source: openpam/trunk/HISTORY @ 383

Last change on this file since 383 was 320, checked in by Dag-Erling Smørgrav, 13 years ago

Convert $P4$ tags to $Id$.

  • Property svn:keywords set to Id
File size: 11.0 KB
Line 
1OpenPAM Xxx                                                     2005-XX-XX
2
3 - ENHANCE: when compiling with GCC, mark up API functions with GCC
4   attributes where appropriate.
5
6Thanks to Dmitry V. Levin <ldv@altlinux.org> for his assistance with
7this release.
8============================================================================
9OpenPAM Figwort                                                 2005-06-16
10
11 - BUGFIX: Correct several small signedness and initialization bugs
12   discovered during review by the NetBSD team.
13
14 - BUGFIX: Modify gendoc.pl to sort cross-references in dictionary
15   order within each section.
16
17 - ENHANCE: if a policy specifies a relative module path, prepend the
18   module directory so we never call dlopen(3) with a relative path.
19
20 - ENHANCE: add a pam.conf(5) manual page.
21============================================================================
22OpenPAM Feterita                                                2005-02-01
23
24 - BUGFIX: Correct numerous markup errors, invalid cross-references,
25   and other issues in the manual pages, with kind assistance from
26   Ruslan Ermilov <ru@freebsd.org>.
27
28 - BUGFIX: Avoid multiple evaluation of macro arguments in ENTERX()
29   and RETURNX() macros.
30
31 - BUGFIX: Remove an unnecessary and non-portable pointer cast in
32   pam_get_data(3).
33
34 - BUGFIX: Fix identical typos in PAM_ACCT_EXPIRED case in
35   pam_strerror(3) and gendoc.pl.
36
37 - ENHANCE: Minor overhaul of the autoconf / build system.
38
39 - ENHANCE: Add openpam_free_envlist(3).
40============================================================================
41OpenPAM Eelgrass                                                2004-02-10
42
43 - BUGFIX: Correct array handling bugs in conversation code.
44
45 - BUGFIX: In openpam_ttyconv(3), don't strip trailing linear
46   whitespace from the user's response.
47
48 - BUGFIX: Many constness issues addressed.
49============================================================================
50OpenPAM Dogwood                                                 2003-07-15
51
52 - ENHANCE: Use the GNU autotools.
53
54 - ENHANCE: Constify the msg field in struct pam_message.
55
56 - BUGFIX: Remove left-over debugging output
57
58 - BUGFIX: Avoid side effects in arguments to the FREE() macro
59
60 - ENHANCE: Make openpam_ttyconv(3) use read(2) rather than fgets(3).
61
62 - BUGFIX: Staticize some variables which shouldn't be global.
63
64 - BUGFIX: Correcly anticipate a NULL user in pam_get_user(3).
65
66 - ENHANCE: Various minor documentation improvements.
67
68Thanks to Dmitry V. Levin <ldv@altlinux.org> for considerable
69assistance with this release.
70============================================================================
71OpenPAM Digitalis                                               2003-06-01
72
73 - ENHANCE: Completely rewrite the configuration parser and add
74   support for the "include" control flag.
75
76 - ENHANCE: Improve portability to NetBSD, OpenBSD and Linux.
77
78 - ENHANCE: Lots of additional paranoia.
79
80 - BUGFIX: The sample su(1) application dropped privileges before
81   forking instead of after.
82
83 - ENHANCE: Document openpam_log(3).
84
85 - ENHANCE: Other minor documentation fixes.
86
87Thanks to Dmitry V. Levin <ldv@altlinux.org> for considerable
88assistance with this release.
89============================================================================
90OpenPAM Dianthus                                                2003-05-02
91
92 - BUGFIX: Initialize some potentially uninitialized variables.
93
94 - BUGFIX: Silence some warnings emitted by gcc -std=iso9899:1999.
95
96 - BUGFIX: In pam_getenv(), return a pointer to the stored variable
97   instead of a freshly allocated copy.
