summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* get_in_tkt.c (krb5_get_init_creds): Always initialize local_as_reply to ↵Miro Jurisic2000-03-102-0/+7
| | | | | | avoid returning garbage on error returns git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12097 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Tweak the HPUX shared lib build some more. Don'tTom Yu2000-03-012-4/+8
| | | | | | | use $(INSTALL_PROGRAM) for shared libs, since it strips them! We should fix this at some point. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12096 dc483132-0cff-0310-8789-dd5450dbe970
* Tweak build system to deal somewhat better with HPUX shared libsTom Yu2000-03-015-3/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12095 dc483132-0cff-0310-8789-dd5450dbe970
* * kadmin.c (kadmin_cpw): Initialize ks_tuple to NULLTom Yu2000-03-012-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12094 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c: Move kdc_initialize_rcache() to kdc_util.cTom Yu2000-03-014-56/+59
| | | | | | | | | | | | * kdc_util.c (kdc_initialize_rcache): Move kdc_initialize_rcache() back here since it's needed for rtest to work. process_tgs_req() which is called from rtest needs to call kdc_intiialize_rcache() and we can't very well link rtest with main.o * kdc_preauth.c (verify_sam_response): Ooops. Get rc_lifetime from kdc_util, since it's actually declared there. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12093 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Fix --enable-kdc-replay-cache to actually defaultTom Yu2000-03-012-2/+4
| | | | | | to "yes". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12092 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c (verify_sam_response): Declare and set rc_lifetimeTom Yu2000-03-013-1/+20
| | | | | | | | | for real. * dispatch.c: Include some more net-related headers. (dispatch): Fix ifndef HAVE_INET_NTOP branch. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12091 dc483132-0cff-0310-8789-dd5450dbe970
* new --enable/--disable-kdc-replay-cache configure hooksKen Raeburn2000-02-285-1/+44
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12090 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (com_err.o): Depends on com_err.cKen Raeburn2000-02-282-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12089 dc483132-0cff-0310-8789-dd5450dbe970
* * krlogin.c (main): Don't output debugging messages if debugging wasn't ↵Ken Raeburn2000-02-282-6/+13
| | | | | | turned on git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12088 dc483132-0cff-0310-8789-dd5450dbe970
* * proto_serv.c (proto_serv): For error return,strdup the returnedEzra Peisach2000-02-282-1/+7
| | | | | | value from error_message to maintain its const status. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12087 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Define DES425_LIB and DES425_DEPLIB all the time. WeEzra Peisach2000-02-282-4/+9
| | | | | | | | | build the des425 library all the time and these need to be define for "make check." This is required when compiling --without-krb4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12086 dc483132-0cff-0310-8789-dd5450dbe970
* Updated for 3.0d2Miro Jurisic2000-02-281-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12084 dc483132-0cff-0310-8789-dd5450dbe970
* Update client and server to reflect removal of keepold argument fromTom Yu2000-02-274-22/+22
| | | | | | create_principal_3. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12083 dc483132-0cff-0310-8789-dd5450dbe970
* Remove keepold argument from create_principal_3, since it is ratherTom Yu2000-02-2710-12/+32
| | | | | | | useless. Update library version numbers, xdr functions, etc. accordingly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12082 dc483132-0cff-0310-8789-dd5450dbe970
* * server_acl.c (acl_get_line): Patch from Matt Crawford to permit line ↵Ken Raeburn2000-02-262-13/+40
| | | | | | continuation by ending a line with a backslash git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12081 dc483132-0cff-0310-8789-dd5450dbe970
* * kadmin.c (kadmin_modprinc): Complain if -pw option is given,Ken Raeburn2000-02-262-0/+12
| | | | | | since it's ignored. Patch from Matt Crawford. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12080 dc483132-0cff-0310-8789-dd5450dbe970
* main() returns int - not void. Also cleanup unused variablesEzra Peisach2000-02-264-8/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12079 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (krb5_do_preauth): Check paorder[h] not h for PA_REAL. Fix ↵Ken Raeburn2000-02-262-1/+6
| | | | | | from Matt Crawford git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12077 dc483132-0cff-0310-8789-dd5450dbe970
* fix email addrKen Raeburn2000-02-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12076 dc483132-0cff-0310-8789-dd5450dbe970
* forgot room for null pointer at end of local addr arrayKen Raeburn2000-02-262-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12075 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for sys/sockio.hTom Yu2000-02-253-1/+16
| | | | | | | | | * network.c: Conditionally include sys/sockio.h for SIOC* if necessary. (process_packet): Bracket AF_INET6 branch of a switch statement with an ifdef. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12074 dc483132-0cff-0310-8789-dd5450dbe970
