[dragonfly.git] / crypto / kerberosIV / ChangeLog

2000-12-25

        * configure.in (VERSION): bump to 1.0.5

2000-10-19

        * include/Makefile.in (HEADERS): add md4.h, md5.h, sha.h and rc4.h
        * appl/kip/common.c (WCOREDUMP): add fallback definition

2000-10-18

        * lib/krb/dest_tkt.c (dest_tkt): only return valid error codes
        back

        * kadmin/admin_server.c: re-structure code to handle DoS attacks
        better only allow a constant number of children (100 currently)
        keep track of which children have gotten authentication
        information and kill the non-authenticated children when there are
        new connections

2000-10-16

        * server/kerberos.c: handle a fixed number (100) of TCP
        connections and kill some randomly if all are busy to try to
        mitigate the effects of DoS attacks

2000-10-08

        * lib/krb/send_to_kdc.c (send_recv): check that fds are not too
        large to select on
        * kadmin/admin_server.c (kadm_listen): check that fds are not too
        large to select on
        * appl/kip/common.c (*): check that fds are not too large to
        select on
        * appl/bsd/rshd.c (doit): check that fds are not too large to
        select on
        * appl/bsd/rsh.c (talk): check that fds are not too large to
        select on
        * appl/bsd/rlogin.c (reader): check that fds are not too large to
        select on
        * appl/bsd/kcmd.c (kcmd): check that fds are not too large to
        select on

2000-09-25

        * config.guess: update to version 2000-09-05 (aka 1.156) from
        subversions.gnu.org plus some minor tweaks
        * config.sub: update to version 2000-09-11 (aka 1.181) from
        subversions.gnu.org

2000-09-09

        * appl/kip/kipd.c: add back droped slash in kip-control

2000-08-16

        * configure.in (getmsg): re-do so it possibly works on redhat 7.0

2000-08-09

        * kuser/klist.c (display_srvtab): do not call warn with a variable
        as format string

        * appl/bsd/rshd.c (doit): do not call warnx with a variable as
        format string

2000-07-30

        * doc/install.texi: say something about siacfg
        
2000-06-28

        * lib/krb/dest_tkt.c (dest_tkt): rewrite to lstat and compare
        numbers

2000-06-10

        * appl/bsd: work-around setuid and capabilities bug fixed in Linux
        2.2.16

2000-06-08

        * configure.in: do not use streams ptys on HP-UX 11

2000-05-15

        * lib/krb/rw.c (krb_get_nir): add explicit lengths to the
        parameters.  before this the function `knew'.  change callers.

2000-05-14

        * appl/afsutil/aklog.c: look not only in /usr/vice/etc but also in
        /usr/arla/etc for configuration files

2000-04-25

        * lib/krb/tf_util.c (tf_create): just remove the over-writing of
        the old ticket file.

2000-04-09

        * lib/krb/getaddrs.c (k_get_all_addrs): apperently solaris can
        return EINVAL when the buffer is too small.  cope.
        * appl/bsd/rshd.c (doit): exec the correct shell

2000-03-26

        * config.guess, config.sub: update to current version from
        :pserver:anoncvs@subversions.gnu.org:/home/cvs

        * appl/bsd/rlogind.c (rlogind_logout, logwtmp): make sure to
        always call time and ctime with `time_t's.  there were some types
        (like in lastlog) that we believed to always be time_t.  this has
        proven wrong on Solaris 8 in 64-bit mode, where they are stored as
        32-bit quantities but time_t has gone up to 64 bits
        * appl/bsd/login.c: dito

2000-03-20

        * configure.in: add solaris2.8

2000-03-15

        * configure.in: on all versions of aix, add `-bnolibpath' to the
        linker.  otherwise ld will interpret -L as run-time path for where
        to find shared libraries and looking in ../../foo is a bad idea.
        bug report from Niklas Edmundsson <nikke@ing.umu.se>

2000-03-09

        *  Release 1.0.1

1999-11-29

        *  Release 1.0

        * lib/krb/krb-protos.h (tf_get_cred_addr): add prototype

        * lib/krb/tf_util.c (tf_get_cred_addr): new function for fetching
        the NAT addresses stored in the ticket file. From
        <thn@stacken.kth.se>

        * kuser/klist.c (display_tktfile): dump the IP address being used
        when in NAT-mode.  From <thn@stacken.kth.se>

1999-11-25

        * appl/bsd/rlogind.c (main): getopt returns -1 and not EOF.  From
        <art@stacken.kth.se>

        * lib/krb/krb_ip_realm.c (krb_add_our_ip_for_realm): new function
        for obtaining the IP address that the KDC sees us as coming from.
        From <thn@stacken.kth.se>

        * lib/krb/tf_util.c (tf_get_addr, tf_store_addr): new functions
        for storing the NAT-ed address per realm
        (tf_get_cred): make sure to ignore all magic credentials

        * lib/krb/get_in_tkt.c (krb_get_pw_in_tkt2): if using NAT, store
        the address the the KDC saw. (krb_add_our_ip_for_realm)

        * lib/krb/send_to_kdc.c: rewrite some.  Make sure that we do not
        do any hostname lookups when using http through a proxy (the proxy
        is supposed to do that in the `real' name-space).

1999-11-19

        * appl/bsd/rcmd_util.c (conv): add EXTA and EXTB
        
Tue Nov 16 1999

        * lib/krb/defaults.c (krb_get_default_keyfile): Get value of
        KEYFILE from /etc/krb.extra.

1999-11-13

        * **/*.c (main): getopt returns -1 not EOF.  From
        <art@stacken.kth.se>

        * configure.in: check for fields in `struct tm' and variable
        `timezone', used by strftime
        * configure.in (AC_BROKEN): strptime is a new function in roken
        opt*: more header files for the tests
        
Tue Nov 2 1999

        * lib/krb/krb.h (TKT_ROOT): Change the definition of TKT_ROOT to a
        function call. The returned value is settable in /etc/krb.extra
        with the construct krb_default_tkt_root = /tmp/tkt_.

1999-10-06

        * lib/krb/verify_user.c: remove ERICSSON_COMPAT, it's apparently
        no longer needed

Mon Oct 4 1999

        * appl/bsd/klogin.c (multiple_get_tkt): Must use appropiate realm
        name when calling krb_get_pw_in_tkt or else you will receive an
        inter-realm TGT.

1999-10-03

        * doc/problems.texi: add blurb about irix abi:s

1999-09-27

        * lib/krb/tf_util.c (tf_init): cygwin work-around

1999-09-16

        * configure.in: test for strlcpy, strlcat

        * admin/kdb_util.c (main): support `-' as an alias for stdout.
        originally from Fredrik Ljungberg <flag@astrogator.se>

1999-09-15

        * include/Makefile.in: remove duplicate parse_time.h

        * kadmin/ksrvutil_get.c (get_srvtab_ent): better error messages

1999-09-12

        * configure.in: revert back awk test, now worked around in
        roken.awk

1999-09-06

        * doc/problems.texi: document a really working fix for the xlc
        -qnolm bug

1999-09-04

        * doc/problems.texi: comment about xlc -E brokenness

1999-09-01

        * lib/krb/get_krbrlm.c (krb_get_lrealm_f): treat n = 0 the same as
        if it were 1 (this should make it backwards compatible with apps
        that pass 0 for n)

1999-08-25

        * appl/bsd/login.c: surround SGI capability stuff with
        `defined(HAVE_CAP_SET_PROC)'

1999-08-24

        * kadmin/kadmin.c (add_new_key): add missing space when printing
        generated passwords.  bug reported by Per Eriksson DMC
        <perixon@dsv.su.se>
        
        * lib/krb/verify_user.c (krb_verify_user_srvtab): return last
        error instead of KFAILURE when everything fails.

        * appl/bsd/klogin.c (multiple_get_tkt): return last error instead
        of KFAILURE when everything fails.

1999-08-18

        * doc/problems.texi: some y2k stuff

        * doc/kth-krb.texi: update copyright, and menu

        * doc/intro.texi: remove unix-system section, since it's
        impossible to keep up to date

1999-08-13

        * configure.in: test for inet_pton include <sys/types.h> in all
        utmp tests

1999-07-27

        * configure.in: test for struct sockaddr_storage and sa_family
        brokenize inet_ntop

1999-07-24

        * kadmin/ksrvutil_get.c (get_srvtab_ent): try to print better
        error messages

        * configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \#
        in lib/roken/roken.awk

1999-07-22

        * acconfig.h (SunOS): remove definition

        * configure.in: define SunOS to xy for SunOS x.y

1999-07-19

        * configure.in (AC_BROKEN): check for copyhostent, freehostent,
        getipnodebyname, getipnodebyaddr

1999-07-13

        * configure.in: use AC_FUNC_GETLOGIN

1999-07-07

        * kadmin/admin_server.c (main): call krb_get_lrealm correctly

        * appl/bsd/rlogind.c (lowtmp): fill in ut_id

1999-07-06

        * include/bits.c: move around __attribute__ to make it work with
        old gcc

        * appl/bsd/rcp.c (rsource): remove trailing slashes which
        otherwise makes us fail

1999-07-04

        * appl/afsutil/aklog.c (epxand_cell_name): terminate on #

        * lib/kadm/kadm_cli_wrap.c (kadm_cli_send): free the right memory
        (none) when kadm_cli_out fails.  based on a patch by Buck Huppmann
        <Charles-Huppmann@UIowa.edu>

1999-06-24

        * configure.in: check for sgi capability stuff

        * appl/bsd/login.c: add some kind of sgi capability capability

1999-06-23

        * acconfig.h (HAVE_KRB_DISABLE_DEBUG): always define.  this makes
        the telnet code easier when building heimdal with an older krb4

        * lib/krb/kuserok.c (krb_kuserok): add support for multiple local
        realms and de-support entries without realm in ~/.klogin

1999-06-19

        * lib/krb/send_to_kdc.c: and a new variable `timeout' in krb.extra
        instead of always having a timeout of four seconds.  based on a
        patch by Mattias Amnefelt <mattiasa@stacken.kth.se>

1999-06-17

        * appl/bsd/rshd.c: use DES_RW_MAXWRITE instead of BUFSIZ (for
        consistency)

        * appl/bsd/rsh.c: use DES_RW_MAXWRITE instead of BUFSIZ.
        Otherwise, des_enc_read might be buffering data to us and it can
        get returned on a des_enc_read to another fd that the original one
        :-(

        * appl/bsd/bsd_locl.h: DES_RW_{MAXWRITE,BSIZE}

        * appl/bsd/encrypt.c: move MAXWRITE and BSIZE to bsd_locl.h and
        rename them to DES_RW_\1

1999-06-16

        * kuser/kdestroy.c: make unlog and tickets function correctly

        * configure.in: correct variables used for socks includes and libs


        * lib/krb/{debug_decl.c,krb-protos.h}: add krb_disable_debug

1999-06-15

        * kuser/klist.c (display_tokens): type correctness

        * lib/krb/send_to_kdc.c (url_parse): always return the port in
        network byte order (and be more careful when parsing the port
        number)

        * lib/krb/send_to_kdc.c (http_recv): handle both HTTP/1.0 and
        HTTP/1.1 in reply

1999-06-06

        * configure.in: use KRB_CHECK_X
        
        * kuser/kdestroy.c: use print_version
        
Wed Jun 2 1999

        * kadmin/kadmin.c: use print_version; (mod_entry): add command
        line options
        
1999-05-21

        * appl/bsd/login.c: limit more stuff for crays; fix call to
        login_access

1999-05-19

        * man/Makefile.in (install, uninstall): handle relative paths (fix
        editline)

1999-05-18

        * appl/bsd/bsd_locl.h: update prototype for login_access; declare
        `struct aud_rec' to keep AIX xlc happy

1999-05-14

        * appl/bsd/login_access.c: merge in more recent code

        * configure.in (CHECK_NETINET_IP_AND_TCP): use

1999-05-10

        * lib/krb/get_host.c (parse_address): remove trailing slash
        
        * lib/krb/send_to_kdc.c (prog): nuke
        (send_to_kdc): restructure.  make sure we have used all of the
        addresses from gethostbyname before calling send_recv
        (send_recv): removed unused parameters
        (url_parse): remove trailing slash
        (http_recv): make sure the http transaction was succesful

1999-05-08

        * configure.in: use the correct include files for the utmp tests

        * appl/movemail/pop.c: rename getline -> pop_getline removed
        duplicate prototypes

        * configure.in: db.h: test for
        (getmsg): check for existence before checking if it works (otherwise
        it fails with glibc2.1 that implements an always failing getmsg)

        * acconfig.h (_GNU_SOURCE): define this to enable (used)
        extensions on glibc-based systems such as linux

        * configure.in: test for strndup

1999-04-21

        * configure.in: replace AC_TEST_PACKAGE with AC_TEST_PACKAGE_NEW
        fix test for readline.h add test for four argument el_init
        remember to link with $LIB_tgetent when trying linking with
        readline

1999-04-16

        * configure.in: check for prototype of strsep

Sat Apr 10 1999

        * configure.in: fix readline logic

Fri Apr 9 1999

        * man/Makefile.in: add editline and push.  make install rules
        handle paths

Wed Apr 7 1999

        * appl/movemail/Makefile.in: fix names of hesiod variables

        * configure.in: fix readline flags

Mon Mar 29 1999

        * appl/bsd/utmpx_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

        * appl/bsd/utmp_login.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

        * appl/bsd/rlogind.c: HAVE_UT_* -> HAVE_STRUCT_UTMP*_UT_*

        * configure.in: include <sys/types.h> in test for ut_*; use
        AC_CHECK_XAU

        * configure.in: utmp{,x} -> struct utmp{,x}

Sat Mar 27 1999

        * configure.in: AC_CHECK_OSFC2

Fri Mar 19 1999

        * configure.in: use AC_SHARED_LIBS

        * configure.in: remove AIX install hack (fixed in autoconf 2.13)


        * server/kerberos.c: fix some printf format strings

Wed Mar 17 1999

        * lib/krb/krb.h (KRB_VERIFY_NOT_SECURE): add for completeness

        * lib/auth/sia/sia.c (common_auth): use KRB_VERIFY_SECURE instead
        of 1

        * lib/auth/pam/pam.c (doit): use KRB_VERIFY_SECURE instead of 1

        * lib/auth/afskauthlib/verify.c (afs_verify): use
        KRB_VERIFY_SECURE instead of 1

Tue Mar 16 1999

        * lib/krb/verify_user.c (krb_verify_user): handle multiple local
        realms
        (krb_verify_user_multiple): remove

        * lib/krb/krb-protos.h (krb_verify_user_multiple): remove

        * lib/auth/pam/pam.c: krb_verify_user_multiple -> krb_verify_user

        * lib/auth/sia/sia.c: krb_verify_user_multiple -> krb_verify_user

        * lib/auth/afskauthlib/verify.c: krb_verify_user_multiple ->
        krb_verify_user


        * lib/krb/getaddrs.c: SOCKADDR_HAS_SA_LEN ->
        HAVE_STRUCT_SOCKADDR_SA_LEN

Sat Mar 13 1999

        * lib/kadm/check_password.c (kadm_check_pw): cast when calling is*
        to get rid of a warning

        * lib/acl/acl_files.c (nuke_whitespace): cast when calling is* to
        get rid of a warning

        * kadmin/ksrvutil.c (usage): update. improve error messages
        
        * appl/bsd/sysv_default.c (trim): cast when calling is* to get rid
        of a warning

        * appl/bsd/rshd.c (doit): more parenthesis to make gcc happy

        * appl/bsd/rsh.c: add `-p'

        * appl/bsd/rlogin.c (main): more paranoid parsing of `-p'

        * appl/bsd/rcp.c (sink): cast when calling is* to get rid of a
        warning

        * appl/bsd/login_access.c (login_access): cast when calling
        isspace to get rid of a warning

        * include/bits.c (my_strupr): rename to strupr and ifdef
        (try_signed, try_unsigned): add __attribute__ junk to get rid of two
        warnings

        * appl/bsd/Makefile.in (SOURCES): add osfc2.c

        * admin/kdb_util.c (update_ok_file): add fallback utimes (some
        systems seem to fail updating the timestamp with open(), close())

        * server/kerberos.c (main): more paranoid parsing of `-a' and `-p'

Thu Mar 11 1999

        * configure.in: AC_BROKEN innetgr

        * lib/krb/send_to_kdc.c: fix types in format string

        * lib/krb/get_host.c: add some if-braces to keep gcc happy

        * lib/kadm/kadm_supp.c: fix types in format string

        * lib/auth/sia/Makefile.in: WFLAGS

        * include/bits.c: fix types in format string

        * appl/bsd/su.c: add some if-braces to keep gcc happy

        * appl/bsd/rlogind.c: add some if-braces to keep gcc happy

        * appl/bsd/rlogin.c: add some if-braces to keep gcc happy

        * appl/bsd/login.c: add some if-braces to keep gcc happy

        * appl/afsutil/pagsh.c: fix types in format string

Wed Mar 10 1999

        * server/kerberos.c: remove unused k_instance

        * lib/krb/krb-protos.h (read_service_key): add some consts to
        prototype

        * lib/krb/read_service_key.c (read_service_key): add some consts
        to prototype

        * appl/sample/sample_server.c: openlog -> roken_openlog

        * appl/kip/kipd.c: openlog -> roken_openlog

        * configure.in: use AC_WFLAGS

Mon Mar 1 1999

        * acinclude.m4: add

        * configure.in: typo

        * Makefile.in: use aclocal

        * Makefile.export: use aclocal

        * configure.in: update to autoconf 2.13

        * aclocal.m4.in: have-struct-field.m4, check-type-extra.m4

        * acconfig.h: update to autoconf 2.13

        * lib/auth/sia/sia.c: SIAENTITY_HAS_OUID -> HAVE_SIAENTITY_OUID

Tue Feb 23 1999

        * configure.in: don't include afsl.exp in libkafs.a if building
        with dynamic afs support (breaks egcs 1.1.1)

        * configure.in: don't build rxkad if not building afs-support

Mon Feb 22 1999

        * include/Makefile.in: clean up handling of missing system headers

        * configure.in: clean up handling of missing system headers

        * aclocal.m4.in: broken-snprintf.m4 broken-glob.m4

        * acconfig.h: NEED_{SNPRINTF,GLOB}_PROTO

Mon Feb 15 1999

        * configure.in (gethostname, mkstemp): test for prototype

        * configure.in: homogenize broken detection with heimdal

Thu Feb 11 1999

        * lib/krb/verify_user.c: If secure == KRB_VERIFY_SECURE_FAIL,
        return ok if there isn't any service key (or if it can't be read).

        * lib/krb/krb.h: KRB_VERIFY_SECURE, KRB_VERIFY_SECURE_FAIL

Wed Jan 13 1999

        * kadmin/kadmin.c (add_new_key): enable the `-p password' option
        and add the missing code.

        * appl/bsd/login_fbtab.c (login_protect): remove `/*' from string
        before reading the directory.  From "Brandon S. Allbery"
        <allbery@ece.cmu.edu>

Fri Dec 18 1998

        * man/kadmin.8 (-t): add a note about using `kinit -p'

Mon Dec 14 1998

        * lib/krb/name2name.c (krb_name_to_name): really verify we have an
        alias before trying to use it as the primary name.

Fri Nov 27 1998

        * lib/krb/send_to_kdc.c (url_parse): use correct length when
        copying the hostname

Sun Nov 22 1998

        * configure.in, acconfig.h: NEED_HSTRERROR_PROTO


        * configure.in: use AC_KRB_STRUCT_SPWD

        * slave/Makefile.in (WFLAGS): set

        * server/Makefile.in (WFLAGS): set

        * lib/krb/send_to_kdc.c (send_recv): add `int'

        * lib/krb/decomp_ticket.c (decomp_ticket): if the realm is empty,
        use the local realm.

        * lib/krb/Makefile.in (WFLAGS): set

        * lib/kdb/krb_lib.c (kerb_get_principal): correct test
        (kerb_put_principal): remove unused variable

        * lib/kdb/Makefile.in (WFLAGS): set

        * lib/auth/pam/Makefile.in (WFLAGS): set

        * lib/auth/afskauthlib/Makefile.in (WFLAGS): set

        * lib/acl/Makefile.in (WFLAGS): set

        * kuser/Makefile.in (WFLAGS): set

        * kadmin/Makefile.in (WFLAGS): set

        * include/Makefile.in (WFLAGS): set

        * appl/sample/sample_client.c (main): remove unused variable

        * appl/sample/Makefile.in (WFLAGS): set

        * appl/movemail/Makefile.in (WFLAGS): set

        * appl/kip/Makefile.in (WFLAGS): set

        * appl/bsd/Makefile.in (WFLAGS): set

        * appl/afsutil/pagsh.c (main): fall back to running /bin/sh if
        execvp fails.

