pam_yubico NEWS -- History of user-visible changes.             -*- outline -*-

* Version 2.4 (unreleased)

** New keyword "verbose_otp" to allow displaying OTP characters.
Contributed by qistoph reported in Issue #22:
<http://code.google.com/p/yubico-pam/issues/detail?id=22>.

** Build with -DPAM_DEBUG so that debug file writing works.
Reported by qistoph in Issue #20:
<http://code.google.com/p/yubico-pam/issues/detail?id=20>.

** Make deprecated "ldapserver" work again.
Reported by giovannibajo in Issue #27:
<http://code.google.com/p/yubico-pam/issues/detail?id=27>.

** Fix segmentation fault on 64-bit systems.
Reported by multiple people in Issue #11:
<http://code.google.com/p/yubico-pam/issues/detail?id=11>.

** Don't crash on ^D at su prompt, or generally, on a NULL password value.

* Version 2.3 (released 2010-04-14)

** New keyword "ldap_uri" added.
This keyword is preferred over the old "ldapserver" keyword, and
allows you to specify a complete LDAP URI instead of only the hostname
of your LDAP server.  Contributed by Zubrick.

** Improved README.
Contributed by Erinn Looney-Triggs <erinn.looneytriggs@gmail.com>.

* Version 2.2 (released 2009-05-11)

** Added new PAM configuration variable "key" for base64 client key.

* Version 2.1 (released 2009-03-31)

** Fix documentation.

** Fix warning.

* Version 2.0 (released 2009-03-25)

** Requires libykclient v2.0 or later.
See <http://code.google.com/p/yubico-c-client/>.

* Version 1.14 (released 2009-03-24)

** Quick release to sync release archive with svn code.

* Version 1.13 (released 2009-03-24)

** Fix parsing of password into OTP/ID/password.
Earlier string handling may have been incorrect for short strings.

** Don't pass integers via pam_set_data/pam_get_data.
May solve problems on 64-bit platforms.  Based on patch from
forum.yubico.com.

* Version 1.12 (released 2009-03-24)

** Add support for "use_first_pass" and "try_first_pass".
They work similar to other PAM modules, see README for more
documentation.

Upgrade notice: If you are relying on getting the Yubikey OTP from an
earlier PAM module, and no prompting by the pam_yubico module, you
need to add "try_first_pass" to preserve the same behaviour.

* Version 1.11 (released 2009-02-11)

** Added support to store user:keyid mapping in LDAP.
Contributed by Gregory Brusick <gregory@brusick.ch>.

* Version 1.10 (released 2009-01-13)

** Change license to 2-clause BSD.
The Linux-PAM license is unclear, and in any case, the 2-clause BSD
license is compatible with 3-clause BSD and GPL.

* Version 1.9 (released 2009-01-13)

** Solaris portability improvements.
Suggested by Martin Englund <Martin.Englund@Sun.COM>.

* Version 1.8 (released 2008-09-15)

** Add new parameter 'url' to specify the server template URL.

* Version 1.7 (released 2008-09-01)

** Support two-factor mode to provide a password.

** Support a user-specific configuration file to allow yubikeys per user.

** Use libyubikey-client instead of direct use of libcurl.

** Move *.m4's to m4/.

* Version 1.6 (released 2008-01-11)

** First release from code.google.com repository.

** Clarify documentation with regard to license and development info.

* Version 1.5 (internal release)

** Clarify that license is the same as Linux-PAM (GPLv2 or modified BSD).
This is likely the last internal release, source moving to code.google.com.

* Version 1.4 (internal release)

** Don't free CURL's user agent string before we're done.

** Version 1.3 (internal release)

** Disable echo'ing of password, for FreeRadius.

* Version 1.2 (internal release)

** Added PDF/HTML manual, see yubico-pam.pdf and yubico-pam.html.

** Fixes to use new web service API.

** Add "url" parameter.

** Fix "alwaysok" parameter.

** Fix crash on empty server responses.

** Parse "status" properly.

** Better debug info.

* Version 1.1 (internal release)

** Fix ws-api usage.

** Support "alwaysok".

* Version 1.0 (internal release)

** Initial release.