Theodore Tso [Sat, 18 May 1996 06:07:05 +0000 (06:07 +0000)]
Define $library from the positional arguments before --force uses $library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8046
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Sat, 18 May 1996 06:04:00 +0000 (06:04 +0000)]
Fix memory leak. Free tempbuf before returning
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8045
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Sat, 18 May 1996 05:55:59 +0000 (05:55 +0000)]
Define MD5_K5BETA_COMPAT and MD5_K5BETA_COMP_DEF so that we continue
doing things the wrong (broken) way. All hail backwards
compatibility.... The code now generates the old checksum, but it
will verify both the old and the correct checksum formats.
Also fixed two bugs in the "correct" MD5_CRYPTO implementation; use a
zero initialization vector, and calculate the confounder at the
beginning of the message, not at the end.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8044
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Sat, 18 May 1996 05:55:25 +0000 (05:55 +0000)]
Define MD4_K5BETA_COMPAT and MD4_K5BETA_COMP_DEF so that we continue
doing things the wrong (broken) way. All hail backwards
compatibility.... The code now generates the old checksum, but it
will verify both the old and the correct checksum formats.
Also fixed two bugs in the "correct" MD4_CRYPTO implementation; use a
zero initialization vector, and calculate the confounder at the
beginning of the message, not at the end.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8043
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Fri, 17 May 1996 21:38:25 +0000 (21:38 +0000)]
update randkey to return an array of keyblocks, not key_data; update
get_principal to take pointer to struct, not pointer to pointer to
struct
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8041
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 17 May 1996 18:21:41 +0000 (18:21 +0000)]
Correctly implement getsockname(), so it does getsockname(), not
getpeername(), and add the function getpeername().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8040
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Fri, 17 May 1996 15:42:30 +0000 (15:42 +0000)]
define USE_KADM5_API_VERSION_n
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8039
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Thu, 16 May 1996 19:28:04 +0000 (19:28 +0000)]
separate from server and tools information, rename into separate document
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8034
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Thu, 16 May 1996 19:19:39 +0000 (19:19 +0000)]
define KADM5_API_VERSION_2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8033
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 16 May 1996 02:33:38 +0000 (02:33 +0000)]
Interim checkin of most of jhawks comments. Still a few more to do
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8032
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Wed, 15 May 1996 15:03:13 +0000 (15:03 +0000)]
first, rough cut at OV -> kadm5 naming
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8031
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 15 May 1996 01:58:21 +0000 (01:58 +0000)]
(AC_CHECK_DBM_PROTOS): If the test had already been run and the result
cached, arguments $3 and $4 were never executed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8030
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:05:28 +0000 (01:05 +0000)]
* k5seal.c k5unseal.c util_cksum.c:
setup krb5_checksum "contents" and "length" field prior to
calling krb5_calculate_checksum().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8029
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:04:37 +0000 (01:04 +0000)]
Fixed changelog to reflect previous checkin
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8028
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:03:37 +0000 (01:03 +0000)]
* des_crc.c des_md5.c:
set the length field of the cksum structure.
* des3_sha.c:
Increase the confounder length to 24 bytes.
Set the length of the cksum structure.
* cryptoconf.c:
sha-des3 cksum has been replaced by hmac-sha
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8027
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:01:41 +0000 (01:01 +0000)]
* .Sanitize: reflect current files
* Makefile.in: added hmac-sha
* hmac_sha.c: implement HMAC-SHA
* sha_crypto.c: use hmac-sha
* sha_glue.c: sanity check the passed in checksum length
* shs.h: replaced sha-des3 with hmac-sha
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8026
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:00:36 +0000 (01:00 +0000)]
* md5crypto.c md5glue.c:
ensure the cksum content length is sufficient.
