1Changes in version 0.97 2 3- Updated for bglibs v2 4 5Development of this version has been sponsored by FutureQuest, Inc. 6ossi@FutureQuest.net http://www.FutureQuest.net/ 7------------------------------------------------------------------------------- 8Changes in version 0.96 9 10- Added support for checking permissions in cvm-qmail. See discussion 11 of $CVM_QMAIL_CHECK_PERMS in cvm-qmail.html 12 13- Added support for I/O timeouts for cvm-local modules. 14 15- Fixed the SQLite module to copy the row data. 16 17- Fixed cvm-qmail dieing if control/locals is missing. 18 19Development of this version has been sponsored by FutureQuest, Inc. 20ossi@FutureQuest.net http://www.FutureQuest.net/ 21------------------------------------------------------------------------------- 22Changes in version 0.95 23 24- Added a "lookaside" mode to cvm-qmail, to assist with proper chaining 25 to cvm-vmailmgr or other modules. 26 27- Fixed failure in cvm-qmail when virtualdomains did not exist. 28 29- Fixed client.h symlink to point to v2client.h to match the library. 30 31- Fixed cvm-vmailmgr to fail with OUTOFSCOPE=1 when the virtual password 32 table file does not exist, instead of failing with an I/O error. This 33 should improve its ability to chain with other modules. 34 35- Added cvm-sqlite from Wayne Marshall 36 37Development of this version has been sponsored by FutureQuest, Inc. 38ossi@FutureQuest.net http://www.FutureQuest.net/ 39------------------------------------------------------------------------------- 40Changes in version 0.90 41 42- Added support for chaining modules within the version client library. 43 To use this, specify the module string as a list of modules separated 44 with commas. For example: 45 46 cvm-command:/path/to/module,cvm-local:/path/to/socket 47 48 This enhancement deprecates the cvm-chain module. 49 50- Introduced an "out of scope" fact, to be used on credential rejection 51 results when the supplied credentials are outside of the scope of 52 authority of the module. The cvm-vmailmgr and cvm-qmail modules 53 report this fact as appropriate, and cvm-chain copies it as 54 appropriate from the modules it invokes. 55 56- A random anti-spoofing tag is added to all version 2 client requests. 57 Its length is set by $CVM_RANDOM_BYTES and defaults to 8. 58 59- Fixed a bug that caused the domain output to be set incorrectly when 60 doing qmail lookups with a domain not in the control files with 61 $CVM_QMAIL_ASSUME_LOCAL set. 62 63Development of this version has been sponsored by FutureQuest, Inc. 64ossi@FutureQuest.net http://www.FutureQuest.net/ 65------------------------------------------------------------------------------- 66Changes in version 0.82 67 68- Fixed handling of user/domain name splitting in the client library 69 when the caller doesn't initially provide a domain name. 70 71- cvm_client_setenv now also sets $MAILDIR for use with Courier IMAP. 72 73Development of this version has been sponsored by FutureQuest, Inc. 74ossi@FutureQuest.net http://www.FutureQuest.net/ 75------------------------------------------------------------------------------- 76Changes in version 0.81 77 78- Fixed a typo in the INSTHIER file that caused incomplete 79 installations. 80 81Development of this version has been sponsored by FutureQuest, Inc. 82ossi@FutureQuest.net http://www.FutureQuest.net/ 83------------------------------------------------------------------------------- 84Changes in version 0.80 85 86- Modified the build procedures to use libtool to produce and install 87 shared libraries. 88 89Development of this version has been sponsored by FutureQuest, Inc. 90ossi@FutureQuest.net http://www.FutureQuest.net/ 91------------------------------------------------------------------------------- 92Changes in version 0.76 93 94- Fixed the autoconvert feature of cvm-vmailmgr to set the permissions 95 and ownership of the created password table to that of the original. 