summaryrefslogtreecommitdiffstats
path: root/src/lib/kadm5
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed handling of krb5_net_write() failing (need to call waitpid() on child ↵Alexandra Ellwood2003-09-021-14/+8
| | | | | | | | even if we kill it) ticket: 1799 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15805 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed comment (part of adding Apple Password Server support)Alexandra Ellwood2003-09-021-2/+1
| | | | | | ticket: 1799 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15804 dc483132-0cff-0310-8789-dd5450dbe970
* Added Apple password server supportAlexandra Ellwood2003-09-022-0/+149
| | | | | | ticket: 1799 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15803 dc483132-0cff-0310-8789-dd5450dbe970
* * server_kdb.c (kdb_init_hist): Force history principal's key toTom Yu2003-06-132-6/+16
| | | | | | | | | | be of the same enctype as the master key, as searches for it later on explicitly specify the enctype. ticket: 964 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15621 dc483132-0cff-0310-8789-dd5450dbe970
* Drop default_kdc_enctypes and all related codeTom Yu2003-06-032-21/+7
| | | | | | | | | ticket: 1553 target_version: 1.3 status: open tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15544 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test117): Update lifetime expected for new defaultsKen Raeburn2003-06-022-2/+7
| | | | | | | ticket: 1190 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15542 dc483132-0cff-0310-8789-dd5450dbe970
* * alt_prof.c (kadm5_get_config_params): Change default max_life to one dayKen Raeburn2003-05-312-1/+6
| | | | | | | ticket: 1190 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15539 dc483132-0cff-0310-8789-dd5450dbe970
* make-depend updatesKen Raeburn2003-05-243-70/+70
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15490 dc483132-0cff-0310-8789-dd5450dbe970
* Set length correctly in krb5_get_in_tkt_with_password if password isTom Yu2003-05-213-4/+12
| | | | | | | | | | actually passed in. Also, fix test suite to be more lenient about password prompts, which changed under the previous patches for this ticket. ticket: 1480 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15463 dc483132-0cff-0310-8789-dd5450dbe970
* AES shouldn't be in KDC default enctype listKen Raeburn2003-05-132-1/+6
| | | | | | | | | | | Until all services including GSS-based ones can support AES, we don't want it in the default supported enctypes list on the KDC. ticket: new tags: pullup target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15428 dc483132-0cff-0310-8789-dd5450dbe970
* Replace ovpasswd with kpasswdSam Hartman2003-05-042-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15392 dc483132-0cff-0310-8789-dd5450dbe970
* * alt_prof.c (kadm5_get_config_params): Add aes256 to the default supportedKen Raeburn2003-04-192-1/+6
| | | | | | | | | enctypes list. ticket: 1418 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15362 dc483132-0cff-0310-8789-dd5450dbe970
* don't install in-tree libdbTom Yu2003-04-022-6/+8
| | | | | | | | | | | | | Don't install the in-tree libdb. This requires that libkdb, etc. explicitly pull in the object files of the in-tree libdb if not using the system libdb. ticket: new status: open target_version: 1.3 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15320 dc483132-0cff-0310-8789-dd5450dbe970
* Use com_err_deplib rather than an explicit path so we do not have ourSam Hartman2003-03-022-2/+2
| | | | | | | shared libraries depend at a make level on com_err if we use the system com_err library. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15212 dc483132-0cff-0310-8789-dd5450dbe970
* kadm5_get_either leaks memoryEzra Peisach2003-01-122-0/+8
| | | | | | | | | * svr_iters.c (kadm5_get_either): For POSIX_REGEXPS (i.e. regcomp), call regfree() to cleanup memory. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15116 dc483132-0cff-0310-8789-dd5450dbe970
* Search for ar, ranlib, install in KRB5_BUILD_LIBRARY* macros rather thanKen Raeburn2003-01-102-4/+3
| | | | | | explicitly in directories using those macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15111 dc483132-0cff-0310-8789-dd5450dbe970
* Use markers in Makefile.in rather than rules in configure.in to indicate whenKen Raeburn2003-01-107-6/+27
| | | | | | | | to use the lib.in and libobj.in makefile fragments. Pushing this per-directory info into Makefile.in will make it a little easier to work on combining configure scripts for multiple directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
