Tom Yu [Wed, 22 Sep 2004 16:37:47 +0000 (16:37 +0000)]
* libgssrpc.exports: Export svc_maxfd
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16775
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 21 Sep 2004 23:16:10 +0000 (23:16 +0000)]
* shlib.conf (*-*-linux*, *-*-gnu*, *-*-k*bsd*-gnu): Don't use the linker
option --retain-symbols-file, it doesn't work for shared libraries.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16774
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 22:42:31 +0000 (22:42 +0000)]
Don't assume that presence of res_nsearch() means we have ns_initparse()
ticket: 2710
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16773
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 20:48:39 +0000 (20:48 +0000)]
memory leak in rd_cred.c
* rd_cred.c (decrypt_credencdata): Clear and free ppart to avoid
leak. Reported by Derrick Schommer.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16772
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 21 Sep 2004 20:39:19 +0000 (20:39 +0000)]
memory leak in arcfour string_to_key
Derrick Schommer reports that arcfour's string_to_key function leaks
memory. This is true; it copies the password to convert to utf16 and
never frees the copy. It does memset the copy to 0 when done.
ticket: new
requestors: schommer@gmail.com
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16771
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 18:20:16 +0000 (18:20 +0000)]
* configure.in: Check for sockaddr_in.sin_len and
sockaddr.sa_len. Check for sys/param.h in case we need NBBY
somewhere.
* auth.h, svc_auth.h: Namespace cleanup.
* svc.h, rpc_commondata.c: New global svc_maxfd.
* svc.c (svc_getreqset): Break inner part of loop out into
local function svc_do_xprt(). Don't use rpc_dtablesize();
instead, use svc_maxfd.
* svc_run.c: Don't use rpc_dtablesize().
* clnt_generic.c, clnt_simple.c, getrpcport.c:
* svc_tcp.c, svc_udp.c: Set sockaddr_in.sin_len when available.
* ovsec_kadmd.c (kadm_svc_run): Don't use rpc_dtablesize().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16770
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 18:06:56 +0000 (18:06 +0000)]
Add DNS resolver glue layer. Use it
ticket: 2710
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16769
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 21:52:12 +0000 (21:52 +0000)]
* libgssrpc.exports: Don't export internals
* svc.c (svc_getreqset):
* svc_tcp.c (readtcp): Don't intersperse preprocessor
conditionals with braces.
* auth_gssapi.c, auth_gssapi_misc.c, auth_none.c:
* auth_unix.c, authunix_prot.c, bindresvport.c:
* clnt_generic.c, clnt_perror.c, clnt_raw.c
* clnt_simple.c, clnt_tcp.c, clnt_udp.c, get_myaddress.c:
* getrpcent.c, getrpcport.c, pmap_clnt.c:
* pmap_getmaps.c, pmap_getport.c, pmap_prot.c, pmap_prot2.c:
* pmap_rmt.c, rpc_callmsg.c, rpc_prot.c:
* svc.c, svc_auth.c, svc_auth_gss.c:
* svc_auth_gssapi.c, svc_auth_unix.c, svc_raw.c:
* svc_run.c, svc_simple.c, svc_tcp.c:
* svc_udp.c, xdr.c, xdr_alloc.c, xdr_array.c:
* xdr_float.c, xdr_mem.c, xdr_rec.c, xdr_reference.c:
* xdr_stdio.c: Protoize, to avoid potential problems when
fixed-width types are not ints on some platforms.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16768
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 20:25:06 +0000 (20:25 +0000)]
Use a new variable, $(INSTALL_SCRIPT) to install scripts, so they
won't get stripped when someone does "make install-strip".
