krb5.git
18 years ago * src/util/support/plugins.c (krb5int_open_plugin): Use RTLD_LOCAL
Tom Yu [Thu, 22 Jun 2006 03:00:53 +0000 (03:00 +0000)]
* src/util/support/plugins.c (krb5int_open_plugin): Use RTLD_LOCAL
instead of RTLD_GLOBAL.  Use RTLD_GROUP if available.

ticket: 3909
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18192 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoremove unimplemented/unused mechglue functions
Tom Yu [Wed, 21 Jun 2006 22:25:19 +0000 (22:25 +0000)]
remove unimplemented/unused mechglue functions

* src/lib/gssapi/mechglue/Makefile.in (SRCS, STLIBOBJS): Delete
g_userok, gssd_pname_to_uid.

* src/lib/gssapi/mechglue/mechglue.h: Delete gssd_pname_to_uid,
gss_initialize.

* src/lib/gssapi/mechglue/mglueP.h: Delete gssint_userok,
gssd_pname_to_uid, gssint_get_mechanism_ext,
gss_acquire_cred_with_password_sfct, gss_mechanism_ext.

* src/lib/gssapi/g_userok.c:
* src/lib/gssapi/g_indicate_mechs.c:
* src/lib/gssapi/gen_oids.c:
* src/lib/gssapi/gssd_pname_to_uid: Delete.

* src/lib/gssapi/mechglue/g_initialize.c: Delete
gssint_get_mechanism_ext.

ticket: new
target_version: 1.5
tags: pullup
component: krb5-libs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18187 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoSpawn ftp client with "-d" and "-v" for better debugging
Ken Raeburn [Wed, 21 Jun 2006 21:51:26 +0000 (21:51 +0000)]
Spawn ftp client with "-d" and "-v" for better debugging

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18186 dc483132-0cff-0310-8789-dd5450dbe970

18 years agocease export of krb5_gss_*
Tom Yu [Wed, 21 Jun 2006 21:08:31 +0000 (21:08 +0000)]
cease export of krb5_gss_*

* src/lib/gssapi/libgssapi_krb5.exports: Cease export of krb5
mechanism entry points which were once equivalent to GSS-API entry
points.  These were never public interfaces, and calling them
directly now can cause problems.  Also, cease export of some
other internal symbols.

ticket: new
target_version: 1.5
tags: pullup
component: krb5-libs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18185 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago*sigh*
Ken Raeburn [Wed, 21 Jun 2006 00:31:19 +0000 (00:31 +0000)]
*sigh*
Stupid typo in last change.

ticket: 2759

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18184 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago(GET_HOST_BY_NAME, GET_HOST_BY_ADDR) [GETHOSTBYNAME_RETURNS_INT]: Test
Ken Raeburn [Wed, 21 Jun 2006 00:28:21 +0000 (00:28 +0000)]
(GET_HOST_BY_NAME, GET_HOST_BY_ADDR) [GETHOSTBYNAME_RETURNS_INT]: Test
the output hostent pointer as an additional way of checking for errors.
Original patch from Nalin Dahyabhai, needed some tweaking to fit in
current sources, especially as updated in ticket 3911.

ticket: 2759
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18183 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoRevert part of previous changes: Move temporary values that don't need
Ken Raeburn [Wed, 21 Jun 2006 00:12:03 +0000 (00:12 +0000)]
Revert part of previous changes: Move temporary values that don't need
longer storage duration, like error codes, back into GET_*_BY_* macros.

ticket: 3911

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18182 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoRevert an untested change that wasn't supposed to go into this ticket
Ken Raeburn [Tue, 20 Jun 2006 23:59:56 +0000 (23:59 +0000)]
Revert an untested change that wasn't supposed to go into this ticket

ticket: 18180

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18181 dc483132-0cff-0310-8789-dd5450dbe970

18 years agogetaddrinfo code uses vars outside of storage duration
Ken Raeburn [Tue, 20 Jun 2006 23:59:11 +0000 (23:59 +0000)]
getaddrinfo code uses vars outside of storage duration

The calls to gethostbyname_r and friends were wrapped in macros that declared
automatic variables for the auxiliary storage needed, but the pointers returned
by the functions would be used outside of that scope, when the storage would no
longer be valid.

