pam-config NEWS -- history of user-visible changes.

Copyright (C) 2006-2024 Thorsten Kukuk <kukuk@suse.com>.

Please enter bug reports at https://github.com/SUSE/pam-config/issues

Version 2.11
* pam_gnome_keyring: use option in AUTH

Version 2.10
* Enable session and account support for kanidm and himmelblau

Version 2.9
* Add support for kanidm

Version 2.8
* Replace aad PAM module with himmelblau

Version 2.7
* Add support for PAM aad module

Version 2.6
* pam-config: Remove pam_cracklib if not installed, and no successor

Version 2.5
* pam_wtmpdb: add skip_if option

Version 2.4
* Read postlogin files, too

Version 2.3
* Add silent_if option to pam_lastlog2

Version 2.2
* Fix ecryptfs and fscrypt support
* Add support for pam_wtmpdb

Version 2.1
* Bug fix release

Version 2.0
* Add support for pam_fscrypt
* Add support for pam.d/common-session-nonlogin
* Add support for pam.d/postlogin-{account,auth,password,session}

Version 1.9
* Add support for pam_lastlog2

Version 1.8
* Move systemd_home after all optional modules (#13)
* Add pam_u2f support [bsc#1115512]

Version 1.7
* Correctly handle --service option with /usr/lib/pam.d and /usr/etc/pam.d

Version 1.6
* Create /etc/pam.d if it does not exist
* Support file option of pam_pwhistory

Version 1.5
* Don't print an error message if one of the systemd PAM modules
  does not exist if creating the *-pc files [bsc#1191528]
* Drop pam_systemd_home again [bsc#1191528]

Version 1.4
* Fix support for mulitple locations for configuration files

Version 1.3
* Add support for pam_pwquality
* Replace pam_cracklib with pam_pwquality
* Add pam_systemd if installed and we create a new configuration
* Change check for existence of a Module

Version 1.2
* Change /usr/share/defaults to /usr/etc

Version 1.1
* Enhance comments in common-*-pc files

Version 1.0
* Implement search path for config files, so that they /etc/pam.d/
  can only contain the changes, but not the original files.

Version 0.96
* Add missing pam_cracklib options [bsc#1114835]

Version 0.95
* Fix replacing pam_unix2 and pam_pwcheck

Version 0.94
* Add support for pam_keyinit

Version 0.93
* pam_cracklib: add enforce_for_root option

Version 0.92
* Add support for pam_kwallet5

Version 0.91
* Automatically replace obsolete PAM modules if no longer installed.
* Extend error messages for wrong arguments.

Version 0.90
* pam_unix: adjust for changes made in Linux-PAM 1.3.0

Version 0.89
* Add pam_google_authenticator [bsc#888149].
* For dual stack, check for libpam.so.0, too.

Version 0.88
* Add pam_ecryptfs to password section [bsc#895096].

Version 0.87
* Add support for pam_access.

Version 0.86
* Revert last change regarding sha512.

Version 0.85
* pam_unix: use sha512 and shadow flags by default on new installations.

Version 0.84
* pam-config: don't print wrong error messages.

Version 0.83
* pam_unix: Fix pam_unix.so handling, add more options.

Version 0.82
* pam-config: use pam_unix and pam_cracklib per default.

Version 0.81
* pam_ssh: Fix usage of try_first_pass option
* pam_ecryptfs: Move after pam_unix2, even if this will not work with krb5

Version 0.80
* Add pam_systemd and pam_ecryptfs [bnc#752851].

Version 0.79
* Make pam_lastlog optional [bnc#686034].
* Document that if symlinks don't point to *-pc files config is ignored
  [FATE#310739].

Version 0.78
* Add support for pam_fprintd
* Move pam_env.so at the end of session stack

Version 0.77
* Fix lib64 checks
* Add support for pam_sss.so

Version 0.76
* Add support for pam_fprint.so

Version 0.75
* Add support for pam_exec.so in password rules
* Rewrite pam_make.so statements to use pam_exec.so

Version 0.74
* Fix typo
* Update translations

Version 0.73
* Add support for pam_passwdqc
* Print warning if cracklib-minlen <= 5 is used

Version 0.72
* enable use_authtok and support new option only_if in
  pam_gnome_keyring.

Version 0.71
* re-add lost query option

Version 0.70
* Fix try_first_pass option for pam_ssh.

Version 0.69
* Add --verify option.
* pam_cracklib is now default instead of pam_pwcheck.

Version 0.68
* Update translations.
* use relative links.

Version 0.67
* Update translations.
* Add type option for pam_pwhistory.

Version 0.66
* Add support for pam_gnome_keyring.

Version 0.65
* fix error at option parsing.
* update translations.

Version 0.64
* Add support for pam_selinux.

Version 0.63
* Add support for pam_pwhistory.

Version 0.62
* Add support for pam_fp.

Version 0.61
* Print correct error message if sanity check fails
* Fix the lost of values in case of some string options.

Version 0.60
* Create manual page from internal pam-config data
* Remove obsolete pam_pwcheck options 

Version 0.59
* skip unix password change for uid > 999 in case of krb5 is used.
* set LANG=C when running checks
* Update translations.

Version 0.58
* return correct query result in case of --ldap vs. --ldap-account_only

Version 0.57
* Bug fix

Version 0.56
* Modifications for autobuild

Version 0.55
* Add pam_csync support

Version 0.54
* Add pam_ssh support (to start ssh-agent, not for authentication)

Version 0.53
* Better debug messages on writing config files
* Fix handling of backup files
* Update translations

Version 0.52
* fix missing pam_localuser
* update localization files

Version 0.51
* adapt krb5 support to new pam_krb5 version

Version 0.50
* Rewrite commandline option handling for all modules
* Add support for pam_group and pam_time

Version 0.27
* Move write_config after sanitize_check calles

Version 0.26
* Add support for ldap-account_only

Version 0.25
* Bug fixes

Version 0.24
* Bug fixes
* Added testsuite

Version 0.23
* Bug fixes
* Add support for pam_thinkfinger

Version 0.22
* Bug fixes
* Add pam_ck_connector support

Version 0.21
* Add translations
* Bug fixes
* Add pam_mount and pam_cryptpass support

Version 0.20
* Rewrite of internal interfaces

Version 0.16
* Add support for pam_loginuid.so and pam_lastlog.so

Version 0.15
* Fix -d handling of minlen option of pam_pwcheck

Version 0.14
* Support ignore_unknown_principals option of pam_krb5
* Support minlen=0 option for pam_pwcheck

Version 0.13
* Bug fixes
* Add support for pam_capability
* Add pam_apparmor only as optional

Version 0.12
* Fix debug flag handling if changing from pam_cracklib to pam_pwcheck

Version 0.11
* Changes to account stack with krb5 and ldap
* Add support for pam_umask.so

Version 0.10
* Fix first install if pam-modules was updated before
* Document missing options in manual page

Version 0.9
* Support minimum_uid option of pam_krb5.so
* Rename pam_krb5afs.so to pam_krb5.so

Version 0.8
* Add pam_nam.so support (LUM)
* Add no_obscure_checks for pam_pwcheck.so

Version 0.7
* Add pam_cracklib support.
* Add pam_apparmor support.
* Fix stacking of pam_ldap in auth section.

Version 0.6
* Add query option for YaST2

Version 0.5
* Bug fixes
* Implement --update

Version 0.4
* Add pam_ccreds and pam_pkcs11 support
* Add sanity checks
* Check if modules are installed

Version 0.3
* Add pam_ldap and pam_krb5 support

Version 0.2
* Add documentation

Version 0.1
* Initial release 

