- Thu Jul 14 2005 Vincent Danen <vdanen@mandriva.com> 1.3.6-6.1.102mdk
- P25, P26: security fix for CAN-2005-1174, CAN-2005-1175, CAN-2005-1689
- P27: security fix for CAN-2004-0175 (port of fixes to krb5-aware rcp)
- P28: keep apps which call krb5_principal_compare() or krb5_realm_compare() with
malformed or NULL principal structures from crashing outright (Thomas Biege)
- P29: fix double-close in keytab handling (Nalin Dahyabhai)
- P30: security fix for CAN-2005-0488 (telnet client environment variable disclosure) - Thu Apr 7 2005 Daouda LO <daouda@mandrakesoft.com> 1.3.6-6mdk
o Tue Mar 29 2005 Vincent Danen
- security fix for CAN-2005-0468, CAN-2005-0469 - Fri Mar 11 2005 Stefan van der Eijk <stefan@eijk.nu> 1.3.6-5mdk
- reupload
- Tue Mar 1 2005 Gwenole Beauchesne <gbeauchesne@mandrakesoft.com> 1.3.6-4mdk
- multiarch + also preserve file names when generating headers from *.h files
- Sun Feb 13 2005 Pascal Terjan <pterjan@mandrake.org> 1.3.6-3mdk
- fix patch 13 causing segfault in ftp
- Wed Feb 2 2005 Oden Eriksson <oeriksson@mandrakesoft.com> 1.3.6-2mdk
- fix deps and %multiarch
- fix no-reload-entry in the krb5server, krb524 and kprop init scripts - Tue Jan 11 2005 Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.3.6-1mdk
- 1.3.6
- don't use chrpath on static libraries
- summary-ended-with-dot
- macroize - Sat Dec 4 2004 Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.3.5-1mdk
- 1.3.5
- add P22 from fedora
- drop P20 & P21 (merged upstream) - Sat Oct 9 2004 Vincent Danen <vdanen@mandrakesoft.com> 1.3.4-2mdk
- include security patches (P20, P21) for CAN-2004-0642, CAN-2004-0643,
CAN-2004-0644, CAN-2004-0772 - Sun Aug 8 2004 Oden Eriksson <oeriksson@mandrakesoft.com> 1.3.4-1mdk
- 1.3.4
- added P19 (fedora)
- enable static devel libs
- misc spec file fixes - Sat May 22 2004 Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.3.3-4mdk
- fix buildrequires
- spec cosmetics - Tue May 18 2004 Florin <florin@mandrakesoft.com> 1.3.3-3mdk
- ugly rpath fix (brr, I hate to do that :o) )
- strip _bindir binaries - Wed May 12 2004 Florin <florin@mandrakesoft.com> 1.3.3-2mdk
- add the 5-18 patches
- fix the master-key entry in kdc.conf - Mon May 10 2004 Florin <florin@mandrakesoft.com> 1.3.3-1mdk
- 1.3.3
- spec cleanups - Thu Mar 4 2004 Götz Waschk <waschk@linux-mandrake.com> 1.3-6mdk
- fix buildrequires
- Sun Feb 15 2004 Abel Cheung <deaddog@deaddog.org> 1.3-5mdk
- Remove menu entry
- Use alternatives for tools conflicting with netkit rsh - Sun Jan 18 2004 Abel Cheung <deaddog@deaddog.org> 1.3-4mdk
- Move krb5-config to devel package
- Use _install_info
- Patch38: Don't output any rpath related flags to krb5-config - Wed Sep 3 2003 Florin <florin@mandrakesoft.com> 1.3-3mdk
- replace
with in the headers - Tue Aug 5 2003 Gwenole Beauchesne <gbeauchesne@mandrakesoft.com> 1.3-2mdk
- cputoolize
- Put back Patch27 (biarch-utmp)
- BuildRequires: libext2fs-devel - Wed Jul 23 2003 Florin <florin@mandrakesoft.com> 1.3-1mdk
- 1.3
- libification for the krb5-libs package
- use the system err headers
- add telnet newline patch
- drop lost of useless patches
