Sam Hartman [Sun, 29 Jan 2006 21:14:03 +0000 (21:14 +0000)]
* Fix prototype of db2 library initializer to work with changes introduced in error handling patch.
* Remove thread safety flag from the LDAP plugin vftable
* Work around LDAP_X_ERROR not being in all version of OpenLDAP
* Work around older OpenLDAP using ldap_opt_error_number not ldap_opt_result_code
* Source is in SRCTOP not BUILDTOP; kadmin/server got this wrong.
* Document more blocking bugs
Ken Raeburn [Wed, 25 Jan 2006 10:48:29 +0000 (10:48 +0000)]
Delete the rest of the support in the kdb library for doing locking on
behalf of the plugin library. Convert the remaining locking code (for
protecting the list of plugins loaded) to use the k5_ macros.
Ken Raeburn [Wed, 25 Jan 2006 08:05:24 +0000 (08:05 +0000)]
Remove the thread-safety flag from the kdb plugin interface. Instead,
have the kdb code assume the plugin is thread safe, and implement some
quick and dirty wrapper functions in the db2 plugin to make it use a
local mutex.
There's still some mutex code in the kdb library that should be
reviewed, and simplified or removed.
Ken Raeburn [Wed, 25 Jan 2006 06:35:19 +0000 (06:35 +0000)]
Check the export lists against the newly built shared library to make sure all
the symbols we want to export are actually defined. GNU/Linux only, for the
moment, but it ought to work on any system using the GNU version of nm, and not
too hard to modify for other ways of extracting the exported symbols of a
library.
* util/export-check.pl: New file.
* config/shlib.conf (*-*-linux*): Run export-check.pl after building a shared
library.
Ken Raeburn [Wed, 25 Jan 2006 06:21:47 +0000 (06:21 +0000)]
* threads.c (krb5int_mutex_alloc, krb5int_mutex_free, krb5int_mutex_lock,
krb5int_mutex_unlock): New functions.
(krb5int_mutex_lock_update_stats, krb5int_mutex_unlock_update_stats,
krb5int_mutex_report_stats): Always define, even if not doing anything.
* libkrb5support.exports: Export the new functions.
Ken Raeburn [Wed, 25 Jan 2006 06:17:20 +0000 (06:17 +0000)]
* lib.in (binutils.versions): Put hidden symbol list after exported list,
because libkrb4 has a symbol starting with "__" in its export list.
(osf1.exports): Rename file in a separate command.
Ken Raeburn [Wed, 18 Jan 2006 02:00:32 +0000 (02:00 +0000)]
Include the support library when linking various test programs, because on
Solaris, with the vendor compiler, we'll always get references to
krb5int_pthread_loaded due to unused inline functions not being eliminated.
(Also inclued it in dependencies, and use CC_LINK when it wasn't used before.)
Tom Yu [Fri, 30 Dec 2005 22:33:24 +0000 (22:33 +0000)]
* gc_frm_kdc.c: Rewrite to modularize significantly. (~400-line
functions do not deserve to live.) The outer loop no longer
explicitly attempts the direct path to the target; that attempt
has been folded into the inner loop. Remove some redundant
credential lookups present in the old code. Treat unexpected
realm referrals as soft errors, in case some intermediate KDC
disagrees with client regarding a transit path.
Tom Yu [Wed, 28 Dec 2005 23:02:32 +0000 (23:02 +0000)]
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Cause free_tgt and
free_otgt to track the states of tgt and otgt correctly, to avoid
a double-free condition which previously happened when this
function returned to krb5_get_credentials(), which proceeded to
free a previously freed TGT in the returned TGT list.
Jeffrey Altman [Thu, 8 Dec 2005 06:58:15 +0000 (06:58 +0000)]
Network Identity Manager - Fix module loading when en_US locale cannot be loaded
The identity manager is designed for internationalization. However, it only ships with
modules for the en_US locale. Designing modules for other locales was beyond our the
reach of available resources. This patch will force the use of en_US when modules
matching the installed user and system locales cannot be found.
ticket: new
status: resolved
target_version: 1.4.4
tags: pullup
Jeffrey Altman [Fri, 2 Dec 2005 10:34:34 +0000 (10:34 +0000)]
Network Identity Manager updates for KFW 3.0 Beta 3
Fix the handling of case sensitive names being stored in the
registry. Only apply case sensitive encoding logic to the
keys below the NetIdMgr key.
