Sam Hartman [Thu, 25 Jan 1996 02:30:18 +0000 (02:30 +0000)]
Remove superfluous link line
from configure.in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7380
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:57:37 +0000 (01:57 +0000)]
No change from prior revision, just corrected log message:
* gssapi.h: Added definition of NPROTOTYPE to dtrt with Ultrix,
etc. Also added special case for Ultrix (limited
prototype support).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7379
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:55:50 +0000 (01:55 +0000)]
* g_compare_name.c, g_delete_sec_context.c, g_dsp_status.c,
g_exp_sec_context.c, g_imp_sec_context.c, g_rel_buffer.c,
g_rel_cred.c, g_rel_name.c, g_rel_oid_set.c, get_mechanism.c,
get_mtype.c: Include stdlib.h and string.h as needed
* mglueP.h: Add many invocations of NPROTOTYPE and PROTOTYPE to
prevent breakage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7378
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:54:53 +0000 (01:54 +0000)]
* pname_to_uid.c (krb5_pname_to_uid): Changed def'n of
krb5principalname to static so K&R compilers won't lose on
automatic aggregate initialization.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7377
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 24 Jan 1996 23:50:19 +0000 (23:50 +0000)]
* Makefile.in: Remove spurious @DEFS@
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7376
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 24 Jan 1996 19:57:24 +0000 (19:57 +0000)]
Update man pages with new options
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7375
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 24 Jan 1996 19:23:54 +0000 (19:23 +0000)]
Added lines to adm.h which Chris had removed while working on the
kadmin revisions. This allows the existing code to compile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7374
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 24 Jan 1996 18:24:27 +0000 (18:24 +0000)]
Don't assume that the input_name_buffer is null terminated, when it
contains a string. Fix gcc warnings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7373
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 24 Jan 1996 08:56:24 +0000 (08:56 +0000)]
* Add checksum support to klogind making sure encrypted authenticators
cannot be replayed against unencrypted connections.
* Updated checksumming in kshd to be compatible with klogind so they
use the same client code. CVS:
* Fixed Makefile to install kshd and klogind not kr*d
* Updated option process in krlogind and kshd per messages to c.p.k.
----------------------------------------------------------------------
automatically CVS: CVS: Committing in . CVS: CVS: Modified Files:
----------------------------------------------------------------------
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7372
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 18:26:09 +0000 (18:26 +0000)]
Check for stdlib.h, include stdlib.h, string.h, cast to handle gcc warning
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7371
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 18:25:05 +0000 (18:25 +0000)]
Check for stdlib.h (configure.in)
Include stdlib.h and string.h for declarations of such items like malloc,
strlen, memmove...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7370
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 17:20:45 +0000 (17:20 +0000)]
* Makefile.in (SRCS): Remove extraneous line with only a tab.
(SHLIB_LDFLAGS): Declare that krb5_gss_initialize is to be
unresolved.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7368
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 17:20:25 +0000 (17:20 +0000)]
* Makefile.in (SHLIB_LIBS): Add lines for shared library building
depending on libkrb5, crypto, and com_err.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7367
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 09:07:27 +0000 (09:07 +0000)]
Add support for building GSSAPI as a shared library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7366
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:37:04 +0000 (08:37 +0000)]
configure.in: Add the mechglue directory as a subdir
Makefile.in (libgssapi_krb5.a): Include the object files in the
mechglue directory as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7365
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:36:27 +0000 (08:36 +0000)]
gssapiP_generic.h: Removed prototypes of functions that have been
moved to the mechglue layer.
Makefile.in: Removed gssapi_generic.c, oid_ops.c, rel_buffer.c, and
rel_oid_set.c --- these functions are now done in the mechglue layer.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7364
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:35:38 +0000 (08:35 +0000)]
rel_oid.c (krb5_gss_internal_release_oid): Add the new interface for
the mechglue layer.
inq_cred.c (krb5_gss_inquire_cred): Call gss_release_oid_set() instead
of generic_gss_release_oid_set().
gssapiP_krb5.h: Added prototype for krb5_gss_internal_release_oid
Makefile.in (CCSRCS): Removed the file krb5_gss_glue.c and added the
file k5mech.c and pname_to_uid.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7363
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:34:12 +0000 (08:34 +0000)]
Added Sun's changes (from Roland), as fixed by Ted, to finally have a
fully working mechglue layer.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7362
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 05:13:24 +0000 (05:13 +0000)]
New files for Sun's multi-mechanism GSSAPI
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7361
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 22 Jan 1996 23:18:33 +0000 (23:18 +0000)]
Check for prototypes so that KRB5_STDARG_P works
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7360
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 22 Jan 1996 22:37:04 +0000 (22:37 +0000)]
* configure.in: Use KRB5_CHECK_PROTOS instead of inlining
prototype checking.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7359
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 22 Jan 1996 22:35:33 +0000 (22:35 +0000)]
Move the prototype checking code from include/krb5/configure.in into
KRB5_CHECK_PROTOS.
