summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Add DNS resolver glue layer. Use itTom Yu2004-09-2110-378/+615
| | | | | | ticket: 2710 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16769 dc483132-0cff-0310-8789-dd5450dbe970
* * libgssrpc.exports: Don't export internalsTom Yu2004-09-1743-912/+697
| | | | | | | | | | | | | | | | | | | | | | | * svc.c (svc_getreqset): * svc_tcp.c (readtcp): Don't intersperse preprocessor conditionals with braces. * auth_gssapi.c, auth_gssapi_misc.c, auth_none.c: * auth_unix.c, authunix_prot.c, bindresvport.c: * clnt_generic.c, clnt_perror.c, clnt_raw.c * clnt_simple.c, clnt_tcp.c, clnt_udp.c, get_myaddress.c: * getrpcent.c, getrpcport.c, pmap_clnt.c: * pmap_getmaps.c, pmap_getport.c, pmap_prot.c, pmap_prot2.c: * pmap_rmt.c, rpc_callmsg.c, rpc_prot.c: * svc.c, svc_auth.c, svc_auth_gss.c: * svc_auth_gssapi.c, svc_auth_unix.c, svc_raw.c: * svc_run.c, svc_simple.c, svc_tcp.c: * svc_udp.c, xdr.c, xdr_alloc.c, xdr_array.c: * xdr_float.c, xdr_mem.c, xdr_rec.c, xdr_reference.c: * xdr_stdio.c: Protoize, to avoid potential problems when fixed-width types are not ints on some platforms. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16768 dc483132-0cff-0310-8789-dd5450dbe970
* Use a new variable, $(INSTALL_SCRIPT) to install scripts, so theyTom Yu2004-09-176-2/+14
| | | | | | | | | | | won't get stripped when someone does "make install-strip". ticket: new tags: pullup target_version: 1.3.6 component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16767 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_LIBRARY_NET): Look for res_search() prototype,Tom Yu2004-09-172-11/+32
| | | | | | | then for symbol in library, in case there's symbol renaming happening in the headers. Clean up some style nits. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16766 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw-fixed.nsi:Jeffrey Altman2004-09-172-0/+63
| | | | | | | | | | | The version of MSIEXEC which ships with Windows 2000 does not accept the /passive and /promptreboot command line options. On Windows 2000 only, do not specify them. ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16763 dc483132-0cff-0310-8789-dd5450dbe970
* Remove trailing slash from PATHJeffrey Altman2004-09-173-23/+190
| | | | | | | | | | | Minimize Leash32.exe on startup Update msi-deployment guide to explain how to replace the configuration files in greater detail ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16761 dc483132-0cff-0310-8789-dd5450dbe970
* Fix error code returned for empty sequences and check the errorJeffrey Altman2004-09-172-2/+10
| | | | | | | | | in krb5_lcc_initialize ticket: 2705 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16760 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_LIBRARY_NET): Only look for res_search() inTom Yu2004-09-152-1/+6
| | | | | | libraries, not headers, in case it's present but not prototyped. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16759 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for h_errno declaration in netdb.hTom Yu2004-09-153-0/+23
| | | | | | | | * port-sockets.h: Explicitly declare h_errno if it's missing. ticket: 1044 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16758 dc483132-0cff-0310-8789-dd5450dbe970
* * reconf: Export ACLOCAL=true to environmentKen Raeburn2004-09-152-0/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16757 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_LIBRARY_NET): Require the BIND_8_COMPAT checkTom Yu2004-09-142-0/+8
| | | | | | | | prior to looking for prototypes, as BIND 9 (at least on Panther) turns off some prototypes and typedefs if BIND_8_COMPAT is defined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16756 dc483132-0cff-0310-8789-dd5450dbe970
* Enable default installation of documentationJeffrey Altman2004-09-142-1/+5
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16754 dc483132-0cff-0310-8789-dd5450dbe970
* * dnssrv.c:Tom Yu2004-09-144-0/+10
| | | | | | | | * hst_realm.c: * locate_kdc.c: Include netinet/in.h as a prerequisite for resolv.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16753 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Fix check for resolv.h; some platforms haveTom Yu2004-09-142-2/+15
| | | | | | prerequisite headers. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16752 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw-fixed.nsi:Jeffrey Altman2004-09-132-3/+99
| | | | | | | | | Detect the Wix MSI, the SWRT MSI, and the Pismere MSI If found, uninstall the MSI before installing NSIS ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16749 dc483132-0cff-0310-8789-dd5450dbe970
* Add msi-deployment-guide.txtJeffrey Altman2004-09-132-0/+371
| | | | | | ticket: 2707 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16744 dc483132-0cff-0310-8789-dd5450dbe970
* Updates to WiX to satisfy the needs of MIT SWRTJeffrey Altman2004-09-136-6/+299
