Commit Graph

  • 798226f3a3 define _POSIX_PTHREAD_SEMANTICS to make solaris provide the right getpwname_r Love Hörnquist Åstrand 2005-05-19 11:24:48 +00:00
  • a934d46ac0 Make Solaris find tgetent Love Hörnquist Åstrand 2005-05-19 11:22:53 +00:00
  • 15c3cd1ba3 x Love Hörnquist Åstrand 2005-05-19 08:19:23 +00:00
  • e910a50925 depend on automake 1.8, we don't test anything older Love Hörnquist Åstrand 2005-05-19 07:52:10 +00:00
  • 0ec6d0d363 (process_pa_data_to_md): add comment that the caller always free out_md; remove comment about memory, it doesn't happen. (init_cred_loop): free ctx->as_req.padata when its reset (From Wynn Wilkes <wwilkes@vintela.com>), move a comment close the the code Love Hörnquist Åstrand 2005-05-19 07:42:06 +00:00
  • db975c9c97 (fkt_remove_entry): need to call krb5_kt_free_entry after each krb5_kt_next_entry. Love Hörnquist Åstrand 2005-05-19 04:13:18 +00:00
  • 1ed2143174 (fkt_remove_entry): need to call krb5_kt_free_entry after each fkt_next_entry_int. From: Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-19 04:11:34 +00:00
  • 4a5b9202fb s/sizeo/sizeof/ Love Hörnquist Åstrand 2005-05-18 10:06:16 +00:00
  • efd0eb5184 x Love Hörnquist Åstrand 2005-05-18 09:55:29 +00:00
  • 5802e5f856 use english spelling of March Love Hörnquist Åstrand 2005-05-18 09:54:53 +00:00
  • 71fc6141d5 TESTS += test_keytab Love Hörnquist Åstrand 2005-05-18 05:08:29 +00:00
  • db19fc890c (krb4_kt_remove_entry): plug memory leak, avoid crashing on empty keytab Love Hörnquist Åstrand 2005-05-18 05:03:30 +00:00
  • 46c23b1852 document behavior of krb5_kt_remove_entry Love Hörnquist Åstrand 2005-05-18 04:49:15 +00:00
  • ed2c4b3694 (mkt_remove_entry): check if there isn't any entries in the keytab before removing any since that leads to bad pointer arithmetic and crashing. From: Wynn Wilkes <wwilkes@vintela.com>. Make the function return KRB5_KT_NOTFOUND if the entry wasn't in the keytab (just like the filebased keytab). Love Hörnquist Åstrand 2005-05-18 04:44:40 +00:00
  • f97a50a117 test memory corruption in MEMORY keytab Love Hörnquist Åstrand 2005-05-18 04:38:30 +00:00
  • e84fad2e0e zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-18 04:21:57 +00:00
  • b926505f3f document KRB5_GC_EXPIRED_OK Love Hörnquist Åstrand 2005-05-18 04:07:38 +00:00
  • 485b61db15 add krb5_cc_new_unique Love Hörnquist Åstrand 2005-05-18 04:05:17 +00:00
  • fd9149ac7d (fcc_get_first): check return value from malloc, memset the structure, make sure cursor doesn't point to freed memory on failure. From: Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-17 17:46:46 +00:00
  • d9766767e9 x Love Hörnquist Åstrand 2005-05-17 14:21:37 +00:00
  • d84fcc39fe update (c), .Dd Love Hörnquist Åstrand 2005-05-17 14:19:11 +00:00
  • e238fb8fde document KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED Love Hörnquist Åstrand 2005-05-17 14:18:47 +00:00
  • 6c3ab75789 Remove expired credentials, based on patches and comments from Anders Magnusson <ragge@ltu.se> and Wynn Wilkes <wwilkes@vintela.com> Love Hörnquist Åstrand 2005-05-17 11:48:06 +00:00
  • 5fb1d21f44 x Johan Danielsson 2005-05-17 09:09:52 +00:00
  • 2b08f81bbf only link with dblib if we need it Johan Danielsson 2005-05-17 09:09:49 +00:00
  • 1b8f47a97e add test_readenv Johan Danielsson 2005-05-17 09:03:40 +00:00
  • d1683c4b12 test for read_environment() Johan Danielsson 2005-05-17 09:02:57 +00:00
  • 3b147c4bdd eliminate duplicates Johan Danielsson 2005-05-17 09:02:32 +00:00
  • dc22282272 x Johan Danielsson 2005-05-17 08:50:34 +00:00
  • c78321491c am_conditional have_cgetent Johan Danielsson 2005-05-17 08:50:23 +00:00
  • faa3d66323 x Love Hörnquist Åstrand 2005-05-17 08:17:11 +00:00
  • c226c11008 (init_auth): set KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED (for java compatibility), also while here, use krb5_auth_con_addflags Love Hörnquist Åstrand 2005-05-17 08:15:30 +00:00
