# changelog

author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 0.4.2-4
changelog:
  - no longer explicitely remove -fstack-protector (it was required to
    cope with a strange behavior when linking against the kerberos lib
    (krb5-libs-1.6.1-25.el5)


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 0.4.4-1.ocean1
changelog:
  - backport following auks master branch commit :
    dcd5a8c9e9512dbc6b2d16203b3861a502b153ea : blanks removal
    cb8ec1be9f66422e778f7b1d3e32f21c29dbe201 : enforced mode


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 0.4.4-1.ocean3
changelog:
  - backport 94f4efab0ec555bea6dc35c4b5abb14bd10df1a0 patch from master branch :
    * aukspriv/systemd: allow shell commands in environment file


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 0.4.4-1.ocean4
changelog:
  - backport 274b876bc4931912c4c4b3654cb5ce046da28dfa patch from master branch :
    * auksd/auksdrenewer/aukspriv: fix systemd dependencies


author: Regine Gaudin <regine.gaudin@cea.fr> - 0.4.4-2.ocean3
changelog:
  - Rebuild with slurm slurm-17.11.1
  - Replace SIGTERM by SIGKILL as some auks -R does not terminate properly and leads to
    nodes resources unreleased - auks-0.4.4-sig-kill-spank-auks.patch
  - Add ctx return by auks for srun before allocation such as slurmctldprolog can validate it


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.3.11-3
changelog:
  - Move conf load in mprun to set addon in conf file
  - Add a patch to use /etc as a default config directory


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.3.24-3
changelog:
  - add patch1 to correctly set BRIDGE env variables when openmpi is used
    with slurm and the slurm.sh profile is sourced


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.4.1-1
changelog:
  - tag release 1.4.1 for better handling of two distinct branches (CEA vs CCRT)
    that will have to be merge again in the future


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.3-8
changelog:
  - tag release 1.5.3-8
  -- autopacking: remove useless export which caused a bug in recursive submissions
  -- rm/ws: add spmd_run_separator support in ws resource manager plugin
  -- rm/ws: fixes for whitespaces and special characters handling
  -- mprun: fixes for whitespaces and special characters handling in extra parameters management
  -- rm/slurm: fixes for whitespaces and special characters handling when using -E "extra_params"
  -- rm/*: fixes for whitespaces and special characters handling when using -E "extra_params"


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.3-9
changelog:
  - tag release 1.5.3-8
  -- addons: fixes for incorrect construction of compounded parameters
  -- mprun: unify extra parameters management using array struct and
    introduce a new option -Z "a b c" to allow to pass parameter containing
    spaces as single block parameters to the underlying resource manager command
  -- msub: add support for whitespaces in submission parameters with SLURM


author: Francois Diakhate <francois.diakhate@cea.fr> - 1.5.3-10
changelog:
  - tag release 1.5.3-10
  -- vtune: fix for invalid cpuset argument with slurm cgroups
  -- addons: fix autodefmem which would choose the wrong value
  -- mpp: optimizations for loaded machines
  -- intelmpi-slurm.ad: add a new BRIDGE_SLURM_INTELMPI_CMD_DEFAULT_OPTIONS env var
  -- addons: fix mpmd bcast if the same name is used for different binaries
  -- addons: add shell addon for interactive usage of a node


author: Francois Diakhate <francois.diakhate@cea.fr> - 1.5.3-11
changelog:
  - tag release 1.5.3-11
  -- mprun: re-fix special character handling in arguments which was broken since 1.5.3-8
  -- slurm: fix special character handling in extra-parameters for allocations


author: Francois Diakhate <francois.diakhate@cea.fr> - 1.5.3-12
changelog:
  - tag release 1.5.3-12
  -- mprun: enhance BRIDGE_MPRUN_EXTRA_(ARRAY_)PARAMETERS support
  -- msub/slurm: correct a reg in '-a job' management which appeared in 1.5.3-8


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-1
changelog:
  - tag release 1.5.4-1
  -- addons/autompi: bind /usr/bin/mpirun to mpich2 mpi type (RHEL6 MPI package)


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-2
changelog:
  - tag release 1.5.4-2
  -- modify spec file to automate the generation of different styles of packaging :
     -- define "ccc_tera 1" : generate with cea_ prog prefix in /usr/local/bridge
        compile with slurm support by default, add a bridge-ccc_compat for ccc_
        links
     -- define "ccc_tgcc 1" : generate with ccc_ prog prefix in /usr, compile with
        slurm support by default add a bridge-cea_compat for cea_ links
     -- default : generate with ccc_ prog prefix in /usr, compile without slurm
        support, add a bridge-cea_compat for cea_ links
  -- in tgcc mode (the default), create a bridge-cea_compat package providing
     the cea_* compatibility links to the ccc_* equivalents


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-5
changelog:
  -- addons/totalview: ensure that a debug step not using the job resources
     (i.e. lower -n ... value) works properly
  -- addons/mpmd-cluster-wrapper : ensure correct behavior of the plugin when args are
     passed using shell arrays


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-6
changelog:
  -- addons: add new strace addon for mprun
     (enabling to trace parallel apps using strace)
  -- switch to properly defined integers when managing ksh internal
     debug/verbosity levels


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-7
changelog:
  -- addons/intelmpi-slurm.ad: switch to intelmpi mode when intel|intel64 is
     detected in mpirun path


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-8
changelog:
  -- addons/reservation.ad: new addon to use a particular SLURM reservation
     as defined using the BRIDGE_RESERVATION env variable.
  -- addons/autoswitches-slurm.ad: new addons to automatically specify the value
     of the max number of switches requested in SLURM


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-9
changelog:
  -- mpp: ensure that scripts basedir is extracted from autotools prefix
  -- autotools: add missing helpers Makefile.in file
  -- fix multiple incorrect usage of getopt in different command line clients
     (bugs triggered when compiled with unsigned char, like on ARM processors)
  -- check for AR in autotools
  -- msub|bs/slurm: allow trailing script parameters in msub. The synopsis
     of msub with Slurm is now "msub [args] script [params]"


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.4-10
changelog:
  -- integrate recent patches from prod sites
     -- addons: translate usage in english and add support for ltrace, valgrind
     -- addons: ensure that bcast.ad uses which using /usr/bin/which
     -- addons: fix arguments passing in strace addons and a bug in strace.sh
     -- add -t|T [min-]max support in msub and mprun for Slurm backend
     -- correct a bug preventing from using -e with IntelMPI when used in
        salloc/mpirun
     -- ensure that BRIDGE_MSUB_QUEUE env var is used in msub when
        no -q option is set
     -- autoexclusive.ad: add BRIDGE_ADDON_AUTOEXCLUSIVE_FEATURES support
     -- totalview.ad: add BRIDGE_TOTALVIEW_CMD and BRIDGE_TOTALVIEW_PARAMS


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-1.ocean3
changelog:
  - allow to use a 'default' pragma in -M/-m of msub to override '#MSUB -M/-m'
    pragmas specified in the submission script with the system default values.
    patch: bridge-1.5.4.msub_option_m_default.patch
  - add support of BRIDGE_DDT_PARAMS env var to specify additional DDT params
    when '-d ddt' is used.
    patch: bridge-1.5.4.addon_ddt_params.patch


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean5
changelog:
  - add systemd support in SPEC file and in the code
    patch: bridge-1.5.6.systemd.patch
  - ensure that reservation addon add SLURM_RESERVATION env var
    patch: bridge-1.5.6.slurm_reservation.patch
  - correct a bug in pstat args processing
    patch: bridge-1.5.6.mpstat_args.patch


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean6
changelog:
  - make logrotate conf work with systemd bridged service
    note that /etc/logrotate.d/ccc_bridged is no longer considered as
    a config file and overwritten by RPM during installation.
    Older /etc/logrotate.d/ccc_bridged.rpmsave file is removed in %post
    to avoid issue with logrotate.


