From noreply at github.com  Thu May  1 06:33:14 2014
From: noreply at github.com (GitHub)
Date: Wed, 30 Apr 2014 21:33:14 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 142a3c: test_fx: enable
	weak crypto
Message-ID: <5361ce8a15535_727134dd38116482@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 142a3cee1e294cb01c0f39a731312ca24792fcee
      https://github.com/heimdal/heimdal/commit/142a3cee1e294cb01c0f39a731312ca24792fcee
  Author: Ken Dreyer <ktdreyer at ktdreyer.com>
  Date:   2014-04-29 (Tue, 29 Apr 2014)

  Changed paths:
    M lib/krb5/test_fx.c

  Log Message:
  -----------
  test_fx: enable weak crypto

Now that test_fx checks 1DES keys, we need to call allow_weak_crypto on
the test's context.

Without this fix, "make check" was failing with the following error:

  lt-test_fx: krb5_crypto_init: Encryption type des-cbc-crc not
  supported


  Commit: 8a91925242de691cd3740f0f9d801cd995c6eefb
      https://github.com/heimdal/heimdal/commit/8a91925242de691cd3740f0f9d801cd995c6eefb
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2014-04-30 (Wed, 30 Apr 2014)

  Changed paths:
    M lib/krb5/test_fx.c

  Log Message:
  -----------
  Merge pull request #91 from ktdreyer/test-fx-weak-crypto

test_fx: enable weak crypto


Compare: https://github.com/heimdal/heimdal/compare/5907fd34d85d...8a91925242de

From noreply at github.com  Thu May  1 07:07:07 2014
From: noreply at github.com (GitHub)
Date: Wed, 30 Apr 2014 22:07:07 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] aafd2a: test_fx: enable
	weak crypto
Message-ID: <5361d67be6a5d_937861d34663c6@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: aafd2a039c4ed61cc05615de988752beba363898
      https://github.com/heimdal/heimdal/commit/aafd2a039c4ed61cc05615de988752beba363898
  Author: Ken Dreyer <ktdreyer at ktdreyer.com>
  Date:   2014-04-30 (Wed, 30 Apr 2014)

  Changed paths:
    M lib/krb5/test_fx.c

  Log Message:
  -----------
  test_fx: enable weak crypto

Now that test_fx checks 1DES keys, we need to call allow_weak_crypto on
the test's context.

Without this fix, "make check" was failing with the following error:

  lt-test_fx: krb5_crypto_init: Encryption type des-cbc-crc not
  supported

(cherry picked from commit 142a3cee1e294cb01c0f39a731312ca24792fcee)


  Commit: 005f69c0cbe3538cbdb2f8808114b48995e0ca32
      https://github.com/heimdal/heimdal/commit/005f69c0cbe3538cbdb2f8808114b48995e0ca32
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2014-04-30 (Wed, 30 Apr 2014)

  Changed paths:
    M lib/krb5/test_fx.c

  Log Message:
  -----------
  Merge pull request #92 from ktdreyer/test-fx-weak-crypto-1-6-branch

1.6 cherry-pick: test_fx: enable weak crypto


Compare: https://github.com/heimdal/heimdal/compare/d60ba47157db...005f69c0cbe3

From noreply at github.com  Mon May  5 07:01:16 2014
From: noreply at github.com (GitHub)
Date: Sun, 04 May 2014 22:01:16 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 816e8f: Use thread-safe
	errno on Solaris
Message-ID: <53671b1c78ee4_9d11161d44734cc@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 816e8fcfa9b21ffde3e4c8e2e871e0eb4fc4a012
      https://github.com/heimdal/heimdal/commit/816e8fcfa9b21ffde3e4c8e2e871e0eb4fc4a012
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2014-05-05 (Mon, 05 May 2014)

  Changed paths:
    M cf/pthreads.m4

  Log Message:
  -----------
  Use thread-safe errno on Solaris



From noreply at github.com  Sat May 10 15:30:05 2014
From: noreply at github.com (GitHub)
Date: Sat, 10 May 2014 06:30:05 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 88447a: Update
 .gitignore to ignore all test binaries and ...
Message-ID: <536e29dde1e2f_12e89dbd40257aa@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 88447a543a11e29ad549dc492c4a838a5f72561f
      https://github.com/heimdal/heimdal/commit/88447a543a11e29ad549dc492c4a838a5f72561f
  Author: Jelmer Vernoo? <jelmer at samba.org>
  Date:   2014-05-10 (Sat, 10 May 2014)

  Changed paths:
    M .gitignore

  Log Message:
  -----------
  Update .gitignore to ignore all test binaries and output.


