| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
| |
* Makefile.in: Update to new library build system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10291 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10290 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
stuff.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10289 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
0; also, if a krb5 client passes in a checksum, check it
regardless of whether checksum_required is true. [krb5-appl/500]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10286 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
init_sec_context.c (krb5_gss_init_sec_context),
inq_cred.c (krb5_gss_inquire_cred): Call krb5_gss_validate_cred
to make sure the credential handle is still valid.
* val_cred.c (krb5_gss_validate_cred): New file which validates
the credential to make sure it is valid, including
checking to make sure the credentials cache still points
at the same krb5 principal as it did before.
* accept_sec_context.c (krb5_gss_accept_sec_context): Return
GSS_S_FAILURE if a non-NULL context handle is passed to it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10285 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10284 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10283 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
"closer" realm if the request was for a TGT in the first place.
[krb5-kdc/459]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
[krb5-build/486]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10279 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
a security hole. [krb5-appl/494]
* krshd.c (recvauth): chown the ccache explicitly, as
rd_and_store_for_creds no longer does so. [krb5-appl/494]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10277 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reopening DB when KDC_UPDATES_KDB compiled
in. [krb5-kdc/495 by Tony Mione]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10276 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
errno, although open() does.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10272 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
requested endtime is zero, set it equal to the TGT endtime.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10271 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
properly handle a failure return from krb5_rd_req_decode_anyflag().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10270 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
requires it. [krb5-misc/487]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10269 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
avoids the hair of deciding whether or not we need to declare
sys_errlist or use strerror(), etc., since com_err has all of that
complexity anyway. Also fixed lots of -Wall nits.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10268 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
[krb5-appl/488]
* krlogin.c (main): Fix up potential buffer overrun.
* krcp.c (hosteq): Fix up potential buffer overrun.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10267 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10266 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Change '-f" option to "-sf" to indicate stash file on
command line.
* kdb5_stash.c (kdb5_stash): Indicate that policy db should be
closed, free context when done.
* kadm5_create.c (kadm5_create): Fix up memory leaks.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10265 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10259 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
32 bits.
* t_shs.c: Print out the actual and expected values on error.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10258 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
pty-err.h does as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10257 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
(AC_LIBRARY_NET): Written by jhawk@mit.edu to
better determine if libsocket and libnsl are needed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10256 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
krb5_ktfile_data structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10255 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
key for afs_mit_string_to_key mut be null terminated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10254 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
use local des.h only, as that appears to be safe. Also, replace
uses of KRB_INT32 with DES_INT32 to remove temptation to misuse.
* des.h: Don't include k5-int.h any longer, as des_int.h already
gets it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10253 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
f_pcbc.c, f_sched.c, f_tables.c, f_tables.h: Change KRB_INT32 to
DES_INT32 to avoid temptation to misuse.
* d3_cbc.c, d3_ecb.c, f_cbc.c, f_cksum.c, f_ecb.c, f_parity.c,
f_pcbc.c, f_sched.c, f_tables.c: Don't include des.h; it's broken
in ways. Use only des_int.h instead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10252 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
misuse.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10251 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
des.h and was just the wrong answer. Use long instead. While
we're at it, declare gettimeofdaynet_no_offset() as static because
we have no real need to export it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10250 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Allows make depend to run,
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10249 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
they can be used to exploit a security in tgetent.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10248 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
multiply defined in all source files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10247 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
The test release of dejagnu now comes with it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10246 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10245 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
understanding. Check for libtcl7.6 and tcl/tcl.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10244 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
live in a subdir.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10243 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
missing a Title or Version record.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10242 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
A pointer was not being updated resulting in the situation where
random clients would sudenly fail with a misc. rpc. error as the client
handle could not be found. The scenario required three active clients
to trigger the problem.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10241 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10240 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10239 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10238 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10237 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
sockaddr_in.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10236 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* secure.c: Use <secure.h> rather than "secure.h" so that the
correct secure.h gets included (the one in the $(srcdir) of the
directory we're compiling secure.c into). From danw@mit.edu.
* ftp.c: Change KERBEROS to KRB5_KRB4_COMPAT where appropriate.
Re-order the clauses so that that GSSAPI gets tried before
KERBEROS_V4.
* Makefile.in: Update LOCALINCLUDE and the link line to DTRT with
krb4 compatibility.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10235 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
krb4 compatibility.
* ftpd.c: Change KERBEROS to KRB5_KRB4_COMPAT where appropriate.
(reply): Fix up braces around the check for auth_type ==
"KERBEROS_V4" so that the nesting of if statements is correct.
Various and sundry fixes from danw@mit.edu to make it work.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10234 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
memory in request.
(setup_gss_names): Free memory in case of failure.
(chrand_principal_1): Call free_server_handle for failure
cleanup.
* ovsec_kadmd.c (main): Cleanup memory by calling acl_finish,
gss_release_name, and krb5_free_context
Some of these fixes are to make accounting easier with Purify upon
shutdown while the server_stubs.c fixes take care of a per-request memory
leak present for many requests.
automatically CVS: CVS: Committing in . CVS: CVS: Modified Files:
----------------------------------------------------------------------
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10233 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10232 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
change in type sizes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10231 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
schedule. Also, define the key schedule more sanely. See related
comments in lib/crypto/des.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10230 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10229 dc483132-0cff-0310-8789-dd5450dbe970
|