1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
|
2002-08-27 Ken Raeburn <raeburn@mit.edu>
* Makefile.in ($(KRB524_HDR), $(KRB524_ERR_HDR)): Quote target of
copy on Windows.
2002-08-27 Sam Hartman <hartmans@mit.edu>
* README: Document new afs_krb5 configuration information
* krb524d.c (afs_return_v4): New function to determine if we have
been configured to return v4 tickets for afs or use the afs
krb5-encpart proposal
(do_connection): Call afs_return_v4 and use its result
2002-08-26 Sam Hartman <hartmans@mit.edu>
* RELEASE_NOTES: Delete OV release notes now with 100% incorrect
content
2002-08-22 Sam Hartman <hartmans@mit.edu>
* krb524d.c (do_connection): Add support for AFS
krb5-encpart-only per discussion with jhutz and lha
(handle_classic_v4): Split out code for handling v4 tickets since
it needs to be called multiple times
2002-08-23 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
2002-08-15 Tom Yu <tlyu@mit.edu>
* krb524d.c (kdc_get_server_key): Check for DISALLOW_ALL_TIX and
DISALLOW_SVR when looking up server key.
2002-07-24 Ezra Peisach <epeisach@bu.edu>
* krb524.h: Need to include port-sockets.h before socket-utils.h
for windows for struct sockaddr_in.
2002-07-23 Ezra Peisach <epeisach@bu.edu>
* krb524.h: Include socket-utils.h instead of port-sockets.h for
socklen_t definition.
2002-07-22 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c (krb524_sendto_kdc): Accept new arguments for local
address; pass them through to sendto_udp.
* krb524.h: Include port-sockets.h.
(krb524_sendto_kdc): Update declaration.
* conv_creds.c: Include socket-utils.h.
(krb524_convert_creds_kdc): Get local-address info from
krb524_sendto_kdc. On Mac, store the IPv4 address in the v4
credentials.
2002-07-19 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c (krb524_sendto_kdc): Accept new args for local address
return, pass them through to sendto_udp.
* conv_creds.c: Include socket-utils.h.
(krb524_convert_creds_kdc):
2002-07-12 Ken Raeburn <raeburn@mit.edu>
* conv_creds.c: Include port-sockets.h instead of winsock.h or
netinet/in.h.
* krb524.h: Forward-declare struct types sockaddr, sockaddr_in.
2002-07-09 Ken Raeburn <raeburn@mit.edu>
* krb524.h: Put # for cpp directives in first column.
2002-07-07 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c (krb524_sendto_kdc): Update sendto_udp calling
sequence; pass 0 for now.
2002-06-14 Tom Yu <tlyu@mit.edu>
* krb524.h: Change multiple-inclusion test macro to not stomp on
implementation namespace. Fix up BEGIN_DECLS.
* krb524.h: Back out erroneous merge of post-1.2.5 change
temporarily.
2002-06-14 Alexandra Ellwood <lxs@mit.edu>
* krb524.h: Updated C++ protection to not interfere with emacs
auto indentation and added KRB524_PRIVATE macro for Mac OS X to
control visibility of function prototypes
* krb524.h: Added C++ protection and Mac pragmas
* krb524.h, cnv_tkt_skey.c, conv_creds.c, conv_princ.c, encode.c,
misc.c, sendmsg.c: Updated header paths on Mac OS X so that we
correctly include the autogenerated krb524.h
* conv_creds.c, cnv_tkt_skey.c: added cast to remove warning.
* krb524.h: Updated to new Mac OS header layout.
* sendmsg.c: k5-int.h should be included as a local header
[pullups from 1-2-2-branch]
2002-06-13 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (WINLIBS): Use ws2_32.lib instead of wsock32.lib.
2002-06-04 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c: Include fake-addrinfo.h. Don't include
sys/select.h.
(krb524_sendto_kdc): Update for addrlist, locate_server,
locate_kdc changes. Rip out network code and call
internals.sendto_udp instead.
2002-04-10 Danilo Almeida <dalmeida@mit.edu>
* encode.c, cnv_tkt_skey.c: Need port-sockets.h for Win32 (now
that using WIN32_LEAN_AND_MEAN).
2002-03-06 Ken Raeburn <raeburn@mit.edu>
* krb524d.c (lookup_service_key): Copy key block and free up
keytab entry data.
