1Changes in release 0.2o:
2
3 * gss_{import,export}_sec_context added to libgssapi
4
5 * new option --addresses to kdc (for listening on an explicit set of
6 addresses)
7
8 * bug fixes in the krb4 and kaserver emulation part of the kdc
9
10 * other bug fixes
11
12Changes in release 0.2n:
13
14 * more robust parsing of dump files in kadmin
15 * changed default timestamp format for log messages to extended ISO
16 8601 format (Y-M-DTH:M:S)
17 * changed md4/md5/sha1 APIes to be de-facto `standard'
18 * always make hostname into lower-case before creating principal
19 * small bits of more MIT-compatability
20 * bug fixes
21
22Changes in release 0.2m:
23
24 * handle glibc's getaddrinfo() that returns several ai_canonname
25
26 * new endian test
27
28 * man pages fixes
29
30Changes in release 0.2l:
31
32 * bug fixes
33
34Changes in release 0.2k:
35
36 * better IPv6 test
37
38 * make struct sockaddr_storage in roken work better on alphas
39
40 * some missing [hn]to[hn]s fixed.
41
42 * allow users to change their own passwords with kadmin (with initial
43 tickets)
44
45 * fix stupid bug in parsing KDC specification
46
47 * add `ktutil change' and `ktutil purge'
48
49Changes in release 0.2j:
50
51 * builds on Irix
52
53 * ftpd works in passive mode
54
55 * should build on cygwin
56
57 * work around broken IPv6-code on OpenBSD 2.6, also add configure
58 option --disable-ipv6
59
60Changes in release 0.2i:
61
62 * use getaddrinfo in the missing places.
63
64 * fix SRV lookup for admin server
65
66 * use get{addr,name}info everywhere. and implement it in terms of
67 getipnodeby{name,addr} (which uses gethostbyname{,2} and
68 gethostbyaddr)
69
70Changes in release 0.2h:
71
72 * fix typo in kx (now compiles)
73
74Changes in release 0.2g:
75
76 * lots of bug fixes:
77 * push works
78 * repair appl/test programs
79 * sockaddr_storage works on solaris (alignment issues)
80 * works better with non-roken getaddrinfo
81 * rsh works
82 * some non standard C constructs removed
83
84Changes in release 0.2f:
85
86 * support SRV records for kpasswd
87 * look for both _kerberos and krb5-realm when doing host -> realm mapping
88
89Changes in release 0.2e:
90
91 * changed copyright notices to remove `advertising'-clause.
92 * get{addr,name}info added to roken and used in the other code
93 (this makes things work much better with hosts with both v4 and v6
94 addresses, among other things)
95 * do pre-auth for both password and key-based get_in_tkt
96 * support for having several databases
97 * new command `del_enctype' in kadmin
98 * strptime (and new strftime) add to roken
99 * more paranoia about finding libdb
100 * bug fixes
101
102Changes in release 0.2d:
103
104 * new configuration option [libdefaults]default_etypes_des
105 * internal ls in ftpd builds without KRB4
106 * kx/rsh/push/pop_debug tries v5 and v4 consistenly
107 * build bug fixes
108 * other bug fixes
109
110Changes in release 0.2c:
111
112 * bug fixes (see ChangeLog's for details)
113
114Changes in release 0.2b:
115
116 * bug fixes
117 * actually bump shared library versions
118
119Changes in release 0.2a:
120
121 * a new program verify_krb5_conf for checking your /etc/krb5.conf
122 * add 3DES keys when changing password
123 * support null keys in database
124 * support multiple local realms
125 * implement a keytab backend for AFS KeyFile's
126 * implement a keytab backend for v4 srvtabs
127 * implement `ktutil copy'
128 * support password quality control in v4 kadmind
129 * improvements in v4 compat kadmind
130 * handle the case of having the correct cred in the ccache but with
131 the wrong encryption type better
132 * v6-ify the remaining programs.
133 * internal ls in ftpd
134 * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat
135 * add `ank --random-password' and `cpw --random-password' in kadmin
136 * some programs and documentation for trying to talk to a W2K KDC
137 * bug fixes
138
139Changes in release 0.1m:
140
141 * support for getting default from krb5.conf for kinit/kf/rsh/telnet.
