afslogon-20040722

[openafs.git] / NEWS

diff --git a/NEWS b/NEWS
index b92be98..6e741d6 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,4 @@
-OpenAFS News -- history of user-visible changes.  September 25, 2002.
+OpenAFS News -- history of user-visible changes.  April 10, 2003.
 
 * Changes incorporated in OpenAFS 1.3
 
@@ -18,6 +18,43 @@ OpenAFS News -- history of user-visible changes.  September 25, 2002.
    This is enabled by passing -fakestat to afsd, but might not be stable
    on all platforms.
 
+* Changes incorporated in OpenAFS 1.2.9
+
+** The kaserver now defaults to not allowing interrealm authentication,
+   due to security vulnerabilities in the krb4 protocol.  The new
+   "-crossrealm" flag to the kaserver is provided to reenable interrealm
+   authentication if desired.
+
+** RedHat Linux 9.0 is now supported.
+
+** Solaris 9 12/02 is now supported.  Solaris 7 and 8 x86 should now
+   work again.
+
+** On Linux machines using 2.2 series kernels, 2.2.19 or higher is now
+   required.
+
+** An OpenAFS 1.2.9 afsd will not work with kernel modules built from
+   an earlier OpenAFS release.  In general, using a mismatched afsd and
+   kernel modules set is unsupported; it is not recommended that you use
+   such a configuration on a regular basis.
+
+* Changes incorporated in OpenAFS 1.2.8
+
+** Mountpoint directory information is now only faked for cross-cell
+   mountpoits when using the -fakestat flag (e.g. for the directories
+   under /afs, but not for most other volumes mounted inside the cell).
+   The -fakestat-all switch can be used to fake information for all
+   mountpoints.
+
+** HPUX 11.0 is now supported.
+
+** It is now possible for AFS to use Kerberos 5 directly, via rxkad 2b.
+   See the OpenAFS 1.2.8 Release Notes for more information on using this
+   capability.
+
+** An NFS translator kernel module is now included and compiled by default
+   for Solaris only.
+
 * Changes incorporated in OpenAFS 1.2.7
 
 ** MacOS X 10.2 is now supported.  FreeBSD 4.3 and later support is included