Tom Yu [Mon, 5 Feb 2007 23:45:39 +0000 (23:45 +0000)]
Delete krb5_get_init_creds_opt_set_pkinit, somehow missed in merges
ticket: 5420
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19151
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:45:29 +0000 (23:45 +0000)]
pull up r19085 from trunk
This is needed to deal with changes to the def-check run required by
the API changes.
r19085@cathode-dark-space: raeburn | 2007-01-20 07:13:15 -0500
Handle function names immediately preceded by "*", like "*strdup"
in k5-int.h+krb5.h.
ticket: 5420
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19150
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:45:17 +0000 (23:45 +0000)]
pull up r19131 from trunk
r19131@cathode-dark-space: tlyu | 2007-01-30 19:53:11 -0500
ticket: 5420
status: open
Fix merge botches:
restore krb5_get_init_creds_opt_set_change_password_prompt()
undo accidental reversion of preauth_tryagain change to
krb5_get_init_creds()
ticket: 5420
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19149
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:45:07 +0000 (23:45 +0000)]
pull up r19130 from trunk
r19130@cathode-dark-space: tlyu | 2007-01-30 19:52:59 -0500
ticket: 5420
status: open
remove krb5_get_init_creds_opt_set_pkinit() for now
ticket: 5420
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19148
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:45:00 +0000 (23:45 +0000)]
krb5-1.6-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19147
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:44:50 +0000 (23:44 +0000)]
pull up r19128 from trunk
r19128@cathode-dark-space: tlyu | 2007-01-30 16:40:20 -0500
ticket: 5420
status: open
update def-check to look at preauth_plugin.h
ticket: 5420
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19146
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 5 Feb 2007 23:44:34 +0000 (23:44 +0000)]
pull up r19127 from trunk
r19127@cathode-dark-space: tlyu | 2007-01-30 16:38:47 -0500
ticket: new
status: open
subject: get_init_creds_opt extensibility
component: krb5-libs
r18922@cathode-dark-space: coffman | 2006-12-04 18:30:15 -0500
First cut at making the get_init_creds_opt structure extendable
and adding library functions to set options for preauthentication
plugins.
This does *not* include a compatibility function to work like
Heimdal's krb5_get_init_creds_opt_set_pkinit() function.
Hopefully, the test code that doesn't belong in kinit.c is
obvious.
r18929@cathode-dark-space: coffman | 2006-12-07 10:01:20 -0500
Remove extra "user_id" parameter.
Add function which duplicates the Heimdal interface (if we can agree on
what the matching attribute names should be).
r18934@cathode-dark-space: coffman | 2006-12-08 15:28:03 -0500
Update to use the simplified interface for krb5_get_init_creds_opt_set_pa()
Add code in kinit to process "-X" options as preauth options and pass
them along.
r18936@cathode-dark-space: coffman | 2006-12-11 12:04:26 -0500
Move prototypes for get_init_creds_opt_get_pa() and
krb5_get_init_creds_opt_free_pa() into the
preauth_plugin.h header rather than krb5.hin.
ticket: 5420
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19145
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 27 Jan 2007 02:07:08 +0000 (02:07 +0000)]
pull up r19104 from trunk
r19104@cathode-dark-space: jaltman | 2007-01-22 20:18:17 -0500
ticket: new
subject: kt_file.c memory leak on error in krb5_kt_resolve / krb5_kt_wresolve
tags: pullup
The krb5_kt_resolve and krb5_kt_wresolve functions leak the 'data'
memory allocation if the lock cannot be initialized.
ticket: 5410
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19113
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 26 Jan 2007 22:01:06 +0000 (22:01 +0000)]
pull up r19070 from trunk
r19070@cathode-dark-space: jaltman | 2007-01-18 10:28:07 -0500
ticket: 5393
tags: pullup
In addition to setting the kpasswd port after
searching for kadmind host addresses we must also
set the socket type according to the request.
ticket: 5393
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19112
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 24 Jan 2007 21:35:30 +0000 (21:35 +0000)]
pull up r19065 from trunk
r19065@cathode-dark-space: jaltman | 2007-01-18 06:35:33 -0500
ticket: 5394
tags: pullup
sendto_kdc.c: use of a variable index into a dynamically
allocated array to determine the sizeof() an object makes
it unclear what type of object is involved. It also requires
a runtime check instead of a compile time replacement.
Not to mention that it could lead to the evaluation of an
uninitialized variable as was done in this case. Replace
sizeof(array index variable) with sizeof(type).
memset() the correct data structure.
ticket: 5394
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19111
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 20 Jan 2007 00:20:53 +0000 (00:20 +0000)]
pull up r19022 from trunk
r19022@cathode-dark-space: epeisach | 2006-12-30 01:09:25 -0500
ticket: 5233
tags: pullup
If gss_krb5int_unseal_token_v3() unwraps a message of length 0 - free
memory and return in message_buffer a NULL pointer for value. This
is consistant with gss_release_buffer in the mechglue implementation in which
memory is only freed if the buffer length != 0.
ticket: 5233
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19074
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 20 Jan 2007 00:20:40 +0000 (00:20 +0000)]
pull up r19021 from trunk
r19021@cathode-dark-space: epeisach | 2006-12-30 01:05:12 -0500
subject: memory leak if defective header present in gss_krb5int_unseal_token_v3
ticket: new
tags: pullup
If after unsealing the message, the TOK_ID is not 05 04, free memory
before returning a defective token error.
ticket: 5238
version_fixed: 1.6.1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19073
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 18 Jan 2007 23:27:30 +0000 (23:27 +0000)]
Pullup from trunk
r19071 | lxs | 2007-01-18 18:24:13 -0500 (Thu, 18 Jan 2007) | 6 lines
ticket: 5403
Added KDC timesyncing support to the CCAPI ccache backend for CCAPI v5
and later. v5 is the first version of the CCAPI to support the kdc
timesyncing API.
ticket: 5403
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19072
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 23:59:45 +0000 (23:59 +0000)]
fix typo
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19047
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 23:59:38 +0000 (23:59 +0000)]
README and patchlevel.h for krb5-1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19046
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 20:21:43 +0000 (20:21 +0000)]
pull up r19043 from trunk
r19043@cathode-dark-space: tlyu | 2007-01-09 14:45:25 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: MITKRB5-SA-2006-003: mechglue argument handling too lax
component: krb5-libs
Fix mechglue argument checks so that output pointers are always
initialized regardless of whether the other arguments fail to validate
for some reason. This avoids freeing of uninitialized pointers.
