ChangeLog revision 103423
138032Speter2002-09-16 Jacques Vidrine <nectar@kth.se> 264565Sgshapiro 364565Sgshapiro * lib/krb5/kuserok.c, lib/krb5/prompter_posix.c: use strcspn 438032Speter to convert the newline to NUL in fgets results. 538032Speter 638032Speter2002-09-13 Johan Danielsson <joda@pdc.kth.se> 738032Speter 838032Speter * kuser/kinit.1: remove unneeded Ns 938032Speter 1038032Speter * lib/krb5/krb5_appdefault.3: remove extra "application" 1138032Speter 1238032Speter * fix-export: remove autom4ate.cache 1338032Speter 1438032Speter2002-09-10 Johan Danielsson <joda@pdc.kth.se> 1564565Sgshapiro 1664565Sgshapiro * include/make_crypto.c: don't use function macros if possible 1738032Speter 1864565Sgshapiro * lib/krb5/krb5_locl.h: get limits.h for UINT_MAX 1964565Sgshapiro 2064565Sgshapiro * include/Makefile.am: use make_crypto to create crypto-headers.h 2164565Sgshapiro 2264565Sgshapiro * include/make_crypto.c: crypto header generation tool 2364565Sgshapiro 2464565Sgshapiro * configure.in: move crypto test to just after testing for krb4, 2564565Sgshapiro and move roken tests to after both, this speeds up various failure 2664565Sgshapiro cases with krb4 2738032Speter 2838032Speter * lib/krb5/config_file.c: don't use NULL when we mean 0 2964565Sgshapiro 3064565Sgshapiro * configure.in: we don't set package_libdir anymore, so no point 3164565Sgshapiro in testing for it 3264565Sgshapiro 3364565Sgshapiro * tools/Makefile.am: subst INCLUDE_des 3464565Sgshapiro 3564565Sgshapiro * tools/krb5-config.in: add INCLUDE_des to cflags 3638032Speter 3738032Speter * configure.in: use AC_CONFIG_SRCDIR 3838032Speter 3938032Speter * fix-export: remove some unneeded stuff 4038032Speter 4138032Speter * kuser/kinit.c (do_524init): free principals 4238032Speter 4338032Speter2002-09-09 Jacques Vidrine <nectar@kth.se> 4438032Speter 4538032Speter * kdc/kerberos5.c (get_pa_etype_info, fix_transited_encoding), 4638032Speter kdc/kaserver.c (krb5_ret_xdr_data), 4738032Speter lib/krb5/transited.c (krb5_domain_x500_decode): Validate some 4838032Speter counts: Check that they are non-negative, and that they are small 4938032Speter enough to avoid integer overflow when used in memory allocation 5038032Speter calculations. Potential problem areas pointed out by 5138032Speter Sebastian Krahmer <krahmer@suse.de>. 5238032Speter 5338032Speter * lib/krb5/keytab_keyfile.c (akf_add_entry): Use O_EXCL when 5438032Speter creating a new keyfile. 5538032Speter 5638032Speter2002-09-09 Johan Danielsson <joda@pdc.kth.se> 5738032Speter 5838032Speter * configure.in: don't try to build pam module 5938032Speter 6038032Speter2002-09-05 Johan Danielsson <joda@pdc.kth.se> 6138032Speter 6238032Speter * appl/kf/kf.c: fix warning string 6338032Speter 6438032Speter * lib/krb5/log.c (krb5_vlog_msg): delay message formating till we 6538032Speter know we need it 6638032Speter 6764565Sgshapiro2002-09-04 Assar Westerlund <assar@kth.se> 6838032Speter 6938032Speter * kdc/kerberos5.c (encode_reply): correct error logging 7038032Speter 7138032Speter2002-09-04 Johan Danielsson <joda@pdc.kth.se> 7238032Speter 7338032Speter * lib/krb5/sendauth.c: close ccache if we opened it 7438032Speter 7538032Speter * appl/kf/kf.c: handle new protocol 7638032Speter 7738032Speter * appl/kf/kfd.c: use krb5_err instead of sysloging directly, 7838032Speter handle the new protocol, and bail out if an old client tries to 7938032Speter connect 8038032Speter 8138032Speter * appl/kf/kf_locl.h: we need a protocol version string 8238032Speter 8338032Speter * lib/hdb/hdb-ldap.c: use ASN1_MALLOC_ENCODE 8438032Speter 8538032Speter * kdc/kerberos5.c: use ASN1_MALLOC_ENCODE 8638032Speter 8738032Speter * kdc/hprop.c: set AP_OPTS_USE_SUBKEY 8838032Speter 8938032Speter * lib/hdb/common.c: use ASN1_MALLOC_ENCODE 9038032Speter 9138032Speter * lib/asn1/gen.c: add convenience macro that allocates a buffer 9238032Speter and encoded into that 9338032Speter 9438032Speter * lib/krb5/get_cred.c (init_tgs_req): use 9538032Speter in_creds->session.keytype literally instead of trying to convert 9638032Speter to a list of enctypes (it should already be an enctype) 9738032Speter 9838032Speter * lib/krb5/get_cred.c (init_tgs_req): init ret 9938032Speter 10038032Speter2002-09-03 Johan Danielsson <joda@pdc.kth.se> 10138032Speter 10238032Speter * lib/asn1/k5.asn1: remove ETYPE_DES3_CBC_NONE_IVEC 10338032Speter 10438032Speter * lib/krb5/krb5.h: remove ENCTYPE_DES3_CBC_NONE_IVEC 10538032Speter 10638032Speter * lib/krb5/crypto.c: get rid of DES3_CBC_encrypt_ivec, just use 10738032Speter zero ivec in DES3_CBC_encrypt if passed ivec is NULL 10838032Speter 10938032Speter * lib/krb5/Makefile.am: back out 1.144, since it will re-create 11038032Speter krb5-protos.h at build-time, which requires perl, which is bad 11164565Sgshapiro 11264565Sgshapiro * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't 11364565Sgshapiro blindly use the local subkey 11438032Speter 11538032Speter * lib/krb5/crypto.c: add function krb5_crypto_getblocksize that 11664565Sgshapiro extracts the required blocksize from a crypto context 11764565Sgshapiro 11838032Speter * lib/krb5/build_auth.c: just get the length of the encoded 11938032Speter authenticator instead of trying to grow a buffer 12038032Speter 12138032Speter2002-09-03 Assar Westerlund <assar@kth.se> 12238032Speter 12338032Speter * configure.in: add --disable-mmap option, and tests for 12438032Speter sys/mman.h and mmap 12538032Speter 12638032Speter2002-09-03 Jacques Vidrine <nectar@kth.se> 12738032Speter 12838032Speter * lib/krb5/changepw.c: verify lengths in response 12938032Speter 13038032Speter * lib/asn1/der_get.c (decode_integer, decode_unsigned): check for 13138032Speter truncated integers 13238032Speter 13338032Speter2002-09-02 Johan Danielsson <joda@pdc.kth.se> 13438032Speter 13538032Speter * lib/krb5/mk_req_ext.c: generate a local subkey if 13638032Speter AP_OPTS_USE_SUBKEY is set 13738032Speter 13838032Speter * lib/krb5/build_auth.c: we don't have enough information about 13938032Speter whether to generate a local subkey here, so don't try to 14038032Speter 14138032Speter * lib/krb5/auth_context.c: new function 14238032Speter krb5_auth_con_generatelocalsubkey 14338032Speter 14438032Speter * lib/krb5/get_in_tkt.c: only set kdc_sec_offset if looking at an 14538032Speter initial ticket 14638032Speter 14738032Speter * lib/krb5/context.c (init_context_from_config_file): simplify 14838032Speter initialisation of srv_lookup 14938032Speter 15038032Speter * lib/krb5/changepw.c (send_request): set AP_OPTS_USE_SUBKEY 15164565Sgshapiro 15264565Sgshapiro * lib/krb5/krb5.h: add AP_OPTS_USE_SUBKEY 15338032Speter 15438032Speter2002-08-30 Assar Westerlund <assar@kth.se> 15538032Speter 15638032Speter * lib/krb5/name-45-test.c: also test krb5_524_conv_principal 15738032Speter * lib/krb5/Makefile.am (TESTS): add name-45-test 15838032Speter * lib/krb5/name-45-test.c: add testcases for 15938032Speter krb5_425_conv_principal 16038032Speter 16138032Speter2002-08-29 Assar Westerlund <assar@kth.se> 16238032Speter 16338032Speter * lib/krb5/parse-name-test.c: also test unparse_short functions 16438032Speter * lib/asn1/asn1_print.c: use com_err/error_message API 16564565Sgshapiro * lib/krb5/Makefile.am: add parse-name-test 16664565Sgshapiro * lib/krb5/parse-name-test.c: add a program for testing parsing 16764565Sgshapiro and unparsing principal names 16864565Sgshapiro 16964565Sgshapiro2002-08-28 Assar Westerlund <assar@kth.se> 17038032Speter 17164565Sgshapiro * kdc/config.c: add missing ifdef DAEMON 17238032Speter 17364565Sgshapiro2002-08-28 Johan Danielsson <joda@pdc.kth.se> 17464565Sgshapiro 17538032Speter * configure.in: use rk_SUNOS 17638032Speter 17738032Speter * kdc/config.c: add detach options 17838032Speter 17938032Speter * kdc/main.c: maybe detach from console? 18038032Speter 18138032Speter * kdc/kdc.8: markup changes 18238032Speter 18338032Speter * configure.in: AC_TEST_PACKAGE_NEW -> rk_TEST_PACKAGE 18438032Speter 18538032Speter * configure.in: use rk_TELNET, rename some other macros, and don't 18638032Speter add -ldes to krb4 link command 18738032Speter 18838032Speter * kuser/kinit.1: whitespace fix (from NetBSD) 18938032Speter 19038032Speter * include/bits.c: we may need unistd.h for ssize_t 19138032Speter 19238032Speter2002-08-26 Assar Westerlund <assar@kth.se> 19338032Speter 19438032Speter * lib/krb5/principal.c (krb5_425_conv_principal_ext): lookup AAAA 19538032Speter rrs before A ones when using the resolver to verify a mapping, 19638032Speter also use getaddrinfo when resolver is not available 19738032Speter 19838032Speter * lib/hdb/keytab.c (find_db): const-correctness in parameters to 19938032Speter krb5_config_get_next 20064565Sgshapiro 20138032Speter * lib/asn1/gen.c: include <string.h> in the generated files (for 20238032Speter memset) 20338032Speter 20438032Speter2002-08-22 Assar Westerlund <assar@kth.se> 20538032Speter 20638032Speter * lib/krb5/test_get_addrs.c, lib/krb5/krbhst-test.c: make it use 20738032Speter getarg so that it can handle --help and --version (and thus make 20838032Speter check can pass) 20938032Speter 21038032Speter * lib/asn1/check-der.c: make this build again 21138032Speter 21238032Speter2002-08-22 Assar Westerlund <assar@kth.se> 21338032Speter 21438032Speter * lib/asn1/der_get.c (der_get_int): handle len == 0. based on a 21538032Speter patch from Love <lha@stacken.kth.se> 21638032Speter 21738032Speter2002-08-22 Johan Danielsson <joda@pdc.kth.se> 21864565Sgshapiro 21938032Speter * lib/krb5/krb5.h: we seem to call KRB5KDC_ERR_KEY_EXP 22038032Speter KRB5KDC_ERR_KEY_EXPIRED, so define the former to the latter 22138032Speter 22238032Speter * kdc/kdc.8: add blurb about adding and removing addresses; update 22364565Sgshapiro kdc.conf section to match reality 22464565Sgshapiro 22564565Sgshapiro * configure.in: KRB_SENDAUTH_VLEN seems to always have existed, so 22638032Speter don't define it 22764565Sgshapiro 22838032Speter2002-08-21 Assar Westerlund <assar@kth.se> 22938032Speter 23038032Speter * lib/asn1/asn1_print.c: print OIDs too, based on a patch from 23138032Speter Love <lha@stacken.kth.se> 23238032Speter 23338032Speter2002-08-21 Johan Danielsson <joda@pdc.kth.se> 23438032Speter 23538032Speter * kuser/kinit.c (do_v4_fallback): don't use krb_get_pw_in_tkt2 23638032Speter since it might not exist, and we don't actually care about the key 23738032Speter 23864565Sgshapiro2002-08-20 Johan Danielsson <joda@pdc.kth.se> 23938032Speter 24064565Sgshapiro * lib/krb5/krb5.conf.5: correct documentation for 24138032Speter verify_ap_req_nofail 24238032Speter 