summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* missed a dlsym call removalKen Raeburn2006-03-081-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17714 dc483132-0cff-0310-8789-dd5450dbe970
* Oops. This should come closer to building on Windows..Ken Raeburn2006-03-082-18/+49
| | | | | | | | | | | | | * plugins.c: Only include dlfcn.h if USE_DLOPEN. (struct plugin_file_handle): Only include a pointer if USE_DLOPEN. (krb5int_open_plugin, krb5int_get_plugin_data, krb5int_close_plugin, krb5int_open_plugin_dir, krb5int_close_plugin_dir): Only use the dlopen interface if USE_DLOPEN is defined. (krb5int_get_plugin_dir_data, krb5int_get_plugin_dir_func): Use krb5int_get_plugin_data/func instead of dlsym. Drop some debugging code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17713 dc483132-0cff-0310-8789-dd5450dbe970
* 2006-03-07 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2006-03-08115-3432/+9552
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nidmgr32.dll (1.0.2.1) - Attempting to obtain new credentials for a principal name that contains numbers may result in a 'Identity not specified' error. Fixed. - If an invalid identity name was specified, an 'Identity not specified' error is reported without specifying that the cause was an invalid name. Fixed: reports proper error. - Identity names were being validated at the application layer before being sent to the identity provider. This may cause valid names to be marked as invalid if the identity provider and the application disagree on what a valid name is. Fixed: identity name validation is solely a function of the identity provider. - Canonicalizing an identity name that contained certain characters failed due to a validation error. Fixed. - Possible deadlock in the new credentials dialog. (If one plugin tries to synchronize custom prompter values from the plugin thread, while the UI thread tries to obtain a lock on the new credentials data, a deadlock occurs.) Fixed. - State information for configuration panels may persist between two invocations of the configuration window. Fixed to clean up state information properly. - The UI library now has full support for custom actions and custom menus. - When there are queued alerts and a normal alert is shown, a 'next alert...' button appears in the alert which lets the user view the next queued alert. However, if the alert which is displayed requires the user to select a command button, selecting the 'next' button would be the equivalent of cancelling out of the alert and viewing the next one. The library was updated to not show the 'next' button if the alert requires user interaction. - Credential renewal on half-lifes is now supported as a configurable option. - Destroying all credentials on exiting netidmgr is a configurable option. - Debug logging to a file has been added netidmgr.exe (1.0.2.1) - Selecting 'Ok' in the configuration window didn't notify all the configuration panels to apply the changes. Fixed. - PgUp / PgDn / Shift+PgUp / Shift+PgDn keys now work as expected. - Root level configuration nodes in the Options dialog now also appear on the Options menu. Configuration nodes that are registered at the root level are automatically added to the menu. - The UI now has full support for custom actions and custom menus. - The UI does not automatically add submenus for actions which are associated with menus unless the declaration specifies that it should be rendered as a submenu. - When displaying alerts, the first button of the alert is always made the default. - 'Change summary' button in the configuration dialog was removed, since it was unused and unnecessary. - Ticket icons are displayed in the status column for all credentials. Clicking an icon opens the properties dialog for that credential. - The UI now has View by Type functionality - The UI now has Column selection and reorganization. The choice of columns and their order are preserved between restarts. - Handle multiple copies of NetIDMgr.exe being started with different version numbers. Higher version number wins. krb4cred.dll (1.0.2.1) - During new credentials acquisition, under some circumstances, the Kerberos 4 plugin would not notify NetIDMgr about the state of the Kerberos 4 ticket acquisition. This results in other plugins (such as AFS) which are depending on the feedback to fail. Fixed. krb5cred.dll (1.0.2.1) - If no password is entered while obtaining new credentials, a new TGT will not be obtained, but the new credentials operation will not fail if there already is a TGT. Added check to see if the TGT is expired and fail the operation if no valid TGT is found. - The identity provider can set the Krb5 CCName property for an identity incorrectly if there is more than one credential cache containing tickets for the same principal. Fixed. - When enumerating ccaches, krb5_cc_resolve was being called with the name of the ccache without a type prefix. Fixed. - Tracker control usability issues due to loss of focus. Fixed. - Realm Editor added. - Addressed tickets can be requested as in Leash All modules: - removed grayed out UI components that are not being backed by current functionality. - new icons - support for 64-bit Windows builds under Visual Studio 8 - proper versioning for language resources ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17712 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5.c: Don't include pthread.hKen Raeburn2006-03-082-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17711 dc483132-0cff-0310-8789-dd5450dbe970