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean7
changelog:
  - ensure that -a option of msub generates an error when -w is activated.
    patch: bridge-1.5.6.-a_vs_-w.patch


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean8
changelog:
  - rebuild for slurm-16.05
  - include slurm-16.05 prototypes changes support
    patch:bridge-1.5.6.slurm-16.05.patch


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean10
changelog:
  - allow inheritance of MSUB QOS from BRIDGE_MSUB_ADDON_QOS env variable when
    BRIDGE_MSUB_ADDON_QOS_INHERITANCE env var is set to 1.
    patch: bridge-1.5.6-qos_addon_inheritance.patch


author: Matthieu Hautreux <matthieu.hautreux@cea.fr> - 1.5.6-3.ocean11
changelog:
  - add support of /etc/ccc_nodeinfo/* as an override for part/node info in
    mpinfo/slurm. patch: bridge-1.5.6-ccc_nodeinfo.patch


author: Francis BELOT <francis.belot@cea.fr> - 1.5.6-3.ocean12
changelog:
  -Patch13: bridge-1.5.6-mpstat-option-t.patch
       use clustack instead of padb
    Patch14: bridge-1.5.6-addons-totalview.patch
        possibility to specify less processors in embedded ccc_mprun  than the number of processors specified in ccc_msub command
    Patch15: bridge-1.5.6-mpstat-option-p.patch
       -p option was not working


author: Regine Gaudin <regine.gaudin@cea.fr> and Roger Brel - 1.5.6-3.ocean16.1
changelog:
  - Add DEBUG_MODE in bridge_addon_msub_alterscript function on preload.ad bridge-1.5.6.addons-preload.patch


author: Regine Gaudin <regine.gaudin@cea.fr> - 1.5.6-3.ocean18
changelog:
  - Add / character to assure that pattern can use more than 2 definitions per partition
     patch: bridge-1.5.6.addon-autoswitch.patch
  - Add -F foreground launch option because of several pid problem
     leading to logrotate/bridge relaunch failure
     patch: bridged-foreground-option.patch


author: Regine Gaudin <regine.gaudin@cea.fr> - 1.5.6-4.ocean1
changelog:
  -- Rebuild with slurm.17.11.6 for ocean 
  -- merge: bridge-1.5.6-env-variables-autoswitch.patch fix slurm environment variables
     with bridge-1.5.6.addon-autoswitch.patch : bridge-1.5.6-addon-autoswitch-and-env-slurm-variable-fix.patch
  -- patch: bridge-1.5.6.filesystems_addon.patch
     add -m option for filesystem use description


author: Regine Gaudin <regine.gaudin@cea.fr> - 1.5.6-5.ocean1
changelog:
  - Rebuild with slurm-18.08.06 / ocean v2.7
    add support of slurm-18 feature with multiple backup controller bridge-1.5.6-multi-backup-controller.patch
    rename bridge-1.5.6-partition_info_t_priority.patch for change of partition_info_t priority 
    fix segv in cluster name algorithm bridge-1.5.6-fix-cluster-name-segv.patch
    add slurm level 18 requirement because of char **control_machine list in slurm_ctl_conf_t instead of two char* master and backup


author: Regine Gaudin <regine.gaudin@cea.fr> - 1.5.6-5.ocean3
changelog:
  - Suppress incompatibility -m option between -m affinity and -m unshare mounted filesystems :
    supress bridge-1.5.6-slurm-affinity-addon.patch 
    add bridge-1.5.6.option_m_suppress.patch for suppressing -m in the help 
    option  used for unshare mounted filesystems bridge-1.5.6.filesystems_addon.patch  
    adapt without -m keeping -M bridge-1.5.4.msub_option_m_default.patch : bridge-1.5.6.msub_option_M_default.patch
    add compilation of filesystems.ad in Makefile : bridge-1.5.6.filesystems_addon.patch


author: Romain Fihue <romain.fihue@cea.fr> - 0.0.1beta-1
changelog:
  - Now a beta release ! Includes:
    - Better error messages in CLI
    - Added a 'critical' keyword in addresses data for /etc/hosts generation
    - Up-to-date jinja and cell templates
    - Management of forced port speed as RackTables port label


author: Romain Fihue <romain.fihue@cea.fr> - 0.0.1beta3-1
changelog:
  - Added an 'alias' keyword in addresses.yaml that creates CNAMEs
   - Add stack information in DHCP templater using 'stck_id' object label
   - Add an 'excluded_vendor_id' property in DHCP context
   - Fix port label parsing
   - Removed by-type filter while gathering opt82-enabled ports
   - dhcp templater now supports opt82 addressing of switch stacks
   - Update broadcom template
   - dhcp templater now supports logical and physical names using
     a 'name' object label


author: Romain Fihue <romain.fihue@cea.fr> - 0.2-4-g5eacd01
changelog:
  - 780208b: bone IPs PTR should point to canonical names
   - 2681d3f: hwdb obj_list now prints Object labels too
   - eface46: Update jinja templates
   - 5eacd01: Enable jinja2.ext.do extension


author: Cyril Servant <cyril.servant@cea.fr> - 0.3-1
changelog:
  - handle objects with missing values for chapter based attributes
   - add json export for objects and ports
   - add import from json
   - populate port speed from link type
   - template/hosts.jinja: disable ipv6 resolution for localhost
   - templaters/dhcp.py: raise an error if name or ip are missing when using opt82
   - structs: better error output on duplicate keys
   - switches/dhcp: manage lags
   - templaters/dns: generate multi-domain addresses
   - dns.py: manage reverse_default as default to resolve reverse address
   - hwdb: add location fields to csv output
   - Adds brand as first parameter in help.
   - switches: dont set port speed if the port is shared
   - dns: add current timestamp to context
   - allow multiple reverse_default


