NEWS revision 57419
157419SmarkmChanges in release 0.2o: 257419Smarkm 357419Smarkm * gss_{import,export}_sec_context added to libgssapi 457419Smarkm 557419Smarkm * new option --addresses to kdc (for listening on an explicit set of 657419Smarkm addresses) 757419Smarkm 857419Smarkm * bug fixes in the krb4 and kaserver emulation part of the kdc 957419Smarkm 1057419Smarkm * other bug fixes 1157419Smarkm 1257416SmarkmChanges in release 0.2n: 1357416Smarkm 1457416Smarkm * more robust parsing of dump files in kadmin 1557416Smarkm * changed default timestamp format for log messages to extended ISO 1657416Smarkm 8601 format (Y-M-DTH:M:S) 1757416Smarkm * changed md4/md5/sha1 APIes to be de-facto `standard' 1857416Smarkm * always make hostname into lower-case before creating principal 1957416Smarkm * small bits of more MIT-compatability 2057416Smarkm * bug fixes 2157416Smarkm 2255682SmarkmChanges in release 0.2m: 2355682Smarkm 2455682Smarkm * handle glibc's getaddrinfo() that returns several ai_canonname 2555682Smarkm 2655682Smarkm * new endian test 2755682Smarkm 2855682Smarkm * man pages fixes 2955682Smarkm 3055682SmarkmChanges in release 0.2l: 3155682Smarkm 3255682Smarkm * bug fixes 3355682Smarkm 3455682SmarkmChanges in release 0.2k: 3555682Smarkm 3655682Smarkm * better IPv6 test 3755682Smarkm 3855682Smarkm * make struct sockaddr_storage in roken work better on alphas 3955682Smarkm 4055682Smarkm * some missing [hn]to[hn]s fixed. 4155682Smarkm 4255682Smarkm * allow users to change their own passwords with kadmin (with initial 4355682Smarkm tickets) 4455682Smarkm 4555682Smarkm * fix stupid bug in parsing KDC specification 4655682Smarkm 4755682Smarkm * add `ktutil change' and `ktutil purge' 4855682Smarkm 4955682SmarkmChanges in release 0.2j: 5055682Smarkm 5155682Smarkm * builds on Irix 5255682Smarkm 5355682Smarkm * ftpd works in passive mode 5455682Smarkm 5555682Smarkm * should build on cygwin 5655682Smarkm 5755682Smarkm * work around broken IPv6-code on OpenBSD 2.6, also add configure 5855682Smarkm option --disable-ipv6 5955682Smarkm 6055682SmarkmChanges in release 0.2i: 6155682Smarkm 6255682Smarkm * use getaddrinfo in the missing places. 6355682Smarkm 6455682Smarkm * fix SRV lookup for admin server 6555682Smarkm 6655682Smarkm * use get{addr,name}info everywhere. and implement it in terms of 6755682Smarkm getipnodeby{name,addr} (which uses gethostbyname{,2} and 6855682Smarkm gethostbyaddr) 6955682Smarkm 7055682SmarkmChanges in release 0.2h: 7155682Smarkm 7255682Smarkm * fix typo in kx (now compiles) 7355682Smarkm 7455682SmarkmChanges in release 0.2g: 7555682Smarkm 7655682Smarkm * lots of bug fixes: 7755682Smarkm * push works 7855682Smarkm * repair appl/test programs 7955682Smarkm * sockaddr_storage works on solaris (alignment issues) 8055682Smarkm * works better with non-roken getaddrinfo 8155682Smarkm * rsh works 8255682Smarkm * some non standard C constructs removed 8355682Smarkm 8455682SmarkmChanges in release 0.2f: 8555682Smarkm 8655682Smarkm * support SRV records for kpasswd 8755682Smarkm * look for both _kerberos and krb5-realm when doing host -> realm mapping 8855682Smarkm 8955682SmarkmChanges in release 0.2e: 9055682Smarkm 9155682Smarkm * changed copyright notices to remove `advertising'-clause. 9255682Smarkm * get{addr,name}info added to roken and used in the other code 9355682Smarkm (this makes things work much better with hosts with both v4 and v6 9455682Smarkm addresses, among other things) 9555682Smarkm * do pre-auth for both password and key-based get_in_tkt 9655682Smarkm * support for having several databases 9755682Smarkm * new command `del_enctype' in kadmin 9855682Smarkm * strptime (and new strftime) add to roken 9955682Smarkm * more paranoia about finding libdb 10055682Smarkm * bug fixes 10155682Smarkm 10255682SmarkmChanges in release 0.2d: 10355682Smarkm 