* fix udp_port_fds allocation bug; partial ipv6 supportKen Raeburn2000-02-253-15/+92
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12073 dc483132-0cff-0310-8789-dd5450dbe970
* oops, update changelog for bug fixKen Raeburn2000-02-251-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12072 dc483132-0cff-0310-8789-dd5450dbe970
* Fix off-by-one error in previous code, spotted at the last minute.Ken Raeburn2000-02-251-3/+1
| | | | | | | | | | | This is why things weren't working without the loopback addresses, which showed up last in the list, after the address my client was trying to use, thus hiding the error. (I tried to abort the previous checkin, but cvs went ahead with it despite the "editor session failed" report...hm.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12071 dc483132-0cff-0310-8789-dd5450dbe970
* Patches from Alec Peterson, plus some work of my own, to let a multihomedKen Raeburn2000-02-253-24/+218
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | KDC respond to requests from the same IP address that the requests were sent to. **N.B. This will perform worse in the case of addresses dynamically added and removed after the KDC has started, since it will be incapable of using any new addresses. I'm unclear on why the loopback interface address needs to be included in the list of addresses. Apparently, on NetBSD-current, if it's not, packets sent to other local addresses but over the loopback interface are queued but not received?? Needs further investigation; could just be a NetBSD bug. * configure.in: Invoke KRB5_SOCKADDR_SA_LEN. * network.c: Include <sys/ioctl.h>, <syslog.h>, <net/if.h>. (foreach_localaddr): New function, copied from lib/krb5/os/localaddr.c. Tweaked to not exclude loopback interface. (NEED_SOCKETS): Define before including k5-int.h. (n_sockets): New variable. (setup_port): New function; creates listening udp ports given an address. (setup_network): Call foreach_localaddr to set up listening sockets on each local address, so we can always respond from the receiving address. (listen_and_process): Use n_sockets as upper bound of loop. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12070 dc483132-0cff-0310-8789-dd5450dbe970
* Separate interface address processing from Kerberos-related functions.Ken Raeburn2000-02-252-159/+238
| | | | | | | | | | * localaddr.c (foreach_localaddr): Broken out from old krb5_os_localaddr. Iterates over all active interface addresses, invoking callback functions; knows nothing about Kerberos. (count_addrs, allocate, add_addr): New callback functions. (krb5_os_localaddr): Use the above. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12069 dc483132-0cff-0310-8789-dd5450dbe970
* * t_verify.c: Add "const" to casts in calls to mit_des_cbc_encrypt()Ezra Peisach2000-02-253-5/+12
| | | | | | | * destest.c: Declare zeroblock as krb5_octet * instead of char * as argument to mit_des_cbc_encrypt. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12068 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c (v4_klog): Don't treat the formatted text as a format stringKen Raeburn2000-02-252-1/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12067 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Remove dependency on libdes425 when krb4 supportEzra Peisach2000-02-244-18/+10
| | | | | | | | | is not compiled in. Linking with des425 is not required when krb4 is not compiled in. This cleans up the configure.in as we use WITH_KRB4 already git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12066 dc483132-0cff-0310-8789-dd5450dbe970
* Test for <arpa/inet.h> for possible inet_ntop prototypeEzra Peisach2000-02-244-2/+18
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12065 dc483132-0cff-0310-8789-dd5450dbe970
* * kpasswd.0/changing.exp: Add a sleep to avoid a race with theTom Yu2000-02-232-0/+9
| | | | | | | setup script. If this isn't here, it is possible that the initial change of pol2's password may happen too soon. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12064 dc483132-0cff-0310-8789-dd5450dbe970
* fix for vpath and du4.0 makeKen Raeburn2000-02-224-0/+16
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12063 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (clean-unix): Add clean-libobjsEzra Peisach2000-02-224-2/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12062 dc483132-0cff-0310-8789-dd5450dbe970
* from Bear Giles:Ken Raeburn2000-02-212-2/+5
| | | | | | | * fetch_mkey.c (krb5_db_fetch_mkey): Don't attempt to override type of key read from stash file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12061 dc483132-0cff-0310-8789-dd5450dbe970
* from Bear Giles:Ken Raeburn2000-02-212-13/+22
| | | | | | | | * alt_prof.c (krb5_read_realm_params): Permit realm supported enctypes to be unspecified, letting the KDC produce defaults. Don't look up enctypes at all if an error is to be returned. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12060 dc483132-0cff-0310-8789-dd5450dbe970
* From Bear Giles:Ken Raeburn2000-02-212-0/+12
| | | | | | | * telnetd.c (doit): Provide a more useful error message than "authentication failed" if no authentication was even attempted. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12059 dc483132-0cff-0310-8789-dd5450dbe970
