aboutsummaryrefslogtreecommitdiff
path: root/.gitignore
AgeCommit message (Collapse)AuthorFilesLines
2016-09-02Add known file test case for btree byte swapTom Yu1-0/+3
Add a regression test for the preceding bugfix. This test uses btree database files with known contents and byte orders with short keys and overflow data items. (back ported from commit af3e7a4ac8b49ae8047ae2be7070d32feb69217d) ticket: 8485 version_fixed: 1.13.7
2016-07-06Add tests for krb5_sname_match()Greg Hudson1-0/+1
(back ported from commit 83dae972736d823216c20dd559e30c7d41361289) ticket: 8415 version_fixed: 1.13.6
2015-02-04Add test program for gss_process_context_tokenGreg Hudson1-0/+1
Add a new test program t_pcontok to exercise gss_process_context_token, and run it from t_gssapi.py. (cherry picked from commit bfb472ff67c00da2f2b0d0ada1af57a2c4493a11) ticket: 8055 version_fixed: 1.13.1 status: resolved
2014-08-21Fix HP-UX build supportMichael Osipov1-0/+1
Rename hpux10.exports to hpux.exports. In the HP-UX section of shlib.conf, remove '+s' because it just specifies a default, add a MAKE_SHLIB_COMMAND, and set SHLIBEXT based on the host CPU. [ghudson@mit.edu: squashed commits, condensed commit message] (cherry picked from commit fdd1c69471bbe5fec0da9f9bcaa9d0a7739db77f) ticket: 7990 version_fixed: 1.13 status: resolved
2014-06-26Add tests for invalid GSSAPI per-message tokensGreg Hudson1-0/+1
ticket: 7949
2014-05-21Add tests for krb5int_c_combine_keysGreg Hudson1-0/+1
krb5int_c_combine_keys is used only by SAM-2 preauth with neither the send-encrypted-sad nor use-sad-as-key flags, so it isn't covered by any automated function tests. Add some unit tests to make sure that it works and returns the expected results for two randomly generated test vectors. ticket: 7914 target_version: 1.12.2 tags: pullup
2014-05-17Add ccache marshalling testsGreg Hudson1-0/+2
Add a new ccache test program t_marshal.c which verifies the new marshalling functions and also the FILE ccache type against the expected representations of the ccache header, default principal, and credentials.
2014-05-07Improve krb5_rd_req decryption failure errorsGreg Hudson1-0/+1
When krb5_rd_req cannot decrypt a ticket, try to produce the most helpful diagnostic we can, and return an error code which corresponds to the most applicable Kerberos protocol error. Add a trace log containing the error message for ticket decryption failures, in case the application server does not log it. Add new tests to cover krb5_rd_req error messages and adjust existing tests to match the new messages. Also adjust svc_auth_gssapi.c to look for KRB5KRB_AP_ERR_NOT_US instead of KRB5KRB_AP_WRONG_PRINC. ticket: 7232
2014-03-18Add tests for GSSAPI sequence number processingGreg Hudson1-0/+1
ticket: 7872
2014-03-08Fix clean-unix rule for gssapi_krb5.hTomas Kuthan1-1/+0
Don't delete gssapi_krb5.h now that it is not generated. [ghudson@mit.edu: also remove from generate-files-mac rule and from .gitignore]
2014-01-30Add test case for ulog serial number wrappingGreg Hudson1-0/+2
Add a unit test program named t_ulog. Make it map a ulog file, set up header state where kdb_last_sno is the last serial number, and then add an empty update. Check that the result is a ulog header with one update at serial number 1. ticket: 7839
2014-01-28Remove krb5-send-prTom Yu1-3/+0
Remove the GNATS-based krb5-send-pr script and replace it with a script that instructs users to send email. ticket: 7840 (new)
2014-01-22Add test coverage for gss_pseudo_randomGreg Hudson1-0/+1
Add a test program which compares gss_pseudo_random outputs against expected values for each enctype.
2013-12-18Add a test program for krb5_copy_contextGreg Hudson1-0/+1
This test program isn't completely proof against the kind of mistakes we've made with krb5_copy_context in the past, but it at least exercises krb5_copy_context and can detect some kinds of bugs. ticket: 7807
2013-12-12Fix up tests directory ignores, deps, cleanupGreg Hudson1-0/+3
A few test programs didn't make it into .gitignore, OBJS, or EXTRADEPSRCS.
