Commit Graph

25458 Commits

Author SHA1 Message Date
Love Hornquist Astrand
da84ccc31d require automake 1.10.3 since it fixes security problems in the generated files 2009-12-13 11:24:07 -08:00
Love Hornquist Astrand
74527a0bb2 if we have strerror_r, assume its the non standard strerror_r 2009-12-13 11:15:38 -08:00
Love Hornquist Astrand
85ad70e230 fix type for strerror_r 2009-12-13 11:02:46 -08:00
Love Hornquist Astrand
3f1ba393c5 bump -version-info 2009-12-11 03:14:15 +01:00
Love Hornquist Astrand
bafa4d7e96 add Ted Percival 2009-12-10 23:49:49 +01:00
Ted Percival
bfcdeda3b4 Fix memory leak in fcc_move
This usually occurs when re-initializing a file credential
cache over the top of an existing one.

This was meant to be fixed in commit 48cb3aa by calling
fcc_destroy(), but that only unlinks the "from" file
(which was already renamed or unlinked) but still doesn't
free the in-memory credentials. Using fcc_close() instead of
fcc_destroy() frees the leaked in-memory credentials.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-10 23:35:44 +01:00
Love Hornquist Astrand
4835144bb2 Install kadm5-pwcheck.h header
Prompted by bug from Russ Allbery
2009-12-09 22:40:10 +01:00
Love Hornquist Astrand
c867fd3e2e Make libtool pull in the depenency on libldap
Put in explicy depenency on libdap so that libtool
might to the right thing for us.

Patch from Jan Rekorajski
2009-12-08 00:15:10 -08:00
Love Hornquist Astrand
d57236a520 add back krb5_version and krb5_long_version to libkrb5, hide them in libvers
prompted by bug reported by Markus Moeller
2009-12-07 21:16:43 -08:00
Love Hornquist Astrand
e3044663df add version script to libotp 2009-12-07 21:15:29 -08:00
Love Hornquist Astrand
5e43df65a5 make compile 2009-12-07 21:10:52 -08:00
Andrew Tridgell
a92eef4668 s4-heimdal: fixed a use-after-free heimdal bug
s4-heimdal: fixed a use-after-free heimdal bug

This caused samba4kinit to segfault on some systems

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-07 20:50:31 -08:00
Ted Percival
c93cea7ea6 Fix roken getifaddrs for IPv4 & IPv6 on HP-UX & Solaris
HP-UX only returns IPv6 addresses using SIOCGLIFCONF,
SIOCGIFCONF has to be used for IPv4 addresses.
Solaris uses the same code as described in the comments, which
should correctly detect all addresses when running in a zone.

This adds the code that went missing from commit e20183da.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-07 18:40:46 -08:00
Kamen Mazdrashki
778df10ddc krb5: Fix leaked hx509_context pointer
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-07 09:07:07 -08:00
Love Hornquist Astrand
b6460f7364 document some mbz flags from wireshark 2009-12-05 16:45:29 -08:00
Love Hornquist Astrand
e347f1da95 fill in all bits for NTLM flags 2009-12-05 16:40:26 -08:00
Love Hornquist Astrand
5b7780b997 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:35:18 -08:00
Love Hornquist Astrand
c402cda0a4 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:30:06 -08:00
Love Hornquist Astrand
5a23717814 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:29:48 -08:00
Ted Percival
e20183da23 Fix roken getifaddrs for IPv4 & IPv6 on HP-UX & Solaris
HP-UX only returns IPv6 addresses using SIOCGLIFCONF,
SIOCGIFCONF has to be used for IPv4 addresses.
Solaris uses the same code as described in the comments, which
should correctly detect all addresses when running in a zone.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-04 20:46:15 -08:00
Ted Percival
54817ef6f3 Revert "Try both v4 and v6 socket types"
It broke detection of IPv4 addresses on HP-UX machines with an IPv6
loopback address. Successful resolution of at least one IPv6 address
would then skip doing a separate IPv4 lookup as required by HP-UX.

