Theodore Tso [Wed, 10 Jan 1996 03:53:09 +0000 (03:53 +0000)]
forward.c (get_for_creds): Removed no longer used function
kcmd.c (kcmd): Convert from using get_for_creds() from forward.c to
using the official library routine, krb5_fwd_tgt_creds().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7284
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:24:32 +0000 (03:24 +0000)]
Added error table code KRB5_FWD_BAD_PRINCIPAL
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7283
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:24:10 +0000 (03:24 +0000)]
krb5.hin (krb5_fwd_tgt_creds, krb5_os_hostaddr): Added new function
prototypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7282
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:13:49 +0000 (03:13 +0000)]
gssapiP_krb5.h (KRB5_GSS_FOR_CREDS_OPTION): New constant added for
delegation (forwarding) of credentials.
init_sec_context.c (make_ap_req): Add support for sending delegated
credentials. Misc lint cleanups.
accept_sec_context.c (krb5_gss_accept_sec_context): Add support for
accepting delegated credentials. Misc lint cleanups.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7281
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 10 Jan 1996 03:08:30 +0000 (03:08 +0000)]
fwd_tgt.c (krb5_fwd_tgt_creds): New function which handles all of the
dirty work of forwarding TGT's.
rd_cred.c (krb5_rd_cred_basic): Clean up memory allocation discpline
to remove memory leaks.
mk_cred.c (krb5_mk_ncred_basic, krb5_mk_ncred, krb5_mk_1cred): Clean
up memory allocation discpline to remove memory leaks.
init_ctx.c (krb5_get_tgs_ktypes): Clean up parsing of the etype list.
Don't overrun the string containing the etype list.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7280
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 03:50:32 +0000 (03:50 +0000)]
krb5.hin: Added support for KRB5_INT16_MAX, which tells us the
limitations of using 16 bit ints.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7278
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 03:24:36 +0000 (03:24 +0000)]
hostaddr.c (krb5_os_hostaddr): New function which takes a hostname and
returns a list of krb5 addresses. (This is basically a glue routine
that converts the result of gethostbyname() to krb5 addresses.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7277
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 02:43:19 +0000 (02:43 +0000)]
gssapiP_generic.h (TWRITE_INT16, TREAD_INT16): Added new macros
to read and write two byte integers from the wire.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7276
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 5 Jan 1996 02:35:16 +0000 (02:35 +0000)]
gssapiP_generic.h: Don't include <sys/types.h> since it's already
included by gssapi.h.
gssapi.h: Add a #ifndef _MACINTOSH around include of <sys/types.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7275
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:59:31 +0000 (05:59 +0000)]
Removed check for sys/fcntl.h; the source now always includes <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7273
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:51:18 +0000 (05:51 +0000)]
Removed #undef NEED_SYS_FCNTL_H since we now always use <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7272
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:50:07 +0000 (05:50 +0000)]
Always include <fcntl.h> instead of checking for <sys/fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7271
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:47:12 +0000 (05:47 +0000)]
Removed checking for <sys/fcntl.h>; always use <fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7270
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:41:38 +0000 (05:41 +0000)]
Always include <fcntl.h> instead of checking for <sys/fcntl.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7269
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:39:37 +0000 (05:39 +0000)]
Removed sys/fcntl.h checking (always use fcntl.h instead)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7268
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 4 Jan 1996 05:33:35 +0000 (05:33 +0000)]
* aclocal.m4, acconfig.h
Removed sys/fcntl.h checking (always use fcntl.h instead)
* TODO
Documented that sys/fcntl.h checks have been removed.
Added a KDC bug that needs to be investigated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7267
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 03:31:14 +0000 (03:31 +0000)]
* configure.in: Check for presense of setenv(), unsetenv(), and
getenv() from the C library.
* Makefile.in: New file: setenv.c --- provides routines for
setting the environment.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7266
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 03:00:07 +0000 (03:00 +0000)]
* gss-client.c (main, client_establish_context): If the -d flag is
given to the client, then try to delegate credentials when
establishing the context.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7265
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 4 Jan 1996 02:44:21 +0000 (02:44 +0000)]
* rd_cred.c (krb5_rd_cred_basic): When the keyblock is NULL, assume
we're being called from the gssapi code, which doesn't have access to
the sender or receive address information, don't check the sender
address, since it won't be available.
