Add CHANGES and release note for GL #2607

diff --git a/CHANGES b/CHANGES
index c01583ed8c5a66d63bbedd272d70cc541c1b5506..2093d52eb8e4b64ea0b12151e43257da9e1bd1ce 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5609.  [func]          GSSAPI support no longer uses the ISC SPNEGO
+                       implementation. [GL #2607]
+
 5608.  [bug]           Dig now honors +retry=0 and +tries=1 when queries
                        are sent over TCP (+tcp) and the remote server closes
                        the connection prematurely. [GL #2490]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 96d83f53633f01e7836c423f9f3f6fc1c2781e0f..c43b733c9dc66119a9e8f1543a9011bd60cb08df 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -34,7 +34,12 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- The GSSAPI no longer uses the ISC implementation of the SPNEGO
+  mechanism and instead relies on the SPNEGO implementation from the
+  system Kerberos library. All major Kerberos libraries contain the
+  SPNEGO mechanism implementation. This change was implemented in BIND
+  9.17.2, but it was not included in the release notes at the time.
+  [GL #2607]
 
 Bug Fixes
 ~~~~~~~~~