summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* * login.c (dofork): Don't dissociate from controlling tty in theTom Yu2003-02-042-32/+36
| | | | | | | | | | | parent, since the parent needs to remain the session leader so it can tell when the tty gets hung up. Make the child wait for the parent to set up a SIGHUP handler to ensure that cleanup happens properly. ticket: 608 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15148 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2003-02-032-8/+17
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15147 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***Ken Raeburn2003-02-031-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15146 dc483132-0cff-0310-8789-dd5450dbe970
* Remove placeholder file that shouldn't have been checked inKen Raeburn2003-02-032-9/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15145 dc483132-0cff-0310-8789-dd5450dbe970
* Build and link in AES crypto code (but don't define the enctype yet).Ken Raeburn2003-02-036-171/+352
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build and link in PBKDF2 function. Add ciphertext stealing tests. Update various tests to correspond with IETF crypto draft. * aes: New directory, containing AES implementation from Brian Gladstone, tweaked a little for the krb5 build system. * configure.in: Build its makefile. * Makefile.in (LOCAL_SUBDIRS, LOCALINCLUDES, STOBJLISTS, SUBDIROBJLISTS): Add aes entries. * t_cts.c: New test file. * Makefile.in (EXTRADEPSRCS): Add t_cts. (t_cts$(EXEEXT)): New rule. * Makefile.in (SRCS, OBJS, STLIBOBJS): Add pbkdf2. (EXTRADEPSRCS): Remove pbkdf2.c. (t_pkcs5$(EXEEXT)): Don't list pbkdf2.$(OBJEXT). * t_nfold.c (fold_kerberos): New function. (main): Call it with different lengths. * vectors.c: Include ctype.h and hash_provider.h. (test_nfold, test_mit_des_s2k, test_s2k, test_dr_dk): Test case data now static and const. (test_nfold): Add "Q" and "ba" tests from Simon Josefsson. (GCLEF): New macro. (test_mit_des_s2k): Add GCLEF test case. Fill in "key" at run time, not as initialization. (test_s2k): Added GCLEF test case. (krb5int_enc_aes128, krb5int_enc_aes256): Declare. (combine_keys, test_des3_combine, k5_des3_make_key): Functions deleted. (whoami): New variable. (printd, printk): New functions. (test_pbkdf2): New function. (main): Initialize whoami. Test nfold only for now. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15144 dc483132-0cff-0310-8789-dd5450dbe970
* * aes.c: New file.Ken Raeburn2003-02-033-2/+206
| | | | | | | * Makefile.in (STLIBOBJS, OBJS, SRCS): Include it. (LOCALINCLUDE): Add aes source dir. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15143 dc483132-0cff-0310-8789-dd5450dbe970
* Make l40 staticSam Hartman2003-02-032-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15142 dc483132-0cff-0310-8789-dd5450dbe970
* AES implementation by Briad Gladman; tweaked for krb5 treeKen Raeburn2003-02-0331-0/+39436
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15141 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (clean-windows): Remove $(GENS).Ken Raeburn2003-02-012-0/+9
| | | | | | (krb524_err.c): Depend on krb524_err.et. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15140 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c (v4_des_write): Apply patch from ghudson to fixTom Yu2003-01-312-4/+14
| | | | | | | | non-right-justification case. ticket: 620 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15139 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Initialize 'hostname'Ken Raeburn2003-01-312-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15138 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (try_krb4): Delete unused krb5 principal name argument.Ken Raeburn2003-01-312-3/+7
| | | | | | | | (main): Don't pass it. ticket: 479 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15137 dc483132-0cff-0310-8789-dd5450dbe970
* * RealmsConfig-glue.c (get_krbhst_default, krb_get_krbhst, krb_realmofhost):Ken Raeburn2003-01-282-3/+8
| | | | | | | | | Use strcpy instead of strncpy. ticket: 1339 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15135 dc483132-0cff-0310-8789-dd5450dbe970
* krb4 library breaks old krb_get_admhst APIKen Raeburn2003-01-272-2/+7
| | | | | | | | | * RealmsConfig-glue.c (krb_get_admhst): Use strcpy instead of strncpy, and max length of MAX_HSTNM. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15134 dc483132-0cff-0310-8789-dd5450dbe970
* * parse.c: Include errno.h for declaration of errnoEzra Peisach2003-01-242-1/+5
| | | | | | | glibc 2.3.1 declares errno as a macro - so must include header file before use. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15133 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp (start_kerberos_daemons): Record more information when "tail -f"Ken Raeburn2003-01-232-4/+20
| | | | | | | | | doesn't show the mark written to the log file. Look for and discard non-matching lines. (setup_root_shell): Ignore the message displayed by rlogin when a connection is refused to one address but other addresses are available. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15132 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (all-unix, install): Build and install kadm_err.h.Ken Raeburn2003-01-222-4/+8
