source: heimdal/trunk/ChangeLog.2000@ 4

Last change on this file since 4 was 1, checked in by Paul Smedley, 10 years ago

Initial commit of Heimdal 1.5.3
File size: 40.8 KB
Line 
12000-12-31 Assar Westerlund <assar@sics.se>
2
3 * lib/krb5/test_get_addrs.c (main): handle krb5_init_context
4 failure consistently
5 * lib/krb5/string-to-key-test.c (main): handle krb5_init_context
6 failure consistently
7 * lib/krb5/prog_setup.c (krb5_program_setup): handle
8 krb5_init_context failure consistently
9 * lib/hdb/convert_db.c (main): handle krb5_init_context failure
10 consistently
11 * kuser/kverify.c (main): handle krb5_init_context failure
12 consistently
13 * kuser/klist.c (main): handle krb5_init_context failure
14 consistently
15 * kuser/kinit.c (main): handle krb5_init_context failure
16 consistently
17 * kuser/kgetcred.c (main): handle krb5_init_context failure
18 consistently
19 * kuser/kdestroy.c (main): handle krb5_init_context failure
20 consistently
21 * kuser/kdecode_ticket.c (main): handle krb5_init_context failure
22 consistently
23 * kuser/generate-requests.c (generate_requests): handle
24 krb5_init_context failure consistently
25 * kpasswd/kpasswd.c (main): handle krb5_init_context failure
26 consistently
27 * kpasswd/kpasswd-generator.c (generate_requests): handle
28 krb5_init_context failure consistently
29 * kdc/main.c (main): handle krb5_init_context failure consistently
30 * appl/test/uu_client.c (proto): handle krb5_init_context failure
31 consistently
32 * appl/kf/kf.c (main): handle krb5_init_context failure
33 consistently
34 * admin/ktutil.c (main): handle krb5_init_context failure
35 consistently
36
37 * admin/get.c (kt_get): more error checking
38
392000-12-29 Assar Westerlund <assar@sics.se>
40
41 * lib/asn1/asn1_print.c (loop): check for length longer than data.
42 inspired by lha@stacken.kth.se
43
442000-12-16 Johan Danielsson <joda@pdc.kth.se>
45
46 * admin/ktutil.8: reflect recent changes
47
48 * admin/copy.c: don't copy an entry that already exists in the
49 keytab, and warn if the keyblock differs
50
512000-12-15 Johan Danielsson <joda@pdc.kth.se>
52
53 * admin/Makefile.am: merge srvconvert and srvcreate with copy
54
55 * admin/copy.c: merge srvconvert and srvcreate with copy
56
57 * lib/krb5/Makefile.am: always build keytab_krb4.c
58
59 * lib/krb5/context.c: always register the krb4 keytab functions
60
61 * lib/krb5/krb5.h: declare krb4_ftk_ops
62
63 * lib/krb5/keytab_krb4.c: We don't really need to include krb.h
64 here, since we only use the principal size macros, so define these
65 here. Theoretically someone could have a krb4 system where these
66 values are != 40, but this is unlikely, and
67 krb5_524_conv_principal also assume they are 40.
68
692000-12-13 Johan Danielsson <joda@pdc.kth.se>
70
71 * lib/krb5/krb5.h: s/krb5_donot_reply/krb5_donot_replay/
72
73 * lib/krb5/replay.c: fix query-replace-o from MD5 API change, and
74 the struct is called krb5_donot_replay
75
762000-12-12 Assar Westerlund <assar@sics.se>
77
78 * admin/srvconvert.c (srvconvert): do not use data after free:ing
79 it
80
812000-12-11 Assar Westerlund <assar@sics.se>
82
83 * Release 0.3d
84
852000-12-11 Assar Westerlund <assar@sics.se>
86
87 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): set version to 14:0:0
88 * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): update to 6:3:0
89 * lib/krb5/Makefile.am (libkrb5_la_LIBADD): add library
90 dependencies
91
922000-12-10 Johan Danielsson <joda@pdc.kth.se>
93
94 * lib/krb5/auth_context.c: implement krb5_auth_con_{get,set}rcache
95
962000-12-08 Assar Westerlund <assar@sics.se>
97
98 * lib/krb5/krb5.h (krb5_enctype): add ETYPE_DES3_CBC_NONE_IVEC as
99 a new pseudo-type
100
101 * lib/krb5/crypto.c (DES_AFS3_CMU_string_to_key): always treat
102 cell names as lower case
103 (krb5_encrypt_ivec, krb5_decrypt_ivec): new functions that allow an
104 explicit ivec to be specified. fix all sub-functions.
105 (DES3_CBC_encrypt_ivec): new function that takes an explicit ivec
106
1072000-12-06 Johan Danielsson <joda@pdc.kth.se>
108
109 * lib/krb5/Makefile.am: actually build replay cache code
110
111 * lib/krb5/replay.c: implement krb5_get_server_rcache
112
113 * kpasswd/kpasswdd.c: de-pointerise auth_context parameter to
114 krb5_mk_rep
115
116 * lib/krb5/recvauth.c: de-pointerise auth_context parameter to
117 krb5_mk_rep
118
119 * lib/krb5/mk_rep.c: auth_context should not be a pointer
120
121 * lib/krb5/auth_context.c: implement krb5_auth_con_genaddrs, and
122 make setaddrs_from_fd use that
123
124 * lib/krb5/krb5.h: add some more KRB5_AUTH_CONTEXT_* flags
125
1262000-12-05 Johan Danielsson <joda@pdc.kth.se>
127
128 * lib/krb5/Makefile.am: add kerberos.8 manpage
129
130 * lib/krb5/cache.c: check for NULL remove_cred function
131
132 * lib/krb5/fcache.c: pretend that empty files are non-existant
133
134 * lib/krb5/get_addrs.c (find_all_addresses): use getifaddrs, from
135 Jason Thorpe <thorpej@netbsd.org>
136
1372000-12-01 Assar Westerlund <assar@sics.se>
138
139 * configure.in: remove configure-time generation of krb5-config
140 * tools/Makefile.am: add generation of krb5-config at make-time
141 instead of configure-time
142
143 * tools/krb5-config.in: add --prefix and --exec-prefix
144
1452000-11-30 Assar Westerlund <assar@sics.se>
146
147 * tools/Makefile.am: add krb5-config.1
148 * tools/krb5-config.in: add kadm-client and kadm5-server as
