Lines Matching full:lib
26 * lib/krb5/cache.c (krb5_cc_set_default_name): use
29 * lib/krb5/krb5_locl.h: Add KRB5_DEFAULT_CCNAME, pointer to
32 * lib/hdb/ndbm.c: memset hdb_entry_ex before use
34 * lib/hdb/db3.c: memset hdb_entry_ex before use
36 * lib/hdb/db.c: memset hdb_entry_ex before use
40 * lib/krb5/krb5.3: Add some more entrypoints.
42 * lib/krb5/changepw.c: If there is a target principal, use the
47 * lib/hdb, kdc, kadmin/load.c: Wrap hdb_entry with hdb_entry_ex, patch
50 * lib/hdb/hdb-ldap.c: Wrap hdb_entry with hdb_entry_ex, add url
75 * lib/krb5/krb5_principal.3: Constify principal argument to on
78 * lib/krb5/principal.c: Constify principal argument to on
83 * lib/hdb: drop convert_db, 0.0 to 0.1 transition was a long long
88 * lib/krb5/test_keytab.c: more tests, From Andrew Bartlet
90 * lib/krb5/keytab_memory.c (mkt_remove_entry): realloc can return
96 * lib/krb5/acl.c (acl_parse_format): tmp needs to be freed too on
99 * lib/krb5/store-test.c: Free more of the allocated memory.
101 * lib/krb5/crypto.c (krb5_derive_key): Free more of the allocated
104 * lib/krb5/parse-name-test.c: Free more of the allocated memory.
106 * lib/krb5/derived-key-test.c: Free more of the allocated memory.
112 * lib/krb5/krb5_keytab.3: Memory keytab are now named and
115 * lib/krb5/test_keytab.c: Test that memory keytab are refcounted.
117 * lib/krb5/keytab_memory.c: Index by name and start reference
122 * lib/krb5/krb5.h (krb5_address_type): add
125 * lib/hdb/hdb.c (find_method): accept relative paths as old db
128 * lib/krb5/aes-test.c: Remove usage of krb5_enctype_to_keytype.
136 * lib/krb5/verify_krb5_conf.c (libdefaults_entries): add
139 * lib/hdb/hdb.c: Only match db databases on filename starting with
142 * lib/krb5/rd_req.c (krb5_verify_ap_re2): check timestamp in
145 * lib/krb5/rd_req.c (check_transited): explain the TR-type 0
148 * lib/krb5/test_cc.c: test krb5_cc_get_prefix_ops
150 * lib/krb5/cache.c (krb5_cc_get_prefix_ops): change the behavior
156 * lib/krb5/cache.c (krb5_cc_get_prefix_ops): if there are not
159 * lib/hdb/db3.c (hdb_db_create): use calloc to callocate memory
161 * lib/hdb/ndbm.c (hdb_ndbm_create): use calloc to allocate memory
163 * lib/hdb/db.c (hdb_db_create): use calloc to allocate memory
167 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use session
175 * lib/krb5/keytab.c (krb5_kt_get_full_name): new function
179 * lib/krb5/test_crypto.c: Split encryption and s2k iterations to
182 * lib/krb5/test_crypto.c: Add timing code for s2k function.
191 * lib/krb5/cache.c (krb5_cc_get_full_name): Add
203 * lib/krb5/ticket.c (krb5_ticket_get_authorization_data_type):
212 * lib/krb5/krb5_encrypt.3: Fix mdoc for
223 * lib/krb5/pkinit.c (_krb5_dh_group_ok): if not enough bits are
236 * lib/krb5/pkinit.c: Add option to require binding between reply
243 * lib/krb5/pkinit.c: Try both ReplyKey and ReplyKey-Win2k for the
248 * lib/krb5/test_cc.c: Test copy FILE -> FILE, and MEMORY -> MEMORY
251 * lib/krb5/test_cc.c: Test krb5_cc_copy_cache and
254 * lib/krb5/cache.c (krb5_cc_cache_match): add function that
258 * lib/krb5/krb5_ccache.3: Add krb5_cc_start_seq_get and an
268 * lib/krb5/krb5_get_credentials.3: Add example how to use
273 * lib/krb5/init_creds.c: Rename private to opt_private.
