source: openpam/trunk/HISTORY @ 165

Last change on this file since 165 was 165, checked in by Dag-Erling Smørgrav, 19 years ago

OpenPAM Citronella.
File size: 6.8 KB
Line 
1============================================================================
2OpenPAM Citronella                                              2002-06-30
3
4 - ENHANCE: Add the "binding" control flag (from Solaris 9).
5
6 - ENHANCE: Define struct pam_repository and PAM_REPOSITORY (from
7   Solaris 9).
8
9 - ENHANCE: Flesh out the pam(3) man page. 
10
11 - ENHANCE: Add an openpam(3) page with cross-references to all the
12   documented OpenPAM API extensions.
13
14 - ENHANCE: Add a pam_conv(3) man page describing the conversation
15   system.
16
17 - ENHANCE: Improved sample application.
18
19 - ENHANCE: Added sample pam_unix module.
20
21 - BUGFIX: Various documentation nits.
22
23============================================================================
24OpenPAM Cinquefoil                                              2002-05-24
25
26 - BUGFIX: Various warnings uncovered by gcc 3.1.
27
28 - ENHANCE: Add a null conversation function, openpam_nullconv(3).
29
30 - BUGFIX: Initialize the "other" chain to all zeroes.
31
32 - ENHANCE: Document openpam_ttyconv(3).
33============================================================================
34OpenPAM Cinnamon                                                2002-05-02
35
36 - ENHANCE: Add a null conversation function, openpam_nullconv().
37
38 - BUGFIX: Various markup bugs in the documentation.
39
40 - BUGFIX: Document <security/openpam.h>.
41
42 - BUGFIX: Duplicate expansion of openpam_log() macro arguments.
43
44 - ENHANCE: Restructure the policy-loading code and align our use of
45   the "other" policy with Solaris and Linux-PAM.
46
47 - ENHANCE: Log dlopen() and dlsym() failures.
48
49 - ENHANCE: In openpam_ttyconv(), emit a newline after error and info
50   messages unless the message contains one already.
51
52 - BUGFIX: In pam_vprompt(), initialize the response pointer to NULL
53   so we can detect whether the conversation function touched it.
54============================================================================
55OpenPAM Cineraria                                               2002-04-14
56
57 - BUGFIX: Fix confusion between token and prompt in
58   pam_get_authtok(3).
59
60 - ENHANCE: Improved documentation.
61
62 - ENHANCE: Adopt the same preprocessor tricks that were used in
63   FreeBSD's version of Linux-PAM to simplify static linking without
64   requiring dummy primitives.
65
66 - ENHANCE: Move the policy-loading code out of pam_start.c.
67
68 - BUGFIX: Fix typo in one of the versions of the openpam_log macro.
69
70 - ENHANCE: Add versioning macros.
71============================================================================
72OpenPAM Cinchona                                                2002-04-08
73
74 - ENHANCE: Improved documentation for several API functions.
75
76 - BUGFIX: Fix bug in pam_set_data() that would result in corruption
77   of the module data list.
78
79 - BUGFIX: Allocate the correct amount of memory for the environment
80   list in pam_putenv().
81
82 - ENHANCE: Change pam_get_authtok()'s prototype so the caller can
83   specify what token it wants.  Also introduce PAM_OLDAUTHTOK_PROMPT.
84
85 - BUGFIX: Plug memory leak in pam_get_user() / pam_get_authtok(), and
86   reduce differences between these very similar functions.
87
88 - ENHANCE: Check flags carefully in pam_authenticate() and
89   pam_chauthtok().
90
91 - BUGFIX: Fix bugs in portability code; libpam now builds on NetBSD.
92
93 - ENHANCE: In pam_get_authtok(), if PAM_OLDAUTHTOK is set, we're
94   asked for PAM_AUTHTOK, and we have to prompt the user, prompt her
95   twice and compare the responses.
96
97 - ENHANCE: Add openpam_{borrow,restore}_cred(), for temporarily
98   switching to user credentials.
99
100 - ENHANCE: Add openpam_free_data(), a generic cleanup function for
101   pam_set_data() consumers.
102============================================================================
103OpenPAM Centaury                                                2002-03-14
104
105 - BUGFIX: Add missing #include <string.h> to openpam_log.c.
106
107 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/.  XSSO uses
108   the former, but Solaris and Linux-PAM use the latter.
109
110 - BUGFIX: The dynamic loader and the module cache contained a number
111   of bugs which would cause a segmentation fault if pam_start(3) was
112   called again after pam_end(3), as happens in login(1), xdm(1) etc.
113   after a failed login.
114
115 - BUGFIX: Refer to a module by the name used in the policy file, even
116   if the module that was actually loaded was versioned.
117
118 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG.
119============================================================================
120OpenPAM Celandine                                               2002-03-05
121
122 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok().
123
124 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK
125   flag set, then with the PAM_UPDATE_AUTHTOK flag set.
126
127 - BUGFIX: Failure of a "sufficient" module should not terminate the
128   passwd chain if the PAM_PRELIM_CHECK flag is set.
129
130 - BUGFIX: Clear PAM_AUTHTOK after running the service modules.
131
132 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK
133   or PAM_UPDATE_AUTHTOK flags themselves.
134
135 - BUGFIX: openpam_set_option() did not support changing the value of
136   an existing option.
137
138 - ENHANCE: Add support for module versioning.  OpenPAM will prefer a
139   module with the same version number as the library itself to one
140   with no version number at all.
141============================================================================
142OpenPAM Cantaloupe                                              2002-02-22
143
144 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid
145   argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures.
146
147 - ENHANCE: Add in-line documentation in most source files, and a Perl
148   script that generates mdoc code from that.
149
150 - BUGFIX: The environment list was not properly NULL-terminated.
151
152 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt
153   specified by the module.
154
155 - BUGFIX: PAM_NUM_ITEMS was set too low.  It has been moved to
156   pam_constants.h to avoid it going stale again.
157
158 - ENHANCE: Move all code related to static modules into a separate
159   file.
160
161 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the
162   user, and supports setting a timeout (which defaults to off).
163
164 - BUGFIX: Some manual pages referenced XSSO even though they
165   documented OpenPAM-specific functions.
166
167 - ENHANCE: Added openpam_get_option() and openpam_set_option().
168
169 - ENHANCE: openpam_get_authtok() now respects the echo_pass,
170   try_first_pass, and use_first_pass options.
171============================================================================
172OpenPAM Caliopsis                                               2002-02-13
173
174Fixed a number of bugs in the previous release, including:
175  - a number of bugs in and related to pam_[gs]et_item(3)
176  - off-by-one bug in pam_start.c would trim last character off certain
177    configuration lines
178  - incorrect ordering of an array in openpam_load.c would cause service
179    module functions to get mixed up
180  - missing 'continue' in openpam_dispatch.c caused successes to be
181    counted as failures
182============================================================================
183OpenPAM Calamite                                                2002-02-09
184
185First (beta) release.
186============================================================================
187$P4: //depot/projects/openpam/HISTORY#13 $
Note: See TracBrowser for help on using the repository browser.