1999-06-30 Ken Raeburn * Makefile.in (CFLAGS): Define NOCACHE. (DEFINES): Commented out, since it's unused. * dispatch.c (dispatch): If NOCACHE is defined, don't call lookaside buffer code. * replay.c: Disable all code if NOCACHE is defined. 1999-06-28 Tom Yu * replay.c (MATCH): Fix up to compare the correct components of the input address. Fri Apr 30 00:05:07 1999 Tom Yu * kerberos_v4.c (kerberos_v4): Fix bug where krb_create_ticket() was getting called for an APPL_REQUEST even when there was no single-DES key, resulting in random weirdness. Wed Feb 17 17:07:43 1999 Tom Yu * do_as_req.c (process_as_req): Fix to assign kvno to reply.enc_part after encryption, since krb5_c_encrypt() now explicitly initializes all fields of a krb5_enc_data. 1998-12-17 Theodore Ts'o * kdc_preauth.c (check_padata): If preauth fails because the preauth data from the client was of an unknown type, and the principal does not require preauth, then the preauth should be disregarded. [krb5-kdc/652] Mon Jan 4 23:50:45 1999 Tom Yu * configure.in (withval): Conditinalize ATHENA_DES3_KLUDGE on --enable-athena. * main.c (initialize_realms): Kludge to disable des3-marc-hmac-sha1 from the command line. 1998-11-13 Theodore Ts'o * Makefile.in: Set the myfulldir and mydir variables (which are relative to buildtop and thisconfigdir, respectively.) 1998-10-27 Marc Horowitz * do_as_req.c, do_tgs_req.c, extern.h, kdc_preauth.c, kdc_util.c, kerberos_v4.c, main.c: conver to new crypto api. Fri Sep 25 19:47:26 1998 Tom Yu * kerberos_v4.c (check_princ): Re-order if statements that check for null keys to make Purify shut up. Thu Sep 17 18:21:51 1998 Tom Yu * kdc_util.c (kdc_get_server_key): Fix to not use cached tgs key to prevent lossage when it might be out of date by always fetching the correct kvno for the ticket out of the database. Tue Sep 1 19:34:30 1998 Tom Yu * kerberos_v4.c (compat_decrypt_key): Add ENCTYPE_LOCAL_DES3_HMAC_SHA1 to the list of keytypes to bash. (kerb_get_principal): Add ENCTYPE_LOCAL_DES3_HMAC_SHA1 to the list of searched enctypes. Wed Aug 19 13:37:00 1998 Tom Yu * kerberos_v4.c (set_tgtkey): Add kvno arg to fetch an explicit kvno. Also compare kvno as well as realm when caching the TGT key. Declare as static. (kerb_get_principal): Add kvno argument to permit searching for an explicit kvno. (kerberos_v4): Extract the kvno directly out of the krb_req, since we know what the format is. Wed Aug 12 18:40:08 1998 Tom Yu * kerberos_v4.c: Add macro K4KDC_ENCTYPE_OK to determine whether a given enctype is compatible with single-DES krb4. (compat_decrypt_key): Declare as static. Change call signature to include an output krb5_keyblock as well as an input to determine whether the principal should be treated as a service principal. Bash the enctype of the keyblock to raw des3 if it's full-blown des3. (kerb_get_principal): Add k5key and issrv arguments as in compat_decrypt_key, mostly to pass them on there. Hardcode a search order that includes des3 for looking up service keys. (kerberos_v4): Call krb_create_ticket or krb_cr_tkt_krb5 as appropriate to the key type. While we're at it, s/ktbtgt/krbtgt/ just to avoid confusing people. (check_princ): Add k5key and issrv args for as in compat_decrypt_key. Fix up null key detection to only operate if it's a single-des key. (set_tgtkey): Call krb_set_key_krb5 if appropriate. Tue Jul 21 20:29:38 1998 Tom Yu * replay.c (kdc_check_lookaside): (kdc_insert_lookaside): Add code to originating address of packet, as krb4 initial ticket requests don't contain an address. This would cause a subtle problem wherein two simultaneous krb4 initial ticket requests for the same principal originating from different addresses would result in both replies containing the same address. * kdc_util.h: Modify prototype for lookaside functions. * dispatch.c (dispatch): Update to new calling conventions of the lookaside functions. Wed Jul 15 18:32:07 1998 Tom Yu * configure.in: Add CHECK_SIGNALS so that POSIX_SIGNALS gets defined. * main.c (request_hup): Remove call to signal, as this isn't needed on BSD-ish systems and for sysV-ish systems we use sigaction anyway. (setup_signal_handlers): Fix typo. Sat Jul 11 01:38:05 1998 Geoffrey King * main.c: Added a call to signal() in request_hup() so that the signal handler gets reset after each SIGHUP, since this does not happen automatically in System V's signal handling system. Wed Jul 8 04:36:28 1998 Geoffrey King * extern.h: Added declaration for new variable signal_requests_hup, which is set when the KDC is sent a SIGHUP * extern.c: Added definition for signal_requests_hup * main.c: Added new signal handling code for SIGHUP, including the new function request_hup() * network.c: Check signal_requests_hup in the main KDC loop Fri May 8 18:46:59 1998 Theodore Y. Ts'o * kerberos_v4.c (krb4_stime): Print 4 digit years in Krb4 log entries to avoid Y2K issues. 