summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix SRCS definition so that it doesn't fool the Macintosh macfiles.shTheodore Tso1996-03-202-2/+9
| | | | | | Makefile generation script. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7682 dc483132-0cff-0310-8789-dd5450dbe970
* macfiles.sh: Improved matching of the SRCS declaration. It must notTheodore Tso1996-03-203-4/+12
| | | | | | | | be commented out; it must start on the first column of the line. Makefile.tmpl (KH): Fix typos in Dan's original template. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7681 dc483132-0cff-0310-8789-dd5450dbe970
* Add kdc_preauth.cEzra Peisach1996-03-201-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7680 dc483132-0cff-0310-8789-dd5450dbe970
* Remove no longer relevant ksu.1Ezra Peisach1996-03-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7679 dc483132-0cff-0310-8789-dd5450dbe970
* * des_crc.c (mit_des_crc_decrypt_func): Add const to pointerEzra Peisach1996-03-203-1/+9
| | | | | | | | | cast for suncc warning. Update .Saintize as well to reflect reality git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7678 dc483132-0cff-0310-8789-dd5450dbe970
* * new_rn_key.c (mit_des_generate_random_block): Add const keywrodEzra Peisach1996-03-203-2/+15
| | | | | | to cast for suncc warning. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7677 dc483132-0cff-0310-8789-dd5450dbe970
* ustime.c was renamed to c_ustime.cEzra Peisach1996-03-201-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7676 dc483132-0cff-0310-8789-dd5450dbe970
* Add keytab.cEzra Peisach1996-03-201-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7675 dc483132-0cff-0310-8789-dd5450dbe970
* Add new .Sanitize fileEzra Peisach1996-03-201-0/+71
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7674 dc483132-0cff-0310-8789-dd5450dbe970
* Synchronize .Sanitize with current realityEzra Peisach1996-03-203-5/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7673 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c (ruserok): declare the function as taking const char *Richard Basch1996-03-202-2/+7
| | | | | | instead of char * (Solaris 2.5 refuses to compile it, otherwise). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7672 dc483132-0cff-0310-8789-dd5450dbe970
* * conv_creds.c (krb524_convert_creds_plain):Richard Basch1996-03-202-1/+10
| | | | | | | if the v5 lifetime is greater than the max v4 lifetime, use the max v4 lifetime (0xff), rather than masking it with 0xff. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7671 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_funcs.c: changed all references of des-cbc-md5 to des-cbc-crcRichard Basch1996-03-202-14/+21
| | | | | | (which is what v4 really uses); also, fixed uninitialized variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7670 dc483132-0cff-0310-8789-dd5450dbe970
* * ktutil_funcs.c (ktutil_write_srvtab): use any type of des keyRichard Basch1996-03-202-28/+37
| | | | | | in the keytab to create a v4 srvtab git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7669 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_edit.c (extract_v4_srvtab): do not test to make sure weRichard Basch1996-03-203-86/+47
| | | | | | | | | | | | fetched a key of enctype 1 (des-cbc-crc), since we may have gotten another des key from the database, which is just as useful in a v4 srvtab * dumpv4.c (dump_v4_iterator): use krb5_524_conv_principal to do the v5 to v4 principal translation, instead of having yet another hard-coded table. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7668 dc483132-0cff-0310-8789-dd5450dbe970
* * tf_util.c (tf_get_cred): Issue date is written out as a long,Ezra Peisach1996-03-192-1/+8
| | | | | | | | | | | | read back in as same. I have kept the size as a long to be compatible with the Cygnus V4 distribution. The problem was introduced when we changed the include/kerberosIV structures to use 32 bit ints for timestamps. So, under OSF/1, tf_util would write out a 64 bit issue date, and then try reading back in a 32 bit one. Since Cygnus uses sizeof(long) we will too. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7667 dc483132-0cff-0310-8789-dd5450dbe970
* Put back in the encrypted telnet testsEzra Peisach1996-03-192-62/+66
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7666 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add KRB5_RUN_FLAGSEzra Peisach1996-03-1918-28/+76
| | | | | | * Makefile.in: Use the run flags. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7665 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (KRB5_RUN_FLAGS): Allows for setting of proper pathsEzra Peisach1996-03-193-3/+57
| | | | | | | | | for executing programs in the build tree with proper overriding of potentially installed libraries. * configure.in: Setup for KRB5_RUN_FLAGS git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7664 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags which turn on the encryption optionTheodore Tso1996-03-193-3/+51