149 libraries
150
1512000-11-29 Assar Westerlund <assar@sics.se>
152
153 * tools/krb5-config.in: add --prefix, --exec-prefix and gssapi
154
1552000-11-29 Johan Danielsson <joda@pdc.kth.se>
156
157 * configure.in: add roken/Makefile here, since it can't live in
158 rk_ROKEN
159
1602000-11-16 Assar Westerlund <assar@sics.se>
161
162 * configure.in: use the libtool -rpath, do not rely on ld
163 understanding -rpath
164
165 * configure.in: fix the -Wl stuff for krb4 linking add some
166 gratuitous extra options when linking with an existing libdes
167
1682000-11-15 Assar Westerlund <assar@sics.se>
169
170 * lib/hdb/hdb.c (hdb_next_enctype2key): const-ize a little bit
171 * lib/Makefile.am (SUBDIRS): try to only build des when needed
172 * kuser/klist.c: print key versions numbers of v4 tickets in
173 verbose mode
174
175 * kdc/kerberos5.c (tgs_rep2): adapt to new krb5_verify_ap_req2
176 * appl/test/gss_common.c (read_token): remove unused variable
177
178 * configure.in (krb4): add -Wl
179 (MD4Init et al): look for these in more libraries
180 (getmsg): only run test if we have the function
181 (AC_OUTPUT): create tools/krb5-config
182
183 * tools/krb5-config.in: new script for storing flags to use
184 * Makefile.am (SUBDIRS): add tools
185
186 * lib/krb5/get_cred.c (make_pa_tgs_req): update to new
187 krb5_mk_req_internal
188 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): allow different
189 usages for the encryption. change callers
190 * lib/krb5/rd_req.c (decrypt_authenticator): add an encryption
191 `usage'. also try the old
192 (and wrong) usage of KRB5_KU_AP_REQ_AUTH for backwards compatibility
193 (krb5_verify_ap_req2): new function for specifying the usage different
194 from the default (KRB5_KU_AP_REQ_AUTH)
195 * lib/krb5/build_auth.c (krb5_build_authenticator): add a `usage'
196 parameter to permit the generation of authenticators with
197 different crypto usage
198
199 * lib/krb5/mk_req.c (krb5_mk_req_exact): new function that takes a
200 krb5_principal
201 (krb5_mk_req): use krb5_mk_req_exact
202
203 * lib/krb5/mcache.c (mcc_close): free data
204 (mcc_destroy): don't free data
205
2062000-11-13 Assar Westerlund <assar@sics.se>
207
208 * lib/hdb/ndbm.c: handle both ndbm.h and gdbm/ndbm.h
209 * lib/hdb/hdb.c: handle both ndbm.h and gdbm/ndbm.h
210
2112000-11-12 Johan Danielsson <joda@pdc.kth.se>
212
213 * kdc/hpropd.8: remove extra .Xc
214
2152000-10-27 Johan Danielsson <joda@pdc.kth.se>
216
217 * kuser/kinit.c: fix v4 fallback lifetime calculation
218
2192000-10-10 Johan Danielsson <joda@pdc.kth.se>
220
221 * kdc/524.c: fix log messge
222
2232000-10-08 Assar Westerlund <assar@sics.se>
224
225 * lib/krb5/changepw.c (krb5_change_password): check for fd's being
226 too large to select on
227 * kpasswd/kpasswdd.c (add_new_tcp): check for the socket fd being
228 too large to select on
229 * kdc/connect.c (add_new_tcp): check for the socket fd being too
230 large to selct on
231 * kdc/connect.c (loop): check that the socket fd is not too large
232 to select on
233 * lib/krb5/send_to_kdc.c (recv_loop): check `fd' for being too
234 large to be able to select on
235
236 * kdc/kaserver.c (do_authenticate): check for time skew
237
2382000-10-01 Assar Westerlund <assar@sics.se>
239
240 * kdc/524.c (set_address): allocate memory for storing addresses
241 in if the original request had an empty set of addresses
242 * kdc/524.c (set_address): fix bad return of pointer to automatic
243 data
244
245 * config.sub: update to version 2000-09-11 (aka 1.181) from
246 subversions.gnu.org
247
248 * config.guess: update to version 2000-09-05 (aka 1.156) from
249 subversions.gnu.org plus some minor tweaks
250
2512000-09-20 Assar Westerlund <assar@juguete.sics.se>
252
253 * Release 0.3c
254
2552000-09-19 Assar Westerlund <assar@sics.se>
256
257 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to
258 13:1:0
259
260 * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): bump version to 6:2:0
261
2622000-09-17 Assar Westerlund <assar@sics.se>
263
264 * lib/krb5/rd_req.c (krb5_decrypt_ticket): plug some memory leak
265 (krb5_rd_req): try not to return an allocated auth_context on error
266
267 * lib/krb5/log.c (krb5_vlog_msg): fix const-ness
268
2692000-09-10 Assar Westerlund <assar@sics.se>
270
271 * kdc/524.c: re-organize
272 * kdc/kerberos5.c (tgs_rep2): try to avoid leaking auth_context
273 * kdc/kerberos4.c (valid_princ): check return value of functions
274 (encode_v4_ticket): add some const
275 * kdc/misc.c (db_fetch): check malloc
276 (free_ent): new function
277
278 * lib/krb5/log.c (krb5_vlog_msg): log just the format string it we
279 fail to allocate the actual string to log, should at least provide
280 some hint as to where things went wrong
281
2822000-09-10 Johan Danielsson <joda@pdc.kth.se>
283
284 * kdc/log.c: use DEFAULT_LOG_DEST
285
286 * kdc/config.c: use _PATH_KDC_CONF
287
288 * kdc/kdc_locl.h: add macro constants for kdc.conf, and kdc.log
289
2902000-09-09 Assar Westerlund <assar@sics.se>
291
292 * lib/krb5/crypto.c (_key_schedule): re-use an existing schedule
293
2942000-09-06 Johan Danielsson <joda@pdc.kth.se>
295
296 * configure.in: fix dpagaix test
297
2982000-09-05 Assar Westerlund <assar@sics.se>
299
300 * configure.in: with_dce -> enable_dce. noticed by Ake Sandgren
301 <ake@cs.umu.se>
302
3032000-09-01 Johan Danielsson <joda@pdc.kth.se>
304
305 * kdc/kstash.8: update manual page
306
