Skip to content
Commits on Jun 2, 2009
  1. tag krb5-1.7

    tlyu committed Jun 2, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/tags/krb5-1-7-final@22400 dc483132-0cff-0310-8789-dd5450dbe970
  2. krb5-1.7

    tlyu committed Jun 2, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22399 dc483132-0cff-0310-8789-dd5450dbe970
  3. Update copyrights. Reorganize "major changes" listing.

    tlyu committed Jun 2, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22398 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 26, 2009
  1. krb5-1.7-beta3-postrelease

    tlyu committed May 26, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22391 dc483132-0cff-0310-8789-dd5450dbe970
  2. readme and patchlevel for krb5-1.7-beta3

    tlyu committed May 26, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22389 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6503

    tlyu committed May 26, 2009
    version_fixed: 1.7
    target_version: 1.7
    tags: pullup
    subject: typo in admin.texinfo
    
    pull up r22266 from trunk
    
     ------------------------------------------------------------------------
     r22266 | ghudson | 2009-04-22 10:26:17 +0200 (Wed, 22 Apr 2009) | 4 lines
    
     In the cross-realm setup example in the admin documentation, use
     "addprinc" instead of "add_princ" since the latter is not a recognized
     alias for add_principal.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22388 dc483132-0cff-0310-8789-dd5450dbe970
  4. ticket: 6502

    tlyu committed May 26, 2009
    target_version: 1.7
    tags: pullup
    version_fixed: 1.7
    subject: typo in doc/api/krb5.tex
    
     ------------------------------------------------------------------------
     r22287 | ghudson | 2009-04-28 19:54:13 +0200 (Tue, 28 Apr 2009) | 2 lines
    
     Fix typo.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22387 dc483132-0cff-0310-8789-dd5450dbe970
  5. ticket: 6497

    tlyu committed May 26, 2009
    version_fixed: 1.7
    
    pull up r22382 from trunk
     ------------------------------------------------------------------------
     r22382 | ghudson | 2009-05-25 18:47:40 +0200 (Mon, 25 May 2009) | 6 lines
    
     ticket: 6497
     tags: pullup
     target_version: 1.7
    
     Fix up kinit -T documentation.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22386 dc483132-0cff-0310-8789-dd5450dbe970
  6. ticket: 6501

    tlyu committed May 26, 2009
    version_fixed: 1.7
    
    pull up r22381 from trunk
     ------------------------------------------------------------------------
     r22381 | ghudson | 2009-05-25 18:40:00 +0200 (Mon, 25 May 2009) | 10 lines
    
     ticket: 6501
     subject: Temporarily disable FAST PKINIT for 1.7 release
     tags: pullup
     target_version: 1.7
    
     There are protocol issues and implementation defects surrounding the
     combination of FAST an PKINIT currently.  To avoid impacting the 1.7
     scheduled and to avoid creating interoperability problems later,
     disable the combination until the problems are resolved.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22385 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 25, 2009
  1. ticket: 6500

    tlyu committed May 25, 2009
    target_version: 1.7
    tags: pullup
    version_fixed: 1.7
    subject: use correct type for krb5_c_prf_length length arg
    
    pull up r22364 from trunk
     ------------------------------------------------------------------------
     r22364 | raeburn | 2009-05-22 19:20:15 +0200 (Fri, 22 May 2009) | 2 lines
    
     Use correct type for krb5_c_prf_length length arg.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22380 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6499

    tlyu committed May 25, 2009
    target_version: 1.7
    tags: pullup
    version_fixed: 1.7
    subject: use printf format attribute only with gcc
    status: resolved
    
    pull up r22363 from trunk
    
     ------------------------------------------------------------------------
     r22363 | raeburn | 2009-05-22 19:19:37 +0200 (Fri, 22 May 2009) | 2 lines
    
     Use printf format attribute only with gcc.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22379 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6498

    tlyu committed May 25, 2009
    target_version: 1.7
    tags: pullup
    version_fixed: 1.7
    subject: spnego_mech.c syntax error under _GSS_STATIC_LINK
    status: resolved
    
    pull up r22361 from trunk
    
     ------------------------------------------------------------------------
     r22361 | raeburn | 2009-05-22 16:12:17 +0200 (Fri, 22 May 2009) | 2 lines
    
     fix minor syntax error
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22378 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 24, 2009
  1. ticket: 6496

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22369 from trunk
    
     ------------------------------------------------------------------------
     r22369 | ghudson | 2009-05-24 17:53:51 +0200 (Sun, 24 May 2009) | 11 lines
    
     ticket: 6496
     subject: Fix vector initialization error in KDC preauth code
     target_version: 1.7
     tags: pullup
    