        * appl/afsutil/Makefile.in (WFLAGS): set

        * admin/kdb_edit.c (change_principal): remove unused variable

        * admin/Makefile.in (WFLAGS): set

        * configure.in: check for crypt, environ and struct spwd

Thu Nov 19 1998

        * appl/movemail/Makefile.in: link and include hesiod

        * configure.in: test for hesiod

Wed Nov 18 1998

        * kadmin/kadm_locl.h: include <arpa/inet.h>

        * configure.in (freebsd3): seems to like symbolic links for the
        shared libraries

1998-11-07

        * Makefile.export (ChangeLOG): handle emacs20-style changelog
        entries

        * lib/kdb/krb_dbm.c (kerb_db_get_principal, kerb_db_iterate):
        check return value from `dbm_open'

Fri Oct 23 1998

        * lib/kadm/kadm.h: enable new extended kadmin fields by default

Thu Oct 22 1998

        * lib/krb/get_host.c (read_file): add more kinds of whitespace

        * lib/krb/lsb_addr_comp.c: fix(?) calculations regrding
        `firewall_address'

        * kadmin/kadmin.c: change timeout to 5 minutes, (sigarlm): only
        print message if any tickets were actually destroyed, (main): less
        noise, (add_new_key): some cleanup, (del_entry): allow more than
        one principal on command line, (get_entry): set more flags

        * lib/kadm/kadm.h: add code to get modification date, modifier and
        key version number

        * lib/kadm/kadm_supp.c: add code to get modification date,
        modifier and key version number

        * lib/kadm/kadm_stream.c: add code to get modification date,
        modifier and key version number

Tue Oct 13 1998

        * lib/kadm/Makefile.in: ROKEN_RENAME

        * lib/krb/roken_rename.h: add strnlen

        * lib/krb/Makefile.in: add strnlen

Sat Oct 3 1998

        * doc/install.texi: add comment about afskauthlib being in the
        correct object format

Thu Oct 1 1998

        * kadmin/kadmin.c (change_admin_password): add `alarm(0)' to
        prevent it from timing out


        * lib/krb/time.c (krb_kdctimeofday): set `tv'.  fix from Thomas
        Nyström <thn@stacken.kth.se>

Mon Sep 28 1998

        * appl/bsd/osfc2.c: lots of C2 magic

        * appl/bsd/{rshd,rcp_util,rcp}.c: do C2 stuff

        * appl/bsd/login.c: move C2 stuff to osfc2.c

        * appl/bsd/login.c: call `set_auth_parameters' if OSFC2

Sun Sep 27 1998

        * appl/bsd/login.c: add some code to call setluid

Sat Sep 26 1998

        * appl/sample/sample_client.c (main): correct test

Sat Sep 12 1998

        * configure.in (XauReadAuth): reverse test and check for -lX11
        before -lXau, otherwise the test fails on Irix 6.5

Sun Sep 6 1998

        * lib/krb/krb-protos.h: fix prototypes for krb_net_{read,write}

        * lib/krb/krb_net_{read,write}.c: new files

        * lib/krb/Makefile.in: add krb_net_{read,write}

Fri Sep 4 1998

        * lib/auth/sia/sia.c (siad_ses_launch, siad_ses_reauthent): use
        krb_afslog_home

        * lib/auth/pam/pam.c (pam_sm_open_session): use krb_afslog_home

        * lib/auth/afskauthlib/verify.c (afs_verify): use
        krb_afslog_uid_home

Sun Aug 30 1998

        * lib/krb/get_host.c: patch from Derrick J Brashear
        <shadow@dementia.org> for doing less DNS lookups

Sun Aug 23 1998

        * lib/krb/ticket_memory.c (tf_save_cred): use memcpy to copy the
        session key.

Tue Aug 18 1998

        * kadmin/kadmin.c (change_password): add `--random'.  From Love
        Hörnquist-Åstrand <lha@elixir.e.kth.se>

Thu Aug 13 1998

        * lib/kclient/KClient.c (KClientErrorText): copy the string.
        Patch from Daniel Staaf <d96-dst@nada.kth.se>

Tue Jul 28 1998

        * appl/bsd/rsh.c (main): make sure not to send `-K' before the
        hostname when re-execing

        * appl/bsd/su.c: openlog LOG_AUTH

Fri Jul 24 1998

        * lib/krb/create_ciph.c: typo: s/tmp/rem/

Wed Jul 22 1998

        * lib/krb/send_to_kdc.c (send_recv): return FALSE if recv failed
        so that we try the next server

        * configure.in (*-*-sunos): no lib_deps

        * include/protos.H (utime): update prototype

Thu Jul 16 1998

        * acconfig.h (DBDIR, MATCH_SUBDOMAINS): added

        * configure.in (--enable-match-subdomains): added
        (--with-db-dir): added

        * lib/krb/getrealm.c (file_find_realm): fix MATCH_SUBDOMAINS code.
        Patch originally from R Lindsay Todd <toddr@rpi.edu>

        * lib/krb/dllmain.c: clean-up patch from <d96-dst@nada.kth.se>

        * appl/krbmanager: patches from <d96-dst>

Mon Jul 13 1998

        * appl/sample/sample_client.c (main): don't advance
        hostent->h_addr_list, use a copy instead

        * appl/bsd/kcmd.c (kcmd): don't advance hostent->h_addr_list, use
        a copy instead

Fri Jul 10 1998

        * lib/krb/net{read,write}.c: removed

        * lib/krb/Makefile.in: grab net_{read,write}.c from roken

        * lib/krb/roken_rename.h: add krb_net_{write,read}

        * lib/krb/create_ciph.c (create_ciph): return KFAILURE instead of
        NULL

        * lib/kadm/kadm_cli_wrap.c (kadm_get): return KADM_NOMEM, not NULL

Wed Jul 8 1998

        * server/kerberos.c (make_sockets): strdup the port specification
        before strtok_r:ing it

        * lib/krb/extra.c (define_variable): return 0

        * kuser/klist.c (display_tktfile): only print time diff and
        newline if using the longform

Tue Jun 30 1998

        * lib/krb/send_to_kdc.c (send_to_kdc): be careful in not advancing
        the h_addr_list pointer in the hostent structure

        * lib/krb/time.c (krb_kdctimeofday): handle the case of `time_t'
        and the type of `tv_sec' being different.  patch originally from
        <art@stacken.kth.se>

        * man/afslog.1: add refs to kafs and kauth

        * man/kauth.1: add refs to kafs

        * lib/krb/krb_get_in_tkt.c (krb_mk_as_req): remove old code laying
        around.

        * lib/krb/Makefile.in: add strcat_truncate.c

        * lib/auth/sia/krb4+c2_matrix.conf: fix broken lines and typos

        * kuser/klist.c (display_tokens): print expired for expired tokens

Sat Jun 13 1998

        * kadmin/kadm_ser_wrap.c (kadm_ser_init): new argument `addr'

        * kadmin/admin_server.c: new argument `-i' for listening on a
        single address

Mon Jun 8 1998

        *  Release 0.9.9

Wed Jun 3 1998

        * lib/krb/extra.c: implement read_extra_file() for Win32

Fri May 29 1998

        * configure.in: removed duplicate crypt

        * lib/kdb/Makefile.in (roken_rename.h): remove dependency

        * lib/acl/Makefile.in (roken_rename.h): remove dependency

        * lib/krb/roken_rename.h: remove duplicate flock

        * appl/afsutil/aklog.c (createuser): fclose the file

Wed May 27 1998

        * lib/krb/Makefile.in (extra.c): add

        * slave/kpropd.c: k_flock -> flock

        * slave/kprop.c: k_flock -> flock

        * lib/krb/tf_util.c: k_flock -> flock

        * lib/krb/roken_rename.h: add base64* and flock

        * lib/krb/kntoln.c: k_flock -> flock

        * lib/kdb/krb_dbm.c: k_flock -> flock

        * lib/kdb/Makefile.in: use ROKEN_RENAME to get hold of renames
        symbols

Tue May 26 1998

        * lib/krb/extra.c: add read flag, so we don't have to look for
        non-existant files several times

        * lib/krb/send_to_kdc.c: use krb_get_config_string()

        * lib/krb/lsb_addr_comp.c: use krb_get_config_bool()

        * lib/krb/krb_get_in_tkt.c: use krb_get_config_bool()

        * lib/krb/extra.c: parse and use krb.extra file for special
        configurations, to lessen the number of environment variables used

        * lib/krb/getfile.c: cleanup and add `krb_get_krbextra'

        * lib/krb/debug_decl.c: add krb_enable_debug

        * lib/krb/lsb_addr_comp.c (lsb_time): if KRB_REVERSE_DIRECTION is
        set, negate time (fix for some firewalls)

Mon May 25 1998

        * lib/krb/Makefile.in (clean): try to remove shared library debris
        (LIBDES and LIB_DEPS): try to figure out dependencies

        * lib/kdb/Makefile.in (clean): try to remove shared library debris

        * lib/kadm/Makefile.in (clean): try to remove shared library
        debris

        * configure.in: make symlink magic work with libsl

Mon May 18 1998

        * appl/bsd/login.c: Hack for AIX 4.3.

Thu May 14 1998

        * configure.in: mips-api support.  From Derrick J Brashear
        <shadow@dementia.org>

        * configure.in: --enable-legacy-kdestroy: added.  From Derrick J
        Brashear <shadow@dementia.org>

        * kuser/kdestroy.c: LEGACY_KDESTROY: add

Wed May 13 1998

        * lib/krb/krb.h (const, signed): define when compiling with
        non-ANSI comilers.  From Derrick J Brashear <shadow@dementia.org>

Mon May 11 1998

        * kadmin/admin_server.c: Fix reallocation bug.

Fri May 1 1998

        * configure.in: don't test for winsock.h

        * slave/kprop.c: unifdef -DHAVE_H_ERRNO

        * appl/sample/sample_client.c: unifdef -DHAVE_H_ERRNO

        * appl/movemail/pop.c: unifdef -DHAVE_H_ERRNO

        * appl/kip/kip.c: unifdef -DHAVE_H_ERRNO

Mon Apr 27 1998

        * appl/ftp/ftpd/krb4.c (krb4_adat): applied patch from Love
        <lha@elixir.e.kth.se> for checking address in krb_rd_req

Sun Apr 26 1998

        * appl/Makefile.in (SUBDIRS): add push

Sun Apr 19 1998

        * configure.in: fix for the symlink magic. From Gregory S. Stark
        <gsstark@mit.edu>

        * doc/Makefile.in (install): ignore failures from install-info.

        * lib/krb/Makefile.in (install): don't install include files with
        x bit

        * lib/kadm/Makefile.in (install): don't install include files with
        x bit

        * man/Makefile.in: don't install getusershell

        * lib/krb/Makefile.in: add symlink magic for linux.
        only link in com_err.o and error.o if building shared

        * lib/kdb/Makefile.in: add symlink magic for linux

        * lib/kadm/Makefile.in: add symlink magic for linux

        * configure.in: add symlink magic for Linux

        * appl/kx/common.c (connect_local_xsocket): update to try the list
        of potential socket pathnames

Tue Apr 7 1998

        * lib/krb/getaddrs.c: Don't bail out if various ioctl's fail.


        * doc/Makefile.in (kth-krb.info): use `--no-split'

Mon Apr 6 1998

        * configure.in: add --disable-cat-manpages

        * configure.in: call the shared libraries so.0.9.9 on linux

Sat Apr 4 1998

        * lib/Makefile.in (SUBDIRS): changed order so that editline is
        built before sl

        * lib/*/Makefile.in: shared library dependency information

        * doc/Makefile.in (clean): remove *.info*

        * merge in win32 changes from <flag@astrogator.se> and
        <jfa@pobox.se>

        * Makefile.export: aux -> cf

        * Makefile.in: aux -> cf

        * appl/voodoo/TelnetEngine.cpp (TelnetEngine::Connect): check the
        return from `gethostbyname'

        * appl/bsd/bsd_locl.h: Check for <io.h> and conditionalize
        prepare_utmp.  From <d96-mst@nada.kth.se>

        * acconfig.h (__EMX__): define MAIL_USE_SYSTEM_LOCK.  From
        <d96-mst@nada.kth.se>

        * include/bits.c: renamed `strupr' to `my_strupr' not to conflict
        with any exiting strupr.

Sat Mar 28 1998

        * Makefile.in (install): use DESTDIR

        * include/Makefile.in (install): depend on all

        * man/Makefile.in (install, uninstall): use transform correctly

Fri Mar 27 1998

        * configure.in: don't look for dbopen.  From Derrick J Brashear
        <shadow@dementia.org>
        (termcap.h): check for

        * lib/krb/Makefile.in: fix for LD options on solaris.  From
        Derrick J Brashear <shadow@dementia.org>

Thu Mar 19 1998

        * appl/kx/common.c: Trying binding sockets in the special
        directories for some versions of Solaris and HP-UX


        * lib/krb/kdc_reply.c: Check for error code of zero in error
        packet from KDC.

Wed Mar 18 1998

        * appl/kx/common.c (get_xsockets): try getting sockets in lots of
        places
        
        * appl/kauth/kauth.c: return error code from child (plus shell
        magic)


        * lib/krb/getrealm.c (krb_realmofhost), lib/krb/get_krbrlm.c
        (krb_get_lrealm, krb_get_default_realm): When figuring out a
        default local realm name avoid going into infinite loops.

Sun Mar 15 1998

        * configure.in: test for <term.h> and search for `tgetent' in
        ncurses.  From Gregory S. Stark <gsstark@mit.edu>

        * **/Makefile.in: add DESTDIR support and .PHONY

Sat Mar 7 1998

        * kadmin/ksrvutil.c: Remove kvno zero restriction.

        * configure.in: Add option `--disable-dynamic-afs' do disable AIX
        dynamic loading of afs syscall library. This should hopefully also
        work with AIX 3.

        * kadmin/ksrvutil.c: Add `delete' function (from Chris Chiappa
        <griffon+@cmu.edu>).

Thu Feb 26 1998

        * kadmin/kadmin.c (do_init): fix check of return value from
        krb_get_default_principal

        * lib/kadm/kadm_stream.c (stv_string): use correct offset

Sat Feb 21 1998

        * include/Makefile.in: add parse_time.h

        * lib/krb/solaris_compat.c: new file with alternative entry points
        compatible with solaris's libkrb.

Thu Feb 19 1998

        * lib/krb/time.c: Various time related functions.

Tue Feb 17 1998

        * lib/krb/send_to_kdc.c: Add some more connection debug traces.

Sun Feb 15 1998

        * lib/krb/get_host.c (init_hosts): call k_getportbyname with proto
        == "udp" instead of NULL.  NULL would be the right thing, but some
        libraries are not happy with that.

        * appl/bsd/rcp.c: renamed `{local,foreign}' to \1_addr to avoid
        conflicts with system header files on mklinux.


        * lib/kadm/Makefile.in: Fix rules for kadm_err.[ch].

        * lib/krb/krb_err.et: Fix for changes to compile_et.

        * lib/com_err/{error.c,com_err.h,com_right.h}: Rename error.h to
        com_right.h.

        * lib/com_err/{compile_et.c,compile_et.h,lex.l,parse.y}: Switch
        back to a yacc-based compile_et.

Tue Feb 10 1998

        * appl/kx/kxd.c (doit): fix stupid mistake when marshalling

        * lib/krb/Makefile.in: add strcpy_truncate

Sun Feb 8 1998

        * lib/krb/netwrite.c (krb_net_write): restart if errno == EINTR

        * lib/krb/netread.c (krb_net_read): restart if errno == EINTR

        * appl/kx/rxterm.in: redirect std{in,out,err} of xterm to make
        sure rshd does not hang.

Sat Feb 7 1998

        * lib/acl/acl_files.c (acl_canonicalize_principal): use
        krb_parse_name


        * lib/krb/rw.c: add a parameter containting maximum size.  Change
        all callers.

        * lots-of-files: replace {REALM_SZ, *_SZ, MaxPathLen,
        MaxHostNameLen} + 1 with \1

        * appl/bsd/rlogind.c (cleanup): logout -> rlogind_logout

        * lib/acl/acl_files.c (acl_canonicalize_principal): use
        strcpy_truncate

        * include/Makefile.in: fnmatch.h

        * appl/ftp/ftpd/ftpd.c: <fnmatch.h>

        * lib/kadm/kadm_stream.c (stv_string): don't use strncpy

        * lib/auth/sia/sia.c (siad_ses_suauthent): do ugly magic to make
        sure `entity->name' is long enough.

        * appl/ftp/ftpd/ftpcmd.y: HASSETPROCTITLE -> HAVE_SETPROCTITLE

        * appl/bsd/rlogind.c (logout): renamed to rlogind_logout to avoid
        conflict with logout() in libutil.
        (doit): use forkpty_truncate it there's one

        * appl/afsutil/kstring2key.c (krb5_string_to_key): don't use
        strcat

        * configure.in: add lots of functions and headers that were used
        in the code but not tested for.

        * lib/krb/send_to_kdc.c (url_parse): re-structured

        * kadmin/kadm_locl.h: add prototype for random_password and remove
        __P

        * appl/bsd/forkpty.c (forkpty_truncate): new function.
        use strcpy_truncate instead of strcpy

        * appl/bsd/bsd_locl.h: include <libutil.h>.
        prototype for forkpty_truncate()

        * configure.in: test for <libutil.h>

Fri Feb 6 1998

        * kadmin/random_password.c: Random password generation.

        * kadmin/kadmin.c: Add some functionality to add_new_key, to make
        it more useful with batch creation.

Wed Feb 4 1998

        * appl/bsd/login.c (find_in_etc_securetty): new function
        (rootterm): call `find_in_etc_securetty'

        * appl/bsd/pathnames.h (_PATH_ETC_SECURETTY): add

Tue Feb 3 1998

        * kadmin/kadmin.c: Fix `-t' flag. Centralize the calling of
        alarm() to a modified sl_loop().

        * kadmin/kadmin.c: Add support for `batch' processing, taking a
        command from the command line. Remove the automatic destruction of
        tickets, instead add a timeout (initially set to 1 minute), after
        which any tickets will be destroyed. Option `-m' now sets this
        timeout to 0 (disabling timeout). Options `-p' takes a full
        principal, and `-u' takes a `username' that is used as the name of
        the admin principal to use.

Sat Jan 31 1998

        * lib/auth/sia/sia.c: Chown ticket file when doing reauth.

Thu Jan 29 1998

        * lib/auth/sia/sia.c: Add support for reauthentication.

Mon Jan 26 1998

        * appl/kauth/kauth.c (main): Add debug switch -d to kauth to aid
        in finding miss-configurations.

Mon Jan 19 1998

        * lib/krb/name2name.c: If inet_addr thinks host's a valid
        ip-address, assume it is, and don't call gethostbyname().  This
        should fix things like `rsh 1.2.3.4'.

Sat Jan 17 1998

        * lib/krb/get_host.c: Check for http-srv records.

        * lib/krb/get_host.c: Don't use getprotobyname. Check for `http'
        as well as `udp' and `tcp'.

        * lib/auth/sia/sia.c: Add password changing support.

        * kadmin/new_pwd.c: Use kadm_check_pw.

        * lib/kadm/check_password.c: Password quality check, moved from
        kpasswd.c.

Fri Jan 16 1998

        * kadmin/ksrvutil_get.c: Add `-u' flag to put each key in a
        separate file.

Mon Jan 12 1998

        * kadmin/admin_server.c: Fix broken realloc of pidarray.

Fri Jan 9 1998

        * rename logwtmp -> ftpd_logwtmp not to conflict with libc.

Sun Dec 21 1997

        * lib/krb/verify_user.c (krb_verify_user): new argument `srvtab'.
        Changed all callers.

Sat Dec 13 1997

        * lib/kdb/krb_dbm.c: check return value from dbm_store

Thu Dec 11 1997

        * lib/krb/k_flock.c (k_flock): Re-included an implementaion of
        k_flock. Changed all library and core application source to use
        k_flock.

Tue Dec 9 1997

        * appl/kx/kxd.c,common.c: more error testing from Love
        Hörnquist-Åstrand <e96_lho@elixir.e.kth.se>
        Use the correct number of X for mkstemp.


        * Release 0.9.8

        * Add `--disable-mmap' configure option, do disable all use of
        mmap.

        * Rename all k_afsklog to krb_afslog.

Mon Dec 8 1997

        * kuser/klist.c: Add a header for tokens.

Fri Dec 5 1997

        * lib/krb/krb.h: Moved prototypes to krb-protos.h, cruft to
        krb-archaeology.h.

Thu Dec 4 1997

        * appl/kauth/kauth.c: Use krb_get_pw_in_tkt2.

        * lib/krb/get_in_tkt.c: krb_get_pw_in_tkt2 that returns key.

Sun Nov 30 1997

        * configure.in: check for tgetent in libcurses

Mon Nov 24 1997

        * appl/krbmanager: incorporate patches from <d96-dst@nada.kth.se>
        for making sure there's only one instance of krbmanager.

Fri Nov 21 1997

        * admin/ext_srvtab.c: use atexit() to stamp out secrets.

Thu Nov 20 1997

        * server/kerberos.c: Log funny HTTP requests.

        * server/kerberos.c: Add comma to list of port separators for
        `-P'.


        * appl/voodoo/TelnetEngine.cpp (TelnetEngine::Connect): better
        error message (from <d96-dst@nada.kth.se>)

Wed Nov 12 1997

        * kuser/klist.c (display_tokens): patch from <e96_lho@e.kth.se>

Sun Nov 9 1997

        * Release 0.9.7


        * configure.in: test for ssize_t

        * appl/bsd/rlogind.c: Fill in ut_type, and ut_exit if they exist.

        * appl/kx/common.c (create_and_write_cookie): Create temp file
        with mkstemp.


        * appl/ftp/ftpd/ftpd.c: conditionalize otp

        * appl/bsd/login.c: conditionalize otp

        * configure.in: add --disable-otp.  update Makefile.in's

        * configure.in: define CANONICAL_HOST
        
        * configure.in, aclocal.m4: remove <bind/bitypes.h>.  contains
        bogus information on Crays.

        * include/bits.c: stolen from Heimdal

        * include/Makefile.in: replace ktypes.c with bits.c

        * lib/krb/getaddrs.c (k_get_all_addrs): cray fix

        * configure.in: updated header files


        * slave/kpropd.c: Make sure it's the kprop service that tries to
        send data.