author: Romain Fihue <romain.fihue@cea.fr> - 0.4-1
changelog:
  - Version 0.4 (rev.7ac07862)
   - Adds stack_slave to know if a switch is a slave in a stack. (rev.b3712c34)
   - struct: Fix VLAN lookup when VLANs are define with NodeSets (rev.7c792d78)
   - dhcp: Fix name label regexp (rev.77e4dae4)
   - dns: Fix templater context in multi-domain environments (rev.a7858f2b)
   - conman: Add a way to use Nodeset-parameters (rev.4ae91278)
   - Piera: Activate deep merge on addresses, networks, dhcp and hwaddrs and conman definitions (rev.b74f6776)
   - struct: Patch address matching semantics for host with domains and suffixes (rev.216872d1)
   - Update/Add some docstrings (rev.a2975faf)
   - Use a lag_id label to override automatic lag id allocation (rev.1c451bba)
   - query/obj: Fix model matching when adding an object (rev.7e8aeb81)
   - hwdb: add basic test (rev.7b98874f)
   - Templaters: Add 'hash', 'pick', 'unix_now', 'human_now' and 'pretty_now' functions. (rev.fbd2ba1e)
   - cli: add missing imports... (rev.d040de19)
   - cli: introduce networks, vlans and addresses commands (rev.bb6665d5)
   - struct/addresses: fix match with fqdn (rev.528f136a)
   - tests: define RT_URL to access database url (rev.ea52166b)
   - query/obj: fix missing import (rev.6bef9636)
   - templater/dns: fix aliases generation (rev.d2408072)
   - refactoring: introduce load function to check config loading process (rev.d7c2b5e2)
   - structs: introducing Vlans object (rev.3a080cd4)
   - tests: force mysql initialization (rev.49984be4)
   - hwdb: listing switches must display the column "Label" (rev.dc8022a4)
   - hwdb: writing commandline documentation (rev.02f222fe)
   - doc: Writing Manpage (rev.32c8bae1)
   - hwdb: Effectively print remote labels is 'port list' command (rev.be437976)
   - hwdb: Add a '--names' option in 'obj list' command (rev.3e705b52)
   - piera: Concatenate arrays in deep merge mode (rev.fe361e12)
   - dhcp: Fix typos introduced in '22ae7276' (rev.17a275e5)
   - templater/switches: Filter-out port vlans (rev.692fbaa0)
   - piera: Make interpolation lookup mergeable (rev.f9950938)
   - Fixes dhcp template in order to allow names with more than one hyphen. (rev.e273abb2)
   - confiture/structs: fix match to be compatible with Racktables (rev.32f0a36b)
   - address/match: add tests for hostname containing hyphen (-) and domain (rev.cee128d5)
   - ipaddress: migrate to ipaddress (was ipaddr) to manage network addresses (rev.a70eec89)
   - confiture/structs: convert NodeSets to str() back and forth to store it in dict() (rev.e0c02f81)
   - confiture/structs: ensure step value is an int when comparing (rev.79288fe6)
   - test_addresses: fix LookupError and KeyError tests (rev.a87292ca)
   - cli/main: check if we can load racktables config section (rev.0dc8c306)
   - cli: Same import mecanism than DHCP for DNS (rev.e6c5695b)
   - test_cli: fix monkeypatch module paths (rev.51430089)
   - test_switches: add 'prefilen' in tests (rev.67d8892a)
   - test_dhcp: fix dhcp matching rules (rev.efcda4ba)
   - tests: Add autogenerated Racktables database (rev.8a55c504)
   - Add mechanism to define VIPs on switches (rev.f23edeb3)


author: Cyril Servant <cyril.servant@cea.fr> - 0.5-1
changelog:
  - add more info in exception
   - add 100 Base - T port_type
   - use types = in function call
   - fix name_match var wrong name
   - switches.py: fix allowed vlan in access mode
   - structs.py: merge dict on Vlans lookup
   - test_switches: use FakeHiera instead of simple dict for Vlan initialisation
   - hwdb: Hide SQLAchemy warnings by default
   - hwdb: Add location and json_location output format for 'obj list'.
   - hwdb: Add a 'Location' column in 'obj list'
   - templaters/switches: Fix VIPs handling when using multiple addresses
   - templates/switches: Manage arbitrary tags
   - conman: get more parameters from RackTables, and generate configuration files for nodectrl


author: Cyril Servant <cyril.servant@cea.fr> - 0.6.0-1
changelog:
  - display: cleaner display of location
   - dhcp: more flexible regexps
   - bugfix: stricter match of label name=
   - Switches: better error and rollback of address to addresses (coherence with hiera content)
   - python3: use list when iterating over dict
   - python3: convert lambdas functions with list comprehension
   - python3: test_cell_template try to import StringIO from 'StringIO' or 'io' module
   - python3: don't use str.decode() anymore
   - python3: use parentheses for 'print'
   - python3: use parentheses for 'except' in case of multiple values
   - python3: add '__hash__' method to 'RTRackLoc' class
   - switches: some dirty changes
   - vendor/piera: python3 compatibility


author: Cyril Servant <cyril.servant@cea.fr> - 0.6.1-1
changelog:
  - cli: add 'dns/uniq_ptr' and 'conman/conf_name' options in confiture.yaml
   - convert regexp strings to raw in order to enable escape sequences
   - Documentation: refactoring manpages
     - split confiture(8) manpage in 4:
       - confiture(8)
       - confiture.yaml(5)
       - confiture-hiera(5)
       - confiture-templates(5)
     - add hwdb(8) manpage
     - automatize author, date and version in manpages
     - add 'install-doc' and 'clean' targets in Makefile
     - normalize hwdb helps
     - remove duplicate function: cmd_obj_type_compat_add
   - hwdb: new option --type for 'port update'
   - Documentation and examples for 'conman'
   - Test suite, and bugfixes on 'hwdb port list'
     - New framework for testing hdwb command
     - Bugfix when 'hwdb port list' needs to display a port without number in a table
     - Bugfix when 'hwdb port list' needs to display a port with multiple numbers in CSV
     - Change short display of 'Ethernet' for CSV to 'E'


author: Cyril Servant <cyril.servant@cea.fr> - 0.6.2-1
changelog:
  - cleanup: apply pylint corrections
   - templater/switches:
     - make the vips definition more flexible
     - add vip password option
     - update the n9k template accordingly
     - add tests
   - hwdb: order objects by name instead of internal database arbitrary order


author: Cyril Servant <cyril.servant@cea.fr> - 0.6.3-1
changelog:
  - cleanup: apply more pylint corrections
   - cell: Implement a 'collate' mode into "Multiplied Nodeset" parser


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - dhclient logs its pid to make troubleshooting NM managed systems
    with multiple dhclients running easier (#546792)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-18
changelog:
  - Hide startup info when starting dhcpd6 service.
  - Remove -TERM from calling killproc when stopping dhcrelay (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
  - document -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559142)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - In dhclient-script:
    - use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet' resp. '-f[amily] inet6'
    - do not use IP protocol family identifier with 'ip link'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#573090)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-14
changelog:
  - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast option
  - Fix dhclient-script to set interface MTU only when it's greater than 576 (#574629)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-15
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559147)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559147)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559153)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-18
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578097)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20
changelog:
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#586999)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - 4.1.1-P1: pair of bug fixes including one for CVE-2010-2156 (#601405)
  - Compile with -fno-strict-aliasing


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
changelog:
  - Add 12-dhcpd NM dispatcher script (#565921)
  - Rename 10-dhclient to 11-dhclient (10-sendmail already exists)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-16.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-22.P2
changelog:
  - 4.2.0-P2: fix for CVE-2010-3616 (#662326)
  - Use upstream fix for #628258
  - Provide versioned symbols for rpmlint


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-0.1.b1
changelog:
  - 4.2.1b1: fix for CVE-2011-0413 (#672996)
  - No longer need invalid-dhclient-conf, parse_date and release6-elapsed patches


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
changelog:
  - Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
    with the same version and release (bug #705037).
  - Fix triggerun scriptlet


