NEWS revision 55682 
1Changes in release 0.2m:
2
3 * handle glibc's getaddrinfo() that returns several ai_canonname
4
5 * new endian test
6
7 * man pages fixes
8
9Changes in release 0.2l:
10
11 * bug fixes
12
13Changes in release 0.2k:
14
15 * better IPv6 test
16
17 * make struct sockaddr_storage in roken work better on alphas
18
19 * some missing [hn]to[hn]s fixed.
20
21 * allow users to change their own passwords with kadmin (with initial
22   tickets)
23
24 * fix stupid bug in parsing KDC specification
25
26 * add `ktutil change' and `ktutil purge'
27
28Changes in release 0.2j:
29
30 * builds on Irix
31
32 * ftpd works in passive mode
33
34 * should build on cygwin
35
36 * work around broken IPv6-code on OpenBSD 2.6, also add configure
37   option --disable-ipv6
38
39Changes in release 0.2i:
40
41 * use getaddrinfo in the missing places.
42
43 * fix SRV lookup for admin server
44
45 * use get{addr,name}info everywhere.  and implement it in terms of
46   getipnodeby{name,addr} (which uses gethostbyname{,2} and
47   gethostbyaddr)
48
49Changes in release 0.2h:
50
51 * fix typo in kx (now compiles)
52
53Changes in release 0.2g:
54
55 * lots of bug fixes:
56   * push works
57   * repair appl/test programs
58   * sockaddr_storage works on solaris (alignment issues)
59   * works better with non-roken getaddrinfo
60   * rsh works
61   * some non standard C constructs removed
62
63Changes in release 0.2f:
64
65 * support SRV records for kpasswd
66 * look for both _kerberos and krb5-realm when doing host -> realm mapping
67
68Changes in release 0.2e:
69
70 * changed copyright notices to remove `advertising'-clause.
71 * get{addr,name}info added to roken and used in the other code
72   (this makes things work much better with hosts with both v4 and v6
73    addresses, among other things)
74 * do pre-auth for both password and key-based get_in_tkt
75 * support for having several databases
76 * new command `del_enctype' in kadmin
77 * strptime (and new strftime) add to roken
78 * more paranoia about finding libdb
79 * bug fixes
80
81Changes in release 0.2d:
82
83 * new configuration option [libdefaults]default_etypes_des
84 * internal ls in ftpd builds without KRB4
85 * kx/rsh/push/pop_debug tries v5 and v4 consistenly
86 * build bug fixes
87 * other bug fixes
88
89Changes in release 0.2c:
90
91 * bug fixes (see ChangeLog's for details)
92
93Changes in release 0.2b:
94
95 * bug fixes
96 * actually bump shared library versions
97
98Changes in release 0.2a:
99
100 * a new program verify_krb5_conf for checking your /etc/krb5.conf
101 * add 3DES keys when changing password
102 * support null keys in database
103 * support multiple local realms
104 * implement a keytab backend for AFS KeyFile's
105 * implement a keytab backend for v4 srvtabs
106 * implement `ktutil copy'
107 * support password quality control in v4 kadmind
108 * improvements in v4 compat kadmind
109 * handle the case of having the correct cred in the ccache but with
110   the wrong encryption type better
111 * v6-ify the remaining programs.
112 * internal ls in ftpd
113 * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat
114 * add `ank --random-password' and `cpw --random-password' in kadmin
115 * some programs and documentation for trying to talk to a W2K KDC
116 * bug fixes
117
118Changes in release 0.1m:
119
120 * support for getting default from krb5.conf for kinit/kf/rsh/telnet.
