OpenAFS Release Notes - Version 1.2.8
     _________________________________________________________________
New platform support.
All systems: New functionality and minor bugfixes.
     _________________________________________________________________

* Native Kerberos 5 support: rxkad 2b

AFS is now capable of using Kerberos 5 for authentication via rxkad
2b.  Clients do not need to be updated to take advantage of this,
although they must be using a Kerberos 5 based aklog.  A krb5 aklog is
available as part of Ken Hornstein's afs-krb5 migration kit.  To use
rxkad 2b, your AFS servers must be running OpenAFS 1.2.8, and your
KDCs must be running MIT Kerberos 5 1.2.6 or later.  The krb524d
included in MIT Kerberos 5 1.2.6 will respond to requests for AFS
service tickets with only the encrypted part of a Kerberos 5 ticket.
krb524d can be configured to not do this on a per principal basis.
More information on configuring this krb524d behavior is available in
the README for MIT Kerberos 5 1.2.6 and later.

Support for this is not yet available in Heimdal, but will be present
in a forthcoming release.

Note that to use this feature, you must be running a krb524d.  A new
version of aklog that eliminates the need for krb524d is under development
and will be available in the near future.

OpenAFS servers will continue to accept Kerberos 4 derived tokens, so
it is not necessary to immediately upgrade your aklog or KDCs if you do
not wish to take advantage of this new feature.

* New platform support: HP-UX 11.0

HP-UX 11.0 is now supported.  Building for HP-UX 11.0 requires a
header called vfs_vm.h which HP has provided on their web site:

http://h21007.www2.hp.com/dspp/tech/tech_TechSoftwareDetailPage_IDX/1,1703,687,00.html

To navigate down from the top level of the portal, one would do
www.hp.com/dspp -> i want to... -> download software -> operating
systems to get to the same page.

All systems:

- A memory leak in the dynroot directory creation process was fixed.

- Modified the meaning of the -fakestat flag to afsd so that only mounpoints
  for volumes outside the local cell have stat information faked.  The
  -fakestat-all flag to afsd will provide the former behavior.

- Dynamically allocate memory for the array of client interface addresses
  to avoid running over the end of the array.

- Don't assume getchar() returns char; it returns int.

- Modify Rx semantics of the serial number field in ack packets to provide
  more reliable RTT computation.

- Change some ints to unsigned for correct quota calculation.

- Return EINVAL when the user tries to create a FIFO in AFS, instead of
  silently creating a regular file.

Linux: 

- Disable new Linux kernel threads model in client to fix compilation
  errors on RedHat 2.4.7-10 kernels.

- Downmap F_*LK64 macros to F_*LK if they're different, which is safe 
  since we have no large files for now.

- Some rw locks that were previously not initialized now are.

- Patches to make the client work on Linux kernels that do not export
  sys_call_table are now part of the base source distribution.

- Make PAGs under Linux deal correctly with the case of ngroups = 0.

Solaris:

- An NFS translator kernel module is now provided.

- Fix a fakestat related kernel panic: Only clean up the open count in
  VOP_INACTIVE when the vcache is mvstat 0 (necessary because
  executables don't get VOP_CLOSE'd). Volume roots (mvstat 2) need to
  keep their open counts, because under fakestat, the mountpoint above
  it is still considered open by the kernel.

- Don't silently drop bits if ino_t is a larger type than afs_int32.

MacOS X:

- Recognize MacOS X 10.2.2 as ppc_darwin_60.

Windows:

- The Windows AFS client will now handle move and rename operations
  performed through Explorer correctly, and will warn the user when
  the destination file name already exists.

- Files created in AFS via the Windows client will no longer be given
  a timestamp of -1 (1969).