Cyrus SASL 1.x Release Notes

New in 1.5.26

  • Interoperability bug in DIGEST-MD5’s layers was fixed.
  • DIGEST-MD5’s DES layer has been disabled until the interoperability can be worked out.

New in 1.5.25

  • The DIGEST-MD5 plugin now includes an implementation of RC4, since it’s a lot easier to get working than interfacing with OpenSSL.
  • A delayed-open plugin mode has been implemented, but not yet documented.

New in 1.5.24

  • be a little paranoid about what we give PAM
  • small bugfixes

New in 1.5.22

  • fixed some DIGEST-MD5 buglets
  • fixed serious bug that a client could avoid the authorization callback
  • added pwcheck method “sia” for Digital Unix
  • now should try libdb-3 before libdb.

New in 1.5.21

  • build process fixes

New in 1.5.20

  • bug fixes
  • LOGIN mechanism has a compatibility tweak

New in 1.5.19

  • Initial srp work
  • Programmers Guide more complete
  • bug fixes (of course)

New in 1.5.18

  • javasasl library in conformance with internet draft
  • man pages for all functions written
  • bug fixes (of course)

New in 1.5.17

  • give application authentication name and realm more uniformly
  • sasldblistusers utility to list users in sasldb
  • memory leaks eliminated; boundary cases tested

New in 1.5.16

  • pwcheck_method now defaults to sasldb. READ UPGRADE INSTRUCTIONS IN README
  • sanity checking inputs throughout the code.
  • Unsupported LOGIN plugin added to the Windows build.
  • calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the old ticket file before returning.

New in 1.5.15

  • configure now correctly detects Berkeley DB 3.x (Claus Assmann).

New in 1.5.14

  • Upgraded to libtool 1.3.4.
  • External SSF handled more uniformly, and handle min/max SSF requests correctly.
  • Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>. Please don’t enable it unless you know you need it.
  • HP/UX support, contributed by Claus Assmann.

New in 1.5.13

  • Sanity check to make sure there’s at least something in sasldb READ UPGRADE INSTRUCTIONS IN README
  • Fixes to how external layers are handled (some fixes by Alexey Melnikov)
  • Berkeley DB 3.x support contributed by Greg Shapiro
  • Additional pwcheck fixes (Joe Hohertz)
  • Fixed Heimdal krb5 configure checks
  • other random fixes

New in 1.5.12

  • lots of bugfixes
  • DIGEST-MD5 more in conformance with spec
  • support for Berkeley DB
  • support for OpenSSL’s version of RC4

New in 1.5.11

  • bugfix in realm support for DIGEST-MD5

New in 1.5.10

  • DIGEST-MD5 layer support
  • dbconversion utility added

New in 1.5.9

  • Bug fixes
  • More win32 support
  • Realm support in the database (database format changed again, sorry) Other realm support in plugins; need to document it
  • Preliminary code for pwcheck added; not yet tested (and probably not working)
  • config stuff should be less case/whitespace sensitive
  • more error conditions logged

New in 1.5.5

  • Bug fixes
  • sasldb plaintext support (database format changed!!!)
  • Handles multiple realms in DIGEST
  • New Windows compatibility (tested!)

New in 1.5.3

  • Bug fixes
  • Tested GSSAPI & added layers
  • Some changes for Windows compatibility (next release)

New in 1.5.2

  • A few bug fixes
  • Better portability
  • Upgraded libtool

New in 1.5.0

  • Lots of bug fixes
  • A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!)
  • Digest authentication works
  • Configuration file
  • Some more documentation (doc/programming)
  • Code cleanup

New in 1.4.1

  • Tested kerberos4, cram, plain, and anonymous fairly extensively
  • Many bugs fixed
  • Created sample programs
  • Added digest
  • Prototype credential API

New in 1.3b1

  • Added saslpasswd for setting sasl passwords
  • Added sfsasl for people using sfio
  • Lots of bug fixes

New in 1.2b3

  • Slightly better documentation, easier compilation
  • Plain now understands authorization and callbacks

New in 1.2b2

  • Win32 support
  • Fixes to anonymous, kerberos mechs
  • Some signed lengths in the API changed to unsigned

New in 1.2b1

  • Lots of bug fixes
  • GSSAPI
  • Cleaner getopt interface
  • Cleaner plugin callback lookup interface
  • Global inits now take callback list, not just a sasl_getopt_t
  • Preliminary Java support
  • Authentication database hook
  • Default AuthDB routines moved from mechanisms to library
  • Logging hook
  • Default syslog-based logging hook in library
  • Preliminary plaintext transition for CRAM/SCRAM