Thu Nov 7 15:41:19 1996 Theodore Ts'o * main.c (main): Check the error return from krb5_init_context(), and print an error message if necessary. Wed Sep 18 15:54:41 1996 Theodore Y. Ts'o * krb_auth_su.c (krb5_get_tkt_via_passwd): Remove call to krb5_os_localaddr(), since get_in_tkt will default correctly. Tue Sep 10 14:15:02 1996 Tom Yu * ksu.M: remove ".so man1/header.doc" Thu Aug 8 12:31:30 1996 Sam Hartman * main.c (main): Close source cache before executing command. Sat May 25 16:11:55 1996 Sam Hartman * configure.in: Use aname db libs. Tue May 21 19:14:27 1996 Sam Hartman * Makefile.in (install): Ignore error return from installation of ksu; if we can't set the setuid bit (AFS or non-root), we should still continue. Mon May 20 00:07:16 1996 Sam Hartman * main.c (main): Do not force source cache open if we are going to use it as the target. Sun May 19 13:41:21 1996 Sam Hartman * main.c: Force source ccache to stay open between transactions. Sun May 19 03:24:26 1996 Sam Hartman * krb_auth_su.c: Use target uid while creating ccache * ccache.c: Set uid to target before creating target cache. * ksu.h: Add target_uid to copy_ccache and copy_ccache_restricted Sat May 18 16:39:15 1996 Sam Hartman * configure.in: Use libkrb5util to get krb5_seteuid * heuristic.c (get_best_princ_for_target): Remove seteuid around stat call and insert call to krb5_seteuid before accessing .k5login or .k5users. * main.c (main): Insert appropriate calls to krb5_seteuid so that files are accessed as appropriate. Also, remove code to copy tickets obtained while running ksu overthe source cache; this is not appropriate because it changes the ownership of the source cache. Mon May 13 06:50:12 1996 Richard Basch * authorization.c: users in the .k5login were not permitted to use the '-e command' flag; the man page does not indicate this should fail. All users in .k5login, and those in .k5users (for the specified cmd) are now allowed to execute commands. Also, a lot of indentation cleanup was done. * configure.in heuristic.c: Before getting the best principal from the ccache, reset the euid; we don't want to use someone else's ccache. Also, a lot of indentation cleanup was done. Wed Apr 10 20:24:49 1996 Richard Basch * main.c, krb_auth_su.c: Mostly cosmetic cleanup of output statements. Also, rather than computing the default host key, let the library routine do it. Sun Mar 31 16:48:29 1996 Chris Provenzano * main.c (main): Handle suspend/fg properly. Fri Mar 29 23:35:53 1996 Chris Provenzano * ccache.c main.c: Remove krb5_ccache_refresh(). All this functionality is is done in the krb5_ccache_copy(), and the way refresh() was implemented it was generating a new ccache owner by root (ksu is suid) over the old ccache, thereby making it possible that programs accessing the ccache during this time would fail. Wed Mar 13 17:45:11 1996 Ken Raeburn * configure.in: Use AC_HEADER_STDARG. Wed Nov 8 17:54:11 1995 Theodore Y. Ts'o * ccache.c (krb5_check_exp): Change use of krb5_clockskew to be context->clockskew. Mon Oct 9 23:14:33 1995 Ezra Peisach * main.c (main): Handle case when ticket cache name does not include ':' Thu Oct 5 11:23:21 1995 Ezra Peisach * ksu.M: Document authorization changes. * ksu.1: Remove as was out of date. * Makefile.in (DEFINES): Remove LOCAL_REALM definition. * ksu.h: Remove local_realm from krb5_authorization. * authorization.c (krb5_authorization): Remove old copied code that is in krb5 library and is out of date. Use the configurable aname to localname methods. * main.c (main): Add krb5_secure_config_files so that users cannot override system config files. Wed Sep 06 14:20:57 1995 Chris Provenzano (proven@mit.edu) * krb_auth_su.