Home | History | Annotate | Line # | Download | only in kadm5
      1 2008-04-23  Love Hrnquist strand  <lha (a] it.su.se>
      2 
      3 	* ipropd_master.c: Only log "sending AYT" once, pointed out by Dr
      4 	A V Le Blanc.
      5 	
      6 
      7 2008-01-21  Love Hrnquist strand  <lha (a] it.su.se>
      8 
      9 	* default_keys.c: Use hdb_free_keys().
     10 
     11 2008-01-11  Love Hrnquist strand  <lha (a] it.su.se>
     12 
     13 	* Makefile.am: add check-cracklib.pl, flush.c,
     14 	sample_passwd_check.c
     15 
     16 2007-12-07  Love Hrnquist strand  <lha (a] it.su.se>
     17 
     18 	* use hdb_db_dir() and hdb_default_db()
     19 
     20 2007-10-18  Love  <lha (a] stacken.kth.se>
     21 
     22 	* init_c.c: We are getting default_client, not client. this way
     23 	the user can override the result.
     24 	
     25 2007-09-29  Love Hrnquist strand  <lha (a] it.su.se>
     26 
     27 	* iprop.8: fix spelling, From Antoine Jacoutt.
     28 
     29 2007-08-16  Love Hrnquist strand  <lha (a] it.su.se>
     30 
     31 	* version-script.map: export _kadm5_unmarshal_params,
     32 	_kadm5_acl_check_permission
     33 
     34 	* version-script.map: export kadm5_log_ symbols.
     35 
     36 	* log.c: Unexport the specific log replay operations.
     37 	
     38 2007-08-10  Love Hrnquist strand  <lha (a] it.su.se>
     39 
     40 	* Makefile.am: build sample_passwd_check.la as part of noinst.
     41 
     42 	* sample_passwd_check.c: Add missing prototype for check_length().
     43 
     44 2007-08-07  Love Hrnquist strand  <lha (a] it.su.se>
     45 
     46 	* log.c: Sprinkle krb5_set_error_string().
     47 
     48 	* ipropd_slave.c: Provide better error why kadm5_log_replay
     49 	failed.
     50 
     51 2007-08-06  Love Hrnquist strand  <lha (a] it.su.se>
     52 
     53 	* ipropd_master.c: - don't push whole database to the new client
     54 	every time.  - make slaves get the whole new database if they have
     55 	a newer log the the master (and thus have them go back in time).
     56 
     57 2007-08-03  Love Hrnquist strand  <lha (a] it.su.se>
     58 
     59 	* ipropd_slave.c: make more sane.
     60 
     61 	* ipropd_slave.c: more paranoid check that the log entires are
     62 	self consistant
     63 
     64 	* log.c (kadm5_log_foreach): check that the postamble contains the
     65 	right data.
     66 
     67 	* ipropd_master.c: Sprinkle more info about what versions the
     68 	master thinks about the client versions.
     69 
     70 	* ipropd_master.c: Start the server at the current version, not 0.
     71 
     72 2007-08-02  Love Hrnquist strand  <lha (a] it.su.se>
     73 
     74 	* ipropd_master.c: Add more logging, to figure out what is
     75 	happening in the master.
     76 
     77 2007-08-01  Love Hrnquist strand  <lha (a] it.su.se>
     78 
     79 	* Makefile.am: add version-script for libkadm5srv.la
     80 
     81 	* version-script.map: version script fro kadm5 server libary.
     82 
     83 	* log.c: only free the orignal entries extentions if there was
     84 	any.  Bug reported by Peter Meinecke.
     85 
     86 	* add configuration for signal file and acl file, let user select
     87 	hostname, catch signals and print why we are quiting, make nop
     88 	cause one new version, not two
     89 
     90 2007-07-30  Love Hrnquist strand  <lha (a] it.su.se>
     91 
     92 	* ipropd_master.c (send_diffs): make current slave's version
     93 	uptodate when diff have been sent.
     94 	
     95 2007-07-27  Love Hrnquist strand  <lha (a] it.su.se>
     96 
     97 	* ipropd_slave.c: More comments and some more error checking.
     98 	
     99 2007-07-26  Love Hrnquist strand  <lha (a] it.su.se>
    100 
    101 	* init_c.c (get_cache_principal): make sure id is reset if we
    102 	fail. From Benjamin Bennet.
    103 
    104 2007-07-10  Love Hrnquist strand  <lha (a] it.su.se>
    105 
    106 	* context_s.c (find_db_spec): match realm-less as the default
    107 	realm.
    108 
    109 	* Makefile.am: New library version.
    110 
    111 2007-07-05  Love Hrnquist strand  <lha (a] it.su.se>
    112 
    113 	* context_s.c: Use hdb_get_dbinfo to pick up configuration.
    114 	ctx->config.realm can be NULL, check for that, from Bjorn S.
    115 	
    116 2007-07-04  Love Hrnquist strand  <lha (a] it.su.se>
    117 
    118 	* init_c.c: Try harder to use the right principal.
    119 
    120 2007-06-20  Love Hrnquist strand  <lha (a] it.su.se>
    121 
    122 	* ipropd_slave.c: Catch return value from krb5_program_setup. From
    123 	Steven Luo.
    124 	
    125 2007-05-08  Love Hrnquist strand  <lha (a] it.su.se>
    126 
    127 	* delete_s.c: Write log entry after store is successful, rename
    128 	out goto statments.
    129 
    130 	* randkey_s.c: Write log entry after store is successful.
    131 
    132 	* modify_s.c: Write log entry after store is successful.
    133 
    134 	* rename_s.c: indent.
    135 
    136 	* chpass_s.c: Write log entry after store is successful.
    137 
    138 	* create_s.c: Write log entry after store is successful.
    139 	
    140 2007-05-07  Love Hrnquist strand  <lha (a] it.su.se>
    141 	
    142 	* iprop-commands.in: Add default values to make this working
    143 	again.
    144 
    145 	* iprop-log.c (iprop_replay): create the database with more
    146 	liberal mode.
    147 
    148 	* log.c: make it slightly more working.
    149 
    150 	* iprop-log.8: Document last-version.
    151 
    152 	* iprop-log.c: (last_version): print last version of the log.
    153 	
    154 	* iprop-commands.in: new command last-version: print last version
    155 	of the log.
    156 
    157 	* log.c (kadm5_log_previous): document assumptions and make less
    158 	broken.  Bug report from Ronny Blomme.
    159 	
    160 2007-02-17  Love Hrnquist strand  <lha (a] it.su.se>
    161 
    162 	* admin.h: add support to get aliases
    163 
    164 	* get_s.c: add support to get aliases
    165 
    166 2007-02-11  David Love  <fx (a] gnu.org>
    167 
    168 	* iprop-log.8: Small fixes, from David Love.
    169 	
    170 2006-12-15  Love Hrnquist strand  <lha (a] it.su.se>
    171 
    172 	* init_c.c: if the user have a kadmin/admin initial ticket, don't
    173 	ask for password, just use the credential instead.
    174 	
    175 2006-12-06  Love Hrnquist strand  <lha (a] it.su.se>
    176 	
    177 	* ipropd_master.c: Use strcspn to remove \n from string returned
    178 	by fgets.  From Bjrn Sandell
    179 	
    180 2006-11-30  Love Hrnquist strand  <lha (a] it.su.se>
    181 
    182 	* init_c.c (kadm_connect): clear error string before trying to
    183 	print a errno, this way we don't pick up a random failure code
    184 	
    185 2006-11-20  Love Hrnquist strand  <lha (a] it.su.se>
    186 
    187 	* ipropd_slave.c: Make krb5_get_init_creds_opt_free take a context
    188 	argument.
