| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* src/lib/gssapi/mechglue/Makefile.in (SRCS, STLIBOBJS): Delete
g_userok, gssd_pname_to_uid.
* src/lib/gssapi/mechglue/mechglue.h: Delete gssd_pname_to_uid,
gss_initialize.
* src/lib/gssapi/mechglue/mglueP.h: Delete gssint_userok,
gssd_pname_to_uid, gssint_get_mechanism_ext,
gss_acquire_cred_with_password_sfct, gss_mechanism_ext.
* src/lib/gssapi/g_userok.c:
* src/lib/gssapi/g_indicate_mechs.c:
* src/lib/gssapi/gen_oids.c:
* src/lib/gssapi/gssd_pname_to_uid: Delete.
* src/lib/gssapi/mechglue/g_initialize.c: Delete
gssint_get_mechanism_ext.
ticket: new
target_version: 1.5
tags: pullup
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18187 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* src/lib/gssapi/libgssapi_krb5.exports: Cease export of krb5
mechanism entry points which were once equivalent to GSS-API entry
points. These were never public interfaces, and calling them
directly now can cause problems. Also, cease export of some
other internal symbols.
ticket: new
target_version: 1.5
tags: pullup
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18185 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* src/lib/gssapi/Makefile.in (SUBDIROBJLISTS): Add missing spnego
directory.
ticket: new
target_version: 1.5
tags: pullup
component: krb5-build
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18176 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
ticket: 3276
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18165 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
krb5_gss_register_acceptor_identity is a gss krb5 extension that is
part of the public ABI. It does not have a gss_krb5_* name due to
historical reasons. Instead there is a gss_krb5_register_acceptor_identity
macro that uses this export.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18163 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| | |
it has been implemented.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18162 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| | |
few others) to cast the character values to unsigned char.
ticket: 3445
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18156 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
gss_inquire_mechs_for_name.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18143 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
krb5_gss_release_oid() for now.
* src/lib/gssapi/krb5/rel_oid.c (krb5_gss_release_oid): Restore
for now.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18142 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| | |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18141 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| | |
* src/lib/gssapi/spnego/Makefile.in (mydir): Point to correct
locations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18140 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Windows build.
ticket: 1434
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18138 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Use ANSI C function definitions instead of old K&R style.
Rename local variable "res" to "clnt_res".
Cast clnt_call arguments to xdrproc_t and caddr_t.
This brings the code more in line with what current (RHEL) rpcgen would do.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18134 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
mechglue and SPNEGO implementations. Additional changes outside of
src/lib/gssapi:
* src/configure.in: Add lib/gssapi/mechglue and lib/gssapi/spnego
to list of directories to output Makefile in.
* src/lib/rpc/unit-test/rpc_test.0/expire.exp (expired): Update
regexp for mechglue.
* src/tests/dejagnu/krb-standalone/v4gssftp.exp (v4ftp_test):
Update "Miscellaneous failure" regexp for mechglue.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18131 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| | |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18130 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
for the password rather than passing NULL along to each string to key
function causing each to prompt independently. Modify krb_get_in_pw_tkt
to call des_read_pw_string directly and then pass the resulting password
into each string to key function as needed. Add a prototype of
des_read_pw_string to krb4int.h since it's an exported function of
libdes425 but isn't prototyped in des.h.
Ticket: 2648
Version_Reported: 1.3.3
Component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18129 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Based on a patch from Rainer Weikusat.
Ticket: 3549
Version_Reported: 1.4.3
Component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18120 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
by RFC 2744 section 5.19. The krb5 code did this but the generic code
didn't, causing a double-free in OpenSSH.
Ticket: 3086
Version_Reported: 1.3.6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18114 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
assume krb5 using similar logic as other library functions rather than
failing. Patch provided by Daniel Kahn Gillmor.