Changed the macro interfaces to define new types for the auxiliary storage, and
add a new argument to the macros referring to that storage.  Changed call sites
accordingly.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18180 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago(kadmin_cpw): Don't crash if principal name is not given. Based on a
Ken Raeburn [Tue, 20 Jun 2006 23:27:01 +0000 (23:27 +0000)]
(kadmin_cpw): Don't crash if principal name is not given.  Based on a
patch from S Rahul.
(extended_com_err_fn): If error code is zero, don't fetch an error message.

ticket: 3308
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18179 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDocument kpropd -a option
Ken Raeburn [Tue, 20 Jun 2006 23:22:21 +0000 (23:22 +0000)]
Document kpropd -a option

ticket: 2087

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18178 dc483132-0cff-0310-8789-dd5450dbe970

18 years agowhitespace
Ken Raeburn [Tue, 20 Jun 2006 23:21:31 +0000 (23:21 +0000)]
whitespace

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18177 dc483132-0cff-0310-8789-dd5450dbe970

18 years agofix parallel builds for libgss
Tom Yu [Tue, 20 Jun 2006 22:35:20 +0000 (22:35 +0000)]
fix parallel builds for libgss

* src/lib/gssapi/Makefile.in (SUBDIROBJLISTS): Add missing spnego
directory.

ticket: new
target_version: 1.5
tags: pullup
component: krb5-build

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18176 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoIn verify_krb_v4_tgt, use an unsigned KRB4_32 to store an address rather
Russ Allbery [Tue, 20 Jun 2006 21:45:16 +0000 (21:45 +0000)]
In verify_krb_v4_tgt, use an unsigned KRB4_32 to store an address rather
than an unsigned long to avoid memcpying past the end of a structure on
64-bit platforms.

Ticket: 581
Version_Reported: 1.0.5
Target_Version: 1.5
Tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18175 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5-1.6-prerelease
Tom Yu [Tue, 20 Jun 2006 05:19:07 +0000 (05:19 +0000)]
krb5-1.6-prerelease

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18170 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoPass in the correct value for the first argument of select (one larger
Russ Allbery [Mon, 19 Jun 2006 23:37:09 +0000 (23:37 +0000)]
Pass in the correct value for the first argument of select (one larger
than the largest file number in the select set) rather than some multiple
of sizeof some struct.  The latter is large enough accidentally work, but
breaks on AIX.

Map IPv4-mapped IPv6 addresses back to IPv4 in krshd for the purposes of
connecting back to the remote system on AIX, since on AIX getnameinfo
returns such addresses but connect won't accept them.

Ticket: 3122

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18166 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMake local const array of structures static too
Ken Raeburn [Mon, 19 Jun 2006 23:33:36 +0000 (23:33 +0000)]
Make local const array of structures static too

ticket: 3276

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18165 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoUpdate config.guess and config.sub to the current versions from
Russ Allbery [Mon, 19 Jun 2006 17:59:05 +0000 (17:59 +0000)]
Update config.guess and config.sub to the current versions from
savannah.gnu.org.

Ticket: 3900

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18164 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoExport krb5_gss_register_acceptor_identity in KFW
Jeffrey Altman [Mon, 19 Jun 2006 17:33:36 +0000 (17:33 +0000)]
Export krb5_gss_register_acceptor_identity in KFW

krb5_gss_register_acceptor_identity is a gss krb5 extension that is
part of the public ABI.  It does not have a gss_krb5_* name due to
historical reasons.  Instead there is a gss_krb5_register_acceptor_identity
macro that uses this export.

ticket:  new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18163 dc483132-0cff-0310-8789-dd5450dbe970

18 years agogssapi32.def: Export gss_inquire_mechs_for_name now that
Jeffrey Altman [Sun, 18 Jun 2006 03:35:12 +0000 (03:35 +0000)]
gssapi32.def:  Export gss_inquire_mechs_for_name now that
it has been implemented.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18162 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoTest for and use setutsent, based on a patch from Nate Yocom at Centrify.
Ken Raeburn [Sat, 17 Jun 2006 00:57:22 +0000 (00:57 +0000)]
Test for and use setutsent, based on a patch from Nate Yocom at Centrify.
Modified to restrict the configure test to just the pty library.

ticket: 3423

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18161 dc483132-0cff-0310-8789-dd5450dbe970

18 years agodelete old .Sanitize files
Ken Raeburn [Sat, 17 Jun 2006 00:23:48 +0000 (00:23 +0000)]
delete old .Sanitize files

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18160 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago(foo): bar
Ken Raeburn [Sat, 17 Jun 2006 00:22:37 +0000 (00:22 +0000)]
(foo): bar

