summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove krb5_init_context macro hack; change all the calls except inKen Raeburn2006-05-1717-18/+16
| | | | | | krb5_gss_init_context to calls to krb5_gss_init_context. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18015 dc483132-0cff-0310-8789-dd5450dbe970
* Don't look for pthread_mutexattr_setrobust_npKen Raeburn2006-05-163-14/+8
| | | | | | | | | | Apparently Red Hat's Fedora Core 5 defines it but doesn't declare it, so we'd have to declare it before testing the address. While it was once useful for checking whether the pthread code had been loaded, I think the other tests done now are more effective and this isn't needed any more. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18012 dc483132-0cff-0310-8789-dd5450dbe970
* Add SRCS definition and run make dependKen Raeburn2006-05-166-0/+422
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18011 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2006-05-161-2/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18010 dc483132-0cff-0310-8789-dd5450dbe970
* * lib/kadm5/alt_prof.c (kadm5_get_config_params): Replace filename andKen Raeburn2006-05-1641-189/+281
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | envvar arguments with a flag indicating whether KDC config data should be used. Prototype and all callers changed. (krb5_read_realm_params): Delete config file and env var arguments. Prototype and all callers changed. * lib/kadm5/admin.h (KADM5_CONFIG_PROFILE): Commented out. (struct _kadm5_config_params): Delete field PROFILE. * lib/kadm5/alt_prof.c (kadm5_get_config_params): Don't look at it. (kadm5_free_config_params): Don't free it. * kadmin/testing/tcl/util.t: Remove profile data from config params. * kadmin/testing/util/tcl_kadm5.c (config_mask_flags): Deleted KADM5_CONFIG_PROFILE entry. (parse_config_params): Changed to require 20 parameters instead of 21. * lib/kadm5/unit-test/api.2/init-v2.exp (test100): Deleted. * lib/kadm5/alt_prof.c (krb5_aprof_init): Fetch the list of config files from the library and add the caller-indicated config file to the front of the list. * lib/kadm5/clnt/client_init.c (kadm5_init_krb5_context): New function. * lib/kadm5/clnt/libkadm5clnt.exports: Export it. * lib/kadm5/srv/server_init.c: Include k5-int.h, osconf.h, gssapiP_krb5.h. (kadm5_init_krb5_context): New function. * lib/kadm5/srv/libkadm5srv.exports: Export it. * lib/kadm5/srv/Makefile.in (LOCAL_INCLUDES): Add gssapi directories. * lib/kadm5/admin.h (kadm5_init_krb5_context): Declare it. * kadmin/dbutil/kdb5_destroy.c (kdb5_destroy): Call kadm5_init_krb5_context instead of krb5_init_context. * kadmin/dbutil/dump.c (load_db): Likewise. * kadmin/dbutil/kdb5_util.c (main): Likewise. * kadmin/dbutil/kadm5_create.c (kadm5_create): Likewise. * kadmin/dbutil/kdb5_stash.c (kdb5_stash): Likewise. * kadmin/dbutil/loadv4.c (load_v4db): Likewise. * kadmin/server/ovsec_kadmd.c (main): Likewise. * kadmin/cli/kadmin.c (kadmin_startup): Likewise. * kadmin/testing/util/tcl_ovsec_kadm.c (tcl_ovsec_kadm_init): Likewise. * lib/kadm5/unit-test/lock-test.c (main): Likewise. * lib/kadm5/unit-test/handle-test.c (main): Likewise. * lib/kadm5/unit-test/randkey-test.c (main): Likewise. * lib/kadm5/unit-test/setkey-test.c (main): Likewise. * lib/kadm5/chpass_util.c (_kadm5_chpass_principal_util): Likewise. * lib/kadm5/kadm_rpc_xdr.c (xdr_krb5_principal): Likewise. * lib/krb5/os/init_os_ctx.c (add_kdc_config_file): New function. (os_init_paths): Add new argument KDC; call add_kdc_config_file if true. * lib/krb5/krb/init_ctx.c (krb5int_init_context_kdc): New function. (init_common): Add new argument KDC, passed to krb5_os_init_context. * lib/krb5/libkrb5.exports: Export krb5int_init_context_kdc. * k5-int.h (krb5_os_init_context): Update decl. * lib/kadm5/srv/server_init.c (kadm5_init): Call krb5int_init_context_kdc. * krb524/krb524d.c (main): Likewise. * lib/kadm5/unit-test/api.2/init-v2.exp: Don't run test 154 for error for $KRB5_KDC_PROFILE file not present. * lib/krb5/os/init_os_ctx.c (os_get_default_config_files): Rewrite KLL test so as not to confuse Emacs indentation support. * lib/gssapi/krb5/init_sec_context.c (kg_kdc_flag_mutex, kdc_flag): New variables. (krb5_gss_init_context, krb5_gss_use_kdc_context): New functions. * lib/gssapi/krb5/gssapiP_krb5.h (kg_kdc_flag_mutex): Declare. (krb5_gss_init_context, krb5_gss_use_kdc_context): Declare. (krb5_init_context): Define as macro to invoke krb5_gss_init_context for now. * lib/gssapi/gss_libinit.c (gssint_lib_init): Initialize the mutex. (gssint_lib_fini): Destroy it. * lib/gssapi/libgssapi_krb5.exports: Export krb5_gss_use_kdc_context. * lib/kadm5/srv/server_init.c (kadm5_init): Don't complain if the config files specify an admin server, since we now look at krb5.conf as well. * lib/kadm5/unit-test/api.2/init-v2.exp: Delete test test114 for bad server params. * plugins/kdb/db2/adb_openclose.c (osa_adb_init_db): Use krb5int_init_context_kdc instead of krb5_init_context. * kdc/rtest.c (main): Likewise. * kdc/fakeka.c (main): Likewise. * kdc/main.c (main, init_realm): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18009 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (krb5kdc, rtest): Don't explicitly add kdb5 libs to the linkKen Raeburn2006-05-151-2/+2
