PageRenderTime 36ms CodeModel.GetById 17ms app.highlight 9ms RepoModel.GetById 1ms app.codeStats 1ms

/crypto/heimdal/ChangeLog.1999

https://bitbucket.org/freebsd/freebsd-head/
Unknown | 2194 lines | 1313 code | 881 blank | 0 comment | 0 complexity | 7049c6291fca799d4eeaae8447e21b64 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

   11999-12-30  Assar Westerlund  <assar@sics.se>
   2
   3	* configure.in (krb4): use `-ldes' in tests
   4
   51999-12-26  Assar Westerlund  <assar@sics.se>
   6
   7	* lib/hdb/print.c (event2string): handle events without principal.
   8  	From Luke Howard <lukeh@PADL.COM>
   9
  101999-12-25  Assar Westerlund  <assar@sics.se>
  11
  12	* Release 0.2j
  13
  14Tue Dec 21 18:03:17 1999  Assar Westerlund  <assar@sics.se>
  15
  16	* lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
  17 	related systems
  18
  19	* lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
  20 	related systems
  21
  22	* include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and
  23 	related systems
  24
  251999-12-20  Assar Westerlund  <assar@sics.se>
  26
  27	* Release 0.2i
  28
  291999-12-20  Assar Westerlund  <assar@sics.se>
  30
  31	* lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1
  32
  33	* lib/krb5/send_to_kdc.c (send_via_proxy): free data
  34	* lib/krb5/send_to_kdc.c (send_via_proxy): new function use
  35	getaddrinfo instead of gethostbyname{,2}
  36	* lib/krb5/get_for_creds.c: use getaddrinfo instead of
  37	getnodebyname{,2}
  38
  391999-12-17  Assar Westerlund  <assar@sics.se>
  40
  41	* Release 0.2h
  42
  431999-12-17  Assar Westerlund  <assar@sics.se>
  44
  45	* Release 0.2g
  46
  471999-12-16  Assar Westerlund  <assar@sics.se>
  48
  49	* lib/krb5/Makefile.am: bump version to 6:2:1
  50
  51	* lib/krb5/principal.c (krb5_sname_to_principal): handle
  52	ai_canonname not being set
  53	* lib/krb5/expand_hostname.c (krb5_expand_hostname): handle
  54	ai_canonname not being set
  55
  56	* appl/test/uu_server.c: print messages to stderr
  57	* appl/test/tcp_server.c: print messages to stderr
  58	* appl/test/nt_gss_server.c: print messages to stderr
  59	* appl/test/gssapi_server.c: print messages to stderr
  60
  61	* appl/test/tcp_client.c (proto): remove shadowing `context'
  62	* appl/test/common.c (client_doit): add forgotten ntohs
  63
  641999-12-13  Assar Westerlund  <assar@sics.se>
  65
  66	* configure.in (VERISON): bump to 0.2g-pre
  67
  681999-12-12  Assar Westerlund  <assar@sics.se>
  69
  70	* lib/krb5/principal.c (krb5_425_conv_principal_ext): be more
  71 	robust and handle extra dot at the beginning of default_domain
  72
  731999-12-12  Assar Westerlund  <assar@sics.se>
  74
  75	* Release 0.2f
  76
  771999-12-12  Assar Westerlund  <assar@sics.se>
  78
  79	* lib/krb5/Makefile.am: bump version to 6:1:1
  80	
  81	* lib/krb5/changepw.c (get_kdc_address): use
  82 	`krb5_get_krb_changepw_hst'
  83
  84	* lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add
  85
  86	* lib/krb5/get_host_realm.c: add support for _kerberos.domain
  87 	(according to draft-ietf-cat-krb-dns-locate-01.txt)
  88
  891999-12-06  Assar Westerlund  <assar@sics.se>
  90
  91	* Release 0.2e
  92
  931999-12-06  Assar Westerlund  <assar@sics.se>
  94
  95	* lib/krb5/changepw.c (krb5_change_password): use the correct
  96 	address
  97
  98	* lib/krb5/Makefile.am: bump version to 6:0:1
  99
 100	* lib/asn1/Makefile.am: bump version to 1:4:0
 101
 1021999-12-04  Assar Westerlund  <assar@sics.se>
 103
 104	* configure.in: move AC_KRB_IPv6 to make sure it's performed
 105 	before AC_BROKEN
 106	(el_init): use new feature of AC_FIND_FUNC_NO_LIBS
 107
 108	* appl/test/uu_client.c: use client_doit
 109	* appl/test/test_locl.h (client_doit): add prototype
 110	* appl/test/tcp_client.c: use client_doit
 111	* appl/test/nt_gss_client.c: use client_doit
 112	* appl/test/gssapi_client.c: use client_doit
 113	* appl/test/common.c (client_doit): move identical code here and
 114	start using getaddrinfo
 115
 116	* appl/kf/kf.c (doit): rewrite to use getaddrinfo
 117	* kdc/hprop.c: re-write to use getaddrinfo
 118	* lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo
 119	* lib/krb5/expand_hostname.c (krb5_expand_hostname): use
 120	getaddrinfo
 121	* lib/krb5/changepw.c: re-write to use getaddrinfo
 122	* lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo
 123
 1241999-12-03  Assar Westerlund  <assar@sics.se>
 125
 126	* configure.in (BROKEN): check for freeaddrinfo, getaddrinfo,
 127	getnameinfo, gai_strerror
 128	(socklen_t): check for
 129
 1301999-12-02  Johan Danielsson  <joda@pdc.kth.se>
 131
 132	* lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key
 133
 1341999-11-23  Assar Westerlund  <assar@sics.se>
 135
 136	* lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes
 137 	within unicode characters.  this should probably be done in some
 138 	arbitrarly complex way to do it properly and you would have to
 139 	know what character encoding was used for the password and salt
 140 	string.
 141
 142	* lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0
 143	(INADDR_ANY)
 144	(ipv6_uninteresting): remove unused macro
 145
 1461999-11-22  Johan Danielsson  <joda@pdc.kth.se>
 147
 148	* lib/krb5/krb5.h: rc4->arcfour
 149
 150	* lib/krb5/crypto.c: rc4->arcfour
 151
 1521999-11-17  Assar Westerlund  <assar@sics.se>
 153
 154	* lib/krb5/krb5_locl.h: add <rc4.h>
 155	* lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4
 156	* lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might
 157	not be totally different from some small company up in the
 158	north-west corner of the US
 159
 160	* lib/krb5/get_addrs.c (find_all_addresses): change code to
 161 	actually increment buf_size
 162
 1631999-11-14  Assar Westerlund  <assar@sics.se>
 164
 165	* lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces'
 166	* lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces
 167 	scanning optional
 168	* lib/krb5/context.c (init_context_from_config_file): set
 169 	`scan_interfaces'
 170
 171	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c
 172	* lib/krb5/add_et_list.c (krb5_add_et_list): new function
 173
 1741999-11-12  Assar Westerlund  <assar@sics.se>
 175
 176	* lib/krb5/get_default_realm.c (krb5_get_default_realm,
 177	krb5_get_default_realms): set realms if they were unset
 178	* lib/krb5/context.c (init_context_from_config_file): don't
 179	initialize default realms here.  it's done lazily instead.
 180	
 181	* lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned
 182	* lib/asn1/gen_glue.c (generate_2int, generate_units): make sure
 183	bit constants are unsigned
 184	* lib/asn1/gen.c (define_type): make length in sequences be
 185	unsigned.