2013-12-12Add tests for krb5_sname_to_principalGreg Hudson1-0/+1
2013-06-06Add t_init_creds to .gitignoreGreg Hudson1-0/+1
2013-03-09Add tests for localauth interfaceGreg Hudson1-0/+1
Create a test module, program, and script to exercise the krb5_aname_to_localname and krb5_k5userok functions as well as the localauth pluggable interface. ticket: 7583
2013-03-09Add localauth pluggable interfaceGreg Hudson1-2/+0
Add a new pluggable interface for local authorization, and replace the existing krb5_aname_to_localname and krb5_kuserok implementations with implementations based on the pluggable interface. ticket: 7583 (new)
2013-02-27Add missing .gitignore entries and clean rulesGreg Hudson1-0/+11
ticket: 7585
2013-01-04Install pkg-config data filesGreg Hudson1-0/+1
Add seven data files for pkg-config, corresponding to the five modules supported by krb5-config. For krb5 and krb5-gssapi, we also provide mit- versions for callers desiring to distinguish between our implementation and Heimdal's. Based on a patch from Stef Walter <stefw@gnome.org>. ticket: 7529 (new)
2013-01-04Move krb5-config to new src/build-tools directoryGreg Hudson1-1/+2
In preparation for adding a bunch of pkg-config data files, move krb5-config into a new source tree subdirectory containing tools we provide as outputs to other build systems.
2013-01-01Fix gss_str_to_oid and gss_oid_to_str edge casesGreg Hudson1-0/+1
Neither function correctly handled OIDs whose second arc exceeds 47 (theoretically possible if the first arc is 2). gss_str_to_oid had additional problems: it used scanf, it didn't consistently protect against read overrun if the input buffer wasn't null-terminated, and it could get confused by + or - characters in the first two arcs. Fix gss_oid_to_str and rewrite gss_str_to_oid. Also add a test program. ticket: 7524 (new)
2012-11-15Add automated tests for LDAP KDB moduleGreg Hudson1-0/+1
Add new tests kdbtest.c and t_kdb.py. Together these exercise most of the code in the LDAP back end. kdbtest is also run against the DB2 module, which is mostly redundant with other tests, but does exercise the lockout logic a little more thoroughly than t_lockout.py can. To test the LDAP back end, we look for slapd and ldapadd binaries in the path. The system slapd is sometimes constrained by AppArmor or the like, which we can typically work around by making a copy of the binary. slapd detaches before listening on its server socket (this got better in 2.4.27 but still isn't perfect), so we unfortunately have to use a one-second sleep in the slapd setup.
2012-11-14Make glue for building PDFsBen Kaduk1-0/+1
sphinx-build's latex output engine creates a subdirectory with various latex files, and a Makefile. The generated Makefile assumes gmake, which we do not. The logic needed in this makefile is rather simple, so we just include it in src/doc/Makefile.in, even if we do need a rather complicated shell expression to work in the subdirectory. ticket: 7433 tags: pullup
2012-11-14Generate and use version.py for SphinxTom Yu1-0/+2
Sphinx's idea of the version number appears in the man pages and compiled PDF documents, and shows up as metadata in the generated HTML sources. Extract the version information from the master source (patchlevel.h) into a form usable by Sphinx. ticket: 7433 tags: pullup
2012-10-15Catch up to RST move/renameBen Kaduk1-2/+2
Change the make rules for the directory structure. Update the RST sources which include other RST sources for the loss of the krb_ prefix. ticket: 7409
2012-09-17Add tests for gss_inquire_mechs_for_nameGreg Hudson1-0/+1
2012-09-13Tidy up GSSAPI test programsGreg Hudson1-0/+3
Factor out some common functions used by multiple test programs. Use a common argument format for importing names (p:princname, h:hostbasedname, or u:username) and adjust the Python tests to match it. Use more consistent conventions in test programs and fix some coding style issues. Normalize how the test programs are built.
2012-09-11Add tests for GSS cred export and importGreg Hudson1-0/+1
ticket: 7354
2012-09-11Add internal JSON encoding and decoding supportGreg Hudson1-0/+1
Add JSON support based loosely on Heimdal's heimbase code.
2012-09-11Add internal base64 encoding and decoding supportGreg Hudson1-0/+1
Add base64 support based on Heimdal's libroken base64 code.
2012-09-11Add responder feature for initial cred exchangesNathaniel McCallum1-0/+1
Add new APIs: * krb5_get_init_creds_opt_set_responder * krb5_responder_get_challenge * krb5_responder_list_questions * krb5_responder_set_answer If a caller sets a responder, it will be invoked after preauth modules have had a chance to review their incoming padata but before they produce outgoing padata. The responder will be presented a set of questions with optional challenges. The responder should then answer all questions it knows how to handle. Both the answers and the challenges are printable UTF-8 and may contain encoded, structured data specific to the question asked. Add two new callbacks and one optional method to the clpreauth interface. The new method (prep_questions) allows modules to ask questions by setting them in the responder context using one of the new callbacks (ask_responder_question). The other new callback (get_responder_answer) is used by the process method to read the answers to the questions asked. ticket: 7355 (new)
2012-07-09Add *~ to .gitignoreGreg Hudson1-0/+1
This covers src/include/autoconf.h.in~ which can be created by util/reconf.
2012-07-05Add ccinit and ccrefresh to .gitignoreGreg Hudson1-0/+2
2012-05-12Add a .gitgnore fileGreg Hudson1-0/+342