  • 2dd7796261 (krb5_get_forwarded_creds): honor KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED and create unencrypted (ENCTYPE_NULL) credentials. for use with old mit server and java based ones as they can't handle encrypted KRB-CRED. Note that the option needs to turned on because if the consumer sends the KRB-CRED in clear bad things will happen. Love Hörnquist Åstrand 2005-05-17 08:12:29 +00:00
  • 682ff3fef0 (krb5_init_context): register krb5_javakt_ops Love Hörnquist Åstrand 2005-05-17 08:08:28 +00:00
  • d5cfe0c7fd KRB5_GC_EXPIRED_OK: expired credentials is ok to return from krb5_get_credentials. KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED: make forward credentials be unencrypted, for compatibility with mit kerberos and java kerberos. krb5_javakt_ops: export Love Hörnquist Åstrand 2005-05-17 08:06:30 +00:00
  • f9ca795602 Add new keytab file format JAVA14 that doesn't the use extended kvnos, as hinted, this is needed for Java's Kerberos implementation. Love Hörnquist Åstrand 2005-05-16 21:13:42 +00:00
  • 74a611d0fb x Love Hörnquist Åstrand 2005-05-16 16:45:07 +00:00
  • c745decaa9 x Love Hörnquist Åstrand 2005-05-16 08:54:09 +00:00
  • 00bd45ed01 check allocation errors Love Hörnquist Åstrand 2005-05-16 08:53:34 +00:00
  • 10c8d0da80 check allocation errors correctly Love Hörnquist Åstrand 2005-05-16 08:52:54 +00:00
  • e4e9f2151f catch buffer overrun and check allocation errors Love Hörnquist Åstrand 2005-05-16 08:52:36 +00:00
  • ebbd19bcac include <err.h> Love Hörnquist Åstrand 2005-05-16 08:51:47 +00:00
  • 877fe34c1b use strlcpy Love Hörnquist Åstrand 2005-05-16 08:42:45 +00:00
  • 8e639e2e4e x Johan Danielsson 2005-05-13 14:21:03 +00:00
  • 40b1dab5bd (start_login): set encryption pointers to NULL, so we don't try to do either Johan Danielsson 2005-05-13 14:20:38 +00:00
  • 07dc909772 x Love Hörnquist Åstrand 2005-05-13 10:57:31 +00:00
  • f07d4690f6 (_kadm5_c_init_context): fix memory leak in case of failure Love Hörnquist Åstrand 2005-05-13 10:57:13 +00:00
  • b21b5c89b5 x Love Hörnquist Åstrand 2005-05-13 08:05:21 +00:00
  • c2d9c8331b use unsigned char to avoid signess warning Love Hörnquist Åstrand 2005-05-13 08:04:51 +00:00
  • 136b3dc3cd (AES_cbc_encrypt): use unsigned char to avoid signess warning Love Hörnquist Åstrand 2005-05-13 08:00:09 +00:00
  • 834a97a1df x Love Hörnquist Åstrand 2005-05-13 07:42:19 +00:00
  • 2b2439af68 (issuid): change the #ifdef order to avoid unreachable code warning. Love Hörnquist Åstrand 2005-05-13 07:42:03 +00:00
  • 570ef02561 x Love Hörnquist Åstrand 2005-05-11 13:04:23 +00:00
  • 052dd71f3d Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args. Include err.h unconditionally, since it's always supplied. Love Hörnquist Åstrand 2005-05-11 13:04:04 +00:00
  • 93a6e79201 Get daemon declared on Solaris (it's in unistd.h but masked by a feature test), just to avoid a warning, since it has int args. Love Hörnquist Åstrand 2005-05-11 13:00:45 +00:00
  • 2a0c793a1b x Love Hörnquist Åstrand 2005-05-11 11:25:29 +00:00
  • 645647cbaa AC_CHECK_DECL and AC_CHECK_DECLS have a subtile diffrence, the later defines HAVE_ cpp symbols, the first doesn't. Love Hörnquist Åstrand 2005-05-11 11:25:19 +00:00
  • bae5bd65ec x Love Hörnquist Åstrand 2005-05-11 11:05:56 +00:00
  • 1cbf9cd859 undef ISASCII before we define our own (problem on Irix) Love Hörnquist Åstrand 2005-05-11 11:05:43 +00:00
  • 60ed51e6da MODEMASK is defined in sys/vnode.h on Solaris, so undef it before we define our own. Love Hörnquist Åstrand 2005-05-11 11:04:30 +00:00
  • 8151b90b67 #ifdef protect _PATH_ISSUE Love Hörnquist Åstrand 2005-05-11 11:02:42 +00:00
  • 8429cf6bbb x Love Hörnquist Åstrand 2005-05-11 07:35:37 +00:00
