oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
25,080 Commits 4 Branches 2 Tags
75aa4b44fa3b175a357f5cf9701e57c1b3324478
Commit Graph

25080 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Love Hornquist Astrand 75aa4b44fa switch to rk_strerror_r 2009-12-13 11:42:12 -08:00
Love Hornquist Astrand da84ccc31d require automake 1.10.3 since it fixes security problems in the generated files 2009-12-13 11:24:07 -08:00
Love Hornquist Astrand 74527a0bb2 if we have strerror_r, assume its the non standard strerror_r 2009-12-13 11:15:38 -08:00
Love Hornquist Astrand 85ad70e230 fix type for strerror_r 2009-12-13 11:02:46 -08:00
Love Hornquist Astrand 3f1ba393c5 bump -version-info 2009-12-11 03:14:15 +01:00
Love Hornquist Astrand bafa4d7e96 add Ted Percival 2009-12-10 23:49:49 +01:00
Ted Percival bfcdeda3b4 Fix memory leak in fcc_move 
This usually occurs when re-initializing a file credential
cache over the top of an existing one.

This was meant to be fixed in commit 48cb3aa by calling
fcc_destroy(), but that only unlinks the "from" file
(which was already renamed or unlinked) but still doesn't
free the in-memory credentials. Using fcc_close() instead of
fcc_destroy() frees the leaked in-memory credentials.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-10 23:35:44 +01:00
Love Hornquist Astrand 4835144bb2 Install kadm5-pwcheck.h header 
Prompted by bug from Russ Allbery
 2009-12-09 22:40:10 +01:00
Love Hornquist Astrand c867fd3e2e Make libtool pull in the depenency on libldap 
Put in explicy depenency on libdap so that libtool
might to the right thing for us.

Patch from Jan Rekorajski
 2009-12-08 00:15:10 -08:00
Love Hornquist Astrand d57236a520 add back krb5_version and krb5_long_version to libkrb5, hide them in libvers 
prompted by bug reported by Markus Moeller
 2009-12-07 21:16:43 -08:00
Love Hornquist Astrand e3044663df add version script to libotp 2009-12-07 21:15:29 -08:00
Love Hornquist Astrand 5e43df65a5 make compile 2009-12-07 21:10:52 -08:00
Andrew Tridgell a92eef4668 s4-heimdal: fixed a use-after-free heimdal bug 
s4-heimdal: fixed a use-after-free heimdal bug

This caused samba4kinit to segfault on some systems

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-07 20:50:31 -08:00
Ted Percival c93cea7ea6 Fix roken getifaddrs for IPv4 & IPv6 on HP-UX & Solaris 
HP-UX only returns IPv6 addresses using SIOCGLIFCONF,
SIOCGIFCONF has to be used for IPv4 addresses.
Solaris uses the same code as described in the comments, which
should correctly detect all addresses when running in a zone.

This adds the code that went missing from commit e20183da.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-07 18:40:46 -08:00
Kamen Mazdrashki 778df10ddc krb5: Fix leaked hx509_context pointer 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-07 09:07:07 -08:00
Love Hornquist Astrand b6460f7364 document some mbz flags from wireshark 2009-12-05 16:45:29 -08:00
Love Hornquist Astrand e347f1da95 fill in all bits for NTLM flags 2009-12-05 16:40:26 -08:00
Love Hornquist Astrand 5b7780b997 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:35:18 -08:00
Love Hornquist Astrand c402cda0a4 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:30:06 -08:00
Love Hornquist Astrand 5a23717814 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:29:48 -08:00
Ted Percival e20183da23 Fix roken getifaddrs for IPv4 & IPv6 on HP-UX & Solaris 
HP-UX only returns IPv6 addresses using SIOCGLIFCONF,
SIOCGIFCONF has to be used for IPv4 addresses.
Solaris uses the same code as described in the comments, which
should correctly detect all addresses when running in a zone.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-04 20:46:15 -08:00
Ted Percival 54817ef6f3 Revert "Try both v4 and v6 socket types" 
It broke detection of IPv4 addresses on HP-UX machines with an IPv6
loopback address. Successful resolution of at least one IPv6 address
would then skip doing a separate IPv4 lookup as required by HP-UX.

