summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * cc_mslsa.c: Implement krb5_lcc_initialize()Jeffrey Altman2004-09-102-6/+35
| | | | | | | | | Remove all tickets from the cache which have a client principal that matches the input principal. ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16737 dc483132-0cff-0310-8789-dd5450dbe970
* cc_mslsa.c: Correct test for KerbQueryTicketCacheEx2MessageJeffrey Altman2004-09-102-3/+6
| | | | | | ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16736 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-09-10 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-09-102-8/+374
| | | | | | | | | | | | | | * cc_mslsa.c: The following functionality is being committed but commented out because it is not presently available in public Microsoft SDKs - support for KerbSubmitTicket which allows a KERB_CRED message to be forwarded to the LSA. (KERB_SUBMIT_TICKET) - support for the KerbQueryTicketCacheEx2Message which adds the Session Key Enctype to the contents of the response from KerbQueryTicketCacheExMessage. (HAVE_CACHE_INFO_EX2) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16735 dc483132-0cff-0310-8789-dd5450dbe970
* krb5.hin: add new krb5_ccache flag, KRB5_TC_NOTICKETJeffrey Altman2004-09-092-0/+5
| | | | | | | | | when set, a krb5_ccache does not have to return a ticket within the returned credential ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16734 dc483132-0cff-0310-8789-dd5450dbe970
* ms2mit.c: Apply KRB5_TC_NOTICKET to MSLSA: while searching for theJeffrey Altman2004-09-092-0/+19
| | | | | | | | presence of an initial ticket to copy to the MIT cache ticket: 2688 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16733 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Don't overwrite "PATH" environment variable ifTom Yu2004-09-082-1/+6
| | | | | | | | | it's already set. ticket: 427 version_reported: 1.0.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16731 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (install-unix): Install krb524d manpageTom Yu2004-09-082-0/+5
| | | | | | ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16730 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Install krb5-config manpageTom Yu2004-09-082-0/+5
| | | | | | ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16729 dc483132-0cff-0310-8789-dd5450dbe970
* Added man pages for krb524d and krb5-configAlexandra Ellwood2004-09-081-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16728 dc483132-0cff-0310-8789-dd5450dbe970
* Added a man page for krb5-configAlexandra Ellwood2004-09-082-0/+78
| | | | | | ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16727 dc483132-0cff-0310-8789-dd5450dbe970
* Added man page for krb524dAlexandra Ellwood2004-09-082-0/+78
| | | | | | ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16726 dc483132-0cff-0310-8789-dd5450dbe970
* commentTom Yu2004-09-072-1/+6
| | | | | | | | | | ticket: 696 version_fixed: 1.4 * install.texinfo (Propagate the Database to Each Slave KDC): Remove spurious "-R" flag from kdb5_util invocation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16725 dc483132-0cff-0310-8789-dd5450dbe970
* Include all subdirectories of KFW_INSTALL_DIR in the SDKJeffrey Altman2004-09-072-1/+6
| | | | | | | ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16723 dc483132-0cff-0310-8789-dd5450dbe970
* update for krb5-1.3.5-beta1Tom Yu2004-09-031-6/+55
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16719 dc483132-0cff-0310-8789-dd5450dbe970
* improve documentation of ANSI C requirementTom Yu2004-09-032-12/+34
| | | | | | | | | | | | | * build.texinfo: Fix some typos. (Build Requirements): Note ANSI C (c89) requirement. (Alpha OSF/1 V4.0): Document "-std0" vs "-std" cc behavior. ticket: new target_version: 1.3.5 component: krb5-doc tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16717 dc483132-0cff-0310-8789-dd5450dbe970
* * cc_mslsa.c:Jeffrey Altman2004-09-022-23/+246
| | | | | | | | | | | | | | | | | | | | | | | | | | - Fix MITPrincToMSPrinc to prevent writing to the output buffer if the input won't fit. - Add internal UnicodeStringToMITPrinc function - Rename internal MSPrincToMITPrinc to ExternalNameToMITPrinc - Rename internal PurgeMSTGT to PurgeAllTickets - Add internal PurgeTicket2000 - Add internal PurgeTicketXP - Since tickets can only be requested via KDC Opt Flags it is not possible to specifically request the Initial ticket. If more than one ticket exists which matching service names, enctypes, and ticket flags the initial ticket flag may not be set. If the caller requested the initial ticket, set the flag manually. - Add preliminary support for krb5_lcc_set_flags - Modify krb5_lcc_initialize to return success - Modify krb5_lcc_get_principal to support an LSA cache which does not contain a TGT when krb5_lcc_resolve is called. - Implement krb5_lcc_remove_cred ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16714 dc483132-0cff-0310-8789-dd5450dbe970
