Ken Raeburn [Tue, 14 Mar 2006 01:39:24 +0000 (01:39 +0000)]
* Makefile.in (krb5.conf): New target. Use config-files/krb5.conf, but
add db_module_dir tag.
(kdb_check): Depend on it.
(RUN_SETUP): Use it for KRB5_CONFIG.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17739
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 13 Mar 2006 21:56:26 +0000 (21:56 +0000)]
* plugins.c (krb5int_get_plugin_dir_data): If dirhandle is null or the
file pointer is null, return a one-element list containing just NULL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17738
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 13 Mar 2006 21:48:32 +0000 (21:48 +0000)]
* Makefile.in (check-unix): Use RUN_SETUP for t_deltat
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17737
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 13 Mar 2006 21:44:47 +0000 (21:44 +0000)]
* Makefile.in (check-unix): Use RUN_SETUP
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17736
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Mar 2006 17:02:13 +0000 (17:02 +0000)]
add new file windows/winlevel.h and update windows/version.rc
to allow for a configurable KRB5_BUILDLEVEL. This will be used
to distinguish binary files from the same version 1.4.3 but
different releases (alpha-1, alpha-2, beta-1, beta-2, final)
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17735
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 23:04:09 +0000 (23:04 +0000)]
update docs for include/krb5/ -> include/ merge
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17734
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 23:00:26 +0000 (23:00 +0000)]
* reconf: Put autoconf.stmp into include directory
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17733
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 22:53:25 +0000 (22:53 +0000)]
merge krb5 subdir change log data
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17732
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 22:25:11 +0000 (22:25 +0000)]
temporary: change log from old krb5/ directory
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17731
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 22:23:28 +0000 (22:23 +0000)]
Instead of arbitrary division of headers into include and include/krb5, with
include directives sometimes using krb5/foo.h and sometimes using foo.h, and
-I options always given for both directories in both source and build trees,
push include/krb5/* up a level and drop the krb5 directory (except, for the
moment, the change log).
Updated #include directives, -I options, and dependencies accordingly, and
deleted one or two bits of old, unused code that was noticed in the process.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17730
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Sat, 11 Mar 2006 05:06:26 +0000 (05:06 +0000)]
- replace icon with the NetIDMgr icon
- replace references to Leash with NetIDMgr
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17729
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 11 Mar 2006 02:13:59 +0000 (02:13 +0000)]
Add a new recursive target "generated-files-mac", for producing the
generated files that lxs wants to feed into the Mac build system.
(First approximation, may want some fine tuning later.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17728
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 9 Mar 2006 06:24:13 +0000 (06:24 +0000)]
Build NetIDMgr Developer Documentation (requires doxygen)
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17725
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 9 Mar 2006 00:59:40 +0000 (00:59 +0000)]
* locate_kdc.c (module_locate_server): Don't set cbdata.lp at initialization time
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17724
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 9 Mar 2006 00:52:55 +0000 (00:52 +0000)]
* configure.in: Check for vsnprintf and vasprintf, and for positional
specification support in printf format strings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17723
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 20:10:31 +0000 (20:10 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17716
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 19:57:21 +0000 (19:57 +0000)]
* prot.h: Include k5-platform.h.
(krb4_swab16, krb4_swap32): Define in terms of SWAP16 and SWAP32, if
they're defined.
(KRB4_PUT32BE, KRB4_PUT32LE, KRB4_PUT16BE, KRB4_PUT16LE): Define to
use store_{16,32}_{be,le}.
(KRB4_GET32BE, KRB4_GET32LE, KRB4_GET16BE, KRB4_GET16LE): Define to
use load_{16,32}_{be,le}.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17715
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 19:25:49 +0000 (19:25 +0000)]
missed a dlsym call removal
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17714
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 19:23:12 +0000 (19:23 +0000)]
Oops. This should come closer to building on Windows..
* plugins.c: Only include dlfcn.h if USE_DLOPEN.
