summaryrefslogtreecommitdiffstats
path: root/src/include/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
...
* Export hooks for looking up SRV records, so we can avoid duplicating the codeKen Raeburn2003-06-061-0/+8
| | | | | | | | | | | * k5-int.h (struct srv_dns_entry): Declare. (krb5int_make_srv_query_realm, krb5int_free_srv_dns_data): Declare. (struct _krb5int_access): Add make_srv_query_realm and free_srv_dns_data fields. ticket: 1550 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15595 dc483132-0cff-0310-8789-dd5450dbe970
* Put krb5int_locate_server back in the accessor "export" listKen Raeburn2003-06-041-0/+4
| | | | | | | ticket: 1549 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15561 dc483132-0cff-0310-8789-dd5450dbe970
* Rename interface to krb5_524_convert_creds, export it from krb5 library.Ken Raeburn2003-05-281-0/+7
| | | | | | | | | | | | Provide old names as functions for UNIX/MacOS binary compatibility, and deprecated macros for source code compatibility. (For Windows, we'll still need a krb524.dll, and it can worry about providing the old names.) Enable support on Windows always. ticket: 1491 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15513 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (clean-windows): Remove new "timestamp" file whenKen Raeburn2003-05-271-0/+5
| | | | | | cleaning up. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15496 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Sequence number of krb5_replay_data should be unsignedEzra Peisach2003-05-251-0/+4
| | | | | | | ticket: 1262 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15493 dc483132-0cff-0310-8789-dd5450dbe970
* Big step towards integrating libkrb524 into libkrb5:Ken Raeburn2003-05-241-0/+19
| | | | | | | | | | | | | | | | | | | | | | | Move libkrb524 code, including error table, into libkrb5. Now libkrb5 initialization pulls in the krb524 error table, so krb524_init_ets is gone; all calls deleted. Move krb4 life/time conversion functions into libkrb5 under new names, using accessor hooks to get at them from libkrb4. Move declarations from krb524.h into krb5.h, k5-int.h, or krb524d.h; the last doesn't get copied into the include directory. Changed inclusions of krb524.h to the appropriate files, if any were needed. Rebuilt dependencies in Makefiles. These changes are likely to break the Windows build; I'll look into that soon. ticket: 1491 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15491 dc483132-0cff-0310-8789-dd5450dbe970
* Implement heuristic for matching broken Heimdal sequence number encodingsTom Yu2003-05-231-0/+2
| | | | | | | | | ticket: 1263 target_version: 1.3 tags: pullup status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15479 dc483132-0cff-0310-8789-dd5450dbe970
* Default KRB5_DEPRECATED to 0, but force it to 1 for in-tree stuffTom Yu2003-05-221-0/+5
| | | | | | | | ticket: 1483 tags: pullup status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15469 dc483132-0cff-0310-8789-dd5450dbe970
* krb5int_populate_gic_opt should return voidSam Hartman2003-05-221-0/+4
| | | | | | | | | | | Since none of the functions it calls can return an error, this should return void. Ticket: new Target_Version: 1.3 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15465 dc483132-0cff-0310-8789-dd5450dbe970
* Implement krb5_get_in_tkt_with_password andSam Hartman2003-05-201-0/+4
| | | | | | | | | | | | krb5_get_in_tkt_with_keytab in terms of krb5_get_init_creds. It turns out that these do in fact need to use get_init_creds not get_init_creds_{password,keytab} because of those functions do not allow the AS request to be returned. Ticket: 1480 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15461 dc483132-0cff-0310-8789-dd5450dbe970
* Sequence numbers are now unsigned. Implement lenient parser forTom Yu2003-05-181-0/+6
| | | | | | | | | | | sequence numbers which folds received negative sequence numbers into positive unsigned numbers. Constrain the space of initial sequence numbers to facilitate backwards compatibility. ticket: 1262 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15457 dc483132-0cff-0310-8789-dd5450dbe970
* Define the new error codesKen Raeburn2003-05-171-0/+6
| | | | | | | | | * krb5.hin (KRB5_KPASSWD_ACCESSDENIED): New macro. (KRB5_KPASSWD_BAD_VERSION, KRB5_KPASSWD_INITIAL_FLAG_NEEDED): New macros. ticket: 1441 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15454 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leaks and double frees in preauth2.cSam Hartman2003-05-131-0/+4
