1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
|
============================
Cyrus SASL 1.x Release Notes
============================
New in 1.5.26
-------------
* Interoperability bug in DIGEST-MD5's layers was fixed.
* DIGEST-MD5's DES layer has been disabled until the interoperability
can be worked out.
New in 1.5.25
-------------
* The DIGEST-MD5 plugin now includes an implementation of RC4, since
it's a lot easier to get working than interfacing with OpenSSL.
* A delayed-open plugin mode has been implemented, but not yet documented.
New in 1.5.24
-------------
* be a little paranoid about what we give PAM
* small bugfixes
New in 1.5.22
-------------
* fixed some DIGEST-MD5 buglets
* fixed serious bug that a client could avoid the authorization callback
* added pwcheck method "sia" for Digital Unix
* now should try libdb-3 before libdb.
New in 1.5.21
-------------
* build process fixes
New in 1.5.20
-------------
* bug fixes
* LOGIN mechanism has a compatibility tweak
New in 1.5.19
-------------
* Initial srp work
* Programmers Guide more complete
* bug fixes (of course)
New in 1.5.18
-------------
* javasasl library in conformance with internet draft
* man pages for all functions written
* bug fixes (of course)
New in 1.5.17
-------------
* give application authentication name and realm more uniformly
* sasldblistusers utility to list users in sasldb
* memory leaks eliminated; boundary cases tested
New in 1.5.16
-------------
* pwcheck_method now defaults to sasldb.
READ UPGRADE INSTRUCTIONS IN README
* sanity checking inputs throughout the code.
* Unsupported LOGIN plugin added to the Windows build.
* calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the
old ticket file before returning.
New in 1.5.15
-------------
* configure now correctly detects Berkeley DB 3.x (Claus Assmann).
New in 1.5.14
-------------
* Upgraded to libtool 1.3.4.
* External SSF handled more uniformly, and handle min/max SSF requests
correctly.
* Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>.
Please don't enable it unless you know you need it.
* HP/UX support, contributed by Claus Assmann.
New in 1.5.13
-------------
* Sanity check to make sure there's at least something in sasldb
READ UPGRADE INSTRUCTIONS IN README
* Fixes to how external layers are handled (some fixes by Alexey Melnikov)
* Berkeley DB 3.x support contributed by Greg Shapiro
* Additional pwcheck fixes (Joe Hohertz)
* Fixed Heimdal krb5 configure checks
* other random fixes
New in 1.5.12
-------------
* lots of bugfixes
* DIGEST-MD5 more in conformance with spec
* support for Berkeley DB
* support for OpenSSL's version of RC4
New in 1.5.11
-------------
* bugfix in realm support for DIGEST-MD5
New in 1.5.10
-------------
* DIGEST-MD5 layer support
* dbconversion utility added
New in 1.5.9
------------
* Bug fixes
* More win32 support
* Realm support in the database (database format changed again, sorry)
Other realm support in plugins; need to document it
* Preliminary code for pwcheck added; not yet tested (and probably not
working)
* config stuff should be less case/whitespace sensitive
* more error conditions logged
New in 1.5.5
------------
* Bug fixes
* sasldb plaintext support (database format changed!!!)
* Handles multiple realms in DIGEST
* New Windows compatibility (tested!)
New in 1.5.3
------------
* Bug fixes
* Tested GSSAPI & added layers
* Some changes for Windows compatibility (next release)
New in 1.5.2
------------
* A few bug fixes
* Better portability
* Upgraded libtool
New in 1.5.0
------------
* Lots of bug fixes
* A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!)
* Digest authentication works
* Configuration file
* Some more documentation (doc/programming)
* Code cleanup
New in 1.4.1
------------
* Tested kerberos4, cram, plain, and anonymous fairly extensively
* Many bugs fixed
* Created sample programs
* Added digest
* Prototype credential API
New in 1.3b1
------------
* Added saslpasswd for setting sasl passwords
* Added sfsasl for people using sfio
* Lots of bug fixes
New in 1.2b3
------------
* Slightly better documentation, easier compilation
* Plain now understands authorization and callbacks
New in 1.2b2
------------
* Win32 support
* Fixes to anonymous, kerberos mechs
* Some signed lengths in the API changed to unsigned
New in 1.2b1
------------
* Lots of bug fixes
* GSSAPI
* Cleaner getopt interface
* Cleaner plugin callback lookup interface
* Global inits now take callback list, not just a sasl_getopt_t
* Preliminary Java support
* Authentication database hook
* Default AuthDB routines moved from mechanisms to library
* Logging hook
* Default syslog-based logging hook in library
* Preliminary plaintext transition for CRAM/SCRAM
|
