summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* pre.in: KRB5_LIBDIR, ADMIN_BINDIR, KRB5_SHLIBDIR, KRB5_INCDIREzra Peisach1995-10-162-4/+9
| | | | | | are all based on exec_prefix (architecture dependent) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6970 dc483132-0cff-0310-8789-dd5450dbe970
* Add return statementSam Hartman1995-10-152-27/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6969 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed signed/unsigned -Wall flameTheodore Tso1995-10-152-2/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6968 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed location where usage() wasn't being called with an argumentTheodore Tso1995-10-152-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6967 dc483132-0cff-0310-8789-dd5450dbe970
* * gss-misc.c (recv_token): When continuing partial read, decreaseEzra Peisach1995-10-122-1/+7
| | | | | | number of bytes to read. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6966 dc483132-0cff-0310-8789-dd5450dbe970
* Remove spaces introduced into shell variable assignmentsSam Hartman1995-10-121-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6965 dc483132-0cff-0310-8789-dd5450dbe970
* Fix handling of index so db test compiles on AIXSam Hartman1995-10-122-3/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6964 dc483132-0cff-0310-8789-dd5450dbe970
* Changes to do shared library versioning under AIXSam Hartman1995-10-118-22/+59
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6963 dc483132-0cff-0310-8789-dd5450dbe970
* Remove config.h descriptions, describe krb5.confEzra Peisach1995-10-112-89/+113
| | | | | | This is a first stab - but you gotta start somewhere. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6962 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_preauth.c (get_preauth_hint_list): Fix missing indirection inTheodore Tso1995-10-114-14/+11
| | | | | | | | | | | | | get_hint_list. kdc_util.c (validate_as_request): Remove preauthentication check; this is handled in do_as_req.c do_as_req.c (process_as_request): Pass e_data to prepare_as_error so that the proper preauthentication hint list can be passed back to the client. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6960 dc483132-0cff-0310-8789-dd5450dbe970
* Added the "/nod" option to the gssapi.dll and libkrb5.dll linkerTheodore Tso1995-10-112-2/+11
| | | | | | | | | commands. This prevents the linker from searching the llibcew.lib library for some externals which are already in ldllcew.lib. This is what we want since we are building a DLL. Without the "/nod" option we get a bunch of duplicate definitions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6959 dc483132-0cff-0310-8789-dd5450dbe970
* Use win-post.in instead of post.inTheodore Tso1995-10-112-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6958 dc483132-0cff-0310-8789-dd5450dbe970
* Moved .c -> .obj rule to win-post.in, since we need it after theTheodore Tso1995-10-113-8/+53
| | | | | | LIBNAME makefile variable is defined in the main body of the Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6957 dc483132-0cff-0310-8789-dd5450dbe970
* Handle case when ticket cache name does not include a colonEzra Peisach1995-10-102-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6956 dc483132-0cff-0310-8789-dd5450dbe970
* Fix handling of session key for Kerberos5. I don't think this shouldSam Hartman1995-10-103-0/+10
| | | | | | | | | | | | | | fix the mutual authentication bug with beta 4, but this should help forwarding credentials and should also help if someone actually defines ENCRYPTION. If user defines ENCRYPTION, telnetd has the nasty behavior of encrypting one side of the conversation, without telling the user; in particular, only server output is encrypted. Fixed by sending a do encrypt if encryption defined; fix taken from Athena telnetd. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6955 dc483132-0cff-0310-8789-dd5450dbe970
* Fix handling of session key for Kerberos5. I don't think this shouldSam Hartman1995-10-102-30/+44
| | | | | | | | fix the mutual authentication bug with beta 4, but this should help forwarding credentials and should also help if someone actually defines ENCRYPTION. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6954 dc483132-0cff-0310-8789-dd5450dbe970
* If secure_profile is set in the context, do not allow the defaultEzra Peisach1995-10-102-2/+8
| | | | | | keytab file to be overridden by an environment variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6953 dc483132-0cff-0310-8789-dd5450dbe970
* For NetBSD convert flags designed for cc to those used by ldEzra Peisach1995-10-092-0/+8