     In the KDC, get_preauth_hint_list had two bugs initializing the
     preauth array.  It was allocating 21 extra entries instead of two due
     to a typo (harmless), and it was only zeroing up through one extra
     entry (harmful).  Adjust the code to use calloc to avoid further
     disagreements of this nature.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22377 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6495

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22368 from trunk
    
     ------------------------------------------------------------------------
     r22368 | ghudson | 2009-05-24 02:48:31 +0200 (Sun, 24 May 2009) | 10 lines
    
     ticket: 6495
     subject: Fix test rules for non-gmake make versions
     target_version: 1.7
     tags: pullup
    
     The build rules for the new t_ad_fx_armor and t_authdata test programs
     used $<, which is only portable for implicit rules (but is valid in
     gmake for all rules).  Stop using $< in those rules so that "make
     check" works with System V make.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22376 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6492

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22360 from trunk
     ------------------------------------------------------------------------
     r22360 | ghudson | 2009-05-22 16:08:25 +0200 (Fri, 22 May 2009) | 10 lines
    
     ticket: 6492
     subject: Remove spurious assertion in handle_authdata
     tags: pullup
     target_version: 1.7
    
     In handle_authdata in the KDC, remove a spurious assertion (added in
     r21566 on the mskrb-integ branch) that authdata starts out empty.
     authdata can be legitimately added by check_padata, which precedes
     handle_authdata, and this happens with pkinit.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22375 dc483132-0cff-0310-8789-dd5450dbe970
  4. ticket: 6490

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up 22355, 22356, 22357 from trunk
    
     ------------------------------------------------------------------------
     r22357 | ghudson | 2009-05-20 04:05:53 +0200 (Wed, 20 May 2009) | 6 lines
    
     ticket: 6490
    
     Restore compatibility with KDCs using key usage 8 to encrypt TGS
     replies in a subkey, by implementing a fallback in
     krb5_arcfour_decrypt.
    
     ------------------------------------------------------------------------
     r22356 | ghudson | 2009-05-20 01:17:49 +0200 (Wed, 20 May 2009) | 13 lines
    
     ticket: 6490
     status: open
     tags: pullup
    
     When using keyed checksum types with TGS subkeys, Microsoft AD 2003
     verifies the checksum using the subkey, whereas MIT and Heimdal verify
     it using the TGS session key.  (RFC 4120 is actually silent on which
     is correct; RFC 4757 specifies the TGS session key.)  To sidestep this
     interop issue, don't use keyed checksum types with RC4 keys without
     explicit configuration in krb5.conf.  Using keyed checksum types with
     AES is fine since, experimentally, AD 2008 accepts checksums keyed
     with the TGS session key.
    
     ------------------------------------------------------------------------
     r22355 | hartmans | 2009-05-19 01:28:53 +0200 (Tue, 19 May 2009) | 5 lines
    
     ticket: 6490
     status: open
    
     In practice, key usage 9 requires no translation.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22374 dc483132-0cff-0310-8789-dd5450dbe970
  5. ticket: 6488

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22351, r22354 from trunk
    
    ------------------------------------------------------------------------
    r22354 | hartmans | 2009-05-18 21:08:48 +0200 (Mon, 18 May 2009) | 8 lines
    
    ticket: 6488
    target_version: 1.7
    tags: pullup
    
    Copy the sequence key rather than the subkey for lucid contexts in RFC
    1964 mode, so that we map to raw des enctypes rather than say
    des-cbc-crc.
    ------------------------------------------------------------------------
    r22351 | ghudson | 2009-05-14 18:50:52 +0200 (Thu, 14 May 2009) | 9 lines
    
    ticket: 6488
    status: open
    tags: pullup
    target_version: 1.7
    
    gss_krb5int_export_lucid_sec_context was erroneously copying the first
    sizeof(void *) bytes of the context into data_set, instead of the
    pointer to the context.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22373 dc483132-0cff-0310-8789-dd5450dbe970
  6. ticket: 6489

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22350 from trunk
    
     ------------------------------------------------------------------------
     r22350 | ghudson | 2009-05-14 18:16:32 +0200 (Thu, 14 May 2009) | 9 lines
    
     ticket: 6489
     subject: UCS2 support doesn't handle upper half of BMP
     tags: pullup
     target_version: 1.7
    
