstable; urgency=low

  * first version of complete Backend API; Bug #23713
  * start implementing the UMC frontend

 -- Andreas Büsching <buesching@univention.de>  Mon, 07 Nov 2011 21:52:38 +0100

univention-ad-connector (6.0.23-1) unstable; urgency=low

  * Use cPickle.Pickler an clear_memo, otherwise the internal python
    refcount will not be decreased  and the memory is lost (Bug #24273)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 02 Nov 2011 15:53:15 +0100

univention-ad-connector (6.0.22-1) unstable; urgency=low

  * More fixes on attribute deletion (Bug #8604)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 31 Oct 2011 12:26:44 +0100

univention-ad-connector (6.0.21-1) unstable; urgency=low

  * Adjust service registration to UCS 3.0 (Bug #21486)

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 30 Oct 2011 09:17:27 +0100

univention-ad-connector (6.0.20-1) unstable; urgency=low

  * Added univention-management-console-dev to build dependencies
    (Bug #23713)

 -- Stefan Gohmann <gohmann@univention.de>  Sat, 29 Oct 2011 09:10:40 +0200

univention-ad-connector (6.0.19-1) unstable; urgency=low

  * Added a new parameter con_other_attribute for the attribute
    mapping. This allows to map two AD/S4 attributes (one single
    value and one multivalue) to one UCS multivalue attribute
    (Bug #24119)
  * Consider attribute deletion of attributes in UCS (Bug #8604)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 28 Oct 2011 12:25:59 +0200

univention-ad-connector (6.0.18-1) unstable; urgency=low

  * starting to implement new UMC module for AD connector; Bug #23713

 -- Andreas Büsching <buesching@univention.de>  Thu, 27 Oct 2011 18:01:27 +0200

univention-ad-connector (6.0.17-1) unstable; urgency=low

  * Don't recode userCertificate;binary (Bug #23612)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Oct 2011 16:52:56 +0200

univention-ad-connector (6.0.16-2) unstable; urgency=low

  * Added dependency to univention-directory-manager-tools (Bug #23342)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Oct 2011 15:33:27 +0200

univention-ad-connector (6.0.16-1) unstable; urgency=low

  * workaround for PEP 366 (Bug #23984)

 -- Arvid Requate <requate@univention.de>  Tue, 25 Oct 2011 13:35:28 +0200

univention-ad-connector (6.0.15-1) unstable; urgency=low

  * Merged from S4 connector:
    * Synchronize sambaWorkstations (Bug #24119)
    * Added telephoneNumber synchronization
    * Added phone numbers to mapping
    * Synchronize displayName (Bug #20601)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Oct 2011 08:36:36 +0200

univention-ad-connector (6.0.14-2) unstable; urgency=low

  * Fix dependencies on u-c (Bug #22668)

 -- Philipp Hahn <hahn@univention.de>  Sat, 22 Oct 2011 04:11:23 +0200

univention-ad-connector (6.0.14-1) unstable; urgency=low

  * Don't show first traceback if an object was dropped because it might
    be the parent object (Bug #22861)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 19 Oct 2011 12:10:15 +0200

univention-ad-connector (6.0.13-1) unstable; urgency=low

  * Merged S4 connector changes from r27948
    * Handle LDAP server restarts and AD restarts (Bug #22861)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 19 Oct 2011 08:39:47 +0200

univention-ad-connector (6.0.12-1) unstable; urgency=low

  * Use new overlay module k5pwd and set userPassword to {K5KEY}
    (Bug #15062)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 17 Oct 2011 17:43:26 +0200

univention-ad-connector (6.0.11-2) unstable; urgency=low

  * fixed logrotate template (Bug #18002)

 -- Felix Botner <botner@univention.de>  Wed, 12 Oct 2011 10:59:22 +0200

univention-ad-connector (6.0.11-1) unstable; urgency=low

  * added logrotate configuration (Bug #18002)

 -- Felix Botner <botner@univention.de>  Wed, 12 Oct 2011 10:33:41 +0200

univention-ad-connector (6.0.10-1) unstable; urgency=low

  * Set the MIME type for cert.pem and for private.key and add a comment
    to cert.pem (Bug #23378)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 07 Oct 2011 07:33:39 +0200

