From feec3621854ef6b1ccd3598df2202c0622929444 Mon Sep 17 00:00:00 2001 From: Stanislav Sedov Date: Sun, 8 Apr 2012 04:47:53 +0000 Subject: [PATCH] - Update vendor tree of heimdal to 1.5.2. --- NEWS | 13 + appl/telnet/libtelnet/encrypt.c | 3 + configure | 22 +- configure.ac | 2 +- doc/doxyout/gssapi/html/graph_legend.html | 2 +- doc/doxyout/gssapi/html/group__gssapi.html | 2 +- .../gssapi/html/gssapi_mechs_intro.html | 2 +- .../gssapi/html/gssapi_services_intro.html | 2 +- doc/doxyout/gssapi/html/index.html | 4 +- .../gssapi/html/internalvsmechname.html | 2 +- doc/doxyout/gssapi/html/modules.html | 2 +- doc/doxyout/gssapi/html/pages.html | 2 +- doc/doxyout/gssapi/man/man3/gssapi.3 | 2 +- .../gssapi/man/man3/gssapi_mechs_intro.3 | 2 +- .../gssapi/man/man3/gssapi_services_intro.3 | 2 +- .../gssapi/man/man3/internalvsmechname.3 | 2 +- .../html/example__evp__cipher_8c-example.html | 2 +- doc/doxyout/hcrypto/html/examples.html | 2 +- doc/doxyout/hcrypto/html/graph_legend.html | 2 +- .../hcrypto/html/group__hcrypto__core.html | 2 +- .../hcrypto/html/group__hcrypto__des.html | 2 +- .../hcrypto/html/group__hcrypto__dh.html | 2 +- .../hcrypto/html/group__hcrypto__evp.html | 2 +- .../hcrypto/html/group__hcrypto__misc.html | 2 +- .../hcrypto/html/group__hcrypto__rand.html | 2 +- .../hcrypto/html/group__hcrypto__rsa.html | 2 +- doc/doxyout/hcrypto/html/index.html | 4 +- doc/doxyout/hcrypto/html/modules.html | 2 +- doc/doxyout/hcrypto/html/page_des.html | 2 +- doc/doxyout/hcrypto/html/page_dh.html | 2 +- doc/doxyout/hcrypto/html/page_evp.html | 2 +- doc/doxyout/hcrypto/html/page_rand.html | 2 +- doc/doxyout/hcrypto/html/page_rsa.html | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_core.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_des.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_dh.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_evp.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_misc.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_rand.3 | 2 +- doc/doxyout/hcrypto/man/man3/hcrypto_rsa.3 | 2 +- doc/doxyout/hcrypto/man/man3/page_des.3 | 2 +- doc/doxyout/hcrypto/man/man3/page_dh.3 | 2 +- doc/doxyout/hcrypto/man/man3/page_evp.3 | 2 +- doc/doxyout/hcrypto/man/man3/page_rand.3 | 2 +- doc/doxyout/hcrypto/man/man3/page_rsa.3 | 2 +- doc/doxyout/hdb/html/annotated.html | 2 +- doc/doxyout/hdb/html/functions.html | 2 +- doc/doxyout/hdb/html/functions_vars.html | 2 +- doc/doxyout/hdb/html/graph_legend.html | 2 +- doc/doxyout/hdb/html/index.html | 4 +- doc/doxyout/hdb/html/struct_h_d_b.html | 4 +- .../hdb/html/structhdb__entry__ex.html | 4 +- doc/doxyout/hdb/man/man3/HDB.3 | 2 +- doc/doxyout/hdb/man/man3/hdb_entry_ex.3 | 2 +- doc/doxyout/hx509/html/graph_legend.html | 2 +- doc/doxyout/hx509/html/group__hx509.html | 2 +- doc/doxyout/hx509/html/group__hx509__ca.html | 2 +- .../hx509/html/group__hx509__cert.html | 2 +- doc/doxyout/hx509/html/group__hx509__cms.html | 2 +- .../hx509/html/group__hx509__crypto.html | 2 +- doc/doxyout/hx509/html/group__hx509__env.html | 2 +- .../hx509/html/group__hx509__error.html | 2 +- .../hx509/html/group__hx509__keyset.html | 2 +- .../hx509/html/group__hx509__lock.html | 2 +- .../hx509/html/group__hx509__misc.html | 2 +- .../hx509/html/group__hx509__name.html | 2 +- .../hx509/html/group__hx509__peer.html | 2 +- .../hx509/html/group__hx509__print.html | 2 +- .../hx509/html/group__hx509__query.html | 2 +- .../hx509/html/group__hx509__revoke.html | 2 +- .../hx509/html/group__hx509__verify.html | 2 +- doc/doxyout/hx509/html/index.html | 4 +- doc/doxyout/hx509/html/modules.html | 2 +- doc/doxyout/hx509/html/page_ca.html | 2 +- doc/doxyout/hx509/html/page_cert.html | 2 +- doc/doxyout/hx509/html/page_cms.html | 2 +- doc/doxyout/hx509/html/page_env.html | 2 +- doc/doxyout/hx509/html/page_error.html | 2 +- doc/doxyout/hx509/html/page_keyset.html | 2 +- doc/doxyout/hx509/html/page_lock.html | 2 +- doc/doxyout/hx509/html/page_name.html | 2 +- doc/doxyout/hx509/html/page_peer.html | 2 +- doc/doxyout/hx509/html/page_print.html | 2 +- doc/doxyout/hx509/html/page_revoke.html | 2 +- doc/doxyout/hx509/html/pages.html | 2 +- doc/doxyout/hx509/man/man3/hx509.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_ca.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_cert.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_cms.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_crypto.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_env.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_error.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_keyset.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_lock.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_misc.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_name.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_peer.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_print.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_query.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_revoke.3 | 2 +- doc/doxyout/hx509/man/man3/hx509_verify.3 | 2 +- doc/doxyout/hx509/man/man3/page_ca.3 | 2 +- doc/doxyout/hx509/man/man3/page_cert.3 | 2 +- doc/doxyout/hx509/man/man3/page_cms.3 | 2 +- doc/doxyout/hx509/man/man3/page_env.3 | 2 +- doc/doxyout/hx509/man/man3/page_error.3 | 2 +- doc/doxyout/hx509/man/man3/page_keyset.3 | 2 +- doc/doxyout/hx509/man/man3/page_lock.3 | 2 +- doc/doxyout/hx509/man/man3/page_name.3 | 2 +- doc/doxyout/hx509/man/man3/page_peer.3 | 2 +- doc/doxyout/hx509/man/man3/page_print.3 | 2 +- doc/doxyout/hx509/man/man3/page_revoke.3 | 2 +- doc/doxyout/krb5/html/annotated.html | 2 +- doc/doxyout/krb5/html/graph_legend.html | 2 +- doc/doxyout/krb5/html/group__krb5.html | 2 +- .../krb5/html/group__krb5__address.html | 2 +- doc/doxyout/krb5/html/group__krb5__auth.html | 2 +- .../krb5/html/group__krb5__ccache.html | 2 +- .../krb5/html/group__krb5__credential.html | 2 +- .../krb5/html/group__krb5__crypto.html | 2 +- .../krb5/html/group__krb5__deprecated.html | 2 +- .../krb5/html/group__krb5__digest.html | 2 +- doc/doxyout/krb5/html/group__krb5__error.html | 2 +- .../krb5/html/group__krb5__keytab.html | 2 +- doc/doxyout/krb5/html/group__krb5__pac.html | 2 +- .../krb5/html/group__krb5__principal.html | 2 +- .../krb5/html/group__krb5__storage.html | 2 +- .../krb5/html/group__krb5__support.html | 2 +- .../krb5/html/group__krb5__ticket.html | 2 +- .../krb5/html/group__krb5__v4compat.html | 2 +- doc/doxyout/krb5/html/index.html | 4 +- doc/doxyout/krb5/html/krb5_ccache_intro.html | 2 +- doc/doxyout/krb5/html/krb5_fileformats.html | 2 +- .../krb5/html/krb5_init_creds_intro.html | 2 +- doc/doxyout/krb5/html/krb5_introduction.html | 2 +- doc/doxyout/krb5/html/krb5_keytab_intro.html | 2 +- .../krb5/html/krb5_principal_intro.html | 2 +- doc/doxyout/krb5/html/modules.html | 2 +- doc/doxyout/krb5/html/pages.html | 2 +- .../krb5/html/structkrb5__crypto__iov.html | 4 +- doc/doxyout/krb5/man/man3/krb5.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_address.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_auth.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_ccache.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_ccache_intro.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_credential.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_crypto.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_crypto_iov.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_deprecated.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_digest.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_error.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_fileformats.3 | 2 +- .../krb5/man/man3/krb5_init_creds_intro.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_introduction.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_keytab.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_keytab_intro.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_pac.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_principal.3 | 2 +- .../krb5/man/man3/krb5_principal_intro.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_storage.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_support.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_ticket.3 | 2 +- doc/doxyout/krb5/man/man3/krb5_v4compat.3 | 2 +- doc/doxyout/ntlm/html/annotated.html | 2 +- doc/doxyout/ntlm/html/examples.html | 2 +- doc/doxyout/ntlm/html/functions.html | 2 +- doc/doxyout/ntlm/html/functions_vars.html | 2 +- doc/doxyout/ntlm/html/graph_legend.html | 2 +- doc/doxyout/ntlm/html/group__ntlm__core.html | 2 +- doc/doxyout/ntlm/html/index.html | 4 +- doc/doxyout/ntlm/html/modules.html | 2 +- doc/doxyout/ntlm/html/structntlm__buf.html | 4 +- doc/doxyout/ntlm/html/structntlm__type1.html | 4 +- doc/doxyout/ntlm/html/structntlm__type2.html | 4 +- doc/doxyout/ntlm/html/structntlm__type3.html | 4 +- .../ntlm/html/test__ntlm_8c-example.html | 2 +- doc/doxyout/ntlm/man/man3/ntlm_buf.3 | 2 +- doc/doxyout/ntlm/man/man3/ntlm_core.3 | 2 +- doc/doxyout/ntlm/man/man3/ntlm_type1.3 | 2 +- doc/doxyout/ntlm/man/man3/ntlm_type2.3 | 2 +- doc/doxyout/ntlm/man/man3/ntlm_type3.3 | 2 +- doc/doxyout/wind/html/graph_legend.html | 2 +- doc/doxyout/wind/html/group__wind.html | 2 +- doc/doxyout/wind/html/index.html | 4 +- doc/doxyout/wind/html/modules.html | 2 +- doc/doxyout/wind/man/man3/wind.3 | 2 +- doc/heimdal.info | 295 ++++++------------ doc/heimdal.texi | 2 - doc/hx509.info | 2 +- doc/intro.texi | 3 +- doc/kerberos4.texi | 45 +-- doc/setup.texi | 57 +--- doc/vars.texi | 2 +- kdc/default_config.c | 16 +- kdc/kdc.8 | 3 - kdc/kdc.cat8 | 9 +- kdc/kdc.h | 4 +- kdc/kerberos5.c | 5 +- kdc/krb5tgs.c | 4 +- kpasswd/kpasswdd.c | 48 ++- lib/gssapi/krb5/verify_mic.c | 8 + .../libtommath/bn_mp_prime_next_prime.c | 4 +- lib/hx509/sel-lex.c | 35 ++- lib/hx509/sel-lex.l | 1 + lib/kadm5/password_quality.c | 5 +- lib/krb5/crypto-arcfour.c | 2 +- lib/krb5/crypto.c | 2 +- lib/krb5/eai_to_heim_errno.c | 4 + lib/krb5/krb5.conf.5 | 25 +- lib/krb5/krb5.conf.cat5 | 28 +- lib/krb5/pac.c | 69 ++-- lib/krb5/verify_krb5_conf.c | 2 +- lib/libedit/configure | 6 +- lib/wind/bidi_table.c | 2 +- lib/wind/bidi_table.h | 2 +- lib/wind/combining_table.c | 2 +- lib/wind/combining_table.h | 2 +- lib/wind/errorlist_table.c | 2 +- lib/wind/errorlist_table.h | 2 +- lib/wind/map_table.c | 2 +- lib/wind/map_table.h | 2 +- lib/wind/normalize_table.c | 2 +- lib/wind/normalize_table.h | 2 +- lib/wind/punycode_examples.c | 2 +- lib/wind/punycode_examples.h | 2 +- lib/wind/utf8.c | 18 +- lib/wind/version-script.map | 1 + tests/kdc/check-kadmin.in | 8 +- tools/krb5-config.in | 2 +- windows/NTMakefile.version | 6 +- 230 files changed, 534 insertions(+), 643 deletions(-) diff --git a/NEWS b/NEWS index 585d7cf4af3..a555bb2a5d3 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,16 @@ +Release Notes - Heimdal - Version Heimdal 1.5.2 + + Security fixes + - CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd - escalation of privilege + - Check that key types strictly match - denial of service + +Release Notes - Heimdal - Version Heimdal 1.5.1 + + Bug fixes + - Fix building on Solaris, requires c99 + - Fix building on Windows + - Build system updates + Release Notes - Heimdal - Version Heimdal 1.5 New features diff --git a/appl/telnet/libtelnet/encrypt.c b/appl/telnet/libtelnet/encrypt.c index 68e8bd686e8..58e081d4289 100644 --- a/appl/telnet/libtelnet/encrypt.c +++ b/appl/telnet/libtelnet/encrypt.c @@ -736,6 +736,9 @@ encrypt_keyid(struct key_info *kp, unsigned char *keyid, int len) int dir = kp->dir; int ret = 0; + if (len > MAXKEYLEN) + len = MAXKEYLEN; + if (!(ep = (*kp->getcrypt)(*kp->modep))) { if (len == 0) return; diff --git a/configure b/configure index 0e702352dfc..cfce676b481 100755 --- a/configure +++ b/configure @@ -1,7 +1,7 @@ #! /bin/sh # From configure.ac Revision. # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.65 for Heimdal 1.5.1. +# Generated by GNU Autoconf 2.65 for Heimdal 1.5.2. # # Report bugs to . # @@ -563,8 +563,8 @@ MAKEFLAGS= # Identity of this package. PACKAGE_NAME='Heimdal' PACKAGE_TARNAME='heimdal' -PACKAGE_VERSION='1.5.1' -PACKAGE_STRING='Heimdal 1.5.1' +PACKAGE_VERSION='1.5.2' +PACKAGE_STRING='Heimdal 1.5.2' PACKAGE_BUGREPORT='heimdal-bugs@h5l.org' PACKAGE_URL='' @@ -1535,7 +1535,7 @@ if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures Heimdal 1.5.1 to adapt to many kinds of systems. +\`configure' configures Heimdal 1.5.2 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1609,7 +1609,7 @@ fi if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of Heimdal 1.5.1:";; + short | recursive ) echo "Configuration of Heimdal 1.5.2:";; esac cat <<\_ACEOF @@ -1798,7 +1798,7 @@ fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -Heimdal configure 1.5.1 +Heimdal configure 1.5.2 generated by GNU Autoconf 2.65 Copyright (C) 2009 Free Software Foundation, Inc. @@ -2252,7 +2252,7 @@ cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by Heimdal $as_me 1.5.1, which was +It was created by Heimdal $as_me 1.5.2, which was generated by GNU Autoconf 2.65. Invocation command line was $ $0 $@ @@ -3068,7 +3068,7 @@ fi # Define the identity of the package. PACKAGE='heimdal' - VERSION='1.5.1' + VERSION='1.5.2' cat >>confdefs.h <<_ACEOF @@ -29246,7 +29246,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by Heimdal $as_me 1.5.1, which was +This file was extended by Heimdal $as_me 1.5.2, which was generated by GNU Autoconf 2.65. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -29312,7 +29312,7 @@ _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -Heimdal config.status 1.5.1 +Heimdal config.status 1.5.2 configured by $0, generated by GNU Autoconf 2.65, with options \\"\$ac_cs_config\\" @@ -31284,7 +31284,7 @@ cat > include/newversion.h.in <
-Generated on Fri Sep 30 15:26:17 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
+Generated on Wed Jan 11 14:07:44 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/group__gssapi.html b/doc/doxyout/gssapi/html/group__gssapi.html index 35a68c4dbd9..e063b51429f 100644 --- a/doc/doxyout/gssapi/html/group__gssapi.html +++ b/doc/doxyout/gssapi/html/group__gssapi.html @@ -887,6 +887,6 @@ SSPI equivalent if this function is QueryContextAttributes.

-Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
+Generated on Wed Jan 11 14:07:44 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/gssapi_mechs_intro.html b/doc/doxyout/gssapi/html/gssapi_mechs_intro.html index 9480c95c7af..cc28b7b74f9 100644 --- a/doc/doxyout/gssapi/html/gssapi_mechs_intro.html +++ b/doc/doxyout/gssapi/html/gssapi_mechs_intro.html @@ -25,6 +25,6 @@ GSS-API mechanisms
  • Kerberos 5 - GSS_KRB5_MECHANISM
  • SPNEGO - GSS_SPNEGO_MECHANISM
  • NTLM - GSS_NTLM_MECHANISM
    • -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:43 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/gssapi_services_intro.html b/doc/doxyout/gssapi/html/gssapi_services_intro.html index e92217f4f05..069bc942ea6 100644 --- a/doc/doxyout/gssapi/html/gssapi_services_intro.html +++ b/doc/doxyout/gssapi/html/gssapi_services_intro.html @@ -38,6 +38,6 @@ Per-message services
  • conf
  • int
  • message integrity
  • replay detection
  • out of sequence
    • -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:43 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/index.html b/doc/doxyout/gssapi/html/index.html index a1a21dbfe9e..34c5848a264 100644 --- a/doc/doxyout/gssapi/html/index.html +++ b/doc/doxyout/gssapi/html/index.html @@ -21,7 +21,7 @@

    Heimdal GSS-API Library

    -

    1.5.1

    Heimdal implements the following mechanisms:

    +

    1.5.2

    Heimdal implements the following mechanisms:

    • Kerberos 5
    • SPNEGO
    • NTLM

    @@ -31,6 +31,6 @@ The project web page: http://www.h5l.org/

  • Introduction to GSS-API services
  • GSS-API mechanisms
  • Name forms
    • -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:43 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/internalvsmechname.html b/doc/doxyout/gssapi/html/internalvsmechname.html index ae7591d85eb..1aafdad9e2b 100644 --- a/doc/doxyout/gssapi/html/internalvsmechname.html +++ b/doc/doxyout/gssapi/html/internalvsmechname.html @@ -31,6 +31,6 @@ There are two forms of name in GSS-API, Internal form and Contiguous string ("fl There is also special form of the Internal Name (IN), and that is the Mechanism Name (MN). In the mechanism name all the generic information is stripped of and only contain the information for one mechanism. In GSS-API some function return MN and some require MN as input. Each of these function is marked up as such.

    Describe relationship between import_name, canonicalize_name, export_name and friends.

