172445Sassar1999-12-30 Assar Westerlund <assar@sics.se> 272445Sassar 372445Sassar * configure.in (krb4): use `-ldes' in tests 472445Sassar 572445Sassar1999-12-26 Assar Westerlund <assar@sics.se> 672445Sassar 772445Sassar * lib/hdb/print.c (event2string): handle events without principal. 872445Sassar From Luke Howard <lukeh@PADL.COM> 972445Sassar 1072445Sassar1999-12-25 Assar Westerlund <assar@sics.se> 1172445Sassar 1272445Sassar * Release 0.2j 1372445Sassar 1472445SassarTue Dec 21 18:03:17 1999 Assar Westerlund <assar@sics.se> 1572445Sassar 1672445Sassar * lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and 1772445Sassar related systems 1872445Sassar 1972445Sassar * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and 2072445Sassar related systems 2172445Sassar 2272445Sassar * include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and 2372445Sassar related systems 2472445Sassar 2572445Sassar1999-12-20 Assar Westerlund <assar@sics.se> 2672445Sassar 2772445Sassar * Release 0.2i 2872445Sassar 2972445Sassar1999-12-20 Assar Westerlund <assar@sics.se> 3072445Sassar 3172445Sassar * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1 3272445Sassar 3372445Sassar * lib/krb5/send_to_kdc.c (send_via_proxy): free data 3472445Sassar * lib/krb5/send_to_kdc.c (send_via_proxy): new function use 3572445Sassar getaddrinfo instead of gethostbyname{,2} 3672445Sassar * lib/krb5/get_for_creds.c: use getaddrinfo instead of 3772445Sassar getnodebyname{,2} 3872445Sassar 3972445Sassar1999-12-17 Assar Westerlund <assar@sics.se> 4072445Sassar 4172445Sassar * Release 0.2h 4272445Sassar 4372445Sassar1999-12-17 Assar Westerlund <assar@sics.se> 4472445Sassar 4572445Sassar * Release 0.2g 4672445Sassar 4772445Sassar1999-12-16 Assar Westerlund <assar@sics.se> 4872445Sassar 4972445Sassar * lib/krb5/Makefile.am: bump version to 6:2:1 5072445Sassar 5172445Sassar * lib/krb5/principal.c (krb5_sname_to_principal): handle 5272445Sassar ai_canonname not being set 5372445Sassar * lib/krb5/expand_hostname.c (krb5_expand_hostname): handle 5472445Sassar ai_canonname not being set 5572445Sassar 5672445Sassar * appl/test/uu_server.c: print messages to stderr 5772445Sassar * appl/test/tcp_server.c: print messages to stderr 5872445Sassar * appl/test/nt_gss_server.c: print messages to stderr 5972445Sassar * appl/test/gssapi_server.c: print messages to stderr 6072445Sassar 6172445Sassar * appl/test/tcp_client.c (proto): remove shadowing `context' 6272445Sassar * appl/test/common.c (client_doit): add forgotten ntohs 6372445Sassar 6472445Sassar1999-12-13 Assar Westerlund <assar@sics.se> 6572445Sassar 6672445Sassar * configure.in (VERISON): bump to 0.2g-pre 6772445Sassar 6872445Sassar1999-12-12 Assar Westerlund <assar@sics.se> 6972445Sassar 7072445Sassar * lib/krb5/principal.c (krb5_425_conv_principal_ext): be more 7172445Sassar robust and handle extra dot at the beginning of default_domain 7272445Sassar 7372445Sassar1999-12-12 Assar Westerlund <assar@sics.se> 7472445Sassar 7572445Sassar * Release 0.2f 7672445Sassar 7772445Sassar1999-12-12 Assar Westerlund <assar@sics.se> 7872445Sassar 7972445Sassar * lib/krb5/Makefile.am: bump version to 6:1:1 8072445Sassar 8172445Sassar * lib/krb5/changepw.c (get_kdc_address): use 8272445Sassar `krb5_get_krb_changepw_hst' 8372445Sassar 8472445Sassar * lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add 8572445Sassar 8672445Sassar * lib/krb5/get_host_realm.c: add support for _kerberos.domain 8772445Sassar (according to draft-ietf-cat-krb-dns-locate-01.txt) 8872445Sassar 8972445Sassar1999-12-06 Assar Westerlund <assar@sics.se> 9072445Sassar 9172445Sassar * Release 0.2e 9272445Sassar 9372445Sassar1999-12-06 Assar Westerlund <assar@sics.se> 9472445Sassar 9572445Sassar * lib/krb5/changepw.c (krb5_change_password): use the correct 9672445Sassar address 9772445Sassar 9872445Sassar * lib/krb5/Makefile.am: bump version to 6:0:1 9972445Sassar 10072445Sassar * lib/asn1/Makefile.am: bump version to 1:4:0 10172445Sassar 10272445Sassar1999-12-04 Assar Westerlund <assar@sics.se> 10372445Sassar 10472445Sassar * configure.in: move AC_KRB_IPv6 to make sure it's performed 10572445Sassar before AC_BROKEN 10672445Sassar (el_init): use new feature of AC_FIND_FUNC_NO_LIBS 10772445Sassar 10872445Sassar * appl/test/uu_client.c: use client_doit 10972445Sassar * appl/test/test_locl.h (client_doit): add prototype 11072445Sassar * appl/test/tcp_client.c: use client_doit 11172445Sassar * appl/test/nt_gss_client.c: use client_doit 11272445Sassar * appl/test/gssapi_client.c: use client_doit 11372445Sassar * appl/test/common.c (client_doit): move identical code here and 11472445Sassar start using getaddrinfo 11572445Sassar 11672445Sassar * appl/kf/kf.c (doit): rewrite to use getaddrinfo 11772445Sassar * kdc/hprop.c: re-write to use getaddrinfo 11872445Sassar * lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo 11972445Sassar * lib/krb5/expand_hostname.c (krb5_expand_hostname): use 12072445Sassar getaddrinfo 12172445Sassar * lib/krb5/changepw.c: re-write to use getaddrinfo 12272445Sassar * lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo 12372445Sassar 12472445Sassar1999-12-03 Assar Westerlund <assar@sics.se> 12572445Sassar 12672445Sassar * configure.in (BROKEN): check for freeaddrinfo, getaddrinfo, 12772445Sassar getnameinfo, gai_strerror 12872445Sassar (socklen_t): check for 12972445Sassar 13072445Sassar1999-12-02 Johan Danielsson <joda@pdc.kth.se> 13172445Sassar 13272445Sassar * lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key 13372445Sassar 13472445Sassar1999-11-23 Assar Westerlund <assar@sics.se> 13572445Sassar 13672445Sassar * lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes 13772445Sassar within unicode characters. this should probably be done in some 13872445Sassar arbitrarly complex way to do it properly and you would have to 13972445Sassar know what character encoding was used for the password and salt 14072445Sassar string. 14172445Sassar 14272445Sassar * lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0 14372445Sassar (INADDR_ANY) 14472445Sassar (ipv6_uninteresting): remove unused macro 14572445Sassar 14672445Sassar1999-11-22 Johan Danielsson <joda@pdc.kth.se> 14772445Sassar 14872445Sassar * lib/krb5/krb5.h: rc4->arcfour 14972445Sassar 15072445Sassar * lib/krb5/crypto.c: rc4->arcfour 15172445Sassar 15272445Sassar1999-11-17 Assar Westerlund <assar@sics.se> 15372445Sassar 15472445Sassar * lib/krb5/krb5_locl.h: add <rc4.h> 15572445Sassar * lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4 15672445Sassar * lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might 15772445Sassar not be totally different from some small company up in the 15872445Sassar north-west corner of the US 15972445Sassar 16072445Sassar * lib/krb5/get_addrs.c (find_all_addresses): change code to 16172445Sassar actually increment buf_size 16272445Sassar 16372445Sassar1999-11-14 Assar Westerlund <assar@sics.se> 16472445Sassar 16572445Sassar * lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces' 16672445Sassar * lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces 16772445Sassar scanning optional 16872445Sassar * lib/krb5/context.c (init_context_from_config_file): set 16972445Sassar `scan_interfaces' 17072445Sassar 17172445Sassar * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c 17272445Sassar * lib/krb5/add_et_list.c (krb5_add_et_list): new function 17372445Sassar 17472445Sassar1999-11-12 Assar Westerlund <assar@sics.se> 17572445Sassar 17672445Sassar * lib/krb5/get_default_realm.c (krb5_get_default_realm, 17772445Sassar krb5_get_default_realms): set realms if they were unset 17872445Sassar * lib/krb5/context.c (init_context_from_config_file): don't 17972445Sassar initialize default realms here. it's done lazily instead. 18072445Sassar 18172445Sassar * lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned 18272445Sassar * lib/asn1/gen_glue.c (generate_2int, generate_units): make sure 18372445Sassar bit constants are unsigned 18472445Sassar * lib/asn1/gen.c (define_type): make length in sequences be 18572445Sassar unsigned. 18672445Sassar 18772445Sassar * configure.in: remove duplicate test for setsockopt test for 18872445Sassar struct tm.tm_isdst 18972445Sassar 19072445Sassar * lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate 19172445Sassar preauthentication information if we get back ERR_PREAUTH_REQUIRED 19272445Sassar * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove 19372445Sassar preauthentication generation code. it's now in krb5_get_in_cred 19472445Sassar 19572445Sassar * configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct 19672445Sassar tm.tm_gmtoff and timezone 19772445Sassar 19872445Sassar1999-11-11 Johan Danielsson <joda@pdc.kth.se> 19972445Sassar 20072445Sassar * kdc/main.c: make this work with multi-db 20172445Sassar 20272445Sassar * kdc/kdc_locl.h: make this work with multi-db 20372445Sassar 20472445Sassar * kdc/config.c: make this work with multi-db 20572445Sassar 20672445Sassar1999-11-09 Johan Danielsson <joda@pdc.kth.se> 20772445Sassar 20872445Sassar * kdc/misc.c: update for multi-database code 20972445Sassar 21072445Sassar * kdc/main.c: update for multi-database code 21172445Sassar 21272445Sassar * kdc/kdc_locl.h: update 21372445Sassar 21472445Sassar * kdc/config.c: allow us to have more than one database 21572445Sassar 21672445Sassar1999-11-04 Assar Westerlund <assar@sics.se> 21772445Sassar 21872445Sassar * Release 0.2d 21972445Sassar 22072445Sassar * lib/krb5/Makefile.am: bump version to 5:0:0 to be safe 22172445Sassar (krb5_context_data has changed and some code do (might) access 22272445Sassar fields directly) 22372445Sassar 22472445Sassar * lib/krb5/krb5.h (krb5_context_data): add `etypes_des' 22572445Sassar 22672445Sassar * lib/krb5/get_cred.c (init_tgs_req): use 22772445Sassar krb5_keytype_to_enctypes_default 22872445Sassar 22972445Sassar * lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new 23072445Sassar function 23172445Sassar 23272445Sassar * lib/krb5/context.c (set_etypes): new function 23372445Sassar (init_context_from_config_file): set both `etypes' and `etypes_des' 23472445Sassar 23572445Sassar1999-11-02 Assar Westerlund <assar@sics.se> 23672445Sassar 23772445Sassar * configure.in (VERSION): bump to 0.2d-pre 23872445Sassar 23972445Sassar1999-10-29 Assar Westerlund <assar@sics.se> 24072445Sassar 24172445Sassar * lib/krb5/principal.c (krb5_parse_name): check memory allocations 24272445Sassar 24372445Sassar1999-10-28 Assar Westerlund <assar@sics.se> 24472445Sassar 24572445Sassar * Release 0.2c 24672445Sassar 24772445Sassar * lib/krb5/dump_config.c (print_tree): check for empty tree 24872445Sassar 24972445Sassar * lib/krb5/string-to-key-test.c (tests): update the test cases 25072445Sassar with empty principals so that they actually use an empty realm and 25172445Sassar not the default. use the correct etype for 3DES 25272445Sassar 25372445Sassar * lib/krb5/Makefile.am: bump version to 4:1:0 25472445Sassar 25572445Sassar * kdc/config.c (configure): more careful with the port string 25672445Sassar 25772445Sassar1999-10-26 Assar Westerlund <assar@sics.se> 25872445Sassar 25972445Sassar * Release 0.2b 26072445Sassar 26172445Sassar1999-10-20 Assar Westerlund <assar@sics.se> 26272445Sassar 26372445Sassar * lib/krb5/Makefile.am: bump version to 4:0:0 26472445Sassar (krb524_convert_creds_kdc and potentially some other functions 26572445Sassar have changed prototypes) 26672445Sassar 26772445Sassar * lib/hdb/Makefile.am: bump version to 4:0:1 26872445Sassar 26972445Sassar * lib/asn1/Makefile.am: bump version to 1:3:0 27072445Sassar 27172445Sassar * configure.in (LIB_roken): add dbopen. getcap in roken 27272445Sassar references dbopen and with shared libraries we need to add this 27372445Sassar dependency. 