From noreply at github.com  Sun Nov 17 12:49:37 2013
From: noreply at github.com (GitHub)
Date: Sun, 17 Nov 2013 03:49:37 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 113e1e: Minor language
	problems
Message-ID: <5288ad51ac816_48e11399d509881c@hookshot-fe2-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 113e1efb6635a6cea71ed13ab4823ddf3386e0ef
      https://github.com/heimdal/heimdal/commit/113e1efb6635a6cea71ed13ab4823ddf3386e0ef
  Author: Ross L Richardson <ross at rlr.id.au>
  Date:   2013-11-17 (Sun, 17 Nov 2013)

  Changed paths:
    M lib/roken/parse_time.3

  Log Message:
  -----------
  Minor language problems




From noreply at github.com  Sun Nov 17 12:49:37 2013
From: noreply at github.com (GitHub)
Date: Sun, 17 Nov 2013 03:49:37 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 22a507: Minor language
	problems
Message-ID: <5288ad51635ad_48aa58fd54214bb@hookshot-fe2-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 22a507783565f5fbb5f0f5a6108a0ea0b17f3b39
      https://github.com/heimdal/heimdal/commit/22a507783565f5fbb5f0f5a6108a0ea0b17f3b39
  Author: Ross L Richardson <ross at rlr.id.au>
  Date:   2013-11-17 (Sun, 17 Nov 2013)

  Changed paths:
    M lib/roken/parse_time.3

  Log Message:
  -----------
  Minor language problems




From noreply at github.com  Sun Nov 17 17:44:44 2013
From: noreply at github.com (GitHub)
Date: Sun, 17 Nov 2013 08:44:44 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] cde59c: bump libheimntlm
 to the version from OSX 10.9 Mave...
Message-ID: <5288f27c2760c_53a171bd5864652@hookshot-fe1-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: cde59c543dcc3e7122e6faea8b3f75918f8df7fe
      https://github.com/heimdal/heimdal/commit/cde59c543dcc3e7122e6faea8b3f75918f8df7fe
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-17 (Sun, 17 Nov 2013)

  Changed paths:
    M lib/ntlm/apop.c
    M lib/ntlm/digest.c
    M lib/ntlm/heim-auth.h
    M lib/ntlm/heimntlm.h
    M lib/ntlm/ntlm.c
    M lib/ntlm/ntlm_err.et
    M lib/ntlm/test_commonauth.c
    M lib/ntlm/test_ntlm.c

  Log Message:
  -----------
  bump libheimntlm to the version from OSX 10.9 Mavericks


  Commit: 3af1b3a8a6ccdcdb4b6d635091d0bb24128a3920
      https://github.com/heimdal/heimdal/commit/3af1b3a8a6ccdcdb4b6d635091d0bb24128a3920
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-17 (Sun, 17 Nov 2013)

  Changed paths:
    M lib/ntlm/ntlm.c

  Log Message:
  -----------
  use constants


  Commit: 576f103203668eac78894248f3bc61ab7b5a7894
      https://github.com/heimdal/heimdal/commit/576f103203668eac78894248f3bc61ab7b5a7894
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-17 (Sun, 17 Nov 2013)

  Changed paths:
    M lib/ntlm/ntlm.c

  Log Message:
  -----------
  try to use the right domain/hostname offset/ucs2 encoding

reported by Joe Mason


Compare: https://github.com/heimdal/heimdal/compare/22a507783565...576f10320366

From noreply at github.com  Mon Nov 18 15:43:57 2013
From: noreply at github.com (GitHub)
Date: Mon, 18 Nov 2013 06:43:57 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] bd6612: test type1
	encodings
Message-ID: <528a27ada2f52_476f123dd58308fe@hookshot-fe6-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: bd661203cf24dc4ab265974cfe3ca5c23f719086
      https://github.com/heimdal/heimdal/commit/bd661203cf24dc4ab265974cfe3ca5c23f719086
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-18 (Mon, 18 Nov 2013)

