1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
|
Tue Jun 13 12:44:20 1995 Sam Hartman <hartmans@tardis.MIT.EDU>
* network.c: Base inclusion of sys/select.h on whether it exists
instead of a specific test for AIX.
* configure.in: Test for sys/select.h
Mon Jun 12 20:01:23 1995 Ezra Peisach <epeisach@kangaroo.mit.edu>
* kdc_util.c (kdc_process_tgs_req): Set the auth_context rcache to
null before freeing auth_context. This keeps the rcache
valid.
Sat Jun 10 23:04:31 1995 Tom Yu (tlyu@dragons-lair)
* kdc_util.c: krb5_auth_context redefinitions
Fri Jun 9 19:13:08 1995 <tytso@rsx-11.mit.edu>
* dispatch.c, kdc_util.h, kerberos_v4.c: Use KRB5_KRB4_COMPAT
instead of KRB4 for determining whether to compile in
Kerberos V4 backwards compatibility
* configure.in: Remove standardized set of autoconf macros, which
are now handled by CONFIG_RULES.
Thu Jun 8 23:35:27 1995 <tytso@rsx-11.mit.edu>
* do_as_req.c, do_tgs_req.c, kdc_util.c, kerberos_v4.c, main.c,
network.c: Fix -Wall nits.
Thu Jun 8 14:52:40 EDT 1995 Paul Park (pjpark@mit.edu)
* Makefile.in - Add libkadm.
* dispatch.c, do_as_req.c, do_tgs_req.c, kdc_util.c, kerberos_v4.c
main.c - Include adm_proto.h and change syslog calls to
calls to krb5_klog_syslog.
Fri May 26 17:50:39 EDT 1995 Paul Park (pjpark@mit.edu)
* Makefile.in - Define KDBDEPLIB.
Sat May 20 22:28:52 1995 Ezra Peisach <epeisach@kangaroo.mit.edu>
* kerberos_v4.c: Port to OSF/1. (change longs to KRB4_32)
Sat Apr 29 00:13:16 1995 Theodore Y. Ts'o <tytso@dcl>
* kdc_util.c (kdc_process_tgs_req): Make sure apreq->ticket gets
freed, since it isn't being passed back to the caller
(anymore).
Fri Apr 28 21:28:45 1995 Theodore Y. Ts'o <tytso@dcl>
* do_tgs_req.c (process_tgs_req): Free header_ticket when we're
done with it. (Prevents massive memory leak).
* Makefile.in (depend): Use $(LD) instead of $(CC) so that we can
do purify checking.
Fri Apr 28 18:05:52 1995 Mark Eichin <eichin@cygnus.com>
* Makefile.in (KLIB): put KRB4_LIB inside KLIB.
Thu Apr 27 13:52:22 1995 Mark Eichin <eichin@cygnus.com>
* Makefile.in (krb5kdc): use KRB4_LIB directly.
* configure.in: use WITH_KRB4 as-is.
Wed Apr 26 11:23:11 1995 Mark Eichin <eichin@cygnus.com>
* configure.in: need HAS_ANSI_VOLATILE for signal_requests_exit.
Sat Apr 22 00:36:37 1995 Theodore Y. Ts'o (tytso@dcl)
* network.c (setup_network): Don't rely on krb5_kdc_portname and
krb5_kdc_sec_portname anymore. Use the #define'd versions.
Fri Mar 31 16:50:07 1995 Theodore Y. Ts'o (tytso@dcl)
* main.c (main): Make sure the context is initialized before it is
used.
Mon Mar 27 07:56:26 1995 Chris Provenzano (proven@mit.edu)
* kdc_util.c Use new calling conventions for krb5_rd_req_decoded().
Fri Mar 24 14:58:07 1995 <tytso@rsx-11.mit.edu>
* replay.c: The KDC replay cache needs to store the database
modification time, so that if the database is modified in
between when it receives a request and when it receives a
replay of the same request, it knows to throw away the
replay cache entry and generate a new response (since the
record in the database on which the response is based may
have been modified).
