1 | 2002-12-19 Johan Danielsson <joda@pdc.kth.se>
|
---|
2 |
|
---|
3 | * lib/krb5/mk_rep.c: free allocated storage; reported by Howard
|
---|
4 | Chu
|
---|
5 |
|
---|
6 | 2002-12-08 Johan Danielsson <joda@pdc.kth.se>
|
---|
7 |
|
---|
8 | * kdc/kdc_locl.h: remove old encrypt_v4_ticket prototype
|
---|
9 |
|
---|
10 | 2002-12-02 Johan Danielsson <joda@pdc.kth.se>
|
---|
11 |
|
---|
12 | * kpasswd/kpasswdd.c (doit): initialise sa_size to size of
|
---|
13 | sockaddr_storage
|
---|
14 |
|
---|
15 | * kdc/connect.c (init_socket): initialise sa_size to size of
|
---|
16 | sockaddr_storage
|
---|
17 |
|
---|
18 | 2002-11-15 Johan Danielsson <joda@pdc.kth.se>
|
---|
19 |
|
---|
20 | * lib/krb5/krb5.h: remove trailing comma in enum
|
---|
21 |
|
---|
22 | 2002-11-07 Johan Danielsson <joda@pdc.kth.se>
|
---|
23 |
|
---|
24 | * kdc/524.c: implement crude b2 style (non-)conversion for use
|
---|
25 | with afs
|
---|
26 |
|
---|
27 | * kdc/kerberos4.c: move encrypt_v4_ticket to 524.c, since that's
|
---|
28 | where it's used
|
---|
29 |
|
---|
30 | 2002-10-21 Johan Danielsson <joda@pdc.kth.se>
|
---|
31 |
|
---|
32 | * lib/krb5/keytab_keyfile.c: more strcspn
|
---|
33 |
|
---|
34 | * lib/krb5/store_emem.c (emem_store): limit how much we allocate
|
---|
35 | (from Olaf Kirch)
|
---|
36 |
|
---|
37 | * lib/krb5/principal.c: don't allow trailing backslashes in
|
---|
38 | components
|
---|
39 |
|
---|
40 | * kdc/connect.c: check that %-quotes are followed by two hex
|
---|
41 | digits
|
---|
42 |
|
---|
43 | * lib/krb5/keytab_any.c: properly close the open keytabs (from
|
---|
44 | Larry Greenfield)
|
---|
45 |
|
---|
46 | * kdc/kaserver.c: make sure life is positive (from John Godehn)
|
---|
47 |
|
---|
48 | 2002-10-17 Johan Danielsson <joda@pdc.kth.se>
|
---|
49 |
|
---|
50 | * kuser/klist.c (display_tokens): allow tokens up to size of
|
---|
51 | buffer (from Magnus Holmberg)
|
---|
52 |
|
---|
53 | 2002-09-29 Johan Danielsson <joda@pdc.kth.se>
|
---|
54 |
|
---|
55 | * lib/krb5/changepw.c (process_reply): fix reply length check
|
---|
56 | calculation (reported by various people)
|
---|
57 |
|
---|
58 | 2002-09-24 Johan Danielsson <joda@pdc.kth.se>
|
---|
59 |
|
---|
60 | * lib/krb5/keytab_file.c (fkt_remove_entry): check return value
|
---|
61 | from start_seq_get (from Wynn Wilkes)
|
---|
62 |
|
---|
63 | 2002-09-19 Johan Danielsson <joda@pdc.kth.se>
|
---|
64 |
|
---|
65 | * lib/krb5/context.c (krb5_set_config_files): return ENXIO instead
|
---|
66 | of ENOENT when "unconfigured"
|
---|
67 |
|
---|
68 | 2002-09-16 Jacques Vidrine <nectar@kth.se>
|
---|
69 |
|
---|
70 | * lib/krb5/kuserok.c, lib/krb5/prompter_posix.c: use strcspn
|
---|
71 | to convert the newline to NUL in fgets results.
