summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Back out change to libupdate.sh.Ezra Peisach1996-05-122-6/+1
| | | | | | | | The problem is that for directories containing multiple subdirs, the current procedure is to do a foreach and invoke libupdate --force for each one. This is broken as it caused the library to be removed each time. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8012 dc483132-0cff-0310-8789-dd5450dbe970
* When invoked with --force, do not use variable before being setEzra Peisach1996-05-112-1/+6
| | | | | | NetBSD complained about trying to use the command "rm -f" git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7980 dc483132-0cff-0310-8789-dd5450dbe970
* Copy sizeof(mit_des_cblock), not sizeof(key) so that we are getting theRichard Basch1996-05-112-1/+6
| | | | | | full DES key. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7979 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Need to include sys/types.h before regexp.h in test toEzra Peisach1996-05-112-0/+8
| | | | | | | | see if regcomp works. NetBSD required this so that size_t is defined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7978 dc483132-0cff-0310-8789-dd5450dbe970
* removed des3-cbc-md5 supportRichard Basch1996-05-102-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7977 dc483132-0cff-0310-8789-dd5450dbe970
* * shs.c (longReverse): Remove extraneous \.Ezra Peisach1996-05-102-3/+8
| | | | | | (expand): Start #define in first column. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7976 dc483132-0cff-0310-8789-dd5450dbe970
* added des3_raw.c and sha..Richard Basch1996-05-101-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7975 dc483132-0cff-0310-8789-dd5450dbe970
* replaced des3_md5.c with des3_sha.cRichard Basch1996-05-101-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7974 dc483132-0cff-0310-8789-dd5450dbe970
* removed des3-md5 support (replaced with des3-sha)Richard Basch1996-05-102-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7973 dc483132-0cff-0310-8789-dd5450dbe970
* replaced des3-md5 with des3-shaRichard Basch1996-05-103-2/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7972 dc483132-0cff-0310-8789-dd5450dbe970
* Removed des3-md5 supportRichard Basch1996-05-102-4/+14
| | | | | | Added support for sha cksum types and des3-sha. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7971 dc483132-0cff-0310-8789-dd5450dbe970
* Replaced des3-md5 with des3-sha (also added sha cksumtype)Richard Basch1996-05-103-5/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7970 dc483132-0cff-0310-8789-dd5450dbe970
* Obsolete file (replaced des3-md5 with des3-sha)Richard Basch1996-05-101-173/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7969 dc483132-0cff-0310-8789-dd5450dbe970
* Replaced des3-md5 with des3-shaRichard Basch1996-05-104-19/+221
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7968 dc483132-0cff-0310-8789-dd5450dbe970
* Replace des3-md5 with des3-shaRichard Basch1996-05-105-4/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7967 dc483132-0cff-0310-8789-dd5450dbe970
* NIST-SHA supportRichard Basch1996-05-1010-0/+890
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7966 dc483132-0cff-0310-8789-dd5450dbe970
* Remove unused fileTheodore Tso1996-05-091-30/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7956 dc483132-0cff-0310-8789-dd5450dbe970
* Better handling of the principal max_life..Richard Basch1996-05-092-8/+28
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7952 dc483132-0cff-0310-8789-dd5450dbe970
* krlogind.c krshd.c:Richard Basch1996-05-094-1/+63
| | | | | | | | | Use the default service principal as the basis for the rcache name. login.c: SVR4 systems typically do not do mail/motd checks in login; they do it in the profiles (/etc/profile). Follow that convention... git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7951 dc483132-0cff-0310-8789-dd5450dbe970
* Use the default service principal (don't assume it is "host") as theRichard Basch1996-05-092-1/+6
| | | | | | basis for the replay cache name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7950 dc483132-0cff-0310-8789-dd5450dbe970
* Don't skip keytab entries with kvno=0Richard Basch1996-05-092-6/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7949 dc483132-0cff-0310-8789-dd5450dbe970
* convert has been removedEzra Peisach1996-05-081-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7946 dc483132-0cff-0310-8789-dd5450dbe970
* Removing unbuilt directory from source tree. The functionality wasEzra Peisach1996-05-087-1251/+0
