summaryrefslogtreecommitdiff
path: root/usr/src/lib/gss_mechs/mech_krb5
AgeCommit message (Collapse)AuthorFilesLines
2022-11-0415085 mech_krb5: memory leaked during context establishmentMatt Barden2-7/+9
Reviewed by: Gordon Ross <Gordon.W.Ross@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@mnx.io>
2022-03-1014443 resection manual pages per IPD4Richard Lowe6-18/+14
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Approved by: Dan McDonald <danmcd@joyent.com>
2022-02-0714382 gss_mechs: build errors with gcc 11Toomas Soome1-5/+5
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2021-04-1513487 want mapfile-based assertions about symbol properties (fix SPARC)Toomas Soome1-1/+5
Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Andy Fiddaman <andy@omnios.org> Reviewed by: Klaus Ziegler <klausz@haus-gisela.de> Approved by: Robert Mustacchi <rm@fingolfin.org>
2021-04-0913487 want mapfile-based assertions about symbol propertiesRichard Lowe1-33/+210
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-10-1313184 Stop translating ld(1) options through cw(1)Richard Lowe1-1/+1
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-09-0113045 Idmap's KDC lookup override doesn't workMatt Barden1-1/+4
Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-05-0412454 remove lint library machineryRichard Lowe2-14/+6
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Gordon Ross <gwr@nexenta.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon2-12/+16
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-0311163 mech_krb5: NULL pointer errorsToomas Soome7-18/+18
Reviewed by: John Levon <john.levon@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-01-1410079 smatch Makefile changes for usr/src/libJohn Levon1-0/+5
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-10-119884 cw(1) should use -fpic rather than -KpicRichard Lowe1-1/+1
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Andy Stormont <andyjstormont@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: John Levon <john.levon@joyent.com> Approved by: Garrett D'Amore <garrett@damore.org>
2018-08-029180 gss_mechs/mech_krb5: this statement may fall throughToomas Soome1-1/+2
Reviewed by: Sebastian Wiedenroth <sebastian.wiedenroth@skylime.net> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2018-03-109179 gss_mechs/mech_krb5 this use of "defined" may not be portableToomas Soome1-4/+7
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2017-11-168780 gss_mechs: variable set but not usedToomas Soome1-0/+1
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Yuri Pankov <yuripv@gmx.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2017-05-148219 mech_krb5: misleading-indentationToomas Soome2-9/+10
Reviewed by: Yuri Pankov <yuri.pankov@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2017-02-227812 Remove gender specific languageDaniel Hoffman3-33/+36
Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Reviewed by: Steve Gonczi <steve.gonczi@delphix.com> Reviewed by: Chris Williamson <chris.williamson@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2015-10-266352 Updated DC locator for SMB and idmapGordon Ross2-2/+103
Portions contributed by: Matt Barden <Matt.Barden@nexenta.com> Portions contributed by: Kevin Crowe <kevin.crowe@nexenta.com> Portions contributed by: Alek Pinchuk <alek@nexenta.com> Reviewed by: Bayard Bell <bayard.bell@nexenta.com> Reviewed by: Alek Pinchuk <alek.pinchuk@nexenta.com> Reviewed by: Rick McNeal <rick.mcneal@nexenta.com> Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com> Reviewed by: Tony Nguyen <tony.nguyen@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2015-10-261122 smbsrv should use SPNEGO (inbound authentication)Gordon Ross3-3/+49
Portions contributed by: Matt Barden <Matt.Barden@nexenta.com> Portions contributed by: Kevin Crowe <kevin.crowe@nexenta.com> Portions contributed by: Alek Pinchuk <alek@nexenta.com> Reviewed by: Bayard Bell <bayard.bell@nexenta.com> Reviewed by: Dan Fields <dan.fields@nexenta.com> Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com> Reviewed by: Matt Barden <Matt.Barden@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2015-02-22872 remove duplicate daemon() definitionsRyan Zezeski3-97/+1
Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Marcel Telka <marcel@telka.sk> Approved by: Richard Lowe <richlowe@richlowe.net>
2013-08-304072 make clobber leaves trashGordon Ross1-0/+3
Reviewed by: Albert Lee <trisk@nexenta.com> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Marcel Telka <marcel.telka@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2013-07-293882 Remove xmod & friendsJosef 'Jeff' Sipek7-171/+4
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-09-222933 compiler warning gags need better granularityRichard Lowe1-0/+10
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2010-08-16PSARC 2010/135 Kerberos Diagnostic Enhancements (umbrella case)Glenn Barry42-692/+2470
6835328 Error messages generated by applications using RPCSEC_GSS are too vague
2010-08-116967252 coredump in mech_krb5.so.1`__profile_remove_realm+0x93Shawn Emery1-4/+13
2010-08-116909129 krb5 keytab management API should be simplified to easily merge keys ↵Shawn Emery4-1/+551
from different realms
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami2-5/+10
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-07PSARC 2010/083 Kerberos Profile APIShawn Emery6-37/+1045
6927135 A simple API should be provided to create a Kerberos system's configuration information
2010-06-076613083 The host specified as the admin_server is not used when sending ↵Shawn Emery1-2/+13
Kerberos KPASSWD request.