     Make krb5_ucs2 an unsigned type.  Eliminate the need for distinguished
     values for ucs2 and ucs4 characters by changing the API of the single-
     character conversion routines.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22372 dc483132-0cff-0310-8789-dd5450dbe970
  7. ticket: 6486

    tlyu committed May 24, 2009
    version_fixed: 1.7
    
    pull up r22348 from trunk
    
     ------------------------------------------------------------------------
     r22348 | tlyu | 2009-05-13 22:41:37 +0200 (Wed, 13 May 2009) | 13 lines
    
     ticket: 6486
     tags: pullup
     target_version: 1.7
    
     In util/support/utf8_conv.c, the SWAP16 macro is invoked with an
     argument that has side effects.  On platforms where SWAP16 can
     evaluate its argument twice (including platforms where utf8_conv.c
     creates a fallback definition for the SWAP16 macro), this can cause a
     read overrun by a factor of two.
    
     Rearrange the data flow to avoid calling SWAP16 with an argument that
     has side effects.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22371 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 12, 2009
  1. krb5-1.7-beta2-postrelease

    tlyu committed May 12, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22347 dc483132-0cff-0310-8789-dd5450dbe970
  2. README and patchlevel for krb5-1.7-beta2

    tlyu committed May 12, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22345 dc483132-0cff-0310-8789-dd5450dbe970
Commits on May 11, 2009
  1. ticket: 6485

    tlyu committed May 11, 2009
    tags: pullup
    target_version: 1.7
    version_fixed: 1.7
    subject: document ok_as_delegate in admin.texinfo
    
    pull up r2293, r22304 from trunk
    
     ------------------------------------------------------------------------
     r22304 | ghudson | 2009-05-03 14:47:27 -0400 (Sun, 03 May 2009) | 2 lines
     Changed paths:
        M /trunk/doc/admin.texinfo
    
     Fix formatting of ok_as_delegate documentation in admin guide.
     ------------------------------------------------------------------------
     r22293 | ghudson | 2009-04-30 11:08:50 -0400 (Thu, 30 Apr 2009) | 2 lines
     Changed paths:
        M /trunk/doc/admin.texinfo
    
     Document ok_as_delegate in the admin guide.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22342 dc483132-0cff-0310-8789-dd5450dbe970
  2. make depend

    tlyu committed May 11, 2009
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22341 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6484

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22325 from trunk
     ------------------------------------------------------------------------
     r22325 | hartmans | 2009-05-07 16:35:28 -0400 (Thu, 07 May 2009) | 18 lines
     Changed paths:
        M /trunk/src/include/k5-int.h
        M /trunk/src/lib/krb5/krb/decode_kdc.c
        M /trunk/src/lib/krb5/krb/gc_via_tkt.c
        M /trunk/src/lib/krb5/libkrb5.exports
    
     Subject: Try decrypting using session key if subkey fails in tgs rep handling
     ticket: 6484
     Tags: pullup
     Target_Version: 1.7
    
     Heimdal at least up through 1.2 incorrectly encrypts the TGS response
     in the session key not the subkey when a subkey is supplied.  See RFC
     4120 page 35.  Work around this by trying decryption using the session
     key after the subkey fails.
    
     * decode_kdc_rep.c: rename to krb5int_decode_tgs_rep; only used for
       TGS and now needs to take keyusage
     * gc_via_tkt: pass in session key and appropriate usage if subkey
       fails.
    
     Note that the dead code to process AS responses in decode_kdc_rep is
     not removed by this commit.  That will be removed as FAST TGS client
     support is integrated post 1.7.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22340 dc483132-0cff-0310-8789-dd5450dbe970
  4. ticket: 6483

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22324 from trunk
     ------------------------------------------------------------------------
     r22324 | hartmans | 2009-05-07 16:35:19 -0400 (Thu, 07 May 2009) | 8 lines
     Changed paths:
        M /trunk/src/kadmin/cli/k5srvutil.M
        M /trunk/src/kadmin/cli/kadmin.M
        M /trunk/src/kadmin/cli/kadmin.local.M
        M /trunk/src/kadmin/ktutil/ktutil.M
    
     ticket: 6483
     Subject: man1 in title header for man1 manpages
     Target_Version: 1.7
     Tags: pullup
    
     A previous ticket moved kadmin, kadmin.local, ktutil and k5srvutil man
     pages to man1 from man8.  This updates the section within the man
     page.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22339 dc483132-0cff-0310-8789-dd5450dbe970
  5. ticket: 6482

