NEWS revision 57416 
1Changes in release 0.2n:
2
3 * more robust parsing of dump files in kadmin
4 * changed default timestamp format for log messages to extended ISO
5   8601 format (Y-M-DTH:M:S)
6 * changed md4/md5/sha1 APIes to be de-facto `standard'
7 * always make hostname into lower-case before creating principal
8 * small bits of more MIT-compatability
9 * bug fixes
10
11Changes in release 0.2m:
12
13 * handle glibc's getaddrinfo() that returns several ai_canonname
14
15 * new endian test
16
17 * man pages fixes
18
19Changes in release 0.2l:
20
21 * bug fixes
22
23Changes in release 0.2k:
24
25 * better IPv6 test
26
27 * make struct sockaddr_storage in roken work better on alphas
28
29 * some missing [hn]to[hn]s fixed.
30
31 * allow users to change their own passwords with kadmin (with initial
32   tickets)
33
34 * fix stupid bug in parsing KDC specification
35
36 * add `ktutil change' and `ktutil purge'
37
38Changes in release 0.2j:
39
40 * builds on Irix
41
42 * ftpd works in passive mode
43
44 * should build on cygwin
45
46 * work around broken IPv6-code on OpenBSD 2.6, also add configure
47   option --disable-ipv6
48
49Changes in release 0.2i:
50
51 * use getaddrinfo in the missing places.
52
53 * fix SRV lookup for admin server
54
55 * use get{addr,name}info everywhere.  and implement it in terms of
56   getipnodeby{name,addr} (which uses gethostbyname{,2} and
57   gethostbyaddr)
58
59Changes in release 0.2h:
60
61 * fix typo in kx (now compiles)
62
63Changes in release 0.2g:
64
65 * lots of bug fixes:
66   * push works
67   * repair appl/test programs
68   * sockaddr_storage works on solaris (alignment issues)
69   * works better with non-roken getaddrinfo
70   * rsh works
71   * some non standard C constructs removed
72
73Changes in release 0.2f:
74
75 * support SRV records for kpasswd
76 * look for both _kerberos and krb5-realm when doing host -> realm mapping
77
78Changes in release 0.2e:
79
80 * changed copyright notices to remove `advertising'-clause.
81 * get{addr,name}info added to roken and used in the other code
82   (this makes things work much better with hosts with both v4 and v6
83    addresses, among other things)
84 * do pre-auth for both password and key-based get_in_tkt
85 * support for having several databases
86 * new command `del_enctype' in kadmin
87 * strptime (and new strftime) add to roken
88 * more paranoia about finding libdb
89 * bug fixes
90
91Changes in release 0.2d:
92
93 * new configuration option [libdefaults]default_etypes_des
94 * internal ls in ftpd builds without KRB4
95 * kx/rsh/push/pop_debug tries v5 and v4 consistenly
96 * build bug fixes
97 * other bug fixes
98
99Changes in release 0.2c:
100
101 * bug fixes (see ChangeLog's for details)
102
103Changes in release 0.2b:
104
105 * bug fixes
106 * actually bump shared library versions
107
108Changes in release 0.2a:
109
110 * a new program verify_krb5_conf for checking your /etc/krb5.conf
111 * add 3DES keys when changing password
112 * support null keys in database
113 * support multiple local realms
114 * implement a keytab backend for AFS KeyFile's
115 * implement a keytab backend for v4 srvtabs
116 * implement `ktutil copy'
117 * support password quality control in v4 kadmind
118 * improvements in v4 compat kadmind
119 * handle the case of having the correct cred in the ccache but with
120   the wrong encryption type better
121 * v6-ify the remaining programs.
122 * internal ls in ftpd
123 * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat
124 * add `ank --random-password' and `cpw --random-password' in kadmin
125 * some programs and documentation for trying to talk to a W2K KDC
126 * bug fixes
127
128Changes in release 0.1m:
129
130 * support for getting default from krb5.conf for kinit/kf/rsh/telnet.