|
---|
72 |
|
---|
73 | 2002-09-13 Johan Danielsson <joda@pdc.kth.se>
|
---|
74 |
|
---|
75 | * kuser/kinit.1: remove unneeded Ns
|
---|
76 |
|
---|
77 | * lib/krb5/krb5_appdefault.3: remove extra "application"
|
---|
78 |
|
---|
79 | * fix-export: remove autom4ate.cache
|
---|
80 |
|
---|
81 | 2002-09-10 Johan Danielsson <joda@pdc.kth.se>
|
---|
82 |
|
---|
83 | * include/make_crypto.c: don't use function macros if possible
|
---|
84 |
|
---|
85 | * lib/krb5/krb5_locl.h: get limits.h for UINT_MAX
|
---|
86 |
|
---|
87 | * include/Makefile.am: use make_crypto to create crypto-headers.h
|
---|
88 |
|
---|
89 | * include/make_crypto.c: crypto header generation tool
|
---|
90 |
|
---|
91 | * configure.in: move crypto test to just after testing for krb4,
|
---|
92 | and move roken tests to after both, this speeds up various failure
|
---|
93 | cases with krb4
|
---|
94 |
|
---|
95 | * lib/krb5/config_file.c: don't use NULL when we mean 0
|
---|
96 |
|
---|
97 | * configure.in: we don't set package_libdir anymore, so no point
|
---|
98 | in testing for it
|
---|
99 |
|
---|
100 | * tools/Makefile.am: subst INCLUDE_des
|
---|
101 |
|
---|
102 | * tools/krb5-config.in: add INCLUDE_des to cflags
|
---|
103 |
|
---|
104 | * configure.in: use AC_CONFIG_SRCDIR
|
---|
105 |
|
---|
106 | * fix-export: remove some unneeded stuff
|
---|
107 |
|
---|
108 | * kuser/kinit.c (do_524init): free principals
|
---|
109 |
|
---|
110 | 2002-09-09 Jacques Vidrine <nectar@kth.se>
|
---|
111 |
|
---|
112 | * kdc/kerberos5.c (get_pa_etype_info, fix_transited_encoding),
|
---|
113 | kdc/kaserver.c (krb5_ret_xdr_data),
|
---|
114 | lib/krb5/transited.c (krb5_domain_x500_decode): Validate some
|
---|
115 | counts: Check that they are non-negative, and that they are small
|
---|
116 | enough to avoid integer overflow when used in memory allocation
|
---|
117 | calculations. Potential problem areas pointed out by
|
---|
118 | Sebastian Krahmer <krahmer@suse.de>.
|
---|
119 |
|
---|
120 | * lib/krb5/keytab_keyfile.c (akf_add_entry): Use O_EXCL when
|
---|
121 | creating a new keyfile.
|
---|
122 |
|
---|
123 | 2002-09-09 Johan Danielsson <joda@pdc.kth.se>
|
---|
124 |
|
---|
125 | * configure.in: don't try to build pam module
|
---|
126 |
|
---|
127 | 2002-09-05 Johan Danielsson <joda@pdc.kth.se>
|
---|
128 |
|
---|
129 | * appl/kf/kf.c: fix warning string
|
---|
130 |
|
---|
131 | * lib/krb5/log.c (krb5_vlog_msg): delay message formating till we
|
---|
132 | know we need it
|
---|
133 |
|
---|
134 | 2002-09-04 Assar Westerlund <assar@kth.se>
|
---|
135 |
|
---|
136 | * kdc/kerberos5.c (encode_reply): correct error logging
|
---|
137 |
|
---|
138 | 2002-09-04 Johan Danielsson <joda@pdc.kth.se>
|
---|
139 |
|
---|
140 | * lib/krb5/sendauth.c: close ccache if we opened it
|
---|
141 |
|
---|
142 | * appl/kf/kf.c: handle new protocol
|
---|
143 |
|
---|
144 | * appl/kf/kfd.c: use krb5_err instead of sysloging directly,
|
---|
145 | handle the new protocol, and bail out if an old client tries to
|
---|
146 | connect
|
---|
147 |
|
---|
148 | * appl/kf/kf_locl.h: we need a protocol version string
|
---|
149 |
|
---|
150 | * lib/hdb/hdb-ldap.c: use ASN1_MALLOC_ENCODE
|
---|
151 |
|
---|
152 | * kdc/kerberos5.c: use ASN1_MALLOC_ENCODE
|
---|
153 |
|
---|
154 | * kdc/hprop.c: set AP_OPTS_USE_SUBKEY
|
---|
155 |
|
---|
156 | * lib/hdb/common.c: use ASN1_MALLOC_ENCODE
|
---|
157 |
|
---|
158 | * lib/asn1/gen.c: add convenience macro that allocates a buffer
|
---|
159 | and encoded into that
|
---|
160 |
|
---|
161 | * lib/krb5/get_cred.c (init_tgs_req): use
|
---|
