c44aa60795
rc1
Love Hörnquist Åstrand
2005-05-22 18:54:49 +00:00
c2b1b1654a
x
Love Hörnquist Åstrand
2005-05-22 18:14:25 +00:00
fef228d108
ignore weak symbols too
Love Hörnquist Åstrand
2005-05-22 18:11:30 +00:00
285d9f5407
Remove duplicate line that was commented using c99 style comments. Found by samba's build farm.
Love Hörnquist Åstrand
2005-05-20 10:42:54 +00:00
fafd147697
x
Love Hörnquist Åstrand
2005-05-20 09:10:25 +00:00
429998ed6e
(srv_get_hosts): if srv_get_hosts failes, return and ignore the error
Love Hörnquist Åstrand
2005-05-20 09:09:42 +00:00
ea49018330
(srv_find_realm): make sure res' and count' have good values
Love Hörnquist Åstrand
2005-05-20 09:07:18 +00:00
305ca701d3
x
Love Hörnquist Åstrand
2005-05-20 09:02:26 +00:00
a1e379cb15
tests all keytab format
Love Hörnquist Åstrand
2005-05-20 09:01:29 +00:00
fc578bb215
x
Love Hörnquist Åstrand
2005-05-20 08:36:47 +00:00
3fe17e04c4
(start_login): put utmpx code into a new scope to avoid pre c99 problems.
Love Hörnquist Åstrand
2005-05-20 08:35:51 +00:00
9fe35267a4
x
Love Hörnquist Åstrand
2005-05-20 08:16:16 +00:00
936247b01e
(rk_read_env_file): move assignment to later to make pre c99 compiler happy
Love Hörnquist Åstrand
2005-05-20 07:50:56 +00:00
21824d94f6
x
Love Hörnquist Åstrand
2005-05-19 20:52:35 +00:00
cc1891f16f
add missing options, prompted by James F. Hranicky mail to heimdal-discuss
Love Hörnquist Åstrand
2005-05-19 20:50:53 +00:00
3712b65b51
x
Love Hörnquist Åstrand
2005-05-19 20:41:34 +00:00
2d1b36a743
(_krb5_pk_rd_pa_reply): non non asn1 decoding errors, fail. Make sure we free memory on error. (pk_verify_chain_standard): make sure we provide good errors.
Love Hörnquist Åstrand
2005-05-19 18:49:05 +00:00
b4d451a234
x
Love Hörnquist Åstrand
2005-05-19 18:28:33 +00:00
d90f956e94
(pk_verify_chain_standard): store better error message in the context for certificate errors.
Love Hörnquist Åstrand
2005-05-19 18:27:15 +00:00
577e88be43
add pkinit and password quailty check options
Love Hörnquist Åstrand
2005-05-19 18:15:20 +00:00
0aa27f221b
x
Love Hörnquist Åstrand
2005-05-19 14:05:51 +00:00
c0817d7f3b
(krb5_kt_free_entry): zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com>
Love Hörnquist Åstrand
2005-05-19 14:04:45 +00:00
5b46227564
(kt_change): plug memory leak from krb5_kt_remove_entry, print principal on error.
Love Hörnquist Åstrand
2005-05-19 14:03:16 +00:00
035f9890c9
x
Love Hörnquist Åstrand
2005-05-19 11:25:04 +00:00
798226f3a3
define _POSIX_PTHREAD_SEMANTICS to make solaris provide the right getpwname_r
Love Hörnquist Åstrand
2005-05-19 11:24:48 +00:00
a934d46ac0
Make Solaris find tgetent
Love Hörnquist Åstrand
2005-05-19 11:22:53 +00:00
15c3cd1ba3
x
Love Hörnquist Åstrand
2005-05-19 08:19:23 +00:00
e910a50925
depend on automake 1.8, we don't test anything older
Love Hörnquist Åstrand
2005-05-19 07:52:10 +00:00
0ec6d0d363
(process_pa_data_to_md): add comment that the caller always free out_md; remove comment about memory, it doesn't happen. (init_cred_loop): free ctx->as_req.padata when its reset (From Wynn Wilkes <wwilkes@vintela.com>), move a comment close the the code
Love Hörnquist Åstrand
2005-05-19 07:42:06 +00:00
db975c9c97
(fkt_remove_entry): need to call krb5_kt_free_entry after each krb5_kt_next_entry.
