| 1 | 2002-12-19 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 2 |
|
|---|
| 3 | * lib/krb5/mk_rep.c: free allocated storage; reported by Howard
|
|---|
| 4 | Chu
|
|---|
| 5 |
|
|---|
| 6 | 2002-12-08 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 7 |
|
|---|
| 8 | * kdc/kdc_locl.h: remove old encrypt_v4_ticket prototype
|
|---|
| 9 |
|
|---|
| 10 | 2002-12-02 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 11 |
|
|---|
| 12 | * kpasswd/kpasswdd.c (doit): initialise sa_size to size of
|
|---|
| 13 | sockaddr_storage
|
|---|
| 14 |
|
|---|
| 15 | * kdc/connect.c (init_socket): initialise sa_size to size of
|
|---|
| 16 | sockaddr_storage
|
|---|
| 17 |
|
|---|
| 18 | 2002-11-15 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 19 |
|
|---|
| 20 | * lib/krb5/krb5.h: remove trailing comma in enum
|
|---|
| 21 |
|
|---|
| 22 | 2002-11-07 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 23 |
|
|---|
| 24 | * kdc/524.c: implement crude b2 style (non-)conversion for use
|
|---|
| 25 | with afs
|
|---|
| 26 |
|
|---|
| 27 | * kdc/kerberos4.c: move encrypt_v4_ticket to 524.c, since that's
|
|---|
| 28 | where it's used
|
|---|
| 29 |
|
|---|
| 30 | 2002-10-21 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 31 |
|
|---|
| 32 | * lib/krb5/keytab_keyfile.c: more strcspn
|
|---|
| 33 |
|
|---|
| 34 | * lib/krb5/store_emem.c (emem_store): limit how much we allocate
|
|---|
| 35 | (from Olaf Kirch)
|
|---|
| 36 |
|
|---|
| 37 | * lib/krb5/principal.c: don't allow trailing backslashes in
|
|---|
| 38 | components
|
|---|
| 39 |
|
|---|
| 40 | * kdc/connect.c: check that %-quotes are followed by two hex
|
|---|
| 41 | digits
|
|---|
| 42 |
|
|---|
| 43 | * lib/krb5/keytab_any.c: properly close the open keytabs (from
|
|---|
| 44 | Larry Greenfield)
|
|---|
| 45 |
|
|---|
| 46 | * kdc/kaserver.c: make sure life is positive (from John Godehn)
|
|---|
| 47 |
|
|---|
| 48 | 2002-10-17 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 49 |
|
|---|
| 50 | * kuser/klist.c (display_tokens): allow tokens up to size of
|
|---|
| 51 | buffer (from Magnus Holmberg)
|
|---|
| 52 |
|
|---|
| 53 | 2002-09-29 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 54 |
|
|---|
| 55 | * lib/krb5/changepw.c (process_reply): fix reply length check
|
|---|
| 56 | calculation (reported by various people)
|
|---|
| 57 |
|
|---|
| 58 | 2002-09-24 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 59 |
|
|---|
| 60 | * lib/krb5/keytab_file.c (fkt_remove_entry): check return value
|
|---|
| 61 | from start_seq_get (from Wynn Wilkes)
|
|---|
| 62 |
|
|---|
| 63 | 2002-09-19 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 64 |
|
|---|
| 65 | * lib/krb5/context.c (krb5_set_config_files): return ENXIO instead
|
|---|
| 66 | of ENOENT when "unconfigured"
|
|---|
| 67 |
|
|---|
| 68 | 2002-09-16 Jacques Vidrine <nectar@kth.se>
|
|---|
| 69 |
|
|---|
| 70 | * lib/krb5/kuserok.c, lib/krb5/prompter_posix.c: use strcspn
|
|---|
| 71 | to convert the newline to NUL in fgets results.
|
|---|
| 72 |
|
|---|
| 73 | 2002-09-13 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 74 |
|
|---|
| 75 | * kuser/kinit.1: remove unneeded Ns
|
|---|
| 76 |
|
|---|
| 77 | * lib/krb5/krb5_appdefault.3: remove extra "application"
|
|---|
| 78 |
|
|---|
| 79 | * fix-export: remove autom4ate.cache
|
|---|
| 80 |
|
|---|
| 81 | 2002-09-10 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 82 |
|
|---|
| 83 | * include/make_crypto.c: don't use function macros if possible
|
|---|
| 84 |
|
|---|
| 85 | * lib/krb5/krb5_locl.h: get limits.h for UINT_MAX
|
|---|
| 86 |
|
|---|
| 87 | * include/Makefile.am: use make_crypto to create crypto-headers.h
|
|---|
| 88 |
|
|---|
| 89 | * include/make_crypto.c: crypto header generation tool
|
|---|
| 90 |
|
|---|
| 91 | * configure.in: move crypto test to just after testing for krb4,
|
|---|
| 92 | and move roken tests to after both, this speeds up various failure
|
|---|
| 93 | cases with krb4
|
|---|
| 94 |
|
|---|
| 95 | * lib/krb5/config_file.c: don't use NULL when we mean 0
|
|---|
| 96 |
|
|---|
| 97 | * configure.in: we don't set package_libdir anymore, so no point
|
|---|
| 98 | in testing for it
|
|---|
| 99 |
|
|---|
| 100 | * tools/Makefile.am: subst INCLUDE_des
|
|---|
| 101 |
|
|---|
| 102 | * tools/krb5-config.in: add INCLUDE_des to cflags
|
|---|
| 103 |
|
|---|
| 104 | * configure.in: use AC_CONFIG_SRCDIR
|
|---|
| 105 |
|
|---|
| 106 | * fix-export: remove some unneeded stuff
|
|---|
| 107 |
|
|---|
| 108 | * kuser/kinit.c (do_524init): free principals
|
|---|
| 109 |
|
|---|
| 110 | 2002-09-09 Jacques Vidrine <nectar@kth.se>
|
|---|
| 111 |
|
|---|
| 112 | * kdc/kerberos5.c (get_pa_etype_info, fix_transited_encoding),
|
|---|
| 113 | kdc/kaserver.c (krb5_ret_xdr_data),
|
|---|
| 114 | lib/krb5/transited.c (krb5_domain_x500_decode): Validate some
|
|---|
| 115 | counts: Check that they are non-negative, and that they are small
|
|---|
| 116 | enough to avoid integer overflow when used in memory allocation
|
|---|
| 117 | calculations. Potential problem areas pointed out by
|
|---|
| 118 | Sebastian Krahmer <krahmer@suse.de>.
