Nalin Dahyabhai
2bc5a13d2a
- apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084)
2006-08-08 22:43:10 +00:00
Nalin Dahyabhai
8c4df25456
- ensure that the gssapi library's been initialized before walking the
...
internal mechanism list in gss_release_oid(), needed if called from
gss_release_name() right after a gss_import_name() (#198092 )
2006-08-07 17:52:52 +00:00
Nalin Dahyabhai
92a65fb1b1
rebuild
2006-07-25 17:55:38 +00:00
Nalin Dahyabhai
30f6a9b1cb
- pull up latest revision of patch to reduce lockups in rsh/rshd
2006-07-25 15:52:36 +00:00
Nalin Dahyabhai
ece8aeb4c7
rebuild
2006-07-17 14:36:02 +00:00
Jesse Keating
12232351f7
bumped for rebuild
2006-07-12 06:43:08 +00:00
Nalin Dahyabhai
574f4b1c31
finally think all the ducks are lined up
2006-07-06 21:25:26 +00:00
Nalin Dahyabhai
28c66f7806
- update to 1.5
2006-07-06 15:56:38 +00:00
Nalin Dahyabhai
61838d068b
Set the default PATH to the one set by login, with the addition of the
...
/usr/X11R6/bin to the end of the list.
2006-07-06 15:50:46 +00:00
Nalin Dahyabhai
7b01b2d58c
The version of "rev" in util-linux doesn't work as this script expects it
...
to.
2006-07-06 15:50:10 +00:00
Nalin Dahyabhai
efbd8d58cc
Ensure that we don't accidentally attempt to use or fclose() a file which
...
we have already fclose()d.
2006-07-06 15:49:31 +00:00
Nalin Dahyabhai
2802804a49
actually bump the release number
2006-06-23 15:51:41 +00:00
Nalin Dahyabhai
b6fc39f13d
- mark profile.d config files noreplace (Laurent Rineau, #196447 )
2006-06-23 15:49:20 +00:00
Nalin Dahyabhai
a230e5aaed
- add buildprereq for autoconf
2006-06-08 21:42:52 +00:00
Nalin Dahyabhai
a7215484dc
- further munge krb5-config so that 'libdir=/usr/lib' is given even on
...
64-bit architectures, to avoid multilib conflicts; other changes will
conspire to strip out the -L flag which uses this, so it should be
harmless (#192692 )
2006-05-22 23:04:06 +00:00
Nalin Dahyabhai
b3724c4388
- adjust the patch which removes the use of rpath to also produce a
...
krb5-config which is okay in multilib environments (#190118 )
- make the name-of-the-tempfile comment which compile_et adds to error code
headers always list the same file to avoid conflicts on multilib
installations
- strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib
boxes
- strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on
mulitlib boxes
2006-05-08 21:47:26 +00:00
skasal
6944b2e68a
Change the release number.
2006-04-14 11:25:22 +00:00
skasal
8216ee6b75
- Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch)
2006-04-14 11:21:50 +00:00
Jesse Keating
77bf5aa481
bump for bug in double-long on ppc(64)
2006-02-11 03:49:47 +00:00
Nalin Dahyabhai
2118c17c6b
- give a little bit more information to the user when kinit gets the
...
catch-all I/O error (#180175 )
2006-02-06 20:04:44 +00:00
Nalin Dahyabhai
5bf2d7bd12
- rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
...
declared, such as with recent glibc when _GNU_SOURCE isn't being used
2006-01-20 00:28:41 +00:00
Matthias Clasen
a6fb2997f1
Use full paths in krb5.sh to avoid path lookups
2006-01-19 18:05:28 +00:00
Jesse Keating
29b9703f11
gcc update bump
2005-12-09 22:41:14 +00:00
Nalin Dahyabhai
a3fdad4949
note to self
2005-12-02 01:48:17 +00:00
Nalin Dahyabhai
f817e39736
- login: don't truncate passwords before passing them into crypt(), in case
...
they're significant (#149476 )
2005-12-02 01:46:50 +00:00
Nalin Dahyabhai
4584045a70
- conditionalize installation of the new autoconf macro
2005-11-17 19:23:05 +00:00
Nalin Dahyabhai
f54e522bb9
- update to 1.4.3
...
