| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Remove libpty, gssftp, telnet, and the bsd applications from the
source tree, build system, and tests.
Docs still need to be updated to remove mentions of the applications.
The build system should be simplified now that we're down to one
configure script and don't need some of the functionality currently in
aclocal.m4.
ticket: 6583
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23305 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
make reindent
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23100 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
ticket: 1624
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22159 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
unicode, windows code
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21875 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
has been preserved and made unconditional on krb4 support, since aklog
can now do krb5 auth. The config variable is now named krb_run_aklog
(as it was sometimes documented), not krb4_run_aklog as it previously
was.
ticket: 6303
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21450 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 6200
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21258 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 6200
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20919 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 6200
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20901 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20612 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19080 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
than the largest file number in the select set) rather than some multiple
of sizeof some struct. The latter is large enough accidentally work, but
breaks on AIX.
Map IPv4-mapped IPv6 addresses back to IPv4 in krshd for the purposes of
connecting back to the remote system on AIX, since on AIX getnameinfo
returns such addresses but connect won't accept them.
Ticket: 3122
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18166 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
by Michael Calmer.
* krshd.c (doit): Likewise.
* login.c (main): Likewise.
ticket: 3000
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17165 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to send_subkey and recv_subkey, respectively. Add new APIs to query
and set these fields. Change the behavior of mk_req_ext, rd_req_dec,
and rd_rep to set both subkeys. Applications wanting to set
unidirectional subkeys may still do so by saving the values of subkeys
and doing overrides. Cause mk_cred, mk_priv, and mk_safe to never use
the recv_subkey. Cause rd_cred, rd_priv, and rd_safe to never use the
send_subkey.
ticket: 1415
status: open
tags: pullup
target_version: 1.3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15407 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
(krb_v4_recvauth, krb5_compat_recvauth, krb5_compat_recvauth_version): Define
only if KRB5_KRB4_COMPAT.
* krlogind.c: Include krb.h only if KRB5_KRB4_COMPAT.
(v4_kdata, v4_schedule): Define only if KRB5_KRB4_COMPAT.
(recvauth) [!KRB5_KRB4_COMPAT]: Skip v4 stuff and call krb5_recvauth_version.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15223 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Fixes compilation warnings on AIX 4.3.3.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15105 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14623 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
kcmd.c. Use getnameinfo and sockaddr_storage more.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14572 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14567 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14257 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14256 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
setenv.c, v4rcp.c: Signed v.s unsigned int cleanup.
* defines.h: rcmd_stream_{read,write} take size_t as length argument.
* kcmd.c: Use GETSOCKNAME_ARG3_TYPE instead of assuming int. input
and output handler take size_t as length argument instead of
int. Other signed vs. unsigned fixes.
* configure.in: Add KRB5_GETSOCKNAME_ARGS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14050 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* configure.in: Creare a new variable KRSHDLIBS which differs from
LOGINLIBS by not including libkrb524.a. Test for getenv.
* krcp.c: Prototype lostconn().
* krlogind.c: Provide prototype for signal handler cleanup. Implied
need to add extra argument to function - ensure consistant
calling.
* krsh.c: Provide prototype for signal handler sendsig.
* krshd.c: Rewrite error() to use stdargs/varargs.
(doit): When creating a tty name using getpid. Ensure that does
not overflow tty string buffer.
* login.c: Provide prototype for signal handler timedout.
* setenv.c: Do not define getenv() unless needed.
* v4rcp.c: Rewrite error() to use stdargs/varargs. Add signal
number argument to lostconn(), include prototype, and ensure
called consistantly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13567 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* configure.in: Test if prototype for daemon necessary.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13496 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
* krlogind.c (main): Change sin to sock_in.
* krshd.c: Change sin to sock_in to not shadow global. Change
some local variables to not shadow others.
2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13487 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
define NEED_SETENV as well as linking in local sources.
* defines.h: Include prototype for setenv() if NEED_SETENV defined.
* krlogin.c (prf): Declare as void. Used only with one argument -
get rid of pseudo-varargs behaviour.