27472445Sassar 27572445Sassar * lib/krb5/verify_krb5_conf.c (main): support speicifying the 27672445Sassar configuration file to test on the command line 27772445Sassar 27872445Sassar * lib/krb5/config_file.c (parse_binding): handle line with no 27972445Sassar whitespace before = 28072445Sassar (krb5_config_parse_file_debug): set lineno earlier so that we don't 28172445Sassar use it unitialized 28272445Sassar 28372445Sassar * configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need 28472445Sassar more include files for these tests 28572445Sassar 28672445Sassar * lib/krb5/set_default_realm.c (krb5_set_default_realm): use 28772445Sassar krb5_config_get_strings, which means that your configuration file 28872445Sassar should look like: 28972445Sassar 29072445Sassar [libdefaults] 29172445Sassar default_realm = realm1 realm2 realm3 29272445Sassar 29372445Sassar * lib/krb5/set_default_realm.c (config_binding_to_list): fix 29472445Sassar copy-o. From Michal Vocu <michal@karlin.mff.cuni.cz> 29572445Sassar 29672445Sassar * kdc/config.c (configure): add a missing strdup. From Michal 29772445Sassar Vocu <michal@karlin.mff.cuni.cz> 29872445Sassar 29972445Sassar1999-10-17 Assar Westerlund <assar@sics.se> 30072445Sassar 30172445Sassar * Release 0.2a 30272445Sassar 30372445Sassar * configure.in: only test for db.h with using berkeley_db. remember 30472445Sassar to link with LIB_tgetent when checking for el_init. add xnlock 30572445Sassar 30672445Sassar * appl/Makefile.am: add xnlock 30772445Sassar 30872445Sassar * kdc/kerberos5.c (find_etype): support null keys 30972445Sassar 31072445Sassar * kdc/kerberos4.c (get_des_key): support null keys 31172445Sassar 31272445Sassar * lib/krb5/crypto.c (krb5_get_wrapped_length): more correct 31372445Sassar calculation 31472445Sassar 31572445Sassar1999-10-16 Johan Danielsson <joda@pdc.kth.se> 31672445Sassar 31772445Sassar * kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc 31872445Sassar 31972445Sassar1999-10-12 Johan Danielsson <joda@pdc.kth.se> 32072445Sassar 32172445Sassar * lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning 32272445Sassar 32372445Sassar1999-10-10 Assar Westerlund <assar@sics.se> 32472445Sassar 32572445Sassar * lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm 32672445Sassar 32772445Sassar * lib/krb5/krb5.h (krb5_ccache_data): make `ops' const 32872445Sassar 32972445Sassar * lib/krb5/crypto.c (krb5_string_to_salttype): new function 33072445Sassar 33172445Sassar * **/*.[ch]: const-ize 33272445Sassar 33372445Sassar1999-10-06 Assar Westerlund <assar@sics.se> 33472445Sassar 33572445Sassar * lib/krb5/creds.c (krb5_compare_creds): const-ify 33672445Sassar 33772445Sassar * lib/krb5/cache.c: clean-up and comment-up 33872445Sassar 33972445Sassar * lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the 34072445Sassar strings 34172445Sassar 34272445Sassar * lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the 34372445Sassar correct realm part 34472445Sassar 34572445Sassar * kdc/connect.c (handle_tcp): things work much better when ret is 34672445Sassar initialized 34772445Sassar 34872445Sassar1999-10-03 Assar Westerlund <assar@sics.se> 34972445Sassar 35072445Sassar * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the 35172445Sassar type of the session key 35272445Sassar 35372445Sassar * lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell 35472445Sassar correctly 35572445Sassar 35672445Sassar * lib/krb5/creds.c (krb5_compare_creds): fix spelling of 35772445Sassar krb5_enctypes_compatible_keys 35872445Sassar 35972445Sassar * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new 36072445Sassar credentials from the KDC if the existing one doesn't have a DES 36172445Sassar session key. 36272445Sassar 36372445Sassar * lib/45/get_ad_tkt.c (get_ad_tkt): update to new 36472445Sassar krb524_convert_creds_kdc 36572445Sassar 36672445Sassar1999-10-03 Johan Danielsson <joda@pdc.kth.se> 36772445Sassar 36872445Sassar * lib/krb5/keytab_keyfile.c: make krb5_akf_ops const 36972445Sassar 37072445Sassar * lib/krb5/keytab_memory.c: make krb5_mkt_ops const 37172445Sassar 37272445Sassar * lib/krb5/keytab_file.c: make krb5_fkt_ops const 37372445Sassar 37472445Sassar1999-10-01 Assar Westerlund <assar@sics.se> 37572445Sassar 37672445Sassar * lib/krb5/config_file.c: rewritten to allow error messages 37772445Sassar 37872445Sassar * lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf 37972445Sassar (libkrb5_la_SOURCES): add config_file_netinfo.c 38072445Sassar 38172445Sassar * lib/krb5/verify_krb5_conf.c: new program for verifying that 38272445Sassar krb5.conf is corret 38372445Sassar 38472445Sassar * lib/krb5/config_file_netinfo.c: moved netinfo code here from 38572445Sassar config_file.c 38672445Sassar 38772445Sassar1999-09-28 Assar Westerlund <assar@sics.se> 38872445Sassar 38972445Sassar * kdc/hpropd.c (dump_krb4): kludge default_realm 39072445Sassar 39172445Sassar * lib/asn1/check-der.c: add test cases for Generalized time and 39272445Sassar make sure we return the correct value 39372445Sassar 39472445Sassar * lib/asn1/der_put.c: simplify by using der_put_length_and_tag 39572445Sassar 39672445Sassar * lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of 39772445Sassar krb5_verify_user that tries in all the local realms 39872445Sassar 39972445Sassar * lib/krb5/set_default_realm.c: add support for having several 40072445Sassar default realms 40172445Sassar 40272445Sassar * lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms' 40372445Sassar 40472445Sassar * lib/krb5/get_default_realm.c (krb5_get_default_realms): add 40572445Sassar 40672445Sassar * lib/krb5/krb5.h (krb5_context_data): change `default_realm' to 40772445Sassar `default_realms' 40872445Sassar 40972445Sassar * lib/krb5/context.c: change from `default_realm' to 41072445Sassar `default_realms' 41172445Sassar 41272445Sassar * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use 41372445Sassar krb5_get_default_realms 41472445Sassar 41572445Sassar * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c 41672445Sassar 41772445Sassar * lib/krb5/copy_host_realm.c: new file 41872445Sassar 41972445Sassar1999-09-27 Johan Danielsson <joda@pdc.kth.se> 42072445Sassar 42172445Sassar * lib/asn1/der_put.c (encode_generalized_time): encode length 42272445Sassar 42372445Sassar * lib/krb5/recvauth.c: new function `krb5_recvauth_match_version' 42472445Sassar that allows more intelligent matching of the application version 42572445Sassar 42672445Sassar1999-09-26 Assar Westerlund <assar@sics.se> 42772445Sassar 42872445Sassar * lib/asn1/asn1_print.c: add err.h 42972445Sassar 43072445Sassar * kdc/config.c (configure): use parse_bytes 43172445Sassar 43272445Sassar * appl/test/nt_gss_common.c: use the correct header file 43372445Sassar 43472445Sassar1999-09-24 Johan Danielsson <joda@pdc.kth.se> 43572445Sassar 43672445Sassar * kuser/klist.c: add a `--cache' flag 43772445Sassar 43872445Sassar * kuser/kinit.c (main): only get default value for `get_v4_tgt' if 43972445Sassar it's explicitly set in krb5.conf 44072445Sassar 44172445Sassar1999-09-23 Assar Westerlund <assar@sics.se> 44272445Sassar 44372445Sassar * lib/asn1/asn1_print.c (tag_names); add another univeral tag 44472445Sassar 44572445Sassar * lib/asn1/der.h: update universal tags 44672445Sassar 44772445Sassar1999-09-22 Assar Westerlund <assar@sics.se> 44872445Sassar 44972445Sassar * lib/asn1/asn1_print.c (loop): print length of octet string 45072445Sassar 45172445Sassar1999-09-21 Johan Danielsson <joda@pdc.kth.se> 45272445Sassar 45372445Sassar * admin/ktutil.c (kt_get): add `--help' 45472445Sassar 45572445Sassar1999-09-21 Assar Westerlund <assar@sics.se> 45672445Sassar 45772445Sassar * kuser/Makefile.am: add kdecode_ticket 45872445Sassar 45972445Sassar * kuser/kdecode_ticket.c: new debug program 46072445Sassar 46172445Sassar * appl/test/nt_gss_server.c: new program to test against `Sample * 46272445Sassar SSPI Code' in Windows 2000 RC1 SDK. 46372445Sassar 46472445Sassar * appl/test/Makefile.am: add nt_gss_client and nt_gss_server 46572445Sassar 46672445Sassar * lib/asn1/der_get.c (decode_general_string): remember to advance 46772445Sassar ret over the length-len 46872445Sassar 46972445Sassar * lib/asn1/Makefile.am: add asn1_print 47072445Sassar 47172445Sassar * lib/asn1/asn1_print.c: new program for printing DER-structures 47272445Sassar 47372445Sassar * lib/asn1/der_put.c: make functions more consistent 47472445Sassar 47572445Sassar * lib/asn1/der_get.c: make functions more consistent 47672445Sassar 47772445Sassar1999-09-20 Johan Danielsson <joda@pdc.kth.se> 47872445Sassar 47972445Sassar * kdc/kerberos5.c: be more informative in pa-data error messages 48072445Sassar 48172445Sassar1999-09-16 Assar Westerlund <assar@sics.se> 48272445Sassar 48372445Sassar * configure.in: test for strlcpy, strlcat 48472445Sassar 48572445Sassar1999-09-14 Assar Westerlund <assar@sics.se> 48672445Sassar 48772445Sassar * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return 48872445Sassar KRB5_LIBOS_PWDINTR when interrupted 48972445Sassar 49072445Sassar * lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return 49172445Sassar value from des_read_pw_string 49272445Sassar 49372445Sassar * kuser/kinit.c (main): don't print any error if reading the 49472445Sassar password was interrupted 49572445Sassar 49672445Sassar * kpasswd/kpasswd.c (main): don't print any error if reading the 49772445Sassar password was interrupted 49872445Sassar 49972445Sassar * kdc/string2key.c (main): check the return value from fgets 50072445Sassar 50172445Sassar * kdc/kstash.c (main): check return value from des_read_pw_string 50272445Sassar 50372445Sassar * admin/ktutil.c (kt_add): check the return-value from fgets and 50472445Sassar overwrite the password for paranoid reasons 50572445Sassar 50672445Sassar * lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the 50772445Sassar newline if it's there 50872445Sassar 50972445Sassar1999-09-13 Assar Westerlund <assar@sics.se> 51072445Sassar 51172445Sassar * kdc/hpropd.c (main): remove bogus error with `--print'. remove 51272445Sassar sysloging of number of principals transferred 51372445Sassar 51472445Sassar * kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL 51572445Sassar principals 51672445Sassar (main): get rid of bogus opening of hdb database when propagating 51772445Sassar ka-server database 51872445Sassar 51972445Sassar1999-09-12 Assar Westerlund <assar@sics.se> 52072445Sassar 52172445Sassar * lib/krb5/krb5_locl.h (O_BINARY): add fallback definition 52272445Sassar 52372445Sassar * lib/krb5/krb5.h (krb5_context_data): add keytab types 52472445Sassar 52572445Sassar * configure.in: revert back awk test, not worked around in 52672445Sassar roken.awk 52772445Sassar 52872445Sassar * lib/krb5/keytab_krb4.c: remove O_BINARY 52972445Sassar 53072445Sassar * lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's. From 53172445Sassar Love <lha@e.kth.se> 53272445Sassar 53372445Sassar * lib/krb5/keytab_file.c: remove O_BINARY 53472445Sassar 53572445Sassar * lib/krb5/keytab.c: move the list of keytab types to the context 53672445Sassar 53772445Sassar * lib/krb5/fcache.c: remove O_BINARY 53872445Sassar 53972445Sassar * lib/krb5/context.c (init_context_from_config_file): register all 54072445Sassar standard cache and keytab types 54172445Sassar (krb5_free_context): free `kt_types' 54272445Sassar 54372445Sassar * lib/krb5/cache.c (krb5_cc_resolve): move the registration of the 54472445Sassar standard types of credential caches to context 54572445Sassar 54672445Sassar * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c 54772445Sassar 54872445Sassar1999-09-10 Assar Westerlund <assar@sics.se> 54972445Sassar 55072445Sassar * lib/krb5/keytab.c: add comments and clean-up 55172445Sassar 55272445Sassar * admin/ktutil.c: add `ktutil copy' 55372445Sassar 55472445Sassar * lib/krb5/keytab_krb4.c: new file 55572445Sassar 55672445Sassar * lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field 55772445Sassar 55872445Sassar * lib/krb5/Makefile.am: add keytab_krb4.c 55972445Sassar 56072445Sassar * lib/krb5/keytab.c: add krb4 and correct some if's 56172445Sassar 56272445Sassar * admin/srvconvert.c (srvconv): move common code 56372445Sassar 56472445Sassar * lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables 56572445Sassar 56672445Sassar * lib/krb5/keytab.c: move out file and memory functions 56772445Sassar 56872445Sassar * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c, 56972445Sassar keytab_memory.c 57072445Sassar 57172445Sassar * lib/krb5/keytab_memory.c: new file 57272445Sassar 57372445Sassar * lib/krb5/keytab_file.c: new file 57472445Sassar 57572445Sassar * kpasswd/kpasswdd.c: move out password quality functions 57672445Sassar 57772445Sassar1999-09-07 Assar Westerlund <assar@sics.se> 57872445Sassar 57972445Sassar * lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c. From 58072445Sassar Love <lha@e.kth.se> 58172445Sassar 58272445Sassar * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check 58372445Sassar return value from `krb5_sendto_kdc' 58472445Sassar 58572445Sassar1999-09-06 Assar Westerlund <assar@sics.se> 58672445Sassar 58772445Sassar * lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and 58872445Sassar remove the sending of data. add a parameter `limit'. let callers 58972445Sassar send the date themselves (and preferably with net_write on tcp 59072445Sassar sockets) 59172445Sassar (send_and_recv_tcp): read first the length field and then only that 59272445Sassar many bytes 59372445Sassar 59472445Sassar1999-09-05 Assar Westerlund <assar@sics.se> 59572445Sassar 59672445Sassar * kdc/connect.c (handle_tcp): try to print warning `TCP data of 59772445Sassar strange type' less often 59872445Sassar 59972445Sassar * lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly. 60072445Sassar return on EOF. always free data. check return value from 60172445Sassar realloc. 60272445Sassar (send_and_recv_tcp, send_and_recv_http): check advertised length 60372445Sassar against actual length 60472445Sassar 60572445Sassar1999-09-01 Johan Danielsson <joda@pdc.kth.se> 60672445Sassar 60772445Sassar * configure.in: check for sgi capabilities 60872445Sassar 60972445Sassar1999-08-27 Johan Danielsson <joda@pdc.kth.se> 61072445Sassar 61172445Sassar * lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return 61272445Sassar extra addresses 61372445Sassar 61472445Sassar * kpasswd/kpasswdd.c: use HDB keytabs; change some error messages; 61572445Sassar add --realm flag 61672445Sassar 61772445Sassar * lib/krb5/address.c (krb5_append_addresses): remove duplicates 61872445Sassar 61972445Sassar1999-08-26 Johan Danielsson <joda@pdc.kth.se> 62072445Sassar 62172445Sassar * lib/hdb/keytab.c: HDB keytab backend 62272445Sassar 62372445Sassar1999-08-25 Johan Danielsson <joda@pdc.kth.se> 62472445Sassar 62572445Sassar * lib/krb5/keytab.c 62672445Sassar (krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL 62772445Sassar pointer 62872445Sassar 62972445Sassar1999-08-24 Johan Danielsson <joda@pdc.kth.se> 63072445Sassar 63172445Sassar * kpasswd/kpasswdd.c: add `--keytab' flag 63272445Sassar 63372445Sassar1999-08-23 Assar Westerlund <assar@sics.se> 63472445Sassar 63572445Sassar * lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr' 63672445Sassar instead of the non-standard `s6_addr32'. From Yoshinobu Inoue 63772445Sassar <shin@kame.net> by way of the KAME repository 63872445Sassar 63972445Sassar1999-08-18 Assar Westerlund <assar@sics.se> 64072445Sassar 64172445Sassar * configure.in (--enable-new-des3-code): remove check for `struct 64272445Sassar addrinfo' 64372445Sassar 64472445Sassar * lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable 64572445Sassar des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards 64672445Sassar compatability 64772445Sassar 64872445Sassar * lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key 64972445Sassar derivation) just got assigned etype 16 by <bcn@isi.edu>. keep the 65072445Sassar old etype at 7. 65172445Sassar 65272445Sassar1999-08-16 Assar Westerlund <assar@sics.se> 65372445Sassar 65472445Sassar * lib/krb5/sendauth.c (krb5_sendauth): only look at errno if 65572445Sassar krb5_net_read actually returns -1 65672445Sassar 65772445Sassar * lib/krb5/recvauth.c (krb5_recvauth): only look at errno if 65872445Sassar krb5_net_read actually returns -1 65972445Sassar 66072445Sassar * appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't 66172445Sassar returned -1 66272445Sassar 66372445Sassar * appl/test/tcp_server.c (proto): only trust errno if 66472445Sassar krb5_net_read actually returns -1 66572445Sassar 66672445Sassar * appl/kf/kfd.c (proto): be more careful with the return value 66772445Sassar from krb5_net_read 66872445Sassar 66972445Sassar1999-08-13 Assar Westerlund <assar@sics.se> 67072445Sassar 67172445Sassar * lib/krb5/get_addrs.c (get_addrs_int): try the different ways 67272445Sassar sequentially instead of just one. this helps if your heimdal was 67372445Sassar built with v6-support but your kernel doesn't have it, for 67472445Sassar example. 67572445Sassar 67672445Sassar1999-08-12 Assar Westerlund <assar@sics.se> 67772445Sassar 67872445Sassar * kdc/hpropd.c: add inetd flag. default means try to figure out 67972445Sassar if stdin is a socket or not. 68072445Sassar 68172445Sassar * Makefile.am (ACLOCAL): just use `cf', this variable is only used 68272445Sassar when the current directory is $(top_srcdir) anyways and having 68372445Sassar $(top_srcdir) there breaks if it's a relative path 68472445Sassar 68572445Sassar1999-08-09 Johan Danielsson <joda@pdc.kth.se> 68672445Sassar 68772445Sassar * configure.in: check for setproctitle 68872445Sassar 68972445Sassar1999-08-05 Assar Westerlund <assar@sics.se> 69072445Sassar 69172445Sassar * lib/krb5/principal.c (krb5_sname_to_principal): remember to call 69272445Sassar freehostent 69372445Sassar 69472445Sassar * appl/test/tcp_client.c: call freehostent 69572445Sassar 69672445Sassar * appl/kf/kf.c (doit): call freehostent 69772445Sassar 69872445Sassar * appl/kf/kf.c: make v6 friendly and simplify 69972445Sassar 70072445Sassar * appl/kf/kfd.c: make v6 friendly and simplify 70172445Sassar 70272445Sassar * appl/test/tcp_server.c: simplify by using krb5_err instead of 70372445Sassar errx 70472445Sassar 70572445Sassar * appl/test/tcp_client.c: simplify by using krb5_err instead of 70672445Sassar errx 70772445Sassar 70872445Sassar * appl/test/tcp_server.c: make v6 friendly and simplify 70972445Sassar 71072445Sassar * appl/test/tcp_client.c: make v6 friendly and simplify 71172445Sassar 71272445Sassar1999-08-04 Assar Westerlund <assar@sics.se> 71372445Sassar 71472445Sassar * Release 0.1m 71572445Sassar 71672445Sassar1999-08-04 Assar Westerlund <assar@sics.se> 71772445Sassar 71872445Sassar * kuser/kinit.c (main): some more KRB4-conditionalizing 71972445Sassar 72072445Sassar * lib/krb5/get_in_tkt.c: type correctness 72172445Sassar 72272445Sassar * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in 72372445Sassar flags. From Miroslav Ruda <ruda@ics.muni.cz> 72472445Sassar 72572445Sassar * kuser/kinit.c (main): add config file support for forwardable 72672445Sassar and krb4 support. From Miroslav Ruda <ruda@ics.muni.cz> 72772445Sassar 72872445Sassar * kdc/kerberos5.c (as_rep): add an empty X500-compress string as 72972445Sassar transited. 73072445Sassar (fix_transited_encoding): check length. 73172445Sassar From Miroslav Ruda <ruda@ics.muni.cz> 73272445Sassar 73372445Sassar * kdc/hpropd.c (dump_krb4): check the realm so that we don't dump 73472445Sassar principals in some other realm. From Miroslav Ruda 73572445Sassar <ruda@ics.muni.cz> 73672445Sassar (main): rename sa_len -> sin_len, sa_lan is a define on some 73772445Sassar platforms. 73872445Sassar 73972445Sassar * appl/kf/kfd.c: add regpag support. From Miroslav Ruda 74072445Sassar <ruda@ics.muni.cz> 74172445Sassar 74272445Sassar * appl/kf/kf.c: add `-G' and forwardable option in krb5.conf. 74372445Sassar From Miroslav Ruda <ruda@ics.muni.cz> 74472445Sassar 74572445Sassar * lib/krb5/config_file.c (parse_list): don't run past end of line 74672445Sassar 74772445Sassar * appl/test/gss_common.h: new prototypes 74872445Sassar 74972445Sassar * appl/test/gssapi_client.c: use gss_err instead of abort 75072445Sassar 75172445Sassar * appl/test/gss_common.c (gss_verr, gss_err): add 75272445Sassar 75372445Sassar1999-08-03 Assar Westerlund <assar@sics.se> 75472445Sassar 75572445Sassar * lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this 75672445Sassar otherwise it doesn't build with shared libraries 75772445Sassar 75872445Sassar * kdc/hpropd.c: v6-ify 75972445Sassar 76072445Sassar * kdc/hprop.c: v6-ify 76172445Sassar 76272445Sassar1999-08-01 Assar Westerlund <assar@sics.se> 76372445Sassar 76472445Sassar * lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname 76572445Sassar 76672445Sassar1999-07-31 Assar Westerlund <assar@sics.se> 76772445Sassar 76872445Sassar * lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new 76972445Sassar function that takes a FQDN 77072445Sassar 77172445Sassar * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c 77272445Sassar 77372445Sassar * lib/krb5/expand_hostname.c: new file 77472445Sassar 77572445Sassar1999-07-28 Assar Westerlund <assar@sics.se> 77672445Sassar 77772445Sassar * Release 0.1l 77872445Sassar 77972445Sassar1999-07-28 Assar Westerlund <assar@sics.se> 78072445Sassar 78172445Sassar * lib/asn1/Makefile.am: bump version to 1:2:0 78272445Sassar 78372445Sassar * lib/krb5/Makefile.am: bump version to 3:1:0 78472445Sassar 78572445Sassar * configure.in: more inet_pton to roken 78672445Sassar 78772445Sassar * lib/krb5/principal.c (krb5_sname_to_principal): use 78872445Sassar getipnodebyname 78972445Sassar 79072445Sassar1999-07-26 Assar Westerlund <assar@sics.se> 79172445Sassar 79272445Sassar * Release 0.1k 79372445Sassar 79472445Sassar1999-07-26 Johan Danielsson <joda@pdc.kth.se> 79572445Sassar 79672445Sassar * lib/krb5/Makefile.am: bump version number (changed function 79772445Sassar signatures) 79872445Sassar 79972445Sassar * lib/hdb/Makefile.am: bump version number (changes to some 80072445Sassar function signatures) 80172445Sassar 80272445Sassar1999-07-26 Assar Westerlund <assar@sics.se> 80372445Sassar 80472445Sassar * lib/krb5/Makefile.am: bump version to 3:0:2 80572445Sassar 80672445Sassar * lib/hdb/Makefile.am: bump version to 2:1:0 80772445Sassar 80872445Sassar * lib/asn1/Makefile.am: bump version to 1:1:0 80972445Sassar 81072445Sassar1999-07-26 Assar Westerlund <assar@sics.se> 81172445Sassar 81272445Sassar * Release 0.1j 81372445Sassar 81472445Sassar1999-07-26 Assar Westerlund <assar@sics.se> 81572445Sassar 81672445Sassar * configure.in: rokenize inet_ntop 81772445Sassar 81872445Sassar * lib/krb5/store_fd.c: lots of changes from size_t to ssize_t 81972445Sassar 82072445Sassar * lib/krb5/store_mem.c: lots of changes from size_t to ssize_t 82172445Sassar 82272445Sassar * lib/krb5/store_emem.c: lots of changes from size_t to ssize_t 82372445Sassar 82472445Sassar * lib/krb5/store.c: lots of changes from size_t to ssize_t 82572445Sassar (krb5_ret_stringz): check return value from realloc 82672445Sassar 82772445Sassar * lib/krb5/mk_safe.c: some type correctness 82872445Sassar 82972445Sassar * lib/krb5/mk_priv.c: some type correctness 83072445Sassar 83172445Sassar * lib/krb5/krb5.h (krb5_storage): change return values of 83272445Sassar functions from size_t to ssize_t 83372445Sassar 83472445Sassar1999-07-24 Assar Westerlund <assar@sics.se> 83572445Sassar 83672445Sassar * Release 0.1i 83772445Sassar 83872445Sassar * configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \# 83972445Sassar in lib/roken/roken.awk 84072445Sassar 84172445Sassar * lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to 84272445Sassar step over addresses if there's no `sa_lan' field 84372445Sassar 84472445Sassar * lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by 84572445Sassar using `struct sockaddr_storage' 84672445Sassar 84772445Sassar * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using 84872445Sassar `struct sockaddr_storage' 84972445Sassar 85072445Sassar * lib/krb5/changepw.c (krb5_change_password): simplify by using 85172445Sassar `struct sockaddr_storage' 85272445Sassar 85372445Sassar * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): 85472445Sassar simplify by using `struct sockaddr_storage' 85572445Sassar 85672445Sassar * kpasswd/kpasswdd.c (*): simplify by using `struct 85772445Sassar sockaddr_storage' 85872445Sassar 85972445Sassar * kdc/connect.c (*): simplify by using `struct sockaddr_storage' 86072445Sassar 86172445Sassar * configure.in (sa_family_t): just test for existence 86272445Sassar (sockaddr_storage): also specify include file 86372445Sassar 86472445Sassar * configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i 86572445Sassar (sa_family_t): test for 86672445Sassar (struct sockaddr_storage): test for 86772445Sassar 86872445Sassar * kdc/hprop.c (propagate_database): typo, NULL should be 86972445Sassar auth_context 87072445Sassar 87172445Sassar * lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of 87272445Sassar AF_INET6 87372445Sassar 87472445Sassar * appl/kf/kf.c (main): use warnx 87572445Sassar 87672445Sassar * appl/kf/kf.c (proto): remove shadowing context 87772445Sassar 87872445Sassar * lib/krb5/get_addrs.c (find_all_addresses): try to handle the 87972445Sassar case of getting back an `sockaddr_in6' address when sizeof(struct 88072445Sassar sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to 88172445Sassar tell us how large the address is. This obviously doesn't work 88272445Sassar with unknown protocol types. 88372445Sassar 88472445Sassar1999-07-24 Assar Westerlund <assar@sics.se> 88572445Sassar 88672445Sassar * Release 0.1h 88772445Sassar 88872445Sassar1999-07-23 Assar Westerlund <assar@sics.se> 88972445Sassar 89072445Sassar * appl/kf/kfd.c: clean-up and more paranoia 89172445Sassar 89272445Sassar * etc/services.append: add kf 89372445Sassar 89472445Sassar * appl/kf/kf.c: rename tk_file to ccache for consistency. clean-up 89572445Sassar 89672445Sassar1999-07-22 Assar Westerlund <assar@sics.se> 89772445Sassar 89872445Sassar * lib/krb5/n-fold-test.c (main): print the correct data 89972445Sassar 90072445Sassar * appl/Makefile.am (SUBDIRS): add kf 90172445Sassar 90272445Sassar * appl/kf: new program. From Miroslav Ruda <ruda@ics.muni.cz> 90372445Sassar 90472445Sassar * kdc/hprop.c: declare some variables unconditionally to simplify 90572445Sassar things 90672445Sassar 90772445Sassar * kpasswd/kpasswdd.c: initialize kadm5 connection for every change 90872445Sassar (otherwise the modifier in the database doesn't get set) 90972445Sassar 91072445Sassar * kdc/hpropd.c: clean-up and re-organize 91172445Sassar 91272445Sassar * kdc/hprop.c: clean-up and re-organize 91372445Sassar 91472445Sassar * configure.in (SunOS): define to xy for SunOS x.y 91572445Sassar 91672445Sassar1999-07-19 Assar Westerlund <assar@sics.se> 91772445Sassar 91872445Sassar * configure.in (AC_BROKEN): test for copyhostent, freehostent, 91972445Sassar getipnodebyaddr, getipnodebyname 92072445Sassar 92172445Sassar1999-07-15 Assar Westerlund <assar@sics.se> 92272445Sassar 92372445Sassar * lib/asn1/check-der.c: more test cases for integers 92472445Sassar 92572445Sassar * lib/asn1/der_length.c (length_int): handle the case of the 92672445Sassar largest negative integer by not calling abs 92772445Sassar 92872445Sassar1999-07-14 Assar Westerlund <assar@sics.se> 92972445Sassar 93072445Sassar * lib/asn1/check-der.c (generic_test): check malloc return value 93172445Sassar properly 93272445Sassar 93372445Sassar * lib/krb5/Makefile.am: add string_to_key_test 93472445Sassar 93572445Sassar * lib/krb5/prog_setup.c (krb5_program_setup): always initialize 93672445Sassar the context 93772445Sassar 93872445Sassar * lib/krb5/n-fold-test.c (main): return a relevant return value 93972445Sassar 94072445Sassar * lib/krb5/krbhst.c: do SRV lookups for admin server as well. 94172445Sassar some clean-up. 94272445Sassar 94372445Sassar1999-07-12 Assar Westerlund <assar@sics.se> 94472445Sassar 94572445Sassar * configure.in: handle not building X programs 94672445Sassar 94772445Sassar1999-07-06 Assar Westerlund <assar@sics.se> 94872445Sassar 94972445Sassar * lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate 95072445Sassar variable 95172445Sassar (ipv6_sockaddr2port): fix typo 95272445Sassar 95372445Sassar * etc/services.append: beginning of a file with services 95472445Sassar 95572445Sassar * lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if 95672445Sassar there's no prefix. also clean-up a little bit. 95772445Sassar 95872445Sassar * kdc/hprop.c (--kaspecials): new flag for handling special KA 95972445Sassar server entries. From "Brandon S. Allbery KF8NH" 96072445Sassar <allbery@kf8nh.apk.net> 96172445Sassar 96272445Sassar1999-07-05 Assar Westerlund <assar@sics.se> 96372445Sassar 96472445Sassar * kdc/connect.c (handle_tcp): make sure we have data before 96572445Sassar starting to look for HTTP 96672445Sassar 96772445Sassar * kdc/connect.c (handle_tcp): always do getpeername, we can't 96872445Sassar trust recvfrom to return anything sensible 96972445Sassar 97072445Sassar1999-07-04 Assar Westerlund <assar@sics.se> 97172445Sassar 97272445Sassar * lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with 97372445Sassar all enctypes 97472445Sassar 97572445Sassar * kpasswd/kpasswdd.c (change): fetch the salt-type from the entry 97672445Sassar 97772445Sassar * admin/srvconvert.c (srvconv): better error messages 97872445Sassar 97972445Sassar1999-07-03 Assar Westerlund <assar@sics.se> 98072445Sassar 98172445Sassar * lib/krb5/principal.c (unparse_name): error check malloc properly 98272445Sassar 98372445Sassar * lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc 98472445Sassar properly 98572445Sassar 98672445Sassar * lib/krb5/crypto.c (*): do some malloc return-value checks 98772445Sassar properly 98872445Sassar 98972445Sassar * lib/hdb/hdb.c (hdb_process_master_key): simplify by using 99072445Sassar krb5_data_alloc 99172445Sassar 99272445Sassar * lib/hdb/hdb.c (hdb_process_master_key): check return value from 99372445Sassar malloc 99472445Sassar 99572445Sassar * lib/asn1/gen_decode.c (decode_type): fix generation of decoding 99672445Sassar information for TSequenceOf. 99772445Sassar 99872445Sassar * kdc/kerberos5.c (get_pa_etype_info): check return value from 99972445Sassar malloc 100072445Sassar 100172445Sassar1999-07-02 Assar Westerlund <assar@sics.se> 100272445Sassar 100372445Sassar * lib/asn1/der_copy.c (copy_octet_string): don't fail if length == 100472445Sassar 0 and malloc returns NULL 100572445Sassar 100672445Sassar1999-06-29 Assar Westerlund <assar@sics.se> 100772445Sassar 100872445Sassar * lib/krb5/addr_families.c (ipv6_parse_addr): implement 100972445Sassar 101072445Sassar1999-06-24 Assar Westerlund <assar@sics.se> 101172445Sassar 101272445Sassar * lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address 101372445Sassar as an addrport one 101472445Sassar 101572445Sassar * lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT): 101672445Sassar add 101772445Sassar (krb5_auth_context): add local and remote port 101872445Sassar 101972445Sassar * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the 102072445Sassar local and remote address and add them to the krb-cred packet 102172445Sassar 102272445Sassar * lib/krb5/auth_context.c: save the local and remove ports in the 102372445Sassar auth_context 102472445Sassar 102572445Sassar * lib/krb5/address.c (krb5_make_addrport): create an address of 102672445Sassar type KRB5_ADDRESS_ADDRPORT from (addr, port) 102772445Sassar 102872445Sassar * lib/krb5/addr_families.c (krb5_sockaddr2port): new function for 102972445Sassar grabbing the port number out of the sockaddr 103072445Sassar 103172445Sassar1999-06-23 Assar Westerlund <assar@sics.se> 103272445Sassar 103372445Sassar * admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key. 103472445Sassar increase possible verbosity. 103572445Sassar 103672445Sassar * lib/krb5/config_file.c (parse_list): handle blank lines at 103772445Sassar another place 103872445Sassar 103972445Sassar * kdc/connect.c (add_port_string): don't return a value 104072445Sassar 104172445Sassar * lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred 104272445Sassar cache if the principals are different. close and NULL the old one 104372445Sassar so that we create a new one. 104472445Sassar 104572445Sassar * configure.in: move around cgywin et al 104672445Sassar (LIB_kdb): set at the end of krb4-block 104772445Sassar (krb4): test for krb_enable_debug and krb_disable_debug 104872445Sassar 104972445Sassar1999-06-16 Assar Westerlund <assar@sics.se> 105072445Sassar 105172445Sassar * kuser/kdestroy.c (main): try to destroy v4 ticket even if the 105272445Sassar destruction of the v5 one fails 105372445Sassar 105472445Sassar * lib/krb5/crypto.c (DES3_postproc): new version that does the 105572445Sassar right thing 105672445Sassar (*): don't put and recover length in 3DES encoding 105772445Sassar other small fixes 105872445Sassar 105972445Sassar1999-06-15 Assar Westerlund <assar@sics.se> 106072445Sassar 106172445Sassar * lib/krb5/get_default_principal.c: rewrite to use 106272445Sassar get_default_username 106372445Sassar 106472445Sassar * lib/krb5/Makefile.am: add n-fold-test 106572445Sassar 106672445Sassar * kdc/connect.c: add fallbacks for all lookups by service name 106772445Sassar (handle_tcp): break-up and clean-up 106872445Sassar 106972445Sassar1999-06-09 Assar Westerlund <assar@sics.se> 107072445Sassar 107172445Sassar * lib/krb5/addr_families.c (ipv6_uninteresting): don't consider 107272445Sassar the loopback address as uninteresting 107372445Sassar 107472445Sassar * lib/krb5/get_addrs.c: new magic flag to get loopback address if 107572445Sassar there are no other addresses. 