开源软件构建与测试

_service:tar_scm:krb5.spec Changed

@@ -2,13 +2,13 @@
 %global WITH_DIRSRV 1
 
 Name: krb5
-Version: 1.20.1
-Release: 2
+Version: 1.21.1
+Release: 1
 Summary: The Kerberos network authentication protocol
 License: MIT
 URL: http://web.mit.edu/kerberos/www/
-Source0: https://web.mit.edu/kerberos/dist/krb5/1.20/%{name}-%{version}.tar.gz
-Source1: https://web.mit.edu/kerberos/dist/krb5/1.20/%{name}-%{version}.tar.gz.asc
+Source0: https://web.mit.edu/kerberos/dist/krb5/1.21/%{name}-%{version}.tar.gz
+Source1: https://web.mit.edu/kerberos/dist/krb5/1.21/%{name}-%{version}.tar.gz.asc
 Source2: kprop.service
 Source3: kadmin.service
 Source4: krb5kdc.service
@@ -19,6 +19,7 @@
 Source12: krb5kdc.logrotate
 Source13: kadmind.logrotate
 Source100: noport.c 
+
 Patch0: ksu-pam-integration.patch
 Patch1: SELinux-integration.patch
 Patch2: Adjust-build-configuration.patch
@@ -323,6 +324,9 @@
 %{_mandir}/man8/*
 
 %changelog
+* Sat Jul 22 2023 wangyunjia <yunjia.wang@huawei.com> - 1.21.1-1
+- Update to 1.21.1
+
 * Thu Jun 15 2023 yixiangzhike <yixiangzhike007@163.com> - 1.20.1-2
 - Add kerberos.schema and kerberos.ldif for plugin ldap

_service:tar_scm:Remove-3des-support.patch Changed

@@ -32,7 +32,7 @@
  src/include/krb5/krb5.hin                     |  10 +-
  src/kdc/kdc_util.c                            |   4 -
  src/lib/crypto/Makefile.in                    |   8 +-
- src/lib/crypto/builtin/Makefile.in            |   6 +-
+ src/lib/crypto/builtin/Makefile.in            |   4 +-
  src/lib/crypto/builtin/des/ISSUES             |  13 -
  src/lib/crypto/builtin/des/Makefile.in        |  82 ----
  src/lib/crypto/builtin/des/d3_aead.c          | 137 ------
@@ -74,7 +74,7 @@
  src/lib/crypto/krb/prf_des.c                  |  47 ---
  src/lib/crypto/krb/random_to_key.c            |  28 --
  src/lib/crypto/libk5crypto.exports            |   1 -
- src/lib/crypto/openssl/Makefile.in            |   8 +-
+ src/lib/crypto/openssl/Makefile.in            |   6 +-
  src/lib/crypto/openssl/des/Makefile.in        |  20 -
  src/lib/crypto/openssl/des/deps               |  14 -
  src/lib/crypto/openssl/des/des_keys.c         |  39 --
@@ -98,7 +98,7 @@
  src/plugins/preauth/pkinit/pkinit_crypto.h    |  10 +-
  src/plugins/preauth/pkinit/pkinit_kdf_test.c  |  30 --
  src/plugins/preauth/spake/t_vectors.c         |  25 --
- src/tests/gssapi/t_enctypes.py                |  33 +-
+ src/tests/gssapi/t_enctypes.py                |  35 +-
  src/tests/gssapi/t_invalid.c                  |  12 -
  src/tests/gssapi/t_pcontok.c                  |  16 +-
  src/tests/gssapi/t_prf.c                      |   7 -
@@ -429,15 +429,6 @@
  	$(srcdir)/kdf.c		\
  	$(srcdir)/pbkdf2.c	
  
--STOBJLISTS= des/OBJS.ST md4/OBJS.ST 	\
-+STOBJLISTS= md4/OBJS.ST 		\
- 	md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST	\
- 	enc_provider/OBJS.ST 		\
- 	hash_provider/OBJS.ST 		\
-@@ -33,7 +33,7 @@ STOBJLISTS= des/OBJS.ST md4/OBJS.ST 	\
- 	camellia/OBJS.ST 		\
- 	OBJS.ST
- 
 -SUBDIROBJLISTS= des/OBJS.ST md4/OBJS.ST 	\
 +SUBDIROBJLISTS= md4/OBJS.ST	 	\
  		md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST 	\
@@ -4873,24 +4864,16 @@
  LOCALINCLUDES=-I$(srcdir)/../krb $(CRYPTO_IMPL_CFLAGS)
  
  STLIBOBJS=\
-@@ -24,14 +24,14 @@ SRCS=\
+@@ -24,7 +24,7 @@ SRCS=\
  	$(srcdir)/pbkdf2.c	\
  	$(srcdir)/sha256.c
  
--STOBJLISTS= des/OBJS.ST md4/OBJS.ST 	\
-+STOBJLISTS= md4/OBJS.ST 		\
- 	md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST 	\
- 	enc_provider/OBJS.ST 		\
- 	hash_provider/OBJS.ST 		\
- 	aes/OBJS.ST 			\
- 	OBJS.ST
- 
 -SUBDIROBJLISTS= des/OBJS.ST md4/OBJS.ST 	\
 +SUBDIROBJLISTS= md4/OBJS.ST 		\
  		md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST 	\
  		enc_provider/OBJS.ST 		\
  		hash_provider/OBJS.ST 		\
-@@ -42,7 +42,7 @@ includes: depend
+@@ -37,7 +37,7 @@ includes: depend
  
  depend: $(SRCS)
  
@@ -5327,14 +5310,14 @@
 -         */
 -        if (md5cksum.length != cksum_size)
 -            abort ();
--        memcpy (ptr+14, md5cksum.contents, md5cksum.length);
+-        memcpy(checksum, md5cksum.contents, md5cksum.length);
 -        break;
 -    case SGN_ALG_HMAC_MD5:
--        memcpy (ptr+14, md5cksum.contents, cksum_size);
+-        memcpy(checksum, md5cksum.contents, cksum_size);
 -        break;
 -    }
 +
-+    memcpy (ptr+14, md5cksum.contents, cksum_size);
++    memcpy(checksum, md5cksum.contents, cksum_size);
  
      krb5_free_checksum_contents(context, &md5cksum);
  
@@ -5373,13 +5356,13 @@
 -    switch (ctx->signalg) {
 -    case SGN_ALG_HMAC_SHA1_DES3_KD:
 -        assert(md5cksum.length == ctx->cksum_size);
--        memcpy(ptr + 14, md5cksum.contents, md5cksum.length);
+-        memcpy(checksum, md5cksum.contents, md5cksum.length);
 -        break;
 -    case SGN_ALG_HMAC_MD5:
--        memcpy(ptr + 14, md5cksum.contents, ctx->cksum_size);
+-        memcpy(checksum, md5cksum.contents, ctx->cksum_size);
 -        break;
 -    }
-+    memcpy(ptr + 14, md5cksum.contents, ctx->cksum_size);
++    memcpy(checksum, md5cksum.contents, ctx->cksum_size);
  
      /* create the seq_num */
      code = kg_make_seq_num(context, ctx->seq, ctx->initiate ? 0 : 0xFF,
@@ -5877,7 +5860,7 @@
 index 7494d7fcdb..2f95d89967 100755
 --- a/src/tests/gssapi/t_enctypes.py
 +++ b/src/tests/gssapi/t_enctypes.py
-@@ -1,24 +1,17 @@
+@@ -1,25 +1,18 @@
  from k5test import *
  
 -# Define some convenience abbreviations for enctypes we will see in
@@ -5901,9 +5884,11 @@
  # These tests make assumptions about the default enctype lists, so set
  # them explicitly rather than relying on the library defaults.
 -supp='aes256-cts:normal aes128-cts:normal des3-cbc-sha1:normal rc4-hmac:normal'
--conf = {'libdefaults': {'permitted_enctypes': 'aes des3 rc4'},
+-conf = {'libdefaults': {'permitted_enctypes': 'aes des3 rc4',
+-                        'allow_des3': 'true', 'allow_rc4': 'true'},
 +supp='aes256-cts:normal aes128-cts:normal rc4-hmac:normal'
-+conf = {'libdefaults': {'permitted_enctypes': 'aes rc4'},
++conf = {'libdefaults': {'permitted_enctypes': 'aes rc4',
++                        'allow_rc4': 'true'},
          'realms': {'$realm': {'supported_enctypes': supp}}}
  realm = K5Realm(krb5_conf=conf)
  shutil.copyfile(realm.ccache, os.path.join(realm.testdir, 'save'))
@@ -6035,14 +6020,16 @@
 index c982508d8b..96e90a69d2 100644
 --- a/src/tests/t_etype_info.py
 +++ b/src/tests/t_etype_info.py
-@@ -1,6 +1,6 @@
+@@ -1,7 +1,7 @@
  from k5test import *
  
 -supported_enctypes = 'aes128-cts des3-cbc-sha1 rc4-hmac'
+-conf = {'libdefaults': {'allow_des3': 'true', 'allow_rc4': 'true'},
 +supported_enctypes = 'aes128-cts rc4-hmac'
- conf = {'libdefaults': {'allow_weak_crypto': 'true'},
++conf = {'libdefaults': {'allow_rc4': 'true'},
          'realms': {'$realm': {'supported_enctypes': supported_enctypes}}}
  realm = K5Realm(create_host=False, get_creds=False, krb5_conf=conf)
+
 @@ -26,9 +26,9 @@ def test_etinfo(princ, enctypes, expected_lines):
  # With no newer enctypes in the request, PA-ETYPE-INFO2,
  # PA-ETYPE-INFO, and PA-PW-SALT appear in the AS-REP, each listing one
@@ -6191,14 +6178,14 @@
  
 -    # Exercise the DES3 enctype.
 -    ('des3', None,
--     {'libdefaults': {'permitted_enctypes': 'des3'}},
+-     {'libdefaults': {'permitted_enctypes': 'des3 aes256-sha1'}},
 -     {'realms': {'$realm': {
 -                    'supported_enctypes': 'des3-cbc-sha1:normal',
 -                    'master_key_type': 'des3-cbc-sha1'}}}),
 -
      # Exercise the arcfour enctype.
      ('arcfour', None,
-      {'libdefaults': {'permitted_enctypes': 'rc4'}},
+      {'libdefaults': {'permitted_enctypes': 'rc4 aes256-sha1'}},
 diff --git a/src/windows/leash/htmlhelp/html/Encryption_Types.htm b/src/windows/leash/htmlhelp/html/Encryption_Types.htm
 index 1aebdd0b4a..c38eefd2bd 100644
 --- a/src/windows/leash/htmlhelp/html/Encryption_Types.htm

_service:tar_scm:krb5-1.20.1.tar.gz.asc Deleted

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc_util.c Deleted

@@ -1,1065 +0,0 @@
-/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
-/*
- * stdcc_util.c
- * utility functions used in implementing the ccache api for krb5
- * not publicly exported
- * Frank Dabek, July 1998
- */
-
-#if defined(_WIN32) || defined(USE_CCAPI)
-
-#include <stdlib.h>
-#include <string.h>
-#include <errno.h>
-
-#if defined(_WIN32)
-#include <malloc.h>
-#endif
-
-#include "k5-int.h"
-#include "stdcc_util.h"
-#ifdef _WIN32 /* it's part of krb5.h everywhere else */
-#include "kv5m_err.h"
-#endif
-
-#define fieldSize 255
-
-#ifdef USE_CCAPI_V3
-
-
-static void
-free_cc_array (cc_data **io_cc_array)
-{
- if (io_cc_array) {
- unsigned int i;
-
- for (i = 0; io_cc_arrayi; i++) {
- if (io_cc_arrayi->data) { free (io_cc_arrayi->data); }
- free (io_cc_arrayi);
- }
- free (io_cc_array);
- }
-}
-
-static krb5_error_code
-copy_cc_array_to_addresses (krb5_context in_context,
- cc_data **in_cc_array,
- krb5_address ***out_addresses)
-{
- krb5_error_code err = 0;
-
- if (in_cc_array == NULL) {
- *out_addresses = NULL;
-
- } else {
- unsigned int count, i;
- krb5_address **addresses = NULL;
-
- /* get length of array */
- for (count = 0; in_cc_arraycount; count++);
- addresses = (krb5_address **) malloc (sizeof (*addresses) * (count + 1));
- if (!addresses) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- addressesi = (krb5_address *) malloc (sizeof (krb5_address));
- if (!addressesi) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- addressesi->contents = (krb5_octet *) malloc (sizeof (krb5_octet) *
- in_cc_arrayi->length);
- if (!addressesi->contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- addressesi->magic = KV5M_ADDRESS;
- addressesi->addrtype = in_cc_arrayi->type;
- addressesi->length = in_cc_arrayi->length;
- memcpy (addressesi->contents,
- in_cc_arrayi->data, in_cc_arrayi->length);
- }
- }
-
- if (!err) {
- addressesi = NULL; /* terminator */
- *out_addresses = addresses;
- addresses = NULL;
- }
-
- if (addresses) { krb5_free_addresses (in_context, addresses); }
- }
-
- return err;
-}
-
-static krb5_error_code
-copy_cc_array_to_authdata (krb5_context in_context,
- cc_data **in_cc_array,
- krb5_authdata ***out_authdata)
-{
- krb5_error_code err = 0;
-
- if (in_cc_array == NULL) {
- *out_authdata = NULL;
-
- } else {
- unsigned int count, i;
- krb5_authdata **authdata = NULL;
-
- /* get length of array */
- for (count = 0; in_cc_arraycount; count++);
- authdata = (krb5_authdata **) malloc (sizeof (*authdata) * (count + 1));
- if (!authdata) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- authdatai = (krb5_authdata *) malloc (sizeof (krb5_authdata));
- if (!authdatai) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- authdatai->contents = (krb5_octet *) malloc (sizeof (krb5_octet) *
- in_cc_arrayi->length);
- if (!authdatai->contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- authdatai->magic = KV5M_AUTHDATA;
- authdatai->ad_type = in_cc_arrayi->type;
- authdatai->length = in_cc_arrayi->length;
- memcpy (authdatai->contents,
- in_cc_arrayi->data, in_cc_arrayi->length);
- }
- }
-
- if (!err) {
- authdatai = NULL; /* terminator */
- *out_authdata = authdata;
- authdata = NULL;
- }
-
- if (authdata) { krb5_free_authdata (in_context, authdata); }
- }
-
- return err;
-}
-
-static krb5_error_code
-copy_addresses_to_cc_array (krb5_context in_context,
- krb5_address **in_addresses,
- cc_data ***out_cc_array)
-{
- krb5_error_code err = 0;
-
- if (in_addresses == NULL) {
- *out_cc_array = NULL;
-
- } else {
- unsigned int count, i;
- cc_data **cc_array = NULL;
-
- /* get length of array */
- for (count = 0; in_addressescount; count++);
- cc_array = (cc_data **) malloc (sizeof (*cc_array) * (count + 1));
- if (!cc_array) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- cc_arrayi = (cc_data *) malloc (sizeof (cc_data));
- if (!cc_arrayi) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- cc_arrayi->data = malloc (in_addressesi->length);
- if (!cc_arrayi->data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cc_arrayi->type = in_addressesi->addrtype;
- cc_arrayi->length = in_addressesi->length;
- memcpy (cc_arrayi->data, in_addressesi->contents, in_addressesi->length);
- }
- }
-
- if (!err) {
- cc_arrayi = NULL; /* terminator */
- *out_cc_array = cc_array;
- cc_array = NULL;
- }
-
- if (cc_array) { free_cc_array (cc_array); }
- }
-
-
- return err;
-}
-
-static krb5_error_code
-copy_authdata_to_cc_array (krb5_context in_context,
- krb5_authdata **in_authdata,
- cc_data ***out_cc_array)
-{
- krb5_error_code err = 0;
-
- if (in_authdata == NULL) {
- *out_cc_array = NULL;
-
- } else {
- unsigned int count, i;
- cc_data **cc_array = NULL;
-
- /* get length of array */
- for (count = 0; in_authdatacount; count++);
- cc_array = (cc_data **) malloc (sizeof (*cc_array) * (count + 1));
- if (!cc_array) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- cc_arrayi = (cc_data *) malloc (sizeof (cc_data));
- if (!cc_arrayi) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- cc_arrayi->data = malloc (in_authdatai->length);
- if (!cc_arrayi->data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cc_arrayi->type = in_authdatai->ad_type;
- cc_arrayi->length = in_authdatai->length;
- memcpy (cc_arrayi->data, in_authdatai->contents, in_authdatai->length);
- }
- }
-
- if (!err) {
- cc_arrayi = NULL; /* terminator */
- *out_cc_array = cc_array;
- cc_array = NULL;
- }
-
- if (cc_array) { free_cc_array (cc_array); }
- }
-
-
- return err;
-}
-
-
-/*
- * copy_cc_credentials_to_krb5_creds
- * - allocate an empty k5 style ticket and copy info from the cc_creds ticket
- */
-
-krb5_error_code
-copy_cc_cred_union_to_krb5_creds (krb5_context in_context,
- const cc_credentials_union *in_cred_union,
- krb5_creds *out_creds)
-{
- krb5_error_code err = 0;
- cc_credentials_v5_t *cv5 = NULL;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- krb5_principal client = NULL;
- krb5_principal server = NULL;
- char *ticket_data = NULL;
- char *second_ticket_data = NULL;
- unsigned char *keyblock_contents = NULL;
- krb5_address **addresses = NULL;
- krb5_authdata **authdata = NULL;
-
- if (in_cred_union->version != cc_credentials_v5) {
- err = KRB5_CC_NOT_KTYPE;
- } else {
- cv5 = in_cred_union->credentials.credentials_v5;
- }
-
-#if TARGET_OS_MAC
- if (!err) {
- err = krb5_get_time_offsets (in_context, &offset_seconds, &offset_microseconds);
- }
-#endif
-
- if (!err) {
- err = krb5_parse_name (in_context, cv5->client, &client);
- }
-
- if (!err) {
- err = krb5_parse_name (in_context, cv5->server, &server);
- }
-
- if (!err && cv5->keyblock.data) {
- keyblock_contents = (unsigned char *) malloc (cv5->keyblock.length);
- if (!keyblock_contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && cv5->ticket.data) {
- ticket_data = (char *) malloc (cv5->ticket.length);
- if (!ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && cv5->second_ticket.data) {
- second_ticket_data = (char *) malloc (cv5->second_ticket.length);
- if (!second_ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- /* addresses */
- err = copy_cc_array_to_addresses (in_context, cv5->addresses, &addresses);
- }
-
- if (!err) {
- /* authdata */
- err = copy_cc_array_to_authdata (in_context, cv5->authdata, &authdata);
- }
-
- if (!err) {
- /* principals */
- out_creds->client = client;
- client = NULL;
- out_creds->server = server;
- server = NULL;
-
- /* copy keyblock */
- if (cv5->keyblock.data) {
- memcpy (keyblock_contents, cv5->keyblock.data, cv5->keyblock.length);
- }
- out_creds->keyblock.enctype = cv5->keyblock.type;
- out_creds->keyblock.length = cv5->keyblock.length;
- out_creds->keyblock.contents = keyblock_contents;
- keyblock_contents = NULL;
-
- /* copy times */
- out_creds->times.authtime = ts_incr(cv5->authtime, offset_seconds);
- out_creds->times.starttime = ts_incr(cv5->starttime, offset_seconds);
- out_creds->times.endtime = ts_incr(cv5->endtime, offset_seconds);
- out_creds->times.renew_till = ts_incr(cv5->renew_till, offset_seconds);
- out_creds->is_skey = cv5->is_skey;
- out_creds->ticket_flags = cv5->ticket_flags;
-
- /* first ticket */
- if (cv5->ticket.data) {
- memcpy(ticket_data, cv5->ticket.data, cv5->ticket.length);
- }
- out_creds->ticket.length = cv5->ticket.length;
- out_creds->ticket.data = ticket_data;
- ticket_data = NULL;
-
- /* second ticket */
- if (cv5->second_ticket.data) {
- memcpy(second_ticket_data, cv5->second_ticket.data, cv5->second_ticket.length);
- }
- out_creds->second_ticket.length = cv5->second_ticket.length;
- out_creds->second_ticket.data = second_ticket_data;
- second_ticket_data = NULL;
-
- out_creds->addresses = addresses;
- addresses = NULL;
-
- out_creds->authdata = authdata;
- authdata = NULL;
-
- /* zero out magic number */
- out_creds->magic = 0;
- }
-
- if (addresses) { krb5_free_addresses (in_context, addresses); }
- if (authdata) { krb5_free_authdata (in_context, authdata); }
- if (keyblock_contents) { free (keyblock_contents); }
- if (ticket_data) { free (ticket_data); }
- if (second_ticket_data) { free (second_ticket_data); }
- if (client) { krb5_free_principal (in_context, client); }
- if (server) { krb5_free_principal (in_context, server); }
-
- return err;
-}
-
-/*
- * copy_krb5_creds_to_cc_credentials
- * - analogous to above but in the reverse direction
- */
-krb5_error_code
-copy_krb5_creds_to_cc_cred_union (krb5_context in_context,
- krb5_creds *in_creds,
- cc_credentials_union **out_cred_union)
-{
- krb5_error_code err = 0;
- cc_credentials_union *cred_union = NULL;
- cc_credentials_v5_t *cv5 = NULL;
- char *client = NULL;
- char *server = NULL;
- unsigned char *ticket_data = NULL;
- unsigned char *second_ticket_data = NULL;
- unsigned char *keyblock_data = NULL;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- cc_data **cc_address_array = NULL;
- cc_data **cc_authdata_array = NULL;
-
- if (out_cred_union == NULL) { err = KRB5_CC_NOMEM; }
-
-#if TARGET_OS_MAC
- if (!err) {
- err = krb5_get_time_offsets (in_context, &offset_seconds, &offset_microseconds);
- }
-#endif
-
- if (!err) {
- cred_union = (cc_credentials_union *) malloc (sizeof (*cred_union));
- if (!cred_union) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cv5 = (cc_credentials_v5_t *) malloc (sizeof (*cv5));
- if (!cv5) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- err = krb5_unparse_name (in_context, in_creds->client, &client);
- }
-
- if (!err) {
- err = krb5_unparse_name (in_context, in_creds->server, &server);
- }
-
- if (!err && in_creds->keyblock.contents) {
- keyblock_data = (unsigned char *) malloc (in_creds->keyblock.length);
- if (!keyblock_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && in_creds->ticket.data) {
- ticket_data = (unsigned char *) malloc (in_creds->ticket.length);
- if (!ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && in_creds->second_ticket.data) {
- second_ticket_data = (unsigned char *) malloc (in_creds->second_ticket.length);
- if (!second_ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- err = copy_addresses_to_cc_array (in_context, in_creds->addresses, &cc_address_array);
- }
-
- if (!err) {
- err = copy_authdata_to_cc_array (in_context, in_creds->authdata, &cc_authdata_array);
- }
-
- if (!err) {
- /* principals */
- cv5->client = client;
- client = NULL;
- cv5->server = server;
- server = NULL;
-
- /* copy more fields */
- if (in_creds->keyblock.contents) {
- memcpy(keyblock_data, in_creds->keyblock.contents, in_creds->keyblock.length);
- }
- cv5->keyblock.type = in_creds->keyblock.enctype;
- cv5->keyblock.length = in_creds->keyblock.length;
- cv5->keyblock.data = keyblock_data;
- keyblock_data = NULL;
-
- cv5->authtime = ts_incr(in_creds->times.authtime, -offset_seconds);
- cv5->starttime = ts_incr(in_creds->times.starttime, -offset_seconds);
- cv5->endtime = ts_incr(in_creds->times.endtime, -offset_seconds);
- cv5->renew_till = ts_incr(in_creds->times.renew_till, -offset_seconds);
- cv5->is_skey = in_creds->is_skey;
- cv5->ticket_flags = in_creds->ticket_flags;
-
- if (in_creds->ticket.data) {
- memcpy (ticket_data, in_creds->ticket.data, in_creds->ticket.length);
- }
- cv5->ticket.length = in_creds->ticket.length;
- cv5->ticket.data = ticket_data;
- ticket_data = NULL;
-
- if (in_creds->second_ticket.data) {
- memcpy (second_ticket_data, in_creds->second_ticket.data, in_creds->second_ticket.length);
- }
- cv5->second_ticket.length = in_creds->second_ticket.length;
- cv5->second_ticket.data = second_ticket_data;
- second_ticket_data = NULL;
-
- cv5->addresses = cc_address_array;
- cc_address_array = NULL;
-
- cv5->authdata = cc_authdata_array;
- cc_authdata_array = NULL;
-
- /* Set up the structures to return to the caller */
- cred_union->version = cc_credentials_v5;
- cred_union->credentials.credentials_v5 = cv5;
- cv5 = NULL;
-
- *out_cred_union = cred_union;
- cred_union = NULL;
- }
-
- if (cc_address_array) { free_cc_array (cc_address_array); }
- if (cc_authdata_array) { free_cc_array (cc_authdata_array); }
- if (keyblock_data) { free (keyblock_data); }
- if (ticket_data) { free (ticket_data); }
- if (second_ticket_data) { free (second_ticket_data); }
- if (client) { krb5_free_unparsed_name (in_context, client); }
- if (server) { krb5_free_unparsed_name (in_context, server); }
- if (cv5) { free (cv5); }
- if (cred_union) { free (cred_union); }
-
- return err;
-}
-
-krb5_error_code
-cred_union_release (cc_credentials_union *in_cred_union)
-{
- if (in_cred_union) {
- if (in_cred_union->version == cc_credentials_v5 &&
- in_cred_union->credentials.credentials_v5) {
- cc_credentials_v5_t *cv5 = in_cred_union->credentials.credentials_v5;
-
- /* should use krb5_free_unparsed_name but we have no context */
- if (cv5->client) { free (cv5->client); }
- if (cv5->server) { free (cv5->server); }
-
- if (cv5->keyblock.data) { free (cv5->keyblock.data); }
- if (cv5->ticket.data) { free (cv5->ticket.data); }
- if (cv5->second_ticket.data) { free (cv5->second_ticket.data); }
-
- free_cc_array (cv5->addresses);
- free_cc_array (cv5->authdata);
-
- free (cv5);
-
- }
- free ((cc_credentials_union *) in_cred_union);
- }
-
- return 0;
-}
-
-#else /* !USE_CCAPI_V3 */
-/*
- * CopyCCDataArrayToK5
- * - copy and translate the null terminated arrays of data records
- * used in k5 tickets
- */
-int copyCCDataArrayToK5(cc_creds *ccCreds, krb5_creds *v5Creds, char whichArray) {
-
- if (whichArray == kAddressArray) {
- if (ccCreds->addresses == NULL) {
- v5Creds->addresses = NULL;
- } else {
-
- krb5_address **addrPtr, *addr;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (dataPtr = ccCreds->addresses; *dataPtr != NULL; numRecords++, dataPtr++) {}
-
- v5Creds->addresses = (krb5_address **) malloc (sizeof(krb5_address *) * (numRecords + 1));
- if (v5Creds->addresses == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->addresses, addrPtr = v5Creds->addresses; *dataPtr != NULL; addrPtr++, dataPtr++) {
-
- *addrPtr = (krb5_address *) malloc (sizeof(krb5_address));
- if (*addrPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- addr = *addrPtr;
-
- addr->addrtype = data->type;
- addr->magic = KV5M_ADDRESS;
- addr->length = data->length;
- addr->contents = (krb5_octet *) malloc (sizeof(krb5_octet) * addr->length);
- if (addr->contents == NULL)
- return ENOMEM;
- memmove(addr->contents, data->data, addr->length); /* copy contents */
- }
-
- /* Write terminator: */
- *addrPtr = NULL;
- }
- }
-
- if (whichArray == kAuthDataArray) {
- if (ccCreds->authdata == NULL) {
- v5Creds->authdata = NULL;
- } else {
- krb5_authdata **authPtr, *auth;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (dataPtr = ccCreds->authdata; *dataPtr != NULL; numRecords++, dataPtr++) {}
-
- v5Creds->authdata = (krb5_authdata **) malloc (sizeof(krb5_authdata *) * (numRecords + 1));
- if (v5Creds->authdata == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->authdata, authPtr = v5Creds->authdata; *dataPtr != NULL; authPtr++, dataPtr++) {
-
- *authPtr = (krb5_authdata *) malloc (sizeof(krb5_authdata));
- if (*authPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- auth = *authPtr;
-
- auth->ad_type = data->type;
- auth->magic = KV5M_AUTHDATA;
- auth->length = data->length;
- auth->contents = (krb5_octet *) malloc (sizeof(krb5_octet) * auth->length);
- if (auth->contents == NULL)
- return ENOMEM;
- memmove(auth->contents, data->data, auth->length); /* copy contents */
- }
-
- /* Write terminator: */
- *authPtr = NULL;
- }
- }
-
- return 0;
-}
-
-/*
- * copyK5DataArrayToCC
- * - analogous to above, but in the other direction
- */
-int copyK5DataArrayToCC(krb5_creds *v5Creds, cc_creds *ccCreds, char whichArray)
-{
- if (whichArray == kAddressArray) {
- if (v5Creds->addresses == NULL) {
- ccCreds->addresses = NULL;
- } else {
-
- krb5_address **addrPtr, *addr;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (addrPtr = v5Creds->addresses; *addrPtr != NULL; numRecords++, addrPtr++) {}
-
- ccCreds->addresses = (cc_data **) malloc (sizeof(cc_data *) * (numRecords + 1));
- if (ccCreds->addresses == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->addresses, addrPtr = v5Creds->addresses; *addrPtr != NULL; addrPtr++, dataPtr++) {
-
- *dataPtr = (cc_data *) malloc (sizeof(cc_data));
- if (*dataPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- addr = *addrPtr;
-
- data->type = addr->addrtype;
- data->length = addr->length;
- data->data = malloc (sizeof(char) * data->length);
- if (data->data == NULL)
- return ENOMEM;
- memmove(data->data, addr->contents, data->length); /* copy contents */
- }
-
- /* Write terminator: */
- *dataPtr = NULL;
- }
- }
-
- if (whichArray == kAuthDataArray) {
- if (v5Creds->authdata == NULL) {
- ccCreds->authdata = NULL;
- } else {
- krb5_authdata **authPtr, *auth;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (authPtr = v5Creds->authdata; *authPtr != NULL; numRecords++, authPtr++) {}
-
- ccCreds->authdata = (cc_data **) malloc (sizeof(cc_data *) * (numRecords + 1));
- if (ccCreds->authdata == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->authdata, authPtr = v5Creds->authdata; *authPtr != NULL; authPtr++, dataPtr++) {
-
- *dataPtr = (cc_data *) malloc (sizeof(cc_data));
- if (*dataPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- auth = *authPtr;
-
- data->type = auth->ad_type;
- data->length = auth->length;
- data->data = malloc (sizeof(char) * data->length);
- if (data->data == NULL)
- return ENOMEM;
- memmove(data->data, auth->contents, data->length); /* copy contents */
- }
-
- /* Write terminator: */
- *dataPtr = NULL;
- }
- }
-
- return 0;
-}
-
-/*
- * dupcctok5
- * - allocate an empty k5 style ticket and copy info from the cc_creds ticket
- */
-
-void dupCCtoK5(krb5_context context, cc_creds *src, krb5_creds *dest)
-{
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- int err;
-
- /*
- * allocate and copy
- * copy all of those damn fields back
- */
- err = krb5_parse_name(context, src->client, &(dest->client));
- err = krb5_parse_name(context, src->server, &(dest->server));
- if (err) return; /* parsename fails w/o krb5.ini for example */
-
- /* copy keyblock */
- dest->keyblock.enctype = src->keyblock.type;
- dest->keyblock.length = src->keyblock.length;
- dest->keyblock.contents = (krb5_octet *)malloc(dest->keyblock.length);
- memcpy(dest->keyblock.contents, src->keyblock.data, dest->keyblock.length);
-
- /* copy times */
-#if TARGET_OS_MAC
- err = krb5_get_time_offsets(context, &offset_seconds, &offset_microseconds);
- if (err) return;
-#endif
- dest->times.authtime = ts_incr(src->authtime, offset_seconds);
- dest->times.starttime = ts_incr(src->starttime, offset_seconds);
- dest->times.endtime = ts_incr(src->endtime, offset_seconds);
- dest->times.renew_till = ts_incr(src->renew_till, offset_seconds);
- dest->is_skey = src->is_skey;
- dest->ticket_flags = src->ticket_flags;
-
- /* more branching fields */
- err = copyCCDataArrayToK5(src, dest, kAddressArray);
- if (err) return;
-
- dest->ticket.length = src->ticket.length;
- dest->ticket.data = (char *)malloc(src->ticket.length);
- memcpy(dest->ticket.data, src->ticket.data, src->ticket.length);
- dest->second_ticket.length = src->second_ticket.length;
- (dest->second_ticket).data = ( char *)malloc(src->second_ticket.length);
- memcpy(dest->second_ticket.data, src->second_ticket.data, src->second_ticket.length);
-
- /* zero out magic number */
- dest->magic = 0;
-
- /* authdata */
- err = copyCCDataArrayToK5(src, dest, kAuthDataArray);
- if (err) return;
-
- return;
-}
-
-/*
- * dupK5toCC
- * - analogous to above but in the reverse direction
- */
-void dupK5toCC(krb5_context context, krb5_creds *creds, cred_union **cu)
-{
- cc_creds *c;
- int err;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
-
- if (cu == NULL) return;
-
- /* allocate the cred_union */
- *cu = (cred_union *)malloc(sizeof(cred_union));
- if ((*cu) == NULL)
- return;
-
- (*cu)->cred_type = CC_CRED_V5;
-
- /* allocate creds structure (and install) */
- c = (cc_creds *)malloc(sizeof(cc_creds));
- if (c == NULL) return;
- (*cu)->cred.pV5Cred = c;
-
- /* convert krb5 principals to flat principals */
- err = krb5_unparse_name(context, creds->client, &(c->client));
- err = krb5_unparse_name(context, creds->server, &(c->server));
- if (err) return;
-
- /* copy more fields */
- c->keyblock.type = creds->keyblock.enctype;
- c->keyblock.length = creds->keyblock.length;
-
- if (creds->keyblock.contents != NULL) {
- c->keyblock.data = (unsigned char *)malloc(creds->keyblock.length);
- memcpy(c->keyblock.data, creds->keyblock.contents, creds->keyblock.length);
- } else {
- c->keyblock.data = NULL;
- }
-
-#if TARGET_OS_MAC
- err = krb5_get_time_offsets(context, &offset_seconds, &offset_microseconds);
- if (err) return;
-#endif
- c->authtime = ts_incr(creds->times.authtime, -offset_seconds);
- c->starttime = ts_incr(creds->times.starttime, -offset_seconds);
- c->endtime = ts_incr(creds->times.endtime, -offset_seconds);
- c->renew_till = ts_incr(creds->times.renew_till, -offset_seconds);
- c->is_skey = creds->is_skey;
- c->ticket_flags = creds->ticket_flags;
-
- err = copyK5DataArrayToCC(creds, c, kAddressArray);
- if (err) return;
-
- c->ticket.length = creds->ticket.length;
- if (creds->ticket.data != NULL) {
- c->ticket.data = (unsigned char *)malloc(creds->ticket.length);
- memcpy(c->ticket.data, creds->ticket.data, creds->ticket.length);
- } else {
- c->ticket.data = NULL;
- }
-
- c->second_ticket.length = creds->second_ticket.length;
- if (creds->second_ticket.data != NULL) {
- c->second_ticket.data = (unsigned char *)malloc(creds->second_ticket.length);
- memcpy(c->second_ticket.data, creds->second_ticket.data, creds->second_ticket.length);
- } else {
- c->second_ticket.data = NULL;
- }
-
- err = copyK5DataArrayToCC(creds, c, kAuthDataArray);
- if (err) return;
-
- return;
-}
-
-/* ----- free_cc_cred_union, etc -------------- */
-/*
- Since the Kerberos5 library allocates a credentials cache structure
- (in dupK5toCC() above) with its own memory allocation routines - which
- may be different than how the CCache allocates memory - the Kerb5 library
- must have its own version of cc_free_creds() to deallocate it. These
- functions do that. The top-level function to substitute for cc_free_creds()
- is krb5_free_cc_cred_union().
-
- If the CCache library wants to use a cred_union structure created by
- the Kerb5 library, it should make a deep copy of it to "translate" to its
- own memory allocation space.
-*/
-static void deep_free_cc_data (cc_data data)
-{
- if (data.data != NULL)
- free (data.data);
-}
-
-static void deep_free_cc_data_array (cc_data** data) {
-
- unsigned int i;
-
- if (data == NULL)
- return;
-
- for (i = 0; data i != NULL; i++) {
- deep_free_cc_data (*(data i));
- free (data i);
- }
-
- free (data);
-}
-
-static void deep_free_cc_v5_creds (cc_creds* creds)
-{
- if (creds == NULL)
- return;
-
- if (creds -> client != NULL)
- free (creds -> client);
- if (creds -> server != NULL)
- free (creds -> server);
-
- deep_free_cc_data (creds -> keyblock);
- deep_free_cc_data (creds -> ticket);
- deep_free_cc_data (creds -> second_ticket);
-
- deep_free_cc_data_array (creds -> addresses);
- deep_free_cc_data_array (creds -> authdata);
-
- free(creds);
-}
-
-static void deep_free_cc_creds (cred_union creds)
-{
- if (creds.cred_type == CC_CRED_V5) {
- deep_free_cc_v5_creds (creds.cred.pV5Cred);
- }
-}
-
-/* top-level exported function */
-cc_int32 krb5int_free_cc_cred_union (cred_union** creds)
-{
- if (creds == NULL)
- return CC_BAD_PARM;
-
- if (*creds != NULL) {
- deep_free_cc_creds (**creds);
- free (*creds);
- *creds = NULL;
- }
-
- return CC_NOERROR;
-}
-#endif
-
-/*
- * Utility functions...
- */
-static krb5_boolean
-times_match(t1, t2)
- const krb5_ticket_times *t1;
- const krb5_ticket_times *t2;
-{
- if (t1->renew_till) {
- if (ts_after(t1->renew_till, t2->renew_till))
- return FALSE; /* this one expires too late */
- }
- if (t1->endtime) {
- if (ts_after(t1->endtime, t2->endtime))
- return FALSE; /* this one expires too late */
- }
- /* only care about expiration on a times_match */
- return TRUE;
-}
-
-static krb5_boolean
-times_match_exact (t1, t2)
- const krb5_ticket_times *t1, *t2;
-{
- return (t1->authtime == t2->authtime
- && t1->starttime == t2->starttime
- && t1->endtime == t2->endtime
- && t1->renew_till == t2->renew_till);
-}
-
-static krb5_boolean
-standard_fields_match(context, mcreds, creds)
- krb5_context context;
- const krb5_creds *mcreds, *creds;
-{
- if (mcreds->client != NULL &&
- !krb5_principal_compare(context, mcreds->client, creds->client))
- return FALSE;
- if (mcreds->server != NULL &&
- !krb5_principal_compare(context, mcreds->server,creds->server))
- return FALSE;
- return TRUE;
-}
-
-/* only match the server name portion, not the server realm portion */
-
-static krb5_boolean
-srvname_match(context, mcreds, creds)
- krb5_context context;
- const krb5_creds *mcreds, *creds;
-{
- if (mcreds->client != NULL &&
- !krb5_principal_compare(context, mcreds->client, creds->client))
- return FALSE;
- if (mcreds->server != NULL &&
- !krb5_principal_compare_any_realm(context, mcreds->server,
- creds->server))
- return FALSE;
- return TRUE;
-}
-
-
-static krb5_boolean
-authdata_match(mdata, data)
- krb5_authdata *const *mdata, *const *data;
-{
- const krb5_authdata *mdatap, *datap;
-
- if (mdata == data)
- return TRUE;
-
- if (mdata == NULL)
- return *data == NULL;
-
- if (data == NULL)
- return *mdata == NULL;
-
- while ((mdatap = *mdata)
- && (datap = *data)
- && mdatap->ad_type == datap->ad_type
- && mdatap->length == datap->length
- && !memcmp ((char *) mdatap->contents, (char *) datap->contents,
- datap->length)) {
- mdata++;
- data++;
- }
-
- return !*mdata && !*data;
-}
-
-static krb5_boolean
-data_match(data1, data2)
- const krb5_data *data1, *data2;
-{
- if (!data1) {
- if (!data2)
- return TRUE;
- else
- return FALSE;
- }
- if (!data2) return FALSE;
-
- if (data1->length != data2->length)
- return FALSE;
- else
- return memcmp(data1->data, data2->data, data1->length) ? FALSE : TRUE;
-}
-
-#define MATCH_SET(bits) (whichfields & bits)
-#define flags_match(a,b) (((a) & (b)) == (a))
-
-/* stdccCredsMatch
- * - check to see if the creds match based on the whichFields variable
- * NOTE: if whichfields is zero we are now comparing 'standard fields.'
- * This is the bug that was killing fetch for a
- * week. The behaviour is what krb5 expects, however.
- */
-int stdccCredsMatch(krb5_context context, krb5_creds *base,
- krb5_creds *match, int whichfields)
-{
- if (((MATCH_SET(KRB5_TC_MATCH_SRV_NAMEONLY) &&
- srvname_match(context, match, base)) ||
- standard_fields_match(context, match, base))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_IS_SKEY) ||
- match->is_skey == base->is_skey)
- &&
- (! MATCH_SET(KRB5_TC_MATCH_FLAGS_EXACT) ||
- match->ticket_flags == base->ticket_flags)
- &&
- (! MATCH_SET(KRB5_TC_MATCH_FLAGS) ||
- flags_match(match->ticket_flags, base->ticket_flags))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_TIMES_EXACT) ||
- times_match_exact(&match->times, &base->times))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_TIMES) ||
- times_match(&match->times, &base->times))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_AUTHDATA) ||
- authdata_match (match->authdata, base->authdata))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_2ND_TKT) ||
- data_match (&match->second_ticket, &base->second_ticket))
- &&
- ((! MATCH_SET(KRB5_TC_MATCH_KTYPE))||
- (match->keyblock.enctype == base->keyblock.enctype))
- )
- return TRUE;
- return FALSE;
-}
-
-#endif /* defined(_WIN32) || defined(USE_CCAPI) */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc_util.h Deleted

@@ -1,49 +0,0 @@
-/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
-/* stdcc_util.h
- *
- * Frank Dabek, July 1998
- */
-
-#if defined(_WIN32) || defined(USE_CCAPI)
-
-#include "autoconf.h"
-
-#if USE_CCAPI_V3
-#include <CredentialsCache.h>
-#else
-#if defined(_WIN32)
-#include "cacheapi.h"
-#else
-#include <CredentialsCache2.h>
-#endif
-#endif
-
-#include "krb5.h"
-
-/* prototypes for private functions declared in stdcc_util.c */
-#ifdef USE_CCAPI_V3
-krb5_error_code
-copy_cc_cred_union_to_krb5_creds (krb5_context in_context,
- const cc_credentials_union *in_cred_union,
- krb5_creds *out_creds);
-krb5_error_code
-copy_krb5_creds_to_cc_cred_union (krb5_context in_context,
- krb5_creds *in_creds,
- cc_credentials_union **out_cred_union);
-
-krb5_error_code
-cred_union_release (cc_credentials_union *in_cred_union);
-#else
-int copyCCDataArrayToK5(cc_creds *cc, krb5_creds *kc, char whichArray);
-int copyK5DataArrayToCC(krb5_creds *kc, cc_creds *cc, char whichArray);
-void dupCCtoK5(krb5_context context, cc_creds *src, krb5_creds *dest);
-void dupK5toCC(krb5_context context, krb5_creds *creds, cred_union **cu);
-cc_int32 krb5int_free_cc_cred_union (cred_union** creds);
-#endif
-int stdccCredsMatch(krb5_context context, krb5_creds *base, krb5_creds *match, int whichfields);
-int bitTst(int var, int mask);
-
-#define kAddressArray 4
-#define kAuthDataArray 5
-
-#endif /* defined(_WIN32) || defined(USE_CCAPI) */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/bidiapi.txt Deleted

@@ -1,84 +0,0 @@
-#
-# $Id: bidiapi.txt,v 1.2 1999/11/19 15:24:29 mleisher Exp $
-#
-
-                       "Pretty Good Bidi Algorithm" API
-
-The PGBA (Pretty Good Bidi Algorithm) is an effective alternative to the
-Unicode BiDi algorithm.  It currently provides only implicit reordering and
-does not yet support explicit reordering codes that the Unicode BiDi algorithm
-supports.  In addition to reordering, the PGBA includes cursor movement
-support for both visual and logical navigation.
-
------------------------------------------------------------------------------
-
-#define UCPGBA_LTR 0
-#define UCPGBA_RTL 1
-
-  These macros appear in the `direction' field of the data structures.
-
-#define UCPGBA_CURSOR_VISUAL  0
-#define UCPGBA_CURSOR_LOGICAL 1
-
-  These macros are used to set the cursor movement for each reordered string.
-
------------------------------------------------------------------------------
-
-ucstring_t *ucstring_create(unsigned long *source, unsigned long start,
-                            unsigned long end, int default_direction,
-                            int cursor_motion)
-
-  This function will create a reordered string by using the implicit
-  directionality of the characters in the specified substring.
-
-  The `default_direction' parameter should be one of UCPGBA_LTR or UCPGBA_RTL
-  and is used only in cases where a string contains no characters with strong
-  directionality.
-
-  The `cursor_motion' parameter should be one of UCPGBA_CURSOR_VISUAL or
-  UCPGBA_CURSOR_LOGICAL, and is used to specify the initial cursor motion
-  behavior.  This behavior can be switched at any time using
-  ustring_set_cursor_motion().
-
------------------------------------------------------------------------------
-
-void ucstring_free(ucstring_t *string)
-
-  This function will deallocate the memory used by the string, incuding the
-  string itself.
-
------------------------------------------------------------------------------
-
-void ucstring_cursor_info(ustring_t *string, int *direction,
-                          unsigned long *position)
-
-  This function will return the text position of the internal cursor and the
-  directionality of the text at that position.  The position returned is the
-  original text position of the character.
-
------------------------------------------------------------------------------
-
-int ucstring_set_cursor_motion(ucstring_t *string, int cursor_motion)
-
-  This function will change the cursor motion type and return the previous
-  cursor motion type.
-
------------------------------------------------------------------------------
-
-int ucstring_cursor_right(ucstring_t *string, int count)
-
-  This function will move the internal cursor to the right according to the
-  type of cursor motion set for the string.
-
-  If no cursor motion is performed, it returns 0.  Otherwise it will return a
-  1.
-
------------------------------------------------------------------------------
-
-int ucstring_cursor_left(ucstring_t *string, int count)
-
-  This function will move the internal cursor to the left according to the
-  type of cursor motion set for the string.
-
-  If no cursor motion is performed, it returns 0.  Otherwise it will return a
-  1.

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/ucpgba.c Deleted

@@ -1,755 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 2001 Computing Research Labs, New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ucdata/ucpgba.c,v 1.9 2008/01/07 23:20:05 kurt Exp $
- * $Id: ucpgba.c,v 1.5 2001/01/02 18:46:20 mleisher Exp $
- */
-
-#include "k5-int.h"
-#include "k5-utf8.h"
-#include "k5-unicode.h"
-
-#include <stdio.h>
-#include <stdlib.h>
-
-#include "ucdata.h"
-#include "ucpgba.h"
-
-/*
- * These macros are used while reordering of RTL runs of text for the
- * special case of non-spacing characters being in runs of weakly
- * directional text. They check for weak and non-spacing, and digits and
- * non-spacing.
- */
-#define ISWEAKSPECIAL(cc) ucisprop(cc, UC_EN|UC_ES|UC_MN, UC_ET|UC_AN|UC_CS)
-#define ISDIGITSPECIAL(cc) ucisprop(cc, UC_ND|UC_MN, 0)
-
-/*
- * These macros are used while breaking a string into runs of text in
- * different directions. Descriptions:
- *
- * ISLTR_LTR - Test for members of an LTR run in an LTR context. This looks
- * for characters with ltr, non-spacing, weak, and neutral
- * properties.
- *
- * ISRTL_RTL - Test for members of an RTL run in an RTL context. This looks
- * for characters with rtl, non-spacing, weak, and neutral
- * properties.
- *
- * ISRTL_NEUTRAL - Test for RTL or neutral characters.
- *
- * ISWEAK_NEUTRAL - Test for weak or neutral characters.
- */
-#define ISLTR_LTR(cc) ucisprop(cc, UC_L|UC_MN|UC_EN|UC_ES,\
- UC_ET|UC_CS|UC_B|UC_S|UC_WS|UC_ON)
-
-#define ISRTL_RTL(cc) ucisprop(cc, UC_R|UC_MN|UC_EN|UC_ES,\
- UC_ET|UC_AN|UC_CS|UC_B|UC_S|UC_WS|UC_ON)
-
-#define ISRTL_NEUTRAL(cc) ucisprop(cc, UC_R, UC_B|UC_S|UC_WS|UC_ON)
-#define ISWEAK_NEUTRAL(cc) ucisprop(cc, UC_EN|UC_ES, \
- UC_B|UC_S|UC_WS|UC_ON|UC_ET|UC_AN|UC_CS)
-
-/*
- * This table is temporarily hard-coded here until it can be constructed
- * automatically somehow.
- */
-static unsigned long _symmetric_pairs = {
- 0x0028, 0x0029, 0x0029, 0x0028, 0x003C, 0x003E, 0x003E, 0x003C,
- 0x005B, 0x005D, 0x005D, 0x005B, 0x007B, 0x007D, 0x007D, 0x007B,
- 0x2045, 0x2046, 0x2046, 0x2045, 0x207D, 0x207E, 0x207E, 0x207D,
- 0x208D, 0x208E, 0x208E, 0x208D, 0x3008, 0x3009, 0x3009, 0x3008,
- 0x300A, 0x300B, 0x300B, 0x300A, 0x300C, 0x300D, 0x300D, 0x300C,
- 0x300E, 0x300F, 0x300F, 0x300E, 0x3010, 0x3011, 0x3011, 0x3010,
- 0x3014, 0x3015, 0x3015, 0x3014, 0x3016, 0x3017, 0x3017, 0x3016,
- 0x3018, 0x3019, 0x3019, 0x3018, 0x301A, 0x301B, 0x301B, 0x301A,
- 0xFD3E, 0xFD3F, 0xFD3F, 0xFD3E, 0xFE59, 0xFE5A, 0xFE5A, 0xFE59,
- 0xFE5B, 0xFE5C, 0xFE5C, 0xFE5B, 0xFE5D, 0xFE5E, 0xFE5E, 0xFE5D,
- 0xFF08, 0xFF09, 0xFF09, 0xFF08, 0xFF3B, 0xFF3D, 0xFF3D, 0xFF3B,
- 0xFF5B, 0xFF5D, 0xFF5D, 0xFF5B, 0xFF62, 0xFF63, 0xFF63, 0xFF62,
-};
-
-static int _symmetric_pairs_size =
-sizeof(_symmetric_pairs)/sizeof(_symmetric_pairs0);
-
-/*
- * This routine looks up the other form of a symmetric pair.
- */
-static unsigned long
-_ucsymmetric_pair(unsigned long c)
-{
- int i;
-
- for (i = 0; i < _symmetric_pairs_size; i += 2) {
- if (_symmetric_pairsi == c)
- return _symmetric_pairsi+1;
- }
- return c;
-}
-
-/*
- * This routine creates a new run, copies the text into it, links it into the
- * logical text order chain and returns it to the caller to be linked into
- * the visual text order chain.
- */
-static ucrun_t *
-_add_run(ucstring_t *str, unsigned long *src,
- unsigned long start, unsigned long end, int direction)
-{
- long i, t;
- ucrun_t *run;
-
- run = (ucrun_t *) malloc(sizeof(ucrun_t));
- run->visual_next = run->visual_prev = 0;
- run->direction = direction;
-
- run->cursor = ~0;
-
- run->chars = (unsigned long *)
- malloc(sizeof(unsigned long) * ((end - start) << 1));
- run->positions = run->chars + (end - start);
-
- run->source = src;
- run->start = start;
- run->end = end;
-
- if (direction == UCPGBA_RTL) {
- /*
- * Copy the source text into the run in reverse order and select
- * replacements for the pairwise punctuation and the <> characters.
- */
- for (i = 0, t = end - 1; start < end; start++, t--, i++) {
- run->positionsi = t;
- if (ucissymmetric(srct) || srct == '<' || srct == '>')
- run->charsi = _ucsymmetric_pair(srct);
- else
- run->charsi = srct;
- }
- } else {
- /*
- * Copy the source text into the run directly.
- */
- for (i = start; i < end; i++) {
- run->positionsi - start = i;
- run->charsi - start = srci;
- }
- }
-
- /*
- * Add the run to the logical list for cursor traversal.
- */
- if (str->logical_first == 0)
- str->logical_first = str->logical_last = run;
- else {
- run->logical_prev = str->logical_last;
- str->logical_last->logical_next = run;
- str->logical_last = run;
- }
-
- return run;
-}
-
-static void
-_ucadd_rtl_segment(ucstring_t *str, unsigned long *source, unsigned long start,
- unsigned long end)
-{
- unsigned long s, e;
- ucrun_t *run, *lrun;
-
- /*
- * This is used to splice runs into strings with overall LTR direction.
- * The `lrun' variable will never be NULL because at least one LTR run was
- * added before this RTL run.
- */
- lrun = str->visual_last;
-
- for (e = s = start; s < end;) {
- for (; e < end && ISRTL_NEUTRAL(sourcee); e++) ;
-
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_RTL);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-
- /*
- * Handle digits in a special way. This makes sure the weakly
- * directional characters appear on the expected sides of a number
- * depending on whether that number is Arabic or not.
- */
- for (s = e; e < end && ISWEAKSPECIAL(sourcee); e++) {
- if (!ISDIGITSPECIAL(sourcee) &&
- (e + 1 == end || !ISDIGITSPECIAL(sourcee + 1)))
- break;
- }
-
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_LTR);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-
- /*
- * Collect all weak non-digit sequences for an RTL segment. These
- * will appear as part of the next RTL segment or will be added as
- * an RTL segment by themselves.
- */
- for (s = e; e < end && ucisweak(sourcee) && !ucisdigit(sourcee);
- e++) ;
- }
-
- /*
- * Capture any weak non-digit sequences that occur at the end of the RTL
- * run.
- */
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_RTL);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-}
-
-static void
-_ucadd_ltr_segment(ucstring_t *str, unsigned long *source, unsigned long start,
- unsigned long end)
-{
- ucrun_t *run;
-
- run = _add_run(str, source, start, end, UCPGBA_LTR);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = str->visual_last;
- str->visual_last->visual_next = run;
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
-}
-
-ucstring_t *
-ucstring_create(unsigned long *source, unsigned long start, unsigned long end,
- int default_direction, int cursor_motion)
-{
- int rtl_first;
- unsigned long s, e, ld;
- ucstring_t *str;
-
- str = (ucstring_t *) malloc(sizeof(ucstring_t));
-
- /*
- * Set the initial values.
- */
- str->cursor_motion = cursor_motion;
- str->logical_first = str->logical_last = 0;
- str->visual_first = str->visual_last = str->cursor = 0;
- str->source = source;
- str->start = start;
- str->end = end;
-
- /*
- * If the length of the string is 0, then just return it at this point.
- */
- if (start == end)
- return str;
-
- /*
- * This flag indicates whether the collection loop for RTL is called
- * before the LTR loop the first time.
- */
- rtl_first = 0;
-
- /*
- * Look for the first character in the string that has strong
- * directionality.
- */
- for (s = start; s < end && !ucisstrong(sources); s++) ;
-
- if (s == end)
- /*
- * If the string contains no characters with strong directionality, use
- * the default direction.
- */
- str->direction = default_direction;
- else
- str->direction = ucisrtl(sources) ? UCPGBA_RTL : UCPGBA_LTR;
-
- if (str->direction == UCPGBA_RTL)
- /*
- * Set the flag that causes the RTL collection loop to run first.
- */
- rtl_first = 1;
-
- /*
- * This loop now separates the string into runs based on directionality.
- */
- for (s = e = 0; s < end; s = e) {
- if (!rtl_first) {
- /*
- * Determine the next run of LTR text.
- */
-
- ld = s;
- while (e < end && ISLTR_LTR(sourcee)) {
- if (ucisdigit(sourcee) &&
- !(0x660 <= sourcee && sourcee <= 0x669))
- ld = e;
- e++;
- }
- if (str->direction != UCPGBA_LTR) {
- while (e > ld && ISWEAK_NEUTRAL(sourcee - 1))
- e--;
- }
-
- /*
- * Add the LTR segment to the string.
- */
- if (e > s)
- _ucadd_ltr_segment(str, source, s, e);
- }
-
- /*
- * Determine the next run of RTL text.
- */
- ld = s = e;
- while (e < end && ISRTL_RTL(sourcee)) {
- if (ucisdigit(sourcee) &&
- !(0x660 <= sourcee && sourcee <= 0x669))
- ld = e;
- e++;
- }
- if (str->direction != UCPGBA_RTL) {
- while (e > ld && ISWEAK_NEUTRAL(sourcee - 1))
- e--;
- }
-
- /*
- * Add the RTL segment to the string.
- */
- if (e > s)
- _ucadd_rtl_segment(str, source, s, e);
-
- /*
- * Clear the flag that allowed the RTL collection loop to run first
- * for strings with overall RTL directionality.
- */
- rtl_first = 0;
- }
-
- /*
- * Set up the initial cursor run.
- */
- str->cursor = str->logical_first;
- if (str != 0)
- str->cursor->cursor = (str->cursor->direction == UCPGBA_RTL) ?
- str->cursor->end - str->cursor->start : 0;
-
- return str;
-}
-
-void
-ucstring_free(ucstring_t *s)
-{
- ucrun_t *l, *r;
-
- if (s == 0)
- return;
-
- for (l = 0, r = s->visual_first; r != 0; r = r->visual_next) {
- if (r->end > r->start)
- free((char *) r->chars);
- if (l)
- free((char *) l);
- l = r;
- }
- if (l)
- free((char *) l);
-
- free((char *) s);
-}
-
-int
-ucstring_set_cursor_motion(ucstring_t *str, int cursor_motion)
-{
- int n;
-
- if (str == 0)
- return -1;
-
- n = str->cursor_motion;
- str->cursor_motion = cursor_motion;
- return n;
-}
-
-static int
-_ucstring_visual_cursor_right(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if ((cursor->direction == UCPGBA_RTL && cursor->cursor + 1 == size) ||
- cursor->cursor + 1 > size) {
- /*
- * If the next run is NULL, then the cursor is already on the
- * far right end already.
- */
- if (cursor->visual_next == 0)
- /*
- * If movement occured, then report it.
- */
- return (cnt != count);
-
- /*
- * Move to the next run.
- */
- str->cursor = cursor = cursor->visual_next;
- cursor->cursor = (cursor->direction == UCPGBA_RTL) ? -1 : 0;
- size = cursor->end - cursor->start;
- } else
- cursor->cursor++;
- cnt--;
- }
- return 1;
-}
-
-static int
-_ucstring_logical_cursor_right(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if (str->direction == UCPGBA_RTL) {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor + 1 == size) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor++;
- } else {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_first)
- /*
- * At the beginning of the string already.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor--;
- }
- } else {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor--;
- } else {
- if (cursor->cursor + 1 > size) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor++;
- }
- }
- cnt--;
- }
- return 1;
-}
-
-int
-ucstring_cursor_right(ucstring_t *str, int count)
-{
- if (str == 0)
- return 0;
- return (str->cursor_motion == UCPGBA_CURSOR_VISUAL) ?
- _ucstring_visual_cursor_right(str, count) :
- _ucstring_logical_cursor_right(str, count);
-}
-
-static int
-_ucstring_visual_cursor_left(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if ((cursor->direction == UCPGBA_LTR && cursor->cursor == 0) ||
- cursor->cursor - 1 < -1) {
- /*
- * If the preceding run is NULL, then the cursor is already on the
- * far left end already.
- */
- if (cursor->visual_prev == 0)
- /*
- * If movement occured, then report it.
- */
- return (cnt != count);
-
- /*
- * Move to the previous run.
- */
- str->cursor = cursor = cursor->visual_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_RTL) ?
- size : size - 1;
- } else
- cursor->cursor--;
- cnt--;
- }
- return 1;
-}
-
-static int
-_ucstring_logical_cursor_left(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if (str->direction == UCPGBA_RTL) {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor == -1) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor--;
- } else {
- if (cursor->cursor + 1 > size) {
- if (cursor == str->logical_last)
- /*
- * At the end of the string already.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor++;
- }
- } else {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor + 1 == size) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor++;
- } else {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor--;
- }
- }
- cnt--;
- }
- return 1;
-}
-
-int
-ucstring_cursor_left(ucstring_t *str, int count)
-{
- if (str == 0)
- return 0;
- return (str->cursor_motion == UCPGBA_CURSOR_VISUAL) ?
- _ucstring_visual_cursor_left(str, count) :
- _ucstring_logical_cursor_left(str, count);
-}
-
-void
-ucstring_cursor_info(ucstring_t *str, int *direction, unsigned long *position)
-{
- long c;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0 || direction == 0 || position == 0)
- return;
-
- cursor = str->cursor;
-
- *direction = cursor->direction;
-
- c = cursor->cursor;
- size = cursor->end - cursor->start;
-
- if (c == size)
- *position = (cursor->direction == UCPGBA_RTL) ?
- cursor->start : cursor->positionsc - 1;
- else if (c == -1)
- *position = (cursor->direction == UCPGBA_RTL) ?
- cursor->end : cursor->start;
- else
- *position = cursor->positionsc;
-}

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/ucpgba.h Deleted

@@ -1,166 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1999 Computing Research Labs, New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ucdata/ucpgba.h,v 1.10 2008/01/07 23:20:05 kurt Exp $
- * $Id: ucpgba.h,v 1.4 1999/11/19 15:24:30 mleisher Exp $
- */
-
-#ifndef _h_ucpgba
-#define _h_ucpgba
-
-#include "k5-int.h"
-
-/***************************************************************************
- *
- * Macros and types.
- *
- ***************************************************************************/
-
-/*
- * These are the direction values that can appear in render runs and render
- * strings.
- */
-#define UCPGBA_LTR 0
-#define UCPGBA_RTL 1
-
-/*
- * These are the flags for cursor motion.
- */
-#define UCPGBA_CURSOR_VISUAL 0
-#define UCPGBA_CURSOR_LOGICAL 1
-
-/*
- * This structure is used to contain runs of text in a particular direction.
- */
-typedef struct _ucrun_t {
- struct _ucrun_t *visual_prev; /* Pointer to the previous visual run. */
- struct _ucrun_t *visual_next; /* Pointer to the next visual run. */
-
- struct _ucrun_t *logical_prev; /* Pointer to the previous logical run. */
- struct _ucrun_t *logical_next; /* Pointer to the next logical run. */
-
- int direction; /* Direction of the run. */
-
- long cursor; /* Position of "cursor" in the string. */
-
- unsigned long *chars; /* List of characters for the run. */
- unsigned long *positions; /* List of original positions in source. */
-
- unsigned long *source; /* The source string. */
- unsigned long start; /* Beginning offset in the source string. */
- unsigned long end; /* Ending offset in the source string. */
-} ucrun_t;
-
-/*
- * This represents a string of runs rendered up to a point that is not
- * platform specific.
- */
-typedef struct _ucstring_t {
- int direction; /* Overall direction of the string. */
-
- int cursor_motion; /* Logical or visual cursor motion flag. */
-
- ucrun_t *cursor; /* The run containing the "cursor." */
-
- ucrun_t *logical_first; /* First run in the logical order. */
- ucrun_t *logical_last; /* Last run in the logical order. */
-
- ucrun_t *visual_first; /* First run in the visual order. */
- ucrun_t *visual_last; /* Last run in the visual order. */
-
- unsigned long *source; /* The source string. */
- unsigned long start; /* The beginning offset in the source. */
- unsigned long end; /* The ending offset in the source. */
-} ucstring_t;
-
-/***************************************************************************
- *
- * API
- *
- ***************************************************************************/
-
-/*
- * This creates and reorders the specified substring using the
- * "Pretty Good Bidi Algorithm." A default direction is provided for cases
- * of a string containing no strong direction characters and the default
- * cursor motion should be provided.
- */
-ucstring_t *
-ucstring_create (unsigned long *source,
-		 unsigned long start,
-		 unsigned long end,
-		 int default_direction,
-		 int cursor_motion);
-/*
- * This releases the string.
- */
-void ucstring_free (ucstring_t *string);
-
-/*
- * This changes the cursor motion flag for the string.
- */
-int
-ucstring_set_cursor_motion (ucstring_t *string,
-				 int cursor_motion);
-
-/*
- * This function will move the cursor to the right depending on the
- * type of cursor motion that was specified for the string.
- *
- * A 0 is returned if no cursor motion is performed, otherwise a
- * 1 is returned.
- */
-int
-ucstring_cursor_right (ucstring_t *string, int count);
-
-/*
- * This function will move the cursor to the left depending on the
- * type of cursor motion that was specified for the string.
- *
- * A 0 is returned if no cursor motion is performed, otherwise a
- * 1 is returned.
- */
-int
-ucstring_cursor_left (ucstring_t *string, int count);
-
-/*
- * This routine retrieves the direction of the run containing the cursor
- * and the actual position in the original text string.
- */
-void
-ucstring_cursor_info (ucstring_t *string, int *direction,
-			 unsigned long *position);
-
-#endif /* _h_ucpgba */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/ucpgba.man Deleted

@@ -1,97 +0,0 @@
-.\"
-.\" $Id: ucpgba.man,v 1.1 1999/11/19 16:08:34 mleisher Exp $
-.\"
-.TH ucpgba 3 "19 November 1999"
-.SH NAME 
-ucpgba \- functions for doing bidirectional reordering of Unicode text and
-logical and visual cursor motion
-
-.SH SYNOPSIS
-.nf
-#include <ucdata.h>
-#include <ucpgba.h>
-
-ucstring_t *ucstring_create(unsigned long *source, unsigned long start,
- unsigned long end, int default_direction,
- int cursor_motion)
-.sp
-void ucstring_free(ucstring_t *string)
-.sp
-int ucstring_set_cursor_motion(ucstring_t *string, int cursor_motion)
-.sp
-int ucstring_cursor_right(ucstring_t *string, int count)
-.sp
-int ucstring_cursor_left(ucstring_t *string, int count)
-.sp
-void ucstring_cursor_info(ucstring_t *string, int *direction,
- unsigned long *position)
-
-.SH DESCRIPTION
-.TP 4
-.BR Macros
-UCPGBA_LTR
-.br
-UCPGBA_RTL
-.br
-UCPGBA_CURSOR_VISUAL
-.br
-UCPGBA_CURSOR_LOGICAL
-
-.TP 4
-.BR ucstring_create()
-This function will create a reordered string by using the implicit
-directionality of the characters in the specified substring.
-.sp
-The `default_direction' parameter should be one of UCPGBA_LTR or UCPGBA_RTL
-and is used only in cases where a string contains no characters with strong
-directionality.
-.sp
-The `cursor_motion' parameter should be one of UCPGBA_CURSOR_VISUAL or
-UCPGBA_CURSOR_LOGICAL, and is used to specify the initial cursor motion
-behavior. This behavior can be switched at any time using
-ustring_set_cursor_motion().
-
-.TP 4
-.BR ucstring_free()
-This function will deallocate the memory used by the string, incuding the
-string itself.
-
-.TP 4
-.BR ucstring_cursor_info()
-This function will return the text position of the internal cursor and the
-directionality of the text at that position. The position returned is the
-original text position of the character.
-
-.TP 4
-.BR ucstring_set_cursor_motion()
-This function will change the cursor motion type and return the previous
-cursor motion type.
-
-.TP 4
-.BR ucstring_cursor_right()
-This function will move the internal cursor to the right according to the
-type of cursor motion set for the string.
-.sp
-If no cursor motion is performed, it returns 0. Otherwise it will return a 1.
-
-.TP 4
-.BR ucstring_cursor_left()
-This function will move the internal cursor to the left according to the
-type of cursor motion set for the string.
-.sp
-If no cursor motion is performed, it returns 0. Otherwise it will return a 1.
-
-.SH "SEE ALSO"
-ucdata(3)
-
-.SH ACKNOWLEDGMENTS
-These are people who have helped with patches or alerted me about problems.
-
-.SH AUTHOR
-Mark Leisher
-.br
-Computing Research Lab
-.br
-New Mexico State University
-.br
-Email: mleisher@crl.nmsu.edu

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ure Deleted

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ure/README Deleted

@@ -1,212 +0,0 @@
-#
-# $Id: README,v 1.3 1999/09/21 15:47:43 mleisher Exp $
-#
-# Copyright 1997, 1998, 1999 Computing Research Labs,
-# New Mexico State University
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
-# THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
-# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
-# OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
-# THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-
-
- Unicode and Regular Expressions
- Version 0.5
-
-This is a simple regular expression package for matching against Unicode text
-in UCS2 form. The implementation of this URE package is a variation on the
-RE->DFA algorithm done by Mark Hopkins (markh@csd4.csd.uwm.edu). Mark
-Hopkins' algorithm had the virtue of being very simple, so it was used as a
-model.
-
----------------------------------------------------------------------------
-
-Assumptions:
-
- o Regular expression and text already normalized.
-
- o Conversion to lower case assumes a 1-1 mapping.
-
-Definitions:
-
- Separator - any one of U+2028, U+2029, '\n', '\r'.
-
-Operators:
- . - match any character.
- * - match zero or more of the last subexpression.
- + - match one or more of the last subexpression.
- ? - match zero or one of the last subexpression.
- () - subexpression grouping.
-
- Notes:
-
- o The "." operator normally does not match separators, but a flag is
- available for the ure_exec() function that will allow this operator to
- match a separator.
-
-Literals and Constants:
-
- c - literal UCS2 character.
- \x.... - hexadecimal number of up to 4 digits.
- \X.... - hexadecimal number of up to 4 digits.
- \u.... - hexadecimal number of up to 4 digits.
- \U.... - hexadecimal number of up to 4 digits.
-
-Character classes:
-
- ... - Character class.
- ^... - Negated character class.
- \pN1,N2,...,Nn - Character properties class.
- \PN1,N2,...,Nn - Negated character properties class.
-
- POSIX character classes recognized:
-
- :alnum:
- :alpha:
- :cntrl:
- :digit:
- :graph:
- :lower:
- :print:
- :punct:
- :space:
- :upper:
- :xdigit:
-
- Notes:
-
- o Character property classes are \p or \P followed by a comma separated
- list of integers between 1 and 32. These integers are references to
- the following character properties:
-
- N	Character Property
- --------------------------
- 1	_URE_NONSPACING
- 2	_URE_COMBINING
- 3	_URE_NUMDIGIT
- 4	_URE_NUMOTHER
- 5	_URE_SPACESEP
- 6	_URE_LINESEP
- 7	_URE_PARASEP
- 8	_URE_CNTRL
- 9	_URE_PUA
- 10	_URE_UPPER
- 11	_URE_LOWER
- 12	_URE_TITLE
- 13	_URE_MODIFIER
- 14	_URE_OTHERLETTER
- 15	_URE_DASHPUNCT
- 16	_URE_OPENPUNCT
- 17	_URE_CLOSEPUNCT
- 18	_URE_OTHERPUNCT
- 19	_URE_MATHSYM
- 20	_URE_CURRENCYSYM
- 21	_URE_OTHERSYM
- 22	_URE_LTR
- 23	_URE_RTL
- 24	_URE_EURONUM
- 25	_URE_EURONUMSEP
- 26	_URE_EURONUMTERM
- 27	_URE_ARABNUM
- 28	_URE_COMMONSEP
- 29	_URE_BLOCKSEP
- 30	_URE_SEGMENTSEP
- 31	_URE_WHITESPACE
- 32	_URE_OTHERNEUT
-
- o Character classes can contain literals, constants, and character
- property classes. Example:
-
- abc\U10A\p1,3,4
-
----------------------------------------------------------------------------
-
-Before using URE
-----------------
-Before URE is used, two functions need to be created. One to check if a
-character matches a set of URE character properties, and one to convert a
-character to lower case.
-
-Stubs for these function are located in the urestubs.c file.
-
-Using URE
----------
-
-Sample pseudo-code fragment.
-
- ure_buffer_t rebuf;
- ure_dfa_t dfa;
- ucs2_t *re, *text;
- unsigned long relen, textlen;
- unsigned long match_start, match_end;
-
- /*
- * Allocate the dynamic storage needed to compile regular expressions.
- */
- rebuf = ure_buffer_create();
-
- for each regular expression in a list {
- re = next regular expression;
- relen = length(re);
-
- /*
- * Compile the regular expression with the case insensitive flag
- * turned on.
- */
- dfa = ure_compile(re, relen, 1, rebuf);
-
- /*
- * Look for the first match in some text. The matching will be done
- * in a case insensitive manner because the expression was compiled
- * with the case insensitive flag on.
- */
- if (ure_exec(dfa, 0, text, textlen, &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Look for the first match in some text, ignoring non-spacing
- * characters.
- */
- if (ure_exec(dfa, URE_IGNORE_NONSPACING, text, textlen,
- &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Free the DFA.
- */
- ure_free_dfa(dfa);
- }
-
- /*
- * Free the dynamic storage used for compiling the expressions.
- */
- ure_free_buffer(rebuf);
-
----------------------------------------------------------------------------
-
-Mark Leisher <mleisher@crl.nmsu.edu>
-29 March 1997
-
-===========================================================================
-
-CHANGES
--------
-
-Version: 0.5
-Date : 21 September 1999
-==========================
- 1. Added copyright stuff and put in CVS.