    -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:43 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/modules.html b/doc/doxyout/gssapi/html/modules.html index 520850b7c0a..df4743766fd 100644 --- a/doc/doxyout/gssapi/html/modules.html +++ b/doc/doxyout/gssapi/html/modules.html @@ -24,6 +24,6 @@
    -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:44 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/html/pages.html b/doc/doxyout/gssapi/html/pages.html index 130a0574f4c..ef62f830c14 100644 --- a/doc/doxyout/gssapi/html/pages.html +++ b/doc/doxyout/gssapi/html/pages.html @@ -29,6 +29,6 @@
    -Generated on Fri Sep 30 15:26:16 2011 for HeimdalGSS-APIlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:43 2012 for HeimdalGSS-APIlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/gssapi/man/man3/gssapi.3 b/doc/doxyout/gssapi/man/man3/gssapi.3 index 1ad1c821eaf..620c67be202 100644 --- a/doc/doxyout/gssapi/man/man3/gssapi.3 +++ b/doc/doxyout/gssapi/man/man3/gssapi.3 @@ -1,4 +1,4 @@ -.TH "Heimdal GSS-API functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalGSS-APIlibrary" \" -*- nroff -*- +.TH "Heimdal GSS-API functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalGSS-APIlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/gssapi/man/man3/gssapi_mechs_intro.3 b/doc/doxyout/gssapi/man/man3/gssapi_mechs_intro.3 index 821705e4f49..be32a3cd526 100644 --- a/doc/doxyout/gssapi/man/man3/gssapi_mechs_intro.3 +++ b/doc/doxyout/gssapi/man/man3/gssapi_mechs_intro.3 @@ -1,4 +1,4 @@ -.TH "gssapi_mechs_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalGSS-APIlibrary" \" -*- nroff -*- +.TH "gssapi_mechs_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalGSS-APIlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/gssapi/man/man3/gssapi_services_intro.3 b/doc/doxyout/gssapi/man/man3/gssapi_services_intro.3 index d43b2140740..eac68924dd5 100644 --- a/doc/doxyout/gssapi/man/man3/gssapi_services_intro.3 +++ b/doc/doxyout/gssapi/man/man3/gssapi_services_intro.3 @@ -1,4 +1,4 @@ -.TH "gssapi_services_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalGSS-APIlibrary" \" -*- nroff -*- +.TH "gssapi_services_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalGSS-APIlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/gssapi/man/man3/internalvsmechname.3 b/doc/doxyout/gssapi/man/man3/internalvsmechname.3 index 4b4c66e3177..63591a73444 100644 --- a/doc/doxyout/gssapi/man/man3/internalvsmechname.3 +++ b/doc/doxyout/gssapi/man/man3/internalvsmechname.3 @@ -1,4 +1,4 @@ -.TH "internalvsmechname" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalGSS-APIlibrary" \" -*- nroff -*- +.TH "internalvsmechname" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalGSS-APIlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/html/example__evp__cipher_8c-example.html b/doc/doxyout/hcrypto/html/example__evp__cipher_8c-example.html index cb89b668d7a..4fe7516ce57 100644 --- a/doc/doxyout/hcrypto/html/example__evp__cipher_8c-example.html +++ b/doc/doxyout/hcrypto/html/example__evp__cipher_8c-example.html @@ -168,6 +168,6 @@ main(int argc, char
    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/examples.html b/doc/doxyout/hcrypto/html/examples.html index d6a887c4b88..c03868c63d2 100644 --- a/doc/doxyout/hcrypto/html/examples.html +++ b/doc/doxyout/hcrypto/html/examples.html @@ -24,6 +24,6 @@
    -Generated on Fri Sep 30 15:26:06 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/graph_legend.html b/doc/doxyout/hcrypto/html/graph_legend.html index 2b5383bf753..723244103a9 100644 --- a/doc/doxyout/hcrypto/html/graph_legend.html +++ b/doc/doxyout/hcrypto/html/graph_legend.html @@ -83,6 +83,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:06 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__core.html b/doc/doxyout/hcrypto/html/group__hcrypto__core.html index 5b2805884a1..7d43e4dd12a 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__core.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__core.html @@ -185,6 +185,6 @@ Add all algorithms to the crypto core, but don't use the configuration file.

    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__des.html b/doc/doxyout/hcrypto/html/group__hcrypto__des.html index 0f9dc548098..77f251cd99c 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__des.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__des.html @@ -905,6 +905,6 @@ Convert a string to a DES key. Use something like
    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__dh.html b/doc/doxyout/hcrypto/html/group__hcrypto__dh.html index 8152b6479b0..723ed0ee006 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__dh.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__dh.html @@ -576,6 +576,6 @@ Add a reference to the DH object. The object should be free with

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__evp.html b/doc/doxyout/hcrypto/html/group__hcrypto__evp.html index 109fbd7c326..53e4b4df0cd 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__evp.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__evp.html @@ -2361,6 +2361,6 @@ The tripple DES cipher type (Micrsoft crypt provider)

    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__misc.html b/doc/doxyout/hcrypto/html/group__hcrypto__misc.html index 0201087ceea..50d11bffe77 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__misc.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__misc.html @@ -101,6 +101,6 @@ As descriped in PKCS5, convert a password, salt, and iteration counter into a cr

    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__rand.html b/doc/doxyout/hcrypto/html/group__hcrypto__rand.html index 9ee7243c4b9..e36ff032e93 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__rand.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__rand.html @@ -420,6 +420,6 @@ Write of random numbers to a file to store for later initiation with
    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/group__hcrypto__rsa.html b/doc/doxyout/hcrypto/html/group__hcrypto__rsa.html index 271fb384374..d2847de56ec 100644 --- a/doc/doxyout/hcrypto/html/group__hcrypto__rsa.html +++ b/doc/doxyout/hcrypto/html/group__hcrypto__rsa.html @@ -273,6 +273,6 @@ Add an extra reference to the RSA object. The object should be free with

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/index.html b/doc/doxyout/hcrypto/html/index.html index cb584f200a3..a88485da852 100644 --- a/doc/doxyout/hcrypto/html/index.html +++ b/doc/doxyout/hcrypto/html/index.html @@ -21,7 +21,7 @@

    Heimdal crypto library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal libhcrypto library is a implementation many crypto algorithms, among others: AES, SHA, DES, RSA, Camellia and many help function.

    hcrypto provies a OpenSSL compatible interface libcrypto interface and is licensed under a 3 clause BSD license (GPL compatible).

    @@ -42,6 +42,6 @@ History

    Eric Young implemented DES in the library libdes, that grew into libcrypto in the ssleay package. ssleay went into recession and then got picked up by the OpenSSL (htp://www.openssl.org/) project.

    libhcrypto is an independent implementation with no code decended from ssleay/openssl. Both includes some common imported code, for example the AES implementation.

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/modules.html b/doc/doxyout/hcrypto/html/modules.html index a1e577f4d8b..870d259e4de 100644 --- a/doc/doxyout/hcrypto/html/modules.html +++ b/doc/doxyout/hcrypto/html/modules.html @@ -30,6 +30,6 @@
    -Generated on Fri Sep 30 15:26:05 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/page_des.html b/doc/doxyout/hcrypto/html/page_des.html index 7358055b49b..cd079460844 100644 --- a/doc/doxyout/hcrypto/html/page_des.html +++ b/doc/doxyout/hcrypto/html/page_des.html @@ -40,6 +40,6 @@ There was no complete BSD licensed, fast, GPL compatible implementation of DES, The document that got me started for real was "Efficient Implementation of the Data Encryption Standard" by Dag Arne Osvik. I never got to the PC1 transformation was working, instead I used table-lookup was used for all key schedule setup. The document was very useful since it de-mystified other implementations for me.

    The core DES function (SBOX + P transformation) is from Richard Outerbridge public domain DES implementation. My sanity is saved thanks to his work. Thank you Richard.

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/page_dh.html b/doc/doxyout/hcrypto/html/page_dh.html index 09e4bd10917..fecf6de6f00 100644 --- a/doc/doxyout/hcrypto/html/page_dh.html +++ b/doc/doxyout/hcrypto/html/page_dh.html @@ -25,6 +25,6 @@ Include and example how to use DH_new() and friends here.

    See the library functions here: Diffie-Hellman functions

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/page_evp.html b/doc/doxyout/hcrypto/html/page_evp.html index 1ee28d058b0..81cc72b39b3 100644 --- a/doc/doxyout/hcrypto/html/page_evp.html +++ b/doc/doxyout/hcrypto/html/page_evp.html @@ -25,6 +25,6 @@ EVP Cipher The use of EVP_CipherInit_ex() and EVP_Cipher() is pretty easy to understand forward, then EVP_CipherUpdate() and EVP_CipherFinal_ex() really needs an example to explain example_evp_cipher::c .
    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/page_rand.html b/doc/doxyout/hcrypto/html/page_rand.html index a581d764fa2..727954d6e9c 100644 --- a/doc/doxyout/hcrypto/html/page_rand.html +++ b/doc/doxyout/hcrypto/html/page_rand.html @@ -23,6 +23,6 @@

    RAND - random number

    See the library functions here: RAND crypto functions
    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/html/page_rsa.html b/doc/doxyout/hcrypto/html/page_rsa.html index 36051397adb..912f2362db5 100644 --- a/doc/doxyout/hcrypto/html/page_rsa.html +++ b/doc/doxyout/hcrypto/html/page_rsa.html @@ -26,6 +26,6 @@ Speed for RSA in seconds no key blinding 1000 iteration, same rsa keys (1024 and name 1024 2048 4098 ================================= gmp: 0.73 6.60 44.80 tfm: 2.45 -- -- ltm: 3.79 20.74 105.41 (default in hcrypto) openssl: 4.04 11.90 82.59 cdsa: 15.89 102.89 721.40 imath: 40.62 -- --

    See the library functions here: RSA functions

    -Generated on Fri Sep 30 15:26:03 2011 for Heimdal crypto library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdal crypto library by doxygen 1.5.6 diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_core.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_core.3 index 03d62c7d6e0..f7d829aee19 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_core.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_core.3 @@ -1,4 +1,4 @@ -.TH "hcrypto function controlling behavior" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "hcrypto function controlling behavior" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_des.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_des.3 index 829d3e64534..fd70a60a30e 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_des.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_des.3 @@ -1,4 +1,4 @@ -.TH "DES crypto functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "DES crypto functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_dh.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_dh.3 index 3b45ee542f7..035faf2e279 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_dh.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_dh.3 @@ -1,4 +1,4 @@ -.TH "Diffie-Hellman functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "Diffie-Hellman functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_evp.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_evp.3 index ef1eb07fa5d..0997d55d509 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_evp.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_evp.3 @@ -1,4 +1,4 @@ -.TH "EVP generic crypto functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "EVP generic crypto functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_misc.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_misc.3 index c5ac3e3dbed..1335d23a423 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_misc.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_misc.3 @@ -1,4 +1,4 @@ -.TH "hcrypto miscellaneous functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "hcrypto miscellaneous functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_rand.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_rand.3 index 8f416bd8da9..075ec81569e 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_rand.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_rand.3 @@ -1,4 +1,4 @@ -.TH "RAND crypto functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "RAND crypto functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/hcrypto_rsa.3 b/doc/doxyout/hcrypto/man/man3/hcrypto_rsa.3 index 2f4e6bc5262..662a1706bc3 100644 --- a/doc/doxyout/hcrypto/man/man3/hcrypto_rsa.3 +++ b/doc/doxyout/hcrypto/man/man3/hcrypto_rsa.3 @@ -1,4 +1,4 @@ -.TH "RSA functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "RSA functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/page_des.3 b/doc/doxyout/hcrypto/man/man3/page_des.3 index 7e2668e3455..056bf05cb7d 100644 --- a/doc/doxyout/hcrypto/man/man3/page_des.3 +++ b/doc/doxyout/hcrypto/man/man3/page_des.3 @@ -1,4 +1,4 @@ -.TH "page_des" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "page_des" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/page_dh.3 b/doc/doxyout/hcrypto/man/man3/page_dh.3 index d2d5abfa257..2b3d6be5300 100644 --- a/doc/doxyout/hcrypto/man/man3/page_dh.3 +++ b/doc/doxyout/hcrypto/man/man3/page_dh.3 @@ -1,4 +1,4 @@ -.TH "page_dh" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "page_dh" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/page_evp.3 b/doc/doxyout/hcrypto/man/man3/page_evp.3 index 60f8caa026e..ab210428df9 100644 --- a/doc/doxyout/hcrypto/man/man3/page_evp.3 +++ b/doc/doxyout/hcrypto/man/man3/page_evp.3 @@ -1,4 +1,4 @@ -.TH "page_evp" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "page_evp" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/page_rand.3 b/doc/doxyout/hcrypto/man/man3/page_rand.3 index b0d532badbb..07a394246e1 100644 --- a/doc/doxyout/hcrypto/man/man3/page_rand.3 +++ b/doc/doxyout/hcrypto/man/man3/page_rand.3 @@ -1,4 +1,4 @@ -.TH "page_rand" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "page_rand" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hcrypto/man/man3/page_rsa.3 b/doc/doxyout/hcrypto/man/man3/page_rsa.3 index cc45260da58..97e326d9b82 100644 --- a/doc/doxyout/hcrypto/man/man3/page_rsa.3 +++ b/doc/doxyout/hcrypto/man/man3/page_rsa.3 @@ -1,4 +1,4 @@ -.TH "page_rsa" 3 "30 Sep 2011" "Version 1.5.1" "Heimdal crypto library" \" -*- nroff -*- +.TH "page_rsa" 3 "11 Jan 2012" "Version 1.5.2" "Heimdal crypto library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hdb/html/annotated.html b/doc/doxyout/hdb/html/annotated.html index bc8f0091946..4b2bac86206 100644 --- a/doc/doxyout/hdb/html/annotated.html +++ b/doc/doxyout/hdb/html/annotated.html @@ -30,6 +30,6 @@
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/functions.html b/doc/doxyout/hdb/html/functions.html index 3995651fc23..a6746b845a5 100644 --- a/doc/doxyout/hdb/html/functions.html +++ b/doc/doxyout/hdb/html/functions.html @@ -80,6 +80,6 @@ Here is a list of all documented struct and union fields with links to the struc
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/functions_vars.html b/doc/doxyout/hdb/html/functions_vars.html index a2b468580b0..edf20391764 100644 --- a/doc/doxyout/hdb/html/functions_vars.html +++ b/doc/doxyout/hdb/html/functions_vars.html @@ -80,6 +80,6 @@
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/graph_legend.html b/doc/doxyout/hdb/html/graph_legend.html index 77afc215ccc..2d25cc860a4 100644 --- a/doc/doxyout/hdb/html/graph_legend.html +++ b/doc/doxyout/hdb/html/graph_legend.html @@ -82,6 +82,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/index.html b/doc/doxyout/hdb/html/index.html index 694667a74ab..9469dbe1d4c 100644 --- a/doc/doxyout/hdb/html/index.html +++ b/doc/doxyout/hdb/html/index.html @@ -20,7 +20,7 @@

    Heimdal database backend library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal libhdb library provides the backend support for Heimdal kdc and kadmind. Its here where plugins for diffrent database engines can be pluged in and extend support for here Heimdal get the principal and policy data from.

    Example of Heimdal backend are:

    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/struct_h_d_b.html b/doc/doxyout/hdb/html/struct_h_d_b.html index 3768113bb50..6481c0588bf 100644 --- a/doc/doxyout/hdb/html/struct_h_d_b.html +++ b/doc/doxyout/hdb/html/struct_h_d_b.html @@ -422,9 +422,9 @@ Check if s4u2self is allowed from this client to this server

    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/hdb/hdb.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/hdb/hdb.h
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/html/structhdb__entry__ex.html b/doc/doxyout/hdb/html/structhdb__entry__ex.html index 34e8b49b2cc..65955201de7 100644 --- a/doc/doxyout/hdb/html/structhdb__entry__ex.html +++ b/doc/doxyout/hdb/html/structhdb__entry__ex.html @@ -31,9 +31,9 @@

    Detailed Description

    hdb_entry_ex is a wrapper structure around the hdb_entry structure that allows backends to keep a pointer to the backing store, ie in ->hdb_fetch_kvno(), so that we the kadmin/kpasswd backend gets around to ->hdb_store(), the backend doesn't need to lookup the entry again.
    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/hdb/hdb.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/hdb/hdb.h
    -Generated on Fri Sep 30 15:26:07 2011 for Heimdalhdblibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:38 2012 for Heimdalhdblibrary by doxygen 1.5.6 diff --git a/doc/doxyout/hdb/man/man3/HDB.3 b/doc/doxyout/hdb/man/man3/HDB.3 index 097554e5c83..9f04b17d64d 100644 --- a/doc/doxyout/hdb/man/man3/HDB.3 +++ b/doc/doxyout/hdb/man/man3/HDB.3 @@ -1,4 +1,4 @@ -.TH "HDB" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalhdblibrary" \" -*- nroff -*- +.TH "HDB" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalhdblibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hdb/man/man3/hdb_entry_ex.3 b/doc/doxyout/hdb/man/man3/hdb_entry_ex.3 index 502bdd8b232..801d3a57ed5 100644 --- a/doc/doxyout/hdb/man/man3/hdb_entry_ex.3 +++ b/doc/doxyout/hdb/man/man3/hdb_entry_ex.3 @@ -1,4 +1,4 @@ -.TH "hdb_entry_ex" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalhdblibrary" \" -*- nroff -*- +.TH "hdb_entry_ex" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalhdblibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/html/graph_legend.html b/doc/doxyout/hx509/html/graph_legend.html index bc58e756668..3ead3e542c8 100644 --- a/doc/doxyout/hx509/html/graph_legend.html +++ b/doc/doxyout/hx509/html/graph_legend.html @@ -83,6 +83,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:14 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509.html b/doc/doxyout/hx509/html/group__hx509.html index 7b71eb5c8a5..98a6181d448 100644 --- a/doc/doxyout/hx509/html/group__hx509.html +++ b/doc/doxyout/hx509/html/group__hx509.html @@ -84,6 +84,6 @@ Creates a hx509 context that most functions in the library uses. The context is

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__ca.html b/doc/doxyout/hx509/html/group__hx509__ca.html index a06314b3953..a7a0e552802 100644 --- a/doc/doxyout/hx509/html/group__hx509__ca.html +++ b/doc/doxyout/hx509/html/group__hx509__ca.html @@ -1174,6 +1174,6 @@ Make of template units, use to build flags argument to
    -Generated on Fri Sep 30 15:26:13 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__cert.html b/doc/doxyout/hx509/html/group__hx509__cert.html index f2f816b5112..a91284ed483 100644 --- a/doc/doxyout/hx509/html/group__hx509__cert.html +++ b/doc/doxyout/hx509/html/group__hx509__cert.html @@ -1420,6 +1420,6 @@ Verify that the certificate is allowed to be used for the hostname and address.<

    -Generated on Fri Sep 30 15:26:11 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__cms.html b/doc/doxyout/hx509/html/group__hx509__cms.html index 804b6b6bc88..043e134fac0 100644 --- a/doc/doxyout/hx509/html/group__hx509__cms.html +++ b/doc/doxyout/hx509/html/group__hx509__cms.html @@ -499,6 +499,6 @@ Wrap data and oid in a ContentInfo and encode it.

    -Generated on Fri Sep 30 15:26:11 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__crypto.html b/doc/doxyout/hx509/html/group__hx509__crypto.html index 8e1fdc92bb7..3e57a8bd9de 100644 --- a/doc/doxyout/hx509/html/group__hx509__crypto.html +++ b/doc/doxyout/hx509/html/group__hx509__crypto.html @@ -87,6 +87,6 @@ Verify a signature made using the private key of an certificate.

    -Generated on Fri Sep 30 15:26:11 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__env.html b/doc/doxyout/hx509/html/group__hx509__env.html index 35b3d66c217..085f6dbcbf0 100644 --- a/doc/doxyout/hx509/html/group__hx509__env.html +++ b/doc/doxyout/hx509/html/group__hx509__env.html @@ -306,6 +306,6 @@ Search the hx509_env for a length based key.

    -Generated on Fri Sep 30 15:26:14 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__error.html b/doc/doxyout/hx509/html/group__hx509__error.html index 631fbec3b62..95fb0ae8dc6 100644 --- a/doc/doxyout/hx509/html/group__hx509__error.html +++ b/doc/doxyout/hx509/html/group__hx509__error.html @@ -303,6 +303,6 @@ Add an error message to the hx509 context.