 186
 187	* configure.in: remove duplicate test for setsockopt test for
 188	struct tm.tm_isdst
 189
 190	* lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate
 191	preauthentication information if we get back ERR_PREAUTH_REQUIRED
 192	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove
 193	preauthentication generation code.  it's now in krb5_get_in_cred
 194	
 195	* configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct
 196	tm.tm_gmtoff and timezone
 197	
 1981999-11-11  Johan Danielsson  <joda@pdc.kth.se>
 199
 200	* kdc/main.c: make this work with multi-db
 201
 202	* kdc/kdc_locl.h: make this work with multi-db
 203
 204	* kdc/config.c: make this work with multi-db
 205
 2061999-11-09  Johan Danielsson  <joda@pdc.kth.se>
 207
 208	* kdc/misc.c: update for multi-database code
 209
 210	* kdc/main.c: update for multi-database code
 211
 212	* kdc/kdc_locl.h: update
 213
 214	* kdc/config.c: allow us to have more than one database
 215
 2161999-11-04  Assar Westerlund  <assar@sics.se>
 217
 218	* Release 0.2d
 219
 220	* lib/krb5/Makefile.am: bump version to 5:0:0 to be safe
 221 	(krb5_context_data has changed and some code do (might) access
 222 	fields directly)
 223
 224	* lib/krb5/krb5.h (krb5_context_data): add `etypes_des'
 225
 226	* lib/krb5/get_cred.c (init_tgs_req): use
 227 	krb5_keytype_to_enctypes_default
 228
 229	* lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new
 230 	function
 231
 232	* lib/krb5/context.c (set_etypes): new function
 233	(init_context_from_config_file): set both `etypes' and `etypes_des'
 234
 2351999-11-02  Assar Westerlund  <assar@sics.se>
 236
 237	* configure.in (VERSION): bump to 0.2d-pre
 238
 2391999-10-29  Assar Westerlund  <assar@sics.se>
 240
 241	* lib/krb5/principal.c (krb5_parse_name): check memory allocations
 242
 2431999-10-28  Assar Westerlund  <assar@sics.se>
 244
 245	* Release 0.2c
 246
 247	* lib/krb5/dump_config.c (print_tree): check for empty tree
 248
 249	* lib/krb5/string-to-key-test.c (tests): update the test cases
 250 	with empty principals so that they actually use an empty realm and
 251 	not the default.  use the correct etype for 3DES
 252
 253	* lib/krb5/Makefile.am: bump version to 4:1:0
 254
 255	* kdc/config.c (configure): more careful with the port string
 256
 2571999-10-26  Assar Westerlund  <assar@sics.se>
 258
 259	* Release 0.2b
 260
 2611999-10-20  Assar Westerlund  <assar@sics.se>
 262
 263	* lib/krb5/Makefile.am: bump version to 4:0:0
 264 	(krb524_convert_creds_kdc and potentially some other functions
 265 	have changed prototypes)
 266
 267	* lib/hdb/Makefile.am: bump version to 4:0:1
 268
 269	* lib/asn1/Makefile.am: bump version to 1:3:0
 270
 271	* configure.in (LIB_roken): add dbopen.  getcap in roken
 272 	references dbopen and with shared libraries we need to add this
 273 	dependency.
 274
 275	* lib/krb5/verify_krb5_conf.c (main): support speicifying the
 276 	configuration file to test on the command line
 277
 278	* lib/krb5/config_file.c (parse_binding): handle line with no
 279 	whitespace before =
 280	(krb5_config_parse_file_debug): set lineno earlier so that we don't
 281	use it unitialized
 282
 283	* configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need
 284 	more include files for these tests
 285
 286	* lib/krb5/set_default_realm.c (krb5_set_default_realm): use
 287 	krb5_config_get_strings, which means that your configuration file
 288 	should look like:
 289	
 290	[libdefaults]
 291	  default_realm = realm1 realm2 realm3
 292
 293	* lib/krb5/set_default_realm.c (config_binding_to_list): fix
 294 	copy-o.  From Michal Vocu <michal@karlin.mff.cuni.cz>
 295
 296	* kdc/config.c (configure): add a missing strdup.  From Michal
 297 	Vocu <michal@karlin.mff.cuni.cz>
 298
 2991999-10-17  Assar Westerlund  <assar@sics.se>
 300
 301	* Release 0.2a
 302
 303	* configure.in: only test for db.h with using berkeley_db. remember
 304 	to link with LIB_tgetent when checking for el_init. add xnlock
 305
 306	* appl/Makefile.am: add xnlock
 307
 308	* kdc/kerberos5.c (find_etype): support null keys
 309
 310	* kdc/kerberos4.c (get_des_key): support null keys
 311
 312	* lib/krb5/crypto.c (krb5_get_wrapped_length): more correct
 313 	calculation
 314
 3151999-10-16  Johan Danielsson  <joda@pdc.kth.se>
 316
 317	* kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc
 318
 3191999-10-12  Johan Danielsson  <joda@pdc.kth.se>
 320
 321	* lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning
 322
 3231999-10-10  Assar Westerlund  <assar@sics.se>
 324
 325	* lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm
 326
 327	* lib/krb5/krb5.h (krb5_ccache_data): make `ops' const
 328
 329	* lib/krb5/crypto.c (krb5_string_to_salttype): new function
 330
 331	* **/*.[ch]: const-ize
 332
 3331999-10-06  Assar Westerlund  <assar@sics.se>
 334	
 335	* lib/krb5/creds.c (krb5_compare_creds): const-ify
 336	
 337	* lib/krb5/cache.c: clean-up and comment-up
 338
 339	* lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the
 340 	strings
 341
 342	* lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the
 343 	correct realm part
 344
 345	* kdc/connect.c (handle_tcp): things work much better when ret is
 346 	initialized
 347
 3481999-10-03  Assar Westerlund  <assar@sics.se>
 349
 350	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the
 351 	type of the session key
 352
 353	* lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell
 354 	correctly
 355
 356	* lib/krb5/creds.c (krb5_compare_creds): fix spelling of
 357 	krb5_enctypes_compatible_keys
 358
 359	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new
 360 	credentials from the KDC if the existing one doesn't have a DES
 361 	session key.
