| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
| |
kadm5_create_policy and kadm5_modify_policy had _internal variants in
libkadm5srv (but not libkadm5clnt) which only existed to protect the
policy_refcnt field from modification over the wire. Now that
policy_refcnt is no longer used, we don't need the separation.
Bump the library soname since this is technically an ABI change.
|
| |
|
|
|
|
| |
mpol, or gpol operations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23043 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Merge Luke's users/lhoward/lockout2 branch to trunk. Implements
account lockout policies for preauth-using principals using existing
principal metadata fields and new policy fields. The kadmin API
version is bumped from 2 to 3 to compatibly extend the policy_ent_rec
structure.
ticket: 6577
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22784 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
server, if the password is null when creating a principal, treat that
as a request for a random key. In the kadmin client, try using the
new method for random key creation and then fall back to the old one.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22782 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
Remove the arbitrary limit of 10 past keys in policies. We were not
taking advantage of that limit in any other code.
ticket: 6482
target_version: 1.7
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22323 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
In mod-principal tests for clearing the principal's policy, instead of
just testing to see if the wrong string is output and timing out
looking for it, check also for the new expected value. Cuts test
suite run time by about two minutes for each pass (client vs server).
ticket: 6357
target_version: 1.7
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21866 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
Note, this is the commit for the associated Krb Consortium project:
Projects/Masterkey Keytab Stash
ticket: 194
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20661 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20429 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
envvar arguments with a flag indicating whether KDC config data should
be used. Prototype and all callers changed.
(krb5_read_realm_params): Delete config file and env var arguments.
Prototype and all callers changed.
* lib/kadm5/admin.h (KADM5_CONFIG_PROFILE): Commented out.
(struct _kadm5_config_params): Delete field PROFILE.
* lib/kadm5/alt_prof.c (kadm5_get_config_params): Don't look at it.
(kadm5_free_config_params): Don't free it.
* kadmin/testing/tcl/util.t: Remove profile data from config params.
* kadmin/testing/util/tcl_kadm5.c (config_mask_flags): Deleted
KADM5_CONFIG_PROFILE entry.
(parse_config_params): Changed to require 20 parameters instead of 21.
* lib/kadm5/unit-test/api.2/init-v2.exp (test100): Deleted.
* lib/kadm5/alt_prof.c (krb5_aprof_init): Fetch the list of config files from
the library and add the caller-indicated config file to the front of the list.
* lib/kadm5/clnt/client_init.c (kadm5_init_krb5_context): New function.
* lib/kadm5/clnt/libkadm5clnt.exports: Export it.
* lib/kadm5/srv/server_init.c: Include k5-int.h, osconf.h, gssapiP_krb5.h.
(kadm5_init_krb5_context): New function.
* lib/kadm5/srv/libkadm5srv.exports: Export it.
* lib/kadm5/srv/Makefile.in (LOCAL_INCLUDES): Add gssapi directories.
* lib/kadm5/admin.h (kadm5_init_krb5_context): Declare it.
* kadmin/dbutil/kdb5_destroy.c (kdb5_destroy): Call kadm5_init_krb5_context
instead of krb5_init_context.
* kadmin/dbutil/dump.c (load_db): Likewise.
* kadmin/dbutil/kdb5_util.c (main): Likewise.
* kadmin/dbutil/kadm5_create.c (kadm5_create): Likewise.
* kadmin/dbutil/kdb5_stash.c (kdb5_stash): Likewise.
* kadmin/dbutil/loadv4.c (load_v4db): Likewise.
* kadmin/server/ovsec_kadmd.c (main): Likewise.
* kadmin/cli/kadmin.c (kadmin_startup): Likewise.
* kadmin/testing/util/tcl_ovsec_kadm.c (tcl_ovsec_kadm_init): Likewise.
* lib/kadm5/unit-test/lock-test.c (main): Likewise.
* lib/kadm5/unit-test/handle-test.c (main): Likewise.
* lib/kadm5/unit-test/randkey-test.c (main): Likewise.
* lib/kadm5/unit-test/setkey-test.c (main): Likewise.
* lib/kadm5/chpass_util.c (_kadm5_chpass_principal_util): Likewise.
* lib/kadm5/kadm_rpc_xdr.c (xdr_krb5_principal): Likewise.
* lib/krb5/os/init_os_ctx.c (add_kdc_config_file): New function.
(os_init_paths): Add new argument KDC; call add_kdc_config_file if true.
* lib/krb5/krb/init_ctx.c (krb5int_init_context_kdc): New function.
(init_common): Add new argument KDC, passed to krb5_os_init_context.
* lib/krb5/libkrb5.exports: Export krb5int_init_context_kdc.
* k5-int.h (krb5_os_init_context): Update decl.
* lib/kadm5/srv/server_init.c (kadm5_init): Call krb5int_init_context_kdc.
* krb524/krb524d.c (main): Likewise.
* lib/kadm5/unit-test/api.2/init-v2.exp: Don't run test 154 for error for
$KRB5_KDC_PROFILE file not present.
