summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix lots of things to compile on Unix. Fix some typosTom Yu2003-02-1113-61/+192
| | | | | | | | | | By means of carrying through local addresses in many places, eliminate or reduce sections of code depending on TARGET_OS_MAC conditionals. Conditionalize some prototypes in krb.h with KRB_PRIVATE, to avoid leakage on Mac. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15173 dc483132-0cff-0310-8789-dd5450dbe970
* Note: these checkins are partial progress for Tom Yu. They probably don't ↵Alexandra Ellwood2003-02-109-142/+186
| | | | | | build; Tom is expecting that. *** CCache-glue.c: Removed copying of the string_to_key type in krb_save_credentials. Saving the string_to_key type is unnecessary and was just for display purposes. Will be removed for KfM 5.0. Updated to use KRB5_CALLCONV instead of INTERFACE and include the krb5's krb4 headers instead of the KfM ones. *** change-password.c: Removed include of CredentialsCache.h and code that switches between string to key types. This doesn't make sense for password changing because the krb4 protocol for password changing implemented here only supports mit's string to key. Bug was in KfM and got ported forward. Should the code call mit_password_to_key for all platforms? *** FSp-glue.c: Removed dependency on MoreFiles and replaced it with code to use FSRefs now that we are Carbon-only. *** g_in_tkt.c: Added loop which calls password to key functions trying each one. This technique was imported from KTH-KRB into KfM. This code still needs to have the TARGET_OS_MAC code made more Unix friendly for Darwin builds. The behavior differences (store the address or not) should be deferred until the very last moment to avoid excessive #ifdefs. *** g_pw_in_tkt.c: Added loop which calls password to key functions trying each one. This technique was imported from KTH-KRB into KfM. *** krb4int.h: Added password-to-key.c functions so they can be used by g_in_tkt.c and g_pw_in_tkt.c. *** password-to-key.c: Removed dependence on the CCAPI so this code can be used on all platforms to implement looping over the password to key functions. *** RealmsConfig-glue.c: Changed to use #ifdef USE_CCAPI like is used elsewhere in the krb5 sources. This is just for consistency in krb5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15172 dc483132-0cff-0310-8789-dd5450dbe970
* Have g_token_size return unsigned int for signed/unsigned cleanupEzra Peisach2003-02-095-4/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15171 dc483132-0cff-0310-8789-dd5450dbe970
* * prompter.c (krb5_prompter_posix): Kill echo before printingTom Yu2003-02-082-6/+10
| | | | | | prompt to avoid possible race conditions in test suite. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15170 dc483132-0cff-0310-8789-dd5450dbe970
* Thanks; equivalent patch appliedTom Yu2003-02-082-0/+5
| | | | | | | | * admin_server.c (kadm_listen): Zero sa_flags to avoid wonkiness. ticket: 1304 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15169 dc483132-0cff-0310-8789-dd5450dbe970
* Change comments to remove the note that we're going to redesign keyTom Yu2003-02-084-5/+12
| | | | | | | | storage architecture for 1.3. ticket: 1193 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15168 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (all-unix): Remove kerberosIV/krb_err.h, as it wasTom Yu2003-02-072-3/+11
| | | | | | | | | | causing spurious rebuilds of lots of stuff because it was depending on all-recurse, which is always out of date. (install-headers-unix): Also, no need to depend on kerberosIV/krb_err.h here, since the kerberosIV subdirectory takes care of it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15167 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (install): Fix typo in k5srvutil.M install ruleTom Yu2003-02-072-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15166 dc483132-0cff-0310-8789-dd5450dbe970
* Fix ABI divergence between Unix and Mac krb4 libraries in declarationTom Yu2003-02-078-6/+114
| | | | | | of krb_err_txt by means of a gross hack. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15165 dc483132-0cff-0310-8789-dd5450dbe970
* * prompter.c (krb5_prompter_posix, setup_tty, restore_tty): Fix toTom Yu2003-02-072-12/+22
| | | | | | | | use the actual file descriptor we dup()'ed to in case tcsetattr() doesn't actually change the underlying device modes and instead only affects the specific file descriptor. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15164 dc483132-0cff-0310-8789-dd5450dbe970
* Add AES copyright and licenseKen Raeburn2003-02-071-0/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15163 dc483132-0cff-0310-8789-dd5450dbe970
* Add Yarrow, AES licensesKen Raeburn2003-02-071-0/+74
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15162 dc483132-0cff-0310-8789-dd5450dbe970
* Sorry, forgot this ChangeLog on the last commitKen Hornstein2003-02-061-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15161 dc483132-0cff-0310-8789-dd5450dbe970
* * locate_kdc.c (translate_ai_error): Handle EAI_ADDRFAMILY like EAI_NONAME.Ken Raeburn2003-02-062-7/+11
| | | | | | | | | | (krb5int_add_host_to_list): Translate errors returned from the second getaddrinfo call. ticket: 1339 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15160 dc483132-0cff-0310-8789-dd5450dbe970
