aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-10-30Fixes for Emacs 22 compatibilityKen Raeburn1-2/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23099 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-30If krb5_sname_to_principal returns a null realm for the clientKen Raeburn1-0/+10
principal name, print an error message. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23098 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-30Quote realm name in error message.Ken Raeburn1-1/+7
If realm name is an empty string, just return an error right away. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23097 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-30Tweak batch reindent some more. Limit the initial bulk reindent, andTom Yu2-21/+54
refine the exception list somewhat. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23096 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-30Update the kadm5 design documentation slightly to reflect that MITGreg Hudson1-6/+17
doesn't commit to a stable libkadm5 C API. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23095 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29In process_tgs_req, fully initialize e_data since we may copy it inGreg Hudson1-2/+1
prepare_error_tgs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23093 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Add a couple of krb5_data convenience constructor functions, toGreg Hudson1-19/+26
facilitate properly initializing krb5_data objects. Adjust formatting of the existing krb5_data convenience functions and remove the #if 0 block. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23092 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Corrected Copyrights and some minor reorganization in openssl impl. Zhanna Tsitkov38-2177/+431
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23090 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Files that were not picked up by svn rev #22995 commit:Zhanna Tsitkov14-0/+844
Changed the crypto make system to add build flexibility. The update cancels the requirement for the dir structures to be identical in all crypto implementation and supports impl. dependent tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23089 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Restored few symbols in the crypto exports list to satisfy tests.`Zhanna Tsitkov1-0/+12
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23088 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Rename api.3 to api.current in the libkadm5 unit tests. This way theGreg Hudson17-0/+0
main body of tests won't have to be moved every time the current API version of libkadm5 changes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23087 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Rename some lingering krb5_derive_key referencesGreg Hudson3-3/+3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23086 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29remove times underflow/overflow checks, they break testsLuke Howard1-7/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23084 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28New elisp file to mark C styles in files. New top-level MakefileTom Yu2-0/+45
target "make mark-cstyle". The exception list is not final; it's just a starting point for discussion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23082 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Bump the accessor version number since we made changes.Greg Hudson7-52/+47
Take the opportunity to regularize accessor field names (no krb5 or krb5int prefixes). Fix a test program which was still using krb5_hmac. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23081 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Restrict libk5crypto.exports list to API and ABI. Also, include functions ↵Zhanna Tsitkov1-150/+60
needed to link kerb libs and tests properly git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23080 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Replace krb5_ with krb5Int_ prefix for non-API functionsZhanna Tsitkov73-309/+321
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23079 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Update to use heuristics for setting "krb5" style based on file localTom Yu2-8/+25
variable settings. Improve friendliness of variant loading orders. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23078 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Print a "starting..." message on stderr if running in nofork mode, forTom Yu1-0/+2
consistency with kadmind behavior. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23077 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Remove "verify" on make cleanEzra Peisach1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23076 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Add variable DB_VERSION to Makefile.in. Generate deps so thatEzra Peisach2-0/+44
configure will work. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23075 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27Heimdal DB bridge plugin for KDC back endGreg Hudson23-48/+4132
Merge Luke's users/lhoward/heimmig branch to trunk. Implements a KDC back-end plugin which interfaces to a Heimdal HDB plugin. ticket: 6578 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23073 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27Add "reindent" target to top-level Makefile.in. AddTom Yu2-0/+44
krb5-batch-indent.el. These perform a batch reindent based upon the Emacs file-local variable settings, taking care to distinguish between files that are supposed to conform to the coding style versus those that are marked as being exceptions. A later commit will explicitly mark the files that we expect to conform to our coding standards. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23061 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27Do not include com_err.h - not used hereEzra Peisach1-2/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23060 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27with an uninitialized entry on error exitEzra Peisach1-0/+1
k5_hmac_md5_hash_iov: Initialize keyblock.length - so we do not invoke zapfree git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23059 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-26Fix missing emacs file variable markers. Add krb5-c-style.el: theTom Yu4-3/+33