univention-ad-connector (6.0.9-2.1) unstable; urgency=low

  * Support page control for the AD search. This increase the initialize
    performance (Bug #23734)
  * Don't synchronize all objects during the init twice, only search for
    uSNCreated objects and not for uSNCreated and uSNChanged objects
    (Bug #23734)
  * Adapt prepare-new-instance to UCS 3.0 (Bug #23814)
  * Don't try to decode the userCertificate value (Bug #23612)
  * The tools univention-connector-list-rejected and univention-adsearch
    can now be used when connector/ad/ldap/certificate is not set and
    connector/ad/ssl is false (Bug #23580)
  * Build an internal membership cache while synchronize the members from
    AD to UCS. So every AD member will get once instead of twice. Also
    don't open the UDM group module twice (Bug #21010)
  * Check if properties defined in the mapping file. Thanks to Joerg
    Steffens for the patch (Bug #21001)
  * Added user krbtgt to ignore list (Bug #20516)
  * Make the ldap sever configurable (Bug #18136)
  * No longer call set_uid_umlauts and cleanup the module initialize
    (Bug #21032, Bug #20599)
  * prepare-new-instance now changes all variables in the new mapping
    file (Bug #22057)
  * Don't recreate the certificate (Bug #23969)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 06 Oct 2011 16:02:32 +0200

univention-ad-connector (6.0.9-2) unstable; urgency=low

  * Fix removal of w2k support (Bug #21486)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu, 29 Sep 2011 10:34:51 +0200

univention-ad-connector (6.0.9-1) unstable; urgency=low

  * Avoid an endless sync loop while restarting AD (Bug #18619)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 28 Sep 2011 07:17:36 +0200

univention-ad-connector (6.0.8-1) unstable; urgency=low

  * recommend package univention-nagios-ad-connector
  * fix installation of AD connector init script; Bug #14739

 -- Andreas Büsching <buesching@univention.de>  Fri, 23 Sep 2011 16:27:27 +0200

univention-ad-connector (6.0.7-1) unstable; urgency=low

  * Merge patches from UCS 2.4-3
   [ Stefan Gohmann ]
    * Rename UCR variable ad/password/timestamp/ignorereset to
      ad/password/timestamp/syncreset (Bug #22751)
    * Fixed typo s/ignorreset/ignorereset/g (Bug #22751)
    * More password timestamp handling and some cleanups (Bug #22751)
    * Added missing brackets (Bug #22751)
    * Set default values in postinst for
      connector/ad/password/timestamp/.* (Bug #22751)
    * Also added two UCR variables to handle the password reset in the
      timestamp check mode (Bug #22751)
    * Sync the passwords only if the timestamp is newer. The behavior can
      configured with the UCR variable connector/ad/password/timestamp/check.
      Default is false (Bug #22751)
    * Consider empty sambaLMPassword attributes to prevent sync loops
      (Bug #22749)
    * No longer use sambaPwdMustChange to calculate the password end time
      (Bug #18187)
    * explode_unicode_dn: Also return last dn component. Thanks to Joerg
      Steffens for the patch (Bug #21000)
    * Resync rejected objects not before the sync is initialized
      (Bug #22622)
    * Set lastUSN to internal.cfg not before the search result was
      completely synced, otherwise the USN handling can become confused
      (Bug #22622)
    * Retry the synchronisation if the local idletimeout occurs
      (Bug #22622)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 21 Sep 2011 15:43:17 +0200

univention-ad-connector (6.0.6-1) unstable; urgency=low

  * Write tracebacks into connector.log (Bug #13047)
  * Cleanup debug messages and set the debug level to 2 by default
    (Bug #20971)
  * mapping.py: Remove object_memberships_sync_from_ucs from the list of
    post_con_modify_functions because the group object will changed if
    the groupmember ship was changed on UCS. This will improve the sync
    performance (Bug #21010, Bug #18619)
  * poll_ucs: Create a list of all DNs which should be synced in this
    run. If the DN will synced later skip the sync for this object at
    this point (Bug #21010, Bug #18619)

 -- Stefan Gohmann <gohmann@univention.de>  Sat, 17 Sep 2011 15:02:15 +0200

univention-ad-connector (6.0.5-3) unstable; urgency=low

  * Fix incorrect setting of userAccountControl flag (Bug #23153)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu, 08 Sep 2011 18:52:44 +0200

univention-ad-connector (6.0.5-2) unstable; urgency=low

  * Remove support for Windows 2000 has been removed (Bug #21486)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu, 08 Sep 2011 18:25:02 +0200

univention-ad-connector (6.0.5-1) unstable; urgency=low

  * Initialize udm modules (Bug #22439)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 01 Aug 2011 17:20:52 +0200

univention-ad-connector (6.0.4-1) unstable; urgency=low

  * Initialize self.lo even if bindpw does not contain a newline
    (Bug #14186)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 01 Aug 2011 16:55:39 +0200

univention-ad-connector (6.0.3-1) unstable; urgency=low

  * fixed bashisms (Bug #23005)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Tue, 12 Jul 2011 18:36:23 +0200

univention-ad-connector (6.0.2-2) unstable; urgency=low

  * Update descriptions of Univention Configuration Registry variables
    (Bug #22829)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Mon, 27 Jun 2011 17:34:54 +0200

univention-ad-connector (6.0.2-1) unstable; urgency=low

  * Added dependency to shell-univention-lib > 1.0.6 (Bug #21486)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 07 Jun 2011 09:55:26 +0200

univention-ad-connector (6.0.1-1) unstable; urgency=low

  * Add missing files (Bug #21486)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 24 May 2011 13:38:39 +0200

univention-ad-connector (6.0.0-1) unstable; urgency=low

  * Package cleanup for UCS 3.0 (Bug #21486)
    * Bump version for UCS 3.0
    * Replace univention-baseconfig with univention-config-registry
    * Replace static UCR header in the UCR templates with '@%@UCRWARNING=#
      @%@'
    * Update copyright to 2011
    * Update to debhelper 7
    * Switch from python2.4 to python2.6
    * Add ucslint