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ure/ure.c Deleted

@@ -1,2139 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/ure.c,v 1.19 2008/01/07 23:20:05 kurt Exp $
- * $Id: ure.c,v 1.2 1999/09/21 15:47:43 mleisher Exp $"
- */
-
-#include <k5-int.h>
-
-#include <stdlib.h>
-#include <string.h>
-#ifndef _WIN32
-#include <unistd.h>
-#endif
-
-#include "ure.h"
-
-/*
- * Flags used internally in the DFA.
- */
-#define _URE_DFA_CASEFOLD 0x01
-#define _URE_DFA_BLANKLINE 0x02
-
-static unsigned long cclass_flags = {
- 0,
- _URE_NONSPACING,
- _URE_COMBINING,
- _URE_NUMDIGIT,
- _URE_NUMOTHER,
- _URE_SPACESEP,
- _URE_LINESEP,
- _URE_PARASEP,
- _URE_CNTRL,
- _URE_PUA,
- _URE_UPPER,
- _URE_LOWER,
- _URE_TITLE,
- _URE_MODIFIER,
- _URE_OTHERLETTER,
- _URE_DASHPUNCT,
- _URE_OPENPUNCT,
- _URE_CLOSEPUNCT,
- _URE_OTHERPUNCT,
- _URE_MATHSYM,
- _URE_CURRENCYSYM,
- _URE_OTHERSYM,
- _URE_LTR,
- _URE_RTL,
- _URE_EURONUM,
- _URE_EURONUMSEP,
- _URE_EURONUMTERM,
- _URE_ARABNUM,
- _URE_COMMONSEP,
- _URE_BLOCKSEP,
- _URE_SEGMENTSEP,
- _URE_WHITESPACE,
- _URE_OTHERNEUT,
-};
-
-/*
- * Symbol types for the DFA.
- */
-#define _URE_ANY_CHAR 1
-#define _URE_CHAR 2
-#define _URE_CCLASS 3
-#define _URE_NCCLASS 4
-#define _URE_BOL_ANCHOR 5
-#define _URE_EOL_ANCHOR 6
-
-/*
- * Op codes for converting the NFA to a DFA.
- */
-#define _URE_SYMBOL 10
-#define _URE_PAREN 11
-#define _URE_QUEST 12
-#define _URE_STAR 13
-#define _URE_PLUS 14
-#define _URE_ONE 15
-#define _URE_AND 16
-#define _URE_OR 17
-
-#define _URE_NOOP 0xffff
-
-#define _URE_REGSTART 0x8000
-#define _URE_REGEND 0x4000
-
-/*
- * Structure used to handle a compacted range of characters.
- */
-typedef struct {
- ucs4_t min_code;
- ucs4_t max_code;
-} _ure_range_t;
-
-typedef struct {
- _ure_range_t *ranges;
- ucs2_t ranges_used;
- ucs2_t ranges_size;
-} _ure_ccl_t;
-
-typedef union {
- ucs4_t chr;
- _ure_ccl_t ccl;
-} _ure_sym_t;
-
-/*
- * This is a general element structure used for expressions and stack
- * elements.
- */
-typedef struct {
- ucs2_t reg;
- ucs2_t onstack;
- ucs2_t type;
- ucs2_t lhs;
- ucs2_t rhs;
-} _ure_elt_t;
-
-/*
- * This is a structure used to track a list or a stack of states.
- */
-typedef struct {
- ucs2_t *slist;
- ucs2_t slist_size;
- ucs2_t slist_used;
-} _ure_stlist_t;
-
-/*
- * Structure to track the list of unique states for a symbol
- * during reduction.
- */
-typedef struct {
- ucs2_t id;
- ucs2_t type;
- unsigned long mods;
- unsigned long props;
- _ure_sym_t sym;
- _ure_stlist_t states;
-} _ure_symtab_t;
-
-/*
- * Structure to hold a single state.
- */
-typedef struct {
- ucs2_t id;
- ucs2_t accepting;
- ucs2_t pad;
- _ure_stlist_t st;
- _ure_elt_t *trans;
- ucs2_t trans_size;
- ucs2_t trans_used;
-} _ure_state_t;
-
-/*
- * Structure used for keeping lists of states.
- */
-typedef struct {
- _ure_state_t *states;
- ucs2_t states_size;
- ucs2_t states_used;
-} _ure_statetable_t;
-
-/*
- * Structure to track pairs of DFA states when equivalent states are
- * merged.
- */
-typedef struct {
- ucs2_t l;
- ucs2_t r;
-} _ure_equiv_t;
-
-/*
- * Structure used for constructing the NFA and reducing to a minimal DFA.
- */
-typedef struct _ure_buffer_t {
- int reducing;
- int error;
- unsigned long flags;
-
- _ure_stlist_t stack;
-
- /*
- * Table of unique symbols encountered.
- */
- _ure_symtab_t *symtab;
- ucs2_t symtab_size;
- ucs2_t symtab_used;
-
- /*
- * Tracks the unique expressions generated for the NFA and when the NFA is
- * reduced.
- */
- _ure_elt_t *expr;
- ucs2_t expr_used;
- ucs2_t expr_size;
-
- /*
- * The reduced table of unique groups of NFA states.
- */
- _ure_statetable_t states;
-
- /*
- * Tracks states when equivalent states are merged.
- */
- _ure_equiv_t *equiv;
- ucs2_t equiv_used;
- ucs2_t equiv_size;
-} _ure_buffer_t;
-
-typedef struct {
- ucs2_t symbol;
- ucs2_t next_state;
-} _ure_trans_t;
-
-typedef struct {
- ucs2_t accepting;
- ucs2_t ntrans;
- _ure_trans_t *trans;
-} _ure_dstate_t;
-
-typedef struct _ure_dfa_t {
- unsigned long flags;
-
- _ure_symtab_t *syms;
- ucs2_t nsyms;
-
- _ure_dstate_t *states;
- ucs2_t nstates;
-
- _ure_trans_t *trans;
- ucs2_t ntrans;
-} _ure_dfa_t;
-
-/*************************************************************************
- *
- * Functions.
- *
- *************************************************************************/
-
-static void
-_ure_memmove(char *dest, char *src, unsigned long bytes)
-{
- long i, j;
-
- i = (long) bytes;
- j = i & 7;
- i = (i + 7) >> 3;
-
- /*
- * Do a memmove using Ye Olde Duff's Device for efficiency.
- */
- if (src < dest) {
- src += bytes;
- dest += bytes;
-
- switch (j) {
- case 0: do {
- *--dest = *--src;
- case 7: *--dest = *--src;
- case 6: *--dest = *--src;
- case 5: *--dest = *--src;
- case 4: *--dest = *--src;
- case 3: *--dest = *--src;
- case 2: *--dest = *--src;
- case 1: *--dest = *--src;
- } while (--i > 0);
- }
- } else if (src > dest) {
- switch (j) {
- case 0: do {
- *dest++ = *src++;
- case 7: *dest++ = *src++;
- case 6: *dest++ = *src++;
- case 5: *dest++ = *src++;
- case 4: *dest++ = *src++;
- case 3: *dest++ = *src++;
- case 2: *dest++ = *src++;
- case 1: *dest++ = *src++;
- } while (--i > 0);
- }
- }
-}
-
-static void
-_ure_push(ucs2_t v, _ure_buffer_t *b)
-{
- _ure_stlist_t *s;
-
- if (b == 0)
- return;
-
- /*
- * If the `reducing' parameter is non-zero, check to see if the value
- * passed is already on the stack.
- */
- if (b->reducing != 0 && b->exprv.onstack != 0)
- return;
-
- s = &b->stack;
- if (s->slist_used == s->slist_size) {
- if (s->slist_size == 0)
- s->slist = (ucs2_t *) malloc(sizeof(ucs2_t) << 3);
- else
- s->slist = (ucs2_t *) realloc((char *) s->slist,
- sizeof(ucs2_t) * (s->slist_size + 8));
- s->slist_size += 8;
- }
- s->slists->slist_used++ = v;
-
- /*
- * If the `reducing' parameter is non-zero, flag the element as being on
- * the stack.
- */
- if (b->reducing != 0)
- b->exprv.onstack = 1;
-}
-
-static ucs2_t
-_ure_peek(_ure_buffer_t *b)
-{
- if (b == 0 || b->stack.slist_used == 0)
- return _URE_NOOP;
-
- return b->stack.slistb->stack.slist_used - 1;
-}
-
-static ucs2_t
-_ure_pop(_ure_buffer_t *b)
-{
- ucs2_t v;
-
- if (b == 0 || b->stack.slist_used == 0)
- return _URE_NOOP;
-
- v = b->stack.slist--b->stack.slist_used;
- if (b->reducing)
- b->exprv.onstack = 0;
-
- return v;
-}
-
-/*************************************************************************
- *
- * Start symbol parse functions.
- *
- *************************************************************************/
-
-/*
- * Parse a comma-separated list of integers that represent character
- * properties. Combine them into a mask that is returned in the `mask'
- * variable, and return the number of characters consumed.
- */
-static unsigned long
-_ure_prop_list(ucs2_t *pp, unsigned long limit, unsigned long *mask,
- _ure_buffer_t *b)
-{
- unsigned long n, m;
- ucs2_t *sp, *ep;
-
- sp = pp;
- ep = sp + limit;
-
- for (m = n = 0; b->error == _URE_OK && sp < ep; sp++) {
- if (*sp == ',') {
- /*
- * Encountered a comma, so select the next character property flag
- * and reset the number.
- */
- m |= cclass_flagsn;
- n = 0;
- } else if (*sp >= '0' && *sp <= '9')
- /*
- * Encountered a digit, so start or continue building the cardinal
- * that represents the character property flag.
- */
- n = (n * 10) + (*sp - '0');
- else
- /*
- * Encountered something that is not part of the property list.
- * Indicate that we are done.
- */
- break;
-
- /*
- * If a property number greater than 32 occurs, then there is a
- * problem. Most likely a missing comma separator.
- */
- if (n > 32)
- b->error = _URE_INVALID_PROPERTY;
- }
-
- if (b->error == _URE_OK && n != 0)
- m |= cclass_flagsn;
-
- /*
- * Set the mask that represents the group of character properties.
- */
- *mask = m;
-
- /*
- * Return the number of characters consumed.
- */
- return sp - pp;
-}
-
-/*
- * Collect a hex number with 1 to 4 digits and return the number
- * of characters used.
- */
-static unsigned long
-_ure_hex(ucs2_t *np, unsigned long limit, ucs4_t *n)
-{
- ucs2_t i;
- ucs2_t *sp, *ep;
- ucs4_t nn;
-
- sp = np;
- ep = sp + limit;
-
- for (nn = 0, i = 0; i < 4 && sp < ep; i++, sp++) {
- if (*sp >= '0' && *sp <= '9')
- nn = (nn << 4) + (*sp - '0');
- else if (*sp >= 'A' && *sp <= 'F')
- nn = (nn << 4) + ((*sp - 'A') + 10);
- else if (*sp >= 'a' && *sp <= 'f')
- nn = (nn << 4) + ((*sp - 'a') + 10);
- else
- /*
- * Encountered something that is not a hex digit.
- */
- break;
- }
-
- /*
- * Assign the character code collected and return the number of
- * characters used.
- */
- *n = nn;
-
- return sp - np;
-}
-
-/*
- * Insert a range into a character class, removing duplicates and ordering
- * them in increasing range-start order.
- */
-static void
-_ure_add_range(_ure_ccl_t *ccl, _ure_range_t *r, _ure_buffer_t *b)
-{
- ucs2_t i;
- ucs4_t tmp;
- _ure_range_t *rp;
-
- /*
- * If the `casefold' flag is set, then make sure both endpoints of the
- * range are converted to lower case.
- */
- if (b->flags & _URE_DFA_CASEFOLD) {
- r->min_code = _ure_tolower(r->min_code);
- r->max_code = _ure_tolower(r->max_code);
- }
-
- /*
- * Swap the range endpoints if they are not in increasing order.
- */
- if (r->min_code > r->max_code) {
- tmp = r->min_code;
- r->min_code = r->max_code;
- r->max_code = tmp;
- }
-
- for (i = 0, rp = ccl->ranges;
- i < ccl->ranges_used && r->min_code < rp->min_code; i++, rp++) ;
-
- /*
- * Check for a duplicate.
- */
- if (i < ccl->ranges_used &&
- r->min_code == rp->min_code && r->max_code == rp->max_code)
- return;
-
- if (ccl->ranges_used == ccl->ranges_size) {
- if (ccl->ranges_size == 0)
- ccl->ranges = (_ure_range_t *) malloc(sizeof(_ure_range_t) << 3);
- else
- ccl->ranges = (_ure_range_t *)
- realloc((char *) ccl->ranges,
- sizeof(_ure_range_t) * (ccl->ranges_size + 8));
- ccl->ranges_size += 8;
- }
-
- rp = ccl->ranges + ccl->ranges_used;
-
- if (i < ccl->ranges_used)
- _ure_memmove((char *) (rp + 1), (char *) rp,
- sizeof(_ure_range_t) * (ccl->ranges_used - i));
-
- ccl->ranges_used++;
- rp->min_code = r->min_code;
- rp->max_code = r->max_code;
-}
-
-#define _URE_ALPHA_MASK (_URE_UPPER|_URE_LOWER|_URE_OTHERLETTER|\
-_URE_MODIFIER|_URE_TITLE|_URE_NONSPACING|_URE_COMBINING)
-#define _URE_ALNUM_MASK (_URE_ALPHA_MASK|_URE_NUMDIGIT)
-#define _URE_PUNCT_MASK (_URE_DASHPUNCT|_URE_OPENPUNCT|_URE_CLOSEPUNCT|\
-_URE_OTHERPUNCT)
-#define _URE_GRAPH_MASK (_URE_NUMDIGIT|_URE_NUMOTHER|_URE_ALPHA_MASK|\
-_URE_MATHSYM|_URE_CURRENCYSYM|_URE_OTHERSYM)
-#define _URE_PRINT_MASK (_URE_GRAPH_MASK|_URE_SPACESEP)
-#define _URE_SPACE_MASK (_URE_SPACESEP|_URE_LINESEP|_URE_PARASEP)
-
-typedef void (*_ure_cclsetup_t)(
- _ure_symtab_t *sym,
- unsigned long mask,
- _ure_buffer_t *b
-);
-
-typedef struct {
- ucs2_t key;
- unsigned int len : 8;
- unsigned int next : 8;
- _ure_cclsetup_t func;
- unsigned long mask;
-} _ure_trie_t;
-
-static void
-_ure_ccl_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- sym->props |= mask;
-}
-
-static void
-_ure_space_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- _ure_range_t range;
-
- sym->props |= mask;
-
- /*
- * Add the additional characters needed for handling isspace().
- */
- range.min_code = range.max_code = '\t';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\r';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\n';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\f';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = 0xfeff;
- _ure_add_range(&sym->sym.ccl, &range, b);
-}
-
-static void
-_ure_xdigit_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- _ure_range_t range;
-
- /*
- * Add the additional characters needed for handling isxdigit().
- */
- range.min_code = '0';
- range.max_code = '9';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = 'A';
- range.max_code = 'F';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = 'a';
- range.max_code = 'f';
- _ure_add_range(&sym->sym.ccl, &range, b);
-}
-
-static const _ure_trie_t cclass_trie = {
- {0x003a, 1, 1, 0, 0},
- {0x0061, 9, 10, 0, 0},
- {0x0063, 8, 19, 0, 0},
- {0x0064, 7, 24, 0, 0},
- {0x0067, 6, 29, 0, 0},
- {0x006c, 5, 34, 0, 0},
- {0x0070, 4, 39, 0, 0},
- {0x0073, 3, 49, 0, 0},
- {0x0075, 2, 54, 0, 0},
- {0x0078, 1, 59, 0, 0},
- {0x006c, 1, 11, 0, 0},
- {0x006e, 2, 13, 0, 0},
- {0x0070, 1, 16, 0, 0},
- {0x0075, 1, 14, 0, 0},
- {0x006d, 1, 15, 0, 0},
- {0x003a, 1, 16, _ure_ccl_setup, _URE_ALNUM_MASK},
- {0x0068, 1, 17, 0, 0},
- {0x0061, 1, 18, 0, 0},
- {0x003a, 1, 19, _ure_ccl_setup, _URE_ALPHA_MASK},
- {0x006e, 1, 20, 0, 0},
- {0x0074, 1, 21, 0, 0},
- {0x0072, 1, 22, 0, 0},
- {0x006c, 1, 23, 0, 0},
- {0x003a, 1, 24, _ure_ccl_setup, _URE_CNTRL},
- {0x0069, 1, 25, 0, 0},
- {0x0067, 1, 26, 0, 0},
- {0x0069, 1, 27, 0, 0},
- {0x0074, 1, 28, 0, 0},
- {0x003a, 1, 29, _ure_ccl_setup, _URE_NUMDIGIT},
- {0x0072, 1, 30, 0, 0},
- {0x0061, 1, 31, 0, 0},
- {0x0070, 1, 32, 0, 0},
- {0x0068, 1, 33, 0, 0},
- {0x003a, 1, 34, _ure_ccl_setup, _URE_GRAPH_MASK},
- {0x006f, 1, 35, 0, 0},
- {0x0077, 1, 36, 0, 0},
- {0x0065, 1, 37, 0, 0},
- {0x0072, 1, 38, 0, 0},
- {0x003a, 1, 39, _ure_ccl_setup, _URE_LOWER},
- {0x0072, 2, 41, 0, 0},
- {0x0075, 1, 45, 0, 0},
- {0x0069, 1, 42, 0, 0},
- {0x006e, 1, 43, 0, 0},
- {0x0074, 1, 44, 0, 0},
- {0x003a, 1, 45, _ure_ccl_setup, _URE_PRINT_MASK},
- {0x006e, 1, 46, 0, 0},
- {0x0063, 1, 47, 0, 0},
- {0x0074, 1, 48, 0, 0},
- {0x003a, 1, 49, _ure_ccl_setup, _URE_PUNCT_MASK},
- {0x0070, 1, 50, 0, 0},
- {0x0061, 1, 51, 0, 0},
- {0x0063, 1, 52, 0, 0},
- {0x0065, 1, 53, 0, 0},
- {0x003a, 1, 54, _ure_space_setup, _URE_SPACE_MASK},
- {0x0070, 1, 55, 0, 0},
- {0x0070, 1, 56, 0, 0},
- {0x0065, 1, 57, 0, 0},
- {0x0072, 1, 58, 0, 0},
- {0x003a, 1, 59, _ure_ccl_setup, _URE_UPPER},
- {0x0064, 1, 60, 0, 0},
- {0x0069, 1, 61, 0, 0},
- {0x0067, 1, 62, 0, 0},
- {0x0069, 1, 63, 0, 0},
- {0x0074, 1, 64, 0, 0},
- {0x003a, 1, 65, _ure_xdigit_setup, 0},
-};
-
-/*
- * Probe for one of the POSIX colon delimited character classes in the static
- * trie.
- */
-static unsigned long
-_ure_posix_ccl(ucs2_t *cp, unsigned long limit, _ure_symtab_t *sym,
- _ure_buffer_t *b)
-{
- int i;
- unsigned long n;
- const _ure_trie_t *tp;
- ucs2_t *sp, *ep;
-
- /*
- * If the number of characters left is less than 7, then this cannot be
- * interpreted as one of the colon delimited classes.
- */
- if (limit < 7)
- return 0;
-
- sp = cp;
- ep = sp + limit;
- tp = cclass_trie;
- for (i = 0; sp < ep && i < 8; i++, sp++) {
- n = tp->len;
-
- for (; n > 0 && tp->key != *sp; tp++, n--) ;
-
- if (n == 0)
- return 0;
-
- if (*sp == ':' && (i == 6 || i == 7)) {
- sp++;
- break;
- }
- if (sp + 1 < ep)
- tp = cclass_trie + tp->next;
- }
- if (tp->func == 0)
- return 0;
-
- (*tp->func)(sym, tp->mask, b);
-
- return sp - cp;
-}
-
-/*
- * Construct a list of ranges and return the number of characters consumed.
- */
-static unsigned long
-_ure_cclass(ucs2_t *cp, unsigned long limit, _ure_symtab_t *symp,
- _ure_buffer_t *b)
-{
- int range_end;
- unsigned long n;
- ucs2_t *sp, *ep;
- ucs4_t c, last;
- _ure_ccl_t *cclp;
- _ure_range_t range;
-
- sp = cp;
- ep = sp + limit;
-
- if (*sp == '^') {
- symp->type = _URE_NCCLASS;
- sp++;
- } else
- symp->type = _URE_CCLASS;
-
- for (last = 0, range_end = 0;
- b->error == _URE_OK && sp < ep && *sp != ''; ) {
- c = *sp++;
- if (c == '\\') {
- if (sp == ep) {
- /*
- * The EOS was encountered when expecting the reverse solidus
- * to be followed by the character it is escaping. Set an
- * error code and return the number of characters consumed up
- * to this point.
- */
- b->error = _URE_UNEXPECTED_EOS;
- return sp - cp;
- }
-
- c = *sp++;
- switch (c) {
- case 'a':
- c = 0x07;
- break;
- case 'b':
- c = 0x08;
- break;
- case 'f':
- c = 0x0c;
- break;
- case 'n':
- c = 0x0a;
- break;
- case 'r':
- c = 0x0d;
- break;
- case 't':
- c = 0x09;
- break;
- case 'v':
- c = 0x0b;
- break;
- case 'p':
- case 'P':
- sp += _ure_prop_list(sp, ep - sp, &symp->props, b);
- /*
- * Invert the bit mask of the properties if this is a negated
- * character class or if 'P' is used to specify a list of
- * character properties that should *not* match in a
- * character class.
- */
- if (c == 'P')
- symp->props = ~symp->props;
- continue;
- break;
- case 'x':
- case 'X':
- case 'u':
- case 'U':
- if (sp < ep &&
- ((*sp >= '0' && *sp <= '9') ||
- (*sp >= 'A' && *sp <= 'F') ||
- (*sp >= 'a' && *sp <= 'f')))
- sp += _ure_hex(sp, ep - sp, &c);
- }
- } else if (c == ':') {
- /*
- * Probe for a POSIX colon delimited character class.
- */
- sp--;
- if ((n = _ure_posix_ccl(sp, ep - sp, symp, b)) == 0)
- sp++;
- else {
- sp += n;
- continue;
- }
- }
-
- cclp = &symp->sym.ccl;
-
- /*
- * Check to see if the current character is a low surrogate that needs
- * to be combined with a preceding high surrogate.
- */
- if (last != 0) {
- if (c >= 0xdc00 && c <= 0xdfff)
- /*
- * Construct the UTF16 character code.
- */
- c = 0x10000 + (((last & 0x03ff) << 10) | (c & 0x03ff));
- else {
- /*
- * Add the isolated high surrogate to the range.
- */
- if (range_end == 1)
- range.max_code = last & 0xffff;
- else
- range.min_code = range.max_code = last & 0xffff;
-
- _ure_add_range(cclp, &range, b);
- range_end = 0;
- }
- }
-
- /*
- * Clear the last character code.
- */
- last = 0;
-
- /*
- * This slightly awkward code handles the different cases needed to
- * construct a range.
- */
- if (c >= 0xd800 && c <= 0xdbff) {
- /*
- * If the high surrogate is followed by a range indicator, simply
- * add it as the range start. Otherwise, save it in case the next
- * character is a low surrogate.
- */
- if (*sp == '-') {
- sp++;
- range.min_code = c;
- range_end = 1;
- } else
- last = c;
- } else if (range_end == 1) {
- range.max_code = c;
- _ure_add_range(cclp, &range, b);
- range_end = 0;
- } else {
- range.min_code = range.max_code = c;
- if (*sp == '-') {
- sp++;
- range_end = 1;
- } else
- _ure_add_range(cclp, &range, b);
- }
- }
-
- if (sp < ep && *sp == '')
- sp++;
- else
- /*
- * The parse was not terminated by the character class close symbol
- * (''), so set an error code.
- */
- b->error = _URE_CCLASS_OPEN;
-
- return sp - cp;
-}
-
-/*
- * Probe for a low surrogate hex code.
- */
-static unsigned long
-_ure_probe_ls(ucs2_t *ls, unsigned long limit, ucs4_t *c)
-{
- ucs4_t i, code;
- ucs2_t *sp, *ep;
-
- for (i = code = 0, sp = ls, ep = sp + limit; i < 4 && sp < ep; sp++) {
- if (*sp >= '0' && *sp <= '9')
- code = (code << 4) + (*sp - '0');
- else if (*sp >= 'A' && *sp <= 'F')
- code = (code << 4) + ((*sp - 'A') + 10);
- else if (*sp >= 'a' && *sp <= 'f')
- code = (code << 4) + ((*sp - 'a') + 10);
- else
- break;
- }
-
- *c = code;
- return (0xdc00 <= code && code <= 0xdfff) ? sp - ls : 0;
-}
-
-static unsigned long
-_ure_compile_symbol(ucs2_t *sym, unsigned long limit, _ure_symtab_t *symp,
- _ure_buffer_t *b)
-{
- ucs4_t c;
- ucs2_t *sp, *ep;
-
- sp = sym;
- ep = sym + limit;
-
- if ((c = *sp++) == '\\') {
-
- if (sp == ep) {
- /*
- * The EOS was encountered when expecting the reverse solidus to
- * be followed by the character it is escaping. Set an error code
- * and return the number of characters consumed up to this point.
- */
- b->error = _URE_UNEXPECTED_EOS;
- return sp - sym;
- }
-
- c = *sp++;
- switch (c) {
- case 'p':
- case 'P':
- symp->type = (c == 'p') ? _URE_CCLASS : _URE_NCCLASS;
- sp += _ure_prop_list(sp, ep - sp, &symp->props, b);
- break;
- case 'a':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x07;
- break;
- case 'b':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x08;
- break;
- case 'f':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0c;
- break;
- case 'n':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0a;
- break;
- case 'r':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0d;
- break;
- case 't':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x09;
- break;
- case 'v':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0b;
- break;
- case 'x':
- case 'X':
- case 'u':
- case 'U':
- /*
- * Collect between 1 and 4 digits representing a UCS2 code. Fall
- * through to the next case.
- */
- if (sp < ep &&
- ((*sp >= '0' && *sp <= '9') ||
- (*sp >= 'A' && *sp <= 'F') ||
- (*sp >= 'a' && *sp <= 'f')))
- sp += _ure_hex(sp, ep - sp, &c);
- /* FALLTHROUGH */
- default:
- /*
- * Simply add an escaped character here.
- */
- symp->type = _URE_CHAR;
- symp->sym.chr = c;
- }
- } else if (c == '^' || c == '$')
- /*
- * Handle the BOL and EOL anchors. This actually consists simply of
- * setting a flag that indicates that the user supplied anchor match
- * function should be called. This needs to be done instead of simply
- * matching line/paragraph separators because beginning-of-text and
- * end-of-text tests are needed as well.
- */
- symp->type = (c == '^') ? _URE_BOL_ANCHOR : _URE_EOL_ANCHOR;
- else if (c == '')
- /*
- * Construct a character class.
- */
- sp += _ure_cclass(sp, ep - sp, symp, b);
- else if (c == '.')
- symp->type = _URE_ANY_CHAR;
- else {
- symp->type = _URE_CHAR;
- symp->sym.chr = c;
- }
-
- /*
- * If the symbol type happens to be a character and is a high surrogate,
- * then probe forward to see if it is followed by a low surrogate that
- * needs to be added.
- */
- if (sp < ep && symp->type == _URE_CHAR &&
- 0xd800 <= symp->sym.chr && symp->sym.chr <= 0xdbff) {
-
- if (0xdc00 <= *sp && *sp <= 0xdfff) {
- symp->sym.chr = 0x10000 + (((symp->sym.chr & 0x03ff) << 10) |
- (*sp & 0x03ff));
- sp++;
- } else if (*sp == '\\' && (*(sp + 1) == 'x' || *(sp + 1) == 'X' ||
- *(sp + 1) == 'u' || *(sp + 1) == 'U')) {
- sp += _ure_probe_ls(sp + 2, ep - (sp + 2), &c);
- if (0xdc00 <= c && c <= 0xdfff) {
- /*
- * Take into account the \xu in front of the hex code.
- */
- sp += 2;
- symp->sym.chr = 0x10000 + (((symp->sym.chr & 0x03ff) << 10) |
- (c & 0x03ff));
- }
- }
- }
-
- /*
- * Last, make sure any _URE_CHAR type symbols are changed to lower case if
- * the `casefold' flag is set.
- */
- if ((b->flags & _URE_DFA_CASEFOLD) && symp->type == _URE_CHAR)
- symp->sym.chr = _ure_tolower(symp->sym.chr);
-
- /*
- * If the symbol constructed is anything other than one of the anchors,
- * make sure the _URE_DFA_BLANKLINE flag is removed.
- */
- if (symp->type != _URE_BOL_ANCHOR && symp->type != _URE_EOL_ANCHOR)
- b->flags &= ~_URE_DFA_BLANKLINE;
-
- /*
- * Return the number of characters consumed.
- */
- return sp - sym;
-}
-
-static int
-_ure_sym_neq(_ure_symtab_t *a, _ure_symtab_t *b)
-{
- if (a->type != b->type || a->mods != b->mods || a->props != b->props)
- return 1;
-
- if (a->type == _URE_CCLASS || a->type == _URE_NCCLASS) {
- if (a->sym.ccl.ranges_used != b->sym.ccl.ranges_used)
- return 1;
- if (a->sym.ccl.ranges_used > 0 &&
- memcmp((char *) a->sym.ccl.ranges, (char *) b->sym.ccl.ranges,
- sizeof(_ure_range_t) * a->sym.ccl.ranges_used) != 0)
- return 1;
- } else if (a->type == _URE_CHAR && a->sym.chr != b->sym.chr)
- return 1;
- return 0;
-}
-
-/*
- * Construct a symbol, but only keep unique symbols.
- */
-static ucs2_t
-_ure_make_symbol(ucs2_t *sym, unsigned long limit, unsigned long *consumed,
- _ure_buffer_t *b)
-{
- ucs2_t i;
- _ure_symtab_t *sp, symbol;
-
- /*
- * Build the next symbol so we can test to see if it is already in the
- * symbol table.
- */
- (void) memset((char *) &symbol, '\0', sizeof(_ure_symtab_t));
- *consumed = _ure_compile_symbol(sym, limit, &symbol, b);
-
- /*
- * Check to see if the symbol exists.
- */
- for (i = 0, sp = b->symtab;
- i < b->symtab_used && _ure_sym_neq(&symbol, sp); i++, sp++) ;
-
- if (i < b->symtab_used) {
- /*
- * Free up any ranges used for the symbol.
- */
- if ((symbol.type == _URE_CCLASS || symbol.type == _URE_NCCLASS) &&
- symbol.sym.ccl.ranges_size > 0)
- free((char *) symbol.sym.ccl.ranges);
-
- return b->symtabi.id;
- }
-
- /*
- * Need to add the new symbol.
- */
- if (b->symtab_used == b->symtab_size) {
- if (b->symtab_size == 0)
- b->symtab = (_ure_symtab_t *) malloc(sizeof(_ure_symtab_t) << 3);
- else
- b->symtab = (_ure_symtab_t *)
- realloc((char *) b->symtab,
- sizeof(_ure_symtab_t) * (b->symtab_size + 8));
- sp = b->symtab + b->symtab_size;
- (void) memset((char *) sp, '\0', sizeof(_ure_symtab_t) << 3);
- b->symtab_size += 8;
- }
-
- symbol.id = b->symtab_used++;
- (void) memcpy((char *) &b->symtabsymbol.id, (char *) &symbol,
- sizeof(_ure_symtab_t));
-
- return symbol.id;
-}
-
-/*************************************************************************
- *
- * End symbol parse functions.
- *
- *************************************************************************/
-
-static ucs2_t
-_ure_make_expr(ucs2_t type, ucs2_t lhs, ucs2_t rhs, _ure_buffer_t *b)
-{
- ucs2_t i;
-
- if (b == 0)
- return _URE_NOOP;
-
- /*
- * Determine if the expression already exists or not.
- */
- for (i = 0; i < b->expr_used; i++) {
- if (b->expri.type == type && b->expri.lhs == lhs &&
- b->expri.rhs == rhs)
- break;
- }
- if (i < b->expr_used)
- return i;
-
- /*
- * Need to add a new expression.
- */
- if (b->expr_used == b->expr_size) {
- if (b->expr_size == 0)
- b->expr = (_ure_elt_t *) malloc(sizeof(_ure_elt_t) << 3);
- else
- b->expr = (_ure_elt_t *)
- realloc((char *) b->expr,
- sizeof(_ure_elt_t) * (b->expr_size + 8));
- b->expr_size += 8;
- }
-
- b->exprb->expr_used.onstack = 0;
- b->exprb->expr_used.type = type;
- b->exprb->expr_used.lhs = lhs;
- b->exprb->expr_used.rhs = rhs;
-
- return b->expr_used++;
-}
-
-static unsigned char spmap = {
- 0x00, 0x00, 0x00, 0x00, 0x00, 0x0f, 0x00, 0x80, 0x00, 0x00, 0x00, 0x00,
- 0x00, 0x00, 0x00, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
- 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
-};
-
-#define _ure_isspecial(cc) ((cc) > 0x20 && (cc) < 0x7f && \
- (spmap(cc) >> 3 & (1 << ((cc) & 7))))
-
-/*
- * Convert the regular expression into an NFA in a form that will be easy to
- * reduce to a DFA. The starting state for the reduction will be returned.
- */
-static ucs2_t
-_ure_re2nfa(ucs2_t *re, unsigned long relen, _ure_buffer_t *b)
-{
- ucs2_t c, state, top, sym, *sp, *ep;
- unsigned long used;
-
- state = _URE_NOOP;
-
- sp = re;
- ep = sp + relen;
- while (b->error == _URE_OK && sp < ep) {
- c = *sp++;
- switch (c) {
- case '(':
- _ure_push(_URE_PAREN, b);
- break;
- case ')':
- /*
- * Check for the case of too many close parentheses.
- */
- if (_ure_peek(b) == _URE_NOOP) {
- b->error = _URE_UNBALANCED_GROUP;
- break;
- }
-
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- /*
- * Remove the _URE_PAREN off the stack.
- */
- (void) _ure_pop(b);
- break;
- case '*':
- state = _ure_make_expr(_URE_STAR, state, _URE_NOOP, b);
- break;
- case '+':
- state = _ure_make_expr(_URE_PLUS, state, _URE_NOOP, b);
- break;
- case '?':
- state = _ure_make_expr(_URE_QUEST, state, _URE_NOOP, b);
- break;
- case '|':
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- _ure_push(state, b);
- _ure_push(_URE_OR, b);
- break;
- default:
- sp--;
- sym = _ure_make_symbol(sp, ep - sp, &used, b);
- sp += used;
- state = _ure_make_expr(_URE_SYMBOL, sym, _URE_NOOP, b);
- break;
- }
-
- if (c != '(' && c != '|' && sp < ep &&
- (!_ure_isspecial(*sp) || *sp == '(')) {
- _ure_push(state, b);
- _ure_push(_URE_AND, b);
- }
- }
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- if (b->stack.slist_used > 0)
- b->error = _URE_UNBALANCED_GROUP;
-
- return (b->error == _URE_OK) ? state : _URE_NOOP;
-}
-
-static void
-_ure_add_symstate(ucs2_t sym, ucs2_t state, _ure_buffer_t *b)
-{
- ucs2_t i, *stp;
- _ure_symtab_t *sp;
-
- /*
- * Locate the symbol in the symbol table so the state can be added.
- * If the symbol doesn't exist, then a real problem exists.
- */
- for (i = 0, sp = b->symtab; i < b->symtab_used && sym != sp->id;
- i++, sp++) ;
-
- /*
- * Now find out if the state exists in the symbol's state list.
- */
- for (i = 0, stp = sp->states.slist;
- i < sp->states.slist_used && state > *stp; i++, stp++) ;
-
- if (i == sp->states.slist_used || state < *stp) {
- /*
- * Need to add the state in order.
- */
- if (sp->states.slist_used == sp->states.slist_size) {
- if (sp->states.slist_size == 0)
- sp->states.slist = (ucs2_t *) malloc(sizeof(ucs2_t) << 3);
- else
- sp->states.slist = (ucs2_t *)
- realloc((char *) sp->states.slist,
- sizeof(ucs2_t) * (sp->states.slist_size + 8));
- sp->states.slist_size += 8;
- }
- if (i < sp->states.slist_used)
- (void) _ure_memmove((char *) (sp->states.slist + i + 1),
- (char *) (sp->states.slist + i),
- sizeof(ucs2_t) * (sp->states.slist_used - i));
- sp->states.slisti = state;
- sp->states.slist_used++;
- }
-}
-
-static ucs2_t
-_ure_add_state(ucs2_t nstates, ucs2_t *states, _ure_buffer_t *b)
-{
- ucs2_t i;
- _ure_state_t *sp;
-
- for (i = 0, sp = b->states.states; i < b->states.states_used; i++, sp++) {
- if (sp->st.slist_used == nstates &&
- memcmp((char *) states, (char *) sp->st.slist,
- sizeof(ucs2_t) * nstates) == 0)
- break;
- }
-
- if (i == b->states.states_used) {
- /*
- * Need to add a new DFA state (set of NFA states).
- */
- if (b->states.states_used == b->states.states_size) {
- if (b->states.states_size == 0)
- b->states.states = (_ure_state_t *)
- malloc(sizeof(_ure_state_t) << 3);
- else
- b->states.states = (_ure_state_t *)
- realloc((char *) b->states.states,
- sizeof(_ure_state_t) * (b->states.states_size + 8));
- sp = b->states.states + b->states.states_size;
- (void) memset((char *) sp, '\0', sizeof(_ure_state_t) << 3);
- b->states.states_size += 8;
- }
-
- sp = b->states.states + b->states.states_used++;
- sp->id = i;
-
- if (sp->st.slist_used + nstates > sp->st.slist_size) {
- if (sp->st.slist_size == 0)
- sp->st.slist = (ucs2_t *)
- malloc(sizeof(ucs2_t) * (sp->st.slist_used + nstates));
- else
- sp->st.slist = (ucs2_t *)
- realloc((char *) sp->st.slist,
- sizeof(ucs2_t) * (sp->st.slist_used + nstates));
- sp->st.slist_size = sp->st.slist_used + nstates;
- }
- sp->st.slist_used = nstates;
- (void) memcpy((char *) sp->st.slist, (char *) states,
- sizeof(ucs2_t) * nstates);
- }
-
- /*
- * Return the ID of the DFA state representing a group of NFA states.
- */
- return i;
-}
-
-static void
-_ure_reduce(ucs2_t start, _ure_buffer_t *b)
-{
- ucs2_t i, j, state, eval, syms, rhs;
- ucs2_t s1, s2, ns1, ns2;
- _ure_state_t *sp;
- _ure_symtab_t *smp;
-
- b->reducing = 1;
-
- /*
- * Add the starting state for the reduction.
- */
- _ure_add_state(1, &start, b);
-
- /*
- * Process each set of NFA states that get created.
- */
- for (i = 0; i < b->states.states_used; i++) {
- sp = b->states.states + i;
-
- /*
- * Push the current states on the stack.
- */
- for (j = 0; j < sp->st.slist_used; j++)
- _ure_push(sp->st.slistj, b);
-
- /*
- * Reduce the NFA states.
- */
- for (j = sp->accepting = syms = 0; j < b->stack.slist_used; j++) {
- state = b->stack.slistj;
- eval = 1;
-
- /*
- * This inner loop is the iterative equivalent of recursively
- * reducing subexpressions generated as a result of a reduction.
- */
- while (eval) {
- switch (b->exprstate.type) {
- case _URE_SYMBOL:
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- _ure_add_symstate(b->exprstate.lhs, ns1, b);
- syms++;
- eval = 0;
- break;
- case _URE_ONE:
- sp->accepting = 1;
- eval = 0;
- break;
- case _URE_QUEST:
- s1 = b->exprstate.lhs;
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- state = _ure_make_expr(_URE_OR, ns1, s1, b);
- break;
- case _URE_PLUS:
- s1 = b->exprstate.lhs;
- ns1 = _ure_make_expr(_URE_STAR, s1, _URE_NOOP, b);
- state = _ure_make_expr(_URE_AND, s1, ns1, b);
- break;
- case _URE_STAR:
- s1 = b->exprstate.lhs;
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- ns2 = _ure_make_expr(_URE_PLUS, s1, _URE_NOOP, b);
- state = _ure_make_expr(_URE_OR, ns1, ns2, b);
- break;
- case _URE_OR:
- s1 = b->exprstate.lhs;
- s2 = b->exprstate.rhs;
- _ure_push(s1, b);
- _ure_push(s2, b);
- eval = 0;
- break;
- case _URE_AND:
- s1 = b->exprstate.lhs;
- s2 = b->exprstate.rhs;
- switch (b->exprs1.type) {
- case _URE_SYMBOL:
- _ure_add_symstate(b->exprs1.lhs, s2, b);
- syms++;
- eval = 0;
- break;
- case _URE_ONE:
- state = s2;
- break;
- case _URE_QUEST:
- ns1 = b->exprs1.lhs;
- ns2 = _ure_make_expr(_URE_AND, ns1, s2, b);
- state = _ure_make_expr(_URE_OR, s2, ns2, b);
- break;
- case _URE_PLUS:
- ns1 = b->exprs1.lhs;
- ns2 = _ure_make_expr(_URE_OR, s2, state, b);
- state = _ure_make_expr(_URE_AND, ns1, ns2, b);
- break;
- case _URE_STAR:
- ns1 = b->exprs1.lhs;
- ns2 = _ure_make_expr(_URE_AND, ns1, state, b);
- state = _ure_make_expr(_URE_OR, s2, ns2, b);
- break;
- case _URE_OR:
- ns1 = b->exprs1.lhs;
- ns2 = b->exprs1.rhs;
- ns1 = _ure_make_expr(_URE_AND, ns1, s2, b);
- ns2 = _ure_make_expr(_URE_AND, ns2, s2, b);
- state = _ure_make_expr(_URE_OR, ns1, ns2, b);
- break;
- case _URE_AND:
- ns1 = b->exprs1.lhs;
- ns2 = b->exprs1.rhs;
- ns2 = _ure_make_expr(_URE_AND, ns2, s2, b);
- state = _ure_make_expr(_URE_AND, ns1, ns2, b);
- break;
- }
- }
- }
- }
-
- /*
- * Clear the state stack.
- */
- while (_ure_pop(b) != _URE_NOOP) ;
-
- /*
- * Reset the state pointer because the reduction may have moved it
- * during a reallocation.
- */
- sp = b->states.states + i;
-
- /*
- * Generate the DFA states for the symbols collected during the
- * current reduction.
- */
- if (sp->trans_used + syms > sp->trans_size) {
- if (sp->trans_size == 0)
- sp->trans = (_ure_elt_t *)
- malloc(sizeof(_ure_elt_t) * (sp->trans_used + syms));
- else
- sp->trans = (_ure_elt_t *)
- realloc((char *) sp->trans,
- sizeof(_ure_elt_t) * (sp->trans_used + syms));
- sp->trans_size = sp->trans_used + syms;
- }
-
- /*
- * Go through the symbol table and generate the DFA state transitions
- * for each symbol that has collected NFA states.
- */
- for (j = syms = 0, smp = b->symtab; j < b->symtab_used; j++, smp++) {
- sp = b->states.states + i;
-
- if (smp->states.slist_used > 0) {
- sp->transsyms.lhs = smp->id;
- rhs = _ure_add_state(smp->states.slist_used,
- smp->states.slist, b);
- /*
- * Reset the state pointer in case the reallocation moves it
- * in memory.
- */
- sp = b->states.states + i;
- sp->transsyms.rhs = rhs;
-
- smp->states.slist_used = 0;
- syms++;
- }
- }
-
- /*
- * Set the number of transitions actually used.
- */
- sp->trans_used = syms;
- }
- b->reducing = 0;
-}
-
-static void
-_ure_add_equiv(ucs2_t l, ucs2_t r, _ure_buffer_t *b)
-{
- ucs2_t tmp;
-
- l = b->states.statesl.id;
- r = b->states.statesr.id;
-
- if (l == r)
- return;
-
- if (l > r) {
- tmp = l;
- l = r;
- r = tmp;
- }
-
- /*
- * Check to see if the equivalence pair already exists.
- */
- for (tmp = 0; tmp < b->equiv_used &&
- (b->equivtmp.l != l || b->equivtmp.r != r);
- tmp++) ;
-
- if (tmp < b->equiv_used)
- return;
-
- if (b->equiv_used == b->equiv_size) {
- if (b->equiv_size == 0)
- b->equiv = (_ure_equiv_t *) malloc(sizeof(_ure_equiv_t) << 3);
- else
- b->equiv = (_ure_equiv_t *) realloc((char *) b->equiv,
- sizeof(_ure_equiv_t) *
- (b->equiv_size + 8));
- b->equiv_size += 8;
- }
- b->equivb->equiv_used.l = l;
- b->equivb->equiv_used.r = r;
- b->equiv_used++;
-}
-
-/*
- * Merge the DFA states that are equivalent.
- */
-static void
-_ure_merge_equiv(_ure_buffer_t *b)
-{
- ucs2_t i, j, k, eq, done;
- _ure_state_t *sp1, *sp2, *ls, *rs;
-
- for (i = 0; i < b->states.states_used; i++) {
- sp1 = b->states.states + i;
- if (sp1->id != i)
- continue;
- for (j = 0; j < i; j++) {
- sp2 = b->states.states + j;
- if (sp2->id != j)
- continue;
- b->equiv_used = 0;
- _ure_add_equiv(i, j, b);
- for (eq = 0, done = 0; eq < b->equiv_used; eq++) {
- ls = b->states.states + b->equiveq.l;
- rs = b->states.states + b->equiveq.r;
- if (ls->accepting != rs->accepting ||
- ls->trans_used != rs->trans_used) {
- done = 1;
- break;
- }
- for (k = 0; k < ls->trans_used &&
- ls->transk.lhs == rs->transk.lhs; k++) ;
- if (k < ls->trans_used) {
- done = 1;
- break;
- }
-
- for (k = 0; k < ls->trans_used; k++)
- _ure_add_equiv(ls->transk.rhs, rs->transk.rhs, b);
- }
- if (done == 0)
- break;
- }
- for (eq = 0; j equiv_used; eq++)
- b->states.statesb->equiveq.r.id =
- b->states.statesb->equiveq.l.id;
- }
-
- /*
- * Renumber the states appropriately.
- */
- for (i = eq = 0, sp1 = b->states.states; i < b->states.states_used;
- sp1++, i++)
- sp1->id = (sp1->id == i) ? eq++ : b->states.statessp1->id.id;
-}
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-ure_buffer_t
-ure_buffer_create(void)
-{
- ure_buffer_t b;
-
- b = (ure_buffer_t) calloc(1, sizeof(_ure_buffer_t));
-
- return b;
-}
-
-void
-ure_buffer_free(ure_buffer_t buf)
-{
- unsigned long i;
-
- if (buf == 0)
- return;
-
- if (buf->stack.slist_size > 0)
- free((char *) buf->stack.slist);
-
- if (buf->expr_size > 0)
- free((char *) buf->expr);
-
- for (i = 0; i < buf->symtab_size; i++) {
- if (buf->symtabi.states.slist_size > 0)
- free((char *) buf->symtabi.states.slist);
- }
-
- if (buf->symtab_size > 0)
- free((char *) buf->symtab);
-
- for (i = 0; i < buf->states.states_size; i++) {
- if (buf->states.statesi.trans_size > 0)
- free((char *) buf->states.statesi.trans);
- if (buf->states.statesi.st.slist_size > 0)
- free((char *) buf->states.statesi.st.slist);
- }
-
- if (buf->states.states_size > 0)
- free((char *) buf->states.states);
-
- if (buf->equiv_size > 0)
- free((char *) buf->equiv);
-
- free((char *) buf);
-}
-
-ure_dfa_t
-ure_compile(ucs2_t *re, unsigned long relen, int casefold, ure_buffer_t buf)
-{
- ucs2_t i, j, state;
- _ure_state_t *sp;
- _ure_dstate_t *dsp;
- _ure_trans_t *tp;
- ure_dfa_t dfa;
-
- if (re == 0 || *re == 0 || relen == 0 || buf == 0)
- return 0;
-
- /*
- * Reset the various fields of the compilation buffer. Default the flags
- * to indicate the presense of the "^$" pattern. If any other pattern
- * occurs, then this flag will be removed. This is done to catch this
- * special pattern and handle it specially when matching.
- */
- buf->flags = _URE_DFA_BLANKLINE | ((casefold) ? _URE_DFA_CASEFOLD : 0);
- buf->reducing = 0;
- buf->stack.slist_used = 0;
- buf->expr_used = 0;
-
- for (i = 0; i < buf->symtab_used; i++)
- buf->symtabi.states.slist_used = 0;
- buf->symtab_used = 0;
-
- for (i = 0; i < buf->states.states_used; i++) {
- buf->states.statesi.st.slist_used = 0;
- buf->states.statesi.trans_used = 0;
- }
- buf->states.states_used = 0;
-
- /*
- * Construct the NFA. If this stage returns a 0, then an error occurred or
- * an empty expression was passed.
- */
- if ((state = _ure_re2nfa(re, relen, buf)) == _URE_NOOP)
- return 0;
-
- /*
- * Do the expression reduction to get the initial DFA.
- */
- _ure_reduce(state, buf);
-
- /*
- * Merge all the equivalent DFA states.
- */
- _ure_merge_equiv(buf);
-
- /*
- * Construct the minimal DFA.
- */
- dfa = (ure_dfa_t) malloc(sizeof(_ure_dfa_t));
- (void) memset((char *) dfa, '\0', sizeof(_ure_dfa_t));
-
- dfa->flags = buf->flags & (_URE_DFA_CASEFOLD|_URE_DFA_BLANKLINE);
-
- /*
- * Free up the NFA state groups and transfer the symbols from the buffer
- * to the DFA.
- */
- for (i = 0; i < buf->symtab_size; i++) {
- if (buf->symtabi.states.slist_size > 0)
- free((char *) buf->symtabi.states.slist);
- }
- dfa->syms = buf->symtab;
- dfa->nsyms = buf->symtab_used;
-
- buf->symtab_used = buf->symtab_size = 0;
-
- /*
- * Collect the total number of states and transitions needed for the DFA.
- */
- for (i = state = 0, sp = buf->states.states; i < buf->states.states_used;
- i++, sp++) {
- if (sp->id == state) {
- dfa->nstates++;
- dfa->ntrans += sp->trans_used;
- state++;
- }
- }
-
- /*
- * Allocate enough space for the states and transitions.
- */
- dfa->states = (_ure_dstate_t *) malloc(sizeof(_ure_dstate_t) *
- dfa->nstates);
- dfa->trans = (_ure_trans_t *) malloc(sizeof(_ure_trans_t) * dfa->ntrans);
-
- /*
- * Actually transfer the DFA states from the buffer.
- */
- dsp = dfa->states;
- tp = dfa->trans;
- for (i = state = 0, sp = buf->states.states; i < buf->states.states_used;
- i++, sp++) {
- if (sp->id == state) {
- dsp->trans = tp;
- dsp->ntrans = sp->trans_used;
- dsp->accepting = sp->accepting;
-
- /*
- * Add the transitions for the state.
- */
- for (j = 0; j < dsp->ntrans; j++, tp++) {
- tp->symbol = sp->transj.lhs;
- tp->next_state = buf->states.statessp->transj.rhs.id;
- }
-
- dsp++;
- state++;
- }
- }
-
- return dfa;
-}
-
-void
-ure_dfa_free(ure_dfa_t dfa)
-{
- ucs2_t i;
-
- if (dfa == 0)
- return;
-
- for (i = 0; i < dfa->nsyms; i++) {
- if ((dfa->symsi.type == _URE_CCLASS ||
- dfa->symsi.type == _URE_NCCLASS) &&
- dfa->symsi.sym.ccl.ranges_size > 0)
- free((char *) dfa->symsi.sym.ccl.ranges);
- }
- if (dfa->nsyms > 0)
- free((char *) dfa->syms);
-
- if (dfa->nstates > 0)
- free((char *) dfa->states);
- if (dfa->ntrans > 0)
- free((char *) dfa->trans);
- free((char *) dfa);
-}
-
-void
-ure_write_dfa(ure_dfa_t dfa, FILE *out)
-{
- ucs2_t i, j, k, h, l;
- _ure_dstate_t *sp;
- _ure_symtab_t *sym;
- _ure_range_t *rp;
-
- if (dfa == 0 || out == 0)
- return;
-
- /*
- * Write all the different character classes.
- */
- for (i = 0, sym = dfa->syms; i < dfa->nsyms; i++, sym++) {
- if (sym->type == _URE_CCLASS || sym->type == _URE_NCCLASS) {
- fprintf(out, "C%hd = ", sym->id);
- if (sym->sym.ccl.ranges_used > 0) {
- putc('', out);
- if (sym->type == _URE_NCCLASS)
- putc('^', out);
- }
- if (sym->props != 0) {
- if (sym->type == _URE_NCCLASS)
- fprintf(out, "\\P");
- else
- fprintf(out, "\\p");
- for (k = h = 0; k < 32; k++) {
- if (sym->props & (1 << k)) {
- if (h != 0)
- putc(',', out);
- fprintf(out, "%d", k + 1);
- h = 1;
- }
- }
- }
- /*
- * Dump the ranges.
- */
- for (k = 0, rp = sym->sym.ccl.ranges;
- k < sym->sym.ccl.ranges_used; k++, rp++) {
- /*
- * Check for UTF16 characters.
- */
- if (0x10000 <= rp->min_code &&
- rp->min_code <= 0x10ffff) {
- h = (ucs2_t) (((rp->min_code - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((rp->min_code - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX", h, l);
- } else
- fprintf(out, "\\x%04lX",
- (unsigned long)(rp->min_code & 0xffff));
- if (rp->max_code != rp->min_code) {
- putc('-', out);
- if (rp->max_code >= 0x10000 &&
- rp->max_code <= 0x10ffff) {
- h = (ucs2_t) (((rp->max_code - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((rp->max_code - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX", h, l);
- } else
- fprintf(out, "\\x%04lX",
- (unsigned long)(rp->max_code & 0xffff));
- }
- }
- if (sym->sym.ccl.ranges_used > 0)
- putc('', out);
- putc('\n', out);
- }
- }
-
- for (i = 0, sp = dfa->states; i < dfa->nstates; i++, sp++) {
- fprintf(out, "S%hd = ", i);
- if (sp->accepting) {
- fprintf(out, "1 ");
- if (sp->ntrans)
- fprintf(out, "| ");
- }
- for (j = 0; j < sp->ntrans; j++) {
- if (j > 0)
- fprintf(out, "| ");
-
- sym = dfa->syms + sp->transj.symbol;
- switch (sym->type) {
- case _URE_CHAR:
- if (0x10000 <= sym->sym.chr && sym->sym.chr <= 0x10ffff) {
- /*
- * Take care of UTF16 characters.
- */
- h = (ucs2_t) (((sym->sym.chr - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((sym->sym.chr - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX ", h, l);
- } else
- fprintf(out, "\\x%04lX ",
- (unsigned long)(sym->sym.chr & 0xffff));
- break;
- case _URE_ANY_CHAR:
- fprintf(out, "<any> ");
- break;
- case _URE_BOL_ANCHOR:
- fprintf(out, "<bol-anchor> ");
- break;
- case _URE_EOL_ANCHOR:
- fprintf(out, "<eol-anchor> ");
- break;
- case _URE_CCLASS:
- case _URE_NCCLASS:
- fprintf(out, "C%hd ", sym->id);
- break;
- }
- fprintf(out, "S%hd", sp->transj.next_state);
- if (j + 1 < sp->ntrans)
- putc(' ', out);
- }
- putc('\n', out);
- }
-}
-
-#define _ure_issep(cc) ((cc) == '\n' || (cc) == '\r' || (cc) == 0x2028 ||\
- (cc) == 0x2029)
-
-int
-ure_exec(ure_dfa_t dfa, int flags, ucs2_t *text, unsigned long textlen,
- unsigned long *match_start, unsigned long *match_end)
-{
- int i, j, matched, found;
- unsigned long ms, me;
- ucs4_t c;
- ucs2_t *sp, *ep, *lp;
- _ure_dstate_t *stp;
- _ure_symtab_t *sym;
- _ure_range_t *rp;
-
- if (dfa == 0 || text == 0)
- return 0;
-
- /*
- * Handle the special case of an empty string matching the "^$" pattern.
- */
- if (textlen == 0 && (dfa->flags & _URE_DFA_BLANKLINE)) {
- *match_start = *match_end = 0;
- return 1;
- }
-
- sp = text;
- ep = sp + textlen;
-
- ms = me = ~0;
-
- stp = dfa->states;
-
- for (found = 0; found == 0 && sp < ep; ) {
- lp = sp;
- c = *sp++;
-
- /*
- * Check to see if this is a high surrogate that should be
- * combined with a following low surrogate.
- */
- if (sp < ep && 0xd800 <= c && c <= 0xdbff &&
- 0xdc00 <= *sp && *sp <= 0xdfff)
- c = 0x10000 + (((c & 0x03ff) << 10) | (*sp++ & 0x03ff));
-
- /*
- * Determine if the character is non-spacing and should be skipped.
- */
- if (_ure_matches_properties(_URE_NONSPACING, c) &&
- (flags & URE_IGNORE_NONSPACING)) {
- sp++;
- continue;
- }
-
- if (dfa->flags & _URE_DFA_CASEFOLD)
- c = _ure_tolower(c);
-
- /*
- * See if one of the transitions matches.
- */
- for (i = 0, matched = 0; matched == 0 && i < stp->ntrans; i++) {
- sym = dfa->syms + stp->transi.symbol;
- switch (sym->type) {
- case _URE_ANY_CHAR:
- if ((flags & URE_DOT_MATCHES_SEPARATORS) ||
- !_ure_issep(c))
- matched = 1;
- break;
- case _URE_CHAR:
- if (c == sym->sym.chr)
- matched = 1;
- break;
- case _URE_BOL_ANCHOR:
- if (lp == text) {
- sp = lp;
- matched = 1;
- } else if (_ure_issep(c)) {
- if (c == '\r' && sp < ep && *sp == '\n')
- sp++;
- lp = sp;
- matched = 1;
- }
- break;
- case _URE_EOL_ANCHOR:
- if (_ure_issep(c)) {
- /*
- * Put the pointer back before the separator so the match
- * end position will be correct. This case will also
- * cause the `sp' pointer to be advanced over the current
- * separator once the match end point has been recorded.
- */
- sp = lp;
- matched = 1;
- }
- break;
- case _URE_CCLASS:
- case _URE_NCCLASS:
- if (sym->props != 0)
- matched = _ure_matches_properties(sym->props, c);
- for (j = 0, rp = sym->sym.ccl.ranges;
- j < sym->sym.ccl.ranges_used; j++, rp++) {
- if (rp->min_code <= c && c <= rp->max_code)
- matched = 1;
- }
- if (sym->type == _URE_NCCLASS)
- matched = !matched;
- break;
- }
-
- if (matched) {
- if (ms == ~0UL)
- ms = lp - text;
- else
- me = sp - text;
- stp = dfa->states + stp->transi.next_state;
-
- /*
- * If the match was an EOL anchor, adjust the pointer past the
- * separator that caused the match. The correct match
- * position has been recorded already.
- */
- if (sym->type == _URE_EOL_ANCHOR) {
- /*
- * Skip the character that caused the match.
- */
- sp++;
-
- /*
- * Handle the infamous CRLF situation.
- */
- if (sp < ep && c == '\r' && *sp == '\n')
- sp++;
- }
- }
- }
-
- if (matched == 0) {
- if (stp->accepting == 0) {
- /*
- * If the last state was not accepting, then reset
- * and start over.
- */
- stp = dfa->states;
- ms = me = ~0;
- } else
- /*
- * The last state was accepting, so terminate the matching
- * loop to avoid more work.
- */
- found = 1;
- } else if (sp == ep) {
- if (!stp->accepting) {
- /*
- * This ugly hack is to make sure the end-of-line anchors
- * match when the source text hits the end. This is only done
- * if the last subexpression matches.
- */
- for (i = 0; found == 0 && i < stp->ntrans; i++) {
- sym = dfa->syms + stp->transi.symbol;
- if (sym->type ==_URE_EOL_ANCHOR) {
- stp = dfa->states + stp->transi.next_state;
- if (stp->accepting) {
- me = sp - text;
- found = 1;
- } else
- break;
- }
- }
- } else {
- /*
- * Make sure any conditions that match all the way to the end
- * of the string match.
- */
- found = 1;
- me = sp - text;
- }
- }
- }
-
- if (found == 0)
- ms = me = ~0;
-
- *match_start = ms;
- *match_end = me;
-
- return (ms != ~0UL) ? 1 : 0;
-}

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ure/ure.h Deleted

@@ -1,152 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <http://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <http://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/ure.h,v 1.15 2008/01/07 23:20:05 kurt Exp $
- * $Id: ure.h,v 1.2 1999/09/21 15:47:44 mleisher Exp $
- */
-
-#ifndef _h_ure
-#define _h_ure
-
-#include "k5-int.h"
-
-#include <stdio.h>
-
-/*
- * Set of character class flags.
- */
-#define _URE_NONSPACING 0x00000001
-#define _URE_COMBINING 0x00000002
-#define _URE_NUMDIGIT 0x00000004
-#define _URE_NUMOTHER 0x00000008
-#define _URE_SPACESEP 0x00000010
-#define _URE_LINESEP 0x00000020
-#define _URE_PARASEP 0x00000040
-#define _URE_CNTRL 0x00000080
-#define _URE_PUA 0x00000100
-
-#define _URE_UPPER 0x00000200
-#define _URE_LOWER 0x00000400
-#define _URE_TITLE 0x00000800
-#define _URE_MODIFIER 0x00001000
-#define _URE_OTHERLETTER 0x00002000
-#define _URE_DASHPUNCT 0x00004000
-#define _URE_OPENPUNCT 0x00008000
-#define _URE_CLOSEPUNCT 0x00010000
-#define _URE_OTHERPUNCT 0x00020000
-#define _URE_MATHSYM 0x00040000
-#define _URE_CURRENCYSYM 0x00080000
-#define _URE_OTHERSYM 0x00100000
-
-#define _URE_LTR 0x00200000
-#define _URE_RTL 0x00400000
-
-#define _URE_EURONUM 0x00800000
-#define _URE_EURONUMSEP 0x01000000
-#define _URE_EURONUMTERM 0x02000000
-#define _URE_ARABNUM 0x04000000
-#define _URE_COMMONSEP 0x08000000
-
-#define _URE_BLOCKSEP 0x10000000
-#define _URE_SEGMENTSEP 0x20000000
-
-#define _URE_WHITESPACE 0x40000000
-#define _URE_OTHERNEUT 0x80000000
-
-/*
- * Error codes.
- */
-#define _URE_OK 0
-#define _URE_UNEXPECTED_EOS -1
-#define _URE_CCLASS_OPEN -2
-#define _URE_UNBALANCED_GROUP -3
-#define _URE_INVALID_PROPERTY -4
-
-/*
- * Options that can be combined for searching.
- */
-#define URE_IGNORE_NONSPACING 0x01
-#define URE_DOT_MATCHES_SEPARATORS 0x02
-
-typedef krb5_ui_4 ucs4_t;
-typedef krb5_ui_2 ucs2_t;
-
-/*
- * Opaque type for memory used when compiling expressions.
- */
-typedef struct _ure_buffer_t *ure_buffer_t;
-
-/*
- * Opaque type for the minimal DFA used when matching.
- */
-typedef struct _ure_dfa_t *ure_dfa_t;
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-ure_buffer_t ure_buffer_create (void);
-
-void ure_buffer_free (ure_buffer_t buf);
-
-ure_dfa_t
-ure_compile (ucs2_t *re, unsigned long relen,
-		 int casefold, ure_buffer_t buf);
-
-void ure_dfa_free (ure_dfa_t dfa);
-
-void ure_write_dfa (ure_dfa_t dfa, FILE *out);
-
-int
-ure_exec (ure_dfa_t dfa, int flags, ucs2_t *text,
-		 unsigned long textlen, unsigned long *match_start,
-		 unsigned long *match_end);
-
-/*************************************************************************
- *
- * Prototypes for stub functions used for URE. These need to be rewritten to
- * use the Unicode support available on the system.
- *
- *************************************************************************/
-
-ucs4_t _ure_tolower (ucs4_t c);
-
-int
-_ure_matches_properties (unsigned long props, ucs4_t c);
-
-#endif /* _h_ure */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ure/urestubs.c Deleted

@@ -1,125 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/*
- * Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/urestubs.c,v 1.16 2008/01/07 23:20:05 kurt Exp $
- * $Id: urestubs.c,v 1.2 1999/09/21 15:47:44 mleisher Exp $"
- */
-
-#include "k5-int.h"
-
-#include "ure.h"
-
-#include "ucdata.h"
-
-/*
- * This file contains stub routines needed by the URE package to test
- * character properties and other Unicode implementation specific details.
- */
-
-/*
- * This routine should return the lower case equivalent for the character or,
- * if there is no lower case quivalent, the character itself.
- */
-ucs4_t _ure_tolower(ucs4_t c)
-{
- return uctoupper(c);
-}
-
-static struct ucmaskmap {
-	unsigned long mask1;
-	unsigned long mask2;
-} masks32 = {
-	{ UC_MN, 0 },	/* _URE_NONSPACING */
-	{ UC_MC, 0 },	/* _URE_COMBINING */
-	{ UC_ND, 0 },	/* _URE_NUMDIGIT */
-	{ UC_NL|UC_NO, 0 },	/* _URE_NUMOTHER */
-	{ UC_ZS, 0 },	/* _URE_SPACESEP */
-	{ UC_ZL, 0 },	/* _URE_LINESEP */
-	{ UC_ZP, 0 },	/* _URE_PARASEP */
-	{ UC_CC, 0 },	/* _URE_CNTRL */
-	{ UC_CO, 0 },	/* _URE_PUA */
-
-	{ UC_LU, 0 },	/* _URE_UPPER */
-	{ UC_LL, 0 },	/* _URE_LOWER */
-	{ UC_LT, 0 },	/* _URE_TITLE */
-	{ UC_LM, 0 },	/* _URE_MODIFIER */
-	{ UC_LO, 0 },	/* _URE_OTHERLETTER */
-	{ UC_PD, 0 },	/* _URE_DASHPUNCT */
-	{ UC_PS, 0 },	/* _URE_OPENPUNCT */
-	{ UC_PC, 0 },	/* _URE_CLOSEPUNCT */
-	{ UC_PO, 0 },	/* _URE_OTHERPUNCT */
-	{ UC_SM, 0 },	/* _URE_MATHSYM */
-	{ UC_SC, 0 },	/* _URE_CURRENCYSYM */
-	{ UC_SO, 0 },	/* _URE_OTHERSYM */
-
-	{ UC_L, 0 },	/* _URE_LTR */
-	{ UC_R, 0 },	/* _URE_RTL */
-
-	{ 0, UC_EN },	/* _URE_EURONUM */
-	{ 0, UC_ES },	/* _URE_EURONUMSEP */
-	{ 0, UC_ET },	/* _URE_EURONUMTERM */
-	{ 0, UC_AN },	/* _URE_ARABNUM */
-	{ 0, UC_CS },	/* _URE_COMMONSEP */
-
-	{ 0, UC_B },	/* _URE_BLOCKSEP */
-	{ 0, UC_S },	/* _URE_SEGMENTSEP */
-
-	{ 0, UC_WS },	/* _URE_WHITESPACE */
-	{ 0, UC_ON }	/* _URE_OTHERNEUT */
-};
-
-
-/*
- * This routine takes a set of URE character property flags (see ure.h) along
- * with a character and tests to see if the character has one or more of those
- * properties.
- */
-int
-_ure_matches_properties(unsigned long props, ucs4_t c)
-{
-	int i;
-	unsigned long mask1=0, mask2=0;
-
-	for( i=0; i<32; i++ ) {
-		if( props & (1 << i) ) {
-			mask1 |= masksi.mask1;
-			mask2 |= masksi.mask2;
-		}
-	}
-
-	return ucisprop( mask1, mask2, c );
-}

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/utbm Deleted

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/utbm/README Deleted

@@ -1,121 +0,0 @@
-#
-# $Id: README,v 1.1 1999/09/21 15:45:17 mleisher Exp $
-#
-# Copyright 1997, 1998, 1999 Computing Research Labs,
-# New Mexico State University
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
-# THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
-# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
-# OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
-# THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-
- Unicode and Boyer-Moore Searching
- Version 0.2
-
-UTBM (Unicode Tuned Boyer-Moore) is a simple package that provides tuned
-Boyer-Moore searches on Unicode UCS2 text (handles high and low surrogates).
-
----------------------------------------------------------------------------
-
-Assumptions:
-
- o Search pattern and text already normalized in some fasion.
-
- o Upper, lower, and title case conversions are one-to-one.
-
- o For conversions between upper, lower, and title case, UCS2 characters
- always convert to other UCS2 characters, and UTF-16 characters always
- convert to other UTF-16 characters.
-
-Flags:
-
- UTBM provides three processing flags:
-
- o UTBM_CASEFOLD - search in a case-insensitive manner.
-
- o UTBM_IGNORE_NONSPACING - ignore non-spacing characters in the pattern and
- the text.
-
- o UTBM_SPACE_COMPRESS - view as a *single space*, sequential groups of
- U+2028, U+2029, '\n', '\r', '\t', and any
- character identified as a space by the Unicode
- support on the platform.
-
- This flag also causes all characters identified
- as control by the Unicode support on the
- platform to be ignored (except for '\n', '\r',
- and '\t').
-
----------------------------------------------------------------------------
-
-Before using UTBM
------------------
-Before UTBM is used, some functions need to be created. The "utbmstub.c" file
-contains stubs that need to be rewritten so they work with the Unicode support
-on the platform on which this package is being used.
-
-Using UTBM
-----------
-
-Sample pseudo-code fragment.
-
- utbm_pattern_t pat;
- ucs2_t *pattern, *text;
- unsigned long patternlen, textlen;
- unsigned long flags, match_start, match_end;
-
- /*
- * Allocate the dynamic storage needed for a search pattern.
- */
- pat = utbm_create_pattern();
-
- /*
- * Set the search flags desired.
- */
- flags = UTBM_CASEFOLD|UTBM_IGNORE_NONSPACING;
-
- /*
- * Compile the search pattern.
- */
- utbm_compile(pattern, patternlen, flags, pat);
-
- /*
- * Find the first occurance of the search pattern in the text.
- */
- if (utbm_exec(pat, text, textlen, &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Free the dynamic storage used for the search pattern.
- */
- ure_free_pattern(pat);
-
----------------------------------------------------------------------------
-
-Mark Leisher <mleisher@crl.nmsu.edu>
-2 May 1997
-
-===========================================================================
-
-CHANGES
--------
-
-Version: 0.2
-Date : 21 September 1999
-==========================
- 1. Added copyright stuff and put in CVS.
-

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/utbm/utbm.c Deleted

@@ -1,475 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbm.c,v 1.9 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbm.c,v 1.1 1999/09/21 15:45:17 mleisher Exp $
- */
-
-/*
- * Assumptions:
- * 1. Case conversions of UTF-16 characters must also be UTF-16 characters.
- * 2. Case conversions are all one-to-one.
- * 3. Text and pattern have already been normalized in some fashion.
- */
-
-#include <stdlib.h>
-#include <unistd.h>
-#include <string.h>
-#include "utbm.h"
-
-/*
- * Single pattern character.
- */
-typedef struct {
- ucs4_t lc;
- ucs4_t uc;
- ucs4_t tc;
-} _utbm_char_t;
-
-typedef struct {
- _utbm_char_t *ch;
- unsigned long skip;
-} _utbm_skip_t;
-
-typedef struct _utbm_pattern_t {
- unsigned long flags;
-
- _utbm_char_t *pat;
- unsigned long pat_used;
- unsigned long pat_size;
- unsigned long patlen;
-
- _utbm_skip_t *skip;
- unsigned long skip_used;
- unsigned long skip_size;
-
- unsigned long md4;
-} _utbm_pattern_t;
-
-/*************************************************************************
- *
- * Support functions.
- *
- *************************************************************************/
-
-/*
- * Routine to look up the skip value for a character.
- */
-static unsigned long
-_utbm_skip(utbm_pattern_t p, ucs2_t *start, ucs2_t *end)
-{
- unsigned long i;
- ucs4_t c1, c2;
- _utbm_skip_t *sp;
-
- if (start >= end)
- return 0;
-
- c1 = *start;
- c2 = (start + 1 < end) ? *(start + 1) : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff)
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
-
- for (i = 0, sp = p->skip; i < p->skip_used; i++, sp++) {
- if (!((c1 ^ sp->ch->uc) & (c1 ^ sp->ch->lc) & (c1 ^ sp->ch->tc))) {
- return ((unsigned long) (end - start) < sp->skip) ?
- end - start : sp->skip;
- }
- }
- return p->patlen;
-}
-
-static int
-_utbm_match(utbm_pattern_t pat, ucs2_t *text, ucs2_t *start, ucs2_t *end,
- unsigned long *match_start, unsigned long *match_end)
-{
- int check_space;
- ucs4_t c1, c2;
- unsigned long count;
- _utbm_char_t *cp;
-
- /*
- * Set the potential match endpoint first.
- */
- *match_end = (start - text) + 1;
-
- c1 = *start;
- c2 = (start + 1 < end) ? *(start + 1) : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- /*
- * Adjust the match end point to occur after the UTF-16 character.
- */
- *match_end = *match_end + 1;
- }
-
- if (pat->pat_used == 1) {
- *match_start = start - text;
- return 1;
- }
-
- /*
- * Compare backward.
- */
- cp = pat->pat + (pat->pat_used - 1);
-
- for (count = pat->patlen; start > text && count > 0;) {
- /*
- * Ignore non-spacing characters if indicated.
- */
- if (pat->flags & UTBM_IGNORE_NONSPACING) {
- while (start > text && _utbm_nonspacing(c1)) {
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- }
-
- /*
- * Handle space compression if indicated.
- */
- if (pat->flags & UTBM_SPACE_COMPRESS) {
- check_space = 0;
- while (start > text &&
- (_utbm_isspace(c1, 1) || _utbm_iscntrl(c1))) {
- check_space = _utbm_isspace(c1, 1);
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- /*
- * Handle things if space compression was indicated and one or
- * more member characters were found.
- */
- if (check_space) {
- if (cp->uc != ' ')
- return 0;
- cp--;
- count--;
- }
- }
-
- /*
- * Handle the normal comparison cases.
- */
- if (count > 0 && ((c1 ^ cp->uc) & (c1 ^ cp->lc) & (c1 ^ cp->tc)))
- return 0;
-
- count -= (c1 >= 0x10000) ? 2 : 1;
- if (count > 0) {
- cp--;
-
- /*
- * Get the next preceding character.
- */
- if (start > text) {
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- }
- }
-
- /*
- * Set the match start position.
- */
- *match_start = start - text;
- return 1;
-}
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-utbm_pattern_t
-utbm_create_pattern(void)
-{
- utbm_pattern_t p;
-
- p = (utbm_pattern_t) malloc(sizeof(_utbm_pattern_t));
- (void) memset((char *) p, '\0', sizeof(_utbm_pattern_t));
- return p;
-}
-
-void
-utbm_free_pattern(utbm_pattern_t pattern)
-{
- if (pattern == 0)
- return;
-
- if (pattern->pat_size > 0)
- free((char *) pattern->pat);
-
- if (pattern->skip_size > 0)
- free((char *) pattern->skip);
-
- free((char *) pattern);
-}
-
-void
-utbm_compile(ucs2_t *pat, unsigned long patlen, unsigned long flags,
- utbm_pattern_t p)
-{
- int have_space;
- unsigned long i, j, k, slen;
- _utbm_char_t *cp;
- _utbm_skip_t *sp;
- ucs4_t c1, c2, sentinel;
-
- if (p == 0 || pat == 0 || *pat == 0 || patlen == 0)
- return;
-
- /*
- * Reset the pattern buffer.
- */
- p->patlen = p->pat_used = p->skip_used = 0;
-
- /*
- * Set the flags.
- */
- p->flags = flags;
-
- /*
- * Initialize the extra skip flag.
- */
- p->md4 = 1;
-
- /*
- * Allocate more storage if necessary.
- */
- if (patlen > p->pat_size) {
- if (p->pat_size == 0) {
- p->pat = (_utbm_char_t *) malloc(sizeof(_utbm_char_t) * patlen);
- p->skip = (_utbm_skip_t *) malloc(sizeof(_utbm_skip_t) * patlen);
- } else {
- p->pat = (_utbm_char_t *)
- realloc((char *) p->pat, sizeof(_utbm_char_t) * patlen);
- p->skip = (_utbm_skip_t *)
- realloc((char *) p->skip, sizeof(_utbm_skip_t) * patlen);
- }
- p->pat_size = p->skip_size = patlen;
- }
-
- /*
- * Preprocess the pattern to remove controls (if specified) and determine
- * case.
- */
- for (have_space = 0, cp = p->pat, i = 0; i < patlen; i++) {
- c1 = pati;
- c2 = (i + 1 < patlen) ? pati + 1 : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff)
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
-
- /*
- * Make sure the `have_space' flag is turned off if the character
- * is not an appropriate one.
- */
- if (!_utbm_isspace(c1, flags & UTBM_SPACE_COMPRESS))
- have_space = 0;
-
- /*
- * If non-spacing characters should be ignored, do it here.
- */
- if ((flags & UTBM_IGNORE_NONSPACING) && _utbm_nonspacing(c1))
- continue;
-
- /*
- * Check if spaces and controls need to be compressed.
- */
- if (flags & UTBM_SPACE_COMPRESS) {
- if (_utbm_isspace(c1, 1)) {
- if (!have_space) {
- /*
- * Add a space and set the flag.
- */
- cp->uc = cp->lc = cp->tc = ' ';
- cp++;
-
- /*
- * Increase the real pattern length.
- */
- p->patlen++;
- sentinel = ' ';
- have_space = 1;
- }
- continue;
- }
-
- /*
- * Ignore all control characters.
- */
- if (_utbm_iscntrl(c1))
- continue;
- }
-
- /*
- * Add the character.
- */
- if (flags & UTBM_CASEFOLD) {
- cp->uc = _utbm_toupper(c1);
- cp->lc = _utbm_tolower(c1);
- cp->tc = _utbm_totitle(c1);
- } else
- cp->uc = cp->lc = cp->tc = c1;
-
- /*
- * Set the sentinel character.
- */
- sentinel = cp->uc;
-
- /*
- * Move to the next character.
- */
- cp++;
-
- /*
- * Increase the real pattern length appropriately.
- */
- p->patlen += (c1 >= 0x10000) ? 2 : 1;
-
- /*
- * Increment the loop index for UTF-16 characters.
- */
- i += (c1 >= 0x10000) ? 1 : 0;
-
- }
-
- /*
- * Set the number of characters actually used.
- */
- p->pat_used = cp - p->pat;
-
- /*
- * Go through and construct the skip array and determine the actual length
- * of the pattern in UCS2 terms.
- */
- slen = p->patlen - 1;
- cp = p->pat;
- for (i = k = 0; i < p->pat_used; i++, cp++) {
- /*
- * Locate the character in the skip array.
- */
- for (sp = p->skip, j = 0;
- j < p->skip_used && sp->ch->uc != cp->uc; j++, sp++) ;
-
- /*
- * If the character is not found, set the new skip element and
- * increase the number of skip elements.
- */
- if (j == p->skip_used) {
- sp->ch = cp;
- p->skip_used++;
- }
-
- /*
- * Set the updated skip value. If the character is UTF-16 and is
- * not the last one in the pattern, add one to its skip value.
- */
- sp->skip = slen - k;
- if (cp->uc >= 0x10000 && k + 2 < slen)
- sp->skip++;
-
- /*
- * Set the new extra skip for the sentinel character.
- */
- if (((cp->uc >= 0x10000 && k + 2 <= slen) || k + 1 <= slen) &&
- cp->uc == sentinel)
- p->md4 = slen - k;
-
- /*
- * Increase the actual index.
- */
- k += (cp->uc >= 0x10000) ? 2 : 1;
- }
-}
-
-int
-utbm_exec(utbm_pattern_t pat, ucs2_t *text, unsigned long textlen,
- unsigned long *match_start, unsigned long *match_end)
-{
- unsigned long k;
- ucs2_t *start, *end;
-
- if (pat == 0 || pat->pat_used == 0 || text == 0 || textlen == 0 ||
- textlen < pat->patlen)
- return 0;
-
- start = text + pat->patlen;
- end = text + textlen;
-
- /*
- * Adjust the start point if it points to a low surrogate.
- */
- if (0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
-
- while (start < end) {
- while ((k = _utbm_skip(pat, start, end))) {
- start += k;
- if (start < end && 0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
- }
-
- if (start < end &&
- _utbm_match(pat, text, start, end, match_start, match_end))
- return 1;
-
- start += pat->md4;
- if (start < end && 0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
- }
- return 0;
-}

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/utbm/utbm.h Deleted

@@ -1,110 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbm.h,v 1.10 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbm.h,v 1.1 1999/09/21 15:45:18 mleisher Exp $
- */
-
-#ifndef _h_utbm
-#define _h_utbm
-
-#include "k5-int.h"
-
-/*************************************************************************
- *
- * Types.
- *
- *************************************************************************/
-
-/*
- * Fundamental character types.
- */
-typedef krb5_ui_4 ucs4_t;
-typedef krb5_ui_2 ucs2_t;
-
-/*
- * An opaque type used for the search pattern.
- */
-typedef struct _utbm_pattern_t *utbm_pattern_t;
-
-/*************************************************************************
- *
- * Flags.
- *
- *************************************************************************/
-
-#define UTBM_CASEFOLD 0x01
-#define UTBM_IGNORE_NONSPACING 0x02
-#define UTBM_SPACE_COMPRESS 0x04
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-utbm_pattern_t utbm_create_pattern (void);
-
-void utbm_free_pattern (utbm_pattern_t pattern);
-
-void
-utbm_compile (ucs2_t *pat, unsigned long patlen,
-		 unsigned long flags, utbm_pattern_t pattern);
-
-int
-utbm_exec (utbm_pattern_t pat, ucs2_t *text,
-		 unsigned long textlen, unsigned long *match_start,
-		 unsigned long *match_end);
-
-/*************************************************************************
- *
- * Prototypes for the stub functions needed.
- *
- *************************************************************************/
-
-int _utbm_isspace (ucs4_t c, int compress);
-
-int _utbm_iscntrl (ucs4_t c);
-
-int _utbm_nonspacing (ucs4_t c);
-
-ucs4_t _utbm_tolower (ucs4_t c);
-
-ucs4_t _utbm_toupper (ucs4_t c);
-
-ucs4_t _utbm_totitle (ucs4_t c);
-
-#endif /* _h_utbm */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/utbm/utbmstub.c Deleted

@@ -1,108 +0,0 @@
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbmstub.c,v 1.8 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbmstub.c,v 1.1 1999/09/21 15:45:18 mleisher Exp $
- */
-
-#include "utbm.h"
-
-/*
- * This should be redefined to use the `isspace' function available in the
- * Unicode support on the platform where this is being used.
- */
-#define _platform_isspace(x) 0
-
-/*
- * Return non-zero for any character that should be considered the equivalent
- * of a space character. Return zero otherwise.
- */
-int
-_utbm_isspace(ucs4_t c, int compress)
-{
- if (compress)
- return (c == 0x09 || c == 0x0a || c == 0x0d ||
- c == 0x2028 || c == 0x2029 || _platform_isspace(c)) ? 1 : 0;
-
- return _platform_isspace(c);
-
-}
-
-/*
- * Return non-zero if the character is a control character, or zero otherwise.
- */
-int
-_utbm_iscntrl(ucs4_t c)
-{
- return 0;
-}
-
-/*
- * Return non-zero if the character is a non-spacing character, or zero
- * otherwise.
- */
-int
-_utbm_nonspacing(ucs4_t c)
-{
- return 0;
-}
-
-/*
- * Convert a character to lower case.
- */
-ucs4_t
-_utbm_tolower(ucs4_t c)
-{
- return c;
-}
-
-/*
- * Convert a character to upper case.
- */
-ucs4_t
-_utbm_toupper(ucs4_t c)
-{
- return c;
-}
-
-/*
- * Convert a character to title case.
- */
-ucs4_t
-_utbm_totitle(ucs4_t c)
-{
- return c;
-}

_service:tar_scm:krb5-1.21.1.tar.gz.asc Added

_service:tar_scm:krb5-1.20.1.tar.gz/.github/workflows/build.yml -> _service:tar_scm:krb5-1.21.1.tar.gz/.github/workflows/build.yml Changed

@@ -14,17 +14,17 @@
                 name: linux-clang, linux-clang-openssl, linux-gcc
                 include:
                     - name: linux-clang
-                      os: ubuntu-18.04
+                      os: ubuntu-latest
                       compiler: clang
                       makevars: CPPFLAGS=-Werror
                       configureopts: --enable-asan
                     - name: linux-clang-openssl
-                      os: ubuntu-18.04
+                      os: ubuntu-latest
                       compiler: clang
                       makevars: CPPFLAGS=-Werror
                       configureopts: --with-crypto-impl=openssl
                     - name: linux-gcc
-                      os: ubuntu-18.04
+                      os: ubuntu-latest
                       compiler: gcc
         steps:
             - name: Checkout repository
@@ -33,7 +33,7 @@
               if: startsWith(matrix.os, 'ubuntu')
               run: |
                 sudo apt-get update -qq
-                sudo apt-get install -y bison gettext keyutils ldap-utils libcmocka-dev libldap2-dev libkeyutils-dev libresolv-wrapper libsasl2-dev libssl-dev python3-kdcproxy python3-pip slapd tcsh
+                sudo apt-get install -y bison gettext keyutils ldap-utils libcmocka-dev libldap2-dev libkeyutils-dev libsasl2-dev libssl-dev python3-kdcproxy python3-pip slapd tcsh
                 pip3 install pyrad
             - name: Build
               env:
@@ -61,7 +61,7 @@
                 fi
 
     windows:
-        runs-on: windows-2019
+        runs-on: windows-latest
         env:
             KRB_INSTALL_DIR: C:\kfw
         steps:
@@ -71,11 +71,13 @@
               shell: cmd
               run: |
                 mkdir %KRB_INSTALL_DIR%
+            - uses: ilammy/msvc-dev-cmd@v1
+              with:
+                arch: x86
             - name: Build 32-bit
               shell: cmd
               run: |
                 cd src
-                call "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Auxiliary\Build\vcvars32.bat"
                 set
                 set PATH=%PATH%;%wix%bin
                 nmake -f Makefile.in prep-windows
@@ -84,11 +86,13 @@
                 cd windows\installer\wix
                 nmake
                 rename kfw.msi kfw32.msi
+            - uses: ilammy/msvc-dev-cmd@v1
+              with:
+                arch: x64
             - name: Build 64-bit
               shell: cmd
               run: |
                 cd src
-                call "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Auxiliary\Build\vcvars64.bat"
                 set
                 set PATH=%PATH%;%wix%bin;"%WindowsSdkVerBinPath%"\x86
                 nmake clean

_service:tar_scm:krb5-1.20.1.tar.gz/.github/workflows/doc.yml -> _service:tar_scm:krb5-1.21.1.tar.gz/.github/workflows/doc.yml Changed

_service:tar_scm:krb5-1.20.1.tar.gz/NOTICE -> _service:tar_scm:krb5-1.21.1.tar.gz/NOTICE Changed

@@ -1,4 +1,4 @@
-Copyright (C) 1985-2022 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2023 by the Massachusetts Institute of Technology.
 
 All rights reserved.
 
@@ -729,6 +729,36 @@
 
 ======================================================================
 
+   Copyright (C) 2022 United States Government as represented by the
+   Secretary of the Navy.  All rights reserved.
+
+   Redistribution and use in source and binary forms, with or without
+   modification, are permitted provided that the following conditions
+   are met:
+
+   * Redistributions of source code must retain the above copyright
+     notice, this list of conditions and the following disclaimer.
+
+   * Redistributions in binary form must reproduce the above
+     copyright notice, this list of conditions and the following
+     disclaimer in the documentation and/or other materials provided
+     with the distribution.
+
+   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+   FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+   COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+   INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+   (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+   SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+   HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+   STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+   OF THE POSSIBILITY OF SUCH DAMAGE.
+
+======================================================================
+
    Copyright (C) 1991, 1992, 1994 by Cygnus Support.
 
    Permission to use, copy, modify, and distribute this software and

_service:tar_scm:krb5-1.20.1.tar.gz/README -> _service:tar_scm:krb5-1.21.1.tar.gz/README Changed

@@ -1,4 +1,4 @@
-                   Kerberos Version 5, Release 1.20
+                   Kerberos Version 5, Release 1.21
 
                             Release Notes
                         The MIT Kerberos Team
@@ -6,7 +6,7 @@
 Copyright and Other Notices
 ---------------------------
 
-Copyright (C) 1985-2022 by the Massachusetts Institute of Technology
+Copyright (C) 1985-2023 by the Massachusetts Institute of Technology
 and its contributors.  All rights reserved.
 
 Please see the file named NOTICE for additional notices.
@@ -64,154 +64,127 @@
 interface to our bug database is read-only for guests, and the primary
 way to interact with our bug database is via email.
 
-PAC transition
---------------
+PAC transitions
+---------------
 
 Beginning with release 1.20, the KDC will include minimal PACs in
 tickets instead of AD-SIGNEDPATH authdata.  S4U requests (protocol
 transition and constrained delegation) must now contain valid PACs in
-the incoming tickets.  If only some KDCs in a realm have been upgraded
-across version 1.20, the upgraded KDCs will reject S4U requests
-containing tickets from non-upgraded KDCs and vice versa.
+the incoming tickets.  Beginning with release 1.21, service ticket
+PACs will contain a new KDC checksum buffer, to mitigate a hash
+collision attack against the old KDC checksum.  If only some KDCs in a
+realm have been upgraded across versions 1.20 or 1.21, the upgraded
+KDCs will reject S4U requests containing tickets from non-upgraded
+KDCs and vice versa.
+
+Triple-DES and RC4 transitions
+------------------------------
 
-Triple-DES transition
----------------------
+Beginning with the krb5-1.21 release, the KDC will not issue tickets
+with triple-DES or RC4 session keys unless explicitly configured using
+the new allow_des3 and allow_rc4 variables in libdefaults.  To
+facilitate the negotiation of session keys, the KDC will assume that
+all services can handle aes256-sha1 session keys unless the service
+principal has a session_enctypes string attribute.
 
 Beginning with the krb5-1.19 release, a warning will be issued if
 initial credentials are acquired using the des3-cbc-sha1 encryption
-type.  In future releases, this encryption type will be disabled by
-default and eventually removed.
+type.  Beginning with the krb5-1.21 release, a warning will also be
+issued for the arcfour-hmac encryption type.  In future releases,
+these encryption types will be disabled by default and eventually
+removed.
 
-Beginning with the krb5-1.18 release, single-DES encryption types have
-been removed.
+Beginning with the krb5-1.18 release, all support for single-DES
+encryption types has been removed.
 
-Major changes in 1.20.1 (2022-11-15)
+Major changes in 1.21.1 (2023-07-10)
 ------------------------------------
 
 This is a bug fix release.
 
-* Fix integer overflows in PAC parsing CVE-2022-42898.
-
-* Fix null deref in KDC when decoding invalid NDR.
-
-* Fix memory leak in OTP kdcpreauth module.
-
-* Fix PKCS11 module path search.
+* Fix potential uninitialized pointer free in kadm5 XDR parsing
+  CVE-2023-36054.
 
-krb5-1.20.1 changes by ticket ID
+krb5-1.21.1 changes by ticket ID
 --------------------------------
 
-9061    Fix memory leak in SPAKE kdcpreauth module
-9062    Fix net-server.c when AI_NUMERICSERV is undefined
-9063    Fix memory leak in OTP kdcpreauth module
-9064    Free verto context later in KDC cleanup
-9065    Fix uncommon PKINIT memory leak
-9067    Fix PKCS11 module path search
-9073    Fix null deref in KDC when decoding invalid NDR
-9074    Fix integer overflows in PAC parsing
+9099    Ensure array count consistency in kadm5 RPC
 
-Major changes in 1.20 (2022-05-26)
+Major changes in 1.21 (2023-06-05)
 ----------------------------------
 
-Administrator experience:
+User experience:
 
-* Added a "disable_pac" realm relation to suppress adding PAC authdata
-  to tickets, for realms which do not need to support S4U requests.
-
-* Most credential cache types will use atomic replacement when a cache
-  is reinitialized using kinit or refreshed from the client keytab.
-
-* kprop can now propagate databases with a dump size larger than 4GB,
-  if both the client and server are upgraded.
-
-* kprop can now work over NATs that change the destination IP address,
-  if the client is upgraded.
+* Added a credential cache type providing compatibility with the macOS
+  11 native credential cache.
 
 Developer experience:
 
-* Updated the KDB interface.  The sign_authdata() method is replaced
-  with the issue_pac() method, allowing KDB modules to add logon info
-  and other buffers to the PAC issued by the KDC.
+* libkadm5 will use the provided krb5_context object to read
+  configuration values, instead of creating its own.
 
-* Host-based initiator names are better supported in the GSS krb5
-  mechanism.
+* Added an interface to retrieve the ticket session key from a GSS
+  context.
 
 Protocol evolution:
 
-* Replaced AD-SIGNEDPATH authdata with minimal PACs.
+* The KDC will no longer issue tickets with RC4 or triple-DES session
+  keys unless explicitly configured with the new allow_rc4 or
+  allow_des3 variables respectively.
 
-* To avoid spurious replay errors, password change requests will not
-  be attempted over UDP until the attempt over TCP fails.
+* The KDC will assume that all services can handle aes256-sha1 session
+  keys unless the service principal has a session_enctypes string
+  attribute.
 
-* PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
+* Support for PAC full KDC checksums has been added to mitigate an
+  S4U2Proxy privilege escalation attack.
 
-Code quality:
+* The PKINIT client will advertise a more modern set of supported CMS
+  algorithms.
 
-* Updated all code using OpenSSL to be compatible with OpenSSL 3.
+Code quality:
 
-* Reorganized the libk5crypto build system to allow the OpenSSL
-  back-end to pull in material from the builtin back-end depending on
-  the OpenSSL version.
+* Removed unused code in libkrb5, libkrb5support, and the PKINIT
+  module.
 
-* Simplified the PRNG logic to always use the platform PRNG.
+* Modernized the KDC code for processing TGS requests, the code for
+  encrypting and decrypting key data, the PAC handling code, and the
+  GSS library packet parsing and composition code.
 
-* Converted the remaining Tcl tests to Python.
+* Improved the test framework's detection of memory errors in daemon
+  processes when used with asan.
 
-krb5-1.20 changes by ticket ID
+krb5-1.21 changes by ticket ID
 ------------------------------
 
-7707    Credential cache API does not support atomic reinitialization
-8010    gss_store_cred should initialize ccache and work with collections
-8970    Wrong Encryption types shown in MIT Kerberos Ticket Manager on Windows
-8976    all-liblinks build target fails when symlinks not supported
-8977    Allow kprop over more types of NATs
-8978    Support host-based GSS initiator names
-8980    Add APIs for marshalling credentials
-8981    Documentation__krb5.conf
-8983    Infer name type when creating principals
-8988    Only require one valid pkinit anchor/pool value
-8990    Add KCM_OP_GET_CRED_LIST for faster iteration
-8991    Fix PKINIT memory leaks
-8994    Fix gss-krb5 handling of high sequence numbers
-8995    KCM interop issue with KRB5_TC_ flags
-8997    Use KCM_OP_RETRIEVE in KCM client
-8998    Simplify krb5_cccol_have_content()
-8999    Add additional KRB5_TRACE points
-9000    Fix multiple UPN handling in PKINIT client certs
-9002    Check for undefined kadm5 policy mask bits
-9003    Add duplicate check to kadm5_create_policy()
-9009    Update IRC pointer in resources.rst
-9010    Add MAXHOSTNAME guard in Windows public header
-9011    Fix some principal realm canonicalization cases
-9012    Allow kinit with keytab to defer canonicalization
-9013    Fix kadmin -k with fallback or referral realm
-9017    Clarify and correct interposer plugin docs
-9019    make check fails: OSError: AF_UNIX path too long
-9022    Potential integer overflows
-9024    Find gss_get_mic_iov extensions in GSS modules
-9025    Use version-independent OpenLDAP links in docs
-9027    Add OpenLDAP advice to princ_dns.rst
-9028    Constify name field in four plugin vtables
-9031    Fix verification of RODC-issued PAC KDC signature
-9032    Always use platform PRNG
-9034    Use builtin MD4, RC4 for OpenSSL 3.0
-9035    Avoid use after free during libkrad cleanup
-9036    Support larger RADIUS attributes in libkrad
-9037    Race condition in krb5_set_password()
-9038    Issue an error from KDC on S4U2Self failures
-9039    Fix PAC handling of authtimes after y2038
-9040    Use 14 instead of 9 for unkeyed SHA-1 checksum
-9041    Add PA-REDHAT-IDP-OAUTH2 padata type
-9042    Don't fail krb5_cc_select() for no default realm
-9043    Add PAC ticket signature APIs
-9044    Replace AD-SIGNEDPATH with minimal PACs
-9047    Avoid passing null for asprintf strings
-9048    Pass client flag to KDB for client preauth match
-9049    Add replace_reply_key kdcpreauth callback
-9050    Implement replaced_reply_key input to issue_pac()
-9051    Clarify certauth interface documentation
-9056    Fix iprop with fallback
-9060    Read GSS configuration files with mtime 0
+9052    Support macOS 11 native credential cache
+9053    Make kprop work for dump files larger than 4GB
+9054    Replace macros with typedefs in gssrpc types.h
+9055    Use SHA-256 instead of SHA-1 for PKINIT CMS digest
+9057    Omit LDFLAGS from krb5-config --libs output
+9058    Add configure variable for default PKCS#11 module
+9059    Use context profile for libkadm5 configuration
+9066    Set reasonable supportedCMSTypes in PKINIT
+9069    Update error checking for OpenSSL CMS_verify
+9071    Add and use ts_interval() helper
+9072    Avoid small read overrun in UTF8 normalization
+9076    Use memmove() in Unicode functions
+9077    Fix aclocal.m4 syntax error for autoconf 2.72
+9078    Fix profile crash on memory exhaustion
+9079    Fix preauth crash on memory exhaustion
+9080    Fix gic_keytab crash on memory exhaustion
+9082    Fix policy DB fallback error handling
+9083    Fix kpropd crash with unrecognized option
+9084    Add PAC full checksums
+9085    Fix read overruns in SPNEGO parsing
+9086    Fix possible double-free during KDB creation
+9087    Fix meridian type in getdate.y
+9088    Use control flow guard flag in Windows builds
+9089    Add pac_privsvr_enctype string attribute
+9090    Convey realm names to certauth modules
+9091    Add GSS_C_INQ_ODBC_SESSION_KEY
+9092    Fix maintainer-mode build for binutils 2.37
+9093    Add PA-REDHAT-PASSKEY padata type
 
 Acknowledgements
 ----------------
@@ -375,6 +348,7 @@
     Peter Eriksson
     Juha Erkkilä
     Gilles Espinasse
+    Sergey Fedorov
     Ronni Feldt
     Bill Fellows
     JC Ferguson
@@ -422,6 +396,7 @@
     Brian Johannesmeyer
     Joel Johnson
     Lutz Justen
+    Ganesh Kamath
     Alexander Karaivanov
     Anders Kaseorg
     Bar Katz
@@ -470,6 +445,7 @@
     Paul Moore
     Keiichi Mori
     Michael Morony
+    Robert Morris
     Sam Morris
     Zbysek Mraz
     Edward Murrell
@@ -555,10 +531,9 @@
     Tianjiao Yin
     Nickolai Zeldovich
     Bean Zhang
+    ChenChen Zhou
     Hanz van Zijst
     Gertjan Zwartjes
 
 The above is not an exhaustive list; many others have contributed in
 various ways to the MIT Kerberos development effort over the years.
-Other acknowledgments (for bug reports and patches) are in the
-doc/CHANGES file.

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/admin_commands/kadmin_local.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/admin_commands/kadmin_local.rst Changed

@@ -28,8 +28,6 @@
 **-x** *db_args*
 command args...
 
-.. _kadmin_synopsis_end:
-
 
 DESCRIPTION
 -----------
@@ -142,8 +140,6 @@
     Specifies the database specific arguments.  See the next section
     for supported options.
 
-.. _kadmin_options_end:
-
 Starting with release 1.14, if any command-line arguments remain after
 the options, they will be treated as a single query to be executed.
 This mode of operation is intended for scripts and behaves differently
@@ -426,8 +422,6 @@
     Principal "jennifer@ATHENA.MIT.EDU" created.
     kadmin:
 
-.. _add_principal_end:
-
 .. _modify_principal:
 
 modify_principal
@@ -451,8 +445,6 @@
     authentication attempts without enough time between them according
     to its password policy) so that it can successfully authenticate.
 
-.. _modify_principal_end:
-
 .. _rename_principal:
 
 rename_principal
@@ -468,8 +460,6 @@
 
 Alias: **renprinc**
 
-.. _rename_principal_end:
-
 .. _delete_principal:
 
 delete_principal
@@ -484,8 +474,6 @@
 
 Alias: **delprinc**
 
-.. _delete_principal_end:
-
 .. _change_password:
 
 change_password
@@ -529,8 +517,6 @@
     Password for systest@BLEEP.COM changed.
     kadmin:
 
-.. _change_password_end:
-
 .. _purgekeys:
 
 purgekeys
@@ -546,8 +532,6 @@
 
 This command requires the **modify** privilege.
 
-.. _purgekeys_end:
-
 .. _get_principal:
 
 get_principal
@@ -588,8 +572,6 @@
     tlyu/admin@BLEEP.COM     786100034 0    0
     kadmin:
 
-.. _get_principal_end:
-
 .. _list_principals:
 
 list_principals
@@ -618,8 +600,6 @@
     testuser@SECURE-TEST.OV.COM
     kadmin:
 
-.. _list_principals_end:
-
 .. _get_strings:
 
 get_strings
@@ -633,8 +613,6 @@
 
 Alias: **getstrs**
 
-.. _get_strings_end:
-
 .. _set_string:
 
 set_string
@@ -671,6 +649,15 @@
     is in the same format as those used by the **pkinit_cert_match**
     option in :ref:`krb5.conf(5)`.  (New in release 1.16.)
 
+**pac_privsvr_enctype**
+    Forces the encryption type of the PAC KDC checksum buffers to the
+    specified encryption type for tickets issued to this server, by
+    deriving a key from the local krbtgt key if it is of a different
+    encryption type.  It may be necessary to set this value to
+    "aes256-sha1" on the cross-realm krbtgt entry for an Active
+    Directory realm when using aes-sha2 keys on the local krbtgt
+    entry.
+
 This command requires the **modify** privilege.
 
 Alias: **setstr**
@@ -680,8 +667,6 @@
     set_string host/foo.mit.edu session_enctypes aes128-cts
     set_string user@FOO.COM otp "{""type"":""hotp"",""username"":""al""}"
 
-.. _set_string_end:
-
 .. _del_string:
 
 del_string
@@ -695,8 +680,6 @@
 
 Alias: **delstr**
 
-.. _del_string_end:
-
 .. _add_policy:
 
 add_policy
@@ -773,8 +756,6 @@
     kadmin: add_policy -maxlife "2 days" -minlength 5 guests
     kadmin:
 
-.. _add_policy_end:
-
 .. _modify_policy:
 
 modify_policy
@@ -789,8 +770,6 @@
 
 Alias: **modpol**
 
-.. _modify_policy_end:
-
 .. _delete_policy:
 
 delete_policy
@@ -813,8 +792,6 @@
     (yes/no): yes
     kadmin:
 
-.. _delete_policy_end:
-
 .. _get_policy:
 
 get_policy
@@ -849,8 +826,6 @@
 With the LDAP KDC database module, the reference count field is not
 meaningful.
 
