Kerberos for Macintosh 4.0fc1 released

[Marshall Vale]

The MIT MacDev team is pleased to announce the availability of 
Kerberos for Macintosh 4.0fc1. This release is available from the MIT 
Kerberos site:

<http://mit.edu/kerberos/www/>  Follow the "Getting Kerberos from MIT" link.

All feedback and bug reports for Kerberos for Macintosh 4.0fc1 should 
be sent to <mailto:krbdev at mit.edu>

Kerberos for Macintosh 4.0 has now reached the final candidate stage, 
which means the end of the testing cycle is near.  If you discover 
any problems, please report them *immediately*.

Overview
--------
Kerberos for Macintosh 4.0 expands and improves native support for 
Mac OS X as well as including the new UI elements for Mac OS 9 
introduced in KfM 3.5.

NOTE: This is a time-limited test release of Kerberos for Macintosh. 
It will expire after April 4, 2002. An updated release should be 
available before April 4, 2002, check 
<http://mit.edu/macdev/www/kerberos.html> at that time.

Kerberos for Macintosh 4.0fc1 requires a Power Macintosh with Mac OS 
X 10.1.2 or later for the Mac OS X version, or Mac OS 8.1 or later 
for the Mac OS 8 & 9 version.

The installer read mes are slightly out of date and contain a few 
inaccuracies: Mac OS X 10.1.2 or later is now required for KfM 4.0 on 
OS X.  Installs on UFS volumes are now supported on OS X.

Changes since Kerberos For Macintosh 4.0b7
------------------------------------------
* Mac OS X: now requires Mac OS X 10.1.2 or later
* Mac OS X: Kerberos Login dialog floats above all windows
* Mac OS X: Authenticator will now get v4 tickets for non-admin users
* Mac OS X: Kerberos application icon now distinctly different from 
the ticket status icons
* Mac OS X: New "show ticket list window at startup" preference in 
Kerberos application
* Mac OS X: Installer installs /usr/include headers again (only if OS 
X developer tools are installed)
* Mac OS X: Installer now forces restart at end of the install
* Mac OS X/9: Classic ticket sharing won't get out of sync with OS X
* Mac OS X/9: Auto-detect string-to-key type
* Mac OS X/9: Spinning cursor displayed while waiting for OS X 
Kerberos Login dialog to come up from Classic
* Mac OS X/9: Applications that immediately request a Kerberos login 
will display login dialog when launching Classic with the app
* Mac OS X/9: Applications that immediately request a Kerberos login 
don't prompt unnecessarily for tickets when launching Classic with 
the app
* Mac OS X/9: krb_get_tf_realm() doesn't crash when there's no TGT 
(instead returns "no ticket" error)
* Mac OS X/9: get_ad_tkt() and krb_get_ticket_for_service() now 
display Kerberos Login dialog
* Mac OS X/9: krb_get_cred() will not display Kerberos Login dialog 
when asking for a TGT
* Mac OS X/9: Fixed profile library handling of unreadable files
* Mac OS X/9: Fixed CFM version numbers of UtilitiesLib and 
MoreFilesLib (back to being compatible with previous releases)
* Mac OS X/9: Classic Idle event handlers called by OS X Kerberos Login dialog
* Mac OS X/9: Kerberos Login dialog slider now supports lifetimes > 
99 hours and ranges > 1000 hours

Known problems in this release
------------------------------
* Mac OS 8: Not functional on Mac OS 8.1
* Mac OS X: Installer does not enforce 10.1.2 minimum requirement
* Mac OS X/9: When acquiring initial tickets in a realm with Kerberos 
4 support, all
Kerberos 4 errors are reported at "password incorrect"


We have added extra debugging code that may cause asserts or errors 
to happen when using the Classic/Mac OS X ticket sharing feature. 
Please report any errors you may receive with a description of what 
you were doing when they happened to aid us in debugging.

If you built an application that linked against the /usr/lib dylibs 
in KfM 4.0b2 or earlier, or the ones included with Mac OS X 10.1, you 
will need to re-link your application to work with the KfM 4.0b3 
dylibs. Your application will no longer work with pre-4.0b3 releases, 
however.

Ticket Sharing Between Mac OS X and Classic
-------------------------------------------
In order for Kerberos tickets to be shared between Mac OS X and 
Classic, the same version of KfM 4.0 must be installed on both the OS 
X and Classic systems.  When updating from a previous release, you 
should install the Classic KfM first, then the OS X KfM to prevent 
possible conflicts.

When an application running under Classic needs to display the 
Kerberos Login dialog, the Mac OS X dialog will appear.

The Mac OS 9 version of KfM 4.0 detects whether it is running under 
Mac OS X/Classic or regular Mac OS 9.x and automatically enables 
support for ticket sharing when possible.

Distribution Info
-----------------
At this point in time, this release is available as a single package 
which includes both installers and SDKs. The installers install 
binaries for people to use with their applications in their 
environments. The SDKs are for application and library programmers to 
add Kerberos functionality to their code or update to newer versions 
of the various Kerberos APIs. Source code for this release will not 
be made available.