Update krb5 code to use glue routine lucid context functions

[nfs-utils.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index d1cd888e1f9edfc4c66eff7266aa3243c5b2f6f1..146c9c2b65a7d4d161dd33b7d23b058830de4294 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,40 @@
+2006-03-28 kwc@citi.umich.edu
+       Update krb5 code to use glue routine lucid context functions
+       
+       
+       
+       The gssd code should not know about the glue layer's context structure.
+       A previous patch added gss_export_lucid_sec_context() and
+       gss_free_lucid_sec_context() functions to the gssapi glue layer.
+       Use these functions rather than calling directly to the Kerberos
+       gssapi code (which requires the Kerberos context handle rather
+       than the glue's context handle).
+       
+       (really this time)
+       
+2006-03-28 kwc@citi.umich.edu
+       
+       Separate out context handling code for MIT Kerberos and SPKM3
+       into their own file.
+       (Really this time)
+       
+2006-03-28 Kevin Coffman <kwc@citi.umich.edu>
+       User-selectable idmapping cache lifetime
+       
+       Read and process new configuration option, Cache-Expiration, and use
+       the value to determine how long idmapping entries are cached.
+       (Really this time)
+       
+2006-03-27 NeilBrown <neilb@suse.de>
+       1.0.8-rc3
+
+2006-03-27 kwc@citi.umich.edu
+       Add debugging to better detect negotiation of enctype not supported by kernel
+
+       Print debugging message indicating the type of encryption keys being sent
+       down to the kernel.  This should make it easier to detect cases where
+       unsupported encryption types are being negotiated.
+       
 2006-03-27
        Don't close and reopen all pipes on every DNOTIFY signal.