krb5.git
28 years agoFri Jan 12 04:37:23 1996 Mark Eichin <eichin@cygnus.com>
Mark Eichin [Sat, 24 Feb 1996 00:34:56 +0000 (00:34 +0000)]
Fri Jan 12 04:37:23 1996  Mark Eichin  <eichin@cygnus.com>

* cnv_tkt_skey.c (krb524_convert_tkt_skey): rather than apply fit
  an extended v5 lifetime into a v4 range, give out a v4 ticket with
  as much of the v5 lifetime is available "now" instead.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7509 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoSat Feb 3 22:37:55 1996 Mark Eichin <eichin@cygnus.com>
Mark Eichin [Sat, 24 Feb 1996 00:31:42 +0000 (00:31 +0000)]
Sat Feb  3 22:37:55 1996  Mark Eichin  <eichin@cygnus.com>

* network.c (add_port): sunos realloc doesn't handle a NULL
pointer, so protect with a macro.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7508 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoone step closer to *really* only depending on krb5.conf. (I don't know
Mark Eichin [Sat, 24 Feb 1996 00:29:47 +0000 (00:29 +0000)]
one step closer to *really* only depending on krb5.conf. (I don't know
of any others, but this was a big one.)

Sat Feb 10 02:46:27 1996  Mark Eichin  <eichin@cygnus.com>

* main.c (initialize_realms): look for [kdc] profile=path for
default alternate kdc profile (environment variable still
overrides it.)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7507 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoThis is the aggregate of a bunch of fixes to kadmind (after all, some people
Mark Eichin [Sat, 24 Feb 1996 00:18:51 +0000 (00:18 +0000)]
This is the aggregate of a bunch of fixes to kadmind (after all, some people
actually use it.) Note that in admin.c, I shredded admin_add_modify and
admin_merge_dbentries, converting them to a goto-exception style, eliminating
the excessive nesting, so they were readable; having done so, admin_add_modify
turned out to be correct, and admin_merge_dbentries was "obviously" broken
in that it assigned random keys gratuitiously. Fixing this causes "modent"
to actually work, without destroying the key...

Wed Feb 21 21:26:50 1996  Mark Eichin  <eichin@cygnus.com>

* srv_main.c (xprintf): handle VARARGS.

Sun Feb 18 00:08:02 1996  Mark W. Eichin  <eichin@cygnus.com>

* admin.c (admin_merge_dbentries): rewrite for readability, and
fix the year old bug of modify randomizing the password field.
(admin_add_modify): rewrite for readability.

Fri Feb  9 20:11:50 1996  Mark Eichin  <eichin@cygnus.com>

* srv_net.c (net_init): gethostbyname doesn't use errno,
compensate by using KRB5_ERR_BAD_HOSTNAME.

Tue Dec 12 19:14:51 1995  Mark Eichin  <eichin@cygnus.com>

* admin.c (admin_merge_dbentries): new argument mod_only, to
distinguish between add and modify.
(admin_add_modify): new argument mod_only, to distinguish between
add and modify (and pass through to admin_merge_dbentries.)
(admin_add_principal, admin_modify_principal, admin_change_opwd,
admin_change_orandpw): pass flag indicating modify or add.

Tue Sep 26 22:51:25 1995  Mark Eichin  <eichin@cygnus.com>

* admin.c (admin_add_modify): copy, don't just assign, principals
to avoid double-freeing. Zero out "contents" and mod_name fields
after freeing, likewise. Free cur_dbentry and new_dbentry properly.

Tue Sep 26 02:56:41 1995  Mark Eichin  <eichin@cygnus.com>

* srv_acl.c (acl_free_entries): jump the ae_next link *before*
freeing the item so we don't lose it.

Tue Sep 26 02:28:35 1995  Mark Eichin  <eichin@cygnus.com>

* admin.c (admin_merge_dbentries): copy who into dbentp->mod_name
because callers will free it after successful use.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7506 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * krb5.hin (krb5_x, krb5_xc): wrapper macros to test all function
Mark Eichin [Sat, 24 Feb 1996 00:01:31 +0000 (00:01 +0000)]
* krb5.hin (krb5_x, krb5_xc): wrapper macros to test all function
pointers before calling through them (abort if null.) Simplifies
debugging on many platforms. Currently #if 1, but could be
conditionalized once we're in "production".

