1OpenPAM Daffodil 2003-01-06 2 3 - ENHANCE: Document dependency on <sys/types.h> (for size_t) 4 5 - ENHANCE: Slightly improve error detection in openpam_ttyconv(). 6 7 - BUGFIX: Fix several typos in debugging macros. 8============================================================================ 9OpenPAM Cyclamen 2002-12-12 10 11 - ENHANCE: Improve recursion detection in openpam_dispatch(). 12 13 - ENHANCE: Add debugging messages at entry and exit points of most 14 functions. 15 16 - ENHANCE: Fix some minor style issues. 17 18 - BUGFIX: Add default cases to the switches in openpam_log.c. 19 20 - ENHANCE: Add /usr/local/etc/pam.conf to policy search path. 21 22 - BUGFIX: In openpam_ttyconv(3), print the prompt to stdout rather 23 than stderr. 24============================================================================ 25OpenPAM Citronella 2002-06-30 26 27 - ENHANCE: Add the "binding" control flag (from Solaris 9). 28 29 - ENHANCE: Define struct pam_repository and PAM_REPOSITORY (from 30 Solaris 9). 31 32 - ENHANCE: Flesh out the pam(3) man page. 33 34 - ENHANCE: Add an openpam(3) page with cross-references to all the 35 documented OpenPAM API extensions. 36 37 - ENHANCE: Add a pam_conv(3) man page describing the conversation 38 system. 39 40 - ENHANCE: Improved sample application. 41 42 - ENHANCE: Added sample pam_unix module. 43 44 - BUGFIX: Various documentation nits. 45============================================================================ 46OpenPAM Cinquefoil 2002-05-24 47 48 - BUGFIX: Various warnings uncovered by gcc 3.1. 49 50 - ENHANCE: Add a null conversation function, openpam_nullconv(3). 51 52 - BUGFIX: Initialize the "other" chain to all zeroes. 53 54 - ENHANCE: Document openpam_ttyconv(3). 55============================================================================ 56OpenPAM Cinnamon 2002-05-02 57 58 - ENHANCE: Add a null conversation function, openpam_nullconv(). 59 60 - BUGFIX: Various markup bugs in the documentation. 61 62 - BUGFIX: Document <security/openpam.h>. 63 64 - BUGFIX: Duplicate expansion of openpam_log() macro arguments. 65 66 - ENHANCE: Restructure the policy-loading code and align our use of 67 the "other" policy with Solaris and Linux-PAM. 68 69 - ENHANCE: Log dlopen() and dlsym() failures. 70 71 - ENHANCE: In openpam_ttyconv(), emit a newline after error and info 72 messages unless the message contains one already. 73 74 - BUGFIX: In pam_vprompt(), initialize the response pointer to NULL 75 so we can detect whether the conversation function touched it. 76============================================================================ 77OpenPAM Cineraria 2002-04-14 78 79 - BUGFIX: Fix confusion between token and prompt in 80 pam_get_authtok(3). 81 82 - ENHANCE: Improved documentation. 83 84 - ENHANCE: Adopt the same preprocessor tricks that were used in 85 FreeBSD's version of Linux-PAM to simplify static linking without 86 requiring dummy primitives. 87 88 - ENHANCE: Move the policy-loading code out of pam_start.c. 89 90 - BUGFIX: Fix typo in one of the versions of the openpam_log macro. 91 92 - ENHANCE: Add versioning macros. 93============================================================================ 94OpenPAM Cinchona 2002-04-08 95 96 - ENHANCE: Improved documentation for several API functions. 97 98 - BUGFIX: Fix bug in pam_set_data() that would result in corruption 99 of the module data list. 100 101 - BUGFIX: Allocate the correct amount of memory for the environment 102 list in pam_putenv(). 103 104 - ENHANCE: Change pam_get_authtok()'s prototype so the caller can 105 specify what token it wants. Also introduce PAM_OLDAUTHTOK_PROMPT. 106 107 - BUGFIX: Plug memory leak in pam_get_user() / pam_get_authtok(), and 108 reduce differences between these very similar functions. 109 110 - ENHANCE: Check flags carefully in pam_authenticate() and 111 pam_chauthtok(). 112 113 - BUGFIX: Fix bugs in portability code; libpam now builds on NetBSD. 114 115 - ENHANCE: In pam_get_authtok(), if PAM_OLDAUTHTOK is set, we're 116 asked for PAM_AUTHTOK, and we have to prompt the user, prompt her 117 twice and compare the responses. 118 119 - ENHANCE: Add openpam_{borrow,restore}_cred(), for temporarily 120 switching to user credentials. 121 122 - ENHANCE: Add openpam_free_data(), a generic cleanup function for 123 pam_set_data() consumers. 124============================================================================ 125OpenPAM Centaury 2002-03-14 126 127 - BUGFIX: Add missing #include <string.h> to openpam_log.c. 128 129 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/. XSSO uses 130 the former, but Solaris and Linux-PAM use the latter. 131 132 - BUGFIX: The dynamic loader and the module cache contained a number 133 of bugs which would cause a segmentation fault if pam_start(3) was 134 called again after pam_end(3), as happens in login(1), xdm(1) etc. 135 after a failed login. 136 137 - BUGFIX: Refer to a module by the name used in the policy file, even 138 if the module that was actually loaded was versioned. 139 140 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG. 141============================================================================ 142OpenPAM Celandine 2002-03-05 143 144 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok(). 145 146 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK 147 flag set, then with the PAM_UPDATE_AUTHTOK flag set. 148 149 - BUGFIX: Failure of a "sufficient" module should not terminate the 150 passwd chain if the PAM_PRELIM_CHECK flag is set. 151 152 - BUGFIX: Clear PAM_AUTHTOK after running the service modules. 153 154 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK 155 or PAM_UPDATE_AUTHTOK flags themselves. 156 157 - BUGFIX: openpam_set_option() did not support changing the value of 158 an existing option. 159 160 - ENHANCE: Add support for module versioning. OpenPAM will prefer a 161 module with the same version number as the library itself to one 162 with no version number at all. 163============================================================================ 164OpenPAM Cantaloupe 2002-02-22 165 166 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid 167 argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures. 168 169 - ENHANCE: Add in-line documentation in most source files, and a Perl 170 script that generates mdoc code from that. 171 172 - BUGFIX: The environment list was not properly NULL-terminated. 173 174 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt 175 specified by the module. 176 177 - BUGFIX: PAM_NUM_ITEMS was set too low. It has been moved to 178 pam_constants.h to avoid it going stale again. 179 180 - ENHANCE: Move all code related to static modules into a separate 181 file. 182 183 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the 184 user, and supports setting a timeout (which defaults to off). 185 186 - BUGFIX: Some manual pages referenced XSSO even though they 187 documented OpenPAM-specific functions. 188 189 - ENHANCE: Added openpam_get_option() and openpam_set_option(). 190 191 - ENHANCE: openpam_get_authtok() now respects the echo_pass, 192 try_first_pass, and use_first_pass options. 193============================================================================ 194OpenPAM Caliopsis 2002-02-13 195 196Fixed a number of bugs in the previous release, including: 197 - a number of bugs in and related to pam_[gs]et_item(3) 198 - off-by-one bug in pam_start.c would trim last character off certain 199 configuration lines 200 - incorrect ordering of an array in openpam_load.c would cause service 201 module functions to get mixed up 202 - missing 'continue' in openpam_dispatch.c caused successes to be 203 counted as failures 204============================================================================ 205OpenPAM Calamite 2002-02-09 206 207First (beta) release. 208============================================================================ 209$P4: //depot/projects/openpam/HISTORY#17 $ 210