univention-heimdal (15.4.0) unstable; urgency=medium

  * Bug #58848: UCS 5.2-4 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Fri, 28 Nov 2025 09:30:05 +0100

univention-heimdal (15.3.0) UNRELEASED; urgency=medium

  * Bug #58568: UCS 5.2-3 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 02 Sep 2025 16:18:24 +0200

univention-heimdal (15.2.0) UNRELEASED; urgency=medium

  * Bug #58344: UCS 5.2-2 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Wed, 28 May 2025 16:49:54 +0200

univention-heimdal (15.0.6-1) UNRELEASED; urgency=medium

  * Bug #58015 UCS 5.2-1 version bump

 -- Christian Castens <castens@univention.de>  Mon, 03 Mar 2025 10:45:40 +0100

univention-heimdal (15.0.5) unstable; urgency=medium

  * Issue univention/dev/ucs#2312: fix "restart"

 -- Felix Botner <botner@univention.de>  Thu, 28 Nov 2024 18:17:47 +0100

univention-heimdal (15.0.4) unstable; urgency=medium

  * Issue univention/dev/ucs#2312: depend on network.target for kdc service

 -- Felix Botner <botner@univention.de>  Fri, 22 Nov 2024 12:26:41 +0100

univention-heimdal (15.0.3) unstable; urgency=medium

  * Bug #56858: replace transitional packages

 -- Christian Castens <castens@univention.de>  Thu, 30 May 2024 10:49:32 +0200

univention-heimdal (15.0.2) unstable; urgency=medium

  * Bug #46120: rebase univention-heimdal UCR templates

 -- Marius Meschter <marius.meschter@univention.de>  Fri, 08 Mar 2024 00:18:34 +0100

univention-heimdal (15.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.2-0 version bump

 -- Florian Best <best@univention.de>  Fri, 08 Mar 2024 00:12:29 +0100

univention-heimdal (14.0.3) unstable; urgency=medium

  * Bug #56604: remove workarounds for Python 2 compatibility

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:54:14 +0100

univention-heimdal (14.0.2) unstable; urgency=medium

  * Bug #53127: upgrade to latest debhelper compat version

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:39 +0100

univention-heimdal (14.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.1-0 version bump

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 22:19:41 +0100

univention-heimdal (13.0.7-1) UNRELEASED; urgency=medium

  * Bug #57118 UCS 5.0-7 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Mar 2024 15:51:52 +0100

univention-heimdal (13.0.6-1) UNRELEASED; urgency=medium

  * Bug #56832: UCS 5.0-6 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Dec 2023 19:17:22 +0100

univention-heimdal (13.0.5-1) unstable; urgency=medium

  * Bug #31771: migrate tabs to spaces

 -- Florian Best <best@univention.de>  Fri, 03 Feb 2023 04:17:34 +0100

univention-heimdal (13.0.4-1) unstable; urgency=medium

  * Bug #55554: Fix UCR variable typing

 -- Philipp Hahn <hahn@univention.de>  Wed, 28 Sep 2022 19:42:41 +0200

univention-heimdal (13.0.3-3) unstable; urgency=medium

  * Bug #52987: Configure kerberos ticket lifetime with
    kerberos/defaults/ticket-lifetime.

 -- Ivan Barbecho Delgado <delgado.extern@univention.de>  Tue, 04 Jan 2022 07:59:54 +0100

univention-heimdal (13.0.3-2) unstable; urgency=medium

  * Bug #50648: Catch univention.password.CheckFailed in check_cracklib.py

 -- Julia Bremer <bremer@univention.de>  Fri, 26 Mar 2021 15:20:56 +0100

univention-heimdal (13.0.3-1) unstable; urgency=medium

  * Bug #52257: Migrate univention-heimdal to Python 3

 -- Florian Best <best@univention.de>  Thu, 25 Mar 2021 16:02:12 +0100

univention-heimdal (13.0.2-1) unstable; urgency=medium

  * Bug #43686: Convert init.d to systemctl commands for UDL

 -- Sebastian Lobinger <lobinger@univention.de>  Thu, 22 Oct 2020 11:47:16 +0200

univention-heimdal (13.0.1-1) unstable; urgency=medium

  * Bug #42374: Replace legacy Master/Slave wording by
    Primary/Backup/Replica/Managed Node

 -- Arvid <requate@univention.de>  Thu, 24 Sep 2020 13:48:36 +0200

univention-heimdal (13.0.0-1) unstable; urgency=medium

  * Bug #51419: UCS-5.0-0 version bump

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Fri, 05 Jun 2020 18:06:12 +0200

univention-heimdal (12.0.1-4) unstable; urgency=medium

  * Bug #51016: make UCR templates compatible to python3

 -- Florian Best <best@univention.de>  Thu, 26 Mar 2020 14:37:02 +0100

univention-heimdal (12.0.1-3) unstable; urgency=medium

  * Bug #49134: remove python_support

 -- Florian Best <best@univention.de>  Tue, 15 Oct 2019 09:53:08 +0200

univention-heimdal (12.0.1-2) unstable; urgency=medium

  * Bug #48698: Fix user visible spelling errors

 -- Philipp Hahn <hahn@univention.de>  Thu, 08 Aug 2019 05:46:37 +0200

univention-heimdal (12.0.1-1) unstable; urgency=medium

  * Bug #46969: bindpwdfile support

 -- Felix Botner <botner@univention.de>  Thu, 03 Jan 2019 10:35:32 +0100

univention-heimdal (12.0.0-1) unstable; urgency=medium

  * Bug #48326: UCS-4.4-0 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 14 Dec 2018 15:12:29 +0100

univention-heimdal (11.0.1-9) unstable; urgency=medium

  * Bug #47070: bindpwdfile support

 -- Felix Botner <botner@univention.de>  Thu, 24 May 2018 13:31:07 +0200

univention-heimdal (11.0.1-8) unstable; urgency=medium

  * Bug #46842: join script without credentials,
    pwdfile support in salt_krb5Keys

