update for krb5-1.6-beta1

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18904 dc483132-0cff-0310-8789-dd5450dbe970

1 files changed, 99 insertions, 12 deletions

diff --git a/README b/README
index 7bae89f2f5..ad3e760c30 100644
--- a/README
+++ b/README
@@ -62,6 +62,12 @@ and logging in as "guest" with password "guest".
 Major changes in 1.6
 ----------------------
 
+* Partial client implementation to handle server name referrals.
+
+* Pre-authentication plug-in framework, donated by Red Hat.
+
+* LDAP KDB plug-in, donated by Novell.
+
 krb5-1.6 changes by ticket ID
 -----------------------------
 
@@ -71,6 +77,86 @@ http://krbdev.mit.edu/rt/NoAuth/krb5-1.6/fixed-1.6.html
 
 for a current listing with links to the complete tickets.
 
+1204 	Unable to get a TGT cross-realm referral
+2087 	undocumented options for kpropd
+2240 	krb5-config --cflags gssapi when used by OpenSSH-snap-20040212
+2579 	kdc: add_to_transited may reference off end of array...
+2652 	Add support for referrals
+2876 	Tree does not compile with GCC 4.0
+2935 	KDB/LDAP backend
+3089 	krb5_verify_init_creds() is not thread safe
+3091 	add krb5_cc_new_unique()
+3276 	local array of structures not declared static
+3288 	NetIdMgr cannot obtain Kerberos 5 tickets containing addresses
+3322 	get_cred_via_tkt() checks too strict on server principal
+3522 	Error code definitions are outside macros to prevent multiple
+	inclusion in public headers
+3735 	Add TCP change/set password support
+3947 	allow multiple calls to krb5_get_error_message to retrieve message
+3955 	check calling conventions specified for Windows
+3961 	fix stdcc.c to build without USE_CCAPI_V3
+4021 	use GSS_C_NO_CHANNEL_BINDINGS not NULL in lib/rpc/auth_gss.c
+4023 	Turn off KLL automatic prompting support in kadmin
+4024 	gss_acquire_cred auto prompt support shouldn't break
+	gss_krb5_ccache_name()
+4025 	need to look harder for tclConfig.sh
+4055 	remove unused Metrowerks support from yarrow
+4056 	g_canon_name.c if-statement warning cleanup
+4057 	GSSAPI opaque types should be pointers to opaque structs, not void*
+4256 	Make process error
+4292 	LDAP error prevents KfM 6.0 from building on Tiger
+4294 	Bad loop logic in krb5_mcc_generate_new
+4304 	audit referals merge (R18598)
+4389 	cursor for iterating over ccaches
+4412 	Don't segfault if a preauth plugin module fails to load
+4455 	IRIX build fails w/ GCC 4.0 (really GNU ld)
+4482 	enabling LDAP mix-in support for kdb5_util load
+4488 	osf1 -oldstyle_liblookup typo
+4495 	Avoid segfault in krb5_do_preauth_tryagain
+4496 	fix invalid access found by valgrind
+4501 	fix krb5_ldap_iterate to handle NULL match_expr and
+	open_db_and_mkey to use KRB5_KDB_SRV_TYPE_ADMIN
+4534 	don't confuse profile iterator in 425 princ conversion
+4561 	UC Berkeley BSD license change
+4562 	latest Novell ldap patches and kdb5_util dump support for ldap
+4587 	Change preauth plugin context scope and lifetimes
+4624 	remove t_prf and t_prf.o on make clean
+4625 	Make clean in lib/kdb leaves error table files
+4657 	krb5.h not C++-safe due to "struct krb5_cccol_cursor"
+4683 	Remove obsolete/conflicting prototype for krb524_convert_princs
+4688 	Add public function to get keylenth associated with an enctype
+4689 	Update minor version numbers for 1.6
+4690 	Add "get_data" function to the client preauth plugin interface
+4692 	Document changing the krbtgt key
+4693 	Delay kadmind random number initialization until after fork
+4735 	more Novell ldap patches from Nov 6 and Fix for wrong password
+	policy reference count
+4737 	correct client preauth plugin request_context
+4738 	allow server preauth plugin verify_padata function to return e-data
+4739 	cccursor backend for CCAPI
+4755 	update copyrights and acknowledgments
+4770 	Add macros for __attribute__((deprecated)) for krb4 and des APIs
+4771 	LDAP patch from Novell, 2006-10-13
+4772 	fix some warnings in ldap code
+4774 	avoid double frees in ccache manipulation around gen_new
+4775 	include realm in "can't resolve KDC" error message
+4784 	krb5_stdccv3_generate_new returns NULL ccache
+4788 	ccache double free in krb5_fcc_read_addrs().
+4799 	krb5_c_keylength -> krb5_c_keylengths; add krb5_c_random_to_key
+4805 	replace existing calls of cc_gen_new()
+4841 	free error message when freeing context
+4846 	clean up preauth2 salt debug code
+4860 	fix LDAP plugin Makefile.in lib frag substitutions
+4928 	krb5int_copy_data_contents shouldn't free memory it didn't allocate
+4941 	referrals changes to telnet have unconditional debugging printfs
+4942 	skip all modules in plugin if init function fails
+4955 	Referrals code breaks krb5_set_password_using_ccache to Active
+	Directory
+4967 	referrals support assumes all rewrites produce TGS principals
+4972 	return edata from non-PA_REQUIRED preauth types
+4973 	send a new request with the new padata returned by
+	krb5_do_preauth_tryagain()
+
 Copyright and Other Legal Notices
 ---------------------------------
 
