From noreply at github.com  Thu Oct  5 18:05:39 2017
From: noreply at github.com (GitHub)
Date: Thu, 05 Oct 2017 09:05:39 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 6d27e0: Make builds
	reproduceable (#336)
Message-ID: <59d65853bd671_4a533fabadeedc28152048@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 6d27e0048963955b547584f004109bbbad6e9baf
      https://github.com/heimdal/heimdal/commit/6d27e0048963955b547584f004109bbbad6e9baf
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-09-29 (Fri, 29 Sep 2017)

  Changed paths:
    M Makefile.am
    R cf/krb-version.m4
    M configure.ac

  Log Message:
  -----------
  Make builds reproduceable (#336)


  Commit: b2f6ba0fff60aba5af96cdd0c7e26047e0adf396
      https://github.com/heimdal/heimdal/commit/b2f6ba0fff60aba5af96cdd0c7e26047e0adf396
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-05 (Thu, 05 Oct 2017)

  Changed paths:
    M lib/krb5/krbhst.c

  Log Message:
  -----------
  Revert "lib: Fix printing a short into portstr"

This reverts commit ccb63bb0aae60f4d2286dc0bd01656602a087308, which was
unnecessary and broke tests/kdc/check-kadmin (and other things).

host->port happens to be an unsigned short, so that promotion to an integer in
the snprintf() call is safe in that the promoted value will still be
non-negative, and no larger than an unsigned short's maximum value.  We're
still assuming that 7 bytes is sufficient to hold the text representation of
that maximum value, which indeed it is, assuming sizeof(unsigned short) == 2
and CHAR_BIT == 8, which are fair assumptions here.  A better patch, if we
needed it, would be to just make portstr[] an array of 11 char, or perhaps make
it a VLA (but we can't yet use VLAs, I don't think, because of older Windows
systems that must be supported still).


Compare: https://github.com/heimdal/heimdal/compare/e7879208e47f...b2f6ba0fff60

From noreply at github.com  Thu Oct  5 19:19:33 2017
From: noreply at github.com (GitHub)
Date: Thu, 05 Oct 2017 10:19:33 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 469366: Use date -r on
	BSD
Message-ID: <59d669a539cb5_148ec3fccff151c2c68523@hookshot-fe-6dbb0c4.cp1-iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 469366ddb8b38c57c1b443002612078d2760b946
      https://github.com/heimdal/heimdal/commit/469366ddb8b38c57c1b443002612078d2760b946
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-05 (Thu, 05 Oct 2017)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  Use date -r on BSD



From noreply at github.com  Tue Oct 10 23:00:47 2017
From: noreply at github.com (GitHub)
Date: Tue, 10 Oct 2017 14:00:47 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] e3cc7d: Set def page
 size for HDB SQLite3 backend to 8KB
Message-ID: <59dd34ffee6db_14143f838ce67c344646f@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: e3cc7dfb94826aa709a617fb8e59ab07db584f92
      https://github.com/heimdal/heimdal/commit/e3cc7dfb94826aa709a617fb8e59ab07db584f92
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-10 (Tue, 10 Oct 2017)

  Changed paths:
    M lib/hdb/hdb-sqlite.c

  Log Message:
  -----------
  Set def page size for HDB SQLite3 backend to 8KB


  Commit: 5bcbe2125b18160f6ad348b15f8036ffedc15770
      https://github.com/heimdal/heimdal/commit/5bcbe2125b18160f6ad348b15f8036ffedc15770
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-10 (Tue, 10 Oct 2017)

  Changed paths:
    M lib/hdb/db.c
    M lib/hdb/db3.c
    M lib/hdb/hdb-ldap.c
    M lib/hdb/hdb-mdb.c
    M lib/hdb/hdb-mitdb.c
    M lib/hdb/hdb-sqlite.c
    M lib/hdb/hdb.h

  Log Message:
  -----------
  Add hdb_set_sync() method


  Commit: 305dc816525f461f9bfe640d87f671f53f0e0fc6
      https://github.com/heimdal/heimdal/commit/305dc816525f461f9bfe640d87f671f53f0e0fc6
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-10 (Tue, 10 Oct 2017)

  Changed paths:
    M lib/kadm5/ipropd_slave.c

  Log Message:
  -----------
  Disable sync during iprop receive_everything()

Doing an fsync per-record when receiving the complete HDB is a performance
disaster.  Among other things, if the HDB is very large, then one slave
receving a full HDB can cause other slaves to timeout and, if HDB write
activity is high enough to cause iprop log truncation, then also need full
syncs, which leads to a cycle of full syncs for all slaves until HDB write
activity drops.

Allowing the iprop log to be larger helps, but improving receive_everything()
performance helps even more.