* rd_cred.c (decrypt_credencdata): When calling krb5_rd_credd(), if
the keyblock is null, just copy the encoded structure from the
"ciphertext" part of the structure and decode it.
* mk_cred.c (encrypt_credencpart): When calling krb5_mk_cred(), if the
keyblock is NULL, don't encrypt it; just encode it and leave it in the
ciphertext area of the structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7264
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 25 Dec 1995 15:05:30 +0000 (15:05 +0000)]
ktutil.c (ktutil_write_v4): Call ktutil_write_srvtab not ktutil_write_keytab
ktutil_funcs.c (ktutil_write_srvtab): Clear malloced memory.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7250
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 22 Dec 1995 22:43:27 +0000 (22:43 +0000)]
If HAVE_SHADOW is defined, and no shadow password entry is availble,
try using the password entry in the password file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7249
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:55:22 +0000 (23:55 +0000)]
Use KRB5_CC_FORMAT as an error code instead of KRB5_CCACHE_BADVNO,
when it's really a format error in the credentials cache file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7248
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:53:58 +0000 (23:53 +0000)]
Fixed typo (missing comma) in file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7247
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:50:16 +0000 (23:50 +0000)]
Changed KRB5_SENDAUTH_MUTUAL_FAILED to KRB5_MUTUAL_FAILED (since the
error code is no longer used in sendauth). Added KRB5_CC_FORMAT for
indicating a problem in the credentials cache format.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7246
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:49:52 +0000 (23:49 +0000)]
Change use of KRB5_SENDAUTH_MUTUAL_FAILED to KRB5_MUTUAL_FAILED
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7245
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:39:45 +0000 (23:39 +0000)]
In the case of SCC_OPEN_AND_ERASE, unlink the filename first, in case
there's a symbolic link lurking about. (We should do an exclusive
open then, but there's no such thing in stdio.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7244
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:39:16 +0000 (23:39 +0000)]
In the case of FCC_OPEN_AND_ERASE, unlink the old filename, and then
add the O_EXCL open flag, to prevent O_CREAT from following a symbolic
link.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7243
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:25:19 +0000 (23:25 +0000)]
* configure.in: Check for the stat call, since profile_update_file
needs to know whether it exists. (It doesn't on the Mac.)
* prof_file.c (profile_update_file): Change use of HAS_STAT to
HAVE_STAT, to confirm with autoconf test. If the stat() call does not
exist, assume that our in-core memory image is correct, and never
re-read the profile file unless we explicitly close it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7242
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Thu, 21 Dec 1995 23:19:13 +0000 (23:19 +0000)]
* Makefile.in (t_an_to_ln): Use $(LD) instead of $(CC) to link final
executables, so that we can more easily use purify.