|
|---|
| 119 |
|
|---|
| 120 | * lib/krb5/keytab_keyfile.c (akf_add_entry): Use O_EXCL when
|
|---|
| 121 | creating a new keyfile.
|
|---|
| 122 |
|
|---|
| 123 | 2002-09-09 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 124 |
|
|---|
| 125 | * configure.in: don't try to build pam module
|
|---|
| 126 |
|
|---|
| 127 | 2002-09-05 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 128 |
|
|---|
| 129 | * appl/kf/kf.c: fix warning string
|
|---|
| 130 |
|
|---|
| 131 | * lib/krb5/log.c (krb5_vlog_msg): delay message formating till we
|
|---|
| 132 | know we need it
|
|---|
| 133 |
|
|---|
| 134 | 2002-09-04 Assar Westerlund <assar@kth.se>
|
|---|
| 135 |
|
|---|
| 136 | * kdc/kerberos5.c (encode_reply): correct error logging
|
|---|
| 137 |
|
|---|
| 138 | 2002-09-04 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 139 |
|
|---|
| 140 | * lib/krb5/sendauth.c: close ccache if we opened it
|
|---|
| 141 |
|
|---|
| 142 | * appl/kf/kf.c: handle new protocol
|
|---|
| 143 |
|
|---|
| 144 | * appl/kf/kfd.c: use krb5_err instead of sysloging directly,
|
|---|
| 145 | handle the new protocol, and bail out if an old client tries to
|
|---|
| 146 | connect
|
|---|
| 147 |
|
|---|
| 148 | * appl/kf/kf_locl.h: we need a protocol version string
|
|---|
| 149 |
|
|---|
| 150 | * lib/hdb/hdb-ldap.c: use ASN1_MALLOC_ENCODE
|
|---|
| 151 |
|
|---|
| 152 | * kdc/kerberos5.c: use ASN1_MALLOC_ENCODE
|
|---|
| 153 |
|
|---|
| 154 | * kdc/hprop.c: set AP_OPTS_USE_SUBKEY
|
|---|
| 155 |
|
|---|
| 156 | * lib/hdb/common.c: use ASN1_MALLOC_ENCODE
|
|---|
| 157 |
|
|---|
| 158 | * lib/asn1/gen.c: add convenience macro that allocates a buffer
|
|---|
| 159 | and encoded into that
|
|---|
| 160 |
|
|---|
| 161 | * lib/krb5/get_cred.c (init_tgs_req): use
|
|---|
| 162 | in_creds->session.keytype literally instead of trying to convert
|
|---|
| 163 | to a list of enctypes (it should already be an enctype)
|
|---|
| 164 |
|
|---|
| 165 | * lib/krb5/get_cred.c (init_tgs_req): init ret
|
|---|
| 166 |
|
|---|
| 167 | 2002-09-03 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 168 |
|
|---|
| 169 | * lib/asn1/k5.asn1: remove ETYPE_DES3_CBC_NONE_IVEC
|
|---|
| 170 |
|
|---|
| 171 | * lib/krb5/krb5.h: remove ENCTYPE_DES3_CBC_NONE_IVEC
|
|---|
| 172 |
|
|---|
| 173 | * lib/krb5/crypto.c: get rid of DES3_CBC_encrypt_ivec, just use
|
|---|
| 174 | zero ivec in DES3_CBC_encrypt if passed ivec is NULL
|
|---|
| 175 |
|
|---|
| 176 | * lib/krb5/Makefile.am: back out 1.144, since it will re-create
|
|---|
| 177 | krb5-protos.h at build-time, which requires perl, which is bad
|
|---|
| 178 |
|
|---|
| 179 | * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
|
|---|
| 180 | blindly use the local subkey
|
|---|
| 181 |
|
|---|
| 182 | * lib/krb5/crypto.c: add function krb5_crypto_getblocksize that
|
|---|