-.. _get_policy_end:
-
 .. _list_policies:
 
 list_policies
@@ -881,8 +856,6 @@
     test-pol-nopw
     kadmin:
 
-.. _list_policies_end:
-
 .. _ktadd:
 
 ktadd
@@ -932,8 +905,6 @@
          FILE:/tmp/foo-new-keytab
     kadmin:
 
-.. _ktadd_end:
-
 .. _ktremove:
 
 ktremove
@@ -968,8 +939,6 @@
          FILE:/etc/krb5.keytab
     kadmin:
 
-.. _ktremove_end:
-
 lock
 ~~~~

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/appl_servers.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/appl_servers.rst Changed

@@ -4,9 +4,9 @@
 If you need to install the Kerberos V5 programs on an application
 server, please refer to the Kerberos V5 Installation Guide.  Once you
 have installed the software, you need to add that host to the Kerberos
-database (see :ref:`add_mod_del_princs`), and generate a keytab for
-that host, that contains the host's key.  You also need to make sure
-the host's clock is within your maximum clock skew of the KDCs.
+database (see :ref:`principals`), and generate a keytab for that host,
+that contains the host's key.  You also need to make sure the host's
+clock is within your maximum clock skew of the KDCs.
 
 
 Keytabs
@@ -30,34 +30,23 @@
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To generate a keytab, or to add a principal to an existing keytab, use
-the **ktadd** command from kadmin.
-
-.. include:: admin_commands/kadmin_local.rst
-   :start-after:  _ktadd:
-   :end-before: _ktadd_end:
-
-
-Examples
-########
-
-Here is a sample session, using configuration files that enable only
-AES encryption::
+the **ktadd** command from kadmin.  Here is a sample session, using
+configuration files that enable only AES encryption::
 
     kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
     Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
     Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
-    kadmin:
 
 
 Removing principals from keytabs
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To remove a principal from an existing keytab, use the kadmin
-**ktremove** command.
+**ktremove** command::
 
-.. include:: admin_commands/kadmin_local.rst
-   :start-after:  _ktremove:
-   :end-before: _ktremove_end:
+    kadmin:  ktremove host/daffodil.mit.edu@ATHENA.MIT.EDU
+    Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
+    Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
 
 
 Using a keytab to acquire client credentials

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/conf_files/krb5_conf.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/conf_files/krb5_conf.rst Changed

@@ -95,6 +95,18 @@
 
 The libdefaults section may contain any of the following relations:
 
+**allow_des3**
+    Permit the KDC to issue tickets with des3-cbc-sha1 session keys.
+    In future releases, this flag will allow des3-cbc-sha1 to be used
+    at all.  The default value for this tag is false.  (Added in
+    release 1.21.)
+
+**allow_rc4**
+    Permit the KDC to issue tickets with arcfour-hmac session keys.
+    In future releases, this flag will allow arcfour-hmac to be used
+    at all.  The default value for this tag is false.  (Added in
+    release 1.21.)
+
 **allow_weak_crypto**
     If this flag is set to false, then weak encryption types (as noted
     in :ref:`Encryption_types` in :ref:`kdc.conf(5)`) will be filtered
@@ -1011,7 +1023,7 @@
     All keyword/values are optional.  *modname* specifies the location
     of a library implementing PKCS #11.  If a value is encountered
     with no keyword, it is assumed to be the *modname*.  If no
-    module-name is specified, the default is ``opensc-pkcs11.so``.
+    module-name is specified, the default is |pkcs11_modname|.
     ``slotid=`` and/or ``token=`` may be specified to force the use of
     a particular smard card reader or token if there is more than one
     available.  ``certid=`` and/or ``certlabel=`` may be specified to

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/conf_ldap.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/conf_ldap.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/database.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/database.rst Changed

@@ -39,29 +39,7 @@
 commands and options.
 
 
-kadmin options
---------------
-
-You can invoke :ref:`kadmin(1)` or kadmin.local with any of the
-following options:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: kadmin_synopsis:
- :end-before: kadmin_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _kadmin_options:
- :end-before: _kadmin_options_end:
-
-
-Date Format
------------
-
-For the supported date-time formats see :ref:`getdate` section
-in :ref:`datetime`.
-
+.. _principals:
 
 Principals
 ----------
@@ -69,122 +47,52 @@
 Each entry in the Kerberos database contains a Kerberos principal and
 the attributes and policies associated with that principal.
 
-
-.. _add_mod_del_princs:
-
-Adding, modifying and deleting principals
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
 To add a principal to the database, use the :ref:`kadmin(1)`
-**add_principal** command.
-
-To modify attributes of a principal, use the kadmin
-**modify_principal** command.
-
-To delete a principal, use the kadmin **delete_principal** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_principal:
- :end-before: _add_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_principal:
- :end-before: _modify_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_principal:
- :end-before: _delete_principal_end:
+**add_principal** command. User principals should usually be created
+with the ``+requires_preauth -allow_svr`` options to help mitigate
+dictionary attacks (see :ref:`dictionary`)::
 
+ kadmin: addprinc +requires_preauth -allow_svr alice
+ Enter password for principal "alice@KRBTEST.COM":
+ Re-enter password for principal "alice@KRBTEST.COM":
 
-Examples
-########
+User principals which will authenticate with :ref:`pkinit` should
+instead by created with the ``-nokey`` option:
 
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is::
+ kadmin: addprinc -nokey alice
 
- kadmin: addprinc -x dn=cn=jennifer,dc=example,dc=com jennifer
- No policy specified for "jennifer@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal jennifer@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal jennifer@ATHENA.MIT.EDU: <=Type it again.
- Principal "jennifer@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is::
-
- kadmin: addprinc -x containerdn=dc=example,dc=com -x linkdn=cn=david,dc=example,dc=com david
- No policy specified for "david@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal david@ATHENA.MIT.EDU: <=Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+Service principals can be created with the ``-nokey`` option;
+long-term keys will be added when a keytab is generated::
 
-If you want to associate a ticket policy to a principal, all you need
-to do is::
+ kadmin: addprinc -nokey host/foo.mit.edu
+ kadmin: ktadd -k foo.keytab host/foo.mit.edu
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
 
- kadmin: modprinc -x tktpolicy=userpolicy david
- Principal "david@ATHENA.MIT.EDU" modified.
- kadmin:
-
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called "stduser", with a temporary
-password (which you want the user to change immediately), you would
-type the following::
-
- kadmin: addprinc david -expire "1/1/2000 12:01am EST" -policy stduser +needchange
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal
- david@ATHENA.MIT.EDU: <= Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+To modify attributes of an existing principal, use the kadmin
+**modify_principal** command::
 
-If you want to delete a principal::
+ kadmin: modprinc -expire tomorrow alice
+ Principal "alice@KRBTEST.COM" modified.
 
- kadmin: delprinc jennifer
- Are you sure you want to delete the principal
- "jennifer@ATHENA.MIT.EDU"? (yes/no): yes
- Principal "jennifer@ATHENA.MIT.EDU" deleted.
- Make sure that you have removed this principal from
- all ACLs before reusing.
- kadmin:
+To delete a principal, use the kadmin **delete_principal** command::
 
+ kadmin: delprinc alice
+ Are you sure you want to delete the principal "alice@KRBTEST.COM"? (yes/no): yes
+ Principal "alice@KRBTEST.COM" deleted.
+ Make sure that you have removed this principal from all ACLs before reusing.
 
-Retrieving information about a principal
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To change a principal's password, use the kadmin **change_password**
+command. Password changes made through kadmin are subject to the same
+password policies as would apply to password changes made through
+:ref:`kpasswd(1)`.
 
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the :ref:`kadmin(1)` **get_principal** command.
+To view the attributes of a principal, use the kadmin`
+**get_principal** command.
 
 To generate a listing of principals, use the kadmin
 **list_principals** command.
 
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_principal:
- :end-before: _get_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_principals:
- :end-before: _list_principals_end:
-
-
-Changing passwords
-~~~~~~~~~~~~~~~~~~
-
-To change a principal's password use the :ref:`kadmin(1)`
-**change_password** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _change_password:
- :end-before: _change_password_end:
-
-.. note::
-
- Password changes through kadmin are subject to the same
- password policies as would apply to password changes through
- :ref:`kpasswd(1)`.
-
 
 .. _policies:
 
@@ -196,60 +104,25 @@
 and character classes a password must contain, and the number of old
 passwords kept in the database.
 
+To add a new policy, use the :ref:`kadmin(1)` **add_policy** command::
 
-Adding, modifying and deleting policies
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To add a new policy, use the :ref:`kadmin(1)` **add_policy** command.
+ kadmin: addpol -maxlife "1 year" -history 3 stduser
 
 To modify attributes of a principal, use the kadmin **modify_policy**
+command. To delete a policy, use the kadmin **delete_policy**
 command.
 
-To delete a policy, use the kadmin **delete_policy** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_policy:
- :end-before: _add_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_policy:
- :end-before: _modify_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_policy:
- :end-before: _delete_policy_end:
-
-.. note::
-
- You must cancel the policy from *all* principals before
- deleting it. The *delete_policy* command will fail if the policy
- is in use by any principals.
-
-
-Retrieving policies
-~~~~~~~~~~~~~~~~~~~
+To associate a policy with a principal, use the kadmin
+**modify_principal** command with the **-policy** option:
 
-To retrieve a policy, use the :ref:`kadmin(1)` **get_policy** command.
+ kadmin: modprinc -policy stduser alice
+ Principal "alice@KRBTEST.COM" modified.
 
-You can retrieve the list of policies with the kadmin
-**list_policies** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_policy:
- :end-before: _get_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_policies:
- :end-before: _list_policies_end:
-
-
-Policies and principals
-~~~~~~~~~~~~~~~~~~~~~~~
-
-Policies can be applied to principals as they are created by using
-the **-policy** flag to :ref:`add_principal`. Existing principals can
-be modified by using the **-policy** or **-clearpolicy** flag to
-:ref:`modify_principal`.
+A principal entry may be associated with a nonexistent policy, either
+because the policy did not exist at the time of associated or was
+deleted afterwards. kadmin will warn when associated a principal with
+a nonexistent policy, and will annotate the policy name with "does
+not exist" in the **get_principal** output.
 
 
 .. _updating_history_key:
@@ -302,175 +175,69 @@
 -----------------------------------
 
 The :ref:`kdb5_util(8)` command is the primary tool for administrating
-the Kerberos database.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_synopsis:
- :end-before: _kdb5_util_synopsis_end:
-
-**OPTIONS**
+the Kerberos database when using the DB2 or LMDB modules (see
+:ref:`dbtypes`). Creating a database is described in
+:ref:`create_db`.
 
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_options:
- :end-before: _kdb5_util_options_end:
-
-.. toctree::
- :maxdepth: 1
+To create a stash file using the master password (because the database
+was not created with one using the ``create -s`` flag, or after
+restoring from a backup which did not contain the stash file), use the
+kdb5_util **stash** command::
 
+ $ kdb5_util stash
+ kdb5_util: Cannot find/read stored master key while reading master key
+ kdb5_util: Warning: proceeding without master key
+ Enter KDC database master key: <= Type the KDC database master password.
 
-Dumping a Kerberos database to a file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To destroy a database, use the kdb5_util destroy command::
 
-To dump a Kerberos database into a file, use the :ref:`kdb5_util(8)`
-**dump** command on one of the KDCs.
+ $ kdb5_util destroy
+ Deleting KDC database stored in '/var/krb5kdc/principal', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database '/var/krb5kdc/principal'...
+ ** Database '/var/krb5kdc/principal' destroyed.
 
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_dump:
- :end-before: _kdb5_util_dump_end:
 
+.. _restore_from_dump:
 
-Examples
-########
+Dumping and loading a Kerberos database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-::
+To dump a Kerberos database into a text file for backup or transfer
+purposes, use the :ref:`kdb5_util(8)` **dump** command on one of the
+KDCs::
 
- shell% kdb5_util dump dumpfile
- shell%
+ $ kdb5_util dump dumpfile
 
- shell% kbd5_util dump -verbose dumpfile
+ $ kbd5_util dump -verbose dumpfile
 kadmin/admin@ATHENA.MIT.EDU
 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
 kadmin/history@ATHENA.MIT.EDU
 K/M@ATHENA.MIT.EDU
 kadmin/changepw@ATHENA.MIT.EDU
- shell%
 
-If you specify which principals to dump, you must use the full
-principal, as in the following example::
+You may specify which principals to dump, using full principal names
+including realm::
 
- shell% kdb5_util dump -verbose dumpfile K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
+ $ kdb5_util dump -verbose someprincs K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
 kadmin/admin@ATHENA.MIT.EDU
 K/M@ATHENA.MIT.EDU
- shell%
-
-Otherwise, the principals will not match those in the database and
-will not be dumped::
-
- shell% kdb5_util dump -verbose dumpfile K/M kadmin/admin
- shell%
-
-If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.
-
-
-.. _restore_from_dump:
-
-Restoring a Kerberos database from a dump file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To restore a Kerberos database dump from a file, use the
-:ref:`kdb5_util(8)` **load** command on one of the KDCs.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_load:
- :end-before: _kdb5_util_load_end:
-
+:ref:`kdb5_util(8)` **load** command::
 
-Examples
-########
+ $ kdb5_util load dumpfile
 
-To dump a single principal and later load it, updating the database:
-
-::
-
- shell% kdb5_util dump dumpfile principal@REALM
- shell%
-
- shell% kdb5_util load -update dumpfile
- shell%
+To update an existing database with a partial dump file containing
+only some principals, use the ``-update`` flag::
 
+ $ kdb5_util load -update someprincs
 
 .. note::
 
 If the database file exists, and the *-update* flag was not
 given, *kdb5_util* will overwrite the existing database.
 
-.. note::
-
- Using kdb5_util to dump and reload the principal database is
- only necessary when upgrading from versions of krb5 prior
- to 1.2.0---newer versions will use the existing database as-is.
-
-
-.. _create_stash:
-
-Creating a stash file
-~~~~~~~~~~~~~~~~~~~~~
-
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as :ref:`kadmind(8)`, :ref:`krb5kdc(8)`, and
-:ref:`kdb5_util(8)`.
-
-To create a stash file, use the :ref:`kdb5_util(8)` **stash** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_stash:
- :end-before: _kdb5_util_stash_end:
-
-
-Example
-#######
-
- shell% kdb5_util stash
- kdb5_util: Cannot find/read stored master key while reading master key
- kdb5_util: Warning: proceeding without master key
- Enter KDC database master key: <= Type the KDC database master password.
- shell%
-
-If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your :ref:`kdc.conf(5)` file.
-
-
-Creating and destroying a Kerberos database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new Kerberos database, use the
-:ref:`kdb5_util(8)` **create** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_create:
- :end-before: _kdb5_util_create_end:
-
-If you need to destroy the current Kerberos database, use the
-:ref:`kdb5_util(8)` **destroy** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_destroy:
- :end-before: _kdb5_util_destroy_end:
-
-
-Examples
-########
-
-::
-
- shell% kdb5_util -r ATHENA.MIT.EDU create -s
- Loading random data
- Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
- master key name 'K/M@ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key: <= Type the master password.
- Re-enter KDC database master key to verify: <= Type it again.
- shell%
-
- shell% kdb5_util -r ATHENA.MIT.EDU destroy
- Deleting KDC database stored in '/usr/local/var/krb5kdc/principal', are you sure?
- (type 'yes' to confirm)? <= yes
- OK, deleting database '/usr/local/var/krb5kdc/principal'...
- ** Database '/usr/local/var/krb5kdc/principal' destroyed.
- shell%
-
 
 .. _updating_master_key:
 
@@ -538,152 +305,89 @@
 Operations on the LDAP database
 -------------------------------
 
-The :ref:`kdb5_ldap_util(8)` is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_synopsis:
- :end-before: _kdb5_ldap_util_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_options:
- :end-before: _kdb5_ldap_util_options_end:
-
-
-.. _ldap_create_realm:
-
-Creating a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new realm, use the :ref:`kdb5_ldap_util(8)`
-**create** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create:
- :end-before: _kdb5_ldap_util_create_end:
-
-
-.. _ldap_mod_realm:
-
-Modifying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to modify a realm, use the :ref:`kdb5_ldap_util(8)`
-**modify** command as follows.
+The :ref:`kdb5_ldap_util(8)` command is the primary tool for
+administrating the Kerberos database when using the LDAP module.
+Creating an LDAP Kerberos database is describe in :ref:`conf_ldap`.
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify:
- :end-before: _kdb5_ldap_util_modify_end:
+To view a list of realms in the LDAP database, use the kdb5_ldap_util
+**list** command::
 
+ $ kdb5_ldap_util list
+ KRBTEST.COM
 
-Destroying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To modify the attributes of a realm, use the kdb5_ldap_util **modify**
+command. For example, to change the default realm's maximum ticket
+life::
 
-If you need to destroy a Kerberos realm, use the
-:ref:`kdb5_ldap_util(8)` **destroy** command as follows.
+ $ kdb5_ldap_util modify -maxtktlife "10 hours"
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy:
- :end-before: _kdb5_ldap_util_destroy_end:
+To display the attributes of a realm, use the kdb5_ldap_util **view**
+command::
 
+ $ kdb5_ldap_util view
+ Realm Name: KRBTEST.COM
+ Maximum Ticket Life: 0 days 00:10:00
 
-Retrieving information about a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To remove a realm from the LDAP database, destroying its contents, use
+the kdb5_ldap_util **destroy** command::
 
-If you need to display the attributes of a realm, use the
-:ref:`kdb5_ldap_util(8)` **view** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view:
- :end-before: _kdb5_ldap_util_view_end:
-
-
-Listing available Kerberos realms
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to display the list of the realms, use the
-:ref:`kdb5_ldap_util(8)` **list** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list:
- :end-before: _kdb5_ldap_util_list_end:
-
-
-.. _stash_ldap:
-
-Stashing service object's password
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`kdb5_ldap_util(8)` **stashsrvpw** command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_stashsrvpw:
- :end-before: _kdb5_ldap_util_stashsrvpw_end:
+ $ kdb5_ldap_util destroy
+ Deleting KDC database of 'KRBTEST.COM', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database of 'KRBTEST.COM'...
+ ** Database of 'KRBTEST.COM' destroyed.
 
 
 Ticket Policy operations
 ~~~~~~~~~~~~~~~~~~~~~~~~
 
-Creating a Ticket Policy
-########################
-
-To create a new ticket policy in directory , use the
-:ref:`kdb5_ldap_util(8)` **create_policy** command. Ticket policy
-objects are created under the realm container.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create_policy:
- :end-before: _kdb5_ldap_util_create_policy_end:
-
-
-Modifying a Ticket Policy
-#########################
-
-To modify a ticket policy in directory, use the
-:ref:`kdb5_ldap_util(8)` **modify_policy** command.
+Unlike the DB2 and LMDB modules, the LDAP module supports ticket
+policy objects, which can be associated with principals to restrict
+maximum ticket lifetimes and set mandatory principal flags. Ticket
+policy objects are distinct from the password policies described
+earlier on this page, and are chiefly managed through kdb5_ldap_util
+rather than kadmin. To create a new ticket policy, use the
+kdb5_ldap_util **create_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify_policy:
- :end-before: _kdb5_ldap_util_modify_policy_end:
+ $ kdb5_ldap_util create_policy -maxrenewlife "2 days" users
 
+To associate a ticket policy with a principal, use the
+:ref:`kadmin(1)` **modify_principal** (or **add_principal**) command
+with the **-x tktpolicy=**\ *policy* option::
 
-Retrieving Information About a Ticket Policy
-############################################
+ $ kadmin.local modprinc -x tktpolicy=users alice
 
-To display the attributes of a ticket policy, use the
-:ref:`kdb5_ldap_util(8)` **view_policy** command.
+To remove a ticket policy reference from a principal, use the same
+command with an empty *policy*::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view_policy:
- :end-before: _kdb5_ldap_util_view_policy_end:
+ $ kadmin.local modprinc -x tktpolicy= alice
 
+To list the existing ticket policy objects, use the kdb5_ldap_util
+**list_policy** command::
 
-Destroying a Ticket Policy
-##########################
+ $ kdb5_ldap_util list_policy
+ users
 
-To destroy an existing ticket policy, use the :ref:`kdb5_ldap_util(8)`
-**destroy_policy** command.
+To modify the attributes of a ticket policy object, use the
+kdb5_ldap_util **modify_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy_policy:
- :end-before: _kdb5_ldap_util_destroy_policy_end:
+ $ kdb5_ldap_util modify_policy -allow_svr +requires_preauth users
 
+To view the attributes of a ticket policy object, use the
+kdb5_ldap_util **view_policy** command::
 
-Listing available Ticket Policies
-#################################
+ $ kdb5_ldap_util view_policy users
+ Ticket policy: users
+ Maximum renewable life: 2 days 00:00:00
+ Ticket flags: REQUIRES_PRE_AUTH DISALLOW_SVR
 
-To list the name of ticket policies in a realm, use the
-:ref:`kdb5_ldap_util(8)` **list_policy** command.
+To destroy an ticket policy object, use the kdb5_ldap_util
+**destroy_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list_policy:
- :end-before: _kdb5_ldap_util_list_policy_end:
+ $ kdb5_ldap_util destroy_policy users
+ This will delete the policy object 'users', are you sure?
+ (type 'yes' to confirm)? yes
+ ** policy object 'users' deleted.
 
 
 .. _xrealm_authn:

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/dbtypes.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/dbtypes.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/enctypes.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/enctypes.rst Changed

@@ -48,12 +48,15 @@
 The KDC chooses the session key enctype by taking the intersection of
 its **permitted_enctypes** list, the list of long-term keys for the
 most recent kvno of the service, and the client's requested list of
-enctypes.
+enctypes.  Starting in krb5-1.21, all services are assumed to support
+aes256-cts-hmac-sha1-96; also, des3-cbc-sha1 and arcfour-hmac session
+keys will not be issued by default.
 
 Starting in krb5-1.11, it is possible to set a string attribute on a
 service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal.  See :ref:`set_string`
-in :ref:`kadmin(1)` for details.
+issue for service tickets for that principal, overriding the service's
+long-term keys and the assumption of aes256-cts-hmac-sha1-96 support.
+See :ref:`set_string` in :ref:`kadmin(1)` for details.
 
 
 Choosing enctypes for a service
@@ -87,6 +90,20 @@
     acceptable risk for your environment and the weak enctypes are
     required for backward compatibility.
 
+**allow_des3**
+    was added in release 1.21 and defaults to *false*.  Unless this
+    flag is set to *true*, the KDC will not issue tickets with
+    des3-cbc-sha1 session keys.  In a future release, this flag will
+    control whether des3-cbc-sha1 is permitted in similar fashion to
+    weak enctypes.
+
+**allow_rc4**
+    was added in release 1.21 and defaults to *false*.  Unless this
+    flag is set to *true*, the KDC will not issue tickets with
+    arcfour-hmac session keys.  In a future release, this flag will
+    control whether arcfour-hmac is permitted in similar fashion to
+    weak enctypes.
+
 **permitted_enctypes**
     controls the set of enctypes that a service will permit for
     session keys and for ticket and authenticator encryption.  The KDC

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/install_appl_srv.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/install_appl_srv.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/admin/install_kdc.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/admin/install_kdc.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/appdev/refs/macros/index.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/appdev/refs/macros/index.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/build/options2configure.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/build/options2configure.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/conf.py -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/conf.py Changed

@@ -45,7 +45,7 @@
 
 # General information about the project.
 project = u'MIT Kerberos'
-copyright = u'1985-2022, MIT'
+copyright = u'1985-2023, MIT'
 
 # The version info for the project you're documenting, acts as replacement for
 # |version| and |release|, also used in various other places throughout the
@@ -242,6 +242,7 @@
 ccache = '``@CCNAME@``'
 keytab = '``@KTNAME@``'
 ckeytab = '``@CKTNAME@``'
+ pkcs11_modname = '``@PKCS11MOD@``'
 elif 'pathsubs' in tags:
 # Read configured paths from a file produced by the build system.
 exec(open("paths.py").read())
@@ -255,6 +256,7 @@
 ccache = ':ref:`DEFCCNAME <paths>`'
 keytab = ':ref:`DEFKTNAME <paths>`'
 ckeytab = ':ref:`DEFCKTNAME <paths>`'
+ pkcs11_modname = ':ref:`PKCS11_MODNAME <paths>`'
 
 rst_epilog = '\n'
 
@@ -275,6 +277,7 @@
 rst_epilog += '.. |ccache| replace:: %s\n' % ccache
 rst_epilog += '.. |keytab| replace:: %s\n' % keytab
 rst_epilog += '.. |ckeytab| replace:: %s\n' % ckeytab
+ rst_epilog += '.. |pkcs11_modname| replace:: %s\n' % pkcs11_modname
 rst_epilog += '''
 .. |krb5conf| replace:: ``/etc/krb5.conf``
 .. |defkeysalts| replace:: ``aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal``

_service:tar_scm:krb5-1.20.1.tar.gz/doc/copyright.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/copyright.rst Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/.buildinfo -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/.buildinfo Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/admin_commands/kadmin_local.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/admin_commands/kadmin_local.rst.txt Changed

@@ -28,8 +28,6 @@
 **-x** *db_args*
 command args...
 
-.. _kadmin_synopsis_end:
-
 
 DESCRIPTION
 -----------
@@ -142,8 +140,6 @@
     Specifies the database specific arguments.  See the next section
     for supported options.
 
-.. _kadmin_options_end:
-
 Starting with release 1.14, if any command-line arguments remain after
 the options, they will be treated as a single query to be executed.
 This mode of operation is intended for scripts and behaves differently
@@ -426,8 +422,6 @@
     Principal "jennifer@ATHENA.MIT.EDU" created.
     kadmin:
 
-.. _add_principal_end:
-
 .. _modify_principal:
 
 modify_principal
@@ -451,8 +445,6 @@
     authentication attempts without enough time between them according
     to its password policy) so that it can successfully authenticate.
 
-.. _modify_principal_end:
-
 .. _rename_principal:
 
 rename_principal
@@ -468,8 +460,6 @@
 
 Alias: **renprinc**
 
-.. _rename_principal_end:
-
 .. _delete_principal:
 
 delete_principal
@@ -484,8 +474,6 @@
 
 Alias: **delprinc**
 
-.. _delete_principal_end:
-
 .. _change_password:
 
 change_password
@@ -529,8 +517,6 @@
     Password for systest@BLEEP.COM changed.
     kadmin:
 
-.. _change_password_end:
-
 .. _purgekeys:
 
 purgekeys
@@ -546,8 +532,6 @@
 
 This command requires the **modify** privilege.
 
-.. _purgekeys_end:
-
 .. _get_principal:
 
 get_principal
@@ -588,8 +572,6 @@
     tlyu/admin@BLEEP.COM     786100034 0    0
     kadmin:
 
-.. _get_principal_end:
-
 .. _list_principals:
 
 list_principals
@@ -618,8 +600,6 @@
     testuser@SECURE-TEST.OV.COM
     kadmin:
 
-.. _list_principals_end:
-
 .. _get_strings:
 
 get_strings
@@ -633,8 +613,6 @@
 
 Alias: **getstrs**
 
-.. _get_strings_end:
-
 .. _set_string:
 
 set_string
@@ -671,6 +649,15 @@
     is in the same format as those used by the **pkinit_cert_match**
     option in :ref:`krb5.conf(5)`.  (New in release 1.16.)
 
+**pac_privsvr_enctype**
+    Forces the encryption type of the PAC KDC checksum buffers to the
+    specified encryption type for tickets issued to this server, by
+    deriving a key from the local krbtgt key if it is of a different
+    encryption type.  It may be necessary to set this value to
+    "aes256-sha1" on the cross-realm krbtgt entry for an Active
+    Directory realm when using aes-sha2 keys on the local krbtgt
+    entry.
+
 This command requires the **modify** privilege.
 
 Alias: **setstr**
@@ -680,8 +667,6 @@
     set_string host/foo.mit.edu session_enctypes aes128-cts
     set_string user@FOO.COM otp "{""type"":""hotp"",""username"":""al""}"
 
-.. _set_string_end:
-
 .. _del_string:
 
 del_string
@@ -695,8 +680,6 @@
 
 Alias: **delstr**
 
-.. _del_string_end:
-
 .. _add_policy:
 
 add_policy
@@ -773,8 +756,6 @@
     kadmin: add_policy -maxlife "2 days" -minlength 5 guests
     kadmin:
 
-.. _add_policy_end:
-
 .. _modify_policy:
 
 modify_policy
@@ -789,8 +770,6 @@
 
 Alias: **modpol**
 
-.. _modify_policy_end:
-
 .. _delete_policy:
 
 delete_policy
@@ -813,8 +792,6 @@
     (yes/no): yes
     kadmin:
 
-.. _delete_policy_end:
-
 .. _get_policy:
 
 get_policy
@@ -849,8 +826,6 @@
 With the LDAP KDC database module, the reference count field is not
 meaningful.
 
-.. _get_policy_end:
-
 .. _list_policies:
 
 list_policies
@@ -881,8 +856,6 @@
     test-pol-nopw
     kadmin:
 
-.. _list_policies_end:
-
 .. _ktadd:
 
 ktadd
@@ -932,8 +905,6 @@
          FILE:/tmp/foo-new-keytab
     kadmin:
 
-.. _ktadd_end:
-
 .. _ktremove:
 
 ktremove
@@ -968,8 +939,6 @@
          FILE:/etc/krb5.keytab
     kadmin:
 
-.. _ktremove_end:
-
 lock
 ~~~~

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/appl_servers.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/appl_servers.rst.txt Changed

@@ -4,9 +4,9 @@
 If you need to install the Kerberos V5 programs on an application
 server, please refer to the Kerberos V5 Installation Guide.  Once you
 have installed the software, you need to add that host to the Kerberos
-database (see :ref:`add_mod_del_princs`), and generate a keytab for
-that host, that contains the host's key.  You also need to make sure
-the host's clock is within your maximum clock skew of the KDCs.
+database (see :ref:`principals`), and generate a keytab for that host,
+that contains the host's key.  You also need to make sure the host's
+clock is within your maximum clock skew of the KDCs.
 
 
 Keytabs
@@ -30,34 +30,23 @@
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To generate a keytab, or to add a principal to an existing keytab, use
-the **ktadd** command from kadmin.
-
-.. include:: admin_commands/kadmin_local.rst
-   :start-after:  _ktadd:
-   :end-before: _ktadd_end:
-
-
-Examples
-########
-
-Here is a sample session, using configuration files that enable only
-AES encryption::
+the **ktadd** command from kadmin.  Here is a sample session, using
+configuration files that enable only AES encryption::
 
     kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
     Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
     Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
-    kadmin:
 
 
 Removing principals from keytabs
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To remove a principal from an existing keytab, use the kadmin
-**ktremove** command.
+**ktremove** command::
 
-.. include:: admin_commands/kadmin_local.rst
-   :start-after:  _ktremove:
-   :end-before: _ktremove_end:
+    kadmin:  ktremove host/daffodil.mit.edu@ATHENA.MIT.EDU
+    Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
+    Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
 
 
 Using a keytab to acquire client credentials

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/conf_files/krb5_conf.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/conf_files/krb5_conf.rst.txt Changed

@@ -95,6 +95,18 @@
 
 The libdefaults section may contain any of the following relations:
 
+**allow_des3**
+    Permit the KDC to issue tickets with des3-cbc-sha1 session keys.
+    In future releases, this flag will allow des3-cbc-sha1 to be used
+    at all.  The default value for this tag is false.  (Added in
+    release 1.21.)
+
+**allow_rc4**
+    Permit the KDC to issue tickets with arcfour-hmac session keys.
+    In future releases, this flag will allow arcfour-hmac to be used
+    at all.  The default value for this tag is false.  (Added in
+    release 1.21.)
+
 **allow_weak_crypto**
     If this flag is set to false, then weak encryption types (as noted
     in :ref:`Encryption_types` in :ref:`kdc.conf(5)`) will be filtered
@@ -1011,7 +1023,7 @@
     All keyword/values are optional.  *modname* specifies the location
     of a library implementing PKCS #11.  If a value is encountered
     with no keyword, it is assumed to be the *modname*.  If no
-    module-name is specified, the default is ``opensc-pkcs11.so``.
+    module-name is specified, the default is |pkcs11_modname|.
     ``slotid=`` and/or ``token=`` may be specified to force the use of
     a particular smard card reader or token if there is more than one
     available.  ``certid=`` and/or ``certlabel=`` may be specified to

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/conf_ldap.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/conf_ldap.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/database.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/database.rst.txt Changed

@@ -39,29 +39,7 @@
 commands and options.
 
 
-kadmin options
---------------
-
-You can invoke :ref:`kadmin(1)` or kadmin.local with any of the
-following options:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: kadmin_synopsis:
- :end-before: kadmin_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _kadmin_options:
- :end-before: _kadmin_options_end:
-
-
-Date Format
------------
-
-For the supported date-time formats see :ref:`getdate` section
-in :ref:`datetime`.
-
+.. _principals:
 
 Principals
 ----------
@@ -69,122 +47,52 @@
 Each entry in the Kerberos database contains a Kerberos principal and
 the attributes and policies associated with that principal.
 
-
-.. _add_mod_del_princs:
-
-Adding, modifying and deleting principals
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
 To add a principal to the database, use the :ref:`kadmin(1)`
-**add_principal** command.
-
-To modify attributes of a principal, use the kadmin
-**modify_principal** command.
-
-To delete a principal, use the kadmin **delete_principal** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_principal:
- :end-before: _add_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_principal:
- :end-before: _modify_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_principal:
- :end-before: _delete_principal_end:
+**add_principal** command. User principals should usually be created
+with the ``+requires_preauth -allow_svr`` options to help mitigate
+dictionary attacks (see :ref:`dictionary`)::
 
+ kadmin: addprinc +requires_preauth -allow_svr alice
+ Enter password for principal "alice@KRBTEST.COM":
+ Re-enter password for principal "alice@KRBTEST.COM":
 
-Examples
-########
+User principals which will authenticate with :ref:`pkinit` should
+instead by created with the ``-nokey`` option:
 
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is::
+ kadmin: addprinc -nokey alice
 
- kadmin: addprinc -x dn=cn=jennifer,dc=example,dc=com jennifer
- No policy specified for "jennifer@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal jennifer@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal jennifer@ATHENA.MIT.EDU: <=Type it again.
- Principal "jennifer@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is::
-
- kadmin: addprinc -x containerdn=dc=example,dc=com -x linkdn=cn=david,dc=example,dc=com david
- No policy specified for "david@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal david@ATHENA.MIT.EDU: <=Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+Service principals can be created with the ``-nokey`` option;
+long-term keys will be added when a keytab is generated::
 
-If you want to associate a ticket policy to a principal, all you need
-to do is::
+ kadmin: addprinc -nokey host/foo.mit.edu
+ kadmin: ktadd -k foo.keytab host/foo.mit.edu
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
 
- kadmin: modprinc -x tktpolicy=userpolicy david
- Principal "david@ATHENA.MIT.EDU" modified.
- kadmin:
-
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called "stduser", with a temporary
-password (which you want the user to change immediately), you would
-type the following::
-
- kadmin: addprinc david -expire "1/1/2000 12:01am EST" -policy stduser +needchange
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal
- david@ATHENA.MIT.EDU: <= Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+To modify attributes of an existing principal, use the kadmin
+**modify_principal** command::
 
-If you want to delete a principal::
+ kadmin: modprinc -expire tomorrow alice
+ Principal "alice@KRBTEST.COM" modified.
 
- kadmin: delprinc jennifer
- Are you sure you want to delete the principal
- "jennifer@ATHENA.MIT.EDU"? (yes/no): yes
- Principal "jennifer@ATHENA.MIT.EDU" deleted.
- Make sure that you have removed this principal from
- all ACLs before reusing.
- kadmin:
+To delete a principal, use the kadmin **delete_principal** command::
 
+ kadmin: delprinc alice
+ Are you sure you want to delete the principal "alice@KRBTEST.COM"? (yes/no): yes
+ Principal "alice@KRBTEST.COM" deleted.
+ Make sure that you have removed this principal from all ACLs before reusing.
 
-Retrieving information about a principal
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To change a principal's password, use the kadmin **change_password**
+command. Password changes made through kadmin are subject to the same
+password policies as would apply to password changes made through
+:ref:`kpasswd(1)`.
 
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the :ref:`kadmin(1)` **get_principal** command.
+To view the attributes of a principal, use the kadmin`
+**get_principal** command.
 
 To generate a listing of principals, use the kadmin
 **list_principals** command.
 
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_principal:
- :end-before: _get_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_principals:
- :end-before: _list_principals_end:
-
-
-Changing passwords
-~~~~~~~~~~~~~~~~~~
-
-To change a principal's password use the :ref:`kadmin(1)`
-**change_password** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _change_password:
- :end-before: _change_password_end:
-
-.. note::
-
- Password changes through kadmin are subject to the same
- password policies as would apply to password changes through
- :ref:`kpasswd(1)`.
-
 
 .. _policies:
 
@@ -196,60 +104,25 @@
 and character classes a password must contain, and the number of old
 passwords kept in the database.
 
+To add a new policy, use the :ref:`kadmin(1)` **add_policy** command::
 
-Adding, modifying and deleting policies
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To add a new policy, use the :ref:`kadmin(1)` **add_policy** command.
+ kadmin: addpol -maxlife "1 year" -history 3 stduser
 
 To modify attributes of a principal, use the kadmin **modify_policy**
+command. To delete a policy, use the kadmin **delete_policy**
 command.
 
-To delete a policy, use the kadmin **delete_policy** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_policy:
- :end-before: _add_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_policy:
- :end-before: _modify_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_policy:
- :end-before: _delete_policy_end:
-
-.. note::
-
- You must cancel the policy from *all* principals before
- deleting it. The *delete_policy* command will fail if the policy
- is in use by any principals.
-
-
-Retrieving policies
-~~~~~~~~~~~~~~~~~~~
+To associate a policy with a principal, use the kadmin
+**modify_principal** command with the **-policy** option:
 
-To retrieve a policy, use the :ref:`kadmin(1)` **get_policy** command.
+ kadmin: modprinc -policy stduser alice
+ Principal "alice@KRBTEST.COM" modified.
 
-You can retrieve the list of policies with the kadmin
-**list_policies** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_policy:
- :end-before: _get_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_policies:
- :end-before: _list_policies_end:
-
-
-Policies and principals
-~~~~~~~~~~~~~~~~~~~~~~~
-
-Policies can be applied to principals as they are created by using
-the **-policy** flag to :ref:`add_principal`. Existing principals can
-be modified by using the **-policy** or **-clearpolicy** flag to
-:ref:`modify_principal`.
+A principal entry may be associated with a nonexistent policy, either
+because the policy did not exist at the time of associated or was
+deleted afterwards. kadmin will warn when associated a principal with
+a nonexistent policy, and will annotate the policy name with "does
+not exist" in the **get_principal** output.
 
 
 .. _updating_history_key:
@@ -302,175 +175,69 @@
 -----------------------------------
 
 The :ref:`kdb5_util(8)` command is the primary tool for administrating
-the Kerberos database.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_synopsis:
- :end-before: _kdb5_util_synopsis_end:
-
-**OPTIONS**
+the Kerberos database when using the DB2 or LMDB modules (see
+:ref:`dbtypes`). Creating a database is described in
+:ref:`create_db`.
 
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_options:
- :end-before: _kdb5_util_options_end:
-
-.. toctree::
- :maxdepth: 1
+To create a stash file using the master password (because the database
+was not created with one using the ``create -s`` flag, or after
+restoring from a backup which did not contain the stash file), use the
+kdb5_util **stash** command::
 
+ $ kdb5_util stash
+ kdb5_util: Cannot find/read stored master key while reading master key
+ kdb5_util: Warning: proceeding without master key
+ Enter KDC database master key: <= Type the KDC database master password.
 
-Dumping a Kerberos database to a file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To destroy a database, use the kdb5_util destroy command::
 
-To dump a Kerberos database into a file, use the :ref:`kdb5_util(8)`
-**dump** command on one of the KDCs.
+ $ kdb5_util destroy
+ Deleting KDC database stored in '/var/krb5kdc/principal', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database '/var/krb5kdc/principal'...
+ ** Database '/var/krb5kdc/principal' destroyed.
 
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_dump:
- :end-before: _kdb5_util_dump_end:
 
+.. _restore_from_dump:
 
-Examples
-########
+Dumping and loading a Kerberos database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-::
+To dump a Kerberos database into a text file for backup or transfer
+purposes, use the :ref:`kdb5_util(8)` **dump** command on one of the
+KDCs::
 
- shell% kdb5_util dump dumpfile
- shell%
+ $ kdb5_util dump dumpfile
 
- shell% kbd5_util dump -verbose dumpfile
+ $ kbd5_util dump -verbose dumpfile
 kadmin/admin@ATHENA.MIT.EDU
 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
 kadmin/history@ATHENA.MIT.EDU
 K/M@ATHENA.MIT.EDU
 kadmin/changepw@ATHENA.MIT.EDU
- shell%
 
-If you specify which principals to dump, you must use the full
-principal, as in the following example::
+You may specify which principals to dump, using full principal names
+including realm::
 
- shell% kdb5_util dump -verbose dumpfile K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
+ $ kdb5_util dump -verbose someprincs K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
 kadmin/admin@ATHENA.MIT.EDU
 K/M@ATHENA.MIT.EDU
- shell%
-
-Otherwise, the principals will not match those in the database and
-will not be dumped::
-
- shell% kdb5_util dump -verbose dumpfile K/M kadmin/admin
- shell%
-
-If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.
-
-
-.. _restore_from_dump:
-
-Restoring a Kerberos database from a dump file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To restore a Kerberos database dump from a file, use the
-:ref:`kdb5_util(8)` **load** command on one of the KDCs.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_load:
- :end-before: _kdb5_util_load_end:
-
+:ref:`kdb5_util(8)` **load** command::
 
-Examples
-########
+ $ kdb5_util load dumpfile
 
-To dump a single principal and later load it, updating the database:
-
-::
-
- shell% kdb5_util dump dumpfile principal@REALM
- shell%
-
- shell% kdb5_util load -update dumpfile
- shell%
+To update an existing database with a partial dump file containing
+only some principals, use the ``-update`` flag::
 
+ $ kdb5_util load -update someprincs
 
 .. note::
 
 If the database file exists, and the *-update* flag was not
 given, *kdb5_util* will overwrite the existing database.
 
-.. note::
-
- Using kdb5_util to dump and reload the principal database is
- only necessary when upgrading from versions of krb5 prior
- to 1.2.0---newer versions will use the existing database as-is.
-
-
-.. _create_stash:
-
-Creating a stash file
-~~~~~~~~~~~~~~~~~~~~~
-
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as :ref:`kadmind(8)`, :ref:`krb5kdc(8)`, and
-:ref:`kdb5_util(8)`.
-
-To create a stash file, use the :ref:`kdb5_util(8)` **stash** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_stash:
- :end-before: _kdb5_util_stash_end:
-
-
-Example
-#######
-
- shell% kdb5_util stash
- kdb5_util: Cannot find/read stored master key while reading master key
- kdb5_util: Warning: proceeding without master key
- Enter KDC database master key: <= Type the KDC database master password.
- shell%
-
-If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your :ref:`kdc.conf(5)` file.
-
-
-Creating and destroying a Kerberos database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new Kerberos database, use the
-:ref:`kdb5_util(8)` **create** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_create:
- :end-before: _kdb5_util_create_end:
-
-If you need to destroy the current Kerberos database, use the
-:ref:`kdb5_util(8)` **destroy** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_destroy:
- :end-before: _kdb5_util_destroy_end:
-
-
-Examples
-########
-
-::
-
- shell% kdb5_util -r ATHENA.MIT.EDU create -s
- Loading random data
- Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
- master key name 'K/M@ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key: <= Type the master password.
- Re-enter KDC database master key to verify: <= Type it again.
- shell%
-
- shell% kdb5_util -r ATHENA.MIT.EDU destroy
- Deleting KDC database stored in '/usr/local/var/krb5kdc/principal', are you sure?
- (type 'yes' to confirm)? <= yes
- OK, deleting database '/usr/local/var/krb5kdc/principal'...
- ** Database '/usr/local/var/krb5kdc/principal' destroyed.
- shell%
-
 
 .. _updating_master_key:
 
@@ -538,152 +305,89 @@
 Operations on the LDAP database
 -------------------------------
 
-The :ref:`kdb5_ldap_util(8)` is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_synopsis:
- :end-before: _kdb5_ldap_util_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_options:
- :end-before: _kdb5_ldap_util_options_end:
-
-
-.. _ldap_create_realm:
-
-Creating a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new realm, use the :ref:`kdb5_ldap_util(8)`
-**create** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create:
- :end-before: _kdb5_ldap_util_create_end:
-
-
-.. _ldap_mod_realm:
-
-Modifying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to modify a realm, use the :ref:`kdb5_ldap_util(8)`
-**modify** command as follows.
+The :ref:`kdb5_ldap_util(8)` command is the primary tool for
+administrating the Kerberos database when using the LDAP module.
+Creating an LDAP Kerberos database is describe in :ref:`conf_ldap`.
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify:
- :end-before: _kdb5_ldap_util_modify_end:
+To view a list of realms in the LDAP database, use the kdb5_ldap_util
+**list** command::
 
+ $ kdb5_ldap_util list
+ KRBTEST.COM
 
-Destroying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To modify the attributes of a realm, use the kdb5_ldap_util **modify**
+command. For example, to change the default realm's maximum ticket
+life::
 
-If you need to destroy a Kerberos realm, use the
-:ref:`kdb5_ldap_util(8)` **destroy** command as follows.
+ $ kdb5_ldap_util modify -maxtktlife "10 hours"
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy:
- :end-before: _kdb5_ldap_util_destroy_end:
+To display the attributes of a realm, use the kdb5_ldap_util **view**
+command::
 
+ $ kdb5_ldap_util view
+ Realm Name: KRBTEST.COM
+ Maximum Ticket Life: 0 days 00:10:00
 
-Retrieving information about a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To remove a realm from the LDAP database, destroying its contents, use
+the kdb5_ldap_util **destroy** command::
 
-If you need to display the attributes of a realm, use the
-:ref:`kdb5_ldap_util(8)` **view** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view:
- :end-before: _kdb5_ldap_util_view_end:
-
-
-Listing available Kerberos realms
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to display the list of the realms, use the
-:ref:`kdb5_ldap_util(8)` **list** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list:
- :end-before: _kdb5_ldap_util_list_end:
-
-
-.. _stash_ldap:
-
-Stashing service object's password
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`kdb5_ldap_util(8)` **stashsrvpw** command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_stashsrvpw:
- :end-before: _kdb5_ldap_util_stashsrvpw_end:
+ $ kdb5_ldap_util destroy
+ Deleting KDC database of 'KRBTEST.COM', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database of 'KRBTEST.COM'...
+ ** Database of 'KRBTEST.COM' destroyed.
 
 
 Ticket Policy operations
 ~~~~~~~~~~~~~~~~~~~~~~~~
 
-Creating a Ticket Policy
-########################
-
-To create a new ticket policy in directory , use the
-:ref:`kdb5_ldap_util(8)` **create_policy** command. Ticket policy
-objects are created under the realm container.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create_policy:
- :end-before: _kdb5_ldap_util_create_policy_end:
-
-
-Modifying a Ticket Policy
-#########################
-
-To modify a ticket policy in directory, use the
-:ref:`kdb5_ldap_util(8)` **modify_policy** command.
+Unlike the DB2 and LMDB modules, the LDAP module supports ticket
+policy objects, which can be associated with principals to restrict
+maximum ticket lifetimes and set mandatory principal flags. Ticket
+policy objects are distinct from the password policies described
+earlier on this page, and are chiefly managed through kdb5_ldap_util
+rather than kadmin. To create a new ticket policy, use the
+kdb5_ldap_util **create_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify_policy:
- :end-before: _kdb5_ldap_util_modify_policy_end:
+ $ kdb5_ldap_util create_policy -maxrenewlife "2 days" users
 
+To associate a ticket policy with a principal, use the
+:ref:`kadmin(1)` **modify_principal** (or **add_principal**) command
+with the **-x tktpolicy=**\ *policy* option::
 
-Retrieving Information About a Ticket Policy
-############################################
+ $ kadmin.local modprinc -x tktpolicy=users alice
 
-To display the attributes of a ticket policy, use the
-:ref:`kdb5_ldap_util(8)` **view_policy** command.
+To remove a ticket policy reference from a principal, use the same
+command with an empty *policy*::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view_policy:
- :end-before: _kdb5_ldap_util_view_policy_end:
+ $ kadmin.local modprinc -x tktpolicy= alice
 
+To list the existing ticket policy objects, use the kdb5_ldap_util
+**list_policy** command::
 
-Destroying a Ticket Policy
-##########################
+ $ kdb5_ldap_util list_policy
+ users
 
-To destroy an existing ticket policy, use the :ref:`kdb5_ldap_util(8)`
-**destroy_policy** command.
+To modify the attributes of a ticket policy object, use the
+kdb5_ldap_util **modify_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy_policy:
- :end-before: _kdb5_ldap_util_destroy_policy_end:
+ $ kdb5_ldap_util modify_policy -allow_svr +requires_preauth users
 
+To view the attributes of a ticket policy object, use the
+kdb5_ldap_util **view_policy** command::
 
-Listing available Ticket Policies
-#################################
+ $ kdb5_ldap_util view_policy users
+ Ticket policy: users
+ Maximum renewable life: 2 days 00:00:00
+ Ticket flags: REQUIRES_PRE_AUTH DISALLOW_SVR
 
-To list the name of ticket policies in a realm, use the
-:ref:`kdb5_ldap_util(8)` **list_policy** command.
+To destroy an ticket policy object, use the kdb5_ldap_util
+**destroy_policy** command::
 
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list_policy:
- :end-before: _kdb5_ldap_util_list_policy_end:
+ $ kdb5_ldap_util destroy_policy users
+ This will delete the policy object 'users', are you sure?
+ (type 'yes' to confirm)? yes
+ ** policy object 'users' deleted.
 
 
 .. _xrealm_authn:

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/dbtypes.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/dbtypes.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/enctypes.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/enctypes.rst.txt Changed

@@ -48,12 +48,15 @@
 The KDC chooses the session key enctype by taking the intersection of
 its **permitted_enctypes** list, the list of long-term keys for the
 most recent kvno of the service, and the client's requested list of
-enctypes.
+enctypes.  Starting in krb5-1.21, all services are assumed to support
+aes256-cts-hmac-sha1-96; also, des3-cbc-sha1 and arcfour-hmac session
+keys will not be issued by default.
 
 Starting in krb5-1.11, it is possible to set a string attribute on a
 service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal.  See :ref:`set_string`
-in :ref:`kadmin(1)` for details.
+issue for service tickets for that principal, overriding the service's
+long-term keys and the assumption of aes256-cts-hmac-sha1-96 support.
+See :ref:`set_string` in :ref:`kadmin(1)` for details.
 
 
 Choosing enctypes for a service
@@ -87,6 +90,20 @@
     acceptable risk for your environment and the weak enctypes are
     required for backward compatibility.
 
+**allow_des3**
+    was added in release 1.21 and defaults to *false*.  Unless this
+    flag is set to *true*, the KDC will not issue tickets with
+    des3-cbc-sha1 session keys.  In a future release, this flag will
+    control whether des3-cbc-sha1 is permitted in similar fashion to
+    weak enctypes.
+
+**allow_rc4**
+    was added in release 1.21 and defaults to *false*.  Unless this
+    flag is set to *true*, the KDC will not issue tickets with
+    arcfour-hmac session keys.  In a future release, this flag will
+    control whether arcfour-hmac is permitted in similar fashion to
+    weak enctypes.
+
 **permitted_enctypes**
     controls the set of enctypes that a service will permit for
     session keys and for ticket and authenticator encryption.  The KDC

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/install_appl_srv.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/install_appl_srv.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/admin/install_kdc.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/admin/install_kdc.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst.txt Changed

_service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM.rst.txt Added

_service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY.rst.txt Added

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/appdev/refs/macros/index.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/appdev/refs/macros/index.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/build/options2configure.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/build/options2configure.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/copyright.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/copyright.rst.txt Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/mitK5defaults.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/mitK5defaults.rst.txt Changed

@@ -59,18 +59,19 @@
 operating system, the paths are generally chosen to match the
 operating system's filesystem layout.
 
-==========================  =============  ===========================  ===========================
-Description                 Symbolic name  Custom build path            Typical OS path
-==========================  =============  ===========================  ===========================
-User programs               BINDIR         ``/usr/local/bin``           ``/usr/bin``
-Libraries and plugins       LIBDIR         ``/usr/local/lib``           ``/usr/lib``
-Parent of KDC state dir     LOCALSTATEDIR  ``/usr/local/var``           ``/var``
-Parent of KDC runtime dir   RUNSTATEDIR    ``/usr/local/var/run``       ``/run``
-Administrative programs     SBINDIR        ``/usr/local/sbin``          ``/usr/sbin``
-Alternate krb5.conf dir     SYSCONFDIR     ``/usr/local/etc``           ``/etc``
-Default ccache name         DEFCCNAME      ``FILE:/tmp/krb5cc_%{uid}``  ``FILE:/tmp/krb5cc_%{uid}``
-Default keytab name         DEFKTNAME      ``FILE:/etc/krb5.keytab``    ``FILE:/etc/krb5.keytab``
-==========================  =============  ===========================  ===========================
+==========================  ==============  ===========================  ===========================
+Description                 Symbolic name   Custom build path            Typical OS path
+==========================  ==============  ===========================  ===========================
+User programs               BINDIR          ``/usr/local/bin``           ``/usr/bin``
+Libraries and plugins       LIBDIR          ``/usr/local/lib``           ``/usr/lib``
+Parent of KDC state dir     LOCALSTATEDIR   ``/usr/local/var``           ``/var``
+Parent of KDC runtime dir   RUNSTATEDIR     ``/usr/local/var/run``       ``/run``
+Administrative programs     SBINDIR         ``/usr/local/sbin``          ``/usr/sbin``
+Alternate krb5.conf dir     SYSCONFDIR      ``/usr/local/etc``           ``/etc``
+Default ccache name         DEFCCNAME       ``FILE:/tmp/krb5cc_%{uid}``  ``FILE:/tmp/krb5cc_%{uid}``
+Default keytab name         DEFKTNAME       ``FILE:/etc/krb5.keytab``    ``FILE:/etc/krb5.keytab``
+Default PKCS11 module       PKCS11_MODNAME  ``opensc-pkcs11.so``         ``opensc-pkcs11.so``
+==========================  ==============  ===========================  ===========================
 
 The default client keytab name (DEFCKTNAME) typically defaults to
 ``FILE:/usr/local/var/krb5/user/%{euid}/client.keytab`` for a custom

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/_sources/mitK5features.rst.txt -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/_sources/mitK5features.rst.txt Changed

@@ -642,6 +642,48 @@
 
   - Converted the remaining Tcl tests to Python.
 
+Release 1.21
+
+* User experience:
+
+  - Added a credential cache type providing compatibility with the
+    macOS 11 native credential cache.
+
+* Developer experience:
+
+  - libkadm5 will use the provided krb5_context object to read
+    configuration values, instead of creating its own.
+
+  - Added an interface to retrieve the ticket session key from a GSS
+    context.
+
+* Protocol evolution:
+
+  - The KDC will no longer issue tickets with RC4 or triple-DES
+    session keys unless explicitly configured with the new allow_rc4
+    or allow_des3 variables respectively.
+
+  - The KDC will assume that all services can handle aes256-sha1
+    session keys unless the service principal has a session_enctypes
+    string attribute.
+
+  - Support for PAC full KDC checksums has been added to mitigate an
+    S4U2Proxy privilege escalation attack.
+
+  - The PKINIT client will advertise a more modern set of supported
+    CMS algorithms.
+
+* Code quality:
+
+  - Removed unused code in libkrb5, libkrb5support, and the PKINIT
+    module.
+
+  - Modernized the KDC code for processing TGS requests, the code for
+    encrypting and decrypting key data, the PAC handling code, and the
+    GSS library packet parsing and composition code.
+
+  - Improved the test framework's detection of memory errors in daemon
+    processes when used with asan.
 
 `Pre-authentication mechanisms`

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/about.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/about.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/k5srvutil.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/k5srvutil.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kadmin_local.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kadmin_local.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -85,7 +85,7 @@
 command args…
 </div>
 <div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
+<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
 kadmin and kadmin.local are command-line interfaces to the Kerberos V5
 administration system. They provide nearly identical functionalities;
 the difference is that kadmin.local directly accesses the KDC
@@ -175,7 +175,7 @@
 <dd>Specifies the database specific arguments. See the next section
 for supported options.</dd>
 </dl>
-Starting with release 1.14, if any command-line arguments remain after
+Starting with release 1.14, if any command-line arguments remain after
 the options, they will be treated as a single query to be executed.
 This mode of operation is intended for scripts and behaves differently
 from the interactive mode in several respects:
@@ -417,7 +417,7 @@
 </div>
 </div>
 <div class="section" id="modify-principal">
-<h3>modify_principal<a class="headerlink" href="#modify-principal" title="Permalink to this headline">¶</a></h3>
+<h3>modify_principal<a class="headerlink" href="#modify-principal" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>modify_principal options principal</div></blockquote>
 Modifies the specified principal, changing the fields as specified.
@@ -435,7 +435,7 @@
 </dl>
 </div>
 <div class="section" id="rename-principal">
-<h3>rename_principal<a class="headerlink" href="#rename-principal" title="Permalink to this headline">¶</a></h3>
+<h3>rename_principal<a class="headerlink" href="#rename-principal" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>rename_principal -force old_principal new_principal</div></blockquote>
 Renames the specified old_principal to new_principal. This
@@ -445,7 +445,7 @@
 Alias: renprinc
 </div>
 <div class="section" id="delete-principal">
-<h3>delete_principal<a class="headerlink" href="#delete-principal" title="Permalink to this headline">¶</a></h3>
+<h3>delete_principal<a class="headerlink" href="#delete-principal" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>delete_principal -force principal</div></blockquote>
 Deletes the specified principal from the database. This command
@@ -454,7 +454,7 @@
 Alias: delprinc
 </div>
 <div class="section" id="change-password">
-<h3>change_password<a class="headerlink" href="#change-password" title="Permalink to this headline">¶</a></h3>
+<h3>change_password<a class="headerlink" href="#change-password" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>change_password options principal</div></blockquote>
 Changes the password of principal. Prompts for a new password if
@@ -489,7 +489,7 @@
 </div>
 </div>
 <div class="section" id="purgekeys">
-<h3>purgekeys<a class="headerlink" href="#purgekeys" title="Permalink to this headline">¶</a></h3>
+<h3>purgekeys<a class="headerlink" href="#purgekeys" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>purgekeys -all|-keepkvno oldest_kvno_to_keep principal</div></blockquote>
 Purges previously retained old keys (e.g., from change_password
@@ -500,7 +500,7 @@
 This command requires the modify privilege.
 </div>
 <div class="section" id="get-principal">
-<h3>get_principal<a class="headerlink" href="#get-principal" title="Permalink to this headline">¶</a></h3>
+<h3>get_principal<a class="headerlink" href="#get-principal" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>get_principal -terse principal</div></blockquote>
 Gets the attributes of principal. With the -terse option, outputs
@@ -535,7 +535,7 @@
 </div>
 </div>
 <div class="section" id="list-principals">
-<h3>list_principals<a class="headerlink" href="#list-principals" title="Permalink to this headline">¶</a></h3>
+<h3>list_principals<a class="headerlink" href="#list-principals" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>list_principals expression</div></blockquote>
 Retrieves all or some principal names. expression is a shell-style
@@ -558,7 +558,7 @@
 </div>
 </div>
 <div class="section" id="get-strings">
-<h3>get_strings<a class="headerlink" href="#get-strings" title="Permalink to this headline">¶</a></h3>
+<h3>get_strings<a class="headerlink" href="#get-strings" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>get_strings principal</div></blockquote>
 Displays string attributes on principal.
@@ -566,7 +566,7 @@
 Alias: getstrs
 </div>
 <div class="section" id="set-string">
-<h3>set_string<a class="headerlink" href="#set-string" title="Permalink to this headline">¶</a></h3>
+<h3>set_string<a class="headerlink" href="#set-string" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>set_string principal name value</div></blockquote>
 Sets a string attribute on principal. String attributes are used to
@@ -594,6 +594,14 @@
 principal during PKINIT authentication. The matching expression
 is in the same format as those used by the pkinit_cert_match
 option in <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5">krb5.conf</a>. (New in release 1.16.)</dd>
+<dt>pac_privsvr_enctype</dt>
+<dd>Forces the encryption type of the PAC KDC checksum buffers to the
+specified encryption type for tickets issued to this server, by
+deriving a key from the local krbtgt key if it is of a different
+encryption type. It may be necessary to set this value to
+“aes256-sha1” on the cross-realm krbtgt entry for an Active
+Directory realm when using aes-sha2 keys on the local krbtgt
+entry.</dd>
 </dl>
 This command requires the modify privilege.
 Alias: setstr
@@ -604,7 +612,7 @@
 </div>
 </div>
 <div class="section" id="del-string">
-<h3>del_string<a class="headerlink" href="#del-string" title="Permalink to this headline">¶</a></h3>
+<h3>del_string<a class="headerlink" href="#del-string" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>del_string principal key</div></blockquote>
 Deletes a string attribute from principal.
@@ -612,7 +620,7 @@
 Alias: delstr
 </div>
 <div class="section" id="add-policy">
-<h3>add_policy<a class="headerlink" href="#add-policy" title="Permalink to this headline">¶</a></h3>
+<h3>add_policy<a class="headerlink" href="#add-policy" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>add_policy options policy</div></blockquote>
 Adds a password policy named policy to the database.
@@ -675,7 +683,7 @@
 </div>
 </div>
 <div class="section" id="modify-policy">
-<h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
+<h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>modify_policy options policy</div></blockquote>
 Modifies the password policy named policy. Options are as described
@@ -684,7 +692,7 @@
 Alias: modpol
 </div>
 <div class="section" id="delete-policy">
-<h3>delete_policy<a class="headerlink" href="#delete-policy" title="Permalink to this headline">¶</a></h3>
+<h3>delete_policy<a class="headerlink" href="#delete-policy" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>delete_policy -force policy</div></blockquote>
 Deletes the password policy named policy. Prompts for confirmation
@@ -701,7 +709,7 @@
 </div>
 </div>
 <div class="section" id="get-policy">
-<h3>get_policy<a class="headerlink" href="#get-policy" title="Permalink to this headline">¶</a></h3>
+<h3>get_policy<a class="headerlink" href="#get-policy" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>get_policy -terse policy</div></blockquote>
 Displays the values of the password policy named policy. With the
@@ -729,7 +737,7 @@
 meaningful.
 </div>
 <div class="section" id="list-policies">
-<h3>list_policies<a class="headerlink" href="#list-policies" title="Permalink to this headline">¶</a></h3>
+<h3>list_policies<a class="headerlink" href="#list-policies" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>list_policies expression</div></blockquote>
 Retrieves all or some policy names. expression is a shell-style
@@ -754,7 +762,7 @@
 </div>
 </div>
 <div class="section" id="ktadd">
-<h3>ktadd<a class="headerlink" href="#ktadd" title="Permalink to this headline">¶</a></h3>
+<h3>ktadd<a class="headerlink" href="#ktadd" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div><div class="line-block">
 <div class="line">ktadd options principal</div>
@@ -797,7 +805,7 @@
 </div>
 </div>
 <div class="section" id="ktremove">
-<h3>ktremove<a class="headerlink" href="#ktremove" title="Permalink to this headline">¶</a></h3>
+<h3>ktremove<a class="headerlink" href="#ktremove" title="Permalink to this headline">¶</a></h3>
 <blockquote>
 <div>ktremove options principal kvno | all | old</div></blockquote>
 Removes entries for the specified principal from a keytab. Requires
@@ -825,7 +833,7 @@
 </div>
 </div>
 <div class="section" id="lock">
-<h3>lock<a class="headerlink" href="#lock" title="Permalink to this headline">¶</a></h3>
+<h3>lock<a class="headerlink" href="#lock" title="Permalink to this headline">¶</a></h3>
 Lock database exclusively. Use with extreme caution! This command
 only works with the DB2 KDC database module.
 </div>
@@ -976,8 +984,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kadmind.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kadmind.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kdb5_ldap_util.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kdb5_ldap_util.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kdb5_util.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kdb5_util.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kprop.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kprop.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kpropd.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kpropd.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/kproplog.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/kproplog.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/krb5kdc.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/krb5kdc.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/ktutil.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/ktutil.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/admin_commands/sserver.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/admin_commands/sserver.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/advanced/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/advanced/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/advanced/retiring-des.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/advanced/retiring-des.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/appl_servers.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/appl_servers.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -66,9 +66,9 @@
 If you need to install the Kerberos V5 programs on an application
 server, please refer to the Kerberos V5 Installation Guide. Once you
 have installed the software, you need to add that host to the Kerberos
-database (see <a class="reference internal" href="database.html#add-mod-del-princs">Adding, modifying and deleting principals</a>), and generate a keytab for
-that host, that contains the host’s key. You also need to make sure
-the host’s clock is within your maximum clock skew of the KDCs.
+database (see <a class="reference internal" href="database.html#principals">Principals</a>), and generate a keytab for that host,
+that contains the host’s key. You also need to make sure the host’s
+clock is within your maximum clock skew of the KDCs.
 <div class="section" id="keytabs">
 <h2>Keytabs<a class="headerlink" href="#keytabs" title="Permalink to this headline">¶</a></h2>
 A keytab is a host’s copy of its own keylist, which is analogous to a
@@ -84,92 +84,21 @@
 <div class="section" id="adding-principals-to-keytabs">
 <h3>Adding principals to keytabs<a class="headerlink" href="#adding-principals-to-keytabs" title="Permalink to this headline">¶</a></h3>
 To generate a keytab, or to add a principal to an existing keytab, use
-the ktadd command from kadmin.
-</div>
-<div class="section" id="ktadd">
-<h3>ktadd<a class="headerlink" href="#ktadd" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><div class="line-block">
-<div class="line">ktadd options principal</div>
-<div class="line">ktadd options -glob princ-exp</div>
-</div>
-</div></blockquote>
-Adds a principal, or all principals matching princ-exp, to a
-keytab file. Each principal’s keys are randomized in the process.
-The rules for princ-exp are described in the list_principals
-command.
-This command requires the inquire and changepw privileges.
-With the -glob form, it also requires the list privilege.
-The options are:
-<dl class="docutils">
-<dt>-keytab keytab</dt>
-<dd>Use keytab as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt>-e enc:salt,…</dt>
-<dd>Uses the specified keysalt list for setting the new keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists">Keysalt lists</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> for a
-list of possible values.</dd>
-<dt>-q</dt>
-<dd>Display less verbose information.</dd>
-<dt>-norandkey</dt>
-<dd>Do not randomize the keys. The keys and their version numbers stay
-unchanged. This option cannot be specified in combination with the
--e option.</dd>
-</dl>
-An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.
-Alias: xst
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: ktadd -k /tmp/foo-new-keytab host/foo.mit.edu
-Entry for principal host/foo.mit.edu@ATHENA.MIT.EDU with kvno 3,
- encryption type aes256-cts-hmac-sha1-96 added to keytab
- FILE:/tmp/foo-new-keytab
-kadmin:
-</pre></div>
-</div>
-<div class="section" id="examples">
-<h4>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h4>
-Here is a sample session, using configuration files that enable only
-AES encryption:
+the ktadd command from kadmin. Here is a sample session, using
+configuration files that enable only AES encryption:
 <div class="highlight-default"><div class="highlight"><pre>kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
 Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
 Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
-kadmin:
 </pre></div>
 </div>
 </div>
-</div>
 <div class="section" id="removing-principals-from-keytabs">
 <h3>Removing principals from keytabs<a class="headerlink" href="#removing-principals-from-keytabs" title="Permalink to this headline">¶</a></h3>
 To remove a principal from an existing keytab, use the kadmin
-ktremove command.
-</div>
-<div class="section" id="ktremove">
-<h3>ktremove<a class="headerlink" href="#ktremove" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>ktremove options principal kvno | all | old</div></blockquote>
-Removes entries for the specified principal from a keytab. Requires
-no permissions, since this does not require database access.
-If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.
-The options are:
-<dl class="docutils">
-<dt>-keytab keytab</dt>
-<dd>Use keytab as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt>-q</dt>
-<dd>Display less verbose information.</dd>
-</dl>
-Alias: ktrem
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: ktremove kadmin/admin all
-Entry for principal kadmin/admin with kvno 3 removed from keytab
- FILE:/etc/krb5.keytab
-kadmin:
+ktremove command:
+<div class="highlight-default"><div class="highlight"><pre>kadmin: ktremove host/daffodil.mit.edu@ATHENA.MIT.EDU
+Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
+Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
 </pre></div>
 </div>
 </div>
@@ -290,12 +219,7 @@
 <li><a class="reference internal" href="#">Application servers</a><ul>
 <li><a class="reference internal" href="#keytabs">Keytabs</a><ul>
 <li><a class="reference internal" href="#adding-principals-to-keytabs">Adding principals to keytabs</a></li>
-<li><a class="reference internal" href="#ktadd">ktadd</a><ul>
-<li><a class="reference internal" href="#examples">Examples</a></li>
-</ul>
-</li>
 <li><a class="reference internal" href="#removing-principals-from-keytabs">Removing principals from keytabs</a></li>
-<li><a class="reference internal" href="#ktremove">ktremove</a></li>
 <li><a class="reference internal" href="#using-a-keytab-to-acquire-client-credentials">Using a keytab to acquire client credentials</a></li>
 </ul>
 </li>
@@ -364,8 +288,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/auth_indicator.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/auth_indicator.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/backup_host.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/backup_host.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -90,7 +90,7 @@
 these backups are stored as secure as your KDCs, and to encrypt its
 transmission across your network.) Then if your database becomes
 corrupted, you can load the most recent dump onto the primary KDC.
-(See <a class="reference internal" href="database.html#restore-from-dump">Restoring a Kerberos database from a dump file</a>.)
+(See <a class="reference internal" href="database.html#restore-from-dump">Dumping and loading a Kerberos database</a>.)
 </div>
 </div>
 
