1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
|
2000-06-23 Ken Raeburn <raeburn@mit.edu>
* alt_prof.c (kadm5_get_config_params): Include des3 in supported
enctypes by default.
* ovsec_glue.c (ovsec_kadm_chpass_principal_util): Use 1024 for
hard-coded length, to match existing callers.
2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
* admin.h: Add a length parameter to kadm5_chpass_principal_util().
* admin_internal.h: Add a length parameter to
_kadm5_chpass_principal_util().
* chpass_util.c (_kadm5_chpass_principal_util): Add a length parameter,
and use it to avoid overflowing "msg_ret".
* ovsec_glue.c (ovsec_kadm_chpass_principal_util): Adjust for new
parameter in kadm5_chpass_principal_util().
* logger.c (klog_com_err_proc): Don't overflow buffer "outbuf".
2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
* configure.in, chpass_util.c, server_internal.h: Check for
existance of <memory.h>.
[from Nathan Neulinger <nneul@umr.edu>]
2000-02-26 Tom Yu <tlyu@mit.edu>
* kadm_rpc_xdr.c (xdr_cprinc3_arg): Don't XDR the nonexistent
keepold flag.
* kadm_rpc.h: Remove keepold flag from cprinc3_arg.
* admin.h: Remove keepold flag from create_principal_3, which was
kinda ridiculous.
2000-02-22 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (includes): Extract basename of header file to be
installed, since Digital UNIX 4.0 native make substitutes the
VPATH-derived pathname here.
2000-02-21 Bear Giles <bgiles@coyotesong.com>
* alt_prof.c (krb5_read_realm_params): Permit realm supported
enctypes to be unspecified, letting the KDC produce defaults.
Don't look up enctypes at all if an error is to be returned.
2000-02-18 Tom Yu <tlyu@mit.edu>
* kadm_rpc_xdr.c (xdr_chpass3_arg):
(xdr_chrand3_arg): Fix up calls to xdr_array.
2000-02-13 Tom Yu <tlyu@mit.edu>
* kadm_rpc_xdr.c: Add xdr functions for new kadm rpc functions.
* kadm_rpc.h: Add arg structs, prototypes, constants for new kadm
rpc functions.
* kadm_err.et: Add error code KADM5_SETKEY3_ETYPE_MISMATCH.
* admin.h: Add prototype for setkey_principal_3.
1999-12-01 Ken Raeburn <raeburn@mit.edu>
* logger.c (klog_vsyslog): Convert pid_t to long for printing.
1999-11-30 Ken Raeburn <raeburn@mit.edu>
* alt_prof.c (kadm5_get_config_params): Fix bug in direction of
test while walking through whitespace. Thanks to Matt Crawford.
1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
LOCAL_INCLUDES such that one can override CFLAGS from the command
line without losing CPP search patchs and defines. Some associated
Makefile cleanup.
1999-09-28 Ken Raeburn <raeburn@mit.edu>
* logger.c (lspec_parse_err_1, lspec_parse_err_2, log_file_err,
log_device_err, log_ufo_string, log_emerg_string,
log_alert_string, log_crit_string, log_err_string,
log_warning_string, log_notice_string, log_info_string,
log_debug_string): Replace char arrays with macros.
(klog_com_err_proc, klog_vsyslog): When calling syslog, supply %s
format string.
1999-09-23 Ken Raeburn <raeburn@mit.edu>
* logger.c (DEVICE_PRINT, klog_com_err_proc, klog_vsyslog): Use
proper format strings to fprintf, instead of net-supplied data.
Fold in writes of following end-of-line sequences when
appropriate.
1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Set the myfulldir and mydir variables (which are
relative to buildtop and thisconfigdir, respectively.)
Fri Dec 4 23:12:43 1998 Tom Yu <tlyu@mit.edu>
* admin.h: Add prototypes for create_principal_3,
chpass_principal_3, and randkey_principal_3.
Thu Aug 13 17:21:06 1998 Tom Yu <tlyu@mit.edu>
* alt_prof.c (krb5_read_realm_params): Fix to check
"supported_enctypes" if "kdc_supported_enctypes" isn't there.
Wed Aug 12 20:19:08 1998 Tom Yu <tlyu@mit.edu>
* alt_prof.c (krb5_read_realm_params): Use
"kdc_supported_enctypes" instead of "supported_enctypes" so that
the KDC and the kadmind will use different enctype lists.
Wed Jul 8 04:48:50 1998 Geoffrey J. King <gjking@mit.edu>
* logger.c: Add the function krb5_klog_reopen() which closes
and reopens the log files.
Mon Apr 6 19:40:05 1998 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* Makefile.in (includes): Don't call mkdir unless the directory
exists.
Fri Feb 27 22:30:41 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* configure.in: Move tests from all of kadm5's subdirectories into
this configure.in, and make it generate makefiles for all
of the subdirectories.
* Makefile.in: Add a LOCAL_SUBDIRS macro for all subdirectories in
the kadm5 library.