Initialize the gss_buffer_descs in ovsec_kadmd.c.
ticket: 5302
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19045
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 20:21:31 +0000 (20:21 +0000)]
pull up r19042 from trunk
r19042@cathode-dark-space: tlyu | 2007-01-09 14:45:10 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: MITKRB5-SA-2006-002: svctcp_destroy() can call uninitialized function pointer
component: krb5-libs
Explicitly null out xprt->xp_auth when AUTH_GSSAPI is being used, so
that svctcp_destroy() will not call through an uninitialized function
pointer after code in svc_auth_gssapi.c has destroyed expired state
structures. We can't unconditionally null it because the RPCSEC_GSS
implementation needs it to retrieve state.
ticket: 5301
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19044
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 01:06:04 +0000 (01:06 +0000)]
pull up r19036 from trunk
r19036@cathode-dark-space: rra | 2007-01-05 16:42:38 -0500
Ticket: 5279
Subject: Document what the kadmind ACL is for
Component: krb5-doc
Version_Reported: 1.5.1
Target_Version: 1.6
Tags: pullup
Add a sentence documenting the purpose of the kadmind ACL to the node
explaining how to create it.
ticket: 5279
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19041
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 9 Jan 2007 01:05:52 +0000 (01:05 +0000)]
pull up r19035 from trunk
r19035@cathode-dark-space: rra | 2007-01-04 17:32:41 -0500
ticket: new
Subject: Document KDC behavior without stash file
Component: krb5-doc
Version_Reported: 1.5.1
Target_Version: 1.6
Tags: pullup
After the discussion of the optional stash file, document the effects of
not creating a stash file.
ticket: 5271
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19040
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 4 Jan 2007 00:27:26 +0000 (00:27 +0000)]
pull up r19031 from trunk
r19031@cathode-dark-space: raeburn | 2007-01-03 18:54:25 -0500
ticket: 5260
* ldap_principal.c (attributes_set): Swap first two elements.
Also add comments indicating that this array and the KDB_*_ATTR macros
need to be in sync.
ticket: 5260
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19034
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 4 Jan 2007 00:27:17 +0000 (00:27 +0000)]
pull up r19030 from trunk
r19030@cathode-dark-space: raeburn | 2007-01-03 18:15:55 -0500
ticket: new
subject: update ldap/Makefile.in for newer autoconf substitution requirements
target_version: 1.6
tags: pullup
The other makefile.in files have had the makefile-fragment
substitution lines updated to not have "#" at the front, because some
recent versions of autoconf require that the @-pattern start at the
beginning of the line. We missed plugins/kdb/ldap/Makefile.in at the
time.
Patch from Michael Calmer.
ticket: 5265
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19033
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 4 Jan 2007 00:27:06 +0000 (00:27 +0000)]
pull up r19029 from trunk
r19029@cathode-dark-space: raeburn | 2007-01-03 17:53:33 -0500
ticket: 3906
tags: pullup
* Makefile.in (install): Install kdb5_ldap_util.M. Based on patch from
Michael Calmer.
ticket: 3906
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19032
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 3 Jan 2007 21:44:25 +0000 (21:44 +0000)]
pull up r19023 from trunk
r19023@cathode-dark-space: jaltman | 2006-12-31 11:24:54 -0500
ticket: new
subject: Repair broken links in NetIdMgr Help
tags: pullup
A small number of links contained the wrong root directory.
ticket: 5245
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19028
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 3 Jan 2007 21:44:14 +0000 (21:44 +0000)]
pull up r19020 from trunk
r19020@cathode-dark-space: rra | 2006-12-28 13:05:28 -0500
Ticket: new
Subject: Fix typo in user-guide.texinfo
Component: krb5-doc
Version_Reported: 1.4.4
Target_Version: 1.6
Tags: pullup
Typo fix (network instead of netword). Thanks, Matt Zagrabelny.
ticket: 5223
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19027
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 22 Dec 2006 22:56:43 +0000 (22:56 +0000)]
krb5-1.6-beta2-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19015
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 22 Dec 2006 22:55:10 +0000 (22:55 +0000)]
patchlevel.h for krb5-1.6-beta2
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19013
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 22 Dec 2006 22:55:03 +0000 (22:55 +0000)]
update for krb5-1.6-beta2
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19012
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 22 Dec 2006 04:28:09 +0000 (04:28 +0000)]
pull up r19009 from trunk
r19009@cathode-dark-space: raeburn | 2006-12-21 20:26:59 -0500
ticket: 4453
target_version: 1.6
tags: pullup
Some related changes were already in, and I found a couple more to make:
* ldap_realm.c (ldap_filter_correct): Change string argument to char *. Delete
length argument, which was always strlen of the string argument, and compute
it locally, using size_t instead of (unsigned) int for length-related values.
Update all calls.
* ldap_realm.h (ldap_filter_correct): Updated declaration.
* ldap_misc.c (remove_overlapping_subtrees): Add forward declaration. Make
static.
(is_principal_in_realm): Change local variable defrealmlen to size_t.
(store_tl_data): Change local variable curr to point to unsigned char, since
that's what the tl_data_contents array is declared as, and what the STORE16_INT
macro is happier with.
