1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
|
2004-08-21 Tom Yu <tlyu@mit.edu>
* libkadm5srv.exports: Update for previous renaming.
2004-08-20 Alexandra Ellwood <lxs@mit.edu>
* server_acl.[ch]: renamed acl_* functions to kadm5int_acl_*
2004-06-16 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (clean-mac): Target deleted.
2004-06-04 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (LIBBASE): Renamed from LIB.
2004-04-22 Ken Raeburn <raeburn@mit.edu>
* libkadm5srv.exports: New file.
2003-09-02 Alexandra Ellwood <lxs@mit.edu>
* svr_principal.c: Added Apple password server support.
2003-06-13 Tom Yu <tlyu@mit.edu>
* server_kdb.c (kdb_init_hist): Force history principal's key to
be of the same enctype as the master key, as searches for it later
on explicitly specify the enctype.
2003-04-01 Tom Yu <tlyu@mit.edu>
* Makefile.in: Remove $(SHLIB_DBLIB_DEPS) and related variables.
(SHLIB_EXPDEPS): Remove $(SHLIB_DBLIB_DEPS).
(SHLIB_EXPLIBS): Change $(DB_LIB) to $(KDB5_DB_LIB).
2003-01-12 Ezra Peisach <epeisach@bu.edu>
* svr_iters.c (kadm5_get_either): For POSIX_REGEXPS
(i.e. regcomp), call regfree() to cleanup memory.
2003-01-10 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Add AC_SUBST_FILE marker for lib_frag and libobj_frag.
2003-01-05 Sam Hartman <hartmans@mit.edu>
* server_dict.c: Remove declaration of errno
* adb_policy.c: Remove declaration of errno
2002-12-16 Ezra Peisach <epeisach@bu.edu>
* Makefile.in: Change to allow compilation with-system-db and
shared libraries.
2002-11-07 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_setkey_principal_3): Apply patch from
Emily Ratliff to allow n_ks_tuple to be zero, which is the case if
being called from kadmind answering a client's setkey_principal
request.
2002-10-15 Ezra Peisach <epeisach@bu.edu>
* server_init.c (kadm5_lock, kadm5_unlock): Return KADM5_OK
instead of falling off end of function.
2002-10-08 Tom Yu <tlyu@mit.edu>
* adb_openclose.c (osa_adb_init_db): Reset opencnt.
(osa_adb_open_and_lock): Don't open multiple times; merely
increment opencnt if already open.
(osa_adb_close_and_unlock): Decrement opencnt instead of
unconditionaly closing.
* server_init.c (kadm5_lock, kadm5_unlock): New functions to
support persistent exclusive locks across multiple API calls.
2002-08-29 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Revert $(S)=>/ change, for Windows support.
2002-08-23 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
2002-07-17 Ken Raeburn <raeburn@mit.edu>
* svr_iters.c (struct iter_data): Replace DynObject "matches" with
pointer, allocation size, current count, and error flag.
(get_either_iter): Grow array if needed, noting failures.
(kadm5_get_either): Set up the array before calling the iterator
and use their values after.
* Makefile.in (SHLIB_EXPDEPS, SHLIB_EXPLIBS): Drop libdyn
references.
2002-03-06 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (LIBMAJOR): Bump to avoid Heimdal conflict.
2002-03-02 Sam Hartman <hartmans@mit.edu>
* server_acl.c (acl_find_entry): Patch from sxw@sxw.org.uk:
patch to correct handling of ACL targets. Previous patch from
Matt Crawford seems to only work for * targets where it ignores
the restrictions. This patch seems to work for all the semantics
described in MATt's original message, at least as far as I tested.
2001-10-22 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_decrypt_key): For now, coerce enctype of
output keyblock in case we got a match on a similar enctype.
2001-10-16 Mitchell Berger <mitchb@mit.edu>
Matt Crawford <crawdad@fnal.gov>
* svr_principal.c (add_to_history): If the policy a principal uses has
been changed to hold a lesser number of history entries than it did
before, extract the correct number and value of old keys from the
history array into a newly allocated array of the proper size. Failing
to do this made kadmind vulnerable to a crash upon changing such a
principal's password. Original patch written by Matt Crawford, with
a few changes.
