System information

These methods are supported with either Password Server or the legacy Authentication Manager ("tim"). (r.
2861932).
Added a new BSD Configuration File Open Directory plug-in. (r. 2852585).
A problem where the dsAddAttributeValue routine would not accept a NULL tDataNodePtr parameter has been
corrected. Now, a NULL tDataNodePtr means 'add an attribute without an initial value'. (This works on NetInfo, but
may not be supported on some directory systems, such as LDAP.) (r. 2852078).
The new kDS1AttrPicture standard type constant has been added to directory services. This constant can be used to
access the picture attribute associated with each user. (r. 2846085).
The new Open Directory standard type constants: kDSNAttrPort and kDSNAttrLocation were added to the Open
Directory constant database to support NSL/Rendezvous lookup. (r. 2829443).
Previously Open Directory required the calling process to be running as root before any calls could be made to a
node that modified a directory. For example, dsSetRecordName() and dsCreateRecordAndOpen() would
unconditionally fail with a eDSPermissionError if the calling process was not running as root. This restriction has
been relaxed so that non-root processes can authenticate to a node reference using dsDoDirNodeAuth in order to
make changes. (r. 2778611).
Problems where some Open Directory lookup operations could fail for user names with some combinations of
characters (usually underscores mixed with brackets) in their names have been corrected. (r. 2762543).
The Open Directory daemon now registers a key inside of the system configuration framework to indicate a restart
of the daemon was experienced. This key is only temporary though and is intended to be used by configd. (r.
2759398).
GetDirNodeInfo now checks for buffers passed which are too small (similar to what GetRecordList does). When a too
small buffer is detected a eDSBufferTooSmall error is returned. (r. 2975226).
A new attribute, kDS1AttrTypeAdminLimits, was added to support Workgroup Manager admin limits. (r.
2954158).
Added new error codes to support password policy features of the Password Server: eDSAuthQualityCheckFailed,
eDSAuthPasswordTooShort, eDSAuthPasswordTooLong, eDSAuthPasswordNeedsLetter, and
eDSAuthPasswordNeedsDigi (r. 2951855).
Added constants, kDS1AttrPresetUserIsAdmin and kDS1AttrHomeLocOwner, to describe new attributes. These
attributes describe if a preset user is admin (or not) and the owner associated with a workgroup's home directory.
(r. 2945978).
Support for Password Server was added to both the NetInfo and the LDAPv3 plug-ins. .
Back to top
QuickTime
QuickTime provides various multimedia services for the Mac OS, including the ability to display movies and facilities for
the translation and display of various audio and visual data file formats.
Mac OS X 10.2 ships with QuickTime 6. New features, changes, and bug fixes in QuickTime 6 are documented in the
QuickTime 6 documentation. .
Back to top
Security
This section discusses changes and new features in the security services provided in Mac OS X 10.2.
Kerberos
Kerberos is a networking protocol designed to allow strong client/server authentication.
Support for client commands: kinit, klist, kdestroy, kpasswd was added to system.
The Kerberos library provided with Mac OS X 10.2 has been simplified so it is more convenient for programmers
to use. (r. 2829684).
The Kerberos ticket manager is installed with Mac OS X 10.2. (r. 2949384).
A problem where attempting to use a Kerberos command line tool when no preference file existed could create an
empty preferences file has been corrected. (r. 2824235).