2016-05-31  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-config.c (main): Extend error messages about invalid
	options.

2016-04-15  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-config.c (replace_obsolete_modules): Replace used, but
	obsolete and no longer installed modules with their successor.

2016-04-14  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-config.8.xml-header: Document some missing options.

	* release version 0.90

	* update autoconf and automake files

2016-04-06  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/mod_pam_unix.c: Adjust list of parameters for new
	pam_unix.so.
	* src/pam-modules.h: Add more macros with different number of
	arguments.

2016-04-01  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.89

	* src/Makefile.am: Add pam_google_authenticator.
	* src/supported-modules.h: Likewise.
	* src/src/mod_pam_google_authenticator.c: New.
	pam_google_authenticator patch from Darin Perusich [bsc#888149].

	* src/sanity_checks.c (check_for_pam_module): Don't check only
	for /lib*/security, but also if /lib*/libpam.so.0 exist.

2014-09-25  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.88

	* src/mod_pam_ecryptfs.c: write PASSWORD rule [bsc#895096].

2014-04-02  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.87

	* src/mod_pam_access.c: New.
	* src/supported-modules.h: Ad pam_access.

2013-02-07  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.86

	* src/pam-config.c (main): Don't set sha512 per default,
	default is now read from /etc/login.defs by pam_unix.so
	[bnc#801970].

2013-02-04  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.85

	* src/pam-config.c (main): Re-add lost sha512 and shadow flags
	to pam_unix when creating common-passwd-pc file [bnc#801970]

2012-11-12  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.84

	* src/pam-config.c (relink): Don't print wrong error messages,
	enable pam_env by default.

2012-09-25  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.83

	* src/pam-module.h (DECLARE_BOOL_OPTS_16): New define for 16
	boolean arguments.

	* src/mod_pam_unix.c: Always use try_first_pass or use_first_pass,
	add all new module options.

2012-09-20  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.82

	* src/pam-config.c: Use pam_unix.so and pam_cracklib.so for
	initial config instead of pam_unix2.so and pam_pwcheck.so.

	* src/supported-modules: make pam_ssh a sufficient
	auth module [bnc#730851].
	* src/mod_pam_ssh.c: Likewise.

2012-08-06  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.81

	* src/mod_pam_ssh.c (write_config_ssh): Remove try_first_pass
	as extra option and write it always in auth section [bnc#773560].

	* src/supported-modules.h: Move pam_ecryptfs after pam_unix2.
	Does not work with krb5, but else it does not work at all [bnc#740110].

2012-04-03  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.80

	* src/Makefile.am: Add mod_pam_ecryptfs.c
	* src/mod_pam_cryptfs: New.
	* src/supported-modules.h: Add pam_ecryptfs.c
	Patch from Darin Perusich <darin@darins.net>, bnc#752851.

2011-08-18  Thorsten Kukuk  <kukuk@suse.de>

	* src/Makefile.am: Add mod_pam_systemd.c
	* src/mod_pam_systemd.c: New.
	* src/supported-modules.h: Add pam_systemd.
	Patch from Frederic Crozat <fcrozat@novell.com>, bnc#700053.

2011-05-10  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.79

	* src/pam-config.8.xml-footer: Document that if symlinks don't
	point to *-pc files config for global modules is ignored
	[FATE#310739].

2011-05-09  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_lastlog.c (write_config_lastlog): Use optional
	instead of required [bnc#686034].

2010-10-13  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.78

	* src/supported-modules.h: Move pam_env to the end of
	session stack.

	* src/Makefile.am: Add pam_fprintd.
	* src/mod_pam_fp.c: Likewise.
	* src/mod_pam_fprint.c: Likewise.
	* src/mod_pam_thinkfinger.c: Likewise.
	* src/supported-modules.h: Likewise.
	* src/mod_pam_fprintd.c: New.
	Based on patches from Frederic Crozat [bnc#644168].

2010-08-31  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.77

	* src/sanity_checks.c (check_for_pam_module): Fix
	check for existence of PAM module on lib64 archs [bnc#635098].

	* src/mod_pam_sss.c: New file (from Ralf Haferkamp).

2010-08-25  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.76

	* src/mod_pam_fprint.c: New file.
	* src/mod_pam_thinkfinger.c: Adjust for pam_fprint.
	* src/mod_pam_mount.c: Likewise.
	* src/supported-modules.h: Likewise.
	* src/mod_pam_fp.c: Likewise.
	* src/Makefile.am: Likewise.

2010-08-11  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.75

	* src/mod_pam_exec.c: New.
	* src/supported-moduels.h: Add mod_pam_exec.
	* src/mod_pam_make.c: Rewrite output to use pam_exec.so.

2010-06-29  Thorsten Kukuk <kukuk@suse.de>

	* release version 0.74

	* src/pam-config.c: Fix typo.

