Tom Yu [Sun, 5 Mar 2006 22:44:56 +0000 (22:44 +0000)]
* svc_auth_gssapi.c (svcauth_gssapi_unset_names): Don't reset
server_creds_count after the first loop; it counts both
server_creds_list and server_name_list.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17699
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sun, 5 Mar 2006 22:40:30 +0000 (22:40 +0000)]
update tests for mechglue major error strings
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17698
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 26 Jan 2006 22:05:08 +0000 (22:05 +0000)]
interim commit
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17628
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 26 Jan 2006 21:55:38 +0000 (21:55 +0000)]
delete copy botch
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17627
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 26 Jan 2006 21:53:03 +0000 (21:53 +0000)]
temp commit
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17626
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 26 Jan 2006 21:42:06 +0000 (21:42 +0000)]
branch mechglue
git-svn-id: svn://anonsvn.mit.edu/krb5/users/tlyu/branches/mechglue@17625
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 11 Jan 2006 22:32:31 +0000 (22:32 +0000)]
Back out unwanted change to profile_tcl.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17586
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 11 Jan 2006 21:43:29 +0000 (21:43 +0000)]
Remove krb5_callconv from non-exported internal function
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17585
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 6 Jan 2006 21:02:59 +0000 (21:02 +0000)]
* krb5-config.in: Cause libs output to match actual required
ordering of libraries.
ticket: 3320
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17581
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 30 Dec 2005 22:43:20 +0000 (22:43 +0000)]
KFW installation should not use impersonation
Do not use impersonation when installing the network
provider in order to succeed on Vista.
ticket: new
component: windows
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17580
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 30 Dec 2005 22:33:24 +0000 (22:33 +0000)]
* gc_frm_kdc.c: Rewrite to modularize significantly. (~400-line
functions do not deserve to live.) The outer loop no longer
explicitly attempts the direct path to the target; that attempt
has been folded into the inner loop. Remove some redundant
credential lookups present in the old code. Treat unexpected
realm referrals as soft errors, in case some intermediate KDC
disagrees with client regarding a transit path.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17579
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 28 Dec 2005 23:02:32 +0000 (23:02 +0000)]
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Cause free_tgt and
free_otgt to track the states of tgt and otgt correctly, to avoid
a double-free condition which previously happened when this
function returned to krb5_get_credentials(), which proceeded to
free a previously freed TGT in the returned TGT list.
ticket: 3313
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17578
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 22 Dec 2005 05:10:23 +0000 (05:10 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17574
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 22 Dec 2005 05:08:11 +0000 (05:08 +0000)]
Looks like the current Red Hat gcc on Athena emits duplicates and "./foo.h",
neither of which we've properly addressed before.
* depfix.pl (uniquify): New subroutine.
(do_subs_2): Use it.
(do_subs): Fix substitution pattern for " ./".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17573
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 20 Dec 2005 21:35:53 +0000 (21:35 +0000)]
Include krb5.h after k5-int.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17572
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 10:28:39 +0000 (10:28 +0000)]
Rename "modules" to "plugins", and fix up makefile variables etc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17565
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 03:55:02 +0000 (03:55 +0000)]
* Makefile.in (all-unix): Do depend on all-libs.
* test/Makefile.in (PROG_LIBPATH, DB_DEPLIB): Look for library in .. instead
of $TOPLIBD.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17564
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 03:34:50 +0000 (03:34 +0000)]
* k5-thread.h (USE_PTHREAD_LOCK_ONLY_IF_LOADED): Define any time
HAVE_PRAGMA_WEAK_REF is defined.
ticket: 3293
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17563
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 14 Dec 2005 19:21:10 +0000 (19:21 +0000)]
KFW - Correct identity validation algorithm
Do not restrict the characters permitted in identity names
ticket: new
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17557
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 13 Dec 2005 22:06:29 +0000 (22:06 +0000)]
KFW 3.1 - Add missing include path
The leashwin.h file needs to be accessible via the INCLUDE path.
