2006-01-09  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: PR #1325395 - add "disconnect_every_op" option that forces
	pam_mysql to disconnect from the database every operation.
	(pam_sm_chauthtok): PR #1338667 - stop using getuid() and use geteuid()
	instead. PR #1338672 - allow root to change the passwords of other users
	without their old password.
	* acinclude.m4: check PAM_AUTHTOK_RECOVERY_ERR availability, for
	Linux PAM's error.
	* README: note about disconnect_every_op.

2005-09-23  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: (pam_mysql_parse_args): change option parsing behaviour
	so "=" following each option name is not needed.
	(pam_sm_authenticate): fix try_first_pass behaviour. fix behaviour so that
	the password obtained in a conversation is always stored with
	pam_set_item().

2005-09-21  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: add "logrhostcolumn" option.
	#define PAM_SM_* so that pam_mysql.c can be linked statically to libpam.
	static'ify some functions.  s/pam_permit_modstruct/pam_mysql_modstruct/.
	(pam_mysql_stream_skip_spn): fix invalid assumption of an uninitialised
	variable.
	(pam_mysql_get_host_info): new function.
	(pam_mysql_destroy_ctx): add missing xfree(ctx->config_file) to avoid
	leak.
	* configure.in: checks for netdb functions / IPv6 availability.
	* acinclude.m4: ditto.
	* README: add description about logrhostcolumn.
	* NEWS: note about logrhostcolumn.

2005-09-20  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: prevent blocks obtained from pam_get_item() from being
	freed.
	(pam_mysql_check_passwd): do not escape the content of the "where" option.
	Fixes PR #1261484.
	(pam_mysql_sql_log): remove weird codes. Fixes PR #1256243.

2005-09-18  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* README: add a note about the issue regarding official MySQL binary
	packages.
	* NEWS: prepare for the release.
	* pam_mysql.c: (pam_mysql_format_string): change column name handling
	to allow an expression for every XXXcolumn parameter.

2005-08-01  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* acinclude.m4: (PAM_MYSQL_CHECK_LIBMYSQLCLIENT): remove redundant
	eval. Will fix PR #1245188.

2005-06-24  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: implement use_first_pass and try_first_pass options
	to follow the convention. make debug option an alias for verbose.
	(pam_sm_authenticate): return authentication token to the PAM
	implementation (by pam_set_item()).
	(pam_sm_chauthtok): return authentication token to the PAM implementation.
	(pam_mysql_check_passwd): don't update password column if crypt=md5
	and non-crypt md5 is not implemented. use statically allocated buffer
	for make_scrambled_password().
	* README: note about debug, use_first_pass and try_first_pass.
	* NEWS: use_first_pass and try_first_pass.

2005-06-23  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: (pam_mysql_check_passwd): fix buffer overflow spotted in
	verification of SHA1-encrypted password.

2005-06-19  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: add use_323_passwd option for compatibility with
	the old MySQL PASSWORD() implementation (inspired by Daniel Renaud.
	Thanks.)
	(pam_sm_acct_mgmt): add a missing piece of code to the account management
	callback. I don't know why I didn't notice this before the last release.
	* acinclude.m4: (PAM_MYSQL_CHECK_LIBMYSQLCLIENT) ditto.
	Fix compile failure on Solaris when --with-openssl is specified to
	configure.
	* .cvsignore: add pam_mysql.spec
	* README: note about statcolumn / use_323_passwd.

2005-06-17  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* acinclude.m4: old mysql_config doesn"t accept --include option.
	this resulted in sed errors in config.status. Reported by Worlfgang
	Erlenkoetter. Thanks.
	* configure.in: a hyphen is not allowed for the "Version" section in
	a spec file.
	* .cvsignore: add .orig and .rej.
	* pam_mysql.spec.in: require OpenSSL by default.

2005-06-16  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* acinclude.m4: fix library detection code: s/shrext/shrext_cmds/. use
	$libext instead of ".a" for library suffices.

2005-06-15  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* README: fix description about config_file. add missing description
	for option "MD5". note about the GPL issue.
	* pam_mysql.c: SHA1 support (requires OpenSSL).
	* NEWS: entry for 0.7-pre2.
	* configure.in: add pam_mysql.spec to AC_OUTPUT. Noticed by Fredrik
	Rambris (boost at users dot sourceforge dot net). Thanks.
	* Makefile.am: add pam_mysql.spec and pkg.m4 to EXTRA_DIST. Notices by
	Fredrik Rambris (boost at users dot sourceforge dot net).
	* COPYING: replace by GPL terms, were accidentially LGPL ones.

