1 Changes in release 1.0:
3 * A new configuration option `nat_in_use' in krb.extra to ease use
4 through Network Address Translators.
6 * Support configuration value of KEYFILE and TKT_ROOT in krb.extra
8 * Easier building on some platforms
10 * built-in ls in ftpd.
14 Changes in release 0.10:
16 * Some support for Irix 6.5 capabilities
18 * Improved kadmin interface; you can get more info via kadmin.
20 * Some improved support for OSF C2.
22 * General bug-fixes and improvements, including a large number of
23 potential buffer overrun fixes. A large number of portability
26 * Support for multiple local realms.
28 * Support batch kadmin operation.
30 * Heimdal support in push.
32 * Removed `--with-shared' configure option (use `--enable-shared'.)
34 * Now uses Autoconf 2.13.
36 Changes in release 0.9.9:
38 * New configuration file /etc/krb.extra
40 * New program `push' for popping mail.
42 * Add (still little tested) support for maildir spool files in popper.
44 * Added `delete' to ksrvutil.
46 * Support the strange X11 sockets used on HP-UX and some versions of
49 * Arla compatibility in libkafs.
51 * More compatibility with the Solaris version of libkrb.
53 * New configure option `--with-mips-abi'
55 * Support `/etc/securetty' in login.
57 * Bug fixes and improvements to the Win32 telnet.
59 * Add support for installing with DESTDIR
61 * SIA module with added support for password changing, and
64 * Add better support for MIT `compile_et' and `mk_cmds', this should
65 make it easier to build things like `zephyr'.
68 - Krb: fixed dangling references to flock in libkrb
69 - FTP: fixed `logwtmp' name conflict
70 - Telnet: fix a few literal IP-number bugs
71 - Telnet: hopefully fixed stair-stepping bug
72 - Kafs: don't store expired tokens in the kernel
73 - Kafs: fix broken installation of afslib.so in AIX
75 Changes in release 0.9.8:
77 * several bug fixes; some which deserve mentioning:
78 - fix non-working `kauth -h'
79 - the sia-module should work again
80 - don't leave tickets in popper
82 Changes in release 0.9.7:
84 * new configure option --disable-otp
86 * new configure option --with-afsws
88 * includes rxkad implementation
90 * ftp client is more careful with suspicious filenames (|, .., /)
92 * fixed setuid-vulnerability of rcp, rlogin, and rsh.
94 * removed use of tgetent from telnetd (thereby eliminating buffer-overflow)
96 * new commands in ftp and ftpd: kdestroy, krbtkfile, and afslog.
98 * implement HTTP transport in libkrb and KDC.
100 * win32 terminal program much improved. also implemented ticket
103 * introduce `-i' option to kerberos server for listening only on one
106 * updated otp applications and man pages.
108 * merged in libdes 4.01
110 * popper is more resilient to badly formatted mails.
112 * minor fixes for Cray support.
114 * fix popen bug i ftpd.
116 * lots of bug fixes and portability fixes.
118 * better compatibility with Heimdal.
120 Minor changes in release 0.9.6:
122 * utmp(x) works correctly on systems with utmpx.
124 * A security-related bug in ftpd fixed.
126 * Compiles on solaris 2.4, 2.6 and on WinNT/95 with cygwin32 beta18.
128 * New option `-w' to rxtelnet, rxterm.
130 Major changes in release 0.9.5:
132 * We made some changes to be compatible with the other kerberised ftp
133 implementations and this means that an old kerberised ftp client will
134 not be able to talk to a new ftp server. So try to upgrade your ftp
135 clients and servers at the same time. The reason for this change is
136 described in more detail below.
138 * The interpretation of /etc/ftpusers has changed slightly, see
139 ftpusers(5). These changes come from NetBSD.
141 * The function `des_quad_cksum', which is used by `krb_rd_safe', and
142 `krb_mk_safe', has never been compatible with MIT's DES
143 library. This has now been fixed.
145 This fix will however break some programs that used those functions,
146 for instance `ftp'. In this version `krb_rd_safe' is modified to
147 accept checksums of both the new and the old format; `krb_mk_safe'
148 will always emit checksums of the new type *unless* `krb_rd_safe'
149 has detected that the client is using the old checksum (this feature
150 may be removed in some future release).
152 If you have programs that use `krb_mk_safe' and `krb_rd_safe' you
153 should upgrade all clients before upgrading your servers. Client is
154 here defined as the program that first calls `krb_rd_safe'.
