source: heimdal/trunk/ChangeLog.1999@ 9

Last change on this file since 9 was 1, checked in by Paul Smedley, 10 years ago

Initial commit of Heimdal 1.5.3
File size: 62.1 KB
Line 
11999-12-30 Assar Westerlund <assar@sics.se>
2
3 * configure.in (krb4): use `-ldes' in tests
4
51999-12-26 Assar Westerlund <assar@sics.se>
6
7 * lib/hdb/print.c (event2string): handle events without principal.
8 From Luke Howard <lukeh@PADL.COM>
9
101999-12-25 Assar Westerlund <assar@sics.se>
11
12 * Release 0.2j
13
14Tue Dec 21 18:03:17 1999 Assar Westerlund <assar@sics.se>
15
16 * lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
17 related systems
18
19 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
20 related systems
21
22 * include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and
23 related systems
24
251999-12-20 Assar Westerlund <assar@sics.se>
26
27 * Release 0.2i
28
291999-12-20 Assar Westerlund <assar@sics.se>
30
31 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1
32
33 * lib/krb5/send_to_kdc.c (send_via_proxy): free data
34 * lib/krb5/send_to_kdc.c (send_via_proxy): new function use
35 getaddrinfo instead of gethostbyname{,2}
36 * lib/krb5/get_for_creds.c: use getaddrinfo instead of
37 getnodebyname{,2}
38
391999-12-17 Assar Westerlund <assar@sics.se>
40
41 * Release 0.2h
42
431999-12-17 Assar Westerlund <assar@sics.se>
44
45 * Release 0.2g
46
471999-12-16 Assar Westerlund <assar@sics.se>
48
49 * lib/krb5/Makefile.am: bump version to 6:2:1
50
51 * lib/krb5/principal.c (krb5_sname_to_principal): handle
52 ai_canonname not being set
53 * lib/krb5/expand_hostname.c (krb5_expand_hostname): handle
54 ai_canonname not being set
55
56 * appl/test/uu_server.c: print messages to stderr
57 * appl/test/tcp_server.c: print messages to stderr
58 * appl/test/nt_gss_server.c: print messages to stderr
59 * appl/test/gssapi_server.c: print messages to stderr
60
61 * appl/test/tcp_client.c (proto): remove shadowing `context'
62 * appl/test/common.c (client_doit): add forgotten ntohs
63
641999-12-13 Assar Westerlund <assar@sics.se>
65
66 * configure.in (VERISON): bump to 0.2g-pre
67
681999-12-12 Assar Westerlund <assar@sics.se>
69
70 * lib/krb5/principal.c (krb5_425_conv_principal_ext): be more
71 robust and handle extra dot at the beginning of default_domain
72
731999-12-12 Assar Westerlund <assar@sics.se>
74
75 * Release 0.2f
76
771999-12-12 Assar Westerlund <assar@sics.se>
78
79 * lib/krb5/Makefile.am: bump version to 6:1:1
80
81 * lib/krb5/changepw.c (get_kdc_address): use
82 `krb5_get_krb_changepw_hst'
83
84 * lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add
85
86 * lib/krb5/get_host_realm.c: add support for _kerberos.domain
87 (according to draft-ietf-cat-krb-dns-locate-01.txt)
88
891999-12-06 Assar Westerlund <assar@sics.se>
90
91 * Release 0.2e
92
931999-12-06 Assar Westerlund <assar@sics.se>
94
95 * lib/krb5/changepw.c (krb5_change_password): use the correct
96 address
97
98 * lib/krb5/Makefile.am: bump version to 6:0:1
99
100 * lib/asn1/Makefile.am: bump version to 1:4:0
101
1021999-12-04 Assar Westerlund <assar@sics.se>
103
104 * configure.in: move AC_KRB_IPv6 to make sure it's performed
105 before AC_BROKEN
106 (el_init): use new feature of AC_FIND_FUNC_NO_LIBS
107
108 * appl/test/uu_client.c: use client_doit
109 * appl/test/test_locl.h (client_doit): add prototype
110 * appl/test/tcp_client.c: use client_doit
111 * appl/test/nt_gss_client.c: use client_doit
112 * appl/test/gssapi_client.c: use client_doit
113 * appl/test/common.c (client_doit): move identical code here and
114 start using getaddrinfo
115
116 * appl/kf/kf.c (doit): rewrite to use getaddrinfo
117 * kdc/hprop.c: re-write to use getaddrinfo
118 * lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo
119 * lib/krb5/expand_hostname.c (krb5_expand_hostname): use
120 getaddrinfo
121 * lib/krb5/changepw.c: re-write to use getaddrinfo
122 * lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo
123
1241999-12-03 Assar Westerlund <assar@sics.se>
125
126 * configure.in (BROKEN): check for freeaddrinfo, getaddrinfo,
127 getnameinfo, gai_strerror
128 (socklen_t): check for
129
1301999-12-02 Johan Danielsson <joda@pdc.kth.se>
131
132 * lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key
133
1341999-11-23 Assar Westerlund <assar@sics.se>
135
136 * lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes
137 within unicode characters. this should probably be done in some
138 arbitrarly complex way to do it properly and you would have to
139 know what character encoding was used for the password and salt
140 string.
141
142 * lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0
143 (INADDR_ANY)
144 (ipv6_uninteresting): remove unused macro
145
1461999-11-22 Johan Danielsson <joda@pdc.kth.se>
147
148 * lib/krb5/krb5.h: rc4->arcfour
149
150 * lib/krb5/crypto.c: rc4->arcfour
151
1521999-11-17 Assar Westerlund <assar@sics.se>
153
154 * lib/krb5/krb5_locl.h: add <rc4.h>
155 * lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4
156 * lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might
157 not be totally different from some small company up in the
158 north-west corner of the US
159
160 * lib/krb5/get_addrs.c (find_all_addresses): change code to
161 actually increment buf_size
162
1631999-11-14 Assar Westerlund <assar@sics.se>
164
165 * lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces'
166 * lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces
167 scanning optional
168 * lib/krb5/context.c (init_context_from_config_file): set
169 `scan_interfaces'
170
171 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c
172 * lib/krb5/add_et_list.c (krb5_add_et_list): new function
173
1741999-11-12 Assar Westerlund <assar@sics.se>
175
176 * lib/krb5/get_default_realm.c (krb5_get_default_realm,
177 krb5_get_default_realms): set realms if they were unset
178 * lib/krb5/context.c (init_context_from_config_file): don't
179 initialize default realms here. it's done lazily instead.
180
181 * lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned
182 * lib/asn1/gen_glue.c (generate_2int, generate_units): make sure
183 bit constants are unsigned
184 * lib/asn1/gen.c (define_type): make length in sequences be
185 unsigned.
186
187 * configure.in: remove duplicate test for setsockopt test for
188 struct tm.tm_isdst
189
190 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate
191 preauthentication information if we get back ERR_PREAUTH_REQUIRED
192 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove
193 preauthentication generation code. it's now in krb5_get_in_cred
194
195 * configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct
196 tm.tm_gmtoff and timezone
197
1981999-11-11 Johan Danielsson <joda@pdc.kth.se>
199
200 * kdc/main.c: make this work with multi-db
201
202 * kdc/kdc_locl.h: make this work with multi-db
203
204 * kdc/config.c: make this work with multi-db
205
2061999-11-09 Johan Danielsson <joda@pdc.kth.se>
207
208 * kdc/misc.c: update for multi-database code
209
210 * kdc/main.c: update for multi-database code
211
212 * kdc/kdc_locl.h: update
213
214 * kdc/config.c: allow us to have more than one database
215
2161999-11-04 Assar Westerlund <assar@sics.se>
217
218 * Release 0.2d
219
220 * lib/krb5/Makefile.am: bump version to 5:0:0 to be safe
221 (krb5_context_data has changed and some code do (might) access
222 fields directly)
223
224 * lib/krb5/krb5.h (krb5_context_data): add `etypes_des'
225
226 * lib/krb5/get_cred.c (init_tgs_req): use
227 krb5_keytype_to_enctypes_default
228
229 * lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new
230 function
231
232 * lib/krb5/context.c (set_etypes): new function
233 (init_context_from_config_file): set both `etypes' and `etypes_des'
234
2351999-11-02 Assar Westerlund <assar@sics.se>
236
237 * configure.in (VERSION): bump to 0.2d-pre
238
2391999-10-29 Assar Westerlund <assar@sics.se>
240
241 * lib/krb5/principal.c (krb5_parse_name): check memory allocations
242
2431999-10-28 Assar Westerlund <assar@sics.se>
244
245 * Release 0.2c
246
247 * lib/krb5/dump_config.c (print_tree): check for empty tree
248
249 * lib/krb5/string-to-key-test.c (tests): update the test cases
250 with empty principals so that they actually use an empty realm and
251 not the default. use the correct etype for 3DES
252
253 * lib/krb5/Makefile.am: bump version to 4:1:0
254
255 * kdc/config.c (configure): more careful with the port string
256
2571999-10-26 Assar Westerlund <assar@sics.se>
258
259 * Release 0.2b
260
2611999-10-20 Assar Westerlund <assar@sics.se>
262
263 * lib/krb5/Makefile.am: bump version to 4:0:0
264 (krb524_convert_creds_kdc and potentially some other functions
265 have changed prototypes)
266
267 * lib/hdb/Makefile.am: bump version to 4:0:1
268
269 * lib/asn1/Makefile.am: bump version to 1:3:0
270
271 * configure.in (LIB_roken): add dbopen. getcap in roken
272 references dbopen and with shared libraries we need to add this
273 dependency.