  • 958160a533 Include <crypt.h>. Love Hörnquist Åstrand 2005-05-11 07:35:04 +00:00
  • c4ec6e6212 x Love Hörnquist Åstrand 2005-05-10 22:20:55 +00:00
  • 31aba91bb4 Include <stdlib.h>. Love Hörnquist Åstrand 2005-05-10 22:19:01 +00:00
  • 6c0f2bf549 x Love Hörnquist Åstrand 2005-05-10 19:41:31 +00:00
  • a3c6124483 handle pkinit-9, pkinit-19, and pkinit-25 enckey, still no DH Love Hörnquist Åstrand 2005-05-10 19:40:39 +00:00
  • 2c65e2f431 (as_rep): search for pkinit-9, pkinit-19, and pkinit-25 pa-data, return empty pkinit pa-data in the PREAUTH_REQUIRED krb-error Love Hörnquist Åstrand 2005-05-10 19:37:44 +00:00
  • bdd471607e add pkinit people Love Hörnquist Åstrand 2005-05-10 19:34:57 +00:00
  • 5638ec9d75 x Love Hörnquist Åstrand 2005-05-10 10:47:30 +00:00
  • 4aaf4dd6bd document krb5_storage_is_flags Love Hörnquist Åstrand 2005-05-10 10:46:46 +00:00
  • cc22cac7ad x Love Hörnquist Åstrand 2005-05-10 09:24:19 +00:00
  • 9aa1875790 make more pretty, from Björn Sandell Love Hörnquist Åstrand 2005-05-10 09:21:06 +00:00
  • 9bc8053455 x Love Hörnquist Åstrand 2005-05-09 19:36:59 +00:00
  • b1624b36a0 Fix and clarify password quality check examples. Love Hörnquist Åstrand 2005-05-09 19:35:51 +00:00
  • 84e8f91f02 x Love Hörnquist Åstrand 2005-05-09 19:19:52 +00:00
  • bf00a76951 (find_func): Fix off-by-one and logic error. (external_passwd_quality): Improve messages. Love Hörnquist Åstrand 2005-05-09 19:17:34 +00:00
  • ccf7a3a123 (main): Call kadm5_setup_passwd_quality_check and kadm5_add_passwd_quality_verifier. Love Hörnquist Åstrand 2005-05-09 19:13:29 +00:00
  • 992bbb26cc x Love Hörnquist Åstrand 2005-05-09 15:42:17 +00:00
  • 23f6210e8f (krb5_kuserok): use POSIX_GETPWNAM_R instead of HAVE_GETPWNAM_R From: Dave Love <d.love@dl.ac.uk> Love Hörnquist Åstrand 2005-05-09 15:41:45 +00:00
  • fdfd23912b x Love Hörnquist Åstrand 2005-05-09 15:35:47 +00:00
  • 2c5228c78d (main): catch -2 as EOF Love Hörnquist Åstrand 2005-05-09 15:35:22 +00:00
  • 1977d8cc33 (sl_command_loop): new return code -2 for EOF (sl_loop): treat all return value from sl_command_loop >= 0 as ok, and continue. Love Hörnquist Åstrand 2005-05-09 15:31:43 +00:00
  • 4af1037b64 x Love Hörnquist Åstrand 2005-05-07 07:52:23 +00:00
  • db171a26fd (krb5_print_address): catch when the custom print v6-adresss don't fit Love Hörnquist Åstrand 2005-05-07 07:50:24 +00:00
  • 9496989cb7 x Love Hörnquist Åstrand 2005-05-06 07:14:31 +00:00
  • 1e4eaef45d (_gssapi_wrap_arcfour): fix calculating the encap length Tom Maher <tmaher@eecs.berkeley.edu> Love Hörnquist Åstrand 2005-05-06 07:13:32 +00:00
  • 61517aa5f0 man_MANS += iprop.8 Love Hörnquist Åstrand 2005-05-05 19:51:37 +00:00
  • 71aaf53616 add manpage for ipropd-master and ipropd-slave Love Hörnquist Åstrand 2005-05-05 19:48:29 +00:00
  • 651003dadd x Love Hörnquist Åstrand 2005-05-05 19:21:48 +00:00
  • 0fd13fc151 ignore N symbols too Love Hörnquist Åstrand 2005-05-05 19:20:34 +00:00
  • 4cc904767e fix type right test, include <termios.h> for sys/strtty.h, not sys/ptyvar.h Love Hörnquist Åstrand 2005-05-05 19:02:26 +00:00
  • 27bc736824 x Love Hörnquist Åstrand 2005-05-05 14:08:10 +00:00
  • 32ad0c150f spelling Love Hörnquist Åstrand 2005-05-05 14:07:48 +00:00
  • 2d75b4bc05 x Love Hörnquist Åstrand 2005-05-04 12:45:07 +00:00
  • 1ef7caec57 expand on what "trailing component" means Love Hörnquist Åstrand 2005-05-04 12:44:34 +00:00
  • 1af2a98a59 x Johan Danielsson 2005-05-04 12:25:09 +00:00
  • 82fa25b5c4 put address comparison in separate function Johan Danielsson 2005-05-04 12:25:04 +00:00
  • 7f6414c62f x Johan Danielsson 2005-05-04 12:11:31 +00:00
  • 67b2fd15f7 check the user's ~/.k5login.d directory for access files, all of which is handled like the regular ~/.k5login Johan Danielsson 2005-05-04 12:11:22 +00:00