krb5.git/src/config, branch kinit-c MIT Kerberos patches Fix HP-UX build support 2014-08-14T15:36:34+00:00 Michael Osipov 1983-01-06@gmx.net 2014-08-14T13:48:11+00:00 fdd1c69471bbe5fec0da9f9bcaa9d0a7739db77f Rename hpux10.exports to hpux.exports. In the HP-UX section of shlib.conf, remove '+s' because it just specifies a default, add a MAKE_SHLIB_COMMAND, and set SHLIBEXT based on the host CPU. [ghudson@mit.edu: squashed commits, condensed commit message] ticket: 7990 (new) target_version: 1.13 tags: pullup 
Rename hpux10.exports to hpux.exports.  In the HP-UX section of
shlib.conf, remove '+s' because it just specifies a default, add a
MAKE_SHLIB_COMMAND, and set SHLIBEXT based on the host CPU.

[ghudson@mit.edu: squashed commits, condensed commit message]

ticket: 7990 (new)
target_version: 1.13
tags: pullup
Add SASL support to LDAP KDB module 2014-07-19T20:34:57+00:00 Greg Hudson ghudson@mit.edu 2014-06-16T16:41:03+00:00 e94082d8c923cff454c1bc53b377ba394a3cec3c Add variables for the SASL mechanism, authcid, authzid, and realm. If a SASL mechanism is set, perform an interactive bind with that mechanism. If <sasl/sasl.h> is found at build time, provide the authcid, authzid, and realm in the interaction function, and provide a SASL secret read from the service password file (under the authcid) if we found one. Based on a patch from Zoran Pericic <zpericic@netst.org>. ticket: 7944 (new) 
Add variables for the SASL mechanism, authcid, authzid, and realm.  If
a SASL mechanism is set, perform an interactive bind with that
mechanism.  If <sasl/sasl.h> is found at build time, provide the
authcid, authzid, and realm in the interaction function, and provide a
SASL secret read from the service password file (under the authcid) if
we found one.

Based on a patch from Zoran Pericic <zpericic@netst.org>.

ticket: 7944 (new)
Rename --with-proxy-tls-impl to --with-tls-impl 2014-07-19T20:21:15+00:00 Greg Hudson ghudson@mit.edu 2014-07-17T19:20:53+00:00 788e70c7c77b0c1f4a79e3f1b6c96a0cf99e0327 Make the configure option for TLS implementation more generic, in case we use the k5tls module for something other than KDC proxy support. Rename all of the associated symbols for consistency. ticket: 7929 
Make the configure option for TLS implementation more generic, in case
we use the k5tls module for something other than KDC proxy support.
Rename all of the associated symbols for consistency.

ticket: 7929
Move KKDCP OpenSSL code to an internal plugin 2014-07-19T20:21:15+00:00 Greg Hudson ghudson@mit.edu 2014-06-22T14:42:14+00:00 472349d2a47fbc7db82e46ba46411b95c312fc1f Create an internal pluggable interface "tls" with one in-tree dynamic plugin module named "k5tls". Move all of the OpenSSL calls to the plugin module, and make the libkrb5 code load and invoke the plugin. This way we do not load or initialize libssl unless an HTTP proxy is used. ticket: 7929 
Create an internal pluggable interface "tls" with one in-tree dynamic
plugin module named "k5tls".  Move all of the OpenSSL calls to the
plugin module, and make the libkrb5 code load and invoke the plugin.
This way we do not load or initialize libssl unless an HTTP proxy is
used.

ticket: 7929
Build support for TLS used by HTTPS proxy support 2014-06-02T21:58:26+00:00 Robbie Harwood (frozencemetery) rharwood@club.cc.cmu.edu 2013-08-16T16:45:03+00:00 d0be57ac45ea639baa3cff0dd2108c34e834bfa7 Add a --with-proxy-tls-impl option to configure, taking 'openssl', 'auto', or invocation as --without-proxy-tls-impl. Use related CFLAGS when building lib/krb5/os, and LIBS when linking libkrb5. Call the OpenSSL library startup functions during library initialization. ticket: 7929 
Add a --with-proxy-tls-impl option to configure, taking 'openssl',
'auto', or invocation as --without-proxy-tls-impl.  Use related CFLAGS
when building lib/krb5/os, and LIBS when linking libkrb5.  Call the
OpenSSL library startup functions during library initialization.

