Tom Yu [Wed, 13 Dec 2006 22:03:04 +0000 (22:03 +0000)]
pull up r18918 from trunk
r18918@cathode-dark-space: wfiveash | 2006-12-04 16:47:50 -0500
ticket: new
subject: fix for kdb5_util load bug with dumps from a LDAP KDB
Target_Version: krb5-1.6
Tags: pullup
I found a bug when I did a "kdb5_util load -update ldap-dump" where
ldap-dump was a dump done from a LDAP based KDB. The issue is that this
sort of dump contains principal_dn data which is not the case for a db2
KDB dump.
ticket: 4991
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18950
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:53 +0000 (23:37 +0000)]
pull up r18932 from trunk
r18932@cathode-dark-space: jaltman | 2006-12-07 19:28:59 -0500
ticket: new
subject: build the trunk on Windows (again)
This revision corrects a number of missing or extraneous
KRB5_CALLCONV symbols; exposes symbols for _WIN32;
and avoids including headers that don't exist
ticket: 5022
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18945
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:48 +0000 (23:37 +0000)]
pull up r18935 from trunk
r18935@cathode-dark-space: coffman | 2006-12-08 16:02:02 -0500
ticket: new
subject: Don't leak padata when looping for krb5_do_preauth_tryagain()
component: krb5-libs
Target_Version: 1.6
Tags: pullup
* src/lib/krb5/krb/get_in_tkt.c: krb5_get_init_creds()
Free any existing request.padata at the top of the loop
calling krb5_do_preauth() and krb5_do_preauth_tryagain().
ticket: 5032
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18944
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 12 Dec 2006 23:37:36 +0000 (23:37 +0000)]
pull up r18915 from trunk
r18915@cathode-dark-space: epeisach | 2006-12-03 08:53:32 -0500
ticket: new
Subject: Make clean in lib/krb5/os does not clean test objs
tags: pullup
make clean failed to remove t_locate_kdc.o
ticket: 4981
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18943
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 6 Dec 2006 22:57:06 +0000 (22:57 +0000)]
pull up r18923 from trunk
r18923@cathode-dark-space: lxs | 2006-12-05 18:21:56 -0500
ticket: new
owner: tlyu
target_version: 1.6
subject: krb5_cc_remove should work for the CCAPI
tags: pullup
Implemented a working krb5_cc_remove for the CCAPI cache type. Added a
private support function krb5_creds_compare() which checks if two krb5_creds
are identical. This function should be needed by implementations of
krb5_cc_remove for other ccache types.
ticket: 5003
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18928
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:16:08 +0000 (00:16 +0000)]
krb5-1.6-beta1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18913
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:13:14 +0000 (00:13 +0000)]
re-do patchlevel.h for krb5-1.6-beta1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18911
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:10:25 +0000 (00:10 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18909
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 2 Dec 2006 00:10:21 +0000 (00:10 +0000)]
krb5-1.6-beta1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18908
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:40:17 +0000 (23:40 +0000)]
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18906
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:38:47 +0000 (23:38 +0000)]
pullup r18904 from trunk
r18904@cathode-dark-space: tlyu | 2006-12-01 18:36:41 -0500
update for krb5-1.6-beta1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18905
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:23:19 +0000 (23:23 +0000)]
pull up r18896 from trunk
r18896@cathode-dark-space: coffman | 2006-12-01 14:36:38 -0500
subject: send a new request with the new padata returned by krb5_do_preauth_tryagain()
ticket: new
Component: krb5-libs
Target_Version: 1.6
Tags: pullup
Send another request containing the padata obtained from tryagain.
* src/include/k5-int.h
Update prototype
* src/lib/krb5/krb/get_in_tkt.c
Send pointer to the request.padata so krb5_do_preauth_tryagain()
can update the request to be sent.
* src/lib/krb5/krb/preauth2.c
If a module returns modified padata, add it to the return_padata
and return.
ticket: 4973
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18903
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 23:23:14 +0000 (23:23 +0000)]
pull up r18895 from trunk
r18895@cathode-dark-space: coffman | 2006-12-01 14:18:26 -0500
subject: Return edata from non-"PA_REQUIRED" preauth types
ticket: new
Target_Version: 1.6
tags: pullup
Component: krb5-kdc
* src/kdc/kdc_preauth.c (check_padata)
Return e-data from any failing preauth module.
Save the e-data and return value from the first failing module.
If a subsequent module marked as PA_REQUIRED fails, return
its e-data and error instead.
