Changes in mapfile-vers http://src.iws.cs.ovgu.de/source/rss/illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers en Copyright 2005 Java 872 remove duplicate daemon() definitions Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Marcel Telka <marcel@telka.sk> Approved by: Richard Lowe <richlowe@richlowe.net> /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - ce3c309f71f6893197099bfac06adb66f0870d7d Ryan Zezeski <ryan@zinascii.com> 3882 Remove xmod & friends Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net> /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 694c35faa87b858ecdadfe4fc592615f4eefbb07 Josef 'Jeff' Sipek <jeffpc@josefsipek.net> PSARC 2010/135 Kerberos Diagnostic Enhancements (umbrella case) 6835328 Error messages generated by applications using RPCSEC_GSS are too vague /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 5e01956f3000408c2a2c5a08c8d0acf2c2a9d8ee Glenn Barry <Glenn.Barry@oracle.com> 6909129 krb5 keytab management API should be simplified to easily merge keys from different realms /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 418e2f3050b6a419bd7c37e2ed3d8dd99b7cc261 Shawn Emery <Shawn.Emery@Sun.COM> 6916796 OSnet mapfiles should use version 2 link-editor syntax --HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - cd3e933325e68e23516a196a8fea7f49b1e497c3 Ali Bahrami <Ali.Bahrami@Oracle.COM> PSARC 2010/083 Kerberos Profile API 6927135 A simple API should be provided to create a Kerberos system's configuration information /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - bfc032a14cc866ab7f34ca6fd86c240a5ebede9d Shawn Emery <Shawn.Emery@Sun.COM> 6794523 rcache could skip fsync(2)s in common cases with a dynamic skew concept /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 16d62afbe67d641c4a1c953eca69066fec82f3d9 Nicolas Williams <Nicolas.Williams@Sun.COM> 6885980 Need case-insensitive keytab lookups for MS interop 6885387 gsskrb5_extract_authz_data_from_sec_context() fails with service ticket sent by Windows 7 client 6858400 kclient cant join Windows AD domain if hostname is 20 characters or longer 6867203 Solaris acceptors fail in Windows 2000 environment 6868908 Solaris acceptors should have returned KRB5KRB_AP_ERR_MODIFIED for Microsoft interoperability 6867208 Windows client cannot recover from KRB5KRB_AP_ERR_SKEW error /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 72f0806acd90f56fb47a8087c33cfeaec527fdda Shawn Emery <Shawn.Emery@Sun.COM> PSARC 2009/418 Kerberos V5 PAC API 6283931 SPNEGO needs to follow latest RFC 6808598 krb5 APIs needed to create and parse PAC data 6817447 libgss and various mechs are hiding both the real minor_status and the error token /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - ba7b222e36bac28710a7f43739283302b617e7f5 Glenn Barry <Glenn.Barry@Sun.COM> 6777148 idmap fails to auto-discover AD due to ldap_sasl_bind failure /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - db02be5754449d8a49e2d5a695ba0237d964b5dc <Mark.Phalan@Sun.COM> 6798660 Cadmium .NOT file processing problem with CWD relative file paths Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - bfed486ad8de8b8ebc6345a8e10accae08bf2f45 Ali Bahrami <Ali.Bahrami@Sun.COM> PSARC/2008/631 Kerberos PKINIT PSARC/2008/358 removal of kadm5.keytab 6698059 Resync with mit 1.6.3 (pkinit) 6749302 pam_krb5 auth fails with key table entry not found /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 159d09a20817016f09b3ea28d1bdada4a336bb91 Mark Phalan <Mark.Phalan@Sun.COM> 6692336 ktkt_warnd(1M) client code should be a library /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - c2785286330b58810071fc24f6ca69f401682dff gtb <none@none> 6245750 kadmin "Bad encryption type" error should state the enctype 6658621 Configuration checks for kerberos daemons should be done by the daemons themselves 6658624 Missing error strings for new kerberos DB error types 6658627 kpropd should use its executable name and not the full path when logging error messages 6658631 error messages in kerberos deamons need cleanup 6664832 various memleaks in krb libs --HG-- rename : usr/src/cmd/krb5/kadmin/server/svc-kdc.master => deleted_files/usr/src/cmd/krb5/kadmin/server/svc-kdc.master rename : usr/src/cmd/krb5/krb5kdc/svc-kdc => deleted_files/usr/src/cmd/krb5/krb5kdc/svc-kdc rename : usr/src/cmd/krb5/slave/svc-kdc.slave => deleted_files/usr/src/cmd/krb5/slave/svc-kdc.slave