ticket: new
tags: pullup
target_version: 1.3.4
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17556
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 8 Dec 2005 06:58:15 +0000 (06:58 +0000)]
Network Identity Manager - Fix module loading when en_US locale cannot be loaded
The identity manager is designed for internationalization. However, it only ships with
modules for the en_US locale. Designing modules for other locales was beyond our the
reach of available resources. This patch will force the use of en_US when modules
matching the installed user and system locales cannot be found.
ticket: new
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17555
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 7 Dec 2005 23:14:08 +0000 (23:14 +0000)]
* k5-thread.h (k5_mutex_lock_update_stats) [__GNUC__]: Use an inline function,
to avoid "statement with no effect" warnings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17554
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 01:06:13 +0000 (01:06 +0000)]
KFW 3.0 Final Network Identity Manager updates
Add new documentation files
Add new icons
Add "set default" functionality to the New Credentials dialog
Remove inconsistencies in the Options configuration dialog
Replace the menu bar so that it responds to Alt- and keyboard
shortcuts
Fix an --autoinit race condition
many more things....
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17546
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 00:06:00 +0000 (00:06 +0000)]
KFW 3.0 Final Wix installer updates
update for final release
add new netidmgr documentation: user and development
allow Leash to be used instead of NetIDMgr via a transform
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17545
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 00:00:35 +0000 (00:00 +0000)]
KFW 3.0 Final NSIS installer updates
update for release build
add new documentation links for user and sdk
remove --autoinit startup parameter as it interferes
with the new registry based configuration
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17544
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 2 Dec 2005 22:19:07 +0000 (22:19 +0000)]
* Makefile.in (t_crc): Build against support library.
(check-unix): Use $(RUN_SETUP).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17543
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 2 Dec 2005 20:45:33 +0000 (20:45 +0000)]
* kdb5.c (kdb_load_library): Make dbpath_names static, to keep Solaris native
compiler happier.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17537
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 17:24:05 +0000 (17:24 +0000)]
Update to latest images
ticket: 3263
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17536
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:34:34 +0000 (10:34 +0000)]
Network Identity Manager updates for KFW 3.0 Beta 3
Fix the handling of case sensitive names being stored in the
registry. Only apply case sensitive encoding logic to the
keys below the NetIdMgr key.
Fix the importing of credentials from MSLSA:
Apply an ugly hack to krb5configcc.c that forces _WIN32_WINNT
to 0x0501 for the one file so that the executable can be built
as APPVER=5.0 and yet still gain access to balloon tips on XP
and above.
ticket: new
component: windows
status: open
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17535
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:30:57 +0000 (10:30 +0000)]
KFW Network Provider updates for KFW 3.0 Beta 3
Wrap debugging statements
Fix bug in KFW_get_cred that prevents acquisition of
credentials.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17534
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:29:29 +0000 (10:29 +0000)]
Wix MSI installer for KFW 3.0 Beta 3
Add operating system version check to ensure it is not
installed on Windows 95, 98, ME or NT 4.0
Break out the license text into its own file
Restructure the installer to allow either NetIdMgr or Leash
to be selected (by transform only) as the credentials manager.
The default is to use NetIdMgr.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17533
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:27:22 +0000 (10:27 +0000)]
NSIS installer for KFW 3.0 Beta 3
Add an operating system version check to prevent installation
on Windows 95, 98, ME, and NT 4.0.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17532
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:24:48 +0000 (10:24 +0000)]
Increase size of PurgeRequest buffers for MSLSA
Increase the size of the PurgeRequest buffers for MSLSA.
Windows 2003 SP1 is writing beyond the end of the buffer
during the Lsa call.
ticket: new
status: resolved
component: krb5-libs
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17531
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 18:28:08 +0000 (18:28 +0000)]
Restore unintentional deletions between r17518:17519
ticket: 3254
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17526
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 16:06:00 +0000 (16:06 +0000)]
Remove the case sensitive comparisions of registry entry
and schema strings. Microsoft uses HKLM\"SOFTWARE" and
HKCU\"Software". This means the encoding schema that was
selected does not work and the conflict in case prevents
plugins from being loaded.