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7505 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kdb5_edit.c (kdb5_edit_Init): set manual_mkey for testing with -P
Mark Eichin [Fri, 23 Feb 1996 23:44:44 +0000 (23:44 +0000)]
* kdb5_edit.c (kdb5_edit_Init): set manual_mkey for testing with -P

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7504 dc483132-0cff-0310-8789-dd5450dbe970

28 years agot_random.c: New file which just tests the random number generator
Theodore Tso [Fri, 23 Feb 1996 02:37:33 +0000 (02:37 +0000)]
t_random.c: New file which just tests the random number generator

new_rn_key.c (mit_des_set_random_generator_seed): Add fix so that we
do something even if the input key is not a valid DES key.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7503 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * Makefile.in (check-unix): Set LD_LIBRARY_PATH for kdb5_anadd
Ezra Peisach [Thu, 22 Feb 1996 18:19:15 +0000 (18:19 +0000)]
* Makefile.in (check-unix): Set LD_LIBRARY_PATH for kdb5_anadd

* hostaddr.c (krb5_os_hostaddr): Set magic number in structure.

* full_ipadr.c (krb5_make_full_ipaddr): Set magic number in structure.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7502 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoDo not free memory before done using it. (The credential was pointing
Ezra Peisach [Thu, 22 Feb 1996 13:11:38 +0000 (13:11 +0000)]
Do not free memory before done using it. (The credential was pointing
to memory that is freed and then referenced again)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7501 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoA few more things are complete.
Richard Basch [Thu, 22 Feb 1996 05:49:42 +0000 (05:49 +0000)]
A few more things are complete.
Added a note about the TGS req starttime bug.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7500 dc483132-0cff-0310-8789-dd5450dbe970

28 years agokerberos_v4.c: Better DES key validation.
Richard Basch [Thu, 22 Feb 1996 04:42:42 +0000 (04:42 +0000)]
kerberos_v4.c: Better DES key validation.
main.c: Don't assume master key is DES for initializing the V4 randkey
generator; use a random key from the DES_CBC_CRC generator as the seed.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7499 dc483132-0cff-0310-8789-dd5450dbe970

28 years agokadm_funcs.c: add_entry was failing; improper struct initialization
Richard Basch [Thu, 22 Feb 1996 04:41:12 +0000 (04:41 +0000)]
kadm_funcs.c: add_entry was failing; improper struct initialization

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7498 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoMakefile.in: Don't install k5-int.h
Richard Basch [Thu, 22 Feb 1996 04:40:25 +0000 (04:40 +0000)]
Makefile.in: Don't install k5-int.h

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7497 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* aclocal.m4
Richard Basch [Thu, 22 Feb 1996 04:40:02 +0000 (04:40 +0000)]
* aclocal.m4
Don't include build directory in rpath
Fixed cache variable prefix (from krb_ to krb5_)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7496 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago Do not include the build directories in the rpath (runtime lib path)
Richard Basch [Thu, 22 Feb 1996 04:24:39 +0000 (04:24 +0000)]
Do not include the build directories in the rpath (runtime lib path)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7495 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* kerberos_v4.c
Richard Basch [Thu, 22 Feb 1996 04:23:30 +0000 (04:23 +0000)]
* kerberos_v4.c
Improve the checks that DES keys are being used.
* main.c
Do not assume that the master key is necessarily a DES key suitable
for use to initialize the V4 random key generator.  Instead, after
initializing the DES_CBC_CRC generator, get a random key and use that
to seed the V4 random key generator.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7494 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago add_entry was not working because the structure length element was
Richard Basch [Thu, 22 Feb 1996 04:21:07 +0000 (04:21 +0000)]
add_entry was not working because the structure length element was
not being initialized.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7493 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago Do not install k5-int.h
Richard Basch [Thu, 22 Feb 1996 04:20:02 +0000 (04:20 +0000)]
Do not install k5-int.h

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7492 dc483132-0cff-0310-8789-dd5450dbe970

