1 Upgrading from mod_auth_tkt version 1.3.x to version 2.0.x 2 ========================================================== 3 4 In general, upgrading should be a non-issue - just recompile and reinstall 5 mod_auth_tkt on each of your apache instances, both apache 1.3.x and 6 apache 2.0.x. 7 8 The only gotcha is that the ticket format has changed (due to a 9 vulnerability in the previous format), so tickets produced using the old 10 TktUtil.pm or tkt_cookie will not work with mod_auth_tkt 2.0.x - use the 11 new Apache::AuthTkt perl module instead (or see the contrib directory 12 for possible alternatives). 13 14 Also, the C tkt_cookie executable for generating cookies has been removed 15 from this version due to additional vulnerabilities and the maintenance 16 overhead. If you used that, you'll have to use the Perl cgi scripts 17 instead, or roll your own solution. 18 19