Ticket: 3467
Version_Reported: 1.4.3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18113 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
initial allocation of zero elements, it can be deleted, along with
conf_tgs_ktypes_count and the associated code...
ticket: 2786
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18105 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
ticket: 3233
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18104 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
On Mac, define this to accept UNKNOWNUID as well as 0.
ticket: 3233
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18103 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
one KRB5_RC_* error code, and a few other places.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18102 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Weikusat.
ticket: 3790
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18093 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
the lower-level error message into the message displayed by kinit, which has
already been changed to use krb5_get_error_message. For example, "kinit(v5):
Credentials cache I/O operation failed (No space left on device) when
initializing cache".
ticket: 3438
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18091 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| | |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18090 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| | |
where the mutex would've been initialized. Reported by Shawn Emery.
ticket: 3332
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18089 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
ticket: 3791
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18088 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
match the prototype in the headers.
ticket: new
target-version: 1.5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18084 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
read 32-bit and 64-bit ticket files on 32-bit and 64-bit systems.
Previously the ticket file format depended on the ABI. Significant
backward compatibility is maintained; the patch works by writing
alignment records that are valid (but meaningless) ticket file entries
but that allow systems to get realigned. As a consequence an old
library will see additional meaningless ticket file entries when it
reads a ticket file produced by the new code. These entries are
harmless and will be ignored.
ticket: 1288
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18076 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
In the kdc and lib/kadm5/logger.c, krb5_get_error_message needs to be paired
with krb5_free_error_message to release returned memory.
Essentially a memory leak was introduced for every principal requested
that did not exist in the database.
Identified by valgrind on the kdc - running kdc_hammer and specifying
more principals than are present in the db.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18072 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
still leaves out appl and tests, and static library and plugin directories.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18068 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| | |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18046 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| | |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18042 dc483132-0cff-0310-8789-dd5450dbe970
|
| | |
| |
| |
| |
| |
| | |
ticket: 3784
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18037 dc483132-0cff-0310-8789-dd5450dbe970
|
| |/
|
|
|
|
|
|
|
|
|
| |
Create include/krb5 directory, and put krb5.h and (k5-)locate.h there in the
build tree. Stub krb5.h in main include directory just includes krb5/krb5.h.
Update dependencies, and add dependencies in a couple Makefiles that didn't
have them.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18030 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
makefiles for util/et, util/profile, lib/kdb, clients and those clients
subdirectories built on UNIX, rather than running configure there.
Deleted configure.in scripts for those directories, and changed
Makefile.in definitions of thisconfigdir and mydir.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18018 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
krb5_gss_init_context to calls to krb5_gss_init_context.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18015 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18011 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18010 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
envvar arguments with a flag indicating whether KDC config data should
be used. Prototype and all callers changed.
(krb5_read_realm_params): Delete config file and env var arguments.
Prototype and all callers changed.
* lib/kadm5/admin.h (KADM5_CONFIG_PROFILE): Commented out.
(struct _kadm5_config_params): Delete field PROFILE.
* lib/kadm5/alt_prof.c (kadm5_get_config_params): Don't look at it.
(kadm5_free_config_params): Don't free it.
* kadmin/testing/tcl/util.t: Remove profile data from config params.
* kadmin/testing/util/tcl_kadm5.c (config_mask_flags): Deleted
KADM5_CONFIG_PROFILE entry.
(parse_config_params): Changed to require 20 parameters instead of 21.
* lib/kadm5/unit-test/api.2/init-v2.exp (test100): Deleted.
* lib/kadm5/alt_prof.c (krb5_aprof_init): Fetch the list of config files from
the library and add the caller-indicated config file to the front of the list.
* lib/kadm5/clnt/client_init.c (kadm5_init_krb5_context): New function.
* lib/kadm5/clnt/libkadm5clnt.exports: Export it.
* lib/kadm5/srv/server_init.c: Include k5-int.h, osconf.h, gssapiP_krb5.h.
(kadm5_init_krb5_context): New function.
* lib/kadm5/srv/libkadm5srv.exports: Export it.
* lib/kadm5/srv/Makefile.in (LOCAL_INCLUDES): Add gssapi directories.
* lib/kadm5/admin.h (kadm5_init_krb5_context): Declare it.
* kadmin/dbutil/kdb5_destroy.c (kdb5_destroy): Call kadm5_init_krb5_context
instead of krb5_init_context.
* kadmin/dbutil/dump.c (load_db): Likewise.
* kadmin/dbutil/kdb5_util.c (main): Likewise.
* kadmin/dbutil/kadm5_create.c (kadm5_create): Likewise.