| 183 | extracts the required blocksize from a crypto context
|
|---|
| 184 |
|
|---|
| 185 | * lib/krb5/build_auth.c: just get the length of the encoded
|
|---|
| 186 | authenticator instead of trying to grow a buffer
|
|---|
| 187 |
|
|---|
| 188 | 2002-09-03 Assar Westerlund <assar@kth.se>
|
|---|
| 189 |
|
|---|
| 190 | * configure.in: add --disable-mmap option, and tests for
|
|---|
| 191 | sys/mman.h and mmap
|
|---|
| 192 |
|
|---|
| 193 | 2002-09-03 Jacques Vidrine <nectar@kth.se>
|
|---|
| 194 |
|
|---|
| 195 | * lib/krb5/changepw.c: verify lengths in response
|
|---|
| 196 |
|
|---|
| 197 | * lib/asn1/der_get.c (decode_integer, decode_unsigned): check for
|
|---|
| 198 | truncated integers
|
|---|
| 199 |
|
|---|
| 200 | 2002-09-02 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 201 |
|
|---|
| 202 | * lib/krb5/mk_req_ext.c: generate a local subkey if
|
|---|
| 203 | AP_OPTS_USE_SUBKEY is set
|
|---|
| 204 |
|
|---|
| 205 | * lib/krb5/build_auth.c: we don't have enough information about
|
|---|
| 206 | whether to generate a local subkey here, so don't try to
|
|---|
| 207 |
|
|---|
| 208 | * lib/krb5/auth_context.c: new function
|
|---|
| 209 | krb5_auth_con_generatelocalsubkey
|
|---|
| 210 |
|
|---|
| 211 | * lib/krb5/get_in_tkt.c: only set kdc_sec_offset if looking at an
|
|---|
| 212 | initial ticket
|
|---|
| 213 |
|
|---|
| 214 | * lib/krb5/context.c (init_context_from_config_file): simplify
|
|---|
| 215 | initialisation of srv_lookup
|
|---|
| 216 |
|
|---|
| 217 | * lib/krb5/changepw.c (send_request): set AP_OPTS_USE_SUBKEY
|
|---|
| 218 |
|
|---|
| 219 | * lib/krb5/krb5.h: add AP_OPTS_USE_SUBKEY
|
|---|
| 220 |
|
|---|
| 221 | 2002-08-30 Assar Westerlund <assar@kth.se>
|
|---|
| 222 |
|
|---|
| 223 | * lib/krb5/name-45-test.c: also test krb5_524_conv_principal
|
|---|
| 224 | * lib/krb5/Makefile.am (TESTS): add name-45-test
|
|---|
| 225 | * lib/krb5/name-45-test.c: add testcases for
|
|---|
| 226 | krb5_425_conv_principal
|
|---|
| 227 |
|
|---|
| 228 | 2002-08-29 Assar Westerlund <assar@kth.se>
|
|---|
| 229 |
|
|---|
| 230 | * lib/krb5/parse-name-test.c: also test unparse_short functions
|
|---|
| 231 | * lib/asn1/asn1_print.c: use com_err/error_message API
|
|---|
| 232 | * lib/krb5/Makefile.am: add parse-name-test
|
|---|
| 233 | * lib/krb5/parse-name-test.c: add a program for testing parsing
|
|---|
| 234 | and unparsing principal names
|
|---|
| 235 |
|
|---|
| 236 | 2002-08-28 Assar Westerlund <assar@kth.se>
|
|---|
| 237 |
|
|---|
| 238 | * kdc/config.c: add missing ifdef DAEMON
|
|---|
| 239 |
|
|---|
| 240 | 2002-08-28 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 241 |
|
|---|
| 242 | * configure.in: use rk_SUNOS
|
|---|
| 243 |
|
|---|
| 244 | * kdc/config.c: add detach options
|
|---|
| 245 |
|
|---|
| 246 | * kdc/main.c: maybe detach from console?