107672445Sassar (krb5_get_all_client_addrs): use that flag 107772445Sassar 107872445Sassar1999-06-04 Assar Westerlund <assar@sics.se> 107972445Sassar 108072445Sassar * lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the 108172445Sassar length 108272445Sassar (checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64 108372445Sassar (encrypt_internal_derived): don't include the length and don't 108472445Sassar decrease by the checksum size twice 108572445Sassar (_get_derived_key): the constant should be 5 bytes 108672445Sassar 108772445Sassar1999-06-02 Johan Danielsson <joda@pdc.kth.se> 108872445Sassar 108972445Sassar * configure.in: use KRB_CHECK_X 109072445Sassar 109172445Sassar * configure.in: check for netinet/ip.h 109272445Sassar 109372445Sassar1999-05-31 Assar Westerlund <assar@sics.se> 109472445Sassar 109572445Sassar * kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize 109672445Sassar on RTLD_NOW 109772445Sassar 109872445Sassar1999-05-23 Assar Westerlund <assar@sics.se> 109972445Sassar 110072445Sassar * appl/test/uu_server.c: removed unused stuff 110172445Sassar 110272445Sassar * appl/test/uu_client.c: removed unused stuff 110372445Sassar 110472445Sassar1999-05-21 Assar Westerlund <assar@sics.se> 110572445Sassar 110672445Sassar * kuser/kgetcred.c (main): correct error message 110772445Sassar 110872445Sassar * lib/krb5/crypto.c (verify_checksum): call (*ct->checksum) 110972445Sassar directly, avoiding redundant lookups and memory leaks 111072445Sassar 111172445Sassar * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free 111272445Sassar local and remote addresses 111372445Sassar 111472445Sassar * lib/krb5/get_default_principal.c (get_logname): also try 111572445Sassar $USERNAME 111672445Sassar 111772445Sassar * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) 111872445Sassar 111972445Sassar * lib/krb5/principal.c (USE_RESOLVER): try to define only if we 112072445Sassar have a libresolv (currently by checking for res_search) 112172445Sassar 112272445Sassar1999-05-18 Johan Danielsson <joda@pdc.kth.se> 112372445Sassar 112472445Sassar * kdc/connect.c (handle_tcp): remove %-escapes in request 112572445Sassar 112672445Sassar1999-05-14 Assar Westerlund <assar@sics.se> 112772445Sassar 112872445Sassar * Release 0.1g 112972445Sassar 113072445Sassar * admin/ktutil.c (kt_remove): -t should be -e 113172445Sassar 113272445Sassar * configure.in (CHECK_NETINET_IP_AND_TCP): use 113372445Sassar 113472445Sassar * kdc/hpropd.c: support for dumping to krb4. From Miroslav Ruda 113572445Sassar <ruda@ics.muni.cz> 113672445Sassar 113772445Sassar * admin/ktutil.c (kt_add): new option `--no-salt'. From Miroslav 113872445Sassar Ruda <ruda@ics.muni.cz> 113972445Sassar 114072445Sassar * configure.in: add cygwin and DOS tests replace sendmsg, recvmsg, 114172445Sassar and innetgr with roken versions 114272445Sassar 114372445Sassar * kuser/kgetcred.c: new program 114472445Sassar 114572445SassarTue May 11 14:09:33 1999 Johan Danielsson <joda@pdc.kth.se> 114672445Sassar 114772445Sassar * lib/krb5/mcache.c: fix paste-o 114872445Sassar 114972445Sassar1999-05-10 Johan Danielsson <joda@pdc.kth.se> 115072445Sassar 115172445Sassar * configure.in: don't use uname 115272445Sassar 115372445Sassar1999-05-10 Assar Westerlund <assar@sics.se> 115472445Sassar 115572445Sassar * acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four 115672445Sassar arguments :-) 115772445Sassar 115872445Sassar * appl/test/uu_server.c (setsockopt): cast to get rid of a warning 115972445Sassar 116072445Sassar * appl/test/tcp_server.c (setsockopt): cast to get rid of a 116172445Sassar warning 116272445Sassar 116372445Sassar * appl/test/tcp_client.c (proto): call krb5_sendauth with ccache 116472445Sassar == NULL 116572445Sassar 116672445Sassar * appl/test/gssapi_server.c (setsockopt): cast to get rid of a 116772445Sassar warning 116872445Sassar 116972445Sassar * lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by 117072445Sassar setting the default ccache. 117172445Sassar 117272445Sassar * configure.in (getsockopt, setsockopt): test for 117372445Sassar (AM_INIT_AUTOMAKE): bump version to 0.1g 117472445Sassar 117572445Sassar * appl/Makefile.am (SUBDIRS): add kx 117672445Sassar 117772445Sassar * lib/hdb/convert_db.c (main): handle the case of no master key 117872445Sassar 117972445Sassar1999-05-09 Assar Westerlund <assar@sics.se> 118072445Sassar 118172445Sassar * Release 0.1f 118272445Sassar 118372445Sassar * kuser/kinit.c: add --noaddresses 118472445Sassar 118572445Sassar * lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an 118672445Sassar empty sit of list as to not ask for any addresses. 118772445Sassar 118872445Sassar1999-05-08 Assar Westerlund <assar@sics.se> 118972445Sassar 119072445Sassar * acconfig.h (_GNU_SOURCE): define this to enable (used) 119172445Sassar extensions on glibc-based systems such as linux 119272445Sassar 119372445Sassar1999-05-03 Assar Westerlund <assar@sics.se> 119472445Sassar 119572445Sassar * lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free 119672445Sassar `*out_creds' properly 119772445Sassar 119872445Sassar * lib/krb5/creds.c (krb5_compare_creds): just verify that the 119972445Sassar keytypes/enctypes are compatible, not that they are the same 120072445Sassar 120172445Sassar * kuser/kdestroy.c (cache): const-correctness 120272445Sassar 120372445Sassar1999-05-03 Johan Danielsson <joda@pdc.kth.se> 120472445Sassar 120572445Sassar * lib/hdb/hdb.c (hdb_set_master_key): initialise master key 120672445Sassar version 120772445Sassar 120872445Sassar * lib/hdb/convert_db.c: add support for upgrading database 120972445Sassar versions 121072445Sassar 121172445Sassar * kdc/misc.c: add flags to fetch 121272445Sassar 121372445Sassar * kdc/kstash.c: unlink keyfile on failure, chmod to 400 121472445Sassar 121572445Sassar * kdc/hpropd.c: add --print option 121672445Sassar 121772445Sassar * kdc/hprop.c: pass flags to hdb_foreach 121872445Sassar 121972445Sassar * lib/hdb/convert_db.c: add some flags 122072445Sassar 122172445Sassar * lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2; 122272445Sassar build prototype headers 122372445Sassar 122472445Sassar * lib/hdb/hdb_locl.h: update prototypes 122572445Sassar 122672445Sassar * lib/hdb/print.c: move printable version of entry from kadmin 122772445Sassar 122872445Sassar * lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is 122972445Sassar sealed or not; add flags to hdb_foreach 123072445Sassar 123172445Sassar * lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and 123272445Sassar NDBM_nextkey 123372445Sassar 123472445Sassar * lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey 123572445Sassar 123672445Sassar * lib/hdb/common.c: add flags to _hdb_{fetch,store} 123772445Sassar 123872445Sassar * lib/hdb/hdb.h: add master_key_version to struct hdb, update 123972445Sassar prototypes 124072445Sassar 124172445Sassar * lib/hdb/hdb.asn1: make mkvno optional, update version to 2 124272445Sassar 124372445Sassar * configure.in: --enable-netinfo 124472445Sassar 124572445Sassar * lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO 124672445Sassar 124772445Sassar * config.sub: fix for crays 124872445Sassar 124972445Sassar * config.guess: new version from automake 1.4 125072445Sassar 125172445Sassar * config.sub: new version from automake 1.4 125272445Sassar 125372445SassarWed Apr 28 00:21:17 1999 Assar Westerlund <assar@sics.se> 125472445Sassar 125572445Sassar * Release 0.1e 125672445Sassar 125772445Sassar * lib/krb5/mcache.c (mcc_get_next): get the current cursor 125872445Sassar correctly 125972445Sassar 126072445Sassar * acconfig.h: correct definition of KRB_PUT_INT for old krb4 code. 126172445Sassar From Ake Sandgren <ake@cs.umu.se> 126272445Sassar 126372445Sassar1999-04-27 Johan Danielsson <joda@pdc.kth.se> 126472445Sassar 126572445Sassar * kdc/kerberos5.c: fix arguments to decrypt_ticket 126672445Sassar 126772445Sassar1999-04-25 Assar Westerlund <assar@sics.se> 126872445Sassar 126972445Sassar * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old 127072445Sassar DCE secd's that are not able to handle MD5 checksums by defaulting 127172445Sassar to MD4 if the keytype was DES-CBC-CRC 127272445Sassar 127372445Sassar * lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype 127472445Sassar 127572445Sassar * lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and 127672445Sassar `cksumtype' 127772445Sassar 127872445Sassar * lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for 127972445Sassar secd 128072445Sassar (init_tgs_req): add all supported enctypes for the keytype in 128172445Sassar `in_creds->session.keytype' if it's set 128272445Sassar 128372445Sassar * lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol 128472445Sassar encryption types 128572445Sassar (do_checksum): new function 128672445Sassar (verify_checksum): take the checksum to use from the checksum message 128772445Sassar and not from the crypto struct 128872445Sassar (etypes): add F_PSEUDO flags 128972445Sassar (krb5_keytype_to_enctypes): new function 129072445Sassar 129172445Sassar * lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype 129272445Sassar and cksumtype 129372445Sassar (krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement 129472445Sassar (krb5_auth_setkeytype, krb5_auth_getkeytype): implement 129572445Sassar (krb5_auth_setenctype): comment out, it's rather bogus anyway 129672445Sassar 129772445SassarSun Apr 25 16:55:50 1999 Johan Danielsson <joda@pdc.kth.se> 129872445Sassar 129972445Sassar * lib/krb5/krb5_locl.h: fix for stupid aix warnings 130072445Sassar 130172445Sassar * lib/krb5/fcache.c (erase_file): don't malloc 130272445Sassar 130372445SassarSat Apr 24 18:35:21 1999 Johan Danielsson <joda@pdc.kth.se> 130472445Sassar 130572445Sassar * kdc/config.c: pass context to krb5_config_file_free 130672445Sassar 130772445Sassar * kuser/kinit.c: add `--fcache-version' to set cache version to 130872445Sassar create 130972445Sassar 131072445Sassar * kuser/klist.c: print cache version if verbose 131172445Sassar 131272445Sassar * lib/krb5/transited.c (krb5_domain_x500_decode): don't abort 131372445Sassar 131472445Sassar * lib/krb5/principal.c: abort -> krb5_abortx 131572445Sassar 131672445Sassar * lib/krb5/mk_rep.c: abort -> krb5_abortx 131772445Sassar 131872445Sassar * lib/krb5/config_file.c: abort -> krb5_abortx 131972445Sassar 132072445Sassar * lib/krb5/context.c (init_context_from_config_file): init 132172445Sassar fcache_version; add krb5_{get,set}_fcache_version 132272445Sassar 132372445Sassar * lib/krb5/keytab.c: add support for reading (and writing?) old 132472445Sassar version keytabs 132572445Sassar 132672445Sassar * lib/krb5/cache.c: add krb5_cc_get_version 132772445Sassar 132872445Sassar * lib/krb5/fcache.c: add support for reading and writing old 132972445Sassar version cache files 133072445Sassar 133172445Sassar * lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags 133272445Sassar 133372445Sassar * lib/krb5/store_emem.c (krb5_storage_emem): zero flags 133472445Sassar 133572445Sassar * lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags 133672445Sassar 133772445Sassar * lib/krb5/store.c: add flags to change how various fields are 133872445Sassar stored, used for old cache version support 133972445Sassar 134072445Sassar * lib/krb5/krb5.h: add support for reading and writing old version 134172445Sassar cache files, and keytabs 134272445Sassar 134372445SassarWed Apr 21 00:09:26 1999 Assar Westerlund <assar@sics.se> 134472445Sassar 134572445Sassar * configure.in: fix test for readline.h remember to link with 134672445Sassar $LIB_tgetent when trying linking with readline 134772445Sassar 134872445Sassar * lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time 134972445Sassar is given, request a postdated ticket. 135072445Sassar 135172445Sassar * lib/krb5/data.c (krb5_data_free): free data as long as it's not 135272445Sassar NULL 135372445Sassar 135472445SassarTue Apr 20 20:18:14 1999 Assar Westerlund <assar@sics.se> 135572445Sassar 135672445Sassar * kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen 135772445Sassar 135872445Sassar * lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add 135972445Sassar 136072445Sassar * lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and 136172445Sassar KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is 136272445Sassar invalid 136372445Sassar 136472445SassarTue Apr 20 12:42:08 1999 Johan Danielsson <joda@hella.pdc.kth.se> 136572445Sassar 136672445Sassar * kpasswd/kpasswdd.c: don't try to load library by default; get 136772445Sassar library and function name from krb5.conf 136872445Sassar 136972445Sassar * kpasswd/sample_passwd_check.c: sample password checking 137072445Sassar functions 137172445Sassar 137272445SassarMon Apr 19 22:22:19 1999 Assar Westerlund <assar@sics.se> 137372445Sassar 137472445Sassar * lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use 137572445Sassar krb5_data_alloc and be careful with checking allocation and sizes. 