NEWS revision 57422
157422SmarkmChanges in release 0.2p: 257422Smarkm 357422Smarkm * bug fix in `kadmin load/merge' 457422Smarkm 557422Smarkm * bug fix in krb5_parse_address 657422Smarkm 757419SmarkmChanges in release 0.2o: 857419Smarkm 957419Smarkm * gss_{import,export}_sec_context added to libgssapi 1057419Smarkm 1157419Smarkm * new option --addresses to kdc (for listening on an explicit set of 1257419Smarkm addresses) 1357419Smarkm 1457419Smarkm * bug fixes in the krb4 and kaserver emulation part of the kdc 1557419Smarkm 1657419Smarkm * other bug fixes 1757419Smarkm 1857416SmarkmChanges in release 0.2n: 1957416Smarkm 2057416Smarkm * more robust parsing of dump files in kadmin 2157416Smarkm * changed default timestamp format for log messages to extended ISO 2257416Smarkm 8601 format (Y-M-DTH:M:S) 2357416Smarkm * changed md4/md5/sha1 APIes to be de-facto `standard' 2457416Smarkm * always make hostname into lower-case before creating principal 2557416Smarkm * small bits of more MIT-compatability 2657416Smarkm * bug fixes 2757416Smarkm 2855682SmarkmChanges in release 0.2m: 2955682Smarkm 3055682Smarkm * handle glibc's getaddrinfo() that returns several ai_canonname 3155682Smarkm 3255682Smarkm * new endian test 3355682Smarkm 3455682Smarkm * man pages fixes 3555682Smarkm 3655682SmarkmChanges in release 0.2l: 3755682Smarkm 3855682Smarkm * bug fixes 3955682Smarkm 4055682SmarkmChanges in release 0.2k: 4155682Smarkm 4255682Smarkm * better IPv6 test 4355682Smarkm 4455682Smarkm * make struct sockaddr_storage in roken work better on alphas 4555682Smarkm 4655682Smarkm * some missing [hn]to[hn]s fixed. 4755682Smarkm 4855682Smarkm * allow users to change their own passwords with kadmin (with initial 4955682Smarkm tickets) 5055682Smarkm 5155682Smarkm * fix stupid bug in parsing KDC specification 5255682Smarkm 5355682Smarkm * add `ktutil change' and `ktutil purge' 5455682Smarkm 5555682SmarkmChanges in release 0.2j: 5655682Smarkm 5755682Smarkm * builds on Irix 5855682Smarkm 5955682Smarkm * ftpd works in passive mode 6055682Smarkm 6155682Smarkm * should build on cygwin 6255682Smarkm 6355682Smarkm * work around broken IPv6-code on OpenBSD 2.6, also add configure 6455682Smarkm option --disable-ipv6 6555682Smarkm 6655682SmarkmChanges in release 0.2i: 6755682Smarkm 6855682Smarkm * use getaddrinfo in the missing places. 6955682Smarkm 7055682Smarkm * fix SRV lookup for admin server 7155682Smarkm 7255682Smarkm * use get{addr,name}info everywhere. and implement it in terms of 7355682Smarkm getipnodeby{name,addr} (which uses gethostbyname{,2} and 7455682Smarkm gethostbyaddr) 7555682Smarkm 7655682SmarkmChanges in release 0.2h: 7755682Smarkm 7855682Smarkm * fix typo in kx (now compiles) 7955682Smarkm 8055682SmarkmChanges in release 0.2g: 8155682Smarkm 8255682Smarkm * lots of bug fixes: 8355682Smarkm * push works 8455682Smarkm * repair appl/test programs 8555682Smarkm * sockaddr_storage works on solaris (alignment issues) 8655682Smarkm * works better with non-roken getaddrinfo 8755682Smarkm * rsh works 8855682Smarkm * some non standard C constructs removed 8955682Smarkm 9055682SmarkmChanges in release 0.2f: 9155682Smarkm 9255682Smarkm * support SRV records for kpasswd 9355682Smarkm * look for both _kerberos and krb5-realm when doing host -> realm mapping 9455682Smarkm 9555682SmarkmChanges in release 0.2e: 9655682Smarkm 9755682Smarkm * changed copyright notices to remove `advertising'-clause. 