Update README for krb5-1.11 branch
Fix sam2 client preauth after salt changes

Commit bc096a77ffdab283d77c2e0fc1fdd15b9f77eb41 altered the internal
contracts relating to salts, but neglected to adjust the sam2 preauth
code to match.  Do that now.

(cherry picked from commit 787cc1e24117e57a9173aaaa16935f6488eb3fec)

ticket: 7415
version_fixed: 1.11
status: resolved
Use config storage for client OTP token selection

* Save the vendor name of the token we used to create the challenge.
* If we saved the name of a token vendor previously, prune out any
  tokeninfos which contain different vendor names.

(cherry picked from commit 4c1e02bef34df0407323b610818980c25b61c878)

ticket: 7416
version_fixed: 1.11
status: resolved
Don't expose binary format in preauth otp

(cherry picked from commit f2a177ddd2c4be7b2e2579a0bcd9d576a52ca216)

ticket: 7417
version_fixed: 1.11
status: resolved
Add dependencies for some test programs

Some recently added test programs under lib/krb5 didn't have their
source files added to the appropriate Makefile.in variables, and
weren't getting dependencies as a result.

(cherry picked from commit a71596a2cbc2501b4f00bc8c9365feb612e7c50c)

ticket: 7418
version_fixed: 1.11
status: resolved
Document prompter and responder callbacks

(cherry picked from commit 08aeb0cbc6e72e14c0ec3424363539e61507c4e8)

ticket: 7423
version_fixed: 1.11
status: resolved
Alter responder function signature for consistency

For the responder callback signature, put the closure argument just
after the context, and use KRB5_CALLCONV.  These changes make the
signature consistent with most other libkrb5 callbacks.

(cherry picked from commit 8450ead695639f09862fdcecd46530b1d1b59bfe)

ticket: 7419
version_fixed: 1.11
status: resolved
Correct typo in krb5_rd_req documentation

(cherry picked from commit 820a0a455a5ddcccf89eddf3a7ee555b8ac4b943)

ticket: 7421
version_fixed: 1.11
status: resolved
Only record real selected preauth type

Move where we record the selected preauth type so that we never record
an informational preauth type, only a real one.

(cherry picked from commit e9d6e7ef606cf5ea70e2cc2f35dd91861ab00092)

ticket: 7422
version_fixed: 1.11
status: resolved
Add missing macro and type index.rst entries

(cherry picked from commit 9e8a086a86f83df5c0131c9ca4c95817e25a8278)

ticket: 7424
version_fixed: 1.11
status: resolved
Fix verto_ctx declaration in preauth_plugin.h

(cherry picked from commit 0e6cd4de33c401b2911a5001dc476d11bfb969a3)

ticket: 7425
version_fixed: 1.11
status: resolved
Add loop() kdcpreauth method

[ghudson@mit.edu: avoid verto.h header dependency; minor fixes]

(cherry picked from commit 83b4ecd20e50ad330cd761977d5dadefe30a785b)

ticket: 7426
version_fixed: 1.11
status: resolved
Don't save empty cc_config_out in ccache

Add an internal json function to make it easier to detect if an object
is empty, and use it to avoid creating a ccache config entry for
preauth module config data if there isn't any to save.

(cherry picked from commit ec6dc0e991b3653e16a637bfaa0daf783f82af31)

ticket: 7427
version_fixed: 1.11
status: resolved
Don't leak new fields of krb5_init_creds_context

Release the cc_config_in and cc_config_out fields of a
krb5_init_creds_context when freeing the context.

(cherry picked from commit dedac424340a524489e54a89b62d98eb95470f81)

ticket: 7428
version_fixed: 1.11
status: resolved
Document GSSAPI loadable module interface

(cherry picked from commit 8f43a6f239c31e0e39cd17471d19d761f26869b8)

ticket: 7429
version_fixed: 1.11
status: resolved
Always rebuild rst_composite in src/doc

Avoid using "rst_composite" as the target name for building the
rst_composite directory, since we can't give it proper dependencies.
Instead use the target name "composite", which (like "html", "clean",
etc.) doesn't correspond to the name of a file or directory created by
the build rules.

(cherry picked from commit db4f4b55cd93c86909d4aa140df61af71cbc92af)

ticket: 7435 (new)
version_fixed: 1.11
status: resolved
Correctly document krb5_unparse_name_ext

(cherry picked from commit 671c84a37521a4f62be300af00790fc5aed9cbfd)

ticket: 7431
version_fixed: 1.11
status: resolved
Document PKINIT and anonymos PKINIT configuration

(cherry picked from commit eda5048bb5b0bbf4deea08830551d3578f223059)

ticket: 7436
version_fixed: 1.11
status: resolved
Update Camellia feature description

Remove the potentially misleading "experimental" annotation on the
description of the Camellia encryption feature.  Also update the I-D
version to match the IESG-approved version.

(cherry picked from commit 4810efbbf2671b08ffbbf7dc8a94aa9d52d43cca)

ticket: 7437
version_fixed: 1.11
status: resolved
Fix a typo in pkinit.rst

(cherry picked from commit 231c4433f24470533a79cdd1743837b976970aee)

ticket: 7436
status: resolved