28 years agokerberos_v4.c (kerberos_v4): Use strong random number generator
Theodore Tso [Wed, 21 Feb 1996 20:21:50 +0000 (20:21 +0000)]
kerberos_v4.c (kerberos_v4): Use strong random number generator

main.c (main): Initialize Kerberos V4's random number generator.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7491 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoIf the configuration file does not exist (context->profile == NULL)
Theodore Tso [Sat, 17 Feb 1996 05:07:06 +0000 (05:07 +0000)]
If the configuration file does not exist (context->profile == NULL)
return KRB5_CONFIG_CANTOPEN; if the default realm is not defined in
the configuration file, return an error message saying so.  These
changes just make the diagnostic error messages more clear.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7486 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoAdded new error table code KRB5_CONFIG_NODEFREALM
Theodore Tso [Fri, 16 Feb 1996 17:04:45 +0000 (17:04 +0000)]
Added new error table code KRB5_CONFIG_NODEFREALM

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7485 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoIf version is not FVNO_4, do not seek forwar a random stack value.
Ezra Peisach [Thu, 15 Feb 1996 20:07:29 +0000 (20:07 +0000)]
If version is not FVNO_4, do not seek forwar a random stack value.
Also check resturn status of lseek.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7481 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoSet magic number in krb5_address
Ezra Peisach [Thu, 15 Feb 1996 15:59:43 +0000 (15:59 +0000)]
Set magic number in krb5_address

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7480 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoMake parsing more flexible, so we don't barf over lack of spaces
Theodore Tso [Wed, 14 Feb 1996 21:48:05 +0000 (21:48 +0000)]
Make parsing more flexible, so we don't barf over lack of spaces
around the equals sign.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7479 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kdb5_edit.c (enter_master_key, set_dbname_help): If master key
Ezra Peisach [Wed, 14 Feb 1996 14:55:34 +0000 (14:55 +0000)]
    * kdb5_edit.c (enter_master_key, set_dbname_help): If master key
                enctype is unknown, set to DEFAULT_KDC_ENCTYPE.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7478 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kdb_dbm.c (krb5_dbm_db_rename): Initialize pointer before use
Ezra Peisach [Wed, 14 Feb 1996 02:40:31 +0000 (02:40 +0000)]
* kdb_dbm.c (krb5_dbm_db_rename): Initialize pointer before use
for case where new db does not exist.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7477 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kdb5_edit.c (extract_v4_srvtab): krb5_dbekd_decrypt_key_data
Ezra Peisach [Tue, 13 Feb 1996 21:11:40 +0000 (21:11 +0000)]
* kdb5_edit.c (extract_v4_srvtab): krb5_dbekd_decrypt_key_data
takes krb5_key_data *, not **.

Prototype warnings realy do mean potential errors.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7476 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRemove junk file
Theodore Tso [Tue, 13 Feb 1996 03:52:55 +0000 (03:52 +0000)]
Remove junk file

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7475 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFix lint flame (added missing cast)
Theodore Tso [Tue, 13 Feb 1996 03:42:47 +0000 (03:42 +0000)]
Fix lint flame (added missing cast)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7474 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoIncluide stdlib.h for declaration of malloc
Ezra Peisach [Sun, 11 Feb 1996 01:58:20 +0000 (01:58 +0000)]
Incluide stdlib.h for declaration of malloc

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7470 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * g_glue.c: grab stdlib.h to get NULL
Tom Yu [Sat, 10 Feb 1996 23:46:05 +0000 (23:46 +0000)]
* g_glue.c: grab stdlib.h to get NULL

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7469 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoOnly display secure_message if encryption actually enabled
Sam Hartman [Sat, 10 Feb 1996 02:45:42 +0000 (02:45 +0000)]
Only display secure_message if encryption actually enabled

