PageRenderTime 69ms CodeModel.GetById 21ms RepoModel.GetById 0ms app.codeStats 0ms

/crypto/heimdal/ChangeLog.1999

https://bitbucket.org/freebsd/freebsd-head/
Unknown | 2194 lines | 1313 code | 881 blank | 0 comment | 0 complexity | 7049c6291fca799d4eeaae8447e21b64 MD5 | raw file
Possible License(s): MPL-2.0-no-copyleft-exception, BSD-3-Clause, LGPL-2.0, LGPL-2.1, BSD-2-Clause, 0BSD, JSON, AGPL-1.0, GPL-2.0 
    

  1. 1999-12-30  Assar Westerlund  <assar@sics.se>
    2. 

  2. 

  3. 	* configure.in (krb4): use `-ldes' in tests
    4. 

    5. 

  5. 1999-12-26  Assar Westerlund  <assar@sics.se>
    6. 

    7. 

  7. 	* lib/hdb/print.c (event2string): handle events without principal.
    8. 

  8.   	From Luke Howard <lukeh@PADL.COM>
    9. 

    10. 

  10. 1999-12-25  Assar Westerlund  <assar@sics.se>
    11. 

    12. 

  12. 	* Release 0.2j
    13. 

    14. 

  14. Tue Dec 21 18:03:17 1999  Assar Westerlund  <assar@sics.se>
    15. 

    16. 

  16. 	* lib/hdb/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
    17. 

  17.  	related systems
    18. 

    19. 

  19. 	* lib/asn1/Makefile.am (asn1_files): add $(EXEEXT) for cygwin and
    20. 

  20.  	related systems
    21. 

    22. 

  22. 	* include/Makefile.am (krb5-types.h): add $(EXEEXT) for cygwin and
    23. 

  23.  	related systems
    24. 

    25. 

  25. 1999-12-20  Assar Westerlund  <assar@sics.se>
    26. 

    27. 

  27. 	* Release 0.2i
    28. 

    29. 

  29. 1999-12-20  Assar Westerlund  <assar@sics.se>
    30. 

    31. 

  31. 	* lib/krb5/Makefile.am (libkrb5_la_LDFLAGS): bump version to 6:3:1
    32. 

    33. 

  33. 	* lib/krb5/send_to_kdc.c (send_via_proxy): free data
    34. 

  34. 	* lib/krb5/send_to_kdc.c (send_via_proxy): new function use
    35. 

  35. 	getaddrinfo instead of gethostbyname{,2}
    36. 

  36. 	* lib/krb5/get_for_creds.c: use getaddrinfo instead of
    37. 

  37. 	getnodebyname{,2}
    38. 

    39. 

  39. 1999-12-17  Assar Westerlund  <assar@sics.se>
    40. 

    41. 

  41. 	* Release 0.2h
    42. 

    43. 

  43. 1999-12-17  Assar Westerlund  <assar@sics.se>
    44. 

    45. 

  45. 	* Release 0.2g
    46. 

    47. 

  47. 1999-12-16  Assar Westerlund  <assar@sics.se>
    48. 

    49. 

  49. 	* lib/krb5/Makefile.am: bump version to 6:2:1
    50. 

    51. 

  51. 	* lib/krb5/principal.c (krb5_sname_to_principal): handle
    52. 

  52. 	ai_canonname not being set
    53. 

  53. 	* lib/krb5/expand_hostname.c (krb5_expand_hostname): handle
    54. 

  54. 	ai_canonname not being set
    55. 

    56. 

  56. 	* appl/test/uu_server.c: print messages to stderr
    57. 

  57. 	* appl/test/tcp_server.c: print messages to stderr
    58. 

  58. 	* appl/test/nt_gss_server.c: print messages to stderr
    59. 

  59. 	* appl/test/gssapi_server.c: print messages to stderr
    60. 

    61. 

  61. 	* appl/test/tcp_client.c (proto): remove shadowing `context'
    62. 

  62. 	* appl/test/common.c (client_doit): add forgotten ntohs
    63. 

  63. 

  64. 1999-12-13  Assar Westerlund  <assar@sics.se>
    65. 

  65. 

  66. 	* configure.in (VERISON): bump to 0.2g-pre
    67. 

  67. 

  68. 1999-12-12  Assar Westerlund  <assar@sics.se>
    69. 

  69. 

  70. 	* lib/krb5/principal.c (krb5_425_conv_principal_ext): be more
    71. 

  71.  	robust and handle extra dot at the beginning of default_domain
    72. 

  72. 

  73. 1999-12-12  Assar Westerlund  <assar@sics.se>
    74. 

  74. 

  75. 	* Release 0.2f
    76. 

  76. 

  77. 1999-12-12  Assar Westerlund  <assar@sics.se>
    78. 

  78. 

  79. 	* lib/krb5/Makefile.am: bump version to 6:1:1
    80. 

  80. 	
    81. 

  81. 	* lib/krb5/changepw.c (get_kdc_address): use
    82. 

  82.  	`krb5_get_krb_changepw_hst'
    83. 

    84. 

  84. 	* lib/krb5/krbhst.c (krb5_get_krb_changepw_hst): add
    85. 

    86. 

  86. 	* lib/krb5/get_host_realm.c: add support for _kerberos.domain
    87. 

  87.  	(according to draft-ietf-cat-krb-dns-locate-01.txt)
    88. 

    89. 

  89. 1999-12-06  Assar Westerlund  <assar@sics.se>
    90. 

    91. 

  91. 	* Release 0.2e
    92. 

    93. 

  93. 1999-12-06  Assar Westerlund  <assar@sics.se>
    94. 

    95. 

  95. 	* lib/krb5/changepw.c (krb5_change_password): use the correct
    96. 

  96.  	address
    97. 

    98. 

  98. 	* lib/krb5/Makefile.am: bump version to 6:0:1
    99. 

    100. 

  100. 	* lib/asn1/Makefile.am: bump version to 1:4:0
    101. 

    102. 

  102. 1999-12-04  Assar Westerlund  <assar@sics.se>
    103. 

    104. 

  104. 	* configure.in: move AC_KRB_IPv6 to make sure it's performed
    105. 

  105.  	before AC_BROKEN
    106. 

  106. 	(el_init): use new feature of AC_FIND_FUNC_NO_LIBS
    107. 

    108. 

  108. 	* appl/test/uu_client.c: use client_doit
    109. 

  109. 	* appl/test/test_locl.h (client_doit): add prototype
    110. 

  110. 	* appl/test/tcp_client.c: use client_doit
    111. 

  111. 	* appl/test/nt_gss_client.c: use client_doit
    112. 

  112. 	* appl/test/gssapi_client.c: use client_doit
    113. 

  113. 	* appl/test/common.c (client_doit): move identical code here and
    114. 

  114. 	start using getaddrinfo
    115. 

    116. 

  116. 	* appl/kf/kf.c (doit): rewrite to use getaddrinfo
    117. 

  117. 	* kdc/hprop.c: re-write to use getaddrinfo
    118. 

  118. 	* lib/krb5/principal.c (krb5_sname_to_principal): use getaddrinfo
    119. 

  119. 	* lib/krb5/expand_hostname.c (krb5_expand_hostname): use
    120. 

  120. 	getaddrinfo
    121. 

  121. 	* lib/krb5/changepw.c: re-write to use getaddrinfo
    122. 

  122. 	* lib/krb5/addr_families.c (krb5_parse_address): use getaddrinfo
    123. 

    124. 

  124. 1999-12-03  Assar Westerlund  <assar@sics.se>
    125. 

    126. 

  126. 	* configure.in (BROKEN): check for freeaddrinfo, getaddrinfo,
    127. 

  127. 	getnameinfo, gai_strerror
    128. 

  128. 	(socklen_t): check for
    129. 

    130. 

  130. 1999-12-02  Johan Danielsson  <joda@pdc.kth.se>
    131. 

    132. 

  132. 	* lib/krb5/crypto.c: ARCFOUR_set_key -> RC4_set_key
    133. 

    134. 

  134. 1999-11-23  Assar Westerlund  <assar@sics.se>
    135. 

    136. 

  136. 	* lib/krb5/crypto.c (ARCFOUR_string_to_key): change order of bytes
    137. 

  137.  	within unicode characters.  this should probably be done in some
    138. 

  138.  	arbitrarly complex way to do it properly and you would have to
    139. 

  139.  	know what character encoding was used for the password and salt
    140. 

  140.  	string.
    141. 

    142. 

  142. 	* lib/krb5/addr_families.c (ipv4_uninteresting): ignore 0.0.0.0
    143. 

  143. 	(INADDR_ANY)
    144. 

  144. 	(ipv6_uninteresting): remove unused macro
    145. 

    146. 

  146. 1999-11-22  Johan Danielsson  <joda@pdc.kth.se>
    147. 

    148. 

  148. 	* lib/krb5/krb5.h: rc4->arcfour
    149. 

    150. 

  150. 	* lib/krb5/crypto.c: rc4->arcfour
    151. 

    152. 

  152. 1999-11-17  Assar Westerlund  <assar@sics.se>
    153. 

    154. 

  154. 	* lib/krb5/krb5_locl.h: add <rc4.h>
    155. 

  155. 	* lib/krb5/krb5.h (krb5_keytype): add KEYTYPE_RC4
    156. 

  156. 	* lib/krb5/crypto.c: some code for doing RC4/MD5/HMAC which might
    157. 

  157. 	not be totally different from some small company up in the
    158. 

  158. 	north-west corner of the US
    159. 

    160. 

  160. 	* lib/krb5/get_addrs.c (find_all_addresses): change code to
    161. 

  161.  	actually increment buf_size
    162. 

    163. 

  163. 1999-11-14  Assar Westerlund  <assar@sics.se>
    164. 

    165. 

  165. 	* lib/krb5/krb5.h (krb5_context_data): add `scan_interfaces'
    166. 

  166. 	* lib/krb5/get_addrs.c (krb5_get_all_client_addrs): make interaces
    167. 

  167.  	scanning optional
    168. 

  168. 	* lib/krb5/context.c (init_context_from_config_file): set
    169. 

  169.  	`scan_interfaces'
    170. 

    171. 

  171. 	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add add_et_list.c
    172. 

  172. 	* lib/krb5/add_et_list.c (krb5_add_et_list): new function
    173. 

    174. 

  174. 1999-11-12  Assar Westerlund  <assar@sics.se>
    175. 

    176. 

  176. 	* lib/krb5/get_default_realm.c (krb5_get_default_realm,
    177. 

  177. 	krb5_get_default_realms): set realms if they were unset
    178. 

  178. 	* lib/krb5/context.c (init_context_from_config_file): don't
    179. 

  179. 	initialize default realms here.  it's done lazily instead.
    180. 

  180. 	
    181. 

  181. 	* lib/krb5/krb5.h (KRB5_TC_*): make constants unsigned
    182. 

  182. 	* lib/asn1/gen_glue.c (generate_2int, generate_units): make sure
    183. 

  183. 	bit constants are unsigned
    184. 

  184. 	* lib/asn1/gen.c (define_type): make length in sequences be
    185. 

  185. 	unsigned.
    186. 

    187. 

  187. 	* configure.in: remove duplicate test for setsockopt test for
    188. 

  188. 	struct tm.tm_isdst
    189. 

    190. 

  190. 	* lib/krb5/get_in_tkt.c (krb5_get_in_cred): generate
    191. 

  191. 	preauthentication information if we get back ERR_PREAUTH_REQUIRED
    192. 

  192. 	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): remove
    193. 

  193. 	preauthentication generation code.  it's now in krb5_get_in_cred
    194. 

  194. 	
    195. 

  195. 	* configure.in (AC_BROKEN_SNPRINTF): add strptime check for struct
    196. 

  196. 	tm.tm_gmtoff and timezone
    197. 

  197. 	
    198. 

  198. 1999-11-11  Johan Danielsson  <joda@pdc.kth.se>
    199. 

    200. 

  200. 	* kdc/main.c: make this work with multi-db
    201. 

    202. 

  202. 	* kdc/kdc_locl.h: make this work with multi-db
    203. 

    204. 

  204. 	* kdc/config.c: make this work with multi-db
    205. 

    206. 

  206. 1999-11-09  Johan Danielsson  <joda@pdc.kth.se>
    207. 

    208. 

  208. 	* kdc/misc.c: update for multi-database code
    209. 

    210. 

  210. 	* kdc/main.c: update for multi-database code
    211. 

    212. 

  212. 	* kdc/kdc_locl.h: update
    213. 

    214. 

  214. 	* kdc/config.c: allow us to have more than one database
    215. 

    216. 

  216. 1999-11-04  Assar Westerlund  <assar@sics.se>
    217. 

    218. 

  218. 	* Release 0.2d
    219. 

    220. 

  220. 	* lib/krb5/Makefile.am: bump version to 5:0:0 to be safe
    221. 

  221.  	(krb5_context_data has changed and some code do (might) access
    222. 

  222.  	fields directly)
    223. 

    224. 

  224. 	* lib/krb5/krb5.h (krb5_context_data): add `etypes_des'
    225. 

    226. 

  226. 	* lib/krb5/get_cred.c (init_tgs_req): use
    227. 

  227.  	krb5_keytype_to_enctypes_default
    228. 

  228. 

  229. 	* lib/krb5/crypto.c (krb5_keytype_to_enctypes_default): new
    230. 

  230.  	function
    231. 

  231. 

  232. 	* lib/krb5/context.c (set_etypes): new function
    233. 

  233. 	(init_context_from_config_file): set both `etypes' and `etypes_des'
    234. 

    235. 

  235. 1999-11-02  Assar Westerlund  <assar@sics.se>
    236. 

  236. 

  237. 	* configure.in (VERSION): bump to 0.2d-pre
    238. 

  238. 

  239. 1999-10-29  Assar Westerlund  <assar@sics.se>
    240. 

  240. 

  241. 	* lib/krb5/principal.c (krb5_parse_name): check memory allocations
    242. 

  242. 

  243. 1999-10-28  Assar Westerlund  <assar@sics.se>
    244. 

  244. 

  245. 	* Release 0.2c
    246. 

  246. 

  247. 	* lib/krb5/dump_config.c (print_tree): check for empty tree
    248. 

  248. 

  249. 	* lib/krb5/string-to-key-test.c (tests): update the test cases
    250. 

  250.  	with empty principals so that they actually use an empty realm and
    251. 

  251.  	not the default.  use the correct etype for 3DES
    252. 

  252. 

  253. 	* lib/krb5/Makefile.am: bump version to 4:1:0
    254. 

  254. 

  255. 	* kdc/config.c (configure): more careful with the port string
    256. 

  256. 

  257. 1999-10-26  Assar Westerlund  <assar@sics.se>
    258. 

  258. 

  259. 	* Release 0.2b
    260. 

  260. 

  261. 1999-10-20  Assar Westerlund  <assar@sics.se>
    262. 

  262. 

