]>
git.ipfire.org Git - thirdparty/krb5.git/log
Andrew Boardman [Sat, 26 Aug 2006 10:27:51 +0000 (10:27 +0000)]
Misc commentary
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18547
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Sat, 26 Aug 2006 10:04:36 +0000 (10:04 +0000)]
Note current state
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18546
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Sat, 26 Aug 2006 10:03:41 +0000 (10:03 +0000)]
Mostly complete. Needs memory management work
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18545
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 22:31:35 +0000 (22:31 +0000)]
More blather about mixed-fallback cases after today's meeting with Ken
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18544
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 22:31:04 +0000 (22:31 +0000)]
More to do after afternoon's meeting and testing
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18543
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 22:30:28 +0000 (22:30 +0000)]
Debugging changes
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18542
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 20:07:44 +0000 (20:07 +0000)]
Clarify remote TGT cache question, since we do want to use it in
domain_realm case.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18541
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 20:05:32 +0000 (20:05 +0000)]
Update for current state and assumptions; added notes from meeting
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18540
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 20:04:56 +0000 (20:04 +0000)]
Moved meeting notes to implementation notes.
Major updates to reflect completed work and current state.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18539
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 06:47:43 +0000 (06:47 +0000)]
Reflect current state
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18538
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 06:47:11 +0000 (06:47 +0000)]
Moved debugging code to gc_frm_kdc.c
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18537
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 06:46:33 +0000 (06:46 +0000)]
Conditionalize acceptance of referral tickets on a request for same being made
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18536
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 06:45:52 +0000 (06:45 +0000)]
Rearrange and simplify logic to match decisions at 21 August meeting
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18535
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 25 Aug 2006 06:44:10 +0000 (06:44 +0000)]
Conditionalize debugging stuff
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18534
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 23 Aug 2006 23:36:45 +0000 (23:36 +0000)]
Add notes from meeting
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18521
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Sat, 19 Aug 2006 01:06:46 +0000 (01:06 +0000)]
Modified ticket consistency check to allow for a referral ticket
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18474
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Sat, 19 Aug 2006 01:05:54 +0000 (01:05 +0000)]
Added core referral code that does more-or-less the right thing. Needs padata handling
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18473
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Sat, 19 Aug 2006 01:05:11 +0000 (01:05 +0000)]
Another useful cache-hacking alias
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18472
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:46:19 +0000 (06:46 +0000)]
Checkpointing state
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18471
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:43:46 +0000 (06:43 +0000)]
Checkpoint state and add priorities
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18470
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:43:20 +0000 (06:43 +0000)]
Disable credential checks that otherwise-valid referrals break.
XXX: These need to be referral-aware, not just disabled.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18469
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:37:49 +0000 (06:37 +0000)]
Added max field length for non-null-terminated microsoft credentials
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18468
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:36:47 +0000 (06:36 +0000)]
Put svn in path
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18467
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:36:22 +0000 (06:36 +0000)]
Formatting fixups and debugging removal
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18466
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 18 Aug 2006 06:34:41 +0000 (06:34 +0000)]
Make debugging traversal work properly
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18465
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 16 Aug 2006 21:47:25 +0000 (21:47 +0000)]
Remove old debugging stuff
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18463
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 16 Aug 2006 21:45:34 +0000 (21:45 +0000)]
Note do_traversal work needed
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18462
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 16 Aug 2006 21:44:27 +0000 (21:44 +0000)]
Tweak debugging code a bit. (Tree traversal still busted.)
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18461
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 16 Aug 2006 21:43:38 +0000 (21:43 +0000)]
Clean up string handling
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18460
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 16 Aug 2006 21:43:05 +0000 (21:43 +0000)]
Remove duplicate entry, add argument to krb5_clean_realm for string length
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18459
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 15 Aug 2006 22:52:45 +0000 (22:52 +0000)]
Added diagnostics
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18447
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 15 Aug 2006 22:51:55 +0000 (22:51 +0000)]
Split off hostname munging code into krb5_clean_hostname. Currently
broken work-in-progress.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18446
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 15 Aug 2006 22:50:50 +0000 (22:50 +0000)]
Add declarations for krb5_get_fallback_host_realm (wasn't this already
checked in? wtf?) and krb5_clean_hostname.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18445
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 15 Aug 2006 22:49:48 +0000 (22:49 +0000)]
Notes on hostname munging
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18443
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 15 Aug 2006 22:49:21 +0000 (22:49 +0000)]
Add ccache reset hack
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18442
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 22:14:17 +0000 (22:14 +0000)]
Lots of detailed notes on krb5_get_cred_from_kdc_opt functionality added
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18437
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 22:13:34 +0000 (22:13 +0000)]
Most of the framework for basic server referrals.
