release branch for krb5-1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21853 dc483132-0cff-0310-8789-dd5450dbe970
Update README with changes by ticket ID

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21856 dc483132-0cff-0310-8789-dd5450dbe970
patchlevel.h for krb5-1.7-alpha1

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21857 dc483132-0cff-0310-8789-dd5450dbe970
krb5-1.7-alpha1-postrelease

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@21859 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21855 from trunk

 ------------------------------------------------------------------------
 r21855 | raeburn | 2009-01-30 23:39:34 -0500 (Fri, 30 Jan 2009) | 28 lines
 Changed paths:
    M /trunk/src/tests/dejagnu/krb-standalone/rcp.exp
    M /trunk/src/tests/dejagnu/krb-standalone/rsh.exp
    M /trunk/src/tests/dejagnu/krb-standalone/sample.exp
    M /trunk/src/tests/dejagnu/t_inetd.c

 ticket: 6355
 subject: use t_inetd with a ready message and avoid waiting a lot in non-root tests
 target_version: 1.7
 tags: pullup

 Change t_inetd to print a ready message when it has started listening
 on the indicated port number.

 Look for this message in sample.exp rather than waiting an arbitrary
 (and usually excessive) 2s each time for the inetd-mode tests.  Use
 run_once to perform the standalone-mode test only once per test suite
 invocation.

 Change rsh and rcp tests to start the servers via t_inetd and avoid
 excessive waiting at startup.

 In some of my tests, this reduces the tests/dejagnu tests from taking
 over 6 minutes to taking around 2 minutes.

 (This does mean the server process will no longer have started up
 before we launch the client, so it may be slower to respond, but it'll
 still be faster than the 2s delay we used before even trying to
 connect.)

 We can probably eliminate the -D option code from krshd.c now.

 The tests run as root (rlogin, telnet) still need updating.

 ------------------------------------------------------------------------

ticket: 6355
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22006 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21860 from trunk

 ------------------------------------------------------------------------
 r21860 | raeburn | 2009-02-02 11:54:38 -0500 (Mon, 02 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/kdc/main.c

 ticket: 6356
 subject: small storage leak in KDC startup
 target_version: 1.7
 tags: pullup

 Remove duplicate strdup call.

 ------------------------------------------------------------------------

ticket: 6356
version_fixed: 1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22007 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21865, r21866 from trunk

 ------------------------------------------------------------------------
 r21866 | raeburn | 2009-02-02 13:42:06 -0500 (Mon, 02 Feb 2009) | 8 lines
 Changed paths:
    M /trunk/src/lib/kadm5/unit-test/api.0/mod-principal.exp
    M /trunk/src/lib/kadm5/unit-test/api.2/mod-principal.exp

 ticket: 6357
 subject: address lib/kadm5 test suite slowness
 target_version: 1.7

 In mod-principal tests for clearing the principal's policy, instead of
 just testing to see if the wrong string is output and timing out
 looking for it, check also for the new expected value.  Cuts test
 suite run time by about two minutes for each pass (client vs server).
 ------------------------------------------------------------------------
 r21865 | raeburn | 2009-02-02 13:29:28 -0500 (Mon, 02 Feb 2009) | 1 line
 Changed paths:
    M /trunk/src/kadmin/testing/scripts/start_servers_local

 don't delay so long while waiting for daemon startup
 ------------------------------------------------------------------------

ticket: 6357
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22008 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21867, r21868 from trunk

 ------------------------------------------------------------------------
 r21868 | raeburn | 2009-02-02 15:37:41 -0500 (Mon, 02 Feb 2009) | 6 lines
 Changed paths:
    M /trunk/src/kadmin/passwd/unit-test/kpasswd.0/changing.exp
    M /trunk/src/kadmin/testing/scripts/init_db

 ticket: 6358

 Revise last change to better resemble the original test, keeping the
 min-lifetime test code collected together.  Change policy to have a
 minimum password lifetime of 10s instead of 30s, and reduce the test
 delays accordingly.
 ------------------------------------------------------------------------
 r21867 | raeburn | 2009-02-02 14:29:52 -0500 (Mon, 02 Feb 2009) | 10 lines
 Changed paths:
    M /trunk/src/kadmin/passwd/unit-test/kpasswd.0/changing.exp

 ticket: 6358
 subject: speed up kpasswd tests

 Reorder some tests and tune delays, so that we don't need to run for
 much more than twice the min-password-life interval when testing that
 functionality.  (This could be made faster if we can assume that
 init_db will always have been run immediately before the tests start.)

