1 | Kerberos Version 5, Release 1.1 |
---|
2 | |
---|
3 | Release Notes |
---|
4 | |
---|
5 | The MIT Kerberos Team |
---|
6 | |
---|
7 | Unpacking the Source Distribution |
---|
8 | --------------------------------- |
---|
9 | |
---|
10 | The source distribution of Kerberos 5 comes in three gzipped tarfiles, |
---|
11 | krb5-1.1.src.tar.gz, krb5-1.1.doc.tar.gz, and krb5-1.1.crypto.tar.gz. |
---|
12 | The krb5-1.1.doc.tar.gz contains the doc/ directory and this README |
---|
13 | file. The krb5-1.1.src.tar.gz contains the src/ directory and this |
---|
14 | README file, except for the crypto library sources, which are in |
---|
15 | krb5-1.1.crypto.tar.gz. |
---|
16 | |
---|
17 | Instruction on how to extract the entire distribution follow. These |
---|
18 | directions assume that you want to extract into a directory called |
---|
19 | DIST. |
---|
20 | |
---|
21 | If you have the GNU tar program and gzip installed, you can simply do: |
---|
22 | |
---|
23 | mkdir DIST |
---|
24 | cd DIST |
---|
25 | gtar zxpf krb5-1.1.src.tar.gz |
---|
26 | gtar zxpf krb5-1.1.crypto.tar.gz |
---|
27 | gtar zxpf krb5-1.1.doc.tar.gz |
---|
28 | |
---|
29 | If you don't have GNU tar, you will need to get the FSF gzip |
---|
30 | distribution and use gzcat: |
---|
31 | |
---|
32 | mkdir DIST |
---|
33 | cd DIST |
---|
34 | gzcat krb5-1.1.src.tar.gz | tar xpf - |
---|
35 | gzcat krb5-1.1.crypto.tar.gz | tar xpf - |
---|
36 | gzcat krb5-1.1.doc.tar.gz | tar xpf - |
---|
37 | |
---|
38 | Both of these methods will extract the sources into DIST/krb5-1.1/src |
---|
39 | and the documentation into DIST/krb5-1.1/doc. |
---|
40 | |
---|
41 | Building and Installing Kerberos 5 |
---|
42 | ---------------------------------- |
---|
43 | |
---|
44 | The first file you should look at is doc/install.ps; it contains the |
---|
45 | notes for building and installing Kerberos 5. The info file |
---|
46 | krb5-install.info has the same information in info file format. You |
---|
47 | can view this using the GNU emacs info-mode, or by using the |
---|
48 | standalone info file viewer from the Free Software Foundation. This |
---|
49 | is also available as an HTML file, install.html. |
---|
50 | |
---|
51 | Other good files to look at are admin-guide.ps and user-guide.ps, |
---|
52 | which contain the system administrator's guide, and the user's guide, |
---|
53 | respectively. They are also available as info files |
---|
54 | kerberos-admin.info and krb5-user.info, respectively. These files are |
---|
55 | also available as HTML files. |
---|
56 | |
---|
57 | If you are attempting to build under Windows, please see the |
---|
58 | src/windows/README file. |
---|
59 | |
---|
60 | Reporting Bugs |
---|
61 | -------------- |
---|
62 | |
---|
63 | Please report any problems/bugs/comments using the krb5-send-pr |
---|
64 | program. The krb5-send-pr program will be installed in the sbin |
---|
65 | directory once you have successfully compiled and installed Kerberos |
---|
66 | V5 (or if you have installed one of our binary distributions). |
---|
67 | |
---|
68 | If you are not able to use krb5-send-pr because you haven't been able |
---|
69 | compile and install Kerberos V5 on any platform, you may send mail to |
---|
70 | krb5-bugs@mit.edu. |
---|
71 | |
---|
72 | Notes, Major Changes, and Known Bugs |
---|
73 | ------------------------------------ |
---|
74 | |
---|
75 | * Triple DES support is included; however, it is only usable for |
---|
76 | service keys at the moment, due to a large number of compatibility |
---|
77 | issues. For example, the GSSAPI library has some (buggy) support |
---|
78 | for a triple DES session key, but it is intentionally disabled. |
---|
79 | ** Do not use triple-DES in your config files except as described in |
---|
80 | ** the documentation. |
---|
81 | |
---|
82 | * The principal database now uses the btree backend of Berkeley DB. |
---|
83 | This should result in improved KDC performance. |
---|
84 | |
---|
85 | * The lib/rpc tests do not appear to work under NetBSD-1.4, for |
---|
86 | reasons that are not completely clear at the moment, but probably |
---|
87 | have something to do with portmapper interfacing. This should not |
---|
88 | affect other operations, such as kadmind operation. |
---|
89 | |
---|
