Update patchlevel.h for krb5-1.11.1-postrelease
Fix a memory leak in krb5_get_init_creds_keytab

lookup_etypes_for_keytab was not freeing the keytab entries it
iterated over.  Reported by nalin@redhat.com.

(cherry picked from commit a39af2971e03d3dc6da2cfd8959feebd40a0ffc0)

ticket: 7586
version_fixed: 1.11.2
status: resolved
Fix dependencies in tests/gssapi

Use $(COMMON_DEPS) instead of $(COMMON_DEPLIBS) for dependencies; the
latter appears to be a typo.  Fixes build when using "make -j".

(cherry picked from commit 055d1ffa81d0730e92aa3f1ed5045cd805c74957)

ticket: 7587
version_fixed: 1.11.2
status: resolved
Fix condition with empty body

Found by clang's warnings.

(cherry picked from commit 18796a2eb6c05706c6635453b3e425955aab93f4)

ticket: 7591
version_fixed: 1.11.2
status: resolved
Fix import_sec_context with interposers

The code was correctly selecting the mechanism to execute, but it was
improperly setting the mechanism type of the internal context when the
selected mechanism was that of an interposer and vice versa.

When an interposer is involved the internal context is that of the
interposer, so the mechanism type of the context needs to be the
interposer oid.  Conversely, when an interposer re-enters gssapi and
presents a token with a special oid, the mechanism called is the real
mechanism, and the context returned is a real mechanism context.  In
this case the mechanism type of the context needs to be that of the
real mechanism.

(cherry picked from commit 36c76aa3c625afc9291b9e1df071db51ccf37dab)

ticket: 7592
version_fixed: 1.11.2
status: resolved
Export verto_set_flags from libverto

When the bundled libverto was updated from 0.2.2 to 0.2.5,
verto_set_flags should have been added to libverto.exports along with
the other new functions.

(cherry picked from commit fb92e73d12081d36b0497e55489293d296eb416d)

ticket: 7594
version_fixed: 1.11.2
status: resolved
Reset ulog if database load failed

If an iprop slave tries to load a dump from the master and it fails,
reset the ulog header so we take another full dump, instead of
reporting that the slave is current when it isn't.

[ghudson@mit.edu: commit message]

ticket: 7530
version_fixed: 1.11.2
status: resolved
Add a krb5-config man page

Missed when converting the old nroff man pages.

(cherry picked from commit 5a6d14918a3b5d003f248b66e88028f1b5e450b7)

ticket: 7601
Regenerate man pages
Install krb5-config man page

Don't just build it.

(cherry picked from commit 2defbe8939c1c11a9f76334443c63603a8b749bf)

ticket: 7601
version_fixed: 1.11.2
status: resolved
Update documentation copyright dates: 1985-2013

(cherry picked from commit 48e750799dff48239a044c6a732f41ded25cc624)
Updates for krb5-1.11.2 release

Update README and patchlevel.h for krb5-1.11.2 release.  Regenerate
man pages also.
Update for krb5-1.11.2-postrelease
Ignore missing Q in dh_params

Some implementations don't send the required Q value in dh_params, so
allow it to be absent.

(cherry picked from commit ed77a25c53ed6afd41372838f205a98a561a89fb)

ticket: 7596
version_fixed: 1.11.3
status: resolved
Allow config of dh_min_bits < 2048

Allow configuration to override the default dh_min_bits of 2048 to
1024.  Disallow configuration of dh_min_bits < 1024, but continue to
default to 2048.

(cherry picked from commit cae44d2d014985022a001924dce4a56d12c63818)

ticket: 7602
version_fixed: 1.11.3
status: resolved
Set msg_type when decoding FAST requests

An RFC 6113 KrbFastReq contains a padata sequence and a KDC-REQ-BODY,
neither of which contain the msg-type field found in a KDC-REQ.  So
when we decode the FAST request, the resulting krb5_kdc_req structure
has a msg_type of 0.  Copy msg_type from the outer body, since we make
use of it in further KDC processing.

(cherry picked from commit 3a447c5a8c95758501cf5a20c161a2d735a02f6d)

ticket: 7605
version_fixed: 1.11.3
status: resolved
Add internal KDC_DIR macro

Define KDC_DIR in osconf.hin and use it for paths within the KDC
directory.
add k5memdup()
add libkrad
add otp plugin