summaryrefslogtreecommitdiff
path: root/usr/src/lib/gss_mechs
AgeCommit message (Collapse)AuthorFilesLines
2022-11-0415085 mech_krb5: memory leaked during context establishmentMatt Barden2-7/+9
Reviewed by: Gordon Ross <Gordon.W.Ross@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@mnx.io>
2022-04-2614637 various Makefiles should have more faith in Makefile.masterRichard Lowe5-13/+0
Reviewed by: Gergő Mihály Doma <domag02@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Robert Mustacchi <rm@fingolfin.org>
2022-03-1014443 resection manual pages per IPD4Richard Lowe7-22/+16
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Approved by: Dan McDonald <danmcd@joyent.com>
2022-02-0714382 gss_mechs: build errors with gcc 11Toomas Soome2-9/+7
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2021-04-1513487 want mapfile-based assertions about symbol properties (fix SPARC)Toomas Soome1-1/+5
Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Andy Fiddaman <andy@omnios.org> Reviewed by: Klaus Ziegler <klausz@haus-gisela.de> Approved by: Robert Mustacchi <rm@fingolfin.org>
2021-04-0913487 want mapfile-based assertions about symbol propertiesRichard Lowe2-40/+222
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-10-1313184 Stop translating ld(1) options through cw(1)Richard Lowe1-1/+1
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-09-0113045 Idmap's KDC lookup override doesn't workMatt Barden1-1/+4
Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-05-0412454 remove lint library machineryRichard Lowe15-112/+38
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Gordon Ross <gwr@nexenta.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon4-14/+18
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-0311163 mech_krb5: NULL pointer errorsToomas Soome7-18/+18
Reviewed by: John Levon <john.levon@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-03-2110116 mech_dh needs smatch fixesJohn Levon1-3/+5
Reviewed by: Andy Stormont <astormont@racktopsystems.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410079 smatch Makefile changes for usr/src/libJohn Levon4-1/+17
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-10-119884 cw(1) should use -fpic rather than -KpicRichard Lowe1-1/+1
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Andy Stormont <andyjstormont@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: John Levon <john.levon@joyent.com> Approved by: Garrett D'Amore <garrett@damore.org>
2018-08-029180 gss_mechs/mech_krb5: this statement may fall throughToomas Soome1-1/+2
Reviewed by: Sebastian Wiedenroth <sebastian.wiedenroth@skylime.net> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2018-03-109179 gss_mechs/mech_krb5 this use of "defined" may not be portableToomas Soome1-4/+7
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2017-11-168780 gss_mechs: variable set but not usedToomas Soome1-0/+1
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Yuri Pankov <yuripv@gmx.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2017-11-108779 mech_spnego: variable set but not usedToomas Soome1-8/+0
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Yuri Pankov <yuripv@gmx.com> Reviewed by: Gary Mills <gary_mills@fastmail.fm> Approved by: Dan McDonald <danmcd@joyent.com>
2017-05-148219 mech_krb5: misleading-indentationToomas Soome2-9/+10
Reviewed by: Yuri Pankov <yuri.pankov@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2017-02-227812 Remove gender specific languageDaniel Hoffman5-35/+40
Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Reviewed by: Steve Gonczi <steve.gonczi@delphix.com> Reviewed by: Chris Williamson <chris.williamson@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2015-10-266352 Updated DC locator for SMB and idmapGordon Ross2-2/+103
Portions contributed by: Matt Barden <Matt.Barden@nexenta.com> Portions contributed by: Kevin Crowe <kevin.crowe@nexenta.com> Portions contributed by: Alek Pinchuk <alek@nexenta.com> Reviewed by: Bayard Bell <bayard.bell@nexenta.com> Reviewed by: Alek Pinchuk <alek.pinchuk@nexenta.com> Reviewed by: Rick McNeal <rick.mcneal@nexenta.com> Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com> Reviewed by: Tony Nguyen <tony.nguyen@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2015-10-261122 smbsrv should use SPNEGO (inbound authentication)Gordon Ross3-3/+49