| | | | | | command. (And we link against libraries, not dependency lists, anyways...) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18008 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c (initialize_realms): Use precise size allocation for dbname= parameterKen Raeburn2006-05-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18007 dc483132-0cff-0310-8789-dd5450dbe970
* Have Tcl script error out if initialization failsKen Raeburn2006-05-131-8/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18006 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Don't create a makefile for posix subdirKen Raeburn2006-05-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18005 dc483132-0cff-0310-8789-dd5450dbe970
* * syslog.c: Discard all the non-Windows bits, since we don't build this onKen Raeburn2006-05-131-248/+1
| | | | | | UNIX. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18004 dc483132-0cff-0310-8789-dd5450dbe970
* * getuid.c, memmove.c, sscanf.c, strcasecmp.c, strdup.c, strerror.c,Ken Raeburn2006-05-138-1240/+0
| | | | | | vfprintf.c, vsprintf.c: Remove files we don't compile anywhere. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18003 dc483132-0cff-0310-8789-dd5450dbe970
* Use unsigned char rather than u_int8_t in random_string()Tom Yu2006-05-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18002 dc483132-0cff-0310-8789-dd5450dbe970
* * tests/dejagnu/config/default.exp (setup_krb5_conf): Don't add suffix toKen Raeburn2006-05-112-2/+2
| | | | | | | | library name in generated config file. * kadmin/testing/proto/krb5.conf.proto: Drop suffix from library name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17999 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed the krb5_cc_gen_new memory ccache implementation and updatedAlexandra Ellwood2006-05-103-12/+83
| | | | | | | | | krb5_verify_init_creds() and rd_and_store_for_creds() to use the API properly (possible now that it's been fixed). ticket: 3746 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17997 dc483132-0cff-0310-8789-dd5450dbe970
* vsnprintf not present on windowsJeffrey Altman2006-05-091-0/+6
| | | | | | | | | | vsnprintf is not present on Windows. Microsoft provides the _vsnprintf form instead. Add a macro to allow this file to compile. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17993 dc483132-0cff-0310-8789-dd5450dbe970
* plugins support requires a Windows equivalent to opendir and friendsJeffrey Altman2006-05-091-1/+6
| | | | | | | | | | | | | This patch simply allows krb5 to build once again on Windows. Windows does not have opendir() and friends. Instead Win32 API functions must be used as described in http://msdn.microsoft.com/library/en-us/dnucmg/html/UCMGch09.asp ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17992 dc483132-0cff-0310-8789-dd5450dbe970
* * threads.c (krb5int_pthread_loaded): Supply dummy version for !ENABLE_THREADSKen Raeburn2006-05-091-0/+5
| | | | | | | | case. ticket: 3426 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17990 dc483132-0cff-0310-8789-dd5450dbe970
* * send_tgs.c (krb5_send_tgs): Fix memory allocation size when padata isKen Raeburn2006-05-091-1/+1
| | | | | | | | provided. ticket: 3714 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17988 dc483132-0cff-0310-8789-dd5450dbe970
* Cleanup a number of cast away from const warnings in gssapiEzra Peisach2006-05-0911-53/+55
| | | | | | | | | | | Change internal token handling and oid handling functions to take a const style gss_OID. In the krb5 dir remove casting. This is the start of fixes in this arena. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17987 dc483132-0cff-0310-8789-dd5450dbe970
* kdb_load_library(): SGI compiler requires that when initializing arraysEzra Peisach2006-05-081-1/+4
| | | | | | | | | at declaration - only constants be used. [filebases]. Code was introduced with 17975 revision. ticket: 3716 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17986 dc483132-0cff-0310-8789-dd5450dbe970
* * plugins.c (krb5int_get_plugin_filenames): Make extention array static and ↵Ken Raeburn2006-05-051-1/+1
| | | | | | const git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17981 dc483132-0cff-0310-8789-dd5450dbe970