@@ -166,8 +166,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/conf_files/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/conf_files/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/conf_files/kadm5_acl.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/conf_files/kadm5_acl.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/conf_files/kdc_conf.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/conf_files/kdc_conf.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/conf_files/krb5_conf.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/conf_files/krb5_conf.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -160,6 +160,16 @@
 <h3>libdefaults<a class="headerlink" href="#libdefaults" title="Permalink to this headline">¶</a></h3>
 The libdefaults section may contain any of the following relations:
 <dl class="docutils">
+<dt>allow_des3</dt>
+<dd>Permit the KDC to issue tickets with des3-cbc-sha1 session keys.
+In future releases, this flag will allow des3-cbc-sha1 to be used
+at all. The default value for this tag is false. (Added in
+release 1.21.)</dd>
+<dt>allow_rc4</dt>
+<dd>Permit the KDC to issue tickets with arcfour-hmac session keys.
+In future releases, this flag will allow arcfour-hmac to be used
+at all. The default value for this tag is false. (Added in
+release 1.21.)</dd>
 <dt>allow_weak_crypto</dt>
 <dd>If this flag is set to false, then weak encryption types (as noted
 in <a class="reference internal" href="kdc_conf.html#encryption-types">Encryption types</a> in <a class="reference internal" href="kdc_conf.html#kdc-conf-5">kdc.conf</a>) will be filtered
@@ -965,7 +975,7 @@
 <dd>All keyword/values are optional. modname specifies the location
 of a library implementing PKCS #11. If a value is encountered
 with no keyword, it is assumed to be the modname. If no
-module-name is specified, the default is <code class="docutils literal">opensc-pkcs11.so</code>.
+module-name is specified, the default is <a class="reference internal" href="../../mitK5defaults.html#paths">PKCS11_MODNAME</a>.
 <code class="docutils literal">slotid=</code> and/or <code class="docutils literal">token=</code> may be specified to force the use of
 a particular smard card reader or token if there is more than one
 available. <code class="docutils literal">certid=</code> and/or <code class="docutils literal">certlabel=</code> may be specified to
@@ -1325,8 +1335,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/conf_ldap.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/conf_ldap.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -148,11 +148,10 @@
 </pre></div>
 </div>
 </li>
-<li>Create the realm using <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> (see
-<a class="reference internal" href="database.html#ldap-create-realm">Creating a Kerberos realm</a>):
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util create -subtrees ou=users,dc=example,dc=com -s
-</pre></div>
-</div>
+<li>Create the realm using <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a>:
+<blockquote>
+<div>kdb5_ldap_util create -subtrees ou=users,dc=example,dc=com -s
+</div></blockquote>
 Use the -subtrees option if the principals are to exist in a
 separate subtree from the realm container. Before executing the
 command, make sure that the subtree mentioned above
@@ -261,8 +260,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/database.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/database.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -95,640 +95,76 @@
 from the KDC, and uses that service ticket to authenticate to KADM5.
 See <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> for the available kadmin and kadmin.local
 commands and options.
-<div class="section" id="kadmin-options">
-<h2>kadmin options<a class="headerlink" href="#kadmin-options" title="Permalink to this headline">¶</a></h2>
-You can invoke <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> or kadmin.local with any of the
-following options:
-kadmin
--O|-N
--r realm
--p principal
--q query
--c cache_name|-k -t keytab|-n
--w password
--s admin_server:port
-command args…
-kadmin.local
--r realm
--p principal
--q query
--d dbname
--e enc:salt …
--m
--x db_args
-command args…
-OPTIONS
-<dl class="docutils">
-<dt>-r realm</dt>
-<dd>Use realm as the default database realm.</dd>
-<dt>-p principal</dt>
-<dd>Use principal to authenticate. Otherwise, kadmin will append
-<code class="docutils literal">/admin</code> to the primary principal name of the default ccache,
-the value of the USER environment variable, or the username as
-obtained with getpwuid, in order of preference.</dd>
-<dt>-k</dt>
-<dd>Use a keytab to decrypt the KDC response instead of prompting for
-a password. In this case, the default principal will be
-<code class="docutils literal">host/hostname</code>. If there is no keytab specified with the
--t option, then the default keytab will be used.</dd>
-<dt>-t keytab</dt>
-<dd>Use keytab to decrypt the KDC response. This can only be used
-with the -k option.</dd>
-<dt>-n</dt>
-<dd>Requests anonymous processing. Two types of anonymous principals
-are supported. For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure pkinit_anchors in the client’s
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5">krb5.conf</a>. Then use the -n option with a principal
-of the form <code class="docutils literal">&#64;REALM</code> (an empty principal name followed by the
-at-sign and a realm name). If permitted by the KDC, an anonymous
-ticket will be returned. A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm. For this mode, use <code class="docutils literal">kinit
--n</code> with a normal principal name. If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal. As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.</dd>
-<dt>-c credentials_cache</dt>
-<dd>Use credentials_cache as the credentials cache. The cache
-should contain a service ticket for the <code class="docutils literal">kadmin/admin</code> or
-<code class="docutils literal">kadmin/ADMINHOST</code> (where ADMINHOST is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-<a class="reference internal" href="../user/user_commands/kinit.html#kinit-1">kinit</a> program. If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.</dd>
-<dt>-w password</dt>
-<dd>Use password instead of prompting for one. Use this option with
-care, as it may expose the password to other users on the system
-via the process list.</dd>
-<dt>-q query</dt>
-<dd>Perform the specified query and then exit.</dd>
-<dt>-d dbname</dt>
-<dd>Specifies the name of the KDC database. This option does not
-apply to the LDAP database module.</dd>
-<dt>-s admin_server:port</dt>
-<dd>Specifies the admin server which kadmin should contact.</dd>
-<dt>-m</dt>
-<dd>If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.</dd>
-<dt>-e “enc:salt …”</dt>
-<dd>Sets the keysalt list to be used for any new keys created. See
-<a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists">Keysalt lists</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> for a list of possible
-values.</dd>
-<dt>-O</dt>
-<dd>Force use of old AUTH_GSSAPI authentication flavor.</dd>
-<dt>-N</dt>
-<dd>Prevent fallback to AUTH_GSSAPI authentication flavor.</dd>
-<dt>-x db_args</dt>
-<dd>Specifies the database specific arguments. See the next section
-for supported options.</dd>
-</dl>
-</div>
-<div class="section" id="date-format">
-<h2>Date Format<a class="headerlink" href="#date-format" title="Permalink to this headline">¶</a></h2>
-For the supported date-time formats see <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> section
-in <a class="reference internal" href="../basic/date_format.html#datetime">Supported date and time formats</a>.
-</div>
 <div class="section" id="principals">
-<h2>Principals<a class="headerlink" href="#principals" title="Permalink to this headline">¶</a></h2>
+<h2>Principals<a class="headerlink" href="#principals" title="Permalink to this headline">¶</a></h2>
 Each entry in the Kerberos database contains a Kerberos principal and
 the attributes and policies associated with that principal.
-<div class="section" id="adding-modifying-and-deleting-principals">
-<h3>Adding, modifying and deleting principals<a class="headerlink" href="#adding-modifying-and-deleting-principals" title="Permalink to this headline">¶</a></h3>
 To add a principal to the database, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a>
-add_principal command.
-To modify attributes of a principal, use the kadmin
-modify_principal command.
-To delete a principal, use the kadmin delete_principal command.
-</div>
-<div class="section" id="add-principal">
-<h3>add_principal<a class="headerlink" href="#add-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>add_principal options newprinc</div></blockquote>
-Creates the principal newprinc, prompting twice for a password. If
-no password policy is specified with the -policy option, and the
-policy named <code class="docutils literal">default</code> is assigned to the principal if it exists.
-However, creating a policy named <code class="docutils literal">default</code> will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the -clearpolicy option.
-This command requires the add privilege.
-Aliases: addprinc, ank
-Options:
-<dl class="docutils">
-<dt>-expire expdate</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) The expiration date of the principal.</dd>
-<dt>-pwexpire pwexpdate</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) The password expiration date.</dd>
-<dt>-maxlife maxlife</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) The maximum ticket life
-for the principal.</dd>
-<dt>-maxrenewlife maxrenewlife</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) The maximum renewable
-life of tickets for the principal.</dd>
-<dt>-kvno kvno</dt>
-<dd>The initial key version number.</dd>
-<dt>-policy policy</dt>
-<dd>The password policy used by this principal. If not specified, the
-policy <code class="docutils literal">default</code> is used if it exists (unless -clearpolicy
-is specified).</dd>
-<dt>-clearpolicy</dt>
-<dd>Prevents any policy from being assigned when -policy is not
-specified.</dd>
-<dt>{-|+}allow_postdated</dt>
-<dd>-allow_postdated prohibits this principal from obtaining
-postdated tickets. +allow_postdated clears this flag.</dd>
-<dt>{-|+}allow_forwardable</dt>
-<dd>-allow_forwardable prohibits this principal from obtaining
-forwardable tickets. +allow_forwardable clears this flag.</dd>
-<dt>{-|+}allow_renewable</dt>
-<dd>-allow_renewable prohibits this principal from obtaining
-renewable tickets. +allow_renewable clears this flag.</dd>
-<dt>{-|+}allow_proxiable</dt>
-<dd>-allow_proxiable prohibits this principal from obtaining
-proxiable tickets. +allow_proxiable clears this flag.</dd>
-<dt>{-|+}allow_dup_skey</dt>
-<dd>-allow_dup_skey disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-+allow_dup_skey clears this flag.</dd>
-<dt>{-|+}requires_preauth</dt>
-<dd>+requires_preauth requires this principal to preauthenticate
-before being allowed to kinit. -requires_preauth clears this
-flag. When +requires_preauth is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.</dd>
-<dt>{-|+}requires_hwauth</dt>
-<dd>+requires_hwauth requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
--requires_hwauth clears this flag. When +requires_hwauth is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.</dd>
-<dt>{-|+}ok_as_delegate</dt>
-<dd>+ok_as_delegate sets the okay as delegate flag on tickets
-issued with this principal as the service. Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service. -ok_as_delegate clears this
-flag.</dd>
-<dt>{-|+}allow_svr</dt>
-<dd>-allow_svr prohibits the issuance of service tickets for this
-principal. In release 1.17 and later, user-to-user service
-tickets are still allowed unless the -allow_dup_skey flag is
-also set. +allow_svr clears this flag.</dd>
-<dt>{-|+}allow_tgs_req</dt>
-<dd>-allow_tgs_req specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-+allow_tgs_req clears this flag.</dd>
-<dt>{-|+}allow_tix</dt>
-<dd>-allow_tix forbids the issuance of any tickets for this
-principal. +allow_tix clears this flag.</dd>
-<dt>{-|+}needchange</dt>
-<dd>+needchange forces a password change on the next initial
-authentication to this principal. -needchange clears this
-flag.</dd>
-<dt>{-|+}password_changing_service</dt>
-<dd>+password_changing_service marks this principal as a password
-change service principal.</dd>
-<dt>{-|+}ok_to_auth_as_delegate</dt>
-<dd>+ok_to_auth_as_delegate allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.</dd>
-<dt>{-|+}no_auth_data_required</dt>
-<dd>+no_auth_data_required prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.</dd>
-<dt>{-|+}lockdown_keys</dt>
-<dd>+lockdown_keys prevents keys for this principal from leaving
-the KDC via kadmind. The chpass and extract operations are denied
-for a principal with this attribute. The chrand operation is
-allowed, but will not return the new keys. The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.</dd>
-<dt>-randkey</dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt>-nokey</dt>
-<dd>Causes the principal to be created with no key. New in release
-1.12.</dd>
-<dt>-pw password</dt>
-<dd>Sets the password of the principal to the specified string and
-does not prompt for a password. Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.</dd>
-<dt>-e enc:salt,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists">Keysalt lists</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> for a
-list of possible values.</dd>
-<dt>-x db_princ_args</dt>
-<dd>Indicates database-specific options. The options for the LDAP
-database module are:
-<dl class="docutils">
-<dt>-x dn=dn</dt>
-<dd>Specifies the LDAP object that will contain the Kerberos
-principal being created.</dd>
-<dt>-x linkdn=dn</dt>
-<dd>Specifies the LDAP object to which the newly created Kerberos
-principal object will point.</dd>
-<dt>-x containerdn=container_dn</dt>
-<dd>Specifies the container object under which the Kerberos
-principal is to be created.</dd>
-<dt>-x tktpolicy=policy</dt>
-<dd>Associates a ticket policy to the Kerberos principal.</dd>
-</dl>
-<div class="last admonition note">
-Note
-<ul class="last simple">
-<li>The containerdn and linkdn options cannot be
-specified with the dn option.</li>
-<li>If the dn or containerdn options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.</li>
-<li>dn and containerdn should be within the subtrees or
-principal container configured in the realm.</li>
-</ul>
-</div>
-</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc jennifer
-No policy specified for &quot;jennifer@ATHENA.MIT.EDU&quot;;
-defaulting to no policy.
-Enter password for principal jennifer@ATHENA.MIT.EDU:
-Re-enter password for principal jennifer@ATHENA.MIT.EDU:
-Principal &quot;jennifer@ATHENA.MIT.EDU&quot; created.
-kadmin:
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-principal">
-<h3>modify_principal<a class="headerlink" href="#modify-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>modify_principal options principal</div></blockquote>
-Modifies the specified principal, changing the fields as specified.
-The options to add_principal also apply to this command, except
-for the -randkey, -pw, and -e options. In addition, the
-option -clearpolicy will clear the current policy of a principal.
-This command requires the modify privilege.
-Alias: modprinc
-Options (in addition to the addprinc options):
-<dl class="docutils">
-<dt>-unlock</dt>
-<dd>Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.</dd>
-</dl>
-</div>
-<div class="section" id="delete-principal">
-<h3>delete_principal<a class="headerlink" href="#delete-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>delete_principal -force principal</div></blockquote>
-Deletes the specified principal from the database. This command
-prompts for deletion, unless the -force option is given.
-This command requires the delete privilege.
-Alias: delprinc
-<div class="section" id="examples">
-<h4>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h4>
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc -x dn=cn=jennifer,dc=example,dc=com jennifer
-No policy specified for &quot;jennifer@ATHENA.MIT.EDU&quot;;
-defaulting to no policy.
-Enter password for principal jennifer@ATHENA.MIT.EDU: &lt;= Type the password.
-Re-enter password for principal jennifer@ATHENA.MIT.EDU: &lt;=Type it again.
-Principal &quot;jennifer@ATHENA.MIT.EDU&quot; created.
-kadmin:
-</pre></div>
-</div>
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc -x containerdn=dc=example,dc=com -x linkdn=cn=david,dc=example,dc=com david
-No policy specified for &quot;david@ATHENA.MIT.EDU&quot;;
-defaulting to no policy.
-Enter password for principal david@ATHENA.MIT.EDU: &lt;= Type the password.
-Re-enter password for principal david@ATHENA.MIT.EDU: &lt;=Type it again.
-Principal &quot;david@ATHENA.MIT.EDU&quot; created.
-kadmin:
-</pre></div>
-</div>
-If you want to associate a ticket policy to a principal, all you need
-to do is:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: modprinc -x tktpolicy=userpolicy david
-Principal &quot;david@ATHENA.MIT.EDU&quot; modified.
-kadmin:
-</pre></div>
-</div>
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called “stduser”, with a temporary
-password (which you want the user to change immediately), you would
-type the following:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc david -expire &quot;1/1/2000 12:01am EST&quot; -policy stduser +needchange
-Enter password for principal david@ATHENA.MIT.EDU: &lt;= Type the password.
-Re-enter password for principal
-david@ATHENA.MIT.EDU: &lt;= Type it again.
-Principal &quot;david@ATHENA.MIT.EDU&quot; created.
-kadmin:
-</pre></div>
-</div>
-If you want to delete a principal:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: delprinc jennifer
-Are you sure you want to delete the principal
-&quot;jennifer@ATHENA.MIT.EDU&quot;? (yes/no): yes
-Principal &quot;jennifer@ATHENA.MIT.EDU&quot; deleted.
-Make sure that you have removed this principal from
-all ACLs before reusing.
-kadmin:
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="retrieving-information-about-a-principal">
-<h3>Retrieving information about a principal<a class="headerlink" href="#retrieving-information-about-a-principal" title="Permalink to this headline">¶</a></h3>
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> get_principal command.
+add_principal command. User principals should usually be created
+with the <code class="docutils literal">+requires_preauth -allow_svr</code> options to help mitigate
+dictionary attacks (see <a class="reference internal" href="dictionary.html#dictionary">Addressing dictionary attack risks</a>):
+<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc +requires_preauth -allow_svr alice
+Enter password for principal &quot;alice@KRBTEST.COM&quot;:
+Re-enter password for principal &quot;alice@KRBTEST.COM&quot;:
+</pre></div>
+</div>
+User principals which will authenticate with <a class="reference internal" href="pkinit.html#pkinit">PKINIT configuration</a> should
+instead by created with the <code class="docutils literal">-nokey</code> option:
+<blockquote>
+<div>kadmin: addprinc -nokey alice</div></blockquote>
+Service principals can be created with the <code class="docutils literal">-nokey</code> option;
+long-term keys will be added when a keytab is generated:
+<div class="highlight-default"><div class="highlight"><pre>kadmin: addprinc -nokey host/foo.mit.edu
+kadmin: ktadd -k foo.keytab host/foo.mit.edu
+Entry for principal host/foo.mit.edu with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
+Entry for principal host/foo.mit.edu with kvno 1, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
+</pre></div>
+</div>
+To modify attributes of an existing principal, use the kadmin
+modify_principal command:
+<div class="highlight-default"><div class="highlight"><pre>kadmin: modprinc -expire tomorrow alice
+Principal &quot;alice@KRBTEST.COM&quot; modified.
+</pre></div>
+</div>
+To delete a principal, use the kadmin delete_principal command:
+<div class="highlight-default"><div class="highlight"><pre>kadmin: delprinc alice
+Are you sure you want to delete the principal &quot;alice@KRBTEST.COM&quot;? (yes/no): yes
+Principal &quot;alice@KRBTEST.COM&quot; deleted.
+Make sure that you have removed this principal from all ACLs before reusing.
+</pre></div>
+</div>
+To change a principal’s password, use the kadmin change_password
+command. Password changes made through kadmin are subject to the same
+password policies as would apply to password changes made through
+<a class="reference internal" href="../user/user_commands/kpasswd.html#kpasswd-1">kpasswd</a>.
+To view the attributes of a principal, use the kadmin`
+get_principal command.
 To generate a listing of principals, use the kadmin
 list_principals command.
 </div>
-<div class="section" id="get-principal">
-<h3>get_principal<a class="headerlink" href="#get-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>get_principal -terse principal</div></blockquote>
-Gets the attributes of principal. With the -terse option, outputs
-fields as quoted tab-separated strings.
-This command requires the inquire privilege, or that the principal
-running the the program to be the same as the one being listed.
-Alias: getprinc
-Examples:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: getprinc tlyu/admin
-Principal: tlyu/admin@BLEEP.COM
-Expiration date: never
-Last password change: Mon Aug 12 14:16:47 EDT 1996
-Password expiration date: never
-Maximum ticket life: 0 days 10:00:00
-Maximum renewable life: 7 days 00:00:00
-Last modified: Mon Aug 12 14:16:47 EDT 1996 (bjaspan/admin@BLEEP.COM)
-Last successful authentication: never
-Last failed authentication: never
-Failed password attempts: 0
-Number of keys: 1
-Key: vno 1, aes256-cts-hmac-sha384-192
-MKey: vno 1
-Attributes:
-Policy: none
-
-kadmin: getprinc -terse systest
-systest@BLEEP.COM 3 86400 604800 1
-785926535 753241234 785900000
-tlyu/admin@BLEEP.COM 786100034 0 0
-kadmin:
-</pre></div>
-</div>
-</div>
-<div class="section" id="list-principals">
-<h3>list_principals<a class="headerlink" href="#list-principals" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>list_principals expression</div></blockquote>
-Retrieves all or some principal names. expression is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal">?</code>,
-<code class="docutils literal">*</code>, and <code class="docutils literal"></code>. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an <code class="docutils literal">&#64;</code> character, an
-<code class="docutils literal">&#64;</code> character followed by the local realm is appended to the
-expression.
-This command requires the list privilege.
-Alias: listprincs, get_principals, getprincs
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: listprincs test*
-test3@SECURE-TEST.OV.COM
-test2@SECURE-TEST.OV.COM
-test1@SECURE-TEST.OV.COM
-testuser@SECURE-TEST.OV.COM
-kadmin:
-</pre></div>
-</div>
-</div>
-<div class="section" id="changing-passwords">
-<h3>Changing passwords<a class="headerlink" href="#changing-passwords" title="Permalink to this headline">¶</a></h3>
-To change a principal’s password use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a>
-change_password command.
-</div>
-<div class="section" id="change-password">
-<h3>change_password<a class="headerlink" href="#change-password" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>change_password options principal</div></blockquote>
-Changes the password of principal. Prompts for a new password if
-neither -randkey or -pw is specified.
-This command requires the changepw privilege, or that the
-principal running the program is the same as the principal being
-changed.
-Alias: cpw
-The following options are available:
-<dl class="docutils">
-<dt>-randkey</dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt>-pw password</dt>
-<dd>Set the password to the specified string. Using this option in a
-script may expose the password to other users on the system via
-the process list.</dd>
-<dt>-e enc:salt,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists">Keysalt lists</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> for a
-list of possible values.</dd>
-<dt>-keepold</dt>
-<dd>Keeps the existing keys in the database. This flag is usually not
-necessary except perhaps for <code class="docutils literal">krbtgt</code> principals.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: cpw systest
-Enter password for principal systest@BLEEP.COM:
-Re-enter password for principal systest@BLEEP.COM:
-Password for systest@BLEEP.COM changed.
-kadmin:
-</pre></div>
-</div>
-<div class="admonition note">
-Note
-Password changes through kadmin are subject to the same
-password policies as would apply to password changes through
-<a class="reference internal" href="../user/user_commands/kpasswd.html#kpasswd-1">kpasswd</a>.
-</div>
-</div>
-</div>
 <div class="section" id="policies">
-<h2>Policies<a class="headerlink" href="#policies" title="Permalink to this headline">¶</a></h2>
+<h2>Policies<a class="headerlink" href="#policies" title="Permalink to this headline">¶</a></h2>
 A policy is a set of rules governing passwords. Policies can dictate
 minimum and maximum password lifetimes, minimum number of characters
 and character classes a password must contain, and the number of old
 passwords kept in the database.
-<div class="section" id="adding-modifying-and-deleting-policies">
-<h3>Adding, modifying and deleting policies<a class="headerlink" href="#adding-modifying-and-deleting-policies" title="Permalink to this headline">¶</a></h3>
-To add a new policy, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> add_policy command.
-To modify attributes of a principal, use the kadmin modify_policy
-command.
-To delete a policy, use the kadmin delete_policy command.
-</div>
-<div class="section" id="add-policy">
-<h3>add_policy<a class="headerlink" href="#add-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>add_policy options policy</div></blockquote>
-Adds a password policy named policy to the database.
-This command requires the add privilege.
-Alias: addpol
-The following options are available:
-<dl class="docutils">
-<dt>-maxlife time</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Sets the maximum
-lifetime of a password.</dd>
-<dt>-minlife time</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Sets the minimum
-lifetime of a password.</dd>
-<dt>-minlength length</dt>
-<dd>Sets the minimum length of a password.</dd>
-<dt>-minclasses number</dt>
-<dd>Sets the minimum number of character classes required in a
-password. The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.</dd>
-<dt>-history number</dt>
-<dd>Sets the number of past keys kept for a principal. This option is
-not supported with the LDAP KDC database module.</dd>
-</dl>
-<dl class="docutils" id="policy-maxfailure">
-<dt>-maxfailure maxnumber</dt>
-<dd>Sets the number of authentication failures before the principal is
-locked. Authentication failures are only tracked for principals
-which require preauthentication. The counter of failed attempts
-resets to 0 after a successful attempt to authenticate. A
-maxnumber value of 0 (the default) disables lockout.</dd>
-</dl>
-<dl class="docutils" id="policy-failurecountinterval">
-<dt>-failurecountinterval failuretime</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Sets the allowable time
-between authentication failures. If an authentication failure
-happens after failuretime has elapsed since the previous
-failure, the number of authentication failures is reset to 1. A
-failuretime value of 0 (the default) means forever.</dd>
-</dl>
-<dl class="docutils" id="policy-lockoutduration">
-<dt>-lockoutduration lockouttime</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration">Time duration</a> or <a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing. A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with <code class="docutils literal">modprinc -unlock</code>.</dd>
-<dt>-allowedkeysalts</dt>
-<dd>Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys. See
-<a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists">Keysalt lists</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only. To clear the allowed key/salt policy use
-a value of ‘-‘.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: add_policy -maxlife &quot;2 days&quot; -minlength 5 guests
-kadmin:
+To add a new policy, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> add_policy command:
+<div class="highlight-default"><div class="highlight"><pre>kadmin: addpol -maxlife &quot;1 year&quot; -history 3 stduser
 </pre></div>
 </div>
-</div>
-<div class="section" id="modify-policy">
-<h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>modify_policy options policy</div></blockquote>
-Modifies the password policy named policy. Options are as described
-for add_policy.
-This command requires the modify privilege.
-Alias: modpol
-</div>
-<div class="section" id="delete-policy">
-<h3>delete_policy<a class="headerlink" href="#delete-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>delete_policy -force policy</div></blockquote>
-Deletes the password policy named policy. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.
-This command requires the delete privilege.
-Alias: delpol
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: del_policy guests
-Are you sure you want to delete the policy &quot;guests&quot;?
-(yes/no): yes
-kadmin:
-</pre></div>
-</div>
-<div class="admonition note">
-Note
-You must cancel the policy from all principals before
-deleting it. The delete_policy command will fail if the policy
-is in use by any principals.
-</div>
-</div>
-<div class="section" id="retrieving-policies">
-<h3>Retrieving policies<a class="headerlink" href="#retrieving-policies" title="Permalink to this headline">¶</a></h3>
-To retrieve a policy, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> get_policy command.
-You can retrieve the list of policies with the kadmin
-list_policies command.
-</div>
-<div class="section" id="get-policy">
-<h3>get_policy<a class="headerlink" href="#get-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div>get_policy -terse policy</div></blockquote>
-Displays the values of the password policy named policy. With the
--terse flag, outputs the fields as quoted strings separated by
-tabs.
-This command requires the inquire privilege.
-Alias: getpol
-Examples:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: get_policy admin
-Policy: admin
-Maximum password life: 180 days 00:00:00
-Minimum password life: 00:00:00
-Minimum password length: 6
-Minimum number of password character classes: 2
-Number of old keys kept: 5
-Reference count: 17
-
-kadmin: get_policy -terse admin
-admin 15552000 0 6 2 5 17
-kadmin:
-</pre></div>
-</div>
-The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.
-</div>
-<div class="section" id="list-policies">
-<h3>list_policies<a class="headerlink" href="#list-policies" title="Permalink to this headline">¶</a></h3>
+To modify attributes of a principal, use the kadmin modify_policy
+command. To delete a policy, use the kadmin delete_policy
+command.
+To associate a policy with a principal, use the kadmin
+modify_principal command with the -policy option:
 <blockquote>
-<div>list_policies expression</div></blockquote>
-Retrieves all or some policy names. expression is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal">?</code>,
-<code class="docutils literal">*</code>, and <code class="docutils literal"></code>. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.
-This command requires the list privilege.
-Aliases: listpols, get_policies, getpols.
-Examples:
-<div class="highlight-default"><div class="highlight"><pre>kadmin: listpols
-test-pol
-dict-only
-once-a-min
-test-pol-nopw
-
-kadmin: listpols t*
-test-pol
-test-pol-nopw
-kadmin:
-</pre></div>
-</div>
-</div>
-<div class="section" id="policies-and-principals">
-<h3>Policies and principals<a class="headerlink" href="#policies-and-principals" title="Permalink to this headline">¶</a></h3>
-Policies can be applied to principals as they are created by using
-the -policy flag to <a class="reference internal" href="admin_commands/kadmin_local.html#add-principal">add_principal</a>. Existing principals can
-be modified by using the -policy or -clearpolicy flag to
-<a class="reference internal" href="admin_commands/kadmin_local.html#modify-principal">modify_principal</a>.
-</div>
+<div>kadmin: modprinc -policy stduser alice
+Principal “<a class="reference external" href="mailto:alice&#37;&#52;&#48;KRBTEST&#46;COM">alice&#64;KRBTEST&#46;COM</a>” modified.</div></blockquote>
+A principal entry may be associated with a nonexistent policy, either
+because the policy did not exist at the time of associated or was
+deleted afterwards. kadmin will warn when associated a principal with
+a nonexistent policy, and will annotate the policy name with “does
+not exist” in the get_principal output.
 <div class="section" id="updating-the-history-key">
 <h3>Updating the history key<a class="headerlink" href="#updating-the-history-key" title="Permalink to this headline">¶</a></h3>
 If a policy specifies a number of old keys kept of two or more, the
@@ -750,7 +186,7 @@
 </div>
 </div>
 <div class="section" id="privileges">
-<h2>Privileges<a class="headerlink" href="#privileges" title="Permalink to this headline">¶</a></h2>
+<h2>Privileges<a class="headerlink" href="#privileges" title="Permalink to this headline">¶</a></h2>
 Administrative privileges for the Kerberos database are stored in the
 file <a class="reference internal" href="conf_files/kadm5_acl.html#kadm5-acl-5">kadm5.acl</a>.
 <div class="admonition note">
@@ -767,194 +203,57 @@
 <div class="section" id="operations-on-the-kerberos-database">
 <h2>Operations on the Kerberos database<a class="headerlink" href="#operations-on-the-kerberos-database" title="Permalink to this headline">¶</a></h2>
 The <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> command is the primary tool for administrating
-the Kerberos database.
-kdb5_util
--r realm
--d dbname
--k mkeytype
--kv mkeyVNO
--M mkeyname
--m
--sf stashfilename
--P password
--x db_args
-command command_options
-OPTIONS
-<dl class="docutils">
-<dt>-r realm</dt>
-<dd>specifies the Kerberos realm of the database.</dd>
-<dt>-d dbname</dt>
-<dd>specifies the name under which the principal database is stored;
-by default the database is that listed in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>. The
-password policy database and lock files are also derived from this
-value.</dd>
-<dt>-k mkeytype</dt>
-<dd>specifies the key type of the master key in the database. The
-default is given by the master_key_type variable in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>
-<dt>-kv mkeyVNO</dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt>-M mkeyname</dt>
-<dd>principal name for the master key in the database. If not
-specified, the name is determined by the master_key_name
-variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>
-<dt>-m</dt>
-<dd>specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.</dd>
-<dt>-sf stash_file</dt>
-<dd>specifies the stash filename of the master database password. If
-not specified, the filename is determined by the
-key_stash_file variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>
-<dt>-P password</dt>
-<dd>specifies the master database password. Using this option may
-expose the password to other users on the system via the process
-list.</dd>
-<dt>-x db_args</dt>
-<dd>specifies database-specific options. See <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> for
-supported options.</dd>
-</dl>
-<div class="toctree-wrapper compound">
-</div>
-<div class="section" id="dumping-a-kerberos-database-to-a-file">
-<h3>Dumping a Kerberos database to a file<a class="headerlink" href="#dumping-a-kerberos-database-to-a-file" title="Permalink to this headline">¶</a></h3>
-To dump a Kerberos database into a file, use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a>
-dump command on one of the KDCs.
-<blockquote>
-<div>dump -b7|-r13|-r18
--verbose -mkey_convert -new_mkey_file
-mkey_file -rev -recurse filename
-principals…</div></blockquote>
-Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, “kdb5_util
-load_dump version 7”. If filename is not specified, or is the string
-“-“, the dump is sent to standard output. Options:
-<dl class="docutils">
-<dt>-b7</dt>
-<dd>causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5_util
-load_dump version 4”). This was the dump format produced on
-releases prior to 1.2.2.</dd>
-<dt>-r13</dt>
-<dd>causes the dump to be in the Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt>-r18</dt>
-<dd>causes the dump to be in the Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt>-verbose</dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt>-mkey_convert</dt>
-<dd>prompts for a new master key. This new master key will be used to
-re-encrypt principal key data in the dumpfile. The principal keys
-themselves will not be changed.</dd>
-<dt>-new_mkey_file mkey_file</dt>
-<dd>the filename of a stash file. The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile. The key
-data in the database will not be changed.</dd>
-<dt>-rev</dt>
-<dd>dumps in reverse order. This may recover principals that do not
-dump normally, in cases where database corruption has occurred.</dd>
-<dt>-recurse</dt>
-<dd>causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred. In cases of such
-corruption, this option will probably retrieve more principals
-than the -rev option will.
-<div class="versionchanged">
-Changed in version 1.15: Release 1.15 restored the functionality of the -recurse
-option.
-</div>
-<div class="last versionchanged">
-Changed in version 1.5: The -recurse option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.
-</div>
-</dd>
-</dl>
-<div class="section" id="id3">
-<h4>Examples<a class="headerlink" href="#id3" title="Permalink to this headline">¶</a></h4>
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_util dump dumpfile
-shell%
-
-shell% kbd5_util dump -verbose dumpfile
-kadmin/admin@ATHENA.MIT.EDU
-krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
-kadmin/history@ATHENA.MIT.EDU
-K/M@ATHENA.MIT.EDU
-kadmin/changepw@ATHENA.MIT.EDU
-shell%
+the Kerberos database when using the DB2 or LMDB modules (see
+<a class="reference internal" href="dbtypes.html#dbtypes">Database types</a>). Creating a database is described in
+<a class="reference internal" href="install_kdc.html#create-db">Create the KDC database</a>.
+To create a stash file using the master password (because the database
+was not created with one using the <code class="docutils literal">create -s</code> flag, or after
+restoring from a backup which did not contain the stash file), use the
+kdb5_util stash command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util stash
+kdb5_util: Cannot find/read stored master key while reading master key
+kdb5_util: Warning: proceeding without master key
+Enter KDC database master key: &lt;= Type the KDC database master password.
 </pre></div>
 </div>
-If you specify which principals to dump, you must use the full
-principal, as in the following example:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_util dump -verbose dumpfile K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
-kadmin/admin@ATHENA.MIT.EDU
-K/M@ATHENA.MIT.EDU
-shell%
+To destroy a database, use the kdb5_util destroy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util destroy
+Deleting KDC database stored in &#39;/var/krb5kdc/principal&#39;, are you sure?
+(type &#39;yes&#39; to confirm)? yes
+OK, deleting database &#39;/var/krb5kdc/principal&#39;...
+** Database &#39;/var/krb5kdc/principal&#39; destroyed.
 </pre></div>
 </div>
-Otherwise, the principals will not match those in the database and
-will not be dumped:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_util dump -verbose dumpfile K/M kadmin/admin
-shell%
+<div class="section" id="dumping-and-loading-a-kerberos-database">
+<h3>Dumping and loading a Kerberos database<a class="headerlink" href="#dumping-and-loading-a-kerberos-database" title="Permalink to this headline">¶</a></h3>
+To dump a Kerberos database into a text file for backup or transfer
+purposes, use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> dump command on one of the
+KDCs:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util dump dumpfile
+
+$ kbd5_util dump -verbose dumpfile
+kadmin/admin@ATHENA.MIT.EDU
+krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
+kadmin/history@ATHENA.MIT.EDU
+K/M@ATHENA.MIT.EDU
+kadmin/changepw@ATHENA.MIT.EDU
+</pre></div>
+</div>
+You may specify which principals to dump, using full principal names
+including realm:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util dump -verbose someprincs K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
+kadmin/admin@ATHENA.MIT.EDU
+K/M@ATHENA.MIT.EDU
 </pre></div>
 </div>
-If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.
-</div>
-</div>
-<div class="section" id="restoring-a-kerberos-database-from-a-dump-file">
-<h3>Restoring a Kerberos database from a dump file<a class="headerlink" href="#restoring-a-kerberos-database-from-a-dump-file" title="Permalink to this headline">¶</a></h3>
 To restore a Kerberos database dump from a file, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> load command on one of the KDCs.
-<blockquote>
-<div>load -b7|-r13|-r18 -hash
--verbose -update filename</div></blockquote>
-Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the -update option is given, load creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the -update flag is required.
-Options:
-<dl class="docutils">
-<dt>-b7</dt>
-<dd>requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5_util load_dump version 4”). This was the dump format
-produced on releases prior to 1.2.2.</dd>
-<dt>-r13</dt>
-<dd>requires the database to be in Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt>-r18</dt>
-<dd>requires the database to be in Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt>-hash</dt>
-<dd>stores the database in hash format, if using the DB2 database
-type. If this option is not specified, the database will be
-stored in btree format. This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.</dd>
-<dt>-verbose</dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt>-update</dt>
-<dd>records from the dump file are added to or updated in the existing
-database. Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.</dd>
-</dl>
-<div class="section" id="id4">
-<h4>Examples<a class="headerlink" href="#id4" title="Permalink to this headline">¶</a></h4>
-To dump a single principal and later load it, updating the database:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_util dump dumpfile principal@REALM
-shell%
-
-shell% kdb5_util load -update dumpfile
-shell%
+<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> load command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util load dumpfile
+</pre></div>
+</div>
+To update an existing database with a partial dump file containing
+only some principals, use the <code class="docutils literal">-update</code> flag:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_util load -update someprincs
 </pre></div>
 </div>
 <div class="admonition note">
@@ -962,75 +261,6 @@
 If the database file exists, and the -update flag was not
 given, kdb5_util will overwrite the existing database.
 </div>
-<div class="admonition note">
-Note
-Using kdb5_util to dump and reload the principal database is
-only necessary when upgrading from versions of krb5 prior
-to 1.2.0—newer versions will use the existing database as-is.
-</div>
-</div>
-</div>
-<div class="section" id="creating-a-stash-file">
-<h3>Creating a stash file<a class="headerlink" href="#creating-a-stash-file" title="Permalink to this headline">¶</a></h3>
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8">kadmind</a>, <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8">krb5kdc</a>, and
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a>.
-To create a stash file, use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> stash command.
-<blockquote>
-<div>stash -f keyfile</div></blockquote>
-Stores the master principal’s keys in a stash file. The -f
-argument can be used to override the keyfile specified in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.
-<div class="section" id="example">
-<h4>Example<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h4>
-<blockquote>
-<div>shell% kdb5_util stash
-kdb5_util: Cannot find/read stored master key while reading master key
-kdb5_util: Warning: proceeding without master key
-Enter KDC database master key: &lt;= Type the KDC database master password.
-shell%</div></blockquote>
-If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a> file.
-</div>
-</div>
-<div class="section" id="creating-and-destroying-a-kerberos-database">
-<h3>Creating and destroying a Kerberos database<a class="headerlink" href="#creating-and-destroying-a-kerberos-database" title="Permalink to this headline">¶</a></h3>
-If you need to create a new Kerberos database, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> create command.
-<blockquote>
-<div>create -s</div></blockquote>
-Creates a new database. If the -s option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.
-If you need to destroy the current Kerberos database, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8">kdb5_util</a> destroy command.
-<blockquote>
-<div>destroy -f</div></blockquote>
-Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the -f argument, does not prompt the user.
-<div class="section" id="id5">
-<h4>Examples<a class="headerlink" href="#id5" title="Permalink to this headline">¶</a></h4>
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_util -r ATHENA.MIT.EDU create -s
-Loading random data
-Initializing database &#39;/usr/local/var/krb5kdc/principal&#39; for realm &#39;ATHENA.MIT.EDU&#39;,
-master key name &#39;K/M@ATHENA.MIT.EDU&#39;
-You will be prompted for the database Master Password.
-It is important that you NOT FORGET this password.
-Enter KDC database master key: &lt;= Type the master password.
-Re-enter KDC database master key to verify: &lt;= Type it again.
-shell%
-
-shell% kdb5_util -r ATHENA.MIT.EDU destroy
-Deleting KDC database stored in &#39;/usr/local/var/krb5kdc/principal&#39;, are you sure?
-(type &#39;yes&#39; to confirm)? &lt;= yes
-OK, deleting database &#39;/usr/local/var/krb5kdc/principal&#39;...
-** Database &#39;/usr/local/var/krb5kdc/principal&#39; destroyed.
-shell%
-</pre></div>
-</div>
-</div>
 </div>
 <div class="section" id="updating-the-master-key">
 <h3>Updating the master key<a class="headerlink" href="#updating-the-master-key" title="Permalink to this headline">¶</a></h3>
@@ -1095,369 +325,88 @@
 </div>
 <div class="section" id="operations-on-the-ldap-database">
 <h2>Operations on the LDAP database<a class="headerlink" href="#operations-on-the-ldap-database" title="Permalink to this headline">¶</a></h2>
-The <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-kdb5_ldap_util
--D user_dn -w passwd
--H ldapuri
-command
-command_options
-OPTIONS
-<dl class="docutils">
-<dt>-r realm</dt>
-<dd>Specifies the realm to be operated on.</dd>
-<dt>-D user_dn</dt>
-<dd>Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.</dd>
-<dt>-w passwd</dt>
-<dd>Specifies the password of user_dn. This option is not
-recommended.</dd>
-<dt>-H ldapuri</dt>
-<dd>Specifies the URI of the LDAP server.</dd>
-</dl>
-By default, kdb5_ldap_util operates on the default realm (as specified
-in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5">krb5.conf</a>) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8)` would given the
-parameters in <a class="reference internal" href="conf_files/kdc_conf.html#dbdefaults">dbdefaults</a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.
-<div class="section" id="creating-a-kerberos-realm">
-<h3>Creating a Kerberos realm<a class="headerlink" href="#creating-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-If you need to create a new realm, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a>
-create command as follows.
-<blockquote>
-<div>create
--subtrees subtree_dn_list
--sscope search_scope
--containerref container_reference_dn
--k mkeytype
--kv mkeyVNO
--M mkeyname
--m|-P password|-sf stashfilename
--s
--maxtktlife max_ticket_life
--maxrenewlife max_renewable_ticket_life
-ticket_flags</div></blockquote>
-Creates realm in directory. Options:
-<dl class="docutils">
-<dt>-subtrees subtree_dn_list</dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal">:</code>).</dd>
-<dt>-sscope search_scope</dt>
-<dd>Specifies the scope for searching the principals under the
-subtree. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt>-containerref container_reference_dn</dt>
-<dd>Specifies the DN of the container object in which the principals
-of a realm will be created. If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.</dd>
-<dt>-k mkeytype</dt>
-<dd>Specifies the key type of the master key in the database. The
-default is given by the master_key_type variable in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>
-<dt>-kv mkeyVNO</dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt>-M mkeyname</dt>
-<dd>Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-master_key_name variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>
-<dt>-m</dt>
-<dd>Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.</dd>
-<dt>-P password</dt>
-<dd>Specifies the master database password. This option is not
-recommended.</dd>
-<dt>-sf stashfilename</dt>
-<dd>Specifies the stash file of the master database password.</dd>
-<dt>-s</dt>
-<dd>Specifies that the stash file is to be created.</dd>
-<dt>-maxtktlife max_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt>-maxrenewlife max_renewable_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt>ticket_flags</dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the add_principal command in
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a>.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU create -subtrees o=org -sscope SUB
-Password for &quot;cn=admin,o=org&quot;:
-Initializing database for realm &#39;ATHENA.MIT.EDU&#39;
-You will be prompted for the database Master Password.
-It is important that you NOT FORGET this password.
-Enter KDC database master key:
-Re-enter KDC database master key to verify:
-</pre></div>
-</div>
-</div>
-<div class="section" id="modifying-a-kerberos-realm">
-<h3>Modifying a Kerberos realm<a class="headerlink" href="#modifying-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-If you need to modify a realm, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a>
-modify command as follows.
-<blockquote>
-<div>modify
--subtrees subtree_dn_list
--sscope search_scope
--containerref container_reference_dn
--maxtktlife max_ticket_life
--maxrenewlife max_renewable_ticket_life
-ticket_flags</div></blockquote>
-Modifies the attributes of a realm. Options:
-<dl class="docutils">
-<dt>-subtrees subtree_dn_list</dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal">:</code>). This list replaces the existing list.</dd>
-<dt>-sscope search_scope</dt>
-<dd>Specifies the scope for searching the principals under the
-subtrees. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt>-containerref container_reference_dn Specifies the DN of the</dt>
-<dd>container object in which the principals of a realm will be
-created.</dd>
-<dt>-maxtktlife max_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt>-maxrenewlife max_renewable_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt>ticket_flags</dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the add_principal command in
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a>.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu modify +requires_preauth
-Password for &quot;cn=admin,o=org&quot;:
-shell%
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroying-a-kerberos-realm">
-<h3>Destroying a Kerberos realm<a class="headerlink" href="#destroying-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-If you need to destroy a Kerberos realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> destroy command as follows.
-<blockquote>
-<div>destroy -f</div></blockquote>
-Destroys an existing realm. Options:
-<dl class="docutils">
-<dt>-f</dt>
-<dd>If specified, will not prompt the user for confirmation.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu destroy
-Password for &quot;cn=admin,o=org&quot;:
-Deleting KDC database of &#39;ATHENA.MIT.EDU&#39;, are you sure?
+The <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> command is the primary tool for
+administrating the Kerberos database when using the LDAP module.
+Creating an LDAP Kerberos database is describe in <a class="reference internal" href="conf_ldap.html#conf-ldap">Configuring Kerberos with OpenLDAP back-end</a>.
+To view a list of realms in the LDAP database, use the kdb5_ldap_util
+list command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util list
+KRBTEST.COM
+</pre></div>
+</div>
+To modify the attributes of a realm, use the kdb5_ldap_util modify
+command. For example, to change the default realm’s maximum ticket
+life:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util modify -maxtktlife &quot;10 hours&quot;
+</pre></div>
+</div>
+To display the attributes of a realm, use the kdb5_ldap_util view
+command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util view
+ Realm Name: KRBTEST.COM
+ Maximum Ticket Life: 0 days 00:10:00
+</pre></div>
+</div>
+To remove a realm from the LDAP database, destroying its contents, use
+the kdb5_ldap_util destroy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util destroy
+Deleting KDC database of &#39;KRBTEST.COM&#39;, are you sure?
 (type &#39;yes&#39; to confirm)? yes
-OK, deleting database of &#39;ATHENA.MIT.EDU&#39;...
-shell%
+OK, deleting database of &#39;KRBTEST.COM&#39;...
+** Database of &#39;KRBTEST.COM&#39; destroyed.
 </pre></div>
 </div>
-</div>
-<div class="section" id="retrieving-information-about-a-kerberos-realm">
-<h3>Retrieving information about a Kerberos realm<a class="headerlink" href="#retrieving-information-about-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-If you need to display the attributes of a realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> view command as follows.
-<blockquote>
-<div>view</div></blockquote>
-Displays the attributes of a realm.
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU view
-Password for &quot;cn=admin,o=org&quot;:
-Realm Name: ATHENA.MIT.EDU
-Subtree: ou=users,o=org
-Subtree: ou=servers,o=org
-SearchScope: ONE
-Maximum ticket life: 0 days 01:00:00
-Maximum renewable life: 0 days 10:00:00
-Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE
+<div class="section" id="ticket-policy-operations">
+<h3>Ticket Policy operations<a class="headerlink" href="#ticket-policy-operations" title="Permalink to this headline">¶</a></h3>
+Unlike the DB2 and LMDB modules, the LDAP module supports ticket
+policy objects, which can be associated with principals to restrict
+maximum ticket lifetimes and set mandatory principal flags. Ticket
+policy objects are distinct from the password policies described
+earlier on this page, and are chiefly managed through kdb5_ldap_util
+rather than kadmin. To create a new ticket policy, use the
+kdb5_ldap_util create_policy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util create_policy -maxrenewlife &quot;2 days&quot; users
 </pre></div>
 </div>
-</div>
-<div class="section" id="listing-available-kerberos-realms">
-<h3>Listing available Kerberos realms<a class="headerlink" href="#listing-available-kerberos-realms" title="Permalink to this headline">¶</a></h3>
-If you need to display the list of the realms, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> list command as follows.
-<blockquote>
-<div>list</div></blockquote>
-Lists the names of realms under the container.
-Example:
-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu list
-Password for &quot;cn=admin,o=org&quot;:
-ATHENA.MIT.EDU
-OPENLDAP.MIT.EDU
-MEDIA-LAB.MIT.EDU
-shell%
+To associate a ticket policy with a principal, use the
+<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> modify_principal (or add_principal) command
+with the -x tktpolicy=policy option:
+<div class="highlight-default"><div class="highlight"><pre>$ kadmin.local modprinc -x tktpolicy=users alice
 </pre></div>
 </div>
-</div>
-<div class="section" id="stashing-service-object-s-password">
-<h3>Stashing service object’s password<a class="headerlink" href="#stashing-service-object-s-password" title="Permalink to this headline">¶</a></h3>
-The <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> stashsrvpw command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-<blockquote>
-<div>stashsrvpw
--f filename
-name</div></blockquote>
-Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:
-<dl class="docutils">
-<dt>-f filename</dt>
-<dd>Specifies the complete path of the service password file. By
-default, <code class="docutils literal">/usr/local/var/service_passwd</code> is used.</dd>
-<dt>name</dt>
-<dd>Specifies the name of the object whose password is to be stored.
-If <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8">krb5kdc</a> or <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8">kadmind</a> are configured for
-simple binding, this should be the distinguished name it will
-use as given by the ldap_kdc_dn or ldap_kadmind_dn
-variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>. If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the ldap_kdc_sasl_authcid or
-ldap_kadmind_sasl_authcid variable.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util stashsrvpw -f /home/andrew/conf_keyfile
- cn=service-kdc,o=org
-Password for &quot;cn=service-kdc,o=org&quot;:
-Re-enter password for &quot;cn=service-kdc,o=org&quot;:
+To remove a ticket policy reference from a principal, use the same
+command with an empty policy:
+<div class="highlight-default"><div class="highlight"><pre>$ kadmin.local modprinc -x tktpolicy= alice
 </pre></div>
 </div>
-</div>
-<div class="section" id="ticket-policy-operations">
-<h3>Ticket Policy operations<a class="headerlink" href="#ticket-policy-operations" title="Permalink to this headline">¶</a></h3>
-<div class="section" id="creating-a-ticket-policy">
-<h4>Creating a Ticket Policy<a class="headerlink" href="#creating-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-To create a new ticket policy in directory , use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> create_policy command. Ticket policy
-objects are created under the realm container.
-<blockquote>
-<div>create_policy
--maxtktlife max_ticket_life
--maxrenewlife max_renewable_ticket_life
-ticket_flags
-policy_name</div></blockquote>
-Creates a ticket policy in the directory. Options:
-<dl class="docutils">
-<dt>-maxtktlife max_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for
-principals.</dd>
-<dt>-maxrenewlife max_renewable_ticket_life</dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of
-tickets for principals.</dd>
-<dt>ticket_flags</dt>
-<dd>Specifies the ticket flags. If this option is not specified, by
-default, no restriction will be set by the policy. Allowable
-flags are documented in the description of the add_principal
-command in <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a>.</dd>
-<dt>policy_name</dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU create_policy -maxtktlife &quot;1 day&quot;
- -maxrenewlife &quot;1 week&quot; -allow_postdated +needchange
- -allow_forwardable tktpolicy
-Password for &quot;cn=admin,o=org&quot;:
+To list the existing ticket policy objects, use the kdb5_ldap_util
+list_policy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util list_policy
+users
 </pre></div>
 </div>
-</div>
-<div class="section" id="modifying-a-ticket-policy">
-<h4>Modifying a Ticket Policy<a class="headerlink" href="#modifying-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-To modify a ticket policy in directory, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> modify_policy command.
-<blockquote>
-<div>modify_policy
--maxtktlife max_ticket_life
--maxrenewlife max_renewable_ticket_life
-ticket_flags
-policy_name</div></blockquote>
-Modifies the attributes of a ticket policy. Options are same as for
-create_policy.
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu -r ATHENA.MIT.EDU modify_policy
- -maxtktlife &quot;60 minutes&quot; -maxrenewlife &quot;10 hours&quot;
- +allow_postdated -requires_preauth tktpolicy
-Password for &quot;cn=admin,o=org&quot;:
+To modify the attributes of a ticket policy object, use the
+kdb5_ldap_util modify_policy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util modify_policy -allow_svr +requires_preauth users
 </pre></div>
 </div>
-</div>
-<div class="section" id="retrieving-information-about-a-ticket-policy">
-<h4>Retrieving Information About a Ticket Policy<a class="headerlink" href="#retrieving-information-about-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-To display the attributes of a ticket policy, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> view_policy command.
-<blockquote>
-<div>view_policy
-policy_name</div></blockquote>
-Displays the attributes of the named ticket policy.
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU view_policy tktpolicy
-Password for &quot;cn=admin,o=org&quot;:
-Ticket policy: tktpolicy
-Maximum ticket life: 0 days 01:00:00
-Maximum renewable life: 0 days 10:00:00
-Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE
+To view the attributes of a ticket policy object, use the
+kdb5_ldap_util view_policy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util view_policy users
+ Ticket policy: users
+ Maximum renewable life: 2 days 00:00:00
+ Ticket flags: REQUIRES_PRE_AUTH DISALLOW_SVR
 </pre></div>
 </div>
-</div>
-<div class="section" id="destroying-a-ticket-policy">
-<h4>Destroying a Ticket Policy<a class="headerlink" href="#destroying-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-To destroy an existing ticket policy, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a>
-destroy_policy command.
-<blockquote>
-<div>destroy_policy
--force
-policy_name</div></blockquote>
-Destroys an existing ticket policy. Options:
-<dl class="docutils">
-<dt>-force</dt>
-<dd>Forces the deletion of the policy object. If not specified, the
-user will be prompted for confirmation before deleting the policy.</dd>
-<dt>policy_name</dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU destroy_policy tktpolicy
-Password for &quot;cn=admin,o=org&quot;:
-This will delete the policy object &#39;tktpolicy&#39;, are you sure?
+To destroy an ticket policy object, use the kdb5_ldap_util
+destroy_policy command:
+<div class="highlight-default"><div class="highlight"><pre>$ kdb5_ldap_util destroy_policy users
+This will delete the policy object &#39;users&#39;, are you sure?
 (type &#39;yes&#39; to confirm)? yes
-** policy object &#39;tktpolicy&#39; deleted.
+** policy object &#39;users&#39; deleted.
 </pre></div>
 </div>
 </div>
-<div class="section" id="listing-available-ticket-policies">
-<h4>Listing available Ticket Policies<a class="headerlink" href="#listing-available-ticket-policies" title="Permalink to this headline">¶</a></h4>
-To list the name of ticket policies in a realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8">kdb5_ldap_util</a> list_policy command.
-<blockquote>
-<div>list_policy</div></blockquote>
-Lists ticket policies.
-Example:
-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU list_policy
-Password for &quot;cn=admin,o=org&quot;:
-tktpolicy
-tmppolicy
-userpolicy
-</pre></div>
-</div>
-</div>
-</div>
 </div>
 <div class="section" id="cross-realm-authentication">
 <h2>Cross-realm authentication<a class="headerlink" href="#cross-realm-authentication" title="Permalink to this headline">¶</a></h2>
@@ -1665,71 +614,19 @@
 <h2>On this page</h2>
 <ul>
 <li><a class="reference internal" href="#">Database administration</a><ul>
-<li><a class="reference internal" href="#kadmin-options">kadmin options</a></li>
-<li><a class="reference internal" href="#date-format">Date Format</a></li>
-<li><a class="reference internal" href="#principals">Principals</a><ul>
-<li><a class="reference internal" href="#adding-modifying-and-deleting-principals">Adding, modifying and deleting principals</a></li>
-<li><a class="reference internal" href="#add-principal">add_principal</a></li>
-<li><a class="reference internal" href="#modify-principal">modify_principal</a></li>
-<li><a class="reference internal" href="#delete-principal">delete_principal</a><ul>
-<li><a class="reference internal" href="#examples">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#retrieving-information-about-a-principal">Retrieving information about a principal</a></li>
-<li><a class="reference internal" href="#get-principal">get_principal</a></li>
-<li><a class="reference internal" href="#list-principals">list_principals</a></li>
-<li><a class="reference internal" href="#changing-passwords">Changing passwords</a></li>
-<li><a class="reference internal" href="#change-password">change_password</a></li>
-</ul>
-</li>
+<li><a class="reference internal" href="#principals">Principals</a></li>
 <li><a class="reference internal" href="#policies">Policies</a><ul>
-<li><a class="reference internal" href="#adding-modifying-and-deleting-policies">Adding, modifying and deleting policies</a></li>
-<li><a class="reference internal" href="#add-policy">add_policy</a></li>
-<li><a class="reference internal" href="#modify-policy">modify_policy</a></li>
-<li><a class="reference internal" href="#delete-policy">delete_policy</a></li>
-<li><a class="reference internal" href="#retrieving-policies">Retrieving policies</a></li>
-<li><a class="reference internal" href="#get-policy">get_policy</a></li>
-<li><a class="reference internal" href="#list-policies">list_policies</a></li>
-<li><a class="reference internal" href="#policies-and-principals">Policies and principals</a></li>
 <li><a class="reference internal" href="#updating-the-history-key">Updating the history key</a></li>
 </ul>
 </li>
 <li><a class="reference internal" href="#privileges">Privileges</a></li>
 <li><a class="reference internal" href="#operations-on-the-kerberos-database">Operations on the Kerberos database</a><ul>
-<li><a class="reference internal" href="#dumping-a-kerberos-database-to-a-file">Dumping a Kerberos database to a file</a><ul>
-<li><a class="reference internal" href="#id3">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#restoring-a-kerberos-database-from-a-dump-file">Restoring a Kerberos database from a dump file</a><ul>
-<li><a class="reference internal" href="#id4">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#creating-a-stash-file">Creating a stash file</a><ul>
-<li><a class="reference internal" href="#example">Example</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#creating-and-destroying-a-kerberos-database">Creating and destroying a Kerberos database</a><ul>
-<li><a class="reference internal" href="#id5">Examples</a></li>
-</ul>
-</li>
+<li><a class="reference internal" href="#dumping-and-loading-a-kerberos-database">Dumping and loading a Kerberos database</a></li>
 <li><a class="reference internal" href="#updating-the-master-key">Updating the master key</a></li>
 </ul>
 </li>
 <li><a class="reference internal" href="#operations-on-the-ldap-database">Operations on the LDAP database</a><ul>
-<li><a class="reference internal" href="#creating-a-kerberos-realm">Creating a Kerberos realm</a></li>
-<li><a class="reference internal" href="#modifying-a-kerberos-realm">Modifying a Kerberos realm</a></li>
-<li><a class="reference internal" href="#destroying-a-kerberos-realm">Destroying a Kerberos realm</a></li>
-<li><a class="reference internal" href="#retrieving-information-about-a-kerberos-realm">Retrieving information about a Kerberos realm</a></li>
-<li><a class="reference internal" href="#listing-available-kerberos-realms">Listing available Kerberos realms</a></li>
-<li><a class="reference internal" href="#stashing-service-object-s-password">Stashing service object’s password</a></li>
-<li><a class="reference internal" href="#ticket-policy-operations">Ticket Policy operations</a><ul>
-<li><a class="reference internal" href="#creating-a-ticket-policy">Creating a Ticket Policy</a></li>
-<li><a class="reference internal" href="#modifying-a-ticket-policy">Modifying a Ticket Policy</a></li>
-<li><a class="reference internal" href="#retrieving-information-about-a-ticket-policy">Retrieving Information About a Ticket Policy</a></li>
-<li><a class="reference internal" href="#destroying-a-ticket-policy">Destroying a Ticket Policy</a></li>
-<li><a class="reference internal" href="#listing-available-ticket-policies">Listing available Ticket Policies</a></li>
-</ul>
-</li>
+<li><a class="reference internal" href="#ticket-policy-operations">Ticket Policy operations</a></li>
 </ul>
 </li>
 <li><a class="reference internal" href="#cross-realm-authentication">Cross-realm authentication</a></li>
@@ -1751,9 +648,7 @@
 <li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
 <li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
 <li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Database administration</a><ul class="simple">
-</ul>
-</li>
+<li class="toctree-l2 current"><a class="current reference internal" href="#">Database administration</a></li>
 <li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
 <li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
 <li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
@@ -1803,8 +698,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/dbtypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/dbtypes.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -62,7 +62,7 @@
 <div class="body" role="main">
 
 <div class="section" id="database-types">
-<h1>Database types<a class="headerlink" href="#database-types" title="Permalink to this headline">¶</a></h1>
+<h1>Database types<a class="headerlink" href="#database-types" title="Permalink to this headline">¶</a></h1>
 A Kerberos database can be implemented with one of three built-in
 database providers, called KDB modules. Software which incorporates
 the MIT krb5 KDC may also provide its own KDB module. The following
@@ -270,8 +270,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/dictionary.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/dictionary.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/enctypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/enctypes.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -97,11 +97,14 @@
 The KDC chooses the session key enctype by taking the intersection of
 its permitted_enctypes list, the list of long-term keys for the
 most recent kvno of the service, and the client’s requested list of
-enctypes.
+enctypes. Starting in krb5-1.21, all services are assumed to support
+aes256-cts-hmac-sha1-96; also, des3-cbc-sha1 and arcfour-hmac session
+keys will not be issued by default.
 Starting in krb5-1.11, it is possible to set a string attribute on a
 service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal. See <a class="reference internal" href="admin_commands/kadmin_local.html#set-string">set_string</a>
-in <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> for details.
+issue for service tickets for that principal, overriding the service’s
+long-term keys and the assumption of aes256-cts-hmac-sha1-96 support.
+See <a class="reference internal" href="admin_commands/kadmin_local.html#set-string">set_string</a> in <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> for details.
 </div>
 <div class="section" id="choosing-enctypes-for-a-service">
 <h2>Choosing enctypes for a service<a class="headerlink" href="#choosing-enctypes-for-a-service" title="Permalink to this headline">¶</a></h2>
@@ -129,6 +132,18 @@
 set this to true unless the use of weak enctypes is an
 acceptable risk for your environment and the weak enctypes are
 required for backward compatibility.</dd>
+<dt>allow_des3</dt>
+<dd>was added in release 1.21 and defaults to false. Unless this
+flag is set to true, the KDC will not issue tickets with
+des3-cbc-sha1 session keys. In a future release, this flag will
+control whether des3-cbc-sha1 is permitted in similar fashion to
+weak enctypes.</dd>
+<dt>allow_rc4</dt>
+<dd>was added in release 1.21 and defaults to false. Unless this
+flag is set to true, the KDC will not issue tickets with
+arcfour-hmac session keys. In a future release, this flag will
+control whether arcfour-hmac is permitted in similar fashion to
+weak enctypes.</dd>
 <dt>permitted_enctypes</dt>
 <dd>controls the set of enctypes that a service will permit for
 session keys and for ticket and authenticator encryption. The KDC
@@ -369,8 +384,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/env_variables.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/env_variables.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/host_config.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/host_config.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/https.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/https.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/install.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/install.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/install_appl_srv.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/install_appl_srv.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -88,7 +88,7 @@
 the machine’s root password.
 In order to generate a keytab for a host, the host must have a
 principal in the Kerberos database. The procedure for adding hosts to
-the database is described fully in <a class="reference internal" href="database.html#add-mod-del-princs">Adding, modifying and deleting principals</a>. (See
+the database is described fully in <a class="reference internal" href="database.html#principals">Principals</a>. (See
 <a class="reference internal" href="install_kdc.html#replica-host-key">Create host keytabs for replica KDCs</a> for a brief description.) The keytab is
 generated by running <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> and issuing the <a class="reference internal" href="admin_commands/kadmin_local.html#ktadd">ktadd</a>
 command.
@@ -207,8 +207,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/install_clients.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/install_clients.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/install_kdc.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/install_kdc.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -496,7 +496,7 @@
 Once your KDCs are set up and running, you are ready to use
 <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1">kadmin</a> to load principals for your users, hosts, and other
 services into the Kerberos database. This procedure is described
-fully in <a class="reference internal" href="database.html#add-mod-del-princs">Adding, modifying and deleting principals</a>.
+fully in <a class="reference internal" href="database.html#principals">Principals</a>.
 You may occasionally want to use one of your replica KDCs as the
 primary. This might happen if you are upgrading the primary KDC, or
 if your primary KDC has a disk crash. See the following section for
@@ -635,8 +635,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/lockout.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/lockout.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -85,11 +85,11 @@
 new one and associate it with each user principal.
 The policy parameters related to account lockout are:
 <ul class="simple">
-<li><a class="reference internal" href="database.html#policy-maxfailure">maxfailure</a>: the number of failed attempts
+<li><a class="reference internal" href="admin_commands/kadmin_local.html#policy-maxfailure">maxfailure</a>: the number of failed attempts
 before the principal is locked out</li>
-<li><a class="reference internal" href="database.html#policy-failurecountinterval">failurecountinterval</a>: the
+<li><a class="reference internal" href="admin_commands/kadmin_local.html#policy-failurecountinterval">failurecountinterval</a>: the
 allowable interval between failed attempts</li>
-<li><a class="reference internal" href="database.html#policy-lockoutduration">lockoutduration</a>: the amount of time
+<li><a class="reference internal" href="admin_commands/kadmin_local.html#policy-lockoutduration">lockoutduration</a>: the amount of time
 a principal is locked out for</li>
 </ul>
 Here is an example of setting these parameters on a new policy and
@@ -275,8 +275,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/otp.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/otp.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/pkinit.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/pkinit.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/princ_dns.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/princ_dns.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/realm_config.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/realm_config.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/spake.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/spake.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/troubleshoot.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/troubleshoot.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/admin/various_envs.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/admin/various_envs.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/gssapi.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/gssapi.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/h5l_mit_apidiff.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/h5l_mit_apidiff.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/init_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/init_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/princ_handle.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/princ_handle.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/index.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -99,7 +99,7 @@
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_get_fast_flags.html">krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.</a></li>
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_address_list.html">krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.</a></li>
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_anonymous.html">krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_canonicalize.html">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.</a></li>
+<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_canonicalize.html">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.</a></li>
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_change_password_prompt.html">krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.</a></li>
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_etype_list.html">krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.</a></li>
 <li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_expire_callback.html">krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.</a></li>
@@ -535,8 +535,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_425_conv_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_425_conv_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_524_conv_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_524_conv_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_524_convert_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_524_convert_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_address_compare.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_address_compare.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_address_order.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_address_order.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_address_search.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_address_search.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_allow_weak_crypto.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_aname_to_localname.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_aname_to_localname.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_anonymous_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_anonymous_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_anonymous_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_anonymous_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_appdefault_boolean.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_appdefault_boolean.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_appdefault_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_appdefault_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_genaddrs.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_get_checksum_func.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getaddrs.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getaddrs.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getauthenticator.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getauthenticator.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getflags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getflags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getkey_k.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getkey_k.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getlocalseqnumber.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getlocalseqnumber.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getlocalsubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getlocalsubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrcache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrcache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrecvsubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrecvsubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrecvsubkey_k.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getrecvsubkey_k.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getremoteseqnumber.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getremoteseqnumber.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getremotesubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getremotesubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getsendsubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getsendsubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getsendsubkey_k.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_getsendsubkey_k.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_initivector.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_initivector.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_set_checksum_func.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_set_checksum_func.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_set_req_cksumtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_set_req_cksumtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setaddrs.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setaddrs.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setflags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setflags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setports.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setports.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrcache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrcache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrecvsubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrecvsubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrecvsubkey_k.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setrecvsubkey_k.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setsendsubkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setsendsubkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setsendsubkey_k.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setsendsubkey_k.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setuseruserkey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_auth_con_setuseruserkey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_alloc_va.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_alloc_va.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_ext.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_ext.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_va.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_build_principal_va.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_block_size.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_block_size.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_checksum_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_checksum_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_crypto_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_crypto_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_crypto_length_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_crypto_length_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_decrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_decrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_decrypt_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_decrypt_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_derive_prfplus.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_derive_prfplus.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_encrypt_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_enctype_compare.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_enctype_compare.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_free_state.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_free_state.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_fx_cf2_simple.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_fx_cf2_simple.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_init_state.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_init_state.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_is_coll_proof_cksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_is_coll_proof_cksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_is_keyed_cksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_is_keyed_cksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_keyed_checksum_types.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_keyed_checksum_types.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_keylengths.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_keylengths.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_checksum_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_checksum_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_random_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_make_random_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_padding_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_padding_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prf.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prf.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prf_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prf_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prfplus.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_prfplus.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_add_entropy.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_add_entropy.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_make_octets.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_make_octets.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_os_entropy.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_os_entropy.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_seed.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_seed.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_to_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_random_to_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_string_to_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_string_to_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_string_to_key_with_params.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_string_to_key_with_params.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_valid_cksumtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_valid_cksumtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_valid_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_valid_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_verify_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_verify_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_c_verify_checksum_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_c_verify_checksum_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_calculate_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_calculate_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_cache_match.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_cache_match.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_close.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_close.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_copy_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_copy_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_default.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_default.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_default_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_default_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_destroy.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_destroy.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_dup.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_dup.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_end_seq_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_end_seq_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_gen_new.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_gen_new.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_config.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_config.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_full_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_full_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_type.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_get_type.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_initialize.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_initialize.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_move.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_move.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_new_unique.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_new_unique.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_next_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_next_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_remove_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_remove_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_resolve.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_resolve.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_retrieve_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_retrieve_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_select.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_select.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_config.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_config.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_default_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_default_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_set_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_start_seq_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_start_seq_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_store_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_store_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_support_switch.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_support_switch.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_switch.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cc_switch.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_new.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_new.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_next.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_cursor_next.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_have_content.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cccol_have_content.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_change_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_change_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_check_clockskew.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_check_clockskew.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_checksum_size.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_checksum_size.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_chpw_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_chpw_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_cksumtype_to_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_cksumtype_to_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_clear_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_clear_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_addresses.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_addresses.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_authdata.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_authdata.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_authenticator.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_authenticator.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_keyblock.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_keyblock.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_keyblock_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_keyblock_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_copy_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_decode_authdata_container.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_decode_authdata_container.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_decode_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_decode_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_decrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_decrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_deltat_to_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_deltat_to_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_eblock_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_eblock_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_encode_authdata_container.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_encode_authdata_container.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_encrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_encrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_encrypt_size.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_encrypt_size.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_enctype_to_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_enctype_to_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_enctype_to_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_enctype_to_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_expand_hostname.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_expand_hostname.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_find_authdata.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_find_authdata.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_finish_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_finish_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_finish_random_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_finish_random_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_addresses.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_addresses.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_ap_rep_enc_part.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_ap_rep_enc_part.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_authdata.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_authdata.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_authenticator.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_authenticator.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_checksum_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_checksum_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_cksumtypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_cksumtypes.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_cred_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_cred_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_data_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_data_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_default_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_default_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_enctypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_enctypes.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_error.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_error.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_host_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_host_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keyblock.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keyblock.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keyblock_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keyblock_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keytab_entry_contents.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_keytab_entry_contents.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_tgt_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_tgt_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_free_unparsed_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_free_unparsed_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_fwd_tgt_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_fwd_tgt_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials_renew.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials_renew.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials_validate.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_credentials_validate.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_default_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_default_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_etype_info.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_etype_info.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_fallback_host_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_fallback_host_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_host_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_host_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_keytab.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_keytab.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_skey.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_in_tkt_with_skey.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_keytab.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_keytab.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_alloc.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_alloc.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_address_list.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_address_list.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -26,7 +26,7 @@
 <link rel="index" title="Index" href="../../../genindex.html" />
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options." href="krb5_get_init_creds_opt_set_canonicalize.html" />
+ <link rel="next" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options." href="krb5_get_init_creds_opt_set_canonicalize.html" />
 <link rel="prev" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options." href="krb5_get_init_creds_opt_set_address_list.html" /> 
 </head>
 <body>
@@ -42,7 +42,7 @@
 accesskey="C">Contents</a> |
 <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
 accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
+ <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options."
 accesskey="N">next</a> |
 <a href="../../../genindex.html" title="General Index"
 accesskey="I">index</a> |
@@ -137,8 +137,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
@@ -146,7 +146,7 @@
 >Contents</a> |
 <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
 >previous</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
+ <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options."
 >next</a> |
 <a href="../../../genindex.html" title="General Index"
 >index</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.html Changed

@@ -5,14 +5,14 @@
 <html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options. &#8212; MIT Kerberos Documentation</title>
+ <title>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options. &#8212; MIT Kerberos Documentation</title>
 <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
 <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
 <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -48,7 +48,7 @@
 accesskey="I">index</a> |
 <a href="../../../search.html" title="Enter search criteria"
 accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.">feedback</a>
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.">feedback</a>
 </div>
 </div>
 </div>
@@ -61,8 +61,8 @@
 <div class="bodywrapper">
 <div class="body" role="main">
 
- <div class="section" id="krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options">
-<h1>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options" title="Permalink to this headline">¶</a></h1>
+ <div class="section" id="krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initial-credential-options">
+<h1>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
 <dl class="function">
 <dt id="c.krb5_get_init_creds_opt_set_canonicalize">
 void <code class="descname">krb5_get_init_creds_opt_set_canonicalize</code>(<a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *&nbsp;opt, int&nbsp;canonicalize)<a class="headerlink" href="#c.krb5_get_init_creds_opt_set_canonicalize" title="Permalink to this definition">¶</a></dt>
@@ -88,7 +88,7 @@
 <div class="sidebar">
 <h2>On this page</h2>
 <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.</a></li>
+<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.</a></li>
 </ul>
 
 
@@ -136,8 +136,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
@@ -151,7 +151,7 @@
 >index</a> |
 <a href="../../../search.html" title="Enter search criteria"
 >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.">feedback</a>
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.">feedback</a>
 </div>
 </div>
 </div>

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -27,7 +27,7 @@
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
 <link rel="next" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options." href="krb5_get_init_creds_opt_set_etype_list.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options." href="krb5_get_init_creds_opt_set_canonicalize.html" /> 
+ <link rel="prev" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options." href="krb5_get_init_creds_opt_set_canonicalize.html" /> 
 </head>
 <body>
 <div class="header-wrapper">
@@ -40,7 +40,7 @@
 
 <a href="../../../index.html" title="Full Table of Contents"
 accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
+ <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options."
 accesskey="P">previous</a> |
 <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
 accesskey="N">next</a> |
@@ -137,14 +137,14 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
 <a href="../../../index.html" title="Full Table of Contents"
 >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
+ <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options."
 >previous</a> |
 <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
 >next</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_pa.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_pa.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_responder.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_responder.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_salt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_salt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_init_creds_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_permitted_enctypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_permitted_enctypes.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_profile.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_profile.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_prompt_types.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_prompt_types.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_renewed_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_renewed_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_server_rcache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_server_rcache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_time_offsets.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_time_offsets.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_get_validated_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_get_validated_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_context_profile.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_context_profile.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_error.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_error.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_times.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_get_times.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_keytab.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_keytab.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_service.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_set_service.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_step.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_creds_step.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_keyblock.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_keyblock.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_random_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_random_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_init_secure_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_init_secure_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_is_config_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_is_config_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_is_referral_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_is_referral_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_is_thread_safe.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_is_thread_safe.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_create_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_create_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_decrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_decrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_decrypt_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_decrypt_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_encrypt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_encrypt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_encrypt_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_encrypt_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_free_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_free_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_key_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_key_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_key_keyblock.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_key_keyblock.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_make_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_make_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_make_checksum_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_make_checksum_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_prf.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_prf.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_reference_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_reference_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_verify_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_verify_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_k_verify_checksum_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_k_verify_checksum_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kdc_sign_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kdc_sign_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_add_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_add_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_client_default.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_client_default.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_close.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_close.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_default.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_default.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_default_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_default_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_dup.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_dup.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_end_seq_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_end_seq_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_free_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_free_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_type.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_get_type.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_have_content.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_have_content.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_next_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_next_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_read_service_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_read_service_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_remove_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_remove_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_resolve.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_resolve.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_start_seq_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kt_start_seq_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_kuserok.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_kuserok.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_make_authdata_kdc_issued.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_make_authdata_kdc_issued.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_marshal_credentials.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_marshal_credentials.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_merge_authdata.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_merge_authdata.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_1cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_1cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_error.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_error.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_ncred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_ncred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_priv.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_priv.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_rep.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_rep.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_rep_dce.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_rep_dce.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_req.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_req.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_req_extended.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_req_extended.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_safe.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_mk_safe.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_os_localaddr.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_os_localaddr.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_add_buffer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_add_buffer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_buffer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_buffer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_client_info.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_client_info.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_types.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_get_types.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_parse.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_parse.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_sign.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_sign.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_sign_ext.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_sign_ext.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_verify.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_verify.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_verify_ext.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_pac_verify_ext.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_parse_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_parse_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_parse_name_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_parse_name_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_prepend_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_prepend_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_principal2salt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_principal2salt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare_any_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare_any_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_principal_compare_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_process_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_process_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_prompter_posix.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_prompter_posix.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_random_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_random_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_error.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_error.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_priv.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_priv.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_rep.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_rep.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_rep_dce.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_rep_dce.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_req.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_req.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_safe.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_rd_safe.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_read_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_read_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_realm_compare.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_realm_compare.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_recvauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_recvauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_recvauth_version.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_recvauth_version.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_get_challenge.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_get_challenge.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_list_questions.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_list_questions.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_challenge_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_challenge_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_get_challenge.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_get_challenge.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_set_answer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_otp_set_answer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_challenge_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_challenge_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_get_challenge.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_get_challenge.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_set_answer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_pkinit_set_answer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_set_answer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_responder_set_answer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_salttype_to_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_salttype_to_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_sendauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_sendauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_server_decrypt_ticket_keytab.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_server_decrypt_ticket_keytab.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_default_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_default_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_default_tgs_enctypes.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_default_tgs_enctypes.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_kdc_recv_hook.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_kdc_recv_hook.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_kdc_send_hook.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_kdc_send_hook.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_password.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_password.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_password_using_ccache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_password_using_ccache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_principal_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_principal_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_real_time.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_real_time.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_trace_callback.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_trace_callback.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_set_trace_filename.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_set_trace_filename.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_sname_match.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_sname_match.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_sname_to_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_sname_to_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_cksumtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_cksumtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_deltat.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_deltat.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_salttype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_salttype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_timestamp.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_string_to_timestamp.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_timeofday.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_timeofday.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_timestamp_to_sfstring.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_timestamp_to_sfstring.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_timestamp_to_string.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_timestamp_to_string.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_free.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_free.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get_times.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_get_times.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_step.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_tkt_creds_step.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_unmarshal_credentials.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_unmarshal_credentials.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_ext.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_ext.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_flags_ext.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_unparse_name_flags_ext.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_us_timeofday.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_us_timeofday.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_use_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_use_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_authdata_kdc_issued.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_authdata_kdc_issued.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds_opt_init.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds_opt_init.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_vprepend_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_vprepend_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_vset_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_vset_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_vwrap_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_vwrap_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/api/krb5_wrap_error_message.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/api/krb5_wrap_error_message.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_ADDRPORT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_ADDRPORT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_CHAOS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_CHAOS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_DDP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_DDP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_INET.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_INET.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_INET6.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_INET6.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_IPPORT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_IPPORT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_ISO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_ISO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_IS_LOCAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_IS_LOCAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_NETBIOS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_NETBIOS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_XNS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ADDRTYPE_XNS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_EXTERNAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_EXTERNAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_REGISTERED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_REGISTERED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_RESERVED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AD_TYPE_RESERVED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_RESERVED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_RESERVED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_USE_SUBKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_USE_SUBKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_WIRE_MASK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/AP_OPTS_WIRE_MASK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CRC32.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_CRC32.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_DESCBC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_DESCBC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_NIST_SHA.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_NIST_SHA.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD4.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD4.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD5.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD5.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_SHA1.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/CKSUMTYPE_SHA1.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_CRC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_CRC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_MD4.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_MD4.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_MD5.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_MD5.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_RAW.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_CBC_RAW.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_NULL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_NULL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RSA_ENV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RSA_ENV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_UNKNOWN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/ENCTYPE_UNKNOWN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_CANONICALIZE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_CANONICALIZE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_FORWARDABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_FORWARDABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_FORWARDED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_FORWARDED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_POSTDATED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_POSTDATED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_PROXIABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_PROXIABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_PROXY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_PROXY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEW.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEW.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEWABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEWABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEWABLE_OK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_RENEWABLE_OK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_VALIDATE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_OPT_VALIDATE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KDC_TKT_COMMON_MASK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KDC_TKT_COMMON_MASK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AP_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AP_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AP_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AP_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AS_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AS_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AS_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AS_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AND_OR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AND_OR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_SESAME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_SESAME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ERROR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_ERROR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_FAST_REQUIRED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_FAST_REQUIRED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CACHED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CACHED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CANONICALIZE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CANONICALIZE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_FORWARDABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_FORWARDABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_NO_STORE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_NO_STORE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_USER_USER.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GC_USER_USER.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT16_MAX.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT16_MAX.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT16_MIN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT16_MIN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT32_MAX.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT32_MAX.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT32_MIN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_INT32_MIN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_HARDERROR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_HARDERROR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_MALFORMED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_MALFORMED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_SUCCESS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_KPASSWD_SUCCESS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_NONE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_NONE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_PRINCIPAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_PRINCIPAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SMTP_NAME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SMTP_NAME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_HST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_HST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_INST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_INST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_XHST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_SRV_XHST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_UID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_UID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_UNKNOWN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_UNKNOWN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_WELLKNOWN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_WELLKNOWN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CLIENT_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CLIENT_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DEVICE_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_DEVICE_INFO.html Changed

_service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM.html Added

@@ -0,0 +1,162 @@
+
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+ <title>KRB5_PAC_FULL_CHECKSUM &#8212; MIT Kerberos Documentation</title>
+ <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
+ <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
+ <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
+ <script type="text/javascript">
+ var DOCUMENTATION_OPTIONS = {
+ URL_ROOT: '../../../',
+ VERSION: '1.21.1',
+ COLLAPSE_INDEX: false,
+ FILE_SUFFIX: '.html',
+ HAS_SOURCE: true,
+ SOURCELINK_SUFFIX: '.txt'
+ };
+ </script>
+ <script type="text/javascript" src="../../../_static/jquery.js"></script>
+ <script type="text/javascript" src="../../../_static/underscore.js"></script>
+ <script type="text/javascript" src="../../../_static/doctools.js"></script>
+ <link rel="author" title="About these documents" href="../../../about.html" />
+ <link rel="index" title="Index" href="../../../genindex.html" />
+ <link rel="search" title="Search" href="../../../search.html" />
+ <link rel="copyright" title="Copyright" href="../../../copyright.html" />
+ <link rel="next" title="KRB5_PADATA_AFS3_SALT" href="KRB5_PADATA_AFS3_SALT.html" />
+ <link rel="prev" title="KRB5_PAC_UPN_DNS_INFO" href="KRB5_PAC_UPN_DNS_INFO.html" /> 
+ </head>
+ <body>
+ <div class="header-wrapper">
+ <div class="header">
+ 
+ 
+ <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
+ 
+ <div class="rel">
+ 
+ <a href="../../../index.html" title="Full Table of Contents"
+ accesskey="C">Contents</a> |
+ <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
+ accesskey="P">previous</a> |
+ <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
+ accesskey="N">next</a> |
+ <a href="../../../genindex.html" title="General Index"
+ accesskey="I">index</a> |
+ <a href="../../../search.html" title="Enter search criteria"
+ accesskey="S">Search</a> |
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_FULL_CHECKSUM">feedback</a>
+ </div>
+ </div>
+ </div>
+
+ <div class="content-wrapper">
+ <div class="content">
+ <div class="document">
+ 
+ <div class="documentwrapper">
+ <div class="bodywrapper">
+ <div class="body" role="main">
+ 
+ <div class="section" id="krb5-pac-full-checksum">
+<h1>KRB5_PAC_FULL_CHECKSUM<a class="headerlink" href="#krb5-pac-full-checksum" title="Permalink to this headline">¶</a></h1>
+<dl class="data">
+<dt id="KRB5_PAC_FULL_CHECKSUM">
+<code class="descname">KRB5_PAC_FULL_CHECKSUM</code><a class="headerlink" href="#KRB5_PAC_FULL_CHECKSUM" title="Permalink to this definition">¶</a></dt>
+<dd></dd></dl>
+
+KDC full checksum.
+<table border="1" class="docutils">
+<colgroup>
+<col width="57%" />
+<col width="43%" />
+</colgroup>
+<tbody valign="top">
+<tr class="row-odd"><td><code class="docutils literal">KRB5_PAC_FULL_CHECKSUM</code></td>
+<td><code class="docutils literal">19</code></td>
+</tr>
+</tbody>
+</table>
+</div>
+
+
+ </div>
+ </div>
+ </div>
+ </div>
+ <div class="sidebar">
+ <h2>On this page</h2>
+ <ul>
+<li><a class="reference internal" href="#">KRB5_PAC_FULL_CHECKSUM</a></li>
+</ul>
+
+ 
+ <h2>Table of contents</h2>
+ <ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
+<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
+<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
+<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
+<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
+<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
+<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
+</ul>
+
+ 
+ <h4><a href="../../../index.html">Full Table of Contents</a></h4>
+ <h4>Search</h4>
+ <form class="search" action="../../../search.html" method="get">
+ <input type="text" name="q" size="18" />
+ <input type="submit" value="Go" />
+ <input type="hidden" name="check_keywords" value="yes" />
+ <input type="hidden" name="area" value="default" />
+ </form>
+ </div>
+ <div class="clearer"></div>
+ </div>
+ </div>
+
+ <div class="footer-wrapper">
+ <div class="footer" >
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
+ </div>
+ <div class="left">
+ 
+ <a href="../../../index.html" title="Full Table of Contents"
+ >Contents</a> |
+ <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
+ >previous</a> |
+ <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
+ >next</a> |
+ <a href="../../../genindex.html" title="General Index"
+ >index</a> |
+ <a href="../../../search.html" title="Enter search criteria"
+ >Search</a> |
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_FULL_CHECKSUM">feedback</a>
+ </div>
+ </div>
+ </div>
+
+ </body>
+</html>
\ No newline at end of file

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_LOGON_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_LOGON_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_REQUESTOR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_REQUESTOR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -26,7 +26,7 @@
 <link rel="index" title="Index" href="../../../genindex.html" />
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_AFS3_SALT" href="KRB5_PADATA_AFS3_SALT.html" />
+ <link rel="next" title="KRB5_PAC_FULL_CHECKSUM" href="KRB5_PAC_FULL_CHECKSUM.html" />
 <link rel="prev" title="KRB5_PAC_TICKET_CHECKSUM" href="KRB5_PAC_TICKET_CHECKSUM.html" /> 
 </head>
 <body>
@@ -42,7 +42,7 @@
 accesskey="C">Contents</a> |
 <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
 accesskey="P">previous</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
+ <a href="KRB5_PAC_FULL_CHECKSUM.html" title="KRB5_PAC_FULL_CHECKSUM"
 accesskey="N">next</a> |
 <a href="../../../genindex.html" title="General Index"
 accesskey="I">index</a> |
@@ -138,8 +138,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
@@ -147,7 +147,7 @@
 >Contents</a> |
 <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
 >previous</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
+ <a href="KRB5_PAC_FULL_CHECKSUM.html" title="KRB5_PAC_FULL_CHECKSUM"
 >next</a> |
 <a href="../../../genindex.html" title="General Index"
 >index</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AFS3_SALT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AFS3_SALT.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -27,7 +27,7 @@
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
 <link rel="next" title="KRB5_PADATA_AP_REQ" href="KRB5_PADATA_AP_REQ.html" />
- <link rel="prev" title="KRB5_PAC_UPN_DNS_INFO" href="KRB5_PAC_UPN_DNS_INFO.html" /> 
+ <link rel="prev" title="KRB5_PAC_FULL_CHECKSUM" href="KRB5_PAC_FULL_CHECKSUM.html" /> 
 </head>
 <body>
 <div class="header-wrapper">
@@ -40,7 +40,7 @@
 
 <a href="../../../index.html" title="Full Table of Contents"
 accesskey="C">Contents</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
+ <a href="KRB5_PAC_FULL_CHECKSUM.html" title="KRB5_PAC_FULL_CHECKSUM"
 accesskey="P">previous</a> |
 <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
 accesskey="N">next</a> |
@@ -139,14 +139,14 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
 <a href="../../../index.html" title="Full Table of Contents"
 >Contents</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
+ <a href="KRB5_PAC_FULL_CHECKSUM.html" title="KRB5_PAC_FULL_CHECKSUM"
 >previous</a> |
 <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
 >next</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AP_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AP_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FOR_USER.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FOR_USER.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_COOKIE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_COOKIE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_ERROR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_ERROR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_FAST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_FX_FAST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_NONE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_NONE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OSF_DCE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OSF_DCE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PKINIT_KX.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PKINIT_KX.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PW_SALT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_PW_SALT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -26,7 +26,7 @@
 <link rel="index" title="Index" href="../../../genindex.html" />
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SVR_REFERRAL_INFO" href="KRB5_PADATA_SVR_REFERRAL_INFO.html" />
+ <link rel="next" title="KRB5_PADATA_REDHAT_PASSKEY" href="KRB5_PADATA_REDHAT_PASSKEY.html" />
 <link rel="prev" title="KRB5_PADATA_SPAKE" href="KRB5_PADATA_SPAKE.html" /> 
 </head>
 <body>
@@ -42,7 +42,7 @@
 accesskey="C">Contents</a> |
 <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
 accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
+ <a href="KRB5_PADATA_REDHAT_PASSKEY.html" title="KRB5_PADATA_REDHAT_PASSKEY"
 accesskey="N">next</a> |
 <a href="../../../genindex.html" title="General Index"
 accesskey="I">index</a> |
@@ -138,8 +138,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
@@ -147,7 +147,7 @@
 >Contents</a> |
 <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
 >previous</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
+ <a href="KRB5_PADATA_REDHAT_PASSKEY.html" title="KRB5_PADATA_REDHAT_PASSKEY"
 >next</a> |
 <a href="../../../genindex.html" title="General Index"
 >index</a> |

_service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY.html Added

@@ -0,0 +1,162 @@
+
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+ <title>KRB5_PADATA_REDHAT_PASSKEY &#8212; MIT Kerberos Documentation</title>
+ <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
+ <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
+ <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
+ <script type="text/javascript">
+ var DOCUMENTATION_OPTIONS = {
+ URL_ROOT: '../../../',
+ VERSION: '1.21.1',
+ COLLAPSE_INDEX: false,
+ FILE_SUFFIX: '.html',
+ HAS_SOURCE: true,
+ SOURCELINK_SUFFIX: '.txt'
+ };
+ </script>
+ <script type="text/javascript" src="../../../_static/jquery.js"></script>
+ <script type="text/javascript" src="../../../_static/underscore.js"></script>
+ <script type="text/javascript" src="../../../_static/doctools.js"></script>
+ <link rel="author" title="About these documents" href="../../../about.html" />
+ <link rel="index" title="Index" href="../../../genindex.html" />
+ <link rel="search" title="Search" href="../../../search.html" />
+ <link rel="copyright" title="Copyright" href="../../../copyright.html" />
+ <link rel="next" title="KRB5_PADATA_SVR_REFERRAL_INFO" href="KRB5_PADATA_SVR_REFERRAL_INFO.html" />
+ <link rel="prev" title="KRB5_PADATA_REDHAT_IDP_OAUTH2" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" /> 
+ </head>
+ <body>
+ <div class="header-wrapper">
+ <div class="header">
+ 
+ 
+ <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
+ 
+ <div class="rel">
+ 
+ <a href="../../../index.html" title="Full Table of Contents"
+ accesskey="C">Contents</a> |
+ <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
+ accesskey="P">previous</a> |
+ <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
+ accesskey="N">next</a> |
+ <a href="../../../genindex.html" title="General Index"
+ accesskey="I">index</a> |
+ <a href="../../../search.html" title="Enter search criteria"
+ accesskey="S">Search</a> |
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REDHAT_PASSKEY">feedback</a>
+ </div>
+ </div>
+ </div>
+
+ <div class="content-wrapper">
+ <div class="content">
+ <div class="document">
+ 
+ <div class="documentwrapper">
+ <div class="bodywrapper">
+ <div class="body" role="main">
+ 
+ <div class="section" id="krb5-padata-redhat-passkey">
+<h1>KRB5_PADATA_REDHAT_PASSKEY<a class="headerlink" href="#krb5-padata-redhat-passkey" title="Permalink to this headline">¶</a></h1>
+<dl class="data">
+<dt id="KRB5_PADATA_REDHAT_PASSKEY">
+<code class="descname">KRB5_PADATA_REDHAT_PASSKEY</code><a class="headerlink" href="#KRB5_PADATA_REDHAT_PASSKEY" title="Permalink to this definition">¶</a></dt>
+<dd></dd></dl>
+
+Red Hat Passkey mechanism.
+<table border="1" class="docutils">
+<colgroup>
+<col width="60%" />
+<col width="40%" />
+</colgroup>
+<tbody valign="top">
+<tr class="row-odd"><td><code class="docutils literal">KRB5_PADATA_REDHAT_PASSKEY</code></td>
+<td><code class="docutils literal">153</code></td>
+</tr>
+</tbody>
+</table>
+</div>
+
+
+ </div>
+ </div>
+ </div>
+ </div>
+ <div class="sidebar">
+ <h2>On this page</h2>
+ <ul>
+<li><a class="reference internal" href="#">KRB5_PADATA_REDHAT_PASSKEY</a></li>
+</ul>
+
+ 
+ <h2>Table of contents</h2>
+ <ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
+<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
+<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
+<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
+<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
+<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
+<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
+</ul>
+
+ 
+ <h4><a href="../../../index.html">Full Table of Contents</a></h4>
+ <h4>Search</h4>
+ <form class="search" action="../../../search.html" method="get">
+ <input type="text" name="q" size="18" />
+ <input type="submit" value="Go" />
+ <input type="hidden" name="check_keywords" value="yes" />
+ <input type="hidden" name="area" value="default" />
+ </form>
+ </div>
+ <div class="clearer"></div>
+ </div>
+ </div>
+
+ <div class="footer-wrapper">
+ <div class="footer" >
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
+ </div>
+ <div class="left">
+ 
+ <a href="../../../index.html" title="Full Table of Contents"
+ >Contents</a> |
+ <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
+ >previous</a> |
+ <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
+ >next</a> |
+ <a href="../../../genindex.html" title="General Index"
+ >index</a> |
+ <a href="../../../search.html" title="Enter search criteria"
+ >Search</a> |
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REDHAT_PASSKEY">feedback</a>
+ </div>
+ </div>
+ </div>
+
+ </body>
+</html>
\ No newline at end of file

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_REFERRAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_REFERRAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SESAME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SESAME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SPAKE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SPAKE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -27,7 +27,7 @@
 <link rel="search" title="Search" href="../../../search.html" />
 <link rel="copyright" title="Copyright" href="../../../copyright.html" />
 <link rel="next" title="KRB5_PADATA_TGS_REQ" href="KRB5_PADATA_TGS_REQ.html" />
- <link rel="prev" title="KRB5_PADATA_REDHAT_IDP_OAUTH2" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" /> 
+ <link rel="prev" title="KRB5_PADATA_REDHAT_PASSKEY" href="KRB5_PADATA_REDHAT_PASSKEY.html" /> 
 </head>
 <body>
 <div class="header-wrapper">
@@ -40,7 +40,7 @@
 
 <a href="../../../index.html" title="Full Table of Contents"
 accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
+ <a href="KRB5_PADATA_REDHAT_PASSKEY.html" title="KRB5_PADATA_REDHAT_PASSKEY"
 accesskey="P">previous</a> |
 <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
 accesskey="N">next</a> |
@@ -139,14 +139,14 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
 <a href="../../../index.html" title="Full Table of Contents"
 >Contents</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
+ <a href="KRB5_PADATA_REDHAT_PASSKEY.html" title="KRB5_PADATA_REDHAT_PASSKEY"
 >previous</a> |
 <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
 >next</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_TGS_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_TGS_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRIV.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PRIV.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PVNO.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_PVNO.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_REFERRAL_REALM.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_REFERRAL_REALM.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAFE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAFE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_FLAGS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_FLAGS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_KTYPE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_KTYPE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_TIMES.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_TIMES.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_NOTICKET.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_NOTICKET.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_OPENCLOSE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_OPENCLOSE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_NAME.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_NAME.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_NAME_SIZE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_NAME_SIZE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_REQ.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TGS_REQ.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/MAX_KEYTAB_NAME_LEN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/MAX_KEYTAB_NAME_LEN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/MSEC_DIRBIT.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/MSEC_DIRBIT.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/MSEC_VAL_MASK.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/MSEC_VAL_MASK.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/SALT_TYPE_AFS_LENGTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/SALT_TYPE_AFS_LENGTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/SALT_TYPE_NO_LENGTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/SALT_TYPE_NO_LENGTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/THREEPARAMOPEN.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/THREEPARAMOPEN.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_ANONYMOUS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_ANONYMOUS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_ENC_PA_REP.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_ENC_PA_REP.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_FORWARDABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_FORWARDABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_FORWARDED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_FORWARDED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_HW_AUTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_HW_AUTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_INITIAL.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_INITIAL.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_INVALID.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_INVALID.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_MAY_POSTDATE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_MAY_POSTDATE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_POSTDATED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_POSTDATED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PRE_AUTH.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PRE_AUTH.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PROXIABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PROXIABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PROXY.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_PROXY.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_RENEWABLE.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_RENEWABLE.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/VALID_INT_BITS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/VALID_INT_BITS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/VALID_UINT_BITS.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/VALID_UINT_BITS.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/index.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../../../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -308,6 +308,7 @@
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_SERVER_CHECKSUM.html">KRB5_PAC_SERVER_CHECKSUM</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_TICKET_CHECKSUM.html">KRB5_PAC_TICKET_CHECKSUM</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_UPN_DNS_INFO.html">KRB5_PAC_UPN_DNS_INFO</a></li>
+<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_FULL_CHECKSUM.html">KRB5_PAC_FULL_CHECKSUM</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AFS3_SALT.html">KRB5_PADATA_AFS3_SALT</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AP_REQ.html">KRB5_PADATA_AP_REQ</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AS_CHECKSUM.html">KRB5_PADATA_AS_CHECKSUM</a></li>
@@ -346,6 +347,7 @@
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SESAME.html">KRB5_PADATA_SESAME</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SPAKE.html">KRB5_PADATA_SPAKE</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html">KRB5_PADATA_REDHAT_IDP_OAUTH2</a></li>
+<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_REDHAT_PASSKEY.html">KRB5_PADATA_REDHAT_PASSKEY</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SVR_REFERRAL_INFO.html">KRB5_PADATA_SVR_REFERRAL_INFO</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_TGS_REQ.html">KRB5_PADATA_TGS_REQ</a></li>
 <li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_USE_SPECIFIED_KVNO.html">KRB5_PADATA_USE_SPECIFIED_KVNO</a></li>
@@ -518,8 +520,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../../../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb524_convert_creds_kdc.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb524_convert_creds_kdc.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb524_init_ets.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb524_init_ets.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_const.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_const.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_component.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_component.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_name.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_name.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm_length.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_set_realm_length.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_size.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_size.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_type.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_princ_type.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_roundup.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_roundup.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_x.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_x.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/macros/krb5_xc.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/macros/krb5_xc.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_address.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_address.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_addrtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_addrtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_rep.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_rep.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_rep_enc_part.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_rep_enc_part.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_req.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ap_req.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_auth_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_auth_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_authdata.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_authdata.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_authdatatype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_authdatatype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_authenticator.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_authenticator.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_boolean.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_boolean.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cc_cursor.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cc_cursor.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ccache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ccache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cccol_cursor.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cccol_cursor.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_checksum.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_checksum.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cksumtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cksumtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_const_pointer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_const_pointer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_const_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_const_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cred.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cred.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cred_enc_part.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cred_enc_part.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cred_info.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cred_info.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_creds.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_creds.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_crypto_iov.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_crypto_iov.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_cryptotype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_cryptotype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_deltat.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_deltat.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_kdc_rep_part.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_kdc_rep_part.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_tkt_part.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_enc_tkt_part.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_encrypt_block.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_encrypt_block.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_enctype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_enctype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_error.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_error.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_error_code.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_error_code.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_expire_callback_func.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_expire_callback_func.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_flags.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_flags.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_get_init_creds_opt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_get_init_creds_opt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_gic_opt_pa_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_gic_opt_pa_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_init_creds_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_init_creds_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_int16.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_int16.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_int32.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_int32.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_kdc_rep.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_kdc_rep.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_kdc_req.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_kdc_req.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_key.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_key.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_keyblock.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_keyblock.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_keytab.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_keytab.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_keytab_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_keytab_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_keyusage.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_keyusage.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_kt_cursor.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_kt_cursor.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_kvno.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_kvno.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_last_req_entry.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_last_req_entry.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_magic.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_magic.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_mk_req_checksum_func.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_mk_req_checksum_func.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_msgtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_msgtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_octet.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_octet.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_pac_req.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_pac_req.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_server_referral_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_server_referral_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_svr_referral_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pa_svr_referral_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pac.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pac.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pointer.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pointer.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_post_recv_fn.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_post_recv_fn.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pre_send_fn.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pre_send_fn.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_preauthtype.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_preauthtype.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_principal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_principal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_principal_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_principal_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_prompt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_prompt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_prompt_type.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_prompt_type.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_prompter_fct.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_prompter_fct.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_pwd_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_pwd_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_rcache.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_rcache.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_replay_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_replay_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_fn.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_fn.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_otp_challenge.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_otp_challenge.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_otp_tokeninfo.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_otp_tokeninfo.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_pkinit_challenge.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_pkinit_challenge.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_pkinit_identity.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_responder_pkinit_identity.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_response.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_response.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ticket.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ticket.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ticket_times.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ticket_times.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_timestamp.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_timestamp.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_tkt_authent.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_tkt_authent.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_tkt_creds_context.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_tkt_creds_context.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_trace_callback.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_trace_callback.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_trace_info.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_trace_info.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_transited.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_transited.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_typed_data.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_typed_data.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ui_2.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ui_2.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_ui_4.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_ui_4.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/krb5_verify_init_creds_opt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/krb5_verify_init_creds_opt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/refs/types/passwd_phrase_element.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/refs/types/passwd_phrase_element.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/appdev/y2038.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/appdev/y2038.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/ccache_def.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/ccache_def.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/date_format.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/date_format.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/keytab_def.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/keytab_def.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/rcache_def.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/rcache_def.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/basic/stash_file_def.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/basic/stash_file_def.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build/directory_org.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build/directory_org.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build/doing_build.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build/doing_build.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build/options2configure.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build/options2configure.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -175,6 +175,8 @@
 <dt>LIBS=LDNAME</dt>
 <dd>This option allows one to specify libraries to be passed to the
 linker (e.g., <code class="docutils literal">-l&lt;library&gt;</code>)</dd>
+<dt>PKCS11_MODNAME=library</dt>
+<dd>Override the built-in default PKCS11 library name.</dd>
 <dt>SS_LIB=libs…</dt>
 <dd>If <code class="docutils literal">-lss</code> is not the correct way to link in your installed ss
 library, for example if additional support libraries are needed,
@@ -450,8 +452,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build/osconf.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build/osconf.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/build_this.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/build_this.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/copyright.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/copyright.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -63,7 +63,7 @@
 
 <div class="section" id="copyright">
 <h1>Copyright<a class="headerlink" href="#copyright" title="Permalink to this headline">¶</a></h1>
-Copyright © 1985-2022 by the Massachusetts Institute of
+Copyright © 1985-2023 by the Massachusetts Institute of
 Technology and its contributors. All rights reserved.
 See <a class="reference internal" href="mitK5license.html#mitk5license">MIT Kerberos License information</a> for additional copyright and license
 information.
@@ -112,8 +112,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="#">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="#">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/ccache_file_format.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/ccache_file_format.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/cookie.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/cookie.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/freshness_token.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/freshness_token.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/keytab_file_format.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/keytab_file_format.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/formats/rcache_file_format.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/formats/rcache_file_format.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-A.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-A.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-C.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-C.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-E.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-E.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-K.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-K.html Changed

@@ -13,7 +13,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -1039,10 +1039,10 @@
 </li>
 <li><a href="appdev/refs/api/krb5_k_encrypt.html#c.krb5_k_encrypt">krb5_k_encrypt (C function)</a>
 </li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
 <li><a href="appdev/refs/api/krb5_k_encrypt_iov.html#c.krb5_k_encrypt_iov">krb5_k_encrypt_iov (C function)</a>
 </li>
+ </ul></td>
+ <td style="width: 33%; vertical-align: top;"><ul>
 <li><a href="appdev/refs/api/krb5_k_free_key.html#c.krb5_k_free_key">krb5_k_free_key (C function)</a>
 </li>
 <li><a href="appdev/refs/api/krb5_k_key_enctype.html#c.krb5_k_key_enctype">krb5_k_key_enctype (C function)</a>
@@ -1435,6 +1435,8 @@
 </li>
 <li><a href="appdev/refs/api/krb5_pac_free.html#c.krb5_pac_free">krb5_pac_free (C function)</a>
 </li>
+ <li><a href="appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM.html#KRB5_PAC_FULL_CHECKSUM">KRB5_PAC_FULL_CHECKSUM (built-in variable)</a>
+</li>
 <li><a href="appdev/refs/api/krb5_pac_get_buffer.html#c.krb5_pac_get_buffer">krb5_pac_get_buffer (C function)</a>
 </li>
 <li><a href="appdev/refs/api/krb5_pac_get_client_info.html#c.krb5_pac_get_client_info">krb5_pac_get_client_info (C function)</a>
@@ -1523,6 +1525,8 @@
 </li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html#KRB5_PADATA_REDHAT_IDP_OAUTH2">KRB5_PADATA_REDHAT_IDP_OAUTH2 (built-in variable)</a>
 </li>
+ <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY.html#KRB5_PADATA_REDHAT_PASSKEY">KRB5_PADATA_REDHAT_PASSKEY (built-in variable)</a>
+</li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_REFERRAL.html#KRB5_PADATA_REFERRAL">KRB5_PADATA_REFERRAL (built-in variable)</a>
 </li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html#KRB5_PADATA_S4U_X509_USER">KRB5_PADATA_S4U_X509_USER (built-in variable)</a>
@@ -2060,8 +2064,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-L.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-L.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-M.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-M.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-P.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-P.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-R.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-R.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-S.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-S.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-T.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-T.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-V.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-V.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex-all.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex-all.html Changed

@@ -13,7 +13,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -1200,10 +1200,10 @@
 </li>
 <li><a href="appdev/refs/api/krb5_k_decrypt_iov.html#c.krb5_k_decrypt_iov">krb5_k_decrypt_iov (C function)</a>
 </li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
 <li><a href="appdev/refs/api/krb5_k_encrypt.html#c.krb5_k_encrypt">krb5_k_encrypt (C function)</a>
 </li>
+ </ul></td>
+ <td style="width: 33%; vertical-align: top;"><ul>
 <li><a href="appdev/refs/api/krb5_k_encrypt_iov.html#c.krb5_k_encrypt_iov">krb5_k_encrypt_iov (C function)</a>
 </li>
 <li><a href="appdev/refs/api/krb5_k_free_key.html#c.krb5_k_free_key">krb5_k_free_key (C function)</a>
@@ -1598,6 +1598,8 @@
 </li>
 <li><a href="appdev/refs/api/krb5_pac_free.html#c.krb5_pac_free">krb5_pac_free (C function)</a>
 </li>
+ <li><a href="appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM.html#KRB5_PAC_FULL_CHECKSUM">KRB5_PAC_FULL_CHECKSUM (built-in variable)</a>
+</li>
 <li><a href="appdev/refs/api/krb5_pac_get_buffer.html#c.krb5_pac_get_buffer">krb5_pac_get_buffer (C function)</a>
 </li>
 <li><a href="appdev/refs/api/krb5_pac_get_client_info.html#c.krb5_pac_get_client_info">krb5_pac_get_client_info (C function)</a>
@@ -1686,6 +1688,8 @@
 </li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html#KRB5_PADATA_REDHAT_IDP_OAUTH2">KRB5_PADATA_REDHAT_IDP_OAUTH2 (built-in variable)</a>
 </li>
+ <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY.html#KRB5_PADATA_REDHAT_PASSKEY">KRB5_PADATA_REDHAT_PASSKEY (built-in variable)</a>
+</li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_REFERRAL.html#KRB5_PADATA_REFERRAL">KRB5_PADATA_REFERRAL (built-in variable)</a>
 </li>
 <li><a href="appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html#KRB5_PADATA_S4U_X509_USER">KRB5_PADATA_S4U_X509_USER (built-in variable)</a>
@@ -2403,8 +2407,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/genindex.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/genindex.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/index.html Changed

@@ -5,14 +5,14 @@
 <html xmlns="http://www.w3.org/1999/xhtml">
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MIT Kerberos Documentation (1.20.1) &#8212; MIT Kerberos Documentation</title>
+ <title>MIT Kerberos Documentation (1.21.1) &#8212; MIT Kerberos Documentation</title>
 <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
 <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
 <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -45,7 +45,7 @@
 accesskey="I">index</a> |
 <a href="search.html" title="Enter search criteria"
 accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.20.1)">feedback</a>
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.21.1)">feedback</a>
 </div>
 </div>
 </div>
@@ -59,7 +59,7 @@
 <div class="body" role="main">
 
 <div class="section" id="mit-kerberos-documentation-release">
-<h1>MIT Kerberos Documentation (1.20.1)<a class="headerlink" href="#mit-kerberos-documentation-release" title="Permalink to this headline">¶</a></h1>
+<h1>MIT Kerberos Documentation (1.21.1)<a class="headerlink" href="#mit-kerberos-documentation-release" title="Permalink to this headline">¶</a></h1>
 <div class="toctree-wrapper compound">
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
@@ -85,7 +85,7 @@
 <div class="sidebar">
 <h2>On this page</h2>
 <ul>
-<li><a class="reference internal" href="#">MIT Kerberos Documentation (1.20.1)</a></li>
+<li><a class="reference internal" href="#">MIT Kerberos Documentation (1.21.1)</a></li>
 </ul>
 
 
@@ -120,8 +120,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
@@ -133,7 +133,7 @@
 >index</a> |
 <a href="search.html" title="Enter search criteria"
 >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.20.1)">feedback</a>
+ <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.21.1)">feedback</a>
 </div>
 </div>
 </div>

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/mitK5defaults.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/mitK5defaults.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -203,7 +203,7 @@
 <table border="1" class="docutils">
 <colgroup>
 <col width="28%" />
-<col width="14%" />
+<col width="15%" />
 <col width="29%" />
 <col width="29%" />
 </colgroup>
@@ -255,6 +255,11 @@
 <td><code class="docutils literal">FILE:/etc/krb5.keytab</code></td>
 <td><code class="docutils literal">FILE:/etc/krb5.keytab</code></td>
 </tr>
+<tr class="row-even"><td>Default PKCS11 module</td>
+<td>PKCS11_MODNAME</td>
+<td><code class="docutils literal">opensc-pkcs11.so</code></td>
+<td><code class="docutils literal">opensc-pkcs11.so</code></td>
+</tr>
 </tbody>
 </table>
 The default client keytab name (DEFCKTNAME) typically defaults to
@@ -338,8 +343,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/mitK5features.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/mitK5features.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -645,6 +645,44 @@
 </ul>
 </li>
 </ul>
+Release 1.21
+<ul class="simple">
+<li>User experience:<ul>
+<li>Added a credential cache type providing compatibility with the
+macOS 11 native credential cache.</li>
+</ul>
+</li>
+<li>Developer experience:<ul>
+<li>libkadm5 will use the provided krb5_context object to read
+configuration values, instead of creating its own.</li>
+<li>Added an interface to retrieve the ticket session key from a GSS
+context.</li>
+</ul>
+</li>
+<li>Protocol evolution:<ul>
+<li>The KDC will no longer issue tickets with RC4 or triple-DES
+session keys unless explicitly configured with the new allow_rc4
+or allow_des3 variables respectively.</li>
+<li>The KDC will assume that all services can handle aes256-sha1
+session keys unless the service principal has a session_enctypes
+string attribute.</li>
+<li>Support for PAC full KDC checksums has been added to mitigate an
+S4U2Proxy privilege escalation attack.</li>
+<li>The PKINIT client will advertise a more modern set of supported
+CMS algorithms.</li>
+</ul>
+</li>
+<li>Code quality:<ul>
+<li>Removed unused code in libkrb5, libkrb5support, and the PKINIT
+module.</li>
+<li>Modernized the KDC code for processing TGS requests, the code for
+encrypting and decrypting key data, the PAC handling code, and the
+GSS library packet parsing and composition code.</li>
+<li>Improved the test framework’s detection of memory errors in daemon
+processes when used with asan.</li>
+</ul>
+</li>
+</ul>
 <cite>Pre-authentication mechanisms</cite>
 <ul class="simple">
 <li>PW-SALT <a class="rfc reference external" href="https://tools.ietf.org/html/rfc4120.html#section-5.2.7.3">RFC 4120#section-5.2.7.3</a></li>
@@ -709,8 +747,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/mitK5license.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/mitK5license.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: './',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -65,7 +65,7 @@
 <h1>MIT Kerberos License information<a class="headerlink" href="#mit-kerberos-license-information" title="Permalink to this headline">¶</a></h1>
 <div class="toctree-wrapper compound">
 </div>
-Copyright © 1985-2022 by the Massachusetts Institute of Technology.
+Copyright © 1985-2023 by the Massachusetts Institute of Technology.
 All rights reserved.
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
@@ -703,6 +703,34 @@
 </div></blockquote>
 <hr class="docutils" />
 <blockquote>
+<div>Copyright © 2022 United States Government as represented by the
+Secretary of the Navy. All rights reserved.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+<ul class="simple">
+<li>Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.</li>
+<li>Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in
+the documentation and/or other materials provided with the
+distribution.</li>
+</ul>
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+“AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+OF THE POSSIBILITY OF SUCH DAMAGE.
+</div></blockquote>
+<hr class="docutils" />
+<blockquote>
 <div>Copyright © 1991, 1992, 1994 by Cygnus Support.
 Permission to use, copy, modify, and
 distribute this software and its documentation for any purpose and
@@ -1255,8 +1283,8 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/objects.inv -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/objects.inv Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/ccselect.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/ccselect.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/certauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/certauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/clpreauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/clpreauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/general.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/general.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/gssapi.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/gssapi.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/hostrealm.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/hostrealm.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/internal.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/internal.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/kadm5_auth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/kadm5_auth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/kadm5_hook.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/kadm5_hook.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/kdcpolicy.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/kdcpolicy.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/kdcpreauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/kdcpreauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/localauth.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/localauth.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/locate.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/locate.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/profile.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/profile.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/plugindev/pwqual.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/plugindev/pwqual.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/resources.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/resources.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/search.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/search.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/searchindex.js -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/searchindex.js Changed