Fri Nov 7 1997

        * configure.in: Added option --with-afsws=/usr/afsws.

        * lib/Makefile.in: Build lib/rxkad if we have include file rx/rx.h

Thu Nov 6 1997

        * appl/ftp/ftp/ftp.c (sendrequest, recvrequest): do correct tests
        for `-'

        * appl/ftp/ftp/cmds.c (getit): removed stupid goto


        * appl/kauth/kauth.c: Use krb_get_pw_in_tkt(), now that it is
        fixed.

        * appl/ftp/ftp/cmds.c: Don't retrieve files that start with `..'
        or `/' without asking.  Reverse test in confirm() to check for `y'
        rather than not `n'.  Use mkstemp.

        * appl/ftp/ftp/ftp.c: Add extra parameter to recvrequest,
        specifying if local filenames should be parsed as "-" and "|".

Mon Nov 3 1997

        * configure.in: updated broken list.  add fclose for proto check.

        * kadmin/kadmin.c: updated functions to new style of sl

        * appl/bsd/rcp.c, rlogin.c, rsh.c: setuid before doing kerberos
        authentication.  if that fails, exec ourselves with -K

        * appl/bsd/pathnames.h: add _PATH_RCP

        * configure.in: test for readv, writev

Fri Oct 24 1997

        * lib/krb/tkt_string.c (krb_set_tkt_string): const-ized

        * appl/ftp/ftp{,d}: new commands: kdestroy, krbtkfile and afslog.

        * appl/afsutil/aklog.c (expand_cell_name): fix parsing of
        CellServDB

Sat Oct 11 1997

        * appl/telnet/telnetd/sys_term.c (start_login): moved `user' so it
        works even if !defined(HAVE_UTMPX_H)

Fri Oct 10 1997

        * lib/krb/send_to_kdc.c: Change send_recv* to use a lookup table
        indexed by protocol.
        
        Implement http proxy use, enabled via `krb4_proxy' environment
        variable.

Thu Oct 9 1997

        * lib/krb/getrealm.c: Don't lookup top-level domains. Try files
        before doing DNS.

Thu Oct 2 1997

        * appl/krbmanager: Turned into a ticket management program.

        * lib/krb/{dllmain,ticket_memory}.c: Add some KrbManager
        interaction.

Sat Sep 27 1997

        * appl/voodoo: Major fixes of terminal emulation, and other
        things.

Fri Sep 26 1997

        * server/kerberos.c: Cleanup socket-opening code. Add HTTP
        support.

        * lib/krb/send_to_kdc.c: Add Kerberos over HTTP.

        * lib/krb/get_host.c: Parse URL-style host-specifications.


        * include/win32: add `version.h' and `ktypes.h'

        * lib/kclient/KClient.def: rename kclnt32 to make Eudora
        happy. Add SendTicketForService

        * lib/kclient/KClient.c: implement SendTicketForService.  Used by
        Eudora.

        * appl/voodoo/voodoo.mak: kclient renamed as kclnt32

Thu Sep 25 1997

        * Moved various base64 implementations to roken.

Thu Sep 18 1997

        * appl/telnet/telnetd/telnetd.c: Move the call to startslave()
        into the telnet() loop. This way we'll maximise the chance that
        the transmission is encrypted before starting login. This will
        hopefully remove the irritating warning you would get with some
        macintosh telnet clients.

Wed Sep 17 1997

        * appl/telnet/telnetd/sys_term.c: Fix for duplicate `-- user'.

Tue Sep 9 1997

        * server/kerberos.c: More detailed logging

Fri Sep 5 1997

        * lib/kafs/afssysdefs.h: HP-UX 10.20 seems to use 48

Thu Sep 4 1997

        * lib/des/Makefile.in: quote the test for $(CC) correctly

Wed Sep 3 1997

        * include/ktypes.c: Move __BIT_TYPES_DEFINED__ to after including
        other stuff.


        * lib/rxkad/rxk_locl.c (rxkad_calc_header_iv): Simplify header IV
        calculation.

        * lib/rxkad/osi_alloc.c (osi_Alloc): Memory allocation routines
        for user space. There is no longer any need for conditional
        compilation of user/kernel-space versions of librxkad.a.

        * lib/rxkad/rxk_clnt.c (rxkad_NewClientSecurityObject): Use
        Transarc FC-crypto to generate random numbers. We no longer need
        to link a DES library into the kernel.

Tue Sep 2 1997

        * appl/ftp/ftpd/ftpd.c (pass): chown the ticket file is logging in
        with clear-text passwords and using kerberos

        * lib/krb/krb_log.h: new file

        * lib/krb/krb.h: moved all logging functions to krb_log.h.
        Include krb_log.h in appropriate places.  From
        <shadow@dementia.org>

Mon Sep 1 1997

        * appl/kx/kx.c: more intelligent check for passive mode new option
        `-P' to force passive mode

Sat Aug 23 1997

        * lib/krb/krb_get_in_tkt.c: rename krb_as_req -> krb_mk_as_req

Wed Aug 20 1997

        * lib/rxkad/rxkad.h, rxk_serv.c (server_CheckResponse): Increase
        limit of ticket lengths to 1024 at server end.

        * lib/rxkad/rxk_clnt.c (rxkad_NewClientSecurityObject): Support
        for almost arbitrary ticket lengths.

Tue Aug 19 1997

        * kadmin/ksrvutil_get.c: Make sure we're talking to the admin
        server when getting ticket.

        * lib/krb/send_to_kdc.c: Add flag to always use admin server.

Sun Aug 17 1997

        * appl/kx/rxtelnet.in: reverse the looking for xterm loops Use
        `-n' and not `-name' to xterm
        
        * server/kerberos.c: implement `-i' for only listening on one
        address

        * lib/kadm/kadm_cli_wrap.c: Implement kadm_change_pw2 to be
        compatible with CNS.  From <shadow@dementia.org>

        * appl/ftp/ftpd/ftpd.c: removed bogus reset of `debug'

        * appl/ftp/ftpd/extern.h: define NBBY if needed

        * configure.in: os2 fixes: -Zcrtdll and check for chroot

Wed Aug 13 1997

        * lib/krb/get_in_tkt.c: Use new get_in_tkt functions, and
        implement kerberos 5 salts.

        * lib/krb/krb_get_in_tkt.c: Split krb_get_in_tkt in two functions
        so it's possible to try several key-procs with just one request to
        the KDC.

Wed Jul 23 1997

        * lib/rxkad/rxk_serv.c (decode_krb4_ticket): New functions
        decode_xxx_ticket so that it is possible to also decode kerberos
        version 5 tickets.

Sat Jul 19 1997

        * doc/Makefile.in: `test -f' is more portable than `test -e'

Tue Jul 15 1997

        * lib/kafs/kafs.h, lib/krb/krb.h: swap order of <sys/cdefs.h> and
        <ktypes.h>.  Another fix form <shadow@dementia.org>

Fri Jul 11 1997

        * lib/krb/krb.h: non-ANSI fix from <shadow@dementia.org>

Fri Jun 27 1997

        * man/otp.1: `-o' option

        * appl/otp/otp.c: List lock-time with `-l'.  New option `-o' to
        open an locked entry.

        * lib/otp/otp_db.c (otp_get_internal): Save lock_time in returned
        struct.

        * lib/otp/otp.h: New field `lock_time' in OtpContext

Thu Jun 26 1997

        * man/otp.1, man/otpprint.1: Update changed default to `md5'

        * appl/bsd/rsh.c: Don't use a hard-coded constant in `select'

        * configure.in, include/ktypes.c: Handle the case of there being
        an old version of our `sys/bitypes.h'.

Sun Jun 22 1997

        * lib/des: Merge in changes from libdes 4.01. The optimizations
        written in assembler are not used since they in general wont't
        work with shared libraries.

Fri Jun 20 1997

        * lib/krb/netread.c, netwrite.c: Handle windows discrimation of
        sockets.

Sun Jun 15 1997

        * appl/kpopper/pop_init.c: Use `STDIN_FILENO' and `STDOUT_FILENO'
        instead of `sp'.  OSF's libc isn't quite prepared to have two
        different FILEs refer to the same file descriptor.

Thu Jun 12 1997

        * doc/dir: Add dir template file.


        * appl/kauth/kauth.c (main): AFS style positional argument for -n
        option.

        * appl/xnlock/xnlock.c (verify): New resource destroyTickets and
        corresponding option -nodestroytickets. First try local
        authentication and if it fails try kerberos.
        
Sun Jun 8 1997

        * appl/ftp/ftpd/popen.c (ftpd_popen): Correct initialization of
        `foo' before call to `strtok_r'

Wed Jun 4 1997

        * doc/*.texi: Use @url.

        * doc/setup.texi: Added @ifinfo around @dircategory

Tue Jun 3 1997

        * Release 0.9.6

        * appl/kx/rxtelnet.in, appl/kx/rxterm.in: new argument '-w
        term_emulator' for specifiying which terminal emulator to use.
        Based on a patch from <arve@nada.kth.se>.

Mon Jun 2 1997

        * appl/xnlock/Makefile.in, appl/kx/Makefile.in,
        lib/auth/Makefile.in: fix the Makefile to do the for loops the
        automake way.

Sun Jun 1 1997

        * appl/xnlock/Makefile.in, appl/kx/Makefile.in: do install
        correctly even if there are no programs to install

        * configure.in: Check for `h_nerr'.

        * lib/auth/pam/pam.c: Include <security/pam_appl.h> to make it
        compile on Solaris 2.6

        lib/sl/sl.c, lib/krb/realm_parse.c, appl/ftp/ftpd/popen.c,
        appl/ftp/ftpd/ftpd.c, appl/bsd/login_fbtab.c,
        appl/bsd/login_access.c: Initialize the `lasts' to NULL before
        calling strtok_r the first time.  With our strtok_r it's not
        necessary, but the man-page on SGIs says it should be done.

Fri May 30 1997

        * lib/krb/mk_req.c (krb_mk_req, get_ad_tkt): Support for
        multi-realm ticket files by using the best matching TGT to define
        the realm of the ticket holder.


        * appl/bsd/utmpx_login.c (utmpx_update): Set `ut_id' if we're
        using utmpx

        * appl/telnet/telnetd/sys_term.c (start_login): Set `ut_id' if
        we're using utmpx

Wed May 28 1997

        * lib/roken/daemon.c: New file.

        * include/protos.H: <sys/types.h> needed on solaris 2.4

Mon May 26 1997

        * appl/bsd/su.c (kerberos): If kerberos password is zero length
        immediately try next scheme.


        * lib/kafs/afskrb.c (k_afsklog_uid): Token lifetime should be even
        if we don't know the proper ViceId.


        * Release 0.9.5

        * man/Makefile.in: Install preformatted manual pages with correct
        suffix on *BSD.

Sun May 25 1997

        * appl/kpopper/popper.h: Remove XTND, and XTND XMIT. Rename XTND
        XOVER to XOVER.


        * appl/telnet/telnetd/sys_term.c: Only include <utmp.h> and
        <utmpx.h> once

        * fix-export: Also create cat manpages.

        * appl/ftp/ftpd/logwtmp.c: Check for `_PATH_WTMP'

        * appl/telnet/telnetd/sys_term.c: Ditto.
        Remove stupid macros.

        * appl/ftp/ftp/cmds.c (setpeer): Check for `__unix'.  This is
        (apparently) a standard with many representations.

        * appl/ftp/ftpd/ftpcmd.y (SYST): Ditto.

        * appl/ftp/ftpd/ftpd.c (retrieve): file must exist to apply a
        command to it.

        * appl/ftp/ftpd/ftpd.c (retrieve): Generalise list of commands and
        basename argument.

        * appl/ftp/ftpd/popen.c (ftpd_popen): Try standard binary if the
        one in ~ftp fails.

        * appl/telnet/telnetd/sys_term.c: Use `_getpty' if there's one

        * appl/bsd/forkpty.c: Use `_getpty' if there's one

        * configure.in: check for `_getpty'

        * acconfig.h: correct test for IRIX

        * lib/roken/snprintf.c: code for checking the correct functioning
        of *nprintf is now #ifdef PARANOIA

        * appl/bsd/rlogind.c: fix logging in wtmp and parsing of winsize

        * appl/bsd/rlogin.c: New option `-p'.

        * lib/des/fcrypt.c: removed `inline' from `des_set_key'

Thu May 22 1997

        * lib/des/md5.c (MD5Final): Made signature compliant with FreeBSD.
        
        * lib/des/md5.h: Remove digest from MD5_CTX, it is now an argument
        to MD5Final instead.

        * lib/des/fcrypt.c: Also support MD5 style crypt(2).

Tue May 20 1997

        * appl/telnet/telnetd/sys_term.c: utmp stuff now seems to be
        compatible with login

        * appl/ftp/ftpd/logwtmp.c: Add support for logging to wtmpx


        * (*/)*/Makefile.in:s (install): Avoid redundant multiple
        recursion in install targets.

        * Made things compile with socks5-v1.0r1.


        * appl/telnet/telnetd/sys_term.c: changed utmp-stuff not to use
        ut_id at all

        * appl/bsd/utmpx_login.c: handle case where there's no wtmpx (such
        as HP-UX 10)

        * appl/bsd/rlogind.c: Added support for utmpx

Sun May 18 1997

        * lib/roken: removed herror, strchr, and strrchr

        * lib/krb/dest_tkt.c(dest_tkt): Only use `lstat' iff HAVE_LSTAT

        * lib/krb: snprintf, strdup, strtok_r, and strcasecmp always live
        in lib/roken and get linked here when needed.

        * lib/roken: removed strchr, strrchr.

        * appl/telnet/telnet/telnet.c: Always use our own `setupterm' for
        compatibility reasons.

        * appl/telnet/telnetd/telnetd.c: Removed <curses.h> and <term.h>.
        They doesn't seem to be used and breaks on fujitsu.

        * appl/kx/kx.c: try to give a better error message (than a core
        dump :-) when talking to an old kxd.

        * appl/kx/kxd.c, appl/kip/kipd.c, appl/kauth/kauthd.c: corrected
        fencepost error with KRB_SENDAUTH_VLEN.

        * appl/ftp/common/buffer.c: new file.

        * configure.in: cray hides their bitypes in <bind/bitypes.h>.
        Also check for this file.

        * appl/telnet/telnet/telnet_locl.h: moved termios.h before
        curses.h.  This was needed to compile on cray, but will probably
        break on some other host.

Thu May 15 1997

        * server/kerberos.c: Implement changes to the tcp protocol, while
        being compatible with the old protocol.

        * lib/krb/send_to_kdc.c: The old method to signal end of
        transmission by closing the sending side of the socket does not
        work well through some firewalls. This is now changed so that the
        client instead sends the length of the request as a four byte
        integer (in network byte order) before sending the data.

Wed May 14 1997

        * appl/telnet/telnetd/sys_term.c: HAVE_UTMPX -> HAVE_UTMPX_H.  Fix
        for OSF1.

        * appl/bsd/utmp_login.c: UTMPX_DOES_UTMP_LOGGING -> HAVE_UTMPX_H

        * appl/bsd/sysv_environ.c: Use k_concat rather than snprintf.

Tue May 13 1997

        * kuser/klist.c: updated usage string

        * lib/otp/otp_print.c: make word table and reverse word table
        constant

Sun May 11 1997

        * */*: Added some __attribute__ ((format (printf))) and fixes
        where needed.

        * appl/ftp/common/sockbuf.c: start probing at 4Mb

        * appl/ftp/ftpd/ftpd.c: use MAP_FAILED

        * appl/ftp/ftp/ftp.c: Use MAP_FAILED.
        (alloc_buffer): new function for allocating a buffer of size
        max(BUFSIZ, st.st_blksize) (Based on a patch from
        <haba@pdc.kth.se>)

        * appl/ftpd/ftpdcmd.y: hack for reget.

        * appl/kx/kxd.c: Give a error message to old-version kx.

        * replaced vsprintf with vsnprintf.
        
        * lib/roken/vsyslog.c: not used. removed.
        
        * Changed <sys/bitypes.h> -> <ktypes.h>

        * include/Makefile.in: Added ktypes.h

        * include/sys/Makefile.in: removed bitypes.h

Wed May 7 1997

        * appl/ftp/ftp/ftp.c: Open files in binary mode.

        * appl/ftp/ftpd/ftpd.c (checkaccess): Changed to make absent file
        mean `allow'. Added shell matching to names (if fnmatch is
        available).


        * appl/ftp/ftpd/kauth.c (kauth): Use `DEFAULT_TKT_LIFE'

        * appl/ftp/ftpd/ftpcmd.y, appl/ftp/ftpd/ftpd.c: always cast to
        (long) before printing out an `off_t'

        * lib/kdb/print_princ.c (krb_print_principal),
          lib/kdb/krb_lib.c (kerb_put_principal),
          admin/kdb_edit.c (change_principal),
          admin/kdb_util.c (print_time) : gmtime should never return
        tm_year > 1900

        * appl/ftp/ftpd/ftpcmd.y: Year 2000 fix

        * appl/telnet/telnetd/telnetd.c: removed code that used `getent'

        * lib/roken/getent.c: removed

Mon May 5 1997

        * appl/ftp/ftpd/ftpd.c: fix for mmap and restart_point

        * kadmin/ksrvutil_get.c (ksrvutil_get): get correct default realm

Sun May 4 1997

        * configure.in (REAL_PICFLAGS): Use `-fPIC' instead of `-fpic',
        otherwise it's not possible to make libotp on hpux.

        * configure.in: try sending picflags even when linking a shared
        library with $CC

        * lib/roken/getent.c: remove getstr

        * configure.in: removed unneeded REAL_-variables working shared
        libraries on *bsd*

        * appl/kip/kip.h: Added <net/if_var.h>

        * */Makefile.in: Use @LDSHARED@

        * configure.in: Fix shared libraries on HP/UX.
        check for curses.h
        check for `getstr' and `cgetstr' in curses

        * appl/telnet/telnet: clean-up

        * lib/kafs/afssys.c: ifdef-out the code that is not used to avoid
        referencing `syscall' on AIX.

        * lib/krb/et_list.c: s/WEAK_PRAGMA/PRAGMA_WEAK/

        * aclocal.m4 (AC_HAVE_PRAGMA_WEAK): redirect output

        * lib/roken/snprintf.c: fix for the case of max_sz == 0

        * doc/kth-krb.texi: Add @dircategory and @direntry to enable
        `install-info' to install this entry in `dir'.

        * appl/telnet/telnetd/Makefile.in: Don't link with getstr


        * lib/auth/sia/krb4_matrix.conf: Fix entries for ses_release and
        chk_user.

Sat May 3 1997

        * lib/auth/sia/sia.c: Some cleanup.

Fri May 2 1997

        * configure.in: only link the programs that need it with the
        db/dbm library


        * lib/auth/sia/sia.c: Merge code for for normal and su
        authentication.


        * Replaced sprintf with snprintf and asprintf all over the place.

        * lib/roken/snprintf.c: Added asnprintf and vasnprintf

        * lib/roken/snprintf.c: implemented asprintf, vasprintf

        * lib/roken/snprintf.c: new file

Thu May 1 1997

        * lib/kafs/afskrb.c (k_afsklog_all_local_cells): Use `k_concat'

Wed Apr 30 1997

        * lib/krb/{get_host,get_krbrlm,getrealm,realm_parse}.c: Fix some
        potential buffer overruns.

        * lib/krb/k_concat.c: Safely concatenate two strings.

Sat Apr 26 1997

        * appl/telnet/libtelnet/kerberos.c: removed stupid #if 0

        * appl/bsd/rlogind.c (send_oob): different default for `last_oob'
        to avoid losing first OOB packet

Fri Apr 25 1997

        * appl/voodoo/AuthOption.cpp: provoke the telnetd in turning on
        encryption

Wed Apr 23 1997

        * lib/kafs/afskrb.c (realm_of_cell): don't overflow buffer with
        result from `gethostbyaddr'

        * lib/krb/name2name.c (krb_name_to_name): new parameter
        `phost_size' to disable buffer overflowing.  Changed all callers.

        * lib/krb/k_getsockinst.c: New parameter `inst_size' to disable
        buffer overflowing.  Changed all callers.

        * appl/kpopper/Makefile.in: soriasis make stupidity

        * appl/kx/Makefile.in: don't include encdata.c in SOURCES_COMMON,
        otherwise DEC make gets upset.

Tue Apr 22 1997

        * lib/krb/k_getsockinst.c: Use same name as in krb_get_phost.


        * acconfig.h: hp-ux 10 also has `pututxline' that writes both to
        utmp and utmpx.

Sun Apr 20 1997

        * include/win32/config.h: adapted to win95/NT

        * appl/voodoo: Merged in win32-telnet from <d93-jka@nada.kth.se>

        * lib/krb/tkt_string.c: dummy `getuid' function.

        * lib/krb/ticket_memory.c (tf_setup): implement

        * lib/roken/roken.mak, roken.def: new files

        * lib/des/des.def: Removed des_random_{seed,key}

        * lib/krb/dllmain.c: Rewrote `msg'.
        Better explanation when it fails to spawn `krbmanager'.

        * lib/krb/tf_util.c: backwards `in_tkt' added.

        * lib/krb/in_tkt.c: removed

        * lib/kclient/KClient: Reformatted and fixed.

Sat Apr 19 1997

        * appl/ftp/ftpd/ftpd.c: Incorporate /etc/ftpusers changes from
        NetBSD.

        * appl/ftp/ftpd/ftpd.c: Handle oob-stuff better.

Fri Apr 18 1997

        * appl/kpopper/pop_{dropinfo,send,updt}.c: Fix 'From ' line
        parsing bug.

