- Sat Mar 29 2003 Vincent Danen <vdanen@mandrakesoft.com> 1.2.2-17.5mdk
- security update for 8.2 (patches ripped from RH):
- fix double-free of enc_part2 in krb524d
- include patchkit for MITKRB-SA-2003-004
- make the default kdc.conf list the same enctypes we use for 1.2.7
- add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028)
- add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and
CAN-2003-0139)
- fix buffer underrun in unparsing certain principals (CAN-2003-0082)
- add patch to fix server-side crashes when principals have no components
(CAN-2003-0072)
- add patch from Matt Crawford for encoding transited realms properly
- add patch to document the rejected-bad-transited option in kdc.conf
- add backported symbol namespacing fix from 1.2.3 to clear up clashes
with glib
- add backported fix for hangs in kadmin client when principal contains an
escaped @ symbol - Wed Feb 19 2003 Vincent Danen <vdanen@mandrakesoft.com> 1.2.2-17.4mdk
- YAKSF (Yet Another Kerberos Security Fix)
- Thu Jan 9 2003 Vincent Danen <vdanen@mandrakesoft.com> 1.2.2-17.3mdk
- fix kadmin initscript
- Tue Oct 29 2002 Vincent Danen <vdanen@mandrakesoft.com> 1.2.2-17.2mdk
- security fix for 8.1/8.2 (kadmin)
- Wed Sep 4 2002 Vincent Danen <vdanen@mandrakesoft.com> 1.2.2-17.1mdk
- security fix for 8.1/8.2 (RPC)
- Wed Mar 6 2002 Florin <florin@mandrakesoft.com> 1.2.2-17mdk
- do not use authentication as default for the ftpd server
- Sat Jan 12 2002 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-16mdk
- Don't print a whole load of system information in telnet.
- Thu Oct 18 2001 Florin <florin@mandrakesoft.com> 1.2.2-15mdk
- don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
- add the fix buffer overflow telnetd patch
- better initscripts (use variables and add reload entries)
- fix telnet client (remove the 8 bit telnet patch)
- add patch to support "ANY" keytab type
(i.e.,"default_keytab_name = ANY:FILE:/etc/krb5.keytab,
SRVTAB:/etc/srvtab" patch from Gerald Britton, #42551)
- build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
- patch ftpd to use long long and %lld format specifiers to
support the SIZE command on large files (also #30697)
- clean patches - Thu Oct 11 2001 Stefan van der Eijk <stefan@eijk.nu> 1.2.2-14mdk
- BuildRequires: cpio
- Mon Oct 1 2001 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-13mdk
- Make use of [[:space:]] in scriptlets of telnet-server-krb5.
- Fri Sep 28 2001 Geoffrey Lee <snailtalk@mandrakesoft.com> 1.2.2-12mdk
- In %post of telnet daemon make it so that we start the correct daemon
and with our default authentication mode if no authentication mode
is specified whenever we are doing upgrades with a modified
/etc/xinetd.d/telnet configuration file (Very obscure bug). - Sat Sep 22 2001 Florin <florin@mandrakesoft.com> 1.2.2-11mdk
- oh, this krb5.csh again (thanks again Konrad Bernloehr)
- Fri Sep 21 2001 Florin <florin@mandrakesoft.com> 1.2.2-10mdk
- fix the /etc/profile.d/krb5.csh
- Thu Sep 13 2001 Florin <florin@mandrakesoft.com> 1.2.2-9mdk
- add krb5-1.2.2-telnet-8bit.patch.bz2 (thx to G.Lee)
- Thu Aug 30 2001 Florin <florin@mandrakesoft.com> 1.2.2-8mdk
- fix the /etc/profile.d/krb5.csh
(thx to Konrad Bernloehr for pointing this out)
- remove the e2fsprogs-devel from BuildPrereq - Sat Aug 25 2001 Florin <florin@mandrakesoft.com> 1.2.2-7mdk
- s/valid/none for the telnet-server xinetd.d/telnet file
- create /usr/sbin/login.krb5 in post for telnet-server-krb5
- s/-a// for the ftp-server xinetd.d/ftp file
- fix perms for kdcrotate - Fri Aug 10 2001 Florin <florin@mandrakesoft.com> 1.2.2-6mdk
- fix the rpmlint rpath error
