summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* * Makefile.in (unit-test-body): Set RPC_TEST_SRVTAB based on process-id. SetKen Raeburn2002-11-112-3/+14
| | | | | | | trap handler to delete it before returning an exit status. (unit-test-cleanup): Don't delete files here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14991 dc483132-0cff-0310-8789-dd5450dbe970
* Oops, missed a few checks for eofTom Yu2002-11-092-8/+6
| | | | | | | ticket: 1249 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14986 dc483132-0cff-0310-8789-dd5450dbe970
* tests/dejagnu leaks ptysTom Yu2002-11-092-4/+38
| | | | | | | | | | | * default.exp: Add (disabled) debugging code for catching leaking ptys. expect eof from the correct spawn_ids when killing kdc and kadmind to avoid leaking ptys. ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14984 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c (makeargv): Report an error if parsed arguments won't fit in margvKen Raeburn2002-11-093-3/+16
| | | | | | | array. * ftp_var.h (line, argbuf): Extend to 500 bytes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14983 dc483132-0cff-0310-8789-dd5450dbe970
* * pre.in (.et.h, .et.c): Drop "set -x"Ken Raeburn2002-11-082-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14982 dc483132-0cff-0310-8789-dd5450dbe970
* rpc unit tests can fail due to race conditionTom Yu2002-11-072-0/+9
| | | | | | | | | | | | | | | | | | The rpc unit tests can fail in fullrun.exp due to a failure to drain output from the server in expire.exp. This commit works around the problem by calling flush_server, but a real synchronization method should probably be implemented, perhaps by having the server log when a client disconnects. * rpc_test.0/expire.exp (overlap): Add another call to flush_server to make a race condition a little less likely. There really should be better synchronization, as this test suite is just full of race conditions waiting to happen. ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14979 dc483132-0cff-0310-8789-dd5450dbe970
* Thanks, patch appliedTom Yu2002-11-072-1/+8
| | | | | | | | | | | | * svr_principal.c (kadm5_setkey_principal_3): Apply patch from Emily Ratliff to allow n_ks_tuple to be zero, which is the case if being called from kadmind answering a client's setkey_principal request. ticket: 1008 target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14978 dc483132-0cff-0310-8789-dd5450dbe970
* * conv_princ.c (strnchr): Make length argument unsigned intEzra Peisach2002-11-073-9/+18
| | | | | | | * preauth2.c: Add parentheses around assignment used as truth value. Cleanup unused variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14976 dc483132-0cff-0310-8789-dd5450dbe970
* * asn1_k_encode.c (asn1_encode_sam_challenge_2): Test for errorEzra Peisach2002-11-073-6/+24
| | | | | | | | | | | | returned from asn1buf_insert_oxtetstring and cleanup strctures properly. * asn1_k_decode.c (asn1_decode_sam_challenge_2_body): Change sequence_of/end_sequence_of to use sequence_of_no_tagvars/end_sequence_of_no_tagravs to avoid shadowing variables. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14975 dc483132-0cff-0310-8789-dd5450dbe970
* For sam_challenge do not encode optional strings if string not present.Ezra Peisach2002-11-076-4/+22
| | | | | | | | Previously, a string of length zero was transmitted. ticket: 1224 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14974 dc483132-0cff-0310-8789-dd5450dbe970
* New file to define SPNEGO structuresSam Hartman2002-11-062-0/+93
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14973 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes up the in-tree callers of krb5_read_password() andTom Yu2002-11-0621-20/+73
| | | | | | | | | | des_read_password(). We should perhaps tighten up the test suite now. ticket: 1217 status: open target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14972 dc483132-0cff-0310-8789-dd5450dbe970
* * asn1_encode.h (asn1_encode_oid):Tom Yu2002-11-055-0/+48
| | | | | | | | | | | | | * asn1_encode.c (asn1_encode_oid): New function. * asn1_decode.h (asn1_decode_oid): * asn1_decode.c (asn1_decode_oid): New function. ticket: 1223 target_version: 1.3 component: krb5-libs git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14971 dc483132-0cff-0310-8789-dd5450dbe970
