summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * aclocal.m4 (KRB5_AC_PRIOCNTL_HACK): Check for Solaris patchTom Yu2004-11-192-3/+32
| | | | | | | | | | 117171-11 (sparc) or 117172-11 (x86), which fixes the Solaris 9 bug which can cause final pty output to be on close. ticket: 2776 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16891 dc483132-0cff-0310-8789-dd5450dbe970
* after 1.4 branch, trunk is effectively krb5-1.5-prereleaseTom Yu2004-11-191-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16890 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_EXPLIBS): Remove -ldl accidentally added in last changeKen Raeburn2004-11-182-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16888 dc483132-0cff-0310-8789-dd5450dbe970
* install rpc headers into correct directoryTom Yu2004-11-184-2/+12
| | | | | | | | | | | | RPC headers need to be installed into PREFIX/include/gssrpc, not PREFIX/include ticket: new target_version: 1.4 version_reported: 1.4 tags: pullup component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16887 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (do_yarrow_init): Move mutex initialization here.Ken Raeburn2004-11-172-1/+12
| | | | | | (krb5int_prng_init): Don't do it here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16880 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_EXPDEPS, SHLIB_EXPLIBS): Add support libraryKen Raeburn2004-11-172-2/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16879 dc483132-0cff-0310-8789-dd5450dbe970
* oops, bad updateKen Raeburn2004-11-161-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16877 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2004-11-162-19/+19
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16876 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2004-11-166-26/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16875 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h (struct _krb5_cc_ops): Add new function pointer field get_flagsKen Raeburn2004-11-162-0/+5
| | | | | | | ticket: 2763 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16874 dc483132-0cff-0310-8789-dd5450dbe970
* Now a kvno invocation will only open the ccache file a small number ofKen Raeburn2004-11-162-2/+23
| | | | | | | | | | | | | | times, but there's still excessive seeking and re-reading of data happening. * cc_retr.c (krb5_cc_retrieve_cred_seq): Temporarily clear the KRB5_TC_OPENCLOSE flag on the credentials cache while reading multiple entries from it. ticket: 2763 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16873 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_cc_get_flags): DeclareKen Raeburn2004-11-162-0/+7
| | | | | | | ticket: 2763 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16872 dc483132-0cff-0310-8789-dd5450dbe970
* Create a ccache get-flags operation.Ken Raeburn2004-11-168-1/+94
| | | | | | | | | | | | | | | | | | | | The MSLSA and CCAPI versions are untested! * cc_file.c (krb5_fcc_get_flags): New function. (krb5_fcc_ops, krb5_cc_file_ops): Add it. * cc_memory.c (krb5_mcc_get_flags): New function. (krb5_mcc_ops): Add it. * cc_mslsa.c (krb5_lcc_get_flags): New function. (krb5_lcc_ops): Add it. * ccfns.c (krb5_cc_get_flags): New function. * ccapi/stdcc.c (krb5_stdcc_get_flags): New function. (krb5_cc_stdcc_ops): Add it. * ccapi/stdcc.h (krb5_stdcc_get_flags): Declare. ticket: 2763 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16871 dc483132-0cff-0310-8789-dd5450dbe970
* Convert Yarrow to use AES not 3des. Update test vectorsSam Hartman2004-11-166-11/+20
| | | | | | | ticket: 2410 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16870 dc483132-0cff-0310-8789-dd5450dbe970
* Make static linking not require -lsocket, -lnsl, etc.Ken Raeburn2004-11-156-106/+217
| | | | | | | | | | | | | | | | | | | | | Don't duplicate macro definitions. Header files and comments still need some cleanup. * cache-addrinfo.h, init-addrinfo.c: New files, split out from fake-addrinfo.c. * fake-addrinfo.c: Include cache-addrinfo.h. (FAI_CACHE, struct face, struct fac): Moved to cache-addrinfo.h. (krb5int_fac, krb5int_init_fac, krb5int_fini_fac): Moved to init-addrinfo.c. (addrinfo, struct addrinfo): Don't define. (AI_* and NI_* and EAI_* macros): Don't define. * threads.c: Include cache-addrinfo.h. (krb5int_init_fac, krb5int_fini_fac): Don't declare. * Makefile.in (SRCS, STLIBOBJS, LIBOBJS): Updated. ticket: 2761 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16867 dc483132-0cff-0310-8789-dd5450dbe970
* Merge Athena changes for requiring encrypted connectionsTom Yu2004-11-1510-36/+203
