11999-12-30 Assar Westerlund <assar@sics.se> 2 3 * configure.in (krb4): use `-ldes' in tests 4 51999-12-26 Assar Westerlund <assar@sics.se> 6 7 * lib/hdb/print.c (event2string): handle events without principal. 8 From Luke Howard <lukeh@PADL.COM> 9 101999-12-25 Assar Westerlund <assar@sics.se> 11 12 * Release 0.2j 13 14Tue Dec 21 18:03:17 1999 Assar Westerlund <assar@sics.se> 15 16 * lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and 17 related systems 18 19 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and 20 related systems 21 22 * include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and 23 related systems 24 251999-12-20 Assar Westerlund <assar@sics.se> 26 27 * Release 0.2i 28 291999-12-20 Assar Westerlund <assar@sics.se> 30 31 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1 32 33 * lib/krb5/send_to_kdc.c (send_via_proxy): free data 34 * lib/krb5/send_to_kdc.c (send_via_proxy): new function use 35 getaddrinfo instead of gethostbyname{,2} 36 * lib/krb5/get_for_creds.c: use getaddrinfo instead of 37 getnodebyname{,2} 38 391999-12-17 Assar Westerlund <assar@sics.se> 40 41 * Release 0.2h 42 431999-12-17 Assar Westerlund <assar@sics.se> 44 45 * Release 0.2g 46 471999-12-16 Assar Westerlund <assar@sics.se> 48 49 * lib/krb5/Makefile.am: bump version to 6:2:1 50 51 * lib/krb5/principal.c (krb5_sname_to_principal): handle 52 ai_canonname not being set 53 * lib/krb5/expand_hostname.c (krb5_expand_hostname): handle 54 ai_canonname not being set 55 56 * appl/test/uu_server.c: print messages to stderr 57 * appl/test/tcp_server.c: print messages to stderr 58 * appl/test/nt_gss_server.c: print messages to stderr 59 * appl/test/gssapi_server.c: print messages to stderr 60 61 * appl/test/tcp_client.c (proto): remove shadowing `context' 62 * appl/test/common.c (client_doit): add forgotten ntohs 63 641999-12-13 Assar Westerlund <assar@sics.se> 65 66 * configure.in (VERISON): bump to 0.2g-pre 67 681999-12-12 Assar Westerlund <assar@sics.se> 69 70 * lib/krb5/principal.c (krb5_425_conv_principal_ext): be more 71 robust and handle extra dot at the beginning of default_domain 72 731999-12-12 Assar Westerlund <assar@sics.se> 74 75 * Release 0.2f 76 771999-12-12 Assar Westerlund <assar@sics.se> 78 79 * lib/krb5/Makefile.am: bump version to 6:1:1 80 81 * lib/krb5/changepw.c (get_kdc_address): use 82 `krb5_get_krb_changepw_hst' 83 84 * lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add 85 86 * lib/krb5/get_host_realm.c: add support for _kerberos.domain 87 (according to draft-ietf-cat-krb-dns-locate-01.txt) 88 891999-12-06 Assar Westerlund <assar@sics.se> 90 91 * Release 0.2e 92 931999-12-06 Assar Westerlund <assar@sics.se> 94 95 * lib/krb5/changepw.c (krb5_change_password): use the correct 96 address 97 98 * lib/krb5/Makefile.am: bump version to 6:0:1 99 100 * lib/asn1/Makefile.am: bump version to 1:4:0 101 1021999-12-04 Assar Westerlund <assar@sics.se> 103 104 * configure.in: move AC_KRB_IPv6 to make sure it's performed 105 before AC_BROKEN 106 (el_init): use new feature of AC_FIND_FUNC_NO_LIBS 107 108 * appl/test/uu_client.c: use client_doit 109 * appl/test/test_locl.h (client_doit): add prototype 110 * appl/test/tcp_client.c: use client_doit 111 * appl/test/nt_gss_client.c: use client_doit 112 * appl/test/gssapi_client.c: use client_doit 113 * appl/test/common.c (client_doit): move identical code here and 114 start using getaddrinfo 115 116 * appl/kf/kf.c (doit): rewrite to use getaddrinfo 117 * kdc/hprop.c: re-write to use getaddrinfo 118 * lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo 119 * lib/krb5/expand_hostname.c (krb5_expand_hostname): use 120 getaddrinfo 121 * lib/krb5/changepw.c: re-write to use getaddrinfo 122 * lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo 123 1241999-12-03 Assar Westerlund <assar@sics.se> 125 126 * configure.in (BROKEN): check for freeaddrinfo, getaddrinfo, 127 getnameinfo, gai_strerror 128 (socklen_t): check for 129 1301999-12-02 Johan Danielsson <joda@pdc.kth.se> 131 132 * lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key 133 1341999-11-23 Assar Westerlund <assar@sics.se> 135 136 * lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes 137 within unicode characters. this should probably be done in some 138 arbitrarly complex way to do it properly and you would have to 139 know what character encoding was used for the password and salt 140 string. 141 142 * lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0 143 (INADDR_ANY) 144 (ipv6_uninteresting): remove unused macro 145 1461999-11-22 Johan Danielsson <joda@pdc.kth.se> 147 148 * lib/krb5/krb5.h: rc4->arcfour 149 150 * lib/krb5/crypto.c: rc4->arcfour 151 1521999-11-17 Assar Westerlund <assar@sics.se> 153 154 * lib/krb5/krb5_locl.h: add <rc4.h> 155 * lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4 156 * lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might 157 not be totally different from some small company up in the 158 north-west corner of the US 159 160 * lib/krb5/get_addrs.c (find_all_addresses): change code to 161 actually increment buf_size 162 1631999-11-14 Assar Westerlund <assar@sics.se> 164 165 * lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces' 166 * lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces 167 scanning optional 168 * lib/krb5/context.c (init_context_from_config_file): set 169 `scan_interfaces' 170 171 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c 172 * lib/krb5/add_et_list.c (krb5_add_et_list): new function 173 1741999-11-12 Assar Westerlund <assar@sics.se> 175 176 * lib/krb5/get_default_realm.c (krb5_get_default_realm, 177 krb5_get_default_realms): set realms if they were unset 178 * lib/krb5/context.c (init_context_from_config_file): don't 179 initialize default realms here. it's done lazily instead. 180 181 * lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned 182 * lib/asn1/gen_glue.c (generate_2int, generate_units): make sure 183 bit constants are unsigned 184 * lib/asn1/gen.c (define_type): make length in sequences be 185 unsigned. 186 187 * configure.in: remove duplicate test for setsockopt test for 188 struct tm.tm_isdst 189 190 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate 191 preauthentication information if we get back ERR_PREAUTH_REQUIRED 192 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove 193 preauthentication generation code. it's now in krb5_get_in_cred 194 195 * configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct 196 tm.tm_gmtoff and timezone 197 1981999-11-11 Johan Danielsson <joda@pdc.kth.se> 199 200 * kdc/main.c: make this work with multi-db 201 202 * kdc/kdc_locl.h: make this work with multi-db 203 204 * kdc/config.c: make this work with multi-db 205 2061999-11-09 Johan Danielsson <joda@pdc.kth.se> 207 208 * kdc/misc.c: update for multi-database code 209 210 * kdc/main.c: update for multi-database code 211 212 * kdc/kdc_locl.h: update 213 214 * kdc/config.c: allow us to have more than one database 215 2161999-11-04 Assar Westerlund <assar@sics.se> 217 218 * Release 0.2d 219 220 * lib/krb5/Makefile.am: bump version to 5:0:0 to be safe 221 (krb5_context_data has changed and some code do (might) access 222 fields directly) 223 224 * lib/krb5/krb5.h (krb5_context_data): add `etypes_des' 225 226 * lib/krb5/get_cred.c (init_tgs_req): use 227 krb5_keytype_to_enctypes_default 228 229 * lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new 230 function 231 232 * lib/krb5/context.c (set_etypes): new function 233 (init_context_from_config_file): set both `etypes' and `etypes_des' 234 2351999-11-02 Assar Westerlund <assar@sics.se> 236 237 * configure.in (VERSION): bump to 0.2d-pre 238 2391999-10-29 Assar Westerlund <assar@sics.se> 240 241 * lib/krb5/principal.c (krb5_parse_name): check memory allocations 242 2431999-10-28 Assar Westerlund <assar@sics.se> 244 245 * Release 0.2c 246 247 * lib/krb5/dump_config.c (print_tree): check for empty tree 248 249 * lib/krb5/string-to-key-test.c (tests): update the test cases 250 with empty principals so that they actually use an empty realm and 251 not the default. use the correct etype for 3DES 252 253 * lib/krb5/Makefile.am: bump version to 4:1:0 254 255 * kdc/config.c (configure): more careful with the port string 256 2571999-10-26 Assar Westerlund <assar@sics.se> 258 259 * Release 0.2b 260 2611999-10-20 Assar Westerlund <assar@sics.se> 262 263 * lib/krb5/Makefile.am: bump version to 4:0:0 264 (krb524_convert_creds_kdc and potentially some other functions 265 have changed prototypes) 266 267 * lib/hdb/Makefile.am: bump version to 4:0:1 268 269 * lib/asn1/Makefile.am: bump version to 1:3:0 270 271 * configure.in (LIB_roken): add dbopen. getcap in roken 272 references dbopen and with shared libraries we need to add this 273 dependency. 