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7467 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFixed bug in v4 compatability: you don't check
Sam Hartman [Sat, 10 Feb 1996 02:35:39 +0000 (02:35 +0000)]
Fixed bug in v4 compatability: you don't check
v5 authenticator checksums when v4 is being used.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7466 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* scc.h scc_gprin.c scc_maybe.c scc_skip.c scc_sseq.c
Richard Basch [Fri, 9 Feb 1996 02:19:14 +0000 (02:19 +0000)]
* scc.h scc_gprin.c scc_maybe.c scc_skip.c scc_sseq.c
Store and retrieve the os_context time offset from the
credentials cache.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7465 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* pre.in
Richard Basch [Fri, 9 Feb 1996 01:05:50 +0000 (01:05 +0000)]
* pre.in
Install administrative database utilities in sbin, not admin.
Also, define $(transform) to be the sed transformation for program
installation.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7464 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* kinit.c
Richard Basch [Fri, 9 Feb 1996 00:52:44 +0000 (00:52 +0000)]
* kinit.c
Only initialize the credentials cache if credentials were obtained.
This means you won't blow away the old cache if an incorrect password
was entered, and it also allows for the os_context time offset to be
set properly in the credentials cache.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7463 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* fcc_maybe.c
Richard Basch [Fri, 9 Feb 1996 00:50:32 +0000 (00:50 +0000)]
* fcc_maybe.c
Only store the os_context time offset if it is valid.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7462 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* fcc.h fcc_gprin.c fcc_maybe.c fcc_skip.c fcc_sseq.c
Richard Basch [Fri, 9 Feb 1996 00:47:05 +0000 (00:47 +0000)]
* fcc.h fcc_gprin.c fcc_maybe.c fcc_skip.c fcc_sseq.c
Store the time offset from the os_context in the credentials cache.
When applications open the credentials cache, they will set the
os_context time offset if kdc_timesync is set and the os_context
time offset has not yet been set.
  Note: The time offset is stored during krb5_cc_initialize, so the os_context
should be set prior to this operation.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7461 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * configure.in: Check for stdlib.h
Ezra Peisach [Wed, 7 Feb 1996 20:33:12 +0000 (20:33 +0000)]
* configure.in: Check for stdlib.h

* secure.c, pclose.c, ruserpass.c, ftp.c: Include stdlib.h if
present for malloc declarations.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7453 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoNeed to include stdio.h and errno.h no matter what.
Ezra Peisach [Wed, 7 Feb 1996 19:18:40 +0000 (19:18 +0000)]
Need to include stdio.h and errno.h no matter what.
(stderr and ENOMEM needs to be defined)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7452 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoMake clean removes ftpd (not ftp)
Ezra Peisach [Wed, 7 Feb 1996 18:38:02 +0000 (18:38 +0000)]
Make clean removes ftpd (not ftp)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7451 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoNew files, for danw's changes to allow building Makefiles for the
Theodore Tso [Wed, 7 Feb 1996 05:33:25 +0000 (05:33 +0000)]
New files, for danw's changes to allow building Makefiles for the
Macintosh.  We now can build MPW makefiles which are interpreted by
CodeWarrior.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7445 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFolded in danw's changes to allow building Makefiles for the
Theodore Tso [Wed, 7 Feb 1996 05:30:24 +0000 (05:30 +0000)]
Folded in danw's changes to allow building Makefiles for the
Macintosh.  We now can build MPW makefiles which are interpreted by
CodeWarrior.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7444 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoCommited new snapshot from Roland Schemers at Sun
Theodore Tso [Wed, 7 Feb 1996 05:04:58 +0000 (05:04 +0000)]
Commited new snapshot from Roland Schemers at Sun

This snapshot features a BSD-style copyright notice from Sun.  It also
includes the code to parse a configuration file and then dlopen the
proper shared library.  Miscellaneous cleanup in the mechglue directory.
Namespace uglieness (like get_mechanism) have been cleaned up, to use
things like __gss_get_mechanism instead.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7442 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* configure.in, Makefile.in
Richard Basch [Sun, 4 Feb 1996 04:21:09 +0000 (04:21 +0000)]
* configure.in, Makefile.in
Berkeley hash db is now a separate library

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7437 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* configure.in, Makefile.in
Richard Basch [Sun, 4 Feb 1996 04:20:23 +0000 (04:20 +0000)]
* configure.in, Makefile.in
Better support of alternate db libraries.
Berkeley db is now a separate library

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7436 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* Makefile.in
Richard Basch [Sun, 4 Feb 1996 04:19:17 +0000 (04:19 +0000)]
* Makefile.in
Support --program-prefix, --program-suffix, --program-transform

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7435 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* aclocal.m4
Richard Basch [Sun, 4 Feb 1996 04:16:00 +0000 (04:16 +0000)]
* aclocal.m4
Support --program-prefix and --program-suffix
Support different dbm libraries better.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7434 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRemove check to make sure ticket enctype
Sam Hartman [Thu, 1 Feb 1996 22:01:13 +0000 (22:01 +0000)]
Remove check to make sure ticket enctype
is in the tgs enctypes.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7431 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRemove check to make sure cached tickets are in tgs_enctypes
Sam Hartman [Thu, 1 Feb 1996 22:00:01 +0000 (22:00 +0000)]
Remove check to make sure cached tickets are in tgs_enctypes