|
|---|
| 247 |
|
|---|
| 248 | * kdc/kdc.8: markup changes
|
|---|
| 249 |
|
|---|
| 250 | * configure.in: AC_TEST_PACKAGE_NEW -> rk_TEST_PACKAGE
|
|---|
| 251 |
|
|---|
| 252 | * configure.in: use rk_TELNET, rename some other macros, and don't
|
|---|
| 253 | add -ldes to krb4 link command
|
|---|
| 254 |
|
|---|
| 255 | * kuser/kinit.1: whitespace fix (from NetBSD)
|
|---|
| 256 |
|
|---|
| 257 | * include/bits.c: we may need unistd.h for ssize_t
|
|---|
| 258 |
|
|---|
| 259 | 2002-08-26 Assar Westerlund <assar@kth.se>
|
|---|
| 260 |
|
|---|
| 261 | * lib/krb5/principal.c (krb5_425_conv_principal_ext): lookup AAAA
|
|---|
| 262 | rrs before A ones when using the resolver to verify a mapping,
|
|---|
| 263 | also use getaddrinfo when resolver is not available
|
|---|
| 264 |
|
|---|
| 265 | * lib/hdb/keytab.c (find_db): const-correctness in parameters to
|
|---|
| 266 | krb5_config_get_next
|
|---|
| 267 |
|
|---|
| 268 | * lib/asn1/gen.c: include <string.h> in the generated files (for
|
|---|
| 269 | memset)
|
|---|
| 270 |
|
|---|
| 271 | 2002-08-22 Assar Westerlund <assar@kth.se>
|
|---|
| 272 |
|
|---|
| 273 | * lib/krb5/test_get_addrs.c, lib/krb5/krbhst-test.c: make it use
|
|---|
| 274 | getarg so that it can handle --help and --version (and thus make
|
|---|
| 275 | check can pass)
|
|---|
| 276 |
|
|---|
| 277 | * lib/asn1/check-der.c: make this build again
|
|---|
| 278 |
|
|---|
| 279 | 2002-08-22 Assar Westerlund <assar@kth.se>
|
|---|
| 280 |
|
|---|
| 281 | * lib/asn1/der_get.c (der_get_int): handle len == 0. based on a
|
|---|
| 282 | patch from Love <lha@stacken.kth.se>
|
|---|
| 283 |
|
|---|
| 284 | 2002-08-22 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 285 |
|
|---|
| 286 | * lib/krb5/krb5.h: we seem to call KRB5KDC_ERR_KEY_EXP
|
|---|
| 287 | KRB5KDC_ERR_KEY_EXPIRED, so define the former to the latter
|
|---|
| 288 |
|
|---|
| 289 | * kdc/kdc.8: add blurb about adding and removing addresses; update
|
|---|
| 290 | kdc.conf section to match reality
|
|---|
| 291 |
|
|---|
| 292 | * configure.in: KRB_SENDAUTH_VLEN seems to always have existed, so
|
|---|
| 293 | don't define it
|
|---|
| 294 |
|
|---|
| 295 | 2002-08-21 Assar Westerlund <assar@kth.se>
|
|---|
| 296 |
|
|---|
| 297 | * lib/asn1/asn1_print.c: print OIDs too, based on a patch from
|
|---|
| 298 | Love <lha@stacken.kth.se>
|
|---|
| 299 |
|
|---|
| 300 | 2002-08-21 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 301 |
|
|---|
| 302 | * kuser/kinit.c (do_v4_fallback): don't use krb_get_pw_in_tkt2
|
|---|
| 303 | since it might not exist, and we don't actually care about the key
|
|---|
| 304 |
|
|---|
| 305 | 2002-08-20 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 306 |
|
|---|
| 307 | * lib/krb5/krb5.conf.5: correct documentation for
|
|---|
| 308 | verify_ap_req_nofail
|
|---|
| 309 |
|
|---|
| 310 | * lib/krb5/log.c: rename syslog_data to avoid name conflicts (from
|
|---|
| 311 | Mattias Amnefelt)
|
|---|
| 312 |
|
|---|
| 313 | * kuser/klist.c (display_tokens): increase token buffer size, and
|
|---|
| 314 | add more checks of the kernel data (from Love)
|
|---|
| 315 |
|
|---|
| 316 | 2002-08-19 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 317 |
|
|---|
| 318 | * fix-export: use make to parse Makefile.am instead of perl
|
|---|
| 319 |
|
|---|
| 320 | * configure.in: use argument-less AM_INIT_AUTOMAKE, now that it
|
|---|
| 321 | groks AC_INIT with package name etc.
|
|---|
| 322 |
|
|---|
| 323 | * kpasswd/kpasswdd.c: include <kadm5/private.h>
|
|---|
| 324 |
|
|---|
| 325 | * lib/asn1/asn1_print.c: include com_right.h
|
|---|
| 326 |
|
|---|
| 327 | * lib/krb5/addr_families.c: socklen_t -> krb5_socklen_t
|
|---|
| 328 |
|
|---|
| 329 | * include/bits.c: define krb5_socklen_t type; this should really
|
|---|
| 330 | go someplace else, but this was easy
|
|---|
| 331 |
|
|---|
| 332 | * lib/krb5/verify_krb5_conf.c: don't bail out if parsing of a file
|
|---|
| 333 | fails, just warn about it
|
|---|
| 334 |
|
|---|
| 335 | * kdc/log.c (kdc_openlog): no need for a config_file parameter
|
|---|
| 336 |
|
|---|
| 337 | * kdc/config.c: just treat kdc.conf like any other config file
|
|---|
| 338 |
|
|---|
| 339 | * lib/krb5/context.c (krb5_get_default_config_files): ignore
|
|---|
| 340 | duplicate files
|
|---|
| 341 |
|
|---|
| 342 | 2002-08-16 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 343 |
|
|---|
| 344 | * lib/krb5/krb5.h: turn strings into pointers, so we can assign to
|
|---|
| 345 | them
|
|---|
| 346 |
|
|---|
| 347 | * lib/krb5/constants.c: turn strings into pointers, so we can
|
|---|
| 348 | assign to them
|
|---|
| 349 |
|
|---|
| 350 | * lib/krb5/get_addrs.c (get_addrs_int): initialise res if
|
|---|
| 351 | SCAN_INTERFACES is not set
|
|---|
| 352 |
|
|---|
| 353 | * lib/krb5/context.c: fix various borked stuff in previous commits
|
|---|
| 354 |
|
|---|
| 355 | 2002-08-16 Jacques Vidrine <n@nectar.com>
|
|---|
| 356 |
|
|---|
| 357 | * lib/krb5/krbhst.c (kpasswd_get_next): if we fall back to using
|
|---|
| 358 | the `admin_server' entry for kpasswd, override the `proto' result
|
|---|
| 359 | to be UDP.
