[Heimdal-source-changes] [heimdal/heimdal] b12d32: krb5: remove duplicate KRB5_ANON_MATCH_xxx defines

Luke Howard noreply at github.com
Sön May 19 16:35:52 CEST 2019


  Branch: refs/heads/jaltman/heimdal-7.6-fixes
  Home:   https://github.com/heimdal/heimdal
  Commit: b12d322906b92a0f6c627425e9caa6a565e7b25f
      https://github.com/heimdal/heimdal/commit/b12d322906b92a0f6c627425e9caa6a565e7b25f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-19 (Sun, 19 May 2019)

  Changed paths:
    M lib/krb5/krb5_locl.h

  Log Message:
  -----------
  krb5: remove duplicate KRB5_ANON_MATCH_xxx defines

Commit bdcd7d2f moved the KRB5_ANON_MATCH_xxx preprocessor symbols to krb5.h,
but did not remove the originals from krb5_locl.h. This commit removes them.

(cherry picked from commit dc791c8fcfb8f61fe0d0a14307a6a6cf999a13b7)

Change-Id: Ia24d4b1467c6547a9748325c9632d1df5add563c


  Commit: ad6ed7c7e3742e49520f1c79fb596c1fd7a29d91
      https://github.com/heimdal/heimdal/commit/ad6ed7c7e3742e49520f1c79fb596c1fd7a29d91
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-19 (Sun, 19 May 2019)

  Changed paths:
    M kdc/kerberos5.c
    M kdc/krb5tgs.c

  Log Message:
  -----------
  kdc: use actual client princ for KRB5SignedPath

When generating KRB5SignedPath in the AS, use the reply client name rather than
the one from the request, so validation will work correctly in the TGS.

(cherry picked from commit c634146b14be9746d70d6a448e9bb2dd6f518c44)


  Commit: 4ac29cecb0fb34e4e6fec9351ce5ee0495de47a8
      https://github.com/heimdal/heimdal/commit/4ac29cecb0fb34e4e6fec9351ce5ee0495de47a8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-19 (Sun, 19 May 2019)

  Changed paths:
    M lib/krb5/init_creds.c
    M lib/krb5/krb5_locl.h
    M lib/krb5/pkinit.c

  Log Message:
  -----------
  krb5: don't require krbtgt otherName match for Win2K

Merged from Apple branch: when the Win2K PKINIT compatibility option is set, do
not require krbtgt otherName to match when validating KDC certificate.

(cherry picked from commit 8350f34a05ba2cbc1ead0214eb85352f8e7805ef)


  Commit: 37abcd741e5501ccc08cfaac914d14279b4488f6
      https://github.com/heimdal/heimdal/commit/37abcd741e5501ccc08cfaac914d14279b4488f6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-19 (Sun, 19 May 2019)

  Changed paths:
    M lib/krb5/pkinit.c

  Log Message:
  -----------
  krb5: set PKINIT_BTMM flag per Apple implementation

(cherry picked from commit fd209c5dca89e599f24a853cc9e9a55dc2d04f4c)


Compare: https://github.com/heimdal/heimdal/compare/4f864fb74442...37abcd741e55


More information about the Heimdal-source-changes mailing list