24364565Sgshapiro * lib/krb5/log.c: rename syslog_data to avoid name conflicts (from 24438032Speter Mattias Amnefelt) 24538032Speter 24664565Sgshapiro * kuser/klist.c (display_tokens): increase token buffer size, and 24738032Speter add more checks of the kernel data (from Love) 24864565Sgshapiro 24938032Speter2002-08-19 Johan Danielsson <joda@pdc.kth.se> 25038032Speter 25138032Speter * fix-export: use make to parse Makefile.am instead of perl 25238032Speter 25338032Speter * configure.in: use argument-less AM_INIT_AUTOMAKE, now that it 25438032Speter groks AC_INIT with package name etc. 25538032Speter 25638032Speter * kpasswd/kpasswdd.c: include <kadm5/private.h> 25738032Speter 25838032Speter * lib/asn1/asn1_print.c: include com_right.h 25938032Speter 26038032Speter * lib/krb5/addr_families.c: socklen_t -> krb5_socklen_t 26138032Speter 26238032Speter * include/bits.c: define krb5_socklen_t type; this should really 26338032Speter go someplace else, but this was easy 26438032Speter 26538032Speter * lib/krb5/verify_krb5_conf.c: don't bail out if parsing of a file 26638032Speter fails, just warn about it 26738032Speter 26838032Speter * kdc/log.c (kdc_openlog): no need for a config_file parameter 26938032Speter 27038032Speter * kdc/config.c: just treat kdc.conf like any other config file 27138032Speter 27238032Speter * lib/krb5/context.c (krb5_get_default_config_files): ignore 27338032Speter duplicate files 27438032Speter 27538032Speter2002-08-16 Johan Danielsson <joda@pdc.kth.se> 27638032Speter 27738032Speter * lib/krb5/krb5.h: turn strings into pointers, so we can assign to 27838032Speter them 27938032Speter 28038032Speter * lib/krb5/constants.c: turn strings into pointers, so we can 28138032Speter assign to them 28238032Speter 28338032Speter * lib/krb5/get_addrs.c (get_addrs_int): initialise res if 28438032Speter SCAN_INTERFACES is not set 28538032Speter 28638032Speter * lib/krb5/context.c: fix various borked stuff in previous commits 28738032Speter 28838032Speter2002-08-16 Jacques Vidrine <n@nectar.com> 28938032Speter 29038032Speter * lib/krb5/krbhst.c (kpasswd_get_next): if we fall back to using 29138032Speter the `admin_server' entry for kpasswd, override the `proto' result 29238032Speter to be UDP. 29338032Speter 29438032Speter2002-08-15 Johan Danielsson <joda@pdc.kth.se> 29538032Speter 29638032Speter * lib/krb5/auth_context.c: check return value of 29738032Speter krb5_sockaddr2address 29864565Sgshapiro 29964565Sgshapiro * lib/krb5/addr_families.c: check return value of 30038032Speter krb5_sockaddr2address 30138032Speter 30238032Speter * lib/krb5/context.c: get the default keytab from KRB5_KTNAME 30338032Speter 30438032Speter2002-08-14 Johan Danielsson <joda@pdc.kth.se> 30538032Speter 30664565Sgshapiro * lib/krb5/verify_krb5_conf.c: allow parsing of more than one file 30738032Speter 30838032Speter * lib/krb5/context.c: allow changing config files with the 30938032Speter function krb5_set_config_files, there are also related functions 31064565Sgshapiro krb5_get_default_config_files and krb5_free_config_files; these 31164565Sgshapiro should work similar to their MIT counterparts 31264565Sgshapiro 31364565Sgshapiro * lib/krb5/config_file.c: allow the use of more than one config 31464565Sgshapiro file by using the new function krb5_config_parse_file_multi 31564565Sgshapiro 31664565Sgshapiro2002-08-12 Johan Danielsson <joda@pdc.kth.se> 31764565Sgshapiro 31838032Speter * use sysconfdir instead of /etc 31938032Speter 32064565Sgshapiro * configure.in: require autoconf 