@@ -1 +1 @@
-Search.setIndex({docnames:"about","admin/admin_commands/index","admin/admin_commands/k5srvutil","admin/admin_commands/kadmin_local","admin/admin_commands/kadmind","admin/admin_commands/kdb5_ldap_util","admin/admin_commands/kdb5_util","admin/admin_commands/kprop","admin/admin_commands/kpropd","admin/admin_commands/kproplog","admin/admin_commands/krb5kdc","admin/admin_commands/ktutil","admin/admin_commands/sserver","admin/advanced/index","admin/advanced/retiring-des","admin/appl_servers","admin/auth_indicator","admin/backup_host","admin/conf_files/index","admin/conf_files/kadm5_acl","admin/conf_files/kdc_conf","admin/conf_files/krb5_conf","admin/conf_ldap","admin/database","admin/dbtypes","admin/dictionary","admin/enctypes","admin/env_variables","admin/host_config","admin/https","admin/index","admin/install","admin/install_appl_srv","admin/install_clients","admin/install_kdc","admin/lockout","admin/otp","admin/pkinit","admin/princ_dns","admin/realm_config","admin/spake","admin/troubleshoot","admin/various_envs","appdev/gssapi","appdev/h5l_mit_apidiff","appdev/index","appdev/init_creds","appdev/princ_handle","appdev/refs/api/index","appdev/refs/api/krb5_425_conv_principal","appdev/refs/api/krb5_524_conv_principal","appdev/refs/api/krb5_524_convert_creds","appdev/refs/api/krb5_address_compare","appdev/refs/api/krb5_address_order","appdev/refs/api/krb5_address_search","appdev/refs/api/krb5_allow_weak_crypto","appdev/refs/api/krb5_aname_to_localname","appdev/refs/api/krb5_anonymous_principal","appdev/refs/api/krb5_anonymous_realm","appdev/refs/api/krb5_appdefault_boolean","appdev/refs/api/krb5_appdefault_string","appdev/refs/api/krb5_auth_con_free","appdev/refs/api/krb5_auth_con_genaddrs","appdev/refs/api/krb5_auth_con_get_checksum_func","appdev/refs/api/krb5_auth_con_getaddrs","appdev/refs/api/krb5_auth_con_getauthenticator","appdev/refs/api/krb5_auth_con_getflags","appdev/refs/api/krb5_auth_con_getkey","appdev/refs/api/krb5_auth_con_getkey_k","appdev/refs/api/krb5_auth_con_getlocalseqnumber","appdev/refs/api/krb5_auth_con_getlocalsubkey","appdev/refs/api/krb5_auth_con_getrcache","appdev/refs/api/krb5_auth_con_getrecvsubkey","appdev/refs/api/krb5_auth_con_getrecvsubkey_k","appdev/refs/api/krb5_auth_con_getremoteseqnumber","appdev/refs/api/krb5_auth_con_getremotesubkey","appdev/refs/api/krb5_auth_con_getsendsubkey","appdev/refs/api/krb5_auth_con_getsendsubkey_k","appdev/refs/api/krb5_auth_con_init","appdev/refs/api/krb5_auth_con_initivector","appdev/refs/api/krb5_auth_con_set_checksum_func","appdev/refs/api/krb5_auth_con_set_req_cksumtype","appdev/refs/api/krb5_auth_con_setaddrs","appdev/refs/api/krb5_auth_con_setflags","appdev/refs/api/krb5_auth_con_setports","appdev/refs/api/krb5_auth_con_setrcache","appdev/refs/api/krb5_auth_con_setrecvsubkey","appdev/refs/api/krb5_auth_con_setrecvsubkey_k","appdev/refs/api/krb5_auth_con_setsendsubkey","appdev/refs/api/krb5_auth_con_setsendsubkey_k","appdev/refs/api/krb5_auth_con_setuseruserkey","appdev/refs/api/krb5_build_principal","appdev/refs/api/krb5_build_principal_alloc_va","appdev/refs/api/krb5_build_principal_ext","appdev/refs/api/krb5_build_principal_va","appdev/refs/api/krb5_c_block_size","appdev/refs/api/krb5_c_checksum_length","appdev/refs/api/krb5_c_crypto_length","appdev/refs/api/krb5_c_crypto_length_iov","appdev/refs/api/krb5_c_decrypt","appdev/refs/api/krb5_c_decrypt_iov","appdev/refs/api/krb5_c_derive_prfplus","appdev/refs/api/krb5_c_encrypt","appdev/refs/api/krb5_c_encrypt_iov","appdev/refs/api/krb5_c_encrypt_length","appdev/refs/api/krb5_c_enctype_compare","appdev/refs/api/krb5_c_free_state","appdev/refs/api/krb5_c_fx_cf2_simple","appdev/refs/api/krb5_c_init_state","appdev/refs/api/krb5_c_is_coll_proof_cksum","appdev/refs/api/krb5_c_is_keyed_cksum","appdev/refs/api/krb5_c_keyed_checksum_types","appdev/refs/api/krb5_c_keylengths","appdev/refs/api/krb5_c_make_checksum","appdev/refs/api/krb5_c_make_checksum_iov","appdev/refs/api/krb5_c_make_random_key","appdev/refs/api/krb5_c_padding_length","appdev/refs/api/krb5_c_prf","appdev/refs/api/krb5_c_prf_length","appdev/refs/api/krb5_c_prfplus","appdev/refs/api/krb5_c_random_add_entropy","appdev/refs/api/krb5_c_random_make_octets","appdev/refs/api/krb5_c_random_os_entropy","appdev/refs/api/krb5_c_random_seed","appdev/refs/api/krb5_c_random_to_key","appdev/refs/api/krb5_c_string_to_key","appdev/refs/api/krb5_c_string_to_key_with_params","appdev/refs/api/krb5_c_valid_cksumtype","appdev/refs/api/krb5_c_valid_enctype","appdev/refs/api/krb5_c_verify_checksum","appdev/refs/api/krb5_c_verify_checksum_iov","appdev/refs/api/krb5_calculate_checksum","appdev/refs/api/krb5_cc_cache_match","appdev/refs/api/krb5_cc_close","appdev/refs/api/krb5_cc_copy_creds","appdev/refs/api/krb5_cc_default","appdev/refs/api/krb5_cc_default_name","appdev/refs/api/krb5_cc_destroy","appdev/refs/api/krb5_cc_dup","appdev/refs/api/krb5_cc_end_seq_get","appdev/refs/api/krb5_cc_gen_new","appdev/refs/api/krb5_cc_get_config","appdev/refs/api/krb5_cc_get_flags","appdev/refs/api/krb5_cc_get_full_name","appdev/refs/api/krb5_cc_get_name","appdev/refs/api/krb5_cc_get_principal","appdev/refs/api/krb5_cc_get_type","appdev/refs/api/krb5_cc_initialize","appdev/refs/api/krb5_cc_move","appdev/refs/api/krb5_cc_new_unique","appdev/refs/api/krb5_cc_next_cred","appdev/refs/api/krb5_cc_remove_cred","appdev/refs/api/krb5_cc_resolve","appdev/refs/api/krb5_cc_retrieve_cred","appdev/refs/api/krb5_cc_select","appdev/refs/api/krb5_cc_set_config","appdev/refs/api/krb5_cc_set_default_name","appdev/refs/api/krb5_cc_set_flags","appdev/refs/api/krb5_cc_start_seq_get","appdev/refs/api/krb5_cc_store_cred","appdev/refs/api/krb5_cc_support_switch","appdev/refs/api/krb5_cc_switch","appdev/refs/api/krb5_cccol_cursor_free","appdev/refs/api/krb5_cccol_cursor_new","appdev/refs/api/krb5_cccol_cursor_next","appdev/refs/api/krb5_cccol_have_content","appdev/refs/api/krb5_change_password","appdev/refs/api/krb5_check_clockskew","appdev/refs/api/krb5_checksum_size","appdev/refs/api/krb5_chpw_message","appdev/refs/api/krb5_cksumtype_to_string","appdev/refs/api/krb5_clear_error_message","appdev/refs/api/krb5_copy_addresses","appdev/refs/api/krb5_copy_authdata","appdev/refs/api/krb5_copy_authenticator","appdev/refs/api/krb5_copy_checksum","appdev/refs/api/krb5_copy_context","appdev/refs/api/krb5_copy_creds","appdev/refs/api/krb5_copy_data","appdev/refs/api/krb5_copy_error_message","appdev/refs/api/krb5_copy_keyblock","appdev/refs/api/krb5_copy_keyblock_contents","appdev/refs/api/krb5_copy_principal","appdev/refs/api/krb5_copy_ticket","appdev/refs/api/krb5_decode_authdata_container","appdev/refs/api/krb5_decode_ticket","appdev/refs/api/krb5_decrypt","appdev/refs/api/krb5_deltat_to_string","appdev/refs/api/krb5_eblock_enctype","appdev/refs/api/krb5_encode_authdata_container","appdev/refs/api/krb5_encrypt","appdev/refs/api/krb5_encrypt_size","appdev/refs/api/krb5_enctype_to_name","appdev/refs/api/krb5_enctype_to_string","appdev/refs/api/krb5_expand_hostname","appdev/refs/api/krb5_find_authdata","appdev/refs/api/krb5_finish_key","appdev/refs/api/krb5_finish_random_key","appdev/refs/api/krb5_free_addresses","appdev/refs/api/krb5_free_ap_rep_enc_part","appdev/refs/api/krb5_free_authdata","appdev/refs/api/krb5_free_authenticator","appdev/refs/api/krb5_free_checksum","appdev/refs/api/krb5_free_checksum_contents","appdev/refs/api/krb5_free_cksumtypes","appdev/refs/api/krb5_free_context","appdev/refs/api/krb5_free_cred_contents","appdev/refs/api/krb5_free_creds","appdev/refs/api/krb5_free_data","appdev/refs/api/krb5_free_data_contents","appdev/refs/api/krb5_free_default_realm","appdev/refs/api/krb5_free_enctypes","appdev/refs/api/krb5_free_error","appdev/refs/api/krb5_free_error_message","appdev/refs/api/krb5_free_host_realm","appdev/refs/api/krb5_free_keyblock","appdev/refs/api/krb5_free_keyblock_contents","appdev/refs/api/krb5_free_keytab_entry_contents","appdev/refs/api/krb5_free_principal","appdev/refs/api/krb5_free_string","appdev/refs/api/krb5_free_tgt_creds","appdev/refs/api/krb5_free_ticket","appdev/refs/api/krb5_free_unparsed_name","appdev/refs/api/krb5_fwd_tgt_creds","appdev/refs/api/krb5_get_credentials","appdev/refs/api/krb5_get_credentials_renew","appdev/refs/api/krb5_get_credentials_validate","appdev/refs/api/krb5_get_default_realm","appdev/refs/api/krb5_get_error_message","appdev/refs/api/krb5_get_etype_info","appdev/refs/api/krb5_get_fallback_host_realm","appdev/refs/api/krb5_get_host_realm","appdev/refs/api/krb5_get_in_tkt_with_keytab","appdev/refs/api/krb5_get_in_tkt_with_password","appdev/refs/api/krb5_get_in_tkt_with_skey","appdev/refs/api/krb5_get_init_creds_keytab","appdev/refs/api/krb5_get_init_creds_opt_alloc","appdev/refs/api/krb5_get_init_creds_opt_free","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_init","appdev/refs/api/krb5_get_init_creds_opt_set_address_list","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_pa","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life","appdev/refs/api/krb5_get_init_creds_opt_set_responder","appdev/refs/api/krb5_get_init_creds_opt_set_salt","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life","appdev/refs/api/krb5_get_init_creds_password","appdev/refs/api/krb5_get_permitted_enctypes","appdev/refs/api/krb5_get_profile","appdev/refs/api/krb5_get_prompt_types","appdev/refs/api/krb5_get_renewed_creds","appdev/refs/api/krb5_get_server_rcache","appdev/refs/api/krb5_get_time_offsets","appdev/refs/api/krb5_get_validated_creds","appdev/refs/api/krb5_init_context","appdev/refs/api/krb5_init_context_profile","appdev/refs/api/krb5_init_creds_free","appdev/refs/api/krb5_init_creds_get","appdev/refs/api/krb5_init_creds_get_creds","appdev/refs/api/krb5_init_creds_get_error","appdev/refs/api/krb5_init_creds_get_times","appdev/refs/api/krb5_init_creds_init","appdev/refs/api/krb5_init_creds_set_keytab","appdev/refs/api/krb5_init_creds_set_password","appdev/refs/api/krb5_init_creds_set_service","appdev/refs/api/krb5_init_creds_step","appdev/refs/api/krb5_init_keyblock","appdev/refs/api/krb5_init_random_key","appdev/refs/api/krb5_init_secure_context","appdev/refs/api/krb5_is_config_principal","appdev/refs/api/krb5_is_referral_realm","appdev/refs/api/krb5_is_thread_safe","appdev/refs/api/krb5_k_create_key","appdev/refs/api/krb5_k_decrypt","appdev/refs/api/krb5_k_decrypt_iov","appdev/refs/api/krb5_k_encrypt","appdev/refs/api/krb5_k_encrypt_iov","appdev/refs/api/krb5_k_free_key","appdev/refs/api/krb5_k_key_enctype","appdev/refs/api/krb5_k_key_keyblock","appdev/refs/api/krb5_k_make_checksum","appdev/refs/api/krb5_k_make_checksum_iov","appdev/refs/api/krb5_k_prf","appdev/refs/api/krb5_k_reference_key","appdev/refs/api/krb5_k_verify_checksum","appdev/refs/api/krb5_k_verify_checksum_iov","appdev/refs/api/krb5_kdc_sign_ticket","appdev/refs/api/krb5_kdc_verify_ticket","appdev/refs/api/krb5_kt_add_entry","appdev/refs/api/krb5_kt_client_default","appdev/refs/api/krb5_kt_close","appdev/refs/api/krb5_kt_default","appdev/refs/api/krb5_kt_default_name","appdev/refs/api/krb5_kt_dup","appdev/refs/api/krb5_kt_end_seq_get","appdev/refs/api/krb5_kt_free_entry","appdev/refs/api/krb5_kt_get_entry","appdev/refs/api/krb5_kt_get_name","appdev/refs/api/krb5_kt_get_type","appdev/refs/api/krb5_kt_have_content","appdev/refs/api/krb5_kt_next_entry","appdev/refs/api/krb5_kt_read_service_key","appdev/refs/api/krb5_kt_remove_entry","appdev/refs/api/krb5_kt_resolve","appdev/refs/api/krb5_kt_start_seq_get","appdev/refs/api/krb5_kuserok","appdev/refs/api/krb5_make_authdata_kdc_issued","appdev/refs/api/krb5_marshal_credentials","appdev/refs/api/krb5_merge_authdata","appdev/refs/api/krb5_mk_1cred","appdev/refs/api/krb5_mk_error","appdev/refs/api/krb5_mk_ncred","appdev/refs/api/krb5_mk_priv","appdev/refs/api/krb5_mk_rep","appdev/refs/api/krb5_mk_rep_dce","appdev/refs/api/krb5_mk_req","appdev/refs/api/krb5_mk_req_extended","appdev/refs/api/krb5_mk_safe","appdev/refs/api/krb5_os_localaddr","appdev/refs/api/krb5_pac_add_buffer","appdev/refs/api/krb5_pac_free","appdev/refs/api/krb5_pac_get_buffer","appdev/refs/api/krb5_pac_get_client_info","appdev/refs/api/krb5_pac_get_types","appdev/refs/api/krb5_pac_init","appdev/refs/api/krb5_pac_parse","appdev/refs/api/krb5_pac_sign","appdev/refs/api/krb5_pac_sign_ext","appdev/refs/api/krb5_pac_verify","appdev/refs/api/krb5_pac_verify_ext","appdev/refs/api/krb5_parse_name","appdev/refs/api/krb5_parse_name_flags","appdev/refs/api/krb5_prepend_error_message","appdev/refs/api/krb5_principal2salt","appdev/refs/api/krb5_principal_compare","appdev/refs/api/krb5_principal_compare_any_realm","appdev/refs/api/krb5_principal_compare_flags","appdev/refs/api/krb5_process_key","appdev/refs/api/krb5_prompter_posix","appdev/refs/api/krb5_random_key","appdev/refs/api/krb5_rd_cred","appdev/refs/api/krb5_rd_error","appdev/refs/api/krb5_rd_priv","appdev/refs/api/krb5_rd_rep","appdev/refs/api/krb5_rd_rep_dce","appdev/refs/api/krb5_rd_req","appdev/refs/api/krb5_rd_safe","appdev/refs/api/krb5_read_password","appdev/refs/api/krb5_realm_compare","appdev/refs/api/krb5_recvauth","appdev/refs/api/krb5_recvauth_version","appdev/refs/api/krb5_responder_get_challenge","appdev/refs/api/krb5_responder_list_questions","appdev/refs/api/krb5_responder_otp_challenge_free","appdev/refs/api/krb5_responder_otp_get_challenge","appdev/refs/api/krb5_responder_otp_set_answer","appdev/refs/api/krb5_responder_pkinit_challenge_free","appdev/refs/api/krb5_responder_pkinit_get_challenge","appdev/refs/api/krb5_responder_pkinit_set_answer","appdev/refs/api/krb5_responder_set_answer","appdev/refs/api/krb5_salttype_to_string","appdev/refs/api/krb5_sendauth","appdev/refs/api/krb5_server_decrypt_ticket_keytab","appdev/refs/api/krb5_set_default_realm","appdev/refs/api/krb5_set_default_tgs_enctypes","appdev/refs/api/krb5_set_error_message","appdev/refs/api/krb5_set_kdc_recv_hook","appdev/refs/api/krb5_set_kdc_send_hook","appdev/refs/api/krb5_set_password","appdev/refs/api/krb5_set_password_using_ccache","appdev/refs/api/krb5_set_principal_realm","appdev/refs/api/krb5_set_real_time","appdev/refs/api/krb5_set_trace_callback","appdev/refs/api/krb5_set_trace_filename","appdev/refs/api/krb5_sname_match","appdev/refs/api/krb5_sname_to_principal","appdev/refs/api/krb5_string_to_cksumtype","appdev/refs/api/krb5_string_to_deltat","appdev/refs/api/krb5_string_to_enctype","appdev/refs/api/krb5_string_to_key","appdev/refs/api/krb5_string_to_salttype","appdev/refs/api/krb5_string_to_timestamp","appdev/refs/api/krb5_timeofday","appdev/refs/api/krb5_timestamp_to_sfstring","appdev/refs/api/krb5_timestamp_to_string","appdev/refs/api/krb5_tkt_creds_free","appdev/refs/api/krb5_tkt_creds_get","appdev/refs/api/krb5_tkt_creds_get_creds","appdev/refs/api/krb5_tkt_creds_get_times","appdev/refs/api/krb5_tkt_creds_init","appdev/refs/api/krb5_tkt_creds_step","appdev/refs/api/krb5_unmarshal_credentials","appdev/refs/api/krb5_unparse_name","appdev/refs/api/krb5_unparse_name_ext","appdev/refs/api/krb5_unparse_name_flags","appdev/refs/api/krb5_unparse_name_flags_ext","appdev/refs/api/krb5_us_timeofday","appdev/refs/api/krb5_use_enctype","appdev/refs/api/krb5_verify_authdata_kdc_issued","appdev/refs/api/krb5_verify_checksum","appdev/refs/api/krb5_verify_init_creds","appdev/refs/api/krb5_verify_init_creds_opt_init","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail","appdev/refs/api/krb5_vprepend_error_message","appdev/refs/api/krb5_vset_error_message","appdev/refs/api/krb5_vwrap_error_message","appdev/refs/api/krb5_wrap_error_message","appdev/refs/index","appdev/refs/macros/ADDRTYPE_ADDRPORT","appdev/refs/macros/ADDRTYPE_CHAOS","appdev/refs/macros/ADDRTYPE_DDP","appdev/refs/macros/ADDRTYPE_INET","appdev/refs/macros/ADDRTYPE_INET6","appdev/refs/macros/ADDRTYPE_IPPORT","appdev/refs/macros/ADDRTYPE_ISO","appdev/refs/macros/ADDRTYPE_IS_LOCAL","appdev/refs/macros/ADDRTYPE_NETBIOS","appdev/refs/macros/ADDRTYPE_XNS","appdev/refs/macros/AD_TYPE_EXTERNAL","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK","appdev/refs/macros/AD_TYPE_REGISTERED","appdev/refs/macros/AD_TYPE_RESERVED","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED","appdev/refs/macros/AP_OPTS_RESERVED","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY","appdev/refs/macros/AP_OPTS_USE_SUBKEY","appdev/refs/macros/AP_OPTS_WIRE_MASK","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256","appdev/refs/macros/CKSUMTYPE_CRC32","appdev/refs/macros/CKSUMTYPE_DESCBC","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR","appdev/refs/macros/CKSUMTYPE_NIST_SHA","appdev/refs/macros/CKSUMTYPE_RSA_MD4","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES","appdev/refs/macros/CKSUMTYPE_RSA_MD5","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES","appdev/refs/macros/CKSUMTYPE_SHA1","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1","appdev/refs/macros/ENCTYPE_DES_CBC_CRC","appdev/refs/macros/ENCTYPE_DES_CBC_MD4","appdev/refs/macros/ENCTYPE_DES_CBC_MD5","appdev/refs/macros/ENCTYPE_DES_CBC_RAW","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS","appdev/refs/macros/ENCTYPE_NULL","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV","appdev/refs/macros/ENCTYPE_RSA_ENV","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS","appdev/refs/macros/ENCTYPE_UNKNOWN","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE","appdev/refs/macros/KDC_OPT_CANONICALIZE","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY","appdev/refs/macros/KDC_OPT_FORWARDABLE","appdev/refs/macros/KDC_OPT_FORWARDED","appdev/refs/macros/KDC_OPT_POSTDATED","appdev/refs/macros/KDC_OPT_PROXIABLE","appdev/refs/macros/KDC_OPT_PROXY","appdev/refs/macros/KDC_OPT_RENEW","appdev/refs/macros/KDC_OPT_RENEWABLE","appdev/refs/macros/KDC_OPT_RENEWABLE_OK","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS","appdev/refs/macros/KDC_OPT_VALIDATE","appdev/refs/macros/KDC_TKT_COMMON_MASK","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR","appdev/refs/macros/KRB5_AP_REP","appdev/refs/macros/KRB5_AP_REQ","appdev/refs/macros/KRB5_AS_REP","appdev/refs/macros/KRB5_AS_REQ","appdev/refs/macros/KRB5_AUTHDATA_AND_OR","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE","appdev/refs/macros/KRB5_AUTHDATA_SESAME","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY","appdev/refs/macros/KRB5_CRED","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP","appdev/refs/macros/KRB5_ERROR","appdev/refs/macros/KRB5_FAST_REQUIRED","appdev/refs/macros/KRB5_GC_CACHED","appdev/refs/macros/KRB5_GC_CANONICALIZE","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION","appdev/refs/macros/KRB5_GC_FORWARDABLE","appdev/refs/macros/KRB5_GC_NO_STORE","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK","appdev/refs/macros/KRB5_GC_USER_USER","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_INT16_MAX","appdev/refs/macros/KRB5_INT16_MIN","appdev/refs/macros/KRB5_INT32_MAX","appdev/refs/macros/KRB5_INT32_MIN","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION","appdev/refs/macros/KRB5_KPASSWD_HARDERROR","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED","appdev/refs/macros/KRB5_KPASSWD_MALFORMED","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR","appdev/refs/macros/KRB5_KPASSWD_SUCCESS","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME","appdev/refs/macros/KRB5_LRQ_NONE","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_PRINCIPAL","appdev/refs/macros/KRB5_NT_SMTP_NAME","appdev/refs/macros/KRB5_NT_SRV_HST","appdev/refs/macros/KRB5_NT_SRV_INST","appdev/refs/macros/KRB5_NT_SRV_XHST","appdev/refs/macros/KRB5_NT_UID","appdev/refs/macros/KRB5_NT_UNKNOWN","appdev/refs/macros/KRB5_NT_WELLKNOWN","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS","appdev/refs/macros/KRB5_PAC_CLIENT_INFO","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS","appdev/refs/macros/KRB5_PAC_DEVICE_INFO","appdev/refs/macros/KRB5_PAC_LOGON_INFO","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM","appdev/refs/macros/KRB5_PAC_REQUESTOR","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO","appdev/refs/macros/KRB5_PADATA_AFS3_SALT","appdev/refs/macros/KRB5_PADATA_AP_REQ","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2","appdev/refs/macros/KRB5_PADATA_FOR_USER","appdev/refs/macros/KRB5_PADATA_FX_COOKIE","appdev/refs/macros/KRB5_PADATA_FX_ERROR","appdev/refs/macros/KRB5_PADATA_FX_FAST","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA","appdev/refs/macros/KRB5_PADATA_NONE","appdev/refs/macros/KRB5_PADATA_OSF_DCE","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST","appdev/refs/macros/KRB5_PADATA_PKINIT_KX","appdev/refs/macros/KRB5_PADATA_PK_AS_REP","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD","appdev/refs/macros/KRB5_PADATA_PW_SALT","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2","appdev/refs/macros/KRB5_PADATA_REFERRAL","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2","appdev/refs/macros/KRB5_PADATA_SESAME","appdev/refs/macros/KRB5_PADATA_SPAKE","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO","appdev/refs/macros/KRB5_PADATA_TGS_REQ","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT","appdev/refs/macros/KRB5_PRIV","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH","appdev/refs/macros/KRB5_PVNO","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION","appdev/refs/macros/KRB5_REFERRAL_REALM","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT","appdev/refs/macros/KRB5_SAFE","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA","appdev/refs/macros/KRB5_TC_MATCH_FLAGS","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY","appdev/refs/macros/KRB5_TC_MATCH_KTYPE","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY","appdev/refs/macros/KRB5_TC_MATCH_TIMES","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT","appdev/refs/macros/KRB5_TC_NOTICKET","appdev/refs/macros/KRB5_TC_OPENCLOSE","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES","appdev/refs/macros/KRB5_TGS_NAME","appdev/refs/macros/KRB5_TGS_NAME_SIZE","appdev/refs/macros/KRB5_TGS_REP","appdev/refs/macros/KRB5_TGS_REQ","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY","appdev/refs/macros/MAX_KEYTAB_NAME_LEN","appdev/refs/macros/MSEC_DIRBIT","appdev/refs/macros/MSEC_VAL_MASK","appdev/refs/macros/SALT_TYPE_AFS_LENGTH","appdev/refs/macros/SALT_TYPE_NO_LENGTH","appdev/refs/macros/THREEPARAMOPEN","appdev/refs/macros/TKT_FLG_ANONYMOUS","appdev/refs/macros/TKT_FLG_ENC_PA_REP","appdev/refs/macros/TKT_FLG_FORWARDABLE","appdev/refs/macros/TKT_FLG_FORWARDED","appdev/refs/macros/TKT_FLG_HW_AUTH","appdev/refs/macros/TKT_FLG_INITIAL","appdev/refs/macros/TKT_FLG_INVALID","appdev/refs/macros/TKT_FLG_MAY_POSTDATE","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE","appdev/refs/macros/TKT_FLG_POSTDATED","appdev/refs/macros/TKT_FLG_PRE_AUTH","appdev/refs/macros/TKT_FLG_PROXIABLE","appdev/refs/macros/TKT_FLG_PROXY","appdev/refs/macros/TKT_FLG_RENEWABLE","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED","appdev/refs/macros/VALID_INT_BITS","appdev/refs/macros/VALID_UINT_BITS","appdev/refs/macros/index","appdev/refs/macros/krb524_convert_creds_kdc","appdev/refs/macros/krb524_init_ets","appdev/refs/macros/krb5_const","appdev/refs/macros/krb5_princ_component","appdev/refs/macros/krb5_princ_name","appdev/refs/macros/krb5_princ_realm","appdev/refs/macros/krb5_princ_set_realm","appdev/refs/macros/krb5_princ_set_realm_data","appdev/refs/macros/krb5_princ_set_realm_length","appdev/refs/macros/krb5_princ_size","appdev/refs/macros/krb5_princ_type","appdev/refs/macros/krb5_roundup","appdev/refs/macros/krb5_x","appdev/refs/macros/krb5_xc","appdev/refs/types/index","appdev/refs/types/krb5_address","appdev/refs/types/krb5_addrtype","appdev/refs/types/krb5_ap_rep","appdev/refs/types/krb5_ap_rep_enc_part","appdev/refs/types/krb5_ap_req","appdev/refs/types/krb5_auth_context","appdev/refs/types/krb5_authdata","appdev/refs/types/krb5_authdatatype","appdev/refs/types/krb5_authenticator","appdev/refs/types/krb5_boolean","appdev/refs/types/krb5_cc_cursor","appdev/refs/types/krb5_ccache","appdev/refs/types/krb5_cccol_cursor","appdev/refs/types/krb5_checksum","appdev/refs/types/krb5_cksumtype","appdev/refs/types/krb5_const_pointer","appdev/refs/types/krb5_const_principal","appdev/refs/types/krb5_context","appdev/refs/types/krb5_cred","appdev/refs/types/krb5_cred_enc_part","appdev/refs/types/krb5_cred_info","appdev/refs/types/krb5_creds","appdev/refs/types/krb5_crypto_iov","appdev/refs/types/krb5_cryptotype","appdev/refs/types/krb5_data","appdev/refs/types/krb5_deltat","appdev/refs/types/krb5_enc_data","appdev/refs/types/krb5_enc_kdc_rep_part","appdev/refs/types/krb5_enc_tkt_part","appdev/refs/types/krb5_encrypt_block","appdev/refs/types/krb5_enctype","appdev/refs/types/krb5_error","appdev/refs/types/krb5_error_code","appdev/refs/types/krb5_expire_callback_func","appdev/refs/types/krb5_flags","appdev/refs/types/krb5_get_init_creds_opt","appdev/refs/types/krb5_gic_opt_pa_data","appdev/refs/types/krb5_init_creds_context","appdev/refs/types/krb5_int16","appdev/refs/types/krb5_int32","appdev/refs/types/krb5_kdc_rep","appdev/refs/types/krb5_kdc_req","appdev/refs/types/krb5_key","appdev/refs/types/krb5_keyblock","appdev/refs/types/krb5_keytab","appdev/refs/types/krb5_keytab_entry","appdev/refs/types/krb5_keyusage","appdev/refs/types/krb5_kt_cursor","appdev/refs/types/krb5_kvno","appdev/refs/types/krb5_last_req_entry","appdev/refs/types/krb5_magic","appdev/refs/types/krb5_mk_req_checksum_func","appdev/refs/types/krb5_msgtype","appdev/refs/types/krb5_octet","appdev/refs/types/krb5_pa_data","appdev/refs/types/krb5_pa_pac_req","appdev/refs/types/krb5_pa_server_referral_data","appdev/refs/types/krb5_pa_svr_referral_data","appdev/refs/types/krb5_pac","appdev/refs/types/krb5_pointer","appdev/refs/types/krb5_post_recv_fn","appdev/refs/types/krb5_pre_send_fn","appdev/refs/types/krb5_preauthtype","appdev/refs/types/krb5_principal","appdev/refs/types/krb5_principal_data","appdev/refs/types/krb5_prompt","appdev/refs/types/krb5_prompt_type","appdev/refs/types/krb5_prompter_fct","appdev/refs/types/krb5_pwd_data","appdev/refs/types/krb5_rcache","appdev/refs/types/krb5_replay_data","appdev/refs/types/krb5_responder_context","appdev/refs/types/krb5_responder_fn","appdev/refs/types/krb5_responder_otp_challenge","appdev/refs/types/krb5_responder_otp_tokeninfo","appdev/refs/types/krb5_responder_pkinit_challenge","appdev/refs/types/krb5_responder_pkinit_identity","appdev/refs/types/krb5_response","appdev/refs/types/krb5_ticket","appdev/refs/types/krb5_ticket_times","appdev/refs/types/krb5_timestamp","appdev/refs/types/krb5_tkt_authent","appdev/refs/types/krb5_tkt_creds_context","appdev/refs/types/krb5_trace_callback","appdev/refs/types/krb5_trace_info","appdev/refs/types/krb5_transited","appdev/refs/types/krb5_typed_data","appdev/refs/types/krb5_ui_2","appdev/refs/types/krb5_ui_4","appdev/refs/types/krb5_verify_init_creds_opt","appdev/refs/types/passwd_phrase_element","appdev/y2038","basic/ccache_def","basic/date_format","basic/index","basic/keytab_def","basic/rcache_def","basic/stash_file_def","build/directory_org","build/doing_build","build/index","build/options2configure","build/osconf","build_this","copyright","formats/ccache_file_format","formats/cookie","formats/freshness_token","formats/index","formats/keytab_file_format","formats/rcache_file_format","index","mitK5defaults","mitK5features","mitK5license","plugindev/ccselect","plugindev/certauth","plugindev/clpreauth","plugindev/general","plugindev/gssapi","plugindev/hostrealm","plugindev/index","plugindev/internal","plugindev/kadm5_auth","plugindev/kadm5_hook","plugindev/kdcpolicy","plugindev/kdcpreauth","plugindev/localauth","plugindev/locate","plugindev/profile","plugindev/pwqual","resources","user/index","user/pwd_mgmt","user/tkt_mgmt","user/user_commands/index","user/user_commands/kdestroy","user/user_commands/kinit","user/user_commands/klist","user/user_commands/kpasswd","user/user_commands/krb5-config","user/user_commands/ksu","user/user_commands/kswitch","user/user_commands/kvno","user/user_commands/sclient","user/user_config/index","user/user_config/k5identity","user/user_config/k5login","user/user_config/kerberos",envversion:52,filenames:"about.rst","admin/admin_commands/index.rst","admin/admin_commands/k5srvutil.rst","admin/admin_commands/kadmin_local.rst","admin/admin_commands/kadmind.rst","admin/admin_commands/kdb5_ldap_util.rst","admin/admin_commands/kdb5_util.rst","admin/admin_commands/kprop.rst","admin/admin_commands/kpropd.rst","admin/admin_commands/kproplog.rst","admin/admin_commands/krb5kdc.rst","admin/admin_commands/ktutil.rst","admin/admin_commands/sserver.rst","admin/advanced/index.rst","admin/advanced/retiring-des.rst","admin/appl_servers.rst","admin/auth_indicator.rst","admin/backup_host.rst","admin/conf_files/index.rst","admin/conf_files/kadm5_acl.rst","admin/conf_files/kdc_conf.rst","admin/conf_files/krb5_conf.rst","admin/conf_ldap.rst","admin/database.rst","admin/dbtypes.rst","admin/dictionary.rst","admin/enctypes.rst","admin/env_variables.rst","admin/host_config.rst","admin/https.rst","admin/index.rst","admin/install.rst","admin/install_appl_srv.rst","admin/install_clients.rst","admin/install_kdc.rst","admin/lockout.rst","admin/otp.rst","admin/pkinit.rst","admin/princ_dns.rst","admin/realm_config.rst","admin/spake.rst","admin/troubleshoot.rst","admin/various_envs.rst","appdev/gssapi.rst","appdev/h5l_mit_apidiff.rst","appdev/index.rst","appdev/init_creds.rst","appdev/princ_handle.rst","appdev/refs/api/index.rst","appdev/refs/api/krb5_425_conv_principal.rst","appdev/refs/api/krb5_524_conv_principal.rst","appdev/refs/api/krb5_524_convert_creds.rst","appdev/refs/api/krb5_address_compare.rst","appdev/refs/api/krb5_address_order.rst","appdev/refs/api/krb5_address_search.rst","appdev/refs/api/krb5_allow_weak_crypto.rst","appdev/refs/api/krb5_aname_to_localname.rst","appdev/refs/api/krb5_anonymous_principal.rst","appdev/refs/api/krb5_anonymous_realm.rst","appdev/refs/api/krb5_appdefault_boolean.rst","appdev/refs/api/krb5_appdefault_string.rst","appdev/refs/api/krb5_auth_con_free.rst","appdev/refs/api/krb5_auth_con_genaddrs.rst","appdev/refs/api/krb5_auth_con_get_checksum_func.rst","appdev/refs/api/krb5_auth_con_getaddrs.rst","appdev/refs/api/krb5_auth_con_getauthenticator.rst","appdev/refs/api/krb5_auth_con_getflags.rst","appdev/refs/api/krb5_auth_con_getkey.rst","appdev/refs/api/krb5_auth_con_getkey_k.rst","appdev/refs/api/krb5_auth_con_getlocalseqnumber.rst","appdev/refs/api/krb5_auth_con_getlocalsubkey.rst","appdev/refs/api/krb5_auth_con_getrcache.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_getremoteseqnumber.rst","appdev/refs/api/krb5_auth_con_getremotesubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_init.rst","appdev/refs/api/krb5_auth_con_initivector.rst","appdev/refs/api/krb5_auth_con_set_checksum_func.rst","appdev/refs/api/krb5_auth_con_set_req_cksumtype.rst","appdev/refs/api/krb5_auth_con_setaddrs.rst","appdev/refs/api/krb5_auth_con_setflags.rst","appdev/refs/api/krb5_auth_con_setports.rst","appdev/refs/api/krb5_auth_con_setrcache.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_setsendsubkey.rst","appdev/refs/api/krb5_auth_con_setsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_setuseruserkey.rst","appdev/refs/api/krb5_build_principal.rst","appdev/refs/api/krb5_build_principal_alloc_va.rst","appdev/refs/api/krb5_build_principal_ext.rst","appdev/refs/api/krb5_build_principal_va.rst","appdev/refs/api/krb5_c_block_size.rst","appdev/refs/api/krb5_c_checksum_length.rst","appdev/refs/api/krb5_c_crypto_length.rst","appdev/refs/api/krb5_c_crypto_length_iov.rst","appdev/refs/api/krb5_c_decrypt.rst","appdev/refs/api/krb5_c_decrypt_iov.rst","appdev/refs/api/krb5_c_derive_prfplus.rst","appdev/refs/api/krb5_c_encrypt.rst","appdev/refs/api/krb5_c_encrypt_iov.rst","appdev/refs/api/krb5_c_encrypt_length.rst","appdev/refs/api/krb5_c_enctype_compare.rst","appdev/refs/api/krb5_c_free_state.rst","appdev/refs/api/krb5_c_fx_cf2_simple.rst","appdev/refs/api/krb5_c_init_state.rst","appdev/refs/api/krb5_c_is_coll_proof_cksum.rst","appdev/refs/api/krb5_c_is_keyed_cksum.rst","appdev/refs/api/krb5_c_keyed_checksum_types.rst","appdev/refs/api/krb5_c_keylengths.rst","appdev/refs/api/krb5_c_make_checksum.rst","appdev/refs/api/krb5_c_make_checksum_iov.rst","appdev/refs/api/krb5_c_make_random_key.rst","appdev/refs/api/krb5_c_padding_length.rst","appdev/refs/api/krb5_c_prf.rst","appdev/refs/api/krb5_c_prf_length.rst","appdev/refs/api/krb5_c_prfplus.rst","appdev/refs/api/krb5_c_random_add_entropy.rst","appdev/refs/api/krb5_c_random_make_octets.rst","appdev/refs/api/krb5_c_random_os_entropy.rst","appdev/refs/api/krb5_c_random_seed.rst","appdev/refs/api/krb5_c_random_to_key.rst","appdev/refs/api/krb5_c_string_to_key.rst","appdev/refs/api/krb5_c_string_to_key_with_params.rst","appdev/refs/api/krb5_c_valid_cksumtype.rst","appdev/refs/api/krb5_c_valid_enctype.rst","appdev/refs/api/krb5_c_verify_checksum.rst","appdev/refs/api/krb5_c_verify_checksum_iov.rst","appdev/refs/api/krb5_calculate_checksum.rst","appdev/refs/api/krb5_cc_cache_match.rst","appdev/refs/api/krb5_cc_close.rst","appdev/refs/api/krb5_cc_copy_creds.rst","appdev/refs/api/krb5_cc_default.rst","appdev/refs/api/krb5_cc_default_name.rst","appdev/refs/api/krb5_cc_destroy.rst","appdev/refs/api/krb5_cc_dup.rst","appdev/refs/api/krb5_cc_end_seq_get.rst","appdev/refs/api/krb5_cc_gen_new.rst","appdev/refs/api/krb5_cc_get_config.rst","appdev/refs/api/krb5_cc_get_flags.rst","appdev/refs/api/krb5_cc_get_full_name.rst","appdev/refs/api/krb5_cc_get_name.rst","appdev/refs/api/krb5_cc_get_principal.rst","appdev/refs/api/krb5_cc_get_type.rst","appdev/refs/api/krb5_cc_initialize.rst","appdev/refs/api/krb5_cc_move.rst","appdev/refs/api/krb5_cc_new_unique.rst","appdev/refs/api/krb5_cc_next_cred.rst","appdev/refs/api/krb5_cc_remove_cred.rst","appdev/refs/api/krb5_cc_resolve.rst","appdev/refs/api/krb5_cc_retrieve_cred.rst","appdev/refs/api/krb5_cc_select.rst","appdev/refs/api/krb5_cc_set_config.rst","appdev/refs/api/krb5_cc_set_default_name.rst","appdev/refs/api/krb5_cc_set_flags.rst","appdev/refs/api/krb5_cc_start_seq_get.rst","appdev/refs/api/krb5_cc_store_cred.rst","appdev/refs/api/krb5_cc_support_switch.rst","appdev/refs/api/krb5_cc_switch.rst","appdev/refs/api/krb5_cccol_cursor_free.rst","appdev/refs/api/krb5_cccol_cursor_new.rst","appdev/refs/api/krb5_cccol_cursor_next.rst","appdev/refs/api/krb5_cccol_have_content.rst","appdev/refs/api/krb5_change_password.rst","appdev/refs/api/krb5_check_clockskew.rst","appdev/refs/api/krb5_checksum_size.rst","appdev/refs/api/krb5_chpw_message.rst","appdev/refs/api/krb5_cksumtype_to_string.rst","appdev/refs/api/krb5_clear_error_message.rst","appdev/refs/api/krb5_copy_addresses.rst","appdev/refs/api/krb5_copy_authdata.rst","appdev/refs/api/krb5_copy_authenticator.rst","appdev/refs/api/krb5_copy_checksum.rst","appdev/refs/api/krb5_copy_context.rst","appdev/refs/api/krb5_copy_creds.rst","appdev/refs/api/krb5_copy_data.rst","appdev/refs/api/krb5_copy_error_message.rst","appdev/refs/api/krb5_copy_keyblock.rst","appdev/refs/api/krb5_copy_keyblock_contents.rst","appdev/refs/api/krb5_copy_principal.rst","appdev/refs/api/krb5_copy_ticket.rst","appdev/refs/api/krb5_decode_authdata_container.rst","appdev/refs/api/krb5_decode_ticket.rst","appdev/refs/api/krb5_decrypt.rst","appdev/refs/api/krb5_deltat_to_string.rst","appdev/refs/api/krb5_eblock_enctype.rst","appdev/refs/api/krb5_encode_authdata_container.rst","appdev/refs/api/krb5_encrypt.rst","appdev/refs/api/krb5_encrypt_size.rst","appdev/refs/api/krb5_enctype_to_name.rst","appdev/refs/api/krb5_enctype_to_string.rst","appdev/refs/api/krb5_expand_hostname.rst","appdev/refs/api/krb5_find_authdata.rst","appdev/refs/api/krb5_finish_key.rst","appdev/refs/api/krb5_finish_random_key.rst","appdev/refs/api/krb5_free_addresses.rst","appdev/refs/api/krb5_free_ap_rep_enc_part.rst","appdev/refs/api/krb5_free_authdata.rst","appdev/refs/api/krb5_free_authenticator.rst","appdev/refs/api/krb5_free_checksum.rst","appdev/refs/api/krb5_free_checksum_contents.rst","appdev/refs/api/krb5_free_cksumtypes.rst","appdev/refs/api/krb5_free_context.rst","appdev/refs/api/krb5_free_cred_contents.rst","appdev/refs/api/krb5_free_creds.rst","appdev/refs/api/krb5_free_data.rst","appdev/refs/api/krb5_free_data_contents.rst","appdev/refs/api/krb5_free_default_realm.rst","appdev/refs/api/krb5_free_enctypes.rst","appdev/refs/api/krb5_free_error.rst","appdev/refs/api/krb5_free_error_message.rst","appdev/refs/api/krb5_free_host_realm.rst","appdev/refs/api/krb5_free_keyblock.rst","appdev/refs/api/krb5_free_keyblock_contents.rst","appdev/refs/api/krb5_free_keytab_entry_contents.rst","appdev/refs/api/krb5_free_principal.rst","appdev/refs/api/krb5_free_string.rst","appdev/refs/api/krb5_free_tgt_creds.rst","appdev/refs/api/krb5_free_ticket.rst","appdev/refs/api/krb5_free_unparsed_name.rst","appdev/refs/api/krb5_fwd_tgt_creds.rst","appdev/refs/api/krb5_get_credentials.rst","appdev/refs/api/krb5_get_credentials_renew.rst","appdev/refs/api/krb5_get_credentials_validate.rst","appdev/refs/api/krb5_get_default_realm.rst","appdev/refs/api/krb5_get_error_message.rst","appdev/refs/api/krb5_get_etype_info.rst","appdev/refs/api/krb5_get_fallback_host_realm.rst","appdev/refs/api/krb5_get_host_realm.rst","appdev/refs/api/krb5_get_in_tkt_with_keytab.rst","appdev/refs/api/krb5_get_in_tkt_with_password.rst","appdev/refs/api/krb5_get_in_tkt_with_skey.rst","appdev/refs/api/krb5_get_init_creds_keytab.rst","appdev/refs/api/krb5_get_init_creds_opt_alloc.rst","appdev/refs/api/krb5_get_init_creds_opt_free.rst","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_init.rst","appdev/refs/api/krb5_get_init_creds_opt_set_address_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.rst","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pa.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.rst","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.rst","appdev/refs/api/krb5_get_init_creds_opt_set_responder.rst","appdev/refs/api/krb5_get_init_creds_opt_set_salt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.rst","appdev/refs/api/krb5_get_init_creds_password.rst","appdev/refs/api/krb5_get_permitted_enctypes.rst","appdev/refs/api/krb5_get_profile.rst","appdev/refs/api/krb5_get_prompt_types.rst","appdev/refs/api/krb5_get_renewed_creds.rst","appdev/refs/api/krb5_get_server_rcache.rst","appdev/refs/api/krb5_get_time_offsets.rst","appdev/refs/api/krb5_get_validated_creds.rst","appdev/refs/api/krb5_init_context.rst","appdev/refs/api/krb5_init_context_profile.rst","appdev/refs/api/krb5_init_creds_free.rst","appdev/refs/api/krb5_init_creds_get.rst","appdev/refs/api/krb5_init_creds_get_creds.rst","appdev/refs/api/krb5_init_creds_get_error.rst","appdev/refs/api/krb5_init_creds_get_times.rst","appdev/refs/api/krb5_init_creds_init.rst","appdev/refs/api/krb5_init_creds_set_keytab.rst","appdev/refs/api/krb5_init_creds_set_password.rst","appdev/refs/api/krb5_init_creds_set_service.rst","appdev/refs/api/krb5_init_creds_step.rst","appdev/refs/api/krb5_init_keyblock.rst","appdev/refs/api/krb5_init_random_key.rst","appdev/refs/api/krb5_init_secure_context.rst","appdev/refs/api/krb5_is_config_principal.rst","appdev/refs/api/krb5_is_referral_realm.rst","appdev/refs/api/krb5_is_thread_safe.rst","appdev/refs/api/krb5_k_create_key.rst","appdev/refs/api/krb5_k_decrypt.rst","appdev/refs/api/krb5_k_decrypt_iov.rst","appdev/refs/api/krb5_k_encrypt.rst","appdev/refs/api/krb5_k_encrypt_iov.rst","appdev/refs/api/krb5_k_free_key.rst","appdev/refs/api/krb5_k_key_enctype.rst","appdev/refs/api/krb5_k_key_keyblock.rst","appdev/refs/api/krb5_k_make_checksum.rst","appdev/refs/api/krb5_k_make_checksum_iov.rst","appdev/refs/api/krb5_k_prf.rst","appdev/refs/api/krb5_k_reference_key.rst","appdev/refs/api/krb5_k_verify_checksum.rst","appdev/refs/api/krb5_k_verify_checksum_iov.rst","appdev/refs/api/krb5_kdc_sign_ticket.rst","appdev/refs/api/krb5_kdc_verify_ticket.rst","appdev/refs/api/krb5_kt_add_entry.rst","appdev/refs/api/krb5_kt_client_default.rst","appdev/refs/api/krb5_kt_close.rst","appdev/refs/api/krb5_kt_default.rst","appdev/refs/api/krb5_kt_default_name.rst","appdev/refs/api/krb5_kt_dup.rst","appdev/refs/api/krb5_kt_end_seq_get.rst","appdev/refs/api/krb5_kt_free_entry.rst","appdev/refs/api/krb5_kt_get_entry.rst","appdev/refs/api/krb5_kt_get_name.rst","appdev/refs/api/krb5_kt_get_type.rst","appdev/refs/api/krb5_kt_have_content.rst","appdev/refs/api/krb5_kt_next_entry.rst","appdev/refs/api/krb5_kt_read_service_key.rst","appdev/refs/api/krb5_kt_remove_entry.rst","appdev/refs/api/krb5_kt_resolve.rst","appdev/refs/api/krb5_kt_start_seq_get.rst","appdev/refs/api/krb5_kuserok.rst","appdev/refs/api/krb5_make_authdata_kdc_issued.rst","appdev/refs/api/krb5_marshal_credentials.rst","appdev/refs/api/krb5_merge_authdata.rst","appdev/refs/api/krb5_mk_1cred.rst","appdev/refs/api/krb5_mk_error.rst","appdev/refs/api/krb5_mk_ncred.rst","appdev/refs/api/krb5_mk_priv.rst","appdev/refs/api/krb5_mk_rep.rst","appdev/refs/api/krb5_mk_rep_dce.rst","appdev/refs/api/krb5_mk_req.rst","appdev/refs/api/krb5_mk_req_extended.rst","appdev/refs/api/krb5_mk_safe.rst","appdev/refs/api/krb5_os_localaddr.rst","appdev/refs/api/krb5_pac_add_buffer.rst","appdev/refs/api/krb5_pac_free.rst","appdev/refs/api/krb5_pac_get_buffer.rst","appdev/refs/api/krb5_pac_get_client_info.rst","appdev/refs/api/krb5_pac_get_types.rst","appdev/refs/api/krb5_pac_init.rst","appdev/refs/api/krb5_pac_parse.rst","appdev/refs/api/krb5_pac_sign.rst","appdev/refs/api/krb5_pac_sign_ext.rst","appdev/refs/api/krb5_pac_verify.rst","appdev/refs/api/krb5_pac_verify_ext.rst","appdev/refs/api/krb5_parse_name.rst","appdev/refs/api/krb5_parse_name_flags.rst","appdev/refs/api/krb5_prepend_error_message.rst","appdev/refs/api/krb5_principal2salt.rst","appdev/refs/api/krb5_principal_compare.rst","appdev/refs/api/krb5_principal_compare_any_realm.rst","appdev/refs/api/krb5_principal_compare_flags.rst","appdev/refs/api/krb5_process_key.rst","appdev/refs/api/krb5_prompter_posix.rst","appdev/refs/api/krb5_random_key.rst","appdev/refs/api/krb5_rd_cred.rst","appdev/refs/api/krb5_rd_error.rst","appdev/refs/api/krb5_rd_priv.rst","appdev/refs/api/krb5_rd_rep.rst","appdev/refs/api/krb5_rd_rep_dce.rst","appdev/refs/api/krb5_rd_req.rst","appdev/refs/api/krb5_rd_safe.rst","appdev/refs/api/krb5_read_password.rst","appdev/refs/api/krb5_realm_compare.rst","appdev/refs/api/krb5_recvauth.rst","appdev/refs/api/krb5_recvauth_version.rst","appdev/refs/api/krb5_responder_get_challenge.rst","appdev/refs/api/krb5_responder_list_questions.rst","appdev/refs/api/krb5_responder_otp_challenge_free.rst","appdev/refs/api/krb5_responder_otp_get_challenge.rst","appdev/refs/api/krb5_responder_otp_set_answer.rst","appdev/refs/api/krb5_responder_pkinit_challenge_free.rst","appdev/refs/api/krb5_responder_pkinit_get_challenge.rst","appdev/refs/api/krb5_responder_pkinit_set_answer.rst","appdev/refs/api/krb5_responder_set_answer.rst","appdev/refs/api/krb5_salttype_to_string.rst","appdev/refs/api/krb5_sendauth.rst","appdev/refs/api/krb5_server_decrypt_ticket_keytab.rst","appdev/refs/api/krb5_set_default_realm.rst","appdev/refs/api/krb5_set_default_tgs_enctypes.rst","appdev/refs/api/krb5_set_error_message.rst","appdev/refs/api/krb5_set_kdc_recv_hook.rst","appdev/refs/api/krb5_set_kdc_send_hook.rst","appdev/refs/api/krb5_set_password.rst","appdev/refs/api/krb5_set_password_using_ccache.rst","appdev/refs/api/krb5_set_principal_realm.rst","appdev/refs/api/krb5_set_real_time.rst","appdev/refs/api/krb5_set_trace_callback.rst","appdev/refs/api/krb5_set_trace_filename.rst","appdev/refs/api/krb5_sname_match.rst","appdev/refs/api/krb5_sname_to_principal.rst","appdev/refs/api/krb5_string_to_cksumtype.rst","appdev/refs/api/krb5_string_to_deltat.rst","appdev/refs/api/krb5_string_to_enctype.rst","appdev/refs/api/krb5_string_to_key.rst","appdev/refs/api/krb5_string_to_salttype.rst","appdev/refs/api/krb5_string_to_timestamp.rst","appdev/refs/api/krb5_timeofday.rst","appdev/refs/api/krb5_timestamp_to_sfstring.rst","appdev/refs/api/krb5_timestamp_to_string.rst","appdev/refs/api/krb5_tkt_creds_free.rst","appdev/refs/api/krb5_tkt_creds_get.rst","appdev/refs/api/krb5_tkt_creds_get_creds.rst","appdev/refs/api/krb5_tkt_creds_get_times.rst","appdev/refs/api/krb5_tkt_creds_init.rst","appdev/refs/api/krb5_tkt_creds_step.rst","appdev/refs/api/krb5_unmarshal_credentials.rst","appdev/refs/api/krb5_unparse_name.rst","appdev/refs/api/krb5_unparse_name_ext.rst","appdev/refs/api/krb5_unparse_name_flags.rst","appdev/refs/api/krb5_unparse_name_flags_ext.rst","appdev/refs/api/krb5_us_timeofday.rst","appdev/refs/api/krb5_use_enctype.rst","appdev/refs/api/krb5_verify_authdata_kdc_issued.rst","appdev/refs/api/krb5_verify_checksum.rst","appdev/refs/api/krb5_verify_init_creds.rst","appdev/refs/api/krb5_verify_init_creds_opt_init.rst","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.rst","appdev/refs/api/krb5_vprepend_error_message.rst","appdev/refs/api/krb5_vset_error_message.rst","appdev/refs/api/krb5_vwrap_error_message.rst","appdev/refs/api/krb5_wrap_error_message.rst","appdev/refs/index.rst","appdev/refs/macros/ADDRTYPE_ADDRPORT.rst","appdev/refs/macros/ADDRTYPE_CHAOS.rst","appdev/refs/macros/ADDRTYPE_DDP.rst","appdev/refs/macros/ADDRTYPE_INET.rst","appdev/refs/macros/ADDRTYPE_INET6.rst","appdev/refs/macros/ADDRTYPE_IPPORT.rst","appdev/refs/macros/ADDRTYPE_ISO.rst","appdev/refs/macros/ADDRTYPE_IS_LOCAL.rst","appdev/refs/macros/ADDRTYPE_NETBIOS.rst","appdev/refs/macros/ADDRTYPE_XNS.rst","appdev/refs/macros/AD_TYPE_EXTERNAL.rst","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.rst","appdev/refs/macros/AD_TYPE_REGISTERED.rst","appdev/refs/macros/AD_TYPE_RESERVED.rst","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.rst","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.rst","appdev/refs/macros/AP_OPTS_RESERVED.rst","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.rst","appdev/refs/macros/AP_OPTS_USE_SUBKEY.rst","appdev/refs/macros/AP_OPTS_WIRE_MASK.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.rst","appdev/refs/macros/CKSUMTYPE_CRC32.rst","appdev/refs/macros/CKSUMTYPE_DESCBC.rst","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.rst","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_NIST_SHA.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.rst","appdev/refs/macros/CKSUMTYPE_SHA1.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.rst","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.rst","appdev/refs/macros/ENCTYPE_DES_CBC_CRC.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD4.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD5.rst","appdev/refs/macros/ENCTYPE_DES_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.rst","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.rst","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_NULL.rst","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.rst","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_UNKNOWN.rst","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.rst","appdev/refs/macros/KDC_OPT_CANONICALIZE.rst","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.rst","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.rst","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.rst","appdev/refs/macros/KDC_OPT_FORWARDABLE.rst","appdev/refs/macros/KDC_OPT_FORWARDED.rst","appdev/refs/macros/KDC_OPT_POSTDATED.rst","appdev/refs/macros/KDC_OPT_PROXIABLE.rst","appdev/refs/macros/KDC_OPT_PROXY.rst","appdev/refs/macros/KDC_OPT_RENEW.rst","appdev/refs/macros/KDC_OPT_RENEWABLE.rst","appdev/refs/macros/KDC_OPT_RENEWABLE_OK.rst","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.rst","appdev/refs/macros/KDC_OPT_VALIDATE.rst","appdev/refs/macros/KDC_TKT_COMMON_MASK.rst","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.rst","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.rst","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.rst","appdev/refs/macros/KRB5_AP_REP.rst","appdev/refs/macros/KRB5_AP_REQ.rst","appdev/refs/macros/KRB5_AS_REP.rst","appdev/refs/macros/KRB5_AS_REQ.rst","appdev/refs/macros/KRB5_AUTHDATA_AND_OR.rst","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.rst","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.rst","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.rst","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.rst","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.rst","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.rst","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.rst","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.rst","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.rst","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.rst","appdev/refs/macros/KRB5_AUTHDATA_SESAME.rst","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.rst","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.rst","appdev/refs/macros/KRB5_CRED.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.rst","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.rst","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.rst","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.rst","appdev/refs/macros/KRB5_ERROR.rst","appdev/refs/macros/KRB5_FAST_REQUIRED.rst","appdev/refs/macros/KRB5_GC_CACHED.rst","appdev/refs/macros/KRB5_GC_CANONICALIZE.rst","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.rst","appdev/refs/macros/KRB5_GC_FORWARDABLE.rst","appdev/refs/macros/KRB5_GC_NO_STORE.rst","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.rst","appdev/refs/macros/KRB5_GC_USER_USER.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.rst","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_INT16_MAX.rst","appdev/refs/macros/KRB5_INT16_MIN.rst","appdev/refs/macros/KRB5_INT32_MAX.rst","appdev/refs/macros/KRB5_INT32_MIN.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.rst","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.rst","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.rst","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.rst","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.rst","appdev/refs/macros/KRB5_KPASSWD_HARDERROR.rst","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.rst","appdev/refs/macros/KRB5_KPASSWD_MALFORMED.rst","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.rst","appdev/refs/macros/KRB5_KPASSWD_SUCCESS.rst","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_NONE.rst","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.rst","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_SMTP_NAME.rst","appdev/refs/macros/KRB5_NT_SRV_HST.rst","appdev/refs/macros/KRB5_NT_SRV_INST.rst","appdev/refs/macros/KRB5_NT_SRV_XHST.rst","appdev/refs/macros/KRB5_NT_UID.rst","appdev/refs/macros/KRB5_NT_UNKNOWN.rst","appdev/refs/macros/KRB5_NT_WELLKNOWN.rst","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.rst","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.rst","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_CLIENT_INFO.rst","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.rst","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.rst","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_DEVICE_INFO.rst","appdev/refs/macros/KRB5_PAC_LOGON_INFO.rst","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_REQUESTOR.rst","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.rst","appdev/refs/macros/KRB5_PADATA_AFS3_SALT.rst","appdev/refs/macros/KRB5_PADATA_AP_REQ.rst","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.rst","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.rst","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.rst","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.rst","appdev/refs/macros/KRB5_PADATA_FOR_USER.rst","appdev/refs/macros/KRB5_PADATA_FX_COOKIE.rst","appdev/refs/macros/KRB5_PADATA_FX_ERROR.rst","appdev/refs/macros/KRB5_PADATA_FX_FAST.rst","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.rst","appdev/refs/macros/KRB5_PADATA_NONE.rst","appdev/refs/macros/KRB5_PADATA_OSF_DCE.rst","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.rst","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PKINIT_KX.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.rst","appdev/refs/macros/KRB5_PADATA_PW_SALT.rst","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.rst","appdev/refs/macros/KRB5_PADATA_REFERRAL.rst","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.rst","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.rst","appdev/refs/macros/KRB5_PADATA_SESAME.rst","appdev/refs/macros/KRB5_PADATA_SPAKE.rst","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.rst","appdev/refs/macros/KRB5_PADATA_TGS_REQ.rst","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.rst","appdev/refs/macros/KRB5_PRIV.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.rst","appdev/refs/macros/KRB5_PVNO.rst","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.rst","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.rst","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.rst","appdev/refs/macros/KRB5_REFERRAL_REALM.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.rst","appdev/refs/macros/KRB5_SAFE.rst","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.rst","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.rst","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.rst","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.rst","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.rst","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.rst","appdev/refs/macros/KRB5_TC_MATCH_KTYPE.rst","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.rst","appdev/refs/macros/KRB5_TC_NOTICKET.rst","appdev/refs/macros/KRB5_TC_OPENCLOSE.rst","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.rst","appdev/refs/macros/KRB5_TGS_NAME.rst","appdev/refs/macros/KRB5_TGS_NAME_SIZE.rst","appdev/refs/macros/KRB5_TGS_REP.rst","appdev/refs/macros/KRB5_TGS_REQ.rst","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.rst","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.rst","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.rst","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.rst","appdev/refs/macros/MAX_KEYTAB_NAME_LEN.rst","appdev/refs/macros/MSEC_DIRBIT.rst","appdev/refs/macros/MSEC_VAL_MASK.rst","appdev/refs/macros/SALT_TYPE_AFS_LENGTH.rst","appdev/refs/macros/SALT_TYPE_NO_LENGTH.rst","appdev/refs/macros/THREEPARAMOPEN.rst","appdev/refs/macros/TKT_FLG_ANONYMOUS.rst","appdev/refs/macros/TKT_FLG_ENC_PA_REP.rst","appdev/refs/macros/TKT_FLG_FORWARDABLE.rst","appdev/refs/macros/TKT_FLG_FORWARDED.rst","appdev/refs/macros/TKT_FLG_HW_AUTH.rst","appdev/refs/macros/TKT_FLG_INITIAL.rst","appdev/refs/macros/TKT_FLG_INVALID.rst","appdev/refs/macros/TKT_FLG_MAY_POSTDATE.rst","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.rst","appdev/refs/macros/TKT_FLG_POSTDATED.rst","appdev/refs/macros/TKT_FLG_PRE_AUTH.rst","appdev/refs/macros/TKT_FLG_PROXIABLE.rst","appdev/refs/macros/TKT_FLG_PROXY.rst","appdev/refs/macros/TKT_FLG_RENEWABLE.rst","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.rst","appdev/refs/macros/VALID_INT_BITS.rst","appdev/refs/macros/VALID_UINT_BITS.rst","appdev/refs/macros/index.rst","appdev/refs/macros/krb524_convert_creds_kdc.rst","appdev/refs/macros/krb524_init_ets.rst","appdev/refs/macros/krb5_const.rst","appdev/refs/macros/krb5_princ_component.rst","appdev/refs/macros/krb5_princ_name.rst","appdev/refs/macros/krb5_princ_realm.rst","appdev/refs/macros/krb5_princ_set_realm.rst","appdev/refs/macros/krb5_princ_set_realm_data.rst","appdev/refs/macros/krb5_princ_set_realm_length.rst","appdev/refs/macros/krb5_princ_size.rst","appdev/refs/macros/krb5_princ_type.rst","appdev/refs/macros/krb5_roundup.rst","appdev/refs/macros/krb5_x.rst","appdev/refs/macros/krb5_xc.rst","appdev/refs/types/index.rst","appdev/refs/types/krb5_address.rst","appdev/refs/types/krb5_addrtype.rst","appdev/refs/types/krb5_ap_rep.rst","appdev/refs/types/krb5_ap_rep_enc_part.rst","appdev/refs/types/krb5_ap_req.rst","appdev/refs/types/krb5_auth_context.rst","appdev/refs/types/krb5_authdata.rst","appdev/refs/types/krb5_authdatatype.rst","appdev/refs/types/krb5_authenticator.rst","appdev/refs/types/krb5_boolean.rst","appdev/refs/types/krb5_cc_cursor.rst","appdev/refs/types/krb5_ccache.rst","appdev/refs/types/krb5_cccol_cursor.rst","appdev/refs/types/krb5_checksum.rst","appdev/refs/types/krb5_cksumtype.rst","appdev/refs/types/krb5_const_pointer.rst","appdev/refs/types/krb5_const_principal.rst","appdev/refs/types/krb5_context.rst","appdev/refs/types/krb5_cred.rst","appdev/refs/types/krb5_cred_enc_part.rst","appdev/refs/types/krb5_cred_info.rst","appdev/refs/types/krb5_creds.rst","appdev/refs/types/krb5_crypto_iov.rst","appdev/refs/types/krb5_cryptotype.rst","appdev/refs/types/krb5_data.rst","appdev/refs/types/krb5_deltat.rst","appdev/refs/types/krb5_enc_data.rst","appdev/refs/types/krb5_enc_kdc_rep_part.rst","appdev/refs/types/krb5_enc_tkt_part.rst","appdev/refs/types/krb5_encrypt_block.rst","appdev/refs/types/krb5_enctype.rst","appdev/refs/types/krb5_error.rst","appdev/refs/types/krb5_error_code.rst","appdev/refs/types/krb5_expire_callback_func.rst","appdev/refs/types/krb5_flags.rst","appdev/refs/types/krb5_get_init_creds_opt.rst","appdev/refs/types/krb5_gic_opt_pa_data.rst","appdev/refs/types/krb5_init_creds_context.rst","appdev/refs/types/krb5_int16.rst","appdev/refs/types/krb5_int32.rst","appdev/refs/types/krb5_kdc_rep.rst","appdev/refs/types/krb5_kdc_req.rst","appdev/refs/types/krb5_key.rst","appdev/refs/types/krb5_keyblock.rst","appdev/refs/types/krb5_keytab.rst","appdev/refs/types/krb5_keytab_entry.rst","appdev/refs/types/krb5_keyusage.rst","appdev/refs/types/krb5_kt_cursor.rst","appdev/refs/types/krb5_kvno.rst","appdev/refs/types/krb5_last_req_entry.rst","appdev/refs/types/krb5_magic.rst","appdev/refs/types/krb5_mk_req_checksum_func.rst","appdev/refs/types/krb5_msgtype.rst","appdev/refs/types/krb5_octet.rst","appdev/refs/types/krb5_pa_data.rst","appdev/refs/types/krb5_pa_pac_req.rst","appdev/refs/types/krb5_pa_server_referral_data.rst","appdev/refs/types/krb5_pa_svr_referral_data.rst","appdev/refs/types/krb5_pac.rst","appdev/refs/types/krb5_pointer.rst","appdev/refs/types/krb5_post_recv_fn.rst","appdev/refs/types/krb5_pre_send_fn.rst","appdev/refs/types/krb5_preauthtype.rst","appdev/refs/types/krb5_principal.rst","appdev/refs/types/krb5_principal_data.rst","appdev/refs/types/krb5_prompt.rst","appdev/refs/types/krb5_prompt_type.rst","appdev/refs/types/krb5_prompter_fct.rst","appdev/refs/types/krb5_pwd_data.rst","appdev/refs/types/krb5_rcache.rst","appdev/refs/types/krb5_replay_data.rst","appdev/refs/types/krb5_responder_context.rst","appdev/refs/types/krb5_responder_fn.rst","appdev/refs/types/krb5_responder_otp_challenge.rst","appdev/refs/types/krb5_responder_otp_tokeninfo.rst","appdev/refs/types/krb5_responder_pkinit_challenge.rst","appdev/refs/types/krb5_responder_pkinit_identity.rst","appdev/refs/types/krb5_response.rst","appdev/refs/types/krb5_ticket.rst","appdev/refs/types/krb5_ticket_times.rst","appdev/refs/types/krb5_timestamp.rst","appdev/refs/types/krb5_tkt_authent.rst","appdev/refs/types/krb5_tkt_creds_context.rst","appdev/refs/types/krb5_trace_callback.rst","appdev/refs/types/krb5_trace_info.rst","appdev/refs/types/krb5_transited.rst","appdev/refs/types/krb5_typed_data.rst","appdev/refs/types/krb5_ui_2.rst","appdev/refs/types/krb5_ui_4.rst","appdev/refs/types/krb5_verify_init_creds_opt.rst","appdev/refs/types/passwd_phrase_element.rst","appdev/y2038.rst","basic/ccache_def.rst","basic/date_format.rst","basic/index.rst","basic/keytab_def.rst","basic/rcache_def.rst","basic/stash_file_def.rst","build/directory_org.rst","build/doing_build.rst","build/index.rst","build/options2configure.rst","build/osconf.rst","build_this.rst","copyright.rst","formats/ccache_file_format.rst","formats/cookie.rst","formats/freshness_token.rst","formats/index.rst","formats/keytab_file_format.rst","formats/rcache_file_format.rst","index.rst","mitK5defaults.rst","mitK5features.rst","mitK5license.rst","plugindev/ccselect.rst","plugindev/certauth.rst","plugindev/clpreauth.rst","plugindev/general.rst","plugindev/gssapi.rst","plugindev/hostrealm.rst","plugindev/index.rst","plugindev/internal.rst","plugindev/kadm5_auth.rst","plugindev/kadm5_hook.rst","plugindev/kdcpolicy.rst","plugindev/kdcpreauth.rst","plugindev/localauth.rst","plugindev/locate.rst","plugindev/profile.rst","plugindev/pwqual.rst","resources.rst","user/index.rst","user/pwd_mgmt.rst","user/tkt_mgmt.rst","user/user_commands/index.rst","user/user_commands/kdestroy.rst","user/user_commands/kinit.rst","user/user_commands/klist.rst","user/user_commands/kpasswd.rst","user/user_commands/krb5-config.rst","user/user_commands/ksu.rst","user/user_commands/kswitch.rst","user/user_commands/kvno.rst","user/user_commands/sclient.rst","user/user_config/index.rst","user/user_config/k5identity.rst","user/user_config/k5login.rst","user/user_config/kerberos.rst",objects:{"":{ADDRTYPE_ADDRPORT:422,3,1,"",ADDRTYPE_CHAOS:423,3,1,"",ADDRTYPE_DDP:424,3,1,"",ADDRTYPE_INET6:426,3,1,"",ADDRTYPE_INET:425,3,1,"",ADDRTYPE_IPPORT:427,3,1,"",ADDRTYPE_ISO:428,3,1,"",ADDRTYPE_IS_LOCAL:429,3,1,"",ADDRTYPE_NETBIOS:430,3,1,"",ADDRTYPE_XNS:431,3,1,"",AD_TYPE_EXTERNAL:432,3,1,"",AD_TYPE_FIELD_TYPE_MASK:433,3,1,"",AD_TYPE_REGISTERED:434,3,1,"",AD_TYPE_RESERVED:435,3,1,"",AP_OPTS_ETYPE_NEGOTIATION:436,3,1,"",AP_OPTS_MUTUAL_REQUIRED:437,3,1,"",AP_OPTS_RESERVED:438,3,1,"",AP_OPTS_USE_SESSION_KEY:439,3,1,"",AP_OPTS_USE_SUBKEY:440,3,1,"",AP_OPTS_WIRE_MASK:441,3,1,"",CKSUMTYPE_CMAC_CAMELLIA128:442,3,1,"",CKSUMTYPE_CMAC_CAMELLIA256:443,3,1,"",CKSUMTYPE_CRC32:444,3,1,"",CKSUMTYPE_DESCBC:445,3,1,"",CKSUMTYPE_HMAC_MD5_ARCFOUR:446,3,1,"",CKSUMTYPE_HMAC_SHA1_96_AES128:447,3,1,"",CKSUMTYPE_HMAC_SHA1_96_AES256:448,3,1,"",CKSUMTYPE_HMAC_SHA1_DES3:449,3,1,"",CKSUMTYPE_HMAC_SHA256_128_AES128:450,3,1,"",CKSUMTYPE_HMAC_SHA384_192_AES256:451,3,1,"",CKSUMTYPE_MD5_HMAC_ARCFOUR:452,3,1,"",CKSUMTYPE_NIST_SHA:453,3,1,"",CKSUMTYPE_RSA_MD4:454,3,1,"",CKSUMTYPE_RSA_MD4_DES:455,3,1,"",CKSUMTYPE_RSA_MD5:456,3,1,"",CKSUMTYPE_RSA_MD5_DES:457,3,1,"",CKSUMTYPE_SHA1:458,3,1,"",ENCTYPE_AES128_CTS_HMAC_SHA1_96:459,3,1,"",ENCTYPE_AES128_CTS_HMAC_SHA256_128:460,3,1,"",ENCTYPE_AES256_CTS_HMAC_SHA1_96:461,3,1,"",ENCTYPE_AES256_CTS_HMAC_SHA384_192:462,3,1,"",ENCTYPE_ARCFOUR_HMAC:463,3,1,"",ENCTYPE_ARCFOUR_HMAC_EXP:464,3,1,"",ENCTYPE_CAMELLIA128_CTS_CMAC:465,3,1,"",ENCTYPE_CAMELLIA256_CTS_CMAC:466,3,1,"",ENCTYPE_DES3_CBC_ENV:467,3,1,"",ENCTYPE_DES3_CBC_RAW:468,3,1,"",ENCTYPE_DES3_CBC_SHA1:470,3,1,"",ENCTYPE_DES3_CBC_SHA:469,3,1,"",ENCTYPE_DES_CBC_CRC:471,3,1,"",ENCTYPE_DES_CBC_MD4:472,3,1,"",ENCTYPE_DES_CBC_MD5:473,3,1,"",ENCTYPE_DES_CBC_RAW:474,3,1,"",ENCTYPE_DES_HMAC_SHA1:475,3,1,"",ENCTYPE_DSA_SHA1_CMS:476,3,1,"",ENCTYPE_MD5_RSA_CMS:477,3,1,"",ENCTYPE_NULL:478,3,1,"",ENCTYPE_RC2_CBC_ENV:479,3,1,"",ENCTYPE_RSA_ENV:480,3,1,"",ENCTYPE_RSA_ES_OAEP_ENV:481,3,1,"",ENCTYPE_SHA1_RSA_CMS:482,3,1,"",ENCTYPE_UNKNOWN:483,3,1,"",KDC_OPT_ALLOW_POSTDATE:484,3,1,"",KDC_OPT_CANONICALIZE:485,3,1,"",KDC_OPT_CNAME_IN_ADDL_TKT:486,3,1,"",KDC_OPT_DISABLE_TRANSITED_CHECK:487,3,1,"",KDC_OPT_ENC_TKT_IN_SKEY:488,3,1,"",KDC_OPT_FORWARDABLE:489,3,1,"",KDC_OPT_FORWARDED:490,3,1,"",KDC_OPT_POSTDATED:491,3,1,"",KDC_OPT_PROXIABLE:492,3,1,"",KDC_OPT_PROXY:493,3,1,"",KDC_OPT_RENEW:494,3,1,"",KDC_OPT_RENEWABLE:495,3,1,"",KDC_OPT_RENEWABLE_OK:496,3,1,"",KDC_OPT_REQUEST_ANONYMOUS:497,3,1,"",KDC_OPT_VALIDATE:498,3,1,"",KDC_TKT_COMMON_MASK:499,3,1,"",KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:500,3,1,"",KRB5_ANONYMOUS_PRINCSTR:501,3,1,"",KRB5_ANONYMOUS_REALMSTR:502,3,1,"",KRB5_AP_REP:503,3,1,"",KRB5_AP_REQ:504,3,1,"",KRB5_AS_REP:505,3,1,"",KRB5_AS_REQ:506,3,1,"",KRB5_AUTHDATA_AND_OR:507,3,1,"",KRB5_AUTHDATA_AP_OPTIONS:508,3,1,"",KRB5_AUTHDATA_AUTH_INDICATOR:509,3,1,"",KRB5_AUTHDATA_CAMMAC:510,3,1,"",KRB5_AUTHDATA_ETYPE_NEGOTIATION:511,3,1,"",KRB5_AUTHDATA_FX_ARMOR:512,3,1,"",KRB5_AUTHDATA_IF_RELEVANT:513,3,1,"",KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:514,3,1,"",KRB5_AUTHDATA_KDC_ISSUED:515,3,1,"",KRB5_AUTHDATA_MANDATORY_FOR_KDC:516,3,1,"",KRB5_AUTHDATA_OSF_DCE:517,3,1,"",KRB5_AUTHDATA_SESAME:518,3,1,"",KRB5_AUTHDATA_SIGNTICKET:519,3,1,"",KRB5_AUTHDATA_WIN2K_PAC:520,3,1,"",KRB5_AUTH_CONTEXT_DO_SEQUENCE:521,3,1,"",KRB5_AUTH_CONTEXT_DO_TIME:522,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:523,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:524,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:525,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:526,3,1,"",KRB5_AUTH_CONTEXT_PERMIT_ALL:527,3,1,"",KRB5_AUTH_CONTEXT_RET_SEQUENCE:528,3,1,"",KRB5_AUTH_CONTEXT_RET_TIME:529,3,1,"",KRB5_AUTH_CONTEXT_USE_SUBKEY:530,3,1,"",KRB5_CRED:531,3,1,"",KRB5_CRYPTO_TYPE_CHECKSUM:532,3,1,"",KRB5_CRYPTO_TYPE_DATA:533,3,1,"",KRB5_CRYPTO_TYPE_EMPTY:534,3,1,"",KRB5_CRYPTO_TYPE_HEADER:535,3,1,"",KRB5_CRYPTO_TYPE_PADDING:536,3,1,"",KRB5_CRYPTO_TYPE_SIGN_ONLY:537,3,1,"",KRB5_CRYPTO_TYPE_STREAM:538,3,1,"",KRB5_CRYPTO_TYPE_TRAILER:539,3,1,"",KRB5_CYBERSAFE_SECUREID:540,3,1,"",KRB5_DOMAIN_X500_COMPRESS:541,3,1,"",KRB5_ENCPADATA_REQ_ENC_PA_REP:542,3,1,"",KRB5_ERROR:543,3,1,"",KRB5_FAST_REQUIRED:544,3,1,"",KRB5_GC_CACHED:545,3,1,"",KRB5_GC_CANONICALIZE:546,3,1,"",KRB5_GC_CONSTRAINED_DELEGATION:547,3,1,"",KRB5_GC_FORWARDABLE:548,3,1,"",KRB5_GC_NO_STORE:549,3,1,"",KRB5_GC_NO_TRANSIT_CHECK:550,3,1,"",KRB5_GC_USER_USER:551,3,1,"",KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:552,3,1,"",KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:553,3,1,"",KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:554,3,1,"",KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:555,3,1,"",KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:556,3,1,"",KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:557,3,1,"",KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:558,3,1,"",KRB5_GET_INIT_CREDS_OPT_PROXIABLE:559,3,1,"",KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:560,3,1,"",KRB5_GET_INIT_CREDS_OPT_SALT:561,3,1,"",KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:562,3,1,"",KRB5_INIT_CONTEXT_KDC:563,3,1,"",KRB5_INIT_CONTEXT_SECURE:564,3,1,"",KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:565,3,1,"",KRB5_INT16_MAX:566,3,1,"",KRB5_INT16_MIN:567,3,1,"",KRB5_INT32_MAX:568,3,1,"",KRB5_INT32_MIN:569,3,1,"",KRB5_KEYUSAGE_AD_ITE:570,3,1,"",KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:571,3,1,"",KRB5_KEYUSAGE_AD_MTE:572,3,1,"",KRB5_KEYUSAGE_AD_SIGNEDPATH:573,3,1,"",KRB5_KEYUSAGE_APP_DATA_CKSUM:574,3,1,"",KRB5_KEYUSAGE_APP_DATA_ENCRYPT:575,3,1,"",KRB5_KEYUSAGE_AP_REP_ENCPART:576,3,1,"",KRB5_KEYUSAGE_AP_REQ_AUTH:577,3,1,"",KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:578,3,1,"",KRB5_KEYUSAGE_AS_REP_ENCPART:579,3,1,"",KRB5_KEYUSAGE_AS_REQ:580,3,1,"",KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:581,3,1,"",KRB5_KEYUSAGE_CAMMAC:582,3,1,"",KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:583,3,1,"",KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:584,3,1,"",KRB5_KEYUSAGE_FAST_ENC:585,3,1,"",KRB5_KEYUSAGE_FAST_FINISHED:586,3,1,"",KRB5_KEYUSAGE_FAST_REP:587,3,1,"",KRB5_KEYUSAGE_FAST_REQ_CHKSUM:588,3,1,"",KRB5_KEYUSAGE_GSS_TOK_MIC:589,3,1,"",KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:590,3,1,"",KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:591,3,1,"",KRB5_KEYUSAGE_IAKERB_FINISHED:592,3,1,"",KRB5_KEYUSAGE_KDC_REP_TICKET:593,3,1,"",KRB5_KEYUSAGE_KRB_CRED_ENCPART:594,3,1,"",KRB5_KEYUSAGE_KRB_ERROR_CKSUM:595,3,1,"",KRB5_KEYUSAGE_KRB_PRIV_ENCPART:596,3,1,"",KRB5_KEYUSAGE_KRB_SAFE_CKSUM:597,3,1,"",KRB5_KEYUSAGE_PA_AS_FRESHNESS:598,3,1,"",KRB5_KEYUSAGE_PA_FX_COOKIE:599,3,1,"",KRB5_KEYUSAGE_PA_OTP_REQUEST:600,3,1,"",KRB5_KEYUSAGE_PA_PKINIT_KX:601,3,1,"",KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:602,3,1,"",KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:603,3,1,"",KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:604,3,1,"",KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:605,3,1,"",KRB5_KEYUSAGE_PA_SAM_RESPONSE:606,3,1,"",KRB5_KEYUSAGE_SPAKE:607,3,1,"",KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:608,3,1,"",KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:609,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:610,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:611,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AUTH:612,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:613,3,1,"",KRB5_KPASSWD_ACCESSDENIED:614,3,1,"",KRB5_KPASSWD_AUTHERROR:615,3,1,"",KRB5_KPASSWD_BAD_VERSION:616,3,1,"",KRB5_KPASSWD_HARDERROR:617,3,1,"",KRB5_KPASSWD_INITIAL_FLAG_NEEDED:618,3,1,"",KRB5_KPASSWD_MALFORMED:619,3,1,"",KRB5_KPASSWD_SOFTERROR:620,3,1,"",KRB5_KPASSWD_SUCCESS:621,3,1,"",KRB5_LRQ_ALL_ACCT_EXPTIME:622,3,1,"",KRB5_LRQ_ALL_LAST_INITIAL:623,3,1,"",KRB5_LRQ_ALL_LAST_RENEWAL:624,3,1,"",KRB5_LRQ_ALL_LAST_REQ:625,3,1,"",KRB5_LRQ_ALL_LAST_TGT:626,3,1,"",KRB5_LRQ_ALL_LAST_TGT_ISSUED:627,3,1,"",KRB5_LRQ_ALL_PW_EXPTIME:628,3,1,"",KRB5_LRQ_NONE:629,3,1,"",KRB5_LRQ_ONE_ACCT_EXPTIME:630,3,1,"",KRB5_LRQ_ONE_LAST_INITIAL:631,3,1,"",KRB5_LRQ_ONE_LAST_RENEWAL:632,3,1,"",KRB5_LRQ_ONE_LAST_REQ:633,3,1,"",KRB5_LRQ_ONE_LAST_TGT:634,3,1,"",KRB5_LRQ_ONE_LAST_TGT_ISSUED:635,3,1,"",KRB5_LRQ_ONE_PW_EXPTIME:636,3,1,"",KRB5_NT_ENTERPRISE_PRINCIPAL:637,3,1,"",KRB5_NT_ENT_PRINCIPAL_AND_ID:638,3,1,"",KRB5_NT_MS_PRINCIPAL:639,3,1,"",KRB5_NT_MS_PRINCIPAL_AND_ID:640,3,1,"",KRB5_NT_PRINCIPAL:641,3,1,"",KRB5_NT_SMTP_NAME:642,3,1,"",KRB5_NT_SRV_HST:643,3,1,"",KRB5_NT_SRV_INST:644,3,1,"",KRB5_NT_SRV_XHST:645,3,1,"",KRB5_NT_UID:646,3,1,"",KRB5_NT_UNKNOWN:647,3,1,"",KRB5_NT_WELLKNOWN:648,3,1,"",KRB5_NT_X500_PRINCIPAL:649,3,1,"",KRB5_PAC_ATTRIBUTES_INFO:650,3,1,"",KRB5_PAC_CLIENT_CLAIMS:651,3,1,"",KRB5_PAC_CLIENT_INFO:652,3,1,"",KRB5_PAC_CREDENTIALS_INFO:653,3,1,"",KRB5_PAC_DELEGATION_INFO:654,3,1,"",KRB5_PAC_DEVICE_CLAIMS:655,3,1,"",KRB5_PAC_DEVICE_INFO:656,3,1,"",KRB5_PAC_LOGON_INFO:657,3,1,"",KRB5_PAC_PRIVSVR_CHECKSUM:658,3,1,"",KRB5_PAC_REQUESTOR:659,3,1,"",KRB5_PAC_SERVER_CHECKSUM:660,3,1,"",KRB5_PAC_TICKET_CHECKSUM:661,3,1,"",KRB5_PAC_UPN_DNS_INFO:662,3,1,"",KRB5_PADATA_AFS3_SALT:663,3,1,"",KRB5_PADATA_AP_REQ:664,3,1,"",KRB5_PADATA_AS_CHECKSUM:665,3,1,"",KRB5_PADATA_AS_FRESHNESS:666,3,1,"",KRB5_PADATA_ENCRYPTED_CHALLENGE:667,3,1,"",KRB5_PADATA_ENC_SANDIA_SECURID:668,3,1,"",KRB5_PADATA_ENC_TIMESTAMP:669,3,1,"",KRB5_PADATA_ENC_UNIX_TIME:670,3,1,"",KRB5_PADATA_ETYPE_INFO2:672,3,1,"",KRB5_PADATA_ETYPE_INFO:671,3,1,"",KRB5_PADATA_FOR_USER:673,3,1,"",KRB5_PADATA_FX_COOKIE:674,3,1,"",KRB5_PADATA_FX_ERROR:675,3,1,"",KRB5_PADATA_FX_FAST:676,3,1,"",KRB5_PADATA_GET_FROM_TYPED_DATA:677,3,1,"",KRB5_PADATA_NONE:678,3,1,"",KRB5_PADATA_OSF_DCE:679,3,1,"",KRB5_PADATA_OTP_CHALLENGE:680,3,1,"",KRB5_PADATA_OTP_PIN_CHANGE:681,3,1,"",KRB5_PADATA_OTP_REQUEST:682,3,1,"",KRB5_PADATA_PAC_OPTIONS:683,3,1,"",KRB5_PADATA_PAC_REQUEST:684,3,1,"",KRB5_PADATA_PKINIT_KX:685,3,1,"",KRB5_PADATA_PK_AS_REP:686,3,1,"",KRB5_PADATA_PK_AS_REP_OLD:687,3,1,"",KRB5_PADATA_PK_AS_REQ:688,3,1,"",KRB5_PADATA_PK_AS_REQ_OLD:689,3,1,"",KRB5_PADATA_PW_SALT:690,3,1,"",KRB5_PADATA_REDHAT_IDP_OAUTH2:691,3,1,"",KRB5_PADATA_REFERRAL:692,3,1,"",KRB5_PADATA_S4U_X509_USER:693,3,1,"",KRB5_PADATA_SAM_CHALLENGE:694,3,1,"",KRB5_PADATA_SAM_CHALLENGE_2:695,3,1,"",KRB5_PADATA_SAM_REDIRECT:696,3,1,"",KRB5_PADATA_SAM_RESPONSE:697,3,1,"",KRB5_PADATA_SAM_RESPONSE_2:698,3,1,"",KRB5_PADATA_SESAME:699,3,1,"",KRB5_PADATA_SPAKE:700,3,1,"",KRB5_PADATA_SVR_REFERRAL_INFO:701,3,1,"",KRB5_PADATA_TGS_REQ:702,3,1,"",KRB5_PADATA_USE_SPECIFIED_KVNO:703,3,1,"",KRB5_PRINCIPAL_COMPARE_CASEFOLD:704,3,1,"",KRB5_PRINCIPAL_COMPARE_ENTERPRISE:705,3,1,"",KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:706,3,1,"",KRB5_PRINCIPAL_COMPARE_UTF8:707,3,1,"",KRB5_PRINCIPAL_PARSE_ENTERPRISE:708,3,1,"",KRB5_PRINCIPAL_PARSE_IGNORE_REALM:709,3,1,"",KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:710,3,1,"",KRB5_PRINCIPAL_PARSE_NO_REALM:711,3,1,"",KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:712,3,1,"",KRB5_PRINCIPAL_UNPARSE_DISPLAY:713,3,1,"",KRB5_PRINCIPAL_UNPARSE_NO_REALM:714,3,1,"",KRB5_PRINCIPAL_UNPARSE_SHORT:715,3,1,"",KRB5_PRIV:716,3,1,"",KRB5_PROMPT_TYPE_NEW_PASSWORD:717,3,1,"",KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:718,3,1,"",KRB5_PROMPT_TYPE_PASSWORD:719,3,1,"",KRB5_PROMPT_TYPE_PREAUTH:720,3,1,"",KRB5_PVNO:721,3,1,"",KRB5_REALM_BRANCH_CHAR:722,3,1,"",KRB5_RECVAUTH_BADAUTHVERS:723,3,1,"",KRB5_RECVAUTH_SKIP_VERSION:724,3,1,"",KRB5_REFERRAL_REALM:725,3,1,"",KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:726,3,1,"",KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:727,3,1,"",KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:728,3,1,"",KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:729,3,1,"",KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:730,3,1,"",KRB5_RESPONDER_OTP_FORMAT_DECIMAL:731,3,1,"",KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:732,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:733,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:734,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:735,3,1,"",KRB5_RESPONDER_QUESTION_OTP:736,3,1,"",KRB5_RESPONDER_QUESTION_PASSWORD:737,3,1,"",KRB5_RESPONDER_QUESTION_PKINIT:738,3,1,"",KRB5_SAFE:739,3,1,"",KRB5_SAM_MUST_PK_ENCRYPT_SAD:740,3,1,"",KRB5_SAM_SEND_ENCRYPTED_SAD:741,3,1,"",KRB5_SAM_USE_SAD_AS_KEY:742,3,1,"",KRB5_TC_MATCH_2ND_TKT:743,3,1,"",KRB5_TC_MATCH_AUTHDATA:744,3,1,"",KRB5_TC_MATCH_FLAGS:745,3,1,"",KRB5_TC_MATCH_FLAGS_EXACT:746,3,1,"",KRB5_TC_MATCH_IS_SKEY:747,3,1,"",KRB5_TC_MATCH_KTYPE:748,3,1,"",KRB5_TC_MATCH_SRV_NAMEONLY:749,3,1,"",KRB5_TC_MATCH_TIMES:750,3,1,"",KRB5_TC_MATCH_TIMES_EXACT:751,3,1,"",KRB5_TC_NOTICKET:752,3,1,"",KRB5_TC_OPENCLOSE:753,3,1,"",KRB5_TC_SUPPORTED_KTYPES:754,3,1,"",KRB5_TGS_NAME:755,3,1,"",KRB5_TGS_NAME_SIZE:756,3,1,"",KRB5_TGS_REP:757,3,1,"",KRB5_TGS_REQ:758,3,1,"",KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:759,3,1,"",KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:760,3,1,"",KRB5_WELLKNOWN_NAMESTR:761,3,1,"",LR_TYPE_INTERPRETATION_MASK:762,3,1,"",LR_TYPE_THIS_SERVER_ONLY:763,3,1,"",MAX_KEYTAB_NAME_LEN:764,3,1,"",MSEC_DIRBIT:765,3,1,"",MSEC_VAL_MASK:766,3,1,"",SALT_TYPE_AFS_LENGTH:767,3,1,"",SALT_TYPE_NO_LENGTH:768,3,1,"",THREEPARAMOPEN:769,3,1,"",TKT_FLG_ANONYMOUS:770,3,1,"",TKT_FLG_ENC_PA_REP:771,3,1,"",TKT_FLG_FORWARDABLE:772,3,1,"",TKT_FLG_FORWARDED:773,3,1,"",TKT_FLG_HW_AUTH:774,3,1,"",TKT_FLG_INITIAL:775,3,1,"",TKT_FLG_INVALID:776,3,1,"",TKT_FLG_MAY_POSTDATE:777,3,1,"",TKT_FLG_OK_AS_DELEGATE:778,3,1,"",TKT_FLG_POSTDATED:779,3,1,"",TKT_FLG_PRE_AUTH:780,3,1,"",TKT_FLG_PROXIABLE:781,3,1,"",TKT_FLG_PROXY:782,3,1,"",TKT_FLG_RENEWABLE:783,3,1,"",TKT_FLG_TRANSIT_POLICY_CHECKED:784,3,1,"",VALID_INT_BITS:785,3,1,"",VALID_UINT_BITS:786,3,1,"",krb524_convert_creds_kdc:788,3,1,"",krb524_init_ets:789,3,1,"",krb5_425_conv_principal:49,0,1,"c.krb5_425_conv_principal",krb5_524_conv_principal:50,0,1,"c.krb5_524_conv_principal",krb5_524_convert_creds:51,0,1,"c.krb5_524_convert_creds",krb5_address:803,1,1,"c.krb5_address",krb5_address_compare:52,0,1,"c.krb5_address_compare",krb5_address_order:53,0,1,"c.krb5_address_order",krb5_address_search:54,0,1,"c.krb5_address_search",krb5_addrtype:804,1,1,"c.krb5_addrtype",krb5_allow_weak_crypto:55,0,1,"c.krb5_allow_weak_crypto",krb5_aname_to_localname:56,0,1,"c.krb5_aname_to_localname",krb5_anonymous_principal:57,0,1,"c.krb5_anonymous_principal",krb5_anonymous_realm:58,0,1,"c.krb5_anonymous_realm",krb5_ap_rep:805,1,1,"c.krb5_ap_rep",krb5_ap_rep_enc_part:806,1,1,"c.krb5_ap_rep_enc_part",krb5_ap_req:807,1,1,"c.krb5_ap_req",krb5_appdefault_boolean:59,0,1,"c.krb5_appdefault_boolean",krb5_appdefault_string:60,0,1,"c.krb5_appdefault_string",krb5_auth_con_free:61,0,1,"c.krb5_auth_con_free",krb5_auth_con_genaddrs:62,0,1,"c.krb5_auth_con_genaddrs",krb5_auth_con_get_checksum_func:63,0,1,"c.krb5_auth_con_get_checksum_func",krb5_auth_con_getaddrs:64,0,1,"c.krb5_auth_con_getaddrs",krb5_auth_con_getauthenticator:65,0,1,"c.krb5_auth_con_getauthenticator",krb5_auth_con_getflags:66,0,1,"c.krb5_auth_con_getflags",krb5_auth_con_getkey:67,0,1,"c.krb5_auth_con_getkey",krb5_auth_con_getkey_k:68,0,1,"c.krb5_auth_con_getkey_k",krb5_auth_con_getlocalseqnumber:69,0,1,"c.krb5_auth_con_getlocalseqnumber",krb5_auth_con_getlocalsubkey:70,0,1,"c.krb5_auth_con_getlocalsubkey",krb5_auth_con_getrcache:71,0,1,"c.krb5_auth_con_getrcache",krb5_auth_con_getrecvsubkey:72,0,1,"c.krb5_auth_con_getrecvsubkey",krb5_auth_con_getrecvsubkey_k:73,0,1,"c.krb5_auth_con_getrecvsubkey_k",krb5_auth_con_getremoteseqnumber:74,0,1,"c.krb5_auth_con_getremoteseqnumber",krb5_auth_con_getremotesubkey:75,0,1,"c.krb5_auth_con_getremotesubkey",krb5_auth_con_getsendsubkey:76,0,1,"c.krb5_auth_con_getsendsubkey",krb5_auth_con_getsendsubkey_k:77,0,1,"c.krb5_auth_con_getsendsubkey_k",krb5_auth_con_init:78,0,1,"c.krb5_auth_con_init",krb5_auth_con_initivector:79,0,1,"c.krb5_auth_con_initivector",krb5_auth_con_set_checksum_func:80,0,1,"c.krb5_auth_con_set_checksum_func",krb5_auth_con_set_req_cksumtype:81,0,1,"c.krb5_auth_con_set_req_cksumtype",krb5_auth_con_setaddrs:82,0,1,"c.krb5_auth_con_setaddrs",krb5_auth_con_setflags:83,0,1,"c.krb5_auth_con_setflags",krb5_auth_con_setports:84,0,1,"c.krb5_auth_con_setports",krb5_auth_con_setrcache:85,0,1,"c.krb5_auth_con_setrcache",krb5_auth_con_setrecvsubkey:86,0,1,"c.krb5_auth_con_setrecvsubkey",krb5_auth_con_setrecvsubkey_k:87,0,1,"c.krb5_auth_con_setrecvsubkey_k",krb5_auth_con_setsendsubkey:88,0,1,"c.krb5_auth_con_setsendsubkey",krb5_auth_con_setsendsubkey_k:89,0,1,"c.krb5_auth_con_setsendsubkey_k",krb5_auth_con_setuseruserkey:90,0,1,"c.krb5_auth_con_setuseruserkey",krb5_auth_context:808,1,1,"c.krb5_auth_context",krb5_authdata:809,1,1,"c.krb5_authdata",krb5_authdatatype:810,1,1,"c.krb5_authdatatype",krb5_authenticator:811,1,1,"c.krb5_authenticator",krb5_boolean:812,1,1,"c.krb5_boolean",krb5_build_principal:91,0,1,"c.krb5_build_principal",krb5_build_principal_alloc_va:92,0,1,"c.krb5_build_principal_alloc_va",krb5_build_principal_ext:93,0,1,"c.krb5_build_principal_ext",krb5_build_principal_va:94,0,1,"c.krb5_build_principal_va",krb5_c_block_size:95,0,1,"c.krb5_c_block_size",krb5_c_checksum_length:96,0,1,"c.krb5_c_checksum_length",krb5_c_crypto_length:97,0,1,"c.krb5_c_crypto_length",krb5_c_crypto_length_iov:98,0,1,"c.krb5_c_crypto_length_iov",krb5_c_decrypt:99,0,1,"c.krb5_c_decrypt",krb5_c_decrypt_iov:100,0,1,"c.krb5_c_decrypt_iov",krb5_c_derive_prfplus:101,0,1,"c.krb5_c_derive_prfplus",krb5_c_encrypt:102,0,1,"c.krb5_c_encrypt",krb5_c_encrypt_iov:103,0,1,"c.krb5_c_encrypt_iov",krb5_c_encrypt_length:104,0,1,"c.krb5_c_encrypt_length",krb5_c_enctype_compare:105,0,1,"c.krb5_c_enctype_compare",krb5_c_free_state:106,0,1,"c.krb5_c_free_state",krb5_c_fx_cf2_simple:107,0,1,"c.krb5_c_fx_cf2_simple",krb5_c_init_state:108,0,1,"c.krb5_c_init_state",krb5_c_is_coll_proof_cksum:109,0,1,"c.krb5_c_is_coll_proof_cksum",krb5_c_is_keyed_cksum:110,0,1,"c.krb5_c_is_keyed_cksum",krb5_c_keyed_checksum_types:111,0,1,"c.krb5_c_keyed_checksum_types",krb5_c_keylengths:112,0,1,"c.krb5_c_keylengths",krb5_c_make_checksum:113,0,1,"c.krb5_c_make_checksum",krb5_c_make_checksum_iov:114,0,1,"c.krb5_c_make_checksum_iov",krb5_c_make_random_key:115,0,1,"c.krb5_c_make_random_key",krb5_c_padding_length:116,0,1,"c.krb5_c_padding_length",krb5_c_prf:117,0,1,"c.krb5_c_prf",krb5_c_prf_length:118,0,1,"c.krb5_c_prf_length",krb5_c_prfplus:119,0,1,"c.krb5_c_prfplus",krb5_c_random_add_entropy:120,0,1,"c.krb5_c_random_add_entropy",krb5_c_random_make_octets:121,0,1,"c.krb5_c_random_make_octets",krb5_c_random_os_entropy:122,0,1,"c.krb5_c_random_os_entropy",krb5_c_random_seed:123,0,1,"c.krb5_c_random_seed",krb5_c_random_to_key:124,0,1,"c.krb5_c_random_to_key",krb5_c_string_to_key:125,0,1,"c.krb5_c_string_to_key",krb5_c_string_to_key_with_params:126,0,1,"c.krb5_c_string_to_key_with_params",krb5_c_valid_cksumtype:127,0,1,"c.krb5_c_valid_cksumtype",krb5_c_valid_enctype:128,0,1,"c.krb5_c_valid_enctype",krb5_c_verify_checksum:129,0,1,"c.krb5_c_verify_checksum",krb5_c_verify_checksum_iov:130,0,1,"c.krb5_c_verify_checksum_iov",krb5_calculate_checksum:131,0,1,"c.krb5_calculate_checksum",krb5_cc_cache_match:132,0,1,"c.krb5_cc_cache_match",krb5_cc_close:133,0,1,"c.krb5_cc_close",krb5_cc_copy_creds:134,0,1,"c.krb5_cc_copy_creds",krb5_cc_cursor:813,1,1,"c.krb5_cc_cursor",krb5_cc_default:135,0,1,"c.krb5_cc_default",krb5_cc_default_name:136,0,1,"c.krb5_cc_default_name",krb5_cc_destroy:137,0,1,"c.krb5_cc_destroy",krb5_cc_dup:138,0,1,"c.krb5_cc_dup",krb5_cc_end_seq_get:139,0,1,"c.krb5_cc_end_seq_get",krb5_cc_gen_new:140,0,1,"c.krb5_cc_gen_new",krb5_cc_get_config:141,0,1,"c.krb5_cc_get_config",krb5_cc_get_flags:142,0,1,"c.krb5_cc_get_flags",krb5_cc_get_full_name:143,0,1,"c.krb5_cc_get_full_name",krb5_cc_get_name:144,0,1,"c.krb5_cc_get_name",krb5_cc_get_principal:145,0,1,"c.krb5_cc_get_principal",krb5_cc_get_type:146,0,1,"c.krb5_cc_get_type",krb5_cc_initialize:147,0,1,"c.krb5_cc_initialize",krb5_cc_move:148,0,1,"c.krb5_cc_move",krb5_cc_new_unique:149,0,1,"c.krb5_cc_new_unique",krb5_cc_next_cred:150,0,1,"c.krb5_cc_next_cred",krb5_cc_remove_cred:151,0,1,"c.krb5_cc_remove_cred",krb5_cc_resolve:152,0,1,"c.krb5_cc_resolve",krb5_cc_retrieve_cred:153,0,1,"c.krb5_cc_retrieve_cred",krb5_cc_select:154,0,1,"c.krb5_cc_select",krb5_cc_set_config:155,0,1,"c.krb5_cc_set_config",krb5_cc_set_default_name:156,0,1,"c.krb5_cc_set_default_name",krb5_cc_set_flags:157,0,1,"c.krb5_cc_set_flags",krb5_cc_start_seq_get:158,0,1,"c.krb5_cc_start_seq_get",krb5_cc_store_cred:159,0,1,"c.krb5_cc_store_cred",krb5_cc_support_switch:160,0,1,"c.krb5_cc_support_switch",krb5_cc_switch:161,0,1,"c.krb5_cc_switch",krb5_ccache:814,1,1,"c.krb5_ccache",krb5_cccol_cursor:815,1,1,"c.krb5_cccol_cursor",krb5_cccol_cursor_free:162,0,1,"c.krb5_cccol_cursor_free",krb5_cccol_cursor_new:163,0,1,"c.krb5_cccol_cursor_new",krb5_cccol_cursor_next:164,0,1,"c.krb5_cccol_cursor_next",krb5_cccol_have_content:165,0,1,"c.krb5_cccol_have_content",krb5_change_password:166,0,1,"c.krb5_change_password",krb5_check_clockskew:167,0,1,"c.krb5_check_clockskew",krb5_checksum:816,1,1,"c.krb5_checksum",krb5_checksum_size:168,0,1,"c.krb5_checksum_size",krb5_chpw_message:169,0,1,"c.krb5_chpw_message",krb5_cksumtype:817,1,1,"c.krb5_cksumtype",krb5_cksumtype_to_string:170,0,1,"c.krb5_cksumtype_to_string",krb5_clear_error_message:171,0,1,"c.krb5_clear_error_message",krb5_const:790,3,1,"",krb5_const_pointer:818,1,1,"c.krb5_const_pointer",krb5_const_principal:819,1,1,"c.krb5_const_principal",krb5_context:820,1,1,"c.krb5_context",krb5_copy_addresses:172,0,1,"c.krb5_copy_addresses",krb5_copy_authdata:173,0,1,"c.krb5_copy_authdata",krb5_copy_authenticator:174,0,1,"c.krb5_copy_authenticator",krb5_copy_checksum:175,0,1,"c.krb5_copy_checksum",krb5_copy_context:176,0,1,"c.krb5_copy_context",krb5_copy_creds:177,0,1,"c.krb5_copy_creds",krb5_copy_data:178,0,1,"c.krb5_copy_data",krb5_copy_error_message:179,0,1,"c.krb5_copy_error_message",krb5_copy_keyblock:180,0,1,"c.krb5_copy_keyblock",krb5_copy_keyblock_contents:181,0,1,"c.krb5_copy_keyblock_contents",krb5_copy_principal:182,0,1,"c.krb5_copy_principal",krb5_copy_ticket:183,0,1,"c.krb5_copy_ticket",krb5_cred:821,1,1,"c.krb5_cred",krb5_cred_enc_part:822,1,1,"c.krb5_cred_enc_part",krb5_cred_info:823,1,1,"c.krb5_cred_info",krb5_creds:824,1,1,"c.krb5_creds",krb5_crypto_iov:825,1,1,"c.krb5_crypto_iov",krb5_cryptotype:826,1,1,"c.krb5_cryptotype",krb5_data:827,1,1,"c.krb5_data",krb5_decode_authdata_container:184,0,1,"c.krb5_decode_authdata_container",krb5_decode_ticket:185,0,1,"c.krb5_decode_ticket",krb5_decrypt:186,0,1,"c.krb5_decrypt",krb5_deltat:828,1,1,"c.krb5_deltat",krb5_deltat_to_string:187,0,1,"c.krb5_deltat_to_string",krb5_eblock_enctype:188,0,1,"c.krb5_eblock_enctype",krb5_enc_data:829,1,1,"c.krb5_enc_data",krb5_enc_kdc_rep_part:830,1,1,"c.krb5_enc_kdc_rep_part",krb5_enc_tkt_part:831,1,1,"c.krb5_enc_tkt_part",krb5_encode_authdata_container:189,0,1,"c.krb5_encode_authdata_container",krb5_encrypt:190,0,1,"c.krb5_encrypt",krb5_encrypt_block:832,1,1,"c.krb5_encrypt_block",krb5_encrypt_size:191,0,1,"c.krb5_encrypt_size",krb5_enctype:833,1,1,"c.krb5_enctype",krb5_enctype_to_name:192,0,1,"c.krb5_enctype_to_name",krb5_enctype_to_string:193,0,1,"c.krb5_enctype_to_string",krb5_error:834,1,1,"c.krb5_error",krb5_error_code:835,1,1,"c.krb5_error_code",krb5_expand_hostname:194,0,1,"c.krb5_expand_hostname",krb5_expire_callback_func:836,1,1,"c.krb5_expire_callback_func",krb5_find_authdata:195,0,1,"c.krb5_find_authdata",krb5_finish_key:196,0,1,"c.krb5_finish_key",krb5_finish_random_key:197,0,1,"c.krb5_finish_random_key",krb5_flags:837,1,1,"c.krb5_flags",krb5_free_addresses:198,0,1,"c.krb5_free_addresses",krb5_free_ap_rep_enc_part:199,0,1,"c.krb5_free_ap_rep_enc_part",krb5_free_authdata:200,0,1,"c.krb5_free_authdata",krb5_free_authenticator:201,0,1,"c.krb5_free_authenticator",krb5_free_checksum:202,0,1,"c.krb5_free_checksum",krb5_free_checksum_contents:203,0,1,"c.krb5_free_checksum_contents",krb5_free_cksumtypes:204,0,1,"c.krb5_free_cksumtypes",krb5_free_context:205,0,1,"c.krb5_free_context",krb5_free_cred_contents:206,0,1,"c.krb5_free_cred_contents",krb5_free_creds:207,0,1,"c.krb5_free_creds",krb5_free_data:208,0,1,"c.krb5_free_data",krb5_free_data_contents:209,0,1,"c.krb5_free_data_contents",krb5_free_default_realm:210,0,1,"c.krb5_free_default_realm",krb5_free_enctypes:211,0,1,"c.krb5_free_enctypes",krb5_free_error:212,0,1,"c.krb5_free_error",krb5_free_error_message:213,0,1,"c.krb5_free_error_message",krb5_free_host_realm:214,0,1,"c.krb5_free_host_realm",krb5_free_keyblock:215,0,1,"c.krb5_free_keyblock",krb5_free_keyblock_contents:216,0,1,"c.krb5_free_keyblock_contents",krb5_free_keytab_entry_contents:217,0,1,"c.krb5_free_keytab_entry_contents",krb5_free_principal:218,0,1,"c.krb5_free_principal",krb5_free_string:219,0,1,"c.krb5_free_string",krb5_free_tgt_creds:220,0,1,"c.krb5_free_tgt_creds",krb5_free_ticket:221,0,1,"c.krb5_free_ticket",krb5_free_unparsed_name:222,0,1,"c.krb5_free_unparsed_name",krb5_fwd_tgt_creds:223,0,1,"c.krb5_fwd_tgt_creds",krb5_get_credentials:224,0,1,"c.krb5_get_credentials",krb5_get_credentials_renew:225,0,1,"c.krb5_get_credentials_renew",krb5_get_credentials_validate:226,0,1,"c.krb5_get_credentials_validate",krb5_get_default_realm:227,0,1,"c.krb5_get_default_realm",krb5_get_error_message:228,0,1,"c.krb5_get_error_message",krb5_get_etype_info:229,0,1,"c.krb5_get_etype_info",krb5_get_fallback_host_realm:230,0,1,"c.krb5_get_fallback_host_realm",krb5_get_host_realm:231,0,1,"c.krb5_get_host_realm",krb5_get_in_tkt_with_keytab:232,0,1,"c.krb5_get_in_tkt_with_keytab",krb5_get_in_tkt_with_password:233,0,1,"c.krb5_get_in_tkt_with_password",krb5_get_in_tkt_with_skey:234,0,1,"c.krb5_get_in_tkt_with_skey",krb5_get_init_creds_keytab:235,0,1,"c.krb5_get_init_creds_keytab",krb5_get_init_creds_opt:838,1,1,"c.krb5_get_init_creds_opt",krb5_get_init_creds_opt_alloc:236,0,1,"c.krb5_get_init_creds_opt_alloc",krb5_get_init_creds_opt_free:237,0,1,"c.krb5_get_init_creds_opt_free",krb5_get_init_creds_opt_get_fast_flags:238,0,1,"c.krb5_get_init_creds_opt_get_fast_flags",krb5_get_init_creds_opt_init:239,0,1,"c.krb5_get_init_creds_opt_init",krb5_get_init_creds_opt_set_address_list:240,0,1,"c.krb5_get_init_creds_opt_set_address_list",krb5_get_init_creds_opt_set_anonymous:241,0,1,"c.krb5_get_init_creds_opt_set_anonymous",krb5_get_init_creds_opt_set_canonicalize:242,0,1,"c.krb5_get_init_creds_opt_set_canonicalize",krb5_get_init_creds_opt_set_change_password_prompt:243,0,1,"c.krb5_get_init_creds_opt_set_change_password_prompt",krb5_get_init_creds_opt_set_etype_list:244,0,1,"c.krb5_get_init_creds_opt_set_etype_list",krb5_get_init_creds_opt_set_expire_callback:245,0,1,"c.krb5_get_init_creds_opt_set_expire_callback",krb5_get_init_creds_opt_set_fast_ccache:246,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache",krb5_get_init_creds_opt_set_fast_ccache_name:247,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache_name",krb5_get_init_creds_opt_set_fast_flags:248,0,1,"c.krb5_get_init_creds_opt_set_fast_flags",krb5_get_init_creds_opt_set_forwardable:249,0,1,"c.krb5_get_init_creds_opt_set_forwardable",krb5_get_init_creds_opt_set_in_ccache:250,0,1,"c.krb5_get_init_creds_opt_set_in_ccache",krb5_get_init_creds_opt_set_out_ccache:251,0,1,"c.krb5_get_init_creds_opt_set_out_ccache",krb5_get_init_creds_opt_set_pa:252,0,1,"c.krb5_get_init_creds_opt_set_pa",krb5_get_init_creds_opt_set_pac_request:253,0,1,"c.krb5_get_init_creds_opt_set_pac_request",krb5_get_init_creds_opt_set_preauth_list:254,0,1,"c.krb5_get_init_creds_opt_set_preauth_list",krb5_get_init_creds_opt_set_proxiable:255,0,1,"c.krb5_get_init_creds_opt_set_proxiable",krb5_get_init_creds_opt_set_renew_life:256,0,1,"c.krb5_get_init_creds_opt_set_renew_life",krb5_get_init_creds_opt_set_responder:257,0,1,"c.krb5_get_init_creds_opt_set_responder",krb5_get_init_creds_opt_set_salt:258,0,1,"c.krb5_get_init_creds_opt_set_salt",krb5_get_init_creds_opt_set_tkt_life:259,0,1,"c.krb5_get_init_creds_opt_set_tkt_life",krb5_get_init_creds_password:260,0,1,"c.krb5_get_init_creds_password",krb5_get_permitted_enctypes:261,0,1,"c.krb5_get_permitted_enctypes",krb5_get_profile:262,0,1,"c.krb5_get_profile",krb5_get_prompt_types:263,0,1,"c.krb5_get_prompt_types",krb5_get_renewed_creds:264,0,1,"c.krb5_get_renewed_creds",krb5_get_server_rcache:265,0,1,"c.krb5_get_server_rcache",krb5_get_time_offsets:266,0,1,"c.krb5_get_time_offsets",krb5_get_validated_creds:267,0,1,"c.krb5_get_validated_creds",krb5_gic_opt_pa_data:839,1,1,"c.krb5_gic_opt_pa_data",krb5_init_context:268,0,1,"c.krb5_init_context",krb5_init_context_profile:269,0,1,"c.krb5_init_context_profile",krb5_init_creds_context:840,1,1,"c.krb5_init_creds_context",krb5_init_creds_free:270,0,1,"c.krb5_init_creds_free",krb5_init_creds_get:271,0,1,"c.krb5_init_creds_get",krb5_init_creds_get_creds:272,0,1,"c.krb5_init_creds_get_creds",krb5_init_creds_get_error:273,0,1,"c.krb5_init_creds_get_error",krb5_init_creds_get_times:274,0,1,"c.krb5_init_creds_get_times",krb5_init_creds_init:275,0,1,"c.krb5_init_creds_init",krb5_init_creds_set_keytab:276,0,1,"c.krb5_init_creds_set_keytab",krb5_init_creds_set_password:277,0,1,"c.krb5_init_creds_set_password",krb5_init_creds_set_service:278,0,1,"c.krb5_init_creds_set_service",krb5_init_creds_step:279,0,1,"c.krb5_init_creds_step",krb5_init_keyblock:280,0,1,"c.krb5_init_keyblock",krb5_init_random_key:281,0,1,"c.krb5_init_random_key",krb5_init_secure_context:282,0,1,"c.krb5_init_secure_context",krb5_int16:841,1,1,"c.krb5_int16",krb5_int32:842,1,1,"c.krb5_int32",krb5_is_config_principal:283,0,1,"c.krb5_is_config_principal",krb5_is_referral_realm:284,0,1,"c.krb5_is_referral_realm",krb5_is_thread_safe:285,0,1,"c.krb5_is_thread_safe",krb5_k_create_key:286,0,1,"c.krb5_k_create_key",krb5_k_decrypt:287,0,1,"c.krb5_k_decrypt",krb5_k_decrypt_iov:288,0,1,"c.krb5_k_decrypt_iov",krb5_k_encrypt:289,0,1,"c.krb5_k_encrypt",krb5_k_encrypt_iov:290,0,1,"c.krb5_k_encrypt_iov",krb5_k_free_key:291,0,1,"c.krb5_k_free_key",krb5_k_key_enctype:292,0,1,"c.krb5_k_key_enctype",krb5_k_key_keyblock:293,0,1,"c.krb5_k_key_keyblock",krb5_k_make_checksum:294,0,1,"c.krb5_k_make_checksum",krb5_k_make_checksum_iov:295,0,1,"c.krb5_k_make_checksum_iov",krb5_k_prf:296,0,1,"c.krb5_k_prf",krb5_k_reference_key:297,0,1,"c.krb5_k_reference_key",krb5_k_verify_checksum:298,0,1,"c.krb5_k_verify_checksum",krb5_k_verify_checksum_iov:299,0,1,"c.krb5_k_verify_checksum_iov",krb5_kdc_rep:843,1,1,"c.krb5_kdc_rep",krb5_kdc_req:844,1,1,"c.krb5_kdc_req",krb5_kdc_sign_ticket:300,0,1,"c.krb5_kdc_sign_ticket",krb5_kdc_verify_ticket:301,0,1,"c.krb5_kdc_verify_ticket",krb5_key:845,1,1,"c.krb5_key",krb5_keyblock:846,1,1,"c.krb5_keyblock",krb5_keytab:847,1,1,"c.krb5_keytab",krb5_keytab_entry:848,1,1,"c.krb5_keytab_entry",krb5_keyusage:849,1,1,"c.krb5_keyusage",krb5_kt_add_entry:302,0,1,"c.krb5_kt_add_entry",krb5_kt_client_default:303,0,1,"c.krb5_kt_client_default",krb5_kt_close:304,0,1,"c.krb5_kt_close",krb5_kt_cursor:850,1,1,"c.krb5_kt_cursor",krb5_kt_default:305,0,1,"c.krb5_kt_default",krb5_kt_default_name:306,0,1,"c.krb5_kt_default_name",krb5_kt_dup:307,0,1,"c.krb5_kt_dup",krb5_kt_end_seq_get:308,0,1,"c.krb5_kt_end_seq_get",krb5_kt_free_entry:309,0,1,"c.krb5_kt_free_entry",krb5_kt_get_entry:310,0,1,"c.krb5_kt_get_entry",krb5_kt_get_name:311,0,1,"c.krb5_kt_get_name",krb5_kt_get_type:312,0,1,"c.krb5_kt_get_type",krb5_kt_have_content:313,0,1,"c.krb5_kt_have_content",krb5_kt_next_entry:314,0,1,"c.krb5_kt_next_entry",krb5_kt_read_service_key:315,0,1,"c.krb5_kt_read_service_key",krb5_kt_remove_entry:316,0,1,"c.krb5_kt_remove_entry",krb5_kt_resolve:317,0,1,"c.krb5_kt_resolve",krb5_kt_start_seq_get:318,0,1,"c.krb5_kt_start_seq_get",krb5_kuserok:319,0,1,"c.krb5_kuserok",krb5_kvno:851,1,1,"c.krb5_kvno",krb5_last_req_entry:852,1,1,"c.krb5_last_req_entry",krb5_magic:853,1,1,"c.krb5_magic",krb5_make_authdata_kdc_issued:320,0,1,"c.krb5_make_authdata_kdc_issued",krb5_marshal_credentials:321,0,1,"c.krb5_marshal_credentials",krb5_merge_authdata:322,0,1,"c.krb5_merge_authdata",krb5_mk_1cred:323,0,1,"c.krb5_mk_1cred",krb5_mk_error:324,0,1,"c.krb5_mk_error",krb5_mk_ncred:325,0,1,"c.krb5_mk_ncred",krb5_mk_priv:326,0,1,"c.krb5_mk_priv",krb5_mk_rep:327,0,1,"c.krb5_mk_rep",krb5_mk_rep_dce:328,0,1,"c.krb5_mk_rep_dce",krb5_mk_req:329,0,1,"c.krb5_mk_req",krb5_mk_req_checksum_func:854,1,1,"c.krb5_mk_req_checksum_func",krb5_mk_req_extended:330,0,1,"c.krb5_mk_req_extended",krb5_mk_safe:331,0,1,"c.krb5_mk_safe",krb5_msgtype:855,1,1,"c.krb5_msgtype",krb5_octet:856,1,1,"c.krb5_octet",krb5_os_localaddr:332,0,1,"c.krb5_os_localaddr",krb5_pa_data:857,1,1,"c.krb5_pa_data",krb5_pa_pac_req:858,1,1,"c.krb5_pa_pac_req",krb5_pa_server_referral_data:859,1,1,"c.krb5_pa_server_referral_data",krb5_pa_svr_referral_data:860,1,1,"c.krb5_pa_svr_referral_data",krb5_pac:861,1,1,"c.krb5_pac",krb5_pac_add_buffer:333,0,1,"c.krb5_pac_add_buffer",krb5_pac_free:334,0,1,"c.krb5_pac_free",krb5_pac_get_buffer:335,0,1,"c.krb5_pac_get_buffer",krb5_pac_get_client_info:336,0,1,"c.krb5_pac_get_client_info",krb5_pac_get_types:337,0,1,"c.krb5_pac_get_types",krb5_pac_init:338,0,1,"c.krb5_pac_init",krb5_pac_parse:339,0,1,"c.krb5_pac_parse",krb5_pac_sign:340,0,1,"c.krb5_pac_sign",krb5_pac_sign_ext:341,0,1,"c.krb5_pac_sign_ext",krb5_pac_verify:342,0,1,"c.krb5_pac_verify",krb5_pac_verify_ext:343,0,1,"c.krb5_pac_verify_ext",krb5_parse_name:344,0,1,"c.krb5_parse_name",krb5_parse_name_flags:345,0,1,"c.krb5_parse_name_flags",krb5_pointer:862,1,1,"c.krb5_pointer",krb5_post_recv_fn:863,1,1,"c.krb5_post_recv_fn",krb5_pre_send_fn:864,1,1,"c.krb5_pre_send_fn",krb5_preauthtype:865,1,1,"c.krb5_preauthtype",krb5_prepend_error_message:346,0,1,"c.krb5_prepend_error_message",krb5_princ_component:791,3,1,"",krb5_princ_name:792,3,1,"",krb5_princ_realm:793,3,1,"",krb5_princ_set_realm:794,3,1,"",krb5_princ_set_realm_data:795,3,1,"",krb5_princ_set_realm_length:796,3,1,"",krb5_princ_size:797,3,1,"",krb5_princ_type:798,3,1,"",krb5_principal2salt:347,0,1,"c.krb5_principal2salt",krb5_principal:866,1,1,"c.krb5_principal",krb5_principal_compare:348,0,1,"c.krb5_principal_compare",krb5_principal_compare_any_realm:349,0,1,"c.krb5_principal_compare_any_realm",krb5_principal_compare_flags:350,0,1,"c.krb5_principal_compare_flags",krb5_principal_data:867,1,1,"c.krb5_principal_data",krb5_process_key:351,0,1,"c.krb5_process_key",krb5_prompt:868,1,1,"c.krb5_prompt",krb5_prompt_type:869,1,1,"c.krb5_prompt_type",krb5_prompter_fct:870,1,1,"c.krb5_prompter_fct",krb5_prompter_posix:352,0,1,"c.krb5_prompter_posix",krb5_pwd_data:871,1,1,"c.krb5_pwd_data",krb5_random_key:353,0,1,"c.krb5_random_key",krb5_rcache:872,1,1,"c.krb5_rcache",krb5_rd_cred:354,0,1,"c.krb5_rd_cred",krb5_rd_error:355,0,1,"c.krb5_rd_error",krb5_rd_priv:356,0,1,"c.krb5_rd_priv",krb5_rd_rep:357,0,1,"c.krb5_rd_rep",krb5_rd_rep_dce:358,0,1,"c.krb5_rd_rep_dce",krb5_rd_req:359,0,1,"c.krb5_rd_req",krb5_rd_safe:360,0,1,"c.krb5_rd_safe",krb5_read_password:361,0,1,"c.krb5_read_password",krb5_realm_compare:362,0,1,"c.krb5_realm_compare",krb5_recvauth:363,0,1,"c.krb5_recvauth",krb5_recvauth_version:364,0,1,"c.krb5_recvauth_version",krb5_replay_data:873,1,1,"c.krb5_replay_data",krb5_responder_context:874,1,1,"c.krb5_responder_context",krb5_responder_fn:875,1,1,"c.krb5_responder_fn",krb5_responder_get_challenge:365,0,1,"c.krb5_responder_get_challenge",krb5_responder_list_questions:366,0,1,"c.krb5_responder_list_questions",krb5_responder_otp_challenge:876,1,1,"c.krb5_responder_otp_challenge",krb5_responder_otp_challenge_free:367,0,1,"c.krb5_responder_otp_challenge_free",krb5_responder_otp_get_challenge:368,0,1,"c.krb5_responder_otp_get_challenge",krb5_responder_otp_set_answer:369,0,1,"c.krb5_responder_otp_set_answer",krb5_responder_otp_tokeninfo:877,1,1,"c.krb5_responder_otp_tokeninfo",krb5_responder_pkinit_challenge:878,1,1,"c.krb5_responder_pkinit_challenge",krb5_responder_pkinit_challenge_free:370,0,1,"c.krb5_responder_pkinit_challenge_free",krb5_responder_pkinit_get_challenge:371,0,1,"c.krb5_responder_pkinit_get_challenge",krb5_responder_pkinit_identity:879,1,1,"c.krb5_responder_pkinit_identity",krb5_responder_pkinit_set_answer:372,0,1,"c.krb5_responder_pkinit_set_answer",krb5_responder_set_answer:373,0,1,"c.krb5_responder_set_answer",krb5_response:880,1,1,"c.krb5_response",krb5_roundup:799,3,1,"",krb5_salttype_to_string:374,0,1,"c.krb5_salttype_to_string",krb5_sendauth:375,0,1,"c.krb5_sendauth",krb5_server_decrypt_ticket_keytab:376,0,1,"c.krb5_server_decrypt_ticket_keytab",krb5_set_default_realm:377,0,1,"c.krb5_set_default_realm",krb5_set_default_tgs_enctypes:378,0,1,"c.krb5_set_default_tgs_enctypes",krb5_set_error_message:379,0,1,"c.krb5_set_error_message",krb5_set_kdc_recv_hook:380,0,1,"c.krb5_set_kdc_recv_hook",krb5_set_kdc_send_hook:381,0,1,"c.krb5_set_kdc_send_hook",krb5_set_password:382,0,1,"c.krb5_set_password",krb5_set_password_using_ccache:383,0,1,"c.krb5_set_password_using_ccache",krb5_set_principal_realm:384,0,1,"c.krb5_set_principal_realm",krb5_set_real_time:385,0,1,"c.krb5_set_real_time",krb5_set_trace_callback:386,0,1,"c.krb5_set_trace_callback",krb5_set_trace_filename:387,0,1,"c.krb5_set_trace_filename",krb5_sname_match:388,0,1,"c.krb5_sname_match",krb5_sname_to_principal:389,0,1,"c.krb5_sname_to_principal",krb5_string_to_cksumtype:390,0,1,"c.krb5_string_to_cksumtype",krb5_string_to_deltat:391,0,1,"c.krb5_string_to_deltat",krb5_string_to_enctype:392,0,1,"c.krb5_string_to_enctype",krb5_string_to_key:393,0,1,"c.krb5_string_to_key",krb5_string_to_salttype:394,0,1,"c.krb5_string_to_salttype",krb5_string_to_timestamp:395,0,1,"c.krb5_string_to_timestamp",krb5_ticket:881,1,1,"c.krb5_ticket",krb5_ticket_times:882,1,1,"c.krb5_ticket_times",krb5_timeofday:396,0,1,"c.krb5_timeofday",krb5_timestamp:883,1,1,"c.krb5_timestamp",krb5_timestamp_to_sfstring:397,0,1,"c.krb5_timestamp_to_sfstring",krb5_timestamp_to_string:398,0,1,"c.krb5_timestamp_to_string",krb5_tkt_authent:884,1,1,"c.krb5_tkt_authent",krb5_tkt_creds_context:885,1,1,"c.krb5_tkt_creds_context",krb5_tkt_creds_free:399,0,1,"c.krb5_tkt_creds_free",krb5_tkt_creds_get:400,0,1,"c.krb5_tkt_creds_get",krb5_tkt_creds_get_creds:401,0,1,"c.krb5_tkt_creds_get_creds",krb5_tkt_creds_get_times:402,0,1,"c.krb5_tkt_creds_get_times",krb5_tkt_creds_init:403,0,1,"c.krb5_tkt_creds_init",krb5_tkt_creds_step:404,0,1,"c.krb5_tkt_creds_step",krb5_trace_callback:886,1,1,"c.krb5_trace_callback",krb5_trace_info:887,1,1,"c.krb5_trace_info",krb5_transited:888,1,1,"c.krb5_transited",krb5_typed_data:889,1,1,"c.krb5_typed_data",krb5_ui_2:890,1,1,"c.krb5_ui_2",krb5_ui_4:891,1,1,"c.krb5_ui_4",krb5_unmarshal_credentials:405,0,1,"c.krb5_unmarshal_credentials",krb5_unparse_name:406,0,1,"c.krb5_unparse_name",krb5_unparse_name_ext:407,0,1,"c.krb5_unparse_name_ext",krb5_unparse_name_flags:408,0,1,"c.krb5_unparse_name_flags",krb5_unparse_name_flags_ext:409,0,1,"c.krb5_unparse_name_flags_ext",krb5_us_timeofday:410,0,1,"c.krb5_us_timeofday",krb5_use_enctype:411,0,1,"c.krb5_use_enctype",krb5_verify_authdata_kdc_issued:412,0,1,"c.krb5_verify_authdata_kdc_issued",krb5_verify_checksum:413,0,1,"c.krb5_verify_checksum",krb5_verify_init_creds:414,0,1,"c.krb5_verify_init_creds",krb5_verify_init_creds_opt:892,1,1,"c.krb5_verify_init_creds_opt",krb5_verify_init_creds_opt_init:415,0,1,"c.krb5_verify_init_creds_opt_init",krb5_verify_init_creds_opt_set_ap_req_nofail:416,0,1,"c.krb5_verify_init_creds_opt_set_ap_req_nofail",krb5_vprepend_error_message:417,0,1,"c.krb5_vprepend_error_message",krb5_vset_error_message:418,0,1,"c.krb5_vset_error_message",krb5_vwrap_error_message:419,0,1,"c.krb5_vwrap_error_message",krb5_wrap_error_message:420,0,1,"c.krb5_wrap_error_message",krb5_x:800,3,1,"",krb5_xc:801,3,1,"",passwd_phrase_element:893,1,1,"c.passwd_phrase_element"},krb5_address:{addrtype:803,2,1,"c.krb5_address.addrtype",contents:803,2,1,"c.krb5_address.contents",length:803,2,1,"c.krb5_address.length",magic:803,2,1,"c.krb5_address.magic"},krb5_ap_rep:{enc_part:805,2,1,"c.krb5_ap_rep.enc_part",magic:805,2,1,"c.krb5_ap_rep.magic"},krb5_ap_rep_enc_part:{ctime:806,2,1,"c.krb5_ap_rep_enc_part.ctime",cusec:806,2,1,"c.krb5_ap_rep_enc_part.cusec",magic:806,2,1,"c.krb5_ap_rep_enc_part.magic",seq_number:806,2,1,"c.krb5_ap_rep_enc_part.seq_number",subkey:806,2,1,"c.krb5_ap_rep_enc_part.subkey"},krb5_ap_req:{ap_options:807,2,1,"c.krb5_ap_req.ap_options",authenticator:807,2,1,"c.krb5_ap_req.authenticator",magic:807,2,1,"c.krb5_ap_req.magic",ticket:807,2,1,"c.krb5_ap_req.ticket"},krb5_authdata:{ad_type:809,2,1,"c.krb5_authdata.ad_type",contents:809,2,1,"c.krb5_authdata.contents",length:809,2,1,"c.krb5_authdata.length",magic:809,2,1,"c.krb5_authdata.magic"},krb5_authenticator:{authorization_data:811,2,1,"c.krb5_authenticator.authorization_data",checksum:811,2,1,"c.krb5_authenticator.checksum",client:811,2,1,"c.krb5_authenticator.client",ctime:811,2,1,"c.krb5_authenticator.ctime",cusec:811,2,1,"c.krb5_authenticator.cusec",magic:811,2,1,"c.krb5_authenticator.magic",seq_number:811,2,1,"c.krb5_authenticator.seq_number",subkey:811,2,1,"c.krb5_authenticator.subkey"},krb5_checksum:{checksum_type:816,2,1,"c.krb5_checksum.checksum_type",contents:816,2,1,"c.krb5_checksum.contents",length:816,2,1,"c.krb5_checksum.length",magic:816,2,1,"c.krb5_checksum.magic"},krb5_const_principal:{data:819,2,1,"c.krb5_const_principal.data",length:819,2,1,"c.krb5_const_principal.length",magic:819,2,1,"c.krb5_const_principal.magic",realm:819,2,1,"c.krb5_const_principal.realm",type:819,2,1,"c.krb5_const_principal.type"},krb5_cred:{enc_part2:821,2,1,"c.krb5_cred.enc_part2",enc_part:821,2,1,"c.krb5_cred.enc_part",magic:821,2,1,"c.krb5_cred.magic",tickets:821,2,1,"c.krb5_cred.tickets"},krb5_cred_enc_part:{magic:822,2,1,"c.krb5_cred_enc_part.magic",nonce:822,2,1,"c.krb5_cred_enc_part.nonce",r_address:822,2,1,"c.krb5_cred_enc_part.r_address",s_address:822,2,1,"c.krb5_cred_enc_part.s_address",ticket_info:822,2,1,"c.krb5_cred_enc_part.ticket_info",timestamp:822,2,1,"c.krb5_cred_enc_part.timestamp",usec:822,2,1,"c.krb5_cred_enc_part.usec"},krb5_cred_info:{caddrs:823,2,1,"c.krb5_cred_info.caddrs",client:823,2,1,"c.krb5_cred_info.client",flags:823,2,1,"c.krb5_cred_info.flags",magic:823,2,1,"c.krb5_cred_info.magic",server:823,2,1,"c.krb5_cred_info.server",session:823,2,1,"c.krb5_cred_info.session",times:823,2,1,"c.krb5_cred_info.times"},krb5_creds:{addresses:824,2,1,"c.krb5_creds.addresses",authdata:824,2,1,"c.krb5_creds.authdata",client:824,2,1,"c.krb5_creds.client",is_skey:824,2,1,"c.krb5_creds.is_skey",keyblock:824,2,1,"c.krb5_creds.keyblock",magic:824,2,1,"c.krb5_creds.magic",second_ticket:824,2,1,"c.krb5_creds.second_ticket",server:824,2,1,"c.krb5_creds.server",ticket:824,2,1,"c.krb5_creds.ticket",ticket_flags:824,2,1,"c.krb5_creds.ticket_flags",times:824,2,1,"c.krb5_creds.times"},krb5_crypto_iov:{data:825,2,1,"c.krb5_crypto_iov.data",flags:825,2,1,"c.krb5_crypto_iov.flags"},krb5_data:{data:827,2,1,"c.krb5_data.data",length:827,2,1,"c.krb5_data.length",magic:827,2,1,"c.krb5_data.magic"},krb5_enc_data:{ciphertext:829,2,1,"c.krb5_enc_data.ciphertext",enctype:829,2,1,"c.krb5_enc_data.enctype",kvno:829,2,1,"c.krb5_enc_data.kvno",magic:829,2,1,"c.krb5_enc_data.magic"},krb5_enc_kdc_rep_part:{caddrs:830,2,1,"c.krb5_enc_kdc_rep_part.caddrs",enc_padata:830,2,1,"c.krb5_enc_kdc_rep_part.enc_padata",flags:830,2,1,"c.krb5_enc_kdc_rep_part.flags",key_exp:830,2,1,"c.krb5_enc_kdc_rep_part.key_exp",last_req:830,2,1,"c.krb5_enc_kdc_rep_part.last_req",magic:830,2,1,"c.krb5_enc_kdc_rep_part.magic",msg_type:830,2,1,"c.krb5_enc_kdc_rep_part.msg_type",nonce:830,2,1,"c.krb5_enc_kdc_rep_part.nonce",server:830,2,1,"c.krb5_enc_kdc_rep_part.server",session:830,2,1,"c.krb5_enc_kdc_rep_part.session",times:830,2,1,"c.krb5_enc_kdc_rep_part.times"},krb5_enc_tkt_part:{authorization_data:831,2,1,"c.krb5_enc_tkt_part.authorization_data",caddrs:831,2,1,"c.krb5_enc_tkt_part.caddrs",client:831,2,1,"c.krb5_enc_tkt_part.client",flags:831,2,1,"c.krb5_enc_tkt_part.flags",magic:831,2,1,"c.krb5_enc_tkt_part.magic",session:831,2,1,"c.krb5_enc_tkt_part.session",times:831,2,1,"c.krb5_enc_tkt_part.times",transited:831,2,1,"c.krb5_enc_tkt_part.transited"},krb5_encrypt_block:{crypto_entry:832,2,1,"c.krb5_encrypt_block.crypto_entry",key:832,2,1,"c.krb5_encrypt_block.key",magic:832,2,1,"c.krb5_encrypt_block.magic"},krb5_error:{client:834,2,1,"c.krb5_error.client",ctime:834,2,1,"c.krb5_error.ctime",cusec:834,2,1,"c.krb5_error.cusec",e_data:834,2,1,"c.krb5_error.e_data",error:834,2,1,"c.krb5_error.error",magic:834,2,1,"c.krb5_error.magic",server:834,2,1,"c.krb5_error.server",stime:834,2,1,"c.krb5_error.stime",susec:834,2,1,"c.krb5_error.susec",text:834,2,1,"c.krb5_error.text"},krb5_get_init_creds_opt:{address_list:838,2,1,"c.krb5_get_init_creds_opt.address_list",etype_list:838,2,1,"c.krb5_get_init_creds_opt.etype_list",etype_list_length:838,2,1,"c.krb5_get_init_creds_opt.etype_list_length",flags:838,2,1,"c.krb5_get_init_creds_opt.flags",forwardable:838,2,1,"c.krb5_get_init_creds_opt.forwardable",preauth_list:838,2,1,"c.krb5_get_init_creds_opt.preauth_list",preauth_list_length:838,2,1,"c.krb5_get_init_creds_opt.preauth_list_length",proxiable:838,2,1,"c.krb5_get_init_creds_opt.proxiable",renew_life:838,2,1,"c.krb5_get_init_creds_opt.renew_life",salt:838,2,1,"c.krb5_get_init_creds_opt.salt",tkt_life:838,2,1,"c.krb5_get_init_creds_opt.tkt_life"},krb5_gic_opt_pa_data:{attr:839,2,1,"c.krb5_gic_opt_pa_data.attr",value:839,2,1,"c.krb5_gic_opt_pa_data.value"},krb5_kdc_rep:{client:843,2,1,"c.krb5_kdc_rep.client",enc_part2:843,2,1,"c.krb5_kdc_rep.enc_part2",enc_part:843,2,1,"c.krb5_kdc_rep.enc_part",magic:843,2,1,"c.krb5_kdc_rep.magic",msg_type:843,2,1,"c.krb5_kdc_rep.msg_type",padata:843,2,1,"c.krb5_kdc_rep.padata",ticket:843,2,1,"c.krb5_kdc_rep.ticket"},krb5_kdc_req:{addresses:844,2,1,"c.krb5_kdc_req.addresses",authorization_data:844,2,1,"c.krb5_kdc_req.authorization_data",client:844,2,1,"c.krb5_kdc_req.client",from:844,2,1,"c.krb5_kdc_req.from",kdc_options:844,2,1,"c.krb5_kdc_req.kdc_options",ktype:844,2,1,"c.krb5_kdc_req.ktype",magic:844,2,1,"c.krb5_kdc_req.magic",msg_type:844,2,1,"c.krb5_kdc_req.msg_type",nktypes:844,2,1,"c.krb5_kdc_req.nktypes",nonce:844,2,1,"c.krb5_kdc_req.nonce",padata:844,2,1,"c.krb5_kdc_req.padata",rtime:844,2,1,"c.krb5_kdc_req.rtime",second_ticket:844,2,1,"c.krb5_kdc_req.second_ticket",server:844,2,1,"c.krb5_kdc_req.server",till:844,2,1,"c.krb5_kdc_req.till",unenc_authdata:844,2,1,"c.krb5_kdc_req.unenc_authdata"},krb5_keyblock:{contents:846,2,1,"c.krb5_keyblock.contents",enctype:846,2,1,"c.krb5_keyblock.enctype",length:846,2,1,"c.krb5_keyblock.length",magic:846,2,1,"c.krb5_keyblock.magic"},krb5_keytab_entry:{key:848,2,1,"c.krb5_keytab_entry.key",magic:848,2,1,"c.krb5_keytab_entry.magic",principal:848,2,1,"c.krb5_keytab_entry.principal",timestamp:848,2,1,"c.krb5_keytab_entry.timestamp",vno:848,2,1,"c.krb5_keytab_entry.vno"},krb5_last_req_entry:{lr_type:852,2,1,"c.krb5_last_req_entry.lr_type",magic:852,2,1,"c.krb5_last_req_entry.magic",value:852,2,1,"c.krb5_last_req_entry.value"},krb5_pa_data:{contents:857,2,1,"c.krb5_pa_data.contents",length:857,2,1,"c.krb5_pa_data.length",magic:857,2,1,"c.krb5_pa_data.magic",pa_type:857,2,1,"c.krb5_pa_data.pa_type"},krb5_pa_pac_req:{include_pac:858,2,1,"c.krb5_pa_pac_req.include_pac"},krb5_pa_server_referral_data:{referral_valid_until:859,2,1,"c.krb5_pa_server_referral_data.referral_valid_until",referred_realm:859,2,1,"c.krb5_pa_server_referral_data.referred_realm",rep_cksum:859,2,1,"c.krb5_pa_server_referral_data.rep_cksum",requested_principal_name:859,2,1,"c.krb5_pa_server_referral_data.requested_principal_name",true_principal_name:859,2,1,"c.krb5_pa_server_referral_data.true_principal_name"},krb5_pa_svr_referral_data:{principal:860,2,1,"c.krb5_pa_svr_referral_data.principal"},krb5_principal:{data:866,2,1,"c.krb5_principal.data",length:866,2,1,"c.krb5_principal.length",magic:866,2,1,"c.krb5_principal.magic",realm:866,2,1,"c.krb5_principal.realm",type:866,2,1,"c.krb5_principal.type"},krb5_principal_data:{data:867,2,1,"c.krb5_principal_data.data",length:867,2,1,"c.krb5_principal_data.length",magic:867,2,1,"c.krb5_principal_data.magic",realm:867,2,1,"c.krb5_principal_data.realm",type:867,2,1,"c.krb5_principal_data.type"},krb5_prompt:{hidden:868,2,1,"c.krb5_prompt.hidden",prompt:868,2,1,"c.krb5_prompt.prompt",reply:868,2,1,"c.krb5_prompt.reply"},krb5_pwd_data:{element:871,2,1,"c.krb5_pwd_data.element",magic:871,2,1,"c.krb5_pwd_data.magic",sequence_count:871,2,1,"c.krb5_pwd_data.sequence_count"},krb5_replay_data:{seq:873,2,1,"c.krb5_replay_data.seq",timestamp:873,2,1,"c.krb5_replay_data.timestamp",usec:873,2,1,"c.krb5_replay_data.usec"},krb5_responder_otp_challenge:{service:876,2,1,"c.krb5_responder_otp_challenge.service",tokeninfo:876,2,1,"c.krb5_responder_otp_challenge.tokeninfo"},krb5_responder_otp_tokeninfo:{alg_id:877,2,1,"c.krb5_responder_otp_tokeninfo.alg_id",challenge:877,2,1,"c.krb5_responder_otp_tokeninfo.challenge",flags:877,2,1,"c.krb5_responder_otp_tokeninfo.flags",format:877,2,1,"c.krb5_responder_otp_tokeninfo.format",length:877,2,1,"c.krb5_responder_otp_tokeninfo.length",token_id:877,2,1,"c.krb5_responder_otp_tokeninfo.token_id",vendor:877,2,1,"c.krb5_responder_otp_tokeninfo.vendor"},krb5_responder_pkinit_challenge:{identities:878,2,1,"c.krb5_responder_pkinit_challenge.identities"},krb5_responder_pkinit_identity:{identity:879,2,1,"c.krb5_responder_pkinit_identity.identity",token_flags:879,2,1,"c.krb5_responder_pkinit_identity.token_flags"},krb5_response:{expected_nonce:880,2,1,"c.krb5_response.expected_nonce",magic:880,2,1,"c.krb5_response.magic",message_type:880,2,1,"c.krb5_response.message_type",request_time:880,2,1,"c.krb5_response.request_time",response:880,2,1,"c.krb5_response.response"},krb5_ticket:{enc_part2:881,2,1,"c.krb5_ticket.enc_part2",enc_part:881,2,1,"c.krb5_ticket.enc_part",magic:881,2,1,"c.krb5_ticket.magic",server:881,2,1,"c.krb5_ticket.server"},krb5_ticket_times:{authtime:882,2,1,"c.krb5_ticket_times.authtime",endtime:882,2,1,"c.krb5_ticket_times.endtime",renew_till:882,2,1,"c.krb5_ticket_times.renew_till",starttime:882,2,1,"c.krb5_ticket_times.starttime"},krb5_tkt_authent:{ap_options:884,2,1,"c.krb5_tkt_authent.ap_options",authenticator:884,2,1,"c.krb5_tkt_authent.authenticator",magic:884,2,1,"c.krb5_tkt_authent.magic",ticket:884,2,1,"c.krb5_tkt_authent.ticket"},krb5_trace_info:{message:887,2,1,"c.krb5_trace_info.message"},krb5_transited:{magic:888,2,1,"c.krb5_transited.magic",tr_contents:888,2,1,"c.krb5_transited.tr_contents",tr_type:888,2,1,"c.krb5_transited.tr_type"},krb5_typed_data:{data:889,2,1,"c.krb5_typed_data.data",length:889,2,1,"c.krb5_typed_data.length",magic:889,2,1,"c.krb5_typed_data.magic",type:889,2,1,"c.krb5_typed_data.type"},krb5_verify_init_creds_opt:{ap_req_nofail:892,2,1,"c.krb5_verify_init_creds_opt.ap_req_nofail",flags:892,2,1,"c.krb5_verify_init_creds_opt.flags"},passwd_phrase_element:{magic:893,2,1,"c.passwd_phrase_element.magic",passwd:893,2,1,"c.passwd_phrase_element.passwd",phrase:893,2,1,"c.passwd_phrase_element.phrase"}},objnames:{"0":"c","function","C function","1":"c","type","C type","2":"c","member","C member","3":"py","data","Python data"},objtypes:{"0":"c:function","1":"c:type","2":"c:member","3":"py:data"},terms:{"01am":23,"05pm":896,"0x0000":478,"0x00000001":440,498,522,523,750,753,"0x00000002":436,494,525,529,747,752,"0x00000004":521,524,745,"0x00000008":488,526,528,751,"0x00000010":21,496,527,746,"0x00000020":487,530,744,"0x00000040":749,"0x00000080":743,"0x00000100":748,"0x00000200":754,"0x00008000":497,770,"0x0001":444,471,544,562,724,727,760,"0x00010000":485,771,"0x0002":425,454,472,560,723,726,"0x00020000":486,"0x0003":455,473,"0x0004":445,474,557,728,"0x00040000":778,"0x0005":423,469,"0x0006":431,468,"0x0007":428,456,"0x0008":457,475,559,729,"0x00080000":784,"0x0009":453,476,"0x000a":477,"0x000b":482,"0x000c":449,479,"0x000d":480,"0x000e":458,481,"0x000f":447,467,"0x0010":424,448,470,556,"0x00100000":774,"0x0011":442,459,"0x0012":443,461,"0x0013":450,460,"0x0014":430,451,462,"0x0017":463,"0x0018":426,464,"0x0019":465,"0x001a":466,"0x0020":552,"0x00200000":780,"0x0040":558,"0x00400000":775,"0x0080":561,"0x00800000":495,783,"0x0100":422,555,"0x01000000":776,"0x0101":427,"0x01ff":483,"0x0200":554,"0x02000000":491,779,"0x0400":553,"0x04000000":484,777,"0x08000000":493,782,"0x1":564,565,711,715,719,759,"0x10":710,"0x10000000":492,781,"0x1fff":433,"0x2":563,712,714,717,"0x2000":434,"0x20000000":437,490,740,773,"0x3":718,"0x4":708,713,720,"0x4000":432,"0x40000000":439,489,741,772,"0x54800000":499,"0x7fff":762,766,"0x8":709,"0x8000":429,435,763,765,"0x80000000":438,742,"0xfffffff0":441,"10d":896,"12h":20,34,"1foo":21,"30m":896,"3de":14,"3h30m":937,"4gb":916,"5h30m":940,"76cho3000":917,"8h30":896,"abstract":918,920,926,927,929,933,"boolean":6,20,23,36,48,55,868,892,"break":32,900,"byte":20,43,46,48,99,104,287,311,908,909,910,912,913,922,"case":2,3,6,11,14,19,20,21,23,24,28,38,39,43,46,195,245,280,325,330,350,359,375,389,416,704,895,896,898,917,920,921,922,925,929,930,942,944,949,951,"char":43,46,49,50,56,59,60,91,92,93,94,107,136,141,143,144,146,149,152,155,156,160,166,169,170,187,192,193,194,210,213,214,219,222,223,227,228,230,231,233,235,247,252,260,264,267,277,278,306,311,312,317,319,329,336,344,345,346,352,361,363,365,366,369,372,373,374,375,377,379,382,383,384,387,389,390,391,392,394,395,397,398,406,407,408,409,417,418,419,420,801,827,839,868,870,876,877,879,887,932,"class":3,23,942,"const":43,49,52,53,54,58,59,60,91,92,93,94,99,100,101,102,103,106,107,108,113,114,117,119,120,125,126,129,130,136,141,144,146,149,152,155,156,160,166,169,172,173,174,175,177,178,180,181,183,184,185,188,189,194,195,197,213,214,223,228,231,232,233,234,235,247,252,260,264,265,267,277,278,281,284,286,287,288,289,290,294,298,299,300,301,312,317,319,320,322,324,326,329,331,333,336,339,340,341,342,343,344,345,346,351,352,353,355,356,357,358,359,360,361,365,366,369,372,373,376,377,378,379,382,383,384,387,389,393,405,412,413,417,418,419,420,790,818,819,863,864,870,886,887,932,"default":2,3,4,5,6,7,8,10,11,12,15,19,20,21,22,23,24,26,29,30,32,33,34,35,37,38,39,40,41,43,44,46,48,59,60,78,132,147,148,154,223,229,243,253,265,269,275,278,315,317,345,359,375,383,414,710,896,903,904,905,906,908,916,921,922,923,937,939,940,941,943,944,945,946,950,951,"export":20,34,916,917,921,922,931,932,"final":19,21,112,158,902,909,913,"function":3,6,14,23,25,29,34,35,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,99,100,101,102,103,104,105,107,113,114,116,117,119,124,125,126,129,130,133,136,137,139,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,245,246,252,254,258,260,261,262,264,265,266,267,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,310,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,368,371,373,376,378,382,383,385,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,854,863,864,868,870,875,901,902,916,917,920,921,922,925,928,929,931,932,"goto":46,"h\u00f6gskola":917,"import":5,6,14,15,17,19,21,23,34,35,916,922,936,"int":43,51,53,56,59,62,91,92,93,94,97,111,116,120,122,166,223,241,242,243,244,249,254,255,279,306,311,345,350,352,361,382,383,404,407,408,409,416,803,809,812,816,827,838,844,846,851,855,857,868,870,871,889,892,921,"long":3,14,15,23,25,26,37,38,39,41,43,99,287,365,366,737,764,895,898,916,917,920,929,932,946,"new":2,3,6,14,15,20,21,23,24,26,34,35,37,41,43,48,87,89,129,132,138,143,154,160,163,165,166,167,169,172,173,174,175,176,177,178,180,182,183,192,194,195,211,219,229,235,243,245,246,250,253,257,260,262,269,275,280,298,300,301,303,307,313,327,330,336,338,343,344,345,359,365,366,367,368,369,370,371,372,373,380,381,382,383,386,387,399,400,401,402,403,404,407,717,718,895,899,913,916,917,921,922,925,926,929,936,937,940,942,951,"null":19,20,21,43,44,46,48,54,64,92,99,100,102,103,107,113,129,136,141,154,155,156,164,173,195,198,200,203,209,220,223,224,228,230,231,235,240,260,264,267,269,273,275,287,288,289,290,294,298,300,301,315,322,323,325,326,329,330,331,332,336,342,343,344,354,356,359,360,361,363,364,365,366,369,372,375,377,380,381,382,383,386,388,389,397,407,408,409,412,414,791,916,921,930,932,951,"public":21,40,917,925,926,927,928,"return":3,9,12,20,21,22,23,38,43,46,48,50,52,54,56,57,59,60,69,74,91,92,93,100,103,109,110,119,127,128,133,135,137,141,142,144,145,146,147,148,149,151,152,153,154,155,156,159,161,169,176,189,192,214,223,224,227,228,229,231,235,260,262,263,264,267,268,271,279,282,283,284,288,290,301,302,303,305,306,308,310,311,314,315,316,317,318,320,323,325,330,344,345,352,355,361,365,366,368,371,375,377,378,380,382,383,384,386,388,389,396,398,400,404,406,407,408,409,410,412,414,416,729,863,864,904,916,918,919,920,921,922,923,926,927,929,930,931,932,933,940,944,"short":14,19,21,41,306,898,"static":46,921,932,"switch":14,28,31,43,48,161,895,"true":9,14,20,21,22,23,24,25,26,33,35,36,37,38,40,41,43,52,54,105,109,110,127,128,160,192,245,283,284,285,300,319,343,348,349,350,362,388,416,811,824,858,950,"try":21,25,32,35,38,39,41,43,904,916,936,944,"var":5,8,20,21,23,34,37,899,904,905,915,951,"void":43,46,57,58,59,60,63,80,171,179,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,215,216,218,219,220,221,222,237,239,240,241,242,243,244,245,249,254,255,256,257,258,259,260,270,275,285,291,297,334,339,346,352,367,370,379,380,381,386,399,415,416,417,418,419,420,818,836,854,862,863,864,870,875,886,931,932,"while":3,12,14,15,16,20,21,23,24,34,35,43,46,895,902,921,936,937,944,951,AES:14,15,20,25,904,916,917,AFS:14,AND:917,ARE:917,Added:916,946,Adding:17,32,34,908,Are:3,23,BUT:917,But:899,CCS:917,CMS:467,476,477,479,480,481,482,916,CTS:14,20,916,DES:13,20,26,41,467,916,DNS:21,25,30,33,34,39,44,333,662,904,916,DNs:5,22,23,Dis:19,Doing:903,FOR:917,For:3,10,14,16,17,18,19,20,21,22,23,24,26,28,32,33,34,35,36,37,38,39,43,46,99,100,103,142,287,288,290,736,894,895,899,902,903,904,908,909,913,914,915,916,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,934,936,937,940,943,944,949,951,HAS:917,His:19,ITS:42,917,Its:20,21,908,NFS:936,NOT:5,23,34,917,Not:20,21,44,51,151,614,895,ONE:5,23,ORed:151,One:3,20,23,34,36,38,43,342,895,896,936,937,950,SUCH:917,Such:14,37,39,46,TGS:3,20,21,23,25,26,35,48,224,300,403,757,858,908,916,928,THAT:917,THE:917,TLS:22,29,That:21,902,The:0,3,4,5,6,7,8,9,10,11,12,15,19,20,21,22,23,24,25,26,28,29,31,33,34,35,37,38,39,40,41,43,46,53,62,69,71,74,78,80,91,93,99,100,102,103,113,117,119,121,125,126,129,135,136,138,144,146,148,153,165,166,173,176,189,198,200,217,220,224,228,229,245,248,252,262,268,274,282,286,287,288,289,290,294,296,298,300,305,307,312,315,320,321,322,325,326,331,333,344,345,346,354,356,359,360,365,366,367,368,369,370,371,372,373,376,380,381,382,383,389,398,402,403,405,406,407,408,412,414,420,618,728,736,738,743,744,747,748,750,754,805,811,825,835,848,863,864,868,874,881,894,895,896,898,899,900,901,902,903,904,905,906,908,909,910,912,913,915,916,917,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,934,936,937,939,940,942,944,946,948,949,950,951,Then:3,6,17,23,24,34,940,There:20,21,23,34,35,895,902,904,905,908,912,937,These:14,16,20,21,23,26,34,35,37,39,43,731,902,908,916,917,920,922,925,949,951,UCS:916,USE:917,Use:3,15,22,23,46,49,65,66,67,68,72,73,76,77,78,83,92,111,115,132,141,143,145,150,153,154,163,164,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,230,231,236,239,261,265,269,272,275,280,286,309,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,340,341,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,439,563,564,835,845,902,904,916,925,939,944,946,Used:447,448,598,599,835,894,944,Uses:2,3,15,21,23,Using:3,6,14,23,25,40,936,WILL:917,WITH:917,With:0,3,6,15,22,23,39,950,_kerbero:39,_kpasswd:39,_krb5_address:803,_krb5_ap_rep:805,806,_krb5_ap_rep_enc_part:806,_krb5_ap_req:807,_krb5_auth_context:808,_krb5_authdata:809,_krb5_authent:811,_krb5_ccach:814,_krb5_cccol_cursor:815,_krb5_checksum:816,_krb5_context:135,156,820,_krb5_cred:821,824,_krb5_cred_enc_part:822,_krb5_cred_info:823,_krb5_crypto_iov:825,_krb5_data:827,_krb5_enc_data:829,_krb5_enc_kdc_rep_part:830,_krb5_enc_tkt_part:831,_krb5_encrypt_block:832,_krb5_error:834,_krb5_get_init_cr:838,_krb5_get_init_creds_opt:838,_krb5_gic_opt_pa_data:839,_krb5_init_creds_context:840,_krb5_kdc_rep:843,_krb5_kdc_req:844,_krb5_keyblock:846,_krb5_kt:847,_krb5_last_req_entri:852,_krb5_pa_data:857,_krb5_pa_pac_req:858,_krb5_pa_server_referral_data:859,_krb5_pa_svr_referral_data:860,_krb5_prompt:868,_krb5_pwd_data:871,_krb5_responder_otp_challeng:876,_krb5_responder_otp_tokeninfo:877,_krb5_responder_pkinit_challeng:878,_krb5_responder_pkinit_ident:879,_krb5_respons:880,_krb5_ticket:881,_krb5_ticket_tim:882,_krb5_tkt_authent:884,_krb5_tkt_creds_context:885,_krb5_trace_info:887,_krb5_transit:888,_krb5_typed_data:889,_krb5_verify_init_creds_opt:892,_passwd_phrase_el:893,_profile_t:262,269,_tcp:39,_udp:39,abbrevi:902,941,abc:904,951,abi:883,abil:14,368,371,950,abl:15,16,19,20,21,23,25,29,34,35,39,895,900,936,937,944,abort:800,801,931,about:0,14,19,20,22,26,31,39,41,43,46,251,899,902,904,906,916,917,920,929,934,937,940,951,abov:6,14,19,21,22,23,25,26,32,34,37,41,43,46,899,904,908,917,921,922,923,937,944,absenc:20,46,absent:940,absolut:20,21,894,898,902,ac02:917,acceler:917,accept:3,4,8,14,15,16,20,21,23,26,34,38,39,41,151,389,896,898,902,916,917,918,922,931,932,937,940,acceptor:8,916,941,acceptor_cred_handl:43,access:3,4,8,9,14,15,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,37,39,43,46,895,900,902,910,913,916,920,925,926,928,929,930,935,937,943,944,949,950,accident:916,accommod:46,899,accomplish:23,26,accord:3,19,21,23,36,38,43,154,167,908,909,915,922,944,946,account:20,21,23,24,25,28,30,48,56,245,336,895,916,930,935,940,944,948,950,account_expir:245,836,acknowledg:917,acl:3,4,8,18,20,21,22,23,31,915,acl_fil:4,8,19,20,34,acquir:3,6,8,23,43,48,245,274,402,548,908,916,922,946,acquisit:43,403,across:17,20,21,34,43,926,927,928,936,act:10,19,21,26,899,916,action:4,6,14,899,917,927,activ:6,8,14,21,23,25,37,40,169,939,actor:19,actual:6,14,23,26,35,46,98,99,100,102,103,113,129,287,288,289,290,294,298,899,937,actual_mech:43,ad_kdcissu:320,412,ad_typ:195,809,908,ad_type_extern:787,ad_type_field_type_mask:787,ad_type_regist:787,ad_type_reserv:787,add:3,6,9,11,12,14,15,19,20,21,22,23,31,33,36,38,48,300,343,710,896,916,937,add_auth_ind:916,929,add_mkei:14,23,add_princip:5,14,25,37,add_rel:932,added:3,6,14,15,20,23,24,25,32,34,38,40,302,738,895,916,919,addent:11,916,adding:3,8,23,32,41,916,addit:3,18,19,20,21,22,23,26,29,34,37,38,39,40,43,46,48,301,363,364,414,834,895,899,902,904,906,907,916,917,920,929,934,940,944,951,addition:10,21,36,928,937,addpol:3,23,35,addprinc:3,23,34,37,896,926,addr1:52,53,addr2:52,53,addr:54,232,233,234,332,823,824,830,address1:908,address2:908,address:0,15,20,21,23,24,30,33,38,39,44,48,260,325,326,331,356,359,360,523,524,525,526,803,822,824,831,844,904,908,916,931,937,940,941,address_list:838,addresssanit:916,addrlist:54,addrtyp:429,803,908,addrtype_addrport:787,addrtype_chao:787,addrtype_ddp:787,addrtype_inet6:787,addrtype_inet:787,addrtype_ipport:787,addrtype_is_loc:787,addrtype_iso:787,addrtype_netbio:787,addrtype_xn:787,adjust:14,29,33,34,37,48,100,103,288,290,410,adm:20,22,39,admcil:19,admcilsp:19,admin:3,4,5,8,14,15,16,19,21,22,23,26,32,34,895,904,915,916,926,944,951,admin_serv:3,8,20,21,23,34,39,adminhost:3,23,administ:4,15,34,administr:0,2,3,4,5,6,11,14,15,16,18,19,20,21,22,24,25,26,31,32,35,36,38,895,901,914,915,916,917,927,934,936,940,950,951,adminjohndoefoo:21,adtyp:809,advanc:14,30,150,314,916,934,advantag:14,21,26,32,advertis:21,917,advic:31,advis:14,917,aead:48,aes128:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,aes256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,aes:20,917,aesni:904,917,af_unspec:931,affect:4,19,20,21,26,28,40,126,133,229,916,940,951,afford:32,afs3:14,after:2,3,4,6,10,12,14,21,23,24,25,33,34,35,37,80,98,136,228,272,380,401,883,894,895,900,902,908,909,912,913,916,936,937,944,951,afterward:23,927,again:14,23,28,33,34,718,899,916,922,936,937,against:2,14,20,21,25,28,34,39,40,46,48,129,298,342,356,359,360,363,412,899,904,916,919,922,943,949,agent:20,agre:917,agreement:917,aklog:55,alexand:917,alg_id:877,algid:736,algorithm:14,26,126,913,917,944,alia:3,11,15,23,43,48,144,146,312,365,366,alias:3,11,15,22,23,38,39,916,alic:11,28,949,950,all:0,2,3,6,9,14,15,17,18,19,20,21,23,24,25,28,29,32,33,34,35,37,38,43,46,48,153,163,164,282,342,359,414,745,746,751,815,825,895,896,899,902,903,907,908,913,916,917,928,930,937,939,941,942,943,944,946,949,951,alloc:43,46,48,61,78,93,98,99,100,102,103,107,115,117,119,121,124,148,280,287,288,289,290,296,355,357,407,825,868,919,921,923,926,930,allow:2,3,4,5,6,8,10,12,14,15,16,17,18,19,20,21,23,24,26,28,29,32,33,34,35,36,37,38,40,41,43,46,48,111,252,279,359,404,407,896,898,900,902,904,906,909,916,917,918,919,920,922,923,924,925,926,927,928,929,930,931,932,933,936,937,940,943,950,allow_dup_skei:3,23,allow_forward:3,5,23,allow_postd:3,5,23,allow_proxi:3,23,allow_renew:3,23,allow_svr:3,23,25,35,40,allow_tgs_req:3,23,allow_tix:3,23,allow_weak_crypto:14,21,26,41,48,allowedkeysalt:3,23,almeida:917,alon:34,921,along:0,36,825,895,904,922,alongsid:34,alphabet:896,alphanumer:21,alreadi:6,14,22,23,34,36,43,124,333,895,902,904,906,940,944,946,also:15,17,18,22,23,24,25,26,28,29,32,33,34,35,37,38,39,40,43,46,126,342,403,894,895,898,904,906,908,916,917,919,920,922,923,925,926,928,930,932,933,937,alter:14,37,altern:8,15,20,21,22,24,28,34,37,43,500,902,904,915,916,917,940,although:39,898,917,923,933,936,937,altogeth:20,alwai:14,15,20,21,23,24,39,44,51,55,61,63,66,68,71,80,83,139,142,155,365,714,908,912,916,america:917,among:46,amount:20,21,35,39,102,119,121,289,361,903,an2ln:21,930,an2ln_typ:930,analog:15,anam:56,944,anchor:20,21,940,andrea:917,andrew:5,23,ani:0,3,6,8,9,10,14,15,16,17,19,20,21,23,24,25,26,28,32,34,36,37,38,39,40,41,43,46,48,56,137,147,153,154,156,224,260,268,275,278,279,310,315,359,363,364,404,414,738,835,895,899,900,908,909,913,916,917,918,922,923,930,936,937,940,941,944,950,ank:3,23,anl:21,annot:16,36,916,anonym:3,20,23,25,28,43,48,501,502,916,937,940,941,anoth:15,17,21,24,32,41,48,101,171,824,895,899,904,908,919,920,926,930,931,937,951,ansi:903,answer:21,46,48,366,729,736,738,874,922,anticip:33,39,anyon:936,950,anyth:21,37,anywai:20,39,46,330,anywher:936,951,ap_opt:329,330,375,807,884,ap_opts_etype_negoti:787,ap_opts_mutual_requir:330,359,375,787,ap_opts_reserv:787,ap_opts_use_session_kei:330,787,ap_opts_use_subkei:330,787,ap_opts_wire_mask:787,ap_req_authdata:195,ap_req_nofail:416,892,ap_req_opt:329,330,359,375,api:0,14,41,43,45,98,100,103,186,188,190,191,196,197,245,250,251,262,281,288,290,351,353,411,738,825,845,895,901,904,916,918,922,929,appdata:21,899,appdefault:48,appear:14,20,21,24,34,37,39,41,46,908,917,921,append:3,20,23,38,387,898,904,913,appl:901,917,appl_vers:363,375,appli:3,10,14,18,19,20,21,23,24,35,41,43,171,917,926,929,937,940,944,948,applic:0,12,16,18,20,21,28,30,31,37,43,46,48,59,60,156,250,329,330,331,363,375,504,528,529,716,739,894,895,898,899,901,904,914,916,917,920,922,925,930,932,936,937,943,947,950,appnam:59,60,approach:43,appropri:6,14,21,23,24,28,29,34,37,39,43,46,154,373,398,918,928,929,940,941,944,approxim:903,916,apputil:901,aprepencpart:805,arbitrari:3,23,43,arcfour:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,architectur:902,904,archiv:42,903,area:34,46,arg:3,23,417,418,419,800,801,904,944,arg_keytab:232,235,argument:3,4,6,8,10,14,20,23,44,46,48,63,80,91,93,245,257,260,263,275,325,326,331,352,354,356,360,386,417,418,419,887,904,916,921,922,930,944,946,argv_pars:917,ari:944,aris:917,armor:20,37,48,229,920,929,940,armor_ccach:940,around:23,904,arrai:3,36,43,46,48,100,103,111,173,240,244,254,288,290,322,332,352,354,819,823,825,830,831,844,866,867,930,932,arrang:23,arriv:899,asan:904,asc:903,ascii:6,23,39,908,ask:6,37,39,46,48,736,737,738,920,936,937,940,944,asn:48,909,910,919,aspect:15,28,925,assert:20,43,908,916,922,929,assign:3,19,20,23,34,39,48,82,84,944,associ:3,4,9,19,20,21,23,35,38,43,537,895,899,908,917,951,assum:14,21,34,36,39,43,44,107,124,155,903,937,940,951,asynchron:403,929,athena:3,5,14,15,19,20,21,23,24,28,32,34,904,917,932,936,937,951,athent:260,atom:916,attach:916,attack:2,14,21,23,29,30,32,35,40,46,325,326,331,899,916,940,attempt:0,3,6,20,21,23,24,29,35,39,43,243,250,414,908,916,944,attr:252,839,attribut:3,5,6,9,16,19,20,21,22,23,24,26,36,37,48,253,650,839,916,917,919,922,929,940,944,audit:916,aug:3,23,augment:922,august:917,auth:16,20,39,43,48,61,329,330,359,363,364,375,504,809,823,831,auth_context:61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375,auth_gssapi:3,23,auth_to_loc:21,28,930,auth_to_local_nam:21,28,authdata1:908,authdata2:908,authdata:184,189,224,320,322,412,824,908,916,924,940,941,authdata_plugin:925,authdatum:412,authent:3,5,6,10,12,14,15,20,21,22,24,25,26,29,30,32,34,35,36,37,38,39,40,43,44,46,48,61,62,63,64,66,67,68,69,71,72,73,74,76,77,79,80,81,82,83,84,85,86,87,88,89,90,166,201,223,224,250,322,323,325,326,327,328,329,330,331,336,342,354,356,357,358,359,360,375,437,500,506,615,736,805,807,811,857,874,884,895,898,899,900,901,908,909,913,916,917,919,929,930,937,940,941,947,951,authfrom:174,author:3,19,20,21,48,153,224,253,300,614,744,824,861,916,917,924,939,authoriaz:811,authorit:19,21,154,918,923,926,930,931,authoritykeyidentifi:37,authorization_data:811,831,844,authtim:340,341,342,343,882,908,authtime_out:336,authto:174,authz:844,auto:916,autoconf:901,autodoc:906,autohead:902,autolock:917,autom:902,916,automak:921,automat:3,4,6,8,15,17,23,34,895,898,900,902,913,916,937,939,944,autoreconf:902,avail:3,6,11,12,14,20,21,29,34,38,43,46,56,170,187,192,193,227,252,306,310,315,361,368,371,374,398,416,563,821,843,881,895,902,913,918,924,939,941,945,951,avoid:3,14,19,24,38,46,245,904,916,937,awai:14,41,936,937,awar:908,awk:6,back:19,20,23,24,30,39,40,895,904,909,916,922,925,backend:14,904,916,917,background:4,8,10,34,backslash:344,backspac:344,backup:30,32,39,900,backward:8,20,21,24,26,34,946,bad:34,135,156,balanc:14,38,39,banner:46,352,870,bar:6,21,basch:917,base:0,3,20,21,22,23,24,25,26,34,37,38,39,43,46,49,59,60,62,91,93,98,117,296,344,388,895,899,906,915,916,917,920,925,929,933,937,940,949,basi:14,18,23,39,basic:932,basicconstraint:37,baz:21,bb463167:42,becaus:6,17,19,20,21,23,24,25,35,37,38,39,41,43,46,251,342,895,902,904,908,912,927,929,932,936,940,950,becom:0,6,14,17,21,23,34,39,136,235,260,275,895,916,936,940,944,beeblebrox:34,been:6,12,14,20,21,23,26,35,124,895,899,913,916,917,922,925,937,941,948,951,beep:937,939,befor:2,3,4,5,6,14,15,20,21,22,23,26,35,37,39,41,44,98,100,103,155,288,290,381,389,825,868,896,899,900,902,917,920,927,929,937,940,beforehand:43,began:14,begin:4,6,15,21,23,28,36,43,91,93,99,100,102,103,203,209,287,288,289,290,344,403,908,919,922,923,932,949,behalf:946,behav:3,43,407,416,894,904,behavior:3,14,20,21,28,39,46,228,414,416,916,921,924,925,930,939,943,948,behind:14,28,being:3,14,20,21,23,29,39,44,46,245,372,738,899,906,949,belong:33,161,below:6,20,21,23,28,36,43,738,901,917,944,benefit:39,berkelei:904,917,besid:15,21,best:14,25,34,38,beta:6,23,better:23,24,845,916,between:3,9,20,21,23,25,26,29,34,35,41,45,136,158,385,883,895,916,930,937,939,940,beyond:913,920,925,929,951,big:908,909,910,912,922,biggest:14,bin:34,902,904,906,915,944,binari:21,32,904,917,bind:3,5,20,21,22,23,39,916,943,bind_dn:3,binddn:3,bindir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,bindpwd:3,bison:904,bit:14,20,24,37,46,66,83,142,153,157,359,883,894,908,912,916,919,944,bitwis:151,738,bjaspan:3,23,blank:949,bleep:3,11,23,937,950,951,block:14,20,24,48,99,100,102,103,287,288,289,290,916,blocksiz:95,bob:944,950,bodi:844,929,book:15,boot:34,900,bootstrap:21,borrow:937,boston:39,both:3,12,21,22,23,24,26,28,29,36,37,39,40,43,159,245,251,902,916,917,921,944,bourn:34,box:36,brace:21,921,bracket:20,21,28,breviti:909,brian:917,bridg:916,brief:32,901,925,broken:14,904,brother:917,brute:14,23,35,bsd:916,917,btree:6,23,buffer:23,43,48,56,98,99,119,170,187,192,193,279,287,300,301,306,331,336,339,374,397,398,404,407,409,538,825,916,922,buflen:170,187,192,193,374,397,398,bug:0,23,42,901,902,934,build:34,39,41,48,49,136,895,901,904,914,915,916,921,925,943,built:21,24,28,46,48,378,895,902,904,916,922,932,937,943,builtin:904,916,917,bundl:21,917,bunni:39,busi:917,byacc:904,c89:903,cacert:29,37,cach:3,14,15,21,23,28,43,44,48,78,138,140,223,224,229,247,264,267,323,325,326,329,331,356,359,360,375,403,414,522,545,549,753,897,901,904,905,911,915,916,924,937,939,940,941,943,944,945,946,949,951,cache_nam:3,23,939,940,941,cache_out:132,154,cacheconf:908,cachenam:895,945,cachetyp:916,cacreateseri:37,caddr:823,830,831,cakei:37,california:917,call:14,16,20,21,23,24,28,34,43,46,91,93,100,103,113,120,122,123,125,126,136,156,158,176,228,245,251,261,268,275,279,282,288,290,294,301,308,317,323,380,381,404,825,868,875,894,895,901,902,916,920,921,922,927,929,930,936,944,callback:48,260,275,352,380,381,387,854,868,870,874,916,920,929,931,caller:43,46,71,85,99,100,102,103,117,119,121,136,144,146,245,252,269,279,287,288,289,290,296,301,312,314,330,361,365,366,404,414,825,894,916,923,929,932,camellia128:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,camellia256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,camellia:20,916,can:0,2,3,4,5,6,8,9,10,11,14,15,16,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,36,37,38,39,40,41,43,46,50,56,136,138,154,224,254,271,301,307,331,342,344,366,386,389,400,403,414,416,735,863,864,874,882,894,895,896,898,899,902,903,904,906,908,909,916,918,919,920,921,922,923,925,926,927,928,929,930,931,933,936,937,940,944,948,951,cancel:23,candid:913,944,cannot:3,15,23,24,25,35,37,43,46,91,93,135,151,260,344,414,883,908,937,940,941,946,canon:4,15,22,23,38,39,192,300,926,930,canonhost_out:194,canonic:15,21,22,33,43,48,301,389,546,916,940,946,capabl:32,916,936,capac:25,capath:20,card:3,20,21,23,916,care:3,14,19,23,28,43,925,carefulli:37,carnegi:917,carri:3,25,951,cartoon:34,casio:14,cast:883,894,918,920,921,926,927,928,929,931,933,cat:6,categori:25,caus:3,4,6,14,20,21,23,24,25,26,34,35,37,38,39,40,43,48,245,247,388,734,895,899,904,916,917,941,945,caution:3,cb_data:386,886,cb_ret:932,cbc:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,cbdata:932,cbrown:951,cc246071:916,cc246091:916,ccach:3,23,41,43,48,132,135,164,224,225,226,232,233,234,246,250,251,264,267,321,329,375,383,403,405,414,815,904,915,918,942,946,ccache_typ:21,ccachenam:904,ccapi:901,917,ccselect:28,916,921,924,931,ccselect_plugin:918,921,ceas:0,6,23,cell:14,center:10,901,917,951,central:0,cert:16,21,37,cert_fil:946,certain:23,32,236,904,917,946,951,certauth:916,924,certauth_plugin:919,certid:21,certif:3,20,21,29,40,43,48,253,693,910,916,924,946,951,certifi:21,certlabel:21,cf2:48,cflag:904,943,cfr:917,chain:20,21,916,challeng:20,21,40,46,48,366,367,368,370,371,695,698,736,737,874,877,909,916,chang:2,3,6,9,14,15,19,20,21,22,24,25,26,28,33,34,37,39,46,48,78,136,158,245,260,382,383,620,717,894,902,906,908,915,916,917,925,927,933,935,942,944,950,change_password:26,change_password_for:382,383,changeov:34,changepw:3,14,15,23,26,166,245,300,301,382,channel:14,21,36,43,46,325,916,944,charact:3,19,20,21,23,34,38,39,344,397,408,713,942,charg:917,chat:934,check:12,20,21,23,26,28,34,37,43,48,59,60,153,283,356,359,360,550,902,904,906,912,921,932,933,937,941,944,check_a:928,check_tg:928,checkout:906,checksum:43,48,104,175,202,203,300,301,329,330,331,333,342,343,532,539,658,660,661,665,811,854,910,913,922,checksum_typ:816,cheetah:906,chl:46,367,368,370,chl_out:371,choic:21,38,43,46,250,940,choos:14,22,25,34,38,39,43,900,918,936,940,949,chosen:16,21,22,26,43,46,229,903,909,915,916,918,949,chpass:3,23,927,chrand:3,23,chunk:114,295,cipher:14,26,48,99,100,102,103,287,288,289,290,cipher_st:99,100,102,103,287,288,289,290,ciphertext:25,99,100,102,103,104,287,288,289,290,805,829,909,913,circular:23,circumst:20,37,citi:917,ckf_:738,ckfrom:175,cksum:113,129,294,298,413,cksumtyp:81,96,111,113,114,130,170,294,295,299,cksumtype_cmac_camellia128:787,cksumtype_cmac_camellia256:787,cksumtype_crc32:787,cksumtype_descbc:787,cksumtype_hmac_md5_arcfour:787,cksumtype_hmac_sha1_96_aes128:787,cksumtype_hmac_sha1_96_aes256:787,cksumtype_hmac_sha1_des3:787,cksumtype_hmac_sha256_128_aes128:787,cksumtype_hmac_sha384_192_aes256:787,cksumtype_md5_hmac_arcfour:787,cksumtype_nist_sha:787,cksumtype_rsa_md4:787,cksumtype_rsa_md4_d:787,cksumtype_rsa_md5:787,cksumtype_rsa_md5_d:787,cksumtype_sha1:787,cksumtypep:390,ckto:175,claim:651,655,917,clang:916,clarifi:37,clariti:944,clean:23,268,269,386,906,916,932,cleanli:916,cleanup:46,932,clear:3,6,11,15,23,36,46,48,136,156,377,clearpolici:3,19,23,cleartext:806,822,830,click:34,client1:37,client2:37,client:3,12,14,16,18,20,21,22,23,25,26,28,31,32,34,35,36,38,39,40,41,43,46,48,145,154,223,224,235,241,242,258,260,264,267,275,276,277,330,333,359,363,403,651,652,738,805,806,811,823,824,831,834,843,844,895,899,901,904,908,909,910,915,916,917,918,919,921,924,926,929,931,937,940,941,943,944,946,949,951,client_aware_channel_bind:21,client_aware_gss_bind:916,client_cert:37,client_kei:916,client_keytab:43,client_princ:46,300,clientauth:21,clientkei:37,clifford:951,clock:21,34,48,267,356,360,896,929,940,clockskew:15,21,359,913,932,940,close:21,32,48,71,85,132,137,138,148,164,167,265,301,307,753,913,927,933,clpreauth:28,924,clpreauth_mymech_initvt:921,clpreauth_plugin:920,cmac:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,cmd_path:944,cname:33,34,38,39,code:0,20,21,23,41,43,46,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,171,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,251,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,728,834,835,863,883,894,901,903,904,916,917,920,921,922,925,927,929,931,932,933,934,coerc:913,coexist:19,collect:21,43,48,132,154,726,727,901,916,918,939,940,941,945,949,951,collis:48,899,colon:5,20,21,23,28,39,152,344,346,420,951,column:6,com:3,6,9,11,16,20,21,22,23,28,35,37,38,39,41,42,909,910,916,917,936,937,949,950,951,com_err:835,904,916,921,combin:3,8,15,20,23,26,43,48,254,909,941,come:21,46,359,902,903,936,comma:3,6,10,20,21,23,command:4,8,9,10,14,15,20,21,22,23,24,26,29,32,34,35,37,41,896,898,901,902,903,904,916,935,936,937,939,942,944,946,951,command_opt:5,6,23,commenc:34,comment:0,15,21,commerci:21,37,917,commit:9,917,927,common:21,23,25,34,43,904,917,920,936,950,common_appdata:21,commonconfig:21,commonli:8,41,commun:0,21,23,25,29,34,37,43,863,895,901,917,918,934,compani:937,companion:36,compar:47,48,129,298,909,comparison:21,compat:8,20,21,36,43,902,904,916,926,928,946,compil:0,902,903,904,905,916,917,943,944,compile_et:904,complet:5,6,14,20,21,23,39,43,45,158,272,274,359,375,401,402,736,901,904,905,complex:916,compli:917,complic:37,904,compon:19,21,28,37,38,43,46,48,92,93,223,344,345,350,388,645,706,708,761,908,912,916,917,932,937,949,component1:908,912,component2:908,912,compos:37,compress:903,compromis:14,17,21,32,895,900,comput:14,20,21,29,43,44,46,48,91,117,129,229,296,298,910,917,920,929,936,937,concaten:729,909,922,concatent:922,concept:914,924,concern:25,35,917,937,concis:932,concret:906,concurr:20,24,condit:37,154,301,916,917,944,conduct:29,conf:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,conf_keyfil:5,23,conf_req_flag:43,conf_stat:43,confidenti:26,43,916,config:20,21,23,141,155,269,378,901,904,915,916,922,935,938,configur:3,4,5,9,14,16,17,19,20,21,23,24,25,30,31,38,41,43,46,48,50,78,154,167,194,251,261,269,388,414,416,563,564,896,899,901,902,903,905,906,916,921,924,933,937,940,941,944,948,950,951,confirm:2,3,5,6,23,130,299,916,946,conflict:15,28,359,602,603,605,606,922,conform:21,903,916,942,confound:104,confus:917,confusingli:46,confvalid:901,conjunct:946,connect:3,4,5,8,12,20,23,32,34,38,43,48,895,899,916,917,937,consequ:14,consequenti:917,consid:0,14,21,24,33,39,41,342,899,904,908,consider:39,45,consist:21,39,344,898,903,908,909,916,923,930,consol:20,consolid:0,consortium:934,951,constant:46,57,58,725,731,819,constitut:917,constrain:3,23,333,547,654,916,946,constraint:917,949,construct:0,43,46,277,279,329,404,863,864,916,921,946,consult:21,930,consum:24,894,925,contact:3,7,8,14,20,21,23,29,39,260,895,918,934,947,contain:3,4,5,6,8,9,15,19,20,21,22,23,24,28,29,33,34,37,38,39,41,43,46,48,54,67,72,76,152,154,169,172,173,183,184,195,231,245,247,276,279,300,301,320,330,336,342,344,355,356,357,360,363,365,375,404,414,845,874,887,895,896,898,899,901,902,903,904,905,906,908,909,912,913,917,921,922,931,932,934,936,937,939,940,944,945,946,949,950,951,container_dn:3,23,container_reference_dn:5,23,containerdn:3,23,containerref:5,23,contempl:917,content:0,6,9,11,12,14,23,27,34,37,43,44,46,48,82,84,124,133,137,147,148,174,175,177,178,180,182,183,198,199,200,201,202,207,208,212,215,221,280,333,334,803,809,816,825,846,857,888,895,908,910,912,917,922,940,941,context:21,41,43,44,46,48,49,50,51,52,53,54,55,56,59,60,61,66,70,75,83,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,172,173,174,175,176,177,178,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,264,265,267,276,277,278,279,280,281,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,367,368,369,370,371,372,375,376,378,379,380,381,382,383,384,385,386,387,388,389,393,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,564,791,792,793,794,795,796,797,798,836,863,864,870,874,886,916,918,920,921,923,929,930,931,context_handl:43,922,contigu:43,continu:2,6,17,34,909,916,917,944,contract:917,contrari:43,46,contribut:101,107,119,914,917,951,contributor:907,917,control:4,14,15,18,19,20,21,22,26,28,34,36,37,38,41,43,46,243,279,404,414,904,905,916,918,923,924,925,928,930,931,932,933,948,convei:14,23,39,43,835,861,916,917,conveni:46,323,368,371,902,convent:39,406,932,convention:951,convers:21,909,convert:14,21,38,43,48,169,258,389,916,949,cooki:599,911,916,929,coordin:922,copi:15,17,23,26,29,32,34,37,41,43,48,86,88,269,272,342,401,900,908,917,925,932,937,944,copyright:901,903,917,951,core:920,925,929,932,934,corpor:917,951,correct:4,10,14,21,23,33,34,41,124,733,895,904,916,917,correctli:12,43,863,864,894,916,936,correspond:6,19,21,37,39,43,44,46,56,152,245,263,342,882,906,909,916,921,922,927,951,corrupt:6,17,23,916,cost:23,29,904,917,could:0,14,16,17,21,25,28,33,34,35,39,899,916,921,936,937,944,couldn:12,count:3,6,23,43,48,87,89,111,286,908,912,counter:3,23,35,countermeasur:32,counterpart:19,33,countri:917,cours:17,courtesan:917,cover:33,cpp:904,cppflag:904,cppopt:904,cpu:40,cpw:3,14,23,crash:17,21,34,crawdad:917,crawford:917,crc:14,26,creat:3,4,7,12,14,15,19,20,21,22,24,26,28,31,32,35,43,47,48,67,72,76,93,113,114,125,126,135,138,172,173,174,175,176,177,178,180,182,183,205,236,262,265,271,294,295,307,308,324,331,345,359,363,364,375,387,400,414,708,895,896,898,902,906,909,913,916,917,918,919,920,922,923,924,926,927,928,929,930,931,932,933,934,936,937,940,create_polici:23,creation:14,21,23,37,909,creativ:917,creativecommon:917,cred:46,48,150,151,153,159,166,232,233,234,235,260,264,267,272,275,321,382,401,403,405,414,531,916,944,cred_handl:43,922,cred_stor:43,cred_usag:43,cred_usage_stor:43,creddata:354,credenti:3,8,12,16,20,21,23,28,33,35,37,45,48,138,166,177,206,207,223,224,229,321,329,333,354,375,402,405,440,549,618,653,745,821,822,823,824,875,894,897,898,899,901,904,911,916,920,922,923,924,929,937,939,940,941,943,944,945,946,949,951,credentials_cach:3,23,creds_out:354,405,criteria:37,895,critic:46,934,crl:20,21,cron:17,20,34,39,cross:20,21,342,343,359,904,908,916,crt:20,21,crypto:14,121,191,901,904,916,917,crypto_entri:832,crypto_test:917,cryptograph:14,43,916,917,cryptographi:14,40,cryptosystem:14,csv:6,916,ctime:806,811,834,cts:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,ctx:43,72,73,76,77,86,87,88,89,171,176,213,228,270,271,272,273,274,275,276,277,278,279,346,365,366,367,368,369,370,371,372,373,379,399,400,401,402,403,404,417,418,419,420,875,ctype:109,110,127,131,168,413,cuba:917,cultur:917,current:2,3,6,8,9,11,14,20,21,22,23,28,39,48,136,179,330,346,356,360,382,440,740,887,895,898,904,908,913,916,920,923,924,929,937,942,949,951,curri:15,curs:904,cursor:48,139,150,158,163,164,314,318,813,815,curv:21,40,cusec:806,811,834,custom:21,906,915,916,919,cut:39,cve:916,cybersaf:540,917,cycl:916,cygnu:663,917,daemon:8,19,20,21,23,31,36,37,38,895,900,916,921,951,daffodil:15,937,dai:3,5,21,23,37,48,396,896,937,951,daili:14,daisi:39,dal:925,damag:895,917,danger:17,944,danilo:917,dash:21,data:3,6,9,14,20,21,22,23,24,26,32,43,44,46,48,63,79,80,98,113,114,117,119,120,121,123,129,130,141,151,153,155,169,178,203,208,212,224,245,253,257,258,260,262,275,294,295,296,298,299,300,323,326,329,330,331,333,335,340,341,352,354,356,359,360,368,371,375,376,380,381,382,383,386,388,393,405,467,479,480,481,537,538,677,720,744,791,792,795,809,811,819,821,824,825,827,830,831,834,836,843,844,854,857,861,863,864,866,867,870,873,875,884,889,895,899,900,904,908,909,910,912,916,917,919,920,921,924,928,929,933,941,data_length:116,data_out:321,data_set:43,databas:2,4,5,6,7,8,9,10,12,15,18,19,20,21,22,26,28,30,31,32,35,37,43,898,900,901,904,905,915,916,917,924,927,929,940,943,944,951,database_modul:20,24,database_nam:20,23,34,datadir:904,datarootdir:904,datatyp:45,date:3,6,8,20,21,26,37,167,224,398,830,897,916,datebas:4,david:15,23,936,937,951,db2:3,6,20,23,35,901,915,916,db3:904,db_185:904,db_arg:3,4,6,8,10,23,db_header:904,db_lib:904,db_librari:20,22,24,db_module_dir:20,db_princ_arg:3,23,dbadmin:19,dbdefault:5,23,dbmatch:21,dbmodul:3,22,23,24,35,dbname:3,6,10,23,dbutil:917,dce:43,48,641,679,916,dcmd_path:944,deactiv:20,deal:895,917,dealloc:92,923,930,debian:31,916,debug:3,7,8,9,20,28,903,dec:34,35,896,dec_err:324,dec_error:355,decid:34,39,245,937,decim:6,43,908,951,decis:30,917,926,930,951,declar:43,922,decod:21,46,48,159,184,359,908,919,921,decompos:538,decreas:21,898,decrement:48,decrypt:3,23,35,43,48,79,354,364,825,881,899,944,946,dedic:34,default_ccache_nam:21,136,895,951,default_client_keytab_nam:15,21,898,default_cr:43,default_domain:21,default_kdb_fil:905,default_kdc_enctyp:905,default_keytab_nam:21,898,905,default_principal_expir:20,896,default_principal_flag:19,20,916,default_profile_path:905,default_rcache_nam:21,899,default_realm:21,28,33,34,923,932,default_tgs_enctyp:21,26,default_tkt_enctyp:21,26,default_valu:59,60,defccnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,defcktnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,defeat:40,defens:25,defer:43,919,923,926,930,defin:3,12,20,21,33,34,39,43,101,119,228,738,899,904,908,909,921,925,932,933,944,definit:10,16,20,901,917,926,928,defktnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,del_polici:3,23,delai:24,39,904,916,940,deleg:3,20,21,23,333,547,654,908,916,937,941,946,delegated_cred_handl:43,delent:11,delet:2,3,5,6,11,15,19,21,32,34,151,899,916,917,936,939,944,951,delimit:21,311,delold:2,14,26,delpol:3,23,delprinc:3,23,delstr:3,delta:20,48,deltat:187,deltatp:391,demand:414,demonstr:12,14,deni:3,19,23,25,28,35,926,930,944,denial:21,denot:6,19,896,909,depart:917,depend:25,33,39,43,46,126,365,373,738,874,903,904,915,916,921,933,936,937,deploi:36,37,38,902,deploy:14,24,37,deprec:14,20,26,70,75,94,120,122,123,131,168,186,188,190,191,196,197,225,226,232,233,234,239,281,309,340,341,351,353,393,411,413,916,der:909,919,922,929,der_out:323,325,326,331,deriv:6,14,20,23,25,48,99,100,102,103,113,129,287,288,289,290,294,298,909,913,916,917,942,des3:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,des:14,26,descend:895,899,describ:0,3,14,15,16,21,23,24,25,28,32,34,37,43,375,406,825,834,835,894,908,917,920,921,922,924,932,937,944,descript:23,32,39,43,834,901,915,916,918,919,920,923,925,926,927,928,929,930,931,932,933,descriptor:62,363,364,375,deseri:48,design:28,34,46,315,895,899,951,desir:14,15,23,28,43,119,121,250,251,329,904,916,931,944,desired_mech:43,922,desired_nam:43,desired_object:43,desktop:46,dest_ctx:179,destdir:902,destin:32,902,916,destroi:43,48,136,147,148,386,414,895,916,918,919,920,923,926,927,928,929,930,931,933,935,939,940,destroy_polici:23,detach:8,detail:10,14,15,22,24,26,28,33,34,36,262,736,895,901,903,916,918,919,920,923,926,927,928,929,930,931,932,933,944,detect:6,8,14,23,323,325,326,331,356,360,899,904,922,determin:3,4,5,6,8,20,21,23,24,28,34,43,48,62,102,105,117,136,154,230,231,261,289,359,385,389,416,887,895,898,899,902,904,909,912,916,919,923,926,930,931,937,951,dev:20,21,41,951,develop:0,902,914,916,917,934,951,devic:3,20,21,23,46,655,656,devicenam:20,dfl:21,899,951,dget_tgt_via_passwd:944,dict:3,21,23,dict_fil:4,20,933,dictat:23,dictionari:20,21,29,30,34,35,40,916,933,940,did:34,223,267,342,937,didn:12,28,differ:3,6,12,15,21,25,26,28,33,34,37,38,39,43,45,48,107,119,159,265,375,385,863,899,902,904,921,929,930,936,937,940,944,951,diffi:20,21,940,difficult:35,difficulti:38,digest:20,917,digit:896,951,digitalsignatur:21,37,dir:20,21,37,895,904,915,940,951,direct:21,22,23,28,41,48,917,922,932,951,directli:3,18,20,21,23,29,34,43,46,375,618,922,929,940,945,directori:5,12,20,21,22,23,28,33,34,37,169,342,895,899,903,905,906,915,916,936,944,948,949,950,951,dirnam:21,895,dirpath:895,disabl:3,14,20,21,23,24,26,28,34,37,38,39,41,380,381,386,550,899,902,904,916,924,940,948,951,disable_encrypted_timestamp:21,25,40,disable_fresh:37,940,disable_last_success:20,22,35,disable_lockout:20,22,35,disable_pac:20,916,disallow:19,disallow_forward:5,23,disassoci:4,10,disast:39,disclaim:917,disclosur:19,916,discoveri:25,33,34,916,discuss:34,899,917,925,934,disjoint:0,disk:4,5,6,15,17,23,24,32,34,46,895,900,903,dispatch:922,displai:2,3,5,9,11,15,23,37,42,46,245,728,898,908,916,917,940,941,947,display:169,disrupt:14,dist:903,distclean:902,distinguish:5,21,23,917,distribut:10,901,902,903,904,905,916,917,937,951,distributor:917,divid:913,dll:28,921,922,932,dns:21,904,dns_canonicalize_hostnam:21,38,916,dns_canonicalize_realm:916,dns_lookup_kdc:21,dns_lookup_realm:21,39,dns_uri_lookup:21,39,dnsname:21,doc:22,42,906,document:5,20,21,23,29,33,34,43,894,902,904,913,916,917,921,934,doe:3,6,8,10,14,15,20,21,22,23,24,25,26,34,37,38,39,40,43,46,56,119,144,152,160,301,311,313,345,375,389,397,414,895,898,902,904,909,916,917,921,922,923,930,932,936,937,944,doesn:2,6,23,161,895,936,doing:6,23,29,46,916,917,921,940,944,domain:12,15,20,21,33,34,36,37,38,39,916,937,domain_realm:28,33,39,949,don:12,710,713,895,902,904,936,944,951,donat:23,917,done:8,22,23,32,34,39,895,904,920,929,932,944,951,dot:38,doubl:896,down:39,download:8,917,downstream:23,916,downtim:14,doxygen:0,906,dprinc_look_ahead:944,draft:692,695,698,916,drift:15,drop:916,dry:6,dsa:476,dst:148,due:14,19,23,41,dug:917,dugsong:917,dump:4,7,8,17,20,24,34,915,916,dump_fil:4,dumpfil:6,23,904,dumptyp:6,dup:20,duplic:48,824,899,durabl:20,24,durat:3,20,21,23,882,940,944,dure:3,4,8,17,20,21,23,26,34,35,40,43,352,380,414,717,908,909,916,920,927,937,944,dynam:21,921,924,926,932,e19253:42,e2big:119,e_data:834,929,each:2,3,6,8,10,15,19,20,21,23,24,25,26,28,33,35,37,39,43,44,46,252,263,265,352,753,895,898,900,902,908,909,913,916,917,921,925,926,927,931,936,937,940,941,944,946,949,950,ear:917,earli:14,earlier:20,26,34,224,930,earliest:6,153,913,eas:36,easi:14,17,25,35,937,easier:0,14,916,easili:14,34,902,916,eavesdrop:43,eavesdropp:899,ebaa:42,eblock:186,188,190,196,197,281,351,353,393,411,echo:352,361,edata:929,edit:2,11,12,31,904,905,936,editor:0,edt:3,23,edu:0,3,5,12,14,15,19,20,21,23,24,28,32,34,42,916,917,932,934,936,937,944,educ:33,edwards25519:21,40,917,edwards25519_t:917,effect:14,19,20,21,23,37,39,729,895,899,effici:916,effort:25,eight:33,einval:260,373,390,392,394,395,either:15,20,21,22,23,25,26,34,35,36,37,41,43,44,195,245,253,274,325,326,327,331,402,403,407,729,864,895,902,913,917,921,926,930,937,944,950,eku:20,21,elaps:3,23,element:43,46,48,189,320,412,825,871,909,elements_stor:43,elimin:14,40,ellipt:40,els:34,921,936,937,944,elsewher:17,emac:904,email:0,642,936,emailprotect:21,embed:677,empti:3,6,19,20,21,23,36,43,46,48,93,229,231,279,345,388,389,404,414,899,904,908,940,enabl:3,4,8,14,15,20,21,22,23,24,25,28,34,36,37,39,40,41,43,55,78,895,903,904,916,919,924,944,951,enable_onli:21,28,enc:3,6,15,20,23,199,301,824,916,enc_err:324,enc_errbuf:355,enc_padata:830,enc_part2:376,821,843,881,enc_part:805,821,843,881,enc_tkt:300,301,encdata:909,enckdcreppart:830,enckrbcredpart:823,enclos:20,21,896,encod:21,43,46,48,189,300,323,325,355,541,881,888,908,909,919,922,929,encompass:43,encount:21,34,941,encourag:21,encrypt:2,3,6,14,15,17,21,23,25,29,30,32,34,36,40,43,46,48,79,95,98,99,100,112,113,114,116,124,125,126,129,130,153,229,280,287,288,294,295,298,299,310,315,325,326,357,359,394,480,481,539,599,670,748,806,807,821,823,824,825,830,831,843,844,881,898,899,900,901,905,909,910,916,917,920,922,929,934,941,946,951,encrypted_challeng:21,encrypted_challenge_ind:20,916,encrypted_timestamp:21,enctyp:6,11,14,20,21,23,48,95,97,98,99,101,104,107,111,112,116,118,125,126,192,193,211,224,280,287,310,315,378,411,829,831,844,846,908,912,915,916,920,946,enctype_aes128_cts_hmac_sha1_96:447,787,enctype_aes128_cts_hmac_sha256_128:787,enctype_aes256_cts_hmac_sha1_96:448,787,enctype_aes256_cts_hmac_sha384_192:787,enctype_arcfour_hmac:787,enctype_arcfour_hmac_exp:787,enctype_camellia128_cts_cmac:787,enctype_camellia256_cts_cmac:787,enctype_des3_cbc_env:787,enctype_des3_cbc_raw:787,enctype_des3_cbc_sha1:787,enctype_des3_cbc_sha:787,enctype_des_cbc_crc:787,enctype_des_cbc_md4:787,enctype_des_cbc_md5:787,enctype_des_cbc_raw:787,enctype_des_hmac_sha1:787,enctype_dsa_sha1_cm:787,enctype_md5_rsa_cm:787,enctype_nul:101,229,787,enctype_out:229,enctype_rc2_cbc_env:787,enctype_rsa_env:787,enctype_rsa_es_oaep_env:787,enctype_sha1_rsa_cm:787,enctype_unknown:787,enctypep:392,end:6,20,21,23,24,30,33,34,39,92,93,164,332,823,831,844,882,904,908,912,913,916,925,944,951,endian:908,909,910,912,922,endors:917,endpoint:62,917,endtim:224,882,908,energi:917,enforc:21,enforce_ok_as_deleg:21,916,engin:39,enoent:336,enomem:119,223,231,302,323,325,enough:3,23,26,99,102,167,287,289,764,ensur:14,15,17,20,23,24,25,26,34,37,46,171,863,864,923,930,937,enter:3,5,10,14,23,34,37,325,326,331,361,922,936,937,enterpris:38,43,345,708,916,940,946,entir:3,14,20,39,538,908,929,entiti:43,917,entri:3,8,9,11,12,14,15,19,20,21,22,23,24,26,32,34,35,37,38,39,40,41,43,46,48,153,173,195,198,200,220,245,309,315,320,322,325,326,331,337,352,359,414,830,848,852,895,898,900,909,910,913,916,928,929,937,941,944,entropi:916,enumer:14,26,env:21,37,41,951,envelop:467,479,480,481,environ:14,15,20,21,23,24,26,28,30,34,35,37,38,41,43,56,136,268,269,282,386,387,895,898,899,902,915,916,envvar:21,eperm:926,930,epoch:48,883,equal:15,24,912,916,944,equip:951,equival:20,36,166,382,383,916,erang:336,err_fmt:21,916,erron:41,error:3,20,21,24,34,37,39,43,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,137,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,243,248,260,261,262,264,265,266,267,268,271,272,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,543,615,617,711,712,834,835,863,899,901,904,916,920,921,926,927,929,930,937,946,error_t:917,escap:713,especi:15,26,34,38,916,essenti:20,est:23,35,896,establish:37,43,899,etc:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,etyp:6,229,378,671,916,946,etype_list:244,838,etype_list_length:244,838,euid:21,899,915,evalu:21,even:14,20,21,23,25,28,34,38,39,43,245,388,894,896,899,916,917,940,944,event:39,48,916,917,929,eventu:26,39,everi:20,21,23,32,34,48,318,895,evid:43,evolut:916,exact:22,903,exactli:21,34,153,407,746,747,751,909,944,examin:21,37,920,929,exampl:3,5,6,9,14,16,20,21,22,24,26,28,32,34,35,37,38,39,41,43,56,100,103,288,290,895,896,899,902,903,916,917,921,932,936,937,940,944,951,exce:894,896,except:3,15,19,21,23,37,39,43,329,916,917,922,944,excess:902,exchang:34,40,48,224,247,279,363,375,437,875,909,929,exclud:6,17,32,916,exclus:3,913,917,940,944,exec:904,943,944,execprefix:904,execut:3,6,22,34,46,380,903,904,943,exemplari:917,exhaust:32,exist:0,2,3,5,6,14,15,20,21,22,23,26,28,32,34,35,43,46,48,137,147,155,329,330,359,363,364,375,407,414,895,900,908,916,922,940,942,944,exit:3,10,11,23,895,916,937,941,946,exp:3,15,20,21,26,37,expand:21,913,916,expans:904,916,expdat:3,23,expect:14,21,34,41,267,301,342,343,728,906,920,925,937,expected_nonc:880,expens:20,25,35,experi:0,14,39,916,experienc:0,931,experiment:916,expir:2,3,6,15,19,20,21,23,26,33,37,43,46,48,224,243,260,830,882,895,896,899,908,916,937,940,941,944,951,expiri:14,245,916,explain:34,explicit:14,19,21,22,24,28,39,917,explicitli:3,14,19,23,28,34,44,253,904,916,926,927,928,937,expos:3,6,14,23,46,846,940,944,express:3,21,23,896,917,extend:20,21,37,48,420,887,922,951,extendedkeyusag:37,extens:37,39,247,906,916,922,extent:917,extern:20,22,43,908,extfil:37,extra:19,39,40,764,903,extra_address:21,extract:3,15,19,23,34,229,898,916,extrem:3,eytab:3,15,facil:4,15,20,43,916,facilit:916,factor:21,909,fail:2,3,6,14,15,20,21,23,24,35,38,39,43,46,228,260,279,342,354,404,863,902,904,916,922,923,937,939,944,fail_count:6,failov:39,failur:3,6,14,23,24,35,46,119,129,130,159,260,298,299,310,407,408,409,916,917,922,931,933,failurecountinterv:3,23,35,failuretim:3,23,fake:21,46,fall:39,40,895,916,fallback:3,20,21,23,38,40,46,916,923,fallback_realm:923,fals:14,20,21,23,26,28,33,36,37,38,39,43,52,54,105,109,110,127,128,160,192,245,283,284,285,319,348,349,350,362,388,416,950,famili:20,186,188,190,191,196,197,250,251,281,351,353,411,931,famou:34,far:37,fashion:29,917,944,fast:20,21,25,36,37,48,229,544,599,908,916,920,929,fast_avail:908,fast_ccache_nam:247,faster:25,39,895,902,fatal:154,fdii:937,feasibl:34,featur:24,29,368,371,914,917,934,feb:9,februari:894,fee:917,feedback:0,fellow:917,fenc:921,fences_wicker_initvt:921,fermi:917,fetch:4,5,6,10,11,21,23,71,141,414,916,few:904,936,951,fiat:917,fiction:921,fictiti:937,field:3,6,20,21,23,35,36,37,39,44,46,48,153,256,310,330,331,343,352,356,357,359,360,412,747,751,887,908,909,912,913,916,920,921,929,933,937,949,file2:899,913,951,file:3,4,5,6,7,9,10,11,12,14,15,16,17,19,22,24,28,29,30,31,37,38,39,41,46,48,50,152,262,269,317,321,363,364,375,378,405,753,895,896,897,898,899,901,902,903,904,905,906,914,915,916,917,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,935,936,937,944,949,950,951,filenam:2,3,5,6,7,8,15,20,21,23,28,34,36,37,41,43,387,895,899,916,951,filesystem:20,23,34,37,913,915,fill:46,48,50,56,119,121,134,150,152,224,230,231,303,306,311,327,347,357,358,390,391,394,396,397,912,913,921,932,filter:20,21,find:12,21,23,38,39,43,48,50,908,913,916,918,936,937,940,944,fine:39,43,fini:918,919,920,923,926,927,928,929,930,931,finish:48,fip:916,fire:39,firewal:29,39,41,firm:917,first:3,6,9,12,16,19,20,21,22,23,26,28,34,37,38,39,43,44,52,53,93,105,136,228,258,279,300,322,348,349,350,361,362,386,404,761,825,898,899,904,906,908,909,910,912,913,916,917,919,921,922,923,928,930,937,942,944,949,951,fit:311,917,five:3,21,23,34,896,899,927,942,fix:6,913,916,flag:2,3,5,6,11,14,19,20,21,22,23,25,26,28,33,35,39,40,43,46,48,55,62,69,74,78,151,153,192,269,279,325,326,327,331,343,352,354,356,359,360,363,364,404,726,727,728,729,733,734,735,736,738,745,746,823,824,825,830,831,838,877,892,895,904,916,920,929,937,939,940,941,943,944,flag_rsa_protocol:940,flagnam:19,flat:895,flavor:3,23,flexibl:21,38,flip:14,flush:932,fmt:346,379,417,418,419,420,fnal:917,folder:21,follow:2,3,6,10,14,15,19,20,21,22,23,24,25,26,28,29,34,35,36,37,38,39,43,62,228,245,248,263,333,344,345,352,359,361,389,408,895,896,898,899,901,902,904,905,908,909,910,912,916,917,921,922,925,932,934,936,937,940,941,943,944,948,949,950,951,foo:3,6,15,21,foobar:39,904,950,fool:25,foot:921,for_us:946,forbid:3,23,forbidden:21,forc:3,5,8,9,11,14,19,20,21,23,25,26,35,39,40,136,foreground:4,8,forev:3,23,forget:5,23,34,156,fork:10,34,944,form:0,3,15,20,21,23,24,25,28,29,34,39,43,152,317,325,326,331,373,389,642,874,895,900,909,916,917,940,949,951,format:0,3,6,19,20,21,36,39,43,48,321,346,405,406,417,419,420,731,736,738,877,887,895,897,898,899,904,906,910,914,916,921,922,944,946,951,former:388,formul:21,forth:21,forward:3,15,20,21,23,33,34,36,38,43,48,354,531,548,838,916,937,940,941,944,951,found:7,10,12,20,21,23,34,39,59,60,151,153,154,195,301,315,359,904,913,916,936,937,944,945,951,foundat:917,four:21,24,35,40,908,909,910,913,922,944,fqdn:29,fraction:25,frame:908,framework:43,916,917,fred:28,free:46,47,48,49,65,67,72,76,91,93,111,115,141,143,145,150,153,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,236,261,272,275,280,286,310,315,317,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,917,919,921,932,free_ind:919,free_list:923,free_modreq:929,free_restrict:926,free_str:930,932,free_valu:932,freed:44,57,58,61,78,85,106,136,144,146,198,199,200,201,202,204,207,208,210,211,212,215,216,217,218,219,221,222,228,262,312,334,365,366,368,371,863,864,freeli:917,frequent:14,33,38,39,883,936,fresh:0,15,17,20,43,598,911,916,940,944,fri:9,friend:937,friendli:916,friendlier:916,from:0,2,3,4,5,6,7,8,9,10,11,17,19,20,21,22,24,25,28,29,32,34,35,37,38,39,41,43,44,46,48,49,93,99,100,101,102,103,113,119,121,129,148,166,169,180,181,183,195,241,245,250,258,269,287,288,289,290,294,298,322,327,330,342,346,352,356,357,358,359,360,375,376,378,380,382,383,414,420,440,830,843,844,895,898,899,902,903,904,908,909,913,914,916,917,918,919,920,922,924,925,927,932,934,936,937,940,942,944,946,949,951,from_mast:8,915,front:20,344,fsanit:904,ftp:32,34,fubar:21,951,fulfil:944,full:4,8,9,14,20,23,39,48,331,904,916,925,936,944,fulli:3,15,19,21,23,29,32,34,35,46,940,951,fullname_out:143,fulvio:42,func:63,80,fund:917,fundsxpress:917,furnish:917,further:10,34,899,950,furthermor:14,245,917,futur:23,26,37,43,156,228,887,916,923,g10:917,g_accept_sec_context:917,g_acquire_cr:917,g_canon_nam:917,g_compare_nam:917,g_context_tim:917,g_delete_sec_context:917,g_dsp_name:917,g_dsp_statu:917,g_dup_nam:917,g_exp_sec_context:917,g_export_nam:917,g_glue:917,g_imp_nam:917,g_imp_sec_context:917,g_init_sec_context:917,g_initi:917,g_inquire_context:917,g_inquire_cr:917,g_inquire_nam:917,g_process_context:917,g_rel_buff:917,g_rel_cr:917,g_rel_nam:917,g_rel_oid_set:917,g_seal:917,g_sign:917,g_store_cr:917,g_unseal:917,g_userok:917,g_util:917,g_verifi:917,gain:14,25,34,926,928,937,gcc:904,gen_sym:944,gener:2,9,12,14,15,17,19,20,21,23,25,26,32,35,41,43,48,113,125,126,260,283,294,327,330,342,440,523,524,525,526,822,839,854,895,899,901,902,903,904,906,908,916,917,920,924,929,934,937,944,949,generalizedtim:909,generalstr:37,generic_trusted_ca:20,21,gennadi:944,genrsa:37,german:916,get:3,12,14,16,19,20,21,23,32,33,35,38,39,48,59,60,163,236,254,258,275,904,916,920,923,929,936,937,940,944,951,get_cooki:916,929,get_cr:46,get_tgt_via_passwd:944,get_valu:932,getaddrinfo:38,getdat:3,5,6,19,23,gethostnam:38,43,getnameinfo:38,getopt:901,getpol:3,23,getprinc:3,6,14,23,26,35,916,getpwuid:3,23,getrandom:916,getstr:3,getusershel:944,gic_opt:920,give:6,14,23,28,38,902,908,909,917,930,936,937,given:2,3,5,6,8,10,14,20,21,23,28,36,38,39,41,43,46,48,49,59,60,124,135,317,329,389,864,904,908,913,916,917,941,gladman:917,glob:3,6,15,23,global:5,19,20,21,22,23,141,155,916,glorifi:921,glossolalia:14,glue:901,gmbh:917,gmt:896,gnu:902,904,916,917,goal:46,going:20,24,937,good:12,15,23,34,917,936,937,951,googl:917,gotten:937,gov:21,917,govern:23,917,942,gpg:903,gpl:917,grace:940,gracefulli:922,grain:43,grammar:908,912,grant:3,14,19,20,21,23,26,28,34,35,37,39,43,46,48,224,235,260,264,267,758,895,908,916,917,926,930,935,937,940,944,950,gratitud:917,great:19,153,267,750,greater:53,greg:951,groff:0,group:20,21,40,909,917,grow:899,gs2:916,gss:28,901,908,915,916,922,951,gss_:922,gss_accept_sec_context:43,916,922,gss_acquire_cr:43,916,gss_acquire_cred_from:43,916,gss_acquire_cred_impersonate_nam:43,gss_acquire_cred_with_password:916,gss_add_cr:922,gss_add_cred_from:922,gss_add_cred_impersonate_nam:922,gss_add_cred_with_password:922,gss_add_oid_set_memb:922,gss_buffer_desc:43,gss_buffer_set_t:43,gss_buffer_t:43,922,gss_c_accept:43,gss_c_both:43,gss_c_buffer_flag_alloc:43,gss_c_buffer_type_data:43,gss_c_buffer_type_head:43,gss_c_buffer_type_mic_token:43,gss_c_buffer_type_pad:43,gss_c_buffer_type_sign_onli:43,gss_c_buffer_type_stream:43,gss_c_buffer_type_trail:43,gss_c_channel_bound_flag:916,gss_c_dce_styl:43,gss_c_deleg_policy_flag:916,gss_c_inq_negoex_kei:922,gss_c_inq_negoex_verify_kei:922,gss_c_ma_negoex_and_spnego:922,gss_c_no_credenti:43,gss_c_no_nam:43,gss_c_nt_anonym:43,gss_c_nt_export_nam:43,922,gss_c_nt_hostbased_servic:43,gss_c_nt_machine_uid_nam:43,gss_c_nt_string_uid_nam:43,gss_c_nt_user_nam:43,gss_c_null_oid:43,gss_c_qop_default:43,gss_c_sec_context_sasl_ssf:916,gss_const_key_value_set_t:43,gss_create_empty_oid_set:922,gss_cred_id_t:43,922,gss_cred_usage_t:43,gss_ctx_id_t:43,922,gss_display_statu:922,gss_error:43,gss_export_cr:43,gss_export_nam:43,gss_get_mic_iov:43,gss_get_mic_iov_length:43,gss_get_name_attribut:43,gss_import_cr:43,922,gss_import_nam:43,922,gss_import_sec_context:922,gss_init_sec_context:43,gss_inquire_attrs_for_mech:922,gss_inquire_cr:43,gss_inquire_cred_by_oid:43,916,gss_inquire_nam:43,gss_inquire_sec_context_by_oid:916,922,gss_iov:916,gss_iov_buffer_desc:43,gss_iov_buffer_desc_struct:43,gss_iov_buffer_flag_alloc:43,gss_iov_buffer_t:43,gss_iov_buffer_type_data:43,gss_iov_buffer_type_head:43,gss_iov_buffer_type_mic_token:43,gss_iov_buffer_type_pad:43,gss_iov_buffer_type_sign_onli:43,gss_iov_buffer_type_stream:43,gss_iov_buffer_type_trail:43,gss_key_value_element_desc:43,gss_key_value_element_struct:43,gss_key_value_set_desc:43,gss_key_value_set_struct:43,gss_krb5_cred_no_ci_flags_x:916,gss_krb5_get_cred_imperson:43,916,gss_krb5_nt_enterprise_nam:43,916,gss_krb5_nt_principal_nam:43,gss_krb5_nt_x509_cert:43,916,gss_mech_config:28,915,951,gss_mech_interpos:922,gss_name_t:43,922,gss_oid:43,922,gss_oid_set:43,922,gss_qop_t:43,gss_release_iov_buff:43,gss_s_cred_unavail:43,gss_s_duplicate_el:43,gss_s_unavail:43,gss_store_cr:916,gss_store_cred_into:43,gss_unwrap_aead:43,gss_unwrap_iov:43,gss_verify_mic_iov:43,gss_wrap_aead:43,gss_wrap_iov:43,gss_wrap_iov_length:43,gss_wrapex:916,gssapi:15,16,20,21,45,894,895,898,899,901,916,917,918,924,943,951,gssapi_err_gener:917,gssapi_ext:43,922,gssapi_krb5:43,gssapiauthent:28,gssapip_spnego:917,gssapistrictacceptorcheck:38,gssapiv2:43,gssd_pname_to_uid:917,gssi_:922,gssi_import_cred_by_mech:922,gssi_import_name_by_mech:922,gssi_import_sec_context_by_mech:922,gssrpc:917,gssspi_exchange_meta_data:922,gssspi_query_mechanism_info:922,gssspi_query_meta_data:922,guarante:14,guard:899,guess:21,34,916,guest:3,21,23,guid:15,30,32,924,h5l:21,44,had:6,23,28,34,37,936,937,950,haddl:85,hand:14,23,34,handi:34,handl:3,6,14,19,23,36,43,48,71,132,135,137,139,141,142,143,144,145,146,147,149,150,151,152,153,154,155,157,158,159,161,164,223,224,235,246,250,251,265,276,300,302,303,305,308,310,311,312,313,314,316,318,335,336,342,343,359,403,414,917,920,922,925,929,handle_error:43,handle_out_of_space_error:43,happen:3,17,20,23,34,39,41,937,happi:917,hard:20,23,hardcod:895,898,932,harder:916,hardwar:3,20,23,34,46,919,929,937,941,harm:899,harvard:917,harwood:951,has:0,3,5,6,12,14,15,17,19,20,21,23,24,25,26,27,28,34,35,37,38,39,43,46,78,124,260,263,279,356,360,388,404,737,895,899,902,903,904,908,912,913,916,917,922,926,927,928,931,936,937,941,944,949,hash:6,21,23,37,899,909,913,916,hat:691,917,951,have:0,2,3,6,8,12,14,15,17,19,20,21,23,24,25,26,28,32,33,34,35,37,38,39,43,46,101,153,230,274,402,895,899,902,903,906,908,909,912,913,916,917,918,920,921,922,925,926,927,929,931,933,936,937,940,944,948,950,951,have_getusershel:944,haven:904,951,hdata:230,head:21,header:6,21,43,48,535,538,807,904,918,919,920,921,923,925,926,927,928,929,930,931,932,933,headernam:904,heim_org:21,heimdal:42,43,45,895,916,held:917,941,hellman:20,21,940,help:21,37,899,904,916,932,934,937,943,951,helpdesk:14,henc:12,her:39,937,950,here:0,15,19,20,21,23,28,35,41,43,46,896,904,921,936,937,hereaft:917,herebi:917,hesiod:21,904,917,heurist:21,154,230,918,944,949,hexadecim:6,916,hhmmss:896,hhost:916,hidden:46,352,868,hide:3,23,940,hierarch:4,21,916,hierarchi:23,high:14,16,24,higher:43,895,906,916,highest:3,6,14,15,21,310,315,414,highli:903,916,himself:937,hin:903,hint:3,20,23,149,his:19,23,937,944,950,hist_kvno:6,histor:28,33,894,histori:6,26,904,916,hit:48,944,hmac:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,hold:3,43,78,170,187,192,193,397,398,895,holder:917,hole:32,34,39,912,home:5,21,23,28,936,944,948,949,950,honor:41,937,hook:48,863,864,916,924,hope:917,hopefulli:35,host01:951,host:3,4,7,8,12,14,15,16,20,21,23,24,25,26,29,30,31,33,36,37,38,39,43,46,48,194,223,230,329,331,388,389,414,643,645,899,902,904,916,924,929,936,937,940,941,944,948,949,950,951,host_based_servic:20,39,host_realm:923,hostaccount:28,hostnam:3,12,15,20,21,23,26,33,34,37,38,41,43,48,329,388,389,904,916,923,946,949,951,hostrealm:28,916,924,hostrealm_plugin:923,hotp:3,hour:5,19,20,23,33,896,936,937,944,951,houston:39,how:14,20,21,23,26,28,32,34,37,39,43,224,416,903,904,914,918,924,931,932,936,940,howev:3,6,14,17,20,21,23,25,32,33,35,37,39,902,917,937,951,html:0,22,42,903,906,916,html_subst:906,htmlsrc:906,http:21,22,25,30,38,39,42,902,903,906,916,917,934,http_anchor:21,29,hudson:951,human:169,896,916,hundr:24,hwauth:20,hxx:917,iakerb:916,icr:43,idea:38,ideal:15,23,34,46,902,ident:3,15,20,22,23,43,48,361,738,878,879,895,916,920,936,937,940,942,identif:916,917,identifi:4,10,21,28,43,166,265,315,317,731,824,830,845,916,917,922,946,idp:691,iec:903,ietf:916,ignor:3,15,19,20,21,26,28,43,48,235,260,264,267,269,278,282,342,345,350,359,388,534,706,709,863,899,902,904,908,916,921,949,951,ignore_acceptor_hostnam:21,38,43,illinoi:42,illumin:951,imap:38,904,949,immedi:6,14,21,23,39,916,929,impact:35,impend:46,imperson:916,impl:904,implement:0,14,20,21,23,24,28,29,36,38,40,43,44,46,51,113,119,151,294,382,383,895,902,904,908,910,912,916,917,918,919,920,921,922,923,925,926,927,929,930,931,932,933,934,937,944,951,impli:8,917,implicit:20,impos:926,imposs:23,35,improv:0,14,20,21,35,916,934,in_authdat:173,in_cr:224,225,226,321,330,375,in_data:329,330,375,in_length:131,413,in_tkt_servic:235,260,264,267,inaccess:39,inaccur:21,inaddr:172,inadequ:41,inauthdat1:322,inauthdat2:322,inbuf:356,357,358,359,360,inc:917,937,951,incc:134,incident:917,includ:6,9,15,16,19,20,21,24,26,32,33,34,37,38,39,43,48,99,104,144,287,311,325,326,330,331,343,344,359,407,684,811,824,831,844,858,894,895,899,901,904,905,906,908,909,912,916,917,920,921,922,926,928,929,932,936,940,944,951,include_pac:858,includedir:21,904,inclus:917,incom:20,38,922,incompat:902,904,925,incomplet:21,inconsist:24,incorpor:0,20,24,916,incorrect:35,39,733,734,936,937,incorrectli:937,incr:177,increas:20,24,40,100,103,288,290,924,increment:4,8,9,14,19,20,24,31,35,39,48,87,89,325,326,331,913,916,917,indata:178,inde:937,independ:21,26,138,163,245,307,904,index:6,22,29,42,369,903,913,indic:3,6,14,19,20,21,23,26,28,30,36,37,39,41,43,46,154,245,327,726,727,728,729,733,734,735,736,835,895,896,898,899,908,909,910,912,913,916,917,919,920,921,929,937,940,951,indirect:917,individu:9,20,917,937,951,inetd:8,12,34,41,infd:62,infer:91,93,344,influenc:38,info2:916,info:20,34,229,652,654,662,671,824,830,886,916,inform:3,4,6,7,9,11,20,22,26,28,33,34,38,39,41,43,46,48,169,185,229,250,251,282,325,327,333,342,364,386,387,416,651,653,655,656,657,738,822,823,861,868,873,887,895,903,904,907,908,909,912,916,920,921,924,925,929,932,934,940,951,infrastructur:21,40,901,902,916,infrequ:916,inherit:936,944,ini:21,init:4,10,918,919,920,923,926,927,928,929,930,931,init_cr:46,initi:3,5,12,14,15,21,22,23,25,26,34,35,38,40,45,48,99,102,115,124,229,269,287,289,336,401,506,875,882,895,898,904,908,916,917,920,921,936,937,940,941,943,944,946,951,initialcredenti:48,initiator_cred_handl:43,inittab:34,initvt:921,inject:25,inop:14,inout:98,99,100,102,103,114,287,288,289,290,295,329,330,359,361,363,364,375,407,inprinc:182,inptr:186,190,input:23,43,48,49,99,100,102,103,107,113,117,119,124,144,194,195,224,287,288,289,290,294,296,352,375,376,403,918,930,933,946,input_assoc_buff:43,input_ccach:940,input_cred_handl:43,input_message_buff:43,input_name_buff:922,input_name_typ:922,input_payload_buff:43,inputlen:104,inquir:3,15,19,23,inquiri:19,ins:32,insecur:14,32,39,43,230,insensit:39,350,704,896,insert:25,823,830,insid:15,26,195,909,916,insist:944,inspect:16,380,381,863,864,919,926,928,inspir:916,inst:50,instal:12,14,15,17,21,28,30,32,39,900,903,906,925,939,943,instanc:19,21,23,28,33,35,43,49,50,643,644,899,908,916,921,951,instead:3,4,6,8,14,20,21,23,24,34,37,38,46,239,246,278,309,340,341,342,344,417,419,864,904,916,917,922,929,939,941,944,950,institut:907,917,951,instruct:22,23,34,37,43,904,934,insuffici:223,231,302,323,325,904,int16_t:841,int32_t:842,int_max:785,integ:3,15,20,21,23,36,37,894,908,909,912,922,integr:26,33,43,46,326,331,356,360,901,903,915,916,917,937,intel:917,intend:3,10,23,41,43,46,352,944,interact:2,3,21,23,39,368,904,intercept:28,922,interest:21,35,899,905,interfac:3,11,14,19,20,23,28,34,46,895,899,901,904,916,921,924,interface_modname_initvt:921,interface_module_initvt:921,interface_plugin:921,interfer:902,intermedi:20,21,23,43,224,908,909,916,937,intern:24,36,41,107,729,845,918,919,920,924,926,927,928,929,931,933,951,internet:38,interoper:37,382,383,895,922,interpos:28,924,interpret:3,36,43,46,152,245,922,940,944,946,interprocess_token:922,interrupt:14,260,917,intersect:26,interv:3,8,23,34,35,894,896,interven:23,intervent:14,26,introduc:3,20,21,919,923,927,928,930,intrud:937,invalid:14,21,23,50,136,139,156,260,301,315,336,937,940,941,invers:912,investig:904,invis:25,invoc:6,41,43,invok:4,8,9,11,12,21,23,24,46,80,136,245,386,922,929,930,931,940,942,944,involv:21,929,iov:48,100,103,288,290,825,916,iov_count:43,iprop:4,8,20,916,917,iprop_en:4,8,20,23,iprop_hdr:917,iprop_listen:20,iprop_logfil:20,23,iprop_master_ulogs:20,23,iprop_port:20,23,iprop_replica_pol:8,20,23,iprop_resync_timeout:20,23,iprop_slave_pol:20,iprop_ulogs:20,ipropd_svc:917,ipv4:38,ipv6:21,38,916,iran:917,is_last_req:245,836,is_skei:153,747,824,908,isi:944,isn:20,23,333,899,902,917,iso:903,isol:39,issu:2,3,14,20,21,23,26,29,32,35,36,37,39,43,46,320,412,882,904,916,920,929,937,940,issuanc:3,23,issue_pac:916,issuer:21,37,320,412,issueraltnam:37,item:253,729,921,929,iter:3,20,23,24,48,164,359,815,918,932,iterator_cr:932,iterator_fre:932,its:3,4,8,10,14,15,17,20,21,23,24,26,28,29,32,33,34,35,37,38,39,40,41,43,46,48,87,89,92,107,117,203,209,228,269,296,301,356,359,360,381,412,896,907,908,916,917,918,919,920,921,922,929,933,939,940,941,949,itself:3,4,8,10,14,15,20,21,23,28,43,46,198,199,200,201,202,203,206,207,208,209,212,215,216,221,334,734,824,895,898,900,922,929,937,ivec:186,190,jan:23,januari:23,894,896,jellinghau:917,jennif:3,23,936,937,951,jeremi:917,jimi:12,job:8,17,34,39,joeadmin:19,23,32,950,joeuser:951,johndo:21,jqpublic:944,json:3,36,46,368,371,736,738,908,jul:896,juli:896,just:6,14,15,20,21,23,33,34,43,326,641,895,902,905,920,937,944,950,k5_gic_opt:235,260,k5_random_kei:115,124,k5_vic_opt:415,416,k5ident:21,28,935,948,k5login:21,28,935,936,944,948,k5login_authorit:21,28,950,k5login_directori:21,28,k5srvutil:1,14,26,898,k5user:944,k5wiki:902,916,934,kadm5:3,4,6,18,20,21,23,24,34,901,915,916,917,924,926,kadm5_auth:19,916,924,kadm5_auth_modinfo:926,kadm5_auth_plugin:926,kadm5_auth_restrict:926,kadm5_hook:916,924,kadm5_hook_modinfo:927,kadm5_hook_plugin:927,kadm5_pass_q_:933,kadm:943,kadmin:1,2,4,5,6,8,10,11,12,14,15,16,19,20,21,22,24,25,26,32,34,35,37,39,40,166,245,300,301,382,895,896,898,901,916,917,924,927,942,943,951,kadmind:1,3,5,9,19,20,21,22,23,24,26,28,34,39,900,916,924,942,951,kadmind_listen:20,kadmind_port:4,20,34,kaduk:14,kbd5_util:23,kbuild:901,kcm:21,321,405,895,916,917,951,kcm_mach_servic:21,kcm_socket:21,kdb5_err:917,kdb5_ldap_util:1,3,4,10,20,22,23,24,kdb5_util:1,4,7,8,10,11,14,20,22,23,24,26,34,896,901,915,916,951,kdb5_util_path:4,kdb5_util_prog:8,kdb:4,22,23,24,35,901,916,917,924,928,940,943,kdb_convert:917,kdb_log:917,kdc1:39,kdc2:39,kdc:3,4,5,6,8,9,10,11,15,16,17,18,19,21,22,23,24,25,26,29,31,32,33,36,40,43,46,48,101,107,119,166,224,230,235,241,245,247,258,260,269,300,301,333,342,343,414,544,546,563,658,736,830,843,844,863,864,882,895,898,900,901,904,905,908,910,911,916,919,920,923,924,925,931,933,937,940,946,951,kdc_cert:37,kdc_default_opt:21,kdc_err_more_preauth_data_requir:916,kdc_listen:20,34,kdc_max_dgram_reply_s:20,kdc_opt_allow_postd:787,kdc_opt_canonic:787,kdc_opt_cname_in_addl_tkt:787,kdc_opt_disable_transited_check:787,kdc_opt_enc_tkt_in_skei:787,kdc_opt_forward:787,kdc_opt_postd:787,kdc_opt_proxi:787,kdc_opt_renew:787,kdc_opt_renewable_ok:21,787,kdc_opt_request_anonym:787,kdc_opt_valid:787,kdc_option:844,kdc_port:20,kdc_princ_nam:37,kdc_princip:37,kdc_principal_seq:37,kdc_tcp_listen:20,34,37,kdc_tcp_listen_backlog:20,kdc_tcp_port:20,kdc_timesync:21,kdc_tkt_common_mask:787,kdcdefault:10,34,37,40,kdcissu:48,kdckei:37,kdclist:34,kdcpolici:916,924,kdcpolicy_plugin:928,kdcpreauth:916,924,kdcpreauth_mymech_initvt:921,kdcpreauth_plugin:929,kdcproxi:29,kdestroi:33,895,916,935,938,940,941,945,946,951,keep:3,9,15,23,35,899,902,903,936,keepkvno:3,keepold:3,14,23,916,kei:2,3,5,6,9,10,11,12,15,16,19,20,21,25,28,32,34,36,37,38,40,41,43,46,48,73,77,87,89,100,103,105,106,108,113,114,117,119,129,130,141,153,155,181,216,224,229,234,258,276,277,280,292,293,300,301,307,308,313,320,325,330,342,343,351,354,359,363,364,412,414,439,440,670,738,748,754,811,823,824,830,831,832,845,846,848,898,899,900,901,904,905,908,909,910,915,916,920,922,929,937,940,941,946,951,kept:3,17,20,23,32,kerb_ap_options_cbt:916,kerber:14,33,34,944,kerbero:2,3,4,5,6,7,8,9,10,11,12,14,18,19,20,21,24,25,26,27,28,30,31,32,33,36,37,38,42,43,45,46,47,48,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,161,162,163,164,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,895,896,899,900,901,902,904,905,907,908,924,927,930,932,934,935,936,939,940,941,942,943,944,945,946,947,948,949,950,kerberos_db:8,kerboro:18,kern:20,kernel:895,901,916,key_data:286,293,key_exp:830,key_stash_fil:6,20,23,34,keyagr:37,keyblock:48,70,75,90,101,107,115,117,215,216,224,280,281,331,353,359,393,824,908,keyboard:4,6,10,23,48,keybyt:112,keydata:6,keyencipher:21,37,keyexchang:107,keyfil:6,20,22,23,keyfilenam:21,keyid:37,keyindex:6,keyinfo:6,26,keylength:112,keylist:11,15,keyprocarg:315,keyr:895,904,916,951,keysalt:2,3,15,23,915,keyspac:14,keytab:2,3,7,8,11,12,14,17,21,23,26,28,31,41,43,46,48,304,310,311,312,314,317,318,359,363,364,416,895,897,899,900,904,905,908,911,915,916,940,941,943,944,946,951,keytab_fil:8,940,keytab_nam:941,keytab_out:303,keytabl:848,keytabnam:904,keytyp:10,keyusag:37,keyutil:904,keyword:21,896,kfw:916,kgetcr:916,kile:683,kill:34,kind:38,43,105,895,917,920,922,929,kinit:3,12,15,16,21,22,23,28,29,33,34,35,37,41,46,895,896,916,920,935,938,939,941,944,945,946,947,951,kiprop:4,8,23,kkdcp:29,39,916,917,klau:917,kldap:20,22,klein:917,klist:14,15,33,895,898,935,938,939,940,944,945,951,klmdb:20,know:21,33,35,37,899,904,922,937,knowledg:0,14,17,414,920,929,known:6,20,23,26,38,43,46,48,152,231,317,647,648,905,916,949,korea:917,kpasswd:3,4,14,15,20,21,23,29,33,916,935,936,938,951,kpasswd_listen:20,kpasswd_port:20,kpasswd_serv:21,29,39,kpclientauth:20,kpkdc:21,kprop:1,4,6,8,15,23,24,34,35,901,915,916,917,951,kprop_path:4,kprop_port:4,915,951,kpropd:1,4,7,9,23,34,41,901,915,916,kpropd_rpc:917,kproplog:1,8,917,kpserverauth:21,37,krb4:916,krb524:21,krb524_convert_creds_kdc:787,krb524_init_et:787,krb524_krb4_disabl:51,krb5:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,281,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,788,789,790,791,792,793,794,795,796,797,798,799,800,801,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,944,945,946,947,948,949,950,951,krb5_425_conv_princip:48,krb5_524_conv_princip:48,krb5_524_convert_cr:48,788,krb5_address:52,53,54,64,82,84,172,198,232,233,234,240,332,802,822,823,824,830,831,838,844,krb5_address_compar:48,krb5_address_ord:48,krb5_address_search:48,krb5_addrtyp:802,803,krb5_allow_weak_crypto:48,krb5_altauth_att_challenge_respons:787,krb5_aname_to_localnam:48,916,930,krb5_anonymous_princip:48,krb5_anonymous_princstr:57,787,krb5_anonymous_realm:48,krb5_anonymous_realmstr:58,787,krb5_ap_rep:787,802,krb5_ap_rep_enc_part:48,357,375,802,krb5_ap_req:787,802,krb5_appdefault_boolean:48,60,krb5_appdefault_str:48,59,krb5_as_rep:787,843,krb5_as_req:787,844,krb5_auth_con_fre:48,78,krb5_auth_con_genaddr:48,82,84,krb5_auth_con_get_checksum_func:48,krb5_auth_con_getaddr:44,48,krb5_auth_con_getauthent:48,krb5_auth_con_getflag:48,krb5_auth_con_getkei:48,krb5_auth_con_getkey_k:48,krb5_auth_con_getlocalseqnumb:48,krb5_auth_con_getlocalsubkei:48,krb5_auth_con_getrcach:48,krb5_auth_con_getrecvsubkei:48,75,krb5_auth_con_getrecvsubkey_k:48,krb5_auth_con_getremoteseqnumb:48,krb5_auth_con_getremotesubkei:48,krb5_auth_con_getsendsubkei:48,70,krb5_auth_con_getsendsubkey_k:48,krb5_auth_con_init:48,61,krb5_auth_con_initivector:48,krb5_auth_con_set_checksum_func:48,krb5_auth_con_set_req_cksumtyp:48,krb5_auth_con_setaddr:44,48,krb5_auth_con_setflag:48,78,krb5_auth_con_setport:44,48,krb5_auth_con_setrcach:48,krb5_auth_con_setrecvsubkei:44,48,krb5_auth_con_setrecvsubkey_k:48,krb5_auth_con_setsendsubkei:44,48,krb5_auth_con_setsendsubkey_k:48,krb5_auth_con_setuseruserkei:48,359,krb5_auth_context:48,62,63,64,65,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,84,85,86,87,88,89,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375,802,854,krb5_auth_context_do_sequ:66,69,74,83,325,326,327,331,356,360,787,krb5_auth_context_do_tim:66,78,83,325,326,331,356,360,787,krb5_auth_context_generate_local_addr:62,787,krb5_auth_context_generate_local_full_addr:62,787,krb5_auth_context_generate_remote_addr:62,787,krb5_auth_context_generate_remote_full_addr:62,787,krb5_auth_context_permit_al:787,krb5_auth_context_ret_sequ:66,83,325,326,327,331,354,356,360,787,krb5_auth_context_ret_tim:66,83,325,326,331,354,356,360,787,krb5_auth_context_use_subkei:787,krb5_authdata:173,184,189,195,200,320,322,412,802,811,824,831,844,krb5_authdata_and_or:787,krb5_authdata_ap_opt:787,krb5_authdata_auth_ind:787,krb5_authdata_cammac:787,krb5_authdata_etype_negoti:787,krb5_authdata_fx_armor:787,krb5_authdata_if_relev:787,krb5_authdata_initial_verified_ca:787,krb5_authdata_kdc_issu:787,krb5_authdata_mandatory_for_kdc:787,krb5_authdata_osf_dc:787,krb5_authdata_sesam:787,krb5_authdata_signticket:787,krb5_authdata_win2k_pac:787,krb5_authdatatyp:184,189,195,802,809,krb5_authent:48,65,802,884,krb5_bad_enctyp:116,286,krb5_boolean:52,54,55,105,109,110,127,128,129,130,160,192,253,283,284,285,298,299,300,319,341,343,348,349,350,362,388,802,824,836,858,krb5_build_princip:46,47,48,92,krb5_build_principal_alloc_va:47,48,91,94,krb5_build_principal_ext:47,48,krb5_build_principal_va:48,krb5_c_:186,188,190,191,196,197,281,351,353,411,krb5_c_block_siz:48,krb5_c_checksum_length:48,168,krb5_c_crypto_length:48,krb5_c_crypto_length_iov:48,krb5_c_decrypt:48,287,krb5_c_decrypt_iov:48,103,288,krb5_c_derive_prfplu:48,916,krb5_c_encrypt:48,krb5_c_encrypt_iov:48,290,krb5_c_encrypt_length:48,102,289,krb5_c_enctype_compar:48,krb5_c_free_stat:48,krb5_c_fx_cf2_simpl:48,krb5_c_init_st:48,krb5_c_is_coll_proof_cksum:48,krb5_c_is_keyed_cksum:48,krb5_c_keyed_checksum_typ:48,krb5_c_keylength:48,124,krb5_c_make_checksum:48,131,294,krb5_c_make_checksum_iov:48,130,295,krb5_c_make_random_kei:48,krb5_c_padding_length:48,krb5_c_prf:48,119,296,krb5_c_prf_length:48,117,krb5_c_prfplu:48,916,krb5_c_random_add_entropi:48,krb5_c_random_make_octet:48,krb5_c_random_os_entropi:48,krb5_c_random_se:48,krb5_c_random_to_kei:48,krb5_c_string_to_kei:48,126,393,krb5_c_string_to_key_with_param:48,krb5_c_valid_cksumtyp:48,krb5_c_valid_enctyp:48,krb5_c_verify_checksum:48,113,294,298,413,krb5_c_verify_checksum_iov:48,114,299,krb5_calculate_checksum:48,krb5_cc_badnam:223,krb5_cc_cache_match:48,krb5_cc_close:48,132,154,164,krb5_cc_copy_cr:48,krb5_cc_cursor:139,150,158,802,krb5_cc_default:48,krb5_cc_default_nam:48,135,156,krb5_cc_destroi:48,krb5_cc_dup:48,krb5_cc_end_seq_get:48,158,krb5_cc_gen_new:48,krb5_cc_get_config:48,krb5_cc_get_flag:48,krb5_cc_get_full_nam:48,krb5_cc_get_nam:48,krb5_cc_get_princip:47,48,krb5_cc_get_typ:48,krb5_cc_initi:48,145,krb5_cc_move:48,krb5_cc_new_uniqu:48,krb5_cc_next_cr:48,139,158,krb5_cc_nosupp:151,krb5_cc_notfound:132,154,165,krb5_cc_remove_cr:48,916,krb5_cc_resolv:48,144,krb5_cc_retrieve_cr:48,151,krb5_cc_select:48,krb5_cc_set_config:44,48,283,krb5_cc_set_default_nam:48,136,krb5_cc_set_flag:48,krb5_cc_start_seq_get:48,139,150,krb5_cc_store_cr:48,krb5_cc_support_switch:48,krb5_cc_switch:48,krb5_ccach:132,133,134,135,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,157,158,159,161,164,223,224,225,226,232,233,234,246,250,251,264,267,329,375,383,403,414,802,krb5_ccache_conf_data:908,krb5_cccol:918,krb5_cccol_cursor:162,163,164,802,krb5_cccol_cursor_fre:48,163,164,krb5_cccol_cursor_new:48,162,164,krb5_cccol_cursor_next:48,162,163,krb5_cccol_have_cont:48,krb5_cccol_last_change_tim:44,krb5_ccselect_moddata:918,krb5_ccselect_vt:921,krb5_certauth_hwauth:919,krb5_certauth_hwauth_pass:919,krb5_change_password:48,169,krb5_check_clockskew:48,krb5_checksum:48,113,129,131,294,298,413,802,811,859,krb5_checksum_s:48,krb5_chpw_fail:260,krb5_chpw_messag:48,krb5_chpw_pwdnull:260,krb5_cksumtyp:81,96,109,110,111,113,114,127,130,131,168,170,204,294,295,299,390,413,802,816,krb5_cksumtype_to_str:48,krb5_clear_error_messag:48,krb5_client_ktnam:15,898,915,951,krb5_clpreauth_moddata:920,krb5_clpreauth_modreq:920,krb5_config:21,34,915,916,951,krb5_config_cantopen:50,krb5_config_notenufspac:56,306,krb5_const:787,krb5_const_point:131,186,190,413,802,krb5_const_princip:50,56,57,141,155,182,283,300,301,310,320,340,341,342,343,347,348,349,350,359,362,388,406,407,408,409,802,krb5_context:46,48,49,50,51,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,171,172,173,174,175,177,178,179,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,379,380,381,382,383,384,386,387,388,389,393,396,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,802,836,854,863,864,870,875,886,921,krb5_copy_address:48,krb5_copy_authdata:48,krb5_copy_authent:48,krb5_copy_checksum:48,krb5_copy_context:48,krb5_copy_cr:48,krb5_copy_data:48,863,864,krb5_copy_error_messag:48,krb5_copy_keyblock:48,krb5_copy_keyblock_cont:48,krb5_copy_princip:47,48,krb5_copy_ticket:48,krb5_cred:46,48,51,150,151,153,159,166,220,224,225,226,232,233,234,235,260,264,267,272,323,325,330,354,375,382,401,403,414,787,802,krb5_cred_enc_part:802,821,krb5_cred_info:802,822,krb5_crypto_iov:98,100,103,114,130,288,290,295,299,802,krb5_crypto_typ:97,825,krb5_crypto_type_checksum:114,130,295,299,787,krb5_crypto_type_data:114,130,295,299,787,krb5_crypto_type_empti:787,krb5_crypto_type_head:787,krb5_crypto_type_pad:787,krb5_crypto_type_sign_onli:98,114,130,295,299,787,krb5_crypto_type_stream:787,krb5_crypto_type_trail:787,krb5_cryptotyp:97,802,825,krb5_cybersafe_secureid:787,krb5_data:48,58,59,60,99,100,101,102,103,106,108,113,117,119,120,121,123,124,125,126,129,141,155,166,169,185,223,229,230,258,265,279,284,287,288,289,290,294,296,298,321,323,324,325,326,327,328,329,330,331,333,335,340,341,347,354,355,356,357,358,359,360,364,375,382,383,393,404,405,802,819,824,825,829,834,838,854,859,863,864,866,867,868,880,888,893,krb5_db_entri:919,krb5_decode_authdata_contain:48,189,krb5_decode_ticket:48,krb5_decrypt:48,krb5_deltat:187,235,256,259,260,275,391,802,838,krb5_deltat_badformat:391,krb5_deltat_to_str:48,krb5_domain_x500_compress:787,krb5_eblock_enctyp:48,krb5_enc_data:99,102,287,289,802,805,807,821,843,844,881,krb5_enc_kdc_rep_part:802,843,krb5_enc_tkt_part:300,301,802,881,krb5_encode_authdata_contain:48,184,krb5_encpadata_req_enc_pa_rep:787,krb5_encrypt:48,krb5_encrypt_block:186,188,190,196,197,281,351,353,393,411,802,krb5_encrypt_s:48,krb5_enctyp:95,97,98,101,104,105,111,112,115,116,118,124,125,126,128,188,191,192,193,211,229,232,233,234,244,261,280,292,310,315,378,392,411,802,829,832,838,844,846,krb5_enctype_to_nam:48,krb5_enctype_to_str:48,krb5_end_seq_get:150,krb5_error:212,273,324,355,375,787,802,krb5_error_cod:46,49,50,55,56,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,137,138,139,140,141,142,143,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,186,187,189,190,192,193,194,195,196,197,214,217,223,224,225,226,227,228,229,230,231,232,233,234,235,236,238,245,246,247,248,250,251,252,253,257,260,261,262,264,265,266,267,268,269,271,272,273,274,275,276,277,278,279,280,281,282,286,287,288,289,290,293,294,295,296,298,299,300,301,302,303,304,305,306,307,308,309,310,311,313,314,315,316,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,340,341,342,343,344,345,346,347,351,352,353,354,355,356,357,358,359,360,361,363,364,368,369,371,372,373,374,375,376,377,378,379,382,383,384,385,386,387,389,390,391,392,393,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,802,853,854,863,864,870,875,921,krb5_euid:899,krb5_expand_hostnam:48,krb5_expire_callback_func:245,802,krb5_fast_requir:248,787,krb5_fcc_intern:135,krb5_fences_vt:921,krb5_fences_vtable_v2:921,krb5_find_authdata:48,krb5_finish_kei:48,krb5_finish_random_kei:48,krb5_flag:142,151,153,157,224,225,226,232,233,234,238,248,269,329,330,359,375,403,802,807,823,824,830,831,838,844,877,884,892,krb5_free_address:48,172,332,krb5_free_ap_rep_enc_part:48,357,375,krb5_free_authdata:48,173,195,322,krb5_free_authent:48,65,174,krb5_free_checksum:48,175,krb5_free_checksum_cont:48,113,294,krb5_free_cksumtyp:48,111,krb5_free_context:48,136,176,268,282,krb5_free_cr:48,177,224,375,405,krb5_free_cred_cont:46,48,150,153,272,401,krb5_free_data:48,178,321,krb5_free_data_cont:48,141,229,324,325,326,327,328,329,330,331,335,356,360,krb5_free_default_realm:48,227,krb5_free_enctyp:48,261,krb5_free_error:48,355,375,krb5_free_error_messag:48,228,krb5_free_host_realm:48,230,231,krb5_free_keyblock:48,67,72,76,180,280,315,krb5_free_keyblock_cont:48,115,125,126,181,krb5_free_keytab_entry_cont:48,309,310,krb5_free_princip:46,47,48,49,91,92,93,145,154,182,344,345,389,krb5_free_str:48,143,169,194,krb5_free_tgt_cr:48,354,krb5_free_ticket:48,183,359,363,krb5_free_unparsed_nam:48,406,408,krb5_fwd_tgt_cred:48,krb5_gc:403,krb5_gc_cach:224,787,krb5_gc_canonic:787,krb5_gc_constrained_deleg:787,krb5_gc_forward:787,krb5_gc_no_stor:787,krb5_gc_no_transit_check:787,krb5_gc_user_us:224,787,krb5_generate_seq_numb:327,krb5_get_credenti:48,375,380,381,403,krb5_get_credentials_renew:48,krb5_get_credentials_valid:48,krb5_get_default_realm:48,krb5_get_error_messag:48,835,krb5_get_etype_info:48,916,krb5_get_fallback_host_realm:48,krb5_get_host_realm:48,389,krb5_get_in_tkt_with_keytab:48,krb5_get_in_tkt_with_password:48,krb5_get_in_tkt_with_skei:48,krb5_get_init_cr:234,250,251,krb5_get_init_creds_keytab:48,232,krb5_get_init_creds_opt:46,229,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,275,802,krb5_get_init_creds_opt_address_list:787,krb5_get_init_creds_opt_alloc:46,48,237,239,krb5_get_init_creds_opt_anonym:787,krb5_get_init_creds_opt_canonic:787,krb5_get_init_creds_opt_chg_pwd_prmpt:787,krb5_get_init_creds_opt_etype_list:787,krb5_get_init_creds_opt_forward:787,krb5_get_init_creds_opt_fre:46,48,236,krb5_get_init_creds_opt_get_fast_flag:48,krb5_get_init_creds_opt_init:48,krb5_get_init_creds_opt_preauth_list:787,krb5_get_init_creds_opt_proxi:787,krb5_get_init_creds_opt_renew_lif:787,krb5_get_init_creds_opt_salt:787,krb5_get_init_creds_opt_set_address_list:48,krb5_get_init_creds_opt_set_anonym:46,48,krb5_get_init_creds_opt_set_canonic:48,krb5_get_init_creds_opt_set_change_password_prompt:48,krb5_get_init_creds_opt_set_etype_list:48,229,krb5_get_init_creds_opt_set_expire_callback:48,krb5_get_init_creds_opt_set_fast_ccach:48,krb5_get_init_creds_opt_set_fast_ccache_nam:48,229,246,krb5_get_init_creds_opt_set_fast_flag:48,247,krb5_get_init_creds_opt_set_forward:48,krb5_get_init_creds_opt_set_in_ccach:48,krb5_get_init_creds_opt_set_out_ccach:48,krb5_get_init_creds_opt_set_pa:48,254,krb5_get_init_creds_opt_set_pac_request:48,krb5_get_init_creds_opt_set_preauth_list:48,krb5_get_init_creds_opt_set_proxi:48,krb5_get_init_creds_opt_set_renew_lif:48,krb5_get_init_creds_opt_set_respond:46,48,krb5_get_init_creds_opt_set_salt:48,254,krb5_get_init_creds_opt_set_tkt_lif:46,48,krb5_get_init_creds_opt_tkt_lif:787,krb5_get_init_creds_password:46,48,233,243,245,352,916,krb5_get_permitted_enctyp:48,krb5_get_profil:48,krb5_get_prompt_typ:46,48,krb5_get_renewed_cr:48,225,krb5_get_server_rcach:48,krb5_get_time_offset:48,krb5_get_validated_cr:48,226,krb5_gic_opt_pa_data:802,krb5_init_context:48,205,krb5_init_context_kdc:269,787,krb5_init_context_profil:48,krb5_init_context_secur:269,787,krb5_init_creds_context:270,271,272,273,274,275,276,277,278,279,802,krb5_init_creds_fre:48,275,krb5_init_creds_get:48,272,274,275,krb5_init_creds_get_cr:48,271,krb5_init_creds_get_error:48,krb5_init_creds_get_tim:48,krb5_init_creds_init:48,270,271,279,352,krb5_init_creds_set_keytab:48,krb5_init_creds_set_password:48,krb5_init_creds_set_servic:48,krb5_init_creds_step:48,272,274,275,916,krb5_init_creds_step_flag_continu:279,787,krb5_init_keyblock:48,krb5_init_random_kei:48,krb5_init_secure_context:48,205,268,916,krb5_int16:802,krb5_int16_max:567,787,krb5_int16_min:787,krb5_int32:66,69,74,83,266,363,364,374,385,389,394,410,802,804,806,810,811,817,819,822,826,828,830,833,834,835,837,844,849,852,865,866,867,869,873,877,879,880,883,889,krb5_int32_max:569,787,krb5_int32_min:787,krb5_invalid_princip:50,krb5_is_config_princip:47,48,krb5_is_referral_realm:48,krb5_is_thread_saf:48,krb5_k:845,krb5_k_create_kei:48,krb5_k_decrypt:48,krb5_k_decrypt_iov:48,290,krb5_k_encrypt:48,krb5_k_encrypt_iov:48,288,krb5_k_free_kei:48,68,73,77,286,krb5_k_key_enctyp:48,krb5_k_key_keyblock:48,krb5_k_make_checksum:48,113,krb5_k_make_checksum_iov:48,114,299,krb5_k_prf:48,krb5_k_reference_kei:48,krb5_k_verify_checksum:48,129,krb5_k_verify_checksum_iov:48,130,295,krb5_kdc_profil:10,20,34,915,916,951,krb5_kdc_rep:232,233,234,802,krb5_kdc_req:802,krb5_kdc_sign_ticket:48,340,341,krb5_kdc_unreach:260,krb5_kdc_verify_ticket:48,krb5_kdcpolicy_moddata:928,krb5_kdcpreauth_moddata:929,krb5_kdcpreauth_modreq:929,krb5_kdcrep_modifi:267,krb5_kdcrep_skew:267,krb5_kei:48,68,73,77,87,89,287,288,289,290,291,294,295,296,297,298,299,802,krb5_key_st:845,krb5_keyblock:48,67,70,72,75,76,86,88,90,99,100,101,102,103,106,107,108,113,114,115,117,119,124,125,126,129,130,180,181,234,281,286,293,300,301,315,320,340,341,342,343,351,353,393,412,802,806,811,823,824,830,831,832,848,krb5_keytab:232,235,276,302,303,304,305,307,308,310,311,312,313,314,316,317,318,359,363,364,376,414,802,krb5_keytab_entri:217,302,309,310,314,316,802,krb5_keytab_entry_st:848,krb5_keyusag:99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,802,krb5_keyusage_ad_it:787,krb5_keyusage_ad_kdcissued_cksum:787,krb5_keyusage_ad_mt:787,krb5_keyusage_ad_signedpath:787,krb5_keyusage_ap_rep_encpart:787,krb5_keyusage_ap_req_auth:787,krb5_keyusage_ap_req_auth_cksum:787,krb5_keyusage_app_data_cksum:787,krb5_keyusage_app_data_encrypt:787,krb5_keyusage_as_rep_encpart:787,krb5_keyusage_as_req:787,krb5_keyusage_as_req_pa_enc_t:787,krb5_keyusage_cammac:787,krb5_keyusage_enc_challenge_cli:787,krb5_keyusage_enc_challenge_kdc:787,krb5_keyusage_fast_enc:787,krb5_keyusage_fast_finish:787,krb5_keyusage_fast_rep:787,krb5_keyusage_fast_req_chksum:787,krb5_keyusage_gss_tok_m:787,krb5_keyusage_gss_tok_wrap_integ:787,krb5_keyusage_gss_tok_wrap_priv:787,krb5_keyusage_iakerb_finish:787,krb5_keyusage_kdc_rep_ticket:787,krb5_keyusage_krb_cred_encpart:787,krb5_keyusage_krb_error_cksum:787,krb5_keyusage_krb_priv_encpart:787,krb5_keyusage_krb_safe_cksum:787,krb5_keyusage_pa_as_fresh:787,krb5_keyusage_pa_fx_cooki:787,krb5_keyusage_pa_otp_request:787,krb5_keyusage_pa_pkinit_kx:787,krb5_keyusage_pa_s4u_x509_user_repli:606,787,krb5_keyusage_pa_s4u_x509_user_request:605,787,krb5_keyusage_pa_sam_challenge_cksum:787,krb5_keyusage_pa_sam_challenge_trackid:603,787,krb5_keyusage_pa_sam_respons:602,787,krb5_keyusage_spak:787,krb5_keyusage_tgs_rep_encpart_sesskei:787,krb5_keyusage_tgs_rep_encpart_subkei:787,krb5_keyusage_tgs_req_ad_sesskei:787,krb5_keyusage_tgs_req_ad_subkei:787,krb5_keyusage_tgs_req_auth:787,krb5_keyusage_tgs_req_auth_cksum:787,krb5_kpasswd_accessdeni:787,krb5_kpasswd_autherror:166,787,krb5_kpasswd_bad_vers:787,krb5_kpasswd_harderror:166,787,krb5_kpasswd_initial_flag_need:787,krb5_kpasswd_malform:166,787,krb5_kpasswd_softerror:166,787,krb5_kpasswd_success:166,382,787,krb5_kt_add_entri:48,krb5_kt_client_default:48,krb5_kt_close:48,317,krb5_kt_cursor:308,314,318,802,krb5_kt_default:48,krb5_kt_default_nam:48,krb5_kt_dup:48,krb5_kt_end:314,krb5_kt_end_seq_get:48,318,krb5_kt_free_entri:48,314,krb5_kt_get_entri:48,krb5_kt_get_nam:48,krb5_kt_get_typ:48,krb5_kt_have_cont:48,krb5_kt_name_toolong:311,krb5_kt_next_entri:48,krb5_kt_notfound:313,krb5_kt_nowrit:302,316,krb5_kt_read_service_kei:48,krb5_kt_remove_entri:48,krb5_kt_resolv:48,krb5_kt_start_seq_get:48,308,krb5_ktname:43,898,915,951,krb5_kuserok:47,48,916,930,krb5_kvno:310,315,802,829,848,krb5_last_req_entri:802,830,krb5_libos_badpwdmatch:260,361,krb5_libos_pwdintr:260,krb5_lname_no_tran:930,krb5_lname_notran:56,krb5_lrq_all_acct_exptim:787,krb5_lrq_all_last_initi:787,krb5_lrq_all_last_renew:787,krb5_lrq_all_last_req:787,krb5_lrq_all_last_tgt:787,krb5_lrq_all_last_tgt_issu:787,krb5_lrq_all_pw_exptim:787,krb5_lrq_none:787,krb5_lrq_one_acct_exptim:787,krb5_lrq_one_last_initi:787,krb5_lrq_one_last_renew:787,krb5_lrq_one_last_req:787,krb5_lrq_one_last_tgt:787,krb5_lrq_one_last_tgt_issu:787,krb5_lrq_one_pw_exptim:787,krb5_magic:802,803,805,806,807,809,811,816,819,821,822,823,824,827,829,830,831,832,834,843,844,846,848,852,857,866,867,871,880,881,884,888,889,893,krb5_make_authdata_kdc_issu:48,krb5_marshal_credenti:48,krb5_merge_authdata:48,krb5_mk_1cred:48,krb5_mk_error:48,krb5_mk_ncred:48,323,krb5_mk_priv:48,79,krb5_mk_rep:48,krb5_mk_rep_dc:48,krb5_mk_req:48,80,81,330,krb5_mk_req_checksum_func:63,80,802,krb5_mk_req_extend:48,329,krb5_mk_safe:48,326,krb5_msgtype:503,504,505,506,531,543,716,739,757,758,802,830,843,844,krb5_no_2nd_tkt:267,krb5_no_tkt_suppli:223,267,krb5_nt_ent_principal_and_id:787,krb5_nt_enterprise_princip:787,krb5_nt_ms_princip:787,krb5_nt_ms_principal_and_id:787,krb5_nt_princip:91,93,344,787,krb5_nt_smtp_name:787,krb5_nt_srv_hst:223,389,787,krb5_nt_srv_inst:91,93,344,787,krb5_nt_srv_xhst:787,krb5_nt_uid:787,krb5_nt_unknown:389,787,krb5_nt_wellknown:91,93,344,787,krb5_nt_x500_princip:787,krb5_octet:802,803,809,816,846,857,880,888,889,krb5_os_localaddr:48,krb5_pa_data:802,830,843,844,krb5_pa_pac_req:802,krb5_pa_server_referral_data:802,krb5_pa_svr_referral_data:802,krb5_pac:300,301,333,334,335,336,337,338,339,340,341,342,343,802,krb5_pac_add_buff:48,krb5_pac_attributes_info:787,krb5_pac_client_claim:787,krb5_pac_client_info:333,787,krb5_pac_credentials_info:333,787,krb5_pac_data:861,krb5_pac_delegation_info:333,787,krb5_pac_device_claim:787,krb5_pac_device_info:787,krb5_pac_fre:48,338,339,krb5_pac_get_buff:48,krb5_pac_get_client_info:48,916,krb5_pac_get_typ:48,krb5_pac_init:48,krb5_pac_logon_info:333,787,krb5_pac_pars:48,krb5_pac_privsvr_checksum:333,787,krb5_pac_requestor:787,krb5_pac_server_checksum:333,787,krb5_pac_sign:48,krb5_pac_sign_ext:48,krb5_pac_ticket_checksum:787,krb5_pac_upn_dns_info:333,787,krb5_pac_verifi:48,343,krb5_pac_verify_ext:48,301,krb5_padata_afs3_salt:787,krb5_padata_ap_req:702,787,krb5_padata_as_checksum:787,krb5_padata_as_fresh:787,krb5_padata_enc_sandia_securid:787,krb5_padata_enc_timestamp:787,krb5_padata_enc_unix_tim:787,krb5_padata_encrypted_challeng:787,krb5_padata_etype_info2:787,krb5_padata_etype_info:787,krb5_padata_for_us:787,krb5_padata_fx_cooki:787,krb5_padata_fx_error:787,krb5_padata_fx_fast:787,krb5_padata_get_from_typed_data:787,krb5_padata_non:787,krb5_padata_osf_dc:787,krb5_padata_otp_challeng:787,krb5_padata_otp_pin_chang:787,krb5_padata_otp_request:787,krb5_padata_pac_opt:787,krb5_padata_pac_request:787,krb5_padata_pk_as_rep:787,krb5_padata_pk_as_rep_old:787,krb5_padata_pk_as_req:787,krb5_padata_pk_as_req_old:787,krb5_padata_pkinit_kx:787,krb5_padata_pw_salt:787,krb5_padata_redhat_idp_oauth2:787,krb5_padata_referr:787,krb5_padata_s4u_x509_us:787,krb5_padata_sam_challeng:787,krb5_padata_sam_challenge_2:787,krb5_padata_sam_redirect:787,krb5_padata_sam_respons:787,krb5_padata_sam_response_2:787,krb5_padata_sesam:787,krb5_padata_spak:787,krb5_padata_svr_referral_info:787,krb5_padata_tgs_req:787,krb5_padata_use_specified_kvno:787,krb5_parse_nam:46,47,48,345,406,krb5_parse_name_flag:47,48,krb5_plugin_no_handl:923,926,930,931,krb5_plugin_ver_notsupp:921,krb5_plugin_vt:921,krb5_pointer:186,190,197,281,315,353,363,364,375,802,813,850,krb5_post_recv_fn:380,802,krb5_pre_send_fn:381,802,krb5_preauth_fail:260,krb5_preauthtyp:232,233,234,254,802,838,857,krb5_prepend_error_messag:48,417,916,krb5_princ_compon:787,krb5_princ_nam:787,krb5_princ_nomatch:223,267,krb5_princ_realm:787,krb5_princ_set_realm:787,krb5_princ_set_realm_data:787,krb5_princ_set_realm_length:787,krb5_princ_siz:787,791,krb5_princ_typ:787,krb5_princip:46,47,48,49,91,92,93,94,132,145,147,154,182,218,223,229,235,260,264,267,275,315,319,363,364,375,382,383,384,389,412,414,802,811,823,824,830,831,834,843,844,848,859,860,881,krb5_principal2salt:48,krb5_principal_compar:47,48,349,350,388,krb5_principal_compare_any_realm:47,48,krb5_principal_compare_casefold:350,787,krb5_principal_compare_enterpris:350,787,krb5_principal_compare_flag:47,48,krb5_principal_compare_ignore_realm:350,787,krb5_principal_compare_utf8:350,787,krb5_principal_data:47,802,819,866,krb5_principal_parse_enterpris:345,787,krb5_principal_parse_ignore_realm:345,787,krb5_principal_parse_no_def_realm:787,krb5_principal_parse_no_realm:345,787,krb5_principal_parse_require_realm:345,787,krb5_principal_unparse_displai:408,787,krb5_principal_unparse_no_realm:408,787,krb5_principal_unparse_short:408,787,krb5_priv:787,krb5_process_kei:48,krb5_prog_etype_nosupp:378,krb5_prompt:352,802,870,krb5_prompt_typ:263,802,krb5_prompt_type_new_password:263,787,krb5_prompt_type_new_password_again:263,787,krb5_prompt_type_password:263,787,krb5_prompt_type_preauth:263,787,krb5_prompter_fct:260,275,802,krb5_prompter_posix:46,48,krb5_prop:15,34,41,krb5_pvno:787,krb5_pwd_data:802,krb5_pwqual_moddata:933,krb5_random_kei:48,krb5_rc_close:265,krb5_rc_requir:323,325,krb5_rc_st:872,krb5_rcach:71,85,265,802,krb5_rd_cred:48,325,krb5_rd_error:48,krb5_rd_priv:48,79,873,krb5_rd_rep:48,krb5_rd_rep_dc:48,krb5_rd_req:48,krb5_rd_safe:48,873,krb5_read_error:48,krb5_read_password:48,krb5_realm_branch_char:787,krb5_realm_cant_resolv:260,krb5_realm_compar:47,48,krb5_recvauth:48,364,375,krb5_recvauth_badauthv:787,krb5_recvauth_skip_vers:787,krb5_recvauth_vers:48,krb5_referral_realm:48,787,krb5_replay_data:323,325,326,331,354,356,360,802,krb5_responder_context:46,365,366,367,368,369,370,371,372,373,802,875,krb5_responder_context_st:874,krb5_responder_fn:257,802,874,krb5_responder_get_challeng:46,48,366,874,krb5_responder_list_quest:46,48,874,krb5_responder_otp_challeng:46,367,368,802,krb5_responder_otp_challenge_fre:46,48,368,krb5_responder_otp_flags_collect_pin:729,787,krb5_responder_otp_flags_collect_token:787,krb5_responder_otp_flags_nextotp:787,krb5_responder_otp_flags_separate_pin:787,krb5_responder_otp_format_alphanumer:787,krb5_responder_otp_format_decim:787,krb5_responder_otp_format_hexadecim:787,krb5_responder_otp_get_challeng:46,48,krb5_responder_otp_set_answ:46,48,krb5_responder_otp_tokeninfo:802,876,krb5_responder_pkinit_challeng:46,370,371,802,krb5_responder_pkinit_challenge_fre:48,371,krb5_responder_pkinit_flags_token_:738,krb5_responder_pkinit_flags_token_user_pin_count_low:787,krb5_responder_pkinit_flags_token_user_pin_final_tri:787,krb5_responder_pkinit_flags_token_user_pin_lock:787,krb5_responder_pkinit_get_challeng:46,48,krb5_responder_pkinit_ident:802,878,krb5_responder_pkinit_set_answ:46,48,krb5_responder_question_otp:46,48,787,krb5_responder_question_password:46,787,krb5_responder_question_pkinit:46,48,787,krb5_responder_set_answ:46,48,366,874,krb5_respons:802,krb5_roundup:787,krb5_safe:787,krb5_salttype_to_str:48,krb5_sam_must_pk_encrypt_sad:787,krb5_sam_send_encrypted_sad:787,krb5_sam_use_sad_as_kei:787,krb5_sendauth:48,363,krb5_server_decrypt_ticket_keytab:48,krb5_set_default_realm:44,48,krb5_set_default_tgs_enctyp:48,261,krb5_set_error_messag:48,krb5_set_kdc_recv_hook:48,krb5_set_kdc_send_hook:48,krb5_set_password:47,48,169,krb5_set_password_using_ccach:47,48,krb5_set_principal_realm:47,48,krb5_set_real_tim:48,krb5_set_trace_callback:48,krb5_set_trace_filenam:48,krb5_sname_match:47,48,359,krb5_sname_to_princip:47,48,krb5_string_to_cksumtyp:48,krb5_string_to_deltat:48,krb5_string_to_enctyp:48,krb5_string_to_kei:48,krb5_string_to_salttyp:48,krb5_string_to_timestamp:48,krb5_tc_match_2nd_tkt:153,787,krb5_tc_match_authdata:153,787,krb5_tc_match_flag:153,787,krb5_tc_match_flags_exact:153,787,krb5_tc_match_is_skei:153,787,krb5_tc_match_ktyp:153,787,krb5_tc_match_srv_nameonli:153,787,krb5_tc_match_tim:153,787,krb5_tc_match_times_exact:153,787,krb5_tc_noticket:787,krb5_tc_openclos:787,krb5_tc_supported_ktyp:153,787,krb5_tgs_name:787,krb5_tgs_name_s:787,krb5_tgs_rep:787,krb5_tgs_req:787,844,krb5_ticket:48,185,221,359,363,364,376,802,807,821,843,844,884,krb5_ticket_tim:274,402,802,823,824,830,831,krb5_timeofdai:48,krb5_timestamp:45,167,266,336,340,341,342,343,385,395,396,397,398,410,802,806,811,822,830,834,836,844,848,852,859,873,880,882,krb5_timestamp_to_sfstr:48,krb5_timestamp_to_str:48,krb5_tkt_authent:802,krb5_tkt_creds_context:399,400,401,402,403,404,802,krb5_tkt_creds_fre:48,403,krb5_tkt_creds_get:48,401,402,403,krb5_tkt_creds_get_cr:48,400,krb5_tkt_creds_get_tim:48,krb5_tkt_creds_init:48,400,krb5_tkt_creds_step:48,401,402,403,krb5_tkt_creds_step_flag_continu:404,787,krb5_trace:41,386,387,951,krb5_trace_callback:386,802,887,krb5_trace_info:386,802,886,krb5_trace_nosupp:386,387,krb5_transit:802,831,krb5_typed_data:802,krb5_ui_2:802,krb5_ui_4:333,335,337,358,802,806,811,834,873,krb5_unmarshal_credenti:48,krb5_unparse_nam:47,48,407,408,krb5_unparse_name_ext:48,krb5_unparse_name_flag:47,48,krb5_unparse_name_flags_ext:48,krb5_us_timeofdai:48,krb5_use_enctyp:48,krb5_verify_authdata_kdc_issu:48,krb5_verify_checksum:48,krb5_verify_init_cr:46,48,416,krb5_verify_init_creds_opt:46,414,415,416,802,krb5_verify_init_creds_opt_ap_req_nofail:787,krb5_verify_init_creds_opt_init:46,48,414,krb5_verify_init_creds_opt_set_ap_req_nofail:46,48,414,krb5_vprepend_error_messag:48,krb5_vset_error_messag:48,krb5_vwrap_error_messag:48,krb5_wellknown_namestr:787,krb5_wrap_error_messag:48,419,916,krb5_x:787,krb5_xc:787,krb5cc_1984:944,krb5cc_320:937,krb5cc_:915,944,951,krb5cc_p11795:937,krb5cc_ttypa:937,krb5ccname:15,136,895,939,940,941,944,951,krb5kdc:0,1,2,3,4,5,6,7,8,9,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,krb5kdc_err_key_exp:260,krb5kdc_err_more_preauth_data_requir:929,krb5krb_ap_err_skew:167,krb5krb_err_response_too_big:279,404,krb5lib:34,krb5plugin_service_locate_ft:931,krb5rcachedir:899,915,951,krb5rcachenam:899,951,krb5rcachetyp:899,951,krb5srv:39,krb:48,916,917,krb_ap_rep:48,krb_ap_req:48,krb_error:48,375,krbadmin:20,22,krbcanonicalnam:22,krbcontain:20,22,krbcore:934,krbdev:934,krbprincipalnam:22,krbtest:16,23,35,41,909,910,949,krbtgt:3,19,26,37,41,43,278,301,644,755,908,909,910,916,937,946,ksu:917,935,938,951,ksu_opt:944,kswitch:895,935,938,951,ktadd:14,32,34,898,kth:917,ktid:317,ktrem:3,15,ktutil:1,2,898,901,916,ktype:128,232,233,234,261,844,kungliga:917,kv5m_context:135,156,kvno:3,6,11,14,15,16,23,26,29,32,34,41,310,414,829,881,909,916,935,938,lab:5,23,917,label:21,917,laboratori:917,lack:37,378,916,lag:944,larg:20,23,24,34,36,39,46,100,103,119,288,290,902,916,larger:24,32,37,894,912,916,largest:35,last:3,6,9,20,23,24,35,44,48,173,198,200,220,245,314,322,386,733,852,895,896,919,928,last_fail:6,last_req:830,last_success:6,lastpwd:6,latenc:24,later:3,19,20,21,23,26,33,37,38,39,41,43,136,247,738,894,909,912,916,917,923,930,latest:34,224,882,902,916,937,latter:388,895,launchpad:42,law:917,lawsuit:917,lawyer:917,layer:916,922,925,layout:43,915,lcom_err:943,lcurs:904,ldap:3,4,5,6,10,20,22,35,38,904,916,917,ldap_conns_per_serv:20,ldap_kadmind_dn:5,20,22,23,ldap_kadmind_sasl_authcid:5,20,23,ldap_kadmind_sasl_authzid:20,ldap_kadmind_sasl_mech:20,ldap_kadmind_sasl_realm:20,ldap_kdc_dn:5,20,22,23,ldap_kdc_sasl_authcid:5,20,23,ldap_kdc_sasl_authzid:20,ldap_kdc_sasl_mech:20,22,ldap_kdc_sasl_realm:20,ldap_kerberos_container_dn:20,22,ldap_serv:20,22,ldap_service_password_fil:20,22,ldapadd:22,ldapi:20,22,24,ldapsasl_nocanon:38,ldapuri:3,5,23,ldb:904,ldflag:904,ldif:22,ldname:904,ldopt:904,lead:20,944,learn:15,least:15,23,32,34,39,99,102,153,165,287,289,407,733,750,912,926,930,leav:3,14,23,24,28,32,33,left:20,21,280,910,921,leg:916,legaci:26,46,883,legal:280,944,legitim:25,46,899,944,lehman:917,lehmann:917,len:12,118,337,339,length:3,20,23,33,43,46,48,91,92,99,100,102,103,116,117,119,124,191,203,209,244,254,260,280,284,287,288,289,290,311,336,339,361,397,736,796,797,803,809,816,819,827,846,857,866,867,877,889,908,909,912,913,922,942,lengthi:916,less:3,15,20,25,53,895,902,912,913,916,let:99,287,931,950,letter:34,39,937,level:3,5,10,23,25,37,39,43,902,906,932,liabil:917,liabl:917,lib:37,902,904,915,917,943,libdefault:15,20,26,28,33,34,38,39,40,41,43,44,895,898,899,932,libdir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,libedit:904,libera:934,libev:917,libk5crypto:916,libkdb5:919,libkdb_ldap:22,libkeyutil:904,libkrb5:21,28,43,894,916,libpam:42,librari:3,18,20,21,24,26,29,38,41,43,46,48,49,50,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,124,125,126,129,130,132,133,134,135,136,137,138,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,169,171,172,173,174,175,176,177,178,179,180,181,182,183,184,189,194,195,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,227,228,229,230,231,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,283,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,307,308,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,342,343,344,345,346,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,396,399,400,401,402,403,404,405,406,407,408,409,410,412,414,417,418,419,420,863,864,894,895,901,902,904,915,916,917,918,919,920,922,923,924,930,931,932,943,951,libtool:921,libverto:904,929,licens:903,904,907,916,life:3,5,19,23,940,lifetim:3,6,14,21,23,48,153,365,366,750,824,830,895,916,919,928,937,940,944,951,lightn:916,lightweight:901,like:3,6,8,12,14,15,19,21,23,32,33,34,37,38,39,41,43,192,895,899,900,902,904,906,921,925,937,likewis:944,limit:20,23,24,25,34,39,917,944,951,line:0,3,8,10,12,15,19,20,21,23,28,34,35,37,352,903,904,916,917,936,944,946,949,950,951,link:0,23,30,34,899,902,903,904,906,919,922,943,linkdn:3,23,linker:904,linux:895,904,916,list:0,2,3,4,6,10,14,15,19,21,26,28,32,34,36,39,40,43,46,48,93,153,164,184,189,195,214,230,231,320,378,412,417,418,419,831,874,895,904,905,915,917,919,920,923,929,932,936,937,941,944,949,950,list_mkei:23,list_princip:15,listen:4,8,10,20,34,39,916,listinfo:934,listpol:3,23,listprinc:3,23,liter:921,littl:922,live:6,15,921,lk5crypto:943,lkrb5:943,lmdb:20,24,904,916,lname:56,944,lndir:901,903,lnsize_in:56,lnsl:904,load:8,14,17,20,23,24,34,38,40,904,922,932,load_dump:6,23,loadabl:20,21,922,loader:904,local0:20,local7:20,local:3,5,8,12,14,15,20,21,22,23,28,32,34,36,39,43,46,48,62,64,80,230,231,325,326,327,329,331,344,356,359,360,389,398,408,523,524,715,896,899,900,901,904,906,908,909,910,915,916,923,924,936,937,940,941,943,944,946,951,local_addr:44,64,82,local_appdata:21,local_port:84,local_realm:944,localauth:916,924,localauth_plugin:930,localedir:904,localfr:28,localhost:15,localhostnam:43,localstatedir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,locat:4,7,8,10,15,19,20,21,22,24,25,29,34,39,41,43,48,895,899,904,905,913,915,916,917,924,932,937,939,940,941,943,944,945,946,951,locate_plugin:931,lock:6,20,23,24,34,35,734,735,913,916,937,lockdown_kei:3,19,23,916,lockit:3,lockout:3,20,23,24,25,30,lockout_polici:35,lockoutdur:3,23,35,lockouttim:3,23,log:8,9,23,24,26,28,33,34,37,39,46,48,735,895,916,924,936,937,939,944,950,951,log_:20,log_daemon:20,logic:39,916,login:20,21,33,38,41,46,937,944,951,logon:20,333,657,916,logout:937,939,longer:11,19,23,25,33,39,43,49,65,67,68,72,73,76,77,78,91,92,93,111,113,115,120,122,123,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,904,916,937,940,look:0,8,12,15,20,21,23,28,37,38,39,43,389,902,904,921,937,940,944,lookasid:904,lookup:21,22,33,38,39,194,813,904,916,931,lose:6,23,loss:23,917,lost:17,902,917,lot:39,lower:3,19,21,23,43,230,932,942,949,lowercas:23,38,899,lowest:21,lpr:20,lr_type:852,lr_type_interpretation_mask:787,lr_type_this_server_onli:787,lrealm:210,227,377,lsocket:904,lss:904,ltd:917,luke:39,luser:319,lxml:906,mac:901,mach:21,917,machin:4,8,12,14,15,17,18,21,31,32,34,37,38,39,895,900,904,936,937,950,951,maco:21,342,895,901,916,917,macro:421,887,944,made:8,21,23,34,41,136,253,269,378,895,916,917,925,927,945,951,magic:135,156,803,805,806,807,809,811,816,819,821,822,823,824,827,829,830,831,832,834,843,844,846,848,852,857,866,867,871,880,881,884,888,889,893,mai:3,6,8,10,11,14,15,19,20,21,22,23,24,25,26,28,33,34,35,36,37,38,39,40,41,43,46,99,107,126,158,195,224,228,229,241,245,258,262,287,330,359,375,380,381,388,389,414,729,845,863,875,887,896,899,902,904,905,908,909,912,913,916,917,920,922,923,925,926,927,928,929,932,934,936,937,939,940,944,949,951,mail:20,895,937,944,949,mailbox:899,mailman:934,main:368,371,934,maintain:0,9,15,20,23,902,904,951,mainten:3,6,23,maj_ver:921,major:43,903,921,make:0,3,6,12,14,15,17,20,21,22,23,25,26,28,32,33,34,35,37,39,41,43,48,112,236,241,250,301,368,371,403,894,902,903,904,906,908,916,917,922,936,940,945,makedepend:901,makefil:902,904,906,malform:166,223,619,908,malici:3,23,46,malloc:932,man:0,3,21,899,904,916,manag:5,19,23,33,916,932,935,951,mandatori:113,114,129,130,294,295,298,299,910,mandir:904,mani:3,17,21,23,28,35,39,41,925,937,951,manipul:22,23,45,825,898,manner:5,23,917,manual:0,6,10,15,23,33,34,902,904,916,manual_test:902,map:21,28,33,34,43,904,916,922,923,930,944,949,mapsiz:20,24,marc:917,mark:3,6,20,21,23,34,342,917,marker:908,916,markup:0,906,marshal:908,909,916,masachusett:951,mask:66,83,142,153,157,masquerad:17,936,937,massachusett:907,917,master:3,4,5,6,10,20,26,34,35,39,41,900,905,915,916,master_kdc:21,39,master_key_nam:5,6,20,23,master_key_typ:5,6,14,20,23,34,match:0,2,3,6,15,19,20,21,23,28,29,33,37,38,43,48,59,60,119,151,153,195,223,224,267,301,310,359,363,375,403,743,744,745,746,747,748,749,751,754,844,895,899,913,915,916,932,946,949,951,materi:14,46,916,917,921,matt:917,matter:17,21,max_keytab_name_len:787,max_lif:6,20,34,max_read:20,24,max_renew_lif:6,max_renewable_lif:20,34,max_renewable_ticket_lif:5,23,max_ticket_lif:5,23,maxfailur:3,23,35,maximum:3,5,6,10,14,15,20,21,23,24,33,39,46,311,361,894,929,937,940,maxlif:3,19,23,maxnumb:3,23,maxpathlen:764,maxrenewlif:3,5,19,23,maxtktlif:5,23,mcred:153,md4:26,917,md5:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,mdb:24,mean:3,12,14,20,21,23,33,34,37,46,900,905,917,937,944,951,meaning:3,23,meant:937,measur:25,894,mech:28,915,916,951,mech_typ:922,mechan:3,16,20,21,22,23,36,37,39,40,43,46,154,250,691,899,908,909,915,916,920,921,924,929,931,940,951,mechglu:917,922,media:5,21,23,medvinski:944,meet:949,megabyt:20,24,903,mellon:917,member:20,membership:46,memori:15,41,43,48,93,142,223,231,302,323,325,326,331,356,357,360,414,825,895,898,904,916,921,923,930,memset:46,mention:20,22,917,merchant:917,merg:18,20,48,917,messag:3,8,20,21,24,34,41,48,78,363,375,381,531,538,716,739,805,830,834,843,844,863,864,881,887,899,901,909,916,917,921,936,937,943,944,946,951,message_out:169,message_typ:880,met:917,944,metadata:6,method:21,25,39,230,908,916,918,919,920,921,923,926,927,928,929,930,931,932,933,940,mexico:917,mgluep:917,mic:532,916,mic_token:43,michigan:917,microsecond:266,385,410,806,822,873,908,microsoft:20,21,26,29,42,43,382,452,916,922,microsystem:917,middl:899,might:14,17,23,28,29,34,35,38,39,43,902,904,908,917,921,936,951,migrat:14,23,41,916,miller:917,951,min:3,19,23,896,min_ver:921,minclass:3,23,minim:6,14,23,24,916,minimum:3,20,23,33,minlength:3,23,minlif:3,23,minor:14,43,903,916,921,922,931,minor_statu:43,922,minu:20,913,minut:5,20,21,23,896,899,936,937,951,mismatch:43,260,342,936,miss:267,906,mission:944,mistak:936,mistakenli:171,mit1:909,mit:3,5,12,14,15,17,19,20,21,24,28,30,31,32,34,38,39,41,43,45,46,894,895,901,903,904,906,907,908,909,910,920,922,924,925,929,932,934,936,937,940,951,mitig:25,46,899,916,mitiys4k5:34,mix:937,mk_cmd:904,mk_req:854,mkdir:902,mkei:3,6,23,mkey_convert:6,23,mkey_fil:6,23,mkeynam:5,6,10,23,mkeytyp:5,6,23,mkeyvno:5,6,23,mkvno:6,modbi:6,mode:3,6,8,14,20,23,41,467,479,728,904,916,940,944,modern:14,15,23,38,modestli:40,modif:6,9,19,21,34,917,modifi:3,6,9,15,18,19,25,28,32,34,40,43,100,103,114,136,144,146,158,288,290,295,312,365,366,864,904,916,917,927,932,940,modify_princip:26,modnam:21,28,modpol:3,23,modprinc:3,23,35,37,40,926,modtim:6,modul:3,4,6,20,21,23,35,252,268,904,906,914,916,918,919,920,923,925,926,927,928,929,930,931,932,933,940,951,module_nam:21,modulenam:21,modulepath:21,modulo:913,moira:917,mon:3,23,35,monitor:25,month:896,916,more:6,14,15,19,20,21,22,23,25,29,32,34,35,37,38,39,41,43,46,262,279,344,404,565,736,738,759,887,895,898,899,901,904,905,909,916,923,929,934,936,951,more_preauth_data_requir:920,morn:33,most:2,6,17,20,21,23,24,25,26,28,33,34,37,39,40,41,43,48,154,895,898,899,901,916,920,921,922,937,939,951,mostli:904,move:20,27,34,48,msdn:916,msec_dirbit:787,msec_val_mask:787,msg:213,msg_type:830,843,844,mslsa:895,mssclogin:21,much:14,25,38,153,936,multi:35,37,916,multihom:21,multipl:3,10,14,15,16,20,21,22,23,24,28,34,35,36,37,39,43,46,845,895,899,902,916,921,922,929,940,949,951,multipli:35,multithread:48,muse:917,must:2,3,7,8,11,14,15,19,20,21,22,23,24,26,28,29,32,33,34,35,36,37,39,43,46,57,58,69,74,78,99,100,102,103,113,117,119,121,125,126,136,146,152,153,158,173,176,195,198,200,220,224,228,241,247,268,270,271,274,275,279,282,287,288,289,290,294,296,312,314,317,322,326,331,345,359,368,371,373,375,402,407,726,727,729,736,738,740,743,744,745,746,747,748,749,750,751,754,825,845,868,895,902,903,904,908,909,910,912,913,916,917,919,921,922,923,926,928,929,930,932,936,937,942,944,946,951,mutabl:845,mutex:845,mutual:34,330,375,437,503,805,940,944,my_cach:944,my_proxi:21,my_respond:46,mydir:895,mydomain:20,mymodul:28,mypreauth:28,myrealm:46,myremotetokentyp:20,name:2,3,4,5,6,8,10,12,14,15,16,19,20,21,22,23,24,28,29,30,32,33,34,36,37,40,46,48,49,50,59,60,141,147,153,155,159,214,222,223,227,230,235,246,247,252,260,264,267,278,300,301,310,315,317,319,320,329,333,336,342,343,350,352,359,362,365,377,382,384,406,407,408,409,412,414,501,638,640,641,642,643,647,652,662,738,749,811,831,860,870,874,881,896,898,903,906,908,909,912,915,916,917,918,921,923,930,931,932,933,937,939,940,941,942,943,944,946,951,name_s:306,name_str:37,name_typ:37,namelen:311,nat:21,23,916,nation:917,nativ:33,368,371,894,904,908,912,915,916,natur:38,naval:917,ncsa:42,nctx_out:176,ndnhnmn:896,nearli:3,necessari:3,14,21,22,23,24,33,34,37,39,43,120