* Add k5srvutilSam Hartman2003-02-064-0/+181
| | | | | | | | | | Add a script called k5srvutil that allows easy manipulation of keytabs for common tasks such as changing keys and deleting outdated keys. ticket: 1191 Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15159 dc483132-0cff-0310-8789-dd5450dbe970
* This is the integration of "fakeka" (a program to emulate a kaserver)Ken Hornstein2003-02-063-1/+1411
| | | | | | | | into the MIT distribution. It's compilation is enabled with --enable-fakeka. ticket: 1281 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15158 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (std_rqs.c): Depend on ct_c.sed and ct_c.awkKen Raeburn2003-02-062-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15157 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Don't zero out terminal window sizeTom Yu2003-02-052-6/+4
| | | | | | ticket: 697 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15156 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (run-aes-test): Add $(RUN_SETUP) so that ifEzra Peisach2003-02-052-2/+7
| | | | | | compiling only shared libraries, LD_LIBRARY_PATH is set for test. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15155 dc483132-0cff-0310-8789-dd5450dbe970
* * mkrel: Exclude .rconf filesTom Yu2003-02-052-1/+5
| | | | | | ticket: 771 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15154 dc483132-0cff-0310-8789-dd5450dbe970
* commentTom Yu2003-02-052-2/+11
| | | | | | | | | * decomp_tkt.c (dcmp_tkt_int): Patch from Booker Bense to use krb_get_lrealm() instead of copying KRB_REALM into prealm. ticket: 710 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15153 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp (start_kerberos_daemons): Use correct argument toTom Yu2003-02-052-1/+6
| | | | | | "-4" flag. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15152 dc483132-0cff-0310-8789-dd5450dbe970
* * prompter.c (krb5_prompter_posix): Rewrite to no longer useTom Yu2003-02-054-87/+173
| | | | | | | | | | | | | longjmp(), as well as to get a non-buffered stdio stream on stdin to avoid passwords staying around in stdio buffers. This does have the side effect of possibly losing pre-buffered input from an application that reads from stdin using stdio functions prior to calling the prompter, but hopefully those are rare. ticket: 673 ticket: 680 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15151 dc483132-0cff-0310-8789-dd5450dbe970
* Get addressless tickets by defaultSam Hartman2003-02-042-2/+6
| | | | | | | | | By default Kerberos obtains addressless tickets. ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15150 dc483132-0cff-0310-8789-dd5450dbe970
* disable krb4 by defaultSam Hartman2003-02-047-3/+20
| | | | | | | | | | | | By default, we disable krb4 in the KDC. This means that -4 none is the default mode. Krb4 is reenabled for the dejagnu tests. ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15149 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (dofork): Don't dissociate from controlling tty in theTom Yu2003-02-042-32/+36
| | | | | | | | | | | parent, since the parent needs to remain the session leader so it can tell when the tty gets hung up. Make the child wait for the parent to set up a SIGHUP handler to ensure that cleanup happens properly. ticket: 608 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15148 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2003-02-032-8/+17
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15147 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***Ken Raeburn2003-02-031-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15146 dc483132-0cff-0310-8789-dd5450dbe970
* Remove placeholder file that shouldn't have been checked inKen Raeburn2003-02-032-9/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15145 dc483132-0cff-0310-8789-dd5450dbe970
* Build and link in AES crypto code (but don't define the enctype yet).Ken Raeburn2003-02-036-171/+352
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build and link in PBKDF2 function. Add ciphertext stealing tests. Update various tests to correspond with IETF crypto draft. * aes: New directory, containing AES implementation from Brian Gladstone, tweaked a little for the krb5 build system. * configure.in: Build its makefile. * Makefile.in (LOCAL_SUBDIRS, LOCALINCLUDES, STOBJLISTS, SUBDIROBJLISTS): Add aes entries. * t_cts.c: New test file. * Makefile.in (EXTRADEPSRCS): Add t_cts. (t_cts$(EXEEXT)): New rule. * Makefile.in (SRCS, OBJS, STLIBOBJS): Add pbkdf2. (EXTRADEPSRCS): Remove pbkdf2.c. (t_pkcs5$(EXEEXT)): Don't list pbkdf2.$(OBJEXT). * t_nfold.c (fold_kerberos): New function. (main): Call it with different lengths. * vectors.c: Include ctype.h and hash_provider.h. (test_nfold, test_mit_des_s2k, test_s2k, test_dr_dk): Test case data now static and const. (test_nfold): Add "Q" and "ba" tests from Simon Josefsson. (GCLEF): New macro. (test_mit_des_s2k): Add GCLEF test case. Fill in "key" at run time, not as initialization. (test_s2k): Added GCLEF test case. (krb5int_enc_aes128, krb5int_enc_aes256): Declare. (combine_keys, test_des3_combine, k5_des3_make_key): Functions deleted. (whoami): New variable. (printd, printk): New functions. (test_pbkdf2): New function. (main): Initialize whoami. Test nfold only for now. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15144 dc483132-0cff-0310-8789-dd5450dbe970