* hst_realm.c (krb5_get_host_realm): Eliminate memory leak; realm was
already being allocated by the profile library; no reason to
reallocate it again.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7241
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 20 Dec 1995 02:02:55 +0000 (02:02 +0000)]
Missing parenthesis meant that wrong number of bytes was being
allocated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7240
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 20 Dec 1995 01:50:53 +0000 (01:50 +0000)]
New function for doing generic tty input and output. Eventually
read_password should use this function.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7239
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 19 Dec 1995 22:31:31 +0000 (22:31 +0000)]
Don't drag in syslog.c if vsyslog() is not defined. Only drag it in
if syslog() isn't available.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7238
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 19 Dec 1995 22:30:07 +0000 (22:30 +0000)]
Don't use vsyslog; use syslog instead. Fixed lint flames
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7237
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 19 Dec 1995 22:17:25 +0000 (22:17 +0000)]
Also include unistd.h, if it's available
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7236
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 19 Dec 1995 22:12:37 +0000 (22:12 +0000)]
Remove declaration of LineNbr; no longer exported by kparse.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7235
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 18 Dec 1995 16:46:51 +0000 (16:46 +0000)]
* keytab.c (krb5_ktkdb_resolve): Fix casting
* t_kdb.c (add_principal): Remove mkvno
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7234
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Mon, 18 Dec 1995 00:57:37 +0000 (00:57 +0000)]
Add a blank line to work around a misfeature in DecUnix 3.2's fgrep where
there is a line limit. autoheader (which is only used by developers)
tries to put together a very long line with is then parsed - but due
to fgreps line length limitation this breaks. By adding the blank line
autoheader divides the work into multiple sections and wins.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7233
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 14 Dec 1995 20:03:10 +0000 (20:03 +0000)]
Merge in changes between 1.4 and 1.5 in RCS file; this delta is Mark
Eichin's patch to fall back to /usr/adm/wtmp. Somehow, this was lost
in 1.6.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7232
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 14 Dec 1995 00:50:25 +0000 (00:50 +0000)]
* t_verify.c: Added an n-fold test
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7231
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Wed, 13 Dec 1995 20:29:45 +0000 (20:29 +0000)]
* kadmin.exp: test that kadmin_modify doesn't corrupt key entries
(I think proven's changes fix this, but this will help keep it fixed.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7230
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 12:13:56 +0000 (12:13 +0000)]
* configure.in : Remove subdirectory db
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7225
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 12:13:36 +0000 (12:13 +0000)]
* Makefile.in : Move db keytab routines to lib/kdb
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7224
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 12:11:09 +0000 (12:11 +0000)]
* Makefile.in, keytab.c : Move db keytab routines here
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7223
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 09:03:37 +0000 (09:03 +0000)]
* kdb5_mkdums.c : Remove mkvno from krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7222
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 09:02:16 +0000 (09:02 +0000)]
* kdb5_verify.c : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7221
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 09:00:23 +0000 (09:00 +0000)]
* kdb_xdr.c : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7220
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:58:43 +0000 (08:58 +0000)]
* kerberos_v4.c : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7219
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:57:15 +0000 (08:57 +0000)]
* kadm_funcs.c : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7218
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:56:00 +0000 (08:56 +0000)]
* adm_funcs.c : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7217
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:53:35 +0000 (08:53 +0000)]
* kdb.h : Remove mkvno for krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7216
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:49:20 +0000 (08:49 +0000)]
* dump.c, dumpv4.c, kdb5_edit.c, loadv4.c :
Remove mkvno from krb5_db_entry.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7215
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Wed, 13 Dec 1995 08:48:33 +0000 (08:48 +0000)]
* kdb5_create.c : Remove mkvno from krb5_db_entry
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7214
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:47:52 +0000 (19:47 +0000)]
* kdc.conf: Added examples of "supported_enctypes" and "master_key_type"
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7212
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:45:23 +0000 (19:45 +0000)]
* krb524d.c: Changed krb5_db_fetch_mkey() such that it will only try
to set the enctype of the keyblock if the keyblock had it
set to ENCTYPE_UNKNOWN.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7211
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:45:13 +0000 (19:45 +0000)]
* fetch_mkey: Changed krb5_db_fetch_mkey() such that it will only try
to set the enctype of the keyblock if the keyblock had it
set to ENCTYPE_UNKNOWN.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7210
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:45:01 +0000 (19:45 +0000)]
* main.c: Changed krb5_db_fetch_mkey() such that it will only try
to set the enctype of the keyblock if the keyblock had it
set to ENCTYPE_UNKNOWN.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7209
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:32:56 +0000 (19:32 +0000)]
* d3_str2ky.c: Updated to include some of the randomness throughout
the entire key. The second 3-DES CBC encryption of the block
should use an ivec of the last cipher block.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 19:32:45 +0000 (19:32 +0000)]
* 3-des.txt: Updated to include some of the randomness throughout
the entire key. The second 3-DES CBC encryption of the block
should use an ivec of the last cipher block.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7206
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 12 Dec 1995 13:26:13 +0000 (13:26 +0000)]
Clean up repository - don't check in configure add .Sanitize and .cvsignore
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:44:09 +0000 (06:44 +0000)]
* TODO: Done: keytab routines to access to database.