* t_cksum.c: initialize cksum.length
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8025
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 01:00:03 +0000 (01:00 +0000)]
* md4crypto.c md4glue.c:
ensure the cksum content length is sufficient
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8024
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 00:59:30 +0000 (00:59 +0000)]
* des_int.h: the cs_entry routines in cbc_cksum.c are now static
* Makefile.in: removed cs_entry.c
* cbc_cksum.c:
caller is responsible for allocating cksum->contents
and indicate the allocated amount in cksum->length.
the cs_entry routines are now static and the cs_entry
structure is now in this file to enforce proper use.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8023
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 00:58:34 +0000 (00:58 +0000)]
crc.c: ensure the cksum length is sufficient
crc-test.c: set the cksum length field
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8022
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 00:57:15 +0000 (00:57 +0000)]
* mk_req_ext.c mk_safe.c send_tgs.c:
set the length field of the krb5_checksum structure before
calling krb5_calculate_checksum.
* str_conv.c: replaced sha-des3 cksum with hmac-sha.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8021
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 15 May 1996 00:55:47 +0000 (00:55 +0000)]
replaced CKSUMTYPE_SHA_DES3 with CKSUMTYPE_HMAC_SHA
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8020
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 14 May 1996 08:51:15 +0000 (08:51 +0000)]
Remove old, outdated library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8019
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 14 May 1996 08:42:56 +0000 (08:42 +0000)]
Change call to krb5_auth_con_setcksumtype to use
krb5_auth_con_set_req_cksumtype by default instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8018
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 14 May 1996 08:41:32 +0000 (08:41 +0000)]
ser_ctx.c (krb5_context_size, krb5_context_externalize,
krb5_context_internalize): Add missing fields from the serialized
context: clockskew, default_kdc_req_sumtype, default_ap_req_sumtype,
default_safe_sumtype, kdc_default_options, library_options,
profile_secure, fcc_default_format, scc_default_format.
ser_actx.c (krb5_auth_context_size, krb5_auth_context_externalize,
krb5_auth_context_internalize): Serialize the two fields req_cksumtype
and safe_cksumtype, instead of the one cksumtype field.
mk_safe.c (krb_mk_safe): Use safe_cksumtype instead of cksumtype in
the auth context.
mk_req_ext.c (krb5_mk_req_extended): Use req_cksumtype instead of
cksumtype in the auth context.
init_ctx.c (krb5_init_context): Add support for new profile
relations libdefaults/tkt_lifetime, libdefaults/kdc_req_checksum_type,
libdefaults/ap_req_cksumtype, libdefaults/safe_checksumtype, and
libdefaults/kdc_default_options.
auth_con.h: Remove old cksumtype element, and replace it with
req_cksumtype and safe_cksumtype.
auth_con.c (krb5_auth_con_init): Initialize the req_cksumtype and
safe_cksumtype from the context's default req_cksumtype and
safe_cksumtype. (krb5_auth_con_set_req_cksumtype,
krb5_auth_con_set_safe_cksumtype): New functions, to replace old
krb5_auth_con_setcksumtype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8017
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 14 May 1996 08:39:27 +0000 (08:39 +0000)]
k5-int.h: Added new field values for ap_req_sumtype and safe_sumtype.
Added new convenience function for verifying magic numbers:
KRB5_VERIFY_MAGIC.
krb5.hin (krb5_auth_con_set_req_cksumtype, rb5_auth_con_set_safe_cksumtype):
Added prototypes of new functions, to replace old
krb5_auth_con_setcksumtype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8016
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 14 May 1996 00:43:00 +0000 (00:43 +0000)]
Change the default ticket lifetime to something reasonable (10 hours,
instead of 10 minutes). Also change the label of this parameter to be
tkt_lifetime.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8015
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 13 May 1996 19:30:26 +0000 (19:30 +0000)]
* Makefile.in (SHLIB_LIBS): For shared library, add dependency on
libkrb5.so
* configure.in (CRYPTO_SH_VERS): Pass krb5 shared library version
to Makefile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8014
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 13 May 1996 11:54:07 +0000 (11:54 +0000)]
configure.in heuristic.c:
Change the euid before opening the source ccache, so we don't use
someone else's ccache.
authorization.c:
users only in /.k5login were not permitted to use the '-e cmd' feature.
The man page does not indicate that this should not be permitted...
Also, lots of indentation cleanup was done... I couldn't read the code before.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8013
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 12 May 1996 11:47:13 +0000 (11:47 +0000)]
Back out change to libupdate.sh.
