source: heimdal/trunk/ChangeLog.2003@ 4

Last change on this file since 4 was 1, checked in by Paul Smedley, 10 years ago

Initial commit of Heimdal 1.5.3
File size: 54.9 KB
Line 
12003-12-19 Love Hörnquist Å
2strand <lha@it.su.se>
3
4 * lib/krb5/error_string.c: protect error_string with mutex
5
6 * lib/krb5/context.c: allocate and destroy mutex in krb5_context
7
8 * lib/krb5/krb5.h (krb5_context_data): add mutex for error_string
9
102003-12-18 Love Hörnquist Å
11strand <lha@it.su.se>
12
13 * kuser/kinit.c: make -9 work again
14
152003-12-17 Love Hörnquist Å
16strand <lha@it.su.se>
17
18 * lib/krb5/init_creds_pw.c: try handle ts preauth better, still
19 not good, but at least it work with older heimdal releases that
20 doesn't send back KRB5KDC_ERR_PREAUTH_REQUIRED when preauth was
21 sent
22
232003-12-16 Love Hörnquist Å
24strand <lha@it.su.se>
25
26 * lib/hdb/hdb.asn1: remove enforce-transited-policy, its no longer
27 used
28
292003-12-11 Love Hörnquist Å
30strand <lha@it.su.se>
31
32 * lib/krb5/pkinit.c (_krb5_pk_create_sign): fill in NULL as
33 parameters, required by CMS
34
352003-12-07 Love Hörnquist Å
36strand <lha@it.su.se>
37
38 * lib/krb5/get_in_tkt_with_keytab.c (krb5_get_in_tkt_with_keytab):
39 avoid memory leak that snuck in when krb5_keytab_key_proc was
40 exported, pointed out by Panases Inc
41
42 * lib/krb5/keytab_file.c: do locking, found to be a problem for
43 Panasas Inc
44
45 * lib/krb5/fcache.c: internally export x{,un}lock and thus prefix
46 them with _krb5_
47
48 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use
49 KRB5_AUTH_CONTEXT_DO_TIME if we want timestamp in forwarded
50 krb-cred
51
52 * lib/krb5/krb5_auth_context.3: some text about
53 krb5_auth_con_{add,remove}flags
54
55 * lib/krb5/auth_context.c: add krb5_auth_con_addflags and
56 krb5_auth_con_removeflags
57
582003-12-03 Love Hörnquist Å
59strand <lha@it.su.se>
60
61 * lib/krb5/crypto.c (decrypt_internal_derived): move up padsize to
62 avoid memory leak
63
642003-12-02 Love Hörnquist Å
65strand <lha@it.su.se>
66
67 * lib/krb5/crypto.c: require cipher-text to be padded to padsize
68
69 * lib/krb5/eai_to_heim_errno.c: EAI_ADDRFAMILY and EAI_NODATA is
70 deprecated in RFC3493
71
72 * lib/krb5/verify_krb5_conf.c (check_host): don't check for
73 EAI_NODATA, because its depricated in RFC3493 Pointed out by
74 Hajimu UMEMOTO <ume@mahoroba.org> on heimdal-discuss
75
762003-12-01 Love Hörnquist Å
77strand <lha@it.su.se>
78
79 * lib/krb5/Makefile.am: move test_crypto to noinst_PROGRAMS
80
81 * lib/krb5/test_crypto.c: add --version,--help
82
83 * kuser/kinit.c (main): return the return value from simple_execvp
84
852003-11-26 Love Hörnquist Å
86strand <lha@it.su.se>
87
88 * kuser/kinit.c: don't use PKINIT DH per default since its too
89 slow
90
91 * lib/krb5/pkinit.c: tweek to make pkinit work with the fact the
92 asn1_compile can't generate code for context tagless optionals
93
94 * kdc/pkinit.c: add support for KDC side of DH PKINIT
95
96 * lib/krb5/pkinit.c: clean up error handling, make enc-type work
97 again
98
992003-11-25 Love Hörnquist Å
100strand <lha@it.su.se>
101
102 * kuser/kinit.c: add flag to make it work with pkinit dh
103
104 * lib/krb5/pkinit.c: make PKINIT DH support work
105
1062003-11-24 Love Hörnquist Å
107strand <lha@it.su.se>
108
109 * lib/hdb/Makefile.am (LDADD): link with LIB_dlopen
110
111 * kdc/pkinit.c: clean up
112
113 * lib/krb5/krb5.h: make pkinit_win2k_compatible into a flag field
114
115 * lib/krb5/pkinit.c: remove most compile depencies clean up
116
117 * kdc/pkinit.c: print an error and turn of pkinit if openssl
118 failed to load
119
120 * kdc/config.c: read pkinit (pki-mumble) configuration options
121
122 * kdc/kerberos5.c: add pkinit support
123
124 * kdc/kdc_locl.h: add prototypes for pkinit
125
126 * kdc/pkinit.c: PKINIT patch from Daniel Kouril and Petr Holub, I
127 removed the dependency on valicert asn1 parser, remove smartcard
128 and globus support (for now). Work to be done on this: DH support,
129 Globus support, Smartcard support, windows support (MS implements
130 -09 of the draft), make it conform to the new draft
131
132 * lib/krb5/pkinit.c: fix bugs, improve error reporting
133
1342003-11-23 Love Hörnquist Å
135strand <lha@it.su.se>
136
137 * kuser/kinit.c: add some "struct foo;" glue for pkinit
138 structures that isn't used
139
140 * lib/krb5/pkinit.c: clean up, make remove depenency on openssl's
141 api
142
143 * lib/krb5/krb5_locl.h: add some glue for pkinit add reference
144 counter to _krb5_get_init_creds_opt_private
145
146 * lib/krb5/init_creds.c: reference count krb5_get_init_creds_opt
147 private component to avoid copy all the data in it
148
149 * lib/krb5/crypto.c (AES_string_to_key): fix memory leak
150
151 * lib/krb5/init_creds_pw.c (init_cred_loop): fix memory leak
152
153 * lib/krb5/heim_threads.h: include pthread.h in the pthread case
154
1552003-11-18 Love Hörnquist Å
156strand <lha@it.su.se>
157
158 * kpasswd/kpasswdd.c (main): parse kdc.conf
159 From: Jeffrey Hutzelman <jhutz@cmu.edu>
160
1612003-11-15 Love Hörnquist Å
162strand <lha@it.su.se>
163
164 * lib/krb5/Makefile.am (TESTS): add test_crypto
165
166 * lib/krb5/test_crypto.c: time crypto operations
167
1682003-11-14 Love Hörnquist Å
169strand <lha@it.su.se>
170
171 * doc/init-creds: spelling, Bruno Rohee <bruno@rohee.com>
172
1732003-11-09 Love Hörnquist Å
174strand <lha@it.su.se>
175
176 * lib/krb5/rd_req.c (krb5_verify_ap_req2): krb5_free_ticket free
177 the ticket now, rewrite error handling to handle that
178
179 * kpasswd/kpasswdd.c (process): don't free ticket,
180 krb5_free_ticket does that now
181
182 * kdc/kerberos5.c (tgs_rep2): don't free ticket, krb5_free_ticket
183 does that now
184
185 * lib/krb5/ticket.c (krb5_free_ticket): free the ticket itself to
186 match mit behavior, pointed out by Derrick Brashear
187
188 * lib/krb5/krb5_ticket.3: krb5_free_ticket free the whole ticket
189
1902003-11-08 Love Hörnquist Å
191strand <lha@it.su.se>
192
193 * lib/krb5/padata.c: add krb5_padata_add
194
195 * lib/krb5/krb5.h: krb5_context_data.pkinit_win2k_compatible
196
197 * lib/krb5/Makefile.am: add pkinit.c
198
199 * kuser/kinit.c: add pkinit support
200
201 * lib/krb5/init_creds_pw.c: add support for pkinit
202
203 * lib/krb5/krb5_locl.h: add the opaque krb5_pk_init_ctx to
204 _krb5_get_init_creds_opt_private
205
206 * lib/krb5/pkinit.c: rename krb5_pk_init_openssl_ctx to
207 krb5_pk_init_ctx fix win2k error handling
208
209 * lib/krb5/pkinit.c: PKINIT patch from Daniel Kouril and Petr
210 Holub, I removed the dependency on valicert asn1 parser, remove
211 smartcard and globus support (for now). Work to be done on this:
212 DH support, Globus support, Smartcard support, windows support (MS
213 implements -09 of the draft), verify that it conforms the new
214 draft
215
2162003-11-07 Love Hörnquist Å
217strand <lha@it.su.se>
218
219 * lib/asn1/der_copy.c (copy_oid): copy all components
220
2212003-10-27 Johan Danielsson <joda@pdc.kth.se>
222
223 * lib/krb5/krb5.conf.5: document capaths section
224
2252003-10-22 Johan Danielsson <joda@pdc.kth.se>
226
227 * kdc/kerberos5.c: make sure that the server realm and the krbtgt
228 second component are identical; get rpath from the capaths section
229
230 * kdc/kerberos5.c: change logic for when to check transited policy
231 to a tri-state model involving per principal flags (to be
232 implemented)
233
234 * kdc/kdc_locl.h: change enforce_transited_policy to a tri-state
235 variable
236
237 * kdc/config.c: change enforce_transited_policy to a tri-state
238 variable
239
2402003-10-22 Love Hörnquist Å
241strand <lha@it.su.se>
242
243 * lib/krb5/transited.c (krb5_domain_x500_encode): always zero out
244 encoding to make sure it have a defined value on failure
245
246 * lib/krb5/transited.c (krb5_domain_x500_encode):
247 if num_realms ==0, set encoding and return (avoids malloc(0)),
248 check return value for malloc
249
2502003-10-21 Johan Danielsson <joda@pdc.kth.se>
251
252 * kdc/kerberos5.c (fix_transited_encoding): always print
253 cross-realm information
254
2552003-10-21 Love Hörnquist Å
256strand <lha@it.su.se>
257
258 * doc/setup.texi: spelling, From: Tracy Di Marco White
259
260 * kdc/kerberos5.c (fix_transited_encoding): set transited type
261
2622003-10-21 Johan Danielsson <joda@pdc.kth.se>
263
264 * kdc/kdc.8: document enforce-transited-policy
265
266 * kdc/kerberos5.c: always check transited policy if flag set
267 either globally or on principal
268
269 * kdc/config.c: add flag to always check transited policy
270
271 * lib/hdb/hdb.asn1: add flag to enforce transited policy
272
2732003-10-21 Love Hörnquist Å
274strand <lha@it.su.se>
275
276 * lib/krb5/transited.c (krb5_domain_x500_decode): set *num_realms
277 to zero not num_realms
278
279 * kuser/kgetcred.1: add --no-transit-check
280
281 * kuser/kgetcred.c: add --no-transit-check
282
283 * doc/setup.texi: describe Transit policy
284
2852003-10-20 Johan Danielsson <joda@pdc.kth.se>
286
287 * kdc/kerberos5.c (fix_transited_encoding): also verify with
288 policy, unless asked not to
289
290 * lib/krb5/rd_req.c (krb5_decrypt_ticket): try to verify transited
291 realms, unless the transited-policy-checked flag is set
292
293 * lib/krb5/transited.c (krb5_domain_x500_decode): handle zero
294 length tr data;
295 (krb5_check_transited): new function that does more useful stuff
296
297 * lib/krb5/get_cred.c: get capath info from [capaths] section
298
2992003-10-16 Johan Danielsson <joda@pdc.kth.se>
300
301 * lib/krb5/fcache.c: Sleep forever waiting for lock. Previous
302 method doesn't work well with a large number of clients accessing
303 the cache at the same time, and there is no simple way to add a
304 timeout to the lock.