rename : usr/src/cmd/svc/shell/krb_include.sh => deleted_files/usr/src/cmd/svc/shell/krb_include.sh /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 7c64d3750da7fda7e450b8f9b0b963905ded6379 mp153739 <none@none> 6573019 mit 1.4 sub-glue layer resync --HG-- rename : usr/src/lib/gss_mechs/mech_krb5/mech/k5mech.c => deleted_files/usr/src/lib/gss_mechs/mech_krb5/mech/k5mech.c /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - ab9b2e153c3a9a2b1141fefa87925b1a9beb1236 gtb <none@none> PSARC/2006/277 Support for Kerberos Records in LDAP Directory 6399903 Support for Kerberos Records in LDAP Directory 6520554 MIT bug #5427 with krb5_kt_get_name() 6597851 dmake lint in usr/src/lib/gss_mechs/mech_krb5 broken --HG-- rename : usr/src/lib/gss_mechs/mech_krb5/include/krb5/kdb_dbm.h => deleted_files/usr/src/lib/gss_mechs/mech_krb5/include/krb5/kdb_dbm.h rename : usr/src/lib/krb5/kadm5/srv/adb_free.c => deleted_files/usr/src/lib/krb5/kadm5/srv/adb_free.c rename : usr/src/lib/krb5/kdb/fetch_mkey.c => deleted_files/usr/src/lib/krb5/kdb/fetch_mkey.c rename : usr/src/lib/krb5/kdb/kdb_dbm.c => deleted_files/usr/src/lib/krb5/kdb/kdb_dbm.c rename : usr/src/lib/krb5/kdb/kdb_hdr.h => deleted_files/usr/src/lib/krb5/kdb/kdb_hdr.h rename : usr/src/lib/krb5/kdb/setup_mkey.c => deleted_files/usr/src/lib/krb5/kdb/setup_mkey.c rename : usr/src/lib/krb5/kdb/store_mkey.c => deleted_files/usr/src/lib/krb5/kdb/store_mkey.c rename : usr/src/lib/krb5/kdb/verify_mky.c => deleted_files/usr/src/lib/krb5/kdb/verify_mky.c rename : usr/src/lib/krb5/kdb/kdb_kt.h => usr/src/lib/gss_mechs/mech_krb5/include/kdb_kt.h rename : usr/src/lib/krb5/kadm5/adb_err.h => usr/src/lib/krb5/kdb/adb_err.h rename : usr/src/lib/krb5/kadm5/srv/adb_openclose.c => usr/src/lib/krb5/plugins/kdb/db2/adb_openclose.c rename : usr/src/lib/krb5/kadm5/srv/adb_policy.c => usr/src/lib/krb5/plugins/kdb/db2/adb_policy.c rename : usr/src/lib/krb5/kdb/kdb_compat.h => usr/src/lib/krb5/plugins/kdb/db2/kdb_compat.h rename : usr/src/lib/krb5/kdb/kdb_db2.c => usr/src/lib/krb5/plugins/kdb/db2/kdb_db2.c rename : usr/src/lib/krb5/kdb/kdb_db2.h => usr/src/lib/krb5/plugins/kdb/db2/kdb_db2.h rename : usr/src/lib/krb5/kdb/kdb_xdr.c => usr/src/lib/krb5/plugins/kdb/db2/kdb_xdr.c rename : usr/src/lib/krb5/db2/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/Makefile rename : usr/src/lib/krb5/db2/Makefile.com => usr/src/lib/krb5/plugins/kdb/db2/libdb2/Makefile.com rename : usr/src/lib/krb5/db2/README.db2 => usr/src/lib/krb5/plugins/kdb/db2/libdb2/README.db2 rename : usr/src/lib/krb5/db2/btree/bt_close.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_close.c rename : usr/src/lib/krb5/db2/btree/bt_conv.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_conv.c rename : usr/src/lib/krb5/db2/btree/bt_debug.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_debug.c rename : usr/src/lib/krb5/db2/btree/bt_delete.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_delete.c rename : usr/src/lib/krb5/db2/btree/bt_get.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_get.c rename : usr/src/lib/krb5/db2/btree/bt_open.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_open.c rename : usr/src/lib/krb5/db2/btree/bt_overflow.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_overflow.c rename : usr/src/lib/krb5/db2/btree/bt_page.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_page.c rename : usr/src/lib/krb5/db2/btree/bt_put.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_put.c rename : usr/src/lib/krb5/db2/btree/bt_search.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_search.c rename : usr/src/lib/krb5/db2/btree/bt_seq.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_seq.c rename : usr/src/lib/krb5/db2/btree/bt_split.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_split.c rename : usr/src/lib/krb5/db2/btree/bt_utils.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/bt_utils.c rename : usr/src/lib/krb5/db2/btree/btree.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/btree.h rename : usr/src/lib/krb5/db2/btree/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/btree/extern.h rename : usr/src/lib/krb5/db2/db/db.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/db/db.c rename : usr/src/lib/krb5/db2/hash/dbm.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/dbm.c rename : usr/src/lib/krb5/db2/hash/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/extern.h rename : usr/src/lib/krb5/db2/hash/hash.