Better to enable plugins to work than to allow two realms
that differ only by case on the same platform during the
beta.
ticket: 3253
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17523
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 13:19:08 +0000 (13:19 +0000)]
correct installation of krb4_en_us.dll to use the correct name
ticket: 3256
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17522
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 05:26:14 +0000 (05:26 +0000)]
Update NSIS installer for KFW 3.0.0 Beta 2
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17521
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 04:33:54 +0000 (04:33 +0000)]
Updates to Wix installer source for KFW 3.0 Beta 2
- Updates all strings
- Creates shortcuts for netidmgr.exe and netidmgr.chm
- Adds KFW Logon Network Provider
Known bugs:
- the old Leash Documentation PDF still has a shortcut
- specifying the WorkingDirectory does not work
ticket: new
component: windows
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17520
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:30:10 +0000 (22:30 +0000)]
execute wconfig on src/windows/kfwlogon/Makefile.in
ticket: 3254
tags: pullup
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17519
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:22:43 +0000 (22:22 +0000)]
KFW Logon Network Provider
The Logon Network Provider works like the OpenAFS Integrated
Logon. It uses the username entered by the user and the
default realm obtained from krb5.ini and the user entered
password. If possible, tickets are obtained and imported
into the user's CCAPI credential cache.
ticket: new
component: windows
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17518
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:13:56 +0000 (22:13 +0000)]
Forgot to update the Windows configuration
ticket: 3253
tags: pullup
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17517
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:05:23 +0000 (22:05 +0000)]
KFW Network Identity Manager (Beta 2)
All features completed except for:
* Debug Window
* KRB5.INI (aka Realm) Editor
* Column Selection
* Graphics are incomplete
* Documentation is incomplete
ticket: new
status: resolved
component: windows
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17516
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 07:38:45 +0000 (07:38 +0000)]
Tru64 compilation fails after k5-int.h/krb5.h changes
Due to some silliness in db-config.h and the Tru64 system header files, an
accidental change in the order of inclusion of certain headers caused the build
to fail.
With this patch, "make all" succeeds, but "make check" fails partway through;
I'm still investigating, and don't know at this point if there are additional
compilation problems.
* policy_db.h: Include db.h after gssrpc/types.h, to fix compilation on Tru64.
ticket: new
target_version: 1.4.4
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17515
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 04:40:49 +0000 (04:40 +0000)]
* network.c (listen_and_process): Make local variable 'sout' static
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17513
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 04:31:03 +0000 (04:31 +0000)]
* shlib.conf (*-*-solaris*): Include $(CFLAGS) in LDCOMBINE. Don't use
compiler command-line options for initializers for Solaris 7 and earlier native
compilers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17512
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 02:51:15 +0000 (02:51 +0000)]
* Makefile.in (test_getpw.$(OBJEXT)): New intermediate target.
(test_getpw): Don't build directly from source.
(test_getsockname): New target.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17511
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 02:49:47 +0000 (02:49 +0000)]
* test_getsockname.c: Include autoconf.h.
(main): Fix type of variable 'i' used for size of socket address.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17510
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 29 Nov 2005 00:19:58 +0000 (00:19 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17505
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 29 Nov 2005 00:15:24 +0000 (00:15 +0000)]
don't break make depend in lib/crypto on k5-int.h ordering
* t_cts.c, vectors.c: Don't include krb5.h.
ticket: new
tags: pullup
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17504
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 02:05:16 +0000 (02:05 +0000)]
ignore some files generated via make check
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17500
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:54:58 +0000 (01:54 +0000)]
* t_hmac.c, t_pkcs5.c: Don't include krb5.h
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17499
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:46:39 +0000 (01:46 +0000)]
* Makefile.in (osconf.h): Always remove osconf.new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17498
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:43:43 +0000 (01:43 +0000)]
ignore built fakeka
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17497
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:37:56 +0000 (01:37 +0000)]
* fakeka.c (main): Pass extra null-pointer argument to kadm5_init_with_password
for new db_args argument added by DAL changes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17496
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:29:45 +0000 (01:29 +0000)]
* fakeka.c: Include errno.h
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17495
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:22:06 +0000 (01:22 +0000)]
Fix additional cases where krb5.h is included before k5-int.h. In most cases,
it suffices to remove the inclusion of k5-int.h, sometimes including errno.h or
another header. In a couple cases, include order has been changed, or k5-int.h
has been included instead of krb5.h.
