Tom Yu [Tue, 23 Feb 1999 03:28:28 +0000 (03:28 +0000)]
* kcmd.c (kcmd): Fix up to not call sname_to_principal until after
all the addresses in hp have been iterated through to avoid
smashing. [krb5-appl/516]
Theodore Tso [Fri, 19 Feb 1999 05:56:39 +0000 (05:56 +0000)]
test_parse.c (main): Add a call to profile_verify_node so we can test
the internal rep invariants.
prof_tree.c (profile_verify_node): Fix bug in profile_verify_node in
the group_level test. Also make profile_verify_node check the return
code when it is recursively testing the child nodes.
Tom Yu [Wed, 17 Feb 1999 22:26:33 +0000 (22:26 +0000)]
* klogind.M: Document things a little better, including new
options controlling hostname manipulation.
* krlogind.c: Make use of pty_make_sane_hostname() for purposes of
manipulating hostname to pass to login. Also unconditionally
syslog IP address and full hostname of remote host. Add command
line options to control such behavior.
* configure.in: Add arpa/nameser.h to CHECK_HEADERS.
Tom Yu [Wed, 17 Feb 1999 22:23:23 +0000 (22:23 +0000)]
* do_as_req.c (process_as_req): Fix to assign kvno to
reply.enc_part after encryption, since krb5_c_encrypt() now
explicitly initializes all fields of a krb5_enc_data.
Theodore Tso [Tue, 9 Feb 1999 03:16:04 +0000 (03:16 +0000)]
enc_des.c (fb64_session): Call des_init_random_number_generator
instead of des_set_random_generator_seed, since the compatibility
library no longer supports the latter call.
Theodore Tso [Tue, 9 Feb 1999 03:15:30 +0000 (03:15 +0000)]
winexclude.sed: Add .dll and .lib files to the list of functions which
shouldn't get included in the non-binary list of files to be added to
kerbsrc.zip for the Windows build. (If .dll or .lib files need to be
included in the zip file, they must be added to the WINBINARYFILES
macro in the top-level Makefile.in)
Theodore Tso [Tue, 9 Feb 1999 02:47:06 +0000 (02:47 +0000)]
(Forgot to check in ChangeLog earlier...)
prof_tree.c (profile_node_iterator): Added comments indicating that
profile_node_iterator, not being an exported interface, returns
pointers into the parse tree, and that values should be strdup()'ed
before returning them to a calling application.
prof_get.c (profile_iterator): Strdup the name and value strings
before returning them to the calling application.
Theodore Tso [Tue, 9 Feb 1999 02:44:22 +0000 (02:44 +0000)]
Makefile.in: Change Windows kerbsrc.zip target so this now does what
kerbsrc-nt.zip used to do. We no longer support building krb5 on
systems with 8.3 limitations. Also allow binary files in windows/lib
to be included into kerbsrc.zip file.
Theodore Tso [Tue, 2 Feb 1999 04:27:33 +0000 (04:27 +0000)]
ccdefname.c: Add a new function krb5_cc_set_default_name(), which is
used set the default ccname stored in the krb5_context. All of the
OS-specific functions to determine the default ccname is moved to this
function. The krb5_cc_default_name() function now just reads the
default ccname from the os_context, and will call
krb5_cc_set_default_name() to set the default ccname if necessary.
t_std_conf: Added functions to test krb5_cc_default_name and
krb5_cc_set_default_name(). Fixed the call to krb5_locate_kdc to
support the new variables added by the Cygnus initial ticket API
merge.
Theodore Tso [Wed, 27 Jan 1999 06:04:47 +0000 (06:04 +0000)]
Makefile.in, configure.in: Move the responsibility for generating
Makefile files for the following subdirectories to the top-level:
util, util/send-pr, util/dyn, lib, config-files, and gen-manpages.
Theodore Tso [Wed, 27 Jan 1999 05:22:07 +0000 (05:22 +0000)]
kdc_preauth.c (check_padata): If preauth fails because the preauth
data from the client was of an unknown type, and the principal does
not require preauth, then the preauth should be disregarded.