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 20 May 2011 13:51:08 +0200

univention-ad-connector (5.0.17-1) unstable; urgency=low

  * fixed name of connector/ad/mapping/group/language in umc module (Bug #20195)

 -- Felix Botner <botner@univention.de>  Fri, 18 Feb 2011 16:15:44 +0100

univention-ad-connector (5.0.16-1) unstable; urgency=low

  * wait up to 5 minutes for complete shutdown (Bug #21475)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Thu, 10 Feb 2011 12:19:58 +0100

univention-ad-connector (5.0.15-3) unstable; urgency=low

  * Update English descriptions to UCR variables (Bug #12485)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri, 12 Nov 2010 10:39:23 +0100

univention-ad-connector (5.0.15-2) unstable; urgency=low

  * Add English descriptions to UCR variables (Bug #12485)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri, 12 Nov 2010 10:39:21 +0100

univention-ad-connector (5.0.15-1) unstable; urgency=low

  * Added ucr variable to configure the organisation mapping and change
    the default from department to company:
    connector/ad/mapping/organisation (Bug #13362)
  * Copy a temporary member dict with deepcopy to avoid a traceback
    during sync (Bug #19481)
  * Added msExchMasterAccountSid, replicationSignature and repsTo to the
    list of attributes which will not be encoded (Bug #19643)
  * Set info message about key unsetting from warning to info (Bug
    #19646)
  * Cleanup the ad connector download page required for IE 8 (Bug
    #20113)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 12 Nov 2010 09:50:44 +0100

univention-ad-connector (5.0.14-1) unstable; urgency=low

  * A user which was synced to Windows 2008 R2 is not a valid kerberos
    user because the kerberos principal is missing. If the UCR variable
    ad/mapping/kerberosdomain is set the kerberos principal will be set
    during the first sync (Bug #20518)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 11 Nov 2010 14:43:24 +0100

univention-ad-connector (5.0.13-1) unstable; urgency=low

  * Use newer disabled syntax for user objects (Bug #19942)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 11 Nov 2010 09:51:06 +0100

univention-ad-connector (5.0.12-1) unstable; urgency=low

  * By default */ad/ldap/ldaps is false (Bug #19606)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 06 Oct 2010 06:10:42 +0200

univention-ad-connector (5.0.11-1) unstable; urgency=low

  * Use correct is_true call for UCR (Bug #19372 and Bug #19606)
  * Fixed disabled / locked handling based on UCS 2.4 changes
    (Bug #19942)
  * Fixed account expiry synchronisation (Bug #18271)
  * Automatically remove registered pwdump services on 64 bit windows hosts
    (Bug #20141)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 28 Sep 2010 15:31:03 +0200

univention-ad-connector (5.0.10-1) unstable; urgency=low

  * Use the environment variable SYSTEMROOT to detect the c:\windows
    directory, otherwise the service registration failed on Windows 2000
    (Bug #19610)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 27 Sep 2010 08:04:09 +0200

univention-ad-connector (5.0.9-1) unstable; urgency=low

  * Fix is_true() call for checking ssl ucr variables (Bug #19372 and
    Bug #19606)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 27 Sep 2010 07:49:14 +0200

univention-ad-connector (5.0.8-1) unstable; urgency=low

  * Check for */ad/ldap/ssl before creating the new CA file
    (Bug #19372)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 27 Sep 2010 07:13:49 +0200

univention-ad-connector (5.0.7-1) unstable; urgency=low

  * Windows 2000 AD does not understand StartTLS over the ldap port. To
    use an encrypted connection to the Windows 2000 AD the following (new)
    UCR variables must be set connector/ad/ldap/ldaps=yes and
    connector/ad/ldap/port=636. Alternatively can the Windows version be
    set to 2000 in the UMC module (Bug #19606)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 24 Sep 2010 10:58:27 +0200

univention-ad-connector (5.0.6-1) unstable; urgency=low

  * Added a link to vcredist_x86.exe in the www directory (Bug #15651)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 19 Aug 2010 13:42:31 +0200

univention-ad-connector (5.0.5-3) unstable; urgency=low

  * Added vcredist_x86.exe (Bug #15651)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 17 Aug 2010 19:30:02 +0200

univention-ad-connector (5.0.5-2) unstable; urgency=low

  * added MSVCR100.DLL from Visual C++ 2010 redistribution package,
    vcredist_x86.exe. Bug #15651

