Add *~ to .gitignore

This covers src/include/autoconf.h.in~ which can be created by
util/reconf.
Updated Example section in kdc.conf
Sphinx html: reorder admin/user commands index
Automatically create DIR ccache directories

If the directory for a DIR ccache doesn't exist yet, try to create it
(but not its parents) with mode 700.  Exercise this in test scripts by
not pre-creating directories.

ticket: 7196 (new)
Allow full ccache name in k5test's K5Realm.klist
Translate WinSock errors to Posix counterparts

MSVC 2010 defines both Posix and WinSock error values so we can no longer
simply #define the Posix error values to be their WinSock counterpart.
This patch explicitly #includes <errno.h> in port-sockets.h and still
conditionally defines the Posix error values for compatibility with older
MSVC but also translates WinSock errors to Posix for MSVC 2010
compatibility.

The downside to this approach is that there are some Posix errors we
do not currently detect (e.g. EADDRINUSE) that are neither #defined nor
translated.  If we use one of those in the future but fail to update
TranslateWSAGetLastError() we'll once again be in the situation that the
windows build will compile but fail to work, possibly only when some rare
error condition occurs.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7197 (new)
tags: pullup
Implement switch_to for ccapiv3

krb5_stdccv3_switch_to() calls cc_ccache_set_default().
krb5_stdccv3_resolve() checks for NULL or empty residual and calls
cc_context_get_default_ccache_name() in those cases.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7198 (new)
tags: pullup
Add krb5int_cc_user_set_default_name

Set the default credential cache name for all processes for the current
user.  Currently implemented, for windows only, by setting
HKEY_CURRENT_USER\Software\MIT\Kerberos5:ccname to the specified
ccache name.  This will not override the environment variable 'KRB5CCNAME'.
It will override HKEY_LOCAL_MACHINE and 'indirect' registry values.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7199 (new)
tags: pullup
Add comment documenting make_toolong_error()

The KDC doesn't obviously call make_toolong_error(), but some code in
net-server.c (which is linked into the KDC) does.  Document this fact.
Always recreate acl files during dejagnu tests

The dejagnu tests create some persistent acl files containing
hostname-derived principal names.  These can get out of date if the
host has changed names since the last time the dejagnu tests were run,
causing failures (notably in iprop.exp).  To avoid this problem,
change the dejagnu tests to always create new acl files for each test
run.

ticket: 7200 (new)
tags: pullup
target_version: 1.10.3
Correct comments in port-sockets.h
Handle huge /bin directories in libdb2 test

The test suite for libdb2 uses /bin as a source of filenames and
contents for insertion into databases.  Fedora 17 (and possibly other
OSes) have /bin symlinked to /usr/bin, which can vastly increase the
number of files found, exceeding some limits of the test databases.
Truncate this list of files at 100 to prevent this problem.

ticket: 7201 (new)
status: pullup
target_version: 1.10.3
Cleanup docs for DNS lookup configure options

DNS lookups for KDCs have been unconditionally enabled in
configure since 2003; configure options only affect whether
DNS lookups are used for realm names.
Change the RST documentation of configure options to catch up.
Sort configure options

Stick to the order of 'configure --help' for most sections, but
sort environment variables alphabetically (since, e.g.,
configure --help does not list CPPFLAGS and there is not a good
way to add that).
Note that this does not add or remove any content, even though
some options are missing/extra.
Only list --enable-dns-for-realm once

If we list something as "commonly used", we seem to not also
list it with the rest of the options.  This has the advantage
of not requiring us to remember to update two things for future
changes, but the disadvantage of requiring users to look in two
places for options.  Stick with the prevailing form for now.
Sync configure options with configure

We should try to stay coupled with the actual configure options, as
documented by 'configure --help'.
Remove an option which is no longer present and add several that
were missing.
Standardize on commas after "e.g.", "i.e."

It seems to be "more correct".
Tidy up configure options documentation

Our only C++ code is under src/tests/misc/.

Infodir is only referenced in send-pr's makefile but not used
in any rules therein.

Docdir and its descendants ({html,dvi,pdf,ps}dir) are not used
in any install rules.

We do not have anything to install into libexecdir or sharedstatedir,
and oldincludedir simply has no effect.
New "Supported date and time formats" document
Replace // comment in ccdefname.c