Nicolas Williams
0d90e0c4d0
Complete --keepold support and fix crasher in kadmin cpw -r --keepold.
2011-07-22 16:07:06 -05:00
Nicolas Williams
558a8d05a6
Forgot to export kadm5_store_principal_ent_nokeys().
2011-07-22 16:07:06 -05:00
Nicolas Williams
a35ea4955a
create_principal() must memset(ent, 0, ...) before ever returning (fixes core dump)
2011-07-22 16:07:06 -05:00
Nicolas Williams
4b0245d096
Export the new kadm5 functions.
2011-07-22 16:07:05 -05:00
Nicolas Williams
e16360e2db
Add --keepold option to cpw.
2011-07-22 16:07:05 -05:00
Nicolas Williams
acc8cd4b22
Duh, act on keepold in randkey!
2011-07-22 16:06:25 -05:00
Nicolas Williams
e7ea698366
Fixed dumb bug that caused keys to not accumulate in history.
2011-07-22 16:06:01 -05:00
Nicolas Williams
c2ec368c36
Add HDB extension for storing policy regarding what historic keys may be used for
2011-07-22 16:06:00 -05:00
Nicolas Williams
7e0a801e28
Changed decrypt key history logic and added HDB_F_ALL_KVNOS.
2011-07-22 16:05:21 -05:00
Nicolas Williams
a04721b737
Added basic policy support, w/ policy names listed in krb5.conf
2011-07-22 16:05:21 -05:00
Nicolas Williams
c338446ede
More kadm5 policy stub stuff.
2011-07-22 16:04:53 -05:00
Nicolas Williams
26f9924bb3
Added stubs for the kadm5 policy functions.
2011-07-22 16:04:53 -05:00
Nicolas Williams
56259efbac
Added dummy kadm5_get_policies()
2011-07-22 16:04:52 -05:00
Nicolas Williams
58d72035f1
Added kadm5_lock() and unlock.
2011-07-22 16:04:52 -05:00
Nicolas Williams
45294a93a7
Added a disting get-keys authorization for kadmind.
2011-07-22 16:04:52 -05:00
Nicolas Williams
3d0019d3ce
Added kadm5_setkey_principal*() and kadm5_decrypt_key().
2011-07-22 16:04:52 -05:00
Nicolas Williams
e8e314bbb1
Beginning of another new kadm5 function. Need to switch branches for a bit.
2011-07-22 16:04:52 -05:00
Nicolas Williams
6e04b05e9d
Initial support for kadm5_randkey_principal_3(), needed by krb5_admin.
...
NOT TESTED YET.
2011-07-22 16:04:52 -05:00
Nicolas Williams
51e9da4a66
Fixed (preemptively) a double free and added password history based on key history.
2011-07-22 16:04:52 -05:00
Nicolas Williams
b45ac85b65
Add support for fetching old keys via kadm5 API.
2011-07-22 16:04:51 -05:00
Nicolas Williams
fca53990e4
Initial commit for second approach for multiple kvno. NOT TESTED!
2011-07-22 16:04:51 -05:00
Love Hörnquist Åstrand
7aaba443bc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
Love Hornquist Astrand
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Thomas Klausner
97df66c0a0
Put Nd argument after Nd macro.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:27 -07:00
Thomas Klausner
db8e287e41
Use "Fl Fl" for long options.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:14 -07:00
Love Hornquist Astrand
b1909b2daa
Fixes from NetBSD via Thomas Klausner and Roland C. Dowdeswell
2011-05-04 21:31:10 -07:00
Love Hornquist Astrand
9a1a5e5da6
Mandoc and spelling fixes from Thomas Klausner
2011-04-29 20:37:33 -07:00
Love Hornquist Astrand
f5f9014c90
Warning fixes from Christos Zoulas
...
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
b3811999f7
fix error condition
2011-04-23 20:03:57 -07:00
Love Hornquist Astrand
311b3c4f32
catch error from asprintf()
...
Patch from Tom Payerle
2011-04-23 19:31:43 -07:00
Love Hornquist Astrand
3b2e927c79
catch error from asprintf()
2011-04-23 18:57:57 -07:00
Love Hornquist Astrand
1b81d2db6b
support loading more then one verifier, use function name instead of module name
...
patch from Tom Payerle
2011-04-23 18:57:12 -07:00
Love Hornquist Astrand
4d0d3b9535
remove other _krb5_key_data
2011-03-12 13:53:24 -08:00
Love Hornquist Astrand
9427bcc22e
log more version numbers
2011-01-03 12:12:18 +01:00
Love Hornquist Astrand
965836509b
switch to hdb_fetch_kvno
2010-11-28 11:43:02 -08:00
Asanka C. Herath
2f8031c1d1
Cast dlsym() returns before use
2010-11-24 15:33:10 -05:00
Asanka C. Herath
880d728e02
Un-const as necessary to silence compiler warnings
2010-11-24 15:33:07 -05:00
Asanka C. Herath
e8dd4bfaf3
Windows: Build kadm5 tools in a separate build-step
...
The application manifests for Heimdal can't be built until the
libraries are built. Since tools depend on application manifests, we
need to build them separately.
2010-11-24 15:32:21 -05:00
Asanka C. Herath
f40fe926ad
Windows: Comprehensive clean target
2010-11-24 15:32:13 -05:00
Patrik Lundin
d5e4619738
Fix order of arguments given to memchr().
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-09-30 21:30:33 -07:00
Asanka Herath
e1136ba112
Windows: Annotate symbols for libkadm5srv
2010-09-14 08:03:40 -04:00
Asanka Herath
48017d046a
Windows: Build test binaries for kadm5
2010-09-14 08:03:40 -04:00
Asanka Herath
ba44354336
Windows: Check exported symbols
...
During a test run, cross check the Windows exports list against the
version-script files. For the test to pass, all symbols on either
list should be accounted for.
If there are symbols that are specific to Windows or symbols that are
not included on Windows, they should be annotated in the .def file as
follows:
;! non_windows_symbol
common_symbol
windows_only_symbol ;!
2010-08-20 13:06:55 -04:00
Asanka Herath
cdcdc5cad5
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
Asanka Herath
d83611238a
Windows: Build a single heimdal.dll
...
Heimdal.dll is a combination of libasn1, libwind, libhcrypto, libhx509
and libkrb5.
2010-08-20 13:06:54 -04:00
Asanka Herath
ea4d8dbfdb
Windows: Use EXEPREP and DLLPREP macros for processing binaries
...
Once DLLs and EXEs are built, they need to have their manifests
processed and signed. These steps are encapsulated in the EXEPREP and
DLLPREP Makefile macros. Use them instead of invoking each processing
macro individually.
2010-08-20 13:04:06 -04:00
Asanka Herath
869e970f5d
Use rk_socket_t in lib/kadm5/init_c.c
2010-08-20 13:03:37 -04:00
Asanka Herath
e9160dbcfa
Support parallelized builds on Windows
2010-08-20 13:03:32 -04:00
Patrik Lundin
b749ee7921
Remove print that fools kpasswdd.
...
The output from this print is considered an error message which makes
kpasswdd reject a password even though "APPROVED" is printed afterwards.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-07-23 10:42:34 -07:00
Patrik Lundin
606c549626
Explicitly read input from STDIN.
...
Kpasswdd supplies the principal name as an argument to the external
script which makes <> try to read from a file with that name.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-07-23 10:42:04 -07:00