summaryrefslogtreecommitdiffstats
path: root/src/kdc/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
...
* * do_as_req.c (process_as_req): Fix to assign kvno toTom Yu1999-02-171-0/+6
| | | | | | | reply.enc_part after encryption, since krb5_c_encrypt() now explicitly initializes all fields of a krb5_enc_data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11175 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_preauth.c (check_padata): If preauth fails because the preauthTheodore Tso1999-01-271-0/+7
| | | | | | | | data from the client was of an unknown type, and the principal does not require preauth, then the preauth should be disregarded. [krb5-kdc/652] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11130 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in (withval): Conditinalize ATHENA_DES3_KLUDGE onTom Yu1999-01-051-0/+8
| | | | | | | | | --enable-athena. * main.c (initialize_realms): Kludge to disable des3-marc-hmac-sha1 from the command line. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11100 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-12-051-0/+5
| | | | | | to buildtop and thisconfigdir, respectively.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11073 dc483132-0cff-0310-8789-dd5450dbe970
* pull up 3des implementation from the marc-3des branchMarc Horowitz1998-10-301-0/+53
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
* * replay.c (kdc_check_lookaside):Tom Yu1998-07-221-0/+15
| | | | | | | | | | | | | | | | (kdc_insert_lookaside): Add code to originating address of packet, as krb4 initial ticket requests don't contain an address. This would cause a subtle problem wherein two simultaneous krb4 initial ticket requests for the same principal originating from different addresses would result in both replies containing the same address. * kdc_util.h: Modify prototype for lookaside functions. * dispatch.c (dispatch): Update to new calling conventions of the lookaside functions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10713 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add CHECK_SIGNALS so that POSIX_SIGNALS getsTom Yu1998-07-151-0/+10
| | | | | | | | | | | defined. * main.c (request_hup): Remove call to signal, as this isn't needed on BSD-ish systems and for sysV-ish systems we use sigaction anyway. (setup_signal_handlers): Fix typo. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10648 dc483132-0cff-0310-8789-dd5450dbe970
* Added a call to signal() in request_hup() so that the signal handlerGeoffrey King1998-07-111-0/+8
| | | | | | | gets reset after each SIGHUP, since this does not happen automatically in System V's signal handling system. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10631 dc483132-0cff-0310-8789-dd5450dbe970
* These additions cause the KDC to react to SIGHUP by closing andGeoffrey King1998-07-081-0/+13
| | | | | | | | reopening its log files, so that logfile management utilities may now compress old logs and then kill -HUP the KDC process to get them to use fresh log files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10627 dc483132-0cff-0310-8789-dd5450dbe970
* Print 4 digit years in Krb4 log entries to avoid Y2K issuesTheodore Tso1998-05-081-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10555 dc483132-0cff-0310-8789-dd5450dbe970
* POSIX states that getopt returns -1 when it is done parsing options,Theodore Tso1998-05-061-0/+5
| | | | | | not EOF. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10550 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.c (add_to_transited): Check lengths, fix up commaTom Yu1998-03-201-0/+5
| | | | | | quoting somewhat (though things are still way broken). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10502 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_preauth.c (get_preauth_hint_list): Don't add the pseudo preauthTheodore Tso1998-02-201-0/+7
| | | | | | | | type KRB5_PADATA_PW_SALT to the hint list of supported preauthentication systems, since it doesn't help to send it. (And it may screw up Cygnus KerbNet clients.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10466 dc483132-0cff-0310-8789-dd5450dbe970
* Remove trailing slash from thisconfigdir. Change directory syntaxTom Yu1998-02-181-0/+4
| | | | | | used in BUILDTOP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10464 dc483132-0cff-0310-8789-dd5450dbe970
* Mass makefile/configure.in build system revampTheodore Tso1998-02-121-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10424 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c: Move macro definition of klog earlier so that itTom Yu1998-02-061-0/+5
| | | | | | actually gets used inside process_v4(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10423 dc483132-0cff-0310-8789-dd5450dbe970
* kerberos_v4.c (process_v4): Check the length of the incoming V4 packetTheodore Tso1998-02-051-0/+7