2005-06-13  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: s/crypt/crypt_type/ due to possible namespace pollution.
	* acinclude.m4: (PAM_MYSQL_CHECK_LIBMYSQLCLIENT) check mysql_config
	availability for more accurate detection.
	* README: misc. documentation fixes.
	* INSTALL: ditto.

2005-06-12  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c:
	- remove redundant #include <pam_misc.h> that caused compatibility
	  problem.
	- #define PAM_EXPORT / LOG_AUTHPRIV if undefined.
	- #include <pam_appl.h> beforehand of #include <pam_module.h> as Sun's
	  implementation doesn't really take inclusion order into account.
	- include crypt.h if available.
	(pam_sm_open_session): log session state, to fix PR# 1047213.
	(pam_sm_close_session): ditto.
	(pam_sm_authenticate): log authentication failure as well.
	* NEWS: note about above.
	* configure.in: add /usr/lib/security and /usr/lib/pam to module
	search path.
	* acinclude.m4:
	(PAM_MYSQL_CHECK_PAM): remove redundant checks for pam_misc.h.
	(PAM_MYSQL_CHECK_PROTOS): add for compatibility.

2005-06-07  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: initialize statcolumn to "1" (for the sake of
	backwards compatibility) on start and free on exit. This fixes
	the bug reported by Deniss from Latvia. Thanks.
	* configure.in: include pkg.m4 (from pkgconfig 0.17.2 which is covered
	by GPL) to deal with the case pkg-config devel package is not installed.
	* pkg.m4: added.
	* autogen.sh: run libtoolize prior to aclocal.
	* README: remove note about default values, as those ones no longer
	exist for string parameters. added notes for undocumented options (verbose,
	config_file).
	* NEWS: updates for expected releases.

2005-03-28  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* pam_mysql.c: uncapitalize log message. fix log level in
	pam_mysql_set_option(). add missing PAM_MYSQL_LOG_PREFIX to
	syslog() params. add support for nss-mysql style external configuration
	file.
	* acinclude.m4: add PAM_MYSQL_CHECK_DEFINES macro.
	* configure.in: add checks for ELOOP and EOVERFLOW constants, which are
	used in pam_mysql_stream_open().
	* Makefile.am: add install-sh, missing and mkinstalldirs to EXTRA_DISTS.

2005-03-27  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* README: add CVS tags and note about unix socket / non-default port
	number support.
	* INSTALL: add CVS tags.
	* pam_mysql.c: add CVS tags. fix typo.
	* NEWS: reformat and add entry for 0.6.

2005-03-23  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* README: add a notice about md5() crypt.

2005-03-22  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* COPYING: this should have been there..
	* pam_mysql.c: add missing license terms.
	* Makefile.am: ditto.
	* ChangeLog: fix indentation.

2005-03-12  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* acinclude.m4: fix PAM_MYSQL_CHECK_OPENSSL to correctly
	check the library availability with the appropriate
	linker options.

2005-03-11  Moriyoshi Koizumi  <moriyoshi@users.sourceforge.net>

	* acinclude.m4: add new macros -- PAM_MYSQL_CHECK_MD5_HEADERS,
	PAM_MYSQL_CHECK_CYRUS_SASL_V1, PAM_MYSQL_CHECK_CYRUS_SASL_V2
	to deal with the "bogus" md5.h issue.
	* configure.in: add two new options --with-cyrus-sasl /
	--with-cyrus-sasl2. fix OpenSSL detection. bump package version.
	* pam_mysql.c: conditionally include <md5global.h> if Cyrus SASL
	is available and enabled by --with-cyrus-sasl or --with-cyrus-sasl2.
	* NEWS: renamed from Changelog
	* ChangeLog: genuine ChangeLog :)
	* INSTALL: detailed installation instruction in there.
	* README: note about forking.
	* Makefile.am: correct typos, synchronize EXTRA_DISTS with new
	additions.
	* pam_mysql.spec.in: synchronization against new additions.