| | | | | | | | telnetd.c (getterminaltype): If the authentication option which was negotiated requires that encryption be turned on, then enforce this here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7663 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags to turn on the encryption optionTheodore Tso1996-03-197-10/+102
| | | | | | | | | | | | | | | | | | | | | | | | | authenc.c (telnet_spin): Implemented the telnet spin function, which works by calling the Scheduler with the tty_lockout flag set. main.c (main): If the -x option is given, set the autologin, wantencryption, and auth_enable_encrypt flag. They enable authentication, enforcement of the encryption option, and a flag to the auth layer to negotiate authentication with mandatory encryption option. telnet.c (telnet): If the wantencryption flag is set (because the user has given the -x option, then we enforce that encryption must be turned on. The user will not be able to type to the network stream until encryption is enabled, and if encryption is refused, the client will print an error message. (Scheduler): If the tty_lockout flag is set, then don't process keyboard read events. This prevents the user from typing over the network until encryption is enabled. utilities.c (printsub): Added print support for the authentication must-encrypt option. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7662 dc483132-0cff-0310-8789-dd5450dbe970
* Mon Mar 18 20:56:37 1996 Theodore Y. Ts'o <tytso@dcl>Theodore Tso1996-03-197-113/+246
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * kerberos5.c (kerberos5_send): Send in as input the authentication type pair (ap->type, ap->way) to be checksumed in the authenticator. (kerberos5_is): If the checksum is present in the authenticator, then validate the authentication type pair against the checksum. (kerberos5_reply): If we didn't do mutual authentication, and we receive a KRB_ACCEPT, then stash away the session key anyway. This way we have a chance of doing encryption even if mutual authentication wasn't done. * encrypt.c (EncryptStartInput, EncryptStartOutput): Added conditional around printf so that these two functions can be called by the server. (encrypt_is_encrypting): New function which returns true only if both sides of the telnet stream is encrypted. Fri Mar 15 18:19:44 1996 Theodore Y. Ts'o <tytso@dcl> * auth.c: Added new authentication scheme for Krb5 mutual authentication with mandatory encryption. (auth_send, auth_send_retry): Split auth_send() so that the functionality done by auth_send_retry() is separate. This avoids a really dodgy pointer comparison which was caused by auth_send() being used for two purposes. If the client has not requested encryption, then don't use the authentication systems which require encryption. (auth_must_encrypt): New function which returns whether or not encryption must be negotiated. * auth-proto.h: Added prototype for new option auth_must_encrypt(). * Makefile.in (ENCRYPTION, DES_ENCRYPTION): Added defines to turn on encryption and des encryption. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7661 dc483132-0cff-0310-8789-dd5450dbe970
* Use AC_HEADER_STDARG and use that test to set STDARG.Ezra Peisach1996-03-199-5/+21
| | | | | | | The old test assumed that either STDARG was defined or __STDC__ - which is not sufficient. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7660 dc483132-0cff-0310-8789-dd5450dbe970
* Back out last change and use a cast to avoid warnings.Ezra Peisach1996-03-192-4/+6
| | | | | | | Richard has indicated that come compilers get upset if you try to reassign a const char *. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7659 dc483132-0cff-0310-8789-dd5450dbe970
* * sn2princ.c (krb5_sname_to_principal): Do not assign a const char *Ezra Peisach1996-03-182-2/+7
| | | | | | to a non-const char *. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7658 dc483132-0cff-0310-8789-dd5450dbe970
* Do not try to reassign "const" variablesRichard Basch1996-03-182-11/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7657 dc483132-0cff-0310-8789-dd5450dbe970
* detect kadmin failures that are *really* kdc failuresMark Eichin1996-03-182-1/+56
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7656 dc483132-0cff-0310-8789-dd5450dbe970
* changelogs entries from cygnus changesMark Eichin1996-03-184-2/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7655 dc483132-0cff-0310-8789-dd5450dbe970
* malloc the new length, not the old, esp. since we just check that theMark Eichin1996-03-181-1/+1
| | | | | | old length was zero git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7654 dc483132-0cff-0310-8789-dd5450dbe970
