From 255022e686791f3e43876cdc5f521a4100df19bc Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Thu, 16 Dec 2010 03:24:52 +0000 Subject: [PATCH] README and patchlevel.h for krb5-1.9-beta3 git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-9@24578 dc483132-0cff-0310-8789-dd5450dbe970 --- README | 33 +++++++++++++++++++++++++++------ src/patchlevel.h | 4 ++-- 2 files changed, 29 insertions(+), 8 deletions(-) diff --git a/README b/README index 0f0dd749f..53d9ae396 100644 --- a/README +++ b/README @@ -73,19 +73,35 @@ Developer experience: Performance: -* Account lockout performance improvements +* Account lockout performance improvements -- allow disabling of some + account lockout functionality to reduce the number of write + operations to the database during authentication Administrator experience: -* Trace logging -* Plugin interface for password sync -* Plugin interface for password quality checks +* Trace logging -- for easier diagnosis of configuration problems + +* Support for purging old keys (e.g. from "cpw -randkey -keepold") + +* Plugin interface for password sync -- based on proposed patches by + Russ Allbery that support his krb5-sync package + +* Plugin interface for password quality checks -- enables pluggable + password quality checks similar to Russ Allbery's krb5-strength + package + * Configuration file validator -* KDC support for SecurID preauthentication + +* KDC support for SecurID preauthentication -- This is the old SAM-2 + protocol, implemented to support existing deployments, not the + in-progress FAST-OTP work. Protocol evolution: -* IAKERB +* IAKERB -- a mechanism for tunneling Kerberos KDC transactions over + GSS-API, enabling clients to authenticate to services even when the + clients cannot directly reach the KDC that serves the services. + * Camellia encryption (experimental; disabled by default) krb5-1.9 changes by ticket ID @@ -165,6 +181,11 @@ krb5-1.9 changes by ticket ID 6827 SA-2010-007 Checksum vulnerabilities (CVE-2010-1324 and others) 6828 Install kadm5_hook_plugin.h 6829 Implement restrict_anonymous_to_tgt realm flag +6838 Regression in renewable handling +6839 handle MS PACs that lack server checksum +6840 typo in plugin-related error message +6841 memory leak in changepw.c +6842 Ensure time() is prototyped in g_accept_sec_context.c Acknowledgements ---------------- diff --git a/src/patchlevel.h b/src/patchlevel.h index 6bce36dc7..691ab0937 100644 --- a/src/patchlevel.h +++ b/src/patchlevel.h @@ -53,6 +53,6 @@ #define KRB5_MAJOR_RELEASE 1 #define KRB5_MINOR_RELEASE 9 #define KRB5_PATCHLEVEL 0 -#define KRB5_RELTAIL "beta2-postrelease" +#define KRB5_RELTAIL "beta3" /* #undef KRB5_RELDATE */ -#define KRB5_RELTAG "branches/krb5-1-9" +#define KRB5_RELTAG "tags/krb5-1-9-beta3" -- 2.26.2