| | | | | | | Ticket: 1470 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15425 dc483132-0cff-0310-8789-dd5450dbe970
* * IMplement etype_info in KDC. If the request contains any newSam Hartman2003-05-121-0/+10
| | | | | | | | | | | | | | | | | | | | enctypes (currently AES but anything not explicitly listed as old) then only etype_info2 is sent back in response. Send back etype_info2 all the time. Also send back etype_info2 to provide salt and s2kparams with AS reply not just for preauth errors. * Expose interface for getting string2key with parameters (previously implemented but not exported) * IN the client (at least for get_init_creds interface) prfer etype_info2 to etype_info and pw_salt. Pass s2kparams and use string2key_with_params. Ticket: 1454 Status: open Target_Version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15412 dc483132-0cff-0310-8789-dd5450dbe970
* Add a new krb5_context field for the config-file tgs_enctypes, whichKen Raeburn2003-05-101-0/+5
| | | | | | | | | | | applications cannot override, and use it for ticket-granting tickets needed to acquire some desired service ticket. ticket: 1429 tags: pullup status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15411 dc483132-0cff-0310-8789-dd5450dbe970
* Rename the local_subkey and remote_subkey fields in the auth_contextTom Yu2003-05-101-0/+7
| | | | | | | | | | | | | | | | | to send_subkey and recv_subkey, respectively. Add new APIs to query and set these fields. Change the behavior of mk_req_ext, rd_req_dec, and rd_rep to set both subkeys. Applications wanting to set unidirectional subkeys may still do so by saving the values of subkeys and doing overrides. Cause mk_cred, mk_priv, and mk_safe to never use the recv_subkey. Cause rd_cred, rd_priv, and rd_safe to never use the send_subkey. ticket: 1415 status: open tags: pullup target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15407 dc483132-0cff-0310-8789-dd5450dbe970
* Implement encoders for etype_info2 and add support to s2kparams forSam Hartman2003-05-061-0/+6
| | | | | | | | | decoders. Ticket: 1454 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15393 dc483132-0cff-0310-8789-dd5450dbe970
* * port-sockets.h (inet_ntop) [!_WIN32 && !HAVE_MACSOCK_H]: Define as a macro ifKen Raeburn2003-05-021-0/+5
| | | | | | | | | | not provided by the OS. ticket: 1435 target_version: 1.3 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15391 dc483132-0cff-0310-8789-dd5450dbe970
* Incorporate krb5_os_context directly into krb5_context, since they're alwaysKen Raeburn2003-04-281-0/+5
| | | | | | allocated and freed at the same time, even if in different files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15378 dc483132-0cff-0310-8789-dd5450dbe970
* Implementation of Microsoft set password client library code providedSam Hartman2003-04-251-0/+11
| | | | | | | | | | by Paul Nelson. Ticket: 1377 Status: open Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15373 dc483132-0cff-0310-8789-dd5450dbe970
* Require only autoconf 2.52. Try --include argument to autoconf and autoheader,Ken Raeburn2003-04-251-0/+6
| | | | | | | | | | and if the command fails, try it again with --localdir; don't tie it to some previously used version of autoconf. ticket: 1242 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15370 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (getaddrinfo) [NUMERIC_SERVICE_BROKEN]: Overwrite the portKen Raeburn2003-04-071-0/+6
| | | | | | | | | | number only if a numeric service port was supplied. ticket: 1392 status: open target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15324 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (COPY_FIRST_CANONNAME) [_AIX]: Define.Ken Raeburn2003-04-021-0/+11
| | | | | | | | | | | | | (GET_HOST_BY_NAME) [_AIX]: New version for AIX version of gethostbyname_r. (getaddrinfo) [NUMERIC_SERVICE_BROKEN]: Use "discard" as a dummy service name instead of none at all. Don't check for unsigned value less than zero. (getaddrinfo) [COPY_FIRST_CANONNAME]: Set any ai_canonname fields other than the first one to null. ticket: 1392 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15317 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Use KRB5_AC_NEED_BIND_8_COMPAT to check for bind 9 and ↵Alexandra Ellwood2003-03-181-0/+6
| | | | | | higher. When bind 9 is present, BIND_8_COMPAT needs to be defined to get bind 8 types git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15290 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.h: Removed enumsalwaysint because there are no typed enums in this ↵Alexandra Ellwood2003-03-061-0/+13
