summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* As discussed on the krbdev mailing list, krb5_get_init_creds_password()Jeffrey Altman2004-02-2712-28/+93
| | | | | | | | | | | | | | | | | | | | | | | suffered from a behavior in which it would unintentionally query a master KDC twice if in fact the KDC queried when krb5int_sendto() was called with use_master = 0 was in fact the master. This resulted in more than an additional protocol operation. There were two negative side effects. First, in the case of an incorrect password there would be two counts against the max retry attempts. Second, in the case of hardware pre-auth and an expired password, the user would be asked to enter their expired password twice before being told it was expired. This has been fixed by changing the use_master parameter into an in/out parameter and modifying krb5int_sendto() to indicate which KDC it received the response from. This allows the use_master parameter to be set to indicate whether or not the response came from a master KDC regardless of whether a master KDC was requested. ticket: new target_version: next tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16137 dc483132-0cff-0310-8789-dd5450dbe970
* * gss-client.c: change if (this) if (that) => if (this && that)Jeffrey Altman2004-02-272-170/+172
| | | | | | | | ticket: new target_version: next tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16136 dc483132-0cff-0310-8789-dd5450dbe970
* fix GET{SOCK,PEER}NAME_ARG{2,3}_TYPE lossage I createdKen Raeburn2004-02-262-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16135 dc483132-0cff-0310-8789-dd5450dbe970
* Set context flags after calling krb5_rd_req so that the replay cache is set upSam Hartman2004-02-262-2/+8
| | | | | | | Ticket: 2284 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16129 dc483132-0cff-0310-8789-dd5450dbe970
* Move apputils dir from util to lib, to get its proper place in theKen Raeburn2004-02-2612-12/+25
| | | | | | build process (after include). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16128 dc483132-0cff-0310-8789-dd5450dbe970
* * rcp.exp (stop_rsh_daemon): Check for any output before eof, causing any suchKen Raeburn2004-02-263-2/+18
| | | | | | | info to be dumped into the debug log. * rsh.exp (stop_rsh_daemon): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16127 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapi.exp (doit): Fix typo in log messageKen Raeburn2004-02-262-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16126 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp (passes): Add "mode=udp" to existing pass specifications. Add aKen Raeburn2004-02-262-1/+48
| | | | | | | | | | | new pass which does AES and "mode=tcp". (setup_kerberos_files, setup_krb5_conf): Check global var "mode" and use it to force UDP or TCP communication between client and KDC. Also, have clients try another random port where we don't expect anything to be listening. ticket: 2285 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16125 dc483132-0cff-0310-8789-dd5450dbe970
* * network.c (setup_a_tcp_listener): Call setreuseaddr before calling bind.Ken Raeburn2004-02-262-8/+18
| | | | | | | | | | (setup_tcp_listener_ports): Don't call setreuseaddr. Log info about socket option IPV6_V6ONLY in unsupported and success cases. ticket: 2285 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16124 dc483132-0cff-0310-8789-dd5450dbe970
* * sendto_kdc.c (start_connection): Close socket if connect() call fails for anKen Raeburn2004-02-262-0/+6
| | | | | | | | | unexpected reason. ticket: 2277 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16123 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1Sam Hartman2004-02-2416-440/+30
| | | | | | | | | | Previously, MIT had support for a version of the des3 enctype with a 32-bit length prepended to encrypted data. Remove that support. This is non-standard and is no longer needed even at MIT. Ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16122 dc483132-0cff-0310-8789-dd5450dbe970
* dependency updatesKen Raeburn2004-02-242-10/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16121 dc483132-0cff-0310-8789-dd5450dbe970
* ignore generated shared librariesKen Raeburn2004-02-241-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16120 dc483132-0cff-0310-8789-dd5450dbe970
* ignore some more generated filesKen Raeburn2004-02-2411-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16119 dc483132-0cff-0310-8789-dd5450dbe970
* Move daemon.c into a new library of utility routines for linking our programsKen Raeburn2004-02-2424-28/+127