	* po/*.po: Update translations.

2009-12-01  Michael Calmer <mc@suse.de>

	* release version 0.73

	* tests/config/unix.exp: show stderr diff before stdout
	* src/sanity_checks.c: check for cracklib-minlen >= 6 [bnc#539053]
	* src/pam-module.h: add DECLARE_STRING_OPTS_8
	* src/supported-modules.h: add support for pam_passwdqc
	* src/mod_pam_passwdqc.c: Likewise.
	* src/Makefile.am: Likewise.
	* tests/testcases/test-cracklib-string-opts.single: Add testcase
	* tests/single.out/test-cracklib-string-opts.out: Likewise.
	* tests/single.out/test-cracklib-string-opts.err: Likewise.
	* tests/testcases/test-passwdqc.single: Likewise.
	* tests/single.out/test-passwdqc.out: Likewise.
	* tests/single.out/test-passwdqc.err: Likewise.
	* src/pam-config.8.xml: Update manpage
	* src/pam-config.8: Likewise.

2009-07-28  Michael Calmer <mc@suse.de>

	* release version 0.72

	* src/mod_pam_gnome_keyring.c: enable use_authtok and support new
	option only_if.

2009-05-08  Michael Calmer <mc@suse.de>

	* release version 0.71

	* src/pam-config.c: re-add lost query option [bnc#501341].

2009-04-30  Thorsten Kukuk  <kukuk@suse.de>

	* releaes version 0.70

	* src/mod_pam_ssh.c (write_config_ssh): fix writing of
	options in SESSION mode [bnc#499711].

2009-03-25  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.69

	* src/pam-config.8.xml-header: Document --verify option.

	* src/pam-config.c (main): Implement --verify option.

	* src/sanity_checks.c: Add verify option to all functions,
	pam_cracklib is the new default.
	* src/pam-config.h: Adjust sanitizise function prototypes.

2008-12-18  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_pwhistory.c: Rename type option to authtok_type.
	* src/mod_pam_cracklib.c: Likewise.

	* src/pam-config.c (main): Make pam_cracklib default for new config
	[FATE#305468].

2008-12-01  Michael Calmer  <mc@suse.de>

	* release version 0.68

	* src/pam-config.c: fix linking; accept relative links (bnc#450019)
	* tests/: fix some testcases

2008-11-21  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.67

	* po/*.pot: Update translations for cs, pt_BR, fr, sv, ru

2008-11-19  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_pwhistory.c: Add type as string option.

2008-11-10  Michael Calmer  <mc@suse.de>

	* src/mod_pam_gnome_keyring.c: no options in AUTH section.
	(bnc#443189)

2008-11-07  Michael Calmer  <mc@suse.de>

	* release version 0.66

	* src/pam-modules.h: delete option if argument is 0 (bnc#442552)
	* src/mod_pam_pwcheck.c: remove obsolete parsing code

2008-11-07  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_gnome_keyring.c (write_config_gnome_keyring): New
	[bnc#440448].

	* src/Makefile.am (pam_config_SOURCES): Add mod_pam_gnome_keyring.c

	* src/pam-config.c (main): Implement nullok for single services,
	too [bnc#440437].

2008-11-05  Michael Calmer  <mc@suse.de>

	* release version 0.65

	* src/pam-config.c: fix error at option parsing
	* po/: update translation files

2008-10-22  Michael Calmer  <mc@suse.de>

	* src/mod_pam_selinux.c: configure with open and close option.
	* src/supported-modules.h: add pam_selinux

2008-10-21  Michael Calmer  <mc@suse.de>

	* release version 0.64

	* src/mod_pam_selinux.c: New
	* src/supported-modules.h: Add pam_pwhistory.
	* src/Makefile.am (pam_config_SOURCES): Add mod_pam_selinux.c.
	* src/sanity_checks.c: Check that pam_selinux and pam_apparmor are
	not enabled at the same time.
	* po/ : update translations

2008-10-14  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.63

	* src/mod_pam_pwhistory.c: New.
	* src/supported-modules.h: Add pam_pwhistory.
	* src/pam-config.c (main): Enable pam_pwhistory if pam_cracklib
	is enabled for initial config.

	* src/Makefile.am (pam_config_SOURCES): Add mod_pam_pwhistory.c.

	* src/pam-module.h (DECLARE_BOOL_OPTS_10): Add.
	* src/mod_pam_lastlog.c: Add new options.

2008-10-07  Michael Calmer  <mc@suse.de>

	* release version 0.62

	* src/mod_pam_fp.c: New file (FATE#300416).
	* src/mod_pam_thinkfinger.c: check for pam_fp.
	* src/mod_pam_mount.c: Likewise.

