Commit graph

28 commits

Author SHA1 Message Date
Jacques Vidrine
a93fa25ead Fix a double-free which prevented `ftpd' from functioning correctly. 2003-12-17 20:34:18 +00:00
Jacques Vidrine
37c2a6b8f0 Update 0.5.1 -> 0.6.
Switch to using `INFO' while we are at it.
2003-08-19 23:24:56 +00:00
Jacques Vidrine
74b7db6ce9 Fix build with OpenSSL 0.9.7+. 2003-03-04 14:52:03 +00:00
Jacques Vidrine
262f54f5d2 Update 0.4e -> 0.5 2002-09-19 13:04:40 +00:00
Jacques Vidrine
5bf83f81f4 Patch a heap overflow. See
<URL:http://online.securityfocus.com/archive/1/269356> and
<URL:http://www.freeweb.hu/mantra/04_2002/KRB4.htm>.

Obtained from:	Heimdal repository
2002-05-03 15:21:36 +00:00
Jacques Vidrine
8c16fd7765 su: Don't use the result of getlogin() to determine whether we are the
superuser.  Always use getuid() instead.

Submitted by:	Johan Danielsson <joda@pdc.kth.se>
2001-10-31 19:57:35 +00:00
Jacques Vidrine
a5714880c9 Fix a heap buffer overrun in gss_get_mic(). 2001-10-31 13:50:43 +00:00
Jacques Vidrine
a1d4de67f0 = Add support for using cracklib with kpasswdd, the password changing
daemon.
= Fix a bug in `ktutil get' which was causing a segfault.
= Bump PORTREVISION.
2001-10-29 13:02:43 +00:00
Jacques Vidrine
39daa242c8 Update 0.4d -> 0.4e 2001-09-07 19:45:46 +00:00
Jacques Vidrine
ae3b77d753 Update 0.4b -> 0.4c 2001-07-19 22:54:09 +00:00
Jacques Vidrine
65947fb078 = Fix possible telnetd vulnerability in option processing.
Obtained from:	heimdal-discuss@sics.se

= Fix bug in GSSAPI accept_sec_context() that prevented credential
  forwarding from working in some cases.
2001-07-19 21:43:42 +00:00
Jacques Vidrine
c6c4d86a7e Update 0.3f -> 0.4b 2001-07-06 22:55:34 +00:00
Jacques Vidrine
9c3c2fffc7 Correct no-nos: one file per patch, please. Don't touch more than one
source file with each patch file, and don't touch the same source file
with more than one patch file.
2001-06-29 15:38:33 +00:00
Jacques Vidrine
e7b042d993 Bug fix for memory being free'd twice when using the new ANY:-keytabs.
PORTREVISION bumped.

Submitted by:	assar
2001-06-24 04:45:32 +00:00
Jacques Vidrine
2ee1cf0270 Remove patch that has been incorporated into 0.3f. By a quirk of
fate,  it  applied cleanly  anyway,  with  harmless effect  (two  NULL
assignments instead of one).

Noticed by:	assar
2001-06-24 01:26:27 +00:00
Jacques Vidrine
4d72d6c732 Fix segfault in ftpd introduced in 0.3f.
PORTREVISION bumped.

Obtained from:	assar on heimdal-discuss@sics.se
2001-06-22 21:28:21 +00:00
Jacques Vidrine
1c7d18cccf Update 0.3e -> 0.3f. From the announcement:
* change default keytab to ANY:FILE:/etc/krb5.keytab,krb4:/etc/srvtab,
   the new keytab type that tries both of these in order (SRVTAB is
   also an alias for krb4:)
 * improve error reporting and error handling (error messages should
   be more detailed and more useful)
 * improve building with openssl
 * add kadmin -K, rcp -F
 * fix two incorrect weak DES keys
 * fix building of kaserver compat in KDC
 * the API is closer to what MIT krb5 is using
 * more compatible with windows 2000
 * removed some memory leaks
 * bug fixes
2001-06-11 18:37:33 +00:00
Jacques Vidrine
286760b720 configure was generating bogus -R' and -L' flags for the linker when
Kerberos IV libs were not present.

PR:		ports/27490
2001-05-21 14:12:32 +00:00
Jacques Vidrine
81ab4375c6 Fix an uninitialized pointer dereference in krb5_rd_cred. 2001-04-19 16:47:38 +00:00
Jacques Vidrine
84a708203e Add a sample start-up script for the KDC. 2001-04-17 16:25:13 +00:00
Jacques Vidrine
32e2f6629f Update 0.3d -> 0.3e.
The vendor says: ``We suggest those running a ftpd to update
immediately.''

Changes in release 0.3e:
 * rcp program included
 * fix buffer overrun in ftpd
 * handle omitted sequence numbers as zeroes to handle MIT krb5 that
   cannot generate zero sequence numbers
 * handle v4 /.k files better
 * configure/portability fixes
 * fixes in parsing of options to kadmin (sub-)commands
 * handle errors in kadmin load better
 * bug fixes
2001-02-05 15:50:26 +00:00
Jacques Vidrine
a207a15093 = Update to use OpenSSL in the base if it has MD4 support (version 0.9.6
or later).  If these libraries are used, then this port's libdes will
  not be built nor installed.

= A man page was renamed that I missed earlier: afs.3 -> kafs.3
2001-01-04 16:30:04 +00:00
Jacques Vidrine
c1cc1e35b2 Update 0.3c -> 0.3d 2000-12-14 16:13:48 +00:00
Jacques Vidrine
2cf9350a4e = Use system libcom_err.
No longer build or install the included libcom_err and compile_et.

= ftpd now uses IP_PORTRANGE* in the same fashion as the system ftpd.
  By default, ftpd will now use high port numbers for serving clients
  in passive mode.

= Fix segmentation fault in kadmin.
  A null pointer dereference that was only tickled when using kadmin
  with a kdc that uses LDAP as the backend.

= Fix a search filter in hdb-ldap.c.
  A lookup was failing to fetch operational attributes such as
  modifiersName.

= Bump PORTREVISION for above changes.
2000-11-09 23:35:03 +00:00
Jacques Vidrine
4014682b5c *** empty log message *** 2000-11-03 16:34:45 +00:00
Jacques Vidrine
21bb45e907 Upgrade 0.2t -> 0.3b 2000-08-30 13:59:56 +00:00
Jacques Vidrine
61478d4702 = Update 0.2q -> 0.2r
= Replace obscenely large patch to configure with something more
  reasonable
2000-04-18 02:17:25 +00:00
Jacques Vidrine
07eded5f23 Fix packaging: Need to check for com_err when building with Kerberos IV
libraries.

Reported by:	bento.freebsd.org
2000-03-31 05:20:41 +00:00