| a134177ed9f82189504191d90f3ed9e97c2b47cb |
|
04-Oct-2017 |
Tinderbox User <tbox@isc.org> |
update copyright notice / whitespace |
| ad1317338af79edad878c9c3e4361798503310ba |
|
03-Oct-2017 |
Mark Andrews <marka@isc.org> |
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
(cherry picked from commit a009d03a1abf73c8146c1696ce1100e62c3b9dbb) |
| 55d61515ec5a64c19ecfbd8b554d02515c878f2b |
|
14-Jul-2016 |
Mark Andrews <marka@isc.org> |
4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]
(cherry picked from commit 63e58ad048e479dc3d5179b3b01fbb6450253ddf) |
| 0c27b3fe77ac1d5094ba3521e8142d9e7973133f |
|
27-Jun-2016 |
Mark Andrews <marka@isc.org> |
4401. [misc] Change LICENSE to MPL 2.0. |
| 9dc5ef7f24dba2be01d1cb10ba38c4a8b603d2b6 |
|
14-Aug-2015 |
Mark Andrews <marka@isc.org> |
4175. [bug] TKEY with GSS-API keys needed bigger buffers.
[RT #40333] |
| 5e93bad21b6d68fce862ff8aace3bb29b658f4f6 |
|
02-Mar-2015 |
Tinderbox User <tbox@isc.org> |
update copyright notice / whitespace |
| af669cb4fd7ecfb67ed145b176e5e764b249573b |
|
27-Feb-2015 |
Mark Andrews <marka@isc.org> |
4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708] |
| f4193c2021ab0aeaad33fe0b3d1d49c80db5c725 |
|
24-Feb-2014 |
Mark Andrews <marka@isc.org> |
update copyrights |
| 0072ae822d966550f7c0956ed22184ec20e98f34 |
|
23-Feb-2014 |
Mark Andrews <marka@isc.org> |
3756. [bug] GSSAPI Kerberos realm checking was broken in
check_config leading to spurious messages being
logged. [RT #35443] |
| c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840e |
|
03-Dec-2013 |
Mark Andrews <marka@isc.org> |
3681. [port] Update the Windows build system to support feature
selection and WIN64 builds. This is a work in
progress. [RT #34160] |
| 099fa63e55bf5e987f4aecd013f667b95233a67f |
|
06-Jun-2013 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| 2347c72129ce9393578966225f915284f0730214 |
|
04-Jun-2013 |
Mark Andrews <marka@isc.org> |
3583. [bug] Address memory leak in GSS-API processing [RT #33574] |
| 15c7a1bf207173deb2bff1d610d5f784b6629875 |
|
07-Oct-2012 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| 611dc8876869036ab5e981e53ae7a446145d9354 |
|
06-Oct-2012 |
Mark Andrews <marka@isc.org> |
3390. [bug] Silence clang compiler warnings. [RT #30417] |
| 6ba6ff39c052b4a46d6bfb7baa06ba423bd292ee |
|
29-Aug-2011 |
Mark Andrews <marka@isc.org> |
check the results of dns_name_toprincipal calls, only use gnamebuf.value when valid |
| 2b3bcbce23a5539a16c1d209f83a604c775859d5 |
|
08-Apr-2011 |
Mark Andrews <marka@isc.org> |
3096. [bug] Set KRB5_KTNAME before calling log_cred() in
dst_gssapi_acceptctx(). [RT #24004] |
| fade3b5f914e9a66273093b5927f4cc9e05992de |
|
28-Mar-2011 |
Mark Andrews <marka@isc.org> |
unsigned constants |
| 1403f9aa2f34e6dfd17816e63b88348d55291e45 |
|
10-Jan-2011 |
Mark Andrews <marka@isc.org> |
don't free memory passed to putenv(), use malloc and check for malloc failures |
| 0e0be796a750f09ca8fea7e2a6a784f5aa4eab0a |
|
09-Jan-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 8a743600ddfcd97adbbd83f8e9f546ce7d365acb |
|
08-Jan-2011 |
Evan Hunt <each@isc.org> |
3005. [port] Solaris: Work around the lack of
gsskrb5_register_acceptor_identity() by setting
the KRB5_KTNAME environment variable to the
contents of tkey-gssapi-keytab. Also fixed
test errors on MacOSX. [RT #22853] |
| d9ad0a55bb198caecf13c79f7e9a402fba8e68eb |
|
24-Dec-2010 |
Evan Hunt <each@isc.org> |
3000. [bug] More TKEY/GSS fixes:
- nsupdate can now get the default realm from
the user's Kerberos principal
