2003-08-03 Balazs GAL <balsa@rit.bme.hu>

	* pam_sm_authenticate: If krb_mk_in_tkt_preauth is not
	available in newest MIT code, then native_krb4_tgt
	option will be not available. The native_krb4_tgt option will be
	deprecated in version 1.4.
	The krb4_convert is not affected.

2003-08-02 Balazs GAL <balsa@rit.bme.hu>

	* acinclude.m4: if $ac_cv_krb5_libs was not set we defaulted to
	Heimdal libraries, but we might have MIT krb5.  If we do, we need to
	again modify LIBS before this will work. (submitted by Tim Mooney)

	* acinclude.m4: we look for krb524_convert_creds_kdc not only in
	libkrb524 for MIT.

2003-07-31 Balazs GAL <balsa@rit.bme.hu>

	* get_config: set krb4_get_tickets option as an alias
	for krb4_convert. (suggested by Andreas Haupt)

2003-07-28 Balazs GAL <balsa@rit.bme.hu>

	*  build system: Redesigned autotools (tools dir / bootstrap script)
	
	* acinclude.m4: now checking the pam implementation
	
	* pam_krb5afs.c: and use some workarounds with Solaris PAM.

2003-07-04 Balazs GAL <balsa@rit.bme.hu>

	* appdefault_boolean: Now parse any boolean krb5.conf pam section
	option in pam command line, presented only with option name as true:
	e.g 'pam_krb5.so krb4_convert' will be parsed as true.
	(suggested by Gabor Halasz)

2003-06-13 Balazs GAL <balsa@rit.bme.hu>

	* get_config: Dont use renew_lifetime code
	with Heimdal, because krb5_get_init_creds_opt_set_default_flags
	will dealt with it. (reported by Andreas Haupt)

2003-06-11 Balazs GAL <balsa@rit.bme.hu>

	* pam_sm_acct_mgmt: Allow account chain withouth
	auth chain. (suggested by Vladimir Nadvornik)

	* syslog functions: force syslog with LOG_AUTH facility
	(suggested by Buck Huppmann)

2003-06-01 Balazs GAL <balsa@rit.bme.hu>

	* Solaris enhancement: pam_krb5 now store the old password in
	chauthok between PAM_PRELIM_CHECK and PAM_UPDATE_AUTHTOK
	(suggested by Filipe Almeida)
	
	* Solaris enhancement: New old_password_from_auth
	option for support broken apps, see more in README
	
	* acinclude.m4: No use the prerequired libs in krb5 lib detect code
	(pointed out by Chuck Boeheim)

	* New functions: free_string, free_password

2003-05-05 Balazs GAL <balsa@rit.bme.hu>

	* Now pam_prompter handle right the prompt of
	  krb5_get_init_creds_password (reported by Christian JUNG, Thanks! )

2003-03-17 Balazs GAL <balsa@rit.bme.hu>

	* Release pam_krb5-1.3-rc7

	* Now avoid the heimdal flag in the name.

2003-03-11 Balazs GAL <balsa@rit.bme.hu>

	* New force_refresh code and redesigned ticket refreshing.
	requested by Gunnar Gunnarsson.
	
	* safe_create: now it can make a new file, not only reuse
	
	* get_config: logging version numbers, contact addrs

	* acinclude.m4: correct ac_cv_buid_with_krb4 typo to
	ac_cv_build_with_krb4

2003-02-22 Balazs GAL <balsa@rit.bme.hu>

	* validate_tgt: major rewrote.
	Integrated krb5_verify_init_creds.

	* get_pw: On Solaris we don't use __posix_getpwnam_r anymore. We
	define instead _POSIX_PTHREAD_SEMANTICS macro.

2003-02-21 Balazs GAL <balsa@rit.bme.hu>

	* TODO: mention buggy Linux-PAM 0.75 pam_set_data.

	* Some merging from upstream.

	* pam_krb5 now works on solaris:
	Some casting was needed.
	Now Linux FreeBSD and Solaris are supported.

	* pam_sm_acct_mgmt: casting the fail func in krb5_get_in_tkt.

	* acinclude.m4:  Fix few AC_CHECK_FUNC/AC_CHECK_FUNCS typo.

2002-02-14 Balazs GAL <balsa@rit.bme.hu>
	
	* Release pam_krb5-heimdal-1.3-rc6

2002-02-12 Balazs GAL <balsa@rit.bme.hu>

	* build system: Move check for com_err.h after krb5
	stuff

2003-01-31 Balazs GAL <balsa@rit.bme.hu>

	* build system: Correct acinclude.m4 LIBS handling

	* get_config: Correct MIT extra_adressess code.

	* get_config: workaround about Heimdal context->ticket_lifetime

2002-12-09 Balazs GAL <balsa@rit.bme.hu>

	* Release pam_krb5-heimdal-1.3-rc5

2002-12-09 Balazs GAL <balsa@rit.bme.hu>

	* pam_sm_acct_mgmt: Correct mainstream to look for pam_get_item return
	code. This fix segfaults if used with ssh gssapi and debian/woody
	PAM 0.72 implementation.
	
	* pam_sm_setcred sshd code: call safe_chown to getuid(), getgid()
	to make krb5 lib happy.

	* New safe_reuse function (not used yet)

	* Update debian directory

2002-12-08 Balazs GAL <balsa@rit.bme.hu>
	
	* Now I write this Changelog. I try to collect some changes from CVS:
	
	* Redesigned build system: with autoconf2.5, automake, libtool.
	Many changes.

	* Now the own conf parser (yacc, flex code) is optional.

	* Ported to FreeBSD

	* Now it can use krb_afslog from kth libkafs too.

	* Now krb524 capabilities for the mit code:
	new krb524_convert_creds_kdc_ccache function for mit

	* Some merge from mainstream

	* New krb5_free_unparsed_name macro for heimdal

	* ssh gssapi ticket forward code

	* Works with heimdal.

	