274
275 * lib/krb5/verify_krb5_conf.c (main): support speicifying the
276 configuration file to test on the command line
277
278 * lib/krb5/config_file.c (parse_binding): handle line with no
279 whitespace before =
280 (krb5_config_parse_file_debug): set lineno earlier so that we don't
281 use it unitialized
282
283 * configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need
284 more include files for these tests
285
286 * lib/krb5/set_default_realm.c (krb5_set_default_realm): use
287 krb5_config_get_strings, which means that your configuration file
288 should look like:
289
290 [libdefaults]
291 default_realm = realm1 realm2 realm3
292
293 * lib/krb5/set_default_realm.c (config_binding_to_list): fix
294 copy-o. From Michal Vocu <michal@karlin.mff.cuni.cz>
295
296 * kdc/config.c (configure): add a missing strdup. From Michal
297 Vocu <michal@karlin.mff.cuni.cz>
298
2991999-10-17 Assar Westerlund <assar@sics.se>
300
301 * Release 0.2a
302
303 * configure.in: only test for db.h with using berkeley_db. remember
304 to link with LIB_tgetent when checking for el_init. add xnlock
305
306 * appl/Makefile.am: add xnlock
307
308 * kdc/kerberos5.c (find_etype): support null keys
309
310 * kdc/kerberos4.c (get_des_key): support null keys
311
312 * lib/krb5/crypto.c (krb5_get_wrapped_length): more correct
313 calculation
314
3151999-10-16 Johan Danielsson <joda@pdc.kth.se>
316
317 * kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc
318
3191999-10-12 Johan Danielsson <joda@pdc.kth.se>
320
321 * lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning
322
3231999-10-10 Assar Westerlund <assar@sics.se>
324
325 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm
326
327 * lib/krb5/krb5.h (krb5_ccache_data): make `ops' const
328
329 * lib/krb5/crypto.c (krb5_string_to_salttype): new function
330
331 * **/*.[ch]: const-ize
332
3331999-10-06 Assar Westerlund <assar@sics.se>
334
335 * lib/krb5/creds.c (krb5_compare_creds): const-ify
336
337 * lib/krb5/cache.c: clean-up and comment-up
338
339 * lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the
340 strings
341
342 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the
343 correct realm part
344
345 * kdc/connect.c (handle_tcp): things work much better when ret is
346 initialized
347
3481999-10-03 Assar Westerlund <assar@sics.se>
349
350 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the
351 type of the session key
352
353 * lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell
354 correctly
355
356 * lib/krb5/creds.c (krb5_compare_creds): fix spelling of
357 krb5_enctypes_compatible_keys
358
359 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new
360 credentials from the KDC if the existing one doesn't have a DES
361 session key.
362
363 * lib/45/get_ad_tkt.c (get_ad_tkt): update to new
364 krb524_convert_creds_kdc
365
3661999-10-03 Johan Danielsson <joda@pdc.kth.se>
367
368 * lib/krb5/keytab_keyfile.c: make krb5_akf_ops const
369
370 * lib/krb5/keytab_memory.c: make krb5_mkt_ops const
371
372 * lib/krb5/keytab_file.c: make krb5_fkt_ops const
373
3741999-10-01 Assar Westerlund <assar@sics.se>
375
376 * lib/krb5/config_file.c: rewritten to allow error messages
377
378 * lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf
379 (libkrb5_la_SOURCES): add config_file_netinfo.c
380
381 * lib/krb5/verify_krb5_conf.c: new program for verifying that
382 krb5.conf is corret
383
384 * lib/krb5/config_file_netinfo.c: moved netinfo code here from
385 config_file.c
386
3871999-09-28 Assar Westerlund <assar@sics.se>
388
389 * kdc/hpropd.c (dump_krb4): kludge default_realm
390
391 * lib/asn1/check-der.c: add test cases for Generalized time and
392 make sure we return the correct value
393
394 * lib/asn1/der_put.c: simplify by using der_put_length_and_tag
395
396 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of
397 krb5_verify_user that tries in all the local realms
398
399 * lib/krb5/set_default_realm.c: add support for having several
400 default realms
401
402 * lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms'
403
404 * lib/krb5/get_default_realm.c (krb5_get_default_realms): add
405
406 * lib/krb5/krb5.h (krb5_context_data): change `default_realm' to
407 `default_realms'
408
409 * lib/krb5/context.c: change from `default_realm' to
410 `default_realms'
411
412 * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use
413 krb5_get_default_realms
414
415 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c
416
417 * lib/krb5/copy_host_realm.c: new file
418
4191999-09-27 Johan Danielsson <joda@pdc.kth.se>
420
421 * lib/asn1/der_put.c (encode_generalized_time): encode length
422
423 * lib/krb5/recvauth.c: new function `krb5_recvauth_match_version'
424 that allows more intelligent matching of the application version
425
4261999-09-26 Assar Westerlund <assar@sics.se>
427
428 * lib/asn1/asn1_print.c: add err.h
429
430 * kdc/config.c (configure): use parse_bytes
431
432 * appl/test/nt_gss_common.c: use the correct header file
433
4341999-09-24 Johan Danielsson <joda@pdc.kth.se>
435
436 * kuser/klist.c: add a `--cache' flag
437
438 * kuser/kinit.c (main): only get default value for `get_v4_tgt' if
439 it's explicitly set in krb5.conf
440
4411999-09-23 Assar Westerlund <assar@sics.se>
442
443 * lib/asn1/asn1_print.c (tag_names); add another univeral tag
444
445 * lib/asn1/der.h: update universal tags
446
4471999-09-22 Assar Westerlund <assar@sics.se>
448
449 * lib/asn1/asn1_print.c (loop): print length of octet string
450
4511999-09-21 Johan Danielsson <joda@pdc.kth.se>
452
453 * admin/ktutil.c (kt_get): add `--help'
454
4551999-09-21 Assar Westerlund <assar@sics.se>
456
457 * kuser/Makefile.am: add kdecode_ticket
458
459 * kuser/kdecode_ticket.c: new debug program
460
461 * appl/test/nt_gss_server.c: new program to test against `Sample *
462 SSPI Code' in Windows 2000 RC1 SDK.
463
464 * appl/test/Makefile.am: add nt_gss_client and nt_gss_server
465
466 * lib/asn1/der_get.c (decode_general_string): remember to advance
467 ret over the length-len
468
469 * lib/asn1/Makefile.am: add asn1_print
470
471 * lib/asn1/asn1_print.c: new program for printing DER-structures
472
473 * lib/asn1/der_put.c: make functions more consistent
474
475 * lib/asn1/der_get.c: make functions more consistent
476
4771999-09-20 Johan Danielsson <joda@pdc.kth.se>
478
479 * kdc/kerberos5.c: be more informative in pa-data error messages
480
4811999-09-16 Assar Westerlund <assar@sics.se>
482
483 * configure.in: test for strlcpy, strlcat
484
4851999-09-14 Assar Westerlund <assar@sics.se>
486
487 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return
488 KRB5_LIBOS_PWDINTR when interrupted
489
490 * lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return
491 value from des_read_pw_string
492
493 * kuser/kinit.c (main): don't print any error if reading the
494 password was interrupted
495
496 * kpasswd/kpasswd.c (main): don't print any error if reading the
497 password was interrupted
498
499 * kdc/string2key.c (main): check the return value from fgets
500
501 * kdc/kstash.c (main): check return value from des_read_pw_string
502
503 * admin/ktutil.c (kt_add): check the return-value from fgets and
504 overwrite the password for paranoid reasons
505
506 * lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the
507 newline if it's there
508
5091999-09-13 Assar Westerlund <assar@sics.se>
510
511 * kdc/hpropd.c (main): remove bogus error with `--print'. remove
512 sysloging of number of principals transferred
513
514 * kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL
515 principals
516 (main): get rid of bogus opening of hdb database when propagating
517 ka-server database
518
5191999-09-12 Assar Westerlund <assar@sics.se>
520
521 * lib/krb5/krb5_locl.h (O_BINARY): add fallback definition
522
523 * lib/krb5/krb5.h (krb5_context_data): add keytab types
524
525 * configure.in: revert back awk test, not worked around in
526 roken.awk
527
528 * lib/krb5/keytab_krb4.c: remove O_BINARY
529
530 * lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's. From
531 Love <lha@e.kth.se>
532
533 * lib/krb5/keytab_file.c: remove O_BINARY
534
535 * lib/krb5/keytab.c: move the list of keytab types to the context
536
537 * lib/krb5/fcache.c: remove O_BINARY
538
539 * lib/krb5/context.c (init_context_from_config_file): register all
540 standard cache and keytab types
541 (krb5_free_context): free `kt_types'
542
543 * lib/krb5/cache.c (krb5_cc_resolve): move the registration of the
544 standard types of credential caches to context
545
546 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c
547
5481999-09-10 Assar Westerlund <assar@sics.se>
549
550 * lib/krb5/keytab.c: add comments and clean-up
551
552 * admin/ktutil.c: add `ktutil copy'
553
554 * lib/krb5/keytab_krb4.c: new file
555
556 * lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field
557
558 * lib/krb5/Makefile.am: add keytab_krb4.c
559
560 * lib/krb5/keytab.c: add krb4 and correct some if's
561
562 * admin/srvconvert.c (srvconv): move common code
563
564 * lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables
565
566 * lib/krb5/keytab.c: move out file and memory functions
567
568 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c,
569 keytab_memory.c
570
571 * lib/krb5/keytab_memory.c: new file
572
573 * lib/krb5/keytab_file.c: new file
574
575 * kpasswd/kpasswdd.c: move out password quality functions
576
5771999-09-07 Assar Westerlund <assar@sics.se>
578
579 * lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c. From
580 Love <lha@e.kth.se>
581
582 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check
583 return value from `krb5_sendto_kdc'
584
5851999-09-06 Assar Westerlund <assar@sics.se>
586
587 * lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and
588 remove the sending of data. add a parameter `limit'. let callers
589 send the date themselves (and preferably with net_write on tcp
590 sockets)
591 (send_and_recv_tcp): read first the length field and then only that
592 many bytes
593
5941999-09-05 Assar Westerlund <assar@sics.se>
595
596 * kdc/connect.c (handle_tcp): try to print warning `TCP data of
597 strange type' less often
598
599 * lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly.