307 * kdc/kstash.c: fix typo, and remove unused option
308
309 * lib/krb5/kerberos.7: short kerberos intro page
310
3112000-08-27 Assar Westerlund <assar@sics.se>
312
313 * include/bits.c: add __attribute__ for gcc's pleasure
314 * lib/hdb/keytab.c: re-write to delay the opening of the database
315 till it's known which principal is being sought, thereby allowing
316 the usage of multiple databases, however they need to be specified
317 in /etc/krb5.conf since all the programs using this keytab do not
318 read kdc.conf
319
320 * appl/test/test_locl.h (keytab): add
321 * appl/test/common.c: add --keytab
322 * lib/krb5/crypto.c: remove trailing commas
323 (KRB5_KU_USAGE_SEQ): renamed from KRB5_KU_USAGE_MIC
324
3252000-08-26 Assar Westerlund <assar@sics.se>
326
327 * lib/krb5/send_to_kdc.c (send_via_proxy): handle `http://' at the
328 beginning of the proxy specification. use getaddrinfo correctly
329 (krb5_sendto): always return a return code
330
331 * lib/krb5/krb5.h (KRB5_KU_USAGE_MIC): rename to KRB5_KU_USAGE_SEQ
332 * lib/krb5/auth_context.c (krb5_auth_con_free): handle
333 auth_context == NULL
334
3352000-08-23 Assar Westerlund <assar@sics.se>
336
337 * kdc/kerberos5.c (find_type): make sure of always setting
338 `ret_etype' correctly. clean-up structure some
339
3402000-08-23 Johan Danielsson <joda@pdc.kth.se>
341
342 * lib/krb5/mcache.c: implement resolve
343
3442000-08-18 Assar Westerlund <assar@sics.se>
345
346 * kuser/kdecode_ticket.c: check return value from krb5_crypto_init
347 * kdc/kerberos5.c, kdc/524.c: check return value from krb5_crypto_init
348 * lib/krb5/*.c: check return value from krb5_crypto_init
349
3502000-08-16 Assar Westerlund <assar@sics.se>
351
352 * Release 0.3b
353
3542000-08-16 Assar Westerlund <assar@sics.se>
355
356 * lib/krb5/Makefile.am: bump version to 13:0:0
357
358 * lib/hdb/Makefile.am: set version to 6:1:0
359
360 * configure.in: do getmsg testing the same way as in krb4
361
362 * lib/krb5/config_file.c (krb5_config_parse_file_debug): make sure
363 of closing the file on error
364
365 * lib/krb5/crypto.c (encrypt_internal_derived): free the checksum
366 after use
367
368 * lib/krb5/warn.c (_warnerr): initialize args to make third,
369 purify et al happy
370
3712000-08-13 Assar Westerlund <assar@sics.se>
372
373 * kdc/kerberos5.c: re-write search for keys code. loop over all
374 supported enctypes in order, looping over all keys of each type,
375 and picking the one with the v5 default salt preferably
376
3772000-08-10 Assar Westerlund <assar@sics.se>
378
379 * appl/test/gss_common.c (enet_read): add and use
380 * lib/krb5/krb5.h (heimdal_version, heimdal_long_version): make
381 const
382
383 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): add comment on
384 checksum type selection
385
386 * lib/krb5/context.c (krb5_init_context): do not leak memory on
387 failure
388 (default_etypes): prefer arcfour-hmac-md5 to des-cbc-md5
389
390 * lib/krb5/principal.c: add fnmatch.h
391
3922000-08-09 Assar Westerlund <assar@sics.se>
393
394 * configure.in: call AC_PROG_CC and AC_PROG_CPP to make sure later
395 checks that should require them don't fail
396 * acconfig.h: add HAVE_UINT17_T
397
3982000-08-09 Johan Danielsson <joda@pdc.kth.se>
399
400 * kdc/mit_dump.c: handle all sorts of weird MIT salt types
401
4022000-08-08 Johan Danielsson <joda@pdc.kth.se>
403
404 * doc/setup.texi: port 212 -> 2121
405
406 * lib/krb5/principal.c: krb5_principal_match
407
4082000-08-04 Johan Danielsson <joda@pdc.kth.se>
409
410 * lib/asn1/der_get.c: add comment on *why* DCE sometimes used BER
411 encoding
412
413 * kpasswd/Makefile.am: link with pidfile library
414
415 * kpasswd/kpasswdd.c: write a pid file
416
417 * kpasswd/kpasswd_locl.h: util.h
418
419 * kdc/Makefile.am: link with pidfile library
420
421 * kdc/main.c: write a pid file
422
423 * kdc/headers.h: util.h
424
4252000-08-04 Assar Westerlund <assar@sics.se>
426
427 * lib/krb5/principal.c (krb5_425_conv_principal_ext): always put
428 hostnames in lower case
429 (default_v4_name_convert): add imap
430
4312000-08-03 Assar Westerlund <assar@sics.se>
432
433 * lib/krb5/crc.c (_krb5_crc_update): const-ize (finally)
434
4352000-07-31 Johan Danielsson <joda@pdc.kth.se>
436
437 * configure.in: check for uint*_t
438 * include/bits.c: define uint*_t
439
4402000-07-29 Assar Westerlund <assar@sics.se>
441
442 * kdc/kerberos5.c (check_tgs_flags): set endtime correctly when
443 renewing, From Derrick J Brashear <shadow@dementia.org>
444
4452000-07-28 Assar Westerlund <assar@juguete.sics.se>
446
447 * Release 0.3a
448
4492000-07-27 Assar Westerlund <assar@sics.se>
450
451 * kdc/hprop.c (dump_database): write an empty message to signal
452 end of dump
453
4542000-07-26 Assar Westerlund <assar@sics.se>
455
456 * lib/krb5/changepw.c (krb5_change_password): try to be more
457 careful when not to resend
458
459 * lib/hdb/db3.c: always create a cursor with db3. From Derrick J
460 Brashear <shadow@dementia.org>
461
4622000-07-25 Johan Danielsson <joda@pdc.kth.se>
463
464 * lib/hdb/Makefile.am: bump version to 6:0:0
465
466 * lib/asn1/Makefile.am: bump version to 3:0:1
467
468 * lib/krb5/Makefile.am: bump version to 12:0:1
469
470 * lib/krb5/krb5_config.3: manpage
471
472 * lib/krb5/krb5_appdefault.3: manpage
473
474 * lib/krb5/appdefault.c: implementation of the krb5_appdefault set
475 of functions
476
4772000-07-23 Assar Westerlund <assar@sics.se>
