From noreply at github.com  Tue Aug  2 22:50:16 2016
From: noreply at github.com (GitHub)
Date: Tue, 02 Aug 2016 13:50:16 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] d80801:
 --disable-afs-support doesn't really disable afs
Message-ID: <57a1078828224_60583f8a52ea12a0680a2@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: d8080162eab578337de08637faed39106efdc557
      https://github.com/heimdal/heimdal/commit/d8080162eab578337de08637faed39106efdc557
  Author: David Mulder <David.Mulder at software.dell.com>
  Date:   2016-08-02 (Tue, 02 Aug 2016)

  Changed paths:
    M configure.ac
    M kuser/Makefile.am
    M lib/Makefile.am

  Log Message:
  -----------
  --disable-afs-support doesn't really disable afs


  Commit: f0f24fdbb2a2b836c03e0ac3a6e2124ae589736b
      https://github.com/heimdal/heimdal/commit/f0f24fdbb2a2b836c03e0ac3a6e2124ae589736b
  Author: Jeffrey Altman <jaltman at auristor.com>
  Date:   2016-08-02 (Tue, 02 Aug 2016)

  Changed paths:
    M configure.ac
    M kuser/Makefile.am
    M lib/Makefile.am

  Log Message:
  -----------
  Merge pull request #188 from DavidMulder/disable_afs

--disable-afs-support doesn't really disable afs


Compare: https://github.com/heimdal/heimdal/compare/c7ed0b719d35...f0f24fdbb2a2

From noreply at github.com  Wed Aug  3 00:30:22 2016
From: noreply at github.com (GitHub)
Date: Tue, 02 Aug 2016 15:30:22 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 2bee59: The evp-w32.h
 header should not be included on all...
Message-ID: <57a11efe7c461_6afc3fd1b37e12a05082b@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 2bee5966ab901a0cd50dfb98d00a22fd3981bd58
      https://github.com/heimdal/heimdal/commit/2bee5966ab901a0cd50dfb98d00a22fd3981bd58
  Author: David Mulder <David.Mulder at software.dell.com>
  Date:   2016-08-02 (Tue, 02 Aug 2016)

  Changed paths:
    M lib/hcrypto/evp.c
    M lib/hcrypto/test_bulk.c
    M lib/hcrypto/test_cipher.c

  Log Message:
  -----------
  The evp-w32.h header should not be included on all platforms


  Commit: f027fc834dcdcdfe5cda648e2c1bb9ea3211face
      https://github.com/heimdal/heimdal/commit/f027fc834dcdcdfe5cda648e2c1bb9ea3211face
  Author: Jeffrey Altman <jaltman at auristor.com>
  Date:   2016-08-02 (Tue, 02 Aug 2016)

  Changed paths:
    M lib/hcrypto/evp.c
    M lib/hcrypto/test_bulk.c
    M lib/hcrypto/test_cipher.c

  Log Message:
  -----------
  Merge pull request #190 from DavidMulder/windows_code_ifdefs

The evp-w32.h header should not be included on all platforms


Compare: https://github.com/heimdal/heimdal/compare/f0f24fdbb2a2...f027fc834dcd

From noreply at github.com  Fri Aug  5 01:51:34 2016
From: noreply at github.com (GitHub)
Date: Thu, 04 Aug 2016 16:51:34 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 6d1571: Fix
	--disable-afs-support disable lib/kafs
Message-ID: <57a3d50628a0_78e13fe0699552c096647@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 6d1571a3c4e4f126e6527b00e2ee7cf5b22b7b11
      https://github.com/heimdal/heimdal/commit/6d1571a3c4e4f126e6527b00e2ee7cf5b22b7b11
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-04 (Thu, 04 Aug 2016)

  Changed paths:
    M configure.ac
    M kuser/Makefile.am
    M lib/Makefile.am

  Log Message:
  -----------
  Fix --disable-afs-support disable lib/kafs



From noreply at github.com  Mon Aug  8 23:29:49 2016
From: noreply at github.com (GitHub)
Date: Mon, 08 Aug 2016 14:29:49 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 41b6c8: Fix missing .El
	in krb5.conf.5
Message-ID: <57a8f9cde267a_146f3fab81c952b87162d@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 41b6c829f7a03b493e714e71d1cf280764624d14
      https://github.com/heimdal/heimdal/commit/41b6c829f7a03b493e714e71d1cf280764624d14
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M lib/krb5/krb5.conf.5

  Log Message:
  -----------
  Fix missing .El in krb5.conf.5


  Commit: 345333c40aafca4c5f7498c1062da78a4d298ce9
      https://github.com/heimdal/heimdal/commit/345333c40aafca4c5f7498c1062da78a4d298ce9
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M kuser/kimpersonate.8