98
99 - ENHANCE: Detect recursion in openpam_borrow_cred()
100
101 - ENHANCE: Make borrowing one's own credentials a no-op.
102
103 - ENHANCE: Further improve debugging support.
104
105 - ENHANCE: Clean up some variable names.
106============================================================================
107OpenPAM Daffodil                                                2003-01-06
108
109 - ENHANCE: Document dependency on <sys/types.h> (for size_t)
110
111 - ENHANCE: Slightly improve error detection in openpam_ttyconv().
112
113 - BUGFIX: Fix several typos in debugging macros.
114============================================================================
115OpenPAM Cyclamen                                                2002-12-12
116
117 - ENHANCE: Improve recursion detection in openpam_dispatch().
118
119 - ENHANCE: Add debugging messages at entry and exit points of most
120   functions.
121
122 - ENHANCE: Fix some minor style issues.
123
124 - BUGFIX: Add default cases to the switches in openpam_log.c.
125
126 - ENHANCE: Add /usr/local/etc/pam.conf to policy search path.
127
128 - BUGFIX: In openpam_ttyconv(3), print the prompt to stdout rather
129   than stderr.
130============================================================================
131OpenPAM Citronella                                              2002-06-30
132
133 - ENHANCE: Add the "binding" control flag (from Solaris 9).
134
135 - ENHANCE: Define struct pam_repository and PAM_REPOSITORY (from
136   Solaris 9).
137
138 - ENHANCE: Flesh out the pam(3) man page.
139
140 - ENHANCE: Add an openpam(3) page with cross-references to all the
141   documented OpenPAM API extensions.
142
143 - ENHANCE: Add a pam_conv(3) man page describing the conversation
144   system.
145
146 - ENHANCE: Improved sample application.
147
148 - ENHANCE: Added sample pam_unix module.
149
150 - BUGFIX: Various documentation nits.
151============================================================================
152OpenPAM Cinquefoil                                              2002-05-24
153
154 - BUGFIX: Various warnings uncovered by gcc 3.1.
155
156 - ENHANCE: Add a null conversation function, openpam_nullconv(3).
157
158 - BUGFIX: Initialize the "other" chain to all zeroes.
159
160 - ENHANCE: Document openpam_ttyconv(3).
161============================================================================
162OpenPAM Cinnamon                                                2002-05-02
163
164 - ENHANCE: Add a null conversation function, openpam_nullconv().
165
166 - BUGFIX: Various markup bugs in the documentation.
167
168 - BUGFIX: Document <security/openpam.h>.
169
170 - BUGFIX: Duplicate expansion of openpam_log() macro arguments.
171
172 - ENHANCE: Restructure the policy-loading code and align our use of
173   the "other" policy with Solaris and Linux-PAM.
174
175 - ENHANCE: Log dlopen() and dlsym() failures.
176
177 - ENHANCE: In openpam_ttyconv(), emit a newline after error and info
178   messages unless the message contains one already.
179
180 - BUGFIX: In pam_vprompt(), initialize the response pointer to NULL
181   so we can detect whether the conversation function touched it.
182============================================================================
183OpenPAM Cineraria                                               2002-04-14
184
185 - BUGFIX: Fix confusion between token and prompt in
186   pam_get_authtok(3).
187
188 - ENHANCE: Improved documentation.
189
190 - ENHANCE: Adopt the same preprocessor tricks that were used in
191   FreeBSD's version of Linux-PAM to simplify static linking without
192   requiring dummy primitives.
193
194 - ENHANCE: Move the policy-loading code out of pam_start.c.
195
196 - BUGFIX: Fix typo in one of the versions of the openpam_log macro.
197
198 - ENHANCE: Add versioning macros.
199============================================================================
200OpenPAM Cinchona                                                2002-04-08
201
202 - ENHANCE: Improved documentation for several API functions.
203
204 - BUGFIX: Fix bug in pam_set_data() that would result in corruption
205   of the module data list.
206
207 - BUGFIX: Allocate the correct amount of memory for the environment
208   list in pam_putenv().