275 * lib/krb5/init_creds_pw.c: Rename private to opt_private.
277 * lib/krb5/pkinit.c: rename element private to opt_private to make
280 * lib/krb5/krb5.h (krb5_get_init_creds_opt): rename element
285 * lib/krb5/krbhst.c (_krb5_krbhost_info_move): new function
288 * lib/krb5/init_creds_pw.c: Prepare to pass down a
291 * lib/krb5/pkinit.c: Inline short functions, share more code,
297 * lib/krb5/Makefile.am: Install krb5.moduli in sysconfdir.
299 * lib/krb5/krb5_locl.h: rename moduli file to SYSCONFDIR
302 * lib/krb5/krb5_locl.h: Add forward declaration for
307 * lib/krb5/pkinit.c: Removing PK-INIT-19 support.
309 * lib/krb5/pkinit.c (_krb5_dh_group_ok): return DH group name on
315 * lib/krb5/pkinit.c (_krb5_dh_group_ok): if q is zero, ignore it.
319 * lib/krb5/krb5_err.et: Match error code with pk-init-27.
321 * lib/krb5/pkinit.c: Update error codes. Add name to group. Change
324 * lib/krb5/pkinit.c: Add support for reading a moduli-file for DH
336 * lib/krb5/kerberos.8: RFC 1510 was obsoleted by 4120.
338 * lib/krb5/acache.c (init_ccapi): return kerberos errors, callers
345 * lib/krb5/kerberos.8: Update text about Kerberos RFC's.
361 * lib/krb5/keytab_keyfile.c: Use all DES keys, not just
364 * lib/krb5/mcache.c Implement the cache iteration functions.
366 * lib/krb5/acache.c: Implement the cache iteration functions.
368 * lib/krb5/test_cc.c: Test the new cache iteration functions.
370 * lib/krb5/cache.c: Add cache iteration funcations. Add internal
373 * lib/krb5/krb5.h (krb5_cc_ops): add cache iteration functions
377 * lib/krb5/krb5_mk_req.3: Remove leftovers, remove extra space.
384 * lib/krb5/pkinit.c: Support cached DH variable (still need to
390 * lib/krb5/rd_cred.c (krb5_rd_cred): try both the session key and
396 * lib/krb5/pkinit.c: Don't check oid's too closely, they change in
401 * lib/krb5/pkinit.c: Disable sending -19, fix parsing -27 of the
406 * lib/krb5/pkinit.c (pk_verify_chain_standard): set cert to NULL
411 * lib/krb5/crypto.c (krb5_DES_string_to_key): If the opaque length
418 * lib/krb5/kcm.c: Remove signedness warnings.
428 * lib/krb5/changepw.c: Constify password.
432 * lib/krb5/krb5_mk_req.3: Document krb5_rd_req.
434 * lib/krb5/Makefile.am: MAN_mans+= krb5_mk_req.3
436 * lib/krb5/krb5_mk_req.3: Document krb5_mk_req, krb5_mk_req_exact,
461 * lib/krb5/rd_req.c (check_transited): Allow empty content of type
477 * lib/krb5/Makefile.am: Add test_hostname to check_PROGRAMS but
480 * lib/krb5/test_hostname.c: Testprogram for krb5_expand_hostname()
485 * lib/krb5/principal.c (krb5_425_conv_principal_ex2): Remove
488 * lib/krb5/get_host_realm.c (dns_find_realm): Fix const warnings,
491 * lib/krb5/krb5_config.3: Document what happens with NULL to
500 * lib/krb5/test_crypto_wrapping.c: Fix printing of size_t.