* krlogind.c (recvauth): Include k5-util.h for
krb5_compat_recvauth_version() prototype. Declare sendoob() void.
* krshd.c: Include k5-util.h for krb5_compat_recvauth_version()
prototype.
* login.c: Include setenv prototype if NEED_SETENV defined. Cast
arguments to printf to match format string.
* v4rcp.c (source): Cast argument to sprintf() to match format string.
* krcp.c (rsource): Likewise.
* forward.c (rd_and_store_for_creds): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13334 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
conditionals. Include krb524.h if KRB4_CONVERT defined.
* krlogind.c (main): Cleanup unused variables.
(protocol): Cleanup ambiguous if-if-else warning.
* krshd.c (main): Cleanup unused variables.
* krlogin.c (setsignal): Declare as void.
(server_message): Cleanup unused variables.
* setenv.c (setenv): Declare as returning int and clean up
assignments in conditionals.
* kcmd.c (kcmd, rcmd_stream_init_krb5, v5_des_read): Clean up
unused variables and assignments in conditionals.
* forward.c (rd_and_store_for_creds): Likewise.
* krcp.c (rsource): Likewise.
* v4rcp.c (answer_auth): Likewise.
* krsh.c (main): Declare as retuning int.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13257 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
ptys, even if there is a TIOCPKT, since it may result in hangs on
some systems where BSD packet mode is (presumably) not implemented
properly, such as AIX 4.3.3. Should get cleaned up at some later
point to actually I_PUSH "pckt" or equivalent and do translation
between STREAMS and BSD style packet mode.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13245 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
rcmd_stream_init_krb4(), strsave() and rd_and_store_for_creds()
* Makefile.in: Add dependency of forward.o on defines.h
* forward.c: Include defines.h for prototypes.
* kcmd.c, krcp.c, krlogin.c, krlogind.c, krsh.c: Provide full prototype
for local functions and move include of kerberosIV/krb.h before
defines.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13077 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12883 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
* krlogind.c (recvauth): Don't complain about a subkey sent for KCMDV0.1 if
HEIMDAL_FRIENDLY is defined, just quietly ignore it.
* krshd.c (recvauth): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12646 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12470 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* krlogind.c: Rework flags for hostname logging.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11220 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
options controlling hostname manipulation.
* krlogind.c: Make use of pty_make_sane_hostname() for purposes of
manipulating hostname to pass to login. Also unconditionally
syslog IP address and full hostname of remote host. Add command
line options to control such behavior.
* configure.in: Add arpa/nameser.h to CHECK_HEADERS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11176 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
not EOF.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10547 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
compatibility. [krb5-appl/483]
* krcp.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krlogin.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krlogind.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krsh.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
* krshd.c: Integrate ghudson's changes for client-side krb4
compatibility. [krb5-appl/483]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10472 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
bytes long, rather than 1024. Fixes an Irix bug. [krb5-appl/527]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10354 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
* krshd.c:
* login.c:
* v4rcp.c: Don't include netdb.h or sys/socket.h if krb.h is
included; this works around an Ultrix bug where those headers
aren't protected against multiple inclusion.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10331 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
rd_and_store_for_creds. [krb5-appl/502]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10301 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
[krb5-appl/488]
* krlogin.c (main): Fix up potential buffer overrun.
* krcp.c (hosteq): Fix up potential buffer overrun.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10267 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
operation. Use the "-f" flag to enable. This automagically
figures out which port to bind to if you don't specify it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10189 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
krlogin.c: Fixed 8bit flow control (Solaris)
krlogind.c: Whitespace cleanup
krshd.c: No need to set lport before calling getport(&lport)
Also, changed all occurrences of krb5_xfree to use something else.
[kcmd.c still needs one free() fixed when a routine exists to replace the
realm component]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9908 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Implement krb5_free_data & krb5_free_data_contents to cleanup krb5_data
structures and data contents allocated by the krb5 library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9904 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
of creating a new krb5 context for no good reason.
krshd.c (main):
krsh.c (main):
krlogind.c (main):
krlogin.c (main):
krcp.c(main): Check the error return from krb5_init_context(),
and print an error message if necessary.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9317 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* Remove tab3 from initial terminal settings. We don't really care
about horizontal tab delays, do we? This was breaking on NetBSD.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9282 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* Allow login.krb5 -f to authorize root login.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9135 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
and length as one packet, not with two calls to write.