2.53; rename dpagaix_LDFLAGS etc 32164565Sgshapiro to appease automake; force sysconfdir and localstatedir to /etc 32238032Speter and /var/heimdal for now 32338032Speter 32438032Speter * kdc/connect.c (addr_to_string): check return value of 32538032Speter sockaddr2address 32638032Speter 32738032Speter2002-08-09 Johan Danielsson <joda@pdc.kth.se> 32838032Speter 32938032Speter * lib/krb5/rd_cred.c: if the remote address isn't an addrport, 33064565Sgshapiro don't try comparing to one; this should make old clients work with 33138032Speter new servers 33238032Speter 33338032Speter * lib/asn1/gen_decode.c: remove unused variable 33438032Speter 33538032Speter2002-07-31 Johan Danielsson <joda@pdc.kth.se> 33638032Speter 33738032Speter * kdc/{kerberos5,524}.c: ENOENT -> HDB_ERR_NOENTRY (from Derrick 33838032Speter Brashear) 33938032Speter 34038032Speter * lib/krb5/principal.c: actually lower case the lower case 34138032Speter instance name (spotted by Derrick Brashear) 34238032Speter 34338032Speter2002-07-24 Johan Danielsson <joda@pdc.kth.se> 34438032Speter 34538032Speter * fix-export: if DATEDVERSION is set, change the version to 34638032Speter current date 34738032Speter 34838032Speter * configure.in: don't use AC_PROG_RANLIB, and use magic foo to set 34938032Speter LTLIBOBJS 35038032Speter 35138032Speter2002-07-04 Johan Danielsson <joda@pdc.kth.se> 35238032Speter 35338032Speter * kdc/connect.c: add some cache-control-foo to the http responses 35438032Speter (from Gombas Gabor) 35538032Speter 35638032Speter * lib/krb5/addr_families.c (krb5_print_address): don't copy size 35738032Speter if ret_len == NULL 35864565Sgshapiro 35938032Speter2002-06-28 Johan Danielsson <joda@pdc.kth.se> 36064565Sgshapiro 36138032Speter * kuser/klist.c (display_tokens): don't bail out before we get 36238032Speter EDOM (signaling the end of the tokens), the kernel can also return 36338032Speter ENOTCONN, meaning that the index does not exist anymore (for 36438032Speter example if the token has expired) 36538032Speter 36638032Speter2002-06-06 Johan Danielsson <joda@pdc.kth.se> 36738032Speter 36838032Speter * lib/krb5/changepw.c: make sure we return an error if there are 36938032Speter no changepw hosts found; from Wynn Wilkes 37038032Speter 37138032Speter2002-05-29 Johan Danielsson <joda@pdc.kth.se> 37238032Speter 37338032Speter * lib/krb5/cache.c (krb5_cc_register): break out of loop when the 37438032Speter same type is found; spotted by Wynn Wilkes 37538032Speter 37638032Speter2002-05-15 Johan Danielsson <joda@pdc.kth.se> 37764565Sgshapiro 37864565Sgshapiro * kdc/kerberos5.c: don't free encrypted padata until we're really 37964565Sgshapiro done with it 38064565Sgshapiro 38164565Sgshapiro2002-05-07 Johan Danielsson <joda@pdc.kth.se> 38264565Sgshapiro 38364565Sgshapiro * kdc/kerberos5.c: when decrypting pa-data, try all keys matching 38464565Sgshapiro enctype 38564565Sgshapiro 38664565Sgshapiro * kuser/kinit.1: document -a 38764565Sgshapiro 38864565Sgshapiro * kuser/kinit.c: add command line switch for extra addresses 38964565Sgshapiro 39064565Sgshapiro2002-04-30 Johan Danielsson <joda@blubb.pdc.kth.se> 39164565Sgshapiro 39264565Sgshapiro * configure.in: remove some duplicate tests 39364565Sgshapiro 39464565Sgshapiro * configure.in: use AC_HELP_STRING 39564565Sgshapiro 39664565Sgshapiro2002-04-29 Johan Danielsson <joda@pdc.kth.se> 39764565Sgshapiro 39864565Sgshapiro * lib/krb5/crypto.c (usage2arcfour): don't abort if the usage is 39964565Sgshapiro unknown 40038032Speter 40138032Speter2002-04-25 