* src/kdc/kdc_preauth.c (load_preauth_plugins)
Quiet compiler warning by setting pointer to NULL.
ticket: 4972
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18902
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:32 +0000 (21:27 +0000)]
pull up r18894 from trunk
r18894@cathode-dark-space: tlyu | 2006-12-01 13:41:49 -0500
ticket: 4689
tags: pullup
bump minor versions due to API additions
ticket: 4689
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18901
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:28 +0000 (21:27 +0000)]
pull up r18892 from trunk
r18892@cathode-dark-space: tlyu | 2006-12-01 11:40:46 -0500
ticket: 4941
tags: pullup
* src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send):
Conditionalize debugging printfs.
ticket: 4941
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18900
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:23 +0000 (21:27 +0000)]
pull up r18897 from trunk
r18897@cathode-dark-space: tlyu | 2006-12-01 15:57:04 -0500
ticket: 4788
tags: pullup
target_version: 1.6
component: krb5-libs
* src/lib/krb5/ccache/cc_file.c: Adapted patch from Roland
Dowdeswell to avoid possible double-free conditions on certain
errors.
ticket: 4788
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18899
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 1 Dec 2006 21:27:17 +0000 (21:27 +0000)]
pull up r18877 from trunk
r18877@cathode-dark-space: jander | 2006-11-29 16:50:02 -0500
ticket: 4739
status: open
Implemented CCAPI v3 specific ccache collection cursor.
* src/lib/krb5/ccache/ccbase.c: Added CCAPI v3 entry to list of type cursors
* src/lib/krb5/ccache/ccapi/stdcc.h:
* src/lib/krb5/ccache/ccapi/stdcc.c: Implemented CCAPI v3 cursor functionality.
ticket: 4739
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18898
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:21:15 +0000 (23:21 +0000)]
pull up r18837 from trunk
r18837@cathode-dark-space: coffman | 2006-11-17 14:56:35 -0500
ticket: 4799
Target_Version: 1.6
Tags: pullup
Didn't include header changes in the previous commit.
ticket: 4799
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18891
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:21:11 +0000 (23:21 +0000)]
pull up r18836 from trunk
r18836@cathode-dark-space: coffman | 2006-11-17 14:48:17 -0500
subject: update krb5_c_keylength function, create krb5_c_random_to_key function
ticket: new
Target_Version: 1.6
Tags: pullup
Modify the keylength function to return both keybytes and keylength.
Change the name of the function and source file to reflect this.
Add a function, krb5_c_random_to_key() that takes random input data
of the right length (keybytes) and produce a valid key for a given
enctype.
ticket: 4799
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18890
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:00:51 +0000 (23:00 +0000)]
pull up r18887 from trunk
r18887@cathode-dark-space: tlyu | 2006-11-30 17:42:16 -0500
ticket: 4805
tags: pullup
component: krb5-libs
* src/lib/krb5/krb/vfy_increds.c (krb5_verify_init_creds): Use
krb5_cc_new_unique().
* src/lib/gssapi/krb5/accept_sec_context.c:
(rd_and_store_for_creds): Use krb5_cc_new_unique().
ticket: 408
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18889
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 23:00:45 +0000 (23:00 +0000)]
pull up r18857 from trunk
r18857@cathode-dark-space: tlyu | 2006-11-17 20:53:27 -0500
ticket: 3091
tags: pullup
* src/lib/krb5/ccache/ccbase.c (krb5int_cc_getops): Internal
function to fetch ops vector given ccache prefix string.
(krb5_cc_new_unique): New function to generate a new unique
ccache of a given type.
* src/include/krb5/krb5.hin: Prototype for krb5_cc_new_unique().
* src/lib/krb5/libkrb5.exports:
* src/lib/krb5_32.def: Add krb5_cc_new_unique().
ticket: 3091
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18888
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:42 +0000 (21:30 +0000)]
pull up r18873 from trunk
r18873@cathode-dark-space: coffman | 2006-11-28 19:17:52 -0500
ticket: new
subject: skip all modules in plugin if init function fails
Target_Version: 1.6
Tags: pullup
Component: krb5-kdc
If the plugin initialization function fails, skip all modules in
the plugin, not just the first. Also, print the error message from
the plugin if supplied.
ticket: 4942
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18886
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:38 +0000 (21:30 +0000)]
pull up r18859 from trunk
r18859@cathode-dark-space: coffman | 2006-11-21 19:53:34 -0500
subject: fix debug messages
ticket: new
Tags: pullup
Target_Version: 1.6
Change debugging messages so they print salt value correctly
and clean up warnings when compiling with DEBUG.
ticket: 4846
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18885
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:30:33 +0000 (21:30 +0000)]
pull up r18858 from trunk
r18858@cathode-dark-space: coffman | 2006-11-21 09:37:11 -0500
ticket: new
subject: free error message when freeing context
Target_Version: 1.6
Tags: pullup
Call krb5_clear_error_message() to free any allocated error message
before freeing the context.
The condition that triggered this was a plugin library which fails to
load because of unresolved references. It appears dlopen() on Linux
leaks four bytes for each failing library in this situation.
ticket: 4841
version_fixed: 1.6
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18884
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:24:07 +0000 (21:24 +0000)]
pull up r18865 from trunk
r18865@cathode-dark-space: tlyu | 2006-11-27 23:57:55 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: krb5int_copy_data_contents shouldn't free memory it didn't allocate
component: krb5-libs
* src/lib/krb5/krb/copy_data.c (krb5int_copy_data_contents): Don't
free outdata on malloc failure; we didn't allocate outdata.