* Enable compilation of little-endian unaligned load/store helperKen Raeburn2006-03-084-20/+16
| | | | | | | functions in k5-platform.h, and use them in kdb encoding/decoding macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17710 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2006-03-0843-376/+751
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17708 dc483132-0cff-0310-8789-dd5450dbe970
* krb5.h, which is built after util/et, which is built after the supportKen Raeburn2006-03-0810-72/+174
| | | | | | | | | | | | | code. Fix: Put service location decls in k5-locate.h, pull plugin support decls out of k5-int.h into k5-plugin.h, and make it stand on its own, which includes changing the return type from krb5_error_code to int32_t. Oops: The plugin support code included k5-int.h, which includes git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17707 dc483132-0cff-0310-8789-dd5450dbe970
* Merge from plugin branchKen Raeburn2006-03-0744-228/+1413
| | | | | | | | | | | | | | | | | | | | | | | | | Add plugin support: - plugin routines in support library (may break windows build!) - plugin support in KDC location code - sample Python-based plugin for KDC location, not built without tweaking sources - changed service location interface to use an enum instead of passing profile string and DNS strings and port numbers - changed pathnames for plugin locations, including kdb back end - remove locate_service from accessor API Also, do build shared libraries for Darwin just like any other UNIX box. Not present yet: - use new plugin interface for kdb back end - Windows support - Mac bundle support (but dlopen support works) - search path for libkrb5 plugins (only one hard-coded directory for now) - sorting of plugin collections for predictable ordering See the various ChangeLogs for specifics. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17706 dc483132-0cff-0310-8789-dd5450dbe970
* 2006-03-07 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2006-03-072-0/+14
| | | | | | | | | | | | * acquire_cred.c: (acquire_init_cred) If the leash32.dll is not available, fallback to opening the default credential cache even when the desired_name is provided. ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17704 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (clean-unix): Delete util/fakedestKen Raeburn2006-03-022-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17690 dc483132-0cff-0310-8789-dd5450dbe970
* don't check sizeof(int) at configure timeKen Raeburn2006-03-014-2/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17689 dc483132-0cff-0310-8789-dd5450dbe970
* add missing $(SCLIB) aka bufferoverflow.lib for 64-bit windowsJeffrey Altman2006-02-281-1/+1
| | | | | | ticket: 3415 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17681 dc483132-0cff-0310-8789-dd5450dbe970
* Qing Dong <dongq@mit.edu> provided a set of changes to allowJeffrey Altman2006-02-2733-181/+288
| | | | | | | | | | | | | krb5 to build under the Microsoft Visual Studio 8 compiler in 64-bit mode and produce file names that do not conflict with the names produced by the 32-bit build. That patch was modified to work on Unix and also include processor dependent pre-processor definitions to remove warnings. ticket: 3415 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17680 dc483132-0cff-0310-8789-dd5450dbe970
* Mark #else of KDB5_STATIC_LINK with ifdef nameSam Hartman2006-01-271-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17631 dc483132-0cff-0310-8789-dd5450dbe970
* Note that caller must free result of conf_get_sectionSam Hartman2006-01-272-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17630 dc483132-0cff-0310-8789-dd5450dbe970
* Define new error codes for errors loading dal plugins.Sam Hartman2006-01-274-5/+19
| | | | | | Use these error codes to report plugin load errors. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17629 dc483132-0cff-0310-8789-dd5450dbe970
* update copyright datesKen Raeburn2006-01-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17622 dc483132-0cff-0310-8789-dd5450dbe970
* add/update copyright notices for non-trivial code additions/changes in 2006Ken Raeburn2006-01-263-1/+49
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17621 dc483132-0cff-0310-8789-dd5450dbe970
* copyright updateKen Raeburn2006-01-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17620 dc483132-0cff-0310-8789-dd5450dbe970
* copyright noticesKen Raeburn2006-01-262-0/+48
