aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2004-09-21 * configure.in: Check for sockaddr_in.sin_len andTom Yu15-119/+193
sockaddr.sa_len. Check for sys/param.h in case we need NBBY somewhere. * auth.h, svc_auth.h: Namespace cleanup. * svc.h, rpc_commondata.c: New global svc_maxfd. * svc.c (svc_getreqset): Break inner part of loop out into local function svc_do_xprt(). Don't use rpc_dtablesize(); instead, use svc_maxfd. * svc_run.c: Don't use rpc_dtablesize(). * clnt_generic.c, clnt_simple.c, getrpcport.c: * svc_tcp.c, svc_udp.c: Set sockaddr_in.sin_len when available. * ovsec_kadmd.c (kadm_svc_run): Don't use rpc_dtablesize(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16770 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-21Add DNS resolver glue layer. Use itTom Yu10-378/+615
ticket: 2710 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16769 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17 * libgssrpc.exports: Don't export internalsTom Yu43-912/+697
* svc.c (svc_getreqset): * svc_tcp.c (readtcp): Don't intersperse preprocessor conditionals with braces. * auth_gssapi.c, auth_gssapi_misc.c, auth_none.c: * auth_unix.c, authunix_prot.c, bindresvport.c: * clnt_generic.c, clnt_perror.c, clnt_raw.c * clnt_simple.c, clnt_tcp.c, clnt_udp.c, get_myaddress.c: * getrpcent.c, getrpcport.c, pmap_clnt.c: * pmap_getmaps.c, pmap_getport.c, pmap_prot.c, pmap_prot2.c: * pmap_rmt.c, rpc_callmsg.c, rpc_prot.c: * svc.c, svc_auth.c, svc_auth_gss.c: * svc_auth_gssapi.c, svc_auth_unix.c, svc_raw.c: * svc_run.c, svc_simple.c, svc_tcp.c: * svc_udp.c, xdr.c, xdr_alloc.c, xdr_array.c: * xdr_float.c, xdr_mem.c, xdr_rec.c, xdr_reference.c: * xdr_stdio.c: Protoize, to avoid potential problems when fixed-width types are not ints on some platforms. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16768 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17Use a new variable, $(INSTALL_SCRIPT) to install scripts, so theyTom Yu6-2/+14
won't get stripped when someone does "make install-strip". ticket: new tags: pullup target_version: 1.3.6 component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16767 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17 * aclocal.m4 (AC_LIBRARY_NET): Look for res_search() prototype,Tom Yu2-11/+32
then for symbol in library, in case there's symbol renaming happening in the headers. Clean up some style nits. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16766 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17* kfw-fixed.nsi:Jeffrey Altman2-0/+63
The version of MSIEXEC which ships with Windows 2000 does not accept the /passive and /promptreboot command line options. On Windows 2000 only, do not specify them. ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16763 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17 Remove trailing slash from PATHJeffrey Altman3-23/+190
Minimize Leash32.exe on startup Update msi-deployment guide to explain how to replace the configuration files in greater detail ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16761 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-17 Fix error code returned for empty sequences and check the errorJeffrey Altman2-2/+10
in krb5_lcc_initialize ticket: 2705 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16760 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-15 * aclocal.m4 (AC_LIBRARY_NET): Only look for res_search() inTom Yu2-1/+6
libraries, not headers, in case it's present but not prototyped. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16759 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-15 * configure.in: Check for h_errno declaration in netdb.hTom Yu3-0/+23
* port-sockets.h: Explicitly declare h_errno if it's missing. ticket: 1044 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16758 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-15* reconf: Export ACLOCAL=true to environmentKen Raeburn2-0/+9
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16757 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-14 * aclocal.m4 (AC_LIBRARY_NET): Require the BIND_8_COMPAT checkTom Yu2-0/+8
prior to looking for prototypes, as BIND 9 (at least on Panther) turns off some prototypes and typedefs if BIND_8_COMPAT is defined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16756 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-14 Enable default installation of documentationJeffrey Altman2-1/+5
ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16754 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-14 * dnssrv.c:Tom Yu4-0/+10
* hst_realm.c: * locate_kdc.c: Include netinet/in.h as a prerequisite for resolv.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16753 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-14 * aclocal.m4: Fix check for resolv.h; some platforms haveTom Yu2-2/+15
prerequisite headers. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16752 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-13* kfw-fixed.nsi:Jeffrey Altman2-3/+99