 362
 363	* lib/45/get_ad_tkt.c (get_ad_tkt): update to new
 364 	krb524_convert_creds_kdc
 365
 3661999-10-03  Johan Danielsson  <joda@pdc.kth.se>
 367
 368	* lib/krb5/keytab_keyfile.c: make krb5_akf_ops const
 369
 370	* lib/krb5/keytab_memory.c: make krb5_mkt_ops const
 371
 372	* lib/krb5/keytab_file.c: make krb5_fkt_ops const
 373
 3741999-10-01  Assar Westerlund  <assar@sics.se>
 375
 376	* lib/krb5/config_file.c: rewritten to allow error messages
 377
 378	* lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf
 379	(libkrb5_la_SOURCES): add config_file_netinfo.c
 380
 381	* lib/krb5/verify_krb5_conf.c: new program for verifying that
 382	krb5.conf is corret
 383
 384	* lib/krb5/config_file_netinfo.c: moved netinfo code here from
 385 	config_file.c
 386
 3871999-09-28  Assar Westerlund  <assar@sics.se>
 388
 389	* kdc/hpropd.c (dump_krb4): kludge default_realm
 390
 391	* lib/asn1/check-der.c: add test cases for Generalized time and
 392 	make sure we return the correct value
 393
 394	* lib/asn1/der_put.c: simplify by using der_put_length_and_tag
 395
 396	* lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of
 397 	krb5_verify_user that tries in all the local realms
 398
 399	* lib/krb5/set_default_realm.c: add support for having several
 400 	default realms
 401
 402	* lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms'
 403
 404	* lib/krb5/get_default_realm.c (krb5_get_default_realms): add
 405
 406	* lib/krb5/krb5.h (krb5_context_data): change `default_realm' to
 407 	`default_realms'
 408
 409	* lib/krb5/context.c: change from `default_realm' to
 410 	`default_realms'
 411
 412	* lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use
 413 	krb5_get_default_realms
 414
 415	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c
 416
 417	* lib/krb5/copy_host_realm.c: new file
 418
 4191999-09-27  Johan Danielsson  <joda@pdc.kth.se>
 420
 421	* lib/asn1/der_put.c (encode_generalized_time): encode length
 422
 423	* lib/krb5/recvauth.c: new function `krb5_recvauth_match_version'
 424	that allows more intelligent matching of the application version
 425
 4261999-09-26  Assar Westerlund  <assar@sics.se>
 427
 428	* lib/asn1/asn1_print.c: add err.h
 429
 430	* kdc/config.c (configure): use parse_bytes
 431
 432	* appl/test/nt_gss_common.c: use the correct header file
 433
 4341999-09-24  Johan Danielsson  <joda@pdc.kth.se>
 435
 436	* kuser/klist.c: add a `--cache' flag
 437
 438	* kuser/kinit.c (main): only get default value for `get_v4_tgt' if
 439	it's explicitly set in krb5.conf
 440
 4411999-09-23  Assar Westerlund  <assar@sics.se>
 442
 443	* lib/asn1/asn1_print.c (tag_names); add another univeral tag
 444
 445	* lib/asn1/der.h: update universal tags
 446
 4471999-09-22  Assar Westerlund  <assar@sics.se>
 448
 449	* lib/asn1/asn1_print.c (loop): print length of octet string
 450
 4511999-09-21  Johan Danielsson  <joda@pdc.kth.se>
 452
 453	* admin/ktutil.c (kt_get): add `--help'
 454
 4551999-09-21  Assar Westerlund  <assar@sics.se>
 456
 457	* kuser/Makefile.am: add kdecode_ticket
 458
 459	* kuser/kdecode_ticket.c: new debug program
 460
 461	* appl/test/nt_gss_server.c: new program to test against `Sample *
 462 	SSPI Code' in Windows 2000 RC1 SDK.
 463
 464	* appl/test/Makefile.am: add nt_gss_client and nt_gss_server
 465
 466	* lib/asn1/der_get.c (decode_general_string): remember to advance
 467 	ret over the length-len
 468
 469	* lib/asn1/Makefile.am: add asn1_print
 470
 471	* lib/asn1/asn1_print.c: new program for printing DER-structures
 472
 473	* lib/asn1/der_put.c: make functions more consistent
 474
 475	* lib/asn1/der_get.c: make functions more consistent
 476
 4771999-09-20  Johan Danielsson  <joda@pdc.kth.se>
 478
 479	* kdc/kerberos5.c: be more informative in pa-data error messages
 480
 4811999-09-16  Assar Westerlund  <assar@sics.se>
 482
 483	* configure.in: test for strlcpy, strlcat
 484
 4851999-09-14  Assar Westerlund  <assar@sics.se>
 486
 487	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return
 488 	KRB5_LIBOS_PWDINTR when interrupted
 489
 490	* lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return
 491 	value from des_read_pw_string
 492
 493	* kuser/kinit.c (main): don't print any error if reading the
 494 	password was interrupted
 495
 496	* kpasswd/kpasswd.c (main): don't print any error if reading the
 497 	password was interrupted
 498
 499	* kdc/string2key.c (main): check the return value from fgets
 500
 501	* kdc/kstash.c (main): check return value from des_read_pw_string
 502
 503	* admin/ktutil.c (kt_add): check the return-value from fgets and
 504 	overwrite the password for paranoid reasons
 505
 506	* lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the
 507 	newline if it's there
 508
 5091999-09-13  Assar Westerlund  <assar@sics.se>
 510
 511	* kdc/hpropd.c (main): remove bogus error with `--print'.  remove
 512 	sysloging of number of principals transferred
 513
 514	* kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL
 515 	principals
 516	(main): get rid of bogus opening of hdb database when propagating
 517	ka-server database
 518
 5191999-09-12  Assar Westerlund  <assar@sics.se>
 520
 521	* lib/krb5/krb5_locl.h (O_BINARY): add fallback definition
 522
 523	* lib/krb5/krb5.h (krb5_context_data): add keytab types
 524
 525	* configure.in: revert back awk test, not worked around in
 526 	roken.awk
 527
 528	* lib/krb5/keytab_krb4.c: remove O_BINARY
 529
 530	* lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's.  From
 531	Love <lha@e.kth.se>
 532
 533	* lib/krb5/keytab_file.c: remove O_BINARY
 534
 535	* lib/krb5/keytab.c: move the list of keytab types to the context
 536
 537	* lib/krb5/fcache.c: remove O_BINARY
 538
 539	* lib/krb5/context.c (init_context_from_config_file): register all
 540 	standard cache and keytab types
 541	(krb5_free_context): free `kt_types'
 542
 543	* lib/krb5/cache.c (krb5_cc_resolve): move the registration of the
 544 	standard types of credential caches to context
 545
 546	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c
 547
 5481999-09-10  Assar Westerlund  <assar@sics.se>
 549
 550	* lib/krb5/keytab.c: add comments and clean-up
 551
 552	* admin/ktutil.c: add `ktutil copy'
 553
 554	* lib/krb5/keytab_krb4.c: new file
 555
 556	* lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field
 557
 558	* lib/krb5/Makefile.am: add keytab_krb4.c
 559
 560	* lib/krb5/keytab.c: add krb4 and correct some if's
 561
 562	* admin/srvconvert.c (srvconv): move common code
 563
 564	* lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables
 565
 566	* lib/krb5/keytab.c: move out file and memory functions
 567
 568	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c,
 569 	keytab_memory.c
 570
 571	* lib/krb5/keytab_memory.c: new file
 572
 573	* lib/krb5/keytab_file.c: new file
 574
 575	* kpasswd/kpasswdd.c: move out password quality functions
 576
 5771999-09-07  Assar Westerlund  <assar@sics.se>
 578
 579	* lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c.  From
 580 	Love <lha@e.kth.se>
 581
 582	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check
 583 	return value from `krb5_sendto_kdc'
 584
 5851999-09-06  Assar Westerlund  <assar@sics.se>
 586
 587	* lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and
 588 	remove the sending of data.  add a parameter `limit'.  let callers
 589 	send the date themselves (and preferably with net_write on tcp
 590 	sockets)
 591	(send_and_recv_tcp): read first the length field and then only that
 592	many bytes
 593
 5941999-09-05  Assar Westerlund  <assar@sics.se>
 595
 596	* kdc/connect.c (handle_tcp): try to print warning `TCP data of
 597 	strange type' less often
 598
 599	* lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly.
 600  	return on EOF.  always free data.  check return value from
 601 	realloc.
 602	(send_and_recv_tcp, send_and_recv_http): check advertised length
 603	against actual length
 604
 6051999-09-01  Johan Danielsson  <joda@pdc.kth.se>
 606
 607	* configure.in: check for sgi capabilities
 608
 6091999-08-27  Johan Danielsson  <joda@pdc.kth.se>
 610
 611	* lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return
 612	extra addresses
 613
 614	* kpasswd/kpasswdd.c: use HDB keytabs; change some error messages;
 615	add --realm flag
 616
 617	* lib/krb5/address.c (krb5_append_addresses): remove duplicates
 618
 6191999-08-26  Johan Danielsson  <joda@pdc.kth.se>
 620
 621	* lib/hdb/keytab.c: HDB keytab backend
 622
 6231999-08-25  Johan Danielsson  <joda@pdc.kth.se>
 624
 625	* lib/krb5/keytab.c
 626	(krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL
 627	pointer
 628
 6291999-08-24  Johan Danielsson  <joda@pdc.kth.se>
 630
 631	* kpasswd/kpasswdd.c: add `--keytab' flag
 632
 6331999-08-23  Assar Westerlund  <assar@sics.se>
 634
 635	* lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr'
 636 	instead of the non-standard `s6_addr32'.  From Yoshinobu Inoue
 637 	<shin@kame.net> by way of the KAME repository
 638
 6391999-08-18  Assar Westerlund  <assar@sics.se>
 640
 641	* configure.in (--enable-new-des3-code): remove check for `struct
 642 	addrinfo'
 643
 644	* lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable
 645 	des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards
 646 	compatability
 647
 648	* lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key
 649 	derivation) just got assigned etype 16 by <bcn@isi.edu>.  keep the
 650 	old etype at 7.
