summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* * svc_auth_gssapi.c (_svcauth_gssapi): Don't explicitly freeTom Yu2000-02-189-9/+84
| | | | | | | | | | | | | | | | | | | | | | | | | | | call_arg on error, since svc_getargs should do that now. * svc_udp.c (svcudp_getargs): Free args on xdr decode error to avoid leaks. * svc_tcp.c (svctcp_getargs): Free args on xdr decode error to avoid leaks. * svc_raw.c (svcraw_getargs): Free args on xdr decode error to avoid leaks. * auth_gssapi.c (auth_gssapi_create): Don't explicitly free call_res anymore, since clnt_call should deal now. * clnt_udp.c (clntudp_call): Free stuff on error from xdr_replymsg() to prevent leaking. * clnt_tcp.c (clnttcp_call): Free stuff on error from xdr_replymsg() to avoid leaking. * clnt_raw.c (clntraw_call): Free stuff on error from xdr_replymsg() to avoid leaking. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12052 dc483132-0cff-0310-8789-dd5450dbe970
* * auth_gssapi.c (auth_gssapi_create): Free call_res becauseTom Yu2000-02-174-37/+43
| | | | | | | | | | | | | | | | | | | | | xdr_authgssapi_init_res can potentially allocate memory. Perhaps clnt_call should really deal with this, though. It is not at all clear whether clnt_call or svc_getargs should actually end up freeing allocated memory themselves. * svc_auth_gssapi.c (_svcauth_gssapi): Call gssrpc_xdr_free() if xdr_authgssapi_creds() or xdr_authgssapi_init_arg() fails. * auth_gssapi_misc.c (xdr_authgssapi_creds): (xdr_authgssapi_init_arg): (xdr_authgssapi_init_res): Revert prior change. The caller should be the one dealing. Additionally, it was probably wrong to unconditionally free the object regardless of whether the mode is XDR_DECODE. (auth_gssapi_unwrap_data): Use temp_xdrs rather than in_xdrs to force XDR_FREE operation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12051 dc483132-0cff-0310-8789-dd5450dbe970
* Document that -s is not applicable to Kerberos 4Danilo Almeida2000-02-162-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12050 dc483132-0cff-0310-8789-dd5450dbe970
* * kinit.c: Nicer usage message. Better checking for illegalDanilo Almeida2000-02-163-355/+513
| | | | | | | | | | | | options. Do not output error when doing Kerberos 4 if we will be trying 524 afterwards. Add hooks for future support for specifying the Kerberos 4 cache name. Fix GET_PROGNAME macro to properly return program name under Win32. Re-indent, turning spaces that should be tabs into tabs. * kinit.M: Document new Kerberos 4 kinit behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12049 dc483132-0cff-0310-8789-dd5450dbe970
* * kdestroy.c: Fix GET_PROGNAME macro to properly return programDanilo Almeida2000-02-162-11/+17
| | | | | | | name under Win32. Re-indent, turning spaces that should be tabs into tabs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12048 dc483132-0cff-0310-8789-dd5450dbe970
* * klist.c: Fix GET_PROGNAME macro to properly return program nameDanilo Almeida2000-02-162-28/+34
| | | | | | | under Win32. Re-indent, turning spaces that should be tabs into tabs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12047 dc483132-0cff-0310-8789-dd5450dbe970
* Move include of libtelnet/auth.h earlier to provideEzra Peisach2000-02-162-1/+10
| | | | | | prototype for auth_cmd() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12046 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (pa_sam): In send-encrypted-sad mode, check for magic salt lengthKen Raeburn2000-02-162-7/+51
| | | | | | | | and generate a salt from the principal name if found; use the password and salt to generate a key. Provide timestamp if nonce is zero, regardless of preauth mode. (Patch from Chas Williams.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12045 dc483132-0cff-0310-8789-dd5450dbe970
* * localaddr.c (krb5_os_localaddr): Dynamically grow buffer used for SIOCGIFCONFKen Raeburn2000-02-162-10/+69
| | | | | | | until it appears to have been big enough. Dynamically grow internal address pointer array as needed. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12044 dc483132-0cff-0310-8789-dd5450dbe970
* * libobj.in: Fix up .c.so and .c.po rules to include $(CFLAGS),Tom Yu2000-02-152-2/+7
| | | | | | which were previously missing. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12043 dc483132-0cff-0310-8789-dd5450dbe970
* * server.c: Add code to set a signal handler for SIGHUP and a fewTom Yu2000-02-153-0/+29
| | | | | | | | others so that purify will actually generate memory leak reports. * configure.in: Add CHECK_SIGNALS. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12042 dc483132-0cff-0310-8789-dd5450dbe970
* * svc.c (xprt_register): Zero out xports after allocatingTom Yu2000-02-153-16/+51
| | | | | | | | | | * auth_gssapi_misc.c (xdr_authgssapi_creds): (xdr_authgssapi_init_arg): (xdr_authgssapi_init_res): (auth_gssapi_unwrap_data): If xdr_gss_buf or xdr_bytes fails, call again with XDR_FREE set so that allocated memory doesn't leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12041 dc483132-0cff-0310-8789-dd5450dbe970