 -- Felix Botner <botner@univention.de>  Mon, 07 May 2018 14:25:20 +0200

univention-heimdal (11.0.1-7) unstable; urgency=medium

  * Bug #33214: Gather and mark MIT Kerberos libdefaults in krb5.conf

 -- Arvid Requate <requate@univention.de>  Mon, 19 Feb 2018 17:07:51 +0100

univention-heimdal (11.0.1-6) unstable; urgency=medium

  * Bug #36542 / Bug #46292: Simplify python syntax of previous commit

 -- Arvid Requate <requate@univention.de>  Thu, 15 Feb 2018 21:22:56 +0100

univention-heimdal (11.0.1-5) unstable; urgency=medium

  * Bug #36542 / Bug #46292: Also keep MIT Kerberos options for
    compatibility with clients that are linked against libkrb5-dev
    instead of against heimdal-dev

 -- Arvid Requate <requate@univention.de>  Thu, 15 Feb 2018 18:50:28 +0100

univention-heimdal (11.0.1-4) unstable; urgency=medium

  * Bug #36542 / Bug #46292: Use Heimdal supported configuration options
    instead of MIT only ones.

 -- Arvid Requate <requate@univention.de>  Thu, 15 Feb 2018 16:39:42 +0100

univention-heimdal (11.0.1-3) unstable; urgency=medium

  * Bug #33214: Add UCR option for ignore_acceptor_hostname,
    kerberos/defaults/ignore_acceptor_hostname

 -- Erik Damrose <damrose@univention.de>  Fri, 09 Feb 2018 13:32:18 +0100

univention-heimdal (11.0.1-2) unstable; urgency=medium

  * Bug #43336: remove XS-Python-Version

 -- Florian Best <best@univention.de>  Thu, 21 Dec 2017 11:52:22 +0100

univention-heimdal (11.0.1-1) unstable; urgency=medium

  * Use service instead of invoke-rc.d since systemd policy layer
    prevents starting services in a chroot environment (Bug #45905)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 20 Dec 2017 06:58:39 +0100

univention-heimdal (11.0.0-1) unstable; urgency=medium

  * Bug #45841: UCS-4.3 version bump

 -- Jürn Brodersen <brodersen@univention.de>  Mon, 11 Dec 2017 14:40:45 +0100

univention-heimdal (10.0.0-8) unstable; urgency=low

  * Bug #43919: Remove pidfile annotation

 -- Philipp Hahn <hahn@univention.de>  Mon, 20 Mar 2017 08:38:19 +0100

univention-heimdal (10.0.0-7) unstable; urgency=low

  * Bug #43874: Update init script from Debian-Jessie file

 -- Philipp Hahn <hahn@univention.de>  Thu, 16 Mar 2017 11:35:23 +0100

univention-heimdal (10.0.0-6) unstable; urgency=medium

  * Bug #43850: Adjust enctypes list to work with Samba 4.6 get_enctypes

 -- Arvid Requate <requate@univention.de>  Wed, 15 Mar 2017 19:25:28 +0100

univention-heimdal (10.0.0-5) unstable; urgency=low

  * Bug #43470: Handle UCRV */autostart through systemd
  * Bug #43874: help systemd track pidfile

 -- Philipp Hahn <hahn@univention.de>  Wed, 15 Mar 2017 08:52:56 +0100

univention-heimdal (10.0.0-4) unstable; urgency=low

  * Bug #43492: Improve debug output

 -- Philipp Hahn <hahn@univention.de>  Mon, 06 Feb 2017 14:03:45 +0100

univention-heimdal (10.0.0-3) unstable; urgency=low

  * Bug #43492: Find heimdal tools using $PATH

 -- Philipp Hahn <hahn@univention.de>  Fri, 03 Feb 2017 14:33:45 +0100

univention-heimdal (10.0.0-2) unstable; urgency=low

  * Bug #34258: Add missing Conflicts between packages
  * Bug #43410: Fix credential leak
  * Bug #43492: Find heimdal tools using $PATH

 -- Philipp Hahn <hahn@univention.de>  Fri, 03 Feb 2017 13:02:44 +0100

univention-heimdal (10.0.0-1) unstable; urgency=medium

  * Bug #41963: UCS-4.2 version bump

 -- Philipp Hahn <hahn@univention.de>  Fri, 12 Aug 2016 13:57:58 +0200

univention-heimdal (9.0.1-3) unstable; urgency=medium

  * Bug #40383: Updated description of kerberos/autostart

 -- Arvid Requate <requate@univention.de>  Tue, 22 Mar 2016 20:50:30 +0100

univention-heimdal (9.0.1-2) unstable; urgency=low

  * Bug #40031: Fix shell escaping

 -- Philipp Hahn <hahn@univention.de>  Wed, 06 Jan 2016 18:05:18 +0100

univention-heimdal (9.0.1-1) unstable; urgency=medium

  * Bump version for UCS 4.1 (Bug #39729)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 03 Nov 2015 21:59:32 +0100

univention-heimdal (8.0.0-3) unstable; urgency=medium

  * Fix UCRV registry (Bug #38295)

 -- Daniel Troeder <troeder@univention.de>  Mon, 31 Aug 2015 18:02:44 +0200

univention-heimdal (8.0.0-2) unstable; urgency=medium

  * Bug #38295: Configure realm 'UNIVENTION.UNCONFIGURED' in krb5.conf if UCRV
    kerberos/realm is unset, so that kstash in the postinst of heimdal-kdc
    does not fail (in a docker container).