Todo: Create a real krb5_db_context after 1.0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7204
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:30:11 +0000 (06:30 +0000)]
New directory for the kdb keytab functions. Currently there is only get and
resolve but these are sufficient to remove the ugly hack where the key is
passed to krb5_rd_req() in the user-to-user field of the auth_context.
These functions do NOT need to be built on the Macintosh or Windows systems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:27:13 +0000 (06:27 +0000)]
* configure.in : Added subdirectory db
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:24:26 +0000 (06:24 +0000)]
* kdb_dbm.c : Move the krb5_db_context to include/krb5/kdb_dbc.h.
* kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey():
Functions for associating a master key (krb5_encrypt_block *)
to a krb5_db_context. Currently it associates it to the
krb5_context and will be fixed once the krb5_db_context
is better defined (Post 1.0).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:18:53 +0000 (06:18 +0000)]
* extern.h: Added a krb5_keytab to the realm context. The keytab
should be associated with a krb5_db_context which will
make having a krb5_context unnecessary in the realm context.
* kdc_util.c kdc_process_tgs_req(): Use the realm keytab instead
of faking up a user-to-user key to pass to krb5_rd_req_decode().
* main.c: Added code to use the new database keytab routines.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7200
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Tue, 12 Dec 1995 06:09:05 +0000 (06:09 +0000)]
* adm.h: Added principal flag keywords KRB5_ADM_KW_SETFLAGS and
KRB5_ADM_KW_UNSETFLAGS because relative flag modification
is just a good idea.
* kdb.h: typedef kdb5_dispatch_table so prototypes that need it
compile even if KDB5_DISPATCH isn't defined.
* kdb_dbc.h: The start of the database context, which should be
removed from the krb5_context.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7199
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:34:56 +0000 (02:34 +0000)]
* main.c: Use the master key enctype from the stash file if none
is specified (set the keyblock enctype to NULL).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7198
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:34:40 +0000 (02:34 +0000)]
* kdb5_edit.c: Use the master key enctype from the stash file if none
is specified (set the keyblock enctype to NULL).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7197
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:32:05 +0000 (02:32 +0000)]
* fetch_mkey.c: If the keyblock is initialized with an enctype of
NULL, simply read in the enctype from the stash file and
don't try to check it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:31:12 +0000 (02:31 +0000)]
* krb524d.c: Rely on stashed master key enctype instead of hardcoding
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7195
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:29:45 +0000 (02:29 +0000)]
* d3_str2ky.c: Revised 3-DES String-To-Key algorithm to encrypt the
folded result twice in the folded key. [Courtesy Uri Blumenthal]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 12 Dec 1995 02:29:33 +0000 (02:29 +0000)]
* 3-des.txt: Revised 3-DES String-To-Key algorithm to encrypt the
folded result twice in the folded key. [Courtesy Uri Blumenthal]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7193
dc483132-0cff-0310-8789-
dd5450dbe970
Chris Provenzano [Mon, 11 Dec 1995 22:01:07 +0000 (22:01 +0000)]
* kdc_preauth.c return_padata(): Initialize local variable "size"
to 0 before using it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7192
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 11 Dec 1995 18:30:09 +0000 (18:30 +0000)]
* adm_proto.h: Moved many string conversion functions to libkrb5
for better support of multiple encryption type selection
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7191
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 11 Dec 1995 18:29:16 +0000 (18:29 +0000)]
* krb5.hin: Moved string conversion functions from libkadm
for better support of multiple encryption type selection
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7190
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Mon, 11 Dec 1995 17:25:28 +0000 (17:25 +0000)]
* krb5.conf.M: describe new option default_tgs_enctypes
for specifying the default session key types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7189
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 10 Dec 1995 16:22:10 +0000 (16:22 +0000)]
* kdb5_edit.M: Document that modent exists
* kdb5_edit.c (modent): Add usage as suggested by jhawk@mit.edu.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7188
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 10 Dec 1995 16:19:38 +0000 (16:19 +0000)]
Add new routine krb5_input_flag_to_string to allow an application to
loop over the input flag strings for displaying help messages (i.e.