209
210 - ENHANCE: Change pam_get_authtok()'s prototype so the caller can
211   specify what token it wants.  Also introduce PAM_OLDAUTHTOK_PROMPT.
212
213 - BUGFIX: Plug memory leak in pam_get_user() / pam_get_authtok(), and
214   reduce differences between these very similar functions.
215
216 - ENHANCE: Check flags carefully in pam_authenticate() and
217   pam_chauthtok().
218
219 - BUGFIX: Fix bugs in portability code; libpam now builds on NetBSD.
220
221 - ENHANCE: In pam_get_authtok(), if PAM_OLDAUTHTOK is set, we're
222   asked for PAM_AUTHTOK, and we have to prompt the user, prompt her
223   twice and compare the responses.
224
225 - ENHANCE: Add openpam_{borrow,restore}_cred(), for temporarily
226   switching to user credentials.
227
228 - ENHANCE: Add openpam_free_data(), a generic cleanup function for
229   pam_set_data() consumers.
230============================================================================
231OpenPAM Centaury                                                2002-03-14
232
233 - BUGFIX: Add missing #include <string.h> to openpam_log.c.
234
235 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/.  XSSO uses
236   the former, but Solaris and Linux-PAM use the latter.
237
238 - BUGFIX: The dynamic loader and the module cache contained a number
239   of bugs which would cause a segmentation fault if pam_start(3) was
240   called again after pam_end(3), as happens in login(1), xdm(1) etc.
241   after a failed login.
242
243 - BUGFIX: Refer to a module by the name used in the policy file, even
244   if the module that was actually loaded was versioned.
245
246 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG.
247============================================================================
248OpenPAM Celandine                                               2002-03-05
249
250 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok().
251
252 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK
253   flag set, then with the PAM_UPDATE_AUTHTOK flag set.
254
255 - BUGFIX: Failure of a "sufficient" module should not terminate the
256   passwd chain if the PAM_PRELIM_CHECK flag is set.
257
258 - BUGFIX: Clear PAM_AUTHTOK after running the service modules.
259
260 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK
261   or PAM_UPDATE_AUTHTOK flags themselves.
262
263 - BUGFIX: openpam_set_option() did not support changing the value of
264   an existing option.
265
266 - ENHANCE: Add support for module versioning.  OpenPAM will prefer a
267   module with the same version number as the library itself to one
268   with no version number at all.
269============================================================================
270OpenPAM Cantaloupe                                              2002-02-22
271
272 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid
273   argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures.
274
275 - ENHANCE: Add in-line documentation in most source files, and a Perl
276   script that generates mdoc code from that.
277
278 - BUGFIX: The environment list was not properly NULL-terminated.
279
280 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt
281   specified by the module.
282
283 - BUGFIX: PAM_NUM_ITEMS was set too low.  It has been moved to
284   pam_constants.h to avoid it going stale again.
285
286 - ENHANCE: Move all code related to static modules into a separate
287   file.
288
289 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the
290   user, and supports setting a timeout (which defaults to off).
291
292 - BUGFIX: Some manual pages referenced XSSO even though they
293   documented OpenPAM-specific functions.
294
295 - ENHANCE: Added openpam_get_option() and openpam_set_option().
296
297 - ENHANCE: openpam_get_authtok() now respects the echo_pass,
298   try_first_pass, and use_first_pass options.
299============================================================================
300OpenPAM Caliopsis                                               2002-02-13
301
302Fixed a number of bugs in the previous release, including:
303  - a number of bugs in and related to pam_[gs]et_item(3)
304  - off-by-one bug in pam_start.c would trim last character off certain
305    configuration lines
306  - incorrect ordering of an array in openpam_load.c would cause service
307    module functions to get mixed up
308  - missing 'continue' in openpam_dispatch.c caused successes to be
309    counted as failures
310============================================================================
311OpenPAM Calamite                                                2002-02-09
312
313First (beta) release.
314============================================================================
315$Id: HISTORY 320 2006-02-16 20:33:19Z des $
Note: See TracBrowser for help on using the repository browser.