* Log entries for Makefile.ov deletionKen Raeburn2003-01-082-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15090 dc483132-0cff-0310-8789-dd5450dbe970
* nuke old OV makefile stuffKen Raeburn2003-01-072-215/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15088 dc483132-0cff-0310-8789-dd5450dbe970
* Only system headers should declare errnoSam Hartman2003-01-053-2/+9
| | | | | | | | | | | | | Many parts of krb5 declare errno in source files using extern int errno. This has not been needed in ANSI C for a long time, and actively breaks modern versions of glibc. So these declarations are removed and errno.h included where necessary. Ticket: new Component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15082 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test150, test151, test153): Don't try to set KRB5CCNAME;Ken Raeburn2002-12-193-3/+10
| | | | | | | | | | only the fact that it wasn't being done correctly prevented it from causing test failures. * lib/lib.t (kinit): If kinit reports a problem initializing the credentials cache, raise an error. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15056 dc483132-0cff-0310-8789-dd5450dbe970
* Changes to allow compilation --with-system-db and --enable-sharedEzra Peisach2002-12-162-3/+12
| | | | | | (Do not depend on lib/db.so being present) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15049 dc483132-0cff-0310-8789-dd5450dbe970
* Fix depend rules to keep state about whether verification of variousTom Yu2002-12-122-2/+7
| | | | | | | | things succeeded. Change some double colons to single colons. Add a new depend-dependencies target to allow Makefile.in to specify things that must be built for depend to work. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15045 dc483132-0cff-0310-8789-dd5450dbe970
* Thanks, patch appliedTom Yu2002-11-072-1/+8
| | | | | | | | | | | | * svr_principal.c (kadm5_setkey_principal_3): Apply patch from Emily Ratliff to allow n_ks_tuple to be zero, which is the case if being called from kadmind answering a client's setkey_principal request. ticket: 1008 target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14978 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes up the in-tree callers of krb5_read_password() andTom Yu2002-11-062-2/+7
| | | | | | | | | | des_read_password(). We should perhaps tighten up the test suite now. ticket: 1217 status: open target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14972 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes the test suite aspects. Callers of the variousTom Yu2002-10-193-5/+14
| | | | | | | | | | | | | | | read_password functions still need to be updated. * api.2/init-v2.exp (test106): Make regexp more forgiving of variant password prompts. * api.0/init.exp (test7, test22, test225): Make regexp more forgiving of variant password prompts. ticket: 1217 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14932 dc483132-0cff-0310-8789-dd5450dbe970
* * server_init.c (kadm5_lock, kadm5_unlock): Return KADM5_OKEzra Peisach2002-10-152-0/+9
| | | | | | instead of falling off end of function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14927 dc483132-0cff-0310-8789-dd5450dbe970
* libkadm5 should allow persistent locksTom Yu2002-10-0810-7/+81
| | | | | | | | | | | libkadm5 should have a way to persistently lock the databases to avoid wasting time on closing and reopening. These patches implement persistent exclusive locks for local access only. ticket: new target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14914 dc483132-0cff-0310-8789-dd5450dbe970
* Support reading a list of TCP port numbers from the KDC config file; defaultKen Raeburn2002-09-183-1/+13
| | | | | | to none for now. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14878 dc483132-0cff-0310-8789-dd5450dbe970
* protoizeKen Raeburn2002-09-182-32/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14877 dc483132-0cff-0310-8789-dd5450dbe970
* * client_init.c (_kadm5_init_any): If creating a new ccache, put it in memoryKen Raeburn2002-09-182-0/+14
| | | | | | instead of on disk. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14876 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/chpass-principal.exp:Tom Yu2002-09-1534-836/+882
