Merge branch 'master' into ad-keytabs

Conflicts:
	NEWS

1 files changed, 35 insertions, 7 deletions

diff --git a/NEWS b/NEWS
index 0e268a9..9ec7c1a 100644
--- a/NEWS
+++ b/NEWS
@@ -1,12 +1,40 @@
                        User-Visible wallet Changes
 
-wallet 1.3 (2015-11-27)
-
-    This version implements Active Directory as the store for keytabs.
-    The interface to Active Directory uses a combination of direct
-    LDAP queries and the msktutil utility.  This version does not
-    support the wallet unchanging flag.  Unchanging requires that a
-    keytab be retrieved without changing the password/kvno which is
+wallet 1.3 (unreleased)
+
+    A new object type, password (Wallet::Object::Password), is now
+    supported.  This is a subclass of the file object that will randomly
+    generate content for the object if you do a get before storing any
+    content inside it.
+
+    Add a new command to wallet-backend, update.  This will update the
+    contents of an object before running a get on it, and is only valid
+    for objects that can automatically get new content, such as keytab and
+    password objects.  A keytab will get a new kvno regardless of the
+    unchanging flag if called with update.  In a future release get will
+    be changed to never update a keytab, and the unchanging flag will be
+    ignored.  Please start moving to use get or update as the situation
+    warrants.
+
+    Add an acl replace command, to change all objects owned by one ACL to
+    be owned by another.
+
+    All ACL operations now refer to the ACL by name rather than ID.
+
+    Add a report for unstored objects to wallet-report, and cleaned up the
+    help for the existing unused report that implied it showed unstored as
+    well as unused.
+
+    Took contributions from Commerzbank AG to improve wallet history.  Add
+    a command to dump all object history for searching on to
+    wallet-report, and add a new script for more detailed object history
+    operations to the contrib directory.
+
+    Initial support for using Active Directory as the KDC for keytab
+    creation.  The interface to Active Directory uses a combination of
+    direct LDAP queries and the msktutil utility.  This version does
+    not support the wallet unchanging flag.  Unchanging requires that
+    a keytab be retrieved without changing the password/kvno which is
     not supported by msktutil.
 
 wallet 1.2 (2014-12-08)