(Currently broken, though.)
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18436
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 22:12:18 +0000 (22:12 +0000)]
Immediate task tracking
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18435
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 05:24:16 +0000 (05:24 +0000)]
Portablized ptest paths
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18434
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 05:20:19 +0000 (05:20 +0000)]
Added fallback case for realm determination on referral failure
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18433
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 05:19:07 +0000 (05:19 +0000)]
Split fallback realm code into krb5_get_fallback_host_realm
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18432
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Fri, 11 Aug 2006 05:18:12 +0000 (05:18 +0000)]
Switched back to using compatible KDC option flag for referrals.
Added declaration of krb5_get_fallback_host_realm.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18431
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 9 Aug 2006 22:47:53 +0000 (22:47 +0000)]
Work (adding server referrals) in progress
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18430
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 9 Aug 2006 22:47:10 +0000 (22:47 +0000)]
Note namespace issues
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18429
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Wed, 9 Aug 2006 22:43:38 +0000 (22:43 +0000)]
Added various flag and type bits from referrals draft
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18428
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 8 Aug 2006 23:01:00 +0000 (23:01 +0000)]
Misc useful build definitions
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18425
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 8 Aug 2006 22:41:52 +0000 (22:41 +0000)]
Remove deprecated text
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18424
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Tue, 8 Aug 2006 22:41:30 +0000 (22:41 +0000)]
Definitions for referral realm and max number of referral hops
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18423
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:54:51 +0000 (21:54 +0000)]
Merge of old development work for referrals. Also includes a
great deal of debugging code for eventual removal.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18416
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:50:29 +0000 (21:50 +0000)]
Commentary on what's here
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18415
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:50:14 +0000 (21:50 +0000)]
For building ptest and friends
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18414
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:49:25 +0000 (21:49 +0000)]
Script to integrate uninstalled build artifacts into environment
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18413
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:47:50 +0000 (21:47 +0000)]
Hacked version of kvno for fetching service tickets.
For testing purposes only.
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18412
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 21:46:10 +0000 (21:46 +0000)]
Misc updates from non-versioned working copies
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18411
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 20:20:33 +0000 (20:20 +0000)]
Implementation notes for realm referrals
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18410
dc483132 -0cff-0310-8789-
dd5450dbe970
Andrew Boardman [Mon, 7 Aug 2006 19:09:14 +0000 (19:09 +0000)]
Trunk copy with an experimental implementation of realm referrals
git-svn-id: svn://anonsvn.mit.edu/krb5/users/amb/referrals@18407
dc483132 -0cff-0310-8789-
dd5450dbe970
Tom Yu [Wed, 2 Aug 2006 20:51:50 +0000 (20:51 +0000)]
Apply patch from Michael Calmer to fix some uninitialized variables
* src/appl/gssftp/ftpd/ftpd.c (auth_data): Initialize stat_maj,
accept_maj, acquire_maj.
* src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send):
Intialize rdata.
* src/kdc/do_tgs_req.c (process_tgs_req): Initialize magic and
tr_contents.magic.
* src/lib/krb5/asn.1/krb5_decode.c (decode_krb5_safe_with_body):
Initialize tmpbody.magic.
* src/plugins/kdb/db2/libdb2/hash/dbm.c (kdb2_fetch)
(kdb2_firstkey, kdb2_nextkey): Initialize dsize.
ticket: 3904
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18404
dc483132 -0cff-0310-8789-
dd5450dbe970
Tom Yu [Tue, 1 Aug 2006 21:09:43 +0000 (21:09 +0000)]
* src/lib/gssapi/mechglue/g_initialize.c (gss_release_oid): Call
gssint_initialize_library to ensure mutex is initialized.
ticket: 4088
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18397
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 25 Jul 2006 20:29:43 +0000 (20:29 +0000)]
Changed GSSAPI opaque types (gss_name_t, gss_cred_id_t, gss_ctx_id_t) from
void* to pointers to opaque structs. This change removed some casts and
introduced or changed a bunch of other casts to suppress warnings.
krb5_gss_accept_sec_context(): Fixed a bug found by the above changes
where krb5_gss_release_cred() was being called with the wrong argument 2
(gss_cred_id_t instead of gss_cred_id_t*).
ticket: 4057
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18396
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 25 Jul 2006 18:51:54 +0000 (18:51 +0000)]
gss_canonicalize_name(): Added parens to remove
warning from if statement.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18395
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 25 Jul 2006 17:58:25 +0000 (17:58 +0000)]
Removed unused Metrowerks compiler support.