Johan Danielsson <joda@pdc.kth.se> 40238032Speter 40338032Speter * configure.in: use rk_DESTDIRS 40438032Speter 40538032Speter2002-04-22 Johan Danielsson <joda@pdc.kth.se> 40638032Speter 40738032Speter * lib/krb5/krb5_verify_user.3: make it clear that _lrealm modifies 40838032Speter the principal 40938032Speter 41038032Speter2002-04-19 Johan Danielsson <joda@pdc.kth.se> 41138032Speter 41238032Speter * lib/krb5/verify_init.c: fix typo in error string 41338032Speter 41438032Speter2002-04-18 Johan Danielsson <joda@pdc.kth.se> 41538032Speter 41638032Speter * acconfig.h: remove some stuff that is defined elsewhere 41738032Speter 41838032Speter * lib/krb5/krb5_locl.h: include <sys/file.h> 41938032Speter 42038032Speter * lib/krb5/acl.c: rename acl_string parameter 42138032Speter 42238032Speter * lib/krb5/Makefile.am: remove __P from protos, and put parameter 42338032Speter names in comments 42438032Speter 42538032Speter * kuser/klist.c: better align some headers 42638032Speter 42738032Speter * kdc/kerberos4.c: storage tweaks 42838032Speter 42938032Speter * kdc/kaserver.c: storage tweaks 43038032Speter 43138032Speter * kdc/524.c: storage tweaks 43238032Speter 43338032Speter * lib/krb5/keytab_krb4.c: storage tweaks 43438032Speter 43538032Speter * lib/krb5/keytab_keyfile.c: storage tweaks 43638032Speter 43738032Speter * lib/krb5/keytab_file.c: storage tweaks; also try to handle zero 43838032Speter sized keytab files 43938032Speter 44038032Speter * lib/krb5/keytab_any.c: use KRB5_KT_END instead of KRB5_CC_END 44138032Speter 44238032Speter * lib/krb5/fcache.c: storage tweaks 44338032Speter 44438032Speter * lib/krb5/store_mem.c: make the krb5_storage opaque, and add 44538032Speter function wrappers for store/fetch/seek, and also make the eof-code 44638032Speter configurable 44738032Speter 44864565Sgshapiro * lib/krb5/store_fd.c: make the krb5_storage opaque, and add 44938032Speter function wrappers for store/fetch/seek, and also make the eof-code 45038032Speter configurable 45138032Speter 45238032Speter * lib/krb5/store_emem.c: make the krb5_storage opaque, and add 45338032Speter function wrappers for store/fetch/seek, and also make the eof-code 45438032Speter configurable 45538032Speter 45638032Speter * lib/krb5/store.c: make the krb5_storage opaque, and add function 45738032Speter wrappers for store/fetch/seek, and also make the eof-code 45838032Speter configurable 45938032Speter 46038032Speter * lib/krb5/store-int.h: make the krb5_storage opaque, and add 46138032Speter function wrappers for store/fetch/seek, and also make the eof-code 46238032Speter configurable 46338032Speter 46438032Speter * lib/krb5/krb5.h: make the krb5_storage opaque, and add function 46538032Speter wrappers for store/fetch/seek, and also make the eof-code 46638032Speter configurable 46738032Speter 46838032Speter * include/bits.c: include <sys/socket.h> to get socklen_t 46938032Speter 47038032Speter * kdc/kerberos5.c (get_pa_etype_info): sort ETYPE-INFOs by 47138032Speter requested KDC-REQ etypes 47238032Speter 47338032Speter * kdc/hpropd.c: constify 47438032Speter 47538032Speter * kdc/hprop.c: constify 47638032Speter 47738032Speter * kdc/string2key.c: constify 47838032Speter 47938032Speter * kdc/kdc_locl.h: make port_str const 48040498Sbde 48140498Sbde * kdc/config.c: constify 48240498Sbde 48338032Speter * lib/krb5/config_file.c: constify 48438032Speter 48538032Speter * kdc/kstash.c: constify 48638032Speter 48738032Speter * lib/krb5/verify_user.c: remove unnecessary cast 48838032Speter 