(struct plugin_file_handle): Only include a pointer if USE_DLOPEN.
(krb5int_open_plugin, krb5int_get_plugin_data, krb5int_close_plugin,
krb5int_open_plugin_dir, krb5int_close_plugin_dir): Only use the
dlopen interface if USE_DLOPEN is defined.
(krb5int_get_plugin_dir_data, krb5int_get_plugin_dir_func): Use
krb5int_get_plugin_data/func instead of dlsym. Drop some debugging
code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17713
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 8 Mar 2006 15:36:15 +0000 (15:36 +0000)]
2006-03-07 Jeffrey Altman <jaltman@mit.edu>
nidmgr32.dll (1.0.2.1)
- Attempting to obtain new credentials for a principal name that
contains numbers may result in a 'Identity not specified'
error. Fixed.
- If an invalid identity name was specified, an 'Identity not
specified' error is reported without specifying that the cause was
an invalid name. Fixed: reports proper error.
- Identity names were being validated at the application layer before
being sent to the identity provider. This may cause valid names to
be marked as invalid if the identity provider and the application
disagree on what a valid name is. Fixed: identity name validation
is solely a function of the identity provider.
- Canonicalizing an identity name that contained certain characters
failed due to a validation error. Fixed.
- Possible deadlock in the new credentials dialog. (If one plugin
tries to synchronize custom prompter values from the plugin thread,
while the UI thread tries to obtain a lock on the new credentials
data, a deadlock occurs.) Fixed.
- State information for configuration panels may persist between two
invocations of the configuration window. Fixed to clean up state
information properly.
- The UI library now has full support for custom actions and custom
menus.
- When there are queued alerts and a normal alert is shown, a 'next
alert...' button appears in the alert which lets the user view the
next queued alert. However, if the alert which is displayed
requires the user to select a command button, selecting the 'next'
button would be the equivalent of cancelling out of the alert and
viewing the next one. The library was updated to not show the
'next' button if the alert requires user interaction.
- Credential renewal on half-lifes is now supported as a configurable
option.
- Destroying all credentials on exiting netidmgr is a configurable
option.
- Debug logging to a file has been added
netidmgr.exe (1.0.2.1)
- Selecting 'Ok' in the configuration window didn't notify all the
configuration panels to apply the changes. Fixed.
- PgUp / PgDn / Shift+PgUp / Shift+PgDn keys now work as expected.
- Root level configuration nodes in the Options dialog now also appear
on the Options menu. Configuration nodes that are registered at the
root level are automatically added to the menu.
- The UI now has full support for custom actions and custom menus.
- The UI does not automatically add submenus for actions which are
associated with menus unless the declaration specifies that it
should be rendered as a submenu.
- When displaying alerts, the first button of the alert is always made
the default.
- 'Change summary' button in the configuration dialog was removed,
since it was unused and unnecessary.
- Ticket icons are displayed in the status column for all credentials.
Clicking an icon opens the properties dialog for that credential.
- The UI now has View by Type functionality
- The UI now has Column selection and reorganization. The choice
of columns and their order are preserved between restarts.
- Handle multiple copies of NetIDMgr.exe being started with different
version numbers. Higher version number wins.
krb4cred.dll (1.0.2.1)
- During new credentials acquisition, under some circumstances, the
Kerberos 4 plugin would not notify NetIDMgr about the state of the
Kerberos 4 ticket acquisition. This results in other plugins (such
as AFS) which are depending on the feedback to fail. Fixed.
krb5cred.dll (1.0.2.1)
- If no password is entered while obtaining new credentials, a new TGT
will not be obtained, but the new credentials operation will not
fail if there already is a TGT. Added check to see if the TGT is
expired and fail the operation if no valid TGT is found.
- The identity provider can set the Krb5 CCName property for an
identity incorrectly if there is more than one credential cache
containing tickets for the same principal. Fixed.
