summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* * configure.in: Update to new library build systemTom Yu1997-11-193-42/+22
| | | | | | * Makefile.in: Update to new library build system. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10291 dc483132-0cff-0310-8789-dd5450dbe970
* * lib.in (clean-libs): Remove lib$(LIB)$(SHLIBSEXT) as wellTom Yu1997-11-192-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10290 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Garbage collect some old library build systemTom Yu1997-11-183-16/+5
| | | | | | stuff. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10289 dc483132-0cff-0310-8789-dd5450dbe970
* * krshd.c: Don't set checksum_ignored to 1 if checksum_required isTom Yu1997-11-182-4/+7
| | | | | | | 0; also, if a krb5 client passes in a checksum, check it regardless of whether checksum_required is true. [krb5-appl/500] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10286 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context),Theodore Tso1997-11-167-12/+99
| | | | | | | | | | | | | | | | init_sec_context.c (krb5_gss_init_sec_context), inq_cred.c (krb5_gss_inquire_cred): Call krb5_gss_validate_cred to make sure the credential handle is still valid. * val_cred.c (krb5_gss_validate_cred): New file which validates the credential to make sure it is valid, including checking to make sure the credentials cache still points at the same krb5 principal as it did before. * accept_sec_context.c (krb5_gss_accept_sec_context): Return GSS_S_FAILURE if a non-NULL context handle is passed to it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10285 dc483132-0cff-0310-8789-dd5450dbe970
* (Wrong version of Changelog committed previously)Theodore Tso1997-11-161-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10284 dc483132-0cff-0310-8789-dd5450dbe970
* Return GSS_S_FAILURE if a non-NULL context handle is passed to itTheodore Tso1997-11-162-3/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10283 dc483132-0cff-0310-8789-dd5450dbe970
* do_tgs_req.c (process_tgs_req): Only try to return a TGT for aTheodore Tso1997-11-142-1/+7
| | | | | | | "closer" realm if the request was for a TGT in the first place. [krb5-kdc/459] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970
* libupdate.sh: Add semicolons to prevent Bash 2.0 from complaining.Theodore Tso1997-11-142-2/+7
| | | | | | [krb5-build/486] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10279 dc483132-0cff-0310-8789-dd5450dbe970
* * forward.c (rd_and_store_for_creds): Don't do the chown. AvoidsTom Yu1997-11-133-20/+25
| | | | | | | | | a security hole. [krb5-appl/494] * krshd.c (recvauth): chown the ccache explicitly, as rd_and_store_for_creds no longer does so. [krb5-appl/494] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10277 dc483132-0cff-0310-8789-dd5450dbe970
* * do_as_req.c (process_as_req): Reset master key after closing andEzra Peisach1997-11-122-0/+8
| | | | | | | reopening DB when KDC_UPDATES_KDB compiled in. [krb5-kdc/495 by Tony Mione] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10276 dc483132-0cff-0310-8789-dd5450dbe970
* scc_maybe.c: Added kludge for the Macintosh, since fopen() doesn't setTheodore Tso1997-11-112-2/+47
| | | | | | errno, although open() does. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10272 dc483132-0cff-0310-8789-dd5450dbe970
* send_tgs.c (krb5_send_tgs): Don't send a zero endtime; if theTheodore Tso1997-11-112-1/+7
| | | | | | requested endtime is zero, set it equal to the TGT endtime. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10271 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_util.c (kdc_process_tgs_req): If not using the reply cache,Theodore Tso1997-11-112-1/+9
| | | | | | properly handle a failure return from krb5_rd_req_decode_anyflag(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10270 dc483132-0cff-0310-8789-dd5450dbe970
* * gssftp.exp: Replace "else if" with "elseif" as expect 5.25Ezra Peisach1997-11-092-1/+6
| | | | | | requires it. [krb5-misc/487] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10269 dc483132-0cff-0310-8789-dd5450dbe970
* Use error_message(errno) instead of using sys_errlist[errno]. ThisTheodore Tso1997-11-072-55/+60
| | | | | | | | avoids the hair of deciding whether or not we need to declare sys_errlist or use strerror(), etc., since com_err has all of that complexity anyway. Also fixed lots of -Wall nits. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10268 dc483132-0cff-0310-8789-dd5450dbe970
* * krlogind.c (doit): Fix up potential buffer overrun.Tom Yu1997-11-054-4/+19