274 275 * lib/krb5/verify_krb5_conf.c (main): support speicifying the 276 configuration file to test on the command line 277 278 * lib/krb5/config_file.c (parse_binding): handle line with no 279 whitespace before = 280 (krb5_config_parse_file_debug): set lineno earlier so that we don't 281 use it unitialized 282 283 * configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need 284 more include files for these tests 285 286 * lib/krb5/set_default_realm.c (krb5_set_default_realm): use 287 krb5_config_get_strings, which means that your configuration file 288 should look like: 289 290 [libdefaults] 291 default_realm = realm1 realm2 realm3 292 293 * lib/krb5/set_default_realm.c (config_binding_to_list): fix 294 copy-o. From Michal Vocu <michal@karlin.mff.cuni.cz> 295 296 * kdc/config.c (configure): add a missing strdup. From Michal 297 Vocu <michal@karlin.mff.cuni.cz> 298 2991999-10-17 Assar Westerlund <assar@sics.se> 300 301 * Release 0.2a 302 303 * configure.in: only test for db.h with using berkeley_db. remember 304 to link with LIB_tgetent when checking for el_init. add xnlock 305 306 * appl/Makefile.am: add xnlock 307 308 * kdc/kerberos5.c (find_etype): support null keys 309 310 * kdc/kerberos4.c (get_des_key): support null keys 311 312 * lib/krb5/crypto.c (krb5_get_wrapped_length): more correct 313 calculation 314 3151999-10-16 Johan Danielsson <joda@pdc.kth.se> 316 317 * kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc 318 3191999-10-12 Johan Danielsson <joda@pdc.kth.se> 320 321 * lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning 322 3231999-10-10 Assar Westerlund <assar@sics.se> 324 325 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm 326 327 * lib/krb5/krb5.h (krb5_ccache_data): make `ops' const 328 329 * lib/krb5/crypto.c (krb5_string_to_salttype): new function 330 331 * **/*.[ch]: const-ize 332 3331999-10-06 Assar Westerlund <assar@sics.se> 334 335 * lib/krb5/creds.c (krb5_compare_creds): const-ify 336 337 * lib/krb5/cache.c: clean-up and comment-up 338 339 * lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the 340 strings 341 342 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the 343 correct realm part 344 345 * kdc/connect.c (handle_tcp): things work much better when ret is 346 initialized 347 3481999-10-03 Assar Westerlund <assar@sics.se> 349 350 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the 351 type of the session key 352 353 * lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell 354 correctly 355 356 * lib/krb5/creds.c (krb5_compare_creds): fix spelling of 357 krb5_enctypes_compatible_keys 358 359 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new 360 credentials from the KDC if the existing one doesn't have a DES 361 session key. 362 363 * lib/45/get_ad_tkt.c (get_ad_tkt): update to new 364 krb524_convert_creds_kdc 365 3661999-10-03 Johan Danielsson <joda@pdc.kth.se> 367 368 * lib/krb5/keytab_keyfile.c: make krb5_akf_ops const 369 370 * lib/krb5/keytab_memory.c: make krb5_mkt_ops const 371 372 * lib/krb5/keytab_file.c: make krb5_fkt_ops const 373 3741999-10-01 Assar Westerlund <assar@sics.se> 375 376 * lib/krb5/config_file.c: rewritten to allow error messages 377 378 * lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf 379 (libkrb5_la_SOURCES): add config_file_netinfo.c 380 381 * lib/krb5/verify_krb5_conf.c: new program for verifying that 382 krb5.conf is corret 383 384 * lib/krb5/config_file_netinfo.c: moved netinfo code here from 385 config_file.c 386 3871999-09-28 Assar Westerlund <assar@sics.se> 388 389 * kdc/hpropd.c (dump_krb4): kludge default_realm 390 391 * lib/asn1/check-der.c: add test cases for Generalized time and 392 make sure we return the correct value 393 394 * lib/asn1/der_put.c: simplify by using der_put_length_and_tag 395 396 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of 397 krb5_verify_user that tries in all the local realms 398 399 * lib/krb5/set_default_realm.c: add support for having several 400 default realms 401 402 * lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms' 403 404 * lib/krb5/get_default_realm.c (krb5_get_default_realms): add 405 406 * lib/krb5/krb5.h (krb5_context_data): change `default_realm' to 407 `default_realms' 408 409 * lib/krb5/context.c: change from `default_realm' to 410 `default_realms' 411 412 * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use 413 krb5_get_default_realms 414 415 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c 416 417 * lib/krb5/copy_host_realm.c: new file 418 4191999-09-27 Johan Danielsson <joda@pdc.kth.se> 420 421 * lib/asn1/der_put.c (encode_generalized_time): encode length 422 423 * lib/krb5/recvauth.c: new function `krb5_recvauth_match_version' 424 that allows more intelligent matching of the application version 425 4261999-09-26 Assar Westerlund <assar@sics.se> 427 428 * lib/asn1/asn1_print.c: add err.h 429 430 * kdc/config.c (configure): use parse_bytes 431 432 * appl/test/nt_gss_common.c: use the correct header file 433 4341999-09-24 Johan Danielsson <joda@pdc.kth.se> 435 436 * kuser/klist.c: add a `--cache' flag 437 438 * kuser/kinit.c (main): only get default value for `get_v4_tgt' if 439 it's explicitly set in krb5.conf 440 4411999-09-23 Assar Westerlund <assar@sics.se> 442 443 * lib/asn1/asn1_print.c (tag_names); add another univeral tag 444 445 * lib/asn1/der.h: update universal tags 446 4471999-09-22 Assar Westerlund <assar@sics.se> 448 449 * lib/asn1/asn1_print.c (loop): print length of octet string 450 4511999-09-21 Johan Danielsson <joda@pdc.kth.se> 452 453 * admin/ktutil.c (kt_get): add `--help' 454 4551999-09-21 Assar Westerlund <assar@sics.se> 456 457 * kuser/Makefile.am: add kdecode_ticket 458 459 * kuser/kdecode_ticket.c: new debug program 460 461 * appl/test/nt_gss_server.c: new program to test against `Sample * 462 SSPI Code' in Windows 2000 RC1 SDK. 463 464 * appl/test/Makefile.am: add nt_gss_client and nt_gss_server 465 466 * lib/asn1/der_get.c (decode_general_string): remember to advance 467 ret over the length-len 468 469 * lib/asn1/Makefile.am: add asn1_print 470 471 * lib/asn1/asn1_print.c: new program for printing DER-structures 472 473 * lib/asn1/der_put.c: make functions more consistent 474 475 * lib/asn1/der_get.c: make functions more consistent 476 4771999-09-20 Johan Danielsson <joda@pdc.kth.se> 478 479 * kdc/kerberos5.c: be more informative in pa-data error messages 480 4811999-09-16 Assar Westerlund <assar@sics.se> 482 483 * configure.in: test for strlcpy, strlcat 484 4851999-09-14 Assar Westerlund <assar@sics.se> 486 487 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return 488 KRB5_LIBOS_PWDINTR when interrupted 489 490 * lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return 491 value from des_read_pw_string 492 493 * kuser/kinit.c (main): don't print any error if reading the 494 password was interrupted 495 496 * kpasswd/kpasswd.c (main): don't print any error if reading the 497 password was interrupted 498 499 * kdc/string2key.c (main): check the return value from fgets 500 501 * kdc/kstash.c (main): check return value from des_read_pw_string 502 503 * admin/ktutil.c (kt_add): check the return-value from fgets and 504 overwrite the password for paranoid reasons 505 506 * lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the 507 newline if it's there 508 5091999-09-13 Assar Westerlund <assar@sics.se> 510 511 * kdc/hpropd.c (main): remove bogus error with `--print'. remove 512 sysloging of number of principals transferred 513 514 * kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL 515 principals 516 (main): get rid of bogus opening of hdb database when propagating 517 ka-server database 518 5191999-09-12 Assar Westerlund <assar@sics.se> 520 521 * lib/krb5/krb5_locl.h (O_BINARY): add fallback definition 522 523 * lib/krb5/krb5.h (krb5_context_data): add keytab types 524 525 * configure.in: revert back awk test, not worked around in 526 roken.awk 527 528 * lib/krb5/keytab_krb4.c: remove O_BINARY 529 530 * lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's. From 531 Love <lha@e.kth.se> 532 533 * lib/krb5/keytab_file.c: remove O_BINARY 534 535 * lib/krb5/keytab.c: move the list of keytab types to the context 536 537 * lib/krb5/fcache.c: remove O_BINARY 538 539 * lib/krb5/context.c (init_context_from_config_file): register all 540 standard cache and keytab types 541 (krb5_free_context): free `kt_types' 542 543 * lib/krb5/cache.c (krb5_cc_resolve): move the registration of the 544 standard types of credential caches to context 545 546 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c 547 5481999-09-10 Assar Westerlund <assar@sics.se> 549 550 * lib/krb5/keytab.c: add comments and clean-up 551 552 * admin/ktutil.c: add `ktutil copy' 553 554 * lib/krb5/keytab_krb4.c: new file 555 556 * lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field 557 558 * lib/krb5/Makefile.am: add keytab_krb4.c 559 560 * lib/krb5/keytab.c: add krb4 and correct some if's 561 562 * admin/srvconvert.c (srvconv): move common code 563 564 * lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables 565 566 * lib/krb5/keytab.c: move out file and memory functions 567 568 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c, 569 keytab_memory.c 570 571 * lib/krb5/keytab_memory.c: new file 572 573 * lib/krb5/keytab_file.c: new file 574 575 * kpasswd/kpasswdd.c: move out password quality functions 576 5771999-09-07 Assar Westerlund <assar@sics.se> 578 579 * lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c. From 580 Love <lha@e.kth.se> 581 582 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check 583 return value from `krb5_sendto_kdc' 584 5851999-09-06 Assar Westerlund <assar@sics.se> 586 587 * lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and 588 remove the sending of data. add a parameter `limit'. let callers 589 send the date themselves (and preferably with net_write on tcp 590 sockets) 591 (send_and_recv_tcp): read first the length field and then only that 592 many bytes 593 5941999-09-05 Assar Westerlund <assar@sics.se> 595 596 * kdc/connect.c (handle_tcp): try to print warning `TCP data of 597 strange type' less often 598 599 * lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly. 600 return on EOF. always free data. check return value from 601 realloc. 602 (send_and_recv_tcp, send_and_recv_http): check advertised length 603 against actual length 604 6051999-09-01 Johan Danielsson <joda@pdc.kth.se> 606 607 * configure.in: check for sgi capabilities 608 6091999-08-27 Johan Danielsson <joda@pdc.kth.se> 610 611 * lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return 612 extra addresses 613 614 * kpasswd/kpasswdd.c: use HDB keytabs; change some error messages; 615 add --realm flag 616 617 * lib/krb5/address.c (krb5_append_addresses): remove duplicates 618 6191999-08-26 Johan Danielsson <joda@pdc.kth.se> 620 621 * lib/hdb/keytab.c: HDB keytab backend 622 6231999-08-25 Johan Danielsson <joda@pdc.kth.se> 624 625 * lib/krb5/keytab.c 626 (krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL 627 pointer 628 6291999-08-24 Johan Danielsson <joda@pdc.kth.se> 630 631 * kpasswd/kpasswdd.c: add `--keytab' flag 632 6331999-08-23 Assar Westerlund <assar@sics.se> 634 635 * lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr' 636 instead of the non-standard `s6_addr32'. From Yoshinobu Inoue 637 <shin@kame.net> by way of the KAME repository 638 6391999-08-18 Assar Westerlund <assar@sics.se> 640 641 * configure.in (--enable-new-des3-code): remove check for `struct 642 addrinfo' 643 644 * lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable 645 des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards 646 compatability 647 648 * lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key 649 derivation) just got assigned etype 16 by <bcn@isi.edu>. keep the 650 old etype at 7. 651 6521999-08-16 Assar Westerlund <assar@sics.se> 653 654 * lib/krb5/sendauth.c (krb5_sendauth): only look at errno if 655 krb5_net_read actually returns -1 656 657 * lib/krb5/recvauth.c (krb5_recvauth): only look at errno if 658 krb5_net_read actually returns -1 659 660 * appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't 661 returned -1 662 663 * appl/test/tcp_server.c (proto): only trust errno if 664 krb5_net_read actually returns -1 665 666 * appl/kf/kfd.c (proto): be more careful with the return value 667 from krb5_net_read 668 6691999-08-13 Assar Westerlund <assar@sics.se> 670 671 * lib/krb5/get_addrs.c (get_addrs_int): try the different ways 672 sequentially instead of just one. this helps if your heimdal was 673 built with v6-support but your kernel doesn't have it, for 674 example. 675 6761999-08-12 Assar Westerlund <assar@sics.se> 677 678 * kdc/hpropd.c: add inetd flag. default means try to figure out 679 if stdin is a socket or not. 680 681 * Makefile.am (ACLOCAL): just use `cf', this variable is only used 682 when the current directory is $(top_srcdir) anyways and having 683 $(top_srcdir) there breaks if it's a relative path 684 6851999-08-09 Johan Danielsson <joda@pdc.kth.se> 686 687 * configure.in: check for setproctitle 688 6891999-08-05 Assar Westerlund <assar@sics.se> 690 691 * lib/krb5/principal.c (krb5_sname_to_principal): remember to call 692 freehostent 693 694 * appl/test/tcp_client.c: call freehostent 695 696 * appl/kf/kf.c (doit): call freehostent 697 698 * appl/kf/kf.c: make v6 friendly and simplify 699 700 * appl/kf/kfd.c: make v6 friendly and simplify 701 702 * appl/test/tcp_server.c: simplify by using krb5_err instead of 703 errx 704 705 * appl/test/tcp_client.c: simplify by using krb5_err instead of 706 errx 707 708 * appl/test/tcp_server.c: make v6 friendly and simplify 709 710 * appl/test/tcp_client.c: make v6 friendly and simplify 711 7121999-08-04 Assar Westerlund <assar@sics.se> 713 714 * Release 0.1m 715 7161999-08-04 Assar Westerlund <assar@sics.se> 717 718 * kuser/kinit.c (main): some more KRB4-conditionalizing 719 720 * lib/krb5/get_in_tkt.c: type correctness 721 722 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in 723 flags. From Miroslav Ruda <ruda@ics.muni.cz> 724 725 * kuser/kinit.c (main): add config file support for forwardable 726 and krb4 support. From Miroslav Ruda <ruda@ics.muni.cz> 727 728 * kdc/kerberos5.c (as_rep): add an empty X500-compress string as 729 transited. 730 (fix_transited_encoding): check length. 731 From Miroslav Ruda <ruda@ics.muni.cz> 732 733 * kdc/hpropd.c (dump_krb4): check the realm so that we don't dump 734 principals in some other realm. From Miroslav Ruda 735 <ruda@ics.muni.cz> 736 (main): rename sa_len -> sin_len, sa_lan is a define on some 737 platforms. 738 739 * appl/kf/kfd.c: add regpag support. From Miroslav Ruda 740 <ruda@ics.muni.cz> 741 742 * appl/kf/kf.c: add `-G' and forwardable option in krb5.conf. 743 From Miroslav Ruda <ruda@ics.muni.cz> 744 745 * lib/krb5/config_file.c (parse_list): don't run past end of line 746 747 * appl/test/gss_common.h: new prototypes 748 749 * appl/test/gssapi_client.c: use gss_err instead of abort 750 751 * appl/test/gss_common.c (gss_verr, gss_err): add 752 7531999-08-03 Assar Westerlund <assar@sics.se> 754 755 * lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this 756 otherwise it doesn't build with shared libraries 757 758 * kdc/hpropd.c: v6-ify 759 760 * kdc/hprop.c: v6-ify 761 7621999-08-01 Assar Westerlund <assar@sics.se> 763 764 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname 765 7661999-07-31 Assar Westerlund <assar@sics.se> 767 768 * lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new 769 function that takes a FQDN 770 771 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c 772 773 * lib/krb5/expand_hostname.c: new file 774 7751999-07-28 Assar Westerlund <assar@sics.se> 776 777 * Release 0.1l 778 7791999-07-28 Assar Westerlund <assar@sics.se> 780 781 * lib/asn1/Makefile.am: bump version to 1:2:0 782 783 * lib/krb5/Makefile.am: bump version to 3:1:0 784 785 * configure.in: more inet_pton to roken 786 787 * lib/krb5/principal.c (krb5_sname_to_principal): use 788 getipnodebyname 789 7901999-07-26 Assar Westerlund <assar@sics.se> 791 792 * Release 0.1k 793 7941999-07-26 Johan Danielsson <joda@pdc.kth.se> 795 796 * lib/krb5/Makefile.am: bump version number (changed function 797 signatures) 798 799 * lib/hdb/Makefile.am: bump version number (changes to some 800 function signatures) 801 8021999-07-26 Assar Westerlund <assar@sics.se> 803 804 * lib/krb5/Makefile.am: bump version to 3:0:2 805 806 * lib/hdb/Makefile.am: bump version to 2:1:0 807 808 * lib/asn1/Makefile.am: bump version to 1:1:0 809 8101999-07-26 Assar Westerlund <assar@sics.se> 811 812 * Release 0.1j 813 8141999-07-26 Assar Westerlund <assar@sics.se> 815 816 * configure.in: rokenize inet_ntop 817 818 * lib/krb5/store_fd.c: lots of changes from size_t to ssize_t 819 820 * lib/krb5/store_mem.c: lots of changes from size_t to ssize_t 821 822 * lib/krb5/store_emem.c: lots of changes from size_t to ssize_t 823 824 * lib/krb5/store.c: lots of changes from size_t to ssize_t 825 (krb5_ret_stringz): check return value from realloc 826 827 * lib/krb5/mk_safe.c: some type correctness 828 829 * lib/krb5/mk_priv.c: some type correctness 830 831 * lib/krb5/krb5.h (krb5_storage): change return values of 832 functions from size_t to ssize_t 833 8341999-07-24 Assar Westerlund <assar@sics.se> 835 836 * Release 0.1i 837 838 * configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \# 839 in lib/roken/roken.awk 840 841 * lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to 842 step over addresses if there's no `sa_lan' field 843 844 * lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by 845 using `struct sockaddr_storage' 846 847 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using 848 `struct sockaddr_storage' 849 850 * lib/krb5/changepw.c (krb5_change_password): simplify by using 851 `struct sockaddr_storage' 852 853 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): 854 simplify by using `struct sockaddr_storage' 855 856 * kpasswd/kpasswdd.c (*): simplify by using `struct 857 sockaddr_storage' 858 859 * kdc/connect.c (*): simplify by using `struct sockaddr_storage' 860 861 * configure.in (sa_family_t): just test for existence 862 (sockaddr_storage): also specify include file 863 864 * configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i 865 (sa_family_t): test for 866 (struct sockaddr_storage): test for 867 868 * kdc/hprop.c (propagate_database): typo, NULL should be 869 auth_context 870 871 * lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of 872 AF_INET6 873 874 * appl/kf/kf.c (main): use warnx 875 876 * appl/kf/kf.c (proto): remove shadowing context 877 878 * lib/krb5/get_addrs.c (find_all_addresses): try to handle the 879 case of getting back an `sockaddr_in6' address when sizeof(struct 880 sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to 881 tell us how large the address is. This obviously doesn't work 882 with unknown protocol types. 883 8841999-07-24 Assar Westerlund <assar@sics.se> 885 886 * Release 0.1h 887 8881999-07-23 Assar Westerlund <assar@sics.se> 889 890 * appl/kf/kfd.c: clean-up and more paranoia 891 892 * etc/services.append: add kf 893 894 * appl/kf/kf.c: rename tk_file to ccache for consistency. clean-up 895 8961999-07-22 Assar Westerlund <assar@sics.se> 897 898 * lib/krb5/n-fold-test.c (main): print the correct data 899 900 * appl/Makefile.am (SUBDIRS): add kf 901 902 * appl/kf: new program. From Miroslav Ruda <ruda@ics.muni.cz> 903 904 * kdc/hprop.c: declare some variables unconditionally to simplify 905 things 906 907 * kpasswd/kpasswdd.c: initialize kadm5 connection for every change 908 (otherwise the modifier in the database doesn't get set) 909 910 * kdc/hpropd.c: clean-up and re-organize 911 912 * kdc/hprop.c: clean-up and re-organize 913 914 * configure.in (SunOS): define to xy for SunOS x.y 915 9161999-07-19 Assar Westerlund <assar@sics.se> 917 918 * configure.in (AC_BROKEN): test for copyhostent, freehostent, 919 getipnodebyaddr, getipnodebyname 920 9211999-07-15 Assar Westerlund <assar@sics.se> 922 923 * lib/asn1/check-der.c: more test cases for integers 924 925 * lib/asn1/der_length.c (length_int): handle the case of the 926 largest negative integer by not calling abs 927 9281999-07-14 Assar Westerlund <assar@sics.se> 929 930 * lib/asn1/check-der.c (generic_test): check malloc return value 931 properly 932 933 * lib/krb5/Makefile.am: add string_to_key_test 934 935 * lib/krb5/prog_setup.c (krb5_program_setup): always initialize 936 the context 937 938 * lib/krb5/n-fold-test.c (main): return a relevant return value 939 940 * lib/krb5/krbhst.c: do SRV lookups for admin server as well. 941 some clean-up. 942 9431999-07-12 Assar Westerlund <assar@sics.se> 944 945 * configure.in: handle not building X programs 946 9471999-07-06 Assar Westerlund <assar@sics.se> 948 949 * lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate 950 variable 951 (ipv6_sockaddr2port): fix typo 952 953 * etc/services.append: beginning of a file with services 954 955 * lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if 956 there's no prefix. also clean-up a little bit. 957 958 * kdc/hprop.c (--kaspecials): new flag for handling special KA 959 server entries. From "Brandon S. Allbery KF8NH" 960 <allbery@kf8nh.apk.net> 961 9621999-07-05 Assar Westerlund <assar@sics.se> 963 964 * kdc/connect.c (handle_tcp): make sure we have data before 965 starting to look for HTTP 966 967 * kdc/connect.c (handle_tcp): always do getpeername, we can't 968 trust recvfrom to return anything sensible 969 9701999-07-04 Assar Westerlund <assar@sics.se> 971 972 * lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with 973 all enctypes 974 975 * kpasswd/kpasswdd.c (change): fetch the salt-type from the entry 976 977 * admin/srvconvert.c (srvconv): better error messages 978 9791999-07-03 Assar Westerlund <assar@sics.se> 980 981 * lib/krb5/principal.c (unparse_name): error check malloc properly 982 983 * lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc 984 properly 985 986 * lib/krb5/crypto.c (*): do some malloc return-value checks 987 properly 988 989 * lib/hdb/hdb.c (hdb_process_master_key): simplify by using 990 krb5_data_alloc 991 992 * lib/hdb/hdb.c (hdb_process_master_key): check return value from 993 malloc 994 995 * lib/asn1/gen_decode.c (decode_type): fix generation of decoding 996 information for TSequenceOf. 997 998 * kdc/kerberos5.c (get_pa_etype_info): check return value from 999 malloc 1000 10011999-07-02 Assar Westerlund <assar@sics.se> 1002 1003 * lib/asn1/der_copy.c (copy_octet_string): don't fail if length == 1004 0 and malloc returns NULL 1005 10061999-06-29 Assar Westerlund <assar@sics.se> 1007 1008 * lib/krb5/addr_families.c (ipv6_parse_addr): implement 1009 10101999-06-24 Assar Westerlund <assar@sics.se> 1011 1012 * lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address 1013 as an addrport one 1014 1015 * lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT): 1016 add 1017 (krb5_auth_context): add local and remote port 1018 1019 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the 1020 local and remote address and add them to the krb-cred packet 1021 1022 * lib/krb5/auth_context.c: save the local and remove ports in the 1023 auth_context 1024 1025 * lib/krb5/address.c (krb5_make_addrport): create an address of 1026 type KRB5_ADDRESS_ADDRPORT from (addr, port) 1027 1028 * lib/krb5/addr_families.c (krb5_sockaddr2port): new function for 1029 grabbing the port number out of the sockaddr 1030 10311999-06-23 Assar Westerlund <assar@sics.se> 1032 1033 * admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key. 1034 increase possible verbosity. 1035 1036 * lib/krb5/config_file.c (parse_list): handle blank lines at 1037 another place 1038 1039 * kdc/connect.c (add_port_string): don't return a value 1040 1041 * lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred 1042 cache if the principals are different. close and NULL the old one 1043 so that we create a new one. 1044 1045 * configure.in: move around cgywin et al 1046 (LIB_kdb): set at the end of krb4-block 1047 (krb4): test for krb_enable_debug and krb_disable_debug 1048 10491999-06-16 Assar Westerlund <assar@sics.se> 1050 1051 * kuser/kdestroy.c (main): try to destroy v4 ticket even if the 1052 destruction of the v5 one fails 1053 1054 * lib/krb5/crypto.c (DES3_postproc): new version that does the 1055 right thing 1056 (*): don't put and recover length in 3DES encoding 1057 other small fixes 1058 10591999-06-15 Assar Westerlund <assar@sics.se> 1060 1061 * lib/krb5/get_default_principal.c: rewrite to use 1062 get_default_username 1063 1064 * lib/krb5/Makefile.am: add n-fold-test 1065 1066 * kdc/connect.c: add fallbacks for all lookups by service name 1067 (handle_tcp): break-up and clean-up 1068 10691999-06-09 Assar Westerlund <assar@sics.se> 1070 1071 * lib/krb5/addr_families.c (ipv6_uninteresting): don't consider 1072 the loopback address as uninteresting 1073 1074 * lib/krb5/get_addrs.c: new magic flag to get loopback address if 1075 there are no other addresses. 