Testing changes to rt-cvsgate script to ignore RT "commands" with parens.

ticket: 169

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18159 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago(hpux10.exports): Export initializer and destructor symbols(?). Patch
Ken Raeburn [Fri, 16 Jun 2006 23:41:54 +0000 (23:41 +0000)]
(hpux10.exports): Export initializer and destructor symbols(?).  Patch
from Albert Chin.

ticket: 3129

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18158 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoChange a bunch of calls to ctype macros (those cited by Jeff, and a
Ken Raeburn [Fri, 16 Jun 2006 06:58:42 +0000 (06:58 +0000)]
Change a bunch of calls to ctype macros (those cited by Jeff, and a
few others) to cast the character values to unsigned char.

ticket: 3445

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18156 dc483132-0cff-0310-8789-dd5450dbe970

18 years agofix for support lib version number change
Ken Raeburn [Fri, 16 Jun 2006 05:53:34 +0000 (05:53 +0000)]
fix for support lib version number change

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18155 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoRemove -lkrb5support, which should be for internal use only, from the displayed
Ken Raeburn [Fri, 16 Jun 2006 00:26:49 +0000 (00:26 +0000)]
Remove -lkrb5support, which should be for internal use only, from the displayed
list of libraries.  This means the output is not suitable for linking against
static libraries built from the tree, but prevents us from committing to
keeping libkrb5support.1 in all future Mac shared-library builds (in addition
to the libkrb5support.0 we're stuck with for non-Mac UNIXy shared-library
builds).

ticket: 3887

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18154 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoftpd's getline conflicts with current glibc headers
Ken Raeburn [Fri, 16 Jun 2006 00:10:08 +0000 (00:10 +0000)]
ftpd's getline conflicts with current glibc headers

Reported by Ubaidul Khan on kerberos@mit this date.
GNU libc includes a function getline with an incompatible prototype.
It hasn't caused problems for MIT on RHEL 4 (glibc 2.3.4), but
apparently FC5 has a newer set of headers in which it does.

* ftpcmd.y (getline): Renamed to ftpd_getline.  Declarations and callers
changed.
* ftpd.c (getline): Remove duplicate declaration.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18153 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago* configure.in: Set and substitute SUPPORTLIB_MAJOR based on operating system.
Ken Raeburn [Thu, 15 Jun 2006 23:58:19 +0000 (23:58 +0000)]
* configure.in: Set and substitute SUPPORTLIB_MAJOR based on operating system.
* util/support/Makefile.in (LIBMAJOR): Use it.
(LIBMINOR): Bump.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18152 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoIncrease buffer sizes to 64K where a Kerberos 5 authenticator might be
Ken Raeburn [Thu, 15 Jun 2006 22:42:53 +0000 (22:42 +0000)]
Increase buffer sizes to 64K where a Kerberos 5 authenticator might be
exchanged.  Suggested by Markus Moeller.

ticket: 2615

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18151 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoremove unused versions of makefiles
Ken Raeburn [Thu, 15 Jun 2006 22:28:48 +0000 (22:28 +0000)]
remove unused versions of makefiles

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18150 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago* config/pre.in (KRB5_BASE_LIBS): Add $(DL_LIB).
Ken Raeburn [Thu, 15 Jun 2006 22:21:58 +0000 (22:21 +0000)]
* config/pre.in (KRB5_BASE_LIBS): Add $(DL_LIB).
* krb5-config.in: Add DL_LIB.

ticket: 3838
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18149 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago(kadmin_startup): Properly skip "\@" and "\/" sequences when
Ken Raeburn [Thu, 15 Jun 2006 22:01:57 +0000 (22:01 +0000)]
(kadmin_startup): Properly skip "\@" and "\/" sequences when
processing principal name, rather than going into an infinite loop.
Suggested by Mark Phalan at Sun.

ticket: 3697

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18148 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago * src/lib/gssapi/libgssapi_krb5.exports: Add
Tom Yu [Thu, 15 Jun 2006 19:48:47 +0000 (19:48 +0000)]
* src/lib/gssapi/libgssapi_krb5.exports: Add
gss_inquire_mechs_for_name.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18143 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago * src/lib/gssapi/krb5/gssapiP_krb5.h: Restore prototype of
Tom Yu [Thu, 15 Jun 2006 19:05:38 +0000 (19:05 +0000)]
* src/lib/gssapi/krb5/gssapiP_krb5.h: Restore prototype of
krb5_gss_release_oid() for now.