    189 
    190 	* init_c.c: Make krb5_get_init_creds_opt_free take a context
    191 	argument.
    192 	
    193 2006-10-22  Love Hrnquist strand  <lha (a] it.su.se>
    194 	
    195 	* ent_setup.c: Try to not leak memory.
    196 	
    197 2006-10-07  Love Hrnquist strand  <lha (a] it.su.se>
    198 	
    199 	* Makefile.am: split build files into dist_ and noinst_ SOURCES
    200 	
    201 2006-08-24  Love Hrnquist strand  <lha (a] it.su.se>
    202 
    203 	* get_s.c: Add KRB5_KDB_ALLOW_DIGEST
    204 
    205 	* ent_setup.c: Add KRB5_KDB_ALLOW_DIGEST
    206 
    207 	* admin.h: Add KRB5_KDB_ALLOW_DIGEST
    208 	
    209 2006-06-16  Love Hrnquist strand  <lha (a] it.su.se>
    210 
    211 	* check-cracklib.pl: Add password reuse checking. From Harald
    212 	Barth.
    213 	
    214 2006-06-14  Love Hrnquist strand  <lha (a] it.su.se>
    215 	
    216 	* ent_setup.c (attr_to_flags): Add KRB5_KDB_ALLOW_KERBEROS4
    217 
    218 	* get_s.c (kadm5_s_get_principal): Add KRB5_KDB_ALLOW_KERBEROS4
    219 
    220 	* admin.h: Add KRB5_KDB_ALLOW_KERBEROS4
    221 	
    222 2006-06-06  Love Hrnquist strand  <lha (a] it.su.se>
    223 
    224 	* ent_setup.c (attr_to_flags): Add KRB5_KDB_TRUSTED_FOR_DELEGATION
    225 
    226 2006-05-30  Love Hrnquist strand  <lha (a] it.su.se>
    227 
    228 	* password_quality.c (kadm5_check_password_quality): set error
    229 	message in context.
    230 	
    231 2006-05-13  Love Hrnquist strand  <lha (a] it.su.se>
    232 
    233 	* iprop-log.c: Avoid shadowing.
    234 
    235 	* rename_s.c: Avoid shadowing.
    236 
    237 2006-05-08  Love Hrnquist strand  <lha (a] it.su.se>
    238 
    239 	* privs_c.c (kadm5_c_get_privs): privs is a uint32_t, let copy it
    240 	that way.
    241 	
    242 2006-05-05  Love Hrnquist strand  <lha (a] it.su.se>
    243 
    244 	* Rename u_intXX_t to uintXX_t
    245 
    246 2006-04-27  Love Hrnquist strand  <lha (a] it.su.se>
    247 
    248 	* chpass_s.c,delete_s.c,get_s.c,log.c,modify_s.c,randkey_s.c,rename_s.c:
    249 	Pass in HDB_F_GET_ANY to all ->hdb fetch to hint what entries we are looking for
    250 
    251 	* send_recv.c: set and clear error string
    252 
    253 	* rename_s.c: Break out the that we request from principal from
    254 	the entry and pass it in as a separate argument.
    255 
    256 	* randkey_s.c: Break out the that we request from principal from
    257 	the entry and pass it in as a separate argument.
    258 
    259 	* modify_s.c: Break out the that we request from principal from
    260 	the entry and pass it in as a separate argument.
    261 
    262 	* log.c: Break out the that we request from principal from the
    263 	entry and pass it in as a separate argument.
    264 
    265 	* get_s.c: Break out the that we request from principal from the
    266 	entry and pass it in as a separate argument.
    267 
    268 	* delete_s.c: Break out the that we request from principal from
    269 	the entry and pass it in as a separate argument.
    270 
    271 	* chpass_s.c: Break out the that we request from principal from
    272 	the entry and pass it in as a separate argument.
    273 	
    274 2006-04-25  Love Hrnquist strand  <lha (a] it.su.se>
    275 
    276 	* create_s.c (create_principal*): If client doesn't send kvno,
    277 	make sure to set it to 1.
    278 	
    279 2006-04-10  Love Hrnquist strand  <lha (a] it.su.se>
    280 
    281 	* log.c: (kadm5_log_rename): handle errors better
    282 	Fixes Coverity, NetBSD CID#628
    283 
    284 	* log.c (kadm5_log_delete): add error handling Coverity, NetBSD
    285 	CID#626
    286 	(kadm5_log_modify): add error handling Coverity, NetBSD CID#627
    287 
    288 	* init_c.c (_kadm5_c_get_cred_cache): handle ccache case better in
    289 	case no client name was passed in. Coverity, NetBSD CID#919
    290 	
    291 	* init_c.c (_kadm5_c_get_cred_cache): Free client principal in
    292 	case of error. Coverity NetBSD CID#1908
    293 	
    294 2006-02-02  Love Hrnquist strand  <lha (a] it.su.se>
    295 	
    296 	* kadm5_err.et: (PASS_REUSE): Spelling, 
    297 	from Vclav H?la <ax (a] natur.cuni.cz>
    298 	
    299 2006-01-25  Love Hrnquist strand  <lha (a] it.su.se>
    300 
    301 	* send_recv.c: Clear error-string when introducing new errors.
    302 
    303 	* *_c.c: Clear error-string when introducing new errors.
    304 	
    305 2006-01-15  Love Hrnquist strand  <lha (a] it.su.se>
    306 
    307 	* Makefile.am (libkadm5clnt.la) doesn't depend on libhdb, remove
    308 	dependency
    309 	
    310 2005-12-13  Love Hrnquist strand  <lha (a] it.su.se>
    311 
    312 	* memset hdb_entry_ex before use
    313 	
    314 2005-12-12  Love Hrnquist strand  <lha (a] it.su.se>
    315 	
    316 	* Wrap hdb_entry with hdb_entry_ex, patch originally 
    317 	from Andrew Bartlet
    318 
    319 2005-11-30  Love Hrnquist strand  <lha (a] it.su.se>
    320 
    321 	* context_s.c (set_field): try another way to calculate the path
    322 	to the database/logfile/signal-socket
    323 
    324 	* log.c (kadm5_log_init): set error string on failures
    325 	
    326 2005-09-08  Love Hrnquist strand  <lha (a] it.su.se>
    327 
    328 	* Constify password.
    329 
    330 	* admin.h: Add KRB5_TL_PKINIT_ACL.
    331 	
    332 	* marshall.c (_kadm5_unmarshal_params): avoid signed-ness warnings
    333 	
    334 	* get_s.c (kadm5_s_get_principal): clear error string
    335 	
    336 2005-08-25  Love Hrnquist strand  <lha (a] it.su.se>
    337 
    338 	* iprop-log.8: More text about iprop-log.
    339 	
    340 2005-08-24  Love Hrnquist strand  <lha (a] it.su.se>
    341 
    342 	* iprop.8: SEE ALSO iprop-log.
    343 
    344 	* Makefile.am: man_MANS += iprop-log.8
    345 
    346 	* iprop-log.8: Basic for documentation of iprop-log.
    347 	
    348 	* remove replay_log.c, dump_log.c, and truncate_log.c, folded into
    349 	iprop-log.
    350 
    351 	* log.c (kadm5_log_foreach): add a context variable and pass it
    352 	down to `func.
    353 
    354 	* iprop-commands.in: Move truncate_log and replay_log into
    355 	iprop-log.