 -- Daniel Troeder <troeder@univention.de>  Mon, 31 Aug 2015 17:34:42 +0200

univention-heimdal (8.0.0-1) unstable; urgency=medium

  * Update to UCS 4.0 (Bug #35267)

 -- Janek Walkenhorst <walkenhorst@univention.de>  Fri, 25 Jul 2014 17:32:21 +0200

univention-heimdal (7.0.2-2) unstable; urgency=low

  * use is_localhost_in_admember_mode to check
    member mode (Bug #35470)

 -- Felix Botner <botner@univention.de>  Fri, 25 Jul 2014 12:10:57 +0200

univention-heimdal (7.0.2-1) unstable; urgency=low

  * don't set kerberos/kpasswdserver in member mode (Bug #35470)

 -- Felix Botner <botner@univention.de>  Fri, 25 Jul 2014 11:02:43 +0200

univention-heimdal (7.0.1-1) unstable; urgency=low

  * The keytab listener must not remove the keytab during the cleanup
    phase in case samba4/role is DC or RODC (Bug #31698)

 -- Arvid Requate <requate@univention.de>  Wed, 30 Oct 2013 16:48:04 +0100

univention-heimdal (7.0.0-3) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30943)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Tue, 24 Sep 2013 08:58:17 +0200

univention-heimdal (7.0.0-2) unstable; urgency=low

  * Update/review UCR variable descriptions (Bug #30943)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Thu, 19 Sep 2013 10:14:02 +0200

univention-heimdal (7.0.0-1) unstable; urgency=low

  * Bump version for UCS 3.2, update copyright years for 2013
  * Update/review UCR variable descriptions (Bug #30943)
    Mark kerberos/realm as read-only
    Remove UCR variable descriptions for kerberos/v4tickets, kerberos/enable/kerberos4,
    kerberos/enable/524 and kerberos/enable/kaserver; krb4 no longer support in
    current Heimdal
    Remove UCR variable descriptions for kerberos/password/quality/ascii_lowercase,
    kerberos/password/quality/ascii_uppercase, kerberos/password/quality/diff_ok,
    kerberos/password/quality/dig_credit, kerberos/password/quality/low_credit,
    kerberos/password/quality/min_length, kerberos/password/quality/oth_credit,
    and kerberos/password/quality/up_credit. These are no longer used, instead
    the password strength requirements are configured for all key types through
    the variables password/quality/*
  * Remove empty debian/docs file (fixes ucslint warning)

 -- Moritz Mühlenhoff <muehlenhoff@univention.de>  Fri, 30 Aug 2013 14:03:34 +0200

univention-heimdal (6.0.13-3) unstable; urgency=low

  * straighten univention-heimdal-kdc.postinst (Bug #20167)

 -- Arvid Requate <requate@univention.de>  Mon, 15 Jul 2013 14:23:59 +0200

univention-heimdal (6.0.13-2) unstable; urgency=low

  * enable kpasswdd only on the UCS master (Bug #20167)

 -- Arvid Requate <requate@univention.de>  Mon, 15 Jul 2013 11:54:09 +0200

univention-heimdal (6.0.13-1) unstable; urgency=low

  * Fix ownership of usr/share/univention-heimdal/check_cracklib.py
    (Bug #22926)

 -- Arvid Requate <requate@univention.de>  Wed, 03 Jul 2013 20:32:14 +0200

univention-heimdal (6.0.12-1) unstable; urgency=low

  * Added realm section for the netbios on a S4 DC (Bug #28819)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 08 Mar 2013 06:50:06 +0100

univention-heimdal (6.0.11-1) unstable; urgency=low

  * join scripts make use of internal functions joinscript_init and
    joinscript_save_current_version (Bug #29424)

 -- Erik Damrose <damrose@univention.de>  Wed, 02 Jan 2013 15:25:22 +0100

univention-heimdal (6.0.10-2) unstable; urgency=low

  * version bump (Bug #27753)

 -- Lukas Walter <walter@univention.de>  Wed, 28 Nov 2012 10:01:45 +0100

univention-heimdal (6.0.10-1) unstable; urgency=low

  * abort join script on failing udm call (Bug #27753)

 -- Lukas Walter <walter@univention.de>  Wed, 10 Oct 2012 13:07:48 +0200

univention-heimdal (6.0.9-1) unstable; urgency=low

  * Restart heimdal-kdc in join script (Bug #25103)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 04 Sep 2012 07:47:08 +0200

univention-heimdal (6.0.0-1) unstable; urgency=low

  * UCS-3.1 version bump.
  * Add UCR variable descriptions (Bug #28134)

 -- Philipp Hahn <hahn@univention.de>  Thu, 02 Aug 2012 10:50:34 +0200

univention-heimdal (5.0.29-1) unstable; urgency=low

  * Consider dns/register/srv_records/kerberos and /ldap UCR variables
    to avoid the DNS registration (Bug #27708)