  263. 	* lib/krb5/Makefile.am: bump version to 4:0:0
    264. 

  264.  	(krb524_convert_creds_kdc and potentially some other functions
    265. 

  265.  	have changed prototypes)
    266. 

  266. 

  267. 	* lib/hdb/Makefile.am: bump version to 4:0:1
    268. 

  268. 

  269. 	* lib/asn1/Makefile.am: bump version to 1:3:0
    270. 

  270. 

  271. 	* configure.in (LIB_roken): add dbopen.  getcap in roken
    272. 

  272.  	references dbopen and with shared libraries we need to add this
    273. 

  273.  	dependency.
    274. 

  274. 

  275. 	* lib/krb5/verify_krb5_conf.c (main): support speicifying the
    276. 

  276.  	configuration file to test on the command line
    277. 

  277. 

  278. 	* lib/krb5/config_file.c (parse_binding): handle line with no
    279. 

  279.  	whitespace before =
    280. 

  280. 	(krb5_config_parse_file_debug): set lineno earlier so that we don't
    281. 

  281. 	use it unitialized
    282. 

  282. 

  283. 	* configure.in (AM_INIT_AUTOMAKE): bump to 0.2b-pre opt*: need
    284. 

  284.  	more include files for these tests
    285. 

  285. 

  286. 	* lib/krb5/set_default_realm.c (krb5_set_default_realm): use
    287. 

  287.  	krb5_config_get_strings, which means that your configuration file
    288. 

  288.  	should look like:
    289. 

  289. 	
    290. 

  290. 	[libdefaults]
    291. 

  291. 	  default_realm = realm1 realm2 realm3
    292. 

  292. 

  293. 	* lib/krb5/set_default_realm.c (config_binding_to_list): fix
    294. 

  294.  	copy-o.  From Michal Vocu <michal@karlin.mff.cuni.cz>
    295. 

  295. 

  296. 	* kdc/config.c (configure): add a missing strdup.  From Michal
    297. 

  297.  	Vocu <michal@karlin.mff.cuni.cz>
    298. 

  298. 

  299. 1999-10-17  Assar Westerlund  <assar@sics.se>
    300. 

  300. 

  301. 	* Release 0.2a
    302. 

  302. 

  303. 	* configure.in: only test for db.h with using berkeley_db. remember
    304. 

  304.  	to link with LIB_tgetent when checking for el_init. add xnlock
    305. 

  305. 

  306. 	* appl/Makefile.am: add xnlock
    307. 

  307. 

  308. 	* kdc/kerberos5.c (find_etype): support null keys
    309. 

  309. 

  310. 	* kdc/kerberos4.c (get_des_key): support null keys
    311. 

  311. 

  312. 	* lib/krb5/crypto.c (krb5_get_wrapped_length): more correct
    313. 

  313.  	calculation
    314. 

  314. 

  315. 1999-10-16  Johan Danielsson  <joda@pdc.kth.se>
    316. 

  316. 

  317. 	* kuser/kinit.c (main): pass ccache to krb524_convert_creds_kdc
    318. 

  318. 

  319. 1999-10-12  Johan Danielsson  <joda@pdc.kth.se>
    320. 

  320. 

  321. 	* lib/krb5/crypto.c (krb5_enctype_to_keytype): remove warning
    322. 

  322. 

  323. 1999-10-10  Assar Westerlund  <assar@sics.se>
    324. 

  324. 

  325. 	* lib/krb5/mk_req.c (krb5_mk_req): use krb5_free_host_realm
    326. 

  326. 

  327. 	* lib/krb5/krb5.h (krb5_ccache_data): make `ops' const
    328. 

    329. 

  329. 	* lib/krb5/crypto.c (krb5_string_to_salttype): new function
    330. 

    331. 

  331. 	* **/*.[ch]: const-ize
    332. 

    333. 

  333. 1999-10-06  Assar Westerlund  <assar@sics.se>
    334. 

  334. 	
    335. 

  335. 	* lib/krb5/creds.c (krb5_compare_creds): const-ify
    336. 

  336. 	
    337. 

  337. 	* lib/krb5/cache.c: clean-up and comment-up
    338. 

    339. 

  339. 	* lib/krb5/copy_host_realm.c (krb5_copy_host_realm): copy all the
    340. 

  340.  	strings
    341. 

    342. 

  342. 	* lib/krb5/verify_user.c (krb5_verify_user_lrealm): free the
    343. 

  343.  	correct realm part
    344. 

    345. 

  345. 	* kdc/connect.c (handle_tcp): things work much better when ret is
    346. 

  346.  	initialized
    347. 

    348. 

  348. 1999-10-03  Assar Westerlund  <assar@sics.se>
    349. 

    350. 

  350. 	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): look at the
    351. 

  351.  	type of the session key
    352. 

    353. 

  353. 	* lib/krb5/crypto.c (krb5_enctypes_compatible_keys): spell
    354. 

  354.  	correctly
    355. 

    356. 

  356. 	* lib/krb5/creds.c (krb5_compare_creds): fix spelling of
    357. 

  357.  	krb5_enctypes_compatible_keys
    358. 

    359. 

  359. 	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): get new
    360. 

  360.  	credentials from the KDC if the existing one doesn't have a DES
    361. 

  361.  	session key.
    362. 

    363. 

  363. 	* lib/45/get_ad_tkt.c (get_ad_tkt): update to new
    364. 

  364.  	krb524_convert_creds_kdc
    365. 

    366. 

  366. 1999-10-03  Johan Danielsson  <joda@pdc.kth.se>
    367. 

    368. 

  368. 	* lib/krb5/keytab_keyfile.c: make krb5_akf_ops const
    369. 

    370. 

  370. 	* lib/krb5/keytab_memory.c: make krb5_mkt_ops const
    371. 

    372. 

  372. 	* lib/krb5/keytab_file.c: make krb5_fkt_ops const
    373. 

    374. 

  374. 1999-10-01  Assar Westerlund  <assar@sics.se>
    375. 

    376. 

  376. 	* lib/krb5/config_file.c: rewritten to allow error messages
    377. 

    378. 

  378. 	* lib/krb5/Makefile.am (bin_PROGRAMS): add verify_krb5_conf
    379. 

  379. 	(libkrb5_la_SOURCES): add config_file_netinfo.c
    380. 

    381. 

  381. 	* lib/krb5/verify_krb5_conf.c: new program for verifying that
    382. 

  382. 	krb5.conf is corret
    383. 

    384. 

  384. 	* lib/krb5/config_file_netinfo.c: moved netinfo code here from
    385. 

  385.  	config_file.c
    386. 

    387. 

  387. 1999-09-28  Assar Westerlund  <assar@sics.se>
    388. 

    389. 

  389. 	* kdc/hpropd.c (dump_krb4): kludge default_realm
    390. 

    391. 

  391. 	* lib/asn1/check-der.c: add test cases for Generalized time and
    392. 

  392.  	make sure we return the correct value
    393. 

    394. 

  394. 	* lib/asn1/der_put.c: simplify by using der_put_length_and_tag
    395. 

    396. 

  396. 	* lib/krb5/verify_user.c (krb5_verify_user_lrealm): ariant of
    397. 

  397.  	krb5_verify_user that tries in all the local realms
    398. 

    399. 

  399. 	* lib/krb5/set_default_realm.c: add support for having several
    400. 

  400.  	default realms
    401. 

    402. 

  402. 	* lib/krb5/kuserok.c (krb5_kuserok): use `krb5_get_default_realms'
    403. 

    404. 

  404. 	* lib/krb5/get_default_realm.c (krb5_get_default_realms): add
    405. 

  405. 

  406. 	* lib/krb5/krb5.h (krb5_context_data): change `default_realm' to
    407. 

  407.  	`default_realms'
    408. 

    409. 

  409. 	* lib/krb5/context.c: change from `default_realm' to
    410. 

  410.  	`default_realms'
    411. 

    412. 

  412. 	* lib/krb5/aname_to_localname.c (krb5_aname_to_localname): use
    413. 

  413.  	krb5_get_default_realms
    414. 

  414. 

  415. 	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add copy_host_realm.c
    416. 

  416. 

  417. 	* lib/krb5/copy_host_realm.c: new file
    418. 

  418. 

  419. 1999-09-27  Johan Danielsson  <joda@pdc.kth.se>
    420. 

  420. 

  421. 	* lib/asn1/der_put.c (encode_generalized_time): encode length
    422. 

  422. 

  423. 	* lib/krb5/recvauth.c: new function `krb5_recvauth_match_version'
    424. 

  424. 	that allows more intelligent matching of the application version
    425. 

    426. 

  426. 1999-09-26  Assar Westerlund  <assar@sics.se>
    427. 

    428. 

  428. 	* lib/asn1/asn1_print.c: add err.h
    429. 

    430. 

  430. 	* kdc/config.c (configure): use parse_bytes
    431. 

    432. 

  432. 	* appl/test/nt_gss_common.c: use the correct header file
    433. 

    434. 

  434. 1999-09-24  Johan Danielsson  <joda@pdc.kth.se>
    435. 

    436. 

  436. 	* kuser/klist.c: add a `--cache' flag
    437. 

    438. 

  438. 	* kuser/kinit.c (main): only get default value for `get_v4_tgt' if
    439. 

  439. 	it's explicitly set in krb5.conf
    440. 

    441. 

  441. 1999-09-23  Assar Westerlund  <assar@sics.se>
    442. 

    443. 

  443. 	* lib/asn1/asn1_print.c (tag_names); add another univeral tag
    444. 

    445. 

  445. 	* lib/asn1/der.h: update universal tags
    446. 

    447. 

  447. 1999-09-22  Assar Westerlund  <assar@sics.se>
    448. 

    449. 

  449. 	* lib/asn1/asn1_print.c (loop): print length of octet string
    450. 

    451. 

  451. 1999-09-21  Johan Danielsson  <joda@pdc.kth.se>
    452. 

    453. 

  453. 	* admin/ktutil.c (kt_get): add `--help'
    454. 

    455. 

  455. 1999-09-21  Assar Westerlund  <assar@sics.se>
    456. 

  456. 

  457. 	* kuser/Makefile.am: add kdecode_ticket
    458. 

  458. 

  459. 	* kuser/kdecode_ticket.c: new debug program
    460. 

  460. 

  461. 	* appl/test/nt_gss_server.c: new program to test against `Sample *
    462. 

  462.  	SSPI Code' in Windows 2000 RC1 SDK.
    463. 

    464. 

  464. 	* appl/test/Makefile.am: add nt_gss_client and nt_gss_server
    465. 

    466. 

  466. 	* lib/asn1/der_get.c (decode_general_string): remember to advance
    467. 

  467.  	ret over the length-len
    468. 

    469. 

  469. 	* lib/asn1/Makefile.am: add asn1_print
    470. 

    471. 

  471. 	* lib/asn1/asn1_print.c: new program for printing DER-structures
    472. 

    473. 

  473. 	* lib/asn1/der_put.c: make functions more consistent
    474. 

    475. 

  475. 	* lib/asn1/der_get.c: make functions more consistent
    476. 

    477. 

  477. 1999-09-20  Johan Danielsson  <joda@pdc.kth.se>
    478. 

    479. 

  479. 	* kdc/kerberos5.c: be more informative in pa-data error messages
    480. 

    481. 

  481. 1999-09-16  Assar Westerlund  <assar@sics.se>
    482. 

    483. 

  483. 	* configure.in: test for strlcpy, strlcat
    484. 

    485. 

  485. 1999-09-14  Assar Westerlund  <assar@sics.se>
    486. 

    487. 

  487. 	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): return
    488. 

  488.  	KRB5_LIBOS_PWDINTR when interrupted
    489. 

    490. 

  490. 	* lib/krb5/get_in_tkt_pw.c (krb5_password_key_proc): check return
    491. 

  491.  	value from des_read_pw_string
    492. 

    493. 

  493. 	* kuser/kinit.c (main): don't print any error if reading the
    494. 

  494.  	password was interrupted
    495. 

    496. 

  496. 	* kpasswd/kpasswd.c (main): don't print any error if reading the
    497. 

  497.  	password was interrupted
    498. 

    499. 

  499. 	* kdc/string2key.c (main): check the return value from fgets
    500. 

    501. 

  501. 	* kdc/kstash.c (main): check return value from des_read_pw_string
    502. 

    503. 

  503. 	* admin/ktutil.c (kt_add): check the return-value from fgets and
    504. 

  504.  	overwrite the password for paranoid reasons
    505. 

    506. 

  506. 	* lib/krb5/keytab_keyfile.c (get_cell_and_realm): only remove the
    507. 

  507.  	newline if it's there
    508. 

    509. 

  509. 1999-09-13  Assar Westerlund  <assar@sics.se>
    510. 

    511. 

  511. 	* kdc/hpropd.c (main): remove bogus error with `--print'.  remove
    512. 

  512.  	sysloging of number of principals transferred
    513. 

  513. 

  514. 	* kdc/hprop.c (ka_convert): set flags correctly for krbtgt/CELL
    515. 

  515.  	principals
    516. 

  516. 	(main): get rid of bogus opening of hdb database when propagating
    517. 

  517. 	ka-server database
    518. 

  518. 

  519. 1999-09-12  Assar Westerlund  <assar@sics.se>
    520. 

  520. 

  521. 	* lib/krb5/krb5_locl.h (O_BINARY): add fallback definition
    522. 

  522. 

  523. 	* lib/krb5/krb5.h (krb5_context_data): add keytab types
    524. 

  524. 

  525. 	* configure.in: revert back awk test, not worked around in
    526. 

  526.  	roken.awk
    527. 

  527. 

  528. 	* lib/krb5/keytab_krb4.c: remove O_BINARY
    529. 

  529. 

  530. 	* lib/krb5/keytab_keyfile.c: some support for AFS KeyFile's.  From
    531. 

  531. 	Love <lha@e.kth.se>
    532. 

  532. 

  533. 	* lib/krb5/keytab_file.c: remove O_BINARY
    534. 

  534. 

  535. 	* lib/krb5/keytab.c: move the list of keytab types to the context
    536. 

  536. 

  537. 	* lib/krb5/fcache.c: remove O_BINARY
    538. 

  538. 

  539. 	* lib/krb5/context.c (init_context_from_config_file): register all
    540. 

  540.  	standard cache and keytab types
    541. 

  541. 	(krb5_free_context): free `kt_types'
    542. 

    543. 

  543. 	* lib/krb5/cache.c (krb5_cc_resolve): move the registration of the
    544. 

  544.  	standard types of credential caches to context
    545. 

    546. 

  546. 	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_keyfile.c
    547. 

    548. 

  548. 1999-09-10  Assar Westerlund  <assar@sics.se>
    549. 

    550. 

  550. 	* lib/krb5/keytab.c: add comments and clean-up
    551. 

    552. 

  552. 	* admin/ktutil.c: add `ktutil copy'
    553. 

    554. 

  554. 	* lib/krb5/keytab_krb4.c: new file
    555. 

