summaryrefslogtreecommitdiffstats
path: root/src/lib/kadm5
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/kadm5')
-rw-r--r--src/lib/kadm5/ChangeLog746
-rw-r--r--src/lib/kadm5/clnt/ChangeLog368
-rw-r--r--src/lib/kadm5/srv/ChangeLog593
-rw-r--r--src/lib/kadm5/unit-test/ChangeLog450
4 files changed, 0 insertions, 2157 deletions
diff --git a/src/lib/kadm5/ChangeLog b/src/lib/kadm5/ChangeLog
deleted file mode 100644
index 045cf43be..000000000
--- a/src/lib/kadm5/ChangeLog
+++ /dev/null
@@ -1,746 +0,0 @@
-2006-04-03 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (DEFS): Make empty.
-
-2006-03-31 Ken Raeburn <raeburn@mit.edu>
-
- * server_intertal.h, chpass_util.c: Include autoconf.h.
-
-2006-03-11 Ken Raeburn <raeburn@mit.edu>
-
- * server_internal.h, adb.h: Don't look for kdb.h in krb5/.
-
-2005-11-17 Ken Raeburn <raeburn@mit.edu>
-
- * admin.h: Include kdb.h instead of k5-int.h.
- * kadm_rpc_xdr.c, server_internal.h: Include errno.h instead of
- k5-int.h.
-
-2005-08-20 Ken Raeburn <raeburn@mit.edu>
-
- * configure.in: Use K5_AC_INIT instead of AC_INIT.
-
- * kadm_rpc.h: Remove krb5_ui_4 casts on RPC defined numbers.
- Remove argument names from RPC proc declarations. Reorder
- declarations, change whitespace. Renamed all RPC functions from
- _1 to _2 to match current program version number.
-
-2005-06-20 Ken Raeburn <raeburn@mit.edu>
-
- Novell merge.
- * Makefile.in (adb_err.*): Targets deleted.
- (SRCS, OBJS, clean, STLIBOBJS, BUILD_HDRS): Delete references to
- adb_err.*.
- (HDRS, SRC_HDRS): Delete references to adb.h.
- * adb_err.et: Moved to lib/kdb.
- * admin.h: Don't include kadm5/adb_err.h.
- (krb5_key_salt_tuple): Delete typedef and struct definition.
- (kadm5_init, kadm5_init_with_password, kadm5_init_with_skey,
- kadm5_init_with_creds, ovsec_kadm_init,
- ovsec_kadm_init_with_password, ovsec_kadm_init_with_skey): Add new
- char** argument for arbitrary db args.
- * admin_xdr.h: Include server_internal.h.
- (xdr_krb5_key_data, xdr_osa_pw_hist_ent): Declare.
- * kadm_err.et (KADM5_XDR_FAILURE): New error code.
- * kadm_rpc.h (struct generic_ret, struct gprincs_ret, struct
- chrand_ret, struct gprinc_ret, struct gpol_ret, struct gpols_ret,
- struct getprivs_ret): Add new field for error-string return.
- * kadm_rpc_xdr.c (xdr_generic_ret, xdr_gprincs_ret,
- xdr_chrand_ret, xdr_gprinc_ret, xdr_gpol_ret, xdr_gpols_ret,
- xdr_getprivs_ret): Encode/decode new field.
- * ovsec_glue.c (ovsec_kadm_init_with_password,
- ovsec_kadm_init_with_skey, ovsec_kadm_init): Pass through new
- argument to kadm5_init_* routines.
- * server_internal.h: Don't include adb.h.
- (kadm5_server_handle_rec): Delete policy_db field, add db_args
- field.
- (OSA_ADB_PRINC_VERSION_1, osa_pw_hist_ent, osa_pw_hist_t,
- osa_princ_ent_rec, osa_princ_ent_t, xdr_osa_princ_ent_rec,
- osa_free_princ_ent): Duplicate definitions and declarations from
- adb.h.
- (kdb_iter_entry): Add match_entry argument.
-
-2005-04-19 Ken Raeburn <raeburn@mit.edu>
-
- * configure.in: Don't invoke AC_CANONICAL_HOST explicitly,
- CONFIG_RULES already does it.
-
-2004-08-20 Tom Yu <tlyu@mit.edu>
-
- * admin.h (KADM5_CONFIG_NO_AUTH): New flag.
-
-2004-06-25 Tom Yu <tlyu@mit.edu>
-
- * adb.h:
- * kadm_rpc_xdr.c: rpc_u_int32 -> uint32_t
-
-2004-06-24 Tom Yu <tlyu@mit.edu>
-
- * alt_prof.c (kadm5_get_admin_service_name): Fix call to
- kadm5_get_config_params().
-
-2004-06-16 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (clean-mac): Target deleted.
-
-2004-06-15 Tom Yu <tlyu@mit.edu>
-
- * admin.h (kadm5_get_admin_service_name): Prototype for new function.
- (KADM5_CONFIG_OLD_AUTH_GSSAPI): New flag to force old AUTH_GSSAPI
- flavor.
-
- * alt_prof.c (kadm5_get_admin_service_name): New function.
-
-2004-02-12 Tom Yu <tlyu@mit.edu>
-
- * configure.in: Invoke PRIOCNTL_HACK.
-
-2003-06-03 Tom Yu <tlyu@mit.edu>
-
- * alt_prof.c (krb5_read_realm_params): Don't bother reading in
- realm_keysalts or realm_num_keysalts, as they're no longer used.
-
-2003-05-30 Ken Raeburn <raeburn@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Change default max_life to
- one day.
-
-2003-05-13 Ken Raeburn <raeburn@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Remove aes256 from the
- default supported enctypes list for now.
-
-2003-05-04 Sam Hartman <hartmans@mit.edu>
-
- * chpass_util_strings.et: Replace reference to ovpasswd with kpasswd
-
-2003-04-18 Ken Raeburn <raeburn@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Add aes256 to the default
- supported enctypes list.
-
-2003-01-10 Ken Raeburn <raeburn@mit.edu>
-
- * configure.in: Don't explicitly invoke AC_PROG_ARCHIVE,
- AC_PROG_ARCHIVE_ADD, AC_PROG_RANLIB, AC_PROG_INSTALL.
-
- * configure.in: Use V5_AC_OUTPUT_MAKEFILE instead of
- K5_GEN_MAKEFILE and K5_AC_OUTPUT.
-
- * Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2003-01-07 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.ov: Deleted.
-
-2002-12-12 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (all-prerecurse): Change double colons to single
- colons.
-
-2002-11-05 Tom Yu <tlyu@mit.edu>
-
- * chpass_util_strings.et: Remove trailing colons, as new
- implementation of krb5_read_password() appends it.
-
-2002-10-08 Tom Yu <tlyu@mit.edu>
-
- * adb.h (struct _osa_adb_db_ent_t): Add opencnt, which keeps track
- of how many times an open was attempted on the adb.
-
- * admin.h: Add kadm5_lock and kadm5_unlock.
-
-2002-09-18 Ken Raeburn <raeburn@mit.edu>
-
- * admin.h (struct __krb5_realm_params): New field
- realm_kdc_tcp_ports.
- * alt_prof.c (krb5_read_realm_params): Fill it in by looking up
- "kdc_tcp_ports" in the config file.
- (krb5_free_realm_params): Free the storage.
-
- * logger.c (klog_com_err_proc, krb5_klog_init, krb5_klog_close,
- severity2string, klog_vsyslog, krb5_klog_syslog,
- krb5_klog_reopen): Always define functions in prototype style.
-
-2002-08-29 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-08-22 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in ($(HDRS)): Depend on "includes".
-
-2002-07-31 Tom Yu <tlyu@mit.edu>
-
- * kadm_err.et: Add KADM5_MISSING_KRB5_CONF_PARAMS, indicating a
- problem with krb5.conf. This prevents confusing users who look
- for kdc.conf trouble rather than krb5.conf trouble, which is what
- they should be looking at on a kadm5 client.
-
-2002-06-04 Ken Raeburn <raeburn@mit.edu>
-
- * get_admhst.c: Deleted.
-
-2001-11-05 Ezra Peisach <epeisach@mit.edu>
-
- * alt_prof.c (krb5_aprof_get_boolean): Return krb5_boolean *
- instead of int *.
-
-2001-10-09 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c (krb5_klog_init): Initialize savec to keep compiler
- happy.
-
-2001-10-05 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c: Drop _MSDOS support.
-
-2001-09-25 Ken Raeburn <raeburn@mit.edu>
-
- * admin.h (krb5_realm_params): Add fields realm_reject_bad_transit
- and realm_reject_bad_transit_valid; delete field realm_filler.
- * alt_prof.c (string_to_boolean, krb5_aprof_get_boolean): New
- functions.
- (krb5_read_realm_params): Parse "reject_bad_transit" value as
- boolean and save it.
-
-2001-07-25 Ezra Peisach <epeisach@mit.edu>
-
- * kadm_rpc_xdr.c: Add xdr_krb5_ui_2.
- (xdr_krb5_tl_data): Change local variable from int to unsigned int.
-
- * admin_xdr.h: Add prototype for xdr_krb5_ui_2.
-
-2001-07-08 Ezra Peisach <epeisach@mit.edu>
-
- * logger.c (severity2string): Declare as returning const char *.
- (klog_com_err_proc): Do not discard const status of format string.
-
-2001-07-06 Ezra Peisach <epeisach@mit.edu>
-
- * server_internal.h: Add prototype for krb5_copy_key_data_contents.
-
-2001-06-26 Ezra Peisach <epeisach@mit.edu>
-
- * str_conv.c (krb5_string_to_keysalts): When parsing string, allow
- for extra separator characters (like spaces) between keysalts.
-
-2001-06-21 Ezra Peisach <epeisach@mit.edu>
-
- * admin_internal.h (_KADM5_CHECK_HANDLE): Change code to ecode in
- blocked statement to prevent shadowing.
-
-2001-06-20 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c (krb5_klog_init) [HAVE_SYSLOG]: Loop over an array of
- syslog facility names rather than open-coding each check. Add
- "authpriv" and "ftp" names.