| | | | | | | ticket: 841 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16866 dc483132-0cff-0310-8789-dd5450dbe970
* * et_h.awk: Declare initialize_*_error_table as taking no arguments.Ken Raeburn2004-11-053-2/+8
| | | | | | | | | * et_h.pl: Regenerated. ticket: 2770 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16865 dc483132-0cff-0310-8789-dd5450dbe970
* Added new exported symbols to profile and GSS and updated project file to ↵Alexandra Ellwood2004-11-043-5/+31
| | | | | | include more robust header paths git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16862 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_init.c, profile.hin: added profile_is_modified and ↵Alexandra Ellwood2004-11-043-0/+41
| | | | | | | | profile_is_writable so that callers can check to see if profile_release() will fail before calling it ticket: 2751 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16860 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_set.c: profile calls which set values should not fail if file is not ↵Alexandra Ellwood2004-11-042-3/+7
| | | | | | | | writable. You can now write to a different file with profile_flush_to_file() or buffer with profile_flush_to_buffer() ticket: 2750 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16858 dc483132-0cff-0310-8789-dd5450dbe970
* merge athena ftpd changes for requiring encrypted passwordsTom Yu2004-11-034-4/+35
| | | | | | | | | | | | | | | | * ftpcmd.y (getline): Merge Athena change to reject MICed password. * ftpd.M: Document '-E'. * ftpd.c (main): Merge Athena's '-E' changes to prohibit unencrypted passwords. ticket: new target_version: 1.4 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16857 dc483132-0cff-0310-8789-dd5450dbe970
* Fix typo in last changeKen Raeburn2004-11-031-1/+1
| | | | | | | ticket: 2761 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16856 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SRCS): DefineKen Raeburn2004-11-032-0/+18
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16855 dc483132-0cff-0310-8789-dd5450dbe970
* move getaddrinfo hacks into support lib for easier maintenanceKen Raeburn2004-11-035-1167/+1394
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the cache on Mac OS X, and likely to be enabled eventually on other platforms, this is going to wind up being a non-trivial amount of code on most platforms, and updating the cache code to work on other configurations is likely to take a few rounds. Rather than recompile the world and add a bunch of code to each object file doing name lookups, moving the code into the support library that already defines the static data (list head, mutex) should make things simpler. (TODO: Fix calling conventions for Windows?) * include/fake-addrinfo.h: Move most of code content into util/support/fake-addrinfo.c. (krb5int_getaddrinfo, krb5int_freeaddrinfo, krb5int_getnameinfo, krb5int_gai_strerror): Declare. (getaddrinfo, freeaddrinfo, getnameinfo, gai_strerror): Define as macros mapping to the krb5int_ function names. * util/support/fake-addrinfo.c: Import most of the contents of include/fake-addrinfo.h, so we only compile it once. (krb5int_getaddrinfo, krb5int_freeaddrinfo, krb5int_getnameinfo, krb5int_gai_strerror): New functions, always defined and exported. * util/support/libkrb5support.exports: Export the new functions, not the old _fac symbols. ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16854 dc483132-0cff-0310-8789-dd5450dbe970
* * yarrow.c (krb5int_yarrow_input, krb5int_yarrow_final): Don't check forKen Raeburn2004-11-012-7/+47
| | | | | | | | | | forking here. (yarrow_output_locked): Split out from krb5int_yarrow_output, without locking. (krb5int_yarrow_output): Do locking and call yarrow_output_locked. (yarrow_gate_locked): New function; uses yarrow_output_locked. (krb5int_yarrow_output_Block): Use yarrow_gate_locked. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16853 dc483132-0cff-0310-8789-dd5450dbe970
* fix mkrel's RELTAIL handlingTom Yu2004-10-312-4/+10
| | | | | | | | | | | * mkrel: Rework quoting for RELTAIL check. Don't check RELTAIL if doing a "-current" snapshot. ticket: new target_version: 1.4 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16850 dc483132-0cff-0310-8789-dd5450dbe970
* call stat less often on krb5.confKen Raeburn2004-10-303-0/+37