(krb5_ldap_get_reference_count): Make local variable i unsigned.
ticket: 4453
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19010
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 22 Dec 2006 01:21:33 +0000 (01:21 +0000)]
pull up r19007 from trunk
r19007@cathode-dark-space: tlyu | 2006-12-21 20:19:55 -0500
ticket: 5123
* src/lib/krb5/krb/get_in_tkt.c (krb5_get_init_creds): Fix
ordering bug in previous patch.
ticket: 5123
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19008
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 21 Dec 2006 22:27:40 +0000 (22:27 +0000)]
pull up r18976 from trunk
r18976@cathode-dark-space: tlyu | 2006-12-18 23:16:22 -0500
ticket: new
status: open
target_version: 1.6
subject: don't pass null pointer to krb5_do_preauth_tryagain()
* src/lib/krb5/krb/get_in_tkt.c (krb5_get_init_creds): If
the error isn't PREAUTH_NEEDED and preauth_to_use is null, return
the error in err_reply, rather than attempting to pass a null
pointer to krb5_do_preauth_tryagain().
ticket: 5123
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19006
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 21 Dec 2006 22:07:31 +0000 (22:07 +0000)]
pull up r19001 from trunk
r19001@cathode-dark-space: raeburn | 2006-12-20 16:40:20 -0500
ticket: new
subject: misc cleanups in admin guide ldap sections
target: 1.6
tags: pullup
There are a bunch of instances of incorrect punctuation, inconsistent
use of @-commands with option names, typos in names of principal
flags, and a couple spelling errors. I only fixed what I noticed; I
haven't subjected the rest to careful review.
Also, the long section names for eDirectory-specific documentation
cause the tar files generated for snapshots (which include generated
html docs) to reach the 100-character limit for file names in
traditional tar format; GNU tar can create archives holding them, but
older tar implementations cannot read the archives properly. So,
several eDirectory-related section names have been shortened.
ticket: 5152
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19005
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 21 Dec 2006 22:07:20 +0000 (22:07 +0000)]
pull up r19000 from trunk
r19000@cathode-dark-space: raeburn | 2006-12-20 16:12:35 -0500
ticket: 5116
Merge r18962 to trunk, with minor tweaks; ready to merge to 1.6 branch.
Changes fix up some sample names used, remove some options described
from certain commands, and fix filling in man pages.
r18962: rsavitha | 2006-12-18 10:04:18 -0500
Changed paths:
M /mirror/krb5/users/rsavitha/ldap_plugin_patch/src/kadmin/cli/kadmin.M
M /mirror/krb5/users/rsavitha/ldap_plugin_patch/src/kadmin/server/kadmind.M
M /mirror/krb5/users/rsavitha/ldap_plugin_patch/src/kdc/krb5kdc.M
M /mirror/krb5/users/rsavitha/ldap_plugin_patch/src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.M
ticket: new
subject: minor ldap specific changes in man page
Target_Version: 1.6
Tags: pullup
Updated the man pages with some ldap specific changes
ticket: 5116
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19004
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 21 Dec 2006 22:07:10 +0000 (22:07 +0000)]
pull up r19002 from trunk
r19002@cathode-dark-space: tlyu | 2006-12-21 16:58:10 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: don't split HTML output from makeinfo
* doc/Makefile (HTML): To avoid generating excessively long
filenames, don't split HTML output.
ticket: 5159
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19003
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 21:10:19 +0000 (21:10 +0000)]
pull up r18955 from trunk
r18955@cathode-dark-space: rra | 2006-12-15 21:08:40 -0500
ticket: new
subject: Add -clearpolicy to kadmin addprinc usage
Component: krb5-admin
Version_Reported: 1.4.4
Target_Version: 1.6
Tags: pullup
Add -clearpolicy to the usage message returned by kadmin when one types
addprinc without any arguments.
ticket: 5125
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18981
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 05:05:41 +0000 (05:05 +0000)]
pull up r18977 from trunk
r18977@cathode-dark-space: tlyu | 2006-12-18 23:16:30 -0500
ticket: new
target_version: 1.6
tags: pullup
component: krb5-libs
subject: use KRB5KRB_ERR_GENERIC, not KRB_ERR_GENERIC in preauth2.c
* src/lib/krb5/krb/preauth2.c (krb5_do_preauth_tryagain): Use
KRB5KRB_ERR_GENERIC, not KRB_ERR_GENERIC.
ticket: 5124
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18980
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 05:05:37 +0000 (05:05 +0000)]
pull up r18975 from trunk
r18975@cathode-dark-space: raeburn | 2006-12-18 20:31:11 -0500
ticket: 5121
tags: pullup
ktfns.c (krb5_kt_get_entry): If the supplied server principal has an empty
realm name, replace it with the default realm, in a private copy.
ticket: 5121
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18979
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 05:05:32 +0000 (05:05 +0000)]
pull up r18974 from trunk
r18974@cathode-dark-space: raeburn | 2006-12-18 20:28:32 -0500
ticket: 5121
status: open
krb5_is_referral_realm now takes a pointer to const krb5_data, since it doesn't
modify it.
ticket: 5121
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18978
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 00:23:40 +0000 (00:23 +0000)]
r18970@cathode-dark-space: tlyu | 2006-12-18 19:21:38 -0500
ticket: 5090
export krb5_get_init_creds_opt_set_change_password_prompt
ticket: 5090
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18971
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 00:12:47 +0000 (00:12 +0000)]
pull up r18954 from trunk
r18954@cathode-dark-space: jaltman | 2006-12-14 18:33:53 -0500
ticket: new
subject: krb5_get_init_creds_opt_set_change_password_prompt
krb5_get_init_creds_opt_set_change_password_prompt is a new
gic option that permits the prompter code to be skipped
when the password has expired. This option is meant to
be used by credential managers such as NetIDMgr and
Kerberos.app that have their own built in password change
dialogs.
This patch adds the new function, exports it on Windows,
and makes use of it within the Krb5 identity provider
for NetIDMgr.