  Log Message:
  -----------
  Document kimpersonate --ccache option


  Commit: ab61e1d395e00fd8107ec52c28cdc2e000e27147
      https://github.com/heimdal/heimdal/commit/ab61e1d395e00fd8107ec52c28cdc2e000e27147
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M kuser/kimpersonate.8
    M kuser/kimpersonate.c

  Log Message:
  -----------
  Add --add and --referral options to kimpersonate


  Commit: 0561396c0ab35f25ab55eb6fcc9204124fcd8da1
      https://github.com/heimdal/heimdal/commit/0561396c0ab35f25ab55eb6fcc9204124fcd8da1
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M kuser/kimpersonate.8

  Log Message:
  -----------
  Add how-to-test example to kimpersonate.8


  Commit: 1501740952a815fbe10ab8345bb38cfb0ded9504
      https://github.com/heimdal/heimdal/commit/1501740952a815fbe10ab8345bb38cfb0ded9504
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/transited.c
    M lib/krb5/verify_krb5_conf.c
    M lib/krb5/version-script.map
    M tests/kdc/krb5.conf.in

  Log Message:
  -----------
  Fix transit path validation

Also implement KDC hierarchical transit policy checks.  The "hier_capaths"
parameter defaults to "yes" in [libdefaults] or can be set explicitly in
[realms] per-realm.


  Commit: 4b4036c9a6697f0101c60845e19664f64fdd0810
      https://github.com/heimdal/heimdal/commit/4b4036c9a6697f0101c60845e19664f64fdd0810
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-08 (Mon, 08 Aug 2016)

  Changed paths:
    M kdc/krb5tgs.c
    M tests/kdc/check-kdc.in
    M tests/kdc/krb5.conf.in

  Log Message:
  -----------
  Implement hierarchical referrals


Compare: https://github.com/heimdal/heimdal/compare/6d1571a3c4e4...4b4036c9a669

From noreply at github.com  Wed Aug 10 02:57:56 2016
From: noreply at github.com (GitHub)
Date: Tue, 09 Aug 2016 17:57:56 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 99dfbd: Add missing
 error check in krb5_check_transited
Message-ID: <57aa7c144546c_d6e3ff99c2812b81170a7@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 99dfbda161d97e00a0f70b50c8742ac04c1432ae
      https://github.com/heimdal/heimdal/commit/99dfbda161d97e00a0f70b50c8742ac04c1432ae
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-09 (Tue, 09 Aug 2016)

  Changed paths:
    M lib/krb5/transited.c

  Log Message:
  -----------
  Add missing error check in krb5_check_transited

Reported by David Mulder, PR 195.


  Commit: fc4e52174c3192221f41618270730a5c455025c2
      https://github.com/heimdal/heimdal/commit/fc4e52174c3192221f41618270730a5c455025c2
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-09 (Tue, 09 Aug 2016)

  Changed paths:
    M lib/krb5/transited.c

  Log Message:
  -----------
  Silence possible compiler warning

Reported by David Mulder, PR 195.


Compare: https://github.com/heimdal/heimdal/compare/4b4036c9a669...fc4e52174c31

From noreply at github.com  Wed Aug 10 03:06:55 2016
From: noreply at github.com (GitHub)
Date: Tue, 09 Aug 2016 18:06:55 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] b39a4f: Update
	old_version after timeout
Message-ID: <57aa7e2f89d8f_41563f9a0483b2a011401c@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: b39a4f7c780faa6fa16e939315482c2e3661c309
      https://github.com/heimdal/heimdal/commit/b39a4f7c780faa6fa16e939315482c2e3661c309
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-09 (Tue, 09 Aug 2016)

  Changed paths:
    M lib/kadm5/ipropd_master.c

  Log Message:
  -----------
  Update old_version after timeout

On a low update rate master, if we don't update old_version after
processing a poll timeout, we will generate spurious warnings about
missed (change) signals every time the timer expires, and will
needlessly contact the slaves.



From noreply at github.com  Wed Aug 10 07:22:04 2016
From: noreply at github.com (GitHub)
Date: Tue, 09 Aug 2016 22:22:04 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 4f0a8e: Properly define
	the NO_AFS AM_CONDITIONAL
Message-ID: <57aab9fc819fc_2ed53fd99dd092b813119d@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 4f0a8e7d13655c64e3d3ae8261d0b056d284e503
      https://github.com/heimdal/heimdal/commit/4f0a8e7d13655c64e3d3ae8261d0b056d284e503
  Author: David Mulder <David.Mulder at software.dell.com>
  Date:   2016-08-09 (Tue, 09 Aug 2016)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  Properly define the NO_AFS AM_CONDITIONAL


