source: openpam/trunk/HISTORY @ 108

Last change on this file since 108 was 108, checked in by Dag-Erling Smørgrav, 18 years ago

Release documentation for OpenPAM Cinchona.

Sponsored by: DARPA, NAI Labs

File size: 4.6 KB
Line 
1============================================================================
2OpenPAM Cinchona                                                2002-04-08
3
4 - ENHANCE: Improved documentation for several API functions.
5
6 - BUGFIX: Fix bug in pam_set_data() that would result in corruption
7   of the module data list.
8
9 - BUGFIX: Allocate the correct amount of memory for the environment
10   list in pam_putenv().
11
12 - ENHANCE: Change pam_get_authtok()'s prototype so the caller can
13   specify what token it wants.  Also introduce PAM_OLDAUTHTOK_PROMPT.
14
15 - BUGFIX: Plug memory leak in pam_get_user() / pam_get_authtok(), and
16   reduce differences between these very similar functions.
17
18 - ENHANCE: Check flags carefully in pam_authenticate() and
19   pam_chauthtok().
20
21 - BUGFIX: Fix bugs in portability code; libpam now builds on NetBSD.
22
23 - ENHANCE: In pam_get_authtok(), if PAM_OLDAUTHTOK is set, we're
24   asked for PAM_AUTHTOK, and we have to prompt the user, prompt her
25   twice and compare the responses.
26
27 - ENHANCE: Add openpam_{borrow,restore}_cred(), for temporarily
28   switching to user credentials.
29
30 - ENHANCE: Add openpam_free_data(), a generic cleanup function for
31   pam_set_data() consumers.
32============================================================================
33OpenPAM Centaury                                                2002-03-14
34
35 - BUGFIX: Add missing #include <string.h> to openpam_log.c.
36
37 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/.  XSSO uses
38   the former, but Solaris and Linux-PAM use the latter.
39
40 - BUGFIX: The dynamic loader and the module cache contained a number
41   of bugs which would cause a segmentation fault if pam_start(3) was
42   called again after pam_end(3), as happens in login(1), xdm(1) etc.
43   after a failed login.
44
45 - BUGFIX: Refer to a module by the name used in the policy file, even
46   if the module that was actually loaded was versioned.
47
48 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG.
49============================================================================
50OpenPAM Celandine                                               2002-03-05
51
52 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok().
53
54 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK
55   flag set, then with the PAM_UPDATE_AUTHTOK flag set.
56
57 - BUGFIX: Failure of a "sufficient" module should not terminate the
58   passwd chain if the PAM_PRELIM_CHECK flag is set.
59
60 - BUGFIX: Clear PAM_AUTHTOK after running the service modules.
61
62 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK
63   or PAM_UPDATE_AUTHTOK flags themselves.
64
65 - BUGFIX: openpam_set_option() did not support changing the value of
66   an existing option.
67
68 - ENHANCE: Add support for module versioning.  OpenPAM will prefer a
69   module with the same version number as the library itself to one
70   with no version number at all.
71============================================================================
72OpenPAM Cantaloupe                                              2002-02-22
73
74 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid
75   argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures.
76
77 - ENHANCE: Add in-line documentation in most source files, and a Perl
78   script that generates mdoc code from that.
79
80 - BUGFIX: The environment list was not properly NULL-terminated.
81
82 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt
83   specified by the module.
84
85 - BUGFIX: PAM_NUM_ITEMS was set too low.  It has been moved to
86   pam_constants.h to avoid it going stale again.
87
88 - ENHANCE: Move all code related to static modules into a separate
89   file.
90
91 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the
92   user, and supports setting a timeout (which defaults to off).
93
94 - BUGFIX: Some manual pages referenced XSSO even though they
95   documented OpenPAM-specific functions.
96
97 - ENHANCE: Added openpam_get_option() and openpam_set_option().
98
99 - ENHANCE: openpam_get_authtok() now respects the echo_pass,
100   try_first_pass, and use_first_pass options.
101============================================================================
102OpenPAM Caliopsis                                               2002-02-13
103
104Fixed a number of bugs in the previous release, including:
105  - a number of bugs in and related to pam_[gs]et_item(3)
106  - off-by-one bug in pam_start.c would trim last character off certain
107    configuration lines
108  - incorrect ordering of an array in openpam_load.c would cause service
109    module functions to get mixed up
110  - missing 'continue' in openpam_dispatch.c caused successes to be
111    counted as failures
112============================================================================
113OpenPAM Calamite                                                2002-02-09
114
115First (beta) release.
116============================================================================
117$P4: //depot/projects/openpam/HISTORY#8 $
Note: See TracBrowser for help on using the repository browser.