* src/lib/gssapi/krb5/rel_oid.c (krb5_gss_release_oid): Restore
for now.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18142 dc483132-0cff-0310-8789-dd5450dbe970

18 years agomake depend
Tom Yu [Thu, 15 Jun 2006 18:40:25 +0000 (18:40 +0000)]
make depend

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18141 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago * src/lib/gssapi/mechglue/Makefile.in (mydir):
Tom Yu [Thu, 15 Jun 2006 18:36:38 +0000 (18:36 +0000)]
* src/lib/gssapi/mechglue/Makefile.in (mydir):
* src/lib/gssapi/spnego/Makefile.in (mydir): Point to correct
locations.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18140 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoremove spuriously resurrected file from merge
Tom Yu [Thu, 15 Jun 2006 18:22:17 +0000 (18:22 +0000)]
remove spuriously resurrected file from merge

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18139 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago* rc_io.c (krb5_rc_io_move): Use same code for cygwin as for normal
Ken Raeburn [Thu, 15 Jun 2006 02:51:22 +0000 (02:51 +0000)]
* rc_io.c (krb5_rc_io_move): Use same code for cygwin as for normal
Windows build.

ticket: 1434

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18138 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoConditionalize declarations of krb5int_make_srv_query_realm and
Ken Raeburn [Thu, 15 Jun 2006 02:40:23 +0000 (02:40 +0000)]
Conditionalize declarations of krb5int_make_srv_query_realm and
krb5int_free_srv_dns_data on KRB5_DNS_LOOKUP.

ticket: 2628
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18137 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMake __kdb2_hash_open declaration and definition consistent
Ken Raeburn [Thu, 15 Jun 2006 02:35:44 +0000 (02:35 +0000)]
Make __kdb2_hash_open declaration and definition consistent

ticket: 2628
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18136 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoThis ticket is pretty old, and the config files have been changed
Ken Raeburn [Thu, 15 Jun 2006 02:02:02 +0000 (02:02 +0000)]
This ticket is pretty old, and the config files have been changed
around a bit since, but this is an attempt to integrate the patch...

ticket: 856

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18135 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoSome simple transformations:
Ken Raeburn [Wed, 14 Jun 2006 23:44:48 +0000 (23:44 +0000)]
Some simple transformations:
Use ANSI C function definitions instead of old K&R style.
Rename local variable "res" to "clnt_res".
Cast clnt_call arguments to xdrproc_t and caddr_t.

This brings the code more in line with what current (RHEL) rpcgen would do.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18134 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMerge from branches/mechglue. Initial integration of Sun-donated
Tom Yu [Wed, 14 Jun 2006 22:27:54 +0000 (22:27 +0000)]
Merge from branches/mechglue.  Initial integration of Sun-donated
mechglue and SPNEGO implementations.  Additional changes outside of
src/lib/gssapi:

* src/configure.in: Add lib/gssapi/mechglue and lib/gssapi/spnego
to list of directories to output Makefile in.

* src/lib/rpc/unit-test/rpc_test.0/expire.exp (expired): Update
regexp for mechglue.

* src/tests/dejagnu/krb-standalone/v4gssftp.exp (v4ftp_test):
Update "Miscellaneous failure" regexp for mechglue.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18131 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoremove old cvs log comment
Ken Raeburn [Wed, 14 Jun 2006 21:42:02 +0000 (21:42 +0000)]
remove old cvs log comment

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18130 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoWhen NULL is passed into krb_get_in_pw_tkt, we only want to prompt once
Russ Allbery [Wed, 14 Jun 2006 20:31:52 +0000 (20:31 +0000)]
When NULL is passed into krb_get_in_pw_tkt, we only want to prompt once
for the password rather than passing NULL along to each string to key
function causing each to prompt independently.  Modify krb_get_in_pw_tkt
to call des_read_pw_string directly and then pass the resulting password
into each string to key function as needed.  Add a prototype of
des_read_pw_string to krb4int.h since it's an exported function of
libdes425 but isn't prototyped in des.h.