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 11 Aug 2010 06:56:58 +0200

univention-ad-connector (5.0.5-1) unstable; urgency=low

  * remove .svn directories from msi packages. Bug #15651

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 28 Jul 2010 14:51:22 +0200

univention-ad-connector (5.0.4-1) unstable; urgency=low

  * update msi packages to use correct installation path. Bug #15651

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 26 Jul 2010 08:19:43 +0200

univention-ad-connector (5.0.3-2) unstable; urgency=low

  * offer the 64bit msi package. Bug #15651

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 26 Jul 2010 08:01:20 +0200

univention-ad-connector (5.0.3-1) unstable; urgency=low

  * create umc link to the 64bit version of the password daemon. Bug
    #15651

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 26 Jul 2010 07:50:03 +0200

univention-ad-connector (5.0.2-1) unstable; urgency=low

  * added support for windows 64bit platform. Bug #15651
  * switch to makemsi:
    https://billy.knut.univention.de/uniwiki/index.php/AD_Connector_Entwicklungsumgebung#MSI-Pakete

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 26 Jul 2010 07:39:28 +0200

univention-ad-connector (5.0.1-1) unstable; urgency=low

  * convert to GNU APGL V3 (Bug #17543)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Tue, 22 Jun 2010 15:53:22 +0200

univention-ad-connector (5.0.0-1) unstable; urgency=low

  * bump version for UCS 2.4
  * added cn=opsi,$ldap_base to global_ignore_subtree
  * added pcpatch to user ignore_filter Bug #17756

 -- Felix Botner <botner@univention.de>  Thu, 10 Jun 2010 17:18:41 +0200

univention-ad-connector (4.1.14-1) unstable; urgency=low

  * also use the new CAcert file which contains the UCS CA and the AD CA
    for univention-connector-list-rejected. Bug #18242

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 04 May 2010 08:38:20 +0200

univention-ad-connector (4.1.13-1) unstable; urgency=low

  * remove calls to old univention-debug methods (Bug #13053)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Tue, 06 Apr 2010 16:27:43 +0200

univention-ad-connector (4.1.12-1) unstable; urgency=low

  * replace os.system with subprocess.call in UMC module; Bug #17045

 -- Andreas Büsching <buesching@univention.de>  Tue, 30 Mar 2010 13:49:59 +0200

univention-ad-connector (4.1.11-1) unstable; urgency=low

  * be sure univention-adsearch uses an encrypted communication. Bug
    #17768

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 02 Mar 2010 19:58:38 +0100

univention-ad-connector (4.1.10-1) unstable; urgency=low

  * create a new CAcert file, which contains the UCS CA and the AD CA.
    Bug #17768

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 01 Mar 2010 16:26:50 +0100

univention-ad-connector (4.1.9-1) unstable; urgency=low

  * fixed ad-connector umc service configuration Bug #17311

 -- Felix Botner <botner@univention.de>  Fri, 15 Jan 2010 12:21:25 +0100

univention-ad-connector (4.1.8-1) unstable; urgency=low

  * design updates for the AD Connector UMC module. Bug #16808

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 13 Jan 2010 09:17:20 +0100

univention-ad-connector (4.1.7-1) unstable; urgency=low

  * added ad-connector umc service configuration Bug #17311

 -- Felix Botner <botner@univention.de>  Tue, 12 Jan 2010 16:31:14 +0100

univention-ad-connector (4.1.6-1) unstable; urgency=low

  * use ldap:// as prefix for LDAP URIs and set CA certificate file via
    global option (Bug #16432)

 -- Andreas Büsching <buesching@univention.de>  Thu, 07 Jan 2010 17:34:28 +0100

univention-ad-connector (4.1.5-1) unstable; urgency=low

  * updated copyright Bug #17222

 -- Felix Botner <botner@univention.de>  Thu, 07 Jan 2010 13:47:52 +0100

univention-ad-connector (4.1.4-1) unstable; urgency=low

  * exit earlier if new object is ignored (Bug #16734)

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 17 Dec 2009 12:42:29 +0100

univention-ad-connector (4.1.3-1) unstable; urgency=low

  * pass default value to ucr-get-call. (Bug #16638)

 -- Daniel Hofmann <hofmann@univention.de>  Thu, 17 Dec 2009 12:29:38 +0100

univention-ad-connector (4.1.2-1) unstable; urgency=low

  * use the correct pyshared path. Bug #16054

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 22 Oct 2009 11:40:31 +0200

univention-ad-connector (4.1.1-1) unstable; urgency=low

  * if the connection to the LDAP-Server is lost the connector tries to
    re-establish the connection (Bug #14724)

 -- Andreas Büsching <buesching@univention.de>  Tue, 20 Oct 2009 16:15:34 +0200

univention-ad-connector (4.1.0-4) unstable; urgency=low

  * corrected recreation of mapping in prepare-instance
  * fixed typo in prepare-instance

