Mark Eichin [Sat, 24 Feb 1996 00:40:44 +0000 (00:40 +0000)]
* keytab.c (krb5_ktkdb_close): new function, non-optional.
(krb5_kt_kdb_ops): include _close method, comment what the other
slots are.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7510
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 24 Feb 1996 00:34:56 +0000 (00:34 +0000)]
Fri Jan 12 04:37:23 1996 Mark Eichin <eichin@cygnus.com>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): rather than apply fit
an extended v5 lifetime into a v4 range, give out a v4 ticket with
as much of the v5 lifetime is available "now" instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7509
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 24 Feb 1996 00:31:42 +0000 (00:31 +0000)]
Sat Feb 3 22:37:55 1996 Mark Eichin <eichin@cygnus.com>
* network.c (add_port): sunos realloc doesn't handle a NULL
pointer, so protect with a macro.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7508
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 24 Feb 1996 00:29:47 +0000 (00:29 +0000)]
one step closer to *really* only depending on krb5.conf. (I don't know
of any others, but this was a big one.)
Sat Feb 10 02:46:27 1996 Mark Eichin <eichin@cygnus.com>
* main.c (initialize_realms): look for [kdc] profile=path for
default alternate kdc profile (environment variable still
overrides it.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7507
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 24 Feb 1996 00:18:51 +0000 (00:18 +0000)]
This is the aggregate of a bunch of fixes to kadmind (after all, some people
actually use it.) Note that in admin.c, I shredded admin_add_modify and
admin_merge_dbentries, converting them to a goto-exception style, eliminating
the excessive nesting, so they were readable; having done so, admin_add_modify
turned out to be correct, and admin_merge_dbentries was "obviously" broken
in that it assigned random keys gratuitiously. Fixing this causes "modent"
to actually work, without destroying the key...
Wed Feb 21 21:26:50 1996 Mark Eichin <eichin@cygnus.com>
* srv_main.c (xprintf): handle VARARGS.
Sun Feb 18 00:08:02 1996 Mark W. Eichin <eichin@cygnus.com>
* admin.c (admin_merge_dbentries): rewrite for readability, and
fix the year old bug of modify randomizing the password field.
(admin_add_modify): rewrite for readability.
Fri Feb 9 20:11:50 1996 Mark Eichin <eichin@cygnus.com>
* srv_net.c (net_init): gethostbyname doesn't use errno,
compensate by using KRB5_ERR_BAD_HOSTNAME.
Tue Dec 12 19:14:51 1995 Mark Eichin <eichin@cygnus.com>
* admin.c (admin_merge_dbentries): new argument mod_only, to
distinguish between add and modify.
(admin_add_modify): new argument mod_only, to distinguish between
add and modify (and pass through to admin_merge_dbentries.)
(admin_add_principal, admin_modify_principal, admin_change_opwd,
admin_change_orandpw): pass flag indicating modify or add.
Tue Sep 26 22:51:25 1995 Mark Eichin <eichin@cygnus.com>
* admin.c (admin_add_modify): copy, don't just assign, principals
to avoid double-freeing. Zero out "contents" and mod_name fields
after freeing, likewise. Free cur_dbentry and new_dbentry properly.
Tue Sep 26 02:56:41 1995 Mark Eichin <eichin@cygnus.com>
* srv_acl.c (acl_free_entries): jump the ae_next link *before*
freeing the item so we don't lose it.
Tue Sep 26 02:28:35 1995 Mark Eichin <eichin@cygnus.com>
* admin.c (admin_merge_dbentries): copy who into dbentp->mod_name
because callers will free it after successful use.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7506
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 24 Feb 1996 00:01:31 +0000 (00:01 +0000)]
* krb5.hin (krb5_x, krb5_xc): wrapper macros to test all function
pointers before calling through them (abort if null.) Simplifies
debugging on many platforms. Currently #if 1, but could be
conditionalized once we're in "production".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7505
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Fri, 23 Feb 1996 23:44:44 +0000 (23:44 +0000)]
* kdb5_edit.c (kdb5_edit_Init): set manual_mkey for testing with -P
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7504
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 23 Feb 1996 02:37:33 +0000 (02:37 +0000)]
t_random.c: New file which just tests the random number generator
new_rn_key.c (mit_des_set_random_generator_seed): Add fix so that we
do something even if the input key is not a valid DES key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7503
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 22 Feb 1996 18:19:15 +0000 (18:19 +0000)]
* Makefile.in (check-unix): Set LD_LIBRARY_PATH for kdb5_anadd
* hostaddr.c (krb5_os_hostaddr): Set magic number in structure.
