1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
|
2001-07-31 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (check_pw_reuse): Change argument for
n_pw_hist_data to unsigned to be consistant with calling convention.
2001-07-25 Ezra Peisach <epeisach@mit.edu>
* adb_xdr.c (xdr_krb5_key_data): Use xdr_krb5_ui_2 instead of
xdr_krb5_int16 for key_data_length field.
2001-07-06 Ezra Peisach <epeisach@mit.edu>
* svr_iters.c: Declare kadm5_get_either static
2001-06-20 Mitchell Berger <mitchb@mit.edu>
* server_dict.c: Silly typo fixed.
2001-06-18 Ezra Peisach <epeisach@mit.edu>
* server_misc.c (passwd_check): cast argument to
islower()/isupper(), isdigit(), ispunct() to int.
* server_acl.c (acl_parse_line): Cast argument to
isupper()/isspace() to int.
2001-06-08 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (check_pw_reuse): Cleanup assignment in conditional.
2001-06-04 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c: Cleanup assignments in conditionals.
Sun Feb 18 17:40:23 2001 Ezra Peisach <epeisach@mit.edu>
* adb_openclose.c, adb_policy.c, server_acl.c, server_dict.c,
server_init.c, server_kdb.c, server_misc.c, svr_iters.c,
svr_principal.c: Cleanup assignments in conditionals, variables
sadowing one another, unused variables and declared some functions
as static.
2000-10-17 Ezra Peisach <epeisach@mit.edu>
* svr_chpass_util.c (kadm5_chpass_principal_util): Change msg_len
to unsigned int.
Tue Oct 10 03:09:27 2000 Ezra Peisach <epeisach@mit.edu>
* server_dict.c (init_dict): Change syslog() to krb5_klog_syslog()
so that errors go to the intended place as indicated by krb5.conf.
2000-06-30 Tom Yu <tlyu@mit.edu>
* adb_openclose.c (osa_adb_create_db): Default to btree.
(osa_adb_init_db): Set up btinfo as well.
(osa_adb_open_and_lock): Try btree, then hash.
* Makefile.in (SHLIB_EXPDEPS): Add libdb.
(SHLIB_EXPLIBS): Add -ldb.
2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
* adb_openclose.c (osa_adb_create_db): Open lock files using O_EXCL
and fdopen() the descriptor instead of using fopen().
* svr_chpass_util.c (kadm5_chpass_principal_util): Adjust for new
length parameter in both kadm5_chpass_principal_util() and in
_kadm5_chpass_principal_util().
2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
* adb_free.c, adb_xdr.c, server_dict.c: Check for existance
of<memory.h>.
[from Nathan Neulinger <nneul@umr.edu>]
2000-03-16 Ken Raeburn <raeburn@mit.edu>
Matt Crawford <crawdad@fnal.gov>
* server_acl.c: Include kadm5/admin.h.
(struct _acl_entry): Add new fields for restrictions.
(struct _wildstate): New type.
(acl_parse_line): Input is const. Parse and save restrictions.
Allow backslash at end of line to indicate continuation.
(acl_parse_restrictions, acl_impose_restrictions): New functions.
(acl_free_entries): Free up restriction data if any.
(acl_load_acl_file): Don't use tmpbuf for catch-all entry.
(acl_match_data): Add new arguments for wildcard state.
(acl_find_entry): Support wildcard component matching.
Reorganized checks for bad ACL entries.
(acl_check): Add restrictions parameter.
* server_acl.h (struct _restriction): New type.
(acl_check): Update prototype.
(acl_impose_restrictions): Declare.
2000-02-26 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal_3): Remove keepold
argument.
* Makefile.in (LIBMAJOR): Bump major number due to call signature
changes.
2000-02-25 Ken Raeburn <raeburn@mit.edu>
* server_acl.c (acl_get_line): Patch from Matt Crawford to permit
line continuation by ending a line with a backslash.
2000-02-13 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_setkey_principal_3): New function.
1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
LOCAL_INCLUDES such that one can override CFLAGS from the command
line without losing CPP search patchs and defines. Some associated
Makefile cleanup.
1999-09-08 Ken Raeburn <raeburn@mit.edu>
* adb_openclose.c (osa_adb_fini_db): Don't fclose the lock file if
the lock is permanent, because it's already been done.
Mon Dec 7 15:19:11 1998 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (kadm5_randkey_principal_3): Fix typo in
arguments to krb5_dbe_crk().
1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Set the myfulldir and mydir variables (which are
relative to buildtop and thisconfigdir, respectively.)
Fri Dec 4 23:10:32 1998 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal): Modify to call
create_principal_3.
(kadm5_create_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
(kadm5_chpass_principal): Modify to call chpass_principal_3.
(kadm5_chpass_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
(kadm5_randkey_principal): Modify to call randkey_principal_3.
(kadm5_randkey_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
Tue Nov 17 18:20:48 1998 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal):
(kadm5_chpass_principal):
(kadm5_randkey_principal): Fix up for new calling conventions of
dbe_crk and dbe_cpw.
1998-10-27 Marc Horowitz <marc@mit.edu>
* server_kdb.c, svr_principal.c: convert to new crypto api
Sun Jul 26 18:09:55 1998 Sam Hartman <hartmans@utwig.mesas.com>
* Makefile.in (LIBMAJOR): bump libmajor
Wed Apr 15 18:06:14 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in (SHLIB_EXPDEPS):
(SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.
Fri Feb 27 22:33:05 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Changed thisconfigdir to point at the lib/kadm5
directory, since we've moved all of the configure.in
tests to the toplevel lib/kadm5 configure.in.
Instead of adding @LIBS@ to the list of libraries which
should be linked as shared library dependencies, add
@GEN_LIB@ and @AIX_DB_LIB@ which will get expanded if
necessary.