- add the post sections for ftp-server
- TODO: update some patches(if possible) - Fri Jul 11 2003 Laurent MONTEL <lmontel@mandrakesoft.com> 1.2.7-5mdk
- Rebuild
- Add patch51 fix compile thanks Gwenole Beauchesne - Wed Jun 4 2003 Stefan van der Eijk <stefan@eijk.nu> 1.2.7-4mdk
- rebuild for rpm-4.2
- remove redundant BuildRequires - Tue Apr 8 2003 Gwenole Beauchesne <gbeauchesne@mandrakesoft.com> 1.2.7-3mdk
- Patch27: Handle biarch struct utmp
- Patch28: Fix deps, I want parallel build - Wed Apr 2 2003 Vincent Danen <vdanen@mandrakesoft.com> 1.2.7-2mdk
- security fixes:
- MITKRB5-SA-2003-003 (P50)
- MITKRB5-SA-2003-005 (P51)
- MITKRB5-SA-2003-004 (S25 and S26) - Thu Jan 23 2003 Florin <florin@mandrakesoft.com> 1.2.7-1mdk
- 1.2.7
- remove patch 26 and 27 - Fri Nov 8 2002 Thierry Vignaud <tvignaud@mandrakesoft.com> 1.2.5-4mdk
- krb5-devel: provides/obsoletes krb-devel
- remove useless prefix
- requires s/shutils/coreutils/ - Thu Oct 31 2002 Vincent Danen <vdanen@mandrakesoft.com> 1.2.5-3mdk
- Requires: words on krb5-server (re: stefan@eijk.nu)
- fix typo in kadmin initscript (re: stefan@eijk.nu) - Wed Oct 30 2002 Vincent Danen <vdanen@mandrakesoft.com> 1.2.5-2mdk
- P28: fix remote root hole in kadm4
- Fri Aug 30 2002 Florin <florin@mandrakesoft.com> 1.2.5-1mdk
- 1.2.5
- add db2-configure and xdr_array patches
- add the krb5-1.3.6.tar.gz.asc and main source in gz format - Wed Jul 10 2002 Gwenole Beauchesne <gbeauchesne@mandrakesoft.com> 1.2.4-3mdk
- Patch28: Correctly search for tclConfig.sh
- Patch27: Build libdb.a with PIC code on the appropriate arches since
they turn out to be linked into shared objects
- res_search is #define's as __res_search and then fails to be found
as is in libresolv. Should make a clean patch to *.m4 so that
is #include'd prior to checking for that symbol - Tue Jun 18 2002 Florin <florin@mandrakesoft.com> 1.2.4-2mdk
- recompile against the matest gcc
- add some error messages in kadmind init script (thx to V.A. Brennen) - Tue Apr 9 2002 Florin <florin@mandrakesoft.com> 1.2.4-1mdk
- 1.2.4
- keep only the enable dns option (remove the netlib option) - Wed Mar 6 2002 Florin <florin@mandrakesoft.com> 1.2.2-17mdk
- do not use authentication as default for the ftpd server
- Sat Jan 12 2002 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-16mdk
- Don't print a whole load of system information in telnet.
- Thu Oct 18 2001 Florin <florin@mandrakesoft.com> 1.2.2-15mdk
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- add the fix buffer overflow telnetd patch
- better initscripts (use variables and add reload entries)
- fix telnet client (remove the 8 bit telnet patch)
- add patch to support "ANY" keytab type
(i.e.,"default_keytab_name = ANY:FILE:/etc/krb5.keytab,
SRVTAB:/etc/srvtab" patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to
support the SIZE command on large files (also #30697)
- clean patches - Thu Oct 11 2001 Stefan van der Eijk <stefan@eijk.nu> 1.2.2-14mdk
- BuildRequires: cpio
- Mon Oct 1 2001 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-13mdk
- Make use of [[:space:]] in scriptlets of telnet-server-krb5.