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g Tue Sep 05 22:10:34 1995 Chris Provenzano (proven@mit.edu) * krb_auth_su.c : Remove krb5_enctype references, and replace with krb5_keytype where appropriate. Mon Aug 21 16:53:40 EDT 1995 Paul Park (pjpark@mit.edu) * ksu.h - Change lifetime types to krb5_deltat. * main.c - Use string_to_deltat() to parse lifetimes. Fix gcc -Wall. * krb_auth_su.c - Fix gcc -Wall. Remove krb5_parse_lifetime() and convtime(). No longer needed. * ccache.c - Remove English-specific months and let timestamp_to_ sfstring() handle it. Fix gcc -Wall. * configure.in - Add -lkadm. Sat Jul 29 04:41:07 1995 Tom Yu * configure.in: Don't link with -lkadm. Tue Jul 11 11:10:13 1995 Ezra Peisach * main.c (main): Remove extraneous argument to call to krb5_parse_lifetime. Add context argument to call to plain_dump_principal. * authorization.c, heuristic.c, krb_auth_su.c: Add prototypes for static functions. Add missing arguments to _dbm_an_to_ln call. * ccache.c: Remove prototype declaration of function now defined in ksu.h * ksu.h: Add full prototypes for all functions in program. Fri Jul 7 15:55:14 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Remove explicit library handling and LDFLAGS. * configure.in - Add USE_KADM_LIBRARY and KRB5_LIBRARIES. Thu Jul 6 17:30:49 1995 Tom Yu * krb_auth_su.c (krb5_get_tkt_via_passwd): Pass context to os_localaddr. Tue Jun 20 14:32:46 1995 Tom Yu (tlyu@dragons-lair) * main.c: HAS_GETUSERSHELL -> HAVE_GETUSERSHELL * configure.in: add test for getusershell() Thu Jun 15 17:46:22 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Change explicit library names to -l form, and change target link line to use $(LD) and associated flags. * configure.in - Add shared library usage check. Fri Jun 9 18:37:43 1995 * configure.in: Remove standardized set of autoconf macros, which are now handled by CONFIG_RULES. Tue May 9 15:52:15 1995 Ezra Peisach * krb_auth_su.c (krb5_auth_check): Add missing context (wolfgang@wsrcc.com) * ccache.c (krb5_get_nonexp_tkts): Add missing context (wolfgang@wsrcc.com) * heuristic.c (get_best_princ_for_target): Missing context cuased coredump. (get_best_princ_for_target): Missing contexts in call to find_either_ticket. (find_either_ticket): Missing context in call of find_ticket (get_best_princ_for_target): Add missing context Thu Mar 16 20:50:32 1995 John Gilmore (gnu at toad.com) * configure.in: Replace CHECK_STDARG with AC_CHECK_HEADERS. * main.c (print_status): Use HAVE_STDARG_H to control whether to declare with ", ..."; not STDARG_PROTOTYPES. * ksu.h: Don't include or , since they are already included by "com_err.h". Thu Mar 2 12:32:17 1995 Theodore Y. Ts'o * Makefile.in (ISODELIB): Remove reference to $(ISODELIB). Wed Mar 1 16:28:36 1995 Theodore Y. Ts'o * configure.in: Remove ISODE_INCLUDE, replace check for -lsocket and -lnsl with WITH_NETLIB check. Tue Feb 28 02:11:21 1995 John Gilmore (gnu at toad.com) * ksu.h: Avoid and includes. Fri Feb 17 18:10:04 1995 Chris Provenzano (proven@mit.edu) * krb_auth_su.c krb5_auth_check()) Call krb5_get_cred_from_kdc() with new calling convention. Mon Feb 06 17:19:04 1995 Chris Provenzano (proven@mit.edu) * krb_auth_su.c Removed krb5_keytype, changed krb5_enctype to krb5_enctype *, changed krb5_preauthtype to krb5_preauthtype * for krb5_get_in_tkt_with_password() rotuine. Sat Jan 28 14:45:55 1995 Chris Provenzano (proven@mit.edu) * krb_auth_su.c (krb5_verify_tkt_def()) use new API for krb5_kt_get_entry. Wed Jan 18 12:21:30 1995 * main.c (main): If gethostbyname returns an error, exit after printing an error message. Fri Jan 13 15:23:47 1995 Chris Provenzano (proven@mit.edu) * Added krb5_context to all krb5_routines Mon Oct 3 19:15:28 1994 Theodore Y. Ts'o (tytso@dcl) * Makefile.in: Use $(srcdir) to find manual page for make install. Fri Sep 30 22:14:41 1994 Theodore Y. Ts'o (tytso@dcl) * krb_auth_su.c: Add magic number placeholder to structures. Tue Aug 9 20:29:47 1994 Tom Yu (tlyu@dragons-lair) * *.c: "upgrade" to C Classic :-) Tue Aug 9 00:11:07 1994 Mark Eichin (eichin@cygnus.com) * main.c: define MAXHOSTNAMELEN if it isn't there already (print_status): use varargs form as well * configure.in: check for stdarg.h Thu Aug 4 03:38:03 1994 Tom Yu (tlyu@dragons-lair) * Makefile.in: make install fixes Mon Jul 25 01:23:36 1994 Tom Yu (tlyu@dragons-lair) * configure.in: check for ndbm/dbm Thu Jul 21 01:01:20 1994 Tom Yu (tlyu at dragons-lair) * Makefile.in: * configure.in: attempt to autoconf Sat Jul 16 03:02:17 1994 Tom Yu (tlyu at dragons-lair) * ksu.c: frob error codes Fri Jul 15 23:45:34 1994 Theodore Y. Ts'o (tytso at tsx-11) * ksu.c (get_dir_of_file): Change to use POSIX getcwd() function.