    356 
    357 	* iprop-log.c: Move truncate_log and replay_log into iprop-log.
    358 	
    359 	* Makefile.am: Move truncate_log and replay_log into iprop-log.
    360 	
    361 	* Makefile.am: Make this work with a clean directory.
    362 
    363 	* ipropd_master.c: Make compile.
    364 
    365 	* ipropd_master.c: Update to new signature of kadm5_log_previous.
    366 
    367 	* log.c (kadm5_log_previous): catch errors instead of asserting
    368 	and set error string.
    369 
    370 	* iprop-commands.in: New program iprop-log that incorperates
    371 	dump_log as a subcommand, truncate_log and replay_log soon to come
    372 	after.
    373 	
    374 	* iprop-log.c: New program iprop-log that incorperates dump_log as
    375 	a subcommand, truncate_log and replay_log soon to come after.
    376 
    377 	* Makefile.am: New program iprop-log that incorperates dump_log as
    378 	a subcommand, truncate_log and replay_log soon to come after.
    379 	
    380 2005-08-11 Love Hrnquist strand  <lha (a] it.su.se>
    381 
    382 	* get_s.c: Implement KADM5_LAST_PWD_CHANGE.
    383 	
    384 	* set_keys.c: Set and clear password where appropriate.
    385 
    386 	* randkey_s.c: Operation modifies tl_data.
    387 
    388 	* log.c (kadm5_log_replay_modify): Check return values of
    389 	malloc(), replace all extensions.
    390 
    391 	* kadm5_err.et: Make BAD_TL_TYPE error more helpful.
    392 
    393 	* get_s.c: Expose KADM5_TL_DATA options to the client.
    394 
    395 	* ent_setup.c: Merge in KADM5_TL_DATA in the database.
    396 
    397 	* chpass_s.c: Operations modify extensions, mark that with
    398 	TL_DATA.
    399 
    400 	* admin.h: Add more TL types (password and extension).
    401 
    402 2005-06-17  Love Hrnquist strand  <lha (a] it.su.se>
    403 
    404 	* constify
    405 
    406 	* ipropd_slave.c: avoid shadowing
    407 
    408 	* ipropd_master.c: rename local variable slave to s, optind ->
    409 	optidx
    410 
    411 	* get_princs_c.c: rename variable exp to expression
    412 	
    413 	* ad.c: rename variable exp to expression
    414 
    415 	* log.c: rename shadowing len to num
    416 	
    417 	* get_princs_s.c: rename variable exp to expression
    418 
    419 	* context_s.c: const poison
    420 
    421 	* common_glue.c: rename variable exp to expression
    422 
    423 2005-05-30  Love Hrnquist strand  <lha (a] it.su.se>
    424 
    425 	* ent_setup.c (attr_to_flags): check for KRB5_KDB_OK_AS_DELEGATE
    426 	
    427 	* get_s.c (kadm5_s_get_principal): set KRB5_KDB_OK_AS_DELEGATE
    428 
    429 	* admin.h: add KRB5_KDB_OK_AS_DELEGATE, sync KRB5_TL_ flags
    430 
    431 2005-05-25  Love Hrnquist strand  <lha (a] it.su.se>
    432 
    433 	* kadm5_pwcheck.3: please mdoclint
    434 
    435 2005-05-25  Dave Love  <fx (a] gnu.org>
    436 
    437 	* kadm5_pwcheck.3: document kadm5_add_passwd_quality_verifier,
    438 	improve text
    439 
    440 2005-05-24  Dave Love  <fx (a] gnu.org>
    441 
    442 	* iprop.8: Added some info about defaults, fixed some markup.
    443 	
    444 2005-05-23  Dave Love  <fx (a] gnu.org>
    445 
    446 	* ipropd_slave.c: Don't test HAVE_DAEMON since roken supplies it.
    447 
    448 	* ipropd_master.c: Don't test HAVE_DAEMON since roken supplies it.
    449 
    450 2005-05-13  Love Hrnquist strand  <lha (a] it.su.se>
    451 
    452 	* init_c.c (_kadm5_c_init_context): fix memory leak in case of
    453 	failure
    454 
    455 2005-05-09  Dave Love  <fx (a] gnu.org>
    456 
    457 	* password_quality.c (find_func): Fix off-by-one and logic error.
    458 	(external_passwd_quality): Improve messages.
    459 
    460 	* test_pw_quality.c (main): Call kadm5_setup_passwd_quality_check
    461 	and kadm5_add_passwd_quality_verifier.
    462 
    463 2005-04-30  Love Hrnquist strand  <lha (a] it.su.se>
    464 
    465 	* default_keys.c: #include <err.h>, only print salt it its longer
    466 	then 0, use krb5_err instead of errx where appropriate
    467 	
    468 2005-04-25  Love Hrnquist strand  <lha (a] it.su.se>
    469 
    470 	* ipropd_slave.c: add the documented option --port
    471 
    472 	* ipropd_master.c: add the documented option --port
    473 	
    474 	* dump_log.c: use the newly generated units function
    475 
    476 2005-04-24  Love Hrnquist strand  <lha (a] it.su.se>
    477 
    478 	* dump_log.c: use strlcpy
    479 	
    480 	* password_quality.c: don't use sizeof(pointer)
    481 	
    482 2005-04-15  Love Hrnquist strand  <lha (a] it.su.se>
    483 
    484 	* check-cracklib.pl: external password verifier sample
    485 
    486 	* password_quality.c (kadm5_add_passwd_quality_verifier): if NULL
    487 	is passed in, load defaults
    488 
    489 2005-04-14  Love Hrnquist strand  <lha (a] it.su.se>
    490 
    491 	* password_quality.c: add an end tag to the external password
    492 	quality check protocol
    493 
    494 2005-04-13  Love Hrnquist strand  <lha (a] it.su.se>
    495 
    496 	* password_quality.c: add external passsword quality check builtin
    497 	module
    498 	
    499 	[password_quality]
    500 		policies = external-check
    501 		external-program = /bin/false
    502 	
    503 	To approve password a, make the test program return APPROVED on
    504 	stderr and fail with exit code 0.
    505 	
    506 2004-10-12  Love Hrnquist strand  <lha (a] it.su.se>
    507 
    508 	* Makefile.am: bump version to 7:7:0 and 6:5:2
    509 	
    510 	* default_keys.c (parse_file): use hdb_generate_key_set
    511 	
    512 	* keys.c,set_keys.c: Move keyset parsing and password based keyset
    513 	generation into hdb.  Requested by Andrew Bartlett <abartlet (a] samba.org>
    514 	for hdb-ldb backend.
    515 	
    516 2004-09-23  Johan Danielsson  <joda (a] pdc.kth.se>
    517 
    518 	* ipropd_master.c: add help strings to some options
    519 	
    520 2004-09-12  Love Hrnquist strand  <lha (a] it.su.se>
    521 
    522 	* chpass_s.c: deal with changed prototype for _kadm5_free_keys
    523 	
    524 	* keys.c (_kadm5_free_keys): change prototype, make it use
    525 	krb5_context instead of a kadm5_server_context
    526 	
    527 	* set_keys.c (parse_key_set): do way with static returning
    528 	(function) static variable and returned allocated memory
    529 	(_kadm5_generate_key_set): free enctypes returned by parse_key_set
    530 
    531 2004-09-06  Love Hrnquist strand  <lha (a] it.su.se>
    532 
    533 	* set_keys.c: Fix memory leak, don't return stack variables From
    534 	Andrew Bartlett
    535 	
    536 	* set_keys.c: make all_etypes const and move outside function to
    537 	avoid returning data on stack
    538 	
    539 2004-08-26  Love Hrnquist strand  <lha (a] it.su.se>
    540 
    541 	* acl.c (fetch_acl): use " \t\n" instead of just "\n" for the
    542 	delim of the third element, this is so we can match
    543 	"foo@REALM<SPC>all<SPC><SPC>*@REALM", before it just matched
    544 	"foo@REALM<SPC>all<SPC>*@REALM", but that is kind of lucky since
    545 	what really happen was that the last <SPC> was stamped out, and
    546 	the it never strtok_r never needed to parse over it.
