Richard Basch [Tue, 7 May 1996 20:39:22 +0000 (20:39 +0000)]
Pass the eblock to the init_random_key and finish_random_key functions
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7914
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:19:59 +0000 (20:19 +0000)]
Use the revamped random number routines
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7913
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:18:41 +0000 (20:18 +0000)]
Use the new 3des random number generator
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7912
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:17:36 +0000 (20:17 +0000)]
New DES random number generation. For regular DES, it is nearly equivalent
(an extra DES encryption now happens). For 3des, it is a substantially
better setup (the original one was a placeholder); it may not be the final
one, but at least it is not as weak as the previous version. (This checkin
does not include the proposed API changes.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7911
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 7 May 1996 01:35:05 +0000 (01:35 +0000)]
(clean-unix): Remove libgssapi_krb5.stamp
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7909
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 7 May 1996 01:14:09 +0000 (01:14 +0000)]
Use a wrapper script for the rcp started from kshd. This change cleans up the
test as written.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7908
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:25:53 +0000 (16:25 +0000)]
Fixed the abstraction violation, where the code knew the details about the
cryptosystem structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7907
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:22:15 +0000 (16:22 +0000)]
The fallback to slave kdc's wasn't working because the code did not handle
the error return "KRB524_NOTRESP".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7906
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:19:33 +0000 (16:19 +0000)]
Include the uid in the replay cachename
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7905
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 16:11:21 +0000 (16:11 +0000)]
* rsh.exp: Setup a wrapper script in executing klist in the remote
shell so that environment variables are properly set.
* kadmin.exp: (kpasswd_cpw): After giving new password, wait for
the newline or we hang waiting for the process to finish.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7904
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 16:09:31 +0000 (16:09 +0000)]
Use a wrapper script when invoking login.krb5 in order for shared
libraries to be setup properly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7903
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 15:57:21 +0000 (15:57 +0000)]
* default.exp: Add procedure setup_wrapper to first setup shared library
environment variables and the exec program.
This allows for easy testing of "rsh $hostname klist" which would
normally fail due to shared libraries not being setup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7902
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 5 May 1996 13:47:06 +0000 (13:47 +0000)]
preauth.c: Add const and casts as needed to handle warnings..
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7901
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 5 May 1996 13:45:16 +0000 (13:45 +0000)]
* default.exp: For stty_init set to \^h as on some /bin/sh, ^ is
treated as a pipe.
I had never heard of this until under DU 3.2 the tests started failing
until I read the sh man page. Apparently ^ is for some very old
compatibility.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7900
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:21:25 +0000 (02:21 +0000)]
whitespace
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7899
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:20:51 +0000 (02:20 +0000)]
work around process group problems; recognize certain failure modes (e.g.,
connection closed) better; work around gnu getopt problem
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7898
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:11:35 +0000 (02:11 +0000)]
cygnus merge: sscanf workaround; logs for sam tests
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7897
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:04:10 +0000 (02:04 +0000)]
* rsh.exp: Add tests for ticket forwarding
* kadmin.exp and gssapi.exp: Fix syntax of expect_after blocks. The -i $foo
must be inside the {, and the { must be by itself at the end of the line.
* gssftp.exp (start_ftp_daemon): use krb5.conf, not krb.conf
* gssftp.exp (ftp_test): Explicitly select binary mode.
* kadmin.exp: Don't look at output from kadmind to drain it; that problem is
handled elsewhere now.
* kadmin.exp (kadmin_delete, kamind_add, kadmin_add_rnd, kadmin_examine,
kadmin_cpw, kadmin_cpw_rnd, kadmin_modify, kadmin_rename, kadmin_list,
kadmin_extract, kadmin_extractv4): check for "lost KDC" as well.
* kadmin.exp (kadmin_show): extend regexp to match current kadmin interface.
(kadmin_add): match more of extended output (tentative change, should be
expanded later to actually check the values.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7896
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 01:11:12 +0000 (01:11 +0000)]
Tue Apr 2 22:22:47 1996 Chris Provenzano <proven@cygnus.com>
* default.exp : Do an stty to set kill and erase correctly. Things don't work
if kill is set to '@'.