137672445Sassar 137772445Sassar * kuser/klist.c (--tokens): conditionalize on KRB4 137872445Sassar 137972445Sassar * kuser/kinit.c (renew_validate): set all flags 138072445Sassar (main): fix cut-n-paste error when setting start-time 138172445Sassar 138272445Sassar * kdc/kerberos5.c (check_tgs_flags): starttime of a validate 138372445Sassar ticket should be > than current time 138472445Sassar (*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket 138572445Sassar 138672445Sassar * kuser/kinit.c (renew_validate): use the client realm instead of 138772445Sassar the local realm when renewing tickets. 138872445Sassar 138972445Sassar * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function 139072445Sassar (krb5_get_forwarded_creds): correct freeing of out_creds 139172445Sassar 139272445Sassar * kuser/kinit.c (renew_validate): hopefully fix up freeing of 139372445Sassar memory 139472445Sassar 139572445Sassar * configure.in: do all the krb4 tests with "$krb4" != "no" 139672445Sassar 139772445Sassar * lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero 139872445Sassar keyvalue if it's NULL. noticed by Ake Sandgren <ake@cs.umu.se> 139972445Sassar 140072445Sassar * lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes 140172445Sassar instead of just taking the first one. fix all callers. From 140272445Sassar "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 140372445Sassar 140472445Sassar * kdc/kdc_locl.h (enable_kaserver): declaration 140572445Sassar 140672445Sassar * kdc/hprop.c (ka_convert): print the failing principal. AFS 3.4a 140772445Sassar creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around. From 140872445Sassar "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 140972445Sassar 141072445Sassar * kdc/hpropd.c (open_socket): stupid cast to get rid of a warning 141172445Sassar 141272445Sassar * kdc/connect.c (add_standard_ports, process_request): look at 141372445Sassar enable_kaserver. From "Brandon S. Allbery KF8NH" 141472445Sassar <allbery@kf8nh.apk.net> 141572445Sassar 141672445Sassar * kdc/config.c: new flag --kaserver and config file option 141772445Sassar enable-kaserver. From "Brandon S. Allbery KF8NH" 141872445Sassar <allbery@kf8nh.apk.net> 141972445Sassar 142072445SassarMon Apr 19 12:32:04 1999 Johan Danielsson <joda@hella.pdc.kth.se> 142172445Sassar 142272445Sassar * configure.in: check for dlopen, and dlfcn.h 142372445Sassar 142472445Sassar * kpasswd/kpasswdd.c: add support for dlopen:ing password quality 142572445Sassar check library 142672445Sassar 142772445Sassar * configure.in: add appl/su 142872445Sassar 142972445SassarSun Apr 18 15:46:53 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 143072445Sassar 143172445Sassar * lib/krb5/cache.c: add krb5_cc_get_type that returns type of a 143272445Sassar cache 143372445Sassar 143472445SassarFri Apr 16 17:58:51 1999 Assar Westerlund <assar@sics.se> 143572445Sassar 143672445Sassar * configure.in: LIB_kdb: -L should be before -lkdb 143772445Sassar test for prototype of strsep 143872445Sassar 143972445SassarThu Apr 15 11:34:38 1999 Johan Danielsson <joda@hella.pdc.kth.se> 144072445Sassar 144172445Sassar * lib/krb5/Makefile.am: update version 144272445Sassar 144372445Sassar * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use 144472445Sassar ALLOC_SEQ 144572445Sassar 144672445Sassar * lib/krb5/fcache.c: add some support for reading and writing old 144772445Sassar cache formats; 144872445Sassar (fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use 144972445Sassar krb5_ret_creds 145072445Sassar 145172445Sassar * lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc, 145272445Sassar initialize host_byteorder 145372445Sassar 145472445Sassar * lib/krb5/store_fd.c (krb5_storage_from_fd): initialize 145572445Sassar host_byteorder 145672445Sassar 145772445Sassar * lib/krb5/store_emem.c (krb5_storage_emem): initialize 145872445Sassar host_byteorder 145972445Sassar 146072445Sassar * lib/krb5/store.c (krb5_storage_set_host_byteorder): add; 146172445Sassar (krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16): 146272445Sassar check host_byteorder flag; (krb5_store_creds): add; 146372445Sassar (krb5_ret_creds): add 146472445Sassar 146572445Sassar * lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for 146672445Sassar storage of numbers 146772445Sassar 146872445Sassar * lib/krb5/heim_err.et: add `host not found' error 146972445Sassar 147072445Sassar * kdc/connect.c: don't use data after clearing decriptor 147172445Sassar 147272445Sassar * lib/krb5/auth_context.c: abort -> krb5_abortx 147372445Sassar 147472445Sassar * lib/krb5/warn.c: add __attribute__; add *abort functions 147572445Sassar 147672445Sassar * configure.in: check for __attribute__ 147772445Sassar 147872445Sassar * kdc/connect.c: log bogus requests 147972445Sassar 148072445SassarTue Apr 13 18:38:05 1999 Johan Danielsson <joda@hella.pdc.kth.se> 148172445Sassar 148272445Sassar * lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts 148372445Sassar for all DES keys 148472445Sassar 148572445Sassar1999-04-12 Assar Westerlund <assar@sics.se> 148672445Sassar 148772445Sassar * lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit 148872445Sassar 148972445Sassar * lib/krb5/get_cred.c (init_tgs_req): some more error checking 149072445Sassar 149172445Sassar * lib/krb5/generate_subkey.c (krb5_generate_subkey): check return 149272445Sassar value from malloc 149372445Sassar 149472445SassarSun Apr 11 03:47:23 1999 Johan Danielsson <joda@hella.pdc.kth.se> 149572445Sassar 149672445Sassar * lib/krb5/krb5.conf.5: update to reality 149772445Sassar 149872445Sassar * lib/krb5/krb5_425_conv_principal.3: update to reality 149972445Sassar 150072445Sassar1999-04-11 Assar Westerlund <assar@sics.se> 150172445Sassar 150272445Sassar * lib/krb5/get_host_realm.c: handle more than one realm for a host 150372445Sassar 150472445Sassar * kpasswd/kpasswd.c (main): use krb5_program_setup and 150572445Sassar print_version 150672445Sassar 150772445Sassar * kdc/string2key.c (main): use krb5_program_setup and 150872445Sassar print_version 150972445Sassar 151072445SassarSun Apr 11 02:35:58 1999 Johan Danielsson <joda@hella.pdc.kth.se> 151172445Sassar 151272445Sassar * lib/krb5/principal.c (krb5_524_conv_principal): make it actually 151372445Sassar work, and check built-in list of host-type first-components 151472445Sassar 151572445Sassar * lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm 151672445Sassar 151772445Sassar * lib/krb5/context.c: add srv_* flags to context 151872445Sassar 151972445Sassar * lib/krb5/principal.c: add default v4_name_convert entries 152072445Sassar 152172445Sassar * lib/krb5/krb5.h: add srv_* flags to context 152272445Sassar 152372445SassarSat Apr 10 22:52:28 1999 Johan Danielsson <joda@hella.pdc.kth.se> 152472445Sassar 152572445Sassar * kadmin/kadmin.c: complain about un-recognised commands 152672445Sassar 152772445Sassar * admin/ktutil.c: complain about un-recognised commands 152872445Sassar 152972445SassarSat Apr 10 15:41:49 1999 Assar Westerlund <assar@sics.se> 153072445Sassar 153172445Sassar * kadmin/load.c (doit): fix error message 153272445Sassar 153372445Sassar * lib/krb5/crypto.c (encrypt_internal): free checksum if lengths 153472445Sassar fail to match. 153572445Sassar (krb5_get_wrapped_length): new function 153672445Sassar 153772445Sassar * configure.in: security/pam_modules.h: check for 153872445Sassar 153972445Sassar * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge 154072445Sassar around `ret_as_reply' semantics by only freeing it when ret == 0 154172445Sassar 154272445SassarFri Apr 9 20:24:04 1999 Assar Westerlund <assar@sics.se> 154372445Sassar 154472445Sassar * kuser/klist.c (print_cred_verbose): handle the case of a bad 154572445Sassar enctype 154672445Sassar 154772445Sassar * configure.in: test for more header files 154872445Sassar (LIB_roken): set 154972445Sassar 155072445SassarThu Apr 8 15:01:59 1999 Johan Danielsson <joda@hella.pdc.kth.se> 155172445Sassar 155272445Sassar * configure.in: fixes for building w/o krb4 155372445Sassar 155472445Sassar * ltmain.sh: update to libtool 1.2d 155572445Sassar 155672445Sassar * ltconfig: update to libtool 1.2d 155772445Sassar 155872445SassarWed Apr 7 23:37:26 1999 Assar Westerlund <assar@sics.se> 155972445Sassar 156072445Sassar * kdc/hpropd.c: fix some error messages to be more understandable. 156172445Sassar 156272445Sassar * kdc/hprop.c (ka_dump): remove unused variables 156372445Sassar 156472445Sassar * appl/test/tcp_server.c: remove unused variables 156572445Sassar 156672445Sassar * appl/test/gssapi_server.c: remove unused variables 156772445Sassar 156872445Sassar * appl/test/gssapi_client.c: remove unused variables 156972445Sassar 157072445SassarWed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se> 157172445Sassar 157272445Sassar * lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code 157372445Sassar 157472445Sassar * kuser/klist.c: make it compile w/o krb4 157572445Sassar 157672445Sassar * kuser/kdestroy.c: make it compile w/o krb4 157772445Sassar 157872445Sassar * admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help 157972445Sassar strings 158072445Sassar 158172445SassarMon Apr 5 16:13:46 1999 Johan Danielsson <joda@hella.pdc.kth.se> 158272445Sassar 158372445Sassar * configure.in: test for MIPS ABI; new test_package 158472445Sassar 158572445SassarThu Apr 1 11:00:40 1999 Johan Danielsson <joda@hella.pdc.kth.se> 158672445Sassar 158772445Sassar * include/Makefile.am: clean krb5-private.h 158872445Sassar 158972445Sassar * Release 0.1d 159072445Sassar 159172445Sassar * kpasswd/kpasswdd.c (doit): pass context to 159272445Sassar krb5_get_all_client_addrs 159372445Sassar 159472445Sassar * kdc/connect.c (init_sockets): pass context to 159572445Sassar krb5_get_all_server_addrs 159672445Sassar 159772445Sassar * lib/krb5/get_in_tkt.c (init_as_req): pass context to 159872445Sassar krb5_get_all_client_addrs 159972445Sassar 160072445Sassar * lib/krb5/get_cred.c (get_cred_kdc_la): pass context to 160172445Sassar krb5_get_all_client_addrs 160272445Sassar 160372445Sassar * lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses 160472445Sassar 160572445Sassar * lib/krb5/krb5.h: add support for adding an extra set of 160672445Sassar addresses 160772445Sassar 160872445Sassar * lib/krb5/context.c: add support for adding an extra set of 160972445Sassar addresses 161072445Sassar 161172445Sassar * lib/krb5/addr_families.c: add krb5_parse_address 161272445Sassar 161372445Sassar * lib/krb5/address.c: krb5_append_addresses 161472445Sassar 161572445Sassar * lib/krb5/config_file.c (parse_binding): don't zap everything 161672445Sassar after first whitespace 161772445Sassar 161872445Sassar * kuser/kinit.c (renew_validate): don't allocate out 161972445Sassar 162072445Sassar * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't 162172445Sassar allocate out_creds 162272445Sassar 162372445Sassar * lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make 162472445Sassar out_creds pointer; 162572445Sassar (krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags): 162672445Sassar free more memory 162772445Sassar 162872445Sassar * lib/krb5/crypto.c (encrypt_internal): free checksum 162972445Sassar 163072445Sassar * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply, 163172445Sassar and ticket 163272445Sassar 163372445Sassar * kuser/Makefile.am: remove kfoo 163472445Sassar 163572445Sassar * lib/Makefile.am: add auth 163672445Sassar 163772445Sassar * lib/kadm5/iprop.h: getarg.h 163872445Sassar 163972445Sassar * lib/kadm5/replay_log.c: use getarg 164072445Sassar 164172445Sassar * lib/kadm5/ipropd_slave.c: use getarg 164272445Sassar 164372445Sassar * lib/kadm5/ipropd_master.c: use getarg 164472445Sassar 164572445Sassar * lib/kadm5/dump_log.c: use getarg 164672445Sassar 164772445Sassar * kpasswd/kpasswdd.c: use getarg 164872445Sassar 164972445Sassar * Makefile.am.common: make a more working check-local target 165072445Sassar 165172445Sassar * lib/asn1/main.c: use getargs 165272445Sassar 