  555. 

  556. 	* lib/krb5/krb5.h (krb5_kt_cursor): add a `data' field
    557. 

    558. 

  558. 	* lib/krb5/Makefile.am: add keytab_krb4.c
    559. 

    560. 

  560. 	* lib/krb5/keytab.c: add krb4 and correct some if's
    561. 

    562. 

  562. 	* admin/srvconvert.c (srvconv): move common code
    563. 

    564. 

  564. 	* lib/krb5/krb5.h (krb5_fkt_ops, krb5_mkt_ops): new variables
    565. 

    566. 

  566. 	* lib/krb5/keytab.c: move out file and memory functions
    567. 

    568. 

  568. 	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add keytab_file.c,
    569. 

  569.  	keytab_memory.c
    570. 

    571. 

  571. 	* lib/krb5/keytab_memory.c: new file
    572. 

    573. 

  573. 	* lib/krb5/keytab_file.c: new file
    574. 

    575. 

  575. 	* kpasswd/kpasswdd.c: move out password quality functions
    576. 

    577. 

  577. 1999-09-07  Assar Westerlund  <assar@sics.se>
    578. 

    579. 

  579. 	* lib/hdb/Makefile.am (libhdb_la_SOURCES): add keytab.c.  From
    580. 

  580.  	Love <lha@e.kth.se>
    581. 

    582. 

  582. 	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): check
    583. 

  583.  	return value from `krb5_sendto_kdc'
    584. 

    585. 

  585. 1999-09-06  Assar Westerlund  <assar@sics.se>
    586. 

  586. 

  587. 	* lib/krb5/send_to_kdc.c (send_and_recv): rename to recv_loop and
    588. 

  588.  	remove the sending of data.  add a parameter `limit'.  let callers
    589. 

  589.  	send the date themselves (and preferably with net_write on tcp
    590. 

  590.  	sockets)
    591. 

  591. 	(send_and_recv_tcp): read first the length field and then only that
    592. 

  592. 	many bytes
    593. 

    594. 

  594. 1999-09-05  Assar Westerlund  <assar@sics.se>
    595. 

    596. 

  596. 	* kdc/connect.c (handle_tcp): try to print warning `TCP data of
    597. 

  597.  	strange type' less often
    598. 

    599. 

  599. 	* lib/krb5/send_to_kdc.c (send_and_recv): handle EINTR properly.
    600. 

  600.   	return on EOF.  always free data.  check return value from
    601. 

  601.  	realloc.
    602. 

  602. 	(send_and_recv_tcp, send_and_recv_http): check advertised length
    603. 

  603. 	against actual length
    604. 

  604. 

  605. 1999-09-01  Johan Danielsson  <joda@pdc.kth.se>
    606. 

  606. 

  607. 	* configure.in: check for sgi capabilities
    608. 

  608. 

  609. 1999-08-27  Johan Danielsson  <joda@pdc.kth.se>
    610. 

  610. 

  611. 	* lib/krb5/get_addrs.c: krb5_get_all_server_addrs shouldn't return
    612. 

  612. 	extra addresses
    613. 

  613. 

  614. 	* kpasswd/kpasswdd.c: use HDB keytabs; change some error messages;
    615. 

  615. 	add --realm flag
    616. 

  616. 

  617. 	* lib/krb5/address.c (krb5_append_addresses): remove duplicates
    618. 

  618. 

  619. 1999-08-26  Johan Danielsson  <joda@pdc.kth.se>
    620. 

  620. 

  621. 	* lib/hdb/keytab.c: HDB keytab backend
    622. 

  622. 

  623. 1999-08-25  Johan Danielsson  <joda@pdc.kth.se>
    624. 

  624. 

  625. 	* lib/krb5/keytab.c
    626. 

  626. 	(krb5_kt_{start_seq_get,next_entry,end_seq_get}): check for NULL
    627. 

  627. 	pointer
    628. 

  628. 

  629. 1999-08-24  Johan Danielsson  <joda@pdc.kth.se>
    630. 

  630. 

  631. 	* kpasswd/kpasswdd.c: add `--keytab' flag
    632. 

    633. 

  633. 1999-08-23  Assar Westerlund  <assar@sics.se>
    634. 

    635. 

  635. 	* lib/krb5/addr_families.c (IN6_ADDR_V6_TO_V4): use `s6_addr'
    636. 

  636.  	instead of the non-standard `s6_addr32'.  From Yoshinobu Inoue
    637. 

  637.  	<shin@kame.net> by way of the KAME repository
    638. 

    639. 

  639. 1999-08-18  Assar Westerlund  <assar@sics.se>
    640. 

    641. 

  641. 	* configure.in (--enable-new-des3-code): remove check for `struct
    642. 

  642.  	addrinfo'
    643. 

    644. 

  644. 	* lib/krb5/crypto.c (etypes): remove NEW_DES3_CODE, enable
    645. 

  645.  	des3-cbc-sha1 and keep old-des3-cbc-sha1 for backwards
    646. 

  646.  	compatability
    647. 

  647. 

  648. 	* lib/krb5/krb5.h (krb5_enctype): des3-cbc-sha1 (with key
    649. 

  649.  	derivation) just got assigned etype 16 by <bcn@isi.edu>.  keep the
    650. 

  650.  	old etype at 7.
    651. 

  651. 

  652. 1999-08-16  Assar Westerlund  <assar@sics.se>
    653. 

  653. 

  654. 	* lib/krb5/sendauth.c (krb5_sendauth): only look at errno if
    655. 

  655.  	krb5_net_read actually returns -1
    656. 

  656. 

  657. 	* lib/krb5/recvauth.c (krb5_recvauth): only look at errno if
    658. 

  658.  	krb5_net_read actually returns -1
    659. 

  659. 

  660. 	* appl/kf/kf.c (proto): don't trust errno if krb5_net_read hasn't
    661. 

  661.  	returned -1
    662. 

  662. 

  663. 	* appl/test/tcp_server.c (proto): only trust errno if
    664. 

  664.  	krb5_net_read actually returns -1
    665. 

  665. 

  666. 	* appl/kf/kfd.c (proto): be more careful with the return value
    667. 

  667.  	from krb5_net_read
    668. 

  668. 

  669. 1999-08-13  Assar Westerlund  <assar@sics.se>
    670. 

  670. 

  671. 	* lib/krb5/get_addrs.c (get_addrs_int): try the different ways
    672. 

  672.  	sequentially instead of just one.  this helps if your heimdal was
    673. 

  673.  	built with v6-support but your kernel doesn't have it, for
    674. 

  674.  	example.
    675. 

  675. 

  676. 1999-08-12  Assar Westerlund  <assar@sics.se>
    677. 

  677. 

  678. 	* kdc/hpropd.c: add inetd flag.  default means try to figure out
    679. 

  679.  	if stdin is a socket or not.
    680. 

  680. 

  681. 	* Makefile.am (ACLOCAL): just use `cf', this variable is only used
    682. 

  682.  	when the current directory is $(top_srcdir) anyways and having
    683. 

  683.  	$(top_srcdir) there breaks if it's a relative path
    684. 

    685. 

  685. 1999-08-09  Johan Danielsson  <joda@pdc.kth.se>
    686. 

    687. 

  687. 	* configure.in: check for setproctitle
    688. 

    689. 

  689. 1999-08-05  Assar Westerlund  <assar@sics.se>
    690. 

    691. 

  691. 	* lib/krb5/principal.c (krb5_sname_to_principal): remember to call
    692. 

  692.  	freehostent
    693. 

    694. 

  694. 	* appl/test/tcp_client.c: call freehostent
    695. 

    696. 

  696. 	* appl/kf/kf.c (doit): call freehostent
    697. 

    698. 

  698. 	* appl/kf/kf.c: make v6 friendly and simplify
    699. 

    700. 

  700. 	* appl/kf/kfd.c: make v6 friendly and simplify
    701. 

    702. 

  702. 	* appl/test/tcp_server.c: simplify by using krb5_err instead of
    703. 

  703.  	errx
    704. 

  704. 	
    705. 

  705. 	* appl/test/tcp_client.c: simplify by using krb5_err instead of
    706. 

  706.  	errx
    707. 

    708. 

  708. 	* appl/test/tcp_server.c: make v6 friendly and simplify
    709. 

    710. 

  710. 	* appl/test/tcp_client.c: make v6 friendly and simplify
    711. 

    712. 

  712. 1999-08-04  Assar Westerlund  <assar@sics.se>
    713. 

    714. 

  714. 	* Release 0.1m
    715. 

    716. 

  716. 1999-08-04  Assar Westerlund  <assar@sics.se>
    717. 

    718. 

  718. 	* kuser/kinit.c (main): some more KRB4-conditionalizing
    719. 

    720. 

  720. 	* lib/krb5/get_in_tkt.c: type correctness
    721. 

    722. 

  722. 	* lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): set forwarded in
    723. 

  723.  	flags.  From Miroslav Ruda <ruda@ics.muni.cz>
    724. 

    725. 

  725. 	* kuser/kinit.c (main): add config file support for forwardable
    726. 

  726.  	and krb4 support.  From Miroslav Ruda <ruda@ics.muni.cz>
    727. 

    728. 

  728. 	* kdc/kerberos5.c (as_rep): add an empty X500-compress string as
    729. 

  729.  	transited.
    730. 

  730. 	(fix_transited_encoding): check length.
    731. 

  731. 	From Miroslav Ruda <ruda@ics.muni.cz>
    732. 

    733. 

  733. 	* kdc/hpropd.c (dump_krb4): check the realm so that we don't dump
    734. 

  734.  	principals in some other realm. From Miroslav Ruda
    735. 

  735.  	<ruda@ics.muni.cz>
    736. 

  736. 	(main): rename sa_len -> sin_len, sa_lan is a define on some
    737. 

  737. 	platforms.
    738. 

    739. 

  739. 	* appl/kf/kfd.c: add regpag support. From Miroslav Ruda
    740. 

  740.  	<ruda@ics.muni.cz>
    741. 

    742. 

  742. 	* appl/kf/kf.c: add `-G' and forwardable option in krb5.conf.
    743. 

  743.   	From Miroslav Ruda <ruda@ics.muni.cz>
    744. 

  744. 

  745. 	* lib/krb5/config_file.c (parse_list): don't run past end of line
    746. 

    747. 

  747. 	* appl/test/gss_common.h: new prototypes
    748. 

  748. 

  749. 	* appl/test/gssapi_client.c: use gss_err instead of abort
    750. 

  750. 

  751. 	* appl/test/gss_common.c (gss_verr, gss_err): add
    752. 

  752. 

  753. 1999-08-03  Assar Westerlund  <assar@sics.se>
    754. 

  754. 

  755. 	* lib/krb5/Makefile.am (n_fold_test_LDADD): need to set this
    756. 

  756.  	otherwise it doesn't build with shared libraries
    757. 

    758. 

  758. 	* kdc/hpropd.c: v6-ify
    759. 

  759. 

  760. 	* kdc/hprop.c: v6-ify
    761. 

  761. 

  762. 1999-08-01  Assar Westerlund  <assar@sics.se>
    763. 

  763. 

  764. 	* lib/krb5/mk_req.c (krb5_mk_req): use krb5_expand_hostname
    765. 

  765. 

  766. 1999-07-31  Assar Westerlund  <assar@sics.se>
    767. 

  767. 

  768. 	* lib/krb5/get_host_realm.c (krb5_get_host_realm_int): new
    769. 

  769.  	function that takes a FQDN
    770. 

  770. 

  771. 	* lib/krb5/Makefile.am (libkrb5_la_SOURCES): add exapnd_hostname.c
    772. 

  772. 

  773. 	* lib/krb5/expand_hostname.c: new file
    774. 

  774. 

  775. 1999-07-28  Assar Westerlund  <assar@sics.se>
    776. 

  776. 

  777. 	* Release 0.1l
    778. 

  778. 

  779. 1999-07-28  Assar Westerlund  <assar@sics.se>
    780. 

  780. 

  781. 	* lib/asn1/Makefile.am: bump version to 1:2:0
    782. 

  782. 

  783. 	* lib/krb5/Makefile.am: bump version to 3:1:0
    784. 

  784. 

  785. 	* configure.in: more inet_pton to roken
    786. 

  786. 

  787. 	* lib/krb5/principal.c (krb5_sname_to_principal): use
    788. 

  788.  	getipnodebyname
    789. 

  789. 

  790. 1999-07-26  Assar Westerlund  <assar@sics.se>
    791. 

  791. 

  792. 	* Release 0.1k
    793. 

  793. 

  794. 1999-07-26  Johan Danielsson  <joda@pdc.kth.se>
    795. 

  795. 

  796. 	* lib/krb5/Makefile.am: bump version number (changed function
    797. 

  797. 	signatures)
    798. 

  798. 

  799. 	* lib/hdb/Makefile.am: bump version number (changes to some
    800. 

  800. 	function signatures)
    801. 

  801. 

  802. 1999-07-26  Assar Westerlund  <assar@sics.se>
    803. 

  803. 

  804. 	* lib/krb5/Makefile.am: bump version to 3:0:2
    805. 

  805. 

  806. 	* lib/hdb/Makefile.am: bump version to 2:1:0
    807. 

  807. 

  808. 	* lib/asn1/Makefile.am: bump version to 1:1:0
    809. 

  809. 

  810. 1999-07-26  Assar Westerlund  <assar@sics.se>
    811. 

  811. 

  812. 	* Release 0.1j
    813. 

  813. 

  814. 1999-07-26  Assar Westerlund  <assar@sics.se>
    815. 

  815. 

  816. 	* configure.in: rokenize inet_ntop
    817. 

  817. 

  818. 	* lib/krb5/store_fd.c: lots of changes from size_t to ssize_t
    819. 

  819. 	
    820. 

  820. 	* lib/krb5/store_mem.c: lots of changes from size_t to ssize_t
    821. 

  821. 	
    822. 

  822. 	* lib/krb5/store_emem.c: lots of changes from size_t to ssize_t
    823. 

  823. 	
    824. 

  824. 	* lib/krb5/store.c: lots of changes from size_t to ssize_t
    825. 

  825. 	(krb5_ret_stringz): check return value from realloc
    826. 

  826. 

  827. 	* lib/krb5/mk_safe.c: some type correctness
    828. 

  828. 	
    829. 

  829. 	* lib/krb5/mk_priv.c: some type correctness
    830. 

  830. 	
    831. 

  831. 	* lib/krb5/krb5.h (krb5_storage): change return values of
    832. 

  832. 	functions from size_t to ssize_t
    833. 

  833. 	
    834. 

  834. 1999-07-24  Assar Westerlund  <assar@sics.se>
    835. 

  835. 

  836. 	* Release 0.1i
    837. 

  837. 

  838. 	* configure.in (AC_PROG_AWK): disable. mawk seems to mishandle \#
    839. 

  839.  	in lib/roken/roken.awk
    840. 