2001-12-05 Ezra Peisach <epeisach@mit.edu>
* krb524d.c (cleanup_and_exit): Call krb5_klog_close().
* encode.c (encode_bytes, decode_bytes): Make length field
unsigned to clean up unsigned/signed warnings.
2001-10-10 Ken Raeburn <raeburn@mit.edu>
Danilo Almeida <dalmeida@mit.edu>
* Makefile.in (KRB524_ERR_HDR): New variable.
(includes): Depend on headers in include directory, not local
ones. Don't define any commands to run here.
($(KRB524_HDR), $(KRB524_ERR_HDR)): Define UNIX and Windows
versions of commands to run for these targets.
(../include/krb524_err.h): Delete dependence on "includes".
2001-09-28 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Put "##WIN32##" prefix on lines added in last
change, otherwise UNIX Make complains about STLIBOBJS referencing
itself.
2001-09-28 Danilo Almeida <dalmeida@mit.edu>
* Makefile.in: Add KRB524_STATIC_HACK for Windows build so that we
can generate a k524init binary that has an static copy of the krb5
library and does not depend on krb5 nor krb524 DLLs. This is so
that we can distribute a standalone k524init binary before 1.3
goes out.
2001-09-01 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (SRCS): Use $(srcdir).
(../include/krb524_err.h): Force build of "includes".
2001-08-08 <epeisach@mit.edu>
* cnv_tkt_skey.c (HOST_BYTE_ORDER): When casting const int * to
const char * instead of simply char *.
2001-06-26 Ezra Peisach <epeisach@mit.edu>
* conv_creds.c: Nuke prototype in file.
* krb524.h: Replace profile for krb524_send_message() with
krb524_sendto_kdc(). (krb524_send_message no longer exists).
2001-06-21 Ezra Peisach <epeisach@mit.edu>
* configure.in: Test need for daemon prototype.
* krb524d.c: Provide daemon prototype if needed.
2001-06-20 Ezra Peisach <epeisach@mit.edu>
* krb524d.c: Include <krb5/adm_proto.h> for krb5_log_init()
prototype.
(cleanup_and_exit) Conditionalize krb5_kt_close on keytab being
non-null.
2001-06-20 Mitchell Berger <mitchb@mit.edu>
* krb524d.c: Call krb5_klog_init before the first point where the
klog facility may be used, delete ifdef'd out code to make that
call from later in the file, conditionalize kadm5_destroy on the
handle being non-null, and correct an indentation error.
2001-06-19 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c (krb524_sendto_kdc): Use new locate_server interface.
2001-06-06 Ezra Peisach <epeisach@mit.edu>
* test.c (print_key): Pass in des_cblock* instead of char *.
(krb5_print_keyblock): Cast argument to C_Block_print to des_cblock *.
(krb4_print_ticket): For printf formats expecting a long, cast
arguments as such.
2001-06-05 Ken Raeburn <raeburn@mit.edu>
* configure.in: Check for unistd.h.
* k524init.c: Only include unistd.h if it's available.
* krb524d.c: Include stdarg.h.
(main): Accept new argument -p to indicate port number to use;
fall back to KRB524_SERVICE and then KRB524_PORT. In error
messages, use only part of program name following last '/'.
(usage): Updated.
(krb5_free_keyblock_contents): Delete disabled function.
2001-06-04 Ezra Peisach <epeisach@mit.edu>
* k524init.c: Inculde unistd.h for getopt() prototype.
* test.c (do_remote): Comment out unused variables.
* sendmsg.c (krb524_sendto_kdc): Cleanup assignment in conditional.
2001-05-08 Ken Raeburn <raeburn@mit.edu>
* sendmsg.c (krb524_sendto_kdc): Do fallback if KRB5_REALM_UNKNOWN
is returned, as might happen if the DNS support is not enabled.
2001-04-26 Ken Raeburn <raeburn@mit.edu>
* conv_creds.c (broken, krb524_convert_creds_plain): Unused code
deleted.
* sendmsg.c (krb524_sendto_kdc): Updated to use new
krb5int_locate_server function, via internals-accessor hook.
2001-04-13 Ken Raeburn <raeburn@mit.edu>
* k524init.c (prog): New variable.
(main): Set it, and use it when printing error messages. When
reinitializing v4 ticket file, reject case where client and server
realms are different. Print krb4 errors properly.
* conv_princ.c (krb524_convert_princs): Accept new arg SREALM,
passed through to krb5_524_conv_principal.
