Sat Sep  2 14:18:59 1995  Bjoern Groenvall  <bg@eufrat.nada.kth.se>

	* appl/telnet/telnetd/telnetd.c (doit): If remote host name is to
	long to fit into utmp try to remove domain part if it does match
	our local domain.

	(main): Add new option -L /bin/login so that it is possible to 
	specify an alternate login program.

	* appl/telnet/telnet/commands.c (env_init): When exporting
	variable DISPLAY and if hostname is not the full name, try to get
	the full name from DNS.

	* appl/telnet/telnet/main.c (main): Option -k realm was broken due
        to a bogous external declaration.

Fri Sep  1 10:40:40 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* kadmin/kadmin.c (add_new_key): Kadmin now properly sets
	lifetime, expiration date and attributes in add_new_key command.

Wed Aug 30 18:24:17 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/su.c (main): Don't handle '-' option with getopt.

	* appl/telnet/telnet/externs.h: Removed protection for multiple
	inclusions of termio(s).h since it broke definition of termio
	macro on POSIX systems.

Tue Aug 29 09:57:02 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* lib/krb/lifetime.c (krb_life_to_time): If you want to disable
	AFS compatible long lifetimes set krb_no_long_lifetimes = 1.
	
	Please note that the long lifetimes are 100% compatible up to
	10h so this should rarely be necessary.

	* lib/krb/krb_equiv.c (krb_equiv): If you don't want to use
	ipaddress protection of tickets set krb_ignore_ip_address. This
	makes it possible for an intruder to steal a ticket and then use
	it from som other machine anywhere on the net.

Mon Aug 28 18:58:43 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* kadmin/kadm_ser_wrap.c (kadm_ser_init): Don't bind to only one
        local address. Accept request on all interfaces.

	* admin/kdb_edit.c (change_principal): Don't accept illegal
        dates. Courtesy of gertz@lysator.liu.se.

Sat Aug 26 14:49:07 1995  Bjoern Groenvall  <bg@tdcalc.nada.kth.se>

	* configure.in: AIX specific libraries needed when using standard
        libc routine getttyent, IBM should be ashamed!

	* lib/krb/recvauth.c (krb_recvauth): Long that should be int32_t
        problem.

	* Added strdup for su and rlogin.

	* Fix for old syslog macros in appl/bsd/bsd_locl.

Fri Aug 25 09:11:05 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* lib/kdb/krb_dbm.c (kerb_db_rename) admin/kdb_destroy.c: New
        ifdef HAVE_NEW_DB for new databases residing in one file only.

	* appl/bsd/rlogin.c (oob): Add workaround for Linux.

Mon Aug 21 14:15:35 1995  Bjoern Groenvall  <bg@staff.nada.kth.se>

	* appl/bsd/getpass.c: New routine that reads up to 127 char
        passwords. Used in su.c and login.c.

Tue Aug 15 09:35:43 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/telnet/telnetd/sys_term.c (login_tty): Ioctl TIOCSCTTY
        should not be used on HP-UX.

Mon Aug 14 11:54:05 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/rlogin.c (main): Added dummy rlogind that tells user to
        rather use telnet.

Thu Aug 10 11:16:01 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* lib/krb/ krb.h, decomp_ticket.c, getrealm.c, get_krbhst.c,
	get_krbrlm.c, get_admhst.c: 

	Use multiple configuration directories for krb.conf and
	krb.realms, KRB_CONF and KRB_REALM_TRANS macros substituted with
	KRB_CNF_FILES and KRB_RLM_FILES. Currently /etc and
	/etc/kerberosIV are searched. Directory specified by envioronment
	variable KRBCONFDIR is searched first if set. No hardcoded
	realmname or kerberos server. Instead use domainname for deafult
	realm and kerberos.domain as kerberos server if they are not
	listed in krb.conf and/or krb.realms. In the normal case there
	should be no need for configuration files if administrators add a
	CNAME pointing to the kerberos server.

	* appl/bsd/Makefile.in and friends: GNU make should no longer be
        neccessary unless building with VPATH.