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 20 Aug 2009 14:49:11 +0200

univention-ad-connector (4.1.0-3) unstable; urgency=low

  * use connector/ad/ldap/ssl in univention-adsearch, use ssl by default (Bug #14826)

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 20 Aug 2009 08:34:14 +0200

univention-ad-connector (4.1.0-2) unstable; urgency=low

  * Add Univention Configuration Registry variable connector/ad/ldap/ssl, which configures
    an unencrypted operation to the Active Directory domain controller. (Bug #14807)

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 20 Aug 2009 08:07:46 +0200

univention-ad-connector (4.1.0-1) unstable; urgency=low

  * extend connector to run in several instances on one server (Bug #15415)

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 18 Aug 2009 10:44:53 +0200

univention-ad-connector (4.0.18-1) unstable; urgency=low

  * consider the ignore_filter of the user mapping during the membership
    synchronisation. Bug #13550

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 31 Jul 2009 09:23:09 +0200

univention-ad-connector (4.0.17-1) unstable; urgency=low

  * be sure a user will be deleted in AD after moving the user on UCS
    side into a ignored subtree. Bug #13786

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 31 Jul 2009 07:41:11 +0200

univention-ad-connector (4.0.16-1) unstable; urgency=low

  * read the pickle files from the listener in the correct order. Bug
    #11803
  * catch some more possible expetions during the group member sync for
    example if the user was removed in the meantime. Bug #11803

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 28 Jul 2009 15:48:57 +0200

univention-ad-connector (4.0.15-2) unstable; urgency=low

  * Fixed upper- and lowercase problems in the attribute_filter
    function. Bug #13550

 -- Andre Fenske <fenske@univention.de>  Mon, 13 Jul 2009 16:10:08 +0200

univention-ad-connector (4.0.15-1) unstable; urgency=low

  * the ldap ignore filter should be case insensitive. Bug #13550

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 10 Jul 2009 13:38:46 +0200

univention-ad-connector (4.0.14-1) unstable; urgency=low

  * open the ucs object before removing it. Bug #14062

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 10 Jul 2009 11:53:58 +0200

univention-ad-connector (4.0.13-1) unstable; urgency=low

  * don't replace the UCS base with the AD base twice. This is a problem
    when the UCS base is a component of the AD base. Bug #13745

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 10 Jul 2009 09:29:35 +0200

univention-ad-connector (4.0.12-1) unstable; urgency=low

  * rename an object in AD only if it exists in AD otherwise the user
    will be created. This happens when an object is moved in UCS from an
    ignored subtree into a normal area. Bug #11032

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  9 Jul 2009 14:20:11 +0200

univention-ad-connector (4.0.11-1) unstable; urgency=low

  * provide new UCR category service-adcon (Bug #13505)

 -- Andreas Büsching <buesching@univention.de>  Wed,  8 Jul 2009 10:00:21 +0200

univention-ad-connector (4.0.10-1) unstable; urgency=low

  * support for Windows 2008. Bug #11701

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  2 Jul 2009 10:27:06 +0200

univention-ad-connector (4.0.9-1) unstable; urgency=low

  * added the groups which have a nested group by default to the ignore
    filter:
     - Computers
     - Windows Hosts
     - DC Slave Hosts
     - DC Backup Hosts
    Bug #11816

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 30 Jun 2009 08:40:33 +0200

univention-ad-connector (4.0.8-1) unstable; urgency=low

  * keep the correct lower and upper case during a move in AD. Bug
    #13824

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 30 Jun 2009 08:29:31 +0200

univention-ad-connector (4.0.7-1) unstable; urgency=low

  * don't remove ignored object from the list of the memberships. Bug
    #13550

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 29 Jun 2009 09:41:16 +0200

univention-ad-connector (4.0.7-1) unstable; urgency=low

  * catch some tracebacks during the remove on UCS side. Bug #11810

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 29 Jun 2009 08:40:44 +0200

univention-ad-connector (4.0.6-1) unstable; urgency=low

  * consider a move in UCS. Bug #13745

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 29 Jun 2009 08:20:03 +0200

univention-ad-connector (4.0.5-1) unstable; urgency=low

  * support operations on non-leaf objects. Bug #13803

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 26 Jun 2009 20:46:11 +0200

univention-ad-connector (4.0.4-1) unstable; urgency=low

  * outvalue the ignore filters during the sync. Bug #11027

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 26 Jun 2009 11:01:42 +0200

univention-ad-connector (4.0.3-1) unstable; urgency=low

  * remove the POSIX (shadowLastChange and shadowMax) and Kerberos
    (shadowMax) attributes for the password expiration during the
    password reset. Bug #10190

