2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
6940735 CVE-2010-0629 denial of service in kadmind6945196 CVE-2010-1321 GSS-API library null pointer dereference
6885914 KDC doesn't enforce the password min-age policy
6886219 kadmind code should be utilizing sigaction() rather than signal()6886235 kadmind will not rebind with LDAP server if LDAP server is restarted
6889618 kadmind prints bogus acl warning
PSARC 2009/418 Kerberos V5 PAC API6283931 SPNEGO needs to follow latest RFC6808598 krb5 APIs needed to create and parse PAC data6817447 libgss and various mechs are hiding both the real minor_stat
PSARC 2009/418 Kerberos V5 PAC API6283931 SPNEGO needs to follow latest RFC6808598 krb5 APIs needed to create and parse PAC data6817447 libgss and various mechs are hiding both the real minor_status and the error token
show more ...
PSARC/2008/631 Kerberos PKINITPSARC/2008/358 removal of kadm5.keytab6698059 Resync with mit 1.6.3 (pkinit)6749302 pam_krb5 auth fails with key table entry not found
6683064 check_rtime could do with some spring cleaning
6245750 kadmin "Bad encryption type" error should state the enctype6658621 Configuration checks for kerberos daemons should be done by the daemons themselves6658624 Missing error strings for new ke
6245750 kadmin "Bad encryption type" error should state the enctype6658621 Configuration checks for kerberos daemons should be done by the daemons themselves6658624 Missing error strings for new kerberos DB error types6658627 kpropd should use its executable name and not the full path when logging error messages6658631 error messages in kerberos deamons need cleanup6664832 various memleaks in krb libs--HG--rename : usr/src/cmd/krb5/kadmin/server/svc-kdc.master => deleted_files/usr/src/cmd/krb5/kadmin/server/svc-kdc.masterrename : usr/src/cmd/krb5/krb5kdc/svc-kdc => deleted_files/usr/src/cmd/krb5/krb5kdc/svc-kdcrename : usr/src/cmd/krb5/slave/svc-kdc.slave => deleted_files/usr/src/cmd/krb5/slave/svc-kdc.slaverename : usr/src/cmd/svc/shell/krb_include.sh => deleted_files/usr/src/cmd/svc/shell/krb_include.sh
6612490 kdb5_util should not coredump if krb5.conf is misconfigured6621239 adb_policy_init makes the wrong assertion6641415 kadmind cores when using the ldap backend and "sunw_dbprop_enable" is set
6612490 kdb5_util should not coredump if krb5.conf is misconfigured6621239 adb_policy_init makes the wrong assertion6641415 kadmind cores when using the ldap backend and "sunw_dbprop_enable" is set to true
PSARC/2006/277 Support for Kerberos Records in LDAP Directory6399903 Support for Kerberos Records in LDAP Directory6520554 MIT bug #5427 with krb5_kt_get_name()6597851 dmake lint in usr/src/lib/gs
PSARC/2006/277 Support for Kerberos Records in LDAP Directory6399903 Support for Kerberos Records in LDAP Directory6520554 MIT bug #5427 with krb5_kt_get_name()6597851 dmake lint in usr/src/lib/gss_mechs/mech_krb5 broken--HG--rename : usr/src/lib/gss_mechs/mech_krb5/include/krb5/kdb_dbm.h => deleted_files/usr/src/lib/gss_mechs/mech_krb5/include/krb5/kdb_dbm.hrename : usr/src/lib/krb5/kadm5/srv/adb_free.c => deleted_files/usr/src/lib/krb5/kadm5/srv/adb_free.crename : usr/src/lib/krb5/kdb/fetch_mkey.c => deleted_files/usr/src/lib/krb5/kdb/fetch_mkey.crename : usr/src/lib/krb5/kdb/kdb_dbm.c => deleted_files/usr/src/lib/krb5/kdb/kdb_dbm.crename : usr/src/lib/krb5/kdb/kdb_hdr.h => deleted_files/usr/src/lib/krb5/kdb/kdb_hdr.hrename : usr/src/lib/krb5/kdb/setup_mkey.c => deleted_files/usr/src/lib/krb5/kdb/setup_mkey.crename : usr/src/lib/krb5/kdb/store_mkey.c => deleted_files/usr/src/lib/krb5/kdb/store_mkey.crename : usr/src/lib/krb5/kdb/verify_mky.c => deleted_files/usr/src/lib/krb5/kdb/verify_mky.crename : usr/src/lib/krb5/kdb/kdb_kt.h => usr/src/lib/gss_mechs/mech_krb5/include/kdb_kt.hrename : usr/src/lib/krb5/kadm5/adb_err.h => usr/src/lib/krb5/kdb/adb_err.hrename : usr/src/lib/krb5/kadm5/srv/adb_openclose.c => usr/src/lib/krb5/plugins/kdb/db2/adb_openclose.crename : usr/src/lib/krb5/kadm5/srv/adb_policy.c => usr/src/lib/krb5/plugins/kdb/db2/adb_policy.crename : usr/src/lib/krb5/kdb/kdb_compat.h => usr/src/lib/krb5/plugins/kdb/db2/kdb_compat.hrename : usr/src/lib/krb5/kdb/kdb_db2.c => usr/src/lib/krb5/plugins/kdb/db2/kdb_db2.crename : usr/src/lib/krb5/kdb/kdb_db2.h => usr/src/lib/krb5/plugins/kdb/db2/kdb_db2.hrename : usr/src/lib/krb5/kdb/kdb_xdr.c => usr/src/lib/krb5/plugins/kdb/db2/kdb_xdr.crename : usr/src/lib/krb5/db2/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/Makefilerename : usr/src/lib/krb5/db2/Makefile.com => usr/src/lib/krb5/plugins/kdb/db2/libdb2/Makefile.comrename : usr/src/lib/krb5/db2/README.db2 => usr/src/lib/krb5/plugins/kdb/db2/libdb2/README.db2rename : usr/src/lib/krb5/db2/btree/bt_close.