| | | | | | | | | | | | | | | | | | | | Changes suggested by lxs to reduce stat frequency to once per second. In parallel loops creating and destroying krb5 contexts on Mac OS X, this seems to improve performance by 10%, though it's hard to be sure because the times are variable. * prof_int.h (STAT_ONCE_PER_SECOND): Define. (struct _prf_data_t) [STAT_ONCE_PER_SECOND]: New field LAST_STAT. * prof_file.c (scan_shared_trees_locked, scan_shared_trees_unlocked): Redefine to do nothing for now. (profile_update_file_data) [STAT_ONCE_PER_SECOND]: If the current time is the same time as the last stat of the file, just return; otherwise, save away the current time. ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16847 dc483132-0cff-0310-8789-dd5450dbe970
* push yarrow locking down into the yarrow code to reduce contentionKen Raeburn2004-10-304-17/+29
| | | | | | | | | | | | | | | | | | This seems to speed up creating a krb5_context a little bit, when it happens a lot in multiple threads. * prng.c (yarrow_lock): Rename to krb5int_yarrow_lock via macro, and change to be non-static. (krb5int_prng_init): Call do_yarrow_init here. (krb5_c_random_add_entropy): Don't call it here. Don't lock the mutex, either. (krb5_c_random_make_octets): Don't lock the mutex. * yarrow/ylock.h: Include k5-thread.h. (krb5int_yarrow_lock): Declare. (LOCK, UNLOCK): Define as macros using the k5_mutex_ macros. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16846 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h: Include errno.h earlierKen Raeburn2004-10-292-2/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16845 dc483132-0cff-0310-8789-dd5450dbe970
* * misc.c (check_min_life): Actually return a value on successTom Yu2004-10-282-3/+5
| | | | | | ticket: 1335 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16843 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-thread.h (return_after_yield, k5_mutex_lock) [__GNUC__]: Add macroKen Raeburn2004-10-282-1/+27
| | | | | | | versions so debugging line numbers will be useful. (DEBUG_THREADS_SLOW): Don't define. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16842 dc483132-0cff-0310-8789-dd5450dbe970
* * misc.c, misc.h: New function check_min_life(), containing commonTom Yu2004-10-274-40/+49
| | | | | | | | | | | | | code from wrapper functions. New function chpass_util_wrapper(), which does min_life checking prior to calling kadm5_chpass_principal_util(). * schpw.c (process_chpw_request): Call chpass_util_wrapper(). ticket: 1335 component: krb5-admin git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16841 dc483132-0cff-0310-8789-dd5450dbe970
* * Initial commit of C CCAPI implementationJeffrey Altman2004-10-2746-0/+10711
| | | | | | ticket: 2753 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16840 dc483132-0cff-0310-8789-dd5450dbe970
* Create new C CCAPI implementationJeffrey Altman2004-10-272-0/+9
| | | | | | ticket:new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16839 dc483132-0cff-0310-8789-dd5450dbe970
* Permit exporting profile file data into a bufferKen Raeburn2004-10-279-32/+215
| | | | | | | | | | | | | | | | | | | | | * prof_file.c (profile_flush_file_data_to_buffer): New function. * profi_init.c (profile_flush_to_buffer, profile_free_buffer): New functions. * prof_parse.c (output_quoted_string): Use a callback instead of stdio calls. (dump_profile): Renamed from dump_profile_to_file. Use a callback instead of stdio calls. (dump_profile_to_file_cb): New function. (profile_write_tree_file): Updated to new internal interface. (struct prof_buf): New type. (add_data_to_buffer, dump_profile_to_buffer_cb, profile_write_tree_to_buffer): New functions. * prof_int.h (profile_write_tree_to_buffer, profile_flush_file_data_to_buffer): Declare. * profile.hin (profile_flush_to_buffer, profile_free_buffer): Declare. * libprofile.exports: Export profile_flush_to_buffer and profile_free_buffer. * profile.swg (profile_flush_to_buffer): Declare. * profile_tcl.c: Regenerated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16838 dc483132-0cff-0310-8789-dd5450dbe970
* * mk_req_ext.c (krb5_mk_req_extended): Free keyblock beforeTom Yu2004-10-262-0/+10
| | | | | | | | | copying new one in. ticket: 2725 component: krb5-libs git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16837 dc483132-0cff-0310-8789-dd5450dbe970
* Kevin Coffman's patches to support passing gss context state to kernelTom Yu2004-10-267-70/+109
| | | | | | ticket: 2743 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16836 dc483132-0cff-0310-8789-dd5450dbe970
* * libkrb5support.exports: Export krb5int_fac, _lock_fac, _unlock_facKen Raeburn2004-10-252-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16835 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c (profile_update_file_data): When resetting flags, preserve SHAREDKen Raeburn2004-10-223-25/+75