ticket: 4928
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18883
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:24:02 +0000 (21:24 +0000)]
pull up r18862 from trunk
r18862@cathode-dark-space: hartmans | 2006-11-22 12:43:41 -0500
ticket: new
Subject: library fragments to front of line
target_version: 1.6
tags: pullup
* src/plugins/kdb/ldap/libkdb_ldap/Makefile.in: Fix fragments substitutions so the makefile works with autoconf 2.60
ticket: 4860
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18882
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:14:43 +0000 (21:14 +0000)]
pull up r18879 from trunk
r18879@cathode-dark-space: tlyu | 2006-11-30 15:50:02 -0500
ticket: 3322
target_version: 1.6
tags: pullup
* src/lib/krb5/krb/gc_via_tkt.c (check_reply_server): New function
to check server principal in reply. Ensures that the reply is
self-consistent, allows rewrites if canonicalization is requested,
and allows limited rewrites of TGS principals if canonicalization
is not requested.
(krb5_get_cred_via_tkt): Move server principal checks into
check_reply_server().
ticket: 3322
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18881
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 30 Nov 2006 21:10:23 +0000 (21:10 +0000)]
pull up r18878 from trunk
r18878@cathode-dark-space: tlyu | 2006-11-30 15:46:32 -0500
ticket: 4955
tags: pullup
* src/lib/krb5/krb/gc_frm_kdc.c: Also do style cleanup.
(krb5_get_cred_from_kdc_opt): If server principal was rewritten,
fall back unless it was rewritten to a TGS principal. This fixes
a bug when a MS AD rewrites the service principal into a
single-component NETBIOS-style name. If we get a referral back to
the immediately preceding realm, fall back to non-referral
handling. This fixes the changepw failure. To prevent memory
leaks, when falling back to non-referral handling, free any tgts
previously obtained by the initial non-referral do_traversal()
call.
ticket: 4955
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18880
dc483132-0cff-0310-8789-
dd5450dbe970
Justin Anderson [Wed, 29 Nov 2006 21:47:50 +0000 (21:47 +0000)]
Accidental commit to 1.6 instead of trunk. Reverting
ticket: 4739
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18876
dc483132-0cff-0310-8789-
dd5450dbe970
Justin Anderson [Wed, 29 Nov 2006 19:15:08 +0000 (19:15 +0000)]
Implemented CCAPI v3 specific ccache collection cursor
* src/lib/krb5/ccache/ccbase.c: Added CCAPI v3 entry to list of type cursors
* src/lib/krb5/ccache/ccapi/stdcc.c: Implemented CCAPI v3 cursor functionality.
ticket: 4739
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18875
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 28 Nov 2006 23:05:25 +0000 (23:05 +0000)]
pull up r18864 from trunk
r18864@cathode-dark-space: jaltman | 2006-11-27 13:59:21 -0500
ticket: new
subject: documentation updates for KFW 3.1
tags: pullup
Documentation updates including new screen shots for KFW 3.1
ticket: 4921
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18870
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 28 Nov 2006 23:05:18 +0000 (23:05 +0000)]
pull up r18863 from trunk
r18863@cathode-dark-space: jaltman | 2006-11-22 13:11:16 -0500
ticket: new
subject: KFW 3.1 commits for Final Release
tags: pullup
KfW 3.1 final (NetIDMgr 1.1.8.0)
nidmgr32.dll (1.1.8.0)
- When detecting IP address changes, wait for things to settle down
before setting of the IP address change notification.
krb5cred.dll (1.1.8.0)
- Fixed the Kerberos 5 configuration dialog which didn't handle
setting the default realm properly. Setting the default realm now
sets the correct string in krb5.ini.
- Changing the default realm now marks the relevant configuration node
as dirty, and enabled the 'Apply' button.
- Changing the 'renewable', 'forwardable' and 'addressless' checkboxes
in the identity configuration panels now mark the relevant
configuration nodes as dirty, and enables the 'Apply' button.
- The location of the Kerberos 5 configuration file is now read-only
in the Kerberos 5 configuration dialog.
- Set the maximum number of characters for the edit controls in the
configuration dialog.
krb4cred.dll (1.1.8.0)
- The location of the Kerberos 4 configuration files are now read-only
in the Kerberos 4 configuration dialog.
- Handles setting the ticket string.
- Changing the ticket string now marks the relevant configuration node
as dirty, and enables the 'Apply' button.
- Fixed the plug-in initialization code to perform the initial ticket
listing at the end of the initializaton process.
ticket: 4861
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18869
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:22 +0000 (23:49 +0000)]
pull up r18841 from trunk
r18841@cathode-dark-space: jaltman | 2006-11-17 18:24:59 -0500
ticket: new
subject: one more commit for kfw 3.1 beta 4
tags: pullup
- when the krb5 prompter callback function is called,
set the focus to the first input field provided by
the caller.