This is for applications that wish to use KRB5_PROTOTYPE, are not STDC,
do not want to include k5-int.h but need to know if prototypes work on
the system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7358
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 22 Jan 1996 20:48:29 +0000 (20:48 +0000)]
* configure.in: Merge in berk_db library if needed
* Makefile.in (LIB_SUBDIRS): Get location of berk_db from
configure if needed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7357
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 22 Jan 1996 13:10:40 +0000 (13:10 +0000)]
* configure.in: Add in WITH_ANAME_DB and WITH_KDB_DB so that top
level configure --help lists options.
* aclocal.m4 (CHECK_DB): Fix m4 quoting to allow for the autoconf
rules to insert the required CPP determination rules
automatically.
(WITH_ANAME_DB): Add missing comma. Fix up spacing so
configure --help looks pretty.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7356
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 05:00:18 +0000 (05:00 +0000)]
If there is no DES key with a V4 salttype, simply return any DES key.
(Service keys only need to be DES for V4 requests to work.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7355
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:56:49 +0000 (04:56 +0000)]
Allow for the use of other K/M encryption types. Try to look it up in
the stash file if it is being invoked in non-interactive mode.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7354
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:55:26 +0000 (04:55 +0000)]
Don't syslog if the child exited normally
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7353
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:53:48 +0000 (04:53 +0000)]
A couple more tasks have been completed (use dbm, and kdc locking)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7352
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:52:28 +0000 (04:52 +0000)]
Fixed three problems in the database rename function:
1. Added a missing call to krb5_dbm_db_end_update to ensure the lock file
timestamp is updated.
2. Corrected the test for a valid lock file handle to be >=0 not non-zero.
3. Use the lock file of the target name, since the source will shortly
disappear and another process may already be checking for the lock
file of the target. (For example, a kdb5_edit db load will use
a temporary name and rename the db to the proper name when it is
done, and krb5kdc will be testing for the target lock file.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7351
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:42:57 +0000 (04:42 +0000)]
Simplified to simply require the use of WITH_ANAME or USE_KDB5_LIBRARY
to specify the need for dbm inclusion/testing/compilation flags.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7350
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:37:00 +0000 (04:37 +0000)]
* aclocal.m4
Added several macros and restructures to allow for testing of
which dbm type to use and to override with
--with-kdb-db=DBM
--with-aname-db=DBM
Added USE_ANAME macro to specify a module requires the aname db.
USE_KDB5_LIBRARIES now checks the --with-kdb-* flags.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7349
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 22 Jan 1996 04:34:09 +0000 (04:34 +0000)]
* gc_via_tkt.c (krb5_kdcrep2creds): Set is_skey so get_creds won't
break trying to match is_skey in the ccache. This way we
won't end up with many copies of user-to-user tickets.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7348
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Jan 1996 04:34:05 +0000 (04:34 +0000)]
* configure.in
Only build Berkeley db, if it is being used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7347
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 20 Jan 1996 04:24:26 +0000 (04:24 +0000)]
krb5_get_credentials does not use the same flags as kdc_options
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7346
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 20 Jan 1996 04:21:38 +0000 (04:21 +0000)]
krb5_get_credentials does not take the same flags as kdc_options. Set to
0.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7345
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 20 Jan 1996 04:20:00 +0000 (04:20 +0000)]
krb5_get_credentials does not take kdc_options flags
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7344
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 20 Jan 1996 04:04:06 +0000 (04:04 +0000)]
Remove use of krb5_kdc_default_options
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7343
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 20 Jan 1996 04:00:25 +0000 (04:00 +0000)]
Fix a memory leak and reversed arguments
in my previous commit.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7342
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 20 Jan 1996 00:55:45 +0000 (00:55 +0000)]
In the client, construct a checksum from the command line
and remote user and encode them in the authenticator. In the daemon,
if a checksum is present, verify it.
This change *should* make it possible to use rsh in a secure
fassion provided that you always use a client that has
checksumming.