    547 	
    548 2004-08-25  Love Hrnquist strand  <lha (a] it.su.se>
    549 
    550 	* set_keys.c (_kadm5_generate_key_set): since arcfour-hmac-md5 is
    551 	without salting, some people tries to add the string
    552 	"arcfour-hmac-md5" when they really should have used
    553 	"arcfour-hmac-md5:pw-salt", help them and add glue for that
    554 	
    555 2004-08-18  Johan Danielsson  <joda (a] pdc.kth.se>
    556 
    557 	* ipropd_slave.c: add --detach
    558 
    559 2004-07-06  Love Hrnquist strand  <lha (a] it.su.se>
    560 
    561 	* ad.c: use new tsasl interface remove debug printf add upn to
    562 	computer-accounts
    563 	
    564 2004-06-28  Love Hrnquist strand  <lha (a] it.su.se>
    565 
    566 	* ad.c: implement kadm5_ad_init_with_password_ctx set more error
    567 	strings
    568 	
    569 2004-06-21  Love Hrnquist strand  <lha (a] it.su.se>
    570 
    571 	* Makefile.am: man_MANS = kadm5_pwcheck.3
    572 	
    573 	* kadm5_pwcheck.3: document new password quality api
    574 	
    575 	* password_quality.c: new password check interface (old still
    576 	supported)
    577 	
    578 	* kadm5-pwcheck.h: new password check interface
    579 	
    580 2004-06-08  Love Hrnquist strand  <lha (a] it.su.se>
    581 
    582 	* ipropd_master.c (main): process all slaves, not just up to the
    583 	last slave sending data
    584 	(bug report from Bjrn Sandell <biorn (a] dce.chalmers.se>)
    585 	(*): only send one ARE_YOU_THERE
    586 
    587 2004-06-02  Love Hrnquist strand  <lha (a] it.su.se>
    588 
    589 	* ad.c: use krb5_set_password_using_ccache
    590 	
    591 2004-06-01  Love Hrnquist strand  <lha (a] it.su.se>
    592 
    593 	* ad.c: try handle spn's better
    594 	
    595 2004-05-31  Love Hrnquist strand  <lha (a] it.su.se>
    596 
    597 	* ad.c: add expiration time
    598 	
    599 	* ad.c: add modify operations
    600 	
    601 	* ad.c: handle create and delete
    602 	
    603 2004-05-27  Love Hrnquist strand  <lha (a] it.su.se>
    604 
    605 	* ad.c: more code for get, handle attributes
    606 	
    607 	* ad.c: more code for get, handle time stamps and bad password
    608 	counter
    609 
    610 	* ad.c: more code for get, only fetches kvno for now
    611 	
    612 2004-05-26  Love Hrnquist strand  <lha (a] it.su.se>
    613 
    614 	* ad.c: add support for tsasl
    615 	
    616 	* private.h: add kadm5_ad_context
    617 	
    618 	* ipropd_master.c (prop_one): store the opcode in the begining of
    619 	the blob, not the end
    620 	
    621 	* ad.c: try all ldap servers in dns, generate a random password,
    622 	base64(random_block(64)), XXX must make it support other then
    623 	ARCFOUR
    624 	
    625 	* ad.c: framework for windows AD backend
    626 	
    627 2004-03-07  Love Hrnquist strand  <lha (a] it.su.se>
    628 
    629 	* create_s.c (kadm5_s_create_principal): remove old XXX command
    630 	and related code, _kadm5_set_keys will do all this now
    631 	
    632 2004-02-29  Love Hrnquist strand  <lha (a] it.su.se>
    633 
    634 	* set_keys.c (_kadm5_set_keys_randomly): make sure enctype to copy
    635 	enctype for des keys From: Andrew Bartlett <abartlet (a] samba.org>
    636 	
    637 	* create_s.c (kadm5_s_create_principal_with_key): don't call
    638 	_kadm5_set_keys2, create_principal will do that for us. Set kvno
    639 	to 1.
    640 
    641 	* chpass_s.c (change): bump kvno
    642 	(kadm5_s_chpass_principal_with_key): bump kvno
    643 
    644 	* randkey_s.c (kadm5_s_randkey_principal): bump kvno
    645 	
    646 	* set_keys.c (_kadm5_set_*): don't change the kvno, let the callee
    647 	to that
    648 
    649 2003-12-30  Love Hrnquist strand  <lha (a] it.su.se>
    650 
    651 	* chpass_s.c (change): fix same-password-again by decrypting keys
    652 	and setting an error code From: Buck Huppmann <buckh (a] pobox.com>
    653 	
    654 2003-12-21  Love Hrnquist strand  <lha (a] it.su.se>
    655 
    656 	* init_c.c (_kadm5_c_init_context): catch errors from strdup and
    657 	other krb5_ functions
    658 
    659 2003-12-08  Love Hrnquist strand  <lha (a] it.su.se>
    660 
    661 	* rename_s.c (kadm5_s_rename_principal): allow principal to change
    662 	realm From Panasas Inc
    663 	
    664 2003-12-07  Love Hrnquist strand  <lha (a] it.su.se>
    665 
    666 	* destroy_c.c (kadm5_c_destroy): fix memory leaks, From Panasas,
    667 	Inc
    668 
    669 2003-11-23  Love Hrnquist strand  <lha (a] it.su.se>
    670 
    671 	* iprop.h: don't include <krb5-private.h>
    672 	
    673 	* ipropd_slave.c: stop using krb5 lib private byte-frobbing
    674 	functions and replace them with with krb5_storage
    675 	
    676 	* ipropd_master.c: stop using krb5 lib private byte-frobbing
    677 	functions and replace them with with krb5_storage
    678 	
    679 2003-11-19  Love Hrnquist strand  <lha (a] it.su.se>
    680 
    681 	* ipropd_slave.c (receive_loop): when seeking over the entries we
    682 	already have, skip over the trailer.  From: Jeffrey Hutzelman
    683 	<jhutz (a] cmu.edu>
    684 
    685 	* dump_log.c,ipropd_master.c,ipropd_slave.c,
    686 	replay_log.c,truncate_log.c: parse kdc.conf
    687 	From: Jeffrey Hutzelman <jhutz (a] cmu.edu>
    688 
    689 2003-10-10  Love Hrnquist strand  <lha (a] it.su.se>
    690 
    691 	* Makefile.am: += test_pw_quality
    692 	
    693 	* test_pw_quality.c: test program for verifying password quality
    694 	function
    695 
    696 2003-09-03  Love Hrnquist strand  <lha (a] it.su.se>
    697 
    698 	* Makefile.am: add and enable check program default_keys
    699 	
    700 	* default_keys.c: test program for _kadm5_generate_key_set
    701 	
    702 	* init_c.c: use
    703 	krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
    704 
    705 2003-08-17  Love Hrnquist strand  <lha (a] it.su.se>
    706 
    707 	* set_keys.c (_kadm5_set_keys_randomly): remove dup return
    708 	
    709 	* ipropd_master.c (main): make sure current_version is initialized
    710 	
    711 2003-08-15  Love Hrnquist strand  <lha (a] it.su.se>
    712 
    713 	* set_keys.c: use default_keys for the both random keys and
    714 	password derived keys if its defined
    715 	
    716 2003-07-24  Love Hrnquist strand  <lha (a] it.su.se>
    717 
    718 	* ipropd_slave.c (receive_everything): switch close and rename
    719 	From: Alf Wachsmann <alfw (a] SLAC.Stanford.EDU>
    720 	
    721 2003-07-03  Love Hrnquist strand  <lha (a] it.su.se>
    722 
    723 	* iprop.h, ipropd_master.c, ipropd_slave.c:
    724 	Add probing from the server that the client is still there, also
    725 	make the client check that the server is probing.
