Update for krb5-1.17.1

diff --git a/README b/README
index fd1eed646f2e09e2d95e7fd4cf69032f296d7efd..3035590bfd0ad84e138aff6cd8b581bc8dfb528f 100644 (file)
--- a/README
+++ b/README
@@ -73,6 +73,50 @@ from using single-DES cryptosystems.  Among these is a configuration
 variable that enables "weak" enctypes, which defaults to "false"
 beginning with krb5-1.8.
 
+Major changes in 1.17.1 (2019-12-11)
+------------------------------------
+
+This is a bug fix release.
+
+* Fix a bug preventing "addprinc -randkey -kvno" from working in
+  kadmin.
+
+* Fix a bug preventing time skew correction from working when a KCM
+  credential cache is used.
+
+krb5-1.17.1 changes by ticket ID
+--------------------------------
+
+8735    GSS buffer set failures on Windows due to gssalloc_realloc()
+8774    Update doxygen-RST bridge to Python 3
+8779    Remove erroneous text from kinit man page
+8783    memory leak via krb5_rc_none_close
+8789    Document the double-colon behavior of DIR ccaches
+8790    Leash krb5_cc_start_seq_get error popups
+8796    Document krb5kdc without -r
+8797    Wrong functions used in gss_get_mic_iov_length() documentation example code
+8801    Fix some return code handling bugs
+8802    Remove outdated text in krb5kdc/kadmind man pages
+8803    Rename hmac() function
+8810    Fix Python fallback in configure.ac
+8813    Improve logging documentation
+8818    Convert OTP and kdcproxy tests to Python 3
+8821    Correct documentation of final profiles
+8824    Initialize life/rlife in kdcpolicy interface
+8825    Don't skip past zero byte in profile parsing
+8826    Fix KCM client time offset propagation
+8831    Update LDAP KDB module documentation
+8834    Update supported_enctypes documentation
+8835    Remove some outdated iprop documentation
+8839    Fix missing field in /etc/gss/mech documentation
+8840    Accept GSS mechs which don't supply attributes
+8841    Fix t_otp.py for pyrad 2.2
+8846    Fix SPNEGO fallback context handling
+8848    kadmin.local: ank -kvno parameter doesnt work
+8850    Fix gss_set_sec_context_option() context creation
+8852    Various gssalloc fixes
+
+
 Major changes in 1.17 (2019-01-08)
 ----------------------------------
 
@@ -410,6 +454,7 @@ reports, suggestions, and valuable resources:
     Remi Ferrand
     Paul Fertser
     Fabiano Fidêncio
+    Frank Filz
     William Fiveash
     Jacques Florent
     Ákos Frohner
@@ -445,6 +490,7 @@ reports, suggestions, and valuable resources:
     Pavel Jindra
     Brian Johannesmeyer
     Joel Johnson
+    Lutz Justen
     Alexander Karaivanov
     Anders Kaseorg
     Bar Katz
@@ -453,11 +499,13 @@ reports, suggestions, and valuable resources:
     W. Trevor King
     Patrik Kis
     Martin Kittel
+    Thomas Klausner
     Matthew Krupcale
     Mikkel Kruse
     Reinhard Kugler
     Tomas Kuthan
     Pierre Labastie
+    Andreas Ladanyi
     Chris Leick
     Volker Lendecke
     Jan iankko Lieskovsky
@@ -492,7 +540,9 @@ reports, suggestions, and valuable resources:
     Andrej Ota
     Dmitri Pal
     Javier Palacios
+    Dilyan Palauzov
     Tom Parker
+    Eric Pauly
     Ezra Peisach
     Alejandro Perez
     Zoran Pericic

diff --git a/src/man/k5identity.man b/src/man/k5identity.man
index 039cbe3cfafa03d2ea702b2a5fd36d2b9203c929..4213ac349580d8aa794109768a51d27a7098b697 100644 (file)
--- a/src/man/k5identity.man
+++ b/src/man/k5identity.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5IDENTITY" "5" " " "1.17" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 k5identity \- Kerberos V5 client principal selection rules
 .