  Changed paths:
    M lib/ntlm/test_ntlm.c

  Log Message:
  -----------
  test type1 encodings




From noreply at github.com  Wed Nov 20 08:08:52 2013
From: noreply at github.com (GitHub)
Date: Tue, 19 Nov 2013 23:08:52 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] e9d21a: Fix bug in
	loading MIT dumps
Message-ID: <528c6004ea200_2274119fd4c2206dd@hookshot-fe2-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: e9d21aeffc099f85509f02d1e96648fae7f21464
      https://github.com/heimdal/heimdal/commit/e9d21aeffc099f85509f02d1e96648fae7f21464
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M lib/hdb/hdb-mitdb.c

  Log Message:
  -----------
  Fix bug in loading MIT dumps


  Commit: 2c16b0da309970a961060fd47dd6bd38a5329100
      https://github.com/heimdal/heimdal/commit/2c16b0da309970a961060fd47dd6bd38a5329100
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M lib/hdb/hdb-mitdb.c

  Log Message:
  -----------
  Be verbose about MIT dump entry parsing failures


  Commit: 9e084ca1d7198eb6b37d8e85119b445fa1c3f546
      https://github.com/heimdal/heimdal/commit/9e084ca1d7198eb6b37d8e85119b445fa1c3f546
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M kdc/mit_dump.c

  Log Message:
  -----------
  Fix MIT dump entry parsing bug that forced 2048 sz


  Commit: 2f7eec7d2c176e148ab09a0570126c3bb95f5b69
      https://github.com/heimdal/heimdal/commit/2f7eec7d2c176e148ab09a0570126c3bb95f5b69
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M tests/kdc/hdb-mitdb
    M tests/kdc/hdb-mitdb.kadm5

  Log Message:
  -----------
  Add very large MIT KDB princ entry for testing

Constructed by doing repeated kadmin.local cpw commands with a policy
with -history 9.


Compare: https://github.com/heimdal/heimdal/compare/bd661203cf24...2f7eec7d2c17

From noreply at github.com  Wed Nov 20 08:20:15 2013
From: noreply at github.com (GitHub)
Date: Tue, 19 Nov 2013 23:20:15 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] fdcb8f: Fix callers of
 heim_ntlm_encode_type3; make build
Message-ID: <528c62afb97a4_229f1481d582486a1@hookshot-fe2-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: fdcb8f386217d69d37c5dea81c71951544c78c5e
      https://github.com/heimdal/heimdal/commit/fdcb8f386217d69d37c5dea81c71951544c78c5e
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M kcm/protocol.c
    M lib/gssapi/ntlm/init_sec_context.c
    M lib/gssapi/test_ntlm.c

  Log Message:
  -----------
  Fix callers of heim_ntlm_encode_type3; make build




From noreply at github.com  Wed Nov 20 14:13:27 2013
From: noreply at github.com (GitHub)
Date: Wed, 20 Nov 2013 05:13:27 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 906922: Include
 heimbase.h in hx509.h; required for heim_e...
Message-ID: <528cb577c7d8e_678a1353d5096738@hookshot-fe1-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 906922b9908b5d059033e8b25ee2efcee80bf333
      https://github.com/heimdal/heimdal/commit/906922b9908b5d059033e8b25ee2efcee80bf333
  Author: Jelmer Vernooij <jelmer at samba.org>
  Date:   2013-11-19 (Tue, 19 Nov 2013)

  Changed paths:
    M lib/hx509/hx509.h

  Log Message:
  -----------
  Include heimbase.h in hx509.h; required for heim_err_t.

Signed-off-by: Jelmer Vernooij <jelmer at samba.org>


  Commit: 91a280277985a7ed9c6fb226e1a9c2785d624232
      https://github.com/heimdal/heimdal/commit/91a280277985a7ed9c6fb226e1a9c2785d624232
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-20 (Wed, 20 Nov 2013)

  Changed paths:
    M lib/hx509/hx509.h

  Log Message:
  -----------
  Merge pull request #45 from jelmer/hx509-heimbase

Include heimbase.h in hx509.h; required for heim_err_t.


Compare: https://github.com/heimdal/heimdal/compare/fdcb8f386217...91a280277985

From noreply at github.com  Wed Nov 27 01:42:03 2013
From: noreply at github.com (GitHub)
Date: Tue, 26 Nov 2013 16:42:03 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] b20bb5: Fix never valid
	error condition in KDC
Message-ID: <52953fdbdb4c9_3114ddbd5017146c@hookshot-fe1-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: b20bb509bdf15f47c744e157fee16f03d872b7b2
      https://github.com/heimdal/heimdal/commit/b20bb509bdf15f47c744e157fee16f03d872b7b2
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-26 (Tue, 26 Nov 2013)

  Changed paths:
    M kdc/krb5tgs.c

  Log Message:
  -----------
  Fix never valid error condition in KDC

The TGS was incorrectly using authtime to compute renew_till for new
tickets, which was in turn leading to endtime potentially being equal to
starttime, which caused the TGS to return KRB5KDC_ERR_NEVER_VALID.

