From: Sam Hartman Date: Sun, 13 Apr 2003 19:40:36 +0000 (+0000) Subject: Update release notes X-Git-Tag: debian/1.2.9-1~14 X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=2497c40cf87d7727b5d4ea7b05dff21809e16950;p=packages%2Fo%2Fopenafs.git Update release notes --- diff --git a/RELNOTES-1.2.8 b/RELNOTES-1.2.8 deleted file mode 100644 index 9afa3eaaa..000000000 --- a/RELNOTES-1.2.8 +++ /dev/null @@ -1,103 +0,0 @@ - OpenAFS Release Notes - Version 1.2.8 - _________________________________________________________________ -New platform support. -All systems: New functionality and minor bugfixes. - _________________________________________________________________ - -* Native Kerberos 5 support: rxkad 2b - -AFS is now capable of using Kerberos 5 for authentication via rxkad -2b. Clients do not need to be updated to take advantage of this, -although they must be using a Kerberos 5 based aklog. A krb5 aklog is -available as part of Ken Hornstein's afs-krb5 migration kit. To use -rxkad 2b, your AFS servers must be running OpenAFS 1.2.8, and your -KDCs must be running MIT Kerberos 5 1.2.6 or later. The krb524d -included in MIT Kerberos 5 1.2.6 will respond to requests for AFS -service tickets with only the encrypted part of a Kerberos 5 ticket. -krb524d can be configured to not do this on a per principal basis. -More information on configuring this krb524d behavior is available in -the README for MIT Kerberos 5 1.2.6 and later. - -Support for this is not yet available in Heimdal, but will be present -in a forthcoming release. - -Note that to use this feature, you must be running a krb524d. A new -version of aklog that eliminates the need for krb524d is under development -and will be available in the near future. - -OpenAFS servers will continue to accept Kerberos 4 derived tokens, so -it is not necessary to immediately upgrade your aklog or KDCs if you do -not wish to take advantage of this new feature. - -* New platform support: HP-UX 11.0 - -HP-UX 11.0 is now supported. Building for HP-UX 11.0 requires a -header called vfs_vm.h which HP has provided on their web site: - -http://h21007.www2.hp.com/dspp/tech/tech_TechSoftwareDetailPage_IDX/1,1703,687,00.html - -To navigate down from the top level of the portal, one would do -www.hp.com/dspp -> i want to... -> download software -> operating -systems to get to the same page. - -All systems: - -- A memory leak in the dynroot directory creation process was fixed. - -- Modified the meaning of the -fakestat flag to afsd so that only mounpoints - for volumes outside the local cell have stat information faked. The - -fakestat-all flag to afsd will provide the former behavior. - -- Dynamically allocate memory for the array of client interface addresses - to avoid running over the end of the array. - -- Don't assume getchar() returns char; it returns int. - -- Modify Rx semantics of the serial number field in ack packets to provide - more reliable RTT computation. - -- Change some ints to unsigned for correct quota calculation. - -- Return EINVAL when the user tries to create a FIFO in AFS, instead of - silently creating a regular file. - -Linux: - -- Disable new Linux kernel threads model in client to fix compilation - errors on RedHat 2.4.7-10 kernels. - -- Downmap F_*LK64 macros to F_*LK if they're different, which is safe - since we have no large files for now. - -- Some rw locks that were previously not initialized now are. - -- Patches to make the client work on Linux kernels that do not export - sys_call_table are now part of the base source distribution. - -- Make PAGs under Linux deal correctly with the case of ngroups = 0. - -Solaris: - -- An NFS translator kernel module is now provided. - -- Fix a fakestat related kernel panic: Only clean up the open count in - VOP_INACTIVE when the vcache is mvstat 0 (necessary because - executables don't get VOP_CLOSE'd). Volume roots (mvstat 2) need to - keep their open counts, because under fakestat, the mountpoint above - it is still considered open by the kernel. - -- Don't silently drop bits if ino_t is a larger type than afs_int32. - -MacOS X: - -- Recognize MacOS X 10.2.2 as ppc_darwin_60. - -Windows: - -- The Windows AFS client will now handle move and rename operations - performed through Explorer correctly, and will warn the user when - the destination file name already exists. - -- Files created in AFS via the Windows client will no longer be given - a timestamp of -1 (1969). - diff --git a/RELNOTES-1.2.9 b/RELNOTES-1.2.9 new file mode 100644 index 000000000..645b3cc0b --- /dev/null +++ b/RELNOTES-1.2.9 @@ -0,0 +1,71 @@ + OpenAFS Release Notes - Version 1.2.9 + _________________________________________________________________ +New platform support. +All systems: New functionality and minor bugfixes. + _________________________________________________________________ + +* kaserver defaults to disallowing interrealm authentication. + +Due to security holes present in the Kerberos 4 protocol, the kaserver +now defaults to disallowing interrealm authentication. This functionality +can be restored by supplying the "-crossrealm" flag to the kaserver. +However, note that doing so is considered a significant security risk. + +* New platform support: RedHat Linux 9.0, Solaris 9 12/02, server only + support for Tru64 5.1. + +All systems: + +- rxkad 2b will now do krb4/krb5 principal name translation. + +- Always include errno.h instead of declaring "extern int errno", for + compatability with modern glibc. + +- Fix race conditions in fileserver responsible for various fileserver + crashes. + +- Fix a deadlock condition in the fileserver that could occur at shutdown + time. + +- Fix fileserver logging to be more verbose and to specify ports in the + correct byte order. + +- Rewrite of cell handling code, to allow for more consistant behavior + across reboots. This also allows clients to have an empty CellServDB + as long as AFSDB support is enabled and ThisCell has AFSDB records. + +- Corrected integer overflow in xdrmem_getbytes() routine in our xdr + implementation, even thought it's unused. + +Solaris: + +- Autoconf glue added to correctly build on Solaris 9 12/02, which replaced + the fs_rlink member of a struct fs with with fs_rolled. + +- Kernel module now no longer uses the depricated newproc() function, + instead using thread_create to spawn a kernel thread. + +- Repaired Solaris x86 support. + +Linux: + +- Notice NETUNREACH errors and timeout attempts to access AFS quickly + when we're not on the network. + +- rxk listener shutdown code rewritten to no longer need sys_kill. + +- Search for linux kernel headers in both /usr/src/linux-2.4 and + /usr/src/linux at build time. + +MacOS X: + +- Recognize MacOS X 10.2.3, 10.2.4, and 10.2.5 as ppc_darwin_60 at + build time. + +AIX: + +- Make the salvager work on namei fileserver partitions. + +Tru64: + +- Allow server binaries to be built on Tru64 5.1. No client support yet.