156 If you are using some protocol that talks to more than one client or
157 server in one session, the heuristics to detect which kind of
158 checksum to use might fail.
160 The problem with `des_quad_cksum' was just a byte-order problem, so
161 there are no security problems with using the old versions. Thanks
162 to Derrick J Brashear <shadow@DEMENTIA.ORG> for pointing in the
163 right general direction.
165 * Rewrote kx to work always open TCP connections in the same
166 direction. This was needed to make it work through NATs and is
167 generally a cleaner way of doing it. Also added `tenletxr'.
168 Unfortunately the new protocol is not compatible with the old one.
169 The new kx and kxd programs try to figure out if they are talking to
172 * Quite a bit of new functionality in otp. Changed default hash
173 function to `md5'. Fixed implementation of SHA and added downcasing
174 of seed to conform with `draft-ietf-otp-01.txt'. All verification
175 examples in the draft now work.
177 * Fixed buffer overflows.
179 * Add history/line editing in kadmin and ftp.
181 * utmp/utmpx and wtmp/wtmpx might work better on strange machines.
183 * Bug fixes for `rsh -n' and `rcp -x'.
185 * reget now works in ftp and ftpd. Passive mode works. Other minor
188 * New option `-g umask' to ftpd for specifying the umask for anonymous users.
190 * Fix for `-l' option in rxtelnet and rxterm.
192 * XOVER support in popper.
194 * Better support for building shared libraries.
196 * Better support for talking to the KDC over TCP. This could make it
197 easier to use brain-damaged firewalls.
199 * Support FreeBSD-style MD5 /etc/passwd.
201 * New option `-createuser' to afslog.
203 * Upgraded to work with socks5-v1.0r1.
205 * Almost compiles and works on OS/2 with EMX, and Win95/NT with gnu-win32.
207 * Merged in win32-telnet, see README-WIN32 for more details.
209 * Possibly fixed telnet bug on HP-UX 10.
213 * Support for NetBSD/OpenBSD manual page circus.
217 Major changes in release 0.9.3:
219 * kx has been rewritten and is now a lot easier to use. Two new
220 scripts: rxtelnet and rxterm. It also works on machines such as
221 Cray where the X-libraries cannot talk unix sockets.
223 * experimental OTP (RFC1938). Included in login, ftpd, and popper.
225 * authentication modules: PAM for linux, SIA for OSF/1, and
226 afskauthlib for Irix.
228 * popper now has the UIDL command.
230 * ftpd can now tar and compress files and directories on the fly, also
231 added a find site command.
233 * updated documentation and man pages.
235 * Change kuserok so that it acts as if luser@LOCALREALM is always an
236 entry of .klogin, even when it's not possible to verify that there
237 is no such file or the file is unreadable.
239 * Support for SRV-records.
245 * allow for other transport mechanisms than udp (useful for firewall
246 tormented souls); as a side effect the format of krb.conf had to
249 * sample programs included.
251 * work arounds for Linux networking bugs in rlogind and rlogin.
255 * quite a number of improvments/bugfixes
257 * New platforms: HP-UX 10, Irix 6.2
259 Major changes in release 0.9.2a:
261 * fix annoying bug with kauth (et al) returning incorrect error
263 Major changes in release 0.9.2:
265 * service `kerberos-iv' and port 750 has been registered with IANA.
269 - Compiles with gcc on AIX.
271 - Compiles with really old resolvers.
273 - ftp works with afs string-to-key.
275 - shared libraries should work on Linux/ELF.
277 - some potential buffer overruns.
279 - general code clean-up.
281 * Better Cray/UNICOS support.
283 * New platforms: AIX 4.2, IRIX 6.1, and Linux 2.0
285 Major changes in release 0.9.1:
289 - No hardcoded references to /usr/athena
291 - Better Linux support with rlogin
293 - Fix for broken handling of NULL password in kadmind (such as with
296 - AFS-aware programs should work on AIX systems without AFS
298 * New platforms: Digital UNIX 4.0 and Fujitsu UXP/V
300 * New mechanism to determine realm from hostname based on DNS. To find
301 the realm of a.b.c.d it tries to find krb4-realm.a.b.c.d and then
302 krb4-realm.b.c.d and so on. The entry in DNS should be a TXT record
305 krb4-realm.pdc.kth.se. 7200 TXT "NADA.KTH.SE"
307 Major changes in release 0.9:
311 Dec Alpha OSF/1 3.2 with cc -std1
312 HP 9000/735 HP/UX 9.05 with gcc
313 DEC Pmax Ultrix 4.4 with gcc (cc does not work)
314 IBM RS/6000 AIX 4.1 with xlc (gcc works, cc does not)
316 Sun SunOS 4.1.4 with gcc (cc is not ANSI and does not work)
317 Sun SunOS 5.5 with gcc
318 Intel i386 NetBSD 1.2 with gcc
319 Intel i386 Linux 1.3.95 with gcc
320 Cray J90 Unicos 9 with cc
322 * Mostly ported to Crays running Unicos 9.