| | | | | | header. * k5-int.h: Removed Mac OS header goober. Added prototype for os_get_default_config_files which will be used by KfM's preference APIs (KFM needs to get the secure default files as well as the normal ones). Moved profile.h inclusion higher so it gets included before this function and thus its types are defined (the reason I put it where I did was there is another config file function next to it) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15247 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up PBKDF2 interface. Add s2k-params to string-to-key interface, exceptKen Raeburn2003-03-051-0/+10
| | | | | | | no new decl in krb5.h yet; rename changed s2k functions to use krb5int_ prefix. Add AES to etype table. Delete some unused declarations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15229 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Set and substitute maybe_kerberosIV.Ken Raeburn2003-02-271-0/+5
| | | | | | * Makefile.in (MY_SUBDIRS): Use it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15207 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_princ_component): Return NULL if going off the end of the arrayKen Raeburn2003-02-201-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15193 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for sys/select.h and time.hKen Raeburn2003-02-201-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15192 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (all-unix): Remove kerberosIV/krb_err.h, as it wasTom Yu2003-02-071-0/+9
| | | | | | | | | | causing spurious rebuilds of lots of stuff because it was depending on all-recurse, which is always out of date. (install-headers-unix): Also, no need to depend on kerberosIV/krb_err.h here, since the kerberosIV subdirectory takes care of it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15167 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_mk_req_checksum_func): Fix Windows calling convention syntaxKen Raeburn2003-01-171-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15127 dc483132-0cff-0310-8789-dd5450dbe970
* Move socklen_t and sockaddr_storage definitions to port-sockets.hKen Raeburn2003-01-101-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15108 dc483132-0cff-0310-8789-dd5450dbe970
* Use markers in Makefile.in rather than rules in configure.in to indicate whenKen Raeburn2003-01-101-0/+5
| | | | | | | | to use the lib.in and libobj.in makefile fragments. Pushing this per-directory info into Makefile.in will make it a little easier to work on combining configure scripts for multiple directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
* AIX 4.3.3 getaddrinfo() is broken in a slightly different way than I thoughtKen Raeburn2003-01-091-0/+10
| | | | | | | | | | | * fake-addrinfo.h (getaddrinfo) [_AIX]: Always overwrite sa_family and sa_len fields, since sa_family at least may be non-zero *and* wrong. (protoname, socktypename, familyname, debug_dump_getaddrinfo_args, debug_dump_error, debug_dump_error, debug_dump_addrinfos) [DEBUG_ADDRINFO]: New debugging functions. (fake_getaddrinfo, getaddrinfo) [DEBUG_ADDRINFO]: Use them. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15104 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (freeaddrinfo): Back out 1/3/03 change. ANSIEzra Peisach2003-01-081-0/+5
| | | | | | does not require it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15098 dc483132-0cff-0310-8789-dd5450dbe970
* 2003-01-08 Sam Hartman <hartmans@mit.edu>Sam Hartman2003-01-081-0/+5
| | | | | | | * krb5.hin : Move KRB5_CALLCONV specifier for krb5_mk_req_checksum_func to right place git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15097 dc483132-0cff-0310-8789-dd5450dbe970
* More const for ops tablesKen Raeburn2003-01-081-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15094 dc483132-0cff-0310-8789-dd5450dbe970
* Make ccache and rcache ops tables constKen Raeburn2003-01-081-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15092 dc483132-0cff-0310-8789-dd5450dbe970
* Implement krb5_auth_con_set_checksum_func, an API for setting aSam Hartman2003-01-061-0/+5