(Since there's no universal binary support for CodeWarrior there's
no point in having this here.)
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18394
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 25 Jul 2006 17:56:18 +0000 (17:56 +0000)]
Switched from "#pragma options align" to "#pragma pack".
Removed Metrowerks "#pragma import" since other framework
headers don't specify it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18392
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 25 Jul 2006 13:59:30 +0000 (13:59 +0000)]
Windows - fix kfwlogon for Windows 2000
Windows 2000 does not support the ability to generate SIDs
from symbolic names.
Add more debugging and error condition checks.
ticket: new
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18387
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 24 Jul 2006 20:39:31 +0000 (20:39 +0000)]
commit again without using patch to apply the diff
ticket: 4048
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18382
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 24 Jul 2006 20:37:36 +0000 (20:37 +0000)]
undo previous commit due to EOL issues
ticket: 4048
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18381
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 24 Jul 2006 19:27:04 +0000 (19:27 +0000)]
Switched from "#pragma options align" to "#pragma pack".
Removed Metrowerks "#pragma import" since other framework
headers don't specify it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18380
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 24 Jul 2006 06:58:23 +0000 (06:58 +0000)]
Windows Integrated Login Fixes for KFW 3.1
KFW integrated login was failing when the user is
not a power user or administrator. This was occurring
because the temporary file ccache was being created in
a directory the user could not read. While fixing this
it was noticed that the ACLs on the ccache were too broad.
Instead of applying a fix to the FILE: krb5_ccache
implementation it was decided that simply applying a new
set of ACLs (SYSTEM and "user" with no inheritance) to
the file immediately after the krb5_cc_initialize() call
would close the broadest security issues.
The file is initially created in the SYSTEM %TEMP% directory
with "SYSTEM" ACL only. Then it is moved to the user's %TEMP%
directory with "SYSTEM" and "user" ACLs. Finally, after
copying the credentials to the API: ccache, the file is deleted.
ticket: new
tags: pullup
component: windows
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18379
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Jul 2006 19:03:02 +0000 (19:03 +0000)]
* aclocal.m4 (KRB5_LIB_AUX): Disallow --enable-profiled and --disable-shared
options as well. Don't generate help messages for these options.
ticket: 4036
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18352
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Jul 2006 18:29:25 +0000 (18:29 +0000)]
* ldap_service_stash.c (krb5_ldap_readpassword): Don't require strerror_r, fall
back to strerror if needed.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18351
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Jul 2006 17:49:07 +0000 (17:49 +0000)]
respect LDFLAGS in NetBSD build
An LDFLAGS setting at configure time is ignored in parts of the build.
* shlib.conf (*-*-netbsd*): Use $(CC) for LDCOMBINE, and include $(LDFLAGS).
ticket: new
target: 1.5.1
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18350
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 21 Jul 2006 17:41:43 +0000 (17:41 +0000)]
reject configure option for static libraries
We shouldn't accept --enable-static at configure time when we know
it's not going to work at build time.
* aclocal.m4 (KRB5_LIB_AUX): Error out if --enable-static.
ticket: new
target_version: 1.5.1
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18348
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 21 Jul 2006 13:48:37 +0000 (13:48 +0000)]
Windows - kfw 3.1 msi deployment guide updates
documentation updates for the kfw 3.1 msi deployment guide.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18346
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Fri, 21 Jul 2006 03:12:00 +0000 (03:12 +0000)]
Windows NetIDMgr documentation
NetIDMgr 1.1 documentation for KFW 3.1 release
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18345
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Wed, 19 Jul 2006 22:36:00 +0000 (22:36 +0000)]
Windows NetIDMgr post-1.5 branch commits
The following patch updates the NetIDMgr:
* allow plug-ins to be marked "do not unload" in order
to support DLLs that create threads that are not
properly cleaned up as part of library unload.
* allow plug-ins to be marked "disabled"
* Additional changes to deal with Microsoft's efforts
to deprecate all of the str C runtime functions.
* Improvements to Manifest processing in the build
system
* Addition of Tooltip support to the Toolbar. Dragging
the mouse over toolbar buttons displays textual
descriptions.
* Correct the behavior of the New Credentials Dialog
to disable the "Ok" button after it has been pressed.