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 25 Jun 2009 14:55:35 +0200

univention-ad-connector (4.0.2-1) unstable; urgency=low

  * The copypwd utility on windows needs the username as iso8859 string.
    Starting from now the encoding could be configured with the UCR
    variable connector/password/service/encoding. Default is iso8859-15.
    Bug #8516

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 25 Jun 2009 11:51:45 +0200

univention-ad-connector (4.0.1-2) unstable; urgency=low

  * switched to python2.4 (Bug: #14709)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 11 Jun 2009 12:14:02 +0200

univention-ad-connector (4.0.1-1) unstable; urgency=low

  * install to /usr/share/pyshared for dh_pycentral. Bug #14667

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 11 Jun 2009 13:29:53 +0200

univention-ad-connector (4.0.0-1) unstable; urgency=low

  * Make init script LSB-compliant (Bug #14421)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri, 29 May 2009 14:59:38 +0200

univention-ad-connector (3.0.5-1) unstable; urgency=low

  * fixed detection if online update is currently running (Bug: #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 16 Mar 2009 09:05:34 +0100

univention-ad-connector (3.0.4-3) unstable; urgency=low

  * updated the copyright. Bug #6875

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 12 Mar 2009 13:47:37 +0100

univention-ad-connector (3.0.4-2) unstable; urgency=low

  * fixed bugs in UMC module (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Fri, 20 Feb 2009 11:08:38 +0100

univention-ad-connector (3.0.3-1) unstable; urgency=low

  * corrected help-message of univention-adsearch
  * added containers to global_ignore_subtree in mapping.py:
     'cn=samba,@%@ldap/base@%@',
     'cn=nagios,@%@ldap/base@%@',
     'ou=Grp Policy Users,@%@connector/ad/ldap/base@%@'
  * fix potential traceback in group_members_sync_to_ucs

 -- Ingo Steuwer <steuwer@univention.de>  Fri, 20 Feb 2009 09:45:32 +0100

univention-ad-connector (3.0.2-2) unstable; urgency=low

  * fixed translation bugs in UMC module (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 19 Feb 2009 14:00:37 +0100

univention-ad-connector (3.0.2-1) unstable; urgency=low

  * fixed translation bugs in UMC module (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 19 Feb 2009 13:32:35 +0100

univention-ad-connector (3.0.1-1) unstable; urgency=low

  * rebuild for UCS 2.2
  * changed copyright year. Bug #6875

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 19 Feb 2009 08:14:06 +0100

univention-ad-connector (2.0.5-2) unstable; urgency=low

  * fixed translation string (Bug #8736)
  * added missing images (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Tue, 10 Feb 2009 16:03:49 +0100

univention-ad-connector (2.0.5-1) unstable; urgency=low

  * fixed layout of UMC module (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 29 Jan 2009 12:30:43 +0100

univention-ad-connector (2.0.4-4) unstable; urgency=low

  * fixed translation bug for StaticSelection widgets (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 22 Jan 2009 10:06:09 +0100

univention-ad-connector (2.0.4-3) unstable; urgency=low

  * removed unused debug output (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 21 Jan 2009 18:37:57 +0100

univention-ad-connector (2.0.4-2) unstable; urgency=low

  * added missing file (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 21 Jan 2009 18:00:36 +0100

univention-ad-connector (2.0.4-1) unstable; urgency=low

  * added UMC module for AD connector configuration (Bug #8736)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 21 Jan 2009 17:50:27 +0100

univention-ad-connector (2.0.3-2) unstable; urgency=low

  * don't catch SystemExit Exceptions in main.py

 -- Ingo Steuwer <steuwer@univention.de>  Mon, 12 Jan 2009 07:57:55 +0100

univention-ad-connector (2.0.3-1) unstable; urgency=low

  * don't catch SystemExit Exceptions

 -- Ingo Steuwer <steuwer@univention.de>  Mon, 29 Dec 2008 07:46:48 +0100

univention-ad-connector (2.0.2-3) unstable; urgency=low

  * added additional "import" line (Bug: #9715)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 24 Sep 2008 13:25:04 +0200

univention-ad-connector (2.0.2-2) unstable; urgency=low

  * disable debug line in connector/__init__.py (Bug: #12031)

 -- Felix Botner <fbotner@visdalen.knut.univention.de>  Tue, 23 Sep 2008 18:41:44 +0200

univention-ad-connector (2.0.2-1) unstable; urgency=low

  * import univention.debug2 instead of univention.debug (Bug: #9715)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 22 Sep 2008 10:47:21 +0200

univention-ad-connector (2.0.1-1) unstable; urgency=low

  * use python-univention-connector-ad as a pre dependency of
    univention-ad-connector