ticker: 4803
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18851
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:18 +0000 (23:49 +0000)]
pull up r18842 from trunk
r18842@cathode-dark-space: jaltman | 2006-11-17 18:41:40 -0500
ticket: 4802
krb5_get_init_creds_password:
remove unintentionally committed code not meant for 1.4 branch
ticket: 4802
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18850
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 23:49:14 +0000 (23:49 +0000)]
pull up r18840 from trunk
r18840@cathode-dark-space: jaltman | 2006-11-17 18:14:27 -0500
ticket: new
tags: pullup
subject: reset use_master flag when master_kdc cannot be found
krb5_get_init_creds_password:
if the master_kdc cannot be identified reset the use_master
flag. otherwise, the krb5_get_init_creds("kadmin/changepw")
call will attempt to communicate with the master_kdc that
cannot be reached.
ticket: 4802
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18849
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Nov 2006 19:42:48 +0000 (19:42 +0000)]
pull up r18828 from trunk
r18828@cathode-dark-space: jaltman | 2006-11-17 12:23:24 -0500
ticket: new
subject: commits for KFW 3.1 Beta 4
tags: pullup
KfW 3.1 beta 4 (NetIDMgr 1.1.6.0)
nidmgr32.dll (1.1.6.0)
- Fix a race condition where the initialization process might be
flagged as complete even if the identity provider hasn't finished
initialization yet.
krb5cred.dll (1.1.6.0)
- When assigning the default credentials cache for each identity,
favor API and FILE caches over MSLSA if they exist.
- When renewing an identity which was the result of importing
credentials from the MSLSA cache, attempt to re-import the
credentials from MSLSA instead of renewing the imported credentials.
- Prevent possible crash if a Kerberos 5 context could not be obtained
during the renewal operation.
- Prevent memory leak in the credentials destroy handler due to the
failure to free a Kerberos 5 context.
- Properly match principals and realms when importing credentials from
the MSLSA cache.
- Determine the correct credentials cache to place imported
credentials in by checking the configuration for preferred cache
name.
- Keep track of identities where credentials imports have occurred.
- When setting the default identity, ignore the KRB5CCNAME environment
variable.
- Do not re-compute the credentials cache and timestamps when updating
an identity. The cache and timestamp information is computed when
listing credentials and do not change between listing and identity
update.
- When refreshing the default identity, also handle the case where the
default credentials cache does not contain a principal, but the name
of the cache can be used to infer the principal name.
- Invoke a listing of credentials after a successful import.
- Do not free a Kerberos 5 context prematurely during plug-in
initialization.
netidmgr.exe (1.1.6.0)
- Fix the UI context logic to handle layouts which aren't based around
identities.
- Don't try to show a property sheet when there are no property pages
supplied for the corresponding UI context.
- Use consistent context menus.
- Bring a modal dialog box to the foreground when it should be active.
- Do not accept action triggers when the application is not ready to
process actions yet.
- Do not force the new credentials dialog to the top if there's
already a modal dialog box showing.
- Change the default per-identity layout to also group by location.
ticket: 4798
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18835
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:50 +0000 (21:18 +0000)]
pull up r18816 from trunk
r18816@cathode-dark-space: raeburn | 2006-11-15 20:19:01 -0500
ticket: new
subject: include realm in "can't resolve KDC" error message
target_version: 1.6
tags: pullup
* locate_kdc.c (krb5int_locate_server): Store an error message for
REALM_CANT_RESOLVE error that lists the realm.
ticket: 4775
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18826
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:45 +0000 (21:18 +0000)]
pull up r18815 from trunk
r18815@cathode-dark-space: raeburn | 2006-11-15 20:14:14 -0500
ticket: new
subject: avoid double frees in ccache manipulation around gen_new
target_version: 1.6
tags: pullup
* krb5/krb/vfy_increds.c (krb5_verify_init_creds): If krb5_cc_gen_new fails,
don't both close and destroy the template ccache.
* gssapi/krb5/accept_sec_context.c (rd_and_store_for_creds): Likewise.
ticket: 4774
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18825
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:40 +0000 (21:18 +0000)]
pull up r18813 from trunk
r18813@cathode-dark-space: raeburn | 2006-11-15 19:51:21 -0500
ticket: new
subject: fix some warnings in ldap code
target_version: 1.6
tags: pullup
* libkdb_ldap/ldap_realm.c (ignore_duplicates, compare): Unused functions deleted.
(krb5_ldap_modify_realm, krb5_ldap_read_realm_params): Conditionalize declarations of
automatic variables that are only used for eDirectory.
* libkdb_ldap/ldap_service_stash.c (tohex): Use one sprintf call instead of two.
(dec_password): Use an unsigned type to fetch values with %x.
* libkdb_ldap/ldap_realm.h (ldap_filter_correct): Declare.
* libkdb_dlap/ldap_misc.c (my_strndup): Only define if HAVE_LDAP_STR2DN.
(populate_krb5_db_entry): Remove unused automatic variable.
* ldap_util/kdb5_ldap_util.c (cmd_table): Fix typo in preprocessing conditional.
* ldap_util/kdb5_ldap_realm.c (get_ticket_policy): Declarations first, then code.
* ldap_util/kdb5_ldap_services.c (kdb5_ldap_stash_service_password): On error, increment
exit_status; don't return a value.
