From noreply at github.com Sat Jan 4 05:59:30 2014 From: noreply at github.com (GitHub) Date: Fri, 03 Jan 2014 20:59:30 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 4ff005: gm_mech_oid must be set Message-ID: <52c79532c00bc_1c7c12a3d4c908a3@hookshot-fe2-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: 4ff005a6a4b8ca562429dc9221735e32174bdcbf https://github.com/heimdal/heimdal/commit/4ff005a6a4b8ca562429dc9221735e32174bdcbf Author: Luke Howard Date: 2014-01-03 (Fri, 03 Jan 2014) Changed paths: M lib/gssapi/mech/gss_mech_switch.c Log Message: ----------- gm_mech_oid must be set mechanism credentials created by dynamically loaded mechanisms do not work because the gm_mech_oid field is unset for such mechanisms (instead, only gm_mech.gm_mech_oid is). From noreply at github.com Sat Jan 4 06:31:14 2014 From: noreply at github.com (GitHub) Date: Fri, 03 Jan 2014 21:31:14 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 788d39: set m->gm_mech.gm_name Message-ID: <52c79ca238d75_b71535d54861fa@hookshot-fe5-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: 788d39b3ce871962b87971f72f0f628a09f6cc59 https://github.com/heimdal/heimdal/commit/788d39b3ce871962b87971f72f0f628a09f6cc59 Author: Luke Howard Date: 2014-01-03 (Fri, 03 Jan 2014) Changed paths: M lib/gssapi/mech/gss_mech_switch.c Log Message: ----------- set m->gm_mech.gm_name From noreply at github.com Thu Jan 9 03:47:48 2014 From: noreply at github.com (GitHub) Date: Wed, 08 Jan 2014 18:47:48 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] bb895b: Fix k5login_authoritative Message-ID: <52ce0dd444b42_1ebad1fd5874878@hookshot-fe3-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: bb895bdd90b2dfe42c9c78724f1600d554d79b98 https://github.com/heimdal/heimdal/commit/bb895bdd90b2dfe42c9c78724f1600d554d79b98 Author: Viktor Dukhovni Date: 2014-01-08 (Wed, 08 Jan 2014) Changed paths: M lib/krb5/kuserok.c Log Message: ----------- Fix k5login_authoritative In the previous implementation when .k5login or .k5login.d existed and k5login_authoritative was false, no further plugins were tried. Also when k5login_authoritative was true and .k5login did not match, the directory was never tried. From noreply at github.com Sun Jan 19 08:58:48 2014 From: noreply at github.com (GitHub) Date: Sat, 18 Jan 2014 23:58:48 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 95bc8a: Fix handling of SIGINT/SIGTERM in kcm. Message-ID: <52db85b8b460d_41dd7afd5098425@hookshot-fe2-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: 95bc8aca4aae7f596b84566f73101b0531a2c730 https://github.com/heimdal/heimdal/commit/95bc8aca4aae7f596b84566f73101b0531a2c730 Author: Jelmer Vernooij Date: 2014-01-18 (Sat, 18 Jan 2014) Changed paths: M kcm/main.c Log Message: ----------- Fix handling of SIGINT/SIGTERM in kcm. Debian-Bug: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654349 Commit: cf6f9cc613d87dc30e364eb46703ec135cb08b63 https://github.com/heimdal/heimdal/commit/cf6f9cc613d87dc30e364eb46703ec135cb08b63 Author: Nico Williams Date: 2014-01-18 (Sat, 18 Jan 2014) Changed paths: M kcm/main.c Log Message: ----------- Merge pull request #56 from jelmer/kcm-fix-sigterm Fix handling of SIGINT/SIGTERM in kcm. Compare: https://github.com/heimdal/heimdal/compare/bb895bdd90b2...cf6f9cc613d8 From noreply at github.com Mon Jan 20 01:41:29 2014 From: noreply at github.com (GitHub) Date: Sun, 19 Jan 2014 16:41:29 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 4028bc: Update .gitignore with generated files. Message-ID: <52dc70b9f4d3_6763e6dd5422040@hookshot-fe5-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: 