The problem is that for directories containing multiple subdirs, the
current procedure is to do a foreach and invoke libupdate --force for
each one. This is broken as it caused the library to be removed each time.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8012
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 11 May 1996 21:41:12 +0000 (21:41 +0000)]
When invoked with --force, do not use variable before being set
NetBSD complained about trying to use the command "rm -f"
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7980
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sat, 11 May 1996 21:38:18 +0000 (21:38 +0000)]
Copy sizeof(mit_des_cblock), not sizeof(key) so that we are getting the
full DES key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7979
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sat, 11 May 1996 14:13:50 +0000 (14:13 +0000)]
configure.in: Need to include sys/types.h before regexp.h in test to
see if regcomp works.
NetBSD required this so that size_t is defined.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7978
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 22:50:32 +0000 (22:50 +0000)]
removed des3-cbc-md5 support
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7977
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Fri, 10 May 1996 16:55:07 +0000 (16:55 +0000)]
* shs.c (longReverse): Remove extraneous \.
(expand): Start #define in first column.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7976
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:35:16 +0000 (07:35 +0000)]
added des3_raw.c and sha..
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7975
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:34:24 +0000 (07:34 +0000)]
replaced des3_md5.c with des3_sha.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7974
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:26:30 +0000 (07:26 +0000)]
removed des3-md5 support (replaced with des3-sha)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7973
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:26:03 +0000 (07:26 +0000)]
replaced des3-md5 with des3-sha
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7972
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:22:20 +0000 (07:22 +0000)]
Removed des3-md5 support
Added support for sha cksum types and des3-sha.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7971
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:21:04 +0000 (07:21 +0000)]
Replaced des3-md5 with des3-sha (also added sha cksumtype)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7970
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:20:07 +0000 (07:20 +0000)]
Obsolete file (replaced des3-md5 with des3-sha)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7969
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:19:22 +0000 (07:19 +0000)]
Replaced des3-md5 with des3-sha
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7968
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:18:21 +0000 (07:18 +0000)]
Replace des3-md5 with des3-sha
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7967
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 10 May 1996 07:16:28 +0000 (07:16 +0000)]
NIST-SHA support
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7966
dc483132-0cff-0310-8789-
dd5450dbe970
Barry Jaspan [Thu, 9 May 1996 19:33:49 +0000 (19:33 +0000)]
add new function ovsec_kadm_flush
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7964
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 9 May 1996 18:33:59 +0000 (18:33 +0000)]
Remove unused file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7956
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 9 May 1996 16:02:10 +0000 (16:02 +0000)]
Better handling of the principal max_life..
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7952
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 9 May 1996 16:01:08 +0000 (16:01 +0000)]
krlogind.c krshd.c:
Use the default service principal as the basis for the rcache name.
login.c:
SVR4 systems typically do not do mail/motd checks in login; they
do it in the profiles (/etc/profile). Follow that convention...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7951
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 9 May 1996 15:59:11 +0000 (15:59 +0000)]
Use the default service principal (don't assume it is "host") as the
basis for the replay cache name.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7950
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 9 May 1996 15:57:58 +0000 (15:57 +0000)]
Don't skip keytab entries with kvno=0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7949
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 8 May 1996 20:55:36 +0000 (20:55 +0000)]
convert has been removed
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7946
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 8 May 1996 20:48:45 +0000 (20:48 +0000)]
Removing unbuilt directory from source tree. The functionality was
merged with kdb5_edit August 1995.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7944
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 8 May 1996 01:05:41 +0000 (01:05 +0000)]
des425 needs to be compiled after krb5 as des425 depends on krb5_free_keyblock
Turns out that link order in aclocal.m4 already assumed this.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7924
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 7 May 1996 23:53:23 +0000 (23:53 +0000)]
Handle compiling with BERK_DB without dbm available. (Linux when
the option --with-kdb-db=db)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7923
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 23:22:02 +0000 (23:22 +0000)]
Don't do more than the necessary encryptions for a single cblock length
random key. Only the larger cblocks need a second wrap-around cbc encrypt
to prevent leaking a codebook.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7922
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 23:07:03 +0000 (23:07 +0000)]
We are providing 3des routines in libcrypto..