- When enumerating ccaches, krb5_cc_resolve was being called with the
name of the ccache without a type prefix. Fixed.
- Tracker control usability issues due to loss of focus. Fixed.
- Realm Editor added.
- Addressed tickets can be requested as in Leash
All modules:
- removed grayed out UI components that are not being backed
by current functionality.
- new icons
- support for 64-bit Windows builds under Visual Studio 8
- proper versioning for language resources
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17712
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 04:26:28 +0000 (04:26 +0000)]
* kdb5.c: Don't include pthread.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17711
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 04:18:31 +0000 (04:18 +0000)]
Enable compilation of little-endian unaligned load/store helper
functions in k5-platform.h, and use them in kdb encoding/decoding
macros.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17710
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 03:01:47 +0000 (03:01 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17708
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 8 Mar 2006 02:56:48 +0000 (02:56 +0000)]
krb5.h, which is built after util/et, which is built after the support
code.
Fix: Put service location decls in k5-locate.h, pull plugin support
decls out of k5-int.h into k5-plugin.h, and make it stand on its own,
which includes changing the return type from krb5_error_code to
int32_t.
Oops: The plugin support code included k5-int.h, which includes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17707
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 7 Mar 2006 20:45:24 +0000 (20:45 +0000)]
Merge from plugin branch
Add plugin support:
- plugin routines in support library (may break windows build!)
- plugin support in KDC location code
- sample Python-based plugin for KDC location, not built without
tweaking sources
- changed service location interface to use an enum instead of passing
profile string and DNS strings and port numbers
- changed pathnames for plugin locations, including kdb back end
- remove locate_service from accessor API
Also, do build shared libraries for Darwin just like any other UNIX box.
Not present yet:
- use new plugin interface for kdb back end
- Windows support
- Mac bundle support (but dlopen support works)
- search path for libkrb5 plugins (only one hard-coded directory for now)
- sorting of plugin collections for predictable ordering
See the various ChangeLogs for specifics.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17706
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 7 Mar 2006 17:14:29 +0000 (17:14 +0000)]
2006-03-07 Jeffrey Altman <jaltman@mit.edu>
* acquire_cred.c: (acquire_init_cred)
If the leash32.dll is not available, fallback to opening the
default credential cache even when the desired_name is
provided.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17704
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 2 Mar 2006 22:05:47 +0000 (22:05 +0000)]
* Makefile.in (clean-unix): Delete util/fakedest
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17690
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 1 Mar 2006 20:20:08 +0000 (20:20 +0000)]
don't check sizeof(int) at configure time
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17689
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 28 Feb 2006 21:16:55 +0000 (21:16 +0000)]
add missing $(SCLIB) aka bufferoverflow.lib for 64-bit windows
ticket: 3415
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17681
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 27 Feb 2006 19:22:08 +0000 (19:22 +0000)]
Qing Dong <dongq@mit.edu> provided a set of changes to allow
krb5 to build under the Microsoft Visual Studio 8 compiler
in 64-bit mode and produce file names that do not conflict
with the names produced by the 32-bit build. That patch
was modified to work on Unix and also include processor
dependent pre-processor definitions to remove warnings.
ticket: 3415
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17680
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 27 Jan 2006 21:48:20 +0000 (21:48 +0000)]
Mark #else of KDB5_STATIC_LINK with ifdef name
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17631
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 27 Jan 2006 21:24:47 +0000 (21:24 +0000)]
Note that caller must free result of conf_get_section
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17630
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 27 Jan 2006 21:21:48 +0000 (21:21 +0000)]
Define new error codes for errors loading dal plugins.