This happens when the TGT renewal lifetime is longer than the max renew
lifetime of any other services, after that much time (target services'
max renew life) passes.  The TGT is still good but TGS-REQs fail.




From noreply at github.com  Wed Nov 27 02:50:52 2013
From: noreply at github.com (GitHub)
Date: Tue, 26 Nov 2013 17:50:52 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] c4a060: Fix never valid
	error condition in KDC
Message-ID: <52954ffccde1_22cedd5d4c22628@hookshot-fe5-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: c4a060c3c7bef4fb8d5e42235ff0c12ed5c51906
      https://github.com/heimdal/heimdal/commit/c4a060c3c7bef4fb8d5e42235ff0c12ed5c51906
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-26 (Tue, 26 Nov 2013)

  Changed paths:
    M kdc/krb5tgs.c

  Log Message:
  -----------
  Fix never valid error condition in KDC

The TGS was incorrectly using authtime to compute renew_till for new
tickets, which was in turn leading to endtime potentially being equal to
starttime, which caused the TGS to return KRB5KDC_ERR_NEVER_VALID.

This happens when the TGT renewal lifetime is longer than the max renew
lifetime of any other services, after that much time (target services'
max renew life) passes.  The TGT is still good but TGS-REQs fail.




From noreply at github.com  Wed Nov 27 02:51:14 2013
From: noreply at github.com (GitHub)
Date: Tue, 26 Nov 2013 17:51:14 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 2acf60: Fix never valid
	error condition in KDC
Message-ID: <5295501293010_2511385d5047545@hookshot-fe1-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/heimdal-1-5-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 2acf60e58f4450380eeacfdfa6d3f7341e4394b0
      https://github.com/heimdal/heimdal/commit/2acf60e58f4450380eeacfdfa6d3f7341e4394b0
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2013-11-26 (Tue, 26 Nov 2013)

  Changed paths:
    M kdc/krb5tgs.c

  Log Message:
  -----------
  Fix never valid error condition in KDC

The TGS was incorrectly using authtime to compute renew_till for new
tickets, which was in turn leading to endtime potentially being equal to
starttime, which caused the TGS to return KRB5KDC_ERR_NEVER_VALID.

This happens when the TGT renewal lifetime is longer than the max renew
lifetime of any other services, after that much time (target services'
max renew life) passes.  The TGT is still good but TGS-REQs fail.




From noreply at github.com  Thu Nov 28 23:33:05 2013
From: noreply at github.com (GitHub)
Date: Thu, 28 Nov 2013 14:33:05 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 418fdb: Also validate
	kdigest hacks
Message-ID: <5297c4a142719_75e9ccbd4810454c@hookshot-fe5-pe1-prd.aws.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 418fdb7f7992ff8da80e23066e606362dba90e6f
      https://github.com/heimdal/heimdal/commit/418fdb7f7992ff8da80e23066e606362dba90e6f
  Author: Fredrik Pettai <pettai at nordu.net>
  Date:   2013-11-28 (Thu, 28 Nov 2013)

  Changed paths:
    M lib/krb5/verify_krb5_conf.c

  Log Message:
  -----------
  Also validate kdigest hacks

Add validation of the kdigest configuration parameters


  Commit: 6b2ebfcf8a8a442c85a0ebdda0f65d1cc87ca3a3
      https://github.com/heimdal/heimdal/commit/6b2ebfcf8a8a442c85a0ebdda0f65d1cc87ca3a3
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2013-11-28 (Thu, 28 Nov 2013)

  Changed paths:
    M lib/krb5/verify_krb5_conf.c

  Log Message:
  -----------
  Merge pull request #48 from pettai/master

Allow validation of kdigest stuff


Compare: https://github.com/heimdal/heimdal/compare/b20bb509bdf1...6b2ebfcf8a8a