Commit Graph

  • c44aa60795 rc1 Love Hörnquist Åstrand 2005-05-22 18:54:49 +00:00
  • c2b1b1654a x Love Hörnquist Åstrand 2005-05-22 18:14:25 +00:00
  • fef228d108 ignore weak symbols too Love Hörnquist Åstrand 2005-05-22 18:11:30 +00:00
  • 285d9f5407 Remove duplicate line that was commented using c99 style comments. Found by samba's build farm. Love Hörnquist Åstrand 2005-05-20 10:42:54 +00:00
  • fafd147697 x Love Hörnquist Åstrand 2005-05-20 09:10:25 +00:00
  • 429998ed6e (srv_get_hosts): if srv_get_hosts failes, return and ignore the error Love Hörnquist Åstrand 2005-05-20 09:09:42 +00:00
  • ea49018330 (srv_find_realm): make sure res' and count' have good values Love Hörnquist Åstrand 2005-05-20 09:07:18 +00:00
  • 305ca701d3 x Love Hörnquist Åstrand 2005-05-20 09:02:26 +00:00
  • a1e379cb15 tests all keytab format Love Hörnquist Åstrand 2005-05-20 09:01:29 +00:00
  • fc578bb215 x Love Hörnquist Åstrand 2005-05-20 08:36:47 +00:00
  • 3fe17e04c4 (start_login): put utmpx code into a new scope to avoid pre c99 problems. Love Hörnquist Åstrand 2005-05-20 08:35:51 +00:00
  • 9fe35267a4 x Love Hörnquist Åstrand 2005-05-20 08:16:16 +00:00
  • 936247b01e (rk_read_env_file): move assignment to later to make pre c99 compiler happy Love Hörnquist Åstrand 2005-05-20 07:50:56 +00:00
  • 21824d94f6 x Love Hörnquist Åstrand 2005-05-19 20:52:35 +00:00
  • cc1891f16f add missing options, prompted by James F. Hranicky mail to heimdal-discuss Love Hörnquist Åstrand 2005-05-19 20:50:53 +00:00
  • 3712b65b51 x Love Hörnquist Åstrand 2005-05-19 20:41:34 +00:00
  • 2d1b36a743 (_krb5_pk_rd_pa_reply): non non asn1 decoding errors, fail. Make sure we free memory on error. (pk_verify_chain_standard): make sure we provide good errors. Love Hörnquist Åstrand 2005-05-19 18:49:05 +00:00
  • b4d451a234 x Love Hörnquist Åstrand 2005-05-19 18:28:33 +00:00
  • d90f956e94 (pk_verify_chain_standard): store better error message in the context for certificate errors. Love Hörnquist Åstrand 2005-05-19 18:27:15 +00:00
  • 577e88be43 add pkinit and password quailty check options Love Hörnquist Åstrand 2005-05-19 18:15:20 +00:00
  • 0aa27f221b x Love Hörnquist Åstrand 2005-05-19 14:05:51 +00:00
  • c0817d7f3b (krb5_kt_free_entry): zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-19 14:04:45 +00:00
  • 5b46227564 (kt_change): plug memory leak from krb5_kt_remove_entry, print principal on error. Love Hörnquist Åstrand 2005-05-19 14:03:16 +00:00
  • 035f9890c9 x Love Hörnquist Åstrand 2005-05-19 11:25:04 +00:00
  • 798226f3a3 define _POSIX_PTHREAD_SEMANTICS to make solaris provide the right getpwname_r Love Hörnquist Åstrand 2005-05-19 11:24:48 +00:00
  • a934d46ac0 Make Solaris find tgetent Love Hörnquist Åstrand 2005-05-19 11:22:53 +00:00
  • 15c3cd1ba3 x Love Hörnquist Åstrand 2005-05-19 08:19:23 +00:00
  • e910a50925 depend on automake 1.8, we don't test anything older Love Hörnquist Åstrand 2005-05-19 07:52:10 +00:00
  • 0ec6d0d363 (process_pa_data_to_md): add comment that the caller always free out_md; remove comment about memory, it doesn't happen. (init_cred_loop): free ctx->as_req.padata when its reset (From Wynn Wilkes <wwilkes@vintela.com>), move a comment close the the code Love Hörnquist Åstrand 2005-05-19 07:42:06 +00:00
  • db975c9c97 (fkt_remove_entry): need to call krb5_kt_free_entry after each krb5_kt_next_entry. Love Hörnquist Åstrand 2005-05-19 04:13:18 +00:00
  • 1ed2143174 (fkt_remove_entry): need to call krb5_kt_free_entry after each fkt_next_entry_int. From: Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-19 04:11:34 +00:00
  • 4a5b9202fb s/sizeo/sizeof/ Love Hörnquist Åstrand 2005-05-18 10:06:16 +00:00
  • efd0eb5184 x Love Hörnquist Åstrand 2005-05-18 09:55:29 +00:00
