krb5.git/src/lib/rpc, branch master Unnamed repository; edit this file 'description' to name the repository. make depend 2013-12-11T03:24:03+00:00 Tom Yu tlyu@mit.edu 2013-12-11T03:24:03+00:00 88bc9cfb9bcbdb0daffe02db5bdb8e22d14b6853 






Bump libgssrpc minor version
2013-11-27T20:27:59+00:00

Tom Yu
tlyu@mit.edu

2013-11-27T20:15:14+00:00

af5f5d63efe938c568a33bfb64ba5154982d6fb2

Bump minor version for the new log_badauth2 interfaces.

ticket: 7770





Bump minor version for the new log_badauth2 interfaces.

ticket: 7770







Add new versions of log_badauth gssrpc callbacks
2013-11-25T22:03:09+00:00

Greg Hudson
ghudson@mit.edu

2013-11-25T16:33:35+00:00

4c57a429760a3b3aa89938a13708742675f9548b

libgssrpc supports two callbacks for gss_accept_sec_context failures
on servers (one for AUTH_GSS and one for AUTH_GSSAPI), which are
IPv4-specific.  Provide an alternate version which supplies the
transport handle instead of the address, so that we can get the
address via the file descriptor for TCP connections.

ticket: 7770





libgssrpc supports two callbacks for gss_accept_sec_context failures
on servers (one for AUTH_GSS and one for AUTH_GSSAPI), which are
IPv4-specific.  Provide an alternate version which supplies the
transport handle instead of the address, so that we can get the
address via the file descriptor for TCP connections.

ticket: 7770







Remove inet_ntoa() prototype from getrpcent.c
2013-11-25T18:42:25+00:00

Ben Kaduk
kaduk@mit.edu

2013-11-25T18:36:34+00:00

32a770ac1851339621185cdca187d8c1cc27adaf

It is not needed.

In general, we shouldn't be using inet_ntoa(), anyway, as it is
IPv4-specific and we have IPv6 support almost everywhere.





It is not needed.

In general, we shouldn't be using inet_ntoa(), anyway, as it is
IPv4-specific and we have IPv6 support almost everywhere.







Fix various warnings
2013-06-07T19:19:37+00:00

Greg Hudson
ghudson@mit.edu

2013-06-07T19:17:31+00:00

e51c089b745161dd6e1d64998e99d065fc22377e












Reduce boilerplate in makefiles
2013-05-17T00:09:27+00:00

Greg Hudson
ghudson@mit.edu

2013-05-16T18:21:12+00:00

4b0985f8573840838bcfa8ec1df3dcd39a3dbf15

Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH,
SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be
specified in the common case.  Rename KRB5_RUN_ENV and KRB5_RUN_VARS
to RUN_SETUP (already the most commonly used name) and RUN_VARS.  Make
sure to use DEFINES for local defines (not DEFS).  Remove some other
unnecessary makefile content.





Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH,
SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be
specified in the common case.  Rename KRB5_RUN_ENV and KRB5_RUN_VARS
to RUN_SETUP (already the most commonly used name) and RUN_VARS.  Make
sure to use DEFINES for local defines (not DEFS).  Remove some other
unnecessary makefile content.







Don't use portmapper in RPC tests
2013-05-01T21:18:45+00:00

Greg Hudson
ghudson@mit.edu

2013-05-01T17:07:36+00:00

5454da3bcaa383f5b47984283f11f010d3d2b73e

On many Linux systems, due to what is arguably a bug in rpcbind, the
portmapper doesn't allow service registration from non-root processes.
This causes the RPC tests to be frequently skipped.  Modify the tests
so that they don't need the portmapper, by grabbing the port number
from the server process and passing it to the client.





On many Linux systems, due to what is arguably a bug in rpcbind, the
portmapper doesn't allow service registration from non-root processes.
This causes the RPC tests to be frequently skipped.  Modify the tests
so that they don't need the portmapper, by grabbing the port number
from the server process and passing it to the client.







Disable the gssrpc expired-cred test
2013-05-01T21:18:45+00:00

Greg Hudson
ghudson@mit.edu

2013-05-01T19:52:40+00:00

5df34938ad875db43a584f12e181b8ae9705ff44

The "expired" test in expire.exp tries to authenticate to the server
process with an expired TGT (obtained using kinit -l -1m).  Using an
expired TGT to get an expired service cred no longer works after
#6948.  We could use kinit -S to get an expired service cred, but
krb5_get_credentials won't return expired service cred from the cache
(even before #6948).  We could use time offsets to simulate clock skew
between the client and server process, but that would be difficult
because the test programs don't have access to the krb5_context
objects used by the client or server process.  Since we don't have a
simple workaround, disable the test.





The "expired" test in expire.exp tries to authenticate to the server
process with an expired TGT (obtained using kinit -l -1m).  Using an
expired TGT to get an expired service cred no longer works after
#6948.  We could use kinit -S to get an expired service cred, but
krb5_get_credentials won't return expired service cred from the cache
(even before #6948).  We could use time offsets to simulate clock skew
between the client and server process, but that would be difficult
because the test programs don't have access to the krb5_context
objects used by the client or server process.  Since we don't have a
simple workaround, disable the test.







make depend
2013-01-10T17:46:26+00:00

Greg Hudson
ghudson@mit.edu

2013-01-10T17:46:26+00:00

2807e8e1e1dc89b3d482de7c73d13d19187fdb38

Mostly this gets rid of the trailing space on line 2 after
bb76891f5386526bdf91bc790c614fc9296cb5fa.





Mostly this gets rid of the trailing space on line 2 after
bb76891f5386526bdf91bc790c614fc9296cb5fa.







Fix initial call to svcraw_create
2013-01-07T06:35:13+00:00

Nickolai Zeldovich
nickolai@csail.mit.edu

2013-01-07T06:33:15+00:00

5e3bf4ac6cb02601c5f10c5b2804fd5028c80119

gssrpc raw services could not work because svcraw_create did not set
svcraw_private after allocating memory for it.

[ghudson@mit.edu: commit message, patch splitting]

ticket: 7534





gssrpc raw services could not work because svcraw_create did not set
svcraw_private after allocating memory for it.

[ghudson@mit.edu: commit message, patch splitting]

ticket: 7534