  Commit: f5b10e53a0a60128bea8d842d1967e867c9280ed
      https://github.com/heimdal/heimdal/commit/f5b10e53a0a60128bea8d842d1967e867c9280ed
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2014-05-10 (Sat, 10 May 2014)

  Changed paths:
    M .gitignore

  Log Message:
  -----------
  Merge pull request #94 from jelmer/ignore-test-output

Update .gitignore to ignore all test binaries and output.


Compare: https://github.com/heimdal/heimdal/compare/816e8fcfa9b2...f5b10e53a0a6

From noreply at github.com  Thu May 15 03:53:01 2014
From: noreply at github.com (GitHub)
Date: Wed, 14 May 2014 18:53:01 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 69c287: kinit:
	get_switched_ccache
Message-ID: <53741dfd4db_24fe1065d3c5318@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 69c2872dbd8e0ee53a47f13f5218ab069bf0187a
      https://github.com/heimdal/heimdal/commit/69c2872dbd8e0ee53a47f13f5218ab069bf0187a
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2014-05-14 (Wed, 14 May 2014)

  Changed paths:
    M kuser/kinit.c

  Log Message:
  -----------
  kinit: get_switched_ccache

Provide a new internal function called get_switched() to encapsulate
the algorithm for selecting a credential cache when the selected
ccache type supports switching.  There is no change in behavior for
UNIX which always calls krb5_cc_new_unique().  However, on Windows
alternate behavior is provided when the ccache type is API or MSLSA.

For the API ccache the default ccache name is stored in the Windows
registry which is shared across all logon sessions belonging to a
user.  For users that are members of the Administrators group this
includes both the UAC restricted and elevated sessions sharing the
same desktop.  It is very disconcerting when the elevated session obtains
credentials for the same client principal as the restricted session
and then all apps in the restricted session lose access to their
credential cache.   For Windows, the API credential caches are named
after the principal that is stored within them.  It provides for a
better end user experience.

For the MSLSA ccache tickets belonging to multiple principals are
all stored within the MSLSA ccache.  As a result, all attempts to
switch ccache names default back to the one and only one name.

Change-Id: I7865cd044cff01ff38ab107ec0961e42788fa073



From noreply at github.com  Thu May 15 03:53:59 2014
From: noreply at github.com (GitHub)
Date: Wed, 14 May 2014 18:53:59 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 4369a4: kinit:
	get_switched_ccache
Message-ID: <53741e37c34f7_457d1103d34100840@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 4369a4b1c72a78da912a70a55ffa06444d9fffd9
      https://github.com/heimdal/heimdal/commit/4369a4b1c72a78da912a70a55ffa06444d9fffd9
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2014-05-14 (Wed, 14 May 2014)

  Changed paths:
    M kuser/kinit.c

  Log Message:
  -----------
  kinit: get_switched_ccache

Provide a new internal function called get_switched() to encapsulate
the algorithm for selecting a credential cache when the selected
ccache type supports switching.  There is no change in behavior for
UNIX which always calls krb5_cc_new_unique().  However, on Windows
alternate behavior is provided when the ccache type is API or MSLSA.

For the API ccache the default ccache name is stored in the Windows
registry which is shared across all logon sessions belonging to a
user.  For users that are members of the Administrators group this
includes both the UAC restricted and elevated sessions sharing the
same desktop.  It is very disconcerting when the elevated session obtains
credentials for the same client principal as the restricted session
and then all apps in the restricted session lose access to their
credential cache.   For Windows, the API credential caches are named
after the principal that is stored within them.  It provides for a
better end user experience.

For the MSLSA ccache tickets belonging to multiple principals are
all stored within the MSLSA ccache.  As a result, all attempts to
switch ccache names default back to the one and only one name.

