krb5.git/.gitignore, branch master MIT Kerberos patches Add tests for invalid GSSAPI per-message tokens 2014-06-26T15:34:42+00:00 Greg Hudson ghudson@mit.edu 2014-06-19T17:13:33+00:00 7a9990d73537dcdd95bf9b280ebfd560adf8342d ticket: 7949 
ticket: 7949
Add tests for krb5int_c_combine_keys 2014-05-21T15:33:25+00:00 Greg Hudson ghudson@mit.edu 2014-05-20T18:52:44+00:00 6e8b2fba84df2ef74ce071330b4c3f843f4b7541 krb5int_c_combine_keys is used only by SAM-2 preauth with neither the send-encrypted-sad nor use-sad-as-key flags, so it isn't covered by any automated function tests. Add some unit tests to make sure that it works and returns the expected results for two randomly generated test vectors. ticket: 7914 target_version: 1.12.2 tags: pullup 
krb5int_c_combine_keys is used only by SAM-2 preauth with neither the
send-encrypted-sad nor use-sad-as-key flags, so it isn't covered by
any automated function tests.  Add some unit tests to make sure that
it works and returns the expected results for two randomly generated
test vectors.

ticket: 7914
target_version: 1.12.2
tags: pullup
Add ccache marshalling tests 2014-05-17T23:04:26+00:00 Greg Hudson ghudson@mit.edu 2014-05-06T18:05:53+00:00 a4e5127bec346fbc199e3624dc973c4b5d78df71 Add a new ccache test program t_marshal.c which verifies the new marshalling functions and also the FILE ccache type against the expected representations of the ccache header, default principal, and credentials. 
Add a new ccache test program t_marshal.c which verifies the new
marshalling functions and also the FILE ccache type against the
expected representations of the ccache header, default principal, and
credentials.
Improve krb5_rd_req decryption failure errors 2014-05-07T16:56:15+00:00 Greg Hudson ghudson@mit.edu 2014-04-28T07:58:32+00:00 eba8c4909ec7ba0d7054d5d1b1061319e9970cc7 When krb5_rd_req cannot decrypt a ticket, try to produce the most helpful diagnostic we can, and return an error code which corresponds to the most applicable Kerberos protocol error. Add a trace log containing the error message for ticket decryption failures, in case the application server does not log it. Add new tests to cover krb5_rd_req error messages and adjust existing tests to match the new messages. Also adjust svc_auth_gssapi.c to look for KRB5KRB_AP_ERR_NOT_US instead of KRB5KRB_AP_WRONG_PRINC. ticket: 7232 
When krb5_rd_req cannot decrypt a ticket, try to produce the most
helpful diagnostic we can, and return an error code which corresponds
to the most applicable Kerberos protocol error.  Add a trace log
containing the error message for ticket decryption failures, in case
the application server does not log it.

Add new tests to cover krb5_rd_req error messages and adjust existing
tests to match the new messages.  Also adjust svc_auth_gssapi.c to
look for KRB5KRB_AP_ERR_NOT_US instead of KRB5KRB_AP_WRONG_PRINC.

ticket: 7232
Add tests for GSSAPI sequence number processing 2014-03-18T15:55:39+00:00 Greg Hudson ghudson@mit.edu 2014-03-12T15:03:48+00:00 40b105e2e6637d370025b4433dc9e1bda5d3950a ticket: 7872 
ticket: 7872
Fix clean-unix rule for gssapi_krb5.h 2014-03-08T16:23:35+00:00 Tomas Kuthan tkuthan@gmail.com 2014-03-07T13:47:58+00:00 a2f52eee40f081b284b77828e0e58e6566886736 Don't delete gssapi_krb5.h now that it is not generated. [ghudson@mit.edu: also remove from generate-files-mac rule and from .gitignore] 
Don't delete gssapi_krb5.h now that it is not generated.

[ghudson@mit.edu: also remove from generate-files-mac rule and from
.gitignore]
Add test case for ulog serial number wrapping 2014-01-30T23:33:09+00:00 Greg Hudson ghudson@mit.edu 2014-01-30T17:26:09+00:00 b8a0c995d2a72cbfd2500de89e395e1ee10fc8e0 Add a unit test program named t_ulog. Make it map a ulog file, set up header state where kdb_last_sno is the last serial number, and then add an empty update. Check that the result is a ulog header with one update at serial number 1. ticket: 7839 
Add a unit test program named t_ulog.  Make it map a ulog file, set up
header state where kdb_last_sno is the last serial number, and then
add an empty update.  Check that the result is a ulog header with one
update at serial number 1.

ticket: 7839
Remove krb5-send-pr 2014-01-28T19:37:59+00:00 Tom Yu tlyu@mit.edu 2014-01-22T22:38:32+00:00 93e2c540101475d3799304d0a12be840a9b1486c Remove the GNATS-based krb5-send-pr script and replace it with a script that instructs users to send email. ticket: 7840 (new) 
Remove the GNATS-based krb5-send-pr script and replace it with a
script that instructs users to send email.

ticket: 7840 (new)
Add test coverage for gss_pseudo_random 2014-01-22T17:43:00+00:00 Greg Hudson ghudson@mit.edu 2014-01-18T18:25:56+00:00 1f2caa1ba9b77062b4072ec609000404481cd5bb Add a test program which compares gss_pseudo_random outputs against expected values for each enctype. 
Add a test program which compares gss_pseudo_random outputs against
expected values for each enctype.
Add a test program for krb5_copy_context 2013-12-18T21:56:52+00:00 Greg Hudson ghudson@mit.edu 2013-12-18T18:08:25+00:00 b78c3c8c5025aec870d20472f80d4a652062f921 This test program isn't completely proof against the kind of mistakes we've made with krb5_copy_context in the past, but it at least exercises krb5_copy_context and can detect some kinds of bugs. ticket: 7807 
This test program isn't completely proof against the kind of mistakes
we've made with krb5_copy_context in the past, but it at least
exercises krb5_copy_context and can detect some kinds of bugs.

ticket: 7807