2008-10-06  Michael Calmer  <mc@suse.de>

	* release version 0.61

	* src/mod_pam_pwcheck.c: call set_opt with strdup to prevent
	the lost of the value.
	* src/mod_pam_krb5.c: Likewise.
	* src/mod_pam_ssh.c: Likewise.
	* tests/testcases/test-pwcheck-string-opts.single: add testcase

2008-10-03  Thorsten Kukuk  <kukuk@suse.de>

	* src/pam-config.c: If module->getopt returns 2, don't print
	message about wrong option.
	* src/pam-module.h: Return 2 if sanity check fails.
	* src/pam-module.c: Use error code of module->getopt.

2008-09-04  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.60

	* src/mod_pam_pwcheck.c: Remove nisdir.

2008-09-03  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-module.h: Ignore "empty"  key.

2008-09-03  Michael Calmer  <mc@suse.de>

	* supported-modules.h: move pam_group to the beginning of auth.
	Move pam_ssh before the first sufficient module which requires a
	password.
	* src/mod_pam_krb5.c: remove special check for pam_group.

2008-09-01  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-module.h: Add struct and defines for xml output.
	* src/pam-config.c: Add option to print xml output.
	* src/pam-module.c (print_module_xmlhelp): New helper function.
	* src/mod_pam_apparmor.c: Add xml output data/functions.
	* src/mod_pam_ccreds.c: Likewise.
	* src/mod_pam_ck_connector.c: Likewise.
	* src/mod_pam_cracklib.c: Likewise.
	* src/mod_pam_cryptpass.c: Likewise.
	* src/mod_pam_csync.c: Likewise.
	* src/mod_pam_deny.c: Likewise.
	* src/mod_pam_env.c: Likewise.
	* src/mod_pam_group.c: Likewise.
	* src/mod_pam_krb5.c: Likewise.
	* src/mod_pam_lastlog.c: Likewise.
	* src/mod_pam_ldap.c: Likewise.
	* src/mod_pam_limits.c: Likewise.
	* src/mod_pam_localuser.c: Likewise.
	* src/mod_pam_loginuid.c: Likewise.
	* src/mod_pam_make.c: Likewise.
	* src/mod_pam_mkhomedir.c: Likewise.
	* src/mod_pam_mount.c: Likewise.
	* src/mod_pam_nam.c: Likewise.
	* src/mod_pam_pkcs11.c: Likewise.
	* src/mod_pam_pwcheck.c: Likewise.
	* src/mod_pam_ssh.c: Likewise.
	* src/mod_pam_succeed_if.c: Likewise.
	* src/mod_pam_thinkfinger.c: Likewise.
	* src/mod_pam_time.c: Likewise.
	* src/mod_pam_umask.c: Likewise.
	* src/mod_pam_unix2.c: Likewise.
	* src/mod_pam_unix.c: Likewise.
	* src/mod_pam_winbind.c: Likewise.
	* src/Makefile.am: Generate pam-config.8.xml
	* src/pam-config.8.xml-footer: New.
	* src/pam-config.8.xml-header: New.

2008-08-29  Michael Calmer  <mc@suse.de>

	* src/mod_pam_krb5.c: add pam_deny after pam_krb5 in password
	stack. Fix auth stack for modules pam_group and pam_ssh

	* tests/single.out/test-krb5.out: Adapt testcase
	* tests/single.out/test-ldap-account_only.out: Likewise.

2008-08-29  Michael Calmer  <mc@suse.de>

	* release version 0.59

	* src/mod_pam_unix2.c: skip password change for uid > 999
	in case of krb5 is used.
	* src/mod_pam_unix.c: Likewise.

	* src/mod_pam_succeed_if.c: dummy used for feature above.

	* src/supported-modules.h: add mod_pam_succeed_if
	* src/Makefile.am: Likewise.

	* tests/single.out/test-krb5.out: Adapt testcase
	* tests/single.out/test-krb5-ldap.out: Likewise
	* tests/single.out/test-ldap-account_only.out: Likewise.

	* tests/support/header.sh: set LANG=C when running checks

	* po/: Update translations.

2008-08-22  Michael Calmer  <mc@suse.de>

	* release version 0.58

	* src/pam-config.c: query options in ldap-account_only
	not in case of ldap is complete enabled
	* src/mod_pam_ldap.c: query options in ldap only if
	not only ldap-account_only is enabled
	* tests/testcases/test-ldap-account_only.single: test
	query options
	* tests/single.out/test-ldap-account_only.out: Adapted to
	reflect changed testcase

2008-07-28  Sven Schober    <sschober@suse.de>

	* release version 0.57

	* src/mod_pam_mount: Use "optional" instead of "required" in
	session stack [bnc#409541].
	* tests/single.out/test-cryptpass_w_mount.out: Adapted to
	reflect changed behaviour.
	* tests/single.out/test-mount.out: Likewise.

2008-07-14  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.56

	* src/mod_pam_csync.c: Add is_enabled as bool option.