121   From Miroslav Ruda <ruda@ics.muni.cz>
122 * v6-ify hprop and hpropd
123 * support numeric addresses in krb5_mk_req
124 * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz>
125 * make rsh/rshd IPv6-aware
126 * make the gssapi sample applications better at reporting errors
127 * lots of bug fixes
128 * handle systems with v6-aware libc and non-v6 kernels (like Linux
129   with glibc 2.1) better
130 * hide failure of ERPT in ftp
131 * lots of bug fixes
132
133Changes in release 0.1l:
134
135 * make ftp and ftpd IPv6-aware
136 * add inet_pton to roken
137 * more IPv6-awareness
138 * make mini_inetd v6 aware
139
140Changes in release 0.1k:
141
142 * bump shared libraries versions
143 * add roken version of inet_ntop
144 * merge more changes to rshd
145
146Changes in release 0.1j:
147
148 * restore back to the `old' 3DES code.  This was supposed to be done
149   in 0.1h and 0.1i but I did a CVS screw-up.
150 * make telnetd handle v6 connections
151
152Changes in release 0.1i:
153
154 * start using `struct sockaddr_storage' which simplifies the code
155   (with a fallback definition if it's not defined)
156 * bug fixes (including in hprop and kf)
157 * don't use mawk which seems to mishandle roken.awk
158 * get_addrs should be able to handle v6 addresses on Linux (with the
159   required patch to the Linux kernel -- ask within)
160 * rshd builds with shadow passwords
161
162Changes in release 0.1h:
163
164 * kf: new program for forwarding credentials
165 * portability fixes
166 * make forwarding credentials work with MIT code
167 * better conversion of ka database
168 * add etc/services.append
169 * correct `modified by' from kpasswdd
170 * lots of bug fixes
171
172Changes in release 0.1g:
173
174 * kgetcred: new program for explicitly obtaining tickets
175 * configure fixes
176 * krb5-aware kx
177 * bug fixes
178
179Changes in release 0.1f;
180
181 * experimental support for v4 kadmin protokoll in kadmind
182 * bug fixes
183
184Changes in release 0.1e:
185
186 * try to handle old DCE and MIT kdcs
187 * support for older versions of credential cache files and keytabs
188 * postdated tickets work
189 * support for password quality checks in kpasswdd
190 * new flag --enable-kaserver for kdc
191 * renew fixes
192 * prototype su program
193 * updated (some) manpages
194 * support for KDC resource records
195 * should build with --without-krb4
196 * bug fixes
197
198Changes in release 0.1d:
199
200 * Support building with DB2 (uses 1.85-compat API)
201 * Support krb5-realm.DOMAIN in DNS
202 * new `ktutil srvcreate'
203 * v4/kafs support in klist/kdestroy
204 * bug fixes
205
206Changes in release 0.1c:
207
208 * fix ASN.1 encoding of signed integers
209 * somewhat working `ktutil get'
210 * some documentation updates
211 * update to Autoconf 2.13 and Automake 1.4
212 * the usual bug fixes
213
214Changes in release 0.1b:
215
216 * some old -> new crypto conversion utils
217 * bug fixes
218
219Changes in release 0.1a:
220
221 * new crypto code
222 * more bug fixes
223 * make sure we ask for DES keys in gssapi
224 * support signed ints in ASN1
225 * IPv6-bug fixes
226
227Changes in release 0.0u:
228
229 * lots of bug fixes
230
231Changes in release 0.0t:
232
233 * more robust parsing of krb5.conf
234 * include net{read,write} in lib/roken
235 * bug fixes
236
237Changes in release 0.0s:
238
239 * kludges for parsing options to rsh
240 * more robust parsing of krb5.conf
241 * removed some arbitrary limits
242 * bug fixes
243
244Changes in release 0.0r:
245
246 * default options for some programs
247 * bug fixes
248
249Changes in release 0.0q:
250
251 * support for building shared libraries with libtool
252 * bug fixes
253
254Changes in release 0.0p:
255
256 * keytab moved to /etc/krb5.keytab
257 * avoid false detection of IPv6 on Linux
258 * Lots of more functionality in the gssapi-library
259 * hprop can now read ka-server databases
260 * bug fixes
261
262Changes in release 0.0o:
263
264 * FTP with GSSAPI support.
265 * Bug fixes.
266
267Changes in release 0.0n:
268
269 * Incremental database propagation.
270 * Somewhat improved kadmin ui; the stuff in admin is now removed.
271 * Some support for using enctypes instead of keytypes.
272 * Lots of other improvement and bug fixes, see ChangeLog for details.
273