-
-2001-06-20 Ezra Peisach <epeisach@mit.edu>
-
- * server_internal.h: Add prototype for kdb_iter_entry().
-
-2001-06-18 Ezra Peisach <epeisach@mit.edu>
-
- * alt_prof.c (krb5_read_realm_params): Cast argument to isspace()
- to int.
- * logger.c (krb5_klog_init): Likewise.
-
-2001-06-17 Ezra Peisach <epeisach@mit.edu>
-
- * logger.c (klog_vsyslog): If krb5_klog_init() is not called, do
- not pass a NULL pointer to vsprintf for a %s format. Also, if
- syslog() exists on the system, fallback to using this so the
- message is not dropped on the floor.
-
-2001-06-04 Ezra Peisach <epeisach@mit.edu>
-
- * logger.c (krb5_klog_init): Cleanup assignments in
- conditionals. Ensure that if hostname is MAXHOSTNAMELEN, buffer is
- \0 terminated.
-
- * str_conv.c (krb5_string_to_keysalts, krb5_keysalt_iterate):
- Clean up assignments in conditionals.
-
- * admin.h: Move kadm5_free_name_list() to version 1 api as it is
- present in the ovsec_glue layer.
-
-2001-03-10 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * str_conv.c: Include adm_proto.h for missing prototypes.
-
-Sun Feb 18 16:26:33 2001 Ezra Peisach <epeisach@mit.edu>
-
- * server_internal.h: Add prototype for
- krb5_free_key_data_contents() which really should be in libkdb.
-
- * kadm_rpc_xdr.c: Include krb5/admin_xdr.h for prototypes.
-
- * kadm_rpc.h: Add prototypes for client and server stub
- functions. Server functions renamed to have _svc appended.
-
- * alt_prof.c: Clean up warnings. Do not shadow index() with local
- variable.
-
- * admin_xdr.h: Add prototypes for xdr_nulltype(), xdr_krb5_ui_4(),
- xdr_krb5_int16(), xdr_krb5_key_data_nocontents(),
- xdr_krb5_key_salt_tuple(), xdr_krb5_tl_data(),
- xdr_kadm5_principal_ent_rec_v1(), xdr_cprinc3_arg(),
- xdr_generic_ret(0, xdr_chpass3_arg(), xdr_setv4key_arg(),
- xdr_setkey_arg(), xdr_setkey3_arg(), xdr_chrand3_arg(),
- xdr_gprincs_arg(), xdr_grpincs_ret(), xdr_gpols_arg(),
- xdr_gpols_ret(), xdr_getprivs_ret(), xdr_krb5_salttype().
-
- * admin_internal.h: Add prototype for _kadm5_check_handle().
-
- * admin.h: Add prototypes for kadm5_free_config_params(),
- kadm5_decrypt_key(), ovsec_kadm_free_name_list().
-
- * adb.h: Add prototypes for xdr_osa_pw_hist_ent(),
- xdr_krb5_key_data(), osa_adb_rename_db(),
- osa_adb_rename_policy_db().
-
-2001-01-16 Ken Raeburn <raeburn@mit.edu>
-
- * str_conv.c (krb5_keysalt_iterate): Always use the prototype for
- function-pointer argument ITERATOR.
-
-2000-10-17 Ezra Peisach <epeisach@mit.edu>
-
- * admin.h (KADM5_PW_FIRST_PROMPT): Get rid of casts from
- error_message to char * - leave them as const char *.
- (kadm5_chpass_principal_util): Argument msg_len is unsigned int.
-
- * admin_internal.h (_kadm5_chpass_principal_util): msg_len is
- unsigned int.
-
- * chpass_util.c (_kadm5_chpass_principal_util): Change msg_len to
- unsigned int. Arhument to krb5_read_password is unsigned int.
-
-2000-07-03 Ezra Peisach <epeisach@mit.edu>
-
- * admin.h: Add kadm5_free_name_list prototype.
-
-2000-06-30 Tom Yu <tlyu@mit.edu>
-
- * adb.h: Add btinfo.
-
- * configure.in: Remove AIX_DB_LIB kludge as we're now building
- libdb reasonably.
-
-2000-06-28 Ezra Peisach <epeisach@mit.edu>
-
- * alt_prof.c (krb5_aprof_init): profile_init takes a
- profile_filespec_t as argument instad of char **.
-
-2000-06-23 Ken Raeburn <raeburn@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Include des3 in supported
- enctypes by default.
-
- * ovsec_glue.c (ovsec_kadm_chpass_principal_util): Use 1024 for
- hard-coded length, to match existing callers.
-
-2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
-
- * admin.h: Add a length parameter to kadm5_chpass_principal_util().
- * admin_internal.h: Add a length parameter to
- _kadm5_chpass_principal_util().
- * chpass_util.c (_kadm5_chpass_principal_util): Add a length parameter,
- and use it to avoid overflowing "msg_ret".
- * ovsec_glue.c (ovsec_kadm_chpass_principal_util): Adjust for new
- parameter in kadm5_chpass_principal_util().
-
- * logger.c (klog_com_err_proc): Don't overflow buffer "outbuf".
-
-2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
-
- * configure.in, chpass_util.c, server_internal.h: Check for
- existance of <memory.h>.
- [from Nathan Neulinger <nneul@umr.edu>]
-
-2000-02-26 Tom Yu <tlyu@mit.edu>
-
- * kadm_rpc_xdr.c (xdr_cprinc3_arg): Don't XDR the nonexistent
- keepold flag.
-
- * kadm_rpc.h: Remove keepold flag from cprinc3_arg.
-
- * admin.h: Remove keepold flag from create_principal_3, which was
- kinda ridiculous.
-
-2000-02-22 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (includes): Extract basename of header file to be
- installed, since Digital UNIX 4.0 native make substitutes the
- VPATH-derived pathname here.
-
-2000-02-21 Bear Giles <bgiles@coyotesong.com>
-
- * alt_prof.c (krb5_read_realm_params): Permit realm supported
- enctypes to be unspecified, letting the KDC produce defaults.
- Don't look up enctypes at all if an error is to be returned.
-
-2000-02-18 Tom Yu <tlyu@mit.edu>
-
- * kadm_rpc_xdr.c (xdr_chpass3_arg):
- (xdr_chrand3_arg): Fix up calls to xdr_array.
-
-2000-02-13 Tom Yu <tlyu@mit.edu>
-
- * kadm_rpc_xdr.c: Add xdr functions for new kadm rpc functions.
-
- * kadm_rpc.h: Add arg structs, prototypes, constants for new kadm
- rpc functions.
-
- * kadm_err.et: Add error code KADM5_SETKEY3_ETYPE_MISMATCH.
-
- * admin.h: Add prototype for setkey_principal_3.
-
-1999-12-01 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c (klog_vsyslog): Convert pid_t to long for printing.
-
-1999-11-30 Ken Raeburn <raeburn@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Fix bug in direction of
- test while walking through whitespace. Thanks to Matt Crawford.
-
-1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
-
- * Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
- LOCAL_INCLUDES such that one can override CFLAGS from the command
- line without losing CPP search patchs and defines. Some associated
- Makefile cleanup.
-
-1999-09-28 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c (lspec_parse_err_1, lspec_parse_err_2, log_file_err,
- log_device_err, log_ufo_string, log_emerg_string,
- log_alert_string, log_crit_string, log_err_string,
- log_warning_string, log_notice_string, log_info_string,
- log_debug_string): Replace char arrays with macros.
- (klog_com_err_proc, klog_vsyslog): When calling syslog, supply %s
- format string.
-
-1999-09-23 Ken Raeburn <raeburn@mit.edu>
-
- * logger.c (DEVICE_PRINT, klog_com_err_proc, klog_vsyslog): Use
- proper format strings to fprintf, instead of net-supplied data.
- Fold in writes of following end-of-line sequences when
- appropriate.
-
-1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Set the myfulldir and mydir variables (which are
- relative to buildtop and thisconfigdir, respectively.)
-
-Fri Dec 4 23:12:43 1998 Tom Yu <tlyu@mit.edu>
-
- * admin.h: Add prototypes for create_principal_3,
- chpass_principal_3, and randkey_principal_3.
-
-Thu Aug 13 17:21:06 1998 Tom Yu <tlyu@mit.edu>
-
- * alt_prof.c (krb5_read_realm_params): Fix to check
- "supported_enctypes" if "kdc_supported_enctypes" isn't there.
-
-Wed Aug 12 20:19:08 1998 Tom Yu <tlyu@mit.edu>
-
- * alt_prof.c (krb5_read_realm_params): Use
- "kdc_supported_enctypes" instead of "supported_enctypes" so that
- the KDC and the kadmind will use different enctype lists.
-
-Wed Jul 8 04:48:50 1998 Geoffrey J. King <gjking@mit.edu>
-
- * logger.c: Add the function krb5_klog_reopen() which closes
- and reopens the log files.
-
-Mon Apr 6 19:40:05 1998 Tom Yu <tlyu@voltage-multiplier.mit.edu>
-
- * Makefile.in (includes): Don't call mkdir unless the directory
- exists.
-
-Fri Feb 27 22:30:41 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * configure.in: Move tests from all of kadm5's subdirectories into
- this configure.in, and make it generate makefiles for all
- of the subdirectories.
-
- * Makefile.in: Add a LOCAL_SUBDIRS macro for all subdirectories in
- the kadm5 library.
-
-Wed Feb 25 15:00:10 1998 Ezra Peisach <epeisach@mit.edu>
-
- * alt_prof.c (krb5_free_realm_params): Free realm_acl_file portion
- of structure.
-
-Wed Feb 18 16:13:56 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove trailing slash from thisconfigdir. Fix up
- BUILDTOP for new conventions.
-
-Fri Feb 13 21:33:27 1998 Tom Yu <tlyu@mit.edu>
-
- * admin.h:
- * kadm_rpc.h:
- * kadm_rpc_xdr.c: Update header locations.