Ticket: 2648
Version_Reported: 1.3.3
Component: krb5-libs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18129 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoEnable kinit -a to match the man page and add documentation
Russ Allbery [Tue, 13 Jun 2006 16:08:38 +0000 (16:08 +0000)]
Enable kinit -a to match the man page and add documentation

Ticket: 3030
Reported_Version: 1.4.1
Component: krb5-clients

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18125 dc483132-0cff-0310-8789-dd5450dbe970

18 years agotelnet help should telnet to a host named help, not display a usage
Russ Allbery [Tue, 13 Jun 2006 16:03:12 +0000 (16:03 +0000)]
telnet help should telnet to a host named help, not display a usage
message.  Only support ?, not help, to request help with the open
command.  The same change was made in netkit's telnet.

Ticket: 3269
Component: krb5-appl
Version_Reported: 1.4.2

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18124 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoChange kprop and kpropd to fall back on port 754 if krb5_prop isn't
Russ Allbery [Tue, 13 Jun 2006 15:34:27 +0000 (15:34 +0000)]
Change kprop and kpropd to fall back on port 754 if krb5_prop isn't
available via getservbyname rather than failing.

Ticket: 3268
Version_Reported: 1.4.2
Component: krb5-misc

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18123 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoChange man page cross-reference to kerberos(1) from kerberos(3)
Russ Allbery [Tue, 13 Jun 2006 15:24:03 +0000 (15:24 +0000)]
Change man page cross-reference to kerberos(1) from kerberos(3)

Ticket: 3008
Version_Reported: 1.3.6
Component: krb5-appl

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18122 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoPOSIX allows getpwnam_r and getpwuid_r to return 0 (success) even if the
Russ Allbery [Tue, 13 Jun 2006 15:18:04 +0000 (15:18 +0000)]
POSIX allows getpwnam_r and getpwuid_r to return 0 (success) even if the
username or UID could not be found, in which case OUT will be set to
NULL.  Elsewhere, code assumes that if k5_getpwnam_r or k5_getpwuid_r
returns 0, OUT is non-NULL.  Check whether OUT is NULL and adjust the
return value accordingly in the k5_getpw{nam,uid}_r wrappers.

Ticket: 3490
Version_Reported: 1.4.3
Component: krb5-libs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18121 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoPrevent a library double-free and crash when a keytab is zero-length.
Russ Allbery [Tue, 13 Jun 2006 14:14:27 +0000 (14:14 +0000)]
Prevent a library double-free and crash when a keytab is zero-length.
Based on a patch from Rainer Weikusat.

Ticket: 3549
Version_Reported: 1.4.3
Component: krb5-libs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18120 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoTrivial whitespace cleanup in KDC code
Ken Raeburn [Tue, 13 Jun 2006 00:31:17 +0000 (00:31 +0000)]
Trivial whitespace cleanup in KDC code

ticket: 2712

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18119 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAllow whitespace in front of comments. Patch from Jeremie Koenig
Russ Allbery [Mon, 12 Jun 2006 20:20:21 +0000 (20:20 +0000)]
Allow whitespace in front of comments.  Patch from Jeremie Koenig

Ticket: 1988
Version_Reported: 1.3.6

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18118 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAlways include sys/ioctl.h in the telnet and telnetd code, even if
Russ Allbery [Mon, 12 Jun 2006 19:59:35 +0000 (19:59 +0000)]
Always include sys/ioctl.h in the telnet and telnetd code, even if
sys/filio.h is available.  GNU/kFreeBSD has sys/filio.h but still
requires sys/ioctl.h, and sys/ioctl.h is included unconditionally
elsewhere in the code.  Patch from Petr Salinger.

Ticket: 3466

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18117 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoNever return -I/usr/include from --cflags. It's already in the default
Russ Allbery [Mon, 12 Jun 2006 19:47:52 +0000 (19:47 +0000)]
Never return -I/usr/include from --cflags.  It's already in the default
compiler search path, causes gcc warnings, and can cause obscure failures
with gcc by including system headers before gcc's internal headers.

Ticket: 3011
Version_Reported: 1.4.2

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18116 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoUpdate texinfo.tex to the version from texinfo 4.8.1 (2006-02-13.16)
Russ Allbery [Mon, 12 Jun 2006 19:38:29 +0000 (19:38 +0000)]
Update texinfo.tex to the version from texinfo 4.8.1 (2006-02-13.16)

Ticket: 3879

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18115 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAlways initialize the output token in gss_init_sec_context as required
Russ Allbery [Mon, 12 Jun 2006 18:58:01 +0000 (18:58 +0000)]
Always initialize the output token in gss_init_sec_context as required
by RFC 2744 section 5.19.  The krb5 code did this but the generic code
didn't, causing a double-free in OpenSSH.