10455682Smarkm * new configuration option [libdefaults]default_etypes_des 10555682Smarkm * internal ls in ftpd builds without KRB4 10655682Smarkm * kx/rsh/push/pop_debug tries v5 and v4 consistenly 10755682Smarkm * build bug fixes 10855682Smarkm * other bug fixes 10955682Smarkm 11055682SmarkmChanges in release 0.2c: 11155682Smarkm 11255682Smarkm * bug fixes (see ChangeLog's for details) 11355682Smarkm 11455682SmarkmChanges in release 0.2b: 11555682Smarkm 11655682Smarkm * bug fixes 11755682Smarkm * actually bump shared library versions 11855682Smarkm 11955682SmarkmChanges in release 0.2a: 12055682Smarkm 12155682Smarkm * a new program verify_krb5_conf for checking your /etc/krb5.conf 12255682Smarkm * add 3DES keys when changing password 12355682Smarkm * support null keys in database 12455682Smarkm * support multiple local realms 12555682Smarkm * implement a keytab backend for AFS KeyFile's 12655682Smarkm * implement a keytab backend for v4 srvtabs 12755682Smarkm * implement `ktutil copy' 12855682Smarkm * support password quality control in v4 kadmind 12955682Smarkm * improvements in v4 compat kadmind 13055682Smarkm * handle the case of having the correct cred in the ccache but with 13155682Smarkm the wrong encryption type better 13255682Smarkm * v6-ify the remaining programs. 13355682Smarkm * internal ls in ftpd 13455682Smarkm * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat 13555682Smarkm * add `ank --random-password' and `cpw --random-password' in kadmin 13655682Smarkm * some programs and documentation for trying to talk to a W2K KDC 13755682Smarkm * bug fixes 13855682Smarkm 13955682SmarkmChanges in release 0.1m: 14055682Smarkm 14155682Smarkm * support for getting default from krb5.conf for kinit/kf/rsh/telnet. 14255682Smarkm From Miroslav Ruda <ruda@ics.muni.cz> 14355682Smarkm * v6-ify hprop and hpropd 14455682Smarkm * support numeric addresses in krb5_mk_req 14555682Smarkm * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz> 14655682Smarkm * make rsh/rshd IPv6-aware 14755682Smarkm * make the gssapi sample applications better at reporting errors 14855682Smarkm * lots of bug fixes 14955682Smarkm * handle systems with v6-aware libc and non-v6 kernels (like Linux 15055682Smarkm with glibc 2.1) better 15155682Smarkm * hide failure of ERPT in ftp 15255682Smarkm * lots of bug fixes 15355682Smarkm 15455682SmarkmChanges in release 0.1l: 15555682Smarkm 15655682Smarkm * make ftp and ftpd IPv6-aware 15755682Smarkm * add inet_pton to roken 15855682Smarkm * more IPv6-awareness 15955682Smarkm * make mini_inetd v6 aware 16055682Smarkm 16155682SmarkmChanges in release 0.1k: 16255682Smarkm 16355682Smarkm * bump shared libraries versions 16455682Smarkm * add roken version of inet_ntop 16555682Smarkm * merge more changes to rshd 16655682Smarkm 16755682SmarkmChanges in release 0.1j: 16855682Smarkm 16955682Smarkm * restore back to the `old' 3DES code. This was supposed to be done 17055682Smarkm in 0.1h and 0.1i but I did a CVS screw-up. 17155682Smarkm * make telnetd handle v6 connections 17255682Smarkm 17355682SmarkmChanges in release 0.1i: 17455682Smarkm 17555682Smarkm * start using `struct sockaddr_storage' which simplifies the code 17655682Smarkm (with a fallback definition if it's not defined) 17755682Smarkm * bug fixes (including in hprop and kf) 17855682Smarkm * don't use mawk which seems to mishandle roken.awk 17955682Smarkm * get_addrs should be able to handle v6 addresses on Linux (with the 18055682Smarkm required patch to the Linux kernel -- ask within) 18155682Smarkm * rshd builds with shadow passwords 18255682Smarkm 18355682SmarkmChanges in release 0.1h: 18455682Smarkm 18555682Smarkm * kf: new program for forwarding credentials 18655682Smarkm * portability fixes 18755682Smarkm * make forwarding credentials work with MIT code 18855682Smarkm * better conversion of ka database 