summaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* 2000-4-13 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-04-131-0/+10
| | | | | | | | | | | | * ccdefault.c: Added Kerberos Login library support (with ifdefs to control whether or not it is on. Also added support to store a krb5_principal in the os_context along with the default ccache name (if known, this principal is the same as the last time we looked at the ccache. * ccdefname.c: Added support to store a krb5_principal in the os_context along with the default ccache name (if known, this principal is the same as the last time we looked at the ccache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12170 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-4-13 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-04-132-8/+20
| | | | | | | | * init_os_ctx.c: Added support to store a krb5_principal in the os_context along with the default ccache name (if known, this principal is the same as the last time we looked at the ccache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12169 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-4-13 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-04-131-0/+7
| | | | | | | | * ccdefname.c: Added support to store a krb5_principal in the os_context along with the default ccache name (if known, this principal is the same as the last time we looked at the ccache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12167 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-4-13 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-04-131-1/+62
| | | | | | | | | * ccdefault.c: Added Kerberos Login library support (with ifdefs to control whether or not it is on. Also added support to store a krb5_principal in the os_context along with the default ccache name (if known, this principal is the same as the last time we looked at the ccache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12166 dc483132-0cff-0310-8789-dd5450dbe970
* * vfy_increds.c (krb5_verify_init_creds): appdefault_boolean ->Tom Yu2000-04-082-1/+6
| | | | | | libdefault_boolean; it somehow got missed earlier. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12156 dc483132-0cff-0310-8789-dd5450dbe970
* * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix upTom Yu2000-04-082-5/+11
| | | | | | | | wrap_size_limit() to deal with integrity wrap tokens properly. The rfc1964 mech always pads and confounds regardless of whether confidentiality is requested. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12155 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-04-07 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-04-073-4/+14
| | | | | | | | | | * gic_pwd.c (krb5_get_init_creds_keytab), gic_pwd.c (krb5_get_init_creds_password) when determining whether or not to retry with a "master kdc" do not retry if the return value from the first attempt was KRB5_REALM_CANT_RESOLV. Also, do not overwrite the return code if the return value from the access to the "master kdc" was KRB5_REALM_CANT_RESOLV. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12154 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-04-07 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-04-072-4/+12
| | | | | | | | | | * stdcc_util.c (copyCCDataArrayToK5, copyCCDataArrayToK5): * stdcc_util.c (dupCCtoK5, dupK5toCC): memory was being allocated as (sizeof(foo) * count + 1) instead of (sizeof(foo) * (count + 1)) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12153 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-04-03 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-04-042-4/+12
| | | | | | | | | | * stdcc_util.c (copyCCDataArrayToK5, copyCCDataArrayToK5): * stdcc_util.c (dupCCtoK5, dupK5toCC): Changed all references to the type UInt32 to unsigned int since UInt32 is not a standard type on Unix or Win32 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12149 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-03-24 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-03-242-115/+189
| | | | | | | | | | | * stdcc_util.c (copyCCDataArrayToK5, copyCCDataArrayToK5): Modified to copy authdata as well... this code may have bugs since I couldn't get a good case where authdata != NULL * stdcc_util.c (dupCCtoK5, dupK5toCC): Added code to store times in localtime, not in kdc time. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12139 dc483132-0cff-0310-8789-dd5450dbe970
* jaltman@columbia.edu Mar 24, 2000:Jeffrey Altman2000-03-248-171/+93
| | | | | | | | | | | | | | | | | | | | | | | | | | In 1.0.6, the code was altered to provide a fallback mechanism to try the "master" kdc's in case the normal kdc's did not have the most up to date password information. The original implementation had significant conflicts with the use of DNS SRV records. In addition, it often performed a lot of unneeded work. The new code still performs a fallback to the "master" kdc but only does the computation of the "master kdc list" if we are in fact going to attempt to use a master. For DNS SRV we introduce a new _kerberos-master.<proto>.<REALM> record to list the master kdc's and the priorities to be used when contacting a master. This allows for a multi-tiered implementation. --- The other change is local to krb/get_in_tkt.c. In preparation for adding public krb5_appdefault_boolean and krb5_appdefault_string functions, the static functions by that name in get_in_tkt.c are renamed to krb5_libdefault_xxxxx since they currently access the [libdefault] section of the code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12137 dc483132-0cff-0310-8789-dd5450dbe970