ticket: new
tags: pullup
target_version: 1.3.6
component: krb5-build
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16767
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 17:02:53 +0000 (17:02 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Look for res_search() prototype,
then for symbol in library, in case there's symbol renaming
happening in the headers. Clean up some style nits.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16766
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 14:53:54 +0000 (14:53 +0000)]
* kfw-fixed.nsi:
The version of MSIEXEC which ships with Windows 2000 does
not accept the /passive and /promptreboot command line
options. On Windows 2000 only, do not specify them.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16763
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 14:01:42 +0000 (14:01 +0000)]
Remove trailing slash from PATH
Minimize Leash32.exe on startup
Update msi-deployment guide to explain how to replace
the configuration files in greater detail
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16761
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 07:33:30 +0000 (07:33 +0000)]
Fix error code returned for empty sequences and check the error
in krb5_lcc_initialize
ticket: 2705
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16760
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Sep 2004 21:32:04 +0000 (21:32 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Only look for res_search() in
libraries, not headers, in case it's present but not prototyped.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16759
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Sep 2004 20:02:31 +0000 (20:02 +0000)]
* configure.in: Check for h_errno declaration in netdb.h
* port-sockets.h: Explicitly declare h_errno if it's missing.
ticket: 1044
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16758
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 15 Sep 2004 00:01:19 +0000 (00:01 +0000)]
* reconf: Export ACLOCAL=true to environment
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16757
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 22:25:07 +0000 (22:25 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Require the BIND_8_COMPAT check
prior to looking for prototypes, as BIND 9 (at least on Panther)
turns off some prototypes and typedefs if BIND_8_COMPAT is
defined.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16756
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 14 Sep 2004 21:57:45 +0000 (21:57 +0000)]
Enable default installation of documentation
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16754
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 01:24:20 +0000 (01:24 +0000)]
* dnssrv.c:
* hst_realm.c:
* locate_kdc.c: Include netinet/in.h as a prerequisite for
resolv.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16753
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 01:20:39 +0000 (01:20 +0000)]
* aclocal.m4: Fix check for resolv.h; some platforms have
prerequisite headers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16752
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 21:38:33 +0000 (21:38 +0000)]
* kfw-fixed.nsi:
Detect the Wix MSI, the SWRT MSI, and the Pismere MSI
If found, uninstall the MSI before installing NSIS
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16749
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 01:50:24 +0000 (01:50 +0000)]
Add msi-deployment-guide.txt
ticket: 2707
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16744
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 01:48:56 +0000 (01:48 +0000)]
Updates to WiX to satisfy the needs of MIT SWRT
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16743
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Sat, 11 Sep 2004 05:35:16 +0000 (05:35 +0000)]
utils.nsi: Fix RestartRequired function to actually determine
if a restart is required
kfw-fixed.nsi:
- Add support for compiler version 1400
- Fix terminal server key deletions
- Delete leash32.exe on uninstall
- Correct the logic of the call of RestartRequired
ticket: 2702
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16742
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 10 Sep 2004 23:01:11 +0000 (23:01 +0000)]
Support building on x86_64
Include resolv.h when looking for res_nsearch and res_search.
Ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16741
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 10 Sep 2004 22:37:07 +0000 (22:37 +0000)]
* port-sockets.h: Remove _XOPEN_SOURCE_EXTENDED hack for netdb.h,
as it can cause inconsistencies between headers. It significantly
broke HP-UX 10.20 anyway.
ticket: 2379
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16740
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 10 Sep 2004 19:33:39 +0000 (19:33 +0000)]
* cc_mslsa.c: Implement krb5_lcc_initialize()
Remove all tickets from the cache which have a client
principal that matches the input principal.
ticket: 2705
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16737
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 10 Sep 2004 17:34:31 +0000 (17:34 +0000)]
cc_mslsa.c: Correct test for KerbQueryTicketCacheEx2Message
ticket: 2705
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16736
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 10 Sep 2004 16:52:59 +0000 (16:52 +0000)]
2004-09-10 Jeffrey Altman <jaltman@mit.edu>
* cc_mslsa.c: The following functionality is being committed
but commented out because it is not presently
available in public Microsoft SDKs
- support for KerbSubmitTicket which allows a KERB_CRED
message to be forwarded to the LSA. (KERB_SUBMIT_TICKET)
- support for the KerbQueryTicketCacheEx2Message which
adds the Session Key Enctype to the contents of the
response from KerbQueryTicketCacheExMessage.
