aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-02-01tag krb5-1.7-alpha1krb5-1.7-alpha1Tom Yu0-0/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/tags/krb5-1-7-alpha1@21858 dc483132-0cff-0310-8789-dd5450dbe970
2009-02-01patchlevel.h for krb5-1.7-alpha1Tom Yu1-2/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21857 dc483132-0cff-0310-8789-dd5450dbe970
2009-02-01Update README with changes by ticket IDTom Yu1-0/+276
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21856 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31release branch for krb5-1.7Tom Yu0-0/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21853 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31README and patchlevel.h for 1.7 release branchTom Yu2-2/+29
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21852 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31Default allow_weak_crypto=true for now. Default supported_enctypes toTom Yu3-2/+7
exclude single-DES enctypes. ticket: 6353 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21851 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31export new functionsKen Raeburn1-0/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21850 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31fix resource leakKen Raeburn1-1/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21849 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31recode as more straight-line code to simplify analysisKen Raeburn1-5/+7
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21848 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31don't use uninitialized variableKen Raeburn1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21847 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31handle freeing null keyblockKen Raeburn1-6/+6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21846 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-31don't double-freeKen Raeburn1-1/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21845 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-30Master Key Migration ProjectWill Fiveash40-196/+3404
Commit for the Master Key Migration Project. http://k5wiki.kerberos.org/wiki/Projects/Master_Key_Migration This commit provides the ability to add a new master key (with an enctype differing from the current master key) to the master key principal and stash file and then migrate the encryption of existing principals long term keys to use the new master key. In addition deletion of master keys is provided. ticket: 6354 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21844 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-30krb5_get_server_rcache had some dead (and incorrect) code for cleaningGreg Hudson1-13/+5
up the rcache on failure. Fix the cleanup code and make use of it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21842 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-30Make output parameter value of krb5_rc_resolve_full well-defined onGreg Hudson1-8/+13
error return. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21841 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-30In krb5_kdcrep2creds, call the correct free function when cleaning upGreg Hudson1-2/+2
the keyblock, and clean up the keyblock if krb5_copy_data fails. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21840 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-30Changed the name match_config_pattern to krb5_match_config_pattern. Check ↵Zhanna Tsitkov5-23/+71
strdup return code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21838 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-29Introduced match_config_pattern function to find a pattern in the config ↵Zhanna Tsitkov5-170/+127
value strings git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21828 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-29whitespaceKen Raeburn1-186/+185
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21826 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-29clear outbuf[0].data to unconfuse coverityKen Raeburn1-0/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21825 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28disable single-DES by defaultTom Yu8-13/+68
Mark all single-DES enctypes as "weak", and create a new libdefaults variable "allow_weak_crypto", which defaults to "false". ticket: 6353 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21823 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28include netinet/in.h to make sure we know what struct in_addr looks likeKen Raeburn1-0/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21820 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28no more -r option for setting krb.conf pathKen Raeburn2-11/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21819 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28remove some remnants of krb4-related config file optionsKen Raeburn4-18/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21818 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28return correct kvno in TGS caseSam Hartman1-3/+4
krb5_c_encrypt sets the kvno of ciphertext to 0. So fill it in after the call to encrypt_tkt_part. ticket: 6352 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21815 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28Run a single expect statement to read from both client and server, toTom Yu1-16/+9
avoid an apparent race condition on Darwin. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21814 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28whitespaceKen Raeburn1-27/+30
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21813 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-28Start to phase out krb5_xfree macro, which just casts its argument toKen Raeburn75-412/+412
char* and calls free. Replace most uses, outside of the LDAP KDB plugin, which doesn't build on my test system of the moment because of version dependencies. Add one explicit cast to make the change warning-neutral (under gcc 4.0.1 on Mac OS X 10.5.6). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21812 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-27Helper script for processing valgrind logs that don't indicate any errors, ↵Ken Raeburn1-0/+71
or are for system programs git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21810 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-27use memchrKen Raeburn1-6/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21809 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-27"Coding practices" related fixesZhanna Tsitkov2-594/+582
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21808 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26In asn1_decode_pa_for_user(), ensure that user member is allocatedLuke Howard1-0/+1
before assigning a value to it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21805 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26Introduced new static function prep_reprocess_req to make code more readableZhanna Tsitkov1-103/+116
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21801 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26gss_header|trailerlen should be unsigned intSam Hartman1-9/+9
The krb5_c_crypto_length API returns unsigned int per its design. so, use unsigned int not size_t for its output. ticket: 6351 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21799 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26Preliminary update of README for krb5-1.7 releaseTom Yu1-121/+51
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21798 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26Use 16/32-bit big/little-endian store functions in more placesKen Raeburn21-148/+60
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21796 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-26Check asprintf return codes. StylingZhanna Tsitkov2-589/+617
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21795 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-25Use a struct in_addr to insure alignment of address - instead ofEzra Peisach1-3/+3
random alignment on the stack. Solaris 2.10 has issues if the address is not aligned. The rest of the code in the tree uses a struct in_addr or mallocs the address - which will be sufficiently aligned. ticket: 6308 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21794 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-24Change 16/32/64-bit big-/little-endian/native unaligned load/storeKen Raeburn3-19/+31
routines to take void pointers, so they can operate on both plain and unsigned char buffers, or other types. Remove some now-unneeded casts. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21793 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Eliminate the need for the domain_realm mapping table on the client side by ↵Zhanna Tsitkov11-37/+417
implementing minimal referral support in the KDC git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21792 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Remove some null checks in cases where pointers can't be nullGreg Hudson3-10/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21790 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23In krb5_pac_get_buffer, check the correct value for null after callingGreg Hudson1-1/+1
malloc. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21789 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23In krb5_pac_parse, change the code around a bit to avoid harmlesslyGreg Hudson1-7/+8
copying an uninitialized Buffers field of a PACTYPE structure. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21788 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Initialize ds.magic in k5_md5_hmac_hash, to avoid harmlessly copyingGreg Hudson1-0/+1
around its uninitialized value in krb5_hmac. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21787 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23hash db2 code breaks if st_blksize > 64kKen Raeburn1-0/+2
The hash db code assumes in places that the block size is no larger than 64K. There's a range check in the case where you don't have a file but provide initialization info. The btree code will cap the block size used at 64K. Apparently Sun's ZFS can report back a block size of 128K, causing the db2 tests to fail. Add such a cap to the hash db creation code. Note that our default configuration is to use the btree code when creating a new database, so it's unlikely that this will cause real-world problems unless someone went out of their way to specify use of the hash format. ticket: 6342 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21786 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23In krb5_get_init_creds, null out err_reply in a case where we free itGreg Hudson1-0/+1
and do not necessarily exit the loop. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21785 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Always initialize the output parameter in krb5_parse_name and friendsGreg Hudson1-0/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21784 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23In kadmin, free the correct item in an error case (fixes a double-freeGreg Hudson1-1/+1
and a memory leak). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21783 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Add some output parameter initializations n order to eliminate someGreg Hudson5-2/+13
spurious Coverity defects. (Far from a comprehensive pass.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21782 dc483132-0cff-0310-8789-dd5450dbe970
2009-01-23Per coding standards, don't declare variables in inner scopes in newGreg Hudson2-10/+6
rcache code except when it really makes sense (option processing for t_replay). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21781 dc483132-0cff-0310-8789-dd5450dbe970