* full_ipadr.c (krb5_make_full_ipaddr): Set magic number in structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7502
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 22 Feb 1996 13:11:38 +0000 (13:11 +0000)]
Do not free memory before done using it. (The credential was pointing
to memory that is freed and then referenced again)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7501
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 05:49:42 +0000 (05:49 +0000)]
A few more things are complete.
Added a note about the TGS req starttime bug.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7500
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:42:42 +0000 (04:42 +0000)]
kerberos_v4.c: Better DES key validation.
main.c: Don't assume master key is DES for initializing the V4 randkey
generator; use a random key from the DES_CBC_CRC generator as the seed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7499
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:41:12 +0000 (04:41 +0000)]
kadm_funcs.c: add_entry was failing; improper struct initialization
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7498
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:40:25 +0000 (04:40 +0000)]
Makefile.in: Don't install k5-int.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7497
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:40:02 +0000 (04:40 +0000)]
* aclocal.m4
Don't include build directory in rpath
Fixed cache variable prefix (from krb_ to krb5_)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7496
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:24:39 +0000 (04:24 +0000)]
Do not include the build directories in the rpath (runtime lib path)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7495
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:23:30 +0000 (04:23 +0000)]
* kerberos_v4.c
Improve the checks that DES keys are being used.
* main.c
Do not assume that the master key is necessarily a DES key suitable
for use to initialize the V4 random key generator. Instead, after
initializing the DES_CBC_CRC generator, get a random key and use that
to seed the V4 random key generator.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7494
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:21:07 +0000 (04:21 +0000)]
add_entry was not working because the structure length element was
not being initialized.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7493
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Thu, 22 Feb 1996 04:20:02 +0000 (04:20 +0000)]
Do not install k5-int.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7492
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 21 Feb 1996 20:21:50 +0000 (20:21 +0000)]
kerberos_v4.c (kerberos_v4): Use strong random number generator
main.c (main): Initialize Kerberos V4's random number generator.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7491
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Sat, 17 Feb 1996 05:07:06 +0000 (05:07 +0000)]
If the configuration file does not exist (context->profile == NULL)
return KRB5_CONFIG_CANTOPEN; if the default realm is not defined in
the configuration file, return an error message saying so. These
changes just make the diagnostic error messages more clear.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7486
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Fri, 16 Feb 1996 17:04:45 +0000 (17:04 +0000)]
Added new error table code KRB5_CONFIG_NODEFREALM
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7485
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 15 Feb 1996 20:07:29 +0000 (20:07 +0000)]
If version is not FVNO_4, do not seek forwar a random stack value.
Also check resturn status of lseek.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7481
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Thu, 15 Feb 1996 15:59:43 +0000 (15:59 +0000)]
Set magic number in krb5_address
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7480
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 14 Feb 1996 21:48:05 +0000 (21:48 +0000)]
Make parsing more flexible, so we don't barf over lack of spaces
around the equals sign.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7479
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 14 Feb 1996 14:55:34 +0000 (14:55 +0000)]
* kdb5_edit.c (enter_master_key, set_dbname_help): If master key
enctype is unknown, set to DEFAULT_KDC_ENCTYPE.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7478
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 14 Feb 1996 02:40:31 +0000 (02:40 +0000)]
* kdb_dbm.c (krb5_dbm_db_rename): Initialize pointer before use
for case where new db does not exist.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7477
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 13 Feb 1996 21:11:40 +0000 (21:11 +0000)]
* kdb5_edit.c (extract_v4_srvtab): krb5_dbekd_decrypt_key_data
takes krb5_key_data *, not **.
