summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* This should be all that remains of the 1-2-2-branch merge; someTom Yu2003-01-132-191/+180
| | | | | | | | | | | additional sanity-checking of merge needed though. * krb5_32.def: Merge from 1-2-2-branch. ticket: 1177 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15117 dc483132-0cff-0310-8789-dd5450dbe970
* kadm5_get_either leaks memoryEzra Peisach2003-01-122-0/+8
| | | | | | | | | * svr_iters.c (kadm5_get_either): For POSIX_REGEXPS (i.e. regcomp), call regfree() to cleanup memory. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15116 dc483132-0cff-0310-8789-dd5450dbe970
* Memory leak in krb5_send_tgs()Ezra Peisach2003-01-122-0/+6
| | | | | | | | * send_tgs.c (krb5_send_tgs): Free memory leak of TGS_REQ. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15115 dc483132-0cff-0310-8789-dd5450dbe970
* * svc_auth_gssapi.c (_svcauth_gssapi_unset_names): If invoked moreEzra Peisach2003-01-123-1/+13
| | | | | | | | | than once, do not double free memory. * clnt_perror.c (clnt_sperror): Do not write past end of allocated buffer. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15114 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.h, replay.c, main.c: Pass global krb5_context toEzra Peisach2003-01-124-7/+13
| | | | | | | kdc_free_lookaside() instead of per realm one - which has been freed by time invoked. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15113 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc5_hammer.c (verify_cs_pair): Use krb5_free_creds() instead ofEzra Peisach2003-01-122-2/+7
| | | | | | krb5_free_cred_contents() to cleanup memory leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15112 dc483132-0cff-0310-8789-dd5450dbe970
* Search for ar, ranlib, install in KRB5_BUILD_LIBRARY* macros rather thanKen Raeburn2003-01-1029-73/+48
| | | | | | explicitly in directories using those macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15111 dc483132-0cff-0310-8789-dd5450dbe970
* Use passwd entry for ~ expansion if $HOME isn't set.Ken Raeburn2003-01-103-20/+43
| | | | | | | | | Also fix a minor logic bug in checking file access. ticket: 1237 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15110 dc483132-0cff-0310-8789-dd5450dbe970
* * server.c: Include port-sockets.hKen Raeburn2003-01-102-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15109 dc483132-0cff-0310-8789-dd5450dbe970
* Move socklen_t and sockaddr_storage definitions to port-sockets.hKen Raeburn2003-01-103-17/+32
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15108 dc483132-0cff-0310-8789-dd5450dbe970
* Use markers in Makefile.in rather than rules in configure.in to indicate whenKen Raeburn2003-01-10110-182/+458
| | | | | | | | to use the lib.in and libobj.in makefile fragments. Pushing this per-directory info into Makefile.in will make it a little easier to work on combining configure scripts for multiple directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
* Patch to get new service tickets in preference to using expiredSam Hartman2003-01-102-1/+15
| | | | | | | | service tickets in krb5_get_credentials. Ticket: 1260 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15106 dc483132-0cff-0310-8789-dd5450dbe970
* Use socklen_t when passing address to socket functions.Ken Raeburn2003-01-1014-13/+55
| | | | | | Fixes compilation warnings on AIX 4.3.3. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15105 dc483132-0cff-0310-8789-dd5450dbe970
* AIX 4.3.3 getaddrinfo() is broken in a slightly different way than I thoughtKen Raeburn2003-01-092-7/+144
| | | | | | | | | | | * fake-addrinfo.h (getaddrinfo) [_AIX]: Always overwrite sa_family and sa_len fields, since sa_family at least may be non-zero *and* wrong. (protoname, socktypename, familyname, debug_dump_getaddrinfo_args, debug_dump_error, debug_dump_error, debug_dump_addrinfos) [DEBUG_ADDRINFO]: New debugging functions. (fake_getaddrinfo, getaddrinfo) [DEBUG_ADDRINFO]: Use them. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15104 dc483132-0cff-0310-8789-dd5450dbe970
* Between the 1.1 and 1.2 releases of Kerberos, the gss-sample protocolSam Hartman2003-01-094-30/+69
| | | | | | | | | | | | | | | changed. People seem to use this sample for interop testing, so support for the old protocol is needed. This commit adds a -v1 flag to the gss-client that will use the old protocol. The server does not yet support the old protocol, so the ticket remains open. Ticket: 881 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15103 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (DEFINES): New variable. Define HAS_STDARG for Tcl headersKen Raeburn2003-01-092-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15102 dc483132-0cff-0310-8789-dd5450dbe970
* Try to do atomic file swap on UNIX when updating profileKen Raeburn2003-01-092-3/+34
| | | | | | | | | | * prof_file.c (make_hard_link): New function. (profile_flush_file_data): Use it to attempt a safe profile file replacement. ticket: 1301 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15101 dc483132-0cff-0310-8789-dd5450dbe970