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_close.crename : usr/src/lib/krb5/db2/btree/bt_conv.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_conv.crename : usr/src/lib/krb5/db2/btree/bt_debug.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_debug.crename : usr/src/lib/krb5/db2/btree/bt_delete.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_delete.crename : usr/src/lib/krb5/db2/btree/bt_get.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_get.crename : usr/src/lib/krb5/db2/btree/bt_open.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_open.crename : usr/src/lib/krb5/db2/btree/bt_overflow.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_overflow.crename : usr/src/lib/krb5/db2/btree/bt_page.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_page.crename : usr/src/lib/krb5/db2/btree/bt_put.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_put.crename : usr/src/lib/krb5/db2/btree/bt_search.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_search.crename : usr/src/lib/krb5/db2/btree/bt_seq.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_seq.crename : usr/src/lib/krb5/db2/btree/bt_split.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_split.crename : usr/src/lib/krb5/db2/btree/bt_utils.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_utils.crename : usr/src/lib/krb5/db2/btree/btree.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/btree.hrename : usr/src/lib/krb5/db2/btree/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/extern.hrename : usr/src/lib/krb5/db2/db/db.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/db/db.crename : usr/src/lib/krb5/db2/hash/dbm.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/dbm.crename : usr/src/lib/krb5/db2/hash/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/extern.hrename : usr/src/lib/krb5/db2/hash/hash.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash.crename : usr/src/lib/krb5/db2/hash/hash.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash.hrename : usr/src/lib/krb5/db2/hash/hash_bigkey.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_bigkey.crename : usr/src/lib/krb5/db2/hash/hash_func.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_func.crename : usr/src/lib/krb5/db2/hash/hash_log2.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_log2.crename : usr/src/lib/krb5/db2/hash/hash_page.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_page.crename : usr/src/lib/krb5/db2/hash/hsearch.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hsearch.crename : usr/src/lib/krb5/db2/hash/page.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/page.hrename : usr/src/lib/krb5/db2/hash/search.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/search.hrename : usr/src/lib/krb5/db2/i386/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/i386/Makefilerename : usr/src/lib/krb5/db2/include/db-int.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-int.hrename : usr/src/lib/krb5/db2/include/db-ndbm.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-ndbm.hrename : usr/src/lib/krb5/db2/include/db-queue.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-queue.hrename : usr/src/lib/krb5/db2/mapfile-vers => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mapfile-versrename : usr/src/lib/krb5/db2/mpool/mpool.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mpool/mpool.crename : usr/src/lib/krb5/db2/mpool/mpool.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mpool/mpool.hrename : usr/src/lib/krb5/db2/recno/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/extern.hrename : usr/src/lib/krb5/db2/recno/rec_close.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_close.crename : usr/src/lib/krb5/db2/recno/rec_delete.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_delete.crename : usr/src/lib/krb5/db2/recno/rec_get.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_get.crename : usr/src/lib/krb5/db2/recno/rec_open.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_open.crename : usr/src/lib/krb5/db2/recno/rec_put.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_put.crename : usr/src/lib/krb5/db2/recno/rec_search.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_search.crename : usr/src/lib/krb5/db2/recno/rec_seq.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_seq.crename : usr/src/lib/krb5/db2/recno/rec_utils.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_utils.crename : usr/src/lib/krb5/db2/recno/recno.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/recno.hrename : usr/src/lib/krb5/db2/sparc/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/sparc/Makefile