* krb524.h (krb524_convert_princs): Update prototype.
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Pass extra arg.
Reject tickets with transited realms for simplicity.
* conv_creds.c (krb524_convert_creds_plain): Pass extra arg. Use
the server realm instead of the client realm.
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Permit non-CRC DES
enctypes; patch from Assar Westerlund.
2001-04-10 Ken Raeburn <raeburn@mit.edu>
* conv_creds.c, encode.c, krb524.h, test.c: Always use prototypes,
don't use macros PROTOTYPE and KRB5_PROTOTYPE.
2001-03-12 Ezra Peisach <epeisach@mit.edu>
* krb524d.c: Provide prototypes for local functions.
* test.c: Declare local functions static.
2001-02-05 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Avoid double-free;
caller should free v5tkt.
2000-10-17 Ezra Peisach <epeisach@mit.edu>
* encode.c, krb524.h: encode_v4tkt() and decode_v4tkt() now take
unsigned int * lengths.
* krb524d.c (do_connection): Cast length fields in recvfrom() and
sendto() calls to int.
* sendmsg.c (krb524_sendto_kdc): Cast length fields in recv() and
send() calls to int.
2000-10-06 Tom Yu <tlyu@mit.edu>
* conv_creds.c (krb524_convert_creds_plain): Use time_to_life()
and life_to_time() to do lifetime calculations, including the
adjustment of start time, to match server-side calculations.
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Use time_to_life() and
life_to_time() to do lifetime calculations. Adjust start time
backwards to deal with roundup so ticket expires at correct time.
2000-10-06 Ezra Peisach <epeisach@mit.edu>
* krb524d.c (do_connection): Do not assume that sizeof(int) == 4.
* encode.c (encode_int32, decode_int32): Do not assume
sizeof(int) == 4.
* conv_creds.c (krb524_convert_creds_kdc): Do not assume
sizeof(int) == 4 in network packet.
* cnv_tkt_skey.c (krb524int_krb_cr_tkt_int): Ensure that OTW flags
is one byte long. An error was introduced when prototypes were
widened.
* Makefile.in (includes): When testing to see if krb524_err.h
exists in the include directory, compare against the build trees
version.
2000-10-03 Ezra Peisach <epeisach@mit.edu>
* Makefile.in: Install krb524.h and krb524_err.h header file so
applications can include for prototypes.
2000-08-09 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c: Fix up static prototypes for
krb524int_krb_create_ticket(), krb524int_krb_cr_tkt_krb5(), and
krb524int_krb_cr_tkt_int(), as well as their definitions, so that
there aren't bare identifiers in the prototypes and so that there
aren't narrow types in the definitions.
2000-07-20 Danilo Almeida <dalmeida@mit.edu>
* Makefile.in: Fix build so we don't try to build an extra lib.
Fix up krb524 build so we default to krb5's krb4 but can use an
alternate.
2000-07-19 Danilo Almeida <dalmeida@mit.edu>
* Makefile.in: Make krb524 library and k524init program build on
Windows.
* krb524.def, libinit.c: Files needed to build on Windows.
* k524init.c: Use public krb_in_tkt() with realm paramter instead of
potentially private in_tkt() w/o realm parameter (which does not
even exist w/o the realm paramter in some krb4 libraries). Use
krb_save_credentials() instead of tf_init() then
tf_save_credentials() then tf_close().
* cnv_tkt_skey.c: Put copy of krb_cr_tkt_krb5() and
krb_create_ticket() as static functions in this file, calling them
krb524int_*(). Call these functions instead of the ones in the
MIT krb4 library included in the krb5 tree.
* conv_princ.c: Remove unused headers.
* k524init.c, cnv_tkt_skey.c, conv_creds.c, encode.c, misc.c,
sendmsg.c, test.c: Do not include Unix headers on Windows.
* sendmsg.c (krb524_sendto_kdc): Fix call to krb5_locate_kdc() to
use right number and types of parameters. Use krb5int_accessor()
to get at internals: krb5_locate_kdc(), krb5_max_dgram_size,
krb5_skdc_timeout_1, and krb5_skdc_timeout_shift. (The latter 3
should probably be #defines...)
2000-07-19 Danilo Almeida <dalmeida@mit.edu>
* getcred.c (main): Use correct parameters for krb5_cc_default()
in case someone actually wants to build this file.
