| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
| |
reply.enc_part after encryption, since krb5_c_encrypt() now
explicitly initializes all fields of a krb5_enc_data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11175 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
data from the client was of an unknown type, and the principal does
not require preauth, then the preauth should be disregarded.
[krb5-kdc/652]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11130 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
--enable-athena.
* main.c (initialize_realms): Kludge to disable
des3-marc-hmac-sha1 from the command line.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11100 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
to buildtop and thisconfigdir, respectively.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11073 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(kdc_insert_lookaside): Add code to originating address of packet,
as krb4 initial ticket requests don't contain an address. This
would cause a subtle problem wherein two simultaneous krb4 initial
ticket requests for the same principal originating from different
addresses would result in both replies containing the same
address.
* kdc_util.h: Modify prototype for lookaside functions.
* dispatch.c (dispatch): Update to new calling conventions of the
lookaside functions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10713 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
defined.
* main.c (request_hup): Remove call to signal, as this isn't
needed on BSD-ish systems and for sysV-ish systems we use
sigaction anyway.
(setup_signal_handlers): Fix typo.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10648 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
gets reset after each SIGHUP, since this does not happen automatically
in System V's signal handling system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10631 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
reopening its log files, so that logfile management utilities
may now compress old logs and then kill -HUP the KDC process
to get them to use fresh log files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10627 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10555 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
not EOF.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10550 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
quoting somewhat (though things are still way broken).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10502 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
type KRB5_PADATA_PW_SALT to the hint list of supported
preauthentication systems, since it doesn't help to send it. (And it
may screw up Cygnus KerbNet clients.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10466 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
used in BUILDTOP.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10464 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10424 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
actually gets used inside process_v4().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10423 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
before copying it into the KTEXT_ST variable.
(kerberos_v4): Make sure the strings in the V4 request structures
aren't no longer than they are allowed to be.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10402 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
Also removed references to kdb5_create and kdb5_stash
replacing with kdb5_util.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10382 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
gcc now warns about it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10369 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
cleanup code doesn't try to construct a bogus error reply, which
was causing coredumps in the lookaside code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10352 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
already gets those and Ultrix doesn't protect them against
multiple inclusion.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10334 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
are non-NULL when syslogging an error because the principals don't
match.
kdc_util.c (limit_string): Check to make sure the input string
is non-NULL before operating on it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10307 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
"closer" realm if the request was for a TGT in the first place.
[krb5-kdc/459]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reopening DB when KDC_UPDATES_KDB compiled
in. [krb5-kdc/495 by Tony Mione]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10276 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
properly handle a failure return from krb5_rd_req_decode_anyflag().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10270 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
initialize_kdc_error_table().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10220 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
with appropriate autoconf-style symbols. See individual ChangeLogs
for details.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10202 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
new memory allocated, allocate buffers to max size
needed. [based on krb5-kdc/461 by Ken Hornstein].
* rtest.c: Rewrite code to use context and current krb5_principal
structure.
* configure.in: Add KRB5_RUN_FLAGS
* Makefile.in (rtest): Compile rtest and run during make check.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10201 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
including REQUIRES_PWCHANGE, DISALLOW_ALL_TIX,
REQUIRES_PREAUTH. Adds support for parsing the V4 options.
[krb5-kdc/464].
* main.c (main): Add option -4 to specify V4 handling mode.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10200 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
is set before potentially used in case the packet has an error.
* kdc_preauth.c (get_sam_edata): Remove unused variables.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10183 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
is used in several files.
* main.c (get_realm_port): Removed unused function.
(setup_server_realm): Moved prototype to kdc_util.h
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10182 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* main.c: Don't use an rcache.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10148 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10133 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
used; this prevents freeing an unallocated keyblock.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10115 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
limit_string() to make sure the length of cname and sname
are reasonable.
* kdc_util.c (limit_string): New function which limits the strings
that will end up in log files to "reasonable" lengths.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10091 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9905 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9899 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9831 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
permission problems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9800 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
krb5_db_get_principal. Also if SAM is not an option, do
not return as a possible type to client. [krb5-kdc/310]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9712 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
include the doc subtree!!)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9632 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
handle.
Tue Sep 3 22:53:56 1996 Mark Eichin <eichin@cygnus.com>
* kdc_preauth.c (get_preauth_hint_list): detect ap->get_edata
return status and don't pass back hint if it failed.
(get_etype_info): malloc one more word in entry for end marker.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9543 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
check_preauth to return successfully, there must be at least one
preauth which succeeded, and no REQUIRED preauth system which failed.
If a preauth is marked SUFFICIENT, then the rest of the preauth list
aren't checked. Fixed bug where when none of the preauth types were
recognized, an error message corresponding to stack garbage was
printed.
main.c (argv): Check the error return from krb5_init_context(), and
print an error message if necessary.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9323 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
the kdc.conf used to get the default port list. It's not useful for
anything else, and will just confuse people.
(init_realm): Reformat function to be readable. Add error checking to
call of krb5_read_realm_params.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9313 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9216 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9069 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8973 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* Linux shared lib fix
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8903 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8888 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
is prepatory work towards eliminating the dependency on
libkadm5. Ultimately we will probably need to rethink how
the library structure for krb5....
configure.in: Add -lgssapi and -lgssrpc to libraries linked with
krb5kdc since they are needed for shared libraries. This
is a horrible hack....
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8788 dc483132-0cff-0310-8789-dd5450dbe970
|