Fri Mar 29 15:02:32 1996 Chris Provenzano <proven@cygnus.com>
* default.exp : Always use variable BINSH instead of sh. Use -f flag with
kinit to get forwardable tickets. Setup kdc.conf to allow forwardable tickets.
Thu Mar 28 17:30:55 1996 Ken Raeburn <raeburn@cygnus.com>
* default.exp (touch, tail1): New proc.
(start_kerberos_daemons, stop_root_shell): Use them, and sleep built-in cmd.
Wed Mar 27 22:43:08 1996 Ken Raeburn <raeburn@cygnus.com>
* default.exp (start_kerberos_daemons): Use ">>" to avoid updating mod time on
kadmind log file.
Wed Mar 27 21:35:57 1996 Marc Horowitz <marc@mit.edu>
* default.exp: (start_kerberos_daemons): exec the kadmind inside an sh to
redirect stderr (this is a pending bug), and keep the same pid, so that
stop_kerberos_daemons doesn't leave a kadmind running.
Wed Mar 27 21:24:35 1996 Marc Horowitz <marc@mit.edu>
* default.exp: (start_kerberos_daemons): add a check for "cannot initialize
network" as a failure message to the kadmind5 startup expect checks
Wed Mar 27 21:10:47 1996 Marc Horowitz <marc@mit.edu>
* default.exp (start_kerberos_daemons): use ezra's KDC tail changes for
kadmind5, too.
* rlogin.exp (start_rlogin_daemon): start klogind with sh -c so that setsid()
won't fail due to the process already being the leader of a process group
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7895
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:42:57 +0000 (00:42 +0000)]
* kinit.c (krb5_validate_tgt): new function, takes a credential cache with an
tgt with the "invalid flag" set, and asks the kdc to validate it. Wipes cache
and stores only the newly validated credential. (After all, there won't be any
others, because the invalid krbtgt couldn't have gotten them.) Most of the code
is taken from krb5_mk_req, since it did the right thing.
(main): add -v option, validates the ticket already in the selected cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7894
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:41:19 +0000 (00:41 +0000)]
*** empty log message ***
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7893
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:22:56 +0000 (00:22 +0000)]
Tue Apr 2 22:31:48 1996 Mark Eichin <eichin@cygnus.com>
* krb5.conf.M, krb5.conf: add default_tkt_enctypes.
Wed Mar 27 22:44:36 1996 Mark Eichin <eichin@cygnus.com>
* krb5.conf, kdc.conf: specify des-cbc-crc as the only valid
enctype (but permit normal, v4, norealm, onlyrealm, and afs3
salttypes.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7892
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:21:52 +0000 (00:21 +0000)]
decls for new routines
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7891
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:17:55 +0000 (00:17 +0000)]
* get_creds.c (krb5_get_credentials_core): new function. Common part of
krb5_get_credentials and krb5_get_credentials_validate. Some formerly local
variables are now arguments.
(krb5_get_credentials): same as before, but calls _core to do some of the work.
(krb5_get_credentials_validate): uses krb5_get_cred_from_kdc_validate and only
stores the returned credential in the cache, instead of storing all of them.
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): new function. Same body as
krb5_get_cred_from_kdc, but takes one new argument, kdcopts, and combines it
with the other kdc options when calling krb5_get_cred_via_tkt. This is static
and only called by
(krb5_get_cred_from_kdc): a wrapper that provides the same function it did
before, and
(krb5_get_cred_from_kdc_validate): a wrapper that passes KDC_OPT_VALIDATE, so
that kinit can use it.
We'll probably need another one for renewing tickets as well.
* rd_req_dec.c (krb5_rd_req_decoded_opt): new function. Same body as
krb5_rd_req_decoded, but takes one new argument, check_valid_flag, to determine
whether or not to check if the "invalid flag" is set in the ticket. Also made
static, so that it is only called via:
(krb5_rd_req_decoded): wrapper for krb5_rd_req_decoded_opt that specifies the
"invalid flag" gets checked, and
(krb5_rd_req_decoded_anyflag): wrapper for krb5_rd_req_decoded_opt that
specifies that the "invalid flag" doesn't get checked. (This version is only
called from kdc_util.c:kdc_process_tgs_req.)