1998-05-06 Theodore Ts'o * main.c (initialize_realms): POSIX states that getopt returns -1 when it is done parsing options, not EOF. Fri Mar 20 17:13:46 1998 Tom Yu * kdc_util.c (add_to_transited): Check lengths, fix up comma quoting somewhat (though things are still way broken). Fri Feb 20 15:58:21 1998 Theodore Y. Ts'o * kdc_preauth.c (get_preauth_hint_list): Don't add the pseudo preauth type KRB5_PADATA_PW_SALT to the hint list of supported preauthentication systems, since it doesn't help to send it. (And it may screw up Cygnus KerbNet clients.) Wed Feb 18 16:04:22 1998 Tom Yu * Makefile.in (thisconfigdir): Remove trailing slash. Mon Feb 2 17:02:29 1998 Theodore Ts'o * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile Thu Feb 5 19:17:25 1998 Tom Yu * kerberos_v4.c: Move macro definition of klog earlier so that it actually gets used inside process_v4(). Wed Feb 4 14:15:20 1998 Theodore Y. Ts'o * kerberos_v4.c (process_v4): Check the length of the incoming V4 packet before copying it into the KTEXT_ST variable. (kerberos_v4): Make sure the strings in the V4 request structures aren't no longer than they are allowed to be. Wed Jan 28 08:56:07 1998 Ezra Peisach * krb5kdc.M: Document V4 mode handling [krb5-kdc/464]. Wed Jan 21 15:15:58 1998 Ezra Peisach * rtest.c (main): returns int, not void. ANSI X3.159-1989 2.1.2.2.1 says so, and gcc now warns about it. Fri Jan 16 03:33:50 1998 Tom Yu * do_tgs_req.c: Add some explicit settings of errcode so that the cleanup code doesn't try to construct a bogus error reply, which was causing coredumps in the lookaside code. Thu Dec 11 23:29:41 1997 Tom Yu * kerberos_v4.c: Don't include sys/socket.h or netdb.h, as krb.h already gets those and Ultrix doesn't protect them against multiple inclusion. Mon Nov 24 19:57:48 1997 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): Add check to make sure cname and sname are non-NULL when syslogging an error because the principals don't match. * kdc_util.c (limit_string): Check to make sure the input string is non-NULL before operating on it. Thu Nov 13 20:40:01 1997 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): Only try to return a TGT for a "closer" realm if the request was for a TGT in the first place. [krb5-kdc/459] Wed Nov 12 14:47:46 1997 Ezra Peisach * do_as_req.c (process_as_req): Reset master key after closing and reopening DB when KDC_UPDATES_KDB compiled in. [krb5-kdc/495 by Tony Mione] Mon Nov 10 20:03:14 1997 Theodore Y. Ts'o * kdc_util.c (kdc_process_tgs_req): If not using the reply cache, properly handle a failure return from krb5_rd_req_decode_anyflag(). Wed Oct 8 12:20:35 1997 Ezra Peisach * main.c (main): Initialize kdc error table with initialize_kdc_error_table(). Thu Sep 25 21:19:08 1997 Tom Yu * network.c: Replace KRB5_USE_IENT with something more sane. * do_tgs_req.c: Replace KRB5_USE_INET with something more sane. * main.c: Replace KRB5_USE_INET with something more sane. * do_as_req.c: Replace KRB5_USE_INET with something more sane. Wed Sep 24 11:56:50 1997 Ezra Peisach * kdc_util.c (add_to_transited): Fix up memory leaks, clean out new memory allocated, allocate buffers to max size needed. [based on krb5-kdc/461 by Ken Hornstein]. * rtest.c: Rewrite code to use context and current krb5_principal structure. * configure.in: Add KRB5_RUN_FLAGS * Makefile.in (rtest): Compile rtest and run during make check. Tue Sep 23 13:25:35 1997 Ezra Peisach * kerberos_v4.c (check_princ): Add checks for V5 kdc flags including REQUIRES_PWCHANGE, DISALLOW_ALL_TIX, REQUIRES_PREAUTH. Adds support for parsing the V4 options. [krb5-kdc/464]. * main.c (main): Add option -4 to specify V4 handling mode. Mon Aug 18 12:29:08 1997 Ezra Peisach * do_tgs_req.c (process_tgs_req): Initialize authtime to 0 so it is set before potentially used in case the packet has an error. * kdc_preauth.c (get_sam_edata): Remove unused variables. * kdc_util.h: Added prototype for setup_server_realm(). * main.c (get_realm_port): Removed unused function. (setup_server_realm): Moved prototype to kdc_util.h Wed Jul 30 18:29:19 1997 Tom Yu * kdc_util.c: * main.c: Don't use an rcache. Fri Jul 25 15:44:07 1997 Tom Yu * main.c (init_realm): Fix to use new ktkdb. Tue Jul 15 01:55:56 1997 Tom Yu * kdc_preauth.c (get_sam_edata): Don't goto cleanup if SAM is not used; this prevents freeing an unallocated keyblock. Thu May 29 21:08:24 1997 Theodore Y. Ts'o * do_as_req.c (process_as_req), do_tgs_req (process_tgs_req): Use