9855682Smarkm * get{addr,name}info added to roken and used in the other code 9955682Smarkm (this makes things work much better with hosts with both v4 and v6 10055682Smarkm addresses, among other things) 10155682Smarkm * do pre-auth for both password and key-based get_in_tkt 10255682Smarkm * support for having several databases 10355682Smarkm * new command `del_enctype' in kadmin 10455682Smarkm * strptime (and new strftime) add to roken 10555682Smarkm * more paranoia about finding libdb 10655682Smarkm * bug fixes 10755682Smarkm 10855682SmarkmChanges in release 0.2d: 10955682Smarkm 11055682Smarkm * new configuration option [libdefaults]default_etypes_des 11155682Smarkm * internal ls in ftpd builds without KRB4 11255682Smarkm * kx/rsh/push/pop_debug tries v5 and v4 consistenly 11355682Smarkm * build bug fixes 11455682Smarkm * other bug fixes 11555682Smarkm 11655682SmarkmChanges in release 0.2c: 11755682Smarkm 11855682Smarkm * bug fixes (see ChangeLog's for details) 11955682Smarkm 12055682SmarkmChanges in release 0.2b: 12155682Smarkm 12255682Smarkm * bug fixes 12355682Smarkm * actually bump shared library versions 12455682Smarkm 12555682SmarkmChanges in release 0.2a: 12655682Smarkm 12755682Smarkm * a new program verify_krb5_conf for checking your /etc/krb5.conf 12855682Smarkm * add 3DES keys when changing password 12955682Smarkm * support null keys in database 13055682Smarkm * support multiple local realms 13155682Smarkm * implement a keytab backend for AFS KeyFile's 13255682Smarkm * implement a keytab backend for v4 srvtabs 13355682Smarkm * implement `ktutil copy' 13455682Smarkm * support password quality control in v4 kadmind 13555682Smarkm * improvements in v4 compat kadmind 13655682Smarkm * handle the case of having the correct cred in the ccache but with 13755682Smarkm the wrong encryption type better 13855682Smarkm * v6-ify the remaining programs. 13955682Smarkm * internal ls in ftpd 14055682Smarkm * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat 14155682Smarkm * add `ank --random-password' and `cpw --random-password' in kadmin 14255682Smarkm * some programs and documentation for trying to talk to a W2K KDC 14355682Smarkm * bug fixes 14455682Smarkm 14555682SmarkmChanges in release 0.1m: 14655682Smarkm 14755682Smarkm * support for getting default from krb5.conf for kinit/kf/rsh/telnet. 14855682Smarkm From Miroslav Ruda <ruda@ics.muni.cz> 14955682Smarkm * v6-ify hprop and hpropd 15055682Smarkm * support numeric addresses in krb5_mk_req 15155682Smarkm * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz> 15255682Smarkm * make rsh/rshd IPv6-aware 15355682Smarkm * make the gssapi sample applications better at reporting errors 15455682Smarkm * lots of bug fixes 15555682Smarkm * handle systems with v6-aware libc and non-v6 kernels (like Linux 15655682Smarkm with glibc 2.1) better 15755682Smarkm * hide failure of ERPT in ftp 15855682Smarkm * lots of bug fixes 15955682Smarkm 16055682SmarkmChanges in release 0.1l: 16155682Smarkm 16255682Smarkm * make ftp and ftpd IPv6-aware 16355682Smarkm * add inet_pton to roken 16455682Smarkm * more IPv6-awareness 16555682Smarkm * make mini_inetd v6 aware 16655682Smarkm 16755682SmarkmChanges in release 0.1k: 16855682Smarkm 16955682Smarkm * bump shared libraries versions 17055682Smarkm * add roken version of inet_ntop 17155682Smarkm * merge more changes to rshd 17255682Smarkm 17355682SmarkmChanges in release 0.1j: 17455682Smarkm 17555682Smarkm * restore back to the `old' 3DES code. This was supposed to be done 17655682Smarkm in 0.1h and 0.1i but I did a CVS screw-up. 17755682Smarkm * make telnetd handle v6 connections 17855682Smarkm 17955682SmarkmChanges in release 0.1i: 18055682Smarkm 18155682Smarkm * start using `struct sockaddr_storage' which simplifies the code 18255682Smarkm (with a fallback definition if it's not defined) 18355682Smarkm * bug fixes (including in hprop and kf) 18455682Smarkm * don't use mawk which seems to mishandle roken.awk 18555682Smarkm * get_addrs should be able to handle v6 addresses on Linux (with the 18655682Smarkm required patch to the Linux kernel -- ask within) 18755682Smarkm * rshd builds with shadow passwords 18855682Smarkm 18955682SmarkmChanges in release 0.1h: 19055682Smarkm 19155682Smarkm * kf: new program for forwarding credentials 19255682Smarkm * portability fixes 19355682Smarkm * make forwarding credentials work with