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 24 Jun 2012 10:24:03 +0200

univention-heimdal (5.0.28-1) unstable; urgency=low

  * Don't create the keytab file for a member server if no kerbeors keys
    are defined at the LDAP object (Bug #26314)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 28 Mar 2012 08:45:34 +0200

univention-heimdal (5.0.27-1) unstable; urgency=low

  * check of krb5Key is present in salt_krb5Keys (Bug #26099)

 -- Arvid Requate <requate@univention.de>  Thu, 16 Feb 2012 17:02:57 +0100

univention-heimdal (5.0.26-2) unstable; urgency=low

  * fix package dependency (Bug #24277)

 -- Arvid Requate <requate@univention.de>  Tue, 31 Jan 2012 11:50:50 +0100

univention-heimdal (5.0.26-1) unstable; urgency=low

  * univention-create-keytab depends on python-univention-heimdal (Bug #24277)

 -- Arvid Requate <requate@univention.de>  Mon, 30 Jan 2012 19:02:06 +0100

univention-heimdal (5.0.25-1) unstable; urgency=low

  * move m-key out of the way for samba4/lorikeet heimdal (Bug #25915)

 -- Arvid Requate <requate@univention.de>  Thu, 26 Jan 2012 11:48:52 +0100

univention-heimdal (5.0.24-3) unstable; urgency=low

  * make univention-create-keytab executable (Bug #24277)

 -- Arvid Requate <requate@univention.de>  Tue, 24 Jan 2012 22:11:28 +0100

univention-heimdal (5.0.24-2) unstable; urgency=low

  * fix ucslint issue (Bug #24277)

 -- Arvid Requate <requate@univention.de>  Tue, 24 Jan 2012 17:23:51 +0100

univention-heimdal (5.0.24-1) unstable; urgency=low

  * add create_keytab skript (Bug #24277)

 -- Arvid Requate <requate@univention.de>  Tue, 24 Jan 2012 15:50:55 +0100

univention-heimdal (5.0.23-2) unstable; urgency=low

  * better move m-key out of the way before kadmin init (Bug #24686)

 -- Arvid Requate <requate@univention.de>  Tue, 22 Nov 2011 14:29:00 +0100

univention-heimdal (5.0.23-1) unstable; urgency=low

  * move m-key out of the way for samba4/lorikeet heimdal (Bug #24686)

 -- Arvid Requate <requate@univention.de>  Tue, 22 Nov 2011 14:26:47 +0100

univention-heimdal (5.0.22-1) unstable; urgency=low

  * Register in DNS only if no S4 server was installed. By default S4
    KDCs and OpenLDAP/Heimdal KDCs should not be mixed (Bug #24753)

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 21 Nov 2011 14:02:01 +0100

univention-heimdal (5.0.21-1) unstable; urgency=low

  * Set des-cbc-md5 to the second position of the default_tkt_enctypes
    otherwise a join of a S3 member is not possible (Bug #23999)

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 20 Nov 2011 13:44:29 +0100

univention-heimdal (5.0.20-1) unstable; urgency=low

  * fixed logrotate template (Bug #18002)

 -- Felix Botner <botner@univention.de>  Fri, 18 Nov 2011 16:28:20 +0100

univention-heimdal (5.0.19-1) unstable; urgency=low

  * Fixed kerberos/allow/weak/crypto handling (Bug #21213)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 16 Nov 2011 17:51:18 +0100

univention-heimdal (5.0.18-2) unstable; urgency=low

  * add additional firewall exception for kpasswd (Bug #23577)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Thu, 10 Nov 2011 09:23:59 +0100

univention-heimdal (5.0.18-1) unstable; urgency=low

  * add firewall exception for kpasswd (Bug #23577)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Wed, 09 Nov 2011 14:23:26 +0100

univention-heimdal (5.0.17-1) unstable; urgency=low

  * allow running salt_krb5keys on a DC backup (Bug #22866)
  * support standard credential options in salt_krb5keys

 -- Arvid Requate <requate@univention.de>  Wed, 26 Oct 2011 17:57:12 +0200

univention-heimdal (5.0.16-2) unstable; urgency=low

  * Added dependency to univention-directory-manager-tools (Bug #23342)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 25 Oct 2011 15:29:35 +0200

univention-heimdal (5.0.16-1) unstable; urgency=low

  * workaround for PEP 366 (Bug #23984)

 -- Arvid Requate <requate@univention.de>  Tue, 25 Oct 2011 13:11:17 +0200

univention-heimdal (5.0.15-3) unstable; urgency=low

  * Fix dependencies on u-c (Bug #22668)

 -- Philipp Hahn <hahn@univention.de>  Sat, 22 Oct 2011 04:11:11 +0200

univention-heimdal (5.0.15-2) unstable; urgency=low

  * updated postinst (Bug #23577)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Wed, 19 Oct 2011 17:57:46 +0200

univention-heimdal (5.0.15-1) unstable; urgency=low

  * added firewall settings (Bug #23577)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Tue, 18 Oct 2011 15:21:00 +0200

univention-heimdal (5.0.14-1) unstable; urgency=low

  * Set priority for kerberos SRV records to 100 (Bug #24088)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 18 Oct 2011 10:56:48 +0200

univention-heimdal (5.0.13-1) unstable; urgency=low

  * First default_tkt_enctypes must be arcfour-hmac-md5, otherwise dns
    updates via kerberos won't work (Bug #23161)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 13 Oct 2011 15:44:11 +0200

univention-heimdal (5.0.12-2) unstable; urgency=low

  * fixed univention-config-registry (Bug #18002)

