| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5499 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* mk_faddr.c (krb5_mk_fulladdr()): Makes a full address from
a struct sockaddr_in.
* genaddrs.c (krb5_auth_con_genaddrs()) : Generate a full address
from the active file descriptor and place it in the
auth_context for the calls mk_safe(), mk_priv(), mk_safe(),
rd_cred(), rd_priv(), and rd_safe().
* gen_rname.c (krb5_gen_replay_name()) : Fixed to take any type of
krb5_address and generate a rcache name.
* os-proto.h (krb5_make_full_ipaddr()) : Removed prototype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5490 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* auth_con.c (krb5_auth_con_setaddrs()) : Fixed so it allocates
space and copies addresses, not just pointer.
* mk_cred.c: Completely rewritten from sources donated by asriniva.
* rd_cred.c: Completely rewritten from sources donated by asriniva.
* mk_priv.c (krb5_mk_priv()), mk_safe.c (krb5_mk_safe()),
rd_priv.c (krb5_rd_priv()), and rd_safe (krb5_rd_safe()) :
Try using a subkey before using the session key for encryption.
* recvauth.c (krb5_recvauth()): Don't close the rcache on success.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5489 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5488 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5478 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
solaris.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5477 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5472 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* get_creds.c: Fix comments describing operation
* gc_frm_kdc.c: Fix comments describing operation
* copy_cksum.c (krb5_copy_checksum): Fix comment in file
* copy_addrs.c (krb5_append_addresses): ifdef out unused
krb5_append_addresses function. (no API or prototype
existed).
* copy_data.c (krb5_copy_data): Initialize magic number
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5464 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_os_init_context instead of random stack values.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5463 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(i.e. when the profile file is missing)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5462 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5456 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
t_walk_rtree.c - was not checking number of arguments properly
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5455 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5453 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
test the standard configuration krb5 routines.
osconfig.c: Don't define krb5_kdc_udp_portname and
krb5_kdc_sec_portname any more. There's no real point...
hst_realm.c (krb5_get_krbhst): Strip off the trailing dot from
the hostname if present.
locate_kdc.c (krb5_locate_kdc): Use the profile code to get the
list of Kerberos servers (plus port numbers) for a
particular realm from [realms]/<realm>/kdc
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5442 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5440 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
get the default realm from [libdefaults]/default_realm.
get_krbhst.c (krb5_get_krbhst): Use the profile code to get the
list of Kerberos servers for a particualar realm from
[realms]/<realm>/kdc
realm_dom.c (krb5_get_realm_domain): Use the profile code to
get the default domain postfix for a realm (used only to
convert V4 -> V5 principals) from
[realms]/<realm>/default_domain
hst_realm.c (krb5_get_host_realm): Use the profile code to get
the default realm given a particular host from
[domain_realm]/<host|domain>
init_os_ctx.c (krb5_os_init_context): When the OS context is
initialized, also initialize the profile file. This loads
in the /etc/krb5.conf file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5438 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5437 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
authentication. Unfortunately, this breaks proxy tickets (and
renewable tickets continue to be broken if BACKWARD_BITMASK_COMPAT is
defined; nothing can be done by this.) Sites should only define
BACKWARD_BITMASK_COMPAT if they have an installed base of broken
implementations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5431 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(the definition was missing entirely then)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5424 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
structures around, instead of using structure assignments. (Which
aren't guaranteed to work on some broken compilers.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5423 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5422 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
it doesn't #include krbasn1.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5409 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5407 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to create the service principal from the service and
hostname pair. This allows for the host cannoncialization
to work correctly.
mk_req_ext.c (krb5_mk_req_extended): Revamp checksum handling
code so that no checksum is performed in in_data is NULL,
and the special case handing of cksumtype == 0x8003 for
the GSSAPI library is handled correctly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5406 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5405 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SIZEOF_LONG, so we don't need to depend on getting this
information from include/krb5/autoconf.h
gssapi.h: Removed dependence on krb5 include files.
gssapiP_generic.h: We need to include k5-config in order to get
Windows specific hackery. Somewhat of a wart, but this is a
gssapi internal header file, so the rest of the world doesn't
have to see this.
util_token.c: Define VALID_INT, instead of relying on this being
defined by krb5.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5388 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5387 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
accept bit strings which are less 32 bits long.