504 * lib/hdb/dbinfo.c: provide interface to find databases
506 * lib/hdb/mkey.c: hdb_seal_key_mkey): dont double encrypt keys
514 * lib/krb5/init_creds_pw.c: Save the request buffer so that
519 * lib/krb5/test_mem.c: Rename logf to avoid shadowing.
521 * lib/krb5/krb5_keytab.3: Fix the version number for
524 * lib/krb5/fcache.c: Revert previous, I was confused.
526 * lib/krb5/krb5_keytab.3: Document fcc-mit-ticketflags in
529 * lib/krb5/fcache.c (fcc_store_cred): default to MIT style ticket
534 * lib/krb5/krb5_create_checksum.3: Update prototype for
539 * lib/krb5/pkinit.c: Implement verification of asChecksum, now
553 * lib/hdb/ext.c: HDB extensions access glue.
562 * lib/hdb/Makefile.am: Build extensions.
564 * lib/hdb/print.c: Print extensions.
566 * lib/hdb/hdb_err.et: Add error "Entry contains unknown mandatory
569 * lib/hdb/hdb.h: Update interface version (and indent).
571 * lib/hdb/hdb.asn1: Add support for HDB-extension.
575 * lib/krb5/test_pkinit_dh2key.c: add tests vectors from
578 * lib/hdb/mkey.c: Expose the crypto operations on the master key.
580 * lib/krb5/test_pkinit_dh2key.c: even more bits, not done yet
596 * lib/krb5/verify_user.c: Add krb5_verify_opt_alloc and
599 * lib/krb5/krb5_verify_user.3: Document krb5_verify_opt_alloc and
602 * lib/hdb/db3.c (DB_open): catch errors from the d->open calls
620 * lib/hdb/mkey.c (hdb_unseal_key_mkey): try to unseal key with
630 * lib/krb5/pkinit.c: Adapt to IMPLICIT changes in CMS module.
634 * lib/krb5/test_pkinit_dh2key.c: framework for testing
643 * lib/krb5/crypto.c (_krb5_pk_octetstring2key): make sha1 output
648 * lib/hdb/common.c: Check encoder lengths from ASN1_MALLOC_ENCODE.
652 * lib/krb5/rd_cred.c (krb5_rd_cred): don't leak memory
654 * lib/krb5/get_cred.c (krb5_get_credentials_with_flags): only call
659 * lib/hdb/Makefile.am: the new asn.1 compiler includes the modules
662 * lib/krb5/keytab_file.c (fkt_start_seq_get_int): check return
665 * lib/krb5/pkinit.c (pk_rd_pa_reply_dh): client do not contribute
668 * lib/krb5/crypto.c (_krb5_pk_octetstring2key): fix arguments
672 * lib/krb5/pkinit.c: clean up pk-init DH support, not finished
675 * lib/krb5/crypto.c (_krb5_pk_octetstring2key): string2key
681 * lib/asn1: Much improved ASN.1 compiler from joda-choice-branch.
