summaryrefslogtreecommitdiffstats
path: root/src/lib/krb5/krb
Commit message (Collapse)AuthorAgeFilesLines
...
* * get_creds.c (krb5_get_credentials_core): If the supplied enctype is notKen Raeburn2000-08-292-7/+25
| | | | | | | | supported, return an error; can't satisfy both TC_SUPPORTED_KTYPES and TC_MATCH_KTYPE that way. Delete unused arguments CCACHE and OUT_CREDS; fix callers. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12636 dc483132-0cff-0310-8789-dd5450dbe970
* * vfy_increds.c: include int-proto.h for krb5_libdefault_booleanEzra Peisach2000-07-187-2/+35
| | | | | | | | | | | | | | | | | | | prototype. * t_ser.c (ser_eblock_test): ifdef out old eblock serialization test which is no longer called. (see 1999-09-01 ChangeLog) * t_kerb.c: Cast argument to fprintf to long to agree with format string. * t_deltat.c: If MIN is defined, undef before redefined as 60. * str_conv.c: Provide strptime prototype if the system header files fail to provide a prototype. * int-proto.h: Add prototype for krb5_libdefault_boolean() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12555 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2.1 releaseKen Raeburn2000-07-012-0/+16
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12502 dc483132-0cff-0310-8789-dd5450dbe970
* * t_walk_rtree.c (main): Declare as returning intEzra Peisach2000-06-3018-94/+120
| | | | | | | | | | | | | | | | | | | | | * get_in_tkt.c (_krb5_conf_boolean): Declare as taking a const char * * str_conv.c (krb5_timestamp_to_string): Work around gcc's warning that %c format in strftime might return only two digits for the year. * mk_safe.c, rd_rep.c, send_tgs.c: Remove unused goto label. * kdc_rep_dc.c (krb5_kdc_rep_decrypt_proc): Remove code with no effect. * init_ctx.c: Make krb5_brand[] look used. * chpw.c, decode_kdc.c, decrypt_tk.c, enc_helper.c, get_creds.c, get_in_tkt.c, gic_keytab.c, gic_pwd.c, preauth2.c, vfy_increds.c: Add parentheses around assignment used as truth value git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12483 dc483132-0cff-0310-8789-dd5450dbe970
* * conv_princ.c, get_creds.c, get_in_tkt.c, mk_rep.c, parse.c,Ezra Peisach2000-06-297-10/+7
| | | | | | send_tgs.c: Remove unused variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12457 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2 branchKen Raeburn2000-06-2716-153/+477
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
* Check for existance of <memory.h>.Wilfredo Sanchez2000-06-012-0/+7
| | | | | | (from Nathan Neulinger <nneul@umr.edu>) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12332 dc483132-0cff-0310-8789-dd5450dbe970
* Change wsanchez@apple -> tritan@mitWilfredo Sanchez2000-06-011-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12331 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-5-19 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-05-193-2/+11
| | | | | | | | | | | * sendauth.c, fwd_tgt.c: Changed to use krb5int_cc_default. This function supports the Kerberos Login Library and pops up a dialog if the cache does not contain valid tickets. This is used to automatically get a tgt before obtaining service tickets. Note that this should be an internal function because callers don't expect krb5_cc_default to pop up a dialog! (We found this out the hard way :-) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12291 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-05-15 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-05-163-0/+194
| | | | | | | | | | * Added new source file appdefault.c Implements new public functions krb5_appdefault_string krb5_appdefault_boolean git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12261 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-04-28 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-04-282-0/+10
| | | | | | | * gic_pwd.c (krb5_init_creds_password) added code to return to login library if the password is expired (login library handles this error appropriately). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12201 dc483132-0cff-0310-8789-dd5450dbe970
* * vfy_increds.c (krb5_verify_init_creds): appdefault_boolean ->Tom Yu2000-04-082-1/+6
| | | | | | libdefault_boolean; it somehow got missed earlier. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12156 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-04-07 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-04-073-4/+14