2008-07-10  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.55

	* src/mod_pam_csync.c: New file (FATE#303805).
	* src/supported-modules.h: Add mod_pam_csync.
	* src/Makefile.am: Add mod_pam_csync.c.
	* src/pam-config.8.xml: Add --csync.

2008-06-20  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.54

	* src/supported-modules.h: Add pam_ssh.
	* src/Makefile.am: Likewise.
	* src/mod_pam_ssh.c: New.
	Based on patch from Marius Tomaschewski <mat@mt-home.net>.

2008-05-23  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.53

	* po/*.po: Update translations.

	* src/pam-config.c (relink): Fix handling if called with already
	existing backup file.

	* src/pam-module.c (debug_write_call): New function for better
	debugging.

	* src/mod_pam_unix.c (write_config_unix): Use new debug function.
	* src/mod_pam_apparmor.c (write_config_apparmor): Likewise.
	* src/mod_pam_ccreds.c (write_config_ccreds): Likewise.
	* src/mod_pam_deny.c (write_config_deny): Likewise.
	* src/mod_pam_env.c (write_config_env): Likewise.
	* src/mod_pam_group.c (write_config_group): Likewise.
	* src/mod_pam_krb5.c (write_config_krb5): Likewise.
	* src/mod_pam_lastlog.c (write_config_lastlog): Likewise.
	* src/mod_pam_ldap.c (write_config_ldap): Likewise.
	* src/mod_pam_limits.c (write_config_limits): Likewise.
	* src/mod_pam_localuser.c (write_config_localuser): Likewise.
	* src/mod_pam_loginuid.c (write_config_loginuid): Likewise.
	* src/mod_pam_make.c (write_config_make): Likewise.
	* src/mod_pam_mkhomedir.c (write_config_mkhomedir): Likewise.
	* src/mod_pam_mount.c (write_config_mount): Likewise.
	* src/mod_pam_nam.c (write_config_nam): Likewise.
	* src/mod_pam_pkcs11.c (write_config_pkcs11): Likewise.
	* src/mod_pam_pwcheck.c (write_config_pwcheck): Likewise.
	* src/mod_pam_thinkfinger (write_config_thinkfinger): Likewise.
	* src/mod_pam_time.c (write_config_time): Likewise.
	* src/mod_pam_umask.c (write_config_umask): Likewise.
	* src/mod_pam_unix2.c (write_config_unix2): Likewise.
	* src/mod_pam_winbind.c (write_config_winbind): Likewise.

2008-04-01  Michael Calmer  <mc@suse.de>

	* release version 0.52

	* src/sanity_checks.c: enable pam_localuser is ldap, winbind
	                       or nam is enabled

	* add testcases for winbind

2008-03-03  Michael Calmer  <mc@suse.de>

	* release version 0.51

	* src/mod_pam_krb5.c: easier configuration for pam_krb5
	                      ACCOUNT section
	* src/mod_pam_krb5.c: do not use use_authtok in PASSWORD
	                      section

2008-02-13  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.50

	* src/mod_pam_time.c: New.

	* src/mod_pam_group.c: New.

	* src/mod_pam_krb5.c: Use generic parser, getopt and write
	functions.
	* src/mod_pam_lastlog.c: Likewise.
	* src/mod_pam_ldap.c: Likewise.
	* src/mod_pam_limits.c: Likewise.
	* src/mod_pam_localuser.c: Likewise.
	* src/mod_pam_loginuid.c: Likewise.
	* src/mod_pam_mkhomedir.c: Likewise.
	* src/mod_pam_mount.c: Likewise.
	* src/mod_pam_nam.c: Likewise.
	* src/mod_pam_pkcs11.c: Likewise.
	* src/mod_pam_thinkfinger.c: Likewise.
	* src/mod_pam_winbind.c: Likewise.
	* src/mod_pam_umask.c: Likewise.
	* src/mod_pam_unix.c: Likewise.
	* src/mod_pam_unix2.c: Likewise.

2008-02-12  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_apparmor.c: Use generic parser, getopt and write
	function.
	* src/mod_pam_ccreds.c: Likewise.
	* src/mod_pam_ck_connector.c: Likewise.
	* src/mod_pam_cracklib.c: Likewise, add all missing options.
	* src/mod_pam_env.c: Likewise.
	* src/mod_pam_make.c: Likewise.

	* src/pam-module.c: Add lot of new functions for config parsing
	and getopt handling.

	* src/pam-module.h: Add lot of new macros.

