ChangeLog revision 107207
12061Sjkh2002-10-21 Johan Danielsson <joda@pdc.kth.se> 228329Sandreas 32061Sjkh * lib/krb5/store_emem.c: pull up 1.13; limit how much we allocate 42061Sjkh 515603Smarkm * lib/krb5/principal.c: pull up 1.82; don't allow trailing 63197Scsgr backslashes in components 720710Sasami 820710Sasami * lib/krb5/keytab_keyfile.c: pull up 1.15; more strcspn 93197Scsgr 102061Sjkh * lib/krb5/keytab_any.c: pull up 1.7; properly close the open 1112483Speter keytabs 122160Scsgr 132834Swollman * kdc/connect.c: pull up 1.87; check that %-quotes are followed by 142061Sjkh two hex digits 152061Sjkh 162160Scsgr * lib/krb5/prompter_posix.c: pull up 1.7; use strcspn to convert 1717308Speter the newline to NUL in fgets results. 1819320Sadam 1927788Sasami * lib/krb5/kuserok.c: pull up 1.6; use strcspn to convert the 2027788Sasami newline to NUL in fgets results. 2125980Sasami 221594Srgrimes * lib/krb5/keytab_file.c: pull up 1.12; check return value from 2317308Speter start_seq_get 2417308Speter 2527910Sasami * lib/krb5/context.c: pull up 1.82; return ENXIO instead of ENOENT 2627910Sasami when "unconfigured" 2727910Sasami 2817308Speter * lib/krb5/changepw.c: pull up 1.38; fix reply length check 2917308Speter calculation 3017308Speter 3119175Sbde * kuser/klist.c: pull up 1.68; allow tokens up to size of buffer 3219175Sbde 3319175Sbde * kdc/kaserver.c: pull up 1.21; make sure life is positive 3419175Sbde 3517308Speter * fix-export: pull up 1.28; remove autom4ate.cache 3627910Sasami 3725647Sbde2002-09-10 Johan Danielsson <joda@pdc.kth.se> 3827910Sasami 3917308Speter * Release 0.5 402061Sjkh 412061Sjkh * include/make_crypto.c: don't use function macros if possible 421594Srgrimes 4327910Sasami * lib/krb5/krb5_locl.h: get limits.h for UINT_MAX 447407Srgrimes 457108Sphk * include/Makefile.am: use make_crypto to create crypto-headers.h 467108Sphk 477108Sphk * include/make_crypto.c: crypto header generation tool 487407Srgrimes 497407Srgrimes * configure.in: move crypto test to just after testing for krb4, 507407Srgrimes and move roken tests to after both, this speeds up various failure 517108Sphk cases with krb4 522061Sjkh 532061Sjkh * lib/krb5/config_file.c: don't use NULL when we mean 0 542061Sjkh 5517308Speter * configure.in: we don't set package_libdir anymore, so no point 562061Sjkh in testing for it 572061Sjkh 582061Sjkh * tools/Makefile.am: subst INCLUDE_des 592061Sjkh 602061Sjkh * tools/krb5-config.in: add INCLUDE_des to cflags 613197Scsgr 622626Scsgr * configure.in: use AC_CONFIG_SRCDIR 632626Scsgr 642061Sjkh * fix-export: remove some unneeded stuff 652061Sjkh 662061Sjkh * kuser/kinit.c (do_524init): free principals 672061Sjkh 682061Sjkh2002-09-09 Jacques Vidrine <nectar@kth.se> 692061Sjkh 7019320Sadam * kdc/kerberos5.c (get_pa_etype_info, fix_transited_encoding), 712061Sjkh kdc/kaserver.c (krb5_ret_xdr_data), 722061Sjkh lib/krb5/transited.c (krb5_domain_x500_decode): Validate some 732061Sjkh counts: Check that they are non-negative, and that they are small 742061Sjkh enough to avoid integer overflow when used in memory allocation 752061Sjkh calculations. Potential problem areas pointed out by 762061Sjkh Sebastian Krahmer <krahmer@suse.de>. 772061Sjkh 782061Sjkh * lib/krb5/keytab_keyfile.c (akf_add_entry): Use O_EXCL when 792061Sjkh creating a new keyfile. 