Wed Feb 25 15:00:10 1998 Ezra Peisach <epeisach@mit.edu>
* alt_prof.c (krb5_free_realm_params): Free realm_acl_file portion
of structure.
Wed Feb 18 16:13:56 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in: Remove trailing slash from thisconfigdir. Fix up
BUILDTOP for new conventions.
Fri Feb 13 21:33:27 1998 Tom Yu <tlyu@mit.edu>
* admin.h:
* kadm_rpc.h:
* kadm_rpc_xdr.c: Update header locations.
Mon Feb 2 17:02:29 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* configure.in, Makefile.in: Remove the CopySrcHeader and
CopyHeader macros from configure.in and substitute
equivalent functionality in Makefile.in
Tue Jan 20 23:06:36 1998 Tom Yu <tlyu@mit.edu>
* alt_prof.c (kadm5_get_config_params): Add support for Cygnus chpw.
* admin.h: Add support for Cygnus chpw.
Mon Oct 13 10:48:24 1997 Ezra Peisach <epeisach@mit.edu>
* alt_prof.c (kadm5_get_config_params): When KADM5_CONFIG_ENCTYPES
is set on the input parameters, allocate a new copy of the
key_salts for the output parameters.
(kadm5_free_config_params): Free the admin_server and admin_lockfile
names.
Tue Oct 7 07:48:12 1997 Ezra Peisach <epeisach@mit.edu>
* logger.c: Include ctype.h for isspace definition.
Tue Jul 1 02:31:07 1997 Tom Yu <tlyu@mit.edu>
* kadm_rpc.h, kadm_rpc_xdr.c: Add support for setv4key.
Sun Jun 29 14:52:04 1997 Tom Yu <tlyu@mit.edu>
* kadm_err.et: Add support for kadm5_setv4key_principal.
* admin.h: Add prototype for kadm5_setv4key_principal.
Wed May 28 13:34:17 1997 Barry Jaspan <bjaspan@mit.edu>
* admin.h: add prototype for kadm5_setkey_principal
* misc_free.c (kadm5_free_key_data): add kadm5_free_data
Mon Mar 31 17:41:11 1997 Barry Jaspan <bjaspan@mit.edu>
* kadm_err.et, kadm_rpc.h, kadm_rpc_xdr.c: add support for
setkey_principal
Thu Jan 16 19:01:00 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in (all-prerecurse): Update to use double-colon rules.
Wed Jan 15 20:43:01 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in:
* configure.in: Update to new libarary build procedure.
Mon Nov 11 17:01:40 1996 Barry Jaspan <bjaspan@mit.edu>
* kadm_rpc_xdr.c: fix memory leak handling key_data and tl_data
Wed Nov 6 10:20:36 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
* kadm_err.et: New error codes for KADM5_MISSING_CONF_PARAMS and
KADM5_BAD_SERVER_NAME.
Mon Nov 4 21:16:01 1996 Theodore Y. Ts'o <tytso@mit.edu>
* alt_prof.c (krb5_aprof_init): If the user specifies the config
file using a configuration file, it must exist.
Otherwise, krb5_aprof_init will return an error.
(kadm5_get_config_params): If aprof_init returns an error,
it should return an error as well.
Wed Nov 6 17:45:43 1996 Barry Jaspan <bjaspan@mit.edu>
* kadm_rpc_xdr.c (xdr_krb5_principal): handle a NULL principal
pointer (this can happen when get_principal is passed a mask
without KADM5_PRINCIPAL in it, and will cause a beta 7 kadmind to
coredump)
Fri Nov 1 13:16:16 1996 Barry Jaspan <bjaspan@mit.edu>
* kadm_err.et: update for new tl_data semantics [krb5-admin/140]
Fri Oct 25 23:47:26 1996 Tom Yu <tlyu@mit.edu>
* configure.in, Makefile.in: Tweaks to prevent unecessary
rebuilding.
Mon Oct 21 21:23:44 1996 Tom Yu <tlyu@mit.edu>
* Makefile.in: Fixes for new directory recursion method; also
fixes for inclusion sequencing.
Mon Oct 21 16:29:11 1996 Barry Jaspan <bjaspan@mit.edu>
* server_internal.h (ALL_PRINC_MASK): add KADM5_TL_DATA and
KADM5_KEY_DATA to ALL_PRINC_MASK [krb5-admin/20]
Fri Oct 18 15:44:14 1996 Barry Jaspan <bjaspan@mit.edu>
* kadm_rpc_xdr.c, misc_free.c, server_internal.h: include stdlib.h
instead of malloc.h [krb5-admin/35]
Tue Oct 15 18:01:51 1996 Barry Jaspan <bjaspan@mit.edu>
* logger.c (krb5_klog_init): remember to call openlog() when
defaulting to syslog because nothing else was specified
(klog_vsyslog): enable VERBOSE_LOGS so we get the process name and
pid [krb5-kdc/63]
Thu Sep 26 17:45:18 1996 Barry Jaspan <bjaspan@mit.edu>
* alt_prof.c: don't allow admin_dbname or admin_lockfile to be
independetly configured
Fri Sep 20 16:52:07 1996 Barry Jaspan <bjaspan@mit.edu>
* configure.in: add unit-test directory
Wed Sep 18 12:35:16 1996 Barry Jaspan <bjaspan@mit.edu>
* alt_prof.c (kadm5_get_config_params): set max_life default to 10
hours, instead of 0
Tue Sep 17 15:09:28 1996 Barry Jaspan <bjaspan@mit.edu>
* server_internal.h (ALL_PRINC_MASK): Add MAX_RLIFE to
ALL_PRINC_MASK.
