Alexandra Ellwood [Thu, 4 Nov 2004 19:18:23 +0000 (19:18 +0000)]
* prof_set.c: profile calls which set values should not fail if file is not writable. You can now write to a different file with profile_flush_to_file() or buffer with profile_flush_to_buffer()
ticket: 2750
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16858
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 3 Nov 2004 22:50:15 +0000 (22:50 +0000)]
merge athena ftpd changes for requiring encrypted passwords
* ftpcmd.y (getline): Merge Athena change to reject MICed
password.
* ftpd.M: Document '-E'.
* ftpd.c (main): Merge Athena's '-E' changes to prohibit
unencrypted passwords.
ticket: new
target_version: 1.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16857
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 3 Nov 2004 09:22:39 +0000 (09:22 +0000)]
Fix typo in last change
ticket: 2761
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16856
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 3 Nov 2004 08:44:41 +0000 (08:44 +0000)]
* Makefile.in (SRCS): Define
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16855
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 3 Nov 2004 08:40:53 +0000 (08:40 +0000)]
move getaddrinfo hacks into support lib for easier maintenance
With the cache on Mac OS X, and likely to be enabled eventually on other
platforms, this is going to wind up being a non-trivial amount of code on most
platforms, and updating the cache code to work on other configurations is
likely to take a few rounds. Rather than recompile the world and add a bunch
of code to each object file doing name lookups, moving the code into the
support library that already defines the static data (list head, mutex) should
make things simpler.
(TODO: Fix calling conventions for Windows?)
* include/fake-addrinfo.h: Move most of code content into
util/support/fake-addrinfo.c.
(krb5int_getaddrinfo, krb5int_freeaddrinfo, krb5int_getnameinfo,
krb5int_gai_strerror): Declare.
(getaddrinfo, freeaddrinfo, getnameinfo, gai_strerror): Define as macros
mapping to the krb5int_ function names.
* util/support/fake-addrinfo.c: Import most of the contents of
include/fake-addrinfo.h, so we only compile it once.
(krb5int_getaddrinfo, krb5int_freeaddrinfo, krb5int_getnameinfo,
krb5int_gai_strerror): New functions, always defined and exported.
* util/support/libkrb5support.exports: Export the new functions, not the old
_fac symbols.
ticket: new
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16854
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 1 Nov 2004 21:33:05 +0000 (21:33 +0000)]
* yarrow.c (krb5int_yarrow_input, krb5int_yarrow_final): Don't check for
forking here.
(yarrow_output_locked): Split out from krb5int_yarrow_output, without locking.
(krb5int_yarrow_output): Do locking and call yarrow_output_locked.
(yarrow_gate_locked): New function; uses yarrow_output_locked.
(krb5int_yarrow_output_Block): Use yarrow_gate_locked.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16853
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sun, 31 Oct 2004 18:05:04 +0000 (18:05 +0000)]
fix mkrel's RELTAIL handling
* mkrel: Rework quoting for RELTAIL check. Don't check RELTAIL if
doing a "-current" snapshot.
ticket: new
target_version: 1.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16850
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 30 Oct 2004 05:43:18 +0000 (05:43 +0000)]
call stat less often on krb5.conf
Changes suggested by lxs to reduce stat frequency to once per second.
In parallel loops creating and destroying krb5 contexts on Mac OS X, this
seems to improve performance by 10%, though it's hard to be sure because
the times are variable.
* prof_int.h (STAT_ONCE_PER_SECOND): Define.
(struct _prf_data_t) [STAT_ONCE_PER_SECOND]: New field LAST_STAT.
* prof_file.c (scan_shared_trees_locked, scan_shared_trees_unlocked): Redefine
to do nothing for now.
(profile_update_file_data) [STAT_ONCE_PER_SECOND]: If the current time is the
same time as the last stat of the file, just return; otherwise, save away the
current time.
ticket: new
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16847
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Sat, 30 Oct 2004 00:56:30 +0000 (00:56 +0000)]
push yarrow locking down into the yarrow code to reduce contention
This seems to speed up creating a krb5_context a little bit, when it happens
a lot in multiple threads.