Ticket: 3086
Version_Reported: 1.3.6

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18114 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoIf krb5_gss_canonicalize_name is given GSS_C_NULL_OID as the mechanism,
Russ Allbery [Mon, 12 Jun 2006 18:35:03 +0000 (18:35 +0000)]
If krb5_gss_canonicalize_name is given GSS_C_NULL_OID as the mechanism,
assume krb5 using similar logic as other library functions rather than
failing.  Patch provided by Daniel Kahn Gillmor.

Ticket: 3467
Version_Reported: 1.4.3

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18113 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDocument the authorization logic used in the absence of .k5login files.
Russ Allbery [Mon, 12 Jun 2006 18:19:26 +0000 (18:19 +0000)]
Document the authorization logic used in the absence of .k5login files.
Remove all remaining references to .rhosts authentication; the code to
implement this was already removed.

Ticket: 2577
Version_Reported: 1.3.3

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18112 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAdd dircategory and direntry lines to the texinfo source for better info
Russ Allbery [Mon, 12 Jun 2006 17:49:30 +0000 (17:49 +0000)]
Add dircategory and direntry lines to the texinfo source for better info
documentation.  Fix a few typos in variable names.

Ticket: 3014
Version_Reported: 1.4.2

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18111 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoThis file uses E* constants and therefore should include errno.h
Russ Allbery [Mon, 12 Jun 2006 17:43:28 +0000 (17:43 +0000)]
This file uses E* constants and therefore should include errno.h

Ticket: 3266
Version_Reported: 1.3.6

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18110 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAdd man pages for fakeka and k524init
Russ Allbery [Mon, 12 Jun 2006 17:19:19 +0000 (17:19 +0000)]
Add man pages for fakeka and k524init

Ticket: 3013
Version_Reported: 1.3.6

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18109 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5.conf option name is udp_preference_limit, not udp_preference_list
Russ Allbery [Mon, 12 Jun 2006 17:14:28 +0000 (17:14 +0000)]
krb5.conf option name is udp_preference_limit, not udp_preference_list

Ticket: 3468
Version_Reported: 1.4.3

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18108 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoFix minor nroff man page problems (stray space, bad cross reference)
Russ Allbery [Mon, 12 Jun 2006 14:15:52 +0000 (14:15 +0000)]
Fix minor nroff man page problems (stray space, bad cross reference)

Ticket: 3010
Version_Reported: 1.4.2

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18107 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoSince it appears we don't actually set the conf_tgs_ktypes field except in this
Ken Raeburn [Sat, 10 Jun 2006 01:05:40 +0000 (01:05 +0000)]
Since it appears we don't actually set the conf_tgs_ktypes field except in this
initial allocation of zero elements, it can be deleted, along with
conf_tgs_ktypes_count and the associated code...

ticket: 2786

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18105 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoFix stupid typo in last change
Ken Raeburn [Sat, 10 Jun 2006 00:47:38 +0000 (00:47 +0000)]
Fix stupid typo in last change

ticket: 3233

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18104 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoUse new macro FILE_OWNER_OK to examine uid of .k5login file.
Ken Raeburn [Sat, 10 Jun 2006 00:00:19 +0000 (00:00 +0000)]
Use new macro FILE_OWNER_OK to examine uid of .k5login file.
On Mac, define this to accept UNKNOWNUID as well as 0.

ticket: 3233
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18103 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoCall krb5_set_error_message any time multiple errno values are translated to
Ken Raeburn [Fri, 9 Jun 2006 23:40:17 +0000 (23:40 +0000)]
Call krb5_set_error_message any time multiple errno values are translated to
one KRB5_RC_* error code, and a few other places.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18102 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDon't use GNU linker option --as-needed yet
Ken Raeburn [Fri, 9 Jun 2006 22:48:06 +0000 (22:48 +0000)]
Don't use GNU linker option --as-needed yet

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18101 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoFree requested-enctype list when freeing up credentials. Reported by Rainer
Ken Raeburn [Thu, 8 Jun 2006 21:44:50 +0000 (21:44 +0000)]
Free requested-enctype list when freeing up credentials.  Reported by Rainer
Weikusat.

ticket: 3790

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18093 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoFixed by having krb5_fcc_interpret call krb5_set_error_message to incorporate
Ken Raeburn [Thu, 8 Jun 2006 20:23:17 +0000 (20:23 +0000)]
Fixed by having krb5_fcc_interpret call krb5_set_error_message to incorporate
the lower-level error message into the message displayed by kinit, which has
already been changed to use krb5_get_error_message.  For example, "kinit(v5):
Credentials cache I/O operation failed (No space left on device) when
initializing cache".

