| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
|
|
| |
Only initialize the credentials cache if credentials were obtained.
This means you won't blow away the old cache if an incorrect password
was entered, and it also allows for the os_context time offset to be
set properly in the credentials cache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7463 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Only store the os_context time offset if it is valid.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7462 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
Store the time offset from the os_context in the credentials cache.
When applications open the credentials cache, they will set the
os_context time offset if kdc_timesync is set and the os_context
time offset has not yet been set.
Note: The time offset is stored during krb5_cc_initialize, so the os_context
should be set prior to this operation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7461 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* secure.c, pclose.c, ruserpass.c, ftp.c: Include stdlib.h if
present for malloc declarations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7453 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
(stderr and ENOMEM needs to be defined)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7452 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7451 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Macintosh. We now can build MPW makefiles which are interpreted by
CodeWarrior.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7445 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Macintosh. We now can build MPW makefiles which are interpreted by
CodeWarrior.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7444 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
This snapshot features a BSD-style copyright notice from Sun. It also
includes the code to parse a configuration file and then dlopen the
proper shared library. Miscellaneous cleanup in the mechglue directory.
Namespace uglieness (like get_mechanism) have been cleaned up, to use
things like __gss_get_mechanism instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7442 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Berkeley hash db is now a separate library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7437 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Better support of alternate db libraries.
Berkeley db is now a separate library
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7436 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Support --program-prefix, --program-suffix, --program-transform
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7435 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Support --program-prefix and --program-suffix
Support different dbm libraries better.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7434 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
is in the tgs enctypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7431 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7430 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
server mode.
* krshd will work in encrypting mode even when the port for stderr is null.
* rcp will work if stdin isn't not a socket, but is a pipe in remote mode
* krshd destroys forwarded credentials properly
* For rsh, the secure_message got moved to the client; if you use a new client
with an old server, you get secure_message twice, but it should be a
useful change long-term.
* Fixed typo in rcp man page.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7423 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
cleaner.
* forward.c: give caller handle to ccache so it can be destroyed.
* krshd: destroy the ccache if it is non-null.
* krlogind: Fix call, but don't destroy cache, as
login.krb5 should do that any year now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7422 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
Renaming locks the target lock file.
If the target lock file doesn't exist, create it.
Check the return value of krb5_dbm_db_set_name and set the
context accordingly if the target didn't exist.
Only unlink the source lock file if one could be computed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7418 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
to fprintf correctly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7417 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
O_CREAT.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7416 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7414 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
make check is useful, gang...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7412 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7411 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
never call fcntl(F_SETOWN)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7410 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
we really really want to avoid encrypting v4 tickets in DES3 keys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7407 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7406 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
TIOCNOTTY (HP/UX 9 for example) don't try to use it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7405 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7404 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
password quality constraints.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7403 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7402 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
to emulate seteuid instead of assuming hpux.
* configure.in: test for seteuid as well; fold some tests into a
single AC_HAVE_FUNCS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7401 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
BERK_DB_DBM.
(do_testing): wrap references as well.
* keytab.c (krb5_ktkdb_get_entry): use KRB5_PROTOTYPE.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7400 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7399 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
number, and sunos doesn't have strtoul (and nothing else in the
tree uses it.)
(add_port): use proper old-style definition.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7398 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
that didn't even compile.
(I tested the binary in the wrong build tree.)
Compiled and tested this time.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7397 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
shows enctypes associated with a key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7396 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7395 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7394 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7393 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
caused by my OOB fix.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7392 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
until I hear a good reason for it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7391 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
tried, but casting from (int *) to (char *) is not the same as casting
from int to char.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7390 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
etypes to ktypes--it's a one to one mapping
now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7389 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7388 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
not just the first one.
Fixed v4 extraction to find the v4 key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7387 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
service key. Use the v5 service key to decrypt the v5 ticket, and
the v4 service key to encrypt the v4 ticket.
* krb524d.c (do_connection): Use a separate v5 and v4 service key
so that if the KDC chooses to encrypt the v5 ticket in something
besides ENCTYPE_DES_CBC_CRC, we don't lose. Also, make sure we
free keyblock contents and tickets on error.
(lookup_service_key): Pass enctype to kdc_get_server_key
(kdc_get_server_key): Only try for v4 salt if the enctype is
DES_CRC. Take enctype as an argument. This creates a problem
if the server key has a normal and v4 salt of ENCTYPE_DES_CBC_CRC
but I can't think of a good answer to this.
* k524init.c (main): Use crc32 not md5.
Wed Jan 24 20:05:47 1996 Sam Hartman <hartmans@tertius.mit.edu>
* krb524d.c (kdc_get_server_key): Try to find a v4 salt type key,
else try any des_crc32 key, else fail.
(do_connection): Lookup a crc32 key not an md5 key.
(init_master): Handle reading kdc profile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7386 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
has non-null enctype. (I.E. implement as documented)
gc_via_tkt.c: If the in_creds.keyblock.enctype !=0 then don't call
send_tgs with a null ktypes paramater; instead, explicitally allow only
increds.keyblock.enctype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7385 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
and in the set of default tgs enctypes.
Now, if matching on keytype, do an exact match, else
use ktype_reasonable (renamed ktype_match) to make
sure the ticket is in the default tgs enctypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7384 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
from configure.in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7380 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
g_exp_sec_context.c, g_imp_sec_context.c, g_rel_buffer.c,
g_rel_cred.c, g_rel_name.c, g_rel_oid_set.c, get_mechanism.c,
get_mtype.c: Include stdlib.h and string.h as needed
* mglueP.h: Add many invocations of NPROTOTYPE and PROTOTYPE to
prevent breakage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7378 dc483132-0cff-0310-8789-dd5450dbe970
|