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__keyset.html b/doc/doxyout/hx509/html/group__hx509__keyset.html index acce00411b9..1abd8e90953 100644 --- a/doc/doxyout/hx509/html/group__hx509__keyset.html +++ b/doc/doxyout/hx509/html/group__hx509__keyset.html @@ -776,6 +776,6 @@ Get one random certificate from the certificate store.

    -Generated on Fri Sep 30 15:26:11 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__lock.html b/doc/doxyout/hx509/html/group__hx509__lock.html index b10c22ab34c..fecc3272c61 100644 --- a/doc/doxyout/hx509/html/group__hx509__lock.html +++ b/doc/doxyout/hx509/html/group__hx509__lock.html @@ -24,6 +24,6 @@ See the Locking and unlocking certificates and encrypted data. for description and examples.
    -Generated on Fri Sep 30 15:26:13 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__misc.html b/doc/doxyout/hx509/html/group__hx509__misc.html index 37dd15de4ea..08ce4b162e0 100644 --- a/doc/doxyout/hx509/html/group__hx509__misc.html +++ b/doc/doxyout/hx509/html/group__hx509__misc.html @@ -83,6 +83,6 @@ Free a data element allocated in the library.

    -Generated on Fri Sep 30 15:26:11 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__name.html b/doc/doxyout/hx509/html/group__hx509__name.html index decfa695340..9970c09496d 100644 --- a/doc/doxyout/hx509/html/group__hx509__name.html +++ b/doc/doxyout/hx509/html/group__hx509__name.html @@ -465,6 +465,6 @@ Convert a DER encoded name info a string.

    -Generated on Fri Sep 30 15:26:12 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__peer.html b/doc/doxyout/hx509/html/group__hx509__peer.html index c750f1ceada..eecfd0361d8 100644 --- a/doc/doxyout/hx509/html/group__hx509__peer.html +++ b/doc/doxyout/hx509/html/group__hx509__peer.html @@ -232,6 +232,6 @@ Set the algorithms that the peer supports.

    -Generated on Fri Sep 30 15:26:13 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__print.html b/doc/doxyout/hx509/html/group__hx509__print.html index dba1b2546e7..63dcd4beb80 100644 --- a/doc/doxyout/hx509/html/group__hx509__print.html +++ b/doc/doxyout/hx509/html/group__hx509__print.html @@ -447,6 +447,6 @@ Set the printing functions for the validation context.

    -Generated on Fri Sep 30 15:26:14 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__query.html b/doc/doxyout/hx509/html/group__hx509__query.html index 4ef973c6091..c1e6495fb98 100644 --- a/doc/doxyout/hx509/html/group__hx509__query.html +++ b/doc/doxyout/hx509/html/group__hx509__query.html @@ -24,6 +24,6 @@
    -Generated on Fri Sep 30 15:26:13 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__revoke.html b/doc/doxyout/hx509/html/group__hx509__revoke.html index 1e375f77934..13c1652eae0 100644 --- a/doc/doxyout/hx509/html/group__hx509__revoke.html +++ b/doc/doxyout/hx509/html/group__hx509__revoke.html @@ -373,6 +373,6 @@ Check that a certificate is not expired according to a revokation context. Also

    -Generated on Fri Sep 30 15:26:12 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/group__hx509__verify.html b/doc/doxyout/hx509/html/group__hx509__verify.html index 2296ed3650e..bd0cbabf03f 100644 --- a/doc/doxyout/hx509/html/group__hx509__verify.html +++ b/doc/doxyout/hx509/html/group__hx509__verify.html @@ -709,6 +709,6 @@ Set the clock time the the verification process is going to use. Used to check c

    -Generated on Fri Sep 30 15:26:13 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/index.html b/doc/doxyout/hx509/html/index.html index d73d5e184e2..3deba3e118a 100644 --- a/doc/doxyout/hx509/html/index.html +++ b/doc/doxyout/hx509/html/index.html @@ -21,7 +21,7 @@

    Heimdal PKIX/X.509 library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal libhx509 library is a implementation of the PKIX/X.509 and related protocols.

    PKIX/X.509 is ...

    @@ -30,6 +30,6 @@ Sections in this manual are:

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/modules.html b/doc/doxyout/hx509/html/modules.html index 1ac9379ff1d..dfc4b3a0922 100644 --- a/doc/doxyout/hx509/html/modules.html +++ b/doc/doxyout/hx509/html/modules.html @@ -39,6 +39,6 @@
    -Generated on Fri Sep 30 15:26:14 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:41 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_ca.html b/doc/doxyout/hx509/html/page_ca.html index fa5201e4b3b..defb0e7ae86 100644 --- a/doc/doxyout/hx509/html/page_ca.html +++ b/doc/doxyout/hx509/html/page_ca.html @@ -21,6 +21,6 @@

    Hx509 CA functions

    See the library functions here: hx509 CA functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_cert.html b/doc/doxyout/hx509/html/page_cert.html index 897c5f98de1..599605b4d05 100644 --- a/doc/doxyout/hx509/html/page_cert.html +++ b/doc/doxyout/hx509/html/page_cert.html @@ -23,6 +23,6 @@ A hx509_cert object is usully found via the keyset interfaces (Certificate store operations), but its also possible to create a certificate directly from a parsed object with hx509_cert_init() and hx509_cert_init_data().

    See the library functions here: hx509 certificate functions

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_cms.html b/doc/doxyout/hx509/html/page_cms.html index ad753891462..92e72e2a8aa 100644 --- a/doc/doxyout/hx509/html/page_cms.html +++ b/doc/doxyout/hx509/html/page_cms.html @@ -25,6 +25,6 @@

    See the library functions here: hx509 CMS/pkcs7 functions

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_env.html b/doc/doxyout/hx509/html/page_env.html index add94d6ac7d..8f4c9ff83e7 100644 --- a/doc/doxyout/hx509/html/page_env.html +++ b/doc/doxyout/hx509/html/page_env.html @@ -21,6 +21,6 @@

    Hx509 enviroment functions

    See the library functions here: hx509 enviroment functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_error.html b/doc/doxyout/hx509/html/page_error.html index 8055b3870f1..e9791043f4e 100644 --- a/doc/doxyout/hx509/html/page_error.html +++ b/doc/doxyout/hx509/html/page_error.html @@ -21,6 +21,6 @@

    Hx509 error reporting functions

    See the library functions here: hx509 error functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_keyset.html b/doc/doxyout/hx509/html/page_keyset.html index 4bd2894be0c..2f2a27c34d3 100644 --- a/doc/doxyout/hx509/html/page_keyset.html +++ b/doc/doxyout/hx509/html/page_keyset.html @@ -24,6 +24,6 @@

    See the library functions here: hx509 certificate store functions

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_lock.html b/doc/doxyout/hx509/html/page_lock.html index 9758006f042..9ff4d2e7ecf 100644 --- a/doc/doxyout/hx509/html/page_lock.html +++ b/doc/doxyout/hx509/html/page_lock.html @@ -21,6 +21,6 @@

    Locking and unlocking certificates and encrypted data.

    See the library functions here: hx509 lock functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_name.html b/doc/doxyout/hx509/html/page_name.html index cc69c1c0ae9..a7b3cfb8bed 100644 --- a/doc/doxyout/hx509/html/page_name.html +++ b/doc/doxyout/hx509/html/page_name.html @@ -27,6 +27,6 @@ Parse and string name into a hx509_name object with hx509 name functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_peer.html b/doc/doxyout/hx509/html/page_peer.html index a51ab87db58..a9803026f0a 100644 --- a/doc/doxyout/hx509/html/page_peer.html +++ b/doc/doxyout/hx509/html/page_peer.html @@ -22,6 +22,6 @@

    Hx509 crypto selecting functions

    Peer info structures are used togeter with hx509_crypto_select() to select the best avaible crypto algorithm to use.

    See the library functions here: hx509 certificate selecting functions

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_print.html b/doc/doxyout/hx509/html/page_print.html index aa28eedc239..873d980ee48 100644 --- a/doc/doxyout/hx509/html/page_print.html +++ b/doc/doxyout/hx509/html/page_print.html @@ -21,6 +21,6 @@

    Hx509 printing functions

    See the library functions here: hx509 printing functions
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/page_revoke.html b/doc/doxyout/hx509/html/page_revoke.html index 8115e8bbad1..5e5e5d0852d 100644 --- a/doc/doxyout/hx509/html/page_revoke.html +++ b/doc/doxyout/hx509/html/page_revoke.html @@ -23,6 +23,6 @@ CRL is a list of certifiates that have expired.

    OCSP is an online checking method where the requestor sends a list of certificates to the OCSP server to return a signed reply if they are valid or not. Some services sends a OCSP reply as part of the hand-shake to make the revoktion decision simpler/faster for the client.

    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/html/pages.html b/doc/doxyout/hx509/html/pages.html index 913d7b99455..a015ae63c1b 100644 --- a/doc/doxyout/hx509/html/pages.html +++ b/doc/doxyout/hx509/html/pages.html @@ -45,6 +45,6 @@
    -Generated on Fri Sep 30 15:26:09 2011 for Heimdalx509library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:40 2012 for Heimdalx509library by doxygen 1.5.6 diff --git a/doc/doxyout/hx509/man/man3/hx509.3 b/doc/doxyout/hx509/man/man3/hx509.3 index 9c0666d1843..b8f6993f147 100644 --- a/doc/doxyout/hx509/man/man3/hx509.3 +++ b/doc/doxyout/hx509/man/man3/hx509.3 @@ -1,4 +1,4 @@ -.TH "hx509 library" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 library" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_ca.3 b/doc/doxyout/hx509/man/man3/hx509_ca.3 index 17204a06eb1..d6de5e226bc 100644 --- a/doc/doxyout/hx509/man/man3/hx509_ca.3 +++ b/doc/doxyout/hx509/man/man3/hx509_ca.3 @@ -1,4 +1,4 @@ -.TH "hx509 CA functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 CA functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_cert.3 b/doc/doxyout/hx509/man/man3/hx509_cert.3 index f57b5438f3c..2b1b1707002 100644 --- a/doc/doxyout/hx509/man/man3/hx509_cert.3 +++ b/doc/doxyout/hx509/man/man3/hx509_cert.3 @@ -1,4 +1,4 @@ -.TH "hx509 certificate functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 certificate functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_cms.3 b/doc/doxyout/hx509/man/man3/hx509_cms.3 index 1661a4b0361..bf96792280a 100644 --- a/doc/doxyout/hx509/man/man3/hx509_cms.3 +++ b/doc/doxyout/hx509/man/man3/hx509_cms.3 @@ -1,4 +1,4 @@ -.TH "hx509 CMS/pkcs7 functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 CMS/pkcs7 functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_crypto.3 b/doc/doxyout/hx509/man/man3/hx509_crypto.3 index 29c385e154b..f37fa946868 100644 --- a/doc/doxyout/hx509/man/man3/hx509_crypto.3 +++ b/doc/doxyout/hx509/man/man3/hx509_crypto.3 @@ -1,4 +1,4 @@ -.TH "hx509 crypto functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 crypto functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_env.3 b/doc/doxyout/hx509/man/man3/hx509_env.3 index d8380596c5f..e834fddcf8c 100644 --- a/doc/doxyout/hx509/man/man3/hx509_env.3 +++ b/doc/doxyout/hx509/man/man3/hx509_env.3 @@ -1,4 +1,4 @@ -.TH "hx509 enviroment functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 enviroment functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_error.3 b/doc/doxyout/hx509/man/man3/hx509_error.3 index 838aaeb74c0..0e5928e9d4e 100644 --- a/doc/doxyout/hx509/man/man3/hx509_error.3 +++ b/doc/doxyout/hx509/man/man3/hx509_error.3 @@ -1,4 +1,4 @@ -.TH "hx509 error functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 error functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_keyset.3 b/doc/doxyout/hx509/man/man3/hx509_keyset.3 index 8a550927117..72c3f713d18 100644 --- a/doc/doxyout/hx509/man/man3/hx509_keyset.3 +++ b/doc/doxyout/hx509/man/man3/hx509_keyset.3 @@ -1,4 +1,4 @@ -.TH "hx509 certificate store functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 certificate store functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_lock.3 b/doc/doxyout/hx509/man/man3/hx509_lock.3 index 66233bc98e4..ca1283c0eef 100644 --- a/doc/doxyout/hx509/man/man3/hx509_lock.3 +++ b/doc/doxyout/hx509/man/man3/hx509_lock.3 @@ -1,4 +1,4 @@ -.TH "hx509 lock functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 lock functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_misc.3 b/doc/doxyout/hx509/man/man3/hx509_misc.3 index 3e00ce14344..3abdd195b11 100644 --- a/doc/doxyout/hx509/man/man3/hx509_misc.3 +++ b/doc/doxyout/hx509/man/man3/hx509_misc.3 @@ -1,4 +1,4 @@ -.TH "hx509 misc functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 misc functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_name.3 b/doc/doxyout/hx509/man/man3/hx509_name.3 index 2e3f3eb1c12..d484db0d700 100644 --- a/doc/doxyout/hx509/man/man3/hx509_name.3 +++ b/doc/doxyout/hx509/man/man3/hx509_name.3 @@ -1,4 +1,4 @@ -.TH "hx509 name functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 name functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_peer.3 b/doc/doxyout/hx509/man/man3/hx509_peer.3 index 68382f242da..b5e9acd8f24 100644 --- a/doc/doxyout/hx509/man/man3/hx509_peer.3 +++ b/doc/doxyout/hx509/man/man3/hx509_peer.3 @@ -1,4 +1,4 @@ -.TH "hx509 certificate selecting functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 certificate selecting functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_print.3 b/doc/doxyout/hx509/man/man3/hx509_print.3 index 6523dc651c8..49945e3c288 100644 --- a/doc/doxyout/hx509/man/man3/hx509_print.3 +++ b/doc/doxyout/hx509/man/man3/hx509_print.3 @@ -1,4 +1,4 @@ -.TH "hx509 printing functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 printing functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_query.3 b/doc/doxyout/hx509/man/man3/hx509_query.3 index 3bf02a1ff11..259253fa16d 100644 --- a/doc/doxyout/hx509/man/man3/hx509_query.3 +++ b/doc/doxyout/hx509/man/man3/hx509_query.3 @@ -1,4 +1,4 @@ -.TH "hx509 query functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 query functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_revoke.3 b/doc/doxyout/hx509/man/man3/hx509_revoke.3 index d040cc5ad88..54ac6a0944c 100644 --- a/doc/doxyout/hx509/man/man3/hx509_revoke.3 +++ b/doc/doxyout/hx509/man/man3/hx509_revoke.3 @@ -1,4 +1,4 @@ -.TH "hx509 revokation checking functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 revokation checking functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/hx509_verify.3 b/doc/doxyout/hx509/man/man3/hx509_verify.3 index 2b7764593a7..6f0b86673e3 100644 --- a/doc/doxyout/hx509/man/man3/hx509_verify.3 +++ b/doc/doxyout/hx509/man/man3/hx509_verify.3 @@ -1,4 +1,4 @@ -.TH "hx509 verification functions" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "hx509 verification functions" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_ca.3 b/doc/doxyout/hx509/man/man3/page_ca.3 index 7caf10edbd8..3e95714fa17 100644 --- a/doc/doxyout/hx509/man/man3/page_ca.3 +++ b/doc/doxyout/hx509/man/man3/page_ca.3 @@ -1,4 +1,4 @@ -.TH "page_ca" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_ca" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_cert.3 b/doc/doxyout/hx509/man/man3/page_cert.3 index d445250c0f1..e0b1b345b19 100644 --- a/doc/doxyout/hx509/man/man3/page_cert.3 +++ b/doc/doxyout/hx509/man/man3/page_cert.3 @@ -1,4 +1,4 @@ -.TH "page_cert" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_cert" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_cms.3 b/doc/doxyout/hx509/man/man3/page_cms.3 index a8be947f531..c8090e03cf4 100644 --- a/doc/doxyout/hx509/man/man3/page_cms.3 +++ b/doc/doxyout/hx509/man/man3/page_cms.3 @@ -1,4 +1,4 @@ -.TH "page_cms" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_cms" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_env.3 b/doc/doxyout/hx509/man/man3/page_env.3 index d0012741ffb..5b323242c9a 100644 --- a/doc/doxyout/hx509/man/man3/page_env.3 +++ b/doc/doxyout/hx509/man/man3/page_env.3 @@ -1,4 +1,4 @@ -.TH "page_env" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_env" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_error.3 b/doc/doxyout/hx509/man/man3/page_error.3 index ed93a0406b7..f4381c77e70 100644 --- a/doc/doxyout/hx509/man/man3/page_error.3 +++ b/doc/doxyout/hx509/man/man3/page_error.3 @@ -1,4 +1,4 @@ -.TH "page_error" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_error" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_keyset.3 b/doc/doxyout/hx509/man/man3/page_keyset.3 index c2a7519f8e4..c1d78ee2dce 100644 --- a/doc/doxyout/hx509/man/man3/page_keyset.3 +++ b/doc/doxyout/hx509/man/man3/page_keyset.3 @@ -1,4 +1,4 @@ -.TH "page_keyset" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_keyset" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_lock.3 b/doc/doxyout/hx509/man/man3/page_lock.3 index 56fdd8656bc..bdc7f5bc993 100644 --- a/doc/doxyout/hx509/man/man3/page_lock.3 +++ b/doc/doxyout/hx509/man/man3/page_lock.3 @@ -1,4 +1,4 @@ -.TH "page_lock" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_lock" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_name.3 b/doc/doxyout/hx509/man/man3/page_name.3 index 8e8a9dfdea5..7a8aaad92e1 100644 --- a/doc/doxyout/hx509/man/man3/page_name.3 +++ b/doc/doxyout/hx509/man/man3/page_name.3 @@ -1,4 +1,4 @@ -.TH "page_name" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_name" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_peer.3 b/doc/doxyout/hx509/man/man3/page_peer.3 index 7e8b67e6d11..555f8c6e5f6 100644 --- a/doc/doxyout/hx509/man/man3/page_peer.3 +++ b/doc/doxyout/hx509/man/man3/page_peer.3 @@ -1,4 +1,4 @@ -.TH "page_peer" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_peer" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_print.3 b/doc/doxyout/hx509/man/man3/page_print.3 index 3837994ba76..4827596576b 100644 --- a/doc/doxyout/hx509/man/man3/page_print.3 +++ b/doc/doxyout/hx509/man/man3/page_print.3 @@ -1,4 +1,4 @@ -.TH "page_print" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_print" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/hx509/man/man3/page_revoke.3 b/doc/doxyout/hx509/man/man3/page_revoke.3 index 1d4a33a4458..62236acfefc 100644 --- a/doc/doxyout/hx509/man/man3/page_revoke.3 +++ b/doc/doxyout/hx509/man/man3/page_revoke.3 @@ -1,4 +1,4 @@ -.TH "page_revoke" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalx509library" \" -*- nroff -*- +.TH "page_revoke" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalx509library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/html/annotated.html b/doc/doxyout/krb5/html/annotated.html index a1b26bf40a4..2438f064dce 100644 --- a/doc/doxyout/krb5/html/annotated.html +++ b/doc/doxyout/krb5/html/annotated.html @@ -30,6 +30,6 @@
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/graph_legend.html b/doc/doxyout/krb5/html/graph_legend.html index 0446e821733..315a1ed8bc7 100644 --- a/doc/doxyout/krb5/html/graph_legend.html +++ b/doc/doxyout/krb5/html/graph_legend.html @@ -84,6 +84,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5.html b/doc/doxyout/krb5/html/group__krb5.html index 2c2163b4230..9ec9766e2c3 100644 --- a/doc/doxyout/krb5/html/group__krb5.html +++ b/doc/doxyout/krb5/html/group__krb5.html @@ -2232,6 +2232,6 @@ Return server principal in ticket