478
479 * lib/krb5/init_creds_pw.c (change_password): reset forwardable
480 and proxiable. copy preauthentication list correctly from
481 supplied options
482
483 * kdc/hpropd.c (main): check that the ticket was for `hprop/' for
484 paranoid reasons
485
486 * lib/krb5/sock_principal.c (krb5_sock_to_principal): look in
487 aliases for the real name
488
4892000-07-22 Johan Danielsson <joda@pdc.kth.se>
490
491 * doc/setup.texi: say something about starting kadmind from the
492 command line
493
4942000-07-22 Assar Westerlund <assar@sics.se>
495
496 * kpasswd/kpasswdd.c: use kadm5_s_chpass_principal_cond instead of
497 mis-doing it here
498
499 * lib/krb5/changepw.c (krb5_change_password): make timeout 1 +
500 2^{0,1,...}. also keep track if we got an old packet back and
501 then just wait without sending a new packet
502 * lib/krb5/changepw.c: use a datagram socket and remove the
503 sequence numbers
504 * lib/krb5/changepw.c (krb5_change_password): clarify an
505 expression, avoiding a warning
506
5072000-07-22 Johan Danielsson <joda@pdc.kth.se>
508
509 * kuser/klist.c: make -a and -n aliases for -v
510
511 * lib/krb5/write_message.c: ws
512
513 * kdc/hprop-common.c: nuke extra definitions of
514 krb5_read_priv_message et.al
515
516 * lib/krb5/read_message.c (krb5_read_message): return error if EOF
517
5182000-07-20 Assar Westerlund <assar@sics.se>
519
520 * kpasswd/kpasswd.c: print usage consistently
521 * kdc/hprop.h (HPROP_KEYTAB): use HDB for the keytab
522 * kdc/hpropd.c: add --keytab
523 * kdc/hpropd.c: don't care what principal we recvauth as
524
525 * lib/krb5/get_cred.c: be more careful of not returning creds at
526 all when an error is returned
527 * lib/krb5/fcache.c (fcc_gen_new): do mkstemp correctly
528
5292000-07-19 Johan Danielsson <joda@pdc.kth.se>
530
531 * fix-export: use autoreconf
532
533 * configure.in: remove stuff that belong in roken, and remove some
534 obsolete constructs
535
5362000-07-18 Johan Danielsson <joda@pdc.kth.se>
537
538 * configure.in: fix some typos
539
540 * appl/Makefile.am: dceutil*s*
541
542 * missing: update to missing from automake 1.4a
543
5442000-07-17 Johan Danielsson <joda@pdc.kth.se>
545
546 * configure.in: try to get xlc flags from ibmcxx.cfg use
547 conditional for X use readline cf macro
548
549 * configure.in: subst AIX compiler flags
550
5512000-07-15 Johan Danielsson <joda@pdc.kth.se>
552
553 * configure.in: pass sixth parameter to test-package; use some
554 newer autoconf constructs
555
556 * ltmain.sh: update to libtool 1.3c
557
558 * ltconfig: update to libtool 1.3c
559
560 * configure.in: update this to newer auto*/libtool
561
562 * appl/Makefile.am: use conditional for dce
563
564 * lib/Makefile.am: use conditional for dce
565
5662000-07-11 Johan Danielsson <joda@pdc.kth.se>
567
568 * lib/krb5/write_message.c: krb5_write_{priv,save}_message
569 * lib/krb5/read_message.c: krb5_read_{priv,save}_message
570 * lib/krb5/convert_creds.c: try port kerberos/88 if no response on
571 krb524/4444
572
573 * lib/krb5/convert_creds.c: use krb5_sendto
574
575 * lib/krb5/send_to_kdc.c: add more generic krb5_sendto that send
576 to a port at arbitrary list of hosts
577
5782000-07-10 Johan Danielsson <joda@pdc.kth.se>
579
580 * doc/misc.texi: language; say something about kadmin del_enctype
581
5822000-07-10 Assar Westerlund <assar@sics.se>
583
584 * appl/kf/Makefile.am: actually install
585
5862000-07-08 Assar Westerlund <assar@sics.se>
587
588 * configure.in (AM_INIT_AUTOMAKE): bump to 0.3a-pre
589 (AC_ROKEN): roken is now at 10
590
591 * lib/krb5/string-to-key-test.c: add a arcfour-hmac-md5 test case
592 * kdc/Makefile.am (INCLUDES): add ../lib/krb5
593 * configure.in: update for standalone roken
594 * lib/Makefile.am (SUBDIRS): make roken conditional
595 * kdc/hprop.c: update to new hdb_seal_keys_mkey
596 * lib/hdb/mkey.c (_hdb_unseal_keys_int, _hdb_seal_keys_int):
597 rename and export them
598
599 * kdc/headers.h: add krb5_locl.h (since we just use some stuff
600 from there)
601
6022000-07-08 Johan Danielsson <joda@pdc.kth.se>
603
604 * kuser/klist.1: update for -f and add some more text for -v
605
606 * kuser/klist.c: use rtbl to format cred listing, add -f and -s
607
608 * lib/krb5/crypto.c: fix type in des3-cbc-none
609
610 * lib/hdb/mkey.c: add key usage
611
612 * kdc/kstash.c: remove writing of old keyfile, and treat
613 --convert-file as just reading and writing the keyfile without
614 asking for a new key
615
616 * lib/hdb/mkey.c (read_master_encryptionkey): handle old keytype
617 based files, and convert the key to cfb64
618
619 * lib/hdb/mkey.c (hdb_read_master_key): set mkey to NULL before
620 doing anything else
621
622 * lib/krb5/send_to_kdc.c: use krb5_eai_to_heim_errno
623
624 * lib/krb5/get_for_creds.c: use krb5_eai_to_heim_errno
625
626 * lib/krb5/changepw.c: use krb5_eai_to_heim_errno
627
628 * lib/krb5/addr_families.c: use krb5_eai_to_heim_errno
629
630 * lib/krb5/eai_to_heim_errno.c: convert getaddrinfo error codes to
631 something that can be passed to get_err_text
632
6332000-07-07 Assar Westerlund <assar@sics.se>
634
635 * lib/hdb/hdb.c (hdb_next_enctype2key): make sure of skipping
636 `*key'
637
638 * kdc/kerberos4.c (get_des_key): rewrite some, be more careful
639
6402000-07-06 Assar Westerlund <assar@sics.se>
641
642 * kdc/kerberos5.c (as_rep): be careful as to now overflowing when
643 calculating the end of lifetime of a ticket.