|
|---|
| 360 |
|
|---|
| 361 | 2002-08-15 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 362 |
|
|---|
| 363 | * lib/krb5/auth_context.c: check return value of
|
|---|
| 364 | krb5_sockaddr2address
|
|---|
| 365 |
|
|---|
| 366 | * lib/krb5/addr_families.c: check return value of
|
|---|
| 367 | krb5_sockaddr2address
|
|---|
| 368 |
|
|---|
| 369 | * lib/krb5/context.c: get the default keytab from KRB5_KTNAME
|
|---|
| 370 |
|
|---|
| 371 | 2002-08-14 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 372 |
|
|---|
| 373 | * lib/krb5/verify_krb5_conf.c: allow parsing of more than one file
|
|---|
| 374 |
|
|---|
| 375 | * lib/krb5/context.c: allow changing config files with the
|
|---|
| 376 | function krb5_set_config_files, there are also related functions
|
|---|
| 377 | krb5_get_default_config_files and krb5_free_config_files; these
|
|---|
| 378 | should work similar to their MIT counterparts
|
|---|
| 379 |
|
|---|
| 380 | * lib/krb5/config_file.c: allow the use of more than one config
|
|---|
| 381 | file by using the new function krb5_config_parse_file_multi
|
|---|
| 382 |
|
|---|
| 383 | 2002-08-12 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 384 |
|
|---|
| 385 | * use sysconfdir instead of /etc
|
|---|
| 386 |
|
|---|
| 387 | * configure.in: require autoconf 2.53; rename dpagaix_LDFLAGS etc
|
|---|
| 388 | to appease automake; force sysconfdir and localstatedir to /etc
|
|---|
| 389 | and /var/heimdal for now
|
|---|
| 390 |
|
|---|
| 391 | * kdc/connect.c (addr_to_string): check return value of
|
|---|
| 392 | sockaddr2address
|
|---|
| 393 |
|
|---|
| 394 | 2002-08-09 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 395 |
|
|---|
| 396 | * lib/krb5/rd_cred.c: if the remote address isn't an addrport,
|
|---|
| 397 | don't try comparing to one; this should make old clients work with
|
|---|
| 398 | new servers
|
|---|
| 399 |
|
|---|
| 400 | * lib/asn1/gen_decode.c: remove unused variable
|
|---|
| 401 |
|
|---|
| 402 | 2002-07-31 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 403 |
|
|---|
| 404 | * kdc/{kerberos5,524}.c: ENOENT -> HDB_ERR_NOENTRY (from Derrick
|
|---|
| 405 | Brashear)
|
|---|
| 406 |
|
|---|
| 407 | * lib/krb5/principal.c: actually lower case the lower case
|
|---|
| 408 | instance name (spotted by Derrick Brashear)
|
|---|
| 409 |
|
|---|
| 410 | 2002-07-24 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 411 |
|
|---|
| 412 | * fix-export: if DATEDVERSION is set, change the version to
|
|---|
| 413 | current date
|
|---|
| 414 |
|
|---|
| 415 | * configure.in: don't use AC_PROG_RANLIB, and use magic foo to set
|
|---|
| 416 | LTLIBOBJS
|
|---|
| 417 |
|
|---|
| 418 | 2002-07-04 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 419 |
|
|---|
| 420 | * kdc/connect.c: add some cache-control-foo to the http responses
|
|---|
| 421 | (from Gombas Gabor)
|
|---|
| 422 |
|
|---|
| 423 | * lib/krb5/addr_families.c (krb5_print_address): don't copy size
|
|---|
| 424 | if ret_len == NULL
|
|---|
| 425 |
|
|---|
| 426 | 2002-06-28 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 427 |
|
|---|
| 428 | * kuser/klist.c (display_tokens): don't bail out before we get
|
|---|
| 429 | EDOM (signaling the end of the tokens), the kernel can also return
|
|---|
| 430 | ENOTCONN, meaning that the index does not exist anymore (for
|
|---|
| 431 | example if the token has expired)
|
|---|
| 432 |
|
|---|
| 433 | 2002-06-06 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 434 |
|
|---|
| 435 | * lib/krb5/changepw.c: make sure we return an error if there are
|
|---|
| 436 | no changepw hosts found; from Wynn Wilkes
|
|---|
| 437 |
|
|---|
| 438 | 2002-05-29 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 439 |
|
|---|
| 440 | * lib/krb5/cache.c (krb5_cc_register): break out of loop when the
|
|---|
| 441 | same type is found; spotted by Wynn Wilkes
|
|---|
| 442 |
|
|---|
| 443 | 2002-05-28 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 444 |
|
|---|
| 445 | * lib/krb5/keytab_file.c: check size of entry before trying to
|
|---|