 -- Felix Botner <botner@univention.de>  Tue, 11 Oct 2011 16:14:01 +0200

univention-heimdal (5.0.12-1) unstable; urgency=low

  * added logrotate configuration (Bug #18002)

 -- Felix Botner <botner@univention.de>  Tue, 11 Oct 2011 16:02:34 +0200

univention-heimdal (5.0.11-1) unstable; urgency=low

  * Added UCR variable kerberos/domain_realms (Bug #14957)
  * By default set kerberos/kpasswdserver to ldap/master (Bug #20614)
  * Added more UCR variables kerberos/defaults/dns_lookup_kdc,
    kerberos/defaults/dns_lookup_realm, kerberos/defaults/forwardable,
    kerberos/defaults/proxiable, kerberos/defaults/kdc_timesync,
    kerberos/defaults/debug (Bug #14974)

 -- Stefan Gohmann <gohmann@univention.de>  Sat, 08 Oct 2011 09:04:34 +0200

univention-heimdal (5.0.10-1) unstable; urgency=low

  * Added realm to the new label syntax too (Bug #22108)

 -- Stefan Gohmann <gohmann@univention.de>  Sat, 08 Oct 2011 08:40:42 +0200

univention-heimdal (5.0.9-1) unstable; urgency=low

  * Added kpasswd_server to krb5.conf which is set via
    kerberos/kpasswdserver
  * Removed root from kadmind.acl and added a UCR variable
    kerberos/adminusers to configure the admin users (Bug #19021)
  * Fixed the database definition to the 'label' syntax which was changed
    in heimdal 1.3 (Bug #22108)

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 07 Oct 2011 09:55:08 +0200

univention-heimdal (5.0.8-4) unstable; urgency=low

  * listener should not handle keytab in Samba 4 RODCs (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Tue, 04 Oct 2011 10:09:10 +0200

univention-heimdal (5.0.8-3) unstable; urgency=low

  * keytab listener module only modifies keytab on hosts that do not
    have samba4/role='DC' (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Tue, 20 Sep 2011 11:02:19 +0200

univention-heimdal (5.0.8-2) unstable; urgency=low

  * keytab listener module only modifies keytab on hosts that do not
    have samba4/function/level set (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Tue, 20 Sep 2011 10:18:15 +0200

univention-heimdal (5.0.8-1) unstable; urgency=low

  * keytab listener module only modifies keytab on hosts that do not
    provide the service Samba 4 (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Mon, 19 Sep 2011 12:17:36 +0200

univention-heimdal (5.0.7-1) unstable; urgency=low

  * Re-added salt_krb5Keys (Bug #22600)

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 08 Sep 2011 11:42:34 +0200

univention-heimdal (5.0.6-3) unstable; urgency=low

  * fix package dependencies (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Thu, 01 Sep 2011 12:02:07 +0200

univention-heimdal (5.0.6-2) unstable; urgency=low

  * univention-heimdal-kdc.conffiles should be constructed at build-time
    from univention-heimdal-kdc.univention-config-registry (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Wed, 31 Aug 2011 18:09:35 +0200

univention-heimdal (5.0.6-1) unstable; urgency=low

  * new package univention-heimdal-common to ship /etc/krb5.conf
    formerly included in both univention-heimdal-kdc and -member
    (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Wed, 31 Aug 2011 17:57:38 +0200

univention-heimdal (5.0.5-1) unstable; urgency=low

  * don't set explicit list of KDCs via 'kdc' option, dns_lookup_kdc is
    the default. Static list still can be set via UCR:kerberos/kdc.
    (Bug #22600)

 -- Arvid Requate <requate@univention.de>  Mon, 29 Aug 2011 10:35:10 +0200

univention-heimdal (5.0.4-1) unstable; urgency=low

  * provide salt_krb5Keys script (Bug #22212)

 -- Arvid Requate <requate@univention.de>  Mon, 15 Aug 2011 15:23:36 +0200

univention-heimdal (5.0.3-3) unstable; urgency=low

  * kerberos/allow/weak/crypto=yes seems to be the default in samba4
    and the calculate_supplementalCredentials in univention-s4-connector
    fails in case neither des-cbc-md5 nor des-cbc-crc are available from
    from the UCS/LDAP user account (Bug #22559)

 -- Arvid Requate <requate@univention.de>  Tue, 02 Aug 2011 15:20:24 +0200

univention-heimdal (5.0.3-2) unstable; urgency=low

  * register kerberos/allow/weak/crypto also in univention-heimdal-member
  * provide UCR variable descriptions also for univention-heimdal-member
    (Bug #22559)

 -- Arvid Requate <requate@univention.de>  Thu, 28 Jul 2011 16:35:09 +0200

univention-heimdal (5.0.3-1) unstable; urgency=low

  * set allow_weak_crypto in krb5.conf to restore heimdal-1.4 behavior,
    disabled in new installations by setting kerberos/allow/weak/crypto?no
    in univention-heimdal-kdc.postinst (Bug #22559)

 -- Arvid Requate <requate@univention.de>  Thu, 28 Jul 2011 16:12:57 +0200

univention-heimdal (5.0.2-1) unstable; urgency=low

  * fixed bashisms (Bug #23005)