  • 5802e5f856 use english spelling of March Love Hörnquist Åstrand 2005-05-18 09:54:53 +00:00
  • 71fc6141d5 TESTS += test_keytab Love Hörnquist Åstrand 2005-05-18 05:08:29 +00:00
  • db19fc890c (krb4_kt_remove_entry): plug memory leak, avoid crashing on empty keytab Love Hörnquist Åstrand 2005-05-18 05:03:30 +00:00
  • 46c23b1852 document behavior of krb5_kt_remove_entry Love Hörnquist Åstrand 2005-05-18 04:49:15 +00:00
  • ed2c4b3694 (mkt_remove_entry): check if there isn't any entries in the keytab before removing any since that leads to bad pointer arithmetic and crashing. From: Wynn Wilkes <wwilkes@vintela.com>. Make the function return KRB5_KT_NOTFOUND if the entry wasn't in the keytab (just like the filebased keytab). Love Hörnquist Åstrand 2005-05-18 04:44:40 +00:00
  • f97a50a117 test memory corruption in MEMORY keytab Love Hörnquist Åstrand 2005-05-18 04:38:30 +00:00
  • e84fad2e0e zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-18 04:21:57 +00:00
  • b926505f3f document KRB5_GC_EXPIRED_OK Love Hörnquist Åstrand 2005-05-18 04:07:38 +00:00
  • 485b61db15 add krb5_cc_new_unique Love Hörnquist Åstrand 2005-05-18 04:05:17 +00:00
  • fd9149ac7d (fcc_get_first): check return value from malloc, memset the structure, make sure cursor doesn't point to freed memory on failure. From: Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-17 17:46:46 +00:00
  • d9766767e9 x Love Hörnquist Åstrand 2005-05-17 14:21:37 +00:00
  • d84fcc39fe update (c), .Dd Love Hörnquist Åstrand 2005-05-17 14:19:11 +00:00
  • e238fb8fde document KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED Love Hörnquist Åstrand 2005-05-17 14:18:47 +00:00
  • 6c3ab75789 Remove expired credentials, based on patches and comments from Anders Magnusson <ragge@ltu.se> and Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-17 11:48:06 +00:00
  • 5fb1d21f44 x Johan Danielsson 2005-05-17 09:09:52 +00:00
  • 2b08f81bbf only link with dblib if we need it Johan Danielsson 2005-05-17 09:09:49 +00:00
  • 1b8f47a97e add test_readenv Johan Danielsson 2005-05-17 09:03:40 +00:00
  • d1683c4b12 test for read_environment() Johan Danielsson 2005-05-17 09:02:57 +00:00
  • 3b147c4bdd eliminate duplicates Johan Danielsson 2005-05-17 09:02:32 +00:00
  • dc22282272 x Johan Danielsson 2005-05-17 08:50:34 +00:00
  • c78321491c am_conditional have_cgetent Johan Danielsson 2005-05-17 08:50:23 +00:00
  • faa3d66323 x Love Hörnquist Åstrand 2005-05-17 08:17:11 +00:00
  • c226c11008 (init_auth): set KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED (for java compatibility), also while here, use krb5_auth_con_addflags Love Hörnquist Åstrand 2005-05-17 08:15:30 +00:00
  • 2dd7796261 (krb5_get_forwarded_creds): honor KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED and create unencrypted (ENCTYPE_NULL) credentials. for use with old mit server and java based ones as they can't handle encrypted KRB-CRED. Note that the option needs to turned on because if the consumer sends the KRB-CRED in clear bad things will happen. Love Hörnquist Åstrand 2005-05-17 08:12:29 +00:00
  • 682ff3fef0 (krb5_init_context): register krb5_javakt_ops Love Hörnquist Åstrand 2005-05-17 08:08:28 +00:00
  • d5cfe0c7fd KRB5_GC_EXPIRED_OK: expired credentials is ok to return from krb5_get_credentials. KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED: make forward credentials be unencrypted, for compatibility with mit kerberos and java kerberos. krb5_javakt_ops: export Love Hörnquist Åstrand 2005-05-17 08:06:30 +00:00
  • f9ca795602 Add new keytab file format JAVA14 that doesn't the use extended kvnos, as hinted, this is needed for Java's Kerberos implementation. Love Hörnquist Åstrand 2005-05-16 21:13:42 +00:00
  • 74a611d0fb x Love Hörnquist Åstrand 2005-05-16 16:45:07 +00:00
  • c745decaa9 x Love Hörnquist Åstrand 2005-05-16 08:54:09 +00:00