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7430 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* rcp (client mode) now uses rsh -x but still supports the old encryption in
Sam Hartman [Thu, 1 Feb 1996 05:56:27 +0000 (05:56 +0000)]
* rcp (client mode) now uses rsh -x but still supports the old encryption in
     server mode.
* krshd will work in encrypting mode even when the port for stderr is null.
* rcp will work if stdin isn't not a socket, but is a pipe  in remote mode
* krshd destroys forwarded credentials properly
* For rsh, the secure_message got moved to the client; if you use a new client
     with an old server, you get secure_message twice, but it should be a
     useful change long-term.
* Fixed typo in rcp man page.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7423 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* krshd: Make sure KRB5CCNAME gets set for forward creds; code could be much cleaner.
Sam Hartman [Wed, 31 Jan 1996 22:26:17 +0000 (22:26 +0000)]
* krshd: Make sure KRB5CCNAME gets set for forward creds; code could be much cleaner.
* forward.c: give caller handle to ccache so it can be destroyed.
* krshd: destroy the ccache if it is non-null.
* krlogind:  Fix call, but don't destroy cache, as
    login.krb5 should do that any year now.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7422 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoSeveral changes to the db rename feature.
Richard Basch [Wed, 31 Jan 1996 00:22:23 +0000 (00:22 +0000)]
Several changes to the db rename feature.
Renaming locks the target lock file.
If the target lock file doesn't exist, create it.
Check the return value of krb5_dbm_db_set_name and set the
context accordingly if the target didn't exist.
Only unlink the source lock file if one could be computed.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7418 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * dump.c (load_db): dbrenerr_fmt prints "from" first, so pass it
Mark Eichin [Tue, 30 Jan 1996 23:30:23 +0000 (23:30 +0000)]
* dump.c (load_db): dbrenerr_fmt prints "from" first, so pass it
to fprintf correctly.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7417 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kdb_dbm.c (krb5_dbm_db_rename): O_EXCL is meaningless without
Mark Eichin [Tue, 30 Jan 1996 23:28:18 +0000 (23:28 +0000)]
* kdb_dbm.c (krb5_dbm_db_rename): O_EXCL is meaningless without
O_CREAT.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7416 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoDon't update the utmp file unless update_utmp is true
Sam Hartman [Tue, 30 Jan 1996 18:04:30 +0000 (18:04 +0000)]
Don't update the utmp file  unless update_utmp is true

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7414 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * dump.c (process_k5_record): t2..t9 is only 8 vars, not 9
Mark Eichin [Sun, 28 Jan 1996 19:36:35 +0000 (19:36 +0000)]
* dump.c (process_k5_record): t2..t9 is only 8 vars, not 9

make check is useful, gang...

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7412 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFix quoting problem
Sam Hartman [Sun, 28 Jan 1996 00:20:31 +0000 (00:20 +0000)]
Fix quoting problem

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7411 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFixes to build on Linux;
Sam Hartman [Sat, 27 Jan 1996 23:50:53 +0000 (23:50 +0000)]
Fixes to build on Linux;
never call fcntl(F_SETOWN)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7410 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFix bug in finding the tgs key;
Sam Hartman [Sat, 27 Jan 1996 06:40:36 +0000 (06:40 +0000)]
Fix bug in finding the  tgs key;
we really really want to avoid encrypting v4 tickets in DES3 keys.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7407 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoImplement -e option for keytabs
Sam Hartman [Sat, 27 Jan 1996 06:39:40 +0000 (06:39 +0000)]
Implement -e option for keytabs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7406 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * void_assoc.c (ptyint_void_association): if we don't have
Mark Eichin [Sat, 27 Jan 1996 06:14:24 +0000 (06:14 +0000)]
* void_assoc.c (ptyint_void_association): if we don't have
TIOCNOTTY (HP/UX 9 for example) don't try to use it.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7405 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * krb5.conf: use host:portnum in example files, not host,portnum
Mark Eichin [Sat, 27 Jan 1996 06:13:02 +0000 (06:13 +0000)]
* krb5.conf: use host:portnum in example files, not host,portnum