This reverts commit 76afc31e9b.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-04 20:39:42 -08:00
Ted Percival
7fc0f55b89 Fix duplicate definition of rk_freeifaddrs
Introduced by incorrectly moving an ifdef in commit d00f998.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-04 20:07:42 -08:00
Asanka Herath
e5ee3e7d60 Merge commit 'lha/master' into win32-port2
* commit 'lha/master':
  glue for strsvisx
  add Allan McRae and Victor Guerra, sort
  Version Heimdal 1.3.2
  Remove fd caching since we don't have unload (deconstructor) support
2009-12-01 16:58:05 -05:00
Asanka Herath
0346adf7f6 (kdc/NTMakefile) Fix dependencies 2009-12-01 16:44:08 -05:00
Asanka Herath
6f22fb3bb1 (kdc/kerberos5.c) VC isn't C99 2009-12-01 16:43:39 -05:00
Asanka Herath
a4acca45ec (kdc/hpropd.c) inetd_flag is used even when NO_INETD is defined 2009-12-01 16:43:12 -05:00
Asanka Herath
0ad290b500 Fix missing #endif 2009-12-01 16:42:28 -05:00
Asanka Herath
0a43d2b3cf (kdc) Add missing export 2009-12-01 02:56:58 -05:00
Asanka Herath
b7fe2d3647 (lib/hdb) Add missing dependencies to NTMakefile 2009-12-01 01:51:08 -05:00
Asanka Herath
9227b99979 (lib/gssapi) Add missing dependencies to NTMakefile 2009-12-01 01:50:44 -05:00
Love Hornquist Astrand
01a1e1baef check that gss_krb5_set_allowable_enctypes works 2009-11-30 17:19:13 -08:00
Brian May
87d30c0e23 glue for strsvisx 2009-11-29 21:47:29 -08:00
Love Hornquist Astrand
50b6b63911 add Allan McRae and Victor Guerra, sort 2009-11-26 10:28:21 -08:00
Love Hornquist Astrand
d4dec5cfe3 Version Heimdal 1.3.2
Windows support
2009-11-26 10:26:27 -08:00
Love Hornquist Astrand
26e5159572 Remove fd caching since we don't have unload (deconstructor) support
basiclly this is reverting 164c99a4b4

the problem is when an application is using PAM loaded and unloaded
and over again, the file descriptior never get closed on unload of the
pam module. If main app already uses Heimdal, Heimdal doesn't get
unloaded, but in some scenarios this happen more often.

Since we now use fortuna for our internal random generator, this is
not that bad.

Bug found by Victor Guerra.
2009-11-26 10:06:22 -08:00
Asanka Herath
1b6048561c Set HAVE_SCC=1 on Windows 2009-11-26 01:59:18 -05:00
Asanka Herath
62454211c0 (lib/roken) Add strerror_r() along with some missing symbols 2009-11-26 01:58:21 -05:00
Asanka Herath
405b7f530a (lib/roken) fk_flock() -> rk_flock() 2009-11-26 01:57:11 -05:00
Asanka Herath
eb3dc6fabd (lib/roken) Use strerror_s() to emulate strerror_r() on Windows 2009-11-26 01:56:50 -05:00
Asanka Herath
f065ca176f (lib/krb5) Update exports list 2009-11-26 01:55:48 -05:00
Asanka Herath
393a597858 SOCK_INIT/SOCK_EXIT -> rk_SOCK_INIT/rk_SOCK_EXIT and net_write_s() -> net_write() 2009-11-26 01:42:57 -05:00
Asanka Herath
67c3295fcb KRB5_DEPRECATED should be prefixed to the declaration 2009-11-26 01:41:57 -05:00
Asanka Herath
49d28d3f3a Thread safety for rand-w32 2009-11-26 01:39:42 -05:00
Asanka Herath
e3882ffc62 (lib/hcrypto) Make w32crypto the default and only RAND method on Windows 2009-11-26 01:38:43 -05:00
Asanka Herath
8f6d724979 (lib/com_err) Add missing exports 2009-11-26 01:37:11 -05:00
Asanka Herath
a3a72a77e2 Fix typo in configure.ac 2009-11-26 01:28:35 -05:00
Asanka Herath
b397a69ca7 Remove krb5-types.h.w32
We are generating krb5-types.h using bits.c.
2009-11-26 01:26:41 -05:00
Asanka Herath
faa7dd7234 (lib/roken) Add ct.c to libroken on Windows 2009-11-25 12:43:16 -05:00
Asanka Herath
72848585cd KRB5_DEPRECATED needs to be prefixed to the declaration on Windows 2009-11-25 12:43:16 -05:00
Asanka Herath
798d78e098 (lib/krb5/auth_context.c) Fix declaration 2009-11-25 12:43:15 -05:00