diff --git a/ChangeLog b/ChangeLog
index fe3bcced9..91cc3e33a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,19 @@
-2006-09-25  Love Hörnquist Åstrand  <lha@it.su.se>
+2006-09-26  Love Hörnquist Åstrand  <lha@it.su.se>
+
+	* appl/gssmask/gssmaestro.c: Handle FIRST_CALL in the context
+	building, better error handling.
+
+	* appl/gssmask/gssmaestro.c: switch from wrap/unwrap to
+	encrypt/decrypt
+	
+	* appl/gssmask/gssmask.c: Don't announce spn if there is none.
+
+	* appl/gssmask/gssmaestro.c: Check that the pre-wrapped data is
+	the same as afterward.
+	
+2006-09-25  Love Hörnquist Åstrand <lha@it.su.se>
+	
+	* appl/gssmask/gssmaestro.c: Remove stray GSS_C_DCE_STYLE.
 
 	* appl/gssmask/gssmaestro.c: Add logsocket support.
 	
diff --git a/lib/gssapi/ChangeLog b/lib/gssapi/ChangeLog
index 37fd223a8..1f7d07f44 100644
--- a/lib/gssapi/ChangeLog
+++ b/lib/gssapi/ChangeLog
@@ -1,5 +1,14 @@
 2006-09-25  Love Hörnquist Åstrand  <lha@it.su.se>
 
+	* krb5/arcfour.c: Add wrap support, interrop with itself but not
+	w2k3s-sp1
+
+	* krb5/gsskrb5_locl.h: move the arcfour specific stuff to the
+	arcfour header.
+
+	* krb5/arcfour.c: Support DCE-style unwrap, tested with
+	w2k3server-sp1.
+
 	* mech/gss_accept_sec_context.c (gss_accept_sec_context): if the
 	token doesn't start with [APPLICATION 0] SEQUENCE, lets assume its
 	a DCE-style kerberos 5 connection. XXX this needs to be made