    726 
    727 2003-07-02  Love Hrnquist strand  <lha (a] it.su.se>
    728 
    729 	* truncate_log.c (main): add missing ``if (ret)''
    730 	
    731 2003-06-26  Love Hrnquist strand  <lha (a] it.su.se>
    732 
    733 	* set_keys.c (make_keys): add AES support
    734 	
    735 	* set_keys.c: fix off by one in the aes case, pointed out by Ken
    736 	Raeburn
    737 
    738 2003-04-30  Love Hrnquist strand  <lha (a] it.su.se>
    739 
    740 	* set_keys.c (_kadm5_set_keys_randomly): add
    741 	ETYPE_AES256_CTS_HMAC_SHA1_96 key when configuried with aes
    742 	support
    743 
    744 2003-04-16  Love Hrnquist strand  <lha (a] it.su.se>
    745 
    746 	* send_recv.c: check return values from krb5_data_alloc
    747 	* log.c: check return values from krb5_data_alloc
    748 	
    749 2003-04-16  Love Hrnquist strand  <lha (a] it.su.se>
    750 
    751 	* dump_log.c (print_entry): check return values from
    752 	krb5_data_alloc
    753 
    754 2003-04-01  Love Hrnquist strand  <lha (a] it.su.se>
    755 
    756 	* init_c.c (kadm_connect): if a context realm was passed in, use
    757 	that to form the kadmin/admin principal
    758 	
    759 2003-03-19  Love Hrnquist strand  <lha (a] it.su.se>
    760 
    761 	* ipropd_master.c (main): make sure we don't consider dead slave
    762 	for select processing
    763 	(write_stats): use slave_stats_file variable, 
    764 	check return value of strftime
    765 	(args): allow specifying slave stats file
    766 	(slave_dead): close the fd when the slave dies
    767 
    768 2002-10-21  Johan Danielsson  <joda (a] pdc.kth.se>
    769 
    770 	* ipropd_slave.c (from Derrick Brashear): Propagating a large
    771 	database without this means the slave kdcs can get erroneous
    772 	HDB_NOENTRY and return the resulting errors. This creates a new db
    773 	handle, populates it, and moves it into place.
    774 
    775 2002-08-26  Assar Westerlund  <assar (a] kth.se>
    776 
    777 	* ipropd_slave.c (receive_everything): type-correctness calling
    778 	_krb5_get_int
    779 
    780 	* context_s.c (find_db_spec): const-correctness in parameters to
    781 	krb5_config_get_next
    782 
    783 2002-08-16  Johan Danielsson  <joda (a] pdc.kth.se>
    784 
    785 	* private.h: rename header file flag macro
    786 
    787 	* Makefile.am: generate kadm5-{protos,private}.h
    788 
    789 2002-08-15  Johan Danielsson  <joda (a] pdc.kth.se>
    790 
    791 	* ipropd_master.c: check return value of krb5_sockaddr2address
    792 
    793 2002-07-04  Johan Danielsson  <joda (a] pdc.kth.se>
    794 
    795 	* ipropd_master.c: handle slaves that come and go; add status
    796 	reporting (both from Love)
    797 
    798 	* iprop.h: KADM5_SLAVE_STATS
    799 
    800 2002-03-25  Jacques Vidrine  <n (a] nectar.com>
    801 
    802 	* init_c.c (get_cred_cache): bug fix: the default credentials
    803 	cache was not being used if a client name was specified.
    804 
    805 2002-03-25  Johan Danielsson  <joda (a] pdc.kth.se>
    806 
    807 	* init_c.c (get_cred_cache): when getting the default_client from
    808 	the cred cache, make sure the instance part is "admin"; this
    809 	should require fewer uses of -p
    810 
    811 2002-03-11  Assar Westerlund  <assar (a] sics.se>
    812 
    813 	* Makefile.am (libkadm5srv_la_LDFLAGS): set version to 7:5:0
    814 	(libkadm5clnt_la_LDFLAGS): set version to 6:3:2
    815 
    816 2002-02-08  Johan Danielsson  <joda (a] pdc.kth.se>
    817 
    818 	* init_c.c: we have to create our own param struct before
    819 	marshaling
    820 
    821 2001-09-05  Johan Danielsson  <joda (a] pdc.kth.se>
    822 
    823 	* Makefile.am: link with LIB_pidfile
    824 
    825 	* iprop.h: include util.h for pidfile
    826 
    827 2001-08-31  Assar Westerlund  <assar (a] sics.se>
    828 
    829 	* ipropd_slave.c (main): syslog with the correct name
    830 
    831 2001-08-30  Jacques Vidrine <n (a] nectar.com>
    832 
    833 	* ipropd_slave.c, ipropd_master.c (main): call pidfile
    834 
    835 2001-08-28  Assar Westerlund  <assar (a] sics.se>
    836 
    837 	* Makefile.am (libkadm5srv_la_LDFLAGS): set version to 7:4:0
    838 
    839 2001-08-24  Assar Westerlund  <assar (a] sics.se>
    840 
    841 	* acl.c (fetch_acl): do not return bogus flags and re-organize
    842 	function
    843 
    844 	* Makefile.am: rename variable name to avoid error from current
    845 	automake
    846 
    847 2001-08-13  Johan Danielsson  <joda (a] pdc.kth.se>
    848 
    849 	* set_keys.c: add easier afs configuration, defaulting to the
    850 	local realm in lower case; also try to remove duplicate salts
    851 
    852 2001-07-12  Assar Westerlund  <assar (a] sics.se>
    853 
    854 	* Makefile.am: add required library dependencies
    855 
    856 2001-07-03  Assar Westerlund  <assar (a] sics.se>
    857 
    858 	* Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 6:2:2
    859 
    860 2001-06-29  Johan Danielsson  <joda (a] pdc.kth.se>
    861 
    862 	* init_c.c: call krb5_get_init_creds_opt_set_default_flags
    863 
    864 2001-02-19  Johan Danielsson  <joda (a] pdc.kth.se>
    865 
    866 	* replay_log.c: add --{start-end}-version flags to replay just
    867 	part of the log
    868 
    869 2001-02-15  Assar Westerlund  <assar (a] sics.se>
    870 
    871 	* ipropd_master.c (main): fix select-loop to decrement ret
    872 	correctly.  from "Brandon S. Allbery KF8NH" <allbery (a] ece.cmu.edu>
    873 
    874 2001-01-30  Assar Westerlund  <assar (a] sics.se>
    875 
    876 	* Makefile.am: bump versions
    877 
    878 2000-12-31  Assar Westerlund  <assar (a] sics.se>
    879 
    880 	* init_s.c (*): handle krb5_init_context failure consistently
    881 	* init_c.c (init_context): handle krb5_init_context failure
    882 	consistently
    883 
    884 2000-12-11  Assar Westerlund  <assar (a] sics.se>