162 | in_creds->session.keytype literally instead of trying to convert
|
---|
163 | to a list of enctypes (it should already be an enctype)
|
---|
164 |
|
---|
165 | * lib/krb5/get_cred.c (init_tgs_req): init ret
|
---|
166 |
|
---|
167 | 2002-09-03 Johan Danielsson <joda@pdc.kth.se>
|
---|
168 |
|
---|
169 | * lib/asn1/k5.asn1: remove ETYPE_DES3_CBC_NONE_IVEC
|
---|
170 |
|
---|
171 | * lib/krb5/krb5.h: remove ENCTYPE_DES3_CBC_NONE_IVEC
|
---|
172 |
|
---|
173 | * lib/krb5/crypto.c: get rid of DES3_CBC_encrypt_ivec, just use
|
---|
174 | zero ivec in DES3_CBC_encrypt if passed ivec is NULL
|
---|
175 |
|
---|
176 | * lib/krb5/Makefile.am: back out 1.144, since it will re-create
|
---|
177 | krb5-protos.h at build-time, which requires perl, which is bad
|
---|
178 |
|
---|
179 | * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
|
---|
180 | blindly use the local subkey
|
---|
181 |
|
---|
182 | * lib/krb5/crypto.c: add function krb5_crypto_getblocksize that
|
---|
183 | extracts the required blocksize from a crypto context
|
---|
184 |
|
---|
185 | * lib/krb5/build_auth.c: just get the length of the encoded
|
---|
186 | authenticator instead of trying to grow a buffer
|
---|
187 |
|
---|
188 | 2002-09-03 Assar Westerlund <assar@kth.se>
|
---|
189 |
|
---|
190 | * configure.in: add --disable-mmap option, and tests for
|
---|
191 | sys/mman.h and mmap
|
---|
192 |
|
---|
193 | 2002-09-03 Jacques Vidrine <nectar@kth.se>
|
---|
194 |
|
---|
195 | * lib/krb5/changepw.c: verify lengths in response
|
---|
196 |
|
---|
197 | * lib/asn1/der_get.c (decode_integer, decode_unsigned): check for
|
---|
198 | truncated integers
|
---|
199 |
|
---|
200 | 2002-09-02 Johan Danielsson <joda@pdc.kth.se>
|
---|
201 |
|
---|
202 | * lib/krb5/mk_req_ext.c: generate a local subkey if
|
---|
203 | AP_OPTS_USE_SUBKEY is set
|
---|
204 |
|
---|
205 | * lib/krb5/build_auth.c: we don't have enough information about
|
---|
206 | whether to generate a local subkey here, so don't try to
|
---|
207 |
|
---|
208 | * lib/krb5/auth_context.c: new function
|
---|
209 | krb5_auth_con_generatelocalsubkey
|
---|
210 |
|
---|
211 | * lib/krb5/get_in_tkt.c: only set kdc_sec_offset if looking at an
|
---|
212 | initial ticket
|
---|
213 |
|
---|
214 | * lib/krb5/context.c (init_context_from_config_file): simplify
|
---|
215 | initialisation of srv_lookup
|
---|
216 |
|
---|
217 | * lib/krb5/changepw.c (send_request): set AP_OPTS_USE_SUBKEY
|
---|
218 |
|
---|
219 | * lib/krb5/krb5.h: add AP_OPTS_USE_SUBKEY
|
---|
220 |
|
---|
221 | 2002-08-30 Assar Westerlund <assar@kth.se>
|
---|
222 |
|
---|
223 | * lib/krb5/name-45-test.c: also test krb5_524_conv_principal
|
---|
224 | * lib/krb5/Makefile.am (TESTS): add name-45-test
|
---|
225 | * lib/krb5/name-45-test.c: add testcases for
|
---|
226 | krb5_425_conv_principal
|
---|
227 |
|
---|
228 | 2002-08-29 Assar Westerlund <assar@kth.se>
|
---|
229 |
|
---|
230 | * lib/krb5/parse-name-test.c: also test unparse_short functions
|
---|
231 | * lib/asn1/asn1_print.c: use com_err/error_message API
|
---|
232 | * lib/krb5/Makefile.am: add parse-name-test
|
---|
233 | * lib/krb5/parse-name-test.c: add a program for testing parsing
|
---|
234 | and unparsing principal names
|
---|
235 |
|
---|
236 | 2002-08-28 Assar Westerlund <assar@kth.se>
|
---|
237 |
|
---|
238 | * kdc/config.c: add missing ifdef DAEMON
|
---|
239 |
|
---|
240 | 2002-08-28 Johan Danielsson <joda@pdc.kth.se>
|
---|
241 |
|
---|
242 | * configure.in: use rk_SUNOS
|
---|
243 |
|
---|
244 | * kdc/config.c: add detach options
|
---|
245 |
|
---|
246 | * kdc/main.c: maybe detach from console?