ticket: 3236
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17494
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 17 Nov 2005 04:05:39 +0000 (04:05 +0000)]
add a bunch of ignores for things built during a normal in-tree build
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17492
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 15 Nov 2005 00:31:41 +0000 (00:31 +0000)]
This commit ensures that all files in the library include
k5-int.h before krb5.h is included either directly or
indirectly. This is to allow Kerberos to use pre-processor
symbols to choose configurations of C run time library headers
without affecting third party applications.
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17489
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 15 Nov 2005 00:16:17 +0000 (00:16 +0000)]
* Correct function prototypes that should have been using
krb5_timestamp in order to prevent type conflicts if
krb5_timestamp ever becomes a 64-bit value
* Force the use of 32-bit time_t with Microsoft's VS 2005
compiler on 32-bit platforms
* Test for inclusion of krb5.h before k5-int.h
ticket: 2883
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17488
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 3 Nov 2005 21:49:00 +0000 (21:49 +0000)]
mkrel should delete .svn directories
* mkrel: Delete .svn directories to avoid pathname length bloat.
ticket: new
target_version: 1.4.3
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17480
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 2 Nov 2005 01:14:30 +0000 (01:14 +0000)]
Initial Commit Network Identity Manager for Windows
Initial commit of Network Identity Manager for KFW 3.0 Beta 1
ticket: new
tags: pullup
component: windows
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17476
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 1 Nov 2005 04:25:50 +0000 (04:25 +0000)]
New NSIS installer for KFW 3.0 Beta 1
- adds support for Network Identity Framework
- removes leash32.exe
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17475
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 1 Nov 2005 04:23:52 +0000 (04:23 +0000)]
For KFW 3.0 Beta 1
- supports Network Identity Manager framework
- moves leash32.exe to a new disabled component
- auto-generates a new product id with each build
ticket:new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17474
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 31 Oct 2005 21:37:26 +0000 (21:37 +0000)]
* gssapi32.def: export missing functions
gss_krb5_set_allowable_enctypes
gss_krb5_export_lucid_sec_context
gss_krb5_free_lucid_sec_context
ticket: 3219
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17470
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 31 Oct 2005 21:37:05 +0000 (21:37 +0000)]
* gssapi32.def: export missing functions
gss_krb5_set_allowable_enctypes
gss_krb5_export_lucid_sec_context
gss_krb5_free_lucid_sec_context
ticket: 3219
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17469
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 31 Oct 2005 19:23:19 +0000 (19:23 +0000)]
* acquire_cred.c (acquire_init_cred):
If a specific principal has been requested, attempt to acquire
tickets and set the ccache name in the context to the ccache
containing the tickets if obtained. (KFM/KFW)
* ccdefault.c:
(krb5int_cc_default) - add KFW support for multiple ccaches
ticket: 3223
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17468
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 28 Oct 2005 00:33:43 +0000 (00:33 +0000)]
* aclocal.m4 (K5_AC_INIT): Initialize build_dynobj to no
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17467
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Thu, 27 Oct 2005 22:41:16 +0000 (22:41 +0000)]
When passed GSS_C_INITIATE and a non-NULL desired name, gss_acquire_cred
should search the available credentials caches rather than simply failing
if tickets for the desired client principal are not in the default ccache.
