Products.ldapmultiplugins

----------------

- Feature: The enumerateUsers method has a parameter "exact_match" that
was only applied if the search was by logn or user id, since that is
the way it is used in the standard PluggableAuthService plugins.
However, the user folder searchUsers method can accept this parameter
as well and thus limit searches by other criteria to exact matches.
This is useful enough to implement, even though it breaks the standard.
(http://www.dataflake.org/tracker/issue_00656)

----------------

- Bug: Move plugin registration from initialize method to module level to
avoid multiple registrations.
(http://www.dataflake.org/tracker/issue_00631 by Ramon Navarro Bosch)

- Feature: Implemented GenericSetup import/export handlers and registered
import/export steps.

- Bug: Fixed the Zope dependency, which was listed as 2.8+. It's 2.9+.

----------------

- Bug: LDAPMultiPlugin.enumerateUsers: The variable used as key for the
caching mechanism was mutated after being computed, leading to cache
keys that can never be found again. Found by Wichert Akkerman.
(http://www.dataflake.org/tracker/issue_00613)

----------------

- Bug: ActiveDirectoryMultiPlugin.enumerateGroups: In order to support
group searches on the binary objectGUID attribute, utilize a new
flag exposed by the LDAPUserFolder LDAPDelegate search method
that prevents the customary UTF8-encoding of the search filter
expression. **NOTE**: With this change the LDAPUserFolder version
dependency changes to version 2.9 or higher!
(http://www.dataflake.org/tracker/issue_00576 by Wichert Akkerman)

- Bug: ActiveDirectoryMultiPlugin.enumerateGroups: If the requested group
id is a binary string, like a objectGUID attribute, it was mangled
by a lowercasing operation. Removed the lowercasing.
(http://www.dataflake.org/tracker/issue_00575 by Wichert Akkerman)

- Feature: Added caching to the getGroupsForPrincipal method. Thanks to
Wichert Akkerman for the patch.
(http://www.dataflake.org/tracker/issue_00571)

----------------

- Bug: The product will no longer silently fail to install if the
LDAPUserFolder package is not installed. Silent failure does
not look like a good strategy here.

- Bug: fixes and import cleanups after running Pyflakes
(http://divmod.org:81/svn/Divmod/trunk/Pyflakes/)

- Documentation: added some additional configuration hints to the README,
thanks go to Brett Lentz (http://www.dataflake.org/tracker/issue_00559)

---------------------

- LDAPMultiPlugin.enumerateUsers: If no useful search criteria are
given (meaning no user ID or login is specified), fabricate a
criteria set that will return all users, this is the expected
behavior when calling enumerateUsers.

- LDAPMultiPlugin.enumerateUsers: When iterating over search results
from the user folder we now look for the special "fake result"
emitted by the user folder if there is an error. Not elegant, but
needed until error handling is changed in the LDAPUserFolder.

- Instead of throwing exceptions, the ActiveDirectoryMultiPlugin
will now log error conditions and continue, with a patch from
Mark Hammond.
(http://www.dataflake.org/tracker/issue_00554)

- Adjusted an import that has been removed from the
PluggableAuthService utils module.
(http://www.dataflake.org/tracker/issue_00542)

- Remove the ICredentialsUpdatePlugin implementation - it was
implemented wrongly and should not have been part of the contract
at all due to an interface misunderstanding.
(http://www.dataflake.org/tracker/issue_00539)

- Moved the PluggableAuthService dependency up to version 1.4