krb5.git, branch master-mechdconf

Document reading of /etc/gss/mech.d/*.conf files.

2014-04-10T13:30:58+00:00

Signed-off-by: Günther Deschner

use lstat to check for the mtime of modified symlinks as well.

2014-04-10T13:29:03+00:00

Signed-off-by: Günther Deschner

Support loading of multiple configuration files in /etc/gss/mech.d.

2014-04-10T13:29:03+00:00

This is done by globbing for *.conf files in that directory.

Signed-off-by: Günther Deschner

Remove some dead code from the mechglue initialization layer.

2014-04-10T13:29:03+00:00

Signed-off-by: Günther Deschner

Fix sendto_kdc.c on OS X after cm refactoring

2014-04-05T21:50:08+00:00

Treat POLLHUP without POLLIN or POLLOUT as an exception in the poll
version of cm_get_ssflags, to correctly handle TCP connection errors
on OS X.

Remove adb_policy_init and adb_policy_close

2014-04-04T18:02:47+00:00

Since f72c3ffa the policy is initialized as part of database.
adb_policy_close is now a no-op, and adb_policy_init just makes sure
the database is initialized.  adb_policy_init is only called from
kadm5_flush, and only if database initialization was successful
beforehand, rendering this call redundant.

Remove adb_policy_init and adb_policy_close and all their references
in the code and documentation.

Fix leak in kadm5_flush with LDAP KDB

2014-04-04T17:59:36+00:00

Due to an inverted test in adb_policy_init, kadm5_flush calls
krb5_db_open twice.  With the DB2 KDB module, the second open is a
no-op, but with the LDAP module, a new DB handle is allocated and the
old one is leaked.

[ghudson@mit.edu: rewrote commit message]

ticket: 7897 (new)
target_version: 1.12.2
tags: pullup

Refactor cm functions in sendto_kdc.c

2014-04-03T01:30:45+00:00

Move get_curtime_ms and the cm functions near the top of the file
right after structure definitions.  Except for cm_select_or_poll,
define each cm function separately for poll and for select, since the
implementations don't share much in common.  Instead of
cm_unset_write, define cm_read and cm_write functions to put an fd in
read-only or write-only state.  Remove the ssflags argument from
cm_add_fd and just expect the caller to make a subsequent call to
cm_read or cm_write.  Always select for exceptions when using select.
(Polling for exceptions is implicit with poll).

With these changes, we no longer select/poll for reading on a TCP
connection until we are done writing to it.  So in service_tcp_fd,
remove the check for unexpected read events.

Get getopt from unistd.h (not getopt.h) in tests

2014-03-28T19:51:55+00:00

POSIX defines getopt to be declared in unistd.h, and HP-UX (as of
version 11.31) does not appear to have getopt.h.  In test programs
which currently include getopt.h and aren't currently built on
Windows, include unistd.h or just assume we will get it via k5-int.h.

ticket: 7894 (new)
target_version: 1.12.2
tags: pullup

Fix t_seqstate build with Solaris compiler

2014-03-28T15:53:46+00:00

The Solaris native compiler (as of version 5.9) outputs code for
static inline functions even if they are not used.  So the
k5buf_to_gss helper in gssapiP_generic.h causes t_seqstate to have a
dependency on libkrb5support.

ticket: 7872