blob: 8abd67adb4f05abc0325296e2186a15c70bf083c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
Wed Jan 25 16:54:40 1995 Chris Provenzano (proven@mit.edu)
* Removed all narrow types and references to wide.h and narrow.h
Fri Jan 13 15:23:47 1995 Chris Provenzano (proven@mit.edu)
* Added krb5_context to all krb5_routines
Thu Dec 8 00:33:05 1994 <tytso@rsx-11.mit.edu>
* do_tgs_req.c (prepare_error_tgs): Don't free the passed in
ticket; it will be freed as part of other structures.
* do_tgs_req.c (process_tgs_req): Set the encryption type in the
reply structure, and set the eblock type accordingly.
Wed Dec 7 13:36:34 1994 <tytso@rsx-11.mit.edu>
* do_as_req.c (process_as_req): Set the encryption type in the
reply_encpart structure.
* kdc_util.c (validate_as_request):
* policy.c (against_local_policy_as): Move requirement that an AS
request must include the addresses field to the local
policy routine. (Not required by RFC).
* main.c (setup_com_err): Initialize the kdc5 error table (the
kdb5 error table is already initialized)
Wed Nov 30 16:37:26 1994 Theodore Y. Ts'o (tytso@dcl)
* confiugre.in: Add appropriate help text for --with-krb4
option.
Mon Nov 21 17:23:50 1994 Theodore Y. Ts'o (tytso@dcl)
* do_tgs_req.c (process_tgs_req):
* do_as_req.c (process_as_req): Use the list of encryption types
passed as part of the KDC request to determine which
encryption to use for encrypting the ticket. The
encryption must be one that is supported by the KDC, as
well as being one which is marked as being supported by
the server of the ticket. In a AS request, also use this
encryption for encrypting the KDC response. In a TGS
request, use the encryption type of the TGT authenticator
to determine how to encrypt the KDC response.
Tue Nov 8 17:51:30 1994 Theodore Y. Ts'o (tytso@dcl)
* do_tgs_req.c (process_tgs_req): Use published interface to call
krb5_random_key().
Mon Nov 7 22:11:01 1994 Theodore Y. Ts'o (tytso@dcl)
* kerberos_v4.c: Don't define functions manually, but pull in the
appropriate include files (com_err.h, krb5/ext-proto.h,
krb5/los-proto.h, etc.)
* kdc_util.c (kdc_process_tgs_req): Fix lineage check so that we
don't fail if we're cross-authenticating with a realm with
the same length as our own. ('||' should have been '&&')
Fri Nov 4 17:47:46 1994 Theodore Y. Ts'o (tytso@dcl)
* do_as_req.c (process_as_req): Use published interface to call
krb5_random_key().
Fri Oct 14 00:31:14 1994 Theodore Y. Ts'o (tytso@dcl)
* main.c (process_args): Select the cryptosystem to be used using
krb5_use_cstype() instead of using a implementation
specific assignment. Also, allow the encryption type to
be specified using a command line option.
Tue Oct 11 22:11:09 1994 Theodore Y. Ts'o (tytso@dcl)
* do_as_req.c (process_as_req): Don't assume that the request
server's realm name is null terminated. Compare the
request server against changepw/kerberos using
krb5_principal_compare.
Tue Oct 4 16:42:16 1994 Theodore Y. Ts'o (tytso@dcl)
* kdc_util.c (kdc_rdreq_keyproc): Add widen.h and narrow.h around
keyproc call so that the argument types are widened.
Mon Oct 3 13:13:48 1994 Theodore Y. Ts'o (tytso@dcl)
* Makefile.in: Use $(srcdir) to find manual page for make install.
* Makefile.in: Remove krb5kdc on make clean
Fri Sep 30 22:13:13 1994 Theodore Y. Ts'o (tytso@dcl)
* extern.c: Add placeholder for magic number
Thu Sep 29 00:03:59 1994 Theodore Y. Ts'o (tytso@dcl)
* Makefile.in: Relink executable when library changes.
Wed Sep 21 17:40:56 1994 Theodore Y. Ts'o (tytso@dcl)
* kdc_util.c, kdc_util.h (realm_compare): Change realm_compare so
that both arguments are principals. This makes it less
confusing....
* kdc_util.c (add_to_transited): Folded in Tony Andrea's changes
so that add_to_transited doesn't assume that the contents
of a krb5_data->data are null terminated.
* do_tgs_req.c (process_tgs_req): Add the realm of the presented
tgt if it is different from the local realm (cross-realm) and it
is different than the realm of the client (since the realm of
the client is already implicitly part of the transited list and
should not be explicitly listed).
Thu Aug 18 18:17:59 1994 Theodore Y. Ts'o (tytso at tsx-11)
* configure.in:
* Makefile.in: Move optional link with $(KRB4)/lib/libdes.a to
configure.in.
Thu Aug 4 15:13:27 1994 Tom Yu (tlyu@dragons-lair)
* configure.in:
* kerberos_v4.c: don't include <sgtty.h> if POSIX_TERMIOS is
defined.
Sat Jul 16 09:16:33 1994 Tom Yu (tlyu at dragons-lair)
* configure.in: hopefully make dbm libs dtrt
Sat Jul 16 01:59:02 1994 Theodore Y. Ts'o (tytso at tsx-11)
* do_as_req.c: Sanitie error return codes
* kdc_util.c (validate_tgs_request): Fix error handling for bogus
TGS renew/forward/etc. requests. Sanitize error return codes.
Fri Jul 8 00:33:45 1994 Tom Yu (tlyu at dragons-lair)
* configure.in:
* Makefile.in: back out changes because of possible breakage under
Ultrix, among other things
Wed Jul 6 22:54:59 1994 Tom Yu (tlyu at dragons-lair)
* configure.in:
* Makefile.in: fixes to suck in -lndbm or -ldbm if needed
Tue Jun 28 19:43:54 1994 Tom Yu (tlyu at dragons-lair)
* main.c: fix explicit calls to initialize_foo_error_table
* do_tgs_req.c:
* configure.in: folding in Harry's changes
|