* prng.c (yarrow_lock): Rename to krb5int_yarrow_lock via macro, and change to
be non-static.
(krb5int_prng_init): Call do_yarrow_init here.
(krb5_c_random_add_entropy): Don't call it here. Don't lock the mutex, either.
(krb5_c_random_make_octets): Don't lock the mutex.
* yarrow/ylock.h: Include k5-thread.h.
(krb5int_yarrow_lock): Declare.
(LOCK, UNLOCK): Define as macros using the k5_mutex_ macros.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16846
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 29 Oct 2004 22:41:45 +0000 (22:41 +0000)]
* fake-addrinfo.h: Include errno.h earlier
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16845
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 28 Oct 2004 23:41:10 +0000 (23:41 +0000)]
* misc.c (check_min_life): Actually return a value on success
ticket: 1335
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16843
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 28 Oct 2004 05:40:00 +0000 (05:40 +0000)]
* k5-thread.h (return_after_yield, k5_mutex_lock) [__GNUC__]: Add macro
versions so debugging line numbers will be useful.
(DEBUG_THREADS_SLOW): Don't define.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16842
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 27 Oct 2004 22:12:48 +0000 (22:12 +0000)]
* misc.c, misc.h: New function check_min_life(), containing common
code from wrapper functions. New function chpass_util_wrapper(),
which does min_life checking prior to calling
kadm5_chpass_principal_util().
* schpw.c (process_chpw_request): Call chpass_util_wrapper().
ticket: 1335
component: krb5-admin
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16841
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 27 Oct 2004 20:48:07 +0000 (20:48 +0000)]
* Initial commit of C CCAPI implementation
ticket: 2753
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16840
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 27 Oct 2004 20:39:30 +0000 (20:39 +0000)]
Create new C CCAPI implementation
ticket:new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16839
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 27 Oct 2004 00:07:20 +0000 (00:07 +0000)]
Permit exporting profile file data into a buffer
* prof_file.c (profile_flush_file_data_to_buffer): New function.
* profi_init.c (profile_flush_to_buffer, profile_free_buffer): New functions.
* prof_parse.c (output_quoted_string): Use a callback instead of stdio calls.
(dump_profile): Renamed from dump_profile_to_file. Use a callback instead of
stdio calls.
(dump_profile_to_file_cb): New function.
(profile_write_tree_file): Updated to new internal interface.
(struct prof_buf): New type.
(add_data_to_buffer, dump_profile_to_buffer_cb, profile_write_tree_to_buffer):
New functions.
* prof_int.h (profile_write_tree_to_buffer, profile_flush_file_data_to_buffer):
Declare.
* profile.hin (profile_flush_to_buffer, profile_free_buffer): Declare.
* libprofile.exports: Export profile_flush_to_buffer and profile_free_buffer.
* profile.swg (profile_flush_to_buffer): Declare.
* profile_tcl.c: Regenerated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16838
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 26 Oct 2004 23:01:14 +0000 (23:01 +0000)]
* mk_req_ext.c (krb5_mk_req_extended): Free keyblock before
copying new one in.
ticket: 2725
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16837
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 26 Oct 2004 00:14:53 +0000 (00:14 +0000)]
Kevin Coffman's patches to support passing gss context state to kernel
ticket: 2743
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16836
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 25 Oct 2004 19:09:54 +0000 (19:09 +0000)]
* libkrb5support.exports: Export krb5int_fac, _lock_fac, _unlock_fac
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16835
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 22 Oct 2004 19:07:45 +0000 (19:07 +0000)]
* prof_file.c (profile_update_file_data): When resetting flags, preserve SHARED
flag.
(scan_shared_trees_locked, scan_shared_trees_unlocked): Convert to macros, so
line numbers reported by assert will be useful.
* prof_test1 (test2): Run new test of modifications with other existing open
profile handles.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16834
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 21 Oct 2004 00:27:14 +0000 (00:27 +0000)]
* locate_kdc.c: Include stdarg.h.
(Tprintf): New function, prints to stderr or not depending on TEST macro.
