1 1999-12-30 Assar Westerlund <assar@sics.se>
3 * configure.in (krb4): use `-ldes' in tests
5 1999-12-26 Assar Westerlund <assar@sics.se>
7 * lib/hdb/print.c (event2string): handle events without principal.
8 From Luke Howard <lukeh@PADL.COM>
10 1999-12-25 Assar Westerlund <assar@sics.se>
14 Tue Dec 21 18:03:17 1999 Assar Westerlund <assar@sics.se>
16 * lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
19 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
22 * include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and
25 1999-12-20 Assar Westerlund <assar@sics.se>
29 1999-12-20 Assar Westerlund <assar@sics.se>
31 * lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1
33 * lib/krb5/send_to_kdc.c (send_via_proxy): free data
34 * lib/krb5/send_to_kdc.c (send_via_proxy): new function use
35 getaddrinfo instead of gethostbyname{,2}
36 * lib/krb5/get_for_creds.c: use getaddrinfo instead of
39 1999-12-17 Assar Westerlund <assar@sics.se>
43 1999-12-17 Assar Westerlund <assar@sics.se>
47 1999-12-16 Assar Westerlund <assar@sics.se>
49 * lib/krb5/Makefile.am: bump version to 6:2:1
51 * lib/krb5/principal.c (krb5_sname_to_principal): handle
52 ai_canonname not being set
53 * lib/krb5/expand_hostname.c (krb5_expand_hostname): handle
54 ai_canonname not being set
56 * appl/test/uu_server.c: print messages to stderr
57 * appl/test/tcp_server.c: print messages to stderr
58 * appl/test/nt_gss_server.c: print messages to stderr
59 * appl/test/gssapi_server.c: print messages to stderr
61 * appl/test/tcp_client.c (proto): remove shadowing `context'
62 * appl/test/common.c (client_doit): add forgotten ntohs
64 1999-12-13 Assar Westerlund <assar@sics.se>
66 * configure.in (VERISON): bump to 0.2g-pre
68 1999-12-12 Assar Westerlund <assar@sics.se>
70 * lib/krb5/principal.c (krb5_425_conv_principal_ext): be more
71 robust and handle extra dot at the beginning of default_domain
73 1999-12-12 Assar Westerlund <assar@sics.se>
77 1999-12-12 Assar Westerlund <assar@sics.se>
79 * lib/krb5/Makefile.am: bump version to 6:1:1
81 * lib/krb5/changepw.c (get_kdc_address): use
82 `krb5_get_krb_changepw_hst'
84 * lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add
86 * lib/krb5/get_host_realm.c: add support for _kerberos.domain
87 (according to draft-ietf-cat-krb-dns-locate-01.txt)
89 1999-12-06 Assar Westerlund <assar@sics.se>
93 1999-12-06 Assar Westerlund <assar@sics.se>
95 * lib/krb5/changepw.c (krb5_change_password): use the correct
98 * lib/krb5/Makefile.am: bump version to 6:0:1
100 * lib/asn1/Makefile.am: bump version to 1:4:0
102 1999-12-04 Assar Westerlund <assar@sics.se>
104 * configure.in: move AC_KRB_IPv6 to make sure it's performed
106 (el_init): use new feature of AC_FIND_FUNC_NO_LIBS
108 * appl/test/uu_client.c: use client_doit
109 * appl/test/test_locl.h (client_doit): add prototype
110 * appl/test/tcp_client.c: use client_doit
111 * appl/test/nt_gss_client.c: use client_doit
112 * appl/test/gssapi_client.c: use client_doit
113 * appl/test/common.c (client_doit): move identical code here and
114 start using getaddrinfo
116 * appl/kf/kf.c (doit): rewrite to use getaddrinfo
117 * kdc/hprop.c: re-write to use getaddrinfo
118 * lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo
119 * lib/krb5/expand_hostname.c (krb5_expand_hostname): use
121 * lib/krb5/changepw.c: re-write to use getaddrinfo
122 * lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo
124 1999-12-03 Assar Westerlund <assar@sics.se>
126 * configure.in (BROKEN): check for freeaddrinfo, getaddrinfo,
127 getnameinfo, gai_strerror
128 (socklen_t): check for
130 1999-12-02 Johan Danielsson <joda@pdc.kth.se>
132 * lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key
134 1999-11-23 Assar Westerlund <assar@sics.se>
136 * lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes
137 within unicode characters. this should probably be done in some
138 arbitrarly complex way to do it properly and you would have to
139 know what character encoding was used for the password and salt
142 * lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0
144 (ipv6_uninteresting): remove unused macro
146 1999-11-22 Johan Danielsson <joda@pdc.kth.se>
148 * lib/krb5/krb5.h: rc4->arcfour
150 * lib/krb5/crypto.c: rc4->arcfour
152 1999-11-17 Assar Westerlund <assar@sics.se>
154 * lib/krb5/krb5_locl.h: add <rc4.h>
155 * lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4
156 * lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might
157 not be totally different from some small company up in the
158 north-west corner of the US
160 * lib/krb5/get_addrs.c (find_all_addresses): change code to
161 actually increment buf_size
163 1999-11-14 Assar Westerlund <assar@sics.se>
165 * lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces'
166 * lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces
168 * lib/krb5/context.c (init_context_from_config_file): set
171 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c
172 * lib/krb5/add_et_list.c (krb5_add_et_list): new function
174 1999-11-12 Assar Westerlund <assar@sics.se>
176 * lib/krb5/get_default_realm.c (krb5_get_default_realm,
177 krb5_get_default_realms): set realms if they were unset
178 * lib/krb5/context.c (init_context_from_config_file): don't
179 initialize default realms here. it's done lazily instead.
181 * lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned
182 * lib/asn1/gen_glue.c (generate_2int, generate_units): make sure
183 bit constants are unsigned
184 * lib/asn1/gen.c (define_type): make length in sequences be
187 * configure.in: remove duplicate test for setsockopt test for
190 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate
191 preauthentication information if we get back ERR_PREAUTH_REQUIRED
192 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove
193 preauthentication generation code. it's now in krb5_get_in_cred
195 * configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct
196 tm.tm_gmtoff and timezone
198 1999-11-11 Johan Danielsson <joda@pdc.kth.se>
200 * kdc/main.c: make this work with multi-db
202 * kdc/kdc_locl.h: make this work with multi-db
204 * kdc/config.c: make this work with multi-db
206 1999-11-09 Johan Danielsson <joda@pdc.kth.se>
208 * kdc/misc.c: update for multi-database code
210 * kdc/main.c: update for multi-database code
212 * kdc/kdc_locl.h: update
214 * kdc/config.c: allow us to have more than one database
216 1999-11-04 Assar Westerlund <assar@sics.se>
220 * lib/krb5/Makefile.am: bump version to 5:0:0 to be safe
221 (krb5_context_data has changed and some code do (might) access
224 * lib/krb5/krb5.h (krb5_context_data): add `etypes_des'
226 * lib/krb5/get_cred.c (init_tgs_req): use
227 krb5_keytype_to_enctypes_default
229 * lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new
232 * lib/krb5/context.c (set_etypes): new function
233 (init_context_from_config_file): set both `etypes' and `etypes_des'
235 1999-11-02 Assar Westerlund <assar@sics.se>
237 * configure.in (VERSION): bump to 0.2d-pre
239 1999-10-29 Assar Westerlund <assar@sics.se>
241 * lib/krb5/principal.c (krb5_parse_name): check memory allocations
243 1999-10-28 Assar Westerlund <assar@sics.se>
247 * lib/krb5/dump_config.c (print_tree): check for empty tree
249 * lib/krb5/string-to-key-test.c (tests): update the test cases
250 with empty principals so that they actually use an empty realm and
251 not the default. use the correct etype for 3DES
253 * lib/krb5/Makefile.am: bump version to 4:1:0
255 * kdc/config.c (configure): more careful with the port string
257 1999-10-26 Assar Westerlund <assar@sics.se>
261 1999-10-20 Assar Westerlund <assar@sics.se>
263 * lib/krb5/Makefile.am: bump version to 4:0:0
264 (krb524_convert_creds_kdc and potentially some other functions
265 have changed prototypes)
267 * lib/hdb/Makefile.am: bump version to 4:0:1
269 * lib/asn1/Makefile.am: bump version to 1:3:0
271 * configure.in (LIB_roken): add dbopen. getcap in roken
272 references dbopen and with shared libraries we need to add this
275 * lib/krb5/verify_krb5_conf.c (main): support speicifying the
276 configuration file to test on the command line
278 * lib/krb5/config_file.c (parse_binding): handle line with no
280 (krb5_config_parse_file_debug): set lineno earlier so that we don't
283 * configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need
284 more include files for these tests
286 * lib/krb5/set_default_realm.c (krb5_set_default_realm): use
287 krb5_config_get_strings, which means that your configuration file
291 default_realm = realm1 realm2 realm3
293 * lib/krb5/set_default_realm.c (config_binding_to_list): fix
