summaryrefslogtreecommitdiff
path: root/usr/src/cmd/krb5/kadmin
AgeCommit message (Collapse)AuthorFilesLines
2022-03-1014443 resection manual pages per IPD4Richard Lowe6-13/+11
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Approved by: Dan McDonald <danmcd@joyent.com>
2021-08-1013935 ksetpw passes integers to %s format specifierChris Fraire1-7/+12
13936 ksetpw typo to strtok_r() prevents space delimited -e enctype_list 13942 ksetpw salt may be used uninitialized Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2021-08-1013790 krb5: variable may be used uninitializedToomas Soome11-32/+21
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon2-2/+2
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-2211390 krb5: NULL pointer errorsToomas Soome3-3/+3
Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410080 smatch Makefile changes for usr/src/cmdJohn Levon7-0/+27
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-04-239386 kadmin: this statement may fall throughToomas Soome1-0/+2
Reviewed by: Sebastian Wiedenroth <sebastian.wiedenroth@skylime.net> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Approved by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
2017-12-038774 kadmin/dbutil: variable 'crflags' set but not usedToomas Soome1-2/+0
Reviewed by: Sebastian Wiedenroth <wiedi@frubar.net> Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Approved by: Gordon Ross <gwr@nexenta.com>
2017-11-168772 kadmin/server: variable 'maj_stat' set but not usedToomas Soome1-2/+2
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2017-11-148771 kadmin/kdcmgr: variable set but not usedToomas Soome1-1/+1
Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Reviewed by: Alexander Pyhalov <apyhalov@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-06-138332 krb5: misleading-indentationToomas Soome2-24/+24
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2017-04-146962 kclient performs incorrect check for /dev/randomDan McDonald1-1/+1
Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net> Reviewed by: Jens Bauernfeind <bauernfeind@ipk-gatersleben.de> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-01-276573 kclient should support aggregated subnets in getSubnetsToomas Soome1-0/+15
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Reviewed by: Gordon Ross <gordon.ross@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2015-10-296407 kerberos Java GUI should go awayGarrett D'Amore208-58145/+1
Portions contributed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net> Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net> Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Andy Stormont <astormont@racktopsystems.com> Reviewed by: Albert Lee <trisk@omniti.com> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Richard PALO <richard@netbsd.org> Approved by: Dan McDonald <danmcd@omniti.com>
2015-05-054719 update gate build environment to [open]jdk7Richard PALO12-305/+280
4742 update manifests for javadoc7 4743 Fix deprecated /usr/j2se usage in slp and remove from filesystem(5) manpage 4744 remove traces of /var/sadm/system/admin/default_java Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2014-07-094985 reverse resolve does not work in /usr/lib/krb5/klookupMarcel Telka1-3/+4
Reviewed by: Gordon Ross <gordon.ross@nexenta.com> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2014-01-214512 kclient(1m) should not depend on /usr/xpg4/bin/grepMarcel Telka1-6/+3
Reviewed by: Andy Stormont <andyjstormont@gmail.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Robert Mustacchi <rm@joyent.com>
2013-08-304072 make clobber leaves trashGordon Ross2-3/+5
Reviewed by: Albert Lee <trisk@nexenta.com> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Marcel Telka <marcel.telka@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2013-07-293882 Remove xmod & friendsJosef 'Jeff' Sipek1-14/+1
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-09-222933 compiler warning gags need better granularityRichard Lowe8-14/+34