(add_addrinfo_to_list, krb5int_add_host_to_list, krb5_locate_srv_conf_1,
krb5_locate_srv_dns_1, krb5int_locate_server): Call it instead of conditionally
calling fprintf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16833
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 21:39:53 +0000 (21:39 +0000)]
* dnssrv.c (krb5int_make_srv_query_realm): Append a dot to the hostname, if
there's room in the buffer, to avoid domain search paths.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16832
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 19 Oct 2004 18:09:53 +0000 (18:09 +0000)]
* dnsglue.c (initparse): Skip query type and class when we lack
ns_initparse().
(krb5int_dns_nextans) [!HAVE_NS_INITPARSE]: Pass correct pointer
to dn_skipname(). Actually skip the RR name.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16831
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 10:24:47 +0000 (10:24 +0000)]
* libprofile.exports: Add profile_flush_to_file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16830
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 02:27:49 +0000 (02:27 +0000)]
add dependencies for t_*.c test programs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16829
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 02:24:36 +0000 (02:24 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16828
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 02:22:31 +0000 (02:22 +0000)]
ignore t_locate_kdc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16827
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 19 Oct 2004 02:15:37 +0000 (02:15 +0000)]
* Makefile.in (TEST_PROGS): Add t_locate_kdc.
(check-unix): Run t_locate_kdc to test fetching DNS SRV records.
We probably don't want this test to be part of this test suite long-term, since
it relies on external DNS data rather than being self-contained.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16826
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 18 Oct 2004 23:14:51 +0000 (23:14 +0000)]
Allow profile library caller to write the modified data to a different
file than was originally read.
* prof_file.c (write_data_to_file): New function, split out from
profile_flush_file_data. Add argument can_create indicating whether the old
file should already exist or not.
(profile_flush_file_data): Call it.
(profile_flush_file_data_to_file): New function.
* prof_int.h (profile_flush_file_data_to_file): Declare it.
(profile_flush_file_to_file): New macro.
* prof_init.c (profile_flush_to_file): New function.
* profile.hin (profile_flush_to_file): Declare.
* profile.swg (profile_flush_to_file): Declare.
* profile_tcl.c: Regenerated.
* prof_test1: Use profile_flush_to_file instead of profile_flush, and reload
from the new filename.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16825
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 18 Oct 2004 21:01:01 +0000 (21:01 +0000)]
* Makefile.in (install-unix): Install headers
ticket: 2743
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16824
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 15 Oct 2004 23:58:17 +0000 (23:58 +0000)]
* prof_file.c, prof_int.h, prof_set.c: Remove support for non-SHARE_TREE_DATA
case.
* prof_int.h (struct _prf_data_t): Change filespec to a trailing char array.
Add a length field for the filespec.
(profile_make_prf_data): Declare.
(profile_lock_global, profile_unlock_global): Prototypes need argument lists.
* prof_file.c: Include stddef.h.
(scan_shared_trees_locked, scan_shared_trees_unlocked): New functions.
(r_access, rw_access): Now take const_profile_filespec_t arg.
(profile_make_prf_data): New function.
(profile_open_file): Scan trees at beginning and end. Use
profile_make_prf_data to allocate and initialize storage.
(profile_dereference_data, profile_free_file_data): Scan trees.
(profile_ser_size, profile_ser_externalize): Filespec is never null.
* prof_set.c (rw_setup): Use profile_make_prf_data to allocate and initialize
storage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16822
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 14 Oct 2004 21:43:29 +0000 (21:43 +0000)]
* t_deltat.c (main): Unadorned integer no longer fails now that we
default to seconds.
ticket: 2734
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16819
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 13 Oct 2004 17:55:25 +0000 (17:55 +0000)]
* prof_file.c (profile_library_initializer, profile_library_finalizer): Added macros to avoid adding error tables on platforms that don't use them (ie: OSX)
ticket: 2741
version_fixed: 1.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16818
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 13 Oct 2004 17:49:11 +0000 (17:49 +0000)]
Need prototypes for profile_lock_global and profile_unlock_global
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16817
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 13 Oct 2004 16:18:27 +0000 (16:18 +0000)]
krb5_string_to_deltat should default to seconds if no unit is provided. If the format is invalid, it should return a distinct error (KRB5_DELTAT_BADFORMAT, not EINVAL)
ticket: 2734
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16816
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 13 Oct 2004 02:22:41 +0000 (02:22 +0000)]
Fix small memory leak in repeated krb5 context creation and deletion:
* prof_init.c (profile_init): Don't add error table here.