  Commit: 3e6fb5bb41257d96184ede68a16fb202180e7cf5
      https://github.com/heimdal/heimdal/commit/3e6fb5bb41257d96184ede68a16fb202180e7cf5
  Author: Jeffrey Altman <jaltman at auristor.com>
  Date:   2016-08-10 (Wed, 10 Aug 2016)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  Merge pull request #196 from DavidMulder/disable_afs_fix

Properly define the NO_AFS AM_CONDITIONAL


Compare: https://github.com/heimdal/heimdal/compare/b39a4f7c780f...3e6fb5bb4125

From noreply at github.com  Thu Aug 11 02:51:19 2016
From: noreply at github.com (GitHub)
Date: Wed, 10 Aug 2016 17:51:19 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 76c596: Complete support
	for --disable-afs-support
Message-ID: <57abcc07475ec_63d83fe7342d92bc38238@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 76c596ceb824fc1591c063c184d9562fc1a14676
      https://github.com/heimdal/heimdal/commit/76c596ceb824fc1591c063c184d9562fc1a14676
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-10 (Wed, 10 Aug 2016)

  Changed paths:
    M appl/Makefile.am
    M appl/ftp/ftpd/ftpcmd.y
    M appl/ftp/ftpd/ftpd.c
    M appl/ftp/ftpd/ftpd_locl.h
    M appl/ftp/ftpd/gss_userok.c
    M appl/ftp/ftpd/kauth.c
    M appl/ftp/ftpd/ls.c
    M appl/login/login.c
    M appl/login/login_locl.h
    M appl/su/su.c
    M cf/Makefile.am.common
    M lib/kafs/kafs_locl.h

  Log Message:
  -----------
  Complete support for --disable-afs-support



From noreply at github.com  Thu Aug 11 03:10:56 2016
From: noreply at github.com (GitHub)
Date: Wed, 10 Aug 2016 18:10:56 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 09c4e5: Further polish
 and docs for hierarchical capaths
Message-ID: <57abd0a04a1ac_4bcc3f8a6b05d2c0131199@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 09c4e516bf44364566cc41c36773a09d1006a71d
      https://github.com/heimdal/heimdal/commit/09c4e516bf44364566cc41c36773a09d1006a71d
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-08-10 (Wed, 10 Aug 2016)

  Changed paths:
    M kdc/krb5tgs.c
    M lib/krb5/krb5.conf.5
    M lib/krb5/transited.c
    M lib/krb5/verify_krb5_conf.c

  Log Message:
  -----------
  Further polish and docs for hierarchical capaths



From noreply at github.com  Thu Aug 11 18:26:58 2016
From: noreply at github.com (GitHub)
Date: Thu, 11 Aug 2016 09:26:58 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 01c2d5: Add
	lib/sqlite/README
Message-ID: <57aca7523cb27_21ed3fe35572b2bc32362@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 01c2d5b801f2b4f8bf092d3f2ebe3112dffd9a62
      https://github.com/heimdal/heimdal/commit/01c2d5b801f2b4f8bf092d3f2ebe3112dffd9a62
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-11 (Thu, 11 Aug 2016)

  Changed paths:
    A lib/sqlite/README

  Log Message:
  -----------
  Add lib/sqlite/README



From noreply at github.com  Thu Aug 11 21:55:45 2016
From: noreply at github.com (GitHub)
Date: Thu, 11 Aug 2016 12:55:45 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 44dec5: Update to
	SQLite3 3.14
Message-ID: <57acd841dd82c_6a963fb6361412bc15365@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 44dec510fdae6315661a08b013b9d07eb3cf6fa8
      https://github.com/heimdal/heimdal/commit/44dec510fdae6315661a08b013b9d07eb3cf6fa8
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-08-11 (Thu, 11 Aug 2016)

  Changed paths:
    M cf/pthreads.m4
    M lib/sqlite/Makefile.am
    M lib/sqlite/sqlite3.c
    M lib/sqlite/sqlite3.h
    M lib/sqlite/sqlite3ext.h

  Log Message:
  -----------
  Update to SQLite3 3.14

Newer versions of SQLite3 have a number of new features that are
desirable to users who host other DBs in the same file as the HDB (for
example), as well as performance and bug fixes.

We should consider switching the SQLite3 backend for HDB to WITHOUT
ROWID tables for performance reasons.  We should also consider using
foreign keys instead of triggers.  Making any such changes requires care
to permit both, upgrade and downgrade.

We might want to use the SQLite3 session extension for a SQLite3-
specific, low-level replication (iprop).  Given conflict resultion code,
or a sufficiently normalized schema, the session extension would make it
easy to create a multi-master replication system, not unlike what one
would expect of an LDAP setup, though with none of the atomicity that
LDAP is supposed to provide (specifically, O_EXCL semantics for creates
and predicates for updates) unless we were to add a locking protocol.

Note that as of 3.14, the session extension is mutually exclusive of
WITHOUT ROWID tables.