294 copy-o. From Michal Vocu <michal@karlin.mff.cuni.cz>
296 * kdc/config.c (configure): add a missing strdup. From Michal
297 Vocu <michal@karlin.mff.cuni.cz>
299 1999-10-17 Assar Westerlund <assar@sics.se>
303 * configure.in: only test for db.h with using berkeley_db. remember
304 to link with LIB_tgetent when checking for el_init. add xnlock
306 * appl/Makefile.am: add xnlock
308 * kdc/kerberos5.c (find_etype): support null keys
310 * kdc/kerberos4.c (get_des_key): support null keys
312 * lib/krb5/crypto.c (krb5_get_wrapped_length): more correct
315 1999-10-16 Johan Danielsson <joda@pdc.kth.se>
317 * kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc
319 1999-10-12 Johan Danielsson <joda@pdc.kth.se>
321 * lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning
323 1999-10-10 Assar Westerlund <assar@sics.se>
325 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm
327 * lib/krb5/krb5.h (krb5_ccache_data): make `ops' const
329 * lib/krb5/crypto.c (krb5_string_to_salttype): new function
331 * **/*.[ch]: const-ize
333 1999-10-06 Assar Westerlund <assar@sics.se>
335 * lib/krb5/creds.c (krb5_compare_creds): const-ify
337 * lib/krb5/cache.c: clean-up and comment-up
339 * lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the
342 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the
345 * kdc/connect.c (handle_tcp): things work much better when ret is
348 1999-10-03 Assar Westerlund <assar@sics.se>
350 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the
351 type of the session key
353 * lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell
356 * lib/krb5/creds.c (krb5_compare_creds): fix spelling of
357 krb5_enctypes_compatible_keys
359 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new
360 credentials from the KDC if the existing one doesn't have a DES
363 * lib/45/get_ad_tkt.c (get_ad_tkt): update to new
364 krb524_convert_creds_kdc
366 1999-10-03 Johan Danielsson <joda@pdc.kth.se>
368 * lib/krb5/keytab_keyfile.c: make krb5_akf_ops const
370 * lib/krb5/keytab_memory.c: make krb5_mkt_ops const
372 * lib/krb5/keytab_file.c: make krb5_fkt_ops const
374 1999-10-01 Assar Westerlund <assar@sics.se>
376 * lib/krb5/config_file.c: rewritten to allow error messages
378 * lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf
379 (libkrb5_la_SOURCES): add config_file_netinfo.c
381 * lib/krb5/verify_krb5_conf.c: new program for verifying that
384 * lib/krb5/config_file_netinfo.c: moved netinfo code here from
387 1999-09-28 Assar Westerlund <assar@sics.se>
389 * kdc/hpropd.c (dump_krb4): kludge default_realm
391 * lib/asn1/check-der.c: add test cases for Generalized time and
392 make sure we return the correct value
394 * lib/asn1/der_put.c: simplify by using der_put_length_and_tag
396 * lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of
397 krb5_verify_user that tries in all the local realms
399 * lib/krb5/set_default_realm.c: add support for having several
402 * lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms'
404 * lib/krb5/get_default_realm.c (krb5_get_default_realms): add
406 * lib/krb5/krb5.h (krb5_context_data): change `default_realm' to
409 * lib/krb5/context.c: change from `default_realm' to
412 * lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use
413 krb5_get_default_realms
415 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c
417 * lib/krb5/copy_host_realm.c: new file
419 1999-09-27 Johan Danielsson <joda@pdc.kth.se>
421 * lib/asn1/der_put.c (encode_generalized_time): encode length
423 * lib/krb5/recvauth.c: new function `krb5_recvauth_match_version'
424 that allows more intelligent matching of the application version
426 1999-09-26 Assar Westerlund <assar@sics.se>
428 * lib/asn1/asn1_print.c: add err.h
430 * kdc/config.c (configure): use parse_bytes
432 * appl/test/nt_gss_common.c: use the correct header file
434 1999-09-24 Johan Danielsson <joda@pdc.kth.se>
436 * kuser/klist.c: add a `--cache' flag
438 * kuser/kinit.c (main): only get default value for `get_v4_tgt' if
439 it's explicitly set in krb5.conf
441 1999-09-23 Assar Westerlund <assar@sics.se>
443 * lib/asn1/asn1_print.c (tag_names); add another univeral tag
445 * lib/asn1/der.h: update universal tags
447 1999-09-22 Assar Westerlund <assar@sics.se>
449 * lib/asn1/asn1_print.c (loop): print length of octet string
451 1999-09-21 Johan Danielsson <joda@pdc.kth.se>
453 * admin/ktutil.c (kt_get): add `--help'
455 1999-09-21 Assar Westerlund <assar@sics.se>
457 * kuser/Makefile.am: add kdecode_ticket
459 * kuser/kdecode_ticket.c: new debug program
461 * appl/test/nt_gss_server.c: new program to test against `Sample *
462 SSPI Code' in Windows 2000 RC1 SDK.
464 * appl/test/Makefile.am: add nt_gss_client and nt_gss_server
466 * lib/asn1/der_get.c (decode_general_string): remember to advance
467 ret over the length-len
469 * lib/asn1/Makefile.am: add asn1_print
471 * lib/asn1/asn1_print.c: new program for printing DER-structures
473 * lib/asn1/der_put.c: make functions more consistent
475 * lib/asn1/der_get.c: make functions more consistent
477 1999-09-20 Johan Danielsson <joda@pdc.kth.se>
479 * kdc/kerberos5.c: be more informative in pa-data error messages
481 1999-09-16 Assar Westerlund <assar@sics.se>
483 * configure.in: test for strlcpy, strlcat
485 1999-09-14 Assar Westerlund <assar@sics.se>
487 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return
488 KRB5_LIBOS_PWDINTR when interrupted
490 * lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return
491 value from des_read_pw_string
493 * kuser/kinit.c (main): don't print any error if reading the
494 password was interrupted
496 * kpasswd/kpasswd.c (main): don't print any error if reading the
497 password was interrupted
499 * kdc/string2key.c (main): check the return value from fgets
501 * kdc/kstash.c (main): check return value from des_read_pw_string
503 * admin/ktutil.c (kt_add): check the return-value from fgets and
504 overwrite the password for paranoid reasons
506 * lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the
507 newline if it's there
509 1999-09-13 Assar Westerlund <assar@sics.se>
511 * kdc/hpropd.c (main): remove bogus error with `--print'. remove
512 sysloging of number of principals transferred
514 * kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL
516 (main): get rid of bogus opening of hdb database when propagating
519 1999-09-12 Assar Westerlund <assar@sics.se>
521 * lib/krb5/krb5_locl.h (O_BINARY): add fallback definition
523 * lib/krb5/krb5.h (krb5_context_data): add keytab types
525 * configure.in: revert back awk test, not worked around in
528 * lib/krb5/keytab_krb4.c: remove O_BINARY
530 * lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's. From
533 * lib/krb5/keytab_file.c: remove O_BINARY
535 * lib/krb5/keytab.c: move the list of keytab types to the context
537 * lib/krb5/fcache.c: remove O_BINARY
539 * lib/krb5/context.c (init_context_from_config_file): register all
540 standard cache and keytab types
541 (krb5_free_context): free `kt_types'
543 * lib/krb5/cache.c (krb5_cc_resolve): move the registration of the
544 standard types of credential caches to context
546 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c
548 1999-09-10 Assar Westerlund <assar@sics.se>
550 * lib/krb5/keytab.c: add comments and clean-up
552 * admin/ktutil.c: add `ktutil copy'
554 * lib/krb5/keytab_krb4.c: new file
556 * lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field
558 * lib/krb5/Makefile.am: add keytab_krb4.c
560 * lib/krb5/keytab.c: add krb4 and correct some if's
562 * admin/srvconvert.c (srvconv): move common code
564 * lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables
566 * lib/krb5/keytab.c: move out file and memory functions
568 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c,
571 * lib/krb5/keytab_memory.c: new file
573 * lib/krb5/keytab_file.c: new file
575 * kpasswd/kpasswdd.c: move out password quality functions
577 1999-09-07 Assar Westerlund <assar@sics.se>
579 * lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c. From
582 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check
583 return value from `krb5_sendto_kdc'
585 1999-09-06 Assar Westerlund <assar@sics.se>
587 * lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and
588 remove the sending of data. add a parameter `limit'. let callers
589 send the date themselves (and preferably with net_write on tcp
591 (send_and_recv_tcp): read first the length field and then only that
594 1999-09-05 Assar Westerlund <assar@sics.se>
596 * kdc/connect.c (handle_tcp): try to print warning `TCP data of
597 strange type' less often
599 * lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly.