  840. 

  841. 	* lib/krb5/get_addrs.c (find_all_addresses): try to use SA_LEN to
    842. 

  842.  	step over addresses if there's no `sa_lan' field
    843. 

  843. 

  844. 	* lib/krb5/sock_principal.c (krb5_sock_to_principal): simplify by
    845. 

  845.  	using `struct sockaddr_storage'
    846. 

    847. 

  847. 	* lib/krb5/send_to_kdc.c (krb5_sendto_kdc): simplify by using
    848. 

  848.  	`struct sockaddr_storage'
    849. 

    850. 

  850. 	* lib/krb5/changepw.c (krb5_change_password): simplify by using
    851. 

  851.  	`struct sockaddr_storage'
    852. 

    853. 

  853. 	* lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd):
    854. 

  854.  	simplify by using `struct sockaddr_storage'
    855. 

    856. 

  856. 	* kpasswd/kpasswdd.c (*): simplify by using `struct
    857. 

  857.  	sockaddr_storage'
    858. 

    859. 

  859. 	* kdc/connect.c (*): simplify by using `struct sockaddr_storage'
    860. 

    861. 

  861. 	* configure.in (sa_family_t): just test for existence
    862. 

  862. 	(sockaddr_storage): also specify include file
    863. 

  863. 

  864. 	* configure.in (AM_INIT_AUTOMAKE): bump version to 0.1i
    865. 

  865. 	(sa_family_t): test for
    866. 

  866. 	(struct	sockaddr_storage): test for
    867. 

  867. 

  868. 	* kdc/hprop.c (propagate_database): typo, NULL should be
    869. 

  869.  	auth_context
    870. 

  870. 

  871. 	* lib/krb5/get_addrs.c: conditionalize on HAVE_IPV6 instead of
    872. 

  872.  	AF_INET6
    873. 

  873. 

  874. 	* appl/kf/kf.c (main): use warnx
    875. 

  875. 

  876. 	* appl/kf/kf.c (proto): remove shadowing context
    877. 

  877. 

  878. 	* lib/krb5/get_addrs.c (find_all_addresses): try to handle the
    879. 

  879.  	case of getting back an `sockaddr_in6' address when sizeof(struct
    880. 

  880.  	sockaddr_in6) > sizeof(struct sockaddr) and we have no sa_len to
    881. 

  881.  	tell us how large the address is.  This obviously doesn't work
    882. 

  882.  	with unknown protocol types.
    883. 

    884. 

  884. 1999-07-24  Assar Westerlund  <assar@sics.se>
    885. 

    886. 

  886. 	* Release 0.1h
    887. 

    888. 

  888. 1999-07-23  Assar Westerlund  <assar@sics.se>
    889. 

    890. 

  890. 	* appl/kf/kfd.c: clean-up and more paranoia
    891. 

    892. 

  892. 	* etc/services.append: add kf
    893. 

    894. 

  894. 	* appl/kf/kf.c: rename tk_file to ccache for consistency.  clean-up
    895. 

    896. 

  896. 1999-07-22  Assar Westerlund  <assar@sics.se>
    897. 

    898. 

  898. 	* lib/krb5/n-fold-test.c (main): print the correct data
    899. 

    900. 

  900. 	* appl/Makefile.am (SUBDIRS): add kf
    901. 

    902. 

  902. 	* appl/kf: new program.  From Miroslav Ruda <ruda@ics.muni.cz>
    903. 

    904. 

  904. 	* kdc/hprop.c: declare some variables unconditionally to simplify
    905. 

  905.  	things
    906. 

    907. 

  907. 	* kpasswd/kpasswdd.c: initialize kadm5 connection for every change
    908. 

  908.  	(otherwise the modifier in the database doesn't get set)
    909. 

    910. 

  910. 	* kdc/hpropd.c: clean-up and re-organize
    911. 

    912. 

  912. 	* kdc/hprop.c: clean-up and re-organize
    913. 

    914. 

  914.  	* configure.in (SunOS): define to xy for SunOS x.y
    915. 

    916. 

  916. 1999-07-19  Assar Westerlund  <assar@sics.se>
    917. 

    918. 

  918. 	* configure.in (AC_BROKEN): test for copyhostent, freehostent,
    919. 

  919.  	getipnodebyaddr, getipnodebyname
    920. 

    921. 

  921. 1999-07-15  Assar Westerlund  <assar@sics.se>
    922. 

    923. 

  923. 	* lib/asn1/check-der.c: more test cases for integers
    924. 

    925. 

  925. 	* lib/asn1/der_length.c (length_int): handle the case of the
    926. 

  926.  	largest negative integer by not calling abs
    927. 

    928. 

  928. 1999-07-14  Assar Westerlund  <assar@sics.se>
    929. 

    930. 

  930. 	* lib/asn1/check-der.c (generic_test): check malloc return value
    931. 

  931.  	properly
    932. 

    933. 

  933. 	* lib/krb5/Makefile.am: add string_to_key_test
    934. 

    935. 

  935. 	* lib/krb5/prog_setup.c (krb5_program_setup): always initialize
    936. 

  936.  	the context
    937. 

    938. 

  938. 	* lib/krb5/n-fold-test.c (main): return a relevant return value
    939. 

    940. 

  940. 	* lib/krb5/krbhst.c: do SRV lookups for admin server as well.
    941. 

  941.   	some clean-up.
    942. 

    943. 

  943. 1999-07-12  Assar Westerlund  <assar@sics.se>
    944. 

    945. 

  945. 	* configure.in: handle not building X programs
    946. 

    947. 

  947. 1999-07-06  Assar Westerlund  <assar@sics.se>
    948. 

    949. 

  949. 	* lib/krb5/addr_families.c (ipv6_parse_addr): remove duplicate
    950. 

  950.  	variable
    951. 

  951. 	(ipv6_sockaddr2port): fix typo
    952. 

    953. 

  953. 	* etc/services.append: beginning of a file with services
    954. 

    955. 

  955. 	* lib/krb5/cache.c (krb5_cc_resolve): fall-back to files if
    956. 

  956.  	there's no prefix.  also clean-up a little bit.
    957. 

    958. 

  958. 	* kdc/hprop.c (--kaspecials): new flag for handling special KA
    959. 

  959.  	server entries.  From "Brandon S. Allbery KF8NH"
    960. 

  960.  	<allbery@kf8nh.apk.net>
    961. 

    962. 

  962. 1999-07-05  Assar Westerlund  <assar@sics.se>
    963. 

    964. 

  964. 	* kdc/connect.c (handle_tcp): make sure we have data before
    965. 

  965.  	starting to look for HTTP
    966. 

    967. 

  967. 	* kdc/connect.c (handle_tcp): always do getpeername, we can't
    968. 

  968.  	trust recvfrom to return anything sensible
    969. 

    970. 

  970. 1999-07-04  Assar Westerlund  <assar@sics.se>
    971. 

    972. 

  972. 	* lib/krb5/get_in_tkt.c (add_padat): encrypt pre-auth data with
    973. 

  973.  	all enctypes
    974. 

    975. 

  975. 	* kpasswd/kpasswdd.c (change): fetch the salt-type from the entry
    976. 

    977. 

  977. 	* admin/srvconvert.c (srvconv): better error messages
    978. 

    979. 

  979. 1999-07-03  Assar Westerlund  <assar@sics.se>
    980. 

    981. 

  981. 	* lib/krb5/principal.c (unparse_name): error check malloc properly
    982. 

    983. 

  983. 	* lib/krb5/get_in_tkt.c (krb5_init_etype): error check malloc
    984. 

  984.  	properly
    985. 

    986. 

  986. 	* lib/krb5/crypto.c (*): do some malloc return-value checks
    987. 

  987.  	properly
    988. 

    989. 

  989. 	* lib/hdb/hdb.c (hdb_process_master_key): simplify by using
    990. 

  990.  	krb5_data_alloc
    991. 

    992. 

  992. 	* lib/hdb/hdb.c (hdb_process_master_key): check return value from
    993. 

  993.  	malloc
    994. 

    995. 

  995. 	* lib/asn1/gen_decode.c (decode_type): fix generation of decoding
    996. 

  996.  	information for TSequenceOf.
    997. 

    998. 

  998. 	* kdc/kerberos5.c (get_pa_etype_info): check return value from
    999. 

  999.  	malloc
    1000. 

    1001. 

  1001. 1999-07-02  Assar Westerlund  <assar@sics.se>
    1002. 

    1003. 

  1003. 	* lib/asn1/der_copy.c (copy_octet_string): don't fail if length ==
    1004. 

  1004.  	0 and malloc returns NULL
    1005. 

    1006. 

  1006. 1999-06-29  Assar Westerlund  <assar@sics.se>
    1007. 

    1008. 

  1008. 	* lib/krb5/addr_families.c (ipv6_parse_addr): implement
    1009. 

    1010. 

  1010. 1999-06-24  Assar Westerlund  <assar@sics.se>
    1011. 

    1012. 

  1012. 	* lib/krb5/rd_cred.c (krb5_rd_cred): compare the sender's address
    1013. 

  1013.  	as an addrport one
    1014. 

    1015. 

  1015. 	* lib/krb5/krb5.h (KRB5_ADDRESS_ADDRPORT, KRB5_ADDRESS_IPPORT):
    1016. 

  1016.  	add
    1017. 

  1017. 	(krb5_auth_context): add local and remote port
    1018. 

    1019. 

  1019. 	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): get the
    1020. 

  1020.  	local and remote address and add them to the krb-cred packet
    1021. 

    1022. 

  1022. 	* lib/krb5/auth_context.c: save the local and remove ports in the
    1023. 

  1023.  	auth_context
    1024. 

    1025. 

  1025. 	* lib/krb5/address.c (krb5_make_addrport): create an address of
    1026. 

  1026.  	type KRB5_ADDRESS_ADDRPORT from (addr, port)
    1027. 

    1028. 

  1028. 	* lib/krb5/addr_families.c (krb5_sockaddr2port): new function for
    1029. 

  1029.  	grabbing the port number out of the sockaddr
    1030. 

    1031. 

  1031. 1999-06-23  Assar Westerlund  <assar@sics.se>
    1032. 

    1033. 

  1033. 	* admin/srvcreate.c (srvcreate): always take the DES-CBC-MD5 key.
    1034. 

  1034.   	increase possible verbosity.
    1035. 

    1036. 

  1036. 	* lib/krb5/config_file.c (parse_list): handle blank lines at
    1037. 

  1037.  	another place
    1038. 

  1038. 	
    1039. 

  1039. 	* kdc/connect.c (add_port_string): don't return a value
    1040. 

    1041. 

  1041.  	* lib/kadm5/init_c.c (get_cred_cache): you cannot reuse the cred
    1042. 

  1042.  	cache if the principals are different.  close and NULL the old one
    1043. 

  1043.  	so that we create a new one.
    1044. 

    1045. 

  1045. 	* configure.in: move around cgywin et al
    1046. 

  1046. 	(LIB_kdb): set at the end of krb4-block
    1047. 

  1047. 	(krb4): test for krb_enable_debug and krb_disable_debug
    1048. 

    1049. 

  1049. 1999-06-16  Assar Westerlund  <assar@sics.se>
    1050. 

    1051. 

  1051. 	* kuser/kdestroy.c (main): try to destroy v4 ticket even if the
    1052. 

  1052.  	destruction of the v5 one fails
    1053. 

    1054. 

  1054. 	* lib/krb5/crypto.c (DES3_postproc): new version that does the
    1055. 

  1055.  	right thing
    1056. 

  1056. 	(*): don't put and recover length in 3DES encoding
    1057. 

  1057. 	other small fixes
    1058. 

    1059. 

  1059. 1999-06-15  Assar Westerlund  <assar@sics.se>
    1060. 

    1061. 

  1061. 	* lib/krb5/get_default_principal.c: rewrite to use
    1062. 

  1062.  	get_default_username
    1063. 

    1064. 

  1064. 	* lib/krb5/Makefile.am: add n-fold-test
    1065. 

    1066. 

  1066. 	* kdc/connect.c: add fallbacks for all lookups by service name
    1067. 

  1067. 	(handle_tcp): break-up and clean-up
    1068. 

    1069. 

  1069. 1999-06-09  Assar Westerlund  <assar@sics.se>
    1070. 

    1071. 

  1071. 	* lib/krb5/addr_families.c (ipv6_uninteresting): don't consider
    1072. 

  1072.  	the loopback address as uninteresting
    1073. 

    1074. 

  1074. 	* lib/krb5/get_addrs.c: new magic flag to get loopback address if
    1075. 

  1075.  	there are no other addresses.
    1076. 

  1076. 	(krb5_get_all_client_addrs): use that flag
    1077. 

    1078. 

  1078. 1999-06-04  Assar Westerlund  <assar@sics.se>
    1079. 

    1080. 

  1080. 	* lib/krb5/crypto.c (HMAC_SHA1_DES3_checksum): don't include the
    1081. 

  1081.  	length
    1082. 

  1082. 	(checksum_sha1, checksum_hmac_sha1_des3): blocksize should be 64
    1083. 

  1083. 	(encrypt_internal_derived): don't include the length and don't
    1084. 

  1084. 	decrease by the checksum size twice
    1085. 

  1085. 	(_get_derived_key): the constant should be 5 bytes
    1086. 

    1087. 

  1087. 1999-06-02  Johan Danielsson  <joda@pdc.kth.se>
    1088. 

    1089. 

  1089. 	* configure.in: use KRB_CHECK_X
    1090. 

  1090. 	
    1091. 

  1091. 	* configure.in: check for netinet/ip.h
    1092. 

  1092. 	
    1093. 

  1093. 1999-05-31  Assar Westerlund  <assar@sics.se>
    1094. 

    1095. 

  1095. 	* kpasswd/kpasswdd.c (setup_passwd_quality_check): conditionalize
    1096. 

  1096.  	on RTLD_NOW
    1097. 

    1098. 

  1098. 1999-05-23  Assar Westerlund  <assar@sics.se>
    1099. 

    1100. 

  1100. 	* appl/test/uu_server.c: removed unused stuff
    1101. 

    1102. 

  1102. 	* appl/test/uu_client.c: removed unused stuff
    1103. 

    1104. 

  1104. 1999-05-21  Assar Westerlund  <assar@sics.se>
    1105. 

    1106. 

  1106. 	* kuser/kgetcred.c (main): correct error message
    1107. 

    1108. 

  1108. 	* lib/krb5/crypto.c (verify_checksum): call (*ct->checksum)
    1109. 

  1109.  	directly, avoiding redundant lookups and memory leaks
    1110. 

    1111. 

  1111. 	* lib/krb5/auth_context.c (krb5_auth_con_setaddrs_from_fd): free
    1112. 

  1112.  	local and remote addresses
    1113. 

    1114. 

  1114. 	* lib/krb5/get_default_principal.c (get_logname): also try
    1115. 

  1115.  	$USERNAME
    1116. 

