| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
| |
* krlogind.c (recvauth): Don't complain about a subkey sent for KCMDV0.1 if
HEIMDAL_FRIENDLY is defined, just quietly ignore it.
* krshd.c (recvauth): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12646 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* accept_sec_context.c: krb5_gss_accept_sec_context()
It has been determined by Martin Rex that Windows 2000 is incapable
of supporting channel bindings. This caused us to examine the
various RFCs affecting FTP GSSAPI to determine whether or not
channel bindings were a MUST for implementation of the FTP GSSAPI
protocol. It was determined that the channel binding facility as
described in RFC2743 is optional. Therefore, we cannot assume
that all clients or servers will support it. The code was updated
to allow GSS_C_NO_CHANNEL_BINDINGS when specified by either the
client or server to indicate that channel bindings will not be
used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12645 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
* lifetime.c: New file. For the purposes of CMU and AFS
compatibility, this implements the exponential krb4 ticket
lifetimes for lifetime values above 127, in the krb_life_to_time()
and krb_time_to_life() functions. Values 127 and below are still
treated normally.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12644 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb_time_to_life(), as well as the KRB_NEVERDATE constant.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12643 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* locate_kdc.c: krb5_locate_srv_dns()
Ensure that res_search() is called with a query string
that is terminated by a '.' in order to disable the
expansion of dns-search lists.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12642 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* locate_kdc.c: krb5_locate_srv_dns()
Ensure that res_search() is called with a query string
that is terminated by a '.' in order to disable the
expansion of dns-search lists.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12641 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
for MacOS X lib framework support, especially in the *_LIB and
*_LIB_*opt variables.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12640 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
LIBLINKS; previously it was setting LIBLINKS to include $LIBLIST
instead, which is Just Wrong.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12639 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(clean-libs, clean-liblinks): Depend on targets specified in those variables.
(config.status): Depend on shlib.conf.
(all-framework, link-framework, clean-framework, clean-framework-link,
install-framework): New targets, details to be filled in later.
* pre.in (KRB5_LIB_libopt): Renamed from KDB5_LIB.
(KRB5_LIB_frameworkopt): Tentative framework version for Mac OS X, details to
be tuned later.
(KRB5_LIB): Select between them using @LIB_LINK_OPT@.
(KRB5CRYPTO_LIB*, COM_ERR_LIB*, GSS_KRB5_LIB*): Similarly.
(KRB5_BASE_LIBS, GSS_LIBS): Use them.
(KRB4COMPAT_LIBS): Use KRB5_BASE_LIBS.
* shlib.conf: Set LIB_LINK_OPT. Set new EXTRA_* variables for darwin target.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12638 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
EXTRA_LIBLINK_TARGETS, EXTRA_LIBINST_TARGETS set in shlib.conf. Substitute
EXTRA_CLEAN_TARGETS and EXTRA_CLEAN_LINKS.
(KRB5_LIB_PARAMS): Substitute LIB_LINK_OPT.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12637 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
supported, return an error; can't satisfy both TC_SUPPORTED_KTYPES and
TC_MATCH_KTYPE that way. Delete unused arguments CCACHE and OUT_CREDS; fix
callers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12636 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
used.
* Makefile.in: Garbage collect a little. Don't include keytab/*
directories directly on $(LOCAL_SUBDIRS), as keytab/Makefile.in
lists them itself.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12635 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
recursing into it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12634 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
collision with Mac OS X file permission bits manipulation functions of the same name which get included through unistd.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12633 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
are no longer used; this was breaking the build using bison on
HP/UX because some system headers declare structures with members
having all-uppercase field names and bison puts the token name
#define statements in front of the C declarations section in the
output, causing them to be in force while those headers get
#included. There doesn't seem to be much purpose in not just
using character constants, anyway.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12632 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
user to check the log file. Print out an error message as well as logging it
if retrieving the default realm name fails.
* kerberos_v4.c (kerberos_v4): Mask requested-life byte value with 0xff to
avoid sign-extension problems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12631 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
IPv6 support
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12630 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12629 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
of the data stream and not the control stream to krb_mk_priv.
