NEWS revision 57416
157416SmarkmChanges in release 0.2n: 257416Smarkm 357416Smarkm * more robust parsing of dump files in kadmin 457416Smarkm * changed default timestamp format for log messages to extended ISO 557416Smarkm 8601 format (Y-M-DTH:M:S) 657416Smarkm * changed md4/md5/sha1 APIes to be de-facto `standard' 757416Smarkm * always make hostname into lower-case before creating principal 857416Smarkm * small bits of more MIT-compatability 957416Smarkm * bug fixes 1057416Smarkm 1155682SmarkmChanges in release 0.2m: 1255682Smarkm 1355682Smarkm * handle glibc's getaddrinfo() that returns several ai_canonname 1455682Smarkm 1555682Smarkm * new endian test 1655682Smarkm 1755682Smarkm * man pages fixes 1855682Smarkm 1955682SmarkmChanges in release 0.2l: 2055682Smarkm 2155682Smarkm * bug fixes 2255682Smarkm 2355682SmarkmChanges in release 0.2k: 2455682Smarkm 2555682Smarkm * better IPv6 test 2655682Smarkm 2755682Smarkm * make struct sockaddr_storage in roken work better on alphas 2855682Smarkm 2955682Smarkm * some missing [hn]to[hn]s fixed. 3055682Smarkm 3155682Smarkm * allow users to change their own passwords with kadmin (with initial 3255682Smarkm tickets) 3355682Smarkm 3455682Smarkm * fix stupid bug in parsing KDC specification 3555682Smarkm 3655682Smarkm * add `ktutil change' and `ktutil purge' 3755682Smarkm 3855682SmarkmChanges in release 0.2j: 3955682Smarkm 4055682Smarkm * builds on Irix 4155682Smarkm 4255682Smarkm * ftpd works in passive mode 4355682Smarkm 4455682Smarkm * should build on cygwin 4555682Smarkm 4655682Smarkm * work around broken IPv6-code on OpenBSD 2.6, also add configure 4755682Smarkm option --disable-ipv6 4855682Smarkm 4955682SmarkmChanges in release 0.2i: 5055682Smarkm 5155682Smarkm * use getaddrinfo in the missing places. 5255682Smarkm 5355682Smarkm * fix SRV lookup for admin server 5455682Smarkm 5555682Smarkm * use get{addr,name}info everywhere. and implement it in terms of 5655682Smarkm getipnodeby{name,addr} (which uses gethostbyname{,2} and 5755682Smarkm gethostbyaddr) 5855682Smarkm 5955682SmarkmChanges in release 0.2h: 6055682Smarkm 6155682Smarkm * fix typo in kx (now compiles) 6255682Smarkm 6355682SmarkmChanges in release 0.2g: 6455682Smarkm 6555682Smarkm * lots of bug fixes: 6655682Smarkm * push works 6755682Smarkm * repair appl/test programs 6855682Smarkm * sockaddr_storage works on solaris (alignment issues) 6955682Smarkm * works better with non-roken getaddrinfo 7055682Smarkm * rsh works 7155682Smarkm * some non standard C constructs removed 7255682Smarkm 7355682SmarkmChanges in release 0.2f: 7455682Smarkm 7555682Smarkm * support SRV records for kpasswd 7655682Smarkm * look for both _kerberos and krb5-realm when doing host -> realm mapping 7755682Smarkm 7855682SmarkmChanges in release 0.2e: 7955682Smarkm 8055682Smarkm * changed copyright notices to remove `advertising'-clause. 8155682Smarkm * get{addr,name}info added to roken and used in the other code 8255682Smarkm (this makes things work much better with hosts with both v4 and v6 8355682Smarkm addresses, among other things) 8455682Smarkm * do pre-auth for both password and key-based get_in_tkt 8555682Smarkm * support for having several databases 8655682Smarkm * new command `del_enctype' in kadmin 8755682Smarkm * strptime (and new strftime) add to roken 8855682Smarkm * more paranoia about finding libdb 8955682Smarkm * bug fixes 9055682Smarkm 9155682SmarkmChanges in release 0.2d: 9255682Smarkm 9355682Smarkm * new configuration option [libdefaults]default_etypes_des 9455682Smarkm * internal ls in ftpd builds without KRB4 9555682Smarkm * kx/rsh/push/pop_debug tries v5 and v4 consistenly 9655682Smarkm * build bug fixes 9755682Smarkm * other bug fixes 9855682Smarkm 