* Added krb5_free_default_realmMiro Jurisic2000-03-202-1/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12133 dc483132-0cff-0310-8789-dd5450dbe970
* * cr_tkt.c (krb_cr_tkt_int): Add static prototype.Ezra Peisach2000-03-163-0/+18
| | | | | | * decomp_tkt.c: (dcmp_tkt_int): Add static prototype git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12125 dc483132-0cff-0310-8789-dd5450dbe970
* Matt Crawford's kadm acl fixes & enhancementsKen Raeburn2000-03-163-66/+364
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12121 dc483132-0cff-0310-8789-dd5450dbe970
* Get rid of unused variableEzra Peisach2000-03-162-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12120 dc483132-0cff-0310-8789-dd5450dbe970
* Add krb5_get_prompt_types() functionalityDanilo Almeida2000-03-168-2/+57
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12118 dc483132-0cff-0310-8789-dd5450dbe970
* * stdcc.c (krb5_stdcc_destroy): Do not mask KRB5_FCC_NOFILE errorDanilo Almeida2000-03-162-6/+15
| | | | | | on destroy. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12117 dc483132-0cff-0310-8789-dd5450dbe970
* volatile fixesKen Raeburn2000-03-152-2/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12113 dc483132-0cff-0310-8789-dd5450dbe970
* * init_os_ctx.c (os_get_default_config_files): Remove unused variableKen Raeburn2000-03-142-1/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12112 dc483132-0cff-0310-8789-dd5450dbe970
* * def_realm.c: Include netinet/in.h if availableKen Raeburn2000-03-142-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12111 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for gethostbyname2Ken Raeburn2000-03-142-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12110 dc483132-0cff-0310-8789-dd5450dbe970
* Fix one of the bugs discovered at Connectathon: etype specified in preauthKen Raeburn2000-03-133-5/+68
| | | | | | data is ignored under get_in_tkt interface. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12104 dc483132-0cff-0310-8789-dd5450dbe970
* Change function prototypes to match the entries in krb5.hin - specificallyEzra Peisach2000-03-1211-14/+26
| | | | | | use krb5_const instead of const. Under ultrix they are not the same. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12101 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_xdr.c (krb5_dbe_lookup_mod_princ_data): In casting argumentEzra Peisach2000-03-122-1/+6
| | | | | | | | to krb5_parse_name, use krb5_const not const. Under ultrix, krb5_const is not the same as const git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12100 dc483132-0cff-0310-8789-dd5450dbe970
* get_in_tkt.c (krb5_get_init_creds): Always initialize local_as_reply to ↵Miro Jurisic2000-03-102-0/+7
| | | | | | avoid returning garbage on error returns git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12097 dc483132-0cff-0310-8789-dd5450dbe970
* Remove keepold argument from create_principal_3, since it is ratherTom Yu2000-02-2710-12/+32
| | | | | | | useless. Update library version numbers, xdr functions, etc. accordingly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12082 dc483132-0cff-0310-8789-dd5450dbe970
* * server_acl.c (acl_get_line): Patch from Matt Crawford to permit line ↵Ken Raeburn2000-02-262-13/+40
| | | | | | continuation by ending a line with a backslash git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12081 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (krb5_do_preauth): Check paorder[h] not h for PA_REAL. Fix ↵Ken Raeburn2000-02-262-1/+6
| | | | | | from Matt Crawford git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12077 dc483132-0cff-0310-8789-dd5450dbe970
* fix email addrKen Raeburn2000-02-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12076 dc483132-0cff-0310-8789-dd5450dbe970
* forgot room for null pointer at end of local addr arrayKen Raeburn2000-02-262-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12075 dc483132-0cff-0310-8789-dd5450dbe970
* Separate interface address processing from Kerberos-related functions.Ken Raeburn2000-02-252-159/+238
| | | | | | | | | | * localaddr.c (foreach_localaddr): Broken out from old krb5_os_localaddr. Iterates over all active interface addresses, invoking callback functions; knows nothing about Kerberos. (count_addrs, allocate, add_addr): New callback functions. (krb5_os_localaddr): Use the above. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12069 dc483132-0cff-0310-8789-dd5450dbe970
* * t_verify.c: Add "const" to casts in calls to mit_des_cbc_encrypt()Ezra Peisach2000-02-253-5/+12
| | | | | | | * destest.c: Declare zeroblock as krb5_octet * instead of char * as argument to mit_des_cbc_encrypt. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12068 dc483132-0cff-0310-8789-dd5450dbe970
* fix for vpath and du4.0 makeKen Raeburn2000-02-224-0/+16
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12063 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (clean-unix): Add clean-libobjsEzra Peisach2000-02-224-2/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12062 dc483132-0cff-0310-8789-dd5450dbe970
* from Bear Giles:Ken Raeburn2000-02-212-2/+5
| | | | | | | * fetch_mkey.c (krb5_db_fetch_mkey): Don't attempt to override type of key read from stash file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12061 dc483132-0cff-0310-8789-dd5450dbe970