diff --git a/src/man/k5login.man b/src/man/k5login.man
index 5debeb17199fa91d79e88e7b7a8e0d9578446a92..16dc45485ca62a30a7d2c6f84e9b29d1395c1d40 100644 (file)
--- a/src/man/k5login.man
+++ b/src/man/k5login.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5LOGIN" "5" " " "1.17" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 k5login \- Kerberos V5 acl file for host access
 .

diff --git a/src/man/k5srvutil.man b/src/man/k5srvutil.man
index 722132ea41be574eca1aaba04a2293b38759e799..7271b953ca25253329fb0feeab78d73d729573df 100644 (file)
--- a/src/man/k5srvutil.man
+++ b/src/man/k5srvutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "K5SRVUTIL" "1" " " "1.17" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 k5srvutil \- host key table (keytab) manipulation utility
 .

diff --git a/src/man/kadm5.acl.man b/src/man/kadm5.acl.man
index 5f1a2ac4a715a0081b1ce64b938eb5525dfdb890..c83305408455f70220b72f94379e1dfb69e77d57 100644 (file)
--- a/src/man/kadm5.acl.man
+++ b/src/man/kadm5.acl.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADM5.ACL" "5" " " "1.17" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kadm5.acl \- Kerberos ACL file
 .

diff --git a/src/man/kadmin.man b/src/man/kadmin.man
index 8496772580e17caf1755b767d207cd9f2fd72c23..3c4f013fb866409da1a05fd30235ef96bf6055a8 100644 (file)
--- a/src/man/kadmin.man
+++ b/src/man/kadmin.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIN" "1" " " "1.17" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kadmin \- Kerberos V5 database administration program
 .

diff --git a/src/man/kadmind.man b/src/man/kadmind.man
index 1db5d325443a6bf9d559252d7aff5ec2fa251705..bdeb472c99719704a86b551ca46735c53db86edd 100644 (file)
--- a/src/man/kadmind.man
+++ b/src/man/kadmind.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIND" "8" " " "1.17" "MIT Kerberos"
+.TH "KADMIND" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kadmind \- KADM5 administration server
 .

diff --git a/src/man/kdb5_ldap_util.man b/src/man/kdb5_ldap_util.man
index 36d4eb631d87307d64c2f1714c4f5cbdee610472..2d2119a25672ffb323ab2b7520e970d09a5bcf84 100644 (file)
--- a/src/man/kdb5_ldap_util.man
+++ b/src/man/kdb5_ldap_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_LDAP_UTIL" "8" " " "1.17" "MIT Kerberos"
+.TH "KDB5_LDAP_UTIL" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kdb5_ldap_util \- Kerberos configuration utility
 .

diff --git a/src/man/kdb5_util.man b/src/man/kdb5_util.man
index 5ebc68a578b81b8e9c536496f7856be312dad7dd..9c48c32fb9b898a6d24bf90acb088cf0c4ab3fc1 100644 (file)
--- a/src/man/kdb5_util.man
+++ b/src/man/kdb5_util.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDB5_UTIL" "8" " " "1.17" "MIT Kerberos"
+.TH "KDB5_UTIL" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kdb5_util \- Kerberos database maintenance utility
 .

diff --git a/src/man/kdc.conf.man b/src/man/kdc.conf.man
index 95184e0fcb7391d284a5b3b391f6cf2e1b610fa3..959f00de59824de9e76e707b3eb96777a3f6b54d 100644 (file)
--- a/src/man/kdc.conf.man
+++ b/src/man/kdc.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDC.CONF" "5" " " "1.17" "MIT Kerberos"
+.TH "KDC.CONF" "5" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kdc.conf \- Kerberos V5 KDC configuration file
 .