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__address.html b/doc/doxyout/krb5/html/group__krb5__address.html index 395e32360ea..09a713cb67c 100644 --- a/doc/doxyout/krb5/html/group__krb5__address.html +++ b/doc/doxyout/krb5/html/group__krb5__address.html @@ -998,6 +998,6 @@ krb5_sockaddr_uninteresting returns TRUE for all .Fa sa that the kerberos librar

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__auth.html b/doc/doxyout/krb5/html/group__krb5__auth.html index 26fcd3ab55a..15c14f3e254 100644 --- a/doc/doxyout/krb5/html/group__krb5__auth.html +++ b/doc/doxyout/krb5/html/group__krb5__auth.html @@ -315,6 +315,6 @@ Get the principal that was used in the request from the client. Might not match

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__ccache.html b/doc/doxyout/krb5/html/group__krb5__ccache.html index 7f2c77f84ea..61fa8893ef5 100644 --- a/doc/doxyout/krb5/html/group__krb5__ccache.html +++ b/doc/doxyout/krb5/html/group__krb5__ccache.html @@ -2259,6 +2259,6 @@ Return TRUE (non zero) if the principal is a configuration principal (generated

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:48 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__credential.html b/doc/doxyout/krb5/html/group__krb5__credential.html index c43802a3023..5dc2150ba09 100644 --- a/doc/doxyout/krb5/html/group__krb5__credential.html +++ b/doc/doxyout/krb5/html/group__krb5__credential.html @@ -853,6 +853,6 @@ If the caller want all work been done for them, use
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__crypto.html b/doc/doxyout/krb5/html/group__krb5__crypto.html index d3e6dc3c8ca..dfbe535f02e 100644 --- a/doc/doxyout/krb5/html/group__krb5__crypto.html +++ b/doc/doxyout/krb5/html/group__krb5__crypto.html @@ -1257,6 +1257,6 @@ Verify a Kerberos message checksum.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:48 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__deprecated.html b/doc/doxyout/krb5/html/group__krb5__deprecated.html index cdcec342485..8252852c3a9 100644 --- a/doc/doxyout/krb5/html/group__krb5__deprecated.html +++ b/doc/doxyout/krb5/html/group__krb5__deprecated.html @@ -1284,6 +1284,6 @@ Deprecated: use krb5_vset_error_message()

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__digest.html b/doc/doxyout/krb5/html/group__krb5__digest.html index d977e5dffb8..f4f9492307a 100644 --- a/doc/doxyout/krb5/html/group__krb5__digest.html +++ b/doc/doxyout/krb5/html/group__krb5__digest.html @@ -82,6 +82,6 @@ Get the supported/allowed mechanism for this principal.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__error.html b/doc/doxyout/krb5/html/group__krb5__error.html index 3c192e5ebf3..dc87eadb328 100644 --- a/doc/doxyout/krb5/html/group__krb5__error.html +++ b/doc/doxyout/krb5/html/group__krb5__error.html @@ -234,6 +234,6 @@ Log a warning to the log, default stderr, include the error from the last failur

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__keytab.html b/doc/doxyout/krb5/html/group__krb5__keytab.html index 9447c29fd14..4c56efaf346 100644 --- a/doc/doxyout/krb5/html/group__krb5__keytab.html +++ b/doc/doxyout/krb5/html/group__krb5__keytab.html @@ -1050,6 +1050,6 @@ Set `cursor' to point at the beginning of `id'.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__pac.html b/doc/doxyout/krb5/html/group__krb5__pac.html index 45dddb6cf76..58bc66bfe3a 100644 --- a/doc/doxyout/krb5/html/group__krb5__pac.html +++ b/doc/doxyout/krb5/html/group__krb5__pac.html @@ -150,6 +150,6 @@ Verify the PAC.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__principal.html b/doc/doxyout/krb5/html/group__krb5__principal.html index 678478a12e3..eb17acc2fed 100644 --- a/doc/doxyout/krb5/html/group__krb5__principal.html +++ b/doc/doxyout/krb5/html/group__krb5__principal.html @@ -1175,6 +1175,6 @@ Unparse the principal name to a allocated buffer. The realm is skipped if its a

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:48 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__storage.html b/doc/doxyout/krb5/html/group__krb5__storage.html index 71c0e02aa5b..06825baba62 100644 --- a/doc/doxyout/krb5/html/group__krb5__storage.html +++ b/doc/doxyout/krb5/html/group__krb5__storage.html @@ -2087,6 +2087,6 @@ Store a uint8 to storage.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__support.html b/doc/doxyout/krb5/html/group__krb5__support.html index 8c6545fc39b..0f733ae72f0 100644 --- a/doc/doxyout/krb5/html/group__krb5__support.html +++ b/doc/doxyout/krb5/html/group__krb5__support.html @@ -1315,6 +1315,6 @@ Register a plugin symbol name of specific type.
    Parameters:

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__ticket.html b/doc/doxyout/krb5/html/group__krb5__ticket.html index 38400ab7f21..818d83c0ea3 100644 --- a/doc/doxyout/krb5/html/group__krb5__ticket.html +++ b/doc/doxyout/krb5/html/group__krb5__ticket.html @@ -68,6 +68,6 @@ Get the flags from the Kerberos ticket

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/group__krb5__v4compat.html b/doc/doxyout/krb5/html/group__krb5__v4compat.html index 6acfb9e7857..0ddefa47f2a 100644 --- a/doc/doxyout/krb5/html/group__krb5__v4compat.html +++ b/doc/doxyout/krb5/html/group__krb5__v4compat.html @@ -129,6 +129,6 @@ Convert the v5 credentials in in_cred to v4-dito in v4creds, check the credentia

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:49 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/index.html b/doc/doxyout/krb5/html/index.html index aed57556e58..1152d065c92 100644 --- a/doc/doxyout/krb5/html/index.html +++ b/doc/doxyout/krb5/html/index.html @@ -22,7 +22,7 @@

    Heimdal Kerberos 5 library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal libkrb5 library is a implementation of the Kerberos protocol.

    Kerberos is a system for authenticating users and services on a network. It is built upon the assumption that the network is ``unsafe''. For example, data sent over the network can be eavesdropped and altered, and addresses can also be faked. Therefore they cannot be used for authentication purposes.

    @@ -32,6 +32,6 @@ Kerberos is a system for authenticating users and services on a network. It is b If you want to know more about the file formats that is used by Heimdal, please see: File formats

    The project web page: http://www.h5l.org/

    -Generated on Fri Sep 30 15:26:18 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_ccache_intro.html b/doc/doxyout/krb5/html/krb5_ccache_intro.html index a0992dc66a9..d89b0e0960c 100644 --- a/doc/doxyout/krb5/html/krb5_ccache_intro.html +++ b/doc/doxyout/krb5/html/krb5_ccache_intro.html @@ -69,6 +69,6 @@ main (int argc, char< }
    -Generated on Fri Sep 30 15:26:18 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_fileformats.html b/doc/doxyout/krb5/html/krb5_fileformats.html index 543ba048abd..04482fc79d4 100644 --- a/doc/doxyout/krb5/html/krb5_fileformats.html +++ b/doc/doxyout/krb5/html/krb5_fileformats.html @@ -149,6 +149,6 @@ The generation can be defaulted (using '-') or the empty string

    HDB-extension is encoded the DER encoded HDB-Extension from lib/hdb/hdb.asn1. Consumers HDB extensions should be aware that unknown entires needs to be preserved even thought the ASN.1 data content might be unknown. There is a critical flag in the data to show to the KDC that the entry MUST be understod if the entry is to be used.

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_init_creds_intro.html b/doc/doxyout/krb5/html/krb5_init_creds_intro.html index a9b43a255e1..ca8615d8f2c 100644 --- a/doc/doxyout/krb5/html/krb5_init_creds_intro.html +++ b/doc/doxyout/krb5/html/krb5_init_creds_intro.html @@ -24,6 +24,6 @@ Initial credential Functions to get initial credentials: Heimdal Kerberos 5 credential handing functions .
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_introduction.html b/doc/doxyout/krb5/html/krb5_introduction.html index 8745a342f05..a7b7d1caa4a 100644 --- a/doc/doxyout/krb5/html/krb5_introduction.html +++ b/doc/doxyout/krb5/html/krb5_introduction.html @@ -199,6 +199,6 @@ Error messages To get the error string, Heimdal uses krb5_get_error_message(). This is to return custom error messages (like ``Can't find host/datan.example.com@CODE.COM in /etc/krb5.conf.'' instead of a ``Key table entry not found'' that error_message returns.

    Heimdal uses a threadsafe(r) version of the com_err interface; the global com_err table isn't initialised. Then error_message returns quite a boring error string (just the error code itself).

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_keytab_intro.html b/doc/doxyout/krb5/html/krb5_keytab_intro.html index 814d5351507..684ed7d0bd5 100644 --- a/doc/doxyout/krb5/html/krb5_keytab_intro.html +++ b/doc/doxyout/krb5/html/krb5_keytab_intro.html @@ -77,6 +77,6 @@ main (int argc, char< }
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/krb5_principal_intro.html b/doc/doxyout/krb5/html/krb5_principal_intro.html index 7cdb71d0609..cfb061e955e 100644 --- a/doc/doxyout/krb5/html/krb5_principal_intro.html +++ b/doc/doxyout/krb5/html/krb5_principal_intro.html @@ -27,6 +27,6 @@ host/admin@H5L.ORG

    See the library functions here: Heimdal Kerberos 5 principal functions

    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/modules.html b/doc/doxyout/krb5/html/modules.html index 0f566ae2647..74aa0ccfe6c 100644 --- a/doc/doxyout/krb5/html/modules.html +++ b/doc/doxyout/krb5/html/modules.html @@ -40,6 +40,6 @@
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/pages.html b/doc/doxyout/krb5/html/pages.html index 63a1d90f49d..1ac91a45b4a 100644 --- a/doc/doxyout/krb5/html/pages.html +++ b/doc/doxyout/krb5/html/pages.html @@ -36,6 +36,6 @@
    -Generated on Fri Sep 30 15:26:18 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:47 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/html/structkrb5__crypto__iov.html b/doc/doxyout/krb5/html/structkrb5__crypto__iov.html index 04681815271..baa22460392 100644 --- a/doc/doxyout/krb5/html/structkrb5__crypto__iov.html +++ b/doc/doxyout/krb5/html/structkrb5__crypto__iov.html @@ -32,9 +32,9 @@

    Detailed Description

    Semi private, not stable yet
    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/krb5/krb5.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/krb5/krb5.h
    -Generated on Fri Sep 30 15:26:19 2011 for HeimdalKerberos5library by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for HeimdalKerberos5library by doxygen 1.5.6 diff --git a/doc/doxyout/krb5/man/man3/krb5.3 b/doc/doxyout/krb5/man/man3/krb5.3 index a6661bd923d..9fe76079a2a 100644 --- a/doc/doxyout/krb5/man/man3/krb5.3 +++ b/doc/doxyout/krb5/man/man3/krb5.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 library" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 library" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_address.3 b/doc/doxyout/krb5/man/man3/krb5_address.3 index 9b2e5d92984..8d273c8a6f8 100644 --- a/doc/doxyout/krb5/man/man3/krb5_address.3 +++ b/doc/doxyout/krb5/man/man3/krb5_address.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 address functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 address functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_auth.3 b/doc/doxyout/krb5/man/man3/krb5_auth.3 index 58edda697d4..dd4013b2ac1 100644 --- a/doc/doxyout/krb5/man/man3/krb5_auth.3 +++ b/doc/doxyout/krb5/man/man3/krb5_auth.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 authentication functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 authentication functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_ccache.3 b/doc/doxyout/krb5/man/man3/krb5_ccache.3 index 3c9b05e0086..796640b9327 100644 --- a/doc/doxyout/krb5/man/man3/krb5_ccache.3 +++ b/doc/doxyout/krb5/man/man3/krb5_ccache.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 credential cache functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 credential cache functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_ccache_intro.3 b/doc/doxyout/krb5/man/man3/krb5_ccache_intro.3 index c5ac4acd1ea..c88c31df662 100644 --- a/doc/doxyout/krb5/man/man3/krb5_ccache_intro.3 +++ b/doc/doxyout/krb5/man/man3/krb5_ccache_intro.3 @@ -1,4 +1,4 @@ -.TH "krb5_ccache_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_ccache_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_credential.3 b/doc/doxyout/krb5/man/man3/krb5_credential.3 index 40cda97ab5d..adb919fa2e5 100644 --- a/doc/doxyout/krb5/man/man3/krb5_credential.3 +++ b/doc/doxyout/krb5/man/man3/krb5_credential.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 credential handing functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 credential handing functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_crypto.3 b/doc/doxyout/krb5/man/man3/krb5_crypto.3 index 79367b19897..55adfa3ed8c 100644 --- a/doc/doxyout/krb5/man/man3/krb5_crypto.3 +++ b/doc/doxyout/krb5/man/man3/krb5_crypto.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 cryptography functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 cryptography functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_crypto_iov.3 b/doc/doxyout/krb5/man/man3/krb5_crypto_iov.3 index fa74965198d..6f0e815673d 100644 --- a/doc/doxyout/krb5/man/man3/krb5_crypto_iov.3 +++ b/doc/doxyout/krb5/man/man3/krb5_crypto_iov.3 @@ -1,4 +1,4 @@ -.TH "krb5_crypto_iov" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_crypto_iov" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_deprecated.3 b/doc/doxyout/krb5/man/man3/krb5_deprecated.3 index ea0c90144e6..840df01a700 100644 --- a/doc/doxyout/krb5/man/man3/krb5_deprecated.3 +++ b/doc/doxyout/krb5/man/man3/krb5_deprecated.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 deprecated functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 deprecated functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_digest.3 b/doc/doxyout/krb5/man/man3/krb5_digest.3 index 1be62851d66..e447cf0bdd9 100644 --- a/doc/doxyout/krb5/man/man3/krb5_digest.3 +++ b/doc/doxyout/krb5/man/man3/krb5_digest.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 digest service" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 digest service" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_error.3 b/doc/doxyout/krb5/man/man3/krb5_error.3 index 7ada02c3997..4d2baf29318 100644 --- a/doc/doxyout/krb5/man/man3/krb5_error.3 +++ b/doc/doxyout/krb5/man/man3/krb5_error.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 error reporting functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 error reporting functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_fileformats.3 b/doc/doxyout/krb5/man/man3/krb5_fileformats.3 index 2a2663f4425..f601d942f12 100644 --- a/doc/doxyout/krb5/man/man3/krb5_fileformats.3 +++ b/doc/doxyout/krb5/man/man3/krb5_fileformats.3 @@ -1,4 +1,4 @@ -.TH "krb5_fileformats" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_fileformats" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_init_creds_intro.3 b/doc/doxyout/krb5/man/man3/krb5_init_creds_intro.3 index d24d0a02609..06edd251cec 100644 --- a/doc/doxyout/krb5/man/man3/krb5_init_creds_intro.3 +++ b/doc/doxyout/krb5/man/man3/krb5_init_creds_intro.3 @@ -1,4 +1,4 @@ -.TH "krb5_init_creds_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_init_creds_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_introduction.3 b/doc/doxyout/krb5/man/man3/krb5_introduction.3 index 14cf52f69db..5f09a174e54 100644 --- a/doc/doxyout/krb5/man/man3/krb5_introduction.3 +++ b/doc/doxyout/krb5/man/man3/krb5_introduction.3 @@ -1,4 +1,4 @@ -.TH "krb5_introduction" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_introduction" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_keytab.3 b/doc/doxyout/krb5/man/man3/krb5_keytab.3 index 3c76f400d5e..f0fa2363333 100644 --- a/doc/doxyout/krb5/man/man3/krb5_keytab.3 +++ b/doc/doxyout/krb5/man/man3/krb5_keytab.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 keytab handling functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 keytab handling functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_keytab_intro.3 b/doc/doxyout/krb5/man/man3/krb5_keytab_intro.3 index ee3eff2ce4c..f66e48176e7 100644 --- a/doc/doxyout/krb5/man/man3/krb5_keytab_intro.3 +++ b/doc/doxyout/krb5/man/man3/krb5_keytab_intro.3 @@ -1,4 +1,4 @@ -.TH "krb5_keytab_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_keytab_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_pac.3 b/doc/doxyout/krb5/man/man3/krb5_pac.3 index d4ea6d22930..85daffca9da 100644 --- a/doc/doxyout/krb5/man/man3/krb5_pac.3 +++ b/doc/doxyout/krb5/man/man3/krb5_pac.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 PAC handling functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 PAC handling functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_principal.3 b/doc/doxyout/krb5/man/man3/krb5_principal.3 index 23ceedf156b..cba91dd1d9e 100644 --- a/doc/doxyout/krb5/man/man3/krb5_principal.3 +++ b/doc/doxyout/krb5/man/man3/krb5_principal.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 principal functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 principal functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_principal_intro.3 b/doc/doxyout/krb5/man/man3/krb5_principal_intro.3 index 4f496fa3b85..55e1491c4ed 100644 --- a/doc/doxyout/krb5/man/man3/krb5_principal_intro.3 +++ b/doc/doxyout/krb5/man/man3/krb5_principal_intro.3 @@ -1,4 +1,4 @@ -.TH "krb5_principal_intro" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "krb5_principal_intro" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_storage.3 b/doc/doxyout/krb5/man/man3/krb5_storage.3 index 0db3d661a3d..cd11cdf24a7 100644 --- a/doc/doxyout/krb5/man/man3/krb5_storage.3 +++ b/doc/doxyout/krb5/man/man3/krb5_storage.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 storage functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 storage functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_support.3 b/doc/doxyout/krb5/man/man3/krb5_support.3 index 524a6b98e7b..bfb6c917b93 100644 --- a/doc/doxyout/krb5/man/man3/krb5_support.3 +++ b/doc/doxyout/krb5/man/man3/krb5_support.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 support functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 support functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_ticket.3 b/doc/doxyout/krb5/man/man3/krb5_ticket.3 index 4ae51129237..0b2ee9d01e2 100644 --- a/doc/doxyout/krb5/man/man3/krb5_ticket.3 +++ b/doc/doxyout/krb5/man/man3/krb5_ticket.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 5 ticket functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 5 ticket functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/krb5/man/man3/krb5_v4compat.3 b/doc/doxyout/krb5/man/man3/krb5_v4compat.3 index 8d80e3edcf6..ccc17a641a5 100644 --- a/doc/doxyout/krb5/man/man3/krb5_v4compat.3 +++ b/doc/doxyout/krb5/man/man3/krb5_v4compat.3 @@ -1,4 +1,4 @@ -.TH "Heimdal Kerberos 4 compatiblity functions" 3 "30 Sep 2011" "Version 1.5.1" "HeimdalKerberos5library" \" -*- nroff -*- +.TH "Heimdal Kerberos 4 compatiblity functions" 3 "11 Jan 2012" "Version 1.5.2" "HeimdalKerberos5library" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/ntlm/html/annotated.html b/doc/doxyout/ntlm/html/annotated.html index 25571647c1a..39e350e9448 100644 --- a/doc/doxyout/ntlm/html/annotated.html +++ b/doc/doxyout/ntlm/html/annotated.html @@ -34,6 +34,6 @@
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/examples.html b/doc/doxyout/ntlm/html/examples.html index 03f1863703b..38ea254e0cf 100644 --- a/doc/doxyout/ntlm/html/examples.html +++ b/doc/doxyout/ntlm/html/examples.html @@ -25,6 +25,6 @@
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/functions.html b/doc/doxyout/ntlm/html/functions.html index 4e61376d166..e0eaa24d502 100644 --- a/doc/doxyout/ntlm/html/functions.html +++ b/doc/doxyout/ntlm/html/functions.html @@ -73,6 +73,6 @@ Here is a list of all documented struct and union fields with links to the struc
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/functions_vars.html b/doc/doxyout/ntlm/html/functions_vars.html index 378c553840d..4bd1cc8fe80 100644 --- a/doc/doxyout/ntlm/html/functions_vars.html +++ b/doc/doxyout/ntlm/html/functions_vars.html @@ -73,6 +73,6 @@
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/graph_legend.html b/doc/doxyout/ntlm/html/graph_legend.html index 6caf3381420..dbffc4bd1b0 100644 --- a/doc/doxyout/ntlm/html/graph_legend.html +++ b/doc/doxyout/ntlm/html/graph_legend.html @@ -84,6 +84,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/group__ntlm__core.html b/doc/doxyout/ntlm/html/group__ntlm__core.html index d6776dfa5ee..f566b718f43 100644 --- a/doc/doxyout/ntlm/html/group__ntlm__core.html +++ b/doc/doxyout/ntlm/html/group__ntlm__core.html @@ -931,6 +931,6 @@ Verify NTLMv2 response.