limit_string() to make sure the length of cname and sname are reasonable. * kdc_util.c (limit_string): New function which limits the strings that will end up in log files to "reasonable" lengths. Tue Feb 18 09:56:16 1997 Ezra Peisach * kerberos_v4.c: Remove include of krb4-proto.h Tue Feb 18 18:51:09 1997 Richard Basch * do_as_req.c do_tgs_req.c kdc_preauth.c kdc_util.c main.c replay.c kerberos_v4.c: Replace krb5_xfree with appropriate free routine. Thu Feb 6 00:09:46 1997 Richard Basch * Makefile.in: Remove logger.c target before copying over it. This avoids permission problems if the source is read-only and later changes. Wed Jan 1 22:56:16 1997 Ezra Peisach * kdc_preauth.c (get_sam_edata): Use proper interface to krb5_db_get_principal. Also if SAM is not an option, do not return as a possible type to client. [krb5-kdc/310] Fri Jan 31 21:39:04 1997 Ezra Peisach * Makefile.in (LOCALINCLUDE): Change KRB4_INCLUDE to KRB4_INCLUDES Fri Jan 31 19:45:13 1997 Tom Yu * Makefile.in: * configure.in: Update to new program build procedure. Sat Nov 23 17:26:22 1996 Mark Eichin * [krb5-libs/149] only generate requests that you can actually handle. Tue Sep 3 22:53:56 1996 Mark Eichin * kdc_preauth.c (get_preauth_hint_list): detect ap->get_edata return status and don't pass back hint if it failed. (get_etype_info): malloc one more word in entry for end marker. Wed Nov 20 11:25:05 1996 Barry Jaspan * main.c (initialize_realms): krb5_aprof_init can succeed while leaving aprof == NULL, but krb5_aprof_finish will fail. This is just more grossness that needs to be redone when the kdc.conf interface is reworked. Thu Nov 7 12:27:21 1996 Theodore Ts'o * kdc_preauth.c (check_padata): Fixed error handling; in order for check_preauth to return successfully, there must be at least one preauth which succeeded, and no REQUIRED preauth system which failed. If a preauth is marked SUFFICIENT, then the rest of the preauth list aren't checked. Fixed bug where when none of the preauth types were recognized, an error message corresponding to stack garbage was printed. Wed Nov 6 12:00:48 1996 Theodore Ts'o * main.c (argv): Check the error return from krb5_init_context(), and print an error message if necessary. Mon Nov 4 22:29:30 1996 Theodore Y. Ts'o * main.c (initialize_realms): Remove rather pointless use of krb5.conf to find the kdc.conf used to get the default port list. It's not useful for anything else, and will just confuse people. (init_realm): Reformat function to be readable. Add error checking to call of krb5_read_realm_params Wed Sep 18 16:03:26 1996 Theodore Y. Ts'o * kdc_util.c: Added magic number to initializer of nolrentry. Tue Sep 10 14:18:41 1996 Tom Yu * krb5kdc.M: remove ".so man1/header.doc" Fri Aug 23 14:22:45 1996 Sam Hartman * kerberos_v4.c (check_princ): Assume an expiration date of zero means never expire. Thu Aug 1 11:13:46 1996 Ezra Peisach * configure.in (withval): Link -ldyn as it is needed by the kadm5 shared library. Wed Jul 24 02:29:19 1996 Sam Hartman * kerberos_v4.c (set_tgtkey): s/KRB4_#@/krb5_ui_4 so we work with athena Kerberos. Tue Jul 23 22:26:29 1996 Theodore Y. Ts'o * Makefile.in: Build logger.o from the libkadm5 directory. This is prepatory work towards eliminating the dependency on libkadm5. Ultimately we will probably need to rethink how the library structure for krb5.... * configure.in: Add -lgssapi and -lgssrpc to libraries linked with krb5kdc since they are needed for shared libraries. This is a horrible hack.... Thu Jun 13 22:09:34 1996 Tom Yu * configure.in: remove ref to ET_RULES Sun Jun 9 23:03:06 1996 Ezra Peisach * main.c (finish_realm): Do not invoke krb5_finish_key if encryption block is not set. Sun May 12 01:17:05 1996 Marc Horowitz * configure.in: USE_KADM_LIBRARY replaced by USE_KADMSRV_LIBRARY Tue May 7 18:19:59 1996 Ken Raeburn Thu May 2 22:52:56 1996 Mark Eichin * kdc_util.c (kdc_process_tgs_req): call krb5_rd_req_decoded_anyflag instead of krb5_rd_req_decoded, so that invalid tickets can be used to validate themselves. Add explicit check that if the ticket is TKT_FLG_INVALID, then KDC_OPT_VALIDATE was requested. Mon May 6 12:15:36 1996 Richard Basch * main.c: Fixed various abstraction violations where the code knew the internals of eblock->crypto_entry. Wed Feb 28 13:07:28 1996 Ezra Peisach * main.c: Move com_err.h after k5-int.h include. Tue Feb 27 17:33:44 1996 Richard Basch * main.c: Do not repeat random number generator initializations, as memory is allocated and never reclaimed. Also fixed the V4 random number generator initialization (a DES_CBC_CRC random number is generated and used as a seed for the V4 routine, but the generation function was being called