| | | | | | | | (in particular those dealing with library paths) NetBSD requires that the path be stored in the library and the executables. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6952 dc483132-0cff-0310-8789-dd5450dbe970
* For NetBSD shlibs turn back on shlibs_use_dirsEzra Peisach1995-10-092-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6951 dc483132-0cff-0310-8789-dd5450dbe970
* extract_v4_srvtab: Version number is only one byte long (warlord)Ezra Peisach1995-10-092-2/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6950 dc483132-0cff-0310-8789-dd5450dbe970
* Change test to krb524test - otherwise if built and "." is in the users path,Ezra Peisach1995-10-092-4/+9
| | | | | | reruns configure, then they will execute the wrong test. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6949 dc483132-0cff-0310-8789-dd5450dbe970
* (recv_token): When continuning a partial read over the network, putEzra Peisach1995-10-082-1/+6
| | | | | | | | | | | the incomming data into the middle of the token - not back at the start. Now, can someone explain why under NetBSD, in one direction 400+ bytes could be sent at one time, but in the reverse, 102 had to be broken down into 100 + 2? Anyways, this fixes the NetBSD problem with the tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6948 dc483132-0cff-0310-8789-dd5450dbe970
* Work around bug in NetBSD expect. This is the same fix asEzra Peisach1995-10-072-1/+10
| | | | | | is found in gssapi.exp for dealing with AIX... git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6947 dc483132-0cff-0310-8789-dd5450dbe970
* Change kdc port specifications in kdc.conf to match currentEzra Peisach1995-10-072-4/+7
| | | | | | implementation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6946 dc483132-0cff-0310-8789-dd5450dbe970
* Include the file windows.in instead of pre.inTheodore Tso1995-10-072-1/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6945 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ##DOS!include of config/windows.in. config/windows.in is nowTheodore Tso1995-10-0758-31/+143
| | | | | | included by wconfig. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6944 dc483132-0cff-0310-8789-dd5450dbe970
* * ksu.M: Document authorization changesEzra Peisach1995-10-067-646/+35
| | | | | | | | | | | | | | | | | * ksu.1: Remove as was out of date. * Makefile.in (DEFINES): Remove LOCAL_REALM definition. * ksu.h: Remove local_realm from krb5_authorization. * authorization.c (krb5_authorization): Remove old copied code that is in krb5 library and is out of date. Use the configurable aname to localname methods. * main.c (main): Add krb5_secure_config_files so that users cannot override system config files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6943 dc483132-0cff-0310-8789-dd5450dbe970
* Build the list of files *after* building files using awk-windows-macTheodore Tso1995-10-062-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6942 dc483132-0cff-0310-8789-dd5450dbe970
* Documented kdc_ports, and removed references to primary_port andTheodore Tso1995-10-063-44/+20
| | | | | | secondary_port, which are no longer used. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6941 dc483132-0cff-0310-8789-dd5450dbe970
* Change types of krb5_max_enctype and krb5_max_cksumtype to beTheodore Tso1995-10-062-2/+8
| | | | | | krb5_enctype and krb5_cksumtype, to fix some gcc -Wall flames. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6940 dc483132-0cff-0310-8789-dd5450dbe970
* do_tgs_req.c (process_tgs_req): Use a slightly more compressed loggingTheodore Tso1995-10-064-118/+116
| | | | | | | | | | format. do_as_req.c (process_as_req): Unify the logging and error packet production, to make sure that both logging and an error packet is returned for each error condition. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6939 dc483132-0cff-0310-8789-dd5450dbe970
* Make the logs less verbose, by omitting the hostname, pid, etc.Theodore Tso1995-10-062-1/+14
| | | | | | information. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6938 dc483132-0cff-0310-8789-dd5450dbe970
* network.c (setup_network):Theodore Tso1995-10-069-375/+145
| | | | | | | | | | | | | | | | | | | | | main.c (initialize_realms): Massive revamp of how the network ports are setup. The default port list for a realm is read from [kdcdefaults]/kdc_ports from the kdc.conf file. For each realm, a list of ports can be specified in [realms]/<realm>/kdc_ports. extern.h (kdc_realm_t): Remove realm_pport and realm_sport, and added realm_ports. do_tgs_req.c (process_tgs_req): do_as_req.c (process_as_req): dispatch.c (dispatch): Pass the portnumber of the incoming request down to process_as_req and process_tgs_req, instead of the boolean "is_secondary". kerberos_v4.c (kerb_get_principal, kerberos_v4): Fix gcc -Wall flames, by fixing signed vs. unsigned types. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6937 dc483132-0cff-0310-8789-dd5450dbe970