* main.c (kdc_com_err_proc): Use syslog() instead of vsyslog().
Sat Mar 18 18:59:45 1995 John Gilmore (gnu at toad.com)
* kerberos_v4.c: Replace STDARG_PROTOTYPES with HAVE_STDARG_H.
Tue Mar 14 15:25:38 1995 <tytso@rsx-11.mit.edu>
* configure.in, Makefile.in: Use the libdes425 library so that the
DES code doesn't get dragged in twice.
* kdc_util.c (validate_as_request): Allow a client to obtain a
password changing ticket, even if the client's key is
expired.
* main.c (usage, process_args, main): The KDC will disassociate
itself from the terminal by default, unless the -n option
is given.
Thu Mar 2 12:16:50 1995 Theodore Y. Ts'o <tytso@dcl>
* Makefile.in (ISODELIB): Remove reference to $(ISODELIB).
Wed Mar 1 16:30:27 1995 Theodore Y. Ts'o <tytso@dcl>
* configure.in: Remove ISODE_INCLUDE and ISODE_DEFS, replace check
for -lsocket and -lnsl with WITH_NETLIB check.
Tue Feb 28 02:27:11 1995 John Gilmore (gnu at toad.com)
* *.[ch]: Avoid <krb5/...> and <com_err.h> includes.
Fri Feb 10 14:35:42 1995 Theodore Y. Ts'o <tytso@dcl>
* do_tgs_req.c (process_tgs_req): krb5_use_keytype() was being
called when the argument was a encryption type. Change
use to krb5_use_cstype(). Actually, any use of
krb5_use_keytype() is a bug by definition.
Wed Feb 01 21:07:03 1995 Chris Provenzano (proven@mit.edu)
* kdc_util.c (kdc_rdreq_keyproc()) Add krb5_keytype() arg.
Wed Jan 25 23:20:07 1995 Theodore Y. Ts'o (tytso@dcl)
* network.c (setup_network), main.c (process_args): Allow the
primary port that the KDC listens on be configurable on the
command line. If the appropriate /etc/services entries
aren't found, use compiled in defaults.
Wed Jan 25 16:54:40 1995 Chris Provenzano (proven@mit.edu)
* Removed all narrow types and references to wide.h and narrow.h
Fri Jan 13 15:23:47 1995 Chris Provenzano (proven@mit.edu)
* Added krb5_context to all krb5_routines
Thu Dec 8 00:33:05 1994 <tytso@rsx-11.mit.edu>
* do_tgs_req.c (prepare_error_tgs): Don't free the passed in
ticket; it will be freed as part of other structures.
* do_tgs_req.c (process_tgs_req): Set the encryption type in the
reply structure, and set the eblock type accordingly.
Wed Dec 7 13:36:34 1994 <tytso@rsx-11.mit.edu>
* do_as_req.c (process_as_req): Set the encryption type in the
reply_encpart structure.
* kdc_util.c (validate_as_request):
* policy.c (against_local_policy_as): Move requirement that an AS
request must include the addresses field to the local
policy routine. (Not required by RFC).
* main.c (setup_com_err): Initialize the kdc5 error table (the
kdb5 error table is already initialized)
Wed Nov 30 16:37:26 1994 Theodore Y. Ts'o (tytso@dcl)
* confiugre.in: Add appropriate help text for --with-krb4
option.
Mon Nov 21 17:23:50 1994 Theodore Y. Ts'o (tytso@dcl)
* do_tgs_req.c (process_tgs_req):
* do_as_req.c (process_as_req): Use the list of encryption types
passed as part of the KDC request to determine which
encryption to use for encrypting the ticket. The
encryption must be one that is supported by the KDC, as
well as being one which is marked as being supported by
the server of the ticket. In a AS request, also use this
encryption for encrypting the KDC response. In a TGS
request, use the encryption type of the TGT authenticator
to determine how to encrypt the KDC response.
Tue Nov 8 17:51:30 1994 Theodore Y. Ts'o (tytso@dcl)
* do_tgs_req.c (process_tgs_req): Use published interface to call
krb5_random_key().