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-11.P1
changelog:
  - Add triggerpostun scriptlet tied to dhcp-sysvinit
  - Make it possible to build without downstream patches (Kamil Dudka)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
changelog:
  - Removed upstream-merged IFNAMSIZ.patch
  - Polished patches according to results from static analysis of code.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-0.1.b1
changelog:
  - 4.2.2b1: upstream merged initialization-delay.patch
  - Drop all capabilities in dhcpd/dhcrelay (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-2
changelog:
  - #699713:
    - Use '--enable-paranoia --enable-early-chroot' configure flags
    - Create/delete dhcpd user in %post/%postun
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-3
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-6
changelog:
  - PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same
  - One more tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-7
changelog:
  - Support for IPoIB (IP over InfiniBand) interfaces (#660681)
  - Hopefully last tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-12
changelog:
  - change ownership of /var/lib/dhcpd/ to dhcpd:dhcpd (#744292)
  - no need to drop capabilies in dhcpd since it's been running as regular user


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-2
changelog:
  - Write PID file BEFORE changing of the effective user/group ID.
  - Really define _hardened_build this time


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-3
changelog:
  - Write lease file AFTER changing of the effective user/group ID.
  - Move omshell from dhcp-common to main package (where it originally was).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
changelog:
  - Send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).
  - Don't build with -D_GNU_SOURCE, configure.ac uses AC_USE_SYSTEM_EXTENSIONS


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-9.P1
changelog:
  - don't ship legacy SysV initscripts
  - dhcpd6: move '-cf /etc/dhcp/dhcpd6.conf' from sysconfig/dhcpd6 to dhcpd6.service
  - run 'chown -R dhcpd:dhcpd /var/lib/dhcpd/' before starting dhcpd/dhcpd6 service
    for the case where leases file is owned by root:root as a
    consequence of running dhcpd without '-user dhcpd -group dhcpd' (#744292)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-10.P1
changelog:
  - hopefully we don't need 12-dhcpd anymore as 'After=network.target'
    in dhcpd[6].service should take care of the original problem (#565921)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-11.P1
changelog:
  - revert change made in 4.2.3-3 because of failing failover inicialization (#765967)
    the procedure is now:
    init lease file, init failover, init PID file, change effective user/group ID
  - don't need to fix lease files ownership before starting service
  - dhclient-script: allow static route with a 0.0.0.0 next-hop address (#769463)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-0.5.rc1
changelog:
  - dhcpd.service: explicitly add -cf to indicate what conf file we use (#819325)
  - no need to copy /etc/*.conf to /etc/dhcp/*.conf in %prep anymore


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-6
changelog:
  - ib.patch: added fall-back method (using ioctl(SIOCGIFHWADDR)) when getting
              of HW address with getifaddrs() fails (#626514-c#63, #840601).


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-12.P1
changelog:
  - dhclient-script: fixed CONFIG variable value passed to need_config (#848858)
  - dhclient-script: calling dhclient-up-hooks after setting up route, gateways 
                     & interface alias (#848869)


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
changelog:
  - SystemD unit files don't use Environment files any more (#850558)
  - NetworkManager dispatcher script doesn't use DHCPDARGS any more


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-22.P2
changelog:
  - add After=time-sync.target to dhcpd[6].service (#878293)
  - remove groff from BuildRequires (no idea why it's been there)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-2
changelog:
  - during update convert DHC*ARGS from /etc/sysconfig/dhc*
    to /etc/systemd/system/dhc*.service (#895475)
  - 12-dhcpd NM dispatcher script now restarts also dhcpd6 service


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-5
changelog:
  - remove missing-ipv6-not-fatal.patch because the concerning code is later
    removed with getifaddrs.patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-29
changelog:
  - dhclient-script: fix stateless DHCPv6 mode (#1101149)
  - Add GUIDs in the DHCP logs for IPoIB. (#1109947)
  - dhclient-script: handle option 121 properly (#1109949)
  - dhclient-script: it's OK if the arping reply comes from our system (#1116004)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130803)
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
               added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-30
changelog:
  - 11-dhclient: handle "dhcp4-change" and limit it to chrony/ntp (#1093490)
  - [dhclient -6] infinite preferred/valid lifetime represented as -1 (#1133839)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-34
changelog:
  - Use network-online.target instead of network.target (#1145832)
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-37
changelog:
  - dhcpd generates spurious responses when seeing requests from vlans on plain interface (#1175350)
  - option 97 - pxe-client-id (#1175422)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-38
changelog:
  - correctly set IB's hw->hlen and add more randomness into xid generation (#1195693)
  - send unicast request/release via correct interface (#1177351)


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: Pavel Šimerda <psimerda@redhat.com> - 12:4.2.5-48
changelog:
  - Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
    restarts by NetworkManager dispatcher.d script


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: Romain FIHUE <romain.fihue@cea.fr> - 0.13.0_191_g8ec7b8c-1.ocean1
changelog:
  - Adding BUILD_ID to compiled binaries (romain.fihue)
  - Change default ssh port (romain.fihue)
  - Adding Hostname field to list-units and list-machine output (romain.fihue)


author: Romain FIHUE <romain.fihue@cea.fr> - 0.13.0_194_g7031d29-1.ocean1
changelog:
  - Updating MachineLegend to inclue machine hostname. Used in fleetctl outputs
  - scheduler: Implementing weighted scheduler
  - server: Purging agent reconciler when server monitor is triggered


author: Romain FIHUE <romain.fihue@cea.fr> - 1.0.0_14_gg33c2cf-1.ocean1
changelog:
  - Fixed gRPC failure handling by removing the huge TTL set when gRPC is used. Leader elections might happen more often.


author: Romain FIHUE <romain.fihue@cea.fr> - 1.0.0_15_gc5a57f7-1.ocean1
changelog:
  - server: Syncing etcd client when handling failure. This ensures we try different endpoints in any cases


author: Romain FIHUE <romain.fihue@cea.fr> - 1.0.0-25-g13a0be6-1.ocean1
changelog:
  - Fix 2 negligences which failed to compile with golang 1.10.4:
    - The '%t' verb was used for printing a string instead of '%s'
    - Usage of unkeyed fields in composite literal is now forbiden in go vet. Which is much more future-proof.


author: Romain Fihue <romain.fihue@cea.fr> - 1.0.0-28-gc1e26ca3-1.ocean1
changelog:
  - Replace MachineState on every startup, this enhance failure recovery
  - Fix error message when fleet fails to register MachineState


author: Romain Fihue <romain.fihue@cea.fr> - 1.0.0-28-gc1e26ca3-1.ocean2
changelog:
  - Build id should be different on both binaries
  - Gofmt is go version dependent. Here code is fmt'ed with golang 1.12.


author: Romain Fihue <romain.fihue@cea.fr> - 1.0.0-39-ge4412935-1
changelog:
  - Fix a potential deadlock introduced in '1.0.0-33-g9bcb7d7d-1'
  - machine/coreos: Fix data race
  - api/server: Fix data race
  - agent/unit_state: Fix data race
  - agent/cache: Fix data race


author:
  - Aurelien Degremont <aurelien.degremont@cea.fr> - 2.7.0-3.10.0_229.11.1.ocean1.el7.centos.x86_64.ocean2

changelog:
  - Rebuild for kernel '3.10.0-229.11.1.ocean1.el7.centos.x86_64'
  - Rebuild using Mellanox OFED Infiniband stack


author: - Aurelien Degremont <aurelien.degremont@cea.fr> - 2.7.0-3.10.0_327.4.5.el7.ocean1.x86_64.ocean2
changelog:
  - Rebuild for new kernel version '3.10.0-327.4.5.el7.ocean1'
  - Rebuild using Mellanox OFED Infiniband stack version 3.2


