krb5.git/src/lib/krb5/os, branch keyring

Add a flag to prevent all host canonicalization

2013-09-06T05:02:28+00:00

If dns_canonicalize_hostname is set to false in [libdefaults],
krb5_sname_to_principal will not canonicalize the hostname using
either forward or reverse lookups.

ticket: 7703 (new)

Move utility functions to hostrealm.c

2013-08-15T16:39:58+00:00

Move the remaining internal functions from hst_realm.c to hostrealm.c,
and get rid of hst_realm.c.

ticket: 7687

Use hostrealm interface for realm mapping

2013-08-15T16:39:57+00:00

Reimplement krb5_get_host_realm, krb5_get_fallback_host_realm, and
krb5_get_default_realm in terms of the hostrealm interface.  Three
built-in modules (dns, domain, and profile) implement the current
behavior.

ticket: 7687

Remove KRB5_DNS_LOOKUP_KDC

2013-08-14T21:31:55+00:00

It has been unconditionally activated by all supported build systems
for almost two years, and no complaints or issues have been reported.
In particular, aclocal.m4 has had an unconditional AC_DEFINE() since
3d708e55 in 2003, and win-pre.in has unconditionally set KRB5_USE_DNS_KDC
since 17ffebf7 in 2011.

While here, simplify some other DNS conditionals in win-pre.in where
only one branch was ever taken.

ticket: 7691 (new)

Fix localauth memory leak

2013-08-12T19:26:21+00:00

localauth modules were not freed by krb5_free_context(), causing a
memory leak.

Add trace logging for TXT lookups

2013-08-12T18:29:28+00:00

Rename krb5_try_realm_txt_rr (an internal function despite the name)
and add a context parameter.  Generate trace logs when we successfully
look up a record and when a record is not found.

Report KDC response sizes in trace logs

2013-08-07T18:16:25+00:00

Remove old comments in sendto_kdc.c

2013-07-30T16:42:47+00:00

The commented code in question is present in set_conn_state_msg_length
which is called immediately after the comments.

[ghudson@mit.edu: clarified commit message]

Remove is_udp field in sendto_kdc.c conn_state

2013-07-30T16:30:34+00:00

This field is redundant with addr.type.

[ghudson@mit.edu: removed extraneous changes; clarified commit
message]

Use k5calloc instead of k5alloc where appropriate

2013-07-12T00:39:51+00:00

Wherever we use k5alloc with a multiplication in the size parameter,,
use the new k5calloc helper function instead.