diff --git a/src/man/kdestroy.man b/src/man/kdestroy.man
index 745ea5cf81b4d92a55a4d50ac370f46eeed9090a..3062b1791e7994b64ae0987d5ad510650c3fd457 100644 (file)
--- a/src/man/kdestroy.man
+++ b/src/man/kdestroy.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KDESTROY" "1" " " "1.17" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kdestroy \- destroy Kerberos tickets
 .

diff --git a/src/man/kerberos.man b/src/man/kerberos.man
index 838aae9255f9de3047c2c2374374118dcae32597..bbefa651ab8682bf812628ff106e2ebfcf40a1f4 100644 (file)
--- a/src/man/kerberos.man
+++ b/src/man/kerberos.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KERBEROS" "7" " " "1.17" "MIT Kerberos"
+.TH "KERBEROS" "7" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kerberos \- Overview of using Kerberos
 .

diff --git a/src/man/kinit.man b/src/man/kinit.man
index a2c14c787d4c56b46f58ef66e8bed09f427b3802..5bb96fa4f678c5ffa67b275176f8c880f1cbad13 100644 (file)
--- a/src/man/kinit.man
+++ b/src/man/kinit.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KINIT" "1" " " "1.17" "MIT Kerberos"
+.TH "KINIT" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kinit \- obtain and cache Kerberos ticket-granting ticket
 .

diff --git a/src/man/klist.man b/src/man/klist.man
index a45d00bcc1f5121950984bd2a11f257286e31a71..ff2969fc2b07f2b23d7d4727c1087146009897ef 100644 (file)
--- a/src/man/klist.man
+++ b/src/man/klist.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KLIST" "1" " " "1.17" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 klist \- list cached Kerberos tickets
 .

diff --git a/src/man/kpasswd.man b/src/man/kpasswd.man
index 716c66a541420c92e8d79ea7c31fc9cfa498bd1d..7f43c4ae65c6ae663e96085fc8d01e1211f5c09d 100644 (file)
--- a/src/man/kpasswd.man
+++ b/src/man/kpasswd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPASSWD" "1" " " "1.17" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kpasswd \- change a user's Kerberos password
 .

diff --git a/src/man/kprop.man b/src/man/kprop.man
index f2c213af8ba7d464c0d5e0384dcec6cdf946ac63..135a3bedda7e23279f248cf233c843e2d891ba88 100644 (file)
--- a/src/man/kprop.man
+++ b/src/man/kprop.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROP" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kprop \- propagate a Kerberos V5 principal database to a replica server
 .

diff --git a/src/man/kpropd.man b/src/man/kpropd.man
index 38daa5e7961e60bf7b5267af1749a6be47e0ba95..ded9b4d76d3a693f0aedf90bd04f2e66c2a65299 100644 (file)
--- a/src/man/kpropd.man
+++ b/src/man/kpropd.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPD" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kpropd \- Kerberos V5 replica KDC update server
 .

diff --git a/src/man/kproplog.man b/src/man/kproplog.man
index e0804d7a965436d1df12f4f1b12d3a30570942aa..0c070b15827d08d935d14e435db7f7fb48cf8f33 100644 (file)
--- a/src/man/kproplog.man
+++ b/src/man/kproplog.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KPROPLOG" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kproplog \- display the contents of the Kerberos principal update log
 .

diff --git a/src/man/krb5-config.man b/src/man/krb5-config.man
index e667018062fcd579781cbd1b2a4585612051f4a4..cb6207a9cdfa06bfe3d53bed45522fa198bc602b 100644 (file)
--- a/src/man/krb5-config.man
+++ b/src/man/krb5-config.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5-CONFIG" "1" " " "1.17" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 krb5-config \- tool for linking against MIT Kerberos libraries
 .

diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man
index 03861881cbdcab05bb500400c7f6be23cc5d2f5a..2a7af6aa46139fb7dbdb72477093738dafb3c6b9 100644 (file)
--- a/src/man/krb5.conf.man
+++ b/src/man/krb5.conf.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5.CONF" "5" " " "1.17" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 krb5.conf \- Kerberos configuration file
 .

