heimdal/ChangeLog

2004-03-06  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/crypto.c (decrypt_internal_special): do not not modify
	the original data test case from Ronnie Sahlberg
	<ronnie_sahlberg@ozemail.com.au>

2004-03-03  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/test_cc.c: more cc tests, mostly related to mcc
	behavior

	* lib/krb5/mcache.c (mcc_get_principal): also check for
	primary_principal == NULL now that that isn't used as dead flag
	
	* lib/krb5/mcache.c: don't overload the primary_principal == NULL
	as dead since that doesn't always work. Based on patch from
	Jeffrey Hutzelman <jhutz@cmu.edu>, tweeked by me
	
2004-02-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/pkinit.c: adapt to rename of oid_cmp to heim_oid_cmp
	
	* lib/krb5/pkinit.c: adapt to rename of oid_cmp to heim_oid_cmp
	
	* lib/hdb/db3.c: fix all db >= 4.1 cases
	
	* doc/setup.texi: add text about hostname to realm mapping using
	DNS

2004-02-20  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/pkinit.c: update error codes
	
	* lib/krb5/krb5_err.et: prefix pkinit error codes with KRB5_

	* lib/krb5/pkinit.c: update error codes
	
2004-02-19  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/pkinit.c: indent, use krb5_abortx() instead of abort()
	
	* lib/krb5/init_creds_pw.c (process_pa_data_to_key): spelling
	
	* lib/krb5/store.c: handle memory allocate errors

	* lib/krb5/fcache.c (_krb5_xlock): handle that everything was ok,
	and don't put an error in the error strings then
	
2004-02-13  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/pkinit.c: s/heim_big_integer/heim_integer/
	
	* lib/krb5/pkinit.c: s/heim_big_integer/heim_integer/
	
	* kdc/pkinit.c: adapt to asn1 bignum code, use HEIM_PKINIT errors
	
	* lib/krb5/pkinit.c: adapt to asn1 bignum code, use HEIM_PKINIT
	errors
	
	* lib/krb5/heim_err.et: add HEIM_PKINIT specific errors
	
2004-02-12  Love Hörnquist Åstrand  <lha@it.su.se>

	* configure.in: rename AC_WFLAGS to rk_WFLAGS
	
	* acinclude.m4: use m4_define, over-quote string
	
2004-02-11  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/init_creds_pw.c (change_password): handle that
	printf("%.*s", 0, (void*)NULL); doesn't work on solaris
	
2004-02-10  Love Hörnquist Åstrand  <lha@it.su.se>

	* kpasswd/kpasswd.c (change_password): handle that printf("%.*s",
	0, (void*)NULL); doesn't work on solaris
	
	* lib/krb5/krb5.conf.5: don't use path's in first .Nm, it confuses
	some locate.updatedb, use FILES section to describe where the file
	is instead.

2004-02-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/asn1/check-der.c: test for "der_length.c: Fix len_unsigned
	for certain negative integers, it got the length wrong" , from
	Panasas, Inc.

	* lib/asn1/der_length.c: Fix len_unsigned for certain negative
	integers, it got the length wrong, fix from Panasas, Inc.
	
	rename len_int and len_unsigned to _heim_\&
	
	* lib/asn1/der_locl.h: add _heim_len_unsigned, _heim_len_int
	
2004-02-06  Dave Love  <d.love@dl.ac.uk>

	* configure.in: Check for sys/socket.h, net/if.h.  Modify term.h,
	security/pam_appl.h tests.
	
2004-02-03  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/asn1/check-gen.c: test for: (length_type): TSequenceOf: add
	up the size of all the elements, don't use just the size of the
	last element.

	* lib/krb5/aes-test.c: add "next iv" test for aes128, check
	decryption case too

	* lib/krb5/crypto.c (_krb5_aes_cts_encrypt): out iv is the iv of
	the next to last block, fix decryption case too
	
	* lib/krb5/aes-test.c: add "next iv" test for aes128
	
	* lib/krb5/crypto.c (_krb5_aes_cts_encrypt): out iv is the iv of
	the next to last block

	* lib/krb5/mk_rep.c (krb5_mk_rep): abort on internal asn1 encode
	error
	
	* lib/krb5/mk_rep.c (krb5_mk_rep): abort on internal asn1 encode
	error

	* lib/krb5/get_in_tkt.c (krb5_get_in_cred): abort on internal asn1
	encode error

	* lib/krb5/mk_priv.c (krb5_mk_priv): abort on internal asn1 encode
	error

	* lib/krb5/get_cred.c (make_pa_tgs_req): abort on internal asn1
	encode error

	* lib/krb5/build_auth.c (krb5_build_authenticator): abort on
	internal asn1 encode error

	* lib/krb5/build_ap_req.c (krb5_build_ap_req): abort on internal
	asn1 encode error

2004-01-30  Love Hörnquist Åstrand  <lha@it.su.se>

	* doc/setup.texi: some text about order of [capaths] realms
	
2004-01-25  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/context.c: register WRFILE ops
	
	* lib/krb5/keytab_file.c: add krb5_wrfkt_ops/WRFILE (same as FILE)
	
	* lib/krb5/krb5.h: add krb5_wrfkt_ops
	
	* kpasswd/kpasswdd.c (change): use the right password when
	changing the password

2004-01-21  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/fcache.c (_krb5_xlock): catch EINVAL and assume that it
	means that the filesystem doesn't support locking
	
	* lib/krb5/keytab.c: remove #if 0 out file locking code
	
2004-01-19  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/asn1/gen_length.c (length_type): TSequenceOf: add up the
	size of all the elements, don't use just the size of the last
	element.

2004-01-13  Love Hörnquist Åstrand  <lha@it.su.se>

	* kuser/kinit.c (renew_validate): if renewable_flag and not time
	specifed, use "1 month"

2004-01-08  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/krb5_keyblock.3: add prototypes, describe
	krb5_keyblock_zero

2004-01-05  Love Hörnquist Åstrand  <lha@it.su.se>

	* lib/krb5/get_for_creds.c (add_addrs): don't add same address
	multiple times

	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): try to
	handle errors better for previous commit

	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): If tickets
	are address-less, forward address-less tickets.
	
	* lib/krb5/get_cred.c: rename get_krbtgt to _krb5_get_krbtgt and
	export it