The Kerberos network authentication system
Go to file
Nalin Dahyabhai d17f0b5f35 Provide an option to make the KDC also listen on loopback interfaces for
datagram requests. Adds an internal symbol to libkrb5 which the KDC
    will need if listening on loopback is enabled.
The default might be better changed from FALSE to TRUE so that the default
    matches what we do with stream sockets. Or maybe that should be the
    default anyway, with no configuration option.
FIXME: doesn't add documentation anywhere.
2008-04-04 21:32:15 +00:00
.cvsignore - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00
2004-002-dblfree_patch.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2004-003-patch_1.3.4.txt auto-import changelog data from krb5-1.3.4-7.src.rpm 2004-09-09 07:21:49 +00:00
2006-001-patch_1.5.txt - switch to the updated patch for MITKRB-SA-2006-001 2006-08-18 16:50:54 +00:00
2006-002-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
2006-003-patch.txt - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456) 2007-01-09 19:31:40 +00:00
CVE-2007-3999-2.patch - incorporate updated fix for CVE-2007-3999 2007-09-06 20:20:55 +00:00
CVE-2007-4000.patch - incorporate fixes for MITKRB5-SA-2007-006 (CVE-2007-3999, CVE-2007-4000) 2007-09-04 18:10:23 +00:00
eklogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
ekrb5-telnet.xinetd - add an xinetd configuration file for encryption-only telnetd, 2005-09-06 14:05:59 +00:00
ekshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
gssftp.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadm5.acl auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kadmin.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
kadmind.init - stop exporting kadmin keys to a keytab file when kadmind starts -- the 2008-04-04 21:29:53 +00:00
kdc.conf - stop exporting kadmin keys to a keytab file when kadmind starts -- the 2008-04-04 21:29:53 +00:00
kdcrotate auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
klogin.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
kpropd.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krb5-1.2.1-passive.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.2.7-login-lpass.patch note to self 2005-12-02 01:48:17 +00:00
krb5-1.2.7-reject-bad-transited.patch auto-import krb5-1.2.5-15 from krb5-1.2.5-15.src.rpm 2004-09-09 07:12:53 +00:00
krb5-1.3-ftp-glob.patch fix globbing patch port mode (#139075) 2004-11-17 00:42:19 +00:00
krb5-1.3-ksu-access.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-large-file.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-netkit-rsh.patch auto-import changelog data from krb5-1.3.1-6.src.rpm 2004-09-09 07:16:22 +00:00
krb5-1.3-rlogind-environ.patch - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krb5-1.3.1-dns.patch auto-import changelog data from krb5-1.3.1-7.src.rpm 2004-09-09 07:16:33 +00:00
krb5-1.3.2-efence.patch auto-import changelog data from krb5-1.3.2-1.src.rpm 2004-09-09 07:17:04 +00:00
krb5-1.3.3-rcp-markus.patch - fix double-close in keytab handling 2005-06-24 20:28:25 +00:00
krb5-1.3.3-rcp-sendlarge.patch auto-import changelog data from krb5-1.3.3-3.src.rpm 2004-09-09 07:18:32 +00:00
krb5-1.3.4-send-pr-tempfile.patch - specify $TMPDIR directly because older mktemp versions didn't support -t, 2004-11-23 02:38:51 +00:00
krb5-1.3.5-kprop-mktemp.patch - fixup comments 2004-12-20 23:17:34 +00:00
krb5-1.4-ktany.patch - update to 1.4 2005-02-24 23:16:08 +00:00
krb5-1.4-ncurses.patch - don't include <term.h> into the telnet client when we're not using curses 2005-03-16 22:59:54 +00:00
krb5-1.4.1-api.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.1-telnet-environ.patch merge fixes for MITKRB5-SA-2005-002 and MITKRB5-SA-2005-003 2005-07-12 18:09:21 +00:00
krb5-1.4.2-max_dgram_size.patch - add an (undocumented, so far) option to set the max_dgram_size default 2005-09-14 23:58:11 +00:00
krb5-1.4.3-enospc.patch - give a little bit more information to the user when kinit gets the 2006-02-06 20:04:44 +00:00
krb5-1.4.3-kdc_max_dgram_size.patch - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not 2006-01-20 00:28:41 +00:00
krb5-1.5-brokenrev.patch The version of "rev" in util-linux doesn't work as this script expects it 2006-07-06 15:50:10 +00:00
krb5-1.5-fclose.patch Ensure that we don't accidentally attempt to use or fclose() a file which 2006-07-06 15:49:31 +00:00
krb5-1.5-io.patch - pull up latest revision of patch to reduce lockups in rsh/rshd 2006-07-25 15:52:36 +00:00
krb5-1.5-ksu-path.patch Set the default PATH to the one set by login, with the addition of the 2006-07-06 15:50:46 +00:00
krb5-1.5-kt_default_name.patch add newlines after new errors 2006-10-18 21:36:40 +00:00