| | | | | | | | | | * gic_pwd.c (krb5_get_init_creds_keytab), gic_pwd.c (krb5_get_init_creds_password) when determining whether or not to retry with a "master kdc" do not retry if the return value from the first attempt was KRB5_REALM_CANT_RESOLV. Also, do not overwrite the return code if the return value from the access to the "master kdc" was KRB5_REALM_CANT_RESOLV. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12154 dc483132-0cff-0310-8789-dd5450dbe970
* jaltman@columbia.edu Mar 24, 2000:Jeffrey Altman2000-03-243-28/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | In 1.0.6, the code was altered to provide a fallback mechanism to try the "master" kdc's in case the normal kdc's did not have the most up to date password information. The original implementation had significant conflicts with the use of DNS SRV records. In addition, it often performed a lot of unneeded work. The new code still performs a fallback to the "master" kdc but only does the computation of the "master kdc list" if we are in fact going to attempt to use a master. For DNS SRV we introduce a new _kerberos-master.<proto>.<REALM> record to list the master kdc's and the priorities to be used when contacting a master. This allows for a multi-tiered implementation. --- The other change is local to krb/get_in_tkt.c. In preparation for adding public krb5_appdefault_boolean and krb5_appdefault_string functions, the static functions by that name in get_in_tkt.c are renamed to krb5_libdefault_xxxxx since they currently access the [libdefault] section of the code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12137 dc483132-0cff-0310-8789-dd5450dbe970
* Add krb5_get_prompt_types() functionalityDanilo Almeida2000-03-164-2/+30
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12118 dc483132-0cff-0310-8789-dd5450dbe970
* Fix one of the bugs discovered at Connectathon: etype specified in preauthKen Raeburn2000-03-133-5/+68
| | | | | | data is ignored under get_in_tkt interface. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12104 dc483132-0cff-0310-8789-dd5450dbe970
* Change function prototypes to match the entries in krb5.hin - specificallyEzra Peisach2000-03-129-13/+20
| | | | | | use krb5_const instead of const. Under ultrix they are not the same. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12101 dc483132-0cff-0310-8789-dd5450dbe970
* get_in_tkt.c (krb5_get_init_creds): Always initialize local_as_reply to ↵Miro Jurisic2000-03-102-0/+7
| | | | | | avoid returning garbage on error returns git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12097 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (krb5_do_preauth): Check paorder[h] not h for PA_REAL. Fix ↵Ken Raeburn2000-02-262-1/+6
| | | | | | from Matt Crawford git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12077 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (pa_sam): In send-encrypted-sad mode, check for magic salt lengthKen Raeburn2000-02-162-7/+51
| | | | | | | | and generate a salt from the principal name if found; use the password and salt to generate a key. Provide timestamp if nonce is zero, regardless of preauth mode. (Patch from Chas Williams.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12045 dc483132-0cff-0310-8789-dd5450dbe970
* * gic_pwd.c (krb5_get_as_key_password): If the as_key enctype is already set toKen Raeburn2000-02-073-15/+35
| | | | | | | | | | | | | | the correct type, do continue and ask for the password anyways. (Patch from Chas Williams, PR krb5-libs/730.) * preauth2.c (pa_sam): If no sam_flags were set, return KRB5_PREAUTH_BAD_TYPE, because we don't currently handle that case. * preauth2.c (pa_sam): Remove unused variable use_sam_key. (SAMDATA): Cast first result to int, which is what sprintf needs. (pa_salt): Delete unused variable ret. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12012 dc483132-0cff-0310-8789-dd5450dbe970
* updated some comments (fcusack)Ken Raeburn2000-02-072-6/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12009 dc483132-0cff-0310-8789-dd5450dbe970
* more fcusack changes - rest of first setKen Raeburn2000-02-071-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12006 dc483132-0cff-0310-8789-dd5450dbe970
* Frank Cusack changes, set 1, diffs 1-3 of 4Ken Raeburn2000-02-074-9/+22