The patch is written to ensure that no changes to the
krb5_get_init_creds_opt structure are required and
to ensure that the default behavior, prompting, is
maintained.
The export lists for UNIX and KFM must still be updated.
The function prototype was committed as part of ticket 3642.
ticket: 5090
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18969
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 00:12:42 +0000 (00:12 +0000)]
pull up r18931 from trunk
r18931@cathode-dark-space: jaltman | 2006-12-07 17:13:50 -0500
ticket: 3642
Undo revision 18930 which was not supposed to include this
file.
ticket: 3642
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18968
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Dec 2006 00:12:32 +0000 (00:12 +0000)]
pull up r18930 from trunk
r18930@cathode-dark-space: jaltman | 2006-12-07 16:56:20 -0500
ticket: 3642
tags: pullup
Modifications to support the generation and embedding
of library manifests into generated EXEs and DLLs.
Manifests are required for Windows XP and above when
applications are built with Microsoft Visual Studio 2005
(aka VS8) or above.
ticket: 3642
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18967
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 23:11:28 +0000 (23:11 +0000)]
pull up r18961 from trunk
r18961@cathode-dark-space: epeisach | 2006-12-18 06:26:59 -0500
ticket: new
subject: krb5_rc_io_open_internal on error will call close(-1)
If there is an error in opening the replay cache - memory is freed, but
close() is invoked with -1 (failure from open()). While technically,
close() will return EBADF in such a case, and nothing bad will happen,
valgrind picks up on this and provides an error...
ticket: 5115
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18966
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 23:11:24 +0000 (23:11 +0000)]
pull up r18914 from trunk
r18914@cathode-dark-space: epeisach | 2006-12-02 21:52:11 -0500
ticket: new
Subject: Remove unused prototype for krb5_find_config_files
The prototype for krb5_find_config_files() no longer is necessary
as the function does not exist in the source tree anymore.
ticket: 4980
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18965
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 23:11:20 +0000 (23:11 +0000)]
pull up r18814 from trunk
r18814@cathode-dark-space: raeburn | 2006-11-15 19:53:10 -0500
ticket: new
subject: fix warning in preauth_plugin.h header
* preauth_plugin.h (enum krb5plugin_preauth_client_request_type): Omit trailing
comma.
ticket: 4773
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18964
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 23:11:15 +0000 (23:11 +0000)]
pull up r18893 from trunk
r18893@cathode-dark-space: tlyu | 2006-12-01 12:09:42 -0500
ticket: 3218
* src/kadmin/dbutil/dump.c (load_db): Open the dumpfile as
read-only; we only get a shared lock, so no reason to open for
writing for the sake of getting a lock.
ticket: 3218
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18963
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 03:45:33 +0000 (03:45 +0000)]
pull up r18957 from trunk
r18957@cathode-dark-space: tlyu | 2006-12-17 22:40:15 -0500
ticket: 5027
Restore inadvertently deleted section. Minor editorial changes.
ticket: 5027
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18959
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Dec 2006 03:45:28 +0000 (03:45 +0000)]
pull up r18956 from trunk
r18956@cathode-dark-space: tlyu | 2006-12-17 22:40:03 -0500
ticket: 5027
pull up r18933 to trunk
r18933@cathode-dark-space: rsavitha | 2006-12-08 04:37:01 -0500
ticket: new
subject: admin guide changes for the LDAP backend
Target_Version: 1.6
Tags: pullup
Added LDAP backend related information to the admin guide
ticket: 5027
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18958
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 13 Dec 2006 22:11:39 +0000 (22:11 +0000)]
pull up r18948 from trunk
r18948@cathode-dark-space: raeburn | 2006-12-12 23:25:27 -0500
ticket: 5009
tags: pullup
Pull r18927 up to trunk, and tweak check for "history" principal name
to be a little more precise.
Ready for pullup to 1.6 branch; make depend should be run.
K/M and kadmin/history principals were created with different enctypes.
With this fix kadmin/history is created with the same enctype as K/M.
This checkin also fixes the issue of principals being created only with
the default enctypes during realm creation.
Commit By: rsavitha
Revision: 18927
Changed Files:
U users/rsavitha/ldap_plugin_patch/src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c
ticket: 5009
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18953
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 13 Dec 2006 22:11:35 +0000 (22:11 +0000)]
pull up r18946 from trunk
r18946@cathode-dark-space: raeburn | 2006-12-12 20:27:24 -0500
ticket: 5005
pull r18926 up to trunk; ready for pullup to 1.6 branch
LDAP plugin was returning the code defaults if maxlife, maxrenewlife and
ticket flags were not set in the realm object. The plugin would now
return values from the conf file if not present in directory.
Commit By: rsavitha
Revision: 18926
Changed Files:
U users/rsavitha/ldap_plugin_patch/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c
U users/rsavitha/ldap_plugin_patch/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
ticket: 5005
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18952
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 13 Dec 2006 22:03:09 +0000 (22:03 +0000)]
pull up r18919 from trunk
r18919@cathode-dark-space: wfiveash | 2006-12-04 17:06:13 -0500
ticket: new
subject: minor update to kdb5_util man page for LDAP plugin
Target_Version: krb5-1.6
Tags: pullup
I added some info to the kdb5_util man page regarding the LDAP plugin.
ticket: 4994
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18951
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 13 Dec 2006 22:03:04 +0000 (22:03 +0000)]
pull up r18918 from trunk
r18918@cathode-dark-space: wfiveash | 2006-12-04 16:47:50 -0500
ticket: new
subject: fix for kdb5_util load bug with dumps from a LDAP KDB
Target_Version: krb5-1.6
Tags: pullup
I found a bug when I did a "kdb5_util load -update ldap-dump" where
ldap-dump was a dump done from a LDAP based KDB. The issue is that this
sort of dump contains principal_dn data which is not the case for a db2
KDB dump.