2001-10-09 Ken Raeburn <raeburn@mit.edu>
* server_acl.h: Make prototypes unconditional.
2001-07-31 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (check_pw_reuse): Change argument for
n_pw_hist_data to unsigned to be consistant with calling convention.
2001-07-25 Ezra Peisach <epeisach@mit.edu>
* adb_xdr.c (xdr_krb5_key_data): Use xdr_krb5_ui_2 instead of
xdr_krb5_int16 for key_data_length field.
2001-07-06 Ezra Peisach <epeisach@mit.edu>
* svr_iters.c: Declare kadm5_get_either static
2001-06-20 Mitchell Berger <mitchb@mit.edu>
* server_dict.c: Silly typo fixed.
2001-06-18 Ezra Peisach <epeisach@mit.edu>
* server_misc.c (passwd_check): cast argument to
islower()/isupper(), isdigit(), ispunct() to int.
* server_acl.c (acl_parse_line): Cast argument to
isupper()/isspace() to int.
2001-06-08 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (check_pw_reuse): Cleanup assignment in conditional.
2001-06-04 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c: Cleanup assignments in conditionals.
Sun Feb 18 17:40:23 2001 Ezra Peisach <epeisach@mit.edu>
* adb_openclose.c, adb_policy.c, server_acl.c, server_dict.c,
server_init.c, server_kdb.c, server_misc.c, svr_iters.c,
svr_principal.c: Cleanup assignments in conditionals, variables
sadowing one another, unused variables and declared some functions
as static.
2000-10-17 Ezra Peisach <epeisach@mit.edu>
* svr_chpass_util.c (kadm5_chpass_principal_util): Change msg_len
to unsigned int.
Tue Oct 10 03:09:27 2000 Ezra Peisach <epeisach@mit.edu>
* server_dict.c (init_dict): Change syslog() to krb5_klog_syslog()
so that errors go to the intended place as indicated by krb5.conf.
2000-06-30 Tom Yu <tlyu@mit.edu>
* adb_openclose.c (osa_adb_create_db): Default to btree.
(osa_adb_init_db): Set up btinfo as well.
(osa_adb_open_and_lock): Try btree, then hash.
* Makefile.in (SHLIB_EXPDEPS): Add libdb.
(SHLIB_EXPLIBS): Add -ldb.
2000-06-23 Nalin Dahyabhai <nalin@redhat.com>
* adb_openclose.c (osa_adb_create_db): Open lock files using O_EXCL
and fdopen() the descriptor instead of using fopen().
* svr_chpass_util.c (kadm5_chpass_principal_util): Adjust for new
length parameter in both kadm5_chpass_principal_util() and in
_kadm5_chpass_principal_util().
2000-05-31 Wilfredo Sanchez <tritan@mit.edu>
* adb_free.c, adb_xdr.c, server_dict.c: Check for existance
of<memory.h>.
[from Nathan Neulinger <nneul@umr.edu>]
2000-03-16 Ken Raeburn <raeburn@mit.edu>
Matt Crawford <crawdad@fnal.gov>
* server_acl.c: Include kadm5/admin.h.
(struct _acl_entry): Add new fields for restrictions.
(struct _wildstate): New type.
(acl_parse_line): Input is const. Parse and save restrictions.
Allow backslash at end of line to indicate continuation.
(acl_parse_restrictions, acl_impose_restrictions): New functions.
(acl_free_entries): Free up restriction data if any.
(acl_load_acl_file): Don't use tmpbuf for catch-all entry.
(acl_match_data): Add new arguments for wildcard state.
(acl_find_entry): Support wildcard component matching.
Reorganized checks for bad ACL entries.
(acl_check): Add restrictions parameter.
* server_acl.h (struct _restriction): New type.
(acl_check): Update prototype.
(acl_impose_restrictions): Declare.
2000-02-26 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal_3): Remove keepold
argument.
* Makefile.in (LIBMAJOR): Bump major number due to call signature
changes.
2000-02-25 Ken Raeburn <raeburn@mit.edu>
* server_acl.c (acl_get_line): Patch from Matt Crawford to permit
line continuation by ending a line with a backslash.
2000-02-13 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_setkey_principal_3): New function.
