[Heimdal-source-changes] [heimdal/heimdal] 21b44b: roken_detach_prep() close pipe

Fre Mars 17 18:07:25 CET 2017

  Branch: refs/heads/heimdal-7-1-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 21b44bf5d0f336b8bfd6f948c609fbd92279ffed
      https://github.com/heimdal/heimdal/commit/21b44bf5d0f336b8bfd6f948c609fbd92279ffed
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/roken/detach.c

  Log Message:
  -----------
  roken_detach_prep() close pipe

  Commit: ccbfeb3f2f4677833464d5c70317e5ff8a3543c5
      https://github.com/heimdal/heimdal/commit/ccbfeb3f2f4677833464d5c70317e5ff8a3543c5
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M NEWS

  Log Message:
  -----------
  Update NEWS

  Commit: b20a8526ad5ea409587e9741df7e687c8f37d897
      https://github.com/heimdal/heimdal/commit/b20a8526ad5ea409587e9741df7e687c8f37d897
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/kadm5/ipropd_slave.c
    M tests/kdc/check-iprop.in

  Log Message:
  -----------
  Fix check-iprop races

  Commit: f545770a903f739829945cf1ad0aae827e92a65a
      https://github.com/heimdal/heimdal/commit/f545770a903f739829945cf1ad0aae827e92a65a
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/libedit/src/readline/readline.h

  Log Message:
  -----------
  No sys/ttydefaults.h on CYGWIN

Issue: #236
Reported by: Allan Dynes <vseven at yahoo.com>

  Commit: 141be7e580304bf440fe5c76f7803137d27c701a
      https://github.com/heimdal/heimdal/commit/141be7e580304bf440fe5c76f7803137d27c701a
  Author: Thorsten Glaser <tg at mirbsd.de>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/hcrypto/libtommath/tommath.h

  Log Message:
  -----------
  Do not detect x32 as 64-bit platform.

Fixes test failures due to ISO C Undefined Behaviour in MP_MASK macro.

  Commit: ae3840b278275030ddb0d94244ee1e77a3fce9bc
      https://github.com/heimdal/heimdal/commit/ae3840b278275030ddb0d94244ee1e77a3fce9bc
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M kdc/kx509.c

  Log Message:
  -----------
  kdc: _kdc_do_kx509 fix use after free error

In _kdc_do_kx509() do not free 'principal' until after its last
use.  Move declaration to top of function and free it during the
common exit processing.

Introduced by 10a5976e450ac591d32cfa57f7e2d14621eabaa7.

Change-Id: Iaf000eb090b0fa523f04a4864c6b17058d922995

  Commit: d78afc60eb1773797fe89cdf7980b777f7693c2e
      https://github.com/heimdal/heimdal/commit/d78afc60eb1773797fe89cdf7980b777f7693c2e
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/roken/roken.h.in

  Log Message:
  -----------
  roken: pidfile -> rk_pidfile

Commit 7dc4481ed2a075911ede2d058152c0a356133a83 which changed from
pidfile -> rk_pidfile was incomplete.  Must handle the NO_PIDFILE case.

Change-Id: Ifc0b135e1fa7abdf4e370ad4b8fe2eb1305760f5

  Commit: 242829a2f6c63a52772c2160e1bbd7ab81c0e286
      https://github.com/heimdal/heimdal/commit/242829a2f6c63a52772c2160e1bbd7ab81c0e286
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M tests/kdc/check-iprop.in

  Log Message:
  -----------
  check-iprop: don't fail to kill daemons

  Commit: 68687ecf6eff2e66d878a4b0d76eebc2a67a7e23
      https://github.com/heimdal/heimdal/commit/68687ecf6eff2e66d878a4b0d76eebc2a67a7e23
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M cf/db.m4

  Log Message:
  -----------
  Allow choice of sqlite for HDB pref

  Commit: b3e79b34dd88230432474974e5f82c0ee06b29e9
      https://github.com/heimdal/heimdal/commit/b3e79b34dd88230432474974e5f82c0ee06b29e9
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/kadm5/ipropd_slave.c

  Log Message:
  -----------
  ipropd-slave: incorrect errors

  Commit: 49a31aee76ac25cd7e9b51629091de64ce95776f
      https://github.com/heimdal/heimdal/commit/49a31aee76ac25cd7e9b51629091de64ce95776f
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/kadm5/ipropd_slave.c

  Log Message:
  -----------
  iprop: handle case where master sends nothing new

  Commit: b278557a3595dfab0737c9edf2c2fa1b37dae597
      https://github.com/heimdal/heimdal/commit/b278557a3595dfab0737c9edf2c2fa1b37dae597
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M kdc/kx509.c
    M lib/krb5/principal.c

  Log Message:
  -----------
  kdc: fix kx509 service principal match

Each KDC is a kx509 server.  The service principal must be of the
form

  kca_service/<localhost.domain>@<DEFAULT_REALM>

where localhost.domain is the hostname returned by gethostname()
and <DEFAULT_REALM> is one of the realms for which the KDC has a service
principal "kca_service/<localhost.domain>".

The matching code was broken by a5e77c578e2719d3e7e2e1d8c8ec117ac925fc62
when krb5_sname_to_principal() began to always return a referral
principal.

Since the second component is a host name update the default principal
type for service "kca_service" to be KRB5_NT_SRV_HST.