* prof_file.c (profile_library_initializer): Add it here.
(profile_library_finalizer): Remove it here.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16815
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 8 Oct 2004 03:57:45 +0000 (03:57 +0000)]
Fix the forced setting of the Initial Ticket Flag on Win2000 and
add the functionality to XP and 2003 SP1.
ticket: 2735
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16814
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 7 Oct 2004 21:11:29 +0000 (21:11 +0000)]
* et_c.awk, et_h.awk: Fix off-by-one error.
* et_c.pl, et_h.pl: Regenerated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16813
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 7 Oct 2004 01:16:21 +0000 (01:16 +0000)]
* implementor.texinfo, thread-safe.txt, threads.txt: Various updates relating to
thread support.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16812
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 7 Oct 2004 00:21:38 +0000 (00:21 +0000)]
* et_c.awk, et_h.awk: Complain if the error table is too large.
* et_c.pl, et_h.pl: Regenerated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16811
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 7 Oct 2004 00:00:25 +0000 (00:00 +0000)]
Install example config files
ticket: 249
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16810
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 6 Oct 2004 23:51:21 +0000 (23:51 +0000)]
* localaddr.c (print_addr): If getnameinfo returns EAI_SYSTEM, report what the
system error is.
Also fix a fencepost error in the last change.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16809
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 6 Oct 2004 23:39:12 +0000 (23:39 +0000)]
* localaddr.c (foreach_localaddr): Be more careful not to walk past the end of
the ifreq array.
(get_ifreq_array): Return 0 in success case, not errno.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16808
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 6 Oct 2004 04:21:27 +0000 (04:21 +0000)]
* localaddr.c (get_ifreq_array): Split out from foreach_localaddr general
version.
(foreach_localaddr): Call it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16807
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 6 Oct 2004 01:10:09 +0000 (01:10 +0000)]
* aclocal.m4 (KRB5_AC_ENABLE_THREADS): On HP-UX, define some preprocessor
symbols that -pthread defines, but don't use -pthread so we can avoid forcing
linking against pthread libraries.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16806
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 6 Oct 2004 01:07:35 +0000 (01:07 +0000)]
forgot to check in with fake-addrinfo.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16805
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 5 Oct 2004 21:24:01 +0000 (21:24 +0000)]
* localaddr.c (foreach_localaddr) [HAVE_STRUCT_IF_LADDRCONF && 0]: Fix
if_laddrreq.iflr_name field name not properly adjusted. The iflr_addr field is
an HP-UX specific sockaddr_ext with sa_ field name prefixes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16804
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 5 Oct 2004 21:04:04 +0000 (21:04 +0000)]
* fake-addrinfo.h (AI_ADDRCONFIG, AI_V4MAPPED, AI_ALL): If not defined, or when
completely faking getaddrinfo, define them as zero.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16803
dc483132-0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 4 Oct 2004 17:51:23 +0000 (17:51 +0000)]
Added new files used by krb5-1.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16802
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 1 Oct 2004 23:44:49 +0000 (23:44 +0000)]
* localaddr.c (get_if_laddrconf, foreach_localaddr): New implementation for
HP-UX 11, based on Solaris support and information from Doug Engert. Disabled
for now, until it can be tested.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16801
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 1 Oct 2004 23:43:05 +0000 (23:43 +0000)]
* configure.in: Check for struct if_laddrconf, as for struct lifconf
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16800
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 1 Oct 2004 22:08:14 +0000 (22:08 +0000)]
* kcmd.c (kcmd_connect): Set *addrfamilyp with the address family actually used
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16799
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 1 Oct 2004 04:25:43 +0000 (04:25 +0000)]
* update the include paths to allow patchlevel.h to be found
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16798
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 1 Oct 2004 04:23:34 +0000 (04:23 +0000)]
* update Changelog
ticket: 2729
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16797
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 1 Oct 2004 04:22:07 +0000 (04:22 +0000)]
* Add new conditional resource strings
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16796
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 1 Oct 2004 04:18:22 +0000 (04:18 +0000)]
* hst_realm.c: provide definition for MAXDNAME if
KRB5_DNS_LOOKUP is not defined.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16795
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 30 Sep 2004 19:36:29 +0000 (19:36 +0000)]
* start_servers_local: If one of the servers failed to start, log info about
which start file was not found.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16794
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 28 Sep 2004 17:36:59 +0000 (17:36 +0000)]
* vbaxam.doc: File deleted
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16793
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 28 Sep 2004 16:38:12 +0000 (16:38 +0000)]
* prof_file.c (profile_dereference_data_locked): New function.