1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
LOCAL_INCLUDES such that one can override CFLAGS from the command
line without losing CPP search patchs and defines. Some associated
Makefile cleanup.
1999-09-08 Ken Raeburn <raeburn@mit.edu>
* adb_openclose.c (osa_adb_fini_db): Don't fclose the lock file if
the lock is permanent, because it's already been done.
Mon Dec 7 15:19:11 1998 Ezra Peisach <epeisach@mit.edu>
* svr_principal.c (kadm5_randkey_principal_3): Fix typo in
arguments to krb5_dbe_crk().
1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Set the myfulldir and mydir variables (which are
relative to buildtop and thisconfigdir, respectively.)
Fri Dec 4 23:10:32 1998 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal): Modify to call
create_principal_3.
(kadm5_create_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
(kadm5_chpass_principal): Modify to call chpass_principal_3.
(kadm5_chpass_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
(kadm5_randkey_principal): Modify to call randkey_principal_3.
(kadm5_randkey_principal_3): New function including flag to keep
old keys and optional explicit keysalt_tuples.
Tue Nov 17 18:20:48 1998 Tom Yu <tlyu@mit.edu>
* svr_principal.c (kadm5_create_principal):
(kadm5_chpass_principal):
(kadm5_randkey_principal): Fix up for new calling conventions of
dbe_crk and dbe_cpw.
1998-10-27 Marc Horowitz <marc@mit.edu>
* server_kdb.c, svr_principal.c: convert to new crypto api
Sun Jul 26 18:09:55 1998 Sam Hartman <hartmans@utwig.mesas.com>
* Makefile.in (LIBMAJOR): bump libmajor
Wed Apr 15 18:06:14 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in (SHLIB_EXPDEPS):
(SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.
Fri Feb 27 22:33:05 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Changed thisconfigdir to point at the lib/kadm5
directory, since we've moved all of the configure.in
tests to the toplevel lib/kadm5 configure.in.
Instead of adding @LIBS@ to the list of libraries which
should be linked as shared library dependencies, add
@GEN_LIB@ and @AIX_DB_LIB@ which will get expanded if
necessary.
Wed Feb 18 16:15:22 1998 Tom Yu <tlyu@mit.edu>
* Makefile.in: Remove trailing slash from thisconfigdir. Fix up
BUILDTOP for new conventions.
Fri Feb 13 21:30:58 1998 Tom Yu <tlyu@mit.edu>
* adb_xdr.c: Update header locations.
* Makefile.in (LIBMAJOR): Bump major version to reflect change in
rpc library.
Wed Jan 28 16:32:36 1998 Theodore Ts'o <tytso@rsts-11.mit.edu>
* configure.in, Makefile.in: Remove the CopySrcHeader macro
from configure.in and substitute equivalent
functionality in Makefile.in
Mon Oct 13 10:59:22 1997 Ezra Peisach <epeisach@mit.edu>
* server_init.c (kadm5_destroy): Call kadm5_free_config_params.
* server_acl.c: Include <ctype.h> for tolower().
(acl_load_acl_file): Close acl file, even when acl_catchall_entry is
not set.
Wed Aug 6 20:22:23 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in: Add flags to conditionally compile with Hesiod.
* server_misc.c: Add support for checking GECOS field of Hesiod
passwd entry.
Fri Jul 25 15:37:08 1997 Tom Yu <tlyu@mit.edu>
* server_init.c: Change a few calls to align with the new kdb
API.
* Makefile.in: Bump version.
Tue Jul 1 02:32:49 1997 Tom Yu <tlyu@mit.edu>
* server_acl.h: Fix ACL_ALL_MASK to include ACL_SETKEY.
* svr_principal.c: Fix setv4key_principal.
Sun Jun 29 14:52:51 1997 Tom Yu <tlyu@mit.edu>
* svr_principal.c: Add new function kadm5_setv4key_principal.
Mon Mar 31 17:40:24 1997 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c, server_acl.h, svr_pricipal.c: add support for
setkey_principal
Sun Mar 9 13:40:33 1997 Tom Yu <tlyu@mit.edu>
* svr_principal.c (add_to_history): Don't call realloc() on a NULL
pointer, lest non-ANSI compliant systems like SunOS fail.