 651
 6521999-08-16  Assar Westerlund  <assar@sics.se>
 653
 654	* lib/krb5/sendauth.c (krb5_sendauth): only look at errno if
 655 	krb5_net_read actually returns -1
 656
 657	* lib/krb5/recvauth.c (krb5_recvauth): only look at errno if
 658 	krb5_net_read actually returns -1
 659
 660	* appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't
 661 	returned -1
 662
 663	* appl/test/tcp_server.c (proto): only trust errno if
 664 	krb5_net_read actually returns -1
 665
 666	* appl/kf/kfd.c (proto): be more careful with the return value
 667 	from krb5_net_read
 668
 6691999-08-13  Assar Westerlund  <assar@sics.se>
 670
 671	* lib/krb5/get_addrs.c (get_addrs_int): try the different ways
 672 	sequentially instead of just one.  this helps if your heimdal was
 673 	built with v6-support but your kernel doesn't have it, for
 674 	example.
 675
 6761999-08-12  Assar Westerlund  <assar@sics.se>
 677
 678	* kdc/hpropd.c: add inetd flag.  default means try to figure out
 679 	if stdin is a socket or not.
 680
 681	* Makefile.am (ACLOCAL): just use `cf', this variable is only used
 682 	when the current directory is $(top_srcdir) anyways and having
 683 	$(top_srcdir) there breaks if it's a relative path
 684
 6851999-08-09  Johan Danielsson  <joda@pdc.kth.se>
 686
 687	* configure.in: check for setproctitle
 688
 6891999-08-05  Assar Westerlund  <assar@sics.se>
 690
 691	* lib/krb5/principal.c (krb5_sname_to_principal): remember to call
 692 	freehostent
 693
 694	* appl/test/tcp_client.c: call freehostent
 695
 696	* appl/kf/kf.c (doit): call freehostent
 697
 698	* appl/kf/kf.c: make v6 friendly and simplify
 699
 700	* appl/kf/kfd.c: make v6 friendly and simplify
 701
 702	* appl/test/tcp_server.c: simplify by using krb5_err instead of
 703 	errx
 704	
 705	* appl/test/tcp_client.c: simplify by using krb5_err instead of
 706 	errx
 707
 708	* appl/test/tcp_server.c: make v6 friendly and simplify
 709
 710	* appl/test/tcp_client.c: make v6 friendly and simplify
 711
 7121999-08-04  Assar Westerlund  <assar@sics.se>
 713
 714	* Release 0.1m
 715
 7161999-08-04  Assar Westerlund  <assar@sics.se>
 717
 718	* kuser/kinit.c (main): some more KRB4-conditionalizing
 719
 720	* lib/krb5/get_in_tkt.c: type correctness
 721
 722	* lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in
 723 	flags.  From Miroslav Ruda <ruda@ics.muni.cz>
 724
 725	* kuser/kinit.c (main): add config file support for forwardable
 726 	and krb4 support.  From Miroslav Ruda <ruda@ics.muni.cz>
 727
 728	* kdc/kerberos5.c (as_rep): add an empty X500-compress string as
 729 	transited.
 730	(fix_transited_encoding): check length.
 731	From Miroslav Ruda <ruda@ics.muni.cz>
 732
 733	* kdc/hpropd.c (dump_krb4): check the realm so that we don't dump
 734 	principals in some other realm. From Miroslav Ruda
 735 	<ruda@ics.muni.cz>
 736	(main): rename sa_len -> sin_len, sa_lan is a define on some
 737	platforms.
 738
 739	* appl/kf/kfd.c: add regpag support. From Miroslav Ruda
 740 	<ruda@ics.muni.cz>
 741
 742	* appl/kf/kf.c: add `-G' and forwardable option in krb5.conf.
 743  	From Miroslav Ruda <ruda@ics.muni.cz>
 744
 745	* lib/krb5/config_file.c (parse_list): don't run past end of line
 746
 747	* appl/test/gss_common.h: new prototypes
 748
 749	* appl/test/gssapi_client.c: use gss_err instead of abort
 750
 751	* appl/test/gss_common.c (gss_verr, gss_err): add
 752
 7531999-08-03  Assar Westerlund  <assar@sics.se>
 754
 755	* lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this
 756 	otherwise it doesn't build with shared libraries
 757
 758	* kdc/hpropd.c: v6-ify
 759
 760	* kdc/hprop.c: v6-ify
 761
 7621999-08-01  Assar Westerlund  <assar@sics.se>
 763
 764	* lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname
 765
 7661999-07-31  Assar Westerlund  <assar@sics.se>
 767
 768	* lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new
 769 	function that takes a FQDN
 770
 771	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c
 772
 773	* lib/krb5/expand_hostname.c: new file
 774
 7751999-07-28  Assar Westerlund  <assar@sics.se>
 776
 777	* Release 0.1l
 778
 7791999-07-28  Assar Westerlund  <assar@sics.se>
 780
 781	* lib/asn1/Makefile.am: bump version to 1:2:0
 782
 783	* lib/krb5/Makefile.am: bump version to 3:1:0
 784
 785	* configure.in: more inet_pton to roken
 786
 787	* lib/krb5/principal.c (krb5_sname_to_principal): use
 788 	getipnodebyname
 789
 7901999-07-26  Assar Westerlund  <assar@sics.se>
 791
 792	* Release 0.1k
 793
 7941999-07-26  Johan Danielsson  <joda@pdc.kth.se>
 795
 796	* lib/krb5/Makefile.am: bump version number (changed function
 797	signatures)
 798
 799	* lib/hdb/Makefile.am: bump version number (changes to some
 800	function signatures)
 801
 8021999-07-26  Assar Westerlund  <assar@sics.se>
 803
 804	* lib/krb5/Makefile.am: bump version to 3:0:2
 805
 806	* lib/hdb/Makefile.am: bump version to 2:1:0
 807
 808	* lib/asn1/Makefile.am: bump version to 1:1:0
 809
 8101999-07-26  Assar Westerlund  <assar@sics.se>
 811
 812	* Release 0.1j
 813
 8141999-07-26  Assar Westerlund  <assar@sics.se>
 815
 816	* configure.in: rokenize inet_ntop
 817
 818	* lib/krb5/store_fd.c: lots of changes from size_t to ssize_t
 819	
 820	* lib/krb5/store_mem.c: lots of changes from size_t to ssize_t
 821	
 822	* lib/krb5/store_emem.c: lots of changes from size_t to ssize_t
 823	
 824	* lib/krb5/store.c: lots of changes from size_t to ssize_t
 825	(krb5_ret_stringz): check return value from realloc
 826
 827	* lib/krb5/mk_safe.c: some type correctness
 828	
 829	* lib/krb5/mk_priv.c: some type correctness
 830	
 831	* lib/krb5/krb5.h (krb5_storage): change return values of
 832	functions from size_t to ssize_t
 833	
 8341999-07-24  Assar Westerlund  <assar@sics.se>
 835
 836	* Release 0.1i
 837
 838	* configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \#
 839 	in lib/roken/roken.awk
 840
 841	* lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to
 842 	step over addresses if there's no `sa_lan' field
 843
 844	* lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by
 845 	using `struct sockaddr_storage'
 846
 847	* lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using
 848 	`struct sockaddr_storage'
 849
 850	* lib/krb5/changepw.c (krb5_change_password): simplify by using
 851 	`struct sockaddr_storage'
 852
 853	* lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd):
 854 	simplify by using `struct sockaddr_storage'
 855
 856	* kpasswd/kpasswdd.c (*): simplify by using `struct
 857 	sockaddr_storage'
 858
 859	* kdc/connect.c (*): simplify by using `struct sockaddr_storage'
 860
 861	* configure.in (sa_family_t): just test for existence
 862	(sockaddr_storage): also specify include file
 863
 864	* configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i
 865	(sa_family_t): test for
 866	(struct	sockaddr_storage): test for
 867
 868	* kdc/hprop.c (propagate_database): typo, NULL should be
 869 	auth_context
 870
 871	* lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of
 872 	AF_INET6
 873
 874	* appl/kf/kf.c (main): use warnx
 875
 876	* appl/kf/kf.c (proto): remove shadowing context
 877
 878	* lib/krb5/get_addrs.c (find_all_addresses): try to handle the
 879 	case of getting back an `sockaddr_in6' address when sizeof(struct
 880 	sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to
 881 	tell us how large the address is.  This obviously doesn't work
 882 	with unknown protocol types.