(profile_dereference_data): Call it.
* prof_set.c (rw_setup): Likewise.
* prof_int.h (profile_dereference_data_locked): Declare it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16792
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sun, 26 Sep 2004 13:21:01 +0000 (13:21 +0000)]
* Makefile.in (check-unix-tcl-ok): Use KRB5_RUN_ENV
* configure.in: Use KRB5_RUN_FLAGS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16791
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 25 Sep 2004 01:00:55 +0000 (01:00 +0000)]
Make patchlevel.h be the master version file
ticket: 1345
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16790
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 24 Sep 2004 02:21:47 +0000 (02:21 +0000)]
* network.c (closedown_network): Free each connection data structure while
closing file descriptors.
ticket: 1210
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16789
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 24 Sep 2004 02:19:42 +0000 (02:19 +0000)]
* kdc_util.h (sockaddr2p): Don't declare
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16788
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 24 Sep 2004 01:56:21 +0000 (01:56 +0000)]
* configure.in: Use AC_MSG_NOTICE for krb4 messages instead of AC_MSG_RESULT,
because there's no corresponding AC_MSG_CHECKING.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16787
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 24 Sep 2004 01:50:12 +0000 (01:50 +0000)]
* xdr_rec.c (LAST_FRAG): Use 1L in case int is small
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16786
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 24 Sep 2004 01:15:44 +0000 (01:15 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16785
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 23:26:25 +0000 (23:26 +0000)]
* prof_tree.c (struct profile_node): Add new bitfield DELETED.
(profile_add_node): Move variable CMP into inner block where it's used. Clear
deleted flag.
(profile_find_node): Skip deleted nodes.
(profile_remove_node): Just set the deleted flag, don't modify the tree.
* Makefile.in (profile_tcl.c): Target should be in srcdir.
(profile_tcl.o): Depend on profile.h.
(DO_TCL): New variable.
(check-unix-tcl-, check-unix-tcl-ok): New targets.
(check-unix): Depend on one of them, based on DO_TCL.
* configure.in: Set and substitute DO_TCL.
* prof_test1: New file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16784
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 23:23:46 +0000 (23:23 +0000)]
regenerated
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16783
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 22:16:13 +0000 (22:16 +0000)]
* profile.swg: Only include tclsh.i if building for Tcl.
(Tcl_SetResult, my_tcl_setresult): Compile hack only if building for Tcl.
(%typemap SWIGTYPE *OUTPUT): Initialization is not specific to the scripting
language. Add Python code.
(%typemap errcode_t, errcode_t*): Add placeholders for Python support.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16782
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 02:15:25 +0000 (02:15 +0000)]
* Makefile.in: Delete @SHARED_RULE@ line.
(thisconfigdir): Fix.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16781
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 00:27:33 +0000 (00:27 +0000)]
* Makefile.in (T_STD_CONF_OBJS): Include dnsglue.o
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16780
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 00:25:30 +0000 (00:25 +0000)]
* lib.in (binutils.versions, osf1.exports): New file targets.
(clean-libs): Delete them.
* pre.in (SHLIB_EXPORT_FILE_DEP): Use @SHLIB_EXPORT_FILE_DEP@.