142 From Miroslav Ruda <ruda@ics.muni.cz>
143 * v6-ify hprop and hpropd
144 * support numeric addresses in krb5_mk_req
145 * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz>
146 * make rsh/rshd IPv6-aware
147 * make the gssapi sample applications better at reporting errors
148 * lots of bug fixes
149 * handle systems with v6-aware libc and non-v6 kernels (like Linux
150 with glibc 2.1) better
151 * hide failure of ERPT in ftp
152 * lots of bug fixes
153
154Changes in release 0.1l:
155
156 * make ftp and ftpd IPv6-aware
157 * add inet_pton to roken
158 * more IPv6-awareness
159 * make mini_inetd v6 aware
160
161Changes in release 0.1k:
162
163 * bump shared libraries versions
164 * add roken version of inet_ntop
165 * merge more changes to rshd
166
167Changes in release 0.1j:
168
169 * restore back to the `old' 3DES code. This was supposed to be done
170 in 0.1h and 0.1i but I did a CVS screw-up.
171 * make telnetd handle v6 connections
172
173Changes in release 0.1i:
174
175 * start using `struct sockaddr_storage' which simplifies the code
176 (with a fallback definition if it's not defined)
177 * bug fixes (including in hprop and kf)
178 * don't use mawk which seems to mishandle roken.awk
179 * get_addrs should be able to handle v6 addresses on Linux (with the
180 required patch to the Linux kernel -- ask within)
181 * rshd builds with shadow passwords
182
183Changes in release 0.1h:
184
185 * kf: new program for forwarding credentials
186 * portability fixes
187 * make forwarding credentials work with MIT code
188 * better conversion of ka database
189 * add etc/services.append
190 * correct `modified by' from kpasswdd
191 * lots of bug fixes
192
193Changes in release 0.1g:
194
195 * kgetcred: new program for explicitly obtaining tickets
196 * configure fixes
197 * krb5-aware kx
198 * bug fixes
199
200Changes in release 0.1f;
201
202 * experimental support for v4 kadmin protokoll in kadmind
203 * bug fixes
204
205Changes in release 0.1e:
206
207 * try to handle old DCE and MIT kdcs
208 * support for older versions of credential cache files and keytabs
209 * postdated tickets work
210 * support for password quality checks in kpasswdd
211 * new flag --enable-kaserver for kdc
212 * renew fixes
213 * prototype su program
214 * updated (some) manpages
215 * support for KDC resource records
216 * should build with --without-krb4
217 * bug fixes
218
219Changes in release 0.1d:
220
221 * Support building with DB2 (uses 1.85-compat API)
222 * Support krb5-realm.DOMAIN in DNS
223 * new `ktutil srvcreate'
224 * v4/kafs support in klist/kdestroy
225 * bug fixes
226
227Changes in release 0.1c:
228
229 * fix ASN.1 encoding of signed integers
230 * somewhat working `ktutil get'
231 * some documentation updates
232 * update to Autoconf 2.13 and Automake 1.4
233 * the usual bug fixes
234
235Changes in release 0.1b:
236
237 * some old -> new crypto conversion utils
238 * bug fixes
239
240Changes in release 0.1a:
241
242 * new crypto code
243 * more bug fixes
244 * make sure we ask for DES keys in gssapi
245 * support signed ints in ASN1
246 * IPv6-bug fixes
247
248Changes in release 0.0u:
249
250 * lots of bug fixes
251
252Changes in release 0.0t:
253
254 * more robust parsing of krb5.conf
255 * include net{read,write} in lib/roken
256 * bug fixes
257
258Changes in release 0.0s:
259
260 * kludges for parsing options to rsh
261 * more robust parsing of krb5.conf
262 * removed some arbitrary limits
263 * bug fixes
264
265Changes in release 0.0r:
266
267 * default options for some programs
268 * bug fixes
269
270Changes in release 0.0q:
271
272 * support for building shared libraries with libtool
273 * bug fixes
274
275Changes in release 0.0p:
276
277 * keytab moved to /etc/krb5.keytab
278 * avoid false detection of IPv6 on Linux
279 * Lots of more functionality in the gssapi-library
280 * hprop can now read ka-server databases
281 * bug fixes
282
283Changes in release 0.0o:
284
285 * FTP with GSSAPI support.
286 * Bug fixes.
287
288Changes in release 0.0n:
289
290 * Incremental database propagation.
291 * Somewhat improved kadmin ui; the stuff in admin is now removed.
292 * Some support for using enctypes instead of keytypes.