|
---|
247 |
|
---|
248 | * kdc/kdc.8: markup changes
|
---|
249 |
|
---|
250 | * configure.in: AC_TEST_PACKAGE_NEW -> rk_TEST_PACKAGE
|
---|
251 |
|
---|
252 | * configure.in: use rk_TELNET, rename some other macros, and don't
|
---|
253 | add -ldes to krb4 link command
|
---|
254 |
|
---|
255 | * kuser/kinit.1: whitespace fix (from NetBSD)
|
---|
256 |
|
---|
257 | * include/bits.c: we may need unistd.h for ssize_t
|
---|
258 |
|
---|
259 | 2002-08-26 Assar Westerlund <assar@kth.se>
|
---|
260 |
|
---|
261 | * lib/krb5/principal.c (krb5_425_conv_principal_ext): lookup AAAA
|
---|
262 | rrs before A ones when using the resolver to verify a mapping,
|
---|
263 | also use getaddrinfo when resolver is not available
|
---|
264 |
|
---|
265 | * lib/hdb/keytab.c (find_db): const-correctness in parameters to
|
---|
266 | krb5_config_get_next
|
---|
267 |
|
---|
268 | * lib/asn1/gen.c: include <string.h> in the generated files (for
|
---|
269 | memset)
|
---|
270 |
|
---|
271 | 2002-08-22 Assar Westerlund <assar@kth.se>
|
---|
272 |
|
---|
273 | * lib/krb5/test_get_addrs.c, lib/krb5/krbhst-test.c: make it use
|
---|
274 | getarg so that it can handle --help and --version (and thus make
|
---|
275 | check can pass)
|
---|
276 |
|
---|
277 | * lib/asn1/check-der.c: make this build again
|
---|
278 |
|
---|
279 | 2002-08-22 Assar Westerlund <assar@kth.se>
|
---|
280 |
|
---|
281 | * lib/asn1/der_get.c (der_get_int): handle len == 0. based on a
|
---|
282 | patch from Love <lha@stacken.kth.se>
|
---|
283 |
|
---|
284 | 2002-08-22 Johan Danielsson <joda@pdc.kth.se>
|
---|
285 |
|
---|
286 | * lib/krb5/krb5.h: we seem to call KRB5KDC_ERR_KEY_EXP
|
---|
287 | KRB5KDC_ERR_KEY_EXPIRED, so define the former to the latter
|
---|
288 |
|
---|
289 | * kdc/kdc.8: add blurb about adding and removing addresses; update
|
---|
290 | kdc.conf section to match reality
|
---|
291 |
|
---|
292 | * configure.in: KRB_SENDAUTH_VLEN seems to always have existed, so
|
---|
293 | don't define it
|
---|
294 |
|
---|
295 | 2002-08-21 Assar Westerlund <assar@kth.se>
|
---|
296 |
|
---|
297 | * lib/asn1/asn1_print.c: print OIDs too, based on a patch from
|
---|
298 | Love <lha@stacken.kth.se>
|
---|
299 |
|
---|
300 | 2002-08-21 Johan Danielsson <joda@pdc.kth.se>
|
---|
301 |
|
---|
302 | * kuser/kinit.c (do_v4_fallback): don't use krb_get_pw_in_tkt2
|
---|
303 | since it might not exist, and we don't actually care about the key
|
---|
304 |
|
---|
305 | 2002-08-20 Johan Danielsson <joda@pdc.kth.se>
|
---|
306 |
|
---|
307 | * lib/krb5/krb5.conf.5: correct documentation for
|
---|
308 | verify_ap_req_nofail
|
---|
309 |
|
---|
310 | * lib/krb5/log.c: rename syslog_data to avoid name conflicts (from
|
---|
311 | Mattias Amnefelt)
|
---|
312 |
|
---|
313 | * kuser/klist.c (display_tokens): increase token buffer size, and
|
---|
314 | add more checks of the kernel data (from Love)
|
---|
315 |
|
---|
316 | 2002-08-19 Johan Danielsson <joda@pdc.kth.se>
|
---|
317 |
|
---|
318 | * fix-export: use make to parse Makefile.am instead of perl
|
---|
319 |
|
---|
320 | * configure.in: use argument-less AM_INIT_AUTOMAKE, now that it
|
---|
321 | groks AC_INIT with package name etc.
|
---|
322 |
|
---|
323 | * kpasswd/kpasswdd.c: include <kadm5/private.h>
|
---|
324 |
|
---|
325 | * lib/asn1/asn1_print.c: include com_right.h
|
---|
326 |
|
---|
327 | * lib/krb5/addr_families.c: socklen_t -> krb5_socklen_t
|
---|
328 |
|
---|
329 | * include/bits.c: define krb5_socklen_t type; this should really
|
---|
330 | go someplace else, but this was easy
|
---|
331 |
|
---|
332 | * lib/krb5/verify_krb5_conf.c: don't bail out if parsing of a file
|
---|
333 | fails, just warn about it
|
---|
334 |
|
---|
335 | * kdc/log.c (kdc_openlog): no need for a config_file parameter
|
---|
336 |
|
---|
337 | * kdc/config.c: just treat kdc.conf like any other config file
|
---|
338 |
|
---|
339 | * lib/krb5/context.c (krb5_get_default_config_files): ignore
|
---|
340 | duplicate files
|
---|
341 |
|
---|
342 | 2002-08-16 Johan Danielsson <joda@pdc.kth.se>
|
---|
343 |
|
---|
344 | * lib/krb5/krb5.h: turn strings into pointers, so we can assign to
|
---|
345 | them
|
---|
346 |
|
---|
347 | * lib/krb5/constants.c: turn strings into pointers, so we can
|
---|
348 | assign to them
|
---|
349 |
|
---|
350 | * lib/krb5/get_addrs.c (get_addrs_int): initialise res if
|
---|
351 | SCAN_INTERFACES is not set
|
---|
352 |
|
---|
353 | * lib/krb5/context.c: fix various borked stuff in previous commits
|
---|
354 |
|
---|
355 | 2002-08-16 Jacques Vidrine <n@nectar.com>
|
---|
356 |
|
---|
357 | * lib/krb5/krbhst.c (kpasswd_get_next): if we fall back to using
|
---|
358 | the `admin_server' entry for kpasswd, override the `proto' result
|
---|
359 | to be UDP.
