branch krb5-1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18745 dc483132-0cff-0310-8789-dd5450dbe970
patchlevel.h for krb5-1.6 branch

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18746 dc483132-0cff-0310-8789-dd5450dbe970
Pullup from trunk to 1.6 branch

ticket: 4657
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18766 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18748 from trunk

 r18748@cathode-dark-space:  raeburn | 2006-10-27 23:06:30 -0400
 ticket: new
 subject: don't confuse profile iterator in 425 princ conversion
 target_version: 1.6
 tags: pullup
 
 The profile iterator code hangs onto and uses the list of names passed
 in.  The krb5_425_conv_principal code reuses that array when the
 iterator may still be used.
 
 * conv_princ.c (krb5_425_conv_principal): Use separate name arrays for
 the iterator and the v4_realm lookup that may be done inside the
 iteration loop.
 

ticket: 4534
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18772 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18751 from trunk

 r18751@cathode-dark-space:  raeburn | 2006-10-30 20:10:34 -0500
 ticket: 4534
 
 * conv_princ.c (krb5_425_conv_principal): Fix silly typo in arrays' sizes in
 previous change.
 

ticket: 4534

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18773 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18750 from trunk

 r18750@cathode-dark-space:  wfiveash | 2006-10-30 15:56:57 -0500
 ticket: new
 subject: latest Novell ldap patches and kdb5_util dump support for ldap
 Target_Version: krb5-1.6
 Tags: pullup
 
 I've applied Novell's latest patches for their LDAP KDB plugin.  I've 
 also implemented and tested support for kdb5_util dump using the LDAP
 KDB plugin.  I also added a Sun copyright on files that I've modified.
 
 

ticket: 4562
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18774 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18762 from trunk

 r18762@cathode-dark-space:  epeisach | 2006-11-05 09:29:24 -0500
 Subject: Make clean does not remove lib/crypto/t_prf
 ticket: new
 tags: pullup
 
 Remove t_prf and t_prf.o on make clean.
 
 

ticket: 4624
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18775 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18763 from trunk

 r18763@cathode-dark-space:  epeisach | 2006-11-05 09:37:28 -0500
 ticket: new
 subject: Make clean in lib/kdb leaves error table files
 tags: pullup
 
 Remove adb_err.c and adb_err.h on make clean.
 
 

ticket:4625
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18776 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18754 from trunk

 r18754@cathode-dark-space:  coffman | 2006-11-01 17:40:30 -0500
 ticket: 4566
 ticket: 4567
 ticket: 4587
 Target_Version: 1.6
 Tags: pullup
 
 Modify the preath plugin interface so that a plugin's context is
 global to all the modules within a plugin.  Also, change the
 client-side interface so that the preauth plugin context (once
 created) lives the lifetime of a krb5_context.  This will allow
 future changes that can set plugin parameters.  The client side
 request context lives the lifetime of a call to krb5_get_init_creds().
 
 Make the sample preauth plugins buildable outside the source tree.
 
 Fix minor memory leak in sort_krb5_padata_sequence().
 
 Add a prototype for krb5_do_preauth_tryagain() and change the plugin
 interface.
 
 Incorporates fixes from Nalin Dahyabhai <nalin@redhat.com> for leaks
 of the function table pointers (rt #4566) and fix KDC crash (rt #4567)
 
 

ticket: 4566
ticket: 4567
ticket: 4587
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18777 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18764 from trunk

 r18764@cathode-dark-space:  jaltman | 2006-11-06 16:55:13 -0500
 ticket: new
 tags: pullup
 subject: krb5_get_init_creds_password does not consistently prompt for password changing
 
  	krb5_get_init_creds_password() previously did not consistently
 	handle KRB5KDC_ERR_KEY_EXP errors.  If there is a "master_kdc" 
  	entry for the realm and the KDC is reachable, then the function 
 	will prompt the user for a password change.  Otherwise, it will
 	return the error code to the caller.  If the caller is a ticket 
 	manager, it will prompt the user for a password change with a
 	dialog that is different from the one generated by the prompter
 	function passed to krb5_get_init_creds_password.
 