Wed Aug  9 10:22:19 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/klogin.c (klogin): Old ticket file need to be removed
	before we call krb_get_pw_in_tkt or we might get a Kerberos intkt
	error because the wrong user owns the file.

Tue Aug  8 11:24:27 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* configure.in : Telnet.beta2 is now official and has been moved
        to appl/telnet.

	* appl/bsd/su.c (main): Reenable -K flag, won't work if not
        PASSWD_FALLBACK is enabled. Cosmetics for Password prompt.

Fri Aug  4 10:37:32 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/su.c (kerberos): Don't allow su from possibly bogous
        kerberos server. Controlled by #ifdef KLOGIN_PARANOID.

	* lib/kafs/afssys.c (SIGSYS_handler): Need to reinstall handler on
        SYSV.

Mon Jul 24 19:52:57 1995  Bjoern Groenvall  <bg@perham.pdc.kth.se>

	* lib/kafs/afssys.c (k_afsklog): Use default realm on null argument.

	* appl/bsd/rlogin.c, login.c: New programs.

Fri Jul 21 18:37:45 1995  Bjoern Groenvall  <bg@moldau.nada.kth.se>

	* appl/bsd/kcmd.c rsh.c rlogin.c: Use POSIX signals.

	* appl/telnet.95.05.31.NE/telnetd/sys_term.c, telnetd.c: Port to
        IRIX.

Tue Jul 11 18:55:47 1995  Bjoern Groenvall  <bg@peo.nada.kth.se>

	* admin/kdb_init.c (main): Use new random generator.  Dito in
	admin/kdb_edit.c. Use master key to initialize random sequence.

Mon Jul 10 20:58:32 1995  Bjoern Groenvall  <bg@peo.nada.kth.se>

	* kadmin/kadmin.c (get_password): Fix for random passwords.
	Dito for admin/kdb_edit.c

	* appl/kauth/kauth.c (main): Updated for krb distribution, now
        uses new library libkafs.

	* appl/telnet.beta/telnet/main.c (main): New telnet with
        encryption hacks from ftp.funet.fi:/pub/unix/security/esrasrc-1.0.
        Encryption does not currently work though.

Tue Jun 20 18:26:10 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* New library to support AFS. Routines:

	  int k_hasafs(void);
	  int k_afsklog(...);
	  int k_setpag(void);
	  int k_unlog(void);
	  int k_pioctl(char *, int, struct ViceIoctl *, int);

	  Modified it to support more than one single entry point AFS
	  syscalls (needed by HPUX and OSF/1 when running DFS). Don't rely
	  on transarc headers or library code.

	  This has not been tested and will most probably need some
	  serious violence to get working under AIX. (AIX has since been
	  fixed to. /bg)

Fri Jun 16 10:23:29 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* lib/krb/krb_equiv.c (krb_equiv): Compare IP adresses using
        krb_equiv() to allow for hosts with more than one address in files
        rd_priv.c rd_req.c and rd_safe.c.

	* slave/kpropd.c (main): Fix uninitialized variables and rewind
        file in kprop.c.

Thu Jun 15 14:37:23 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/rcp.c (allocbuf): Fix various bugs.

	* slave/kpropd.c (main): Responder uses
        KPROP_SERVICE_NAME.'hostname' and requestor always uses
        KPROP_SERVICE_NAME.KRB_MASTER, i.e rcmd.kerberos in kprop/kpropd
        protocol.

Wed Jun 14 17:05:50 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/rshd.c (doit): Encryption should now work both ways.

Tue Jun 13 13:09:05 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* appl/bsd/pathnames.h: Fixup paths.

	* server/Makefile.in and friends (install): Install daemons in in
	libexec and administrator programs in sbin.

Tue Jun 13 13:09:05 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* Makefile.in: Joda (d91-jda) added install target

Wed Jun  7 02:40:06 1995  Bjoern Groenvall  <bg@bg.nada.kth.se>

	* lib/krb/k_strerror.c: New function k_strerror() to use instead
        of the non portable sys_errlist[].