| | | | | | | | | | [krb5-appl/488] * krlogin.c (main): Fix up potential buffer overrun. * krcp.c (hosteq): Fix up potential buffer overrun. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10267 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (kdb_check): Reinstated kdb checksEzra Peisach1997-11-042-2/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10266 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_util.c: Add flag indicating that policy db is to be closed.Ezra Peisach1997-11-044-4/+29
| | | | | | | | | | | | Change '-f" option to "-sf" to indicate stash file on command line. * kdb5_stash.c (kdb5_stash): Indicate that policy db should be closed, free context when done. * kadm5_create.c (kadm5_create): Fix up memory leaks. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10265 dc483132-0cff-0310-8789-dd5450dbe970
* * md5.c: Fix to deal with types longer than 32 bitsTom Yu1997-10-284-2/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10259 dc483132-0cff-0310-8789-dd5450dbe970
* * shs.c, sha_glue.c, hmac_sha.c: Fix to deal with LONG wider thanTom Yu1997-10-285-74/+183
| | | | | | | | 32 bits. * t_shs.c: Print out the actual and expected values on error. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10258 dc483132-0cff-0310-8789-dd5450dbe970
* * pty-int.h: Do not prototype initialize_pty_error_table asEzra Peisach1997-10-282-1/+5
| | | | | | pty-err.h does as well. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10257 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (WITH_NETLIB): Use AC_LIBRARY_NET.Ezra Peisach1997-10-282-4/+62
| | | | | | | (AC_LIBRARY_NET): Written by jhawk@mit.edu to better determine if libsocket and libnsl are needed. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10256 dc483132-0cff-0310-8789-dd5450dbe970
* * ktf_wreslv.c, ktf_resolv.c:Initialize version element ofEzra Peisach1997-10-283-0/+7
| | | | | | krb5_ktfile_data structure. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10255 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_cpw.c (add_key_pwd): For KRB5_KDB_SALTTYPE_AFS3, the saltEzra Peisach1997-10-282-0/+19
| | | | | | key for afs_mit_string_to_key mut be null terminated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10254 dc483132-0cff-0310-8789-dd5450dbe970
* * pcbc_encrypt.c, quad_cksum.c: Punt duplicates of definitions;Tom Yu1997-10-274-82/+26
| | | | | | | | | | use local des.h only, as that appears to be safe. Also, replace uses of KRB_INT32 with DES_INT32 to remove temptation to misuse. * des.h: Don't include k5-int.h any longer, as des_int.h already gets it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10253 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_cbc.c, des.h, des_int.h, f_cbc.c, f_cksum.c, f_ecb.c,Tom Yu1997-10-2713-102/+103
| | | | | | | | | | | f_pcbc.c, f_sched.c, f_tables.c, f_tables.h: Change KRB_INT32 to DES_INT32 to avoid temptation to misuse. * d3_cbc.c, d3_ecb.c, f_cbc.c, f_cksum.c, f_ecb.c, f_parity.c, f_pcbc.c, f_sched.c, f_tables.c: Don't include des.h; it's broken in ways. Use only des_int.h instead. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10252 dc483132-0cff-0310-8789-dd5450dbe970
* * des.h: Replace KRB_INT32 with DES_INT32 to avoid temptation toTom Yu1997-10-272-7/+12
| | | | | | misuse. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10251 dc483132-0cff-0310-8789-dd5450dbe970
* * mac_time.c: Don't use the type KRB_INT32; it was leaked fromTom Yu1997-10-272-2/+10
| | | | | | | | des.h and was just the wrong answer. Use long instead. While we're at it, declare gettimeofdaynet_no_offset() as static because we have no real need to export it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10250 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (CFILES): Add $(srcdir)Ezra Peisach1997-10-242-4/+11
| | | | | | Allows make depend to run, git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10249 dc483132-0cff-0310-8789-dd5450dbe970
* Prohibit the passing of TERMCAP, TERMPATH, TERMINFO, and HOME, sinceTheodore Tso1997-10-232-0/+10
| | | | | | they can be used to exploit a security in tgetent. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10248 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_server.h: Declare kadm_context as extern so it will not beEzra Peisach1997-10-232-1/+6
| | | | | | multiply defined in all source files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10247 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (TCL_WITH): Check for libtcl8.0Ezra Peisach1997-10-232-3/+15
| | | | | | The test release of dejagnu now comes with it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10246 dc483132-0cff-0310-8789-dd5450dbe970
* Fix simple shell test for tcl testsEzra Peisach1997-10-221-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10245 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_KRB5_TCL): Rewritten for clearerEzra Peisach1997-10-222-9/+34
