Cyrus SASL 1.x Release Notes

New in 1.5.26

  • Interoperability bug in DIGEST-MD5’s layers was fixed.

  • DIGEST-MD5’s DES layer has been disabled until the interoperability can be worked out.

New in 1.5.25

  • The DIGEST-MD5 plugin now includes an implementation of RC4, since it’s a lot easier to get working than interfacing with OpenSSL.

  • A delayed-open plugin mode has been implemented, but not yet documented.

New in 1.5.24

  • be a little paranoid about what we give PAM

  • small bugfixes

New in 1.5.22

  • fixed some DIGEST-MD5 buglets

  • fixed serious bug that a client could avoid the authorization callback

  • added pwcheck method “sia” for Digital Unix

  • now should try libdb-3 before libdb.

New in 1.5.21

  • build process fixes

New in 1.5.20

  • bug fixes

  • LOGIN mechanism has a compatibility tweak

New in 1.5.19

  • Initial srp work

  • Programmers Guide more complete

  • bug fixes (of course)

New in 1.5.18

  • javasasl library in conformance with internet draft

  • man pages for all functions written

  • bug fixes (of course)

New in 1.5.17

  • give application authentication name and realm more uniformly

  • sasldblistusers utility to list users in sasldb

  • memory leaks eliminated; boundary cases tested

New in 1.5.16

  • pwcheck_method now defaults to sasldb. READ UPGRADE INSTRUCTIONS IN README

  • sanity checking inputs throughout the code.

  • Unsupported LOGIN plugin added to the Windows build.

  • calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the old ticket file before returning.

New in 1.5.15

  • configure now correctly detects Berkeley DB 3.x (Claus Assmann).

New in 1.5.14

  • Upgraded to libtool 1.3.4.

  • External SSF handled more uniformly, and handle min/max SSF requests correctly.

  • Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>. Please don’t enable it unless you know you need it.

  • HP/UX support, contributed by Claus Assmann.

New in 1.5.13

  • Sanity check to make sure there’s at least something in sasldb READ UPGRADE INSTRUCTIONS IN README

  • Fixes to how external layers are handled (some fixes by Alexey Melnikov)

  • Berkeley DB 3.x support contributed by Greg Shapiro

  • Additional pwcheck fixes (Joe Hohertz)

  • Fixed Heimdal krb5 configure checks

  • other random fixes

New in 1.5.12

  • lots of bugfixes

  • DIGEST-MD5 more in conformance with spec

  • support for Berkeley DB

  • support for OpenSSL’s version of RC4

New in 1.5.11

  • bugfix in realm support for DIGEST-MD5

New in 1.5.10

  • DIGEST-MD5 layer support

  • dbconversion utility added

New in 1.5.9

  • Bug fixes

  • More win32 support

  • Realm support in the database (database format changed again, sorry) Other realm support in plugins; need to document it

  • Preliminary code for pwcheck added; not yet tested (and probably not working)

  • config stuff should be less case/whitespace sensitive

  • more error conditions logged

New in 1.5.5

  • Bug fixes

  • sasldb plaintext support (database format changed!!!)

  • Handles multiple realms in DIGEST

  • New Windows compatibility (tested!)

New in 1.5.3

  • Bug fixes

  • Tested GSSAPI & added layers

  • Some changes for Windows compatibility (next release)

New in 1.5.2

  • A few bug fixes

  • Better portability

  • Upgraded libtool

New in 1.5.0

  • Lots of bug fixes

  • A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!)

  • Digest authentication works

  • Configuration file

  • Some more documentation (doc/programming)

  • Code cleanup

New in 1.4.1

  • Tested kerberos4, cram, plain, and anonymous fairly extensively

  • Many bugs fixed

  • Created sample programs

  • Added digest

  • Prototype credential API

New in 1.3b1

  • Added saslpasswd for setting sasl passwords

  • Added sfsasl for people using sfio

  • Lots of bug fixes

New in 1.2b3

  • Slightly better documentation, easier compilation

  • Plain now understands authorization and callbacks

New in 1.2b2

  • Win32 support

  • Fixes to anonymous, kerberos mechs

  • Some signed lengths in the API changed to unsigned

New in 1.2b1

  • Lots of bug fixes

  • GSSAPI

  • Cleaner getopt interface

  • Cleaner plugin callback lookup interface

  • Global inits now take callback list, not just a sasl_getopt_t

  • Preliminary Java support

  • Authentication database hook

  • Default AuthDB routines moved from mechanisms to library

  • Logging hook

  • Default syslog-based logging hook in library

  • Preliminary plaintext transition for CRAM/SCRAM