| | | | | | | | | | callback to specify the data to be checksummed by krb5_mk_req after the auth_context has been set up. Mainly useful for GSSAPI. Ticket: 1054 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15084 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.h (freeaddrinfo): Do not free a NULL pointerEzra Peisach2003-01-031-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15078 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up some broken uses of "const" in function interfacesKen Raeburn2002-12-191-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15058 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Update comment on krb5_kt_free_entry prototype toTom Yu2002-12-121-0/+5
| | | | | | point at the correct recommended function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15044 dc483132-0cff-0310-8789-dd5450dbe970
* Fix some KRB5_CALLCONV botches that were causing trouble for Windows buildTom Yu2002-12-071-0/+7
| | | | | | | | | | | | | | Update send_to_kdc() to use various krb5 internals to talk to the krb4 KDC. Add a new internal function to optionally return the local address used to talk to the KDC. Many changes to lib/krb5/os to support this. Fix bug in krb5int_sendto() that prevented correct UDP length from being returned. Update callers of internal locate_* and sendto_* functions. ticket: 1189 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15038 dc483132-0cff-0310-8789-dd5450dbe970
* Merge more KfM krb4 thingsTom Yu2002-11-271-0/+5
| | | | | | | | | | | | | | | | | | Implement *_in_tkt_creds, mk_req_creds, and rd_req_int functions. Implement KfM krb4 kadm password changing, mostly by pulling in the client side of the kadm library into the krb4 library. Do some more header file cleanup of des.h and krb.h. Remove some ancient krb4 dead weight. Some Mac-specific functionality still needs to be merged. ticket: 1189 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15014 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Remove references to adm_err.h from here tooTom Yu2002-11-141-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15000 dc483132-0cff-0310-8789-dd5450dbe970
* Better type and bounds checking:Ken Raeburn2002-11-131-0/+12
| | | | | | | | | | | | | | | | * fake-addrinfo.h [NEED_FAKE_GETADDRINFO]: Include errno.h. (fake_getnameinfo): Check that socklen_t size arguments are positive and fit in size_t; return EAI_SYSTEM/EINVAL if not. Use the size_t variants when calling string functions. Work around another AIX bug: [_AIX]: Define NUMERIC_SERVICE_BROKEN. [NUMERIC_SERVICE_BROKEN]: Include ctype.h and stdlib.h. (getaddrinfo) [NUMERIC_SERVICE_BROKEN]: If the service name is a numeric string, save its value and the socket type, pass a null pointer to the real getaddrinfo, and patch the returned results. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14995 dc483132-0cff-0310-8789-dd5450dbe970
* New file to define SPNEGO structuresSam Hartman2002-11-061-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14973 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes up the in-tree callers of krb5_read_password() andTom Yu2002-11-061-0/+6
| | | | | | | | | | des_read_password(). We should perhaps tighten up the test suite now. ticket: 1217 status: open target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14972 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h (krb5_ser_handle): Now points to const.Ken Raeburn2002-10-311-0/+8
| | | | | | | | | | | | | | | (krb5_kt_dfl_ops): Now const. (struct _krb5_kt_ops): Field serializer now points to const krb5_ser_entry instead of void. * krb5.hin (struct _krb5_kt): Field ops now points to const. * kt_file.c (krb5_ktf_ops, krb5_ktf_writable_ops): Now const. Drop cast of serializer entry initializer. (fopen_mode_rbplus, fopen_mode_rb): Now const. * kt_srvtab.c (krb5_kts_ops): Now const. * ktbase.c (krb5_ktf_ops, krb5_kts_ops): Update declarations. (struct krb5_kt_typelist): Field ops now points to const. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14953 dc483132-0cff-0310-8789-dd5450dbe970
* Wrong ASN.1 definition and padata type for new hardware preauthKen Hornstein2002-10-301-0/+5
| | | | | | | | | | | | | | | It turned out that early in the development cycle, one of our developers picked the "next" PADATA type in krb5.hin, and we said, "We've got to fix that when we get the real one assigned" ... and we never did. Noticed by Ezra Peisach. Also, the definition for sam-pk-for-sad was changed to OCTET STRING from EncryptionKey in the draft and the code, but we never updated the ASN.1 definition. Also noticed by Ezra Peisach. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14945 dc483132-0cff-0310-8789-dd5450dbe970