600 return on EOF. always free data. check return value from
602 (send_and_recv_tcp, send_and_recv_http): check advertised length
603 against actual length
605 1999-09-01 Johan Danielsson <joda@pdc.kth.se>
607 * configure.in: check for sgi capabilities
609 1999-08-27 Johan Danielsson <joda@pdc.kth.se>
611 * lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return
614 * kpasswd/kpasswdd.c: use HDB keytabs; change some error messages;
617 * lib/krb5/address.c (krb5_append_addresses): remove duplicates
619 1999-08-26 Johan Danielsson <joda@pdc.kth.se>
621 * lib/hdb/keytab.c: HDB keytab backend
623 1999-08-25 Johan Danielsson <joda@pdc.kth.se>
626 (krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL
629 1999-08-24 Johan Danielsson <joda@pdc.kth.se>
631 * kpasswd/kpasswdd.c: add `--keytab' flag
633 1999-08-23 Assar Westerlund <assar@sics.se>
635 * lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr'
636 instead of the non-standard `s6_addr32'. From Yoshinobu Inoue
637 <shin@kame.net> by way of the KAME repository
639 1999-08-18 Assar Westerlund <assar@sics.se>
641 * configure.in (--enable-new-des3-code): remove check for `struct
644 * lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable
645 des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards
648 * lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key
649 derivation) just got assigned etype 16 by <bcn@isi.edu>. keep the
652 1999-08-16 Assar Westerlund <assar@sics.se>
654 * lib/krb5/sendauth.c (krb5_sendauth): only look at errno if
655 krb5_net_read actually returns -1
657 * lib/krb5/recvauth.c (krb5_recvauth): only look at errno if
658 krb5_net_read actually returns -1
660 * appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't
663 * appl/test/tcp_server.c (proto): only trust errno if
664 krb5_net_read actually returns -1
666 * appl/kf/kfd.c (proto): be more careful with the return value
669 1999-08-13 Assar Westerlund <assar@sics.se>
671 * lib/krb5/get_addrs.c (get_addrs_int): try the different ways
672 sequentially instead of just one. this helps if your heimdal was
673 built with v6-support but your kernel doesn't have it, for
676 1999-08-12 Assar Westerlund <assar@sics.se>
678 * kdc/hpropd.c: add inetd flag. default means try to figure out
679 if stdin is a socket or not.
681 * Makefile.am (ACLOCAL): just use `cf', this variable is only used
682 when the current directory is $(top_srcdir) anyways and having
683 $(top_srcdir) there breaks if it's a relative path
685 1999-08-09 Johan Danielsson <joda@pdc.kth.se>
687 * configure.in: check for setproctitle
689 1999-08-05 Assar Westerlund <assar@sics.se>
691 * lib/krb5/principal.c (krb5_sname_to_principal): remember to call
694 * appl/test/tcp_client.c: call freehostent
696 * appl/kf/kf.c (doit): call freehostent
698 * appl/kf/kf.c: make v6 friendly and simplify
700 * appl/kf/kfd.c: make v6 friendly and simplify
702 * appl/test/tcp_server.c: simplify by using krb5_err instead of
705 * appl/test/tcp_client.c: simplify by using krb5_err instead of
708 * appl/test/tcp_server.c: make v6 friendly and simplify
710 * appl/test/tcp_client.c: make v6 friendly and simplify
712 1999-08-04 Assar Westerlund <assar@sics.se>
716 1999-08-04 Assar Westerlund <assar@sics.se>
718 * kuser/kinit.c (main): some more KRB4-conditionalizing
720 * lib/krb5/get_in_tkt.c: type correctness
722 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in
723 flags. From Miroslav Ruda <ruda@ics.muni.cz>
725 * kuser/kinit.c (main): add config file support for forwardable
726 and krb4 support. From Miroslav Ruda <ruda@ics.muni.cz>
728 * kdc/kerberos5.c (as_rep): add an empty X500-compress string as
730 (fix_transited_encoding): check length.
731 From Miroslav Ruda <ruda@ics.muni.cz>
733 * kdc/hpropd.c (dump_krb4): check the realm so that we don't dump
734 principals in some other realm. From Miroslav Ruda
736 (main): rename sa_len -> sin_len, sa_lan is a define on some
739 * appl/kf/kfd.c: add regpag support. From Miroslav Ruda
742 * appl/kf/kf.c: add `-G' and forwardable option in krb5.conf.
743 From Miroslav Ruda <ruda@ics.muni.cz>
745 * lib/krb5/config_file.c (parse_list): don't run past end of line
747 * appl/test/gss_common.h: new prototypes
749 * appl/test/gssapi_client.c: use gss_err instead of abort
751 * appl/test/gss_common.c (gss_verr, gss_err): add
753 1999-08-03 Assar Westerlund <assar@sics.se>
755 * lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this
756 otherwise it doesn't build with shared libraries
758 * kdc/hpropd.c: v6-ify
760 * kdc/hprop.c: v6-ify
762 1999-08-01 Assar Westerlund <assar@sics.se>
764 * lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname
766 1999-07-31 Assar Westerlund <assar@sics.se>
768 * lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new
769 function that takes a FQDN
771 * lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c
773 * lib/krb5/expand_hostname.c: new file
775 1999-07-28 Assar Westerlund <assar@sics.se>
779 1999-07-28 Assar Westerlund <assar@sics.se>
781 * lib/asn1/Makefile.am: bump version to 1:2:0
783 * lib/krb5/Makefile.am: bump version to 3:1:0
785 * configure.in: more inet_pton to roken
787 * lib/krb5/principal.c (krb5_sname_to_principal): use
790 1999-07-26 Assar Westerlund <assar@sics.se>
794 1999-07-26 Johan Danielsson <joda@pdc.kth.se>
796 * lib/krb5/Makefile.am: bump version number (changed function
799 * lib/hdb/Makefile.am: bump version number (changes to some
802 1999-07-26 Assar Westerlund <assar@sics.se>
804 * lib/krb5/Makefile.am: bump version to 3:0:2
806 * lib/hdb/Makefile.am: bump version to 2:1:0
808 * lib/asn1/Makefile.am: bump version to 1:1:0
810 1999-07-26 Assar Westerlund <assar@sics.se>
814 1999-07-26 Assar Westerlund <assar@sics.se>
816 * configure.in: rokenize inet_ntop
818 * lib/krb5/store_fd.c: lots of changes from size_t to ssize_t
820 * lib/krb5/store_mem.c: lots of changes from size_t to ssize_t
822 * lib/krb5/store_emem.c: lots of changes from size_t to ssize_t
824 * lib/krb5/store.c: lots of changes from size_t to ssize_t
825 (krb5_ret_stringz): check return value from realloc
827 * lib/krb5/mk_safe.c: some type correctness
829 * lib/krb5/mk_priv.c: some type correctness
831 * lib/krb5/krb5.h (krb5_storage): change return values of
832 functions from size_t to ssize_t
834 1999-07-24 Assar Westerlund <assar@sics.se>
838 * configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \#
839 in lib/roken/roken.awk
841 * lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to
842 step over addresses if there's no `sa_lan' field
844 * lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by
845 using `struct sockaddr_storage'
847 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using
848 `struct sockaddr_storage'
850 * lib/krb5/changepw.c (krb5_change_password): simplify by using
851 `struct sockaddr_storage'
853 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd):
854 simplify by using `struct sockaddr_storage'
856 * kpasswd/kpasswdd.c (*): simplify by using `struct
859 * kdc/connect.c (*): simplify by using `struct sockaddr_storage'
861 * configure.in (sa_family_t): just test for existence
862 (sockaddr_storage): also specify include file
864 * configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i
865 (sa_family_t): test for
866 (struct sockaddr_storage): test for
868 * kdc/hprop.c (propagate_database): typo, NULL should be
871 * lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of
874 * appl/kf/kf.c (main): use warnx
876 * appl/kf/kf.c (proto): remove shadowing context
878 * lib/krb5/get_addrs.c (find_all_addresses): try to handle the
879 case of getting back an `sockaddr_in6' address when sizeof(struct
880 sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to
881 tell us how large the address is. This obviously doesn't work
882 with unknown protocol types.
