summaryrefslogtreecommitdiffstats
path: root/src/kdc/extern.c
Commit message (Collapse)AuthorAgeFilesLines
* Eliminate some KDC globalsTom Yu2012-10-151-1/+1
| | | | | | Make kdc_active_realm a local variable in every function that needs it. Pass it around in various state structures as needed. Keep the macros that reference its members remain for now.
* Adjust most C source files to match the new standards for copyrightGreg Hudson2011-03-091-3/+4
| | | | | | and license comments. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24695 dc483132-0cff-0310-8789-dd5450dbe970
* Remove KDC replay cacheGreg Hudson2010-10-191-1/+0
| | | | | | | | | | | | Now that SAM1 support has been removed, the KDC does not need a replay replay cache. Remove all code within USE_RCACHE and associated support. Rename --disable-kdc-replay-cache to --disable-kdc-lookaside-cache. ticket: 6804 target_version: 1.9 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24464 dc483132-0cff-0310-8789-dd5450dbe970
* Merge users/raeburn/branches/network-mergeKen Raeburn2010-03-171-3/+0
| | | | | | | | | | Re-integrates the forked versions of network.c in kdc and kadmin/server. Server-specific initialization and SIGHUP-reset code is moved into other source files; the more generic network-servicing code is merged and moved into apputils library already used by both programs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23811 dc483132-0cff-0310-8789-dd5450dbe970
* make mark-cstyleTom Yu2009-10-311-9/+10
| | | | | | make reindent git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23100 dc483132-0cff-0310-8789-dd5450dbe970
* Account lockoutGreg Hudson2009-10-251-5/+0
| | | | | | | | | | | | Merge Luke's users/lhoward/lockout2 branch to trunk. Implements account lockout policies for preauth-using principals using existing principal metadata fields and new policy fields. The kadmin API version is bumped from 2 to 3 to compatibly extend the policy_ent_rec structure. ticket: 6577 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
* r22529@squish: raeburn | 2009-08-12 13:49:45 -0400Ken Raeburn2009-08-121-0/+5
| | | | | | | | | | | | | | | | | | | | | | . r22530@squish: raeburn | 2009-08-12 13:55:57 -0400 Change KRBCONF_KDC_MODIFIES_KDB to a mostly run-time option. Change all code conditionals to test a new global variable, the initial value of which is based on KRBCONF_KDC_MODIFIES_KDB. There is currently no way to alter the value from the command line; that will presumably be desired later. Change initialize_realms to store db_args in a global variable. In process_as_req, call db_open instead of the old set_name + init. Don't reopen if an error is reported by krb5_db_fini. Add a test of running kinit with an incorrect password, to trigger a kdb update if enabled. r22531@squish: raeburn | 2009-08-12 13:58:13 -0400 Fix trailing whitespace. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22518 dc483132-0cff-0310-8789-dd5450dbe970
* Master Key Migration ProjectWill Fiveash2009-01-301-0/+1
| | | | | | | | | | | | | | | Commit for the Master Key Migration Project. http://k5wiki.kerberos.org/wiki/Projects/Master_Key_Migration This commit provides the ability to add a new master key (with an enctype differing from the current master key) to the master key principal and stash file and then migrate the encryption of existing principals long term keys to use the new master key. In addition deletion of master keys is provided. ticket: 6354 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21844 dc483132-0cff-0310-8789-dd5450dbe970
* Merge mskrb-integ onto trunkSam Hartman2009-01-031-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | The mskrb-integ branch includes support for the following projects: Projects/Aliases * Projects/PAC and principal APIs * Projects/AEAD encryption API * Projects/GSSAPI DCE * Projects/RFC 3244 In addition, it includes support for enctype negotiation, and a variety of GSS-API extensions. In the KDC it includes support for protocol transition, constrained delegation and a new authorization data interface. The old authorization data interface is also supported. This commit merges the mskrb-integ branch on to the trunk. Additional review and testing is required. Merge commit 'mskrb-integ' into trunk ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21690 dc483132-0cff-0310-8789-dd5450dbe970
* Frank Cusack's patches, first two sets. Should be no incompatible changes,Ken Raeburn2000-02-071-0/+1
