|
New in 2.1.11
------------- * Add the fastbind auth method to the saslauthd LDAP module. * Fix a potential memory leak in the doors version of saslauthd. * NTLM now only requires one of LM or NT, not both. * Fix a variety of Berkeley DB, LDAP, OpenSSL, and other build issues. * Win32 support compiles, but no documentation as of yet. New in 2.1.10 ------------- * Further DIGEST-MD5 DES interoperability fixes. Now works against Active Directory. * Fix some potential buffer overflows. * Misc. cleanups in the saslauthd LDAP module * Fix security properties of NTLM and EXTERNAL New in 2.1.9 ------------ * Include missing lib/staticopen.h file. New in 2.1.8 ------------ * Support for the NTLM mechanism (Ken Murchison <ken@oceana.com>) * Support libtool --enable-shared and --enable-static (Howard Chu <hyc@highlandsun.com>) * OS/390 Support (Howard Chu <hyc@highlandsun.com>) * Berkeley DB 4.1 Support (Mika Iisakkila <mika.iisakkila@pingrid.fi>) * Documentation fixes * The usual round of assorted other minor bugfixes. New in 2.1.7 ------------ * Add SASL_AUTHUSER as a parameter to sasl_getprop * Allow applications to require proxy-capable mechanisms (SASL_NEED_PROXY) * Performance improvements in our treatment of /dev/random * Removal of buggy DIGEST-MD5 reauth support. * Documentation fixes * Assorted other minor bugfixes. New in 2.1.6 ------------ * Security fix for the CRAM-MD5 plugin to check the full length of the digest string. * Return of the Experimental LDAP saslauthd module. * Addition of Experimental MySQL auxprop plugin. * Can now select multiple auxprop plugins (and a priority ordering) * Mechanism selection now includes number of security flags * Mac OS X 10.1 Fixes * Misc other minor bugfixes. New in 2.1.5 ------------ * Remove LDAP support due to copyright concerns. * Minor bugfixes. New in 2.1.4 ------------ * Enhancements and cleanup to the experimental LDAP saslauthd module (Igor Brezac <igor@ipass.net>) * Addition of a new sasl_version() API * Misc. Bugfixes New in 2.1.3-BETA ----------------- * Significant amount of plugin cleanup / standardization. A good deal of code is now shared between them. (mostly due to Ken Murchison <ken@oceana.com>) * DIGEST-MD5 now supports reauthentication. Also has a fix for DES interoperability. * saslauthd now supports the Solaris "doors" IPC method (--with-ipctype=doors) * Significant GSSAPI fixes (mostly due to Howard Chu <hyc@highlandsun.com>) * Auxprop interface now correctly deals with the * prefix indicating authid vs. authzid. (May break some incompatible auxprop plugins). * We now allow multiple pwcheck_method(s). Also you can restrict auxprop plugins to the use of a single plugin. * Added an experimental saslauthd LDAP module (Igor Brezac <igor@ipass.net>) * Removed check for db3/db.h * Misc. documentation updates. (Marshall Rose, and others) * Other misc. bugfixes. New in 2.1.2 ------------ * Mostly a minor-bugfix release * Improved documentation / cleanup of old references to obsolete pwcheck_methods * Better error reporting for auxprop password verifiers New in 2.1.1 ------------ * Many minor bugfixes throughout. * Improvements to OTP and SRP mechanisms (now compliant with draft-burdis-cat-srp-sasl-06.txt) * API additions including sasl_global_listmech, and a cleaner handling of client-first and server-last semantics (no application level changes) * Minor documentation improvements New in 2.1.0 ------------ * The Cyrus SASL library is now considered stable. It is still not backwards compatible with applications that require SASLv1. * Minor API changes occured, namely the canon_user callback interface. * saslauthd now preforks a number of processes to handle connections * Many bugfixes through the entire library. New in 2.0.5-BETA ----------------- * THIS IS A BETA-QUALITY RELEASE THAT IS NOT INTENDED FOR PRODUCTION USE. IT *WILL BREAK* ANY APPLICATION EXPECTING THE SASLv1 API. * Improved performance of security layers in KERBEROS_V4, GSSAPI, and DIGEST. * This release includes an OTP plugin that requires libopie. * SRP plugin now in alpha stage. * Includes many significant bugfixes throughout the library. New in 2.0.4-BETA ----------------- * THIS IS A BETA-QUALITY RELEASE THAT IS ONLY INTENDED FOR USE BY DEVELOPERS WHOSE APPLICATIONS MAKE USE OF THE CYRUS SASL LIBRARY. IT *WILL BREAK* ANY APPLICATION EXPECTING THE SASLv1 API. * This release now includes Mac OS 9 and Mac OS X support. * Significant new