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17619 dc483132-0cff-0310-8789-dd5450dbe970
* * export-check.pl: Accept 'S' in nm outputKen Raeburn2006-01-262-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17618 dc483132-0cff-0310-8789-dd5450dbe970
* * export-check.pl: Accept 'G' in nm outputKen Raeburn2006-01-262-2/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17617 dc483132-0cff-0310-8789-dd5450dbe970
* Delete the rest of the support in the kdb library for doing locking onKen Raeburn2006-01-254-94/+28
| | | | | | | | | | behalf of the plugin library. Convert the remaining locking code (for protecting the list of plugins loaded) to use the k5_ macros. ticket: 3416 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17612 dc483132-0cff-0310-8789-dd5450dbe970
* Remove the thread-safety flag from the kdb plugin interface. Instead,Ken Raeburn2006-01-257-53/+213
| | | | | | | | | | | | | | have the kdb code assume the plugin is thread safe, and implement some quick and dirty wrapper functions in the db2 plugin to make it use a local mutex. There's still some mutex code in the kdb library that should be reviewed, and simplified or removed. ticket: 3416 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17611 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-thread.h (krb5int_mutex_alloc, krb5int_mutex_free, krb5int_mutex_lock,Ken Raeburn2006-01-252-0/+28
| | | | | | | | | | | krb5int_mutex_unlock): Declare. (k5_mutex_lock, k5_mutex_unlock) [PLUGIN]: Redefine to call krb5int_ function versions. ticket: 3417 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17610 dc483132-0cff-0310-8789-dd5450dbe970
* Check the export lists against the newly built shared library to make sure allKen Raeburn2006-01-254-1/+63
| | | | | | | | | | | | | the symbols we want to export are actually defined. GNU/Linux only, for the moment, but it ought to work on any system using the GNU version of nm, and not too hard to modify for other ways of extracting the exported symbols of a library. * util/export-check.pl: New file. * config/shlib.conf (*-*-linux*): Run export-check.pl after building a shared library. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17609 dc483132-0cff-0310-8789-dd5450dbe970
* * fake-addrinfo.c (krb5int_in6addr_any): Always defineKen Raeburn2006-01-252-5/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17608 dc483132-0cff-0310-8789-dd5450dbe970
* * threads.c (krb5int_mutex_alloc, krb5int_mutex_free, krb5int_mutex_lock,Ken Raeburn2006-01-253-1/+53
| | | | | | | | | | | | krb5int_mutex_unlock): New functions. (krb5int_mutex_lock_update_stats, krb5int_mutex_unlock_update_stats, krb5int_mutex_report_stats): Always define, even if not doing anything. * libkrb5support.exports: Export the new functions. ticket: 3417 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17607 dc483132-0cff-0310-8789-dd5450dbe970
* * lib.in (binutils.versions): Put hidden symbol list after exported list,Ken Raeburn2006-01-252-3/+10
| | | | | | | because libkrb4 has a symbol starting with "__" in its export list. (osf1.exports): Rename file in a separate command. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17606 dc483132-0cff-0310-8789-dd5450dbe970
* Include the support library when linking various test programs, because onKen Raeburn2006-01-1814-23/+54
| | | | | | | | | Solaris, with the vendor compiler, we'll always get references to krb5int_pthread_loaded due to unused inline functions not being eliminated. (Also inclued it in dependencies, and use CC_LINK when it wasn't used before.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17592 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4 (AC_KRB5_TCL_TRYOLD): Include $LIBS in $TCL_LIBSKen Raeburn2006-01-182-4/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17591 dc483132-0cff-0310-8789-dd5450dbe970
* Back out unwanted change to profile_tcl.cSam Hartman2006-01-111-745/+311
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17586 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb5_callconv from non-exported internal functionSam Hartman2006-01-113-312/+750
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17585 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5-config.in: Cause libs output to match actual requiredTom Yu2006-01-062-1/+6
| | | | | | | | | | ordering of libraries. ticket: 3320 target_version: 1.4.4 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17581 dc483132-0cff-0310-8789-dd5450dbe970
* KFW installation should not use impersonationJeffrey Altman2005-12-302-2/+9
| | | | | | | | | | | Do not use impersonation when installing the network provider in order to succeed on Vista. ticket: new component: windows target_version: 1.4.4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17580 dc483132-0cff-0310-8789-dd5450dbe970
* * gc_frm_kdc.c: Rewrite to modularize significantly. (~400-lineTom Yu2005-12-302-381/+752