1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
LOCAL_INCLUDES such that one can override CFLAGS from the command
line without losing CPP search patchs and defines. Some associated
Makefile cleanup.
1999-08-18 Tom Yu <tlyu@mit.edu>
* krb524d.c (do_connection): Convert to using new symbol for
DES3.
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Convert to using new
symbol for DES3.
1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Set the myfulldir and mydir variables (which are
relative to buildtop and thisconfigdir, respectively.)
Tue Sep 1 19:35:44 1998 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Add
ENCTYPE_LOCAL_DES3_HMAC_SHA1 to the list of enctypes to bash.
* krb524d.c (do_connection): Add ENCTYPE_LOCAL_DES3_HMAC_SHA1 to
the list of enctypes to search.
Wed Aug 19 13:40:28 1998 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Call krb_cr_tkt_krb5
if necessary, depending on th enctype. Force enctype to be raw
DES3 if it's another DES3 type.
* krb524d.c (kdc_get_server_key): Add integer kvno argument,
rename previous kvno arg as kvnop, to distinguish returned (found)
kvno from the input kvno.
(lookup_service_key): Add kvnop argument to allow for returned
kvno.
(do_connection): Search for DES3 keys as well as DES. Get the
found kvno as well, and use that instead of the kvno of the
incoming ticket.
Fri Jul 24 19:38:58 1998 Geoffrey King <gjking@mit.edu>
* krb524d.c (main): Fork into the background by default, also
add a -nofork command line option.
Sat Jul 18 22:10:29 1998 Geoffrey King <gjking@mit.edu>
* krb524d.c (main): Remove the variable use_other_realm.
It is not actually necessary for the new -r realm code.
Fri Jul 17 04:11:47 1998 Geoffrey King <gjking@mit.edu>
* krb524d.c (main): Accept a -r command line option to specify
a realm other than the default one.
Wed Jun 17 16:35:37 1998 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Handle null address
fields; actually use saddr (the address from the UDP header) to
generate the ticket address rather than just checking against it.
* conv_creds.c (krb524_convert_creds_plain): Punt address checks.
1998-05-06 Theodore Ts'o <tytso@rsts-11.mit.edu>
* k524init.c (main): POSIX states that getopt returns -1
when it is done parsing options, not EOF.
Wed Feb 18 16:04:44 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in (thisconfigdir): Remove trailing slash.
Thu Feb 12 21:58:56 1998 Tom Yu <tlyu@mit.edu>
* sendmsg.c: Explicitly include k5-int.h in order to get proper
prototype of krb5_locate_kdc().
Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
Thu Dec 11 23:30:30 1997 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c:
* conv_creds.c:
* conv_princ.c:
* encode.c:
* k524init.c:
* krb524d.c:
* misc.c:
* test.c: Don't include netdb.h or sys/socket.h if krb.h is
included; this works around an Ultrix bug where those headers
aren't protected against multiple inclusion.
Mon Aug 18 13:02:31 1997 Ezra Peisach <epeisach@kangaroo.mit.edu>
* configure.in: Add AC_PROG_INSTALL as we do install here.
Mon Aug 11 21:12:11 1997 Tom Yu <tlyu@mit.edu>
* convt_tkt.c: Delete; it's not needed anymore.
* test.c: Remove reference to krb524_convert_creds_addr, as that
doesn't exist anymore.
* conv_creds.c: Clean up substantially to be less convoluted.
* sendmsg.c: Fix to not do a full series of timeouts on each
server; loop over the whole list before increasing the timeout.
* configure.in: Update to use the new library build system to
build libkrb524.
* Makefile.in: Update to reflect changes in the library. Also,
use the new library build system to build libkrb524.
Thu Aug 7 17:34:59 1997 Tom Yu <tlyu@mit.edu>
* cnv_tkt_skey.c:
* krb524.h:
* krb524d.c: Add jik's patches for multihomed hosts. Fixes
krb5-misc/275.
Tue Feb 18 09:53:10 1997 Ezra Peisach <epeisach@mit.edu>
* k524init.c, test.c, cnv_tkt_skey.c: Remove include of krb4-proto.h
Tue Feb 4 20:13:37 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in: Fix up krb4 library handling properly (hopefully).
