All notable changes to this project will be documented in this file. Each new release typically also includes the latest modulesync defaults. These should not affect the functionality of the module.
v7.0.2 (2024-01-06)
Fixed bugs:
Closed issues:
- Parameter suffix failed, because of too restrictive patterns in openldap/lib/puppet/type/openldap_database.rb #396
- cn=accesslog database: Parameter suffix failed #391
v7.0.1 (2023-12-27)
Fixed bugs:
- Fix openldap_password function to avoid errors with latest Puppet 7 #398 (treydock)
- Fix openldap_schema replace without attribute types #393 (dmaes)
Merged pull requests:
v7.0.0 (2023-07-10)
Breaking changes:
- Drop Puppet 6 support #379 (bastelfreak)
- Grant access to the specified RootDN if one is given #362 (VictorPavlushin)
Implemented enhancements:
- Improve service bootstraping on Debian #387 (smortex)
- Relax dependencies version requirements #385 (smortex)
- Allow management of the package versions installed #384 (gcoxmoz)
- Add olcMultiProvider as a database config parameter #383 (gcoxmoz)
- Add support for Puppet 8 #381 (smortex)
Closed issues:
- Version 6.1.0 breaks disabling nonexistent services #386
Merged pull requests:
v6.1.0 (2023-04-13)
Implemented enhancements:
- Support Ubuntu 22.04 #376 (chrisongthb)
- Add EL9 support #375 (treydock)
- Add EL8 support #373 (treydock)
- Allow to configure more overlays #370 (smortex)
Closed issues:
- dc=my-domain,dc=com entry in Database #366
Merged pull requests:
- Rework default database lifecycle on Debian #372 (smortex)
- Update tests to remove skips #371 (smortex)
v6.0.1 (2023-03-01)
Fixed bugs:
Merged pull requests:
- Document
openldap::server::dbindexin the README #365 (phaedriel) - Remove legacy facts from hiera configuration #364 (smortex)
v6.0.0 (2022-11-22)
Breaking changes:
Implemented enhancements:
Fixed bugs:
- replica chaining to support ldap backend suffix #354 (gotvach)
- Return integers for openldap_database olcSecurity #353 (gcoxmoz)
Closed issues:
- Data type enforcement for openldap_database security is not idempotent #360
v5.0.1 (2022-02-02)
Fixed bugs:
v5.0.0 (2022-01-25)
Breaking changes:
- Drop support for FreeBSD 11 (EOL) #331 (smortex)
- Be more strict with access resource titles / ACL syntax #324 (smortex)
Fixed bugs:
- Fix
$openldap::server::database::dboptionsdata type #348 (smortex) - Fix
$openldap::server::database::securitydata type #347 (smortex) - Fix
$openldap::server::database::limitsdata type #346 (Donatien26) - Fix FreeBSD default database directory #342 (smortex)
- Fix FreeBSD slapd.d bootstrapping #341 (smortex)
- Fix FreeBSD default value for ldapi_ifs #340 (smortex)
- Fix provider for
cn=configbootstrap on FreeBSD #339 (smortex) - Fix
$openldap::server::database::mirrormodedata type #335 (smortex)
Closed issues:
- Wrong data type for
$openldap::server::database::limits#345 - Unable to configure openldap on FreeBSD 13.0-RELEASE #338
$openldap::server::database::mirrormodedoes not enable olcMirrorMode #333undefined method 'flatten' for nil:NilClassin openldap_access provider #294- Documentation for frontend acl is incorrect #282
Merged pull requests:
- Fix suffix of frontend database in README #336 (smortex)
- Simplify some code duplication #332 (smortex)
v4.0.0 (2021-09-27)
Breaking changes:
- Drop support for openldap_access' islast parameter #327 (smortex)
- Drop support of Debian 8, 9 and Ubuntu 16.04 (EOL) #313 (smortex)
- Acceptance tests for CentOS 7 , remove RHEL6 #309 (treydock)
Implemented enhancements:
- Include missing class instead of raising an error #322 (smortex)
- Update FreeBSD package names #321 (smortex)
- Add support for Debian 11 #314 (smortex)
Fixed bugs:
- Fix $openldap::server::database data type #329 (smortex)
- Fix openldap_access's what parameter #326 (smortex)
- Fix data type for openldap::server::overlay::options #320 (smortex)
- Fix data type for $openldap::server::globalconf::value #318 (smortex)
- Fix purging puppet resource openldap_access #315 (smortex)
- Fix type of $openldap::server::access_wrapper::acl #312 (smortex)
Closed issues:
- openldap::server::database initdb data type should support value false #328
- openldap::server::overlay does not allow tuples as options #319
- Regression in treatment of Globalconf #317
- Purging openldap_access is highly unreliable. #280
v3.1.0 (2021-08-28)
Implemented enhancements:
Fixed bugs:
Closed issues:
- Modernizing the module #270
Merged pull requests:
v3.0.0 (2021-08-11)
Breaking changes:
Implemented enhancements:
- Add support for Ubuntu 20.04 #303 (smortex)
- Add support for Debian 10 #302 (smortex)
- Add support for FreeBSD 13 #301 (smortex)
- Add data types for all parameters #300 (smortex)
- Remove slapd_sockets shellvar when empty #299 (smortex)
- Switch to regular OpenLDAP packages on FreeBSD #296 (smortex)
- Move from params.pp to Hiera data #287 (smortex)
- Bootstrap cn=config database on FreeBSD #278 (HerveMARTIN)
- Add support for Suse and SLES #275 (SimonHoenscheid)
- Remove dead code #269 (smortex)
- Add support for FreeBSD #267 (smortex)
- Catch olcAccess regex parse failures #264 (spakka)
Fixed bugs:
- Fix starting LDAP on Suse #298 (smortex)
- Fix warning about malformed YAML file #285 (smortex)
- Unbreak with Puppet 7.4.0 / 6.21.0 on Debian 10 #284 (smortex)
Closed issues:
Merged pull requests:
- Update badges in README.md #308 (root-expert)
- puppetlabs/stdlib: allow 7.x #305 (smortex)
- Add management of TLS_MOZNSS_COMPATIBILITY to ldap.conf #272 (gcoxmoz)
2.0.0 (2020-03-02)
- update dependencies and Puppet version #261 (Dan33l)
- declare this module as compatible with ubuntu1804 #260 (Dan33l)
- Port openldap_password() to Puppet 4.x function API #258 (raphink)
- Fix acceptance #257 (raphink)
- Convert to PDK #254 (raphink)
- add parameter nss_initgroups_ignoreusers #253 (tobiWu)
- Mark test as pending #252 (mcanevet)
- Fix title_patterns to support multiple fields in what #250 (raphink)
- add sssvlv overlay compatibility #247 (clement-dufaure)
- Add support for back_ldap and specific values of attrs in ACLs #246 (jdow)
- Fix regexp in access_wrapper #243 (amateo)
- Enable usage of puppetlabs-stdlib 5.x.x #240 (jacksgt)
- Fix regex for group-based limits #235 (kasimon)
- Add socks support #233 (jas01)
- Fix usage of slapcat when removing an overlay #232 (treydock)
- Fix setting ACL if they had been set before #230 (fklajn-opera)
- cn can be in uppercase #190 (Poil)
- Add support for back_sock #173 (jas01)
- Support SASL and GSSAPI options in ldap.conf #165 (modax)
- Drop legacy PE statement and puppet_version in metadata.json
- Bump to minimal recommended Puppet version
- Bump stdlib to 4.13.1 to get data types
- Replace validate_* calls with datatypes
- Drop legacy tests
- Add Archlinux support (GH #187)
- Ensure that the password is hashed on db creation
- Set sensible default for dbindex attribute
- Rewrite openldap_password to use native Ruby
- Fix title patterns to no longer use unsupported proc (GH #222)
- Remove Debian 6 support and add Debian 9
- Fix openldap_overlap to perform add operation when adding new options
- Support schema update via OLC
- Add support to modify openldap_schema resources
- Fix metadata.json
- Fixed bug for spaces in the "by" section of the rule
- Allow to set rewrite overlay with a relay database
- Fixes errata - puppet creates a rwm overlay every runs
- Any prefixed numbers should be absent in the options
- Refactor openldap::server::access
- Add security attribute to database resource
- Syncrepl now run idempotently
- Use ldapmodify function instead of the slapdd which is not defined
- Support Amazon linux 2015+ and make version checks more flexible
- Mod global conf
- Fix variables out of scope
- Make NETWORK_TIMEOUT a configurable option
- Use contain instead of include
- Fix ordering so that Openldap::Server::Globalconf resources will come after the openldap service
- Change updateref order to avoid error ' must appear after syncrepl or updatedn
- Adding dbmaxsize parameter for big dbs
- Remove requirements from metadata.json
- Supports SHA2 password
- Allow openldap::client config values to have 'absent' value remove the entry from ldap.conf
- openldap_database: Default to mdb for new Ubuntus
- Add base provider that implements common commands and methods and use it
- Fixed an idempotency issue on the syncrepl variable
- Fix idempotency issue when ensuring absent of multiple databases
- Add support for the rwm overlay (issue #117)
- Manage line breaks in overlay config and add smbk5pwd overlay support (issue #122)
- Avoid duplicate declaration of openldap-clients package (issue #123)
- Allow dn, filter and attrs to be defined concurrently (issue #124)
- Fix for frontend and config databases
- Add serveral params for ldap.conf to openldap::client.
