aboutsummaryrefslogtreecommitdiff
path: root/src/appl
AgeCommit message (Collapse)AuthorFilesLines
2006-10-18Memory leak fixes on exitEzra Peisach2-1/+8
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18727 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15Cleanup some warnings on missing prototypesEzra Peisach3-2/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18715 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15Remove all unused variable warnings from treeEzra Peisach1-2/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18712 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15typoKen Raeburn1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18711 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15Initialize some values before use, silence some warningsKen Raeburn1-1/+3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18705 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15Fix logic bug in string allocationKen Raeburn1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18704 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-15Use memmove for overlapping regionsKen Raeburn2-27/+29
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18703 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-14Don't strncpy a string to itselfKen Raeburn1-1/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18701 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-13Use $(VALGRIND) when running programs using $(KRB5_RUN_ENV) orKen Raeburn1-1/+1
$(RUN_SETUP). Replaces old hack with MAYBE_VALGRIND added to RUN_ENV in a way that would break in some of the tests. Set VALGRIND in site.exp in tests/dejagnu. (Not used yet.) Runs some shell scripts under valgrind, rather than changing them to run only the executables under valgrind; this is mostly okay, just creates lots of extra log data, and requires --trace-children=yes. This should work for any instrumentation program invocation that gets followed immediately by the name and argument list for the program being instrumented. For example, VALGRIND="env LD_PRELOAD=..." should work, though I haven't tested it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18699 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-12more debugging printfs for nightly testingKen Raeburn1-0/+6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18689 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-11some (more) debugging code to track down nightly test failuresKen Raeburn1-0/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18680 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-11some debugging code to track down nightly test failuresKen Raeburn1-0/+6
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18679 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-07Move ASN.1 routines for KDB LDAP plugin into main krb5 library,Ken Raeburn1-1/+0
accessed via krb5int_access. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18666 dc483132-0cff-0310-8789-dd5450dbe970
2006-10-06make dependTom Yu3-12/+15
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18652 dc483132-0cff-0310-8789-dd5450dbe970
2006-09-21Set the canonicalize flag in TGS requests and accept cross-realm referral ↵Sam Hartman1-0/+2
tickets. We do not yet accept tickets in which the server name changes. * krb5_sname_to_principal: If there is no domain realm mapping return null realm *krb5_get_cred_via_tkt: New behavior as described below 1) the referrals case: - check for TGT for initial realm - if a remote realm was specified (which must have happened via a domain_realm mapping), obtain a TGT for it the standard way and start with that. - use client realm for server if not specified - iterate through this loop: - request ticket with referrals turned on - if that fails: - if this was the first request, punt to non-referrals case - otherwise, retry once without referrals turned on then terminate either way - if it works, either use the service ticket or follow the referral path - if loop count exceeded, hardfail 2) the nonreferrals case - this is mostly the old walk_realm_tree TGT-finding (which allows limited shortcut referrals per 4120) followed by a standard tgs-req. - originally requested principal is used for this, although if we were handed something without a realm, determine a fallback realm based on DNS TXT records or a truncation of the domain name. ticket: 2652 Owner: amb git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18598 dc483132-0cff-0310-8789-dd5450dbe970
2006-08-08fix MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilitiesTom Yu5-12/+41
* src/appl/gssftp/ftpd/ftpd.c (getdatasock, passive): * src/appl/bsd/v4rcp.c (main): * src/appl/bsd/krcp.c (main): * src/appl/bsd/krshd.c (doit): * src/appl/bsd/login.c (main): * src/clients/ksu/main.c (sweep_up): * src/lib/krb4/kuserok.c (kuserok): Check return values from setuid() and related functions to avoid privilege escalation vulnerabilities. Fixes MITKRB5-SA-2006-001. [CVE-2006-3083, VU#580124, CVE-2006-3084, VU#401660] ticket: new target_version: 1.5.1 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18420 dc483132-0cff-0310-8789-dd5450dbe970
2006-08-02Apply patch from Michael Calmer to fix some uninitialized variablesTom Yu2-1/+4
* src/appl/gssftp/ftpd/ftpd.c (auth_data): Initialize stat_maj, accept_maj, acquire_maj. * src/appl/telnet/libtelnet/kerberos5.c (kerberos5_send): Intialize rdata. * src/kdc/do_tgs_req.c (process_tgs_req): Initialize magic and tr_contents.magic. * src/lib/krb5/asn.1/krb5_decode.c (decode_krb5_safe_with_body): Initialize tmpbody.magic. * src/plugins/kdb/db2/libdb2/hash/dbm.c (kdb2_fetch) (kdb2_firstkey, kdb2_nextkey): Initialize dsize. ticket: 3904 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18404 dc483132-0cff-0310-8789-dd5450dbe970
2006-07-17make dependKen Raeburn1-1/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18332 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-28autoconf 2.60 compatibilityKen Raeburn2-4/+4
Change all file substitutions so that @-patterns start at the beginning of their lines, as now required by autoconf 2.60 (released Monday). ticket: new target_version: 1.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18249 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-20In verify_krb_v4_tgt, use an unsigned KRB4_32 to store an address ratherRuss Allbery1-1/+1
than an unsigned long to avoid memcpying past the end of a structure on 64-bit platforms. Ticket: 581 Version_Reported: 1.0.5 Target_Version: 1.5 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18175 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-19Pass in the correct value for the first argument of select (one largerRuss Allbery4-5/+29
than the largest file number in the select set) rather than some multiple of sizeof some struct. The latter is large enough accidentally work, but breaks on AIX. Map IPv4-mapped IPv6 addresses back to IPv4 in krshd for the purposes of connecting back to the remote system on AIX, since on AIX getnameinfo returns such addresses but connect won't accept them. Ticket: 3122 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18166 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-17Test for and use setutsent, based on a patch from Nate Yocom at Centrify.Ken Raeburn2-5/+22
Modified to restrict the configure test to just the pty library. ticket: 3423 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18161 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-16Change a bunch of calls to ctype macros (those cited by Jeff, and aKen Raeburn2-8/+8