* shlib.conf: Set it to $(SHLIB_EXPORT_FILE) by default.
(alpha*-dec-osf*): Use osf1.exports instead of adding commands to generate a
temporary file.
(*-*-linux*, *-*-gnu*, *-*-k*bsd*-gnu): Use binutils.versions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16779
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Thu, 23 Sep 2004 00:21:34 +0000 (00:21 +0000)]
* aclocal.m4 (AC_KRB5_TCL_FIND_CONFIG): If the config info set by tclConfig.sh
doesn't produce a working executable, set TCL_LIBS to be empty explicitly.
(KRB5_BUILD_LIBRARY_WITH_DEPS): Substitute SHLIB_EXPORT_FILE_DEP.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16778
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 22 Sep 2004 22:59:46 +0000 (22:59 +0000)]
Better support for using libutil on systems that need it for various
pty-related functions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16777
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 22 Sep 2004 21:57:25 +0000 (21:57 +0000)]
Only use -Wl,-oldstyle_liblookup if using native linker. Check for
native linker if using gcc.
ticket: 927
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16776
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 22 Sep 2004 16:37:47 +0000 (16:37 +0000)]
* libgssrpc.exports: Export svc_maxfd
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16775
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 21 Sep 2004 23:16:10 +0000 (23:16 +0000)]
* shlib.conf (*-*-linux*, *-*-gnu*, *-*-k*bsd*-gnu): Don't use the linker
option --retain-symbols-file, it doesn't work for shared libraries.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16774
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 22:42:31 +0000 (22:42 +0000)]
Don't assume that presence of res_nsearch() means we have ns_initparse()
ticket: 2710
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16773
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 20:48:39 +0000 (20:48 +0000)]
memory leak in rd_cred.c
* rd_cred.c (decrypt_credencdata): Clear and free ppart to avoid
leak. Reported by Derrick Schommer.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16772
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 21 Sep 2004 20:39:19 +0000 (20:39 +0000)]
memory leak in arcfour string_to_key
Derrick Schommer reports that arcfour's string_to_key function leaks
memory. This is true; it copies the password to convert to utf16 and
never frees the copy. It does memset the copy to 0 when done.
ticket: new
requestors: schommer@gmail.com
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16771
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 18:20:16 +0000 (18:20 +0000)]
* configure.in: Check for sockaddr_in.sin_len and
sockaddr.sa_len. Check for sys/param.h in case we need NBBY
somewhere.
* auth.h, svc_auth.h: Namespace cleanup.
* svc.h, rpc_commondata.c: New global svc_maxfd.
* svc.c (svc_getreqset): Break inner part of loop out into
local function svc_do_xprt(). Don't use rpc_dtablesize();
instead, use svc_maxfd.
* svc_run.c: Don't use rpc_dtablesize().
* clnt_generic.c, clnt_simple.c, getrpcport.c:
* svc_tcp.c, svc_udp.c: Set sockaddr_in.sin_len when available.
* ovsec_kadmd.c (kadm_svc_run): Don't use rpc_dtablesize().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16770
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 21 Sep 2004 18:06:56 +0000 (18:06 +0000)]
Add DNS resolver glue layer. Use it
ticket: 2710
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16769
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 21:52:12 +0000 (21:52 +0000)]
* libgssrpc.exports: Don't export internals
* svc.c (svc_getreqset):
* svc_tcp.c (readtcp): Don't intersperse preprocessor
conditionals with braces.