This reverts commit 76afc31e9b.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-04 20:39:42 -08:00
Ted Percival 7fc0f55b89 Fix duplicate definition of rk_freeifaddrs 
Introduced by incorrectly moving an ifdef in commit d00f998.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-12-04 20:07:42 -08:00
Love Hornquist Astrand 01a1e1baef check that gss_krb5_set_allowable_enctypes works 2009-11-30 17:19:13 -08:00
Brian May 87d30c0e23 glue for strsvisx 2009-11-29 21:47:29 -08:00
Love Hornquist Astrand 50b6b63911 add Allan McRae and Victor Guerra, sort 2009-11-26 10:28:21 -08:00
Love Hornquist Astrand d4dec5cfe3 Version Heimdal 1.3.2 
Windows support
 2009-11-26 10:26:27 -08:00
Love Hornquist Astrand 26e5159572 Remove fd caching since we don't have unload (deconstructor) support 
basiclly this is reverting 164c99a4b4

the problem is when an application is using PAM loaded and unloaded
and over again, the file descriptior never get closed on unload of the
pam module. If main app already uses Heimdal, Heimdal doesn't get
unloaded, but in some scenarios this happen more often.

Since we now use fortuna for our internal random generator, this is
not that bad.

Bug found by Victor Guerra.
 2009-11-26 10:06:22 -08:00
Gabor Gombas b6fe5a95d3 kdc and kinit wanted to use some symbols that were not exported by 
libkrb5/libkdc

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 05:18:49 -08:00
Gabor Gombas 4c37844073 define KRB5_LIB_CALL in generated headers 
glob.h did not define ROKEN_LIB_CALL and that caused havoc when it was
included before other roken headers, because those only check for the
existence of ROKEN_LIB_FUNCTION

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 05:14:46 -08:00
Gabor Gombas 75a53f54fc the MIT DB code is between "#if HAVE_DB1... #endif" 
use the same check in the descriptor table

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 05:10:29 -08:00
Love Hornquist Astrand 55db6909fe _kdc_pk_initialize needs to be exported for kdc-replay 
prompted by patch from Gabor Gombas <gombasg@sztaki.hu>
 2009-11-25 05:08:44 -08:00
Gabor Gombas 17bfa5d3e5 "unix" is a built-in preprocessor symbol, so it cannot be used as a variable name 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 05:05:03 -08:00
Love Hornquist Astrand a059a70746 Only accept self-signed certs within chains for strong hash types 2009-11-25 05:03:16 -08:00
Asanka Herath b191b1e12f Make kdc build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-24 22:19:37 -08:00
Asanka Herath caf8f87598 Make hdb build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-24 21:59:12 -08:00
Asanka Herath 7097787a21 Make com_err build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-24 21:56:41 -08:00
Asanka Herath d00f9984a5 Make roken build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-24 21:42:02 -08:00
Asanka Herath c4b95f7330 Make build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 02:22:31 +01:00
Asanka Herath 452c20aed5 Make build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 02:19:05 +01:00
Asanka Herath 20c26609da Make build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 02:15:29 +01:00
Love Hornquist Astrand e0a6ee793b CHAR is not used, don't define it 2009-11-25 02:14:06 +01:00
Love Hornquist Astrand 26f7b41f25 define krb5_socket_t 2009-11-25 02:08:13 +01:00
Love Hornquist Astrand 93a56f6153 define krb5_socket_t 2009-11-25 02:07:45 +01:00
Asanka Herath 1650607d4c Windows prebuild filess 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 02:07:24 +01:00
Asanka Herath 16b7db3e5f Resource file for windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 02:04:14 +01:00
Love Hornquist Astrand 48d68a3815 define rk_PATH_DELIM 2009-11-25 02:02:10 +01:00
Love Hornquist Astrand 3199980f5a use rk_PATH_DELIM 2009-11-25 02:01:57 +01:00
Asanka Herath 3982b965c6 Make hx509 compile on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 00:24:01 +01:00
Asanka Herath 5d48156c51 Make hx509 compile on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-25 00:20:44 +01:00