If you do not use encrypted rsh, then the command line cannot be
spoofed,
but the standard input and output can still be spoofed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7341
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 19 Jan 1996 19:50:54 +0000 (19:50 +0000)]
Add check for DBM/db libraries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7340
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Jan 1996 15:52:55 +0000 (15:52 +0000)]
In des_read, check to see if read returns 0 and report
a closed connection if it does.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7339
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Jan 1996 01:33:08 +0000 (01:33 +0000)]
Mainline utmp and login cleanups from hartmans_pty_utmp:
* Fix utmp handling on Solaris for wtmpx records
* Replace krlogin's SIGURG handler with a call to select squashing Solaris ctrl-c bug
* Fix utmp on systems without pututline so ttyslot is only used when it works
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7338
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Jan 1996 00:01:30 +0000 (00:01 +0000)]
Deal with sys_errlist
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7337
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Jan 1996 00:00:42 +0000 (00:00 +0000)]
Portability fixes: don't declare errno ever
and don't declare sys_errlist unless you need to.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7336
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 18 Jan 1996 20:52:03 +0000 (20:52 +0000)]
Fix loop so that a ftp/host@REALM is not required,
but host/host@REALM will also work.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7334
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 18 Jan 1996 20:51:23 +0000 (20:51 +0000)]
Include sys/select.h for AIX
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7333
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 16 Jan 1996 19:43:46 +0000 (19:43 +0000)]
Deal with CVS not doing what I expected with a branch so the code compiles and works
until I merge changes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7324
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 16 Jan 1996 19:40:56 +0000 (19:40 +0000)]
Fix handling so that the username is only written out to wtmpx logout records;
I know of no systems that write out usernames in DEAD_PROCESS records
in wtmp, but can special case them in update_wtmp if they are found.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7323
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 15 Jan 1996 20:37:32 +0000 (20:37 +0000)]
Short term, this is notes on what the interfaces to various libpty functions do. Long term, I may end up writing something more formal to go into doc. If that happens, it is likely that this README will be removed or replaced with a README explaining how to break libpty out of the Kerberos distribution and get configure to be happy
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7317
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Mon, 15 Jan 1996 07:39:40 +0000 (07:39 +0000)]
* configure.in: add gssftp to CONFIG_DIRS so that the GSSAPI
implementation of ftp gets built as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7316
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Mon, 15 Jan 1996 07:38:46 +0000 (07:38 +0000)]
* aclocal.m4 (WITH_DBM_LNAME): add --with-dbm-lname for callers of
an_to_ln routines that have USE_DBM_LNAME set.
* aclocal.m4 (WITH_DBM_KDB): avoid duplicating --with-dbm code all
over the place.
(from CNS. Eventually they need to be referenced a bunch of places, but
for now gssftp uses the former so I have an excuse to drop them in...)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7315
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sun, 14 Jan 1996 08:40:25 +0000 (08:40 +0000)]
Sanitize and cvsignore files for gssftp
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7314
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sun, 14 Jan 1996 08:34:05 +0000 (08:34 +0000)]
add gssftp to things-to-keep
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7313
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sun, 14 Jan 1996 08:33:16 +0000 (08:33 +0000)]
Cygnus implementation of GSSAPI-based ftp client and server.
See README.gssftp for history and details.
Bugs, comments to <eichin@cygnus.com>. Be sure to forward any changes
made at MIT as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7312
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 13 Jan 1996 05:45:13 +0000 (05:45 +0000)]
Work around apparent Solaris kernel bug. If you open the pty and close it, you get a sigHUP on the master
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7311
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 23:34:13 +0000 (23:34 +0000)]
Makefile.in: (check-unix): ultrix "test" does not support -x
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7310
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 17:46:48 +0000 (17:46 +0000)]
* krsh.c, krlogin.c: (main): Ultrix cc does not support automatic
aggregate initiailzation of structures.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7309
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 16:33:11 +0000 (16:33 +0000)]
* krcp.c (error): Convert to use varargs
* configure.in: Check for stdarg.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7308
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 13:01:13 +0000 (13:01 +0000)]
* profile.hin: Add profile_init_path prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7307
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Jan 1996 12:05:07 +0000 (12:05 +0000)]
Set the enctype to ENCTYPE_UNKNOWN when the enctype should be determined from
the stash file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7306
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:24:27 +0000 (04:24 +0000)]
Add an #ifdef for enabling lower case realm (for use with DCE)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7305
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:17:54 +0000 (04:17 +0000)]
When obtaining tickets, we make them forwardable by default. XXX This
should really a configurable option in the UI.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7304
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:06:30 +0000 (04:06 +0000)]
Added documentation for the DCE compat options, plus the capaths
section.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7303
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:06:02 +0000 (04:06 +0000)]
scc.h (KRB5_SCC_DEFAULT_VNO): Remove KRB5_SCC_DEFAULT_VNO; now set in
init_ctx.c.