|
---|
360 |
|
---|
361 | 2002-08-15 Johan Danielsson <joda@pdc.kth.se>
|
---|
362 |
|
---|
363 | * lib/krb5/auth_context.c: check return value of
|
---|
364 | krb5_sockaddr2address
|
---|
365 |
|
---|
366 | * lib/krb5/addr_families.c: check return value of
|
---|
367 | krb5_sockaddr2address
|
---|
368 |
|
---|
369 | * lib/krb5/context.c: get the default keytab from KRB5_KTNAME
|
---|
370 |
|
---|
371 | 2002-08-14 Johan Danielsson <joda@pdc.kth.se>
|
---|
372 |
|
---|
373 | * lib/krb5/verify_krb5_conf.c: allow parsing of more than one file
|
---|
374 |
|
---|
375 | * lib/krb5/context.c: allow changing config files with the
|
---|
376 | function krb5_set_config_files, there are also related functions
|
---|
377 | krb5_get_default_config_files and krb5_free_config_files; these
|
---|
378 | should work similar to their MIT counterparts
|
---|
379 |
|
---|
380 | * lib/krb5/config_file.c: allow the use of more than one config
|
---|
381 | file by using the new function krb5_config_parse_file_multi
|
---|
382 |
|
---|
383 | 2002-08-12 Johan Danielsson <joda@pdc.kth.se>
|
---|
384 |
|
---|
385 | * use sysconfdir instead of /etc
|
---|
386 |
|
---|
387 | * configure.in: require autoconf 2.53; rename dpagaix_LDFLAGS etc
|
---|
388 | to appease automake; force sysconfdir and localstatedir to /etc
|
---|
389 | and /var/heimdal for now
|
---|
390 |
|
---|
391 | * kdc/connect.c (addr_to_string): check return value of
|
---|
392 | sockaddr2address
|
---|
393 |
|
---|
394 | 2002-08-09 Johan Danielsson <joda@pdc.kth.se>
|
---|
395 |
|
---|
396 | * lib/krb5/rd_cred.c: if the remote address isn't an addrport,
|
---|
397 | don't try comparing to one; this should make old clients work with
|
---|
398 | new servers
|
---|
399 |
|
---|
400 | * lib/asn1/gen_decode.c: remove unused variable
|
---|
401 |
|
---|
402 | 2002-07-31 Johan Danielsson <joda@pdc.kth.se>
|
---|
403 |
|
---|
404 | * kdc/{kerberos5,524}.c: ENOENT -> HDB_ERR_NOENTRY (from Derrick
|
---|
405 | Brashear)
|
---|
406 |
|
---|
407 | * lib/krb5/principal.c: actually lower case the lower case
|
---|
408 | instance name (spotted by Derrick Brashear)
|
---|
409 |
|
---|
410 | 2002-07-24 Johan Danielsson <joda@pdc.kth.se>
|
---|
411 |
|
---|
412 | * fix-export: if DATEDVERSION is set, change the version to
|
---|
413 | current date
|
---|
414 |
|
---|
415 | * configure.in: don't use AC_PROG_RANLIB, and use magic foo to set
|
---|
416 | LTLIBOBJS
|
---|
417 |
|
---|
418 | 2002-07-04 Johan Danielsson <joda@pdc.kth.se>
|
---|
419 |
|
---|
420 | * kdc/connect.c: add some cache-control-foo to the http responses
|
---|
421 | (from Gombas Gabor)
|
---|
422 |
|
---|
423 | * lib/krb5/addr_families.c (krb5_print_address): don't copy size
|
---|
424 | if ret_len == NULL
|
---|
425 |
|
---|
426 | 2002-06-28 Johan Danielsson <joda@pdc.kth.se>
|
---|
427 |
|
---|
428 | * kuser/klist.c (display_tokens): don't bail out before we get
|
---|
429 | EDOM (signaling the end of the tokens), the kernel can also return
|
---|
430 | ENOTCONN, meaning that the index does not exist anymore (for
|
---|
431 | example if the token has expired)
|
---|
432 |
|
---|
433 | 2002-06-06 Johan Danielsson <joda@pdc.kth.se>
|
---|
434 |
|
---|
435 | * lib/krb5/changepw.c: make sure we return an error if there are
|
---|
436 | no changepw hosts found; from Wynn Wilkes
|
---|
437 |
|
---|
438 | 2002-05-29 Johan Danielsson <joda@pdc.kth.se>
|
---|
439 |
|
---|
440 | * lib/krb5/cache.c (krb5_cc_register): break out of loop when the
|
---|
441 | same type is found; spotted by Wynn Wilkes
|
---|
442 |
|
---|
443 | 2002-05-28 Johan Danielsson <joda@pdc.kth.se>
|
---|
444 |
|
---|
445 | * lib/krb5/keytab_file.c: check size of entry before trying to
|
---|
446 | read 32-bit kvno; also fix typo in previous