- Thu Aug 9 2001 Florin <florin@mandrakesoft.com> 1.2.2-5mdk
- fix the krb5.conf and the kdc.conf sources
- add the Mandrake-Kerberos-HOWTO.html
- move the kdcrotate script to /usr/sbin in server
- get rid of BUILD_SOURCE_DIR
- bzip all the sources - Tue Aug 7 2001 Florin <florin@mandrakesoft.com> 1.2.2-4mdk
- add the telnet*xpm sources and {telnet,ftp} xinetd files
- generate also the {telnet,ftp}-{server,client}-krb5 packages
- fix the krb5.conf entry in the kdcrotate initscript
- fix the kpropd and the krb5server initscript - Sat Aug 4 2001 Florin <florin@mandrakesoft.com> 1.2.2-3mdk
- modify the krb5server initscript
- add a working configuration: update krb5.conf, krbkdc.conf
- add the /var/log/kerberos dir - Wed Aug 1 2001 Florin <florin@mandrakesoft.com> 1.2.2-2mdk
- krb5.conf needs to go under sysconfdir obviously
- add the *.h files in devel (I have forgotten them, oups) - Wed Jul 4 2001 Florin <florin@mandrakesoft.com> 1.2.2-1mdk
- mandrake adaptions
- Wed May 30 2001 Nalin Dahyabhai <nalin@redhat.com>
- pass some structures by address instead of on the stack in krb5kdc
- Wed May 23 2001 Nalin Dahyabhai <nalin@redhat.com>
- rebuild in new environment
- Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com>
- add patch from Tom Yu to fix ftpd overflows
- Thu Apr 19 2001 Than Ngo <than@redhat.com>
- disable optimizations on the alpha again
- Sat Mar 31 2001 Nalin Dahyabhai <nalin@redhat.com>
- add in glue code to make sure that libkrb5 continues to provide a
weak copy of stat() - Fri Mar 16 2001 Nalin Dahyabhai <nalin@redhat.com>
- build alpha with -O0 for now
- Fri Mar 9 2001 Nalin Dahyabhai <nalin@redhat.com>
- fix the kpropd init script
- Tue Mar 6 2001 Nalin Dahyabhai <nalin@redhat.com>
- update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
- re-enable optimization on Alpha - Fri Feb 9 2001 Nalin Dahyabhai <nalin@redhat.com>
- build alpha with -O0 for now
- own /var/kerberos - Wed Feb 7 2001 Nalin Dahyabhai <nalin@redhat.com>
- own the directories which are created for each package (#26342)
- Wed Jan 24 2001 Nalin Dahyabhai <nalin@redhat.com>
- gettextize init scripts
- Sat Jan 20 2001 Nalin Dahyabhai <nalin@redhat.com>
- add some comments to the ksu patches for the curious
- re-enable optimization on alphas - Tue Jan 16 2001 Nalin Dahyabhai <nalin@redhat.com>
- fix krb5-send-pr (#18932) and move it from -server to -workstation
- buildprereq libtermcap-devel
- temporariliy disable optimization on alphas
- gettextize init scripts - Wed Dec 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- force -fPIC
- Sat Dec 2 2000 Nalin Dahyabhai <nalin@redhat.com>
- rebuild in new environment
- Wed Nov 1 2000 Nalin Dahyabhai <nalin@redhat.com>
- add bison as a BuildPrereq (#20091)
- Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000)
- Fri Oct 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply kpasswd bug fixes from David Wragg
- Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
- make krb5-libs obsolete the old krb5-configs package (#18351)
- don't quit from the kpropd init script if there's no principal database so
that you can propagate the first time without running kpropd manually
- don't complain if /etc/ld.so.conf doesn't exist in the -libs %post - Wed Sep 13 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
(#11588)
- fix heap corruption bug in FTP client (#14301) - Thu Aug 17 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix summaries and descriptions
- switched the default transfer protocol from PORT to PASV as proposed on
bugzilla (#16134), and to match the regular ftp package's behavior - Thu Jul 20 2000 Jeff Johnson <jbj@redhat.com>
- rebuild to compress man pages.