  Commit: 7d5f8bb051ca84592d1196bf5d5522da5a50f9d6
      https://github.com/heimdal/heimdal/commit/7d5f8bb051ca84592d1196bf5d5522da5a50f9d6
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-10 (Tue, 10 Oct 2017)

  Changed paths:
    M kadmin/load.c

  Log Message:
  -----------
  Disable sync during kadmin load


Compare: https://github.com/heimdal/heimdal/compare/469366ddb8b3...7d5f8bb051ca

From noreply at github.com  Wed Oct 11 05:23:00 2017
From: noreply at github.com (GitHub)
Date: Tue, 10 Oct 2017 20:23:00 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] bcfe53: kadmin/cpw: Add
 error code on password missmatch
Message-ID: <59dd8e94ddd8b_50693faec0031c3c5873b@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: bcfe53822803100b40700e9f754a05e26508d908
      https://github.com/heimdal/heimdal/commit/bcfe53822803100b40700e9f754a05e26508d908
  Author: Roland Hopferwieser <develop at int0x80.at>
  Date:   2017-10-10 (Tue, 10 Oct 2017)

  Changed paths:
    M kadmin/cpw.c

  Log Message:
  -----------
  kadmin/cpw: Add error code on password missmatch



From noreply at github.com  Wed Oct 11 19:51:57 2017
From: noreply at github.com (GitHub)
Date: Wed, 11 Oct 2017 10:51:57 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 641105: lib/krb5: move
 checksum vs. enctype checks into ge...
Message-ID: <59de5a3df0c4b_18e33f8d97951c441167ed@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 641105bfbdce4e25a1634a0490e9800c12d97e67
      https://github.com/heimdal/heimdal/commit/641105bfbdce4e25a1634a0490e9800c12d97e67
  Author: Stefan Metzmacher <metze at samba.org>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  lib/krb5: move checksum vs. enctype checks into get_checksum_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Jeremy Allison <jra at samba.org>
(cherry picked from Samba commit 05cc099499ef3a07d140981ef82937c842a3ffef)


  Commit: 6fa09c001ff10b53aca2144123ffcddffa52f333
      https://github.com/heimdal/heimdal/commit/6fa09c001ff10b53aca2144123ffcddffa52f333
  Author: Stefan Metzmacher <metze at samba.org>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M lib/krb5/mit_glue.c

  Log Message:
  -----------
  lib/krb5: use krb5_verify_checksum() in krb5_c_verify_checksum()

This allows the optimized checksum->verify() function to be used.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Jeremy Allison <jra at samba.org>
(cherry picked from Samba commit fb318ab0203297019c5e47c6bef4a9abfdeea8a5)


  Commit: 85b9992d9a4b913c142edcccf7140e990853676b
      https://github.com/heimdal/heimdal/commit/85b9992d9a4b913c142edcccf7140e990853676b
  Author: Volker Lendecke <vl at samba.org>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M lib/krb5/crypto-arcfour.c

  Log Message:
  -----------
  lib/krb5: Harden ARCFOUR_sub{en,de}crypt()

Signed-off-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from Samba commit c15464f886f9734982123d38594073601d49f151)


  Commit: 42fe2c2d853fc9725effa459f512e32fedc34cca
      https://github.com/heimdal/heimdal/commit/42fe2c2d853fc9725effa459f512e32fedc34cca
  Author: Volker Lendecke <vl at samba.org>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  lib/krb5: Harden _krb5_derive_key()

Signed-off-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from Samba commit afd8c389c92e38aa59a55127b2594023561b2ddd)


Compare: https://github.com/heimdal/heimdal/compare/bcfe53822803...42fe2c2d853f

From noreply at github.com  Wed Oct 11 23:46:55 2017
From: noreply at github.com (GitHub)
Date: Wed, 11 Oct 2017 14:46:55 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 496022: Fix lib/roken
	parse_* warnings
Message-ID: <59de914fd80bb_48b53f9e9a529c3410627a@hookshot-fe-6dbb0c4.cp1-iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 496022fa37177aebeba0feee171126cd6d429dcc
      https://github.com/heimdal/heimdal/commit/496022fa37177aebeba0feee171126cd6d429dcc
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M lib/roken/parse_time.h
    M lib/roken/parse_units.h

  Log Message:
  -----------
  Fix lib/roken parse_* warnings



From noreply at github.com  Thu Oct 12 00:13:08 2017
From: noreply at github.com (GitHub)
Date: Wed, 11 Oct 2017 15:13:08 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] d2130e: Handle long
	lines in dump files
Message-ID: <59de9774b5205_196b3fe6bb56fc343207a@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: d2130e3312089a3142e89b316d2900fa21855726
      https://github.com/heimdal/heimdal/commit/d2130e3312089a3142e89b316d2900fa21855726
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-10-11 (Wed, 11 Oct 2017)