-
-Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * configure.in, Makefile.in: Remove the CopySrcHeader and
- CopyHeader macros from configure.in and substitute
- equivalent functionality in Makefile.in
-
-Tue Jan 20 23:06:36 1998 Tom Yu <tlyu@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): Add support for Cygnus chpw.
-
- * admin.h: Add support for Cygnus chpw.
-
-Mon Oct 13 10:48:24 1997 Ezra Peisach <epeisach@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): When KADM5_CONFIG_ENCTYPES
- is set on the input parameters, allocate a new copy of the
- key_salts for the output parameters.
- (kadm5_free_config_params): Free the admin_server and admin_lockfile
- names.
-
-Tue Oct 7 07:48:12 1997 Ezra Peisach <epeisach@mit.edu>
-
- * logger.c: Include ctype.h for isspace definition.
-
-Tue Jul 1 02:31:07 1997 Tom Yu <tlyu@mit.edu>
-
- * kadm_rpc.h, kadm_rpc_xdr.c: Add support for setv4key.
-
-Sun Jun 29 14:52:04 1997 Tom Yu <tlyu@mit.edu>
-
- * kadm_err.et: Add support for kadm5_setv4key_principal.
-
- * admin.h: Add prototype for kadm5_setv4key_principal.
-
-Wed May 28 13:34:17 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * admin.h: add prototype for kadm5_setkey_principal
-
- * misc_free.c (kadm5_free_key_data): add kadm5_free_data
-
-Mon Mar 31 17:41:11 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * kadm_err.et, kadm_rpc.h, kadm_rpc_xdr.c: add support for
- setkey_principal
-
-Thu Jan 16 19:01:00 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (all-prerecurse): Update to use double-colon rules.
-
-Wed Jan 15 20:43:01 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in:
- * configure.in: Update to new libarary build procedure.
-
-Mon Nov 11 17:01:40 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * kadm_rpc_xdr.c: fix memory leak handling key_data and tl_data
-
-Wed Nov 6 10:20:36 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * kadm_err.et: New error codes for KADM5_MISSING_CONF_PARAMS and
- KADM5_BAD_SERVER_NAME.
-
-Mon Nov 4 21:16:01 1996 Theodore Y. Ts'o <tytso@mit.edu>
-
- * alt_prof.c (krb5_aprof_init): If the user specifies the config
- file using a configuration file, it must exist.
- Otherwise, krb5_aprof_init will return an error.
- (kadm5_get_config_params): If aprof_init returns an error,
- it should return an error as well.
-
-Wed Nov 6 17:45:43 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * kadm_rpc_xdr.c (xdr_krb5_principal): handle a NULL principal
- pointer (this can happen when get_principal is passed a mask
- without KADM5_PRINCIPAL in it, and will cause a beta 7 kadmind to
- coredump)
-
-Fri Nov 1 13:16:16 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * kadm_err.et: update for new tl_data semantics [krb5-admin/140]
-
-Fri Oct 25 23:47:26 1996 Tom Yu <tlyu@mit.edu>
-
- * configure.in, Makefile.in: Tweaks to prevent unecessary
- rebuilding.
-
-Mon Oct 21 21:23:44 1996 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Fixes for new directory recursion method; also
- fixes for inclusion sequencing.
-
-Mon Oct 21 16:29:11 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * server_internal.h (ALL_PRINC_MASK): add KADM5_TL_DATA and
- KADM5_KEY_DATA to ALL_PRINC_MASK [krb5-admin/20]
-
-Fri Oct 18 15:44:14 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * kadm_rpc_xdr.c, misc_free.c, server_internal.h: include stdlib.h
- instead of malloc.h [krb5-admin/35]
-
-Tue Oct 15 18:01:51 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * logger.c (krb5_klog_init): remember to call openlog() when
- defaulting to syslog because nothing else was specified
- (klog_vsyslog): enable VERBOSE_LOGS so we get the process name and
- pid [krb5-kdc/63]
-
-Thu Sep 26 17:45:18 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * alt_prof.c: don't allow admin_dbname or admin_lockfile to be
- independetly configured
-
-Fri Sep 20 16:52:07 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * configure.in: add unit-test directory
-
-Wed Sep 18 12:35:16 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): set max_life default to 10
- hours, instead of 0
-
-Tue Sep 17 15:09:28 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * server_internal.h (ALL_PRINC_MASK): Add MAX_RLIFE to
- ALL_PRINC_MASK.
-
-Tue Sep 10 01:47:39 1996 Mark Eichin <eichin@cygnus.com>
-
- * alt_prof.c (krb5_aprof_init): use profile_init_path on fname,
- not profile_init.
-
-Wed Aug 28 16:11:50 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * alt_prof.c (kadm5_get_config_params): fix default semantics to
- agree with api-funcspec.tex
-
-Mon Aug 26 17:02:55 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * admin.h: KRB5_TL_KADM5_E_DATA moved to kdb.h
-
-Fri Aug 2 13:19:29 1996 Barry Jaspan <bjaspan@DUN-DUN-NOODLES>
-
- * alt_prof.c (kadm5_get_config_params): alloc enough bytes for
- adbname
-
- * kadm_rpc_xdr.c (xdr_krb5_kvno): assign tmp before xdr'ing it to
- avoid a spurious purify error
-
-Thu Jul 25 12:04:32 1996 Theodore Y. Ts'o <tytso@mit.edu>
-
- * admin_internal.h (_KADM5_CHECK_HANDLE): Add parenthesis around
- assignment used as truth value to reduce gcc -Wall flames.
-
- * misc_free.c (kadm5_free_name_list, krb5_free_key_data_contents:
- Add KADM5_OK return value upon success.
-
-
-Wed Jul 24 18:18:39 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
-
- * Makefile.in, configure.in: fix shared lib lossage by
- rearrangement of subdirectories
-
-Tue Jul 23 16:49:56 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
-
- * Makefile.in: delete extraneous trailing backslash from GENSRCS
- and GENOBJS
-
-Mon Jul 22 04:17:23 1996 Marc Horowitz <marc@mit.edu>
-
- * configure.in (LIBS): add -lgen to LIBS whenever compile is
- found. Solaris requires it.
-
- * chpass_util.c (_kadm5_chpass_principal_util): the calls to
- kadm5_free_{princicpal,policy}_ent used server_handle instead of
- lhandle, which caused problems in the api versioning code.
-
-Thu Jul 18 19:50:39 1996 Marc Horowitz <marc@mit.edu>
-
- * configure.in: removed ET_RULES, replaced with AC_PROG_AWK
-
-Mon Jul 15 16:52:44 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * client_init.c (_kadm5_init_any): use krb5_get_in_tkt_keytab
- instead of changing krb5_defkeyname
-
-Mon Jul 15 16:36:02 1996 Marc Horowitz <marc@mit.edu>
-
- * Makefile.in (CLNTOBJS), AC_REPLACE_FUNCS: check for setenv, and
- link against setenv.o if it's needed.
-
-Fri Jul 12 15:06:48 1996 Marc Horowitz <marc@mit.edu>
-
- * svr_iters.c (glob_to_regexp:append_realm): the semantics and
- code were somewhat confused. they are now fixed.
-
- * logger.c (HAVE_*): turn all the "#if HAVE_*" into
- "#ifdef HAVE_*"
-
- * configure.in (AC_CHECK_FUNCS): check for the functions which
- logger.c checks for.
-
- * svr_principal.c (kadm5_get_principal): due to the the api
- versioning, it is possible for this function to be called with a
- three argument prototype. in this case, do not modify mask,
- because this will clobber the stack on some platforms.
-
- * client_principal.c (kadm5_create_principal): be more careful
- about what sorts of things are referenced, passed down, and passed
- back if the caller is api v1.
-
-Wed Jul 10 01:29:34 1996 Marc Horowitz <marc@mit.edu>
-
- * configure.in: added autoconf support
-
-Tue Jul 9 17:38:43 1996 Marc Horowitz <marc@mit.edu>
-
- * svr_iters.c (*_REGEXPS): rework the conditionals to operate
- as functions of function symbols tested by configure.
- * client_init.c (setenv, unsetenv declarations): make them the
- same as the stdlib declarations, if they're going to be here at
- all.
- * Makefile.in: reworked to support building both libraries. this
- required a bunch of changes, including some coordinating ones in
- aclocal.m4
-
-Tue Jul 9 16:26:26 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c (kadm5_decrypt_key): add kadm5_decrypt_key
-
-Mon Jul 8 16:55:22 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_iters.c (kadm5_get_either): append local ream to globs with
- no realm
-
- * alt_prof.c: fix dbname, admin_dbname, and admin_lockfile to
- derive from each other as in spec
-
- * adb_policy.c: add create_db/destroy_db
-
- * adb_openclose.c: add create_db/destroy_db, fix handling of
- permanent locks, handle multiple lock files via static linked list
-
- * adb.h: update create_db/destroy_db to make params instead of
- explicit values
-
- * Makefile.ov (TOP): Use ../../kadmin, not kadmin.ov
-
-
diff --git a/src/lib/kadm5/clnt/ChangeLog b/src/lib/kadm5/clnt/ChangeLog
deleted file mode 100644
index 5ffae1f3b..000000000
--- a/src/lib/kadm5/clnt/ChangeLog
+++ /dev/null
@@ -1,368 +0,0 @@
-2006-04-03 Ken Raeburn <raeburn@mit.edu>
-
- * err_handle.c: Include autoconf.h and string.h.
- (HAVE_PTHREAD_H): Undefine.
-
- * Makefile.in (DEFS): Make empty.
-
-2006-03-31 Ken Raeburn <raeburn@mit.edu>
-
- * client_init.c: Include autoconf.h.
-
-2005-11-17 Ken Raeburn <raeburn@mit.edu>
-
- * client_principal.c, clnt_policy.c: Include errno.h.
- * client_init.c: Include k5-int.h before krb5.h.
- * err_handle.h: Include com_err.h and krb5.h instead of k5-int.h.
-
-2005-10-13 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5clnt.exports: Don't export internal error-table
- symbols.
-
-2005-08-20 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5clnt.exports: Delete RPC functions, and references to
- adb error table.