* ldap_util/kdb5_ldap_services.h (kdb5_ldap_stash_service_password): Update decl.
ticket: 4772
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18824
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:34 +0000 (21:18 +0000)]
pull up r18812 from trunk
r18812@cathode-dark-space: raeburn | 2006-11-15 18:56:02 -0500
ticket: new
subject: LDAP patch from Novell, 2006-10-13
target_version: 1.6
tags: pullup
Patch from 13 November from Savitha R:
> Fix for delpol deleting ticket policies
> Removed references to old schema
> Moved some unused code under #ifdef HAVE_EDIRECTORY
ticket: 4771
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18823
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 16 Nov 2006 21:18:27 +0000 (21:18 +0000)]
pull up r18811 from trunk
r18811@cathode-dark-space: lxs | 2006-11-15 17:05:48 -0500
ticket: new
target_version: 1.6
tags: pullup
subject: Add macros for __attribute__((deprecated)) for krb4 and des APIs
Added KRB5INT_KRB4_DEPRECATED and KRB5INT_DES_DEPRECATED.
ticket: 4770
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18822
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 16 Nov 2006 20:52:44 +0000 (20:52 +0000)]
pullup from trunk to 1.6 branch
ticket: 4784
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18821
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:25:09 +0000 (03:25 +0000)]
krb5-1.6-alpha1-postrelease
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18810
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:22:52 +0000 (03:22 +0000)]
krb5-1.6-alpha1
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18808
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:00:23 +0000 (03:00 +0000)]
pull up r18805 from trunk
r18805@cathode-dark-space: tlyu | 2006-11-14 18:23:34 -0500
ticket: new
target_version: 1.6
subject: update copyrights and acknowledgments
component: krb5-doc
tags: pullup
Update copyrights and acknowledgments for 1.6.
ticket: 4755
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18807
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Nov 2006 03:00:16 +0000 (03:00 +0000)]
pull up r18791 from trunk
r18791@cathode-dark-space: rra | 2006-11-09 17:56:39 -0500
ticket: 2240
Component: krb5-libs
Version_Reported: 1.3.2
Target_Version: 1.6
Tags: pullup
Install gssapi.h in includedir that includes gssapi/gssapi.h so that either
form of #include will work. Provides better compatibility with Heimdal.
ticket: 2240
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18806
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:21 +0000 (22:47 +0000)]
pull up r18801 from trunk
r18801@cathode-dark-space: coffman | 2006-11-13 17:59:55 -0500
ticket: new
subject: allow server preauth plugin verify_padata function to return e-data
Component: krb5-kdc
Target_Version: 1.6
Tags: pullup
Change server-side preauth plugin interface to allow the plugin's
verify_padata function to return e-data to be returned to the client.
(Patch from Nalin Dahyabhai <nalin@redhat.com>)
Update sample plugins to return e-data to exercise the code.
Fix memory leak in the wpse plugin.
ticket: 4738
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18804
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:15 +0000 (22:47 +0000)]
pull up r18800 from trunk
r18800@cathode-dark-space: coffman | 2006-11-13 17:51:23 -0500
ticket: new
subject: correct client preauth plugin request_context
Component: krb5-libs
Target_Version: 1.6
Tags: pullup
Correctly share the same request_context between all modules
within a single client preauth plugin.
ticket: 4737
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18803
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Nov 2006 22:47:08 +0000 (22:47 +0000)]
pull up r18799 from trunk
r18799@cathode-dark-space: wfiveash | 2006-11-13 15:25:08 -0500
ticket: new
subject: more Novell ldap patches from Nov 6 and Fix for wrong password policy reference count
Target_Version: krb5-1.6
Tags: pullup
This commit is to update the code with the following Novell patches from
Nov 6, 2006:
patch-ldap-kadm5-macro.diff
patch-ldap-fixes.diff
patch-ldap-key-seq-salt.diff
patch-ldap-misc.diff
And this patch from Nov 8:
patch-ldap-pwd-policy.c
ticket: 4735
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18802
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:27 +0000 (01:57 +0000)]
pull up r18792 from trunk
r18792@cathode-dark-space: rra | 2006-11-09 17:58:02 -0500
ticket: new
Componet: krb5-doc
Version_Reported: 1.4.4
Target_Version: 1.6
Tags: pullup
Document how to change the krbtgt key for a realm.
ticket: 4692
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18798
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:23 +0000 (01:57 +0000)]
pull up r18793 from trunk
r18793@cathode-dark-space: rra | 2006-11-09 18:29:26 -0500
ticket: new
subject: Delay kadmind random number initialization until after fork
Component: krb5-admin
Version_Reported: 1.4.4
Target_Version 1.6
Tags: pullup
Delay initialization of the random number generator in kadmind until
after the fork and backgrounding of the process. Otherwise, a lack of
sufficient entropy during the system boot process will delay system
boot on systems that run each init script in series and that start
kadmind via an init script.
ticket: 4693
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18797
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:17 +0000 (01:57 +0000)]
pull up r18790 from trunk
r18790@cathode-dark-space: coffman | 2006-11-09 15:40:29 -0500
ticket: new
subject: Add "get_data" function to the client preauth plugin interface
Tags: pullup
Modify the client preauth plugin interface to pass in a function
pointer and data pointer so the plugin may request information
otherwise unavailable.