4028bc3b708c8eab4d5ba89992151dd5b38fa28f https://github.com/heimdal/heimdal/commit/4028bc3b708c8eab4d5ba89992151dd5b38fa28f Author: Jelmer Vernooij Date: 2014-01-19 (Sun, 19 Jan 2014) Changed paths: M .gitignore Log Message: ----------- Update .gitignore with generated files. Commit: 1c698d298c4796d90691024da93e984e5f72e398 https://github.com/heimdal/heimdal/commit/1c698d298c4796d90691024da93e984e5f72e398 Author: Love Hörnquist Åstrand Date: 2014-01-19 (Sun, 19 Jan 2014) Changed paths: M .gitignore Log Message: ----------- Merge pull request #57 from jelmer/gitignore-update Update .gitignore with generated files. Compare: https://github.com/heimdal/heimdal/compare/cf6f9cc613d8...1c698d298c47 From noreply at github.com Fri Jan 31 08:33:55 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:33:55 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] f76e8d: roken-h-process: use Getopt::Std, getopts.pl is de... Message-ID: <52eb51e359c03_17d8df9d3c880fa@hookshot-fe8-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: f76e8d57108052d75aacd12775f5aae5ca95eff3 https://github.com/heimdal/heimdal/commit/f76e8d57108052d75aacd12775f5aae5ca95eff3 Author: Gustavo Zacarias Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M cf/roken-h-process.pl Log Message: ----------- roken-h-process: use Getopt::Std, getopts.pl is deprecated Signed-off-by: Gustavo Zacarias Signed-off-by: Love Hörnquist Åstrand From noreply at github.com Fri Jan 31 08:36:31 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:36:31 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 343f4d: NetBSD build fixes Message-ID: <52eb527fdd84b_6c09703d347044@hookshot-fe7-pe1-prd.aws.github.net.mail> Branch: refs/heads/heimdal-1-5-branch Home: https://github.com/heimdal/heimdal Commit: 343f4d8176ea72292c71c89933aba4cb6492e5c6 https://github.com/heimdal/heimdal/commit/343f4d8176ea72292c71c89933aba4cb6492e5c6 Author: Fredrik Pettai Date: 2014-01-23 (Thu, 23 Jan 2014) Changed paths: M lib/krb5/deprecated.c M lib/krb5/get_in_tkt.c Log Message: ----------- NetBSD build fixes Buildfixes from master that are required for building heimdal-1-5-branch on NetBSD. Commit: f60029cbf68b510a3d14d706a9afc4bb534b9f70 https://github.com/heimdal/heimdal/commit/f60029cbf68b510a3d14d706a9afc4bb534b9f70 Author: Love Hörnquist Åstrand Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/deprecated.c M lib/krb5/get_in_tkt.c Log Message: ----------- Merge pull request #58 from pettai/heimdal-1-5-branch NetBSD build fixes Compare: https://github.com/heimdal/heimdal/compare/2acf60e58f44...f60029cbf68b From noreply at github.com Fri Jan 31 08:38:35 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:38:35 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] b7d384: fix the kswitch(1) manual prologue Message-ID: <52eb52fb2c4a0_176d13d3d348067a@hookshot-fe8-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: b7d384392b9e4655f6da1520df48456d9dbdf939 https://github.com/heimdal/heimdal/commit/b7d384392b9e4655f6da1520df48456d9dbdf939 Author: Ingo Schwarze Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kuser/kswitch.1 Log Message: ----------- fix the kswitch(1) manual prologue Signed-off-by: Love Hörnquist Åstrand From noreply at github.com Fri Jan 31 08:45:40 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:45:40 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] d8d0e6: make sure h is set at when we find a match, from [... Message-ID: <52eb54a433969_19cea49d541026d4@hookshot-fe2-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: d8d0e659ceacdf24227f76b2ef176eda270ebbc4 