krb5-sync 0.5

In testing our new Kerberos administrative software, I discovered that account creation through kadmind is treated as an account creation and then a password change, at least with the plugin interface that we have right now. That means that I have to queue Active Directory password changes if the account doesn't exist yet (and handle queuing if there's already a pending queued change).

The new version also does better logging in the command-line program so that one knows what queued files are processed, and obtains new AFS tokens for each change so that they don't expire after some time.

You can get the latest toolkit from the krb5-sync distribution page.