ticket: 4690
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18796
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:12 +0000 (01:57 +0000)]
pull up r18789 from trunk
r18789@cathode-dark-space: coffman | 2006-11-09 15:15:54 -0500
ticket: new
subject: Add public function to get keylenth associated with an enctype
Tags: pullup
Add a new function, krb5_c_keylength, to libk5crypto to obtain the
keylength associated with an enctype.
ticket: 4688
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18795
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 11 Nov 2006 01:57:03 +0000 (01:57 +0000)]
pull up r18787 from trunk
r18787@cathode-dark-space: coffman | 2006-11-09 10:25:52 -0500
ticket: new
subject: Remove obsolete/conflicting prototype for krb524_convert_princs
Tags: pullup
After krb524_convert_princs() was made static, the prototype in krb524d.h
no longer matches the actual function declaration and is no longer needed.
ticket: 4683
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18794
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 9 Nov 2006 18:45:50 +0000 (18:45 +0000)]
pull up r18781 from trunk
r18781@cathode-dark-space: jaltman | 2006-11-08 18:59:58 -0500
ticket: new
tags: pullup
subject: commit for KFW 3.1 beta 3 (part two)
remove prototype for removed function
ticket: 4675
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18788
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:45:00 +0000 (23:45 +0000)]
pull up r18767 from trunk
r18767@cathode-dark-space: jaltman | 2006-11-08 04:58:49 -0500
ticket:new
tags: pullup
subject: commits for KFW 3.1 Beta 3
KfW 3.1 beta 3 (NetIDMgr 1.1.4.0)
source for 1.1.4.0
- Eliminate unused commented out code.
nidmgr32.dll (1.1.4.0)
- The configuration provider was incorrectly handling the case where a
configuration value also specifies a configuration path, resulting
in the configuration value not being found. Fixed.
- Fix a race condition when refreshing identities where removing an
identity during a refresh cycle may a crash.
- Fix a bug which would cause an assertion to fail if an item was
removed from one of the system defined menus.
- When creating an indirect UI context, khui_context_create() will
correctly fill up a credential set using the selected credentials.
krb5cred.dll (1.1.4.0)
- Fix a race condition during new credentials acquisition which may
cause the Krb5 plug-in to abandon a call to
krb5_get_init_creds_password() and make another call unnecessarily.
- If krb5_get_init_creds_password() KRB5KDC_ERR_KEY_EXP, the new
credentials dialog will automatically prompt for a password change
instead of notifying the user that the password needs to be changed.
- When handling WMNC_DIALOG_PREPROCESS messages, the plug-in thread
would only be notified of any changes to option if the user
confirmed the new credentials operation instead of cancelling it.
- Additional debug output for the DEBUG build.
- Reset the sync flag when reloading new credentials options for an
identity. Earlier, the flag was not being reset, which can result
in the new credentials dialog not obtaining credentials using the
new options.
- Handle the case where the new credentials dialog maybe closed during
the plug-in thread is processing a request.
- Fix a condition which would cause the Krb5 plug-in to clear the
custom prompts even if Krb5 was not the identity provider.
- Once a password is changed, use the new password to obtain new
credentials for the identity.
netidmgr.exe (1.1.4.0)
- Fix a redraw issue which left areas of the credentials window
unupdated if another window was dragged across it.
- Handle WM_PRINTCLIENT messages so that the NetIDMgr window will
support window animation and other features that require a valid
WM_PRINTCLIENT handler.
- During window repaints, NetIDMgr will no longer invoke the default
window procedure.
- Add support for properly activating and bringing the NetIDMgr window
to the foreground when necessary. If the window cannot be brought
to the foreground, it will flash the window to notify the user that
she needs to manually activate the NetIDMgr window.
- When a new credentials dialog is launched as a result of an external
application requesting credentials, if the NetIDMgr application is
not minimized, it will be brought to the foreground before the new
credentials dialog is brought to the foreground. Earlier, the new
credentials dialog may remain hidden behind other windows in some
circumstances.
- When displaying custom prompts for the new credentials dialog, align
the input controls on the right.
ticket: 4667
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18779
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:56 +0000 (23:44 +0000)]
pull up r18764 from trunk
r18764@cathode-dark-space: jaltman | 2006-11-06 16:55:13 -0500
ticket: new
tags: pullup
subject: krb5_get_init_creds_password does not consistently prompt for password changing
krb5_get_init_creds_password() previously did not consistently
handle KRB5KDC_ERR_KEY_EXP errors. If there is a "master_kdc"
entry for the realm and the KDC is reachable, then the function
will prompt the user for a password change. Otherwise, it will
return the error code to the caller. If the caller is a ticket
manager, it will prompt the user for a password change with a
dialog that is different from the one generated by the prompter
function passed to krb5_get_init_creds_password.