293 * Lots of other improvement and bug fixes, see ChangeLog for details.
| 7Changes in release 0.2o:
8
9 * gss_{import,export}_sec_context added to libgssapi
10
11 * new option --addresses to kdc (for listening on an explicit set of
12 addresses)
13
14 * bug fixes in the krb4 and kaserver emulation part of the kdc
15
16 * other bug fixes
17
18Changes in release 0.2n:
19
20 * more robust parsing of dump files in kadmin
21 * changed default timestamp format for log messages to extended ISO
22 8601 format (Y-M-DTH:M:S)
23 * changed md4/md5/sha1 APIes to be de-facto `standard'
24 * always make hostname into lower-case before creating principal
25 * small bits of more MIT-compatability
26 * bug fixes
27
28Changes in release 0.2m:
29
30 * handle glibc's getaddrinfo() that returns several ai_canonname
31
32 * new endian test
33
34 * man pages fixes
35
36Changes in release 0.2l:
37
38 * bug fixes
39
40Changes in release 0.2k:
41
42 * better IPv6 test
43
44 * make struct sockaddr_storage in roken work better on alphas
45
46 * some missing [hn]to[hn]s fixed.
47
48 * allow users to change their own passwords with kadmin (with initial
49 tickets)
50
51 * fix stupid bug in parsing KDC specification
52
53 * add `ktutil change' and `ktutil purge'
54
55Changes in release 0.2j:
56
57 * builds on Irix
58
59 * ftpd works in passive mode
60
61 * should build on cygwin
62
63 * work around broken IPv6-code on OpenBSD 2.6, also add configure
64 option --disable-ipv6
65
66Changes in release 0.2i:
67
68 * use getaddrinfo in the missing places.
69
70 * fix SRV lookup for admin server
71
72 * use get{addr,name}info everywhere. and implement it in terms of
73 getipnodeby{name,addr} (which uses gethostbyname{,2} and
74 gethostbyaddr)
75
76Changes in release 0.2h:
77
78 * fix typo in kx (now compiles)
79
80Changes in release 0.2g:
81
82 * lots of bug fixes:
83 * push works
84 * repair appl/test programs
85 * sockaddr_storage works on solaris (alignment issues)
86 * works better with non-roken getaddrinfo
87 * rsh works
88 * some non standard C constructs removed
89
90Changes in release 0.2f:
91
92 * support SRV records for kpasswd
93 * look for both _kerberos and krb5-realm when doing host -> realm mapping
94
95Changes in release 0.2e:
96
97 * changed copyright notices to remove `advertising'-clause.
98 * get{addr,name}info added to roken and used in the other code
99 (this makes things work much better with hosts with both v4 and v6
100 addresses, among other things)
101 * do pre-auth for both password and key-based get_in_tkt
102 * support for having several databases
103 * new command `del_enctype' in kadmin
104 * strptime (and new strftime) add to roken
105 * more paranoia about finding libdb
106 * bug fixes
107
108Changes in release 0.2d:
109
110 * new configuration option [libdefaults]default_etypes_des
111 * internal ls in ftpd builds without KRB4
112 * kx/rsh/push/pop_debug tries v5 and v4 consistenly
113 * build bug fixes
114 * other bug fixes
115
116Changes in release 0.2c:
117
118 * bug fixes (see ChangeLog's for details)
119
120Changes in release 0.2b:
121
122 * bug fixes
123 * actually bump shared library versions
124
125Changes in release 0.2a:
126
127 * a new program verify_krb5_conf for checking your /etc/krb5.conf
128 * add 3DES keys when changing password
129 * support null keys in database
130 * support multiple local realms
131 * implement a keytab backend for AFS KeyFile's
132 * implement a keytab backend for v4 srvtabs
133 * implement `ktutil copy'
134 * support password quality control in v4 kadmind
135 * improvements in v4 compat kadmind
136 * handle the case of having the correct cred in the ccache but with
137 the wrong encryption type better
138 * v6-ify the remaining programs.
139 * internal ls in ftpd
140 * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat
141 * add `ank --random-password' and `cpw --random-password' in kadmin
142 * some programs and documentation for trying to talk to a W2K KDC
143 * bug fixes
144
145Changes in release 0.1m:
146
147 * support for getting default from krb5.conf for kinit/kf/rsh/telnet.
