summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove "verify" on make cleanEzra Peisach2009-10-281-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23076 dc483132-0cff-0310-8789-dd5450dbe970
* Add variable DB_VERSION to Makefile.in. Generate deps so thatEzra Peisach2009-10-282-0/+44
| | | | | | configure will work. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23075 dc483132-0cff-0310-8789-dd5450dbe970
* Heimdal DB bridge plugin for KDC back endGreg Hudson2009-10-2723-48/+4132
| | | | | | | | | Merge Luke's users/lhoward/heimmig branch to trunk. Implements a KDC back-end plugin which interfaces to a Heimdal HDB plugin. ticket: 6578 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23073 dc483132-0cff-0310-8789-dd5450dbe970
* Add "reindent" target to top-level Makefile.in. AddTom Yu2009-10-272-0/+44
| | | | | | | | | | krb5-batch-indent.el. These perform a batch reindent based upon the Emacs file-local variable settings, taking care to distinguish between files that are supposed to conform to the coding style versus those that are marked as being exceptions. A later commit will explicitly mark the files that we expect to conform to our coding standards. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23061 dc483132-0cff-0310-8789-dd5450dbe970
* Do not include com_err.h - not used hereEzra Peisach2009-10-271-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23060 dc483132-0cff-0310-8789-dd5450dbe970
* with an uninitialized entry on error exitEzra Peisach2009-10-271-0/+1
| | | | | | k5_hmac_md5_hash_iov: Initialize keyblock.length - so we do not invoke zapfree git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23059 dc483132-0cff-0310-8789-dd5450dbe970
* Fix missing emacs file variable markers. Add krb5-c-style.el: theTom Yu2009-10-264-3/+33
| | | | | | emacs lisp settings for the standard coding style. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23049 dc483132-0cff-0310-8789-dd5450dbe970
* Fix printf argument type mismatches related to pw_max_fail inGreg Hudson2009-10-261-4/+5
| | | | | | kadmin.c. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23044 dc483132-0cff-0310-8789-dd5450dbe970
* Remove the libkadm5 api.2 unit tests which don't pertain to the cpol,Greg Hudson2009-10-2614-6600/+0
| | | | | | mpol, or gpol operations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23043 dc483132-0cff-0310-8789-dd5450dbe970
* Remove the telnet-to-localhost sanity check in start_servers_local, asGreg Hudson2009-10-261-71/+27
| | | | | | | | the system telnet will not necessarily run correctly with LD_LIBRARY_PATH pointing at the Kerberos libraries from the build tree. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23042 dc483132-0cff-0310-8789-dd5450dbe970
* not try to free random stack garbage on errorEzra Peisach2009-10-251-0/+2
| | | | | | kdc_return_preauth: Set enc.ciphertext.data to null to ensure we do git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23040 dc483132-0cff-0310-8789-dd5450dbe970
* Reformat function definition headers in gss-krb5's util_crypt.c toGreg Hudson2009-10-251-98/+48
| | | | | | meet coding standards. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23039 dc483132-0cff-0310-8789-dd5450dbe970
* Account lockoutGreg Hudson2009-10-2579-301/+10284
| | | | | | | | | | | | Merge Luke's users/lhoward/lockout2 branch to trunk. Implements account lockout policies for preauth-using principals using existing principal metadata fields and new policy fields. The kadmin API version is bumped from 2 to 3 to compatibly extend the policy_ent_rec structure. ticket: 6577 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
* Set up an INIT-CMD to set CRYPTO_IMPL in config.status so thatTom Yu2009-10-251-0/+1
| | | | | | rebuilding Makefiles in lib/crypto works correctly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23034 dc483132-0cff-0310-8789-dd5450dbe970
* make dependTom Yu2009-10-2511-77/+72
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23030 dc483132-0cff-0310-8789-dd5450dbe970
* Resurrect deleted test files. Adjust Makefile.in files to correctlyTom Yu2009-10-244-0/+729
| | | | | | define RUN_SETUP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23029 dc483132-0cff-0310-8789-dd5450dbe970
* Comment out empty definition of krb5_gss_set_sec_context_option_ops and itsLuke Howard2009-10-231-0/+4
| | | | | | usage, because ISO C apparently forbids empty array initializers git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23002 dc483132-0cff-0310-8789-dd5450dbe970
* Remove #define DEBUG 1 that slipped in in S4U mergeLuke Howard2009-10-231-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23001 dc483132-0cff-0310-8789-dd5450dbe970
* Changed the crypto make system to add build flexibility. The update cancels ↵Zhanna Tsitkov2009-10-2340-1100/+368
| | | | | | the requirement for the dir structures to be identical in all crypto implementation and supports impl. dependent tests. Also, minor libk5crypto.exports list reduction ( from f_tables) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22995 dc483132-0cff-0310-8789-dd5450dbe970
* When iterating through the keytab in krb5_rd_req(), do notLuke Howard2009-10-221-2/+4
| | | | | | | return success if we did not find any matching keytab entries, otherwise we will crash upon accessing ticket->enc_part2. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22974 dc483132-0cff-0310-8789-dd5450dbe970
* Ensure that a GSS_C_BOTH acquired for GSS_C_NO_NAME still passesLuke Howard2009-10-223-1/+3
| | | | | | | | a NULL server principal to krb5_rd_req(). Without this the name canonicalisation support in 1.7 was broken for GSS_C_BOTH credentials, because cred->name would always be set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22973 dc483132-0cff-0310-8789-dd5450dbe970
* Allow the constrained delegation authorization method to use the evidence ↵Luke Howard2009-10-212-1/+6
| | | | | | ticket client name as input to the authorization decision git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22963 dc483132-0cff-0310-8789-dd5450dbe970
* simplify logic fix introduced in r22960 for S4U2SelfLuke Howard2009-10-211-4/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22962 dc483132-0cff-0310-8789-dd5450dbe970
