summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Export new function namesAlexandra Ellwood2006-05-041-2/+2
| | | | | | ticket: 3716 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17976 dc483132-0cff-0310-8789-dd5450dbe970
* Changed to krb5int_open_plugin_dirs/krb5int_close_plugin_dirs whichAlexandra Ellwood2006-05-047-141/+279
| | | | | | | | | | | | | takes a list of filebases and directories rather than a list of full paths so the caller doesn't have to generate the possibilities themselves. krb5int_open_plugin_dirs will append the possible suffixes for that platform (including no suffix in case there already is one on the file base). Modified the kdb and locate kdc interfaces to use the new API. ticket: 3716 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17975 dc483132-0cff-0310-8789-dd5450dbe970
* Removed the unnecessary and incorrect (due to operator precedence) "== ↵Alexandra Ellwood2006-05-041-2/+1
| | | | | | | | | | | MPOOL_INUSE". The previous code actually ended up checking if MPOOL_DIRTY (0x01) is set. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17974 dc483132-0cff-0310-8789-dd5450dbe970
* * post.in (.acsyms_okay): Target deleted.Ken Raeburn2006-05-031-10/+3
| | | | | | (configure): Incorporate the check-ac-syms rules here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17973 dc483132-0cff-0310-8789-dd5450dbe970
* ipv4+ipv6 messages can trip up KDC replay detectionKen Raeburn2006-04-293-23/+6
| | | | | | | | | | | | | | | | | | | | The replay lookaside cache includes the sending address, but the krb5 library replay cache does not. So, if the same message arrives from two different source addresses, it is considered a replay by the KDC. If the client isn't receiving the replies for some reason, and the client has multiple addresses it uses to contact different addresses on the KDC (and trying to reach the KDC via both IPv4 and IPv6 is an obvious such case), this can cause errors to be returned by the KDC. * replay.c (krb5_kdc_replay_ent): Remove "addrs" field. (MATCH): Don't check it. (kdc_check_lookaside, kdc_insert_lookaside): Remove "from" argument. * kdc_util.h (kdc_check_lookaside, kdc_insert_lookaside): Update decls. * dispatch.c (dispatch): Update calls. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17970 dc483132-0cff-0310-8789-dd5450dbe970
* Don't test HAVE_C_STRUCTURE_ASSIGNMENT.Ken Raeburn2006-04-2911-50/+2
| | | | | | Instead, just assume we do have a working C compiler. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17969 dc483132-0cff-0310-8789-dd5450dbe970
* (DB2_NAME): New macro, adding .so suffix for now.Ken Raeburn2006-04-271-2/+3
| | | | | | (kdb_get_library_name, kdb_load_library): Use it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17965 dc483132-0cff-0310-8789-dd5450dbe970
* Fix excessive italics in kinit man page;Sam Hartman2006-04-271-1/+2
| | | | | | thanks Stepan Kasal <kasal@ucw.cz> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17964 dc483132-0cff-0310-8789-dd5450dbe970
* Updated comments to explain how the CFBundles get unloaded.Alexandra Ellwood2006-04-251-1/+2
| | | | | | (And not to call CFBundleUnloadExecutable which is refcounted.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17962 dc483132-0cff-0310-8789-dd5450dbe970
* Change kdb plugin code to use the new plugin support instead ofKen Raeburn2006-04-254-22/+27
| | | | | | | directly calling dlopen and friends. Change the test config files to refer to "db2.so" instead of "db2". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17961 dc483132-0cff-0310-8789-dd5450dbe970
* Update internal plugin interface to add an errinfo structure to "open"Ken Raeburn2006-04-253-46/+63
| | | | | | | and "get" routines, so that more detailed error information (e.g., from dlerror()) may be returned to the caller. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17960 dc483132-0cff-0310-8789-dd5450dbe970
* Protect against multiple inclusion. Don't define macro '_' if already definedKen Raeburn2006-04-251-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17959 dc483132-0cff-0310-8789-dd5450dbe970
* Don't define DEBUG; it prints debug messages that cause test suite failuresKen Raeburn2006-04-251-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17958 dc483132-0cff-0310-8789-dd5450dbe970
