Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Tinderbox User
ca0ae70046
update copyright notice / whitespace
2017-10-03 23:45:48 +00:00
Mark Andrews
a009d03a1a
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132 ]
2017-10-03 14:54:19 +11:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Mark Andrews
63e58ad048
4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
...
was returned. [RT #42733 ]
2016-07-14 15:06:28 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
9dc5ef7f24
4175. [bug] TKEY with GSS-API keys needed bigger buffers.
...
[RT #40333 ]
2015-08-14 08:20:01 +10:00
Tinderbox User
5e93bad21b
update copyright notice / whitespace
2015-03-01 23:45:20 +00:00
Mark Andrews
af669cb4fd
4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708 ]
2015-02-27 10:55:55 +11:00
Mark Andrews
f4193c2021
update copyrights
2014-02-25 12:07:41 +11:00
Mark Andrews
0072ae822d
3756. [bug] GSSAPI Kerberos realm checking was broken in
...
check_config leading to spurious messages being
logged. [RT #35443 ]
2014-02-24 12:15:37 +11:00
Mark Andrews
c3c8823fed
3681. [port] Update the Windows build system to support feature
...
selection and WIN64 builds. This is a work in
progress. [RT #34160 ]
2013-12-04 12:47:23 +11:00
Tinderbox User
099fa63e55
update copyright notice
2013-06-05 23:46:14 +00:00
Mark Andrews
2347c72129
3583. [bug] Address memory leak in GSS-API processing [RT #33574 ]
2013-06-04 11:59:57 +10:00
Tinderbox User
15c7a1bf20
update copyright notice
2012-10-06 23:46:11 +00:00
Mark Andrews
611dc88768
3390. [bug] Silence clang compiler warnings. [RT #30417 ]
2012-10-06 14:20:45 +10:00
Mark Andrews
6ba6ff39c0
check the results of dns_name_toprincipal calls, only use gnamebuf.value when valid
2011-08-29 06:33:25 +00:00
Mark Andrews
2b3bcbce23
3096. [bug] Set KRB5_KTNAME before calling log_cred() in
...
dst_gssapi_acceptctx(). [RT #24004 ]
2011-04-07 23:03:22 +00:00
Mark Andrews
fade3b5f91
unsigned constants
2011-03-28 05:20:08 +00:00
Mark Andrews
1403f9aa2f
don't free memory passed to putenv(), use malloc and check for malloc failures
2011-01-10 03:49:49 +00:00
Automatic Updater
0e0be796a7
update copyright notice
2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd
3005. [port] Solaris: Work around the lack of
...
gsskrb5_register_acceptor_identity() by setting
the KRB5_KTNAME environment variable to the
contents of tkey-gssapi-keytab. Also fixed
test errors on MacOSX. [RT #22853 ]
2011-01-08 00:33:12 +00:00
Evan Hunt
d9ad0a55bb
3000. [bug] More TKEY/GSS fixes:
...
- nsupdate can now get the default realm from
the user's Kerberos principal
- corrected gsstest compilation flags
- improved documentation
- fixed some NULL dereferences
[RT #22795 ]
2010-12-24 02:20:47 +00:00
Mark Andrews
179e028b35
2995. [bug] The Kerberos realm was not being correctly extracted
...
from the signer's identity. [RT #22770 ]
2010-12-22 02:33:12 +00:00
Evan Hunt
db4c1bc48a
Looks like "ifdef" should have been "ifndef". (Committing without review to
...
silence robie.)
2010-12-19 21:32:35 +00:00
Mark Andrews
c880d51849
gsskrb5_register_acceptor_identity is not available on all platforms
2010-12-18 14:46:21 +00:00
Evan Hunt
71bd858d8e
2989. [func] Added support for writable DLZ zones. (Contributed
...
by Andrew Tridgell of the Samba project.) [RT #22629 ]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629 ]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629 ]
2010-12-18 01:56:23 +00:00
Evan Hunt
bf9b852c3e
2929. [bug] Improved handling of GSS security contexts:
...
- added LRU expiration for generated TSIGs
- added the ability to use a non-default realm
- added new "realm" keyword in nsupdate
- limited lifetime of generated keys to 1 hour
or the lifetime of the context (whichever is
smaller)
[RT #19737 ]
2010-07-09 05:13:15 +00:00
Mark Andrews
a20996ab6f
2910. [func] Sanity check Kerberos credentials. [RT #20986 ]
2010-06-03 02:29:58 +00:00
Automatic Updater
230987e819
update copyright notice
2010-03-12 23:51:11 +00:00
Mark Andrews
a80d26914a
2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
...
don't like it. [RT #20986 ]
2010-03-12 03:47:08 +00:00
Automatic Updater
d7201de09b
update copyright notice
2009-09-02 23:48:03 +00:00
Tatuya JINMEI 神明達哉
307d208450
2660. [func] Add a new set of DNS libraries for non-BIND9
...
applications. See README.libdns. [RT #19369 ]
2009-09-01 00:22:28 +00:00
Automatic Updater
ddad355529
update copyright notice
2008-04-03 06:09:05 +00:00
Mark Andrews
887ef2682c
2352. [bug] Various GSS_API fixups. [RT #17729 ]
2008-04-03 00:45:23 +00:00
Automatic Updater
f731b5d665
update copyright notice
2008-01-22 23:28:04 +00:00
Mark Andrews
9925249931
2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
...
[RT #17513 ]
2008-01-22 11:47:54 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
21c7ecb9f0
better mcxt handling. remove buffer handling layer violation
2006-12-05 21:59:12 +00:00
Mark Andrews
377231eb95
update copyright notice
2006-12-05 00:13:48 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
494576ce20
1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
...
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00