Sat Apr 22 00:36:37 1995 Theodore Y. Ts'o (tytso@dcl) * network.c (setup_network): Don't rely on krb5_kdc_portname and krb5_kdc_sec_portname anymore. Use the #define'd versions. Fri Mar 31 16:50:07 1995 Theodore Y. Ts'o (tytso@dcl) * main.c (main): Make sure the context is initialized before it is used. Mon Mar 27 07:56:26 1995 Chris Provenzano (proven@mit.edu) * kdc_util.c Use new calling conventions for krb5_rd_req_decoded(). Fri Mar 24 14:58:07 1995 * replay.c: The KDC replay cache needs to store the database modification time, so that if the database is modified in between when it receives a request and when it receives a replay of the same request, it knows to throw away the replay cache entry and generate a new response (since the record in the database on which the response is based may have been modified). * main.c (kdc_com_err_proc): Use syslog() instead of vsyslog(). Sat Mar 18 18:59:45 1995 John Gilmore (gnu at toad.com) * kerberos_v4.c: Replace STDARG_PROTOTYPES with HAVE_STDARG_H. Tue Mar 14 15:25:38 1995 * configure.in, Makefile.in: Use the libdes425 library so that the DES code doesn't get dragged in twice. * kdc_util.c (validate_as_request): Allow a client to obtain a password changing ticket, even if the client's key is expired. * main.c (usage, process_args, main): The KDC will disassociate itself from the terminal by default, unless the -n option is given. Thu Mar 2 12:16:50 1995 Theodore Y. Ts'o * Makefile.in (ISODELIB): Remove reference to $(ISODELIB). Wed Mar 1 16:30:27 1995 Theodore Y. Ts'o * configure.in: Remove ISODE_INCLUDE and ISODE_DEFS, replace check for -lsocket and -lnsl with WITH_NETLIB check. Tue Feb 28 02:27:11 1995 John Gilmore (gnu at toad.com) * *.[ch]: Avoid and includes. Fri Feb 10 14:35:42 1995 Theodore Y. Ts'o * do_tgs_req.c (process_tgs_req): krb5_use_keytype() was being called when the argument was a encryption type. Change use to krb5_use_cstype(). Actually, any use of krb5_use_keytype() is a bug by definition. Wed Feb 01 21:07:03 1995 Chris Provenzano (proven@mit.edu) * kdc_util.c (kdc_rdreq_keyproc()) Add krb5_keytype() arg. Wed Jan 25 23:20:07 1995 Theodore Y. Ts'o (tytso@dcl) * network.c (setup_network), main.c (process_args): Allow the primary port that the KDC listens on be configurable on the command line. If the appropriate /etc/services entries aren't found, use compiled in defaults. Wed Jan 25 16:54:40 1995 Chris Provenzano (proven@mit.edu) * Removed all narrow types and references to wide.h and narrow.h Fri Jan 13 15:23:47 1995 Chris Provenzano (proven@mit.edu) * Added krb5_context to all krb5_routines Thu Dec 8 00:33:05 1994 * do_tgs_req.c (prepare_error_tgs): Don't free the passed in ticket; it will be freed as part of other structures. * do_tgs_req.c (process_tgs_req): Set the encryption type in the reply structure, and set the eblock type accordingly. Wed Dec 7 13:36:34 1994 * do_as_req.c (process_as_req): Set the encryption type in the reply_encpart structure. * kdc_util.c (validate_as_request): * policy.c (against_local_policy_as): Move requirement that an AS request must include the addresses field to the local policy routine. (Not required by RFC). * main.c (setup_com_err): Initialize the kdc5 error table (the kdb5 error table is already initialized) Wed Nov 30 16:37:26 1994 Theodore Y. Ts'o (tytso@dcl) * confiugre.in: Add appropriate help text for --with-krb4 option. Mon Nov 21 17:23:50 1994 Theodore Y. Ts'o (tytso@dcl) * do_tgs_req.c (process_tgs_req): * do_as_req.c (process_as_req): Use the list of encryption types passed as part of the KDC request to determine which encryption to use for encrypting the ticket. The encryption must be one that is supported by the