summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove flags that do not correspond to behavior we supportSam Hartman2009-01-031-4/+0
| | | | | | | non_ms_principal would need to be phrased in terms of what behavior is being changed, not client OS. The pkinit flag would need to be better documented git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21692 dc483132-0cff-0310-8789-dd5450dbe970
* KDB API should not be publicSam Hartman2009-01-031-3/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21691 dc483132-0cff-0310-8789-dd5450dbe970
* Merge mskrb-integ onto trunkSam Hartman2009-01-03269-4617/+58874
| | | | | | | | | | | | | | | | | | | | | | | | The mskrb-integ branch includes support for the following projects: Projects/Aliases * Projects/PAC and principal APIs * Projects/AEAD encryption API * Projects/GSSAPI DCE * Projects/RFC 3244 In addition, it includes support for enctype negotiation, and a variety of GSS-API extensions. In the KDC it includes support for protocol transition, constrained delegation and a new authorization data interface. The old authorization data interface is also supported. This commit merges the mskrb-integ branch on to the trunk. Additional review and testing is required. Merge commit 'mskrb-integ' into trunk ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21690 dc483132-0cff-0310-8789-dd5450dbe970
* With no more fakeka, we don't need the --enable-fakeka optionKen Raeburn2009-01-031-8/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21683 dc483132-0cff-0310-8789-dd5450dbe970
* Remove some unused AC_SUBSTsKen Raeburn2009-01-031-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21682 dc483132-0cff-0310-8789-dd5450dbe970
* Remove some unused variablesKen Raeburn2009-01-033-20/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21681 dc483132-0cff-0310-8789-dd5450dbe970
* Rewrite walk_rtree.c to handle hierarchical traversal better and to beTom Yu2009-01-023-309/+468
| | | | | | | | less convoluted. Update test cases. ticket: 5947 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21659 dc483132-0cff-0310-8789-dd5450dbe970
* Set auth_context's rcache to NULL after destroying and before callingTom Yu2008-12-311-1/+1
| | | | | | | krb5_auth_con_free, to avoid crashing when krb5_rc_close tries to run using a destroyed rcache handle. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21644 dc483132-0cff-0310-8789-dd5450dbe970
* I don't know what it was that someone else didn't know, but it doesn'tKen Raeburn2008-12-311-5/+3
| | | | | | belong in the copyright header. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21642 dc483132-0cff-0310-8789-dd5450dbe970
* Signed/unsigned fixesEzra Peisach2008-12-302-3/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21639 dc483132-0cff-0310-8789-dd5450dbe970
* Change kpropd_com_err_proc to prototype style, add format attributeKen Raeburn2008-12-301-5/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21637 dc483132-0cff-0310-8789-dd5450dbe970
* If full resync fails, go into backoff modeKen Raeburn2008-12-301-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21636 dc483132-0cff-0310-8789-dd5450dbe970
* Signed/unsigned fixes and remove unused variableEzra Peisach2008-12-292-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21635 dc483132-0cff-0310-8789-dd5450dbe970
* Fix up warning of suggested parens in assignment in conditionalEzra Peisach2008-12-291-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21634 dc483132-0cff-0310-8789-dd5450dbe970
* Add gssrpcint.h to contain prototype for gssrpcint_printf. IncludeEzra Peisach2008-12-295-6/+51
| | | | | | | gcc printf attribute if supported. Include header file and fix up some of the debugging printf arguments. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21632 dc483132-0cff-0310-8789-dd5450dbe970
* Revert r21589, and export krb5_get_fallback_host_realm insteadGreg Hudson2008-12-296-14/+26
| | | | | | | | | | | | | | Rationale: Zephyr and AFS both use the Kerberos realm name as the name of the service realm (AFS realm or Zephyr galaxy). AFS can grab the Kerberos realm from the ticket being aklogged, but Zephyr is not necessarily getting credentials at all (you could be sending an unauthenticated message), and currently finds its answer by looking up the realm of the server host. Although we can't currently provide an accurate result for this lookup in the presence of referrals, we do need to provide enough tools to get as good of an answer as libzephyr could have gotten before referrals went in. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21631 dc483132-0cff-0310-8789-dd5450dbe970