Change-Id: I6bd5f90b674ebb7220d8efafa6d339fdc21e1a07

  Commit: 0c2d7ccddf2df2193d790b12485178cc53437911
      https://github.com/heimdal/heimdal/commit/0c2d7ccddf2df2193d790b12485178cc53437911
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M windows/NTMakefile.config

  Log Message:
  -----------
  Windows: include KX509 support

Change-Id: I6e7920d1ad2c58640c9a2d4ec10793024ae949c2

  Commit: 475b92fa1002a5f46ad70eafeb1a826d8023e6ba
      https://github.com/heimdal/heimdal/commit/475b92fa1002a5f46ad70eafeb1a826d8023e6ba
  Author: Roland C. Dowdeswell <roland.dowdeswell at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/hdb/keys.c
    M lib/hdb/test_hdbkeys.c
    M lib/hdb/version-script.map
    M lib/kadm5/set_keys.c

  Log Message:
  -----------
  Fix signature of hdb_generate_key_set_password()

The change to the signature of hdb_generate_key_set_password() in
Heimdal 7.1 broke API/ABI compatibility with previous releases.  We
fix this by renaming it hdb_generate_key_set_password_with_ks_tuple()
and creating a new hdb_generate_key_set_password() which calls our
new function with zeroes for the added arguments.

Issue #246      https://github.com/heimdal/heimdal/issues/246

  Commit: fa977cf0bf9f6d77a572b3d48dcb3028a5a94562
      https://github.com/heimdal/heimdal/commit/fa977cf0bf9f6d77a572b3d48dcb3028a5a94562
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/hdb/libhdb-exports.def

  Log Message:
  -----------
  hdb: export hdb_generate_key_set_password_with_ks_tuple

Must export hdb_generate_key_set_password_with_ks_tuple() on Windows
which was introduced in 4303174a495a86377a059d7f7a9c873840842123.

Change-Id: Iea2993a17aba44c7cb0360716138c26239254e05

  Commit: fa4300c6b24ae303d87a4a399b51ac1756b22a6f
      https://github.com/heimdal/heimdal/commit/fa4300c6b24ae303d87a4a399b51ac1756b22a6f
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M windows/NTMakefile.w32

  Log Message:
  -----------
  Windows: update SHA2 timestamp server

The RFC 3161 Service SHA128: https://timestamp.geotrust.com/tsa
is being decommissioned at the end of March 2017.  A new SHA256 service:
http://sha256timestamp.ws.symantec.com/sha256/timestamp
takes its place.

Change-Id: Iaf3de7ce7ccdd5c2589e80a7e4accccb307228d3

  Commit: 530471074dabd6837e8f003172dd43e7d36f85bd
      https://github.com/heimdal/heimdal/commit/530471074dabd6837e8f003172dd43e7d36f85bd
  Author: David Mulder <David.Mulder at software.dell.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M lib/ipc/common.c

  Log Message:
  -----------
  On hpux, pthread_cond_t is undefined when pthread is disabled

  Commit: bc4b7a3290f56509302bfdb9fe7bf39fc33f75cc
      https://github.com/heimdal/heimdal/commit/bc4b7a3290f56509302bfdb9fe7bf39fc33f75cc
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M tests/kdc/check-iprop.in

  Log Message:
  -----------
  Skip mdb_stat test when the command is not available

  Commit: 0f05029943fd47038c33274dc1b173647b3eef07
      https://github.com/heimdal/heimdal/commit/0f05029943fd47038c33274dc1b173647b3eef07
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M configure.ac
    M tests/kdc/Makefile.am
    M tests/kdc/check-keys.in

  Log Message:
  -----------
  Don't do AFS string-to-key tests when feature is disabled

  Commit: c3bb54ef9b4a756e44b2df9a0b66dd0cb7d542ab
      https://github.com/heimdal/heimdal/commit/c3bb54ef9b4a756e44b2df9a0b66dd0cb7d542ab
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M tools/Makefile.am
    M tools/krb5-config.in

  Log Message:
  -----------
  In krb5-config resolve rpath_flag at build-time

  Commit: c9fc77d99af73777bf93afdeb7a0ab298ed20baf
      https://github.com/heimdal/heimdal/commit/c9fc77d99af73777bf93afdeb7a0ab298ed20baf
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M NEWS
    M include/bits.c
    M include/krb5-types.cross
    M lib/asn1/gen_template.c
    M lib/base/heimbase.h
    M lib/com_err/com_err.c
    M lib/com_err/com_err.h
    M lib/com_err/lex.h
    M lib/hx509/cert.c
    M lib/kadm5/ipropd_slave.c
    M lib/krb5/changepw.c
    M lib/krb5/deprecated.c
    M lib/krb5/error_string.c
    M lib/krb5/log.c
    M lib/krb5/pkinit.c
    M lib/krb5/send_to_kdc.c
    M lib/krb5/warn.c
    M lib/roken/err.hin
    M lib/roken/roken-common.h
    M lib/roken/roken.h.in
    M lib/roken/rtbl.h

  Log Message:
  -----------
  Use __attribute__ ((__name__)) form

Protect against macros named noreturn and so on.

  Commit: da563516dec432294b8fb599c3d94cebf5850d0b
      https://github.com/heimdal/heimdal/commit/da563516dec432294b8fb599c3d94cebf5850d0b
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-03-17 (Fri, 17 Mar 2017)

  Changed paths:
    M appl/afsutil/pagsh.1
    M appl/kf/kf.1
    M appl/kf/kfd.8
    M kcm/kcm.8
    M kuser/kimpersonate.8
    M lib/gssapi/mech/mech.5
    M lib/kadm5/iprop-log.8
    M lib/kadm5/iprop.8

  Log Message:
  -----------
  Misc fixes to man pages