summaryrefslogtreecommitdiffstats
path: root/src/appl
Commit message (Collapse)AuthorAgeFilesLines
...
* Configure appl test programs from top levelKen Raeburn2007-03-2510-40/+20
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19272 dc483132-0cff-0310-8789-dd5450dbe970
* Include autoconf.hKen Raeburn2007-03-251-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19271 dc483132-0cff-0310-8789-dd5450dbe970
* Remove KRB5_BUILD_LIBRARY_STATIC; always use KRB5_BUILD_LIBRARYKen Raeburn2007-03-252-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19266 dc483132-0cff-0310-8789-dd5450dbe970
* Never set krb5_force_static. Instead, set the defaults for buildingKen Raeburn2007-03-252-1/+2
| | | | | | | | | | | | | | | | shared libraries, and allow a Makefile.in to include a new makefile fragment for building private (static, not installed) libraries. Created another makefile fragment to be included to indicate the shared library has no dependencies. (Currently this is the case only for the libdb2 library, which we don't install, but do build for testing.) The way we construct the library dependency search path arguments doesn't work for an empty list on some platforms. Updated Makefile.in to use @libpriv_frag@ and @libnodeps_frag@ as necessary. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19265 dc483132-0cff-0310-8789-dd5450dbe970
* Remove commented-out macroKen Raeburn2007-03-251-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19259 dc483132-0cff-0310-8789-dd5450dbe970
* Remove varargs.h paths, always use stdarg.hKen Raeburn2007-01-204-17/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19088 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2007-01-201-13/+29
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19086 dc483132-0cff-0310-8789-dd5450dbe970
* Include k5-int.h instead of krb5.h when 'private' functions are neededKen Raeburn2007-01-209-9/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19080 dc483132-0cff-0310-8789-dd5450dbe970
* Modifications to support the generation and embedding Jeffrey Altman2006-12-072-0/+3
| | | | | | | | | | | | of library manifests into generated EXEs and DLLs. Manifests are required for Windows XP and above when applications are built with Microsoft Visual Studio 2005 (aka VS8) or above. ticket: 3642 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18930 dc483132-0cff-0310-8789-dd5450dbe970
* * src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send):Tom Yu2006-12-011-2/+4
| | | | | | | | | Conditionalize debugging printfs. ticket: 4941 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18892 dc483132-0cff-0310-8789-dd5450dbe970
* * secure.c (secure_putbuf): Initialize automatic variable LENGTH to 0.Ken Raeburn2006-11-022-3/+3
| | | | | | * ftp.c (gss_trials, n_gss_trials): Make static and const. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18760 dc483132-0cff-0310-8789-dd5450dbe970
* Memory leak fixes on exitEzra Peisach2006-10-182-1/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18727 dc483132-0cff-0310-8789-dd5450dbe970
* Cleanup some warnings on missing prototypesEzra Peisach2006-10-153-2/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18715 dc483132-0cff-0310-8789-dd5450dbe970
* Remove all unused variable warnings from treeEzra Peisach2006-10-151-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18712 dc483132-0cff-0310-8789-dd5450dbe970
* typoKen Raeburn2006-10-151-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18711 dc483132-0cff-0310-8789-dd5450dbe970
* Initialize some values before use, silence some warningsKen Raeburn2006-10-151-1/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18705 dc483132-0cff-0310-8789-dd5450dbe970
* Fix logic bug in string allocationKen Raeburn2006-10-151-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18704 dc483132-0cff-0310-8789-dd5450dbe970
* Use memmove for overlapping regionsKen Raeburn2006-10-152-27/+29
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18703 dc483132-0cff-0310-8789-dd5450dbe970
* Don't strncpy a string to itselfKen Raeburn2006-10-141-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18701 dc483132-0cff-0310-8789-dd5450dbe970
* Use $(VALGRIND) when running programs using $(KRB5_RUN_ENV) orKen Raeburn2006-10-131-1/+1
| | | | | | | | | | | | | | | | | | $(RUN_SETUP). Replaces old hack with MAYBE_VALGRIND added to RUN_ENV in a way that would break in some of the tests. Set VALGRIND in site.exp in tests/dejagnu. (Not used yet.) Runs some shell scripts under valgrind, rather than changing them to run only the executables under valgrind; this is mostly okay, just creates lots of extra log data, and requires --trace-children=yes. This should work for any instrumentation program invocation that gets followed immediately by the name and argument list for the program being instrumented. For example, VALGRIND="env LD_PRELOAD=..." should work, though I haven't tested it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18699 dc483132-0cff-0310-8789-dd5450dbe970
* more debugging printfs for nightly testingKen Raeburn2006-10-121-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18689 dc483132-0cff-0310-8789-dd5450dbe970