    885 
    886 	* Makefile.am (libkadm5srv_la_LDFLAGS): bump version to 7:2:0
    887 
    888 2000-11-16  Assar Westerlund  <assar (a] sics.se>
    889 
    890 	* set_keys.c (make_keys): clean-up salting loop and try not to
    891 	leak memory
    892 
    893 	* ipropd_master.c (main): check for fd's being too large to select
    894 	on
    895 
    896 2000-08-16  Assar Westerlund  <assar (a] sics.se>
    897 
    898 	* Makefile.am (libkadm5srv_la_LDFLAGS): bump version to 7:1:0
    899 
    900 2000-08-10  Assar Westerlund  <assar (a] sics.se>
    901 
    902 	* acl.c (fetch_acl): fix wrong cases, use krb5_principal_match
    903 
    904 2000-08-07  Assar Westerlund  <assar (a] sics.se>
    905 
    906 	* ipropd_master.c (main): ignore SIGPIPE
    907 
    908 2000-08-06  Assar Westerlund  <assar (a] sics.se>
    909 
    910 	* ipropd_slave.c (receive_everything): make `fd' an int instead of
    911 	a pointer.  From Derrick J Brashear <shadow (a] dementia.org>
    912 
    913 2000-08-04  Johan Danielsson  <joda (a] pdc.kth.se>
    914 
    915 	* admin.h: change void** to void*
    916 
    917 2000-07-25  Johan Danielsson  <joda (a] pdc.kth.se>
    918 
    919 	* Makefile.am: bump versions to 7:0:0 and 6:0:2
    920 
    921 2000-07-24  Assar Westerlund  <assar (a] sics.se>
    922 
    923 	* log.c (kadm5_log_get_version): rename kadm5_log_get_version_fd
    924 	and make a new that takes a context
    925 	(kadm5_log_nop): add logging of missing lengths
    926 	(kadm5_log_truncate): new function
    927 
    928 	* dump_log.c (print_entry): update and correct
    929 	* randkey_s.c: call _kadm5_bump_pw_expire
    930 	* truncate_log.c: new program for truncating the log
    931 	* Makefile.am (sbin_PROGRAMS): add truncate_log
    932 	(C_SOURCES): add bump_pw_expire.c
    933 	* bump_pw_expire.c: new function for extending password expiration
    934 
    935 2000-07-22  Assar Westerlund  <assar (a] sics.se>
    936 
    937 	* keys.c: new file with _kadm5_free_keys, _kadm5_init_keys
    938 
    939 	* set_keys.c (free_keys, init_keys): elevate to internal kadm5
    940 	functions
    941 
    942 	* chpass_s.c (kadm5_s_chpass_principal_cond): new function
    943 	* Makefile.am (C_SOURCES): add keys.c
    944 	* init_c.c: remove unused variable and handle some parameters
    945 	being NULL
    946 
    947 2000-07-22  Johan Danielsson  <joda (a] pdc.kth.se>
    948 
    949 	* ipropd_slave.c: use krb5_read_priv_message
    950 
    951 	* ipropd_master.c: use krb5_{read,write}_priv_message
    952 
    953 	* init_c.c: use krb5_write_priv_message
    954 
    955 2000-07-11  Johan Danielsson  <joda (a] pdc.kth.se>
    956 
    957 	* ipropd_slave.c: no need to call gethostname, since
    958 	sname_to_principal will
    959 
    960 	* send_recv.c: assert that we have a connected socket
    961 
    962 	* get_princs_c.c: call _kadm5_connect
    963 
    964 	* rename_c.c: call _kadm5_connect
    965 
    966 	* randkey_c.c: call _kadm5_connect
    967 
    968 	* privs_c.c: call _kadm5_connect
    969 
    970 	* modify_c.c: call _kadm5_connect
    971 
    972 	* get_c.c: call _kadm5_connect
    973 
    974 	* delete_c.c: call _kadm5_connect
    975 
    976 	* create_c.c: call _kadm5_connect
    977 
    978 	* chpass_c.c: call _kadm5_connect
    979 
    980 	* private.h: add more fields to client context; remove prototypes
    981 
    982 	* admin.h: remove prototypes
    983 
    984 	* kadm5-protos.h: move public prototypes here
    985 
    986 	* kadm5-private.h: move private prototypes here
    987 
    988 	* init_c.c: break out connection code to separate function, and
    989 	defer calling it until we actually do something
    990 
    991 2000-07-07  Assar Westerlund  <assar (a] sics.se>
    992 
    993 	* set_keys.c (make_keys): also support `[kadmin]use_v4_salt' for
    994 	backwards compatability
    995 
    996 2000-06-26  Johan Danielsson  <joda (a] pdc.kth.se>
    997 
    998 	* set_keys.c (_kadm5_set_keys): rewrite this to be more easily
    999 	adaptable to different salts
   1000 	
   1001 2000-06-19  Johan Danielsson  <joda (a] pdc.kth.se>
   1002 
   1003 	* get_s.c: pa_* -> KRB5_PADATA_*
   1004 
   1005 2000-06-16  Assar Westerlund  <assar (a] sics.se>
   1006 
   1007 	* ipropd_slave.c: change default keytab to default keytab (as in
   1008 	typically FILE:/etc/krb5.keytab)
   1009 
   1010 2000-06-08  Assar Westerlund  <assar (a] sics.se>
   1011 
   1012 	* ipropd_slave.c: bug fixes, for actually writing the full dump to
   1013 	the database.  based on a patch from Love <lha (a] stacken.kth.se>
   1014 
   1015 2000-06-07  Assar Westerlund  <assar (a] sics.se>
   1016 
   1017 	* acl.c: add support for patterns of principals
   1018 	* log.c (kadm5_log_replay_create): handle more NULL pointers
   1019 	(should they really happen?)
   1020 	* log.c (kadm5_log_replay_modify): handle max_life == NULL and
   1021 	max_renew == NULL
   1022 
   1023 	* ipropd_master.c: use syslog.  be less verbose
   1024 	* ipropd_slave.c: use syslog
   1025 
   1026 2000-06-05  Assar Westerlund  <assar (a] sics.se>
   1027 
   1028 	* private.h (kadm_ops): add kadm_nop more prototypes
   1029 	* log.c (kadm5_log_set_version, kadm5_log_reinit, kadm5_log_nop,
   1030 	kadm5_log_replay_nop): add
   1031 	* ipropd_slave.c: and some more improvements
   1032 	* ipropd_master.c: lots of improvements
   1033 	* iprop.h (IPROP_PORT, IPROP_SERVICE): add
   1034 	(iprop_cmd): add new commands
   1035 
   1036 	* dump_log.c: add nop
   1037 
   1038 2000-05-15  Assar Westerlund  <assar (a] sics.se>
   1039 
   1040 	* Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 5:1:1
   1041 
   1042 2000-05-12  Assar Westerlund  <assar (a] sics.se>
   1043 
   1044 	* get_s.c (kadm5_s_get_principal): set life, rlife to INT_MAX as a
   1045 	fallback.  handle not having any creator.