        * appl/kpopper/pop_dropinfo.c: Add support for xover.

        * appl/kpopper/pop_xover.c: Add some kind of xover support.

        * appl/kpopper/pop_debug.c: New tiny popper debugging program.

Tue Apr 15 1997

        * lib/krb/kdc_reply.c (kdc_reply_cred): fix sanity checks.

        * appl/bsd/rshd.c: k_afsklog so that remote command gets a token.
        fix usage string.

Sat Apr 12 1997

        * appl/bsd/rcp.c (main): Rcp implements encrypted file transfer
        without using the kshell service.


        * lib/krb/mk_safe.c: Emit new checksum.

        * lib/krb/rd_safe.c: New code to handle both new and old
        checksums.

        * lib/des/qud_cksm.c: Fix compatibility with mit deslib.

Fri Apr 11 1997

        * lib/sl/sl.c (sl_match): initialize `partial_cmd'

Sun Apr 6 1997

        * lib/kafs/kafs.h: Ugly addition of `_P'

        * lib/kafs/afssys.c: <sys/socket.h> contains the definition of
        `_IOW' on cygwin32.

        * appl/telnet/telnet/utilities.c: <sys/socket.h> needed by
        cygwin32

        * doc/Makefile.in: always run $(MAKEINFO).
        
        * lib/otp/otp_md.c (sha_finito_little_endian): byte-swap
        correctly.

        * include/sys/bitypes.H: Added #ifndef for types

        * configure.in: test for types

        * aclocal.m4: Stolen AC_GROK_TYPES? from heimdal


        * appl/ftp/ftp/ftp.c: Fix passive mode.

Sat Apr 5 1997

        * appl/kauth/ksrvtgt.in: New ksrvtgt script.

Fri Apr 4 1997

        * lib/krb/kdc_reply.c: Add some range checking.


        * lib/otp/otptest.c: Updated tests from `draft-ietf-otp-01.txt'.
        Passes verification examples from appendix C.

        * admin/kdb_util.c: All usage strings are now consistent (and even
        with the code)!

Thu Apr 3 1997

        * lib/kafs/afssys.c (k_pioctl): Separate syscall functionality and
        kerberos convenience routines into afssys.c and afskrb.c. This to
        make it possible to use k_pioctl() without linking in all
        libraries in the world.

Tue Apr 1 1997

        * appl/telnet/telnet/commands.c: Rename suspend to telnetsuspend,
        since Unicos has one of its own.

Sun Mar 30 1997

        * appl/bsd/{rsh,rlogin}.c: Don't look at argv[0].


        * man/tenletxr.1: new file

        * appl/kx/rxtelnet.in, appl/kx/rxterm.in, appl/kx/tenletxr.in:
        Support `-k'

        * appl/kx/tenletxr.in: new script for running kx in backwards
        mode.

        * appl/kx: New version of protocol.

        * appl/kauth: Use err & c:o

        * appl/kauth/encdata.c (read_encrypted): Give better return code
        for EOF


        * appl/ftp/ftp/krb4.c: Use stdout rather than stderr. Add newlines
        to many strings.

        * kuser/kdestroy.c: Use set_progname, make -q equal to -f, remove
        bell.

        * lib/roken/warnerr.c: New function set_progname.
        * aclocal.m4: Invert test of AC_NEED_DECLARATION and rename it to
        AC_CHECK_DECLARATION.  Add new function AC_CHECK_VAR, that looks
        for a variable, including a declaration.

        * lib/roken/roken.h: Add optional declaration for __progname.

        * lib/roken/*{err,warn}.c: Restructure err and warn functions.

Sat Mar 29 1997

        * appl/telnet/telnet/sys_bsd.c: Maybe-fix for HP-UX 10: Ifdef
        SO_OOBINLINE, don't even select for exceptional conditions.

        * lib/otp/otp_md.c: always downcase the seed.
        byte-swap the SHA result.

Thu Mar 27 1997

        * appl/otp/otp.c: removed bad free of global data

Sun Mar 23 1997

        * configure.in: moved version.h and config.h to include


        * acconfig.h: Fix utmp/utmpx stuff on OSF/1.


        * appl/bsd/rlogind.c (control): Rewritten to handle the case of
        there being no `ws_xpixel' and `ws_ypixel'

        * appl/bsd/rlogin.c (sendwindow): Rewritten to handle the case of
        there being no `ws_xpixel' and `ws_ypixel'

        * aclocal.m4 (AC_KRB_STRUCT_WINSIZE): Also test for `ws_xpixel'
        and `ws_ypixel'

        * lib/otp/otp.h: Change default global timeout

        * lib/krb/tf_util.c (tf_setup): Also take `pname' and `pinst'

        * appl/telnet/telnetd/sys_term.c, appl/bsd/utmpx_login.c: Do
        gettimeofday and then copy the data for the sake of those systems
        like SGI that can have different timevals in file and memory.

        * configure.in: Allow `--with-readline'

        * lib/editline/edit_compat.c (readline): strdup data before
        returning it.


        * appl/telnet/telnetd/state.c: Change size of subbuffer to 2k.

Thu Mar 20 1997

        * lib/krb/decomp_ticket.c: Add some range checking.

        * appl/ftp/ftpd/krb4.c: Check return value from krb_net_write.

        * appl/ftp/ftp/ftp.c: Fix hash mark printing.

Wed Mar 19 1997

        * appl/kauth/kauthd.c: more logging

        * man/kx.1, man/kxd.8: Updated.

        * appl/kx/kx.c, kxd.c: Hacked so that all TCP-connections are kx
        -> kxd


        * lib/editline/edit_compat.c: BSD libedit comatibility.

Wed Mar 12 1997

        * appl/ftp/ftpd/ftpd.c: Set `byte_count' even when using mmap.
        Log foreign IP address together with hostname.

Mon Mar 10 1997

        * server/kerberos.c: Fix log file muddle.

Sun Mar 9 1997

        * appl/bsd/kcmd.c (kcmd): check malloc for failure.

Tue Feb 25 1997

        * man/ftpd.8: Documented the `-g' option.

        * appl/ftp/ftpd/ftpd.c: New option `-g umask' for specifying the
        umask for anonymous users.

        * appl/ftp/ftpd/ftpd.c: conditionalize SIGURG

        * appl/otp/otp.c: More fixes from Fabien COELHO
        <coelho@cri.ensmp.fr>.  Check for current OTP before allowing the
        update.

Wed Feb 19 1997

        * appl/otp/otp.c: updated help string

        * appl/bsd/Makefile.in: Fixed installation of suid programs.

        * appl/telnet/libtelnet/kerberos.c: fix some stuff to get
        forwarding code to compile

        * lib/otp/otp_db.c: fix for signed char overflow.


        * lib/krb/resolve.c: Patch from Jörgen Wahlsten
        <wahlsten@pathfinder.com>: Zero out resource record, and send
        correct length to dn_expand.

Mon Feb 17 1997

        * lib/roken/roken.h: Check for `_setsid'

        * appl/ftp/ftp/ftp.c: s/__CYGWIN32__/HAVE_H_ERRNO/

        * include/Makefile.in: Generete krb_err.h and kadm_err.h before
        linking/copying them

        * aclocal.m4: AC_FIND_FUNC: Add the library at the beginning of
        the list.

        * configure.in: Use AC_PROG_RANLIB
        Always use EMXOMF under OS/2
        Check for sys/termio.h and _setsid


        * configure.in: A preliminary fix for editline.

        * appl/telnet/libtelnet/kerberos.c: Include ticket forwarding
        stuff.

        * lib/krb/krb_get_in_tkt.c: Use tf_setup.

        * lib/krb/krb_get_in_tkt.c: New function tf_setup.

Sat Feb 15 1997

        * man/otp.1: updated

        * appl/otp/otp.c: New options `-d' and `-r'.  From Fabien COELHO
        <coelho@cri.ensmp.fr>

        * lib/otp/otp.h: Changed default from md4 to md5
        * lib/otp/otp_db.c (otp_get, otp_simple_get): New functions.

Thu Feb 13 1997

        * appl/kx/rxtelnet.in: allow specification of port number

        * appl/otp/otp.c: Add `-u' option

Sun Feb 9 1997

        * appl/ftp/common/glob.c: Rename FOO -> CHAR_FOO to avoid
        collision with symbol in sys/ioctl.h

Fri Feb 7 1997

        * man/kpropd.8: updated

        * appl/bsd/rcmd_util.c: warning needs to know what program is
        used.

        * slave/kpropd.c: New explicit flag `-i' for interactive.  Don't
        use AI to figure out if we have been started by inetd or not.

Thu Feb 6 1997

        * appl/kx/rxtelnet.in, appl/kx/rxterm.in: Patch for sending -l to
        kx.  From <map@stacken.kth.se>

        * kuser/klist.c: corrected alignment of `expired'

        * appl/telnet/telnet/commands.c: replaced lots of \n by \r\n

Mon Feb 3 1997

        * configure.in (socket, gethostbyname, getsockopt, setsockopt):
        Better tests.
        (HAVE_H_ERRNO): New test

        * lib/roken/herror.c (herror): Check HAVE_H_ERRNO
        lots of other files as well.

Sat Feb 1 1997

        * appl/bsd/rcp.c: Work around the non-working getpw* in cygwin32

        * lib/krb/logging.c: Init function for `std_log´

        * appl/telnet/telnet/utilities.c: Remove `upcase´
        Check HAVE_SETSOCKOPT

        * appl/telnet/telnet/telnet.c: Use `strupr´ instead of `upcase´

        * appl/telnet/telnet/commands.c, appl/movemail/pop.c,
        appl/kauth/rkinit.c, appl/ftp/ftp/ftp.c,
        appl/sample/sample_client.c: Ifdef around for the non-existence of
        `h_errno' in cygwin32.

        * lib/des/read_pwd.c: work-around for cygwin32

        * appl/telnet/telnet/sys_bsd.c: work-around for cygwin32

Fri Jan 31 1997

        * lib/krb/tf_util.c: gnu-win32 needs to open files with O_BINARY.

Sun Jan 26 1997

        * configure.in: removed duplicate of initgroups and lstat
        Use AC_KRB_STRUCT_WINSIZE

        * aclocal.m4 (AC_KRB_STRUCT_WINSIZE): New test

        * lib/krb/getaddrs.c: Check for SIOCGIFFLAGS and SIOCGIFADDR

        * appl/bsd/rlogin.c: conditional on SIGWINCH

        * appl/bsd/rcmd_util.c et al: conditional getsockopt

        * configure.in (cygwin32): New target
        (getsockopt, getsockopt): Test for
        (herror, hstrerror): Better tests

        * aclocal.m4 (AC_FIND_IF_NOT_BROKEN): Pass arguments to
        AC_FIND_FUNC

Thu Jan 23 1997

        * configure.in: Add EXECSUFFIX

        * appl/kx/rxterm.in: rsh -n

        * lib/krb/unparse_name.c (krb_unparse_name_long_r): new function


        * lib/auth/sia/sia.c: Fix a bug with ticket filename. Add afs
        support.

        * lib/krb/get_host.c: Use KRB_SERVICE.

Wed Jan 22 1997

        * lib/auth/sia/Makefile.in: Add linker magic fix for broken,
        conflicting kerberos code in xdm.

Tue Jan 21 1997

        * appl/xnlock/xnlock.c (verify): Change the "LOGOUT" password to
        be manageable as X-resource XNlock*logoutPasswd. The password is
        stored in UNIX crypt format so that it can be stored in a global
        resource file for sites that whish to keep it a secret.


        * configure.in: Check for winsize in sys/ioctl.h also.

Sat Jan 18 1997

        * lib/krb/get_default_principal.c: Use principal from
        KRB4PRINCIPAL before using uid.

Wed Jan 15 1997

        * appl/telnet/telnet/sys_bsd.c: Use `get_window_size'

        * lib/roken/get_window_size.c: New file

        * appl/bsd/rlogin.c: Use `get_window_size'

        * appl/bsd/forkpty.c, appl/bsd/rlogind.c: conditionalize on
        TIOCSWINSZ

        * configure.in: Check for `_scrsize' and `struct winsize'

Tue Jan 14 1997

        * Makefile.in (install-strip, travelkit-strip): New targets.

Thu Jan 9 1997

        * */Makefile.in: Use @foo_prefix@ and @program_transform_name@
        Add code to uninstall target

Thu Dec 19 1996

        * configure.in: Set LIBPREFIX

        * config.sub: Add os2 as a system

        * config.guess: Try to recognize i386-pc-os2_emx

        * configure.in: case for *-*-os2_emx
        NEED_PROTO for `strtok_r'
        
        * aclocal.m4: ranlib is apparently calld EMXOMF on OS/2
        (AC_KRB_PROG_LN_S): New test that uses cp if ln fails

Wed Dec 18 1996

        * appl/bsd/login.c (main): First try to verify password using
        standard UNIX method and if it fails try kerberos authentication.
        
Sat Dec 14 1996

        * appl/bsd/rcp.c: consider case of no fchmod

        * appl/kpopper/pop_init.c: Use k_getsockinst.

        * lib/roken/{strupr,strlwr,strchr,strrchr,lstat,initgroups,chown,
        fchown,rcmd}.c: new files

        * appl/kpopper/pop_lower.c: Removed.

        * Makefile.in (travelkit): New target.

Tue Dec 10 1996

        * lib/krb/parse_name.c (kname_parse): Only copy realm if it is
        specified.

        * lib/krb/get_host.c (krb_get_host): Treat no realm as local
        realm.

Mon Dec 9 1996

        * appl/ftp/ftpd/ftpd.c: Get afs-tokens when logging in with
        password.


        * slave/kprop.c: flock with K_LOCK_SH

Wed Dec 4 1996

        * appl/telnet/telnet/commands.c: Also export XAUTHORITY

Sun Dec 1 1996

        * kadmin/ksrvutil.c: If realm is not specified, use the local one.

Sat Nov 30 1996

        * appl/kauth/kauthd.c: Use KAUTH_VERSION.  Try to give correct
        error messages back to kauth.

        * config.sub, config.guess: Merged in changes from autoconf 2.12

        * appl/bsd/rsh.c: quick hack to make `-n' to the right thing.

        * kadmin/kadm_locl.h: Add prototype for FascistCheck.

Thu Nov 28 1996

        * man/afslog.1: Documented `-createuser'

        * appl/afsutil/aklog.c: removed `cell_of_file' Added option
        `-createuser' to run pts to create a foreign principal.

Tue Nov 26 1996

        * lib/otp/otp_challenge.c: Initialize error string and check for
        NULL from strdup.

        * lib/roken/mini_inetd.c: Initialize `sin_family'

        * appl/kpopper/pop_init.c: Add `-p' option and make `-a'
        auth-style

        * appl/bsd/rshd.c: Add `-p' option.

        * appl/bsd/rlogind.c: Handle `-p' correctly.

        * appl/bsd/login.c: Removed confusing initialization of
        `login_timeout'

        * appl/kpopper/pop_dropinfo.c: Remove white-space at the beginning
        of UIDL-string.

Sun Nov 24 1996

        * Release 0.9.3

Sat Nov 23 1996

        * kadmin/ksrvutil_get.c: Use `krb_unparse_name_long' Better
        defaults.

        * lib/krb/krb.h: Added *_to_key

        * lib/krb/get_svc_in_tkt.c (srvtab_to_key): Make public

        * kadmin/kadmin.c (do_init): `-p' is a synonym for `-u'
        (do_init): more logical defaults
        (help): removed old code
        better error messages

        * lib/krb/get_in_tkt.c (passwd_to_key, passwd_to_afskey): Export
        and remove functionality for reading passwords.

        * lib/sl/sl.c: Nicer help output.

        * lib/otp/otp_challenge.c: Initialize `challengep'

        * lib/krb/Makefile.in: Removed get_pw_tkt.c

Fri Nov 22 1996

        * lib/auth/sia/sia.c: Now compiles under Digital UNIX 4.0.

Wed Nov 20 1996

        * lib/auth/pam/pam.c: Chown ticketfile to correct GID.

Tue Nov 19 1996

        * appl/kx/rxtelnet.in: Try to set the screen number as well.

        * Be careful not to thrust `h_length' from gethostby{name,addr}

        * appl/bsd/rcmd_util.c (ip_options_and_die): New function.

        * configure.in: moved headers before functions.
        call AC_PATH_XTRA_XTRA.
        Add strchr, index, rindex, and strrchr to AC_CHECK_FUNCS.
        remove strchr and strrchr, add strtok_r from/to AC_BROKEN.

        * aclocal.m4 (AC_PATH_XTRA_XTRA): New macro.

        * aclocal.m4 (AC_FIND_FUNC, AC_FIND_FUNC_NO_LIBS): Two new
        arguments: includes and arguments)

        * configure.in: Need to supply arguments and includes to test for
        `res_search' and `dn_expand'

        * lib/kafs/afssys.c (k_setpag): Handle AFS_SYSCALL3

        * Use `k_getpw{nam,uid}' instead of getpw{nam,uid}.

        * Replace lots of `strtok' with `strtok_r'.

        * lib/sl/sl.c: Allow unlimited number of arguments.  Use
        `strtok_r' to divide up string into arguments.

        * lib/roken/roken.h: Added `strtok_r'

        * configure.in: Test for `strtok_r'

        * include/Makefile.in: Don't build in ss

        * Makefile.export: Fixed ChangeLog-generation

        * lib/sl/sl.c: Let `readline' to the \n-removal.  Handle empty
        lines.  Don't store empty lines in the history.

Mon Nov 18 1996

        * lib/sl/sl.c: Use readline compatible i/o.


        * lib/otp/otp_locl.h: Changed location of otp database to /etc

        * appl/otp/Makefile.in: Install otp setuid root.

        * util/Makefile.in: don't build SS

        * lib/sl: New directory.

        * kadmin/kadmin.c: Replaced SS by SL.

Sun Nov 17 1996

        * kadmin/kadm_funcs.c: Improved log messages.


        * Use KRB_TICKET_GRANTING_TICKET.


        * server/kerberos.c: Don't do any special logging when running as
        slave.


        * Lots of files: remove unnecessary `(void)'

        * Lots of files: remove unnecessary `register' declaration.


        * lib/krb/get_host.c: Only keep list of hosts from requested
        realm.


        * man/otpprint.1, otp.1: New files.

        * appl/otp/otp.c: `-s' is now default.

        * appl/otp/otp.c: removed count

        * lib/des/destest.c: more general quad_cksum test.

        * lib/otp/otp_print.c (otp_print_stddict_extended,
        otp_print_hex_extended): New functions.

        * lib/otp/otptest.c: New file.


        * appl/ftp/ftpd/ftpd.c: Change default auth level to what was
        formerly known as `user'.

        * appl/ftp/ftpd/ftpd.c: Orthogonalize arguments to -a


        * appl/kip/kip.c: Try all addresses we get back from the name
        server.

        * kadmin/kpasswd.c: updated to new functions.

        * lib/otp/otp_db.c (otp_db_open): Do a few retries.  Unlock in
        case this file cannot be opened.

        * doc/kth-krb.texi: New chapter about OTPs.

        * appl/otp/otpprint.c, appl/otp/otp.c: Use OTP_ALG_DEFAULT.
        Consistent language Check return value from des_read_pw_string.

        * lib/otp/otp.h: Add OTP_ALG_DEFAULT


        * lib/krb/parse_name.c: New function krb_parse_name

Sat Nov 16 1996

        * appl/bsd/login.c: removed S/Key.
        Added OTP with option `-a otp'
        Reorganized verification loop.

        * appl/bsd/Makefile.in (login): Remove skey and add OTP

        * configure.in: Test for `uid_t' and `off_t'

        * appl/telnet/telnetd/telnetd.c: Removed `-s' for securID and
        added `-a otp' for OTP.

        * appl/kpopper: removed s/key and added OTP support.  Updated
        man-page.

        * lib/otp/otp.h: more fields in the struct and a new function.

        * appl/ftp/ftpd/ftpd.c: Full OTP support.

        * appl/kx/rxterm.in: Add options: -l username, -r args_to_rsh, and
        -x args_to_xterm

        * appl/kx/rxtelnet.in: Add options: -l username, -t
        args_to_telnet, and -x args_to_xterm

        * man/kx.cat1: regenerated

        * man/kx.1: Added `-l' option.

        * appl/kx/kxd.c: Accept username from `kx'

        * appl/kx/kx.c: Introduced option `-l user' to be able to login as
        some other user.

Fri Nov 15 1996

        * appl/kx/kx.c: Print out display and not display_nr

        * lib/auth/Makefile.in: Fix the case with empty SUBDIRS.

        * */Makefile.in: Use $(LN_S) instead of ln -s

        * */Makefile.in: Add @SET_MAKE@

        * doc/latin1.tex: New file.

        * doc/kth-krb.texi: Use latin1.tex to be able to use one letter
        that some bear seem to think is important.

        * doc/kth-krb.texi: Added acknowledgements.

        * lib/auth/Makefile.in: Only build relevant subdirectories.

        * configure.in: Set @LIB_AUTH_SUBDIRS@ to the subdirectories of
        lib/auth that should be built.


        * lib/kafs/afssys.c: Only get tokens for each cell once.

Thu Nov 14 1996

        * man: Added man pages for movemail(1) and kerberos(8).


        * kadmin/kadmin_cmds.ct: Add `add' for add_new_key and `passwd'
        for change_password.


        * lib/krb/logging.c: Now actually compiles!


        * config.{guess,sub}: Merge changes from Autoconf


        * lib/krb/{recv,send}auth.c: Don't return errno if there is a
        system error.