96 97- Added a feature to all qmail-based modules to treat all domains as 98 local if $CVM_QMAIL_ASSUME_LOCAL is set. 99 100Development of this version has been sponsored by FutureQuest, Inc. 101ossi@FutureQuest.net http://www.FutureQuest.net/ 102------------------------------------------------------------------------------- 103Changes in version 0.75 104 105- Added an "autoconvert" mode to cvm-vmailmgr, which converts encrypted 106 passwords to plain-text on successful authentication if 107 $VMAILMGR_AUTOCONVERT is set. 108 109Development of this version has been sponsored by FutureQuest, Inc. 110ossi@FutureQuest.net http://www.FutureQuest.net/ 111------------------------------------------------------------------------------- 112Changes in version 0.71 113 114- Several brown-paper-bag bug fixes. 115 116- Updated the cvm-vchkpw module. 117 118Development of this version has been sponsored by FutureQuest, Inc. 119ossi@FutureQuest.net http://www.FutureQuest.net/ 120------------------------------------------------------------------------------- 121Changes in version 0.70 122 123- Major SASL rewrite: 124 125 - Rewrote SASL API to eliminate static data, making it reentrant. 126 127 - Fixed up the SASL library to use the v2 client library. 128 129 - Added SASL generic text I/O authentication framework from mailfront. 130 131Development of this version has been sponsored by FutureQuest, Inc. 132ossi@FutureQuest.net http://www.FutureQuest.net/ 133------------------------------------------------------------------------------- 134Changes in version 0.60 135 136* This version brings major API changes. * 137 138- All module symbols are named cvm_module_* 139 140- All client symbols are named cvm_client_* 141 142- Macros are used to preserve source compatability with existing code. 143 144- Added cvm-chain combination client/module program 145 (adapted from code contributed by Dale Woolridge). 146 147Development of this version has been sponsored by FutureQuest, Inc. 148ossi@FutureQuest.net http://www.FutureQuest.net/ 149------------------------------------------------------------------------------- 150Changes in version 0.50 151 152* This version is a major upgrade providing support for the CVM2 153* protocol. All the modules included here now support both the new CVM2 154* protocol and the existing CVM1 protocol. There are two seperate 155* client libraries, cvm-v1client and cvm-v2client. The previous library 156* and header names are retained as symlinks to the v1client files. 157 158NOTE: The version 1 client library is now depricated and may be removed 159in future versions of the package. All new software should target the 160version 2 API. 161 162Development of this version has been sponsored by FutureQuest, Inc. 163ossi@FutureQuest.net http://www.FutureQuest.net/ 164------------------------------------------------------------------------------- 165Changes in version 0.33 166 167- Added compile fix for cvm-vchkpw. Thanks Peter Palmreuther. 168 169- Fixed handling qmail lookups of extensions containing periods. 170 171- Fixed handling qmail lookups with missing domains by reading 172 control/me and control/envnoathost. 173 174- Fixed handling qmail lookups when cdb/users exists but does not 175 contain all users. Thanks Dale Woolridge. 176 177Development of this version has been sponsored by FutureQuest, Inc. 178ossi@FutureQuest.net http://www.FutureQuest.net/ 179------------------------------------------------------------------------------- 180Changes in version 0.32 181 182- Fixed the qmail lookups in cvm-qmail to lower-case both the username 183 and the "-ext" part in .qmail-ext files, just like qmail-local does. 184 185Development of this version has been sponsored by FutureQuest, Inc. 186ossi@FutureQuest.net http://www.FutureQuest.net/ 187------------------------------------------------------------------------------- 188Changes in version 0.31 189 190- Changed error code in the qmail code from EBADMSG to EDOM to allow 191 compilation on *BSD systems. 192 193This is strictly a compile-fix version. If the previous version 194compiled for you, there is no reason to upgrade. 195 196Development of this version has been sponsored by FutureQuest, Inc. 197ossi@FutureQuest.net http://www.FutureQuest.net/ 198------------------------------------------------------------------------------- 199Changes in version 0.30 200 201- Added "lookup mode" common code, available in all modules. 202 203- Added new cvm-qmail module, which can be used to verify validity of 204 recipient addresses on qmail systems. 