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7921
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 23:06:19 +0000 (23:06 +0000)]
Somehow I missed this file during my previous checkin... New 3des random
function support
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7920
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 7 May 1996 22:23:12 +0000 (22:23 +0000)]
Mark's changes for ticket validation
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7918
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:39:22 +0000 (20:39 +0000)]
Pass the eblock to the init_random_key and finish_random_key functions
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7914
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:19:59 +0000 (20:19 +0000)]
Use the revamped random number routines
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7913
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:18:41 +0000 (20:18 +0000)]
Use the new 3des random number generator
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7912
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 7 May 1996 20:17:36 +0000 (20:17 +0000)]
New DES random number generation. For regular DES, it is nearly equivalent
(an extra DES encryption now happens). For 3des, it is a substantially
better setup (the original one was a placeholder); it may not be the final
one, but at least it is not as weak as the previous version. (This checkin
does not include the proposed API changes.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7911
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 7 May 1996 01:35:05 +0000 (01:35 +0000)]
(clean-unix): Remove libgssapi_krb5.stamp
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7909
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 7 May 1996 01:14:09 +0000 (01:14 +0000)]
Use a wrapper script for the rcp started from kshd. This change cleans up the
test as written.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7908
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:25:53 +0000 (16:25 +0000)]
Fixed the abstraction violation, where the code knew the details about the
cryptosystem structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7907
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:22:15 +0000 (16:22 +0000)]
The fallback to slave kdc's wasn't working because the code did not handle
the error return "KRB524_NOTRESP".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7906
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 6 May 1996 16:19:33 +0000 (16:19 +0000)]
Include the uid in the replay cachename
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7905
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 16:11:21 +0000 (16:11 +0000)]
* rsh.exp: Setup a wrapper script in executing klist in the remote
shell so that environment variables are properly set.
* kadmin.exp: (kpasswd_cpw): After giving new password, wait for
the newline or we hang waiting for the process to finish.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7904
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 16:09:31 +0000 (16:09 +0000)]
Use a wrapper script when invoking login.krb5 in order for shared
libraries to be setup properly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7903
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 6 May 1996 15:57:21 +0000 (15:57 +0000)]
* default.exp: Add procedure setup_wrapper to first setup shared library
environment variables and the exec program.
This allows for easy testing of "rsh $hostname klist" which would
normally fail due to shared libraries not being setup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7902
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 5 May 1996 13:47:06 +0000 (13:47 +0000)]
preauth.c: Add const and casts as needed to handle warnings..
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7901
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 5 May 1996 13:45:16 +0000 (13:45 +0000)]
* default.exp: For stty_init set to \^h as on some /bin/sh, ^ is
treated as a pipe.
I had never heard of this until under DU 3.2 the tests started failing
until I read the sh man page. Apparently ^ is for some very old
compatibility.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7900
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:21:25 +0000 (02:21 +0000)]
whitespace
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7899
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:20:51 +0000 (02:20 +0000)]
work around process group problems; recognize certain failure modes (e.g.,
connection closed) better; work around gnu getopt problem
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7898
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:11:35 +0000 (02:11 +0000)]
cygnus merge: sscanf workaround; logs for sam tests
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7897
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 02:04:10 +0000 (02:04 +0000)]
* rsh.exp: Add tests for ticket forwarding
* kadmin.exp and gssapi.exp: Fix syntax of expect_after blocks. The -i $foo
must be inside the {, and the { must be by itself at the end of the line.
* gssftp.exp (start_ftp_daemon): use krb5.conf, not krb.conf
* gssftp.exp (ftp_test): Explicitly select binary mode.
* kadmin.exp: Don't look at output from kadmind to drain it; that problem is
handled elsewhere now.
* kadmin.exp (kadmin_delete, kamind_add, kadmin_add_rnd, kadmin_examine,
kadmin_cpw, kadmin_cpw_rnd, kadmin_modify, kadmin_rename, kadmin_list,
kadmin_extract, kadmin_extractv4): check for "lost KDC" as well.