Wed Nov 13 1996

        * util/ss/Makefile.in: Now even compiles with BSD make!

        * appl/kx: Now send the complete display from `kxd' to `kx'.  This
        should enable it to work better with Xlibraries that don't support
        unix sockets.

        * kuser/klist.c: conditionally include <sys/ioctl.h> and
        <sys/ioccom.h> before <kafs.h>

        * lib/krb/resolve.h: Add fallback for `T_TXT'.

        * appl/otp/otp.c: removed print-functionality.

        * appl/otp/otpprint.c: New file.

        * appl/otp/Makefile.in: New program `otpprint'

        * lots of Makefile.in: Now should be possible to build with makes
        that have broken VPATH-handling.

        * configure.in: Always replace REAL_SHARED & c:o so that some
        libraries may be built as shared.
        Removed unused AC_SUBST.
        Only build afskauthlib on irix.

        * lib/auth/afskauthlib/Makefile.in, lib/auth/sia/Makefile.in,
        lib/auth/pam/Makefile.in: Always build as a shared library.

        * appl/kx/rxtelnet.in, appl/kx/rxterm.in: export PATH (from
        <jas@pdc.kth.se>).


        * lib/krb/{pkt_cipher,fgetst}.c: Removed

        * lib/krb/name2name.c: Renamed k_name_to_name to krb_name_to_name

Mon Nov 11 1996

        * appl/telnet/telnetd/sys_term.c: Really remove bad stuff from
        environment.

Fri Nov 8 1996

        * appl/bsd/rlogind.c (main): `portnum' should be int.

        * appl/bsd/sysv_environ.c: Use _PATH_ETC_ENVIRONMENT

        * appl/bsd/pathnames.h: _PATH_ETC_ENVIRONMENT: new

        * lib/krb/get_host.c (srv_find_realm): New parameter `service'


        * lib/krb/unparse_name.c: New function.

Tue Nov 5 1996

        * lib/auth/pam/pam.c: Add PAM Kerberos module.

Mon Nov 4 1996

        * configure.in: configure in lib/auth/afskauthlib

        * lib/kafs/afssys.c: New function `k_afsklog_uid'.

        * lib/auth/afskauthlib: New library that works like
        `afskauthlib.so' from Transarc.


        *lib/krb/get_host.c, lib/krb/getrealm.c, lib/kafs/afssys.c: Use
        dns_lookup().
        
        * lib/krb/resolve.c (dns_lookup): Replaced several different
        resolver functions with one more generalized.

Sun Nov 3 1996

        * Add check target in lib/krb.
        
        * appl/bsd/login.c (main): Sleep 10 seconds before bailing out so
        that there is a chance of reading the error message.

        * appl/bsd/rsh.c (main): When invoked as rlogin equivalent change
        to real uid before execing rlogin.

Sat Nov 2 1996

        * appl/bsd/utmp_login.c: Do the right thing on systems where
        UTMPX_DOES_UTMP_LOGGING is defined.


        * lib/krb/krb.h: names for `krb_kuserok' prototype

        * lib/krb/get_host.c: Add tcp/kerberos.REALM as well.

        * appl/bsd/su.c: Replace call to `kuserok' by `krb_kuserok'.

        * lib/otp/otp_parse.c: Add support for parsing extended responses
        (draft-ietf-otp-ext-01).

        * lib/otp/otp.h: Define OTP_HEXPREFIX and OTP_WORDPREFIX.

        * appl/otp/otp.c: Add option `-e' for printing responses in
        extended mode (according to draft-ietf-otp-ext-01.txt).


        * lib/krb/kuserok.c: Function krb_kuserok now takes name,
        instance, realm rather than an AUTH_DAT.

Fri Nov 1 1996

        * lib/auth/sia: Add SIA Kerberos module.


        * lib/roken/roken.h: Need to include signal.h prior to defining
        SIG_ERR.

        * appl/bsd/utmpx_login.c (utmpx_update): Minor restructuring for
        simplified maintainability.

        * appl/bsd/utmp_login.c (utmp_login): Even when there are utmpx
        files on this system we should also log to the utmp files. If
        there are no utmp files we of course don't have to log to them.


        * Makefile.export: now generate PROBLEMS and COPYRIGHT as well.

        * PROBLEMS, COPYRIGHT, doc/kth-krb.info: removed

        * doc/kth-krb.texi: Put copyrights in marketing order.

        * appl/kpopper/popper.h: client and ipaddr should be char [] so
        that we can store the names there.

        * appl/kpopper/pop_init.c: save copies of addresses that otherwise
        get overwritten.

Mon Oct 28 1996

        * lib/krb/send_to_kdc.c (send_recv_it): Use `recv' not `recvfrom'
        to make winsock happy.  Also don't care anymore about from which
        address we got the answer since we do a `connect'.

        * admin/adm_locl.h, lib/kdb/kdb_locl.h, kadmin/kadm_locl.h,
        lib/krb/krb_locl.h, lib/roken/strftime.c, server/kerberos.c: Do
        not use #if, use #ifdef.

        * configure.in: Test for `rand' and `getuid'


        * slave/kprop.c: Don't terminate on trivial errors in slaves-file.

Sun Oct 27 1996

        * doc/Makefile.in: Install from source directory if necessary.

        * lib/krb/kuserok.c: Do not use `k_getpwnam' in libkrb.

        * configure.in: You can't even use `unset', Ultrix sh does not
        have it.


        * several files: Check status from des_read_pw_string.


        * server/kerberos.c: Make sure all data is recieved on a tcp
        socket before trying to reply.


        * lib/krb/krb.h: Add <time.h> for `struct tm'

        * appl/kx/Makefile.in: Both kx and kxd requires @XauWriteAuth@

        * configure.in: Fix test for `XauReadAuth'

Fri Oct 25 1996

        * lib/krb/get_host.c (init_hosts): Must ntohs(KRB_PORT) on
        machines running backwards.

        * More consistent use of CRLF in telnet and telnetd.

        * Removed redundant -I$(srcsdir)/../../include from compiler args.
        

        * appl/ftp/ftpd/ftpd.c: New option `-a otp' to allow OTPs but no
        ordinary passwords in cleartext.

        * appl/ftp/ftpd/Makefile.in: Link `ftpd' with -lotp

        * lib/Makefile.in: Add otp

        * include/Makefile.in: Add otp.h

        * configure.in: Test for ndbm.h
        Generate Makefiles in lib/otp and appl/otp

        * appl/otp: New program to set up and generate OTPs.
        
        * lib/otp: New library for one-time passwords (RFC1938).

        * lib/krb/get_host.c (srv_find_realm): Added parameter `proto'

        * lib/des/Makefile.in: Add md4 and sha.  run `mdtest' from check.

        * lib/des/md4.h, lib/des/md4.c, lib/des/sha.c, lib/des/sha.h,
        lib/des/mdtest.c: New files.

        * appl/kauth/Makefile.in: Make $(libexedir) as well.

Thu Oct 24 1996

        * appl/bsd/rlogind.c (setup_term): Actually set the speed of the
        terminal.

        * appl/bsd/rlogin.c (main): Do a `speed_t2int' before putting the
        speed in the TERM variable.

        * appl/bsd/rcmd_util.c: New functions: `speed_t2int' and
        `int2speed_t'.

        * appl/bsd/bsd_locl.h: Added prototype of `speed_t2int' and
        `int2speed_t'.

Sun Oct 20 1996

        * appl/bsd/login.c: Do `getspnam' before change the UID. Also call
        `endspent'

        * appl/krbmanager: New program used on PCs by kclient.

        * lib/kclient: New library.

        * lib/des, lib/krb: Added some PC-specific files.

        * doc/kth-krb.info: Regenerated.

        * doc/Makefile.in (kth-krb.info): Some stupid makes don't
        understand $<
        (kth-krb.html): New rule.

        * doc/kth-krb.texi (Compiling from source): Added some references
        about Socks.

Sat Oct 19 1996

        * doc/kth-krb.texi: Added text about ``--with-socks''.

        * configure.in: Use `AC_TEST_PACKAGE' for skey and socks.

        * aclocal.m4: Replaced `AC_TEST_SOCKS' and `AC_TEST_SKEY' with the
        more general `AC_TEST_PACKAGE'.

Fri Oct 18 1996

        * configure.in: call AC_TEST_SOCKS

        * acconfig.h: SOCKS

        * aclocal.m4: Added AC_TEST_SOCKS

        * lib/krb/send_to_kdc.c (send_to_kdc): Removed unused `f' and
        close.

Thu Oct 17 1996

        * man/popper.8: Option `-i'

        * appl/kpopper/pop_send.c: clean-up

        * appl/kpopper/popper.h: Removed old garbage and added SKEY.

        * appl/kpopper/pop_xmit.c: clean up

        * appl/kpopper/pop_user.c: SKEY-support

        * appl/kpopper/pop_pass.c: Added support for spaces in passwords
        and S/Key.

        * appl/kpopper/pop_init.c: Moved some variables into struct pop
        (main): Added support for `-i'

        * appl/kpopper/pop_get_command.c: New command "HELP".

        * appl/kpopper/Makefile.in: Add SKEY-stuff.

        * lib/krb/get_host.c: Use `k_getportbyname(KRB_SERVICE,...)' as a
        default instead of KRB_PORT

        * lib/krb/getaddrs.c (k_get_all_addrs): Add
        gethostbyname(k_gethostname()) as a fallback.

        * lib/krb/k_getport.c (k_getportbyname): proto can be NULL

        * lib/krb/krb.h: Only include <sys/types.h> if HAVE_SYS_TYPES_H

        * lib/krb/prot.h: KRB_SERVICE: Added


        * server/kerberos.c: Replaced linked list with a vector.

Wed Oct 16 1996

        * server/kerberos.c: Add support for TCP connections.

        * lib/krb/send_to_kdc.c: On stream sockets, use krb_net_read
        rather than recvfrom.

Mon Oct 14 1996
        
        * doc/kth-krb.texi: Only use `kdb_edit' to add the initial
        `nisse.admin'.  Add all other users with `kadmin'.

        * doc/kth-krb.info: new file.

        * doc/kth-krb.texi: Added some text about kx and ftp.

        * appl/ftp/ftpd/ftpcmd.y,
          util/ss/ct.y,
          util/et/error_table.y :
        Added code for handling the case of using `bison' and having no
        `alloca'.  Alloca is usually never called anyway, so we just use
        `malloc'.

        * appl/kx/kxd.c: All static variables are now global and in
        common.c.
        (doit_conn, doit): Turn on TCP_NODELAY.
        (create_and_write_cookie, suspicious_address): Moved to common.c

        * appl/kx/kx.c (connect_host): Try all addresses of `host'. Turn
        on TCP_NODELAY.
        (doit): prepare for TCP-only hosts.
        (usage,main): add `-t'
        (main): Passive mode is possible again.

        * appl/kx/kx.h: More #ifdefs for include files.  Declarations for
        global variables.

        * appl/kx/common.c (get_xsockets): Try to chmod
        dirname(`X_UNIX_PATH')
        (get_xsockets): Turn on TCP_NODELAY on TCP connections.

        * doc/Makefile.in: New file

        * Makefile.in: Added `doc' to `SUBDIRS'

        * configure.in: Generate `doc/Makefile'

Sun Oct 13 1996

        * appl/bsd/rcp.c (main): Made rcp AFS aware.

        * lib/krb/kuserok.c (kuserok): Act as if luser@LOCALREALM is
        always an entry of .klogin.

Sat Oct 12 1996

        * appl/kx/rxtelnet.in: Start the `xterm' process correctly.

        * lib/des/rnd_keys.c (sumFile): consider the case that `res' is
        not longword-aligned.

        * lib/krb/get_host.c (parse_address): `getservbyname' should
        really get proto = NULL

        * lib/krb/send_to_kdc.c (krb_udp_port): removed
        (send_to_kdc): removed `addrlist'

        * lib/krb/send_to_kdc.c: Support not only UDP.

        * lib/krb/get_host.c (krb_get_admhst): Really ask for a admin host
        if that's what we want.

Thu Oct 10 1996

        * lib/krb/get_host.c: Simplified some code. Added stub-support for
        SRV-records.

Wed Oct 9 1996

        * appl/kx/rxtelnet.in, appl/kx/rxterm.in: PDC are unable to give
        correct instructions to their users and therefore we have to add
        strange directories to the PATH.

        * appl/kx/rxtelnet.in: Support sending arguments to telnet.

        * appl/kx/rxterm.in: rsh can reside in path or %bindir% support
        extra arguments to xterm (from <jas@pdc.kth.se>).

        * appl/kx/rxtelnet.in: Try to find some kind of terminal emulator
        for X.

        * appl/kx/rxterm.in, appl/kx/rxtelnet.in: Look for kx in $PATH and
        %bindir%.

        * appl/kx/common.c (get_xsockets): `mkdir' the correct directory.
        From <jas@pdc.kth.se>


        * lib/krb/send_to_kdc.c: Changes to allow other than udp port 750
        connections.

        * lib/krb/get_host.c: rewrite of krb_get_{adm,krb}hst.

Sun Oct 6 1996

        * appl/ftp/ftpd/ftpd.c (retrieve): Got rid of `sprintf'.

        * configure.in: Fix order for x libs.  From <jas@pdc.kth.se>.
        Check for `fcntl', `alloca', `winsock.h', and `io.h'.

        * lib/krb/krb_locl.h: Check for <io.h> and <winsock.h>

        * lib/krb/krb.h: Check for winsock.h

        * lib/krb/k_flock.c: Better test for `fcntl' with locking.

        * lib/krb/et_list.c: Hopefully correct pragma this time.  From
        <jas@pdc.kth.se>

Thu Oct 3 1996

        * lib/krb/klog.c (klog): Do not forget to print the text.

        * lib/krb/log.c (krb_log): Print space after time in log.

Wed Oct 2 1996

        * appl/kpopper/popper.h: Add field msg_id to hold Message-Id for
        UIDL command.

        * appl/kpopper/pop_dropinfo.c (pop_dropinfo): Support for UIDL
        command. Saves Message-Id to be used as unique id. Everything is
        #ifdef:ed UIDL.

        * appl/kpopper/pop_get_command.c: Recognize UIDL command.

        * appl/kpopper/pop_uidl.c (pop_uidl): POP3 UIDL command
        implementation.

        * appl/kpopper/Makefile.in: New file pop_uidl.c.


        * configure.in: Made some of the tests into macros defined in
        aclocal.m4

        * appl/telnet/libtelnet/kerberos.c: Given better error message
        when user is not authorized to login.

        * lib/roken/k_getpwuid.c, lib/roken/k_getpwnam.c: Call `endpwent'.
        If we are using a BSD-kind of system we should not leave the
        shadow password database open.

        * appl/xnlock/xnlock.c: Got rid of all `register' declarations.

        * appl/kx/rxterm.in, appl/kx/rxtelnet.in: Use `set --'

Mon Sep 30 1996

        * lib/roken/k_getpwnam.c, lib/roken_k_getpwuid.c: Call `endspent'
        to try to close the shadow password file.

        * appl/ftp/ftpd/ftpd.c (retrieve): Cut the argument to the command
        and the first character of the extension.

        * lib/krb/send_to_kdc.c: Sun doesn't have any strerror so we can't
        use that here.  We are only printing debug messages anyway, so
        just print errno for now.

        * appl/kx/rxtelnet.in: Now using SIGUSR2.

        * appl/kx/kx.c: Now using SIGUSR1 to mean `exit when number of
        children goes down to zero'.  SIGUSR2 is `exit when number of
        children is equal to zero'.

        * appl/xnlock/xnlock.c: More fixup of old code.

        * appl/ftp/ftpd/ftpd.c: Only call `filename_check' for guest
        users.

        * configure.in: Added tests for more header files.  Also added
        more ifdefs when actually including those files.

        * appl/kx/Makefile.in: Do not build programs if we have no X11.
        
Sun Sep 29 1996

        * appl/xnlock/xnlock.c (main): Support for shadow passwords.

        * lib/roken/k_getpwuid.c: New file, better support for shadow
        passwords.


        * appl/telnet/Makefile.in: Use SET_MAKE


        * appl/ftp/ftpd/ftpcmd.y: Remove access to several commands for
        anonymous users.

        * lib/krb/get_krbhst.c: Look for kerberos-#.realm.

        * appl/ftp/ftpd/popen.c: Execute files from ~ftp if possible.

        * appl/ftp/ftpd/ftpd.c: Add find site command.

        * appl/ftp/ftpd/ftpd.c: Add special handling of nonexistant files
        with extensions {,.tar}{,.gz,Z}.

Sat Sep 28 1996

        * configure.in: Check for sys/times.h, sys/param.h, and
        sys/timeb.h

        * lib/des: autoconfed a little to make it compile.

        * lib/roken/roken.h: Add `max', `min', and definitions for broken
        syslogs.

        * appl/bsd/bsd_locl.h: Removed SYSLOG-garbage and max.

        * appl/kx/kx.h: Remove prototype of childhandler.

        * appl/kx/common.c: Remove childhandler.  Not common any more.

        * appl/kx/rxterm.in: Send SIGUSR1 to kx before starting xterm.

        * appl/kx/rxtelnet.in: Send USR1 to kx at appropriate moment.

        * appl/kx/kx.c: Die after receiving SIGUSR1 and when number of
        children goes to zero.

        * lib/roken/roken.h: Add STDERR_FILENO

        * lib/roken/mini_inetd.c (mini_inetd): Also dup onto stderr.

        * lib/kafs/Makefile.in (afslib.so): Change argument so they work
        with `ld' instead of `cc'

        * appl/kx/kxd.c: writeauth.c as separate file.

        * appl/kx/kx.c: `-d' option to disable forking.

        * appl/kx/Makefile.in: Compile and link writeauth.c if necessary.
        For some stupid reason $< does not work correctly in BSD make.
        Use $(srcdir) instead.

        * appl/ftp/ftp/ftp_locl.h: Only include <roken.h> once.

        * configure.in: Use strange X flags when looking for XauReadAuth.
        Add XauWriteAuth if we need to include it.

Fri Sep 27 1996

        * appl/sample: Sample programs work again.


        * appl/kx/kxd.c (main): use `mini_inetd'

        * appl/kx/kx.c: Use KX_PORT

        * appl/kx/kx.h: Remove SOMAXCONN and add KX_PORT

        * appl/kauth/kauthd.c (main): use `mini_inetd'

        * appl/ftp/ftpd/ftpd.c: Removed `conn_wait' and use `mini_inetd'
        instead.

        * appl/bsd/bsd_locl.h: Prototypes for `get_shell_port' and
        `get_login_port'

        * appl/bsd/rcmd_util.c: New file.

        * appl/bsd/Makefile.in: Added rcmd_util.c

        * appl/bsd/rcp.c: Moved `get_shell_port' to rcmd_util.c

        * appl/bsd/rsh.c: Moved `get_shell_port' to rcmd_util.c

        * appl/bsd/rlogind.c (main): Use `mini_inetd'

        * appl/bsd/rshd.c (main): Add support for interactive mode with
        `-i'.

        * appl/telnet/telnetd/telnetd.c (main): use `mini_inetd'

        * lib/roken/roken.h: Added prototype for `mini_inetd', and
        fallback definitions for SOMAXCONN, STDIN_FILENO, and
        STDOUT_FILENO.

        * lib/roken/Makefile.in: Added mini_inetd.o

        * lib/roken/mini_inetd.c: New file.

Thu Sep 26 1996

        * appl/kx/kxd.c (doit): read port number in ascii.

        * appl/kx/kx.c (doit): write port number in ascii.

        * appl/kauth/rkinit.c (doit_host): Check return value from
        `read_encrypted'.

        * appl/kauth/kauthd.c (doit): Removed unnecessary sprintf's before
        syslog.

        * lib/krb/krb_get_in_tkt.c (krb_get_in_tkt): Return error code
        from `tf_create' and not always INTK_ERR.

        * lib/krb/tf_util.c (tf_create): Correct check for return value
        from `open'.

        * lib/des/rnd_keys.c (des_rand_data): Try /dev/urandom as well.

Wed Sep 25 1996

        * appl/afsutil/pagsh.c (main): One-of error hopefully fixed this
        time.

        * configure.in: Add test for <sys/un.h>

        * kadmin/Makefile.in: Add back $(CRACKLIB)

Mon Sep 16 1996

        * appl/kx/Makefile.in: Create rxterm and rxtelnet at compile time.

        * kstring2key moved to appl/afsutil.

Sun Sep 15 1996

        * appl/kx/kx.c (main): For now always use passive mode.  That's
        the only thing that has been tested and not a lot of people are
        going to use non-passive anyways.

        * appl/kx/kx.c (connect_host): write display_number in ascii.

        * appl/kx/kxd.c (doit): read display_number in ascii.

        * appl/kx/common.c (get_local_xsocket): Generate the
        /tmp/.X11-unix directory with the sticky bit set.

        * configure.in: Generate appl/kx/rxterm and appl/kx/rxtelnet.

        * appl/kx/Makefile.in: Install rxterm and rxtelnet.

        * appl/kx/rxterm.in, appl/kx/rxtelnet.in: New files.

        * appl/kx/common.c (get_local_xsocket): try to bind the socket
        instead of checking for existence with lstat.


        * appl/kx/kxd.c: Detect remote termination and cleanup on exit.

Sat Sep 14 1996

        * lib/des/rnd_keys.c: Hack for systems that lack setitimer (like
        crays).


        * appl/kx/kxd.c (doit): Send over the display number and the
        authority file actually used to kx.
        
        (create_and_write_cookie):  New function to generate and write into a
        file a local cookie used between this pseudo-server and the
        clients on this host.
        