* some (more) debugging code to track down nightly test failuresKen Raeburn2006-10-111-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18680 dc483132-0cff-0310-8789-dd5450dbe970
* some debugging code to track down nightly test failuresKen Raeburn2006-10-111-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18679 dc483132-0cff-0310-8789-dd5450dbe970
* Move ASN.1 routines for KDB LDAP plugin into main krb5 library,Ken Raeburn2006-10-071-1/+0
| | | | | | accessed via krb5int_access. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18666 dc483132-0cff-0310-8789-dd5450dbe970
* make dependTom Yu2006-10-063-12/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18652 dc483132-0cff-0310-8789-dd5450dbe970
* Set the canonicalize flag in TGS requests and accept cross-realm referral ↵Sam Hartman2006-09-211-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tickets. We do not yet accept tickets in which the server name changes. * krb5_sname_to_principal: If there is no domain realm mapping return null realm *krb5_get_cred_via_tkt: New behavior as described below 1) the referrals case: - check for TGT for initial realm - if a remote realm was specified (which must have happened via a domain_realm mapping), obtain a TGT for it the standard way and start with that. - use client realm for server if not specified - iterate through this loop: - request ticket with referrals turned on - if that fails: - if this was the first request, punt to non-referrals case - otherwise, retry once without referrals turned on then terminate either way - if it works, either use the service ticket or follow the referral path - if loop count exceeded, hardfail 2) the nonreferrals case - this is mostly the old walk_realm_tree TGT-finding (which allows limited shortcut referrals per 4120) followed by a standard tgs-req. - originally requested principal is used for this, although if we were handed something without a realm, determine a fallback realm based on DNS TXT records or a truncation of the domain name. ticket: 2652 Owner: amb git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18598 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilitiesTom Yu2006-08-085-12/+41
| | | | | | | | | | | | | | | | | | | * src/appl/gssftp/ftpd/ftpd.c (getdatasock, passive): * src/appl/bsd/v4rcp.c (main): * src/appl/bsd/krcp.c (main): * src/appl/bsd/krshd.c (doit): * src/appl/bsd/login.c (main): * src/clients/ksu/main.c (sweep_up): * src/lib/krb4/kuserok.c (kuserok): Check return values from setuid() and related functions to avoid privilege escalation vulnerabilities. Fixes MITKRB5-SA-2006-001. [CVE-2006-3083, VU#580124, CVE-2006-3084, VU#401660] ticket: new target_version: 1.5.1 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18420 dc483132-0cff-0310-8789-dd5450dbe970
* Apply patch from Michael Calmer to fix some uninitialized variablesTom Yu2006-08-022-1/+4
| | | | | | | | | | | | | | | | | | | | | | * src/appl/gssftp/ftpd/ftpd.c (auth_data): Initialize stat_maj, accept_maj, acquire_maj. * src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send): Intialize rdata. * src/kdc/do_tgs_req.c (process_tgs_req): Initialize magic and tr_contents.magic. * src/lib/krb5/asn.1/krb5_decode.c (decode_krb5_safe_with_body): Initialize tmpbody.magic. * src/plugins/kdb/db2/libdb2/hash/dbm.c (kdb2_fetch) (kdb2_firstkey, kdb2_nextkey): Initialize dsize. ticket: 3904 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18404 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2006-07-171-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18332 dc483132-0cff-0310-8789-dd5450dbe970
* autoconf 2.60 compatibilityKen Raeburn2006-06-282-4/+4
| | | | | | | | | | | Change all file substitutions so that @-patterns start at the beginning of their lines, as now required by autoconf 2.60 (released Monday). ticket: new target_version: 1.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18249 dc483132-0cff-0310-8789-dd5450dbe970
* In verify_krb_v4_tgt, use an unsigned KRB4_32 to store an address ratherRuss Allbery2006-06-201-1/+1
| | | | | | | | | | | | than an unsigned long to avoid memcpying past the end of a structure on 64-bit platforms. Ticket: 581 Version_Reported: 1.0.5 Target_Version: 1.5 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18175 dc483132-0cff-0310-8789-dd5450dbe970
* Pass in the correct value for the first argument of select (one largerRuss Allbery2006-06-194-5/+29
| | | | | | | | | | | | | | than the largest file number in the select set) rather than some multiple of sizeof some struct. The latter is large enough accidentally work, but breaks on AIX. Map IPv4-mapped IPv6 addresses back to IPv4 in krshd for the purposes of connecting back to the remote system on AIX, since on AIX getnameinfo returns such addresses but connect won't accept them. Ticket: 3122 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18166 dc483132-0cff-0310-8789-dd5450dbe970
* Test for and use setutsent, based on a patch from Nate Yocom at Centrify.Ken Raeburn2006-06-172-5/+22
