| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
|
| |
get_hint_list.
kdc_util.c (validate_as_request): Remove preauthentication check; this
is handled in do_as_req.c
do_as_req.c (process_as_request): Pass e_data to prepare_as_error so
that the proper preauthentication hint list can be passed back to the
client.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6960 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
commands. This prevents the linker from searching the llibcew.lib
library for some externals which are already in ldllcew.lib. This is
what we want since we are building a DLL. Without the "/nod" option we
get a bunch of duplicate definitions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6959 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6958 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
LIBNAME makefile variable is defined in the main body of the Makefile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6957 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6956 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
fix the mutual authentication bug with beta 4, but this should help
forwarding credentials and should also help if someone actually
defines ENCRYPTION.
If user defines ENCRYPTION, telnetd has the nasty behavior of
encrypting one side of the conversation, without telling the user; in
particular, only server output is encrypted. Fixed by sending a do
encrypt if encryption defined; fix taken from Athena telnetd.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6955 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
fix the mutual authentication bug with beta 4, but this should help
forwarding credentials and should also help if someone actually
defines ENCRYPTION.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6954 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
keytab file to be overridden by an environment variable.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6953 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
(in particular those dealing with library paths)
NetBSD requires that the path be stored in the library and the executables.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6952 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6951 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6950 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
reruns configure, then they will execute the wrong test.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6949 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
the incomming data into the middle of the token - not back at the
start.
Now, can someone explain why under NetBSD, in one direction 400+ bytes
could be sent at one time, but in the reverse, 102 had to be broken down
into 100 + 2? Anyways, this fixes the NetBSD problem with the tests.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6948 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
is found in gssapi.exp for dealing with AIX...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6947 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
implementation.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6946 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6945 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
included by wconfig.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6944 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* ksu.1: Remove as was out of date.
* Makefile.in (DEFINES): Remove LOCAL_REALM definition.
* ksu.h: Remove local_realm from krb5_authorization.
* authorization.c (krb5_authorization): Remove old copied code
that is in krb5 library and is out of date. Use the
configurable aname to localname methods.
* main.c (main): Add krb5_secure_config_files so that users cannot
override system config files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6943 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6942 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
secondary_port, which are no longer used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6941 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_enctype and krb5_cksumtype, to fix some gcc -Wall flames.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6940 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
format.
do_as_req.c (process_as_req): Unify the logging and error packet
production, to make sure that both logging and an error packet is
returned for each error condition.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6939 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
information.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6938 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
main.c (initialize_realms): Massive revamp of how the network ports
are setup. The default port list for a realm is read from
[kdcdefaults]/kdc_ports from the kdc.conf file. For each realm, a
list of ports can be specified in [realms]/<realm>/kdc_ports.
extern.h (kdc_realm_t): Remove realm_pport and realm_sport, and added
realm_ports.
do_tgs_req.c (process_tgs_req):
do_as_req.c (process_as_req):
dispatch.c (dispatch): Pass the portnumber of the incoming request down
to process_as_req and process_tgs_req, instead of the boolean
"is_secondary".
kerberos_v4.c (kerb_get_principal, kerberos_v4): Fix gcc -Wall flames,
by fixing signed vs. unsigned types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6937 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
the "port" and "secondary_port" relations, and replaced them with the
"kdc_port" relation, which takes a list of ports.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6936 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
with ports, which is a char * list of all of the ports which should be
listed to for this realm.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6935 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_enctype and krb5_cksumtype, to fix some gcc -Wall flames.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6934 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6933 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
the man page. :-)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6932 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
strerror() is used in preference to sys_errlist().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6931 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6930 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
context, do not allow for environment variables to specify
configuration files.
Note: It is still possible to bypass the secure flag by directly calling
krb5_aprof_init which only krb5kdc does.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6929 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
will set flag and path to prevent user from overriding
configuration files with environment variables.
This is intended for those pesky suid root programs so that they cannot
break security as easily...
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6928 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* krb5.hin: Add krb5_secure_config_profile prototype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6927 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
as not all sources include adm.h for the necessary structures.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6926 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
to be used. This is stored in std_ks_tuple, and is used by cpw.c for
random keys and when a list of keysalts is not specified.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6925 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
in the DEFAULT_PROFILE_PATH change.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6924 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6923 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6922 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
ludicrous with NFS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6921 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
freeing it to protect later attempts.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6920 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
not eight, for practical/social reasons.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6919 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
on to it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6918 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
call it again. (Not that it can ever fail anyhow.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6917 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
if /etc/krb5.conf isn't found.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6916 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
unix, and DEFAULT_PROFILE_PATH.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6915 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
that has pathnames seperated by colons, and splits it into
file names for profile_init. No provision for quoting colons in
pathnames, but shells don't solve that either.
* prof_init.c (profile_init): handle multiple input files by
grabbing the first one that doesn't return ENOENT.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6914 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
Remove unused structure declaration.
I doubt anyone is using this code anymore, but I forgot to check it in
months ago.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6913 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6912 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
version 0.1 of the library. Pass the libcrypto and
libcom_err version number to Makefile
* Makefile.in (CRYPTO_VER): Get the proper libcrypto version number
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6911 dc483132-0cff-0310-8789-dd5450dbe970
|