* * ms2mit.c: add -c ccache command line optionJeffrey Altman2004-09-024-4/+198
| | | | | | | | | * mit2ms.c: new command. Copies contents of the mit ccache to the MSLSA: ccache ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16713 dc483132-0cff-0310-8789-dd5450dbe970
* * kvno.M: Update usageTom Yu2004-08-313-4/+13
| | | | | | | | * kvno.c (xusage): Update usage message. ticket: 2677 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16709 dc483132-0cff-0310-8789-dd5450dbe970
* oops, forgot changelogTom Yu2004-08-311-0/+5
| | | | | | ticket: 2686 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16703 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2004-003Tom Yu2004-08-312-0/+4
| | | | | | | | | | Fix for ASN.1 decoder denial-of-service. [MITKRB5-SA-2004-003] ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16702 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2004-002Tom Yu2004-08-319-4/+43
| | | | | | | | | | Fix double-free vulnerabilities [MITKRB5-SA-2004-002]. ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16701 dc483132-0cff-0310-8789-dd5450dbe970
* added private apple pkinit sourcesAlexandra Ellwood2004-08-301-0/+125
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16699 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c (profile_open_file): If an error occurs while updating from theKen Raeburn2004-08-282-0/+8
| | | | | | input file, destroy the mutex only if we're not sharing file data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16698 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_parse.c (parse_std_line): Rewrite handling of whitespace in and afterKen Raeburn2004-08-282-6/+20
| | | | | | | | | | | | | | tag, to strip trailing whitespace (per current locale, not just ASCII space characters), and prohibit any internal space characters in tag names. (This is not the patch supplied in the bug report; that patch changed the tag handling to allow spaces in tag names, which we haven't previously allowed. On the other hand, we haven't specifically disallowed internal tabs or other whitespace, either, and this patch does so.) ticket: 2614 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16697 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (make_ap_req_v1): Free checksum dataTom Yu2004-08-283-4/+14
| | | | | | | | | allocated by make_gss_checksum() to avoid leak. * k5sealv3.c (gss_krb5int_unseal_token_v3): Free plain.data after checksum is verified, to avoid leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16696 dc483132-0cff-0310-8789-dd5450dbe970
* move last patch down a little so it applies to tcp sockets as well as udpKen Raeburn2004-08-281-14/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16695 dc483132-0cff-0310-8789-dd5450dbe970
* * sendto_kdc.c (start_connection) [DEBUG]: Log the local socket addressKen Raeburn2004-08-282-0/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16694 dc483132-0cff-0310-8789-dd5450dbe970
* Finally applied patch from Nalin Dahyabhai at Red Hat to fix 0/NULL bugs inKen Raeburn2004-08-278-7/+31
| | | | | | | | | variadic argument lists to krb5_build_principal{,_ext}. Skipped the stylistic patches that removed casts of NULL. tag: 1850 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16693 dc483132-0cff-0310-8789-dd5450dbe970
* * profile_tcl.c: New file, generated from profile.swg, but checked in to avoidKen Raeburn2004-08-272-0/+2084
| | | | | | requiring swig in order to generate the test program. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16692 dc483132-0cff-0310-8789-dd5450dbe970
* * profile.swg: New file.Ken Raeburn2004-08-274-4/+266
| | | | | | | | | | | * configure.in: Look for Tcl. * Makefile.in (profile_tcl, profile_tcl.c, profile_tcl.o): New targets, not built by default. (PROG_LIBPATH, PROG_RPATH, LOCALINCLUDES): Add Tcl options. (DEFINES): Define. (clean-unix): Delete profile_tcl. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16691 dc483132-0cff-0310-8789-dd5450dbe970
* * run.test (getnwords): Run data through "cat -v", because at least one versionKen Raeburn2004-08-272-1/+11
| | | | | | | of Debian Linux has an English dictionary with Latin-1 characters and a "rev" that seems to default to some sort of Unicode. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16690 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_int.h (struct _prf_data_t): Add a mutex.Ken Raeburn2004-08-275-50/+142