| | | | | | | | Rename "sam_passcode" field to "sam_sad". Add data to predicted-sam-response structure, in part to (prepare to) help with replay detection. Fix some memory allocation problems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12005 dc483132-0cff-0310-8789-dd5450dbe970
* * init_ctx.c (get_profile_etype_list): Discard DESONLY changes from 1999-09-01,Ken Raeburn2000-01-272-19/+10
| | | | | | and revert call sites. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11970 dc483132-0cff-0310-8789-dd5450dbe970
* * init_ctx.c (get_profile_etype_list): Report an error if noKen Raeburn1999-12-062-0/+11
| | | | | | recognized enctypes are found in the config file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11949 dc483132-0cff-0310-8789-dd5450dbe970
* merge 1.1 branch, to 12/1/99Ken Raeburn1999-12-0613-398/+2450
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11948 dc483132-0cff-0310-8789-dd5450dbe970
* * t_ref_kerb.out: Fix expected zephyr/zephyr outputKen Raeburn1999-11-032-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11900 dc483132-0cff-0310-8789-dd5450dbe970
* log tritan's changesTom Yu1999-10-261-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11877 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES, LOCAL_INCLUDES suchWilfredo Sanchez1999-10-261-1/+0
| | | | | | | that one can override CFLAGS from the command line without losing CPP search patchs and defines. Some associated Makefile cleanup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11876 dc483132-0cff-0310-8789-dd5450dbe970
* * conv_princ.c (sconv_list): Don't do conversion for "zephyr" principal.Ken Raeburn1999-10-123-17/+15
| | | | | | | | | | (Noticed by Derrick Brashear.) Delete about a dozen duplicate entries. * str_conv.c (dt_output_donly, dt_output_dhms, dt_output_hms, sftime_default_fmt): Replace char arrays with macros, so gcc can do better format-string checking. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11859 dc483132-0cff-0310-8789-dd5450dbe970
* copyright notice updates from 1.1 branchKen Raeburn1999-09-2473-73/+292
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11853 dc483132-0cff-0310-8789-dd5450dbe970
* from 1.1 branch:Ken Raeburn1999-09-017-16/+64
| | | | | | | | | | | | | | | | | | | | | | | | * init_ctx.c (get_profile_etype_list): Update name of the des3 entry in the default etype list. * init_ctx.c (get_profile_etype_list): New argument DESONLY; if set, ignore any ktype values other than NULL, DES_CBC_CRC, and DES_CBC_MD5. (krb5_get_default_in_tkt_ktypes, krb5_get_tgs_ktypes): Set it. (krb5_get_permitted_enctypes): Don't set it. * fwd_tgt.c (krb5_fwd_tgt_creds): Use KRB5_TC_SUPPORTED_KTYPES when calling krb5_cc_retrieve_cred. * gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Ditto. * get_creds.c (krb5_get_credentials_core): Set that flag. (krb5_get_credentials): Check for KRB5_CC_NOT_KTYPE error return. * t_ser.c (main): Disable eblock serialization test, since the code it tests was disabled nearly a year ago. * str_conv.c (krb5_timestamp_to_sfstring): Don't pass extra argument to sprintf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11779 dc483132-0cff-0310-8789-dd5450dbe970
* chpw.c (krb5_mk_chpw_req):Alexandra Ellwood1999-08-101-5/+14
| | | | | | | | Added call to free cipherpw.data. cipherpw.data is allocated by krb5_mk_priv and passed back. Since cipherpw is never passed back, krb5_mk_chpw_req should free it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11648 dc483132-0cff-0310-8789-dd5450dbe970
* 1999-08-10 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood1999-08-101-0/+7
| | | | | | | | | * chpw.c (krb5_mk_chpw_req): Added call to free cipherpw.data. cipherpw.data is allocated by krb5_mk_priv and passed back. Since cipherpw is never passed back, krb5_mk_chpw_req should free it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11647 dc483132-0cff-0310-8789-dd5450dbe970
* Document why krb5_win_ccdll_load is called way early in code.Danilo Almeida1999-08-052-3/+14
| | | | | | | | (It is because we need to have the ccapi stuff loaded before trying to get the OS-specific context initialization where we figure out default cache names and such.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11625 dc483132-0cff-0310-8789-dd5450dbe970