| 446 | read 32-bit kvno; also fix typo in previous
|
|---|
| 447 |
|
|---|
| 448 | 2002-05-24 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 449 |
|
|---|
| 450 | * include/Makefile.am: only add to INCLUDES
|
|---|
| 451 |
|
|---|
| 452 | * lib/45/mk_req.c: fix for storage change
|
|---|
| 453 |
|
|---|
| 454 | * lib/hdb/print.c: fix for storage change
|
|---|
| 455 |
|
|---|
| 456 | 2002-05-15 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 457 |
|
|---|
| 458 | * kdc/kerberos5.c: don't free encrypted padata until we're really
|
|---|
| 459 | done with it
|
|---|
| 460 |
|
|---|
| 461 | 2002-05-07 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 462 |
|
|---|
| 463 | * kdc/kerberos5.c: when decrypting pa-data, try all keys matching
|
|---|
| 464 | enctype
|
|---|
| 465 |
|
|---|
| 466 | * kuser/kinit.1: document -a
|
|---|
| 467 |
|
|---|
| 468 | * kuser/kinit.c: add command line switch for extra addresses
|
|---|
| 469 |
|
|---|
| 470 | 2002-04-30 Johan Danielsson <joda@blubb.pdc.kth.se>
|
|---|
| 471 |
|
|---|
| 472 | * configure.in: remove some duplicate tests
|
|---|
| 473 |
|
|---|
| 474 | * configure.in: use AC_HELP_STRING
|
|---|
| 475 |
|
|---|
| 476 | 2002-04-29 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 477 |
|
|---|
| 478 | * lib/krb5/crypto.c (usage2arcfour): don't abort if the usage is
|
|---|
| 479 | unknown
|
|---|
| 480 |
|
|---|
| 481 | 2002-04-25 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 482 |
|
|---|
| 483 | * configure.in: use rk_DESTDIRS
|
|---|
| 484 |
|
|---|
| 485 | 2002-04-22 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 486 |
|
|---|
| 487 | * lib/krb5/krb5_verify_user.3: make it clear that _lrealm modifies
|
|---|
| 488 | the principal
|
|---|
| 489 |
|
|---|
| 490 | 2002-04-19 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 491 |
|
|---|
| 492 | * lib/krb5/verify_init.c: fix typo in error string
|
|---|
| 493 |
|
|---|
| 494 | 2002-04-18 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 495 |
|
|---|
| 496 | * acconfig.h: remove some stuff that is defined elsewhere
|
|---|
| 497 |
|
|---|
| 498 | * lib/krb5/krb5_locl.h: include <sys/file.h>
|
|---|
| 499 |
|
|---|
| 500 | * lib/krb5/acl.c: rename acl_string parameter
|
|---|
| 501 |
|
|---|
| 502 | * lib/krb5/Makefile.am: remove __P from protos, and put parameter
|
|---|
| 503 | names in comments
|
|---|
| 504 |
|
|---|
| 505 | * kuser/klist.c: better align some headers
|
|---|
| 506 |
|
|---|
| 507 | * kdc/kerberos4.c: storage tweaks
|
|---|
| 508 |
|
|---|
| 509 | * kdc/kaserver.c: storage tweaks
|
|---|
| 510 |
|
|---|
| 511 | * kdc/524.c: storage tweaks
|
|---|
| 512 |
|
|---|
| 513 | * lib/krb5/keytab_krb4.c: storage tweaks
|
|---|
| 514 |
|
|---|
| 515 | * lib/krb5/keytab_keyfile.c: storage tweaks
|
|---|
| 516 |
|
|---|
| 517 | * lib/krb5/keytab_file.c: storage tweaks; also try to handle zero
|
|---|
| 518 | sized keytab files
|
|---|
| 519 |
|
|---|
| 520 | * lib/krb5/keytab_any.c: use KRB5_KT_END instead of KRB5_CC_END
|
|---|
| 521 |
|
|---|
| 522 | * lib/krb5/fcache.c: storage tweaks
|
|---|
| 523 |
|
|---|
| 524 | * lib/krb5/store_mem.c: make the krb5_storage opaque, and add
|
|---|
| 525 | function wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 526 | configurable
|
|---|
| 527 |
|
|---|
| 528 | * lib/krb5/store_fd.c: make the krb5_storage opaque, and add
|
|---|
| 529 | function wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 530 | configurable
|
|---|
| 531 |
|
|---|
| 532 | * lib/krb5/store_emem.c: make the krb5_storage opaque, and add
|
|---|
| 533 | function wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 534 | configurable
|
|---|
| 535 |
|
|---|
| 536 | * lib/krb5/store.c: make the krb5_storage opaque, and add function
|
|---|
| 537 | wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 538 | configurable
|
|---|
| 539 |
|
|---|
| 540 | * lib/krb5/store-int.h: make the krb5_storage opaque, and add
|
|---|
| 541 | function wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 542 | configurable
|
|---|
| 543 |
|
|---|
| 544 | * lib/krb5/krb5.h: make the krb5_storage opaque, and add function