diff --git a/src/man/krb5kdc.man b/src/man/krb5kdc.man
index d08d7da75c0ddb942684d268e4d5c3975c333362..9c9b816b3a3dd74381f416df96e24b234a07dfee 100644 (file)
--- a/src/man/krb5kdc.man
+++ b/src/man/krb5kdc.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5KDC" "8" " " "1.17" "MIT Kerberos"
+.TH "KRB5KDC" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 krb5kdc \- Kerberos V5 KDC
 .

diff --git a/src/man/ksu.man b/src/man/ksu.man
index debbf29eb190d152e2e5cbdf9e599fdc9b530531..de6ffd6cee5fb74323ca54471ba877b9137a1880 100644 (file)
--- a/src/man/ksu.man
+++ b/src/man/ksu.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSU" "1" " " "1.17" "MIT Kerberos"
+.TH "KSU" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 ksu \- Kerberized super-user
 .

diff --git a/src/man/kswitch.man b/src/man/kswitch.man
index 149c7bda3b592e245a1b903911c62af8fbcf9e49..336ba7a370349d38b06a780d627d6a27f10eaaa5 100644 (file)
--- a/src/man/kswitch.man
+++ b/src/man/kswitch.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KSWITCH" "1" " " "1.17" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kswitch \- switch primary ticket cache
 .

diff --git a/src/man/ktutil.man b/src/man/ktutil.man
index 4e174c0fecc6c4cead431d828a682b77b709ca58..711a0ed2cb4760095216670c538e654775cc00a1 100644 (file)
--- a/src/man/ktutil.man
+++ b/src/man/ktutil.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KTUTIL" "1" " " "1.17" "MIT Kerberos"
+.TH "KTUTIL" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 ktutil \- Kerberos keytab file maintenance utility
 .

diff --git a/src/man/kvno.man b/src/man/kvno.man
index 90b878fea9aa8a813255a176a52391bf3403fd22..58394e79106bd657cf137e98938c5b47cd867e92 100644 (file)
--- a/src/man/kvno.man
+++ b/src/man/kvno.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KVNO" "1" " " "1.17" "MIT Kerberos"
+.TH "KVNO" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 kvno \- print key version numbers of Kerberos principals
 .

diff --git a/src/man/sclient.man b/src/man/sclient.man
index 0ff40b8b453e351ef32da8bfd53928e07b7ce874..33a35ca1c8400cc9969ad344ca58335e451facca 100644 (file)
--- a/src/man/sclient.man
+++ b/src/man/sclient.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SCLIENT" "1" " " "1.17" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 sclient \- sample Kerberos version 5 client
 .

diff --git a/src/man/sserver.man b/src/man/sserver.man
index b40eee1bbdab0031fcdc01b9b5a368f83cbbaf16..7d9e1d5b352484438ec3adb66bef4e156f3d5210 100644 (file)
--- a/src/man/sserver.man
+++ b/src/man/sserver.man
@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "SSERVER" "8" " " "1.17" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.17.1" "MIT Kerberos"
 .SH NAME
 sserver \- sample Kerberos version 5 server
 .

diff --git a/src/patchlevel.h b/src/patchlevel.h
index 8afd2d1aaf0a2bc0057f24f157112f0762633d3c..57f9db320cdb3cd9bf35358d42003a152b94527b 100644 (file)
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -51,7 +51,7 @@
  */
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 17
-#define KRB5_PATCHLEVEL 0
-#define KRB5_RELTAIL "postrelease"
+#define KRB5_PATCHLEVEL 1
+/* #undef KRB5_RELTAIL */
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.17"
+#define KRB5_RELTAG "krb5-1.17.1-final"

diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index 56b77324df5fa129f56c5bfee54358c344f53d3e..8cfbe9f3c485c2be200a6e6ed5abd147692080af 100644 (file)
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.17-postrelease\n"
+"Project-Id-Version: mit-krb5 1.17.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2019-12-11 11:14-0500\n"
+"POT-Creation-Date: 2019-12-11 11:46-0500\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"