644
645 * lib/krb5/context.c (default_etypes): add ETYPE_ARCFOUR_HMAC_MD5
646
647 * lib/hdb/db3.c: only use a cursor when needed, from Derrick J
648 Brashear <shadow@dementia.org>
649
650 * lib/krb5/crypto.c: introduce the `special' encryption methods
651 that are not like all other encryption methods and implement
652 arcfour-hmac-md5
653
6542000-07-05 Johan Danielsson <joda@pdc.kth.se>
655
656 * kdc/mit_dump.c: set initial master key version number to 0
657 instead of 1; if we lated bump the mkvno we don't risk using the
658 wrong key to decrypt
659
660 * kdc/hprop.c: only get master key if we're actually going to use
661 it; enable reading of MIT krb5 dump files
662
663 * kdc/mit_dump.c: read MIT krb5 dump files
664
665 * lib/hdb/mkey.c (read_master_mit): fix this
666
667 * kdc/kstash.c: make this work with the new mkey code
668
669 * lib/hdb/Makefile.am: add mkey.c, and bump version number
670
671 * lib/hdb/hdb.h: rewrite master key handling
672
673 * lib/hdb/mkey.c: rewrite master key handling
674
675 * lib/krb5/crypto.c: add some more pseudo crypto types
676
677 * lib/krb5/krb5.h: change some funny etypes to use negative
678 numbers, and add some more
679
6802000-07-04 Assar Westerlund <assar@sics.se>
681
682 * lib/krb5/krbhst.c (get_krbhst): only try SRV lookup if there are
683 none in the configuration file
684
6852000-07-02 Assar Westerlund <assar@sics.se>
686
687 * lib/krb5/keytab_keyfile.c (akf_add_entry): remove unused
688 variable
689
690 * kpasswd/kpasswd-generator.c: new test program
691 * kpasswd/Makefile.am: add kpasswd-generator
692
693 * include/Makefile.am (CLEANFILES): add rc4.h
694
695 * kuser/generate-requests.c: new test program
696 * kuser/Makefile.am (noinst_PROGRAMS): add generate-requests
697
6982000-07-01 Assar Westerlund <assar@sics.se>
699
700 * configure.in: add --enable-dce and related stuff
701 * appl/Makefile.am (SUBDIRS): add $(APPL_dce)
702
7032000-06-29 Assar Westerlund <assar@sics.se>
704
705 * kdc/kerberos4.c (get_des_key): fix thinkos/typos
706
7072000-06-29 Johan Danielsson <joda@pdc.kth.se>
708
709 * admin/purge.c: use parse_time to parse age
710
711 * lib/krb5/log.c (krb5_vlog_msg): use krb5_format_time
712
713 * admin/list.c: add printing of timestamp and key data; some
714 cleanup
715
716 * lib/krb5/time.c (krb5_format_time): new function to format time
717
718 * lib/krb5/context.c (init_context_from_config_file): init
719 date_fmt, also do some cleanup
720
721 * lib/krb5/krb5.h: add date_fmt to context
722
7232000-06-28 Johan Danielsson <joda@pdc.kth.se>
724
725 * kdc/{kerberos4,kaserver,524}.c (get_des_key): change to return
726 v4 or afs keys if possible
727
7282000-06-25 Johan Danielsson <joda@pdc.kth.se>
729
730 * kdc/hprop.c (ka_convert): allow using null salt, and treat 0
731 pw_expire as never (from Derrick Brashear)
732
7332000-06-24 Johan Danielsson <joda@pdc.kth.se>
734
735 * kdc/connect.c (add_standard_ports): only listen to port 750 if
736 serving v4 requests
737
7382000-06-22 Assar Westerlund <assar@sics.se>
739
740 * lib/asn1/lex.l: fix includes, and lex stuff
741 * lib/asn1/lex.h (error_message): update prototype
742 (yylex): add
743 * lib/asn1/gen_length.c (length_type): fail on malloc error
744 * lib/asn1/gen_decode.c (decode_type): fail on malloc error
745
7462000-06-21 Assar Westerlund <assar@sics.se>
747
748 * lib/krb5/get_for_creds.c: be more compatible with MIT code.
749 From Daniel Kouril <kouril@ics.muni.cz>
750 * lib/krb5/rd_cred.c: be more compatible with MIT code. From
751 Daniel Kouril <kouril@ics.muni.cz>
752 * kdc/kerberos5.c (get_pa_etype_info): do not set salttype if it's
753 vanilla pw-salt, that keeps win2k happy. also do the malloc check
754 correctly. From Daniel Kouril <kouril@ics.muni.cz>
755
7562000-06-21 Johan Danielsson <joda@pdc.kth.se>
757
758 * kdc/hprop.c: add hdb keytabs
759
7602000-06-20 Johan Danielsson <joda@pdc.kth.se>
761
762 * lib/krb5/principal.c: back out rev. 1.64
763
7642000-06-19 Johan Danielsson <joda@pdc.kth.se>
765
766 * kdc/kerberos5.c: pa_* -> KRB5_PADATA_*
767
768 * kdc/hpropd.c: add realm override flag
769
770 * kdc/v4_dump.c: code for reading krb4 dump files
771
772 * kdc/hprop.c: generalize source database handing, add support for
773 non-standard local realms (from by Daniel Kouril
774 <kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>), and
775 support for using different ports (requested by the Czechs, but
776 implemented differently)
777
778 * lib/krb5/get_cred.c: pa_* -> KRB5_PADATA_*
779
780 * lib/krb5/get_in_tkt.c: pa_* -> KRB5_PADATA_*
781
782 * lib/krb5/krb5.h: use some definitions from asn1.h
783
784 * lib/hdb/hdb.asn1: use new import syntax
785
786 * lib/asn1/k5.asn1: use distinguished value integers
787
788 * lib/asn1/gen_length.c: support for distinguished value integers
789
790 * lib/asn1/gen_encode.c: support for distinguished value integers
791
792 * lib/asn1/gen_decode.c: support for distinguished value integers
793
794 * lib/asn1/gen.c: support for distinguished value integers
795
796 * lib/asn1/lex.l: add support for more standards like import
797 statements
798
799 * lib/asn1/parse.y: add support for more standards like import
800 statements, and distinguished value integers
801
8022000-06-11 Assar Westerlund <assar@sics.se>
803
804 * lib/krb5/get_for_creds.c (add_addrs): ignore addresses of
805 unknown type
806 * lib/krb5/get_for_creds.c (add_addrs): zero memory before
807 starting to copy memory
808
8092000-06-10 Assar Westerlund <assar@sics.se>
810
811 * lib/krb5/test_get_addrs.c: test program for get_addrs
812 * lib/krb5/get_addrs.c (find_all_addresses): remember to add in
813 the size of ifr->ifr_name when using SA_LEN. noticed by Ken
814 Raeburn <raeburn@MIT.EDU>
815
8162000-06-07 Assar Westerlund <assar@sics.se>
817
818 * configure.in: add db3 detection stuff do not use streamsptys on
819 HP-UX 11
820 * lib/hdb/hdb.h (HDB): add dbc for db3
821 * kdc/connect.c (add_standard_ports): also listen on krb524 aka
822 4444
823 * etc/services.append (krb524): add
824 * lib/hdb/db3.c: add berkeley db3 interface. contributed by
825 Derrick J Brashear <shadow@dementia.org>
826 * lib/hdb/hdb.h (struct HDB): add
827
8282000-06-07 Johan Danielsson <joda@pdc.kth.se>
829
830 * kdc/524.c: if 524 is not enabled, just generate error reply and
831 exit
832
833 * kdc/kerberos4.c: if v4 is not enabled, just generate error reply
834 and exit
835
836 * kdc/connect.c: only listen to port 4444 if 524 is enabled
837
838 * kdc/config.c: add options to enable/disable v4 and 524 requests
839
8402000-06-06 Johan Danielsson <joda@pdc.kth.se>
841
842 * kdc/524.c: handle non-existant server principals (from Daniel
843 Kouril)
844
8452000-06-03 Assar Westerlund <assar@sics.se>
846
847 * admin/ktutil.c: print name when failing to open keytab
848
849 * kuser/kinit.c: try also to fallback to v4 when no KDC is found
850
8512000-05-28 Assar Westerlund <assar@sics.se>
852
853 * kuser/klist.c: continue even we have no v5 ccache. make showing
854 your krb4 tickets the default (if build with krb4 support)
855 * kuser/kinit.c: add a fallback that tries to get a v4 ticket if
856 built with krb4 support and we got back a version error from the
857 KDC
858
8592000-05-23 Johan Danielsson <joda@pdc.kth.se>
860
861 * lib/krb5/keytab_keyfile.c: make this actually work
862
8632000-05-19 Assar Westerlund <assar@sics.se>
864
865 * lib/krb5/store_emem.c (emem_store): make it write-compatible
866 * lib/krb5/store_fd.c (fd_store): make it write-compatible
867 * lib/krb5/store_mem.c (mem_store): make it write-compatible
868 * lib/krb5/krb5.h (krb5_storage): make store write-compatible
869
8702000-05-18 Assar Westerlund <assar@sics.se>
871
872 * configure.in: add stdio.h in dbopen test
873
8742000-05-16 Assar Westerlund <assar@assaris.sics.se>
875
876 * Release 0.2t
877
8782000-05-16 Assar Westerlund <assar@sics.se>
879
880 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): set version to 11:1:0
881 * lib/krb5/fcache.c: fix second lseek
882 * lib/krb5/principal.c (krb5_524_conv_principal): fix typo
883
8842000-05-15 Assar Westerlund <assar@sics.se>
885
886 * Release 0.2s
887
8882000-05-15 Assar Westerlund <assar@sics.se>
889
890 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): set version to 11:0:0
891 * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): set version to 4:2:1
892 * lib/asn1/Makefile.am (libasn1_la_LDFLAGS): bump to 2:0:0
893 * lib/krb5/principal.c (krb5_524_conv_principal): comment-ize, and
894 simplify string copying
895
8962000-05-12 Assar Westerlund <assar@sics.se>
897
898 * lib/krb5/fcache.c (scrub_file): new function
899 (erase_file): re-write, use scrub_file
900 * lib/krb5/krb5.h (KRB5_DEFAULT_CCFILE_ROOT): add
901
902 * configure.in (dbopen): add header files
903
904 * lib/krb5/krb5.h (krb5_key_usage): add some more
905 * lib/krb5/fcache.c (erase_file): try to detect symlink games.