|
|---|
| 545 | wrappers for store/fetch/seek, and also make the eof-code
|
|---|
| 546 | configurable
|
|---|
| 547 |
|
|---|
| 548 | * include/bits.c: include <sys/socket.h> to get socklen_t
|
|---|
| 549 |
|
|---|
| 550 | * kdc/kerberos5.c (get_pa_etype_info): sort ETYPE-INFOs by
|
|---|
| 551 | requested KDC-REQ etypes
|
|---|
| 552 |
|
|---|
| 553 | * kdc/hpropd.c: constify
|
|---|
| 554 |
|
|---|
| 555 | * kdc/hprop.c: constify
|
|---|
| 556 |
|
|---|
| 557 | * kdc/string2key.c: constify
|
|---|
| 558 |
|
|---|
| 559 | * kdc/kdc_locl.h: make port_str const
|
|---|
| 560 |
|
|---|
| 561 | * kdc/config.c: constify
|
|---|
| 562 |
|
|---|
| 563 | * lib/krb5/config_file.c: constify
|
|---|
| 564 |
|
|---|
| 565 | * kdc/kstash.c: constify
|
|---|
| 566 |
|
|---|
| 567 | * lib/krb5/verify_user.c: remove unnecessary cast
|
|---|
| 568 |
|
|---|
| 569 | * lib/krb5/recvauth.c: constify
|
|---|
| 570 |
|
|---|
| 571 | * lib/krb5/principal.c (krb5_parse_name): const qualify
|
|---|
| 572 |
|
|---|
| 573 | * lib/krb5/mcache.c (mcc_get_name): constify return type
|
|---|
| 574 |
|
|---|
| 575 | * lib/krb5/context.c (krb5_free_context): don't try to free the
|
|---|
| 576 | ccache prefix
|
|---|
| 577 |
|
|---|
| 578 | * lib/krb5/cache.c (krb5_cc_register): don't make a copy of the
|
|---|
| 579 | prefix
|
|---|
| 580 |
|
|---|
| 581 | * lib/krb5/krb5.h: constify some struct members
|
|---|
| 582 |
|
|---|
| 583 | * lib/krb5/log.c: constify
|
|---|
| 584 |
|
|---|
| 585 | * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): const
|
|---|
| 586 | qualify
|
|---|
| 587 |
|
|---|
| 588 | * lib/krb5/get_in_tkt.c (krb5_init_etype): constify
|
|---|
| 589 |
|
|---|
| 590 | * lib/krb5/crypto.c: constify some
|
|---|
| 591 |
|
|---|
| 592 | * lib/krb5/config_file.c: constify
|
|---|
| 593 |
|
|---|
| 594 | * lib/krb5/aname_to_localname.c (krb5_aname_to_localname):
|
|---|
| 595 | constify local variable
|
|---|
| 596 |
|
|---|
| 597 | * lib/krb5/addr_families.c (ipv4_sockaddr2port): constify
|
|---|
| 598 |
|
|---|
| 599 | 2002-04-17 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 600 |
|
|---|
| 601 | * lib/krb5/verify_krb5_conf.c: add some log checking
|
|---|
| 602 |
|
|---|
| 603 | * lib/krb5/log.c (krb5_addlog_dest): reorganise syslog parsing
|
|---|
| 604 |
|
|---|
| 605 | 2002-04-16 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 606 |
|
|---|
| 607 | * lib/krb5/crypto.c (krb5_crypto_init): check that the key size
|
|---|
| 608 | matches the expected length
|
|---|
| 609 |
|
|---|
| 610 | 2002-03-27 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 611 |
|
|---|
| 612 | * lib/krb5/send_to_kdc.c: rename send parameter to send_data
|
|---|
| 613 |
|
|---|
| 614 | * lib/krb5/mk_error.c: rename ctime parameter to client_time
|
|---|
| 615 |
|
|---|
| 616 | 2002-03-22 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 617 |
|
|---|
| 618 | * kdc/kerberos5.c (find_etype): unsigned -> krb5_enctype (from
|
|---|
| 619 | Reinoud Zandijk)
|
|---|
| 620 |
|
|---|
| 621 | 2002-03-18 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 622 |
|
|---|
| 623 | * lib/asn1/k5.asn1: add the GSS-API checksum type here
|
|---|
| 624 |
|
|---|
| 625 | 2002-03-11 Assar Westerlund <assar@sics.se>
|
|---|
| 626 |
|
|---|
| 627 | * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to
|
|---|
| 628 | 18:3:1
|
|---|
| 629 | * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): bump version to 7:5:0
|
|---|
| 630 | * lib/asn1/Makefile.am (libasn1_la_LDFLAGS): bump version to 6:0:0
|
|---|
| 631 |
|
|---|
| 632 | 2002-03-10 Assar Westerlund <assar@sics.se>
|
|---|
| 633 |
|
|---|
| 634 | * lib/krb5/rd_cred.c: handle addresses with port numbers
|
|---|
| 635 |
|
|---|
| 636 | * lib/krb5/keytab_file.c, lib/krb5/keytab.c:
|
|---|
| 637 | store the kvno % 256 as the byte and the complete 32 bit kvno after
|
|---|
| 638 | the end of the current keytab entry
|
|---|
| 639 |
|
|---|
| 640 | * lib/krb5/init_creds_pw.c:
|
|---|
| 641 | handle LR_PW_EXPTIME and LR_ACCT_EXPTIME in the same way
|
|---|