MIT code 19455682Smarkm * better conversion of ka database 19555682Smarkm * add etc/services.append 19655682Smarkm * correct `modified by' from kpasswdd 19755682Smarkm * lots of bug fixes 19855682Smarkm 19955682SmarkmChanges in release 0.1g: 20055682Smarkm 20155682Smarkm * kgetcred: new program for explicitly obtaining tickets 20255682Smarkm * configure fixes 20355682Smarkm * krb5-aware kx 20455682Smarkm * bug fixes 20555682Smarkm 20655682SmarkmChanges in release 0.1f; 20755682Smarkm 20855682Smarkm * experimental support for v4 kadmin protokoll in kadmind 20955682Smarkm * bug fixes 21055682Smarkm 21155682SmarkmChanges in release 0.1e: 21255682Smarkm 21355682Smarkm * try to handle old DCE and MIT kdcs 21455682Smarkm * support for older versions of credential cache files and keytabs 21555682Smarkm * postdated tickets work 21655682Smarkm * support for password quality checks in kpasswdd 21755682Smarkm * new flag --enable-kaserver for kdc 21855682Smarkm * renew fixes 21955682Smarkm * prototype su program 22055682Smarkm * updated (some) manpages 22155682Smarkm * support for KDC resource records 22255682Smarkm * should build with --without-krb4 22355682Smarkm * bug fixes 22455682Smarkm 22555682SmarkmChanges in release 0.1d: 22655682Smarkm 22755682Smarkm * Support building with DB2 (uses 1.85-compat API) 22855682Smarkm * Support krb5-realm.DOMAIN in DNS 22955682Smarkm * new `ktutil srvcreate' 23055682Smarkm * v4/kafs support in klist/kdestroy 23155682Smarkm * bug fixes 23255682Smarkm 23355682SmarkmChanges in release 0.1c: 23455682Smarkm 23555682Smarkm * fix ASN.1 encoding of signed integers 23655682Smarkm * somewhat working `ktutil get' 23755682Smarkm * some documentation updates 23855682Smarkm * update to Autoconf 2.13 and Automake 1.4 23955682Smarkm * the usual bug fixes 24055682Smarkm 24155682SmarkmChanges in release 0.1b: 24255682Smarkm 24355682Smarkm * some old -> new crypto conversion utils 24455682Smarkm * bug fixes 24555682Smarkm 24655682SmarkmChanges in release 0.1a: 24755682Smarkm 24855682Smarkm * new crypto code 24955682Smarkm * more bug fixes 25055682Smarkm * make sure we ask for DES keys in gssapi 25155682Smarkm * support signed ints in ASN1 25255682Smarkm * IPv6-bug fixes 25355682Smarkm 25455682SmarkmChanges in release 0.0u: 25555682Smarkm 25655682Smarkm * lots of bug fixes 25755682Smarkm 25855682SmarkmChanges in release 0.0t: 25955682Smarkm 26055682Smarkm * more robust parsing of krb5.conf 26155682Smarkm * include net{read,write} in lib/roken 26255682Smarkm * bug fixes 26355682Smarkm 26455682SmarkmChanges in release 0.0s: 26555682Smarkm 26655682Smarkm * kludges for parsing options to rsh 26755682Smarkm * more robust parsing of krb5.conf 26855682Smarkm * removed some arbitrary limits 26955682Smarkm * bug fixes 27055682Smarkm 27155682SmarkmChanges in release 0.0r: 27255682Smarkm 27355682Smarkm * default options for some programs 27455682Smarkm * bug fixes 27555682Smarkm 27655682SmarkmChanges in release 0.0q: 27755682Smarkm 27855682Smarkm * support for building shared libraries with libtool 27955682Smarkm * bug fixes 28055682Smarkm 28155682SmarkmChanges in release 0.0p: 28255682Smarkm 28355682Smarkm * keytab moved to /etc/krb5.keytab 28455682Smarkm * avoid false detection of IPv6 on Linux 28555682Smarkm * Lots of more functionality in the gssapi-library 28655682Smarkm * hprop can now read ka-server databases 28755682Smarkm * bug fixes 28855682Smarkm 28955682SmarkmChanges in release 0.0o: 29055682Smarkm 29155682Smarkm * FTP with GSSAPI support. 29255682Smarkm * Bug fixes. 29355682Smarkm 29455682SmarkmChanges in release 0.0n: 29555682Smarkm 29655682Smarkm * Incremental database propagation. 29755682Smarkm * Somewhat improved kadmin ui; the stuff in admin is now removed. 29855682Smarkm * Some support for using enctypes instead of keytypes. 29955682Smarkm * Lots of other improvement and bug fixes, see ChangeLog for details. 300