| | | | | | | | | before copying it into the KTEXT_ST variable. (kerberos_v4): Make sure the strings in the V4 request structures aren't no longer than they are allowed to be. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10402 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5kdc.M: Document V4 mode handling [krb5-kdc/464].Ezra Peisach1998-01-281-0/+4
| | | | | | | Also removed references to kdb5_create and kdb5_stash replacing with kdb5_util. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10382 dc483132-0cff-0310-8789-dd5450dbe970
* main returns int, not void. ANSI X3.159-1989 2.1.2.2.1 says so, andEzra Peisach1998-01-211-0/+5
| | | | | | gcc now warns about it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10369 dc483132-0cff-0310-8789-dd5450dbe970
* * do_tgs_req.c: Add some explicit settings of errcode so that theTom Yu1998-01-161-0/+6
| | | | | | | cleanup code doesn't try to construct a bogus error reply, which was causing coredumps in the lookaside code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10352 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c: Don't include sys/socket.h or netdb.h, as krb.hTom Yu1997-12-121-0/+6
| | | | | | | already gets those and Ultrix doesn't protect them against multiple inclusion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10334 dc483132-0cff-0310-8789-dd5450dbe970
* do_tgs_req.c (process_tgs_req): Add check to make sure cname and snameTheodore Tso1997-11-251-0/+9
| | | | | | | | | | are non-NULL when syslogging an error because the principals don't match. kdc_util.c (limit_string): Check to make sure the input string is non-NULL before operating on it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10307 dc483132-0cff-0310-8789-dd5450dbe970
* do_tgs_req.c (process_tgs_req): Only try to return a TGT for aTheodore Tso1997-11-141-0/+6
| | | | | | | "closer" realm if the request was for a TGT in the first place. [krb5-kdc/459] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10280 dc483132-0cff-0310-8789-dd5450dbe970
* * do_as_req.c (process_as_req): Reset master key after closing andEzra Peisach1997-11-121-0/+6
| | | | | | | reopening DB when KDC_UPDATES_KDB compiled in. [krb5-kdc/495 by Tony Mione] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10276 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_util.c (kdc_process_tgs_req): If not using the reply cache,Theodore Tso1997-11-111-0/+6
| | | | | | properly handle a failure return from krb5_rd_req_decode_anyflag(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10270 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c (main): Initialize kdc error table withEzra Peisach1997-10-091-0/+5
| | | | | | initialize_kdc_error_table(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10220 dc483132-0cff-0310-8789-dd5450dbe970
* Remove KRB5_USE_INET, HAS_UNISTD_H, HAS_SETVBUF, and replaceTom Yu1997-09-261-0/+10
| | | | | | | with appropriate autoconf-style symbols. See individual ChangeLogs for details. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10202 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.c (add_to_transited): Fix up memory leaks, clean outEzra Peisach1997-09-241-0/+14
| | | | | | | | | | | | | | new memory allocated, allocate buffers to max size needed. [based on krb5-kdc/461 by Ken Hornstein]. * rtest.c: Rewrite code to use context and current krb5_principal structure. * configure.in: Add KRB5_RUN_FLAGS * Makefile.in (rtest): Compile rtest and run during make check. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10201 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c (check_princ): Add checks for V5 kdc flagsEzra Peisach1997-09-231-0/+8
| | | | | | | | | | including REQUIRES_PWCHANGE, DISALLOW_ALL_TIX, REQUIRES_PREAUTH. Adds support for parsing the V4 options. [krb5-kdc/464]. * main.c (main): Add option -4 to specify V4 handling mode. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10200 dc483132-0cff-0310-8789-dd5450dbe970
* * do_tgs_req.c (process_tgs_req): Initialize authtime to 0 so itEzra Peisach1997-08-181-1/+7
| | | | | | | | is set before potentially used in case the packet has an error. * kdc_preauth.c (get_sam_edata): Remove unused variables. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10183 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.h: Added prototype for setup_server_realm(). This functionEzra Peisach1997-08-181-0/+7
| | | | | | | | | is used in several files. * main.c (get_realm_port): Removed unused function. (setup_server_realm): Moved prototype to kdc_util.h git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10182 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.c:Tom Yu1997-07-301-0/+5
| | | | | | * main.c: Don't use an rcache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10148 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c (init_realm): Fix to use new ktkdbTom Yu1997-07-251-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10133 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c (get_sam_edata): Don't goto cleanup if SAM is notTom Yu1997-07-151-0/+5