* str_conv.c (krb5_string_to_timestamp): double check that strptime at least
parsed *some* of the string, avoid degenerate cases from GNU libc strptime.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7890
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:14:08 +0000 (00:14 +0000)]
* krb5_decode.c (decode_krb5_enc_tkt_part): use tagnum correctly to handle
optional starttime (previous code *always* replaced starttime with authtime.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7889
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 3 May 1996 23:58:13 +0000 (23:58 +0000)]
missing log entries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7888
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 3 May 1996 21:03:00 +0000 (21:03 +0000)]
Add code to support appropriate behavior when the input credentials is
NULL (i.e., the default credential). We use the default credential
for the "default mechanism", which is the first mechanism registered
with the library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7887
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 3 May 1996 02:20:14 +0000 (02:20 +0000)]
* ss_wrapper.c (main): Make sci_idx a global. This makes certain Cygnus
customizations simpler.
* dump.c (restore_dump): If header indicates a beta-5 dump, process it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7886
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 23:24:09 +0000 (23:24 +0000)]
missing log entries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7885
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 22:53:35 +0000 (22:53 +0000)]
Cygnus merge: new option -s to set tgt start time
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7884
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 01:22:45 +0000 (01:22 +0000)]
cygnus merge:
* configure.in: Fix typo in Apr 16 HP-UX change.
* state.c (envvarok): nuke all KRB5* environment variables, not just the
previously selected ones.
* telnetd.c (telnet -> doit): moved SIGTTOU handler before the first thing
which would cause the terminal driver to get upset.
* sys_term.c (line): Remove initialization silliness. The non-GNUC method was
Just Wrong, do it the other way always.
(Xline): Specify length, not contents.
* termio-tn.c (readstream_termio): new file, provides isolated version of
M_IOCTL handling for systems where termio and termios can't be compiled
together.
* termios-tn.c (readstream_termios): new file, provides isolated version of
M_IOCTL handling for systems where termio and termios can't be compiled
together.
* telnetd.c (readstream): use readstream_termios and readstream_termio to
handle getmsg with M_IOCTL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7883
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 03:30:20 +0000 (03:30 +0000)]
* Makefile.in (tgz-bin, pkgdir): New targets.
(PKGDIR, GZIPPROG): New variables.
* aclocal.m4 (WITH_NETLIB): Don't look for socket lib on Irix.
* aclocal.m4 (MAKE_SUBDIRS): Disable hack that tries to determine if "-k" or
"-i" was given.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7882
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 03:17:43 +0000 (03:17 +0000)]
Merge ... Cygnus sources, changes from Mark Eichin, Marc Horowitz, Chris
Provenzano and me:
* Makefile.in (install): Install correct set of man pages, and check for
failures.
* kshd.M, klogind.M: Renamed from kr*.M versions.
* login.M: New file. Man page for login with some description of new features.
* rlogin.M: Remove references to using program with target hostname as argv[0].
* rsh.M: Ditto. Also document -f, -F, -x options.
* login.c: Massive changes. Split much functionality out of main and into
separate file sections: terminal flag settings, Kerberos 4 and 5 support, UNIX
password support, mail check, signal handler handling, some other support
routines. Revamp controlling tty and process group handling. For AFS
configuration, use setpag and run aklog. Try validating password using krb5.
Always set tty flags, not just for rlogin session. When validating tickets,
treat an existing key file that doesn't contain the key we think we want
(possibly because DNS was spoofed) as an error condition.
* Makefile.in (LOGINLIBS): List libkrb524.a here.
(LIBOBJS): Not here.
(login.krb5): Reverse the order of LIBOBJS and LOGINLIBS.
* configure.in: Check for --with-afs. Add AFS libs and define SETPAG if
supplied.
* login.c (KRB5_GET_TICKETS, KRB4_GET_TICKETS, KRB_RUN_AKLOG): new macros
selecting single signon options. krb5.conf profile support for control over
authentication options, above the compile time selection.
(conf_affirmative): new function, recognize yes/no in profile value.