 883
 8841999-07-24  Assar Westerlund  <assar@sics.se>
 885
 886	* Release 0.1h
 887
 8881999-07-23  Assar Westerlund  <assar@sics.se>
 889
 890	* appl/kf/kfd.c: clean-up and more paranoia
 891
 892	* etc/services.append: add kf
 893
 894	* appl/kf/kf.c: rename tk_file to ccache for consistency.  clean-up
 895
 8961999-07-22  Assar Westerlund  <assar@sics.se>
 897
 898	* lib/krb5/n-fold-test.c (main): print the correct data
 899
 900	* appl/Makefile.am (SUBDIRS): add kf
 901
 902	* appl/kf: new program.  From Miroslav Ruda <ruda@ics.muni.cz>
 903
 904	* kdc/hprop.c: declare some variables unconditionally to simplify
 905 	things
 906
 907	* kpasswd/kpasswdd.c: initialize kadm5 connection for every change
 908 	(otherwise the modifier in the database doesn't get set)
 909
 910	* kdc/hpropd.c: clean-up and re-organize
 911
 912	* kdc/hprop.c: clean-up and re-organize
 913
 914 	* configure.in (SunOS): define to xy for SunOS x.y
 915
 9161999-07-19  Assar Westerlund  <assar@sics.se>
 917
 918	* configure.in (AC_BROKEN): test for copyhostent, freehostent,
 919 	getipnodebyaddr, getipnodebyname
 920
 9211999-07-15  Assar Westerlund  <assar@sics.se>
 922
 923	* lib/asn1/check-der.c: more test cases for integers
 924
 925	* lib/asn1/der_length.c (length_int): handle the case of the
 926 	largest negative integer by not calling abs
 927
 9281999-07-14  Assar Westerlund  <assar@sics.se>
 929
 930	* lib/asn1/check-der.c (generic_test): check malloc return value
 931 	properly
 932
 933	* lib/krb5/Makefile.am: add string_to_key_test
 934
 935	* lib/krb5/prog_setup.c (krb5_program_setup): always initialize
 936 	the context
 937
 938	* lib/krb5/n-fold-test.c (main): return a relevant return value
 939
 940	* lib/krb5/krbhst.c: do SRV lookups for admin server as well.
 941  	some clean-up.
 942
 9431999-07-12  Assar Westerlund  <assar@sics.se>
 944
 945	* configure.in: handle not building X programs
 946
 9471999-07-06  Assar Westerlund  <assar@sics.se>
 948
 949	* lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate
 950 	variable
 951	(ipv6_sockaddr2port): fix typo
 952
 953	* etc/services.append: beginning of a file with services
 954
 955	* lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if
 956 	there's no prefix.  also clean-up a little bit.
 957
 958	* kdc/hprop.c (--kaspecials): new flag for handling special KA
 959 	server entries.  From "Brandon S. Allbery KF8NH"
 960 	<allbery@kf8nh.apk.net>
 961
 9621999-07-05  Assar Westerlund  <assar@sics.se>
 963
 964	* kdc/connect.c (handle_tcp): make sure we have data before
 965 	starting to look for HTTP
 966
 967	* kdc/connect.c (handle_tcp): always do getpeername, we can't
 968 	trust recvfrom to return anything sensible
 969
 9701999-07-04  Assar Westerlund  <assar@sics.se>
 971
 972	* lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with
 973 	all enctypes
 974
 975	* kpasswd/kpasswdd.c (change): fetch the salt-type from the entry
 976
 977	* admin/srvconvert.c (srvconv): better error messages
 978
 9791999-07-03  Assar Westerlund  <assar@sics.se>
 980
 981	* lib/krb5/principal.c (unparse_name): error check malloc properly
 982
 983	* lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc
 984 	properly
 985
 986	* lib/krb5/crypto.c (*): do some malloc return-value checks
 987 	properly
 988
 989	* lib/hdb/hdb.c (hdb_process_master_key): simplify by using
 990 	krb5_data_alloc
 991
 992	* lib/hdb/hdb.c (hdb_process_master_key): check return value from
 993 	malloc
 994
 995	* lib/asn1/gen_decode.c (decode_type): fix generation of decoding
 996 	information for TSequenceOf.
 997
 998	* kdc/kerberos5.c (get_pa_etype_info): check return value from
 999 	malloc
1000
10011999-07-02  Assar Westerlund  <assar@sics.se>
1002
1003	* lib/asn1/der_copy.c (copy_octet_string): don't fail if length ==
1004 	0 and malloc returns NULL
1005
10061999-06-29  Assar Westerlund  <assar@sics.se>
1007
1008	* lib/krb5/addr_families.c (ipv6_parse_addr): implement
1009
10101999-06-24  Assar Westerlund  <assar@sics.se>
1011
1012	* lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address
1013 	as an addrport one
1014
1015	* lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT):
1016 	add
1017	(krb5_auth_context): add local and remote port
1018
1019	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the
1020 	local and remote address and add them to the krb-cred packet
1021
1022	* lib/krb5/auth_context.c: save the local and remove ports in the
1023 	auth_context
1024
1025	* lib/krb5/address.c (krb5_make_addrport): create an address of
1026 	type KRB5_ADDRESS_ADDRPORT from (addr, port)
1027
1028	* lib/krb5/addr_families.c (krb5_sockaddr2port): new function for
1029 	grabbing the port number out of the sockaddr
1030
10311999-06-23  Assar Westerlund  <assar@sics.se>
1032
1033	* admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key.
1034  	increase possible verbosity.
1035
1036	* lib/krb5/config_file.c (parse_list): handle blank lines at
1037 	another place
1038	
1039	* kdc/connect.c (add_port_string): don't return a value
1040
1041 	* lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred
1042 	cache if the principals are different.  close and NULL the old one
1043 	so that we create a new one.