* Add client-side stubs and functions with additional capabilities toTom Yu2000-02-1410-15/+501
| | | | | | | | | take key_salt_tuples and optionally keep old keys around. Add server-side functionality for setkey with key_salt_tuple and "keepold" functionality. Update rpc stubs and xdr functions/headers appropriately. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12040 dc483132-0cff-0310-8789-dd5450dbe970
* * README, gss-client.c, gss-misc.c, gss-misc.h, gss-server.c:Tom Yu2000-02-116-437/+711
| | | | | | Patches from jik to make gss-sample more versatile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12039 dc483132-0cff-0310-8789-dd5450dbe970
* Added "Kerberos Preferences" as valid config file on Mac OS. Others will be ↵Marshall Vale2000-02-111-11/+17
| | | | | | removed at a later date git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12037 dc483132-0cff-0310-8789-dd5450dbe970
* * init_os_ctx.c: Added "Kerberos Preferences" as valid config file on Mac OSMarshall Vale2000-02-111-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12036 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed lxs' fix: strlen (x) + 1 instead of strlen (x+1)Miro Jurisic2000-02-112-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12035 dc483132-0cff-0310-8789-dd5450dbe970
* Added comments to remove some calls in the next releasMiro Jurisic2000-02-111-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12034 dc483132-0cff-0310-8789-dd5450dbe970
* changelog updated for stdcc_util.c changeAlexandra Ellwood2000-02-101-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12033 dc483132-0cff-0310-8789-dd5450dbe970
* Added +1 to strlens so that null terminator will fit in the buffer ;-PAlexandra Ellwood2000-02-101-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12032 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Only destroy xtra_creds if non-null. (Patch from Richard ↵Ken Raeburn2000-02-102-1/+7
| | | | | | Basch.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12031 dc483132-0cff-0310-8789-dd5450dbe970
* Updated for 3.0d1Miro Jurisic2000-02-101-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12030 dc483132-0cff-0310-8789-dd5450dbe970
* * init_os_ctx.c: Added changes for the Mac for limited support of ↵Marshall Vale2000-02-081-0/+10
| | | | | | Application Support folder as a location for the krb5 configuration file git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12027 dc483132-0cff-0310-8789-dd5450dbe970
* Limited support for Applicaiton Support folder as location for krb5.ini on ↵Marshall Vale2000-02-081-8/+24
| | | | | | the Mac added git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12026 dc483132-0cff-0310-8789-dd5450dbe970
* * api.1/lock.exp: Since a "wait" directive to the command list ofTom Yu2000-02-082-0/+12
| | | | | | | | | | | the lock_test procedures does not wait for any synchronization, change lock9 to acquire and release a lock before the "wait" directive in order to avoid a race condition where lock9 spawns the ./lock-test but the program has not opened the database prior to lock9_1 acquiring a permanent lock. This was causing difficult-to-reproduce failures. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12025 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Kludge in the old test for tcl so that we have someTom Yu2000-02-082-1/+74
| | | | | | | prayer of pulling in tcl from the funky installation that goes along with dejagnu. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12024 dc483132-0cff-0310-8789-dd5450dbe970
* * lib/helpers.exp: Fix to call kinit and kdestroy with the -5 flagTom Yu2000-02-082-2/+7
| | | | | | to accomodate new program behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12023 dc483132-0cff-0310-8789-dd5450dbe970
* * lib/lib.t: Call kinit and kdestroy with -5 flag to accomodateTom Yu2000-02-082-2/+7
| | | | | | new behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12022 dc483132-0cff-0310-8789-dd5450dbe970
* * config/unix.exp: Call send_error instead of fail to preventTom Yu2000-02-073-7/+16
| | | | | | | | | | referencing variables not yet set up by the test framework. * lib/helpers.exp: Call kinit and kdestroy with the -5 flag to deal with new program behavior. Also call perror rather than error to avoid spewing a stack trace. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12021 dc483132-0cff-0310-8789-dd5450dbe970
* * kadmin.exp: Use $KDESTROY -5 to deal with changed behaviorTom Yu2000-02-072-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12020 dc483132-0cff-0310-8789-dd5450dbe970
* changepw.c (krb5_locate_kpasswd): fixed memory trashing caused by incorrect ↵Scott McGuire2000-02-072-1/+7
| | | | | | pointer arithmetic when assigning DEFAULT_KPASSWD_PORT in DNS code git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12019 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: Remove default_tgs_enctypes for now as it wasTom Yu2000-02-072-1/+7