* Support \r as additional line separator on Mac OS XKen Raeburn2003-01-093-3/+60
| | | | | | | | | | | | * prof_parse.c (profile_parse_file) [PROFILE_SUPPORTS_FOREIGN_NEWLINES]: Look for \r and treat it as a line break. * prof_int.h: Don't include prof_err.h. (PROFILE_SUPPORTS_FOREIGN_NEWLINES) [macintosh]: Define new macro. ticket: 1237 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15100 dc483132-0cff-0310-8789-dd5450dbe970
* Previously fwd_tgt_creds required either that the hostname be passedSam Hartman2003-01-082-14/+25
| | | | | | | | | | | in or that the principal be a host-based service. This means you cannot for example forward tickets to a GSSAPI user-based service. The requirement to get the hostname is only needed in cases where addressless tickets are not used. So when addressless tickets are used, do not require the hostname. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15099 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (freeaddrinfo): Back out 1/3/03 change. ANSIEzra Peisach2003-01-082-2/+6
| | | | | | does not require it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15098 dc483132-0cff-0310-8789-dd5450dbe970
* 2003-01-08 Sam Hartman <hartmans@mit.edu>Sam Hartman2003-01-082-2/+7
| | | | | | | * krb5.hin : Move KRB5_CALLCONV specifier for krb5_mk_req_checksum_func to right place git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15097 dc483132-0cff-0310-8789-dd5450dbe970
* More const for ops tablesKen Raeburn2003-01-085-6/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15096 dc483132-0cff-0310-8789-dd5450dbe970
* * sendto_kdc.c (state_strings): Now constKen Raeburn2003-01-082-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15095 dc483132-0cff-0310-8789-dd5450dbe970
* More const for ops tablesKen Raeburn2003-01-087-7/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15094 dc483132-0cff-0310-8789-dd5450dbe970
* * appdefault.c (conf_yes, conf_no): Now constKen Raeburn2003-01-082-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15093 dc483132-0cff-0310-8789-dd5450dbe970
* Make ccache and rcache ops tables constKen Raeburn2003-01-088-11/+29
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15092 dc483132-0cff-0310-8789-dd5450dbe970
* For new encryption types and for RC4, encrypt the krb_cred message inSam Hartman2003-01-084-60/+103
| | | | | | | | | | the initial gssapi token if credentials are being delegated. For consistency with Microsoft, we encrypt the credentials using the session key not the subsession key. Ticket: 1054 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15091 dc483132-0cff-0310-8789-dd5450dbe970
* Log entries for Makefile.ov deletionKen Raeburn2003-01-0816-0/+79
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15090 dc483132-0cff-0310-8789-dd5450dbe970
* Nuke some old .orig filesKen Raeburn2003-01-0814-341/+28
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15089 dc483132-0cff-0310-8789-dd5450dbe970
* nuke old OV makefile stuffKen Raeburn2003-01-0729-1827/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15088 dc483132-0cff-0310-8789-dd5450dbe970
* Fix logic error in previous patch that broke gss_init_sec_contextSam Hartman2003-01-072-9/+14
| | | | | | | ticket: 1054 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15087 dc483132-0cff-0310-8789-dd5450dbe970
* Implement krb5_auth_con_set_checksum_func, an API for setting aSam Hartman2003-01-068-1/+76
| | | | | | | | | | callback to specify the data to be checksummed by krb5_mk_req after the auth_context has been set up. Mainly useful for GSSAPI. Ticket: 1054 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15084 dc483132-0cff-0310-8789-dd5450dbe970
* Only system headers should declare errnoSam Hartman2003-01-0530-23/+71
| | | | | | | | | | | | | Many parts of krb5 declare errno in source files using extern int errno. This has not been needed in ANSI C for a long time, and actively breaks modern versions of glibc. So these declarations are removed and errno.h included where necessary. Ticket: new Component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15082 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpd.c (auth_data): Kerberos v4 checksum must be a 32-bit valueKen Raeburn2003-01-032-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15081 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c: On exit, free more allocated memory, including:Ezra Peisach2003-01-036-4/+55
| | | | | | | | | | | | | | realm_tcp_ports data, kdc_realmlist, close the replay cache, and free the lookaside cache. * network.c (FREE_SET_DATA): Do not free a NULL pointer. * replay.c, kdc_util.h: Add kdc_free_lookaside() to clear the lookaside cache on shutdown - to search for memory leaks. * rtest.c (main): Do not allocate or free a NULL pointer. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15080 dc483132-0cff-0310-8789-dd5450dbe970