1044
1045	* configure.in: move around cgywin et al
1046	(LIB_kdb): set at the end of krb4-block
1047	(krb4): test for krb_enable_debug and krb_disable_debug
1048
10491999-06-16  Assar Westerlund  <assar@sics.se>
1050
1051	* kuser/kdestroy.c (main): try to destroy v4 ticket even if the
1052 	destruction of the v5 one fails
1053
1054	* lib/krb5/crypto.c (DES3_postproc): new version that does the
1055 	right thing
1056	(*): don't put and recover length in 3DES encoding
1057	other small fixes
1058
10591999-06-15  Assar Westerlund  <assar@sics.se>
1060
1061	* lib/krb5/get_default_principal.c: rewrite to use
1062 	get_default_username
1063
1064	* lib/krb5/Makefile.am: add n-fold-test
1065
1066	* kdc/connect.c: add fallbacks for all lookups by service name
1067	(handle_tcp): break-up and clean-up
1068
10691999-06-09  Assar Westerlund  <assar@sics.se>
1070
1071	* lib/krb5/addr_families.c (ipv6_uninteresting): don't consider
1072 	the loopback address as uninteresting
1073
1074	* lib/krb5/get_addrs.c: new magic flag to get loopback address if
1075 	there are no other addresses.
1076	(krb5_get_all_client_addrs): use that flag
1077
10781999-06-04  Assar Westerlund  <assar@sics.se>
1079
1080	* lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the
1081 	length
1082	(checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64
1083	(encrypt_internal_derived): don't include the length and don't
1084	decrease by the checksum size twice
1085	(_get_derived_key): the constant should be 5 bytes
1086
10871999-06-02  Johan Danielsson  <joda@pdc.kth.se>
1088
1089	* configure.in: use KRB_CHECK_X
1090	
1091	* configure.in: check for netinet/ip.h
1092	
10931999-05-31  Assar Westerlund  <assar@sics.se>
1094
1095	* kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize
1096 	on RTLD_NOW
1097
10981999-05-23  Assar Westerlund  <assar@sics.se>
1099
1100	* appl/test/uu_server.c: removed unused stuff
1101
1102	* appl/test/uu_client.c: removed unused stuff
1103
11041999-05-21  Assar Westerlund  <assar@sics.se>
1105
1106	* kuser/kgetcred.c (main): correct error message
1107
1108	* lib/krb5/crypto.c (verify_checksum): call (*ct->checksum)
1109 	directly, avoiding redundant lookups and memory leaks
1110
1111	* lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free
1112 	local and remote addresses
1113
1114	* lib/krb5/get_default_principal.c (get_logname): also try
1115 	$USERNAME
1116	
1117	* lib/asn1/Makefile.am (asn1_files): add $(EXEEXT)
1118
1119	* lib/krb5/principal.c (USE_RESOLVER): try to define only if we
1120	have a libresolv (currently by checking for res_search)
1121
11221999-05-18  Johan Danielsson  <joda@pdc.kth.se>
1123
1124	* kdc/connect.c (handle_tcp): remove %-escapes in request
1125
11261999-05-14  Assar Westerlund  <assar@sics.se>
1127
1128	* Release 0.1g
1129
1130	* admin/ktutil.c (kt_remove): -t should be -e
1131
1132	* configure.in (CHECK_NETINET_IP_AND_TCP): use
1133
1134	* kdc/hpropd.c: support for dumping to krb4.  From Miroslav Ruda
1135 	<ruda@ics.muni.cz>
1136
1137	* admin/ktutil.c (kt_add): new option `--no-salt'.  From Miroslav
1138 	Ruda <ruda@ics.muni.cz>
1139
1140	* configure.in: add cygwin and DOS tests replace sendmsg, recvmsg,
1141 	and innetgr with roken versions
1142
1143	* kuser/kgetcred.c: new program
1144
1145Tue May 11 14:09:33 1999  Johan Danielsson  <joda@pdc.kth.se>
1146
1147	* lib/krb5/mcache.c: fix paste-o
1148	
11491999-05-10  Johan Danielsson  <joda@pdc.kth.se>
1150
1151	* configure.in: don't use uname
1152
11531999-05-10  Assar Westerlund  <assar@sics.se>
1154
1155	* acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four
1156	arguments :-)
1157
1158	* appl/test/uu_server.c (setsockopt): cast to get rid of a warning
1159	
1160	* appl/test/tcp_server.c (setsockopt): cast to get rid of a
1161	warning
1162
1163	* appl/test/tcp_client.c (proto): call krb5_sendauth with ccache
1164	== NULL
1165
1166	* appl/test/gssapi_server.c (setsockopt): cast to get rid of a
1167	warning
1168
1169	* lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by
1170	setting the default ccache.
1171
1172	* configure.in (getsockopt, setsockopt): test for
1173	(AM_INIT_AUTOMAKE): bump version to 0.1g
1174
1175	* appl/Makefile.am (SUBDIRS): add kx
1176	
1177	* lib/hdb/convert_db.c (main): handle the case of no master key
1178	
11791999-05-09  Assar Westerlund  <assar@sics.se>
1180
1181	* Release 0.1f
1182
1183	* kuser/kinit.c: add --noaddresses
1184	
1185	* lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an
1186	empty sit of list as to not ask for any addresses.
1187	
11881999-05-08  Assar Westerlund  <assar@sics.se>
1189
1190	* acconfig.h (_GNU_SOURCE): define this to enable (used)
1191 	extensions on glibc-based systems such as linux
1192
11931999-05-03  Assar Westerlund  <assar@sics.se>
1194
1195	* lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free
1196	`*out_creds' properly
1197
1198	* lib/krb5/creds.c (krb5_compare_creds): just verify that the
1199	keytypes/enctypes are compatible, not that they are the same
1200
1201	* kuser/kdestroy.c (cache): const-correctness
1202
12031999-05-03  Johan Danielsson  <joda@pdc.kth.se>
1204
1205	* lib/hdb/hdb.c (hdb_set_master_key): initialise master key
1206	version
1207
1208	* lib/hdb/convert_db.c: add support for upgrading database
1209	versions
1210
1211	* kdc/misc.c: add flags to fetch
1212
1213	* kdc/kstash.c: unlink keyfile on failure, chmod to 400
1214
1215	* kdc/hpropd.c: add --print option
1216
1217	* kdc/hprop.c: pass flags to hdb_foreach
1218
1219	* lib/hdb/convert_db.c: add some flags
1220
1221	* lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2;
1222	build prototype headers
1223	
1224	* lib/hdb/hdb_locl.h: update prototypes
1225
1226	* lib/hdb/print.c: move printable version of entry from kadmin
1227
1228	* lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is
1229	sealed or not; add flags to hdb_foreach
1230
1231	* lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and
1232	NDBM_nextkey
1233
1234	* lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey
1235
1236	* lib/hdb/common.c: add flags to _hdb_{fetch,store}
1237
1238	* lib/hdb/hdb.h: add master_key_version to struct hdb, update
1239	prototypes
1240
1241	* lib/hdb/hdb.asn1: make mkvno optional, update version to 2
1242
1243	* configure.in: --enable-netinfo
1244
1245	* lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO
1246
1247	* config.sub: fix for crays
1248
1249	* config.guess: new version from automake 1.4
1250	
1251	* config.sub: new version from automake 1.4
1252
1253Wed Apr 28 00:21:17 1999  Assar Westerlund  <assar@sics.se>
1254
1255	* Release 0.1e
1256
1257	* lib/krb5/mcache.c (mcc_get_next): get the current cursor
1258 	correctly
1259
1260	* acconfig.h: correct definition of KRB_PUT_INT for old krb4 code.