600 return on EOF. always free data. check return value from
601 realloc.
602 (send_and_recv_tcp, send_and_recv_http): check advertised length
603 against actual length
604
6051999-09-01 Johan Danielsson <joda@pdc.kth.se>
606
607 * configure.in: check for sgi capabilities
608
6091999-08-27 Johan Danielsson <joda@pdc.kth.se>
610
611 * lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return
612 extra addresses
613
614 * kpasswd/kpasswdd.c: use HDB keytabs; change some error messages;
615 add --realm flag
616
617 * lib/krb5/address.c (krb5_append_addresses): remove duplicates
618
6191999-08-26 Johan Danielsson <joda@pdc.kth.se>
620
621 * lib/hdb/keytab.c: HDB keytab backend
622
6231999-08-25 Johan Danielsson <joda@pdc.kth.se>
624
625 * lib/krb5/keytab.c
626 (krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL
627 pointer
628
6291999-08-24 Johan Danielsson <joda@pdc.kth.se>
630
631 * kpasswd/kpasswdd.c: add `--keytab' flag
632
6331999-08-23 Assar Westerlund <assar@sics.se>
634
635 * lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr'
636 instead of the non-standard `s6_addr32'. From Yoshinobu Inoue
637 <shin@kame.net> by way of the KAME repository
638
6391999-08-18 Assar Westerlund <assar@sics.se>
640
641 * configure.in (--enable-new-des3-code): remove check for `struct
642 addrinfo'
643
644 * lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable
645 des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards
646 compatability
647
648 * lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key
649 derivation) just got assigned etype 16 by <bcn@isi.edu>. keep the
650 old etype at 7.
651
6521999-08-16 Assar Westerlund <assar@sics.se>
653
654 * lib/krb5/sendauth.c (krb5_sendauth): only look at errno if
655 krb5_net_read actually returns -1
656
657 * lib/krb5/recvauth.c (krb5_recvauth): only look at errno if
658 krb5_net_read actually returns -1
659
660 * appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't
661 returned -1
662
663 * appl/test/tcp_server.c (proto): only trust errno if
664 krb5_net_read actually returns -1
665
666 * appl/kf/kfd.c (proto): be more careful with the return value
667 from krb5_net_read
668
6691999-08-13 Assar Westerlund <assar@sics.se>
670
671 * lib/krb5/get_addrs.c (get_addrs_int): try the different ways
672 sequentially instead of just one. this helps if your heimdal was
673 built with v6-support but your kernel doesn't have it, for
674 example.
675
6761999-08-12 Assar Westerlund <assar@sics.se>
677
678 * kdc/hpropd.c: add inetd flag. default means try to figure out
679 if stdin is a socket or not.
680
681 * Makefile.am (ACLOCAL): just use `cf', this variable is only used
682 when the current directory is $(top_srcdir) anyways and having
683 $(top_srcdir) there breaks if it's a relative path
684
6851999-08-09 Johan Danielsson <joda@pdc.kth.se>
686
687 * configure.in: check for setproctitle
688
6891999-08-05 Assar Westerlund <assar@sics.se>
690
691 * lib/krb5/principal.c (krb5_sname_to_principal): remember to call
692 freehostent
693
694 * appl/test/tcp_client.c: call freehostent
695
696 * appl/kf/kf.c (doit): call freehostent
697
698 * appl/kf/kf.c: make v6 friendly and simplify
699
700 * appl/kf/kfd.c: make v6 friendly and simplify
701
702 * appl/test/tcp_server.c: simplify by using krb5_err instead of
703 errx
704
705 * appl/test/tcp_client.c: simplify by using krb5_err instead of
706 errx
707
708 * appl/test/tcp_server.c: make v6 friendly and simplify
709
710 * appl/test/tcp_client.c: make v6 friendly and simplify
711
7121999-08-04 Assar Westerlund <assar@sics.se>
713
714 * Release 0.1m
715
7161999-08-04 Assar Westerlund <assar@sics.se>
717
718 * kuser/kinit.c (main): some more KRB4-conditionalizing
719
720 * lib/krb5/get_in_tkt.c: type correctness
721
722 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in
723 flags. From Miroslav Ruda <ruda@ics.muni.cz>
724
725 * kuser/kinit.c (main): add config file support for forwardable
726 and krb4 support. From Miroslav Ruda <ruda@ics.muni.cz>
727
728 * kdc/kerberos5.c (as_rep): add an empty X500-compress string as
729 transited.
730 (fix_transited_encoding): check length.
731 From Miroslav Ruda <ruda@ics.muni.cz>
732
733 * kdc/hpropd.c (dump_krb4): check the realm so that we don't dump
734 principals in some other realm. From Miroslav Ruda
735 <ruda@ics.muni.cz>
736 (main): rename sa_len -> sin_len, sa_lan is a define on some
737 platforms.
738
739 * appl/kf/kfd.c: add regpag support. From Miroslav Ruda
740 <ruda@ics.muni.cz>
741
742 * appl/kf/kf.c: add `-G' and forwardable option in krb5.conf.
743 From Miroslav Ruda <ruda@ics.muni.cz>
744
745 * lib/krb5/config_file.c (parse_list): don't run past end of line
746
747 * appl/test/gss_common.h: new prototypes
748
749 * appl/test/gssapi_client.c: use gss_err instead of abort
750
751 * appl/test/gss_common.c (gss_verr, gss_err): add
752
7531999-08-03 Assar Westerlund <assar@sics.se>
754
755 * lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this
756 otherwise it doesn't build with shared libraries
757
758 * kdc/hpropd.c: v6-ify
759
760 * kdc/hprop.c: v6-ify
761
7621999-08-01 Assar Westerlund <assar@sics.se>
763
764 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname
765
7661999-07-31 Assar Westerlund <assar@sics.se>
767
768 * lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new
769 function that takes a FQDN
770
771 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c
772
773 * lib/krb5/expand_hostname.c: new file
774
7751999-07-28 Assar Westerlund <assar@sics.se>
776
777 * Release 0.1l
778
7791999-07-28 Assar Westerlund <assar@sics.se>
780
781 * lib/asn1/Makefile.am: bump version to 1:2:0
782
783 * lib/krb5/Makefile.am: bump version to 3:1:0
784
785 * configure.in: more inet_pton to roken
786
787 * lib/krb5/principal.c (krb5_sname_to_principal): use
788 getipnodebyname
789
7901999-07-26 Assar Westerlund <assar@sics.se>
791
792 * Release 0.1k
793
7941999-07-26 Johan Danielsson <joda@pdc.kth.se>
795
796 * lib/krb5/Makefile.am: bump version number (changed function
797 signatures)
798
799 * lib/hdb/Makefile.am: bump version number (changes to some
800 function signatures)
801
8021999-07-26 Assar Westerlund <assar@sics.se>
803
804 * lib/krb5/Makefile.am: bump version to 3:0:2
805
806 * lib/hdb/Makefile.am: bump version to 2:1:0
807
808 * lib/asn1/Makefile.am: bump version to 1:1:0
809
8101999-07-26 Assar Westerlund <assar@sics.se>
811
812 * Release 0.1j
813
8141999-07-26 Assar Westerlund <assar@sics.se>
815
816 * configure.in: rokenize inet_ntop
817
818 * lib/krb5/store_fd.c: lots of changes from size_t to ssize_t
819
820 * lib/krb5/store_mem.c: lots of changes from size_t to ssize_t
821
822 * lib/krb5/store_emem.c: lots of changes from size_t to ssize_t
823
824 * lib/krb5/store.c: lots of changes from size_t to ssize_t
825 (krb5_ret_stringz): check return value from realloc
826
827 * lib/krb5/mk_safe.c: some type correctness
828
829 * lib/krb5/mk_priv.c: some type correctness
830
831 * lib/krb5/krb5.h (krb5_storage): change return values of
832 functions from size_t to ssize_t
833
8341999-07-24 Assar Westerlund <assar@sics.se>
835
836 * Release 0.1i
837
838 * configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \#
839 in lib/roken/roken.awk
840
841 * lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to
842 step over addresses if there's no `sa_lan' field
843
844 * lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by
845 using `struct sockaddr_storage'
846
847 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using
848 `struct sockaddr_storage'
849
850 * lib/krb5/changepw.c (krb5_change_password): simplify by using
851 `struct sockaddr_storage'
852
853 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd):
854 simplify by using `struct sockaddr_storage'
855
856 * kpasswd/kpasswdd.c (*): simplify by using `struct
857 sockaddr_storage'
858
859 * kdc/connect.c (*): simplify by using `struct sockaddr_storage'
860
861 * configure.in (sa_family_t): just test for existence
862 (sockaddr_storage): also specify include file
863
864 * configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i
865 (sa_family_t): test for
866 (struct sockaddr_storage): test for
867
868 * kdc/hprop.c (propagate_database): typo, NULL should be
869 auth_context
870
871 * lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of
872 AF_INET6
873
874 * appl/kf/kf.c (main): use warnx
875
876 * appl/kf/kf.c (proto): remove shadowing context
877
878 * lib/krb5/get_addrs.c (find_all_addresses): try to handle the
879 case of getting back an `sockaddr_in6' address when sizeof(struct
880 sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to
881 tell us how large the address is. This obviously doesn't work
882 with unknown protocol types.