906 also call revoke.
907 * lib/krb5/changepw.c (krb5_change_password): remember to close
908 the socket on error
909
910 * kdc/main.c (main): also call sigterm on SIGTERM
911
9122000-05-06 Assar Westerlund <assar@sics.se>
913
914 * lib/krb5/config_file.c (krb5_config_vget_string_default,
915 krb5_config_get_string_default): add
916
9172000-04-25 Assar Westerlund <assar@sics.se>
918
919 * lib/krb5/fcache.c (fcc_initialize): just forget about
920 over-writing the old cred cache. it's too much of a hazzle trying
921 to do this safely.
922
9232000-04-11 Assar Westerlund <assar@sics.se>
924
925 * lib/krb5/crypto.c (krb5_get_wrapped_length): rewrite into
926 different parts for the derived and non-derived cases
927 * lib/krb5/crypto.c (krb5_get_wrapped_length): the padding should
928 be done after having added confounder and checksum
929
9302000-04-09 Assar Westerlund <assar@sics.se>
931
932 * lib/krb5/get_addrs.c (find_all_addresses): apperently solaris
933 can return EINVAL when the buffer is too small. cope.
934 * lib/asn1/Makefile.am (gen_files): add asn1_UNSIGNED.x
935 * lib/asn1/gen_locl.h (filename): add prototype
936 (init_generate): const-ize
937 * lib/asn1/gen.c (filename): new function clean-up a little bit.
938 * lib/asn1/parse.y: be more tolerant in ranges
939 * lib/asn1/lex.l: count lines correctly.
940 (error_message): print filename in messages
941
9422000-04-08 Assar Westerlund <assar@sics.se>
943
944 * lib/krb5/rd_safe.c (krb5_rd_safe): increment sequence number
945 after comparing
946 * lib/krb5/rd_priv.c (krb5_rd_priv): increment sequence number
947 after comparing
948 * lib/krb5/mk_safe.c (krb5_mk_safe): make `tmp_seq' unsigned
949 * lib/krb5/mk_priv.c (krb5_mk_priv): make `tmp_seq' unsigned
950 * lib/krb5/generate_seq_number.c (krb5_generate_seq_number): make
951 `seqno' be unsigned
952 * lib/krb5/mk_safe.c (krb5_mk_safe): increment local sequence
953 number after the fact and only increment it if we were successful
954 * lib/krb5/mk_priv.c (krb5_mk_priv): increment local sequence
955 number after the fact and only increment it if we were successful
956 * lib/krb5/krb5.h (krb5_auth_context_data): make sequence number
957 unsigned
958
959 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password):
960 `in_tkt_service' can be NULL
961
9622000-04-06 Assar Westerlund <assar@sics.se>
963
964 * lib/asn1/parse.y: regonize INTEGER (0..UNIT_MAX).
965 (DOTDOT): add
966 * lib/asn1/lex.l (DOTDOT): add
967 * lib/asn1/k5.asn1 (UNSIGNED): add. use UNSIGNED for all sequence
968 numbers.
969 * lib/asn1/gen_length.c (length_type): add TUInteger
970 * lib/asn1/gen_free.c (free_type): add TUInteger
971 * lib/asn1/gen_encode.c (encode_type, generate_type_encode): add
972 TUInteger
973 * lib/asn1/gen_decode.c (decode_type, generate_type_decode): add
974 TUInteger
975 * lib/asn1/gen_copy.c (copy_type): add TUInteger
976 * lib/asn1/gen.c (define_asn1): add TUInteger
977 * lib/asn1/der_put.c (encode_unsigned): add
978 * lib/asn1/der_length.c (length_unsigned): add
979 * lib/asn1/der_get.c (decode_unsigned): add
980 * lib/asn1/der.h (decode_unsigned, encode_unsigned,
981 length_unsigned): add prototypes
982
983 * lib/asn1/k5.asn1: update pre-authentication types
984 * lib/krb5/krb5_err.et: add some error codes from pkinit
985
9862000-04-05 Assar Westerlund <assar@sics.se>
987
988 * lib/hdb/hdb.c: add support for hdb methods (aka back-ends).
989 include ldap.
990 * lib/hdb/hdb-ldap.c: tweak the ifdef to OPENLDAP
991 * lib/hdb/Makefile.am: add hdb-ldap.c and openldap
992 * kdc/Makefile.am, kpasswd/Makefile.am, kadmin/Makefile.am: add
993 * configure.in: bump version to 0.2s-pre add options and testing
994 for (open)ldap
995
9962000-04-04 Assar Westerlund <assar@sics.se>
997
998 * configure.in (krb4): fix the krb_mk_req test
999
10002000-04-03 Assar Westerlund <assar@sics.se>
1001
1002 * configure.in (krb4): add test for const arguments to krb_mk_req
1003 * lib/45/mk_req.c (krb_mk_req): conditionalize const-ness of
1004 arguments
1005
10062000-04-03 Assar Westerlund <assar@sics.se>
1007
1008 * Release 0.2r
1009
10102000-04-03 Assar Westerlund <assar@sics.se>
1011
1012 * lib/krb5/Makefile.am: set version to 10:0:0
1013 * lib/45/mk_req.c (krb_mk_req): const-ize the arguments
1014
10152000-03-30 Assar Westerlund <assar@sics.se>
1016
1017 * lib/krb5/principal.c (krb5_425_conv_principal_ext): add some
1018 comments. add fall-back on adding the realm name in lower case.