Prototype warnings realy do mean potential errors.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7476
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 13 Feb 1996 03:52:55 +0000 (03:52 +0000)]
Remove junk file
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7475
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 13 Feb 1996 03:42:47 +0000 (03:42 +0000)]
Fix lint flame (added missing cast)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7474
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Sun, 11 Feb 1996 01:58:20 +0000 (01:58 +0000)]
Incluide stdlib.h for declaration of malloc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7470
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 10 Feb 1996 23:46:05 +0000 (23:46 +0000)]
* g_glue.c: grab stdlib.h to get NULL
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7469
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 10 Feb 1996 02:45:42 +0000 (02:45 +0000)]
Only display secure_message if encryption actually enabled
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7467
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 10 Feb 1996 02:35:39 +0000 (02:35 +0000)]
Fixed bug in v4 compatability: you don't check
v5 authenticator checksums when v4 is being used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7466
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 9 Feb 1996 02:19:14 +0000 (02:19 +0000)]
* scc.h scc_gprin.c scc_maybe.c scc_skip.c scc_sseq.c
Store and retrieve the os_context time offset from the
credentials cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7465
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 9 Feb 1996 01:05:50 +0000 (01:05 +0000)]
* pre.in
Install administrative database utilities in sbin, not admin.
Also, define $(transform) to be the sed transformation for program
installation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7464
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 9 Feb 1996 00:52:44 +0000 (00:52 +0000)]
* kinit.c
Only initialize the credentials cache if credentials were obtained.
This means you won't blow away the old cache if an incorrect password
was entered, and it also allows for the os_context time offset to be
set properly in the credentials cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7463
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 9 Feb 1996 00:50:32 +0000 (00:50 +0000)]
* fcc_maybe.c
Only store the os_context time offset if it is valid.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7462
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Fri, 9 Feb 1996 00:47:05 +0000 (00:47 +0000)]
* fcc.h fcc_gprin.c fcc_maybe.c fcc_skip.c fcc_sseq.c
Store the time offset from the os_context in the credentials cache.
When applications open the credentials cache, they will set the
os_context time offset if kdc_timesync is set and the os_context
time offset has not yet been set.
Note: The time offset is stored during krb5_cc_initialize, so the os_context
should be set prior to this operation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7461
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 7 Feb 1996 20:33:12 +0000 (20:33 +0000)]
* configure.in: Check for stdlib.h
* secure.c, pclose.c, ruserpass.c, ftp.c: Include stdlib.h if
present for malloc declarations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7453
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 7 Feb 1996 19:18:40 +0000 (19:18 +0000)]
Need to include stdio.h and errno.h no matter what.
(stderr and ENOMEM needs to be defined)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7452
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Wed, 7 Feb 1996 18:38:02 +0000 (18:38 +0000)]
Make clean removes ftpd (not ftp)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7451
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 7 Feb 1996 05:33:25 +0000 (05:33 +0000)]
New files, for danw's changes to allow building Makefiles for the
Macintosh. We now can build MPW makefiles which are interpreted by
CodeWarrior.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7445
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 7 Feb 1996 05:30:24 +0000 (05:30 +0000)]
Folded in danw's changes to allow building Makefiles for the
Macintosh. We now can build MPW makefiles which are interpreted by
CodeWarrior.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7444
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 7 Feb 1996 05:04:58 +0000 (05:04 +0000)]
Commited new snapshot from Roland Schemers at Sun
This snapshot features a BSD-style copyright notice from Sun. It also
includes the code to parse a configuration file and then dlopen the
proper shared library. Miscellaneous cleanup in the mechglue directory.
Namespace uglieness (like get_mechanism) have been cleaned up, to use
things like __gss_get_mechanism instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7442
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 4 Feb 1996 04:21:09 +0000 (04:21 +0000)]
* configure.in, Makefile.in
Berkeley hash db is now a separate library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7437
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 4 Feb 1996 04:20:23 +0000 (04:20 +0000)]
* configure.in, Makefile.in
Better support of alternate db libraries.