205 206- Fixed cvm/module.h header file include problem. 207 Thanks Paul Jarc for pointing this out. 208 209- Significantly factorized the qmail code underlying the vmailmgr 210 modules, making them more conformant to qmail's delivery process. 211 212- Removed the now obsoleted cvm-vmlookup lookup-only module. 213 214Development of this version has been sponsored by FutureQuest, Inc. 215ossi@FutureQuest.net http://www.FutureQuest.net/ 216------------------------------------------------------------------------------- 217Changes in version 0.20 218 219- Merged cvm-vmailmgr (including cvm-vmlookup) into this package. 220 221- Re-merged in SQL modules from cvm-sql package (cvm-mysql and cvm-pgsql). 222 223- Fixed a bug in the module library: cvm_fact_shell was treated as 224 mandatory instead of optional. 225 226- Fixed a bug in client.c that prevented at least OpenBSD from using UDP 227 modules. Thanks Balazs Nagy. 228 229Development of this version has been sponsored by FutureQuest, Inc. 230ossi@FutureQuest.net http://www.FutureQuest.net/ 231------------------------------------------------------------------------------- 232Changes in version 0.18 233 234- Changed the order of the chdir in cvm_setugid, to avoid problems with 235 NFS mounted file shares. 236 237- Fixed yet another typo in installer that put a header file in place of 238 a library. 239 240- The cvm_setenv routine now exports both $MAIL and $MAILBOX, as some 241 programs (notably Dovecot IMAP) prefer to use $MAIL. 242 243Development of this version has been sponsored by FutureQuest, Inc. 244ossi@FutureQuest.net http://www.FutureQuest.net/ 245------------------------------------------------------------------------------- 246Changes in version 0.17 247 248- Corrected typo in installer code that left out the all-important "lib" 249 prefix on files installed in /usr/lib 250 251- Fixed cvm-testclient to work with modules that accept zero credentials 252 (ie unprotected lookup modules). 253 254Development of this version has been sponsored by FutureQuest, Inc. 255ossi@FutureQuest.net http://www.FutureQuest.net/ 256------------------------------------------------------------------------------- 257Changes in version 0.16 258 259- Merged cvm-sasl library from bglibs into this package. 260 261- Bug fix for SIGPIPE (on at least Solaris) if modules exit unexpectedly 262 (from Lars Uffmann). 263 264- Modified the module command mode to always write the output, even if 265 authentication failed. This allows command mode to be used with a 266 UCSPI server to provide other modes of servers. 267 268- The module library now allows for setting the ownership of the created 269 local socket by setting $CVM_SOCKET_MODE, $CVM_SOCKET_OWNER, and 270 $CVM_SOCKET_GROUP. 271 272Development of this version has been sponsored by FutureQuest, Inc. 273ossi@FutureQuest.net http://www.FutureQuest.net/ 274------------------------------------------------------------------------------- 275Changes in version 0.15 276 277- Added a new generic module library that supports all three operation 278 modes (command, local socket, UDP socket) from the same binary. The 279 separated module libraries have been retained for compatibility, but 280 the separated modules have been removed from this package. 281 282- Fixed cvm-unix to properly handle shadow passwords. 283 284Development of this version has been sponsored by FutureQuest, Inc. 285ossi@FutureQuest.net http://www.FutureQuest.net/ 286------------------------------------------------------------------------------- 287Changes in version 0.12 288 289- Fixed a buffer mis-allocation bug in the getpwnam code. 290 291- Fixed a one-off bug in the client code that parses user/domain names. 292 293- Fixed a Solaris/SysV portability problem. 294 295- Switched to external bglibs. 296 297- Dropped use of non-portable fgetpwent in cvm-pwfile. 298 299Development of this version has been sponsored by FutureQuest, Inc. 300ossi@FutureQuest.net http://www.FutureQuest.net/ 301------------------------------------------------------------------------------- 302Changes in version 0.11 303 304- Removed the MySQL and PgSQL modules from this package, and bundled 305 them into a seperate cvm-sql package. 