(HAVE_CACHE_INFO_EX2)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16735
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 9 Sep 2004 23:28:50 +0000 (23:28 +0000)]
krb5.hin: add new krb5_ccache flag, KRB5_TC_NOTICKET
when set, a krb5_ccache does not have to return a ticket
within the returned credential
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16734
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 9 Sep 2004 23:25:56 +0000 (23:25 +0000)]
ms2mit.c: Apply KRB5_TC_NOTICKET to MSLSA: while searching for the
presence of an initial ticket to copy to the MIT cache
ticket: 2688
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16733
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Sep 2004 20:23:02 +0000 (20:23 +0000)]
* login.c (main): Don't overwrite "PATH" environment variable if
it's already set.
ticket: 427
version_reported: 1.0.1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16731
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Sep 2004 19:31:49 +0000 (19:31 +0000)]
* Makefile.in (install-unix): Install krb524d manpage
ticket: 2539
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16730
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Sep 2004 19:30:59 +0000 (19:30 +0000)]
* Makefile.in: Install krb5-config manpage
ticket: 2694
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16729
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 8 Sep 2004 15:58:45 +0000 (15:58 +0000)]
Added man pages for krb524d and krb5-config
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16728
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 8 Sep 2004 15:56:31 +0000 (15:56 +0000)]
Added a man page for krb5-config
ticket: 2694
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16727
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 8 Sep 2004 15:53:25 +0000 (15:53 +0000)]
Added man page for krb524d
ticket: 2539
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16726
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 7 Sep 2004 23:28:18 +0000 (23:28 +0000)]
comment
ticket: 696
version_fixed: 1.4
* install.texinfo (Propagate the Database to Each Slave KDC):
Remove spurious "-R" flag from kdb5_util invocation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16725
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 7 Sep 2004 18:03:23 +0000 (18:03 +0000)]
Include all subdirectories of KFW_INSTALL_DIR in the SDK
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16723
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 3 Sep 2004 17:17:58 +0000 (17:17 +0000)]
update for krb5-1.3.5-beta1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16719
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 3 Sep 2004 01:19:44 +0000 (01:19 +0000)]
improve documentation of ANSI C requirement
* build.texinfo: Fix some typos.
(Build Requirements): Note ANSI C (c89) requirement.
(Alpha OSF/1 V4.0): Document "-std0" vs "-std" cc behavior.
ticket: new
target_version: 1.3.5
component: krb5-doc
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16717
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 2 Sep 2004 02:31:52 +0000 (02:31 +0000)]
* cc_mslsa.c:
- Fix MITPrincToMSPrinc to prevent writing to the output
buffer if the input won't fit.
- Add internal UnicodeStringToMITPrinc function
- Rename internal MSPrincToMITPrinc to ExternalNameToMITPrinc
- Rename internal PurgeMSTGT to PurgeAllTickets
- Add internal PurgeTicket2000
- Add internal PurgeTicketXP
- Since tickets can only be requested via KDC Opt Flags it is
not possible to specifically request the Initial ticket. If
more than one ticket exists which matching service names,
enctypes, and ticket flags the initial ticket flag may not be
set. If the caller requested the initial ticket, set the flag
manually.
- Add preliminary support for krb5_lcc_set_flags
- Modify krb5_lcc_initialize to return success
- Modify krb5_lcc_get_principal to support an LSA cache
which does not contain a TGT when krb5_lcc_resolve is
called.