305
3062003-10-13 Love Hörnquist Å
307strand <lha@it.su.se>
308
309 * lib/krb5/verify_krb5_conf.c: print the error value
310 krb5_init_context failed with
311
312 * lib/krb5/config_file.c (krb5_config_parse_file_debug): punt if
313 there is binding before a section declaration. Bug found by
314 Arkadiusz Miskiewicz <arekm@pld-linux.org>
315
3162003-10-13 Johan Danielsson <joda@pdc.kth.se>
317
318 * lib/krb5/fcache.c (erase_file): revert a change in previous; if
319 the ccache is a symlink, kdestroy should remove it
320
321 * lib/krb5/fcache.c: implement locking
322
3232003-10-12 Johan Danielsson <joda@pdc.kth.se>
324
325 * kuser/klist.c (print_tickets): bail out if krb5_cc_next_cred
326 returns error other than KRB5_CC_END
327
3282003-10-07 Love Hörnquist Å
329strand <lha@it.su.se>
330
331 * lib/krb5/init_creds_pw.c: add some help function that is common
332 between ENC_TS and SAM2, free the etype{,2}-infos on failure, move
333 the pa counter into krb5_get_init_creds_ctx
334
3352003-10-06 Love Hörnquist Å
336strand <lha@it.su.se>
337
338 * kdc/kaserver.c (do_getticket): if times data is shorter then 8
339 byte, request is malformed.
340
341 * kdc/kaserver.c (do_authenticate): if request length is less then
342 8 byte, its a bad request and fail. Pointed out by Marco Foglia
343 <marco@foglia.org>
344
345 * lib/krb5/verify_krb5_conf.c: add flag --warn-mit-syntax that
346 warns for mit syntax is used and just ignore the mit syntax when
347 its used
348
349 * lib/krb5/verify_krb5_conf.c: parse [kdc]use_2b and [gssapi]
350
3512003-10-04 Love Hörnquist Å
352strand <lha@it.su.se>
353
354 * lib/asn1/lex.l: add BOOLEAN
355
356 * lib/asn1/parse.y: add BOOLEAN
357
3582003-10-03 Love Hörnquist Å
359strand <lha@it.su.se>
360
361 * kuser/kinit.c: When running kinit in "fork mode" do pagsh
362 independent of krb4, also always do krb4 setup of cc. Always try
363 to destroy the v4 cc.
364 - add boolean --{,no-}request-pac that will request pac or not
365
366 * kuser/klist.c (check_for_tgt): set client as part of the
367 pattern/match cred
368
369 * lib/krb5/convert_creds.c (_krb5_krb_dest_tkt): unlink v4 token
370 (get_krb4_cc_name): move out from _krb5_krb_tf_setup
371 (_krb5_krb_tf_setup): adapt to allocated filename instead of
372 static filename
373
374 * lib/krb5/krb5-v4compat.h: add _krb5_krb_dest_tkt and TKT_ROOT
375
376 * lib/krb5/init_creds_pw.c (*) send PA_PAC_REQUEST when the user
377 have requested either use PAC or not use PAC, if the option not
378 set from the user, leave it up to the kdc to decide.
379 (init_creds_loop): clear error string on success
380
381 * lib/krb5/init_creds.c: add
382 krb5_get_init_creds_opt_set_paq_request break out common part of
383 extended opt functions to require_ext_opt
384
385 * lib/krb5/krb5_locl.h: add enum krb5_get_init_creds_req_pac and
386 use it in struct _krb5_get_init_creds_opt_private
387
388 * tools/kdc-log-analyze.pl: handle some more failure lines
389
390 * doc/programming.texi: some diffrences between Heimdal and MIT
391 Kerberos in the API
392
393 * doc/setup.texi: add Setting up DNS
394
395 * lib/krb5/rd_req.c (krb5_rd_req): always free keyblock since its
396 alway used
397
398 * lib/asn1/Makefile.am: add SAM types and PAC_REQUEST
399
400 * lib/asn1/k5.asn1: add more preauth types, add PA-PAC-REQUEST
401
402 * lib/asn1: add boolean support
403
4042003-10-02 Love Hörnquist Å
405strand <lha@it.su.se>
406
407 * lib/krb5/changepw.c (setpw_send_request): free ap_req_data on
408 failure
409
4102003-09-30 Love Hörnquist Å
411strand <lha@it.su.se>
412
413 * appl/test/http_client.c (do_connect): use ai_protocol 0
414
415 * lib/krb5/init_creds_pw.c (init_cred_loop): handle
416 KRB5KRB_ERR_RESPONSE_TOO_BIG and loop again, this time requesting
417 LARGE_MSG from send to kdc, and if this is the second time bail
418 out; try to free memory
419
420 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc_flags): new function,
421 and then implement the order krb5_sendto_kdc* function with this
422 function.
423
424 * lib/krb5/krbhst.c (krb5_krbhst_init_flags): new function, use it
425 and adapt callers
426 (krbhst_get_default_proto): new function, returns udp, or in case
427 large_msg was requested for the krb5_krbhst_data, use tcp.
428 (*): if the flag KD_LARGE_MSG was set on the krb5_krbhst_data, avoid
429 using udp, use krbhst_get_default_proto
430
431 * lib/krb5/krb5.h: flags for krb5_krbhst_init_flags (and
432 krb5_send_to_kdc_flags)
433
4342003-09-23 Love Hörnquist Å
435strand <lha@it.su.se>
436
437 * lib/krb5/rd_req.c (krb5_rd_req): if we have a keyblock in auth
438 context, use that
439
440 * appl/test/uu_client.c: print authorization data if there are any
441
442 * lib/asn1/asn1_print.c: decode IA5Stringa and UTF8String
443
4442003-09-21 Love Hörnquist Å
445strand <lha@it.su.se>
446
447 * lib/krb5/init_creds_pw.c: use _krb5_get_init_creds_opt_copy
448 * lib/krb5/init_creds.c: don't export krb5_get_init_creds_opt_copy
449
450 * lib/hdb/Makefile.am: libhdb might depend on LIB_dlopen
451
452 * kuser/kinit.c: don't get v4 tickets by default
453
4542003-09-20 Love Hörnquist Å
455strand <lha@it.su.se>
456
457 * kpasswd/kpasswdd.c (process): remove a abort()
458
459 * doc/win2k.texi: add some text about netdom.exe and trusts
460
461 * TODO-1.0: gssapi rc4 done
462
463 * kpasswd/kpasswdd.c: add support for Set password protocol as
464 defined by RFC3244 -- Microsoft Windows 2000 Kerberos Change
465 Password and Set Password Protocols
466
4672003-09-19 Love Hörnquist Å
468strand <lha@it.su.se>
469
470 * lib/hdb/db3.c: improve readability of ->open ifdef, check if
471 version >= 4.1
472
473 * lib/krb5/init_creds.c (krb5_get_init_creds_opt_copy): add
474
475 * lib/krb5/rd_req.c (krb5_rd_req): allow caller to pass in a key
476 in the auth_context, they way processes that doesn't use the
477 keytab can still pass in the key of the service (matches behavior
478 of MIT Kerberos).