| | | | | | | | | | flag. (scan_shared_trees_locked, scan_shared_trees_unlocked): Convert to macros, so line numbers reported by assert will be useful. * prof_test1 (test2): Run new test of modifications with other existing open profile handles. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16834 dc483132-0cff-0310-8789-dd5450dbe970
* * locate_kdc.c: Include stdarg.h.Ken Raeburn2004-10-212-52/+40
| | | | | | | | | (Tprintf): New function, prints to stderr or not depending on TEST macro. (add_addrinfo_to_list, krb5int_add_host_to_list, krb5_locate_srv_conf_1, krb5_locate_srv_dns_1, krb5int_locate_server): Call it instead of conditionally calling fprintf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16833 dc483132-0cff-0310-8789-dd5450dbe970
* * dnssrv.c (krb5int_make_srv_query_realm): Append a dot to the hostname, ifKen Raeburn2004-10-192-0/+10
| | | | | | there's room in the buffer, to avoid domain search paths. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16832 dc483132-0cff-0310-8789-dd5450dbe970
* * dnsglue.c (initparse): Skip query type and class when we lackTom Yu2004-10-192-3/+12
| | | | | | | | ns_initparse(). (krb5int_dns_nextans) [!HAVE_NS_INITPARSE]: Pass correct pointer to dn_skipname(). Actually skip the RR name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16831 dc483132-0cff-0310-8789-dd5450dbe970
* * libprofile.exports: Add profile_flush_to_fileKen Raeburn2004-10-192-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16830 dc483132-0cff-0310-8789-dd5450dbe970
* add dependencies for t_*.c test programsKen Raeburn2004-10-192-0/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16829 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2004-10-192-9/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16828 dc483132-0cff-0310-8789-dd5450dbe970
* ignore t_locate_kdcKen Raeburn2004-10-191-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16827 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (TEST_PROGS): Add t_locate_kdc.Ken Raeburn2004-10-192-1/+8
| | | | | | | | | (check-unix): Run t_locate_kdc to test fetching DNS SRV records. We probably don't want this test to be part of this test suite long-term, since it relies on external DNS data rather than being self-contained. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16826 dc483132-0cff-0310-8789-dd5450dbe970
* Allow profile library caller to write the modified data to a differentKen Raeburn2004-10-188-28/+122
| | | | | | | | | | | | | | | | | | | | file than was originally read. * prof_file.c (write_data_to_file): New function, split out from profile_flush_file_data. Add argument can_create indicating whether the old file should already exist or not. (profile_flush_file_data): Call it. (profile_flush_file_data_to_file): New function. * prof_int.h (profile_flush_file_data_to_file): Declare it. (profile_flush_file_to_file): New macro. * prof_init.c (profile_flush_to_file): New function. * profile.hin (profile_flush_to_file): Declare. * profile.swg (profile_flush_to_file): Declare. * profile_tcl.c: Regenerated. * prof_test1: Use profile_flush_to_file instead of profile_flush, and reload from the new filename. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16825 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (install-unix): Install headersTom Yu2004-10-182-0/+12
| | | | | | | ticket: 2743 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16824 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c, prof_int.h, prof_set.c: Remove support for non-SHARE_TREE_DATAKen Raeburn2004-10-155-73/+107
| | | | | | | | | | | | | | | | | | | | case. * prof_int.h (struct _prf_data_t): Change filespec to a trailing char array. Add a length field for the filespec. (profile_make_prf_data): Declare. (profile_lock_global, profile_unlock_global): Prototypes need argument lists. * prof_file.c: Include stddef.h. (scan_shared_trees_locked, scan_shared_trees_unlocked): New functions. (r_access, rw_access): Now take const_profile_filespec_t arg. (profile_make_prf_data): New function. (profile_open_file): Scan trees at beginning and end. Use profile_make_prf_data to allocate and initialize storage. (profile_dereference_data, profile_free_file_data): Scan trees. (profile_ser_size, profile_ser_externalize): Filespec is never null. * prof_set.c (rw_setup): Use profile_make_prf_data to allocate and initialize storage. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16822 dc483132-0cff-0310-8789-dd5450dbe970