- Add timeout and timelimit options
- Add sudo options
- Add binddn and bindpw options to ldap client
- Add objectClass for the unique overlay
- Support for adding access based on olcDatabase
- Fix prefetch with composite namevars
- Use puppet4 for acceptance tests
- Do not try to hash password if it is given in "{SSHA}" form
- Add cn=config suffix support
- Add readonly support to openldap_database's augeas provider
- Fix ACL changes
- Fix syncprov overlay
- Add support for refint overlay
- Use docker for acceptance tests
- Fix TLS setting on new versions of OpenLDAP
- Add more parameters to openldap::server::database
- Add support for accesslog overlay
- Fix strict_variables activation with rspec-puppet 2.2
- Add missing 'ensure' parameter to 'openldap::server::globalconf'
- Revert "Use ruby to generate idempotent SSHA password (more secure password)
- Add support to configure overlays on a database
- Fix some issues on Ubuntu (no official support yet)
- Update documentation
- Don't convert schema if already in LDIF format
- Add
initdbparam toopenldap::server::databasedefine to allow to not initialize database.
- Add beaker_spec_helper to Gemfile
- Use random application order in nodeset
- add utopic & vivid nodesets
- Don't allow failure on Puppet 4
- Add puppet-lint-file_source_rights-check gem
- Add support for schema
- Don't pin beaker
- Add documentation for puppet::server::globalconf
- Fix Beaker on Docker
- Avoid logging password
- Correct client package name for RHEL
- Add beaker nodesets
- Generate random salt for rootpw instead of using fqdn
- Deprecates openldap_password function
- Fix database destroy
- Fix acceptance tests
- Add more acceptance tests to travis matrix
- Confine pinning to rspec 3.1 to ruby 1.8
- openldap_password does not use slappasswd anymore
- openldap_password is idempotent
- Add MDB backend support
- Remove RedHat 5 support (may still work but not tested on travis)
- Add RedHat 7 support
- Add Debian 8 support
- Database creation don't require nis schema anymore
- Fix openldap_module on RedHat
- Set selinux to permissive on acceptance tests
- Various spec improvements
- Fix specs
- Destroy default database before creating new ones
- Use params pattern
- Some minor fixes
- Fix unquoted strings in cases
- Fix .travis.yml
- Various improvements in unit tests
- Fix metadata.json
- Add future parser tests
- Fix code for future parser
- Migrate tests to rspec 3 syntax
- Use puppet_facts in specs
- Fix acceptance tests
- Fix README
- Use Travis DPL for automatic releases
- Deprecate 2.7 support and add 3.7 support
- Lint metadata.json
- Really setup automatic forge releases
- Setup automatic forge releases
- Change usage : one must explicitely configure an openldap::server::database resource
- Fix service startup on RedHat
- Updated dependencies for augeasproviders
- Acceptance tests refactoring
- Fix for ruby 1.8.7
- Fix overlay
- Use .puppet-lin.rc
- Update travis matrix
- User augeasproviders 2.0.0 and re-enable augeas provider.
- This release add ability to specify ldap* interfaces and thus removes openldap::server::ssl parameter. It also add a new type/provider/define to manage dbindex.
* This Changelog was automatically generated by github_changelog_generator