(login_get_kconf): new function, look for all [login] flags and set them in
appropriate globals (via login_conf_set array.)
(main, sleepexit, destroy_tickets): Check the new login_* flags.
(main): rename KRB4_USE_524 to KRB4_CONVERT.
* configure.in: Added checks for tcsetpgrp, tcgetpgrp, setpgid.
* krlogind.c (control): Use tcgetpgrp if it's available.
* loginpaths.h (RPATH, LPATH, LPATH_root): Define HP/UX 9.04 versions,
conditionalized on __hpux and !hpux.
* login.c and configure.in: instead of checking _IBMR2 and __sgi__, write
configure tests to check for the existence of /etc/environment and
/etc/TIMEZONE files, respectively.
* forward.c (rd_and_store_for_creds) : If chown fails then only pass failure
back if owner is different than intended owner. This is to make rsh.exp test
work without requiring root privlidges.
* login.c (main): Don't set TERM to an empty value.
(stypeof) [__hpux]: Return null if unknown.
* krlogin.c (catchild): remove hp/ux kludge because of aclocal.m4 fix.
(speeds): test __hpux for hpux speed list.
(main): test __hpux for use of FIOSSAIOSTAT and FIOSSAIOOWN
(USE_TERMIO): test __hpux for bsdtty/ptyio headers.
* krlogind.c: test __hpux for bsdtty/ptyio headers.
(doit): test __hpux for use of setpgrp2.
* krcp.c (main): test __hpux as well for remsh vs. rsh.
* krcp.c (des_write): Make sure the buffer for the encrypted data is large
enough. Only return an error in malloc fails.
* krsh.c (main): Always turn on anyport -A option.
* krlogind.c (ptsname): Declare if it's going to be used.
* krshd.c (main): Use basename of argv[0] for progname.
* login.c (dofork): On linux, TIOCNOTTY causes us to die on a SIGHUP, so don't
even try it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7881
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 01:50:53 +0000 (01:50 +0000)]
hpux is unix. really, it is
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7880
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 00:21:05 +0000 (00:21 +0000)]
previously checked-in changes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7879
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 30 Apr 1996 23:49:37 +0000 (23:49 +0000)]
Removed duplicate #include <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7878
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 23:27:19 +0000 (23:27 +0000)]
clean up configure output style
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7877
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 23:17:33 +0000 (23:17 +0000)]
* Makefile.in (libkrb5.$(STEXT)): Set a variable with or without "--force" and
use it, instead of duplicating the rest of the code. Use LIBDONE as list to
process, so berk_db will be skipped when not in use. Check exit status of
LIBUPDATE invocation. Remove library before creating as workaround for
libupdate bug.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7876
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 22:25:26 +0000 (22:25 +0000)]
* t_ser.c (stuff): New variable.
(ser_acontext_test, ser_eblock_test, ser_cksum_test): Use it, instead of
assuming it's valid to treat &FUNCTION as a data pointer.
* conv_princ.c (sconv_list): Now const.
(krb5_*_conv_principal): Use pointer to const for it.
Tue Apr 23 19:39:59 1996 Mark Eichin <eichin@cygnus.com>
* get_creds.c (krb5_get_credentials): this isn't the kernel, so don't return
negative errno values.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7875
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 21:54:16 +0000 (21:54 +0000)]
* configure.in: Test that regcomp actually works
* Makefile.in (check-unix): Use $(RM).