This would result in the occasional time out of bounds error when ftping
to the same machine. (mk_priv and rd_priv have some amusing
negating of timestamps depending on address and port of sockets).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12628 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12627 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
provide a krb4_srvtab stanza (even though we are falling back on
the keytab file) so the tests do not try to access an installed
systems /etc/srvtab file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12626 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
trying to examine the srvtab file for a particular key (which
failes when falling back on the v5 keytab for des3 services).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12625 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
encryption type is a non-raw des3 key, bash its enctype. This
matches kdc/kerberos_v4.c.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12624 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12623 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
index the proper array.
* cmds.c, cmdtab.c, ftp.c, ftp_var.h, getpass.c, glob.c, main.c,
radix.c, ruserpass.c, secure.c, secure.h: Compiler warning
cleanups including providing prototypes, cleanup of assignments in
conditionals, including unistd.h and stdlib.h (if present),
declaring local functions as static.
* Makefile.in: Do not compile pclose.c - the code is not used.
About 600 warnings down....
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12622 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
include a narrow prototype, the flags were being sent OTW as four
bytes instead of one.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12621 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12620 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
incorrect binary as used for the root login in default.exp.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12619 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
too quickly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12618 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
krb524int_krb_create_ticket(), krb524int_krb_cr_tkt_krb5(), and
krb524int_krb_cr_tkt_int(), as well as their definitions, so that
there aren't bare identifiers in the prototypes and so that there
aren't narrow types in the definitions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12617 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12616 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12615 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
compatibility. Set KRBTKFILE environment variable. Add
v4_compatible_enctype() proc to test if krb4 tests are being run
and if the current encryption type being tested is compatible with
V4. Added v4kinit() proc.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12614 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
to runtest if krb4 compatibility is enabled.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12613 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
support is enabled.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12612 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
the start of the cached buffer.
This would only be observed when the client sent the cmdchar.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12611 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
assignments. Dejagnu (June 1999 release) fails overwise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12610 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
negative lr_type field.
* krb5_decode_test.c: Fix enc_kdc_rep_part tests to trully handle
a negative lr_type in a krb5_last_req_entry structure. If
KRB5_GENEROUS_LR_TYPE is defined, do a backwards compatibility
test as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12609 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
as an int32. Handle backwards compatibility if KRB5_GENEROUS_LR_TYPE
is defined.
* krbasn1.h: Define KRB5_GENEROUS_LR_TYPE for compatibility with
one byte negative lr_types which are sent as a positive integer.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12608 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
signed int instead of an unsigned char.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12607 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
before a potential bsd compatible sigmask.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12606 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
USE_SIGPROCMASK is defined and not POSIX_SIGNALS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12605 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
* gssapiP_generic (g_canonicalize_host, g_local_host_name): Delete
declarations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12604 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
prototype.
* ss.h (ss_execute_line) [__STDC__]: Make prototype unconditional.
(ss_quit): Use __SS_PROTO and return void, as with other command functions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12603 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
shadowing global variabls/functions, assignments in conditionals,
declaring local functions static.
* configure.in: Check for mode_t being defined.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12602 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
static, using existing global variables instead of trying to
shadow them, and removing assignments from conditionals.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12601 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
tf_get_pinst(), tf_get_cred() and tf_close() which are all used by
clients.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12600 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
for functions exported prototypes in krb.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12599 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
properly match what is expected by ss library.
* pager.c (ss_pager_create): Cast return from fork to int for use
in switch statement.
* ss.h: Provide full prototype for ss_name(). Add prototypes for
ss_execute_line(), ss_delete_invocation(), ss_add_info_dir(),
ss_delete_info_dir(), ss_abort_subsystem(), ss_get_prompt(),
ss_set_prompt(), ss_add_request_table(),
ss_delete_request_table(), ss_quit().
* ss_internal.h: Made full prototypes for ss_parse(),
ss_page_stdin(), ss_pagre_create(). Add prototypes for
ss_self_identify(), ss_subsystem_name(), ss_subsystem_version(),
ss_unimplemented(). Moved ss_execute_line() to ss.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12598 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
There are still some warnings, but this handles the bulk of them.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12597 dc483132-0cff-0310-8789-dd5450dbe970
|