| | | | | | | | | | | | against but which we don't want to install as a separate library. Change Kerberos and application servers to link against the library if they might need the replacement daemon() function. Add a dummy file to the library in case daemon() is not needed, so we don't have an empty library, which we may not handle properly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16118 dc483132-0cff-0310-8789-dd5450dbe970
* ignore fakedest dirKen Raeburn2004-02-241-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16117 dc483132-0cff-0310-8789-dd5450dbe970
* ignore generated krb524 error table codeKen Raeburn2004-02-241-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16116 dc483132-0cff-0310-8789-dd5450dbe970
* ignore files created during testingKen Raeburn2004-02-241-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16115 dc483132-0cff-0310-8789-dd5450dbe970
* ignore ksetpwdKen Raeburn2004-02-241-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16114 dc483132-0cff-0310-8789-dd5450dbe970
* * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix calculation forKen Raeburn2004-02-232-6/+19
| | | | | | | | | confidential CFX tokens. ticket: 2266 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16107 dc483132-0cff-0310-8789-dd5450dbe970
* Add missing ChangeLog entryTom Yu2004-02-231-0/+6
| | | | | | ticket: 2258 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16106 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_init.c (prof_int32): If long is 4 bytes and int is not, then use long,Ken Raeburn2004-02-192-1/+6
| | | | | | not int, for prof_int32. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16105 dc483132-0cff-0310-8789-dd5450dbe970
* Bug from David Thompson <thomas@cs.wisc.edu>. Bug originally introducedKen Hornstein2004-02-191-1/+1
| | | | | | | | by me during conversion from bcopy() to memcpy(). ticket: 2258 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16104 dc483132-0cff-0310-8789-dd5450dbe970
* ignore some files generated during testingKen Raeburn2004-02-192-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16103 dc483132-0cff-0310-8789-dd5450dbe970
* protoizeKen Raeburn2004-02-1955-412/+249
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16102 dc483132-0cff-0310-8789-dd5450dbe970
* ignore aes-gen programKen Raeburn2004-02-191-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16101 dc483132-0cff-0310-8789-dd5450dbe970
* protoizeKen Raeburn2004-02-195-8/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16100 dc483132-0cff-0310-8789-dd5450dbe970
* ProtoizeKen Raeburn2004-02-197-215/+105
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16099 dc483132-0cff-0310-8789-dd5450dbe970
* delete some blank lines in fn defsKen Raeburn2004-02-191-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16098 dc483132-0cff-0310-8789-dd5450dbe970
* use $(CC) rather than ld to build shared libs on tru64 and irixTom Yu2004-02-182-2/+7
| | | | | | | | | | * shlib.conf (alpha-*-dec-osf*, mips-sgi-irix*): Use $(CC) instead of ld for building shared libraries. ticket: new component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16097 dc483132-0cff-0310-8789-dd5450dbe970
* * pcbc_encrypt.c (des_pcbc_encrypt): Don't pass a temporary variable toKen Raeburn2004-02-182-3/+8
| | | | | | DES_DO_ENCRYPT and _DECRYPT. Drop the temporary variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16096 dc483132-0cff-0310-8789-dd5450dbe970
* * f_tables.h (DES_DO_ENCRYPT, DES_DO_DECRYPT): Allocate temporary variableKen Raeburn2004-02-175-24/+30
| | | | | | | | | | | locally instead of taking the extra argument. * d3_cbc.c (krb5int_des3_cbc_encrypt): Don't pass the extra argument, and delete the automatic variable. (krb5int_des3_cbc_decrypt): Likewise. * f_cbc.c (krb5int_des_cbc_encrypt, krb5int_des_cbc_decrypt): Likewise. * f_cksum.c (mit_des_cbc_cksum): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16095 dc483132-0cff-0310-8789-dd5450dbe970
* * afsstring2key.c (krb5_afs_encrypt): Drop EDFLAG as an argument, make it localKen Raeburn2004-02-172-4/+23
| | | | | | | | instead, since we always pass 0. (afs_crypt): Call changed. (krb5_afs_crypt_setkey, krb5_afs_encrypt): Use memcpy. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16094 dc483132-0cff-0310-8789-dd5450dbe970
* Add missing PRIOCNTL_HACK stuff hereTom Yu2004-02-165-1/+51
| | | | | | | | | ticket: new target_version: 1.3.2 tags: pullup component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16085 dc483132-0cff-0310-8789-dd5450dbe970
* Don't specify defaults for GET{PEER,SOCK}NAME_ARG{2,3}_TYPE macrosKen Raeburn2004-02-144-26/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16082 dc483132-0cff-0310-8789-dd5450dbe970
* aclocal.m4 (WITH_CC): Add -fno-common to CFLAGS on Darwin, unless -fcommon orKen Raeburn2004-02-142-0/+18