  1116. 	
    1117. 

  1117. 	* lib/asn1/Makefile.am (asn1_files): add $(EXEEXT)
    1118. 

    1119. 

  1119. 	* lib/krb5/principal.c (USE_RESOLVER): try to define only if we
    1120. 

  1120. 	have a libresolv (currently by checking for res_search)
    1121. 

    1122. 

  1122. 1999-05-18  Johan Danielsson  <joda@pdc.kth.se>
    1123. 

    1124. 

  1124. 	* kdc/connect.c (handle_tcp): remove %-escapes in request
    1125. 

    1126. 

  1126. 1999-05-14  Assar Westerlund  <assar@sics.se>
    1127. 

    1128. 

  1128. 	* Release 0.1g
    1129. 

    1130. 

  1130. 	* admin/ktutil.c (kt_remove): -t should be -e
    1131. 

    1132. 

  1132. 	* configure.in (CHECK_NETINET_IP_AND_TCP): use
    1133. 

    1134. 

  1134. 	* kdc/hpropd.c: support for dumping to krb4.  From Miroslav Ruda
    1135. 

  1135.  	<ruda@ics.muni.cz>
    1136. 

    1137. 

  1137. 	* admin/ktutil.c (kt_add): new option `--no-salt'.  From Miroslav
    1138. 

  1138.  	Ruda <ruda@ics.muni.cz>
    1139. 

  1139. 

  1140. 	* configure.in: add cygwin and DOS tests replace sendmsg, recvmsg,
    1141. 

  1141.  	and innetgr with roken versions
    1142. 

  1142. 

  1143. 	* kuser/kgetcred.c: new program
    1144. 

  1144. 

  1145. Tue May 11 14:09:33 1999  Johan Danielsson  <joda@pdc.kth.se>
    1146. 

  1146. 

  1147. 	* lib/krb5/mcache.c: fix paste-o
    1148. 

  1148. 	
    1149. 

  1149. 1999-05-10  Johan Danielsson  <joda@pdc.kth.se>
    1150. 

  1150. 

  1151. 	* configure.in: don't use uname
    1152. 

    1153. 

  1153. 1999-05-10  Assar Westerlund  <assar@sics.se>
    1154. 

  1154. 

  1155. 	* acconfig.h (KRB_PUT_INT): if we don't have KRB4 use four
    1156. 

  1156. 	arguments :-)
    1157. 

  1157. 

  1158. 	* appl/test/uu_server.c (setsockopt): cast to get rid of a warning
    1159. 

  1159. 	
    1160. 

  1160. 	* appl/test/tcp_server.c (setsockopt): cast to get rid of a
    1161. 

  1161. 	warning
    1162. 

  1162. 

  1163. 	* appl/test/tcp_client.c (proto): call krb5_sendauth with ccache
    1164. 

  1164. 	== NULL
    1165. 

  1165. 

  1166. 	* appl/test/gssapi_server.c (setsockopt): cast to get rid of a
    1167. 

  1167. 	warning
    1168. 

  1168. 

  1169. 	* lib/krb5/sendauth.c (krb5_sendauth): handle ccache == NULL by
    1170. 

  1170. 	setting the default ccache.
    1171. 

  1171. 

  1172. 	* configure.in (getsockopt, setsockopt): test for
    1173. 

  1173. 	(AM_INIT_AUTOMAKE): bump version to 0.1g
    1174. 

  1174. 

  1175. 	* appl/Makefile.am (SUBDIRS): add kx
    1176. 

  1176. 	
    1177. 

  1177. 	* lib/hdb/convert_db.c (main): handle the case of no master key
    1178. 

  1178. 	
    1179. 

  1179. 1999-05-09  Assar Westerlund  <assar@sics.se>
    1180. 

  1180. 

  1181. 	* Release 0.1f
    1182. 

  1182. 

  1183. 	* kuser/kinit.c: add --noaddresses
    1184. 

  1184. 	
    1185. 

  1185. 	* lib/krb5/get_in_tkt.c (init_as_req): interpret `addrs' being an
    1186. 

  1186. 	empty sit of list as to not ask for any addresses.
    1187. 

  1187. 	
    1188. 

  1188. 1999-05-08  Assar Westerlund  <assar@sics.se>
    1189. 

    1190. 

  1190. 	* acconfig.h (_GNU_SOURCE): define this to enable (used)
    1191. 

  1191.  	extensions on glibc-based systems such as linux
    1192. 

    1193. 

  1193. 1999-05-03  Assar Westerlund  <assar@sics.se>
    1194. 

    1195. 

  1195. 	* lib/krb5/get_cred.c (get_cred_from_kdc_flags): allocate and free
    1196. 

  1196. 	`*out_creds' properly
    1197. 

    1198. 

  1198. 	* lib/krb5/creds.c (krb5_compare_creds): just verify that the
    1199. 

  1199. 	keytypes/enctypes are compatible, not that they are the same
    1200. 

  1200. 

  1201. 	* kuser/kdestroy.c (cache): const-correctness
    1202. 

  1202. 

  1203. 1999-05-03  Johan Danielsson  <joda@pdc.kth.se>
    1204. 

  1204. 

  1205. 	* lib/hdb/hdb.c (hdb_set_master_key): initialise master key
    1206. 

  1206. 	version
    1207. 

  1207. 

  1208. 	* lib/hdb/convert_db.c: add support for upgrading database
    1209. 

  1209. 	versions
    1210. 

  1210. 

  1211. 	* kdc/misc.c: add flags to fetch
    1212. 

  1212. 

  1213. 	* kdc/kstash.c: unlink keyfile on failure, chmod to 400
    1214. 

  1214. 

  1215. 	* kdc/hpropd.c: add --print option
    1216. 

  1216. 

  1217. 	* kdc/hprop.c: pass flags to hdb_foreach
    1218. 

  1218. 

  1219. 	* lib/hdb/convert_db.c: add some flags
    1220. 

  1220. 

  1221. 	* lib/hdb/Makefile.am: remove extra LDFLAGS, update version to 2;
    1222. 

  1222. 	build prototype headers
    1223. 

  1223. 	
    1224. 

  1224. 	* lib/hdb/hdb_locl.h: update prototypes
    1225. 

  1225. 

  1226. 	* lib/hdb/print.c: move printable version of entry from kadmin
    1227. 

  1227. 

  1228. 	* lib/hdb/hdb.c: change hdb_{seal,unseal}_* to check if the key is
    1229. 

  1229. 	sealed or not; add flags to hdb_foreach
    1230. 

  1230. 

  1231. 	* lib/hdb/ndbm.c: add flags to NDBM_seq, NDBM_firstkey, and
    1232. 

  1232. 	NDBM_nextkey
    1233. 

  1233. 

  1234. 	* lib/hdb/db.c: add flags to DB_seq, DB_firstkey, and DB_nextkey
    1235. 

  1235. 

  1236. 	* lib/hdb/common.c: add flags to _hdb_{fetch,store}
    1237. 

  1237. 

  1238. 	* lib/hdb/hdb.h: add master_key_version to struct hdb, update
    1239. 

  1239. 	prototypes
    1240. 

  1240. 

  1241. 	* lib/hdb/hdb.asn1: make mkvno optional, update version to 2
    1242. 

  1242. 

  1243. 	* configure.in: --enable-netinfo
    1244. 

  1244. 

  1245. 	* lib/krb5/config_file.c: HAVE_NETINFO_NI_H -> HAVE_NETINFO
    1246. 

  1246. 

  1247. 	* config.sub: fix for crays
    1248. 

  1248. 

  1249. 	* config.guess: new version from automake 1.4
    1250. 

  1250. 	
    1251. 

  1251. 	* config.sub: new version from automake 1.4
    1252. 

  1252. 

  1253. Wed Apr 28 00:21:17 1999  Assar Westerlund  <assar@sics.se>
    1254. 

  1254. 

  1255. 	* Release 0.1e
    1256. 

  1256. 

  1257. 	* lib/krb5/mcache.c (mcc_get_next): get the current cursor
    1258. 

  1258.  	correctly
    1259. 

  1259. 

  1260. 	* acconfig.h: correct definition of KRB_PUT_INT for old krb4 code.
    1261. 

  1261.   	From Ake Sandgren <ake@cs.umu.se>
    1262. 

  1262. 

  1263. 1999-04-27  Johan Danielsson  <joda@pdc.kth.se>
    1264. 

  1264. 

  1265. 	* kdc/kerberos5.c: fix arguments to decrypt_ticket
    1266. 

  1266. 	
    1267. 

  1267. 1999-04-25  Assar Westerlund  <assar@sics.se>
    1268. 

  1268. 

  1269. 	* lib/krb5/mk_req_ext.c (krb5_mk_req_internal): try to handle old
    1270. 

  1270. 	DCE secd's that are not able to handle MD5 checksums by defaulting
    1271. 

  1271. 	to MD4 if the keytype was DES-CBC-CRC
    1272. 

  1272. 	
    1273. 

  1273. 	* lib/krb5/mk_req.c (krb5_mk_req): use auth_context->keytype
    1274. 

  1274. 	
    1275. 

  1275. 	* lib/krb5/krb5.h (krb5_auth_context_data): add `keytype' and
    1276. 

  1276. 	`cksumtype'
    1277. 

    1278. 

  1278. 	* lib/krb5/get_cred.c (make_pa_tgs_req): remove old kludge for
    1279. 

  1279. 	secd
    1280. 

  1280. 	(init_tgs_req): add all supported enctypes for the keytype in
    1281. 

  1281. 	`in_creds->session.keytype' if it's set
    1282. 

    1283. 

  1283. 	* lib/krb5/crypto.c (F_PSEUDO): new flag for non-protocol
    1284. 

  1284. 	encryption types
    1285. 

  1285. 	(do_checksum): new function
    1286. 

  1286. 	(verify_checksum): take the checksum to use from the checksum message
    1287. 

  1287. 	and not from the crypto struct
    1288. 

  1288. 	(etypes): add F_PSEUDO flags
    1289. 

  1289. 	(krb5_keytype_to_enctypes): new function
    1290. 

    1291. 

  1291. 	* lib/krb5/auth_context.c (krb5_auth_con_init): initalize keytype
    1292. 

  1292. 	and cksumtype
    1293. 

  1293. 	(krb5_auth_setcksumtype, krb5_auth_getcksumtype): implement
    1294. 

  1294. 	(krb5_auth_setkeytype, krb5_auth_getkeytype): implement
    1295. 

  1295. 	(krb5_auth_setenctype): comment out, it's rather bogus anyway
    1296. 

    1297. 

  1297. Sun Apr 25 16:55:50 1999  Johan Danielsson  <joda@pdc.kth.se>
    1298. 

    1299. 

  1299. 	* lib/krb5/krb5_locl.h: fix for stupid aix warnings
    1300. 

    1301. 

  1301. 	* lib/krb5/fcache.c (erase_file): don't malloc
    1302. 

  1302. 	
    1303. 

  1303. Sat Apr 24 18:35:21 1999  Johan Danielsson  <joda@pdc.kth.se>
    1304. 

    1305. 

  1305. 	* kdc/config.c: pass context to krb5_config_file_free
    1306. 

    1307. 

  1307. 	* kuser/kinit.c: add `--fcache-version' to set cache version to
    1308. 

  1308. 	create
    1309. 

  1309. 

  1310. 	* kuser/klist.c: print cache version if verbose
    1311. 

  1311. 

  1312. 	* lib/krb5/transited.c (krb5_domain_x500_decode): don't abort
    1313. 

    1314. 

  1314. 	* lib/krb5/principal.c: abort -> krb5_abortx
    1315. 

  1315. 

  1316. 	* lib/krb5/mk_rep.c: abort -> krb5_abortx
    1317. 

  1317. 

  1318. 	* lib/krb5/config_file.c: abort -> krb5_abortx
    1319. 

  1319. 

  1320. 	* lib/krb5/context.c (init_context_from_config_file): init
    1321. 

  1321. 	fcache_version; add krb5_{get,set}_fcache_version
    1322. 

  1322. 

  1323. 	* lib/krb5/keytab.c: add support for reading (and writing?) old
    1324. 

  1324. 	version keytabs
    1325. 

  1325. 

  1326. 	* lib/krb5/cache.c: add krb5_cc_get_version
    1327. 

  1327. 

  1328. 	* lib/krb5/fcache.c: add support for reading and writing old
    1329. 

  1329. 	version cache files
    1330. 

  1330. 

  1331. 	* lib/krb5/store_mem.c (krb5_storage_from_mem): zero flags
    1332. 

  1332. 

  1333. 	* lib/krb5/store_emem.c (krb5_storage_emem): zero flags
    1334. 

  1334. 

  1335. 	* lib/krb5/store_fd.c (krb5_storage_from_fd): zero flags
    1336. 

  1336. 

  1337. 	* lib/krb5/store.c: add flags to change how various fields are
    1338. 

  1338. 	stored, used for old cache version support
    1339. 

  1339. 	
    1340. 

  1340. 	* lib/krb5/krb5.h: add support for reading and writing old version
    1341. 

  1341. 	cache files, and keytabs
    1342. 

  1342. 	
    1343. 

  1343. Wed Apr 21 00:09:26 1999  Assar Westerlund  <assar@sics.se>
    1344. 

  1344. 

  1345. 	* configure.in: fix test for readline.h remember to link with
    1346. 

  1346.  	$LIB_tgetent when trying linking with readline
    1347. 

  1347. 

  1348. 	* lib/krb5/init_creds_pw.c (get_init_creds_common): if start_time
    1349. 

  1349.  	is given, request a postdated ticket.
    1350. 

  1350. 

  1351. 	* lib/krb5/data.c (krb5_data_free): free data as long as it's not
    1352. 

  1352.  	NULL
    1353. 

  1353. 

  1354. Tue Apr 20 20:18:14 1999  Assar Westerlund  <assar@sics.se>
    1355. 

  1355. 

  1356. 	* kpasswd/Makefile.am (kpasswdd_LDADD): add LIB_dlopen
    1357. 

  1357. 

  1358. 	* lib/krb5/krb5.h (KRB5_VERIFY_AP_REQ_IGNORE_INVALID): add
    1359. 

  1359. 

  1360. 	* lib/krb5/rd_req.c (krb5_decrypt_ticket): add `flags` and
    1361. 

  1361.  	KRB5_VERIFY_AP_REQ_IGNORE_INVALID for ignoring that the ticket is
    1362. 

  1362.  	invalid
    1363. 

  1363. 

  1364. Tue Apr 20 12:42:08 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1365. 

  1365. 

  1366. 	* kpasswd/kpasswdd.c: don't try to load library by default; get
    1367. 

  1367.  	library and function name from krb5.conf
    1368. 

  1368. 

  1369. 	* kpasswd/sample_passwd_check.c: sample password checking
    1370. 

  1370.  	functions
    1371. 

  1371. 