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 Jul 2008 15:41:07 +0200

univention-ad-connector (2.0.0-2) unstable; urgency=low

  * description-workaround (sync empty descriptions as "x") is only needed for w2k

 -- Ingo Steuwer <steuwer@univention.de>  Fri, 18 Jul 2008 08:21:18 +0200

univention-ad-connector (2.0.0-1) unstable; urgency=low

  * replace univention-baseconfig with univention-config-registry
  * add config registry variable-descriptions
  * add config-registry variable connector/ad/mapping/syncmode with default "sync"
  * add config-registry variable connector/ad/mapping/group/language with default "de"
  * implement additional group-membership-functionality for sync of "groups in groups" from ucs to ad
  * fix group membership synchronisation if user is synced later than his groups
  * fix failure if object is moved from an ignored container into a synced one
  * include global_ignore_subtree in ou mapping
  * add config-registry variable connector/ad/mapping/group/exchange in exchange-package

 -- Ingo Steuwer <steuwer@univention.de>  Mon, 28 Apr 2008 15:12:02 +0200

univention-ad-connector (1.2.3-1) unstable; urgency=low

  * fix synchronisation of groups with hosts as member in UCS
 -- Ingo Steuwer <steuwer@univention.de>  Wed, 23 Apr 2008 10:50:18 +0200

univention-ad-connector (1.2.3) unstable; urgency=low

  * separated search for uSNCreated and uSNChanged during poll
  * sync group memberships ("memberOf") after syncing users and groups

 -- Ingo Steuwer <steuwer@univention.de>  Mon, 21 Apr 2008 16:54:54 +0200

univention-ad-connector (1.2.2-10) unstable; urgency=low

  * don't try to get GUID manually for deleted objects if it is already given

 -- Ingo Steuwer <steuwer@univention.de>  Wed, 19 Mar 2008 09:36:11 +0100

univention-ad-connector (1.2.2-9) unstable; urgency=low

  * don't send GUID to univention-debug

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 18 Mar 2008 15:25:17 +0100

univention-ad-connector (1.2.2-8) unstable; urgency=low

  * write tracebacks without univention-debug to /var/log/univention/connector-tracebacks.log

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 18 Mar 2008 09:32:46 +0100

univention-ad-connector (1.2.2-7) unstable; urgency=low

  * add differentiation for users and groups in group-memberships
  * use functions from python-ldap to explode DNs
  * detect rename of OU/CN as modification instead of a move

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 13 Mar 2008 16:36:04 +0100

univention-ad-connector (1.2.2-6) unstable; urgency=low

  * remove extra filter-mapping for object-deletion

 -- Ingo Steuwer <steuwer@univention.de>  Fri, 16 Nov 2007 08:21:42 +0100

univention-ad-connector (1.2.2-5) unstable; urgency=low

  * Add alternative univention-baseconfig depends to allow upgrades

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Mon, 12 Nov 2007 15:35:22 +0100

univention-ad-connector (1.2.2-4) unstable; urgency=low

  * add Error-handling during object-mapping

 -- Ingo Steuwer <steuwer@univention.de>  Thu,  8 Nov 2007 11:57:42 +0100

univention-ad-connector (1.2.2-3) unstable; urgency=low

  * import LDAPControl from ldap.controls

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 10 Oct 2007 14:14:30 +0200

univention-ad-connector (1.2.2-2) unstable; urgency=low

  * fixed logfile permissions

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 27 Sep 2007 15:26:55 +0200

univention-ad-connector (1.2.2-1) unstable; urgency=low

  * use the new python-ldap control interface

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 20 Sep 2007 11:54:07 +0200

univention-ad-connector (1.1.2-2) unstable; urgency=low

  * more ucs 2.0 updates

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 19 Sep 2007 10:39:27 +0200

univention-ad-connector (1.1.1-5) unstable; urgency=low

  * install python files into the univention/connector dir

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 13 Aug 2007 21:18:23 +0200

univention-ad-connector (1.1.1-4) unstable; urgency=low

  * Bump version.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Wed,  8 Aug 2007 11:29:39 +0200

univention-ad-connector (1.1.1-3) unstable; urgency=low

  * Adapt to Univention Directory Listener.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Wed,  8 Aug 2007 11:28:02 +0200

univention-ad-connector (1.1.1-2) unstable; urgency=low

  * more wording change univention-config-registry and univention-
    baseconfig

 -- Stefan Gohmann <gohmann@univention.de>  Fri,  3 Aug 2007 09:45:37 +0200

univention-ad-connector (1.1.1-1) unstable; urgency=low

  * don't delete a object on ucs site if the object should be ignored
    (match_filter)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 24 Jul 2007 11:16:41 +0200

univention-ad-connector (1.1.0-1) unstable; urgency=low

  * support Windows 2000, applied patches from the management scope
  * fix dependencies

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 24 Jul 2007 10:15:46 +0200

univention-ad-connector (1.0.0-2) unstable; urgency=low

  * encoded files utf-8

 -- Janis Meybohm <meybohm@univention.de>  Wed, 13 Jun 2007 16:09:48 +0200

univention-ad-connector (1.0.0-1) unstable; urgency=low

  * update to ucs 2.0 policies

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 21 May 2007 17:01:17 +0200

univention-ad-connector (0.3-26) unstable; urgency=low

  * the old copypwd process breaks the lsass.exe process under windows 2003
  sp1. The new package fixes this behavior