884 1999-07-24 Assar Westerlund <assar@sics.se>
888 1999-07-23 Assar Westerlund <assar@sics.se>
890 * appl/kf/kfd.c: clean-up and more paranoia
892 * etc/services.append: add kf
894 * appl/kf/kf.c: rename tk_file to ccache for consistency. clean-up
896 1999-07-22 Assar Westerlund <assar@sics.se>
898 * lib/krb5/n-fold-test.c (main): print the correct data
900 * appl/Makefile.am (SUBDIRS): add kf
902 * appl/kf: new program. From Miroslav Ruda <ruda@ics.muni.cz>
904 * kdc/hprop.c: declare some variables unconditionally to simplify
907 * kpasswd/kpasswdd.c: initialize kadm5 connection for every change
908 (otherwise the modifier in the database doesn't get set)
910 * kdc/hpropd.c: clean-up and re-organize
912 * kdc/hprop.c: clean-up and re-organize
914 * configure.in (SunOS): define to xy for SunOS x.y
916 1999-07-19 Assar Westerlund <assar@sics.se>
918 * configure.in (AC_BROKEN): test for copyhostent, freehostent,
919 getipnodebyaddr, getipnodebyname
921 1999-07-15 Assar Westerlund <assar@sics.se>
923 * lib/asn1/check-der.c: more test cases for integers
925 * lib/asn1/der_length.c (length_int): handle the case of the
926 largest negative integer by not calling abs
928 1999-07-14 Assar Westerlund <assar@sics.se>
930 * lib/asn1/check-der.c (generic_test): check malloc return value
933 * lib/krb5/Makefile.am: add string_to_key_test
935 * lib/krb5/prog_setup.c (krb5_program_setup): always initialize
938 * lib/krb5/n-fold-test.c (main): return a relevant return value
940 * lib/krb5/krbhst.c: do SRV lookups for admin server as well.
943 1999-07-12 Assar Westerlund <assar@sics.se>
945 * configure.in: handle not building X programs
947 1999-07-06 Assar Westerlund <assar@sics.se>
949 * lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate
951 (ipv6_sockaddr2port): fix typo
953 * etc/services.append: beginning of a file with services
955 * lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if
956 there's no prefix. also clean-up a little bit.
958 * kdc/hprop.c (--kaspecials): new flag for handling special KA
959 server entries. From "Brandon S. Allbery KF8NH"
960 <allbery@kf8nh.apk.net>
962 1999-07-05 Assar Westerlund <assar@sics.se>
964 * kdc/connect.c (handle_tcp): make sure we have data before
965 starting to look for HTTP
967 * kdc/connect.c (handle_tcp): always do getpeername, we can't
968 trust recvfrom to return anything sensible
970 1999-07-04 Assar Westerlund <assar@sics.se>
972 * lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with
975 * kpasswd/kpasswdd.c (change): fetch the salt-type from the entry
977 * admin/srvconvert.c (srvconv): better error messages
979 1999-07-03 Assar Westerlund <assar@sics.se>
981 * lib/krb5/principal.c (unparse_name): error check malloc properly
983 * lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc
986 * lib/krb5/crypto.c (*): do some malloc return-value checks
989 * lib/hdb/hdb.c (hdb_process_master_key): simplify by using
992 * lib/hdb/hdb.c (hdb_process_master_key): check return value from
995 * lib/asn1/gen_decode.c (decode_type): fix generation of decoding
996 information for TSequenceOf.
998 * kdc/kerberos5.c (get_pa_etype_info): check return value from
1001 1999-07-02 Assar Westerlund <assar@sics.se>
1003 * lib/asn1/der_copy.c (copy_octet_string): don't fail if length ==
1004 0 and malloc returns NULL
1006 1999-06-29 Assar Westerlund <assar@sics.se>
1008 * lib/krb5/addr_families.c (ipv6_parse_addr): implement
1010 1999-06-24 Assar Westerlund <assar@sics.se>
1012 * lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address
1015 * lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT):
1017 (krb5_auth_context): add local and remote port
1019 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the
1020 local and remote address and add them to the krb-cred packet
1022 * lib/krb5/auth_context.c: save the local and remove ports in the
1025 * lib/krb5/address.c (krb5_make_addrport): create an address of
1026 type KRB5_ADDRESS_ADDRPORT from (addr, port)
1028 * lib/krb5/addr_families.c (krb5_sockaddr2port): new function for
1029 grabbing the port number out of the sockaddr
1031 1999-06-23 Assar Westerlund <assar@sics.se>
1033 * admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key.
1034 increase possible verbosity.
1036 * lib/krb5/config_file.c (parse_list): handle blank lines at
1039 * kdc/connect.c (add_port_string): don't return a value
1041 * lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred
1042 cache if the principals are different. close and NULL the old one
1043 so that we create a new one.
1045 * configure.in: move around cgywin et al
1046 (LIB_kdb): set at the end of krb4-block
1047 (krb4): test for krb_enable_debug and krb_disable_debug
1049 1999-06-16 Assar Westerlund <assar@sics.se>
1051 * kuser/kdestroy.c (main): try to destroy v4 ticket even if the
1052 destruction of the v5 one fails
1054 * lib/krb5/crypto.c (DES3_postproc): new version that does the
1056 (*): don't put and recover length in 3DES encoding
1059 1999-06-15 Assar Westerlund <assar@sics.se>
1061 * lib/krb5/get_default_principal.c: rewrite to use
1062 get_default_username
1064 * lib/krb5/Makefile.am: add n-fold-test
1066 * kdc/connect.c: add fallbacks for all lookups by service name
1067 (handle_tcp): break-up and clean-up
1069 1999-06-09 Assar Westerlund <assar@sics.se>
1071 * lib/krb5/addr_families.c (ipv6_uninteresting): don't consider
1072 the loopback address as uninteresting
1074 * lib/krb5/get_addrs.c: new magic flag to get loopback address if
1075 there are no other addresses.
1076 (krb5_get_all_client_addrs): use that flag
1078 1999-06-04 Assar Westerlund <assar@sics.se>
1080 * lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the
1082 (checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64
1083 (encrypt_internal_derived): don't include the length and don't
1084 decrease by the checksum size twice
1085 (_get_derived_key): the constant should be 5 bytes
1087 1999-06-02 Johan Danielsson <joda@pdc.kth.se>
1089 * configure.in: use KRB_CHECK_X
1091 * configure.in: check for netinet/ip.h
1093 1999-05-31 Assar Westerlund <assar@sics.se>
1095 * kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize
1098 1999-05-23 Assar Westerlund <assar@sics.se>
1100 * appl/test/uu_server.c: removed unused stuff
1102 * appl/test/uu_client.c: removed unused stuff
1104 1999-05-21 Assar Westerlund <assar@sics.se>
1106 * kuser/kgetcred.c (main): correct error message
1108 * lib/krb5/crypto.c (verify_checksum): call (*ct->checksum)
1109 directly, avoiding redundant lookups and memory leaks
1111 * lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free
1112 local and remote addresses
1114 * lib/krb5/get_default_principal.c (get_logname): also try
1117 * lib/asn1/Makefile.am (asn1_files): add $(EXEEXT)
1119 * lib/krb5/principal.c (USE_RESOLVER): try to define only if we
1120 have a libresolv (currently by checking for res_search)
1122 1999-05-18 Johan Danielsson <joda@pdc.kth.se>
1124 * kdc/connect.c (handle_tcp): remove %-escapes in request
1126 1999-05-14 Assar Westerlund <assar@sics.se>
1130 * admin/ktutil.c (kt_remove): -t should be -e
1132 * configure.in (CHECK_NETINET_IP_AND_TCP): use
1134 * kdc/hpropd.c: support for dumping to krb4. From Miroslav Ruda
1137 * admin/ktutil.c (kt_add): new option `--no-salt'. From Miroslav
1138 Ruda <ruda@ics.muni.cz>
1140 * configure.in: add cygwin and DOS tests replace sendmsg, recvmsg,
1141 and innetgr with roken versions
1143 * kuser/kgetcred.c: new program
1145 Tue May 11 14:09:33 1999 Johan Danielsson <joda@pdc.kth.se>
1147 * lib/krb5/mcache.c: fix paste-o
1149 1999-05-10 Johan Danielsson <joda@pdc.kth.se>
1151 * configure.in: don't use uname
1153 1999-05-10 Assar Westerlund <assar@sics.se>
1155 * acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four
1158 * appl/test/uu_server.c (setsockopt): cast to get rid of a warning
1160 * appl/test/tcp_server.c (setsockopt): cast to get rid of a
1163 * appl/test/tcp_client.c (proto): call krb5_sendauth with ccache
1166 * appl/test/gssapi_server.c (setsockopt): cast to get rid of a
1169 * lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by
1170 setting the default ccache.