        (start_session):  New function to check and remove the local cookie
        before the data is sent over to `kx'.

        * appl/kx/kx.c (display_num, xauthfile): New variables.  Now `kx'
        prints out the values of those two variables and then goes to the
        background to enable some script to set these on the other host.
        
        (start_session): New function that adds a local cookie before sending
        the rest of the connection to the local X-server.
        
        (main): Also recognize "unix" as a local DISPLAY.

        * appl/kx/kx.h: <X11/Xauth.h> used.
        (get_local_xsocket): Changed parameter.

        * appl/kx/common.c (get_local_xsocket): Now try to allocate the
        first free socket in /tmp/.X11-unix.  Also `mkdir' this directory
        first.  Return the number of the display opened.

        * appl/kx/Makefile.in: Added X libraries.

        * lib/des/des.h: Added prototype for `des_rand_data'.

        * lib/des/rnd_keys.c: Made `des_rand_data' non-static.  This
        function is useful and now even used.

Wed Sep 11 1996

        * appl/bsd/login.c: Use k_afs_cell_of_file() to get tokens for the
        cell of the home catalog rather than the local cell.

        * lib/kafs/afssys.c: Add k_afs_cell_of_file.

Tue Sep 10 1996

        * appl/telnet/telnetd/telnetd.c, appl/telnet/telnetd/sys_term.c:
        Removed all convex code.

Mon Sep 9 1996

        * appl/telnet/telnetd/termstat.c: UNICOS5: removed

        * appl/telnet/telnetd/telnetd.c, appl/telnet/telnetd/sys_term.c:
        NEWINIT, UNICOS7x, UNICOS5: removed
        
        STREAMSPTY: added variable `really_stream' Now able to handle the
        case where the OS supports stream ptys but we run out of them and
        start using ordinary BSD ones.

        * appl/telnet/telnetd/state.c: UNICOS5: removed

        * appl/telnet/telnetd/pathnames.h: BFTPPATH: removed

        * appl/telnet/telnetd/ext.h, appl/telnet/telnetd/global.c:
        BFTPDAEMON: removed.
        UNICOS5: removed.
        
        * appl/telnet/telnetd/ext.h: STREAMSPTY: added variable
        `really_stream'.

        * lib/krb/stime.c (krb_stime): argument should be `time_t'.
        lib/krb/krb_locl.h: changed prototype.

Sun Sep 8 1996

        * configure.in: Also generate `appl/sample/Makefile'

        * appl/Makefile.in: Use @SET_MAKE@.
        Include sample

        * lib/krb/Makefile.in: Add krb_stime, krb_mk_auth, and
        krb_check_auth.

        * util/et/compile_et.c (main): Include <foo.h> in foo.c

        * slave/kprop.c: exit with return code == 1 to indicate failure.

        * server/kerberos.c (usage): Fixed usage string.

        * lib/krb/tkt_string.c (tkt_string): Removed bogus extern
        declaration of `getuid'.

        * lib/krb/tf_util.c (tf_save_cred): Removed bogus extern
        declaration of `lseek'.

        * lib/krb/stime.c (stime): Renamed to `krb_stime'

        * lib/krb/sendauth.c (krb_sendauth): reimplemented using
        `krb_mk_auth' and `krb_check_auth'.

        * lib/krb/send_to_kdc.c (send_recv): Removed stupid cast.

        * lib/krb/recvauth.c: Removed KRB_SENDAUTH_VERS

        * lib/krb/prot.h: create_auth_reply: correct prototype.
        krb_create_death_packet: ditto.
        KRB_SENDAUTH_VERS: moved here from sendauth.c and recvauth.c

        * lib/krb/month_sname.c: Made `month_sname' const.

        * lib/krb/mk_req.c: Remove stupid `register'

        * lib/krb/log.c (krb_log): Use `krb_stime'

        * lib/krb/kuserok.c (kuserok): Nightmare Filesystem might return
        ESTALE.  Treat it the same way as ENOENT.

        * lib/krb/krb_locl.h: Added prototype for `krb_stime'

        * lib/krb/krb_check_auth.c: New file with `krb_check_auth',
        implemented for compatibility with CNS.
        lib/krb/krb_mk_auth.c: Ditto.

        * lib/krb/krb.h: Removed duplicate declarations of `get_request'
        and `krb_get_admhst'.
        Added declarations for `krb_mk_auth' and `krb_check_auth'.

        * lib/krb/kparse.h: removed prototype for `strsave'

        * lib/krb/kparse.c (fGetParameterSet): Use `strdup' instead of
        `strsave'.
        (strsave): Removed.

        * lib/krb/kname_parse.c: Removed stupid `register' declarations.

        * lib/krb/klog.c (klog): Use `krb_stime'

        * lib/krb/get_phost.c: Handle the case where the name has no dots
        in it by just returning it as-is.

        * lib/knet/Imakefile, lib/knet/getkdata.c, lib/knet/phost.c,
        lib/knet/sendkdata.c: removed unused files.

        * lib/kadm/kadm_cli_wrap.c (kadm_init_link): use `k_getportbyname'

        * kadmin/ksrvutil_get.c (get_srvtab_ent): Erase the key if
        something goes wrong.  Include realm in the message when writing a
        key.
        (parseinput): New function that removes quotes and backslashes
        from input.
        (ksrvutil_get): Use `parseinput' to read input.

        * kadmin/ksrvutil.c (safe_read_stdin): Correct use of printf.
        Removed bogus casts and fflush of stdin.
        (main): Use `return' instead of `exit'.

        * kadmin/kpasswd.c (main): Use `return' instead of `exit'.

        * kadmin/admin_server.c: exit with return code == 1 to indicate
        failure.

        * appl/sample/sample_server.c: Rewrote to use all new functions.

        * appl/sample/sample_client.c: Rewrote to use all new functions.

        * appl/sample/sample.h: new file.

        * appl/sample/Makefile.in: new file.

        * appl/movemail/pop.c (socket_connection): use `k_getportbyname'

        * appl/kpopper/pop_init.c: exit with return code == 1 to indicate
        failure.

        * appl/kauth/kauth.c (doexec): new-style definition.  ret should
        be a `pid_t'.
        (main): new-style definition.  Use `prog' instead of `argv[0]'

        * appl/ftp/ftp/extern.h: Removed unused `abortsend'

        * appl/ftp/Makefile.in: Use @SET_MAKE@

        * appl/bsd/rsh.c: get_shell_port: use `k_getportbyname'

        * appl/bsd/rlogin.c: get_login_port: use `k_getportbyname'

        * appl/bsd/kcmd.c: Removed bogus casts to `caddr_t'

        * admin/kstash.c: Removed bogus flushing of stderr.  Replaced lots
        of `exit(-1)' by `return 1'

        * admin/kdb_util.c: Removed unused variable `aprinc'.
        Removed bogus flushing of stderr.
        Replaced lots of `exit(-1)' by `return 1'.

        * admin/kdb_edit.c, admin/kdb_init.c: use `return' instead of
        calling `exit' and use 1, not -1, for failure.

        * Makefile.in: Use @SET_MAKE@

        * aclocal.m4: AC_NEED_PROTO: need macro to determine if we need to
        define a prototype for a function.

        * configure.in: Reordered.  Removed unused stuff.  Start using
        AC_NEED_PROTO.

        * config.guess: merged in FSF version from 960908.

Tue Sep 3 1996

        * include/protos.H: Added optarg, opterr, optind, optopt and
        (fclose under Sunos 4).  Removed these declarations from lots of
        other files.

        * acconfig.h: Add undefs for h_errno, h_errlist, optarg, optind,
        opterr, and optopt.

        * configure.in: Use `AC_NEED_DECLARATION' for h_errno, h_errlist,
        optarg, optind, opterr, and optopt.

        * aclocal.m4: New macro `AC_NEED_DECLARATION' to figure out if we
        need to have an external declaration of a variable.

Mon Sep 2 1996

        * lib/krb/krb.h: Removed unused `req_act_vno' and `k_log'.
        Changed all callers.

        * lib/krb/krb.h: Removed definition of `MAX_HSTNM'.

        * lib/krb/send_to_kdc.c: Removed use of `MAX_HSTNM'.

        * appl/afsutil/pagsh.c: Some reformatting and fixed the off-by-one
        args bug.

Sat Aug 31 1996

        * lib/krb/{send_to_kdc.c, getrealm.c}, appl/xnlock/xnlock.c,
        appl/kauthkauth.c, appl/bsd/{rshd.c,rlogind.c}: Removed '#if 0'-ed
        code.

        * lib/krb/get_in_tkt.c: Removed '#if 0'-ed code and now compiles
        with NOENCRYPTION.

        * kadmin/ksrvutil.c: Now compiles with NOENCRYPTION.

        * appl/ftp/ftpd/ftpcmd.y: Throw away passwd after use.

        * appl/ftp/ftpd/ftpd.c: Fixed old comment.

        * slave/kpropd.c: s/sa_len/salen/ Irix has a #define for sa_len.
        
        * lib/kdb/krb_dbm.c: If key->dptr is not a `char *' we have to
        cast it before adding to it.

        * configure.in: Old test for `sa_len' in `struct sockaddr' fails
        on IRIX 6.2.  Try to compile a program refering to that field
        instead of grepping for it in <sys/socket.h>.

        * appl/bsd/kcmd.c: Removed old and broken code.

        * configure.in: Check for `gethostname', `uname', and
        <sys/utsname.h>

        * lib/krb/k_gethostname.c: Try to use `uname' if we have no
        `gethostname'.

        * appl/ftp/ftpd/klogin.c: Incorrect use of `gethostname' replaced
        by correct use of `k_gethostname'.


        * lib/roken/verify.c: Change name verify_unix_user ->
        unix_verify_user in analogy with krb_verify_user.

Fri Aug 30 1996

        * appl/xnlock/Makefile.in: Install man-page.

        * configure.in, */Makefile.in: Replace `-shared' with some other
        option when not using gcc.

        * lib/kafs/afssys.c: Do not start by checking if we have AFS in
        `k_afsklog'.

        * appl/bsd/rlogin.c: More kludges to make it work with rlogin on
        linux: Do not select for an exceptional condition on `rem' after
        having received EINVAL.
        
        Also rewrote ifndef NOENCRYPTION stuff.

        * appl/bsd/rlogind.c: More kludges to make it work with rlogin on
        linux: Only send oob data just after having sent normal data to
        make sure we never send two consecutive bytes of oob data.

        Also rewrote ifndef NOENCRYPTION stuff.

Thu Aug 29 1996

        * lib/kafs/Makefile.in: Use `ld' instead of `cc' for linking
        afslib.so.  Not everybody has cc.

Wed Aug 28 1996

        * Release 0.9.2a

Mon Aug 26 1996

        * appl/bsd/login.c: Clean-up.  Made static a lot of functions and
        variables.  Rewrote some function definitions to ANSI-style.

        * appl/bsd/sysv_environ.c: KRB4_MAILDIR may and may not contain a
        trailing slash.  We need to be very careful to make sure the
        contents of $MAIL does not contain two, because RMAIL in emacs
        uses it and emacs is no friend with double slashing.


        * lib/kafs/afssys.c (k_afsklog_all_local_cells): Now should return
        correct value.

Sun Aug 25 1996

        * Release 0.9.2.

Sat Aug 24 1996

        * lib/roken/hstrerror.c: Check for h_errlist prototype.

Thu Aug 22 1996

        * lib/krb/send_to_kdc.c, etc/services.append, server/kerberos.c:
        Changed `kerberos' to `kerberos-iv' now that it has been
        registered with IANA.

        * man/rshd.8, man/rlogind.8: updated documentation of `-a'

        * lib/roken/roken.h: Added declaration of `h_errno'

        * kuser/Makefile.in: Link kdestroy with KRB_KAFS_LIB

        * appl/kauth/kauth.h: Stupid declarations for syslog.

        * appl/kauth/kauthd.c: syslog errors and success.

        * include/protos.H: Removed `h_errno', now in roken.h Declare
        `getusershell' under solaris.

        * configure.in, acconfig.h: Figure out if we have to declare
        `h_errno'.

        * appl/ftp/ftp/kauth.c: Added support for afs_string_to_key.

Wed Aug 21 1996

        * lib/kafs/afssys.c: Look for AFS database servers in dns also.

        * lib/kafs/afssys.c: Add support for a ~/.TheseCells-file.

Sun Aug 18 1996

        * appl/bsd/rlogind.c: Removed unused `check_all' variable.  Use
        `inaddr2str'.

        * appl/bsd/rshd.c: Use `inaddr2str'.
        
        * appl/bsd/iruserok.c: Removed potential buffer overrun after
        `gethostbyaddr'.

        * lib/roken/inet_aton.c: Some const-ness.

        * lib/roken/Makefile.in: Add `inaddr2str.o'.

        * appl/ftp/ftpd/ftpd.c: Use `inaddr2str'.

        * lib/roken/inaddr2str.c, lib/roken/roken.h: New function
        `inaddr2str' to convert an IP address into a verified hostname or
        a string of the form x.y.z.a

        * lib/krb/{krb_locl.h, krb.h, k_name_to_name.c, k_getsockinst.c,
        getrealm.c}: Some const-ness.
        
        * appl/bsd/bsd_locl.h: Removed another prototype for `crypt'.

        * appl/kpopper/popper.h: Some const-ness to get rid of a warning.

        * appl/bsd/rshd.c: Always check reverse mapping.  Removed
        `local_domain' and `top_domain'.  Added some const-ness.

Sat Aug 17 1996

        * include/Makefile.in: Removed VPATH.  With it this makefile does
        not work correctly.

        * lib/krb/rw.c, lib/krb/krb_locl.h: Changed parameters to
        `krb_{get,put}'-functions to void *.

        * include/protos.H: Add `getusershell' in solaris.

        * appl/kauth/kauthd.c, appl/bsd/{rlogin.c,rlogind.c}: Less
        warnings because of arguments to `setsockopt'.

        * lib/roken/roken.h: Fixed prototype of `inet_aton'

Wed Aug 14 1996

        * lib/roken/verify.c: Use <crypt.h> if there is one.

        * lib/kafs/Makefile.in: AFS_EXTRA_LIBS is always called
        `afslib.so'.  Otherwise some makes get upset when there is no such
        library to be made.

        * appl/telnet/telnetd/telnetd.h: <protos.h> are needed to get
        prototype for `ptsname'.

        * appl/bsd/rlogind.c, appl/kpopper/pop_dropinfo.c,
        appl/telnet/libtelnet/{auth.h,enc_des.c,kerberos.c},
        appl/telnet/telnet/utilities.c, appl/telnet/telnetd/{sys_term.c,
        telnetd.h, kadmin/admin_server.c, kuser/klist.c,
        lib/kdb/{krb_cache.c, krb_dbm.c}, lib/krb/{fgetst.c, getst.c,
        log.c, tf_util.c}: Include type `int' on all definitions and
        remove unnecessary `register'.

        * appl/bsd/login_access.c: Fix parameter declaration to
        `netgroup_match'.

        * appl/bsd/forkpty.c, include/protos.h: s/__sgi__/__sgi//g

        * admin/kdb_util.c: Use `errno' for error message instead of
        uninitialized variable.

Tue Aug 13 1996

        * appl/kauth/rkinit.c: Default port should be the same in kauth
        and kauthd.

Sun Aug 11 1996

        * configure.in: Added `AC_REVISION'

        * slave/kpropd.c: Cleaned up structure.  Now returns useful value.

        * lib/roken/verify.c: Broken OSes need declartion of `crypt'.

        * lib/roken/roken.h: Added prototype for `verify_unix_user'.

        * lib/krb/lsb_addr_comp.h: Added prototype for `lsb_time'.

        * lib/krb/{get_admhst.c, get_default_principal.c, get_krbhst.c,
        get_krbrlm.c, getrealm.c, realm_parse.c} : Check for buffer
        overwrite correctly.

        * lib/krb/rw.c, lib/krb/krb_locl.h: Prepended `krb_' to `get_int',
        `put_int', `get_address', `put_address', `put_string',
        `get_string', `get_nir', and `put_nir'.  Changed all callers.

        * lib/kdb/krb_db.h: Added prototype for `kerb_delete_principal'
        and `kerb_db_delete_principal'.

        * lib/kadm/kadm_cli_wrap.c: Removed unused variable.

        * appl/telnet/telnetd/telnetd.c: Changed bogus `strncpy' to
        `strcpy'.

        * appl/bsd/su.c: Fixed error messages from execv.

        * appl/bsd/rlogin.c: Fixed potential buffer overrun when reading
        "TERM".

Thu Aug 8 1996

        * appl/telnet/telnet/commands.c, appl/kauth/rkinit.c: Replaced
        `herror' by `hstrerror'.
        
        * appl/bsd/login.c: chmod the tty so that it is writable for group
        tty.

        * configure.in: Use AC_FIND_IF_NOT_BROKEN for herror and
        hstrerror.

        * aclocal.m4: New macro `AC_FIND_IF_NOT_BROKEN'

        * config.guess: Add 686

Tue Aug 6 1996

        * lib/krb/getrealm.c: Fallback for `T_TXT'

        * configure.in: Look for `res_search' and `dn_expand' in
        libresolv.

Mon Aug 5 1996

        * */Makefile.in: Add Id to those missing it.

        * configure.in: Small fix in comment.


        * Release 0.9.1.


        * appl/ftp/ftpd/ftpcmd.y: s/timeout/ftpd_timeout/

        * appl/kstring2key/kstring2key.c: `usage' changed to void.

        * lib/krb/mk_req.c: `build_request' changed to void.

        * appl/ftp/ftp/ftp_locl.h: Changed order of includes.

        * appl/bsd/login.c, appl/ftp/ftpd/*: s/timeout/login_timeout/

        * lib/kafs/afssysdefs.h: undef AFS_SYSCALL if we are defining it.

Sun Aug 4 1996

        * lib/kafs/afssys.c: AIX systems will now correctly (I hope)
        detect whether AFS is loaded or not. This is currently a bit
        kludgy, and involves loading an external shared library,
        afslib.so, which can be put in athena/lib or pointed to with
        environment variable AFSLIBPATH.  This is only tested on AIX 4
        (due to lack of an AIX 3 system).


        * lib/krb/getrealm.c: Range-check the result from the DNS.

        * lib/krb/get_krbrlm.c: Try to use the DNS to find out which realm
        this host belongs to.

        * kadmin/ksrvutil_get.c: Fixed error message.


        * lib/kafs/*: Fix aix/afs brokenness.

        * lib/kadm/kadm_stream.c (stv_string): Range check.

Fri Jul 26 1996

        * appl/ftp/common/{ftp,ruserpass}.c: Less bogus domain name
        handling.

Mon Jul 22 1996

        * lib/krb/mk_req.c: Use encrypt_ktext()

        * configure.in, lib/kafs/afssys.c: Add option to exclude AFS
        support (this is useful only on AIX systems that doesn't have
        AFS).

        * configure.in: Removed configuration from subdirectories.

Sat Jul 13 1996

        * appl/ftp/ftp/extern.h, appl/ftp/ftp/ftp.c: Substitute `struct
        fd_set' with `fd_set'.

Mon Jul 8 1996

        * Makefile.in: install should depend on all.

Sun Jul 7 1996

        * appl/bsd/su.c: Allow root to set the uid without entering a
        password.

Fri Jul 5 1996

        * lib/krb/getrealm.c: Add automatic dns realm search.

Thu Jul 4 1996

        * lib/krb/log.c (krb_log): Renamed k_log(...) to krb_log(...) for
        compatibility with CNS. There is still a #define k_log krb_log.

        * util/et/et_list.c: Hack to resolve _et_list in shared libraries.

Fri Jun 28 1996

        * appl/bsd/rlogin.c (reader): If after a select rlogin fails to
        read expected OOB data try to read ordinary data before continuing.

        * appl/bsd/rlogin.c (oob_real): SunOS5 tty race kludge.

        * appl/bsd/rlogind.c: Cleanup oobdata stuff.

Thu Jun 27 1996

        * appl/bsd/login.c (main): Also check for complete tty name with
        `rootterm'.

        * lib/krb/check_time.c: New function `krb_check_tm'.

        * lib/roken/tm2time.c: New function `tm2time', mktime generalized
        to local timezone and UTC.

        * kadmin, admin: Use `tm2time' and `krb_check_time' instead of
        `maketime'.

Tue Jun 25 1996

        * lib/krb/mk_priv.c (krb_mk_priv): Send correct address.

        * appl/kauth/kauthd.c: Set ticket file to some sane default, and
        add -i debugging switch.

Mon Jun 24 1996

        * appl/xnlock, appl/kauth, appl/telnet/telnetd: Use BINDIR and not
        `/usr/athena/bin'.

Wed Jun 19 1996

        * appl/bsd/rlogin.c: consistent usage of oob_real.

        * appl/bsd/rlogind.c: Do not send oob garbage when running
        solaris?  Seems that linux is unable to handle the duplicate
        urgent data that is the result.
        
        * appl/bsd/rlogind.c: Fix usage.

        * appl/bsd/kcmd.c: Don't F_SETOWN.

Mon Jun 17 1996

        * lib/krb/rw.c: Add get_address() and put_address().


        * appl/telnet/telnetd/telnetd.c: updated usage

        * appl/bsd/su.c: Replaced getpass by des_read_pw_string

        * appl/bsd/forkpty.c (ptym_open): Removed unused `ptr2'.

        * appl/bsd/rlogind.c: Removed unused functions and made others
        static.

Sun Jun 16 1996

        * Release 0.9.
        