479
4802003-09-18 Love Hörnquist Å
481strand <lha@it.su.se>
482
483 * lib/krb5/init_creds_pw.c: collect all init_creds context into a
484 structure so it can easier be passed around, also, while here,
485 change nonce for every request
486
487 * lib/krb5/get_in_tkt.c (init_as_req): don't realloc data before
488 the loop, add_padata() will handle that itself
489
490 * lib/krb5/get_for_creds.c (add_addrs): don't increase addr->len
491 until in contains interesting data, use right iteration counter
492 when clearing the addresses
493
494 * lib/krb5/log.c (log_realloc): increase len after realloc returns
495 sucessfully
496
4972003-09-12 Love Hörnquist Å
498strand <lha@it.su.se>
499
500 * lib/krb5/config_file.c: fix prototypes
501 From: Fredrik Ljungberg <flag@pobox.se>
502
5032003-09-10 Love Hörnquist Å
504strand <lha@it.su.se>
505
506 * appl/test/http_client.c: close socket when we are done, don't
507 allow the server to restart gssapi negotiation
508
509 * lib/hdb/hdb_locl.h: include <limits.h> for ULONG_MAX noted by
510 Wissler Magnus <M.Wissler@abalon.se> on heimdal-discuss
511
512 * appl/test/gssapi_client.c (proto): use select_mech
513
514 * appl/test/http_client.c: use getarg
515
516 * appl/test/gss_common.h: prototype for select_mech
517
518 * appl/test/gss_common.c (select_mech): return the gss_OID from a
519 mech name
520
521 * appl/test/http_client.c: print both source and target
522
523 * appl/test/Makefile.am: build http_client
524
5252003-09-09 Love Hörnquist Å
526strand <lha@it.su.se>
527
528 * lib/asn1/asn1_print.c: add support for printing Enumerated
529
530 * appl/test/gssapi_client.c: allow user to select mech; krb5,
531 spnego, and no-oid
532
533 * appl/test/test_locl.h: add mech
534
535 * appl/test/common.c: add --mech,-m argument
536
537 * appl/test/gssapi_server.c: print the mech that was used
538
539 * kdc/kerberos5.c (only_older_enctype_p): check request if the
540 client only supports old enctypes, before it used the database
541
5422003-09-08 Love Hörnquist Å
543strand <lha@it.su.se>
544
545 * **/*.c: add context argument to krb5_get_init_creds_opt_alloc
546
547 * lib/krb5/init_creds.c (krb5_get_init_creds_opt_alloc): add
548 context argument
549
550 * lib/krb5/krb5_get_init_creds.3: spelling
551
5522003-09-04 Love Hörnquist Å
553strand <lha@it.su.se>
554
555 * lib/krb5/context.c (add_file): make len argument an pointer to
556 an integer
557
558 * lib/asn1/k5.asn1: add SAM types
559
560 * lib/krb5/init_creds_pw.c: break out the encrypt timestamp
561 preauth to its function break out the pa_data_to_key_plain to its
562 own function make more variables const
563
5642003-09-04 Johan Danielsson <joda@pdc.kth.se>
565
566 * lib/krb5/krb5.conf.5: document appdefaults/{forward,encrypt}
567
5682003-09-03 Love Hörnquist Å
569strand <lha@it.su.se>
570
571 * lib/krb5/krb5.h: Add key usage for encryption of the
572 SAM-NONCE-OR-SAD field.
573
574 * include/make_crypto.c: include <openssl/ui.h> in the openssl
575 case
576
577 * kdc/hprop.h: use new DES_ api
578
579 * lib/krb5/krb5-v4compat.h: assume session key is a char array of
580 length 8
581
582 * lib/krb5/prompter_posix.c:
583 s/des_read_pw_string/UI_UTIL_read_pw_string/
584
585 * kuser/kinit.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
586
587 * kdc/string2key.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
588
589 * kdc/kstash.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
590
591 * admin/add.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
592
593 * lib/krb5/crypto.c: switch from the des_ to the DES_ api
594
595 * kdc/hprop.c: use DES_KEY_SZ instead of sizeof(des_block)
596
597 * kuser/kverify.c: use
598 krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
599
600 * kpasswd/kpasswd-generator.c: use
601 krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
602
603 * kdc/hprop.c: use
604 krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free compare
605 a uint32_t with 0xffffffff instead of -1
606
607 * lib/krb5/krb5_425_conv_principal.3: fix [Gt]
608
609 * kuser/kinit.c: use
610 krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
611
612 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): handle
613 password passed in though context
614
615 * lib/krb5/Makefile.am (TESTS): += test_config
616
617 * lib/krb5/aes-test.c: move variable thats used within a #ifdef to
618 be defined within that #ifdef
619
620 * lib/krb5/data.c (krb5_data_free): reset whole krb5_data when
621 freeing it
622
623 * lib/krb5/keyblock.c (krb5_keyblock_zero): new function, zeros
624 out a keyblock
625
626 * lib/krb5/init_creds_pw.c: rewrite/implement
627 krb5_get_init_creds_password with new preauth handing, still it
628 can only work with krb5-pa-enc-timestamp for preauth, but now it
629 can handle etype-info2
630
631 * lib/krb5/init_creds.c (krb5_get_init_creds_opt_alloc): allocate
632 a opt structure
633 (krb5_get_init_creds_opt_free): free a opt structure
634 (krb5_get_init_creds_opt_set_pa_password): set preauth info for
635 enc-timestamp
636
637 * lib/krb5/krb5_locl.h: add struct
638 _krb5_get_init_creds_opt_private
639
6402003-09-02 Love Hörnquist Å
641strand <lha@it.su.se>
642
643 * lib/krb5/krb5.h: add SAM keyusage numbers, add s2k proc typedef,
644 add a pointer to a private part of krb5_get_init_creds_opt
645
646 * kdc/string2key.c (main): avoid const warning by using a extra
647 variable
648
6492003-08-31 Love Hörnquist Å
650strand <lha@it.su.se>
651
652 * lib/krb5/ticket.c (krb5_ticket_get_authorization_data_type):
653 reindent
654
655 * lib/krb5/ticket.c (krb5_copy_ticket): free all data when
656 failing, copy data to right memory, the later pointed out by Luke
657 Howard.
658
6592003-08-30 Love Hörnquist Å
660strand <lha@it.su.se>
661
662 * lib/krb5/krb5.h: cfx-01 use diffrent usage numbers
663
6642003-08-29 Love Hörnquist Å
665strand <lha@it.su.se>
666
667 * lib/hdb/db3.c: try to include more db headers
668
669 * lib/hdb/db3.c: patch for working with DB4 on heimdal-discuss
670 From: Luke Howard <lukeh@PADL.COM>
671
6722003-08-28 Love Hörnquist Å
673strand <lha@it.su.se>
674
675 * lib/krb5/krb5.h: add KEYTYPE_ARCFOUR_56
676
677 * appl/test/gssapi_client.c: send both INT and CONF wrapped token
678
679 * appl/test/gssapi_server.c: recv both INT and CONF wrapped token
680
681 * lib/asn1/k5.asn1: add KRB5_NT_SMTP_NAME and KRB5_NT_ENTERPRISE
682
6832003-08-27 Love Hörnquist Å
684strand <lha@it.su.se>
685
686 * appl/test/uu_client.c (proto): fill in client in the match cred
687
6882003-08-26 Love Hörnquist Å
689strand <lha@it.su.se>
690
691 * lib/krb5/krb5.h: CFX uses slightly diffrent usage numbers
692
693 * lib/krb5/crypto.c (usage2arcfour): simplify, only include
694 special cases From: Luke Howard <lukeh@PADL.COM>
695
6962003-08-25 Love Hörnquist Å
697strand <lha@it.su.se>
698
699 * lib/hdb/hdb-ldap.c: code rewrite from Luke Howard
700 <lukeh@PADL.COM>
701
702 * lib/krb5/crypto.c (arcfour_checksum_p): return true when is
703 arcfour, not when its not pointed out by Luke Howard
704
705 * doc/ack.texi: update Luke Howard email address
706
7072003-08-24 Love Hörnquist Å
708strand <lha@it.su.se>
709
710 * lib/krb5/krb5_encrypt.3: document:
711 krb5_crypto_getconfoundersize, krb5_crypto_getblocksize
712 krb5_crypto_getenctype, krb5_crypto_getpadsize
713
714 * lib/krb5/crypto.c (krb5_crypto_getpadsize,
715 krb5_crypto_getconfoundersize): added From: Luke Howard
716 <lukeh@PADL.COM>
717
7182003-08-23 Love Hörnquist Å
719strand <lha@it.su.se>
720
721 * kdc/connect.c (handle_tcp): handle recvfrom returning 0
722 (connection closed)
723
724 * kdc/connect.c (grow_descr): increment the size after we succeed
725 to allocate the space
726
727 * lib/krb5/krb5_create_checksum.3: text about when
728 krb5_crypto_get_checksum_type is useful
729
730 * lib/krb5/crypto.c (krb5_crypto_get_checksum_type): fix format
731 string
732
733 * lib/krb5/krb5_create_checksum.3: document
734 krb5_crypto_get_checksum_type
735
736 * lib/krb5/crypto.c: add krb5_crypto_get_checksum_type
737 From: Luke Howard <lukeh@PADL.COM>
738
739 * lib/asn1/gen.c: s/UTF8String/heim_utf8_string/ in generated code
740 From: Luke Howard <lukeh@PADL.COM>
741
7422003-08-21 Love Hörnquist Å
743strand <lha@it.su.se>
744
745 * include/make_crypto.c: include aes.h inc in the local libdes
746 case too
747
7482003-08-20 Johan Danielsson <joda@pdc.kth.se>
749
750 * lib/asn1/der_free.c: set free'd poiners to NULL
751
752 * lib/asn1/gen_free.c: set free'd poiners to NULL
753
7542003-08-20 Love Hörnquist Å
755strand <lha@it.su.se>
756
757 * lib/krb5/heim_threads.h: XXX don't use "plain" pthread support
758 on netbsd
759
760 * lib/krb5/crypto.c: Do the arcfour checksum mapping for
761 krb5_create_checksum and krb5_verify_checksum, From: Luke Howard
762 <lukeh@PADL.COM>
763
7642003-08-18 Love Hörnquist Å
765strand <lha@it.su.se>
766
767 * lib/krb5/test_config.c: check krb5_prepend_config_files_default
768 and krb5_prepend_config_files
769
770 * lib/krb5/context.c: add krb5_prepend_config_files and
771 krb5_prepend_config_files_default
772
7732003-08-17 Love Hörnquist Å
774strand <lha@it.su.se>
775
776 * lib/hdb/mkey.c (read_master_mit): krb5_ret_int16 takes a int16_t
777 as argument
778
779 * lib/krb5/parse-name-test.c: please lint (and me)
780
781 * kdc/config.c (configure): remove only set variable 'e'
782
783 * kdc/connect.c (init_socket): sockaddr size argument to
784 krb5_addr2sockaddr is a krb5_addr2sockaddr *
785
786 * kdc/kerberos5.c (as_rep): remove usused variable
787 (tgs_rep2): don't use a temporary ret-variable, ret is reset later
788
789 * lib/krb5/krb5_get_in_cred.3: these function will be deprecated
790
791 * lib/krb5/Makefile.am: man_MANS += krb5_get_init_creds.3
792
793 * lib/krb5/krb5_get_init_creds.3: begining of documentation of
794 krb5_get_init_creds
795
796 * lib/krb5/get_in_tkt.c (krb5_get_in_tkt): for compatibility with
797 with the mit implemtation, don't free `creds' argument when done,
798 its up the the caller to do that, also allow a NULL ccache.