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2011-05-162211 undefined order of operations in kadmin GUI native codeRichard Lowe1-22/+22
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Joshua M. Clulow <josh@sysmgr.org> Reviewed by: Bayard Bell <buffer.g.overflow@gmail.com> Approved by: Gordon Ross <gwr@nexenta.com>
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami1-3/+4
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-076954931 kclient(1M) should use new profile APIs, at least AD domain joinsShawn Emery3-32/+245
2010-06-076944375 No principal in keytab matches desired nameShawn Emery1-39/+14
2010-05-256940735 CVE-2010-0629 denial of service in kadmindZdenek Kotala1-4/+3
6945196 CVE-2010-1321 GSS-API library null pointer dereference
2010-04-266885914 KDC doesn't enforce the password min-age policyPeter Shoults2-75/+11
2010-04-206940688 Need to remove date in past check from kadmin_parse_princ_args()Peter Shoults1-19/+1
2010-02-226807853 cannot unset min/max pw life from a password policy once they are ↵Peter Shoults1-19/+1
set in a KDC database
2010-01-226913788 kclient's AD join should use /dev/randomShawn Emery1-34/+36
2009-11-306886219 kadmind code should be utilizing sigaction() rather than signal()Peter Shoults2-7/+34
6886235 kadmind will not rebind with LDAP server if LDAP server is restarted
2009-11-116889618 kadmind prints bogus acl warningMark Phalan1-30/+19
2009-11-126885980 Need case-insensitive keytab lookups for MS interopShawn Emery2-20/+32
6885387 gsskrb5_extract_authz_data_from_sec_context() fails with service ticket sent by Windows 7 client 6858400 kclient cant join Windows AD domain if hostname is 20 characters or longer 6867203 Solaris acceptors fail in Windows 2000 environment 6868908 Solaris acceptors should have returned KRB5KRB_AP_ERR_MODIFIED for Microsoft interoperability 6867208 Windows client cannot recover from KRB5KRB_AP_ERR_SKEW error
2009-09-21PSARC 2009/418 Kerberos V5 PAC APIGlenn Barry1-3/+2
6283931 SPNEGO needs to follow latest RFC 6808598 krb5 APIs needed to create and parse PAC data 6817447 libgss and various mechs are hiding both the real minor_status and the error token
2009-06-306853206 zfs set sharesmb=off fails to unshare the datasetjoyce mcintosh1-5/+1
6830187 False message when saving a Excel 2003 file 6576380 Win98: Attributes Read-only, Hidden, and Archive cannot be unchecked once it is set 6819639 Can't unmount zfs file system after CIFS server connects to a share 6854186 SMB Query File Information level ALT_NAME_INFO returns incorrect name and namelen. 6854769 SVCCTL does not support SMF service list when using Delphi applications 6850508 Unable to join Windows 2008 domain (SP2 or later)
2009-06-096814806 kdcmgr lies when it says it will remove filesShawn Emery1-6/+49
6825171 kdcmgr calls /usr/ucb/tr which isn't found in OpenSolaris
2009-06-096405422 Solaris acceptors fail in AD-KDC environments when using non-"host" ↵Shawn Emery2-53/+106
services (e.g. "cifs") 6824434 Unable to accept context establishment initiated by Windows 2000 clients 6787343 kclient's site lookups fail in certain network environments 6692646 kclient should output errors to stderr
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami1-6/+17
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2009-01-226784485 keys for kadmind princs should be created with all supported enc-types1-4/+60
2008-12-106762162 $DATA appended to streams when stream type != $DATAjose borrego1-6/+4
