summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* krb5_get_in_tkt_with_keytab(): only request keytypes that have correspondingRichard Basch1996-03-222-5/+57
| | | | | | entries in the keytab. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7702 dc483132-0cff-0310-8789-dd5450dbe970
* all des enctypes are equivalent (interim checkin until I create a functionRichard Basch1996-03-222-2/+27
| | | | | | to check the key equivalency of two enctypes). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7701 dc483132-0cff-0310-8789-dd5450dbe970
* bullet-proofing the code -- if the data contents are NULL, it would coredumpRichard Basch1996-03-222-12/+19
| | | | | | (I discovered this one because of another bug) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7700 dc483132-0cff-0310-8789-dd5450dbe970
* new principals were being created with two keys, one of which theRichard Basch1996-03-222-9/+12
| | | | | | key_data_ver=0 and had no valid data git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7699 dc483132-0cff-0310-8789-dd5450dbe970
* use the library routines to do the v4 to v5 principal translationRichard Basch1996-03-222-8/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7698 dc483132-0cff-0310-8789-dd5450dbe970
* g_imp_sec_context.c (gss_import_sec_context):Theodore Tso1996-03-218-5/+23
| | | | | | | | | | | | g_exp_sec_context.c (gss_export_sec_context): Fix 16bit vs 32bit lint flame. g_glue.c, g_initialize.c: Add include of string.h, as it is needed. g_acquire_cred.c, g_inq_cred.c: Add include of time.h g_rel_oid_set.c (gss_release_oid_set): Removed unused variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7695 dc483132-0cff-0310-8789-dd5450dbe970
* Don't compile this procedure, since it's not used. The mechanism glueTheodore Tso1996-03-212-0/+10
| | | | | | layer uses the krb5_gss_internal_relase_oid() function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7694 dc483132-0cff-0310-8789-dd5450dbe970
* walk_rtree.c (krb5_walk_realm_tree): Fix 16bit vs. 32bit error.Theodore Tso1996-03-214-7/+18
| | | | | | | | | | | (cap_code should been a krb5_error_code, not an int!) mk_cred.c (krb5_mk_ncred_basic): Fix windows lint flame. get_in_tkt.c (krb5_get_in_tkt): Fix 16bit vs. 32bit error. (do_more should not have been an int!) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7693 dc483132-0cff-0310-8789-dd5450dbe970
* Change type of pa_type field in krb5_pa_data to be krb5_preauthtype,Theodore Tso1996-03-213-2/+12
| | | | | | | | | | | | | for consistency's sake. Added prototype for krb5_copy_addr(). Change type of etype in krb5_etype_info_entry to be krb5_enctype, for consistency's sake. (More cleanup of windows 16bit vs. 32bit) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7692 dc483132-0cff-0310-8789-dd5450dbe970
* Decode pa_type in the krb5_pa_data structure as a krb5_int32, since itTheodore Tso1996-03-212-2/+7
| | | | | | | | is now type krb5_preauthtype. Decode etype in the krb5_etype_info_entry as krb5_enctype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7691 dc483132-0cff-0310-8789-dd5450dbe970
* Added prototype of krb5_scc_skip_header to fix Windows lint flamesTheodore Tso1996-03-212-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7690 dc483132-0cff-0310-8789-dd5450dbe970
* Added prototype of krb5_fcc_skip_header to fix Windows lint flamesTheodore Tso1996-03-212-0/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7689 dc483132-0cff-0310-8789-dd5450dbe970
* Fix 16 bit vs. 32bit error in the encoded timestamp structureTheodore Tso1996-03-212-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7688 dc483132-0cff-0310-8789-dd5450dbe970
* Fix Windows lint flames. (16bit vs. 32bit issues)Theodore Tso1996-03-213-8/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7687 dc483132-0cff-0310-8789-dd5450dbe970
* Comment out #ident line. This causes the Macintosh C compilerTheodore Tso1996-03-212-2/+9
| | | | | | | indigestion. Remove #include of gssapi/gssapi.h, since that gets included by gssapiP_generic.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7686 dc483132-0cff-0310-8789-dd5450dbe970
* mechglue.h: Don't include <sys/types.h>; it's included if necessary inTheodore Tso1996-03-2130-35/+50
| | | | | | | | | | | | | | | | | gssapi/gssapi.h. On a Macintosh, #include gssapi.h instead of gssapi/gssapi.h. g_accept_sec_context.c, g_acquire_cred.c, g_compare_name.c, g_context_time.c, g_delete_sec_context.c, g_dsp_name.c, g_dsp_status.c, g_exp_sec_context.c, g_glue.c, g_imp_name.c, g_imp_sec_context.c, g_indicate_mechs.c, g_init_sec_context.c, g_initialize.c, g_inq_context.c, g_inq_cred.c, g_inq_names.c, g_process_context.c, g_rel_buffer.c, g_rel_cred.c, g_rel_name.c, g_rel_oid_set.c, g_seal.c, g_sign.c, g_unseal.c, g_verify.c, gssd_pname_to_uid.c, mechglue.h, mglueP.h: Comment out #ident line. This causes the Macintosh C compiler indigestion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7685 dc483132-0cff-0310-8789-dd5450dbe970
* Fix SRCS definition so that it doesn't fool the Macintosh macfiles.shTheodore Tso1996-03-202-2/+9
| | | | | | Makefile generation script. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7682 dc483132-0cff-0310-8789-dd5450dbe970
* macfiles.sh: Improved matching of the SRCS declaration. It must notTheodore Tso1996-03-203-4/+12