90 | * Shared library builds are under a new framework; at this point only |
---|
91 | Solaris (2.x), Irix (6.5), NetBSD (1.4 i386), and possibly Linux are |
---|
92 | known to work. All other working shared library builds may be |
---|
93 | figments of your imagination. |
---|
94 | |
---|
95 | * Many existing databases, especially those converted from krb4 |
---|
96 | original databases, may contain expiration dates in 1999. You |
---|
97 | should make sure to update these expiration dates, and also change |
---|
98 | any config file entries that have two-digit years. |
---|
99 | |
---|
100 | * Hardware preauthentication is known to be broken; this will be fixed |
---|
101 | in an upcoming release. |
---|
102 | |
---|
103 | * krb524d now defaults to forking into the background; use |
---|
104 | "krb524d -nofork" to avoid forking. |
---|
105 | |
---|
106 | * Not all reported bugs have been fixed in this release, due to time |
---|
107 | constraints. We are planning to make another release in the near |
---|
108 | future with more complete triple DES support, and additional |
---|
109 | bugfixes. Many of the bugs in our database are reported against |
---|
110 | what is now quite old code, or require hardware that we do not have, |
---|
111 | which make them difficult to reproduce and debug. We will work on |
---|
112 | these older bugs and some externally submitted patches for the |
---|
113 | following release. |
---|
114 | |
---|
115 | Copyright Notice and Legal Administrivia |
---|
116 | ---------------------------------------- |
---|
117 | |
---|
118 | Copyright (C) 1985-1999 by the Massachusetts Institute of Technology. |
---|
119 | |
---|
120 | All rights reserved. |
---|
121 | |
---|
122 | Export of this software from the United States of America may require |
---|
123 | a specific license from the United States Government. It is the |
---|
124 | responsibility of any person or organization contemplating export to |
---|
125 | obtain such a license before exporting. |
---|
126 | |
---|
127 | WITHIN THAT CONSTRAINT, permission to use, copy, modify, and |
---|
128 | distribute this software and its documentation for any purpose and |
---|
129 | without fee is hereby granted, provided that the above copyright |
---|
130 | notice appear in all copies and that both that copyright notice and |
---|
131 | this permission notice appear in supporting documentation, and that |
---|
132 | the name of M.I.T. not be used in advertising or publicity pertaining |
---|
133 | to distribution of the software without specific, written prior |
---|
134 | permission. Furthermore if you modify this software you must label |
---|
135 | your software as modified software and not distribute it in such a |
---|
136 | fashion that it might be confused with the original MIT software. |
---|
137 | M.I.T. makes no representations about the suitability of this software |
---|
138 | for any purpose. It is provided "as is" without express or implied |
---|
139 | warranty. |
---|
140 | |
---|
141 | THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR |
---|
142 | IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED |
---|
143 | WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. |
---|
144 | |
---|
145 | Individual source code files are copyright MIT, Cygnus Support, |
---|
146 | OpenVision, Oracle, Sun Soft, FundsXpress, and others. |
---|
147 | |
---|
148 | Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira, |
---|
149 | and Zephyr are trademarks of the Massachusetts Institute of Technology |
---|
150 | (MIT). No commercial use of these trademarks may be made without |
---|
151 | prior written permission of MIT. |
---|
152 | |
---|
153 | "Commercial use" means use of a name in a product or other for-profit |
---|
154 | manner. It does NOT prevent a commercial firm from referring to the |
---|
155 | MIT trademarks in order to convey information (although in doing so, |
---|
156 | recognition of their trademark status should be given). |
---|
157 | |
---|
158 | The following copyright and permission notice applies to the |
---|
159 | OpenVision Kerberos Administration system located in kadmin/create, |
---|
160 | kadmin/dbutil, kadmin/passwd, kadmin/server, lib/kadm5, and portions |
---|
161 | of lib/rpc: |
---|