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16743 dc483132-0cff-0310-8789-dd5450dbe970
* utils.nsi: Fix RestartRequired function to actually determineJeffrey Altman2004-09-112-33/+112
| | | | | | | | | | | | | | if a restart is required kfw-fixed.nsi: - Add support for compiler version 1400 - Fix terminal server key deletions - Delete leash32.exe on uninstall - Correct the logic of the call of RestartRequired ticket: 2702 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16742 dc483132-0cff-0310-8789-dd5450dbe970
* Support building on x86_64Sam Hartman2004-09-102-10/+19
| | | | | | | | Include resolv.h when looking for res_nsearch and res_search. Ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16741 dc483132-0cff-0310-8789-dd5450dbe970
* * port-sockets.h: Remove _XOPEN_SOURCE_EXTENDED hack for netdb.h,Tom Yu2004-09-102-9/+7
| | | | | | | | | as it can cause inconsistencies between headers. It significantly broke HP-UX 10.20 anyway. ticket: 2379 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16740 dc483132-0cff-0310-8789-dd5450dbe970
* * cc_mslsa.c: Implement krb5_lcc_initialize()Jeffrey Altman2004-09-102-6/+35
| | | | | | | | | Remove all tickets from the cache which have a client principal that matches the input principal. ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16737 dc483132-0cff-0310-8789-dd5450dbe970
* cc_mslsa.c: Correct test for KerbQueryTicketCacheEx2MessageJeffrey Altman2004-09-102-3/+6
| | | | | | ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16736 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-09-10 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-09-102-8/+374
| | | | | | | | | | | | | | * cc_mslsa.c: The following functionality is being committed but commented out because it is not presently available in public Microsoft SDKs - support for KerbSubmitTicket which allows a KERB_CRED message to be forwarded to the LSA. (KERB_SUBMIT_TICKET) - support for the KerbQueryTicketCacheEx2Message which adds the Session Key Enctype to the contents of the response from KerbQueryTicketCacheExMessage. (HAVE_CACHE_INFO_EX2) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16735 dc483132-0cff-0310-8789-dd5450dbe970
* krb5.hin: add new krb5_ccache flag, KRB5_TC_NOTICKETJeffrey Altman2004-09-092-0/+5
| | | | | | | | | when set, a krb5_ccache does not have to return a ticket within the returned credential ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16734 dc483132-0cff-0310-8789-dd5450dbe970
* ms2mit.c: Apply KRB5_TC_NOTICKET to MSLSA: while searching for theJeffrey Altman2004-09-092-0/+19
| | | | | | | | presence of an initial ticket to copy to the MIT cache ticket: 2688 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16733 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Don't overwrite "PATH" environment variable ifTom Yu2004-09-082-1/+6
| | | | | | | | | it's already set. ticket: 427 version_reported: 1.0.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16731 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (install-unix): Install krb524d manpageTom Yu2004-09-082-0/+5
| | | | | | ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16730 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Install krb5-config manpageTom Yu2004-09-082-0/+5
| | | | | | ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16729 dc483132-0cff-0310-8789-dd5450dbe970
* Added man pages for krb524d and krb5-configAlexandra Ellwood2004-09-081-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16728 dc483132-0cff-0310-8789-dd5450dbe970
* Added a man page for krb5-configAlexandra Ellwood2004-09-082-0/+78
| | | | | | ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16727 dc483132-0cff-0310-8789-dd5450dbe970
* Added man page for krb524dAlexandra Ellwood2004-09-082-0/+78
| | | | | | ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16726 dc483132-0cff-0310-8789-dd5450dbe970
* commentTom Yu2004-09-072-1/+6
| | | | | | | | | | ticket: 696 version_fixed: 1.4 * install.texinfo (Propagate the Database to Each Slave KDC): Remove spurious "-R" flag from kdb5_util invocation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16725 dc483132-0cff-0310-8789-dd5450dbe970
* Include all subdirectories of KFW_INSTALL_DIR in the SDKJeffrey Altman2004-09-072-1/+6
| | | | | | | ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16723 dc483132-0cff-0310-8789-dd5450dbe970
* update for krb5-1.3.5-beta1Tom Yu2004-09-031-6/+55
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16719 dc483132-0cff-0310-8789-dd5450dbe970
* improve documentation of ANSI C requirementTom Yu2004-09-032-12/+34
| | | | | | | | | | | | | * build.texinfo: Fix some typos. (Build Requirements): Note ANSI C (c89) requirement. (Alpha OSF/1 V4.0): Document "-std0" vs "-std" cc behavior. ticket: new target_version: 1.3.5 component: krb5-doc tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16717 dc483132-0cff-0310-8789-dd5450dbe970
* * cc_mslsa.c:Jeffrey Altman2004-09-022-23/+246