few others) to cast the character values to unsigned char. ticket: 3445 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18156 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-16ftpd's getline conflicts with current glibc headersKen Raeburn3-5/+4
Reported by Ubaidul Khan on kerberos@mit this date. GNU libc includes a function getline with an incompatible prototype. It hasn't caused problems for MIT on RHEL 4 (glibc 2.3.4), but apparently FC5 has a newer set of headers in which it does. * ftpcmd.y (getline): Renamed to ftpd_getline. Declarations and callers changed. * ftpd.c (getline): Remove duplicate declaration. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18153 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-15Increase buffer sizes to 64K where a Kerberos 5 authenticator might beKen Raeburn7-7/+7
exchanged. Suggested by Markus Moeller. ticket: 2615 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18151 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-15remove unused versions of makefilesKen Raeburn6-369/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18150 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-15make dependTom Yu1-0/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18141 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-13telnet help should telnet to a host named help, not display a usageRuss Allbery1-1/+1
message. Only support ?, not help, to request help with the open command. The same change was made in netkit's telnet. Ticket: 3269 Component: krb5-appl Version_Reported: 1.4.2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18124 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-13Change man page cross-reference to kerberos(1) from kerberos(3)Russ Allbery1-1/+1
Ticket: 3008 Version_Reported: 1.3.6 Component: krb5-appl git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18122 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-12Always include sys/ioctl.h in the telnet and telnetd code, even ifRuss Allbery2-4/+2
sys/filio.h is available. GNU/kFreeBSD has sys/filio.h but still requires sys/ioctl.h, and sys/ioctl.h is included unconditionally elsewhere in the code. Patch from Petr Salinger. Ticket: 3466 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18117 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-12Document the authorization logic used in the absence of .k5login files.Russ Allbery2-18/+18
Remove all remaining references to .rhosts authentication; the code to implement this was already removed. Ticket: 2577 Version_Reported: 1.3.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18112 dc483132-0cff-0310-8789-dd5450dbe970
2006-06-12Fix minor nroff man page problems (stray space, bad cross reference)Russ Allbery1-1/+1
Ticket: 3010 Version_Reported: 1.4.2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18107 dc483132-0cff-0310-8789-dd5450dbe970
2006-05-24Rename locate.h to locate_plugin.h. Change references, update dependenciesKen Raeburn2-4/+4
ticket: 3784 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18037 dc483132-0cff-0310-8789-dd5450dbe970
2006-05-23install headers into include/krb5Ken Raeburn5-74/+83
Create include/krb5 directory, and put krb5.h and (k5-)locate.h there in the build tree. Stub krb5.h in main include directory just includes krb5/krb5.h. Update dependencies, and add dependencies in a couple Makefiles that didn't have them. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18030 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-13Don't include kdb.h from k5-int.h; instead, include it in the handfulKen Raeburn2-14/+12
of places where it's actually needed. Update dependencies. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17898 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-13* configure.in: Delete OSF/1 libsecurity/setluid/LOGINLIBS codeKen Raeburn1-6/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17897 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-11Remove ChangeLog files from the source tree. From now on, theSam Hartman19-9619/+0
subversion commit log entry needs to include information that would have been in the changelog. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17893 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-11Remove .Sanitize and .rconf files, no longer usedKen Raeburn22-902/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17888 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-11Move pty library from util/pty to appl/libpty; update Makefile.in andKen Raeburn24-1/+4443
configure.in files accordingly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17887 dc483132-0cff-0310-8789-dd5450dbe970
2006-04-01make dependKen Raeburn2-10/+10
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17826 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-31* configure.in: Don't test word sizesKen Raeburn2-3/+4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17818 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-31* secure.c: Include autoconf.h. Include stdint.h and inttypes.h if available.Ken Raeburn2-9/+16
(ftp_uint32, ftp_int32): Always define as [u]int32_t instead of testing configure-time type size macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17816 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-31make depend, now with dependency sortingKen Raeburn7-235/+240
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17811 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-28* configure.in: Supply comment template in AC_DEFINE callsKen Raeburn8-22/+38
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17789 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-27make dependKen Raeburn2-12/+14
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17786 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-16* configure.in: If tgetent can't be found, error outKen Raeburn2-0/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17741 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-11Instead of arbitrary division of headers into include and include/krb5, withKen Raeburn6-29/+29
include directives sometimes using krb5/foo.h and sometimes using foo.h, and -I options always given for both directories in both source and build trees, push include/krb5/* up a level and drop the krb5 directory (except, for the moment, the change log). Updated #include directives, -I options, and dependencies accordingly, and deleted one or two bits of old, unused code that was noticed in the process. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17730 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-11Add a new recursive target "generated-files-mac", for producing theKen Raeburn2-0/+6
generated files that lxs wants to feed into the Mac build system. (First approximation, may want some fine tuning later.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17728 dc483132-0cff-0310-8789-dd5450dbe970
2006-03-08make dependKen Raeburn2-4/+8
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17708 dc483132-0cff-0310-8789-dd5450dbe970
2006-02-27Qing Dong <dongq@mit.edu> provided a set of changes to allowJeffrey Altman4-3/+11
krb5 to build under the Microsoft Visual Studio 8 compiler in 64-bit mode and produce file names that do not conflict with the names produced by the 32-bit build. That patch was modified to work on Unix and also include processor dependent pre-processor definitions to remove warnings. ticket: 3415 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17680 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit v1.1 at 2024-08-01 19:39:24 +0000