| | | | | | -fno-common is already given. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16081 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (TRY_PEER_INT): Deleted.Ken Raeburn2004-02-142-38/+19
| | | | | | | | | (KRB5_GETPEERNAME_ARGS): Map the getpeername arg types to the corresponding getsockname arg types. (KRB5_GETSOCKNAME_ARGS): If nothing matches, assume struct sockaddr and socklen_t. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16080 dc483132-0cff-0310-8789-dd5450dbe970
* * t_encrypt.c (compare_results): New function.Ken Raeburn2004-02-133-8/+57
| | | | | | | | | | | | (main): Use it to check decryption results against the original plaintext. When testing with cipher state, encrypt and then decrypt (and verify) two messages. * Makefile.in (t_encrypt$(EXEEXT)): Depend on CRYPTO_DEPLIB. ticket: 2229 status: resolved tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16079 dc483132-0cff-0310-8789-dd5450dbe970
* * dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): New argument IVEC_MODE. IfKen Raeburn2004-02-133-11/+48
| | | | | | | | | | | | clear, same old behavior. If set, copy out next to last block for CTS. (krb5_dk_decrypt, krb5int_aes_dk_decrypt): Pass extra argument. * dk_encrypt.c (krb5int_aes_dk_encrypt): For IV, copy out next to last block for CTS. ticket: 2229 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16077 dc483132-0cff-0310-8789-dd5450dbe970
* Change PRIOCNTL_HACK code to use "==" rather than "eq", as "eq" is notTom Yu2004-02-136-9/+24
| | | | | | | | | | available in tcl-8.3. ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16071 dc483132-0cff-0310-8789-dd5450dbe970
* Fix logic errorSam Hartman2004-02-132-1/+5
| | | | | | | | Ticket: 2234 Target_Version: 1.3.2 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16070 dc483132-0cff-0310-8789-dd5450dbe970
* priocntl workaround for Solaris 9 pty-close bugTom Yu2004-02-1322-34/+181
| | | | | | | | | | | | Implement gross hack to use priocntl to work around the Solaris 9 pty-close bug. Run expect at a higher class "FX" priority than spawned processes, which run at a lower class "FX" priority. "make check" needs to start from a process which has FX priority >= 30 and FX priority limit >= 30. Thanks to Bill Sommerfeld for the hints. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16069 dc483132-0cff-0310-8789-dd5450dbe970
* Tru64 and Irix have RPATH issues for test suiteTom Yu2004-02-127-14/+67
| | | | | | | | | | Implement hack for faking up _RLD_ROOT with a shadow of the directory tree up to the installed "lib" directory. This helps with running tests on Tru64 and Irix. ticket: 1793 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16066 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-02-12 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-02-122-3/+7
| | | | | | | | | | * Fix libpath for krbcc32.lib (only affects KRB5_KFW_COMPILE builds) ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16065 dc483132-0cff-0310-8789-dd5450dbe970
* Add missing file: gss-misc.h copied from src/appl/gss-sampleJeffrey Altman2004-02-112-0/+64
| | | | | | | | ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16062 dc483132-0cff-0310-8789-dd5450dbe970
* update copyright notices on gss sample appsTom Yu2004-02-116-0/+138
| | | | | | | | | | update copyrights ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16056 dc483132-0cff-0310-8789-dd5450dbe970
* gss-client.c: remove extraneous parameters from client_establish_context()Jeffrey Altman2004-02-102-5/+10
| | | | | | | | ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16052 dc483132-0cff-0310-8789-dd5450dbe970
* * ser_sctx.c (kg_oid_externalize): Check for errors.Ken Raeburn2004-02-102-49/+154
| | | | | | | | | | | | | | | | (kg_oid_internalize): Check for errors. Free allocated storage on error. (kg_queue_externalize): Check for errorrs. (kg_queue_internalize): Check for errors. Free allocated storage on error. (kg_ctx_size): Update for new context data. (kg_ctx_externalize): Update for new context data. Check for error storing trailer. (kg_ctx_internalize): Update for new context data. Check for errors in a few more cases. ticket: 2166 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16050 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapi.exp (doit): Run server with additional options to export and re-importKen Raeburn2004-02-102-1/+7
| | | | | | | | | the GSSAPI context, and log info to a file in tmpdir. ticket: 2166 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16049 dc483132-0cff-0310-8789-dd5450dbe970
* Call htons for default port of password serverSam Hartman2004-02-092-1/+5
| | | | | | | Ticket: 2171 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16047 dc483132-0cff-0310-8789-dd5450dbe970