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22323 from trunk
    
     ------------------------------------------------------------------------
     r22323 | ghudson | 2009-05-07 15:51:46 -0400 (Thu, 07 May 2009) | 8 lines
     Changed paths:
        M /trunk/src/lib/kadm5/srv/svr_policy.c
        M /trunk/src/lib/kadm5/unit-test/api.0/crte-policy.exp
        M /trunk/src/lib/kadm5/unit-test/api.2/crte-policy.exp
    
     ticket: 6482
     subject: Allow more than 10 past keys to be stored by a policy
     target_version: 1.7
     tags: pullup
    
     Remove the arbitrary limit of 10 past keys in policies.  We were not
     taking advantage of that limit in any other code.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22338 dc483132-0cff-0310-8789-dd5450dbe970
  6. ticket: 6210

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22319 from trunk
     ------------------------------------------------------------------------
     r22319 | ghudson | 2009-05-06 14:52:44 -0400 (Wed, 06 May 2009) | 5 lines
     Changed paths:
        M /trunk/src/lib/krb5/krb/preauth2.c
    
     ticket: 6210
    
     In pa_sam, use the correct function to free sam_challenge in the
     success path.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22337 dc483132-0cff-0310-8789-dd5450dbe970
  7. ticket: 6401

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22310 from trunk
    
     ------------------------------------------------------------------------
     r22310 | ghudson | 2009-05-05 12:30:19 -0400 (Tue, 05 May 2009) | 5 lines
     Changed paths:
        M /trunk/src/lib/krb5/krb/get_in_tkt.c
    
     ticket: 6401
    
     In krb5_get_in_tkt, free the whole encoded request (since the
     structure was allocated by encode_krb5_as_req), not just the contents.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22336 dc483132-0cff-0310-8789-dd5450dbe970
  8. ticket: 5587

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22298 from trunk
    
     ------------------------------------------------------------------------
     r22298 | hartmans | 2009-04-30 16:17:42 -0400 (Thu, 30 Apr 2009) | 10 lines
     Changed paths:
        M /trunk/src/lib/crypto/des/Makefile.in
        M /trunk/src/lib/crypto/des/des_int.h
        A /trunk/src/lib/crypto/des/des_prf.c (from /trunk/src/lib/crypto/dk/dk_prf.c:22295)
        M /trunk/src/lib/crypto/etypes.c
        M /trunk/src/lib/crypto/t_cf2.comments
        M /trunk/src/lib/crypto/t_cf2.expected
        M /trunk/src/lib/crypto/t_cf2.in
    
     ticket: 5587
     Tags: pullup
    
     Implement DES and 3DES PRF. Patch fromKAMADA Ken'ichi
    
     Currently the DES and 3DES PRF output 16-byte results.  This is
     consistent with RFC 3961, but we need to confirm it is consistent with
     Heimdal and WG decisions.  See IETF 74 minutes for some discussion of
     the concern as it applies to AES and thus possibly all simplified
     profile enctypes.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22335 dc483132-0cff-0310-8789-dd5450dbe970
  9. ticket: 6480

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22292 from trunk
    
     ------------------------------------------------------------------------
     r22292 | hartmans | 2009-04-29 20:38:48 -0400 (Wed, 29 Apr 2009) | 10 lines
     Changed paths:
        M /trunk/src/kdc/kdc_preauth.c
    
     ticket: 6480
     Subject: Do not return PREAUTH_FAILED on unknown preauth
     Target_Version: 1.7
     Tags: pullup
    
     If the KDC receives unknown pre-authentication data then ignore it.
     Do not get into a case where PREAUTH_FAILED is returned because of
     unknown pre-authentication.  The main AS loop will cause
     PREAUTH_REQUIRED to be returned if the preauth_required flag is set
     and no valid preauth is found.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22334 dc483132-0cff-0310-8789-dd5450dbe970
  10. ticket: 6479

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22291 from trunk
    
     ------------------------------------------------------------------------
     r22291 | ghudson | 2009-04-29 19:21:21 -0400 (Wed, 29 Apr 2009) | 9 lines
     Changed paths:
        M /trunk/src/include/k5-err.h
        M /trunk/src/include/k5-int.h
        M /trunk/src/lib/krb5/krb/kerrs.c
        M /trunk/src/lib/krb5/libkrb5.exports
        M /trunk/src/util/support/errors.c
        M /trunk/src/util/support/libkrb5support-fixed.exports
    
     ticket: 6479
     subject: Add DEBUG_ERROR_LOCATIONS support
    
     If DEBUG_ERROR_LOCATIONS is defined, replace uses of
     krb5_set_error_message and krb5int_set_error with calls to the new
     _fl variants of those functions, and include filename and line number
     information in the calls.  Requires C99-style variadic macros if
     defined.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22333 dc483132-0cff-0310-8789-dd5450dbe970
  11. ticket: 6472