* Create a private header file for local functions missing prototypes.Ezra Peisach2008-12-294-14/+60
| | | | | | | | Fix a number of warnning suggesting parenthesis. Fix a signed/unsigned warning. Update dependencies. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21627 dc483132-0cff-0310-8789-dd5450dbe970
* Add prototype for usage. Change invocation of usage to db_usage when using ↵Ezra Peisach2008-12-293-5/+5
| | | | | | an argument. Include adm_proto.h for prototype for krb5_keysalt_iterate git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21625 dc483132-0cff-0310-8789-dd5450dbe970
* krb4 removal missed ldap kdb plugin directoryEzra Peisach2008-12-291-3/+3
| | | | | | | | The krb4 removal failed to change the makefile in ldap kdb plugin directory. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21622 dc483132-0cff-0310-8789-dd5450dbe970
* Handle a number of warnings - including missing prototype,Ezra Peisach2008-12-291-19/+8
| | | | | | | paraenthesis in conditionals, unused function removal, unused variable removal. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21621 dc483132-0cff-0310-8789-dd5450dbe970
* whitespaceTom Yu2008-12-2812-628/+633
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21619 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up krb5_get_fallback_host_realm in two respects:Greg Hudson2008-12-245-25/+14
| | | | | | | | | | | | 1. It isn't exported from libkrb5 (and no one seems to complain about that). So give it a krb5int_ name and move its declaration to k5-int.h. Also stop exporting it from the collected client lib. 2. It returned a list of realms, but its only caller assumes that the list contains exactly one realm. So just make it return a single realm. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21589 dc483132-0cff-0310-8789-dd5450dbe970
* Add a new fallback host-to-realm heuristic to try the components of theGreg Hudson2008-12-242-56/+137
| | | | | | | | | | | hostname as domains. The heuristic is off by default and is controlled by the realm_try_domains variable under libdefaults. Based on a patch submitted by Mark Phalan from Sun. ticket: 6031 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21588 dc483132-0cff-0310-8789-dd5450dbe970
* Collect ticket-request logging calls together in one place for easierKen Raeburn2008-12-224-103/+181
| | | | | | customization. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21564 dc483132-0cff-0310-8789-dd5450dbe970
* Some cleanup from Shawn Emery: Use INITIAL_TIMER macros instead ofKen Raeburn2008-12-221-1/+2
| | | | | | hardcoding values; reset 'gfd' when turning off the alarm. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21563 dc483132-0cff-0310-8789-dd5450dbe970
* Improvements from Shawn Emery: an extra-verbose modeKen Raeburn2008-12-221-12/+275
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21562 dc483132-0cff-0310-8789-dd5450dbe970
* Signed/unsigned fix. The function is called with a sizeof - so unsigned isEzra Peisach2008-12-191-1/+1
| | | | | | fine. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21553 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb524, lib/des425, lib/krb4, and include/kerberosIV.Greg Hudson2008-12-18176-27187/+139
| | | | | | | | | | Remove krb4 build system references and conditionals. Move des425 header stuff referenced by des_int.h into des_int.h. Remove krb4 test cases. ticket: 6303 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21544 dc483132-0cff-0310-8789-dd5450dbe970
* KIM: window settingsZhanna Tsitkov2008-12-182-3/+3
| | | | | | Ticket: 6290 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21543 dc483132-0cff-0310-8789-dd5450dbe970
* Mem leak fixZhanna Tsitkov2008-12-181-1/+2
| | | | | | Ticket: 6285 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21542 dc483132-0cff-0310-8789-dd5450dbe970
* Move prototypes needed in multiple files to misc.h instead ofEzra Peisach2008-12-174-10/+17
| | | | | | | | declaring extern in each .c file. This will ensure that definitions are consistent. Moved prototypes include: load_badauth, setup_gss_names, krb5_iprop_prog_1, kiprop_get_adm_host_srv_name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21493 dc483132-0cff-0310-8789-dd5450dbe970
* Add prototype for kadm5_init_iprop. FOr the client - adds a dummy argument Ezra Peisach2008-12-163-2/+4