Wed Feb 18 16:15:22 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in: Remove trailing slash from thisconfigdir. Fix up
BUILDTOP for new conventions.
Fri Feb 13 21:30:58 1998 Tom Yu <tlyu@mit.edu>
* adb_xdr.c: Update header locations.
* Makefile.in (LIBMAJOR): Bump major version to reflect change in
rpc library.
Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* configure.in, Makefile.in: Remove the CopySrcHeader macro
from configure.in and substitute equivalent
functionality in Makefile.in
Mon Oct 13 10:59:22 1997 Ezra Peisach <epeisach@mit.edu>
* server_init.c (kadm5_destroy): Call kadm5_free_config_params.
* server_acl.c: Include <ctype.h> for tolower().
(acl_load_acl_file): Close acl file, even when acl_catchall_entry is
not set.
Wed Aug 6 20:22:23 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in: Add flags to conditionally compile with Hesiod.
* server_misc.c: Add support for checking GECOS field of Hesiod
passwd entry.
Fri Jul 25 15:37:08 1997 Tom Yu <tlyu@mit.edu>
* server_init.c: Change a few calls to align with the new kdb
API.
* Makefile.in: Bump version.
Tue Jul 1 02:32:49 1997 Tom Yu <tlyu@mit.edu>
* server_acl.h: Fix ACL_ALL_MASK to include ACL_SETKEY.
* svr_principal.c: Fix setv4key_principal.
Sun Jun 29 14:52:51 1997 Tom Yu <tlyu@mit.edu>
* svr_principal.c: Add new function kadm5_setv4key_principal.
Mon Mar 31 17:40:24 1997 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c, server_acl.h, svr_pricipal.c: add support for
setkey_principal
Sun Mar 9 13:40:33 1997 Tom Yu <tlyu@mit.edu>
* svr_principal.c (add_to_history): Don't call realloc() on a NULL
pointer, lest non-ANSI compliant systems like SunOS fail.
Sat Feb 22 01:34:08 1997 Sam Hartman <hartmans@tertius.mit.edu>
* Makefile.in (SHLIB_EXPDEPS): s/.so/$(SHLIBEXT)
Wed Jan 15 20:59:11 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in:
* configure.in: Update to new library build procedure.
Tue Dec 3 15:14:29 1996 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c (acl_load_acl_file): log errors via
krb5_klog_syslog, not fprintf and com_err [krb5-admin/238]; don't
coredump when an acl line is too long; handle catchall_entry ==
NULL
Fri Nov 22 11:11:34 1996 Sam Hartman <hartmans@mit.edu>
* Makefile.in (SHLIB_LIBS): Do not link shared against -ldb [224]
Tue Nov 26 03:04:04 1996 Sam Hartman <hartmans@mit.edu>
* server_acl.c (acl_load_acl_file): Fix coredump by allowing
catchall_entry to be null, but do not reference it if it is.
Thanks to marc. [242]
Mon Nov 25 17:53:20 1996 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c: set acl_catchall_entry to "" instead of NULL,
since it is presumed to contain something, but we don't want any
default entry [krb5-admin/237]
Wed Nov 13 19:20:36 1996 Tom Yu <tlyu@mit.edu>
* Makefile.in (clean-unix): Remove shared/*.
Mon Nov 11 17:01:00 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): fix memory leak
handling tl_data
Thu Nov 7 16:42:38 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_iters.c (glob_to_regexp): a principal glob with no @
defaults to @*, not @LOCAL.REAM [krb5-admin/161]
Wed Nov 6 10:45:12 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
* server_init.c (kadm5_init): Use a more fined grained error
code, KADM5_MISSING_CONF_PARAMS instead of
KRB5_CONFIG_BADFORMAT
Wed Nov 6 16:22:05 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): don't free the
caller's tl_data (oops)
Fri Nov 1 13:18:40 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): update for new tl_data
semantics [krb5-admin/140]
Mon Oct 21 16:28:52 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): fix modify_principal's
handling of KADM5_TL_DATA [krb5-admin/20]
Fri Oct 18 14:24:12 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_misc_free.c, server_dict.c, adb_policy.c, adb_free.c:
include stdlib.h instead of malloc.h [krb5-admin/35]
* adb_openclose.c (osa_adb_rename_db): create the destination
database if necessary before renaming [krb5-admin/58]
Thu Oct 17 16:22:07 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c: update for new pw_expiration semantics
[krb5-admin/87]
Tue Oct 8 13:33:48 1996 Barry Jaspan <bjaspan@mit.edu>
* adb_policy.c (osa_adb_rename_policy_db): rename
osa_adb_rename_policy to *_db
* adb_openclose.c, adb_policy.c: implement database renaming;
also, only create a db lockfile after the database has been
successfully created [krb5-admin/62]
Fri Oct 4 08:40:21 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
* svr_principal.c (kadm5_get_principal): Do not assume malloc(0)
returns non-NULL. [krb5-admin/29]
Fri Aug 2 14:07:31 1996 Barry Jaspan <bjaspan@DUN-DUN-NOODLES>
* svr_principal.c: remove krb5_free_keyblock_contents (moved to
libkrb5.a)
Fri Jul 26 17:48:14 1996 Sam Hartman <hartmans@mit.edu>
* svr_principal.c (krb5_copy_key_data_contents): If
key_data_length[i] == 0, don't complain if malloc(0) returns 0;
this is allowed by ANSI.
Thu Jul 25 18:42:47 1996 Sam Hartman <hartmans@mit.edu>
* configure.in (LIBS): Link against -ldb under AIX for shared
library construction; we should eventually make libdb a shared
library.
Wed Jul 24 18:21:28 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* Makefile.in, configure.in: break out server lib into a
subdirectory
|
