Cyrus SASL 1.x Release Notes — Cyrus SASL 2.1.27 documentation

- Home
- Cyrus IMAP
- Download
- Contribute

# Cyrus SASL 1.x Release Notes

## New in 1.5.26

- Interoperability bug in DIGEST-MD5’s layers was fixed.
- DIGEST-MD5’s DES layer has been disabled until the interoperability can be worked out.

## New in 1.5.25

- The DIGEST-MD5 plugin now includes an implementation of RC4, since it’s a lot easier to get working than interfacing with OpenSSL.
- A delayed-open plugin mode has been implemented, but not yet documented.

## New in 1.5.24

- be a little paranoid about what we give PAM
- small bugfixes

## New in 1.5.22

- fixed some DIGEST-MD5 buglets
- fixed serious bug that a client could avoid the authorization callback
- added pwcheck method “sia” for Digital Unix
- now should try libdb-3 before libdb.

## New in 1.5.21

- build process fixes

## New in 1.5.20

- bug fixes
- LOGIN mechanism has a compatibility tweak

## New in 1.5.19

- Initial srp work
- Programmers Guide more complete
- bug fixes (of course)

## New in 1.5.18

- javasasl library in conformance with internet draft
- man pages for all functions written
- bug fixes (of course)

## New in 1.5.17

- give application authentication name and realm more uniformly
- sasldblistusers utility to list users in sasldb
- memory leaks eliminated; boundary cases tested

## New in 1.5.16

- pwcheck_method now defaults to sasldb. READ UPGRADE INSTRUCTIONS IN README
- sanity checking inputs throughout the code.
- Unsupported LOGIN plugin added to the Windows build.
- calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the old ticket file before returning.

## New in 1.5.15

- configure now correctly detects Berkeley DB 3.x (Claus Assmann).

## New in 1.5.14

- Upgraded to libtool 1.3.4.
- External SSF handled more uniformly, and handle min/max SSF requests correctly.
- Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>. Please don’t enable it unless you know you need it.
- HP/UX support, contributed by Claus Assmann.

## New in 1.5.13

- Sanity check to make sure there’s at least something in sasldb READ UPGRADE INSTRUCTIONS IN README
- Fixes to how external layers are handled (some fixes by Alexey Melnikov)
- Berkeley DB 3.x support contributed by Greg Shapiro
- Additional pwcheck fixes (Joe Hohertz)
- Fixed Heimdal krb5 configure checks
- other random fixes

## New in 1.5.12

- lots of bugfixes
- DIGEST-MD5 more in conformance with spec
- support for Berkeley DB
- support for OpenSSL’s version of RC4

## New in 1.5.11

- bugfix in realm support for DIGEST-MD5

## New in 1.5.10

- DIGEST-MD5 layer support
- dbconversion utility added

## New in 1.5.9

- Bug fixes
- More win32 support
- Realm support in the database (database format changed again, sorry) Other realm support in plugins; need to document it
- Preliminary code for pwcheck added; not yet tested (and probably not working)
- config stuff should be less case/whitespace sensitive
- more error conditions logged

## New in 1.5.5

- Bug fixes
- sasldb plaintext support (database format changed!!!)
- Handles multiple realms in DIGEST
- New Windows compatibility (tested!)

## New in 1.5.3

- Bug fixes
- Tested GSSAPI & added layers
- Some changes for Windows compatibility (next release)

## New in 1.5.2

- A few bug fixes
- Better portability
- Upgraded libtool

## New in 1.5.0

- Lots of bug fixes
- A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!)
- Digest authentication works
- Configuration file
- Some more documentation (doc/programming)
- Code cleanup

## New in 1.4.1

- Tested kerberos4, cram, plain, and anonymous fairly extensively
- Many bugs fixed
- Created sample programs
- Added digest
- Prototype credential API

## New in 1.3b1

- Added saslpasswd for setting sasl passwords
- Added sfsasl for people using sfio
- Lots of bug fixes

## New in 1.2b3

- Slightly better documentation, easier compilation
- Plain now understands authorization and callbacks

## New in 1.2b2

- Win32 support
- Fixes to anonymous, kerberos mechs
- Some signed lengths in the API changed to unsigned

## New in 1.2b1

- Lots of bug fixes
- GSSAPI
- Cleaner getopt interface
- Cleaner plugin callback lookup interface
- Global inits now take callback list, not just a sasl_getopt_t
- Preliminary Java support
- Authentication database hook
- Default AuthDB routines moved from mechanisms to library
- Logging hook
- Default syslog-based logging hook in library
- Preliminary plaintext transition for CRAM/SCRAM