324 * S/Key-support in ftpd.
326 * Delete operation supported in kerberos database.
328 * Cleaner and more portable code.
330 * Even less bugs than before.
332 * kpopper now supports the old pop3 protocol and has been renamed to popper.
334 * rsh can be renamed remsh.
336 * Experimental program for forwarding IP over a kerberos tunnel.
338 * Updated to libdes 3.23.
340 Major changes in release 0.8:
342 * New programs: ftp & ftpd.
344 * New programs: kx & kxd. These programs forward X connections over
345 kerberos-encrypted connections.
347 * Incorporated version 3.21 of libdes.
349 * login: No double utmp-entries on Solaris.
353 * Better guessing of what realm a cell belongs to.
355 * Support for authenticating to several cells. Reads
356 /usr/vice/etc/TheseCells, if present.
358 * ksrvutil: Support for generating AFS keys.
360 * login, su, rshd, rlogind: tries to counter possible NIS-attack.
362 * xnlock: several bug fixes and support for more than one screen.
364 * Default port number for ekshell changed from 2106 to 545. kauth
365 port changed from 4711 to 2120.
367 * Rumored to work on Fujitsu UXP/V and Cray UNICOS.
369 Major changes in release 0.7:
371 * New experimental masterkey generation. Enable with
372 --enable-random-mkey. Also the default place for the master key has
373 moved from /.k to /var/kerberos/master-key. This is customizable
374 with --with-mkey=file. If you don't want you master key to be on the
375 same backup medium as your database, remember to use this flag. All
376 relevant programs still checks for /.k.
378 * `-t' option to kadmin.
380 * Kpopper uses kuserok to verify if user is allowed to pop mail.
382 * Kpopper tries to locate the mail spool directory: /var/mail or
385 * kauth has ability to get ticket on a remove host with the `-h' option.
387 * afslog (aklog clone) and pagsh included.
389 * New format for /etc/krb.equiv.
391 * Better multi-homed hosts support in kauth, rcp, rlogin, rlogind,
392 rshd, telnet, telnetd.
394 * rlogind works on ultrix and aix 3.2.
398 Major changes in release 0.6:
404 Dec/Pmax Ultrix 4.4 (rlogind not working)
405 IBM RS/6000 AIX 3.2 (rlogind not working)
414 It is rumored to work to some extent on NextStep 3.3.
416 * ksrvutil get to create new keys and put them in the database at the
419 * Support for S/Key in login.
421 * kstring2key: new program to show string to key conversion.
423 * Kerberos server should now listen on all available network
424 interfaces and on both port 88 and 750.
426 * Timeout in kpopper.
428 * Support password quality checks in kadmind. Use --with-crack-lib to
429 link kadmind with cracklib. The patches in cracklib.patch are needed.
431 * Movemail from emacs 19.30.
433 * Logging format uses four digits for years.
435 * Fallback if port numbers are not listed in /etc/services.
438 * Relesed version 0.5
440 * lib/des/read_pwd.c: Redifine TIOCGETP and TIOCSETP so that the
441 same code is used both for posix termios and others.
443 * rsh, rlogin: Add environment variable RSTAR_NO_WARN which when
444 set to "yes" make warnings about "rlogin: warning, using standard
445 rlogin: remote host doesn't support Kerberos." go away.
447 * admin/kdb_util.c (load_db) lib/kdb/krb_dbm.c (kerb_db_update):
448 Optimized so that it can handle large databases, previously a
449 10000 entry DB would take *many* minutes, this can now be done in
452 * Changes in server/kerberos.c, kadmin/*.c slave/*.c to support 64
453 bit machines. Source should now be free of 64 bit assumptions.
455 * admin/copykey.c (copy_from_key): New functions for copying to
456 and from keys. Neccessary to solve som problems with longs on 64
457 bit machines in kdb_init, kdb_edit, kdb_util and ext_srvtab.