* kadmin/dbutil/kdb5_stash.c (kdb5_stash): Likewise.
* kadmin/dbutil/loadv4.c (load_v4db): Likewise.
* kadmin/server/ovsec_kadmd.c (main): Likewise.
* kadmin/cli/kadmin.c (kadmin_startup): Likewise.
* kadmin/testing/util/tcl_ovsec_kadm.c (tcl_ovsec_kadm_init): Likewise.
* lib/kadm5/unit-test/lock-test.c (main): Likewise.
* lib/kadm5/unit-test/handle-test.c (main): Likewise.
* lib/kadm5/unit-test/randkey-test.c (main): Likewise.
* lib/kadm5/unit-test/setkey-test.c (main): Likewise.
* lib/kadm5/chpass_util.c (_kadm5_chpass_principal_util): Likewise.
* lib/kadm5/kadm_rpc_xdr.c (xdr_krb5_principal): Likewise.
* lib/krb5/os/init_os_ctx.c (add_kdc_config_file): New function.
(os_init_paths): Add new argument KDC; call add_kdc_config_file if true.
* lib/krb5/krb/init_ctx.c (krb5int_init_context_kdc): New function.
(init_common): Add new argument KDC, passed to krb5_os_init_context.
* lib/krb5/libkrb5.exports: Export krb5int_init_context_kdc.
* k5-int.h (krb5_os_init_context): Update decl.
* lib/kadm5/srv/server_init.c (kadm5_init): Call krb5int_init_context_kdc.
* krb524/krb524d.c (main): Likewise.
* lib/kadm5/unit-test/api.2/init-v2.exp: Don't run test 154 for error for
$KRB5_KDC_PROFILE file not present.
* lib/krb5/os/init_os_ctx.c (os_get_default_config_files): Rewrite KLL test so
as not to confuse Emacs indentation support.
* lib/gssapi/krb5/init_sec_context.c (kg_kdc_flag_mutex, kdc_flag): New
variables.
(krb5_gss_init_context, krb5_gss_use_kdc_context): New functions.
* lib/gssapi/krb5/gssapiP_krb5.h (kg_kdc_flag_mutex): Declare.
(krb5_gss_init_context, krb5_gss_use_kdc_context): Declare.
(krb5_init_context): Define as macro to invoke krb5_gss_init_context for now.
* lib/gssapi/gss_libinit.c (gssint_lib_init): Initialize the mutex.
(gssint_lib_fini): Destroy it.
* lib/gssapi/libgssapi_krb5.exports: Export krb5_gss_use_kdc_context.
* lib/kadm5/srv/server_init.c (kadm5_init): Don't complain if the config files
specify an admin server, since we now look at krb5.conf as well.
* lib/kadm5/unit-test/api.2/init-v2.exp: Delete test test114 for bad server
params.
* plugins/kdb/db2/adb_openclose.c (osa_adb_init_db): Use
krb5int_init_context_kdc instead of krb5_init_context.
* kdc/rtest.c (main): Likewise.
* kdc/fakeka.c (main): Likewise.
* kdc/main.c (main, init_realm): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18009 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18005 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
UNIX.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18004 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
vfprintf.c, vsprintf.c: Remove files we don't compile anywhere.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18003 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18002 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
krb5_verify_init_creds() and rd_and_store_for_creds() to use the
API properly (possible now that it's been fixed).
ticket: 3746
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17997 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
provided.
ticket: 3714
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17988 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
Change internal token handling and oid handling functions to take a
const style gss_OID. In the krb5 dir remove casting.
This is the start of fixes in this arena.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17987 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
at declaration - only constants be used. [filebases]. Code was introduced with
17975 revision.
ticket: 3716
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17986 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Need to export "kadm5_set_use_password_server" because it is used by
krb5kdc when USE_PASSWORD_SERVER is defined. Since the Mac builds this
way we need it in the export list. Unfortunately export lists don't get
preprocessed. Note that I only added this one function. The rest of the
password server functionality is still conditionalized around
USE_PASSWORD_SERVER.
Hopefully we can rip all this code out when Apple starts using the db plugin
interface for their password server integration.
ticket: new
target_version: 1.5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17977 dc483132-0cff-0310-8789-dd5450dbe970
|