689 * lib/asn1: make scope variables unique to avoid shadow warnings
693 * lib/krb5/krb5.h: comment out paramenter name in typedef
696 * lib/krb5/crypto.c: make input data to krb5_encrypt{,_ivec} const
701 * lib/krb5/Makefile.am (TESTS): add test_crypto_wrapping
703 * lib/krb5/crypto.c (wrapped_length): the underived encrypted
707 * lib/krb5/test_crypto_wrapping.c: ETYPE_ARCFOUR_HMAC_MD5_56 isn't
710 * lib/krb5/test_crypto_wrapping.c: test encryption wrapping
712 * lib/krb5/test_crypto.c (time_encryption): free cleartext buffer
729 * lib/krb5/keytab.c (krb5_kt_get_entry): clear error string when
732 * lib/krb5/keytab.c: krb5_kt_close frees all resources, even on
735 * lib/krb5/verify_init.c (krb5_verify_init_creds): `entry' unused,
746 * lib/krb5/krb5_get_init_creds.3: Spelling, from David Love
770 * lib/krb5/principal.c: add krb5_425_conv_principal_ext2 that work
779 * lib/krb5/crypto.c: optionally compile in support for afs string2key
807 * doc/intro.texi: no more libdes, gssapi lib is complete
809 * lib/krb5/krb5.conf.5: Documentation for password quality
812 * lib/krb5/verify_krb5_conf.c (password_quality_entries): add
818 * lib/hdb/db3.c (DB_open): in case of error, close database
820 * lib/hdb/ndbm.c (NDBM_open): in case of error, close database
822 * lib/hdb/db.c (DB_open): in case of error, close database
830 * lib/krb5/rd_rep.c: indent
832 * lib/krb5/rd_rep.c (krb5_rd_rep): check if
838 * lib/hdb/convert_db.c: rename optind to optidx
840 * lib/hdb/keytab.c: const poison, add a unconst where needed
842 * lib/krb5/crypto.c (krb5_string_to_key): unconst password
844 * lib/asn1/k5.asn1: rename pvno to krb5-pvno
846 * lib/krb5/get_in_tkt_with_keytab.c (krb5_keytab_key_proc):
849 * lib/krb5/verify_krb5_conf.c: rename optind to optidx
851 * lib/krb5/transited.c: rename the temporary string variable to
854 * lib/krb5/test_crypto.c: rename optind to optidx
856 * lib/krb5/test_alname.c: rename optind to optidx
858 * lib/krb5/store.c: unconst argument to krb5_store (XXX this
861 * lib/krb5/send_to_kdc.c (krb5_sendto): remove shadowing
864 * lib/krb5/rd_cred.c (krb5_rd_cred): remove shadowing unnessecery
867 * lib/krb5/prog_setup.c: rename optind to optidx
869 * lib/krb5/padata.c: rename variable index to idx
871 * lib/krb5/log.c: rename variable time to timestr to avoid
874 * lib/krb5/krbhst.c (krb5_krbhst_init_flags): rename variable to
877 * lib/krb5/krbhst-test.c: rename optind to optidx
879 * lib/krb5/kcm.c: unconst argumen to connect, unconst argument to
883 * lib/krb5/init_creds_pw.c (default_s2k_func): unconst password
885 * lib/krb5/crypto.c: rename `encrypt' to avoid shadow warning
889 * lib/krb5/principal.c: rename index to idx
891 * lib/krb5/mk_error.c: use rk_UNCONST
893 * lib/krb5/fcache.c: rename to avoid shadowing
895 * lib/krb5/config_file.c: rename to avoid shadowing
897 * lib/krb5/cache.c (_krb5_expand_default_cc_name): just copy the
900 * lib/krb5/addr_families.c: use rk_UNCONST to silence const
903 * lib/krb5/addr_families.c: rename sin to sin4
905 * lib/asn1/asn1_print.c: rename optind to optidx, remove shadowed
908 * lib/asn1/main.c: rename optind to optidx