- * client_init.c, client_principal.c, client_rpc.c, clnt_policy.c,
- clnt_privs.c: Renamed all RPC functions from _1 to _2 to match
- current program version number.
-
-2005-07-01 Ken Raeburn <raeburn@mit.edu>
-
- * err_handle.c (krb5_err_key): Variable deleted.
- (init_err_handling, krb5_set_err, krb5_get_err_string,
- krb5_clr_error): Use k5_ macros for thread-specific data instead
- of pthread versions.
-
-2005-06-20 Ken Raeburn <raeburn@mit.edu>
-
- Novell merge.
- * err_handle.c: New file.
- * err_handle.h: New file.
- * Makefile.in (SRCS, OBJS, STLIBOBJS, err_handle.o): Build
- err_handle.c.
- * client_init.c (_kadm5_init_any): Accept new db_args argument,
- but ignore it. Don't call initialize_adb_error_table.
- (kadm5_init_with_creds, kadm5_init_with_password, kadm5_init,
- kadm5_init_with_skey): Accept new db_args argument and pass it
- through to _kadm5_init_any.
- * client_principal.c: Include err_handle.h.
- (kadm5_get_principal, kadm5_get_principals,
- kadm5_randkey_principal_3, kadm5_randkey_principal): If an error
- was returned from the server, pass it and the error string to
- krb5_set_err.
- * clnt_policy.c: Include err_handle.h.
- (kadm5_create_policy, kadm5_delete_policy, kadm5_modify_policy,
- kadm5_get_policy, kadm5_get_policies): If an error was returned
- from the server, pass it and the error string to krb5_set_err.
- * clnt_privs.c: Include err_handle.h.
- (kadm5_get_privs): If an error was returned from the server, pass
- it and the error string to krb5_set_err.
-
-2005-02-11 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (kadm5_get_init_creds, kadm5_gic_iter)
- (kadm5_setup_gss, kadm5_rpc_auth): New functions, containing parts
- of _kadm5_init_any.
- (_kadm5_init_any): Bits broken out into helper functions.
- (kadm5_get_init_creds): Fall back from kadmin/fqdn to kadmin/admin
- if NULL service name passed in.
- (kadm5_rpc_auth): Fall back from RPCSEC_GSS to AUTH_GSSAPI.
-
-2004-10-25 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any): Pass req_flags and cred to
- auth_gss_create().
-
-2004-08-20 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any): Remove INIT_TEST ifdefs. Use
- KADM5_CONFIG_NO_AUTH to request no auth (for testing).
-
-2004-06-30 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5clnt.exports: Export kadm5_get_admin_service_name.
-
-2004-06-24 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any)[DEBUG]: Print error from
- clnttcp_create().
- (_kadm5_init_any): Use kadm5_get_admin_service_name() if null
- pointer passed in for service_name.
-
-2004-06-15 Tom Yu <tlyu@mit.edu>
-
- * client_principal.c (eret): Add some debugging messages for some
- RPC errors.
-
- * client_init.c (_kadm5_init_any): Add support for RPCSEC_GSS.
- Default to using AUTH_GSSAPI for ovsec.
-
-2004-06-04 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (LIBBASE): Renamed from LIB.
-
-2004-04-22 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5clnt.exports: New file.
-
-2003-12-13 Ken Raeburn <raeburn@mit.edu>
-
- * client_init.c (enctypes): Variable deleted.
- (_kadm5_init_any): Pass a null pointer instead of enctypes.
-
-2003-01-10 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Add AC_SUBST_FILE marker for lib_frag and libobj_frag.
-
-2002-10-08 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (LIBMINOR): Bump.
-
- * client_init.c (kadm5_lock, kadm5_unlock): Add stubs that error
- out, since these are not supported on the client side.
-
-2002-09-18 Ken Raeburn <raeburn@mit.edu>
-
- * client_init.c (_kadm5_init_any): If creating a new ccache, put
- it in memory instead of on disk.
-
-2002-08-29 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-07-31 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any): Use
- KADM5_MISSING_KRB5_CONF_PARAMS in order to be less confusing to
- someone running kadmin rather than kadmin.local.
-
-2002-07-17 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS, SHLIB_EXPLIBS): Drop references to
- libdyn.
-
-2002-03-06 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (LIBMAJOR): Bump to avoid Heimdal conflict.
-
-2001-11-07 Sam Hartman <hartmans@mit.edu>
-
- * client_init.c: Allow arcfour-hmac-md5 to be used for kadmin
-
-2001-06-18 Ezra Peisach <epeisach@mit.edu>
-
- * client_init.c (_kadm5_init_any): Add casts to (gss_OID) in calls
- to gss library.
-
-Sun Feb 18 17:32:53 2001 Ezra Peisach <epeisach@mit.edu>
-
- * client_rpc.c: Insure pointer argument type is same as passed
- onto xdr functions. (arguments specified to *3_1 functions were
- for the *_1 functions).
-
- * client_init.c, client_principal.c, clnt_policy.c: Cleanup unused
- variables and assignments in conditionals.
-
-2000-10-17 Ezra Peisach <epeisach@mit.edu>
-
- * clnt_chpass_util.c (kadm5_chpass_principal_util): Change msg_len
- to unsigned int.
-
-2000-07-03 Ezra Peisach <epeisach@mit.edu>
-
- * Makefile.in: The client library does not depend on the database
- library. Remove reference to it.
-
-2000-06-30 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS): Add libdb.
- (SHLIB_EXPLIBS): Add -ldb.
-
-2000-06-28 Ezra Peisach <epeisach@mit.edu>
-
- * client_init.c (_kadm5_init_any): gss_krb5_ccache_name returns
- const char *, but the code was treating it as a char *.
-
-2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
-
- * clnt_chpass_util.c (kadm5_chpass_principal_util): Adjust for new
- length parameter in both kadm5_chpass_principal_util() and in
- _kadm5_chpass_principal_util().
-
- * client_init.c (_kadm5_init_any): Fix determination of client
- name length for overflow checking.
-
-2000-06-23 Ken Raeburn <raeburn@mit.edu>
-
- * client_init.c (enctypes): Add des3 and des-md5 to the list of
- permitted enctypes.
-
-2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
-
- * client_init.c, client_principal.c, client_rpc.c: Check for
- existance of <memory.h>.
- [from Nathan Neulinger <nneul@umr.edu>]
-
-2000-02-26 Tom Yu <tlyu@mit.edu>
-
- * client_principal.c (kadm5_create_principal_3): Remove keepold
- argument.
-
- * Makefile.in (LIBMAJOR): Bump major number due to call signature
- changes.
-
-2000-02-13 Tom Yu <tlyu@mit.edu>
-
- * client_rpc.c: Add new client stubs.
-
- * client_principal.c: Add new functions for client-side kadm rpc
- calls.
-
-2000-01-27 Ken Raeburn <raeburn@raeburn.org>
-
- * client_init.c (enctypes): New array, listing only
- ENCTYPE_DES_CBC_CRC.
- (_kadm5_init_any): Pass it in krb5_get_in_tkt_with_* calls for
- now, while GSSAPI/krb5 can only handle DES.
-
-1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
-
- * Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
- LOCAL_INCLUDES such that one can override CFLAGS from the command
- line without losing CPP search patchs and defines. Some associated
- Makefile cleanup.
-
-1999-08-27 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any): Remove support for krb5-mech2
- for now.
-
-Thu May 13 17:24:44 1999 Tom Yu <tlyu@mit.edu>
-
- * client_init.c (_kadm5_init_any): Use gss_krb5_ccache_name() to
- set the gssapi ccache name.
-
-1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Set the myfulldir and mydir variables (which are
- relative to buildtop and thisconfigdir, respectively.)
-
-1998-10-27 Marc Horowitz <marc@mit.edu>
-
- * client_init.c (_kadm5_init_any): try the krb5 v2 mechanism
- first, and if that fails, try the krb5 v1 mech.
-
-Sun Jul 26 18:11:56 1998 Sam Hartman <hartmans@utwig.mesas.com>
-
- * Makefile.in (LIBMAJOR): bump libmajor
-
-Wed Apr 15 18:05:57 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS):
- (SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.
-
-Fri Feb 27 22:32:16 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Changed thisconfigdir to point at the lib/kadm5
- directory, since we've moved all of the configure.in
- tests to the toplevel lib/kadm5 configure.in
-
-Wed Feb 18 16:14:27 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove trailing slash from thisconfigdir. Fix up
- BUILDTOP for new conventions.
-
-Fri Feb 13 21:30:34 1998 Tom Yu <tlyu@mit.edu>
-
- * client_init.c:
- * client_principal.c:
- * client_rpc.c:
- * clnt_policy.c:
- * clnt_privs.c: Update header locations.
-
- * Makefile.in (LIBMAJOR): Bump major version to reflect change in
- rpc library.
-
-Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * configure.in, Makefile.in: Remove the CopySrcHeader macro
- from configure.in and substitute equivalent
- functionality in Makefile.in
-
-Mon Oct 13 10:55:02 1997 Ezra Peisach <epeisach@mit.edu>
-
- * client_init.c (kadm5_destroy): Free handle->lhandle field, call
- kadm5_free_config_params and krb5_free_context.
-
-Tue Jul 1 02:34:46 1997 Tom Yu <tlyu@mit.edu>
-
- * client_principal.c, client_rpc.c: Add support for setv4key.
-
-Mon Mar 31 17:40:48 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * client_principal.c, client_rpc.c: add support for
- setkey_principal
-
-Sat Feb 22 01:35:19 1997 Sam Hartman <hartmans@tertius.mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS): s/.so/$(SHLIBEXT)
-
-Wed Jan 15 20:49:34 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in:
- * configure.in: Update to new library build procedure.
-
-Wed Nov 13 19:20:11 1996 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (clean-unix): Remove shared/*.
-
-Wed Nov 6 10:35:01 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * client_init.c (_kadm5_init_any): Use a more fined grained error
- code, KADM5_MISSING_CONF_PARAMS instead of
- KRB5_CONFIG_BADFORMAT
- (_kadm5_init_any): Use a more fined grained error code,
- KADM5_BAD_SERVER_NAME, instead of KRB5_CONFIG_BADFORMAT.