ticket: 3438

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18091 dc483132-0cff-0310-8789-dd5450dbe970

18 years agocopyright notice
Ken Raeburn [Thu, 8 Jun 2006 20:15:40 +0000 (20:15 +0000)]
copyright notice

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18090 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDon't call k5_mutex_destroy when krb5_rc_resolve_type fails, because that's
Ken Raeburn [Thu, 8 Jun 2006 20:01:44 +0000 (20:01 +0000)]
Don't call k5_mutex_destroy when krb5_rc_resolve_type fails, because that's
where the mutex would've been initialized.  Reported by Shawn Emery.

ticket: 3332

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18089 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAvoid memory leak in error path. Reported by Rainer Weikusat
Ken Raeburn [Thu, 8 Jun 2006 19:21:53 +0000 (19:21 +0000)]
Avoid memory leak in error path.  Reported by Rainer Weikusat

ticket: 3791

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18088 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoUpdated CCAPI version of krb4int_save_credentials_addr to
Alexandra Ellwood [Tue, 6 Jun 2006 21:14:18 +0000 (21:14 +0000)]
Updated CCAPI version of krb4int_save_credentials_addr to
match the prototype in the headers.

ticket: new
target-version: 1.5

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18084 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoUpdate procedures for Subversion; fix some typos
Sam Hartman [Sat, 3 Jun 2006 01:06:47 +0000 (01:06 +0000)]
Update procedures for Subversion; fix some typos

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18081 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoNo longer ignore configure, autom4te.cache, config.status, config.log
Ken Raeburn [Fri, 2 Jun 2006 23:21:12 +0000 (23:21 +0000)]
No longer ignore configure, autom4te.cache, config.status, config.log
in directories that no longer have configure.in files.  (And prune
blank lines previously accidentally added to the svn:ignore property
while we're editing them anyways.)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18079 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoRe-disable python plugin configuration accidentally enabled in an earlier checkin
Ken Raeburn [Fri, 2 Jun 2006 22:55:40 +0000 (22:55 +0000)]
Re-disable python plugin configuration accidentally enabled in an earlier checkin

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18077 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoPatch from Alejandro R. Sedeno and Jeffrey Hutzelman to allow krb4 to
Sam Hartman [Fri, 2 Jun 2006 21:14:35 +0000 (21:14 +0000)]
Patch from Alejandro R. Sedeno and Jeffrey Hutzelman to allow krb4 to
read 32-bit and 64-bit ticket files on 32-bit and 64-bit systems.
Previously the ticket file format depended on the ABI.  Significant
backward compatibility is maintained; the patch works by writing
alignment records that are valid (but meaningless) ticket file entries
but that allow systems to get realigned.  As a consequence an old
library will see additional meaningless ticket file entries when it
reads a ticket file produced by the new code.  These entries are
harmless and will be ignored.

ticket: 1288

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18076 dc483132-0cff-0310-8789-dd5450dbe970

18 years agomove var decl before code
Ken Raeburn [Thu, 1 Jun 2006 22:48:20 +0000 (22:48 +0000)]
move var decl before code

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18073 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5 1.5 alpha - memory leaks in krb5kdc due to not freeing error messages
Ezra Peisach [Thu, 1 Jun 2006 03:18:19 +0000 (03:18 +0000)]
krb5 1.5 alpha - memory leaks in krb5kdc due to not freeing error messages

In the kdc and lib/kadm5/logger.c, krb5_get_error_message needs to be paired
with krb5_free_error_message to release returned memory.

Essentially a memory leak was introduced for every principal requested
that did not exist in the database.

Identified by valgrind on the kdc - running kdc_hammer and specifying
more principals than are present in the db.

ticket: new
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18072 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMissed a reference to + sizeof() vs * sizeof(). Pointed out by
Ezra Peisach [Thu, 1 Jun 2006 01:41:33 +0000 (01:41 +0000)]
Missed a reference to + sizeof() vs * sizeof().  Pointed out by
william fiveash.

ticket: 3825
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18071 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5int_get_plugin_dir_data() uses + instead of * in realloc
Ezra Peisach [Thu, 1 Jun 2006 00:56:12 +0000 (00:56 +0000)]
krb5int_get_plugin_dir_data() uses + instead of * in realloc