(RFC-1510 makes no guarantee that the length of the bit
string must be 32 bits long; the old code required that
the length of the bit string must be exactly 32 bits.)
Flip the bits with respect to a 32-bit boundary, since
that's what the old ASN.1 glue code did. (The values in
fieldbits.h are encoded backwards, for no good reason.)
If BACKWARDS_BITMASK_COMPAT is defined, then only flip the
bits if the high 16 bits are clear and there are some bits set
in the low 16 bits. This preserves interoperabilty with
the old beta 4 distribution, which sent the bit string
without flipping them around.
asn1_k_encode.c (asn1_encode_krb5_flags): Flip the bits with
respect to a 32-bit boundary, since that's what the
old ASN.1 glue code did. (The values in fieldbits.h
are encoded backwards, for no good reason.)
krb_asn1.h: #define BACKWARDS_BITMASK_COMPAT. Add extern
declaration for asn1_swbits, which is needed for the
bit reversing code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5380 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
variable removed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5378 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5377 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
USE_DBM_LNAME isn't defined.
hst_realm.c (krb5_get_host_realm): Eliminate memory leak in the
unlikely case that gethostname fails.
If the krb.realms file isn't available, use the default
realm of the host.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5367 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* copy_princ.c (krb5_copy_principal): Fix bug where
krb5_copy_principal can fail if it is asked to copy a
principal with a zero-length component on a system where
malloc(0) returns null.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5366 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5362 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
releases....
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5359 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
into Makefile.in so that the Windows port can pick up the
line (since it doesn't use configure). Instead, change
the name of target which causes the subdirectories to be
built under Unix, and make that a dependency for all-unix.
Gross, but this should fix things for both DOS and Windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5356 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5355 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
o removed INTERFACE from non-api functions
o add FAR to pointers visible to the world
o made the tests for __STDC__ also check for _WINDOWS
o creates GSSAPI.DLL & GSSAPI.LIB as per spec.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5354 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
get_lenfield_body, asn1_decode_ticket): Use the taglength to
determine whether or not the indefinite encoding was used, and
if so skip over the termination flag bytes in the ASN.1
stream.
asn1buf.c (asn1buf_imbed, asn1buf_remains): Make changes to allow for
indefinite encodings. asn1buf_remains() is now only used for
decoding structures and arrays (i.e., asn.1 constructs which
terminate indefinite encodings with two zero octets.
[ Note these fixes to support indefinite encoding aren't
terribly clean; some invalid encodings may be accepted when they
should not be. This should be looked at in more detail later.]
asn1_get.c (asn1_get_tag): Inline original asn1buf_remains() code,
since asn1_get_tag doesn't use asn1buf_remains in the context of
a structure or an array.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5353 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5345 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(note, these changes haven't yet been tested on the PC which were
failing so no guarantee that they fully work):
a) GUI to cns improved so that you don't need a resize for the widgets to
align properly, and so the interaction of typing: "username cr password
cr" is all you need to do to get you a ticket.
b) cns uses krb5_us_gettimeofday instead of krb5_timeofday because the
former is more accurate and handles timezones. Probably should make
the latter just call the former.
c) Added SOCKET_INIT and SOCKET_DESTROY around krb5_sendto_kdc to prevent
some tcp/ip stacks from locking up after 8 uses.
d) Added a new error message and better error handling to give more
precision as to why one PC was getting the error 'Cannot find KDC
for requested realm.'
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5342 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
occurs after the "make all" subdirectories rule.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5333 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5332 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
cache after we're done expunging it.
* rc_io.c (krb5_rc_io_move): Make duplicate copies of the filename
and the file descriptor (via malloc/strcpy and dup), so
that the old rc_io object can be cleanly closed without
affecting the new rc_io object.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5327 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* hst_realm.c (krb5_get_host_realm): Don't indent #ifdef's!
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5326 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
VPATH to have separate build directories. (See comments in the
Makefile.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5324 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5323 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
leak.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5317 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5315 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
FIXME, this needs to find the Preferences folder and use that.
FIXME, shouldn't be conditioned on HAVE_MACSOCK_H.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5308 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
windows ini files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5307 dc483132-0cff-0310-8789-dd5450dbe970
|