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * api.0/crte-policy.exp: * api.0/crte-principal.exp: * api.0/destroy.exp: * api.0/dlte-policy.exp: * api.0/dlte-principal.exp: * api.0/get-policy.exp: * api.0/get-principal.exp: * api.0/init.exp: * api.0/mod-policy.exp: * api.0/mod-principal.exp: * api.0/randkey-principal.exp: * api.0/rename-principal.exp: * api.1/lock.exp: * api.2/chpass-principal-v2.exp: * api.2/chpass-principal.exp: * api.2/crte-policy.exp: * api.2/crte-principal.exp: * api.2/destroy.exp: * api.2/dlte-policy.exp: * api.2/dlte-principal.exp: * api.2/get-policy.exp: * api.2/get-principal-v2.exp: * api.2/get-principal.exp: * api.2/init-v2.exp: * api.2/init.exp: * api.2/mod-policy.exp: * api.2/mod-principal-v2.exp: * api.2/mod-principal.exp: * api.2/randkey-principal-v2.exp: * api.2/randkey-principal.exp: * lib/lib.t: s/error/perror. * config/unix.exp: Work around tcl 8.4's (incorrect?) output EOL translation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14866 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2002-09-132-26/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14857 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2002-08-292-8/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14791 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Revert $(S)=>/ change, for Windows supportKen Raeburn2002-08-298-4/+20
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14786 dc483132-0cff-0310-8789-dd5450dbe970
* Ignore a bunch of files generated by building in the source tree, excludingKen Raeburn2002-08-292-0/+16
| | | | | | | those covered by CVSROOT/cvsignore patterns. Static UNIX build only, at the moment, may need updates for other configurations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14783 dc483132-0cff-0310-8789-dd5450dbe970
* Change $(S)=>/ and $(U)=>.. globallyKen Raeburn2002-08-238-4/+20
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14761 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in ($(HDRS)): Depend on "includes"Ken Raeburn2002-08-222-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14745 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test100): Expect MISSING_KRB5_CONF_PARAMS error nowKen Raeburn2002-08-082-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14691 dc483132-0cff-0310-8789-dd5450dbe970
* * client_init.c (_kadm5_init_any): UseTom Yu2002-07-312-1/+7
| | | | | | | KADM5_MISSING_KRB5_CONF_PARAMS in order to be less confusing to someone running kadmin rather than kadmin.local. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14677 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_err.et: Add KADM5_MISSING_KRB5_CONF_PARAMS, indicating aTom Yu2002-07-312-1/+9
| | | | | | | | problem with krb5.conf. This prevents confusing users who look for kdc.conf trouble rather than krb5.conf trouble, which is what they should be looking at on a kadm5 client. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14676 dc483132-0cff-0310-8789-dd5450dbe970
* remove dependence on libdyn; open-code the array manipulationKen Raeburn2002-07-173-33/+74
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14658 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_EXPDEPS, SHLIB_EXPLIBS): Drop references to libdynKen Raeburn2002-07-172-3/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14657 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2002-06-153-167/+160
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14522 dc483132-0cff-0310-8789-dd5450dbe970
* * get_admhst.c: DeletedKen Raeburn2002-06-042-89/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14472 dc483132-0cff-0310-8789-dd5450dbe970
* shlib version number updates from 1.2.x branchKen Raeburn2002-03-074-2/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14233 dc483132-0cff-0310-8789-dd5450dbe970
* 2002-03-02 Sam Hartman <hartmans@mit.edu>Sam Hartman2002-03-032-25/+31
| | | | | | | | | | * server_acl.c (acl_find_entry): Patch from sxw@sxw.org.uk: patch to correct handling of ACL targets. Previous patch from Matt Crawford seems to only work for * targets where it ignores the restrictions. This patch seems to work for all the semantics described in MATt's original message, at least as far as I tested. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14214 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: For test 101 failure, change port number 1 -Ezra Peisach2001-11-272-1/+7
| | | | | | | which is used by tcpmux under Irix, to 4 - which is unassigned by IANA. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14021 dc483132-0cff-0310-8789-dd5450dbe970
* Allow rc4 to be used for kadminSam Hartman2001-11-072-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13961 dc483132-0cff-0310-8789-dd5450dbe970
* * alt_prof.c (krb5_aprof_get_boolean): Return krb5_boolean *Ezra Peisach2001-11-052-1/+6
| | | | | | instead of int *. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13938 dc483132-0cff-0310-8789-dd5450dbe970