2007-11-23  Michael Calmer <mc@suse.de>

	* release version 0.27

	* src/pam-config.c: move write_config after sanitize_check calles

2007-11-14  Michael Calmer <mc@suse.de>

	* release version 0.26

	* src/pam-config.c: add --ldap-account_only option
	* src/sanity_checks.c: add check - ldap-account_only is
	only allowed if krb5 is configured.
	* src/pam-config.8.xml: Adapted manpage.
	* tests/testcases/test-ldap-account_only.single: New
	* tests/single.out/test-ldap-account_only.err: New
	* tests/single.out/test-ldap-account_only.out: New

2007-11-12  Michael Calmer <mc@suse.de>

	* release version 0.25
	* src/mod_pam_krb5.c: fix missconfiguration of pam_krb5 [#335521]

2007-10-31  Sven Schober <sschober@suse.de>

	* src/pam-config.c: Do not check for installed pam-module on
	delete request [#337369].

2007-10-25  Sven Schober <sschober@suse.de>

	* release version 0.24

	* configure.in: added 'tests/etc/Makefile' to AC_OUTPUT
	* tests/etc/Makefile.am: New. Introduced to avoid packaging
	'.svn' directory.
	* tests/testcases/test-ck_connector2.single: Pipe cmd output
	to /dev/null to achieve location independency (test case
	would fail on different machines/paths).

2007-10-15  Michael Calmer <mc@suse.de>

	* src/mod_pam_thinkfinger.c: Use dynamic confdir
	parameter.
	* src/pam-config.c: Use dynamic confdir parameter.
	* src/single_config.c: fix endless loop if a module exists
	twice in a config file [#328519]. Added some debug
	statements.
	* tests/testcases/test-ck_connector2.single: Test case for
	bug[#328519].

2007-08-30  Sven Schober <sschober@suse.de>

	* src/mod_pam_thinkfinger.c: check return value of asprintf.
	* tests/Makefile.am: Mention testcases/, support/, config/
	and pam-config.test/ in EXTRA_DIST.
	* src/pam-config.c: Issue warning in relink() if old common-*
	file is not found.
	* load_obsolete_conf.c: Issue warnings if
	/etc/security/pam_{pwcheck,unix2}.conf files not found.

2007-08-28  Sven Schober <sschober@suse.de>

	* src/pam-config.c: Fix bug where common-{auth,...} links wouldn't be
	created if files of the same name didn't exist already.
	* tests/single.out/test-mount-thinkfinger.err: New.
	* tests/single.out/test-mount-thinkfinger.out: New.
	* tests/testcases/test-mount-thinkfinger.single: New
	testcase to check for pam_{mount,thinkfinger}.so mutex.

2007-08-23  Sven Schober <sschober@suse.de>

	* src/pam-config.c: CONFDIR customizable via cmd line
	option.
	* src/pam-config.c: Gather return values from write_config()
	invocations, and return failure in case a single one fails.
	* src/pam-config.h: -- " --
	* src/mod_pam_thinkfinger.c: Heed --confdir option.
	* src/single_config.c: -- " --
	* src/mod_pam_mount.c: -- " --
	* tests/: New testsuite. See tests/README for usage.

2007-08-14  Sven Schober <sschober@suse.de>

	* release version 0.23
	* src/pam-config.8.xml: Added documentation for
	pam_thinkfinger.so
	* src/mod_pam_thinkfinger.c: New.
	* src/pam-config.c: Added options for pam_thinkfinger.so.
	* src/mod_pam_mount.c: Added mutex with pam_thinkfinger.so.
	* src/supported-modules.h: Added pam_thinkfinger.so to
	common_module_list and auth stack.
	* src/write_config.c: Fix bug, where write_config() would
	not gather correct result from module->write_config()
	invocations.
	* src/Makefile.am: Added mod_pam_thinkfinger.c.

2007-08-14  Sven Schober <sschober@suse.de>

	* release version 0.22

2007-08-09  Sven Schober <sschober@suse.de>

	* src/mod_pam_ck_connector.c: Check return value of
	asprintf.
	* src/pam-config.h: Adapted documentation to reflect changes
	to insert_if().
	* src/mod_pam_cryptpass.c: Fixed write_config_cryptpass to
	retrieve both SESSION and PASSWORD option sets. This enables
	us to treat the two stack types differently.
	* src/pam-config.c: Added option --cryptpass-password.
	* src/single_config.c: sanitized insert_if() return value.
	* src/pam-config.8.xml: Adapted manpage.

2007-08-07  Sven Schober <sschober@suse.de>

	* src/pam-module.h: Externalized service_module_list, so
	single service modules are able to check for other modules.
	* src/single_config.c: Refactored list operations on
	config_content_t lists. Added remove_module() function,
	insert_if() takes position hint as last parameter.
	* src/pam-config.h: Reflect signature change of insert_if()
	and add prototype for remove_module().
	* src/mod_pam_cryptpass.c: Module now gets added to the
	password stack, also.
	* src/mod_pam_ck_connector.c: Module support added (single
	service).

2007-07-31  Sven Schober <sschober@suse.de>

	* src/pam-config.8.xml: Overhauled documentation. Added
	description of single service options and gave some usage
	examples.
	* src/pam-config.c: Added "--list-modules" option.