910 * lib/asn1/gen_copy.c: rename to avoid shadowing
912 * lib/asn1/gen_locl.h: rename function filename to get_filename
914 * lib/asn1/lex.l: use get_filename
916 * lib/asn1/gen.c: rename function filename to get_filename
918 * lib/krb5/acache.c: use HAVE_DLOPEN around cc_handle
931 * lib/krb5/cache.c (_krb5_expand_default_cc_name): replace strndup
934 * lib/krb5/log.c: rename close and log to avoid shadow warnings
936 * lib/krb5/get_in_tkt.c: rename index to i to avoid shadowing
938 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): rename two
953 * lib/krb5/Makefile.am: TESTS += test_mem libkrb5_la_SOURCES +=
962 * lib/krb5/verify_krb5_conf.c (main): catch KRB5_CONFIG_BADFORMAT
966 * lib/krb5/verify_krb5_conf.c: Add more missig entires, from
974 * lib/krb5/log.c (krb5_closelog): free all content in
1007 * lib/krb5/store.c: If we are allocating 0 entires, avoid failing
1010 * lib/krb5/verify_krb5_conf.c: Check for [kdc]v4-realm
1012 * lib/krb5/cache.c: When returning a new error code, set error
1017 * lib/krb5/keytab_file.c: Adapt to changed signature of
1020 * lib/krb5/fcache.c (_krb5_xunlock): catch the error and turn it
1061 * lib/krb5/krb5_principal.3: Spelling, from Björn Sandell
1065 * lib/krb5/name-45-test.c: XXX don't run the test unless the
1069 * lib/hdb/hdb.c: provde RTLD_NOW and RTLD_GLOBAL if they don't
1084 * lib/krb5/test_cc.c: change format for expantion variables in
1094 * kcm/Makefile.am: add dependcy on kcm_protos.h add lib depency on
1097 * lib/krb5/kcm.h: add _PATH_KCM_DOOR, default path to kcm door
1099 * lib/krb5/kcm.c: use [libdefaults]kcm_door to find the door to
1102 * lib/krb5/Makefile.am: libkrb5_la_LIBADD += LIB_door_create
1104 * lib/krb5/krb5_locl.h: Maybe include <sys/mman.h>, maybe include
1107 * lib/krb5/kcm.c (kcm_send_request): add support for doing a door
1110 * lib/asn1: prefix Der_class with ASN1_C_ to avoid problems with
1117 * lib/krb5/krb5.conf.5: change format for expantion variables in
1121 * lib/krb5/cache.c (_krb5_expand_default_cc_name): change format
1133 * lib/krb5/krb5_auth_context.3: remove trailing space
1155 * lib/krb5/kcm.c (kcm_alloc): allow kcm socket to be configured by
1185 * lib/krb5/krb5_keytab.3: document WRFILE and JAVA14
1189 * lib/krb5/krbhst.c (srv_get_hosts): if srv_get_hosts failes,
1192 * lib/krb5/krbhst.c (srv_find_realm): make sure `res' and `count'
1195 * lib/krb5/test_keytab.c: tests all keytab format
1199 * lib/krb5/pkinit.c (_krb5_pk_rd_pa_reply): non non asn1 decoding
1203 * lib/krb5/verify_krb5_conf.c: add missing options, prompted by
1206 * lib/krb5/verify_krb5_conf.c: add pkinit and password quailty
1209 * lib/krb5/pkinit.c (pk_verify_chain_standard): store better error
1212 * lib/krb5/keytab.c (krb5_kt_free_entry): zero out content of all
1219 * lib/krb5/init_creds_pw.c (process_pa_data_to_md): add comment
1225 * lib/krb5/keytab_krb4.c (fkt_remove_entry): need to call
1228 * lib/krb5/keytab_file.c (fkt_remove_entry): need to call
1234 * lib/krb5/Makefile.am: TESTS += test_keytab
1236 * lib/krb5/keytab_krb4.c (krb4_kt_remove_entry): plug memory leaks,