1019
10202000-03-29 Assar Westerlund <assar@sics.se>
1021
1022 * kdc/connect.c: remember to repoint all descr->sa to _ss after
1023 realloc as this might have moved the memory around. problem
1024 discovered and diagnosed by Brandon S. Allbery
1025
10262000-03-27 Assar Westerlund <assar@sics.se>
1027
1028 * configure.in: recognize solaris 2.8
1029 * config.guess, config.sub: update to current version from
1030 :pserver:anoncvs@subversions.gnu.org:/home/cvs
1031
1032 * lib/krb5/init_creds_pw.c (print_expire): do not assume anything
1033 about the size of time_t, i.e. make it 64-bit happy
1034
10352000-03-13 Assar Westerlund <assar@sics.se>
1036
1037 * kuser/klist.c: add support for display v4 tickets
1038
10392000-03-11 Assar Westerlund <assar@sics.se>
1040
1041 * kdc/kaserver.c (do_authenticate, do_getticket): call check_flags
1042 * kdc/kerberos4.c (do_version4): call check_flags.
1043 * kdc/kerberos5.c (check_flags): make global
1044
10452000-03-10 Assar Westerlund <assar@sics.se>
1046
1047 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): evil
1048 hack to avoid recursion
1049
10502000-03-04 Assar Westerlund <assar@sics.se>
1051
1052 * kuser/kinit.c: add `krb4_get_tickets' per realm. add --anonymous
1053 * lib/krb5/krb5.h (krb5_get_init_creds_opt): add `anonymous' and
1054 KRB5_GET_INIT_CREDS_OPT_ANONYMOUS
1055 * lib/krb5/init_creds_pw.c (get_init_creds_common): set
1056 request_anonymous flag appropriatly
1057 * lib/krb5/init_creds.c (krb5_get_init_creds_opt_set_anonymous):
1058 add
1059
1060 * lib/krb5/get_in_tkt.c (_krb5_extract_ticket): new parameter to
1061 determine whetever to ignore client name of not. always copy
1062 client name from kdc. fix callers.
1063
1064 * kdc: add support for anonymous tickets
1065
1066 * kdc/string2key.8: add man-page for string2key
1067
10682000-03-03 Assar Westerlund <assar@sics.se>
1069
1070 * kdc/hpropd.c (dump_krb4): get expiration date from `valid_end'
1071 and not `pw_end'
1072
1073 * kdc/kadb.h (ka_entry): fix name pw_end -> valid_end. add some
1074 more fields
1075
1076 * kdc/hprop.c (v4_prop): set the `valid_end' from the v4
1077 expiration date instead of the `pw_expire'
1078 (ka_convert): set `valid_end' from ka expiration data and `pw_expire'
1079 from pw_change + pw_expire
1080 (main): add a default database for ka dumping
1081
10822000-02-28 Assar Westerlund <assar@sics.se>
1083
1084 * lib/krb5/context.c (init_context_from_config_file): change
1085 rfc2052 default to no. 2782 says that underscore should be used.
1086
10872000-02-24 Assar Westerlund <assar@sics.se>
1088
1089 * lib/krb5/fcache.c (fcc_initialize, fcc_store_cred): verify that
1090 stores and close succeed
1091 * lib/krb5/store.c (krb5_store_creds): check to see that the
1092 stores are succesful.
1093
10942000-02-23 Assar Westerlund <assar@sics.se>
1095
1096 * Release 0.2q
1097
10982000-02-22 Assar Westerlund <assar@sics.se>
1099
1100 * lib/krb5/Makefile.am: set version to 9:2:0
1101
1102 * lib/krb5/expand_hostname.c (krb5_expand_hostname_realms): copy
1103 the correct hostname
1104
1105 * kdc/connect.c (add_new_tcp): use the correct entries in the
1106 descriptor table
1107 * kdc/connect.c: initialize `descr' uniformly and correctly
1108
11092000-02-20 Assar Westerlund <assar@sics.se>
1110
1111 * Release 0.2p
1112
11132000-02-19 Assar Westerlund <assar@sics.se>
1114
1115 * lib/krb5/Makefile.am: set version to 9:1:0
1116
1117 * lib/krb5/expand_hostname.c (krb5_expand_hostname): make sure
1118 that realms is filled in even when getaddrinfo fails or does not
1119 return any canonical name
1120
1121 * kdc/connect.c (descr): add sockaddr and string representation
1122 (*): re-write to use the above mentioned
1123
11242000-02-16 Assar Westerlund <assar@sics.se>
1125
1126 * lib/krb5/addr_families.c (krb5_parse_address): use
1127 krb5_sockaddr2address to copy the result from getaddrinfo.
1128
11292000-02-14 Assar Westerlund <assar@sics.se>
1130
1131 * Release 0.2o
1132
11332000-02-13 Assar Westerlund <assar@sics.se>
1134
1135 * lib/krb5/Makefile.am: set version to 9:0:0
1136
1137 * kdc/kaserver.c (do_authenticate): return the kvno of the server
1138 and not the client. Thanks to Brandon S. Allbery KF8NH
1139 <allbery@kf8nh.apk.net> and Chaskiel M Grundman
1140 <cg2v@andrew.cmu.edu> for debugging.
1141
1142 * kdc/kerberos4.c (do_version4): if an tgs-req is received with an
1143 old kvno, return an error reply and write a message in the log.
1144
11452000-02-12 Assar Westerlund <assar@sics.se>
1146
1147 * appl/test/gssapi_server.c (proto): with `--fork', create a child
1148 and send over/receive creds with export/import_sec_context
1149 * appl/test/gssapi_client.c (proto): with `--fork', create a child
1150 and send over/receive creds with export/import_sec_context
1151 * appl/test/common.c: add `--fork' / `-f' (only used by gssapi)
1152
11532000-02-11 Assar Westerlund <assar@sics.se>
1154
1155 * kdc/kdc_locl.h: remove keyfile add explicit_addresses
1156 * kdc/connect.c (init_sockets): pay attention to
1157 explicit_addresses some more comments. better error messages.
1158 * kdc/config.c: add some comments.
1159 remove --key-file.
1160 add --addresses.