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7404 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kadmin.exp: use a longer password for kadmin_modify test to meet
Mark Eichin [Sat, 27 Jan 1996 06:11:33 +0000 (06:11 +0000)]
* kadmin.exp: use a longer password for kadmin_modify test to meet
password quality constraints.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7403 dc483132-0cff-0310-8789-dd5450dbe970

28 years agofix indentation
Mark Eichin [Sat, 27 Jan 1996 06:09:40 +0000 (06:09 +0000)]
fix indentation

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7402 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * kuserok.c: use HAVE_SETEUID and HAVE_SETRESUID to figure out how
Mark Eichin [Sat, 27 Jan 1996 06:06:22 +0000 (06:06 +0000)]
* kuserok.c: use HAVE_SETEUID and HAVE_SETRESUID to figure out how
to emulate seteuid instead of assuming hpux.
* configure.in: test for seteuid as well; fold some tests into a
single AC_HAVE_FUNCS.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7401 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * t_kdb.c: wrap db_dbm decls and berkely_dispatch in ifdefs
Mark Eichin [Sat, 27 Jan 1996 06:03:26 +0000 (06:03 +0000)]
* t_kdb.c: wrap db_dbm decls and berkely_dispatch in ifdefs
BERK_DB_DBM.
(do_testing): wrap references as well.

* keytab.c (krb5_ktkdb_get_entry): use KRB5_PROTOTYPE.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7400 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * t_cksum.c (main): use proper old-style definition
Mark Eichin [Sat, 27 Jan 1996 05:57:22 +0000 (05:57 +0000)]
* t_cksum.c (main): use proper old-style definition

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7399 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * network.c (setup_network): strtol is good enough for port
Mark Eichin [Sat, 27 Jan 1996 05:55:04 +0000 (05:55 +0000)]
* network.c (setup_network): strtol is good enough for port
number, and sunos doesn't have strtoul (and nothing else in the
tree uses it.)
(add_port): use proper old-style definition.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7398 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoOops; I accidentally comitted a version of krlogin
Sam Hartman [Sat, 27 Jan 1996 02:58:54 +0000 (02:58 +0000)]
Oops; I accidentally comitted a version of krlogin
that didn't even compile.
(I tested the binary in the wrong build tree.)

Compiled and tested this time.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7397 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoImplement -e option to list that
Sam Hartman [Fri, 26 Jan 1996 21:45:46 +0000 (21:45 +0000)]
Implement -e option to list that
shows enctypes associated with a key.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7396 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRequire DES for credentials
Sam Hartman [Fri, 26 Jan 1996 20:21:15 +0000 (20:21 +0000)]
Require DES for credentials

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7395 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFix bug in call to shared library macros
Sam Hartman [Fri, 26 Jan 1996 07:03:43 +0000 (07:03 +0000)]
Fix bug in call to shared library macros

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7394 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoTelnet really wants a DES key; have it ask for one
Sam Hartman [Fri, 26 Jan 1996 07:03:22 +0000 (07:03 +0000)]
Telnet really wants a DES key; have it ask for one

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7393 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFix delay in ^C processing
Sam Hartman [Fri, 26 Jan 1996 07:02:51 +0000 (07:02 +0000)]
Fix delay in ^C processing
caused by my OOB fix.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7392 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoDisable resetting of tgs_enctypes
Sam Hartman [Fri, 26 Jan 1996 05:23:19 +0000 (05:23 +0000)]
Disable resetting of tgs_enctypes
until I hear a good reason for it.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7391 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoConvert the kvno to a char before writing it out. (The previous code
Sam Hartman [Fri, 26 Jan 1996 05:22:37 +0000 (05:22 +0000)]
Convert the kvno to a char before writing it out.  (The previous code
tried, but casting from (int *) to (char *) is not the same as casting
from int to char.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7390 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRemoved outdated comment about mapping
Sam Hartman [Fri, 26 Jan 1996 05:20:55 +0000 (05:20 +0000)]
Removed outdated comment about mapping
etypes to ktypes--it's a one to one mapping
now.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7389 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFixed to check enctype of retrieved keys
Sam Hartman [Fri, 26 Jan 1996 05:20:17 +0000 (05:20 +0000)]
Fixed to check enctype of retrieved keys

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7388 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoFixed extraction of keytabs to extract all keys
Sam Hartman [Fri, 26 Jan 1996 05:19:21 +0000 (05:19 +0000)]
Fixed extraction of keytabs to extract all keys
not just the first one.
Fixed v4 extraction to find the v4 key.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7387 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * cnv_tkt_skey.c (krb524_convert_tkt_skey): Take both a v5 and v4
Sam Hartman [Thu, 25 Jan 1996 20:06:28 +0000 (20:06 +0000)]
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Take both a v5 and v4
  service key.  Use the v5 service key to decrypt the v5 ticket, and
  the v4 service key to encrypt the v4 ticket.