scc_maybe.c (krb5_scc_open_file):
scc_gennew.c (krb5_scc_generate_new): Use context->scc_default_format
to determine the credentials ccache type.
scc_read.c (krb5_scc_read_keyblock): If reading in a version 3
credentials cache, ignore the second enctype stored in the ccache;
just read it into a dummy variable.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7302
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:05:22 +0000 (04:05 +0000)]
fcc.h (KRB5_FCC_DEFAULT_VNO): Remove KRB5_FCC_DEFAULT_VNO; now set in
init_ctx.c.
fcc_maybe.c (krb5_fcc_open_file):
fcc_gennew.c (krb5_fcc_generate_new): Use context->fcc_default_format
to determine the credentials cache type.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7301
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 04:03:06 +0000 (04:03 +0000)]
Added checking of profile for DCE compatability options (ccache type,
and checksum type).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7300
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 03:47:57 +0000 (03:47 +0000)]
Add fields for fcc_default_format and scc_default_format in
krb5_context structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7299
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 03:33:24 +0000 (03:33 +0000)]
Added ##DOS statements after gssapi_err_generic.$(OBJECT) to get it
added to library on Windows. (Patch from Doug Engbert).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7298
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 03:29:50 +0000 (03:29 +0000)]
Fix return type for mit_des3_string_to_key()
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7297
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 03:29:24 +0000 (03:29 +0000)]
Added hack by Doug Engbert to get util/pty to work under Solaris. We
should double check to make sure this is a correct fix.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7296
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 03:14:46 +0000 (03:14 +0000)]
kcmd.c (getport): Clear the sin structure to be zero. (From Doug Engbert.)
krsh.c (main): Added code to default port to 544 if service not found.
(From Doug Engbert.)
krlogin.c (main): Added code to default port to 543 or 2105 if service
not found. (From Doug Engbert.)
login.c (main): Save KRB5CCNAME environment variable, which may have
been set by forward.c. Add code for SGI to set environment for its
/etc/TIMEZONE (untested). Don't print MOTD twice on Suns, added
#ifdef NO_MOTD. (Patches from Doug Engbert).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7295
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:57:32 +0000 (02:57 +0000)]
Initialize addrs to 0 so that we don't try to free stack garbage on an
error.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7294
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:32:24 +0000 (02:32 +0000)]
Remove #if statement that used sizeof(xxx), since that won't work for
most C compilers/C preprocessors!
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7293
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:28:21 +0000 (02:28 +0000)]
Removed extern global of krb5_kdc_req_sumtype, which wasn't being used
anyway.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7292
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:27:35 +0000 (02:27 +0000)]
krbconfig.c, Makefile.in: Removed krbconfig.c; it contained global
variables which are no longer used.
recvauth.c: Removed the global extern of krb5_kdc_default_options,
which wasn't being used anyway.
mk_req.c (krb5_mk_req): Replace use of krb5_kdc_default_options with
context->kdc_default_options.
gc_frm_kdc.c: Remove the global extern of krb5_kdc_req_sumtype, which
wasn't being used anymore anyway.
send_tgs.c (krb5_send_tgs_basic): Remove use of the global variable
krb5_kdc_req_sumtype, and use the kdc_req_sumtype in the context
structure instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7291
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:17:17 +0000 (02:17 +0000)]
If reading in a version 3 credentials cache, ignore the second enctype
stored in the ccache; just read it into a dummy variable.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7290
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 11 Jan 1996 02:03:41 +0000 (02:03 +0000)]
Applied patch submitted by Doug Engbert, so that the configurable
authentication patch takes into account the null entry at the end of
the list.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7289
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 00:22:43 +0000 (00:22 +0000)]
* locate_kdc.c (krb5_locate_kdc): Add parrentheses for assignment
in conditional. (gcc -Wall)
* init_os_ctx.c (krb5_os_init_context): Remove unused variables
* an_to_ln.c (aname_do_match): Initialize local variable before
referenced.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7288
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 11 Jan 1996 00:16:49 +0000 (00:16 +0000)]
Take care of a gcc warnign about shufting two far
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7287
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 04:07:38 +0000 (04:07 +0000)]
Added defintion for KRB5_GSS_FOR_CREDS_OPTION
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7286
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:56:23 +0000 (03:56 +0000)]
forward.c (get_for_creds): Removed no longer used function
kerberos5.c (kerberos5_forward): Convert from using get_for_creds()
from forward.c to using the official library routine,
krb5_fwd_tgt_creds(). Misc. lint cleanups.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7285
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:53:09 +0000 (03:53 +0000)]
forward.c (get_for_creds): Removed no longer used function
kcmd.c (kcmd): Convert from using get_for_creds() from forward.c to
using the official library routine, krb5_fwd_tgt_creds().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7284
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:24:32 +0000 (03:24 +0000)]
Added error table code KRB5_FWD_BAD_PRINCIPAL
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7283
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:24:10 +0000 (03:24 +0000)]
krb5.hin (krb5_fwd_tgt_creds, krb5_os_hostaddr): Added new function
prototypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7282
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:13:49 +0000 (03:13 +0000)]
gssapiP_krb5.h (KRB5_GSS_FOR_CREDS_OPTION): New constant added for
delegation (forwarding) of credentials.