with the wrong arguments). * do_as_req.c: Memory was occassionally being freed twice because the pointer was not re-initialized to NULL after it was freed. Sun Feb 25 16:04:10 1996 Mark W. Eichin * main.c (initialize_realms): missing indirection for conf_val in alternate profile code. (This should really be in a library...) Sat Feb 3 22:37:55 1996 Mark Eichin * network.c (add_port): sunos realloc doesn't handle a NULL pointer, so protect with a macro. Sat Feb 10 02:46:27 1996 Mark Eichin * main.c (initialize_realms): look for [kdc] profile=path for default alternate kdc profile (environment variable still overrides it.) Wed Feb 21 23:28:33 1996 Richard Basch * kerberos_v4.c: Improve checking of DES keys * main.c: Do not assume the master key is DES; instead initialize the V4 random key generator from a random key after the DES_CBC_CRC generator has been initialized. Tue Feb 20 16:50:59 1996 Theodore Y. Ts'o * kerberos_v4.c (kerberos_v4): Use strong random number generator * main.c (main): Initialize Kerberos V4's random number generator. Sat Jan 27 00:53:41 1996 Mark Eichin * network.c (setup_network): strtol is good enough for port number, and sunos doesn't have strtoul (and nothing else in the tree uses it.) (add_port): use proper old-style definition. Wed Dec 13 03:51:53 1995 Chris Provenzano (proven@mit.edu) * kerberos_v4.c : Remove mkvno for krb5_db_entry Tue Dec 12 01:10:34 1995 Chris Provenzano (proven@mit.edu) * extern.h: Added a krb5_keytab to the realm context. The keytab should be associated with a krb5_db_context which will make having a krb5_context unnecessary in the realm context. * kdc_util.c kdc_process_tgs_req(): Use the realm keytab instead of faking up a user-to-user key to pass to krb5_rd_req_decode(). * main.c: Added code to use the new database keytab routines. Mon Dec 11 16:58:31 1995 Chris Provenzano (proven@mit.edu) * kdc_preauth.c return_padata(): Initialize local variable "size" to 0 before using it. Thu Nov 30 20:57:11 1995 Tom Yu * kdc_preauth.c: #@&^(!! Ultrix cc sucks. Typedef to function pointer rather than function prototype to avoid lossage. Wed Nov 29 13:31:39 1995 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): Removed extra eblock argument from call to krb5_encode_kdc_rep. Fri Nov 17 22:41:37 1995 Theodore Y. Ts'o * do_as_req.c (process_as_req): Removed extra eblock argument from call to krb5_encode_kdc_rep. Mon Nov 13 19:40:50 1995 Theodore Y. Ts'o * kdc_util.h: Added new prototypes for return_padata() and check_padata(). * kdc_preauth.c (return_padata): New function which calls out to each preauth type to see if it is necessary to return preauth data or not. (return_pw_salt): New function responsible for returning the KRB5_PW_SALT preauth information. * do_as_req.c (process_as_req): Move creation of the PW_SALT preauthentication step into kdc_preauth.c. Call return_pdata() which is responsible for all padata info which is returned by the KDC in the KRB_AS_REP message. Thu Nov 9 00:05:55 1995 Theodore Y. Ts'o * kdc_preauth.c (get_etype_info): Added function to return the etype_info preauth hint to the client. * kdc_util.c (get_salt_from_key): Added new function which determines the salting information from the krb5_key_data structure. * main.c (kdc_initialize_rcache): Replace use of krb5_clockskew with context->clockskew. Wed Nov 8 02:57:15 1995 Theodore Y. Ts'o * kdc_util.c (): Added new helper functions dbentry_has_key_for_enctype(), dbentry_supports_enctype(), and select_session_keytype(). * kdc_preauth.c: Added support for the ENC_TIMESTAMP preauthentication scheme. * do_tgs_req.c (process_tgs_req): Fixed the keytype/enctype selection criteria for the server key, and the ticket session key. * do_as_req.c (process_as_req): Added calls to the kdc preauthentication verification routines. Fixed the keytype/enctype selection criteria for the client key, the server key, and the ticket session key. * main.c (finish_realm): Make sure all parts of the realm structure are freed properly. (main): Free the kcontext krb5_context. Fri Oct 6 00:07:49 1995 Theodore Y. Ts'o * kdc_preauth.c (get_preauth_hint_list): Fix missing indirection in get_hint_list. * kdc_util.c (validate_as_request): Remove preauthentication check; this is handled in do_as_req.c * do_tgs_req.c (process_tgs_req): Use a slightly more compressed logging format. * do_as_req.c (process_as_req): Unify the logging and error packet production, to make sure that both logging and an error packet is returned for each error condition. Pass e_data to prepare_as_error so that the proper preauthentication hint list can be passed back to the client. Thu Oct 5 21:23:12 1995 Theodore Y. Ts'o * network.c (setup_network): * main.c (initialize_realms): Massive revamp of how the network ports are setup. The default port list for a realm is read from [kdcdefaults]/kdc_ports from the kdc.conf file. For each realm, a list of ports can be specified in [realms]//kdc_ports. * extern.h (kdc_realm_t): Remove realm_pport and realm_sport, and added realm_ports. * do_tgs_req.c (process_tgs_req): * do_as_req.c (process_as_req): * dispatch.c (dispatch): Pass the portnumber of the incoming request down to process_as_req and process_tgs_req, instead of the boolean "is_secondary". * kerberos_v4.c (kerb_get_principal, kerberos_v4): Fix gcc -Wall flames, by fixing signed vs. unsigned types. Mon Sep 18 11:16:30 1995 Mark Eichin * main.c (init_realm): strdup KRB5_KDB_M_NAME if we use it, to avoid free'ing a constant later. Fri Sep 15 01:33:40 1995 Theodore Y. Ts'o * main.c (init_realm): Stop after finding the first TGS key which matches an entry in the key/salt list. (Typo; added missing '!') Sun Sep 10 10:51:29 1995 Ezra Peisach * main.c (init_realm): When checking for master key in valid enctypes, do not stop after checking only the first type. Wed Sep 06 14:20:57 1995 Chris Provenzano (proven@mit.edu) * do_as_req.c, do_tgs_req.c, kdc_util.c, kerberos_v4.c, main.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g Tue Sep 05 22:10:34 1995 Chris Provenzano (proven@mit.edu) * do_as_req.c, do_tgs_req.c, kerberos_v4.c, main.c: Remove krb5_enctype references, and replace with krb5_keytype where appropriate. Mon Sep 4 14:10:26 1995 Ezra Peisach * do_as_req.c, do_tgs_req.c, kdc_util.c, kdc_util.h, policy.c: Add const declarations to variables pointing to error strings in order to make everything self consistant. Fri Sep 1 23:28:29 1995 Theodore Y. Ts'o * kdc_preauth.c: New file, to contain the server-side preauthentication routines. * do_as_req.c (process_as_req): Move preauthentication code to kdc_preauth.c, for better modularity. * do_as_req.c (prepare_error_as): Add new argument to this function so that the e_data field may be passed in and included in the KRB_ERROR messsage which is passed back to the user. Mon Aug 21 17:03:53 EDT 1995 Paul Park (pjpark@mit.edu) * main.c - Interpret -k and -e arguments as strings instead of string representations of integers (e.g. -e des-cbc-md5). * krb5kdc.M - Remove "ascii representation of a decimal number". Thu Aug 17 13:49:14 EDT 1995 Paul Park (pjpark@mit.edu) * do_as_req.c - Close and re-open the database after performing a database update. This is the cleanest way to flush out the update without reorganizing the code. Wed Aug 16 02:45:19 1995 Chris Provenzano * do_as_req.c: Pass fds to krb5_lock_file() and krb5_unlock_file() * do_as_req.c: Add a missing #ifdef KRBCONF_KDC_MODIFIES_KDB for update_client and updating the database. Tue Aug 15 14:32:54 EDT 1995 Paul Park (pjpark@mit.edu) * extern.h - Add key/salt list to per-realm data. * main.c - Save or generate per-realm key/salt list. Use this list to determine which key to use from the list of server keys. Fix gcc -Wall complaints. * do_as_req.c - Batch KRBCONF_KDC_MODIFIES_KDB updates after the response is issued. Use krb5_dbe_find_keytype() to find the appropriate key in the list of keys. Find appropriate client key instead of using the key in slot 0. Fix gcc -Wall moans. * kdc_util.c - Use per-realm key/salt list to determine which key to use from the list of server keys. Fix gcc -Wall complaints. * kerberos_v4.c - Use krb5_dbe_find_keytype() to find appropriate key. Fix gcc -Wall complaints. Thu Aug 10 14:52:24 EDT 1995 Paul Park (pjpark@mit.edu) * do_as_req.c - Add missing variable when KRBCONF_KDC_MODIFIES_KDB on. Thu Aug 03 12:22:34 1995 Chris Provenzano (proven@mit.edu) * do_as_req.c : Fix bug from new kdb changes. * kerberos_v4.c : Use new db format. Thu Aug 3 11:49:35 EDT 1995 Paul Park (pjpark@mit.edu) * do_as_req.c - Ensure that padata is null with normal salt. * kerberos_v4.c - Give the compiler something to compile when Kerberos V4 is disabled. Thu Jul 27 15:10:58 EDT 1995 Paul Park (pjpark@mit.edu) * configure.in - Add --with-vague-errors and --with-kdc-kdb-update which define KRBCONF_VAGUE_ERRORS and KRBCONF_KDC_MODIFIES_KDB which replace the definitions that used to be in k5-config.h. * kdc_util.c - Cast argument to fetch_asn1_field which caused a compiler moan. * kerberos_v4.c - Use KRB5_PROTOTYPE for v4_klog which is set correctly for the compiler. Some compilers (e.g. OSF/1 native) understand prototypes even when not in STDC mode. Also use KRB5_MIT_DES_KEYSIZE instead of MIT_DES_KEYSIZE. Thu Jul 27 02:59:05 1995 Chris Provenzano (proven@mit.edu) * do_as_req.c do_tgs_req.c kdc_util.c