883
8841999-07-24 Assar Westerlund <assar@sics.se>
885
886 * Release 0.1h
887
8881999-07-23 Assar Westerlund <assar@sics.se>
889
890 * appl/kf/kfd.c: clean-up and more paranoia
891
892 * etc/services.append: add kf
893
894 * appl/kf/kf.c: rename tk_file to ccache for consistency. clean-up
895
8961999-07-22 Assar Westerlund <assar@sics.se>
897
898 * lib/krb5/n-fold-test.c (main): print the correct data
899
900 * appl/Makefile.am (SUBDIRS): add kf
901
902 * appl/kf: new program. From Miroslav Ruda <ruda@ics.muni.cz>
903
904 * kdc/hprop.c: declare some variables unconditionally to simplify
905 things
906
907 * kpasswd/kpasswdd.c: initialize kadm5 connection for every change
908 (otherwise the modifier in the database doesn't get set)
909
910 * kdc/hpropd.c: clean-up and re-organize
911
912 * kdc/hprop.c: clean-up and re-organize
913
914 * configure.in (SunOS): define to xy for SunOS x.y
915
9161999-07-19 Assar Westerlund <assar@sics.se>
917
918 * configure.in (AC_BROKEN): test for copyhostent, freehostent,
919 getipnodebyaddr, getipnodebyname
920
9211999-07-15 Assar Westerlund <assar@sics.se>
922
923 * lib/asn1/check-der.c: more test cases for integers
924
925 * lib/asn1/der_length.c (length_int): handle the case of the
926 largest negative integer by not calling abs
927
9281999-07-14 Assar Westerlund <assar@sics.se>
929
930 * lib/asn1/check-der.c (generic_test): check malloc return value
931 properly
932
933 * lib/krb5/Makefile.am: add string_to_key_test
934
935 * lib/krb5/prog_setup.c (krb5_program_setup): always initialize
936 the context
937
938 * lib/krb5/n-fold-test.c (main): return a relevant return value
939
940 * lib/krb5/krbhst.c: do SRV lookups for admin server as well.
941 some clean-up.
942
9431999-07-12 Assar Westerlund <assar@sics.se>
944
945 * configure.in: handle not building X programs
946
9471999-07-06 Assar Westerlund <assar@sics.se>
948
949 * lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate
950 variable
951 (ipv6_sockaddr2port): fix typo
952
953 * etc/services.append: beginning of a file with services
954
955 * lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if
956 there's no prefix. also clean-up a little bit.
957
958 * kdc/hprop.c (--kaspecials): new flag for handling special KA
959 server entries. From "Brandon S. Allbery KF8NH"
960 <allbery@kf8nh.apk.net>
961
9621999-07-05 Assar Westerlund <assar@sics.se>
963
964 * kdc/connect.c (handle_tcp): make sure we have data before
965 starting to look for HTTP
966
967 * kdc/connect.c (handle_tcp): always do getpeername, we can't
968 trust recvfrom to return anything sensible
969
9701999-07-04 Assar Westerlund <assar@sics.se>
971
972 * lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with
973 all enctypes
974
975 * kpasswd/kpasswdd.c (change): fetch the salt-type from the entry
976
977 * admin/srvconvert.c (srvconv): better error messages
978
9791999-07-03 Assar Westerlund <assar@sics.se>
980
981 * lib/krb5/principal.c (unparse_name): error check malloc properly
982
983 * lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc
984 properly
985
986 * lib/krb5/crypto.c (*): do some malloc return-value checks
987 properly
988
989 * lib/hdb/hdb.c (hdb_process_master_key): simplify by using
990 krb5_data_alloc
991
992 * lib/hdb/hdb.c (hdb_process_master_key): check return value from
993 malloc
994
995 * lib/asn1/gen_decode.c (decode_type): fix generation of decoding
996 information for TSequenceOf.
997
998 * kdc/kerberos5.c (get_pa_etype_info): check return value from
999 malloc
1000
10011999-07-02 Assar Westerlund <assar@sics.se>
1002
1003 * lib/asn1/der_copy.c (copy_octet_string): don't fail if length ==
1004 0 and malloc returns NULL
1005
10061999-06-29 Assar Westerlund <assar@sics.se>
1007
1008 * lib/krb5/addr_families.c (ipv6_parse_addr): implement
1009
10101999-06-24 Assar Westerlund <assar@sics.se>
1011
1012 * lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address
1013 as an addrport one
1014
1015 * lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT):
1016 add
1017 (krb5_auth_context): add local and remote port
1018
1019 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the
1020 local and remote address and add them to the krb-cred packet
1021
1022 * lib/krb5/auth_context.c: save the local and remove ports in the
1023 auth_context
1024
1025 * lib/krb5/address.c (krb5_make_addrport): create an address of
1026 type KRB5_ADDRESS_ADDRPORT from (addr, port)
1027
1028 * lib/krb5/addr_families.c (krb5_sockaddr2port): new function for
1029 grabbing the port number out of the sockaddr
1030
10311999-06-23 Assar Westerlund <assar@sics.se>
1032
1033 * admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key.
1034 increase possible verbosity.
1035
1036 * lib/krb5/config_file.c (parse_list): handle blank lines at
1037 another place
1038
1039 * kdc/connect.c (add_port_string): don't return a value
1040
1041 * lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred
1042 cache if the principals are different. close and NULL the old one
1043 so that we create a new one.
1044
1045 * configure.in: move around cgywin et al
1046 (LIB_kdb): set at the end of krb4-block
1047 (krb4): test for krb_enable_debug and krb_disable_debug
1048
10491999-06-16 Assar Westerlund <assar@sics.se>
1050
1051 * kuser/kdestroy.c (main): try to destroy v4 ticket even if the
1052 destruction of the v5 one fails
1053
1054 * lib/krb5/crypto.c (DES3_postproc): new version that does the
1055 right thing
1056 (*): don't put and recover length in 3DES encoding
1057 other small fixes
1058
10591999-06-15 Assar Westerlund <assar@sics.se>
1060
1061 * lib/krb5/get_default_principal.c: rewrite to use
1062 get_default_username
1063
1064 * lib/krb5/Makefile.am: add n-fold-test
1065
1066 * kdc/connect.c: add fallbacks for all lookups by service name
1067 (handle_tcp): break-up and clean-up
1068
10691999-06-09 Assar Westerlund <assar@sics.se>
1070
1071 * lib/krb5/addr_families.c (ipv6_uninteresting): don't consider
1072 the loopback address as uninteresting
1073
1074 * lib/krb5/get_addrs.c: new magic flag to get loopback address if
1075 there are no other addresses.
1076 (krb5_get_all_client_addrs): use that flag
1077
10781999-06-04 Assar Westerlund <assar@sics.se>
1079
1080 * lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the
1081 length
1082 (checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64
1083 (encrypt_internal_derived): don't include the length and don't
1084 decrease by the checksum size twice
1085 (_get_derived_key): the constant should be 5 bytes
1086
10871999-06-02 Johan Danielsson <joda@pdc.kth.se>
1088
1089 * configure.in: use KRB_CHECK_X
1090
1091 * configure.in: check for netinet/ip.h
1092
10931999-05-31 Assar Westerlund <assar@sics.se>
1094
1095 * kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize
1096 on RTLD_NOW
1097
10981999-05-23 Assar Westerlund <assar@sics.se>
1099
1100 * appl/test/uu_server.c: removed unused stuff
1101
1102 * appl/test/uu_client.c: removed unused stuff
1103
11041999-05-21 Assar Westerlund <assar@sics.se>
1105
1106 * kuser/kgetcred.c (main): correct error message
1107
1108 * lib/krb5/crypto.c (verify_checksum): call (*ct->checksum)
1109 directly, avoiding redundant lookups and memory leaks
1110
1111 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free
1112 local and remote addresses
1113
1114 * lib/krb5/get_default_principal.c (get_logname): also try
1115 $USERNAME
1116
1117 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT)
1118
1119 * lib/krb5/principal.c (USE_RESOLVER): try to define only if we
1120 have a libresolv (currently by checking for res_search)
1121
11221999-05-18 Johan Danielsson <joda@pdc.kth.se>
1123
1124 * kdc/connect.c (handle_tcp): remove %-escapes in request
1125
11261999-05-14 Assar Westerlund <assar@sics.se>
1127
1128 * Release 0.1g
1129
1130 * admin/ktutil.c (kt_remove): -t should be -e
1131
1132 * configure.in (CHECK_NETINET_IP_AND_TCP): use
1133
1134 * kdc/hpropd.c: support for dumping to krb4. From Miroslav Ruda
1135 <ruda@ics.muni.cz>
1136
1137 * admin/ktutil.c (kt_add): new option `--no-salt'. From Miroslav
1138 Ruda <ruda@ics.muni.cz>
1139
1140 * configure.in: add cygwin and DOS tests replace sendmsg, recvmsg,
1141 and innetgr with roken versions
1142
1143 * kuser/kgetcred.c: new program
1144
1145Tue May 11 14:09:33 1999 Johan Danielsson <joda@pdc.kth.se>
1146
1147 * lib/krb5/mcache.c: fix paste-o
1148
11491999-05-10 Johan Danielsson <joda@pdc.kth.se>
1150
1151 * configure.in: don't use uname
1152
11531999-05-10 Assar Westerlund <assar@sics.se>
1154
1155 * acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four
1156 arguments :-)
1157
1158 * appl/test/uu_server.c (setsockopt): cast to get rid of a warning
1159
1160 * appl/test/tcp_server.c (setsockopt): cast to get rid of a
1161 warning
1162
1163 * appl/test/tcp_client.c (proto): call krb5_sendauth with ccache
1164 == NULL
1165
1166 * appl/test/gssapi_server.c (setsockopt): cast to get rid of a
1167 warning
1168
1169 * lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by
1170 setting the default ccache.
