krb5 commit [krb5-1.18]: Update for krb5-1.18-beta2

Greg Hudson <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.cvs
Message-ID <[email protected]>
https://github.com/krb5/krb5/commit/74cefb7f560d010fa40aeb3ae539cbff39ca0f47
commit 74cefb7f560d010fa40aeb3ae539cbff39ca0f47
Author: Greg Hudson <[email protected]>
Date:   Mon Jan 27 13:35:30 2020 -0500

    Update for krb5-1.18-beta2

 README              |   14 ++++++++++++++
 src/patchlevel.h    |    4 ++--
 src/po/mit-krb5.pot |    4 ++--
 3 files changed, 18 insertions(+), 4 deletions(-)

diff --git a/README b/README
index 983feec..f6e6306 100644
--- a/README
+++ b/README
@@ -92,6 +92,9 @@ Administrator experience:
   credential forwarding during GSSAPI authentication unless the KDC
   sets the ok-as-delegate bit in the service ticket.
 
+* Use the permitted_enctypes krb5.conf setting as the default value
+  for default_tkt_enctypes and default_tgs_enctypes.
+
 Developer experience:
 
 * Implement krb5_cc_remove_cred() for all credential cache types.
@@ -110,6 +113,10 @@ Protocol evolution:
 * Add support for Microsoft NegoEx.  (Requires one or more third-party
   GSS modules implementing NegoEx mechanisms.)
 
+* Honor the transited-policy-checked ticket flag on application
+  servers, eliminating the requirement to configure capaths on
+  servers in some scenarios.
+
 User experience:
 
 * Add support for "dns_canonicalize_hostname=fallback""`, causing
@@ -195,6 +202,13 @@ krb5-1.18 changes by ticket ID
 8859    Remove KRB5_KDB_FLAG_ALIAS_OK
 8860    Allow kprop over NATs
 8861    Fix LDAP policy enforcement of pw_expiration
+8864    Fix error handling in gssint_mechglue_init()
+8865    Check cross-realm TGT name for RBCD requests
+8866    Fix S4U client authdata handling
+8867    Fix KDC crash in handle_signticket
+8868    Allow cross-realm RBCD with PAC and other authdata
+8869    Apply permitted_enctypes to KDC request enctypes
+8870    Honor transited-policy-checked flag in servers
 
 Acknowledgements
 ----------------
diff --git a/src/patchlevel.h b/src/patchlevel.h
index 47ccbba..e4ee28f 100644
--- a/src/patchlevel.h
+++ b/src/patchlevel.h
@@ -52,6 +52,6 @@
 #define KRB5_MAJOR_RELEASE 1
 #define KRB5_MINOR_RELEASE 18
 #define KRB5_PATCHLEVEL 0
-#define KRB5_RELTAIL "beta1-postrelease"
+#define KRB5_RELTAIL "beta2"
 /* #undef KRB5_RELDATE */
-#define KRB5_RELTAG "krb5-1.18"
+#define KRB5_RELTAG "krb5-1.18-beta2"
diff --git a/src/po/mit-krb5.pot b/src/po/mit-krb5.pot
index 4105bef..0c45977 100644
--- a/src/po/mit-krb5.pot
+++ b/src/po/mit-krb5.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.18-beta1-postrelease\n"
+"Project-Id-Version: mit-krb5 1.18-beta2\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2020-01-27 11:38-0500\n"
+"POT-Creation-Date: 2020-01-27 13:36-0500\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <[email protected]>\n"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.