update for krb5-1.6-beta1

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18904 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/README b/README
index 7bae89f2f5ab7c0c90b7a5eda60916abefabc276..ad3e760c30d219fb64bc3b92ea45f7b34913a4a0 100644 (file)
--- a/README
+++ b/README
@@ -62,6 +62,12 @@ and logging in as "guest" with password "guest".
 Major changes in 1.6
 ----------------------
 
+* Partial client implementation to handle server name referrals.
+
+* Pre-authentication plug-in framework, donated by Red Hat.
+
+* LDAP KDB plug-in, donated by Novell.
+
 krb5-1.6 changes by ticket ID
 -----------------------------
 
@@ -71,6 +77,86 @@ http://krbdev.mit.edu/rt/NoAuth/krb5-1.6/fixed-1.6.html
 
 for a current listing with links to the complete tickets.
 
+1204   Unable to get a TGT cross-realm referral
+2087   undocumented options for kpropd
+2240   krb5-config --cflags gssapi when used by OpenSSH-snap-20040212
+2579   kdc: add_to_transited may reference off end of array...
+2652   Add support for referrals
+2876   Tree does not compile with GCC 4.0
+2935   KDB/LDAP backend
+3089   krb5_verify_init_creds() is not thread safe
+3091   add krb5_cc_new_unique()
+3276   local array of structures not declared static
+3288   NetIdMgr cannot obtain Kerberos 5 tickets containing addresses
+3322   get_cred_via_tkt() checks too strict on server principal
+3522   Error code definitions are outside macros to prevent multiple
+       inclusion in public headers
+3735   Add TCP change/set password support
+3947   allow multiple calls to krb5_get_error_message to retrieve message
+3955   check calling conventions specified for Windows
+3961   fix stdcc.c to build without USE_CCAPI_V3
+4021   use GSS_C_NO_CHANNEL_BINDINGS not NULL in lib/rpc/auth_gss.c
+4023   Turn off KLL automatic prompting support in kadmin
+4024   gss_acquire_cred auto prompt support shouldn't break
+       gss_krb5_ccache_name()
+4025   need to look harder for tclConfig.sh
+4055   remove unused Metrowerks support from yarrow
+4056   g_canon_name.c if-statement warning cleanup
+4057   GSSAPI opaque types should be pointers to opaque structs, not void*
+4256   Make process error
+4292   LDAP error prevents KfM 6.0 from building on Tiger
+4294   Bad loop logic in krb5_mcc_generate_new
+4304   audit referals merge (R18598)
+4389   cursor for iterating over ccaches
+4412   Don't segfault if a preauth plugin module fails to load
+4455   IRIX build fails w/ GCC 4.0 (really GNU ld)
+4482   enabling LDAP mix-in support for kdb5_util load
+4488   osf1 -oldstyle_liblookup typo
+4495   Avoid segfault in krb5_do_preauth_tryagain
+4496   fix invalid access found by valgrind
+4501   fix krb5_ldap_iterate to handle NULL match_expr and
+       open_db_and_mkey to use KRB5_KDB_SRV_TYPE_ADMIN
+4534   don't confuse profile iterator in 425 princ conversion
+4561   UC Berkeley BSD license change
+4562   latest Novell ldap patches and kdb5_util dump support for ldap
+4587   Change preauth plugin context scope and lifetimes
+4624   remove t_prf and t_prf.o on make clean
+4625   Make clean in lib/kdb leaves error table files
+4657   krb5.h not C++-safe due to "struct krb5_cccol_cursor"
+4683   Remove obsolete/conflicting prototype for krb524_convert_princs
+4688   Add public function to get keylenth associated with an enctype
+4689   Update minor version numbers for 1.6
+4690   Add "get_data" function to the client preauth plugin interface
+4692   Document changing the krbtgt key
+4693   Delay kadmind random number initialization until after fork
+4735   more Novell ldap patches from Nov 6 and Fix for wrong password
+       policy reference count
+4737   correct client preauth plugin request_context
+4738   allow server preauth plugin verify_padata function to return e-data
+4739   cccursor backend for CCAPI
+4755   update copyrights and acknowledgments
+4770   Add macros for __attribute__((deprecated)) for krb4 and des APIs
+4771   LDAP patch from Novell, 2006-10-13
+4772   fix some warnings in ldap code
+4774   avoid double frees in ccache manipulation around gen_new
+4775   include realm in "can't resolve KDC" error message
+4784   krb5_stdccv3_generate_new returns NULL ccache
+4788   ccache double free in krb5_fcc_read_addrs().
+4799   krb5_c_keylength -> krb5_c_keylengths; add krb5_c_random_to_key
+4805   replace existing calls of cc_gen_new()
+4841   free error message when freeing context
+4846   clean up preauth2 salt debug code
+4860   fix LDAP plugin Makefile.in lib frag substitutions
+4928   krb5int_copy_data_contents shouldn't free memory it didn't allocate
+4941   referrals changes to telnet have unconditional debugging printfs
+4942   skip all modules in plugin if init function fails
+4955   Referrals code breaks krb5_set_password_using_ccache to Active
+       Directory
+4967   referrals support assumes all rewrites produce TGS principals
+4972   return edata from non-PA_REQUIRED preauth types
+4973   send a new request with the new padata returned by
+       krb5_do_preauth_tryagain()
+
 Copyright and Other Legal Notices
 ---------------------------------
 