802061Sjkh 812061Sjkh2002-09-09 Johan Danielsson <joda@pdc.kth.se> 822834Swollman 832834Swollman * configure.in: don't try to build pam module 842834Swollman 852834Swollman2002-09-05 Johan Danielsson <joda@pdc.kth.se> 862834Swollman 872834Swollman * appl/kf/kf.c: fix warning string 881594Srgrimes 894486Sphk * lib/krb5/log.c (krb5_vlog_msg): delay message formating till we 904486Sphk know we need it 914486Sphk 924486Sphk2002-09-04 Assar Westerlund <assar@kth.se> 934486Sphk 942061Sjkh * kdc/kerberos5.c (encode_reply): correct error logging 952061Sjkh 9625979Sjkh2002-09-04 Johan Danielsson <joda@pdc.kth.se> 9725979Sjkh 9825979Sjkh * lib/krb5/sendauth.c: close ccache if we opened it 9925979Sjkh 1002061Sjkh * appl/kf/kf.c: handle new protocol 10125979Sjkh 1022061Sjkh * appl/kf/kfd.c: use krb5_err instead of sysloging directly, 1032061Sjkh handle the new protocol, and bail out if an old client tries to 10417308Speter connect 1052061Sjkh 1062061Sjkh * appl/kf/kf_locl.h: we need a protocol version string 1072061Sjkh 1082061Sjkh * lib/hdb/hdb-ldap.c: use ASN1_MALLOC_ENCODE 1092061Sjkh 11012483Speter * kdc/kerberos5.c: use ASN1_MALLOC_ENCODE 11112483Speter 11212483Speter * kdc/hprop.c: set AP_OPTS_USE_SUBKEY 11312483Speter 1142061Sjkh * lib/hdb/common.c: use ASN1_MALLOC_ENCODE 1152061Sjkh 1168854Srgrimes * lib/asn1/gen.c: add convenience macro that allocates a buffer 1172061Sjkh and encoded into that 1182061Sjkh 11912483Speter * lib/krb5/get_cred.c (init_tgs_req): use 1202061Sjkh in_creds->session.keytype literally instead of trying to convert 12127910Sasami to a list of enctypes (it should already be an enctype) 12227910Sasami 12318714Sache * lib/krb5/get_cred.c (init_tgs_req): init ret 12417308Speter 12517308Speter2002-09-03 Johan Danielsson <joda@pdc.kth.se> 12617308Speter 12717308Speter * lib/asn1/k5.asn1: remove ETYPE_DES3_CBC_NONE_IVEC 12821536Sjmacd 12915603Smarkm * lib/krb5/krb5.h: remove ENCTYPE_DES3_CBC_NONE_IVEC 13017308Speter 13117308Speter * lib/krb5/crypto.c: get rid of DES3_CBC_encrypt_ivec, just use 13217308Speter zero ivec in DES3_CBC_encrypt if passed ivec is NULL 13317308Speter 13417308Speter * lib/krb5/Makefile.am: back out 1.144, since it will re-create 13517308Speter krb5-protos.h at build-time, which requires perl, which is bad 13617308Speter 13717308Speter * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't 13817308Speter blindly use the local subkey 13918362Sjkh 14019966Sache * lib/krb5/crypto.c: add function krb5_crypto_getblocksize that 14118362Sjkh extracts the required blocksize from a crypto context 14217308Speter 14327910Sasami * lib/krb5/build_auth.c: just get the length of the encoded 14417308Speter authenticator instead of trying to grow a buffer 14517308Speter 14617308Speter2002-09-03 Assar Westerlund <assar@kth.se> 14717308Speter 14827910Sasami * configure.in: add --disable-mmap option, and tests for 14927910Sasami sys/mman.h and mmap 15027910Sasami 15127910Sasami2002-09-03 Jacques Vidrine <nectar@kth.se> 15217308Speter 1532061Sjkh * lib/krb5/changepw.c: verify lengths in response 15427910Sasami 1552061Sjkh * lib/asn1/der_get.c (decode_integer, decode_unsigned): check for 15627910Sasami truncated integers 15727910Sasami 1582061Sjkh2002-09-02 Johan Danielsson <joda@pdc.kth.se> 15917308Speter 16027910Sasami * lib/krb5/mk_req_ext.c: generate a local subkey if 16117308Speter AP_OPTS_USE_SUBKEY is set 16227910Sasami 16327910Sasami * lib/krb5/build_auth.c: we don't have enough information about 16427910Sasami whether to generate a local subkey here, so don't try to 16517308Speter 16627910Sasami * lib/krb5/auth_context.c: new function 16717308Speter krb5_auth_con_generatelocalsubkey 16827910Sasami 16927910Sasami * lib/krb5/get_in_tkt.c: only set kdc_sec_offset if looking at an 17027910Sasami initial ticket 17127910Sasami 17227910Sasami * lib/krb5/context.c (init_context_from_config_file): simplify 17327910Sasami initialisation of srv_lookup 17427910Sasami 17527910Sasami * lib/krb5/changepw.c (send_request): set AP_OPTS_USE_SUBKEY 17627910Sasami 17727910Sasami * lib/krb5/krb5.h: add AP_OPTS_USE_SUBKEY 17827910Sasami 17927910Sasami2002-08-30 Assar Westerlund <assar@kth.se> 18027910Sasami 18127910Sasami * lib/krb5/name-45-test.c: also test krb5_524_conv_principal 18227910Sasami * lib/krb5/Makefile.am (TESTS): add name-45-test 18327910Sasami * lib/krb5/name-45-test.c: add testcases for 18427910Sasami krb5_425_conv_principal 18527910Sasami 18627910Sasami2002-08-29 Assar Westerlund <assar@kth.se> 18727910Sasami 18827910Sasami * lib/krb5/parse-name-test.c: also test unparse_short functions 18927910Sasami * lib/asn1/asn1_print.c: use com_err/error_message API 19027910Sasami * lib/krb5/Makefile.am: add parse-name-test 19127910Sasami * lib/krb5/parse-name-test.c: add a program for testing parsing 19227910Sasami and unparsing principal names 19327910Sasami 19427910Sasami2002-08-28 Assar Westerlund <assar@kth.se> 19527910Sasami 19627910Sasami * kdc/config.c: add missing ifdef DAEMON 19727910Sasami 19827910Sasami2002-08-28 Johan Danielsson <joda@pdc.kth.se> 19927910Sasami 20027910Sasami * configure.in: use rk_SUNOS 20127910Sasami 20227910Sasami * kdc/config.c: add detach options 20327910Sasami 20427910Sasami * kdc/main.c: maybe detach from console? 20517308Speter 20617308Speter * kdc/kdc.8: markup changes 20727910Sasami 20817308Speter * configure.in: AC_TEST_PACKAGE_NEW -> rk_TEST_PACKAGE 20927910Sasami 21027910Sasami * configure.in: use rk_TELNET, rename some other macros, and don't 21127910Sasami add -ldes to krb4 link command 21227910Sasami 21317466Speter * kuser/kinit.1: whitespace fix (from NetBSD) 21417308Speter 21527910Sasami * include/bits.c: we may need unistd.h for ssize_t 21617308Speter 21727910Sasami2002-08-26 Assar Westerlund <assar@kth.se> 21827910Sasami 21927910Sasami * lib/krb5/principal.c (krb5_425_conv_principal_ext): lookup AAAA 22027910Sasami rrs before A ones when using the resolver to verify a mapping, 22117308Speter also use getaddrinfo when resolver is not available 22217308Speter 22327910Sasami * lib/hdb/keytab.c (find_db): const-correctness in parameters to 22417308Speter krb5_config_get_next 22527910Sasami 22627910Sasami * lib/asn1/gen.c: include <string.h> in the generated files (for 22717308Speter memset) 22817308Speter 22927910Sasami2002-08-22 Assar Westerlund <assar@kth.se> 23017308Speter 23127910Sasami * lib/krb5/test_get_addrs.c, lib/krb5/krbhst-test.c: make it use 23227910Sasami getarg so that it can handle --help and --version (and thus make 23327910Sasami check can pass) 23417308Speter 23517308Speter * lib/asn1/check-der.c: make this build again 23627910Sasami 23717308Speter2002-08-22 Assar Westerlund <assar@kth.se> 23827910Sasami 23927910Sasami * lib/asn1/der_get.c (der_get_int): handle len == 0. based on a 24017308Speter patch from Love <lha@stacken.kth.se> 24117308Speter 24227910Sasami2002-08-22 Johan Danielsson <joda@pdc.kth.se> 24317308Speter 24427910Sasami * lib/krb5/krb5.h: we seem to call KRB5KDC_ERR_KEY_EXP 24517308Speter KRB5KDC_ERR_KEY_EXPIRED, so define the former to the latter 24617308Speter 24727910Sasami * kdc/kdc.8: add blurb about adding and removing addresses; update 24817308Speter kdc.conf section to match reality 