1076 (krb5_get_all_client_addrs): use that flag 1077 10781999-06-04 Assar Westerlund <assar@sics.se> 1079 1080 * lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the 1081 length 1082 (checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64 1083 (encrypt_internal_derived): don't include the length and don't 1084 decrease by the checksum size twice 1085 (_get_derived_key): the constant should be 5 bytes 1086 10871999-06-02 Johan Danielsson <joda@pdc.kth.se> 1088 1089 * configure.in: use KRB_CHECK_X 1090 1091 * configure.in: check for netinet/ip.h 1092 10931999-05-31 Assar Westerlund <assar@sics.se> 1094 1095 * kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize 1096 on RTLD_NOW 1097 10981999-05-23 Assar Westerlund <assar@sics.se> 1099 1100 * appl/test/uu_server.c: removed unused stuff 1101 1102 * appl/test/uu_client.c: removed unused stuff 1103 11041999-05-21 Assar Westerlund <assar@sics.se> 1105 1106 * kuser/kgetcred.c (main): correct error message 1107 1108 * lib/krb5/crypto.c (verify_checksum): call (*ct->checksum) 1109 directly, avoiding redundant lookups and memory leaks 1110 1111 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free 1112 local and remote addresses 1113 1114 * lib/krb5/get_default_principal.c (get_logname): also try 1115 $USERNAME 1116 1117 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) 1118 1119 * lib/krb5/principal.c (USE_RESOLVER): try to define only if we 1120 have a libresolv (currently by checking for res_search) 1121 11221999-05-18 Johan Danielsson <joda@pdc.kth.se> 1123 1124 * kdc/connect.c (handle_tcp): remove %-escapes in request 1125 11261999-05-14 Assar Westerlund <assar@sics.se> 1127 1128 * Release 0.1g 1129 1130 * admin/ktutil.c (kt_remove): -t should be -e 1131 1132 * configure.in (CHECK_NETINET_IP_AND_TCP): use 1133 1134 * kdc/hpropd.c: support for dumping to krb4. From Miroslav Ruda 1135 <ruda@ics.muni.cz> 1136 1137 * admin/ktutil.c (kt_add): new option `--no-salt'. From Miroslav 1138 Ruda <ruda@ics.muni.cz> 1139 1140 * configure.in: add cygwin and DOS tests replace sendmsg, recvmsg, 1141 and innetgr with roken versions 1142 1143 * kuser/kgetcred.c: new program 1144 1145Tue May 11 14:09:33 1999 Johan Danielsson <joda@pdc.kth.se> 1146 1147 * lib/krb5/mcache.c: fix paste-o 1148 11491999-05-10 Johan Danielsson <joda@pdc.kth.se> 1150 1151 * configure.in: don't use uname 1152 11531999-05-10 Assar Westerlund <assar@sics.se> 1154 1155 * acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four 1156 arguments :-) 1157 1158 * appl/test/uu_server.c (setsockopt): cast to get rid of a warning 1159 1160 * appl/test/tcp_server.c (setsockopt): cast to get rid of a 1161 warning 1162 1163 * appl/test/tcp_client.c (proto): call krb5_sendauth with ccache 1164 == NULL 1165 1166 * appl/test/gssapi_server.c (setsockopt): cast to get rid of a 1167 warning 1168 1169 * lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by 1170 setting the default ccache. 1171 1172 * configure.in (getsockopt, setsockopt): test for 1173 (AM_INIT_AUTOMAKE): bump version to 0.1g 1174 1175 * appl/Makefile.am (SUBDIRS): add kx 1176 1177 * lib/hdb/convert_db.c (main): handle the case of no master key 1178 11791999-05-09 Assar Westerlund <assar@sics.se> 1180 1181 * Release 0.1f 1182 1183 * kuser/kinit.c: add --noaddresses 1184 1185 * lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an 1186 empty sit of list as to not ask for any addresses. 1187 11881999-05-08 Assar Westerlund <assar@sics.se> 1189 1190 * acconfig.h (_GNU_SOURCE): define this to enable (used) 1191 extensions on glibc-based systems such as linux 1192 11931999-05-03 Assar Westerlund <assar@sics.se> 1194 1195 * lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free 1196 `*out_creds' properly 1197 1198 * lib/krb5/creds.c (krb5_compare_creds): just verify that the 1199 keytypes/enctypes are compatible, not that they are the same 1200 1201 * kuser/kdestroy.c (cache): const-correctness 1202 12031999-05-03 Johan Danielsson <joda@pdc.kth.se> 1204 1205 * lib/hdb/hdb.c (hdb_set_master_key): initialise master key 1206 version 1207 1208 * lib/hdb/convert_db.c: add support for upgrading database 1209 versions 1210 1211 * kdc/misc.c: add flags to fetch 1212 1213 * kdc/kstash.c: unlink keyfile on failure, chmod to 400 1214 1215 * kdc/hpropd.c: add --print option 1216 1217 * kdc/hprop.c: pass flags to hdb_foreach 1218 1219 * lib/hdb/convert_db.c: add some flags 1220 1221 * lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2; 1222 build prototype headers 1223 1224 * lib/hdb/hdb_locl.h: update prototypes 1225 1226 * lib/hdb/print.c: move printable version of entry from kadmin 1227 1228 * lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is 1229 sealed or not; add flags to hdb_foreach 1230 1231 * lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and 1232 NDBM_nextkey 1233 1234 * lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey 1235 1236 * lib/hdb/common.c: add flags to _hdb_{fetch,store} 1237 1238 * lib/hdb/hdb.h: add master_key_version to struct hdb, update 1239 prototypes 1240 1241 * lib/hdb/hdb.asn1: make mkvno optional, update version to 2 1242 1243 * configure.in: --enable-netinfo 1244 1245 * lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO 1246 1247 * config.sub: fix for crays 1248 1249 * config.guess: new version from automake 1.4 1250 1251 * config.sub: new version from automake 1.4 1252 1253Wed Apr 28 00:21:17 1999 Assar Westerlund <assar@sics.se> 1254 1255 * Release 0.1e 1256 1257 * lib/krb5/mcache.c (mcc_get_next): get the current cursor 1258 correctly 1259 1260 * acconfig.h: correct definition of KRB_PUT_INT for old krb4 code. 1261 From Ake Sandgren <ake@cs.umu.se> 1262 12631999-04-27 Johan Danielsson <joda@pdc.kth.se> 1264 1265 * kdc/kerberos5.c: fix arguments to decrypt_ticket 1266 12671999-04-25 Assar Westerlund <assar@sics.se> 1268 1269 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old 1270 DCE secd's that are not able to handle MD5 checksums by defaulting 1271 to MD4 if the keytype was DES-CBC-CRC 1272 1273 * lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype 1274 1275 * lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and 1276 `cksumtype' 1277 1278 * lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for 1279 secd 1280 (init_tgs_req): add all supported enctypes for the keytype in 1281 `in_creds->session.keytype' if it's set 1282 1283 * lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol 1284 encryption types 1285 (do_checksum): new function 1286 (verify_checksum): take the checksum to use from the checksum message 1287 and not from the crypto struct 1288 (etypes): add F_PSEUDO flags 1289 (krb5_keytype_to_enctypes): new function 1290 1291 * lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype 1292 and cksumtype 1293 (krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement 1294 (krb5_auth_setkeytype, krb5_auth_getkeytype): implement 1295 (krb5_auth_setenctype): comment out, it's rather bogus anyway 1296 1297Sun Apr 25 16:55:50 1999 Johan Danielsson <joda@pdc.kth.se> 1298 1299 * lib/krb5/krb5_locl.h: fix for stupid aix warnings 1300 1301 * lib/krb5/fcache.c (erase_file): don't malloc 1302 1303Sat Apr 24 18:35:21 1999 Johan Danielsson <joda@pdc.kth.se> 1304 1305 * kdc/config.c: pass context to krb5_config_file_free 1306 1307 * kuser/kinit.c: add `--fcache-version' to set cache version to 1308 create 1309 1310 * kuser/klist.c: print cache version if verbose 1311 1312 * lib/krb5/transited.c (krb5_domain_x500_decode): don't abort 1313 1314 * lib/krb5/principal.c: abort -> krb5_abortx 1315 1316 * lib/krb5/mk_rep.c: abort -> krb5_abortx 1317 1318 * lib/krb5/config_file.c: abort -> krb5_abortx 1319 1320 * lib/krb5/context.c (init_context_from_config_file): init 1321 fcache_version; add krb5_{get,set}_fcache_version 1322 1323 * lib/krb5/keytab.c: add support for reading (and writing?) old 1324 version keytabs 1325 1326 * lib/krb5/cache.c: add krb5_cc_get_version 1327 1328 * lib/krb5/fcache.c: add support for reading and writing old 1329 version cache files 1330 1331 * lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags 1332 1333 * lib/krb5/store_emem.c (krb5_storage_emem): zero flags 1334 1335 * lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags 1336 1337 * lib/krb5/store.c: add flags to change how various fields are 1338 stored, used for old cache version support 1339 1340 * lib/krb5/krb5.h: add support for reading and writing old version 1341 cache files, and keytabs 1342 1343Wed Apr 21 00:09:26 1999 Assar Westerlund <assar@sics.se> 1344 1345 * configure.in: fix test for readline.h remember to link with 1346 $LIB_tgetent when trying linking with readline 1347 1348 * lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time 1349 is given, request a postdated ticket. 1350 1351 * lib/krb5/data.c (krb5_data_free): free data as long as it's not 1352 NULL 1353 1354Tue Apr 20 20:18:14 1999 Assar Westerlund <assar@sics.se> 1355 1356 * kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen 1357 1358 * lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add 1359 1360 * lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and 1361 KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is 1362 invalid 1363 1364Tue Apr 20 12:42:08 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1365 1366 * kpasswd/kpasswdd.c: don't try to load library by default; get 1367 library and function name from krb5.conf 1368 1369 * kpasswd/sample_passwd_check.c: sample password checking 1370 functions 1371 1372Mon Apr 19 22:22:19 1999 Assar Westerlund <assar@sics.se> 1373 1374 * lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use 1375 krb5_data_alloc and be careful with checking allocation and sizes. 1376 1377 * kuser/klist.c (--tokens): conditionalize on KRB4 1378 1379 * kuser/kinit.c (renew_validate): set all flags 1380 (main): fix cut-n-paste error when setting start-time 1381 1382 * kdc/kerberos5.c (check_tgs_flags): starttime of a validate 1383 ticket should be > than current time 1384 (*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket 1385 1386 * kuser/kinit.c (renew_validate): use the client realm instead of 1387 the local realm when renewing tickets. 