* New Makefile variable RPATH_FLAG, possibly used even when we're notTom Yu2002-11-057-17/+61
| | | | | | | | | | building shared libs. TCL_MAYBE_RPATH gets used to account for linking a shared tcl lib when we're not building shared libs. ticket: 1228 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14969 dc483132-0cff-0310-8789-dd5450dbe970
* * do_as_req.c (process_as_req): Fix previous patch; it caused anTom Yu2002-11-042-1/+7
| | | | | | | | | uninitialized pointer to be dereferenced under certain error conditions. ticket: 1206 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14964 dc483132-0cff-0310-8789-dd5450dbe970
* Calling convention for krb5int_c_combine_keys does not match prototypeKen Hornstein2002-11-032-1/+6
| | | | | | | | | | The Windows calling convention for krb5int_c_combine_keys does not match the prototype in k5-int.h. I missed this during the initial commit since I neglected to test out the build of this code on Windows. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14962 dc483132-0cff-0310-8789-dd5450dbe970
* This fixes some test suite password prompt checks that were missedTom Yu2002-11-023-18/+23
| | | | | | | | | | | | earlier. * kpasswd.0/changing.exp: * lib/helpers.exp: Make checks for password prompts more lenient. ticket: 1217 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14961 dc483132-0cff-0310-8789-dd5450dbe970
* MITKRB5-SA-2002-002 buffer overflow in kadmind4Tom Yu2002-11-012-2/+14
| | | | | | | | | | | | * kadm_ser_wrap.c (kadm_ser_in): Apply fix for MITKRB5-SA-2002-002 buffer overflow. ticket: new status: open version_reported: 1.2.6 target_version: 1.2.7 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14959 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (check-unix): Don't run t_pkcs5Ken Raeburn2002-10-312-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14956 dc483132-0cff-0310-8789-dd5450dbe970
* * xdr_alloc.c (xdralloc_putlong): Coerce value pointed to by argument to 32Ken Raeburn2002-10-312-2/+9
| | | | | | bits, rather than reading only 32 bits from the supplied address. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14954 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h (krb5_ser_handle): Now points to const.Ken Raeburn2002-10-317-21/+38
| | | | | | | | | | | | | | | (krb5_kt_dfl_ops): Now const. (struct _krb5_kt_ops): Field serializer now points to const krb5_ser_entry instead of void. * krb5.hin (struct _krb5_kt): Field ops now points to const. * kt_file.c (krb5_ktf_ops, krb5_ktf_writable_ops): Now const. Drop cast of serializer entry initializer. (fopen_mode_rbplus, fopen_mode_rb): Now const. * kt_srvtab.c (krb5_kts_ops): Now const. * ktbase.c (krb5_ktf_ops, krb5_kts_ops): Update declarations. (struct krb5_kt_typelist): Field ops now points to const. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14953 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_KRB5_TCL_FIND_CONFIG): Use 'eval' when setting TCL_LIBS toKen Raeburn2002-10-312-1/+8
| | | | | | force variable substitutions to take place. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14952 dc483132-0cff-0310-8789-dd5450dbe970
* ticket: newSam Hartman2002-10-311-1/+1
| | | | | | | | | | owner: tlyu status: open Fix typo in debugging printf introduced in null handling git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14951 dc483132-0cff-0310-8789-dd5450dbe970
* * chk_trans.c (krb5_check_transited_list): Style nit: checkTom Yu2002-10-302-3/+8
| | | | | | character against '\0' not NULL. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14949 dc483132-0cff-0310-8789-dd5450dbe970
* * start_servers_local: If $USER isn't set, use $LOGNAME. If ovsec_kadm_srv_tclKen Raeburn2002-10-302-0/+12
| | | | | | invocation to do some initialization fails, exit rather than continuing. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14948 dc483132-0cff-0310-8789-dd5450dbe970
* ticket: 1230Sam Hartman2002-10-302-4/+15
| | | | | | | | | | owner: tlyu status: open Ignore trailing nulls on incoming tr encoding to be compatible with bug in previous versions of krb5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14946 dc483132-0cff-0310-8789-dd5450dbe970
* Wrong ASN.1 definition and padata type for new hardware preauthKen Hornstein2002-10-304-3/+15