* kadmin.exp (kadmin_show): extend regexp to match current kadmin interface.
(kadmin_add): match more of extended output (tentative change, should be
expanded later to actually check the values.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7896
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 01:11:12 +0000 (01:11 +0000)]
Tue Apr 2 22:22:47 1996 Chris Provenzano <proven@cygnus.com>
* default.exp : Do an stty to set kill and erase correctly. Things don't work
if kill is set to '@'.
Fri Mar 29 15:02:32 1996 Chris Provenzano <proven@cygnus.com>
* default.exp : Always use variable BINSH instead of sh. Use -f flag with
kinit to get forwardable tickets. Setup kdc.conf to allow forwardable tickets.
Thu Mar 28 17:30:55 1996 Ken Raeburn <raeburn@cygnus.com>
* default.exp (touch, tail1): New proc.
(start_kerberos_daemons, stop_root_shell): Use them, and sleep built-in cmd.
Wed Mar 27 22:43:08 1996 Ken Raeburn <raeburn@cygnus.com>
* default.exp (start_kerberos_daemons): Use ">>" to avoid updating mod time on
kadmind log file.
Wed Mar 27 21:35:57 1996 Marc Horowitz <marc@mit.edu>
* default.exp: (start_kerberos_daemons): exec the kadmind inside an sh to
redirect stderr (this is a pending bug), and keep the same pid, so that
stop_kerberos_daemons doesn't leave a kadmind running.
Wed Mar 27 21:24:35 1996 Marc Horowitz <marc@mit.edu>
* default.exp: (start_kerberos_daemons): add a check for "cannot initialize
network" as a failure message to the kadmind5 startup expect checks
Wed Mar 27 21:10:47 1996 Marc Horowitz <marc@mit.edu>
* default.exp (start_kerberos_daemons): use ezra's KDC tail changes for
kadmind5, too.
* rlogin.exp (start_rlogin_daemon): start klogind with sh -c so that setsid()
won't fail due to the process already being the leader of a process group
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7895
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:42:57 +0000 (00:42 +0000)]
* kinit.c (krb5_validate_tgt): new function, takes a credential cache with an
tgt with the "invalid flag" set, and asks the kdc to validate it. Wipes cache
and stores only the newly validated credential. (After all, there won't be any
others, because the invalid krbtgt couldn't have gotten them.) Most of the code
is taken from krb5_mk_req, since it did the right thing.
(main): add -v option, validates the ticket already in the selected cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7894
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:41:19 +0000 (00:41 +0000)]
*** empty log message ***
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7893
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:22:56 +0000 (00:22 +0000)]
Tue Apr 2 22:31:48 1996 Mark Eichin <eichin@cygnus.com>
* krb5.conf.M, krb5.conf: add default_tkt_enctypes.
Wed Mar 27 22:44:36 1996 Mark Eichin <eichin@cygnus.com>
* krb5.conf, kdc.conf: specify des-cbc-crc as the only valid
enctype (but permit normal, v4, norealm, onlyrealm, and afs3
salttypes.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7892
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:21:52 +0000 (00:21 +0000)]
decls for new routines
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7891
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:17:55 +0000 (00:17 +0000)]
* get_creds.c (krb5_get_credentials_core): new function. Common part of
krb5_get_credentials and krb5_get_credentials_validate. Some formerly local
variables are now arguments.
(krb5_get_credentials): same as before, but calls _core to do some of the work.
(krb5_get_credentials_validate): uses krb5_get_cred_from_kdc_validate and only
stores the returned credential in the cache, instead of storing all of them.
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): new function. Same body as
krb5_get_cred_from_kdc, but takes one new argument, kdcopts, and combines it
with the other kdc options when calling krb5_get_cred_via_tkt. This is static
and only called by
(krb5_get_cred_from_kdc): a wrapper that provides the same function it did
before, and
(krb5_get_cred_from_kdc_validate): a wrapper that passes KDC_OPT_VALIDATE, so
that kinit can use it.
We'll probably need another one for renewing tickets as well.