6562672 kadmind vulnerable to buffer overflow [ MITKRB5-SA-2007-005 ]
6550530 pam_krb5_migrate's expire_pw expires the Kerberos password too late6557188 included pam_krb5 doesn't function correctly as 'auth required' in pam.conf6559678 kpasswd returns "KDC reply did
6550530 pam_krb5_migrate's expire_pw expires the Kerberos password too late6557188 included pam_krb5 doesn't function correctly as 'auth required' in pam.conf6559678 kpasswd returns "KDC reply did not match expectations" when using Heimdal server6564714 Option "-m" doesn't work for kadmind.6564718 kdb5_util dump doesn't create a "dump ok" file if the master key is not available6570434 libkadm5srv should be smarter in figuring out the enc type of the master key in the stash file6575452 kdb5_util should be more robust after CF providers have failed
6538001 KDC, kadmind stack overflow in krb5_klog_syslog (CVE-2007-0957)
6394510 error table is out of whack6497698 krb5kdc(1) should also provide password expiration information6497703 pam_krb5(5) should interpret the key expiration field to display expiration warning
6394510 error table is out of whack6497698 krb5kdc(1) should also provide password expiration information6497703 pam_krb5(5) should interpret the key expiration field to display expiration warning information6514446 pam_dhkeys prompts for secure RPC password when neither LOCAL or DES credentials exist6515558 Pre-s10 client's keytab file are generated incorrectly when auth princ == target princ6523684 Memory rcache function doesn't acquire the right locks
PSARC 2006/552 Quagga SMF Modifications6312914 routeadm needs to support smf-based routing services6440342 remove redundancies in smf-related makefiles by moving manifest rules to usr/src/cmd/Makef
PSARC 2006/552 Quagga SMF Modifications6312914 routeadm needs to support smf-based routing services6440342 remove redundancies in smf-related makefiles by moving manifest rules to usr/src/cmd/Makefile.targ--HG--rename : usr/src/cmd/cmd-inet/usr.sbin/in.rdisc.c => usr/src/cmd/cmd-inet/usr.sbin/in.rdisc/in.rdisc.crename : usr/src/cmd/cmd-inet/usr.sbin/routeadm.c => usr/src/cmd/cmd-inet/usr.sbin/routeadm/routeadm.crename : deleted_files/usr/src/cmd/volmgt/etc/Makefile => usr/src/cmd/volmgt/etc/Makefile
PSARC 2006/424 Kerberos 1.4 KDC Resync6406993 kdc and client resync with MIT 1.4
4916205 libcmd should not use file operation routines from C library6234782 Kerberos and GSSAPI should not use fopen6259671 vold won't be killed by TERM signal when several removable devices are ma
4916205 libcmd should not use file operation routines from C library6234782 Kerberos and GSSAPI should not use fopen6259671 vold won't be killed by TERM signal when several removable devices are managed6386770 pam_authenticate can fail if open files are >= 255 and the soft fd limit is greater than 2566414401 Remove shadow stdio implementation obsoleted by PSARC 2006/1626414404 __rpc_openchild never called and not exported by library6416815 ON needs to be hardened against the 32-bit fopen/255 problem--HG--rename : usr/src/lib/libnsl/common/nsl_stdio_prv.c => deleted_files/usr/src/lib/libnsl/common/nsl_stdio_prv.crename : usr/src/lib/libnsl/include/nsl_stdio_prv.h => deleted_files/usr/src/lib/libnsl/include/nsl_stdio_prv.hrename : usr/src/lib/libnsl/rpc/openchild.c => deleted_files/usr/src/lib/libnsl/rpc/openchild.crename : usr/src/lib/libnsl/rpc/xdr_stdio_prv.c => deleted_files/usr/src/lib/libnsl/rpc/xdr_stdio_prv.crename : usr/src/lib/libresolv2/req.flg => deleted_files/usr/src/lib/libresolv2/req.flgrename : usr/src/lib/nsswitch/compat/req.flg => deleted_files/usr/src/lib/nsswitch/compat/req.flgrename : usr/src/lib/nsswitch/files/req.flg => deleted_files/usr/src/lib/nsswitch/files/req.flgrename : usr/src/lib/nsswitch/req.flg => deleted_files/usr/src/lib/nsswitch/req.flgrename : usr/src/lib/nsswitch/user/req.flg => deleted_files/usr/src/lib/nsswitch/user/req.flg
6250268 kadmind error log message when keytab entries not found isn't helpful
6380111 kadmind should try to provide iprop service even if it can't provide kadmin or changepw services.
OpenSolaris Launch