18955682Smarkm * add etc/services.append 19055682Smarkm * correct `modified by' from kpasswdd 19155682Smarkm * lots of bug fixes 19255682Smarkm 19355682SmarkmChanges in release 0.1g: 19455682Smarkm 19555682Smarkm * kgetcred: new program for explicitly obtaining tickets 19655682Smarkm * configure fixes 19755682Smarkm * krb5-aware kx 19855682Smarkm * bug fixes 19955682Smarkm 20055682SmarkmChanges in release 0.1f; 20155682Smarkm 20255682Smarkm * experimental support for v4 kadmin protokoll in kadmind 20355682Smarkm * bug fixes 20455682Smarkm 20555682SmarkmChanges in release 0.1e: 20655682Smarkm 20755682Smarkm * try to handle old DCE and MIT kdcs 20855682Smarkm * support for older versions of credential cache files and keytabs 20955682Smarkm * postdated tickets work 21055682Smarkm * support for password quality checks in kpasswdd 21155682Smarkm * new flag --enable-kaserver for kdc 21255682Smarkm * renew fixes 21355682Smarkm * prototype su program 21455682Smarkm * updated (some) manpages 21555682Smarkm * support for KDC resource records 21655682Smarkm * should build with --without-krb4 21755682Smarkm * bug fixes 21855682Smarkm 21955682SmarkmChanges in release 0.1d: 22055682Smarkm 22155682Smarkm * Support building with DB2 (uses 1.85-compat API) 22255682Smarkm * Support krb5-realm.DOMAIN in DNS 22355682Smarkm * new `ktutil srvcreate' 22455682Smarkm * v4/kafs support in klist/kdestroy 22555682Smarkm * bug fixes 22655682Smarkm 22755682SmarkmChanges in release 0.1c: 22855682Smarkm 22955682Smarkm * fix ASN.1 encoding of signed integers 23055682Smarkm * somewhat working `ktutil get' 23155682Smarkm * some documentation updates 23255682Smarkm * update to Autoconf 2.13 and Automake 1.4 23355682Smarkm * the usual bug fixes 23455682Smarkm 23555682SmarkmChanges in release 0.1b: 23655682Smarkm 23755682Smarkm * some old -> new crypto conversion utils 23855682Smarkm * bug fixes 23955682Smarkm 24055682SmarkmChanges in release 0.1a: 24155682Smarkm 24255682Smarkm * new crypto code 24355682Smarkm * more bug fixes 24455682Smarkm * make sure we ask for DES keys in gssapi 24555682Smarkm * support signed ints in ASN1 24655682Smarkm * IPv6-bug fixes 24755682Smarkm 24855682SmarkmChanges in release 0.0u: 24955682Smarkm 25055682Smarkm * lots of bug fixes 25155682Smarkm 25255682SmarkmChanges in release 0.0t: 25355682Smarkm 25455682Smarkm * more robust parsing of krb5.conf 25555682Smarkm * include net{read,write} in lib/roken 25655682Smarkm * bug fixes 25755682Smarkm 25855682SmarkmChanges in release 0.0s: 25955682Smarkm 26055682Smarkm * kludges for parsing options to rsh 26155682Smarkm * more robust parsing of krb5.conf 26255682Smarkm * removed some arbitrary limits 26355682Smarkm * bug fixes 26455682Smarkm 26555682SmarkmChanges in release 0.0r: 26655682Smarkm 26755682Smarkm * default options for some programs 26855682Smarkm * bug fixes 26955682Smarkm 27055682SmarkmChanges in release 0.0q: 27155682Smarkm 27255682Smarkm * support for building shared libraries with libtool 27355682Smarkm * bug fixes 27455682Smarkm 27555682SmarkmChanges in release 0.0p: 27655682Smarkm 27755682Smarkm * keytab moved to /etc/krb5.keytab 27855682Smarkm * avoid false detection of IPv6 on Linux 27955682Smarkm * Lots of more functionality in the gssapi-library 28055682Smarkm * hprop can now read ka-server databases 28155682Smarkm * bug fixes 28255682Smarkm 28355682SmarkmChanges in release 0.0o: 28455682Smarkm 28555682Smarkm * FTP with GSSAPI support. 28655682Smarkm * Bug fixes. 28755682Smarkm 28855682SmarkmChanges in release 0.0n: 28955682Smarkm 29055682Smarkm * Incremental database propagation. 29155682Smarkm * Somewhat improved kadmin ui; the stuff in admin is now removed. 29255682Smarkm * Some support for using enctypes instead of keytypes. 29355682Smarkm * Lots of other improvement and bug fixes, see ChangeLog for details. 294