Change-Id: I7865cd044cff01ff38ab107ec0961e42788fa073
(cherry picked from commit 69c2872dbd8e0ee53a47f13f5218ab069bf0187a)



From noreply at github.com  Thu May 15 03:58:27 2014
From: noreply at github.com (GitHub)
Date: Wed, 14 May 2014 18:58:27 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 732bfd: roken: Windows
	ELOOP definition
Message-ID: <53741f4347234_2dbaa69d3420284@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 732bfd11bede7863d92925a8b312e4b56883d768
      https://github.com/heimdal/heimdal/commit/732bfd11bede7863d92925a8b312e4b56883d768
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2014-05-14 (Wed, 14 May 2014)

  Changed paths:
    M lib/roken/roken.h.in

  Log Message:
  -----------
  roken: Windows ELOOP definition

Microsoft VC 2010 defines ELOOP as 114

Change-Id: Iba6cfd83e4a9ea1d43ed8aff7893d557648fc7e5



From noreply at github.com  Thu May 15 03:59:12 2014
From: noreply at github.com (GitHub)
Date: Wed, 14 May 2014 18:59:12 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 229d8c: roken: Windows
	ELOOP definition
Message-ID: <53741f704e854_24b8ab9d345348a@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 229d8c76a29a7a292e71406485feb0b7a7451d2a
      https://github.com/heimdal/heimdal/commit/229d8c76a29a7a292e71406485feb0b7a7451d2a
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2014-05-14 (Wed, 14 May 2014)

  Changed paths:
    M lib/roken/roken.h.in

  Log Message:
  -----------
  roken: Windows ELOOP definition

Microsoft VC 2010 defines ELOOP as 114

Change-Id: Iba6cfd83e4a9ea1d43ed8aff7893d557648fc7e5
(cherry picked from commit 732bfd11bede7863d92925a8b312e4b56883d768)



From noreply at github.com  Wed May 28 23:40:25 2014
From: noreply at github.com (GitHub)
Date: Wed, 28 May 2014 14:40:25 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 9dd7e2: klist: fix
	spelling in comments
Message-ID: <538657c961939_45611f3d341000ad@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 9dd7e27bf7843d0eab762a35890fad6c4a08045f
      https://github.com/heimdal/heimdal/commit/9dd7e27bf7843d0eab762a35890fad6c4a08045f
  Author: Ken Dreyer <ktdreyer at ktdreyer.com>
  Date:   2014-05-28 (Wed, 28 May 2014)

  Changed paths:
    M kuser/klist.c

  Log Message:
  -----------
  klist: fix spelling in comments


  Commit: 684ff198b785587ed9e089b54a5f111554973673
      https://github.com/heimdal/heimdal/commit/684ff198b785587ed9e089b54a5f111554973673
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2014-05-28 (Wed, 28 May 2014)

  Changed paths:
    M kuser/klist.c

  Log Message:
  -----------
  Merge pull request #99 from ktdreyer/klist-spelling-comments

klist: fix spelling in comments


Compare: https://github.com/heimdal/heimdal/compare/732bfd11bede...684ff198b785

From noreply at github.com  Wed May 28 23:41:57 2014
From: noreply at github.com (GitHub)
Date: Wed, 28 May 2014 14:41:57 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 5627ae: Revert "Update
 krb5-config to include sqlite3 lib"
Message-ID: <538658251a2b3_2e229bfd341024ed@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/heimdal-1-6-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 5627ae5bc051f73ca111f9e6a47fbb56a3f5efac
      https://github.com/heimdal/heimdal/commit/5627ae5bc051f73ca111f9e6a47fbb56a3f5efac
  Author: Ken Dreyer <ktdreyer at ktdreyer.com>
  Date:   2014-05-26 (Mon, 26 May 2014)

  Changed paths:
    M tools/krb5-config.in

  Log Message:
  -----------
  Revert "Update krb5-config to include sqlite3 lib"

This reverts commit 7e6b558d2a261228806c0998f3be83985bb1bf3e.

It is better to avoid exposing internal libraries to external
applications. Additionally, the value was not being interpolated into
krb5-config.


  Commit: ddde77b0c7cf3ff0b21f273a9d772e4fca698417
      https://github.com/heimdal/heimdal/commit/ddde77b0c7cf3ff0b21f273a9d772e4fca698417
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2014-05-28 (Wed, 28 May 2014)

  Changed paths:
    M tools/krb5-config.in

  Log Message:
  -----------
  Merge pull request #98 from ktdreyer/revert-sqlite-krb5-config

Revert "Update krb5-config to include sqlite3 lib"


Compare: https://github.com/heimdal/heimdal/compare/229d8c76a29a...ddde77b0c7cf