| | | | | | | | | | | | | | | It turned out that early in the development cycle, one of our developers picked the "next" PADATA type in krb5.hin, and we said, "We've got to fix that when we get the real one assigned" ... and we never did. Noticed by Ezra Peisach. Also, the definition for sam-pk-for-sad was changed to OCTET STRING from EncryptionKey in the draft and the code, but we never updated the ASN.1 definition. Also noticed by Ezra Peisach. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14945 dc483132-0cff-0310-8789-dd5450dbe970
* * localaddr.c (print_addr) [TEST]: Don't mix size_t and socklen_t, just assumeKen Raeburn2002-10-282-7/+9
| | | | | | | socklen macro will return a socklen_t value. Cast buffer size to socklen_t in getnameinfo call. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14944 dc483132-0cff-0310-8789-dd5450dbe970
* * get_in_tkt.c (conf_yes, conf_no): Now const. References updated.Ken Raeburn2002-10-284-11/+19
| | | | | | | | * preauth.c (preauth_systems): Now const. References updated. * preauth2.c (pa_types): Now const. (krb5_do_preauth): Local array paorder now const. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14943 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_KRB5_TCL): If --with-tcl is given, failure to find a libraryKen Raeburn2002-10-282-1/+11
| | | | | | we can use is now an error. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14942 dc483132-0cff-0310-8789-dd5450dbe970
* If we get cannot resolve KDC for master but find a slaveSam Hartman2002-10-282-1/+6
| | | | | | | | return the real error from the slave rather than the resolution error. ticket: 1232 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14941 dc483132-0cff-0310-8789-dd5450dbe970
* Don't include trailing null in the transited encoding produced by the KDC.Sam Hartman2002-10-282-2/+6
| | | | | | | | | | Other routines do not expect the null to be included in the length so policy checks fail. Also, sending the null over the wire is wrong. ticket: 1230 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14940 dc483132-0cff-0310-8789-dd5450dbe970
* Client code lacks support for draft-ietf-krb-wg-kerberos-sam-01.txtKen Hornstein2002-10-2421-7/+1228
| | | | | | | | | | | This widely-spread commit implements support for the so-called "new" hardware preauth protocol, defined in the IETF internet-draft draft-ietf-krb-wg-kerberos-sam-01.txt. Note that this code is client-side only. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14939 dc483132-0cff-0310-8789-dd5450dbe970
* No support for negative password expiration last-req hintKen Hornstein2002-10-242-2/+4
| | | | | | | | | Fixing an omission; previous code didn't support a negative value for the password expiration hint (which is legal). Pointed out by Ezra Peisach. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14938 dc483132-0cff-0310-8789-dd5450dbe970
* Implement asn1_encode_enumeratedSam Hartman2002-10-234-4/+51
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14937 dc483132-0cff-0310-8789-dd5450dbe970
* gic_pwd doesn't support password expiration notification via last_req hintKen Hornstein2002-10-234-1/+52
| | | | | | | | | | | | | | In kerberos-clarifications, a new last-req type (6) has been specified that indicates when a principal's password will expire. This code implements support for this last-req type. Note that the intent is that the last-req type will only be included by the KDC when the time until password expiration reaches some threshold (e.g, one week), so this code will display the password expiration anytime the last-req type is included. ticket: 1065 ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14936 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpcmd.y: Bison 1.75 cleanup. Essentially remove `=' beforeEzra Peisach2002-10-232-78/+83
| | | | | | | | statements to be executed. ticket: 1218 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14935 dc483132-0cff-0310-8789-dd5450dbe970
* * sendto_kdc.c (service_tcp_fd): If DEBUG defined, ensure thatEzra Peisach2002-10-222-1/+7
| | | | | | initialization of variable not bypassed by goto. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14934 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Autoconf 2.55 will not simply use cpp to test forEzra Peisach2002-10-222-1/+17