(this is the KfM-specific portion of the patch -- still need KfW portion)
ticket: 3223
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17466
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 09:38:05 +0000 (09:38 +0000)]
If configure scripts set build_dynobj=yes, force build of shared objects and
not static objects; set it in the db2 directories. Fix up some bugs in Mac
support just checked in for building plugin modules.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17461
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 07:02:41 +0000 (07:02 +0000)]
Remove dependency listing on old depfix.sed
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17460
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 07:02:06 +0000 (07:02 +0000)]
Rename depfix2.pl to depfix.pl
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17459
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 06:59:22 +0000 (06:59 +0000)]
Roll all the "make depend" transformations into one perl script
* util/depfix2.pl: Incorporate all substitutions from depfix.sed.
* util/depfix.sed: Deleted.
* config/post.in (.depend): Don't run sed, just use perl.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17458
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 05:52:57 +0000 (05:52 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17457
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 05:19:45 +0000 (05:19 +0000)]
Allow dynamic-object dependencies and build flags to be specified as distinct from
shared-library dependencies and flags. Define them for the Mac, default to same as
shared-library versions on other platforms.
* config/shlib.conf: Set DYNOBJ_EXPDEPS and DYNOBJ_EXPFLAGS.
(*-*-darwin*): Change MAKE_DYNOBJ_COMMAND definition to use DYNOBJ_EXPFLAGS and
DYNOBJ_LOADER_PROG instead of SHLIB_EXPFLAGS and a hardcoded pathname to the KDC binary,
respectively.
* config/pre.in (DYNOBJ_EXPDEPS, DYNOBJ_EXPFLAGS): New variables.
* config/libnover.in ($(LIBBASE)$(DYNOBJEXT)): Use DYNOBJ_EXPDEPS instead of SHLIB_EXPDEPS
in dependencies.
* aclocal.m4 (KRB5_BUILD_LIBRARY_WITH_DEPS): Substitute DYNOBJ_EXPDEPS and DYNOBJ_EXPFLAGS.
* modules/kdb/db2/Makefile.in (DYNOBJ_LOADER_PROG, DYNOBJ_EXPFLAGS_WITH_LOADER,
DYNOBJ_EXPDEPS_WITH_LOADER): New variables.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17456
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 27 Oct 2005 03:24:53 +0000 (03:24 +0000)]
* aclocal.m4 (KRB5_AC_INET6): Drop enable/disable-ipv6 option; emit a warning for it for
now, and always do use-if-available.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17455
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 26 Oct 2005 21:56:02 +0000 (21:56 +0000)]
delete svn:mime-type properties on .hin files, etc
Delete some svn:mime-type properties on .hin files and some other
things in order to prevent files from being erroneously treated as
binary.
ticket: new
target_version: 1.4.3
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17452
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 25 Oct 2005 19:15:24 +0000 (19:15 +0000)]
* ac_check_krb5.m4: Set LIBS rather than LDFLAGS
ticket: 2923
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17451
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Oct 2005 20:03:44 +0000 (20:03 +0000)]
Delete setting and testing of STAT_ONCE_PER_SECOND, just always do it
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17449
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Oct 2005 01:36:25 +0000 (01:36 +0000)]
Renamed variable 'log' to 'logfile' and made it static
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17448
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Oct 2005 01:32:57 +0000 (01:32 +0000)]
reindent to style in doc/coding-style, via gnu indent
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17447
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Oct 2005 01:31:30 +0000 (01:31 +0000)]
* coding-style: Modern (gnu) indent requires a number with -ip
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17446
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Oct 2005 01:17:20 +0000 (01:17 +0000)]
Jeff's patches for a multi-threaded gss-sample suite, modified to not break the
single-threaded UNIX case. (Tested on Linux/x86.) Needs stylistic cleanup at
some point.
ticket: 3214
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17445
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 20 Oct 2005 20:51:30 +0000 (20:51 +0000)]
win-mac.h: Add definitions for int32_t and uint32_t
ticket:new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17441
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 20 Oct 2005 20:24:21 +0000 (20:24 +0000)]
cc_mslsa.c:
- provide defaults for client and server names in purge
ticket routines
- properly size the buffers used to store the names.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17440
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 20 Oct 2005 20:03:03 +0000 (20:03 +0000)]
gssapi_krb5.hin: Add missing GSS_DLLIMP modifiers to all exported
data objects exported from the gssapi32.lib so that the applications
that link to it know that it is there.