Fix the importing of credentials from MSLSA:
Apply an ugly hack to krb5configcc.c that forces _WIN32_WINNT
to 0x0501 for the one file so that the executable can be built
as APPVER=5.0 and yet still gain access to balloon tips on XP
and above.
ticket: new
component: windows
status: open
target_version: 1.4.4
Jeffrey Altman [Fri, 2 Dec 2005 10:29:29 +0000 (10:29 +0000)]
Wix MSI installer for KFW 3.0 Beta 3
Add operating system version check to ensure it is not
installed on Windows 95, 98, ME or NT 4.0
Break out the license text into its own file
Restructure the installer to allow either NetIdMgr or Leash
to be selected (by transform only) as the credentials manager.
The default is to use NetIdMgr.
ticket: new
component: windows
status: resolved
target_version: 1.4.4
tags: pullup
Jeffrey Altman [Wed, 30 Nov 2005 16:06:00 +0000 (16:06 +0000)]
Remove the case sensitive comparisions of registry entry
and schema strings. Microsoft uses HKLM\"SOFTWARE" and
HKCU\"Software". This means the encoding schema that was
selected does not work and the conflict in case prevents
plugins from being loaded.
Better to enable plugins to work than to allow two realms
that differ only by case on the same platform during the
beta.
Jeffrey Altman [Tue, 29 Nov 2005 22:22:43 +0000 (22:22 +0000)]
KFW Logon Network Provider
The Logon Network Provider works like the OpenAFS Integrated
Logon. It uses the username entered by the user and the
default realm obtained from krb5.ini and the user entered
password. If possible, tickets are obtained and imported
into the user's CCAPI credential cache.
ticket: new
component: windows
target_version: 1.4.4
status: resolved
tags: pullup
Ken Raeburn [Tue, 29 Nov 2005 07:38:45 +0000 (07:38 +0000)]
Tru64 compilation fails after k5-int.h/krb5.h changes
Due to some silliness in db-config.h and the Tru64 system header files, an
accidental change in the order of inclusion of certain headers caused the build
to fail.
With this patch, "make all" succeeds, but "make check" fails partway through;
I'm still investigating, and don't know at this point if there are additional
compilation problems.
* policy_db.h: Include db.h after gssrpc/types.h, to fix compilation on Tru64.
Ken Raeburn [Tue, 29 Nov 2005 04:31:03 +0000 (04:31 +0000)]
* shlib.conf (*-*-solaris*): Include $(CFLAGS) in LDCOMBINE. Don't use
compiler command-line options for initializers for Solaris 7 and earlier native
compilers.
Ken Raeburn [Fri, 18 Nov 2005 01:22:06 +0000 (01:22 +0000)]
Fix additional cases where krb5.h is included before k5-int.h. In most cases,
it suffices to remove the inclusion of k5-int.h, sometimes including errno.h or
another header. In a couple cases, include order has been changed, or k5-int.h
has been included instead of krb5.h.
Jeffrey Altman [Tue, 15 Nov 2005 00:31:41 +0000 (00:31 +0000)]
This commit ensures that all files in the library include
k5-int.h before krb5.h is included either directly or
indirectly. This is to allow Kerberos to use pre-processor
symbols to choose configurations of C run time library headers
without affecting third party applications.
Jeffrey Altman [Tue, 15 Nov 2005 00:16:17 +0000 (00:16 +0000)]
* Correct function prototypes that should have been using
krb5_timestamp in order to prevent type conflicts if
krb5_timestamp ever becomes a 64-bit value
* Force the use of 32-bit time_t with Microsoft's VS 2005
compiler on 32-bit platforms
Jeffrey Altman [Tue, 1 Nov 2005 04:23:52 +0000 (04:23 +0000)]
For KFW 3.0 Beta 1
- supports Network Identity Manager framework
- moves leash32.exe to a new disabled component
- auto-generates a new product id with each build
Jeffrey Altman [Mon, 31 Oct 2005 19:23:19 +0000 (19:23 +0000)]
* acquire_cred.c (acquire_init_cred):
If a specific principal has been requested, attempt to acquire
tickets and set the ccache name in the context to the ccache
containing the tickets if obtained. (KFM/KFW)
* ccdefault.c:
(krb5int_cc_default) - add KFW support for multiple ccaches
When passed GSS_C_INITIATE and a non-NULL desired name, gss_acquire_cred
should search the available credentials caches rather than simply failing
if tickets for the desired client principal are not in the default ccache.
(this is the KfM-specific portion of the patch -- still need KfW portion)
Ken Raeburn [Thu, 27 Oct 2005 09:38:05 +0000 (09:38 +0000)]
If configure scripts set build_dynobj=yes, force build of shared objects and
not static objects; set it in the db2 directories. Fix up some bugs in Mac
support just checked in for building plugin modules.
projects / thirdparty / krb5.git / log