   1046 	* destroy_s.c (kadm5_s_destroy): free all allocated memory
   1047 	* context_s.c (set_field): free variable if it's already set
   1048 	(find_db_spec): malloc space for all strings
   1049 
   1050 2000-04-05  Assar Westerlund  <assar (a] sics.se>
   1051 
   1052 	* Makefile.am (LDADD): add LIB_openldap
   1053 
   1054 2000-04-03  Assar Westerlund  <assar (a] sics.se>
   1055 
   1056 	* Makefile.am (libkadm5srv_la_LDFLAGS): set version to 6:0:1
   1057 	(libkadm5clnt_la_LDFLAGS): set version to 5:0:1
   1058 
   1059 2000-03-24  Assar Westerlund  <assar (a] sics.se>
   1060 
   1061 	* set_keys.c (_kadm5_set_keys2): rewrite
   1062 	(_kadm5_set_keys3): add
   1063 
   1064 	* private.h (struct kadm_func): add chpass_principal_with_key
   1065 	* init_c.c (set_funcs): add chpass_principal_with_key
   1066 
   1067 2000-03-23  Assar Westerlund  <assar (a] sics.se>
   1068 
   1069 	* context_s.c (set_funcs): add chpass_principal_with_key
   1070 	* common_glue.c (kadm5_chpass_principal_with_key): add
   1071 	* chpass_s.c: comment-ize and change calling convention for
   1072 	_kadm5_set_keys*
   1073 	* chpass_c.c (kadm5_c_chpass_principal_with_key): add
   1074 
   1075 2000-02-07  Assar Westerlund  <assar (a] sics.se>
   1076 
   1077 	* Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 4:2:0
   1078 
   1079 2000-01-28  Assar Westerlund  <assar (a] sics.se>
   1080 
   1081 	* init_c.c (get_new_cache): make sure to request non-forwardable,
   1082 	non-proxiable
   1083 
   1084 2000-01-06  Assar Westerlund  <assar (a] sics.se>
   1085 
   1086 	* Makefile.am (libkadm5srv.la): bump version to 5:1:0
   1087 
   1088 	* context_s.c (_kadm5_s_init_context): handle params == NULL
   1089 
   1090 1999-12-26  Assar Westerlund  <assar (a] sics.se>
   1091 
   1092 	* get_s.c (kadm5_s_get_principal): handle modified_by->principal
   1093  	== NULL
   1094 
   1095 1999-12-20  Assar Westerlund  <assar (a] sics.se>
   1096 
   1097 	* Makefile.am (libkadm5clnt_la_LDFLAGS): bump version to 4:1:0
   1098 
   1099 	* init_c.c (_kadm5_c_init_context): handle getting back port
   1100  	number from admin host
   1101 	(kadm5_c_init_with_context): remove `proto/' part before doing
   1102 	getaddrinfo()
   1103 
   1104 1999-12-06  Assar Westerlund  <assar (a] sics.se>
   1105 
   1106 	* Makefile.am: bump version to 5:0:0 and 4:0:0
   1107 
   1108 	* init_c.c (kadm5_c_init_with_context): don't use unitialized
   1109  	stuff
   1110 
   1111 1999-12-04  Assar Westerlund  <assar (a] sics.se>
   1112 
   1113 	* replay_log.c: adapt to changed kadm5_log_foreach
   1114 
   1115 	* log.c (kadm5_log_foreach): change to take a
   1116  	`kadm5_server_context'
   1117 
   1118 	* init_c.c: use krb5_warn{,x}
   1119 
   1120 	* dump_log.c: adapt to changed kadm5_log_foreach
   1121 
   1122 	* init_c.c: re-write to use getaddrinfo
   1123 	* Makefile.am (install-build-headers): add dependency
   1124 	
   1125 1999-12-03  Johan Danielsson  <joda (a] pdc.kth.se>
   1126 
   1127 	* log.c (kadm5_log_foreach): pass context
   1128 
   1129 	* dump_log.c: print more interesting things
   1130 
   1131 1999-12-02  Johan Danielsson  <joda (a] pdc.kth.se>
   1132 
   1133 	* ipropd_master.c (process_msg): check for short reads
   1134 
   1135 1999-11-25  Assar Westerlund  <assar (a] sics.se>
   1136 
   1137 	* modify_s.c (kadm5_s_modify_principal): support key_data
   1138 	(kadm5_s_modify_principal_with_key): remove
   1139 
   1140 	* admin.h (kadm5_s_modify_principal_with_key): remove
   1141 
   1142 1999-11-20  Assar Westerlund  <assar (a] sics.se>
   1143 
   1144 	* context_s.c (find_db_spec): ugly cast work-around.
   1145 
   1146 1999-11-14  Assar Westerlund  <assar (a] sics.se>
   1147 
   1148 	* context_s.c (_kadm5_s_init_context): call krb5_add_et_list so
   1149  	that we aren't dependent on the layout of krb5_context_data
   1150 	* init_c.c (_kadm5_c_init_context): call krb5_add_et_list so that
   1151  	we aren't dependent on the layout of krb5_context_data
   1152 
   1153 1999-11-13  Assar Westerlund  <assar (a] sics.se>
   1154 
   1155 	* password_quality.c (kadm5_setup_passwd_quality_check): use
   1156 	correct types for function pointers
   1157 	
   1158 1999-11-09  Johan Danielsson  <joda (a] pdc.kth.se>
   1159 
   1160 	* randkey_s.c: always bail out if the fetch fails
   1161 
   1162 	* admin.h (kadm5_config_params): remove fields we're not using
   1163 
   1164 	* ipropd_slave.c: allow passing a realm
   1165 
   1166 	* ipropd_master.c: allow passing a realm
   1167 
   1168 	* dump_log.c: allow passing a realm
   1169 
   1170 	* acl.c: correctly get acl file
   1171 
   1172 	* private.h (kadm5_server_context): add config_params struct and
   1173 	remove acl_file; bump protocol version number
   1174 
   1175 	* marshall.c: marshalling of config parameters
   1176 
   1177 	* init_c.c (kadm5_c_init_with_context): try to cope with old
   1178 	servers
   1179 
   1180 	* init_s.c (kadm5_s_init_with_context): actually use some passed
   1181 	values
   1182 
   1183 	* context_s.c (_kadm5_s_init_context): get dbname, acl_file, and
   1184 	stash_file from the config parameters, try to figure out these if
   1185 	they're not provided
   1186 
   1187 1999-11-05  Assar Westerlund  <assar (a] sics.se>
   1188 
   1189 	* Makefile.am (install-build-headers): use `cp' instead of
   1190  	INSTALL_DATA
   1191 
   1192 1999-11-04  Assar Westerlund  <assar (a] sics.se>
   1193 
   1194 	* Makefile.am: bump version to 4:0:0 and 3:0:0 (they access fields
   1195  	directly in libkrb5's context - bad functions)
   1196 
   1197 	* set_keys.c (_kadm5_set_keys_randomly): set enctypes correctly in
   1198  	the copied keys
   1199 
   1200 1999-10-20  Assar Westerlund  <assar (a] sics.se>
   1201 
   1202 	* Makefile.am: set version of kadm5srv to 3:0:2 (new password
   1203  	quality functions).
   1204  	set version of kdam5clnt to 2:1:1 (no interface changes)
   1205 
   1206 	* Makefile.am (LDADD): add $(LIB_dlopen)
   1207 
   1208 1999-10-17  Assar Westerlund  <assar (a] sics.se>
   1209 
   1210 	* randkey_s.c (kadm5_s_randkey_principal): use
   1211  	_kadm5_set_keys_randomly
   1212 
   1213 	* set_keys.c (free_keys): free more memory
   1214 	(_kadm5_set_keys): a little bit more generic
   1215 	(_kadm5_set_keys_randomly): new function for setting random keys.