Sun Feb 2 10:06:22 1997 Ezra Peisach <epeisach@mit.edu>
* configure.in, Makefile.in: Update to new build system rules
Thu Dec 5 23:27:00 1996 Tom Yu <tlyu@mit.edu>
* krb524d.c (main): Ignore SIGHUP for now. [27]
Thu Dec 5 23:12:29 1996 Theodore Y. Ts'o <tytso@mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Change the issue time
of the V4 ticket to be the current time (since the
lifetime of the V4 ticket was calculated assuming that the
issue time would be the current time). [PR#283,PR#22]
Mon Nov 11 16:23:32 1996 Mark Eichin <eichin@cygnus.com>
* krb524d.c (do_connection): only free v4/v5 keyblock contents and
v5 ticket *once*, in cleanup branch at the end.
Thu Nov 7 15:45:16 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
* test.c (main):
* krb524d.c (main):
* k524init.c (main):
* getcred.c (main): Check the error return from
krb5_init_context(), and print an error message if
necessary.
Wed Jul 24 02:18:02 1996 Sam Hartman <hartmans@mit.edu>
* test.c (krb4_print_ticket): s/KRB4_INT4/krb5_ui_4 so we work
with Athena Kerberos4.
Wed Jul 24 01:14:27 1996 Sam Hartman <hartmans@tertius.mit.edu>
* encode.c: s/PROTOTYPE/KRB5_PROTOTYPE
* krb524.h (KRB5_PROTOTYPE): Use KRB5_PROTOTYPE not PROTOTYPE because the include file is installed and PROTOTYPE wasn't defined anyway.
Wed Jul 31 17:05:25 1996 Tom Yu <tlyu@mit.edu>
* krb524d.c: Revert prior change due to shuffling of netdb.h
Tue Jul 30 19:58:22 1996 Tom Yu <tlyu@mit.edu>
* krb524d.c: Remove #include <netdb.h> (already gotten by
kadm5/admin.h)
Fri Jul 19 20:22:47 1996 Marc Horowitz <marc@mit.edu>
* configure.in: added AC_PROG_AWK and USE_GSSAPI_LIBRARY
Tue Jul 9 16:14:33 1996 Barry Jaspan <bjaspan@mit.edu>
* krb524d.c: use kadm5 instead of kdb
Tue Jul 9 07:16:39 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
* test.c (krb4_print_ticket): Change addr to unsigned KRB4_32 from
long.
* conv_creds.c (krb524_convert_creds_plain): Change addr to a four
byte unsigned integer (from long).
Thu Jun 13 22:10:30 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* configure.in: remove ref to ET_RULES
Mon May 6 12:09:44 1996 Richard Basch <basch@lehman.com>
* conv_creds.c: Fallback to slave kdc's wasn't working; it was not
handling the error code KRB524_NOTRESP as an indicator that
the kdc is unreachable.
Sun Mar 31 01:17:26 1996 Mark Eichin <eichin@cygnus.com>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): use context->clockskew
in all time bound checks.
* cnv_tkt_skey.c (krb524_convert_tkt_skey): for time periods that
would occupy greater than 128 ticks, use the CMU algorithm, based
on the table cmu_seconds. (In conjunction with the previous
changes, even non-CMU clients can be used for the full lifetime of
a V5 ticket by rerunning krb524init when their lower
interpretation of the end time is expired.)
* cnv_tkt_skey.c (krb524_convert_tkt_skey): rather than apply fit
an extended v5 lifetime into a v4 range, give out a v4 ticket with
as much of the v5 lifetime is available "now" instead.
Tue Mar 19 17:07:44 1996 Richard Basch <basch@lehman.com>
* conv_creds.c (krb524_convert_creds_plain):
if the v5 lifetime is greater than the max v4 lifetime, use the max
v4 lifetime (0xff), rather than masking it with 0xff.
Fri Jan 12 04:37:23 1996 Mark Eichin <eichin@cygnus.com>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): rather than apply fit
an extended v5 lifetime into a v4 range, give out a v4 ticket with
as much of the v5 lifetime is available "now" instead.
Sat Jan 27 01:31:12 1996 Sam Hartman <hartmans@tertius.mit.edu>
* krb524d.c (kdc_get_server_key): If an enctype is given, then use
iit even after falling back from trying a v4salt. If we don't, we
have a good chance fo getting the DES3 TGT service key, and that
just doesn't do what we want.