Berkeley db is now a separate library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7436
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 4 Feb 1996 04:19:17 +0000 (04:19 +0000)]
* Makefile.in
Support --program-prefix, --program-suffix, --program-transform
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7435
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Sun, 4 Feb 1996 04:16:00 +0000 (04:16 +0000)]
* aclocal.m4
Support --program-prefix and --program-suffix
Support different dbm libraries better.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7434
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 1 Feb 1996 22:01:13 +0000 (22:01 +0000)]
Remove check to make sure ticket enctype
is in the tgs enctypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7431
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 1 Feb 1996 22:00:01 +0000 (22:00 +0000)]
Remove check to make sure cached tickets are in tgs_enctypes
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7430
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 1 Feb 1996 05:56:27 +0000 (05:56 +0000)]
* rcp (client mode) now uses rsh -x but still supports the old encryption in
server mode.
* krshd will work in encrypting mode even when the port for stderr is null.
* rcp will work if stdin isn't not a socket, but is a pipe in remote mode
* krshd destroys forwarded credentials properly
* For rsh, the secure_message got moved to the client; if you use a new client
with an old server, you get secure_message twice, but it should be a
useful change long-term.
* Fixed typo in rcp man page.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7423
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 31 Jan 1996 22:26:17 +0000 (22:26 +0000)]
* krshd: Make sure KRB5CCNAME gets set for forward creds; code could be much cleaner.
* forward.c: give caller handle to ccache so it can be destroyed.
* krshd: destroy the ccache if it is non-null.
* krlogind: Fix call, but don't destroy cache, as
login.krb5 should do that any year now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7422
dc483132-0cff-0310-8789-
dd5450dbe970
Richard Basch [Wed, 31 Jan 1996 00:22:23 +0000 (00:22 +0000)]
Several changes to the db rename feature.
Renaming locks the target lock file.
If the target lock file doesn't exist, create it.
Check the return value of krb5_dbm_db_set_name and set the
context accordingly if the target didn't exist.
Only unlink the source lock file if one could be computed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7418
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Tue, 30 Jan 1996 23:30:23 +0000 (23:30 +0000)]
* dump.c (load_db): dbrenerr_fmt prints "from" first, so pass it
to fprintf correctly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7417
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Tue, 30 Jan 1996 23:28:18 +0000 (23:28 +0000)]
* kdb_dbm.c (krb5_dbm_db_rename): O_EXCL is meaningless without
O_CREAT.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7416
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Tue, 30 Jan 1996 18:04:30 +0000 (18:04 +0000)]
Don't update the utmp file unless update_utmp is true
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7414
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sun, 28 Jan 1996 19:36:35 +0000 (19:36 +0000)]
* dump.c (process_k5_record): t2..t9 is only 8 vars, not 9
make check is useful, gang...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7412
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sun, 28 Jan 1996 00:20:31 +0000 (00:20 +0000)]
Fix quoting problem
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7411
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 27 Jan 1996 23:50:53 +0000 (23:50 +0000)]
Fixes to build on Linux;
never call fcntl(F_SETOWN)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7410
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 27 Jan 1996 06:40:36 +0000 (06:40 +0000)]
Fix bug in finding the tgs key;
we really really want to avoid encrypting v4 tickets in DES3 keys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7407
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 27 Jan 1996 06:39:40 +0000 (06:39 +0000)]
Implement -e option for keytabs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7406
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:14:24 +0000 (06:14 +0000)]
* void_assoc.c (ptyint_void_association): if we don't have
TIOCNOTTY (HP/UX 9 for example) don't try to use it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7405
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:13:02 +0000 (06:13 +0000)]
* krb5.conf: use host:portnum in example files, not host,portnum
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7404
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:11:33 +0000 (06:11 +0000)]
* kadmin.exp: use a longer password for kadmin_modify test to meet
password quality constraints.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7403
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:09:40 +0000 (06:09 +0000)]
fix indentation
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7402
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:06:22 +0000 (06:06 +0000)]
* kuserok.c: use HAVE_SETEUID and HAVE_SETRESUID to figure out how
to emulate seteuid instead of assuming hpux.
* configure.in: test for seteuid as well; fold some tests into a
single AC_HAVE_FUNCS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7401
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 06:03:26 +0000 (06:03 +0000)]
* t_kdb.c: wrap db_dbm decls and berkely_dispatch in ifdefs
BERK_DB_DBM.