* Change name of kdb function-table symbol from being derived from theKen Raeburn2006-04-253-5/+3
| | | | | | | name of the library file (which may not be acceptable as a C symbol name anyways) to "kdb_function_table" always. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17957 dc483132-0cff-0310-8789-dd5450dbe970
* (.acsyms_okay): Fix rules to work better from subdirectories, and skip theKen Raeburn2006-04-251-3/+3
| | | | | | top-level configure script. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17956 dc483132-0cff-0310-8789-dd5450dbe970
* Tweak configure script generation to check that all symbols producedKen Raeburn2006-04-254-0/+50
| | | | | | | | | | | | | | | via AC_DEFINE are also present in the applicable configure-generated header file, and error out otherwise. Currently doesn't apply in appl and test trees. * util/check-ac-syms: New script. * config/post.in (.acsyms_okay): New target; runs check-ac-syms, unless we're in the appl or tests trees. (configure): Depend on .acsyms_okay. * config/pre.in (AUTOCONF_HEADER): New variable. * plugins/kdb/db2/libdb2/Makefile.in (AUTOCONF_HEADER): New variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17955 dc483132-0cff-0310-8789-dd5450dbe970
* Remove comment on first lineKen Raeburn2006-04-251-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17954 dc483132-0cff-0310-8789-dd5450dbe970
* Set myfulldirKen Raeburn2006-04-251-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17953 dc483132-0cff-0310-8789-dd5450dbe970
* Generate rpc includes as part of the generate-files-mac targetAlexandra Ellwood2006-04-241-0/+2
| | | | | | | ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17952 dc483132-0cff-0310-8789-dd5450dbe970
* Updated kadm5 Makefile.ins to autogenerate the kadm5 headers as partAlexandra Ellwood2006-04-243-0/+6
| | | | | | | | | of the generate-files-mac build phase. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17951 dc483132-0cff-0310-8789-dd5450dbe970
* Added CoreFoundation bundle plugin supportAlexandra Ellwood2006-04-243-211/+338
| | | | | | | | | | | | | Added CoreFoundation bundle plugin support to support library bundle plugin code. Also modified plugin types so they allocate a list of pointers rather than a list of structs so that we can reuse the code that generates the pointer types. (Basically now krb5int_open_plugin_dir() can call krb5int_open_plugin() rather than doing nearly the same thing.) ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17950 dc483132-0cff-0310-8789-dd5450dbe970
* krb_get_tf_realm(): cc_int32 is an integer type and should be Alexandra Ellwood2006-04-241-1/+1
| | | | | | | | | initialized to 0 not NULL. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17949 dc483132-0cff-0310-8789-dd5450dbe970
* Signed/unsigned warnings cleanupEzra Peisach2006-04-223-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17948 dc483132-0cff-0310-8789-dd5450dbe970
* unsigned/signed int warnings in krb5_context variablesEzra Peisach2006-04-212-4/+4
| | | | | | | | | Change in_tkt_ktype_count, tgs_ktype_count and conf_tgs_ktypes_count in context to unsigned int. Change get_profile_etype_list() to expect unsigned int as well. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17947 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leak. closedir() was never being called after successful opendir()Ezra Peisach2006-04-201-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17946 dc483132-0cff-0310-8789-dd5450dbe970
* shsUpdate should take an unsigned int for lengthEzra Peisach2006-04-205-8/+8
| | | | | | | | | | | | | | Update shsUpdate to take an unsigned int length instead of signed. The code already assumes that it is an integer >= 0. This change cleans up a number of signed/unsigned warnings. sha1/shs.h, shs.c, t_shs.c: change ints to unsigned int dk/dk_encrypt.c: static function trunc_hmac change a signed int to unsigned hash_provider/hash_sha1.c: Remove cast in argument to shsUpdate ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17945 dc483132-0cff-0310-8789-dd5450dbe970
* * errors.c (krb5int_get_error): Try strerror_r if available before strerror.Ken Raeburn2006-04-192-2/+29