Portions contributed by: Matt Barden <Matt.Barden@nexenta.com> Portions contributed by: Kevin Crowe <kevin.crowe@nexenta.com> Portions contributed by: Alek Pinchuk <alek@nexenta.com> Reviewed by: Bayard Bell <bayard.bell@nexenta.com> Reviewed by: Dan Fields <dan.fields@nexenta.com> Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com> Reviewed by: Matt Barden <Matt.Barden@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2015-02-22872 remove duplicate daemon() definitionsRyan Zezeski3-97/+1
Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Marcel Telka <marcel@telka.sk> Approved by: Richard Lowe <richlowe@richlowe.net>
2013-08-304072 make clobber leaves trashGordon Ross1-0/+3
Reviewed by: Albert Lee <trisk@nexenta.com> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Marcel Telka <marcel.telka@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2013-08-133971 remove EXPORT_RELEASE_BUILDJosef 'Jeff' Sipek6-19/+0
Reviewed by: Marcel Telka <marcel@telka.sk> Reviewed by: Andy Stormont <andyjstormont@gmail.com> Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Approved by: Dan McDonald <danmcd@nexenta.com>
2013-07-293882 Remove xmod & friendsJosef 'Jeff' Sipek21-403/+6
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-09-222933 compiler warning gags need better granularityRichard Lowe4-4/+20
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2010-10-13171 adt_get_mask_from_user frees memory before it's usedChris Love1-1/+1
172 duplicate free in gss_accept_sec_context 173 duplicate free in spnego_gss_accept_sec_context Reviewed by: gordon.w.ross@gmail.com Reviewed by: garrett@nexenta.com Approved by: garrett@nexenta.com
2010-08-16PSARC 2010/135 Kerberos Diagnostic Enhancements (umbrella case)Glenn Barry47-732/+3079
6835328 Error messages generated by applications using RPCSEC_GSS are too vague
2010-08-116967252 coredump in mech_krb5.so.1`__profile_remove_realm+0x93Shawn Emery1-4/+13
2010-08-116909129 krb5 keytab management API should be simplified to easily merge keys ↵Shawn Emery4-1/+551
from different realms
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami8-23/+34
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-07PSARC 2010/083 Kerberos Profile APIShawn Emery6-37/+1045
6927135 A simple API should be provided to create a Kerberos system's configuration information
2010-06-076613083 The host specified as the admin_server is not used when sending ↵Shawn Emery1-2/+13
Kerberos KPASSWD request.
2010-05-256940735 CVE-2010-0629 denial of service in kadmindZdenek Kotala1-0/+6
6945196 CVE-2010-1321 GSS-API library null pointer dereference
2010-04-066941204 krb5_fcc_read_addrs() returns garbage on failureMark Phalan1-2/+3
2010-04-066941201 double-frees on error path in krb5_os_hostaddr()Mark Phalan1-6/+2
2010-04-066941191 krb5_send_tgs doesn't do all the error checking it couldMark Phalan1-6/+9
2010-04-066941180 krb5_gss_accept_sec_context doesn't check return value of ↵Mark Phalan1-3/+9
krb5_auth_con_getauthenticator()
2010-04-066941173 logic error in krb5_build_principal_extMark Phalan1-1/+2
2010-04-066941162 krb5_encrypt_helper returns success and an apparently valid buffer ↵Mark Phalan1-3/+6
on malloc failure
2010-04-206794523 rcache could skip fsync(2)s in common cases with a dynamic skew conceptNicolas Williams3-10/+161
2010-04-096938652 krb5_sendto_kdc should initialize the addrlist structuresPeter Shoults2-6/+4
2010-03-256929229 CVE-2010-0628 - denial of service in SPNEGO ↵Glenn Barry1-26/+16
[MITKRB5-SA-2010-002][VU#839413]
2010-03-02PSARC 2010/067 Interim modernization updatesLiane Praza9-521/+5