- corrected gsstest compilation flags
- improved documentation
- fixed some NULL dereferences
[RT #22795] |
| 179e028b35ff89a9d493398285c40dc89b08963b |
|
22-Dec-2010 |
Mark Andrews <marka@isc.org> |
2995. [bug] The Kerberos realm was not being correctly extracted
from the signer's identity. [RT #22770] |
| db4c1bc48adbfab044129c4cc327dbaf76c78bfb |
|
19-Dec-2010 |
Evan Hunt <each@isc.org> |
Looks like "ifdef" should have been "ifndef". (Committing without review to
silence robie.) |
| c880d51849753a40af5b102df2ae131552a974e8 |
|
18-Dec-2010 |
Mark Andrews <marka@isc.org> |
gsskrb5_register_acceptor_identity is not available on all platforms |
| 71bd858d8ed62672e7c23999dc7c02fd16a55089 |
|
18-Dec-2010 |
Evan Hunt <each@isc.org> |
2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629] |
| bf9b852c3eaf2c9847f926751b57a06f1ae3d72a |
|
09-Jul-2010 |
Evan Hunt <each@isc.org> |
2929. [bug] Improved handling of GSS security contexts:
- added LRU expiration for generated TSIGs
- added the ability to use a non-default realm
- added new "realm" keyword in nsupdate
- limited lifetime of generated keys to 1 hour
or the lifetime of the context (whichever is
smaller)
[RT #19737] |
| a20996ab6ff2be473b85470fddd2380a3e180e7b |
|
03-Jun-2010 |
Mark Andrews <marka@isc.org> |
2910. [func] Sanity check Kerberos credentials. [RT #20986] |
| 230987e819c3315bf71dcae063feaf7fa372296b |
|
13-Mar-2010 |
Automatic Updater <source@isc.org> |
update copyright notice |
| a80d26914afece7324158918e8d74c7c8384a0df |
|
12-Mar-2010 |
Mark Andrews <marka@isc.org> |
2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
don't like it. [RT #20986] |
| d7201de09b85929a86b157f4b2d91667c68c6b52 |
|
03-Sep-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 307d2084502eddc7ce921e5ce439aec3531d90e0 |
|
01-Sep-2009 |
Tatuya JINMEI 神明達哉 <ji <jinmei@isc.org> |
2660. [func] Add a new set of DNS libraries for non-BIND9
applications. See README.libdns. [RT #19369] |
| ddad35552931651426ad70912d29d9ab7d2a8d80 |
|
03-Apr-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9 |
|
03-Apr-2008 |
Mark Andrews <marka@isc.org> |
2352. [bug] Various GSS_API fixups. [RT #17729] |
| f731b5d665e484c9b9634531c791cee9d87ab7a0 |
|
23-Jan-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 9925249931480c9e422b70c948b2665264ec46f5 |
|
22-Jan-2008 |
Mark Andrews <marka@isc.org> |
2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
[RT #17513] |
| 70e5a7403f0e0a3bd292b8287c5fed5772c15270 |
|
20-Jun-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
| ec5347e2c775f027573ce5648b910361aa926c01 |
|
19-Jun-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 21c7ecb9f01c0b5c513cd31dd2e1a6ef4ad24789 |
|
05-Dec-2006 |
Mark Andrews <marka@isc.org> |
better mcxt handling. remove buffer handling layer violation |
| 377231eb95731ed7e1471b38933e2438049185f3 |
|
05-Dec-2006 |
Mark Andrews <marka@isc.org> |
update copyright notice |
| 289ae548d52bc8f982d9823af64cafda7bd92232 |
|
04-Dec-2006 |
Mark Andrews <marka@isc.org> |
2105. [func] GSS-TSIG support (RFC 3645). |
| 69fe9aaafdd6a141610e86a777d325db75422070 |
|
29-Apr-2005 |
Mark Andrews <marka@isc.org> |
update copyright notice |
| ab023a65562e62b85a824509d829b6fad87e00b1 |
|
27-Apr-2005 |
Rob Austein <sra@isc.org> |
1851. [doc] Doxygen comment markup. [RT #11398] |
| 494576ce20cfd98d74955698cf8f7b37dce2f740 |
|
09-Dec-2004 |
Mark Andrews <marka@isc.org> |
1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
allow parallel make to succeed. |