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash.c rename : usr/src/lib/krb5/db2/hash/hash.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash.h rename : usr/src/lib/krb5/db2/hash/hash_bigkey.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_bigkey.c rename : usr/src/lib/krb5/db2/hash/hash_func.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_func.c rename : usr/src/lib/krb5/db2/hash/hash_log2.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_log2.c rename : usr/src/lib/krb5/db2/hash/hash_page.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hash_page.c rename : usr/src/lib/krb5/db2/hash/hsearch.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/hsearch.c rename : usr/src/lib/krb5/db2/hash/page.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/page.h rename : usr/src/lib/krb5/db2/hash/search.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/hash/search.h rename : usr/src/lib/krb5/db2/i386/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/i386/Makefile rename : usr/src/lib/krb5/db2/include/db-int.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-int.h rename : usr/src/lib/krb5/db2/include/db-ndbm.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-ndbm.h rename : usr/src/lib/krb5/db2/include/db-queue.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/include/db-queue.h rename : usr/src/lib/krb5/db2/mapfile-vers => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mapfile-vers rename : usr/src/lib/krb5/db2/mpool/mpool.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mpool/mpool.c rename : usr/src/lib/krb5/db2/mpool/mpool.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/mpool/mpool.h rename : usr/src/lib/krb5/db2/recno/extern.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/extern.h rename : usr/src/lib/krb5/db2/recno/rec_close.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_close.c rename : usr/src/lib/krb5/db2/recno/rec_delete.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_delete.c rename : usr/src/lib/krb5/db2/recno/rec_get.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_get.c rename : usr/src/lib/krb5/db2/recno/rec_open.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_open.c rename : usr/src/lib/krb5/db2/recno/rec_put.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_put.c rename : usr/src/lib/krb5/db2/recno/rec_search.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_search.c rename : usr/src/lib/krb5/db2/recno/rec_seq.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_seq.c rename : usr/src/lib/krb5/db2/recno/rec_utils.c => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/rec_utils.c rename : usr/src/lib/krb5/db2/recno/recno.h => usr/src/lib/krb5/plugins/kdb/db2/libdb2/recno/recno.h rename : usr/src/lib/krb5/db2/sparc/Makefile => usr/src/lib/krb5/plugins/kdb/db2/libdb2/sparc/Makefile /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 54925bf60766fbb4f1f2d7c843721406a7b7a3fb willf <none@none> PSARC/2006/690 Kerberos client configuration improvements 6496710 enable dns_lookup_kdc by default 6499339 krb zero conf needs better realm lookup logic 6523887 krb should support client side referrals 6528391 krb5.conf should not be delivered in a misconfigured state /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - fe598cdcd847f8359013532d5c691bb6190378c0 mp153739 <none@none> 6543658 krb5_set_default_tgs_enctypes: referenced symbol not found /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 351aac2c80ab55e0405f021303fd20190a1fe2ce gtb <none@none> 6394510 error table is out of whack 6497698 krb5kdc(1) should also provide password expiration information 6497703 pam_krb5(5) should interpret the key expiration field to display expiration warning information 6514446 pam_dhkeys prompts for secure RPC password when neither LOCAL or DES credentials exist 6515558 Pre-s10 client's keytab file are generated incorrectly when auth princ == target princ 6523684 Memory rcache function doesn't acquire the right locks /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 3125ebfc35130d243e775dc38a6a59be4df0b137 semery <none@none> PSARC 2006/424 Kerberos 1.4 KDC Resync 6406993 kdc and client resync with MIT 1.4 /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mapfile-vers - 56a424cca6b3f91f31bdab72a4626c48c779fe8b mp153739 <none@none>