-
-Thu Nov 7 11:41:08 1996 Ezra Peisach <epeisach@mit.edu>
-
- * client_principal.c (kadm5_get_principal,
- kadm5_modify_principal): For a V1 request, copy only the
- memory that is allocated for the incomming principal.
-
-Fri Oct 4 08:38:16 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * client_principal.c (kadm5_randkey_principal): Do not assume that
- malloc(0) returns non-NULL. [krb5-admin/29]
-
-Mon Aug 26 16:33:31 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * client_init.c (_kadm5_init_any): use DEFAULT_PROFILE_PATH
- instead of "/etc/krb5.conf"
-
-Wed Jul 31 17:01:38 1996 Tom Yu <tlyu@mit.edu>
-
- * client_init.c: Revert prior change due to netdb.h shuffling.
-
-Tue Jul 30 19:47:53 1996 Tom Yu <tlyu@mit.edu>
-
- * client_init.c: Remove #include <netdb.h> because rpc/types.h
- (included from kadm5/admin.h) gets it.
-
-Wed Jul 24 20:59:35 1996 Sam Hartman <hartmans@tertius.mit.edu>
-
- * configure.in: Don't replace setenv
-
- * client_init.c (_kadm5_init_any): Use krb5_setenv and krb5_unsetenv
-
-Wed Jul 24 18:20:47 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
-
- * Makefile.in, configure.in: break out client lib into a
- subdirectory
-
diff --git a/src/lib/kadm5/srv/ChangeLog b/src/lib/kadm5/srv/ChangeLog
deleted file mode 100644
index 70f06ee17..000000000
--- a/src/lib/kadm5/srv/ChangeLog
+++ /dev/null
@@ -1,593 +0,0 @@
-2006-04-03 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (DEFS): Make empty.
-
-2006-03-31 Ken Raeburn <raeburn@mit.edu>
-
- * svr_iters.c: Include autoconf.h.
-
-2006-03-11 Ken Raeburn <raeburn@mit.edu>
-
- * svr_principal.c, server_misc.c: Don't look for kdb.h in krb5/.
-
-2005-11-17 Ken Raeburn <raeburn@mit.edu>
-
- * server_init.c, svr_policy.c: Include errno.h.
-
-2005-10-13 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5srv.exports: Don't export internal error-table symbols,
- or osa* symbols that no longer exist in this library.
-
-2005-09-27 Tom Yu <tlyu@mit.edu>
-
- * svr_iters.c (glob_to_regexp): Increment pointer, not character,
- when handling backslash quoting. Patch from K.G. Gokulavasan.
-
-2005-06-20 Ken Raeburn <raeburn@mit.edu>
-
- Novell merge.
- * Makefile.in (SRCS, OBJS, STLIBOBJS): Remove adb_policy,
- adb_free, and adb_openclose.
- * adb_free.c: Deleted.
- * adb_openclose.c, adb_policy.c: Moved to lib/kdb/kdb_db2.
- * adb_xdr.c: Include server_internal.h; don't include adb.h.
- (xdr_osa_policy_ent_rec): Function deleted.
- (osa_free_princ_ent): Moved here from old adb_free.c.
- * server_init.c (dup_db_args, free_db_args): New functions.
- (kadm5_init_with_password, kadm5_init_with_creds,
- kadm5_init_with_skey): Accept new db_args argument, and pass it to
- kadm5_init.
- (kadm5_init): Accept new db_args argument. Don't set the database
- name; instead, set the default realm for the context. Call
- krb5_db_open instead of krb5_db_init, requesting write access and
- passing in the database arguments. Don't call adb_policy_init,
- and don't set deleted field handle->lhandle->policy_db.
- (kadm5_lock): Don't lock the policy database. Use
- KRB5_DB_LOCKMODE_EXCLUSIVE flags instead of
- KRB5_LOCKMODE_EXCLUSIVE.
- (kadm5_unlock): Don't unlock the policy database.
- (kadm5_flush): In the error case, use krb5_db_open instead of
- krb5_db_set_name and krb5_db_init.
- * server_kdb.c (kdb_init_master): Don't call krb5_db_init. Use
- KADM5_XDR_FAILURE instead of OSA_ADB_XDR_FAILURE.
- (kdb_iter_entry): Accept new string argument match_entry; pass it
- to krb5_db_iterate.
- * server_misc.c: Don't include adb.h.
- (adb_policy_init): Don't call osa_adb_open_policy. If
- krb5_db_inited is falso on the context, call krb5_db_open.
- (adb_policy_close): Don't call osa_adb_close_policy; do nothing.
- * svr_iters.c: Don't include adb.h.
- (kadm5_get_either): Pass glob pattern ("*" if not specified) to
- kdb_iter_entry.
- * svr_policy.c: Don't include adb.h.
- (kadm5_create_policy, kadm5_delete_policy, kadm5_modify_policy,
- kadm5_get_policy): Call krb5_db_clr_error. Call
- krb5_db_create_policy etc instead of osa_adb_* versions, passing
- the krb5 context instead of the policy database handle. For
- krb5_db_get_policy, treat a returned count of zero as a not-found
- indication.
- (kadm5_modify_policy_internal): Don't translate the returned error
- code from krb5_db_put_policy.
- * svr_principal.c: Don't include adb.h.
- (kadm5_copy_principal, kadm5_free_principal): New functions, using
- krb5_db_alloc and krb5_db_free for storage.
- (cleanup_key_data): Use krb5_db_free.
- (kadm5_create_principal_3, kadm5_delete_principal,
- kadm5_modify_principal, kadm5_rename_principal,
- kadm5_get_principal, kadm5_chpass_principal_3,
- kadm5_randkey_principal_3, kadm5_setv4key_principal,
- kadm5_setkey_principal_3,
-
- ): Call krb5_db_clr_error.
- (kadm5_create_principal_3): Use kadm5_copy_principal instead of
- krb5_copy_principal. If the KADM5_TL_DATA flag is set, call
- krb5_dbe_update_tl_data on each element supplied, to augment
- and/or replace the existing tl data with a copy of the supplied
- data, instead of splicing the supplied list and the existing list
- together. Use krb5_db_free_principal instead of
- krb5_dbe_free_contents.
- (kadm5_modify_principal): Use krb5_dbe_update_tl_data to merge tl
- data records.
- (kadm5_rename_principal): Use kadm5_{copy,free}_principal.
- (kadm5_chpass_principal_3): Use krb5_db_free_principal instead of
- krb5_dbe_free_contents.
- (kadm5_setv4key_principal): Use krb5_db_alloc, not malloc, for key
- data to be returned. Use an automatic variable for the key data,
- before copying out to the object so allocated.
- (kadm5_setkey_principal_3): Likewise.
- (decrypt_key_data): On error, clear and free any key storage that
- might've been returned from previous calls
- krb5_dbekd_decrypt_key_data.
-
-2004-12-20 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (add_to_history): Rewrite somewhat, using
- temporary variables to make things somewhat more readable. Fix
- buffer overflow case where the next pointer points into
- unallocated space but resizing wasn't done, i.e., when someone
- decreases the policy history count to the exact "right" number.
- Fix some memory leaks. To avoid losing entries, shift some
- entries forward after growing the array.
-
-2004-08-21 Tom Yu <tlyu@mit.edu>
-
- * libkadm5srv.exports: Update for previous renaming.
-
-2004-08-20 Alexandra Ellwood <lxs@mit.edu>
-
- * server_acl.[ch]: renamed acl_* functions to kadm5int_acl_*
-
-2004-06-16 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (clean-mac): Target deleted.
-
-2004-06-04 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (LIBBASE): Renamed from LIB.
-
-2004-04-22 Ken Raeburn <raeburn@mit.edu>
-
- * libkadm5srv.exports: New file.
-
-2003-09-02 Alexandra Ellwood <lxs@mit.edu>
-
- * svr_principal.c: Added Apple password server support.
-
-2003-06-13 Tom Yu <tlyu@mit.edu>
-
- * server_kdb.c (kdb_init_hist): Force history principal's key to
- be of the same enctype as the master key, as searches for it later
- on explicitly specify the enctype.
-
-2003-04-01 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove $(SHLIB_DBLIB_DEPS) and related variables.
- (SHLIB_EXPDEPS): Remove $(SHLIB_DBLIB_DEPS).
- (SHLIB_EXPLIBS): Change $(DB_LIB) to $(KDB5_DB_LIB).
-
-2003-01-12 Ezra Peisach <epeisach@bu.edu>
-
- * svr_iters.c (kadm5_get_either): For POSIX_REGEXPS
- (i.e. regcomp), call regfree() to cleanup memory.
-
-2003-01-10 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Add AC_SUBST_FILE marker for lib_frag and libobj_frag.
-
-2003-01-05 Sam Hartman <hartmans@mit.edu>
-
- * server_dict.c: Remove declaration of errno
-
- * adb_policy.c: Remove declaration of errno
-
-2002-12-16 Ezra Peisach <epeisach@bu.edu>
-
- * Makefile.in: Change to allow compilation with-system-db and
- shared libraries.
-
-2002-11-07 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_setkey_principal_3): Apply patch from
- Emily Ratliff to allow n_ks_tuple to be zero, which is the case if
- being called from kadmind answering a client's setkey_principal
- request.
-
-2002-10-15 Ezra Peisach <epeisach@bu.edu>
-
- * server_init.c (kadm5_lock, kadm5_unlock): Return KADM5_OK
- instead of falling off end of function.
-
-2002-10-08 Tom Yu <tlyu@mit.edu>
-
- * adb_openclose.c (osa_adb_init_db): Reset opencnt.
- (osa_adb_open_and_lock): Don't open multiple times; merely
- increment opencnt if already open.
- (osa_adb_close_and_unlock): Decrement opencnt instead of
- unconditionaly closing.
-
- * server_init.c (kadm5_lock, kadm5_unlock): New functions to
- support persistent exclusive locks across multiple API calls.