|
---|
447 |
|
---|
448 | 2002-05-24 Johan Danielsson <joda@pdc.kth.se>
|
---|
449 |
|
---|
450 | * include/Makefile.am: only add to INCLUDES
|
---|
451 |
|
---|
452 | * lib/45/mk_req.c: fix for storage change
|
---|
453 |
|
---|
454 | * lib/hdb/print.c: fix for storage change
|
---|
455 |
|
---|
456 | 2002-05-15 Johan Danielsson <joda@pdc.kth.se>
|
---|
457 |
|
---|
458 | * kdc/kerberos5.c: don't free encrypted padata until we're really
|
---|
459 | done with it
|
---|
460 |
|
---|
461 | 2002-05-07 Johan Danielsson <joda@pdc.kth.se>
|
---|
462 |
|
---|
463 | * kdc/kerberos5.c: when decrypting pa-data, try all keys matching
|
---|
464 | enctype
|
---|
465 |
|
---|
466 | * kuser/kinit.1: document -a
|
---|
467 |
|
---|
468 | * kuser/kinit.c: add command line switch for extra addresses
|
---|
469 |
|
---|
470 | 2002-04-30 Johan Danielsson <joda@blubb.pdc.kth.se>
|
---|
471 |
|
---|
472 | * configure.in: remove some duplicate tests
|
---|
473 |
|
---|
474 | * configure.in: use AC_HELP_STRING
|
---|
475 |
|
---|
476 | 2002-04-29 Johan Danielsson <joda@pdc.kth.se>
|
---|
477 |
|
---|
478 | * lib/krb5/crypto.c (usage2arcfour): don't abort if the usage is
|
---|
479 | unknown
|
---|
480 |
|
---|
481 | 2002-04-25 Johan Danielsson <joda@pdc.kth.se>
|
---|
482 |
|
---|
483 | * configure.in: use rk_DESTDIRS
|
---|
484 |
|
---|
485 | 2002-04-22 Johan Danielsson <joda@pdc.kth.se>
|
---|
486 |
|
---|
487 | * lib/krb5/krb5_verify_user.3: make it clear that _lrealm modifies
|
---|
488 | the principal
|
---|
489 |
|
---|
490 | 2002-04-19 Johan Danielsson <joda@pdc.kth.se>
|
---|
491 |
|
---|
492 | * lib/krb5/verify_init.c: fix typo in error string
|
---|
493 |
|
---|
494 | 2002-04-18 Johan Danielsson <joda@pdc.kth.se>
|
---|
495 |
|
---|
496 | * acconfig.h: remove some stuff that is defined elsewhere
|
---|
497 |
|
---|
498 | * lib/krb5/krb5_locl.h: include <sys/file.h>
|
---|
499 |
|
---|
500 | * lib/krb5/acl.c: rename acl_string parameter
|
---|
501 |
|
---|
502 | * lib/krb5/Makefile.am: remove __P from protos, and put parameter
|
---|
503 | names in comments
|
---|
504 |
|
---|
505 | * kuser/klist.c: better align some headers
|
---|
506 |
|
---|
507 | * kdc/kerberos4.c: storage tweaks
|
---|
508 |
|
---|
509 | * kdc/kaserver.c: storage tweaks
|
---|
510 |
|
---|
511 | * kdc/524.c: storage tweaks
|
---|
512 |
|
---|
513 | * lib/krb5/keytab_krb4.c: storage tweaks
|
---|
514 |
|
---|
515 | * lib/krb5/keytab_keyfile.c: storage tweaks
|
---|
516 |
|
---|
517 | * lib/krb5/keytab_file.c: storage tweaks; also try to handle zero
|
---|
518 | sized keytab files
|
---|
519 |
|
---|
520 | * lib/krb5/keytab_any.c: use KRB5_KT_END instead of KRB5_CC_END
|
---|
521 |
|
---|
522 | * lib/krb5/fcache.c: storage tweaks
|
---|
523 |
|
---|
524 | * lib/krb5/store_mem.c: make the krb5_storage opaque, and add
|
---|
525 | function wrappers for store/fetch/seek, and also make the eof-code
|
---|
526 | configurable
|
---|
527 |
|
---|
528 | * lib/krb5/store_fd.c: make the krb5_storage opaque, and add
|
---|
529 | function wrappers for store/fetch/seek, and also make the eof-code
|
---|
530 | configurable
|
---|
531 |
|
---|
532 | * lib/krb5/store_emem.c: make the krb5_storage opaque, and add
|
---|
533 | function wrappers for store/fetch/seek, and also make the eof-code
|
---|
534 | configurable
|
---|
535 |
|
---|
536 | * lib/krb5/store.c: make the krb5_storage opaque, and add function
|
---|
537 | wrappers for store/fetch/seek, and also make the eof-code
|
---|
538 | configurable
|
---|
539 |
|
---|
540 | * lib/krb5/store-int.h: make the krb5_storage opaque, and add
|
---|
541 | function wrappers for store/fetch/seek, and also make the eof-code
|
---|
542 | configurable
|
---|
543 |
|
---|
544 | * lib/krb5/krb5.h: make the krb5_storage opaque, and add function