author: Quentin Bouget <quentin.bouget@cea.fr> - 2.10.5-1.ocean1
changelog:
  - Update to 2.10.5 version
  - Include patches to:
     - support shook
     - expose HSM request counters
     - prioritize RESTOREs over ARCHIVEs


author: Quentin Bouget <quentin.bouget@cea.fr> - 2.10.7-2.7.ocean1
changelog:
  - Update to 2.10.7 version
  - Changed the naming convention of the package to:
        <lustre-version>-<ocean-version>.ocean<package-revision>
  - Modified and renamed the patch that allows forging the hsm xattr
  - Updated the patch for LU-8324 (RESTORE prioritization)
  - Added a patch to enabled building on kernel 3.10.0-957.10.1.el7


author: Quentin Bouget <quentin.bouget@cea.fr> - 2.10.7-2.7.ocean3
changelog:
  - Rebuild for kernel version 3.10.0-957.21.3.el7
  - Fix "Obsoletes" for lustre-modules (otherwise lustre-modules-2.7 and
    kmod-lustre-2.10 can be installed simultaneously)
  - Add "Obsoletes" for lustre-sources (which is now provided by lustre-debuginfo)
  - Use upstream's "Obsoletes" for lustre-client (because lustre is not packaged
    in greyzone anymore)
  - Fixed the bogus data of the previous changelog entry (Wed -> Tue)


author: Quentin Bouget <quentin.bouget@cea.fr> - 2.12.3-2.7.ocean1
changelog:
  - Update sources to Lustre-2.12.3
  - Remove every patch already present in 2.12.3 (that is, all of them except
    the one to forge the HSM xattr as root).


author: Quentin Bouget <quentin.bouget@cea.fr> - 2.12.4-2.7.ocean1
changelog:
  - Update sources to Lustre-2.12.4
  - Add a patch to fix Lustre's HA resources (something related to the use of
    pid files).


author: Romain Fihue <romain.fihue@cea.fr> - 1.4.3-0.54.ged18abe.ocean3
changelog:
  - Apply a Bull (GM) patch:
    * Make sure that log file write errors are correctly reported - nhc-1.4.2-1.log_file_error_reporting.patch
  - Update CCC\'s NHC scripts
  - Fix rpmspec


author: Philippe Gregoire <philippe.gregoire@cea.fr> - 1.3-3.ocean1
changelog:
  - Add firmwares required by MLNX_OFED_SRC-4.5-1.0.1.0
  - Add firmwares for ConnectX6.
  - Add firmwares for ConnectX5.


author: Philippe Gregoire <philippe.gregoire@cea.fr> - 1.3-3.ocean2
changelog:
  - Add firmwares for ConnectX4 MCX456A-FCAT (used in PPI cluster).
  - Add firmware 20.25.7020 for ConnectX6.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-2 + 0.9.3-4
changelog:
  - keep track of which IndentityFile options were manually supplied and
    which were default options, and don't warn if the latter are missing.
    (mindrot#2084)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-3 + 0.9.3-4
changelog:
  - sshd.service: use KillMode=process (#890376)
  - add latest config.{sub,guess} to support aarch64 (#926284)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-4 + 0.9.3-5
changelog:
  - don't show Success for EAI_SYSTEM (#985964)
  - make sftp's libedit interface marginally multibyte aware (#841771)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010361)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed (#1001566)
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-4 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-8
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-5 + 0.9.3-8
changelog:
  - use tty allocation for a remote scp (#985650)
  - run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set (#969375)
  - FIPS mode - adjust the key echange DH groups and ssh-keygen according toSP800-131A (#1001748)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-7 + 0.9.3-8
changelog:
  - log fipscheck verification message into syslog authpriv
  - ssh-keygen - relative-specified certificate expiry time should be relative
    to current time and not the validity start time (#1058234)
  - use the size of security of 3des for DH (#1053107)
  - ssh-copy-id.1 man page fix (#1058792)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-1 + 0.9.3-9
changelog:
  - new upstream release (#1059667)
  - prevent a server from skipping SSHFP lookup - CVE-2014-2653 (#1081338)
  - make /etc/ssh/moduli file public (#1134448)
  - test existence of /etc/ssh/ssh_host_ecdsa_key in sshd-keygen.service
  - don't clean up gssapi credentials by default (#1134447)
  - ssh-agent - try CLOCK_BOOTTIME with fallback (#1134449)
  - disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6
  - add support for ED25519 keys to sshd-keygen and sshd.sysconfig
  - standardise on NI_MAXHOST for gethostname() string lengths (#1097665)
  - set a client's address right after a connection is set (mindrot#2257) (#912792)
  - apply RFC3454 stringprep to banners when possible (mindrot#2058) (#1104662)
  - don't consider a partial success as a failure (mindrot#2270) (#1112972)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9
changelog:
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)
  - log when a client requests an interactive session and only sftp is allowed (#1130198)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9
changelog:
  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9
changelog:
  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9
changelog:
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-13 + 0.9.3-9
changelog:
  - Increase limit of files for glob match in sftp (#1160377)
  - Add pam_reauthorize.so to /etc/pam.d/sshd (#1204233)
  - Show all config values in sshd test mode (#1187597)
  - Document required selinux boolean for working ssh-ldap-helper (#1178116)
  - Consistent usage of pam_namespace in sshd (#1125110)
  - Fix auditing when using combination of ForcedCommand and PTY (#1199112)
  - Add sftp option to force mode of created files (#1197989)
  - Ability to specify an arbitrary LDAP filter in ldap.conf for ssh-ldap-helper (#1201753)
  - Provide documentation line for systemd service and socket (#1181591)
  - Provide LDIF version of LPK schema (#1184938)
  - Document TERM environment variable (#1162683)
  - Fix ssh-copy-id on non-sh remote shells (#1201758)
  - Do not read RSA1 hostkeys for HostBased authentication in FIPS (#1197666)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-14 + 0.9.3-9
changelog:
  - Fix ldif schema to have correct spacing on newlines (#1184938)
  - Add missing values for sshd test mode (#1187597)
  - ssh-copy-id: tcsh doesnt work with multiline strings (#1201758)
  - Fix memory problems with newkeys and array transfers (#1223218)
  - Enhance AllowGroups documentation in man page (#1150007)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-15 + 0.9.3-9
changelog:
  - One more typo in manual page documenting TERM variable (#1162683)
  - Fix race condition with auditing messages answers (#1240613)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-17 + 0.9.3-9
changelog:
  - Security fixes released with openssh-6.9 (CVE-2015-5352) (#1247864)
   - XSECURITY restrictions bypass under certain conditions in ssh(1) (#1238231)
   - weakness of agent locking (ssh-add -x) to password guessing (#1238238)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-20 + 0.9.3-9
changelog:
  - Fix vulnerabilities published with openssh-7.0 (#1265807)
   - Privilege separation weakness related to PAM support
   - Use-after-free bug related to PAM support


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-23 + 0.9.3-9
changelog:
  - Disable undocumented feauture Roaming for good (#1298218)
  - prevents CVE-2016-0777 and CVE-2016-0778