* krb524d.c (do_connection): Use a separate v5 and v4 service key
  so that if the KDC chooses to encrypt the v5 ticket in something
  besides ENCTYPE_DES_CBC_CRC, we don't lose.  Also, make sure we
  free keyblock contents and tickets on error.
(lookup_service_key): Pass enctype to kdc_get_server_key

(kdc_get_server_key):  Only try for v4 salt if the enctype is
DES_CRC.  Take enctype as an argument.  This creates a problem
if the server key has a normal and v4 salt of ENCTYPE_DES_CBC_CRC
but I can't think of a good answer to this.

* k524init.c (main):  Use crc32 not md5.

Wed Jan 24 20:05:47 1996  Sam Hartman  <hartmans@tertius.mit.edu>

* krb524d.c (kdc_get_server_key): Try to find a v4 salt type key,
  else try any des_crc32 key, else fail.
(do_connection): Lookup a crc32 key not an md5 key.
(init_master): Handle reading kdc profile.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7386 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoget_creds.c: Only match on enctype if in_creds.keyblock
Sam Hartman [Thu, 25 Jan 1996 20:04:58 +0000 (20:04 +0000)]
get_creds.c:  Only match on enctype if in_creds.keyblock
    has non-null enctype. (I.E. implement as documented)

gc_via_tkt.c: If the in_creds.keyblock.enctype !=0 then don't call
    send_tgs with a null ktypes paramater; instead, explicitally allow only
    increds.keyblock.enctype.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7385 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoPreviously, ktype_match only made sure that the enctype was valid
Sam Hartman [Thu, 25 Jan 1996 20:01:45 +0000 (20:01 +0000)]
Previously, ktype_match only made sure that the enctype was valid
and in the set of default tgs enctypes.
Now, if matching on keytype, do an exact match, else
use ktype_reasonable (renamed ktype_match) to make
sure the ticket is in the default tgs enctypes.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7384 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoRemove superfluous link line
Sam Hartman [Thu, 25 Jan 1996 02:30:18 +0000 (02:30 +0000)]
Remove superfluous link line
from configure.in

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7380 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoNo change from prior revision, just corrected log message:
Tom Yu [Thu, 25 Jan 1996 01:57:37 +0000 (01:57 +0000)]
No change from prior revision, just corrected log message:
* gssapi.h: Added definition of NPROTOTYPE to dtrt with Ultrix,
etc.  Also added special case for Ultrix (limited
prototype support).

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7379 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * g_compare_name.c, g_delete_sec_context.c, g_dsp_status.c,
Tom Yu [Thu, 25 Jan 1996 01:55:50 +0000 (01:55 +0000)]
* g_compare_name.c, g_delete_sec_context.c, g_dsp_status.c,
g_exp_sec_context.c, g_imp_sec_context.c, g_rel_buffer.c,
g_rel_cred.c, g_rel_name.c, g_rel_oid_set.c, get_mechanism.c,
get_mtype.c: Include stdlib.h and string.h as needed

* mglueP.h: Add many invocations of NPROTOTYPE and PROTOTYPE to
prevent breakage.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7378 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * pname_to_uid.c (krb5_pname_to_uid): Changed def'n of
Tom Yu [Thu, 25 Jan 1996 01:54:53 +0000 (01:54 +0000)]
* pname_to_uid.c (krb5_pname_to_uid): Changed def'n of
krb5principalname to static so K&R compilers won't lose on
automatic aggregate initialization.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7377 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * Makefile.in: Remove spurious @DEFS@
Tom Yu [Wed, 24 Jan 1996 23:50:19 +0000 (23:50 +0000)]
* Makefile.in: Remove spurious @DEFS@

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7376 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoUpdate man pages with new options
Sam Hartman [Wed, 24 Jan 1996 19:57:24 +0000 (19:57 +0000)]
Update man pages with new options