48964565Sgshapiro * lib/krb5/recvauth.c: constify 49038032Speter 49138032Speter * lib/krb5/principal.c (krb5_parse_name): const qualify 49238032Speter 49338032Speter * lib/krb5/mcache.c (mcc_get_name): constify return type 49438032Speter 49538032Speter * lib/krb5/context.c (krb5_free_context): don't try to free the 49638032Speter ccache prefix 49738032Speter 49838032Speter * lib/krb5/cache.c (krb5_cc_register): don't make a copy of the 49938032Speter prefix 50038032Speter 50138032Speter * lib/krb5/krb5.h: constify some struct members 50238032Speter 50338032Speter * lib/krb5/log.c: constify 50438032Speter 50538032Speter * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): const 50638032Speter qualify 50738032Speter 50864565Sgshapiro * lib/krb5/get_in_tkt.c (krb5_init_etype): constify 50938032Speter 51038032Speter * lib/krb5/crypto.c: constify some 51138032Speter 51238032Speter * lib/krb5/config_file.c: constify 51338032Speter 51438032Speter * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): 51538032Speter constify local variable 51638032Speter 51738032Speter * lib/krb5/addr_families.c (ipv4_sockaddr2port): constify 51838032Speter 51938032Speter2002-04-17 Johan Danielsson <joda@pdc.kth.se> 52038032Speter 52138032Speter * lib/krb5/verify_krb5_conf.c: add some log checking 52238032Speter 52338032Speter * lib/krb5/log.c (krb5_addlog_dest): reorganise syslog parsing 52438032Speter 52538032Speter2002-04-16 Johan Danielsson <joda@pdc.kth.se> 52638032Speter 52738032Speter * lib/krb5/crypto.c (krb5_crypto_init): check that the key size 52838032Speter matches the expected length 52938032Speter 53038032Speter2002-03-27 Johan Danielsson <joda@pdc.kth.se> 53138032Speter 53238032Speter * lib/krb5/send_to_kdc.c: rename send parameter to send_data 53338032Speter 53438032Speter * lib/krb5/mk_error.c: rename ctime parameter to client_time 53538032Speter 53638032Speter2002-03-22 Johan Danielsson <joda@pdc.kth.se> 53738032Speter 53838032Speter * kdc/kerberos5.c (find_etype): unsigned -> krb5_enctype (from 53938032Speter Reinoud Zandijk) 54038032Speter 54138032Speter2002-03-18 Johan Danielsson <joda@pdc.kth.se> 54238032Speter 54338032Speter * lib/asn1/k5.asn1: add the GSS-API checksum type here 54438032Speter 54538032Speter2002-03-11 Assar Westerlund <assar@sics.se> 54638032Speter 54738032Speter * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 54838032Speter 18:3:1 54938032Speter * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): bump version to 7:5:0 55038032Speter * lib/asn1/Makefile.am (libasn1_la_LDFLAGS): bump version to 6:0:0 55138032Speter 55238032Speter2002-03-10 Assar Westerlund <assar@sics.se> 55338032Speter 55438032Speter * lib/krb5/rd_cred.c: handle addresses with port numbers 55538032Speter 55638032Speter * lib/krb5/keytab_file.c, lib/krb5/keytab.c: 55742580Speter store the kvno % 256 as the byte and the complete 32 bit kvno after 55838032Speter the end of the current keytab entry 55938032Speter 56038032Speter * lib/krb5/init_creds_pw.c: 56138032Speter handle LR_PW_EXPTIME and LR_ACCT_EXPTIME in the same way 56238032Speter 56338032Speter * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): 56438032Speter handle ports giving for the remote address 56538032Speter 56638032Speter * lib/krb5/get_cred.c: 56738032Speter get a ticket with no addresses if no-addresses is set 56838032Speter 56938032Speter * lib/krb5/crypto.c: 57038032Speter rename functions DES_* to krb5_* to avoid colliding with modern 57164565Sgshapiro openssl 57238032Speter 57338032Speter * lib/krb5/addr_families.c: 57438032Speter make all functions taking 'struct sockaddr' actually take a socklen_t 57538032Speter instead of int and that acts as an in-out parameter (indicating the 57638032Speter maximum length of the sockaddr to be written) 57738032Speter 57838032Speter * kdc/kerberos4.c: 57938032Speter make the kvno's in the krb4 universe by the real one % 256, since they 58038032Speter cannot only be 8 bit, and the v5 ones are actually 32 bits 58138032Speter 58264565Sgshapiro2002-02-15 Johan Danielsson <joda@pdc.kth.se> 58338032Speter 58438032Speter * lib/krb5/keytab_keyfile.c (akf_add_entry): don't create the file 58538032Speter before we need to write to it 58638032Speter (from �ke Sandgren) 58738032Speter 58838032Speter2002-02-14 Johan Danielsson <joda@pdc.kth.se> 58938032Speter 59038032Speter * configure.in: rk_RETSIGTYPE and rk_BROKEN_REALLOC are called via 59138032Speter rk_ROKEN (from Gombas Gabor); find inttypes by CHECK_TYPES 59264565Sgshapiro directly 59338032Speter 59438032Speter * lib/krb5/rd_safe.c: actually use the correct key (from Daniel 59538032Speter Kouril) 59664565Sgshapiro 59738032Speter2002-02-12 Johan Danielsson <joda@pdc.kth.se> 59864565Sgshapiro 59938032Speter * lib/krb5/context.c (krb5_get_err_text): protect against NULL 60038032Speter context 60138032Speter 60238032Speter2002-02-11 Johan Danielsson <joda@pdc.kth.se> 60338032Speter 60464565Sgshapiro * admin/ktutil.c: no need to use the "modify" keytab anymore 60538032Speter 60638032Speter * lib/krb5/keytab_any.c: implement add and remove 60738032Speter 60838032Speter * lib/krb5/keytab_krb4.c: implement add and remove 60938032Speter 61038032Speter * lib/krb5/store_emem.c (emem_free): clear memory before freeing 61164565Sgshapiro (this should perhaps be selectable with a flag) 61264565Sgshapiro 61338032Speter2002-02-04 Johan Danielsson <joda@pdc.kth.se> 61438032Speter 61538032Speter * kdc/config.c (get_dbinfo): if there are database specifications 61638032Speter in the config file, don't automatically try to use the default 61738032Speter values (from Gombas Gabor) 61838032Speter 61964565Sgshapiro * lib/krb5/log.c (krb5_closelog): don't pass pointer to pointer 62038032Speter (from Gombas Gabor) 62138032Speter 62238032Speter2002-01-30 Johan Danielsson <joda@pdc.kth.se> 62338032Speter 62438032Speter * admin/list.c: get the default keytab from krb5.conf, and list 62538032Speter all parts of an ANY type keytab 62638032Speter 62738032Speter * lib/krb5/context.c: default default_keytab_modify to NULL 62838032Speter 62938032Speter * lib/krb5/keytab.c (krb5_kt_default_modify_name): if no modify 63038032Speter name is specified take it from the first component of the default 63164565Sgshapiro keytab name 63264565Sgshapiro 63364565Sgshapiro2002-01-29 Johan Danielsson <joda@pdc.kth.se> 63438032Speter 63538032Speter * lib/krb5/keytab.c: compare keytab types case insensitively 63638032Speter 63738032Speter2002-01-07 Assar Westerlund <assar@sics.se> 63838032Speter 63938032Speter * lib/krb5/crypto.c (create_checksum): make usage `unsigned' (it's 64064565Sgshapiro not really a krb5_key_usage). From Ben Harris <bjh21@netbsd.org> 64138032Speter * lib/krb5/get_in_tkt.c: use krb5_enctype consistently. From Ben 64238032Speter Harris <bjh21@netbsd.org> 64364565Sgshapiro * lib/krb5/crypto.c: use krb5_enctype consistently. From Ben 64438032Speter Harris <bjh21@netbsd.org> 64538032Speter * kdc/kerberos5.c: use krb5_enctype consistently. From Ben Harris 64638032Speter <bjh21@netbsd.org> 64738032Speter