|
---|
545 | wrappers for store/fetch/seek, and also make the eof-code
|
---|
546 | configurable
|
---|
547 |
|
---|
548 | * include/bits.c: include <sys/socket.h> to get socklen_t
|
---|
549 |
|
---|
550 | * kdc/kerberos5.c (get_pa_etype_info): sort ETYPE-INFOs by
|
---|
551 | requested KDC-REQ etypes
|
---|
552 |
|
---|
553 | * kdc/hpropd.c: constify
|
---|
554 |
|
---|
555 | * kdc/hprop.c: constify
|
---|
556 |
|
---|
557 | * kdc/string2key.c: constify
|
---|
558 |
|
---|
559 | * kdc/kdc_locl.h: make port_str const
|
---|
560 |
|
---|
561 | * kdc/config.c: constify
|
---|
562 |
|
---|
563 | * lib/krb5/config_file.c: constify
|
---|
564 |
|
---|
565 | * kdc/kstash.c: constify
|
---|
566 |
|
---|
567 | * lib/krb5/verify_user.c: remove unnecessary cast
|
---|
568 |
|
---|
569 | * lib/krb5/recvauth.c: constify
|
---|
570 |
|
---|
571 | * lib/krb5/principal.c (krb5_parse_name): const qualify
|
---|
572 |
|
---|
573 | * lib/krb5/mcache.c (mcc_get_name): constify return type
|
---|
574 |
|
---|
575 | * lib/krb5/context.c (krb5_free_context): don't try to free the
|
---|
576 | ccache prefix
|
---|
577 |
|
---|
578 | * lib/krb5/cache.c (krb5_cc_register): don't make a copy of the
|
---|
579 | prefix
|
---|
580 |
|
---|
581 | * lib/krb5/krb5.h: constify some struct members
|
---|
582 |
|
---|
583 | * lib/krb5/log.c: constify
|
---|
584 |
|
---|
585 | * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): const
|
---|
586 | qualify
|
---|
587 |
|
---|
588 | * lib/krb5/get_in_tkt.c (krb5_init_etype): constify
|
---|
589 |
|
---|
590 | * lib/krb5/crypto.c: constify some
|
---|
591 |
|
---|
592 | * lib/krb5/config_file.c: constify
|
---|
593 |
|
---|
594 | * lib/krb5/aname_to_localname.c (krb5_aname_to_localname):
|
---|
595 | constify local variable
|
---|
596 |
|
---|
597 | * lib/krb5/addr_families.c (ipv4_sockaddr2port): constify
|
---|
598 |
|
---|
599 | 2002-04-17 Johan Danielsson <joda@pdc.kth.se>
|
---|
600 |
|
---|
601 | * lib/krb5/verify_krb5_conf.c: add some log checking
|
---|
602 |
|
---|
603 | * lib/krb5/log.c (krb5_addlog_dest): reorganise syslog parsing
|
---|
604 |
|
---|
605 | 2002-04-16 Johan Danielsson <joda@pdc.kth.se>
|
---|
606 |
|
---|
607 | * lib/krb5/crypto.c (krb5_crypto_init): check that the key size
|
---|
608 | matches the expected length
|
---|
609 |
|
---|
610 | 2002-03-27 Johan Danielsson <joda@pdc.kth.se>
|
---|
611 |
|
---|
612 | * lib/krb5/send_to_kdc.c: rename send parameter to send_data
|
---|
613 |
|
---|
614 | * lib/krb5/mk_error.c: rename ctime parameter to client_time
|
---|
615 |
|
---|
616 | 2002-03-22 Johan Danielsson <joda@pdc.kth.se>
|
---|
617 |
|
---|
618 | * kdc/kerberos5.c (find_etype): unsigned -> krb5_enctype (from
|
---|
619 | Reinoud Zandijk)
|
---|
620 |
|
---|
621 | 2002-03-18 Johan Danielsson <joda@pdc.kth.se>
|
---|
622 |
|
---|
623 | * lib/asn1/k5.asn1: add the GSS-API checksum type here
|
---|
624 |
|
---|
625 | 2002-03-11 Assar Westerlund <assar@sics.se>
|
---|
626 |
|
---|
627 | * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to
|
---|
628 | 18:3:1
|
---|
629 | * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): bump version to 7:5:0
|
---|
630 | * lib/asn1/Makefile.am (libasn1_la_LDFLAGS): bump version to 6:0:0
|
---|
631 |
|
---|
632 | 2002-03-10 Assar Westerlund <assar@sics.se>
|
---|
633 |
|
---|
634 | * lib/krb5/rd_cred.c: handle addresses with port numbers
|
---|
635 |
|
---|
636 | * lib/krb5/keytab_file.c, lib/krb5/keytab.c:
|
---|
637 | store the kvno % 256 as the byte and the complete 32 bit kvno after
|
---|
638 | the end of the current keytab entry
|
---|
639 |
|
---|
640 | * lib/krb5/init_creds_pw.c:
|
---|
641 | handle LR_PW_EXPTIME and LR_ACCT_EXPTIME in the same way
|
---|
642 |
|
---|