* Remove the profile relation, since it's really a bad idea. RemovedTheodore Tso1995-10-062-33/+13
| | | | | | | the "port" and "secondary_port" relations, and replaced them with the "kdc_port" relation, which takes a list of ports. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6936 dc483132-0cff-0310-8789-dd5450dbe970
* Remove pport and sport from the krb5_realm_params file, and replace itTheodore Tso1995-10-062-4/+7
| | | | | | | with ports, which is a char * list of all of the ports which should be listed to for this realm. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6935 dc483132-0cff-0310-8789-dd5450dbe970
* Change types of krb5_max_enctype and krb5_max_cksumtype to beTheodore Tso1995-10-062-4/+10
| | | | | | krb5_enctype and krb5_cksumtype, to fix some gcc -Wall flames. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6934 dc483132-0cff-0310-8789-dd5450dbe970
* Added DEFAULT_KDC_PORTLISTTheodore Tso1995-10-062-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6933 dc483132-0cff-0310-8789-dd5450dbe970
* Change the name of the kdc configuration file to be kdc.conf, to matchTheodore Tso1995-10-062-1/+6
| | | | | | the man page. :-) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6932 dc483132-0cff-0310-8789-dd5450dbe970
* Fix logic if #ifdefs for HAVE_STRERROR and HAVE_SYS_ERRLIST.Theodore Tso1995-10-052-4/+13
| | | | | | strerror() is used in preference to sys_errlist(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6931 dc483132-0cff-0310-8789-dd5450dbe970
* If the log file can't be opened, print an intelligent error messageTheodore Tso1995-10-052-10/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6930 dc483132-0cff-0310-8789-dd5450dbe970
* * alt_prof.c (krb5_read_realm_params): If secure flag is set inEzra Peisach1995-10-052-0/+9
| | | | | | | | | | | | context, do not allow for environment variables to specify configuration files. Note: It is still possible to bypass the secure flag by directly calling krb5_aprof_init which only krb5kdc does. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6929 dc483132-0cff-0310-8789-dd5450dbe970
* * init_os_ctx.c (krb5_secure_config_files): New function thatEzra Peisach1995-10-052-19/+60
| | | | | | | | | | | will set flag and path to prevent user from overriding configuration files with environment variables. This is intended for those pesky suid root programs so that they cannot break security as easily... git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6928 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h: Add profile_secure to contextEzra Peisach1995-10-053-0/+10
| | | | | | * krb5.hin: Add krb5_secure_config_profile prototype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6927 dc483132-0cff-0310-8789-dd5450dbe970
* Move declaration of std_ks_tuple from kdb5_edit.h to cpw.c (extern part)Ezra Peisach1995-10-053-3/+9
| | | | | | as not all sources include adm.h for the necessary structures. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6926 dc483132-0cff-0310-8789-dd5450dbe970
* Use the kdc.conf file to determine the default list of keysalt tuplesTheodore Tso1995-10-044-18/+29
| | | | | | | to be used. This is stored in std_ks_tuple, and is used by cpw.c for random keys and when a list of keysalts is not specified. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6925 dc483132-0cff-0310-8789-dd5450dbe970
* Put back in the KRB5_CONFIG getenv that was accidentally removedEzra Peisach1995-10-022-0/+6
| | | | | | in the DEFAULT_PROFILE_PATH change. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6924 dc483132-0cff-0310-8789-dd5450dbe970
* * prof_init.c (profile_init_path): Add const declarationsEzra Peisach1995-10-022-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6923 dc483132-0cff-0310-8789-dd5450dbe970
* fix typoMark Eichin1995-10-021-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6922 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: set timeout to 100 since the default of 10 isMark Eichin1995-10-022-0/+7
| | | | | | ludicrous with NFS. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6921 dc483132-0cff-0310-8789-dd5450dbe970
* * adm_conn.c (kadm_get_creds): zero out creds->server afterMark Eichin1995-10-022-1/+8
| | | | | | freeing it to protect later attempts. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6920 dc483132-0cff-0310-8789-dd5450dbe970