(do_testing): wrap references as well.
* keytab.c (krb5_ktkdb_get_entry): use KRB5_PROTOTYPE.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7400
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 05:57:22 +0000 (05:57 +0000)]
* t_cksum.c (main): use proper old-style definition
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7399
dc483132-0cff-0310-8789-
dd5450dbe970
Mark Eichin [Sat, 27 Jan 1996 05:55:04 +0000 (05:55 +0000)]
* network.c (setup_network): strtol is good enough for port
number, and sunos doesn't have strtoul (and nothing else in the
tree uses it.)
(add_port): use proper old-style definition.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7398
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Sat, 27 Jan 1996 02:58:54 +0000 (02:58 +0000)]
Oops; I accidentally comitted a version of krlogin
that didn't even compile.
(I tested the binary in the wrong build tree.)
Compiled and tested this time.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7397
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 21:45:46 +0000 (21:45 +0000)]
Implement -e option to list that
shows enctypes associated with a key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7396
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 20:21:15 +0000 (20:21 +0000)]
Require DES for credentials
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7395
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 07:03:43 +0000 (07:03 +0000)]
Fix bug in call to shared library macros
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7394
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 07:03:22 +0000 (07:03 +0000)]
Telnet really wants a DES key; have it ask for one
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7393
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 07:02:51 +0000 (07:02 +0000)]
Fix delay in ^C processing
caused by my OOB fix.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7392
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 05:23:19 +0000 (05:23 +0000)]
Disable resetting of tgs_enctypes
until I hear a good reason for it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7391
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 05:22:37 +0000 (05:22 +0000)]
Convert the kvno to a char before writing it out. (The previous code
tried, but casting from (int *) to (char *) is not the same as casting
from int to char.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7390
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 05:20:55 +0000 (05:20 +0000)]
Removed outdated comment about mapping
etypes to ktypes--it's a one to one mapping
now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7389
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 05:20:17 +0000 (05:20 +0000)]
Fixed to check enctype of retrieved keys
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7388
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Fri, 26 Jan 1996 05:19:21 +0000 (05:19 +0000)]
Fixed extraction of keytabs to extract all keys
not just the first one.
Fixed v4 extraction to find the v4 key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7387
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 25 Jan 1996 20:06:28 +0000 (20:06 +0000)]
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Take both a v5 and v4
service key. Use the v5 service key to decrypt the v5 ticket, and
the v4 service key to encrypt the v4 ticket.
* krb524d.c (do_connection): Use a separate v5 and v4 service key
so that if the KDC chooses to encrypt the v5 ticket in something
besides ENCTYPE_DES_CBC_CRC, we don't lose. Also, make sure we
free keyblock contents and tickets on error.
(lookup_service_key): Pass enctype to kdc_get_server_key
(kdc_get_server_key): Only try for v4 salt if the enctype is
DES_CRC. Take enctype as an argument. This creates a problem
if the server key has a normal and v4 salt of ENCTYPE_DES_CBC_CRC
but I can't think of a good answer to this.
* k524init.c (main): Use crc32 not md5.
Wed Jan 24 20:05:47 1996 Sam Hartman <hartmans@tertius.mit.edu>
* krb524d.c (kdc_get_server_key): Try to find a v4 salt type key,
else try any des_crc32 key, else fail.
(do_connection): Lookup a crc32 key not an md5 key.
(init_master): Handle reading kdc profile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7386
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 25 Jan 1996 20:04:58 +0000 (20:04 +0000)]
get_creds.c: Only match on enctype if in_creds.keyblock
has non-null enctype. (I.E. implement as documented)
gc_via_tkt.c: If the in_creds.keyblock.enctype !=0 then don't call
send_tgs with a null ktypes paramater; instead, explicitally allow only
increds.keyblock.enctype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7385
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 25 Jan 1996 20:01:45 +0000 (20:01 +0000)]
Previously, ktype_match only made sure that the enctype was valid
and in the set of default tgs enctypes.
