| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
| |
authentication. Unfortunately, this breaks proxy tickets (and
renewable tickets continue to be broken if BACKWARD_BITMASK_COMPAT is
defined; nothing can be done by this.) Sites should only define
BACKWARD_BITMASK_COMPAT if they have an installed base of broken
implementations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5431 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(the definition was missing entirely then)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5424 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
structures around, instead of using structure assignments. (Which
aren't guaranteed to work on some broken compilers.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5423 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5422 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
it doesn't #include krbasn1.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5409 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5407 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to create the service principal from the service and
hostname pair. This allows for the host cannoncialization
to work correctly.
mk_req_ext.c (krb5_mk_req_extended): Revamp checksum handling
code so that no checksum is performed in in_data is NULL,
and the special case handing of cksumtype == 0x8003 for
the GSSAPI library is handled correctly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5406 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5405 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SIZEOF_LONG, so we don't need to depend on getting this
information from include/krb5/autoconf.h
gssapi.h: Removed dependence on krb5 include files.
gssapiP_generic.h: We need to include k5-config in order to get
Windows specific hackery. Somewhat of a wart, but this is a
gssapi internal header file, so the rest of the world doesn't
have to see this.
util_token.c: Define VALID_INT, instead of relying on this being
defined by krb5.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5388 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5387 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
accept bit strings which are less 32 bits long.
(RFC-1510 makes no guarantee that the length of the bit
string must be 32 bits long; the old code required that
the length of the bit string must be exactly 32 bits.)
Flip the bits with respect to a 32-bit boundary, since
that's what the old ASN.1 glue code did. (The values in
fieldbits.h are encoded backwards, for no good reason.)
If BACKWARDS_BITMASK_COMPAT is defined, then only flip the
bits if the high 16 bits are clear and there are some bits set
in the low 16 bits. This preserves interoperabilty with
the old beta 4 distribution, which sent the bit string
without flipping them around.
asn1_k_encode.c (asn1_encode_krb5_flags): Flip the bits with
respect to a 32-bit boundary, since that's what the
old ASN.1 glue code did. (The values in fieldbits.h
are encoded backwards, for no good reason.)
krb_asn1.h: #define BACKWARDS_BITMASK_COMPAT. Add extern
declaration for asn1_swbits, which is needed for the
bit reversing code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5380 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
variable removed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5378 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5377 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
USE_DBM_LNAME isn't defined.
hst_realm.c (krb5_get_host_realm): Eliminate memory leak in the
unlikely case that gethostname fails.
If the krb.realms file isn't available, use the default
realm of the host.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5367 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* copy_princ.c (krb5_copy_principal): Fix bug where
krb5_copy_principal can fail if it is asked to copy a
principal with a zero-length component on a system where
malloc(0) returns null.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5366 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5362 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
releases....
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5359 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
into Makefile.in so that the Windows port can pick up the
line (since it doesn't use configure). Instead, change
the name of target which causes the subdirectories to be
built under Unix, and make that a dependency for all-unix.
Gross, but this should fix things for both DOS and Windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5356 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5355 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
o removed INTERFACE from non-api functions
o add FAR to pointers visible to the world
o made the tests for __STDC__ also check for _WINDOWS
o creates GSSAPI.DLL & GSSAPI.LIB as per spec.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5354 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
get_lenfield_body, asn1_decode_ticket): Use the taglength to
determine whether or not the indefinite encoding was used, and
if so skip over the termination flag bytes in the ASN.1
stream.
asn1buf.c (asn1buf_imbed, asn1buf_remains): Make changes to allow for
indefinite encodings. asn1buf_remains() is now only used for
decoding structures and arrays (i.e., asn.1 constructs which
terminate indefinite encodings with two zero octets.
[ Note these fixes to support indefinite encoding aren't
terribly clean; some invalid encodings may be accepted when they
should not be. This should be looked at in more detail later.]
asn1_get.c (asn1_get_tag): Inline original asn1buf_remains() code,
since asn1_get_tag doesn't use asn1buf_remains in the context of
a structure or an array.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5353 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5345 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(note, these changes haven't yet been tested on the PC which were
failing so no guarantee that they fully work):
a) GUI to cns improved so that you don't need a resize for the widgets to
align properly, and so the interaction of typing: "username cr password
cr" is all you need to do to get you a ticket.
b) cns uses krb5_us_gettimeofday instead of krb5_timeofday because the
former is more accurate and handles timezones. Probably should make
the latter just call the former.
c) Added SOCKET_INIT and SOCKET_DESTROY around krb5_sendto_kdc to prevent
some tcp/ip stacks from locking up after 8 uses.
d) Added a new error message and better error handling to give more
precision as to why one PC was getting the error 'Cannot find KDC
for requested realm.'
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5342 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
occurs after the "make all" subdirectories rule.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5333 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5332 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
cache after we're done expunging it.