165372445SassarMon Mar 29 20:19:57 1999 Johan Danielsson <joda@hella.pdc.kth.se> 165472445Sassar 165572445Sassar * kuser/klist.c (print_cred_verbose): use krb5_print_address 165672445Sassar 165772445Sassar * lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int 165872445Sassar 165972445Sassar * lib/krb5/addr_families.c (krb5_print_address): handle unknown 166072445Sassar address types; (ipv6_print_addr): print in 16-bit groups (as it 166172445Sassar should) 166272445Sassar 166372445Sassar * lib/krb5/crc.c: crc_{init_table,update} -> 166472445Sassar _krb5_crc_{init_table,update} 166572445Sassar 166672445Sassar * lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int 166772445Sassar crc_{init_table,update} -> _krb5_crc_{init_table,update} 166872445Sassar 166972445Sassar * lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int 167072445Sassar 167172445Sassar * lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int 167272445Sassar 167372445Sassar * lib/krb5/krb5_locl.h: include krb5-private.h 167472445Sassar 167572445Sassar * kdc/connect.c (addr_to_string): use krb5_print_address 167672445Sassar 167772445Sassar * lib/krb5/addr_families.c (krb5_print_address): int -> size_t 167872445Sassar 167972445Sassar * lib/krb5/addr_families.c: add support for printing ipv6 168072445Sassar addresses, either with inet_ntop, or ugly for-loop 168172445Sassar 168272445Sassar * kdc/524.c: check that the ticket came from a valid address; use 168372445Sassar the address of the connection as the address to put in the v4 168472445Sassar ticket (if this address is AF_INET) 168572445Sassar 168672445Sassar * kdc/connect.c: pass addr to do_524 168772445Sassar 168872445Sassar * kdc/kdc_locl.h: prototype for do_524 168972445Sassar 169072445SassarSat Mar 27 17:48:31 1999 Johan Danielsson <joda@hella.pdc.kth.se> 169172445Sassar 169272445Sassar * configure.in: check for OSF C2; bind/bitypes.h, getudbnam, 169372445Sassar setlim; check for auth modules; siad.h, getpwnam_r; 169472445Sassar lib/auth/Makefile, lib/auth/sia/Makefile 169572445Sassar 169672445Sassar * lib/krb5/crypto.c: n_fold -> _krb5_n_fold 169772445Sassar 169872445Sassar * lib/krb5/n-fold.c: n_fold -> _krb5_n_fold 169972445Sassar 170072445SassarThu Mar 25 04:35:21 1999 Assar Westerlund <assar@sics.se> 170172445Sassar 170272445Sassar * lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping 170372445Sassar it 170472445Sassar 170572445Sassar * lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data' 170672445Sassar 170772445Sassar * lib/hdb/ndbm.c (NDBM_destroy): clear master key 170872445Sassar 170972445Sassar * lib/hdb/db.c (DB_destroy): clear master key 171072445Sassar (DB_open): check malloc 171172445Sassar 171272445Sassar * kdc/connect.c (init_sockets): free addresses 171372445Sassar 171472445Sassar * kadmin/kadmin.c (main): make code more consistent. always free 171572445Sassar configuration information. 171672445Sassar 171772445Sassar * kadmin/init.c (create_random_entry): free the entry 171872445Sassar 171972445SassarWed Mar 24 04:02:03 1999 Assar Westerlund <assar@sics.se> 172072445Sassar 172172445Sassar * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): 172272445Sassar re-organize the code to always free `kdc_reply' 172372445Sassar 172472445Sassar * lib/krb5/get_in_tkt.c (krb5_get_in_cred): be more careful about 172572445Sassar freeing memory 172672445Sassar 172772445Sassar * lib/krb5/fcache.c (fcc_destroy): don't call fcc_close 172872445Sassar 172972445Sassar * lib/krb5/crypto.c (krb5_crypto_destroy): free `crypto' 173072445Sassar 173172445Sassar * lib/hdb/hdb_locl.h: try db_185.h first in case db.h is a DB 2.0 173272445Sassar header 173372445Sassar 173472445Sassar * configure.in (db_185.h): check for 173572445Sassar 173672445Sassar * admin/srvcreate.c: new file. contributed by Daniel Kouril 173772445Sassar <kouril@informatics.muni.cz> 173872445Sassar 173972445Sassar * admin/ktutil.c: srvcreate: new command 174072445Sassar 174172445Sassar * kuser/klist.c: add support for printing AFS tokens 174272445Sassar 174372445Sassar * kuser/kdestroy.c: add support for destroying v4 tickets and AFS 174472445Sassar tokens. based on code by Love <lha@stacken.kth.se> 174572445Sassar 174672445Sassar * kuser/Makefile.am (kdestroy_LDADD, klist_LDADD): more libraries 174772445Sassar 174872445Sassar * configure.in: sys/ioccom.h: test for 174972445Sassar 175072445Sassar * kuser/klist.c (main): don't print `no ticket file' with --test. 175172445Sassar From: Love <lha@e.kth.se> 175272445Sassar 175372445Sassar * kpasswd/kpasswdd.c (doit): more braces to make gcc happy 175472445Sassar 175572445Sassar * kdc/connect.c (init_socket): get rid of a stupid warning 175672445Sassar 175772445Sassar * include/bits.c (my_strupr): cast away some stupid warnings 175872445Sassar 175972445SassarTue Mar 23 14:34:44 1999 Johan Danielsson <joda@hella.pdc.kth.se> 176072445Sassar 176172445Sassar * lib/krb5/get_host_realm.c (krb5_get_host_realm): no infinite 176272445Sassar loops, please 176372445Sassar 176472445SassarTue Mar 23 00:00:45 1999 Assar Westerlund <assar@sics.se> 176572445Sassar 176672445Sassar * lib/kadm5/Makefile.am (install_build_headers): recover from make 176772445Sassar rewriting the names of the headers kludge to help solaris make 176872445Sassar 176972445Sassar * lib/krb5/Makefile.am: kludge to help solaris make 177072445Sassar 177172445Sassar * lib/hdb/Makefile.am: kludge to help solaris make 177272445Sassar 177372445Sassar * configure.in (LIB_kdb): make sure there's a -L option in here by 177472445Sassar adding $(LIB_krb4) 177572445Sassar 177672445Sassar * lib/asn1/gen_glue.c (generate_2int, generate_int2): int -> 177772445Sassar unsigned 177872445Sassar 177972445Sassar * configure.in (SunOS): set to a number KRB4, KRB5 conditionals: 178072445Sassar remove the `dnl' to work around an automake flaw 178172445Sassar 178272445SassarSun Mar 21 15:08:49 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 178372445Sassar 178472445Sassar * lib/krb5/get_default_realm.c: char* -> krb5_realm 178572445Sassar 178672445SassarSun Mar 21 14:08:30 1999 Johan Danielsson <joda@hella.pdc.kth.se> 178772445Sassar 178872445Sassar * include/bits.c: <bind/bitypes.h> 178972445Sassar 179072445Sassar * lib/krb5/Makefile.am: create krb5-private.h 179172445Sassar 179272445SassarSat Mar 20 00:08:59 1999 Assar Westerlund <assar@sics.se> 179372445Sassar 179472445Sassar * configure.in (gethostname): remove duplicate 179572445Sassar 179672445SassarFri Mar 19 14:48:03 1999 Johan Danielsson <joda@hella.pdc.kth.se> 179772445Sassar 179872445Sassar * lib/hdb/Makefile.am: add version-info 179972445Sassar 180072445Sassar * lib/gssapi/Makefile.am: add version-info 180172445Sassar 180272445Sassar * lib/asn1/Makefile.am: use $(x:y=z) make syntax; move check-der 180372445Sassar to check_PROGRAMS 180472445Sassar 180572445Sassar * lib/Makefile.am: add 45 180672445Sassar 180772445Sassar * lib/kadm5/Makefile.am: split in client and server libraries 180872445Sassar (breaks shared libraries otherwise) 180972445Sassar 181072445SassarThu Mar 18 11:33:30 1999 Johan Danielsson <joda@hella.pdc.kth.se> 181172445Sassar 181272445Sassar * include/kadm5/Makefile.am: clean a lot of header files (since 181372445Sassar automake lacks a clean-hook) 181472445Sassar 181572445Sassar * include/Makefile.am: clean a lot of header files (since automake 181672445Sassar lacks a clean-hook) 181772445Sassar 181872445Sassar * lib/kadm5/Makefile.am: fix build-installation of headers 181972445Sassar 182072445Sassar * lib/krb5/Makefile.am: remove include_dir hack 182172445Sassar 182272445Sassar * lib/hdb/Makefile.am: remove include_dir hack 182372445Sassar 182472445Sassar * lib/asn1/Makefile.am: remove include_dir hack 182572445Sassar 182672445Sassar * include/Makefile.am: remove include_dir hack 182772445Sassar 182872445Sassar * doc/whatis.texi: define sub for html 182972445Sassar 183072445Sassar * configure.in: LIB_kdb, have_err_h, have_fnmatch_h, have_glob_h 183172445Sassar 183272445Sassar * lib/asn1/Makefile.am: der.h 183372445Sassar 183472445Sassar * kpasswd/kpasswdd.c: admin.h -> kadm5/admin.h 183572445Sassar 183672445Sassar * kdc/Makefile.am: remove junk 183772445Sassar 183872445Sassar * kadmin/Makefile.am: sl.a -> sl.la 183972445Sassar 184072445Sassar * appl/afsutil/Makefile.am: remove EXTRA_bin_PROGRAMS 184172445Sassar 184272445Sassar * admin/Makefile.am: sl.a -> sl.la 184372445Sassar 184472445Sassar * configure.in: condition KRB5; AC_CHECK_XAU 184572445Sassar 184672445Sassar * Makefile.am: include Makefile.am.common 184772445Sassar 184872445Sassar * include/kadm5/Makefile.am: include Makefile.am.common; don't 184972445Sassar install headers from here 185072445Sassar 185172445Sassar * include/Makefile.am: include Makefile.am.common; don't install 185272445Sassar headers from here 185372445Sassar 185472445Sassar * doc/Makefile.am: include Makefile.am.common 185572445Sassar 185672445Sassar * lib/krb5/Makefile.am: include Makefile.am.common 185772445Sassar 185872445Sassar * lib/kadm5/Makefile.am: include Makefile.am.common 185972445Sassar 186072445Sassar * lib/hdb/Makefile.am: include Makefile.am.common 186172445Sassar 186272445Sassar * lib/gssapi/Makefile.am: include Makefile.am.common 186372445Sassar 186472445Sassar * lib/asn1/Makefile.am: include Makefile.am.common 186572445Sassar 186672445Sassar * lib/Makefile.am: include Makefile.am.common 186772445Sassar 186872445Sassar * lib/45/Makefile.am: include Makefile.am.common 186972445Sassar 187072445Sassar * kuser/Makefile.am: include Makefile.am.common 187172445Sassar 187272445Sassar * kpasswd/Makefile.am: include Makefile.am.common 187372445Sassar 187472445Sassar * kdc/Makefile.am: include Makefile.am.common 187572445Sassar 187672445Sassar * kadmin/Makefile.am: include Makefile.am.common 187772445Sassar 187872445Sassar * appl/test/Makefile.am: include Makefile.am.common 187972445Sassar 188072445Sassar * appl/afsutil/Makefile.am: include Makefile.am.common 188172445Sassar 188272445Sassar * appl/Makefile.am: include Makefile.am.common 188372445Sassar 188472445Sassar * admin/Makefile.am: include Makefile.am.common 188572445Sassar 188672445SassarWed Mar 17 03:04:38 1999 Assar Westerlund <assar@sics.se> 188772445Sassar 188872445Sassar * lib/krb5/store.c (krb5_store_stringz): braces fix 188972445Sassar 189072445Sassar * lib/kadm5/get_s.c (kadm5_s_get_principal): braces fix 189172445Sassar 189272445Sassar * lib/kadm5/ent_setup.c (_kadm5_setup_entry): braces fix 189372445Sassar 189472445Sassar * kdc/connect.c (loop): braces fix 189572445Sassar 189672445Sassar * lib/krb5/config_file.c: cast to unsigned char to make is* happy 189772445Sassar 189872445Sassar * lib/krb5/log.c (krb5_addlog_dest): more braces to make gcc happy 189972445Sassar 190072445Sassar * lib/krb5/crypto.c (krb5_verify_checksum): rename C -> cksum to 190172445Sassar be consistent 190272445Sassar 190372445Sassar * kadmin/util.c (timeval2str): more braces to make gcc happy 190472445Sassar 190572445Sassar * kadmin/load.c: cast in is* to get rid of stupid warning 190672445Sassar 190772445Sassar * kadmin/dump.c (append_hex): cast in isalnum to get rid of stupid 190872445Sassar warning 190972445Sassar 191072445Sassar * kdc/kaserver.c: malloc checks and fixes 191172445Sassar 191272445Sassar * lib/krb5/get_host_realm.c (krb5_get_host_realm): include leading 191372445Sassar dot (if any) when looking up realms. 