ticket: 3189
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17439
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 20 Oct 2005 17:20:43 +0000 (17:20 +0000)]
The GINA was being linked to the single threaded runtime
library which was causing thread safety issues. Replace
with libcmt.lib.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17437
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 19 Oct 2005 23:36:16 +0000 (23:36 +0000)]
* Makefile.in (t_ser): Add dl library and thread link options, since kdb5
library is linked in and needs them.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17436
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 19 Oct 2005 22:47:35 +0000 (22:47 +0000)]
* arcfour_s2k.c (asctouni): Counter should be size_t, like len
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17435
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 19 Oct 2005 22:42:20 +0000 (22:42 +0000)]
This fixes an all-too-frequent nightly-testing failure on Tru64
* default.exp (setup_krb5_conf): Don't include a non-listening KDC port in the
client's config file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17434
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 18 Oct 2005 22:47:48 +0000 (22:47 +0000)]
* ac_check_krb5.m4: Example autoconf macro to use krb5-config for
setting build flags for applications.
ticket: 2923
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17433
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 14 Oct 2005 01:19:02 +0000 (01:19 +0000)]
* libkadm5srv.exports: Don't export internal error-table symbols, or osa*
symbols that no longer exist in this library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17428
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 14 Oct 2005 01:17:48 +0000 (01:17 +0000)]
* libkadm5clnt.exports: Don't export internal error-table symbols
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17427
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 14 Oct 2005 01:12:58 +0000 (01:12 +0000)]
* lock-test.c (main): Don't call error table initialization routines;
kadm5_init* routines will do that.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17426
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 14 Oct 2005 01:06:25 +0000 (01:06 +0000)]
* Makefile.in (SHLIB_EXPLIBS): Revert 10-04 change; add support library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17425
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 13 Oct 2005 22:42:26 +0000 (22:42 +0000)]
* kdc_preauth.c (etype_info_as_rep_helper): New function; shared
code for handling ETYPE-INFO and ETYPE-INFO2. Checks request for
"newer" enctypes and does not return an ETYPE-INFO if any "newer"
enctypes are present in the request. Reported by Will Fiveash.
(return_etype_info2, return_etype_info): Implement in terms of
etype_info_as_rep_helper.
ticket: 3207
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17424
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 13 Oct 2005 01:23:02 +0000 (01:23 +0000)]
* shlib.conf: Change aix5.3 section to aix5.*. Change aix* section to aix4.*,
and set DYNOBJEXT and MAKE_DYNOBJ_COMMAND.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17423
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 13 Oct 2005 01:20:42 +0000 (01:20 +0000)]
* libnover.in (PARSE_OBJLISTS): Die on warnings (including input file not found).
* lib.in (PARSE_OBJLISTS): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17422
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 12 Oct 2005 20:48:36 +0000 (20:48 +0000)]
* ktutil_funcs.c (ktutil_add): Fix malloc size botches reported by
Will Fiveash.
ticket: 3002
target_version: 1.4.3
tags: pullup
component: krb5-admin
version_reported: 1.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17421
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 12 Oct 2005 19:56:41 +0000 (19:56 +0000)]
* kdc_preauth.c (return_etype_info2): Apply patch from Will
Fiveash to use reply key's enctype, not the long-term key's
enctype, to avoid some enctype similarity problems.
ticket: 3205
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17420
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 12 Oct 2005 04:09:19 +0000 (04:09 +0000)]
* misc.h, misc.c (schpw_util_wrapper): Rename from
chpass_util_wrapper to make functionality a little more obvious.
* schpw.c (process_chpw_request): Update for rename of
chpass_util_wrapper.
* misc.c (randkey_principal_wrapper_3, schpw_util_wrapper)
(chpass_principal_wrapper_3): Update for check_min_life.
* misc.h, misc.c (check_min_life): Change to take return error
string from KADM5_PASS_TOOSOON, adapted from patch from Shawn
Emery.
ticket: 3092
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17417
dc483132-0cff-0310-8789-
dd5450dbe970