- Sun Jul 16 2000 Bill Nottingham <notting@redhat.com>
- move initscript back
- Sat Jul 15 2000 Nalin Dahyabhai <nalin@redhat.com>
- disable servers by default to keep linuxconf from thinking they need to be
started when they don't - Fri Jul 14 2000 Prospector <bugzilla@redhat.com>
- automatic rebuild
- Tue Jul 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- change cleanup code in post to not tickle chkconfig
- add grep as a Prereq: for -libs - Fri Jul 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- move condrestarts to postun
- make xinetd configs noreplace
- add descriptions to xinetd configs
- add /etc/init.d as a prereq for the -server package
- patch to properly truncate $TERM in krlogind - Sat Jul 1 2000 Nalin Dahyabhai <nalin@redhat.com>
- update to 1.2.1
- back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
- start using the official source tarball instead of its contents - Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com>
- Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
- pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
compatible with other stuff in 6.2, so no need) - Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak graceful start/stop logic in post and preun
- Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
- update to the 1.2 release
- ditch a lot of our patches which went upstream
- enable use of DNS to look up things at build-time
- disable use of DNS to look up things at run-time in default krb5.conf
- change ownership of the convert-config-files script to root.root
- compress PS docs
- fix some typos in the kinit man page
- run condrestart in server post, and shut down in preun - Tue Jun 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- only remove old krb5server init script links if the init script is there
- Sun Jun 18 2000 Nalin Dahyabhai <nalin@redhat.com>
- disable kshell and eklogin by default
- Fri Jun 16 2000 Nalin Dahyabhai <nalin@redhat.com>
- patch mkdir/rmdir problem in ftpcmd.y
- add condrestart option to init script
- split the server init script into three pieces and add one for kpropd - Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com>
- make sure workstation servers are all disabled by default
- clean up krb5server init script - Sat Jun 10 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply second set of buffer overflow fixes from Tom Yu
- fix from Dirk Husung for a bug in buffer cleanups in the test suite
- work around possibly broken rev binary in running test suite
- move default realm configs from /var/kerberos to /var/kerberos - Wed Jun 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- make ksu and v4rcp owned by root
- Sun Jun 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- use %{_infodir} to better comply with FHS
- move .so files to -devel subpackage
- tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
- fix package descriptions again - Thu May 25 2000 Nalin Dahyabhai <nalin@redhat.com>
- change a LINE_MAX to 1024, fix from Ken Raeburn
- add fix for login vulnerability in case anyone rebuilds without krb4 compat
- add tweaks for byte-swapping macros in krb.h, also from Ken
- add xinetd config files
- make rsh and rlogin quieter
- build with debug to fix credential forwarding
- add rsh as a build-time req because the configure scripts look for it to
determine paths - Thu May 18 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix config_subpackage logic
- Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com>
- remove setuid bit on v4rcp and ksu in case the checks previously added
don't close all of the problems in ksu
- apply patches from Jeffrey Schiller to fix overruns Chris Evans found
- reintroduce configs subpackage for use in the errata
- add PreReq: sh-utils - Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix double-free in the kdc (patch merged into MIT tree)
- include convert-config-files script as a documentation file - Thu May 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- patch ksu man page because the -C option never works
- add access() checks and disable debug mode in ksu
- modify default ksu build arguments to specify more directories in CMD_PATH
and to use getusershell() - Thu May 4 2000 Bill Nottingham <notting@redhat.com>
- fix configure stuff for ia64
- Tue Apr 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
- change Requires: for/in subpackages to include 1.2.2 - Thu Apr 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- add man pages for kerberos(1), kvno(1), .k5login(5)
- add kvno to -workstation - Tue Apr 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as
a %config file anyway.
- Make krb5.conf a noreplace config file. - Fri Mar 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- Make klogind pass a clean environment to children, like NetKit's rlogind does.
- Thu Mar 9 2000 Nalin Dahyabhai <nalin@redhat.com>
- Don't enable the server by default.
- Compress info pages.
- Add defaults for the PAM module to krb5.conf - Tue Mar 7 2000 Nalin Dahyabhai <nalin@redhat.com>
- Correct copyright: it's exportable now, provided the proper paperwork is
filed with the government. - Sat Mar 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- apply Mike Friedman's patch to fix format string problems
- don't strip off argv[0] when invoking regular rsh/rlogin - Fri Mar 3 2000 Nalin Dahyabhai <nalin@redhat.com>
- run kadmin.local correctly at startup
- Tue Feb 29 2000 Nalin Dahyabhai <nalin@redhat.com>
- pass absolute path to kadm5.keytab if/when extracting keys at startup
- Sun Feb 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix info page insertions
- Thu Feb 10 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak server init script to automatically extract kadm5 keys if
/var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
- adjust package descriptions - Fri Feb 4 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix for potentially gzipped man pages
- Sat Jan 22 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix comments in krb5-configs
- Sat Jan 8 2000 Nalin Dahyabhai <nalin@redhat.com>
- move /usr/kerberos/bin to end of PATH
- Wed Dec 29 1999 Nalin Dahyabhai <nalin@redhat.com>
- install kadmin header files
- Wed Dec 22 1999 Nalin Dahyabhai <nalin@redhat.com>
- patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
- add installation of info docs
- remove krb4 compat patch because it doesn't fix workstation-side servers - Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com>
- remove hesiod dependency at build-time
- Mon Dec 20 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- rebuild on 1.1.1
- Fri Oct 8 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- clean up init script for server, verify that it works [jlkatz]
- clean up rotation script so that rc likes it better
- add clean stanza - Tue Oct 5 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- backed out ncurses and makeshlib patches
- update for krb5-1.1
- add KDC rotation to rc.boot, based on ideas from Michael's C version - Mon Sep 27 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- added -lncurses to telnet and telnetd makefiles
- Tue Jul 6 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- added krb5.csh and krb5.sh to /etc/profile.d
- Wed Jun 23 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- broke out configuration files
- Tue Jun 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- fixed server package so that it works now
- Sun May 16 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
- started changelog
- updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
- added --force to makeinfo commands to skip errors during build