    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/index.html b/doc/doxyout/ntlm/html/index.html index 5f1b39a2fb7..df82ae1ca14 100644 --- a/doc/doxyout/ntlm/html/index.html +++ b/doc/doxyout/ntlm/html/index.html @@ -22,7 +22,7 @@

    Heimdal NTLM library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal libheimntlm library is a implementation of the NTLM protocol, both version 1 and 2. The GSS-API mech that uses this library adds support for transport encryption and integrity checking.

    NTLM is a protocol for mutual authentication, its still used in many protocol where Kerberos is not support, one example is EAP/X802.1x mechanism LEAP from Microsoft and Cisco.

    @@ -32,6 +32,6 @@ The Heimdal projects web page: http://www.h5l.org/ NTLM Example

    Example to to use test_ntlm::c .
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/modules.html b/doc/doxyout/ntlm/html/modules.html index 408e99cb77d..7aa7cd3ed8a 100644 --- a/doc/doxyout/ntlm/html/modules.html +++ b/doc/doxyout/ntlm/html/modules.html @@ -25,6 +25,6 @@
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/structntlm__buf.html b/doc/doxyout/ntlm/html/structntlm__buf.html index dca8f24a971..74805df4011 100644 --- a/doc/doxyout/ntlm/html/structntlm__buf.html +++ b/doc/doxyout/ntlm/html/structntlm__buf.html @@ -74,9 +74,9 @@ pointer to the data itself
    Examples:

    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/ntlm/heimntlm.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/ntlm/heimntlm.h
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/structntlm__type1.html b/doc/doxyout/ntlm/html/structntlm__type1.html index 7b3e8e6d383..9d784d59522 100644 --- a/doc/doxyout/ntlm/html/structntlm__type1.html +++ b/doc/doxyout/ntlm/html/structntlm__type1.html @@ -110,9 +110,9 @@ Struct for the NTLM type1 message info, the strings is assumed to be in UTF8. Wh

    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/ntlm/heimntlm.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/ntlm/heimntlm.h
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/structntlm__type2.html b/doc/doxyout/ntlm/html/structntlm__type2.html index 959405923b9..08bd883ea4b 100644 --- a/doc/doxyout/ntlm/html/structntlm__type2.html +++ b/doc/doxyout/ntlm/html/structntlm__type2.html @@ -151,9 +151,9 @@ Struct for the NTLM type2 message info, the strings is assumed to be in UTF8. Wh

    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/ntlm/heimntlm.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/ntlm/heimntlm.h
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/structntlm__type3.html b/doc/doxyout/ntlm/html/structntlm__type3.html index 2edea39efed..f15e4a75b25 100644 --- a/doc/doxyout/ntlm/html/structntlm__type3.html +++ b/doc/doxyout/ntlm/html/structntlm__type3.html @@ -186,9 +186,9 @@ Struct for the NTLM type3 message info, the strings is assumed to be in UTF8. Wh

    The documentation for this struct was generated from the following file:
      -
    • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.1/lib/ntlm/heimntlm.h
    +
  • /Users/lha/src/heimdal/heimdal-release/heimdal-1.5.2/lib/ntlm/heimntlm.h
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/html/test__ntlm_8c-example.html b/doc/doxyout/ntlm/html/test__ntlm_8c-example.html index b9087796680..3beb0ec2233 100644 --- a/doc/doxyout/ntlm/html/test__ntlm_8c-example.html +++ b/doc/doxyout/ntlm/html/test__ntlm_8c-example.html @@ -403,6 +403,6 @@ main(int argc, char
    -Generated on Fri Sep 30 15:26:19 2011 for Heimdalntlmlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:50 2012 for Heimdalntlmlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/ntlm/man/man3/ntlm_buf.3 b/doc/doxyout/ntlm/man/man3/ntlm_buf.3 index 52fdc03f879..9077d5b2384 100644 --- a/doc/doxyout/ntlm/man/man3/ntlm_buf.3 +++ b/doc/doxyout/ntlm/man/man3/ntlm_buf.3 @@ -1,4 +1,4 @@ -.TH "ntlm_buf" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalntlmlibrary" \" -*- nroff -*- +.TH "ntlm_buf" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalntlmlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/ntlm/man/man3/ntlm_core.3 b/doc/doxyout/ntlm/man/man3/ntlm_core.3 index 50599af98e8..5341cc0c707 100644 --- a/doc/doxyout/ntlm/man/man3/ntlm_core.3 +++ b/doc/doxyout/ntlm/man/man3/ntlm_core.3 @@ -1,4 +1,4 @@ -.TH "Heimdal NTLM library" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalntlmlibrary" \" -*- nroff -*- +.TH "Heimdal NTLM library" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalntlmlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/ntlm/man/man3/ntlm_type1.3 b/doc/doxyout/ntlm/man/man3/ntlm_type1.3 index 3b4f2afa116..8d2be92da63 100644 --- a/doc/doxyout/ntlm/man/man3/ntlm_type1.3 +++ b/doc/doxyout/ntlm/man/man3/ntlm_type1.3 @@ -1,4 +1,4 @@ -.TH "ntlm_type1" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalntlmlibrary" \" -*- nroff -*- +.TH "ntlm_type1" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalntlmlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/ntlm/man/man3/ntlm_type2.3 b/doc/doxyout/ntlm/man/man3/ntlm_type2.3 index e46eeb37e6d..76a42075b26 100644 --- a/doc/doxyout/ntlm/man/man3/ntlm_type2.3 +++ b/doc/doxyout/ntlm/man/man3/ntlm_type2.3 @@ -1,4 +1,4 @@ -.TH "ntlm_type2" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalntlmlibrary" \" -*- nroff -*- +.TH "ntlm_type2" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalntlmlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/ntlm/man/man3/ntlm_type3.3 b/doc/doxyout/ntlm/man/man3/ntlm_type3.3 index 6f20c58b7a9..02d6a49672b 100644 --- a/doc/doxyout/ntlm/man/man3/ntlm_type3.3 +++ b/doc/doxyout/ntlm/man/man3/ntlm_type3.3 @@ -1,4 +1,4 @@ -.TH "ntlm_type3" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalntlmlibrary" \" -*- nroff -*- +.TH "ntlm_type3" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalntlmlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/doxyout/wind/html/graph_legend.html b/doc/doxyout/wind/html/graph_legend.html index 78e1121b257..faec78c3c3f 100644 --- a/doc/doxyout/wind/html/graph_legend.html +++ b/doc/doxyout/wind/html/graph_legend.html @@ -82,6 +82,6 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalwindlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalwindlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/wind/html/group__wind.html b/doc/doxyout/wind/html/group__wind.html index 5bd5752d066..6c9b5f75aaa 100644 --- a/doc/doxyout/wind/html/group__wind.html +++ b/doc/doxyout/wind/html/group__wind.html @@ -675,6 +675,6 @@ Calculate the length of from converting a UTF-8 string to a UCS4 string.

    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalwindlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalwindlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/wind/html/index.html b/doc/doxyout/wind/html/index.html index 1bef61c2e3b..5af2d2cc8e3 100644 --- a/doc/doxyout/wind/html/index.html +++ b/doc/doxyout/wind/html/index.html @@ -20,11 +20,11 @@

    Heimdal wind library

    -

    1.5.1

    +

    1.5.2

    Introduction

    Heimdal wind library is a implementation of stringprep and some of its profiles.