* from Bear Giles:Ken Raeburn2000-02-212-13/+22
| | | | | | | | * alt_prof.c (krb5_read_realm_params): Permit realm supported enctypes to be unspecified, letting the KDC produce defaults. Don't look up enctypes at all if an error is to be returned. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12060 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_rpc_xdr.c (xdr_chpass3_arg):Tom Yu2000-02-192-2/+7
| | | | | | (xdr_chrand3_arg): Fix up calls to xdr_array. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12055 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_cpw.c (krb5_dbe_crk):Tom Yu2000-02-192-0/+13
| | | | | | (krb5_dbe_cpw): Fix to actually save old keys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12054 dc483132-0cff-0310-8789-dd5450dbe970
* * svc_auth_gssapi.c (_svcauth_gssapi): Don't explicitly freeTom Yu2000-02-189-9/+84
| | | | | | | | | | | | | | | | | | | | | | | | | | | call_arg on error, since svc_getargs should do that now. * svc_udp.c (svcudp_getargs): Free args on xdr decode error to avoid leaks. * svc_tcp.c (svctcp_getargs): Free args on xdr decode error to avoid leaks. * svc_raw.c (svcraw_getargs): Free args on xdr decode error to avoid leaks. * auth_gssapi.c (auth_gssapi_create): Don't explicitly free call_res anymore, since clnt_call should deal now. * clnt_udp.c (clntudp_call): Free stuff on error from xdr_replymsg() to prevent leaking. * clnt_tcp.c (clnttcp_call): Free stuff on error from xdr_replymsg() to avoid leaking. * clnt_raw.c (clntraw_call): Free stuff on error from xdr_replymsg() to avoid leaking. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12052 dc483132-0cff-0310-8789-dd5450dbe970
* * auth_gssapi.c (auth_gssapi_create): Free call_res becauseTom Yu2000-02-174-37/+43
| | | | | | | | | | | | | | | | | | | | | xdr_authgssapi_init_res can potentially allocate memory. Perhaps clnt_call should really deal with this, though. It is not at all clear whether clnt_call or svc_getargs should actually end up freeing allocated memory themselves. * svc_auth_gssapi.c (_svcauth_gssapi): Call gssrpc_xdr_free() if xdr_authgssapi_creds() or xdr_authgssapi_init_arg() fails. * auth_gssapi_misc.c (xdr_authgssapi_creds): (xdr_authgssapi_init_arg): (xdr_authgssapi_init_res): Revert prior change. The caller should be the one dealing. Additionally, it was probably wrong to unconditionally free the object regardless of whether the mode is XDR_DECODE. (auth_gssapi_unwrap_data): Use temp_xdrs rather than in_xdrs to force XDR_FREE operation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12051 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth2.c (pa_sam): In send-encrypted-sad mode, check for magic salt lengthKen Raeburn2000-02-162-7/+51
| | | | | | | | and generate a salt from the principal name if found; use the password and salt to generate a key. Provide timestamp if nonce is zero, regardless of preauth mode. (Patch from Chas Williams.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12045 dc483132-0cff-0310-8789-dd5450dbe970
* * localaddr.c (krb5_os_localaddr): Dynamically grow buffer used for SIOCGIFCONFKen Raeburn2000-02-162-10/+69
| | | | | | | until it appears to have been big enough. Dynamically grow internal address pointer array as needed. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12044 dc483132-0cff-0310-8789-dd5450dbe970
* * server.c: Add code to set a signal handler for SIGHUP and a fewTom Yu2000-02-153-0/+29
| | | | | | | | others so that purify will actually generate memory leak reports. * configure.in: Add CHECK_SIGNALS. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12042 dc483132-0cff-0310-8789-dd5450dbe970
* * svc.c (xprt_register): Zero out xports after allocatingTom Yu2000-02-153-16/+51
| | | | | | | | | | * auth_gssapi_misc.c (xdr_authgssapi_creds): (xdr_authgssapi_init_arg): (xdr_authgssapi_init_res): (auth_gssapi_unwrap_data): If xdr_gss_buf or xdr_bytes fails, call again with XDR_FREE set so that allocated memory doesn't leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12041 dc483132-0cff-0310-8789-dd5450dbe970
* Add client-side stubs and functions with additional capabilities toTom Yu2000-02-1410-15/+501
| | | | | | | | | take key_salt_tuples and optionally keep old keys around. Add server-side functionality for setkey with key_salt_tuple and "keepold" functionality. Update rpc stubs and xdr functions/headers appropriately. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12040 dc483132-0cff-0310-8789-dd5450dbe970
* Added "Kerberos Preferences" as valid config file on Mac OS. Others will be ↵Marshall Vale2000-02-111-11/+17
| | | | | | removed at a later date git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12037 dc483132-0cff-0310-8789-dd5450dbe970
* * init_os_ctx.c: Added "Kerberos Preferences" as valid config file on Mac OSMarshall Vale2000-02-111-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12036 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed lxs' fix: strlen (x) + 1 instead of strlen (x+1)Miro Jurisic2000-02-112-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12035 dc483132-0cff-0310-8789-dd5450dbe970
* changelog updated for stdcc_util.c changeAlexandra Ellwood2000-02-101-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12033 dc483132-0cff-0310-8789-dd5450dbe970
* Added +1 to strlens so that null terminator will fit in the buffer ;-PAlexandra Ellwood2000-02-101-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12032 dc483132-0cff-0310-8789-dd5450dbe970