148 From Miroslav Ruda <ruda@ics.muni.cz>
149 * v6-ify hprop and hpropd
150 * support numeric addresses in krb5_mk_req
151 * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz>
152 * make rsh/rshd IPv6-aware
153 * make the gssapi sample applications better at reporting errors
154 * lots of bug fixes
155 * handle systems with v6-aware libc and non-v6 kernels (like Linux
156 with glibc 2.1) better
157 * hide failure of ERPT in ftp
158 * lots of bug fixes
159
160Changes in release 0.1l:
161
162 * make ftp and ftpd IPv6-aware
163 * add inet_pton to roken
164 * more IPv6-awareness
165 * make mini_inetd v6 aware
166
167Changes in release 0.1k:
168
169 * bump shared libraries versions
170 * add roken version of inet_ntop
171 * merge more changes to rshd
172
173Changes in release 0.1j:
174
175 * restore back to the `old' 3DES code. This was supposed to be done
176 in 0.1h and 0.1i but I did a CVS screw-up.
177 * make telnetd handle v6 connections
178
179Changes in release 0.1i:
180
181 * start using `struct sockaddr_storage' which simplifies the code
182 (with a fallback definition if it's not defined)
183 * bug fixes (including in hprop and kf)
184 * don't use mawk which seems to mishandle roken.awk
185 * get_addrs should be able to handle v6 addresses on Linux (with the
186 required patch to the Linux kernel -- ask within)
187 * rshd builds with shadow passwords
188
189Changes in release 0.1h:
190
191 * kf: new program for forwarding credentials
192 * portability fixes
193 * make forwarding credentials work with MIT code
194 * better conversion of ka database
195 * add etc/services.append
196 * correct `modified by' from kpasswdd
197 * lots of bug fixes
198
199Changes in release 0.1g:
200
201 * kgetcred: new program for explicitly obtaining tickets
202 * configure fixes
203 * krb5-aware kx
204 * bug fixes
205
206Changes in release 0.1f;
207
208 * experimental support for v4 kadmin protokoll in kadmind
209 * bug fixes
210
211Changes in release 0.1e:
212
213 * try to handle old DCE and MIT kdcs
214 * support for older versions of credential cache files and keytabs
215 * postdated tickets work
216 * support for password quality checks in kpasswdd
217 * new flag --enable-kaserver for kdc
218 * renew fixes
219 * prototype su program
220 * updated (some) manpages
221 * support for KDC resource records
222 * should build with --without-krb4
223 * bug fixes
224
225Changes in release 0.1d:
226
227 * Support building with DB2 (uses 1.85-compat API)
228 * Support krb5-realm.DOMAIN in DNS
229 * new `ktutil srvcreate'
230 * v4/kafs support in klist/kdestroy
231 * bug fixes
232
233Changes in release 0.1c:
234
235 * fix ASN.1 encoding of signed integers
236 * somewhat working `ktutil get'
237 * some documentation updates
238 * update to Autoconf 2.13 and Automake 1.4
239 * the usual bug fixes
240
241Changes in release 0.1b:
242
243 * some old -> new crypto conversion utils
244 * bug fixes
245
246Changes in release 0.1a:
247
248 * new crypto code
249 * more bug fixes
250 * make sure we ask for DES keys in gssapi
251 * support signed ints in ASN1
252 * IPv6-bug fixes
253
254Changes in release 0.0u:
255
256 * lots of bug fixes
257
258Changes in release 0.0t:
259
260 * more robust parsing of krb5.conf
261 * include net{read,write} in lib/roken
262 * bug fixes
263
264Changes in release 0.0s:
265
266 * kludges for parsing options to rsh
267 * more robust parsing of krb5.conf
268 * removed some arbitrary limits
269 * bug fixes
270
271Changes in release 0.0r:
272
273 * default options for some programs
274 * bug fixes
275
276Changes in release 0.0q:
277
278 * support for building shared libraries with libtool
279 * bug fixes
280
281Changes in release 0.0p:
282
283 * keytab moved to /etc/krb5.keytab
284 * avoid false detection of IPv6 on Linux
285 * Lots of more functionality in the gssapi-library
286 * hprop can now read ka-server databases
287 * bug fixes
288
289Changes in release 0.0o:
290
291 * FTP with GSSAPI support.
292 * Bug fixes.
293
294Changes in release 0.0n:
295
296 * Incremental database propagation.
297 * Somewhat improved kadmin ui; the stuff in admin is now removed.
298 * Some support for using enctypes instead of keytypes.
299 * Lots of other improvement and bug fixes, see ChangeLog for details.
|