Tue Sep 10 01:47:39 1996 Mark Eichin <eichin@cygnus.com>
* alt_prof.c (krb5_aprof_init): use profile_init_path on fname,
not profile_init.
Wed Aug 28 16:11:50 1996 Barry Jaspan <bjaspan@mit.edu>
* alt_prof.c (kadm5_get_config_params): fix default semantics to
agree with api-funcspec.tex
Mon Aug 26 17:02:55 1996 Barry Jaspan <bjaspan@mit.edu>
* admin.h: KRB5_TL_KADM5_E_DATA moved to kdb.h
Fri Aug 2 13:19:29 1996 Barry Jaspan <bjaspan@DUN-DUN-NOODLES>
* alt_prof.c (kadm5_get_config_params): alloc enough bytes for
adbname
* kadm_rpc_xdr.c (xdr_krb5_kvno): assign tmp before xdr'ing it to
avoid a spurious purify error
Thu Jul 25 12:04:32 1996 Theodore Y. Ts'o <tytso@mit.edu>
* admin_internal.h (_KADM5_CHECK_HANDLE): Add parenthesis around
assignment used as truth value to reduce gcc -Wall flames.
* misc_free.c (kadm5_free_name_list, krb5_free_key_data_contents:
Add KADM5_OK return value upon success.
Wed Jul 24 18:18:39 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* Makefile.in, configure.in: fix shared lib lossage by
rearrangement of subdirectories
Tue Jul 23 16:49:56 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* Makefile.in: delete extraneous trailing backslash from GENSRCS
and GENOBJS
Mon Jul 22 04:17:23 1996 Marc Horowitz <marc@mit.edu>
* configure.in (LIBS): add -lgen to LIBS whenever compile is
found. Solaris requires it.
* chpass_util.c (_kadm5_chpass_principal_util): the calls to
kadm5_free_{princicpal,policy}_ent used server_handle instead of
lhandle, which caused problems in the api versioning code.
Thu Jul 18 19:50:39 1996 Marc Horowitz <marc@mit.edu>
* configure.in: removed ET_RULES, replaced with AC_PROG_AWK
Mon Jul 15 16:52:44 1996 Barry Jaspan <bjaspan@mit.edu>
* client_init.c (_kadm5_init_any): use krb5_get_in_tkt_keytab
instead of changing krb5_defkeyname
Mon Jul 15 16:36:02 1996 Marc Horowitz <marc@mit.edu>
* Makefile.in (CLNTOBJS), AC_REPLACE_FUNCS: check for setenv, and
link against setenv.o if it's needed.
Fri Jul 12 15:06:48 1996 Marc Horowitz <marc@mit.edu>
* svr_iters.c (glob_to_regexp:append_realm): the semantics and
code were somewhat confused. they are now fixed.
* logger.c (HAVE_*): turn all the "#if HAVE_*" into
"#ifdef HAVE_*"
* configure.in (AC_CHECK_FUNCS): check for the functions which
logger.c checks for.
* svr_principal.c (kadm5_get_principal): due to the the api
versioning, it is possible for this function to be called with a
three argument prototype. in this case, do not modify mask,
because this will clobber the stack on some platforms.
* client_principal.c (kadm5_create_principal): be more careful
about what sorts of things are referenced, passed down, and passed
back if the caller is api v1.
Wed Jul 10 01:29:34 1996 Marc Horowitz <marc@mit.edu>
* configure.in: added autoconf support
Tue Jul 9 17:38:43 1996 Marc Horowitz <marc@mit.edu>
* svr_iters.c (*_REGEXPS): rework the conditionals to operate
as functions of function symbols tested by configure.
* client_init.c (setenv, unsetenv declarations): make them the
same as the stdlib declarations, if they're going to be here at
all.
* Makefile.in: reworked to support building both libraries. this
required a bunch of changes, including some coordinating ones in
aclocal.m4
Tue Jul 9 16:26:26 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_decrypt_key): add kadm5_decrypt_key
Mon Jul 8 16:55:22 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_iters.c (kadm5_get_either): append local ream to globs with
no realm
* alt_prof.c: fix dbname, admin_dbname, and admin_lockfile to
derive from each other as in spec
* adb_policy.c: add create_db/destroy_db
* adb_openclose.c: add create_db/destroy_db, fix handling of
permanent locks, handle multiple lock files via static linked list
* adb.h: update create_db/destroy_db to make params instead of
explicit values
* Makefile.ov (TOP): Use ../../kadmin, not kadmin.ov
|