* * plugins.c (krb5int_get_plugin_filenames): Avoid shadowing local variable namesKen Raeburn2006-05-051-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17980 dc483132-0cff-0310-8789-dd5450dbe970
* * plugins.c (FILEEXTS): No trailing semicolonKen Raeburn2006-05-051-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17979 dc483132-0cff-0310-8789-dd5450dbe970
* need to export kadm5_set_use_password_serverAlexandra Ellwood2006-05-042-2/+3
| | | | | | | | | | | | | | | | | Need to export "kadm5_set_use_password_server" because it is used by krb5kdc when USE_PASSWORD_SERVER is defined. Since the Mac builds this way we need it in the export list. Unfortunately export lists don't get preprocessed. Note that I only added this one function. The rest of the password server functionality is still conditionalized around USE_PASSWORD_SERVER. Hopefully we can rip all this code out when Apple starts using the db plugin interface for their password server integration. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17977 dc483132-0cff-0310-8789-dd5450dbe970
* Export new function namesAlexandra Ellwood2006-05-041-2/+2
| | | | | | ticket: 3716 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17976 dc483132-0cff-0310-8789-dd5450dbe970
* Changed to krb5int_open_plugin_dirs/krb5int_close_plugin_dirs whichAlexandra Ellwood2006-05-047-141/+279
| | | | | | | | | | | | | takes a list of filebases and directories rather than a list of full paths so the caller doesn't have to generate the possibilities themselves. krb5int_open_plugin_dirs will append the possible suffixes for that platform (including no suffix in case there already is one on the file base). Modified the kdb and locate kdc interfaces to use the new API. ticket: 3716 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17975 dc483132-0cff-0310-8789-dd5450dbe970
* Removed the unnecessary and incorrect (due to operator precedence) "== ↵Alexandra Ellwood2006-05-041-2/+1
| | | | | | | | | | | MPOOL_INUSE". The previous code actually ended up checking if MPOOL_DIRTY (0x01) is set. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17974 dc483132-0cff-0310-8789-dd5450dbe970
* * post.in (.acsyms_okay): Target deleted.Ken Raeburn2006-05-031-10/+3
| | | | | | (configure): Incorporate the check-ac-syms rules here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17973 dc483132-0cff-0310-8789-dd5450dbe970
* ipv4+ipv6 messages can trip up KDC replay detectionKen Raeburn2006-04-293-23/+6
| | | | | | | | | | | | | | | | | | | | The replay lookaside cache includes the sending address, but the krb5 library replay cache does not. So, if the same message arrives from two different source addresses, it is considered a replay by the KDC. If the client isn't receiving the replies for some reason, and the client has multiple addresses it uses to contact different addresses on the KDC (and trying to reach the KDC via both IPv4 and IPv6 is an obvious such case), this can cause errors to be returned by the KDC. * replay.c (krb5_kdc_replay_ent): Remove "addrs" field. (MATCH): Don't check it. (kdc_check_lookaside, kdc_insert_lookaside): Remove "from" argument. * kdc_util.h (kdc_check_lookaside, kdc_insert_lookaside): Update decls. * dispatch.c (dispatch): Update calls. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17970 dc483132-0cff-0310-8789-dd5450dbe970
* Don't test HAVE_C_STRUCTURE_ASSIGNMENT.Ken Raeburn2006-04-2911-50/+2
| | | | | | Instead, just assume we do have a working C compiler. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17969 dc483132-0cff-0310-8789-dd5450dbe970
* (DB2_NAME): New macro, adding .so suffix for now.Ken Raeburn2006-04-271-2/+3
| | | | | | (kdb_get_library_name, kdb_load_library): Use it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17965 dc483132-0cff-0310-8789-dd5450dbe970
* Fix excessive italics in kinit man page;Sam Hartman2006-04-271-1/+2
| | | | | | thanks Stepan Kasal <kasal@ucw.cz> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17964 dc483132-0cff-0310-8789-dd5450dbe970
* Updated comments to explain how the CFBundles get unloaded.Alexandra Ellwood2006-04-251-1/+2
| | | | | | (And not to call CFBundleUnloadExecutable which is refcounted.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17962 dc483132-0cff-0310-8789-dd5450dbe970
* Change kdb plugin code to use the new plugin support instead ofKen Raeburn2006-04-254-22/+27
| | | | | | | directly calling dlopen and friends. Change the test config files to refer to "db2.so" instead of "db2". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17961 dc483132-0cff-0310-8789-dd5450dbe970
* Update internal plugin interface to add an errinfo structure to "open"Ken Raeburn2006-04-253-46/+63