* rc_io.c (krb5_rc_io_move): Make duplicate copies of the filename
and the file descriptor (via malloc/strcpy and dup), so
that the old rc_io object can be cleanly closed without
affecting the new rc_io object.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5327 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* hst_realm.c (krb5_get_host_realm): Don't indent #ifdef's!
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5326 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
VPATH to have separate build directories. (See comments in the
Makefile.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5324 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5323 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
leak.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5317 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5315 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
FIXME, this needs to find the Preferences folder and use that.
FIXME, shouldn't be conditioned on HAVE_MACSOCK_H.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5308 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
windows ini files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5307 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5306 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
* getuid.c: Simple getuid() to fake out single-user systems.
* strcasecmp.c: Remove duplicated <sys/types.h> and u_char.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5300 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* macsock.c: Add fake socket support routines for MacTCP.
* Makefile.in (OBJS, SRCS): Add DNR and macsock.
* ccdefname.c: On Mac, default cred cache is "STDIO:krb5cc" for now.
FIXME, this needs to find the Preferences folder and use that.
FIXME, shouldn't be conditioned on HAVE_MACSOCK_H.
* gmt_mktime.c: Use HAVE_SYS_TYPES_H.
* krbfileio.c: Remove <sys/types.h>.
* localaddr.c, sendto_kdc.c: Convert to more generic socket
support. Use closesocket instead of close, SOCKET_ERRNO rather
than errno, SOCKET rather than int, etc.
* localaddr.c: Use getmyipaddr() from macsock.c, if on Mac.
Add FIXME for multiple local addresses.
* lock_file.c: Provide a dummy version for MacOS.
* read_pwd.c (ECHO_PASSWORD): Add #ifdef's to avoid all the ioctls
and other stuff that turn off echoing. This is useful for debugging
on MacOS. FIXME: ECHO_PASSWORD needs to be added to configure.in.
* ustime.c: Bring in Mac-specific time-and-timezone code. It
probably isn't hooked up correctly, yet.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5299 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5298 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to build the error tables on Unix before a Mac build.
(all-mac): Don't build $(HDRS) on Mac.
(unixmac): Build `includes'.
(clean-mac): Add.
(includes, clean, .SUFFIXES, .et.h, .et.c): Add, to make it
possible to run `make -f Makefile.in unixmac' successfully.
* configure.in (ASN1_{HDRS,OBJS,SRCS, BOGUS): Remove, unused.
(CopyHeader rules): Remove, they're now in Makefile.in.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5297 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5296 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
* configure.in (LinkFile's): Put `./' on libraries to ease Mac
translation.
(AppendRule all-unix): Rename from AppendRule all.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5295 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* f_cbc.c, f_cksum.c, f_pcbc.c: Replace individual casts with
simpler solution.
* f_tables.h: Insert debugging code, and circumvention for MPW
compiler bug.
* key_sched.c: Remove ancient (microvax??!) comments, and dup
prototype.
* verify.c: Small hack for MS-Windows scrolling. Fix spelling.
"register x" -> "register int x".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5288 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
Remove explicit includes of socket files.
* locate_kdc.c: Remove <sys/types.h> and "os-proto.h".
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5276 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(getmyipaddr): Add for use in K5.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5275 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5274 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* auth_con.c: Default cksumtype is now CKSUMTYPE_RSA_MD4_DES.
* auth_con.c: Added krb5_auth_con_setuseruserkey(),
krb5_auth_con_getkey(),
krb5_auth_con_getremotesubkey(),
krb5_auth_con_getauthenticator(),
krb5_auth_con_getremoteseqnumber(),
krb5_auth_con_initivector().
* auth_con.c: Fixed krb5_auth_con_getlocalsubkey() to check for
a valid local_subkey before calling krb5_copy_keyblock().
* auth_con.h: Fixed some comments.
* mk_req_ext.c (krb5_mk_req_extended()): Always pass in a seed
(the keyblock contents) to krb5_calculate_checksum()
* rd_rep.c (krb5_rd_rep()): Use appropriate key to decode reply.
* rd_safe.c (krb5_rd_safe()): Don't pass checksum to
krb5_rd_safe_basic(), it's unnecessary.
* compat_recv.c (krb5_compat_recvauth()):
* mk_rep.c (krb5_mk_rep()):
* rd_req.c (krb5_rd_req()):
* rd_req_dec.c (krb5_rd_req_decode()):
* recvauth.c (krb5_recvauth()):
Added a krb5_auth_context argument and eliminated many of
the other arguments because they are included in the
krb5_auth_context structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5265 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
and krb5_mk_rep().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5264 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5249 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
reference to fvno_bytes)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5248 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
automatic aggregate initialization, so fixed scc_fvno usage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5247 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
asn1_decode_generaltime() so that compilers like Ultrix cc that
don't support prototypes within function bodies don't break
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5246 dc483132-0cff-0310-8789-dd5450dbe970
|