modent in krb5_edit).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 10 Dec 1995 16:17:10 +0000 (16:17 +0000)]
* adm_proto.h: Add prototype for krb5_input_flag_to_string
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7186
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 6 Dec 1995 15:49:04 +0000 (15:49 +0000)]
* krb5.conf Added example use of default_tgs_enctypes
* krb5.conf.M Described new configuration option "default_tgs_enctypes"
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7179
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 02:04:10 +0000 (02:04 +0000)]
* configure.in: Use krb5util library
* login.c (main): Change two-argument call to syslog to three
arguments to handle screw cases in hostnames.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7178
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 02:02:51 +0000 (02:02 +0000)]
Move compat_recvauth to this library so that krb4 can depend on krb5
(for configurable paths support).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 02:00:43 +0000 (02:00 +0000)]
Commit the removal or compat_recv.o
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 01:59:16 +0000 (01:59 +0000)]
Move compat_recv.c to krb5util
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 01:58:05 +0000 (01:58 +0000)]
Removed krb4 dependency in building shared library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 01:55:03 +0000 (01:55 +0000)]
* Makefile.in: Shared library depends on krb5 library now
* configure.in: Pass krb5 library version number to Makefile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 01:53:00 +0000 (01:53 +0000)]
krb5 is built before krb4. Add krb5util library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 6 Dec 1995 01:51:08 +0000 (01:51 +0000)]
Add USE_KRB5UTIL_LIBRARY. Change library link order to -lkrb4 -lkrb5
compat_recvauth is moving to a new library and krb4 now depends on krb5
anyways for the configurable path support.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7171
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:48:32 +0000 (03:48 +0000)]
Added support for matching against a supported app. session key type
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:47:34 +0000 (03:47 +0000)]
When searching for cached credentials, make sure we are also looking for
credentials that are matching a supported application keytype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:45:06 +0000 (03:45 +0000)]
Added two new routines for multiple encryption type support:
krb5_set_default_tgs_ktypes(context, ktypes)
This routine sets the default application session key types to be used.
krb5_get_tgs_ktypes(context, principal, &ktypes)
This routine gets the session key types to be used with "principal".
At the moment, this only uses the krb5_set_default_tgs_ktypes values
or those specified in libdefaults/default_tgs_enctypes (krb5.conf).
It is envisioned that this may later support per-host/per-realm lookup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:41:31 +0000 (03:41 +0000)]
Added prototypes for two new routines:
krb5_set_default_tgs_ktypes - sets default app. session key types.
krb5_get_tgs_ktypes - gets app. session key types.
Also added a new flag for testing credential matches (match supported keytype)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7167
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:39:28 +0000 (03:39 +0000)]
Serialize / de-serialize the context structure, which now includes both
TGT session key types and application session key types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:38:02 +0000 (03:38 +0000)]
Instead of using the TGT session key type, use the application session
key type.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:36:11 +0000 (03:36 +0000)]
Extended the context structure to support differing tgt and application
session keys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7164
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:34:22 +0000 (03:34 +0000)]
The BSD application suite only understands using 1-DES as a session key type
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7163
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:32:11 +0000 (03:32 +0000)]
Use symbolic names for the encryption types.
Support 3-DES, too.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7162
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:30:58 +0000 (03:30 +0000)]
The wrong encryption system was being initialized. The response to the mk_req
should be done using the session key and its encryption system, not the
ticket's encryption system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:27:55 +0000 (03:27 +0000)]
There is no longer a dependency on libkadm
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7160
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:24:44 +0000 (03:24 +0000)]
Moved most string-type conversion routines from libkadm to libkrb5 to
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Tue, 5 Dec 1995 03:13:14 +0000 (03:13 +0000)]
Moved most string-type conversion routines from libkadm to libkrb5 to
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158
dc483132-0cff-0310-8789-
dd5450dbe970