Cyrus SASL 1.x Release Notes¶
New in 1.5.26¶
- Interoperability bug in DIGEST-MD5’s layers was fixed. 
- DIGEST-MD5’s DES layer has been disabled until the interoperability can be worked out. 
New in 1.5.25¶
- The DIGEST-MD5 plugin now includes an implementation of RC4, since it’s a lot easier to get working than interfacing with OpenSSL. 
- A delayed-open plugin mode has been implemented, but not yet documented. 
New in 1.5.24¶
- be a little paranoid about what we give PAM 
- small bugfixes 
New in 1.5.22¶
- fixed some DIGEST-MD5 buglets 
- fixed serious bug that a client could avoid the authorization callback 
- added pwcheck method “sia” for Digital Unix 
- now should try libdb-3 before libdb. 
New in 1.5.21¶
- build process fixes 
New in 1.5.20¶
- bug fixes 
- LOGIN mechanism has a compatibility tweak 
New in 1.5.19¶
- Initial srp work 
- Programmers Guide more complete 
- bug fixes (of course) 
New in 1.5.18¶
- javasasl library in conformance with internet draft 
- man pages for all functions written 
- bug fixes (of course) 
New in 1.5.17¶
- give application authentication name and realm more uniformly 
- sasldblistusers utility to list users in sasldb 
- memory leaks eliminated; boundary cases tested 
New in 1.5.16¶
- pwcheck_method now defaults to sasldb. READ UPGRADE INSTRUCTIONS IN README 
- sanity checking inputs throughout the code. 
- Unsupported LOGIN plugin added to the Windows build. 
- calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the old ticket file before returning. 
New in 1.5.15¶
- configure now correctly detects Berkeley DB 3.x (Claus Assmann). 
New in 1.5.14¶
- Upgraded to libtool 1.3.4. 
- External SSF handled more uniformly, and handle min/max SSF requests correctly. 
- Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>. Please don’t enable it unless you know you need it. 
- HP/UX support, contributed by Claus Assmann. 
New in 1.5.13¶
- Sanity check to make sure there’s at least something in sasldb READ UPGRADE INSTRUCTIONS IN README 
- Fixes to how external layers are handled (some fixes by Alexey Melnikov) 
- Berkeley DB 3.x support contributed by Greg Shapiro 
- Additional pwcheck fixes (Joe Hohertz) 
- Fixed Heimdal krb5 configure checks 
- other random fixes 
New in 1.5.12¶
- lots of bugfixes 
- DIGEST-MD5 more in conformance with spec 
- support for Berkeley DB 
- support for OpenSSL’s version of RC4 
New in 1.5.11¶
- bugfix in realm support for DIGEST-MD5 
New in 1.5.10¶
- DIGEST-MD5 layer support 
- dbconversion utility added 
New in 1.5.9¶
- Bug fixes 
- More win32 support 
- Realm support in the database (database format changed again, sorry) Other realm support in plugins; need to document it 
- Preliminary code for pwcheck added; not yet tested (and probably not working) 
- config stuff should be less case/whitespace sensitive 
- more error conditions logged 
New in 1.5.5¶
- Bug fixes 
- sasldb plaintext support (database format changed!!!) 
- Handles multiple realms in DIGEST 
- New Windows compatibility (tested!) 
New in 1.5.3¶
- Bug fixes 
- Tested GSSAPI & added layers 
- Some changes for Windows compatibility (next release) 
New in 1.5.2¶
- A few bug fixes 
- Better portability 
- Upgraded libtool 
New in 1.5.0¶
- Lots of bug fixes 
- A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!) 
- Digest authentication works 
- Configuration file 
- Some more documentation (doc/programming) 
- Code cleanup 
New in 1.4.1¶
- Tested kerberos4, cram, plain, and anonymous fairly extensively 
- Many bugs fixed 
- Created sample programs 
- Added digest 
- Prototype credential API 
New in 1.3b1¶
- Added saslpasswd for setting sasl passwords 
- Added sfsasl for people using sfio 
- Lots of bug fixes 
New in 1.2b3¶
- Slightly better documentation, easier compilation 
- Plain now understands authorization and callbacks 
New in 1.2b2¶
- Win32 support 
- Fixes to anonymous, kerberos mechs 
- Some signed lengths in the API changed to unsigned 
New in 1.2b1¶
- Lots of bug fixes 
- GSSAPI 
- Cleaner getopt interface 
- Cleaner plugin callback lookup interface 
- Global inits now take callback list, not just a sasl_getopt_t 
- Preliminary Java support 
- Authentication database hook 
- Default AuthDB routines moved from mechanisms to library 
- Logging hook 
- Default syslog-based logging hook in library 
- Preliminary plaintext transition for CRAM/SCRAM