* rd_req_dec.c (krb5_rd_req_decoded_opt): new function. Same body as
krb5_rd_req_decoded, but takes one new argument, check_valid_flag, to determine
whether or not to check if the "invalid flag" is set in the ticket. Also made
static, so that it is only called via:
(krb5_rd_req_decoded): wrapper for krb5_rd_req_decoded_opt that specifies the
"invalid flag" gets checked, and
(krb5_rd_req_decoded_anyflag): wrapper for krb5_rd_req_decoded_opt that
specifies that the "invalid flag" doesn't get checked. (This version is only
called from kdc_util.c:kdc_process_tgs_req.)
* str_conv.c (krb5_string_to_timestamp): double check that strptime at least
parsed *some* of the string, avoid degenerate cases from GNU libc strptime.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7890
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 4 May 1996 00:14:08 +0000 (00:14 +0000)]
* krb5_decode.c (decode_krb5_enc_tkt_part): use tagnum correctly to handle
optional starttime (previous code *always* replaced starttime with authtime.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7889
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 3 May 1996 23:58:13 +0000 (23:58 +0000)]
missing log entries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7888
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 3 May 1996 21:03:00 +0000 (21:03 +0000)]
Add code to support appropriate behavior when the input credentials is
NULL (i.e., the default credential). We use the default credential
for the "default mechanism", which is the first mechanism registered
with the library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7887
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 3 May 1996 02:20:14 +0000 (02:20 +0000)]
* ss_wrapper.c (main): Make sci_idx a global. This makes certain Cygnus
customizations simpler.
* dump.c (restore_dump): If header indicates a beta-5 dump, process it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7886
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 23:24:09 +0000 (23:24 +0000)]
missing log entries
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7885
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 22:53:35 +0000 (22:53 +0000)]
Cygnus merge: new option -s to set tgt start time
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7884
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 May 1996 01:22:45 +0000 (01:22 +0000)]
cygnus merge:
* configure.in: Fix typo in Apr 16 HP-UX change.
* state.c (envvarok): nuke all KRB5* environment variables, not just the
previously selected ones.
* telnetd.c (telnet -> doit): moved SIGTTOU handler before the first thing
which would cause the terminal driver to get upset.
* sys_term.c (line): Remove initialization silliness. The non-GNUC method was
Just Wrong, do it the other way always.
(Xline): Specify length, not contents.
* termio-tn.c (readstream_termio): new file, provides isolated version of
M_IOCTL handling for systems where termio and termios can't be compiled
together.
* termios-tn.c (readstream_termios): new file, provides isolated version of
M_IOCTL handling for systems where termio and termios can't be compiled
together.
* telnetd.c (readstream): use readstream_termios and readstream_termio to
handle getmsg with M_IOCTL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7883
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 03:30:20 +0000 (03:30 +0000)]
* Makefile.in (tgz-bin, pkgdir): New targets.
(PKGDIR, GZIPPROG): New variables.
* aclocal.m4 (WITH_NETLIB): Don't look for socket lib on Irix.
* aclocal.m4 (MAKE_SUBDIRS): Disable hack that tries to determine if "-k" or
"-i" was given.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7882
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 03:17:43 +0000 (03:17 +0000)]
Merge ... Cygnus sources, changes from Mark Eichin, Marc Horowitz, Chris
Provenzano and me:
* Makefile.in (install): Install correct set of man pages, and check for
failures.
* kshd.M, klogind.M: Renamed from kr*.M versions.
* login.M: New file. Man page for login with some description of new features.
* rlogin.M: Remove references to using program with target hostname as argv[0].
* rsh.M: Ditto. Also document -f, -F, -x options.
* login.c: Massive changes. Split much functionality out of main and into
separate file sections: terminal flag settings, Kerberos 4 and 5 support, UNIX
password support, mail check, signal handler handling, some other support
routines. Revamp controlling tty and process group handling. For AFS
configuration, use setpag and run aklog. Try validating password using krb5.
Always set tty flags, not just for rlogin session. When validating tickets,
treat an existing key file that doesn't contain the key we think we want
(possibly because DNS was spoofed) as an error condition.
* Makefile.in (LOGINLIBS): List libkrb524.a here.
(LIBOBJS): Not here.