9955682SmarkmChanges in release 0.2c: 10055682Smarkm 10155682Smarkm * bug fixes (see ChangeLog's for details) 10255682Smarkm 10355682SmarkmChanges in release 0.2b: 10455682Smarkm 10555682Smarkm * bug fixes 10655682Smarkm * actually bump shared library versions 10755682Smarkm 10855682SmarkmChanges in release 0.2a: 10955682Smarkm 11055682Smarkm * a new program verify_krb5_conf for checking your /etc/krb5.conf 11155682Smarkm * add 3DES keys when changing password 11255682Smarkm * support null keys in database 11355682Smarkm * support multiple local realms 11455682Smarkm * implement a keytab backend for AFS KeyFile's 11555682Smarkm * implement a keytab backend for v4 srvtabs 11655682Smarkm * implement `ktutil copy' 11755682Smarkm * support password quality control in v4 kadmind 11855682Smarkm * improvements in v4 compat kadmind 11955682Smarkm * handle the case of having the correct cred in the ccache but with 12055682Smarkm the wrong encryption type better 12155682Smarkm * v6-ify the remaining programs. 12255682Smarkm * internal ls in ftpd 12355682Smarkm * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat 12455682Smarkm * add `ank --random-password' and `cpw --random-password' in kadmin 12555682Smarkm * some programs and documentation for trying to talk to a W2K KDC 12655682Smarkm * bug fixes 12755682Smarkm 12855682SmarkmChanges in release 0.1m: 12955682Smarkm 13055682Smarkm * support for getting default from krb5.conf for kinit/kf/rsh/telnet. 13155682Smarkm From Miroslav Ruda <ruda@ics.muni.cz> 13255682Smarkm * v6-ify hprop and hpropd 13355682Smarkm * support numeric addresses in krb5_mk_req 13455682Smarkm * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz> 13555682Smarkm * make rsh/rshd IPv6-aware 13655682Smarkm * make the gssapi sample applications better at reporting errors 13755682Smarkm * lots of bug fixes 13855682Smarkm * handle systems with v6-aware libc and non-v6 kernels (like Linux 13955682Smarkm with glibc 2.1) better 14055682Smarkm * hide failure of ERPT in ftp 14155682Smarkm * lots of bug fixes 14255682Smarkm 14355682SmarkmChanges in release 0.1l: 14455682Smarkm 14555682Smarkm * make ftp and ftpd IPv6-aware 14655682Smarkm * add inet_pton to roken 14755682Smarkm * more IPv6-awareness 14855682Smarkm * make mini_inetd v6 aware 14955682Smarkm 15055682SmarkmChanges in release 0.1k: 15155682Smarkm 15255682Smarkm * bump shared libraries versions 15355682Smarkm * add roken version of inet_ntop 15455682Smarkm * merge more changes to rshd 15555682Smarkm 15655682SmarkmChanges in release 0.1j: 15755682Smarkm 15855682Smarkm * restore back to the `old' 3DES code. This was supposed to be done 15955682Smarkm in 0.1h and 0.1i but I did a CVS screw-up. 16055682Smarkm * make telnetd handle v6 connections 16155682Smarkm 16255682SmarkmChanges in release 0.1i: 16355682Smarkm 16455682Smarkm * start using `struct sockaddr_storage' which simplifies the code 16555682Smarkm (with a fallback definition if it's not defined) 16655682Smarkm * bug fixes (including in hprop and kf) 16755682Smarkm * don't use mawk which seems to mishandle roken.awk 16855682Smarkm * get_addrs should be able to handle v6 addresses on Linux (with the 16955682Smarkm required patch to the Linux kernel -- ask within) 17055682Smarkm * rshd builds with shadow passwords 17155682Smarkm 17255682SmarkmChanges in release 0.1h: 17355682Smarkm 17455682Smarkm * kf: new program for forwarding credentials 17555682Smarkm * portability fixes 17655682Smarkm * make forwarding credentials work with MIT code 17755682Smarkm * better conversion of ka database 17855682Smarkm * add etc/services.append 17955682Smarkm * correct `modified by' from kpasswdd 18055682Smarkm * lots of bug fixes 