krb5.git/src/util, branch keyring MIT Kerberos patches Fix race in util/profile/Makefile.in 2013-10-21T17:49:41+00:00 Greg Hudson ghudson@mit.edu 2013-10-17T18:02:14+00:00 4d3827ac1b0e9e6447a132c57f3e2d74d3dfe8a9 $(BUILDTOP)/include/profile.h was being updated by two different rules, which could collide with make -j. Use a dependency from includes instead of a redundant rule. 
$(BUILDTOP)/include/profile.h was being updated by two different
rules, which could collide with make -j.  Use a dependency from
includes instead of a redundant rule.
Add an internal constant-time comparison function 2013-10-03T19:26:00+00:00 Greg Hudson ghudson@mit.edu 2013-10-02T21:55:28+00:00 ac7d07c2cc54e9f07fe81ac4c50bcc80ecc7ac54 k5_bcmp acts similarly to the deprecated Unix bcmp() function, returning zero if two memory regions are equal and nonzero if they are not. It is implemented such that it should take the same amount of time regardless of how many bytes are equal within the memory regions. 
k5_bcmp acts similarly to the deprecated Unix bcmp() function,
returning zero if two memory regions are equal and nonzero if they are
not.  It is implemented such that it should take the same amount of
time regardless of how many bytes are equal within the memory regions.
Add "which" function to k5test 2013-09-28T18:57:18+00:00 Greg Hudson ghudson@mit.edu 2013-09-28T18:56:22+00:00 1f1b76ab8937c2cb0273cc5d8a7ee806240e1879 Add a utility function in k5test.py to look for a command in the executable path, and remove it from t_kdb.py. 
Add a utility function in k5test.py to look for a command in the
executable path, and remove it from t_kdb.py.
Use macros instead of magic numbers in json.c 2013-09-19T14:00:41+00:00 Zhanna Tsitkov tsitkova@mit.edu 2013-09-19T14:00:41+00:00 2d832972094477cd9fe6b97991e62b00c7174d8a Avoid using "magic numbers" for better maintainability. 
Avoid using "magic numbers" for better maintainability.
Remove redundant domain_realm mappings 2013-08-12T19:28:07+00:00 Ben Kaduk kaduk@mit.edu 2013-08-12T17:47:42+00:00 8f5ce824012f2caab6770df464f096c38dc4cb2e This fixes a long-standing documentation bug where we claimed that a domain_realm mapping for a host name would not affect entries under that domain name. The code has always had the behavior where a host name mapping implies the corresponding domain name mapping, since the 1.0 release. While here, replace media-lab with csail in example files, as the media lab realm is no longer in use. Also strip port 88 from KDC specifications, and drop the harmful default_{tgs,tkt}_enctypes lines from src/util/profile/krb5.conf. Further cleanup on these files to remove defunct realms may be in order. ticket: 7690 (new) tags: pullup target_version: 1.11.4 
This fixes a long-standing documentation bug where we claimed that
a domain_realm mapping for a host name would not affect entries
under that domain name.  The code has always had the behavior where
a host name mapping implies the corresponding domain name mapping,
since the 1.0 release.

While here, replace media-lab with csail in example files, as the
media lab realm is no longer in use.  Also strip port 88 from KDC
specifications, and drop the harmful default_{tgs,tkt}_enctypes
lines from src/util/profile/krb5.conf.

Further cleanup on these files to remove defunct realms may be in order.

ticket: 7690 (new)
tags: pullup
target_version: 1.11.4
Add base64 functions to libkrb5support exports 2013-07-30T16:25:47+00:00 Robbie Harwood (frozencemetery) rharwood@club.cc.cmu.edu 2013-07-22T20:20:46+00:00 3ee5792e0324071ccaad69a04e091f3c6abf1bfc This was previously not an issue because nothing outside of libkrb5support used them. 
This was previously not an issue because nothing outside of
libkrb5support used them.
Clarify and improve k5_json_object_set 2013-07-16T22:09:55+00:00 Greg Hudson ghudson@mit.edu 2013-07-16T22:09:55+00:00 ea29df4d93b1b7b384c15f39a4ee20be3e0991ac Document that k5_json_object_set can be used to overwrite an existing key, and make it possible to remove a key by setting it to NULL. 
Document that k5_json_object_set can be used to overwrite an existing
key, and make it possible to remove a key by setting it to NULL.
Fix various warnings 2013-06-07T19:19:37+00:00 Greg Hudson ghudson@mit.edu 2013-06-07T19:17:31+00:00 e51c089b745161dd6e1d64998e99d065fc22377e 






Fix rc4 string-to-key on unterminated inputs
2013-05-27T16:42:59+00:00

Greg Hudson
ghudson@mit.edu

2013-05-24T17:16:52+00:00

1e123231769fe640f446442cb210664d280ccbac

The internal UTF-8 to UCS-2 conversion functions did not properly
respect their length arguments, instead assuming that the input string
is terminated with a zero bytes.  As a result,
krb5int_arcfour_string_to_key could fail on unterminated inputs.  Fix
the underlying support functions to read their inputs only up to the
specified length.

ticket: 7643 (new)





The internal UTF-8 to UCS-2 conversion functions did not properly
respect their length arguments, instead assuming that the input string
is terminated with a zero bytes.  As a result,
krb5int_arcfour_string_to_key could fail on unterminated inputs.  Fix
the underlying support functions to read their inputs only up to the
specified length.

ticket: 7643 (new)







Reduce boilerplate in makefiles
2013-05-17T00:09:27+00:00

Greg Hudson
ghudson@mit.edu

2013-05-16T18:21:12+00:00

4b0985f8573840838bcfa8ec1df3dcd39a3dbf15

Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH,
SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be
specified in the common case.  Rename KRB5_RUN_ENV and KRB5_RUN_VARS
to RUN_SETUP (already the most commonly used name) and RUN_VARS.  Make
sure to use DEFINES for local defines (not DEFS).  Remove some other
unnecessary makefile content.





Provide default values in pre.in for PROG_LIBPATH, PROG_RPATH,
SHLIB_DIRS, SHLIB_RDIRS, and STOBJLISTS so that they don't have to be
specified in the common case.  Rename KRB5_RUN_ENV and KRB5_RUN_VARS
to RUN_SETUP (already the most commonly used name) and RUN_VARS.  Make
sure to use DEFINES for local defines (not DEFS).  Remove some other
unnecessary makefile content.