In line 570, in reallocating the plugin tree - the memory allocated is
(count + 1) + sizeof(*p)

instead of

(count +1 ) * sizeof(*p)

Detected while running the krb5kdc under valgrind with memcheck.

ticket: new
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18070 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMerge about 1/3 of the remaining configure scripts into the top level. This
Ken Raeburn [Wed, 31 May 2006 00:09:31 +0000 (00:09 +0000)]
Merge about 1/3 of the remaining configure scripts into the top level.  This
still leaves out appl and tests, and static library and plugin directories.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18068 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5-1.5-alpha1-postrelease
Tom Yu [Tue, 30 May 2006 21:34:34 +0000 (21:34 +0000)]
krb5-1.5-alpha1-postrelease

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18066 dc483132-0cff-0310-8789-dd5450dbe970

18 years agokrb5-1.5-alpha1
Tom Yu [Tue, 30 May 2006 21:32:44 +0000 (21:32 +0000)]
krb5-1.5-alpha1

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18064 dc483132-0cff-0310-8789-dd5450dbe970

18 years ago Delete some bogus svn:mime-type properties
Tom Yu [Tue, 30 May 2006 20:26:04 +0000 (20:26 +0000)]
Delete some bogus svn:mime-type properties

* README: Update for krb5-1.5-alpha1.  Update Kerberos Development
Team member list.

* doc/copyright.texinfo: Update copyright years.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18063 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoBuild lib/krb4 makefile at top level
Ken Raeburn [Fri, 26 May 2006 00:22:01 +0000 (00:22 +0000)]
Build lib/krb4 makefile at top level

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18046 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoAdd copyright notice
Ken Raeburn [Fri, 26 May 2006 00:21:35 +0000 (00:21 +0000)]
Add copyright notice

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18045 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDon't define MODULE_PATH
Ken Raeburn [Thu, 25 May 2006 23:37:33 +0000 (23:37 +0000)]
Don't define MODULE_PATH

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18044 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoProperly recognize Mac environments, and set {KRB5,KDB5}_PLUGIN_BUNDLE_DIR
Ken Raeburn [Thu, 25 May 2006 23:31:26 +0000 (23:31 +0000)]
Properly recognize Mac environments, and set {KRB5,KDB5}_PLUGIN_BUNDLE_DIR

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18043 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoCreate crypto, des425 Makefiles from top level
Ken Raeburn [Thu, 25 May 2006 23:18:38 +0000 (23:18 +0000)]
Create crypto, des425 Makefiles from top level

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18042 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoRename locate.h to locate_plugin.h. Change references, update dependencies
Ken Raeburn [Wed, 24 May 2006 21:19:23 +0000 (21:19 +0000)]
Rename locate.h to locate_plugin.h.  Change references, update dependencies

ticket: 3784

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18037 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDrop major version number from service-locator function table structure.
Ken Raeburn [Wed, 24 May 2006 16:18:53 +0000 (16:18 +0000)]
Drop major version number from service-locator function table structure.
Add a typedef name for the structure.  Change multiple-inclusion macro name.
Add a comment indicating desired symbol name.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18036 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoDon't output krb5_config_prefix commands into config.status; do the substitutions
Ken Raeburn [Wed, 24 May 2006 10:29:25 +0000 (10:29 +0000)]
Don't output krb5_config_prefix commands into config.status; do the substitutions
in the configure script.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18035 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoMention the python plugin stuff in configure.in, but inside an "if false"
Ken Raeburn [Tue, 23 May 2006 00:37:46 +0000 (00:37 +0000)]
Mention the python plugin stuff in configure.in, but inside an "if false"
block, so reconf will build a configure script and it'll be easy to enable
for testing.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18034 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoupdate dependencies
Ken Raeburn [Tue, 23 May 2006 00:34:14 +0000 (00:34 +0000)]
update dependencies

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18033 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoInclude k5-platform.h and fake-addrinfo.h, but not k5-int.h
Ken Raeburn [Tue, 23 May 2006 00:33:57 +0000 (00:33 +0000)]
Include k5-platform.h and fake-addrinfo.h, but not k5-int.h

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18032 dc483132-0cff-0310-8789-dd5450dbe970

18 years agoservice location plugin interface needs header installed
Ken Raeburn [Tue, 23 May 2006 00:07:02 +0000 (00:07 +0000)]
service location plugin interface needs header installed

Install <krb5/locate.h>.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18031 dc483132-0cff-0310-8789-dd5450dbe970