ae77177087
several new kerberos related libraries and applications to FreeBSD:
o kgetcred(1) allows one to manually get a ticket for a particular service.
o kf(1) securily forwards ticket to another host through an authenticated
and encrypted stream.
o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
and other user kerberos operations. klist and kswitch are just symlinks
to kcc(1) now.
o kswitch(1) allows you to easily switch between kerberos credentials if
you're running KCM.
o hxtool(1) is a certificate management tool to use with PKINIT.
o string2key(1) maps a password into key.
o kdigest(8) is a userland tool to access the KDC's digest interface.
o kimpersonate(8) creates a "fake" ticket for a service.
We also now install manpages for some lirbaries that were not installed
before, libheimntlm and libhx509.
- The new HEIMDAL version no longer supports Kerberos 4. All users are
recommended to switch to Kerberos 5.
- Weak ciphers are now disabled by default. To enable DES support (used
by telnet(8)), use "allow_weak_crypto" option in krb5.conf.
- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
disabled due to the function they use (krb5_get_err_text(3)) being
deprecated. I plan to work on this next.
- Heimdal's KDC now require sqlite to operate. We use the bundled version
and install it as libheimsqlite. If some other FreeBSD components will
require it in the future we can rename it to libbsdsqlite and use for these
components as well.
- This is not a latest Heimdal version, the new one was released while I was
working on the update. I will update it to 1.5.2 soon, as it fixes some
important bugs and security issues.
48 lines
1.7 KiB
Plaintext
48 lines
1.7 KiB
Plaintext
#
|
|
# Error messages for the krb5 library
|
|
#
|
|
# This might look like a com_err file, but is not
|
|
#
|
|
id "$Id$"
|
|
|
|
error_table heim
|
|
|
|
prefix HEIM_ERR
|
|
|
|
error_code LOG_PARSE, "Error parsing log destination"
|
|
error_code V4_PRINC_NO_CONV, "Failed to convert v4 principal"
|
|
error_code SALTTYPE_NOSUPP, "Salt type is not supported by enctype"
|
|
error_code NOHOST, "Host not found"
|
|
error_code OPNOTSUPP, "Operation not supported"
|
|
error_code EOF, "End of file"
|
|
error_code BAD_MKEY, "Failed to get the master key"
|
|
error_code SERVICE_NOMATCH, "Unacceptable service used"
|
|
error_code NOT_SEEKABLE, "File descriptor not seekable"
|
|
error_code TOO_BIG, "Offset too large"
|
|
error_code BAD_HDBENT_ENCODING, "Invalid HDB entry encoding"
|
|
|
|
index 64
|
|
prefix HEIM_PKINIT
|
|
error_code NO_CERTIFICATE, "Certificate missing"
|
|
error_code NO_PRIVATE_KEY, "Private key missing"
|
|
error_code NO_VALID_CA, "No valid certificate authority"
|
|
error_code CERTIFICATE_INVALID, "Certificate invalid"
|
|
error_code PRIVATE_KEY_INVALID, "Private key invalid"
|
|
|
|
index 128
|
|
prefix HEIM_EAI
|
|
#error_code NOERROR, "no error"
|
|
error_code UNKNOWN, "unknown error from getaddrinfo"
|
|
error_code ADDRFAMILY, "address family for nodename not supported"
|
|
error_code AGAIN, "temporary failure in name resolution"
|
|
error_code BADFLAGS, "invalid value for ai_flags"
|
|
error_code FAIL, "non-recoverable failure in name resolution"
|
|
error_code FAMILY, "ai_family not supported"
|
|
error_code MEMORY, "memory allocation failure"
|
|
error_code NODATA, "no address associated with nodename"
|
|
error_code NONAME, "nodename nor servname provided, or not known"
|
|
error_code SERVICE, "servname not supported for ai_socktype"
|
|
error_code SOCKTYPE, "ai_socktype not supported"
|
|
error_code SYSTEM, "system error returned in errno"
|
|
end
|