    The project web page: http://www.h5l.org/

    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalwindlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalwindlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/wind/html/modules.html b/doc/doxyout/wind/html/modules.html index 25dc32ee98d..6dd34ebba96 100644 --- a/doc/doxyout/wind/html/modules.html +++ b/doc/doxyout/wind/html/modules.html @@ -23,6 +23,6 @@
    -Generated on Fri Sep 30 15:26:20 2011 for Heimdalwindlibrary by doxygen 1.5.6
    +Generated on Wed Jan 11 14:07:51 2012 for Heimdalwindlibrary by doxygen 1.5.6 diff --git a/doc/doxyout/wind/man/man3/wind.3 b/doc/doxyout/wind/man/man3/wind.3 index f95461b9718..ee3ed9b8c9f 100644 --- a/doc/doxyout/wind/man/man3/wind.3 +++ b/doc/doxyout/wind/man/man3/wind.3 @@ -1,4 +1,4 @@ -.TH "Heimdal wind library" 3 "30 Sep 2011" "Version 1.5.1" "Heimdalwindlibrary" \" -*- nroff -*- +.TH "Heimdal wind library" 3 "11 Jan 2012" "Version 1.5.2" "Heimdalwindlibrary" \" -*- nroff -*- .ad l .nh .SH NAME diff --git a/doc/heimdal.info b/doc/heimdal.info index 434e1de5162..1f4e139bde4 100644 --- a/doc/heimdal.info +++ b/doc/heimdal.info @@ -12,7 +12,7 @@ File: heimdal.info, Node: Top, Next: Introduction, Prev: (dir), Up: (dir) Heimdal ******* -This manual for version 1.5.1 of Heimdal. +This manual for version 1.5.2 of Heimdal. * Menu: @@ -37,7 +37,6 @@ Setting up a realm * Creating the database:: * Modifying the database:: * keytabs:: -* Serving Kerberos 4/524/kaserver:: * Remote administration:: * Password changing:: * Testing clients and servers:: @@ -66,7 +65,6 @@ Kerberos 4 issues * Principal conversion issues:: * Converting a version 4 database:: -* kaserver:: Windows compatibility @@ -135,8 +133,7 @@ works): * some simple test programs - * a KDC that supports most things; optionally, it may also support - Kerberos V4 and kaserver, + * a KDC that supports most things, * simple programs for distributing databases between a KDC master and slaves @@ -329,7 +326,6 @@ doing so. It will make life easier for you and everyone else. * Modifying the database:: * Checking the setup:: * keytabs:: -* Serving Kerberos 4/524/kaserver:: * Remote administration:: * Password changing:: * Testing clients and servers:: @@ -580,7 +576,7 @@ by run by the following command : kadmin -l check REALM.EXAMPLE.ORG  -File: heimdal.info, Node: keytabs, Next: Serving Kerberos 4/524/kaserver, Prev: Checking the setup, Up: Setting up a realm +File: heimdal.info, Node: keytabs, Next: Remote administration, Prev: Checking the setup, Up: Setting up a realm 4.5 keytabs =========== @@ -604,60 +600,9 @@ with `ext_keytab'. 1 des3-cbc-sha1 host/my.host.name@MY.REALM  -File: heimdal.info, Node: Serving Kerberos 4/524/kaserver, Next: Remote administration, Prev: keytabs, Up: Setting up a realm +File: heimdal.info, Node: Remote administration, Next: Password changing, Prev: keytabs, Up: Setting up a realm -4.6 Serving Kerberos 4/524/kaserver -=================================== - -Heimdal can be configured to support 524, Kerberos 4 or kaserver. All -these services are turned off by default. Kerberos 4 is always -supported by the KDC, but the Kerberos 4 client support also depends on -Kerberos 4 support having been included at compile-time, using -`--with-krb4=dir'. - -4.6.1 524 ---------- - -524 is a service that allows the KDC to convert Kerberos 5 tickets to -Kerberos 4 tickets for backward compatibility. See also Using 2b tokens -with AFS in *Note AFS::. - -524 can be turned on by adding this to the configuration file - - [kdc] - enable-524 = yes - -4.6.2 Kerberos 4 ----------------- - -Kerberos 4 is the predecessor to to Kerberos 5. It only supports single -DES. You should only enable Kerberos 4 support if you have needs for -compatibility with an installed base of Kerberos 4 clients/servers. - -Kerberos 4 can be turned on by adding this to the configuration file - - [kdc] - enable-kerberos4 = yes - -4.6.3 kaserver --------------- - -Kaserver is a Kerberos 4 that is used in AFS. The protocol has some -extra features over plain Kerberos 4, but like Kerberos 4, only uses -single DES. - -You should only enable Kaserver support if you have needs for -compatibility with an installed base of AFS machines. - -Kaserver can be turned on by adding this to the configuration file - - [kdc] - enable-kaserver = yes - - -File: heimdal.info, Node: Remote administration, Next: Password changing, Prev: Serving Kerberos 4/524/kaserver, Up: Setting up a realm - -4.7 Remote administration +4.6 Remote administration ========================= The administration server, `kadmind', can be started by `inetd' (which @@ -703,7 +648,7 @@ principal.  File: heimdal.info, Node: Password changing, Next: Testing clients and servers, Prev: Remote administration, Up: Setting up a realm -4.8 Password changing +4.7 Password changing ===================== To allow users to change their passwords, you should run `kpasswdd'. @@ -720,7 +665,7 @@ on client machines: kpasswd_server = my.kdc } -4.8.1 Password quality assurance +4.7.1 Password quality assurance -------------------------------- It is important that users have good passwords, both to make it harder @@ -807,7 +752,7 @@ test version of `krb5.conf' while you're testing the  File: heimdal.info, Node: Testing clients and servers, Next: Slave Servers, Prev: Password changing, Up: Setting up a realm -4.9 Testing clients and servers +4.8 Testing clients and servers =============================== Now you should be able to run all the clients and servers. Refer to the @@ -816,8 +761,8 @@ appropriate man pages for information on how to use them.  File: heimdal.info, Node: Slave Servers, Next: Incremental propagation, Prev: Testing clients and servers, Up: Setting up a realm -4.10 Slave servers, Incremental propagation, Testing clients and servers, Setting up a realm -============================================================================================ +4.9 Slave servers, Incremental propagation, Testing clients and servers, Setting up a realm +=========================================================================================== It is desirable to have at least one backup (slave) server in case the master server fails. It is possible to have any number of such slave @@ -856,7 +801,7 @@ probably a good idea.  File: heimdal.info, Node: Incremental propagation, Next: Encryption types and salting, Prev: Slave Servers, Up: Setting up a realm -4.11 Incremental propagation +4.10 Incremental propagation ============================ There is also a newer mechanism for doing incremental propagation in @@ -884,7 +829,7 @@ for new version in the log file. As a fallback in case a notification is lost by the unix socket, the log file is checked after 30 seconds of no event. -4.11.1 Configuring incremental propagation +4.10.1 Configuring incremental propagation ------------------------------------------ The program that runs on the master is `ipropd-master' and all clients @@ -925,7 +870,7 @@ With it you can dump, truncate and replay the logfile.  File: heimdal.info, Node: Encryption types and salting, Next: Credential cache server - KCM, Prev: Incremental propagation, Up: Setting up a realm -4.12 Encryption types and salting +4.11 Encryption types and salting ================================= The encryption types that the KDC is going to assign by default is @@ -983,7 +928,7 @@ Common types of salting include  File: heimdal.info, Node: Credential cache server - KCM, Next: Cross realm, Prev: Encryption types and salting, Up: Setting up a realm -4.13 Credential cache server - KCM +4.12 Credential cache server - KCM ================================== When KCM running is easy for users to switch between different kerberos @@ -1041,7 +986,7 @@ default credential).  File: heimdal.info, Node: Cross realm, Next: Transit policy, Prev: Credential cache server - KCM, Up: Setting up a realm -4.14 Cross realm +4.13 Cross realm ================ Suppose you reside in the realm `MY.REALM', how do you authenticate to @@ -1102,7 +1047,7 @@ safe manner.  File: heimdal.info, Node: Transit policy, Next: Setting up DNS, Prev: Cross realm, Up: Setting up a realm -4.15 Transit policy +4.14 Transit policy =================== Under some circumstances, you may not wish to set up direct cross-realm @@ -1123,7 +1068,7 @@ In addition, the client in realm A need to be configured to know how to reach realm C via realm B. This can be done either on the client or via KDC configuration in the KDC for realm A. -4.15.1 Allowing cross-realm transits +4.14.1 Allowing cross-realm transits ------------------------------------ When the ticket transits through a realm to another realm, the @@ -1174,7 +1119,7 @@ transits through. The order of the `PERMITTED-CROSS-REALMS' is not important when doing transit cross realm verification. -4.15.2 Configuring client cross-realm transits +4.14.2 Configuring client cross-realm transits ---------------------------------------------- The `[capaths]' section is also used for another purpose: to tell @@ -1209,7 +1154,7 @@ there to `STACKEN.KTH.SE' and get stuck (unless, of course, the `SU.SE' KDC had the additional entry required to tell the client to go through `KTH.SE'). -4.15.3 Active Directory forest example +4.14.3 Active Directory forest example -------------------------------------- One common place where a `[capaths]' configuration is desirable is with @@ -1251,10 +1196,10 @@ authentication.  File: heimdal.info, Node: Setting up DNS, Next: Using LDAP to store the database, Prev: Transit policy, Up: Setting up a realm -4.16 Setting up DNS +4.15 Setting up DNS =================== -4.16.1 Using DNS to find KDC +4.15.1 Using DNS to find KDC ---------------------------- If there is information about where to find the KDC or kadmind for a @@ -1290,7 +1235,7 @@ An example of the configuration for the realm `EXAMPLE.COM': More information about DNS SRV resource records can be found in RFC-2782 (A DNS RR for specifying the location of services (DNS SRV)). -4.16.2 Using DNS to map hostname to Kerberos realm +4.15.2 Using DNS to map hostname to Kerberos realm -------------------------------------------------- Heimdal also supports a way to lookup a realm from a hostname. This to @@ -1311,7 +1256,7 @@ EXAMPLE.COM:  File: heimdal.info, Node: Using LDAP to store the database, Next: Providing Kerberos credentials to servers and programs, Prev: Setting up DNS, Up: Setting up a realm -4.17 Using LDAP to store the database +4.16 Using LDAP to store the database ===================================== This document describes how to install the LDAP backend for Heimdal. @@ -1434,7 +1379,7 @@ Requirements: index krb5PrincipalName eq -4.17.1 smbk5pwd overlay +4.16.1 smbk5pwd overlay ----------------------- The smbk5pwd overlay, updates the krb5Key and krb5KeyVersionNumber @@ -1443,12 +1388,12 @@ Operation: `http://www.openldap.org/devel/cvsweb.cgi/contrib/slapd-modules/smbk5pwd/README?hideattic=1&sortbydate=0' -4.17.2 Troubleshooting guide +4.16.2 Troubleshooting guide ---------------------------- `https://sec.miljovern.no/bin/view/Info/TroubleshootingGuide' -4.17.3 Using Samba LDAP password database +4.16.3 Using Samba LDAP password database ----------------------------------------- The Samba domain and the Kerberos realm can have different names since @@ -1465,7 +1410,7 @@ search space as the Kerberos entries.  File: heimdal.info, Node: Providing Kerberos credentials to servers and programs, Next: Setting up PK-INIT, Prev: Using LDAP to store the database, Up: Setting up a realm -4.18 Providing Kerberos credentials to servers and programs +4.17 Providing Kerberos credentials to servers and programs =========================================================== Some services require Kerberos credentials when they start to make @@ -1509,7 +1454,7 @@ credentials when the script-to-start-service exits.  File: heimdal.info, Node: Setting up PK-INIT, Next: Debugging Kerberos problems, Prev: Providing Kerberos credentials to servers and programs, Up: Setting up a realm -4.19 Setting up PK-INIT +4.18 Setting up PK-INIT ======================= PK-INIT leverages an existing PKI (public key infrastructure), using @@ -1526,14 +1471,14 @@ this. The administrator can use a configuration file, store the principal in the SubjectAltName extension of the certificate, or store the mapping in the principals entry in the kerberos database. -4.20 Certificates +4.19 Certificates ================= This section documents the requirements on the KDC and client certificates and the format used in the id-pkinit-san OtherName extention. -4.20.1 KDC certificate +4.19.1 KDC certificate ---------------------- The certificate for the KDC has serveral requirements. @@ -1558,7 +1503,7 @@ isn't a KDC and thus expose the user to giving away information (like a password or other private information) that it is supposed to keep secret. -4.20.2 Client certificate +4.19.2 Client certificate ------------------------- The client certificate may need to have a EKU id-pkekuoid @@ -1573,7 +1518,7 @@ This behavior is controlled by KDC configuration option: [kdc] pkinit_principal_in_certificate = yes -4.20.2.1 Using KRB5PrincipalName in id-pkinit-san +4.19.2.1 Using KRB5PrincipalName in id-pkinit-san ................................................. The OtherName extention in the GeneralName is used to do the mapping @@ -1599,7 +1544,7 @@ ASN.1 structure: where Realm and PrincipalName is defined by the Kerberos ASN.1 specification. -4.21 Naming certificate using hx509 +4.20 Naming certificate using hx509 =================================== hx509 is the X.509 software used in Heimdal to handle certificates. @@ -1658,7 +1603,7 @@ PKCS12: PKCS12:/path/to/file.pfx -4.22 Configure the Kerberos software +4.21 Configure the Kerberos software ==================================== First configure the client's trust anchors and what parameters to @@ -1687,7 +1632,7 @@ Using PKCS#11 it can look like this instead: TODO: Write about the KDC. -4.23 Configure the client +4.22 Configure the client ========================= [appdefaults] @@ -1701,7 +1646,7 @@ TODO: Write about the KDC. pkinit_win2k_require_binding = yes } -4.24 Configure the KDC +4.23 Configure the KDC ====================== [kdc] @@ -1714,7 +1659,7 @@ TODO: Write about the KDC. pkinit_win2k_require_binding = yes pkinit_principal_in_certificate = no -4.24.1 Using pki-mapping file +4.23.1 Using pki-mapping file ----------------------------- Note that the file name is space sensitive. @@ -1724,13 +1669,13 @@ Note that the file name is space sensitive. lha@EXAMPLE.ORG:C=SE,O=Stockholm universitet,CN=Love,UID=lha lha@EXAMPLE.ORG:CN=Love,UID=lha -4.24.2 Using the Kerberos database +4.23.2 Using the Kerberos database ---------------------------------- -4.25 Use hxtool to create certificates +4.24 Use hxtool to create certificates ====================================== -4.25.1 Generate certificates +4.24.1 Generate certificates ---------------------------- First, you need to generate a CA certificate. This example creates a CA @@ -1779,7 +1724,7 @@ if you're going to use the ACL file instead. --subject="uid=lha,DC=test,DC=h5l,DC=se" \ --certificate="FILE:user.pem" -4.25.2 Validate the certificate +4.24.2 Validate the certificate ------------------------------- hxtool also contains a tool that will validate certificates according @@ -1789,13 +1734,13 @@ in your certificates. hxtool validate FILE:user.pem -4.26 Use OpenSSL to create certificates +4.25 Use OpenSSL to create certificates ======================================= This section tries to give the CA owners hints how to create certificates using OpenSSL (or CA software based on OpenSSL). -4.26.1 Using OpenSSL to create certificates with krb5PrincipalName +4.25.1 Using OpenSSL to create certificates with krb5PrincipalName ------------------------------------------------------------------ To make OpenSSL create certificates with krb5PrincipalName, use an @@ -1827,10 +1772,10 @@ Command usage: openssl x509 -extensions user_certificate openssl ca -extensions user_certificate -4.27 Using PK-INIT with Windows +4.26 Using PK-INIT with Windows =============================== -4.27.1 Client configration +4.26.1 Client configration -------------------------- Clients using a Windows KDC with PK-INIT need configuration since @@ -1847,7 +1792,7 @@ to apply a fix from Microsoft. pkinit_win2k_require_binding = no } -4.27.2 Certificates +4.26.2 Certificates ------------------- The client certificates need to have the extended keyusage "Microsoft @@ -1858,7 +1803,7 @@ Smart Card Logon with Third-Party Certification Authorities" for a more extensive description of how set setup an external CA so that it includes all the information required to make a Windows KDC happy. -4.27.3 Configure Windows 2000 CA +4.26.3 Configure Windows 2000 CA -------------------------------- To enable Microsoft Smartcardlogin for certificates in your Windows @@ -1869,7 +1814,7 @@ Certificates in Windows".  File: heimdal.info, Node: Debugging Kerberos problems, Prev: Setting up PK-INIT, Up: Setting up a realm -4.28 Debugging Kerberos problems +4.27 Debugging Kerberos problems ================================ To debug Kerberos client and server problems you can enable debug @@ -2209,11 +2154,7 @@ File: heimdal.info, Node: Kerberos 4 issues, Next: Windows compatibility, Pre 7 Kerberos 4 issues ******************* -The KDC has built-in version 4 support. It is not enabled by default, -see setup how to set it up. - -The KDC will also have kaserver emulation and be able to handle -AFS-clients that use `klog'. +Kerberos 4 KDC and KA server have been moved. For more about AFS, see the section *Note AFS::. @@ -2221,7 +2162,6 @@ For more about AFS, see the section *Note AFS::. * Principal conversion issues:: * Converting a version 4 database:: -* kaserver::  File: heimdal.info, Node: Principal conversion issues, Next: Converting a version 4 database, Prev: Kerberos 4 issues, Up: Kerberos 4 issues @@ -2273,7 +2213,7 @@ version 4 requests. (2) at least until secure DNS is commonly available  -File: heimdal.info, Node: Converting a version 4 database, Next: kaserver, Prev: Principal conversion issues, Up: Kerberos 4 issues +File: heimdal.info, Node: Converting a version 4 database, Prev: Principal conversion issues, Up: Kerberos 4 issues 7.2 Converting a version 4 database =================================== @@ -2382,47 +2322,6 @@ server: hprop -n --source=krb4-db -d /var/kerberos/principal --master-key=/.m | hpropd -n - -File: heimdal.info, Node: kaserver, Prev: Converting a version 4 database, Up: Kerberos 4 issues - -7.3 kaserver -============ - -7.3.1 kaserver emulation ------------------------- - -The Heimdal kdc can emulate a kaserver. The kaserver is a Kerberos 4 -server with pre-authentication using Rx as the on-wire protocol. The kdc -contains a minimalistic Rx implementation. - -There are three parts of the kaserver; KAA (Authentication), KAT (Ticket -Granting), and KAM (Maintenance). The KAA interface and KAT interface -both passes over DES encrypted data-blobs (just like the -Kerberos-protocol) and thus do not need any other protection. The KAM -interface uses `rxkad' (Kerberos authentication layer for Rx) for -security and data protection, and is used for example for changing -passwords. This part is not implemented in the kdc. - -Another difference between the ka-protocol and the Kerberos 4 protocol -is that the pass-phrase is salted with the cellname in the `string to -key' function in the ka-protocol, while in the Kerberos 4 protocol there -is no salting of the password at all. To make sure AFS-compatible keys -are added to each principals when they are created or their password are -changed, `afs3-salt' should be added to `[kadmin]default_keys'. - -For more about AFS, see the section *Note AFS::. - -7.3.2 Transarc AFS Windows client ---------------------------------- - -The Transarc Windows client uses Kerberos 4 to obtain tokens, and thus -does not need a kaserver. The Windows client assumes that the Kerberos -server is on the same machine as the AFS-database server. If you do not -like to do that you can add a small program that runs on the database -servers that forward all kerberos requests to the real kerberos server. -A program that does this is `krb-forward' -(`ftp://ftp.stacken.kth.se/pub/projekts/krb-forward'). -  File: heimdal.info, Node: Windows compatibility, Next: Programming with Kerberos, Prev: Kerberos 4 issues, Up: Top @@ -3476,53 +3375,51 @@ POSSIBILITY OF SUCH DAMAGE.  