ticket: 4991
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18950
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:53 +0000 (23:37 +0000)]
pull up r18932 from trunk
r18932@cathode-dark-space: jaltman | 2006-12-07 19:28:59 -0500
ticket: new
subject: build the trunk on Windows (again)
This revision corrects a number of missing or extraneous
KRB5_CALLCONV symbols; exposes symbols for _WIN32;
and avoids including headers that don't exist
ticket: 5022
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18945
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:48 +0000 (23:37 +0000)]
pull up r18935 from trunk
r18935@cathode-dark-space: coffman | 2006-12-08 16:02:02 -0500
ticket: new
subject: Don't leak padata when looping for krb5_do_preauth_tryagain()
component: krb5-libs
Target_Version: 1.6
Tags: pullup
* src/lib/krb5/krb/get_in_tkt.c: krb5_get_init_creds()
Free any existing request.padata at the top of the loop
calling krb5_do_preauth() and krb5_do_preauth_tryagain().
ticket: 5032
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18944
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:36 +0000 (23:37 +0000)]
pull up r18915 from trunk
r18915@cathode-dark-space: epeisach | 2006-12-03 08:53:32 -0500
ticket: new
Subject: Make clean in lib/krb5/os does not clean test objs
tags: pullup
make clean failed to remove t_locate_kdc.o
ticket: 4981
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18943
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 6 Dec 2006 22:57:06 +0000 (22:57 +0000)]
pull up r18923 from trunk
r18923@cathode-dark-space: lxs | 2006-12-05 18:21:56 -0500
ticket: new
owner: tlyu
target_version: 1.6
subject: krb5_cc_remove should work for the CCAPI
tags: pullup
Implemented a working krb5_cc_remove for the CCAPI cache type. Added a
private support function krb5_creds_compare() which checks if two krb5_creds
are identical. This function should be needed by implementations of
krb5_cc_remove for other ccache types.
ticket: 5003
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18928
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:16:08 +0000 (00:16 +0000)]
krb5-1.6-beta1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18913
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:13:14 +0000 (00:13 +0000)]
re-do patchlevel.h for krb5-1.6-beta1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18911
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:10:25 +0000 (00:10 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18909
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:10:21 +0000 (00:10 +0000)]
krb5-1.6-beta1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18908
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:40:17 +0000 (23:40 +0000)]
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18906
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:38:47 +0000 (23:38 +0000)]
pullup r18904 from trunk
r18904@cathode-dark-space: tlyu | 2006-12-01 18:36:41 -0500
update for krb5-1.6-beta1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18905
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:23:19 +0000 (23:23 +0000)]
pull up r18896 from trunk
r18896@cathode-dark-space: coffman | 2006-12-01 14:36:38 -0500
subject: send a new request with the new padata returned by krb5_do_preauth_tryagain()
ticket: new
Component: krb5-libs
Target_Version: 1.6
Tags: pullup
Send another request containing the padata obtained from tryagain.
* src/include/k5-int.h
Update prototype
* src/lib/krb5/krb/get_in_tkt.c
Send pointer to the request.padata so krb5_do_preauth_tryagain()
can update the request to be sent.
* src/lib/krb5/krb/preauth2.c
If a module returns modified padata, add it to the return_padata
and return.
ticket: 4973
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18903
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:23:14 +0000 (23:23 +0000)]
pull up r18895 from trunk
r18895@cathode-dark-space: coffman | 2006-12-01 14:18:26 -0500
subject: Return edata from non-"PA_REQUIRED" preauth types
ticket: new
Target_Version: 1.6
tags: pullup
Component: krb5-kdc
* src/kdc/kdc_preauth.c (check_padata)
Return e-data from any failing preauth module.
Save the e-data and return value from the first failing module.
If a subsequent module marked as PA_REQUIRED fails, return
its e-data and error instead.
* src/kdc/kdc_preauth.c (load_preauth_plugins)
Quiet compiler warning by setting pointer to NULL.
ticket: 4972
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18902
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:32 +0000 (21:27 +0000)]
pull up r18894 from trunk
r18894@cathode-dark-space: tlyu | 2006-12-01 13:41:49 -0500
ticket: 4689
tags: pullup
bump minor versions due to API additions
ticket: 4689
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18901
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:28 +0000 (21:27 +0000)]
pull up r18892 from trunk
r18892@cathode-dark-space: tlyu | 2006-12-01 11:40:46 -0500
ticket: 4941
tags: pullup
* src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send):
Conditionalize debugging printfs.
ticket: 4941
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18900
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:23 +0000 (21:27 +0000)]
pull up r18897 from trunk
r18897@cathode-dark-space: tlyu | 2006-12-01 15:57:04 -0500
ticket: 4788
tags: pullup
target_version: 1.6
component: krb5-libs
* src/lib/krb5/ccache/cc_file.c: Adapted patch from Roland
Dowdeswell to avoid possible double-free conditions on certain
errors.
ticket: 4788
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18899
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:17 +0000 (21:27 +0000)]
pull up r18877 from trunk
r18877@cathode-dark-space: jander | 2006-11-29 16:50:02 -0500
ticket: 4739
status: open
Implemented CCAPI v3 specific ccache collection cursor.
* src/lib/krb5/ccache/ccbase.c: Added CCAPI v3 entry to list of type cursors
* src/lib/krb5/ccache/ccapi/stdcc.h:
* src/lib/krb5/ccache/ccapi/stdcc.c: Implemented CCAPI v3 cursor functionality.
ticket: 4739
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18898
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:21:15 +0000 (23:21 +0000)]
pull up r18837 from trunk
r18837@cathode-dark-space: coffman | 2006-11-17 14:56:35 -0500
ticket: 4799
Target_Version: 1.6
Tags: pullup
Didn't include header changes in the previous commit.
ticket: 4799
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18891
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:21:11 +0000 (23:21 +0000)]
pull up r18836 from trunk
r18836@cathode-dark-space: coffman | 2006-11-17 14:48:17 -0500
subject: update krb5_c_keylength function, create krb5_c_random_to_key function
ticket: new
Target_Version: 1.6
Tags: pullup
Modify the keylength function to return both keybytes and keylength.