This should also happen to rsh, rcp, and possibly telnet.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9020 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* Fix so login.krb5 compiles with Athena Kerberos libs (needed
for rsaix build)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8540 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
Use the default service principal as the basis for the rcache name.
login.c:
SVR4 systems typically do not do mail/motd checks in login; they
do it in the profiles (/etc/profile). Follow that convention...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7951 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Provenzano and me:
* Makefile.in (install): Install correct set of man pages, and check for
failures.
* kshd.M, klogind.M: Renamed from kr*.M versions.
* login.M: New file. Man page for login with some description of new features.
* rlogin.M: Remove references to using program with target hostname as argv[0].
* rsh.M: Ditto. Also document -f, -F, -x options.
* login.c: Massive changes. Split much functionality out of main and into
separate file sections: terminal flag settings, Kerberos 4 and 5 support, UNIX
password support, mail check, signal handler handling, some other support
routines. Revamp controlling tty and process group handling. For AFS
configuration, use setpag and run aklog. Try validating password using krb5.
Always set tty flags, not just for rlogin session. When validating tickets,
treat an existing key file that doesn't contain the key we think we want
(possibly because DNS was spoofed) as an error condition.
* Makefile.in (LOGINLIBS): List libkrb524.a here.
(LIBOBJS): Not here.
(login.krb5): Reverse the order of LIBOBJS and LOGINLIBS.
* configure.in: Check for --with-afs. Add AFS libs and define SETPAG if
supplied.
* login.c (KRB5_GET_TICKETS, KRB4_GET_TICKETS, KRB_RUN_AKLOG): new macros
selecting single signon options. krb5.conf profile support for control over
authentication options, above the compile time selection.
(conf_affirmative): new function, recognize yes/no in profile value.
(login_get_kconf): new function, look for all [login] flags and set them in
appropriate globals (via login_conf_set array.)
(main, sleepexit, destroy_tickets): Check the new login_* flags.
(main): rename KRB4_USE_524 to KRB4_CONVERT.
* configure.in: Added checks for tcsetpgrp, tcgetpgrp, setpgid.
* krlogind.c (control): Use tcgetpgrp if it's available.
* loginpaths.h (RPATH, LPATH, LPATH_root): Define HP/UX 9.04 versions,
conditionalized on __hpux and !hpux.
* login.c and configure.in: instead of checking _IBMR2 and __sgi__, write
configure tests to check for the existence of /etc/environment and
/etc/TIMEZONE files, respectively.
* forward.c (rd_and_store_for_creds) : If chown fails then only pass failure
back if owner is different than intended owner. This is to make rsh.exp test
work without requiring root privlidges.
* login.c (main): Don't set TERM to an empty value.
(stypeof) [__hpux]: Return null if unknown.
* krlogin.c (catchild): remove hp/ux kludge because of aclocal.m4 fix.
(speeds): test __hpux for hpux speed list.
(main): test __hpux for use of FIOSSAIOSTAT and FIOSSAIOOWN
(USE_TERMIO): test __hpux for bsdtty/ptyio headers.
* krlogind.c: test __hpux for bsdtty/ptyio headers.
(doit): test __hpux for use of setpgrp2.
* krcp.c (main): test __hpux as well for remsh vs. rsh.
* krcp.c (des_write): Make sure the buffer for the encrypted data is large
enough. Only return an error in malloc fails.
* krsh.c (main): Always turn on anyport -A option.
* krlogind.c (ptsname): Declare if it's going to be used.
* krshd.c (main): Use basename of argv[0] for progname.
* login.c (dofork): On linux, TIOCNOTTY causes us to die on a SIGHUP, so don't
even try it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7881 dc483132-0cff-0310-8789-dd5450dbe970
|