@@ -248,8 +334,8 @@ src/lib/crypto/aes has the following copyright:
 
                         --------------------
 
-Portions contributed by Red Hat, including the preauthentication
-plugins, contain the following copyright:
+Portions contributed by Red Hat, including the pre-authentication
+plug-ins framework, contain the following copyright:
 
   Copyright (c) 2006 Red Hat, Inc.
   Portions copyright (c) 2006 Massachusetts Institute of Technology
@@ -420,20 +506,21 @@ backend, are subject to the following license:
 Acknowledgements
 ----------------
 
-Thanks to Red Hat for 
+Thanks to Red Hat for donating the pre-authentication plug-in
+framework.
 
 Thanks to Novell for donating the KDB abstraction layer and the LDAP
-database plugin.
+database plug-in.
 
 Thanks to Sun Microsystems for donating their implementations of
 mechglue and SPNEGO.
 
 Thanks to the members of the Kerberos V5 development team at MIT, both
-past and present: Danilo Almeida, Jeffrey Altman, Richard Basch, Jay
-Berkenbilt, Mitch Berger, Andrew Boardman, Joe Calzaretta, John Carr,
-Don Davis, Alexandra Ellwood, Nancy Gilman, Matt Hancher, Sam Hartman,
-Paul Hill, Marc Horowitz, Eva Jacobus, Miroslav Jurisic, Barry Jaspan,
-Geoffrey King, John Kohl, Peter Litwack, Scott McGuire, Kevin
-Mitchell, Cliff Neuman, Paul Park, Ezra Peisach, Chris Provenzano, Ken
-Raeburn, Jon Rochlis, Jeff Schiller, Jen Selby, Brad Thompson, Harry
-Tsai, Ted Ts'o, Marshall Vale, Tom Yu.
+past and present: Danilo Almeida, Jeffrey Altman, Justin Anderson,
+Richard Basch, Jay Berkenbilt, Mitch Berger, Andrew Boardman, Joe
+Calzaretta, John Carr, Don Davis, Alexandra Ellwood, Nancy Gilman,
+Matt Hancher, Sam Hartman, Paul Hill, Marc Horowitz, Eva Jacobus,
+Miroslav Jurisic, Barry Jaspan, Geoffrey King, John Kohl, Peter
+Litwack, Scott McGuire, Kevin Mitchell, Cliff Neuman, Paul Park, Ezra
+Peisach, Chris Provenzano, Ken Raeburn, Jon Rochlis, Jeff Schiller,
+Jen Selby, Brad Thompson, Harry Tsai, Ted Ts'o, Marshall Vale, Tom Yu.

diff --git a/doc/copyright.texinfo b/doc/copyright.texinfo
index 5e6daa683bf6d1240eaf61ebe2d64433dd0262a4..fd80641badd8586b72e5dd6e864cee336b40146b 100644 (file)
--- a/doc/copyright.texinfo
+++ b/doc/copyright.texinfo
@@ -216,8 +216,8 @@ and fitness for purpose.
 @vskip 12pt
 @end iftex
 
-Portions contributed by Red Hat, including the preauthentication
-plugins, contain the following copyright:
+Portions contributed by Red Hat, including the pre-authentication
+plug-in framework, contain the following copyright:
 
 @quotation
 @iftex

diff --git a/doc/definitions.texinfo b/doc/definitions.texinfo
index 8fd6c27760232e1591c65de2badfff82a8da7f12..529445f48c3de627253ada8522c463e36b9966bc 100644 (file)
--- a/doc/definitions.texinfo
+++ b/doc/definitions.texinfo
@@ -19,7 +19,7 @@
 @set RANDOMUSER johndoe
 @set RANDOMUSER1 jennifer
 @set RANDOMUSER2 david
-@set RELEASE 1.6-prerelease
+@set RELEASE 1.6
 @set PREVRELEASE 1.5
 @set INSTALLDIR /usr/@value{LCPRODUCT}
 @set PREVINSTALLDIR @value{INSTALLDIR}