1172 * configure.in (getsockopt, setsockopt): test for
1173 (AM_INIT_AUTOMAKE): bump version to 0.1g
1175 * appl/Makefile.am (SUBDIRS): add kx
1177 * lib/hdb/convert_db.c (main): handle the case of no master key
1179 1999-05-09 Assar Westerlund <assar@sics.se>
1183 * kuser/kinit.c: add --noaddresses
1185 * lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an
1186 empty sit of list as to not ask for any addresses.
1188 1999-05-08 Assar Westerlund <assar@sics.se>
1190 * acconfig.h (_GNU_SOURCE): define this to enable (used)
1191 extensions on glibc-based systems such as linux
1193 1999-05-03 Assar Westerlund <assar@sics.se>
1195 * lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free
1196 `*out_creds' properly
1198 * lib/krb5/creds.c (krb5_compare_creds): just verify that the
1199 keytypes/enctypes are compatible, not that they are the same
1201 * kuser/kdestroy.c (cache): const-correctness
1203 1999-05-03 Johan Danielsson <joda@pdc.kth.se>
1205 * lib/hdb/hdb.c (hdb_set_master_key): initialise master key
1208 * lib/hdb/convert_db.c: add support for upgrading database
1211 * kdc/misc.c: add flags to fetch
1213 * kdc/kstash.c: unlink keyfile on failure, chmod to 400
1215 * kdc/hpropd.c: add --print option
1217 * kdc/hprop.c: pass flags to hdb_foreach
1219 * lib/hdb/convert_db.c: add some flags
1221 * lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2;
1222 build prototype headers
1224 * lib/hdb/hdb_locl.h: update prototypes
1226 * lib/hdb/print.c: move printable version of entry from kadmin
1228 * lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is
1229 sealed or not; add flags to hdb_foreach
1231 * lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and
1234 * lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey
1236 * lib/hdb/common.c: add flags to _hdb_{fetch,store}
1238 * lib/hdb/hdb.h: add master_key_version to struct hdb, update
1241 * lib/hdb/hdb.asn1: make mkvno optional, update version to 2
1243 * configure.in: --enable-netinfo
1245 * lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO
1247 * config.sub: fix for crays
1249 * config.guess: new version from automake 1.4
1251 * config.sub: new version from automake 1.4
1253 Wed Apr 28 00:21:17 1999 Assar Westerlund <assar@sics.se>
1257 * lib/krb5/mcache.c (mcc_get_next): get the current cursor
1260 * acconfig.h: correct definition of KRB_PUT_INT for old krb4 code.
1261 From Ake Sandgren <ake@cs.umu.se>
1263 1999-04-27 Johan Danielsson <joda@pdc.kth.se>
1265 * kdc/kerberos5.c: fix arguments to decrypt_ticket
1267 1999-04-25 Assar Westerlund <assar@sics.se>
1269 * lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old
1270 DCE secd's that are not able to handle MD5 checksums by defaulting
1271 to MD4 if the keytype was DES-CBC-CRC
1273 * lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype
1275 * lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and
1278 * lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for
1280 (init_tgs_req): add all supported enctypes for the keytype in
1281 `in_creds->session.keytype' if it's set
1283 * lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol
1285 (do_checksum): new function
1286 (verify_checksum): take the checksum to use from the checksum message
1287 and not from the crypto struct
1288 (etypes): add F_PSEUDO flags
1289 (krb5_keytype_to_enctypes): new function
1291 * lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype
1293 (krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement
1294 (krb5_auth_setkeytype, krb5_auth_getkeytype): implement
1295 (krb5_auth_setenctype): comment out, it's rather bogus anyway
1297 Sun Apr 25 16:55:50 1999 Johan Danielsson <joda@pdc.kth.se>
1299 * lib/krb5/krb5_locl.h: fix for stupid aix warnings
1301 * lib/krb5/fcache.c (erase_file): don't malloc
1303 Sat Apr 24 18:35:21 1999 Johan Danielsson <joda@pdc.kth.se>
1305 * kdc/config.c: pass context to krb5_config_file_free
1307 * kuser/kinit.c: add `--fcache-version' to set cache version to
1310 * kuser/klist.c: print cache version if verbose
1312 * lib/krb5/transited.c (krb5_domain_x500_decode): don't abort
1314 * lib/krb5/principal.c: abort -> krb5_abortx
1316 * lib/krb5/mk_rep.c: abort -> krb5_abortx
1318 * lib/krb5/config_file.c: abort -> krb5_abortx
1320 * lib/krb5/context.c (init_context_from_config_file): init
1321 fcache_version; add krb5_{get,set}_fcache_version
1323 * lib/krb5/keytab.c: add support for reading (and writing?) old
1326 * lib/krb5/cache.c: add krb5_cc_get_version
1328 * lib/krb5/fcache.c: add support for reading and writing old
1331 * lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags
1333 * lib/krb5/store_emem.c (krb5_storage_emem): zero flags
1335 * lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags
1337 * lib/krb5/store.c: add flags to change how various fields are
1338 stored, used for old cache version support
1340 * lib/krb5/krb5.h: add support for reading and writing old version
1341 cache files, and keytabs
1343 Wed Apr 21 00:09:26 1999 Assar Westerlund <assar@sics.se>
1345 * configure.in: fix test for readline.h remember to link with
1346 $LIB_tgetent when trying linking with readline
1348 * lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time
1349 is given, request a postdated ticket.
1351 * lib/krb5/data.c (krb5_data_free): free data as long as it's not
1354 Tue Apr 20 20:18:14 1999 Assar Westerlund <assar@sics.se>
1356 * kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen
1358 * lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add
1360 * lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and
1361 KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is
1364 Tue Apr 20 12:42:08 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1366 * kpasswd/kpasswdd.c: don't try to load library by default; get
1367 library and function name from krb5.conf
1369 * kpasswd/sample_passwd_check.c: sample password checking
1372 Mon Apr 19 22:22:19 1999 Assar Westerlund <assar@sics.se>
1374 * lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use
1375 krb5_data_alloc and be careful with checking allocation and sizes.
1377 * kuser/klist.c (--tokens): conditionalize on KRB4
1379 * kuser/kinit.c (renew_validate): set all flags
1380 (main): fix cut-n-paste error when setting start-time
1382 * kdc/kerberos5.c (check_tgs_flags): starttime of a validate
1383 ticket should be > than current time
1384 (*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket
1386 * kuser/kinit.c (renew_validate): use the client realm instead of
1387 the local realm when renewing tickets.