6736548 After switching the security mode, sometimes smb/server enters maintenance state 6764225 First domain join attempt after smb/server restarts could fail 6764343 Unable to map a share in a new domain 6673517 Appliance\Share becomes unbrowseable for ~10 mins after CIFS client leaves/rejoins the workgroup 6765259 multiple refreshes may not pick up most recent configuration 6764275 need to check with sharemgr when there's a cache miss 6765313 System panic occurred in smb_node_fini+0x16a() 6769943 Purge mlrpc from from types, functions and definitions 6765390 Deprecate smb_wins.c 6771815 ndr_server.c should not include libmlsvc.h 6732763 smbadm takes invalid workgroup name 6749515 Unable to grant domain users/groups access to files 6765156 Active Directory setup has problems if the NETBIOS domain name does not match AD FQDN 6735548 Domain users cannot connect to CIFS shares from MacOS 10.5 6631366 Able to join W2K3 domain with wrong domain name after joined with correct domain name. 6768067 The "smbadm list" should display FQDN 6768061 SMB daemon turned into maintenance mode while updating ddns 6773309 smbd can miss SIGTERM and fail to exit since some threads allow SIGTERM 6775912 smbd: idmap handle access is not thread safe 6775155 core.smbd dump at smb_shr_sa_loadall+0x1f 6776818 Use of freed memory in smbrdr_logon_user() 6766126 Per-share support to configure/disable client-side caching (offline files) 6778831 smbadm definition of domain is too strict, should allow leading digit 6780207 libumem.so.1`process_free+0x55 crash while running smbtorture base tests. --HG-- rename : usr/src/uts/common/smbsrv/lsalib.h => usr/src/lib/smbsrv/libmlsvc/common/lsalib.h rename : usr/src/uts/common/smbsrv/samlib.h => usr/src/lib/smbsrv/libmlsvc/common/samlib.h
2008-10-246680327 kdb5_util/kdb5_ldap_util core dumps and prints incorrect progname on ↵5-84/+169
error paths
2008-10-24PSARC/2008/631 Kerberos PKINITMark Phalan15-699/+820
PSARC/2008/358 removal of kadm5.keytab 6698059 Resync with mit 1.6.3 (pkinit) 6749302 pam_krb5 auth fails with key table entry not found
2008-06-066523785 kerberos unseal from buggy client causes a coresemery2-79/+101
6663377 krb5int_dns_init() doesn't initialize __res_state structure 6704617 kclient needs cleanup and occasionally hangs during join when a DC is down within the domain
2008-06-016686343 ldd(1) - unused search path diagnosis should be enabledrie1-8/+9
2008-05-15PSARC/2007/401 kclient version 2semery9-355/+2435
6263626 kclient does not accept 'search' type lines in resolv.conf 6287615 kclient enhancement to support domain joining for AD interop 6362266 kclient doesn't support aliasing KDCs 6405691 kclient should be used to configure DHCP/VPN clients and for non-Solaris KDCs 6629530 kpasswd(1) in SET_CHANGE mode should try kpasswd_server first
2008-05-026683064 check_rtime could do with some spring cleaningrie6-13/+13
2008-04-256455225 pam_krb5 should overwrite ccache with new credentials when handling ↵semery1-4/+3
pam_setcred(PAM_REFRESH_CRED) 6642279 kdcmgr has to run twice if the pw file option is used and an existing db is present
2008-04-136245750 kadmin "Bad encryption type" error should state the enctypemp1537396-87/+188
6658621 Configuration checks for kerberos daemons should be done by the daemons themselves 6658624 Missing error strings for new kerberos DB error types 6658627 kpropd should use its executable name and not the full path when logging error messages 6658631 error messages in kerberos deamons need cleanup 6664832 various memleaks in krb libs --HG-- rename : usr/src/cmd/krb5/kadmin/server/svc-kdc.master => deleted_files/usr/src/cmd/krb5/kadmin/server/svc-kdc.master rename : usr/src/cmd/krb5/krb5kdc/svc-kdc => deleted_files/usr/src/cmd/krb5/krb5kdc/svc-kdc rename : usr/src/cmd/krb5/slave/svc-kdc.slave => deleted_files/usr/src/cmd/krb5/slave/svc-kdc.slave rename : usr/src/cmd/svc/shell/krb_include.sh => deleted_files/usr/src/cmd/svc/shell/krb_include.sh
2008-01-256604635 kdb ldap integration removed rev/recurse kdb5_util dumpswillf1-7/+16
6620943 ktadd fails for principal with history when using ldap plugin
2008-01-196612490 kdb5_util should not coredump if krb5.conf is misconfiguredmp1537392-6/+10
6621239 adb_policy_init makes the wrong assertion 6641415 kadmind cores when using the ldap backend and "sunw_dbprop_enable" is set to true
2007-10-086607007 kdcmgr left tmp files in /etc/krb5 directorysemery1-19/+18
6607659 Despite calling pam_end, pam_krb5 module data not being freed 6607874 Kerberos incremental propagation no longer working