| | | | | | | causing tests to fail when the tgt is DES3. Need to investigate further. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12018 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_KRB5_TCL_FIND_CONFIG): Change test syntax a little to keep ↵Ken Raeburn2000-02-072-1/+7
| | | | | | bash happy git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12017 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for inet_ntop and getipnodebyaddr, both used in klistKen Raeburn2000-02-072-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12016 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c (return_sam_data): Just return 0 if no input preauth data is ↵Ken Raeburn2000-02-072-1/+5
| | | | | | available git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12015 dc483132-0cff-0310-8789-dd5450dbe970
* * kinit.c (try_convert524): Avoid duplicate free callsKen Raeburn2000-02-072-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12014 dc483132-0cff-0310-8789-dd5450dbe970
* fix my email address in log headerKen Raeburn2000-02-071-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12013 dc483132-0cff-0310-8789-dd5450dbe970
* * gic_pwd.c (krb5_get_as_key_password): If the as_key enctype is already set toKen Raeburn2000-02-073-15/+35
| | | | | | | | | | | | | | the correct type, do continue and ask for the password anyways. (Patch from Chas Williams, PR krb5-libs/730.) * preauth2.c (pa_sam): If no sam_flags were set, return KRB5_PREAUTH_BAD_TYPE, because we don't currently handle that case. * preauth2.c (pa_sam): Remove unused variable use_sam_key. (SAMDATA): Cast first result to int, which is what sprintf needs. (pa_salt): Delete unused variable ret. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12012 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c (get_preauth_hint_list): Log a message if preauth is requiredKen Raeburn2000-02-072-1/+20
| | | | | | | | but no preauth types are available. (return_sam_data): Fix typo in figuring length of data to XOR when merging keys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12011 dc483132-0cff-0310-8789-dd5450dbe970
* Frank Cusack's patches, first two sets. Should be no incompatible changes,Ken Raeburn2000-02-075-22/+306
| | | | | | | | | | | except perhaps for a client talking to both a new and old KDC? Several improvements to guard against replay attacks when hardware preauth is in use, though they require re-enabling the USE_RCACHE code, which I haven't done yet. Several changes of mine for silencing a few compiler warnings, and adding some debugging log messages while I track what's going on with the preauth code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12010 dc483132-0cff-0310-8789-dd5450dbe970
* updated some comments (fcusack)Ken Raeburn2000-02-072-6/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12009 dc483132-0cff-0310-8789-dd5450dbe970
* added flags field to predicted_sam_response (fcusack)Ken Raeburn2000-02-075-13/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12008 dc483132-0cff-0310-8789-dd5450dbe970
* Add documentation about debug vs. release buildsDanilo Almeida2000-02-072-5/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12007 dc483132-0cff-0310-8789-dd5450dbe970
* more fcusack changes - rest of first setKen Raeburn2000-02-074-2/+19
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12006 dc483132-0cff-0310-8789-dd5450dbe970
* Frank Cusack changes, set 1, diffs 1-3 of 4Ken Raeburn2000-02-079-12/+43
| | | | | | | | Rename "sam_passcode" field to "sam_sad". Add data to predicted-sam-response structure, in part to (prepare to) help with replay detection. Fix some memory allocation problems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12005 dc483132-0cff-0310-8789-dd5450dbe970
* * standalone.exp: Use $KLIST -5 and $KDESTROY -5 to deal withTom Yu2000-02-064-7/+19
| | | | | | | | | | | changed behavior in these programs. Wait for eof in some cases to avoid hanging. * rsh.exp: Wait for eof to prevent hanging. * gssapi.exp: Use $KINIT -5 to deal with new kinit behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12004 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: Use $KINIT -5 to deal with modified kinitTom Yu2000-02-062-1/+6
| | | | | | behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12003 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Reorder some control flow to avoid security holeTom Yu2000-02-062-6/+9
| | | | | | if KRB4_GET_TICKETS is not defined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12001 dc483132-0cff-0310-8789-dd5450dbe970
* * kinit.c: Only free stuff if it's not NULL. (Note: The krb5_free_*Danilo Almeida2000-02-042-4/+13
| | | | | | routines probably should be fixed check for NULL pointers...) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12000 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (klist): Fix to build under Unix againTom Yu2000-02-042-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11999 dc483132-0cff-0310-8789-dd5450dbe970