1389 * lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function
1390 (krb5_get_forwarded_creds): correct freeing of out_creds
1392 * kuser/kinit.c (renew_validate): hopefully fix up freeing of
1395 * configure.in: do all the krb4 tests with "$krb4" != "no"
1397 * lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero
1398 keyvalue if it's NULL. noticed by Ake Sandgren <ake@cs.umu.se>
1400 * lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes
1401 instead of just taking the first one. fix all callers. From
1402 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1404 * kdc/kdc_locl.h (enable_kaserver): declaration
1406 * kdc/hprop.c (ka_convert): print the failing principal. AFS 3.4a
1407 creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around. From
1408 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1410 * kdc/hpropd.c (open_socket): stupid cast to get rid of a warning
1412 * kdc/connect.c (add_standard_ports, process_request): look at
1413 enable_kaserver. From "Brandon S. Allbery KF8NH"
1414 <allbery@kf8nh.apk.net>
1416 * kdc/config.c: new flag --kaserver and config file option
1417 enable-kaserver. From "Brandon S. Allbery KF8NH"
1418 <allbery@kf8nh.apk.net>
1420 Mon Apr 19 12:32:04 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1422 * configure.in: check for dlopen, and dlfcn.h
1424 * kpasswd/kpasswdd.c: add support for dlopen:ing password quality
1427 * configure.in: add appl/su
1429 Sun Apr 18 15:46:53 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1431 * lib/krb5/cache.c: add krb5_cc_get_type that returns type of a
1434 Fri Apr 16 17:58:51 1999 Assar Westerlund <assar@sics.se>
1436 * configure.in: LIB_kdb: -L should be before -lkdb
1437 test for prototype of strsep
1439 Thu Apr 15 11:34:38 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1441 * lib/krb5/Makefile.am: update version
1443 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use
1446 * lib/krb5/fcache.c: add some support for reading and writing old
1448 (fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use
1451 * lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc,
1452 initialize host_byteorder
1454 * lib/krb5/store_fd.c (krb5_storage_from_fd): initialize
1457 * lib/krb5/store_emem.c (krb5_storage_emem): initialize
1460 * lib/krb5/store.c (krb5_storage_set_host_byteorder): add;
1461 (krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16):
1462 check host_byteorder flag; (krb5_store_creds): add;
1463 (krb5_ret_creds): add
1465 * lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for
1468 * lib/krb5/heim_err.et: add `host not found' error
1470 * kdc/connect.c: don't use data after clearing decriptor
1472 * lib/krb5/auth_context.c: abort -> krb5_abortx
1474 * lib/krb5/warn.c: add __attribute__; add *abort functions
1476 * configure.in: check for __attribute__
1478 * kdc/connect.c: log bogus requests
1480 Tue Apr 13 18:38:05 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1482 * lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts
1485 1999-04-12 Assar Westerlund <assar@sics.se>
1487 * lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit
1489 * lib/krb5/get_cred.c (init_tgs_req): some more error checking
1491 * lib/krb5/generate_subkey.c (krb5_generate_subkey): check return
1494 Sun Apr 11 03:47:23 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1496 * lib/krb5/krb5.conf.5: update to reality
1498 * lib/krb5/krb5_425_conv_principal.3: update to reality
1500 1999-04-11 Assar Westerlund <assar@sics.se>
1502 * lib/krb5/get_host_realm.c: handle more than one realm for a host
1504 * kpasswd/kpasswd.c (main): use krb5_program_setup and
1507 * kdc/string2key.c (main): use krb5_program_setup and
1510 Sun Apr 11 02:35:58 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1512 * lib/krb5/principal.c (krb5_524_conv_principal): make it actually
1513 work, and check built-in list of host-type first-components
1515 * lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm
1517 * lib/krb5/context.c: add srv_* flags to context
1519 * lib/krb5/principal.c: add default v4_name_convert entries
1521 * lib/krb5/krb5.h: add srv_* flags to context
1523 Sat Apr 10 22:52:28 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1525 * kadmin/kadmin.c: complain about un-recognised commands
1527 * admin/ktutil.c: complain about un-recognised commands
1529 Sat Apr 10 15:41:49 1999 Assar Westerlund <assar@sics.se>
1531 * kadmin/load.c (doit): fix error message
1533 * lib/krb5/crypto.c (encrypt_internal): free checksum if lengths
1535 (krb5_get_wrapped_length): new function
1537 * configure.in: security/pam_modules.h: check for
1539 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge
1540 around `ret_as_reply' semantics by only freeing it when ret == 0
1542 Fri Apr 9 20:24:04 1999 Assar Westerlund <assar@sics.se>
1544 * kuser/klist.c (print_cred_verbose): handle the case of a bad
1547 * configure.in: test for more header files
1550 Thu Apr 8 15:01:59 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1552 * configure.in: fixes for building w/o krb4
1554 * ltmain.sh: update to libtool 1.2d
1556 * ltconfig: update to libtool 1.2d
1558 Wed Apr 7 23:37:26 1999 Assar Westerlund <assar@sics.se>
1560 * kdc/hpropd.c: fix some error messages to be more understandable.
1562 * kdc/hprop.c (ka_dump): remove unused variables
1564 * appl/test/tcp_server.c: remove unused variables
1566 * appl/test/gssapi_server.c: remove unused variables
1568 * appl/test/gssapi_client.c: remove unused variables
1570 Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1572 * lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code
1574 * kuser/klist.c: make it compile w/o krb4
1576 * kuser/kdestroy.c: make it compile w/o krb4
1578 * admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help
1581 Mon Apr 5 16:13:46 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1583 * configure.in: test for MIPS ABI; new test_package
1585 Thu Apr 1 11:00:40 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1587 * include/Makefile.am: clean krb5-private.h
1591 * kpasswd/kpasswdd.c (doit): pass context to
1592 krb5_get_all_client_addrs
1594 * kdc/connect.c (init_sockets): pass context to
1595 krb5_get_all_server_addrs
1597 * lib/krb5/get_in_tkt.c (init_as_req): pass context to
1598 krb5_get_all_client_addrs
1600 * lib/krb5/get_cred.c (get_cred_kdc_la): pass context to
1601 krb5_get_all_client_addrs
1603 * lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses
1605 * lib/krb5/krb5.h: add support for adding an extra set of
1608 * lib/krb5/context.c: add support for adding an extra set of
1611 * lib/krb5/addr_families.c: add krb5_parse_address
1613 * lib/krb5/address.c: krb5_append_addresses
1615 * lib/krb5/config_file.c (parse_binding): don't zap everything
1616 after first whitespace
1618 * kuser/kinit.c (renew_validate): don't allocate out
1620 * lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
1623 * lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make
1625 (krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags):
1628 * lib/krb5/crypto.c (encrypt_internal): free checksum
1630 * lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply,
1633 * kuser/Makefile.am: remove kfoo
1635 * lib/Makefile.am: add auth
1637 * lib/kadm5/iprop.h: getarg.h
1639 * lib/kadm5/replay_log.c: use getarg
1641 * lib/kadm5/ipropd_slave.c: use getarg
1643 * lib/kadm5/ipropd_master.c: use getarg
1645 * lib/kadm5/dump_log.c: use getarg
1647 * kpasswd/kpasswdd.c: use getarg
1649 * Makefile.am.common: make a more working check-local target
1651 * lib/asn1/main.c: use getargs
1653 Mon Mar 29 20:19:57 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1655 * kuser/klist.c (print_cred_verbose): use krb5_print_address
1657 * lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int
1659 * lib/krb5/addr_families.c (krb5_print_address): handle unknown
1660 address types; (ipv6_print_addr): print in 16-bit groups (as it
1663 * lib/krb5/crc.c: crc_{init_table,update} ->
1664 _krb5_crc_{init_table,update}
1666 * lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int
1667 crc_{init_table,update} -> _krb5_crc_{init_table,update}
1669 * lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int
1671 * lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int
1673 * lib/krb5/krb5_locl.h: include krb5-private.h
1675 * kdc/connect.c (addr_to_string): use krb5_print_address
1677 * lib/krb5/addr_families.c (krb5_print_address): int -> size_t
1679 * lib/krb5/addr_families.c: add support for printing ipv6
1680 addresses, either with inet_ntop, or ugly for-loop
1682 * kdc/524.c: check that the ticket came from a valid address; use
1683 the address of the connection as the address to put in the v4
1684 ticket (if this address is AF_INET)
1686 * kdc/connect.c: pass addr to do_524
1688 * kdc/kdc_locl.h: prototype for do_524
1690 Sat Mar 27 17:48:31 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1692 * configure.in: check for OSF C2; bind/bitypes.h, getudbnam,
1693 setlim; check for auth modules; siad.h, getpwnam_r;
1694 lib/auth/Makefile, lib/auth/sia/Makefile
1696 * lib/krb5/crypto.c: n_fold -> _krb5_n_fold
1698 * lib/krb5/n-fold.c: n_fold -> _krb5_n_fold
1700 Thu Mar 25 04:35:21 1999 Assar Westerlund <assar@sics.se>
1702 * lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping
1705 * lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data'
1707 * lib/hdb/ndbm.c (NDBM_destroy): clear master key
1709 * lib/hdb/db.c (DB_destroy): clear master key
1710 (DB_open): check malloc
1712 * kdc/connect.c (init_sockets): free addresses
1714 * kadmin/kadmin.c (main): make code more consistent. always free
1715 configuration information.