799
8002003-08-16 Love Hörnquist Å
801strand <lha@it.su.se>
802
803 * lib/krb5/krb5.conf.5: document tgs_require_subkey
804
805 * lib/asn1/Makefile.am: remove trance of generate tests files, its
806 not really for consumption yet
807
808 * lib/hdb/Makefile.am: split generated source from non generated
809 source we make-proto.pl can generate prototypes for non
810 generate-source only (make-proto.pl dies on asn1compile's .c
811 files)
812
813 * lib/krb5/get_cred.c (init_tgs_req): make generation of subkey
814 optional on configuration parameter
815 [realms]realm={tgs_require_subkey=bool}
816 defaults to off. The RFC1510 weakly defines the correct behavior,
817 so old DCE secd apparently required the subkey to be there, and MS
818 will use it when its there. But the request isn't encrypted in the
819 subkey, so you get to choose if you want to talk to a MS mdc or a
820 old DCE secd.
821
822 * kdc/kerberos5.c (*): handle krb5_unparse_name returning non-zero
823
8242003-08-15 Love Hörnquist Å
825strand <lha@it.su.se>
826
827 * lib/krb5/principal.c (unparse_name): len can't be zero, so,
828 don't check for that
829
8302003-08-13 Love Hörnquist Å
831strand <lha@it.su.se>
832
833 * lib/krb5/principal.c (unparse_name): make sure there are space
834 for a NUL, set *name to NULL when there is a failure (so caller
835 can't get hold of a freed pointer)
836
8372003-07-26 Love Hörnquist Å
838strand <lha@it.su.se>
839
840 * lib/krb5/kerberos.8: remove duplicate manual, from
841 cjep@netbsd.org
842
8432003-07-25 Love Hörnquist Å
844strand <lha@it.su.se>
845
846 * lib/krb5/cache.c: indent
847
848 * lib/krb5/cache.c (krb5_cc_set_default_name): only read
849 KRB5CCNAME when not suid
850
8512003-07-24 Love Hörnquist Å
852strand <lha@it.su.se>
853
854 * lib/krb5/keytab_krb4.c (read_v4_entry): the des key is 8 bytes,
855 use a char array instead of des_cblock
856
8572003-07-23 Love Hörnquist Å
858strand <lha@it.su.se>
859
860 * kdc/kerberos5.c: add support for KRB5_PADATA_ETYPE_INFO2
861
862 * lib/krb5/crypto.c (hmac): make it return an error when out of
863 memory, update callsites to either return error or use krb5_abortx
864 (krb5_hmac): expose hmac
865
8662003-07-22 Love Hörnquist Å
867strand <lha@it.su.se>
868
869 * lib/krb5/keyblock.c (krb5_keyblock_get_enctype): return enctype
870 of keyblock
871
872 * lib/krb5/Makefile.am (man_MANS): += krb5_keyblock.3
873
874 * lib/krb5/krb5_keyblock.3: some information about krb5_keyblock
875 and related functions
876
877 * lib/krb5/heim_threads.h: make the non-debug version of the mutex
878 macros "use" the "mutex" integer so the compile wont complain
879 about defined unused variables
880
881 * lib/krb5/heim_threads.h: make thread local storage macros take a
882 "return" argument so no functions need to be created for the
883 no-pthread case
884
885 * lib/krb5/heim_threads.h: adding RWLOCKS and [sg]etspecific
886
887 * configure.in: use KRB_PTHREADS
888
889 * lib/asn1/Makefile.am (gen_files): add asn1_KerberosString and
890 sort
891
892 * lib/asn1/k5.asn1 (ETYPE-INFO2-ENTRY): salt is a KerberosString
893
894 * lib/krb5/krb5.3: add ticket access functions
895 * lib/krb5/krb5_ticket.3: ditto
896 * lib/krb5/ticket.c: ditto
897 * lib/krb5/Makefile.am: ditto
898
899 * lib/krb5/mit_glue.c: add some more krb5_c functions
900
901 * lib/krb5/krb5_c_make_checksum.3: add some more krb5_c functions
902
903 * lib/krb5/crypto.c (krb5_cksumtype_valid): check is checksum type
904 is a valid one
905
906 * lib/krb5/crypto.c (krb5_checksum_is_keyed): only set extented
907 error string when there is a context
908 (krb5_checksum_is_collision_proof): ditto
909
9102003-07-21 Love Hörnquist Å
911strand <lha@it.su.se>
912
913 * lib/krb5/mit_glue.c (krb5_c_get_checksum): make type and data
914 argument optional
915 (krb5_c_{encrypt,decrypt}): return "better" error codes for
916 invalid ivec length
917
918 * lib/krb5/krb5_c_make_checksum.3: update krb5_c_get_checksum
919 usage
920
921 * lib/krb5/crypto.c (krb5_crypto_getenctype): new function
922
923 * include/make_crypto.c: avoid redefining
924 OPENSSL_DES_LIBDES_COMPATIBILITY
925
926 * lib/krb5/krb5.h: add krb5_enc_data
927
9282003-07-19 Love Hörnquist Å
929strand <lha@it.su.se>
930
931 * lib/krb5/krb5.3: add krb5_c_ functions
932
933 * lib/krb5/mit_glue.c: support passing in NULL as the
934 cipher_state/ivec
935
936 * lib/krb5/aes-test.c: add test for krb5_c_encrypt_length and
937 krb5_c_decrypt
938
939 * lib/krb5/krb5_c_make_checksum.3: krb5_c encryption glue
940
941 * lib/krb5/crypto.c (wrapped_length/wrapped_length_derived): when
942 calculating the length of the encrypted data, use the keyed
943 checksum length if the enctype supports a keyed checksum. This
944 only matter for aes, for all other enctypes the key and unkeyed
945 checksum have the same length.
946
9472003-07-18 Love Hörnquist Å
948strand <lha@it.su.se>
949
950 * lib/krb5/mit_glue.c: first version of krb5_c encryption glue
951
952 * doc/install.texi: update pointer to luke ldap documentation
953
954 * lib/hdb/hdb.c (hdb_create): check for dynamic backend after
955 static to avoid warning from dynamic backend when using a known
956 static backend
957
9582003-07-16 Love Hörnquist Å
959strand <lha@it.su.se>
960
961 * lib/krb5/cache.c: don't return value in void function
962
9632003-07-15 Love Hörnquist Å
964strand <lha@it.su.se>
965
966 * lib/krb5/creds.c (krb5_compare_creds): if client is specified in
967 the mcreds, check that too
968
969 * lib/krb5/{keytab_file.c,principal.c,mk_error.c,krb5.h,get_cred.c}:
970 prefix libasn1 types with heim_
971
972 * lib/asn1: prefix typedefs and structs with heim_
973
9742003-07-13 Love Hörnquist Å
975strand <lha@it.su.se>
976
977 * lib/hdb/hdb.c: avoid unnecessary setting of variable
978
9792003-07-07 Love Hörnquist Å
980strand <lha@it.su.se>
981
982 * kuser/klist.c (check_for_tgt): use krb5_cc_clear_mcred
983
984 * appl/test/uu_client.c (proto): use krb5_cc_clear_mcred
985
986 * lib/krb5/get_cred.c (init_tgs_req): in case of error, don't free
987 in the req_body addresses since they where pass in by caller
988 (find_cred): use krb5_cc_clear_mcred
989
990 * lib/krb5/krb5_ccache.3: document krb5_cc_clear_mcred
991
992 * lib/krb5/cache.c (krb5_cc_clear_mcred): new function, clear a
993 krb5_creds to use with krb5_cc_retrieve_cred
994
9952003-06-30 Love Hörnquist Å
996strand <lha@it.su.se>
997
998 * lib/hdb/hdb.c (find_dynamic_method): if there isn't a prefix,
999 don't load anything
1000
10012003-06-29 Love Hörnquist Å
1002strand <lha@it.su.se>
1003
1004 * lib/hdb/hdb.c: Dynamic backend loading, based on patch from Luke
1005 Howard <lukeh@PADL.COM>
1006
1007 * lib/hdb/hdb.h: add struct hdb_so_method and
1008 HDB_INTERFACE_VERSION
1009
10102003-06-28 Love Hörnquist Å
1011strand <lha@it.su.se>
1012
1013 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): when using
1014 arcfour-hmac-md5, use an unkeyed checksum (rsa-md5), since
1015 Microsoft calculates the keyed checksum with the subkey of the
1016 authenticator.
