svn rev #24586: branches/krb5-1-9/ src/

[tlyu@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=24586
Commit By: tlyu
Log Message:
README and patchlevel.h for krb5-1.9


Changed Files:
U   branches/krb5-1-9/README
U   branches/krb5-1-9/src/patchlevel.h
Modified: branches/krb5-1-9/README
===================================================================
--- branches/krb5-1-9/README	2010-12-22 19:10:27 UTC (rev 24585)
+++ branches/krb5-1-9/README	2010-12-22 20:36:11 UTC (rev 24586)
@@ -60,51 +60,74 @@
 Major changes in 1.9
 --------------------
 
+Additional background information on these changes may be found at
+
+    http://k5wiki.kerberos.org/wiki/Release_1.9
+
+and
+
+    http://k5wiki.kerberos.org/wiki/Category:Release_1.9_projects
+
 Code quality:
 
-* Fix MITKRB5-SA-2010-007 checksum vulnerabilities (CVE-2010-1324 and others)
-* Python-based testing framework
-* DAL cleanup
+* Fix MITKRB5-SA-2010-007 checksum vulnerabilities (CVE-2010-1324 and
+  others).
 
+* Add a Python-based testing framework.
+
+* Perform DAL cleanup.
+
 Developer experience:
 
-* NSS crypto back end
-* PRNG modularity
-* Fortuna-like PRNG
+* Add NSS crypto back end.
 
+* Improve PRNG modularity.
+
+* Add a Fortuna-like PRNG back end.
+
 Performance:
 
 * Account lockout performance improvements -- allow disabling of some
   account lockout functionality to reduce the number of write
   operations to the database during authentication
 
+* Add support for multiple KDC worker processes.
+
 Administrator experience:
 
-* Trace logging -- for easier diagnosis of configuration problems
+* Add Trace logging support to ease the diagnosis of configuration
+  problems.
 
-* Support for purging old keys (e.g. from "cpw -randkey -keepold")
+* Add support for purging old keys (e.g. from "cpw -randkey -keepold").
 
-* Plugin interface for password sync -- based on proposed patches by
-  Russ Allbery that support his krb5-sync package
+* Add plugin interface for password sync -- based on proposed patches
+  by Russ Allbery that support his krb5-sync package
 
-* Plugin interface for password quality checks -- enables pluggable
-  password quality checks similar to Russ Allbery's krb5-strength
-  package
+* Add plugin interface for password quality checks -- enables
+  pluggable password quality checks similar to Russ Allbery's
+  krb5-strength package.
 
-* Configuration file validator
+* Add a configuration file validator script.
 
-* KDC support for SecurID preauthentication -- This is the old SAM-2
-  protocol, implemented to support existing deployments, not the
+* Add KDC support for SecurID preauthentication -- this is the old
+  SAM-2 protocol, implemented to support existing deployments, not the
   in-progress FAST-OTP work.
 
+* Add "cheat" capability for kinit when running on a KDC host.
+
 Protocol evolution:
 
-* IAKERB -- a mechanism for tunneling Kerberos KDC transactions over
-  GSS-API, enabling clients to authenticate to services even when the
-  clients cannot directly reach the KDC that serves the services.
+* Add support for IAKERB -- a mechanism for tunneling Kerberos KDC
+  transactions over GSS-API, enabling clients to authenticate to
+  services even when the clients cannot directly reach the KDC that
+  serves the services.
 
-* Camellia encryption (experimental; disabled by default)
+* Add support for Camellia encryption (experimental; disabled by
+  default).
 
+* Add GSS-API support for implementors of the SASL GS2 bridge
+  mechanism.
+
 krb5-1.9 changes by ticket ID
 -----------------------------
 
@@ -157,6 +180,7 @@
 6791    kadm5_hook: new plugin interface
 6792    Implement k5login_directory and k5login_authoritative options
 6793    acquire_init_cred leaks interned name
+6794    krb5.conf manpage missing reference to rdns setting
 6795    Propagate modprinc -unlock from master to slave KDCs
 6796    segfault due to uninitialized variable in S4U
 6799    Performance issue in LDAP policy fetch

Modified: branches/krb5-1-9/src/patchlevel.h
===================================================================
--- branches/krb5-1-9/src/patchlevel.h	2010-12-22 19:10:27 UTC (rev 24585)
+++ branches/krb5-1-9/src/patchlevel.h	2010-12-22 20:36:11 UTC (rev 24586)
@@ -53,6 +53,6 @@
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 9
 #define KRB5_PATCHLEVEL 0
-#define KRB5_RELTAIL "beta3-postrelease"
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "branches/krb5-1-9"
+#define KRB5_RELTAG "tags/krb5-1-9-final"