main.c : Use new kdb format. Mon Jul 17 15:13:09 EDT 1995 Paul Park (pjpark@mit.edu) * main.c - Gut KDC profile handling logic and move it to lib/kadm/ alt_prof.c because it's now used by admin and kadmin programs. Remove explicit stash file handling logic and supply stash file name to krb5_db_fetch_mkey() since it can now handle a non-default stash file name. Thu Jul 13 19:51:33 1995 Sam Hartman * main.c: Include netinet/in.h if we're using IP. Wed Jul 12 12:19:44 EDT 1995 Paul Park (pjpark@mit.edu) * main.c - Reorganize KDC profile handling so that the hierarchy for locating per-realm data is [realms]->realm->tag. Add [kdcdefaults] section with primary_ports and secondary_ports to list ports to listen on. Consolidate all port location here from network.c. Add -s flag and change meaning of -p flag to be the default if none specified in KDC or Kerberos profile. * network.c - Open list of primary ports and then per-realm ports. Handle secondary ports just like primary ports except that bind failures are only warnings. Support more than one secondary port. * extern,kdc_util.h - Add supporting definitions. * krb5kdc.M - update description of -p and add description of -s. Tue Jul 11 07:35:12 1995 Ezra Peisach * kerberos_v4.c: Add prototype for set_tgtkey Mon Jul 10 17:01:15 1995 Ezra Peisach * kerberos_v4.c: Add prototypes for compat_decrypt_key, kerb_get_principal, check_princ, v4_klog * network.c (process_packet): Make prog a const char *. * main.c: Add prototypes for find_realm_data, setup_server_realm, usage, request_exit, setup_signal_handlers, initialize_realms, finish_realms. * kdc_util.h: Add prototypes for against_local_policy_as, against_local_policy_tgs, validate_as_request, validate_tgs_request, fetch_asn1_field, kdc_initialize_rcache, process_packet. Sat Jul 8 17:40:10 1995 Theodore Y. Ts'o (tytso@dcl) * kerberos_v4.c (v4_klog): Also log L_KRB_PERR error messages, so we know when there are protocol problems. Fri Jul 7 16:05:57 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Remove all explicit library handling and LDFLAGS. * configure.in - Add USE_ and KRB5_LIBRARIES. * kdc_util.c(comp_cksum) - Use krb5_verify_checksum to verify cksum. Fri Jun 30 14:38:09 EDT 1995 Paul Park (pjpark@mit.edu) * configure.in - Add --with-dbm to select between Berkeley and DBM KDC database format. Thu Jun 29 06:50:08 1995 Mark Eichin * kerberos_v4.c (check_princ): delete master_key_version check, since we never actually set it. (main): elide original V4 server code to avoid confusion when looking for variable references. (type_2_v5err): reformat for 79 columns instead of 80 and conditionalize out since it is unused (though still informative.) Tue Jun 27 15:59:48 EDT 1995 Paul Park (pjpark@mit.edu) * main.c - Change profile name hierarchy storage to const char *. Add signal name argument to signal handler to conform to prototype. * kerberos_v4.c - Cast key to (char *) to conform to prototype. Thu Jun 22 15:24:16 EDT 1995 Paul Park (pjpark@mit.edu) * main.c - Change option parsing logic to support multiple realms. Use alternate profile routines from libkadm to support reading values from it. * dispatch.c - Setup global realm context before calling process_as_ req(). * do_as_req.c - Change KDB_CONVERT_KEY_OUTOF_DB to decrypt_key call. * do_tgs_req.c - Setup global realm context from our service principal name. * extern.c - Remove per-realm global data. Replace this with list of per-realm data with a pointer to the active request's realm. * extern.h - Change per-realm global data names to #define's. This is to avoid having to rewrite everything to pass a pointer to the active realm. * kdc_util.c - Change "kdc_context" to "kcontext" because of #defines in extern.h. Also add logic after call to rd_req_decoded to see if it failed because of a rcache error. If so, then reinitialize the replay cache and retry it. Also change KDB_CONVERT_KEY_OUTOF_DB to decrypt_key. * kerberos_v4.c - Remove extraneous definition of master_encblock. * krb5kdc.M - Add definition of -p, add vague reference to kdc.conf manpage and describe multiple realms briefly. * network.c - Change udp_port_fd to a list of fds to support having multiple ports to listen on. Thu Jun 15 17:55:21 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Change explicit library names to -l form, and change target link line to use $(LD) and associated flags. Also, remove DBMLIB, it was not used. Also, for K4, use KRB4_LIB and KRB4_CRYPTO_LIB, these were split out. * configure.in - Remove dbm library checks, these are no longer needed with the Berkeley database code. Also, add shared library usage check. Tue Jun 13 12:44:20 1995 Sam Hartman * network.c: Base inclusion of sys/select.h on whether it exists instead of a specific test for AIX. * configure.in: Test for sys/select.h Mon Jun 12 20:01:23 1995 Ezra Peisach * kdc_util.c (kdc_process_tgs_req): Set the auth_context rcache to null before freeing auth_context. This keeps the rcache valid. Sat Jun 10 23:04:31 1995 Tom Yu (tlyu@dragons-lair) * kdc_util.c: krb5_auth_context redefinitions Fri Jun 9 19:13:08 1995 * dispatch.c, kdc_util.h, kerberos_v4.c: Use KRB5_KRB4_COMPAT instead of KRB4 for determining whether to compile in Kerberos V4 backwards compatibility * configure.in: Remove standardized set of autoconf macros, which are now handled by CONFIG_RULES. Thu Jun 8 23:35:27 1995 * do_as_req.c, do_tgs_req.c, kdc_util.c, kerberos_v4.c, main.c, network.c: Fix -Wall nits. Thu Jun 8 14:52:40 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Add libkadm. * dispatch.c, do_as_req.c, do_tgs_req.c, kdc_util.c, kerberos_v4.c main.c - Include adm_proto.h and change syslog calls to calls to krb5_klog_syslog. Fri May 26 17:50:39 EDT 1995 Paul Park (pjpark@mit.edu) * Makefile.in - Define KDBDEPLIB. Sat May 20 22:28:52 1995 Ezra Peisach * kerberos_v4.c: Port to OSF/1. (change longs to KRB4_32) Sat Apr 29 00:13:16 1995 Theodore Y. Ts'o * kdc_util.c (kdc_process_tgs_req): Make sure apreq->ticket gets freed, since it isn't being passed back to the caller (anymore). Fri Apr 28 21:28:45 1995 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): Free header_ticket when we're done with it. (Prevents massive memory leak). * Makefile.in (depend): Use $(LD) instead of $(CC) so that we can do purify checking. Fri Apr 28 18:05:52 1995 Mark Eichin * Makefile.in (KLIB): put KRB4_LIB inside KLIB. Thu Apr 27 13:52:22 1995 Mark Eichin * Makefile.in (krb5kdc): use KRB4_LIB directly. * configure.in: use WITH_KRB4 as-is. Wed Apr 26 11:23:11 1995 Mark Eichin * configure.in: need HAS_ANSI_VOLATILE for signal_requests_exit. Sat Apr 22 00:36:37 1995 Theodore Y. Ts'o (tytso@dcl) * network.c (setup_network): Don't rely on krb5_kdc_portname and krb5_kdc_sec_portname anymore. Use the #define'd versions. Fri Mar 31 16:50:07 1995 Theodore Y. Ts'o (tytso@dcl) * main.c (main): Make sure the context is initialized before it is used. Mon Mar 27 07:56:26 1995 Chris Provenzano (proven@mit.edu) * kdc_util.c Use new calling conventions for krb5_rd_req_decoded(). Fri Mar 24 14:58:07 1995 * replay.c: The KDC replay cache needs to store the database modification time, so that if the database is modified in between when it receives a request and when it receives a replay of the same request, it knows to throw away the replay cache entry and generate a new response (since the record in the database on which the response is based may have been modified). * main.c (kdc_com_err_proc): Use syslog() instead of vsyslog(). Sat Mar 18 18:59:45 1995 John Gilmore (gnu at toad.com) * kerberos_v4.c: Replace STDARG_PROTOTYPES with HAVE_STDARG_H. Tue Mar 14 15:25:38 1995 * configure.in, Makefile.in: Use the libdes425 library so that the DES code doesn't get dragged in twice. * kdc_util.c (validate_as_request): Allow a client to obtain a password changing ticket, even if the client's key is expired. * main.c (usage, process_args, main): The KDC will disassociate itself from the terminal by default, unless the -n option is given. Thu Mar 2 12:16:50 1995 Theodore Y. Ts'o * Makefile.in (ISODELIB): Remove reference to $(ISODELIB). Wed Mar 1 16:30:27 1995 Theodore Y. Ts'o * configure.in: Remove ISODE_INCLUDE and ISODE_DEFS, replace check for -lsocket and -lnsl with WITH_NETLIB check. Tue Feb 28 02:27:11 1995 John Gilmore (gnu at toad.com) * *.[ch]: Avoid and includes. Fri Feb 10 14:35:42 1995 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): krb5_use_keytype() was being called when the argument was a encryption type. Change use to krb5_use_cstype(). Actually, any use of krb5_use_keytype() is a bug by definition. Wed Feb 01 21:07:03 1995 Chris Provenzano (proven@mit.edu) * kdc_util.c (kdc_rdreq_keyproc()) Add krb5_keytype() arg. Wed Jan 25 23:20:07 1995 Theodore Y. Ts'o (tytso@dcl) * network.c (setup_network), main.c (process_args): Allow the primary port that the KDC listens on be configurable on the command line. If the appropriate /etc/services entries aren't found, use compiled in defaults. Wed Jan 25 16:54:40 1995 Chris Provenzano (proven@mit.edu) * Removed all narrow types and references to wide.h and narrow.h Fri Jan 13 15:23:47 1995 Chris Provenzano (proven@mit.edu) * Added krb5_context to all krb5_routines Thu Dec 8 00:33:05 1994 * do_tgs_req.c (prepare_error_tgs): Don't free the passed in ticket; it will be freed as part of other