-
-2002-08-29 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-07-17 Ken Raeburn <raeburn@mit.edu>
-
- * svr_iters.c (struct iter_data): Replace DynObject "matches" with
- pointer, allocation size, current count, and error flag.
- (get_either_iter): Grow array if needed, noting failures.
- (kadm5_get_either): Set up the array before calling the iterator
- and use their values after.
- * Makefile.in (SHLIB_EXPDEPS, SHLIB_EXPLIBS): Drop libdyn
- references.
-
-2002-03-06 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (LIBMAJOR): Bump to avoid Heimdal conflict.
-
-2002-03-02 Sam Hartman <hartmans@mit.edu>
-
- * server_acl.c (acl_find_entry): Patch from sxw@sxw.org.uk:
- patch to correct handling of ACL targets. Previous patch from
- Matt Crawford seems to only work for * targets where it ignores
- the restrictions. This patch seems to work for all the semantics
- described in MATt's original message, at least as far as I tested.
-
-2001-10-22 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_decrypt_key): For now, coerce enctype of
- output keyblock in case we got a match on a similar enctype.
-
-2001-10-16 Mitchell Berger <mitchb@mit.edu>
- Matt Crawford <crawdad@fnal.gov>
-
- * svr_principal.c (add_to_history): If the policy a principal uses has
- been changed to hold a lesser number of history entries than it did
- before, extract the correct number and value of old keys from the
- history array into a newly allocated array of the proper size. Failing
- to do this made kadmind vulnerable to a crash upon changing such a
- principal's password. Original patch written by Matt Crawford, with
- a few changes.
-
-2001-10-09 Ken Raeburn <raeburn@mit.edu>
-
- * server_acl.h: Make prototypes unconditional.
-
-2001-07-31 Ezra Peisach <epeisach@mit.edu>
-
- * svr_principal.c (check_pw_reuse): Change argument for
- n_pw_hist_data to unsigned to be consistant with calling convention.
-
-2001-07-25 Ezra Peisach <epeisach@mit.edu>
-
- * adb_xdr.c (xdr_krb5_key_data): Use xdr_krb5_ui_2 instead of
- xdr_krb5_int16 for key_data_length field.
-
-2001-07-06 Ezra Peisach <epeisach@mit.edu>
-
- * svr_iters.c: Declare kadm5_get_either static
-
-2001-06-20 Mitchell Berger <mitchb@mit.edu>
-
- * server_dict.c: Silly typo fixed.
-
-2001-06-18 Ezra Peisach <epeisach@mit.edu>
-
- * server_misc.c (passwd_check): cast argument to
- islower()/isupper(), isdigit(), ispunct() to int.
-
- * server_acl.c (acl_parse_line): Cast argument to
- isupper()/isspace() to int.
-
-2001-06-08 Ezra Peisach <epeisach@mit.edu>
-
- * svr_principal.c (check_pw_reuse): Cleanup assignment in conditional.
-
-2001-06-04 Ezra Peisach <epeisach@mit.edu>
-
- * svr_principal.c: Cleanup assignments in conditionals.
-
-Sun Feb 18 17:40:23 2001 Ezra Peisach <epeisach@mit.edu>
-
- * adb_openclose.c, adb_policy.c, server_acl.c, server_dict.c,
- server_init.c, server_kdb.c, server_misc.c, svr_iters.c,
- svr_principal.c: Cleanup assignments in conditionals, variables
- sadowing one another, unused variables and declared some functions
- as static.
-
-2000-10-17 Ezra Peisach <epeisach@mit.edu>
-
- * svr_chpass_util.c (kadm5_chpass_principal_util): Change msg_len
- to unsigned int.
-
-Tue Oct 10 03:09:27 2000 Ezra Peisach <epeisach@mit.edu>
-
- * server_dict.c (init_dict): Change syslog() to krb5_klog_syslog()
- so that errors go to the intended place as indicated by krb5.conf.
-
-2000-06-30 Tom Yu <tlyu@mit.edu>
-
- * adb_openclose.c (osa_adb_create_db): Default to btree.
- (osa_adb_init_db): Set up btinfo as well.
- (osa_adb_open_and_lock): Try btree, then hash.
-
- * Makefile.in (SHLIB_EXPDEPS): Add libdb.
- (SHLIB_EXPLIBS): Add -ldb.
-
-2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
-
- * adb_openclose.c (osa_adb_create_db): Open lock files using O_EXCL
- and fdopen() the descriptor instead of using fopen().
- * svr_chpass_util.c (kadm5_chpass_principal_util): Adjust for new
- length parameter in both kadm5_chpass_principal_util() and in
- _kadm5_chpass_principal_util().
-
-2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
-
- * adb_free.c, adb_xdr.c, server_dict.c: Check for existance
- of<memory.h>.
- [from Nathan Neulinger <nneul@umr.edu>]
-
-2000-03-16 Ken Raeburn <raeburn@mit.edu>
- Matt Crawford <crawdad@fnal.gov>
-
- * server_acl.c: Include kadm5/admin.h.
- (struct _acl_entry): Add new fields for restrictions.
- (struct _wildstate): New type.
- (acl_parse_line): Input is const. Parse and save restrictions.
- Allow backslash at end of line to indicate continuation.
- (acl_parse_restrictions, acl_impose_restrictions): New functions.
- (acl_free_entries): Free up restriction data if any.
- (acl_load_acl_file): Don't use tmpbuf for catch-all entry.
- (acl_match_data): Add new arguments for wildcard state.
- (acl_find_entry): Support wildcard component matching.
- Reorganized checks for bad ACL entries.
- (acl_check): Add restrictions parameter.
- * server_acl.h (struct _restriction): New type.
- (acl_check): Update prototype.
- (acl_impose_restrictions): Declare.
-
-2000-02-26 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_create_principal_3): Remove keepold
- argument.
-
- * Makefile.in (LIBMAJOR): Bump major number due to call signature
- changes.
-
-2000-02-25 Ken Raeburn <raeburn@mit.edu>
-
- * server_acl.c (acl_get_line): Patch from Matt Crawford to permit
- line continuation by ending a line with a backslash.
-
-2000-02-13 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_setkey_principal_3): New function.
-
-1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
-
- * Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
- LOCAL_INCLUDES such that one can override CFLAGS from the command
- line without losing CPP search patchs and defines. Some associated
- Makefile cleanup.
-
-1999-09-08 Ken Raeburn <raeburn@mit.edu>
-
- * adb_openclose.c (osa_adb_fini_db): Don't fclose the lock file if
- the lock is permanent, because it's already been done.
-
-Mon Dec 7 15:19:11 1998 Ezra Peisach <epeisach@mit.edu>
-
- * svr_principal.c (kadm5_randkey_principal_3): Fix typo in
- arguments to krb5_dbe_crk().
-
-1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Set the myfulldir and mydir variables (which are
- relative to buildtop and thisconfigdir, respectively.)
-
-Fri Dec 4 23:10:32 1998 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_create_principal): Modify to call
- create_principal_3.
- (kadm5_create_principal_3): New function including flag to keep
- old keys and optional explicit keysalt_tuples.
- (kadm5_chpass_principal): Modify to call chpass_principal_3.
- (kadm5_chpass_principal_3): New function including flag to keep
- old keys and optional explicit keysalt_tuples.
- (kadm5_randkey_principal): Modify to call randkey_principal_3.
- (kadm5_randkey_principal_3): New function including flag to keep
- old keys and optional explicit keysalt_tuples.
-
-Tue Nov 17 18:20:48 1998 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (kadm5_create_principal):
- (kadm5_chpass_principal):
- (kadm5_randkey_principal): Fix up for new calling conventions of
- dbe_crk and dbe_cpw.
-
-1998-10-27 Marc Horowitz <marc@mit.edu>
-
- * server_kdb.c, svr_principal.c: convert to new crypto api
-
-Sun Jul 26 18:09:55 1998 Sam Hartman <hartmans@utwig.mesas.com>
-
- * Makefile.in (LIBMAJOR): bump libmajor
-
-Wed Apr 15 18:06:14 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS):
- (SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.
-
-Fri Feb 27 22:33:05 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Changed thisconfigdir to point at the lib/kadm5
- directory, since we've moved all of the configure.in
- tests to the toplevel lib/kadm5 configure.in.
- Instead of adding @LIBS@ to the list of libraries which
- should be linked as shared library dependencies, add
- @GEN_LIB@ and @AIX_DB_LIB@ which will get expanded if
- necessary.
-
-Wed Feb 18 16:15:22 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove trailing slash from thisconfigdir. Fix up
- BUILDTOP for new conventions.
-
-Fri Feb 13 21:30:58 1998 Tom Yu <tlyu@mit.edu>
-
- * adb_xdr.c: Update header locations.
-
- * Makefile.in (LIBMAJOR): Bump major version to reflect change in
- rpc library.
-
-Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * configure.in, Makefile.in: Remove the CopySrcHeader macro
- from configure.in and substitute equivalent
- functionality in Makefile.in
-
-Mon Oct 13 10:59:22 1997 Ezra Peisach <epeisach@mit.edu>
-
- * server_init.c (kadm5_destroy): Call kadm5_free_config_params.
-
- * server_acl.c: Include <ctype.h> for tolower().
- (acl_load_acl_file): Close acl file, even when acl_catchall_entry is
- not set.
-
-Wed Aug 6 20:22:23 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Add flags to conditionally compile with Hesiod.
-
- * server_misc.c: Add support for checking GECOS field of Hesiod
- passwd entry.
-
-Fri Jul 25 15:37:08 1997 Tom Yu <tlyu@mit.edu>
-
- * server_init.c: Change a few calls to align with the new kdb
- API.
-
- * Makefile.in: Bump version.
-
-Tue Jul 1 02:32:49 1997 Tom Yu <tlyu@mit.edu>
-
- * server_acl.h: Fix ACL_ALL_MASK to include ACL_SETKEY.
-
- * svr_principal.c: Fix setv4key_principal.
-
-Sun Jun 29 14:52:51 1997 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c: Add new function kadm5_setv4key_principal.