* remove some unneeded extensions from the Novell backend authdata SPILuke Howard2009-10-214-43/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22961 dc483132-0cff-0310-8789-dd5450dbe970
* ensure that forwardable flag is propagated along S4U2Self referral pathLuke Howard2009-10-211-1/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22960 dc483132-0cff-0310-8789-dd5450dbe970
* Increment authdata SPI to V2 (V1 was experimental) to account for additionalLuke Howard2009-10-212-4/+4
| | | | | | krbtgt key parameter. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22959 dc483132-0cff-0310-8789-dd5450dbe970
* Increment authdata SPI to V2 (V1 was experimental) to accountLuke Howard2009-10-212-27/+27
| | | | | | for additional krbtgt key parameter. This was at Sam's suggestion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22958 dc483132-0cff-0310-8789-dd5450dbe970
* For naming extensions draft compliance, s/mspac:/urn:mspac:/Luke Howard2009-10-203-14/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22957 dc483132-0cff-0310-8789-dd5450dbe970
* Make some gss-krb5 utility functions take enctypes instead of keys,Greg Hudson2009-10-208-38/+44
| | | | | | | | and adjust callers. Fixes a bug where kg_arcfour_docrypt_iov was passing a keyblock instead of a key to kg_translate_iov after the enc-perf merge. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22956 dc483132-0cff-0310-8789-dd5450dbe970
* use ANSI prototypes for acquire_XXX_cred, and fix cast to calling ↵Luke Howard2009-10-201-14/+13
| | | | | | acquire_accept_cred() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22955 dc483132-0cff-0310-8789-dd5450dbe970
* correct indirection of minor status code when calling displayStatus()Luke Howard2009-10-201-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22954 dc483132-0cff-0310-8789-dd5450dbe970
* In k5_hmac_md5_hash_iov, initialize keyblock.contents so that we don'tGreg Hudson2009-10-201-0/+2
| | | | | | free it prior to initialization if krb5_hmac fails. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22953 dc483132-0cff-0310-8789-dd5450dbe970
* In krb5_k_make_checksum, check for a null key passed with a keyedGreg Hudson2009-10-201-1/+1
| | | | | | checksum instead of just crashing. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22952 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up memory leaks by releasing key at endEzra Peisach2009-10-202-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22951 dc483132-0cff-0310-8789-dd5450dbe970
* Include des_int.h for mit_des_fixup_key_parity prototypeEzra Peisach2009-10-201-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22950 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leaks in enc-perf workGreg Hudson2009-10-203-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22949 dc483132-0cff-0310-8789-dd5450dbe970
* fix some Coverity reported defects in naming extensionsLuke Howard2009-10-204-25/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22948 dc483132-0cff-0310-8789-dd5450dbe970
* Implement new APIs to allow improved crypto performanceGreg Hudson2009-10-19105-1069/+1876
| | | | | | | | | | | Merge branches/enc-perf to trunk. Adds the krb5_key opaque type, the krb5_k_* APIs to use them, and caching of derived keys when krb5_k_* functions are used. Updates the krb5 auth context and GSS id-rec to use krb5_keys. ticket: 6576 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22944 dc483132-0cff-0310-8789-dd5450dbe970
* Update prototype files to conform with newer whitespace rulesTom Yu2009-10-193-10/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22937 dc483132-0cff-0310-8789-dd5450dbe970
* Include des_int.h for mit_des_fixup_key_parity prototype. Adjust Makefile.inEzra Peisach2009-10-182-1/+2
| | | | | | to find the proper header. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22912 dc483132-0cff-0310-8789-dd5450dbe970
* Remove adb.h as it is not used in the source treeEzra Peisach2009-10-181-134/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22911 dc483132-0cff-0310-8789-dd5450dbe970
* Properly handle ivec for chaining opsZhanna Tsitkov2009-10-161-175/+34
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22906 dc483132-0cff-0310-8789-dd5450dbe970
* Fix the value of ivec in aes_decrypt_iovZhanna Tsitkov2009-10-161-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22905 dc483132-0cff-0310-8789-dd5450dbe970
* Enable t_cts testZhanna Tsitkov2009-10-151-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22902 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed aes to handle the input buffers of the various sizesZhanna Tsitkov2009-10-151-140/+313
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22900 dc483132-0cff-0310-8789-dd5450dbe970
* Fix preauth looping in krb5_get_init_credsGreg Hudson2009-10-131-2/+16
| | | | | | | | | | | | | | In 1.7, krb5_get_init_creds will continue attempting the same built-in preauth mechanism (e.g. encrypted timestamp) until the loop counter maxes out. Until the preauth framework can remember not to retry built-in mechanisms, only continue with preauth after a PREAUTH_FAILED error resulting from optimistic preauth. ticket: 6573 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22890 dc483132-0cff-0310-8789-dd5450dbe970
* Revert a small part of r22736 which incorrectly fixed a preauthGreg Hudson2009-10-131-4/+2
| | | | | | looping bug in krb5_get_init_creds. A more correct fix will follow. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22888 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leak and init those magic number fields to prevent compiler warningEzra Peisach2009-10-101-1/+4
| | | | | | when structure copied. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22879 dc483132-0cff-0310-8789-dd5450dbe970
* Clean nfold.o on make cleanEzra Peisach2009-10-101-7/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22878 dc483132-0cff-0310-8789-dd5450dbe970
* Move destest to builtin/des, because it depends on overriding someTom Yu2009-10-1060-1589/+1953
| | | | | | | | internals. Make depend. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22877 dc483132-0cff-0310-8789-dd5450dbe970