2001-11-05  Tom Yu  <tlyu@mit.edu>

	* Makefile.in (LIBMAJOR): Bump to avoid Heimdal conflict.

2001-10-22  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (kadm5_decrypt_key): For now, coerce enctype of
	output keyblock in case we got a match on a similar enctype.

2001-10-16  Mitchell Berger  <mitchb@mit.edu>
	    Matt Crawford  <crawdad@fnal.gov>

	* svr_principal.c (add_to_history): If the policy a principal uses has
	been changed to hold a lesser number of history entries than it did
	before, extract the correct number and value of old keys from the
	history array into a newly allocated array of the proper size.  Failing
	to do this made kadmind vulnerable to a crash upon changing such a
	principal's password.  Original patch written by Matt Crawford, with
	a few changes.
	[pullup from trunk]

2001-09-07  Tom Yu  <tlyu@mit.edu>

	* adb_openclose.c (osa_adb_create_db): Default to btree.
	(osa_adb_init_db): Set up btinfo as well.
	(osa_adb_open_and_lock): Try btree, then hash.
	[pullup from trunk]

2000-05-11  Nalin Dahyabhai  <nalin@redhat.com>

	* adb_openclose.c (osa_adb_create_db): Open lock files using O_EXCL
	and fdopen() the descriptor instead of using fopen().
	* svr_chpass_util.c (kadm5_chpass_principal_util): Adjust for new
	length parameter in both kadm5_chpass_principal_util() and in
	_kadm5_chpass_principal_util().

2000-03-16  Ken Raeburn  <raeburn@mit.edu>
	    Matt Crawford  <crawdad@fnal.gov>

	* server_acl.c: Include kadm5/admin.h.
	(struct _acl_entry): Add new fields for restrictions.
	(struct _wildstate): New type.
	(acl_parse_line): Input is const.  Parse and save restrictions.
	Allow backslash at end of line to indicate continuation.
	(acl_parse_restrictions, acl_impose_restrictions): New functions.
	(acl_free_entries): Free up restriction data if any.
	(acl_load_acl_file): Don't use tmpbuf for catch-all entry.
	(acl_match_data): Add new arguments for wildcard state.
	(acl_find_entry): Support wildcard component matching.
	Reorganized checks for bad ACL entries.
	(acl_check): Add restrictions parameter.
	* server_acl.h (struct _restriction): New type.
	(acl_check): Update prototype.
	(acl_impose_restrictions): Declare.

2000-02-26  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (kadm5_create_principal_3): Remove keepold
	argument.

	* Makefile.in (LIBMAJOR): Bump major number due to call signature
	changes.

2000-02-25  Ken Raeburn  <raeburn@mit.edu>

	* server_acl.c (acl_get_line): Patch from Matt Crawford to permit
	line continuation by ending a line with a backslash.

2000-02-13  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (kadm5_setkey_principal_3): New function.

1999-10-26  Tom Yu  <tlyu@mit.edu>

	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
	LOCAL_INCLUDES such that one can override CFLAGS from the command
	line without losing CPP search patchs and defines. Some associated
	Makefile cleanup. [from wsanchez@apple.com]

1999-09-08  Ken Raeburn  <raeburn@mit.edu>

	* adb_openclose.c (osa_adb_fini_db): Don't fclose the lock file if
	the lock is permanent, because it's already been done.

Mon Dec  7 15:19:11 1998  Ezra Peisach  <epeisach@mit.edu>

	* svr_principal.c (kadm5_randkey_principal_3): Fix typo in
	 	arguments to krb5_dbe_crk().

1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* Makefile.in: Set the myfulldir and mydir variables (which are
		relative to buildtop and thisconfigdir, respectively.)

Fri Dec  4 23:10:32 1998  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (kadm5_create_principal): Modify to call
	create_principal_3.
	(kadm5_create_principal_3): New function including flag to keep
	old keys and optional explicit keysalt_tuples.
	(kadm5_chpass_principal): Modify to call chpass_principal_3.
	(kadm5_chpass_principal_3): New function including flag to keep
	old keys and optional explicit keysalt_tuples.
	(kadm5_randkey_principal): Modify to call randkey_principal_3.
	(kadm5_randkey_principal_3): New function including flag to keep
	old keys and optional explicit keysalt_tuples.