1717 * kadmin/init.c (create_random_entry): free the entry
1719 Wed Mar 24 04:02:03 1999 Assar Westerlund <assar@sics.se>
1721 * lib/krb5/init_creds_pw.c (krb5_get_init_creds_password):
1722 re-organize the code to always free `kdc_reply'
1724 * lib/krb5/get_in_tkt.c (krb5_get_in_cred): be more careful about
1727 * lib/krb5/fcache.c (fcc_destroy): don't call fcc_close
1729 * lib/krb5/crypto.c (krb5_crypto_destroy): free `crypto'
1731 * lib/hdb/hdb_locl.h: try db_185.h first in case db.h is a DB 2.0
1734 * configure.in (db_185.h): check for
1736 * admin/srvcreate.c: new file. contributed by Daniel Kouril
1737 <kouril@informatics.muni.cz>
1739 * admin/ktutil.c: srvcreate: new command
1741 * kuser/klist.c: add support for printing AFS tokens
1743 * kuser/kdestroy.c: add support for destroying v4 tickets and AFS
1744 tokens. based on code by Love <lha@stacken.kth.se>
1746 * kuser/Makefile.am (kdestroy_LDADD, klist_LDADD): more libraries
1748 * configure.in: sys/ioccom.h: test for
1750 * kuser/klist.c (main): don't print `no ticket file' with --test.
1751 From: Love <lha@e.kth.se>
1753 * kpasswd/kpasswdd.c (doit): more braces to make gcc happy
1755 * kdc/connect.c (init_socket): get rid of a stupid warning
1757 * include/bits.c (my_strupr): cast away some stupid warnings
1759 Tue Mar 23 14:34:44 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1761 * lib/krb5/get_host_realm.c (krb5_get_host_realm): no infinite
1764 Tue Mar 23 00:00:45 1999 Assar Westerlund <assar@sics.se>
1766 * lib/kadm5/Makefile.am (install_build_headers): recover from make
1767 rewriting the names of the headers kludge to help solaris make
1769 * lib/krb5/Makefile.am: kludge to help solaris make
1771 * lib/hdb/Makefile.am: kludge to help solaris make
1773 * configure.in (LIB_kdb): make sure there's a -L option in here by
1776 * lib/asn1/gen_glue.c (generate_2int, generate_int2): int ->
1779 * configure.in (SunOS): set to a number KRB4, KRB5 conditionals:
1780 remove the `dnl' to work around an automake flaw
1782 Sun Mar 21 15:08:49 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1784 * lib/krb5/get_default_realm.c: char* -> krb5_realm
1786 Sun Mar 21 14:08:30 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1788 * include/bits.c: <bind/bitypes.h>
1790 * lib/krb5/Makefile.am: create krb5-private.h
1792 Sat Mar 20 00:08:59 1999 Assar Westerlund <assar@sics.se>
1794 * configure.in (gethostname): remove duplicate
1796 Fri Mar 19 14:48:03 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1798 * lib/hdb/Makefile.am: add version-info
1800 * lib/gssapi/Makefile.am: add version-info
1802 * lib/asn1/Makefile.am: use $(x:y=z) make syntax; move check-der
1805 * lib/Makefile.am: add 45
1807 * lib/kadm5/Makefile.am: split in client and server libraries
1808 (breaks shared libraries otherwise)
1810 Thu Mar 18 11:33:30 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1812 * include/kadm5/Makefile.am: clean a lot of header files (since
1813 automake lacks a clean-hook)
1815 * include/Makefile.am: clean a lot of header files (since automake
1818 * lib/kadm5/Makefile.am: fix build-installation of headers
1820 * lib/krb5/Makefile.am: remove include_dir hack
1822 * lib/hdb/Makefile.am: remove include_dir hack
1824 * lib/asn1/Makefile.am: remove include_dir hack
1826 * include/Makefile.am: remove include_dir hack
1828 * doc/whatis.texi: define sub for html
1830 * configure.in: LIB_kdb, have_err_h, have_fnmatch_h, have_glob_h
1832 * lib/asn1/Makefile.am: der.h
1834 * kpasswd/kpasswdd.c: admin.h -> kadm5/admin.h
1836 * kdc/Makefile.am: remove junk
1838 * kadmin/Makefile.am: sl.a -> sl.la
1840 * appl/afsutil/Makefile.am: remove EXTRA_bin_PROGRAMS
1842 * admin/Makefile.am: sl.a -> sl.la
1844 * configure.in: condition KRB5; AC_CHECK_XAU
1846 * Makefile.am: include Makefile.am.common
1848 * include/kadm5/Makefile.am: include Makefile.am.common; don't
1849 install headers from here
1851 * include/Makefile.am: include Makefile.am.common; don't install
1854 * doc/Makefile.am: include Makefile.am.common
1856 * lib/krb5/Makefile.am: include Makefile.am.common
1858 * lib/kadm5/Makefile.am: include Makefile.am.common
1860 * lib/hdb/Makefile.am: include Makefile.am.common
1862 * lib/gssapi/Makefile.am: include Makefile.am.common
1864 * lib/asn1/Makefile.am: include Makefile.am.common
1866 * lib/Makefile.am: include Makefile.am.common
1868 * lib/45/Makefile.am: include Makefile.am.common
1870 * kuser/Makefile.am: include Makefile.am.common
1872 * kpasswd/Makefile.am: include Makefile.am.common
1874 * kdc/Makefile.am: include Makefile.am.common
1876 * kadmin/Makefile.am: include Makefile.am.common
1878 * appl/test/Makefile.am: include Makefile.am.common
1880 * appl/afsutil/Makefile.am: include Makefile.am.common
1882 * appl/Makefile.am: include Makefile.am.common
1884 * admin/Makefile.am: include Makefile.am.common
1886 Wed Mar 17 03:04:38 1999 Assar Westerlund <assar@sics.se>
1888 * lib/krb5/store.c (krb5_store_stringz): braces fix
1890 * lib/kadm5/get_s.c (kadm5_s_get_principal): braces fix
1892 * lib/kadm5/ent_setup.c (_kadm5_setup_entry): braces fix
1894 * kdc/connect.c (loop): braces fix
1896 * lib/krb5/config_file.c: cast to unsigned char to make is* happy
1898 * lib/krb5/log.c (krb5_addlog_dest): more braces to make gcc happy
1900 * lib/krb5/crypto.c (krb5_verify_checksum): rename C -> cksum to
1903 * kadmin/util.c (timeval2str): more braces to make gcc happy
1905 * kadmin/load.c: cast in is* to get rid of stupid warning
1907 * kadmin/dump.c (append_hex): cast in isalnum to get rid of stupid
1910 * kdc/kaserver.c: malloc checks and fixes
1912 * lib/krb5/get_host_realm.c (krb5_get_host_realm): include leading
1913 dot (if any) when looking up realms.