1017
1018 * kuser/kinit.c: write out v4 credential caches with
1019 _krb5_krb_tf_setup
1020
1021 * lib/krb5/krb5-v4compat.h: add _krb5_krb_tf_setup
1022
1023 * lib/krb5/convert_creds.c (_krb5_krb_tf_setup): create/append v4
1024 credential to a new krb4 ticket file
1025
10262003-06-27 Johan Danielsson <joda@pdc.kth.se>
1027
1028 * lib/krb5/krb5_kuserok.3: put Nd argument in double quotes since
1029 it contains more than 9 words; from wiz
1030
10312003-06-25 Love Hörnquist Å
1032strand <lha@it.su.se>
1033
1034 * lib/krb5/verify_krb5_conf.c: add missing " within #if 0, from
1035 stefan sokoll <stefansokoll@yahoo.de>
1036
10372003-06-24 Love Hörnquist Å
1038strand <lha@it.su.se>
1039
1040 * lib/krb5/krb5_timeofday.3: improve krb5_set_real_time text
1041
1042 * lib/krb5/time.c: improve comment for krb5_set_real_time
1043
10442003-06-23 Johan Danielsson <joda@pdc.kth.se>
1045
1046 * kuser/kinit.1: document -A
1047
1048 * kuser/kinit.c: add -A as an alias for --no-addresses
1049
10502003-06-22 Love Hörnquist Å
1051strand <lha@it.su.se>
1052
1053 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): pass in a
1054 krb5_timestamp to krb5_us_timeofday
1055
1056 * lib/krb5/mk_error.c (krb5_mk_error): pass in a krb5_timestamp to
1057 krb5_us_timeofday
1058
1059 * lib/krb5/time.c (krb5_set_real_time): fix comment and make it
1060 work
1061
1062 * lib/krb5/time.c, lib/krb5/krb5_timeofday.3,
1063 lib/krb5/Makefile.am lib/krb5/test_time.c:
1064
1065 implement krb5_set_real_time, used by SAMBA, requested by Luke
1066 Howard <lukeh@PADL.COM>
1067
1068 * lib/asn1/k5.asn1: make the aes and sha1 checksum types match
1069 draft-ietf-krb-wg-crypto-05
1070
10712003-06-21 Love Hörnquist Å
1072strand <lha@it.su.se>
1073
1074 * lib/krb5/aes-test.c: add a test for aes kcrypto encrypted data
1075
1076 * lib/krb5/crypto.c: clean up AES code to use a structure instead
1077 of a key array
1078 (_krb5_AES_string_to_default_iterator): set to 4096 as described in
1079 aes draft -04
1080 (derive_key): always remove the key->schedule since its
1081 will contain the wrong (parent key) info
1082
10832003-06-18 Love Hörnquist Å
1084strand <lha@it.su.se>
1085
1086 * lib/krb5/aes-test.c: add aes256 test vectors from Ken Raeburn
1087 * doc/setup.texi: add more kdc's to the example
1088
10892003-06-17 Love Hörnquist Å
1090strand <lha@it.su.se>
1091
1092 * lib/hdb/hdb-ldap.c: use int2HDBFlags/HDBFlags2int From: Alberto
1093 Patino <jalbertop@aranea.com.mx>, Luke Howard <lukeh@PADL.COM>
1094 Pointed out by Andrew Bartlett of Samba
1095
1096 * lib/krb5/heim_threads.h: remove freebsd comment, don't use debug
1097 pthread stubs by default
1098
1099 * lib/krb5/Makefile.am (man_MANS): drop krb5_free_addresses.3
1100
1101 * lib/krb5/krb5_free_addresses.3: removed file, functions are
1102 documented in krb5_address.3
1103
1104 * lib/krb5/codec.c: add krb5_{de,en}code_ETYPE_INFO2
1105
1106 * lib/krb5/crypto.c: add _krb5_AES_string_to_default_iterator add
1107 krb5_string_to_key_salt_opaque() fix keylengh for keytype_aes256
1108
11092003-06-06 Love Hörnquist Å
1110strand <lha@it.su.se>
1111
1112 * doc/setup.texi: Point out that slave needs /var/heimdal
1113 directory and masterkey From: Mans Nilsson <mansaxel@sunet.se>,
1114 Fix spelling while here
1115
11162003-06-02 Love Hörnquist Å
1117strand <lha@it.su.se>
1118
1119 * lib/krb5/Makefile.am, krb5_get_in_cred.3, krb5.3:
1120 add manpage for: krb5_get_in_cred, krb5_get_in_tkt,
1121 krb5_get_in_tkt_with_keytab, krb5_get_in_tkt_with_password,
1122 krb5_get_in_tkt_with_skey
1123
11242003-05-28 Assar Westerlund <assar@kth.se>
1125
1126 * lib/krb5/heim_threads.h: Fix unlock/destroy macros for the
1127 non-threaded cases to work. Fix typo.
1128
11292003-05-27 Johan Danielsson <joda@pdc.kth.se>
1130
1131 * lib/asn1/{der_put.c,der_length.c,check-der.c}: Fix encoding of
1132 "unsigned" integers. If MSB is set, we need to pad with a zero
1133 byte.
1134
11352003-05-27 Love Hörnquist Å
1136strand <lha@it.su.se>
1137
1138 * lib/krb5/krb5_c_make_checksum.3: some more mdoc fixes
1139
1140 * lib/hdb/hdb-ldap.c (LDAP__connect): bind sasl "EXTERNAL" to ldap
1141 connection
1142 (LDAP_store): remove superfluous argument to asprintf
1143
1144 From Alberto Patino <jalbertop@aranea.com.mx>
1145
11462003-05-26 Love Hörnquist Å
1147strand <lha@it.su.se>
1148
1149 * lib/krb5/*.[0-9]: pacify mdoclink
1150
1151 * lib/krb5/krb5_ccache.3: document diffrences between mit and
1152 heimdal krb5_cc_gen_new ccache -> credential cache s/[\t ]+$//
1153
11542003-05-21 Love Hörnquist Å
1155strand <lha@it.su.se>
1156
1157 * appl/test/gssapi_server.c (proto): start to use
1158 gss_krb5_copy_ccache
1159
1160 * appl/test/nt_gss_server.c (proto): comment out gss_ctx_id_t
1161 groveling for now
1162
11632003-05-20 Love Hörnquist Å
1164strand <lha@it.su.se>
1165
1166 * lib/asn1:
1167 - add parser/generate glue for UTF8String and NULL
1168 (DER primitive encode/decode functions missing)
1169 - handle parsing of DEFAULT and, ...