1261  	From Ake Sandgren <ake@cs.umu.se>
1262
12631999-04-27  Johan Danielsson  <joda@pdc.kth.se>
1264
1265	* kdc/kerberos5.c: fix arguments to decrypt_ticket
1266	
12671999-04-25  Assar Westerlund  <assar@sics.se>
1268
1269	* lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old
1270	DCE secd's that are not able to handle MD5 checksums by defaulting
1271	to MD4 if the keytype was DES-CBC-CRC
1272	
1273	* lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype
1274	
1275	* lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and
1276	`cksumtype'
1277
1278	* lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for
1279	secd
1280	(init_tgs_req): add all supported enctypes for the keytype in
1281	`in_creds->session.keytype' if it's set
1282
1283	* lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol
1284	encryption types
1285	(do_checksum): new function
1286	(verify_checksum): take the checksum to use from the checksum message
1287	and not from the crypto struct
1288	(etypes): add F_PSEUDO flags
1289	(krb5_keytype_to_enctypes): new function
1290
1291	* lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype
1292	and cksumtype
1293	(krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement
1294	(krb5_auth_setkeytype, krb5_auth_getkeytype): implement
1295	(krb5_auth_setenctype): comment out, it's rather bogus anyway
1296
1297Sun Apr 25 16:55:50 1999  Johan Danielsson  <joda@pdc.kth.se>
1298
1299	* lib/krb5/krb5_locl.h: fix for stupid aix warnings
1300
1301	* lib/krb5/fcache.c (erase_file): don't malloc
1302	
1303Sat Apr 24 18:35:21 1999  Johan Danielsson  <joda@pdc.kth.se>
1304
1305	* kdc/config.c: pass context to krb5_config_file_free
1306
1307	* kuser/kinit.c: add `--fcache-version' to set cache version to
1308	create
1309
1310	* kuser/klist.c: print cache version if verbose
1311
1312	* lib/krb5/transited.c (krb5_domain_x500_decode): don't abort
1313
1314	* lib/krb5/principal.c: abort -> krb5_abortx
1315
1316	* lib/krb5/mk_rep.c: abort -> krb5_abortx
1317
1318	* lib/krb5/config_file.c: abort -> krb5_abortx
1319
1320	* lib/krb5/context.c (init_context_from_config_file): init
1321	fcache_version; add krb5_{get,set}_fcache_version
1322
1323	* lib/krb5/keytab.c: add support for reading (and writing?) old
1324	version keytabs
1325
1326	* lib/krb5/cache.c: add krb5_cc_get_version
1327
1328	* lib/krb5/fcache.c: add support for reading and writing old
1329	version cache files
1330
1331	* lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags
1332
1333	* lib/krb5/store_emem.c (krb5_storage_emem): zero flags
1334
1335	* lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags
1336
1337	* lib/krb5/store.c: add flags to change how various fields are
1338	stored, used for old cache version support
1339	
1340	* lib/krb5/krb5.h: add support for reading and writing old version
1341	cache files, and keytabs
1342	
1343Wed Apr 21 00:09:26 1999  Assar Westerlund  <assar@sics.se>
1344
1345	* configure.in: fix test for readline.h remember to link with
1346 	$LIB_tgetent when trying linking with readline
1347
1348	* lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time
1349 	is given, request a postdated ticket.
1350
1351	* lib/krb5/data.c (krb5_data_free): free data as long as it's not
1352 	NULL
1353
1354Tue Apr 20 20:18:14 1999  Assar Westerlund  <assar@sics.se>
1355
1356	* kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen
1357
1358	* lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add
1359
1360	* lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and
1361 	KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is
1362 	invalid
1363
1364Tue Apr 20 12:42:08 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1365
1366	* kpasswd/kpasswdd.c: don't try to load library by default; get
1367 	library and function name from krb5.conf
1368
1369	* kpasswd/sample_passwd_check.c: sample password checking
1370 	functions
1371
1372Mon Apr 19 22:22:19 1999  Assar Westerlund  <assar@sics.se>
1373
1374	* lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use
1375 	krb5_data_alloc and be careful with checking allocation and sizes.
1376
1377	* kuser/klist.c (--tokens): conditionalize on KRB4
1378
1379	* kuser/kinit.c (renew_validate): set all flags
1380	(main): fix cut-n-paste error when setting start-time
1381
1382	* kdc/kerberos5.c (check_tgs_flags): starttime of a validate
1383 	ticket should be > than current time
1384	(*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket
1385
1386	* kuser/kinit.c (renew_validate): use the client realm instead of
1387 	the local realm when renewing tickets.
1388
1389	* lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function
1390	(krb5_get_forwarded_creds): correct freeing of out_creds
1391
1392	* kuser/kinit.c (renew_validate): hopefully fix up freeing of
1393 	memory
1394
1395	* configure.in: do all the krb4 tests with "$krb4" != "no"
1396
1397	* lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero
1398 	keyvalue if it's NULL.  noticed by Ake Sandgren <ake@cs.umu.se>
1399
1400	* lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes
1401 	instead of just taking the first one.  fix all callers.  From
1402 	"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1403
1404	* kdc/kdc_locl.h (enable_kaserver): declaration
1405	
1406	* kdc/hprop.c (ka_convert): print the failing principal.  AFS 3.4a
1407 	creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around.  From
1408 	"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
1409
1410	* kdc/hpropd.c (open_socket): stupid cast to get rid of a warning
1411
1412	* kdc/connect.c (add_standard_ports, process_request): look at
1413 	enable_kaserver.  From "Brandon S. Allbery KF8NH"
1414 	<allbery@kf8nh.apk.net>
1415
1416	* kdc/config.c: new flag --kaserver and config file option
1417 	enable-kaserver.  From "Brandon S. Allbery KF8NH"
1418 	<allbery@kf8nh.apk.net>
1419
1420Mon Apr 19 12:32:04 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1421
1422	* configure.in: check for dlopen, and dlfcn.h
1423
1424	* kpasswd/kpasswdd.c: add support for dlopen:ing password quality
1425 	check library
1426
1427	* configure.in: add appl/su
1428
1429Sun Apr 18 15:46:53 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
1430
1431	* lib/krb5/cache.c: add krb5_cc_get_type that returns type of a
1432 	cache
1433
1434Fri Apr 16 17:58:51 1999  Assar Westerlund  <assar@sics.se>
1435
1436	* configure.in: LIB_kdb: -L should be before -lkdb
1437	test for prototype of strsep
1438	
1439Thu Apr 15 11:34:38 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1440
1441	* lib/krb5/Makefile.am: update version
1442
1443	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use
1444 	ALLOC_SEQ
1445
1446	* lib/krb5/fcache.c: add some support for reading and writing old
1447 	cache formats;
1448	(fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use
1449	krb5_ret_creds
1450
1451	* lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc,
1452 	initialize host_byteorder
1453
1454	* lib/krb5/store_fd.c (krb5_storage_from_fd): initialize
1455 	host_byteorder
1456
1457	* lib/krb5/store_emem.c (krb5_storage_emem): initialize
1458 	host_byteorder
1459
1460	* lib/krb5/store.c (krb5_storage_set_host_byteorder): add;
1461	(krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16):
1462 	check host_byteorder flag; (krb5_store_creds): add;
1463 	(krb5_ret_creds): add
1464
1465	* lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for
1466 	storage of numbers
1467
1468	* lib/krb5/heim_err.et: add `host not found' error
1469
1470	* kdc/connect.c: don't use data after clearing decriptor
1471
1472	* lib/krb5/auth_context.c: abort -> krb5_abortx
1473
1474	* lib/krb5/warn.c: add __attribute__; add *abort functions
1475
1476	* configure.in: check for __attribute__
1477
1478	* kdc/connect.c: log bogus requests
1479
1480Tue Apr 13 18:38:05 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1481
1482	* lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts
1483 	for all DES keys
1484
14851999-04-12  Assar Westerlund  <assar@sics.se>
1486
1487	* lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit
1488
1489	* lib/krb5/get_cred.c (init_tgs_req): some more error checking
1490
1491	* lib/krb5/generate_subkey.c (krb5_generate_subkey): check return
1492	value from malloc
1493
1494Sun Apr 11 03:47:23 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1495
1496	* lib/krb5/krb5.conf.5: update to reality
1497
1498	* lib/krb5/krb5_425_conv_principal.3: update to reality
1499
15001999-04-11  Assar Westerlund  <assar@sics.se>
1501
1502	* lib/krb5/get_host_realm.c: handle more than one realm for a host
1503
1504	* kpasswd/kpasswd.c (main): use krb5_program_setup and
1505	print_version
1506
1507	* kdc/string2key.c (main): use krb5_program_setup and
1508	print_version
1509
1510Sun Apr 11 02:35:58 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1511
1512	* lib/krb5/principal.c (krb5_524_conv_principal): make it actually
1513 	work, and check built-in list of host-type first-components
1514
1515	* lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm
1516
1517	* lib/krb5/context.c: add srv_* flags to context
1518
1519	* lib/krb5/principal.c: add default v4_name_convert entries
1520
1521	* lib/krb5/krb5.h: add srv_* flags to context
1522
1523Sat Apr 10 22:52:28 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1524
1525	* kadmin/kadmin.c: complain about un-recognised commands
1526
1527	* admin/ktutil.c: complain about un-recognised commands
1528
1529Sat Apr 10 15:41:49 1999  Assar Westerlund  <assar@sics.se>
1530
1531	* kadmin/load.c (doit): fix error message
1532
1533	* lib/krb5/crypto.c (encrypt_internal): free checksum if lengths
1534 	fail to match.