ticket: 7929
Require built-in verto for make depend 2013-12-21T04:10:03+00:00 Greg Hudson ghudson@mit.edu 2013-12-20T23:42:04+00:00 3a4a4fd6f70bde630bba09bb268c8558de9a326e A tree configured to use the system libverto will be missing $(VERTO_DEPS) in dependencies, so disallow make depend. 
A tree configured to use the system libverto will be missing
$(VERTO_DEPS) in dependencies, so disallow make depend.
Be smarter about installing debug symbols 2013-10-04T19:33:35+00:00 Ben Kaduk kaduk@mit.edu 2013-07-02T20:45:59+00:00 b6d5e3af806bb60c37a831a72eff3e7e99bea6e9 We know when we're going to generate debug symbols, so only attempt to install them when we know they should be present. This eliminates the need to tell make to ignore errors from the shell on these steps. ticket: 7317 tags: pullup target_version: 1.11.4 
We know when we're going to generate debug symbols, so only attempt
to install them when we know they should be present.

This eliminates the need to tell make to ignore errors from the shell
on these steps.

ticket: 7317
tags: pullup
target_version: 1.11.4
Remove KRB5_DNS_LOOKUP_KDC 2013-08-14T21:31:55+00:00 Ben Kaduk kaduk@mit.edu 2013-08-14T19:47:03+00:00 e7b3a8cad4dcd6f52d094e81595aa4aee817e898 It has been unconditionally activated by all supported build systems for almost two years, and no complaints or issues have been reported. In particular, aclocal.m4 has had an unconditional AC_DEFINE() since 3d708e55 in 2003, and win-pre.in has unconditionally set KRB5_USE_DNS_KDC since 17ffebf7 in 2011. While here, simplify some other DNS conditionals in win-pre.in where only one branch was ever taken. ticket: 7691 (new) 
It has been unconditionally activated by all supported build systems
for almost two years, and no complaints or issues have been reported.
In particular, aclocal.m4 has had an unconditional AC_DEFINE() since
3d708e55 in 2003, and win-pre.in has unconditionally set KRB5_USE_DNS_KDC
since 17ffebf7 in 2011.

While here, simplify some other DNS conditionals in win-pre.in where
only one branch was ever taken.

ticket: 7691 (new)
Update config.guess and config.sub 2013-08-07T15:39:45+00:00 Ben Kaduk kaduk@mit.edu 2013-07-26T22:30:44+00:00 7bd5008737ec619c425a30ed4022e2f84552c015 Copy in the latest config.guess and config.sub from upstream git master as of 2013-07-26 (revision 79c4c50fc754d742286706b4db5ed8ce2a0de925). Our previous version didn't recognize arm64. Reported as Debian bug 717840. ticket: 7683 (new) tags: pullup target_version: 1.11.4 
Copy in the latest config.guess and config.sub from upstream git
master as of 2013-07-26 (revision 79c4c50fc754d742286706b4db5ed8ce2a0de925).
Our previous version didn't recognize arm64.

Reported as Debian bug 717840.

ticket: 7683 (new)
tags: pullup
target_version: 1.11.4
Reduce boilerplate in makefiles 2013-05-17T00:09:27+00:00 Greg Hudson ghudson@mit.edu 2013-05-16T18:21:12+00:00 4b0985f8573840838bcfa8ec1df3dcd39a3dbf15 Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH, SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be specified in the common case. Rename KRB5_RUN_ENV and KRB5_RUN_VARS to RUN_SETUP (already the most commonly used name) and RUN_VARS. Make sure to use DEFINES for local defines (not DEFS). Remove some other unnecessary makefile content. 
Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH,
SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be
specified in the common case.  Rename KRB5_RUN_ENV and KRB5_RUN_VARS
to RUN_SETUP (already the most commonly used name) and RUN_VARS.  Make
sure to use DEFINES for local defines (not DEFS).  Remove some other
unnecessary makefile content.