src-test/crypto/heimdal/tools, branch mainFreeBSD source treehttps://cgit-dev.freebsd.org/src-test/atom?h=main2014-09-08T19:00:13ZInclude the gssapi_krb5 library in KRB5_LDFLAGS.2014-09-08T19:00:13ZGlen Barbergjb@FreeBSD.org2014-09-08T19:00:13Zurn:sha1:28c80a7dd87cb6f9be02013eb1832277b07e34b6
PR: 156245
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
- Update FreeBSD's Heimdal distribution to 1.5.2. This is a bugfix2012-04-08T08:19:17ZStanislav Sedovstas@FreeBSD.org2012-04-08T08:19:17Zurn:sha1:cf771f223b1a69e11fd1b70b0a274a73fe844335
release, which fixes a DoS issue in libkrb5.
- Update FreeBSD Heimdal distribution to version 1.5.1. This also brings2012-03-22T08:48:42ZStanislav Sedovstas@FreeBSD.org2012-03-22T08:48:42Zurn:sha1:ae77177087c655fc883075af4f425b37e032cd05
several new kerberos related libraries and applications to FreeBSD:
o kgetcred(1) allows one to manually get a ticket for a particular service.
o kf(1) securily forwards ticket to another host through an authenticated
and encrypted stream.
o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
and other user kerberos operations. klist and kswitch are just symlinks
to kcc(1) now.
o kswitch(1) allows you to easily switch between kerberos credentials if
you're running KCM.
o hxtool(1) is a certificate management tool to use with PKINIT.
o string2key(1) maps a password into key.
o kdigest(8) is a userland tool to access the KDC's digest interface.
o kimpersonate(8) creates a "fake" ticket for a service.
We also now install manpages for some lirbaries that were not installed
before, libheimntlm and libhx509.
- The new HEIMDAL version no longer supports Kerberos 4. All users are
recommended to switch to Kerberos 5.
- Weak ciphers are now disabled by default. To enable DES support (used
by telnet(8)), use "allow_weak_crypto" option in krb5.conf.
- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
disabled due to the function they use (krb5_get_err_text(3)) being
deprecated. I plan to work on this next.
- Heimdal's KDC now require sqlite to operate. We use the bundled version
and install it as libheimsqlite. If some other FreeBSD components will
require it in the future we can rename it to libbsdsqlite and use for these
components as well.
- This is not a latest Heimdal version, the new one was released while I was
working on the update. I will update it to 1.5.2 soon, as it fixes some
important bugs and security issues.
- Flatten the vendor heimdal tree.2011-09-29T05:23:57ZStanislav Sedovstas@FreeBSD.org2011-09-29T05:23:57Zurn:sha1:31f1e9c17ffae440059e8cc532fa26b92d534f7bFix conflicts after heimdal-1.1 import and add build infrastructure. Import2008-05-07T13:53:12ZDoug Rabsondfr@FreeBSD.org2008-05-07T13:53:12Zurn:sha1:33f12199250a09b573f7a518b523fdac3f120b8f
all non-style changes made by heimdal to our own libgssapi.
Vendor import of Heimdal 1.12008-05-07T13:39:42ZDoug Rabsondfr@FreeBSD.org2008-05-07T13:39:42Zurn:sha1:c19800e8cd5640693f36f2040db4ab5e8d738146Vendor import of Heimdal 0.6.3.2005-02-24T22:22:53ZJacques Vidrinenectar@FreeBSD.org2005-02-24T22:22:53Zurn:sha1:8d4ba808a53020900c275b6f1cf21fc6e9f3bf36Clean up the Heimdal vendor branch by removing files not included in2005-02-24T22:14:04ZJacques Vidrinenectar@FreeBSD.org2005-02-24T22:14:04Zurn:sha1:a43dbe2565f7f6b3e66d21dfb36395d4da54832b
any import for several years.
If memory serves, this was
Suggested by: ru
an awfully long time ago-- sorry for the delay!
Vendor import of Heimdal 0.6.1.2004-04-03T21:22:55ZJacques Vidrinenectar@FreeBSD.org2004-04-03T21:22:55Zurn:sha1:1c43270ada91f3473174c2bf81fba64963b7e4acVendor import of Heimdal 0.6.2003-10-09T19:36:20ZJacques Vidrinenectar@FreeBSD.org2003-10-09T19:36:20Zurn:sha1:bbd80c285ead4d04e4b8b9e950164352819694ba