1 Changes in release 0.2o:
3 * gss_{import,export}_sec_context added to libgssapi
5 * new option --addresses to kdc (for listening on an explicit set of
8 Changes in release 0.2n:
10 * more robust parsing of dump files in kadmin
11 * changed default timestamp format for log messages to extended ISO
12 8601 format (Y-M-DTH:M:S)
13 * changed md4/md5/sha1 APIes to be de-facto `standard'
14 * always make hostname into lower-case before creating principal
15 * small bits of more MIT-compatability
18 Changes in release 0.2m:
20 * handle glibc's getaddrinfo() that returns several ai_canonname
26 Changes in release 0.2l:
30 Changes in release 0.2k:
34 * make struct sockaddr_storage in roken work better on alphas
36 * some missing [hn]to[hn]s fixed.
38 * allow users to change their own passwords with kadmin (with initial
41 * fix stupid bug in parsing KDC specification
43 * add `ktutil change' and `ktutil purge'
45 Changes in release 0.2j:
49 * ftpd works in passive mode
51 * should build on cygwin
53 * work around broken IPv6-code on OpenBSD 2.6, also add configure
56 Changes in release 0.2i:
58 * use getaddrinfo in the missing places.
60 * fix SRV lookup for admin server
62 * use get{addr,name}info everywhere. and implement it in terms of
63 getipnodeby{name,addr} (which uses gethostbyname{,2} and
66 Changes in release 0.2h:
68 * fix typo in kx (now compiles)
70 Changes in release 0.2g:
74 * repair appl/test programs
75 * sockaddr_storage works on solaris (alignment issues)
76 * works better with non-roken getaddrinfo
78 * some non standard C constructs removed
80 Changes in release 0.2f:
82 * support SRV records for kpasswd
83 * look for both _kerberos and krb5-realm when doing host -> realm mapping
85 Changes in release 0.2e:
87 * changed copyright notices to remove `advertising'-clause.
88 * get{addr,name}info added to roken and used in the other code
89 (this makes things work much better with hosts with both v4 and v6
90 addresses, among other things)
91 * do pre-auth for both password and key-based get_in_tkt
92 * support for having several databases
93 * new command `del_enctype' in kadmin
94 * strptime (and new strftime) add to roken
95 * more paranoia about finding libdb
98 Changes in release 0.2d:
100 * new configuration option [libdefaults]default_etypes_des
101 * internal ls in ftpd builds without KRB4
102 * kx/rsh/push/pop_debug tries v5 and v4 consistenly
106 Changes in release 0.2c:
108 * bug fixes (see ChangeLog's for details)
110 Changes in release 0.2b:
113 * actually bump shared library versions
115 Changes in release 0.2a:
117 * a new program verify_krb5_conf for checking your /etc/krb5.conf
118 * add 3DES keys when changing password
119 * support null keys in database
120 * support multiple local realms
121 * implement a keytab backend for AFS KeyFile's
122 * implement a keytab backend for v4 srvtabs
123 * implement `ktutil copy'
124 * support password quality control in v4 kadmind
125 * improvements in v4 compat kadmind
126 * handle the case of having the correct cred in the ccache but with
127 the wrong encryption type better
128 * v6-ify the remaining programs.
129 * internal ls in ftpd
130 * rename strcpy_truncate/strcat_truncate to strlcpy/strlcat
131 * add `ank --random-password' and `cpw --random-password' in kadmin
132 * some programs and documentation for trying to talk to a W2K KDC
135 Changes in release 0.1m:
137 * support for getting default from krb5.conf for kinit/kf/rsh/telnet.
138 From Miroslav Ruda <ruda@ics.muni.cz>
139 * v6-ify hprop and hpropd
140 * support numeric addresses in krb5_mk_req
141 * shadow support in login and su. From Miroslav Ruda <ruda@ics.muni.cz>
142 * make rsh/rshd IPv6-aware
143 * make the gssapi sample applications better at reporting errors
145 * handle systems with v6-aware libc and non-v6 kernels (like Linux
146 with glibc 2.1) better
147 * hide failure of ERPT in ftp
150 Changes in release 0.1l:
152 * make ftp and ftpd IPv6-aware
153 * add inet_pton to roken
154 * more IPv6-awareness
155 * make mini_inetd v6 aware
157 Changes in release 0.1k:
159 * bump shared libraries versions
160 * add roken version of inet_ntop
161 * merge more changes to rshd
163 Changes in release 0.1j:
165 * restore back to the `old' 3DES code. This was supposed to be done
166 in 0.1h and 0.1i but I did a CVS screw-up.
167 * make telnetd handle v6 connections
169 Changes in release 0.1i:
171 * start using `struct sockaddr_storage' which simplifies the code
172 (with a fallback definition if it's not defined)
173 * bug fixes (including in hprop and kf)
174 * don't use mawk which seems to mishandle roken.awk
175 * get_addrs should be able to handle v6 addresses on Linux (with the
176 required patch to the Linux kernel -- ask within)
177 * rshd builds with shadow passwords
179 Changes in release 0.1h:
181 * kf: new program for forwarding credentials
183 * make forwarding credentials work with MIT code
184 * better conversion of ka database
185 * add etc/services.append
186 * correct `modified by' from kpasswdd
189 Changes in release 0.1g:
191 * kgetcred: new program for explicitly obtaining tickets
196 Changes in release 0.1f;
198 * experimental support for v4 kadmin protokoll in kadmind
201 Changes in release 0.1e:
203 * try to handle old DCE and MIT kdcs
204 * support for older versions of credential cache files and keytabs
205 * postdated tickets work
206 * support for password quality checks in kpasswdd
207 * new flag --enable-kaserver for kdc
209 * prototype su program
210 * updated (some) manpages
211 * support for KDC resource records
212 * should build with --without-krb4
215 Changes in release 0.1d:
217 * Support building with DB2 (uses 1.85-compat API)
218 * Support krb5-realm.DOMAIN in DNS
219 * new `ktutil srvcreate'
220 * v4/kafs support in klist/kdestroy
223 Changes in release 0.1c:
225 * fix ASN.1 encoding of signed integers
226 * somewhat working `ktutil get'
227 * some documentation updates
228 * update to Autoconf 2.13 and Automake 1.4
229 * the usual bug fixes
231 Changes in release 0.1b:
233 * some old -> new crypto conversion utils
236 Changes in release 0.1a:
240 * make sure we ask for DES keys in gssapi
241 * support signed ints in ASN1
244 Changes in release 0.0u:
248 Changes in release 0.0t:
250 * more robust parsing of krb5.conf
251 * include net{read,write} in lib/roken
254 Changes in release 0.0s:
256 * kludges for parsing options to rsh
257 * more robust parsing of krb5.conf
258 * removed some arbitrary limits
261 Changes in release 0.0r:
263 * default options for some programs
266 Changes in release 0.0q:
268 * support for building shared libraries with libtool
271 Changes in release 0.0p:
273 * keytab moved to /etc/krb5.keytab
274 * avoid false detection of IPv6 on Linux
275 * Lots of more functionality in the gssapi-library
276 * hprop can now read ka-server databases
279 Changes in release 0.0o:
281 * FTP with GSSAPI support.
284 Changes in release 0.0n:
286 * Incremental database propagation.
287 * Somewhat improved kadmin ui; the stuff in admin is now removed.
288 * Some support for using enctypes instead of keytypes.
289 * Lots of other improvement and bug fixes, see ChangeLog for details.