1170
11712003-05-16 Love Hörnquist Å
1172strand <lha@it.su.se>
1173
1174 * lib/krb5/heim_threads.h: add missing argument to mutex_init
1175
1176 * lib/krb5/crypto.c: protect the random initiator with a mutex
1177
1178 * lib/krb5/mcache.c: protect the mcc_head with a mutex
1179
1180 * lib/krb5/krb5_locl.h: include heim_threads.h
1181
1182 * lib/krb5/heim_threads.h: wrapper macros for thread
1183 synchronization primitives
1184
11852003-05-15 Love Hörnquist Å
1186strand <lha@it.su.se>
1187
1188 * lib/krb5/krb5_principal.3
1189 lib/krb5/Makefile.am:
1190 Add all Kerberos principal function to one manpage, add a few more
1191 principal function to it, remove old now dup manpages
1192
1193 * lib/krb5/krb5_build_principal.3: remove file
1194 * lib/krb5/krb5_free_principal.3: remove file
1195 * lib/krb5/krb5_sname_to_principal.3: remove file
1196 * lib/krb5/krb5_principal_get_realm.3: remove file
1197
11982003-05-14 Love Hörnquist Å
1199strand <lha@it.su.se>
1200
1201 * lib/krb5/verify_krb5_conf.8: sort sections, from netbsd
1202
1203 * lib/krb5/krb5_verify_user.3: .Sh EXAMPLE -> .Sh EXAMPLES, from
1204 netbsd
1205
1206 * lib/krb5/krb5_openlog.3: .Sh EXAMPLE -> .Sh EXAMPLES, sort
1207 sections, from netbsd
1208
1209 * lib/krb5/krb5_keytab.3: .Sh EXAMPLE -> .Sh EXAMPLES, mdoc fixes,
1210 from netbsd
1211
1212 * lib/krb5/krb5_get_krbhst.3: .Sh EXAMPLE -> .Sh EXAMPLES, from
1213 netbsd
1214
1215 * lib/krb5/krb5_get_all_client_addrs.3: add .Os, from NetBSD
1216
1217 * lib/krb5/krb5_build_principal.3: sort sections, from NetBSD
1218
1219 * lib/krb5/krb5.conf.5: .Sh EXAMPLE -> .Sh EXAMPLES, from netbsd
1220
1221 * lib/krb5/get_default_realm.c: compatability -> compatibility,
1222 from netbsd
1223
1224 * lib/krb5/krb5_warn.3: add copyright/license
1225
1226 * lib/krb5/krb5_context.3: add SYNOPSIS and LIBRARY
1227
1228 * lib/krb5/krb5.3: add RCSID
1229
1230 * kdc/hprop.8: fix mdoc problem, from netbsd
1231
1232 * lib/krb5/krb5_krbhst_init.3: uppercase url, from Thomas Klausner
1233 <wiz@netbsd.org>
1234
1235 * kuser/kinit.1: setup -> set up, new sentence, new line from
1236 Thomas Klausner <wiz@netbsd.org>
1237
12382003-05-13 Love Hörnquist Å
1239strand <lha@it.su.se>
1240
1241 * kpasswd/kpasswd.1: handle setting passwords for multiple
1242 principals at the same time
1243
1244 * kpasswd/kpasswd.c: handle setting passwords for multiple
1245 principals at the same time
1246
1247 * lib/krb5/changepw.c: draft-ietf-cat-kerb-chg-password-02 and
1248 rfc3244 share the response packet sure more constants now that
1249 they exists
1250
12512003-05-12 Love Hörnquist Å
1252strand <lha@it.su.se>
1253
1254 * lib/krb5/krb5.h: some define for rfc3244
1255
1256 * lib/krb5/krb5.3: add krb5_change_password and krb5_set_password
1257
1258 * kpasswd/kpasswd.1: document --admin-principal
1259
1260 * kpasswd/kpasswd.c: use krb5_set_password
1261
1262 * lib/krb5/krb5_set_password.3: document krb5_change_password and
1263 krb5_set_password
1264
1265 * lib/krb5/changepw.c: implement rfc3244, partly from
1266 shadow@dementia.org
1267
1268 * lib/asn1/Makefile.am (gen_files): asn1_ChangePasswdDataMS.x for
1269 RFC3244
1270
1271 * lib/asn1/k5.asn1: add ChangePasswdDataMS, for
1272 RFC3244
1273
12742003-05-08 Love Hörnquist Å
1275strand <lha@it.su.se>
1276
1277 * kuser/kdestroy.c: destroy tokens even if there isn't v4 support
1278
1279 * kuser/kinit.c: get token even if there isn't v4 support
1280
1281 * kuser/klist.c: print tokens even if there isn't v4 support
1282
12832003-05-06 Johan Danielsson <joda@pdc.kth.se>
1284
1285 * lib/krb5/name-45-test.c: need to use empty krb5.conf for some
1286 tests
1287
1288 * lib/asn1/check-gen.c: there is no \e escape sequence; replace
1289 everything with hex-codes, and cast to unsigned char* to make some
1290 compilers happy
1291
12922003-05-06 Love Hörnquist Å
1293strand <lha@it.su.se>
1294
1295 * lib/krb5/get_in_tkt.c (make_pa_enc_timestamp): make sure first
1296 argument to krb5_us_timeofday have correct type
1297
12982003-05-05 Assar Westerlund <assar@kth.se>
1299
1300 * include/make_crypto.c (main): include aes.h if ENABLE_AES
1301
13022003-05-05 Love Hörnquist Å
1303strand <lha@it.su.se>
1304
1305 * make-release: when fixing a valid cvs tag from release name
1306 replace all number. to number- for all non-overlapping matches
1307
13082003-05-04 Love Hörnquist Å
1309strand <lha@it.su.se>
1310
1311 * lib/asn1/Makefile.am: gen_files += asn1_ETYPE_INFO2.x and
1312 asn1_ETYPE_INFO2_ENTRY.x
1313 (libasn1_la_LDFLAGS): set version to 6:1:1
1314
1315 * doc/Makefile.am: add apps.texi
1316
1317 * doc/setup.texi: add move forward link to applications
1318
1319 * doc/heimdal.texi: add applications
1320
1321 * doc/misc.texi: move afs stuff to applications add link to
1322 applications
1323
1324 * doc/apps.texi: text about applications using kerberos
1325 move afs text here
1326
13272003-05-03 Love Hörnquist Å
1328strand <lha@it.su.se>
1329
1330 * doc/setup.texi: add cross realm text
1331
13322003-04-29 Love Hörnquist Å
1333strand <lha@it.su.se>
1334
1335 * lib/krb5/krb5_crypto_init.3: document krb5_enctype_to_string and
1336 krb5_string_to_enctype
1337
13382003-04-28 Love Hörnquist Å
1339strand <lha@it.su.se>
1340
1341 * kdc/v4_dump.c (v4_prop_dump): limit strings length, from openbsd
1342
13432003-04-26 Love Hörnquist Å
1344strand <lha@it.su.se>
1345
1346 * lib/krb5/aes-test.c: use _krb5_PKCS5_PBKDF2
1347 * lib/krb5/crypto.c: unexport krb5_PKCS5_PBKDF2
1348
13492003-04-25 Johan Danielsson <joda@pdc.kth.se>
1350
1351 * lib/krb5/build_auth.c (krb5_build_authenticator): if the local
1352 sequence number is non-zero, don't generate a new one
1353
1354 * lib/krb5/mk_rep.c (krb5_mk_rep): if the local sequence number is
1355 non-zero, don't generate a new one
1356
1357 * lib/krb5/time.c (krb5_us_timeofday): make the sec parameter a
1358 krb5_timestamp
1359
1360 * lib/krb5/mk_priv.c lib/krb5/mk_safe.c lib/krb5/rd_priv.c
1361 lib/krb5/rd_safe.c lib/krb5/rd_cred.c: implement RET_SEQUENCE and
1362 RET_TIME
1363
1364 * lib/krb5/krb5.h (krb5_replay_data): make usec signed (matching
1365 asn1)
1366
13672003-04-24 Love Hörnquist Å
1368strand <lha@it.su.se>
1369
1370 * doc/programming.texi: s/managment/management/, from jmc
1371 <jmc@prioris.mini.pw.edu.pl>
1372
13732003-04-23 Love Hörnquist Å
1374strand <lha@it.su.se>
1375
1376 * lib/krb5/context.c (default_etypes): also advertise that we
1377 handle aes encryption types
1378
1379 * lib/krb5/Makefile.am: add krb5_c_ checksum related functions
1380
1381 * lib/krb5/krb5_c_make_checksum.3: document krb5_c_ checksum
1382 related functions
1383
1384 * lib/krb5/mit_glue.c: add compat mit krb5_c checksum related
1385 functions
1386
1387 * lib/asn1/k5.asn1: add ETYPE-INFO2 and ETYPE-INFO2-ENTRY
1388
13892003-04-22 Love Hörnquist Å
1390strand <lha@it.su.se>
1391
1392 * lib/krb5/krbhst.c: copy NUL too, from janj@wenf.org via openbsd
1393
13942003-04-17 Love Hörnquist Å
1395strand <lha@it.su.se>
1396
1397 * lib/asn1/der_copy.c (copy_general_string): use strdup
1398 * lib/asn1/der_put.c: remove sprintf
1399 * lib/asn1/gen.c: remove strcpy/sprintf
1400
1401 * lib/krb5/name-45-test.c: use a more unique name then ratatosk so
1402 that other (me) have such hosts in the local domain and the tests
1403 fails, to take hokkigai.pdc.kth.se instead
1404
1405 * lib/krb5/test_alname.c: add --version and --help
1406
14072003-04-16 Love Hörnquist Å
1408strand <lha@it.su.se>
1409
1410 * lib/krb5/krb5_warn.3: add krb5_get_err_text
1411
1412 * lib/krb5/transited.c: use strlcat/strlcpy, from openbsd
1413 * lib/krb5/krbhst.c (srv_find_realm): use strlcpy, from openbsd
1414 * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use
1415 strlcpy, from openbsd
1416 * kdc/hpropd.c: s/strcat/strlcat/, inspired from openbsd
1417 * appl/kf/kfd.c: use strlcpy, from openbsd
1418
14192003-04-16 Johan Danielsson <joda@pdc.kth.se>
1420
1421 * configure.in: fix for large file support in AIX, _LARGE_FILES
1422 needs to be defined on the command line, since lex likes to
1423 include stdio.h before we get to config.h
1424
14252003-04-16 Love Hörnquist Å
1426strand <lha@it.su.se>
1427
1428 * lib/krb5/*.3: Change .Fd #include <header.h> to .In header.h,
1429 from Thomas Klausner <wiz@netbsd.org>
1430
1431 * lib/krb5/krb5.conf.5: spelling, from Thomas Klausner
1432 <wiz@netbsd.org>
1433
14342003-04-15 Love Hörnquist Å
1435strand <lha@it.su.se>
1436
1437 * kdc/kerberos5.c: fix some more memory leaks
1438
14392003-04-11 Love Hörnquist Å
1440strand <lha@it.su.se>
1441
1442 * appl/kf/kf.1: spelling, from jmc <jmc@prioris.mini.pw.edu.pl>
1443
14442003-04-08 Love Hörnquist Å
1445strand <lha@it.su.se>
1446
1447 * admin/ktutil.8: typos, from jmc <jmc@acn.waw.pl>
1448
14492003-04-06 Love Hörnquist Å
1450strand <lha@it.su.se>
1451
1452 * lib/krb5/krb5.3: s/kerberos/Kerberos/
1453 * lib/krb5/krb5_data.3: s/kerberos/Kerberos/
1454 * lib/krb5/krb5_address.3: s/kerberos/Kerberos/
1455 * lib/krb5/krb5_ccache.3: s/kerberos/Kerberos/
1456 * lib/krb5/krb5.conf.5: s/kerberos/Kerberos/
1457 * kuser/kinit.1: s/kerberos/Kerberos/
1458 * kdc/kdc.8: s/kerberos/Kerberos/
1459
14602003-04-01 Love Hörnquist Å
1461strand <lha@it.su.se>
1462
1463 * lib/krb5/test_alname.c: more krb5_aname_to_localname tests
1464
1465 * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): when
1466 converting too root, make sure user is ok according to
1467 krb5_kuserok before allowing it.