1388 1389 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function 1390 (krb5_get_forwarded_creds): correct freeing of out_creds 1391 1392 * kuser/kinit.c (renew_validate): hopefully fix up freeing of 1393 memory 1394 1395 * configure.in: do all the krb4 tests with "$krb4" != "no" 1396 1397 * lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero 1398 keyvalue if it's NULL. noticed by Ake Sandgren <ake@cs.umu.se> 1399 1400 * lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes 1401 instead of just taking the first one. fix all callers. From 1402 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 1403 1404 * kdc/kdc_locl.h (enable_kaserver): declaration 1405 1406 * kdc/hprop.c (ka_convert): print the failing principal. AFS 3.4a 1407 creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around. From 1408 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 1409 1410 * kdc/hpropd.c (open_socket): stupid cast to get rid of a warning 1411 1412 * kdc/connect.c (add_standard_ports, process_request): look at 1413 enable_kaserver. From "Brandon S. Allbery KF8NH" 1414 <allbery@kf8nh.apk.net> 1415 1416 * kdc/config.c: new flag --kaserver and config file option 1417 enable-kaserver. From "Brandon S. Allbery KF8NH" 1418 <allbery@kf8nh.apk.net> 1419 1420Mon Apr 19 12:32:04 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1421 1422 * configure.in: check for dlopen, and dlfcn.h 1423 1424 * kpasswd/kpasswdd.c: add support for dlopen:ing password quality 1425 check library 1426 1427 * configure.in: add appl/su 1428 1429Sun Apr 18 15:46:53 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 1430 1431 * lib/krb5/cache.c: add krb5_cc_get_type that returns type of a 1432 cache 1433 1434Fri Apr 16 17:58:51 1999 Assar Westerlund <assar@sics.se> 1435 1436 * configure.in: LIB_kdb: -L should be before -lkdb 1437 test for prototype of strsep 1438 1439Thu Apr 15 11:34:38 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1440 1441 * lib/krb5/Makefile.am: update version 1442 1443 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use 1444 ALLOC_SEQ 1445 1446 * lib/krb5/fcache.c: add some support for reading and writing old 1447 cache formats; 1448 (fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use 1449 krb5_ret_creds 1450 1451 * lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc, 1452 initialize host_byteorder 1453 1454 * lib/krb5/store_fd.c (krb5_storage_from_fd): initialize 1455 host_byteorder 1456 1457 * lib/krb5/store_emem.c (krb5_storage_emem): initialize 1458 host_byteorder 1459 1460 * lib/krb5/store.c (krb5_storage_set_host_byteorder): add; 1461 (krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16): 1462 check host_byteorder flag; (krb5_store_creds): add; 1463 (krb5_ret_creds): add 1464 1465 * lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for 1466 storage of numbers 1467 1468 * lib/krb5/heim_err.et: add `host not found' error 1469 1470 * kdc/connect.c: don't use data after clearing decriptor 1471 1472 * lib/krb5/auth_context.c: abort -> krb5_abortx 1473 1474 * lib/krb5/warn.c: add __attribute__; add *abort functions 1475 1476 * configure.in: check for __attribute__ 1477 1478 * kdc/connect.c: log bogus requests 1479 1480Tue Apr 13 18:38:05 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1481 1482 * lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts 1483 for all DES keys 1484 14851999-04-12 Assar Westerlund <assar@sics.se> 1486 1487 * lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit 1488 1489 * lib/krb5/get_cred.c (init_tgs_req): some more error checking 1490 1491 * lib/krb5/generate_subkey.c (krb5_generate_subkey): check return 1492 value from malloc 1493 1494Sun Apr 11 03:47:23 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1495 1496 * lib/krb5/krb5.conf.5: update to reality 1497 1498 * lib/krb5/krb5_425_conv_principal.3: update to reality 1499 15001999-04-11 Assar Westerlund <assar@sics.se> 1501 1502 * lib/krb5/get_host_realm.c: handle more than one realm for a host 1503 1504 * kpasswd/kpasswd.c (main): use krb5_program_setup and 1505 print_version 1506 1507 * kdc/string2key.c (main): use krb5_program_setup and 1508 print_version 1509 1510Sun Apr 11 02:35:58 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1511 1512 * lib/krb5/principal.c (krb5_524_conv_principal): make it actually 1513 work, and check built-in list of host-type first-components 1514 1515 * lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm 1516 1517 * lib/krb5/context.c: add srv_* flags to context 1518 1519 * lib/krb5/principal.c: add default v4_name_convert entries 1520 1521 * lib/krb5/krb5.h: add srv_* flags to context 1522 1523Sat Apr 10 22:52:28 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1524 1525 * kadmin/kadmin.c: complain about un-recognised commands 1526 1527 * admin/ktutil.c: complain about un-recognised commands 1528 1529Sat Apr 10 15:41:49 1999 Assar Westerlund <assar@sics.se> 1530 1531 * kadmin/load.c (doit): fix error message 1532 1533 * lib/krb5/crypto.c (encrypt_internal): free checksum if lengths 1534 fail to match. 1535 (krb5_get_wrapped_length): new function 1536 1537 * configure.in: security/pam_modules.h: check for 1538 1539 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge 1540 around `ret_as_reply' semantics by only freeing it when ret == 0 1541 1542Fri Apr 9 20:24:04 1999 Assar Westerlund <assar@sics.se> 1543 1544 * kuser/klist.c (print_cred_verbose): handle the case of a bad 1545 enctype 1546 1547 * configure.in: test for more header files 1548 (LIB_roken): set 1549 1550Thu Apr 8 15:01:59 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1551 1552 * configure.in: fixes for building w/o krb4 1553 1554 * ltmain.sh: update to libtool 1.2d 1555 1556 * ltconfig: update to libtool 1.2d 1557 1558Wed Apr 7 23:37:26 1999 Assar Westerlund <assar@sics.se> 1559 1560 * kdc/hpropd.c: fix some error messages to be more understandable. 1561 1562 * kdc/hprop.c (ka_dump): remove unused variables 1563 1564 * appl/test/tcp_server.c: remove unused variables 1565 1566 * appl/test/gssapi_server.c: remove unused variables 1567 1568 * appl/test/gssapi_client.c: remove unused variables 1569 1570Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1571 1572 * lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code 1573 1574 * kuser/klist.c: make it compile w/o krb4 1575 1576 * kuser/kdestroy.c: make it compile w/o krb4 1577 1578 * admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help 1579 strings 1580 1581Mon Apr 5 16:13:46 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1582 1583 * configure.in: test for MIPS ABI; new test_package 1584 1585Thu Apr 1 11:00:40 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1586 1587 * include/Makefile.am: clean krb5-private.h 1588 1589 * Release 0.1d 1590 1591 * kpasswd/kpasswdd.c (doit): pass context to 1592 krb5_get_all_client_addrs 1593 1594 * kdc/connect.c (init_sockets): pass context to 1595 krb5_get_all_server_addrs 1596 1597 * lib/krb5/get_in_tkt.c (init_as_req): pass context to 1598 krb5_get_all_client_addrs 1599 1600 * lib/krb5/get_cred.c (get_cred_kdc_la): pass context to 1601 krb5_get_all_client_addrs 1602 1603 * lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses 1604 1605 * lib/krb5/krb5.h: add support for adding an extra set of 1606 addresses 1607 1608 * lib/krb5/context.c: add support for adding an extra set of 1609 addresses 1610 1611 * lib/krb5/addr_families.c: add krb5_parse_address 1612 1613 * lib/krb5/address.c: krb5_append_addresses 1614 1615 * lib/krb5/config_file.c (parse_binding): don't zap everything 1616 after first whitespace 1617 1618 * kuser/kinit.c (renew_validate): don't allocate out 1619 1620 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't 1621 allocate out_creds 1622 1623 * lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make 1624 out_creds pointer; 1625 (krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags): 1626 free more memory 1627 1628 * lib/krb5/crypto.c (encrypt_internal): free checksum 1629 1630 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply, 1631 and ticket 1632 1633 * kuser/Makefile.am: remove kfoo 1634 1635 * lib/Makefile.am: add auth 1636 1637 * lib/kadm5/iprop.h: getarg.h 1638 1639 * lib/kadm5/replay_log.c: use getarg 1640 1641 * lib/kadm5/ipropd_slave.c: use getarg 1642 1643 * lib/kadm5/ipropd_master.c: use getarg 1644 1645 * lib/kadm5/dump_log.c: use getarg 1646 1647 * kpasswd/kpasswdd.c: use getarg 1648 1649 * Makefile.am.common: make a more working check-local target 1650 1651 * lib/asn1/main.c: use getargs 1652 1653Mon Mar 29 20:19:57 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1654 1655 * kuser/klist.c (print_cred_verbose): use