| | | | | | merged with kdb5_edit August 1995. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7944 dc483132-0cff-0310-8789-dd5450dbe970
* des425 needs to be compiled after krb5 as des425 depends on krb5_free_keyblockEzra Peisach1996-05-082-1/+5
| | | | | | Turns out that link order in aclocal.m4 already assumed this. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7924 dc483132-0cff-0310-8789-dd5450dbe970
* Handle compiling with BERK_DB without dbm available. (Linux whenEzra Peisach1996-05-072-0/+13
| | | | | | the option --with-kdb-db=db) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7923 dc483132-0cff-0310-8789-dd5450dbe970
* Don't do more than the necessary encryptions for a single cblock lengthRichard Basch1996-05-071-4/+5
| | | | | | | random key. Only the larger cblocks need a second wrap-around cbc encrypt to prevent leaking a codebook. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7922 dc483132-0cff-0310-8789-dd5450dbe970
* We are providing 3des routines in libcrypto..Richard Basch1996-05-072-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7921 dc483132-0cff-0310-8789-dd5450dbe970
* Somehow I missed this file during my previous checkin... New 3des randomRichard Basch1996-05-071-15/+121
| | | | | | function support git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7920 dc483132-0cff-0310-8789-dd5450dbe970
* Mark's changes for ticket validationKen Raeburn1996-05-072-2/+19
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7918 dc483132-0cff-0310-8789-dd5450dbe970
* Pass the eblock to the init_random_key and finish_random_key functionsRichard Basch1996-05-072-5/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7914 dc483132-0cff-0310-8789-dd5450dbe970
* Use the revamped random number routinesRichard Basch1996-05-073-34/+63
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7913 dc483132-0cff-0310-8789-dd5450dbe970
* Use the new 3des random number generatorRichard Basch1996-05-073-2/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7912 dc483132-0cff-0310-8789-dd5450dbe970
* New DES random number generation. For regular DES, it is nearly equivalentRichard Basch1996-05-078-338/+261
| | | | | | | | | (an extra DES encryption now happens). For 3des, it is a substantially better setup (the original one was a placeholder); it may not be the final one, but at least it is not as weak as the previous version. (This checkin does not include the proposed API changes.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7911 dc483132-0cff-0310-8789-dd5450dbe970
* (clean-unix): Remove libgssapi_krb5.stampEzra Peisach1996-05-072-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7909 dc483132-0cff-0310-8789-dd5450dbe970
* Use a wrapper script for the rcp started from kshd. This change cleans up theEzra Peisach1996-05-072-10/+12
| | | | | | test as written. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7908 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed the abstraction violation, where the code knew the details about theRichard Basch1996-05-066-36/+43
| | | | | | cryptosystem structure. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7907 dc483132-0cff-0310-8789-dd5450dbe970
* The fallback to slave kdc's wasn't working because the code did not handleRichard Basch1996-05-062-0/+7
| | | | | | the error return "KRB524_NOTRESP". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7906 dc483132-0cff-0310-8789-dd5450dbe970
* Include the uid in the replay cachenameRichard Basch1996-05-063-1/+29
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7905 dc483132-0cff-0310-8789-dd5450dbe970
* * rsh.exp: Setup a wrapper script in executing klist in the remoteEzra Peisach1996-05-063-2/+18
| | | | | | | | | shell so that environment variables are properly set. * kadmin.exp: (kpasswd_cpw): After giving new password, wait for the newline or we hang waiting for the process to finish. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7904 dc483132-0cff-0310-8789-dd5450dbe970
* Use a wrapper script when invoking login.krb5 in order for sharedEzra Peisach1996-05-062-1/+14
| | | | | | libraries to be setup properly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7903 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: Add procedure setup_wrapper to first setup shared libraryEzra Peisach1996-05-062-0/+32
| | | | | | | | | environment variables and the exec program. This allows for easy testing of "rsh $hostname klist" which would normally fail due to shared libraries not being setup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7902 dc483132-0cff-0310-8789-dd5450dbe970
