krb5-sync 2.1

Sam Hartman ported the kadmin patch included in this package to MIT Kerberos 1.8.3, so that seemed like a good excuse for a new release. The patch is not yet heavily tested.

Also in this version are a few bug fixes from the previous release around use with Heimdal. Heimdal 1.3.2 will return an error about a missing service location plugin instead of the last error from Active Directory when changing passwords, which caused the plugin to fail the password change if Active Directory wasn't available. This release now correctly queues the change (and does so for any password change error, to work around problems like this).

Finally, there are some fixes for routine error suppression in krb5-sync-backend with the -s flag, and the Active Directory status manipulation code no longer uses deprecated OpenLDAP library functions.

You can get the latest version from the krb5-sync distribution page.