  1372. Mon Apr 19 22:22:19 1999  Assar Westerlund  <assar@sics.se>
    1373. 

  1373. 

  1374. 	* lib/krb5/store.c (krb5_storage_to_data, krb5_ret_data): use
    1375. 

  1375.  	krb5_data_alloc and be careful with checking allocation and sizes.
    1376. 

  1376. 

  1377. 	* kuser/klist.c (--tokens): conditionalize on KRB4
    1378. 

  1378. 

  1379. 	* kuser/kinit.c (renew_validate): set all flags
    1380. 

  1380. 	(main): fix cut-n-paste error when setting start-time
    1381. 

  1381. 

  1382. 	* kdc/kerberos5.c (check_tgs_flags): starttime of a validate
    1383. 

  1383.  	ticket should be > than current time
    1384. 

  1384. 	(*): send flags to krb5_verify_ap_req and krb5_decrypt_ticket
    1385. 

  1385. 

  1386. 	* kuser/kinit.c (renew_validate): use the client realm instead of
    1387. 

  1387.  	the local realm when renewing tickets.
    1388. 

  1388. 

  1389. 	* lib/krb5/get_for_creds.c (krb5_fwd_tgs_creds): compat function
    1390. 

  1390. 	(krb5_get_forwarded_creds): correct freeing of out_creds
    1391. 

  1391. 

  1392. 	* kuser/kinit.c (renew_validate): hopefully fix up freeing of
    1393. 

  1393.  	memory
    1394. 

  1394. 

  1395. 	* configure.in: do all the krb4 tests with "$krb4" != "no"
    1396. 

  1396. 

  1397. 	* lib/krb5/keyblock.c (krb5_free_keyblock_contents): don't zero
    1398. 

  1398.  	keyvalue if it's NULL.  noticed by Ake Sandgren <ake@cs.umu.se>
    1399. 

    1400. 

  1400. 	* lib/krb5/get_in_tkt.c (add_padata): loop over all enctypes
    1401. 

  1401.  	instead of just taking the first one.  fix all callers.  From
    1402. 

  1402.  	"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
    1403. 

  1403. 

  1404. 	* kdc/kdc_locl.h (enable_kaserver): declaration
    1405. 

  1405. 	
    1406. 

  1406. 	* kdc/hprop.c (ka_convert): print the failing principal.  AFS 3.4a
    1407. 

  1407.  	creates krbtgt.REALMOFCELL as NOTGS+NOSEAL, work around.  From
    1408. 

  1408.  	"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
    1409. 

  1409. 

  1410. 	* kdc/hpropd.c (open_socket): stupid cast to get rid of a warning
    1411. 

  1411. 

  1412. 	* kdc/connect.c (add_standard_ports, process_request): look at
    1413. 

  1413.  	enable_kaserver.  From "Brandon S. Allbery KF8NH"
    1414. 

  1414.  	<allbery@kf8nh.apk.net>
    1415. 

  1415. 

  1416. 	* kdc/config.c: new flag --kaserver and config file option
    1417. 

  1417.  	enable-kaserver.  From "Brandon S. Allbery KF8NH"
    1418. 

  1418.  	<allbery@kf8nh.apk.net>
    1419. 

  1419. 

  1420. Mon Apr 19 12:32:04 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1421. 

  1421. 

  1422. 	* configure.in: check for dlopen, and dlfcn.h
    1423. 

  1423. 

  1424. 	* kpasswd/kpasswdd.c: add support for dlopen:ing password quality
    1425. 

  1425.  	check library
    1426. 

  1426. 

  1427. 	* configure.in: add appl/su
    1428. 

  1428. 

  1429. Sun Apr 18 15:46:53 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    1430. 

  1430. 

  1431. 	* lib/krb5/cache.c: add krb5_cc_get_type that returns type of a
    1432. 

  1432.  	cache
    1433. 

  1433. 

  1434. Fri Apr 16 17:58:51 1999  Assar Westerlund  <assar@sics.se>
    1435. 

  1435. 

  1436. 	* configure.in: LIB_kdb: -L should be before -lkdb
    1437. 

  1437. 	test for prototype of strsep
    1438. 

  1438. 	
    1439. 

  1439. Thu Apr 15 11:34:38 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1440. 

  1440. 

  1441. 	* lib/krb5/Makefile.am: update version
    1442. 

  1442. 

  1443. 	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): use
    1444. 

  1444.  	ALLOC_SEQ
    1445. 

  1445. 

  1446. 	* lib/krb5/fcache.c: add some support for reading and writing old
    1447. 

  1447.  	cache formats;
    1448. 

  1448. 	(fcc_store_cred): use krb5_store_creds; (fcc_read_cred): use
    1449. 

  1449. 	krb5_ret_creds
    1450. 

  1450. 

  1451. 	* lib/krb5/store_mem.c (krb5_storage_from_mem): check malloc,
    1452. 

  1452.  	initialize host_byteorder
    1453. 

  1453. 

  1454. 	* lib/krb5/store_fd.c (krb5_storage_from_fd): initialize
    1455. 

  1455.  	host_byteorder
    1456. 

  1456. 

  1457. 	* lib/krb5/store_emem.c (krb5_storage_emem): initialize
    1458. 

  1458.  	host_byteorder
    1459. 

  1459. 

  1460. 	* lib/krb5/store.c (krb5_storage_set_host_byteorder): add;
    1461. 

  1461. 	(krb5_store_int32,krb5_ret_int32,krb5_store_int16,krb5_ret_int16):
    1462. 

  1462.  	check host_byteorder flag; (krb5_store_creds): add;
    1463. 

  1463.  	(krb5_ret_creds): add
    1464. 

  1464. 

  1465. 	* lib/krb5/krb5.h (krb5_storage): add `host_byteorder' flag for
    1466. 

  1466.  	storage of numbers
    1467. 

    1468. 

  1468. 	* lib/krb5/heim_err.et: add `host not found' error
    1469. 

    1470. 

  1470. 	* kdc/connect.c: don't use data after clearing decriptor
    1471. 

    1472. 

  1472. 	* lib/krb5/auth_context.c: abort -> krb5_abortx
    1473. 

  1473. 

  1474. 	* lib/krb5/warn.c: add __attribute__; add *abort functions
    1475. 

  1475. 

  1476. 	* configure.in: check for __attribute__
    1477. 

  1477. 

  1478. 	* kdc/connect.c: log bogus requests
    1479. 

  1479. 

  1480. Tue Apr 13 18:38:05 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1481. 

  1481. 

  1482. 	* lib/kadm5/create_s.c (kadm5_s_create_principal): create v4 salts
    1483. 

  1483.  	for all DES keys
    1484. 

  1484. 

  1485. 1999-04-12  Assar Westerlund  <assar@sics.se>
    1486. 

  1486. 

  1487. 	* lib/krb5/get_cred.c (init_tgs_req): re-structure a little bit
    1488. 

  1488. 

  1489. 	* lib/krb5/get_cred.c (init_tgs_req): some more error checking
    1490. 

  1490. 

  1491. 	* lib/krb5/generate_subkey.c (krb5_generate_subkey): check return
    1492. 

  1492. 	value from malloc
    1493. 

  1493. 

  1494. Sun Apr 11 03:47:23 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1495. 

  1495. 

  1496. 	* lib/krb5/krb5.conf.5: update to reality
    1497. 

  1497. 

  1498. 	* lib/krb5/krb5_425_conv_principal.3: update to reality
    1499. 

  1499. 

  1500. 1999-04-11  Assar Westerlund  <assar@sics.se>
    1501. 

  1501. 

  1502. 	* lib/krb5/get_host_realm.c: handle more than one realm for a host
    1503. 

  1503. 

  1504. 	* kpasswd/kpasswd.c (main): use krb5_program_setup and
    1505. 

  1505. 	print_version
    1506. 

  1506. 

  1507. 	* kdc/string2key.c (main): use krb5_program_setup and
    1508. 

  1508. 	print_version
    1509. 

  1509. 

  1510. Sun Apr 11 02:35:58 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1511. 

  1511. 

  1512. 	* lib/krb5/principal.c (krb5_524_conv_principal): make it actually
    1513. 

  1513.  	work, and check built-in list of host-type first-components
    1514. 

  1514. 

  1515. 	* lib/krb5/krbhst.c: lookup SRV-records to find a kdc for a realm
    1516. 

  1516. 

  1517. 	* lib/krb5/context.c: add srv_* flags to context
    1518. 

  1518. 

  1519. 	* lib/krb5/principal.c: add default v4_name_convert entries
    1520. 

  1520. 

  1521. 	* lib/krb5/krb5.h: add srv_* flags to context
    1522. 

  1522. 

  1523. Sat Apr 10 22:52:28 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1524. 

  1524. 

  1525. 	* kadmin/kadmin.c: complain about un-recognised commands
    1526. 

  1526. 

  1527. 	* admin/ktutil.c: complain about un-recognised commands
    1528. 

  1528. 

  1529. Sat Apr 10 15:41:49 1999  Assar Westerlund  <assar@sics.se>
    1530. 

  1530. 

  1531. 	* kadmin/load.c (doit): fix error message
    1532. 

  1532. 

  1533. 	* lib/krb5/crypto.c (encrypt_internal): free checksum if lengths
    1534. 

  1534.  	fail to match.
    1535. 

  1535. 	(krb5_get_wrapped_length): new function
    1536. 

  1536. 

  1537. 	* configure.in: security/pam_modules.h: check for
    1538. 

  1538. 

  1539. 	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password): kludge
    1540. 

  1540.  	around `ret_as_reply' semantics by only freeing it when ret == 0
    1541. 

    1542. 

  1542. Fri Apr  9 20:24:04 1999  Assar Westerlund  <assar@sics.se>
    1543. 

    1544. 

  1544. 	* kuser/klist.c (print_cred_verbose): handle the case of a bad
    1545. 

  1545.  	enctype
    1546. 

    1547. 

  1547. 	* configure.in: test for more header files
    1548. 

  1548. 	(LIB_roken): set
    1549. 

    1550. 

  1550. Thu Apr  8 15:01:59 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1551. 

    1552. 

  1552. 	* configure.in: fixes for building w/o krb4
    1553. 

    1554. 

  1554. 	* ltmain.sh: update to libtool 1.2d
    1555. 

    1556. 

  1556. 	* ltconfig: update to libtool 1.2d
    1557. 

    1558. 

  1558. Wed Apr  7 23:37:26 1999  Assar Westerlund  <assar@sics.se>
    1559. 

    1560. 

  1560. 	* kdc/hpropd.c: fix some error messages to be more understandable.
    1561. 

    1562. 

  1562. 	* kdc/hprop.c (ka_dump): remove unused variables
    1563. 

    1564. 

  1564. 	* appl/test/tcp_server.c: remove unused variables
    1565. 

    1566. 

  1566. 	* appl/test/gssapi_server.c: remove unused variables
    1567. 

    1568. 

  1568. 	* appl/test/gssapi_client.c: remove unused variables
    1569. 

    1570. 

  1570. Wed Apr  7 14:05:15 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1571. 

    1572. 

  1572. 	* lib/krb5/context.c (krb5_get_err_text): long -> krb5_error_code
    1573. 

    1574. 

  1574. 	* kuser/klist.c: make it compile w/o krb4
    1575. 

    1576. 

  1576. 	* kuser/kdestroy.c: make it compile w/o krb4
    1577. 

    1578. 

  1578. 	* admin/ktutil.c: fix {srv,key}2{srv,key}tab confusion; add help
    1579. 

  1579.  	strings
    1580. 

    1581. 

  1581. Mon Apr  5 16:13:46 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1582. 

    1583. 

  1583. 	* configure.in: test for MIPS ABI; new test_package
    1584. 

    1585. 

  1585. Thu Apr  1 11:00:40 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1586. 

    1587. 

  1587. 	* include/Makefile.am: clean krb5-private.h
    1588. 

    1589. 

  1589. 	* Release 0.1d
    1590. 

    1591. 

  1591. 	* kpasswd/kpasswdd.c (doit): pass context to
    1592. 

  1592.  	krb5_get_all_client_addrs
    1593. 

    1594. 

  1594. 	* kdc/connect.c (init_sockets): pass context to
    1595. 

  1595.  	krb5_get_all_server_addrs
    1596. 

    1597. 

  1597. 	* lib/krb5/get_in_tkt.c (init_as_req): pass context to
    1598. 

  1598.  	krb5_get_all_client_addrs
    1599. 

    1600. 

  1600. 	* lib/krb5/get_cred.c (get_cred_kdc_la): pass context to
    1601. 

  1601.  	krb5_get_all_client_addrs
    1602. 

    1603. 

  1603. 	* lib/krb5/get_addrs.c (get_addrs_int): add extra host addresses
    1604. 

    1605. 

  1605. 	* lib/krb5/krb5.h: add support for adding an extra set of
    1606. 

  1606.  	addresses
    1607. 

    1608. 

  1608. 	* lib/krb5/context.c: add support for adding an extra set of
    1609. 

  1609.  	addresses
    1610. 

    1611. 

  1611. 	* lib/krb5/addr_families.c: add krb5_parse_address
    1612. 

    1613. 

  1613. 	* lib/krb5/address.c: krb5_append_addresses
    1614. 

    1615. 

  1615. 	* lib/krb5/config_file.c (parse_binding): don't zap everything
    1616. 

  1616.  	after first whitespace
    1617. 

    1618. 

  1618. 	* kuser/kinit.c (renew_validate): don't allocate out
    1619. 

    1620. 

  1620. 	* lib/krb5/get_for_creds.c (krb5_get_forwarded_creds): don't
    1621. 

  1621.  	allocate out_creds
    1622. 

    1623. 

  1623. 	* lib/krb5/get_cred.c (get_cred_kdc, get_cred_kdc_la): make
    1624. 

  1624.  	out_creds pointer;
    1625. 

  1625. 	(krb5_get_kdc_cred): allocate out_creds; (get_cred_from_kdc_flags):
    1626. 

  1626. 	free more memory
    1627. 

    1628. 

  1628. 	* lib/krb5/crypto.c (encrypt_internal): free checksum
    1629. 

    1630. 

  1630. 	* lib/krb5/convert_creds.c (krb524_convert_creds_kdc): free reply,
    1631. 

  1631.  	and ticket
    1632. 

    1633. 

  1633. 	* kuser/Makefile.am: remove kfoo
    1634. 

    1635. 

  1635. 	* lib/Makefile.am: add auth
    1636. 

    1637. 

  1637. 	* lib/kadm5/iprop.h: getarg.h
    1638. 

    1639. 

  1639. 	* lib/kadm5/replay_log.c: use getarg
    1640. 

    1641. 

  1641. 	* lib/kadm5/ipropd_slave.c: use getarg
    1642. 

    1643. 

  1643. 	* lib/kadm5/ipropd_master.c: use getarg
    1644. 

    1645. 

  1645. 	* lib/kadm5/dump_log.c: use getarg
    1646. 

    1647. 