131   From Miroslav Ruda <ruda@ics.muni.cz>
132 * v6-ify hprop and hpropd
133 * support numeric addresses in krb5_mk_req
134 * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz>
135 * make rsh/rshd IPv6-aware
136 * make the gssapi sample applications better at reporting errors
137 * lots of bug fixes
138 * handle systems with v6-aware libc and non-v6 kernels (like Linux
139   with glibc 2.1) better
140 * hide failure of ERPT in ftp
141 * lots of bug fixes
142
143Changes in release 0.1l:
144
145 * make ftp and ftpd IPv6-aware
146 * add inet_pton to roken
147 * more IPv6-awareness
148 * make mini_inetd v6 aware
149
150Changes in release 0.1k:
151
152 * bump shared libraries versions
153 * add roken version of inet_ntop
154 * merge more changes to rshd
155
156Changes in release 0.1j:
157
158 * restore back to the `old' 3DES code.  This was supposed to be done
159   in 0.1h and 0.1i but I did a CVS screw-up.
160 * make telnetd handle v6 connections
161
162Changes in release 0.1i:
163
164 * start using `struct sockaddr_storage' which simplifies the code
165   (with a fallback definition if it's not defined)
166 * bug fixes (including in hprop and kf)
167 * don't use mawk which seems to mishandle roken.awk
168 * get_addrs should be able to handle v6 addresses on Linux (with the
169   required patch to the Linux kernel -- ask within)
170 * rshd builds with shadow passwords
171
172Changes in release 0.1h:
173
174 * kf: new program for forwarding credentials
175 * portability fixes
176 * make forwarding credentials work with MIT code
177 * better conversion of ka database
178 * add etc/services.append
179 * correct `modified by' from kpasswdd
180 * lots of bug fixes
181
182Changes in release 0.1g:
183
184 * kgetcred: new program for explicitly obtaining tickets
185 * configure fixes
186 * krb5-aware kx
187 * bug fixes
188
189Changes in release 0.1f;
190
191 * experimental support for v4 kadmin protokoll in kadmind
192 * bug fixes
193
194Changes in release 0.1e:
195
196 * try to handle old DCE and MIT kdcs
197 * support for older versions of credential cache files and keytabs
198 * postdated tickets work
199 * support for password quality checks in kpasswdd
200 * new flag --enable-kaserver for kdc
201 * renew fixes
202 * prototype su program
203 * updated (some) manpages
204 * support for KDC resource records
205 * should build with --without-krb4
206 * bug fixes
207
208Changes in release 0.1d:
209
210 * Support building with DB2 (uses 1.85-compat API)
211 * Support krb5-realm.DOMAIN in DNS
212 * new `ktutil srvcreate'
213 * v4/kafs support in klist/kdestroy
214 * bug fixes
215
216Changes in release 0.1c:
217
218 * fix ASN.1 encoding of signed integers
219 * somewhat working `ktutil get'
220 * some documentation updates
221 * update to Autoconf 2.13 and Automake 1.4
222 * the usual bug fixes
223
224Changes in release 0.1b:
225
226 * some old -> new crypto conversion utils
227 * bug fixes
228
229Changes in release 0.1a:
230
231 * new crypto code
232 * more bug fixes
233 * make sure we ask for DES keys in gssapi
234 * support signed ints in ASN1
235 * IPv6-bug fixes
236
237Changes in release 0.0u:
238
239 * lots of bug fixes
240
241Changes in release 0.0t:
242
243 * more robust parsing of krb5.conf
244 * include net{read,write} in lib/roken
245 * bug fixes
246
247Changes in release 0.0s:
248
249 * kludges for parsing options to rsh
250 * more robust parsing of krb5.conf
251 * removed some arbitrary limits
252 * bug fixes
253
254Changes in release 0.0r:
255
256 * default options for some programs
257 * bug fixes
258
259Changes in release 0.0q:
260
261 * support for building shared libraries with libtool
262 * bug fixes
263
264Changes in release 0.0p:
265
266 * keytab moved to /etc/krb5.keytab
267 * avoid false detection of IPv6 on Linux
268 * Lots of more functionality in the gssapi-library
269 * hprop can now read ka-server databases
270 * bug fixes
271
272Changes in release 0.0o:
273
274 * FTP with GSSAPI support.
275 * Bug fixes.
276
277Changes in release 0.0n:
278
279 * Incremental database propagation.
280 * Somewhat improved kadmin ui; the stuff in admin is now removed.
281 * Some support for using enctypes instead of keytypes.
282 * Lots of other improvement and bug fixes, see ChangeLog for details.
283