- Implement krb5_lcc_remove_cred
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16714
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 2 Sep 2004 00:42:50 +0000 (00:42 +0000)]
* ms2mit.c: add -c ccache command line option
* mit2ms.c: new command. Copies contents of the mit ccache
to the MSLSA: ccache
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16713
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 31 Aug 2004 22:06:26 +0000 (22:06 +0000)]
* kvno.M: Update usage
* kvno.c (xusage): Update usage message.
ticket: 2677
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16709
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 31 Aug 2004 19:02:06 +0000 (19:02 +0000)]
oops, forgot changelog
ticket: 2686
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16703
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 31 Aug 2004 18:55:18 +0000 (18:55 +0000)]
fix MITKRB5-SA-2004-003
Fix for ASN.1 decoder denial-of-service. [MITKRB5-SA-2004-003]
ticket: new
target_version: 1.3.5
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16702
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 31 Aug 2004 18:52:26 +0000 (18:52 +0000)]
fix MITKRB5-SA-2004-002
Fix double-free vulnerabilities [MITKRB5-SA-2004-002].
ticket: new
target_version: 1.3.5
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16701
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 30 Aug 2004 22:22:59 +0000 (22:22 +0000)]
added private apple pkinit sources
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16699
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 28 Aug 2004 16:35:58 +0000 (16:35 +0000)]
* prof_file.c (profile_open_file): If an error occurs while updating from the
input file, destroy the mutex only if we're not sharing file data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16698
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 28 Aug 2004 02:05:39 +0000 (02:05 +0000)]
* prof_parse.c (parse_std_line): Rewrite handling of whitespace in and after
tag, to strip trailing whitespace (per current locale, not just ASCII space
characters), and prohibit any internal space characters in tag names.
(This is not the patch supplied in the bug report; that patch changed the tag
handling to allow spaces in tag names, which we haven't previously allowed. On
the other hand, we haven't specifically disallowed internal tabs or other
whitespace, either, and this patch does so.)
ticket: 2614
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16697
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 28 Aug 2004 01:23:19 +0000 (01:23 +0000)]
* init_sec_context.c (make_ap_req_v1): Free checksum data
allocated by make_gss_checksum() to avoid leak.
* k5sealv3.c (gss_krb5int_unseal_token_v3): Free plain.data after
checksum is verified, to avoid leak.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16696
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 28 Aug 2004 00:25:24 +0000 (00:25 +0000)]
move last patch down a little so it applies to tcp sockets as well as udp
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16695
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 28 Aug 2004 00:00:53 +0000 (00:00 +0000)]
* sendto_kdc.c (start_connection) [DEBUG]: Log the local socket address
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16694
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 27 Aug 2004 23:01:56 +0000 (23:01 +0000)]
Finally applied patch from Nalin Dahyabhai at Red Hat to fix 0/NULL bugs in
variadic argument lists to krb5_build_principal{,_ext}. Skipped the stylistic
patches that removed casts of NULL.
tag: 1850
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16693
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 27 Aug 2004 20:23:30 +0000 (20:23 +0000)]
* profile_tcl.c: New file, generated from profile.swg, but checked in to avoid
requiring swig in order to generate the test program.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16692
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 27 Aug 2004 20:22:37 +0000 (20:22 +0000)]
* profile.swg: New file.
* configure.in: Look for Tcl.
* Makefile.in (profile_tcl, profile_tcl.c, profile_tcl.o): New targets, not
built by default.
(PROG_LIBPATH, PROG_RPATH, LOCALINCLUDES): Add Tcl options.
(DEFINES): Define.
(clean-unix): Delete profile_tcl.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16691
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 27 Aug 2004 19:45:46 +0000 (19:45 +0000)]
* run.test (getnwords): Run data through "cat -v", because at least one version
of Debian Linux has an English dictionary with Latin-1 characters and a "rev"
that seems to default to some sort of Unicode.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16690
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 27 Aug 2004 19:41:53 +0000 (19:41 +0000)]
* prof_int.h (struct _prf_data_t): Add a mutex.
* prof_file.c (profile_open_file): Initialize data mutex.
(profile_update_file_data, profile_flush_file_data): Lock it while manipulating
file data.
(profile_lock_global, profile_unlock_global): New functions.
* prof_set.c (rw_setup): Acquire global lock while checking flags and adjusting
ref count.
(profile_update_relation, profile_rename_section, profile_add_relation): Lock
data mutex while manipulating profile data.