  1647. 	* kpasswd/kpasswdd.c: use getarg
    1648. 

    1649. 

  1649. 	* Makefile.am.common: make a more working check-local target
    1650. 

    1651. 

  1651. 	* lib/asn1/main.c: use getargs
    1652. 

    1653. 

  1653. Mon Mar 29 20:19:57 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1654. 

    1655. 

  1655. 	* kuser/klist.c (print_cred_verbose): use krb5_print_address
    1656. 

    1657. 

  1657. 	* lib/kadm5/server.c: k_{put,get}_int -> _krb5_{put,get}_int
    1658. 

    1659. 

  1659. 	* lib/krb5/addr_families.c (krb5_print_address): handle unknown
    1660. 

  1660.  	address types; (ipv6_print_addr): print in 16-bit groups (as it
    1661. 

  1661.  	should)
    1662. 

    1663. 

  1663. 	* lib/krb5/crc.c: crc_{init_table,update} ->
    1664. 

  1664.  	_krb5_crc_{init_table,update}
    1665. 

    1666. 

  1666. 	* lib/krb5/crypto.c: k_{put,get}_int -> _krb5_{put,get}_int
    1667. 

  1667.  	crc_{init_table,update} -> _krb5_crc_{init_table,update}
    1668. 

    1669. 

  1669. 	* lib/krb5/send_to_kdc.c: k_{put,get}_int -> _krb5_{put,get}_int
    1670. 

    1671. 

  1671. 	* lib/krb5/store.c: k_{put,get}_int -> _krb5_{put,get}_int
    1672. 

    1673. 

  1673. 	* lib/krb5/krb5_locl.h: include krb5-private.h
    1674. 

    1675. 

  1675. 	* kdc/connect.c (addr_to_string): use krb5_print_address
    1676. 

    1677. 

  1677. 	* lib/krb5/addr_families.c (krb5_print_address): int -> size_t
    1678. 

    1679. 

  1679. 	* lib/krb5/addr_families.c: add support for printing ipv6
    1680. 

  1680.  	addresses, either with inet_ntop, or ugly for-loop
    1681. 

    1682. 

  1682. 	* kdc/524.c: check that the ticket came from a valid address; use
    1683. 

  1683.  	the address of the connection as the address to put in the v4
    1684. 

  1684.  	ticket (if this address is AF_INET)
    1685. 

    1686. 

  1686. 	* kdc/connect.c: pass addr to do_524
    1687. 

    1688. 

  1688. 	* kdc/kdc_locl.h: prototype for do_524
    1689. 

    1690. 

  1690. Sat Mar 27 17:48:31 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1691. 

    1692. 

  1692. 	* configure.in: check for OSF C2; bind/bitypes.h, getudbnam,
    1693. 

  1693.  	setlim; check for auth modules; siad.h, getpwnam_r;
    1694. 

  1694.  	lib/auth/Makefile, lib/auth/sia/Makefile
    1695. 

    1696. 

  1696. 	* lib/krb5/crypto.c: n_fold -> _krb5_n_fold
    1697. 

    1698. 

  1698. 	* lib/krb5/n-fold.c: n_fold -> _krb5_n_fold
    1699. 

    1700. 

  1700. Thu Mar 25 04:35:21 1999  Assar Westerlund  <assar@sics.se>
    1701. 

    1702. 

  1702. 	* lib/kadm5/set_keys.c (_kadm5_set_keys): free salt when zapping
    1703. 

  1703.  	it
    1704. 

    1705. 

  1705. 	* lib/kadm5/free.c (kadm5_free_principal_ent): free `key_data'
    1706. 

    1707. 

  1707. 	* lib/hdb/ndbm.c (NDBM_destroy): clear master key
    1708. 

  1708. 

  1709. 	* lib/hdb/db.c (DB_destroy): clear master key
    1710. 

  1710. 	(DB_open): check malloc
    1711. 

  1711. 

  1712. 	* kdc/connect.c (init_sockets): free addresses
    1713. 

  1713. 

  1714. 	* kadmin/kadmin.c (main): make code more consistent.  always free
    1715. 

  1715.  	configuration information.
    1716. 

  1716. 

  1717. 	* kadmin/init.c (create_random_entry): free the entry
    1718. 

  1718. 

  1719. Wed Mar 24 04:02:03 1999  Assar Westerlund  <assar@sics.se>
    1720. 

  1720. 

  1721. 	* lib/krb5/init_creds_pw.c (krb5_get_init_creds_password):
    1722. 

  1722.  	re-organize the code to always free `kdc_reply'
    1723. 

    1724. 

  1724. 	* lib/krb5/get_in_tkt.c (krb5_get_in_cred): be more careful about
    1725. 

  1725.  	freeing memory
    1726. 

    1727. 

  1727. 	* lib/krb5/fcache.c (fcc_destroy): don't call fcc_close
    1728. 

    1729. 

  1729. 	* lib/krb5/crypto.c (krb5_crypto_destroy): free `crypto'
    1730. 

    1731. 

  1731. 	* lib/hdb/hdb_locl.h: try db_185.h first in case db.h is a DB 2.0
    1732. 

  1732.  	header
    1733. 

  1733. 

  1734. 	* configure.in (db_185.h): check for
    1735. 

  1735. 

  1736. 	* admin/srvcreate.c: new file. contributed by Daniel Kouril
    1737. 

  1737.  	<kouril@informatics.muni.cz>
    1738. 

  1738. 

  1739. 	* admin/ktutil.c: srvcreate: new command
    1740. 

  1740. 

  1741. 	* kuser/klist.c: add support for printing AFS tokens
    1742. 

  1742. 

  1743. 	* kuser/kdestroy.c: add support for destroying v4 tickets and AFS
    1744. 

  1744.  	tokens.  based on code by Love <lha@stacken.kth.se>
    1745. 

  1745. 

  1746. 	* kuser/Makefile.am (kdestroy_LDADD, klist_LDADD): more libraries
    1747. 

  1747. 

  1748. 	* configure.in: sys/ioccom.h: test for
    1749. 

  1749. 

  1750. 	* kuser/klist.c (main): don't print `no ticket file' with --test.
    1751. 

  1751.   	From: Love <lha@e.kth.se>
    1752. 

  1752. 

  1753. 	* kpasswd/kpasswdd.c (doit): more braces to make gcc happy
    1754. 

  1754. 

  1755. 	* kdc/connect.c (init_socket): get rid of a stupid warning
    1756. 

  1756. 

  1757. 	* include/bits.c (my_strupr): cast away some stupid warnings
    1758. 

  1758. 

  1759. Tue Mar 23 14:34:44 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1760. 

  1760. 

  1761. 	* lib/krb5/get_host_realm.c (krb5_get_host_realm): no infinite
    1762. 

  1762.  	loops, please
    1763. 

  1763. 

  1764. Tue Mar 23 00:00:45 1999  Assar Westerlund  <assar@sics.se>
    1765. 

  1765. 

  1766. 	* lib/kadm5/Makefile.am (install_build_headers): recover from make
    1767. 

  1767.  	rewriting the names of the headers kludge to help solaris make
    1768. 

  1768. 

  1769. 	* lib/krb5/Makefile.am: kludge to help solaris make
    1770. 

  1770. 

  1771. 	* lib/hdb/Makefile.am: kludge to help solaris make
    1772. 

  1772. 

  1773. 	* configure.in (LIB_kdb): make sure there's a -L option in here by
    1774. 

  1774.  	adding $(LIB_krb4)
    1775. 

  1775. 

  1776. 	* lib/asn1/gen_glue.c (generate_2int, generate_int2): int ->
    1777. 

  1777.  	unsigned
    1778. 

  1778. 

  1779. 	* configure.in (SunOS): set to a number KRB4, KRB5 conditionals:
    1780. 

  1780.  	remove the `dnl' to work around an automake flaw
    1781. 

    1782. 

  1782. Sun Mar 21 15:08:49 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    1783. 

    1784. 

  1784. 	* lib/krb5/get_default_realm.c: char* -> krb5_realm
    1785. 

    1786. 

  1786. Sun Mar 21 14:08:30 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1787. 

    1788. 

  1788. 	* include/bits.c: <bind/bitypes.h>
    1789. 

    1790. 

  1790. 	* lib/krb5/Makefile.am: create krb5-private.h
    1791. 

    1792. 

  1792. Sat Mar 20 00:08:59 1999  Assar Westerlund  <assar@sics.se>
    1793. 

    1794. 

  1794. 	* configure.in (gethostname): remove duplicate
    1795. 

    1796. 

  1796. Fri Mar 19 14:48:03 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1797. 

    1798. 

  1798. 	* lib/hdb/Makefile.am: add version-info
    1799. 

    1800. 

  1800. 	* lib/gssapi/Makefile.am: add version-info
    1801. 

    1802. 

  1802. 	* lib/asn1/Makefile.am: use $(x:y=z) make syntax; move check-der
    1803. 

  1803.  	to check_PROGRAMS
    1804. 

    1805. 

  1805. 	* lib/Makefile.am: add 45
    1806. 

    1807. 

  1807. 	* lib/kadm5/Makefile.am: split in client and server libraries
    1808. 

  1808.  	(breaks shared libraries otherwise)
    1809. 

    1810. 

  1810. Thu Mar 18 11:33:30 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1811. 

    1812. 

  1812. 	* include/kadm5/Makefile.am: clean a lot of header files (since
    1813. 

  1813.  	automake lacks a clean-hook)
    1814. 

    1815. 

  1815. 	* include/Makefile.am: clean a lot of header files (since automake
    1816. 

  1816.  	lacks a clean-hook)
    1817. 

    1818. 

  1818. 	* lib/kadm5/Makefile.am: fix build-installation of headers
    1819. 

    1820. 

  1820. 	* lib/krb5/Makefile.am: remove include_dir hack
    1821. 

    1822. 

  1822. 	* lib/hdb/Makefile.am: remove include_dir hack
    1823. 

    1824. 

  1824. 	* lib/asn1/Makefile.am: remove include_dir hack
    1825. 

    1826. 

  1826. 	* include/Makefile.am: remove include_dir hack
    1827. 

    1828. 

  1828. 	* doc/whatis.texi: define sub for html
    1829. 

    1830. 

  1830. 	* configure.in: LIB_kdb, have_err_h, have_fnmatch_h, have_glob_h
    1831. 

    1832. 

  1832. 	* lib/asn1/Makefile.am: der.h
    1833. 

    1834. 

  1834. 	* kpasswd/kpasswdd.c: admin.h -> kadm5/admin.h
    1835. 

    1836. 

  1836. 	* kdc/Makefile.am: remove junk
    1837. 

    1838. 

  1838. 	* kadmin/Makefile.am: sl.a -> sl.la
    1839. 

    1840. 

  1840. 	* appl/afsutil/Makefile.am: remove EXTRA_bin_PROGRAMS
    1841. 

    1842. 

  1842. 	* admin/Makefile.am: sl.a -> sl.la
    1843. 

    1844. 

  1844. 	* configure.in: condition KRB5; AC_CHECK_XAU
    1845. 

    1846. 

  1846. 	* Makefile.am: include Makefile.am.common
    1847. 

    1848. 

  1848. 	* include/kadm5/Makefile.am: include Makefile.am.common; don't
    1849. 

  1849.  	install headers from here
    1850. 

    1851. 

  1851. 	* include/Makefile.am: include Makefile.am.common; don't install
    1852. 

  1852.  	headers from here
    1853. 

    1854. 

  1854. 	* doc/Makefile.am: include Makefile.am.common
    1855. 

    1856. 

  1856. 	* lib/krb5/Makefile.am: include Makefile.am.common
    1857. 

    1858. 

  1858. 	* lib/kadm5/Makefile.am: include Makefile.am.common
    1859. 

    1860. 

  1860. 	* lib/hdb/Makefile.am: include Makefile.am.common
    1861. 

    1862. 

  1862. 	* lib/gssapi/Makefile.am: include Makefile.am.common
    1863. 

    1864. 

  1864. 	* lib/asn1/Makefile.am: include Makefile.am.common
    1865. 

    1866. 

  1866. 	* lib/Makefile.am: include Makefile.am.common
    1867. 

    1868. 

  1868. 	* lib/45/Makefile.am: include Makefile.am.common
    1869. 

    1870. 

  1870. 	* kuser/Makefile.am: include Makefile.am.common
    1871. 

    1872. 

  1872. 	* kpasswd/Makefile.am: include Makefile.am.common
    1873. 

    1874. 

  1874. 	* kdc/Makefile.am: include Makefile.am.common
    1875. 

    1876. 

  1876. 	* kadmin/Makefile.am: include Makefile.am.common
    1877. 

    1878. 

  1878. 	* appl/test/Makefile.am: include Makefile.am.common
    1879. 

    1880. 

  1880. 	* appl/afsutil/Makefile.am: include Makefile.am.common
    1881. 

    1882. 

  1882. 	* appl/Makefile.am: include Makefile.am.common
    1883. 

    1884. 

  1884. 	* admin/Makefile.am: include Makefile.am.common
    1885. 

    1886. 

  1886. Wed Mar 17 03:04:38 1999  Assar Westerlund  <assar@sics.se>
    1887. 

    1888. 

  1888. 	* lib/krb5/store.c (krb5_store_stringz): braces fix
    1889. 

    1890. 

  1890. 	* lib/kadm5/get_s.c (kadm5_s_get_principal): braces fix
    1891. 

    1892. 

  1892. 	* lib/kadm5/ent_setup.c (_kadm5_setup_entry): braces fix
    1893. 

    1894. 

  1894. 	* kdc/connect.c (loop): braces fix
    1895. 

    1896. 

  1896. 	* lib/krb5/config_file.c: cast to unsigned char to make is* happy
    1897. 

    1898. 

  1898. 	* lib/krb5/log.c (krb5_addlog_dest): more braces to make gcc happy
    1899. 

    1900. 

  1900. 	* lib/krb5/crypto.c (krb5_verify_checksum): rename C -> cksum to
    1901. 

  1901.  	be consistent
    1902. 

    1903. 

  1903. 	* kadmin/util.c (timeval2str): more braces to make gcc happy
    1904. 

    1905. 

  1905. 	* kadmin/load.c: cast in is* to get rid of stupid warning
    1906. 

    1907. 

  1907. 	* kadmin/dump.c (append_hex): cast in isalnum to get rid of stupid
    1908. 

  1908.  	warning
    1909. 

    1910. 

  1910. 	* kdc/kaserver.c: malloc checks and fixes
    1911. 

    1912. 

  1912. 	* lib/krb5/get_host_realm.c (krb5_get_host_realm): include leading
    1913. 

  1913.  	dot (if any) when looking up realms.
    1914. 

    1915. 

  1915. Fri Mar 12 13:57:56 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    1916. 

    1917. 

  1917. 	* lib/krb5/get_host_realm.c: add dns support
    1918. 

    1919. 

  1919. 	* lib/krb5/set_default_realm.c: use krb5_free_host_realm
    1920. 