 	With this change krb5_get_init_creds_password() will always 
 	prompt the user if it would return KRB5KDC_ERR_KEY_EXP unless
 	the function is compiled with USE_LOGIN_LIBRARY.  (KFM)
 
 

ticket: 4639

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18778 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18767 from trunk

 r18767@cathode-dark-space:  jaltman | 2006-11-08 04:58:49 -0500
 ticket:new
 tags: pullup
 subject: commits for KFW 3.1 Beta 3
 
      KfW 3.1 beta 3 (NetIDMgr 1.1.4.0)
      
      source for 1.1.4.0
      
      - Eliminate unused commented out code.
      
      nidmgr32.dll (1.1.4.0)
      
      - The configuration provider was incorrectly handling the case where a
        configuration value also specifies a configuration path, resulting
        in the configuration value not being found.  Fixed.
      
      - Fix a race condition when refreshing identities where removing an
        identity during a refresh cycle may a crash.
      
      - Fix a bug which would cause an assertion to fail if an item was
        removed from one of the system defined menus.
      
      - When creating an indirect UI context, khui_context_create() will
        correctly fill up a credential set using the selected credentials.
      
      krb5cred.dll (1.1.4.0)
      
      - Fix a race condition during new credentials acquisition which may
        cause the Krb5 plug-in to abandon a call to
        krb5_get_init_creds_password() and make another call unnecessarily.
      
      - If krb5_get_init_creds_password() KRB5KDC_ERR_KEY_EXP, the new
        credentials dialog will automatically prompt for a password change
        instead of notifying the user that the password needs to be changed.
      
      - When handling WMNC_DIALOG_PREPROCESS messages, the plug-in thread
        would only be notified of any changes to option if the user
        confirmed the new credentials operation instead of cancelling it.
      
      - Additional debug output for the DEBUG build.
      
      - Reset the sync flag when reloading new credentials options for an
        identity.  Earlier, the flag was not being reset, which can result
        in the new credentials dialog not obtaining credentials using the
        new options.
      
      - Handle the case where the new credentials dialog maybe closed during
        the plug-in thread is processing a request.
      
      - Fix a condition which would cause the Krb5 plug-in to clear the
        custom prompts even if Krb5 was not the identity provider.
      
      - Once a password is changed, use the new password to obtain new
        credentials for the identity.
      
      netidmgr.exe (1.1.4.0)
      
      - Fix a redraw issue which left areas of the credentials window
        unupdated if another window was dragged across it.
      
      - Handle WM_PRINTCLIENT messages so that the NetIDMgr window will
        support window animation and other features that require a valid
        WM_PRINTCLIENT handler.
      
      - During window repaints, NetIDMgr will no longer invoke the default
        window procedure.
      
      - Add support for properly activating and bringing the NetIDMgr window
        to the foreground when necessary.  If the window cannot be brought
        to the foreground, it will flash the window to notify the user that
        she needs to manually activate the NetIDMgr window.
      
      - When a new credentials dialog is launched as a result of an external
        application requesting credentials, if the NetIDMgr application is
        not minimized, it will be brought to the foreground before the new
        credentials dialog is brought to the foreground.  Earlier, the new
        credentials dialog may remain hidden behind other windows in some
        circumstances.
      
      - When displaying custom prompts for the new credentials dialog, align
        the input controls on the right.
 