 In my tests, this cuts something like 11 seconds off the run time (now
 down to about 65 seconds).
 ------------------------------------------------------------------------

ticket: 6358
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22009 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21871, r21872, r21873, r21879, r21880 from trunk

 ------------------------------------------------------------------------
 r21880 | ghudson | 2009-02-04 14:15:13 -0500 (Wed, 04 Feb 2009) | 3 lines
 Changed paths:
    M /trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_matching.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_srv.c

 Include k5-int.h in several pkinit source files, in order to define
 the KRB5_CONFIG symbols now used by those files.

 ------------------------------------------------------------------------
 r21879 | tsitkova | 2009-02-04 12:08:44 -0500 (Wed, 04 Feb 2009) | 2 lines
 Changed paths:
    M /trunk/src/include/k5-int.h
    M /trunk/src/kdc/do_tgs_req.c
    M /trunk/src/kdc/main.c
    M /trunk/src/lib/kadm5/alt_prof.c
    M /trunk/src/lib/kdb/kdb5.c
    M /trunk/src/lib/krb5/krb/conv_princ.c
    M /trunk/src/lib/krb5/krb/get_in_tkt.c
    M /trunk/src/lib/krb5/krb/init_ctx.c
    M /trunk/src/lib/krb5/krb/vfy_increds.c
    M /trunk/src/lib/krb5/os/an_to_ln.c
    M /trunk/src/lib/krb5/os/def_realm.c
    M /trunk/src/lib/krb5/os/get_krbhst.c
    M /trunk/src/lib/krb5/os/hst_realm.c
    M /trunk/src/lib/krb5/os/ktdefname.c
    M /trunk/src/lib/krb5/os/localaddr.c
    M /trunk/src/lib/krb5/os/locate_kdc.c
    M /trunk/src/lib/krb5/os/realm_dom.c
    M /trunk/src/lib/krb5/os/sendto_kdc.c
    M /trunk/src/lib/krb5/os/sn2princ.c
    M /trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_matching.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_profile.c
    M /trunk/src/plugins/preauth/pkinit/pkinit_srv.c

 Use macros for config parameters.

 ------------------------------------------------------------------------
 r21873 | ghudson | 2009-02-02 16:55:13 -0500 (Mon, 02 Feb 2009) | 3 lines
 Changed paths:
    M /trunk/src/include/k5-int.h

 Fix a whitespace error introduced when fixing a typo in the defines
 added to k5-int.h.

 ------------------------------------------------------------------------
 r21872 | ghudson | 2009-02-02 16:53:16 -0500 (Mon, 02 Feb 2009) | 2 lines
 Changed paths:
    M /trunk/src/include/k5-int.h

 Fix a typo in the defines added to k5-int.h.

 ------------------------------------------------------------------------
 r21871 | tsitkova | 2009-02-02 16:34:19 -0500 (Mon, 02 Feb 2009) | 2 lines
 Changed paths:
    M /trunk/src/include/k5-int.h

 Introduces macros for config parameters.

 ------------------------------------------------------------------------

ticket: 6397
status: resolved
version_fixed: 1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22013 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21881 from trunk

 ------------------------------------------------------------------------
 r21881 | ghudson | 2009-02-04 14:25:51 -0500 (Wed, 04 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/util/support/utf8_conv.c

 ticket: 6360
 tags: pullup
 target_version: 1.7

 In krb5int_utf8s_to_ucs2les, free the correct value on error, instead
 of the caller-supplied result pointer.

 ------------------------------------------------------------------------

ticket: 6360
status: resolved
version_fixed: 1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22014 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21884 from trunk

 ------------------------------------------------------------------------
 r21884 | wfiveash | 2009-02-04 17:29:44 -0500 (Wed, 04 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/kadmin/dbutil/kdb5_mkey.c
    M /trunk/src/lib/kdb/kdb5.c

 ticket: 6361

 new multi-masterkey support doesn't work well when system clock is set
 back

 The ticket contains the details.

 ------------------------------------------------------------------------

ticket: 6361
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22015 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21886 from trunk
 ------------------------------------------------------------------------
 r21886 | raeburn | 2009-02-04 18:28:09 -0500 (Wed, 04 Feb 2009) | 5 lines
 Changed paths:
    M /trunk/src/aclocal.m4
    M /trunk/src/lib/gssapi/generic/oid_ops.c

 ticket: 6362
 subject: don't do arithmetic on void pointers

 Fix one file in gssapi where we compute offsets from a void* without casting.
 Change options used with Sun compiler to make such expressions an error.
 ------------------------------------------------------------------------

ticket: 6362
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22016 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21887 from trunk

 ------------------------------------------------------------------------
 r21887 | raeburn | 2009-02-04 20:49:21 -0500 (Wed, 04 Feb 2009) | 8 lines
 Changed paths:
    M /trunk/src/aclocal.m4
    M /trunk/src/lib/gssapi/krb5/k5seal.c

 ticket: 6363
 subject: int/ptr bug in gssapi code
 target_version: 1.7
 tags: pullup