2007-07-27  Sven Schober <sschober@suse.de>

	* src/pam-config.c: Fix for segfault: added check if (single)
	service file exists before beginning to write.
	* src/mod_pam_lastlog.c: Check file pointer before using it.
	* src/single_config.c: Check file pointer before using it and
	print error message if service file can't be 'stat'ed.
	* src/mod_pam_mount.c:  Check file pointer before using it.
	* src/mod_pam_loginuid.c: Check file pointer before using it.
	* src/write_config.c: Call get{g,u}id() for default {g,u}id
	values.

2007-07-27  Thorsten Kukuk <kukuk@suse.de>

	* release version 0.21

	* po/*.po: Add translations

2007-07-24  Sven Schober <sschober@suse.de>

	* src/pam-module.h: Minor modification to debug macro.
	* src/write_config.c: Fixed a bug where uid, gui and st_mode
	where set to unsensible values when file didn't exist yet.

2007-07-23  Sven Schober <sschober@suse.de>

	* src/pam-module.h: Added doxygen documentation.
	* src/single_config.c: Documentation and conveniance
	functions.
	* src/pam-config.c: Changed pam_mount support to single
	service file.
	* src/mod_pam_cryptpass.c: Added support for pam_cryptpass.
	* src/pam-config.h: Added doxygen documentation.
	* src/mod_pam_mount.c: Changed pam_mount support to single
	service file.
	* src/supported-modules.h: --- " ----

2007-07-18  Michael Calmer <mc@suse.de>

	* src/mod_pam_deny.c: New.
	* src/supported-modules.h: Added pam_deny.so.
	* src/mod_pam_krb5.c: If pam_krb5 is the last enabled module add
	a required pam_deny.so to the end of the AUTH section.

2007-07-05  Thorsten Kukuk  <kukuk@suse.de>

	* src/pam-config.8.xml: Remove obsoete xauth entry.

2007-07-05  Sven Schober  <sschober@suse.de>

	* src/mod_pam_unix.c: Changed option "big_crypt" to
	"bigcrypt".
	* src/mod_pam_mount.c: New.
	* src/pam-config.c: Added options for pam_mount.so.
	* src/mod_pam_unix.c: Added support for pam_mount.so:
	"use_first_pass" gets appended if pam_mount.so is enabled.
	* src/mod_pam_unix2.c: same as above.
	* src/pam-config.8.xml: Added documentation for pam_mount.so
	and pam_unix.so.
	* src/supported-modules.h: Added pam_mount.so to
	common_module_list, auth and session list.
	* src/Makefile.am: Added mod_pam_mount.c.

2007-07-04  Sven Schober  <sschober@suse.de>

	* src/mod_pam_unix.c: New.
	* src/sanity_checks.c: Added check for pam_unix/2-conflict
	and fallback to pam_unix2.so.
	* src/pam-config.c: Added options for pam_unix.so.
	* src/supported-modules.h: Added pam_unix.so to
	module-lists.

2007-07-04  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_loginuid.c: New.
	* src/pam-config.c: Add support for single login files.
	* src/single_config.c: New file.

2007-07-03  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_pkcs11.c: New.

2007-07-02  Thorsten Kukuk  <kukuk@suse.de>

	* src/write_config.c: New file, combine all old 4 variants.

	* src/Makefile.am: Add mod_pam_apparmor and mod_pam_nam
	* src/supported-modules.h: Likewise.
	* src/mod_pam_apparmor.c: New.
	* src/mod_pam_nam.c: New.
	* src/pam-config.c (main): Convert entries.

	* src/Makefile.am: Add mod_pam_krb5.
	* src/supported-modules.h: Likewise.
	* src/mod_pam_cracklib.c: New.
	* src/pam-config.c (main): Convert pam_krb5 entries.

	* src/mod_pam_krb5.c: New.
	* src/pam-config.c (main): Convert pam_krb5 entries.
	* src/Makefile.am: Add mod_pam_krb5.
	* src/supported-modules.h: Add mod_pam_krb5.

	* src/mod_pam_localuser.c: Implement write function.

	* src/load_obsolete_conf.c: Convert for new interface.

	* src/pam-config.c (main): Convert pam_limits entries.
	* src/mod-pam_limits.c: new.

2007-06-29  Thorsten Kukuk  <kukuk@suse.de>

	* src/mod_pam_env.c: New.
	* src/pam-config.8.xml: Document new pam_nev options.
	* src/pam-config.c (main): Add new pam_env options.

	* src/mod_pam_pwcheck.c: New.
	* src/pam-config.8.xml: Document enforce_for_root option.
	* src/pam-config.c (main): Convert pwcheck options.

	* src/pam-module.h: Add more defines for more options.

	* src/mod_pam_localuser.c: New.