* preauth.c: Add const and casts as needed to handle warnings..Ezra Peisach1996-05-052-7/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7901 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: For stty_init set to \^h as on some /bin/sh, ^ isEzra Peisach1996-05-052-1/+6
| | | | | | | | | | treated as a pipe. I had never heard of this until under DU 3.2 the tests started failing until I read the sh man page. Apparently ^ is for some very old compatibility. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7900 dc483132-0cff-0310-8789-dd5450dbe970
* whitespaceKen Raeburn1996-05-041-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7899 dc483132-0cff-0310-8789-dd5450dbe970
* work around process group problems; recognize certain failure modes (e.g.,Ken Raeburn1996-05-043-9/+67
| | | | | | connection closed) better; work around gnu getopt problem git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7898 dc483132-0cff-0310-8789-dd5450dbe970
* cygnus merge: sscanf workaround; logs for sam testsKen Raeburn1996-05-042-3/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7897 dc483132-0cff-0310-8789-dd5450dbe970
* * rsh.exp: Add tests for ticket forwardingKen Raeburn1996-05-046-47/+164
| | | | | | | | | | | | | | | | | | | | | * kadmin.exp and gssapi.exp: Fix syntax of expect_after blocks. The -i $foo must be inside the {, and the { must be by itself at the end of the line. * gssftp.exp (start_ftp_daemon): use krb5.conf, not krb.conf * gssftp.exp (ftp_test): Explicitly select binary mode. * kadmin.exp: Don't look at output from kadmind to drain it; that problem is handled elsewhere now. * kadmin.exp (kadmin_delete, kamind_add, kadmin_add_rnd, kadmin_examine, kadmin_cpw, kadmin_cpw_rnd, kadmin_modify, kadmin_rename, kadmin_list, kadmin_extract, kadmin_extractv4): check for "lost KDC" as well. * kadmin.exp (kadmin_show): extend regexp to match current kadmin interface. (kadmin_add): match more of extended output (tentative change, should be expanded later to actually check the values.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7896 dc483132-0cff-0310-8789-dd5450dbe970
* Tue Apr 2 22:22:47 1996 Chris Provenzano <proven@cygnus.com>Ken Raeburn1996-05-042-45/+115
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * default.exp : Do an stty to set kill and erase correctly. Things don't work if kill is set to '@'. Fri Mar 29 15:02:32 1996 Chris Provenzano <proven@cygnus.com> * default.exp : Always use variable BINSH instead of sh. Use -f flag with kinit to get forwardable tickets. Setup kdc.conf to allow forwardable tickets. Thu Mar 28 17:30:55 1996 Ken Raeburn <raeburn@cygnus.com> * default.exp (touch, tail1): New proc. (start_kerberos_daemons, stop_root_shell): Use them, and sleep built-in cmd. Wed Mar 27 22:43:08 1996 Ken Raeburn <raeburn@cygnus.com> * default.exp (start_kerberos_daemons): Use ">>" to avoid updating mod time on kadmind log file. Wed Mar 27 21:35:57 1996 Marc Horowitz <marc@mit.edu> * default.exp: (start_kerberos_daemons): exec the kadmind inside an sh to redirect stderr (this is a pending bug), and keep the same pid, so that stop_kerberos_daemons doesn't leave a kadmind running. Wed Mar 27 21:24:35 1996 Marc Horowitz <marc@mit.edu> * default.exp: (start_kerberos_daemons): add a check for "cannot initialize network" as a failure message to the kadmind5 startup expect checks Wed Mar 27 21:10:47 1996 Marc Horowitz <marc@mit.edu> * default.exp (start_kerberos_daemons): use ezra's KDC tail changes for kadmind5, too. * rlogin.exp (start_rlogin_daemon): start klogind with sh -c so that setsid() won't fail due to the process already being the leader of a process group git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7895 dc483132-0cff-0310-8789-dd5450dbe970
* * kinit.c (krb5_validate_tgt): new function, takes a credential cache with anKen Raeburn1996-05-042-1/+64
| | | | | | | | | | tgt with the "invalid flag" set, and asks the kdc to validate it. Wipes cache and stores only the newly validated credential. (After all, there won't be any others, because the invalid krbtgt couldn't have gotten them.) Most of the code is taken from krb5_mk_req, since it did the right thing. (main): add -v option, validates the ticket already in the selected cache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7894 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***Ken Raeburn1996-05-041-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7893 dc483132-0cff-0310-8789-dd5450dbe970