643 | * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds):
|
---|
644 | handle ports giving for the remote address
|
---|
645 |
|
---|
646 | * lib/krb5/get_cred.c:
|
---|
647 | get a ticket with no addresses if no-addresses is set
|
---|
648 |
|
---|
649 | * lib/krb5/crypto.c:
|
---|
650 | rename functions DES_* to krb5_* to avoid colliding with modern
|
---|
651 | openssl
|
---|
652 |
|
---|
653 | * lib/krb5/addr_families.c:
|
---|
654 | make all functions taking 'struct sockaddr' actually take a socklen_t
|
---|
655 | instead of int and that acts as an in-out parameter (indicating the
|
---|
656 | maximum length of the sockaddr to be written)
|
---|
657 |
|
---|
658 | * kdc/kerberos4.c:
|
---|
659 | make the kvno's in the krb4 universe by the real one % 256, since they
|
---|
660 | cannot only be 8 bit, and the v5 ones are actually 32 bits
|
---|
661 |
|
---|
662 | 2002-02-15 Johan Danielsson <joda@pdc.kth.se>
|
---|
663 |
|
---|
664 | * lib/krb5/keytab_keyfile.c (akf_add_entry): don't create the file
|
---|
665 | before we need to write to it
|
---|
666 | (from Ã
|
---|
667 | ke Sandgren)
|
---|
668 |
|
---|
669 | 2002-02-14 Johan Danielsson <joda@pdc.kth.se>
|
---|
670 |
|
---|
671 | * configure.in: rk_RETSIGTYPE and rk_BROKEN_REALLOC are called via
|
---|
672 | rk_ROKEN (from Gombas Gabor); find inttypes by CHECK_TYPES
|
---|
673 | directly
|
---|
674 |
|
---|
675 | * lib/krb5/rd_safe.c: actually use the correct key (from Daniel
|
---|
676 | Kouril)
|
---|
677 |
|
---|
678 | 2002-02-12 Johan Danielsson <joda@pdc.kth.se>
|
---|
679 |
|
---|
680 | * lib/krb5/context.c (krb5_get_err_text): protect against NULL
|
---|
681 | context
|
---|
682 |
|
---|
683 | 2002-02-11 Johan Danielsson <joda@pdc.kth.se>
|
---|
684 |
|
---|
685 | * admin/ktutil.c: no need to use the "modify" keytab anymore
|
---|
686 |
|
---|
687 | * lib/krb5/keytab_any.c: implement add and remove
|
---|
688 |
|
---|
689 | * lib/krb5/keytab_krb4.c: implement add and remove
|
---|
690 |
|
---|
691 | * lib/krb5/store_emem.c (emem_free): clear memory before freeing
|
---|
692 | (this should perhaps be selectable with a flag)
|
---|
693 |
|
---|
694 | 2002-02-04 Johan Danielsson <joda@pdc.kth.se>
|
---|
695 |
|
---|
696 | * kdc/config.c (get_dbinfo): if there are database specifications
|
---|
697 | in the config file, don't automatically try to use the default
|
---|
698 | values (from Gombas Gabor)
|
---|
699 |
|
---|
700 | * lib/krb5/log.c (krb5_closelog): don't pass pointer to pointer
|
---|
701 | (from Gombas Gabor)
|
---|
702 |
|
---|
703 | 2002-01-30 Johan Danielsson <joda@pdc.kth.se>
|
---|
704 |
|
---|
705 | * admin/list.c: get the default keytab from krb5.conf, and list
|
---|
706 | all parts of an ANY type keytab
|
---|
707 |
|
---|
708 | * lib/krb5/context.c: default default_keytab_modify to NULL
|
---|
709 |
|
---|
710 | * lib/krb5/keytab.c (krb5_kt_default_modify_name): if no modify
|
---|
711 | name is specified take it from the first component of the default
|
---|
712 | keytab name
|
---|
713 |
|
---|
714 | 2002-01-29 Johan Danielsson <joda@pdc.kth.se>
|
---|
715 |
|
---|
716 | * lib/krb5/keytab.c: compare keytab types case insensitively
|
---|
717 |
|
---|
718 | 2002-01-07 Assar Westerlund <assar@sics.se>
|
---|
719 |
|
---|
720 | * lib/krb5/crypto.c (create_checksum): make usage `unsigned' (it's
|
---|
721 | not really a krb5_key_usage). From Ben Harris <bjh21@netbsd.org>
|
---|
722 | * lib/krb5/get_in_tkt.c: use krb5_enctype consistently. From Ben
|
---|
723 | Harris <bjh21@netbsd.org>
|
---|
724 | * lib/krb5/crypto.c: use krb5_enctype consistently. From Ben
|
---|
725 | Harris <bjh21@netbsd.org>
|
---|
726 | * kdc/kerberos5.c: use krb5_enctype consistently. From Ben Harris
|
---|
727 | <bjh21@netbsd.org>
|
---|