  • 00bd45ed01 check allocation errors Love Hörnquist Åstrand 2005-05-16 08:53:34 +00:00
  • 10c8d0da80 check allocation errors correctly Love Hörnquist Åstrand 2005-05-16 08:52:54 +00:00
  • e4e9f2151f catch buffer overrun and check allocation errors Love Hörnquist Åstrand 2005-05-16 08:52:36 +00:00
  • ebbd19bcac include <err.h> Love Hörnquist Åstrand 2005-05-16 08:51:47 +00:00
  • 877fe34c1b use strlcpy Love Hörnquist Åstrand 2005-05-16 08:42:45 +00:00
  • 8e639e2e4e x Johan Danielsson 2005-05-13 14:21:03 +00:00
  • 40b1dab5bd (start_login): set encryption pointers to NULL, so we don't try to do either Johan Danielsson 2005-05-13 14:20:38 +00:00
  • 07dc909772 x Love Hörnquist Åstrand 2005-05-13 10:57:31 +00:00
  • f07d4690f6 (_kadm5_c_init_context): fix memory leak in case of failure Love Hörnquist Åstrand 2005-05-13 10:57:13 +00:00
  • b21b5c89b5 x Love Hörnquist Åstrand 2005-05-13 08:05:21 +00:00
  • c2d9c8331b use unsigned char to avoid signess warning Love Hörnquist Åstrand 2005-05-13 08:04:51 +00:00
  • 136b3dc3cd (AES_cbc_encrypt): use unsigned char to avoid signess warning Love Hörnquist Åstrand 2005-05-13 08:00:09 +00:00
  • 834a97a1df x Love Hörnquist Åstrand 2005-05-13 07:42:19 +00:00
  • 2b2439af68 (issuid): change the #ifdef order to avoid unreachable code warning. Love Hörnquist Åstrand 2005-05-13 07:42:03 +00:00
  • 570ef02561 x Love Hörnquist Åstrand 2005-05-11 13:04:23 +00:00
  • 052dd71f3d Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args. Include err.h unconditionally, since it's always supplied. Love Hörnquist Åstrand 2005-05-11 13:04:04 +00:00
  • 93a6e79201 Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args. Love Hörnquist Åstrand 2005-05-11 13:00:45 +00:00
  • 2a0c793a1b x Love Hörnquist Åstrand 2005-05-11 11:25:29 +00:00
  • 645647cbaa AC_CHECK_DECL and AC_CHECK_DECLS have a subtile diffrence, the later defines HAVE_ cpp symbols, the first doesn't. Love Hörnquist Åstrand 2005-05-11 11:25:19 +00:00
  • bae5bd65ec x Love Hörnquist Åstrand 2005-05-11 11:05:56 +00:00
  • 1cbf9cd859 undef ISASCII before we define our own (problem on Irix) Love Hörnquist Åstrand 2005-05-11 11:05:43 +00:00
  • 60ed51e6da MODEMASK is defined in sys/vnode.h on Solaris, so undef it before we define our own. Love Hörnquist Åstrand 2005-05-11 11:04:30 +00:00
  • 8151b90b67 #ifdef protect _PATH_ISSUE Love Hörnquist Åstrand 2005-05-11 11:02:42 +00:00
  • 8429cf6bbb x Love Hörnquist Åstrand 2005-05-11 07:35:37 +00:00
  • 958160a533 Include <crypt.h>. Love Hörnquist Åstrand 2005-05-11 07:35:04 +00:00
  • c4ec6e6212 x Love Hörnquist Åstrand 2005-05-10 22:20:55 +00:00
  • 31aba91bb4 Include <stdlib.h>. Love Hörnquist Åstrand 2005-05-10 22:19:01 +00:00
  • 6c0f2bf549 x Love Hörnquist Åstrand 2005-05-10 19:41:31 +00:00
  • a3c6124483 handle pkinit-9, pkinit-19, and pkinit-25 enckey, still no DH Love Hörnquist Åstrand 2005-05-10 19:40:39 +00:00
  • 2c65e2f431 (as_rep): search for pkinit-9, pkinit-19, and pkinit-25 pa-data, return empty pkinit pa-data in the PREAUTH_REQUIRED krb-error Love Hörnquist Åstrand 2005-05-10 19:37:44 +00:00
  • bdd471607e add pkinit people Love Hörnquist Åstrand 2005-05-10 19:34:57 +00:00
  • 5638ec9d75 x Love Hörnquist Åstrand 2005-05-10 10:47:30 +00:00
  • 4aaf4dd6bd document krb5_storage_is_flags Love Hörnquist Åstrand 2005-05-10 10:46:46 +00:00
  • cc22cac7ad x Love Hörnquist Åstrand 2005-05-10 09:24:19 +00:00
  • 9aa1875790 make more pretty, from Björn Sandell Love Hörnquist Åstrand 2005-05-10 09:21:06 +00:00
  • 9bc8053455 x Love Hörnquist Åstrand 2005-05-09 19:36:59 +00:00
  • b1624b36a0 Fix and clarify password quality check examples. Love Hörnquist Åstrand 2005-05-09 19:35:51 +00:00
  • 84e8f91f02 x Love Hörnquist Åstrand 2005-05-09 19:19:52 +00:00