| | | | | | used; this prevents freeing an unallocated keyblock. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10115 dc483132-0cff-0310-8789-dd5450dbe970
* * do_as_req.c (process_as_req), do_tgs_req (process_tgs_req): UseTheodore Tso1997-05-301-0/+9
| | | | | | | | | | limit_string() to make sure the length of cname and sname are reasonable. * kdc_util.c (limit_string): New function which limits the strings that will end up in log files to "reasonable" lengths. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10091 dc483132-0cff-0310-8789-dd5450dbe970
* Replace krb5_xfree with appropriate free routineRichard Basch1997-02-181-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9905 dc483132-0cff-0310-8789-dd5450dbe970
* * kerberos_v4.c: Remove include of krb4-proto.hEzra Peisach1997-02-181-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9899 dc483132-0cff-0310-8789-dd5450dbe970
* Merge of libhack_branchTom Yu1997-02-091-0/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9831 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Remove logger.c target before copying over it to avoidRichard Basch1997-02-061-0/+6
| | | | | | permission problems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9800 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c (get_sam_edata): Use proper interface toEzra Peisach1997-01-021-0/+6
| | | | | | | krb5_db_get_principal. Also if SAM is not an option, do not return as a possible type to client. [krb5-kdc/310] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9712 dc483132-0cff-0310-8789-dd5450dbe970
* Merge V1_0_FREEZE_3 into the mainline. (Note this merge does *not*Theodore Tso1996-12-131-0/+7
| | | | | | include the doc subtree!!) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9632 dc483132-0cff-0310-8789-dd5450dbe970
* * [krb5-libs/149] only generate requests that you can actuallyMark Eichin1996-11-231-0/+11
| | | | | | | | | | | | handle. Tue Sep 3 22:53:56 1996 Mark Eichin <eichin@cygnus.com> * kdc_preauth.c (get_preauth_hint_list): detect ap->get_edata return status and don't pass back hint if it failed. (get_etype_info): malloc one more word in entry for end marker. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9543 dc483132-0cff-0310-8789-dd5450dbe970
* kdc_preauth.c (check_padata): Fixed error handling; in order forTheodore Tso1996-11-071-0/+15
| | | | | | | | | | | | | | check_preauth to return successfully, there must be at least one preauth which succeeded, and no REQUIRED preauth system which failed. If a preauth is marked SUFFICIENT, then the rest of the preauth list aren't checked. Fixed bug where when none of the preauth types were recognized, an error message corresponding to stack garbage was printed. main.c (argv): Check the error return from krb5_init_context(), and print an error message if necessary. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9323 dc483132-0cff-0310-8789-dd5450dbe970
* (initialize_realms): Remove rather pointless use of krb5.conf to findTheodore Tso1996-11-071-0/+9
| | | | | | | | | | the kdc.conf used to get the default port list. It's not useful for anything else, and will just confuse people. (init_realm): Reformat function to be readable. Add error checking to call of krb5_read_realm_params. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9313 dc483132-0cff-0310-8789-dd5450dbe970
* Added magic number to initializer of nolrentryTheodore Tso1996-10-191-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9216 dc483132-0cff-0310-8789-dd5450dbe970
* remove ".so man1/header.doc" and extra args to .THTom Yu1996-09-101-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9069 dc483132-0cff-0310-8789-dd5450dbe970
* Treat 0 time as unexpired for krb4 principalsSam Hartman1996-08-231-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8973 dc483132-0cff-0310-8789-dd5450dbe970
* * Better support for Athena Kerberos if installedSam Hartman1996-08-051-0/+8
| | | | | | * Linux shared lib fix git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8903 dc483132-0cff-0310-8789-dd5450dbe970
* Add -ldyn as kadm5 shared library depends upon itEzra Peisach1996-08-011-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8888 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Build logger.o from the libkadm5 directory. ThisTheodore Tso1996-07-241-0/+11
| | | | | | | | | | | | is prepatory work towards eliminating the dependency on libkadm5. Ultimately we will probably need to rethink how the library structure for krb5.... configure.in: Add -lgssapi and -lgssrpc to libraries linked with krb5kdc since they are needed for shared libraries. This is a horrible hack.... git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8788 dc483132-0cff-0310-8789-dd5450dbe970