Use these error codes to report plugin load errors.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17629
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 16:45:34 +0000 (16:45 +0000)]
update copyright dates
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17622
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 16:32:22 +0000 (16:32 +0000)]
add/update copyright notices for non-trivial code additions/changes in 2006
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17621
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 16:23:18 +0000 (16:23 +0000)]
copyright update
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17620
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 16:22:19 +0000 (16:22 +0000)]
copyright notices
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17619
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 16:07:41 +0000 (16:07 +0000)]
* export-check.pl: Accept 'S' in nm output
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17618
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 26 Jan 2006 03:07:12 +0000 (03:07 +0000)]
* export-check.pl: Accept 'G' in nm output
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17617
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 10:48:29 +0000 (10:48 +0000)]
Delete the rest of the support in the kdb library for doing locking on
behalf of the plugin library. Convert the remaining locking code (for
protecting the list of plugins loaded) to use the k5_ macros.
ticket: 3416
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17612
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 08:05:24 +0000 (08:05 +0000)]
Remove the thread-safety flag from the kdb plugin interface. Instead,
have the kdb code assume the plugin is thread safe, and implement some
quick and dirty wrapper functions in the db2 plugin to make it use a
local mutex.
There's still some mutex code in the kdb library that should be
reviewed, and simplified or removed.
ticket: 3416
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17611
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 06:39:36 +0000 (06:39 +0000)]
* k5-thread.h (krb5int_mutex_alloc, krb5int_mutex_free, krb5int_mutex_lock,
krb5int_mutex_unlock): Declare.
(k5_mutex_lock, k5_mutex_unlock) [PLUGIN]: Redefine to call krb5int_ function
versions.
ticket: 3417
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17610
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 06:35:19 +0000 (06:35 +0000)]
Check the export lists against the newly built shared library to make sure all
the symbols we want to export are actually defined. GNU/Linux only, for the
moment, but it ought to work on any system using the GNU version of nm, and not
too hard to modify for other ways of extracting the exported symbols of a
library.
* util/export-check.pl: New file.
* config/shlib.conf (*-*-linux*): Run export-check.pl after building a shared
library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17609
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 06:23:25 +0000 (06:23 +0000)]
* fake-addrinfo.c (krb5int_in6addr_any): Always define
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17608
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 06:21:47 +0000 (06:21 +0000)]
* threads.c (krb5int_mutex_alloc, krb5int_mutex_free, krb5int_mutex_lock,
krb5int_mutex_unlock): New functions.
(krb5int_mutex_lock_update_stats, krb5int_mutex_unlock_update_stats,
krb5int_mutex_report_stats): Always define, even if not doing anything.
* libkrb5support.exports: Export the new functions.
ticket: 3417
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17607
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 25 Jan 2006 06:17:20 +0000 (06:17 +0000)]
* lib.in (binutils.versions): Put hidden symbol list after exported list,
because libkrb4 has a symbol starting with "__" in its export list.
(osf1.exports): Rename file in a separate command.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17606
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 18 Jan 2006 02:00:32 +0000 (02:00 +0000)]
Include the support library when linking various test programs, because on
Solaris, with the vendor compiler, we'll always get references to
krb5int_pthread_loaded due to unused inline functions not being eliminated.
(Also inclued it in dependencies, and use CC_LINK when it wasn't used before.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17592
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 18 Jan 2006 00:40:07 +0000 (00:40 +0000)]
* aclocal.m4 (AC_KRB5_TCL_TRYOLD): Include $LIBS in $TCL_LIBS
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17591
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 11 Jan 2006 22:32:31 +0000 (22:32 +0000)]
Back out unwanted change to profile_tcl.c
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17586
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 11 Jan 2006 21:43:29 +0000 (21:43 +0000)]
Remove krb5_callconv from non-exported internal function
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17585
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 6 Jan 2006 21:02:59 +0000 (21:02 +0000)]
* krb5-config.in: Cause libs output to match actual required
ordering of libraries.
ticket: 3320
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17581
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 30 Dec 2005 22:43:20 +0000 (22:43 +0000)]
KFW installation should not use impersonation
Do not use impersonation when installing the network
provider in order to succeed on Vista.