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-26 + 0.9.3-9
changelog:
  - Drop glob patch for sftp client preventing listing many files (#1310303)
  - Fix race condition between audit messages from different processes (#1310684)
  - Make systemd service forking to properly report state (#1291172)
  - Get rid of rpm triggers for openssh-5.x (#1312013)
  - Generate the host keys when the key files are empty (#1266043)
  - pam_ssh_agent_auth: authorized_keys_command option (#1317858)
  - Don't use MD5 digest from pam_ssh_agent_auth in FIPS mode (#1317952)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-27 + 0.9.3-9
changelog:
  - Coverity and RPMDiff build issues (#1334326)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (#1329191)
  - Check for real location of .k5login file (#1328243)
  - close ControlPersist background process stderr (#1335540)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-28 + 0.9.3-9
changelog:
  - SFTP force permission collision with umask (#1344614)
  - Make closefrom() ignore FD's to /dev/ devices on s390 (#1318760)
  - Create a default value for AuthenticationMethods any (#1237129)
  - Fix ssh-copy-id with LogLevel=quiet (#1349556)
  - Expose more information to PAM (#1312304)
  - Move MAX_DISPLAYS to a configuration option (#1341302)
  - Add a wildcard option to PermitOpen directive (host) (#1344106)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.3-1
changelog:
  - Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
  - detach -cavs subpackage
  - enable seccomp filter for sandboxed child


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.3-1
changelog:
  - Fix coverity scan results
  - Adjust FIPS algorithms list (#1420910)
  - Revert problematic feature for chroot(#1418062)
  - Fix CBC weakness in released OpenSSH 7.5


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
  - Remove wrong coverity patches


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-5 + 0.10.3-1
changelog:
  - Fix the default key exchange proposal in FIPS mode (#1438414)
  - Remove another wrong coverity chunk to unbreak gsskex (#1438414)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Arnaud Guignard <arnaud.guignard@cea.fr> - 7.4p1-16.ocean1 + 0.10.3-2.ocean1
changelog:
  - Add CEA patch to add PermitOpenCommand parameter
  - Increase MAX_LISTEN_SOCKS to 32
  - Add CEA patch to hack remote forwarding


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2
changelog:
  - invalidate supplemental group cache used by temporarily_use_uid()
    when the target uid differs (#1583735)


author: Romain Fihue <romain.fihue@cea.fr> - 0.6.4-2.ocean1
changelog:
  - Integrate well-known patches into official package
    - VLAN Management
    - PCOCC_TMPDIR for ephemeral storage instead of /tmp
    - hwloc syntax fix


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.1-1
changelog:
  - Generic Layout management + 2 implementations: 'simple' and 'raid1'.
  - Configuration changes. See installed template (see /etc/phobos.conf.rpmnew).
  - Set filesystem label at format time, and check it at mount time.
  - Improved management of full devices (set R/O, tag full...)
  - SCSI library: when needed, search free slot to unload a tape to.
  - Phobos 1.0 to phobos 1.1 DB conversion script.
  - New DSS filter API (no change in commands or user interface).
  - Miscellaneous bug fixes


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.1-2
changelog:
  - Change DB conversion script to properly convert JSON integers
  - Make DSS resilient to missing stats fields in JSONs
  - Fix default commands for ltfs mount/umount/format
  - Don't leave a drive busy when its filesystem is full
  - Fix invalid write intent size of 0
  - Set rpath to load layout modules
  - SCSI library: check target slot is empty before move
  - Make tape move resilient to invalid slot


author: - Henri Doreau <henri.doreau@cea.fr> - 1.1-3
changelog:
  - Propery set LGPL headers to the project files
  - Reimplement CLI using ctypes instead of SWIG
  - Fix a bug where errors on flush would trigger an assertion failure
  - Misc packaging improvements to meet ocean quality standards


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.2.0-1
changelog:
  - Final 1.2 release (Echo)
  - New features:
      * Dual logging (stderr and syslog)
      * phobos lib scan (improved 'mtx status')
      * phobos_db tool (DB schema management, DB migration)
      * retry when the number of concurrent PUT/GET > nb drives
      * media tag management
      * manage drive-tape compatibility rules (WIP)


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.3.0-1
changelog:
  - Release 1.3 (Vala)
  - Now uses LTFS 2.4. No longer requires lin_tape.
  - Media list filter by tag, e.g. "phobos tape list -T foo,bar"
  - Drive list filter by model, e.g. "phobos drive list -m ULTRIUM-TD6"
  - Fix various memory leaks and wrong behaviors


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.3.1-1
changelog:
  - Pass 'scsi generic' devices to LTFS instead of 'scsi tape'
  - 'phobos xxx list' can now output attributes (with -o option)


author: - Thomas Leibovici <thomas.leibovici@cea.fr> - 1.90.0-1
changelog:
  - Release 1.90 (Hi'iaka): 1.9x is the release cycle towards 2.0
  - Phobos now runs a daemon (phobosd) on each IO node to manage devices and
    schedule IOs
  - Object and extent listing and filtering commands
  - Layout and family selection from (m)put command line
  - Split too large extents on multiple media
  - Port to RHEL/CentOS8
  - Various fixes and refactoring


author: - Sebastien Gougeaud <sebastien.gougeaud@cea.fr> - 1.91.0-1
changelog:
  - Release 1.91 (Japet)
  - Python3 port
  - New DB version towards the future deletion mechanism
  - Alias feature to specify storage class of service
  - Media set-access command to control permitted medium operations
  - Daemon management optimization (ressource locks, etc.)


author: - Sebastien Gougeaud <sebastien.gougeaud@cea.fr> - 1.91.1-1
changelog:
  - Delete and undelete commands for objects
  - Extent path generation now considers uuid and version of objects


author: - Yoann Valeri <yoann.valeri@cea.fr> - 1.91.2-1
changelog:
  - Modified concurrency lock management in DSS
  - Modified DB schema
  - Pattern option to extent and object list
  - Ping command
  - Configurable block size when writing data
  - Put overwrite
  - Added phobos locate command's design documentation


author: - Patrice Lucas <patrice.lucas@cea.fr> - 1.93-1
changelog:
  - LRS lock refactoring
  - Added layout parameters to migration
  - Removed layout simple and added simple alias
  - Limited sync to write operations


author: - Yoann Valeri <yoann.valeri@cea.fr> - 1.94-1
changelog:
  - Release 1.94 (Rhea)
  - Improved documentation on setup, admin commands, object management, listing
    commands
  - Added thresholds for when to synchronize a medium (time, number of requests
    and written size). Synchronizations are now done all at once, not one by one
  - LRS is now composed of the duo of threads:
      * communication and scheduler threads, for communicating with clients and
        managing a specific family of device/media;
      * device threads, to manage a device and basic operations regarding a
        medium. Multiple device/medium can now operate in parallel for operations
        like mount/umount/load/unload and formats, which do not block the
        execution of read and write requests anymore
  - Media don't unload when terminating the LRS
  - LRS will wait for every I/O completion before terminating
  - LRS won't stop when a client is disconnected
  - New commands:
      * drive delete
      * drive status
      * lock clean
  - Format manage multiple formats at the same time, and added a parameter to
    limit the number of concurrent formats
  - Added max-width and no-truncate arguments to object list


author: Romain Fihue <romain.fihue@cea.fr> - 2.6-11_g6d7a72d.ocean1
changelog:
  - First release of puppet-extras containing the following modules:
      - augeas
      - augeasproviders_core
      - concat
      - concat
      - etcd
      - gluster
      - haproxy
      - hocon
      - host_core
      - hosts
      - inifile
      - kmod
      - nsswitch
      - puppet_authorization
      - puppetserver
      - r10k
      - stdlib
      - translate
      - yaml_settings