459 * lib/kdb/krb_kdb_utils.c (kdb_verify_master_key): More problems
460 with longs on 64 bit machines.
462 * appl/bsd/login.c (main): Lots of stuff to support Psoriasis
463 login. Courtesy of gertz@lysator.liu.se.
465 * configure.in, all Makefile.in's: Support for Linux shared
466 libraries. Courtesy of svedja@lysator.liu.se.
468 * lib/krb/cr_err_reply.c server/kerberos.c: Moved int req_act_vno
469 = KRB_PROT_VERSION; from server kode to libkrb where it really
472 * appl/bsd/forkpty.c (forkpty): New function that allocates master
473 and slave ptys in a portable way. Used by rlogind.
475 * appl/telnet/telnetd/sys_term.c (start_login): Under SunOS5 the
476 same utmpx slot got used by sevral sessions. Courtesy of
477 gertz@lysator.liu.se.
479 * util/{ss, et}/Makefile.in (LEX): Use flex or lex. Courtesy of
480 svedja@lysator.liu.se.
482 * Fix the above Makefiles to work around bugs in Solaris and OSF/1
483 make rules that was triggered by VPATH functionality in the yacc
486 * appl/kpopper/pop_log.c (pop_log) appl/kpopper/pop_msg.c (pop_msg):
487 Use stdarg instead of varargs. The code is still broken though,
488 you'll realize that on a machine with 64 bit pointers and 32 bit
489 int:s and no vsprintf, let's hope there will be no such beasts ;-).
491 * appl/telnet/telnetd/sys_term.c (getptyslave): Not all systems
492 have (or need) modules ttcompat and pckt so don't flag it as a
493 fatal error if they don't exist.
495 * kadmin/admin_server.c (kadm_listen) kadmind/kadm_ser_wrap.c
496 (kadm_listen): Add kludge for kadmind running on a multihomed
497 server. #ifdef:ed under MULTIHOMED_KADMIN. Change in acconfig.h
498 if you need this feature.
500 * appl/Makefile.in (SUBDIRS): Add applications movemail kpopper
503 * appl/bsd/rlogin.c (main): New rlogind.c, forkpty() is not
504 implemented yet though.
506 * appl/xnlock/Makefile.in: Some stubs for X11 programs in
507 configure.in as well as a kerberized version of xnlock.
509 * appl/bsd/{rlogin.c, rsh.c, rcp.c}: Add code to support fallback
510 port numbers if they can not be found using getservbyname.
512 * appl/bsd/klogin.c (klogin): Use differnet ticket files for each
513 login so that a malicous user won't be able to destroy our tickets
514 with a failed login attempt.
516 * lib/kafs/afssys.c (k_afsklog): First we try afs.cell@REALM, if
517 there is no such thing try afs@CELL instead. There is now two
518 arguments to k_afslog(char *cell, char *realm).
520 * kadmin/admin_server.c (kadm_listen): If we are multihomed we
521 need to figure out which local address that is used this time
522 since it is used in "direction" comparison.
524 * kadmin/kadm_ser_wrap.c (kadm_ser_init): Fallback to use default
527 * lib/krb/send_to_kdc.c (send_to_kdc): Default port number
528 (KRB_PORT) was not in network byte order.
530 * lib/krb/send_to_kdc.c (send_recv): Linux clears timeout struct
533 * appl/bsd/rcp.c, appl/bsd/rlogin.c, appl/bsd/rsh.c:
534 Now does fallback if there isn't any entries in /etc/services for
535 klogin/kshell. This also made the code a bit more pretty.
537 * appl/bsd/login.c: Added support for lots of more struct utmp fields.
538 If there is no ttyslot() use setutent and friends.
540 * appl/bsd/Makefile.in, appl/bsd/rlogind.c, appl/bsd/rshd.c:
541 Added extern iruserok().
543 * appl/bsd/iruserok.c: Initial revision
545 * appl/bsd/bsd_locl.h: Must include sys/filio.h on Psoriasis.
547 * appl/bsd/Makefile.in: New install
549 * appl/bsd/pathnames.h: Fix default path, rsh and rlogin.
551 * appl/bsd/rshd.c: Extend default PATH with bindir to find rcp.
553 * appl/bsd/login.c (login): If there is no ttyslot use setutent
554 and friends. Added support for lots of more struct utmp fields.