With this change krb5_get_init_creds_password() will always
prompt the user if it would return KRB5KDC_ERR_KEY_EXP unless
the function is compiled with USE_LOGIN_LIBRARY. (KFM)
ticket: 4639
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18778
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:47 +0000 (23:44 +0000)]
pull up r18754 from trunk
r18754@cathode-dark-space: coffman | 2006-11-01 17:40:30 -0500
ticket: 4566
ticket: 4567
ticket: 4587
Target_Version: 1.6
Tags: pullup
Modify the preath plugin interface so that a plugin's context is
global to all the modules within a plugin. Also, change the
client-side interface so that the preauth plugin context (once
created) lives the lifetime of a krb5_context. This will allow
future changes that can set plugin parameters. The client side
request context lives the lifetime of a call to krb5_get_init_creds().
Make the sample preauth plugins buildable outside the source tree.
Fix minor memory leak in sort_krb5_padata_sequence().
Add a prototype for krb5_do_preauth_tryagain() and change the plugin
interface.
Incorporates fixes from Nalin Dahyabhai <nalin@redhat.com> for leaks
of the function table pointers (rt #4566) and fix KDC crash (rt #4567)
ticket: 4566
ticket: 4567
ticket: 4587
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18777
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:43 +0000 (23:44 +0000)]
pull up r18763 from trunk
r18763@cathode-dark-space: epeisach | 2006-11-05 09:37:28 -0500
ticket: new
subject: Make clean in lib/kdb leaves error table files
tags: pullup
Remove adb_err.c and adb_err.h on make clean.
ticket:4625
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18776
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:39 +0000 (23:44 +0000)]
pull up r18762 from trunk
r18762@cathode-dark-space: epeisach | 2006-11-05 09:29:24 -0500
Subject: Make clean does not remove lib/crypto/t_prf
ticket: new
tags: pullup
Remove t_prf and t_prf.o on make clean.
ticket: 4624
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18775
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:31 +0000 (23:44 +0000)]
pull up r18750 from trunk
r18750@cathode-dark-space: wfiveash | 2006-10-30 15:56:57 -0500
ticket: new
subject: latest Novell ldap patches and kdb5_util dump support for ldap
Target_Version: krb5-1.6
Tags: pullup
I've applied Novell's latest patches for their LDAP KDB plugin. I've
also implemented and tested support for kdb5_util dump using the LDAP
KDB plugin. I also added a Sun copyright on files that I've modified.
ticket: 4562
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18774
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:27 +0000 (23:44 +0000)]
pull up r18751 from trunk
r18751@cathode-dark-space: raeburn | 2006-10-30 20:10:34 -0500
ticket: 4534
* conv_princ.c (krb5_425_conv_principal): Fix silly typo in arrays' sizes in
previous change.
ticket: 4534
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18773
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 8 Nov 2006 23:44:23 +0000 (23:44 +0000)]
pull up r18748 from trunk
r18748@cathode-dark-space: raeburn | 2006-10-27 23:06:30 -0400
ticket: new
subject: don't confuse profile iterator in 425 princ conversion
target_version: 1.6
tags: pullup
The profile iterator code hangs onto and uses the list of names passed
in. The krb5_425_conv_principal code reuses that array when the
iterator may still be used.
* conv_princ.c (krb5_425_conv_principal): Use separate name arrays for
the iterator and the v4_realm lookup that may be done inside the
iteration loop.
ticket: 4534
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18772
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 7 Nov 2006 20:18:31 +0000 (20:18 +0000)]
Pullup from trunk to 1.6 branch
ticket: 4657
version_fixed: 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18766
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 27 Oct 2006 22:55:49 +0000 (22:55 +0000)]
patchlevel.h for krb5-1.6 branch
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18746
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 27 Oct 2006 22:49:46 +0000 (22:49 +0000)]
branch krb5-1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18745
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 27 Oct 2006 22:47:32 +0000 (22:47 +0000)]
more copyright fixes pre-1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18744
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 27 Oct 2006 03:53:08 +0000 (03:53 +0000)]
Synchronise copyright notices. Preliminary update of README for 1.6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18743
dc483132-0cff-0310-8789-
dd5450dbe970
Will Fiveash [Mon, 23 Oct 2006 21:36:46 +0000 (21:36 +0000)]
fix krb5_ldap_iterate to handle NULL match_expr and open_db_and_mkey to use KRB5_KDB_SRV_TYPE_ADMIN
When I ran kdb5_util dump I had two initial problems. First, the LDAP
plugin was not finding the bind DN because open_db_and_mkey() was
passing KRB5_KDB_SRV_TYPE_OTHER to krb5_db_open(). When I change this
to KRB5_KDB_SRV_TYPE_ADMIN then the ldap_kadmind_dn parameter is used
from krb5.conf and a valid bind DN is found. Second,
krb5_ldap_iterate() will core dump when it is called withy a NULL
match_expr arg. This is how dump_db calls krb5_db_iterate(). I updated
krb5_ldap_iterate() to use a default_match_expr of "*" if match_expr ==
NULL.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18736
dc483132-0cff-0310-8789-
dd5450dbe970
Kevin Coffman [Mon, 23 Oct 2006 16:15:50 +0000 (16:15 +0000)]
fix invalid access found by valgrind
Valgrind found that we were reading past the end of the
preferred padata string. p is manually updated within
the loop and there is no need for the increment. It was
causing the null terminator to be skipped over, rather
than properly terminating the loop.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18735
dc483132-0cff-0310-8789-
dd5450dbe970
Kevin Coffman [Mon, 23 Oct 2006 16:10:37 +0000 (16:10 +0000)]
Avoid segfault in krb5_do_preauth_tryagain
Check pointer is non-null before using it. Avoids segfault in
krb5_do_preauth_tryagain().