24927910Sasami 25017308Speter * configure.in: KRB_SENDAUTH_VLEN seems to always have existed, so 25117308Speter don't define it 25227910Sasami 25317308Speter2002-08-21 Assar Westerlund <assar@kth.se> 25427910Sasami 25517962Speter * lib/asn1/asn1_print.c: print OIDs too, based on a patch from 25617962Speter Love <lha@stacken.kth.se> 25727910Sasami 25817962Speter2002-08-21 Johan Danielsson <joda@pdc.kth.se> 25927910Sasami 26017962Speter * kuser/kinit.c (do_v4_fallback): don't use krb_get_pw_in_tkt2 26117962Speter since it might not exist, and we don't actually care about the key 26227910Sasami 26317962Speter2002-08-20 Johan Danielsson <joda@pdc.kth.se> 26427910Sasami 26517962Speter * lib/krb5/krb5.conf.5: correct documentation for 26617962Speter verify_ap_req_nofail 26727910Sasami 26817962Speter * lib/krb5/log.c: rename syslog_data to avoid name conflicts (from 26927910Sasami Mattias Amnefelt) 27017308Speter 27117308Speter * kuser/klist.c (display_tokens): increase token buffer size, and 27227910Sasami add more checks of the kernel data (from Love) 27317308Speter 27427910Sasami2002-08-19 Johan Danielsson <joda@pdc.kth.se> 27517308Speter 27617308Speter * fix-export: use make to parse Makefile.am instead of perl 27727910Sasami 27817962Speter * configure.in: use argument-less AM_INIT_AUTOMAKE, now that it 27927910Sasami groks AC_INIT with package name etc. 2802061Sjkh 28117308Speter * kpasswd/kpasswdd.c: include <kadm5/private.h> 28227910Sasami 28327910Sasami * lib/asn1/asn1_print.c: include com_right.h 28427910Sasami 28527910Sasami * lib/krb5/addr_families.c: socklen_t -> krb5_socklen_t 28627910Sasami 28727910Sasami * include/bits.c: define krb5_socklen_t type; this should really 28827910Sasami go someplace else, but this was easy 28927910Sasami 29017308Speter * lib/krb5/verify_krb5_conf.c: don't bail out if parsing of a file 29117308Speter fails, just warn about it 29217308Speter 29317308Speter * kdc/log.c (kdc_openlog): no need for a config_file parameter 29417308Speter 29517308Speter * kdc/config.c: just treat kdc.conf like any other config file 29617308Speter 29712483Speter * lib/krb5/context.c (krb5_get_default_config_files): ignore 29817308Speter duplicate files 29912483Speter 30017308Speter2002-08-16 Johan Danielsson <joda@pdc.kth.se> 30112483Speter 3022061Sjkh * lib/krb5/krb5.h: turn strings into pointers, so we can assign to 30317962Speter them 30417962Speter 30517308Speter * lib/krb5/constants.c: turn strings into pointers, so we can 30617962Speter assign to them 30717962Speter 30817962Speter * lib/krb5/get_addrs.c (get_addrs_int): initialise res if 30917962Speter SCAN_INTERFACES is not set 31017308Speter 3112061Sjkh * lib/krb5/context.c: fix various borked stuff in previous commits 31217308Speter 31317308Speter2002-08-16 Jacques Vidrine <n@nectar.com> 31417308Speter 31517308Speter * lib/krb5/krbhst.c (kpasswd_get_next): if we fall back to using 31617308Speter the `admin_server' entry for kpasswd, override the `proto' result 31717308Speter to be UDP. 3182302Spaul 3192302Spaul2002-08-15 Johan Danielsson <joda@pdc.kth.se> 3202302Spaul 3212302Spaul * lib/krb5/auth_context.c: check return value of 3222302Spaul krb5_sockaddr2address 32318714Sache 32410760Sache * lib/krb5/addr_families.c: check return value of 32518714Sache krb5_sockaddr2address 3262302Spaul 32710760Sache * lib/krb5/context.c: get the default keytab from KRB5_KTNAME 32818714Sache 32910760Sache2002-08-14 Johan Danielsson <joda@pdc.kth.se> 33010760Sache 3312302Spaul * lib/krb5/verify_krb5_conf.c: allow parsing of more than one file 3322302Spaul 3332302Spaul * lib/krb5/context.c: allow changing config files with the 3342302Spaul function krb5_set_config_files, there are also related functions 33527790Sasami krb5_get_default_config_files and krb5_free_config_files; these 3362302Spaul should work similar to their MIT counterparts 3372302Spaul 33817308Speter * lib/krb5/config_file.c: allow the use of more than one config 33917308Speter file by using the new function krb5_config_parse_file_multi 34017308Speter 34117308Speter2002-08-12 Johan Danielsson <joda@pdc.kth.se> 34217308Speter 34317308Speter * use sysconfdir instead of /etc 3442061Sjkh 34517308Speter * configure.in: require autoconf 2.53; rename dpagaix_LDFLAGS etc 3462061Sjkh to appease automake; force sysconfdir and localstatedir to /etc 34717308Speter and /var/heimdal for now 34817308Speter 34917308Speter * kdc/connect.c (addr_to_string): check return value of 35017308Speter sockaddr2address 35117308Speter 35217308Speter2002-08-09 Johan Danielsson <joda@pdc.kth.se> 35317308Speter 35417308Speter * lib/krb5/rd_cred.c: if the remote address isn't an addrport, 35517308Speter don't try comparing to one; this should make old clients work with 35617308Speter new servers 35717308Speter 35817308Speter * lib/asn1/gen_decode.c: remove unused variable 35917308Speter 36017308Speter2002-07-31 Johan Danielsson <joda@pdc.kth.se> 3612061Sjkh 36217308Speter * kdc/{kerberos5,524}.c: ENOENT -> HDB_ERR_NOENTRY (from Derrick 36317308Speter Brashear) 36417308Speter 36517308Speter * lib/krb5/principal.c: actually lower case the lower case 36617308Speter instance name (spotted by Derrick Brashear) 36717308Speter 3683626Swollman2002-07-24 Johan Danielsson <joda@pdc.kth.se> 3693626Swollman 3703626Swollman * fix-export: if DATEDVERSION is set, change the version to 3713626Swollman current date 3723626Swollman 3733626Swollman * configure.in: don't use AC_PROG_RANLIB, and use magic foo to set 3743626Swollman LTLIBOBJS 3753626Swollman 3763626Swollman2002-07-04 Johan Danielsson <joda@pdc.kth.se> 3773626Swollman 3783626Swollman * kdc/connect.c: add some cache-control-foo to the http responses 3797059Sroberto (from Gombas Gabor) 3803626Swollman 3813626Swollman * lib/krb5/addr_families.c (krb5_print_address): don't copy size 3823626Swollman if ret_len == NULL 3833626Swollman 3843626Swollman2002-06-28 Johan Danielsson <joda@pdc.kth.se> 3853626Swollman 3863626Swollman * kuser/klist.c (display_tokens): don't bail out before we get 38717308Speter EDOM (signaling the end of the tokens), the kernel can also return 38817308Speter ENOTCONN, meaning that the index does not exist anymore (for 38917308Speter example if the token has expired) 39017308Speter 39117308Speter2002-06-06 Johan Danielsson <joda@pdc.kth.se> 39217308Speter 39317308Speter * lib/krb5/changepw.c: make sure we return an error if there are 39417308Speter no changepw hosts found; from Wynn Wilkes 39517308Speter 39617308Speter2002-05-29 Johan Danielsson <joda@pdc.kth.se> 3973626Swollman 39817308Speter * lib/krb5/cache.c (krb5_cc_register): break out of loop when the 39917308Speter same type is found; spotted by Wynn Wilkes 40017308Speter 40117308Speter2002-05-15 Johan Danielsson <joda@pdc.kth.se> 40217308Speter 40317308Speter * kdc/kerberos5.c: don't free encrypted padata until we're really 40417308Speter done with it 40517308Speter 40617308Speter2002-05-07 Johan Danielsson <joda@pdc.kth.se> 40717308Speter 40817308Speter * kdc/kerberos5.c: when decrypting