* fixes ticket-forwarding crashes on linux..Mark Eichin1996-03-183-3/+13
| | | | | | | | | * copy_addrs.c (krb5_copy_addr): make non-static so we can use it in mk_cred. * mk_cred.c (krb5_mk_ncred_basic): copy local_addr and remote_addr instead of just aliasing them, so we can safely free them ourselves. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7653 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Change WITH_KDB_DB to USE_KDB5_LIBRARIES and addEzra Peisach1996-03-183-11/+14
| | | | | | | | | KRB5_LIBRARIES. * Makefile.in: Use libraries as specified by configure. Set LD_LIBRARY_PATH for tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7652 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Add USE_ANAME and KRB5_LIBRARIESEzra Peisach1996-03-183-11/+14
| | | | | | Makefile.in: Change to properly use the libraries as specified by configure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7651 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Add USE_ANAME and add proper aclocal.m4 functions to properlyEzra Peisach1996-03-183-12/+20
| | | | | | | | | | tell the makefile which libraries to link to. Makefile.in: Get the list of libraries to link from configure. Removes a dependency on layout of build tree and allows for configure to specify other libraries (as in aname conversion databases..) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7650 dc483132-0cff-0310-8789-dd5450dbe970
* Add USE_ANAME for aname conversion dbEzra Peisach1996-03-182-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7649 dc483132-0cff-0310-8789-dd5450dbe970
* Add USE_ANAME for proper DBEzra Peisach1996-03-183-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7648 dc483132-0cff-0310-8789-dd5450dbe970
* Remove declaration of krb5_kdc_default_optionsEzra Peisach1996-03-162-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7647 dc483132-0cff-0310-8789-dd5450dbe970
* CLEANLIBS - cleanup libkrb5util.a and libgssapi.aEzra Peisach1996-03-152-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7646 dc483132-0cff-0310-8789-dd5450dbe970
* Add new tests for GSS-API ftp programsEzra Peisach1996-03-153-0/+345
| | | | | | | | Note: This is using the ftp/$hostname key. If ftp/ftpd is changed to not allow this service, this file will need to be changed as well. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7645 dc483132-0cff-0310-8789-dd5450dbe970
* Corrected several memory leaks and unreferenced memory access conditionsRichard Basch1996-03-152-7/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7644 dc483132-0cff-0310-8789-dd5450dbe970
* Close the keytab if we opened it, not if the caller opened itRichard Basch1996-03-152-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7643 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpd.c (auth_data): Do not fail if last gss_service is notEzra Peisach1996-03-152-2/+13
| | | | | | | present in keytab. If no services present, return a useful minor error status. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7642 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (V5_OUTPUT_MAKEFILE): nuke some redundant sed rulesTom Yu1996-03-152-3/+6
| | | | | | and also make sure that SRCTOP doesn't get a leading "./". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7641 dc483132-0cff-0310-8789-dd5450dbe970
* Added shadow password supportRichard Basch1996-03-153-0/+30
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7640 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (V5_OUTPUT_MAKEFILE): most seds don't deal withTom Yu1996-03-142-6/+19
| | | | | | | | | "s/\(regex\)*/foo/", so use a loop instead to get rid of extraneous "./" occurences. Do we want srctop and buildtop to have leading "./"s? They do currently. Is this a bug? git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7639 dc483132-0cff-0310-8789-dd5450dbe970
* more specific check for kadmin failure messageMark Eichin1996-03-141-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7638 dc483132-0cff-0310-8789-dd5450dbe970
* include missing entry for earlier fixMark Eichin1996-03-141-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7637 dc483132-0cff-0310-8789-dd5450dbe970
* fix some whitespaceMark Eichin1996-03-141-10/+16
| | | | | | | clear use_master and use_keytab on failures that don't leave the relevant bits initialized git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7636 dc483132-0cff-0310-8789-dd5450dbe970
* nuke RCS cruftMark Eichin1996-03-141-3/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7635 dc483132-0cff-0310-8789-dd5450dbe970
* clean up whitespaceMark Eichin1996-03-141-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7634 dc483132-0cff-0310-8789-dd5450dbe970
* print an error when dsize test failsMark Eichin1996-03-141-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7633 dc483132-0cff-0310-8789-dd5450dbe970