| | | | | | | | be commented out; it must start on the first column of the line. Makefile.tmpl (KH): Fix typos in Dan's original template. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7681 dc483132-0cff-0310-8789-dd5450dbe970
* Add kdc_preauth.cEzra Peisach1996-03-201-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7680 dc483132-0cff-0310-8789-dd5450dbe970
* Remove no longer relevant ksu.1Ezra Peisach1996-03-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7679 dc483132-0cff-0310-8789-dd5450dbe970
* * des_crc.c (mit_des_crc_decrypt_func): Add const to pointerEzra Peisach1996-03-203-1/+9
| | | | | | | | | cast for suncc warning. Update .Saintize as well to reflect reality git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7678 dc483132-0cff-0310-8789-dd5450dbe970
* * new_rn_key.c (mit_des_generate_random_block): Add const keywrodEzra Peisach1996-03-203-2/+15
| | | | | | to cast for suncc warning. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7677 dc483132-0cff-0310-8789-dd5450dbe970
* ustime.c was renamed to c_ustime.cEzra Peisach1996-03-201-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7676 dc483132-0cff-0310-8789-dd5450dbe970
* Add keytab.cEzra Peisach1996-03-201-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7675 dc483132-0cff-0310-8789-dd5450dbe970
* Add new .Sanitize fileEzra Peisach1996-03-201-0/+71
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7674 dc483132-0cff-0310-8789-dd5450dbe970
* Synchronize .Sanitize with current realityEzra Peisach1996-03-203-5/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7673 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c (ruserok): declare the function as taking const char *Richard Basch1996-03-202-2/+7
| | | | | | instead of char * (Solaris 2.5 refuses to compile it, otherwise). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7672 dc483132-0cff-0310-8789-dd5450dbe970
* * conv_creds.c (krb524_convert_creds_plain):Richard Basch1996-03-202-1/+10
| | | | | | | if the v5 lifetime is greater than the max v4 lifetime, use the max v4 lifetime (0xff), rather than masking it with 0xff. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7671 dc483132-0cff-0310-8789-dd5450dbe970
* * kadm_funcs.c: changed all references of des-cbc-md5 to des-cbc-crcRichard Basch1996-03-202-14/+21
| | | | | | (which is what v4 really uses); also, fixed uninitialized variable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7670 dc483132-0cff-0310-8789-dd5450dbe970
* * ktutil_funcs.c (ktutil_write_srvtab): use any type of des keyRichard Basch1996-03-202-28/+37
| | | | | | in the keytab to create a v4 srvtab git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7669 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_edit.c (extract_v4_srvtab): do not test to make sure weRichard Basch1996-03-203-86/+47
| | | | | | | | | | | | fetched a key of enctype 1 (des-cbc-crc), since we may have gotten another des key from the database, which is just as useful in a v4 srvtab * dumpv4.c (dump_v4_iterator): use krb5_524_conv_principal to do the v5 to v4 principal translation, instead of having yet another hard-coded table. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7668 dc483132-0cff-0310-8789-dd5450dbe970
* * tf_util.c (tf_get_cred): Issue date is written out as a long,Ezra Peisach1996-03-192-1/+8
| | | | | | | | | | | | read back in as same. I have kept the size as a long to be compatible with the Cygnus V4 distribution. The problem was introduced when we changed the include/kerberosIV structures to use 32 bit ints for timestamps. So, under OSF/1, tf_util would write out a 64 bit issue date, and then try reading back in a 32 bit one. Since Cygnus uses sizeof(long) we will too. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7667 dc483132-0cff-0310-8789-dd5450dbe970
* Put back in the encrypted telnet testsEzra Peisach1996-03-192-62/+66
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7666 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add KRB5_RUN_FLAGSEzra Peisach1996-03-1918-28/+76
| | | | | | * Makefile.in: Use the run flags. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7665 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (KRB5_RUN_FLAGS): Allows for setting of proper pathsEzra Peisach1996-03-193-3/+57
| | | | | | | | | for executing programs in the build tree with proper overriding of potentially installed libraries. * configure.in: Setup for KRB5_RUN_FLAGS git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7664 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags which turn on the encryption optionTheodore Tso1996-03-193-3/+51
| | | | | | | | telnetd.c (getterminaltype): If the authentication option which was negotiated requires that encryption be turned on, then enforce this here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7663 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags to turn on the encryption optionTheodore Tso1996-03-197-10/+102
| | | | | | | | | | | | | | | | | | | | | | | | | authenc.c (telnet_spin): Implemented the telnet spin function, which works by calling the Scheduler with the tty_lockout flag set. main.c (main): If the -x option is given, set the autologin, wantencryption, and auth_enable_encrypt flag. They enable authentication, enforcement of the encryption option, and a flag to the auth layer to negotiate authentication with mandatory encryption option. telnet.c (telnet): If the wantencryption flag is set (because the user has given the -x option, then we enforce that encryption must be turned on. The user will not be able to type to the network stream until encryption is enabled, and if encryption is refused, the client will print an error message. (Scheduler): If the tty_lockout flag is set, then don't process keyboard read events. This prevents the user from typing over the network until encryption is enabled. utilities.c (printsub): Added print support for the authentication must-encrypt option. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7662 dc483132-0cff-0310-8789-dd5450dbe970