        * appl/ftp/ftpd/ftpd.c: Don't just send data in plain when doing
        NLST.


        * configure.in: test for setresgid.

        * kadmin/ksrvutil_get.c: Fixed byte manipulations of keys.

Sat Jun 15 1996

        * lib/des/rnd_keys.c (des_rand_data): At least `srandom'.

        * appl/ftp/ftp/cmds.c: Support longer passwords when retrying
        login.

        * kadmin/admin_server.c, man/kadmind.8, kth-krb.texi: Reading key
        file from file is now the default.  Use `-m' to enter it manually.
        `-n' is currently a no-op.

        * appl/ftp/ftpd/ftpd.c: Add S/Key support.

        * appl/ftp/ftpd/Makefile.in: Link with S/Key.

        * appl/ftp/configure.in: Test for S/key.
        
        * configure.in, aclocal.m4: Moved skey test
        to aclocal.m4.

        * appl/bsd/login.c: Correct argument to `skeyaccess'.

Fri Jun 14 1996

        * lib/krb/verify_user.c: New parameter to specify service key
        instance, NULL means "rcmd".

        * lots of files: All ticket filenames uses `TKT_ROOT'.

        * appl/bsd/rlogind.c: Check for uid == 0 and user != "root".

Tue Jun 11 1996

        * appl/kpopper/pop_init.c(pop_init): Got rid of some old ifdef'ed
        code.

        * lib/kdb/krb_dbm.c: Add macro for `dbm_delete' for the people
        that are ndbm challenged.

Mon Jun 10 1996

        * lib/krb/kname_parse.c: Got rid of duplicate defintions.

        * appl/ftp/ftp/ruserpass.c: Get hostname even if user has no
        '.netrc' file.


        * lib/kadm, lib/kdb, kadmin: Add database delete operation.

        * lib/krb/kname_parse.c: Allow dots in instances.


        * appl/bsd/rlogind.c (logwtmp): Only define `logwtmp' if it does
        not exist.  Log more garbage.

Sun Jun 9 1996

        * appl/telnet/configure.in: Check for `logwtmp'.

        * appl/ftp/configure.in: Use `AC_FUNC_MMAP'


        * appl/bsd/forkpty.c: Removed all ugly pty search stuff from
        ptym_open().

        * configure.in: Modified the creation of version.h, now actually
        shows up with ident.It is now also slightly more keen on creating
        a new version.h.

Sat Jun 8 1996

        * lib/roken/verify.c: <stdio.h> for NULL.

        * appl/xnlock/xnlock.c (leave): Call XCloseDisplay, otherwise
        screen saver changes are not updated before closing the X
        connection.


        * appl/bsd/utmp_login.c: Remove tty-prefix from ut_id; this field
        is usually very short.

Fri Jun 7 1996

        * slave/kpropd.c: Add option -m to merge rather then load
        database.

Thu Jun 6 1996

        * admin/kdb_util.c: Add a merge operation.  (One day it might be
        used to propagate only patches to the database)

Wed Jun 5 1996

        * appl/kpopper: Support both POP3 and KPOP3.

        * appl/xnlock/xnlock.c: Use `verify_unix_user'

        * lib/roken/verify.c: verify_unix_user: New function from xnlock
        for checking passwd in `/etc/passwd'.

        * appl/telnet/telnetd/sys_term.c: gettimeofday buglet


        * slave/kpropd.c: Rewrite of kpropd.

        * admin/kdb_util.c: Sanity check on input to load_db.

        * slave/kpropd.c: Use default value for fname.

        * slave/kprop.c: Use some sane default values for data_file and
        slaves_file.

        * admin/kdb_util.c: If there isn't any database when loading,
        create an empty one.

Mon Jun 3 1996

        * appl/telnet/telnetd/sys_term.c: Somewhat changed the way utmpx
        entries are created. It should now work on both Solaris and IRIX,
        without stale login information.

Sat Jun 1 1996

        * lib/krb/k_gethostname.c (k_gethostname): Fallback.

        * lib/krb/send_to_kdc.c (send_to_kdc),
          kadmin/kadm_ser_wrap.c (kadm_ser_init),
          slave/kprop.c (prop_to_slaves),
          slave/kpropd.c (main): Use `k_getportbyname'.

Fri May 31 1996

        * Lots of files: more #includes ifdefad and cleaned up.

Thu May 30 1996

        * Lots of files: Replaced bcopy/bzero/bcmp with
        memcpy/memset/memcmp.


        * lib/krb/get_default_principal.c: Use getlogin() if it is the BSD
        variant that actually gives some information.

        * lib/krb/create_ticket.c: Write correct address byteorder.

        * lib/kadm/kadm_stream.c,kadm_cli_wrap.c: Don't assume int32_t is
        four bytes.

        * kadmin/kpasswd.c: Allow principal without -n.

        * kadmin/kadmin.c: Use krb_get_default_principal.

        * appl/ftp/ftpd/ftpd.c: Fix bare newline bug.

        * appl/bsd/rlogind.c: Add -i and -p options to start rlogind from
        command line (for debugging).

        * INSTALL: Rewritten.

Wed May 29 1996

        * appl/ftp/ftp/krb4.c: Handle different sizes of returned
        checksum.


        * appl/bsd/Makefile.in: Don't install login setuid.

Fri May 24 1996

        * appl/bsd/rsh.c: Don't run away yelling if someone calls you
        `remsh'.

Sun May 19 1996

        * lib/krb/kdc_reply.c: Remove unused function decrypt_tkt. Sanity
        check on decrypted ticket.

Wed May 15 1996

        * server/kerberos.c: Should work with the new libkrb

        * appl/kip: Support more than one tunnel device.


        * lib/krb/*.c: All functions that create or decode kerberos
        packets have been rewritten.  Hopefully, everything still
        works. This is to eliminate problems with wierd systems, like
        Crays, that doesn't have any two or four byte integers. Some of
        these changes could be a lot more pretty, and *many* assumptions
        that sizeof(int32) == 4 still exist in the rest of the code,
        though.

        As a side effect, all packets sent are now in network byte order.

Mon May 13 1996

        * configure.in: Shared libraries for Irix


        * Several fixes for UNICOS.

        * appl/ftp/ftp/krb4.c: Allow default data protection level through
        a "prot level" in .netrc. This really should be done in a more
        useful manner.

Sun May 12 1996

        * appl/xnlock/xnlock.c: Cleaned up user verification code. Now
        uses new function krb_verify_user.  Also fixed a few problems with
        the password prompt box.

        * lib/krb/verify_user.c: New function krb_verify_user to verify a
        user with kerberos.


        * appl/kip: New program for forwarding IP packets over kerberised
        connections using tunnel devices.

        * appl/kauth/kauth.c, kadmin/ksrvutil.c: Use
        krb_get_default_principal

        * appl/bsd/rlogind.c: Do not change portnumber to host order if
        using kerberos.  This will cause the magic
        `reverse-time-if-port-is-less-than' to fail.

        * lib/des/GNUmakefile: Removed file.  This file causes problem
        when building in the source directory and when using GNU make
        which prefers this file to the generated Makefile.

        * appl/bsd/login.c: More careful when handling returned value from
        `getspnam'.

Sat May 11 1996

        * lib/krb/realm_parse.c: New function to expand a non-complete
        realm to its official name, e.g nada -> NADA.KTH.SE.

        * lib/krb/get_default_principal.c: New function to guess the
        default principal to use. Looks at any existing ticket file first,
        then at uid/logname etc.


        * kadmin/kadmin.c: Use kname_parse and allow different instances
        and realms.

        * lib/roken/k_getpwnam.c: New function k_getpwnam that should work
        with and without shadow passwords.

        * Lots of files: s/getpwnam/k_&/g.

Tue May 7 1996

        * lib/des/des_locl.h: DES library updated to version 3.23,
        des_locl.h now includes configure.h to get HAVE_TERMIOS etc.

        * lib/des/des.h: On the alpha define DES_LONG to unsigned int.
        

        * kuser/kinit.c: Handle passwords longer than 16 characters.

        * appl/xnlock/xnlock.c (GetPasswd): Handle longer passwords than
        16 characters.

Sun May 5 1996

        * Release 0.8.


        * appl/ftp/ftpd/kauth.c: Klist command.


        * appl/ftp/ftpd: Removed `-g' from calls to ls.

        * appl/ftp/ftp/cmds.c (setpeer): Fix so that opening a second
        connection to a specified port works.

        * appl/telnet/telnet: Default is binary.

        * appl: Now build under Ultrix.

        * appl/kx: Now even builds on AIX.

Sat May 4 1996

        * lib/des: Now merged in libdes 3.21 on main branch.


        * appl/ftp/ftpd/logwtmp.c: Slightly different functionality. Works
        on systems that has more fields in struct utmp such as OSF/1.
        Still some questions about Solaris.

        * lib/krb/lsb_addr_comp.c: Now byteorder independent.


        * appl/kx: Rewrote kx & kxd to share more code.  They are also now
        able to talk both ways.

        * lib/kdb/krb_dbm.c (kerb_db_rename): Now works properly when
        using berkeley DB.

Thu Apr 25 1996

        * lib/krb/get_krbrlm.c (krb_get_default_realm): New function for
        SunOS5 compat.

        * When building shared libraries link libkrb with libdes to be
        compatible with SunOS5.

        * Move lib/krb/krb_err.et to lib/kadm since it is only used there,
        no longer need to link libkrb against libcom_err.
        
Wed Apr 24 1996

        * lib/krb/lsb_addr_comp.h: Renamed ugly lsb_addr_comp.

        * Some porting to UNICOS.

Tue Apr 23 1996

        * Moved some junk from appl/bsd to libroken.
        
        * lib/roken/Makefile.in (LIBNAME): Added header file roken.h for
        library libroken.a.


        * Add kerberized ftp.

        * Add libroken.

Mon Apr 22 1996

        * appl/kauth/kauth.c: When commands are given to kauth, a new
        ticket file is used.

Sat Apr 20 1996

        * appl/xnlock/xnlock.c: Fixed a potential overwrite bug. Also
        works with more than one screen, only fancy stuff on screen 0,
        though.

Fri Apr 19 1996

        * appl/bsd/login.c, su.c, rshd.c, rlogind.c: Syslog and abort when
        getpwnam returns uid == 0 but user is not root. This is usually
        the result of an attack on NIS (former YP).

Wed Apr 17 1996

        * kadmin/ksrvutil.c (get_key_from_password): Support for
        generating AFS keys.  From <flag@it.kth.se>

Sun Apr 14 1996

        * appl/kx: New program for forwarding a X connection.

Mon Apr 8 1996

        * appl/bsd/rsh.c (get_shell_port): Default port number for ekshell
        changed from 2106 to 545.

        * appl/bsd/login.c (doremotelogin): Remove terminal speed from the
        value of $TERM in the case of an ancient rlogind being used.

Thu Apr 4 1996

        * lib/kafs/afssys.c (k_afsklog): Try to read from
        /usr/vice/etc/TheseCells for list of cells we should try to obtain
        tokens for.

        * appl/kauth/kauth.c (renew): Use cell even when renewing.
        
        * appl/kauth/kauth.c, appl/xnlock/xnlock.c: Always call k_afsklog
        with realm == NULL.


        * lib/kafs/afssys.c: More thorough guessing of what realm a cell
        belongs to.

Wed Apr 3 1996

        * appl/bsd/login.c: If setuid() failes and not logging in as root,
        exit.

Tue Apr 2 1996

        * server/kerberos.c: Set name, inst, and realm to NULL in
        APPL_REQUEST, error replies tend to look a bit funny otherwise.

Thu Mar 28 1996

        * appl/bsd/iruserok.c (iruserok): Imported iruserok() FreeBSD.

Tue Mar 26 1996

        * lib/des/Makefile.in: Removed enc_read.c enc_writ.c.
        
        * appl/bsd/Makefile.in: New file with the old functions from
        libdes.


        * appl/bsd/utmp_login.c: Fixed (hopefully) double utmp-entries in
        Solaris. Only put entries in one of utmp/utmpx, since they both
        get updated by putut*ent() anyway.

Mon Mar 25 1996

        * kuser/klist.c (main): Use verbose option (-v) to list key
        version numbers.


        * Release 0.7.

Sun Mar 24 1996

        * appl/bsd/rlogin.c (doit): Moved signal junk (as far as possible)
        to doit().


        * configure.in: Check for getmsg with AC_TRY_RUN instead.
        Otherwise it fails under AIx 3.2.  Now rlogind works on this
        so-called OS.  Also cache value of berkeley db check.


        * lib/kdb/krb_kdb_utils.c: New experimental masterkey generation,
        enabled with --enable-random-mkey. This makes kdb_init et al
        generate random master keys, based on random input from the
        user. This comes in a package with auto-kstash, and possibility to
        enter lost master keys as base64.

        Moved default master key file from /.k to
        /var/kerberos/master-key, override with --with-mkey=file.


        * kadmin/kadmin.c (do_init): Handle the `-t' option to kadmin,
        meaning do not get a new ticket file.  (From CNS).

Fri Mar 22 1996

        * appl/xnlock/xnlock.c: Removed some dead code, and a few unused
        header files.


        * kadmin/pw_check.c (kadm_pw_check): If kadm_pw_check()
        fails *pw_msg can't be 0! At the very least use the
        empty string but a descriptive error-message is preferred.

        * libtelnet: add nonbroken signal() function.

Wed Mar 20 1996

        * appl/kpopper/pop_pass.c (pop_pass): Use kuserok to determine if
        user is allowed to fetch mail.

        * appl/kpopper/*. Got rid of some ugly codes and some warnings.

        * appl/bsd/Makefile.in: signal.o was not included in OBJECTS,
        which made strange makes not doing what they should.

        * configure.in, appl/kpopper/popper.h, appl/bsd/pathnames.h: Now
        should work on systems that do not have mail spool files in
        /var/spool/mail.  Looks for MAILDIR or _PATH_MAILDIR, usually from
        <paths.h> or <maillock.h>.  Defaults to /var/spool/mail.

Mon Mar 18 1996

        * appl/bsd/bsd_locl.h: TIOCPKT for those systems missing it.

Fri Mar 15 1996

        * lib/kafs/kafs.h: Use <sys/ioctl.h> instead of <sys/ioccom.h>

        * appl/bsd/rshd.c (doit): Don't set environ, send it as an
        argument to execle instead.

        * lib/kafs/kafs.h: Find definition of _IOW.

        * configure.in: Check for random.

        * appl/bsd/bsd_locl.h: Including <crypt.h> gives too many conflicts.

        * appl/afsutil/pagsh.c: Check for random.

Thu Mar 14 1996

        * appl/bsd/bsd_locl.h, appl/telnet/telnetd/defs.h: Default values
        of `TIOCPKT_FLUSHWRITE' & c:o.

        * appl/telnet/telnet{,d}/Makefile.in (telnetd): Change order of
        linking in libraries.

        * configure.in: Check for interesting functions in libsocket and
        libnsl and not strange soriasis inventions.

Wed Mar 13 1996

        * appl/bsd/bsd_locl.h (fatal): Only use prototype or iruserok if
        the function does not exist.

Mon Mar 11 1996

        * lib/krb/krb_err_txt.c (krb_get_err_text): Changed name of
        krb_err_msg to krb_get_err_text(int) to be compatible with the CNS
        distribution. This function is used for instance by CVS-1.7.

Sun Mar 10 1996

        * configure.in, appl/Makefile.in: removed rkinit

        * etc/inetd.conf.changes, etc/services.append: Added kauth.

        * appl/kauth: Integrated rkinit into kauth.
        
        * appl/kauth/kauth.c (main): Only look for principal name if no -p
        has been given.

        * lots of files: prototypes and other small fixes.
        
        * appl/bsd/sysv_shadow.h: spwd multiple defined.

        * appl/bsd/bsd_locl.h: include <crypt.h>

        * configure.in: Added afsutil and rkinit.

        * */Makefile.in: Do cd $$i && $(MAKE).  Otherwise, if cd fails you
        end up with an infinite recursion.

        * kuser/klist.c (display_tktfile): Another warning removed.

Tue Mar 5 1996

        * appl/bsd/forkpty.c (forkpty): Kludge for Ultrix, rlogind now
        works properly also under this system.


        * appl/afsutil: New aklog and pagsh


        * lib/krb/krb_equiv.c (krb_equiv): Fix bugs with '\\'.

        * lib/des/rnd_keys.c: Include <sys/time.h>.

Mon Mar 4 1996

        * appl/kauth/kauth.c (main): Handle name when given after options.

Sun Mar 3 1996

        * appl/rkinit/rkinit.c (getalladdrs): Check for herror.  Solaris
        apparently does not have any.
        (main): Use memset instead of bzero.

        * appl/rkinit/rkinitd.c (decrypt_remote_tkt): bcopy -> memcpy.

        * kuser/kinit.c (main): Corrected lifetime.

        * lib/krb/krb_equiv.c (krb_equiv): Now handles longer lines,
        continuation lines and addresses of the form 193.10.156.0/24.


        * kuser/Makefile.in (kdestroy): Link kdestroy with libkafs.

Wed Feb 28 1996

        * Replaced all occurencies of krb_err_txt[] with new function
        krb_err_msg(), that does some sanity checks before indexing
        krb_err_txt.

Mon Feb 26 1996

        * appl/telnet/telnetd: Added flags -z to have telnetd log
        unauthenticated logins, such as when using an old telnet
        client. Unfortunately in most of these cases, the user name is not
        known.
        
        There should also be a way to tell the difference between bad
        authentication (such as with expired tickets) and no attempt to
        provide authentication (such as with an old client).

Sun Feb 25 1996

        * kuser/kdestroy.c: Remove afs-tokens as well as tickets, -t flags
        added to prevent this.

Thu Feb 22 1996

        * appl/rkinit/rkinitd.c (doit): Use k_getsockinst to make it work
        correctly for multi-homed hosts.

        * appl/rkinit: New program with rkinit functionality.

        * lib/krb/k_getport.c: Function for finding port in /etc/services
        with fallback.

        * lib/krb/netread.c,netwrite.c (krb_net_{read,write}): Now correct
        prototype with void * and size_t.

Wed Feb 21 1996

        * kadmin/new_pwd.c (get_pw_new_pwd): Moved get_pw_new_pwd to
        seperate file.  Now called both from kadmin and kpasswd.

        * kadmin/pw_check.c (kadm_pw_check): Handle the case of no
        password provided.  This is really a policy decision.  The server
        should be able to say `use a client that sends the password'.

        * appl/bsd/rlogind.c (local_domain): MAXHOSTNAMELEN -> MaxHostNameLen.

Sun Feb 18 1996

        * appl/bsd/rcp.c (answer_auth): Made rcp multihome aware.

        * appl/bsd/rlogind.c (do_krb_login): Made rlogind multihome aware.

        * appl/bsd/rshd.c (doit): Made rshd multihome aware.

        * lib/krb/k_getsockinst.c (k_getsockinst): New function to figure
        out the instance name of interfaces on multihomed hosts. Use this
        function when making daemons multihome aware.

        * appl/telnet/libtelnet/kerberos.c (kerberos4_is): Made telnetd
        multihome aware.

Mon Feb 12 1996

        * Release 0.6.

Sun Feb 11 1996

        * lots of files: hacks to make it all compile.

        * configure.in, appl/telnet/configure.in: More broken AIX.


        * appl/bsd/bsd_locl.h: Fix for old syslogs (as in Ultrix).


        * appl/telnet/libtelnet/encrypt.c: encrypt_verbose by default.


        * appl/telnet/libtelnet/kerberos.c: Show difference between
        MUTUAL and ONE_WAY KERBEROS4.

        * appl/telnet/libtelnet/encrypt.c:
        Print message about not encrypting when receiving WONT or DONT encrypt.


        * configure.in: Automatic check for HAVE_NEW_DB.


        * lib/krb/getaddrs.c (k_get_all_addrs): Fixed for systems with
        SOCKADDR_HAS_SA_LEN, aka 4.4BSD-based.

        * appl/telnet/telnetd/global.c: Removed some multiple defined
        variables.

        * appl/bsd/rlogind.c (cleanup): ifndef HAVE_VHANGUP.

        * appl/bsd/sysv_shadow.h: Add DAY and DAY_NOW ifndef.

        * configure.in: Check if `struct sockaddr' has `sa_len'.

Sat Feb 10 1996

        * appl/telnet/telnetd/telnetd.c (recv_ayt): pty -> ourpty.

        * appl/bsd/bsd_locl.h: More include-files: <sys/uio.h> and <userpw.h>

        * appl/kpopper/popper.c (catchSIGHUP): Got rid of some warnings.

        * lib/krb/log.c (new_log): Yet another year 2000.

        * appl/bsd/sysv_environ.c (read_etc_environment): Support setting
        environment variables from /etc/environment.

        * appl/bsd/bsd_locl.h: <usersec.h>

        * configure.in: check for setpcred, libs.a and <usersec.h>.

        * appl/bsd/login.c (main): setpcred is used on AIX.

        * appl/bsd/rshd.c (doit): Added setpcred for AIX.

        * lib/krb/getaddrs.c: <sys/sockio.h> is sometimes needed.

        * admin/kdb_init.c (main): Now verifies master key.

        * lib/kdb/krb_kdb_utils.c (kdb_get_master_key): Added possibility
        of asking for verfication.

        * appl/bsd/bsd_locl.h: Try to include <sys/stream.h>

        * appl/telnet/telnetd/utility.c (printsub): Mismatch arguments.

        * lib/krb/send_to_kdc.c (send_to_kdc): Send to all A records and
        accept an answer from anything we have sent to.

        * appl/kauth/kauth.c (renew): Use strange return types for strange
        OSes.
        (doexec): Remove tokens.