18155682Smarkm 18255682SmarkmChanges in release 0.1g: 18355682Smarkm 18455682Smarkm * kgetcred: new program for explicitly obtaining tickets 18555682Smarkm * configure fixes 18655682Smarkm * krb5-aware kx 18755682Smarkm * bug fixes 18855682Smarkm 18955682SmarkmChanges in release 0.1f; 19055682Smarkm 19155682Smarkm * experimental support for v4 kadmin protokoll in kadmind 19255682Smarkm * bug fixes 19355682Smarkm 19455682SmarkmChanges in release 0.1e: 19555682Smarkm 19655682Smarkm * try to handle old DCE and MIT kdcs 19755682Smarkm * support for older versions of credential cache files and keytabs 19855682Smarkm * postdated tickets work 19955682Smarkm * support for password quality checks in kpasswdd 20055682Smarkm * new flag --enable-kaserver for kdc 20155682Smarkm * renew fixes 20255682Smarkm * prototype su program 20355682Smarkm * updated (some) manpages 20455682Smarkm * support for KDC resource records 20555682Smarkm * should build with --without-krb4 20655682Smarkm * bug fixes 20755682Smarkm 20855682SmarkmChanges in release 0.1d: 20955682Smarkm 21055682Smarkm * Support building with DB2 (uses 1.85-compat API) 21155682Smarkm * Support krb5-realm.DOMAIN in DNS 21255682Smarkm * new `ktutil srvcreate' 21355682Smarkm * v4/kafs support in klist/kdestroy 21455682Smarkm * bug fixes 21555682Smarkm 21655682SmarkmChanges in release 0.1c: 21755682Smarkm 21855682Smarkm * fix ASN.1 encoding of signed integers 21955682Smarkm * somewhat working `ktutil get' 22055682Smarkm * some documentation updates 22155682Smarkm * update to Autoconf 2.13 and Automake 1.4 22255682Smarkm * the usual bug fixes 22355682Smarkm 22455682SmarkmChanges in release 0.1b: 22555682Smarkm 22655682Smarkm * some old -> new crypto conversion utils 22755682Smarkm * bug fixes 22855682Smarkm 22955682SmarkmChanges in release 0.1a: 23055682Smarkm 23155682Smarkm * new crypto code 23255682Smarkm * more bug fixes 23355682Smarkm * make sure we ask for DES keys in gssapi 23455682Smarkm * support signed ints in ASN1 23555682Smarkm * IPv6-bug fixes 23655682Smarkm 23755682SmarkmChanges in release 0.0u: 23855682Smarkm 23955682Smarkm * lots of bug fixes 24055682Smarkm 24155682SmarkmChanges in release 0.0t: 24255682Smarkm 24355682Smarkm * more robust parsing of krb5.conf 24455682Smarkm * include net{read,write} in lib/roken 24555682Smarkm * bug fixes 24655682Smarkm 24755682SmarkmChanges in release 0.0s: 24855682Smarkm 24955682Smarkm * kludges for parsing options to rsh 25055682Smarkm * more robust parsing of krb5.conf 25155682Smarkm * removed some arbitrary limits 25255682Smarkm * bug fixes 25355682Smarkm 25455682SmarkmChanges in release 0.0r: 25555682Smarkm 25655682Smarkm * default options for some programs 25755682Smarkm * bug fixes 25855682Smarkm 25955682SmarkmChanges in release 0.0q: 26055682Smarkm 26155682Smarkm * support for building shared libraries with libtool 26255682Smarkm * bug fixes 26355682Smarkm 26455682SmarkmChanges in release 0.0p: 26555682Smarkm 26655682Smarkm * keytab moved to /etc/krb5.keytab 26755682Smarkm * avoid false detection of IPv6 on Linux 26855682Smarkm * Lots of more functionality in the gssapi-library 26955682Smarkm * hprop can now read ka-server databases 27055682Smarkm * bug fixes 27155682Smarkm 27255682SmarkmChanges in release 0.0o: 27355682Smarkm 27455682Smarkm * FTP with GSSAPI support. 27555682Smarkm * Bug fixes. 27655682Smarkm 27755682SmarkmChanges in release 0.0n: 27855682Smarkm 27955682Smarkm * Incremental database propagation. 28055682Smarkm * Somewhat improved kadmin ui; the stuff in admin is now removed. 28155682Smarkm * Some support for using enctypes instead of keytypes. 28255682Smarkm * Lots of other improvement and bug fixes, see ChangeLog for details. 283