191472445Sassar 191572445SassarFri Mar 12 13:57:56 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 191672445Sassar 191772445Sassar * lib/krb5/get_host_realm.c: add dns support 191872445Sassar 191972445Sassar * lib/krb5/set_default_realm.c: use krb5_free_host_realm 192072445Sassar 192172445Sassar * lib/krb5/free_host_realm.c: check for NULL realmlist 192272445Sassar 192372445Sassar * lib/krb5/context.c: don't print warning if there is no krb5.conf 192472445Sassar 192572445SassarWed Mar 10 19:29:46 1999 Johan Danielsson <joda@hella.pdc.kth.se> 192672445Sassar 192772445Sassar * configure.in: use AC_WFLAGS 192872445Sassar 192972445SassarMon Mar 8 11:49:43 1999 Johan Danielsson <joda@hella.pdc.kth.se> 193072445Sassar 193172445Sassar * Release 0.1c 193272445Sassar 193372445Sassar * kuser/klist.c: use print_version 193472445Sassar 193572445Sassar * kuser/kdestroy.c: use print_version 193672445Sassar 193772445Sassar * kdc/hpropd.c: use print_version 193872445Sassar 193972445Sassar * kdc/hprop.c: use print_version 194072445Sassar 194172445Sassar * kdc/config.c: use print_version 194272445Sassar 194372445Sassar * kadmin/kadmind.c: use print_version 194472445Sassar 194572445Sassar * kadmin/kadmin.c: use print_version 194672445Sassar 194772445Sassar * appl/test/common.c: use print_version 194872445Sassar 194972445Sassar * appl/afsutil/afslog.c: use print_version 195072445Sassar 195172445SassarMon Mar 1 10:49:14 1999 Johan Danielsson <joda@hella.pdc.kth.se> 195272445Sassar 195372445Sassar * lib/krb5/get_addrs.c: SOCKADDR_HAS_SA_LEN -> 195472445Sassar HAVE_STRUCT_SOCKADDR_SA_LEN 195572445Sassar 195672445Sassar * configure.in, acconfig.h, cf/*: update to automake 1.4/autoconf 2.13 195772445Sassar 195872445SassarSun Feb 28 18:19:20 1999 Johan Danielsson <joda@hella.pdc.kth.se> 195972445Sassar 196072445Sassar * lib/asn1/gen.c: make `BIT STRING's unsigned 196172445Sassar 196272445Sassar * lib/asn1/{symbol.h,gen.c}: add TUInteger type 196372445Sassar 196472445Sassar * lib/krb5/verify_user.c (krb5_verify_user): pass prompter to 196572445Sassar krb5_get_init_creds_password 196672445Sassar 196772445Sassar * lib/krb5/fcache.c (fcc_gen_new): implement 196872445Sassar 196972445SassarSat Feb 27 22:41:23 1999 Johan Danielsson <joda@hella.pdc.kth.se> 197072445Sassar 197172445Sassar * doc/install.texi: krb4 is now automatically detected 197272445Sassar 197372445Sassar * doc/misc.texi: update procedure to set supported encryption 197472445Sassar types 197572445Sassar 197672445Sassar * doc/setup.texi: change some silly wordings 197772445Sassar 197872445SassarSat Feb 27 22:17:30 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 197972445Sassar 198072445Sassar * lib/krb5/keytab.c (fkt_remove_entry): make this work 198172445Sassar 198272445Sassar * admin/ktutil.c: add minimally working `get' command 198372445Sassar 198472445SassarSat Feb 27 19:44:49 1999 Johan Danielsson <joda@hella.pdc.kth.se> 198572445Sassar 198672445Sassar * lib/hdb/convert_db.c: more typos 198772445Sassar 198872445Sassar * include/Makefile.am: remove EXTRA_DATA (as of autoconf 198972445Sassar 2.13/automake 1.4) 199072445Sassar 199172445Sassar * appl/Makefile.am: OTP_dir 199272445Sassar 199372445SassarFri Feb 26 17:37:00 1999 Johan Danielsson <joda@hella.pdc.kth.se> 199472445Sassar 199572445Sassar * doc/setup.texi: add kadmin section 199672445Sassar 199772445Sassar * lib/asn1/check-der.c: fix printf warnings 199872445Sassar 199972445SassarThu Feb 25 11:16:49 1999 Johan Danielsson <joda@hella.pdc.kth.se> 200072445Sassar 200172445Sassar * configure.in: -O does not belong in WFLAGS 200272445Sassar 200372445SassarThu Feb 25 11:05:57 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 200472445Sassar 200572445Sassar * lib/asn1/der_put.c: fix der_put_int 200672445Sassar 200772445SassarTue Feb 23 20:35:12 1999 Johan Danielsson <joda@hella.pdc.kth.se> 200872445Sassar 200972445Sassar * configure.in: use AC_BROKEN_GLOB 201072445Sassar 201172445SassarMon Feb 22 15:12:44 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 201272445Sassar 201372445Sassar * configure.in: check for glob 201472445Sassar 201572445SassarMon Feb 22 11:32:42 1999 Johan Danielsson <joda@hella.pdc.kth.se> 201672445Sassar 201772445Sassar * Release 0.1b 201872445Sassar 201972445SassarSat Feb 20 15:48:06 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 202072445Sassar 202172445Sassar * lib/hdb/convert_db.c: convert DES3 keys to des3-cbc-sha1, and 202272445Sassar des3-cbc-md5 202372445Sassar 202472445Sassar * lib/krb5/crypto.c (DES3_string_to_key): make this actually do 202572445Sassar what the draft said it should 202672445Sassar 202772445Sassar * lib/hdb/convert_db.c: little program for database conversion 202872445Sassar 202972445Sassar * lib/hdb/db.c (DB_open): try to open database w/o .db extension 203072445Sassar 203172445Sassar * lib/hdb/ndbm.c (NDBM_open): add test for database format 203272445Sassar 203372445Sassar * lib/hdb/db.c (DB_open): add test for database format 203472445Sassar 203572445Sassar * lib/asn1/gen_glue.c (generate_2int): don't depend on flags being 203672445Sassar unsigned 203772445Sassar 203872445Sassar * lib/hdb/hdb.c: change `hdb_set_master_key' to take an 203972445Sassar EncryptionKey, and add a new function `hdb_set_master_keyfile' to 204072445Sassar do what `hdb_set_master_key' used to do 204172445Sassar 204272445Sassar * kdc/kstash.c: add `--convert-file' option to change keytype of 204372445Sassar existing master key file 204472445Sassar 204572445SassarFri Feb 19 07:04:14 1999 Assar Westerlund <assar@squid.pdc.kth.se> 204672445Sassar 204772445Sassar * Release 0.1a 204872445Sassar 204972445SassarSat Feb 13 17:12:53 1999 Assar Westerlund <assar@sics.se> 205072445Sassar 205172445Sassar * lib/krb5/mk_safe.c (krb5_mk_safe): sizeof(buf) -> buf_size, buf 205272445Sassar is now a `u_char *' 205372445Sassar 205472445Sassar * lib/krb5/get_in_tkt.c (krb5_init_etype): etypes are now `int' 205572445Sassar 205672445Sassar * lib/krb5/get_host_realm.c (krb5_get_host_realm): constize 205772445Sassar orig_host 205872445Sassar 205972445Sassar (krb5_salttype_to_string): new function (RSA_MD5_DES_verify, 206072445Sassar RSA_MD5_DES3_verify): initialize ret 206172445Sassar 206272445Sassar * lib/gssapi/init_sec_context.c (init_auth): remove unnecessary 206372445Sassar gssapi_krb5_init. ask for KEYTYPE_DES credentials 206472445Sassar 206572445Sassar * kadmin/get.c (print_entry_long): print the keytypes and salts 206672445Sassar available for the principal 206772445Sassar 206872445Sassar * configure.in (WFLAGS): add `-O' to catch unitialized variables 206972445Sassar and such 207072445Sassar (gethostname, mkstemp, getusershell, inet_aton): more tests 207172445Sassar 207272445Sassar * lib/hdb/hdb.h: update prototypes 207372445Sassar 207472445Sassar * configure.in: homogenize broken detection with krb4 207572445Sassar 207672445Sassar * lib/kadm5/init_c.c (kadm5_c_init_with_context): remove unused 207772445Sassar `error' 207872445Sassar 207972445Sassar * lib/asn1/Makefile.am (check-der): add 208072445Sassar 208172445Sassar * lib/asn1/gen.c (define_type): map ASN1 Integer to `int' instead 208272445Sassar of `unsigned' 208372445Sassar 208472445Sassar * lib/asn1/der_length.c (length_unsigned): new function 208572445Sassar (length_int): handle signed integers 208672445Sassar 208772445Sassar * lib/asn1/der_put.c (der_put_unsigned): new function 208872445Sassar (der_put_int): handle signed integers 208972445Sassar 209072445Sassar * lib/asn1/der_get.c (der_get_unsigned): new function 209172445Sassar (der_get_int): handle signed integers 209272445Sassar 209372445Sassar * lib/asn1/der.h: all integer functions take `int' instead of 209472445Sassar `unsigned' 209572445Sassar 209672445Sassar * lib/asn1/lex.l (filename): unused. remove. 209772445Sassar 209872445Sassar * lib/asn1/check-der.c: new test program for der encoding and 209972445Sassar decoding. 210072445Sassar 210172445SassarMon Feb 1 04:09:06 1999 Assar Westerlund <assar@sics.se> 210272445Sassar 210372445Sassar * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): only call 210472445Sassar gethostbyname2 with AF_INET6 if we actually have IPv6. From 210572445Sassar "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 210672445Sassar 210772445Sassar * lib/krb5/changepw.c (get_kdc_address): dito 210872445Sassar 210972445SassarSun Jan 31 06:26:36 1999 Assar Westerlund <assar@sics.se> 211072445Sassar 211172445Sassar * kdc/connect.c (parse_prots): always bind to AF_INET, there are 211272445Sassar v6-implementations without support for `mapped V4 addresses'. 211372445Sassar From Jun-ichiro itojun Hagino <itojun@kame.net> 211472445Sassar 211572445SassarSat Jan 30 22:38:27 1999 Assar Westerlund <assar@juguete.sics.se> 211672445Sassar 211772445Sassar * Release 0.0u 211872445Sassar 211972445SassarSat Jan 30 13:43:02 1999 Assar Westerlund <assar@sics.se> 212072445Sassar 212172445Sassar * lib/krb5/Makefile.am: explicit rules for *.et files 212272445Sassar 212372445Sassar * lib/kadm5/init_c.c (get_kadm_ticket): only remove creds if 212472445Sassar krb5_get_credentials was succesful. 212572445Sassar (get_new_cache): return better error codes and return earlier. 212672445Sassar (get_cred_cache): only delete default_client if it's different 212772445Sassar from client 212872445Sassar (kadm5_c_init_with_context): return a more descriptive error. 212972445Sassar 213072445Sassar * kdc/kerberos5.c (check_flags): handle NULL client or server 213172445Sassar 213272445Sassar * lib/krb5/sendauth.c (krb5_sendauth): return the error in 213372445Sassar `ret_error' iff != NULL 213472445Sassar 213572445Sassar * lib/krb5/rd_error.c (krb5_free_error, krb5_free_error_contents): 213672445Sassar new functions 213772445Sassar 213872445Sassar * lib/krb5/mk_req_ext.c (krb5_mk_req_extended): more 213972445Sassar type-correctness 214072445Sassar 214172445Sassar * lib/krb5/krb5.h (krb5_error): typedef to KRB_ERROR 214272445Sassar 214372445Sassar * lib/krb5/init_creds_pw.c: KRB5_TGS_NAME: use 214472445Sassar 214572445Sassar * lib/krb5/get_cred.c: KRB5_TGS_NAME: use 214672445Sassar 214772445Sassar * lib/kafs/afskrb5.c (afslog_uid_int): update to changes 214872445Sassar 214972445Sassar * lib/kadm5/rename_s.c (kadm5_s_rename_principal): call remove 215072445Sassar instead of rename, but shouldn't this just call rename? 215172445Sassar 215272445Sassar * lib/kadm5/get_s.c (kadm5_s_get_principal): always return an 215372445Sassar error if the principal wasn't found. 215472445Sassar 215572445Sassar * lib/hdb/ndbm.c (NDBM_seq): unseal key 215672445Sassar 215772445Sassar * lib/hdb/db.c (DB_seq): unseal key 215872445Sassar 215972445Sassar * lib/asn1/Makefile.am: added explicit rules for asn1_err.[ch] 216072445Sassar 216172445Sassar * kdc/hprop.c (v4_prop): add krbtgt/THISREALM@OTHERREALM when 216272445Sassar finding cross-realm tgts in the v4 database 216372445Sassar 216472445Sassar * kadmin/mod.c (mod_entry): check the number of arguments. check 216572445Sassar that kadm5_get_principal worked. 216672445Sassar 216772445Sassar * lib/krb5/keytab.c (fkt_remove_entry): remove KRB5_KT_NOTFOUND if 216872445Sassar we weren't able to remove it. 216972445Sassar 217072445Sassar * admin/ktutil.c: less drive-by-deleting. From Love 217172445Sassar <lha@e.kth.se> 217272445Sassar 217372445Sassar * kdc/connect.c (parse_ports): copy the string before mishandling 217472445Sassar it with strtok_r 217572445Sassar 217672445Sassar * kdc/kerberos5.c (tgs_rep2): print the principal with mismatching 217772445Sassar kvnos 217872445Sassar 217972445Sassar * kadmin/kadmind.c (main): convert `debug_port' to network byte 218072445Sassar order 218172445Sassar 218272445Sassar * kadmin/kadmin.c: allow specification of port number. 218372445Sassar 218472445Sassar * lib/kadm5/kadm5_locl.h (kadm5_client_context): add 218572445Sassar `kadmind_port'. 218672445Sassar 218772445Sassar * lib/kadm5/init_c.c (_kadm5_c_init_context): move up 218872445Sassar initalize_kadm5_error_table_r. 218972445Sassar allow specification of port number. 219072445Sassar 219172445Sassar From Love <lha@stacken.kth.se> 219272445Sassar 219372445Sassar * kuser/klist.c: add option -t | --test 219472445Sassar 2195