krb5_print_address 1656 1657 * lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int 1658 1659 * lib/krb5/addr_families.c (krb5_print_address): handle unknown 1660 address types; (ipv6_print_addr): print in 16-bit groups (as it 1661 should) 1662 1663 * lib/krb5/crc.c: crc_{init_table,update} -> 1664 _krb5_crc_{init_table,update} 1665 1666 * lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int 1667 crc_{init_table,update} -> _krb5_crc_{init_table,update} 1668 1669 * lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int 1670 1671 * lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int 1672 1673 * lib/krb5/krb5_locl.h: include krb5-private.h 1674 1675 * kdc/connect.c (addr_to_string): use krb5_print_address 1676 1677 * lib/krb5/addr_families.c (krb5_print_address): int -> size_t 1678 1679 * lib/krb5/addr_families.c: add support for printing ipv6 1680 addresses, either with inet_ntop, or ugly for-loop 1681 1682 * kdc/524.c: check that the ticket came from a valid address; use 1683 the address of the connection as the address to put in the v4 1684 ticket (if this address is AF_INET) 1685 1686 * kdc/connect.c: pass addr to do_524 1687 1688 * kdc/kdc_locl.h: prototype for do_524 1689 1690Sat Mar 27 17:48:31 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1691 1692 * configure.in: check for OSF C2; bind/bitypes.h, getudbnam, 1693 setlim; check for auth modules; siad.h, getpwnam_r; 1694 lib/auth/Makefile, lib/auth/sia/Makefile 1695 1696 * lib/krb5/crypto.c: n_fold -> _krb5_n_fold 1697 1698 * lib/krb5/n-fold.c: n_fold -> _krb5_n_fold 1699 1700Thu Mar 25 04:35:21 1999 Assar Westerlund <assar@sics.se> 1701 1702 * lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping 1703 it 1704 1705 * lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data' 1706 1707 * lib/hdb/ndbm.c (NDBM_destroy): clear master key 1708 1709 * lib/hdb/db.c (DB_destroy): clear master key 1710 (DB_open): check malloc 1711 1712 * kdc/connect.c (init_sockets): free addresses 1713 1714 * kadmin/kadmin.c (main): make code more consistent. always free 1715 configuration information. 1716 1717 * kadmin/init.c (create_random_entry): free the entry 1718 1719Wed Mar 24 04:02:03 1999 Assar Westerlund <assar@sics.se> 1720 1721 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): 1722 re-organize the code to always free `kdc_reply' 1723 1724 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): be more careful about 1725 freeing memory 1726 1727 * lib/krb5/fcache.c (fcc_destroy): don't call fcc_close 1728 1729 * lib/krb5/crypto.c (krb5_crypto_destroy): free `crypto' 1730 1731 * lib/hdb/hdb_locl.h: try db_185.h first in case db.h is a DB 2.0 1732 header 1733 1734 * configure.in (db_185.h): check for 1735 1736 * admin/srvcreate.c: new file. contributed by Daniel Kouril 1737 <kouril@informatics.muni.cz> 1738 1739 * admin/ktutil.c: srvcreate: new command 1740 1741 * kuser/klist.c: add support for printing AFS tokens 1742 1743 * kuser/kdestroy.c: add support for destroying v4 tickets and AFS 1744 tokens. based on code by Love <lha@stacken.kth.se> 1745 1746 * kuser/Makefile.am (kdestroy_LDADD, klist_LDADD): more libraries 1747 1748 * configure.in: sys/ioccom.h: test for 1749 1750 * kuser/klist.c (main): don't print `no ticket file' with --test. 1751 From: Love <lha@e.kth.se> 1752 1753 * kpasswd/kpasswdd.c (doit): more braces to make gcc happy 1754 1755 * kdc/connect.c (init_socket): get rid of a stupid warning 1756 1757 * include/bits.c (my_strupr): cast away some stupid warnings 1758 1759Tue Mar 23 14:34:44 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1760 1761 * lib/krb5/get_host_realm.c (krb5_get_host_realm): no infinite 1762 loops, please 1763 1764Tue Mar 23 00:00:45 1999 Assar Westerlund <assar@sics.se> 1765 1766 * lib/kadm5/Makefile.am (install_build_headers): recover from make 1767 rewriting the names of the headers kludge to help solaris make 1768 1769 * lib/krb5/Makefile.am: kludge to help solaris make 1770 1771 * lib/hdb/Makefile.am: kludge to help solaris make 1772 1773 * configure.in (LIB_kdb): make sure there's a -L option in here by 1774 adding $(LIB_krb4) 1775 1776 * lib/asn1/gen_glue.c (generate_2int, generate_int2): int -> 1777 unsigned 1778 1779 * configure.in (SunOS): set to a number KRB4, KRB5 conditionals: 1780 remove the `dnl' to work around an automake flaw 1781 1782Sun Mar 21 15:08:49 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 1783 1784 * lib/krb5/get_default_realm.c: char* -> krb5_realm 1785 1786Sun Mar 21 14:08:30 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1787 1788 * include/bits.c: <bind/bitypes.h> 1789 1790 * lib/krb5/Makefile.am: create krb5-private.h 1791 1792Sat Mar 20 00:08:59 1999 Assar Westerlund <assar@sics.se> 1793 1794 * configure.in (gethostname): remove duplicate 1795 1796Fri Mar 19 14:48:03 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1797 1798 * lib/hdb/Makefile.am: add version-info 1799 1800 * lib/gssapi/Makefile.am: add version-info 1801 1802 * lib/asn1/Makefile.am: use $(x:y=z) make syntax; move check-der 1803 to check_PROGRAMS 1804 1805 * lib/Makefile.am: add 45 1806 1807 * lib/kadm5/Makefile.am: split in client and server libraries 1808 (breaks shared libraries otherwise) 1809 1810Thu Mar 18 11:33:30 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1811 1812 * include/kadm5/Makefile.am: clean a lot of header files (since 1813 automake lacks a clean-hook) 1814 1815 * include/Makefile.am: clean a lot of header files (since automake 1816 lacks a clean-hook) 1817 1818 * lib/kadm5/Makefile.am: fix build-installation of headers 1819 1820 * lib/krb5/Makefile.am: remove include_dir hack 1821 1822 * lib/hdb/Makefile.am: remove include_dir hack 1823 1824 * lib/asn1/Makefile.am: remove include_dir hack 1825 1826 * include/Makefile.am: remove include_dir hack 1827 1828 * doc/whatis.texi: define sub for html 1829 1830 * configure.in: LIB_kdb, have_err_h, have_fnmatch_h, have_glob_h 1831 1832 * lib/asn1/Makefile.am: der.h 1833 1834 * kpasswd/kpasswdd.c: admin.h -> kadm5/admin.h 1835 1836 * kdc/Makefile.am: remove junk 1837 1838 * kadmin/Makefile.am: sl.a -> sl.la 1839 1840 * appl/afsutil/Makefile.am: remove EXTRA_bin_PROGRAMS 1841 1842 * admin/Makefile.am: sl.a -> sl.la 1843 1844 * configure.in: condition KRB5; AC_CHECK_XAU 1845 1846 * Makefile.am: include Makefile.am.common 1847 1848 * include/kadm5/Makefile.am: include Makefile.am.common; don't 1849 install headers from here 1850 1851 * include/Makefile.am: include Makefile.am.common; don't install 1852 headers from here 1853 1854 * doc/Makefile.am: include Makefile.am.common 1855 1856 * lib/krb5/Makefile.am: include Makefile.am.common 1857 1858 * lib/kadm5/Makefile.am: include Makefile.am.common 1859 1860 * lib/hdb/Makefile.am: include Makefile.am.common 1861 1862 * lib/gssapi/Makefile.am: include Makefile.am.common 1863 1864 * lib/asn1/Makefile.am: include Makefile.am.common 1865 1866 * lib/Makefile.am: include Makefile.am.common 1867 1868 * lib/45/Makefile.am: include Makefile.am.common 1869 1870 * kuser/Makefile.am: include Makefile.am.common 1871 1872 * kpasswd/Makefile.am: include Makefile.am.common 1873 1874 * kdc/Makefile.am: include Makefile.am.common 1875 1876 * kadmin/Makefile.am: include Makefile.am.common 1877 1878 * appl/test/Makefile.am: include Makefile.am.common 1879 1880 * appl/afsutil/Makefile.am: include Makefile.am.common 1881 1882 * appl/Makefile.am: include Makefile.am.common 1883 1884 * admin/Makefile.am: include Makefile.am.common 1885 1886Wed Mar 17 03:04:38 1999 Assar Westerlund <assar@sics.se> 1887 1888 * lib/krb5/store.c (krb5_store_stringz): braces fix 1889 1890 * lib/kadm5/get_s.c (kadm5_s_get_principal): braces fix 1891 1892 * lib/kadm5/ent_setup.c (_kadm5_setup_entry): braces fix 1893 1894 * kdc/connect.c (loop): braces fix 1895 1896 * lib/krb5/config_file.c: cast to unsigned char to make is* happy 1897 1898 * lib/krb5/log.c (krb5_addlog_dest): more braces to make gcc happy 1899 1900 * lib/krb5/crypto.c (krb5_verify_checksum): rename C -> cksum to 1901 be consistent 1902 1903 * kadmin/util.c (timeval2str): more braces to make gcc happy 1904 1905 * kadmin/load.c: cast in is* to get rid of stupid warning 1906 1907 * kadmin/dump.c (append_hex): cast in isalnum to get rid of stupid 1908 warning 1909 1910 * kdc/kaserver.c: malloc checks and fixes 1911 1912 * lib/krb5/get_host_realm.c (krb5_get_host_realm): include leading 1913 dot (if any) when looking up realms. 