WebAuth 4.3.1

This is another quick bug-fix release after a major change, but I was able to sneak in various other improvements and fixes that have been pending for a while.

The bugs are an invalid free in webauth_webkdc_login that affected the WebKDC if permitted realms were configured, a missing replacement for krb5_cc_get_full_name for older versions of Kerberos, and some incorrect Perl module includes in pwchange.fcgi that had been broken since the 4.2.0 release.

For additional fixes, I enabled WebAuthDoLogout in .htaccess files, which makes configuring some per-user CGI programs that want logout to be easier, and added an overloaded cmp operator to WebAuth::Exception to make testing easier. I also clarified the documentation for WebAuthLdapKeytab, which otherwise implied that you could have separate configurations per virtual host. There are also some internal improvements to the code.

You can get the latest release from the official WebAuth distribution site or from my WebAuth distribution pages.

Posted: 2012-08-08 20:52 — Why no comments?

Last modified and spun 2022-06-12