* auth_gssapi.c, auth_gssapi_misc.c, auth_none.c:
* auth_unix.c, authunix_prot.c, bindresvport.c:
* clnt_generic.c, clnt_perror.c, clnt_raw.c
* clnt_simple.c, clnt_tcp.c, clnt_udp.c, get_myaddress.c:
* getrpcent.c, getrpcport.c, pmap_clnt.c:
* pmap_getmaps.c, pmap_getport.c, pmap_prot.c, pmap_prot2.c:
* pmap_rmt.c, rpc_callmsg.c, rpc_prot.c:
* svc.c, svc_auth.c, svc_auth_gss.c:
* svc_auth_gssapi.c, svc_auth_unix.c, svc_raw.c:
* svc_run.c, svc_simple.c, svc_tcp.c:
* svc_udp.c, xdr.c, xdr_alloc.c, xdr_array.c:
* xdr_float.c, xdr_mem.c, xdr_rec.c, xdr_reference.c:
* xdr_stdio.c: Protoize, to avoid potential problems when
fixed-width types are not ints on some platforms.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16768
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 20:25:06 +0000 (20:25 +0000)]
Use a new variable, $(INSTALL_SCRIPT) to install scripts, so they
won't get stripped when someone does "make install-strip".
ticket: new
tags: pullup
target_version: 1.3.6
component: krb5-build
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16767
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Fri, 17 Sep 2004 17:02:53 +0000 (17:02 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Look for res_search() prototype,
then for symbol in library, in case there's symbol renaming
happening in the headers. Clean up some style nits.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16766
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 14:53:54 +0000 (14:53 +0000)]
* kfw-fixed.nsi:
The version of MSIEXEC which ships with Windows 2000 does
not accept the /passive and /promptreboot command line
options. On Windows 2000 only, do not specify them.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16763
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 14:01:42 +0000 (14:01 +0000)]
Remove trailing slash from PATH
Minimize Leash32.exe on startup
Update msi-deployment guide to explain how to replace
the configuration files in greater detail
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16761
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 17 Sep 2004 07:33:30 +0000 (07:33 +0000)]
Fix error code returned for empty sequences and check the error
in krb5_lcc_initialize
ticket: 2705
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16760
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Sep 2004 21:32:04 +0000 (21:32 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Only look for res_search() in
libraries, not headers, in case it's present but not prototyped.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16759
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 15 Sep 2004 20:02:31 +0000 (20:02 +0000)]
* configure.in: Check for h_errno declaration in netdb.h
* port-sockets.h: Explicitly declare h_errno if it's missing.
ticket: 1044
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16758
dc483132-0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 15 Sep 2004 00:01:19 +0000 (00:01 +0000)]
* reconf: Export ACLOCAL=true to environment
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16757
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 22:25:07 +0000 (22:25 +0000)]
* aclocal.m4 (AC_LIBRARY_NET): Require the BIND_8_COMPAT check
prior to looking for prototypes, as BIND 9 (at least on Panther)
turns off some prototypes and typedefs if BIND_8_COMPAT is
defined.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16756
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 14 Sep 2004 21:57:45 +0000 (21:57 +0000)]
Enable default installation of documentation
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16754
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 01:24:20 +0000 (01:24 +0000)]
* dnssrv.c:
* hst_realm.c:
* locate_kdc.c: Include netinet/in.h as a prerequisite for
resolv.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16753
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 14 Sep 2004 01:20:39 +0000 (01:20 +0000)]
* aclocal.m4: Fix check for resolv.h; some platforms have
prerequisite headers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16752
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 21:38:33 +0000 (21:38 +0000)]
* kfw-fixed.nsi:
Detect the Wix MSI, the SWRT MSI, and the Pismere MSI
If found, uninstall the MSI before installing NSIS
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16749
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 01:50:24 +0000 (01:50 +0000)]
Add msi-deployment-guide.txt
ticket: 2707
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16744
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 13 Sep 2004 01:48:56 +0000 (01:48 +0000)]
Updates to WiX to satisfy the needs of MIT SWRT
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16743
dc483132-0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Sat, 11 Sep 2004 05:35:16 +0000 (05:35 +0000)]
utils.nsi: Fix RestartRequired function to actually determine
if a restart is required
kfw-fixed.nsi:
- Add support for compiler version 1400
- Fix terminal server key deletions
- Delete leash32.exe on uninstall
- Correct the logic of the call of RestartRequired
ticket: 2702
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16742
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 10 Sep 2004 23:01:11 +0000 (23:01 +0000)]
Support building on x86_64
Include resolv.h when looking for res_nsearch and res_search.
Ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16741
dc483132-0cff-0310-8789-
dd5450dbe970