* prof_tree.c (profile_node_iterator): Do more magic number tests.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16689
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 27 Aug 2004 19:12:13 +0000 (19:12 +0000)]
Patch from Garry Zacheiss to use krb5_get_init_creds_password in ftpd
not krb5_get_in_tkt_password in order to avoid the prompter being
called.
Ticket: 2682
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16688
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Aug 2004 23:34:26 +0000 (23:34 +0000)]
* acquire_cred.c (krb5_gss_acquire_cred): Call gssint_initialize_library.
Return correct error code on mutex initialization failure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16687
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 26 Aug 2004 23:13:46 +0000 (23:13 +0000)]
* configure.in: Look for uint32_t, not int32_t, since some BSD-ish
sys/types.h headers have int32_t and u_int32_t, but only have
uint32_t in stdint.h.
* types.hin: Change int32_t checks to uint32_t checks.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16686
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 24 Aug 2004 15:49:51 +0000 (15:49 +0000)]
* configure.in: Don't test for pthread_rwlock_init
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16685
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 24 Aug 2004 15:49:01 +0000 (15:49 +0000)]
* aclocal.m4 (KRB5_AC_PRAGMA_WEAK_REF): Fix to work with AIX compiler when optimizing
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16684
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 23 Aug 2004 20:41:35 +0000 (20:41 +0000)]
* addrinfo-test.c: New file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16683
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 23 Aug 2004 20:31:31 +0000 (20:31 +0000)]
* fake-addrinfo.h (fai_add_hosts_by_name): Handle case where returned ai_canonname is null
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16682
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Sat, 21 Aug 2004 17:28:14 +0000 (17:28 +0000)]
New commands: kcpytkt and kdeltkt
kcpytkt: copies one or more tickets between credential caches
kdeltkt: deletes one or mote tickets from a credential cache
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16681
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Sat, 21 Aug 2004 17:25:29 +0000 (17:25 +0000)]
kvno: add -c ccache command line parameter
call krb5_free_unparsed_name() instead of free() to prevent
crashes on Windows.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16680
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 21 Aug 2004 16:59:47 +0000 (16:59 +0000)]
* libkadm5srv.exports: Update for previous renaming
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16679
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 21 Aug 2004 02:31:10 +0000 (02:31 +0000)]
Fix no-auth test to use a config mask flag to ask for no-auth, to
avoid the icky repeated build of client_init.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16678
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 21 Aug 2004 02:16:53 +0000 (02:16 +0000)]
whitespace
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16677
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 20 Aug 2004 23:46:39 +0000 (23:46 +0000)]
ChangeLogs for WiX MSI installer
ticket: 2675
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16676
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 20 Aug 2004 23:42:59 +0000 (23:42 +0000)]
New WiX based MSI installer for KFW
Requires WiX 2.0.1927.1 patched by Asanka.
http://prdownloads.sourceforge.net/wix/sources-2.0.1927.1.zip
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16675
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Fri, 20 Aug 2004 18:45:30 +0000 (18:45 +0000)]
renamed acl_* functions to kadm5int_acl_*
ticket: 2674
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16673
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Fri, 20 Aug 2004 18:38:00 +0000 (18:38 +0000)]
Added kadmin code to project to make searches easier
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16672
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 19 Aug 2004 20:04:49 +0000 (20:04 +0000)]
* shlib.conf: Add support for gnu hurd and for BSD kernels with
glibc; use the Linux shared library procedure
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16671
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 19 Aug 2004 00:56:53 +0000 (00:56 +0000)]
* aclocal.m4 (KRB5_AC_ENABLE_THREADS): Check for pthread_rwlock_init, with and
without the thread library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16670
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 17 Aug 2004 23:57:16 +0000 (23:57 +0000)]
* svc.c (svc_getreqset): Allocate cred and verf memory to
temporary pointers, and free the temporary pointers on exit.
