[Heimdal-source-changes] [heimdal/heimdal] 618a30: klist: display all known flags when listing tickets

[Nico Williams]

  Branch: refs/heads/jaltman/heimdal-7.x-pullups
  Home:   https://github.com/heimdal/heimdal
  Commit: 618a308646edc04bbfffad470b8a25f087e0f996
      https://github.com/heimdal/heimdal/commit/618a308646edc04bbfffad470b8a25f087e0f996
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kuser/klist.c

  Log Message:
  -----------
  klist: display all known flags when listing tickets

Show transited-policy-checked, ok-as-delegate and anonymous flags when listing
credentials.

(cherry picked from commit a7bb4504f2f3dfb276f8aa154858f46ed1063011)


  Commit: 1fe4a3883cb3cbeedc72c0f5e2ed7ac9189ab49b
      https://github.com/heimdal/heimdal/commit/1fe4a3883cb3cbeedc72c0f5e2ed7ac9189ab49b
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M appl/su/su.c
    M kadmin/cpw.c
    M kadmin/random_password.c
    M kuser/kinit.c
    M lib/gssapi/krb5/arcfour.c
    M lib/gssapi/krb5/get_mic.c
    M lib/gssapi/krb5/verify_mic.c
    M lib/gssapi/ntlm/init_sec_context.c
    M lib/hcrypto/md2.c
    M lib/hcrypto/rand-fortuna.c
    M lib/hdb/mkey.c
    M lib/hx509/ks_file.c
    M lib/krb5/crypto-arcfour.c
    M lib/krb5/crypto-des-common.c
    M lib/krb5/crypto-pk.c
    M lib/krb5/deprecated.c
    M lib/krb5/init_creds_pw.c
    M lib/krb5/kcm.c
    M lib/krb5/salt-des.c
    M lib/krb5/salt-des3.c
    M lib/ntlm/ntlm.c

  Log Message:
  -----------
  use memset_s

lib roken includes support for memset_s() but it was not applied
to the Heimdal source tree.

Change-Id: I8362ec97a9be50205bb2d398e65b629b88ce1acd
(cherry picked from commit 93518bfab4e495bf4130be354464965e48a786c0)


  Commit: dce3c1349047d78b072517b05822b29ccdcbea09
      https://github.com/heimdal/heimdal/commit/dce3c1349047d78b072517b05822b29ccdcbea09
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kadmin/random_password.c
    M lib/krb5/salt-des3.c

  Log Message:
  -----------
  fix calls to memset_s

In random_password() and DES3_string_to_key(), do not call
memset_s() with the sizeof a pointer.

Change-Id: I7dd49b9f717e1cb5c262f2d375d2b85be82cd2db
(cherry picked from commit 029d32580a3b04550ff736d8878d331dcfca864f)


  Commit: 9eeaa0a149871bef3c4139245ba427c8f8e506e7
      https://github.com/heimdal/heimdal/commit/9eeaa0a149871bef3c4139245ba427c8f8e506e7
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/hdb/hdb-sqlite.c

  Log Message:
  -----------
  Set def page size for HDB SQLite3 backend to 8KB

(cherry picked from commit e3cc7dfb94826aa709a617fb8e59ab07db584f92)


  Commit: 7829cb97b231a55526648b5d1c1de83d41e53861
      https://github.com/heimdal/heimdal/commit/7829cb97b231a55526648b5d1c1de83d41e53861
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/hdb/db.c
    M lib/hdb/db3.c
    M lib/hdb/hdb-ldap.c
    M lib/hdb/hdb-mdb.c
    M lib/hdb/hdb-mitdb.c
    M lib/hdb/hdb-sqlite.c
    M lib/hdb/hdb.h

  Log Message:
  -----------
  Add hdb_set_sync() method

(cherry picked from commit 5bcbe2125b18160f6ad348b15f8036ffedc15770)


  Commit: 27cb77466f9cb93bf7c52e4bd1c02358492daf04
      https://github.com/heimdal/heimdal/commit/27cb77466f9cb93bf7c52e4bd1c02358492daf04
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/kadm5/ipropd_slave.c

  Log Message:
  -----------
  Disable sync during iprop receive_everything()

Doing an fsync per-record when receiving the complete HDB is a performance
disaster.  Among other things, if the HDB is very large, then one slave
receving a full HDB can cause other slaves to timeout and, if HDB write
activity is high enough to cause iprop log truncation, then also need full
syncs, which leads to a cycle of full syncs for all slaves until HDB write
activity drops.

Allowing the iprop log to be larger helps, but improving receive_everything()
performance helps even more.

(cherry picked from commit 305dc816525f461f9bfe640d87f671f53f0e0fc6)


  Commit: b9b985fc3fd3ec5dc99bd2268a75524c695df243
      https://github.com/heimdal/heimdal/commit/b9b985fc3fd3ec5dc99bd2268a75524c695df243
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kadmin/load.c

  Log Message:
  -----------
  Disable sync during kadmin load

(cherry picked from commit 7d5f8bb051ca84592d1196bf5d5522da5a50f9d6)

Change-Id: I1fb60d697a4f80be1336dd0980f0758eb6436bbb


Compare: https://github.com/heimdal/heimdal/compare/3c32a615b339...b9b985fc3fd3