1239 * lib/krb5/krb5_keytab.3: document behavior of
1242 * lib/krb5/keytab_memory.c (mkt_remove_entry): check if there
1249 * lib/krb5/test_keytab.c: test memory corruption in MEMORY keytab
1251 * lib/krb5{addr_families,context,creds,free,keyblock,
1256 * lib/krb5/krb5_get_credentials.3: document KRB5_GC_EXPIRED_OK
1258 * lib/krb5/krb5.3: add krb5_cc_new_unique
1262 * lib/krb5/fcache.c (fcc_get_first): check return value from
1266 * lib/krb5/krb5_auth_context.3: document
1269 * lib/krb5/get_cred.c: Remove expired credentials, based on
1273 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): honor
1280 * lib/krb5/context.c (krb5_init_context): register krb5_javakt_ops
1282 * lib/krb5/krb5.h: KRB5_GC_EXPIRED_OK: expired credentials is ok
1290 * lib/krb5/keytab_file.c: Add new keytab file format JAVA14 that
1296 * lib/krb5/pkinit.c: handle pkinit-9, pkinit-19, and pkinit-25
1308 * lib/krb5/krb5_storage.3: document krb5_storage_is_flags
1310 * lib/krb5/{krb5_compare_creds.3,krb5_get_init_creds.3,
1320 * lib/krb5/kuserok.c (krb5_kuserok): use POSIX_GETPWNAM_R instead
1325 * lib/krb5/addr_families.c (krb5_print_address): catch when the
1335 * lib/krb5/krb5.conf.5: spelling
1339 * lib/krb5/krb5.conf.5: expand on what "trailing component" means
1343 * lib/krb5/rd_cred.c: put address comparison in separate function
1345 * lib/krb5/krb5_kuserok.3: check the user's ~/.k5login.d directory
1349 * lib/krb5/kuserok.c: check the user's ~/.k5login.d directory for
1363 * configure.in: if we have a $srcdir/lib/asn1/pkcs12.asn1, define
1374 * lib/krb5/pkinit.c (krb5_ui_method_read_string): use the fill in
1377 * lib/krb5/init_creds_pw.c: Now that we fixed the signed-ness of
1384 * lib/krb5/crypto.c: Don't declare des_salt &c as static with
1389 * lib/krb5/krb5_locl.h: include <crypt.h>
1399 * lib/krb5/init_creds_pw.c: if we are using PKINIT, strip of the
1410 * lib/krb5/pkinit.c: Pass prompter data to the prompter function,
1415 * lib/krb5: add <err.h> in test programs
1419 * lib/krb5/Makefile.am: use LIB_com_err for libkrb5.la
1423 * lib/asn1/Makefile.am: use $(LIB_com_err)
1427 * lib/krb5/context.c (krb5_set_config_files): ignore permission
1433 * lib/krb5/krb5_locl.h: define _POSIX_PTHREAD_SEMANTICS so we get
1438 * lib/asn1/gen_glue.c: switch the units variable to a
1445 * lib/hdb/hdb.schema: add EQUALITY rule for krb5ValidStart,
1458 * lib/krb5/pkinit.c: use the unexported oid_to_enctype function
1460 * lib/krb5/crypto.c: unexport the oid_to_enctype function, not for
1465 * lib/krb5/krb5_ccache.3: document krb5_cc_new_unique
1467 * lib/krb5/cache.c (krb5_cc_new_unique): new function to create a
1484 * lib/krb5/v4_glue.c: simplify error handling
1491 * lib/krb5/krb5_krbhst_init.3: spelling, from Björn Sandell
1494 * lib/krb5/krb5_get_krbhst.3: spelling, from Björn Sandell
1497 * lib/krb5/krb5_data.3: spelling, from Björn Sandell
1500 * lib/krb5/krb5_aname_to_localname.3: spelling, from Björn Sandell
1503 * lib/krb5/krb5_address.3: spelling, from Björn Sandell
1514 * lib/krb5/krb5_locl.h: forward declaration of _krb5_krb_auth_data
1516 * lib/krb5/convert_creds.c: Move the kerberos v4 replacement