emacs lisp settings for the standard coding style. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23049 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-26Fix printf argument type mismatches related to pw_max_fail inGreg Hudson1-4/+5
kadmin.c. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23044 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-26Remove the libkadm5 api.2 unit tests which don't pertain to the cpol,Greg Hudson14-6600/+0
mpol, or gpol operations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23043 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-26Remove the telnet-to-localhost sanity check in start_servers_local, asGreg Hudson1-71/+27
the system telnet will not necessarily run correctly with LD_LIBRARY_PATH pointing at the Kerberos libraries from the build tree. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23042 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25not try to free random stack garbage on errorEzra Peisach1-0/+2
kdc_return_preauth: Set enc.ciphertext.data to null to ensure we do git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23040 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25Reformat function definition headers in gss-krb5's util_crypt.c toGreg Hudson1-98/+48
meet coding standards. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23039 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25Account lockoutGreg Hudson79-301/+10284
Merge Luke's users/lhoward/lockout2 branch to trunk. Implements account lockout policies for preauth-using principals using existing principal metadata fields and new policy fields. The kadmin API version is bumped from 2 to 3 to compatibly extend the policy_ent_rec structure. ticket: 6577 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25Set up an INIT-CMD to set CRYPTO_IMPL in config.status so thatTom Yu1-0/+1
rebuilding Makefiles in lib/crypto works correctly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23034 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25make dependTom Yu11-77/+72
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23030 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-24Resurrect deleted test files. Adjust Makefile.in files to correctlyTom Yu4-0/+729
define RUN_SETUP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23029 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Comment out empty definition of krb5_gss_set_sec_context_option_ops and itsLuke Howard1-0/+4
usage, because ISO C apparently forbids empty array initializers git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23002 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Remove #define DEBUG 1 that slipped in in S4U mergeLuke Howard1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23001 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Changed the crypto make system to add build flexibility. The update cancels ↵Zhanna Tsitkov40-1100/+368
the requirement for the dir structures to be identical in all crypto implementation and supports impl. dependent tests. Also, minor libk5crypto.exports list reduction ( from f_tables) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22995 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-22When iterating through the keytab in krb5_rd_req(), do notLuke Howard1-2/+4
return success if we did not find any matching keytab entries, otherwise we will crash upon accessing ticket->enc_part2. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22974 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-22Ensure that a GSS_C_BOTH acquired for GSS_C_NO_NAME still passesLuke Howard3-1/+3
a NULL server principal to krb5_rd_req(). Without this the name canonicalisation support in 1.7 was broken for GSS_C_BOTH credentials, because cred->name would always be set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22973 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21Allow the constrained delegation authorization method to use the evidence ↵Luke Howard2-1/+6
ticket client name as input to the authorization decision git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22963 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21simplify logic fix introduced in r22960 for S4U2SelfLuke Howard1-4/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22962 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21remove some unneeded extensions from the Novell backend authdata SPILuke Howard4-43/+3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22961 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21ensure that forwardable flag is propagated along S4U2Self referral pathLuke Howard1-1/+8
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22960 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21Increment authdata SPI to V2 (V1 was experimental) to account for additionalLuke Howard2-4/+4
krbtgt key parameter. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22959 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-21Increment authdata SPI to V2 (V1 was experimental) to accountLuke Howard2-27/+27
for additional krbtgt key parameter. This was at Sam's suggestion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22958 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20For naming extensions draft compliance, s/mspac:/urn:mspac:/Luke Howard3-14/+14
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22957 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20Make some gss-krb5 utility functions take enctypes instead of keys,Greg Hudson8-38/+44
and adjust callers. Fixes a bug where kg_arcfour_docrypt_iov was passing a keyblock instead of a key to kg_translate_iov after the enc-perf merge. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22956 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20use ANSI prototypes for acquire_XXX_cred, and fix cast to calling ↵Luke Howard1-14/+13
acquire_accept_cred() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22955 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20correct indirection of minor status code when calling displayStatus()Luke Howard1-2/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22954 dc483132-0cff-0310-8789-dd5450dbe970