* Volatile decls as needed.Ken Raeburn2000-02-198-28/+53
| | | | | | | Format attribute declarations for gcc. Deleting some unused variables. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12058 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_rpc_svc.c (kadm_1): Update to include new api functionsTom Yu2000-02-193-0/+40
| | | | | | * ovsec_kadmd.c (log_badverf): Update proc_names. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12057 dc483132-0cff-0310-8789-dd5450dbe970
* * keytab.c (add_usage): Update usage message.Tom Yu2000-02-193-20/+197
| | | | | | | | | | | | | | | (kadmin_keytab_add): Update to deal with explicit keysalt lists. (add_principal): Update to deal with explicit keysalt lists. * kadmin.c (kadmin_cpw): Add support for new api. (kadmin_parse_princ_args): Add support for new api, particularly -keepold to keep old keys around and -e to explicitly specify key-salt tuples. (kadmin_addprinc_usage): Update usage accordingly. (kadmin_addprinc): Add support for new api. (kadmin_modprinc): Update to call new parse_princ_args reasonably. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12056 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_rpc_xdr.c (xdr_chpass3_arg):Tom Yu2000-02-192-2/+7
| | | | | | (xdr_chrand3_arg): Fix up calls to xdr_array. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12055 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_cpw.c (krb5_dbe_crk):Tom Yu2000-02-192-0/+13
| | | | | | (krb5_dbe_cpw): Fix to actually save old keys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12054 dc483132-0cff-0310-8789-dd5450dbe970
* * server_stubs.c: Add create_principal3_1, chpass_principal3_1,Tom Yu2000-02-182-0/+256
| | | | | | | setkey_principal3_1, and chrand_principal3_1 to do the obvious things. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12053 dc483132-0cff-0310-8789-dd5450dbe970
* * svc_auth_gssapi.c (_svcauth_gssapi): Don't explicitly freeTom Yu2000-02-189-9/+84
| | | | | | | | | | | | | | | | | | | | | | | | | | | call_arg on error, since svc_getargs should do that now. * svc_udp.c (svcudp_getargs): Free args on xdr decode error to avoid leaks. * svc_tcp.c (svctcp_getargs): Free args on xdr decode error to avoid leaks. * svc_raw.c (svcraw_getargs): Free args on xdr decode error to avoid leaks. * auth_gssapi.c (auth_gssapi_create): Don't explicitly free call_res anymore, since clnt_call should deal now. * clnt_udp.c (clntudp_call): Free stuff on error from xdr_replymsg() to prevent leaking. * clnt_tcp.c (clnttcp_call): Free stuff on error from xdr_replymsg() to avoid leaking. * clnt_raw.c (clntraw_call): Free stuff on error from xdr_replymsg() to avoid leaking. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12052 dc483132-0cff-0310-8789-dd5450dbe970
* * auth_gssapi.c (auth_gssapi_create): Free call_res becauseTom Yu2000-02-174-37/+43
| | | | | | | | | | | | | | | | | | | | | xdr_authgssapi_init_res can potentially allocate memory. Perhaps clnt_call should really deal with this, though. It is not at all clear whether clnt_call or svc_getargs should actually end up freeing allocated memory themselves. * svc_auth_gssapi.c (_svcauth_gssapi): Call gssrpc_xdr_free() if xdr_authgssapi_creds() or xdr_authgssapi_init_arg() fails. * auth_gssapi_misc.c (xdr_authgssapi_creds): (xdr_authgssapi_init_arg): (xdr_authgssapi_init_res): Revert prior change. The caller should be the one dealing. Additionally, it was probably wrong to unconditionally free the object regardless of whether the mode is XDR_DECODE. (auth_gssapi_unwrap_data): Use temp_xdrs rather than in_xdrs to force XDR_FREE operation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12051 dc483132-0cff-0310-8789-dd5450dbe970
* Document that -s is not applicable to Kerberos 4Danilo Almeida2000-02-162-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12050 dc483132-0cff-0310-8789-dd5450dbe970
* * kinit.c: Nicer usage message. Better checking for illegalDanilo Almeida2000-02-163-355/+513
| | | | | | | | | | | | options. Do not output error when doing Kerberos 4 if we will be trying 524 afterwards. Add hooks for future support for specifying the Kerberos 4 cache name. Fix GET_PROGNAME macro to properly return program name under Win32. Re-indent, turning spaces that should be tabs into tabs. * kinit.M: Document new Kerberos 4 kinit behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12049 dc483132-0cff-0310-8789-dd5450dbe970
* * kdestroy.c: Fix GET_PROGNAME macro to properly return programDanilo Almeida2000-02-162-11/+17
| | | | | | | name under Win32. Re-indent, turning spaces that should be tabs into tabs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12048 dc483132-0cff-0310-8789-dd5450dbe970
* * klist.c: Fix GET_PROGNAME macro to properly return program nameDanilo Almeida2000-02-162-28/+34
| | | | | | | under Win32. Re-indent, turning spaces that should be tabs into tabs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12047 dc483132-0cff-0310-8789-dd5450dbe970
* Move include of libtelnet/auth.h earlier to provideEzra Peisach2000-02-162-1/+10
| | | | | | prototype for auth_cmd() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12046 dc483132-0cff-0310-8789-dd5450dbe970