(login.krb5): Reverse the order of LIBOBJS and LOGINLIBS.
* configure.in: Check for --with-afs. Add AFS libs and define SETPAG if
supplied.
* login.c (KRB5_GET_TICKETS, KRB4_GET_TICKETS, KRB_RUN_AKLOG): new macros
selecting single signon options. krb5.conf profile support for control over
authentication options, above the compile time selection.
(conf_affirmative): new function, recognize yes/no in profile value.
(login_get_kconf): new function, look for all [login] flags and set them in
appropriate globals (via login_conf_set array.)
(main, sleepexit, destroy_tickets): Check the new login_* flags.
(main): rename KRB4_USE_524 to KRB4_CONVERT.
* configure.in: Added checks for tcsetpgrp, tcgetpgrp, setpgid.
* krlogind.c (control): Use tcgetpgrp if it's available.
* loginpaths.h (RPATH, LPATH, LPATH_root): Define HP/UX 9.04 versions,
conditionalized on __hpux and !hpux.
* login.c and configure.in: instead of checking _IBMR2 and __sgi__, write
configure tests to check for the existence of /etc/environment and
/etc/TIMEZONE files, respectively.
* forward.c (rd_and_store_for_creds) : If chown fails then only pass failure
back if owner is different than intended owner. This is to make rsh.exp test
work without requiring root privlidges.
* login.c (main): Don't set TERM to an empty value.
(stypeof) [__hpux]: Return null if unknown.
* krlogin.c (catchild): remove hp/ux kludge because of aclocal.m4 fix.
(speeds): test __hpux for hpux speed list.
(main): test __hpux for use of FIOSSAIOSTAT and FIOSSAIOOWN
(USE_TERMIO): test __hpux for bsdtty/ptyio headers.
* krlogind.c: test __hpux for bsdtty/ptyio headers.
(doit): test __hpux for use of setpgrp2.
* krcp.c (main): test __hpux as well for remsh vs. rsh.
* krcp.c (des_write): Make sure the buffer for the encrypted data is large
enough. Only return an error in malloc fails.
* krsh.c (main): Always turn on anyport -A option.
* krlogind.c (ptsname): Declare if it's going to be used.
* krshd.c (main): Use basename of argv[0] for progname.
* login.c (dofork): On linux, TIOCNOTTY causes us to die on a SIGHUP, so don't
even try it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7881
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 01:50:53 +0000 (01:50 +0000)]
hpux is unix. really, it is
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7880
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 May 1996 00:21:05 +0000 (00:21 +0000)]
previously checked-in changes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7879
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 30 Apr 1996 23:49:37 +0000 (23:49 +0000)]
Removed duplicate #include <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7878
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 23:27:19 +0000 (23:27 +0000)]
clean up configure output style
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7877
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 23:17:33 +0000 (23:17 +0000)]
* Makefile.in (libkrb5.$(STEXT)): Set a variable with or without "--force" and
use it, instead of duplicating the rest of the code. Use LIBDONE as list to
process, so berk_db will be skipped when not in use. Check exit status of
LIBUPDATE invocation. Remove library before creating as workaround for
libupdate bug.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7876
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 22:25:26 +0000 (22:25 +0000)]
* t_ser.c (stuff): New variable.
(ser_acontext_test, ser_eblock_test, ser_cksum_test): Use it, instead of
assuming it's valid to treat &FUNCTION as a data pointer.
* conv_princ.c (sconv_list): Now const.
(krb5_*_conv_principal): Use pointer to const for it.
Tue Apr 23 19:39:59 1996 Mark Eichin <eichin@cygnus.com>
* get_creds.c (krb5_get_credentials): this isn't the kernel, so don't return
negative errno values.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7875
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 21:54:16 +0000 (21:54 +0000)]
* configure.in: Test that regcomp actually works
* Makefile.in (check-unix): Use $(RM).
* t_an_to_ln.c (main): Print principal name when an error is detected.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7874
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 30 Apr 1996 21:19:02 +0000 (21:19 +0000)]
log for mark's sam changes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7873
dc483132-0cff-0310-8789-
dd5450dbe970