306 307- Bugfix: cvm-unix did not lowercase the account name before calling 308 getpwnam. 309 310- Added some convenience functions to the client library. 311 312Development of this version has been sponsored by FutureQuest, Inc. 313ossi@FutureQuest.net http://www.FutureQuest.net/ 314------------------------------------------------------------------------------- 315Changes in version 0.10 316 317- Added support to the MySQL and PgSQL modules for executing a query 318 after credential validation, useful for updating a "last logged in at" 319 field or similar. 320 321- Modified the client->server protocol to include a protocol identifier 322 byte (to allow for future revisions) and a domain name. 323 324- Modified the client library to optionally parse a domain name out of 325 the account name. 326 327- Modified the MySQL and PgSQL modules to deal with domain names. 328 329- The MySQL module will now read connection options out of a defaults 330 file if specified. 331 332NOTE: Modules built against this version of CVM will be incompatible 333with clients built against older versions, and vice versa! Use care 334when upgrading. 335 336Development of this version has been sponsored by FutureQuest, Inc. 337ossi@FutureQuest.net http://www.FutureQuest.net/ 338------------------------------------------------------------------------------- 339Changes in version 0.8 340 341- Added additional error codes. 342 343- Added a MySQL module. 344 345- Added a PgSQL module. 346 347- Use pwcmp for password comparisons in all modules except for cvm-unix. 348 349- Added a required function "cvm_auth_stop" to the module API, which is 350 called once at module shutdown. 351 352- Bug fix in the cvm-unix module from Paul Jarc to make the supplemental 353 group id list reported by cvm-unix actually follow the fact 354 specification. 355 356- Bug fix in the client library code that caused the shell fact to be 357 required. 358 359Development of this version has been sponsored by FutureQuest, Inc. 360ossi@FutureQuest.net http://www.FutureQuest.net/ 361------------------------------------------------------------------------------- 362Changes in version 0.7 363 364- Added a text-file module, cvm-pwfile. 365 366- Modified the client and module APIs to add "cvm_" in front of all 367 exported symbols. 368 369- Added a required function "cvm_auth_init" to the module API, which is 370 called once at program startup. 371 372- Modified cvm-unix to output the group name and the supplemental group 373 list. 374 375- Fixed the APIs to use "unsigned long" for the integer type instead of 376 just "unsigned". 377 378- Fixed the client library to properly handle lists of facts. 379 380- Fixed use of iopoll to properly support systems with a missing or broken 381 poll syscall. 382 383Note: This release doesn't make any of the protocol changes discussed in 384the mailing lists. Since those changes are fairly radical, they will go 385into a second version of CVM, named either CVM2 or CVMX or something. 386 387Development of this version has been sponsored by FutureQuest, Inc. 388ossi@FutureQuest.net http://www.FutureQuest.net/ 389------------------------------------------------------------------------------- 390Changes in version 0.6 391 392- Fixed some client library bugs. 393 394- Added a benchmarking client. 395 396- Added a checkpassword client. 397------------------------------------------------------------------------------- 398Changes in version 0.5 399 400- Added support for long-running UDP and local-domain socket modules. 401------------------------------------------------------------------------------- 402Changes in version 0.3 403 404- Fixed handling of negative values in client library. 405 406- Fixed a bug in the client library that caused handling bad data to not 407 indicate any error. 408------------------------------------------------------------------------------- 409Changes in version 0.2 410 411- Renamed cvm_unix to cvm-unix. 412 413- Fixed a bug in parsing in fact_uint, which incorrectly used strtol. 414 415- Added more documentation. 416------------------------------------------------------------------------------- 417