| | | | | | | | | | | | | | * prof_file.c (profile_open_file): Initialize data mutex. (profile_update_file_data, profile_flush_file_data): Lock it while manipulating file data. (profile_lock_global, profile_unlock_global): New functions. * prof_set.c (rw_setup): Acquire global lock while checking flags and adjusting ref count. (profile_update_relation, profile_rename_section, profile_add_relation): Lock data mutex while manipulating profile data. * prof_tree.c (profile_node_iterator): Do more magic number tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16689 dc483132-0cff-0310-8789-dd5450dbe970
* Patch from Garry Zacheiss to use krb5_get_init_creds_password in ftpdSam Hartman2004-08-272-6/+12
| | | | | | | | | not krb5_get_in_tkt_password in order to avoid the prompter being called. Ticket: 2682 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16688 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (krb5_gss_acquire_cred): Call gssint_initialize_library.Ken Raeburn2004-08-262-1/+13
| | | | | | Return correct error code on mutex initialization failure. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16687 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Look for uint32_t, not int32_t, since some BSD-ishTom Yu2004-08-263-27/+35
| | | | | | | | | sys/types.h headers have int32_t and u_int32_t, but only have uint32_t in stdint.h. * types.hin: Change int32_t checks to uint32_t checks. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16686 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Don't test for pthread_rwlock_initKen Raeburn2004-08-242-3/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16685 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (KRB5_AC_PRAGMA_WEAK_REF): Fix to work with AIX compiler when ↵Ken Raeburn2004-08-242-1/+6
| | | | | | optimizing git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16684 dc483132-0cff-0310-8789-dd5450dbe970
* * addrinfo-test.c: New fileKen Raeburn2004-08-232-0/+287
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16683 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (fai_add_hosts_by_name): Handle case where returned ↵Ken Raeburn2004-08-232-2/+9
| | | | | | ai_canonname is null git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16682 dc483132-0cff-0310-8789-dd5450dbe970
* New commands: kcpytkt and kdeltktJeffrey Altman2004-08-2112-1/+510
| | | | | | | | | | kcpytkt: copies one or more tickets between credential caches kdeltkt: deletes one or mote tickets from a credential cache ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16681 dc483132-0cff-0310-8789-dd5450dbe970
* kvno: add -c ccache command line parameterJeffrey Altman2004-08-212-11/+27
| | | | | | | | | call krb5_free_unparsed_name() instead of free() to prevent crashes on Windows. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16680 dc483132-0cff-0310-8789-dd5450dbe970
* * libkadm5srv.exports: Update for previous renamingTom Yu2004-08-212-4/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16679 dc483132-0cff-0310-8789-dd5450dbe970
* Fix no-auth test to use a config mask flag to ask for no-auth, toTom Yu2004-08-217-25/+38
| | | | | | avoid the icky repeated build of client_init.c git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16678 dc483132-0cff-0310-8789-dd5450dbe970
* whitespaceKen Raeburn2004-08-211-10/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16677 dc483132-0cff-0310-8789-dd5450dbe970
* ChangeLogs for WiX MSI installerJeffrey Altman2004-08-204-0/+12
| | | | | | ticket: 2675 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16676 dc483132-0cff-0310-8789-dd5450dbe970
* New WiX based MSI installer for KFWJeffrey Altman2004-08-2023-0/+3396
| | | | | | | | | | Requires WiX 2.0.1927.1 patched by Asanka. http://prdownloads.sourceforge.net/wix/sources-2.0.1927.1.zip ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16675 dc483132-0cff-0310-8789-dd5450dbe970
* renamed acl_* functions to kadm5int_acl_*Alexandra Ellwood2004-08-206-84/+93
| | | | | | ticket: 2674 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16673 dc483132-0cff-0310-8789-dd5450dbe970
* Added kadmin code to project to make searches easierAlexandra Ellwood2004-08-201-0/+981
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16672 dc483132-0cff-0310-8789-dd5450dbe970
* * shlib.conf: Add support for gnu hurd and for BSD kernels withSam Hartman2004-08-192-1/+6
| | | | | | glibc; use the Linux shared library procedure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16671 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (KRB5_AC_ENABLE_THREADS): Check for pthread_rwlock_init, with andKen Raeburn2004-08-192-1/+8
| | | | | | without the thread library. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16670 dc483132-0cff-0310-8789-dd5450dbe970