Love Hörnquist Åstrand
2005-05-19 04:13:18 +00:00
1ed2143174
(fkt_remove_entry): need to call krb5_kt_free_entry after each fkt_next_entry_int. From: Wynn Wilkes <wwilkes@vintela.com>
Love Hörnquist Åstrand
2005-05-19 04:11:34 +00:00
4a5b9202fb
s/sizeo/sizeof/
Love Hörnquist Åstrand
2005-05-18 10:06:16 +00:00
efd0eb5184
x
Love Hörnquist Åstrand
2005-05-18 09:55:29 +00:00
5802e5f856
use english spelling of March
Love Hörnquist Åstrand
2005-05-18 09:54:53 +00:00
71fc6141d5
TESTS += test_keytab
Love Hörnquist Åstrand
2005-05-18 05:08:29 +00:00
db19fc890c
(krb4_kt_remove_entry): plug memory leak, avoid crashing on empty keytab
Love Hörnquist Åstrand
2005-05-18 05:03:30 +00:00
46c23b1852
document behavior of krb5_kt_remove_entry
Love Hörnquist Åstrand
2005-05-18 04:49:15 +00:00
ed2c4b3694
(mkt_remove_entry): check if there isn't any entries in the keytab before removing any since that leads to bad pointer arithmetic and crashing. From: Wynn Wilkes <wwilkes@vintela.com>. Make the function return KRB5_KT_NOTFOUND if the entry wasn't in the keytab (just like the filebased keytab).
Love Hörnquist Åstrand
2005-05-18 04:44:40 +00:00
f97a50a117
test memory corruption in MEMORY keytab
Love Hörnquist Åstrand
2005-05-18 04:38:30 +00:00
e84fad2e0e
zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com>
Love Hörnquist Åstrand
2005-05-18 04:21:57 +00:00
b926505f3f
document KRB5_GC_EXPIRED_OK
Love Hörnquist Åstrand
2005-05-18 04:07:38 +00:00
485b61db15
add krb5_cc_new_unique
Love Hörnquist Åstrand
2005-05-18 04:05:17 +00:00
fd9149ac7d
(fcc_get_first): check return value from malloc, memset the structure, make sure cursor doesn't point to freed memory on failure. From: Wynn Wilkes <wwilkes@vintela.com>
Love Hörnquist Åstrand
2005-05-17 17:46:46 +00:00
d9766767e9
x
Love Hörnquist Åstrand
2005-05-17 14:21:37 +00:00
d84fcc39fe
update (c), .Dd
Love Hörnquist Åstrand
2005-05-17 14:19:11 +00:00
e238fb8fde
document KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED
Love Hörnquist Åstrand
2005-05-17 14:18:47 +00:00
6c3ab75789
Remove expired credentials, based on patches and comments from Anders Magnusson <ragge@ltu.se> and Wynn Wilkes <wwilkes@vintela.com>
Love Hörnquist Åstrand
2005-05-17 11:48:06 +00:00
5fb1d21f44
x
Johan Danielsson
2005-05-17 09:09:52 +00:00
2b08f81bbf
only link with dblib if we need it
Johan Danielsson
2005-05-17 09:09:49 +00:00
1b8f47a97e
add test_readenv
Johan Danielsson
2005-05-17 09:03:40 +00:00
d1683c4b12
test for read_environment()
Johan Danielsson
2005-05-17 09:02:57 +00:00
3b147c4bdd
eliminate duplicates
Johan Danielsson
2005-05-17 09:02:32 +00:00
dc22282272
x
Johan Danielsson
2005-05-17 08:50:34 +00:00
c78321491c
am_conditional have_cgetent
Johan Danielsson
2005-05-17 08:50:23 +00:00
faa3d66323
x
Love Hörnquist Åstrand
2005-05-17 08:17:11 +00:00
c226c11008
(init_auth): set KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED (for java compatibility), also while here, use krb5_auth_con_addflags
Love Hörnquist Åstrand
2005-05-17 08:15:30 +00:00
2dd7796261
(krb5_get_forwarded_creds): honor KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED and create unencrypted (ENCTYPE_NULL) credentials. for use with old mit server and java based ones as they can't handle encrypted KRB-CRED. Note that the option needs to turned on because if the consumer sends the KRB-CRED in clear bad things will happen.
Love Hörnquist Åstrand
2005-05-17 08:12:29 +00:00
682ff3fef0
(krb5_init_context): register krb5_javakt_ops
Love Hörnquist Åstrand
2005-05-17 08:08:28 +00:00
d5cfe0c7fd
KRB5_GC_EXPIRED_OK: expired credentials is ok to return from krb5_get_credentials. KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED: make forward credentials be unencrypted, for compatibility with mit kerberos and java kerberos. krb5_javakt_ops: export
Love Hörnquist Åstrand
2005-05-17 08:06:30 +00:00
f9ca795602
Add new keytab file format JAVA14 that doesn't the use extended kvnos, as hinted, this is needed for Java's Kerberos implementation.