* t_an_to_ln.c (main): Print principal name when an error is detected.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7874
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 21:19:02 +0000 (21:19 +0000)]
log for mark's sam changes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7873
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 21:17:46 +0000 (21:17 +0000)]
* configure.in: Invoke AC_C_CROSS before AC_TRY_RUN to pretty up output format
* Makefile.in (autoconf.h): Use timestamp file to prevent repeated rebuilding
if file timestamp is out of date but contents wouldn't change.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7872
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 20:55:20 +0000 (20:55 +0000)]
log for mark's sam changes of 4/9
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7871
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 30 Apr 1996 19:05:06 +0000 (19:05 +0000)]
Added compile/link lines to build a PowerPC CFM shared libraries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7870
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 30 Apr 1996 19:03:59 +0000 (19:03 +0000)]
Added prototype for getpeername()
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7869
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 30 Apr 1996 18:53:52 +0000 (18:53 +0000)]
Removed PROVIDE_SNEFRU (shouldn't be there) and added PROVIDE_CRC32
(was originally in k5-int.h).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7868
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 30 Apr 1996 18:52:24 +0000 (18:52 +0000)]
Fix Windows definition of PROVIDE_DES_CBC_RAW so that the raw DES
cryptosystem is properly included. Removed Macintosh definitions of
PROVIDE_* since that is done in mac/libaries/KerberosHeaders.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7867
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 30 Apr 1996 18:48:49 +0000 (18:48 +0000)]
For windows, mask off low 16 bits because Gradient DCE does things
wrong.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7866
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 17:47:14 +0000 (17:47 +0000)]
* Makefile.in (libcrypto.$(STEXT)): Remove before creating
Temporary workaround to avoid getting multiple versions of .o files in libs.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7865
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 29 Apr 1996 23:52:38 +0000 (23:52 +0000)]
login man page by mark eichin
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7864
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 29 Apr 1996 21:05:29 +0000 (21:05 +0000)]
* Makefile.in (install): Install correct set of man pages, and check for
failures.
* kshd.M, klogind.M: Renamed from kr*.M versions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7863
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 28 Apr 1996 14:24:08 +0000 (14:24 +0000)]
The rd_req has to allow any local service principal, as the host may have
multiple names and multiple "host" keys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7861
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 28 Apr 1996 14:22:54 +0000 (14:22 +0000)]
Fixed a potentional null dereference
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7860
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 25 Apr 1996 12:50:49 +0000 (12:50 +0000)]
Whitespace cleanup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7858
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 24 Apr 1996 06:48:34 +0000 (06:48 +0000)]
* aclocal.m4 (V5_USE_SHARED_LIB): Remove another dependency in the
executables on the build tree.
The built executables should not look in the build tree for shared libraries...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7857
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 22 Apr 1996 00:35:52 +0000 (00:35 +0000)]
One could not specify -c in inetd.conf, because of the
variable initialization; initialization has been corrected to
allow either checksumming or ignoring the checksum.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7855
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sun, 21 Apr 1996 18:04:01 +0000 (18:04 +0000)]
Update the two sections I worked on with comments from jhawk. I don't
have time to implement the rest of his comments to the document as a
whole.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7853
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 21 Apr 1996 16:55:40 +0000 (16:55 +0000)]
* krshd.c: If checksumming is required & ALWAYS_V5_KUSEROK is
defined, incorrect messages were being displayed for V4 clients.
Additionally, various errors were not being displayed with the
trailing newline.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7852
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sun, 21 Apr 1996 08:21:19 +0000 (08:21 +0000)]
Fix keytab prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7851
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sun, 21 Apr 1996 07:06:50 +0000 (07:06 +0000)]
* Remove documentation of how krlogind gets its command line options
from its name, because it doesn't any more. Same for kshd.
* Document and implement -i option to ignore checksums. Restore
default mode to accept and process checksums if provided.
* Bring back the warning about only using -c with Kerberos5. The
documentation (both install.texi and the man pages) clearly state that
the -c option shouldnot be used in conjunction with Kerberos4, so warn
users if they try.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7849
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 20 Apr 1996 21:06:29 +0000 (21:06 +0000)]
Document installing BSD utilities,
in particular talking about checksums and other
confusing issues.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7848
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Apr 1996 19:32:00 +0000 (19:32 +0000)]
Fix typo in last night's commit
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7845
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 19 Apr 1996 06:30:40 +0000 (06:30 +0000)]
Add Doug Engert's patches to deal
with vendor logins and packet mode on systems that don't
support it.