| | | | | | which is ignored. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21480 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leaks in sam and ldap handler testing - there is still a leak w/ ldapEzra Peisach2008-12-164-0/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21479 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb4 code in libkrb5Greg Hudson2008-12-157-540/+4
| | | | | | | ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21452 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb4 support in gssftp and telnetGreg Hudson2008-12-1517-1363/+19
| | | | | | | ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21451 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb4 support in the applications. login's ability to run aklogGreg Hudson2008-12-1517-3312/+234
| | | | | | | | | | | | has been preserved and made unconditional on krb4 support, since aklog can now do krb5 auth. The config variable is now named krb_run_aklog (as it was sometimes documented), not krb4_run_aklog as it previously was. ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21450 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb4 support from clients. Some of the code has beenGreg Hudson2008-12-1514-1018/+90
| | | | | | | | | | simplified to remove architectural relics of the -4 and -5 options, but more simplification is likely possible, particularly in kinit. ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21449 dc483132-0cff-0310-8789-dd5450dbe970
* In the KDC, remove krb4 request handling support and fakeka codeGreg Hudson2008-12-158-2803/+9
| | | | | | | ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21448 dc483132-0cff-0310-8789-dd5450dbe970
* Remove a krb4 conditional block in ktutil_funcs.c which was missed inGreg Hudson2008-12-151-4/+0
| | | | | | | | | the previous commit. ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21447 dc483132-0cff-0310-8789-dd5450dbe970
* In ktutil, remove code for wst (write srvtab). Reimplement rst (readGreg Hudson2008-12-154-233/+9
| | | | | | | | | | srvtab) as an alias for "rkt SRVTAB:filename" and include it unconditionally. ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21446 dc483132-0cff-0310-8789-dd5450dbe970
* Remove loadv4/dumpv4 code in kdb5_util. (The command table entries forGreg Hudson2008-12-156-1500/+0
| | | | | | | | | this code had already been commented out previously.) ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21445 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed memory leak in krb5_stdccv3_removeZhanna Tsitkov2008-12-131-1/+5
| | | | | | Ticket: 6299 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21362 dc483132-0cff-0310-8789-dd5450dbe970
* Accept digits and = in base64 output to flushKen Raeburn2008-12-121-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21330 dc483132-0cff-0310-8789-dd5450dbe970
* For Sun Studio compilers, set WARN_CFLAGS to emit warning tag namesKen Raeburn2008-12-111-0/+10
| | | | | | | | | and make int/ptr mixups a fatal error that will be noticed at build or "make check" time. Tested in a 32-bit build. ticket: 6297 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21325 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up some kadmind4 relics left behind in osconf.hinGreg Hudson2008-12-091-12/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21300 dc483132-0cff-0310-8789-dd5450dbe970
* Release default credentials before exiting krb5_gss_init_sec_context routineZhanna Tsitkov2008-12-091-1/+3
| | | | | | Ticket: 6294 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21298 dc483132-0cff-0310-8789-dd5450dbe970
* Add a configure option --disable-rpath to suppress rpath flags inGreg Hudson2008-12-084-42/+91
| | | | | | | link lines. Useful for OS distributors and for builds which will only be used to run the test suite. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21297 dc483132-0cff-0310-8789-dd5450dbe970
* Remove some lingering Saber C cruftGreg Hudson2008-12-055-57/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21293 dc483132-0cff-0310-8789-dd5450dbe970
* When storing info into cred cache, remove any dups. Zhanna Tsitkov2008-12-051-4/+9
| | | | | | Ticket: 6291 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21292 dc483132-0cff-0310-8789-dd5450dbe970
* Fix data initialization in process_as_req functionZhanna Tsitkov2008-12-051-2/+2
| | | | | | Ticket: 6282 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21291 dc483132-0cff-0310-8789-dd5450dbe970