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  8 Mar 2007 13:41:43 +0100

univention-ad-connector (0.3-25) unstable; urgency=low

  * some more code cleanup

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 22 Nov 2006 08:08:39 +0100

univention-ad-connector (0.3-16) unstable; urgency=low

  * unset the ucs attribute if the attribute was removed on ad side

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 21 Nov 2006 13:50:29 +0100

univention-ad-connector (0.3-15) unstable; urgency=low

  * some code cleanup

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 14 Nov 2006 20:31:56 +0100

univention-ad-connector (0.3-14) unstable; urgency=low

  * sync the group membership from UCS to AD

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 27 Oct 2006 14:24:46 +0200

univention-ad-connector (0.3-13) unstable; urgency=low

  * ignore the deleted object if the lastKnownAttribute is not set

 -- Stefan Gohmann <gohmann@univention.de>  Mon,  2 Oct 2006 16:51:55 +0200

univention-ad-connector (0.3-12) unstable; urgency=low

  * Only remove cache when updating from 1.3-1.

 -- Martin Kuehl <kuehl@univention.de>  Thu,  7 Sep 2006 12:53:46 +0200

univention-ad-connector (0.3-11) unstable; urgency=low

  * Remove baseconfig cache at end of postinstall.

 -- Martin Kuehl <kuehl@univention.de>  Thu,  7 Sep 2006 11:33:47 +0200

univention-ad-connector (0.3-10) unstable; urgency=low

  * added a pre dependency to univention-baseconfig with api change

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 11 Aug 2006 11:48:52 +0200

univention-ad-connector (0.3-9) unstable; urgency=low

  * migrate baseconfig handler to python module

 -- Martin Kuehl <kuehl@univention.de>  Wed, 17 May 2006 10:07:05 +0200

univention-ad-connector (0.3-8) unstable; urgency=low

  * additional Exchange-Mappings for groups to be found in global addressbook

 -- Ingo Steuwer <steuwer@univention.de>  Fri, 12 May 2006 11:32:02 +0200

univention-ad-connector (0.3-7) unstable; urgency=low

  * ignore special encoded Exchange-attributes
  * extend mapping.py by optional custom-attributes for Exchange-Sync
  * introduce package univention-ad-connector-exchange with
    - schema-definitions for exchange-parameters to be stored in UCS
    - custom-attributes for those extension
    - enable sync of attributes by univention-baseconfig

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 18 Apr 2006 08:53:16 +0200

univention-ad-connector (0.3-2) unstable; urgency=low

  * add optional mail-attribute mappings
  * fixed sync of custom attributes

 -- Ingo Steuwer <steuwer@univention.de>  Wed, 12 Apr 2006 14:27:35 +0200

univention-ad-connector (0.3-1) unstable; urgency=low

  * support identical LDAP-Base for UCS and AD
  * ignore mail-subcontainer
  * start connector after installation

 -- Ingo Steuwer <steuwer@univention.de>  Fri,  7 Apr 2006 15:36:28 +0200

univention-ad-connector (0.2-4) unstable; urgency=low

  * automatically create links to init script to the various runlevels

 -- Wolf Wiegand <wolf@anton.knut.univention.de>  Wed, 15 Mar 2006 17:22:55 +0100

univention-ad-connector (0.2-3) unstable; urgency=low

  * don't follow ldap-referrals for AD-connections (may loose credentials)
  * encoding-changes correlating with new python2.4-behavior

 -- Ingo Steuwer <steuwer@univention.de>  Tue,  8 Nov 2005 15:42:02 +0100

univention-ad-connector (0.1-4) unstable; urgency=low

  * Switch to python 2.4

 -- Alexander Reelsen <reelsen@univention.de>  Mon, 19 Sep 2005 11:28:40 +0200

univention-ad-connector (0.1-3) unstable; urgency=low

  * reimplemented internal.cfg
  * bugfixes in encoding and ldap.explode

 -- Ingo Steuwer <steuwer@univention.de>  Tue, 30 Aug 2005 09:00:07 +0200

univention-ad-connector (0.1-2) unstable; urgency=low

  * bugfixes after first beta-test
  * restart sync after stopped slapd in all cases
  * better filter-handling (case-insensitive with attributes)
  * registered baseconfig-values in univention-console

 -- Ingo Steuwer <steuwer@univention.de>  Thu, 11 Aug 2005 08:40:27 +0200

univention-ad-connector (0.1-1) unstable; urgency=low

  * initial release

 -- Stefan Gohmann <gohmann@univention.de>  Mon,  3 Jan 2005 15:40:07 +0100