1171
1172 * configure.in (getsockopt, setsockopt): test for
1173 (AM_INIT_AUTOMAKE): bump version to 0.1g
1174
1175 * appl/Makefile.am (SUBDIRS): add kx
1176
1177 * lib/hdb/convert_db.c (main): handle the case of no master key
1178
11791999-05-09 Assar Westerlund <assar@sics.se>
1180
1181 * Release 0.1f
1182
1183 * kuser/kinit.c: add --noaddresses
1184
1185 * lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an
1186 empty sit of list as to not ask for any addresses.
1187
11881999-05-08 Assar Westerlund <assar@sics.se>
1189
1190 * acconfig.h (_GNU_SOURCE): define this to enable (used)
1191 extensions on glibc-based systems such as linux
1192
11931999-05-03 Assar Westerlund <assar@sics.se>
1194
1195 * lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free
1196 `*out_creds' properly
1197
1198 * lib/krb5/creds.c (krb5_compare_creds): just verify that the
1199 keytypes/enctypes are compatible, not that they are the same
1200
1201 * kuser/kdestroy.c (cache): const-correctness
1202
12031999-05-03 Johan Danielsson <joda@pdc.kth.se>
1204
1205 * lib/hdb/hdb.c (hdb_set_master_key): initialise master key
1206 version
1207
1208 * lib/hdb/convert_db.c: add support for upgrading database
1209 versions
1210
1211 * kdc/misc.c: add flags to fetch
1212
1213 * kdc/kstash.c: unlink keyfile on failure, chmod to 400
1214
1215 * kdc/hpropd.c: add --print option
1216
1217 * kdc/hprop.c: pass flags to hdb_foreach
1218
1219 * lib/hdb/convert_db.c: add some flags
1220
1221 * lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2;
1222 build prototype headers
1223
1224 * lib/hdb/hdb_locl.h: update prototypes
1225
1226 * lib/hdb/print.c: move printable version of entry from kadmin
1227
1228 * lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is
1229 sealed or not; add flags to hdb_foreach
1230
1231 * lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and
1232 NDBM_nextkey
1233
1234 * lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey
1235
1236 * lib/hdb/common.c: add flags to _hdb_{fetch,store}
1237
1238 * lib/hdb/hdb.h: add master_key_version to struct hdb, update
1239 prototypes
1240
1241 * lib/hdb/hdb.asn1: make mkvno optional, update version to 2
1242
1243 * configure.in: --enable-netinfo
1244
1245 * lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO
1246
1247 * config.sub: fix for crays
1248
1249 * config.guess: new version from automake 1.4
1250
1251 * config.sub: new version from automake 1.4
1252
1253Wed Apr 28 00:21:17 1999 Assar Westerlund <assar@sics.se>
1254
1255 * Release 0.1e
1256
1257 * lib/krb5/mcache.c (mcc_get_next): get the current cursor
1258 correctly
1259
1260 * acconfig.h: correct definition of KRB_PUT_INT for old krb4 code.
1261 From Ake Sandgren <ake@cs.umu.se>
1262
12631999-04-27 Johan Danielsson <joda@pdc.kth.se>
1264
1265 * kdc/kerberos5.c: fix arguments to decrypt_ticket
1266
12671999-04-25 Assar Westerlund <assar@sics.se>
1268
1269 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old
1270 DCE secd's that are not able to handle MD5 checksums by defaulting
1271 to MD4 if the keytype was DES-CBC-CRC
1272
1273 * lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype
1274
1275 * lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and
1276 `cksumtype'
1277
1278 * lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for
1279 secd
1280 (init_tgs_req): add all supported enctypes for the keytype in
1281 `in_creds->session.keytype' if it's set
1282
1283 * lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol
1284 encryption types
1285 (do_checksum): new function
1286 (verify_checksum): take the checksum to use from the checksum message
1287 and not from the crypto struct
1288 (etypes): add F_PSEUDO flags
1289 (krb5_keytype_to_enctypes): new function
1290
1291 * lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype
1292 and cksumtype
1293 (krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement
1294 (krb5_auth_setkeytype, krb5_auth_getkeytype): implement
1295 (krb5_auth_setenctype): comment out, it's rather bogus anyway
1296
1297Sun Apr 25 16:55:50 1999 Johan Danielsson <joda@pdc.kth.se>
1298
1299 * lib/krb5/krb5_locl.h: fix for stupid aix warnings
1300
1301 * lib/krb5/fcache.c (erase_file): don't malloc
1302
1303Sat Apr 24 18:35:21 1999 Johan Danielsson <joda@pdc.kth.se>
1304
1305 * kdc/config.c: pass context to krb5_config_file_free
1306
1307 * kuser/kinit.c: add `--fcache-version' to set cache version to
1308 create
1309
1310 * kuser/klist.c: print cache version if verbose
1311
1312 * lib/krb5/transited.c (krb5_domain_x500_decode): don't abort
1313
1314 * lib/krb5/principal.c: abort -> krb5_abortx
1315
1316 * lib/krb5/mk_rep.c: abort -> krb5_abortx
1317
1318 * lib/krb5/config_file.c: abort -> krb5_abortx
1319
1320 * lib/krb5/context.c (init_context_from_config_file): init
1321 fcache_version; add krb5_{get,set}_fcache_version
1322
1323 * lib/krb5/keytab.c: add support for reading (and writing?) old
1324 version keytabs
1325
1326 * lib/krb5/cache.c: add krb5_cc_get_version
1327
1328 * lib/krb5/fcache.c: add support for reading and writing old
1329 version cache files
1330
1331 * lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags
1332
1333 * lib/krb5/store_emem.c (krb5_storage_emem): zero flags
1334
1335 * lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags
1336
1337 * lib/krb5/store.c: add flags to change how various fields are
1338 stored, used for old cache version support
1339
1340 * lib/krb5/krb5.h: add support for reading and writing old version
1341 cache files, and keytabs
1342
1343Wed Apr 21 00:09:26 1999 Assar Westerlund <assar@sics.se>
1344
1345 * configure.in: fix test for readline.h remember to link with
1346 $LIB_tgetent when trying linking with readline
1347
1348 * lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time
1349 is given, request a postdated ticket.
1350
1351 * lib/krb5/data.c (krb5_data_free): free data as long as it's not
1352 NULL
1353
1354Tue Apr 20 20:18:14 1999 Assar Westerlund <assar@sics.se>
1355
1356 * kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen
1357
1358 * lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add
1359
1360 * lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and
1361 KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is
1362 invalid
1363
1364Tue Apr 20 12:42:08 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1365
1366 * kpasswd/kpasswdd.c: don't try to load library by default; get
1367 library and function name from krb5.conf
1368
1369 * kpasswd/sample_passwd_check.c: sample password checking
1370 functions
1371
1372Mon Apr 19 22:22:19 1999 Assar Westerlund <assar@sics.se>
1373
1374 * lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use
1375 krb5_data_alloc and be careful with checking allocation and sizes.
1376
1377 * kuser/klist.c (--tokens): conditionalize on KRB4
1378
1379 * kuser/kinit.c (renew_validate): set all flags
1380 (main): fix cut-n-paste error when setting start-time
1381
1382 * kdc/kerberos5.c (check_tgs_flags): starttime of a validate
1383 ticket should be > than current time
1384 (*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket
1385
1386 * kuser/kinit.c (renew_validate): use the client realm instead of
1387 the local realm when renewing tickets.