1161
1162 * lib/krb5/context.c (krb5_set_extra_addresses): const-ize and use
1163 proper abstraction
1164
11652000-02-07 Johan Danielsson <joda@pdc.kth.se>
1166
1167 * lib/krb5/changepw.c: use roken_getaddrinfo_hostspec
1168
11692000-02-07 Assar Westerlund <assar@sics.se>
1170
1171 * Release 0.2n
1172
11732000-02-07 Assar Westerlund <assar@sics.se>
1174
1175 * lib/krb5/Makefile.am: set version to 8:0:0
1176 * lib/krb5/keytab.c (krb5_kt_default_name): use strlcpy
1177 (krb5_kt_add_entry): set timestamp
1178
11792000-02-06 Assar Westerlund <assar@sics.se>
1180
1181 * lib/krb5/krb5.h: add macros for accessing krb5_realm
1182 * lib/krb5/time.c (krb5_timeofday): use `krb5_timestamp' instead
1183 of `int32_t'
1184
1185 * lib/krb5/replay.c (checksum_authenticator): update to new API
1186 for md5
1187
1188 * lib/krb5/krb5.h: remove des.h, it's not needed and applications
1189 should not have to make sure to find it.
1190
11912000-02-03 Assar Westerlund <assar@sics.se>
1192
1193 * lib/krb5/rd_req.c (get_key_from_keytab): rename parameter to
1194 `out_key' to avoid conflicting with label. reported by Sean Doran
1195 <smd@ebone.net>
1196
11972000-02-02 Assar Westerlund <assar@sics.se>
1198
1199 * lib/krb5/expand_hostname.c: remember to lower-case host names.
1200 bug reported by <amu@mit.edu>
1201
1202 * kdc/kerberos4.c (do_version4): look at check_ticket_addresses
1203 and emulate that by setting krb_ignore_ip_address (not a great
1204 interface but it doesn't seem like the time to go around fixing
1205 libkrb stuff now)
1206
12072000-02-01 Johan Danielsson <joda@pdc.kth.se>
1208
1209 * kuser/kinit.c: change --noaddresses into --no-addresses
1210
12112000-01-28 Assar Westerlund <assar@sics.se>
1212
1213 * kpasswd/kpasswd.c (main): make sure the ticket is not
1214 forwardable and not proxiable
1215
12162000-01-26 Assar Westerlund <assar@sics.se>
1217
1218 * lib/krb5/crypto.c: update to pseudo-standard APIs for
1219 md4,md5,sha. some changes to libdes calls to make them more
1220 portable.
1221
12222000-01-21 Assar Westerlund <assar@sics.se>
1223
1224 * lib/krb5/verify_init.c (krb5_verify_init_creds): make sure to
1225 clean up the correct creds.
1226
12272000-01-16 Assar Westerlund <assar@sics.se>
1228
1229 * lib/krb5/principal.c (append_component): change parameter to
1230 `const char *'. check malloc
1231 * lib/krb5/principal.c (append_component, va_ext_princ, va_princ):
1232 const-ize
1233 * lib/krb5/mk_req.c (krb5_mk_req): make `service' and `hostname'
1234 const
1235 * lib/krb5/principal.c (replace_chars): also add space here
1236 * lib/krb5/principal.c: (quotable_chars): add space
1237
12382000-01-12 Assar Westerlund <assar@sics.se>
1239
1240 * kdc/kerberos4.c (do_version4): check if preauth was required and
1241 bail-out if so since there's no way that could be done in v4.
1242 Return NULL_KEY as an error to the client (which is non-obvious,
1243 but what can you do?)
1244
12452000-01-09 Assar Westerlund <assar@sics.se>
1246
1247 * lib/krb5/principal.c (krb5_sname_to_principal): use
1248 krb5_expand_hostname_realms
1249 * lib/krb5/mk_req.c (krb5_km_req): use krb5_expand_hostname_realms
1250 * lib/krb5/expand_hostname.c (krb5_expand_hostname_realms): new
1251 variant of krb5_expand_hostname that tries until it expands into
1252 something that's digestable by krb5_get_host_realm, returning also
1253 the result from that function.
1254
12552000-01-08 Assar Westerlund <assar@sics.se>
1256
1257 * Release 0.2m
1258
12592000-01-08 Assar Westerlund <assar@sics.se>
1260
1261 * configure.in: replace AC_C_BIGENDIAN with KRB_C_BIGENDIAN
1262
1263 * lib/krb5/Makefile.am: bump version to 7:1:0
1264
1265 * lib/krb5/principal.c (krb5_sname_to_principal): use
1266 krb5_expand_hostname
1267 * lib/krb5/expand_hostname.c (krb5_expand_hostname): handle
1268 ai_canonname being set in any of the addresses returnedby
1269 getaddrinfo. glibc apparently returns the reverse lookup of every
1270 address in ai_canonname.
1271
12722000-01-06 Assar Westerlund <assar@sics.se>
1273
1274 * Release 0.2l
1275
12762000-01-06 Assar Westerlund <assar@sics.se>
1277
1278 * lib/krb5/Makefile.am: set version to 7:0:0
1279 * lib/krb5/principal.c (krb5_sname_to_principal): remove `hp'
1280
1281 * lib/hdb/Makefile.am: set version to 4:1:1
1282
1283 * kdc/hpropd.c (dump_krb4): use `krb5_get_default_realms'
1284 * lib/krb5/get_in_tkt.c (add_padata): change types to make
1285 everything work out
1286 (krb5_get_in_cred): remove const to make types match
1287 * lib/krb5/crypto.c (ARCFOUR_string_to_key): correct signature
1288 * lib/krb5/principal.c (krb5_sname_to_principal): handle not
1289 getting back a canonname
1290
12912000-01-06 Assar Westerlund <assar@sics.se>
1292
1293 * Release 0.2k
1294
12952000-01-06 Assar Westerlund <assar@sics.se>
1296
1297 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): advance colon so that
1298 we actually parse the port number. based on a patch from Leif
1299 Johansson <leifj@it.su.se>
1300
13012000-01-02 Assar Westerlund <assar@sics.se>
1302
1303 * admin/purge.c: remove all non-current and old entries from a
1304 keytab
1305
1306 * admin: break up ktutil.c into files
1307
1308 * admin/ktutil.c (list): support --verbose (also listning time
1309 stamps)
1310 (kt_add, kt_get): set timestamp in newly created entries
1311 (kt_change): add `change' command
1312
1313 * admin/srvconvert.c (srvconv): set timestamp in newly created
1314 entries
1315 * lib/krb5/keytab_keyfile.c (akf_next_entry): set timetsamp,
1316 always go the a predicatble position on error
1317 * lib/krb5/keytab.c (krb5_kt_copy_entry_contents): copy timestamp
1318 * lib/krb5/keytab_file.c (fkt_add_entry): store timestamp
1319 (fkt_next_entry_int): return timestamp
1320 * lib/krb5/krb5.h (krb5_keytab_entry): add timestamp
Note: See TracBrowser for help on using the repository browser.