1============================================================================ 2OpenPAM Centaury 2002-03-14 3 4 - BUGFIX: Add missing #include <string.h> to openpam_log.c. 5 6 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/. XSSO uses 7 the former, but Solaris and Linux-PAM use the latter. 8 9 - BUGFIX: The dynamic loader and the module cache contained a number 10 of bugs which would cause a segmentation fault if pam_start(3) was 11 called again after pam_end(3), as happens in login(1), xdm(1) etc. 12 after a failed login. 13 14 - BUGFIX: Refer to a module by the name used in the policy file, even 15 if the module that was actually loaded was versioned. 16 17 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG. 18============================================================================ 19OpenPAM Celandine 2002-03-05 20 21 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok(). 22 23 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK 24 flag set, then with the PAM_UPDATE_AUTHTOK flag set. 25 26 - BUGFIX: Failure of a "sufficient" module should not terminate the 27 passwd chain if the PAM_PRELIM_CHECK flag is set. 28 29 - BUGFIX: Clear PAM_AUTHTOK after running the service modules. 30 31 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK 32 or PAM_UPDATE_AUTHTOK flags themselves. 33 34 - BUGFIX: openpam_set_option() did not support changing the value of 35 an existing option. 36 37 - ENHANCE: Add support for module versioning. OpenPAM will prefer a 38 module with the same version number as the library itself to one 39 with no version number at all. 40============================================================================ 41OpenPAM Cantaloupe 2002-02-22 42 43 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid 44 argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures. 45 46 - ENHANCE: Add in-line documentation in most source files, and a Perl 47 script that generates mdoc code from that. 48 49 - BUGFIX: The environment list was not properly NULL-terminated. 50 51 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt 52 specified by the module. 53 54 - BUGFIX: PAM_NUM_ITEMS was set too low. It has been moved to 55 pam_constants.h to avoid it going stale again. 56 57 - ENHANCE: Move all code related to static modules into a separate 58 file. 59 60 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the 61 user, and supports setting a timeout (which defaults to off). 62 63 - BUGFIX: Some manual pages referenced XSSO even though they 64 documented OpenPAM-specific functions. 65 66 - ENHANCE: Added openpam_get_option() and openpam_set_option(). 67 68 - ENHANCE: openpam_get_authtok() now respects the echo_pass, 69 try_first_pass, and use_first_pass options. 70============================================================================ 71OpenPAM Caliopsis 2002-02-13 72 73Fixed a number of bugs in the previous release, including: 74 - a number of bugs in and related to pam_[gs]et_item(3) 75 - off-by-one bug in pam_start.c would trim last character off certain 76 configuration lines 77 - incorrect ordering of an array in openpam_load.c would cause service 78 module functions to get mixed up 79 - missing 'continue' in openpam_dispatch.c caused successes to be 80 counted as failures 81============================================================================ 82OpenPAM Calamite 2002-02-09 83 84First (beta) release. 85============================================================================ 86$P4: //depot/projects/openpam/HISTORY#6 $ 87