6915312 ON should be able to build IPS packages natively 6281004 docbook.dtd is obsolete and unused 6490919 strange file in onnv-gate 6878498 update tools proto ${ROOT} to include ${MACH} and make nightly.sh copy it into parent repository 6888427 SVM packages should drop legacy objects 6893530 Some header files can be opened up 6903324 sharemgr should either use isaexec or not build 64-bit commands 6920651 mktpl will inadvertently reuse stale license files for empty license lists 6920674 svvs kmods should not be built during an open build Portions contributed by Rich Lowe <richlowe@richlowe.net> --HG-- rename : usr/src/cmd/oamuser/user/stdprofile => usr/src/cmd/nsadmin/dot-profile.sh rename : usr/src/cmd/nsadmin/profile => usr/src/cmd/nsadmin/etc-profile.sh rename : usr/src/pkgdefs/common_files/i.manifest => usr/src/cmd/svc/common/i.manifest rename : usr/src/pkgdefs/common_files/r.manifest => usr/src/cmd/svc/common/r.manifest rename : usr/src/lib/brand/native/Makefile => usr/src/lib/brand/ipkg/Makefile rename : usr/src/lib/brand/native/zone/Makefile => usr/src/lib/brand/ipkg/zone/Makefile rename : usr/src/lib/brand/native/zone/SUNWblank.xml => usr/src/lib/brand/ipkg/zone/SUNWblank.xml rename : usr/src/lib/brand/native/zone/SUNWdefault.xml => usr/src/lib/brand/ipkg/zone/SUNWdefault.xml rename : usr/src/lib/brand/native/zone/config.xml => usr/src/lib/brand/ipkg/zone/config.xml rename : usr/src/lib/brand/native/zone/platform.xml => usr/src/lib/brand/ipkg/zone/platform.xml rename : usr/src/lib/brand/native/Makefile => usr/src/lib/brand/labeled/Makefile rename : usr/src/lib/brand/native/zone/Makefile => usr/src/lib/brand/labeled/zone/Makefile rename : usr/src/lib/brand/native/zone/config.xml => usr/src/lib/brand/labeled/zone/config.xml rename : usr/src/lib/brand/native/zone/platform.xml => usr/src/lib/brand/labeled/zone/platform.xml rename : usr/src/lib/brand/native/zone/common.ksh => usr/src/lib/brand/shared/common.ksh rename : usr/src/lib/brand/native/zone/query.ksh => usr/src/lib/brand/shared/query.ksh rename : usr/src/lib/brand/native/zone/uninstall.ksh => usr/src/lib/brand/shared/uninstall.ksh rename : usr/src/pkgdefs/common_files/i.rbac => usr/src/lib/libsecdb/common/i.rbac rename : usr/src/pkgdefs/common_files/r.rbac => usr/src/lib/libsecdb/common/r.rbac rename : usr/src/pkgdefs/license_files/cr_ATT => usr/src/pkg/license_files/cr_ATT rename : usr/src/pkgdefs/SUNWfipe/cr_Intel => usr/src/pkg/license_files/cr_Intel.SUNWfipe rename : usr/src/pkgdefs/SUNWintgige/cr_Intel => usr/src/pkg/license_files/cr_Intel.SUNWintgige rename : usr/src/pkgdefs/license_files/cr_Sun => usr/src/pkg/license_files/cr_Sun rename : usr/src/pkgdefs/SUNWgrub/grubcredits => usr/src/pkg/license_files/grubcredits rename : usr/src/pkgdefs/SUNWcsl/lic_AMD => usr/src/pkg/license_files/lic_AMD rename : usr/src/pkgdefs/license_files/lic_CDDL => usr/src/pkg/license_files/lic_CDDL rename : usr/src/pkgdefs/SUNWemlxs/lic_Emulex => usr/src/pkg/license_files/lic_Emulex rename : usr/src/pkgdefs/license_files/lic_GPLv2 => usr/src/pkg/license_files/lic_GPLv2 rename : usr/src/pkgdefs/CPQary3/lic_HP => usr/src/pkg/license_files/lic_HP rename : usr/src/tools/opensolaris/BINARYLICENSE.txt => usr/src/pkg/license_files/lic_OSBL rename : usr/src/pkgdefs/license_files/lic_OSBL_preamble => usr/src/pkg/license_files/lic_OSBL_preamble rename : usr/src/pkgdefs/SUNWqlc/lic_Qlogic => usr/src/pkg/license_files/lic_Qlogic rename : usr/src/pkgdefs/SUNWhwdata/LICENSE => usr/src/pkg/license_files/lic_SUNWhwdata rename : usr/src/pkgdefs/SUNWroute/copyright.in => usr/src/pkg/license_files/lic_SUNWroute rename : usr/src/pkgdefs/SUNWgss/gss_license => usr/src/pkg/license_files/lic_gss rename : usr/src/pkgdefs/license_files/license_in_headers => usr/src/pkg/license_files/license_in_headers rename : usr/src/uts/intel/os/solaris.xpm.gz => usr/src/uts/intel/os/solaris.xpm
2010-02-266889700 __krb5_get_init_creds_password leaks krb5_gic_opt_ext *opteWill Fiveash1-2/+3
2010-02-196906079 Memory leaks when gss_accept_sec_context is called multiple times ↵Mark Phalan1-3/+1
with same security context
2010-01-066905659 krb5_732430005 leaks memoryMark Phalan1-2/+9
2010-01-066806014 unable to join domain using kerberos via tcp when no SRV ↵Mark Phalan1-1/+35
_kerberos-master._tcp is in DNS
2009-12-286908688 SPNEGO assertion failure if CIFS client specifies IP address of serverShawn Emery1-0/+6