1388
1389 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function
1390 (krb5_get_forwarded_creds): correct freeing of out_creds
1391
1392 * kuser/kinit.c (renew_validate): hopefully fix up freeing of
1393 memory
1394
1395 * configure.in: do all the krb4 tests with "$krb4" != "no"
1396
1397 * lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero
1398 keyvalue if it's NULL. noticed by Ake Sandgren <ake@cs.umu.se>
1399
1400 * lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes
1401 instead of just taking the first one. fix all callers. From
1402 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1403
1404 * kdc/kdc_locl.h (enable_kaserver): declaration
1405
1406 * kdc/hprop.c (ka_convert): print the failing principal. AFS 3.4a
1407 creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around. From
1408 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1409
1410 * kdc/hpropd.c (open_socket): stupid cast to get rid of a warning
1411
1412 * kdc/connect.c (add_standard_ports, process_request): look at
1413 enable_kaserver. From "Brandon S. Allbery KF8NH"
1414 <allbery@kf8nh.apk.net>
1415
1416 * kdc/config.c: new flag --kaserver and config file option
1417 enable-kaserver. From "Brandon S. Allbery KF8NH"
1418 <allbery@kf8nh.apk.net>
1419
1420Mon Apr 19 12:32:04 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1421
1422 * configure.in: check for dlopen, and dlfcn.h
1423
1424 * kpasswd/kpasswdd.c: add support for dlopen:ing password quality
1425 check library
1426
1427 * configure.in: add appl/su
1428
1429Sun Apr 18 15:46:53 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1430
1431 * lib/krb5/cache.c: add krb5_cc_get_type that returns type of a
1432 cache
1433
1434Fri Apr 16 17:58:51 1999 Assar Westerlund <assar@sics.se>
1435
1436 * configure.in: LIB_kdb: -L should be before -lkdb
1437 test for prototype of strsep
1438
1439Thu Apr 15 11:34:38 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1440
1441 * lib/krb5/Makefile.am: update version
1442
1443 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use
1444 ALLOC_SEQ
1445
1446 * lib/krb5/fcache.c: add some support for reading and writing old
1447 cache formats;
1448 (fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use
1449 krb5_ret_creds
1450
1451 * lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc,
1452 initialize host_byteorder
1453
1454 * lib/krb5/store_fd.c (krb5_storage_from_fd): initialize
1455 host_byteorder
1456
1457 * lib/krb5/store_emem.c (krb5_storage_emem): initialize
1458 host_byteorder
1459
1460 * lib/krb5/store.c (krb5_storage_set_host_byteorder): add;
1461 (krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16):
1462 check host_byteorder flag; (krb5_store_creds): add;
1463 (krb5_ret_creds): add
1464
1465 * lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for
1466 storage of numbers
1467
1468 * lib/krb5/heim_err.et: add `host not found' error
1469
1470 * kdc/connect.c: don't use data after clearing decriptor
1471
1472 * lib/krb5/auth_context.c: abort -> krb5_abortx
1473
1474 * lib/krb5/warn.c: add __attribute__; add *abort functions
1475
1476 * configure.in: check for __attribute__
1477
1478 * kdc/connect.c: log bogus requests
1479
1480Tue Apr 13 18:38:05 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1481
1482 * lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts
1483 for all DES keys
1484
14851999-04-12 Assar Westerlund <assar@sics.se>
1486
1487 * lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit
1488
1489 * lib/krb5/get_cred.c (init_tgs_req): some more error checking
1490
1491 * lib/krb5/generate_subkey.c (krb5_generate_subkey): check return
1492 value from malloc
1493
1494Sun Apr 11 03:47:23 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1495
1496 * lib/krb5/krb5.conf.5: update to reality
1497
1498 * lib/krb5/krb5_425_conv_principal.3: update to reality
1499
15001999-04-11 Assar Westerlund <assar@sics.se>
1501
1502 * lib/krb5/get_host_realm.c: handle more than one realm for a host
1503
1504 * kpasswd/kpasswd.c (main): use krb5_program_setup and
1505 print_version
1506
1507 * kdc/string2key.c (main): use krb5_program_setup and
1508 print_version
1509
1510Sun Apr 11 02:35:58 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1511
1512 * lib/krb5/principal.c (krb5_524_conv_principal): make it actually
1513 work, and check built-in list of host-type first-components
1514
1515 * lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm
1516
1517 * lib/krb5/context.c: add srv_* flags to context
1518
1519 * lib/krb5/principal.c: add default v4_name_convert entries
1520
1521 * lib/krb5/krb5.h: add srv_* flags to context
1522
1523Sat Apr 10 22:52:28 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1524
1525 * kadmin/kadmin.c: complain about un-recognised commands
1526
1527 * admin/ktutil.c: complain about un-recognised commands
1528
1529Sat Apr 10 15:41:49 1999 Assar Westerlund <assar@sics.se>
1530
1531 * kadmin/load.c (doit): fix error message
1532
1533 * lib/krb5/crypto.c (encrypt_internal): free checksum if lengths
1534 fail to match.
1535 (krb5_get_wrapped_length): new function
1536
1537 * configure.in: security/pam_modules.h: check for
1538
1539 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge
1540 around `ret_as_reply' semantics by only freeing it when ret == 0
1541
1542Fri Apr 9 20:24:04 1999 Assar Westerlund <assar@sics.se>
1543
1544 * kuser/klist.c (print_cred_verbose): handle the case of a bad
1545 enctype
1546
1547 * configure.in: test for more header files
1548 (LIB_roken): set
1549
1550Thu Apr 8 15:01:59 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1551
1552 * configure.in: fixes for building w/o krb4
1553
1554 * ltmain.sh: update to libtool 1.2d
1555
1556 * ltconfig: update to libtool 1.2d
1557
1558Wed Apr 7 23:37:26 1999 Assar Westerlund <assar@sics.se>
1559
1560 * kdc/hpropd.c: fix some error messages to be more understandable.
1561
1562 * kdc/hprop.c (ka_dump): remove unused variables
1563
1564 * appl/test/tcp_server.c: remove unused variables
1565
1566 * appl/test/gssapi_server.c: remove unused variables
1567
1568 * appl/test/gssapi_client.c: remove unused variables
1569
1570Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1571
1572 * lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code
1573
1574 * kuser/klist.c: make it compile w/o krb4
1575
1576 * kuser/kdestroy.c: make it compile w/o krb4
1577
1578 * admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help
1579 strings
1580
1581Mon Apr 5 16:13:46 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1582
1583 * configure.in: test for MIPS ABI; new test_package
1584
1585Thu Apr 1 11:00:40 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1586
1587 * include/Makefile.am: clean krb5-private.h
1588
1589 * Release 0.1d
1590
1591 * kpasswd/kpasswdd.c (doit): pass context to
1592 krb5_get_all_client_addrs
1593
1594 * kdc/connect.c (init_sockets): pass context to
1595 krb5_get_all_server_addrs
1596
1597 * lib/krb5/get_in_tkt.c (init_as_req): pass context to
1598 krb5_get_all_client_addrs
1599
1600 * lib/krb5/get_cred.c (get_cred_kdc_la): pass context to
1601 krb5_get_all_client_addrs
1602
1603 * lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses
1604
1605 * lib/krb5/krb5.h: add support for adding an extra set of
1606 addresses
1607
1608 * lib/krb5/context.c: add support for adding an extra set of
1609 addresses
1610
1611 * lib/krb5/addr_families.c: add krb5_parse_address
1612
1613 * lib/krb5/address.c: krb5_append_addresses
1614
1615 * lib/krb5/config_file.c (parse_binding): don't zap everything
1616 after first whitespace
1617
1618 * kuser/kinit.c (renew_validate): don't allocate out
1619
1620 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
1621 allocate out_creds
1622
1623 * lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make
1624 out_creds pointer;
1625 (krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags):
1626 free more memory
1627
1628 * lib/krb5/crypto.c (encrypt_internal): free checksum
1629
1630 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply,
1631 and ticket
1632
1633 * kuser/Makefile.am: remove kfoo
1634
1635 * lib/Makefile.am: add auth
1636
1637 * lib/kadm5/iprop.h: getarg.h
1638
1639 * lib/kadm5/replay_log.c: use getarg
1640
1641 * lib/kadm5/ipropd_slave.c: use getarg
1642
1643 * lib/kadm5/ipropd_master.c: use getarg
1644
1645 * lib/kadm5/dump_log.c: use getarg
1646
1647 * kpasswd/kpasswdd.c: use getarg
1648
1649 * Makefile.am.common: make a more working check-local target
1650
1651 * lib/asn1/main.c: use getargs
1652
1653Mon Mar 29 20:19:57 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1654
1655 * kuser/klist.c (print_cred_verbose): use krb5_print_address
1656
1657 * lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int
1658
1659 * lib/krb5/addr_families.c (krb5_print_address): handle unknown
1660 address types; (ipv6_print_addr): print in 16-bit groups (as it
1661 should)
1662
1663 * lib/krb5/crc.c: crc_{init_table,update} ->
1664 _krb5_crc_{init_table,update}
1665
1666 * lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int
1667 crc_{init_table,update} -> _krb5_crc_{init_table,update}
1668
1669 * lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int
1670
1671 * lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int
1672
1673 * lib/krb5/krb5_locl.h: include krb5-private.h
1674
1675 * kdc/connect.c (addr_to_string): use krb5_print_address
1676
1677 * lib/krb5/addr_families.c (krb5_print_address): int -> size_t
1678
1679 * lib/krb5/addr_families.c: add support for printing ipv6
1680 addresses, either with inet_ntop, or ugly for-loop
1681
1682 * kdc/524.c: check that the ticket came from a valid address; use
1683 the address of the connection as the address to put in the v4
1684 ticket (if this address is AF_INET)
1685
1686 * kdc/connect.c: pass addr to do_524
1687
1688 * kdc/kdc_locl.h: prototype for do_524
1689
1690Sat Mar 27 17:48:31 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1691
1692 * configure.in: check for OSF C2; bind/bitypes.h, getudbnam,
1693 setlim; check for auth modules; siad.h, getpwnam_r;
1694 lib/auth/Makefile, lib/auth/sia/Makefile
1695
1696 * lib/krb5/crypto.c: n_fold -> _krb5_n_fold
1697
1698 * lib/krb5/n-fold.c: n_fold -> _krb5_n_fold
1699
1700Thu Mar 25 04:35:21 1999 Assar Westerlund <assar@sics.se>
1701
1702 * lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping
1703 it
1704
1705 * lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data'
1706
1707 * lib/hdb/ndbm.c (NDBM_destroy): clear master key
1708
1709 * lib/hdb/db.c (DB_destroy): clear master key
1710 (DB_open): check malloc
1711
1712 * kdc/connect.c (init_sockets): free addresses
1713
1714 * kadmin/kadmin.c (main): make code more consistent. always free
1715 configuration information.