| | | | | | | | | | | except perhaps for a client talking to both a new and old KDC? Several improvements to guard against replay attacks when hardware preauth is in use, though they require re-enabling the USE_RCACHE code, which I haven't done yet. Several changes of mine for silencing a few compiler warnings, and adding some debugging log messages while I track what's going on with the preauth code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12010 dc483132-0cff-0310-8789-dd5450dbe970
* copyright notice updates from 1.1 branchKen Raeburn1999-09-241-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11853 dc483132-0cff-0310-8789-dd5450dbe970
* These additions cause the KDC to react to SIGHUP by closing andGeoffrey King1998-07-081-0/+1
| | | | | | | | reopening its log files, so that logfile management utilities may now compress old logs and then kill -HUP the KDC process to get them to use fresh log files. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10627 dc483132-0cff-0310-8789-dd5450dbe970
* Multiple realm supportPaul Park1995-06-231-19/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6137 dc483132-0cff-0310-8789-dd5450dbe970
* * *.[ch]: Avoid <krb5/...> and <com_err.h> includesJohn Gilmore1995-02-281-8/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5031 dc483132-0cff-0310-8789-dd5450dbe970
* Allow the primary port that the KDC listens on be configurable on theTheodore Tso1995-01-261-0/+2
| | | | | | | command line. If the appropriate /etc/services entries aren't found, use compiled in defaults. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4851 dc483132-0cff-0310-8789-dd5450dbe970
* Add magic number placeholder to statically initialized structuresTheodore Tso1994-10-011-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4419 dc483132-0cff-0310-8789-dd5450dbe970
* stamp out rcs keywordsMark Eichin1994-08-181-6/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4190 dc483132-0cff-0310-8789-dd5450dbe970
* Change export warning notice from "is assumed to require an export license"Theodore Tso1993-09-011-2/+2
| | | | | | to "may require..." git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2638 dc483132-0cff-0310-8789-dd5450dbe970
* Improved logging of TGS and AS error casesTheodore Tso1993-08-171-1/+1
| | | | | | | Fixed interrealm authentication; will now give out tickets for foreign interrealm requests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2630 dc483132-0cff-0310-8789-dd5450dbe970
* Added missing osconf.h includeTheodore Tso1993-02-261-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2502 dc483132-0cff-0310-8789-dd5450dbe970
* Change DEFAULT_DBM_FILE -> DEFAULT_KDB_FILE (latter is defined in osconf.h)Theodore Tso1993-02-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2501 dc483132-0cff-0310-8789-dd5450dbe970
* krb5_principal type changesJohn Carr1992-06-091-2/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2288 dc483132-0cff-0310-8789-dd5450dbe970
* Update copyright noticeJohn Kohl1991-06-061-2/+16
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2156 dc483132-0cff-0310-8789-dd5450dbe970
* add back rcacheJohn Kohl1991-02-131-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1684 dc483132-0cff-0310-8789-dd5450dbe970
* add TGS key cachingJohn Kohl1991-02-131-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1680 dc483132-0cff-0310-8789-dd5450dbe970
* change infinity to kdc_infinityJohn Kohl1990-11-011-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1392 dc483132-0cff-0310-8789-dd5450dbe970
* remove kdc_rcacheJohn Kohl1990-10-221-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1308 dc483132-0cff-0310-8789-dd5450dbe970
* fix reference to copyright/distribution provisionsJohn Kohl1990-05-251-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@945 dc483132-0cff-0310-8789-dd5450dbe970
* initialize max_life_for_realm and max_renewable_..John Kohl1990-05-071-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@763 dc483132-0cff-0310-8789-dd5450dbe970
* allocate for master_encblockJohn Kohl1990-04-241-0/+1
| | | | | | remove krb5_des_cs_entry; it's properly declared in <krb5/des.h> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@569 dc483132-0cff-0310-8789-dd5450dbe970
* remove krb5_mkey_pwd_prompt1, krb5_mkey_pwd_prompt2,John Kohl1990-02-071-2/+4
| | | | | | add signal_requests_exit, dbm_db_name git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@313 dc483132-0cff-0310-8789-dd5450dbe970
* sys/limits.h is a figment on BSD systemsJohn Kohl1990-02-061-2/+9
| | | | | | add master_keyblock, master_princ, krb5_mkey_pwd_prompt1, krb5_mkey_pwd_prompt2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@287 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***John Kohl1990-02-031-0/+30
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@255 dc483132-0cff-0310-8789-dd5450dbe970