1519 * lib/krb5/v4_glue.c: Implement enough of kerberos 4 protocol to
1522 * lib/krb5/krb5-v4compat.h: add more v4 defines
1534 * lib/krb5/addr_families.c: catch two more snprintf problems
1538 * lib/hdb/Makefile.am: this lib include com_err, add -com_err to
1546 * lib/krb5/kuserok.c: use asprintf to avoid truncating pathnames
1548 * lib/krb5/get_host_realm.c: check return value of snprintf
1550 * lib/krb5/test_addr.c: check address truncation
1552 * lib/krb5/addr_families.c: check return values from snprintf and
1555 * lib/krb5/krb5_address.3: clarify what ret_len is in
1558 * lib/krb5/test_kuserok.c: add --version and --help
1560 * lib/krb5/kuserok.c: use getpwnamn_r if it exists
1562 * lib/krb5/Makefile.am: noinst_PROGRAMS += test_kuserok
1564 * lib/krb5/test_kuserok.c: test program for krb5_kuserok
1568 * lib/krb5/acache.c (acc_resolve): if open_default_ccache failed
1573 * lib/krb5/get_default_principal.c
1577 * lib/hdb/hdb-ldap.c: drop <ctype.h>, no longer use any of the is*
1595 * lib/krb5/krb5_keyblock.3: document krb5_keyblock_init
1604 * lib/krb5/keyblock.c: Add krb5_keyblock_init to allocate an fill
1618 * lib/krb5/init_creds_pw.c (process_pa_data_to_key): also check
1627 * lib/asn1/check-der.c: use size_t, print size_t by casting to
1630 * lib/krb5/test_crypto.c: print size_t by casting to unsigned long
1632 * lib/krb5/acache.c: Argument to create_new_ccache is a principal,
1636 * lib/hdb/Makefile.am: CHECK_SYMBOLS += HDBFlags2int
1638 * lib/krb5/addr_families.c
1642 * lib/krb5/aes-test.c: size_t vs int + fix printf
1644 * lib/krb5/pkinit.c: Since the decode can't make out the diffrence
1660 * lib/krb5/verify_krb5_conf.c: const poison
1662 * lib/krb5/test_alname.c: const poison
1664 * lib/asn1/main.c: const poison
1666 * lib/krb5/test_addr.c: test parse IPv6 RANGE addresses
1668 * lib/krb5/addr_families.c: implement mask boundary for IPv6
1670 * lib/asn1/gen.c: avoid const string warnings steming from
1675 * lib/krb5/Makefile.am: TESTS += test_addr
1677 * lib/krb5/test_addr.c: simple test for addresses
1679 * lib/krb5/addr_families.c: make RANGE parse prefixlen style
1683 * lib/krb5/krb5_keytab.3: stop memory leak in example, expand on
1688 * lib/krb5/krb5_principal.3: spelling, from Tomas Olsson
1690 * lib/krb5/krb5_warn.3: spelling, from Tomas Olsson
1694 * lib/krb5/acache.c: add mutex for global variables, clean up
1713 * lib/hdb/keys.c: AES is enabled by default, remove ifdefs
1715 * lib/krb5/crypto.c: AES is enabled by default, remove ifdefs
1717 * lib/krb5/aes-test.c: use hex encoder from roken AES is enabled
1735 * lib/krb5/crypto.c: more static and unsigned issues
1737 * lib/krb5/crypto.c: fix signedness issues, prompted by report of
1742 * lib/krb5/krb5_keytab.3: more text about how to free returned
1747 * lib/krb5/pkinit.c: handle the -25 generation path
1749 * lib/krb5/pkinit.c: use KRB5_PADATA_PK_AS_REQ_19
1751 * lib/krb5/pkinit.c: fold in pk-init-25 asn1 changes
1757 * lib/krb5/pkinit.c: use generated oid's
1763 * lib/krb5/pkinit.c: update to the asn1 structures used in -25's
1767 * lib/hdb/hdb-ldap.c: use the newly written hex function from