author: Romain Fihue <romain.fihue@cea.fr> - 2.6-19_g07ba664
changelog:
  - nsswitch: Update to 2.2.0
    - Add chrony module
    - Add snmp
    - Patch gluster
    - add ipcalc module
    - Add rsyslog module
    - Add ntp module


author: Romain Fihue <romain.fihue@cea.fr> - 4.10.12-1.ocean1
changelog:
  - Repackaged Puppet 4.x into standalone RPM
  - Fix replace_file in util.rb (chown done even if euid != 0)


author: Romain Fihue <romain.fihue@cea.fr> - 4.10.12-1.ocean4
changelog:
  - Make systemd service provider the default one for RHEL8
  - lookup: Try a lookup without splitted key (if key is dotted) before doing sublookups
  - Patched report dumping to yaml with commits from PUP-7381 PR
  - Disabled report dumping to yaml and added a deprecation warning
  - Add a missing require in resource/catalog.rb that breaks puppet-ls


author: Romain Fihue <romain.fihue@cea.fr> - 4.10.12-1.ocean5
changelog:
  - Do not fail when some lookup are not okay
    => ::foo.bar was failing if ::foo exists and is not a hash


author: Romain Fihue <romain.fihue@cea.fr> - 5.3.4-1.ocean1
changelog:
  - Build Puppetserver for ocean 2.6
    - Explicitly using trapperkeeper-jetty9 1.8.1 for compatibility


author: Francois Diakhate <francois.diakhate@cea.fr> - 0.4.3-1.ocean1
changelog:
  - First Ocean release
  - Fix Roles API
  - Fix urllib3 exception catching
  - Dont retry 3 times before switching to the next server
  - Dont print warnings when a server is not available


author: Francois Diakhate <francois.diakhate@cea.fr> - 0.4.3-1.ocean3
changelog:
  - Repopulate cache once all servers have been exhausted
  - Use a separate smaller timeout for connect to better handle missing servers
  - Catch more HTTP exceptions and try next server when they happen


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.0-1.ocean2
changelog:
  - Applying patches present on TGCC:
    - Fix the way yumsync lists packages, it was not recursive
    - Change default options of 'createrepo': 4 worker and an explicit package list
    - Create a 'filelist' file containing discovered RPMs.


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.0-1.ocean3
changelog:
  - Rebase the following patches on github version :
    - Implement-generic-labels-like-stable.patch
    - Implement-multiple-local_dir-items-in-the-same-repo.patch
    - Create-a-filelist-file-which-lists-included-RPMs.patch
    - Implement-a-way-to-symlink-individual-RPM-files.patch
    - Performance-optimisations.patch
    - Enhance-progress-CLI.patch
    - Enhance-multiprocessing-by-adding-p-and-w-options-to.patch
    - Fix-default-paths.patch
    - Implement-a-relocate-option.patch


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.1-1
changelog:
  - 1855608 1.3.1 release
  - a1eb6bd Re-implement multithreading in createrepo_c usage
  - 5779f3a Fix python shebang
  - 864caf5 Fix project dependencies
  - 5c87ca1 Use libdnf+rpm instead of yum
  - f950ff2 Fix python2/3 subtilities
  - 21dc755 Enhance logging by using python-logging


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.2-1
changelog:
  - 568b8ae Validate packages that are not signed/trusted
  - e7a74f0 Fix py2/py3 multiprocess compat
  - 145bb72 Fix a2fa2727e commit when not multithreading metadata build
  - 6e9d5fd yumsync.util: Py2 compat
  - 3f58321 Make tempfile/dirs cleaned up
  - dc87f55 Reuse comps and modules from synced repo and build metadata with it
  - 2217d10 Fix a progress monitor issue
  - a2fa272 Fix package hrefs in metadata
  - 3b5cfa3 Add a -S option to disable UI and multiprocess (for debug)


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.2-4
changelog:
  - Fix excludepkgs/includepkgs handling with libdnf
  - Sqlite DBs should be XZ-compressed for compatibility
  - Fix modular packages listing by disabling modular_excludes (repo.module_hotfixes=True)
  - Fix package counts in progess UI.
  - Fix a syntax error in DNF query
  - Fix logger calls in /usr/bin/yumsync


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.3-1
changelog:
  - Do not hide progress if errors are envountered
  - Do not fail with download errors
  - Use a separate DNF cache from the system
  - Make 'local_dir' package counts stable
  - Modular MD: Combine module MD with 'local_dir' repos


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.3-2
changelog:
  - Fix 'individual_symlink' paths handling, issue reported by Bull
  - Remove useless warning that requires some python3 dependencies


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.3-3
changelog:
  - Apply patches that remove duplicate RPMs from metadata build in 'local' builds
     yumrepo: Adapt mask values to older version of rpm (EL7)
     yumrepo: Deduplicate RPM from local repo if "nevra" are the same
     yumrepo: Collect RPM header for later usage
     yumrepo: Fix dnf error object message handling


author: Romain Fihue <romain.fihue@cea.fr> - 1.3.3-4
changelog:
  - Enhance logging (adds a -l option and change default log location)
      - v1.3.3-0007-log-Change-default-log-destination.patch
      - v1.3.3-0010-Fix-logfile-location.patch
      - v1.3.3-0011-Remove-unused-import.patch
      - v1.3.3-0012-Improve-logging-and-some-checking-at-start-ti.patch
  - Enhance metadata build for better scalability and modular/comps metadata merge
      - v1.3.3-0008-metadata-Change-build-process-to-enhance-scal.patch
      - v1.3.3-0013-Implement-a-way-to-merge-comps-metadata.patch


author: Aurelien Degremont <aurelien.degremont@cea.fr> - 1.5-1.ocean1
changelog:
  - Add 2 patches from master branch
    > Fix error with tuning.conf handling
    > Improve return code handling


author: Dominique Martinet <dominique.martinet@cea.fr> - 1.5-2.ocean1.st1
changelog:
  - local st patches:
    > Start order: Always start MDT-0000 before other MDTs.
    > Dry-run: do not call set_status directly from _launch.
    > Lustre: add a --nounload option.
    > status: add option --no-ha to not check HA.
    > Status: disable mountdata check by default unless needed at display level.
    > Lustre.Target: make mountdata multiple choice.
    > Lustre start order: always start MDT before OST.


author: Thomas Leibovici <thomas.leibovici@cea.fr> - 1.5-2.ocean1.st2
changelog:
  - Add patch from master branch:
    > Lustre.Action.Fsck: ev_error workaround for ClusterShell 1.8.0
  - Local st patch:
    > Client.py: Enhance multimount of same FS


author: Dominique Martinet <dominique.martinet@cea.fr> - 1.5-12.g6f70505.ocean1
changelog:
  - Rebase to public commit v1.5-12-g6f70505
  - All unlanded patches listed below
  - New patch for lnet_conf option to behave like lnet.service
  - Update spec file to be rhel8 compatible (needs external python2-clustershell)


author: Dominique Martinet <dominique.martinet@cea.fr> - 1.5-12.g6f70505.ocean3
changelog:
  - Move script back to sbin
  - Rebased spec based on upstream spec
  - ... heavily modified to work on el8