ticket: new
component: windows
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17580
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 30 Dec 2005 22:33:24 +0000 (22:33 +0000)]
* gc_frm_kdc.c: Rewrite to modularize significantly. (~400-line
functions do not deserve to live.) The outer loop no longer
explicitly attempts the direct path to the target; that attempt
has been folded into the inner loop. Remove some redundant
credential lookups present in the old code. Treat unexpected
realm referrals as soft errors, in case some intermediate KDC
disagrees with client regarding a transit path.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17579
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 28 Dec 2005 23:02:32 +0000 (23:02 +0000)]
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Cause free_tgt and
free_otgt to track the states of tgt and otgt correctly, to avoid
a double-free condition which previously happened when this
function returned to krb5_get_credentials(), which proceeded to
free a previously freed TGT in the returned TGT list.
ticket: 3313
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17578
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 22 Dec 2005 05:10:23 +0000 (05:10 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17574
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 22 Dec 2005 05:08:11 +0000 (05:08 +0000)]
Looks like the current Red Hat gcc on Athena emits duplicates and "./foo.h",
neither of which we've properly addressed before.
* depfix.pl (uniquify): New subroutine.
(do_subs_2): Use it.
(do_subs): Fix substitution pattern for " ./".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17573
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 20 Dec 2005 21:35:53 +0000 (21:35 +0000)]
Include krb5.h after k5-int.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17572
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 10:28:39 +0000 (10:28 +0000)]
Rename "modules" to "plugins", and fix up makefile variables etc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17565
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 03:55:02 +0000 (03:55 +0000)]
* Makefile.in (all-unix): Do depend on all-libs.
* test/Makefile.in (PROG_LIBPATH, DB_DEPLIB): Look for library in .. instead
of $TOPLIBD.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17564
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 17 Dec 2005 03:34:50 +0000 (03:34 +0000)]
* k5-thread.h (USE_PTHREAD_LOCK_ONLY_IF_LOADED): Define any time
HAVE_PRAGMA_WEAK_REF is defined.
ticket: 3293
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17563
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 14 Dec 2005 19:21:10 +0000 (19:21 +0000)]
KFW - Correct identity validation algorithm
Do not restrict the characters permitted in identity names
ticket: new
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17557
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 13 Dec 2005 22:06:29 +0000 (22:06 +0000)]
KFW 3.1 - Add missing include path
The leashwin.h file needs to be accessible via the INCLUDE path.
ticket: new
tags: pullup
target_version: 1.3.4
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17556
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Thu, 8 Dec 2005 06:58:15 +0000 (06:58 +0000)]
Network Identity Manager - Fix module loading when en_US locale cannot be loaded
The identity manager is designed for internationalization. However, it only ships with
modules for the en_US locale. Designing modules for other locales was beyond our the
reach of available resources. This patch will force the use of en_US when modules
matching the installed user and system locales cannot be found.
ticket: new
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17555
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 7 Dec 2005 23:14:08 +0000 (23:14 +0000)]
* k5-thread.h (k5_mutex_lock_update_stats) [__GNUC__]: Use an inline function,
to avoid "statement with no effect" warnings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17554
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 01:06:13 +0000 (01:06 +0000)]
KFW 3.0 Final Network Identity Manager updates
Add new documentation files
Add new icons
Add "set default" functionality to the New Credentials dialog
Remove inconsistencies in the Options configuration dialog
Replace the menu bar so that it responds to Alt- and keyboard
shortcuts
Fix an --autoinit race condition
many more things....
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17546
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 00:06:00 +0000 (00:06 +0000)]
KFW 3.0 Final Wix installer updates
update for final release
add new netidmgr documentation: user and development
allow Leash to be used instead of NetIDMgr via a transform
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17545
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 6 Dec 2005 00:00:35 +0000 (00:00 +0000)]
KFW 3.0 Final NSIS installer updates
update for release build
add new documentation links for user and sdk
remove --autoinit startup parameter as it interferes
with the new registry based configuration
ticket: new
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17544
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 2 Dec 2005 22:19:07 +0000 (22:19 +0000)]
* Makefile.in (t_crc): Build against support library.