        * server/kerberos.c (main): Uses k_get_all_addrs and binds to each
        of these addresses.

        * kadmin/ksrvutil_get.c (ksrvutil_get): Added support for
        specifying key to create on command line to get.

Wed Feb 7 1996

        * lib/krb/log.c (k_log): Now using YYYY for years.

        * lib/krb/klog.c (klog): Preparing for the year 2000.

        * kuser/kinit.c (main): Added option -p to get changepw-tickets.

        * lib/krb/getaddrs.c: New file to get all the addresses of all the
        interfaces on this machine.

Tue Feb 6 1996

        * configure.in: Support for S/Key in login.c. Use --with-skeylib
        switch to configure. The code assumes that the skeylib.a comes
        from logdaemon.

        * General support for shadow password files if there is an
        shadow.h.

        * appl/bsd/su.c: Arrange so that it supports shadow passords.

Sun Feb 4 1996

        * appl/telnet/*: Hacks to make it work on strange OSes.

        * appl/bsd/bsd_locl.h: Check for sys/ptyvar.h

        * appl/telnet/configure.in (telnet_msg): sys/str_tty.h, sys/uio.h

        * configure.in: test for crypt.h and sys/ptyvar.h

        * appl/telnet/telnetd/*.c: pty -> ourpty.


        * telnetd: Changes to make more systems work better, specifically
        AIX 4. Hopefully this will work on both STREAM and BSD
        systems. Not tested on some systems, like CRAY and Linux.


        * util/ss/mk_cmds.c: Generating cleaner code.

        * lib/krb/krb_err_txt.c (krb_err_txt): Clarification.

        * kadmin/admin_server.c: Less varnings.

        * appl/xnlock/xnlock.c: Changed some types and added some casts.

        * appl/movemail/movemail.c: Not using syswait.h anymore.

        * appl/xnlock/xnlock.c: God rid of some warnings.

        * util/ss/*.[ch]: cleanup

        * util/et/*.[ch]: cleanup

        * appl/bsd/rcp.c: Less warnings.

        * kadmin/admin_server.c (kadm_listen): Get rid of another warning.

        * kadmin/pw_check.c (kadm_pw_check): Support for letting cracklib
        check the quality of the password.

        * kadmin/pw_check.h (kadm_pw_check): New argument to
        kadm_pw_check: list of useful strings to check for.

        * kadmin/kadm_server.c (kadm_ser_cpw): Send a few `useful' strings
        to kadm_pw_check (name, instance, and realm).

        * kadmin/Makefile.in (kadmind): Linking with -lcrack.

        * configure.in: Support for --with-cracklib and --with-dictpath.

        * kadmin/ksrvutil_get.c: Now seems to be working.

        * kadmin/ksrvutil.h: Some new parameters.

        * kadmin/ksrvutil.c: Some reorganisation and uses a working
        ksrvutil_get.

        * appl/movemail/movemail.c: Some more include-files.

        * appl/bsd/rlogind.c: Testing for the existence of vhangup.

Wed Jan 31 1996

        * configure.in: Massaged the configure files so that we can build
        under NEXTSTEP 3.3. Some kludges to prevent cpp bugs and link
        errors where also neccessary.

Tue Jan 30 1996

        * appl/xnlock/xnlock.c (main): Improved user feedback on password
        input.

        * appl/xnlock/xnlock.c: Applied patch made by flag@it.kth.se that
        enables C-u to erase the password field.

        * lib/krb/lifetime.c: configure now creates a version string which
        is referenced here. Use what and grep version to figure out where,
        when and by whom binaries where created.

        * appl/bsd/forkpty.c (ptys_open): Call revoke before pty slave is
        opened. Add revoke using vhangup for those system lacking revoke.
        Also call vhangup when rlogind exits.

Mon Jan 29 1996

        * lib/krb/send_to_kdc.c (send_to_kdc): Removed kludge for SunOS
        3.2 and Ultrix 2.2 that prevented multihomed kerberos servers to
        operate correctly.

        * kadmin/kadmin.c (change_key): Add new subcommand change_key so
        that it is possible to enter keys in the DB on binary form. Most
        usefull for sites running AFS.

Fri Jan 26 1996

        * appl/bsd/su.c (koktologin): New option -i root-instance. If you
        want a user.afs ticket in a root shell and user.afs is on root's
        ACL then do a "su -i afs".

        * Makefile.in: Rearrange the order of object files to make shared
        libraries slightly more efficient.

        * appl/kauth/kauth.c (main): Always up case realm. Better error
        messages on failed exec.

Mon Jan 22 1996

        * appl/bsd/rshd.c (main): New option -P to prevent rshd from using
        a new PAG. Expert use only!

        * appl/bsd/rlogind.c (doit): Avoid race when setting tty size.

        * appl/bsd/rlogin.c (reader): Use select rather than horrible
        signal hacks to handle OOB data.

        * appl/bsd/login.c (main) sysv_environ.c (sysv_newenv): Login does
        now honor the -p switch when invoked by root. This is used by
        telnetd to export environment variables.

Fri Jan 5 1996

        * appl/bsd/signal.c (signal): New BSD compatible signal
        function. Most r* applications assume reliable signals.


        * appl/bsd/login.c (main): Check HAVE_ULIMIT.

        * appl/bsd/bsd_locl.h: Include sys/ioctl.h.

        * configure.in: Check for ulimit.

        * admin/kdb_edit.c: Flush stdout after printing prompts.

        * appl/kpopper/pop_xmit.c: Remember to include config.h.

Tue Jan 2 1996

        * appl/bsd/login.c (main): New function stty_default to setup
        default tty settings.

Fri Dec 29 1995

        * appl/kstring2key/kstring2key.c (main): New program that converts
        passwords to DES keys, either using des_string_to_key or
        afs_string_to_key.

        * server/kerberos.c: Kerberos server now listen on 2 ports,
        kerberos/udp and kerberos-sec/udp.

Wed Dec 27 1995

        * appl/bsd/rcp.c (main): Integrated -x option to rcp. This
        required some real horrible hacks in lib/des/enc_{read,write}.c

        * acconfig.h: Enabled MULTIHOMED_KADMIN in acconfig.h.

        * Add RCSID stuff to telnet files.

Fri Dec 22 1995

        * appl/bsd/login.c (main): The login program does now by default
        read /etc/default/login, even on non Psoriasis systems. Unifdef
        SYSV4, this was essentially only for prompting.

Mon Dec 18 1995

        * appl/kpopper/popper.c (main): Integrate default timeout of 120
        seconds from Qualcomm popper. Timeout is also set able with -T
        seconds.


        * lib/kadm/kadm_cli_wrap.c (kadm_change_pw_plain): If there's no
        password, don't even send the empty string.

Thu Dec 7 1995

        * lots of files: all debug messages now printed to stderr (from
        <lama@pdc.kth.se>)

        * lib/krb/tf_util.c (tf_create): New method for creating a new
        ticket file.  Remove the old old and then open with O_CREAT and
        O_EXCL.

        * server/kerberos.c, slave/kpropd.c: Some casts to get rid of warnings.

        * configure.in: Added checks for unistd.h, memmove and const.

        * appl/telnet/telnet/commands.c: Changed types of functions to
        confirm with struct Command.

        * appl/telnet/configure.in: Check for setpgid.

        * appl/bsd/rlogin.c: Get rid of another warning.

        * appl/bsd/bsd_locl.h, appl/telnet/acconfig.h: New synonym for
        solaris.

Wed Dec 6 1995

        * (movemail): Now from emacs-19.30. If you have a newish emacs
        there is no reason to use this movemail.

        * (kadm): Added support for server side password checks. Hopefully
        this is compatible with kerberos 4.10. Old kpasswd:s will give
        funny error messages. For examples of checks, see
        kadmin/pw_check.c. Since this is mostly political matters,
        kadm_pw_check() should probably return KADM_SUCCESS by default.

Mon Nov 27 1995

        * appl/telnet/telnetd/telnetd.c (main): Kludge to fix encryption
        problem with Mac NCSA telnet 2.6.


        * lib/krb/stime.c: Now using YYYY for years.  (2000 is soon here).

        * appl/bsd/rsh.c, rcp.c, rlogin.c: Fixed fallback for port number
        (added missing ntohs).

Sun Nov 12 1995

        * (many files): More ANSI/ISO 9899-1990 to the people!  
        Now actually builds (not including util) with DEC "cc -std1" and
        Sun "acc -Xc".  There are still major prototype conflicts, but
        there isn't much to do about this.

Sat Oct 28 1995

        * lib/kadm/kadm_cli_wrap.c: Fallback for kerberos and
        kerberos_master services.

Fri Oct 27 1995

        * Released version 0.5


        * lib/des/read_pwd.c: Redifine TIOCGETP and TIOCSETP so that the
        same code is used both for posix termios and others.

        * rsh, rlogin: Add environment variable RSTAR_NO_WARN which when
        set to "yes" make warnings about "rlogin: warning, using standard
        rlogin: remote host doesn't support Kerberos." go away.

Tue Oct 24 1995

        * admin/kdb_util.c (load_db) lib/kdb/krb_dbm.c (kerb_db_update):
        Optimized so that it can handle large databases, previously a
        10000 entry DB would take *many* minutes, this can now be done in
        under a minute.

Sat Oct 21 1995

        * Changes in server/kerberos.c, kadmin/*.c slave/*.c to support 64
        bit machines. Source should now be free of 64 bit assumptions.

        * admin/copykey.c (copy_from_key): New functions for copying to
        and from keys. Neccessary to solve som problems with longs on 64
        bit machines in kdb_init, kdb_edit, kdb_util and ext_srvtab.

        * lib/kdb/krb_kdb_utils.c (kdb_verify_master_key): More problems
        with longs on 64 bit machines.

Mon Oct 16 1995

        * appl/bsd/login.c (main): Lots of stuff to support Psoriasis
        login. Courtesy of gertz@lysator.liu.se.

        * configure.in, all Makefile.in's: Support for Linux shared
        libraries. Courtesy of svedja@lysator.liu.se.

        * lib/krb/cr_err_reply.c server/kerberos.c: Moved int req_act_vno
        = KRB_PROT_VERSION; from server kode to libkrb where it really
        belongs.

        * appl/bsd/forkpty.c (forkpty): New function that allocates master
        and slave ptys in a portable way. Used by rlogind.

        * appl/telnet/telnetd/sys_term.c (start_login): Under SunOS5 the
        same utmpx slot got used by sevral sessions. Courtesy of
        gertz@lysator.liu.se.

Wed Oct 4 1995

        * util/{ss, et}/Makefile.in (LEX): Use flex or lex. Courtesy of
        svedja@lysator.liu.se.

        * Fix the above Makefiles to work around bugs in Solaris and OSF/1
        make rules that was triggered by VPATH functionality in the yacc
        and lex rules.

Mon Oct 2 1995

        * appl/kpopper/pop_log.c (pop_log) appl/kpopper/pop_msg.c (pop_msg):
        Use stdarg instead of varargs. The code is still broken though,
        you'll realize  that on a machine with 64 bit pointers and 32 bit 
        int:s and no vsprintf, let's hope there will be no such beasts ;-).

        * appl/telnet/telnetd/sys_term.c (getptyslave): Not all systems
         have (or need) modules ttcompat and pckt so don't flag it as a
         fatal error if they don't exist.

Mon Sep 25 1995

        * kadmin/admin_server.c (kadm_listen) kadmind/kadm_ser_wrap.c
        (kadm_listen): Add kludge for kadmind running on a multihomed
        server. #ifdef:ed under MULTIHOMED_KADMIN. Change in acconfig.h
        if you need this feature.

        * appl/Makefile.in (SUBDIRS): Add applications movemail kpopper
        and xnlock.

Wed Sep 20 1995

        * appl/bsd/rlogin.c (main): New rlogind.c, forkpty() is not
        implemented yet though.

Wed Sep 13 1995

        * appl/xnlock/Makefile.in: Some stubs for X11 programs in
        configure.in as well as a kerberized version of xnlock.

        * appl/bsd/{rlogin.c, rsh.c, rcp.c}: Add code to support fallback
        port numbers if they can not be found using getservbyname.

Tue Sep 12 1995

        * appl/bsd/klogin.c (klogin): Use differnet ticket files for each
        login so that a malicous user won't be able to destroy our tickets
        with a failed login attempt.

        * lib/kafs/afssys.c (k_afsklog): First we try afs.cell@REALM, if
        there is no such thing try afs@CELL instead. There is now two
        arguments to k_afslog(char *cell, char *realm).

Mon Sep 11 1995

        * kadmin/admin_server.c (kadm_listen): If we are multihomed we
        need to figure out which local address that is used this time
        since it is used in "direction" comparison.

Wed Sep 6 1995

        * kadmin/kadm_ser_wrap.c (kadm_ser_init): Fallback to use default
        port number.

        * lib/krb/send_to_kdc.c (send_to_kdc): Default port number
        (KRB_PORT) was not in network byte order.

Tue Sep 5 1995

        * lib/krb/send_to_kdc.c (send_recv): Linux clears timeout struct
        when selecting.


Mon Sep 4 1995

        * appl/bsd/rcp.c, appl/bsd/rlogin.c, appl/bsd/rsh.c:
        Now does fallback if there isn't any entries in /etc/services for
        klogin/kshell. This also made the code a bit more pretty.


        * appl/bsd/login.c: Added support for lots of more struct utmp fields.
        If there is no ttyslot() use setutent and friends.

        * appl/bsd/Makefile.in, appl/bsd/rlogind.c, appl/bsd/rshd.c:
        Added extern iruserok().

        * appl/bsd/iruserok.c: Initial revision

        * appl/bsd/bsd_locl.h: Must include sys/filio.h on Psoriasis.

        * appl/bsd/Makefile.in: New install

        * appl/bsd/pathnames.h: Fix default path, rsh and rlogin.

        * appl/bsd/rshd.c: Extend default PATH with bindir to find rcp.


        * appl/bsd/login.c (login): If there is no ttyslot use setutent
        and friends. Added support for lots of more struct utmp fields.

        * server/kerberos.c (main) lib/kafs/afssys.c appl/bsd/bsd_locl.h:
        Must include sys/filio.h on Psoriasis to find _IOW and FIO* macros.

        * appl/bsd/rlogind.c (doit): Use _PATH_DEFPATH rather than
        _PATH_DEF.

        * appl/bsd/login.c, su.c (main): Use fallback to bourne shell if
        running as root.

        * appl/bsd/su.c (main): Update usage message to reflect that '-'
        option must come after the ordinary options and before login-id.

Sat Sep 2 1995

        * appl/telnet/telnetd/telnetd.c (doit): If remote host name is to
        long to fit into utmp try to remove domain part if it does match
        our local domain.

        (main): Add new option -L /bin/login so that it is possible to 
        specify an alternate login program.

        * appl/telnet/telnet/commands.c (env_init): When exporting
        variable DISPLAY and if hostname is not the full name, try to get
        the full name from DNS.

        * appl/telnet/telnet/main.c (main): Option -k realm was broken due
        to a bogous external declaration.

Fri Sep 1 1995

        * kadmin/kadmin.c (add_new_key): Kadmin now properly sets
        lifetime, expiration date and attributes in add_new_key command.

Wed Aug 30 1995

        * appl/bsd/su.c (main): Don't handle '-' option with getopt.

        * appl/telnet/telnet/externs.h: Removed protection for multiple
        inclusions of termio(s).h since it broke definition of termio
        macro on POSIX systems.

Tue Aug 29 1995

        * lib/krb/lifetime.c (krb_life_to_time): If you want to disable
        AFS compatible long lifetimes set krb_no_long_lifetimes = 1.
        
        Please note that the long lifetimes are 100% compatible up to
        10h so this should rarely be necessary.

        * lib/krb/krb_equiv.c (krb_equiv): If you don't want to use
        ipaddress protection of tickets set krb_ignore_ip_address. This
        makes it possible for an intruder to steal a ticket and then use
        it from som other machine anywhere on the net.

Mon Aug 28 1995

        * kadmin/kadm_ser_wrap.c (kadm_ser_init): Don't bind to only one
        local address. Accept request on all interfaces.

        * admin/kdb_edit.c (change_principal): Don't accept illegal
        dates. Courtesy of gertz@lysator.liu.se.

Sat Aug 26 1995

        * configure.in: AIX specific libraries needed when using standard
        libc routine getttyent, IBM should be ashamed!

        * lib/krb/recvauth.c (krb_recvauth): Long that should be int32_t
        problem.

        * Added strdup for su and rlogin.

        * Fix for old syslog macros in appl/bsd/bsd_locl.

Fri Aug 25 1995

        * lib/kdb/krb_dbm.c (kerb_db_rename) admin/kdb_destroy.c: New
        ifdef HAVE_NEW_DB for new databases residing in one file only.

        * appl/bsd/rlogin.c (oob): Add workaround for Linux.

Mon Aug 21 1995

        * appl/bsd/getpass.c: New routine that reads up to 127 char
        passwords. Used in su.c and login.c.

Tue Aug 15 1995

        * appl/telnet/telnetd/sys_term.c (login_tty): Ioctl TIOCSCTTY
        should not be used on HP-UX.

Mon Aug 14 1995

        * appl/bsd/rlogin.c (main): Added dummy rlogind that tells user to
        rather use telnet.

Thu Aug 10 1995

        * lib/krb/ krb.h, decomp_ticket.c, getrealm.c, get_krbhst.c,
        get_krbrlm.c, get_admhst.c: 

        Use multiple configuration directories for krb.conf and
        krb.realms, KRB_CONF and KRB_REALM_TRANS macros substituted with
        KRB_CNF_FILES and KRB_RLM_FILES. Currently /etc and
        /etc/kerberosIV are searched. Directory specified by envioronment
        variable KRBCONFDIR is searched first if set. No hardcoded
        realmname or kerberos server. Instead use domainname for deafult
        realm and kerberos.domain as kerberos server if they are not
        listed in krb.conf and/or krb.realms. In the normal case there
        should be no need for configuration files if administrators add a
        CNAME pointing to the kerberos server.

        * appl/bsd/Makefile.in and friends: GNU make should no longer be
        neccessary unless building with VPATH.

Wed Aug 9 1995

        * appl/bsd/klogin.c (klogin): Old ticket file need to be removed
        before we call krb_get_pw_in_tkt or we might get a Kerberos intkt
        error because the wrong user owns the file.

Tue Aug 8 1995

        * configure.in : Telnet.beta2 is now official and has been moved
        to appl/telnet.

        * appl/bsd/su.c (main): Reenable -K flag, won't work if not
        PASSWD_FALLBACK is enabled. Cosmetics for Password prompt.

Fri Aug 4 1995

        * appl/bsd/su.c (kerberos): Don't allow su from possibly bogous
        kerberos server. Controlled by #ifdef KLOGIN_PARANOID.

        * lib/kafs/afssys.c (SIGSYS_handler): Need to reinstall handler on
        SYSV.

Mon Jul 24 1995

        * lib/kafs/afssys.c (k_afsklog): Use default realm on null argument.

        * appl/bsd/rlogin.c, login.c: New programs.

Fri Jul 21 1995

        * appl/bsd/kcmd.c rsh.c rlogin.c: Use POSIX signals.

        * appl/telnet.95.05.31.NE/telnetd/sys_term.c, telnetd.c: Port to
        IRIX.

Tue Jul 11 1995

        * admin/kdb_init.c (main): Use new random generator.  Dito in
        admin/kdb_edit.c. Use master key to initialize random sequence.

Mon Jul 10 1995

        * kadmin/kadmin.c (get_password): Fix for random passwords.
        Dito for admin/kdb_edit.c

        * appl/kauth/kauth.c (main): Updated for krb distribution, now
        uses new library libkafs.

        * appl/telnet.beta/telnet/main.c (main): New telnet with
        encryption hacks from ftp.funet.fi:/pub/unix/security/esrasrc-1.0.
        Encryption does not currently work though.

Tue Jun 20 1995

        * New library to support AFS. Routines:

          int k_hasafs(void);
          int k_afsklog(...);
          int k_setpag(void);
          int k_unlog(void);
          int k_pioctl(char *, int, struct ViceIoctl *, int);

          Modified it to support more than one single entry point AFS
          syscalls (needed by HPUX and OSF/1 when running DFS). Don't rely
          on transarc headers or library code.

          This has not been tested and will most probably need some
          serious violence to get working under AIX. (AIX has since been
          fixed to. /bg)

Fri Jun 16 1995

        * lib/krb/krb_equiv.c (krb_equiv): Compare IP adresses using
        krb_equiv() to allow for hosts with more than one address in files
        rd_priv.c rd_req.c and rd_safe.c.

        * slave/kpropd.c (main): Fix uninitialized variables and rewind
        file in kprop.c.

Thu Jun 15 1995

        * appl/bsd/rcp.c (allocbuf): Fix various bugs.

        * slave/kpropd.c (main): Responder uses
        KPROP_SERVICE_NAME.`hostname' and requestor always uses
        KPROP_SERVICE_NAME.KRB_MASTER, i.e rcmd.kerberos in kprop/kpropd
        protocol.

Wed Jun 14 1995

        * appl/bsd/rshd.c (doit): Encryption should now work both ways.

Tue Jun 13 1995

        * appl/bsd/pathnames.h: Fixup paths.

        * server/Makefile.in and friends (install): Install daemons in in
        libexec and administrator programs in sbin.


        * Makefile.in: Joda (d91-jda) added install target

Wed Jun 7 1995

        * lib/krb/k_strerror.c: New function k_strerror() to use instead
        of the non portable sys_errlist[].