Export gssrpc_bindresvport_sa

It was added in commit 0d04b60d159ab83b943e43802b1449a3b074bc83, but
was not added to the library export symbol list, and thus was unusable
on systems that enforced library export lists.

(cherry picked from commit f749c07bb18878f34f63aa3997bb0ef1360a9a0a)

ticket: 8003
version_fixed: 1.13
status: resolved
Map .hin files to the C language for doxygen

In Debian unstable, the current version of doxygen is unhappy with
our generated Doxyfile, and does not handle krb5.hin in the expected
fashion (as a C header).  Work around this issue by explicitly
specifying that files with the .hin extension are to be treated
as C language files.

(cherry picked from commit b7a4d695263f1a5b7fe72b1eadce4acdc3f0490b)

ticket: 8004
version_fixed: 1.13
status: resolved
Initialize iterflags in update_princ_encryption

It is only assigned to in the non-dry-run case, which clang detects
and aborts the build (when maintainer mode is enabled).

(cherry picked from commit bf040d0c4072742efab854ab01af162569f0a8f7)

ticket: 8005
version_fixed: 1.13
status: resolved
Allow logger.c to work with redirected stderr

In lib/kadm5/logger.c:krb5_klog_init(), if the configuration requests
STDERR logging, call fdopen() using mode "w" instead of "a+", to avoid
errors when stderr happens to be opened for write only.

(cherry picked from commit a85923073ad2d1f5d0314ab330fd6c5f07749be8)

ticket: 8001
version_fixed: 1.13
status: resolved
Update NOTICE with new changes for 1.13

The KCM RPC definitions are copyright KTH/Apple, since it is present
for interoperability with OS X.

Add MS-KKDCP client copyright; alas, it does not match the existing
Red Hat copyrights, since the new code is a 2-clause BSD license, and
there was only a 3-clause Red Hat copyright block present already.

The actual Sphinx output for NOTICE would adjust the wrapping and
indentation of some existing content, but those changes were removed
by hand, so this commit only reflects new added content.

(cherry picked from commit 2cb54d39316f9a0cc8e75b791b2faf6f051c9495)

ticket: 8006
version_fixed: 1.13
status: resolved
Add test case for -keepold mkey re-encryption

(cherry picked from commit 8ee40f56e6c789a87dc403bf70d524d2b3b21dbf)

ticket: 7995
version_fixed: 1.13
status: resolved
Re-encrypt preserved key data in new master key

When we are preserving old key data in kdb_cpw.c, ensure that it is
encrypted with the same master key as the new key data.  This ensures
that the KRB5_TL_MKVNO tl-data on the principal entry applies to all
of the key data, not just some of it.

(cherry picked from commit 32c9b8f1aa1b348388ed227394cc609e68ed833b)

ticket: 7995
version_fixed: 1.13
status: resolved