Thu Jan 25 02:07:46 1996 Sam Hartman <hartmans@tertius.mit.edu>
* cnv_tkt_skey.c (krb524_convert_tkt_skey): Take both a v5 and v4
service key. Use the v5 service key to decrypt the v5 ticket, and
the v4 service key to encrypt the v4 ticket.
* krb524d.c (do_connection): Use a separate v5 and v4 service key
so that if the KDC chooses to encrypt the v5 ticket in something
besides ENCTYPE_DES_CBC_CRC, we don't lose. Also, make sure we
free keyblock contents and tickets on error.
(lookup_service_key): Pass enctype to kdc_get_server_key
(kdc_get_server_key): Only try for v4 salt if the enctype is
DES_CRC. Take enctype as an argument. This creates a problem
if the server key has a normal and v4 salt of ENCTYPE_DES_CBC_CRC
but I can't think of a good answer to this.
* k524init.c (main): Use crc32 not md5.
Wed Jan 24 20:05:47 1996 Sam Hartman <hartmans@tertius.mit.edu>
* krb524d.c (kdc_get_server_key): Try to find a v4 salt type key,
else try any des_crc32 key, else fail.
(do_connection): Lookup a crc32 key not an md5 key.
(init_master): Handle reading kdc profile.
Sun Nov 12 04:29:08 1995 Mark W. Eichin <eichin@cygnus.com>
* conv_creds.c (krb524_convert_creds_kdc): loop through all of the
addresses returned by krb5_locate_kdc, don't just try the first one.
* krb524d.c (do_connection): check for particular failures of
decode_krb5_ticket, as well as for messages that are one int long
(which will eliminate our own error replies.)
Mon Oct 9 11:34:24 1995 Ezra Peisach <epeisach@kangaroo.mit.edu>
* Makefile.in: s/test/krb524test/ to handle screw case where test
is built and interferes with configure.
Mon Sep 25 00:15:47 1995 Mark Eichin <eichin@cygnus.com>
* krb524d.c (do_connection): if recvfrom failed, just return,
don't try to use the (likely invalid) sockaddr in a reply message.
Thu Sep 14 17:36:11 1995 Mark Eichin <eichin@cygnus.com>
* krb524d.c (usage): needs to get context to pass to
cleanup_and_exit so it does get freed, since it is allocated
before parsing arguments.
(main): change caller as well.
Wed Sep 06 14:20:57 1995 Chris Provenzano (proven@mit.edu)
* cnv_tkt_skey.c, conv_creds.c, get_cred.c k524init.c krb524d.c,
* test.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g
Wed Sep 6 00:11:53 1995 Mark Eichin <eichin@cygnus.com>
* krb524d.c (main): set timeout inside while loop to prevent spin.
(cleanup_and_exit): free master_princ or close keytab, and free
the global context, to eliminate spurious storage use in malloc
debugging.
(init_master): free realm.
Tue Sep 05 22:10:34 1995 Chris Provenzano (proven@mit.edu)
* cnv_tkt_skey.c, getcred.c, k524init.c, krb524d.c, test.c :
Remove krb5_enctype references, and replace with
krb5_keytype where appropriate.
Thu Aug 24 18:40:22 1995 Theodore Y. Ts'o <tytso@dcl>
* .Sanitize: Update file list
Mon Aug 07 11:25:53 1995 Chris Provenzano (proven@mitedu)
* krb524d.c: Hacks to get it to compile with new kdb format.
Thu Jul 27 15:14:15 EDT 1995 Paul Park (pjpark@mit.edu)
* krb524d.c - Use the etype which is supplied in the krb5_keytype_array
specified by the master key type.
Mon Jul 17 15:15:01 EDT 1995 Paul Park (pjpark@mit.edu)
* krb524d.c - Add NULL stash file argument to krb5_db_fetch_mkey().
Fri Jul 7 16:07:21 EDT 1995 Paul Park (pjpark@mit.edu)
* Makefile.in - Remove all explicit library handling and LDFLAGS.
* configure.in - Add USE_<mumble> and KRB5_LIBRARIES.
Thu Jul 13 17:22:17 1995 Sam Hartman <hartmans@tertius.mit.edu>
* configure.in : Include sys/select.h if present.
Fri Jun 30 14:38:56 EDT 1995 Paul Park (pjpark@mit.edu)
* configure.in - Add --with-dbm to select between Berkeley and DBM
KDC database format.
Wed Jun 28 20:14:35 1995 Mark Eichin <eichin@cygnus.com>
* test.c: use PROTOTYPE.
