Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: mkey_keytab
Commits on Aug 7, 2008
  1. Add test case to test that new mkey stash code is backward compat wit…

    wfiveash authored
    …h old format stash file.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20627 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jul 15, 2008
  1. Files updated as a result of code review from Ken Raeburn.

    wfiveash authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20525 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jul 1, 2008
  1. Talked with MIT people and decided to revert the logic of

    wfiveash authored
    krb5_db_def_fetch_mkey_keytab() so that it does use the mkey princ arg to locate the masterkey in the keytab stash.  Also changed the error reporting done by krb5_db_def_fetch_mkey() to call error_message() on the return code of the keytab stash fetch and the old format stash fetch and set the error message to include both of those since this is an ambiguous situation.  And test case 108 in src/kerberos/mit/svn/branches/mkey_keytab/src/lib/kadm5/unit-test/api.2/init-v2.exp was modified to expect KRB5_KDB_CANTREAD_STORED instead of KDB_NOMASTERKEY.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20493 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 27, 2008
  1. The logic of the krb5_db_def_fetch_mkey_keytab() was off a bit when c…

    wfiveash authored
    …hecking the keys against specified kvno and enctypes. The code now correctly check for either kvno, enctype or both if specified.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20490 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 25, 2008
  1. ticket: new

    wfiveash authored
    subject: Masterkey Keytab Stash
    
    This ticket is to track code changes for the Masterkey Keytab Stash project.  The Krb Consortium page is:
    http://k5wiki.kerberos.org/wiki/Projects/Masterkey_Keytab_Stash
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20475 dc483132-0cff-0310-8789-dd5450dbe970
  2. All relevant tests in local src tree pass.

    wfiveash authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20467 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 24, 2008
  1. fixed a few more bugs, most tests are passing but may have some more …

    wfiveash authored
    …work to do.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20464 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 19, 2008
  1. second commit to backup files, tweaked some logic to better support k…

    wfiveash authored
    …db5_util dump -mkey_convert.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20430 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 6, 2008
  1. first commit to backup my changes

    wfiveash authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20369 dc483132-0cff-0310-8789-dd5450dbe970
  2. Branch for the changes to stash the master key in a keytab instead of…

    wfiveash authored
    … the old format stash file.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mkey_keytab@20368 dc483132-0cff-0310-8789-dd5450dbe970
  3. Annotate that 'protocol' in svc_register means an IPPROTO_ value.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20367 dc483132-0cff-0310-8789-dd5450dbe970
  4. On Mac OS X, try poking launchd to get the portmapper launched before

    raeburn authored
    we try to connect to it.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20364 dc483132-0cff-0310-8789-dd5450dbe970
  5. Check for GSS_C_NO_CREDENTIAL before loop check.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20363 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 4, 2008
  1. We're not using this makedepend implementation any more.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20362 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 3, 2008
  1. Revert a few const specs to reduce warnings.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20358 dc483132-0cff-0310-8789-dd5450dbe970
  2. Fix various minor format-string issues.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20356 dc483132-0cff-0310-8789-dd5450dbe970
  3. Passing 0 to krb5_build_principal requires a cast.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20355 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Jun 2, 2008
  1. Don't use 'log' as a global variable name.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20354 dc483132-0cff-0310-8789-dd5450dbe970
  2. Explicitly note number as unsigned to shut gcc up.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20353 dc483132-0cff-0310-8789-dd5450dbe970
  3. Partial const-ification, as indicated by the modern Tcl API, except

    raeburn authored
    for any bits that would require changing the admin APIs.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20352 dc483132-0cff-0310-8789-dd5450dbe970
  4. Fix a few incompatible-pointer warnings that aren't just about signed…

    raeburn authored
    …ness.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20351 dc483132-0cff-0310-8789-dd5450dbe970
  5. Change krb5_context.db_context to point to the real structure type,

    raeburn authored
    and change uses to not cast all the time.  Also rename it from
    db_context to dal_handle, since one of the fields in the pointed-to
    structure is also called db_context.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20348 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 30, 2008
  1. ticket: new

    lxs authored
    subject: Add header for kill() in USE_PASSWORD_SERVER case
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20347 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: new

    lxs authored
    status: open
    subject: Apple PKINIT patch commit
    
    Commit of Apple PKINIT patches under "APPLE_PKINIT" preprocessor symbol.
    
    Long term goal is to merge these patches with the pkinit preauth plugin which
    does not currently have support for Mac OS X crypto libraries or the exported
    functions used by Back To My Mac.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20346 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: new

    lxs authored
    subject: No prototype when building kdb5_util without krb4 support
    
    Move stdio inclusion to the top of the file so there is a definition of 
    printf when building without v4 support.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20345 dc483132-0cff-0310-8789-dd5450dbe970
  4. ticket: new

    lxs authored
    subject: Warnings in server_stubs.c (signed vs unsigned errmsg, gcc printf)
    
    server_stubs.c uses char * for error messages which it gets from com_err, 
    throwing away the constness of the com_err output.  Made error message args
    be const char * to remove warnings and prevent accidental modification of
    com_err strings.
    
    In calls to krb5_klog_syslog server_stubs.c passes void* into %s printf
    formats and passes size_ts in for the field widths in %.*s formats.  After
    verifying that the size_ts cannot be bigger than ints (which is ensured by 
    trunc_name) added casts to remove spurious warnings. 
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20344 dc483132-0cff-0310-8789-dd5450dbe970
  5. ticket: new

    lxs authored
    subject: signed vs unsigned char * warnings in kdb_xdr.c
    
    load and store functions in k5-platform.h take an unsigned char *, whereas
    kdb_xdr.c was using a char * for decoding.  This resulted in pages of warnings
    in the parsing code.  Switched to using an unsigned char * and cast in the
    couple places where a char * is needed.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20343 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 27, 2008
  1. ticket: new

    lxs authored
    subject: Profile library should not call rw_access earlier than needed
    
    Call rw_access lazily so we only call access just before we need to 
    write to the file to avoid calling access as often.  Deprecated bit in
    profile structures to track writability.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20341 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 19, 2008
  1. ticket: 5899

    raeburn authored
    Use $(DL_LIB) instead of explicit -ldl.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20325 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 17, 2008
  1. ticket: 5943

    raeburn authored
    Force hostname to lowercase before constructing kadmin principal name.
    Allocate space for the name dynamically.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20323 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 16, 2008
  1. Minor spelling & comment formatting.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20322 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 15, 2008
  1. Move auto var to outer scope, because its storage is used beyond the …

    raeburn authored
    …inner scope.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20320 dc483132-0cff-0310-8789-dd5450dbe970
  2. Don't test error code when it's known to be 0.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20319 dc483132-0cff-0310-8789-dd5450dbe970
  3. Fix minor bug in kg_save_name failure cleanup code.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20318 dc483132-0cff-0310-8789-dd5450dbe970
  4. Free context after use, not before.

    raeburn authored
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20317 dc483132-0cff-0310-8789-dd5450dbe970
Something went wrong with that request. Please try again.