pa-data, try all keys matching 40917308Speter enctype 41027910Sasami 41127910Sasami * kuser/kinit.1: document -a 41227910Sasami 41327910Sasami * kuser/kinit.c: add command line switch for extra addresses 41427910Sasami 41527910Sasami2002-04-30 Johan Danielsson <joda@blubb.pdc.kth.se> 41617820Sjkh 41717308Speter * configure.in: remove some duplicate tests 41817820Sjkh 41917308Speter * configure.in: use AC_HELP_STRING 42017820Sjkh 42117467Speter2002-04-29 Johan Danielsson <joda@pdc.kth.se> 42217308Speter 42317308Speter * lib/krb5/crypto.c (usage2arcfour): don't abort if the usage is 42417308Speter unknown 42517308Speter 42617308Speter2002-04-25 Johan Danielsson <joda@pdc.kth.se> 42727910Sasami 42827910Sasami * configure.in: use rk_DESTDIRS 42927910Sasami 43017308Speter2002-04-22 Johan Danielsson <joda@pdc.kth.se> 43117308Speter 43227910Sasami * lib/krb5/krb5_verify_user.3: make it clear that _lrealm modifies 43327910Sasami the principal 43417308Speter 43517308Speter2002-04-19 Johan Danielsson <joda@pdc.kth.se> 43617308Speter 43717308Speter * lib/krb5/verify_init.c: fix typo in error string 43814119Speter 4392061Sjkh2002-04-18 Johan Danielsson <joda@pdc.kth.se> 4407130Srgrimes 4417130Srgrimes * acconfig.h: remove some stuff that is defined elsewhere 4427130Srgrimes 4432061Sjkh * lib/krb5/krb5_locl.h: include <sys/file.h> 44425783Speter 44517308Speter * lib/krb5/acl.c: rename acl_string parameter 4462685Srgrimes 4476927Snate * lib/krb5/Makefile.am: remove __P from protos, and put parameter 44827790Sasami names in comments 44927790Sasami 45027790Sasami * kuser/klist.c: better align some headers 45128329Sandreas 4523197Scsgr * kdc/kerberos4.c: storage tweaks 4533197Scsgr 45412166Sjkh * kdc/kaserver.c: storage tweaks 45512485Sjkh 4563197Scsgr * kdc/524.c: storage tweaks 45725313Sbde 45826152Speter * lib/krb5/keytab_krb4.c: storage tweaks 4592061Sjkh 4602061Sjkh * lib/krb5/keytab_keyfile.c: storage tweaks 4612061Sjkh 46216786Snate * lib/krb5/keytab_file.c: storage tweaks; also try to handle zero 4632883Sphk sized keytab files 46427790Sasami 46517308Speter * lib/krb5/keytab_any.c: use KRB5_KT_END instead of KRB5_CC_END 4667281Srgrimes 4673242Spaul * lib/krb5/fcache.c: storage tweaks 4683242Spaul 4697171Sats * lib/krb5/store_mem.c: make the krb5_storage opaque, and add 4702061Sjkh function wrappers for store/fetch/seek, and also make the eof-code 4713213Spst configurable 47228104Sasami 47328104Sasami * lib/krb5/store_fd.c: make the krb5_storage opaque, and add 47417308Speter function wrappers for store/fetch/seek, and also make the eof-code 47528104Sasami configurable 47617308Speter 4775749Swollman * lib/krb5/store_emem.c: make the krb5_storage opaque, and add 4785772Swollman function wrappers for store/fetch/seek, and also make the eof-code 47917308Speter configurable 48017308Speter 48126504Sjhay * lib/krb5/store.c: make the krb5_storage opaque, and add function 4822061Sjkh wrappers for store/fetch/seek, and also make the eof-code 48317308Speter configurable 48417308Speter 48517308Speter * lib/krb5/store-int.h: make the krb5_storage opaque, and add 48627910Sasami function wrappers for store/fetch/seek, and also make the eof-code 48727910Sasami configurable 4885366Snate 48927910Sasami * lib/krb5/krb5.h: make the krb5_storage opaque, and add function 49027910Sasami wrappers for store/fetch/seek, and also make the eof-code 49127910Sasami configurable 49227910Sasami 49327910Sasami * include/bits.c: include <sys/socket.h> to get socklen_t 49427910Sasami 49527910Sasami * kdc/kerberos5.c (get_pa_etype_info): sort ETYPE-INFOs by 49627910Sasami requested KDC-REQ etypes 49727910Sasami 49827910Sasami * kdc/hpropd.c: constify 49927910Sasami 50027910Sasami * kdc/hprop.c: constify 50127910Sasami 50227910Sasami * kdc/string2key.c: constify 50327910Sasami 50417467Speter * kdc/kdc_locl.h: make port_str const 50527910Sasami 5065366Snate * kdc/config.c: constify 50717308Speter 50817308Speter * lib/krb5/config_file.c: constify 50917308Speter 5102061Sjkh * kdc/kstash.c: constify 51124754Sjdp 51224754Sjdp * lib/krb5/verify_user.c: remove unnecessary cast 51324754Sjdp 51424754Sjdp * lib/krb5/recvauth.c: constify 5158295Srgrimes 51617820Sjkh * lib/krb5/principal.c (krb5_parse_name): const qualify 51717308Speter 5188295Srgrimes * lib/krb5/mcache.c (mcc_get_name): constify return type 5198489Srgrimes 52017820Sjkh * lib/krb5/context.c (krb5_free_context): don't try to free the 52117308Speter ccache prefix 5228489Srgrimes 5238489Srgrimes * lib/krb5/cache.c (krb5_cc_register): don't make a copy of the 52417820Sjkh prefix 52517308Speter 5268489Srgrimes * lib/krb5/krb5.h: constify some struct members 5278295Srgrimes 52817820Sjkh * lib/krb5/log.c: constify 52917308Speter 5308295Srgrimes * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): const 5312160Scsgr qualify 53217820Sjkh 53317308Speter * lib/krb5/get_in_tkt.c (krb5_init_etype): constify 5342160Scsgr 5352279Spaul * lib/krb5/crypto.c: constify some 53617820Sjkh 53717308Speter * lib/krb5/config_file.c: constify 5382279Spaul 53917234Sjraynard * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): 54017820Sjkh constify local variable 54117308Speter 54211772Snate * lib/krb5/addr_families.c (ipv4_sockaddr2port): constify 5433197Scsgr 54417820Sjkh2002-04-17 Johan Danielsson <joda@pdc.kth.se> 54517308Speter 5462626Scsgr * lib/krb5/verify_krb5_conf.c: add some log checking 5478304Srgrimes 54817820Sjkh * lib/krb5/log.c (krb5_addlog_dest): reorganise syslog parsing 54917308Speter 5508304Srgrimes2002-04-16 Johan Danielsson <joda@pdc.kth.se> 5512061Sjkh 55217308Speter * lib/krb5/crypto.c (krb5_crypto_init): check that the key size 55317308Speter matches the expected length 55417308Speter 55527910Sasami2002-03-27 Johan Danielsson <joda@pdc.kth.se> 55627910Sasami 55727910Sasami * lib/krb5/send_to_kdc.c: rename send parameter to send_data 55827910Sasami 55927910Sasami * lib/krb5/mk_error.c: rename ctime parameter to client_time 56027910Sasami 56117308Speter2002-03-22 Johan Danielsson <joda@pdc.kth.se> 56211806Sphk 56319175Sbde * kdc/kerberos5.c (find_etype): unsigned -> krb5_enctype (from 56427910Sasami Reinoud Zandijk) 56527910Sasami 56627910Sasami2002-03-18 Johan Danielsson <joda@pdc.kth.se> 56727910Sasami 56827910Sasami * lib/asn1/k5.asn1: add the GSS-API checksum type here 56927910Sasami 57027910Sasami2002-03-11 Assar Westerlund <assar@sics.se> 57127910Sasami 57227910Sasami * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 57327910Sasami 18:3:1 57427910Sasami * lib/hdb/Makefile.am (libhdb_la_LDFLAGS): bump version to 7:5:0 57527910Sasami * lib/asn1/Makefile.am (libasn1_la_LDFLAGS): bump version to 6:0:0 57627910Sasami 57727910Sasami2002-03-10 Assar Westerlund <assar@sics.se> 57827910Sasami 57927910Sasami * lib/krb5/rd_cred.c: handle addresses with port numbers 58027910Sasami 58127910Sasami * lib/krb5/keytab_file.c, lib/krb5/keytab.c: 58227910Sasami store the kvno % 256 as the byte and the complete 32 bit kvno after 58327910Sasami the end of the current keytab entry 58427910Sasami 