1776 * lib/krb5/Makefile.am: bump version to 21:0:4
1778 * lib/hdb/Makefile.am: bump version to 8:0:1
1780 * lib/asn1/Makefile.am: bump version to 7:0:1
1784 * lib/krb5/crypto.c (DES_string_to_key_int): must check for weak
1789 * lib/krb5/krbhst.c: set KD_CONFIG after calling
1795 * lib/hdb/db3.c (DB_open): correct the check for O_RDONLY
1800 * lib/krb5/crypto.c (krb5_random_to_key): cast size_t to int to
1805 * lib/krb5/keytab.c (krb5_kt_get_entry): tell what enctype the
1811 * lib/krb5/kcm.c: add _krb5_kcm_is_running, _krb5_kcm_noop
1832 * lib/krb5/krb5.conf.5: document large_msg_size
1834 * lib/krb5/context.c (init_context_from_config_file): init
1837 * lib/krb5/krb5.h (krb5_context_data): add large_msg_size,
1841 * lib/krb5/kcm.h: drop prototypes, they all live in krb5-private.h
1854 * lib/krb5/send_to_kdc.c (send_and_recv_udp): make private again
1856 * lib/krb5/kcm.c: use AF_UNIX like the rest of the codebase, add
1864 * lib/krb5/Makefile.am: add kcm.c
1866 * lib/krb5/cache.c: use cc_retrieve_cred if present rather
1869 * lib/krb5/context.c: register KCM cc_ops
1871 * lib/krb5/get_cred.c: pass all options to cc_retrieve_cred
1873 * lib/krb5/init_creds_pw.c: add krb5_get_init_creds_keyblock
1875 * lib/krb5/kcm.[ch]: add initial implementation of KCM
1878 * lib/krb5/krb5.h: fix cc_retrieve prototype, add KCM cc_ops
1880 * lib/krb5/send_to_kdc.c: add _krb5_send_and_recv_tcp
1882 * lib/krb5/store.c: add krb5_store_creds_tag, krb5_ret_creds_tag
1886 * lib/krb5/init_creds_pw.c: allow NULL in_options to be passed
1904 * lib/krb5/verify_krb5_conf.c: cast argument to isdigit to
1907 * lib/krb5/keytab_keyfile.c: cast argument to toupper to unsigned
1910 * lib/asn1/hash.c (hashcaseadd): cast argument to toupper to
1916 * lib/krb5/krb5.3: drop krb5_{checksum,enctype}_is_disabled
1918 * lib/krb5/krb5_encrypt.3: drop krb5_enctype_is_disabled, more
1921 * lib/krb5/krb5_create_checksum.3: drop
1924 * lib/krb5/crypto.c: drop krb5_{checksum,enctype}_isdisabled
1926 * lib/krb5/context.c: krb5_enctype_is_disabled is the same thing
1930 * lib/krb5/rd_req.c: krb5_enctype_is_disabled is the same thing as
1946 * lib/krb5/addr_families.c (krb5_parse_address): filter out dup
1958 * lib/krb5/krb5_keyblock.3: document krb5_generate_subkey_extended
1960 * lib/krb5/krb5_is_thread_safe.3: document function
1962 * lib/krb5/Makefile.am (man_MANS) += krb5_is_thread_safe.3
1964 * lib/krb5/context.c (krb5_is_thread_safe): return TRUE is the
1971 * lib/krb5/auth_context.c: use krb5_generate_subkey_extended()
1973 * lib/krb5/appdefault.c: remove redundant KRB5_LIB_FUNCTION
1975 * lib/krb5/build_auth.c: support for enctype negotiation
1978 * lib/krb5/context.c: mutex should be destroyed last in
1981 * lib/krb5/generate_subkey.c: add krb5_generate_subkey_extended(),
1984 * lib/krb5/krb5.h: add KRB5_KU_PA_SERVER_REFERRAL_DATA
1986 * lib/krb5/mk_req_ext.c: support ETYPE_ARCFOUR_HMAC_MD5_56
1988 * lib/krb5/rd_req.c: support for enctype negotiation
1993 * lib/asn1/k5.asn1: add authorization data types for enctype
1998 * lib/krb5/changepw.c (change_password_loop): on failing to find a