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22290 from trunk
    
     ------------------------------------------------------------------------
     r22290 | tlyu | 2009-04-28 20:31:50 -0400 (Tue, 28 Apr 2009) | 5 lines
     Changed paths:
        M /trunk/src/clients/ksu/krb_auth_su.c
    
     ticket: 6472
     target_version: 1.7
     tags: pullup
    
     Fix typo in error message reported by Marek Mahut (Red Hat).
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22332 dc483132-0cff-0310-8789-dd5450dbe970
  12. ticket: 6478

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22283, r22288 from trunk.  r22283 was not originally part of
    this ticket but is a prereq for the mk_cred.c change.
    
     ------------------------------------------------------------------------
     r22288 | ghudson | 2009-04-28 14:00:13 -0400 (Tue, 28 Apr 2009) | 14 lines
     Changed paths:
        M /trunk/src/lib/krb5/krb/mk_cred.c
        M /trunk/src/lib/krb5/krb/mk_priv.c
        M /trunk/src/lib/krb5/krb/mk_safe.c
    
     ticket: 6478
     subject: Fix handling of RET_SEQUENCE flag in mk_priv/mk_ncred
    
     Regularize the handling of KRB5_AUTH_CONTEXT_RET_SEQUENCE in
     krb5_mk_safe, krb5_mk_priv, and krb5_mk_ncred, using krb5_mk_safe as
     a baseline.  RET_SEQUENCE now implies DO_SEQUENCE for all three
     functions, the sequence number is always incremented if it is used,
     and outdata->seq is always set if RET_SEQUENCE is passed.
    
     Note that in the corresponding rd_ functions, RET_SEQUENCE and
     DO_SEQUENCE are independent flags, which is not consistent with the
     above.  This compromise is intended to preserve compatibility with
     any working code which might exist using the RET_SEQUENCE flag.
     ------------------------------------------------------------------------
     r22283 | ghudson | 2009-04-27 19:48:22 -0400 (Mon, 27 Apr 2009) | 5 lines
     Changed paths:
        M /trunk/src/lib/krb5/krb/mk_cred.c
    
     Fix a few memory leaks in krb5_mk_ncred.  Also tighten up the error
     handling of the sequence number, only decreasing it if it was
     increased.  The handling of DO_SEQUENCE and RET_SEQUENCE may still be
     flawed in some cases.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22331 dc483132-0cff-0310-8789-dd5450dbe970
  13. ticket: 5596

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22281 from trunk
     ------------------------------------------------------------------------
     r22281 | ghudson | 2009-04-27 11:42:23 -0400 (Mon, 27 Apr 2009) | 8 lines
     Changed paths:
        M /trunk/src/include/kdb.h
        M /trunk/src/include/kdb_ext.h
        M /trunk/src/kadmin/cli/kadmin.M
        M /trunk/src/kadmin/cli/kadmin.c
        M /trunk/src/kdc/do_tgs_req.c
        M /trunk/src/lib/kadm5/str_conv.c
    
     ticket: 5596
    
     Move KRB5_KDB_OK_AS_DELEGATE from kdb_ext.h to kdb.h.  Add kadmin
     support for the flag.  In the KDC, remove the restriction on returning
     the flag on cross-realm TGTs since there is now a defined meaning for
     that (it allows ok-as-delegate to be honored on the foreign realm's
     service tickets).
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22330 dc483132-0cff-0310-8789-dd5450dbe970
  14. ticket: 6477

    tlyu committed May 11, 2009
    version_fixed: 1.7
    
    pull up r22280 from trunk
    
     ------------------------------------------------------------------------
     r22280 | raeburn | 2009-04-25 05:36:11 -0400 (Sat, 25 Apr 2009) | 9 lines
     Changed paths:
        M /trunk/src/lib/kadm5/admin.h
        M /trunk/src/tests/misc/Makefile.in
        M /trunk/src/tests/misc/deps
        A /trunk/src/tests/misc/test_cxx_kadm5.cpp
    
     ticket: 6477
     subject: make installed headers C++-safe
     target_version: 1.7
     tags: pullup
    
     Now that we're installing the kadm5 headers, they should be C++-safe
     like the others.  Wrap the content in 'extern "C"' if compiling as
     C++.  New test program to verify.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22329 dc483132-0cff-0310-8789-dd5450dbe970
Something went wrong with that request. Please try again.