| | | | | | (install-headers-unix): Install both generated header files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15131 dc483132-0cff-0310-8789-dd5450dbe970
* Timestamp preauth should return clock skew errorsSam Hartman2003-01-212-1/+13
| | | | | | | | | | | When the user supplies the correct password, but has a timestamp that is out of bounds, the server should reply with a clock skew error rather than a preauth required error. ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15130 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5_32.def: Export krb5_rc_close, krb5_free_enc_tkt_part, andKen Raeburn2003-01-172-0/+8
| | | | | | krb5_decrypt_tkt_part, for GSSAPI. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15129 dc483132-0cff-0310-8789-dd5450dbe970
* Use new target create-ehdrdir, defined differently for UNIX and WIN32, toKen Raeburn2003-01-172-6/+11
| | | | | | | conditionally create the target directory $(EHDRDIR) if needed, before copying files into it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15128 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_mk_req_checksum_func): Fix Windows calling convention syntaxKen Raeburn2003-01-172-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15127 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c (profile_flush_file_data): [_WIN32]: Don't call syncKen Raeburn2003-01-172-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15126 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in ($(EHDRDIR)$(S)gssapi.h): Depend on includes-unix, to make sureKen Raeburn2003-01-172-2/+9
| | | | | | | the directory is created before installation of the file. ($(EHDRDIR)$(S)gssapi_generic.h): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15125 dc483132-0cff-0310-8789-dd5450dbe970
* * sendauth.c (krb_net_rd_sendauth): Arg raw_len now points to KRB4_32; don'tKen Raeburn2003-01-153-5/+11
| | | | | | | | cast it to pointer to unsigned long. Change ld.so warning message check to be byte-order independent. * krb4int.h (krb_net_rd_sendauth): Decl updated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15124 dc483132-0cff-0310-8789-dd5450dbe970
* This is the last piece of the KfM mergeTom Yu2003-01-152-0/+764
| | | | | | | | * CCache-glue.c: New file from KfM. ticket: 1189 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15123 dc483132-0cff-0310-8789-dd5450dbe970
* Use "standard" error table processing rulesKen Raeburn2003-01-152-6/+18
| | | | | | | | | | | | * Makefile.in (krb_err.et, kadm_err.et): New intermediate targets; copy files from lib/krb4. (krb_err.h, kadm_err.h): Delete actions, use patterns in pre.in. (clean-unix): Delete these generated files. ticket: 1209 status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15122 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (check-unix): Invoke t_krbconf instead of strugglingEzra Peisach2003-01-143-10/+46
| | | | | | | | with differing versions of make's quoting of \ and $. * t_krbconf: Small shell script to test krb5-config. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15121 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (check-unix): Test to see if krb5-config outputsEzra Peisach2003-01-133-4/+29
| | | | | | | | | | | | | | variables that require Makefile substitutions. * krb5-config.in: Remore $(PURE) from output. Handle variables $(RPATH_FLAG) and $(LDFLAGS). If config/shlib.conf is changed again, we will detect brokeness in krb5-config before the release. ticket: 1311 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15120 dc483132-0cff-0310-8789-dd5450dbe970
* * profile.pbexp: New fileKen Raeburn2003-01-132-0/+35
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15119 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_int.h (SHARE_TREE_DATA): Define only on MacKen Raeburn2003-01-132-2/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15118 dc483132-0cff-0310-8789-dd5450dbe970
* This should be all that remains of the 1-2-2-branch merge; someTom Yu2003-01-132-191/+180
| | | | | | | | | | | additional sanity-checking of merge needed though. * krb5_32.def: Merge from 1-2-2-branch. ticket: 1177 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15117 dc483132-0cff-0310-8789-dd5450dbe970
* kadm5_get_either leaks memoryEzra Peisach2003-01-122-0/+8
| | | | | | | | | * svr_iters.c (kadm5_get_either): For POSIX_REGEXPS (i.e. regcomp), call regfree() to cleanup memory. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15116 dc483132-0cff-0310-8789-dd5450dbe970
* Memory leak in krb5_send_tgs()Ezra Peisach2003-01-122-0/+6
| | | | | | | | * send_tgs.c (krb5_send_tgs): Free memory leak of TGS_REQ. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15115 dc483132-0cff-0310-8789-dd5450dbe970
* * svc_auth_gssapi.c (_svcauth_gssapi_unset_names): If invoked moreEzra Peisach2003-01-123-1/+13
| | | | | | | | | than once, do not double free memory. * clnt_perror.c (clnt_sperror): Do not write past end of allocated buffer. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15114 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.h, replay.c, main.c: Pass global krb5_context toEzra Peisach2003-01-124-7/+13