[krb5-kdc/652]
Theodore Tso [Wed, 27 Jan 1999 03:15:02 +0000 (03:15 +0000)]
wconfig.c: Updated to be more featureful. It will now save the
arguments passed to it and emit it as a makefile variable
WCONFIG_FLAGS. This allows the makefile to be able to preserve
wconfig options in the future when updating makefile. Also added the
--win32 and --win16 options to force win16 or win32 makefiles. An
option of the form --enable-foo will cause lines that begin ##FOO## to
be uncommented in the Makefile. The program has also been cleaned up
so it can be run (for debugging purposes) under Unix.
Theodore Tso [Mon, 25 Jan 1999 23:47:01 +0000 (23:47 +0000)]
* prof_tree.c (profile_node_iterator): Added comments indicating that
profile_node_iterator, not being an exported interface, returns
pointers into the parse tree, and that values should be strdup()'ed
before returning them to a calling application.
prof_get.c (profile_iterator): Strdup the name and value strings
before returning them to the calling application.
Theodore Tso [Fri, 22 Jan 1999 08:53:16 +0000 (08:53 +0000)]
trval.c: Added usage message, better options parsing, and support for
two new options: -hex, which will accept the asn.1 encoding in hex
(i.e., from a packet dump), and -krb5, which instructs the trval to
print out the krb5 interpretations of the data types. Trval will now
also try to interpret the field names of known krb5 structures if
-krb5 is specified.
Theodore Tso [Fri, 22 Jan 1999 05:55:04 +0000 (05:55 +0000)]
netbsd1.def (UTMP_FILE, WTMP_FILE): Update filenames to comply with
netbsd system. (Not actually used by our configuration system, but
I'll update the file.) Submitted by ghudson, [krb5-admin/522]
Theodore Tso [Fri, 22 Jan 1999 05:12:52 +0000 (05:12 +0000)]
krb5.tex (krb5_mk_safe): Fix reference to a non-existent flag.
(KRB5_AUTH_CONTEXT_DO_TIME_NOTIME should have been
KRB5_AUTH_CONTEXT_DO_TIME). [krb5-doc/528]
Theodore Tso [Tue, 5 Jan 1999 05:39:44 +0000 (05:39 +0000)]
sn2princ.c (krb5_sname_to_principal): Windows NT5's broken resolver
gratuitously tacks on a trailing period to the hostname (at least it
does in Beta2). Deal with this brain-damage.
Tom Yu [Tue, 5 Jan 1999 05:14:54 +0000 (05:14 +0000)]
* make_checksum.c (krb5_c_make_checksum): Note the fact that we're
punting on dealing with backwards compat with length-included
checksums.
* etypes.c: Add ENCTYPE_LOCAL_DES3_HMAC_SHA1 as a temporary
kludge. Note that this is added to the end of the array so other
code can lop off the last member of the array and the right thing
will happen so that it is possible to disable des3-marc-hmac-sha1
from the KDC command line, for instance.
* configure.in: Conditionalize ATHENA_DES3_KLUDGE on
--enable-athena.
Theodore Tso [Tue, 22 Dec 1998 04:09:37 +0000 (04:09 +0000)]
accept_sec_context.c (krb5_gss_accept_sec_context): Eliminate double
free of ap_req.data, and initialize ctypes to be NULL to avoid freeing
a pointer to stack garbage when doing a V1 mechanism
accept_sec_contxt.
init_sec_context.c: Re-arrange program logic to simplify and factor
out code; fix gss_init_sec_context() so that if the default OID is
passed to the init_sec_context, it will use the V1 mechanism if a
single DES enctype is used. Error handling was revamped to make it
simpler and cleaner, and to assure that we don't have memory leaks on
error returns.
Tom Yu [Wed, 16 Dec 1998 21:16:33 +0000 (21:16 +0000)]
* old_decrypt.c (krb5_old_decrypt): Initialize the ivec to the key
if we're using DES_CBC_CRC, for backwards compatibility. We
weren't noticing this before because it only trashes the first
block, which is the confounder, which we weren't actually
verifying because checksum was unconditionally succeeding prior to
the other patch.
projects / thirdparty / krb5.git / log
