Update release notes

diff --git a/RELNOTES-1.2.8 b/RELNOTES-1.2.8
deleted file mode 100644 (file)
index 9afa3ea..0000000
--- a/RELNOTES-1.2.8
+++ /dev/null
@@ -1,103 +0,0 @@
-                  OpenAFS Release Notes - Version 1.2.8
-     _________________________________________________________________
-New platform support.
-All systems: New functionality and minor bugfixes.
-     _________________________________________________________________
-
-* Native Kerberos 5 support: rxkad 2b
-
-AFS is now capable of using Kerberos 5 for authentication via rxkad
-2b.  Clients do not need to be updated to take advantage of this,
-although they must be using a Kerberos 5 based aklog.  A krb5 aklog is
-available as part of Ken Hornstein's afs-krb5 migration kit.  To use
-rxkad 2b, your AFS servers must be running OpenAFS 1.2.8, and your
-KDCs must be running MIT Kerberos 5 1.2.6 or later.  The krb524d
-included in MIT Kerberos 5 1.2.6 will respond to requests for AFS
-service tickets with only the encrypted part of a Kerberos 5 ticket.
-krb524d can be configured to not do this on a per principal basis.
-More information on configuring this krb524d behavior is available in
-the README for MIT Kerberos 5 1.2.6 and later.
-
-Support for this is not yet available in Heimdal, but will be present
-in a forthcoming release.
-
-Note that to use this feature, you must be running a krb524d.  A new
-version of aklog that eliminates the need for krb524d is under development
-and will be available in the near future.
-
-OpenAFS servers will continue to accept Kerberos 4 derived tokens, so
-it is not necessary to immediately upgrade your aklog or KDCs if you do
-not wish to take advantage of this new feature.
-
-* New platform support: HP-UX 11.0
-
-HP-UX 11.0 is now supported.  Building for HP-UX 11.0 requires a
-header called vfs_vm.h which HP has provided on their web site:
-
-http://h21007.www2.hp.com/dspp/tech/tech_TechSoftwareDetailPage_IDX/1,1703,687,00.html
-
-To navigate down from the top level of the portal, one would do
-www.hp.com/dspp -> i want to... -> download software -> operating
-systems to get to the same page.
-
-All systems:
-
-- A memory leak in the dynroot directory creation process was fixed.
-
-- Modified the meaning of the -fakestat flag to afsd so that only mounpoints
-  for volumes outside the local cell have stat information faked.  The
-  -fakestat-all flag to afsd will provide the former behavior.
-
-- Dynamically allocate memory for the array of client interface addresses
-  to avoid running over the end of the array.
-
-- Don't assume getchar() returns char; it returns int.
-
-- Modify Rx semantics of the serial number field in ack packets to provide
-  more reliable RTT computation.
-
-- Change some ints to unsigned for correct quota calculation.
-
-- Return EINVAL when the user tries to create a FIFO in AFS, instead of
-  silently creating a regular file.
-
-Linux: 
-
-- Disable new Linux kernel threads model in client to fix compilation
-  errors on RedHat 2.4.7-10 kernels.
-
-- Downmap F_*LK64 macros to F_*LK if they're different, which is safe 
-  since we have no large files for now.
-
-- Some rw locks that were previously not initialized now are.
-
-- Patches to make the client work on Linux kernels that do not export
-  sys_call_table are now part of the base source distribution.
-
-- Make PAGs under Linux deal correctly with the case of ngroups = 0.
-
-Solaris:
-
-- An NFS translator kernel module is now provided.
-
-- Fix a fakestat related kernel panic: Only clean up the open count in
-  VOP_INACTIVE when the vcache is mvstat 0 (necessary because
-  executables don't get VOP_CLOSE'd). Volume roots (mvstat 2) need to
-  keep their open counts, because under fakestat, the mountpoint above
-  it is still considered open by the kernel.
-
-- Don't silently drop bits if ino_t is a larger type than afs_int32.
-
-MacOS X:
-
-- Recognize MacOS X 10.2.2 as ppc_darwin_60.
-
-Windows:
-
-- The Windows AFS client will now handle move and rename operations
-  performed through Explorer correctly, and will warn the user when
-  the destination file name already exists.
-
-- Files created in AFS via the Windows client will no longer be given
-  a timestamp of -1 (1969).
-

diff --git a/RELNOTES-1.2.9 b/RELNOTES-1.2.9
new file mode 100644 (file)
index 0000000..645b3cc
--- /dev/null
+++ b/RELNOTES-1.2.9
@@ -0,0 +1,71 @@
+                  OpenAFS Release Notes - Version 1.2.9
+     _________________________________________________________________
+New platform support.
+All systems: New functionality and minor bugfixes.
+     _________________________________________________________________
+
+* kaserver defaults to disallowing interrealm authentication.
+
+Due to security holes present in the Kerberos 4 protocol, the kaserver
+now defaults to disallowing interrealm authentication.  This functionality
+can be restored by supplying the "-crossrealm" flag to the kaserver.
+However, note that doing so is considered a significant security risk.
+
+* New platform support: RedHat Linux 9.0, Solaris 9 12/02, server only
+  support for Tru64 5.1.
+
+All systems:
+
+- rxkad 2b will now do krb4/krb5 principal name translation.
+
+- Always include errno.h instead of declaring "extern int errno", for
+  compatability with modern glibc.
+
+- Fix race conditions in fileserver responsible for various fileserver
+  crashes.
+
+- Fix a deadlock condition in the fileserver that could occur at shutdown
+  time.
+
+- Fix fileserver logging to be more verbose and to specify ports in the
+  correct byte order.
+
+- Rewrite of cell handling code, to allow for more consistant behavior
+  across reboots.  This also allows clients to have an empty CellServDB
+  as long as AFSDB support is enabled and ThisCell has AFSDB records.
+
+- Corrected integer overflow in xdrmem_getbytes() routine in our xdr
+  implementation, even thought it's unused.
+
+Solaris:
+
+- Autoconf glue added to correctly build on Solaris 9 12/02, which replaced
+  the fs_rlink member of a struct fs with with fs_rolled.
+
+- Kernel module now no longer uses the depricated newproc() function,
+  instead using thread_create to spawn a kernel thread.
+
+- Repaired Solaris x86 support.
+
+Linux:
+
+- Notice NETUNREACH errors and timeout attempts to access AFS quickly
+  when we're not on the network.
+
+- rxk listener shutdown code rewritten to no longer need sys_kill.
+
+- Search for linux kernel headers in both /usr/src/linux-2.4 and
+  /usr/src/linux at build time.
+
+MacOS X:
+
+- Recognize MacOS X 10.2.3, 10.2.4, and 10.2.5 as ppc_darwin_60 at
+  build time.
+
+AIX:
+
+- Make the salvager work on namei fileserver partitions.
+
+Tru64:
+
+- Allow server binaries to be built on Tru64 5.1.  No client support yet.