58527910Sasami * lib/krb5/init_creds_pw.c: 58627910Sasami handle LR_PW_EXPTIME and LR_ACCT_EXPTIME in the same way 58721673Sjkh 58827910Sasami * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): 58927910Sasami handle ports giving for the remote address 59027910Sasami 59127910Sasami * lib/krb5/get_cred.c: 59227910Sasami get a ticket with no addresses if no-addresses is set 59327910Sasami 59427910Sasami * lib/krb5/crypto.c: 59527910Sasami rename functions DES_* to krb5_* to avoid colliding with modern 59627910Sasami openssl 59727910Sasami 59827910Sasami * lib/krb5/addr_families.c: 59927910Sasami make all functions taking 'struct sockaddr' actually take a socklen_t 60027910Sasami instead of int and that acts as an in-out parameter (indicating the 60127910Sasami maximum length of the sockaddr to be written) 60227910Sasami 60327910Sasami * kdc/kerberos4.c: 60427910Sasami make the kvno's in the krb4 universe by the real one % 256, since they 60527910Sasami cannot only be 8 bit, and the v5 ones are actually 32 bits 60619175Sbde 60727910Sasami2002-02-15 Johan Danielsson <joda@pdc.kth.se> 60827910Sasami 60927910Sasami * lib/krb5/keytab_keyfile.c (akf_add_entry): don't create the file 61027910Sasami before we need to write to it 61127910Sasami (from �ke Sandgren) 61227910Sasami 61327910Sasami2002-02-14 Johan Danielsson <joda@pdc.kth.se> 61427910Sasami 61527910Sasami * configure.in: rk_RETSIGTYPE and rk_BROKEN_REALLOC are called via 61627910Sasami rk_ROKEN (from Gombas Gabor); find inttypes by CHECK_TYPES 61727910Sasami directly 61827910Sasami 61919175Sbde * lib/krb5/rd_safe.c: actually use the correct key (from Daniel 62017308Speter Kouril) 62119175Sbde 6222061Sjkh2002-02-12 Johan Danielsson <joda@pdc.kth.se> 6231594Srgrimes 624 * lib/krb5/context.c (krb5_get_err_text): protect against NULL 625 context 626 6272002-02-11 Johan Danielsson <joda@pdc.kth.se> 628 629 * admin/ktutil.c: no need to use the "modify" keytab anymore 630 631 * lib/krb5/keytab_any.c: implement add and remove 632 633 * lib/krb5/keytab_krb4.c: implement add and remove 634 635 * lib/krb5/store_emem.c (emem_free): clear memory before freeing 636 (this should perhaps be selectable with a flag) 637 6382002-02-04 Johan Danielsson <joda@pdc.kth.se> 639 640 * kdc/config.c (get_dbinfo): if there are database specifications 641 in the config file, don't automatically try to use the default 642 values (from Gombas Gabor) 643 644 * lib/krb5/log.c (krb5_closelog): don't pass pointer to pointer 645 (from Gombas Gabor) 646 6472002-01-30 Johan Danielsson <joda@pdc.kth.se> 648 649 * admin/list.c: get the default keytab from krb5.conf, and list 650 all parts of an ANY type keytab 651 652 * lib/krb5/context.c: default default_keytab_modify to NULL 653 654 * lib/krb5/keytab.c (krb5_kt_default_modify_name): if no modify 655 name is specified take it from the first component of the default 656 keytab name 657 6582002-01-29 Johan Danielsson <joda@pdc.kth.se> 659 660 * lib/krb5/keytab.c: compare keytab types case insensitively 661 6622002-01-07 Assar Westerlund <assar@sics.se> 663 664 * lib/krb5/crypto.c (create_checksum): make usage `unsigned' (it's 665 not really a krb5_key_usage). From Ben Harris <bjh21@netbsd.org> 666 * lib/krb5/get_in_tkt.c: use krb5_enctype consistently. From Ben 667 Harris <bjh21@netbsd.org> 668 * lib/krb5/crypto.c: use krb5_enctype consistently. From Ben 669 Harris <bjh21@netbsd.org> 670 * kdc/kerberos5.c: use krb5_enctype consistently. From Ben Harris 671 <bjh21@netbsd.org> 672