- Fri Sep 28 2001 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-12mdk
- In %post of telnet daemon make it so that we start the correct daemon
and with our default authentication mode if no authentication mode
is specified whenever we are doing upgrades with a modified
/etc/xinetd.d/telnet configuration file (Very obscure bug). - Sat Sep 22 2001 Florin <florin@mandrakesoft.com> 1.2.2-11mdk
- oh, this krb5.csh again (thanks again Konrad Bernloehr)
- Fri Sep 21 2001 Florin <florin@mandrakesoft.com> 1.2.2-10mdk
- fix the /etc/profile.d/krb5.csh
- Thu Sep 13 2001 Florin <florin@mandrakesoft.com> 1.2.2-9mdk
- add krb5-1.2.2-telnet-8bit.patch.bz2 (thx to G.Lee)
- Thu Aug 30 2001 Florin <florin@mandrakesoft.com> 1.2.2-8mdk
- fix the /etc/profile.d/krb5.csh
(thx to Konrad Bernloehr for pointing this out)
- remove the e2fsprogs-devel from BuildPrereq - Sat Aug 25 2001 Florin <florin@mandrakesoft.com> 1.2.2-7mdk
- s/valid/none for the telnet-server xinetd.d/telnet file
- create /usr/sbin/login.krb5 in post for telnet-server-krb5
- s/-a// for the ftp-server xinetd.d/ftp file
- fix perms for kdcrotate - Fri Aug 10 2001 Florin <florin@mandrakesoft.com> 1.2.2-6mdk
- fix the rpmlint rpath error
- Thu Aug 9 2001 Florin <florin@mandrakesoft.com> 1.2.2-5mdk
- fix the krb5.conf and the kdc.conf sources
- add the Mandrake-Kerberos-HOWTO.html
- move the kdcrotate script to /usr/sbin in server
- get rid of BUILD_SOURCE_DIR
- bzip all the sources - Tue Aug 7 2001 Florin <florin@mandrakesoft.com> 1.2.2-4mdk
- add the telnet*xpm sources and {telnet,ftp} xinetd files
- generate also the {telnet,ftp}-{server,client}-krb5 packages
- fix the krb5.conf entry in the kdcrotate initscript
- fix the kpropd and the krb5server initscript - Sat Aug 4 2001 Florin <florin@mandrakesoft.com> 1.2.2-3mdk
- modify the krb5server initscript
- add a working configuration: update krb5.conf, krbkdc.conf
- add the /var/log/kerberos dir - Wed Aug 1 2001 Florin <florin@mandrakesoft.com> 1.2.2-2mdk
- krb5.conf needs to go under sysconfdir obviously
- add the *.h files in devel (I have forgotten them, oups) - Wed Jul 4 2001 Florin <florin@mandrakesoft.com> 1.2.2-1mdk
- mandrake adaptions
- Wed May 30 2001 Nalin Dahyabhai <nalin@redhat.com>
- pass some structures by address instead of on the stack in krb5kdc
- Wed May 23 2001 Nalin Dahyabhai <nalin@redhat.com>
- rebuild in new environment
- Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com>
- add patch from Tom Yu to fix ftpd overflows
- Thu Apr 19 2001 Than Ngo <than@redhat.com>
- disable optimizations on the alpha again
- Sat Mar 31 2001 Nalin Dahyabhai <nalin@redhat.com>
- add in glue code to make sure that libkrb5 continues to provide a
weak copy of stat() - Fri Mar 16 2001 Nalin Dahyabhai <nalin@redhat.com>
- build alpha with -O0 for now
- Fri Mar 9 2001 Nalin Dahyabhai <nalin@redhat.com>
- fix the kpropd init script
- Tue Mar 6 2001 Nalin Dahyabhai <nalin@redhat.com>
- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha - Fri Feb 9 2001 Nalin Dahyabhai <nalin@redhat.com>
- build alpha with -O0 for now
- own /var/kerberos - Wed Feb 7 2001 Nalin Dahyabhai <nalin@redhat.com>
- own the directories which are created for each package (#26342)
- Wed Jan 24 2001 Nalin Dahyabhai <nalin@redhat.com>
- gettextize init scripts
- Sat Jan 20 2001 Nalin Dahyabhai <nalin@redhat.com>
- add some comments to the ksu patches for the curious
- re-enable optimization on alphas - Tue Jan 16 2001 Nalin Dahyabhai <nalin@redhat.com>
- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts - Wed Dec 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- force -fPIC
- Sat Dec 2 2000 Nalin Dahyabhai <nalin@redhat.com>
- rebuild in new environment
- Wed Nov 1 2000 Nalin Dahyabhai <nalin@redhat.com>
- add bison as a BuildPrereq (#20091)
- Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)
- Fri Oct 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply kpasswd bug fixes from David Wragg
- Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post - Wed Sep 13 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
(#11588)
- fix heap corruption bug in FTP client (#14301) - Thu Aug 17 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
bugzilla (#16134), and to match the regular ftp package's behavior - Thu Jul 20 2000 Jeff Johnson <jbj@redhat.com>
- rebuild to compress man pages.