| | | | | | | | | | | * plugins.c (ERRSTR): New macro, tries strerror_r and uses strerror only if it fails or isn't available. (krb5int_open_plugin_dir): Use it. ticket: 3620 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17944 dc483132-0cff-0310-8789-dd5450dbe970
* Prototype for krb5_c_prf missing constEzra Peisach2006-04-191-2/+3
| | | | | | | | | | | When krb5_c_prf was added in r17219 to implement RFC 3961 PRF, the prototype for krb5_c_prf has the incomming krb5_data not flagged as const. The implementation usage in the dk_prf.c declare as const. Make everything consistent. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17943 dc483132-0cff-0310-8789-dd5450dbe970
* * error_table.h (ET_EBUFSIZ): Increase to 1k.Ken Raeburn2006-04-182-42/+39
| | | | | | | | | | | | * error_message.c (get_thread_buffer): New function, split out from error_message. (error_message): Call it. Also try strerror_r with the per-thread buffer, if both are available, before trying strerror. ticket: 3620 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17942 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for strerror_rKen Raeburn2006-04-181-1/+1
| | | | | | | ticket: 3620 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17941 dc483132-0cff-0310-8789-dd5450dbe970
* (LOCAL_SUBDIRS, STOBJLISTS, SUBDIROBJLISTS): Don't build posix dir on UNIXKen Raeburn2006-04-181-3/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17940 dc483132-0cff-0310-8789-dd5450dbe970
* (krb5int_debug_fprint): Use strerror_r if available.Ken Raeburn2006-04-181-12/+11
| | | | | | (bogus_strerror): Unused function deleted. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17939 dc483132-0cff-0310-8789-dd5450dbe970
* (KRB5_KDB_SRV_TYPE_*, KRB5_DB_LOCKMODE_*): Delete definitions duplicated ↵Ken Raeburn2006-04-181-32/+0
| | | | | | from kdb.h git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17938 dc483132-0cff-0310-8789-dd5450dbe970
* Compute dependencies for profile_tcl.oKen Raeburn2006-04-151-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17931 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (profile_tcl): Link with MLIBS instead of DEPLIBS and LIBSKen Raeburn2006-04-151-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17930 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (KRB5_AC_CHOOSE_ET): Make sure that the error-table symbol isKen Raeburn2006-04-141-1/+1
| | | | | | declared and addressable; the type doesn't need to be complete. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17928 dc483132-0cff-0310-8789-dd5450dbe970
* Include com_err.hKen Raeburn2006-04-141-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17927 dc483132-0cff-0310-8789-dd5450dbe970
* (*-*-solaris*): Set LDCOMBINE_TAIL to use LDFLAGSKen Raeburn2006-04-141-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17926 dc483132-0cff-0310-8789-dd5450dbe970
* Include stdarg.hKen Raeburn2006-04-141-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17925 dc483132-0cff-0310-8789-dd5450dbe970
* Move gmt_mktime.c from lib/krb5/os to util/support, and rename the function.Ken Raeburn2006-04-147-20/+14
| | | | | | | Stop exporting gmt_mktime from libkrb5, and export krb5int_gmt_mktime from libkrb5support. Updated the one caller, asn1_decode.c. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17921 dc483132-0cff-0310-8789-dd5450dbe970
* identity/plugins/common/dynimport.c:Jeffrey Altman2006-04-142-2/+2
| | | | | | | | | | | | | | | | | During the interop session we concluded that the ccapi32.dll should not be required for netidmgr to operate. netidmgr should work with only FILE: ccaches. After the interop the removal of the error check post-load was not removed. identity/doc/Makefile: The 'clean' rules failed to specify the /Q switch which silently removes the directory tree. As a result, during the build the user was prompted. ticket: 3542 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17907 dc483132-0cff-0310-8789-dd5450dbe970
* Partial merge from Novell LDAP integration branch, not including theKen Raeburn2006-04-1341-1147/+292