Tue Nov 17 18:20:48 1998  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (kadm5_create_principal): 
	(kadm5_chpass_principal): 
	(kadm5_randkey_principal): Fix up for new calling conventions of
	dbe_crk and dbe_cpw.

1998-10-27  Marc Horowitz  <marc@mit.edu>

	* server_kdb.c, svr_principal.c: convert to new crypto api

Sun Jul 26 18:09:55 1998  Sam Hartman  <hartmans@utwig.mesas.com>

	* Makefile.in (LIBMAJOR): bump libmajor

Wed Apr 15 18:06:14 1998  Tom Yu  <tlyu@mit.edu>

	* Makefile.in (SHLIB_EXPDEPS): 
	(SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.

Fri Feb 27 22:33:05 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* Makefile.in: Changed thisconfigdir to point at the lib/kadm5
 		directory, since we've moved all of the configure.in
		tests to the toplevel lib/kadm5 configure.in.
		Instead of adding @LIBS@ to the list of libraries which
		should be linked as shared library dependencies, add
		@GEN_LIB@ and @AIX_DB_LIB@ which will get expanded if
		necessary. 

Wed Feb 18 16:15:22 1998  Tom Yu  <tlyu@mit.edu>

	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
	BUILDTOP for new conventions.

Fri Feb 13 21:30:58 1998  Tom Yu  <tlyu@mit.edu>

	* adb_xdr.c: Update header locations.

	* Makefile.in (LIBMAJOR): Bump major version to reflect change in
	rpc library.

Wed Jan 28 16:32:36 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* configure.in, Makefile.in: Remove the CopySrcHeader macro
		from configure.in and substitute equivalent
		functionality in Makefile.in

Mon Oct 13 10:59:22 1997  Ezra Peisach  <epeisach@mit.edu>

	* server_init.c (kadm5_destroy): Call kadm5_free_config_params.

	* server_acl.c: Include <ctype.h> for tolower().
	(acl_load_acl_file): Close acl file, even when acl_catchall_entry is
	    not set.

Wed Aug  6 20:22:23 1997  Tom Yu  <tlyu@mit.edu>

	* Makefile.in: Add flags to conditionally compile with Hesiod.

	* server_misc.c: Add support for checking GECOS field of Hesiod
	passwd entry.

Fri Jul 25 15:37:08 1997  Tom Yu  <tlyu@mit.edu>

	* server_init.c: Change a few calls to align with the new kdb
	API.

	* Makefile.in: Bump version.

Tue Jul  1 02:32:49 1997  Tom Yu  <tlyu@mit.edu>

	* server_acl.h: Fix ACL_ALL_MASK to include ACL_SETKEY.

	* svr_principal.c: Fix setv4key_principal.

Sun Jun 29 14:52:51 1997  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c: Add new function kadm5_setv4key_principal.

Mon Mar 31 17:40:24 1997  Barry Jaspan  <bjaspan@mit.edu>

	* server_acl.c, server_acl.h, svr_pricipal.c: add support for
 	setkey_principal

Sun Mar  9 13:40:33 1997  Tom Yu  <tlyu@mit.edu>

	* svr_principal.c (add_to_history): Don't call realloc() on a NULL
	pointer, lest non-ANSI compliant systems like SunOS fail.

Sat Feb 22 01:34:08 1997  Sam Hartman  <hartmans@tertius.mit.edu>

	* Makefile.in (SHLIB_EXPDEPS): s/.so/$(SHLIBEXT)

Wed Jan 15 20:59:11 1997  Tom Yu  <tlyu@mit.edu>

	* Makefile.in:
	* configure.in: Update to new library build procedure.