1716
1717 * kadmin/init.c (create_random_entry): free the entry
1718
1719Wed Mar 24 04:02:03 1999 Assar Westerlund <assar@sics.se>
1720
1721 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password):
1722 re-organize the code to always free `kdc_reply'
1723
1724 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): be more careful about
1725 freeing memory
1726
1727 * lib/krb5/fcache.c (fcc_destroy): don't call fcc_close
1728
1729 * lib/krb5/crypto.c (krb5_crypto_destroy): free `crypto'
1730
1731 * lib/hdb/hdb_locl.h: try db_185.h first in case db.h is a DB 2.0
1732 header
1733
1734 * configure.in (db_185.h): check for
1735
1736 * admin/srvcreate.c: new file. contributed by Daniel Kouril
1737 <kouril@informatics.muni.cz>
1738
1739 * admin/ktutil.c: srvcreate: new command
1740
1741 * kuser/klist.c: add support for printing AFS tokens
1742
1743 * kuser/kdestroy.c: add support for destroying v4 tickets and AFS
1744 tokens. based on code by Love <lha@stacken.kth.se>
1745
1746 * kuser/Makefile.am (kdestroy_LDADD, klist_LDADD): more libraries
1747
1748 * configure.in: sys/ioccom.h: test for
1749
1750 * kuser/klist.c (main): don't print `no ticket file' with --test.
1751 From: Love <lha@e.kth.se>
1752
1753 * kpasswd/kpasswdd.c (doit): more braces to make gcc happy
1754
1755 * kdc/connect.c (init_socket): get rid of a stupid warning
1756
1757 * include/bits.c (my_strupr): cast away some stupid warnings
1758
1759Tue Mar 23 14:34:44 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1760
1761 * lib/krb5/get_host_realm.c (krb5_get_host_realm): no infinite
1762 loops, please
1763
1764Tue Mar 23 00:00:45 1999 Assar Westerlund <assar@sics.se>
1765
1766 * lib/kadm5/Makefile.am (install_build_headers): recover from make
1767 rewriting the names of the headers kludge to help solaris make
1768
1769 * lib/krb5/Makefile.am: kludge to help solaris make
1770
1771 * lib/hdb/Makefile.am: kludge to help solaris make
1772
1773 * configure.in (LIB_kdb): make sure there's a -L option in here by
1774 adding $(LIB_krb4)
1775
1776 * lib/asn1/gen_glue.c (generate_2int, generate_int2): int ->
1777 unsigned
1778
1779 * configure.in (SunOS): set to a number KRB4, KRB5 conditionals:
1780 remove the `dnl' to work around an automake flaw
1781
1782Sun Mar 21 15:08:49 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1783
1784 * lib/krb5/get_default_realm.c: char* -> krb5_realm
1785
1786Sun Mar 21 14:08:30 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1787
1788 * include/bits.c: <bind/bitypes.h>
1789
1790 * lib/krb5/Makefile.am: create krb5-private.h
1791
1792Sat Mar 20 00:08:59 1999 Assar Westerlund <assar@sics.se>
1793
1794 * configure.in (gethostname): remove duplicate
1795
1796Fri Mar 19 14:48:03 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1797
1798 * lib/hdb/Makefile.am: add version-info
1799
1800 * lib/gssapi/Makefile.am: add version-info
1801
1802 * lib/asn1/Makefile.am: use $(x:y=z) make syntax; move check-der
1803 to check_PROGRAMS
1804
1805 * lib/Makefile.am: add 45
1806
1807 * lib/kadm5/Makefile.am: split in client and server libraries
1808 (breaks shared libraries otherwise)
1809
1810Thu Mar 18 11:33:30 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1811
1812 * include/kadm5/Makefile.am: clean a lot of header files (since
1813 automake lacks a clean-hook)
1814
1815 * include/Makefile.am: clean a lot of header files (since automake
1816 lacks a clean-hook)
1817
1818 * lib/kadm5/Makefile.am: fix build-installation of headers
1819
1820 * lib/krb5/Makefile.am: remove include_dir hack
1821
1822 * lib/hdb/Makefile.am: remove include_dir hack
1823
1824 * lib/asn1/Makefile.am: remove include_dir hack
1825
1826 * include/Makefile.am: remove include_dir hack
1827
1828 * doc/whatis.texi: define sub for html
1829
1830 * configure.in: LIB_kdb, have_err_h, have_fnmatch_h, have_glob_h
1831
1832 * lib/asn1/Makefile.am: der.h
1833
1834 * kpasswd/kpasswdd.c: admin.h -> kadm5/admin.h
1835
1836 * kdc/Makefile.am: remove junk
1837
1838 * kadmin/Makefile.am: sl.a -> sl.la
1839
1840 * appl/afsutil/Makefile.am: remove EXTRA_bin_PROGRAMS
1841
1842 * admin/Makefile.am: sl.a -> sl.la
1843
1844 * configure.in: condition KRB5; AC_CHECK_XAU
1845
1846 * Makefile.am: include Makefile.am.common
1847
1848 * include/kadm5/Makefile.am: include Makefile.am.common; don't
1849 install headers from here
1850
1851 * include/Makefile.am: include Makefile.am.common; don't install
1852 headers from here
1853
1854 * doc/Makefile.am: include Makefile.am.common
1855
1856 * lib/krb5/Makefile.am: include Makefile.am.common
1857
1858 * lib/kadm5/Makefile.am: include Makefile.am.common
1859
1860 * lib/hdb/Makefile.am: include Makefile.am.common
1861
1862 * lib/gssapi/Makefile.am: include Makefile.am.common
1863
1864 * lib/asn1/Makefile.am: include Makefile.am.common
1865
1866 * lib/Makefile.am: include Makefile.am.common
1867
1868 * lib/45/Makefile.am: include Makefile.am.common
1869
1870 * kuser/Makefile.am: include Makefile.am.common
1871
1872 * kpasswd/Makefile.am: include Makefile.am.common
1873
1874 * kdc/Makefile.am: include Makefile.am.common
1875
1876 * kadmin/Makefile.am: include Makefile.am.common
1877
1878 * appl/test/Makefile.am: include Makefile.am.common
1879
1880 * appl/afsutil/Makefile.am: include Makefile.am.common
1881
1882 * appl/Makefile.am: include Makefile.am.common
1883
1884 * admin/Makefile.am: include Makefile.am.common
1885
1886Wed Mar 17 03:04:38 1999 Assar Westerlund <assar@sics.se>
1887
1888 * lib/krb5/store.c (krb5_store_stringz): braces fix
1889
1890 * lib/kadm5/get_s.c (kadm5_s_get_principal): braces fix
1891
1892 * lib/kadm5/ent_setup.c (_kadm5_setup_entry): braces fix
1893
1894 * kdc/connect.c (loop): braces fix
1895
1896 * lib/krb5/config_file.c: cast to unsigned char to make is* happy
1897
1898 * lib/krb5/log.c (krb5_addlog_dest): more braces to make gcc happy
1899
1900 * lib/krb5/crypto.c (krb5_verify_checksum): rename C -> cksum to
1901 be consistent
1902
1903 * kadmin/util.c (timeval2str): more braces to make gcc happy
1904
1905 * kadmin/load.c: cast in is* to get rid of stupid warning
1906
1907 * kadmin/dump.c (append_hex): cast in isalnum to get rid of stupid
1908 warning
1909
1910 * kdc/kaserver.c: malloc checks and fixes
1911
1912 * lib/krb5/get_host_realm.c (krb5_get_host_realm): include leading
1913 dot (if any) when looking up realms.