| | | | | | | | | | | | | | | | | | | | | | | | | | - Fix MITPrincToMSPrinc to prevent writing to the output buffer if the input won't fit. - Add internal UnicodeStringToMITPrinc function - Rename internal MSPrincToMITPrinc to ExternalNameToMITPrinc - Rename internal PurgeMSTGT to PurgeAllTickets - Add internal PurgeTicket2000 - Add internal PurgeTicketXP - Since tickets can only be requested via KDC Opt Flags it is not possible to specifically request the Initial ticket. If more than one ticket exists which matching service names, enctypes, and ticket flags the initial ticket flag may not be set. If the caller requested the initial ticket, set the flag manually. - Add preliminary support for krb5_lcc_set_flags - Modify krb5_lcc_initialize to return success - Modify krb5_lcc_get_principal to support an LSA cache which does not contain a TGT when krb5_lcc_resolve is called. - Implement krb5_lcc_remove_cred ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16714 dc483132-0cff-0310-8789-dd5450dbe970
* * ms2mit.c: add -c ccache command line optionJeffrey Altman2004-09-024-4/+198
| | | | | | | | | * mit2ms.c: new command. Copies contents of the mit ccache to the MSLSA: ccache ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16713 dc483132-0cff-0310-8789-dd5450dbe970
* * kvno.M: Update usageTom Yu2004-08-313-4/+13
| | | | | | | | * kvno.c (xusage): Update usage message. ticket: 2677 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16709 dc483132-0cff-0310-8789-dd5450dbe970
* oops, forgot changelogTom Yu2004-08-311-0/+5
| | | | | | ticket: 2686 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16703 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2004-003Tom Yu2004-08-312-0/+4
| | | | | | | | | | Fix for ASN.1 decoder denial-of-service. [MITKRB5-SA-2004-003] ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16702 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2004-002Tom Yu2004-08-319-4/+43
| | | | | | | | | | Fix double-free vulnerabilities [MITKRB5-SA-2004-002]. ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16701 dc483132-0cff-0310-8789-dd5450dbe970
* added private apple pkinit sourcesAlexandra Ellwood2004-08-301-0/+125
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16699 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c (profile_open_file): If an error occurs while updating from theKen Raeburn2004-08-282-0/+8
| | | | | | input file, destroy the mutex only if we're not sharing file data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16698 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_parse.c (parse_std_line): Rewrite handling of whitespace in and afterKen Raeburn2004-08-282-6/+20
| | | | | | | | | | | | | | tag, to strip trailing whitespace (per current locale, not just ASCII space characters), and prohibit any internal space characters in tag names. (This is not the patch supplied in the bug report; that patch changed the tag handling to allow spaces in tag names, which we haven't previously allowed. On the other hand, we haven't specifically disallowed internal tabs or other whitespace, either, and this patch does so.) ticket: 2614 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16697 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (make_ap_req_v1): Free checksum dataTom Yu2004-08-283-4/+14
| | | | | | | | | allocated by make_gss_checksum() to avoid leak. * k5sealv3.c (gss_krb5int_unseal_token_v3): Free plain.data after checksum is verified, to avoid leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16696 dc483132-0cff-0310-8789-dd5450dbe970
* move last patch down a little so it applies to tcp sockets as well as udpKen Raeburn2004-08-281-14/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16695 dc483132-0cff-0310-8789-dd5450dbe970
* * sendto_kdc.c (start_connection) [DEBUG]: Log the local socket addressKen Raeburn2004-08-282-0/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16694 dc483132-0cff-0310-8789-dd5450dbe970
* Finally applied patch from Nalin Dahyabhai at Red Hat to fix 0/NULL bugs inKen Raeburn2004-08-278-7/+31
| | | | | | | | | variadic argument lists to krb5_build_principal{,_ext}. Skipped the stylistic patches that removed casts of NULL. tag: 1850 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16693 dc483132-0cff-0310-8789-dd5450dbe970
* * profile_tcl.c: New file, generated from profile.swg, but checked in to avoidKen Raeburn2004-08-272-0/+2084
| | | | | | requiring swig in order to generate the test program. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16692 dc483132-0cff-0310-8789-dd5450dbe970
* * profile.swg: New file.Ken Raeburn2004-08-274-4/+266
| | | | | | | | | | | * configure.in: Look for Tcl. * Makefile.in (profile_tcl, profile_tcl.c, profile_tcl.o): New targets, not built by default. (PROG_LIBPATH, PROG_RPATH, LOCALINCLUDES): Add Tcl options. (DEFINES): Define. (clean-unix): Delete profile_tcl. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16691 dc483132-0cff-0310-8789-dd5450dbe970