- Sun Jul 16 2000 Bill Nottingham <notting@redhat.com>
- move initscript back
- Sat Jul 15 2000 Nalin Dahyabhai <nalin@redhat.com>
- disable servers by default to keep linuxconf from thinking they need to be
started when they don't - Fri Jul 14 2000 Prospector <bugzilla@redhat.com>
- automatic rebuild
- Tue Jul 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs - Fri Jul 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind - Sat Jul 1 2000 Nalin Dahyabhai <nalin@redhat.com>
- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
- start using the official source tarball instead of its contents - Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com>
- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
compatible with other stuff in 6.2, so no need) - Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak graceful start/stop logic in post and preun
- Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun - Tue Jun 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- only remove old krb5server init script links if the init script is there
- Sun Jun 18 2000 Nalin Dahyabhai <nalin@redhat.com>
- disable kshell and eklogin by default
- Fri Jun 16 2000 Nalin Dahyabhai <nalin@redhat.com>
- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd - Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com>
- make sure workstation servers are all disabled by default
- clean up krb5server init script - Sat Jun 10 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos - Wed Jun 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- make ksu and v4rcp owned by root
- Sun Jun 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again - Thu May 25 2000 Nalin Dahyabhai <nalin@redhat.com>
- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
determine paths - Thu May 18 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix config_subpackage logic
- Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com>
- remove setuid bit on v4rcp and ksu in case the checks previously added
don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils - Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file - Thu May 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
and to use getusershell() - Thu May 4 2000 Bill Nottingham <notting@redhat.com>
- fix configure stuff for ia64
- Tue Apr 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.3.6 - Thu Apr 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation - Tue Apr 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as
a %config file anyway.
- Make krb5.conf a noreplace config file. - Fri Mar 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- Make klogind pass a clean environment to children, like NetKit's rlogind does.
- Thu Mar 9 2000 Nalin Dahyabhai <nalin@redhat.com>
- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf - Tue Mar 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- Correct copyright: it's exportable now, provided the proper paperwork is
filed with the government. - Sat Mar 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin - Fri Mar 3 2000 Nalin Dahyabhai <nalin@redhat.com>
- run kadmin.local correctly at startup
- Tue Feb 29 2000 Nalin Dahyabhai <nalin@redhat.com>
- pass absolute path to kadm5.keytab if/when extracting keys at startup
- Sun Feb 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix info page insertions
- Thu Feb 10 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak server init script to automatically extract kadm5 keys if
/var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions - Fri Feb 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix for potentially gzipped man pages
- Sat Jan 22 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix comments in krb5-configs
- Sat Jan 8 2000 Nalin Dahyabhai <nalin@redhat.com>
- move /usr/kerberos/bin to end of PATH
- Wed Dec 29 1999 Nalin Dahyabhai <nalin@redhat.com>
- install kadmin header files
- Wed Dec 22 1999 Nalin Dahyabhai <nalin@redhat.com>
- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers - Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com>
- remove hesiod dependency at build-time
- Mon Dec 20 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- rebuild on 1.1.1
- Fri Oct 8 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza - Tue Oct 5 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version - Mon Sep 27 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- added -lncurses to telnet and telnetd makefiles
- Tue Jul 6 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- added krb5.csh and krb5.sh to /etc/profile.d
- Wed Jun 23 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- broke out configuration files
- Tue Jun 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- fixed server package so that it works now
- Sun May 16 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- started changelog
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build