(check-unix): Use $(RUN_SETUP).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17543
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 2 Dec 2005 20:45:33 +0000 (20:45 +0000)]
* kdb5.c (kdb_load_library): Make dbpath_names static, to keep Solaris native
compiler happier.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17537
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 17:24:05 +0000 (17:24 +0000)]
Update to latest images
ticket: 3263
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17536
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:34:34 +0000 (10:34 +0000)]
Network Identity Manager updates for KFW 3.0 Beta 3
Fix the handling of case sensitive names being stored in the
registry. Only apply case sensitive encoding logic to the
keys below the NetIdMgr key.
Fix the importing of credentials from MSLSA:
Apply an ugly hack to krb5configcc.c that forces _WIN32_WINNT
to 0x0501 for the one file so that the executable can be built
as APPVER=5.0 and yet still gain access to balloon tips on XP
and above.
ticket: new
component: windows
status: open
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17535
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:30:57 +0000 (10:30 +0000)]
KFW Network Provider updates for KFW 3.0 Beta 3
Wrap debugging statements
Fix bug in KFW_get_cred that prevents acquisition of
credentials.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17534
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:29:29 +0000 (10:29 +0000)]
Wix MSI installer for KFW 3.0 Beta 3
Add operating system version check to ensure it is not
installed on Windows 95, 98, ME or NT 4.0
Break out the license text into its own file
Restructure the installer to allow either NetIdMgr or Leash
to be selected (by transform only) as the credentials manager.
The default is to use NetIdMgr.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17533
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:27:22 +0000 (10:27 +0000)]
NSIS installer for KFW 3.0 Beta 3
Add an operating system version check to prevent installation
on Windows 95, 98, ME, and NT 4.0.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17532
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 2 Dec 2005 10:24:48 +0000 (10:24 +0000)]
Increase size of PurgeRequest buffers for MSLSA
Increase the size of the PurgeRequest buffers for MSLSA.
Windows 2003 SP1 is writing beyond the end of the buffer
during the Lsa call.
ticket: new
status: resolved
component: krb5-libs
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17531
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 18:28:08 +0000 (18:28 +0000)]
Restore unintentional deletions between r17518:17519
ticket: 3254
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17526
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 16:06:00 +0000 (16:06 +0000)]
Remove the case sensitive comparisions of registry entry
and schema strings. Microsoft uses HKLM\"SOFTWARE" and
HKCU\"Software". This means the encoding schema that was
selected does not work and the conflict in case prevents
plugins from being loaded.
Better to enable plugins to work than to allow two realms
that differ only by case on the same platform during the
beta.
ticket: 3253
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17523
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 13:19:08 +0000 (13:19 +0000)]
correct installation of krb4_en_us.dll to use the correct name
ticket: 3256
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17522
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 05:26:14 +0000 (05:26 +0000)]
Update NSIS installer for KFW 3.0.0 Beta 2
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17521
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 30 Nov 2005 04:33:54 +0000 (04:33 +0000)]
Updates to Wix installer source for KFW 3.0 Beta 2
- Updates all strings
- Creates shortcuts for netidmgr.exe and netidmgr.chm
- Adds KFW Logon Network Provider
Known bugs:
- the old Leash Documentation PDF still has a shortcut
- specifying the WorkingDirectory does not work
ticket: new
component: windows
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17520
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:30:10 +0000 (22:30 +0000)]
execute wconfig on src/windows/kfwlogon/Makefile.in
ticket: 3254
tags: pullup
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17519
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:22:43 +0000 (22:22 +0000)]
KFW Logon Network Provider
The Logon Network Provider works like the OpenAFS Integrated
Logon. It uses the username entered by the user and the
default realm obtained from krb5.ini and the user entered
password. If possible, tickets are obtained and imported
into the user's CCAPI credential cache.