author: - slurm-18.08.6.ocean1 - <regine.gaudin@cea.fr>
changelog:
  - Fix sacct -j start time bug: slurm-18.08.6-sacct-job-start-time.patch
  - Rebuild for Ocean2.7
  - Adapt slurm-17.11.5-hwloc_optimization.patch in task_cgroup_cpuset to slurm-18.08.6: slurm-18.08.6-hwloc_optimization.patch
  - Fix user_name intead of from_name in sender building slurm-18.08.4-mail-from-user-config.patch
  - Added freeipmi-devel and lua-devel as BuildRequires
  - Add pmix and multiple_slurmd in spec file be aware that ?with_multiple_slurm/pmixd is required and not ?_with_multiple_slurmd/pmix
    as bcond does not work properly
  - Adapt patches used in slurm-17.11.6 if needed for slurm-18.08.4:
    Adapt patch slurm-17.11.6-drain_on_uid_not_found_batch_and_interactive.patch to slurm-18.08.4: slurm-18.08.4-drain_on_uid_not_found_batch_and_interactive.patch
    Adapt patch slurm-17.11.6-avoid_set_slurmd_addr.patch to slurm-18.08.4: slurm-18.08.4-avoid_set_slurmd_addr.patch
    Adapt patch slurm-17.11.6-plugins-for-pam-slurm.patch to slurm-18.08.4: slurm-18.08.4-plugins-for-pam-slurm.patch
    Adapt patch slurm-17.11.6-mail-from-user.patch to slurm-18.08.4: slurm-18.08.4-mail-from-user.patch
    Adapt patch slurm-17.11.6-from-user-config.patch to slurm-18.08.4: slurm-18.08.4-mail-from-user-config.patch
    Adapt only last missing part of slurm-17.11.5_fix_dynamic_knl_feature_plugin.patch: slurm-18.08.4_fix_dynamic_knl_feature_plugin.patch
  - Add a patch to include jobid in message when writing thru logger daemon as it is done when writing in a logfile.
  - Add a patch to send mails with From:job_user@server in mail header
  - Add options in slurm configuration file to control that feature
  - Race condition on nodes list leads to segv of the controller while reconfigure : slurm-17.11.6-race_condition_route_topology.patch
    Add slurmctld epilog call when deadline jobs are encountered : slurm-17.11.6-deadline.epilog.patch
    Add batch jobs environnement variables in epilog controller for deadline jobs relaunch purpose : slurm-17.11.6-set_env_variables_in_epilog.patch
  - Bad parallelism management in pmi_server leading to resource contention and failure of srun
    with loop of multiple mpi monoprocesses.
    patch: slurm-17.11.6_pmi_server.patch
  - Compile with pmix-1.2.5 and pmix-2.1.4
  - Suppress double malloc in kvs_put from PMI2-KVS-data-structure-is-improved-by-using-xhash_t.patch
    Replaced PMI2-KVS-data-structure-is-improved-by-using-xhash_t.patch
    patch: PMI2-KVS-data-structure-is-improved-by-using-xhash_t_2.patch
  - Use hash implementation for PMI2 for improving performance
    patch. PMI2-KVS-data-structure-is-improved-by-using-xhash_t.patch
  - Remove protection on read/write
  - Protects read/write functions to PMIi_WriteSimpleCommand and PMIi_ReadCommand
   and adds mutex for thread-safety slurm-pmi2.patch
  - Unresolved slurmdb_conf symbol in plugins
    lead to dlopen plugings failure of pam_slurm preventing to be
    allowed to ssh to allocates nodes, so link plugind with slurmfull.so
    patch: slurm-17.11.1-plugins-for-pam-slurm.patch
  - Enable to set AVOID_SET_SLURMD_ADDR to avoid preloading slurmd addr
    at slurmctld startup and defer the loads while attempting connections
    patch: slurm-17.11.1-avoid_set_slurmd_addr.patch
  - Adapt patch slurm-17.11.0-0rc2_fix_dynamic_knl_feature_plugin.patch to 17.11.5
  - Drain nodes when uid/guid not found
  - Adapt patch slurm-17.11.0-hwloc_optimization.patch to 17.11.5
  - Restrict access to readonly db for coordinator


author: - slurm-18.08.6.ocean2 - <regine.gaudin@cea.fr>
changelog:
  - Fix --mail-user and MailFromDomain wrong appending : slurm-18.08.6-mail-from-user-config.patch
  - Fix sbcast jobpackid inconsistancy adding for protocol slurm.17 slurm-18.08.6-bug7080-sbcast-jobpackid.patch
  - Add debuginfo in slurm.spec


author: - slurm-18.08.6.ocean3 - <regine.gaudin@cea.fr>
changelog:
  - Avoid filling slurmctld log under-allocated message due to double deallocation of job's resources
    slurm-18.08.6-war-double-deallocation-job-resources.patch


author: - slurm-18.08.6.ocean4 - <regine.gaudin@cea.fr>
changelog:
  - Fix inappropriated maxsize check unpackmem size, valid for array but not mem : slurm-18.08.6_bugfix_maxsize_unpackmem.patch


author: - slurm-18.08.6.ocean5 - <regine.gaudin@cea.fr>
changelog:
  - Add patch from schedmd CVE-2019-19728.patch
  - Fix debug function scope too large via export from libslurmfull, makes app using debug call segv: slurm-18.08.6-debug-scope-too-large.patch
  - Backport patches for memory leak fixed in slurm19 : slurm-18.08.6-fix_memory_leak.patch
  - Add --with-libcurl for jobcomp/elasticsearch plugin generation


author: - slurm-18.08.6.ocean6 - <regine.gaudin@cea.fr>
changelog:
  - Add patch for large mpmd submission from 64K to 256K ranks : slurm-18.08.6-increase_max_ranks.patch
  - Fix typo in coordinator patch
  - Suppress two deadline patchs for memory leak as deadline no more used : slurm-17.11.6-deadline.epilog.patch and slurm-17.11.6-set_env_variables_in_epilog.patch


author: - slurm-18.08.6.ocean7 - <regine.gaudin@cea.fr>
changelog:
  - Add timeouts in elasticsearch plugin because of potential deadlock of slurmctld if http server is not responding : slurm-18.08.6-elasticsearch.patch


author: - slurm-18.08.6.ocean8 - <regine.gaudin@cea.fr>
changelog:
  - Fix race condition in route-topology leading to segfault of slurcmtld : slurm-18.08.6-fix-segfault-adding-slurmctldlock-route-topology.patch


author: - slurm-18.08.6.ocean9 - <regine.gaudin@cea.fr>
changelog:
  - Add null string for undefined job_desc.tres in jobsubmit.lua:  slurm-18.08.6-add-null-string-undefined-tres-jobsubmit-lua.patch


author: - slurm-18.08.6.ocean10 - <regine.gaudin@cea.fr>
changelog:
  - Add pam_slurm_adopt modifications for nice dcv : slurm-18.08.6-pam_slurm_adopt.patch
  - Add CVE provided by schedmd : cve-2020-27745.patch


author: - slurm-18.08.6.ocean6 - <regine.gaudin@cea.fr>
changelog:
  - Add patch for large mpmd submission from 64K to 256K ranks : slurm-18.08.6-increase_max_ranks.patch
  - Fix typo in coordinator patch
  - Suppress deadline patchs for memory leak and deadline no more used : slurm-17.11.6-deadline.epilog.patch and slurm-17.11.6-set_env_variables_in_epilog.patch


author: HAUTREUX Matthieu <matthieu.hautreux@cea.fr> - 0.2.5-1
changelog:
  - Correct a bug in --x11=first|last management, ensuring that only the
    targeted nodes performed X11 related actions