features include * DES and 3DES Encryption should now be working for DIGEST-MD5 * Improved configuration system * Improved documentation (now includes plugin writers guide) * Many other bugfixes (see ChangeLog) New in 2.0.3-BETA ----------------- * THIS IS A BETA-QUALITY RELEASE THAT IS ONLY INTENDED FOR USE BY DEVELOPERS WHOSE APPLICATIONS MAKE USE OF THE CYRUS SASL LIBRARY. IT *WILL BREAK* ANY APPLICATION EXPECTING THE SASLv1 API. * This library should be fairly close to the core features that will be released in a final version of Cyrus SASLv2. It very likely has bugs. * Major new features included in this release: - The glue code now correctly handles client-send-first and server-send-last situations based on what the protocol and mechanism each support. - The sasldb code has been extracted from the main library and now resides in a separate libsasldb.la that is available at build time. - SASLdb now supports multiple auxiliary properties, though as distributed only userPassword is implemented and used. - Much improved configure checking for various items, including Berkeley DB, Kerberos, and GSSAPI. - Better (more standard) handling of realms in DIGEST-MD5. - A new Plugin Programmer's guide. - IPv6 support. - Error reporting now works in the GSSAPI plugin. * See the ChangeLog for a more detailed list of changes. New in 2.0.2-ALPHA ------------------ * THIS IS AN ALPHA-QUALITY RELEASE THAT IS ONLY INTENDED FOR DEVELOPERS WHOSE APPLICATIONS MAKE USE OF THE CYRUS SASL LIBRARY. * This release is intended to show developers that use Cyrus SASL what direction we are planning on taking the library so that they can make plans to migrate their applications accordingly * Major new features included in this release: - Ability to compile a static library including all mechanisms. This means lower memory usage and faster mechanism loading time, but is not for everyone (or even many people). See doc/advanced.html, as well as the '--with-staticsasl' configure flag. - Man pages should now all be present and are close to being correct. - Can now build libsfsasl and the smtptest program (using the --with-sfio configure flag) - Reverted to the v1 entry points for mechanisms, to allow v1 mechanisms to fail loading cleanly. - Auxprop and canon_user plugins can now load from DSOs - Java code now compiles (but is not well tested, or up to date with the current Java API draft) - Error handling and use of sasl_errdetail has been fleshed out and should now work in most cases. * Still Coming: - Cleanup of the client-send-first and server-send-last situation - Error reporting in GSSAPI plugin - Move the sasldb code out of the main library and into plugins and utilities only. New in 2.0.0-ALPHA ------------------ * THIS IS AN ALPHA-QUALITY RELEASE THAT IS ONLY INTENDED FOR DEVELOPERS WHOSE APPLICATIONS MAKE USE OF THE CYRUS SASL LIBRARY. * This release is intended to show developers that use Cyrus SASL what direction we are planning on taking the library so that they can make plans to migrate their applications accordingly * This release implements the SASLv2 API. Some of the major improvements in the API include: - Memory management is now sane (whoever allocates the memory is responsible for freeing it) - Auxiliary Property plugin support (ability to interface with directory services as part of authentication) - Username canonification plugin support - Improved error reporting (not fully implemented in this release) - Database support has been simplified. We now maintain only a single store of plaintext passwords that is shared by all supplied plugins (using the auxiliary property interface). The new API is more fully documented in the header files sasl.h, saslplug.h saslutil.h, and prop.h. The man pages, programmers guide, and system administrators guide have also been rewritten to deal with the new API. * There is still a good amount of work to be done, and as this code is alpha quality, it has bugs, known and unknown. Please either use our bugzilla at http://bugzilla.andrew.cmu.edu, or email cyrus-bugs@andrew.cmu.edu with questions, comments, or bug reports. - Most notably, the Java bindings have not been converted to work with the new API, and thus will not compile successfully. - The current development branch with this source is in our cvs repository as the "sasl-v2-rjs3" branch of the "sasl" collection. (see http://asg.web.cmu.edu/cyrus/download/anoncvs.html for more info) |