| | | | | | | | Modified to restrict the configure test to just the pty library. ticket: 3423 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18161 dc483132-0cff-0310-8789-dd5450dbe970
* Change a bunch of calls to ctype macros (those cited by Jeff, and aKen Raeburn2006-06-162-8/+8
| | | | | | | | few others) to cast the character values to unsigned char. ticket: 3445 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18156 dc483132-0cff-0310-8789-dd5450dbe970
* ftpd's getline conflicts with current glibc headersKen Raeburn2006-06-163-5/+4
| | | | | | | | | | | | | | | Reported by Ubaidul Khan on kerberos@mit this date. GNU libc includes a function getline with an incompatible prototype. It hasn't caused problems for MIT on RHEL 4 (glibc 2.3.4), but apparently FC5 has a newer set of headers in which it does. * ftpcmd.y (getline): Renamed to ftpd_getline. Declarations and callers changed. * ftpd.c (getline): Remove duplicate declaration. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18153 dc483132-0cff-0310-8789-dd5450dbe970
* Increase buffer sizes to 64K where a Kerberos 5 authenticator might beKen Raeburn2006-06-157-7/+7
| | | | | | | | exchanged. Suggested by Markus Moeller. ticket: 2615 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18151 dc483132-0cff-0310-8789-dd5450dbe970
* remove unused versions of makefilesKen Raeburn2006-06-156-369/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18150 dc483132-0cff-0310-8789-dd5450dbe970
* make dependTom Yu2006-06-151-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18141 dc483132-0cff-0310-8789-dd5450dbe970
* telnet help should telnet to a host named help, not display a usageRuss Allbery2006-06-131-1/+1
| | | | | | | | | | | message. Only support ?, not help, to request help with the open command. The same change was made in netkit's telnet. Ticket: 3269 Component: krb5-appl Version_Reported: 1.4.2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18124 dc483132-0cff-0310-8789-dd5450dbe970
* Change man page cross-reference to kerberos(1) from kerberos(3)Russ Allbery2006-06-131-1/+1
| | | | | | | | Ticket: 3008 Version_Reported: 1.3.6 Component: krb5-appl git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18122 dc483132-0cff-0310-8789-dd5450dbe970
* Always include sys/ioctl.h in the telnet and telnetd code, even ifRuss Allbery2006-06-122-4/+2
| | | | | | | | | | sys/filio.h is available. GNU/kFreeBSD has sys/filio.h but still requires sys/ioctl.h, and sys/ioctl.h is included unconditionally elsewhere in the code. Patch from Petr Salinger. Ticket: 3466 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18117 dc483132-0cff-0310-8789-dd5450dbe970
* Document the authorization logic used in the absence of .k5login files.Russ Allbery2006-06-122-18/+18
| | | | | | | | | | Remove all remaining references to .rhosts authentication; the code to implement this was already removed. Ticket: 2577 Version_Reported: 1.3.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18112 dc483132-0cff-0310-8789-dd5450dbe970
* Fix minor nroff man page problems (stray space, bad cross reference)Russ Allbery2006-06-121-1/+1
| | | | | | | Ticket: 3010 Version_Reported: 1.4.2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18107 dc483132-0cff-0310-8789-dd5450dbe970
* Rename locate.h to locate_plugin.h. Change references, update dependenciesKen Raeburn2006-05-242-4/+4
| | | | | | ticket: 3784 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18037 dc483132-0cff-0310-8789-dd5450dbe970
* install headers into include/krb5Ken Raeburn2006-05-235-74/+83
| | | | | | | | | | | Create include/krb5 directory, and put krb5.h and (k5-)locate.h there in the build tree. Stub krb5.h in main include directory just includes krb5/krb5.h. Update dependencies, and add dependencies in a couple Makefiles that didn't have them. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18030 dc483132-0cff-0310-8789-dd5450dbe970
* Don't include kdb.h from k5-int.h; instead, include it in the handfulKen Raeburn2006-04-132-14/+12
| | | | | | of places where it's actually needed. Update dependencies. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17898 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Delete OSF/1 libsecurity/setluid/LOGINLIBS codeKen Raeburn2006-04-131-6/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17897 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ChangeLog files from the source tree. From now on, theSam Hartman2006-04-1119-9619/+0
| | | | | | | subversion commit log entry needs to include information that would have been in the changelog. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17893 dc483132-0cff-0310-8789-dd5450dbe970
* Remove .Sanitize and .rconf files, no longer usedKen Raeburn2006-04-1122-902/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17888 dc483132-0cff-0310-8789-dd5450dbe970
* Move pty library from util/pty to appl/libpty; update Makefile.in andKen Raeburn2006-04-1124-1/+4443
| | | | | | configure.in files accordingly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17887 dc483132-0cff-0310-8789-dd5450dbe970