- make ksu setuid again (#137934 , others)
2005-11-17 18:43:13 +00:00
Nalin Dahyabhai
533afdf392
- add an (undocumented, so far) option to set the max_dgram_size default
2005-09-14 23:58:11 +00:00
Nalin Dahyabhai
c82cff7d10
bump release
2005-09-13 20:27:12 +00:00
Nalin Dahyabhai
1237c021c7
- mark %%{krb5prefix}/man so that files which are packaged within it are
...
flagged as %%doc (#168163 )
2005-09-13 20:26:57 +00:00
Nalin Dahyabhai
552acc8a70
- add an xinetd configuration file for encryption-only telnetd,
...
parallelling the kshell/ekshell pair (#167535 )
2005-09-06 14:05:59 +00:00
Nalin Dahyabhai
fd0f8c753b
bump release
2005-08-31 19:38:08 +00:00
Nalin Dahyabhai
1fcd49e050
- change the default configured encryption type for KDC databases to the
...
compiled-in default of des3-hmac-sha1 (#57847 )
2005-08-31 19:37:54 +00:00
Nalin Dahyabhai
f5b93c728e
update to 1.4.2
2005-08-11 22:06:35 +00:00
Nalin Dahyabhai
80238a2fd8
merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003
2005-07-12 18:09:21 +00:00
Nalin Dahyabhai
73316152b6
- fix double-close in keytab handling
...
- add port of fixes for CAN-2004-0175 to krb5-aware rcp
2005-06-24 20:28:25 +00:00
Nalin Dahyabhai
77a40621a2
- prevent spurious EBADF in krshd when stdin is closed by the client while
...
the command is running (#151111 )
2005-05-13 23:16:55 +00:00
Martin Stransky
ebda005fa9
add deadlock patch, removed old patch
2005-05-13 11:36:41 +00:00
Nalin Dahyabhai
2e8f6b3b97
- update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
...
- when starting the KDC or kadmind, if KRB5REALM is set via the
/etc/sysconfig file for the service, pass it as an argument for the -r
flag
2005-05-06 20:16:06 +00:00
Nalin Dahyabhai
9142032a6f
- add draft fix from Tom Yu for slc_add_reply() buffer overflow
...
(CAN-2005-0469)
- add draft fix from Tom Yu for env_opt_add() buffer overflow
(CAN-2005-0468)
will need to re-roll if the draft fix isn't the same as the final one *
2005-03-28 18:25:19 +00:00
Nalin Dahyabhai
fe186e59d9
- don't include <term.h> into the telnet client when we're not using curses
2005-03-16 22:59:54 +00:00
Nalin Dahyabhai
d46e1d65be
- use libncurses instead of libtermcap for the telnet client, because it
...
provides setupterm(), which we can use instead of the internal version
2005-03-16 00:21:35 +00:00
Nalin Dahyabhai
3759eb0ddd
note to self: krb5_init_ets disappeared
2005-03-01 00:05:15 +00:00
Nalin Dahyabhai
c22df5b059
- add config: metatags to the init scripts
2005-02-25 19:20:44 +00:00
Nalin Dahyabhai
6cf61960fa
- add a doc file
2005-02-24 23:31:35 +00:00
Nalin Dahyabhai
708fedd9ea
- update to 1.4
...
- v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
flag to specify that it should communicate with the server using the
older protocol
- new libkrb5support library
- v5passwdd and kadmind4 are gone
- versioned symbols
- pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
it on to krb5kdc
- pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
it on to kadmind
- pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
it on to krb524d *instead of* "-m"
- set "forwardable" in [libdefaults] in the default krb5.conf to match the
default setting which we supply for pam_krb5
- set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting
the compiled-in default
2005-02-24 23:16:08 +00:00
Nalin Dahyabhai
e7236e5850
rebuild
2004-12-20 23:42:32 +00:00
Nalin Dahyabhai
712b0183e7
- 1.3.6 is out, obsoleting the patch. aargh! i mean, yay!
2004-12-20 23:30:28 +00:00
Nalin Dahyabhai
ad18b8355f
- unscrew up martin's changelog date
...
- incorporate fix for MITKRB5-SA-2004-004
2004-12-20 23:24:09 +00:00
Nalin Dahyabhai
6580269909
- fixup comments
2004-12-20 23:17:34 +00:00