krb5-1.5.1-1.6-pal.patch - backport of preauth plugin support from 1.6 2007-01-22 21:24:18 +00:00
krb5-1.6-buildconf.patch - initial update to 1.6, making the package-split optional 2007-01-23 22:14:15 +00:00
krb5-1.6-ldap-init.patch - fix an unitialized length count which caused the plugin to attempt to 2007-05-04 18:06:26 +00:00
krb5-1.6-ldap-man.patch - fix incorrect doc: "ldap_server" refers to what the code expects is 2007-05-04 18:05:15 +00:00
krb5-1.6-nodeplibs.patch - label all files at creation-time according to the SELinux policy 2007-06-25 00:55:25 +00:00
krb5-1.6-sort-of-static.patch - also don't error out in the --disable-shared case, which while it doesn't 2007-06-25 00:52:53 +00:00
krb5-1.6.1-empty.patch - experimental patch to ignore empty values for various environment values 2007-05-23 21:46:54 +00:00
krb5-1.6.1-pam.patch - in login, allow PAM to interact with the user when they've been strongly 2008-02-25 18:33:34 +00:00
krb5-1.6.2-dirsrv-accountlock.patch comment: Treat 'nsAccountLock: true' the same as 'loginDisabled: true'. 2008-02-25 18:32:02 +00:00
krb5-1.6.2-key_exp.patch - wow, fix a syntax error 2008-02-12 21:03:29 +00:00
krb5-1.6.2-login_chdir.patch - test patch for login chdir when $HOME is on root-squashed nfs 2007-07-26 19:07:22 +00:00
krb5-1.6.3-ftp_fdleak.patch - ftp: don't lose track of a descriptor on passive get when the server 2008-02-25 19:50:42 +00:00
krb5-1.6.3-ftp_glob_runique.patch - ftp: add patch to fix "runique on" case when globbing fixes applied 2008-02-26 21:18:38 +00:00
krb5-1.6.3-kdc_listen_all.patch Provide an option to make the KDC also listen on loopback interfaces for 2008-04-04 21:32:15 +00:00
krb5-1.6.3-lucid-acceptor.patch - libgssapi_krb5: properly export the acceptor subkey when creating a lucid 2008-04-01 20:53:54 +00:00
krb5-1.6.3-selinux-label.patch - remove a couple of hunks where on third look we don't need to be using 2008-03-18 15:49:52 +00:00
krb5-any-fixup-patch.txt - patch to make srvtab routines report missing-file errors at the same 2007-06-22 22:03:42 +00:00
krb5-CVE-2007-5901.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2007-5971.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0062,0063.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-CVE-2008-0947.patch - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer 2008-03-18 18:13:22 +00:00
krb5-MITKRB5SA-2005-001.patch - add draft fix from Tom Yu for slc_add_reply() buffer overflow 2005-03-28 18:25:19 +00:00
krb5-ok-as-delegate.patch - experimental ok-as-delegate setting patch (not applied) 2007-08-25 04:28:10 +00:00
krb5-telnet.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
krb5-tex-pdf.sh - preserve timestamps on profile.d shell scriptlets 2007-01-22 21:23:54 +00:00
krb5-trunk-doublelog.patch - add patch to suppress double-processing of /etc/krb5.conf when we build 2008-02-25 20:53:41 +00:00
krb5-trunk-kpasswd_tcp2.patch - a second approach proposed in RT 2008-02-12 16:28:13 +00:00
krb5-trunk-kpasswd_tcp.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-manpaths.patch - filename listing all of the man pages in the source tree, so that the 2007-06-22 22:02:16 +00:00
krb5-trunk-manpaths.txt - filename listing all of the man pages in the source tree, so that the 2007-06-22 22:02:16 +00:00
krb5-trunk-seqnum.patch - note RT numbers for reference 2008-01-23 18:27:03 +00:00
krb5-trunk-spnego_delegation.patch note the RT number 2007-11-09 15:40:20 +00:00
krb5.conf - merge back changes made between fc6 and rawhide to date 2007-01-22 21:27:49 +00:00
krb5.csh auto-import krb5-1.2.5-5 from krb5-1.2.5-5.src.rpm 2004-09-09 07:12:05 +00:00
krb5.sh Use full paths in krb5.sh to avoid path lookups 2006-01-19 18:05:28 +00:00
krb5.spec - stop exporting kadmin keys to a keytab file when kadmind starts -- the 2008-04-04 21:29:53 +00:00
krb5kdc.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krb5kdc.sysconfig - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469 2005-05-06 20:16:06 +00:00
krb524.sysconfig - update to 1.4 2005-02-24 23:16:08 +00:00
krb524d.init - some init script cleanups 2008-01-02 17:03:38 +00:00
krlogin - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
krsh - clean up quoting of command-line arguments passed to the krsh/krlogin 2007-01-30 21:01:21 +00:00
kshell.pamd - make proper use of pam_loginuid and pam_selinux in rshd and ftpd 2007-10-17 17:48:52 +00:00
kshell.xinetd auto-import changelog data from krb5-1.2.1-8.src.rpm 2004-09-09 07:05:48 +00:00
Makefile makefile update to properly grab makefile.common 2007-10-15 18:56:42 +00:00
sources - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999 and 2007-10-23 19:40:45 +00:00