New in 1.5.26
-------------
* Interoperability bug in DIGEST-MD5's layers was fixed.
* DIGEST-MD5's DES layer has been disabled until the interoperability 
  can be worked out.

New in 1.5.25
-------------

* The DIGEST-MD5 plugin now includes an implementation of RC4, since
  it's a lot easier to get working than interfacing with OpenSSL.
* A delayed-open plugin mode has been implemented, but not yet documented.

New in 1.5.24
-------------
* be a little paranoid about what we give PAM
* small bugfixes

New in 1.5.22
-------------
* fixed some DIGEST-MD5 buglets
* fixed serious bug that a client could avoid the authorization callback
* added pwcheck method "sia" for Digital Unix
* now should try libdb-3 before libdb.

New in 1.5.21
-------------
* build process fixes

New in 1.5.20
-------------
* bug fixes
* LOGIN mechanism has a compatibility tweak

New in 1.5.19
-------------
* Initial srp work
* Programmers Guide more complete
* bug fixes (of course)

New in 1.5.18
-------------
* javasasl library in conformance with internet draft
* man pages for all functions written
* bug fixes (of course)

New in 1.5.17
-------------
* give application authentication name and realm more uniformly
* sasldblistusers utility to list users in sasldb
* memory leaks eliminated; boundary cases tested

New in 1.5.16
-------------
* pwcheck_method now defaults to sasldb.
  READ UPGRADE INSTRUCTIONS IN README

* sanity checking inputs throughout the code.
* Unsupported LOGIN plugin added to the Windows build.
* calling sasl_checkpass() with pwcheck_method: kerberos_v4 restores the
  old ticket file before returning.

New in 1.5.15
-------------
* configure now correctly detects Berkeley DB 3.x (Claus Assmann).

New in 1.5.14
-------------
* Upgraded to libtool 1.3.4.
* External SSF handled more uniformly, and handle min/max SSF requests
  correctly.
* Unsupported LOGIN plugin added, by Rainer Schoepf <schoepf@uni-mainz.de>.
  Please don't enable it unless you know you need it.
* HP/UX support, contributed by Claus Assmann.

New in 1.5.13
-------------
* Sanity check to make sure there's at least something in sasldb
  READ UPGRADE INSTRUCTIONS IN README

* Fixes to how external layers are handled (some fixes by Alexey Melnikov)
* Berkeley DB 3.x support contributed by Greg Shapiro
* Additional pwcheck fixes (Joe Hohertz)
* Fixed Heimdal krb5 configure checks
* other random fixes

New in 1.5.12
-------------
* lots of bugfixes
* DIGEST-MD5 more in conformance with spec
* support for Berkeley DB
* support for OpenSSL's version of RC4

New in 1.5.11
-------------
* bugfix in realm support for DIGEST-MD5

New in 1.5.10
-------------
* DIGEST-MD5 layer support
* dbconversion utility added

New in 1.5.9
------------
* Bug fixes
* More win32 support
* Realm support in the database (database format changed again, sorry)
  Other realm support in plugins; need to document it
* Preliminary code for pwcheck added; not yet tested (and probably not 
  working)
* config stuff should be less case/whitespace sensitive
* more error conditions logged

New in 1.5.5
------------
* Bug fixes
* sasldb plaintext support (database format changed!!!)
* Handles multiple realms in DIGEST
* New Windows compatibility (tested!)

New in 1.5.3
------------
* Bug fixes
* Tested GSSAPI & added layers
* Some changes for Windows compatibility (next release)

New in 1.5.2
------------
* A few bug fixes
* Better portability
* Upgraded libtool

New in 1.5.0
------------
* Lots of bug fixes
* A few API changes (watch especially sasl_get_prop() and sasl_set_prop()!)
* Digest authentication works
* Configuration file
* Some more documentation (doc/programming)
* Code cleanup

New in 1.4.1
------------
* Tested kerberos4, cram, plain, and anonymous fairly extensively
* Many bugs fixed
* Created sample programs
* Added digest
* Prototype credential API

New in 1.3b1
------------
* Added saslpasswd for setting sasl passwords
* Added sfsasl for people using sfio
* Lots of bug fixes

New in 1.2b3
------------
* Slightly better documentation, easier compilation
* Plain now understands authorization and callbacks

New in 1.2b2
------------
* Win32 support
* Fixes to anonymous, kerberos mechs
* Some signed lengths in the API changed to unsigned

New in 1.2b1
------------
* Lots of bug fixes
* GSSAPI
* Cleaner getopt interface
* Cleaner plugin callback lookup interface
* Global inits now take callback list, not just a sasl_getopt_t
* Preliminary Java support
* Authentication database hook
* Default AuthDB routines moved from mechanisms to library
* Logging hook
* Default syslog-based logging hook in library
* Preliminary plaintext transition for CRAM/SCRAM