1. 05 Dec, 2013 2 commits
    • Russ Allbery's avatar
      Update to rra-c-util 4.12 (to be) and C TAP Harness 2.3 · a517ad35
      Russ Allbery authored
      Update to rra-c-util 4.12:
      
      * Better error messages from xasprintf on failure to format output.
      * Check return status of vsnprintf properly.
      * Significant improvements to POD tests.
      * Avoid leaking a dummy symbol from the portability layer.
      * Probe for Kerberos headers with file existence checks.
      
      Update to C TAP Harness 2.3:
      
      * runtests now treats the command line as a list of tests by default.
      * The full test executable path can now be passed to runtests -o.
      * Improved harness output for tests with lazy plans.
      * Improved harness output to a terminal for some abort cases.
      * Flush harness output after each test even when not on a terminal.
      * bail and sysbail now exit with status 255 to match Test::More.
      * Suppress lazy plans and test summaries if the test failed with bail.
      * Add warn_unused_result gcc attributes to relevant functions.
      a517ad35
    • Russ Allbery's avatar
      Update portable/snprintf.c from rra-c-util · fb0160af
      Russ Allbery authored
      Contains some warning fixes for the new warning flags.
      fb0160af
  2. 04 Dec, 2013 1 commit
  3. 21 Nov, 2013 3 commits
    • Russ Allbery's avatar
      Remove portable version of strndup · a143363d
      Russ Allbery authored
      We don't use this anywhere in the source tree, so there's no
      reason to have it around.
      a143363d
    • Russ Allbery's avatar
      Remove strlcpy and strlcat portability functions · 5ba40ffa
      Russ Allbery authored
      Now that ad_ldap_base is the full base DN, we no longer use either
      of those functions anywhere in the source tree.  Remove the
      portability glue.
      5ba40ffa
    • Russ Allbery's avatar
      Rework internal error handling to use Kerberos errors · 077ae1a3
      Russ Allbery authored
      Now that we've dropped the old API, we can drop the error handling
      mode, which predates rich Kerberos errors.  Replace it with use of
      krb5_set_error_message everywhere, and change a lot of functions
      to return a krb5_error_code instead of a boolean or some special
      status code.
      
      As part of this change, all password changes are queued for Active
      Directory if they fail regardless of the reason for the failure.
      077ae1a3
  4. 20 Nov, 2013 1 commit
  5. 19 Nov, 2013 1 commit
    • Russ Allbery's avatar
      Add support for ad_base_instance · 50c9870a
      Russ Allbery authored
      Add a new string krb5.conf option, ad_base_instance, which, if set,
      changes the way that password synchronization is handled.  When this
      option is set, the password for the principal formed by appending that
      instance to a base principal is propagated to Active Directory as the
      password for the base principal.  So, for instance, if this is set to
      the string "windows", the password of the principal "user/windows" is
      propagated to Active Directory as the password for the principal
      "user" and password changes for the principal "user" are ignored.
      This special behavior only happens if "user/windows" exists in the
      local Kerberos KDC database; if not, password propagation for the
      principal "user" happens normally, just as if this option weren't set.
      This allows the Active Directory principal to be treated as an
      instance rather than a main account for specific users without
      affecting behavior for other users.
      
      No regressions, but currently untested otherwise.
      50c9870a
  6. 12 Sep, 2012 1 commit
  7. 10 Jan, 2012 2 commits
    • Russ Allbery's avatar
    • Russ Allbery's avatar
      Update to rra-c-util 4.1 · 60cd5f6d
      Russ Allbery authored
      * Build on systems where krb5/krb5.h exists but krb5.h does not.
      * Kerberos probes no longer assume transitive library dependencies.
      * Fix removal of /usr/include from Kerberos CPPFLAGS.
      * Include strings.h where present for more POSIX string functions.
      * Avoid passing a NULL context to krb5_get_error_message.
      * Fix a data type issue in the messages utility library.
      * Fix incorrect __attribute notations in the utility library.
      * Add replacement for a missing strndup (such as on Mac OS X).
      * Add notices to all files copied from rra-c-util.
      60cd5f6d
  8. 26 Aug, 2010 1 commit
    • Russ Allbery's avatar
      Update to rra-c-util 2.6 · 375ebc63
      Russ Allbery authored
      * Fix portability to bundled Heimdal on OpenBSD.
      * Fix portability for missing krb5_get_init_creds_opt_free.
      
      Also update util/messages.[ch] so that it will compile with more
      warnings enabled.
      375ebc63
  9. 16 Feb, 2010 1 commit
  10. 05 Feb, 2010 3 commits
    • Russ Allbery's avatar
      Massive update of Kerberos compatibility code · eb7f459c
      Russ Allbery authored
      If krb5-config produces results that don't work for Kerberos probes,
      fall back on manual library probing rather than just failing.
      
      If KRB5_CONFIG was explicitly set in the environment, don't use a
      different krb5-config based on --with-krb5.  If krb5-config isn't
      executable, don't use it.  This allows one to force library probing by
      setting KRB5_CONFIG to point to a nonexistent file.
      
      Sanity-check the results of krb5-config before proceeding and error
      out in configure if they don't work.
      
      Add separate --with-krb5-lib and --with-krb5-include configure options
      to set the library and include directories independently, and handle
      lib64 systems better and more automatically.
      
      Import the new Kerberos compatibility layer from rra-c-util and
      supplement it with the principal manipulation functions needed here.
      Take advantage of it to massively simplify the code.
      eb7f459c
    • Russ Allbery's avatar
      Update code to take advantage of portability guarantees · 17620150
      Russ Allbery authored
      Add portability code for platforms without a working snprintf or other
      deficiencies and updated the code to take advantage of those
      guarantees.
      
      Add extra blank lines between functions.
      17620150
    • Russ Allbery's avatar
      Import the standard basic C portability layer · 1d082108
      Russ Allbery authored
      Synchronized with rra-c-util 2.3-to-be.
      1d082108