| | | | | | understanding. Check for libtcl7.6 and tcl/tcl.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10244 dc483132-0cff-0310-8789-dd5450dbe970
* Include either tcl.h or tcl/tcl.h. On debian linux, the tcl development headersEzra Peisach1997-10-227-0/+29
| | | | | | live in a subdir. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10243 dc483132-0cff-0310-8789-dd5450dbe970
* Add checks so that code doesn't bomb out if the version resource isTheodore Tso1997-10-222-0/+14
| | | | | | missing a Title or Version record. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10242 dc483132-0cff-0310-8789-dd5450dbe970
* Fix to not lose entries in the chain linked client listEzra Peisach1997-10-212-1/+16
| | | | | | | | | A pointer was not being updated resulting in the situation where random clients would sudenly fail with a misc. rpc. error as the client handle could not be found. The scenario required three active clients to trigger the problem. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10241 dc483132-0cff-0310-8789-dd5450dbe970
* Set KRB5_CONFIG for testsEzra Peisach1997-10-212-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10240 dc483132-0cff-0310-8789-dd5450dbe970
* Include string.h/strings.h for memcpy prototypeEzra Peisach1997-10-212-3/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10239 dc483132-0cff-0310-8789-dd5450dbe970
* Include stdlib.h if available for malloc prototypeEzra Peisach1997-10-212-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10238 dc483132-0cff-0310-8789-dd5450dbe970
* Explicitly set the owner of the files which are installed setuid rootTheodore Tso1997-10-202-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10237 dc483132-0cff-0310-8789-dd5450dbe970
* If we are using prototypes, add a forward declaration for structTheodore Tso1997-10-202-0/+9
| | | | | | sockaddr_in. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10236 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c: Change KERBEROS to KRB5_KRB4_COMPAT where appropriateTom Yu1997-10-165-91/+107
| | | | | | | | | | | | | | | * secure.c: Use <secure.h> rather than "secure.h" so that the correct secure.h gets included (the one in the $(srcdir) of the directory we're compiling secure.c into). From danw@mit.edu. * ftp.c: Change KERBEROS to KRB5_KRB4_COMPAT where appropriate. Re-order the clauses so that that GSSAPI gets tried before KERBEROS_V4. * Makefile.in: Update LOCALINCLUDE and the link line to DTRT with krb4 compatibility. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10235 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Change LOCALINCLUDE and the link line to allow forTom Yu1997-10-163-56/+73
| | | | | | | | | | | krb4 compatibility. * ftpd.c: Change KERBEROS to KRB5_KRB4_COMPAT where appropriate. (reply): Fix up braces around the check for auth_type == "KERBEROS_V4" so that the nesting of if statements is correct. Various and sundry fixes from danw@mit.edu to make it work. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10234 dc483132-0cff-0310-8789-dd5450dbe970
* * server_stubs.c (CHANGEPW_SERVICE): Modify to free allocatedEzra Peisach1997-10-153-3/+46
| | | | | | | | | | | | | | | | | | | memory in request. (setup_gss_names): Free memory in case of failure. (chrand_principal_1): Call free_server_handle for failure cleanup. * ovsec_kadmd.c (main): Cleanup memory by calling acl_finish, gss_release_name, and krb5_free_context Some of these fixes are to make accounting easier with Purify upon shutdown while the server_stubs.c fixes take care of a per-request memory leak present for many requests. automatically CVS: CVS: Committing in . CVS: CVS: Modified Files: ---------------------------------------------------------------------- git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10233 dc483132-0cff-0310-8789-dd5450dbe970
* Real fix this time - deals with the malloc(0) case..Ezra Peisach1997-10-141-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10232 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (LIBMAJOR): Bump major version due to possibleTom Yu1997-10-142-1/+6
| | | | | | change in type sizes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10231 dc483132-0cff-0310-8789-dd5450dbe970
* * des.h: Define KRB_INT32 for the purposes of dealing with the keyTom Yu1997-10-142-1/+26
| | | | | | | schedule. Also, define the key schedule more sanely. See related comments in lib/crypto/des. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10230 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Bump major version due to possible size changesTom Yu1997-10-142-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10229 dc483132-0cff-0310-8789-dd5450dbe970