1915 Fri Mar 12 13:57:56 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1917 * lib/krb5/get_host_realm.c: add dns support
1919 * lib/krb5/set_default_realm.c: use krb5_free_host_realm
1921 * lib/krb5/free_host_realm.c: check for NULL realmlist
1923 * lib/krb5/context.c: don't print warning if there is no krb5.conf
1925 Wed Mar 10 19:29:46 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1927 * configure.in: use AC_WFLAGS
1929 Mon Mar 8 11:49:43 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1933 * kuser/klist.c: use print_version
1935 * kuser/kdestroy.c: use print_version
1937 * kdc/hpropd.c: use print_version
1939 * kdc/hprop.c: use print_version
1941 * kdc/config.c: use print_version
1943 * kadmin/kadmind.c: use print_version
1945 * kadmin/kadmin.c: use print_version
1947 * appl/test/common.c: use print_version
1949 * appl/afsutil/afslog.c: use print_version
1951 Mon Mar 1 10:49:14 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1953 * lib/krb5/get_addrs.c: SOCKADDR_HAS_SA_LEN ->
1954 HAVE_STRUCT_SOCKADDR_SA_LEN
1956 * configure.in, acconfig.h, cf/*: update to automake 1.4/autoconf 2.13
1958 Sun Feb 28 18:19:20 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1960 * lib/asn1/gen.c: make `BIT STRING's unsigned
1962 * lib/asn1/{symbol.h,gen.c}: add TUInteger type
1964 * lib/krb5/verify_user.c (krb5_verify_user): pass prompter to
1965 krb5_get_init_creds_password
1967 * lib/krb5/fcache.c (fcc_gen_new): implement
1969 Sat Feb 27 22:41:23 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1971 * doc/install.texi: krb4 is now automatically detected
1973 * doc/misc.texi: update procedure to set supported encryption
1976 * doc/setup.texi: change some silly wordings
1978 Sat Feb 27 22:17:30 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
1980 * lib/krb5/keytab.c (fkt_remove_entry): make this work
1982 * admin/ktutil.c: add minimally working `get' command
1984 Sat Feb 27 19:44:49 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1986 * lib/hdb/convert_db.c: more typos
1988 * include/Makefile.am: remove EXTRA_DATA (as of autoconf
1991 * appl/Makefile.am: OTP_dir
1993 Fri Feb 26 17:37:00 1999 Johan Danielsson <joda@hella.pdc.kth.se>
1995 * doc/setup.texi: add kadmin section
1997 * lib/asn1/check-der.c: fix printf warnings
1999 Thu Feb 25 11:16:49 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2001 * configure.in: -O does not belong in WFLAGS
2003 Thu Feb 25 11:05:57 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2005 * lib/asn1/der_put.c: fix der_put_int
2007 Tue Feb 23 20:35:12 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2009 * configure.in: use AC_BROKEN_GLOB
2011 Mon Feb 22 15:12:44 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2013 * configure.in: check for glob
2015 Mon Feb 22 11:32:42 1999 Johan Danielsson <joda@hella.pdc.kth.se>
2019 Sat Feb 20 15:48:06 1999 Johan Danielsson <joda@blubb.pdc.kth.se>
2021 * lib/hdb/convert_db.c: convert DES3 keys to des3-cbc-sha1, and
2024 * lib/krb5/crypto.c (DES3_string_to_key): make this actually do
2025 what the draft said it should
2027 * lib/hdb/convert_db.c: little program for database conversion
2029 * lib/hdb/db.c (DB_open): try to open database w/o .db extension
2031 * lib/hdb/ndbm.c (NDBM_open): add test for database format
2033 * lib/hdb/db.c (DB_open): add test for database format
2035 * lib/asn1/gen_glue.c (generate_2int): don't depend on flags being
2038 * lib/hdb/hdb.c: change `hdb_set_master_key' to take an
2039 EncryptionKey, and add a new function `hdb_set_master_keyfile' to
2040 do what `hdb_set_master_key' used to do
2042 * kdc/kstash.c: add `--convert-file' option to change keytype of
2043 existing master key file
2045 Fri Feb 19 07:04:14 1999 Assar Westerlund <assar@squid.pdc.kth.se>
2049 Sat Feb 13 17:12:53 1999 Assar Westerlund <assar@sics.se>
2051 * lib/krb5/mk_safe.c (krb5_mk_safe): sizeof(buf) -> buf_size, buf
2054 * lib/krb5/get_in_tkt.c (krb5_init_etype): etypes are now `int'
2056 * lib/krb5/get_host_realm.c (krb5_get_host_realm): constize
2059 (krb5_salttype_to_string): new function (RSA_MD5_DES_verify,
2060 RSA_MD5_DES3_verify): initialize ret
2062 * lib/gssapi/init_sec_context.c (init_auth): remove unnecessary
2063 gssapi_krb5_init. ask for KEYTYPE_DES credentials
2065 * kadmin/get.c (print_entry_long): print the keytypes and salts
2066 available for the principal
2068 * configure.in (WFLAGS): add `-O' to catch unitialized variables
2070 (gethostname, mkstemp, getusershell, inet_aton): more tests
2072 * lib/hdb/hdb.h: update prototypes
2074 * configure.in: homogenize broken detection with krb4
2076 * lib/kadm5/init_c.c (kadm5_c_init_with_context): remove unused
2079 * lib/asn1/Makefile.am (check-der): add
2081 * lib/asn1/gen.c (define_type): map ASN1 Integer to `int' instead
2084 * lib/asn1/der_length.c (length_unsigned): new function
2085 (length_int): handle signed integers
2087 * lib/asn1/der_put.c (der_put_unsigned): new function
2088 (der_put_int): handle signed integers
2090 * lib/asn1/der_get.c (der_get_unsigned): new function
2091 (der_get_int): handle signed integers
2093 * lib/asn1/der.h: all integer functions take `int' instead of
2096 * lib/asn1/lex.l (filename): unused. remove.
2098 * lib/asn1/check-der.c: new test program for der encoding and
2101 Mon Feb 1 04:09:06 1999 Assar Westerlund <assar@sics.se>
2103 * lib/krb5/send_to_kdc.c (krb5_sendto_kdc): only call
2104 gethostbyname2 with AF_INET6 if we actually have IPv6. From
2105 "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
2107 * lib/krb5/changepw.c (get_kdc_address): dito
2109 Sun Jan 31 06:26:36 1999 Assar Westerlund <assar@sics.se>
2111 * kdc/connect.c (parse_prots): always bind to AF_INET, there are
2112 v6-implementations without support for `mapped V4 addresses'.
2113 From Jun-ichiro itojun Hagino <itojun@kame.net>
2115 Sat Jan 30 22:38:27 1999 Assar Westerlund <assar@juguete.sics.se>
2119 Sat Jan 30 13:43:02 1999 Assar Westerlund <assar@sics.se>
2121 * lib/krb5/Makefile.am: explicit rules for *.et files
2123 * lib/kadm5/init_c.c (get_kadm_ticket): only remove creds if
2124 krb5_get_credentials was succesful.
2125 (get_new_cache): return better error codes and return earlier.
2126 (get_cred_cache): only delete default_client if it's different
2128 (kadm5_c_init_with_context): return a more descriptive error.
2130 * kdc/kerberos5.c (check_flags): handle NULL client or server
2132 * lib/krb5/sendauth.c (krb5_sendauth): return the error in
2133 `ret_error' iff != NULL
2135 * lib/krb5/rd_error.c (krb5_free_error, krb5_free_error_contents):
2138 * lib/krb5/mk_req_ext.c (krb5_mk_req_extended): more
2141 * lib/krb5/krb5.h (krb5_error): typedef to KRB_ERROR
2143 * lib/krb5/init_creds_pw.c: KRB5_TGS_NAME: use
2145 * lib/krb5/get_cred.c: KRB5_TGS_NAME: use
2147 * lib/kafs/afskrb5.c (afslog_uid_int): update to changes
2149 * lib/kadm5/rename_s.c (kadm5_s_rename_principal): call remove
2150 instead of rename, but shouldn't this just call rename?
2152 * lib/kadm5/get_s.c (kadm5_s_get_principal): always return an
2153 error if the principal wasn't found.
2155 * lib/hdb/ndbm.c (NDBM_seq): unseal key
2157 * lib/hdb/db.c (DB_seq): unseal key
2159 * lib/asn1/Makefile.am: added explicit rules for asn1_err.[ch]
2161 * kdc/hprop.c (v4_prop): add krbtgt/THISREALM@OTHERREALM when
2162 finding cross-realm tgts in the v4 database
2164 * kadmin/mod.c (mod_entry): check the number of arguments. check
2165 that kadm5_get_principal worked.
2167 * lib/krb5/keytab.c (fkt_remove_entry): remove KRB5_KT_NOTFOUND if
2168 we weren't able to remove it.
2170 * admin/ktutil.c: less drive-by-deleting. From Love
2173 * kdc/connect.c (parse_ports): copy the string before mishandling
2176 * kdc/kerberos5.c (tgs_rep2): print the principal with mismatching
2179 * kadmin/kadmind.c (main): convert `debug_port' to network byte
2182 * kadmin/kadmin.c: allow specification of port number.
2184 * lib/kadm5/kadm5_locl.h (kadm5_client_context): add
2187 * lib/kadm5/init_c.c (_kadm5_c_init_context): move up
2188 initalize_kadm5_error_table_r.
2189 allow specification of port number.
2191 From Love <lha@stacken.kth.se>
2193 * kuser/klist.c: add option -t | --test