162 | |
---|
163 | Copyright, OpenVision Technologies, Inc., 1996, All Rights Reserved |
---|
164 | |
---|
165 | WARNING: Retrieving the OpenVision Kerberos Administration system |
---|
166 | source code, as described below, indicates your acceptance of the |
---|
167 | following terms. If you do not agree to the following terms, do not |
---|
168 | retrieve the OpenVision Kerberos administration system. |
---|
169 | |
---|
170 | You may freely use and distribute the Source Code and Object Code |
---|
171 | compiled from it, with or without modification, but this Source |
---|
172 | Code is provided to you "AS IS" EXCLUSIVE OF ANY WARRANTY, |
---|
173 | INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY OR |
---|
174 | FITNESS FOR A PARTICULAR PURPOSE, OR ANY OTHER WARRANTY, WHETHER |
---|
175 | EXPRESS OR IMPLIED. IN NO EVENT WILL OPENVISION HAVE ANY LIABILITY |
---|
176 | FOR ANY LOST PROFITS, LOSS OF DATA OR COSTS OF PROCUREMENT OF |
---|
177 | SUBSTITUTE GOODS OR SERVICES, OR FOR ANY SPECIAL, INDIRECT, OR |
---|
178 | CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT, INCLUDING, |
---|
179 | WITHOUT LIMITATION, THOSE RESULTING FROM THE USE OF THE SOURCE |
---|
180 | CODE, OR THE FAILURE OF THE SOURCE CODE TO PERFORM, OR FOR ANY |
---|
181 | OTHER REASON. |
---|
182 | |
---|
183 | OpenVision retains all copyrights in the donated Source Code. OpenVision |
---|
184 | also retains copyright to derivative works of the Source Code, whether |
---|
185 | created by OpenVision or by a third party. The OpenVision copyright |
---|
186 | notice must be preserved if derivative works are made based on the |
---|
187 | donated Source Code. |
---|
188 | |
---|
189 | OpenVision Technologies, Inc. has donated this Kerberos |
---|
190 | Administration system to MIT for inclusion in the standard |
---|
191 | Kerberos 5 distribution. This donation underscores our |
---|
192 | commitment to continuing Kerberos technology development |
---|
193 | and our gratitude for the valuable work which has been |
---|
194 | performed by MIT and the Kerberos community. |
---|
195 | |
---|
196 | Acknowledgements |
---|
197 | ---------------- |
---|
198 | |
---|
199 | Appreciation Time!!!! There are far too many people to try to thank |
---|
200 | them all; many people have contributed to the development of Kerberos |
---|
201 | V5. This is only a partial listing.... |
---|
202 | |
---|
203 | Thanks to Paul Vixie and the Internet Software Consortium for funding |
---|
204 | the work of Barry Jaspan. This funding was invaluable for the OV |
---|
205 | administration server integration, as well as the 1.0 release |
---|
206 | preparation process. |
---|
207 | |
---|
208 | Thanks to John Linn, Scott Foote, and all of the folks at OpenVision |
---|
209 | Technologies, Inc., who donated their administration server for use in |
---|
210 | the MIT release of Kerberos. |
---|
211 | |
---|
212 | Thanks to Jeff Bigler, Mark Eichin, Marc Horowitz, Nancy Gilman, Ken |
---|
213 | Raeburn, and all of the folks at Cygnus Support, who provided |
---|
214 | innumerable bug fixes and portability enhancements to the Kerberos V5 |
---|
215 | tree. Thanks especially to Jeff Bigler, for the new user and system |
---|
216 | administrator's documentation. |
---|
217 | |
---|
218 | Thanks to Doug Engert from ANL for providing many bug fixes, as well |
---|
219 | as testing to ensure DCE interoperability. |
---|
220 | |
---|
221 | Thanks to Ken Hornstein at NRL for providing many bug fixes and |
---|
222 | suggestions. |
---|
223 | |
---|
224 | Thanks to Sean Mullan and Bill Sommerfeld from Hewlett Packard for |
---|
225 | their many suggestions and bug fixes. |
---|
226 | |
---|
227 | Thanks to the members of the Kerberos V5 development team at MIT, both |
---|
228 | past and present: Danillo Almeida, Jay Berkenbilt, Richard Basch, John |
---|
229 | Carr, Don Davis, Alexandra Ellwood, Nancy Gilman, Matt Hancher, Sam |
---|
230 | Hartman, Paul Hill, Marc Horowitz, Eva Jacobus, Barry Jaspan, Geoffrey |
---|
231 | King, John Kohl, Scott McGuire, Kevin Mitchell, Cliff Neuman, Paul |
---|
232 | Park, Ezra Peisach, Chris Provenzano, Ken Raeburn, Jon Rochlis, Jeff |
---|
233 | Schiller, Brad Thompson, Harry Tsai, Ted Ts'o, Marshall Vale, Tom Yu. |
---|