Tag Table: Node: Top212 -Node: Introduction1708 -Node: What is Kerberos?4517 -Node: Building and Installing9630 -Node: Setting up a realm9957 -Node: Configuration file10945 -Node: Creating the database14013 -Node: Modifying the database16945 -Node: Checking the setup18538 -Node: keytabs19393 -Node: Serving Kerberos 4/524/kaserver20261 -Node: Remote administration21805 -Node: Password changing23735 -Node: Testing clients and servers27923 -Node: Slave Servers28251 -Node: Incremental propagation30006 -Node: Encryption types and salting33250 -Node: Credential cache server - KCM35427 -Node: Cross realm37411 -Node: Transit policy39957 -Node: Setting up DNS46734 -Node: Using LDAP to store the database49209 -Node: Providing Kerberos credentials to servers and programs55214 -Node: Setting up PK-INIT57312 -Node: Debugging Kerberos problems69791 -Node: Applications70222 -Node: Authentication modules70422 -Node: Digital SIA71016 -Node: IRIX75400 -Node: AFS76690 -Node: Things in search for a better place80444 -Node: Kerberos 4 issues83173 -Node: Principal conversion issues83680 -Ref: Principal conversion issues-Footnote-185911 -Ref: Principal conversion issues-Footnote-285979 -Node: Converting a version 4 database86032 -Node: kaserver90362 -Node: Windows compatibility92183 -Node: Configuring Windows to use a Heimdal KDC93269 -Node: Inter-Realm keys (trust) between Windows and a Heimdal KDC95339 -Node: Create account mappings99010 -Node: Encryption types99762 -Node: Authorisation data100362 -Node: Quirks of Windows 2000 KDC101509 -Node: Useful links when reading about the Windows102803 -Node: Programming with Kerberos104607 -Node: Migration104857 -Node: Acknowledgments106618 -Node: Copyrights and Licenses109544 +Node: Introduction1659 +Node: What is Kerberos?4405 +Node: Building and Installing9518 +Node: Setting up a realm9845 +Node: Configuration file10797 +Node: Creating the database13865 +Node: Modifying the database16797 +Node: Checking the setup18390 +Node: keytabs19245 +Node: Remote administration20103 +Node: Password changing22009 +Node: Testing clients and servers26197 +Node: Slave Servers26525 +Node: Incremental propagation28278 +Node: Encryption types and salting31522 +Node: Credential cache server - KCM33699 +Node: Cross realm35683 +Node: Transit policy38229 +Node: Setting up DNS45006 +Node: Using LDAP to store the database47481 +Node: Providing Kerberos credentials to servers and programs53486 +Node: Setting up PK-INIT55584 +Node: Debugging Kerberos problems68063 +Node: Applications68494 +Node: Authentication modules68694 +Node: Digital SIA69288 +Node: IRIX73672 +Node: AFS74962 +Node: Things in search for a better place78716 +Node: Kerberos 4 issues81445 +Node: Principal conversion issues81793 +Ref: Principal conversion issues-Footnote-184024 +Ref: Principal conversion issues-Footnote-284092 +Node: Converting a version 4 database84145 +Node: Windows compatibility88458 +Node: Configuring Windows to use a Heimdal KDC89544 +Node: Inter-Realm keys (trust) between Windows and a Heimdal KDC91614 +Node: Create account mappings95285 +Node: Encryption types96037 +Node: Authorisation data96637 +Node: Quirks of Windows 2000 KDC97784 +Node: Useful links when reading about the Windows99078 +Node: Programming with Kerberos100882 +Node: Migration101132 +Node: Acknowledgments102893 +Node: Copyrights and Licenses105819  End Tag Table diff --git a/doc/heimdal.texi b/doc/heimdal.texi index cebee5df792..7e69b627f1b 100644 --- a/doc/heimdal.texi +++ b/doc/heimdal.texi @@ -84,7 +84,6 @@ Setting up a realm * Creating the database:: * Modifying the database:: * keytabs:: -* Serving Kerberos 4/524/kaserver:: * Remote administration:: * Password changing:: * Testing clients and servers:: @@ -113,7 +112,6 @@ Kerberos 4 issues * Principal conversion issues:: * Converting a version 4 database:: -* kaserver:: Windows compatibility diff --git a/doc/hx509.info b/doc/hx509.info index eb6d7880ac6..cae1529628d 100644 --- a/doc/hx509.info +++ b/doc/hx509.info @@ -11,7 +11,7 @@ File: hx509.info, Node: Top, Next: Introduction, Prev: (dir), Up: (dir) Heimdal ******* -This manual is for version 1.5.1 of hx509. +This manual is for version 1.5.2 of hx509. * Menu: diff --git a/doc/intro.texi b/doc/intro.texi index 83c37878808..c51eba02ac9 100644 --- a/doc/intro.texi +++ b/doc/intro.texi @@ -57,8 +57,7 @@ a library @file{libkafs} for authenticating to AFS and a program @item some simple test programs @item -a KDC that supports most things; optionally, it may also support -Kerberos V4 and kaserver, +a KDC that supports most things, @item simple programs for distributing databases between a KDC master and slaves diff --git a/doc/kerberos4.texi b/doc/kerberos4.texi index a474fccbdb0..41a6508aac9 100644 --- a/doc/kerberos4.texi +++ b/doc/kerberos4.texi @@ -4,18 +4,13 @@ @comment node-name, next, previous, up @chapter Kerberos 4 issues -The KDC has built-in version 4 support. It is not enabled by default, -see setup how to set it up. - -The KDC will also have kaserver emulation and be able to handle -AFS-clients that use @code{klog}. +Kerberos 4 KDC and KA server have been moved. For more about AFS, see the section @xref{AFS}. @menu * Principal conversion issues:: * Converting a version 4 database:: -* kaserver:: @end menu @node Principal conversion issues, Converting a version 4 database, Kerberos 4 issues, Kerberos 4 issues @@ -59,7 +54,7 @@ principal exists in the database. The KDC will use @code{krb5_425_conv_principal_ext} to convert principals when handling to version 4 requests. -@node Converting a version 4 database, kaserver , Principal conversion issues, Kerberos 4 issues +@node Converting a version 4 database, , Principal conversion issues, Kerberos 4 issues @section Converting a version 4 database If you want to convert an existing version 4 database, the principal @@ -176,39 +171,3 @@ server: hprop -n --source=krb4-db -d /var/kerberos/principal --master-key=/.m | hpropd -n @end example -@node kaserver, , Converting a version 4 database, Kerberos 4 issues -@section kaserver - -@subsection kaserver emulation - -The Heimdal kdc can emulate a kaserver. The kaserver is a Kerberos 4 -server with pre-authentication using Rx as the on-wire protocol. The kdc -contains a minimalistic Rx implementation. - -There are three parts of the kaserver; KAA (Authentication), KAT (Ticket -Granting), and KAM (Maintenance). The KAA interface and KAT interface -both passes over DES encrypted data-blobs (just like the -Kerberos-protocol) and thus do not need any other protection. The KAM -interface uses @code{rxkad} (Kerberos authentication layer for Rx) for -security and data protection, and is used for example for changing -passwords. This part is not implemented in the kdc. - -Another difference between the ka-protocol and the Kerberos 4 protocol -is that the pass-phrase is salted with the cellname in the @code{string to -key} function in the ka-protocol, while in the Kerberos 4 protocol there -is no salting of the password at all. To make sure AFS-compatible keys -are added to each principals when they are created or their password are -changed, @samp{afs3-salt} should be added to -@samp{[kadmin]default_keys}. - -For more about AFS, see the section @xref{AFS}. - -@subsection Transarc AFS Windows client - -The Transarc Windows client uses Kerberos 4 to obtain tokens, and thus -does not need a kaserver. The Windows client assumes that the Kerberos -server is on the same machine as the AFS-database server. If you do not -like to do that you can add a small program that runs on the database -servers that forward all kerberos requests to the real kerberos -server. A program that does this is @code{krb-forward} -(@url{ftp://ftp.stacken.kth.se/pub/projekts/krb-forward}). diff --git a/doc/setup.texi b/doc/setup.texi index ad5476f325d..91788b3ee17 100644 --- a/doc/setup.texi +++ b/doc/setup.texi @@ -17,7 +17,6 @@ doing so. It will make life easier for you and everyone else. * Modifying the database:: * Checking the setup:: * keytabs:: -* Serving Kerberos 4/524/kaserver:: * Remote administration:: * Password changing:: * Testing clients and servers:: @@ -282,7 +281,7 @@ database check by run by the following command : kadmin -l check REALM.EXAMPLE.ORG @end example -@node keytabs, Serving Kerberos 4/524/kaserver, Checking the setup, Setting up a realm +@node keytabs, Remote administration, Checking the setup, Setting up a realm @section keytabs To extract a service ticket from the database and put it in a keytab, you @@ -305,59 +304,7 @@ Version Type Principal 1 des3-cbc-sha1 host/my.host.name@@MY.REALM @end example -@node Serving Kerberos 4/524/kaserver, Remote administration, keytabs, Setting up a realm -@section Serving Kerberos 4/524/kaserver - -Heimdal can be configured to support 524, Kerberos 4 or kaserver. All -these services are turned off by default. Kerberos 4 is always -supported by the KDC, but the Kerberos 4 client support also depends -on Kerberos 4 support having been included at compile-time, using -@kbd{--with-krb4=dir}. - -@subsection 524 - -524 is a service that allows the KDC to convert Kerberos 5 tickets to -Kerberos 4 tickets for backward compatibility. See also Using 2b -tokens with AFS in @xref{AFS}. - -524 can be turned on by adding this to the configuration file - -@example -[kdc] - enable-524 = yes -@end example - -@subsection Kerberos 4 - -Kerberos 4 is the predecessor to to Kerberos 5. It only supports -single DES@. You should only enable Kerberos 4 support if you have -needs for compatibility with an installed base of Kerberos 4 -clients/servers. - -Kerberos 4 can be turned on by adding this to the configuration file - -@example -[kdc] - enable-kerberos4 = yes -@end example - -@subsection kaserver - -Kaserver is a Kerberos 4 that is used in AFS@. The protocol has some -extra features over plain Kerberos 4, but like Kerberos 4, only uses -single DES@. - -You should only enable Kaserver support if you have needs for -compatibility with an installed base of AFS machines. - -Kaserver can be turned on by adding this to the configuration file - -@example -[kdc] - enable-kaserver = yes -@end example - -@node Remote administration, Password changing, Serving Kerberos 4/524/kaserver, Setting up a realm +@node Remote administration, Password changing, keytabs, Setting up a realm @section Remote administration The administration server, @command{kadmind}, can be started by diff --git a/doc/vars.texi b/doc/vars.texi index 8b1158af637..cf0f58b108f 100755 --- a/doc/vars.texi +++ b/doc/vars.texi @@ -4,4 +4,4 @@ @c @set dbdir /var/heimdal -@set PACKAGE_VERSION 1.5.1 +@set PACKAGE_VERSION 1.5.2 diff --git a/kdc/default_config.c b/kdc/default_config.c index 6fbf5fdae15..9a33a7f270c 100644 --- a/kdc/default_config.c +++ b/kdc/default_config.c @@ -51,9 +51,9 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config) c->require_preauth = TRUE; c->kdc_warn_pwexpire = 0; c->encode_as_rep_as_tgs_rep = FALSE; - c->as_use_strongest_session_key = FALSE; + c->tgt_use_strongest_session_key = FALSE; c->preauth_use_strongest_session_key = FALSE; - c->tgs_use_strongest_session_key = FALSE; + c->svc_use_strongest_session_key = FALSE; c->use_strongest_server_key = TRUE; c->check_ticket_addresses = TRUE; c->allow_null_ticket_addresses = TRUE; @@ -120,21 +120,21 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config) } #endif - c->as_use_strongest_session_key = + c->tgt_use_strongest_session_key = krb5_config_get_bool_default(context, NULL, - c->as_use_strongest_session_key, + c->tgt_use_strongest_session_key, "kdc", - "as-use-strongest-session-key", NULL); + "tgt-use-strongest-session-key", NULL); c->preauth_use_strongest_session_key = krb5_config_get_bool_default(context, NULL, c->preauth_use_strongest_session_key, "kdc", "preauth-use-strongest-session-key", NULL); - c->tgs_use_strongest_session_key = + c->svc_use_strongest_session_key = krb5_config_get_bool_default(context, NULL, - c->tgs_use_strongest_session_key, + c->svc_use_strongest_session_key, "kdc", - "tgs-use-strongest-session-key", NULL); + "svc-use-strongest-session-key", NULL); c->use_strongest_server_key = krb5_config_get_bool_default(context, NULL, c->use_strongest_server_key, diff --git a/kdc/kdc.8 b/kdc/kdc.8 index 4a69bda0679..171c426a0c5 100644 --- a/kdc/kdc.8 +++ b/kdc/kdc.8 @@ -54,7 +54,6 @@ .Fl Fl v4-realm= Ns Ar string .Xc .Oc -.Op Fl K | Fl Fl kaserver .Oo Fl P Ar portspec \*(Ba Xo .Fl Fl ports= Ns Ar portspec .Xc @@ -112,8 +111,6 @@ The default is whatever is returned by .Fn krb_get_lrealm . This option is only available if the KDC has been compiled with version 4 support. -.It Fl K , Fl Fl kaserver -Enable kaserver emulation (in case it's compiled in). .It Fl P Ar portspec , Fl Fl ports= Ns Ar portspec Specifies the set of ports the KDC should listen on. It is given as a diff --git a/kdc/kdc.cat8 b/kdc/kdc.cat8 index 8df1c3ebacb..98f10d6f01b 100644 --- a/kdc/kdc.cat8 +++ b/kdc/kdc.cat8 @@ -7,9 +7,9 @@ NNAAMMEE SSYYNNOOPPSSIISS kkddcc [--cc _f_i_l_e | ----ccoonnffiigg--ffiillee==_f_i_l_e] [--pp | ----nnoo--rreeqquuiirree--pprreeaauutthh] [----mmaaxx--rreeqquueesstt==_s_i_z_e] [--HH | ----eennaabbllee--hhttttpp] [----nnoo--552244] [----kkeerrbbeerrooss44] - [----kkeerrbbeerrooss44--ccrroossss--rreeaallmm] [--rr _s_t_r_i_n_g | ----vv44--rreeaallmm==_s_t_r_i_n_g] - [--KK | ----kkaasseerrvveerr] [--PP _p_o_r_t_s_p_e_c | ----ppoorrttss==_p_o_r_t_s_p_e_c] [----ddeettaacchh] - [----ddiissaabbllee--ddeess] [----aaddddrreesssseess==_l_i_s_t _o_f _a_d_d_r_e_s_s_e_s] + [----kkeerrbbeerrooss44--ccrroossss--rreeaallmm] [--rr _s_t_r_i_n_g | ----vv44--rreeaallmm==_s_t_r_i_n_g] [--PP + _p_o_r_t_s_p_e_c | ----ppoorrttss==_p_o_r_t_s_p_e_c] [----ddeettaacchh] [----ddiissaabbllee--ddeess] + [----aaddddrreesssseess==_l_i_s_t _o_f _a_d_d_r_e_s_s_e_s] DDEESSCCRRIIPPTTIIOONN kkddcc serves requests for tickets. When it starts, it first checks the @@ -61,9 +61,6 @@ DDEESSCCRRIIPPTTIIOONN is returned by kkrrbb__ggeett__llrreeaallmm(). This option is only available if the KDC has been compiled with version 4 support. - --KK, ----kkaasseerrvveerr - Enable kaserver emulation (in case it's compiled in). - --PP _p_o_r_t_s_p_e_c, ----ppoorrttss==_p_o_r_t_s_p_e_c Specifies the set of ports the KDC should listen on. It is given as a white-space separated list of services or port numbers. diff --git a/kdc/kdc.h b/kdc/kdc.h index 9d52fd4c2ec..ab643ec2007 100644 --- a/kdc/kdc.h +++ b/kdc/kdc.h @@ -59,9 +59,9 @@ typedef struct krb5_kdc_configuration { krb5_boolean encode_as_rep_as_tgs_rep; /* bug compatibility */ - krb5_boolean as_use_strongest_session_key; + krb5_boolean tgt_use_strongest_session_key; krb5_boolean preauth_use_strongest_session_key; - krb5_boolean tgs_use_strongest_session_key; + krb5_boolean svc_use_strongest_session_key; krb5_boolean use_strongest_server_key; krb5_boolean check_ticket_addresses; diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c index c13abb7ce0b..ee6baf0edc9 100644 --- a/kdc/kerberos5.c +++ b/kdc/kerberos5.c @@ -1094,7 +1094,10 @@ _kdc_as_rep(krb5_context context, * enctype that an older version of a KDC in the same realm can't * decrypt. */ - ret = _kdc_find_etype(context, config->as_use_strongest_session_key, FALSE, + ret = _kdc_find_etype(context, + krb5_principal_is_krbtgt(context, server_princ) ? + config->tgt_use_strongest_session_key : + config->svc_use_strongest_session_key, FALSE, client, b->etype.val, b->etype.len, &sessionetype, NULL); if (ret) { diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c index 5bf68cdfdc2..87e33930be1 100644 --- a/kdc/krb5tgs.c +++ b/kdc/krb5tgs.c @@ -1699,7 +1699,9 @@ server_lookup: Key *skey; ret = _kdc_find_etype(context, - config->tgs_use_strongest_session_key, FALSE, + krb5_principal_is_krbtgt(context, sp) ? + config->tgt_use_strongest_session_key : + config->svc_use_strongest_session_key, FALSE, server, b->etype.val, b->etype.len, NULL, &skey); if(ret) { diff --git a/kpasswd/kpasswdd.c b/kpasswd/kpasswdd.c index cc1ac25f30d..36a70c83252 100644 --- a/kpasswd/kpasswdd.c +++ b/kpasswd/kpasswdd.c @@ -439,7 +439,8 @@ verify (krb5_auth_context *auth_context, struct sockaddr *sa, int sa_size, u_char *msg, - size_t len) + size_t len, + krb5_address *client_addr) { krb5_error_code ret; uint16_t pkt_len, pkt_ver, ap_req_len; @@ -540,6 +541,21 @@ verify (krb5_auth_context *auth_context, krb_priv_data.data = msg + 6 + ap_req_len; krb_priv_data.length = len - 6 - ap_req_len; + /* + * Only enforce client addresses on on tickets with addresses. If + * its addressless, we are guessing its behind NAT and really + * can't know this information. + */ + + if ((*ticket)->ticket.caddr && (*ticket)->ticket.caddr->len > 0) { + ret = krb5_auth_con_setaddrs (context, *auth_context, + NULL, client_addr); + if (ret) { + krb5_warn (context, ret, "krb5_auth_con_setaddr(this)"); + goto out; + } + } + ret = krb5_rd_priv (context, *auth_context, &krb_priv_data, @@ -576,7 +592,7 @@ process (krb5_realm *realms, krb5_address other_addr; uint16_t version; - + memset(&other_addr, 0, sizeof(other_addr)); krb5_data_zero (&out_data); ret = krb5_auth_con_init (context, &auth_context); @@ -594,18 +610,27 @@ process (krb5_realm *realms, goto out; } - ret = krb5_auth_con_setaddrs (context, - auth_context, - this_addr, - &other_addr); - krb5_free_address (context, &other_addr); + ret = krb5_auth_con_setaddrs (context, auth_context, this_addr, NULL); if (ret) { - krb5_warn (context, ret, "krb5_auth_con_setaddr"); + krb5_warn (context, ret, "krb5_auth_con_setaddr(this)"); goto out; } if (verify (&auth_context, realms, keytab, &ticket, &out_data, - &version, s, sa, sa_size, msg, len) == 0) { + &version, s, sa, sa_size, msg, len, &other_addr) == 0) + { + /* + * We always set the client_addr, to assume that the client + * can ignore it if it choose to do so (just the server does + * so for addressless tickets). + */ + ret = krb5_auth_con_setaddrs (context, auth_context, + this_addr, &other_addr); + if (ret) { + krb5_warn (context, ret, "krb5_auth_con_setaddr(other)"); + goto out; + } + change (auth_context, ticket->client, version, @@ -617,8 +642,9 @@ process (krb5_realm *realms, } out: - krb5_data_free (&out_data); - krb5_auth_con_free (context, auth_context); + krb5_free_address(context, &other_addr); + krb5_data_free(&out_data); + krb5_auth_con_free(context, auth_context); } static int diff --git a/lib/gssapi/krb5/verify_mic.c b/lib/gssapi/krb5/verify_mic.c index 3123787ff47..3814ef7062c 100644 --- a/lib/gssapi/krb5/verify_mic.c +++ b/lib/gssapi/krb5/verify_mic.c @@ -251,6 +251,14 @@ retry: csum.checksum.length = 20; csum.checksum.data = p + 8; + krb5_crypto_destroy (context, crypto); + ret = krb5_crypto_init(context, key, + ETYPE_DES3_CBC_SHA1, &crypto); + if (ret){ + *minor_status = ret; + return GSS_S_FAILURE; + } + ret = krb5_verify_checksum (context, crypto, KRB5_KU_USAGE_SIGN, tmp, message_buffer->length + 8, diff --git a/lib/hcrypto/libtommath/bn_mp_prime_next_prime.c b/lib/hcrypto/libtommath/bn_mp_prime_next_prime.c index a2897f08784..db2f46ddbf9 100644 --- a/lib/hcrypto/libtommath/bn_mp_prime_next_prime.c +++ b/lib/hcrypto/libtommath/bn_mp_prime_next_prime.c @@ -142,8 +142,8 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) } /* is this prime? */ - for (x = 0; x < t; x++) { - mp_set(&b, ltm_prime_tab[t]); + for (x = 0; x < t && x < PRIME_SIZE; x++) { + mp_set(&b, ltm_prime_tab[x]); if ((err = mp_prime_miller_rabin(a, &b, &res)) != MP_OKAY) { goto LBL_ERR; } diff --git a/lib/hx509/sel-lex.c b/lib/hx509/sel-lex.c index 51a5feaea2b..51f1e840780 100644 --- a/lib/hx509/sel-lex.c +++ b/lib/hx509/sel-lex.c @@ -520,6 +520,7 @@ unsigned lineno = 1; static char * handle_string(void); static int lex_input(char *, int); +static int lex_classic_input(void); struct hx_expr_input _hx509_expr_input; @@ -534,7 +535,7 @@ struct hx_expr_input _hx509_expr_input; #undef ECHO -#line 538 "sel-lex.c" +#line 539 "sel-lex.c" #define INITIAL 0 @@ -716,10 +717,10 @@ YY_DECL register char *yy_cp, *yy_bp; register int yy_act; -#line 68 "sel-lex.l" +#line 69 "sel-lex.l" -#line 723 "sel-lex.c" +#line 724 "sel-lex.c" if ( !