 

ticket: 4667

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18779 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18781 from trunk

 r18781@cathode-dark-space:  jaltman | 2006-11-08 18:59:58 -0500
 ticket: new
 tags: pullup
 subject: commit for KFW 3.1 beta 3 (part two)
 
 	remove prototype for removed function
 
 
 

ticket: 4675

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18788 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18787 from trunk

 r18787@cathode-dark-space:  coffman | 2006-11-09 10:25:52 -0500
 ticket: new
 subject: Remove obsolete/conflicting prototype for krb524_convert_princs
 Tags: pullup
 
 After krb524_convert_princs() was made static, the prototype in krb524d.h
 no longer matches the actual function declaration and is no longer needed.
 

ticket: 4683
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18794 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18789 from trunk

 r18789@cathode-dark-space:  coffman | 2006-11-09 15:15:54 -0500
 ticket: new
 subject: Add public function to get keylenth associated with an enctype
 Tags: pullup
 
 Add a new function, krb5_c_keylength, to libk5crypto to obtain the
 keylength associated with an enctype.
 

ticket: 4688
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18795 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18790 from trunk

 r18790@cathode-dark-space:  coffman | 2006-11-09 15:40:29 -0500
 ticket: new
 subject: Add "get_data" function to the client preauth plugin interface
 Tags: pullup
 
 Modify the client preauth plugin interface to pass in a function
 pointer and data pointer so the plugin may request information
 otherwise unavailable.
 
 

ticket: 4690
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18796 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18793 from trunk

 r18793@cathode-dark-space:  rra | 2006-11-09 18:29:26 -0500
 ticket: new
 subject: Delay kadmind random number initialization until after fork
 Component: krb5-admin
 Version_Reported: 1.4.4
 Target_Version 1.6
 Tags: pullup
 
 Delay initialization of the random number generator in kadmind until
 after the fork and backgrounding of the process.  Otherwise, a lack of
 sufficient entropy during the system boot process will delay system
 boot on systems that run each init script in series and that start
 kadmind via an init script.
 

ticket: 4693
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18797 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18792 from trunk

 r18792@cathode-dark-space:  rra | 2006-11-09 17:58:02 -0500
 ticket: new
 Componet: krb5-doc
 Version_Reported: 1.4.4
 Target_Version: 1.6
 Tags: pullup
 
 Document how to change the krbtgt key for a realm.
 

ticket: 4692
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18798 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18799 from trunk

 r18799@cathode-dark-space:  wfiveash | 2006-11-13 15:25:08 -0500
 ticket: new
 subject: more Novell ldap patches from Nov 6 and Fix for wrong password policy reference count
 Target_Version: krb5-1.6
 Tags: pullup
 
 This commit is to update the code with the following Novell patches from
 Nov 6, 2006:
 
 patch-ldap-kadm5-macro.diff
 patch-ldap-fixes.diff
 patch-ldap-key-seq-salt.diff
 patch-ldap-misc.diff
 
 And this patch from Nov 8:
 patch-ldap-pwd-policy.c
 
 

ticket: 4735
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18802 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18800 from trunk

 r18800@cathode-dark-space:  coffman | 2006-11-13 17:51:23 -0500
 ticket: new
 subject: correct client preauth plugin request_context
 Component: krb5-libs
 Target_Version: 1.6
 Tags: pullup
 
 Correctly share the same request_context between all modules
 within a single client preauth plugin.
 

ticket: 4737
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18803 dc483132-0cff-0310-8789-dd5450dbe970
pull up r18801 from trunk

 r18801@cathode-dark-space:  coffman | 2006-11-13 17:59:55 -0500
 ticket: new
 subject: allow server preauth plugin verify_padata function to return e-data
 Component: krb5-kdc
 Target_Version: 1.6
 Tags: pullup
 
 Change server-side preauth plugin interface to allow the plugin's
 verify_padata function to return e-data to be returned to the client.
 (Patch from Nalin Dahyabhai <nalin@redhat.com>)
 
 Update sample plugins to return e-data to exercise the code.
 
 Fix memory leak in the wpse plugin.
 
 

ticket: 4738
version_fixed: 1.6

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@18804 dc483132-0cff-0310-8789-dd5450dbe970