 -- Sönke Schwardt-Krummrich <schwardt@univention.de>  Tue, 12 Jul 2011 18:27:53 +0200

univention-heimdal (5.0.1-1) unstable; urgency=low

  * Removed unnecessary dependency to textutils (Bug #22431)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 08 Jun 2011 09:01:45 +0200

univention-heimdal (5.0.0-1) unstable; urgency=low

  * Package cleanup for UCS 3.0 (Bug #22431)
    * Bump version for UCS 3.0
    * Replace univention-baseconfig with univention-config-registry
    * Replace static UCR header in the UCR templates with '@%@UCRWARNING=#
      @%@'
    * Update copyright to 2011
    * Update to debhelper 7
    * Switch from python2.4 to python2.6
    * Add ucslint

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 18 May 2011 15:48:58 +0200

univention-heimdal (4.0.3-3) unstable; urgency=low

  * fixed typos and little errors for UCR-variable description (Bug #19009)

 -- Alexander Kläser <klaeser@univention.de>  Wed, 16 Mar 2011 16:48:24 +0100

univention-heimdal (4.0.3-2) unstable; urgency=low

  * set kerberos/kdc to hostname.domain (with this update) Bug #19020

 -- Felix Botner <botner@univention.de>  Tue, 08 Feb 2011 10:56:29 +0100

univention-heimdal (4.0.3-1) unstable; urgency=low

  * use fqdn (hostname.domain) for kerberos/kdc Bug #19020

 -- Felix Botner <botner@univention.de>  Wed, 02 Feb 2011 16:32:03 +0100

univention-heimdal (4.0.2-2) unstable; urgency=low

  * Document new Kerberos variables added in Bug 13423 and 1430 (Bug #19009)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Mon, 31 Jan 2011 16:30:00 +0100

univention-heimdal (4.0.2-1) unstable; urgency=low

  * update ucr set in postinst because of renamed ucr var. Bug #19585

 -- Tim Petersen <petersen@univention.de>  Thu, 16 Sep 2010 09:50:00 +0200

univention-heimdal (4.0.1-1) unstable; urgency=low

  * use univention.password for password quality checks. Bug #14943

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 27 Jul 2010 21:33:39 +0200

univention-heimdal (4.0.0-1) unstable; urgency=low

  * convert to GNU APGL V3 (Bug #17543)
  * bump version for UCS 2.4

 -- Janek Walkenhorst <walkenhorst@univention.de>  Tue, 22 Jun 2010 15:04:42 +0200

univention-heimdal (3.0.13-3) unstable; urgency=low

  * adjust service desciptions (Bug #13469)
  * Evaluate locale.LC_MESSAGES in UMC services module

 -- Arvid Requate <requate@univention.de>  Fri, 23 Apr 2010 13:33:02 +0200

univention-heimdal (3.0.13-2) unstable; urgency=low

  * also create a symlink for kadmind.acl (Bug #16462)

 -- Sönke Schwardt <schwardt@univention.de>  Tue, 24 Nov 2009 14:26:16 +0100

univention-heimdal (3.0.13-1) unstable; urgency=low

  * fix missing kdc.conf symlink in /var/lib/heimdal-kdc/ (Bug #16462)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 23 Nov 2009 16:18:14 +0100

univention-heimdal (3.0.12-1) unstable; urgency=low

  * update the heimdal init script for the new upstream release. Bug
    #16340

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 12 Nov 2009 11:23:17 +0100

univention-heimdal (3.0.11-1) unstable; urgency=low

  * fixed hashbang of check_cracklib.py (Bug: #14709)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 14 Oct 2009 16:58:06 +0200

univention-heimdal (3.0.10-1) unstable; urgency=low

  * kdc.conf template update (Bug: #1430)

 -- Sönke Schwardt <schwardt@univention.de>  Tue, 17 Feb 2009 13:46:52 +0100

univention-heimdal (3.0.9-1) unstable; urgency=low

  * added missing check_cracklib.py (Bug: #1430)

 -- Sönke Schwardt <schwardt@univention.de>  Wed, 23 Sep 2009 11:00:37 +0200

univention-heimdal (3.0.8-1) unstable; urgency=low

  * added cracklib support (Bug #1430)

 -- Sönke Schwardt <schwardt@univention.de>  Tue, 17 Feb 2009 13:46:52 +0100

univention-heimdal (3.0.7-1) unstable; urgency=low

  * fixed UCR info file

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 12 Feb 2009 15:16:40 +0100

univention-heimdal (3.0.6-1) unstable; urgency=low

  * added new UCR variable: kerberos/afscell (Ticket #2009011310000206)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 12 Feb 2009 16:57:07 +0100

univention-heimdal (3.0.5-1) unstable; urgency=low

  * added new UCR variables to configure default encryption types and
    default key types (Ticket #2009011310000206):
    - kerberos/kadmin/default/keys
    - kerberos/defaults/enctypes/tgs
    - kerberos/defaults/enctypes/tkt
    - kerberos/defaults/enctypes/permitted

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 12 Feb 2009 15:04:32 +0100

univention-heimdal (3.0.4-1) unstable; urgency=low

  * add v4-realm if kerberos/realm is set (Bug: #13423)