* Add support to allow plugin configuration data to
be distributed as part of transforms to the MSI
installer.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18344
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 19 Jul 2006 18:14:01 +0000 (18:14 +0000)]
acquire_cred(), kg_caller_provided_ccache_name(): On further reflection
and testing the correct thing appears to be to have gss_krb5_ccache_name()
stop gss_acquire_cred() from searching for the desired name in the cache
collection. If the caller sets the ccache name then gss_acquire_cred will only
look in that ccache. Added kg_caller_provided_ccache_name() to tell whether
or not the caller has actually set the ccache. This should fix the problem for
both Mac OS X and Windows.
ticket: 4024
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18343
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Wed, 19 Jul 2006 16:14:57 +0000 (16:14 +0000)]
need to look harder for tclConfig.sh
Our current scheme doesn't find tclConfig.sh as installed by NetBSD's
pkg system, even if it finds tclsh and gets the library pathname from
it. The problem is that tclConfig.sh is one directory up.
* aclocal.m4 (AC_KRB5_TCL_FIND_CONFIG): Check $tcl_dir/.. for tclConfig.sh.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18342
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Wed, 19 Jul 2006 02:28:24 +0000 (02:28 +0000)]
acquire_cred(): Realized that my previous patch now basically favors the
ccache over the desired name. Added a KLL function to search for the
desired name, favoring the default ccache.
ticket: 4024
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18341
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 18 Jul 2006 20:11:39 +0000 (20:11 +0000)]
acquire_cred(): Fixed KLL support to try the default ccache first if
it is set.
ticket: 4024
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18340
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 18 Jul 2006 20:03:10 +0000 (20:03 +0000)]
kadmin_startup(): Turn off KLL automatic prompting support in kadmin
ticket: 4023
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18339
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 18 Jul 2006 19:51:37 +0000 (19:51 +0000)]
Project cleanup:
Removed kipc APIs and deleted files.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18338
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 18 Jul 2006 19:43:52 +0000 (19:43 +0000)]
authgss_refresh(): Use GSS_C_NO_CHANNEL_BINDINGS macro
instead of NULL with gss_init_sec_context to increase readbility.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18337
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 18 Jul 2006 19:29:32 +0000 (19:29 +0000)]
Windows: NSIS updates for 2.18 release
This commit corrects errors in the NSIS installer scripts
that prevent installer builds using NSIS 2.18.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18336
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Tue, 18 Jul 2006 19:24:23 +0000 (19:24 +0000)]
Windows: Wix 2.0.4221 updates
This commit corrects errors in the Wix installer script
files that violate the Wix schema but which were not
caught by earlier releases of the Wix 2.0 installer.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18335
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Tue, 18 Jul 2006 00:40:19 +0000 (00:40 +0000)]
Merge remaining changes from LDAP integration branch
svn+ssh://svn.mit.edu/krb5/branches/ldap-integ@18333.
* plugins/kdb/ldap: New directory.
* aclocal.m4 (WITH_LDAP): New macro.
(CONFIG_RULES): Invoke it.
* configure.in: Test ldap option, maybe configure and generate makefiles for
new directories, and set and substitute ldap_plugin_dir.
* Makefile.in (SUBDIRS): Add @ldap_plugin_dir@.
* kdc/krb5kdc.M, kadmin/server/kadmind.M, kadmin/cli/kadmin.M,
config-files/krb5.conf.M: Document LDAP changes (new options, config file
entries, etc).
* lib/kdb/kdb5.c (kdb_load_library): Put more info in error message.
* lib/kadm5/admin.h (KADM5_CPW_FUNCTION, KADM5_RANDKEY_USED,
KADM5_CONFIG_PASSWD_SERVER): New macros, disabled for now.
(struct _kadm5_config_params): New field kpasswd_server, commented out for now.
* lib/krb5/error_tables/kdb5_err.et: Add error codes KRB5_KDB_ACCESS_ERROR,
KRB5_KDB_INTERNAL_ERROR, KRB5_KDB_CONSTRAINT_VIOLATION.
ticket: 2935
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18334
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 17 Jul 2006 19:25:02 +0000 (19:25 +0000)]
make depend
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18332
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Mon, 17 Jul 2006 17:55:54 +0000 (17:55 +0000)]
(KRB5_AC_FIND_DLOPEN): Use AC_SEARCH_LIBS
ticket: 3971
target_version: 1.5.1
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18331
dc483132 -0cff-0310-8789-
dd5450dbe970
Tom Yu [Mon, 17 Jul 2006 16:39:35 +0000 (16:39 +0000)]
reverse test for copy_oid_set in lib/gssapi/krb5/indicate_mechs.c
* src/lib/gssapi/krb5/indicate_mechs.c: Reverse sense of test,
since gssint_copy_oid_set() returns 0 on success.