| | | | | | | | | header file existance - the header file must be compilable. This will mean that if one header depends on another, it must be included. Test for term.h using the optional fourth argument to AC_CHECK_HEADERS to specify include files to test. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14933 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes the test suite aspects. Callers of the variousTom Yu2002-10-193-5/+14
| | | | | | | | | | | | | | | read_password functions still need to be updated. * api.2/init-v2.exp (test106): Make regexp more forgiving of variant password prompts. * api.0/init.exp (test7, test22, test225): Make regexp more forgiving of variant password prompts. ticket: 1217 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14932 dc483132-0cff-0310-8789-dd5450dbe970
* * start_servers_local: Set names of replay cache and log files to be per-user,Ken Raeburn2002-10-182-3/+10
| | | | | | since they're in system-wide shared directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14931 dc483132-0cff-0310-8789-dd5450dbe970
* * start_servers_local: Telnet to 127.0.0.1, not "localhost", to probe forKen Raeburn2002-10-162-1/+9
| | | | | | kadmind, since kadmind does IPv4 only. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14930 dc483132-0cff-0310-8789-dd5450dbe970
* ver.h to winver.h ver.h has become depricated by MS. Using winver.h will ↵Paul Hill2002-10-162-2/+2
| | | | | | support MSVC 6 and 7 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14929 dc483132-0cff-0310-8789-dd5450dbe970
* Thanks, (corrected) patch appliedTom Yu2002-10-153-2/+10
| | | | | | | | | | | | * hst_realm.c (krb5_try_realm_txt_rr): Apply patch from Nalin Dahyabhai to bounds-check return value from res_search(). * locate_kdc.c (krb5_locate_srv_dns_1): Apply patch from Nalin Dahyabhai to bounds-check return value from res_search(). ticket: 1216 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14928 dc483132-0cff-0310-8789-dd5450dbe970
* * server_init.c (kadm5_lock, kadm5_unlock): Return KADM5_OKEzra Peisach2002-10-152-0/+9
| | | | | | instead of falling off end of function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14927 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (CONFIG_RULES): Define using AC_DEFUNKen Raeburn2002-10-121-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14926 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Use dnl after all AC_REQUIRE invocations.Ken Raeburn2002-10-122-43/+56
| | | | | | | | | | | | | | | (KRB5_AC_FORCE_STATIC): New macro. Warn if invoked after KRB5_LIB_AUX. (KRB5_BUILD_LIBRARY_STATIC): Require it. (CHECK_SIGPROCMASK, AC_PROG_ARCHIVE, AC_PROG_ARCHIVE_ADD, CHECK_DIRENT, CHECK_WAIT_TYPE, CHECK_SIGNALS, KRB5_SIGTYPE, CHECK_SETJMP, WITH_KRB4, ADD_DEF, KRB_INCLUDE, K5_GEN_MAKEFILE, _K5_GEN_MAKEFILE, K5_GEN_FILE, K5_AC_OUTPUT, V5_AC_OUTPUT_MAKEFILE, CHECK_UTMP, WITH_NETLIB, KRB5_BUILD_LIBRARY_STATIC): Define using AC_DEFUN instead of define. Doesn't change the generated configure scripts except for changing (mostly deleting) whitespace. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14925 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (WITH_CC_DEPRECATED_ARG): New macro.Ken Raeburn2002-10-112-6/+8
| | | | | | (WITH_CC): Require it, and AC_PROG_CC. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14924 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (CONFIG_RULES): Comment out code looking for the in-tree versionKen Raeburn2002-10-112-8/+14
| | | | | | of autoconf that we deleted. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14923 dc483132-0cff-0310-8789-dd5450dbe970
* implement krb5_read_password, des_read_password via krb5_prompter_posixTom Yu2002-10-112-5/+15
| | | | | | | | | | | | | | | | | | This commit fixes one incompatibility introduced when krb5_read_password was reimplemented in terms of krb5_prompter_posix. There is a remaining incompatibility, which is krb5_prompter_posix's appending of the string ": " following a prompt. Callers of krb5_read_password and of des_read_password don't expect this behavior, which results in a double colon prompt, which breaks the libkadm5 test suite. * read_pwd.c (krb5_read_password): Restore name of size_return. Set *size_return after successful call to krb5_prompter_posix, since some callers were actually checking, e.g. kadm5. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14922 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit (git 2.34.1) at 2026-03-24 03:59:15 +0000