Wed Jun 28 17:32:51 1995 Mark Eichin <eichin@cygnus.com>
* test.c, k524init.c, getcred.c: rewrote for old style definitiions.
* encode.c: use PROTOTYPE instead of KRB5_PROTOTYPE.
Wed Jun 28 03:04:38 1995 Mark Eichin <eichin@cygnus.com>
* krb524d.c: changed main, krb5_free_keyblock_contents to use old
style definitions.
Tue Jun 27 20:27:06 1995 Mark Eichin <eichin@cygnus.com>
* encode.c: make declarations use KRB5_PROTOTYPE, and use old
style definitions, per V5 coding style.
Tue Jun 27 15:54:57 EDT 1995 Paul Park (pjpark@mit.edu)
* cnv_tkt_skey.c - Cast key contents argument to conform to prototype.
* encode.c - Cast argument to match argument list of encode_bytes().
* krb524d.c - Add signal name argument to conform to prototype.
* sendmsg.c - Cast second argument to connect(2).
* test.c - Cast arguments to print_key() and ctime(3). Cast assignment
to key.contents.
Thu Jun 22 11:55:23 EDT 1995 Paul Park (pjpark@mit.edu)
* krb524d.c - Change KRB_CONVERT_KEY_OUTOF_DB to decrypt_key calls.
Fri Jun 16 17:09:09 EDT 1995 Paul Park (pjpark@mit.edu)
* k524init.c - Inline code from krb_save_credentials, it doesn't
exist for some K4 (e.g. /usr/athena).
Thu Jun 15 17:56:43 EDT 1995 Paul Park (pjpark@mit.edu)
* Makefile.in - Change explicit library names to -l<lib> form, and
change target link line to use $(LD) and associated flags.
* configure.in - Add shared library usage check.
Wed Jun 14 19:28:33 1995 Tom Yu (tlyu@dragons-lair)
* Makefile.in: added install rules
Fri Jun 9 19:16:49 1995 <tytso@rsx-11.mit.edu>
* configure.in: Remove standardized set of autoconf macros, which
are now handled by CONFIG_RULES.
Tue Jun 6 20:59:56 1995 Ezra Peisach <epeisach@kangaroo.mit.edu>
* test.c (do_remote): Case sockaddr_in * to sockaddr * in calling
krb524_convert_creds_addr.
(krb4_print_ticket): issue_time should be a KRB4_32
* encode.c (encode_v4tkt): Cast a the unsigned long mbz field of
KTEXT to krb5_int32 for call to encode_int32.
* conv_creds.c (krb524_convert_creds_addr): Cast sockaddr * to
sockaddr_in *.
Tue Jun 6 17:25:20 EDT 1995 Paul Park (pjpark@mit.edu)
* Makefile.in : Change $(ARCHIVE) to $(ARADD) so that updates to the
library replace modules instead of appending them.
* cnv_tkt_skey.c, conv_creds.c : Concatenate the two strings which
comprise the print format. Some compilers cannot deal with
<string><string> (e.g. Ultrix).
Mon Jun 5 22:25:33 1995 Theodore Y. Ts'o <tytso@dcl>
* Makefile.in, cnv_tkt_skey.c, conv_creds.c, conv_princ.c,
conv_tkt.c, encode.c, getcred.c, k524init.c, krb524.h,
krb524d.c, misc.c, sendmsg.c, test.c, configure.in:
Updated to use autoconf, and to use the new Kerberos
library API.
Wed Mar 27 21:15:00 1995 Keith Vetter (keithv@fusion.com)
* renamed conv_tkt_skey.c to cnv_tkt_skey.c for DOS 8.3
compatability.
* Makefile: reflected the above change
Tue Feb 28 02:31:22 1995 John Gilmore (gnu at toad.com)
* README, *.[ch]: Avoid <...> includes for our include files.
Thu Sep 15 10:47:27 1994 Theodore Y. Ts'o (tytso@dcl)
* Makefile, README, RELEASE_NOTES, conv_creds.c, conv_princ.c,
conv_tkt.c, conv_tkt.c, conv_tkt_skey.c, encode.c, getcred.c,
globals.c, k524init.c, krb524.h, krb524_err.et, krb524d.c, misc.c,
test.c: Applied new copyright notice (1993, Geer Zolat Associates
--> 1994, OpenVision Technologies, Inc.)
|