  Changed paths:
    M kadmin/load.c
    M kdc/mit_dump.c

  Log Message:
  -----------
  Handle long lines in dump files



From noreply at github.com  Tue Oct 17 09:12:41 2017
From: noreply at github.com (GitHub)
Date: Tue, 17 Oct 2017 00:12:41 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] b860b7: Fix missing rk_
	prefix
Message-ID: <59e5ad695b630_134f3fe1ccba1c2c5168@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: b860b70ada85f6731743b655c7702f81a2983248
      https://github.com/heimdal/heimdal/commit/b860b70ada85f6731743b655c7702f81a2983248
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-10-17 (Tue, 17 Oct 2017)

  Changed paths:
    M lib/roken/parse_units.c

  Log Message:
  -----------
  Fix missing rk_ prefix



From noreply at github.com  Fri Oct 20 01:49:24 2017
From: noreply at github.com (GitHub)
Date: Thu, 19 Oct 2017 16:49:24 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 3bcc03: hdb-mitdb:
 correct missing equals in initializatio...
Message-ID: <59e93a04359d6_11ae3fb86a947c3c186929@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 3bcc031939d4f8cf600839d1e92b252c250d4d79
      https://github.com/heimdal/heimdal/commit/3bcc031939d4f8cf600839d1e92b252c250d4d79
  Author: Daria Phoebe Brashear <dariaphoebe at auristor.com>
  Date:   2017-10-19 (Thu, 19 Oct 2017)

  Changed paths:
    M lib/hdb/hdb-mitdb.c

  Log Message:
  -----------
  hdb-mitdb: correct missing equals in initialization



From noreply at github.com  Mon Oct 30 23:39:25 2017
From: noreply at github.com (GitHub)
Date: Mon, 30 Oct 2017 15:39:25 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] e01466: Further improve
 kdc child process management
Message-ID: <59f7aa1d669bc_6b853f966998bc34499ee@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: e014662651f2615d7a15a3910d8517cf250f8fb1
      https://github.com/heimdal/heimdal/commit/e014662651f2615d7a15a3910d8517cf250f8fb1
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2017-10-30 (Mon, 30 Oct 2017)

  Changed paths:
    M kdc/connect.c

  Log Message:
  -----------
  Further improve kdc child process management

- Simplify child process creation rate limit by moving
  select_sleep() to happen right after the parent fork().

- Consider child pid table slots to be empty if the pid is
  non-positive, rather than just -1 or just 0.

- Log warnings should we ever spawn a child with no free
  slot to track it, or reap a child that does not match
  a tracked slot.



From noreply at github.com  Mon Oct 30 23:41:24 2017
From: noreply at github.com (GitHub)
Date: Mon, 30 Oct 2017 15:41:24 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 642813: kinit: use
 result of security framework test to en...
Message-ID: <59f7aa942fe1f_21b993f9b3d03dc307955a@hookshot-fe-6dbb0c4.cp1-iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 6428136e184157dfb786320cedccbdf95a47a86f
      https://github.com/heimdal/heimdal/commit/6428136e184157dfb786320cedccbdf95a47a86f
  Author: Daria Phoebe Brashear <dariaphoebe at auristor.com>
  Date:   2017-10-30 (Mon, 30 Oct 2017)

  Changed paths:
    M kuser/kinit.c

  Log Message:
  -----------
  kinit: use result of security framework test to enable its use

we already test for the security framework. use the result of it
to decide if we want to enable its use


  Commit: 0f5486eafcb85522607d615f51ec1ba01fa83bd2
      https://github.com/heimdal/heimdal/commit/0f5486eafcb85522607d615f51ec1ba01fa83bd2
  Author: Daria Phoebe Brashear <dariaphoebe at auristor.com>
  Date:   2017-10-30 (Mon, 30 Oct 2017)

  Changed paths:
    A cf/framework-corefoundation.m4
    M configure.ac
    M lib/krb5/Makefile.am
    M lib/krb5/config_file.c

  Log Message:
  -----------
  krb5: don't include plist support unless CoreFoundation is present

depending what's available when you compile for iOS it's possible to
be __APPLE__ and not have CF; actually test for it instead of blythely
assuming it can be used


  Commit: 9bae7d230cd5db891b0632f92d03d236a6e02754
      https://github.com/heimdal/heimdal/commit/9bae7d230cd5db891b0632f92d03d236a6e02754
  Author: Daria Phoebe Brashear <dariaphoebe at auristor.com>
  Date:   2017-10-30 (Mon, 30 Oct 2017)

  Changed paths:
    M lib/libedit/src/terminal.c

  Log Message:
  -----------
  libedit: provide stub curses when none found

for cross-compiling for a GUI, being able to build the whole tree
despite having no curses is helpful; provide an interface which
just fails all calls


Compare: https://github.com/heimdal/heimdal/compare/e014662651f2...9bae7d230cd5