summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Free the result of krb5_unparse_name in ZGetSenderGravatar David Benjamin2013-08-08
| | | | Minor memory leak, but we may as well fix it.
* Expose Z_Subscriptions as ZSubscriptionsGravatar David Benjamin2013-08-08
| | | | | | With a custom send_routine that mirrors ZSrvSendList. This allows for an asynchronous version that replaces send_routine with non-blocking versions (and waits for ACKs out-of-band).
* Remove unauthenticated support from subs codeGravatar David Benjamin2013-08-08
| | | | | | It's only used by ZCancelSubscription, but the server rejects unauthenticated CLIENT_CANCELSUB requests anyway. The unauthenticated codepath results in a SERVNAK and doesn't drop subs.
* Don't pass HMACKs through reassembly codeGravatar David Benjamin2013-08-08
| | | | | | | | | | | | | | | | | | | ACKs to fragmented notices keep the multiuid field, but multipart becomes "". This is interpreted as 0/z_message_length. This means ACKs to non-initial fragments look like an initial fragment from the multipart field, but not when checking uid == multiuid. The result is that they get smashed when passing through reassembly. 6e8ec12b0ba9d476e065957028e4cf9cf69d6ac2 addressed this. For SERVACKs and SERVNAKs, it drops all but the initial ones (uid == multipart) on the floor. It ignores the problem for HMACKs. Normally ZSendPacket blocks on the HMACK before sending each successive fragment, so there's no opportunity for them to collide. But if calling ZSrvSendNotice with a custom send_function that doesn't block, the HMACKs can smash into each other depending on timing. Instead, fix it by using z_uid instead of z_multiuid as the multiuid key. For compatibility, keep the SERVACK dropping behavior. (I'd like to get all the SERVACKs too, but potentially that'll confuse clients somewhat.)
* Mark cksum_map as constGravatar David Benjamin2013-08-08
| | | | May as well put it in .rodata
* ZSendNotice: Don't leak buffer in error caseGravatar David Benjamin2013-08-08
| | | | | I would hope this codepath can never trigger, but good to clean up properly here.
* package the pkgconfig fileGravatar Karl Ramm2013-08-08
|
* Provide a pkg-config file for zephyrGravatar Alex Chernyakhovsky2013-08-08
| | | | | | | | | | | | | | | | Previously, it was difficult to detect the presence of the zephyr library in autoconf, and required custom macros. However, the world has since developed pkg-config, which is a simple tool for detecting the presence of a package, its compile-time flags, and its link-time flags, even in the presence of recursive dependencies. This adds "zephyr.pc" as a file generated by the build process, and installs it into the appropriate directory, allowing the target system to use PKG_CHECK_MODULES([ZEPHYR], [zephyr]) AC_SUBST([ZEPHYR_CFLAGS]) AC_SUBST([ZEPHYR_LIBS]) to detect all necessary information to incorporate the zephyr library.
* release should push the release tags as wellGravatar Karl Ramm2013-07-08
|
* release 3.1~beta0Gravatar Karl Ramm2013-07-08
|
* git is whiny about ~s in versionsGravatar Karl Ramm2013-07-08
|
* I meant thatGravatar Karl Ramm2013-07-08
|
* fix bugs in release scriptGravatar Karl Ramm2013-07-07
|
* release 3.1-beta0Gravatar Karl Ramm2013-07-07
|
* add -U to zwrite for UNACKED messagesGravatar Karl Ramm2013-04-07
| | | | Based on a patch by Ray Link <rlink+git@cs.cmu.edu>
* zwrite: Add -S for ZNOAUTH sender spoofingGravatar Ray Link2013-04-07
| | | | zwrite: Manpage update for -S
* Fix new style issue in test_serverGravatar Jeffrey Hutzelman2013-04-03
| | | | Style says return types go on their own line.
* Fix prototype and style issues in test_serverGravatar Jeffrey Hutzelman2013-04-03
|
* Don't create directory 755 on make installGravatar David Benjamin2013-03-27
| | | | It's -m 755, but that's the default anyway.
* Fix generated header dependencies for test_serverGravatar David Benjamin2013-03-27
| | | | | Otherwise make -j2 may try to build it before the generated headers are ready and error.
* Mark build as a .PHONY targetGravatar David Benjamin2013-03-27
|
* server: Recheck other-realm server addresses dailyGravatar Jeffrey Hutzelman2013-03-18
| | | | | | | We currently have no support for obeying the TTLs on DNS records containing the addresses of servers in other realms. For now, kludge around this by rechecking these addresses once a day whether we need to or not.
* Don't send to realms with no serversGravatar Jeffrey Hutzelman2013-03-18
| | | | | | | | | | | | | | | | | | | | | | When we are using c-ares to resolve otherrealm server names asynchronously, there is a period of time during startup during which a realm may have no servers whose names we have successfully resolved. This can also happen when a realm is added, or when servers for a realm are deleted, and even without asynchronous resolution, it can happen if we are having trouble resolving names. We now avoid trying to send notices to realms for which there are no usable servers (that is, servers which are not deleted, not marked nosend, and whose names have been resolved). Currently, when this happens, the notice to be sent is just dropped on the floor. Arguably, we should manage a queue of packets waiting to be sent to such a realm, and resend them if we ever discover a usable server. But that would be complicated. In addition, since we are basically never ready to send realm wakeups when processing the realm.list, they are now deferred until the first server's name has been resolved (and then, until the timer queue is processed). This has the additional effect of causing wakeups to be sent for realms which appear during a realm.list reload.