https://github.com/heimdal/heimdal/commit/d8d0e659ceacdf24227f76b2ef176eda270ebbc4 Author: Love Hörnquist Åstrand Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/hdb.c Log Message: ----------- make sure h is set at when we find a match, from [GITHUB #54] From noreply at github.com Fri Jan 31 08:50:06 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:50:06 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] c1c7da: Fix compiling hdb ldap as a module Message-ID: <52eb55aebda11_660f9e3d3851027@hookshot-fe9-pe1-prd.aws.github.net.mail> Branch: refs/heads/master Home: https://github.com/heimdal/heimdal Commit: c1c7da7f79d79861a9c48af0a4d5a6734ea0da70 https://github.com/heimdal/heimdal/commit/c1c7da7f79d79861a9c48af0a4d5a6734ea0da70 Author: Jeffrey Clark Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/hdb-ldap.c Log Message: ----------- Fix compiling hdb ldap as a module Signed-off-by: Love Hörnquist Åstrand Commit: cc1faff15fd1eb7eed162e8209cfcf76f82f881b https://github.com/heimdal/heimdal/commit/cc1faff15fd1eb7eed162e8209cfcf76f82f881b Author: Jeffrey Clark Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/Makefile.am M lib/hdb/NTMakefile A lib/hdb/test_hdbplugin.c Log Message: ----------- Simple hdb plugin test Signed-off-by: Love Hörnquist Åstrand Compare: https://github.com/heimdal/heimdal/compare/d8d0e659ceac...cc1faff15fd1 From noreply at github.com Fri Jan 31 08:56:02 2014 From: noreply at github.com (GitHub) Date: Thu, 30 Jan 2014 23:56:02 -0800 Subject: [Heimdal-source-changes] [heimdal/heimdal] 673d74: kx509: Create certs for principals with slashes Message-ID: <52eb5712d8a11_f74cd7d501483f6@hookshot-fe3-pe1-prd.aws.github.net.mail> Branch: refs/heads/heimdal-1-6-branch Home: https://github.com/heimdal/heimdal Commit: 673d74f68b4097f7745f88bbd6e73bbd0b616f53 https://github.com/heimdal/heimdal/commit/673d74f68b4097f7745f88bbd6e73bbd0b616f53 Author: James Lee Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kdc/kx509.c Log Message: ----------- kx509: Create certs for principals with slashes kx509 fails to create certs for principals with slashes in them. For example: client% kinit foo/admin foo/admin at EXAMPLE.COM's Password: client% kx509 Timed out waiting on KCA The KCA reports: "Principal is not a user." However, there is a use case set out in this post: https://thestaticvoid.com/post/2012/10/25/protecting-puppet-with-kerberos/ that would create a kx509 cert for a host principal for authenticating against a secure HTTP service. This commit modifies the certificate creation code to allow principals with slashes in them. Signed-off-by: Love Ho?rnquist A?strand Commit: 6c32ce118759ff341a60eefa869d5ec1a58a7843 https://github.com/heimdal/heimdal/commit/6c32ce118759ff341a60eefa869d5ec1a58a7843 Author: Jeffrey Altman Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kdc/kx509.c Log Message: ----------- kx509: Prevent double free Patchset 750a09bca2183415be3ca3b8784e3417f484794b introduced the potential for a double free of 'name'. Change-Id: I23bd4ddb7d9b41cbb3948ab06245f4052b309971 Signed-off-by: Love Ho?rnquist A?strand Commit: fc8a7b0c9d525110c9530ada135c0a1acf5f19ce https://github.com/heimdal/heimdal/commit/fc8a7b0c9d525110c9530ada135c0a1acf5f19ce Author: Love Hörnquist Åstrand Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kadmin/kadmin.8 Log Message: ----------- add --policy documentation Signed-off-by: Love Ho?rnquist A?strand Commit: 320976641929df5f01df0356cc56b6b5b24c3e38 https://github.com/heimdal/heimdal/commit/320976641929df5f01df0356cc56b6b5b24c3e38 Author: Nicolas