Freeing the actual cred and verf pointers can cause corruption
because auth mechanisms can reassign the pointers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16669
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 17 Aug 2004 01:14:58 +0000 (01:14 +0000)]
* svc_auth_gss.c (gssrpc__svcauth_gss): Add some debug messages
* svc.c (svc_getreqset): Don't allocate either raw or cooked
credentials on the stack using the cred_area char array; use
mem_alloc() instead. This avoids alignment problems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16668
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 16 Aug 2004 01:27:41 +0000 (01:27 +0000)]
* cc_file.c (struct _krb5_fcc_data): Add new mutex disk_file_lock and flag
file_is_locked.
(krb5_fcc_close_file): Unlock the mutex and clear the flag.
(krb5_fcc_open_file): Acquire the mutex before locking the file, and set the
flag after.
(krb5_fcc_resolve): Initialize the new mutex and flag.
(krb5_fcc_generate_new): Initialize both mutexes and the flag.
(dereference): Destroy the new mutex.
Also, get rid of some unused variables.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16667
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Aug 2004 23:56:00 +0000 (23:56 +0000)]
* cc_file.c: Add buffering on reading.
(FCC_BUFSIZ): New macro.
(struct _krb5_fcc_data): Add new fields buf, valid_bytes, cur_offset.
(krb5_fcc_resolve, krb5_fcc_generate_new): Initialize valid_bytes.
(invalidate_cache): New function.
(krb5_fcc_write, krb5_fcc_open_file, krb5_fcc_destroy): Call invalidate_cache.
(fcc_lseek): New function.
(krb5_fcc_skip_header, krb5_fcc_destroy, krb5_fcc_start_seq_get,
krb5_fcc_next_cred, krb5_fcc_store): Use fcc_lseek instead of lseek.
(fcc_read): Use and maybe refill the buffer.
(dereference): Zap the contents of the buffer before freeing it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16666
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Aug 2004 23:18:24 +0000 (23:18 +0000)]
* run.test (getnwords): Rewrite to drop blank lines before counting lines, not after
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16665
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Aug 2004 23:10:35 +0000 (23:10 +0000)]
* cc_file.c (dereference): Lock mutex around call to krb5_fcc_close_file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16664
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Aug 2004 03:37:24 +0000 (03:37 +0000)]
Fix Tru64 build:
* k5-thread.h (k5_os_nothread_mutex_assert_locked,
k5_os_nothread_mutex_assert_unlocked, k5_os_mutex_assert_locked,
k5_os_mutex_assert_unlocked): Assertion macros should always have type void.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16663
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 13 Aug 2004 04:02:35 +0000 (04:02 +0000)]
Only open a credential cache file once, even if multiple krb5_ccache objects
refer to it. (This does NOT yet take care of the problem of multiple threads
wanting to use OS-level advisory locks, which at least on UNIX are per-process
and not per-thread.)
* cc_file.c (krb5_fcc_close_file): Change first argument to be an fcc-data
pointer, not a krb5_ccache. All calls changed.
(struct fcc_set): Add a refcount member. (Definition accidentally introduced
without comment in an earlier patch.)
(krb5int_cc_file_mutex, fccs): New variables, for managing a global list of
open credential cache files.
(dereference): New function, with most of old close/destroy operations.
Decrements reference count and only frees the object and removes it from the
global list if the refcount hits zero.
(krb5_fcc_close, krb5_fcc_destroy): Call dereference.
(krb5_fcc_resolve): If a file cache is already open with the same file name,
increment its reference count and don't create a new one. When a new one is
created, add it to the global list.
* cc-int.h (krb5int_cc_file_mutex): Declare.
* ccbase.c (krb5int_cc_initialize): Initialize it.
(krb5int_cc_finalize): Destroy it, and krb5int_mcc_mutex.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16662
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 13 Aug 2004 02:41:34 +0000 (02:41 +0000)]
* k5-thread.h (k5_os_nothread_mutex_finish_init, k5_os_nothread_mutex_init,
k5_os_nothread_mutex_destroy, k5_os_nothread_mutex_lock,
k5_os_nothread_mutex_unlock) [!DEBUG_THREADS]: Replace macros with inline
functions, to gain type checking and eliminate gratuitous compiler warnings.
