Kerberos for Macintosh 4.0 Released
mjv at MIT.EDU
Fri Feb 22 15:46:00 EST 2002
The MIT MacDev team is pleased to announce the availability of
Kerberos for Macintosh 4.0, final release. This release is available
from the MIT Kerberos site:
<http://mit.edu/kerberos/www/> Follow the "Getting Kerberos from MIT" link.
All feedback and bug reports for Kerberos for Macintosh 4.0 should be
sent to <mailto:krbdev at mit.edu>
Kerberos for Macintosh 4.0 expands and improves native support for
Mac OS X as well as including the new UI elements for Mac OS 9
introduced in KfM 3.5.
Kerberos for Macintosh 4.0 requires a Power Macintosh with Mac OS X
10.1.2 or later for the Mac OS X version, or Mac OS 8.1 or later for
the Mac OS 8 & 9 version.
This is a final release, and does not expire.
Changes since Kerberos For Macintosh 4.0fc1
* Mac OS X: Fixed UID security hole where other users could see your
tickets if they SSH into your Macintosh.
* Mac OS X: Fixed memory leak in CCacheClassicServer.app
* Mac OS X: Removed nonfunctional help button from Kerberos Login dialog
* Mac OS X: Installer now enforces Mac OS X 10.1.2 minimum requirement
* Mac OS X/9: Kerberos Login dialog now returns correct error messages again.
* Mac OS X/9: Classic ticket sharing is disabled when KfM is
installed only on the Classic system and not OS X.
* Mac OS X/9: Classic ticket sharing is disabled when the versions of
KfM on OS X and the Classic system do not match.
* Mac OS X/9: Fixed various bugs in Classic ticket sharing AE handling
* Mac OS X/9: Kerberos Menu 'Open Kerberos Control Panel' item now
enabled under Classic
* Mac OS 8: Now works under Mac OS 8.1 again.
If you built an application that linked against the /usr/lib dylibs
in KfM 4.0b2 or earlier, or the ones included with Mac OS X 10.1, you
will need to re-link your application to work with the KfM 4.0 dylibs.
Ticket Sharing Between Mac OS X and Classic
In order for Kerberos tickets to be shared between Mac OS X and
Classic, the same version of KfM 4.0 must be installed on both the OS
X and Classic systems. When updating from a previous release, you
should install the Classic KfM first, then the OS X KfM to prevent
When an application running under Classic needs to display the
Kerberos Login dialog, the Mac OS X dialog will appear.
The Mac OS 9 version of KfM 4.0 detects whether it is running under
Mac OS X/Classic or regular Mac OS 9.x and automatically enables
support for ticket sharing when possible.
At this point in time, this release is available as a single package
which includes both installers and SDKs. The installers install
binaries for people to use with their applications in their
environments. The SDKs are for application and library programmers to
add Kerberos functionality to their code or update to newer versions
of the various Kerberos APIs.
We will be releasing separate binaries and installer sources at a later date.
"One chapter closes, another opens."
Marshall Vale | mjv at mit.edu | Information Systems
MacDev Control Panel | Massachusetts Institute of Technology
More information about the krbdev