Williams Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kdc/kx509.c Log Message: ----------- Fix kx509 to include realm Signed-off-by: Love Ho?rnquist A?strand Commit: ca9fb79ab8249592d7a070039effee3c7629c0ee https://github.com/heimdal/heimdal/commit/ca9fb79ab8249592d7a070039effee3c7629c0ee Author: Nicolas Williams Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kdc/kx509.c Log Message: ----------- Add option to require initial kca_service tickets Default to TRUE, and allow setting it on a per-realm basis. Signed-off-by: Love Ho?rnquist A?strand Commit: 59d4e890d7fa585bd489993b2858f3cbc2a2eca0 https://github.com/heimdal/heimdal/commit/59d4e890d7fa585bd489993b2858f3cbc2a2eca0 Author: Nicolas Williams Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/krb5.conf.5 Log Message: ----------- Document kx509 parameters Signed-off-by: Love Ho?rnquist A?strand Commit: cc5c4fe2d3bda9b5c9f29a7d61f96fa98025db20 https://github.com/heimdal/heimdal/commit/cc5c4fe2d3bda9b5c9f29a7d61f96fa98025db20 Author: Jelmer Vernooij Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M tools/Makefile.am A tools/heimdal-kadm-client.pc.in A tools/heimdal-kadm-server.pc.in M tools/kadm-client.pc.in M tools/kadm-server.pc.in M tools/kafs.pc.in Log Message: ----------- Add heimdal-kadm-{client,server} with kadm-{client,server} depending on them. Signed-off-by: Love Ho?rnquist A?strand Commit: 7be45b3ce48deab8d2d7c8ea42778602e0825087 https://github.com/heimdal/heimdal/commit/7be45b3ce48deab8d2d7c8ea42778602e0825087 Author: Nicolas Williams Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/verify_krb5_conf.c Log Message: ----------- Add kx509 parameters to verify_krb5_conf.c Signed-off-by: Love Ho?rnquist A?strand Commit: bdc74512a7923fb678380d5a36bd07635b8461a2 https://github.com/heimdal/heimdal/commit/bdc74512a7923fb678380d5a36bd07635b8461a2 Author: Arran Cudbard-Bell Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/plugin.c Log Message: ----------- Issue #491: bus error in resolve_origin() resolve_origin attempts to insert '\0' into a field from a DL_info struct, causes BUS error. Signed-off-by: Nicolas Williams Signed-off-by: Love Ho?rnquist A?strand Commit: 44ce8640baec94023441f7cbf9441df433353969 https://github.com/heimdal/heimdal/commit/44ce8640baec94023441f7cbf9441df433353969 Author: Nicolas Williams Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/plugin.c Log Message: ----------- Minor WIN32/POSIX bug in resolve_origin() Signed-off-by: Love Ho?rnquist A?strand Commit: 60797fb20fcdb6f3234f52c0cbd3c5b37563c437 https://github.com/heimdal/heimdal/commit/60797fb20fcdb6f3234f52c0cbd3c5b37563c437 Author: Russ Allbery Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/kadm5/Makefile.am A lib/kadm5/version-script-client.map Log Message: ----------- Add symbol versioning for libkadm5clnt In order to support plugins for kadmin that use libkadm5srv, the libkadm5clnt library has to be versioned to avoid hijacking all of the function calls that should go to the server library. Omit the _kadm5_ clients from the public interface, and version everything else. Signed-off-by: Love Hörnquist Åstrand Signed-off-by: Love Ho?rnquist A?strand Commit: 7153d87941bcc08710f33b828e9ecd45069db521 https://github.com/heimdal/heimdal/commit/7153d87941bcc08710f33b828e9ecd45069db521 Author: Luke Howard Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/gssapi/mech/gss_mech_switch.c Log Message: ----------- gm_mech_oid must be set mechanism credentials created by dynamically loaded mechanisms do not work because the gm_mech_oid field is unset for such mechanisms (instead, only gm_mech.gm_mech_oid