[Heimdal-source-changes] [heimdal/heimdal] 02b5f1: klist: display all known flags when listing tickets

[Nico Williams]

  Branch: refs/heads/heimdal-7-1-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 02b5f1af9bc4a8016a6246163cd7d39b2aaa26a0
      https://github.com/heimdal/heimdal/commit/02b5f1af9bc4a8016a6246163cd7d39b2aaa26a0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kuser/klist.c

  Log Message:
  -----------
  klist: display all known flags when listing tickets

Show transited-policy-checked, ok-as-delegate and anonymous flags when listing
credentials.

(cherry picked from commit a7bb4504f2f3dfb276f8aa154858f46ed1063011)


  Commit: 9739fddaf189cf609fd39d3158e4465b46deab06
      https://github.com/heimdal/heimdal/commit/9739fddaf189cf609fd39d3158e4465b46deab06
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M appl/su/su.c
    M kadmin/cpw.c
    M kadmin/random_password.c
    M kuser/kinit.c
    M lib/gssapi/krb5/arcfour.c
    M lib/gssapi/krb5/get_mic.c
    M lib/gssapi/krb5/verify_mic.c
    M lib/gssapi/ntlm/init_sec_context.c
    M lib/hcrypto/md2.c
    M lib/hcrypto/rand-fortuna.c
    M lib/hdb/mkey.c
    M lib/hx509/ks_file.c
    M lib/krb5/crypto-arcfour.c
    M lib/krb5/crypto-des-common.c
    M lib/krb5/crypto-pk.c
    M lib/krb5/deprecated.c
    M lib/krb5/init_creds_pw.c
    M lib/krb5/kcm.c
    M lib/krb5/salt-des.c
    M lib/krb5/salt-des3.c
    M lib/ntlm/ntlm.c

  Log Message:
  -----------
  use memset_s

lib roken includes support for memset_s() but it was not applied
to the Heimdal source tree.

Change-Id: I8362ec97a9be50205bb2d398e65b629b88ce1acd
(cherry picked from commit 93518bfab4e495bf4130be354464965e48a786c0)


  Commit: 2a01f4e9483bc171d0281feca2d349f66d0a0af0
      https://github.com/heimdal/heimdal/commit/2a01f4e9483bc171d0281feca2d349f66d0a0af0
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kadmin/random_password.c
    M lib/krb5/salt-des3.c

  Log Message:
  -----------
  fix calls to memset_s

In random_password() and DES3_string_to_key(), do not call
memset_s() with the sizeof a pointer.

Change-Id: I7dd49b9f717e1cb5c262f2d375d2b85be82cd2db
(cherry picked from commit 029d32580a3b04550ff736d8878d331dcfca864f)


  Commit: b1ad2cdd134ad480d6b569c8d7fafa492eeb7325
      https://github.com/heimdal/heimdal/commit/b1ad2cdd134ad480d6b569c8d7fafa492eeb7325
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/hdb/hdb-sqlite.c

  Log Message:
  -----------
  Set def page size for HDB SQLite3 backend to 8KB

(cherry picked from commit e3cc7dfb94826aa709a617fb8e59ab07db584f92)


  Commit: 90801574137eac288451caf4ac014395143b7c35
      https://github.com/heimdal/heimdal/commit/90801574137eac288451caf4ac014395143b7c35
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/hdb/db.c
    M lib/hdb/db3.c
    M lib/hdb/hdb-ldap.c
    M lib/hdb/hdb-mdb.c
    M lib/hdb/hdb-mitdb.c
    M lib/hdb/hdb-sqlite.c
    M lib/hdb/hdb.h

  Log Message:
  -----------
  Add hdb_set_sync() method

(cherry picked from commit 5bcbe2125b18160f6ad348b15f8036ffedc15770)


  Commit: bc45c4de721a81af14789a7ca55e3336be6458a6
      https://github.com/heimdal/heimdal/commit/bc45c4de721a81af14789a7ca55e3336be6458a6
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M lib/kadm5/ipropd_slave.c

  Log Message:
  -----------
  Disable sync during iprop receive_everything()

Doing an fsync per-record when receiving the complete HDB is a performance
disaster.  Among other things, if the HDB is very large, then one slave
receving a full HDB can cause other slaves to timeout and, if HDB write
activity is high enough to cause iprop log truncation, then also need full
syncs, which leads to a cycle of full syncs for all slaves until HDB write
activity drops.

Allowing the iprop log to be larger helps, but improving receive_everything()
performance helps even more.

(cherry picked from commit 305dc816525f461f9bfe640d87f671f53f0e0fc6)


  Commit: 1293b21e13e8374a4a27629b34bd269c119cd03c
      https://github.com/heimdal/heimdal/commit/1293b21e13e8374a4a27629b34bd269c119cd03c
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-05-23 (Thu, 23 May 2019)

  Changed paths:
    M kadmin/load.c

  Log Message:
  -----------
  Disable sync during kadmin load

(cherry picked from commit 7d5f8bb051ca84592d1196bf5d5522da5a50f9d6)

Change-Id: I1fb60d697a4f80be1336dd0980f0758eb6436bbb


Compare: https://github.com/heimdal/heimdal/compare/f3b74d8d7243...1293b21e13e8