init_sec_context.c (make_ap_req): Add support for sending delegated
credentials. Misc lint cleanups.
accept_sec_context.c (krb5_gss_accept_sec_context): Add support for
accepting delegated credentials. Misc lint cleanups.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7281
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:08:30 +0000 (03:08 +0000)]
fwd_tgt.c (krb5_fwd_tgt_creds): New function which handles all of the
dirty work of forwarding TGT's.
rd_cred.c (krb5_rd_cred_basic): Clean up memory allocation discpline
to remove memory leaks.
mk_cred.c (krb5_mk_ncred_basic, krb5_mk_ncred, krb5_mk_1cred): Clean
up memory allocation discpline to remove memory leaks.
init_ctx.c (krb5_get_tgs_ktypes): Clean up parsing of the etype list.
Don't overrun the string containing the etype list.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7280
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 03:50:32 +0000 (03:50 +0000)]
krb5.hin: Added support for KRB5_INT16_MAX, which tells us the
limitations of using 16 bit ints.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7278
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 03:24:36 +0000 (03:24 +0000)]
hostaddr.c (krb5_os_hostaddr): New function which takes a hostname and
returns a list of krb5 addresses. (This is basically a glue routine
that converts the result of gethostbyname() to krb5 addresses.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7277
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 02:43:19 +0000 (02:43 +0000)]
gssapiP_generic.h (TWRITE_INT16, TREAD_INT16): Added new macros
to read and write two byte integers from the wire.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7276
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 02:35:16 +0000 (02:35 +0000)]
gssapiP_generic.h: Don't include <sys/types.h> since it's already
included by gssapi.h.
gssapi.h: Add a #ifndef _MACINTOSH around include of <sys/types.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7275
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:59:31 +0000 (05:59 +0000)]
Removed check for sys/fcntl.h; the source now always includes <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7273
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:51:18 +0000 (05:51 +0000)]
Removed #undef NEED_SYS_FCNTL_H since we now always use <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7272
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:50:07 +0000 (05:50 +0000)]
Always include <fcntl.h> instead of checking for <sys/fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7271
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:47:12 +0000 (05:47 +0000)]
Removed checking for <sys/fcntl.h>; always use <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7270
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:41:38 +0000 (05:41 +0000)]
Always include <fcntl.h> instead of checking for <sys/fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7269
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:39:37 +0000 (05:39 +0000)]
Removed sys/fcntl.h checking (always use fcntl.h instead)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7268
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:33:35 +0000 (05:33 +0000)]
* aclocal.m4, acconfig.h
Removed sys/fcntl.h checking (always use fcntl.h instead)
* TODO
Documented that sys/fcntl.h checks have been removed.
Added a KDC bug that needs to be investigated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7267
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 03:31:14 +0000 (03:31 +0000)]
* configure.in: Check for presense of setenv(), unsetenv(), and
getenv() from the C library.
* Makefile.in: New file: setenv.c --- provides routines for
setting the environment.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7266
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 03:00:07 +0000 (03:00 +0000)]
* gss-client.c (main, client_establish_context): If the -d flag is
given to the client, then try to delegate credentials when
establishing the context.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7265
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 02:44:21 +0000 (02:44 +0000)]
* rd_cred.c (krb5_rd_cred_basic): When the keyblock is NULL, assume
we're being called from the gssapi code, which doesn't have access to
the sender or receive address information, don't check the sender
address, since it won't be available.
* rd_cred.c (decrypt_credencdata): When calling krb5_rd_credd(), if
the keyblock is null, just copy the encoded structure from the
"ciphertext" part of the structure and decode it.
* mk_cred.c (encrypt_credencpart): When calling krb5_mk_cred(), if the
keyblock is NULL, don't encrypt it; just encode it and leave it in the
ciphertext area of the structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7264
dc483132-0cff-0310-8789-
dd5450dbe970