(k5_pthread_assert_unlocked, k5_pthread_assert_locked): Likewise.
(k5_os_mutex_finish_init) [HAVE_PTHREAD && !USE_PTHREAD_LOCK_ONLY_IF_LOADED]:
Likewise.
(return_after_yield): New inline function.
(k5_os_mutex_lock) [HAVE_PTHREAD]: Change back to a macro, calling
return_after_yield.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16661
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 12 Aug 2004 23:00:20 +0000 (23:00 +0000)]
* run.test (getnwords): New function. Uses sed to get N words from $DICT as
other functions did before, but discards blank lines.
(test1, test2, test12, test13, test20): Call getnwords.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16660
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 12 Aug 2004 19:10:54 +0000 (19:10 +0000)]
get_in_tkt.c (get_init_creds): Support ticket_lifetime libdefault. Made aware of 32 bit min and max for times. Allow renew_until time < expiration time
ticket: 2654
ticket: 2655
ticket: 2656
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16656
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 12 Aug 2004 18:57:38 +0000 (18:57 +0000)]
ccdefname.c (krb5_cc_set_default_name, krb5_cc_default_name): Look up the default ccache name in krb5_cc_default_name, not krb5_cc_set_default_name so that krb5_init_context doesn't have to do work it might never use
ticket: 2657
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16655
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 10 Aug 2004 00:47:14 +0000 (00:47 +0000)]
* configure.in: Solaris getpwnam_r returns struct passwd*, not
struct pwd*.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16654
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 9 Aug 2004 00:20:05 +0000 (00:20 +0000)]
* ftpd.c (main): Use socklen_t for the size of the address from accept
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16653
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 9 Aug 2004 00:18:22 +0000 (00:18 +0000)]
* krb524d.c (do_connection): Use socklen_t for the size of the address from recvfrom
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16652
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 22:53:20 +0000 (22:53 +0000)]
* aclocal.m4 (WITH_CC): Log messages when adding AIX compiler options
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16651
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 22:38:07 +0000 (22:38 +0000)]
* libkrb5.exports: Remove memory ccache symbols except ops table
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16650
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 22:35:02 +0000 (22:35 +0000)]
* aclocal.m4 (KRB5_AC_ENABLE_THREADS): Clear PTHREAD_CFLAGS and PTHREAD_LIBS
after adding them to CFLAGS and LIBS respectively, to avoid duplicating the
options later.
(WITH_CC): Add -O on AIX also. Don't add options if similar options are
already present.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16649
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 21:22:41 +0000 (21:22 +0000)]
* threads.c (GET_NO_PTHREAD_TSD) [!HAVE_PRAGMA_WEAK_REF]: Macro result type
should be pointer to tsd_block.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16648
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 21:10:46 +0000 (21:10 +0000)]
* configure.in: If getpwnam_r is available, determine its return type
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16647
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 8 Aug 2004 21:09:38 +0000 (21:09 +0000)]
* aclocal.m4 (KRB5_AC_ENABLE_THREADS): On AIX and OSF/1, always add
$PTHREAD_CFLAGS to CFLAGS for use in later tests.
(WITH_CC): If on AIX and not using gcc, add -qhalt=e to CFLAGS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16646
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 7 Aug 2004 15:52:52 +0000 (15:52 +0000)]
* configure.in: Look for sched.h and sched_yield.
* k5-thread.h: Only include sched.h if it's available.
(MAYBE_SCHED_YIELD): Only use sched_yield if sched.h and sched_yield are
available; if weak references are supported and sched_yield isn't available by
default, check for it at run time.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16645
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Fri, 6 Aug 2004 20:41:13 +0000 (20:41 +0000)]
updated for new files
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16644
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 5 Aug 2004 20:26:42 +0000 (20:26 +0000)]
* cc_file.c: Remove USE_STDIO support
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16643
dc483132-0cff-0310-8789-
dd5450dbe970