1535	(krb5_get_wrapped_length): new function
1536
1537	* configure.in: security/pam_modules.h: check for
1538
1539	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge
1540 	around `ret_as_reply' semantics by only freeing it when ret == 0
1541
1542Fri Apr  9 20:24:04 1999  Assar Westerlund  <assar@sics.se>
1543
1544	* kuser/klist.c (print_cred_verbose): handle the case of a bad
1545 	enctype
1546
1547	* configure.in: test for more header files
1548	(LIB_roken): set
1549
1550Thu Apr  8 15:01:59 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1551
1552	* configure.in: fixes for building w/o krb4
1553
1554	* ltmain.sh: update to libtool 1.2d
1555
1556	* ltconfig: update to libtool 1.2d
1557
1558Wed Apr  7 23:37:26 1999  Assar Westerlund  <assar@sics.se>
1559
1560	* kdc/hpropd.c: fix some error messages to be more understandable.
1561
1562	* kdc/hprop.c (ka_dump): remove unused variables
1563
1564	* appl/test/tcp_server.c: remove unused variables
1565
1566	* appl/test/gssapi_server.c: remove unused variables
1567
1568	* appl/test/gssapi_client.c: remove unused variables
1569
1570Wed Apr  7 14:05:15 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1571
1572	* lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code
1573
1574	* kuser/klist.c: make it compile w/o krb4
1575
1576	* kuser/kdestroy.c: make it compile w/o krb4
1577
1578	* admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help
1579 	strings
1580
1581Mon Apr  5 16:13:46 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1582
1583	* configure.in: test for MIPS ABI; new test_package
1584
1585Thu Apr  1 11:00:40 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1586
1587	* include/Makefile.am: clean krb5-private.h
1588
1589	* Release 0.1d
1590
1591	* kpasswd/kpasswdd.c (doit): pass context to
1592 	krb5_get_all_client_addrs
1593
1594	* kdc/connect.c (init_sockets): pass context to
1595 	krb5_get_all_server_addrs
1596
1597	* lib/krb5/get_in_tkt.c (init_as_req): pass context to
1598 	krb5_get_all_client_addrs
1599
1600	* lib/krb5/get_cred.c (get_cred_kdc_la): pass context to
1601 	krb5_get_all_client_addrs
1602
1603	* lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses
1604
1605	* lib/krb5/krb5.h: add support for adding an extra set of
1606 	addresses
1607
1608	* lib/krb5/context.c: add support for adding an extra set of
1609 	addresses
1610
1611	* lib/krb5/addr_families.c: add krb5_parse_address
1612
1613	* lib/krb5/address.c: krb5_append_addresses
1614
1615	* lib/krb5/config_file.c (parse_binding): don't zap everything
1616 	after first whitespace
1617
1618	* kuser/kinit.c (renew_validate): don't allocate out
1619
1620	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
1621 	allocate out_creds
1622
1623	* lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make
1624 	out_creds pointer;
1625	(krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags):
1626	free more memory
1627
1628	* lib/krb5/crypto.c (encrypt_internal): free checksum
1629
1630	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply,
1631 	and ticket
1632
1633	* kuser/Makefile.am: remove kfoo
1634
1635	* lib/Makefile.am: add auth
1636
1637	* lib/kadm5/iprop.h: getarg.h
1638
1639	* lib/kadm5/replay_log.c: use getarg
1640
1641	* lib/kadm5/ipropd_slave.c: use getarg
1642
1643	* lib/kadm5/ipropd_master.c: use getarg
1644
1645	* lib/kadm5/dump_log.c: use getarg
1646
1647	* kpasswd/kpasswdd.c: use getarg
1648
1649	* Makefile.am.common: make a more working check-local target
1650
1651	* lib/asn1/main.c: use getargs
1652
1653Mon Mar 29 20:19:57 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1654
1655	* kuser/klist.c (print_cred_verbose): use krb5_print_address
1656
1657	* lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int
1658
1659	* lib/krb5/addr_families.c (krb5_print_address): handle unknown
1660 	address types; (ipv6_print_addr): print in 16-bit groups (as it
1661 	should)
1662
1663	* lib/krb5/crc.c: crc_{init_table,update} ->
1664 	_krb5_crc_{init_table,update}
1665
1666	* lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int
1667 	crc_{init_table,update} -> _krb5_crc_{init_table,update}
1668
1669	* lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int
1670
1671	* lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int
1672
1673	* lib/krb5/krb5_locl.h: include krb5-private.h
1674
1675	* kdc/connect.c (addr_to_string): use krb5_print_address
1676
1677	* lib/krb5/addr_families.c (krb5_print_address): int -> size_t
1678
1679	* lib/krb5/addr_families.c: add support for printing ipv6
1680 	addresses, either with inet_ntop, or ugly for-loop
1681
1682	* kdc/524.c: check that the ticket came from a valid address; use
1683 	the address of the connection as the address to put in the v4
1684 	ticket (if this address is AF_INET)
1685
1686	* kdc/connect.c: pass addr to do_524
1687
1688	* kdc/kdc_locl.h: prototype for do_524
1689
1690Sat Mar 27 17:48:31 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
1691
1692	* configure.in: check for OSF C2; bind/bitypes.h, getudbnam,
1693 	setlim; check for auth modules; siad.h, getpwnam_r;
1694 	lib/auth/Makefile, lib/auth/sia/Makefile
1695
1696	* lib/krb5/crypto.c: n_fold -> _krb5_n_fold
1697
1698	* lib/krb5/n-fold.c: n_fold -> _krb5_n_fold
1699
1700Thu Mar 25 04:35:21 1999  Assar Westerlund  <assar@sics.se>
1701
1702	* lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping
1703 	it
1704
1705	* lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data'
1706
1707	* lib/hdb/ndbm.c (NDBM_destroy): clear master key
1708
1709	* lib/hdb/db.c (DB_destroy): clear master key
1710	(DB_open): check malloc
1711
1712	* kdc/connect.c (init_sockets): free addresses
1713
1714	* kadmin/kadmin.c (main): make code more consistent.  always free
1715

Large files files are truncated, but you can click here to view the full file