 Fix a pointer argument passed where an integer is needed.
 Update Sun compiler options to make that an error.  (The options we're
 currently using make it an error for assignment but not for argument passing.)
 ------------------------------------------------------------------------

ticket: 6363
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22017 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21888 from trunk

 ------------------------------------------------------------------------
 r21888 | raeburn | 2009-02-04 21:16:22 -0500 (Wed, 04 Feb 2009) | 11 lines
 Changed paths:
    M /trunk/src/include/k5-platform.h

 ticket: 6364
 subject: declare replacement [v]asprintf functions
 target_version: 1.7
 tags: pullup

 If HAVE_VASPRINTF is not defined, make sure krb5int_{,v}asprintf
 functions always get declared, applying the preprocessor conditional
 test only to the GCC format attribute.  If HAVE_VASPRINTF is defined,
 don't declare them at all.

 This fixes a bunch of function-not-declared warnings under Sun cc.
 ------------------------------------------------------------------------

ticket: 6364
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22018 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21889 from trunk

 ------------------------------------------------------------------------
 r21889 | raeburn | 2009-02-04 21:59:08 -0500 (Wed, 04 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/kadmin/server/kadm_rpc_svc.c
    M /trunk/src/lib/kadm5/chpass_util.c
    M /trunk/src/plugins/kdb/db2/pol_xdr.c

 ticket: 6365
 subject: include omitted system header string.h
 target_version: 1.7
 tags: pullup

 Sun cc warns about some of the string functions being undeclared in
 several source files.  So, include string.h there.
 ------------------------------------------------------------------------

ticket: 6365
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22019 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21890 from trunk

 ------------------------------------------------------------------------
 r21890 | ghudson | 2009-02-05 13:19:23 -0500 (Thu, 05 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/lib/krb5/keytab/ktbase.c

 ticket: 6367
 tags: pullup
 target_version: 1.7

 Fix a memory leak in krb5_kt_resolve when we fail to lock
 kt_typehead_lock.

 ------------------------------------------------------------------------

ticket: 6367
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22020 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21894 from trunk

 ------------------------------------------------------------------------
 r21894 | ghudson | 2009-02-05 13:43:08 -0500 (Thu, 05 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/lib/krb5/krb/chpw.c

 ticket: 6368
 tags: pullup
 target_version: 1.7

 Add a missing break in the switch statement of
 krb5int_setpw_result_code_string.

 ------------------------------------------------------------------------

ticket: 6368
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22021 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21895 from trunk

 ------------------------------------------------------------------------
 r21895 | epeisach | 2009-02-05 14:02:29 -0500 (Thu, 05 Feb 2009) | 7 lines
 Changed paths:
    M /trunk/src/lib/rpc/unit-test/config/unix.exp
    M /trunk/src/lib/rpc/unit-test/rpc_test.0/expire.exp
    M /trunk/src/lib/rpc/unit-test/rpc_test.0/fullrun.exp
    M /trunk/src/lib/rpc/unit-test/rpc_test.0/gsserr.exp

 ticket: 6349

 Detect failure to register with rpcbind/portmap due to security
 restrictons and not bomb out in tests.

 ------------------------------------------------------------------------

ticket: 6349
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22022 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21899 from trunk

 ------------------------------------------------------------------------
 r21899 | ghudson | 2009-02-05 15:07:45 -0500 (Thu, 05 Feb 2009) | 3 lines
 Changed paths:
    M /trunk/src/lib/krb5/krb/gc_frm_kdc.c

 In gc_frm_kdc.c's do_traversal(), fix an assert which was doing an
 assignment instead of a compare.

 ------------------------------------------------------------------------

ticket: 6370
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22025 dc483132-0cff-0310-8789-dd5450dbe970
pull up r21900 from trunk

 ------------------------------------------------------------------------
 r21900 | wfiveash | 2009-02-05 15:57:09 -0500 (Thu, 05 Feb 2009) | 10 lines
 Changed paths:
    M /trunk/src/kadmin/dbutil/kdb5_mkey.c
    M /trunk/src/lib/kdb/kdb5.c
    M /trunk/src/lib/kdb/kdb_default.c

 ticket: 6371
 subject: deal with memleaks in migrate mkey project
 Version_Reported: 1.7
 Target_Version: 1.7
 Tags: pullup

 Ken R. told me that Coverity found several potential memleaks introduced
 by the mkey migration project.  This addresses those leaks and tweaks
 the code formatting in a few places.

 ------------------------------------------------------------------------

ticket: 6371
version_fixed: 1.7
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-7@22026 dc483132-0cff-0310-8789-dd5450dbe970