| | | | | | | and "get" routines, so that more detailed error information (e.g., from dlerror()) may be returned to the caller. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17960 dc483132-0cff-0310-8789-dd5450dbe970
* Protect against multiple inclusion. Don't define macro '_' if already definedKen Raeburn2006-04-251-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17959 dc483132-0cff-0310-8789-dd5450dbe970
* Don't define DEBUG; it prints debug messages that cause test suite failuresKen Raeburn2006-04-251-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17958 dc483132-0cff-0310-8789-dd5450dbe970
* Change name of kdb function-table symbol from being derived from theKen Raeburn2006-04-253-5/+3
| | | | | | | name of the library file (which may not be acceptable as a C symbol name anyways) to "kdb_function_table" always. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17957 dc483132-0cff-0310-8789-dd5450dbe970
* (.acsyms_okay): Fix rules to work better from subdirectories, and skip theKen Raeburn2006-04-251-3/+3
| | | | | | top-level configure script. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17956 dc483132-0cff-0310-8789-dd5450dbe970
* Tweak configure script generation to check that all symbols producedKen Raeburn2006-04-254-0/+50
| | | | | | | | | | | | | | | via AC_DEFINE are also present in the applicable configure-generated header file, and error out otherwise. Currently doesn't apply in appl and test trees. * util/check-ac-syms: New script. * config/post.in (.acsyms_okay): New target; runs check-ac-syms, unless we're in the appl or tests trees. (configure): Depend on .acsyms_okay. * config/pre.in (AUTOCONF_HEADER): New variable. * plugins/kdb/db2/libdb2/Makefile.in (AUTOCONF_HEADER): New variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17955 dc483132-0cff-0310-8789-dd5450dbe970
* Remove comment on first lineKen Raeburn2006-04-251-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17954 dc483132-0cff-0310-8789-dd5450dbe970
* Set myfulldirKen Raeburn2006-04-251-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17953 dc483132-0cff-0310-8789-dd5450dbe970
* Generate rpc includes as part of the generate-files-mac targetAlexandra Ellwood2006-04-241-0/+2
| | | | | | | ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17952 dc483132-0cff-0310-8789-dd5450dbe970
* Updated kadm5 Makefile.ins to autogenerate the kadm5 headers as partAlexandra Ellwood2006-04-243-0/+6
| | | | | | | | | of the generate-files-mac build phase. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17951 dc483132-0cff-0310-8789-dd5450dbe970
* Added CoreFoundation bundle plugin supportAlexandra Ellwood2006-04-243-211/+338
| | | | | | | | | | | | | Added CoreFoundation bundle plugin support to support library bundle plugin code. Also modified plugin types so they allocate a list of pointers rather than a list of structs so that we can reuse the code that generates the pointer types. (Basically now krb5int_open_plugin_dir() can call krb5int_open_plugin() rather than doing nearly the same thing.) ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17950 dc483132-0cff-0310-8789-dd5450dbe970
* krb_get_tf_realm(): cc_int32 is an integer type and should be Alexandra Ellwood2006-04-241-1/+1
| | | | | | | | | initialized to 0 not NULL. ticket: new target_version: 1.5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17949 dc483132-0cff-0310-8789-dd5450dbe970
* Signed/unsigned warnings cleanupEzra Peisach2006-04-223-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17948 dc483132-0cff-0310-8789-dd5450dbe970
* unsigned/signed int warnings in krb5_context variablesEzra Peisach2006-04-212-4/+4
| | | | | | | | | Change in_tkt_ktype_count, tgs_ktype_count and conf_tgs_ktypes_count in context to unsigned int. Change get_profile_etype_list() to expect unsigned int as well. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17947 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leak. closedir() was never being called after successful opendir()Ezra Peisach2006-04-201-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17946 dc483132-0cff-0310-8789-dd5450dbe970
* shsUpdate should take an unsigned int for lengthEzra Peisach2006-04-205-8/+8
| | | | | | | | | | | | | | Update shsUpdate to take an unsigned int length instead of signed. The code already assumes that it is an integer >= 0. This change cleans up a number of signed/unsigned warnings. sha1/shs.h, shs.c, t_shs.c: change ints to unsigned int dk/dk_encrypt.c: static function trunc_hmac change a signed int to unsigned hash_provider/hash_sha1.c: Remove cast in argument to shsUpdate ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17945 dc483132-0cff-0310-8789-dd5450dbe970