= Use system libcom_err.

  No longer build or install the included libcom_err and compile_et.

= ftpd now uses IP_PORTRANGE* in the same fashion as the system ftpd.
  By default, ftpd will now use high port numbers for serving clients
  in passive mode.

= Fix segmentation fault in kadmin.
  A null pointer dereference that was only tickled when using kadmin
  with a kdc that uses LDAP as the backend.

= Fix a search filter in hdb-ldap.c.
  A lookup was failing to fetch operational attributes such as
  modifiersName.

= Bump PORTREVISION for above changes.

1 files changed, 25 insertions, 0 deletions

diff --git a/security/heimdal/files/patch-ck b/security/heimdal/files/patch-ck
new file mode 100644
index 000000000000..87afecea5c03
--- /dev/null
+++ b/security/heimdal/files/patch-ck
@@ -0,0 +1,25 @@
+--- appl/ftp/ftpd/ftpd.8.orig	Tue Feb 16 14:14:08 1999
++++ appl/ftp/ftpd/ftpd.8	Fri Nov  3 12:07:47 2000
+@@ -43,7 +43,7 @@
+ .Sh SYNOPSIS
+ .Nm ftpd
+ .Op Fl a Ar authmode
+-.Op Fl dilv
++.Op Fl dilvU
+ .Op Fl g Ar umask
+ .Op Fl p Ar port 
+ .Op Fl T Ar maxtimeout
+@@ -127,6 +127,13 @@
+ seconds (the default is 15 minutes).
+ .It Fl u
+ Set the initial umask to something else than the default 027.
++.It Fl U
++In previous versions of
++.Nm ftpd ,
++when a passive mode client requested a data connection to the server, the 
++server would use data ports in the range 1024..4999.  Now, by default, the 
++server will use data ports in the range 49152..65535.  Specifying this option
++will revert to the old behavior.  
+ .It Fl v
+ Verbose mode.
+ .El