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | actual LDAP bits: * include/kdb.h (krb5_db_entry_new): Add MASK field indicating what's changed. (KRB5_KDB_SRV_TYPE_*): New macros indicating which type of service is accessing the database. * lib/kadm5/srv/svr_principal.c: Set mask field. * lib/kadm5/srv/server_misc.c, server_init.c: Pass service type to krb5_db_open. * kadmin/dbutil/kdb5_stash.c (kdb5_stash): Pass service type to krb5_db_open. * kadmin/dbutil/kdb5_util.c (open_db_and_mkey): Pass service type to krb5_db_open. * kdc/main.c (init_realm): Pass service type to krb5_db_open. * lib/kadm5/srv/svr_principal.c: Set mask field. * kadmin/dbutil/dump.c (load_db): Pass service type to krb5_db_open. * lib/kdb/kdb5.h (KRB5_KDB_SRV_TYPE_*): New macros. * lib/kdb/err_handle.{c,h}: Deleted. * lib/kadm5/clnt/err_handle.{c,h}: Deleted. (krb5_db_clr_error): Declaration deleted. * lib/kdb/Makefile.in, lib/kadm5/clnt/Makefile.in: Don't build them. * lib/kdb/kdb5.c, lib/kadm5/clnt, lib/kadm5/srv: Use new error-message API. * kdc/do_tgs_req.c (process_tgs_req): Use new error-message API. * kdc/kdc_preauth.c (check_padata) * kdc/do_as_req.c (process_as_req): * kdc/main.c (init_realm): * kadmin/server/ovsec_kadmd.c (main, do_schpw): * schpw.c (process_chpw_request): * kadmin/server/server_stubs.c: * kadmin/cli/kadmin.c (extended_com_err_fn): New function. (kadmin_startup): Tell com_err library to use it, for kadmin.local. * lib/kdb/libkdb5.exports: Don't export krb5_db_clr_error. * lib/kdb/Makefile.in: (SRCS, STLIBOBJS): Don't build err_handle.c. * lib/kdb/kdb5.c (kdb_load_library): Don't pass argument to init_library. (krb5_db_clr_error): Function deleted. * lib/kdb/kdb5.h (struct _kdb_vftabl): Remove argument from init_library field. * lib/kadm5/logger.c (krb5_klog_init): Save the krb5_context pointer. (klog_com_err_proc): Use it, and call new error-message API. * lib/kadm5/srv/svr_principal.c: Use new error-message API. * kadmin/dbutil/kdb5_util.c (extended_com_err_fn): New function. (main): Tell com_err library to use it. * plugins/kdb/db2: Use new error-message APIs and updated DAL interface. * lib/kadm5/kadm_rpc.h: Delete err_str fields. * lib/kadm5/kadm_rpc_xdr.c: Don't process them. * kadmin/server/server_stubs.c: Don't use ret.err_str field. * include/k5-thread.h (k5_key_t): Deleted unused values. * lib/kdb/kdb5.h (KDB_MODULE_SECTION): Change db_modules to dbmodules. (KDB_MODULE_DEF_SECTION): New macro. * tests/Makefile.in (krb5.conf): Rename db_modules to dbmodules. * tests/dejagnu/config/default.exp (setup_krb5_conf): Likewise. * kadmin/testing/proto/krb5.conf.proto: Likewise. * lib/kdb/libkdb5.exports: Do export krb5_def_store_mkey. * lib/kadm5/admin.h (KADM5_CPW_FUNCTION, KADM5_RANDKEY_USED): New macros. (struct _kadm5_config_params): New field kpasswd_server. * lib/krb5/error_tables/kdb5_err.et (KRB5_KDB_SERVER_INTERNAL_ERR): New error code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17899 dc483132-0cff-0310-8789-dd5450dbe970
* Don't include kdb.h from k5-int.h; instead, include it in the handfulKen Raeburn2006-04-1350-1034/+888
| | | | | | of places where it's actually needed. Update dependencies. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17898 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Delete OSF/1 libsecurity/setluid/LOGINLIBS codeKen Raeburn2006-04-131-6/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17897 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2006-04-111-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17894 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ChangeLog files from the source tree. From now on, theSam Hartman2006-04-11151-68494/+0
| | | | | | | subversion commit log entry needs to include information that would have been in the changelog. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17893 dc483132-0cff-0310-8789-dd5450dbe970
* Remove .Sanitize fileKen Raeburn2006-04-111-34/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17890 dc483132-0cff-0310-8789-dd5450dbe970
* * Sanitize: RemovedKen Raeburn2006-04-112-418/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17889 dc483132-0cff-0310-8789-dd5450dbe970
* Remove .Sanitize and .rconf files, no longer usedKen Raeburn2006-04-1191-4020/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17888 dc483132-0cff-0310-8789-dd5450dbe970
* Move pty library from util/pty to appl/libpty; update Makefile.in andKen Raeburn2006-04-1128-6/+25
| | | | | | configure.in files accordingly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17887 dc483132-0cff-0310-8789-dd5450dbe970