1============================================================================ 2OpenPAM Cinnamon 2002-05-02 3 4 - ENHANCE: Add a null conversation function, openpam_nullconv(). 5 6 - BUGFIX: Various markup bugs in the documentation. 7 8 - BUGFIX: Document <security/openpam.h>. 9 10 - BUGFIX: Duplicate expansion of openpam_log() macro arguments. 11 12 - ENHANCE: Restructure the policy-loading code and align our use of 13 the "other" policy with Solaris and Linux-PAM. 14 15 - ENHANCE: Log dlopen() and dlsym() failures. 16 17 - ENHANCE: In openpam_ttyconv(), emit a newline after error and info 18 messages unless the message contains one already. 19 20 - BUGFIX: In pam_vprompt(), initialize the response pointer to NULL 21 so we can detect whether the conversation function touched it. 22============================================================================ 23OpenPAM Cineraria 2002-04-14 24 25 - BUGFIX: Fix confusion between token and prompt in 26 pam_get_authtok(3). 27 28 - ENHANCE: Improved documentation. 29 30 - ENHANCE: Adopt the same preprocessor tricks that were used in 31 FreeBSD's version of Linux-PAM to simplify static linking without 32 requiring dummy primitives. 33 34 - ENHANCE: Move the policy-loading code out of pam_start.c. 35 36 - BUGFIX: Fix typo in one of the versions of the openpam_log macro. 37 38 - ENHANCE: Add versioning macros. 39============================================================================ 40OpenPAM Cinchona 2002-04-08 41 42 - ENHANCE: Improved documentation for several API functions. 43 44 - BUGFIX: Fix bug in pam_set_data() that would result in corruption 45 of the module data list. 46 47 - BUGFIX: Allocate the correct amount of memory for the environment 48 list in pam_putenv(). 49 50 - ENHANCE: Change pam_get_authtok()'s prototype so the caller can 51 specify what token it wants. Also introduce PAM_OLDAUTHTOK_PROMPT. 52 53 - BUGFIX: Plug memory leak in pam_get_user() / pam_get_authtok(), and 54 reduce differences between these very similar functions. 55 56 - ENHANCE: Check flags carefully in pam_authenticate() and 57 pam_chauthtok(). 58 59 - BUGFIX: Fix bugs in portability code; libpam now builds on NetBSD. 60 61 - ENHANCE: In pam_get_authtok(), if PAM_OLDAUTHTOK is set, we're 62 asked for PAM_AUTHTOK, and we have to prompt the user, prompt her 63 twice and compare the responses. 64 65 - ENHANCE: Add openpam_{borrow,restore}_cred(), for temporarily 66 switching to user credentials. 67 68 - ENHANCE: Add openpam_free_data(), a generic cleanup function for 69 pam_set_data() consumers. 70============================================================================ 71OpenPAM Centaury 2002-03-14 72 73 - BUGFIX: Add missing #include <string.h> to openpam_log.c. 74 75 - BUGFIX: s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/. XSSO uses 76 the former, but Solaris and Linux-PAM use the latter. 77 78 - BUGFIX: The dynamic loader and the module cache contained a number 79 of bugs which would cause a segmentation fault if pam_start(3) was 80 called again after pam_end(3), as happens in login(1), xdm(1) etc. 81 after a failed login. 82 83 - BUGFIX: Refer to a module by the name used in the policy file, even 84 if the module that was actually loaded was versioned. 85 86 - ENHANCE: Suppress debugging logs, unless compiled with -DDEBUG. 87============================================================================ 88OpenPAM Celandine 2002-03-05 89 90 - BUGFIX: PAM_TRY_AGAIN is a valid return value for pam_chauthtok(). 91 92 - BUGFIX: Run passwd chain twice, first with the PAM_PRELIM_CHECK 93 flag set, then with the PAM_UPDATE_AUTHTOK flag set. 94 95 - BUGFIX: Failure of a "sufficient" module should not terminate the 96 passwd chain if the PAM_PRELIM_CHECK flag is set. 97 98 - BUGFIX: Clear PAM_AUTHTOK after running the service modules. 99 100 - ENHANCE: Prevent applications from specifying the PAM_PRELIM_CHECK 101 or PAM_UPDATE_AUTHTOK flags themselves. 102 103 - BUGFIX: openpam_set_option() did not support changing the value of 104 an existing option. 105 106 - ENHANCE: Add support for module versioning. OpenPAM will prefer a 107 module with the same version number as the library itself to one 108 with no version number at all. 109============================================================================ 110OpenPAM Cantaloupe 2002-02-22 111 112 - BUGFIX: The proper use of PAM_SYMBOL_ERR is to indicate an invalid 113 argument to pam_[gs]et_item(3), not to indicate dlsym(3) failures. 114 115 - ENHANCE: Add in-line documentation in most source files, and a Perl 116 script that generates mdoc code from that. 117 118 - BUGFIX: The environment list was not properly NULL-terminated. 119 120 - ENHANCE: Allow the PAM_AUTHTOK_PROMPT item to override the prompt 121 specified by the module. 122 123 - BUGFIX: PAM_NUM_ITEMS was set too low. It has been moved to 124 pam_constants.h to avoid it going stale again. 125 126 - ENHANCE: Move all code related to static modules into a separate 127 file. 128 129 - ENHANCE: openpam_ttyconv() now masks most signals while prompting the 130 user, and supports setting a timeout (which defaults to off). 131 132 - BUGFIX: Some manual pages referenced XSSO even though they 133 documented OpenPAM-specific functions. 134 135 - ENHANCE: Added openpam_get_option() and openpam_set_option(). 136 137 - ENHANCE: openpam_get_authtok() now respects the echo_pass, 138 try_first_pass, and use_first_pass options. 139============================================================================ 140OpenPAM Caliopsis 2002-02-13 141 142Fixed a number of bugs in the previous release, including: 143 - a number of bugs in and related to pam_[gs]et_item(3) 144 - off-by-one bug in pam_start.c would trim last character off certain 145 configuration lines 146 - incorrect ordering of an array in openpam_load.c would cause service 147 module functions to get mixed up 148 - missing 'continue' in openpam_dispatch.c caused successes to be 149 counted as failures 150============================================================================ 151OpenPAM Calamite 2002-02-09 152 153First (beta) release. 154============================================================================ 155$P4: //depot/projects/openpam/HISTORY#11 $ 156