Change the name of the function and source file to reflect this.
Add a function, krb5_c_random_to_key() that takes random input data
of the right length (keybytes) and produce a valid key for a given
enctype.
ticket: 4799
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18890
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:00:51 +0000 (23:00 +0000)]
pull up r18887 from trunk
r18887@cathode-dark-space: tlyu | 2006-11-30 17:42:16 -0500
ticket: 4805
tags: pullup
component: krb5-libs
* src/lib/krb5/krb/vfy_increds.c (krb5_verify_init_creds): Use
krb5_cc_new_unique().
* src/lib/gssapi/krb5/accept_sec_context.c:
(rd_and_store_for_creds): Use krb5_cc_new_unique().
ticket: 408
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18889
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:00:45 +0000 (23:00 +0000)]
pull up r18857 from trunk
r18857@cathode-dark-space: tlyu | 2006-11-17 20:53:27 -0500
ticket: 3091
tags: pullup
* src/lib/krb5/ccache/ccbase.c (krb5int_cc_getops): Internal
function to fetch ops vector given ccache prefix string.
(krb5_cc_new_unique): New function to generate a new unique
ccache of a given type.
* src/include/krb5/krb5.hin: Prototype for krb5_cc_new_unique().
* src/lib/krb5/libkrb5.exports:
* src/lib/krb5_32.def: Add krb5_cc_new_unique().
ticket: 3091
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18888
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:42 +0000 (21:30 +0000)]
pull up r18873 from trunk
r18873@cathode-dark-space: coffman | 2006-11-28 19:17:52 -0500
ticket: new
subject: skip all modules in plugin if init function fails
Target_Version: 1.6
Tags: pullup
Component: krb5-kdc
If the plugin initialization function fails, skip all modules in
the plugin, not just the first. Also, print the error message from
the plugin if supplied.
ticket: 4942
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18886
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:38 +0000 (21:30 +0000)]
pull up r18859 from trunk
r18859@cathode-dark-space: coffman | 2006-11-21 19:53:34 -0500
subject: fix debug messages
ticket: new
Tags: pullup
Target_Version: 1.6
Change debugging messages so they print salt value correctly
and clean up warnings when compiling with DEBUG.
ticket: 4846
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18885
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:33 +0000 (21:30 +0000)]
pull up r18858 from trunk
r18858@cathode-dark-space: coffman | 2006-11-21 09:37:11 -0500
ticket: new
subject: free error message when freeing context
Target_Version: 1.6
Tags: pullup
Call krb5_clear_error_message() to free any allocated error message
before freeing the context.
The condition that triggered this was a plugin library which fails to
load because of unresolved references. It appears dlopen() on Linux
leaks four bytes for each failing library in this situation.
ticket: 4841
version_fixed: 1.6
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18884
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:24:07 +0000 (21:24 +0000)]
pull up r18865 from trunk
r18865@cathode-dark-space: tlyu | 2006-11-27 23:57:55 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: krb5int_copy_data_contents shouldn't free memory it didn't allocate
component: krb5-libs
* src/lib/krb5/krb/copy_data.c (krb5int_copy_data_contents): Don't
free outdata on malloc failure; we didn't allocate outdata.
ticket: 4928
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18883
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:24:02 +0000 (21:24 +0000)]
pull up r18862 from trunk
r18862@cathode-dark-space: hartmans | 2006-11-22 12:43:41 -0500
ticket: new
Subject: library fragments to front of line
target_version: 1.6
tags: pullup
* src/plugins/kdb/ldap/libkdb_ldap/Makefile.in: Fix fragments substitutions so the makefile works with autoconf 2.60
ticket: 4860
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18882
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:14:43 +0000 (21:14 +0000)]
pull up r18879 from trunk
r18879@cathode-dark-space: tlyu | 2006-11-30 15:50:02 -0500
ticket: 3322
target_version: 1.6
tags: pullup
* src/lib/krb5/krb/gc_via_tkt.c (check_reply_server): New function
to check server principal in reply. Ensures that the reply is
self-consistent, allows rewrites if canonicalization is requested,
and allows limited rewrites of TGS principals if canonicalization
is not requested.
(krb5_get_cred_via_tkt): Move server principal checks into
check_reply_server().
ticket: 3322
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18881
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:10:23 +0000 (21:10 +0000)]
pull up r18878 from trunk
r18878@cathode-dark-space: tlyu | 2006-11-30 15:46:32 -0500
ticket: 4955
tags: pullup
* src/lib/krb5/krb/gc_frm_kdc.c: Also do style cleanup.
(krb5_get_cred_from_kdc_opt): If server principal was rewritten,
fall back unless it was rewritten to a TGS principal. This fixes
a bug when a MS AD rewrites the service principal into a
single-component NETBIOS-style name. If we get a referral back to
the immediately preceding realm, fall back to non-referral
handling. This fixes the changepw failure. To prevent memory
leaks, when falling back to non-referral handling, free any tgts
previously obtained by the initial non-referral do_traversal()
call.
ticket: 4955
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18880
dc483132-0cff-0310-8789-
dd5450dbe970
Justin Anderson [Wed, 29 Nov 2006 21:47:50 +0000 (21:47 +0000)]
Accidental commit to 1.6 instead of trunk. Reverting
ticket: 4739
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18876
dc483132-0cff-0310-8789-
dd5450dbe970
Justin Anderson [Wed, 29 Nov 2006 19:15:08 +0000 (19:15 +0000)]
Implemented CCAPI v3 specific ccache collection cursor
* src/lib/krb5/ccache/ccbase.c: Added CCAPI v3 entry to list of type cursors
* src/lib/krb5/ccache/ccapi/stdcc.c: Implemented CCAPI v3 cursor functionality.