   1216 
   1217 1999-10-14  Assar Westerlund  <assar (a] sics.se>
   1218 
   1219 	* set_keys.c (_kadm5_set_keys): ignore old keys when setting new
   1220  	ones and always add 3 DES keys and one 3DES key
   1221 
   1222 1999-10-03  Assar Westerlund  <assar (a] sics.se>
   1223 
   1224 	* init_c.c (_kadm5_c_init_context): use `krb5_get_krb_admin_hst'.
   1225   	check return value from strdup
   1226 
   1227 1999-09-26  Assar Westerlund  <assar (a] sics.se>
   1228 
   1229 	* acl.c (_kadm5_privs_to_string): forgot one strcpy_truncate ->
   1230  	strlcpy
   1231 
   1232 1999-09-24  Johan Danielsson  <joda (a] pdc.kth.se>
   1233 
   1234 	* dump_log.c: remove unused `optind'
   1235 
   1236 	* replay_log.c: remove unused `optind'
   1237 
   1238 1999-09-13  Assar Westerlund  <assar (a] sics.se>
   1239 
   1240 	* chpass_c.c (kadm5_c_chpass_principal): new _kadm5_client_recv
   1241 
   1242 	* send_recv.c (_kadm5_client_recv): return result in a `krb5_data'
   1243  	so that we avoid copying it and don't need to dimension in
   1244  	advance.  change all callers.
   1245 
   1246 1999-09-10  Assar Westerlund  <assar (a] sics.se>
   1247 
   1248 	* password_quality.c: new file
   1249 
   1250 	* admin.h
   1251  	(kadm5_setup_passwd_quality_check,kadm5_check_password_quality):
   1252  	add prototypes
   1253 
   1254 	* Makefile.am (S_SOURCES): add password_quality.c
   1255 
   1256 1999-07-26  Assar Westerlund  <assar (a] sics.se>
   1257 
   1258 	* Makefile.am: update versions to 2:0:1
   1259 
   1260 1999-07-24  Assar Westerlund  <assar (a] sics.se>
   1261 
   1262 	* ent_setup.c (_kadm5_setup_entry): make princ_expire_time == 0
   1263  	and pw_expiration == 0 mean never
   1264 
   1265 1999-07-22  Assar Westerlund  <assar (a] sics.se>
   1266 
   1267 	* log.c (kadm5_log_flush): extra cast
   1268 
   1269 1999-07-07  Assar Westerlund  <assar (a] sics.se>
   1270 
   1271 	* marshall.c (store_principal_ent): encoding princ_expire_time and
   1272  	pw_expiration in correct order
   1273 
   1274 1999-06-28  Assar Westerlund  <assar (a] sics.se>
   1275 
   1276 	* randkey_s.c (kadm5_s_randkey_principal): nuke old mkvno,
   1277  	otherwise hdb will think that the new random keys are already
   1278  	encrypted which will cause lots of confusion later.
   1279 
   1280 1999-06-23  Assar Westerlund  <assar (a] sics.se>
   1281 
   1282 	* ent_setup.c (_kadm5_setup_entry): handle 0 == unlimited
   1283  	correctly.  From Michal Vocu <michal (a] karlin.mff.cuni.cz>
   1284 
   1285 1999-06-15  Assar Westerlund  <assar (a] sics.se>
   1286 
   1287 	* init_c.c (get_cred_cache): use get_default_username
   1288 
   1289 1999-05-23  Assar Westerlund  <assar (a] sics.se>
   1290 
   1291 	* create_s.c (create_principal): if there's no default entry the
   1292 	mask should be zero.
   1293 
   1294 1999-05-21  Assar Westerlund  <assar (a] sics.se>
   1295 
   1296 	* init_c.c (get_cred_cache): use $USERNAME
   1297 
   1298 1999-05-17  Johan Danielsson  <joda (a] pdc.kth.se>
   1299 
   1300 	* init_c.c (get_cred_cache): figure out principal
   1301 
   1302 1999-05-05  Johan Danielsson  <joda (a] pdc.kth.se>
   1303 
   1304 	* send_recv.c: cleanup _kadm5_client_{send,recv}
   1305 
   1306 1999-05-04  Assar Westerlund  <assar (a] sics.se>
   1307 
   1308 	* set_keys.c (_kadm5_set_keys2): don't check the recently created
   1309  	memory for NULL pointers
   1310 
   1311 	* private.h (_kadm5_setup_entry): change prototype
   1312 
   1313 	* modify_s.c: call new _kadm5_setup_entry
   1314 
   1315 	* ent_setup.c (_kadm5_setup_entry): change so that it takes three
   1316  	masks, one for what bits to set and one for each of principal and
   1317  	def containing the bits that are set there.
   1318 
   1319 	* create_s.c: call new _kadm5_setup_entry
   1320 
   1321 	* create_s.c (get_default): check return value
   1322 	(create_principal): send wider mask to _kadm5_setup_entry
   1323 
   1324 1999-05-04  Johan Danielsson  <joda (a] pdc.kth.se>
   1325 
   1326 	* send_recv.c (_kadm5_client_recv): handle arbitrarily sized
   1327 	packets, check for errors
   1328 
   1329 	* get_c.c: check for failure from _kadm5_client_{send,recv}
   1330 
   1331 1999-05-04  Assar Westerlund  <assar (a] sics.se>
   1332 
   1333 	* init_c.c (get_new_cache): don't abort when interrupted from
   1334  	password prompt
   1335 	
   1336 	* destroy_c.c (kadm5_c_destroy): check if we should destroy the
   1337  	auth context
   1338 
   1339 1999-05-03  Johan Danielsson  <joda (a] pdc.kth.se>
   1340 
   1341 	* chpass_s.c: fix arguments to _kadm5_set_keys2
   1342 
   1343 	* private.h: proto
   1344 
   1345 	* set_keys.c: clear mkvno
   1346 
   1347 	* rename_s.c: add flags to fetch and store; seal keys before
   1348 	logging
   1349 
   1350 	* randkey_s.c: add flags to fetch and store; seal keys before
   1351 	logging
   1352 
   1353 	* modify_s.c: add flags to fetch and store; seal keys before
   1354 	logging
   1355 
   1356 	* log.c: add flags to fetch and store; seal keys before logging
   1357 
   1358 	* get_s.c: add flags to fetch and store; seal keys before logging
   1359 
   1360 	* get_princs_s.c: add flags to fetch and store; seal keys before
   1361 	logging
   1362 
   1363 	* delete_s.c: add flags to fetch and store; seal keys before
   1364 	logging
   1365 
   1366 	* create_s.c: add flags to fetch and store; seal keys before
   1367 	logging
   1368 
   1369 	* chpass_s.c: add flags to fetch and store; seal keys before
   1370 	logging
   1371 
   1372 	* Makefile.am: remove server.c
   1373 
   1374 	* admin.h: add prototypes
   1375 
   1376 	* ent_setup.c (_kadm5_setup_entry): set key_data
   1377 
   1378 	* set_keys.c: add _kadm5_set_keys2 to sey keys from key_data
   1379 
   1380 	* modify_s.c: add kadm5_s_modify_principal_with_key
   1381 
   1382 	* create_s.c: add kadm5_s_create_principal_with_key
   1383 
   1384 	* chpass_s.c: add kadm5_s_chpass_principal_with_key
   1385 
   1386 	* kadm5_locl.h: move stuff to private.h
   1387 
   1388 	* private.h: move stuff from kadm5_locl.h
   1389 	
   1390