is). Signed-off-by: Love Ho?rnquist A?strand Commit: adf359122dd50e441d73c370bc69c6ed18b1211e https://github.com/heimdal/heimdal/commit/adf359122dd50e441d73c370bc69c6ed18b1211e Author: Luke Howard Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/gssapi/mech/gss_mech_switch.c Log Message: ----------- set m->gm_mech.gm_name Signed-off-by: Love Ho?rnquist A?strand Commit: ff6397ef30bdfb119d5b6b3774da4657f4152ac2 https://github.com/heimdal/heimdal/commit/ff6397ef30bdfb119d5b6b3774da4657f4152ac2 Author: Viktor Dukhovni Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/krb5/kuserok.c Log Message: ----------- Fix k5login_authoritative In the previous implementation when .k5login or .k5login.d existed and k5login_authoritative was false, no further plugins were tried. Also when k5login_authoritative was true and .k5login did not match, the directory was never tried. Signed-off-by: Love Ho?rnquist A?strand Commit: 44340c8272b7603df4ce7c958c4c8b2d8b788604 https://github.com/heimdal/heimdal/commit/44340c8272b7603df4ce7c958c4c8b2d8b788604 Author: Jelmer Vernooij Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kcm/main.c Log Message: ----------- Fix handling of SIGINT/SIGTERM in kcm. Debian-Bug: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654349 Signed-off-by: Love Ho?rnquist A?strand Commit: d1ec576f4b7ac99a7610e517611526f89bacb1ac https://github.com/heimdal/heimdal/commit/d1ec576f4b7ac99a7610e517611526f89bacb1ac Author: Jelmer Vernooij Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M .gitignore Log Message: ----------- Update .gitignore with generated files. Signed-off-by: Love Ho?rnquist A?strand Commit: 0514f40cb983438f7d1a113ffebb08b22da0fbb2 https://github.com/heimdal/heimdal/commit/0514f40cb983438f7d1a113ffebb08b22da0fbb2 Author: Gustavo Zacarias Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M cf/roken-h-process.pl Log Message: ----------- roken-h-process: use Getopt::Std, getopts.pl is deprecated Signed-off-by: Gustavo Zacarias Signed-off-by: Love Hörnquist Åstrand Signed-off-by: Love Ho?rnquist A?strand Commit: 7d0bfcb1325b0bd90ee43799c3e34edfdd346472 https://github.com/heimdal/heimdal/commit/7d0bfcb1325b0bd90ee43799c3e34edfdd346472 Author: Ingo Schwarze Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M kuser/kswitch.1 Log Message: ----------- fix the kswitch(1) manual prologue Signed-off-by: Love Hörnquist Åstrand Signed-off-by: Love Ho?rnquist A?strand Commit: 06d963c1a4aa2d074d4c24a1379dc32f51821b53 https://github.com/heimdal/heimdal/commit/06d963c1a4aa2d074d4c24a1379dc32f51821b53 Author: Love Hörnquist Åstrand Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/hdb.c Log Message: ----------- make sure h is set at when we find a match, from [GITHUB #54] Signed-off-by: Love Ho?rnquist A?strand Commit: e03d7af8d7e9ca7fc9dddc71f110ad1fa85f62f6 https://github.com/heimdal/heimdal/commit/e03d7af8d7e9ca7fc9dddc71f110ad1fa85f62f6 Author: Jeffrey Clark Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/hdb-ldap.c Log Message: ----------- Fix compiling hdb ldap as a module Signed-off-by: Love Hörnquist Åstrand Signed-off-by: Love Ho?rnquist A?strand Commit: 107d23b2c170421494271a7e1d44976359f500a2 https://github.com/heimdal/heimdal/commit/107d23b2c170421494271a7e1d44976359f500a2 Author: Jeffrey Clark Date: 2014-01-30 (Thu, 30 Jan 2014) Changed paths: M lib/hdb/Makefile.am M lib/hdb/NTMakefile A lib/hdb/test_hdbplugin.c Log Message: ----------- Simple hdb plugin test Signed-off-by: Love Hörnquist Åstrand Signed-off-by: Love Ho?rnquist A?strand Compare: https://github.com/heimdal/heimdal/compare/46a50886775e...107d23b2c170