Also, clean up spaces in Makefile.in, replacing with tabs.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7844
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 18 Apr 1996 23:03:00 +0000 (23:03 +0000)]
More option handling changes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7839
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 18 Apr 1996 05:19:51 +0000 (05:19 +0000)]
some changelog entries mark didn't bring over
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7838
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 17 Apr 1996 21:59:30 +0000 (21:59 +0000)]
Fix the expect string so that it doesn't assume that the client is
using its fully qualified domain name as its local hostname. We now
check to make sure that FTP banner contains $localhostname, plus
optional characters (which can be the domainname depending on the
system.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7824
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 17 Apr 1996 21:53:22 +0000 (21:53 +0000)]
configure.in (LOGINLIBS): Remove DECLARE_SYS_ERRLIST since it's no
longer necessary.
krcp.c (verifydir, allocbuf, rsource, source, sink): Don't use
sys_errlist[]; just call error_message() instead, since we depend on
com_err anyway.
krshd.c (recvauth):
krlogind.c (recvauth): Don't actually check the checksum unless it is
required. Old (pre-beta 5) clients sent a checksum of random garbage
(such as their pid) which is impossible to actually check on the
server side. (Grad student stupidity strikes again.)
(fatalperror): Don't use sys_errlist[] to get the right error
message; just depend on com_err instead, since we're using it anyway.
krshd.c (doit):
krlogind.c (do_krb_login): Fix logic so that if checksums are
required, and the checksum is valid, don't syslog the stupid warning
message about "Checksums are only required for v5 clients...."
krcp.c, krshd.c, krlogind.c: Miscellaneous -Wall cleanups
krlogind.c (getpty): Removed dead code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7823
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 17 Apr 1996 18:29:59 +0000 (18:29 +0000)]
Added ftp and ecat to the list of services which should be converted.
This really ought to be something that's configurable in the
profile...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7822
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 17 Apr 1996 17:25:01 +0000 (17:25 +0000)]
Removed kadmin.old from list of things to keep
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7821
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 17 Apr 1996 02:30:09 +0000 (02:30 +0000)]
Wed Mar 6 05:02:36 1996 Mark Eichin <eichin@cygnus.com>
* libupdate.sh: $ARCHIVE does not delete when creating. Explicitly remove
$library when using --force.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7820
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 17 Apr 1996 02:11:22 +0000 (02:11 +0000)]
* dump-utmp.c: New file. Not automatically used by anything, but may be useful
for examining utmp/wtmp files when comparing behavior against system software.
* update_utmp.c (pty_update_utmp): Always use id "cons" for console. For
HP-UX, omit "kl" prefix. Reindent for readability.
* update_wtmp.c (ptyint_update_wtmp): For HP-UX, copy ut_id and ut_type from
input utmp structure. Reindent for readability.
Wed Mar 27 21:14:33 1996 Marc Horowitz <marc@mit.edu>
* init_slave.c (pty_initialize_slave): Spurious signal stuff which did nothing
deleted.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7819
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 16 Apr 1996 18:19:13 +0000 (18:19 +0000)]
* Changes to not use streams on HPUX
* Changes to abort the session if telnetd receives certain options
such as environment or DISPLAY options before authentication and
encryption is negotiated or not negotiated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7818
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 16 Apr 1996 18:17:39 +0000 (18:17 +0000)]
Drop support for option names in argv[0]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7817
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 16 Apr 1996 18:16:07 +0000 (18:16 +0000)]
Changes so HPUX doesn't use streams. This
may break on HPUX10 depending on how you should get the name of the pts side
of /dev/ptym/clone. I don't have an HPUX10 system
to test on.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7816
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 15 Apr 1996 23:22:10 +0000 (23:22 +0000)]
Added V5_USE_SHARED_LIBS
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7815
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 15 Apr 1996 07:16:20 +0000 (07:16 +0000)]
Don't declare open()
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7814
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 15 Apr 1996 07:15:11 +0000 (07:15 +0000)]
Have pty_cleanup() fork on systems with vhangup()
so that the right controlling terminal can be used; needed
on HP and others possibly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7813
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Mon, 15 Apr 1996 07:13:29 +0000 (07:13 +0000)]
Remove setpgrp() call from krlogind
as libpty deals.