* Mon Mar 18 20:56:37 1996 Theodore Y. Ts'o <tytso@dcl>Theodore Tso1996-03-197-113/+246
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * kerberos5.c (kerberos5_send): Send in as input the authentication type pair (ap->type, ap->way) to be checksumed in the authenticator. (kerberos5_is): If the checksum is present in the authenticator, then validate the authentication type pair against the checksum. (kerberos5_reply): If we didn't do mutual authentication, and we receive a KRB_ACCEPT, then stash away the session key anyway. This way we have a chance of doing encryption even if mutual authentication wasn't done. * encrypt.c (EncryptStartInput, EncryptStartOutput): Added conditional around printf so that these two functions can be called by the server. (encrypt_is_encrypting): New function which returns true only if both sides of the telnet stream is encrypted. Fri Mar 15 18:19:44 1996 Theodore Y. Ts'o <tytso@dcl> * auth.c: Added new authentication scheme for Krb5 mutual authentication with mandatory encryption. (auth_send, auth_send_retry): Split auth_send() so that the functionality done by auth_send_retry() is separate. This avoids a really dodgy pointer comparison which was caused by auth_send() being used for two purposes. If the client has not requested encryption, then don't use the authentication systems which require encryption. (auth_must_encrypt): New function which returns whether or not encryption must be negotiated. * auth-proto.h: Added prototype for new option auth_must_encrypt(). * Makefile.in (ENCRYPTION, DES_ENCRYPTION): Added defines to turn on encryption and des encryption. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7661 dc483132-0cff-0310-8789-dd5450dbe970
* Use AC_HEADER_STDARG and use that test to set STDARG.Ezra Peisach1996-03-199-5/+21
| | | | | | | The old test assumed that either STDARG was defined or __STDC__ - which is not sufficient. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7660 dc483132-0cff-0310-8789-dd5450dbe970
* Back out last change and use a cast to avoid warnings.Ezra Peisach1996-03-192-4/+6
| | | | | | | Richard has indicated that come compilers get upset if you try to reassign a const char *. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7659 dc483132-0cff-0310-8789-dd5450dbe970
* * sn2princ.c (krb5_sname_to_principal): Do not assign a const char *Ezra Peisach1996-03-182-2/+7
| | | | | | to a non-const char *. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7658 dc483132-0cff-0310-8789-dd5450dbe970
* Do not try to reassign "const" variablesRichard Basch1996-03-182-11/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7657 dc483132-0cff-0310-8789-dd5450dbe970
* detect kadmin failures that are *really* kdc failuresMark Eichin1996-03-182-1/+56
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7656 dc483132-0cff-0310-8789-dd5450dbe970
* changelogs entries from cygnus changesMark Eichin1996-03-184-2/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7655 dc483132-0cff-0310-8789-dd5450dbe970
* malloc the new length, not the old, esp. since we just check that theMark Eichin1996-03-181-1/+1
| | | | | | old length was zero git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7654 dc483132-0cff-0310-8789-dd5450dbe970
* fixes ticket-forwarding crashes on linux..Mark Eichin1996-03-183-3/+13
| | | | | | | | | * copy_addrs.c (krb5_copy_addr): make non-static so we can use it in mk_cred. * mk_cred.c (krb5_mk_ncred_basic): copy local_addr and remote_addr instead of just aliasing them, so we can safely free them ourselves. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7653 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Change WITH_KDB_DB to USE_KDB5_LIBRARIES and addEzra Peisach1996-03-183-11/+14
| | | | | | | | | KRB5_LIBRARIES. * Makefile.in: Use libraries as specified by configure. Set LD_LIBRARY_PATH for tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7652 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Add USE_ANAME and KRB5_LIBRARIESEzra Peisach1996-03-183-11/+14
| | | | | | Makefile.in: Change to properly use the libraries as specified by configure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7651 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in: Add USE_ANAME and add proper aclocal.m4 functions to properlyEzra Peisach1996-03-183-12/+20
| | | | | | | | | | tell the makefile which libraries to link to. Makefile.in: Get the list of libraries to link from configure. Removes a dependency on layout of build tree and allows for configure to specify other libraries (as in aname conversion databases..) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7650 dc483132-0cff-0310-8789-dd5450dbe970
* Add USE_ANAME for aname conversion dbEzra Peisach1996-03-182-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7649 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit (git 2.34.1) at 2026-04-09 00:33:35 +0000