Now, if matching on keytype, do an exact match, else
use ktype_reasonable (renamed ktype_match) to make
sure the ticket is in the default tgs enctypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7384
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Thu, 25 Jan 1996 02:30:18 +0000 (02:30 +0000)]
Remove superfluous link line
from configure.in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7380
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:57:37 +0000 (01:57 +0000)]
No change from prior revision, just corrected log message:
* gssapi.h: Added definition of NPROTOTYPE to dtrt with Ultrix,
etc. Also added special case for Ultrix (limited
prototype support).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7379
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:55:50 +0000 (01:55 +0000)]
* g_compare_name.c, g_delete_sec_context.c, g_dsp_status.c,
g_exp_sec_context.c, g_imp_sec_context.c, g_rel_buffer.c,
g_rel_cred.c, g_rel_name.c, g_rel_oid_set.c, get_mechanism.c,
get_mtype.c: Include stdlib.h and string.h as needed
* mglueP.h: Add many invocations of NPROTOTYPE and PROTOTYPE to
prevent breakage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7378
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Thu, 25 Jan 1996 01:54:53 +0000 (01:54 +0000)]
* pname_to_uid.c (krb5_pname_to_uid): Changed def'n of
krb5principalname to static so K&R compilers won't lose on
automatic aggregate initialization.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7377
dc483132-0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 24 Jan 1996 23:50:19 +0000 (23:50 +0000)]
* Makefile.in: Remove spurious @DEFS@
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7376
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 24 Jan 1996 19:57:24 +0000 (19:57 +0000)]
Update man pages with new options
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7375
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 24 Jan 1996 19:23:54 +0000 (19:23 +0000)]
Added lines to adm.h which Chris had removed while working on the
kadmin revisions. This allows the existing code to compile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7374
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Wed, 24 Jan 1996 18:24:27 +0000 (18:24 +0000)]
Don't assume that the input_name_buffer is null terminated, when it
contains a string. Fix gcc warnings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7373
dc483132-0cff-0310-8789-
dd5450dbe970
Sam Hartman [Wed, 24 Jan 1996 08:56:24 +0000 (08:56 +0000)]
* Add checksum support to klogind making sure encrypted authenticators
cannot be replayed against unencrypted connections.
* Updated checksumming in kshd to be compatible with klogind so they
use the same client code. CVS:
* Fixed Makefile to install kshd and klogind not kr*d
* Updated option process in krlogind and kshd per messages to c.p.k.
----------------------------------------------------------------------
automatically CVS: CVS: Committing in . CVS: CVS: Modified Files:
----------------------------------------------------------------------
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7372
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 18:26:09 +0000 (18:26 +0000)]
Check for stdlib.h, include stdlib.h, string.h, cast to handle gcc warning
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7371
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 18:25:05 +0000 (18:25 +0000)]
Check for stdlib.h (configure.in)
Include stdlib.h and string.h for declarations of such items like malloc,
strlen, memmove...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7370
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 17:20:45 +0000 (17:20 +0000)]
* Makefile.in (SRCS): Remove extraneous line with only a tab.
(SHLIB_LDFLAGS): Declare that krb5_gss_initialize is to be
unresolved.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7368
dc483132-0cff-0310-8789-
dd5450dbe970
Ezra Peisach [Tue, 23 Jan 1996 17:20:25 +0000 (17:20 +0000)]
* Makefile.in (SHLIB_LIBS): Add lines for shared library building
depending on libkrb5, crypto, and com_err.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7367
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 09:07:27 +0000 (09:07 +0000)]
Add support for building GSSAPI as a shared library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7366
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:37:04 +0000 (08:37 +0000)]
configure.in: Add the mechglue directory as a subdir
Makefile.in (libgssapi_krb5.a): Include the object files in the
mechglue directory as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7365
dc483132-0cff-0310-8789-
dd5450dbe970
Theodore Tso [Tue, 23 Jan 1996 08:36:27 +0000 (08:36 +0000)]
gssapiP_generic.h: Removed prototypes of functions that have been
moved to the mechglue layer.
Makefile.in: Removed gssapi_generic.c, oid_ops.c, rel_buffer.c, and
rel_oid_set.c --- these functions are now done in the mechglue layer.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7364
dc483132-0cff-0310-8789-
dd5450dbe970