1468
1469 * lib/krb5/Makefile.am (noinst_PROGRAMS): += test_alname
1470
1471 * lib/krb5/test_alname.c: add test for krb5_aname_to_localname
1472
1473 * lib/krb5/crypto.c (krb5_DES_AFS3_CMU_string_to_key): used p1
1474 instead of the "illegal" salt #~, same change as kth-krb did
1475 1999. Problems occur with crypt() that behaves like AT&T crypt
1476 (openssl does this). Pointed out by Marcus Watts.
1477
1478 * admin/change.c (kt_change): collect all principals we are going
1479 to change, and pick the highest kvno and use that to guess what
1480 kvno the resulting kvno is going to be. Now two ktutil change in a
1481 row works. XXX fix the protocol to pass the kvno back.
1482
14832003-03-31 Love Hörnquist Å
1484strand <lha@it.su.se>
1485
1486 * appl/kf/kf.1: afs->AFS, from jmc <jmc@acn.waw.pl>
1487
14882003-03-30 Love Hörnquist Å
1489strand <lha@it.su.se>
1490
1491 * doc/setup.texi: add description on how to turn on v4, 524 and
1492 kaserver support
1493
14942003-03-29 Love Hörnquist Å
1495strand <lha@it.su.se>
1496
1497 * lib/krb5/verify_krb5_conf.c (appdefaults_entries): add afslog
1498 and afs-use-524
1499
15002003-03-28 Love Hörnquist Å
1501strand <lha@it.su.se>
1502
1503 * kdc/kerberos5.c (as_rep): when the second enctype_to_string
1504 failes, remember to free memory from the first enctype_to_string
1505
1506 * lib/krb5/crypto.c (usage2arcfour): map KRB5_KU_TICKET to 2,
1507 from Harald Joerg <harald.joerg@fujitsu-siemens.com>
1508 (enctype_arcfour_hmac_md5): disable checksum_hmac_md5_enc
1509
1510 * lib/hdb/mkey.c (hdb_unseal_keys_mkey): truncate key to the key
1511 length when key is longer then expected length, its probably
1512 longer since the encrypted data was padded, reported by Aidan
1513 Cully <aidan@kublai.com>
1514
1515 * lib/krb5/crypto.c (krb5_enctype_keysize): return key size of
1516 encyption type, inspired by Aidan Cully <aidan@kublai.com>
1517
15182003-03-27 Love Hörnquist Å
1519strand <lha@it.su.se>
1520
1521 * lib/krb5/keytab.c (krb5_kt_get_entry): avoid printing 0
1522 (wildcard kvno) after principal when the keytab entry isn't found,
1523 reported by Chris Chiappa <chris@chiappa.net>
1524
15252003-03-26 Love Hörnquist Å
1526strand <lha@it.su.se>
1527
1528 * doc/misc.texi: update 2b example to match reality (from
1529 mattiasa@e.kth.se)
1530
1531 * doc/misc.texi: spelling and add `Configuring AFS clients'
1532 subsection
1533
15342003-03-25 Love Hörnquist Å
1535strand <lha@it.su.se>
1536
1537 * lib/krb5/krb5.3: add krb5_free_data_contents.3
1538
1539 * lib/krb5/data.c: add krb5_free_data_contents for compat with MIT
1540 API
1541
1542 * lib/krb5/krb5_data.3: add krb5_free_data_contents for compat
1543 with MIT API
1544
1545 * lib/krb5/krb5_verify_user.3: write more about how the ccache
1546 argument should be inited when used
1547
15482003-03-25 Johan Danielsson <joda@pdc.kth.se>
1549
1550 * lib/krb5/addr_families.c (krb5_print_address): make sure
1551 print_addr is defined for the given address type; make addrports
1552 printable
1553
1554 * kdc/string2key.c: print the used enctype for kerberos 5 keys
1555
15562003-03-25 Love Hörnquist Å
1557strand <lha@it.su.se>
1558
1559 * lib/krb5/aes-test.c: add another arcfour test
1560
15612003-03-22 Love Hörnquist Å
1562strand <lha@it.su.se>
1563
1564 * lib/krb5/aes-test.c: sneek in a test for arcfour-hmac-md5
1565
15662003-03-20 Love Hörnquist Å
1567strand <lha@it.su.se>
1568
1569 * lib/krb5/krb5_ccache.3: update .Dd
1570
1571 * lib/krb5/krb5.3: sort in krb5_data functions
1572
1573 * lib/krb5/Makefile.am (man_MANS): += krb5_data.3
1574
1575 * lib/krb5/krb5_data.3: document krb5_data
1576
1577 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): if
1578 prompter is NULL, don't try to ask for a password to
1579 change. reported by Iain Moffat @ ufl.edu via Howard Chu
1580 <hyc@highlandsun.com>
1581
15822003-03-19 Love Hörnquist Å
1583strand <lha@it.su.se>
1584
1585 * lib/krb5/krb5_keytab.3: spelling, from
1586 <jmc@prioris.mini.pw.edu.pl>
1587
1588 * lib/krb5/krb5.conf.5: . means new line
1589
1590 * lib/krb5/krb5.conf.5: spelling, from
1591 <jmc@prioris.mini.pw.edu.pl>
1592
1593 * lib/krb5/krb5_auth_context.3: spelling, from
1594 <jmc@prioris.mini.pw.edu.pl>
1595
15962003-03-18 Love Hörnquist Å
1597strand <lha@it.su.se>
1598
1599 * kuser/Makefile.am: INCLUDES: -I$(srcdir)/../lib/krb5
1600
1601 * lib/krb5/convert_creds.c: add _krb5_krb_life_to_time
1602
1603 * lib/krb5/krb5-v4compat.h: add _krb5_krb_life_to_time
1604
1605 * kdc/kdc_locl.h: 524 is independent of kerberos 4, so move out
1606 #ifdef KRB4 from enable_v4_cross_realm since 524 needs it
1607
1608 * kdc/config.c: 524 is independent of kerberos 4, so move out
1609 enable_v4_cross_realm from #ifdef KRB4 since 524 needs it
1610
16112003-03-17 Assar Westerlund <assar@kth.se>
1612
1613 * kdc/kdc.8: document --kerberos4-cross-realm
1614 * kdc/kerberos4.c: pay attention to enable_v4_cross_realm
1615 * kdc/kdc_locl.h (enable_v4_cross_realm): add
1616 * kdc/524.c (encode_524_response): check the enable_v4_cross_realm
1617 flag before giving out v4 tickets for foreign v5 principals
1618 * kdc/config.c: add --enable-kerberos4-cross-realm option (default
1619 to off)
1620
16212003-03-17 Love Hörnquist Å
1622strand <lha@it.su.se>
1623
1624 * lib/krb5/Makefile.am (man_MANS) += krb5_aname_to_localname.3
1625
1626 * lib/krb5/krb5_aname_to_localname.3: manpage for
1627 krb5_aname_to_localname
1628
1629 * lib/krb5/krb5_kuserok.3: s/KRB5_USEROK/KRB5_KUSEROK/
1630
16312003-03-16 Love Hörnquist Å
1632strand <lha@it.su.se>
1633
1634 * lib/krb5/Makefile.am (man_MANS): add krb5_set_default_realm.3
1635
1636 * lib/krb5/krb5.3: add manpages from krb5_set_default_realm.3
1637
1638 * lib/krb5/krb5_set_default_realm.3: Manpage for
1639 krb5_free_host_realm, krb5_get_default_realm,
1640 krb5_get_default_realms, krb5_get_host_realm, and
1641 krb5_set_default_realm.
1642
1643 * admin/ktutil.8: s/entype/enctype/, from Igor Sobrado
1644 <sobrado@acm.org> via NetBSD
1645
1646 * lib/krb5/krb5_keytab.3: add documention for krb5_kt_get_type
1647
1648 * lib/krb5/keytab.c (krb5_kt_get_type): get prefix/type of keytab
1649
1650 * lib/krb5/krb5.h (KRB5_KT_PREFIX_MAX_LEN): max length of prefix
1651
1652 * lib/krb5/krb5_ccache.3: document krb5_cc_get_ops, add more
1653 types, add krb5_fcc_ops and krb5_mcc_ops
1654
1655 * lib/krb5/cache.c (krb5_cc_get_ops): new function, return ops for
1656 a id
1657
16582003-03-15 Love Hörnquist Å
1659strand <lha@it.su.se>
1660
1661 * doc/intro.texi: add reference to source code, binaries and the
1662 manual
1663
1664 * lib/krb5/krb5.3: krb5.h isn't in krb5 directory in heimdal
1665
16662003-03-14 Love Hörnquist Å
1667strand <lha@it.su.se>
1668
1669 * kdc/kdc.8: better/difrent english
1670
1671 * kdc/kdc.8: . -> .\n, copyright/license
1672
1673 * kdc/kdc.8: changed configuration file -> restart kdc
1674
1675 * kdc/kerberos4.c: add krb4 into the most error messages written
1676 to the logfile
1677
1678 * lib/krb5/krb5_ccache.3: add missing name of argument
1679 (krb5_context) to most functions
1680
16812003-03-13 Love Hörnquist Å
1682strand <lha@it.su.se>
1683
1684 * lib/krb5/kuserok.c (krb5_kuserok): preserve old behviour of
1685 function and return FALSE when there isn't a local account for
1686 `luser'.