| | | | | | | kdc_free_lookaside() instead of per realm one - which has been freed by time invoked. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15113 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc5_hammer.c (verify_cs_pair): Use krb5_free_creds() instead ofEzra Peisach2003-01-122-2/+7
| | | | | | krb5_free_cred_contents() to cleanup memory leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15112 dc483132-0cff-0310-8789-dd5450dbe970
* Search for ar, ranlib, install in KRB5_BUILD_LIBRARY* macros rather thanKen Raeburn2003-01-1029-73/+48
| | | | | | explicitly in directories using those macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15111 dc483132-0cff-0310-8789-dd5450dbe970
* Use passwd entry for ~ expansion if $HOME isn't set.Ken Raeburn2003-01-103-20/+43
| | | | | | | | | Also fix a minor logic bug in checking file access. ticket: 1237 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15110 dc483132-0cff-0310-8789-dd5450dbe970
* * server.c: Include port-sockets.hKen Raeburn2003-01-102-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15109 dc483132-0cff-0310-8789-dd5450dbe970
* Move socklen_t and sockaddr_storage definitions to port-sockets.hKen Raeburn2003-01-103-17/+32
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15108 dc483132-0cff-0310-8789-dd5450dbe970
* Use markers in Makefile.in rather than rules in configure.in to indicate whenKen Raeburn2003-01-10110-182/+458
| | | | | | | | to use the lib.in and libobj.in makefile fragments. Pushing this per-directory info into Makefile.in will make it a little easier to work on combining configure scripts for multiple directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
* Patch to get new service tickets in preference to using expiredSam Hartman2003-01-102-1/+15
| | | | | | | | service tickets in krb5_get_credentials. Ticket: 1260 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15106 dc483132-0cff-0310-8789-dd5450dbe970
* Use socklen_t when passing address to socket functions.Ken Raeburn2003-01-1014-13/+55
| | | | | | Fixes compilation warnings on AIX 4.3.3. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15105 dc483132-0cff-0310-8789-dd5450dbe970
* AIX 4.3.3 getaddrinfo() is broken in a slightly different way than I thoughtKen Raeburn2003-01-092-7/+144
| | | | | | | | | | | * fake-addrinfo.h (getaddrinfo) [_AIX]: Always overwrite sa_family and sa_len fields, since sa_family at least may be non-zero *and* wrong. (protoname, socktypename, familyname, debug_dump_getaddrinfo_args, debug_dump_error, debug_dump_error, debug_dump_addrinfos) [DEBUG_ADDRINFO]: New debugging functions. (fake_getaddrinfo, getaddrinfo) [DEBUG_ADDRINFO]: Use them. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15104 dc483132-0cff-0310-8789-dd5450dbe970
* Between the 1.1 and 1.2 releases of Kerberos, the gss-sample protocolSam Hartman2003-01-094-30/+69
| | | | | | | | | | | | | | | changed. People seem to use this sample for interop testing, so support for the old protocol is needed. This commit adds a -v1 flag to the gss-client that will use the old protocol. The server does not yet support the old protocol, so the ticket remains open. Ticket: 881 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15103 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (DEFINES): New variable. Define HAS_STDARG for Tcl headersKen Raeburn2003-01-092-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15102 dc483132-0cff-0310-8789-dd5450dbe970
* Try to do atomic file swap on UNIX when updating profileKen Raeburn2003-01-092-3/+34
| | | | | | | | | | * prof_file.c (make_hard_link): New function. (profile_flush_file_data): Use it to attempt a safe profile file replacement. ticket: 1301 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15101 dc483132-0cff-0310-8789-dd5450dbe970
* Support \r as additional line separator on Mac OS XKen Raeburn2003-01-093-3/+60
| | | | | | | | | | | | * prof_parse.c (profile_parse_file) [PROFILE_SUPPORTS_FOREIGN_NEWLINES]: Look for \r and treat it as a line break. * prof_int.h: Don't include prof_err.h. (PROFILE_SUPPORTS_FOREIGN_NEWLINES) [macintosh]: Define new macro. ticket: 1237 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15100 dc483132-0cff-0310-8789-dd5450dbe970
* Previously fwd_tgt_creds required either that the hostname be passedSam Hartman2003-01-082-14/+25
| | | | | | | | | | | in or that the principal be a host-based service. This means you cannot for example forward tickets to a GSSAPI user-based service. The requirement to get the hostname is only needed in cases where addressless tickets are not used. So when addressless tickets are used, do not require the hostname. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15099 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (freeaddrinfo): Back out 1/3/03 change. ANSIEzra Peisach2003-01-082-2/+6
| | | | | | does not require it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15098 dc483132-0cff-0310-8789-dd5450dbe970