Love Hörnquist Åstrand
2005-05-16 21:13:42 +00:00
74a611d0fb
x
Love Hörnquist Åstrand
2005-05-16 16:45:07 +00:00
c745decaa9
x
Love Hörnquist Åstrand
2005-05-16 08:54:09 +00:00
00bd45ed01
check allocation errors
Love Hörnquist Åstrand
2005-05-16 08:53:34 +00:00
e4e9f2151f
catch buffer overrun and check allocation errors
Love Hörnquist Åstrand
2005-05-16 08:52:36 +00:00
ebbd19bcac
include <err.h>
Love Hörnquist Åstrand
2005-05-16 08:51:47 +00:00
877fe34c1b
use strlcpy
Love Hörnquist Åstrand
2005-05-16 08:42:45 +00:00
8e639e2e4e
x
Johan Danielsson
2005-05-13 14:21:03 +00:00
40b1dab5bd
(start_login): set encryption pointers to NULL, so we don't try to do either
Johan Danielsson
2005-05-13 14:20:38 +00:00
07dc909772
x
Love Hörnquist Åstrand
2005-05-13 10:57:31 +00:00
f07d4690f6
(_kadm5_c_init_context): fix memory leak in case of failure
Love Hörnquist Åstrand
2005-05-13 10:57:13 +00:00
b21b5c89b5
x
Love Hörnquist Åstrand
2005-05-13 08:05:21 +00:00
c2d9c8331b
use unsigned char to avoid signess warning
Love Hörnquist Åstrand
2005-05-13 08:04:51 +00:00
136b3dc3cd
(AES_cbc_encrypt): use unsigned char to avoid signess warning
Love Hörnquist Åstrand
2005-05-13 08:00:09 +00:00
834a97a1df
x
Love Hörnquist Åstrand
2005-05-13 07:42:19 +00:00
2b2439af68
(issuid): change the #ifdef order to avoid unreachable code warning.
Love Hörnquist Åstrand
2005-05-13 07:42:03 +00:00
570ef02561
x
Love Hörnquist Åstrand
2005-05-11 13:04:23 +00:00
052dd71f3d
Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args. Include err.h unconditionally, since it's always supplied.
Love Hörnquist Åstrand
2005-05-11 13:04:04 +00:00
93a6e79201
Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args.
Love Hörnquist Åstrand
2005-05-11 13:00:45 +00:00
2a0c793a1b
x
Love Hörnquist Åstrand
2005-05-11 11:25:29 +00:00
645647cbaa
AC_CHECK_DECL and AC_CHECK_DECLS have a subtile diffrence, the later defines HAVE_ cpp symbols, the first doesn't.
Love Hörnquist Åstrand
2005-05-11 11:25:19 +00:00
bae5bd65ec
x
Love Hörnquist Åstrand
2005-05-11 11:05:56 +00:00
1cbf9cd859
undef ISASCII before we define our own (problem on Irix)
Love Hörnquist Åstrand
2005-05-11 11:05:43 +00:00
60ed51e6da
MODEMASK is defined in sys/vnode.h on Solaris, so undef it before we define our own.
Love Hörnquist Åstrand
2005-05-11 11:04:30 +00:00
8151b90b67
#ifdef protect _PATH_ISSUE
Love Hörnquist Åstrand
2005-05-11 11:02:42 +00:00
8429cf6bbb
x
Love Hörnquist Åstrand
2005-05-11 07:35:37 +00:00
958160a533
Include <crypt.h>.
Love Hörnquist Åstrand
2005-05-11 07:35:04 +00:00
c4ec6e6212
x
Love Hörnquist Åstrand
2005-05-10 22:20:55 +00:00
31aba91bb4
Include <stdlib.h>.
Love Hörnquist Åstrand
2005-05-10 22:19:01 +00:00
6c0f2bf549
x
Love Hörnquist Åstrand
2005-05-10 19:41:31 +00:00
a3c6124483
handle pkinit-9, pkinit-19, and pkinit-25 enckey, still no DH
Love Hörnquist Åstrand
2005-05-10 19:40:39 +00:00
2c65e2f431
(as_rep): search for pkinit-9, pkinit-19, and pkinit-25 pa-data, return empty pkinit pa-data in the PREAUTH_REQUIRED krb-error
Love Hörnquist Åstrand
2005-05-10 19:37:44 +00:00
bdd471607e
add pkinit people
Love Hörnquist Åstrand
2005-05-10 19:34:57 +00:00
5638ec9d75
x
Love Hörnquist Åstrand
2005-05-10 10:47:30 +00:00
4aaf4dd6bd
document krb5_storage_is_flags
Love Hörnquist Åstrand
2005-05-10 10:46:46 +00:00
cc22cac7ad
x
Love Hörnquist Åstrand
2005-05-10 09:24:19 +00:00
9aa1875790
make more pretty, from Björn Sandell
Love Hörnquist Åstrand
2005-05-10 09:21:06 +00:00
9bc8053455
x
Love Hörnquist Åstrand
2005-05-09 19:36:59 +00:00
b1624b36a0
Fix and clarify password quality check examples.
Love Hörnquist Åstrand
2005-05-09 19:35:51 +00:00
84e8f91f02
x
Love Hörnquist Åstrand
2005-05-09 19:19:52 +00:00