Changelog for krb5-devel-1.2.4-4.i686.rpm :
Thu Jan 23 11:00:00 2003 Nalin Dahyabhai 1.2.4-4
- add patch from Mark Cox for exploitable bugs in ftp client
- add patch to avoid buffer read overruns when configuring via DNS
- add patch to properly include

Wed Oct 23 12:00:00 2002 Nalin Dahyabhai 1.2.4-3
- add patch from Tom Yu for exploitable bugs in kadmind4
- remove raw keys from the default kdc.conf

Fri Aug 2 12:00:00 2002 Nalin Dahyabhai 1.2.4-2
- add patch from Tom Yu for exploitable bugs in rpc code used in kadmind

Fri Mar 1 11:00:00 2002 Nalin Dahyabhai 1.2.4-1
- update to 1.2.4

Wed Feb 20 11:00:00 2002 Nalin Dahyabhai 1.2.3-5
- rebuild in new environment
- reenable statglue

Sat Jan 26 11:00:00 2002 Florian La Roche
- prereq chkconfig for the server subpackage

Wed Jan 16 11:00:00 2002 Nalin Dahyabhai 1.2.3-3
- build without -g3, which gives us large static libraries in -devel

Tue Jan 15 11:00:00 2002 Nalin Dahyabhai 1.2.3-2
- reintroduce ld.so.conf munging in the -libs %post

Thu Jan 10 11:00:00 2002 Nalin Dahyabhai 1.2.3-1
- rename the krb5 package back to krb5-libs; the previous rename caused
something of an uproar
- update to 1.2.3, which includes the FTP and telnetd fixes
- configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
the default behavior instead of enabling the feature (the feature is enabled
by --enable-dns, which we still use)
- reenable optimizations on Alpha
- support more encryption types in the default kdc.conf (heads-up from post
to comp.protocols.kerberos by Jason Heiss)

Fri Aug 3 12:00:00 2001 Nalin Dahyabhai 1.2.2-14
- rename the krb5-libs package to krb5 (naming a subpackage -libs when there
is no main package is silly)
- move defaults for PAM to the appdefaults section of krb5.conf -- this is
the area where the krb5_appdefault_
* functions look for settings)
- disable statglue (warning: breaks binary compatibility with previous
packages, but has to be broken at some point to work correctly with
unpatched versions built with newer versions of glibc)

Fri Aug 3 12:00:00 2001 Nalin Dahyabhai 1.2.2-13
- bump release number and rebuild

Wed Aug 1 12:00:00 2001 Nalin Dahyabhai
- add patch to fix telnetd vulnerability

Fri Jul 20 12:00:00 2001 Nalin Dahyabhai
- tweak statglue.c to fix stat/stat64 aliasing problems
- be cleaner in use of gcc to build shlibs

Wed Jul 11 12:00:00 2001 Nalin Dahyabhai
- use gcc to build shared libraries

Wed Jun 27 12:00:00 2001 Nalin Dahyabhai
- add patch to support \"ANY\" keytab type (i.e.,
\"default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab\"
patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to support the SIZE
command on large files (also #30697)
- don\'t use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- implement reload in krb5kdc and kadmind init scripts (#41911)
- lose the krb5server init script (not using it any more)

Sun Jun 24 12:00:00 2001 Elliot Lee
- Bump release + rebuild.

Tue May 29 12:00:00 2001 Nalin Dahyabhai
- pass some structures by address instead of on the stack in krb5kdc

Tue May 22 12:00:00 2001 Nalin Dahyabhai
- rebuild in new environment

Thu Apr 26 12:00:00 2001 Nalin Dahyabhai
- add patch from Tom Yu to fix ftpd overflows (#37731)

Wed Apr 18 12:00:00 2001 Than Ngo
- disable optimizations on the alpha again

Fri Mar 30 12:00:00 2001 Nalin Dahyabhai
- add in glue code to make sure that libkrb5 continues to provide a
weak copy of stat()