* * compat_recv.c (accept_a_connection): Test if IPv6 socket returnsEzra Peisach2003-01-032-1/+7
| | | | | | | EAFNOSUPPORT as well as EPROTONOSUPPORT. Irix 6.5.16m returns the former. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15079 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (freeaddrinfo): Do not free a NULL pointerEzra Peisach2003-01-032-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15078 dc483132-0cff-0310-8789-dd5450dbe970
* blahSam Hartman2003-01-011-0/+645
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15077 dc483132-0cff-0310-8789-dd5450dbe970
* * standalone.exp: Only run the keytab to srvtab tests if kerberos 4Ezra Peisach2003-01-012-1/+8
| | | | | | support is compiled into the source tree. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15076 dc483132-0cff-0310-8789-dd5450dbe970
* Add IPv6 support to rshd test/debug code:Ken Raeburn2003-01-014-47/+154
| | | | | | | | | | | | | | | | * compat_recv.c: Include sys/select.h and port-sockets.h. (krb5_compat_recvauth_version): Only attempt krb4 authentication if the source address is an IPv4 one. (accept_a_connection): New function, derived from old krshd.c. Listen on IPv6 as well as IPv4, if possible. * krshd.c (main): Call accept_a_connection. Change fromlen to a socklen_t. (doit): Initialize s. Change length passed to getsockname to a socklen_t. (recvauth): Change len to socklen_t. Cast peer IPv4 address before calling krb5_compat_recvauth_version. * defines.h: Include port-sockets.h. (accept_a_connection): Declare. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15075 dc483132-0cff-0310-8789-dd5450dbe970
* Remove files that haven't been used since 1995Ken Raeburn2003-01-014-219/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15074 dc483132-0cff-0310-8789-dd5450dbe970
* Merge some Mac-specific changes from meeroh's branch:Ken Raeburn2002-12-317-115/+176
| | | | | | | | | | | | | | | | | | | | | | | | * profile.hin: Don't test MACINTOSH any more. On Mac OS X, include TargetConditionals.h, set some pragmas, define COPY_RESOURCE_FORK, and error out if TARGET_RT_MAC_CFM is defined; don't set the old m68k CFM pragmas. Always use PROFILE_USES_PATHS code, don't test or define it. (FSp_profile_init, FSp_profile_init_path): Declare, on Mac OS X. * prof_int.h (NO_SYS_TYPES_H, NO_SYS_STAT_H) [macintosh]: Don't define these. * prof_file.c: Always inclued sys/types.h and sys/stat.h. (GetMacOSTempFilespec): Deleted. (profile_flush_file_data) [COPY_RESOURCE_FORK]: Copy Mac resource fork from old file to new before renaming. (rw_access, profile_update_file_data, profile_flush_file_data, profile_free_file_data): Assume PROFILE_USES_PATHS, don't test. * prof_init.c (profile_ser_size, profile_ser_externalize, profile_ser_internalize): Likewise. (FSp_profile_init, FSp_profile_init_path): Define, on MacOS X. * profile.exp: Add FSp_* functions. * prof_file.c (r_access): New function. (profile_open_file): Use it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15073 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c (process_v4): Use a temporary variable for the current timeKen Raeburn2002-12-302-1/+9
| | | | | | instead of an incorrect pointer cast. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15072 dc483132-0cff-0310-8789-dd5450dbe970
* * gss-misc.c (send_token, recv_token): Open-code the math to send and receiveKen Raeburn2002-12-302-5/+21
| | | | | | | the length as four bytes in network order, rather than using the first four bytes of a size_t. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15071 dc483132-0cff-0310-8789-dd5450dbe970
* Replace dependencies on generated krb524 and krb4 headers withTom Yu2002-12-2315-156/+180
| | | | | | | | | variables, to allow correct behavior when krb4 is disabled. ticket: 1276 owner: tlyu git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15070 dc483132-0cff-0310-8789-dd5450dbe970
* * setup_mkey.c (krb5_db_setup_mkey_name): Use size_t instead ofEzra Peisach2002-12-232-2/+7
| | | | | | int for lengths. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15069 dc483132-0cff-0310-8789-dd5450dbe970
* * asn1_k_decode.c (asn1_decode_sam_challenge_2_body): AddEzra Peisach2002-12-232-3/+12
| | | | | | | unused_var declaration to cleanup warnings. Signed/unsigned fix as well. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15068 dc483132-0cff-0310-8789-dd5450dbe970
* * t_kerb.c: Include string.h for strcmp prototypeEzra Peisach2002-12-232-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15067 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c: Cast return from prof_mutex_lock andEzra Peisach2002-12-232-7/+13
| | | | | | | prof_mutex_unlock to void to avoid warnings of code with no side effects. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15066 dc483132-0cff-0310-8789-dd5450dbe970
* Cleanup unusedEzra Peisach2002-12-239-146/+98
| | | | | | | variables. Signed vs unsigned cleanup. Ensure variables set before use. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15065 dc483132-0cff-0310-8789-dd5450dbe970