    1921. 

  1921. 	* lib/krb5/free_host_realm.c: check for NULL realmlist
    1922. 

    1923. 

  1923. 	* lib/krb5/context.c: don't print warning if there is no krb5.conf
    1924. 

    1925. 

  1925. Wed Mar 10 19:29:46 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1926. 

    1927. 

  1927. 	* configure.in: use AC_WFLAGS
    1928. 

    1929. 

  1929. Mon Mar  8 11:49:43 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1930. 

    1931. 

  1931. 	* Release 0.1c
    1932. 

    1933. 

  1933. 	* kuser/klist.c: use print_version
    1934. 

    1935. 

  1935. 	* kuser/kdestroy.c: use print_version
    1936. 

    1937. 

  1937. 	* kdc/hpropd.c: use print_version
    1938. 

    1939. 

  1939. 	* kdc/hprop.c: use print_version
    1940. 

    1941. 

  1941. 	* kdc/config.c: use print_version
    1942. 

    1943. 

  1943. 	* kadmin/kadmind.c: use print_version
    1944. 

    1945. 

  1945. 	* kadmin/kadmin.c: use print_version
    1946. 

    1947. 

  1947. 	* appl/test/common.c: use print_version
    1948. 

    1949. 

  1949. 	* appl/afsutil/afslog.c: use print_version
    1950. 

    1951. 

  1951. Mon Mar  1 10:49:14 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1952. 

    1953. 

  1953. 	* lib/krb5/get_addrs.c: SOCKADDR_HAS_SA_LEN ->
    1954. 

  1954.  	HAVE_STRUCT_SOCKADDR_SA_LEN
    1955. 

    1956. 

  1956. 	* configure.in, acconfig.h, cf/*: update to automake 1.4/autoconf 2.13
    1957. 

    1958. 

  1958. Sun Feb 28 18:19:20 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1959. 

    1960. 

  1960. 	* lib/asn1/gen.c: make `BIT STRING's unsigned
    1961. 

    1962. 

  1962. 	* lib/asn1/{symbol.h,gen.c}: add TUInteger type
    1963. 

  1963. 

  1964. 	* lib/krb5/verify_user.c (krb5_verify_user): pass prompter to
    1965. 

  1965.  	krb5_get_init_creds_password
    1966. 

  1966. 

  1967. 	* lib/krb5/fcache.c (fcc_gen_new): implement
    1968. 

  1968. 

  1969. Sat Feb 27 22:41:23 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1970. 

  1970. 

  1971. 	* doc/install.texi: krb4 is now automatically detected
    1972. 

  1972. 

  1973. 	* doc/misc.texi: update procedure to set supported encryption
    1974. 

  1974.  	types
    1975. 

  1975. 

  1976. 	* doc/setup.texi: change some silly wordings
    1977. 

  1977. 

  1978. Sat Feb 27 22:17:30 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    1979. 

  1979. 

  1980. 	* lib/krb5/keytab.c (fkt_remove_entry): make this work
    1981. 

  1981. 

  1982. 	* admin/ktutil.c: add minimally working `get' command
    1983. 

    1984. 

  1984. Sat Feb 27 19:44:49 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1985. 

    1986. 

  1986. 	* lib/hdb/convert_db.c: more typos
    1987. 

    1988. 

  1988. 	* include/Makefile.am: remove EXTRA_DATA (as of autoconf
    1989. 

  1989.  	2.13/automake 1.4)
    1990. 

    1991. 

  1991. 	* appl/Makefile.am: OTP_dir
    1992. 

    1993. 

  1993. Fri Feb 26 17:37:00 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    1994. 

    1995. 

  1995. 	* doc/setup.texi: add kadmin section
    1996. 

    1997. 

  1997. 	* lib/asn1/check-der.c: fix printf warnings
    1998. 

    1999. 

  1999. Thu Feb 25 11:16:49 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    2000. 

    2001. 

  2001. 	* configure.in: -O does not belong in WFLAGS
    2002. 

    2003. 

  2003. Thu Feb 25 11:05:57 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    2004. 

    2005. 

  2005. 	* lib/asn1/der_put.c: fix der_put_int
    2006. 

    2007. 

  2007. Tue Feb 23 20:35:12 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    2008. 

    2009. 

  2009. 	* configure.in: use AC_BROKEN_GLOB
    2010. 

    2011. 

  2011. Mon Feb 22 15:12:44 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    2012. 

    2013. 

  2013. 	* configure.in: check for glob
    2014. 

    2015. 

  2015. Mon Feb 22 11:32:42 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
    2016. 

    2017. 

  2017. 	* Release 0.1b
    2018. 

    2019. 

  2019. Sat Feb 20 15:48:06 1999  Johan Danielsson  <joda@blubb.pdc.kth.se>
    2020. 

    2021. 

  2021. 	* lib/hdb/convert_db.c: convert DES3 keys to des3-cbc-sha1, and
    2022. 

  2022.  	des3-cbc-md5
    2023. 

    2024. 

  2024. 	* lib/krb5/crypto.c (DES3_string_to_key): make this actually do
    2025. 

  2025.  	what the draft said it should
    2026. 

    2027. 

  2027. 	* lib/hdb/convert_db.c: little program for database conversion
    2028. 

    2029. 

  2029. 	* lib/hdb/db.c (DB_open): try to open database w/o .db extension
    2030. 

    2031. 

  2031. 	* lib/hdb/ndbm.c (NDBM_open): add test for database format
    2032. 

    2033. 

  2033. 	* lib/hdb/db.c (DB_open): add test for database format
    2034. 

    2035. 

  2035. 	* lib/asn1/gen_glue.c (generate_2int): don't depend on flags being
    2036. 

  2036.  	unsigned
    2037. 

    2038. 

  2038. 	* lib/hdb/hdb.c: change `hdb_set_master_key' to take an
    2039. 

  2039.  	EncryptionKey, and add a new function `hdb_set_master_keyfile' to
    2040. 

  2040.  	do what `hdb_set_master_key' used to do
    2041. 

    2042. 

  2042. 	* kdc/kstash.c: add `--convert-file' option to change keytype of
    2043. 

  2043.  	existing master key file
    2044. 

    2045. 

  2045. Fri Feb 19 07:04:14 1999  Assar Westerlund  <assar@squid.pdc.kth.se>
    2046. 

    2047. 

  2047. 	* Release 0.1a
    2048. 

    2049. 

  2049. Sat Feb 13 17:12:53 1999  Assar Westerlund  <assar@sics.se>
    2050. 

    2051. 

  2051. 	* lib/krb5/mk_safe.c (krb5_mk_safe): sizeof(buf) -> buf_size, buf
    2052. 

  2052.  	is now a `u_char *'
    2053. 

    2054. 

  2054. 	* lib/krb5/get_in_tkt.c (krb5_init_etype): etypes are now `int'
    2055. 

    2056. 

  2056. 	* lib/krb5/get_host_realm.c (krb5_get_host_realm): constize
    2057. 

  2057.  	orig_host
    2058. 

    2059. 

  2059.  	(krb5_salttype_to_string): new function (RSA_MD5_DES_verify,
    2060. 

  2060.  	RSA_MD5_DES3_verify): initialize ret
    2061. 

    2062. 

  2062. 	* lib/gssapi/init_sec_context.c (init_auth): remove unnecessary
    2063. 

  2063.  	gssapi_krb5_init.  ask for KEYTYPE_DES credentials
    2064. 

    2065. 

  2065. 	* kadmin/get.c (print_entry_long): print the keytypes and salts
    2066. 

  2066.  	available for the principal
    2067. 

    2068. 

  2068. 	* configure.in (WFLAGS): add `-O' to catch unitialized variables
    2069. 

  2069.  	and such
    2070. 

  2070. 	(gethostname, mkstemp, getusershell, inet_aton): more tests
    2071. 

  2071. 

  2072. 	* lib/hdb/hdb.h: update prototypes
    2073. 

  2073. 

  2074. 	* configure.in: homogenize broken detection with krb4
    2075. 

  2075. 

  2076. 	* lib/kadm5/init_c.c (kadm5_c_init_with_context): remove unused
    2077. 

  2077.  	`error'
    2078. 

    2079. 

  2079. 	* lib/asn1/Makefile.am (check-der): add
    2080. 

    2081. 

  2081. 	* lib/asn1/gen.c (define_type): map ASN1 Integer to `int' instead
    2082. 

  2082.  	of `unsigned'
    2083. 

    2084. 

  2084. 	* lib/asn1/der_length.c (length_unsigned): new function
    2085. 

  2085. 	(length_int): handle signed integers
    2086. 

    2087. 

  2087. 	* lib/asn1/der_put.c (der_put_unsigned): new function
    2088. 

  2088. 	(der_put_int): handle signed integers
    2089. 

    2090. 

  2090.  	* lib/asn1/der_get.c (der_get_unsigned): new function
    2091. 

  2091.  	(der_get_int): handle signed integers
    2092. 

    2093. 

  2093. 	* lib/asn1/der.h: all integer functions take `int' instead of
    2094. 

  2094.  	`unsigned'
    2095. 

    2096. 

  2096. 	* lib/asn1/lex.l (filename): unused. remove.
    2097. 

    2098. 

  2098. 	* lib/asn1/check-der.c: new test program for der encoding and
    2099. 

  2099.  	decoding.
    2100. 

    2101. 

  2101. Mon Feb  1 04:09:06 1999  Assar Westerlund  <assar@sics.se>
    2102. 

    2103. 

  2103. 	* lib/krb5/send_to_kdc.c (krb5_sendto_kdc): only call
    2104. 

  2104.  	gethostbyname2 with AF_INET6 if we actually have IPv6.  From
    2105. 

  2105.  	"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
    2106. 

    2107. 

  2107.  	* lib/krb5/changepw.c (get_kdc_address): dito
    2108. 

    2109. 

  2109. Sun Jan 31 06:26:36 1999  Assar Westerlund  <assar@sics.se>
    2110. 

    2111. 

  2111. 	* kdc/connect.c (parse_prots): always bind to AF_INET, there are
    2112. 

  2112.  	v6-implementations without support for `mapped V4 addresses'.
    2113. 

  2113.   	From Jun-ichiro itojun Hagino <itojun@kame.net>
    2114. 

  2114. 

  2115. Sat Jan 30 22:38:27 1999  Assar Westerlund  <assar@juguete.sics.se>
    2116. 

  2116. 

  2117. 	* Release 0.0u
    2118. 

  2118. 

  2119. Sat Jan 30 13:43:02 1999  Assar Westerlund  <assar@sics.se>
    2120. 

  2120. 

  2121. 	* lib/krb5/Makefile.am: explicit rules for *.et files
    2122. 

  2122. 

  2123.  	* lib/kadm5/init_c.c (get_kadm_ticket): only remove creds if
    2124. 

  2124.  	krb5_get_credentials was succesful.
    2125. 

  2125.  	(get_new_cache): return better error codes and return earlier.
    2126. 

  2126.  	(get_cred_cache): only delete default_client if it's different
    2127. 

  2127.  	from client
    2128. 

  2128.  	(kadm5_c_init_with_context): return a more descriptive error.
    2129. 

  2129. 

  2130. 	* kdc/kerberos5.c (check_flags): handle NULL client or server
    2131. 

  2131. 

  2132. 	* lib/krb5/sendauth.c (krb5_sendauth): return the error in
    2133. 

  2133.  	`ret_error' iff != NULL
    2134. 

    2135. 

  2135. 	* lib/krb5/rd_error.c (krb5_free_error, krb5_free_error_contents):
    2136. 

  2136.  	new functions
    2137. 

    2138. 

  2138. 	* lib/krb5/mk_req_ext.c (krb5_mk_req_extended): more
    2139. 

  2139.  	type-correctness
    2140. 

    2141. 

  2141. 	* lib/krb5/krb5.h (krb5_error): typedef to KRB_ERROR
    2142. 

    2143. 

  2143. 	* lib/krb5/init_creds_pw.c: KRB5_TGS_NAME: use
    2144. 

    2145. 

  2145. 	* lib/krb5/get_cred.c: KRB5_TGS_NAME: use
    2146. 

    2147. 

  2147.  	* lib/kafs/afskrb5.c (afslog_uid_int): update to changes
    2148. 

    2149. 

  2149. 	* lib/kadm5/rename_s.c (kadm5_s_rename_principal): call remove
    2150. 

  2150.  	instead of rename, but shouldn't this just call rename?
    2151. 

    2152. 

  2152.  	* lib/kadm5/get_s.c (kadm5_s_get_principal): always return an
    2153. 

  2153.  	error if the principal wasn't found.
    2154. 

    2155. 

  2155. 	* lib/hdb/ndbm.c (NDBM_seq): unseal key
    2156. 

    2157. 

  2157. 	* lib/hdb/db.c (DB_seq): unseal key
    2158. 

    2159. 

  2159. 	* lib/asn1/Makefile.am: added explicit rules for asn1_err.[ch]
    2160. 

    2161. 

  2161. 	* kdc/hprop.c (v4_prop): add krbtgt/THISREALM@OTHERREALM when
    2162. 

  2162.  	finding cross-realm tgts in the v4 database
    2163. 

    2164. 

  2164. 	* kadmin/mod.c (mod_entry): check the number of arguments.  check
    2165. 

  2165.  	that kadm5_get_principal worked.
    2166. 

    2167. 

  2167. 	* lib/krb5/keytab.c (fkt_remove_entry): remove KRB5_KT_NOTFOUND if
    2168. 

  2168.  	we weren't able to remove it.
    2169. 

    2170. 

  2170. 	* admin/ktutil.c: less drive-by-deleting.  From Love
    2171. 

  2171.  	<lha@e.kth.se>
    2172. 

    2173. 

  2173. 	* kdc/connect.c (parse_ports): copy the string before mishandling
    2174. 

  2174.  	it with strtok_r
    2175. 

    2176. 

  2176. 	* kdc/kerberos5.c (tgs_rep2): print the principal with mismatching
    2177. 

  2177.  	kvnos
    2178. 

    2179. 

  2179. 	* kadmin/kadmind.c (main): convert `debug_port' to network byte
    2180. 

  2180.  	order
    2181. 

  2181. 

  2182. 	* kadmin/kadmin.c: allow specification of port number.
    2183. 

  2183. 

  2184. 	* lib/kadm5/kadm5_locl.h (kadm5_client_context): add
    2185. 

  2185.  	`kadmind_port'.
    2186. 

    2187. 

  2187. 	* lib/kadm5/init_c.c (_kadm5_c_init_context): move up
    2188. 

  2188.  	initalize_kadm5_error_table_r.
    2189. 

  2189. 	allow specification of port number.
    2190. 

  2190. 	
    2191. 

  2191.   	From Love <lha@stacken.kth.se>
    2192. 

    2193. 

  2193. 	* kuser/klist.c: add option -t | --test
    2194. 

    2195. 

    2196.