KDC, as well as being one which is marked as being supported by the server of the ticket. In a AS request, also use this encryption for encrypting the KDC response. In a TGS request, use the encryption type of the TGT authenticator to determine how to encrypt the KDC response. Tue Nov 8 17:51:30 1994 Theodore Y. Ts'o (tytso@dcl) * do_tgs_req.c (process_tgs_req): Use published interface to call krb5_random_key(). Mon Nov 7 22:11:01 1994 Theodore Y. Ts'o (tytso@dcl) * kerberos_v4.c: Don't define functions manually, but pull in the appropriate include files (com_err.h, krb5/ext-proto.h, krb5/los-proto.h, etc.) * kdc_util.c (kdc_process_tgs_req): Fix lineage check so that we don't fail if we're cross-authenticating with a realm with the same length as our own. ('||' should have been '&&') Fri Nov 4 17:47:46 1994 Theodore Y. Ts'o (tytso@dcl) * do_as_req.c (process_as_req): Use published interface to call krb5_random_key(). Fri Oct 14 00:31:14 1994 Theodore Y. Ts'o (tytso@dcl) * main.c (process_args): Select the cryptosystem to be used using krb5_use_cstype() instead of using a implementation specific assignment. Also, allow the encryption type to be specified using a command line option. Tue Oct 11 22:11:09 1994 Theodore Y. Ts'o (tytso@dcl) * do_as_req.c (process_as_req): Don't assume that the request server's realm name is null terminated. Compare the request server against changepw/kerberos using krb5_principal_compare. Tue Oct 4 16:42:16 1994 Theodore Y. Ts'o (tytso@dcl) * kdc_util.c (kdc_rdreq_keyproc): Add widen.h and narrow.h around keyproc call so that the argument types are widened. Mon Oct 3 13:13:48 1994 Theodore Y. Ts'o (tytso@dcl) * Makefile.in: Use $(srcdir) to find manual page for make install. * Makefile.in: Remove krb5kdc on make clean Fri Sep 30 22:13:13 1994 Theodore Y. Ts'o (tytso@dcl) * extern.c: Add placeholder for magic number Thu Sep 29 00:03:59 1994 Theodore Y. Ts'o (tytso@dcl) * Makefile.in: Relink executable when library changes. Wed Sep 21 17:40:56 1994 Theodore Y. Ts'o (tytso@dcl) * kdc_util.c, kdc_util.h (realm_compare): Change realm_compare so that both arguments are principals. This makes it less confusing.... * kdc_util.c (add_to_transited): Folded in Tony Andrea's changes so that add_to_transited doesn't assume that the contents of a krb5_data->data are null terminated. * do_tgs_req.c (process_tgs_req): Add the realm of the presented tgt if it is different from the local realm (cross-realm) and it is different than the realm of the client (since the realm of the client is already implicitly part of the transited list and should not be explicitly listed). Thu Aug 18 18:17:59 1994 Theodore Y. Ts'o (tytso at tsx-11) * configure.in: * Makefile.in: Move optional link with $(KRB4)/lib/libdes.a to configure.in. Thu Aug 4 15:13:27 1994 Tom Yu (tlyu@dragons-lair) * configure.in: * kerberos_v4.c: don't include if POSIX_TERMIOS is defined. Sat Jul 16 09:16:33 1994 Tom Yu (tlyu at dragons-lair) * configure.in: hopefully make dbm libs dtrt Sat Jul 16 01:59:02 1994 Theodore Y. Ts'o (tytso at tsx-11) * do_as_req.c: Sanitie error return codes * kdc_util.c (validate_tgs_request): Fix error handling for bogus TGS renew/forward/etc. requests. Sanitize error return codes. Fri Jul 8 00:33:45 1994 Tom Yu (tlyu at dragons-lair) * configure.in: * Makefile.in: back out changes because of possible breakage under Ultrix, among other things Wed Jul 6 22:54:59 1994 Tom Yu (tlyu at dragons-lair) * configure.in: * Makefile.in: fixes to suck in -lndbm or -ldbm if needed Tue Jun 28 19:43:54 1994 Tom Yu (tlyu at dragons-lair) * main.c: fix explicit calls to initialize_foo_error_table * do_tgs_req.c: * configure.in: folding in Harry's changes