2010-05-256940735 CVE-2010-0629 denial of service in kadmindZdenek Kotala1-0/+6
6945196 CVE-2010-1321 GSS-API library null pointer dereference
2010-04-066941204 krb5_fcc_read_addrs() returns garbage on failureMark Phalan1-2/+3
2010-04-066941201 double-frees on error path in krb5_os_hostaddr()Mark Phalan1-6/+2
2010-04-066941191 krb5_send_tgs doesn't do all the error checking it couldMark Phalan1-6/+9
2010-04-066941180 krb5_gss_accept_sec_context doesn't check return value of ↵Mark Phalan1-3/+9
krb5_auth_con_getauthenticator()
2010-04-066941173 logic error in krb5_build_principal_extMark Phalan1-1/+2
2010-04-066941162 krb5_encrypt_helper returns success and an apparently valid buffer ↵Mark Phalan1-3/+6
on malloc failure
2010-04-206794523 rcache could skip fsync(2)s in common cases with a dynamic skew conceptNicolas Williams3-10/+161
2010-04-096938652 krb5_sendto_kdc should initialize the addrlist structuresPeter Shoults2-6/+4
2010-02-266889700 __krb5_get_init_creds_password leaks krb5_gic_opt_ext *opteWill Fiveash1-2/+3
2010-01-066905659 krb5_732430005 leaks memoryMark Phalan1-2/+9
2010-01-066806014 unable to join domain using kerberos via tcp when no SRV ↵Mark Phalan1-1/+35
_kerberos-master._tcp is in DNS
2009-12-286885561 Unable to verify PAC server's signature in Windows 2008 domain w/ ↵Shawn Emery1-4/+10
2003 domain functional level
2009-11-096899293 Use of uninitialized variable in krb5_sname_to_principal on error pathMark Phalan1-2/+3
2009-11-096898348 'idmapd' core reported with thread 'ad_disc_get_DomainController'Mark Phalan1-1/+1
2009-11-106565115 Bug in krb5_get_credentials_core() functionMark Phalan1-6/+16
2009-11-126885980 Need case-insensitive keytab lookups for MS interopShawn Emery5-25/+96
6885387 gsskrb5_extract_authz_data_from_sec_context() fails with service ticket sent by Windows 7 client 6858400 kclient cant join Windows AD domain if hostname is 20 characters or longer 6867203 Solaris acceptors fail in Windows 2000 environment 6868908 Solaris acceptors should have returned KRB5KRB_AP_ERR_MODIFIED for Microsoft interoperability 6867208 Windows client cannot recover from KRB5KRB_AP_ERR_SKEW error
2009-09-21PSARC 2009/418 Kerberos V5 PAC APIGlenn Barry25-3001/+6007
6283931 SPNEGO needs to follow latest RFC 6808598 krb5 APIs needed to create and parse PAC data 6817447 libgss and various mechs are hiding both the real minor_status and the error token
2009-07-296864230 hiho, hiho, it'ch chtime for CH to gojmcp1-1/+0
Portions contributed by Rich Lowe
2009-06-026802931 krb5 nfs allows access to shares without credentials by symlinking ↵Peter Shoults1-3/+4
to someone else's cred cache 6840235 Some slight changes need to be made to gssd_getuid.c to be more readable
2009-05-196822062 multiple vulnerabilities in SPNEGO, ASN.1 decoder (CVE-2009-0847, ↵Peter Shoults2-6/+6
CVE-2009-0845, CVE-2009-0844) 6822066 ASN.1 decoder frees uninitialized pointer (CVE-2009-0846)
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-31 22:47:36 +0000