* * init_ctx.c (get_profile_etype_list): Use profile_release_stringDanilo Almeida1999-08-054-18/+34
| | | | | | | | | | | | | | | | to free string allocated by profile_get_string. (krb5_init_context): Use a real context for krb5_win_ccdll_load. * get_in_tkt.c (krb5_appdefault_string): * conv_princ.c (krb5_425_conv_principal): Use profile_free_list to free values allocated by profile_get_values. * get_in_tkt.c (_krb5_conf_boolean, krb5_appdefault_boolean): Rename krb5_conf_boolean to _krb5_conf_boolean to denote that it is not public so that folks outside the libraries won't be tempted to use it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11624 dc483132-0cff-0310-8789-dd5450dbe970
* Intialize out_creds pointer to 0 and then check whether it is 0 beforeDanilo Almeida1999-08-042-4/+12
| | | | | | | trying to dereference it, in case lower-level routine failed to assign a value to it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11619 dc483132-0cff-0310-8789-dd5450dbe970
* Updating changelogJeffrey Altman1999-07-231-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11593 dc483132-0cff-0310-8789-dd5450dbe970
* Rename conf_boolean to krb5_conf_boolean and remove the static designationJeffrey Altman1999-07-231-3/+4
| | | | | | so that the function may be used in other modules. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11585 dc483132-0cff-0310-8789-dd5450dbe970
* * enc_helper.c (krb5_encrypt_helper): NULL out the pointer to theTom Yu1999-06-292-2/+10
| | | | | | | ciphertext if there is an error; this prevents stuff farther up from freeing freed memory. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11531 dc483132-0cff-0310-8789-dd5450dbe970
* * init_ctx.c (krb5_free_context): Set field pointers to NULL after freeingKen Raeburn1999-06-182-5/+19
| | | | | | | targets, in case higher-level code retains pointers into the context structure. From Jeffrey Altman. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11523 dc483132-0cff-0310-8789-dd5450dbe970
* init_ctx.c (krb5_init_context): Pass the context toTheodore Tso1999-05-132-2/+9
| | | | | | | kkrb5_win_ccdll_load so that it can register the FILE ccache type if using ccapi (so that the FILE ccache type will always work). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11440 dc483132-0cff-0310-8789-dd5450dbe970
* Do win32 build in subdirDanilo Almeida1999-05-102-86/+90
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11432 dc483132-0cff-0310-8789-dd5450dbe970
* kfree.c (krb5_free_sam_challenge, krb5_free_sam_challenge_contents,Theodore Tso1999-04-104-23/+154
| | | | | | | | | | | | | | | | | krb5_free_sam_response, krb5_free_sam_response_contents, krb5_free_predicted_sam_response, krb5_free_predicted_sam_response_contents, krb5_free_enc_sam_response_enc, krb5_free_enc_sam_response_enc_contents, krb5_free_pa_enc_ts): Added new functions. Part of patches from [krb5-kdc/662] gic_pwd.c (krb5_get_init_creds_password): Add new argument to calls to the prompter function. Part of patches from [krb5-kdc/662]. preauth2.c (pa_enc_timestamp, pa_sam): Update calls to new prompter function. [krb5-kdc/662]. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11349 dc483132-0cff-0310-8789-dd5450dbe970
* init_ctx.c (krb5_init_context): Call krb5_win_ccdll_load() to load theTheodore Tso1999-03-312-0/+7
| | | | | | krbcc32.dll under windows. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11333 dc483132-0cff-0310-8789-dd5450dbe970
* * sendauth.c (krb5_sendauth): Set credspout to NULL if it'sTom Yu1999-03-092-2/+11
| | | | | | | | | destined to be returned to avoid freeing it. Also, unconditionally free credspout if it's non-NULL so that if someone doesn't pass in a ticket and doesn't give us a non-NULL out_creds, we don't leak it. [krb5-libs/699] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11249 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-12-052-0/+7
| | | | | | to buildtop and thisconfigdir, respectively.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11087 dc483132-0cff-0310-8789-dd5450dbe970
* * str_conv.c: Remove krb5_cksumtype_to_string after mergeTom Yu1998-11-032-27/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11008 dc483132-0cff-0310-8789-dd5450dbe970
* pull up 3des implementation from the marc-3des branchMarc Horowitz1998-10-3034-956/+682
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970