	* src/mod_pam_winbind.c: New.
	* src/supported-modules.h: Add mod_pam_winbind.
	* src/pam-config.c (main): Convert winbind options.
	* src/Makefile.am: Add mod_pam_winbind.c.

	* src/pam-config.c (main): Add --umask-umask option.
	* src/pam-config.8.xml: Document --umask-umask option.
	* src/mod_pam_umask.c: Support umask option.

	* src/pam-module.h (DECLARE_STRING_OPTS_2): Added.

	* src/pam-config.c (main): Support umask and skel for pam_mkhomedir.
	* src/mod_pam_mkhomedir.c: Likewise.

	* src/pam-config.8.xml: Document new pam_mkhomedir options.

2007-06-28  Thorsten Kukuk  <kukuk@suse.de>
	    Sven Schober  <sschober@suse.de>

	* */*: Massive changes for new internal interface.

2007-06-14  Thorsten Kukuk  <kukuk@suse.de>

	* src/load_config.c (print_unknown_option_error): New function
	to simplify translations.

2007-01-29  Thorsten Kukuk  <kukuk@suse.de>

	* src/pam-config.8.xml: Remove NIS references.

2007-01-29  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.15

	* src/pam-config.c (main): Fix -d usage for pwcheck-minlen.
	* src/pam-config.8.xml: Remove --pam_pwcheck-no_minlen.

2007-01-26  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.14

	* src/pam-config.c (main): Allow minlen=0 as pam_pwcheck.so
	option.
	* src/print_module.c (print_module_pwcheck): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.
	* src/pam-config.h: Likewise.

	* src/pam-config.8.xml: Document --pam_pwcheck-no_minlen.

	* src/pam-config.c (main): Support ignore_unknown_principals
	option of pam_krb5.
	* src/pam-config.h: Likewise.
	* src/write_config_account.c (write_config_account): Likewise.
	* src/load_config.c (parse_krb5_options): Likewise.

	* src/pam-config.8.xml: Document new pam_krb5 options.

2006-10-25  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.13

	* src/print_module.c (print_module_cracklib): Fix typo.

	* src/pam-config.h: Add support for pam_capability.
	* src/pam-config.c (main): Likewise.
	* src/print_module.c (print_module_capability): Likewise.
	* src/load_config.c (load_config): Likewise.
	* src/pam-config.8.xml: Likewise.

	* src/write_config_session.c: Make pam_apparmor optional
	[Fate#300510].
	(write_config_session): Write pam_capability entry.

2006-09-20  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.12

	* src/sanity_checks.c (sanitize_check_password): Don't ignore
	debug flag if convert from pam_cracklib to pam_pwcheck.

2006-09-14  Thorsten Kukuk  <kukuk@suse.de>

	* release version 0.11

	* src/write_config_session.c (write_config_session): Add support
	for pam_umask.so.
	* src/pam-config.h: Likewise.
	* src/pam-config.c: Likewise.
	* src/pam-config.8.xml: Likewise.
	* src/load_config.c (parse_umask_options): New.
	* src/print_module.c (print_module_umask): New.

	* src/write_config_account.c (write_config_account): In combination
	with pam_ldap, USER_UNKNOWN of pam_krb5 should be ignored.

2006-09-05  Thorsten Kukuk  <kukuk@suse.de>

	* src/pam-config.c (main): Fix first openlog argument.

2006-08-31  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.10

	* src/load_obsolete_conf.c: Don't report error for empty
	arguments.

2006-08-26  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/pam-config.8.xml: Document --lum, --cracklib* and
	--winbind* options.

	* src/load_obsolete_conf.c (load_obsolete_conf): Check for
	.rpmsave files if original ones are already removed.

2006-08-25  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.9

	* src/pam-config.c (main): Add support for pam_winbind.so.
	* src/pam-config.h: Likewise.
	* src/load_config.c: Likewise.
	* src/load_obsolete_conf.c (parse_option_unix2): Likewise.
	* src/pam-config.h (print_module_winbind): Likewise.
	* src/print_module.c (print_module_winbind): Likewise.
	* src/write_config_auth.c (write_config_auth): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.
	* src/write_config_session.c (write_config_session): Likewise.
	* src/write_config_account.c (write_config_account): Likewise.

	* src/load_obsolete_conf.c (parse_option_unix2): Handle krb5afs
	as krb5.

	* src/pam-config.c (main): Add minimum_uid for krb5.
	* src/pam-config.h: Likewise.
	* src/load_config.c (parse_krb5_options): Likewise.
	* src/print_module.c (print_module_krb5_int): Likewise.
	* src/write_config_account.c (write_config_account): Likewise.
	* src/write_config_auth.c (write_config_auth): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.
	* src/write_config_session.c (write_config_session): Likewise.

2006-08-25  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.8

	* src/pam-config.8.xml: Document pwcheck-no_obscure_checks
	and pam_apparmor.