556 * server/kerberos.c (main) lib/kafs/afssys.c appl/bsd/bsd_locl.h:
557 Must include sys/filio.h on Psoriasis to find _IOW and FIO* macros.
559 * appl/bsd/rlogind.c (doit): Use _PATH_DEFPATH rather than
562 * appl/bsd/login.c, su.c (main): Use fallback to bourne shell if
565 * appl/bsd/su.c (main): Update usage message to reflect that '-'
566 option must come after the ordinary options and before login-id.
568 * appl/telnet/telnetd/telnetd.c (doit): If remote host name is to
569 long to fit into utmp try to remove domain part if it does match
572 (main): Add new option -L /bin/login so that it is possible to
573 specify an alternate login program.
575 * appl/telnet/telnet/commands.c (env_init): When exporting
576 variable DISPLAY and if hostname is not the full name, try to get
577 the full name from DNS.
579 * appl/telnet/telnet/main.c (main): Option -k realm was broken due
580 to a bogous external declaration.
582 * kadmin/kadmin.c (add_new_key): Kadmin now properly sets
583 lifetime, expiration date and attributes in add_new_key command.
585 * appl/bsd/su.c (main): Don't handle '-' option with getopt.
587 * appl/telnet/telnet/externs.h: Removed protection for multiple
588 inclusions of termio(s).h since it broke definition of termio
589 macro on POSIX systems.
591 * lib/krb/lifetime.c (krb_life_to_time): If you want to disable
592 AFS compatible long lifetimes set krb_no_long_lifetimes = 1.
594 Please note that the long lifetimes are 100% compatible up to
595 10h so this should rarely be necessary.
597 * lib/krb/krb_equiv.c (krb_equiv): If you don't want to use
598 ipaddress protection of tickets set krb_ignore_ip_address. This
599 makes it possible for an intruder to steal a ticket and then use
600 it from som other machine anywhere on the net.
602 * kadmin/kadm_ser_wrap.c (kadm_ser_init): Don't bind to only one
603 local address. Accept request on all interfaces.
605 * admin/kdb_edit.c (change_principal): Don't accept illegal
606 dates. Courtesy of gertz@lysator.liu.se.
608 * configure.in: AIX specific libraries needed when using standard
609 libc routine getttyent, IBM should be ashamed!
611 * lib/krb/recvauth.c (krb_recvauth): Long that should be int32_t
614 * Added strdup for su and rlogin.
616 * Fix for old syslog macros in appl/bsd/bsd_locl.
618 * lib/kdb/krb_dbm.c (kerb_db_rename) admin/kdb_destroy.c: New
619 ifdef HAVE_NEW_DB for new databases residing in one file only.
621 * appl/bsd/rlogin.c (oob): Add workaround for Linux.
623 * appl/bsd/getpass.c: New routine that reads up to 127 char
624 passwords. Used in su.c and login.c.
626 * appl/telnet/telnetd/sys_term.c (login_tty): Ioctl TIOCSCTTY
627 should not be used on HP-UX.
629 ==========================*** Released 0.2? ***=============================
632 If there is a dot in the about to be added principals name there is
633 no need to ask for instance name.
636 Logfiles are created with small permissions (600).
638 krb.conf and krb.realms
639 Use domain part as realm name if there is no match in krb.realms.
640 Use kerberos.REALMNAME if there is no match in krb.realms.
643 The rlogin client is supported both with and without encryption,
644 there is no rlogind yet though.
647 There is login program that supports the -f option. Both kerberos
648 and /etc/passwd authentication is enabled.
650 Vendors login programs typically have no -f option (needed by
651 telnetd) and also does not know how to verify passwords againts
655 Now uses POSIX signals.
658 Generate random passwords if administrator enters empty password.
661 New library to support AFS. Routines:
663 int k_afsklog(...); or some other name
666 int k_pioctl(char *, int, struct ViceIoctl *, int);
668 Library supports more than one single entry point AFS syscalls
669 (needed be HP/UX and OSF/1 when running DFS). Doesn't rely on
670 transarc headers or library code. Same binaries can be used both on
671 machines running AFS and others.
673 This library is used in telnetd, login and the r* programs.
676 Based on telnet.95.05.31.NE but with the encryption hacks from
677 ftp.funet.fi:/pub/unix/security/esrasrc-1.0 added. This encryption
678 stuff needed some more modifications (done by joda@nada.kth.se)
679 before it was usable. Telnet has also been modified to use GNU
682 Numerous other changes that are long since forgotten.