oVirt LDAP authentication and authorization extension

2017-11-15 - Version 1.3.6
 * setup: set ldaps DNS SRV protocol in case of ldaps
 * core: Validate DN in for connection pool

2017-10-27 - Version 1.3.5
 * docs: Add examples of GSSAPI configuration

2017-08-28 - Version 1.3.4
 * setup: Don't execute login with search user
 * setup: Use executed sequence result for default operation question
 * setup: Improve texts displayed around sequence execution
 * setup: Fix authz filename in Search sequence

2017-08-08 - Version 1.3.3
 * setup: VM SSO should be enabled by default
 * setup: Add baseDN configuration line also to authn
 * setup: login sequence is mandatory to execute to finish setup
 * setup: improve non-resolvable forest error message
 * doc: Add examples README

2017-05-19 - Version 1.3.2
 * setup: validate base DN

2016-02-20 - Version 1.3.1
 * setup: Fix typo in SSO question
 * setup: print example of user's DN
 * packaging: Prepare scripts for standard CI buils
 * packaging: Remove check-merged script
 * packaging: Build RPMs during check-patch
 * setup: fix RHDS profile constant
 * setup: Raise error when non-existing profile passed
 * core: don't fail when non-working domain is used
 * doc: Describe how to remove configured profile

2016-12-16 - Version 1.3.0
 * profiles: ad: Use LDAP_MATCHING_RULE_IN_CHAIN to speed up group memberships
 resolution
 * profiles: ad: Add support for domain local group memberships resolution
 * profiles: isds: Add support for IBM Security Directory Server

2016-10-31 - Version 1.2.2
 * doc: Update doc and examples to use mod_auth_gssapi and mod_session instead
 of mod_auth_kerb for Kerberos SSO setup

2016-06-30 - Version 1.2.1
 * doc: README: specify configuration of kerberos in oVirt 4.0
 * profiles: ipa: Fix account expiration date
 * setup: add timeout to ldap search
 * setup: offer user default profile name based on domain

2016-05-26 - Version 1.2.0
 * setup: ask for SSO and name authz properly
 * packaging: Remove EL6 support from spec
 * doc: README.profile: add default connection option values

2016-04-18 - Version 1.1.4

 * setup: make result of test tool more clear

2016-03-31 - Version 1.1.3

 * core: initialize servers/ports array correctly.
 * setup: remove support for additional DNS servers.

2015-12-11 - Version 1.1.2

 * core: do not overwrite already set globals in default, enables easier
   override when using extension global set.

2015-12-10 - Version 1.1.1

 * core: add ability to execute sequence per each record in fetch-record.
 * core: add flags to allow replace all and force in regex.
 * core: add dc-domain override to enable redirect searches.
 * core: add domain processor pre-processor.
 * profiles: ad: relax error code correlation.
 * profiles: simple: provide change-credentials with valid user name.

2015-10-22 - Version 1.1.0

 * authn: fix setting password change capability.
 * core: auto disable paging if not supported.
 * core: enable use of system width trust store, rhbz#1241262.
 * core: add regex conversion to mapping.
 * core: add dc-resolve pool option to resolve dc components using srv record
   instead of chasing referrals.
 * core: add domain-conversion for srvrecord to enable modification of domain
   before resolving srvrecord.
 * profiles: rfc2307-edir: initial add, rhbz#1224722.
 * profiles: rfc2307-generic: initial add rhbz#1266730.
 * profiles: rfc2307: minor cleanups.
 * profiles: ad: resolve gc using _ldap._tcp.gc.DOMAIN instead of
   _gc._tcp.DOMAIN to be more portable.
 * profiles: ad: enable dc-resolve by default.
 * setup: initial implementation.

2015-01-15 - Version 1.0.2

 * profiles: add rfc2307-openldap profile to make openldap users' lives
   easier.
 * profiles: simple: add simple_baseDN variable to override namespace.
 * core: framework: add var-list-get and var-list-set sequence commands.
 * core: authz: support non queried namespaces
 * core: authz: support default namespaces for cases namespace cannot be
   resolved.
 * core: fix java-8 issues.

2014-12-24 - Version 1.0.1

 * doc: improve documentations.
 * core: support ldaps that returns no supported extended operations.
   rhbz#1172173.

2014-12-01 - Version 1.0.0

Alon Bar-Lev <alonbl@redhat.com>

 * Initial implementation.