structures. * do_tgs_req.c (process_tgs_req): Set the encryption type in the reply structure, and set the eblock type accordingly. Wed Dec 7 13:36:34 1994 * do_as_req.c (process_as_req): Set the encryption type in the reply_encpart structure. * kdc_util.c (validate_as_request): * policy.c (against_local_policy_as): Move requirement that an AS request must include the addresses field to the local policy routine. (Not required by RFC). * main.c (setup_com_err): Initialize the kdc5 error table (the kdb5 error table is already initialized) Wed Nov 30 16:37:26 1994 Theodore Y. Ts'o (tytso@dcl) * confiugre.in: Add appropriate help text for --with-krb4 option. Mon Nov 21 17:23:50 1994 Theodore Y. Ts'o (tytso@dcl) * do_tgs_req.c (process_tgs_req): * do_as_req.c (process_as_req): Use the list of encryption types passed as part of the KDC request to determine which encryption to use for encrypting the ticket. The encryption must be one that is supported by the KDC, as well as being one which is marked as being supported by the server of the ticket. In a AS request, also use this encryption for encrypting the KDC response. In a TGS request, use the encryption type of the TGT authenticator to determine how to encrypt the KDC response. Tue Nov 8 17:51:30 1994 Theodore Y. Ts'o (tytso@dcl) * do_tgs_req.c (process_tgs_req): Use published interface to call krb5_random_key(). Mon Nov 7 22:11:01 1994 Theodore Y. Ts'o (tytso@dcl) * kerberos_v4.c: Don't define functions manually, but pull in the appropriate include files (com_err.h, krb5/ext-proto.h, krb5/los-proto.h, etc.) * kdc_util.c (kdc_process_tgs_req): Fix lineage check so that we don't fail if we're cross-authenticating with a realm with the same length as our own. ('||' should have been '&&') Fri Nov 4 17:47:46 1994 Theodore Y. Ts'o (tytso@dcl) * do_as_req.c (process_as_req): Use published interface to call krb5_random_key(). Fri Oct 14 00:31:14 1994 Theodore Y. Ts'o (tytso@dcl) * main.c (process_args): Select the cryptosystem to be used using krb5_use_cstype() instead of using a implementation specific assignment. Also, allow the encryption type to be specified using a command line option. Tue Oct 11 22:11:09 1994 Theodore Y. Ts'o (tytso@dcl) * do_as_req.c (process_as_req): Don't assume that the request server's realm name is null terminated. Compare the request server against changepw/kerberos using krb5_principal_compare. Tue Oct 4 16:42:16 1994 Theodore Y. Ts'o (tytso@dcl) * kdc_util.c (kdc_rdreq_keyproc): Add widen.h and narrow.h around keyproc call so that the argument types are widened. Mon Oct 3 13:13:48 1994 Theodore Y. Ts'o (tytso@dcl) * Makefile.in: Use $(srcdir) to find manual page for make install. * Makefile.in: Remove krb5kdc on make clean Fri Sep 30 22:13:13 1994 Theodore Y. Ts'o (tytso@dcl) * extern.c: Add placeholder for magic number Thu Sep 29 00:03:59 1994 Theodore Y. Ts'o (tytso@dcl) * Makefile.in: Relink executable when library changes. Wed Sep 21 17:40:56 1994 Theodore Y. Ts'o (tytso@dcl) * kdc_util.c, kdc_util.h (realm_compare): Change realm_compare so that both arguments are principals. This makes it less confusing.... * kdc_util.c (add_to_transited): Folded in Tony Andrea's changes so that add_to_transited doesn't assume that the contents of a krb5_data->data are null terminated. * do_tgs_req.c (process_tgs_req): Add the realm of the presented tgt if it is different from the local realm (cross-realm) and it is different than the realm of the client (since the realm of the client is already implicitly part of the transited list and should not be explicitly listed). Thu Aug 18 18:17:59 1994 Theodore Y. Ts'o (tytso at tsx-11) * configure.in: * Makefile.in: Move optional link with $(KRB4)/lib/libdes.a to configure.in. Thu Aug 4 15:13:27 1994 Tom Yu (tlyu@dragons-lair) * configure.in: * kerberos_v4.c: don't include if POSIX_TERMIOS is defined. Sat Jul 16 09:16:33 1994 Tom Yu (tlyu at dragons-lair) * configure.in: hopefully make dbm libs dtrt Sat Jul 16 01:59:02 1994 Theodore Y. Ts'o (tytso at tsx-11) * do_as_req.c: Sanitie error return codes * kdc_util.c (validate_tgs_request): Fix error handling for bogus TGS renew/forward/etc. requests. Sanitize error return codes. Fri Jul 8 00:33:45 1994 Tom Yu (tlyu at dragons-lair) * configure.in: * Makefile.in: back out changes because of possible breakage under Ultrix, among other things Wed Jul 6 22:54:59 1994 Tom Yu (tlyu at dragons-lair) * configure.in: * Makefile.in: fixes to suck in -lndbm or -ldbm if needed Tue Jun 28 19:43:54 1994 Tom Yu (tlyu at dragons-lair) * main.c: fix explicit calls to initialize_foo_error_table * do_tgs_req.c: * configure.in: folding in Harry's changes