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18734
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 23 Oct 2006 03:20:11 +0000 (03:20 +0000)]
For Irix - determine if using gcc and gnu ld - set compiler flags properly
ticket: 4455
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18733
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 22 Oct 2006 11:59:02 +0000 (11:59 +0000)]
osf1 -oldstyle_liblookup typo
Not really relevant anymore - as we do not support static linking now.
But in ticket 927 (r16776) - a test was added to determine if gnu ld
was in use and change the linker flags accordingly. The variable in
aclocal.m4 was krb5_cv_prog_gnu_ld and this was testing for
krb5_cv_gnu_ld.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18732
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 21 Oct 2006 20:20:30 +0000 (20:20 +0000)]
Delete src/lib/ccapi.
The ccapi shipped in 1.6 will not be based off this code
and will live in src/ccapi.
It will be copied onto the trunk and branch when ready, but this code is being removed before the branch cut.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18731
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 21 Oct 2006 20:12:52 +0000 (20:12 +0000)]
Update protocol rfcs to the versions we actually implement
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18730
dc483132-0cff-0310-8789-
dd5450dbe970
Will Fiveash [Sat, 21 Oct 2006 00:33:24 +0000 (00:33 +0000)]
enabling LDAP mix-in support for kdb5_util load
I now have mix-in working for the kdb5_util load. If the krbSubTrees
realm attr contains a base DN where non-krb entries live the
load/krb5_ldap_put_principal() code will modify those entries whose
krbPrincipalName attr matches that of the dump princ record being loaded
otherwise a standalone krbprinc entry will be created under the realm
container.
I also fixed a small bug in krb5_ldap_policydn_to_name() for the version
that uses ldap_explode_dn().
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18729
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 03:15:24 +0000 (03:15 +0000)]
Add supp-int.h to provide prototypes for declared internal functions.
*.x: Include this header
Makefile.in: Update dependencies
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18728
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:54:05 +0000 (02:54 +0000)]
Memory leak fixes on exit
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18727
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:53:06 +0000 (02:53 +0000)]
Free allocated memory when no longer used
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18726
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:52:30 +0000 (02:52 +0000)]
Invoke krb5_free_principal to remove memory leak
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18725
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:51:55 +0000 (02:51 +0000)]
Call freeaddrinfo at end - memory leak
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18724
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:50:43 +0000 (02:50 +0000)]
Declare krb5_mcc_get_flags static - it is not exported or used outside of file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18723
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 18 Oct 2006 02:38:01 +0000 (02:38 +0000)]
Unsigned/signed warning fix
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18722
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 16:18:29 +0000 (16:18 +0000)]
Include gss_libinit.h for gssint_initialize_library() prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18721
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 12:18:18 +0000 (12:18 +0000)]
Include string.h for memcmp prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18720
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 12:17:53 +0000 (12:17 +0000)]
Include time.h for time() prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18719
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 01:50:49 +0000 (01:50 +0000)]
Add prototype for krb5int_init_context_kdc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18718
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 00:09:53 +0000 (00:09 +0000)]
Add prototype for krb5_aprof_get_boolean
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18717
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 16 Oct 2006 00:09:25 +0000 (00:09 +0000)]
Tag krb5_rc_dfl_init_locked as static - not used outside file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18716
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 15 Oct 2006 18:46:13 +0000 (18:46 +0000)]
Cleanup some warnings on missing prototypes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18715
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 18:19:28 +0000 (18:19 +0000)]
fix typo in make var ref
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18714
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 15 Oct 2006 13:35:26 +0000 (13:35 +0000)]
Cleanup unused variable warning during make check
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18713
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 15 Oct 2006 13:23:48 +0000 (13:23 +0000)]
Remove all unused variable warnings from tree
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18712
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 08:43:30 +0000 (08:43 +0000)]
typo
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18711
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 08:37:35 +0000 (08:37 +0000)]
Pass VALGRIND in to runtest. When it's set, redefine spawn to use it for
most commands starting with "/" but not "/bin/sh" and certain others.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18710
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 08:35:41 +0000 (08:35 +0000)]
Suppress some uninteresting glibc warnings on RHEL4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18709
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 08:35:09 +0000 (08:35 +0000)]
Define VALGRIND1 as an invocation of valgrind that could be used for VALGRIND
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18708
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 08:31:48 +0000 (08:31 +0000)]
Zap automatic structures before filling in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18707
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 07:51:30 +0000 (07:51 +0000)]
Clear req_st buffer before filling it in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18706
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sun, 15 Oct 2006 07:50:54 +0000 (07:50 +0000)]
Initialize some values before use, silence some warnings
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18705
dc483132-0cff-0310-8789-
dd5450dbe970