Detect the Wix MSI, the SWRT MSI, and the Pismere MSI If found, uninstall the MSI before installing NSIS ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16749 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-13 Add msi-deployment-guide.txtJeffrey Altman2-0/+371
ticket: 2707 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16744 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-13 Updates to WiX to satisfy the needs of MIT SWRTJeffrey Altman6-6/+299
ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16743 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-11 utils.nsi: Fix RestartRequired function to actually determineJeffrey Altman2-33/+112
if a restart is required kfw-fixed.nsi: - Add support for compiler version 1400 - Fix terminal server key deletions - Delete leash32.exe on uninstall - Correct the logic of the call of RestartRequired ticket: 2702 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16742 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-10Support building on x86_64Sam Hartman2-10/+19
Include resolv.h when looking for res_nsearch and res_search. Ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16741 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-10 * port-sockets.h: Remove _XOPEN_SOURCE_EXTENDED hack for netdb.h,Tom Yu2-9/+7
as it can cause inconsistencies between headers. It significantly broke HP-UX 10.20 anyway. ticket: 2379 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16740 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-10 * cc_mslsa.c: Implement krb5_lcc_initialize()Jeffrey Altman2-6/+35
Remove all tickets from the cache which have a client principal that matches the input principal. ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16737 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-10 cc_mslsa.c: Correct test for KerbQueryTicketCacheEx2MessageJeffrey Altman2-3/+6
ticket: 2705 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16736 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-102004-09-10 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2-8/+374
* cc_mslsa.c: The following functionality is being committed but commented out because it is not presently available in public Microsoft SDKs - support for KerbSubmitTicket which allows a KERB_CRED message to be forwarded to the LSA. (KERB_SUBMIT_TICKET) - support for the KerbQueryTicketCacheEx2Message which adds the Session Key Enctype to the contents of the response from KerbQueryTicketCacheExMessage. (HAVE_CACHE_INFO_EX2) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16735 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-09 krb5.hin: add new krb5_ccache flag, KRB5_TC_NOTICKETJeffrey Altman2-0/+5
when set, a krb5_ccache does not have to return a ticket within the returned credential ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16734 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-09ms2mit.c: Apply KRB5_TC_NOTICKET to MSLSA: while searching for theJeffrey Altman2-0/+19
presence of an initial ticket to copy to the MIT cache ticket: 2688 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16733 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08 * login.c (main): Don't overwrite "PATH" environment variable ifTom Yu2-1/+6
it's already set. ticket: 427 version_reported: 1.0.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16731 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08 * Makefile.in (install-unix): Install krb524d manpageTom Yu2-0/+5
ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16730 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08 * Makefile.in: Install krb5-config manpageTom Yu2-0/+5
ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16729 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08Added man pages for krb524d and krb5-configAlexandra Ellwood1-1/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16728 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08Added a man page for krb5-configAlexandra Ellwood2-0/+78
ticket: 2694 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16727 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-08Added man page for krb524dAlexandra Ellwood2-0/+78
ticket: 2539 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16726 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-07Include all subdirectories of KFW_INSTALL_DIR in the SDKJeffrey Altman2-1/+6
ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16723 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-02 * cc_mslsa.c:Jeffrey Altman2-23/+246
- Fix MITPrincToMSPrinc to prevent writing to the output buffer if the input won't fit. - Add internal UnicodeStringToMITPrinc function - Rename internal MSPrincToMITPrinc to ExternalNameToMITPrinc - Rename internal PurgeMSTGT to PurgeAllTickets - Add internal PurgeTicket2000 - Add internal PurgeTicketXP - Since tickets can only be requested via KDC Opt Flags it is not possible to specifically request the Initial ticket. If more than one ticket exists which matching service names, enctypes, and ticket flags the initial ticket flag may not be set. If the caller requested the initial ticket, set the flag manually. - Add preliminary support for krb5_lcc_set_flags - Modify krb5_lcc_initialize to return success - Modify krb5_lcc_get_principal to support an LSA cache which does not contain a TGT when krb5_lcc_resolve is called. - Implement krb5_lcc_remove_cred ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16714 dc483132-0cff-0310-8789-dd5450dbe970