* lib/krb5/os/init_os_ctx.c (os_get_default_config_files): Rewrite KLL test so
as not to confuse Emacs indentation support.
* lib/gssapi/krb5/init_sec_context.c (kg_kdc_flag_mutex, kdc_flag): New
variables.
(krb5_gss_init_context, krb5_gss_use_kdc_context): New functions.
* lib/gssapi/krb5/gssapiP_krb5.h (kg_kdc_flag_mutex): Declare.
(krb5_gss_init_context, krb5_gss_use_kdc_context): Declare.
(krb5_init_context): Define as macro to invoke krb5_gss_init_context for now.
* lib/gssapi/gss_libinit.c (gssint_lib_init): Initialize the mutex.
(gssint_lib_fini): Destroy it.
* lib/gssapi/libgssapi_krb5.exports: Export krb5_gss_use_kdc_context.
* lib/kadm5/srv/server_init.c (kadm5_init): Don't complain if the config files
specify an admin server, since we now look at krb5.conf as well.
* lib/kadm5/unit-test/api.2/init-v2.exp: Delete test test114 for bad server
params.
* plugins/kdb/db2/adb_openclose.c (osa_adb_init_db): Use
krb5int_init_context_kdc instead of krb5_init_context.
* kdc/rtest.c (main): Likewise.
* kdc/fakeka.c (main): Likewise.
* kdc/main.c (main, init_realm): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18009 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 3202
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17404 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 2913
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17100 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
ticket: 1190
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15542 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
actually passed in. Also, fix test suite to be more lenient about
password prompts, which changed under the previous patches for this
ticket.
ticket: 1480
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15463 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
only the fact that it wasn't being done correctly prevented it from causing
test failures.
* lib/lib.t (kinit): If kinit reports a problem initializing the credentials
cache, raise an error.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15056 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
read_password functions still need to be updated.
* api.2/init-v2.exp (test106): Make regexp more forgiving of
variant password prompts.
* api.0/init.exp (test7, test22, test225): Make regexp more
forgiving of variant password prompts.
ticket: 1217
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14932 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* api.0/crte-policy.exp:
* api.0/crte-principal.exp:
* api.0/destroy.exp:
* api.0/dlte-policy.exp:
* api.0/dlte-principal.exp:
* api.0/get-policy.exp:
* api.0/get-principal.exp:
* api.0/init.exp:
* api.0/mod-policy.exp:
* api.0/mod-principal.exp:
* api.0/randkey-principal.exp:
* api.0/rename-principal.exp:
* api.1/lock.exp:
* api.2/chpass-principal-v2.exp:
* api.2/chpass-principal.exp:
* api.2/crte-policy.exp:
* api.2/crte-principal.exp:
* api.2/destroy.exp:
* api.2/dlte-policy.exp:
* api.2/dlte-principal.exp:
* api.2/get-policy.exp:
* api.2/get-principal-v2.exp:
* api.2/get-principal.exp:
* api.2/init-v2.exp:
* api.2/init.exp:
* api.2/mod-policy.exp:
* api.2/mod-principal-v2.exp:
* api.2/mod-principal.exp:
* api.2/randkey-principal-v2.exp:
* api.2/randkey-principal.exp:
* lib/lib.t: s/error/perror.
* config/unix.exp: Work around tcl 8.4's (incorrect?) output EOL
translation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14866 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14691 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
which is used by tcpmux under Irix, to 4 - which is unassigned by
IANA.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14021 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* api.2/init.exp: Same silly typo fixed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13396 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11833 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11774 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
so tests don't fail when kadmin.local produces output
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9630 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
get_config_params behavior when KDC_PROFILE does not exist
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9329 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
in case of failure
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9325 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
* api.2/mod-principal-v2.exp: init to kadmin/admin, not
kadmin/changepw; specify real principal, not null (obviously I
never ran these tests via the client library before)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9308 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
for new tl_data semantics [krb5-admin/140]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9271 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
equivalent to "{}" for empty tl_data field.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9239 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
100-104 [krb5-admin/20]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9219 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
[krb5-admin/18]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9195 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
unit tests less horribly inefficient
* api.[02]/crte-principal.exp, api.[02].mod-principal: update unit
tests for new pw_expiration semantics [krb5-admin/87]
* Makefile.in: ditch the capi and sapi hack, just the api for
everything, and rename the log files after the tests complete so
they are both kept around for viewing [krb5-admin/82]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9188 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
policy database names are hard wired. [krb5-admin/46]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9136 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
instead of /krb5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9120 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
- Makefile.in: rewrote [csapi].* links to work in srcdir (boo,
hiss)
- move lib.t to lib/lib.t
- api.*/*.exp: s/source lib.t/load_lib lib.t/
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9108 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9082 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
use kadmin.local instead of kdb5_edit
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8958 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
OV_MERGE branches. This includes, but is not limited to, the new openvision
admin system, and major changes to gssapi to add functionality, and bring
the implementation in line with rfc1964. before committing, the
code was built and tested for netbsd and solaris.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970
|