1914
1915Fri Mar 12 13:57:56 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1916
1917 * lib/krb5/get_host_realm.c: add dns support
1918
1919 * lib/krb5/set_default_realm.c: use krb5_free_host_realm
1920
1921 * lib/krb5/free_host_realm.c: check for NULL realmlist
1922
1923 * lib/krb5/context.c: don't print warning if there is no krb5.conf
1924
1925Wed Mar 10 19:29:46 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1926
1927 * configure.in: use AC_WFLAGS
1928
1929Mon Mar 8 11:49:43 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1930
1931 * Release 0.1c
1932
1933 * kuser/klist.c: use print_version
1934
1935 * kuser/kdestroy.c: use print_version
1936
1937 * kdc/hpropd.c: use print_version
1938
1939 * kdc/hprop.c: use print_version
1940
1941 * kdc/config.c: use print_version
1942
1943 * kadmin/kadmind.c: use print_version
1944
1945 * kadmin/kadmin.c: use print_version
1946
1947 * appl/test/common.c: use print_version
1948
1949 * appl/afsutil/afslog.c: use print_version
1950
1951Mon Mar 1 10:49:14 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1952
1953 * lib/krb5/get_addrs.c: SOCKADDR_HAS_SA_LEN ->
1954 HAVE_STRUCT_SOCKADDR_SA_LEN
1955
1956 * configure.in, acconfig.h, cf/*: update to automake 1.4/autoconf 2.13
1957
1958Sun Feb 28 18:19:20 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1959
1960 * lib/asn1/gen.c: make `BIT STRING's unsigned
1961
1962 * lib/asn1/{symbol.h,gen.c}: add TUInteger type
1963
1964 * lib/krb5/verify_user.c (krb5_verify_user): pass prompter to
1965 krb5_get_init_creds_password
1966
1967 * lib/krb5/fcache.c (fcc_gen_new): implement
1968
1969Sat Feb 27 22:41:23 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1970
1971 * doc/install.texi: krb4 is now automatically detected
1972
1973 * doc/misc.texi: update procedure to set supported encryption
1974 types
1975
1976 * doc/setup.texi: change some silly wordings
1977
1978Sat Feb 27 22:17:30 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1979
1980 * lib/krb5/keytab.c (fkt_remove_entry): make this work
1981
1982 * admin/ktutil.c: add minimally working `get' command
1983
1984Sat Feb 27 19:44:49 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1985
1986 * lib/hdb/convert_db.c: more typos
1987
1988 * include/Makefile.am: remove EXTRA_DATA (as of autoconf
1989 2.13/automake 1.4)
1990
1991 * appl/Makefile.am: OTP_dir
1992
1993Fri Feb 26 17:37:00 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1994
1995 * doc/setup.texi: add kadmin section
1996
1997 * lib/asn1/check-der.c: fix printf warnings
1998
1999Thu Feb 25 11:16:49 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2000
2001 * configure.in: -O does not belong in WFLAGS
2002
2003Thu Feb 25 11:05:57 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2004
2005 * lib/asn1/der_put.c: fix der_put_int
2006
2007Tue Feb 23 20:35:12 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2008
2009 * configure.in: use AC_BROKEN_GLOB
2010
2011Mon Feb 22 15:12:44 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2012
2013 * configure.in: check for glob
2014
2015Mon Feb 22 11:32:42 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2016
2017 * Release 0.1b
2018
2019Sat Feb 20 15:48:06 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2020
2021 * lib/hdb/convert_db.c: convert DES3 keys to des3-cbc-sha1, and
2022 des3-cbc-md5
2023
2024 * lib/krb5/crypto.c (DES3_string_to_key): make this actually do
2025 what the draft said it should
2026
2027 * lib/hdb/convert_db.c: little program for database conversion
2028
2029 * lib/hdb/db.c (DB_open): try to open database w/o .db extension
2030
2031 * lib/hdb/ndbm.c (NDBM_open): add test for database format
2032
2033 * lib/hdb/db.c (DB_open): add test for database format
2034
2035 * lib/asn1/gen_glue.c (generate_2int): don't depend on flags being
2036 unsigned
2037
2038 * lib/hdb/hdb.c: change `hdb_set_master_key' to take an
2039 EncryptionKey, and add a new function `hdb_set_master_keyfile' to
2040 do what `hdb_set_master_key' used to do
2041
2042 * kdc/kstash.c: add `--convert-file' option to change keytype of
2043 existing master key file
2044
2045Fri Feb 19 07:04:14 1999 Assar Westerlund <assar@squid.pdc.kth.se>
2046
2047 * Release 0.1a
2048
2049Sat Feb 13 17:12:53 1999 Assar Westerlund <assar@sics.se>
2050
2051 * lib/krb5/mk_safe.c (krb5_mk_safe): sizeof(buf) -> buf_size, buf
2052 is now a `u_char *'
2053
2054 * lib/krb5/get_in_tkt.c (krb5_init_etype): etypes are now `int'
2055
2056 * lib/krb5/get_host_realm.c (krb5_get_host_realm): constize
2057 orig_host
2058
2059 (krb5_salttype_to_string): new function (RSA_MD5_DES_verify,
2060 RSA_MD5_DES3_verify): initialize ret
2061
2062 * lib/gssapi/init_sec_context.c (init_auth): remove unnecessary
2063 gssapi_krb5_init. ask for KEYTYPE_DES credentials
2064
2065 * kadmin/get.c (print_entry_long): print the keytypes and salts
2066 available for the principal
2067
2068 * configure.in (WFLAGS): add `-O' to catch unitialized variables
2069 and such
2070 (gethostname, mkstemp, getusershell, inet_aton): more tests
2071
2072 * lib/hdb/hdb.h: update prototypes
2073
2074 * configure.in: homogenize broken detection with krb4
2075
2076 * lib/kadm5/init_c.c (kadm5_c_init_with_context): remove unused
2077 `error'
2078
2079 * lib/asn1/Makefile.am (check-der): add
2080
2081 * lib/asn1/gen.c (define_type): map ASN1 Integer to `int' instead
2082 of `unsigned'
2083
2084 * lib/asn1/der_length.c (length_unsigned): new function
2085 (length_int): handle signed integers
2086
2087 * lib/asn1/der_put.c (der_put_unsigned): new function
2088 (der_put_int): handle signed integers
2089
2090 * lib/asn1/der_get.c (der_get_unsigned): new function
2091 (der_get_int): handle signed integers
2092
2093 * lib/asn1/der.h: all integer functions take `int' instead of
2094 `unsigned'
2095
2096 * lib/asn1/lex.l (filename): unused. remove.
2097
2098 * lib/asn1/check-der.c: new test program for der encoding and
2099 decoding.
2100
2101Mon Feb 1 04:09:06 1999 Assar Westerlund <assar@sics.se>
2102
2103 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): only call
2104 gethostbyname2 with AF_INET6 if we actually have IPv6. From
2105 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
2106
2107 * lib/krb5/changepw.c (get_kdc_address): dito
2108
2109Sun Jan 31 06:26:36 1999 Assar Westerlund <assar@sics.se>
2110
2111 * kdc/connect.c (parse_prots): always bind to AF_INET, there are
2112 v6-implementations without support for `mapped V4 addresses'.
2113 From Jun-ichiro itojun Hagino <itojun@kame.net>
2114
2115Sat Jan 30 22:38:27 1999 Assar Westerlund <assar@juguete.sics.se>
2116
2117 * Release 0.0u
2118
2119Sat Jan 30 13:43:02 1999 Assar Westerlund <assar@sics.se>
2120
2121 * lib/krb5/Makefile.am: explicit rules for *.et files
2122
2123 * lib/kadm5/init_c.c (get_kadm_ticket): only remove creds if
2124 krb5_get_credentials was succesful.
2125 (get_new_cache): return better error codes and return earlier.
2126 (get_cred_cache): only delete default_client if it's different
2127 from client
2128 (kadm5_c_init_with_context): return a more descriptive error.
2129
2130 * kdc/kerberos5.c (check_flags): handle NULL client or server
2131
2132 * lib/krb5/sendauth.c (krb5_sendauth): return the error in
2133 `ret_error' iff != NULL
2134
2135 * lib/krb5/rd_error.c (krb5_free_error, krb5_free_error_contents):
2136 new functions
2137
2138 * lib/krb5/mk_req_ext.c (krb5_mk_req_extended): more
2139 type-correctness
2140
2141 * lib/krb5/krb5.h (krb5_error): typedef to KRB_ERROR
2142
2143 * lib/krb5/init_creds_pw.c: KRB5_TGS_NAME: use
2144
2145 * lib/krb5/get_cred.c: KRB5_TGS_NAME: use
2146
2147 * lib/kafs/afskrb5.c (afslog_uid_int): update to changes
2148
2149 * lib/kadm5/rename_s.c (kadm5_s_rename_principal): call remove
2150 instead of rename, but shouldn't this just call rename?
2151
2152 * lib/kadm5/get_s.c (kadm5_s_get_principal): always return an
2153 error if the principal wasn't found.
2154
2155 * lib/hdb/ndbm.c (NDBM_seq): unseal key
2156
2157 * lib/hdb/db.c (DB_seq): unseal key
2158
2159 * lib/asn1/Makefile.am: added explicit rules for asn1_err.[ch]
2160
2161 * kdc/hprop.c (v4_prop): add krbtgt/THISREALM@OTHERREALM when
2162 finding cross-realm tgts in the v4 database
2163
2164 * kadmin/mod.c (mod_entry): check the number of arguments. check
2165 that kadm5_get_principal worked.
2166
2167 * lib/krb5/keytab.c (fkt_remove_entry): remove KRB5_KT_NOTFOUND if
2168 we weren't able to remove it.
2169
2170 * admin/ktutil.c: less drive-by-deleting. From Love
2171 <lha@e.kth.se>
2172
2173 * kdc/connect.c (parse_ports): copy the string before mishandling
2174 it with strtok_r
2175
2176 * kdc/kerberos5.c (tgs_rep2): print the principal with mismatching
2177 kvnos
2178
2179 * kadmin/kadmind.c (main): convert `debug_port' to network byte
2180 order
2181
2182 * kadmin/kadmin.c: allow specification of port number.
2183
2184 * lib/kadm5/kadm5_locl.h (kadm5_client_context): add
2185 `kadmind_port'.
2186
2187 * lib/kadm5/init_c.c (_kadm5_c_init_context): move up
2188 initalize_kadm5_error_table_r.
2189 allow specification of port number.
2190
2191 From Love <lha@stacken.kth.se>
2192
2193 * kuser/klist.c: add option -t | --test
2194
Note: See TracBrowser for help on using the repository browser.