| | | | | | | | | | | functions do not deserve to live.) The outer loop no longer explicitly attempts the direct path to the target; that attempt has been folded into the inner loop. Remove some redundant credential lookups present in the old code. Treat unexpected realm referrals as soft errors, in case some intermediate KDC disagrees with client regarding a transit path. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17579 dc483132-0cff-0310-8789-dd5450dbe970
* * gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Cause free_tgt andTom Yu2005-12-282-12/+19
| | | | | | | | | | | | free_otgt to track the states of tgt and otgt correctly, to avoid a double-free condition which previously happened when this function returned to krb5_get_credentials(), which proceeded to free a previously freed TGT in the returned TGT list. ticket: 3313 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17578 dc483132-0cff-0310-8789-dd5450dbe970
* make dependKen Raeburn2005-12-222-7/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17574 dc483132-0cff-0310-8789-dd5450dbe970
* Looks like the current Red Hat gcc on Athena emits duplicates and "./foo.h",Ken Raeburn2005-12-222-1/+28
| | | | | | | | | | neither of which we've properly addressed before. * depfix.pl (uniquify): New subroutine. (do_subs_2): Use it. (do_subs): Fix substitution pattern for " ./". git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17573 dc483132-0cff-0310-8789-dd5450dbe970
* Include krb5.h after k5-int.hSam Hartman2005-12-202-1/+36
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17572 dc483132-0cff-0310-8789-dd5450dbe970
* Rename "modules" to "plugins", and fix up makefile variables etcKen Raeburn2005-12-17133-14/+31
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17565 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (all-unix): Do depend on all-libs.Ken Raeburn2005-12-174-3/+12
| | | | | | | * test/Makefile.in (PROG_LIBPATH, DB_DEPLIB): Look for library in .. instead of $TOPLIBD. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17564 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-thread.h (USE_PTHREAD_LOCK_ONLY_IF_LOADED): Define any timeKen Raeburn2005-12-172-4/+6
| | | | | | | | | HAVE_PRAGMA_WEAK_REF is defined. ticket: 3293 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17563 dc483132-0cff-0310-8789-dd5450dbe970
* KFW - Correct identity validation algorithmJeffrey Altman2005-12-143-8/+2
| | | | | | | | | | Do not restrict the characters permitted in identity names ticket: new target_version: 1.4.4 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17557 dc483132-0cff-0310-8789-dd5450dbe970
* KFW 3.1 - Add missing include pathJeffrey Altman2005-12-131-1/+2
| | | | | | | | | | | The leashwin.h file needs to be accessible via the INCLUDE path. ticket: new tags: pullup target_version: 1.3.4 status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17556 dc483132-0cff-0310-8789-dd5450dbe970
* Network Identity Manager - Fix module loading when en_US locale cannot be loadedJeffrey Altman2005-12-081-3/+26
| | | | | | | | | | | | | | The identity manager is designed for internationalization. However, it only ships with modules for the en_US locale. Designing modules for other locales was beyond our the reach of available resources. This patch will force the use of en_US when modules matching the installed user and system locales cannot be found. ticket: new status: resolved target_version: 1.4.4 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17555 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-thread.h (k5_mutex_lock_update_stats) [__GNUC__]: Use an inline function,Ken Raeburn2005-12-072-1/+13
| | | | | | to avoid "statement with no effect" warnings. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17554 dc483132-0cff-0310-8789-dd5450dbe970
* KFW 3.0 Final Network Identity Manager updatesJeffrey Altman2005-12-0692-866/+2059
| | | | | | | | | | | | | | | | | | | | | | | | Add new documentation files Add new icons Add "set default" functionality to the New Credentials dialog Remove inconsistencies in the Options configuration dialog Replace the menu bar so that it responds to Alt- and keyboard shortcuts Fix an --autoinit race condition many more things.... ticket: new target_version: 1.4.4 status: resolved tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17546 dc483132-0cff-0310-8789-dd5450dbe970
* KFW 3.0 Final Wix installer updatesJeffrey Altman2005-12-063-8/+22
| | | | | | | | | | | | | | | update for final release add new netidmgr documentation: user and development allow Leash to be used instead of NetIDMgr via a transform ticket: new target_version: 1.4.4 status: resolved tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17545 dc483132-0cff-0310-8789-dd5450dbe970
* KFW 3.0 Final NSIS installer updatesJeffrey Altman2005-12-063-25/+15
| | | | | | | | | | | | | | | | update for release build add new documentation links for user and sdk remove --autoinit startup parameter as it interferes with the new registry based configuration ticket: new target_version: 1.4.4 status: resolved tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17544 dc483132-0cff-0310-8789-dd5450dbe970