| 642 |
|
|---|
| 643 | * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds):
|
|---|
| 644 | handle ports giving for the remote address
|
|---|
| 645 |
|
|---|
| 646 | * lib/krb5/get_cred.c:
|
|---|
| 647 | get a ticket with no addresses if no-addresses is set
|
|---|
| 648 |
|
|---|
| 649 | * lib/krb5/crypto.c:
|
|---|
| 650 | rename functions DES_* to krb5_* to avoid colliding with modern
|
|---|
| 651 | openssl
|
|---|
| 652 |
|
|---|
| 653 | * lib/krb5/addr_families.c:
|
|---|
| 654 | make all functions taking 'struct sockaddr' actually take a socklen_t
|
|---|
| 655 | instead of int and that acts as an in-out parameter (indicating the
|
|---|
| 656 | maximum length of the sockaddr to be written)
|
|---|
| 657 |
|
|---|
| 658 | * kdc/kerberos4.c:
|
|---|
| 659 | make the kvno's in the krb4 universe by the real one % 256, since they
|
|---|
| 660 | cannot only be 8 bit, and the v5 ones are actually 32 bits
|
|---|
| 661 |
|
|---|
| 662 | 2002-02-15 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 663 |
|
|---|
| 664 | * lib/krb5/keytab_keyfile.c (akf_add_entry): don't create the file
|
|---|
| 665 | before we need to write to it
|
|---|
| 666 | (from Ã
|
|---|
| 667 | ke Sandgren)
|
|---|
| 668 |
|
|---|
| 669 | 2002-02-14 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 670 |
|
|---|
| 671 | * configure.in: rk_RETSIGTYPE and rk_BROKEN_REALLOC are called via
|
|---|
| 672 | rk_ROKEN (from Gombas Gabor); find inttypes by CHECK_TYPES
|
|---|
| 673 | directly
|
|---|
| 674 |
|
|---|
| 675 | * lib/krb5/rd_safe.c: actually use the correct key (from Daniel
|
|---|
| 676 | Kouril)
|
|---|
| 677 |
|
|---|
| 678 | 2002-02-12 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 679 |
|
|---|
| 680 | * lib/krb5/context.c (krb5_get_err_text): protect against NULL
|
|---|
| 681 | context
|
|---|
| 682 |
|
|---|
| 683 | 2002-02-11 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 684 |
|
|---|
| 685 | * admin/ktutil.c: no need to use the "modify" keytab anymore
|
|---|
| 686 |
|
|---|
| 687 | * lib/krb5/keytab_any.c: implement add and remove
|
|---|
| 688 |
|
|---|
| 689 | * lib/krb5/keytab_krb4.c: implement add and remove
|
|---|
| 690 |
|
|---|
| 691 | * lib/krb5/store_emem.c (emem_free): clear memory before freeing
|
|---|
| 692 | (this should perhaps be selectable with a flag)
|
|---|
| 693 |
|
|---|
| 694 | 2002-02-04 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 695 |
|
|---|
| 696 | * kdc/config.c (get_dbinfo): if there are database specifications
|
|---|
| 697 | in the config file, don't automatically try to use the default
|
|---|
| 698 | values (from Gombas Gabor)
|
|---|
| 699 |
|
|---|
| 700 | * lib/krb5/log.c (krb5_closelog): don't pass pointer to pointer
|
|---|
| 701 | (from Gombas Gabor)
|
|---|
| 702 |
|
|---|
| 703 | 2002-01-30 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 704 |
|
|---|
| 705 | * admin/list.c: get the default keytab from krb5.conf, and list
|
|---|
| 706 | all parts of an ANY type keytab
|
|---|
| 707 |
|
|---|
| 708 | * lib/krb5/context.c: default default_keytab_modify to NULL
|
|---|
| 709 |
|
|---|
| 710 | * lib/krb5/keytab.c (krb5_kt_default_modify_name): if no modify
|
|---|
| 711 | name is specified take it from the first component of the default
|
|---|
| 712 | keytab name
|
|---|
| 713 |
|
|---|
| 714 | 2002-01-29 Johan Danielsson <joda@pdc.kth.se>
|
|---|
| 715 |
|
|---|
| 716 | * lib/krb5/keytab.c: compare keytab types case insensitively
|
|---|
| 717 |
|
|---|
| 718 | 2002-01-07 Assar Westerlund <assar@sics.se>
|
|---|
| 719 |
|
|---|
| 720 | * lib/krb5/crypto.c (create_checksum): make usage `unsigned' (it's
|
|---|
| 721 | not really a krb5_key_usage). From Ben Harris <bjh21@netbsd.org>
|
|---|
| 722 | * lib/krb5/get_in_tkt.c: use krb5_enctype consistently. From Ben
|
|---|
| 723 | Harris <bjh21@netbsd.org>
|
|---|
| 724 | * lib/krb5/crypto.c: use krb5_enctype consistently. From Ben
|
|---|
| 725 | Harris <bjh21@netbsd.org>
|
|---|
| 726 | * kdc/kerberos5.c: use krb5_enctype consistently. From Ben Harris
|
|---|
| 727 | <bjh21@netbsd.org>
|
|---|