Thu Mar 15 11:00:00 2001 Nalin Dahyabhai
- build alpha with -O0 for now

Thu Mar 8 11:00:00 2001 Nalin Dahyabhai
- fix the kpropd init script

Mon Mar 5 11:00:00 2001 Nalin Dahyabhai
- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha

Thu Feb 8 11:00:00 2001 Nalin Dahyabhai
- build alpha with -O0 for now
- own /var/kerberos

Tue Feb 6 11:00:00 2001 Nalin Dahyabhai
- own the directories which are created for each package (#26342)

Tue Jan 23 11:00:00 2001 Nalin Dahyabhai
- gettextize init scripts

Fri Jan 19 11:00:00 2001 Nalin Dahyabhai
- add some comments to the ksu patches for the curious
- re-enable optimization on alphas

Mon Jan 15 11:00:00 2001 Nalin Dahyabhai
- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts

Tue Dec 5 11:00:00 2000 Nalin Dahyabhai
- force -fPIC

Fri Dec 1 11:00:00 2000 Nalin Dahyabhai
- rebuild in new environment

Tue Oct 31 11:00:00 2000 Nalin Dahyabhai
- add bison as a BuildPrereq (#20091)

Mon Oct 30 11:00:00 2000 Nalin Dahyabhai
- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)

Thu Oct 5 12:00:00 2000 Nalin Dahyabhai
- apply kpasswd bug fixes from David Wragg

Wed Oct 4 12:00:00 2000 Nalin Dahyabhai
- make krb5-libs obsolete the old krb5-configs package (#18351)
- don\'t quit from the kpropd init script if there\'s no principal database so
that you can propagate the first time without running kpropd manually
- don\'t complain if /etc/ld.so.conf doesn\'t exist in the -libs %post

Tue Sep 12 12:00:00 2000 Nalin Dahyabhai
- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
(#11588)
- fix heap corruption bug in FTP client (#14301)

Wed Aug 16 12:00:00 2000 Nalin Dahyabhai
- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
bugzilla (#16134), and to match the regular ftp package\'s behavior

Wed Jul 19 12:00:00 2000 Jeff Johnson
- rebuild to compress man pages.

Sat Jul 15 12:00:00 2000 Bill Nottingham
- move initscript back

Fri Jul 14 12:00:00 2000 Nalin Dahyabhai
- disable servers by default to keep linuxconf from thinking they need to be
started when they don\'t

Thu Jul 13 12:00:00 2000 Prospector
- automatic rebuild

Mon Jul 10 12:00:00 2000 Nalin Dahyabhai
- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs

Thu Jul 6 12:00:00 2000 Nalin Dahyabhai
- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind

Fri Jun 30 12:00:00 2000 Nalin Dahyabhai
- update to 1.2.1
- back out Tom Yu\'s patch, which is a big chunk of the 1.2 -> 1.2.1 update
- start using the official source tarball instead of its contents

Thu Jun 29 12:00:00 2000 Nalin Dahyabhai
- Tom Yu\'s patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it\'s not
compatible with other stuff in 6.2, so no need)

Wed Jun 28 12:00:00 2000 Nalin Dahyabhai
- tweak graceful start/stop logic in post and preun

Mon Jun 26 12:00:00 2000 Nalin Dahyabhai
- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun

Mon Jun 19 12:00:00 2000 Nalin Dahyabhai
- only remove old krb5server init script links if the init script is there

Sat Jun 17 12:00:00 2000 Nalin Dahyabhai
- disable kshell and eklogin by default

Thu Jun 15 12:00:00 2000 Nalin Dahyabhai
- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd

Wed Jun 14 12:00:00 2000 Nalin Dahyabhai
- make sure workstation servers are all disabled by default
- clean up krb5server init script

Fri Jun 9 12:00:00 2000 Nalin Dahyabhai
- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos

Tue Jun 6 12:00:00 2000 Nalin Dahyabhai
- make ksu and v4rcp owned by root

Sat Jun 3 12:00:00 2000 Nalin Dahyabhai
- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again

Wed May 24 12:00:00 2000 Nalin Dahyabhai
- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
determine paths

Wed May 17 12:00:00 2000 Nalin Dahyabhai
- fix config_subpackage logic

Tue May 16 12:00:00 2000 Nalin Dahyabhai
- remove setuid bit on v4rcp and ksu in case the checks previously added
don\'t close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils

Mon May 15 12:00:00 2000 Nalin Dahyabhai
- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file

Wed May 3 12:00:00 2000 Nalin Dahyabhai
- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
and to use getusershell()

Wed May 3 12:00:00 2000 Bill Nottingham
- fix configure stuff for ia64

Mon Apr 10 12:00:00 2000 Nalin Dahyabhai
- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.2.4

Wed Apr 5 12:00:00 2000 Nalin Dahyabhai
- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation

Mon Apr 3 12:00:00 2000 Nalin Dahyabhai
- Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as
a %config file anyway.
- Make krb5.conf a noreplace config file.

Thu Mar 30 12:00:00 2000 Nalin Dahyabhai
- Make klogind pass a clean environment to children, like NetKit\'s rlogind does.

Wed Mar 8 11:00:00 2000 Nalin Dahyabhai
- Don\'t enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf

Mon Mar 6 11:00:00 2000 Nalin Dahyabhai
- Correct copyright: it\'s exportable now, provided the proper paperwork is
filed with the government.

Fri Mar 3 11:00:00 2000 Nalin Dahyabhai
- apply Mike Friedman\'s patch to fix format string problems
- don\'t strip off argv[0] when invoking regular rsh/rlogin

Thu Mar 2 11:00:00 2000 Nalin Dahyabhai
- run kadmin.local correctly at startup

Mon Feb 28 11:00:00 2000 Nalin Dahyabhai
- pass absolute path to kadm5.keytab if/when extracting keys at startup

Sat Feb 19 11:00:00 2000 Nalin Dahyabhai
- fix info page insertions

Wed Feb 9 11:00:00 2000 Nalin Dahyabhai
- tweak server init script to automatically extract kadm5 keys if
/var/kerberos/krb5kdc/kadm5.keytab doesn\'t exist yet
- adjust package descriptions

Thu Feb 3 11:00:00 2000 Nalin Dahyabhai
- fix for potentially gzipped man pages

Fri Jan 21 11:00:00 2000 Nalin Dahyabhai
- fix comments in krb5-configs

Fri Jan 7 11:00:00 2000 Nalin Dahyabhai
- move /usr/kerberos/bin to end of PATH

Tue Dec 28 11:00:00 1999 Nalin Dahyabhai
- install kadmin header files

Tue Dec 21 11:00:00 1999 Nalin Dahyabhai
- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn\'t fix workstation-side servers

Mon Dec 20 11:00:00 1999 Nalin Dahyabhai
- remove hesiod dependency at build-time

Sun Dec 19 11:00:00 1999 Nalin Dahyabhai
- rebuild on 1.1.1

Thu Oct 7 12:00:00 1999 Nalin Dahyabhai
- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza

Mon Oct 4 12:00:00 1999 Nalin Dahyabhai
- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael\'s C version

Sun Sep 26 12:00:00 1999 Nalin Dahyabhai
- added -lncurses to telnet and telnetd makefiles

Mon Jul 5 12:00:00 1999 Nalin Dahyabhai
- added krb5.csh and krb5.sh to /etc/profile.d

Tue Jun 22 12:00:00 1999 Nalin Dahyabhai
- broke out configuration files

Mon Jun 14 12:00:00 1999 Nalin Dahyabhai
- fixed server package so that it works now

Sat May 15 12:00:00 1999 Nalin Dahyabhai
- started changelog (previous package from zedz.net)
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build