Sat Feb 22 01:34:08 1997 Sam Hartman <hartmans@tertius.mit.edu>
* Makefile.in (SHLIB_EXPDEPS): s/.so/$(SHLIBEXT)
Wed Jan 15 20:59:11 1997 Tom Yu <tlyu@mit.edu>
* Makefile.in:
* configure.in: Update to new library build procedure.
Tue Dec 3 15:14:29 1996 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c (acl_load_acl_file): log errors via
krb5_klog_syslog, not fprintf and com_err [krb5-admin/238]; don't
coredump when an acl line is too long; handle catchall_entry ==
NULL
Fri Nov 22 11:11:34 1996 Sam Hartman <hartmans@mit.edu>
* Makefile.in (SHLIB_LIBS): Do not link shared against -ldb [224]
Tue Nov 26 03:04:04 1996 Sam Hartman <hartmans@mit.edu>
* server_acl.c (acl_load_acl_file): Fix coredump by allowing
catchall_entry to be null, but do not reference it if it is.
Thanks to marc. [242]
Mon Nov 25 17:53:20 1996 Barry Jaspan <bjaspan@mit.edu>
* server_acl.c: set acl_catchall_entry to "" instead of NULL,
since it is presumed to contain something, but we don't want any
default entry [krb5-admin/237]
Wed Nov 13 19:20:36 1996 Tom Yu <tlyu@mit.edu>
* Makefile.in (clean-unix): Remove shared/*.
Mon Nov 11 17:01:00 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): fix memory leak
handling tl_data
Thu Nov 7 16:42:38 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_iters.c (glob_to_regexp): a principal glob with no @
defaults to @*, not @LOCAL.REAM [krb5-admin/161]
Wed Nov 6 10:45:12 1996 Theodore Ts'o <tytso@rsts-11.mit.edu>
* server_init.c (kadm5_init): Use a more fined grained error
code, KADM5_MISSING_CONF_PARAMS instead of
KRB5_CONFIG_BADFORMAT
Wed Nov 6 16:22:05 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): don't free the
caller's tl_data (oops)
Fri Nov 1 13:18:40 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): update for new tl_data
semantics [krb5-admin/140]
Mon Oct 21 16:28:52 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c (kadm5_modify_principal): fix modify_principal's
handling of KADM5_TL_DATA [krb5-admin/20]
Fri Oct 18 14:24:12 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_misc_free.c, server_dict.c, adb_policy.c, adb_free.c:
include stdlib.h instead of malloc.h [krb5-admin/35]
* adb_openclose.c (osa_adb_rename_db): create the destination
database if necessary before renaming [krb5-admin/58]
Thu Oct 17 16:22:07 1996 Barry Jaspan <bjaspan@mit.edu>
* svr_principal.c: update for new pw_expiration semantics
[krb5-admin/87]
Tue Oct 8 13:33:48 1996 Barry Jaspan <bjaspan@mit.edu>
* adb_policy.c (osa_adb_rename_policy_db): rename
osa_adb_rename_policy to *_db
* adb_openclose.c, adb_policy.c: implement database renaming;
also, only create a db lockfile after the database has been
successfully created [krb5-admin/62]
Fri Oct 4 08:40:21 1996 Ezra Peisach <epeisach@kangaroo.mit.edu>
* svr_principal.c (kadm5_get_principal): Do not assume malloc(0)
returns non-NULL. [krb5-admin/29]
Fri Aug 2 14:07:31 1996 Barry Jaspan <bjaspan@DUN-DUN-NOODLES>
* svr_principal.c: remove krb5_free_keyblock_contents (moved to
libkrb5.a)
Fri Jul 26 17:48:14 1996 Sam Hartman <hartmans@mit.edu>
* svr_principal.c (krb5_copy_key_data_contents): If
key_data_length[i] == 0, don't complain if malloc(0) returns 0;
this is allowed by ANSI.
Thu Jul 25 18:42:47 1996 Sam Hartman <hartmans@mit.edu>
* configure.in (LIBS): Link against -ldb under AIX for shared
library construction; we should eventually make libdb a shared
library.
Wed Jul 24 18:21:28 1996 Tom Yu <tlyu@voltage-multiplier.mit.edu>
* Makefile.in, configure.in: break out server lib into a
subdirectory
|