	* src/pam-config.c: Add no_obscure_checks support for pam_pwcheck.
	* src/pam-config.h: Likewise.
	* src/load_config.c (parse_pwcheck_options): Likewise.
	* src/load_obsolete_conf.c (parse_option_pwcheck): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.

	* src/print_module.c (print_module_pwcheck): Fix typo, add
	no_obscure_checks.

	* src/pam-config.c (main): Add support for LUM.
	(main): Fix seg.fault if only --debug is given.

	* src/pam-config.h: Likewise.
	* src/load_config.c (load_config): Likewise.
	* src/write_config_account.c (write_config_account): Likewise.
	* src/write_config_auth.c (write_config_auth): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.
	* src/write_config_session.c (write_config_session): Likewise.

2006-08-24  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.7

	* src/write_config_auth.c (write_config_auth): Fix typo when
	writing pam_krb5 rule.

	* src/load_config.c (load_config): Add pam_apparmor support.
	* src/write_config_session.c (write_config_session): Likewise.
	* src/pam-config.h: Likewise.
	* src/pam-config.c (main): Likewise.

	* src/pam-config.h: Add cracklib_retry.
	* src/pam-config.c: Likewise.
	* src/load_config.c (parse_cracklib_options): Likewise.
	* src/write_config_password.c (write_config_password): Likewise.

	* src/load_config.c (load_config): Ignore pam_localuser.so.

	* src/write_config_account.c (write_config_account): Fix stacking of
	pam_unix2 with pam_ldap.

	* src/write_config_password.c (write_config_password): Make
	pam_pwcheck and pam_cracklib requisite, so that no other module
	changes the password.

2006-08-23  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/write_config_account.c (write_config_account):
	Fix stacking of pam_unix2 with pam_ldap and pam_krb5.

	* src/write_config_password.c (write_config_password): Write
	rules for pam_cracklib, abort if pam_pwcheck of pam_cracklib
	fails.

	* src/print_module.c (print_module_cracklib): New function.

	* src/pam-config.c (main): Add support for pam_cracklib.
	* src/pam-config.h: Likewise.
	* src/load_config.c: Likewise.

	* src/sanity_checks.c (sanitize_check_password): Check for
	pam_cracklib and pam_pwcheck at the same time.

	* COPYING: Fix content

2006-08-23  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.6

	* src/print_module.c: New file.
	* src/load_config.c: Remove obsolete options.
	* src/load_obsolete_conf.c: Likewise.
	* src/pam-config.c: Implement --query option for YaST2.
	* src/pam-config.h: Update prototypes.
	* src/write_config_password.c: Remove obsolete options,
	fix stacking of modules.
	* src/pam-config.8.xml: Document --query.

2006-08-22  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.5

	* src/pam-config.c (main): Implement --update, fix return value.

	* src/sanity_checks.c (check_for_pam_module): Implement
	force option.

	* src/pam-config.c (main): Call check_for_pam_module with
	force argument.

	* src/pam-config.8.xml: Document -f position in args.

	* src/write_config_account.c (write_config_account): Use
	account, not auth.

2006-08-22  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.4

	* src/sanity_checks.c (check_for_pam_module): New check.
	* src/pam-config.c (main): Check if freshly added modules
	are installed.

2006-08-21  Thorsten Kukuk  <kukuk@thkukuk.de>

	* src/sanity_checks.c: New, add sanity checks for auth and
	password section.

	* src/pam-config.c (main): Add ccreds support.
	* src/pam-config.h: Likewise.
	* src/write_config_auth.c (write_config_auth): Likewise.
	* src/load_config.c (load_config): Likewise.

	* src/pam-config.c (main): Add pkcs11 support.
	* src/pam-config.h: Likewise.
	* src/write_config_auth.c (write_config_auth): Likewise.
	* src/load_config.c (load_config): Likewise.

	* src/pam-config.8.xml: Document ccreds and pkcs11 support.

2006-08-21  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.3.

	* src/load_obsolete_conf.c (parse_option_unix2): Parse krb5, ldap
	and call_modules options.

	* src/pam-config.c (main): Add ldap and krb5 options.

	* src/load_config.c (load_config): Parse krb5 and ldap entries.

	* src/write_config_auth.c (write_config_auth): Add ldap and krb5
	support.
	* src/write_config_password.c (write_config_password): Likewise.
	* src/write_config_session.c (write_config_session): Likewise.

	* src/pam-config.8.xml: Document ldap and krb5 options.

2006-08-21  Thorsten Kukuk  <kukuk@thkukuk.de>

	* release version 0.2

	* src/pam-config.8.xml: Add all current implementations.

	* src/pam-config.c (main): Add --force option.

2006-08-20  Thorsten Kukuk  <kukuk@thkukuk.de>

	* initial release 0.1