1914 1915Fri Mar 12 13:57:56 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 1916 1917 * lib/krb5/get_host_realm.c: add dns support 1918 1919 * lib/krb5/set_default_realm.c: use krb5_free_host_realm 1920 1921 * lib/krb5/free_host_realm.c: check for NULL realmlist 1922 1923 * lib/krb5/context.c: don't print warning if there is no krb5.conf 1924 1925Wed Mar 10 19:29:46 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1926 1927 * configure.in: use AC_WFLAGS 1928 1929Mon Mar 8 11:49:43 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1930 1931 * Release 0.1c 1932 1933 * kuser/klist.c: use print_version 1934 1935 * kuser/kdestroy.c: use print_version 1936 1937 * kdc/hpropd.c: use print_version 1938 1939 * kdc/hprop.c: use print_version 1940 1941 * kdc/config.c: use print_version 1942 1943 * kadmin/kadmind.c: use print_version 1944 1945 * kadmin/kadmin.c: use print_version 1946 1947 * appl/test/common.c: use print_version 1948 1949 * appl/afsutil/afslog.c: use print_version 1950 1951Mon Mar 1 10:49:14 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1952 1953 * lib/krb5/get_addrs.c: SOCKADDR_HAS_SA_LEN -> 1954 HAVE_STRUCT_SOCKADDR_SA_LEN 1955 1956 * configure.in, acconfig.h, cf/*: update to automake 1.4/autoconf 2.13 1957 1958Sun Feb 28 18:19:20 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1959 1960 * lib/asn1/gen.c: make `BIT STRING's unsigned 1961 1962 * lib/asn1/{symbol.h,gen.c}: add TUInteger type 1963 1964 * lib/krb5/verify_user.c (krb5_verify_user): pass prompter to 1965 krb5_get_init_creds_password 1966 1967 * lib/krb5/fcache.c (fcc_gen_new): implement 1968 1969Sat Feb 27 22:41:23 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1970 1971 * doc/install.texi: krb4 is now automatically detected 1972 1973 * doc/misc.texi: update procedure to set supported encryption 1974 types 1975 1976 * doc/setup.texi: change some silly wordings 1977 1978Sat Feb 27 22:17:30 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 1979 1980 * lib/krb5/keytab.c (fkt_remove_entry): make this work 1981 1982 * admin/ktutil.c: add minimally working `get' command 1983 1984Sat Feb 27 19:44:49 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1985 1986 * lib/hdb/convert_db.c: more typos 1987 1988 * include/Makefile.am: remove EXTRA_DATA (as of autoconf 1989 2.13/automake 1.4) 1990 1991 * appl/Makefile.am: OTP_dir 1992 1993Fri Feb 26 17:37:00 1999 Johan Danielsson <joda@hella.pdc.kth.se> 1994 1995 * doc/setup.texi: add kadmin section 1996 1997 * lib/asn1/check-der.c: fix printf warnings 1998 1999Thu Feb 25 11:16:49 1999 Johan Danielsson <joda@hella.pdc.kth.se> 2000 2001 * configure.in: -O does not belong in WFLAGS 2002 2003Thu Feb 25 11:05:57 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 2004 2005 * lib/asn1/der_put.c: fix der_put_int 2006 2007Tue Feb 23 20:35:12 1999 Johan Danielsson <joda@hella.pdc.kth.se> 2008 2009 * configure.in: use AC_BROKEN_GLOB 2010 2011Mon Feb 22 15:12:44 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 2012 2013 * configure.in: check for glob 2014 2015Mon Feb 22 11:32:42 1999 Johan Danielsson <joda@hella.pdc.kth.se> 2016 2017 * Release 0.1b 2018 2019Sat Feb 20 15:48:06 1999 Johan Danielsson <joda@blubb.pdc.kth.se> 2020 2021 * lib/hdb/convert_db.c: convert DES3 keys to des3-cbc-sha1, and 2022 des3-cbc-md5 2023 2024 * lib/krb5/crypto.c (DES3_string_to_key): make this actually do 2025 what the draft said it should 2026 2027 * lib/hdb/convert_db.c: little program for database conversion 2028 2029 * lib/hdb/db.c (DB_open): try to open database w/o .db extension 2030 2031 * lib/hdb/ndbm.c (NDBM_open): add test for database format 2032 2033 * lib/hdb/db.c (DB_open): add test for database format 2034 2035 * lib/asn1/gen_glue.c (generate_2int): don't depend on flags being 2036 unsigned 2037 2038 * lib/hdb/hdb.c: change `hdb_set_master_key' to take an 2039 EncryptionKey, and add a new function `hdb_set_master_keyfile' to 2040 do what `hdb_set_master_key' used to do 2041 2042 * kdc/kstash.c: add `--convert-file' option to change keytype of 2043 existing master key file 2044 2045Fri Feb 19 07:04:14 1999 Assar Westerlund <assar@squid.pdc.kth.se> 2046 2047 * Release 0.1a 2048 2049Sat Feb 13 17:12:53 1999 Assar Westerlund <assar@sics.se> 2050 2051 * lib/krb5/mk_safe.c (krb5_mk_safe): sizeof(buf) -> buf_size, buf 2052 is now a `u_char *' 2053 2054 * lib/krb5/get_in_tkt.c (krb5_init_etype): etypes are now `int' 2055 2056 * lib/krb5/get_host_realm.c (krb5_get_host_realm): constize 2057 orig_host 2058 2059 (krb5_salttype_to_string): new function (RSA_MD5_DES_verify, 2060 RSA_MD5_DES3_verify): initialize ret 2061 2062 * lib/gssapi/init_sec_context.c (init_auth): remove unnecessary 2063 gssapi_krb5_init. ask for KEYTYPE_DES credentials 2064 2065 * kadmin/get.c (print_entry_long): print the keytypes and salts 2066 available for the principal 2067 2068 * configure.in (WFLAGS): add `-O' to catch unitialized variables 2069 and such 2070 (gethostname, mkstemp, getusershell, inet_aton): more tests 2071 2072 * lib/hdb/hdb.h: update prototypes 2073 2074 * configure.in: homogenize broken detection with krb4 2075 2076 * lib/kadm5/init_c.c (kadm5_c_init_with_context): remove unused 2077 `error' 2078 2079 * lib/asn1/Makefile.am (check-der): add 2080 2081 * lib/asn1/gen.c (define_type): map ASN1 Integer to `int' instead 2082 of `unsigned' 2083 2084 * lib/asn1/der_length.c (length_unsigned): new function 2085 (length_int): handle signed integers 2086 2087 * lib/asn1/der_put.c (der_put_unsigned): new function 2088 (der_put_int): handle signed integers 2089 2090 * lib/asn1/der_get.c (der_get_unsigned): new function 2091 (der_get_int): handle signed integers 2092 2093 * lib/asn1/der.h: all integer functions take `int' instead of 2094 `unsigned' 2095 2096 * lib/asn1/lex.l (filename): unused. remove. 2097 2098 * lib/asn1/check-der.c: new test program for der encoding and 2099 decoding. 2100 2101Mon Feb 1 04:09:06 1999 Assar Westerlund <assar@sics.se> 2102 2103 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): only call 2104 gethostbyname2 with AF_INET6 if we actually have IPv6. From 2105 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> 2106 2107 * lib/krb5/changepw.c (get_kdc_address): dito 2108 2109Sun Jan 31 06:26:36 1999 Assar Westerlund <assar@sics.se> 2110 2111 * kdc/connect.c (parse_prots): always bind to AF_INET, there are 2112 v6-implementations without support for `mapped V4 addresses'. 2113 From Jun-ichiro itojun Hagino <itojun@kame.net> 2114 2115Sat Jan 30 22:38:27 1999 Assar Westerlund <assar@juguete.sics.se> 2116 2117 * Release 0.0u 2118 2119Sat Jan 30 13:43:02 1999 Assar Westerlund <assar@sics.se> 2120 2121 * lib/krb5/Makefile.am: explicit rules for *.et files 2122 2123 * lib/kadm5/init_c.c (get_kadm_ticket): only remove creds if 2124 krb5_get_credentials was succesful. 2125 (get_new_cache): return better error codes and return earlier. 2126 (get_cred_cache): only delete default_client if it's different 2127 from client 2128 (kadm5_c_init_with_context): return a more descriptive error. 2129 2130 * kdc/kerberos5.c (check_flags): handle NULL client or server 2131 2132 * lib/krb5/sendauth.c (krb5_sendauth): return the error in 2133 `ret_error' iff != NULL 2134 2135 * lib/krb5/rd_error.c (krb5_free_error, krb5_free_error_contents): 2136 new functions 2137 2138 * lib/krb5/mk_req_ext.c (krb5_mk_req_extended): more 2139 type-correctness 2140 2141 * lib/krb5/krb5.h (krb5_error): typedef to KRB_ERROR 2142 2143 * lib/krb5/init_creds_pw.c: KRB5_TGS_NAME: use 2144 2145 * lib/krb5/get_cred.c: KRB5_TGS_NAME: use 2146 2147 * lib/kafs/afskrb5.c (afslog_uid_int): update to changes 2148 2149 * lib/kadm5/rename_s.c (kadm5_s_rename_principal): call remove 2150 instead of rename, but shouldn't this just call rename? 2151 2152 * lib/kadm5/get_s.c (kadm5_s_get_principal): always return an 2153 error if the principal wasn't found. 2154 2155 * lib/hdb/ndbm.c (NDBM_seq): unseal key 2156 2157 * lib/hdb/db.c (DB_seq): unseal key 2158 2159 * lib/asn1/Makefile.am: added explicit rules for asn1_err.[ch] 2160 2161 * kdc/hprop.c (v4_prop): add krbtgt/THISREALM@OTHERREALM when 2162 finding cross-realm tgts in the v4 database 2163 2164 * kadmin/mod.c (mod_entry): check the number of arguments. check 2165 that kadm5_get_principal worked. 2166 2167 * lib/krb5/keytab.c (fkt_remove_entry): remove KRB5_KT_NOTFOUND if 2168 we weren't able to remove it. 2169 2170 * admin/ktutil.c: less drive-by-deleting. From Love 2171 <lha@e.kth.se> 2172 2173 * kdc/connect.c (parse_ports): copy the string before mishandling 2174 it with strtok_r 2175 2176 * kdc/kerberos5.c (tgs_rep2): print the principal with mismatching 2177 kvnos 2178 2179 * kadmin/kadmind.c (main): convert `debug_port' to network byte 2180 order 2181 2182 * kadmin/kadmin.c: allow specification of port number. 2183 2184 * lib/kadm5/kadm5_locl.h (kadm5_client_context): add 2185 `kadmind_port'. 2186 2187 * lib/kadm5/init_c.c (_kadm5_c_init_context): move up 2188 initalize_kadm5_error_table_r. 2189 allow specification of port number. 2190 2191 From Love <lha@stacken.kth.se> 2192 2193 * kuser/klist.c: add option -t | --test 2194 2195