ticket: 4739
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18875
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 28 Nov 2006 23:05:25 +0000 (23:05 +0000)]
pull up r18864 from trunk
r18864@cathode-dark-space: jaltman | 2006-11-27 13:59:21 -0500
ticket: new
subject: documentation updates for KFW 3.1
tags: pullup
Documentation updates including new screen shots for KFW 3.1
ticket: 4921
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18870
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 28 Nov 2006 23:05:18 +0000 (23:05 +0000)]
pull up r18863 from trunk
r18863@cathode-dark-space: jaltman | 2006-11-22 13:11:16 -0500
ticket: new
subject: KFW 3.1 commits for Final Release
tags: pullup
KfW 3.1 final (NetIDMgr 1.1.8.0)
nidmgr32.dll (1.1.8.0)
- When detecting IP address changes, wait for things to settle down
before setting of the IP address change notification.
krb5cred.dll (1.1.8.0)
- Fixed the Kerberos 5 configuration dialog which didn't handle
setting the default realm properly. Setting the default realm now
sets the correct string in krb5.ini.
- Changing the default realm now marks the relevant configuration node
as dirty, and enabled the 'Apply' button.
- Changing the 'renewable', 'forwardable' and 'addressless' checkboxes
in the identity configuration panels now mark the relevant
configuration nodes as dirty, and enables the 'Apply' button.
- The location of the Kerberos 5 configuration file is now read-only
in the Kerberos 5 configuration dialog.
- Set the maximum number of characters for the edit controls in the
configuration dialog.
krb4cred.dll (1.1.8.0)
- The location of the Kerberos 4 configuration files are now read-only
in the Kerberos 4 configuration dialog.
- Handles setting the ticket string.
- Changing the ticket string now marks the relevant configuration node
as dirty, and enables the 'Apply' button.
- Fixed the plug-in initialization code to perform the initial ticket
listing at the end of the initializaton process.
ticket: 4861
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18869
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:22 +0000 (23:49 +0000)]
pull up r18841 from trunk
r18841@cathode-dark-space: jaltman | 2006-11-17 18:24:59 -0500
ticket: new
subject: one more commit for kfw 3.1 beta 4
tags: pullup
- when the krb5 prompter callback function is called,
set the focus to the first input field provided by
the caller.
ticker: 4803
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18851
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:18 +0000 (23:49 +0000)]
pull up r18842 from trunk
r18842@cathode-dark-space: jaltman | 2006-11-17 18:41:40 -0500
ticket: 4802
krb5_get_init_creds_password:
remove unintentionally committed code not meant for 1.4 branch
ticket: 4802
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18850
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:14 +0000 (23:49 +0000)]
pull up r18840 from trunk
r18840@cathode-dark-space: jaltman | 2006-11-17 18:14:27 -0500
ticket: new
tags: pullup
subject: reset use_master flag when master_kdc cannot be found
krb5_get_init_creds_password:
if the master_kdc cannot be identified reset the use_master
flag. otherwise, the krb5_get_init_creds("kadmin/changepw")
call will attempt to communicate with the master_kdc that
cannot be reached.
ticket: 4802
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18849
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 19:42:48 +0000 (19:42 +0000)]
pull up r18828 from trunk
r18828@cathode-dark-space: jaltman | 2006-11-17 12:23:24 -0500
ticket: new
subject: commits for KFW 3.1 Beta 4
tags: pullup
KfW 3.1 beta 4 (NetIDMgr 1.1.6.0)
nidmgr32.dll (1.1.6.0)
- Fix a race condition where the initialization process might be
flagged as complete even if the identity provider hasn't finished
initialization yet.
krb5cred.dll (1.1.6.0)
- When assigning the default credentials cache for each identity,
favor API and FILE caches over MSLSA if they exist.
- When renewing an identity which was the result of importing
credentials from the MSLSA cache, attempt to re-import the
credentials from MSLSA instead of renewing the imported credentials.
- Prevent possible crash if a Kerberos 5 context could not be obtained
during the renewal operation.
- Prevent memory leak in the credentials destroy handler due to the
failure to free a Kerberos 5 context.
- Properly match principals and realms when importing credentials from
the MSLSA cache.
- Determine the correct credentials cache to place imported
credentials in by checking the configuration for preferred cache
name.
- Keep track of identities where credentials imports have occurred.
- When setting the default identity, ignore the KRB5CCNAME environment
variable.
- Do not re-compute the credentials cache and timestamps when updating
an identity. The cache and timestamp information is computed when
listing credentials and do not change between listing and identity
update.
- When refreshing the default identity, also handle the case where the
default credentials cache does not contain a principal, but the name
of the cache can be used to infer the principal name.
- Invoke a listing of credentials after a successful import.
- Do not free a Kerberos 5 context prematurely during plug-in
initialization.
netidmgr.exe (1.1.6.0)
- Fix the UI context logic to handle layouts which aren't based around
identities.
- Don't try to show a property sheet when there are no property pages
supplied for the corresponding UI context.
- Use consistent context menus.
- Bring a modal dialog box to the foreground when it should be active.
- Do not accept action triggers when the application is not ready to
process actions yet.
- Do not force the new credentials dialog to the top if there's
already a modal dialog box showing.
- Change the default per-identity layout to also group by location.
ticket: 4798
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18835
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:50 +0000 (21:18 +0000)]
pull up r18816 from trunk
r18816@cathode-dark-space: raeburn | 2006-11-15 20:19:01 -0500
ticket: new
subject: include realm in "can't resolve KDC" error message
target_version: 1.6
tags: pullup
* locate_kdc.c (krb5int_locate_server): Store an error message for
REALM_CANT_RESOLVE error that lists the realm.
ticket: 4775
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18826
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:45 +0000 (21:18 +0000)]
pull up r18815 from trunk
r18815@cathode-dark-space: raeburn | 2006-11-15 20:14:14 -0500
ticket: new
subject: avoid double frees in ccache manipulation around gen_new
target_version: 1.6
tags: pullup
* krb5/krb/vfy_increds.c (krb5_verify_init_creds): If krb5_cc_gen_new fails,
don't both close and destroy the template ccache.