2004-09-02 * ms2mit.c: add -c ccache command line optionJeffrey Altman4-4/+198
* mit2ms.c: new command. Copies contents of the mit ccache to the MSLSA: ccache ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16713 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-31 * kvno.M: Update usageTom Yu3-4/+13
* kvno.c (xusage): Update usage message. ticket: 2677 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16709 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-31oops, forgot changelogTom Yu1-0/+5
ticket: 2686 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16703 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-31fix MITKRB5-SA-2004-003Tom Yu2-0/+4
Fix for ASN.1 decoder denial-of-service. [MITKRB5-SA-2004-003] ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16702 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-31fix MITKRB5-SA-2004-002Tom Yu9-4/+43
Fix double-free vulnerabilities [MITKRB5-SA-2004-002]. ticket: new target_version: 1.3.5 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16701 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-30added private apple pkinit sourcesAlexandra Ellwood1-0/+125
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16699 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-28* prof_file.c (profile_open_file): If an error occurs while updating from theKen Raeburn2-0/+8
input file, destroy the mutex only if we're not sharing file data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16698 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-28* prof_parse.c (parse_std_line): Rewrite handling of whitespace in and afterKen Raeburn2-6/+20
tag, to strip trailing whitespace (per current locale, not just ASCII space characters), and prohibit any internal space characters in tag names. (This is not the patch supplied in the bug report; that patch changed the tag handling to allow spaces in tag names, which we haven't previously allowed. On the other hand, we haven't specifically disallowed internal tabs or other whitespace, either, and this patch does so.) ticket: 2614 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16697 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-28 * init_sec_context.c (make_ap_req_v1): Free checksum dataTom Yu3-4/+14
allocated by make_gss_checksum() to avoid leak. * k5sealv3.c (gss_krb5int_unseal_token_v3): Free plain.data after checksum is verified, to avoid leak. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16696 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-28move last patch down a little so it applies to tcp sockets as well as udpKen Raeburn1-14/+15
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16695 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-28* sendto_kdc.c (start_connection) [DEBUG]: Log the local socket addressKen Raeburn2-0/+27
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16694 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-27Finally applied patch from Nalin Dahyabhai at Red Hat to fix 0/NULL bugs inKen Raeburn8-7/+31
variadic argument lists to krb5_build_principal{,_ext}. Skipped the stylistic patches that removed casts of NULL. tag: 1850 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16693 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-27* profile_tcl.c: New file, generated from profile.swg, but checked in to avoidKen Raeburn2-0/+2084
requiring swig in order to generate the test program. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16692 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-27* profile.swg: New file.Ken Raeburn4-4/+266
* configure.in: Look for Tcl. * Makefile.in (profile_tcl, profile_tcl.c, profile_tcl.o): New targets, not built by default. (PROG_LIBPATH, PROG_RPATH, LOCALINCLUDES): Add Tcl options. (DEFINES): Define. (clean-unix): Delete profile_tcl. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16691 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-27* run.test (getnwords): Run data through "cat -v", because at least one versionKen Raeburn2-1/+11
of Debian Linux has an English dictionary with Latin-1 characters and a "rev" that seems to default to some sort of Unicode. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16690 dc483132-0cff-0310-8789-dd5450dbe970
2004-08-27* prof_int.h (struct _prf_data_t): Add a mutex.Ken Raeburn5-50/+142
* prof_file.c (profile_open_file): Initialize data mutex. (profile_update_file_data, profile_flush_file_data): Lock it while manipulating file data. (profile_lock_global, profile_unlock_global): New functions. * prof_set.c (rw_setup): Acquire global lock while checking flags and adjusting ref count. (profile_update_relation, profile_rename_section, profile_add_relation): Lock data mutex while manipulating profile data. * prof_tree.c (profile_node_iterator): Do more magic number tests. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16689 dc483132-0cff-0310-8789-dd5450dbe970