* * aes.c: New file.Ken Raeburn2003-02-033-2/+206
| | | | | | | * Makefile.in (STLIBOBJS, OBJS, SRCS): Include it. (LOCALINCLUDE): Add aes source dir. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15143 dc483132-0cff-0310-8789-dd5450dbe970
* Make l40 staticSam Hartman2003-02-032-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15142 dc483132-0cff-0310-8789-dd5450dbe970
* AES implementation by Briad Gladman; tweaked for krb5 treeKen Raeburn2003-02-0331-0/+39436
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15141 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (clean-windows): Remove $(GENS).Ken Raeburn2003-02-012-0/+9
| | | | | | (krb524_err.c): Depend on krb524_err.et. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15140 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c (v4_des_write): Apply patch from ghudson to fixTom Yu2003-01-312-4/+14
| | | | | | | | non-right-justification case. ticket: 620 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15139 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Initialize 'hostname'Ken Raeburn2003-01-312-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15138 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (try_krb4): Delete unused krb5 principal name argument.Ken Raeburn2003-01-312-3/+7
| | | | | | | | (main): Don't pass it. ticket: 479 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15137 dc483132-0cff-0310-8789-dd5450dbe970
* Change to use more appropriate sample domains and IPsSam Hartman2003-01-302-3/+7
| | | | | | ticket: 175 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15136 dc483132-0cff-0310-8789-dd5450dbe970
* * RealmsConfig-glue.c (get_krbhst_default, krb_get_krbhst, krb_realmofhost):Ken Raeburn2003-01-282-3/+8
| | | | | | | | | Use strcpy instead of strncpy. ticket: 1339 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15135 dc483132-0cff-0310-8789-dd5450dbe970
* krb4 library breaks old krb_get_admhst APIKen Raeburn2003-01-272-2/+7
| | | | | | | | | * RealmsConfig-glue.c (krb_get_admhst): Use strcpy instead of strncpy, and max length of MAX_HSTNM. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15134 dc483132-0cff-0310-8789-dd5450dbe970
* * parse.c: Include errno.h for declaration of errnoEzra Peisach2003-01-242-1/+5
| | | | | | | glibc 2.3.1 declares errno as a macro - so must include header file before use. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15133 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp (start_kerberos_daemons): Record more information when "tail -f"Ken Raeburn2003-01-232-4/+20
| | | | | | | | | doesn't show the mark written to the log file. Look for and discard non-matching lines. (setup_root_shell): Ignore the message displayed by rlogin when a connection is refused to one address but other addresses are available. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15132 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (all-unix, install): Build and install kadm_err.h.Ken Raeburn2003-01-222-4/+8
| | | | | | (install-headers-unix): Install both generated header files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15131 dc483132-0cff-0310-8789-dd5450dbe970
* Timestamp preauth should return clock skew errorsSam Hartman2003-01-212-1/+13
| | | | | | | | | | | When the user supplies the correct password, but has a timestamp that is out of bounds, the server should reply with a clock skew error rather than a preauth required error. ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15130 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5_32.def: Export krb5_rc_close, krb5_free_enc_tkt_part, andKen Raeburn2003-01-172-0/+8
| | | | | | krb5_decrypt_tkt_part, for GSSAPI. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15129 dc483132-0cff-0310-8789-dd5450dbe970
* Use new target create-ehdrdir, defined differently for UNIX and WIN32, toKen Raeburn2003-01-172-6/+11
| | | | | | | conditionally create the target directory $(EHDRDIR) if needed, before copying files into it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15128 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_mk_req_checksum_func): Fix Windows calling convention syntaxKen Raeburn2003-01-172-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15127 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_file.c (profile_flush_file_data): [_WIN32]: Don't call syncKen Raeburn2003-01-172-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15126 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in ($(EHDRDIR)$(S)gssapi.h): Depend on includes-unix, to make sureKen Raeburn2003-01-172-2/+9
| | | | | | | the directory is created before installation of the file. ($(EHDRDIR)$(S)gssapi_generic.h): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15125 dc483132-0cff-0310-8789-dd5450dbe970
* * sendauth.c (krb_net_rd_sendauth): Arg raw_len now points to KRB4_32; don'tKen Raeburn2003-01-153-5/+11
| | | | | | | | cast it to pointer to unsigned long. Change ld.so warning message check to be byte-order independent. * krb4int.h (krb_net_rd_sendauth): Decl updated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15124 dc483132-0cff-0310-8789-dd5450dbe970