* gssapi/krb5/accept_sec_context.c (rd_and_store_for_creds): Likewise.
ticket: 4774
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18825
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:40 +0000 (21:18 +0000)]
pull up r18813 from trunk
r18813@cathode-dark-space: raeburn | 2006-11-15 19:51:21 -0500
ticket: new
subject: fix some warnings in ldap code
target_version: 1.6
tags: pullup
* libkdb_ldap/ldap_realm.c (ignore_duplicates, compare): Unused functions deleted.
(krb5_ldap_modify_realm, krb5_ldap_read_realm_params): Conditionalize declarations of
automatic variables that are only used for eDirectory.
* libkdb_ldap/ldap_service_stash.c (tohex): Use one sprintf call instead of two.
(dec_password): Use an unsigned type to fetch values with %x.
* libkdb_ldap/ldap_realm.h (ldap_filter_correct): Declare.
* libkdb_dlap/ldap_misc.c (my_strndup): Only define if HAVE_LDAP_STR2DN.
(populate_krb5_db_entry): Remove unused automatic variable.
* ldap_util/kdb5_ldap_util.c (cmd_table): Fix typo in preprocessing conditional.
* ldap_util/kdb5_ldap_realm.c (get_ticket_policy): Declarations first, then code.
* ldap_util/kdb5_ldap_services.c (kdb5_ldap_stash_service_password): On error, increment
exit_status; don't return a value.
* ldap_util/kdb5_ldap_services.h (kdb5_ldap_stash_service_password): Update decl.
ticket: 4772
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18824
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:34 +0000 (21:18 +0000)]
pull up r18812 from trunk
r18812@cathode-dark-space: raeburn | 2006-11-15 18:56:02 -0500
ticket: new
subject: LDAP patch from Novell, 2006-10-13
target_version: 1.6
tags: pullup
Patch from 13 November from Savitha R:
> Fix for delpol deleting ticket policies
> Removed references to old schema
> Moved some unused code under #ifdef HAVE_EDIRECTORY
ticket: 4771
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18823
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:27 +0000 (21:18 +0000)]
pull up r18811 from trunk
r18811@cathode-dark-space: lxs | 2006-11-15 17:05:48 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: Add macros for __attribute__((deprecated)) for krb4 and des APIs
Added KRB5INT_KRB4_DEPRECATED and KRB5INT_DES_DEPRECATED.
ticket: 4770
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18822
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 16 Nov 2006 20:52:44 +0000 (20:52 +0000)]
pullup from trunk to 1.6 branch
ticket: 4784
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18821
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:25:09 +0000 (03:25 +0000)]
krb5-1.6-alpha1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18810
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:22:52 +0000 (03:22 +0000)]
krb5-1.6-alpha1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18808
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:00:23 +0000 (03:00 +0000)]
pull up r18805 from trunk
r18805@cathode-dark-space: tlyu | 2006-11-14 18:23:34 -0500
ticket: new
target_version: 1.6
subject: update copyrights and acknowledgments
component: krb5-doc
tags: pullup
Update copyrights and acknowledgments for 1.6.
ticket: 4755
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18807
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:00:16 +0000 (03:00 +0000)]
pull up r18791 from trunk
r18791@cathode-dark-space: rra | 2006-11-09 17:56:39 -0500
ticket: 2240
Component: krb5-libs
Version_Reported: 1.3.2
Target_Version: 1.6
Tags: pullup
Install gssapi.h in includedir that includes gssapi/gssapi.h so that either
form of #include will work. Provides better compatibility with Heimdal.
ticket: 2240
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18806
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:21 +0000 (22:47 +0000)]
pull up r18801 from trunk
r18801@cathode-dark-space: coffman | 2006-11-13 17:59:55 -0500
ticket: new
subject: allow server preauth plugin verify_padata function to return e-data
Component: krb5-kdc
Target_Version: 1.6
Tags: pullup
Change server-side preauth plugin interface to allow the plugin's
verify_padata function to return e-data to be returned to the client.
(Patch from Nalin Dahyabhai <nalin@redhat.com>)
Update sample plugins to return e-data to exercise the code.
Fix memory leak in the wpse plugin.
ticket: 4738
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18804
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:15 +0000 (22:47 +0000)]
pull up r18800 from trunk
r18800@cathode-dark-space: coffman | 2006-11-13 17:51:23 -0500
ticket: new
subject: correct client preauth plugin request_context
Component: krb5-libs
Target_Version: 1.6
Tags: pullup
Correctly share the same request_context between all modules
within a single client preauth plugin.
ticket: 4737
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18803
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:08 +0000 (22:47 +0000)]
pull up r18799 from trunk
r18799@cathode-dark-space: wfiveash | 2006-11-13 15:25:08 -0500
ticket: new
subject: more Novell ldap patches from Nov 6 and Fix for wrong password policy reference count
Target_Version: krb5-1.6
Tags: pullup
This commit is to update the code with the following Novell patches from
Nov 6, 2006:
patch-ldap-kadm5-macro.diff
patch-ldap-fixes.diff
patch-ldap-key-seq-salt.diff
patch-ldap-misc.diff
And this patch from Nov 8:
patch-ldap-pwd-policy.c
ticket: 4735
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18802
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:27 +0000 (01:57 +0000)]
pull up r18792 from trunk
r18792@cathode-dark-space: rra | 2006-11-09 17:58:02 -0500
ticket: new
Componet: krb5-doc
Version_Reported: 1.4.4
Target_Version: 1.6
Tags: pullup
Document how to change the krbtgt key for a realm.
ticket: 4692
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18798
dc483132-0cff-0310-8789-
dd5450dbe970