-
-Mon Mar 31 17:40:24 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * server_acl.c, server_acl.h, svr_pricipal.c: add support for
- setkey_principal
-
-Sun Mar 9 13:40:33 1997 Tom Yu <tlyu@mit.edu>
-
- * svr_principal.c (add_to_history): Don't call realloc() on a NULL
- pointer, lest non-ANSI compliant systems like SunOS fail.
-
-Sat Feb 22 01:34:08 1997 Sam Hartman <hartmans@tertius.mit.edu>
-
- * Makefile.in (SHLIB_EXPDEPS): s/.so/$(SHLIBEXT)
-
-Wed Jan 15 20:59:11 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in:
- * configure.in: Update to new library build procedure.
-
-Tue Dec 3 15:14:29 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * server_acl.c (acl_load_acl_file): log errors via
- krb5_klog_syslog, not fprintf and com_err [krb5-admin/238]; don't
- coredump when an acl line is too long; handle catchall_entry ==
- NULL
-
-Fri Nov 22 11:11:34 1996 Sam Hartman <hartmans@mit.edu>
-
- * Makefile.in (SHLIB_LIBS): Do not link shared against -ldb [224]
-
-Tue Nov 26 03:04:04 1996 Sam Hartman <hartmans@mit.edu>
-
- * server_acl.c (acl_load_acl_file): Fix coredump by allowing
- catchall_entry to be null, but do not reference it if it is.
- Thanks to marc. [242]
-
-Mon Nov 25 17:53:20 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * server_acl.c: set acl_catchall_entry to "" instead of NULL,
- since it is presumed to contain something, but we don't want any
- default entry [krb5-admin/237]
-
-Wed Nov 13 19:20:36 1996 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (clean-unix): Remove shared/*.
-
-Mon Nov 11 17:01:00 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c (kadm5_modify_principal): fix memory leak
- handling tl_data
-
-Thu Nov 7 16:42:38 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_iters.c (glob_to_regexp): a principal glob with no @
- defaults to @*, not @LOCAL.REAM [krb5-admin/161]
-
-Wed Nov 6 10:45:12 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * server_init.c (kadm5_init): Use a more fined grained error
- code, KADM5_MISSING_CONF_PARAMS instead of
- KRB5_CONFIG_BADFORMAT
-
-Wed Nov 6 16:22:05 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c (kadm5_modify_principal): don't free the
- caller's tl_data (oops)
-
-Fri Nov 1 13:18:40 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c (kadm5_modify_principal): update for new tl_data
- semantics [krb5-admin/140]
-
-Mon Oct 21 16:28:52 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c (kadm5_modify_principal): fix modify_principal's
- handling of KADM5_TL_DATA [krb5-admin/20]
-
-Fri Oct 18 14:24:12 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_misc_free.c, server_dict.c, adb_policy.c, adb_free.c:
- include stdlib.h instead of malloc.h [krb5-admin/35]
-
- * adb_openclose.c (osa_adb_rename_db): create the destination
- database if necessary before renaming [krb5-admin/58]
-
-Thu Oct 17 16:22:07 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * svr_principal.c: update for new pw_expiration semantics
- [krb5-admin/87]
-
-Tue Oct 8 13:33:48 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * adb_policy.c (osa_adb_rename_policy_db): rename
- osa_adb_rename_policy to *_db
-
- * adb_openclose.c, adb_policy.c: implement database renaming;
- also, only create a db lockfile after the database has been
- successfully created [krb5-admin/62]
-
-Fri Oct 4 08:40:21 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * svr_principal.c (kadm5_get_principal): Do not assume malloc(0)
- returns non-NULL. [krb5-admin/29]
-
-Fri Aug 2 14:07:31 1996 Barry Jaspan <bjaspan@DUN-DUN-NOODLES>
-
- * svr_principal.c: remove krb5_free_keyblock_contents (moved to
- libkrb5.a)
-
-Fri Jul 26 17:48:14 1996 Sam Hartman <hartmans@mit.edu>
-
- * svr_principal.c (krb5_copy_key_data_contents): If
- key_data_length[i] == 0, don't complain if malloc(0) returns 0;
- this is allowed by ANSI.
-
-Thu Jul 25 18:42:47 1996 Sam Hartman <hartmans@mit.edu>
-
- * configure.in (LIBS): Link against -ldb under AIX for shared
- library construction; we should eventually make libdb a shared
- library.
-
-Wed Jul 24 18:21:28 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
-
- * Makefile.in, configure.in: break out server lib into a
- subdirectory
-
diff --git a/src/lib/kadm5/unit-test/ChangeLog b/src/lib/kadm5/unit-test/ChangeLog
deleted file mode 100644
index 3bd0482ee..000000000
--- a/src/lib/kadm5/unit-test/ChangeLog
+++ /dev/null
@@ -1,450 +0,0 @@
-2006-04-03 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (DEFS): Make empty.
-
-2006-03-11 Ken Raeburn <raeburn@mit.edu>
-
- * lock-test.c: Don't look for kdb.h in krb5/.
-
-2005-11-17 Ken Raeburn <raeburn@mit.edu>
-
- * setkey-test.c: Include k5-int.h instead of krb5.h.
-
-2005-10-13 Ken Raeburn <raeburn@mit.edu>
-
- * lock-test.c (main): Don't call error table initialization
- routines; kadm5_init* routines will do that.
-
-2005-10-04 Ken Raeburn <raeburn@mit.edu>
-
- * api.1/lock.exp: Temporarily disabled tests. See RT ticket
- 3201.
-
- * api.2/init-v2.exp: Temporarily disabled test103. See RT ticket
- 3202.
-
-2005-07-08 Ken Raeburn <raeburn@mit.edu>
-
- * api.1/lock.exp (lock_test_continue): After exiting the loop,
- send the process a signal before waiting for it to die.
-
-2005-06-20 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in (KDB_DEP_LIB): Use DL_LIB and THREAD_LINKOPTS
- instead of explicitly using -ldl and -lpthread.
-
- Novell merge.
- * Makefile.in (randkey-test, server-handle-test, lock-test,
- server-iter-test, server-setkey-test): Link in pthread and dl
- libraries.
- * destroy-test.c (main): Pass NULL db_args argument to
- ovsec_kadm_init.
- * handle-test.c (main): Likewise.
- * init-test.c (main): Likewise.
- * iter-test.c (main): Likewise.
- * randkey-test.c (main): Likewise.
- * setkey-test.c (main): Likewise.
- * lock-test.c: Include krb5/kdb.h, not kadm5/adb.h.
- (main): Don't call initialize_adb_error_table. Call krb5_db_open,
- not osa_adb_open_policy, krb5_db_ lock functions instead of
- osa_adb_ ones, etc.
-
-2005-02-10 Tom Yu <tlyu@mit.edu>
-
- * api.2/init-v2.exp: Handle improved error codes from
- client_init.c.
- (test152): Expect KRB5_FCC_NOFILE.
- (test153): Expect KRB5_CC_NOTFOUND.
-
-2004-08-20 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in (init-test): Don't use local copy of client_init.o
-
- * init-test.c (main): Use kadm5_init() instead of
- ovsec_kadm_init(). Make error messages a little more
- informative. Use KADM5_CONFIG_NO_AUTH to test no-auth condition,
- as the previous method was really gross.
-
-2004-02-13 Tom Yu <tlyu@mit.edu>
-
- * config/unix.exp (PRIOCNTL_HACK): Use "==" instead of "eq", which
- is not present in tcl-8.3.
-
-2004-02-12 Tom Yu <tlyu@mit.edu>
-
- * config/unix.exp (PRIOCNTL_HACK): Wrap "spawn" to do priocntl
- things to work around Solaris 9 pty-close bug.
-
- * Makefile.in (unit-test-client-body, unit-test-server-body): Add
- PRIOCNTL_HACK.
-
-2003-10-16 Tom Yu <tlyu@mit.edu>
-
- * api.1/lock.exp: Work around a race condition in the Solaris 9
- pty implementation: output sent to a pty slave immediately before
- last close/exit can get lost on the way to the master. This is
- Sun bug #4927647. The workaround consists of changing the tests
- to always make lock-test wait to read a character prior to
- exiting, so any output prior to the "wait" directive will not get
- lost.
-
-2003-06-02 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/init-v2.exp (test117): Update lifetime expected for new
- defaults.
-
-2003-05-21 Tom Yu <tlyu@mit.edu>
-
- * api.0/init.exp (test6, test7): Be slightly more lenient about
- matching password prompt.
-
- * api.2/init.exp (test6, test7): Be slightly more lenient about
- matching password prompt.
-
-2003-01-07 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.ov: Deleted.
-
-2002-12-18 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/init-v2.exp (test150, test151, test153): Don't try to set
- KRB5CCNAME; only the fact that it wasn't being done correctly
- prevented it from causing test failures.
-
- * lib/lib.t (kinit): If kinit reports a problem initializing the
- credentials cache, raise an error.
-
-2002-10-18 Tom Yu <tlyu@mit.edu>
-
- * api.2/init-v2.exp (test106): Make regexp more forgiving of
- variant password prompts.
-
- * api.0/init.exp (test7, test22, test225): Make regexp more
- forgiving of variant password prompts.
-
-2002-09-15 Tom Yu <tlyu@mit.edu>
-
- * api.0/chpass-principal.exp:
- * api.0/crte-policy.exp:
- * api.0/crte-principal.exp:
- * api.0/destroy.exp:
- * api.0/dlte-policy.exp:
- * api.0/dlte-principal.exp:
- * api.0/get-policy.exp:
- * api.0/get-principal.exp:
- * api.0/init.exp:
- * api.0/mod-policy.exp:
- * api.0/mod-principal.exp:
- * api.0/randkey-principal.exp:
- * api.0/rename-principal.exp:
- * api.1/lock.exp:
- * api.2/chpass-principal-v2.exp:
- * api.2/chpass-principal.exp:
- * api.2/crte-policy.exp:
- * api.2/crte-principal.exp:
- * api.2/destroy.exp:
- * api.2/dlte-policy.exp:
- * api.2/dlte-principal.exp:
- * api.2/get-policy.exp:
- * api.2/get-principal-v2.exp:
- * api.2/get-principal.exp:
- * api.2/init-v2.exp:
- * api.2/init.exp:
- * api.2/mod-policy.exp:
- * api.2/mod-principal-v2.exp:
- * api.2/mod-principal.exp:
- * api.2/randkey-principal-v2.exp:
- * api.2/randkey-principal.exp:
- * lib/lib.t: s/error/perror.