@@ -248,8 +334,8 @@ src/lib/crypto/aes has the following copyright:
 
 			 --------------------
 
-Portions contributed by Red Hat, including the preauthentication
-plugins, contain the following copyright:
+Portions contributed by Red Hat, including the pre-authentication
+plug-ins framework, contain the following copyright:
 
   Copyright (c) 2006 Red Hat, Inc.
   Portions copyright (c) 2006 Massachusetts Institute of Technology
@@ -420,20 +506,21 @@ backend, are subject to the following license:
 Acknowledgements
 ----------------
 
-Thanks to Red Hat for 
+Thanks to Red Hat for donating the pre-authentication plug-in
+framework.
 
 Thanks to Novell for donating the KDB abstraction layer and the LDAP
-database plugin.
+database plug-in.
 
 Thanks to Sun Microsystems for donating their implementations of
 mechglue and SPNEGO.
 
 Thanks to the members of the Kerberos V5 development team at MIT, both
-past and present: Danilo Almeida, Jeffrey Altman, Richard Basch, Jay
-Berkenbilt, Mitch Berger, Andrew Boardman, Joe Calzaretta, John Carr,
-Don Davis, Alexandra Ellwood, Nancy Gilman, Matt Hancher, Sam Hartman,
-Paul Hill, Marc Horowitz, Eva Jacobus, Miroslav Jurisic, Barry Jaspan,
-Geoffrey King, John Kohl, Peter Litwack, Scott McGuire, Kevin
-Mitchell, Cliff Neuman, Paul Park, Ezra Peisach, Chris Provenzano, Ken
-Raeburn, Jon Rochlis, Jeff Schiller, Jen Selby, Brad Thompson, Harry
-Tsai, Ted Ts'o, Marshall Vale, Tom Yu.
+past and present: Danilo Almeida, Jeffrey Altman, Justin Anderson,
+Richard Basch, Jay Berkenbilt, Mitch Berger, Andrew Boardman, Joe
+Calzaretta, John Carr, Don Davis, Alexandra Ellwood, Nancy Gilman,
+Matt Hancher, Sam Hartman, Paul Hill, Marc Horowitz, Eva Jacobus,
+Miroslav Jurisic, Barry Jaspan, Geoffrey King, John Kohl, Peter
+Litwack, Scott McGuire, Kevin Mitchell, Cliff Neuman, Paul Park, Ezra
+Peisach, Chris Provenzano, Ken Raeburn, Jon Rochlis, Jeff Schiller,
+Jen Selby, Brad Thompson, Harry Tsai, Ted Ts'o, Marshall Vale, Tom Yu.