* Use c-ares for other-realm server name lookupsGravatar Jeffrey Hutzelman2013-03-18
| | | | This fixes #73
* Make ZRealm.srvrs be an array of pointersGravatar Jeffrey Hutzelman2013-03-18
| | | | | | | | | | | | With asynchronous name resolution and timers, we need to keep around pointers to individual other-realm servers. This, we cannot move existing servers around in memory without causing data corruption. But, realm_init() wants to reallocate the srvrs array for a realm when adding servers. Therefore, to allow ZRealm.srvrs to be reallocated without changing the addresses of existing servers, it is converted from an array of servers to an array of pointers to servers.
* server: c-ares supportGravatar Jeffrey Hutzelman2013-03-18
| | | | | | Add the bits we need to be able to use c-ares for DNS operations in the server. This handles initialization and making sure the resolver's sockets and timeouts are considered in the main loop.
* Dewarn with -DDEBUGGravatar Jeffrey Hutzelman2013-03-18
| | | | It's sort of nice to be able to build with debugging.
* acl_files: always return a value from add_hostGravatar Jeffrey Hutzelman2013-03-18
| | | | If it's going to return a value, it needs to always return a value.
* rototill uloc.c to be a little less pathologicalGravatar Karl Ramm2013-03-16
| | | | | | | | Notably, use realloc rather than allocating and copying a whole new table. Also be more consistent about operating in terms of array indices rather then pointers.
* Test the low-level code in uloc.cGravatar Karl Ramm2013-03-16
| | | | | | | | | Also, tweak the debian build infrastructure so that we can pass in arbitrary CFLAGS. New program test_server that links with the non-main.c parts of the server. Currently only (as above) tests the low-level bits of uloc.c.
* rearrange so that most of the server code can be linked without main.cGravatar Karl Ramm2013-03-16
| | | | | Move global variables and one function out of main.c so that the rest of the server can be linked with a test harness.
* remove some now-unused variablesGravatar Karl Ramm2013-03-16
|
* rototill the low-level acl codeGravatar Karl Ramm2013-03-03
| | | | Now supports krb5 pricipals sanely.
* Treat obviously non-zephyr packets as badGravatar Jeffrey Hutzelman2013-02-27
| | | | | | | | | | | | | | When Z_ReadWait receives a packet which doesn't start with a zephyr version header, it considers the packet to be "obviously non-zephyr". Such packets are discarded and, previously, caused Z_ReadWait to return ZERR_NONE. Unfortunately, this can cause things to block for up to 60s when a caller was expecting a non-blocking call to pick up a new packet if there is one. This changes Z_ReadWait to return ZERR_BADPKT in this situation, eliminating the potential wait. This fixes #100
* zctl flush_subsGravatar Jeffrey Hutzelman2013-02-26
| | | | | | | | Provide a new zctl subcommand, flush_subs, to flush all subscriptions for a specified recipient. This is implemented using a new library function, ZFlushUserSubscriptions(). This is the client side of #103
* server: add CLIENT_FLUSHSUBS control messageGravatar Jeffrey Hutzelman2013-02-26
| | | | | | | | | This adds support to the server for a new client control message, CLIENT_FLUSHSUBS, which flushes all subscriptions and pending retransmits for clients belonging to a given principal. The target principal must be the same as the sender, unless the sender is on the opstaff ACL. This is the server side of #103
* Allow zctl flush_locs to take a user argumentGravatar Jeffrey Hutzelman2013-02-26
| | | | | | | | Provide a new library function, ZFlushUserLocations(), to flush locations for a specified user. This can be called using zctl flush_locs, which now takes an optional username parameter. This is the client side of #102
* Allow opstaff to submit location updates for usersGravatar Jeffrey Hutzelman2013-02-26
| | | | | | | This allows anyone on opstaff.acl to submit location updates, including flushing all locations, for a user other than themselves. This is the server side of #102
* Make OPSTAFF_VIS actually visible to opstaffGravatar Jeffrey Hutzelman2013-02-26
| | | | This fixes #101
* Add opstaff_check()Gravatar Jeffrey Hutzelman2013-02-26
| | | | | | Add a function to check whether a sender is on the opstaff ACL, which lives in $sysconfdir/zephyr/acl/opstaff.acl. This is in preparation for a number of features which grant additional access to people on that ACL.
* Make _sure_ we're not making assumptions about ZNotice_ts on the stackGravatar Karl Ramm2013-02-26
|
* handle generated man pages with offset buildsGravatar Karl Ramm2013-02-24
|
* Substitute paths into man pagesGravatar Jeffrey Hutzelman2013-02-21
| | | | | | Generate the man pages for zwgc, zctl, zhm, and zephyrd at build time, so they can refer to the paths actually used instead of whatever was used on Athena in the 1980's.
* remove a reference to 2.0Gravatar Karl Ramm2013-02-18
|
* server: include realm-server flags in dumpGravatar Jeffrey Hutzelman2013-02-17
|
* Dewarn realm.list enhancementsGravatar Jeffrey Hutzelman2013-02-17
|
* Reload other realms on SIGHUP/resetGravatar Jeffrey Hutzelman2013-02-17
|
* Update existing realms during realm.list reloadGravatar Jeffrey Hutzelman2013-02-17
|
* Abstract out realm server hostname lookupGravatar Jeffrey Hutzelman2013-02-17
| | | | | | The task of looking up a server's hostname is moved into a separate function, which will make things cleaner when we start doing so in more than one place.
* Abstract realm server usability testGravatar Jeffrey Hutzelman2013-02-17
| | | | | | | | | Whether a particular server is usable currently depends only on whether we have successfully obtained its IP address. However, eventually it will also depend on additional factors such as whether the server has been deleted from the realm.list. To ease that transition, replace the 'usable' flag with a 'got_addr' flag (which is set when the address lookup succeeds), and add a new function to test whether a server is usable.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-01 11:15:59 +0000