-
- * config/unix.exp: Work around tcl 8.4's (incorrect?) output EOL
- translation.
-
-2002-08-29 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23 Ken Raeburn <raeburn@mit.edu>
-
- * Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-08-08 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/init-v2.exp (test100): Expect MISSING_KRB5_CONF_PARAMS
- error now.
-
-2001-11-27 Ezra Peisach <epeisach@mit.edu>
-
- * api.2/init-v2.exp: For test 101 failure, change port number 1 -
- which is used by tcpmux under Irix, to 4 - which is unassigned by
- IANA.
-
-2001-06-20 Mitchell Berger <mitchb@mit.edu>
-
- * api.0/init.exp: Silly typo fixed.
-
- * api.2/init.exp: Same silly typo fixed.
-
-2000-10-12 Ezra Peisach <epeisach@mit.edu>
-
- * lock-test.c (main): Cleanup assignments in conditionals. If
- USE_KADM5_API_VERSION is 1, set to 2. This program uses the V2 api
- (kadm5_get_config_params).
-
- * setkey-test.c: Declare main() as int. Enclose initialization of
- elements of arrays in '{', '}'. Use krb5_enctype type instead of
- unsigned int. Break out assignments in conditionals.
-
- * destroy-test.c, handle-test.c, init-test.c, iter-test.c,
- randkey-test.c: Declare main() as int.
-
-2000-06-28 Ezra Peisach <epeisach@mit.edu>
-
- * iter-test.c (main): Code was using ovsec_kadm_ret_t in place of
- an int for referencing array.
-
-2000-05-09 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/chpass-principal-v2.exp (test200): Expect an additional
- key to be reported, since des3 has been added to the list.
- * api.2/get-principal-v2.exp (test101_102): Likewise.
- * api.2/randkey-principal-v2.exp (test100): Likewise.
-
-2000-02-08 Tom Yu <tlyu@mit.edu>
-
- * api.1/lock.exp: Since a "wait" directive to the command list of
- the lock_test procedures does not wait for any synchronization,
- change lock9 to acquire and release a lock before the "wait"
- directive in order to avoid a race condition where lock9 spawns
- the ./lock-test but the program has not opened the database prior
- to lock9_1 acquiring a permanent lock. This was causing
- difficult-to-reproduce failures.
-
-2000-02-07 Tom Yu <tlyu@mit.edu>
-
- * lib/lib.t: Call kinit and kdestroy with -5 flag to accomodate
- new behavior.
-
-1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
-
- * Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
- LOCAL_INCLUDES such that one can override CFLAGS from the command
- line without losing CPP search patchs and defines. Some associated
- Makefile cleanup.
-
-1999-09-21 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/init-v2.exp (test109): Wait for prompt between commands.
-
-1999-09-01 Ken Raeburn <raeburn@mit.edu>
-
- * api.2/init-v2.exp (RESOLVE): New variable.
- (get_hostname): New proc, taken from tests/dejagnu.
- (test101): Use get_hostname, set a variable in the target process
- to hold the result, and use that variable in the other commands
- passed, instead of "localhost".
-
- * Makefile.in (unit-test-client-body): Pass $(RUNTESTFLAGS) to
- runtest, so the user can run subsets of the test suite.
- (unit-test-server-body): Likewise.
-
-1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Set the myfulldir and mydir variables (which are
- relative to buildtop and thisconfigdir, respectively.)
-
-Fri Feb 27 22:32:54 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Changed thisconfigdir to point at the lib/kadm5
- directory, since we've moved all of the configure.in
- tests to the toplevel lib/kadm5 configure.in
-
-Wed Feb 18 16:15:53 1998 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove trailing slash from thisconfigdir. Fix up
- BUILDTOP for new conventions.
-
-Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
-
- * Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Wed Nov 19 10:55:20 1997 Ezra Peisach <epeisach@mit.edu>
-
- * Makefile.in (clean): Remove server-setkey-test
- client-setkey-test setkey-test.o
-
-Fri Jul 25 15:38:35 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in: Remove test-randkey since it was breaking the
- server-side tests; api.2/getprinc-v2.exp wants *two* keys, while
- randkey results in only one.
-
-Mon May 5 17:11:44 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * setkey-test.c, configure.in: add rules to test for correct
- random()-equivlant function
-
-Mon Mar 31 17:39:52 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * Makefile.in, setkey-test.c: add support for setkey
-
-Wed Mar 12 15:49:46 1997 Barry Jaspan <bjaspan@mit.edu>
-
- * Makefile.in (unit-test-server-body): depend on test-randkey, not
- randkey-test, so the test gets run
-
-Wed Feb 5 23:10:56 1997 Tom Yu <tlyu@mit.edu>
-
- * Makefile.in:
- * configure.in: Update to new program build procedure.
-
-Mon Dec 9 15:57:55 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.0/init.exp, api.2/init.exp: use spawn/expect instead of exec
- so tests don't fail when kadmin.local produces output
-
-Wed Nov 20 15:59:34 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * Makefile.in (check-): warn more loudly about unrun tests
-
-Mon Nov 11 20:51:27 1996 Tom Yu <tlyu@mit.edu>
-
- * configure.in: Add AC_CANONICAL_HOST to deal with new pre.in.
-
-Thu Nov 7 20:54:24 1996 Tom Yu <tlyu@mit.edu>
-
- * configure.in: Remove spurious WITH_CCOPTS and KRB_INCLUDE.
-
-Thu Nov 7 13:02:28 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/init-v2.exp: update tests for new init error codes and
- get_config_params behavior when KDC_PROFILE does not exist
-
- * api.2/mod-principal-v2.exp: provide finer-grained test numbers
- in case of failure
-
-Wed Nov 6 17:48:49 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * lib/lib.t: global $test everywhere it is used
-
- * api.2/mod-principal-v2.exp: init to kadmin/admin, not
- kadmin/changepw; specify real principal, not null (obviously I
- never ran these tests via the client library before)
-
-Fri Nov 1 13:15:37 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/get-principal-v2.exp, api.2/mod-principal-v2.exp: update
- for new tl_data semantics [krb5-admin/140]
-
-Thu Oct 31 08:42:18 1996 Ezra Peisach <epeisach@mit.edu>
-
- * Makefile.in (check): Only run tests is Perl, tcl, runtest.
-
- * configure.in: Check for Perl before running tests.
-
-Fri Oct 25 16:43:52 1996 Ezra Peisach <epeisach@mit.edu>
-
- * Makefile.in (init-test): Add -UUSE_KADM5_API_VERSION before the
- -D of same.
-
-Wed Oct 23 13:32:40 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * api.2/get-principal-v2.exp: Fix for test 100 where {} is not
- equivalent to "{}" for empty tl_data field.
-
-Mon Oct 21 16:27:28 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/mod-principal-v2.exp: create this file, implement tests
- 100-104 [krb5-admin/20]
-
-Fri Oct 18 13:21:08 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/init-v2.exp: add test 117, for default max_life
- [krb5-admin/18]
-
-Thu Oct 17 16:14:11 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * config/unix.exp, lib/lib.t: begin in process of making these
- unit tests less horribly inefficient
-
- * api.[02]/crte-principal.exp, api.[02].mod-principal: update unit
- tests for new pw_expiration semantics [krb5-admin/87]
-
- * Makefile.in: ditch the capi and sapi hack, just the api for
- everything, and rename the log files after the tests complete so
- they are both kept around for viewing [krb5-admin/82]
-
-Mon Oct 14 07:04:27 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * Makefile.in: Only try to run tests if both runtest and the tcl
- libraries present.
-
- * configure.in: Check for runtest and Tcl.
-
-Fri Oct 4 08:31:50 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * sizes-test.c: Removed program.
-
- * Makefile.in: Remove sizes-test.
-
-Tue Oct 1 14:45:37 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
-
- * api.2/init-v2.exp: Remove tests 104 & 105 as lockfile and
- policy database names are hard wired. [krb5-admin/46]
-
-Thu Sep 26 17:44:10 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.0/init.exp, api.1/lock.exp, api.2/init.exp: use $K5ROOT
- instead of /krb5
-
-Wed Sep 25 17:45:44 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.1/lock.exp: lockfile is now kdb5.kadm5.lock
-
-Mon Sep 23 16:31:24 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * changes to use runtest --srcdir:
- - Makefile.in: rewrote [csapi].* links to work in srcdir (boo,
- hiss)
- - move lib.t to lib/lib.t
- - api.*/*.exp: s/source lib.t/load_lib lib.t/
-
-Fri Sep 20 16:51:26 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * created Makefile.in and configure.in
-
-Wed Sep 11 17:03:22 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/init-v2.exp: make test100 only run on client
-
-Tue Aug 20 13:46:54 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * Makefile.ov (unit-test-server-body): remove kdb5_edit
-
- * api.0/init.exp, api.2/init.exp, config/unix.exp, Makefile.ov:
- use kadmin.local instead of kdb5_edit
-
-Fri Aug 16 17:16:46 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * Makefile.ov: update for new lib/kadm5 layout
-
- * api.1/lock.exp: jik's fix for lock test 13
-
-Thu Jul 18 20:18:30 1996 Marc Horowitz <marc@mit.edu>
-
- * api.2/init-v2.exp (test150, test151): -s flag is now -S
-
-Mon Jul 8 17:00:26 1996 Barry Jaspan <bjaspan@mit.edu>
-
- * api.2/init-v2.exp: admin databases must now be created before
- use (not created implicitly)
-
- * api.1/lock.exp: lock-test 13 should be a warning, not a failure.
-
- * api.0/rename-principal.exp: fix rename test to create principal
- with correct salt first, and check explicitly for NO_RENAME_SALT
- when appropriate
-
- * lib.t: add create_principal_with_keysalts
-
-