Mon Nov 7 22:11:01 1994 Theodore Y. Ts'o (tytso@dcl)
* kerberos_v4.c: Don't define functions manually, but pull in the
appropriate include files (com_err.h, krb5/ext-proto.h,
krb5/los-proto.h, etc.)
* kdc_util.c (kdc_process_tgs_req): Fix lineage check so that we
don't fail if we're cross-authenticating with a realm with
the same length as our own. ('||' should have been '&&')
Fri Nov 4 17:47:46 1994 Theodore Y. Ts'o (tytso@dcl)
* do_as_req.c (process_as_req): Use published interface to call
krb5_random_key().
Fri Oct 14 00:31:14 1994 Theodore Y. Ts'o (tytso@dcl)
* main.c (process_args): Select the cryptosystem to be used using
krb5_use_cstype() instead of using a implementation
specific assignment. Also, allow the encryption type to
be specified using a command line option.
Tue Oct 11 22:11:09 1994 Theodore Y. Ts'o (tytso@dcl)
* do_as_req.c (process_as_req): Don't assume that the request
server's realm name is null terminated. Compare the
request server against changepw/kerberos using
krb5_principal_compare.
Tue Oct 4 16:42:16 1994 Theodore Y. Ts'o (tytso@dcl)
* kdc_util.c (kdc_rdreq_keyproc): Add widen.h and narrow.h around
keyproc call so that the argument types are widened.
Mon Oct 3 13:13:48 1994 Theodore Y. Ts'o (tytso@dcl)
* Makefile.in: Use $(srcdir) to find manual page for make install.
* Makefile.in: Remove krb5kdc on make clean
Fri Sep 30 22:13:13 1994 Theodore Y. Ts'o (tytso@dcl)
* extern.c: Add placeholder for magic number
Thu Sep 29 00:03:59 1994 Theodore Y. Ts'o (tytso@dcl)
* Makefile.in: Relink executable when library changes.
Wed Sep 21 17:40:56 1994 Theodore Y. Ts'o (tytso@dcl)
* kdc_util.c, kdc_util.h (realm_compare): Change realm_compare so
that both arguments are principals. This makes it less
confusing....
* kdc_util.c (add_to_transited): Folded in Tony Andrea's changes
so that add_to_transited doesn't assume that the contents
of a krb5_data->data are null terminated.
* do_tgs_req.c (process_tgs_req): Add the realm of the presented
tgt if it is different from the local realm (cross-realm) and it
is different than the realm of the client (since the realm of
the client is already implicitly part of the transited list and
should not be explicitly listed).
Thu Aug 18 18:17:59 1994 Theodore Y. Ts'o (tytso at tsx-11)
* configure.in:
* Makefile.in: Move optional link with $(KRB4)/lib/libdes.a to
configure.in.
Thu Aug 4 15:13:27 1994 Tom Yu (tlyu@dragons-lair)
* configure.in:
* kerberos_v4.c: don't include <sgtty.h> if POSIX_TERMIOS is
defined.
Sat Jul 16 09:16:33 1994 Tom Yu (tlyu at dragons-lair)
* configure.in: hopefully make dbm libs dtrt
Sat Jul 16 01:59:02 1994 Theodore Y. Ts'o (tytso at tsx-11)
* do_as_req.c: Sanitie error return codes
* kdc_util.c (validate_tgs_request): Fix error handling for bogus
TGS renew/forward/etc. requests. Sanitize error return codes.
Fri Jul 8 00:33:45 1994 Tom Yu (tlyu at dragons-lair)
* configure.in:
* Makefile.in: back out changes because of possible breakage under
Ultrix, among other things
Wed Jul 6 22:54:59 1994 Tom Yu (tlyu at dragons-lair)
* configure.in:
* Makefile.in: fixes to suck in -lndbm or -ldbm if needed
Tue Jun 28 19:43:54 1994 Tom Yu (tlyu at dragons-lair)
* main.c: fix explicit calls to initialize_foo_error_table
* do_tgs_req.c:
* configure.in: folding in Harry's changes
|