 -- Sönke Schwardt <schwardt@univention.de>  Thu, 29 Jan 2009 16:42:19 +0100

univention-heimdal (3.0.3-1) unstable; urgency=low

  * added kerberos/enable/kerberos4, kerberos/enable/524 and
    kerberos/enable/kaserver (Bug: #13423)

 -- Sönke Schwardt <schwardt@univention.de>  Mon, 26 Jan 2009 15:37:16 +0100

univention-heimdal (3.0.2-1) unstable; urgency=low

  * re-added the baseconfig variable kerberos/v4tickets. The variable was
    removed with Bug #8878. (Bug: #13423)

 -- Stefan Gohmann <gohmann@univention.de>  Sun, 18 Jan 2009 09:18:53 +0100

univention-heimdal (3.0.1-1) unstable; urgency=low

  * provide UCR category service-heimdal (Bug #13505)

 -- Andreas Büsching <buesching@univention.de>  Wed,  8 Jul 2009 14:42:46 +0200

univention-heimdal (3.0.0-1) unstable; urgency=low

  * Make init script LSB-compliant (Bug #14421)

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Fri, 29 May 2009 12:20:13 +0200

univention-heimdal (2.2.0-1) unstable; urgency=low

  * Make init script LSB-compliant (Bug #14421)

 -- Moritz Mühlenhoff <jmm@univention.de>  Fri, 29 May 2009 10:41:45 +0200

univention-heimdal (2.1.2-5) unstable; urgency=low

  * Added UCR Warning.

 -- Andre Fenske <fenske@univention.de>  Thu,  4 Dec 2008 13:55:42 +0100

univention-heimdal (2.1.2-4) unstable; urgency=low

  * disable telnet in inetd.conf only on new installations and on update to this version (Bug #11005)

 -- Arvid Requate <arequate@visdalen.knut.univention.de>  Mon,  1 Dec 2008 17:37:54 +0100

univention-heimdal (2.1.2-3) unstable; urgency=low

  * disable telnet in inetd.conf (Bug #11005)

 -- Arvid Requate <arequate@visdalen.knut.univention.de>  Mon,  1 Dec 2008 12:00:30 +0100

univention-heimdal (2.1.2-2) unstable; urgency=low

  * new autostart test in init script

 -- Felix Botner <fbotner@visdalen.knut.univention.de>  Tue, 28 Oct 2008 12:32:53 +0100

univention-heimdal (2.1.2-1) unstable; urgency=low

  * don't call ktutil twice

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 29 Nov 2007 14:22:54 +0100

univention-heimdal (2.1.1-4) unstable; urgency=low

  * Add an alternate depends on univention-admin-tools.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu,  8 Nov 2007 12:57:47 +0100

univention-heimdal (2.1.1-3) unstable; urgency=low

  * univention-dnsedit has been moved from /usr/share/univention-admin-tools/ to
    /usr/share/univention-directory-manager-tools/, adapt join script.
  * Also declare an explicit dependency upon univention-directory-manager-tools
    in the KDC package

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Thu,  8 Nov 2007 10:54:31 +0100

univention-heimdal (2.1.1-2) unstable; urgency=low

  * change package priority from optional to standard

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 14 Sep 2007 13:46:31 +0200

univention-heimdal (2.1.1-1) unstable; urgency=low

  * re-added des3-hmac-sha1 to the encryption type list

 -- Stefan Gohmann <gohmann@univention.de>  Fri,  7 Sep 2007 10:05:11 +0200

univention-heimdal (2.1.0-1) unstable; urgency=low

  * update the list of the default encryption types in the krb5.conf file

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  6 Sep 2007 13:01:53 +0200

univention-heimdal (2.0.4-1) unstable; urgency=low

  * add version number to join scripts

 -- Andreas Büsching <buesching@univention.de>  Thu,  2 Aug 2007 09:37:31 +0200

univention-heimdal (2.0.3-5) unstable; urgency=low

  * Adapt to Univention Directory Listener.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Tue, 31 Jul 2007 15:19:05 +0200

univention-heimdal (2.0.3-4) unstable; urgency=low

  * fixed typo

 -- Janis Meybohm <meybohm@univention.de>  Mon, 30 Jul 2007 17:12:45 +0200

univention-heimdal (2.0.3-3) unstable; urgency=low

  * fix univention-heimdal-kdc variables

 -- Janis Meybohm <meybohm@univention.de>  Mon, 30 Jul 2007 16:58:11 +0200

univention-heimdal (2.0.3-2) unstable; urgency=low

  * removed kerberos/v4tickets configuration directive, fixes Bug #8878
  * added descriptions for config registry variables

 -- Janis Meybohm <meybohm@univention.de>  Mon, 30 Jul 2007 16:46:27 +0200

univention-heimdal (2.0.3-1) unstable; urgency=low

  * moved configuration to /etc/heimdal-kdc/

 -- Andreas Büsching <buesching@univention.de>  Fri, 20 Jul 2007 14:59:21 +0200

univention-heimdal (2.0.2-1) unstable; urgency=low

  * during the join script check for the string krbtgt/ and not only for ldap

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 20 Jul 2007 12:56:06 +0200

univention-heimdal (2.0.1-4) unstable; urgency=low

  * Move hdb-ldap-create-base parameter outside of the database
    section of krb5.conf, so that the configuration is valid.