(yy_init) ) { @@ -804,37 +805,37 @@ do_action: /* This label is used only to access EOF actions. */ case 1: YY_RULE_SETUP -#line 70 "sel-lex.l" +#line 71 "sel-lex.l" { return kw_TRUE; } YY_BREAK case 2: YY_RULE_SETUP -#line 71 "sel-lex.l" +#line 72 "sel-lex.l" { return kw_FALSE; } YY_BREAK case 3: YY_RULE_SETUP -#line 72 "sel-lex.l" +#line 73 "sel-lex.l" { return kw_AND; } YY_BREAK case 4: YY_RULE_SETUP -#line 73 "sel-lex.l" +#line 74 "sel-lex.l" { return kw_OR; } YY_BREAK case 5: YY_RULE_SETUP -#line 74 "sel-lex.l" +#line 75 "sel-lex.l" { return kw_IN; } YY_BREAK case 6: YY_RULE_SETUP -#line 75 "sel-lex.l" +#line 76 "sel-lex.l" { return kw_TAILMATCH; } YY_BREAK case 7: YY_RULE_SETUP -#line 77 "sel-lex.l" +#line 78 "sel-lex.l" { yylval.string = strdup ((const char *)yytext); return IDENTIFIER; @@ -842,31 +843,31 @@ YY_RULE_SETUP YY_BREAK case 8: YY_RULE_SETUP -#line 81 "sel-lex.l" +#line 82 "sel-lex.l" { yylval.string = handle_string(); return STRING; } YY_BREAK case 9: /* rule 9 can match eol */ YY_RULE_SETUP -#line 82 "sel-lex.l" +#line 83 "sel-lex.l" { ++lineno; } YY_BREAK case 10: YY_RULE_SETUP -#line 83 "sel-lex.l" +#line 84 "sel-lex.l" { return *yytext; } YY_BREAK case 11: YY_RULE_SETUP -#line 84 "sel-lex.l" +#line 85 "sel-lex.l" ; YY_BREAK case 12: YY_RULE_SETUP -#line 85 "sel-lex.l" +#line 86 "sel-lex.l" ECHO; YY_BREAK -#line 870 "sel-lex.c" +#line 871 "sel-lex.c" case YY_STATE_EOF(INITIAL): yyterminate(); @@ -1863,7 +1864,7 @@ void yyfree (void * ptr ) #define YYTABLES_NAME "yytables" -#line 85 "sel-lex.l" +#line 86 "sel-lex.l" diff --git a/lib/hx509/sel-lex.l b/lib/hx509/sel-lex.l index 4c9396750a3..bb7e8374c7d 100644 --- a/lib/hx509/sel-lex.l +++ b/lib/hx509/sel-lex.l @@ -50,6 +50,7 @@ unsigned lineno = 1; static char * handle_string(void); static int lex_input(char *, int); +static int lex_classic_input(void); struct hx_expr_input _hx509_expr_input; diff --git a/lib/kadm5/password_quality.c b/lib/kadm5/password_quality.c index a6f0b3ef67e..eb72ba6182e 100644 --- a/lib/kadm5/password_quality.c +++ b/lib/kadm5/password_quality.c @@ -34,8 +34,6 @@ #include "kadm5_locl.h" #include "kadm5-pwcheck.h" -RCSID("$Id$"); - #ifdef HAVE_SYS_WAIT_H #include #endif @@ -473,7 +471,8 @@ kadm5_check_password_quality (krb5_context context, NULL); if (v == NULL) { msg = (*passwd_quality_check) (context, principal, pwd_data); - krb5_set_error_message(context, 0, "password policy failed: %s", msg); + if (msg) + krb5_set_error_message(context, 0, "password policy failed: %s", msg); return msg; } diff --git a/lib/krb5/crypto-arcfour.c b/lib/krb5/crypto-arcfour.c index 1b369d2fda1..7f7e21d0d22 100644 --- a/lib/krb5/crypto-arcfour.c +++ b/lib/krb5/crypto-arcfour.c @@ -317,7 +317,7 @@ struct _krb5_encryption_type _krb5_enctype_arcfour_hmac_md5 = { 8, &keytype_arcfour, &_krb5_checksum_hmac_md5, - NULL, + &_krb5_checksum_hmac_md5, F_SPECIAL, ARCFOUR_encrypt, 0, diff --git a/lib/krb5/crypto.c b/lib/krb5/crypto.c index 4b66035155d..67ecef62e87 100644 --- a/lib/krb5/crypto.c +++ b/lib/krb5/crypto.c @@ -467,7 +467,7 @@ verify_checksum(krb5_context context, return KRB5_PROG_SUMTYPE_NOSUPP; /* XXX */ } kct = crypto->et->keyed_checksum; - if (kct != NULL && kct->type != ct->type) { + if (kct == NULL || kct->type != ct->type) { krb5_set_error_message(context, KRB5_PROG_SUMTYPE_NOSUPP, N_("Checksum type %s is keyed, but " "the key type %s passed didnt have that checksum " diff --git a/lib/krb5/eai_to_heim_errno.c b/lib/krb5/eai_to_heim_errno.c index ef11e370f44..a6e14aba31d 100644 --- a/lib/krb5/eai_to_heim_errno.c +++ b/lib/krb5/eai_to_heim_errno.c @@ -67,6 +67,10 @@ krb5_eai_to_heim_errno(int eai_errno, int system_error) #if defined(EAI_NODATA) && EAI_NODATA != EAI_NONAME case EAI_NODATA: return HEIM_EAI_NODATA; +#endif +#ifdef WSANO_DATA + case WSANO_DATA: + return HEIM_EAI_NODATA; #endif case EAI_NONAME: return HEIM_EAI_NONAME; diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5 index 9e1edc7b6ca..77d7f808ae4 100644 --- a/lib/krb5/krb5.conf.5 +++ b/lib/krb5/krb5.conf.5 @@ -412,19 +412,22 @@ Default is the same as Should the kdc answer kdc-requests over http. .It Li enable-kaserver = Va BOOL If this kdc should emulate the AFS kaserver. -.It Li as-use-strongest-session-key = Va BOOL +.It Li tgt-use-strongest-session-key = Va BOOL If this is TRUE then the KDC will prefer the strongest key from the -client's AS-REQ enctype list, that is also supported by the KDC and the -target principal, for the ticket session key. Else it will prefer the -first key from the client's AS-REQ enctype list that is also supported -by the KDC and the target principal. Defaults to TRUE. +client's AS-REQ or TGS-REQ enctype list for the ticket session key that +is supported by the KDC and the target principal when the target +principal is a krbtgt principal. Else it will prefer the first key from +the client's AS-REQ enctype list that is also supported by the KDC and +the target principal. Defaults to TRUE. +.It Li svc-use-strongest-session-key = Va BOOL +Like tgt-use-strongest-session-key, but applies to the session key +enctype of tickets for services other than krbtgt principals. Defaults +to TRUE. .It Li preauth-use-strongest-session-key = Va BOOL -Like as-use-strongest-session-key, but applies to the session key -enctype selection for PA-ETYPE-INFO2 (i.e., for password-based -pre-authentication). Defaults to TRUE. -.It Li tgs-use-strongest-session-key = Va BOOL -Like as-use-strongest-session-key, but applies to the session key -enctype of tickets issued by the TGS. Defaults to TRUE. +If TRUE then select the strongest possible enctype from the client's +AS-REQ for PA-ETYPE-INFO2 (i.e., for password-based pre-authentication). +Else pick the first supported enctype from the client's AS-REQ. Defaults +to TRUE. .It Li use-strongest-server-key = Va BOOL If TRUE then the KDC picks, for the ticket encrypted part's key, the first supported enctype from the target service principal's hdb entry's diff --git a/lib/krb5/krb5.conf.cat5 b/lib/krb5/krb5.conf.cat5 index 7d10cae2c3e..aa5ab91bc5e 100644 --- a/lib/krb5/krb5.conf.cat5 +++ b/lib/krb5/krb5.conf.cat5 @@ -419,25 +419,27 @@ DDEESSCCRRIIPPTTIIOONN enable-kaserver = _B_O_O_L If this kdc should emulate the AFS kaserver. - as-use-strongest-session-key = _B_O_O_L + tgt-use-strongest-session-key = _B_O_O_L If this is TRUE then the KDC will prefer the - strongest key from the client's AS-REQ enctype - list, that is also supported by the KDC and the - target principal, for the ticket session key. Else + strongest key from the client's AS-REQ or TGS-REQ + enctype list for the ticket session key that is + supported by the KDC and the target principal when + the target principal is a krbtgt principal. Else it will prefer the first key from the client's AS- REQ enctype list that is also supported by the KDC and the target principal. Defaults to TRUE. - preauth-use-strongest-session-key = _B_O_O_L - Like as-use-strongest-session-key, but applies to - the session key enctype selection for PA-ETYPE- - INFO2 (i.e., for password-based pre-authentica- - tion). Defaults to TRUE. + svc-use-strongest-session-key = _B_O_O_L + Like tgt-use-strongest-session-key, but applies to + the session key enctype of tickets for services + other than krbtgt principals. Defaults to TRUE. - tgs-use-strongest-session-key = _B_O_O_L - Like as-use-strongest-session-key, but applies to - the session key enctype of tickets issued by the - TGS. Defaults to TRUE. + preauth-use-strongest-session-key = _B_O_O_L + If TRUE then select the strongest possible enctype + from the client's AS-REQ for PA-ETYPE-INFO2 (i.e., + for password-based pre-authentication). Else pick + the first supported enctype from the client's AS- + REQ. Defaults to TRUE. use-strongest-server-key = _B_O_O_L If TRUE then the KDC picks, for the ticket diff --git a/lib/krb5/pac.c b/lib/krb5/pac.c index f4caaddc264..91f68d5e00e 100644 --- a/lib/krb5/pac.c +++ b/lib/krb5/pac.c @@ -706,7 +706,7 @@ build_logon_name(krb5_context context, krb5_storage *sp; uint64_t t; char *s, *s2; - size_t i, len; + size_t s2_len; t = unix2nttime(authtime); @@ -726,29 +726,60 @@ build_logon_name(krb5_context context, if (ret) goto out; - len = strlen(s); + { + size_t ucs2_len; + uint16_t *ucs2; + unsigned int flags; - CHECK(ret, krb5_store_uint16(sp, len * 2), out); + ret = wind_utf8ucs2_length(s, &ucs2_len); + if (ret) { + free(s); + krb5_set_error_message(context, ret, "Failed to count length of UTF-8 string"); + return ret; + } -#if 1 /* cheat for now */ - s2 = malloc(len * 2); - if (s2 == NULL) { - ret = krb5_enomem(context); + ucs2 = malloc(sizeof(ucs2[0]) * ucs2_len); + if (ucs2 == NULL) { + free(s); + return krb5_enomem(context); + } + + ret = wind_utf8ucs2(s, ucs2, &ucs2_len); free(s); - goto out; - } - for (i = 0; i < len; i++) { - s2[i * 2] = s[i]; - s2[i * 2 + 1] = 0; - } - free(s); -#else - /* write libwind code here */ -#endif + if (ret) { + free(ucs2); + krb5_set_error_message(context, ret, "Failed to convert string to UCS-2"); + return ret; + } - ret = krb5_storage_write(sp, s2, len * 2); + s2_len = (ucs2_len + 1) * 2; + s2 = malloc(s2_len); + if (ucs2 == NULL) { + free(ucs2); + return krb5_enomem(context); + } + + flags = WIND_RW_LE; + ret = wind_ucs2write(ucs2, ucs2_len, + &flags, s2, &s2_len); + free(ucs2); + if (ret) { + free(s2); + krb5_set_error_message(context, ret, "Failed to write to UCS-2 buffer"); + return ret; + } + + /* + * we do not want zero termination + */ + s2_len = ucs2_len * 2; + } + + CHECK(ret, krb5_store_uint16(sp, s2_len), out); + + ret = krb5_storage_write(sp, s2, s2_len); free(s2); - if (ret != (int)(len * 2)) { + if (ret != (int)s2_len) { ret = krb5_enomem(context); goto out; } diff --git a/lib/krb5/verify_krb5_conf.c b/lib/krb5/verify_krb5_conf.c index d554423a16d..647a311a2ca 100644 --- a/lib/krb5/verify_krb5_conf.c +++ b/lib/krb5/verify_krb5_conf.c @@ -508,7 +508,7 @@ struct entry kdc_entries[] = { { "allow-null-ticket-addresses", krb5_config_string, check_boolean }, { "allow-anonymous", krb5_config_string, check_boolean }, { "v4_realm", krb5_config_string, NULL }, - { "enable-kaserver", krb5_config_string, check_boolean }, + { "enable-kaserver", krb5_config_string, check_boolean, 1 }, { "encode_as_rep_as_tgs_rep", krb5_config_string, check_boolean }, { "kdc_warn_pwexpire", krb5_config_string, check_time }, { "use_2b", krb5_config_list, NULL }, diff --git a/lib/libedit/configure b/lib/libedit/configure index 3bb2d08446f..c069ba40fe8 100755 --- a/lib/libedit/configure +++ b/lib/libedit/configure @@ -558,7 +558,7 @@ MAKEFLAGS= # Identity of this package. PACKAGE_NAME='libedit' -PACKAGE_TARNAME='libedit-20110930' +PACKAGE_TARNAME='libedit-20120111' PACKAGE_VERSION='3.0' PACKAGE_STRING='libedit 3.0' PACKAGE_BUGREPORT='' @@ -1333,7 +1333,7 @@ Fine tuning of the installation directories: --localedir=DIR locale-dependent data [DATAROOTDIR/locale] --mandir=DIR man documentation [DATAROOTDIR/man] --docdir=DIR documentation root - [DATAROOTDIR/doc/libedit-20110930] + [DATAROOTDIR/doc/libedit-20120111] --htmldir=DIR html documentation [DOCDIR] --dvidir=DIR dvi documentation [DOCDIR] --pdfdir=DIR pdf documentation [DOCDIR] @@ -4004,7 +4004,7 @@ fi # Define the identity of the package. - PACKAGE='libedit-20110930' + PACKAGE='libedit-20120111' VERSION='3.0' diff --git a/lib/wind/bidi_table.c b/lib/wind/bidi_table.c index 7d703f64dca..31de1ee6372 100644 --- a/lib/wind/bidi_table.c +++ b/lib/wind/bidi_table.c @@ -1,5 +1,5 @@ /* ./bidi_table.c */ -/* Automatically generated at 2011-09-30T15:24:58.936201 */ +/* Automatically generated at 2012-01-11T14:07:00.535499 */ #include diff --git a/lib/wind/bidi_table.h b/lib/wind/bidi_table.h index 45556a3ff39..c317b4dc4d4 100644 --- a/lib/wind/bidi_table.h +++ b/lib/wind/bidi_table.h @@ -1,5 +1,5 @@ /* ./bidi_table.h */ -/* Automatically generated at 2011-09-30T15:24:58.927315 */ +/* Automatically generated at 2012-01-11T14:07:00.534628 */ #ifndef BIDI_TABLE_H #define BIDI_TABLE_H 1 diff --git a/lib/wind/combining_table.c b/lib/wind/combining_table.c index 814e39eb190..4a1677230ad 100644 --- a/lib/wind/combining_table.c +++ b/lib/wind/combining_table.c @@ -1,5 +1,5 @@ /* ./combining_table.c */ -/* Automatically generated at 2011-09-30T15:24:59.280091 */ +/* Automatically generated at 2012-01-11T14:07:00.838826 */ #include diff --git a/lib/wind/combining_table.h b/lib/wind/combining_table.h index 05a790b37db..47599ccaff6 100644 --- a/lib/wind/combining_table.h +++ b/lib/wind/combining_table.h @@ -1,5 +1,5 @@ /* ./combining_table.h */ -/* Automatically generated at 2011-09-30T15:24:59.272235 */ +/* Automatically generated at 2012-01-11T14:07:00.836450 */ #ifndef COMBINING_TABLE_H #define COMBINING_TABLE_H 1 diff --git a/lib/wind/errorlist_table.c b/lib/wind/errorlist_table.c index 7456cb478d6..d2d57182d48 100644 --- a/lib/wind/errorlist_table.c +++ b/lib/wind/errorlist_table.c @@ -1,5 +1,5 @@ /* ./errorlist_table.c */ -/* Automatically generated at 2011-09-30T15:24:59.470044 */ +/* Automatically generated at 2012-01-11T14:07:01.014764 */ #include diff --git a/lib/wind/errorlist_table.h b/lib/wind/errorlist_table.h index fc1739efc8d..b822454c03b 100644 --- a/lib/wind/errorlist_table.h +++ b/lib/wind/errorlist_table.h @@ -1,5 +1,5 @@ /* ./errorlist_table.h */ -/* Automatically generated at 2011-09-30T15:24:59.457950 */ +/* Automatically generated at 2012-01-11T14:07:01.014378 */ #ifndef ERRORLIST_TABLE_H #define ERRORLIST_TABLE_H 1 diff --git a/lib/wind/map_table.c b/lib/wind/map_table.c index 5491b7d1b5e..7363e54616e 100644 --- a/lib/wind/map_table.c +++ b/lib/wind/map_table.c @@ -1,5 +1,5 @@ /* ./map_table.c */ -/* Automatically generated at 2011-09-30T15:24:59.641639 */ +/* Automatically generated at 2012-01-11T14:07:01.097758 */ #include "map_table.h" diff --git a/lib/wind/map_table.h b/lib/wind/map_table.h index ac3d564b36a..ebfa7256d72 100644 --- a/lib/wind/map_table.h +++ b/lib/wind/map_table.h @@ -1,5 +1,5 @@ /* ./map_table.h */ -/* Automatically generated at 2011-09-30T15:24:59.631690 */ +/* Automatically generated at 2012-01-11T14:07:01.097337 */ #ifndef MAP_TABLE_H #define MAP_TABLE_H 1 diff --git a/lib/wind/normalize_table.c b/lib/wind/normalize_table.c index 7e0ec2eefa8..a37e180a4ac 100644 --- a/lib/wind/normalize_table.c +++ b/lib/wind/normalize_table.c @@ -1,5 +1,5 @@ /* ./normalize_table.c */ -/* Automatically generated at 2011-09-30T15:25:00.420261 */ +/* Automatically generated at 2012-01-11T14:07:01.714581 */ #include diff --git a/lib/wind/normalize_table.h b/lib/wind/normalize_table.h index 88816309c40..b0d0d11850e 100644 --- a/lib/wind/normalize_table.h +++ b/lib/wind/normalize_table.h @@ -1,5 +1,5 @@ /* ./normalize_table.h */ -/* Automatically generated at 2011-09-30T15:25:00.412374 */ +/* Automatically generated at 2012-01-11T14:07:01.713967 */ #ifndef NORMALIZE_TABLE_H #define NORMALIZE_TABLE_H 1 diff --git a/lib/wind/punycode_examples.c b/lib/wind/punycode_examples.c index 50ccc4847c7..d12368040a1 100644 --- a/lib/wind/punycode_examples.c +++ b/lib/wind/punycode_examples.c @@ -1,5 +1,5 @@ /* ./punycode_examples.c */ -/* Automatically generated at 2011-09-30T15:25:05.829535 */ +/* Automatically generated at 2012-01-11T14:07:08.539522 */ #ifndef PUNYCODE_EXAMPLES_C #define PUNYCODE_EXAMPLES_C 1 diff --git a/lib/wind/punycode_examples.h b/lib/wind/punycode_examples.h index 832234da356..3e90edc763a 100644 --- a/lib/wind/punycode_examples.h +++ b/lib/wind/punycode_examples.h @@ -1,5 +1,5 @@ /* ./punycode_examples.h */ -/* Automatically generated at 2011-09-30T15:25:05.815268 */ +/* Automatically generated at 2012-01-11T14:07:08.539140 */ #ifndef PUNYCODE_EXAMPLES_H #define PUNYCODE_EXAMPLES_H 1 diff --git a/lib/wind/utf8.c b/lib/wind/utf8.c index 6907b3c9d3a..e1a1eb7b2b4 100644 --- a/lib/wind/utf8.c +++ b/lib/wind/utf8.c @@ -204,13 +204,13 @@ wind_ucs4utf8(const uint32_t *in, size_t in_len, char *out, size_t *out_len) switch(len) { case 4: out[3] = (ch | 0x80) & 0xbf; - ch = ch << 6; + ch = ch >> 6; case 3: out[2] = (ch | 0x80) & 0xbf; - ch = ch << 6; + ch = ch >> 6; case 2: out[1] = (ch | 0x80) & 0xbf; - ch = ch << 6; + ch = ch >> 6; case 1: out[0] = ch | first_char[len - 1]; } @@ -346,8 +346,8 @@ wind_ucs2write(const uint16_t *in, size_t in_len, unsigned int *flags, return WIND_ERR_OVERRUN; if ((*flags) & WIND_RW_LE) { - p[0] = (bom >> 8) & 0xff; - p[1] = (bom ) & 0xff; + p[0] = (bom ) & 0xff; + p[1] = (bom >> 8) & 0xff; } else { p[1] = (bom ) & 0xff; p[0] = (bom >> 8) & 0xff; @@ -360,8 +360,8 @@ wind_ucs2write(const uint16_t *in, size_t in_len, unsigned int *flags, if (len < 2) return WIND_ERR_OVERRUN; if ((*flags) & WIND_RW_LE) { - p[0] = (in[0] >> 8) & 0xff; - p[1] = (in[0] ) & 0xff; + p[0] = (in[0] ) & 0xff; + p[1] = (in[0] >> 8) & 0xff; } else { p[1] = (in[0] ) & 0xff; p[0] = (in[0] >> 8) & 0xff; @@ -479,10 +479,10 @@ wind_ucs2utf8(const uint16_t *in, size_t in_len, char *out, size_t *out_len) switch(len) { case 3: out[2] = (ch | 0x80) & 0xbf; - ch = ch << 6; + ch = ch >> 6; case 2: out[1] = (ch | 0x80) & 0xbf; - ch = ch << 6; + ch = ch >> 6; case 1: out[0] = ch | first_char[len - 1]; } diff --git a/lib/wind/version-script.map b/lib/wind/version-script.map index a6ca3ae5494..6b5abb5ee2a 100644 --- a/lib/wind/version-script.map +++ b/lib/wind/version-script.map @@ -14,6 +14,7 @@ HEIMDAL_WIND_1.0 { wind_utf8ucs2_length; wind_ucs2utf8_length; wind_ucs2read; + wind_ucs2write; # testing _wind_combining_class; _wind_stringprep_testbidi; diff --git a/tests/kdc/check-kadmin.in b/tests/kdc/check-kadmin.in index d82aede8228..fdd225cc8e5 100644 --- a/tests/kdc/check-kadmin.in +++ b/tests/kdc/check-kadmin.in @@ -251,7 +251,7 @@ env KRB5CCNAME=${cache} \ ${kadmin} -p foo/admin@${R} get -o principal bar@${R} \ > kadmin.tmp 2>&1 || \ { echo "kadmin failed $?"; cat messages.log ; exit 1; } -if test "$(cat kadmin.tmp)" != "Principal: bar@TEST.H5L.SE" ; then +if test "`cat kadmin.tmp`" != "Principal: bar@TEST.H5L.SE" ; then cat kadmin.tmp ; cat messages.log ; exit 1 ; fi @@ -266,7 +266,7 @@ env KRB5CCNAME=${cache} \ ${kadmin} -p foo/admin@${R} get -o kvno bar@${R} \ > kadmin.tmp 2>&1 || \ { echo "kadmin failed $?"; cat messages.log ; exit 1; } -if test "$(cat kadmin.tmp)" != "Kvno: 1" ; then +if test "`cat kadmin.tmp`" != "Kvno: 1" ; then cat kadmin.tmp ; cat messages.log ; exit 1 ; fi @@ -281,7 +281,7 @@ env KRB5CCNAME=${cache} \ ${kadmin} -p foo/admin@${R} get -o princ_expire_time bar@${R} \ > kadmin.tmp 2>&1 || \ { echo "kadmin failed $?"; cat messages.log ; exit 1; } -if test "$(cat kadmin.tmp)" != "Principal expires: never" ; then +if test "`cat kadmin.tmp`" != "Principal expires: never" ; then cat kadmin.tmp ; cat messages.log ; exit 1 ; fi @@ -295,7 +295,7 @@ env KRB5CCNAME=${cache} \ ${kadmin} -p foo/admin@${R} get -s -o attributes bar@${R} \ > kadmin.tmp 2>&1 || \ { echo "kadmin failed $?"; cat messages.log ; exit 1; } -if test "$(cat kadmin.tmp)" != "Attributes" ; then +if test "`cat kadmin.tmp`" != "Attributes" ; then cat kadmin.tmp ; cat messages.log ; exit 1 ; fi diff --git a/tools/krb5-config.in b/tools/krb5-config.in index 8bbbf80b548..317270e4263 100755 --- a/tools/krb5-config.in +++ b/tools/krb5-config.in @@ -136,7 +136,7 @@ if test "$do_libs" = "yes"; then ;; esac lib_flags="$lib_flags -lkrb5 @LIB_pkinit@ -lcom_err" - lib_flags="$lib_flags @LIB_hcrypto_appl@ -lasn1 -lwind -lroken" + lib_flags="$lib_flags @LIB_hcrypto_appl@ -lasn1 -lwind -lheimbase -lroken" lib_flags="$lib_flags @LIB_crypt@ @PTHREAD_LIBADD@ @LIB_dlopen@" lib_flags="$lib_flags @LIB_door_create@ @LIBS@" echo $lib_flags diff --git a/windows/NTMakefile.version b/windows/NTMakefile.version index db11a117b15..ef04b7986f8 100644 --- a/windows/NTMakefile.version +++ b/windows/NTMakefile.version @@ -15,8 +15,8 @@ VER_PACKAGE_COMPANY=www.h5l.org VER_PRODUCT_MAJOR=1 VER_PRODUCT_MINOR=5 -VER_PRODUCT_AUX=100 -VER_PRODUCT_PATCH=930 +VER_PRODUCT_AUX=200 +VER_PRODUCT_PATCH=0 # ------------------------------------------------------------ # The VER_OLD_BEGIN and VER_OLD_END version values are used in @@ -32,7 +32,7 @@ VER_OLD_BEGIN_PATCH=0 VER_OLD_END_MAJOR=1 VER_OLD_END_MINOR=5 -VER_OLD_END_AUX=100 +VER_OLD_END_AUX=200 VER_OLD_END_PATCH=65535 VER_PACKAGE_VERSION=$(VER_PRODUCT_MAJOR).$(VER_PRODUCT_MINOR).$(VER_PRODUCT_AUX)