Use setsid() instead of setpgrp() in krshd
if possible.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7812
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 03:42:50 +0000 (03:42 +0000)]
Store the forwarded credentials in /tmp/krb5cc_p<pid> (like krlogind)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7811
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 03:42:08 +0000 (03:42 +0000)]
Destroy any forwarded credentials when we cleanup. (They were stored in
an unusual location, so they are not likely to be reused by other sessions.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7810
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 03:19:34 +0000 (03:19 +0000)]
Reflect today's reality... it hasn't been edited in a while
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7809
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 01:49:27 +0000 (01:49 +0000)]
Renamed MD5 routines to be preceded with krb5_
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7806
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 01:40:05 +0000 (01:40 +0000)]
Renamed the functions to begin with krb5_ (like was done with MD5)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7805
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 13 Apr 1996 01:30:50 +0000 (01:30 +0000)]
Renamed the functions to be preceded with krb5_ (I ran into a naming
conflict with the standard MD5 library calls in another application,
and this version has non-standard calling arguments.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7804
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 21:05:26 +0000 (21:05 +0000)]
Fix wrapper macros so they don't try to dereference a function pointer
as a data value. This doesn't work if you're using hpux cc, since
functions are aligned on 2-byte boundaries, but data has to be
accessed on 4-byte boundaries. Accessing a function as a data value
isn't ANSI C portable anyway. :-) Wrapper macros now take a function
pointer, and check to see if the function pointer is non-NULL, instead
of taking a (*funptr), and seeing if the function when treated as data
object is non-NULL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7803
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 02:54:22 +0000 (02:54 +0000)]
On a Macintosh, turn on kdc_timesync and use the v4 credentials cache
by default.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7802
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 02:18:50 +0000 (02:18 +0000)]
Move time offset code from stash_as_reply to verify_as_reply, and fix
it so that it actually works.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7801
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 02:18:11 +0000 (02:18 +0000)]
When doing the time offset adjustments, make sure the microseconds
field doesn't go negative.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7800
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 12 Apr 1996 01:52:28 +0000 (01:52 +0000)]
forward.c: Use a saner naming convention for the credentials cache.
kerberos5.c: Add a cleanup function to destroy the credentials cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7799
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 12 Apr 1996 01:51:34 +0000 (01:51 +0000)]
Call a krb5 cleanup routine to cleanup forwarded credentials, if necessary
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7798
dc483132-0cff-0310-8789-
dd5450dbe970
Marc Horowitz [Fri, 12 Apr 1996 00:40:24 +0000 (00:40 +0000)]
Integrated OpenVision's changes into the most recent MIT code. This
revision is what I'd call the easy stuff. Some more controversial
stuff remains to be done, which is why I'm doing a checkin now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7797
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 00:34:53 +0000 (00:34 +0000)]
Remove the old Sandia kadmin code
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7795
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 00:12:58 +0000 (00:12 +0000)]
Return GSS_S_CRED_UNAVAIL on if krb5_cc_set_flags() returns an error,
since that's the call that will return an error if the credentials
files doesn't exist.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7794
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 12 Apr 1996 00:12:23 +0000 (00:12 +0000)]
Fixed code to correctly handle errors reported from the mechanism
layer.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7793
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 23:37:15 +0000 (23:37 +0000)]
* kdb5_edit.c (extract_v4_srvtab): Use the matching key_data's kvno;
don't assume that key_data[0]'s kvno is necessarily the matching
key_data's kvno.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7792
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 04:26:22 +0000 (04:26 +0000)]
* kcmd.c: Cleaned up whitespace and removed commented & unused cruft
* krlogind.c, krshd.c: Allow the recvauth routine to find any key
in the keytab for which the user is trying to login. The host may
be known as many names. Additionally, for krlogind, clean up the
error handling for bad authentication (potential null dereference
and a misleading message because of the wrong authentication system
being used)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7791
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 03:17:56 +0000 (03:17 +0000)]
Fixed the chronology of two of my previous checkins
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7790
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 03:14:19 +0000 (03:14 +0000)]
Added V5_USE_SHARED_LIB
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7789
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 00:39:27 +0000 (00:39 +0000)]
V4 srvtab extraction did not do proper principal translation
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7788
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 11 Apr 1996 00:36:19 +0000 (00:36 +0000)]
Mostly output formatting fixes.
Also, rather than figuring out the default host key, leave it to the library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7787
dc483132-0cff-0310-8789-
dd5450dbe970