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7375 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoAdded lines to adm.h which Chris had removed while working on the
Theodore Tso [Wed, 24 Jan 1996 19:23:54 +0000 (19:23 +0000)]
Added lines to adm.h which Chris had removed while working on the
kadmin revisions.  This allows the existing code to compile.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7374 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoDon't assume that the input_name_buffer is null terminated, when it
Theodore Tso [Wed, 24 Jan 1996 18:24:27 +0000 (18:24 +0000)]
Don't assume that the input_name_buffer is null terminated, when it
contains a string.  Fix gcc warnings.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7373 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago* Add checksum support to klogind making sure encrypted authenticators
Sam Hartman [Wed, 24 Jan 1996 08:56:24 +0000 (08:56 +0000)]
* Add checksum support to klogind making sure encrypted authenticators
cannot be replayed against unencrypted connections.
* Updated checksumming in kshd to be compatible with klogind so they
use the same client code.  CVS:
* Fixed Makefile to install kshd and klogind not kr*d
* Updated option process in krlogind and kshd per messages to c.p.k.

----------------------------------------------------------------------
automatically CVS: CVS: Committing in .  CVS: CVS: Modified Files:
----------------------------------------------------------------------

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7372 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoCheck for stdlib.h, include stdlib.h, string.h, cast to handle gcc warning
Ezra Peisach [Tue, 23 Jan 1996 18:26:09 +0000 (18:26 +0000)]
Check for stdlib.h, include stdlib.h, string.h, cast to handle gcc warning

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7371 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoCheck for stdlib.h (configure.in)
Ezra Peisach [Tue, 23 Jan 1996 18:25:05 +0000 (18:25 +0000)]
Check for stdlib.h (configure.in)

Include stdlib.h and string.h for declarations of such items like malloc,
strlen, memmove...

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7370 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * Makefile.in (SRCS): Remove extraneous line with only a tab.
Ezra Peisach [Tue, 23 Jan 1996 17:20:45 +0000 (17:20 +0000)]
* Makefile.in (SRCS): Remove extraneous line with only a tab.
(SHLIB_LDFLAGS): Declare that krb5_gss_initialize is to be
unresolved.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7368 dc483132-0cff-0310-8789-dd5450dbe970

28 years ago * Makefile.in (SHLIB_LIBS): Add lines for shared library building
Ezra Peisach [Tue, 23 Jan 1996 17:20:25 +0000 (17:20 +0000)]
* Makefile.in (SHLIB_LIBS): Add lines for shared library building
depending on libkrb5, crypto, and com_err.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7367 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoAdd support for building GSSAPI as a shared library
Theodore Tso [Tue, 23 Jan 1996 09:07:27 +0000 (09:07 +0000)]
Add support for building GSSAPI as a shared library

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7366 dc483132-0cff-0310-8789-dd5450dbe970

28 years agoconfigure.in: Add the mechglue directory as a subdir
Theodore Tso [Tue, 23 Jan 1996 08:37:04 +0000 (08:37 +0000)]
configure.in: Add the mechglue directory as a subdir

Makefile.in (libgssapi_krb5.a): Include the object files in the
mechglue directory as well.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7365 dc483132-0cff-0310-8789-dd5450dbe970

28 years agogssapiP_generic.h: Removed prototypes of functions that have been
Theodore Tso [Tue, 23 Jan 1996 08:36:27 +0000 (08:36 +0000)]
gssapiP_generic.h: Removed prototypes of functions that have been
moved to the mechglue layer.

Makefile.in: Removed gssapi_generic.c, oid_ops.c, rel_buffer.c, and
rel_oid_set.c --- these functions are now done in the mechglue layer.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7364 dc483132-0cff-0310-8789-dd5450dbe970

28 years agorel_oid.c (krb5_gss_internal_release_oid): Add the new interface for
Theodore Tso [Tue, 23 Jan 1996 08:35:38 +0000 (08:35 +0000)]
rel_oid.c (krb5_gss_internal_release_oid): Add the new interface for
the mechglue layer.

inq_cred.c (krb5_gss_inquire_cred): Call gss_release_oid_set() instead
of generic_gss_release_oid_set().

gssapiP_krb5.h: Added prototype for krb5_gss_internal_release_oid

Makefile.in (CCSRCS): Removed the file krb5_gss_glue.c and added the
file k5mech.c and pname_to_uid.c

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7363 dc483132-0cff-0310-8789-dd5450dbe970