ticket: new
component: windows
target_version: 1.4.4
status: resolved
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17518
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:13:56 +0000 (22:13 +0000)]
Forgot to update the Windows configuration
ticket: 3253
tags: pullup
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17517
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 29 Nov 2005 22:05:23 +0000 (22:05 +0000)]
KFW Network Identity Manager (Beta 2)
All features completed except for:
* Debug Window
* KRB5.INI (aka Realm) Editor
* Column Selection
* Graphics are incomplete
* Documentation is incomplete
ticket: new
status: resolved
component: windows
target_version: 1.4.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17516
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 07:38:45 +0000 (07:38 +0000)]
Tru64 compilation fails after k5-int.h/krb5.h changes
Due to some silliness in db-config.h and the Tru64 system header files, an
accidental change in the order of inclusion of certain headers caused the build
to fail.
With this patch, "make all" succeeds, but "make check" fails partway through;
I'm still investigating, and don't know at this point if there are additional
compilation problems.
* policy_db.h: Include db.h after gssrpc/types.h, to fix compilation on Tru64.
ticket: new
target_version: 1.4.4
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17515
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 04:40:49 +0000 (04:40 +0000)]
* network.c (listen_and_process): Make local variable 'sout' static
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17513
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 04:31:03 +0000 (04:31 +0000)]
* shlib.conf (*-*-solaris*): Include $(CFLAGS) in LDCOMBINE. Don't use
compiler command-line options for initializers for Solaris 7 and earlier native
compilers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17512
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 02:51:15 +0000 (02:51 +0000)]
* Makefile.in (test_getpw.$(OBJEXT)): New intermediate target.
(test_getpw): Don't build directly from source.
(test_getsockname): New target.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17511
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 29 Nov 2005 02:49:47 +0000 (02:49 +0000)]
* test_getsockname.c: Include autoconf.h.
(main): Fix type of variable 'i' used for size of socket address.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17510
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 29 Nov 2005 00:19:58 +0000 (00:19 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17505
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 29 Nov 2005 00:15:24 +0000 (00:15 +0000)]
don't break make depend in lib/crypto on k5-int.h ordering
* t_cts.c, vectors.c: Don't include krb5.h.
ticket: new
tags: pullup
target_version: 1.4.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17504
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 02:05:16 +0000 (02:05 +0000)]
ignore some files generated via make check
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17500
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:54:58 +0000 (01:54 +0000)]
* t_hmac.c, t_pkcs5.c: Don't include krb5.h
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17499
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:46:39 +0000 (01:46 +0000)]
* Makefile.in (osconf.h): Always remove osconf.new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17498
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:43:43 +0000 (01:43 +0000)]
ignore built fakeka
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17497
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:37:56 +0000 (01:37 +0000)]
* fakeka.c (main): Pass extra null-pointer argument to kadm5_init_with_password
for new db_args argument added by DAL changes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17496
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:29:45 +0000 (01:29 +0000)]
* fakeka.c: Include errno.h
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17495
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 18 Nov 2005 01:22:06 +0000 (01:22 +0000)]
Fix additional cases where krb5.h is included before k5-int.h. In most cases,
it suffices to remove the inclusion of k5-int.h, sometimes including errno.h or
another header. In a couple cases, include order has been changed, or k5-int.h
has been included instead of krb5.h.
ticket: 3236
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17494
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 17 Nov 2005 04:05:39 +0000 (04:05 +0000)]
add a bunch of ignores for things built during a normal in-tree build
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17492
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 15 Nov 2005 00:31:41 +0000 (00:31 +0000)]
This commit ensures that all files in the library include
k5-int.h before krb5.h is included either directly or
indirectly. This is to allow Kerberos to use pre-processor
symbols to choose configurations of C run time library headers
without affecting third party applications.
ticket: 3236
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17489
dc483132-0cff-0310-8789-
dd5450dbe970