1687
1688 * lib/krb5/krb5_kuserok.3: fix prototype, spelling and more text
1689 describing the function
1690
16912003-03-12 Love Hörnquist Å
1692strand <lha@it.su.se>
1693
1694 * lib/krb5/cache.c (krb5_cc_default): if krb5_cc_default_name
1695 returned memory, don't return ENOMEM
1696
16972003-03-11 Love Hörnquist Å
1698strand <lha@it.su.se>
1699
1700 * lib/krb5/krb5.3: add krb5_address stuff and sort
1701
1702 * lib/krb5/krb5_address.3: fix krb5_addr2sockaddr description
1703
1704 * lib/krb5/Makefile.am (man_MANS): += krb5_address.3
1705
1706 * lib/krb5/krb5_address.3: document types krb5_address and
1707 krb5_addresses and their helper functions
1708
17092003-03-10 Love Hörnquist Å
1710strand <lha@it.su.se>
1711
1712 * lib/krb5/Makefile.am (man_MANS): += krb5_kuserok.3
1713
1714 * lib/krb5/krb5_kuserok.3: spelling, from cizzi@it.su.se
1715
1716 * lib/krb5/Makefile.am (man_MANS): += krb5_ccache.3
1717
1718 * lib/krb5/krb5_ccache.3: spelling, from cizzi@it.su.se
1719
1720 * lib/krb5/krb5.3: add more functions
1721
1722 * lib/krb5/krb5_ccache.3: document krb5_ccache and krb5_cc
1723 functions
1724
1725 * lib/krb5/krb5_kuserok.3: document krb5_kuserok
1726
1727 * lib/krb5/krb5_verify_user.3: document
1728 krb5_verify_opt_set_flags(opt, KRB5_VERIFY_LREALMS) behavior
1729
1730 * lib/krb5/krb5_verify_user.3: document krb5_verify_opt* and
1731 krb5_verify_user_opt
1732
1733 * lib/krb5/*.[0-9]: add copyright/licenses on more manpages
1734
1735 * kuser/kdestroy.c (main): handle that krb5_cc_default_name can
1736 return NULL
1737
1738 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump minor
1739 (TESTS): add test_cc
1740
1741 * lib/krb5/test_cc.c: test some
1742 krb5_cc_default_name/krb5_cc_set_default_name combinations
1743
1744 * lib/krb5/context.c (init_context_from_config_file): set
1745 default_cc_name to NULL
1746 (krb5_free_context): free default_cc_name if set
1747
1748 * lib/krb5/cache.c (krb5_cc_set_default_name): new function
1749 (krb5_cc_default_name): use krb5_cc_set_default_name
1750
1751 * lib/krb5/krb5.h (krb5_context_data): add default_cc_name
1752
17532003-02-25 Love Hörnquist Å
1754strand <lha@it.su.se>
1755
1756 * appl/kf/kf.1: s/securly/securely/ from NetBSD
1757
17582003-02-18 Love Hörnquist Å
1759strand <lha@it.su.se>
1760
1761 * kdc/connect.c: s/intialize/initialize, from
1762 <jmc@prioris.mini.pw.edu.pl>
1763
17642003-02-17 Love Hörnquist Å
1765strand <lha@it.su.se>
1766
1767 * configure.in: add AM_MAINTAINER_MODE
1768
17692003-02-16 Love Hörnquist Å
1770strand <lha@it.su.se>
1771
1772 * **/*.[0-9]: add copyright/licenses on all manpages
1773
17742003-14-16 Jacques Vidrine <nectar@kth.se>
1775
1776 * lib/krb5/get_in_tkt.c (init_as_req): Send only a single
1777 PA-ENC-TIMESTAMP in the AS-REQ, using the first encryption
1778 type specified by the KDC.
1779
17802003-02-15 Love Hörnquist Å
1781strand <lha@it.su.se>
1782
1783 * fix-export: some autoconf put their version number in
1784 autom4te.cache, so remove autom4te*.cache
1785
1786 * fix-export: make sure $1 is a directory
1787
17882003-02-04 Love Hörnquist Å
1789strand <lha@it.su.se>
1790
1791 * kpasswd/kpasswdd.8: spelling, from jmc <jmc@prioris.mini.pw.edu.pl>
1792
1793 * kdc/kdc.8: spelling, from jmc <jmc@prioris.mini.pw.edu.pl>
1794
17952003-01-31 Love Hörnquist Å
1796strand <lha@it.su.se>
1797
1798 * kdc/hpropd.8: s/databases/a database/ s/Not/not/
1799
1800 * kdc/hprop.8: add missing .
1801
18022003-01-30 Love Hörnquist Å
1803strand <lha@it.su.se>
1804
1805 * lib/krb5/krb5.conf.5: documentation for of boolean, etypes,
1806 address, write out encryption type in sentences, s/Host/host
1807
18082003-01-26 Love Hörnquist Å
1809strand <lha@it.su.se>
1810
1811 * lib/asn1/check-gen.c: add checks for Authenticator too
1812
18132003-01-25 Love Hörnquist Å
1814strand <lha@it.su.se>
1815
1816 * doc/setup.texi: in the hprop example, use hprop and the first
1817 component, not host
1818
1819 * lib/krb5/get_addrs.c (find_all_addresses): address-less
1820 point-to-point might not have an address, just ignore
1821 those. Reported by Harald Barth.
1822
18232003-01-23 Love Hörnquist Å
1824strand <lha@it.su.se>
1825
1826 * lib/krb5/verify_krb5_conf.c (check_section): when key isn't
1827 found, don't print out all known keys
1828
1829 * lib/krb5/verify_krb5_conf.c (syslogvals): mark up where severity
1830 and facility start resp
1831 (check_log): find_value() returns -1 when key isn't found
1832
1833 * lib/krb5/crypto.c (_krb5_aes_cts_encrypt): make key argument a
1834 'const void *' to avoid AES_KEY being exposed in krb5-private.h
1835
1836 * lib/krb5/krb5.conf.5: add [kdc]use_2b
1837
1838 * kdc/524.c (encode_524_response): its 2b not b2
1839
1840 * doc/misc.texi: quote @ where missing
1841
1842 * lib/asn1/Makefile.am: add check-gen
1843
1844 * lib/asn1/check-gen.c: add Principal check
1845
1846 * lib/asn1/check-common.h: move generic asn1/der functions from
1847 check-der.c to here
1848
1849 * lib/asn1/check-common.c: move generic asn1/der functions from
1850 check-der.c to here
1851
1852 * lib/asn1/check-der.c: move out the generic asn1/der functions to
1853 a common file
1854
18552003-01-22 Love Hörnquist Å
1856strand <lha@it.su.se>
1857
1858 * doc/misc.texi: more text about afs, how to get get your KeyFile,
1859 and how to start use 2b tokens
1860
1861 * lib/krb5/krb5.conf.5: spelling, from Jason McIntyre
1862 <jmc@cvs.openbsd.org>
1863
18642003-01-21 Jacques Vidrine <nectar@kth.se>
1865
1866 * kuser/kuser_locl.h: include crypto-headers.h for
1867 des_read_pw_string prototype
1868
18692003-01-16 Love Hörnquist Å
1870strand <lha@it.su.se>
1871
1872 * admin/ktutil.8: document -v, --verbose
1873
1874 * admin/get.c (kt_get): make getarg usage consistent with other
1875 other parts of ktutil
1876
1877 * admin/copy.c (kt_copy): remove adding verbose_flag to args
1878 struct, since it will overrun the args array (from Sumit Bose)
1879
18802003-01-15 Love Hörnquist Å
1881strand <lha@it.su.se>
1882
1883 * lib/krb5/krb5.conf.5: write more about [realms] REALM = { kdc =
1884 ... }
1885
1886 * lib/krb5/aes-test.c: test vectors in aes-draft
1887
1888 * lib/krb5/Makefile.am: add aes-test.c
1889
1890 * lib/krb5/crypto.c: Add support for AES
1891 (draft-raeburn-krb-rijndael-krb-02), not enabled by default.
1892 (HMAC_SHA1_DES3_checksum): rename to SP_HMAC_SHA1_checksum and modify
1893 to support checksumtype that are have a shorter wireformat then
1894 their output block size.
1895
1896 * lib/krb5/crypto.c (struct encryption_type): split the blocksize
1897 into blocksize and padsize, padsize is the minimum padding
1898 size. they are the same for now
1899 (enctype_*): add padsize
1900 (encrypt_internal): use padsize
1901 (encrypt_internal_derived): use padsize
1902 (wrapped_length): use padsize
1903 (wrapped_length_dervied): use padsize
1904
1905 * lib/krb5/crypto.c: add extra `opaque' argument to string_to_key
1906 function for each enctype in preparation enctypes that uses
1907 `Encryption and Checksum Specifications for Kerberos 5' draft
1908
1909 * lib/asn1/k5.asn1: add checksum and enctype for AES from
1910 draft-raeburn-krb-rijndael-krb-02.txt
1911
1912 * lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_AES128,
1913 KEYTYPE_AES256
1914
19152003-01-14 Love Hörnquist Å
1916strand <lha@it.su.se>
1917
1918 * lib/hdb/common.c (_hdb_fetch): handle error code from
1919 hdb_value2entry
1920
1921 * kdc/Makefile.am: always include kerberos4.c and 524.c in
1922 kdc_SOURCES to support 524
1923
1924 * kdc/524.c: always compile in support for 524
1925
1926 * kdc/kdc_locl.h: move out krb/524 protos from under #ifdef KRB4
1927
1928 * kdc/config.c: always compile in support for 524
1929
1930 * kdc/connect.c: always compile in support for 524
1931
1932 * kdc/kerberos4.c: export encode_v4_ticket() and get_des_key()
1933 even when we build without kerberos 4, 524 needs them
1934
1935 * lib/krb5/convert_creds.c, lib/krb5/krb5-v4compat.h: Split out
1936 Kerberos 4 help functions/structures so other parts of the source
1937 tree can use it (like the KDC)
1938
Note: See TracBrowser for help on using the repository browser.