 -- Moritz Muehlenhoff <muehlenhoff@univention.de>  Tue,  3 Jul 2007 16:45:14 +0200

univention-heimdal (2.0.1-3) unstable; urgency=low

  * call exit 0 at the end of the postinst scripts

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 18 Jun 2007 13:59:24 +0200

univention-heimdal (2.0.1-2) unstable; urgency=low

  * encoded files utf-8

 -- Janis Meybohm <meybohm@univention.de>  Wed, 13 Jun 2007 11:21:39 +0200

univention-heimdal (2.0.1-1) unstable; urgency=low

  * heimdal 0.7.2 supports the hdb-ldap-create-base parameter

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 31 May 2007 16:59:46 +0200

univention-heimdal (2.0.0-1) unstable; urgency=low

  * update to ucs 2.0 policies

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 May 2007 16:03:27 +0200

univention-heimdal (1.25) unstable; urgency=low

  * add GPL headers

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 28 Nov 2006 14:02:53 +0100

univention-heimdal (1.22) unstable; urgency=low

  * move some internal tools from /usr/sbin to /usr/share

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 18 Jul 2006 09:50:55 +0200

univention-heimdal (1.21) unstable; urgency=low

  * reinitialize the keytab module in the heimdal install script

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 27 Apr 2006 08:13:26 +0200

univention-heimdal (1.19) unstable; urgency=low

  * using baseconfig variable rotate time log/rotate/weeks for heimdal
    logfiles

 -- Stefan Gohmann <gohmann@univention.de>  Mon,  6 Mar 2006 17:39:19 +0100

univention-heimdal (1.17) unstable; urgency=low

  * rename member join-script, need to be run before listener-module

 -- Ingo Steuwer <steuwer@univention.de>  Fri,  9 Dec 2005 09:32:05 +0100

univention-heimdal (1.16) unstable; urgency=low

  * Switched to python 2.4 (support for older versions has been dropped)

 -- Alexander Reelsen <reelsen@univention.de>  Mon, 19 Sep 2005 13:06:03 +0200

univention-heimdal (1.14) unstable; urgency=low

  * remove attributes list from listener modules

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 25 Apr 2005 15:14:48 +0200

univention-heimdal (1.13) unstable; urgency=low

  * support multiple LDAP server, ldap/server/name and ldap/server/addition

 -- Stefan Gohmann <gohmann@univention.de>  Mon, 21 Mar 2005 08:11:37 +0100

univention-heimdal (1.12) unstable; urgency=low

  * rename 15univention-heimdal.inst to 15univention-heimdal-kdc.inst

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 16 Dec 2004 17:28:01 +0100

univention-heimdal (1.11) unstable; urgency=low

  * remove DC Backup entry for _kerberos-adm._tcp SRV Record

 -- Stefan Gohmann <gohmann@univention.de>  Tue,  6 Jul 2004 16:55:38 +0200

univention-heimdal (1.10) unstable; urgency=low

  * skip root user in kerberos_now script

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 11 Jun 2004 07:41:40 +0200

univention-heimdal (1.9) unstable; urgency=low

  * Add proper package description.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Thu, 29 Apr 2004 16:35:10 +0200

univention-heimdal (1.8) unstable; urgency=low

  * merged with HEAD

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  1 Apr 2004 12:52:54 +0200

univention-heimdal (1.7) unstable; urgency=low

  * restart listener

 -- Stefan Gohmann <gohmann@univention.de>  Fri, 12 Mar 2004 07:46:43 +0100

univention-heimdal (1.6) unstable; urgency=low

  * re-added listener module keytab
  * remove policy check function (now in kpasswdd)
  * resync listener module keytab

 -- Stefan Gohmann <gohmann@univention.de>  Thu,  4 Mar 2004 07:25:13 +0100

univention-heimdal (1.5-1) unstable; urgency=low

  * added hack for keytab

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 26 Feb 2004 16:57:50 +0100

univention-heimdal (1.5) unstable; urgency=low

  * Depend on univention-admin-tools or univention-admin-modules.
  * Become root for keytab modifications.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Tue, 17 Feb 2004 16:07:56 +0100

univention-heimdal (1.4) unstable; urgency=low

  * changed listener keytab filter (consider domainname)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 11 Feb 2004 16:45:32 +0100

univention-heimdal (1.6) unstable; urgency=low

  * Use python2.3 in kerberos_now.
  * re-added listener module keytab
  * remove policy check function (now in kpasswdd)

 -- Stefan Gohmann <gohmann@univention.de>  Tue,  2 Mar 2004 10:21:28 +0100

univention-heimdal (1.5) unstable; urgency=low

  * Depend on univention-admin-tools or univention-admin-modules.
  * Become root for keytab modifications.

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Tue, 17 Feb 2004 16:07:56 +0100

univention-heimdal (1.4) unstable; urgency=low

  * changed listener keytab filter (consider domainname)

 -- Stefan Gohmann <gohmann@univention.de>  Wed, 11 Feb 2004 16:45:32 +0100

univention-heimdal (1.3) unstable; urgency=low

  * split package (kdc and member)

 -- Stefan Gohmann <gohmann@univention.de>  Tue, 01 Oct 2003 07:49:42 +0200

univention-heimdal (1.2) unstable; urgency=low

  * new versioning scheme

 -- Roland Bauerschmidt <bauerschmidt@univention.de>  Tue, 20 May 2003 13:49:42 +0200

univention-heimdal (0.1.univention) unstable; urgency=low

  * Initial Release.

 -- Stefan Gohmann <gohmann@univention.de>  Thu, 24 Mar 2003 11:09:12 +0200