Tue Dec  3 15:14:29 1996  Barry Jaspan  <bjaspan@mit.edu>

	* server_acl.c (acl_load_acl_file): log errors via
 	krb5_klog_syslog, not fprintf and com_err [krb5-admin/238]; don't
 	coredump when an acl line is too long; handle catchall_entry ==
 	NULL

Fri Nov 22 11:11:34 1996  Sam Hartman  <hartmans@mit.edu>

	* Makefile.in (SHLIB_LIBS): Do not link shared against -ldb [224]

Tue Nov 26 03:04:04 1996  Sam Hartman  <hartmans@mit.edu>

	* server_acl.c (acl_load_acl_file): Fix coredump by allowing
 	catchall_entry to be null, but do not reference it if it is.
  	Thanks to marc.  [242]

Mon Nov 25 17:53:20 1996  Barry Jaspan  <bjaspan@mit.edu>

	* server_acl.c: set acl_catchall_entry to "" instead of NULL,
 	since it is presumed to contain something, but we don't want any
 	default entry [krb5-admin/237]

Wed Nov 13 19:20:36 1996  Tom Yu  <tlyu@mit.edu>

	* Makefile.in (clean-unix): Remove shared/*.

Mon Nov 11 17:01:00 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_principal.c (kadm5_modify_principal): fix memory leak
 	handling tl_data

Thu Nov  7 16:42:38 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_iters.c (glob_to_regexp): a principal glob with no @
 	defaults to @*, not @LOCAL.REAM [krb5-admin/161]
 
Wed Nov  6 10:45:12 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* server_init.c (kadm5_init): Use a more fined grained error
 		code, KADM5_MISSING_CONF_PARAMS instead of
 		KRB5_CONFIG_BADFORMAT

Wed Nov  6 16:22:05 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_principal.c (kadm5_modify_principal): don't free the
 	caller's tl_data (oops)

Fri Nov  1 13:18:40 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_principal.c (kadm5_modify_principal): update for new tl_data
 	semantics [krb5-admin/140]

Mon Oct 21 16:28:52 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_principal.c (kadm5_modify_principal): fix modify_principal's
 	handling of KADM5_TL_DATA [krb5-admin/20]

Fri Oct 18 14:24:12 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_misc_free.c, server_dict.c, adb_policy.c, adb_free.c:
 	include stdlib.h instead of malloc.h [krb5-admin/35]

	* adb_openclose.c (osa_adb_rename_db): create the destination
 	database if necessary before renaming [krb5-admin/58]

Thu Oct 17 16:22:07 1996  Barry Jaspan  <bjaspan@mit.edu>

	* svr_principal.c: update for new pw_expiration semantics
 	[krb5-admin/87]

Tue Oct  8 13:33:48 1996  Barry Jaspan  <bjaspan@mit.edu>

	* adb_policy.c (osa_adb_rename_policy_db): rename
 	osa_adb_rename_policy to *_db

	* adb_openclose.c, adb_policy.c: implement database renaming;
 	also, only create a db lockfile after the database has been
 	successfully created [krb5-admin/62]

Fri Oct  4 08:40:21 1996  Ezra Peisach  <epeisach@kangaroo.mit.edu>

	* svr_principal.c (kadm5_get_principal): Do not assume malloc(0)
		returns non-NULL. [krb5-admin/29]

Fri Aug  2 14:07:31 1996  Barry Jaspan  <bjaspan@DUN-DUN-NOODLES>

	* svr_principal.c: remove krb5_free_keyblock_contents (moved to
        libkrb5.a)

Fri Jul 26 17:48:14 1996  Sam Hartman  <hartmans@mit.edu>

	* svr_principal.c (krb5_copy_key_data_contents): If
 	key_data_length[i] == 0, don't complain if malloc(0) returns 0;
 	this is allowed by ANSI.

Thu Jul 25 18:42:47 1996  Sam Hartman  <hartmans@mit.edu>

	* configure.in (LIBS): Link against -ldb under AIX for shared
 	library construction; we should eventually make libdb a shared
 	library.

Wed Jul 24 18:21:28 1996  Tom Yu  <tlyu@voltage-multiplier.mit.edu>

	* Makefile.in, configure.in: break out server lib into a
		subdirectory

