[Heimdal-source-changes] [heimdal/heimdal] 86bb80: Revert cccol changes to kinit

Nico Williams noreply at github.com
Fre Mars 13 03:02:59 CET 2020


  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 86bb80d7cf3d99cec3ac28d1588d91dae0a97244
      https://github.com/heimdal/heimdal/commit/86bb80d7cf3d99cec3ac28d1588d91dae0a97244
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M kuser/kinit.c

  Log Message:
  -----------
  Revert cccol changes to kinit


  Commit: bc5070d36f94acbe4b608b4e109f32838b5aab19
      https://github.com/heimdal/heimdal/commit/bc5070d36f94acbe4b608b4e109f32838b5aab19
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/krb5/context.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: Add krb5_set_config() for test_cc


  Commit: 3a1f700cef7d6c1c0e1fb04b8f782e2f87077079
      https://github.com/heimdal/heimdal/commit/3a1f700cef7d6c1c0e1fb04b8f782e2f87077079
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/gssapi/krb5/store_cred.c

  Log Message:
  -----------
  gsskrb5: Add unique ccache k/v for cred store

This will allow sshd and such to be configured to request unique ccache
names.


  Commit: f70ccfa967eaf3f7201073ef117b9d00ccc75339
      https://github.com/heimdal/heimdal/commit/f70ccfa967eaf3f7201073ef117b9d00ccc75339
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/krb5/cache.c
    M lib/krb5/context.c
    M lib/krb5/dcache.c

  Log Message:
  -----------
  krb5: Restore FILE as the default ccache type


  Commit: f3e6c4ffd45a11cb055b2b6039cc124dd7886808
      https://github.com/heimdal/heimdal/commit/f3e6c4ffd45a11cb055b2b6039cc124dd7886808
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/krb5/cache.c
    M lib/krb5/fcache.c
    M lib/krb5/krb5.conf.5
    M lib/krb5/test_cc.c

  Log Message:
  -----------
  krb5: Make FILE ccache type a collection type!


  Commit: 64d5f86ec3b7089a3cf8eee49e3bf9bbdef9d545
      https://github.com/heimdal/heimdal/commit/64d5f86ec3b7089a3cf8eee49e3bf9bbdef9d545
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/base/config_reg.c
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/krb5/store_cred.c
    M lib/gssapi/mech/gss_utils.c
    M lib/hx509/ks_file.c
    M lib/hx509/name.c
    M lib/hx509/req.c
    M lib/kadm5/ipropd_master.c
    M lib/krb5/acache.c
    M lib/krb5/cache.c
    M lib/krb5/context.c
    M lib/krb5/kx509.c
    M lib/krb5/plugin.c
    M lib/krb5/scache.c
    M lib/krb5/store_sock.c
    M lib/krb5/store_stdio.c
    M lib/roken/getauxval.c
    M lib/roken/getuserinfo.c
    M lib/roken/roken.h.in
    M lib/roken/sleep.c

  Log Message:
  -----------
  Fix warnings (some bugs, some spurious)

Many spurious VC warnings not quieted though.


  Commit: 7dae771eefb29b57d5d4a4d507d5a847258e0179
      https://github.com/heimdal/heimdal/commit/7dae771eefb29b57d5d4a4d507d5a847258e0179
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M kuser/kinit.1
    M kuser/kinit.c
    M tests/kdc/check-cc.in

  Log Message:
  -----------
  kinit: Add --cache-default-for flag (fix check-cc)


  Commit: 02db43a1aede9cbafc7908333abf83680567aeca
      https://github.com/heimdal/heimdal/commit/02db43a1aede9cbafc7908333abf83680567aeca
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M kuser/kinit.c

  Log Message:
  -----------
  kinit: Prefer the default ccache when user_realm

If using the new --cache-default-for option, use the real default if the
principal is the best principal for the user.

A principal is the best principal for a user when the principal has just
one component, the component is the user's username, and the realm is
the configured user_realm.


  Commit: 312f353b986f37b4868b826989841a1f981fe8d0
      https://github.com/heimdal/heimdal/commit/312f353b986f37b4868b826989841a1f981fe8d0
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-03-12 (Thu, 12 Mar 2020)

  Changed paths:
    M lib/gssapi/krb5/store_cred.c

  Log Message:
  -----------
  gss: Prefer the default ccache when user_realm

gss_store_cred_into*() will now switch the new cred cache to be the
primary/default cred cache when

 - the caller requested it and,
 - if the caller passed in a user name, the creds' principal is the best
   principal for the named user.

A principal is the best principal for a user when the principal has just
one component, the component is the user's username, and the realm is
the configured user_realm.


Compare: https://github.com/heimdal/heimdal/compare/713aa7961aff...312f353b986f


More information about the Heimdal-source-changes mailing list