ticket: new
target_version: 1.5.1
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18330
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 17 Jul 2006 15:44:24 +0000 (15:44 +0000)]
stdcc.c: fix v2 version of krb5_stdcc_resolve()
cc_open() returning CC_NOEXIST should not be
considered fatal.
ticket: 3961
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18329
dc483132 -0cff-0310-8789-
dd5450dbe970
Russ Allbery [Wed, 12 Jul 2006 22:17:34 +0000 (22:17 +0000)]
Document add_entry in ktutil man page
Apply patch from Mike Dopheide to document ktutil add_entry in the man
page and fix some other spelling errors in the ktutil man page.
Ticket: new
Version_Reported: 1.3.6
Target_Version: 1.5.2
Tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18328
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Tue, 11 Jul 2006 17:28:07 +0000 (17:28 +0000)]
Cleaned up CCAPI v3 code to remove memory leaks. Fixed crashes in
cc_ccache <-> krb5_ccache translation code. Still testing edge cases but
the code seems to work now with the KfM CCAPI implementation.
ticket: 3936
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18327
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 10 Jul 2006 18:52:37 +0000 (18:52 +0000)]
Fixed up warnings and whitespace issues which were confusing the
Xcode auto-indenter.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18326
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 10 Jul 2006 18:51:23 +0000 (18:51 +0000)]
Fixed up warnings and converted to Unix line endings
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18325
dc483132 -0cff-0310-8789-
dd5450dbe970
Alexandra Ellwood [Mon, 10 Jul 2006 18:34:19 +0000 (18:34 +0000)]
Removed user preferences which were accidentally added
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18324
dc483132 -0cff-0310-8789-
dd5450dbe970
Jeffrey Altman [Mon, 3 Jul 2006 05:23:16 +0000 (05:23 +0000)]
GetModuleHandle needs extension on Win64
cc_mslsa.c: some versions of Win64 require the extension
to be specified as part of the parameter to GetModuleHandle()
in order to find a match.
ticket: new
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18320
dc483132 -0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 1 Jul 2006 01:50:37 +0000 (01:50 +0000)]
work around failure to load into nonexistent db
* src/tests/Makefile.in (kdb_check): Run kdb5_util create after
destroying to work around a behavior change from DAL integration.
ticket: new
target_version: 1.5
tags: pullup
version_reported: 1.5
component: test
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18313
dc483132 -0cff-0310-8789-
dd5450dbe970
Tom Yu [Sat, 1 Jul 2006 01:18:53 +0000 (01:18 +0000)]
make gss_unwrap match prototype
* src/lib/gssapi/mechglue/g_unseal.c (gss_unwrap): Make match
prototype.
ticket: new
tags: pullup
target_version: 1.5
version_reported: 1.5
component: krb5-libs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18310
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 30 Jun 2006 23:22:32 +0000 (23:22 +0000)]
test kdb5_util dump/load functionality in dejagnu
This new test just dumps and reloads the database. It doesn't examine
the resulting database, but kinit and other tests are run after it,
using the reloaded database.
* standalone.exp (dump_and_reload): New proc.
(doit): Invoke it.
ticket: new
target_version: 1.5
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18308
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 30 Jun 2006 21:39:36 +0000 (21:39 +0000)]
copyright dates
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18297
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 30 Jun 2006 21:07:25 +0000 (21:07 +0000)]
* dump.c (load_db): Call krb5_db_promote instead of krb5_db_fini
ticket: 3964
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18296
dc483132 -0cff-0310-8789-
dd5450dbe970
Ken Raeburn [Fri, 30 Jun 2006 21:05:21 +0000 (21:05 +0000)]
* kdb_db2.c: Don't include kdb_compat.h.
(OLD_COMPAT_VERSION_1): Don't define.
(krb5_db2_db_create): For temporary db, use different names for all files.
(krb5_db2_open, krb5_db2_create, krb5_db2_destroy): Fix check for "temporary"
in supplied db_args.
(krb5_db2_db_rename): New function, restored from pre-DAL code and hacked up
a lot to mostly work.
(krb5_db2_promote_db): New function.
* db2_exp.c: Add promote_db entry.
ticket: 3964
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18295
dc483132 -0cff-0310-8789-
dd5450dbe970