,122,123,260,343,387,407,920,921,925,936,937,necessarili:14,need:4,6,12,14,15,19,20,21,23,32,33,34,35,37,38,39,40,41,43,46,49,64,65,67,68,72,73,76,77,78,91,92,93,99,100,102,103,111,113,115,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,258,261,265,268,272,275,279,280,282,286,287,288,289,290,294,310,315,317,318,321,322,323,324,325,326,327,328,329,330,331,332,335,336,338,339,344,345,354,355,356,357,359,360,363,364,375,389,401,403,404,405,406,408,565,737,738,759,895,896,901,902,903,904,906,909,916,922,923,925,930,932,934,936,937,940,943,needchang:3,5,23,neg:28,883,912,neglig:917,negoex:916,924,negoti:908,916,922,neither:3,23,325,917,940,941,944,nersc:21,net:21,42,netbio:54,netbsd:916,917,netlib:904,netlogon:452,network:3,15,17,21,23,25,29,32,34,38,39,40,43,46,260,375,523,524,525,526,901,904,936,937,950,951,neuman:951,never:3,14,15,17,19,20,23,24,35,100,103,228,288,290,913,936,937,new_message_out:864,new_mkey_fil:6,23,new_princip:3,new_reply_out:863,864,new_stat:108,newer:6,14,20,23,904,newest:23,newli:3,6,23,26,37,107,113,125,126,176,294,329,330,359,363,364,375,895,902,916,newlin:344,352,newprinc:3,23,newpw:166,382,383,next:3,6,17,23,34,35,48,99,100,102,103,287,288,289,290,728,902,908,909,913,916,920,929,937,944,nfs:38,nii:944,nippon:917,nist:21,40,nitem:921,nktype:844,nlgilman:12,nls:916,no_auth_data_requir:3,23,no_host_referr:20,39,noaddress:21,nofail:46,nofork:4,nokei:3,23,37,non:2,3,14,19,21,23,26,33,37,43,44,99,100,102,103,113,129,130,155,224,241,245,250,269,287,288,289,290,294,298,299,300,315,330,342,359,375,382,383,388,863,908,912,916,940,943,944,nonc:358,822,830,844,916,none:3,20,21,22,23,26,36,37,57,58,132,273,285,304,369,372,899,909,944,951,nonexist:916,noninfring:917,nonrepudi:37,nonzero:21,224,946,noout:37,nopw:3,23,nor:917,941,944,norandkei:3,15,norealm:14,20,normal:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,north:917,nosync:20,24,notabl:23,note:3,5,6,14,20,21,23,26,32,34,154,241,245,602,603,605,606,896,902,929,937,940,944,950,951,noth:8,899,notic:17,24,917,notifi:934,novel:917,now:8,14,34,37,39,235,260,275,728,916,937,nowait:8,12,34,nrl:917,nss:917,nt_wellknown:761,ntlm:916,ntt:917,num:9,num_data:98,100,103,114,130,288,290,295,299,num_prompt:352,870,number:2,3,4,5,6,8,9,10,11,12,14,15,19,20,21,23,24,35,36,37,39,46,48,66,78,80,83,100,103,112,135,156,288,290,310,315,325,326,327,331,337,352,356,358,359,360,521,528,721,736,738,806,825,844,848,873,883,894,896,898,902,904,906,908,909,910,912,916,917,920,929,941,942,943,944,946,numer:6,34,166,382,383,896,916,941,numwork:10,object:3,5,6,20,21,22,24,25,28,35,36,43,48,262,269,738,902,904,908,917,918,919,920,921,922,923,926,927,928,929,930,931,932,933,observ:25,29,35,obtain:2,3,15,16,17,20,21,23,25,26,33,34,37,43,46,48,80,135,230,258,271,274,329,330,359,375,402,403,414,440,618,835,895,898,904,913,916,917,932,933,935,936,940,944,946,obvious:32,occasion:34,occur:3,6,9,23,78,342,386,916,occurr:171,octet:48,odd:937,oeap:481,off:15,21,24,25,28,33,35,39,352,361,offer:21,24,40,904,offlin:14,25,940,offset:10,48,410,908,913,often:20,22,23,28,33,38,39,898,925,951,oid:28,43,916,922,oid_op:917,ok_as_deleg:3,23,ok_to_auth_as_deleg:3,23,okai:3,23,937,941,old:2,3,6,14,15,20,21,23,34,37,243,346,420,916,936,old_cod:419,420,old_princip:3,oldcc:917,older:14,23,916,929,oldest_kvno_to_keep:3,om_uint32:43,922,omit:11,22,28,39,408,714,715,908,912,932,onc:3,6,14,15,21,23,34,43,46,78,361,733,895,899,902,927,931,936,951,one:2,3,5,6,9,15,16,17,19,20,21,23,24,25,26,28,32,34,35,36,37,38,39,40,41,43,46,48,153,165,243,263,264,270,271,275,279,330,333,344,356,360,389,738,895,896,898,899,902,904,905,906,908,909,913,916,918,920,921,923,926,929,930,936,937,940,942,944,945,ones:21,25,34,902,921,937,onli:3,4,6,8,9,10,14,15,18,19,20,21,22,23,26,28,32,33,34,35,38,39,41,43,46,48,54,114,153,224,228,241,245,295,325,361,365,366,545,729,749,860,887,894,895,900,902,904,908,913,916,917,922,923,929,930,932,936,937,940,944,946,949,951,onlin:14,25,onlyrealm:14,20,onto:17,21,32,34,904,922,937,opaqu:48,286,845,916,open:6,21,23,24,46,48,50,305,315,317,342,387,753,769,899,913,916,917,933,940,openldap:3,5,23,24,30,904,917,openldap_ldapconf:20,opensc:21,openssh:28,38,openssl:21,37,904,916,openvis:3,917,oper:2,3,5,9,10,14,15,19,20,21,22,24,26,28,33,34,35,37,41,43,48,62,119,121,136,156,158,382,383,386,753,835,845,895,901,902,903,904,909,913,915,916,917,926,930,940,944,951,oppos:37,opt:46,229,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,943,optim:904,optimist:20,40,48,254,option1:21,option2:21,option:2,11,12,15,19,22,24,28,29,34,35,36,37,39,43,48,59,60,224,225,226,229,232,233,234,235,253,260,269,275,325,326,329,330,331,344,375,403,414,416,546,736,806,807,811,822,823,830,834,838,839,844,882,898,903,916,919,920,921,923,926,928,930,937,951,oracl:42,917,order:3,4,6,14,16,17,19,20,21,22,23,32,33,34,35,37,38,43,46,48,245,736,895,898,899,903,904,908,912,917,918,922,932,951,ordinari:14,902,916,951,ordinarili:2,15,245,org:5,21,22,23,42,902,903,906,916,917,934,950,951,organ:903,917,orig_hostnam:194,origin:3,14,21,23,39,43,46,904,917,922,osconf:903,osf:679,other:3,4,6,10,14,15,19,20,21,23,24,26,28,34,35,37,38,39,43,46,154,279,310,359,404,644,738,835,894,895,898,901,902,903,904,908,909,912,916,917,920,922,926,927,928,930,931,932,934,936,937,942,944,949,950,othernam:37,otherrealm:21,otherwis:3,6,14,15,20,21,23,29,33,34,36,37,39,43,49,52,54,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,95,96,97,98,99,100,102,103,104,105,106,107,108,110,111,112,113,114,115,116,117,118,121,124,125,126,129,130,134,142,150,153,157,158,162,163,164,166,170,172,173,174,175,177,178,180,181,182,183,184,185,187,189,192,193,195,217,224,235,236,238,248,260,261,264,265,266,267,271,272,273,274,275,276,277,278,279,280,283,284,285,286,287,288,289,290,294,295,296,298,299,300,301,319,321,322,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,345,347,348,349,350,354,355,356,357,358,359,360,361,362,363,364,374,375,376,385,388,390,391,392,394,395,397,398,400,401,402,403,404,405,414,895,904,909,917,919,921,928,937,940,941,942,944,otp:3,16,25,30,46,368,694,696,697,720,736,915,916,our:20,36,901,902,917,out:3,8,12,21,23,24,33,35,36,37,41,43,49,50,56,59,60,63,64,65,66,67,68,69,71,72,73,74,76,77,78,89,91,92,93,95,96,97,99,101,102,104,105,107,108,111,112,113,115,116,117,118,119,121,124,125,126,129,130,132,134,135,138,141,142,143,145,149,150,152,153,154,158,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,194,195,223,224,227,229,230,231,235,236,238,251,260,261,262,264,265,266,267,268,269,272,273,274,275,279,280,282,286,287,289,294,296,298,299,301,303,305,306,307,308,310,311,314,315,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,335,336,337,338,339,344,345,347,354,355,356,357,358,359,360,361,363,364,368,371,374,375,382,383,389,390,391,392,394,395,396,397,398,401,402,403,404,405,406,408,409,410,412,532,533,535,536,539,895,904,916,917,936,939,946,out_cr:224,225,226,375,out_flag:238,outaddr:172,outag:20,39,outauthdat:322,outbuf:223,327,328,329,330,outcc:134,outcksum:131,outcr:177,outdata:178,outfil:6,outgo:15,922,outlin:0,29,outprinc:182,outptr:186,190,output:3,6,9,15,20,23,26,34,41,43,48,99,100,101,102,103,107,117,119,166,181,224,279,287,288,289,290,296,352,359,361,364,404,864,873,895,906,916,918,919,921,940,941,943,946,951,output_cr:43,output_cred_handl:43,output_message_buff:43,output_nam:922,output_payload_buff:43,outreach:14,outsid:15,895,951,over:0,10,14,15,20,21,23,24,28,32,34,36,38,39,43,46,48,107,113,114,117,155,164,294,295,296,300,301,325,363,375,815,916,918,924,932,936,937,overrid:3,6,10,14,20,21,23,36,48,378,380,381,386,387,863,904,912,916,940,overridden:2,10,11,19,21,899,916,overview:901,overwrit:6,23,384,939,overwrite_cr:43,overwritten:20,825,own:0,3,15,20,21,23,24,25,34,38,381,919,921,922,933,936,937,944,950,owner:917,ownership:899,p27:42,pa_as_fresh:910,pa_config_data:908,pa_hardwar:929,pa_real:920,pa_replaces_kei:929,pa_typ:857,908,pa_type_list:920,929,pac:3,20,23,48,340,341,650,659,684,858,861,916,940,pac_client_info:300,301,336,343,pac_out:301,packag:29,34,902,917,packet:20,25,36,330,916,929,pad:43,48,99,100,103,104,287,288,290,536,913,padata:843,844,920,929,padl:917,page:0,3,21,903,904,916,pair:6,20,21,26,839,pam:33,parallel:10,39,902,916,param:49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,paramet:5,6,10,20,23,28,35,36,43,46,48,169,229,323,325,343,904,905,908,915,916,922,926,929,944,parent:21,39,895,915,pars:3,15,28,43,45,46,48,235,260,264,267,278,356,360,368,371,901,908,part:14,21,23,26,32,41,199,264,267,278,283,301,344,359,384,821,831,843,881,895,900,908,909,913,917,921,922,932,944,951,parti:28,36,43,916,917,951,partial:14,19,46,913,particip:21,34,particular:2,11,14,16,17,19,20,21,37,43,46,317,902,904,917,936,937,particularli:14,17,25,39,936,943,partit:39,pass:14,20,21,28,36,43,99,100,102,103,228,250,270,271,275,279,280,282,287,288,289,290,325,368,371,380,381,382,386,387,887,904,922,931,940,944,passcod:668,passiv:25,passwd:5,23,33,893,917,944,passwd_phrase_el:802,871,password:3,4,5,6,9,10,11,14,15,16,17,19,20,21,22,24,25,26,28,29,32,33,34,35,36,37,39,40,43,48,233,245,258,618,620,717,718,719,737,738,895,900,915,916,920,924,935,937,942,944,950,951,password_changing_servic:3,23,password_expir:245,836,past:3,23,934,pasword:25,patch:23,path:4,5,8,20,21,22,23,25,28,29,34,39,359,902,904,906,916,944,951,pathnam:4,8,21,23,24,28,29,37,898,902,905,951,pattern:6,21,28,949,payment:917,pdf:0,pem:16,21,29,37,946,peopl:20,pepper1:107,pepper2:107,pepper:48,per:3,6,9,10,14,18,20,21,23,26,28,36,39,43,46,895,918,920,923,926,927,929,930,931,932,933,perfect:899,perform:3,4,5,6,12,14,19,20,21,22,23,24,25,26,34,37,38,39,43,46,62,91,250,254,258,359,363,375,382,383,386,416,437,845,895,916,917,926,927,928,937,perhap:3,14,20,23,24,period:6,8,14,17,20,21,23,24,35,937,940,permiss:3,15,18,19,20,23,34,43,137,147,159,895,916,917,937,permit:3,19,20,21,23,26,36,48,194,251,356,360,915,916,917,940,950,permitted_enctyp:21,26,persist:21,895,person:17,34,917,936,937,pertain:10,917,pgp:903,934,phase:944,phrase:893,physic:32,39,pick:20,25,37,902,pid:4,8,10,916,pid_fil:4,8,10,piec:35,265,pin:369,372,726,729,733,734,735,736,868,pipermail:934,pkc:21,738,pkcs11:21,916,917,pkcs12:21,pkinit:3,16,23,25,30,40,41,107,649,686,687,688,689,738,904,911,916,917,924,940,pkinit_allow_upn:20,21,pkinit_anchor:3,20,21,23,37,940,pkinit_cert_match:3,21,37,916,pkinit_dh_min_bit:20,21,pkinit_eku:21,pkinit_eku_check:20,21,37,pkinit_ident:20,21,37,pkinit_ind:16,20,pkinit_kdc_hostnam:21,37,pkinit_pool:20,21,pkinit_require_crl_check:20,21,pkinit_require_fresh:20,37,pkinit_revok:20,21,pkinit_san:21,place:2,8,14,15,21,26,28,32,33,37,39,43,44,46,48,107,117,229,264,267,279,296,301,336,364,376,404,825,864,904,906,913,919,927,939,944,950,placehold:901,903,plain:909,plaintext:116,533,plan:23,platform:24,883,894,895,902,903,904,916,pleas:0,15,20,736,934,plu:20,937,944,plug:917,pluggabl:21,28,916,921,924,927,932,plugin:3,20,22,901,904,914,915,916,917,932,plugin_base_dir:21,pnl:21,point:3,14,15,21,23,32,34,43,330,407,414,825,895,900,904,916,934,pointer:24,43,44,46,91,135,136,173,198,200,203,209,213,217,220,230,231,256,262,263,322,323,330,332,357,365,366,386,395,407,823,825,830,870,881,918,919,920,921,926,927,929,931,933,pol:3,19,23,polici:3,4,5,6,16,19,20,21,24,25,34,35,169,359,916,924,925,926,933,937,941,942,policy_nam:5,23,poll:4,8,20,23,916,pool:14,pop:32,popul:14,24,44,148,913,popular:34,port:3,4,7,8,10,12,15,20,21,23,34,36,41,44,48,62,331,524,526,915,951,portabl:895,portiion:917,portion:21,36,153,266,317,385,410,749,806,811,822,834,873,917,portmapp:23,portnum:10,pose:14,posit:6,19,28,35,883,912,posix:6,883,894,909,910,913,possess:37,937,possibl:3,5,6,14,15,17,20,21,22,23,24,25,26,32,34,35,37,38,39,43,46,48,93,166,224,738,898,899,904,916,917,920,921,929,934,937,949,post:48,895,934,postdat:3,19,20,23,267,937,940,941,potenti:14,32,34,46,900,power:20,24,25,39,916,practic:14,21,46,99,287,916,pre:0,16,20,22,43,48,91,260,329,330,359,363,364,375,380,857,906,909,916,917,927,940,pre_auth_typ:232,233,234,preauth:20,671,839,908,916,917,920,929,preauth_list:254,838,preauth_list_length:254,838,preauth_plugin:920,929,preauth_requir:920,929,preauthent:3,16,20,21,23,25,28,30,37,41,46,48,250,720,830,843,844,857,874,908,916,921,924,937,940,941,prebuilt:902,preced:10,14,21,39,912,944,951,precis:33,precomput:48,predefin:39,prefer:3,21,23,38,43,236,898,899,916,923,preferred_preauth_typ:21,prefix:20,39,48,344,902,904,916,922,943,944,preiniti:117,119,121,296,prepar:48,79,318,403,prepend:39,346,420,904,preprocessor:904,prerequisit:906,preselect:940,presenc:21,908,present:8,14,16,20,21,22,23,28,34,36,37,43,46,165,245,301,325,333,336,345,354,365,366,373,388,618,709,711,712,882,898,899,908,912,913,916,932,937,941,946,951,preserv:6,917,presid:917,pressvr:14,presum:899,prevent:2,3,19,20,21,23,25,26,29,40,330,521,522,899,916,917,927,936,940,previou:0,3,21,23,34,37,42,44,156,250,261,279,384,404,419,420,908,previous:3,6,23,43,48,902,916,prf:48,118,909,916,primari:3,4,7,8,9,14,17,20,21,23,24,31,35,38,39,41,43,48,145,895,916,918,927,931,933,934,939,940,945,949,951,primarili:24,55,947,primary_kdc:21,princ1:37,348,349,350,362,princ2:37,348,349,350,362,princ:3,6,15,21,49,50,91,92,93,94,388,791,792,793,794,795,796,797,798,909,princ_flag:6,princ_lockout:6,princ_look_ahead:944,princ_meta:6,princ_nam:37,939,princ_out:154,princ_stringattr:6,princ_tktpolici:6,princip:2,3,4,5,6,7,8,9,10,11,12,14,16,17,19,20,21,22,24,25,26,28,29,30,31,32,33,36,37,40,41,43,45,46,48,78,141,147,148,153,155,159,166,223,229,235,242,260,264,267,275,300,301,310,315,320,329,333,340,341,342,343,359,363,364,375,403,406,407,408,409,412,414,501,641,648,662,705,707,749,761,823,824,830,834,843,844,848,860,895,896,898,899,905,909,910,912,915,916,918,919,925,926,928,929,930,933,936,937,940,941,942,944,945,946,949,950,951,principal_databas:8,principal_nam:37,principal_out:344,345,principal_seq:37,principalnam:916,principl:708,princnam:25,35,40,46,895,princname_out:336,print:3,6,7,8,23,361,916,943,944,946,printabl:365,373,prior:6,8,14,20,21,23,39,41,43,136,265,917,921,priorit:39,prioriti:14,20,39,230,895,899,918,priv:48,916,privat:21,37,716,904,909,910,916,934,privileg:3,15,19,34,43,48,253,936,950,951,privsvr:300,301,342,343,privsvr_kei:340,341,prng:121,916,probabl:6,12,14,23,34,902,problem:14,23,330,899,916,934,proce:944,procedur:6,26,32,34,901,902,proceed:23,process:3,4,6,8,9,10,14,15,20,21,23,24,25,34,38,43,46,48,136,154,169,355,414,895,898,899,916,919,920,923,926,927,928,929,931,933,940,951,procur:37,917,produc:6,21,23,46,104,124,903,913,920,923,929,941,943,product:34,917,prof_no_rel:932,profil:15,18,20,21,48,136,388,895,898,899,901,905,916,917,924,profile_module_init:932,profile_module_init_fn:932,profile_releas:262,profile_vt:932,profit:917,program:2,3,4,6,8,12,15,20,21,23,26,28,30,32,33,34,37,38,39,41,43,46,56,268,378,899,901,902,903,906,908,915,916,917,937,943,944,951,programm:943,programmat:46,progress:14,20,prohibit:3,23,917,project:0,699,904,916,917,921,951,promot:14,917,prompt2:361,prompt:2,3,5,6,23,34,46,48,260,361,717,718,719,720,868,870,900,916,920,936,937,942,944,prompter:245,260,263,275,352,868,870,875,prone:916,proof:48,937,propag:4,6,7,8,14,17,19,20,21,24,31,35,901,916,917,936,proper:12,23,37,359,902,properli:29,34,37,41,894,904,properti:21,935,propog:8,proponli:4,23,proprietari:36,protect:6,15,25,26,32,35,37,40,43,78,247,326,331,738,845,899,916,protocol:2,3,14,21,23,29,39,43,48,247,301,321,405,673,693,721,830,834,843,844,899,901,914,916,926,937,940,946,951,prototyp:901,921,prove:46,910,920,929,provid:0,3,4,10,15,21,22,23,24,26,28,29,32,34,37,38,39,41,43,46,98,229,359,372,414,894,895,902,904,916,917,919,922,925,928,932,936,944,951,provis:917,proxi:20,21,25,30,36,39,43,916,937,941,proxiabl:3,20,21,23,48,838,937,940,941,944,proxy_imperson:908,pseudo:48,901,pto:183,ptr:38,43,197,281,339,353,800,801,830,831,881,pty:901,917,publish:38,917,pull:916,punctuat:3,21,23,34,942,purg:3,6,14,916,purge_mkei:23,purgekei:14,23,37,purpos:10,15,21,26,28,34,904,917,940,947,put:4,10,34,344,806,pw_expir:6,pwchang:20,pwd:902,pwexpdat:3,23,pwexpir:3,19,23,26,pwqual:28,916,924,pwqual_plugin:933,pwservic:20,python:29,906,916,qop_req:43,qop_stat:43,qualif:21,916,qualifi:3,15,19,21,23,951,qualify_shortnam:21,38,916,qualiti:21,28,916,924,935,queri:3,21,23,39,43,46,916,question:0,20,39,48,368,371,736,737,738,874,875,934,queue:20,917,quietli:939,quit:6,32,quot:3,6,23,344,406,408,896,quux:21,r13:6,23,r18:6,23,r_address:822,rabbit:39,radiu:20,36,916,randkei:3,14,23,26,34,37,916,random:3,6,14,15,20,21,23,25,34,48,909,913,916,random_data:124,randomli:2,26,randsourc:120,rang:940,rapidli:15,rare:24,37,896,898,rassen:917,rather:3,4,5,6,10,15,20,21,23,32,38,39,56,279,404,895,902,909,922,940,raw:20,902,rc2:479,rc4:20,26,916,rcach:43,71,85,265,323,325,899,rcache2:899,916,rcmd:21,rcommand:643,rcptr:265,rctmpdir:905,rctx:46,365,366,367,368,369,370,371,372,373,875,rdata_out:323,325,326,331,354,356,360,rdn:21,33,38,43,reach:20,21,24,164,314,913,react:243,read:3,5,6,9,11,20,21,22,23,34,35,37,46,48,250,260,262,318,352,371,414,904,912,929,932,936,941,951,readabl:15,21,32,169,896,898,900,916,reader:21,24,readi:6,34,readlin:904,readm:901,903,real:21,350,385,705,944,realiti:0,realloc:44,realm1:10,realm2:10,realm3:10,realm:3,4,5,6,7,8,10,12,14,15,16,19,22,24,25,26,29,30,33,34,36,37,38,40,43,44,46,48,49,50,59,60,91,92,93,94,153,214,230,235,251,260,264,267,278,279,284,300,342,344,345,350,359,388,389,403,404,408,502,706,709,710,711,712,714,715,725,793,794,795,796,811,819,823,831,834,843,844,860,863,864,866,867,881,895,904,905,908,909,910,912,915,916,924,931,933,936,937,940,944,949,950,951,realm_try_domain:21,realmlist:214,realmnam:37,46,realmsp:230,231,reason:14,17,21,24,28,33,39,342,894,908,917,936,937,944,reboot:20,34,900,rebuild:904,906,receiv:3,4,8,9,14,20,21,23,37,39,41,43,48,223,245,273,325,326,330,331,354,356,360,363,374,375,874,919,920,929,930,933,937,951,recent:2,6,17,20,25,26,37,48,899,910,916,937,recipi:822,917,recogn:3,20,21,37,41,940,949,recognit:916,917,recommend:5,6,15,17,20,21,23,32,34,39,40,43,902,903,904,934,937,939,recomput:136,reconf:901,record:6,10,21,23,33,34,38,39,899,909,912,913,916,recov:6,23,916,920,recurs:6,23,24,916,recv_hook:380,recvauth:363,375,red:691,917,951,redhat:916,redirect:21,34,redistribut:917,reduc:14,21,33,100,103,288,290,904,redwood:917,ref:5,23,refcount:916,refer:3,5,15,19,20,22,23,39,43,45,48,87,89,138,286,307,860,916,917,925,930,944,referenc:22,908,917,referr:20,21,39,230,231,343,389,692,701,725,908,916,923,937,referral_valid_until:859,referred_realm:859,reflect:23,34,100,103,136,158,262,288,290,325,326,331,356,360,909,910,reforward:937,refrain:922,refresh:15,43,908,916,refresh_tim:908,refus:12,14,34,regard:917,regardless:6,19,21,43,regener:906,regent:917,regexp:21,region:43,114,130,295,299,825,regist:4,21,23,28,39,917,924,951,registr:21,regress:902,regul:917,regular:14,21,34,37,43,944,regularli:17,39,reiniti:148,916,reject:12,15,16,20,21,34,166,620,937,reject_bad_transit:20,rekei:14,rel:20,21,48,896,902,908,944,relai:10,relat:4,6,20,21,22,28,29,35,37,39,169,824,916,917,relationship:21,930,releas:0,3,4,6,8,14,15,16,19,20,21,23,24,25,26,33,35,37,38,39,40,41,43,46,48,68,73,77,82,84,91,93,113,125,126,154,163,176,203,209,214,230,231,265,268,282,294,314,318,344,894,895,899,909,910,912,913,916,919,920,921,922,923,925,926,927,928,929,930,940,946,951,relev:34,38,78,195,300,909,reli:15,34,reliabl:24,relianc:21,relinquish:85,reload:23,remain:3,4,6,14,20,23,43,44,245,645,894,895,912,913,916,917,927,929,944,rememb:34,37,908,remot:3,4,7,15,20,23,33,38,43,48,62,64,169,223,325,326,331,356,359,360,382,383,525,526,901,916,936,937,944,950,951,remote_addr:44,64,82,359,remote_port:84,remotehost:947,remov:2,3,6,20,23,26,28,37,38,48,155,902,916,927,936,renam:3,23,904,916,927,rename_sect:932,render:14,902,renew:3,5,6,20,21,23,48,844,882,916,928,937,940,941,944,951,renew_lif:256,838,renew_lifetim:21,renew_til:823,831,882,908,renewable_lif:940,renprinc:3,reorgan:916,rep:185,199,327,328,357,358,805,830,843,858,rep_cksum:859,rep_result:375,repeat:6,20,21,34,845,908,922,repl:357,replac:3,5,21,23,28,34,70,75,94,186,188,190,191,196,197,225,226,232,233,234,281,351,353,411,904,912,916,917,920,940,replai:21,43,48,78,323,325,326,331,354,356,359,360,521,522,873,895,897,905,911,915,916,951,repli:12,26,46,107,245,258,267,279,352,357,358,380,381,404,728,843,863,864,868,909,916,920,929,940,replic:8,34,replica:4,6,7,8,9,14,15,17,20,21,23,31,32,35,41,901,916,replica_datatran:7,34,915,replica_datatrans_hostnam:23,replica_dumpfil:8,replica_host:7,replicahostnam:8,reply_out:864,report:6,38,901,916,934,940,946,repositori:906,repres:3,21,34,43,158,883,894,898,909,represent:21,43,48,344,345,398,407,408,811,830,843,844,881,894,908,912,917,representaton:805,reproduc:917,req:21,26,37,245,329,330,359,504,844,req_pac:253,request:3,4,6,8,9,10,14,15,16,19,20,21,22,23,24,25,28,33,35,36,37,38,40,43,46,48,153,166,195,223,224,229,235,241,253,260,267,276,277,330,359,378,403,503,505,506,619,673,693,750,757,758,805,807,830,844,852,896,898,899,908,909,910,916,919,920,922,928,929,934,937,940,944,946,951,request_fini:920,request_init:920,request_tim:880,requested_principal_nam:859,requestor:659,requir:3,4,6,8,9,12,14,15,16,20,21,22,23,24,25,26,28,32,34,35,36,37,38,39,40,43,46,48,98,112,116,117,236,241,247,248,301,323,325,326,331,354,356,360,544,736,860,875,894,895,902,903,904,906,909,916,917,919,922,929,932,937,942,950,951,require_auth:3,16,916,requires_hwauth:3,23,929,requires_preauth:3,5,14,23,25,35,37,40,requires_pwchang:5,23,requisit:906,research:917,resembl:738,reserv:907,917,reset:3,9,23,35,46,157,386,916,resid:15,39,46,900,917,949,950,residu:21,39,152,317,895,899,930,932,951,resiz:407,resolut:15,33,38,43,230,916,944,resolv:15,33,48,260,317,895,904,916,941,944,resourc:43,46,902,914,916,respect:3,11,34,82,84,224,344,896,917,922,936,respond:4,48,367,368,369,370,371,372,729,736,737,738,874,875,916,929,respons:3,4,23,37,40,46,85,166,229,245,279,357,404,503,505,543,565,737,757,759,805,844,880,916,917,920,923,929,940,947,951,rest:28,904,restart:12,14,19,20,23,24,34,37,41,restor:6,17,916,restrict:3,5,14,19,21,23,48,224,917,926,928,940,944,restrict_anonymous_to_tgt:20,37,restructuredtext:0,resubmit:940,result:0,14,15,21,23,37,39,40,41,43,46,48,99,102,107,117,124,144,156,158,189,195,228,287,289,296,320,375,376,403,405,406,407,420,904,908,909,913,916,917,918,922,923,928,929,930,937,944,946,result_cod:166,382,383,result_code_str:166,382,383,result_str:166,169,382,383,resum:23,resync:4,9,23,916,resynchron:9,ret:46,347,ret_as_repli:232,233,234,ret_princ:389,ret_valu:59,60,retain:2,3,14,20,23,917,926,928,950,retir:13,23,916,retransmit:904,retri:20,36,38,39,retriev:3,6,24,41,43,44,46,48,158,271,310,366,375,400,403,874,916,917,946,return_padata:929,return_pwd:361,retval:49,50,51,53,55,56,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,121,124,125,126,129,130,132,133,134,135,137,139,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,285,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,308,310,311,313,314,315,316,317,318,319,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,373,374,375,376,377,378,382,383,384,385,387,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,921,reus:23,rev:6,23,24,revers:6,15,21,23,33,43,917,941,review:903,revis:916,917,revoc:20,21,revok:20,21,35,rfc4120:29,rfc:14,20,21,39,43,48,320,382,383,412,442,443,446,447,448,450,451,458,459,460,461,462,463,464,465,466,511,540,542,600,663,666,667,668,669,670,671,672,674,675,676,677,679,680,681,682,685,686,688,690,696,699,701,703,736,899,908,909,910,913,916,920,922,rhost:223,ricciardi:42,richard:917,ride:20,right:5,19,20,23,100,103,288,290,825,907,913,917,risk:14,26,30,46,rkt:11,rlen:91,92,93,94,rlogin:944,rnd:38,roam:21,robbi:951,robin:15,robust:916,rock:920,929,roll:23,rollback:14,rollov:6,23,root:8,12,14,15,17,19,20,21,32,34,900,904,936,944,949,950,951,rotat:26,38,round:40,916,929,rout:34,routin:21,868,royal:917,royalti:917,rpath:902,904,943,rpc:20,21,23,43,48,616,901,916,917,rpcbind:23,rsa:37,477,480,481,482,917,940,rst:906,rtime:844,rule:3,15,19,21,23,28,38,39,43,154,944,946,949,950,run:3,4,6,8,9,10,12,14,15,20,21,23,24,26,28,32,33,34,37,39,41,895,902,903,904,906,915,916,939,941,944,951,runstatedir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,runtim:915,s2kparam:48,s2kparams_out:229,s4u2proxi:20,43,908,916,s4u2self:20,43,343,916,946,s4u:916,s4uself:20,s_address:822,safe:28,48,739,894,916,safer:936,safest:937,sai:899,sake:944,sale:917,salt:2,3,6,11,15,20,23,25,48,125,126,393,838,916,salt_out:229,salt_type_afs_length:787,salt_type_no_length:787,salttyp:6,20,26,374,salttypep:394,sam:694,696,697,916,samba:28,916,same:3,4,5,10,12,15,19,20,21,23,24,28,36,39,43,52,53,91,101,105,107,136,138,151,155,171,180,228,250,270,271,275,279,307,348,349,350,362,388,845,895,899,904,916,921,922,936,940,944,946,sampl:12,15,22,34,901,917,936,937,944,947,san:20,21,916,sandia:917,sasl:3,5,20,22,23,38,43,916,sasl_authcid:3,sasl_authzid:3,sasl_mech:3,sasl_nocanon:38,sasl_realm:3,satisfactori:25,save:37,40,66,83,528,529,909,916,929,sbin:8,12,34,904,915,sbindir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,scalar:909,scenario:14,916,schedul:14,23,schema:22,24,scheme:39,sclient:12,935,938,sclogin:20,scope:5,23,screen:937,screensav:937,script:3,4,10,23,34,901,902,904,916,search:5,20,21,23,38,48,151,153,195,224,315,895,902,913,916,939,945,search_scop:5,23,searchscop:5,23,sec:48,811,834,896,second:3,10,20,21,23,28,36,37,39,43,44,52,53,105,153,223,228,266,267,322,348,349,350,361,362,385,386,388,410,743,806,822,824,844,873,883,894,896,899,908,909,912,913,921,922,937,940,944,951,second_ticket:824,844,908,secondari:34,secret:3,20,21,36,43,46,848,936,section:3,10,19,22,23,28,33,34,35,37,39,41,43,48,119,320,412,600,680,681,682,899,902,903,908,909,913,916,932,933,944,949,sector:6,23,secur:3,7,14,15,20,21,23,25,30,31,34,37,39,41,43,46,250,325,564,900,901,916,917,934,937,951,securecooki:909,securid:668,916,sed:904,see:14,15,17,22,23,24,26,28,32,34,35,36,39,43,46,97,99,100,102,103,108,113,114,130,131,168,229,262,287,288,289,290,294,295,299,320,359,393,403,412,413,414,600,736,895,896,899,900,901,902,904,906,907,908,916,917,918,919,920,921,923,924,925,926,927,928,929,930,931,932,933,934,936,937,seed:131,331,413,913,seed_length:131,413,seen:899,segment:39,select:6,14,21,23,28,43,46,48,117,296,359,369,895,904,916,922,924,940,944,949,self:21,sell:917,semant:46,semfiajf42:20,send:0,4,15,20,21,23,25,26,32,34,41,48,229,245,325,363,375,380,899,901,904,916,934,936,940,951,send_hook:381,sendauth:12,34,48,sender:325,326,331,356,360,822,sensit:250,sent:6,20,23,25,36,37,41,43,325,375,381,864,899,902,909,916,929,937,sentenc:34,separ:0,3,5,6,10,16,19,20,21,22,23,24,25,28,39,50,301,344,346,420,729,903,904,909,916,922,932,936,951,seq:873,seq_numb:806,811,seqnumb:69,74,sequenc:25,37,48,66,78,80,83,325,326,327,331,356,358,359,360,521,528,806,811,873,900,908,909,912,922,sequence_count:871,sequenti:48,314,813,seri:48,913,serial:9,43,48,405,916,serv:4,10,21,23,916,server1:5,23,server:2,3,4,5,6,7,8,9,10,12,16,18,20,21,22,23,24,25,28,29,30,31,34,36,37,38,39,43,46,48,159,166,223,224,264,267,300,301,333,342,343,359,375,382,383,414,504,617,660,728,758,805,823,824,830,834,844,881,895,898,899,901,905,908,915,916,917,918,924,925,937,943,944,946,947,949,server_kei:340,341,server_port:12,server_princ:300,301,server_str:169,serverauth:21,servic:2,3,5,8,10,12,15,16,19,20,21,22,24,28,29,31,32,33,34,43,48,166,224,235,245,260,264,267,301,329,330,363,382,414,643,644,645,736,876,895,899,901,908,916,917,918,923,931,937,940,946,949,951,service1:946,service2:946,service_loc:931,service_nam:940,service_passwd:5,23,sesam:46,699,session:3,14,15,21,23,33,34,43,46,48,224,320,325,330,354,412,439,440,811,823,824,830,831,895,899,937,941,946,951,session_enctyp:3,23,set:0,3,4,5,6,14,15,16,18,19,20,21,22,23,24,25,26,28,29,31,32,33,34,35,37,38,39,40,41,43,44,46,48,62,68,69,73,74,77,78,98,102,145,153,154,161,164,203,209,224,229,253,279,280,286,289,301,305,317,325,326,331,352,354,356,359,360,361,369,373,377,387,404,407,408,409,420,546,729,745,863,864,874,895,896,899,904,916,919,922,929,930,936,937,939,940,941,944,950,951,set_cooki:916,929,set_str:23,26,36,37,setstr:3,16,setuid:41,916,951,setup:23,34,902,916,sever:3,15,16,20,21,23,24,37,39,895,901,904,908,921,951,sfu:683,sha1:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,sha256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,sha2:20,916,sha384:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,sha:14,20,916,shall:917,share:0,14,21,23,28,46,330,904,921,922,932,936,sharealik:917,sharp:19,she:937,950,shell:3,5,23,34,41,916,936,937,943,949,shorter:21,shortest:192,shortli:33,936,shortnam:21,916,should:0,2,3,4,5,6,10,12,14,15,17,20,21,22,23,24,25,26,28,29,32,33,34,37,38,39,43,46,71,85,144,152,223,245,249,255,269,279,308,317,325,327,330,342,359,361,365,366,404,738,858,863,864,883,894,895,896,900,902,904,908,910,916,917,918,919,920,921,922,926,927,928,929,931,932,933,936,937,940,944,946,951,show:2,6,20,41,868,895,906,915,937,941,shown:20,21,895,shrubberi:42,shutdown:24,sick:917,sid:21,638,639,659,side:23,43,363,375,899,sighup:10,41,sign1:43,sign2:43,sign:3,19,20,21,23,32,37,41,43,48,894,903,910,912,916,940,951,sign_authdata:916,sign_onli:43,signal:10,signatur:48,412,476,477,482,903,922,932,signedpath:3,20,23,916,signific:25,35,silent:941,similar:6,21,22,29,43,92,105,113,114,126,129,130,246,294,295,296,298,299,326,329,343,345,349,364,407,408,417,419,916,921,931,937,944,similarli:15,344,738,937,simpl:5,12,17,23,107,421,895,899,simplest:28,43,895,902,simpli:28,36,37,40,43,46,737,902,922,936,937,simplifi:251,916,simul:944,simultan:845,sinc:3,12,14,15,17,21,22,23,37,48,330,733,883,894,908,922,929,950,951,singl:0,3,14,15,20,21,23,24,26,28,32,34,37,39,40,43,46,48,189,320,345,409,708,895,904,916,929,944,siphash:913,site:15,23,34,39,916,937,940,950,situat:14,20,24,28,39,946,size:9,20,21,23,24,37,41,48,97,98,100,103,114,116,130,186,190,288,290,295,299,361,407,409,825,904,912,913,916,size_return:361,size_t:95,96,98,100,103,104,112,114,116,118,130,131,168,170,186,187,190,191,192,193,280,288,290,295,299,337,339,369,374,397,398,413,sizeof:43,46,932,skei:20,824,skew:48,267,356,360,929,940,skip:22,23,37,414,416,slack:39,slash:344,951,slat:921,slightli:904,slot:11,21,300,913,slotid:21,slower:14,24,small:56,smaller:21,912,smard:21,smart:20,21,916,sms:19,smtp:642,sname:389,946,sni:916,sock_dgram:931,sock_stream:931,socket:20,21,36,48,375,915,931,soft:916,softwar:14,15,21,24,25,28,42,46,904,917,934,solari:31,902,904,916,solaris9ab:42,sole:21,28,solut:34,some:2,3,6,14,20,21,23,24,28,29,31,34,37,38,39,41,46,48,99,151,154,287,389,764,895,896,899,901,902,903,904,905,913,915,916,921,922,925,932,934,936,937,940,949,951,someon:17,21,34,936,937,someth:12,14,20,38,899,sometim:23,25,38,940,somewhat:37,899,song:917,sophist:46,sort:38,sourc:0,10,22,23,28,34,39,42,43,902,903,904,914,917,921,925,932,934,944,source_cache_nam:944,source_us:944,southern:917,space:3,16,20,24,37,38,56,99,102,117,119,121,287,289,296,306,346,361,407,420,896,903,spake:20,21,25,30,916,917,spake_preauth_group:20,21,40,spake_preauth_ind:20,spake_preauth_kdc_challeng:20,40,sparc:916,spars:913,spawn:4,special:20,23,28,35,43,408,648,713,895,916,917,922,940,specif:3,4,6,8,10,14,18,19,20,21,23,24,26,34,39,43,48,49,56,155,301,315,317,363,364,410,738,895,896,898,904,906,913,916,917,921,926,931,937,specifi:3,4,5,6,7,8,9,10,11,14,15,16,18,19,20,22,23,28,29,34,36,37,39,43,46,48,92,93,99,100,102,103,113,125,129,224,227,229,235,260,264,267,287,288,289,290,294,298,310,315,318,325,326,331,344,345,356,359,360,375,383,414,750,895,899,904,909,910,916,922,929,937,939,940,941,942,943,944,945,946,951,speed:22,25,sphinx:906,sphinx_arg:906,spi:922,split:3,39,916,spnego:916,917,922,spnego_mech:917,spoof:21,25,39,sprecif:903,spuriou:916,sqlite3:6,sqlite:6,squar:20,21,28,src:22,148,902,904,906,917,src_ctx:179,src_name:43,srcdir:906,srv:21,33,34,39,916,srvtab:11,ss_lib:904,sscope:5,23,sserver:1,947,ssh:15,33,937,950,951,sshd:21,sshing:951,ssl:29,37,sspi:916,stabl:916,926,927,928,933,stage:14,909,927,stai:3,15,stale:0,21,26,stamp:6,9,stand:34,standalon:8,41,916,standard:3,6,9,14,20,23,37,41,43,898,916,917,943,start:0,3,4,6,8,10,14,15,19,20,21,23,24,26,31,37,41,48,823,831,844,882,895,900,902,910,916,937,944,start_realm:908,start_tim:235,260,275,940,starttim:882,908,startup:34,916,stash:3,5,10,14,20,22,34,41,897,915,stash_fil:6,23,stashfilenam:5,6,23,stashsrvpw:3,20,22,23,state:6,9,14,20,34,46,48,78,99,100,102,103,287,288,289,290,845,909,915,916,917,918,920,921,923,926,927,929,930,931,932,933,statement:917,statu:3,835,916,917,919,922,941,944,946,stderr:20,951,stdin:352,stdlib:932,stdout:41,352,stduser:23,step:6,14,22,23,34,37,944,steve:951,still:3,4,6,10,14,20,21,23,32,33,34,35,39,148,269,916,940,944,946,stime:834,stockholm:917,stolen:937,stop:4,10,24,921,storag:46,48,57,58,82,84,159,170,187,192,193,280,361,374,398,895,store:2,3,4,5,6,8,14,15,17,20,21,22,23,24,26,34,37,46,48,80,99,100,102,103,224,235,250,287,288,289,290,325,326,330,331,356,359,360,361,407,414,549,729,838,895,898,899,902,905,908,913,916,933,937,940,941,944,946,str:43,strategi:35,strcmp:932,strdup:932,stream:8,12,20,34,36,43,strength:916,strengthen:14,strict:917,strictli:34,string2kei:14,string:3,5,6,15,16,19,20,21,23,25,26,28,34,36,37,39,43,46,48,101,166,169,192,228,229,258,264,267,278,336,346,365,373,379,382,383,417,418,419,420,736,737,738,819,824,835,866,867,887,895,896,899,904,916,917,919,921,922,929,930,932,940,944,strip_realm:20,36,strlcpy:917,strlen:43,46,strong:16,122,stronger:14,16,21,26,strongest:26,strptime:917,struct:43,48,51,262,269,803,805,806,807,808,809,811,814,815,816,820,821,822,823,824,825,827,829,830,831,832,834,838,839,840,843,844,845,846,847,848,852,857,858,859,860,861,867,868,871,872,873,874,876,877,878,879,880,881,882,884,885,887,888,889,892,893,926,932,structur:43,46,47,48,92,100,103,135,156,169,173,182,212,221,237,240,241,242,243,244,245,249,252,253,254,255,257,258,259,269,275,280,282,288,290,322,324,334,345,355,356,365,368,371,375,389,414,416,421,538,803,809,821,824,825,834,861,881,888,894,920,921,926,928,929,931,studio:916,style:3,21,23,39,417,418,419,638,640,sub:5,21,23,901,subcommand:14,subdirectori:21,28,901,906,915,subdomain:21,39,949,subject:0,20,21,23,37,917,subjectalternativenam:21,subjectaltnam:37,subjectkeyidentifi:37,subkei:48,80,325,354,359,806,811,sublicens:917,submit:26,43,subprocess:10,subregion:43,subschema:22,subscrib:934,subsect:16,20,21,22,24,25,28,29,35,37,40,subsequ:9,10,14,24,136,275,279,404,917,subsess:26,330,440,subset:39,901,substanti:917,substhtml:906,substitut:21,34,37,917,subsystem:904,subtag:21,subtre:3,5,20,22,23,subtree_dn_list:5,23,succe:20,21,34,43,46,414,succeed:12,34,success:3,6,8,20,23,24,25,35,46,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,122,124,125,126,129,130,132,133,134,135,137,141,142,144,145,147,148,149,150,152,153,155,156,157,158,159,161,162,163,164,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,286,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,416,621,835,899,920,923,933,944,946,successfulli:3,6,12,23,35,43,46,245,301,416,863,864,sudan:917,sudden:20,suffici:3,5,14,23,24,904,suffix:21,28,38,43,904,916,951,suggest:0,245,suit:34,901,902,916,suitabl:6,902,904,916,917,937,summar:941,summari:8,9,sun:917,suncc:904,sunw_dbprop_en:23,sunw_dbprop_master_ulogs:23,sunw_dbprop_slave_pol:23,sunwaadm:42,supersed:10,14,supervisor:10,supplement:20,suppli:3,11,43,46,48,223,245,258,262,267,276,277,278,331,342,372,373,386,733,734,874,904,920,921,929,support:3,4,6,8,10,11,20,21,22,23,24,25,26,37,39,40,43,46,48,153,161,247,253,378,386,387,544,754,895,897,901,902,903,904,908,909,913,916,917,920,921,922,929,934,940,supported_enctyp:14,20,26,34,916,suppos:937,950,suppress:3,6,20,23,904,916,939,944,946,sure:3,5,12,14,15,22,23,26,33,41,936,937,940,surpris:14,surround:28,surviv:20,895,susec:834,swap:34,39,sweden:917,symbol:6,344,899,902,903,906,915,921,922,symmetri:20,synchron:9,14,15,21,24,34,41,48,271,403,728,916,929,syntact:21,syntax:20,21,37,916,synthes:381,863,synthet:380,908,syria:917,sysadv6:42,sysconfdir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,syslog:20,21,34,921,system:3,6,14,15,19,20,21,23,24,29,32,33,34,35,36,37,38,41,43,46,48,56,136,147,169,282,382,383,385,396,692,695,698,874,895,900,901,902,903,916,917,921,930,934,936,937,939,940,950,951,systest:3,23,t_mddriver:917,tab:3,6,23,344,916,tabdump:26,916,tabl:3,6,23,48,276,307,308,313,359,363,414,848,898,901,903,904,906,913,915,916,941,tabular:6,916,tag:20,21,34,908,913,922,tail:34,take:10,14,19,20,21,23,25,26,28,32,39,41,43,46,91,124,126,325,376,729,825,896,913,916,918,927,936,937,944,taken:6,14,39,245,899,913,talk:899,tamper:43,tape:32,tar:902,903,target:19,21,34,43,895,908,916,target_nam:43,target_princip:19,target_principal_nam:944,target_us:944,target_user_login_nam:944,task:14,46,91,tcl:916,tcp:8,10,12,15,20,21,23,29,34,37,39,279,404,916,931,team:934,teardown:902,technet:42,techniqu:40,46,technolog:907,917,951,tekniska:917,telegraph:917,telephon:917,tell:4,10,936,937,943,telnet:21,643,944,temp:21,templat:901,temporari:3,21,23,34,37,898,899,915,916,951,temporarili:3,ten:33,937,tend:15,term:3,14,23,25,26,37,41,737,895,898,916,917,920,929,946,termin:4,10,48,173,195,220,230,231,240,261,325,352,354,361,366,407,901,932,944,ters:3,23,test1:3,23,896,test2:3,23,896,test3:3,23,896,test4:896,test:3,9,10,12,14,21,23,37,48,901,904,906,916,917,940,947,test_html:906,testdir:41,testus:3,23,texinfo:0,text:6,23,28,36,37,46,169,365,825,834,868,909,943,tgt:3,14,20,23,26,37,46,48,220,342,343,908,909,916,937,944,than:3,4,5,6,10,12,14,15,19,20,21,23,24,25,26,28,32,35,37,38,39,43,53,56,230,279,375,404,895,899,902,909,912,913,916,920,922,936,940,thei:3,6,9,14,15,20,21,23,28,33,34,37,38,39,41,43,46,229,325,375,729,845,894,895,898,902,904,908,916,929,936,937,948,951,them:3,14,15,20,22,23,24,25,29,32,34,37,39,41,46,82,84,253,330,344,403,729,895,902,904,916,917,921,922,932,937,939,951,themselv:6,23,theodor:917,theori:917,therebi:950,therefor:22,23,25,39,908,929,thereof:917,thi:0,2,3,4,5,6,8,9,10,11,12,14,15,17,19,20,21,22,23,24,25,26,27,28,32,33,34,35,36,37,38,39,40,41,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,98,99,100,101,102,103,104,105,107,113,114,116,117,119,120,122,123,124,125,126,129,130,133,136,137,139,141,144,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,243,245,246,252,253,254,258,260,261,262,264,265,266,267,270,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,317,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,363,364,368,371,373,375,376,378,380,382,383,385,386,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,726,727,728,729,733,734,735,737,830,848,882,883,894,895,899,900,901,902,903,904,908,909,913,914,915,916,917,918,920,922,924,926,927,928,929,930,932,933,934,936,937,939,940,941,943,944,946,950,951,think:38,921,936,third:21,28,36,37,908,916,917,951,thorough:39,those:3,6,14,15,19,21,23,25,26,34,39,43,46,904,906,912,916,917,920,922,925,926,929,946,950,951,though:14,902,937,thousand:24,thread:24,845,895,904,916,threadsaf:285,three:14,24,26,35,39,40,375,908,916,937,951,threeparamopen:787,through:15,16,20,21,23,24,28,29,33,34,35,39,46,230,282,386,387,416,908,913,916,927,936,937,throughput:20,24,thu:23,899,904,944,ticket:2,3,5,6,12,14,15,16,19,20,21,22,26,28,33,34,35,36,37,38,39,41,43,46,48,153,159,183,195,223,229,235,247,260,264,267,322,330,333,342,359,363,364,375,545,548,551,652,661,743,758,807,811,821,823,824,830,831,843,844,881,882,884,895,896,908,916,919,920,928,929,934,935,936,939,940,941,944,946,947,950,951,ticket_authdata:195,ticket_flag:5,23,824,908,ticket_info:822,ticket_lifetim:21,33,tied:927,tightli:14,28,32,900,till:844,time:0,2,3,5,6,9,10,14,15,19,20,21,22,23,24,26,28,34,35,36,37,39,41,43,44,48,136,158,224,228,235,245,260,275,356,359,360,398,733,750,751,806,822,823,824,830,831,844,848,882,894,895,897,899,900,904,905,908,909,913,915,916,917,922,928,936,937,940,941,944,951,time_offset:10,time_rec:43,916,time_req:43,time_t:6,883,894,timeofdai:410,timeout:14,20,36,timeret:396,timestamp:6,11,14,21,25,37,40,48,66,83,325,326,331,336,342,343,356,360,396,522,529,670,822,848,852,873,883,894,898,899,908,909,910,912,913,916,929,941,timestampp:395,titl:901,917,tkt:824,tkt_flg_anonym:787,tkt_flg_enc_pa_rep:787,tkt_flg_forward:787,tkt_flg_hw_auth:787,tkt_flg_initi:787,tkt_flg_invalid:787,tkt_flg_may_postd:787,tkt_flg_ok_as_deleg:787,tkt_flg_postdat:787,tkt_flg_pre_auth:787,tkt_flg_proxi:787,tkt_flg_proxiabl:787,tkt_flg_renew:787,tkt_flg_transit_policy_check:787,tkt_life:259,838,tktpolici:3,5,23,tls:22,tlyu:3,23,tmp:3,15,21,34,899,905,915,937,944,951,tmpbuild:902,tmpdir:899,951,tmppolici:5,23,todd:917,todo:936,togeth:15,token:16,20,21,46,368,598,727,728,729,731,734,735,911,916,922,929,940,token_flag:879,token_id:877,token_len:43,tokenid:736,tokeninfo:369,736,876,toler:21,tom:3,too:3,23,56,100,103,119,267,288,290,306,tool:6,23,901,903,916,921,toolkit:901,top:10,39,895,902,903,906,top_srcdir:906,topic:0,30,34,topolog:4,tort:917,tortiou:917,total:20,25,913,940,944,toward:0,23,tr_content:888,tr_type:888,trace:48,887,916,951,trace_log:41,track:3,6,9,23,35,899,934,trademark:917,tradit:6,35,traffic:29,trail:20,38,944,trailer:43,48,538,transact:24,951,transcript:909,transfer:4,37,transform:904,transit:20,21,24,359,541,550,673,693,831,888,937,940,941,946,transitori:14,translat:21,56,916,transmiss:17,transmit:23,43,279,404,916,929,transpar:951,transport:23,39,279,404,travers:6,23,treat:3,21,36,38,43,54,342,350,707,883,908,940,946,treatment:39,tree:0,22,23,24,34,903,904,906,922,925,932,tri:20,21,25,44,359,414,916,923,trigger:899,trillium:15,32,937,trim:99,287,trip:40,916,929,tripl:14,20,26,916,trivial:25,916,troubl:42,troubleshoot:30,34,true_principal_nam:859,truncat:913,937,trust:20,21,29,37,43,268,940,tryagain:920,tty04:20,tty:5,23,tune:22,39,tupl:3,23,turn:8,21,24,33,35,40,352,361,904,944,twice:3,23,24,34,908,927,936,942,two:3,18,20,21,23,24,26,28,34,35,37,38,48,53,361,896,908,909,912,916,918,922,930,937,940,944,txt:6,34,39,type:2,3,5,6,10,15,16,21,23,25,28,30,32,34,38,39,46,48,91,93,95,98,99,100,102,103,104,108,112,113,114,115,116,124,125,126,129,130,151,152,153,161,163,184,189,195,223,224,229,280,287,288,289,290,294,295,298,299,310,311,315,317,331,333,335,344,389,421,500,541,647,677,748,754,798,811,819,825,830,852,854,857,866,867,881,883,888,889,894,898,902,905,908,909,910,912,913,916,918,920,921,922,925,926,927,928,929,930,931,932,933,936,937,940,941,944,946,950,951,typedef:43,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,typic:4,15,20,21,26,33,38,39,43,46,98,253,906,915,918,920,921,926,927,929,933,940,946,u2u:946,ubuntu:42,916,ucb:944,udp:10,15,20,21,29,39,279,404,916,931,udp_preference_limit:21,uid:21,43,895,899,915,944,950,951,uid_t:43,uidnumb:895,uint16_t:890,uint32_t:883,891,894,uint8_t:856,uint_max:767,768,786,ulog:20,23,umich:917,unabl:17,21,23,unalloc:280,unam:28,unambigu:245,unansw:875,unauthent:32,unavail:23,34,39,unchang:3,14,15,944,unclean:24,uncommon:899,uncondition:228,904,unconfigur:39,906,undefin:944,under:3,5,6,10,20,21,22,23,38,155,159,899,902,913,916,917,underli:43,underneath:22,underscor:21,917,understand:46,undertaken:0,unenc_authdata:844,unencapsul:916,unencrypt:32,356,811,821,843,844,unescap:6,unexport:922,unfinish:929,unicod:917,unifi:0,unimpl:921,unimport:908,uninterrupt:14,uniqu:3,15,43,48,265,414,644,646,895,922,unit:896,917,937,univers:917,unix:6,15,20,21,28,31,36,43,921,922,932,unkei:46,unknown:12,38,41,616,908,946,unless:2,3,6,11,14,19,20,21,23,26,28,32,34,43,315,386,414,416,899,900,916,930,944,948,unlik:14,40,895,899,916,922,937,unlimit:917,unlink:6,23,unlock:23,35,916,unlockit:3,20,23,24,unmodifi:917,944,unnecessari:23,unpack:903,unpars:43,48,407,409,unpleas:14,unport:917,unprint:3,23,unqualifi:33,unquot:6,unrecogn:904,unrestrict:32,900,unser:43,unset:43,48,171,951,unsign:91,92,93,94,97,111,116,120,279,311,361,404,407,409,803,809,812,816,827,846,851,855,857,889,894,unspecifi:21,951,unstabl:927,unsuccess:37,unsupport:37,904,unswapp:895,untest:904,until:3,6,14,21,23,43,894,895,899,904,913,916,937,untrust:43,951,unus:149,265,352,375,916,unusu:28,37,unwrap:43,48,updat:2,4,6,8,9,14,20,21,22,24,26,34,35,99,100,102,103,224,287,288,289,290,695,698,904,909,916,925,934,update_princ_encrypt:14,23,update_rel:932,upgrad:21,23,26,34,39,916,upn:20,21,350,637,639,705,916,upon:6,8,23,944,upper:3,19,23,39,942,uppercas:21,930,951,upstream:23,904,916,upstreamhostnam:23,uri:3,5,20,21,23,33,34,39,916,url:20,24,29,39,usa:917,usabl:48,usag:20,21,37,43,99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,845,894,909,910,943,944,usc:944,use:0,3,4,5,6,7,8,14,15,16,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,48,55,78,105,223,236,268,275,315,329,344,359,375,389,403,407,414,863,864,882,894,899,901,902,903,904,906,908,912,915,916,917,918,919,920,921,922,925,929,932,933,934,936,937,940,943,944,946,950,951,use_mkei:14,23,usec:811,822,834,873,used:2,3,4,5,6,7,8,9,10,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,34,36,37,38,39,40,41,43,46,56,81,98,100,103,121,129,144,223,224,227,228,229,235,241,247,248,254,258,260,264,267,277,288,290,298,315,321,325,326,327,329,330,331,344,345,352,356,359,360,375,403,405,414,416,738,823,845,854,864,868,883,894,895,898,899,900,901,908,909,912,913,915,916,917,919,920,921,922,923,929,932,934,937,939,940,941,942,943,944,946,948,949,951,useful:8,9,25,26,33,39,69,74,895,899,904,917,934,943,946,947,951,useless:14,user:0,3,5,6,8,14,15,16,19,20,21,22,23,25,26,33,34,35,36,37,38,39,41,43,48,56,90,136,169,224,227,326,330,331,333,361,551,641,662,728,735,868,895,896,899,901,902,904,906,914,915,916,917,920,933,934,936,937,939,940,942,944,946,949,950,951,user_dn:5,23,userconfig:21,userdata:326,331,userdata_out:356,360,userid:21,904,usernam:3,12,21,23,34,36,37,43,319,673,937,940,userok:930,userpolici:5,23,userprincipalnam:20,uses:2,3,4,14,15,18,19,20,21,22,23,24,26,28,35,36,37,39,40,43,45,101,246,329,382,383,406,417,419,883,895,899,908,909,910,912,916,922,932,942,943,951,using:3,6,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,29,33,34,36,37,38,39,40,41,43,46,48,113,117,125,129,156,228,247,250,267,279,294,298,300,325,327,331,344,354,359,366,375,378,404,618,874,895,898,903,904,906,908,910,913,916,921,922,923,929,930,936,937,940,941,944,946,947,949,950,951,usr:5,8,12,20,21,23,34,904,906,915,943,944,usual:3,10,12,20,21,23,25,35,37,39,46,99,287,895,898,904,908,921,937,946,951,utc:23,utf:46,350,365,373,707,916,917,util:22,23,34,39,47,902,904,917,939,951,uucp:20,v4_instance_convert:21,v4_realm:21,v4cred:51,v5cred:51,va_list:48,92,94,vagu:904,val:198,199,200,201,202,203,204,206,207,208,209,211,212,215,218,219,221,222,valid:20,21,23,39,43,48,66,83,109,124,129,153,160,224,235,248,260,269,275,298,301,330,333,342,343,345,350,359,365,366,408,414,882,895,896,901,908,912,916,928,937,940,946,950,951,valid_int_bit:787,valid_uint_bit:787,valu:3,5,6,10,14,15,16,19,20,21,22,23,24,25,26,28,33,34,36,37,38,39,43,46,48,66,83,117,125,126,136,151,153,156,166,224,245,248,252,263,265,269,296,301,333,368,369,371,375,386,388,397,720,726,727,729,731,736,738,794,795,796,835,839,852,863,864,883,894,895,896,898,899,904,905,906,908,909,910,912,913,916,920,922,929,930,932,937,939,940,941,943,944,949,951,valuabl:46,917,vaniti:38,vararg:91,vari:15,33,903,915,939,940,variabl:2,3,4,5,6,7,8,9,10,11,12,15,16,19,20,21,23,24,25,28,30,34,35,37,38,39,40,41,43,48,93,136,141,155,269,282,386,387,895,898,899,905,916,932,933,939,940,941,942,944,945,946,947,variad:91,417,419,variant:23,904,916,922,varieti:26,variou:14,30,43,359,901,905,916,937,vendor:736,877,943,verbatim:917,verbos:3,6,15,23,902,916,940,veri:14,20,21,23,932,verif:20,21,34,43,46,48,414,895,935,937,verifi:5,20,21,23,34,37,43,48,241,356,357,358,359,360,361,899,903,916,920,929,936,937,944,verifier_cred_handl:922,verify_ap_req_nofail:21,versa:37,916,version:0,2,3,5,6,9,10,14,15,20,23,24,26,29,38,42,43,44,48,155,228,247,310,315,363,375,616,721,819,821,843,848,881,894,898,902,903,904,906,908,910,912,913,916,917,921,927,931,941,943,944,946,947,951,verto:904,917,vesion:321,405,veto:928,via:0,3,6,8,20,21,23,34,35,46,48,274,386,402,824,916,922,924,944,950,vice:37,916,view:8,23,34,935,view_polici:23,viola:15,virtual:15,21,visibl:14,23,25,916,visit:937,vista:26,916,visual:916,vnder:14,vno:3,14,23,310,315,848,volum:916,vopt:46,vpath:902,903,vprintf:417,418,419,vtabl:920,921,929,932,vulner:14,23,32,46,916,934,wai:21,23,28,39,43,46,126,236,250,375,894,895,896,898,904,906,916,917,925,930,936,937,949,wait:8,20,23,39,wake:15,walk:6,23,936,want:3,23,28,34,545,551,902,931,936,937,944,warn:3,23,26,245,906,916,917,warranti:917,wasn:44,weak:14,20,21,26,41,web:34,895,916,week:5,23,weight:39,well:14,21,23,34,38,43,46,343,648,901,904,916,923,wellknown:37,46,502,761,went:937,were:14,15,21,34,43,414,618,895,916,917,937,what:6,14,19,20,21,23,26,38,43,899,920,921,929,933,936,937,943,whatev:39,whatsoev:917,when:3,4,6,8,9,10,12,14,15,16,17,20,21,22,23,26,28,29,33,34,36,37,38,39,40,41,43,46,49,65,67,68,72,73,76,77,78,79,85,91,92,93,111,113,115,125,126,132,136,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,228,229,230,231,235,236,250,254,258,260,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,352,354,355,356,357,359,360,361,363,375,389,401,403,405,406,408,736,737,738,895,898,904,906,908,913,915,916,918,922,923,927,930,932,933,934,936,937,939,940,941,943,944,946,949,951,whenev:46,where:3,4,6,7,8,14,15,17,20,21,23,25,28,39,43,46,317,389,894,895,898,899,902,903,904,909,916,921,937,940,944,951,whether:4,6,8,10,14,20,21,28,35,36,43,46,48,105,223,241,242,243,245,249,253,255,319,407,903,909,916,917,919,926,933,937,944,which:3,4,5,6,7,8,9,10,11,12,14,15,19,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,126,173,195,229,230,245,250,280,310,330,359,366,368,371,372,882,883,894,895,898,899,901,902,903,904,905,908,909,910,912,913,915,916,917,918,920,921,922,925,926,927,928,929,931,932,933,937,940,943,944,946,949,950,951,whichev:15,whitespac:3,20,21,23,who:0,5,16,20,23,25,34,37,936,937,whoami:921,whole:23,37,141,155,342,whom:917,936,whose:3,5,10,15,17,19,21,23,34,38,40,43,46,132,217,229,908,912,937,950,wicker:921,wicker_appear:921,wicker_brac:921,wicker_construct:921,wicker_foot:921,wicker_materi:921,wicker_slat:921,wide:21,29,36,wiki:42,902,916,wild:3,23,wildcard:19,20,916,949,willi:14,willing:20,21,26,win:917,winbind:28,winbind_krb5_loc:28,window:21,26,28,29,42,301,382,383,637,639,684,701,895,899,901,913,916,921,922,932,937,wish:16,21,34,39,43,250,902,903,904,905,917,922,933,936,937,951,with_realm:300,341,343,within:3,15,20,21,23,24,34,35,39,43,48,132,154,252,261,356,360,365,373,386,845,895,910,916,917,922,940,949,951,without:3,14,19,20,21,23,24,28,32,34,35,36,37,43,133,368,371,538,864,895,899,902,904,913,916,917,936,937,944,951,wkt:11,won:21,37,937,worcest:917,word:21,34,937,work:2,3,4,6,21,23,34,35,36,39,40,43,895,904,916,917,929,930,934,936,937,951,workdai:33,worker:10,24,workflow:14,workstat:46,worri:22,902,951,wors:21,worst:14,worth:32,would:5,6,14,16,17,20,21,23,25,28,32,34,37,38,39,40,43,46,900,916,922,936,937,943,950,951,wrap:23,48,300,320,922,wrapper:887,909,910,wrfile:14,writabl:15,34,316,932,write:0,6,8,10,11,20,21,22,23,24,28,34,35,251,352,387,895,913,916,921,932,951,writeabl:302,writer:0,written:3,4,155,848,898,913,917,wrong:35,37,917,937,944,wsgi:29,www:22,42,906,916,x11r6:902,x509:37,916,940,x509_anchor:21,940,x509_proxi:21,x509_proxy_ca:21,x509_user_ident:16,21,940,x86:904,916,x86_64:904,916,xconsortium:902,xml:906,xore:21,359,xst:3,15,xvm:14,xyz:951,yacc:904,year:45,896,916,yes:3,5,23,904,940,yet:6,21,23,26,34,37,38,895,904,925,937,yflag:904,yield:929,you:0,3,5,12,15,16,17,20,21,22,23,24,28,32,33,34,35,37,39,40,41,735,896,900,902,903,904,905,906,917,934,936,937,939,944,951,your:0,12,17,20,21,23,26,32,33,34,37,39,902,903,904,917,925,935,937,939,948,951,your_princnam:37,your_realmnam:37,yourdir:34,yourself:937,951,yymmddhhmmss:896,yyyi:896,yyyymmddhhmmss:896,zanarotti:46,zephyr:14,917,zero:3,21,24,39,43,44,48,129,130,203,241,245,260,261,284,298,299,310,738,740,863,908,909,912,913,916,921,zone:14,39,896,zonetest:14},titles:"Contributing to the MIT Kerberos Documentation","Administration programs","k5srvutil","kadmin","kadmind","kdb5_ldap_util","kdb5_util","kprop","kpropd","kproplog","krb5kdc","ktutil","sserver","Advanced topics","Retiring DES","Application servers","Authentication indicators","Backups of secure hosts","Configuration Files","kadm5.acl","kdc.conf","krb5.conf","Configuring Kerberos with OpenLDAP back-end","Database administration","Database types","Addressing dictionary attack risks","Encryption types","Environment variables","Host configuration","HTTPS proxy configuration","For administrators","Installation guide","UNIX Application Servers","Installing and configuring UNIX client machines","Installing KDCs","Account lockout","OTP Preauthentication","PKINIT configuration","Principal names and DNS","Realm configuration decisions","SPAKE Preauthentication","Troubleshooting","Various links","Developing with GSSAPI","Differences between Heimdal and MIT Kerberos API","For application developers","Initial credentials","Principal manipulation and parsing","krb5 API","krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.","krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.","krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.","krb5_address_compare - Compare two Kerberos addresses.","krb5_address_order - Return an ordering of the specified addresses.","krb5_address_search - Search a list of addresses for a specified address.","krb5_allow_weak_crypto - Allow the application to override the profile\u2019s allow_weak_crypto setting.","krb5_aname_to_localname - Convert a principal name to a local name.","krb5_anonymous_principal - Build an anonymous principal.","krb5_anonymous_realm - Return an anonymous realm data.","krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.","krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.","krb5_auth_con_free - Free a krb5_auth_context structure.","krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.","krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.","krb5_auth_con_getaddrs - Retrieve address fields from an auth context.","krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.","krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.","krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.","krb5_auth_con_getkey_k - Retrieve the session key from an auth context.","krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.","krb5_auth_con_getlocalsubkey","krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.","krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.","krb5_auth_con_getremotesubkey","krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.","krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.","krb5_auth_con_init - Create and initialize an authentication context.","krb5_auth_con_initivector - Cause an auth context to use cipher state.","krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.","krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.","krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.","krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.","krb5_auth_con_setports - Set local and remote port fields in an auth context.","krb5_auth_con_setrcache - Set the replay cache in an auth context.","krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.","krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.","krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.","krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.","krb5_auth_con_setuseruserkey - Set the session key in an auth context.","krb5_build_principal - Build a principal name using null-terminated strings.","krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.","krb5_build_principal_ext - Build a principal name using length-counted strings.","krb5_build_principal_va","krb5_c_block_size - Return cipher block size.","krb5_c_checksum_length - Return the length of checksums for a checksum type.","krb5_c_crypto_length - Return a length of a message field specific to the encryption type.","krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.","krb5_c_decrypt - Decrypt data using a key (operates on keyblock).","krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).","krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).","krb5_c_encrypt - Encrypt data using a key (operates on keyblock).","krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).","krb5_c_encrypt_length - Compute encrypted data length.","krb5_c_enctype_compare - Compare two encryption types.","krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .","krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.","krb5_c_init_state - Initialize a new cipher state.","krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.","krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.","krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.","krb5_c_keylengths - Return length of the specified key in bytes.","krb5_c_make_checksum - Compute a checksum (operates on keyblock).","krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)","krb5_c_make_random_key - Generate an enctype-specific random encryption key.","krb5_c_padding_length - Return a number of padding octets.","krb5_c_prf - Generate enctype-specific pseudo-random bytes.","krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.","krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.","krb5_c_random_add_entropy","krb5_c_random_make_octets - Generate pseudo-random bytes.","krb5_c_random_os_entropy","krb5_c_random_seed","krb5_c_random_to_key - Generate an enctype-specific key from random data.","krb5_c_string_to_key - Convert a string (such a password) to a key.","krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.","krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.","krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.","krb5_c_verify_checksum - Verify a checksum (operates on keyblock).","krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).","krb5_calculate_checksum","krb5_cc_cache_match - Find a credential cache with a specified client principal.","krb5_cc_close - Close a credential cache handle.","krb5_cc_copy_creds - Copy a credential cache.","krb5_cc_default - Resolve the default credential cache name.","krb5_cc_default_name - Return the name of the default credential cache.","krb5_cc_destroy - Destroy a credential cache.","krb5_cc_dup - Duplicate ccache handle.","krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.","krb5_cc_gen_new","krb5_cc_get_config - Get a configuration value from a credential cache.","krb5_cc_get_flags - Retrieve flags from a credential cache structure.","krb5_cc_get_full_name - Retrieve the full name of a credential cache.","krb5_cc_get_name - Retrieve the name, but not type of a credential cache.","krb5_cc_get_principal - Get the default principal of a credential cache.","krb5_cc_get_type - Retrieve the type of a credential cache.","krb5_cc_initialize - Initialize a credential cache.","krb5_cc_move - Move a credential cache.","krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.","krb5_cc_next_cred - Retrieve the next entry from the credential cache.","krb5_cc_remove_cred - Remove credentials from a credential cache.","krb5_cc_resolve - Resolve a credential cache name.","krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.","krb5_cc_select - Select a credential cache to use with a server principal.","krb5_cc_set_config - Store a configuration value in a credential cache.","krb5_cc_set_default_name - Set the default credential cache name.","krb5_cc_set_flags - Set options flags on a credential cache.","krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.","krb5_cc_store_cred - Store credentials in a credential cache.","krb5_cc_support_switch - Determine whether a credential cache type supports switching.","krb5_cc_switch - Make a credential cache the primary cache for its collection.","krb5_cccol_cursor_free - Free a credential cache collection cursor.","krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.","krb5_cccol_cursor_next - Get the next credential cache in the collection.","krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.","krb5_change_password - Change a password for an existing Kerberos account.","krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.","krb5_checksum_size","krb5_chpw_message - Get a result message for changing or setting a password.","krb5_cksumtype_to_string - Convert a checksum type to a string.","krb5_clear_error_message - Clear the extended error message in a context.","krb5_copy_addresses - Copy an array of addresses.","krb5_copy_authdata - Copy an authorization data list.","krb5_copy_authenticator - Copy a krb5_authenticator structure.","krb5_copy_checksum - Copy a krb5_checksum structure.","krb5_copy_context - Copy a krb5_context structure.","krb5_copy_creds - Copy a krb5_creds structure.","krb5_copy_data - Copy a krb5_data object.","krb5_copy_error_message - Copy the most recent extended error message from one context to another.","krb5_copy_keyblock - Copy a keyblock.","krb5_copy_keyblock_contents - Copy the contents of a keyblock.","krb5_copy_principal - Copy a principal.","krb5_copy_ticket - Copy a krb5_ticket structure.","krb5_decode_authdata_container - Unwrap authorization data.","krb5_decode_ticket - Decode an ASN.1-formatted ticket.","krb5_decrypt","krb5_deltat_to_string - Convert a relative time value to a string.","krb5_eblock_enctype","krb5_encode_authdata_container - Wrap authorization data in a container.","krb5_encrypt","krb5_encrypt_size","krb5_enctype_to_name - Convert an encryption type to a name or alias.","krb5_enctype_to_string - Convert an encryption type to a string.","krb5_expand_hostname - Canonicalize a hostname, possibly using name service.","krb5_find_authdata - Find authorization data elements.","krb5_finish_key","krb5_finish_random_key","krb5_free_addresses - Free the data stored in array of addresses.","krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.","krb5_free_authdata - Free the storage assigned to array of authentication data.","krb5_free_authenticator - Free a krb5_authenticator structure.","krb5_free_checksum - Free a krb5_checksum structure.","krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.","krb5_free_cksumtypes - Free an array of checksum types.","krb5_free_context - Free a krb5 library context.","krb5_free_cred_contents - Free the contents of a krb5_creds structure.","krb5_free_creds - Free a krb5_creds structure.","krb5_free_data - Free a krb5_data structure.","krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.","krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .","krb5_free_enctypes - Free an array of encryption types.","krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .","krb5_free_error_message - Free an error message generated by krb5_get_error_message() .","krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .","krb5_free_keyblock - Free a krb5_keyblock structure.","krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.","krb5_free_keytab_entry_contents - Free the contents of a key table entry.","krb5_free_principal - Free the storage assigned to a principal.","krb5_free_string - Free a string allocated by a krb5 function.","krb5_free_tgt_creds - Free an array of credential structures.","krb5_free_ticket - Free a ticket.","krb5_free_unparsed_name - Free a string representation of a principal.","krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.","krb5_get_credentials - Get an additional ticket.","krb5_get_credentials_renew","krb5_get_credentials_validate","krb5_get_default_realm - Retrieve the default realm.","krb5_get_error_message - Get the (possibly extended) error message for a code.","krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.","krb5_get_fallback_host_realm","krb5_get_host_realm - Get the Kerberos realm names for a host.","krb5_get_in_tkt_with_keytab","krb5_get_in_tkt_with_password","krb5_get_in_tkt_with_skey","krb5_get_init_creds_keytab - Get initial credentials using a key table.","krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.","krb5_get_init_creds_opt_free - Free initial credential options.","krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.","krb5_get_init_creds_opt_init","krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.","krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.","krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.","krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.","krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.","krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.","krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.","krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.","krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.","krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.","krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.","krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.","krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.","krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.","krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.","krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.","krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.","krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.","krb5_get_init_creds_password - Get initial credentials using a password.","krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.","krb5_get_profile - Retrieve configuration profile from the context.","krb5_get_prompt_types - Get prompt types array from a context.","krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.","krb5_get_server_rcache - Generate a replay cache object for server use and open it.","krb5_get_time_offsets - Return the time offsets from the os context.","krb5_get_validated_creds - Get validated credentials from the KDC.","krb5_init_context - Create a krb5 library context.","krb5_init_context_profile - Create a krb5 library context using a specified profile.","krb5_init_creds_free - Free an initial credentials context.","krb5_init_creds_get - Acquire credentials using an initial credentials context.","krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.","krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.","krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.","krb5_init_creds_init - Create a context for acquiring initial credentials.","krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.","krb5_init_creds_set_password - Set a password for acquiring initial credentials.","krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.","krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.","krb5_init_keyblock - Initialize an empty krb5_keyblock .","krb5_init_random_key","krb5_init_secure_context - Create a krb5 library context using only configuration files.","krb5_is_config_principal - Test whether a principal is a configuration principal.","krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.","krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.","krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.","krb5_k_decrypt - Decrypt data using a key (operates on opaque key).","krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).","krb5_k_encrypt - Encrypt data using a key (operates on opaque key).","krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).","krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.","krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.","krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.","krb5_k_make_checksum - Compute a checksum (operates on opaque key).","krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)","krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).","krb5_k_reference_key - Increment the reference count on a key.","krb5_k_verify_checksum - Verify a checksum (operates on opaque key).","krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).","krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.","krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.","krb5_kt_add_entry - Add a new entry to a key table.","krb5_kt_client_default - Resolve the default client key table.","krb5_kt_close - Close a key table handle.","krb5_kt_default - Resolve the default key table.","krb5_kt_default_name - Get the default key table name.","krb5_kt_dup - Duplicate keytab handle.","krb5_kt_end_seq_get - Release a keytab cursor.","krb5_kt_free_entry","krb5_kt_get_entry - Get an entry from a key table.","krb5_kt_get_name - Get a key table name.","krb5_kt_get_type - Return the type of a key table.","krb5_kt_have_content - Check if a keytab exists and contains entries.","krb5_kt_next_entry - Retrieve the next entry from the key table.","krb5_kt_read_service_key - Retrieve a service key from a key table.","krb5_kt_remove_entry - Remove an entry from a key table.","krb5_kt_resolve - Get a handle for a key table.","krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.","krb5_kuserok - Determine if a principal is authorized to log in as a local user.","krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.","krb5_marshal_credentials - Serialize a krb5_creds object.","krb5_merge_authdata - Merge two authorization data lists into a new list.","krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.","krb5_mk_error - Format and encode a KRB_ERROR message.","krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.","krb5_mk_priv - Format a KRB-PRIV message.","krb5_mk_rep - Format and encrypt a KRB_AP_REP message.","krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.","krb5_mk_req - Create a KRB_AP_REQ message.","krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.","krb5_mk_safe - Format a KRB-SAFE message.","krb5_os_localaddr - Return all interface addresses for this host.","krb5_pac_add_buffer - Add a buffer to a PAC handle.","krb5_pac_free - Free a PAC handle.","krb5_pac_get_buffer - Retrieve a buffer value from a PAC.","krb5_pac_get_client_info - Read client information from a PAC.","krb5_pac_get_types - Return an array of buffer types in a PAC handle.","krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.","krb5_pac_parse - Unparse an encoded PAC into a new handle.","krb5_pac_sign","krb5_pac_sign_ext","krb5_pac_verify - Verify a PAC.","krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.","krb5_parse_name - Convert a string principal name to a krb5_principal structure.","krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.","krb5_prepend_error_message - Add a prefix to the message for an error code.","krb5_principal2salt - Convert a principal name into the default salt for that principal.","krb5_principal_compare - Compare two principals.","krb5_principal_compare_any_realm - Compare two principals ignoring realm components.","krb5_principal_compare_flags - Compare two principals with additional flags.","krb5_process_key","krb5_prompter_posix - Prompt user for password.","krb5_random_key","krb5_rd_cred - Read and validate a KRB-CRED message.","krb5_rd_error - Decode a KRB-ERROR message.","krb5_rd_priv - Process a KRB-PRIV message.","krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.","krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.","krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.","krb5_rd_safe - Process KRB-SAFE message.","krb5_read_password - Read a password from keyboard input.","krb5_realm_compare - Compare the realms of two principals.","krb5_recvauth - Server function for sendauth protocol.","krb5_recvauth_version - Server function for sendauth protocol with version parameter.","krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.","krb5_responder_list_questions - List the question names contained in the responder context.","krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .","krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.","krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.","krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .","krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.","krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.","krb5_responder_set_answer - Answer a named question in the responder context.","krb5_salttype_to_string - Convert a salt type to a string.","krb5_sendauth - Client function for sendauth protocol.","krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.","krb5_set_default_realm - Override the default realm for the specified context.","krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.","krb5_set_error_message - Set an extended error message for an error code.","krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.","krb5_set_kdc_send_hook - Set a KDC pre-send hook function.","krb5_set_password - Set a password for a principal using specified credentials.","krb5_set_password_using_ccache - Set a password for a principal using cached credentials.","krb5_set_principal_realm - Set the realm field of a principal.","krb5_set_real_time - Set time offset field in a krb5_context structure.","krb5_set_trace_callback - Specify a callback function for trace events.","krb5_set_trace_filename - Specify a file name for directing trace events.","krb5_sname_match - Test whether a principal matches a matching principal.","krb5_sname_to_principal - Generate a full principal name from a service name.","krb5_string_to_cksumtype - Convert a string to a checksum type.","krb5_string_to_deltat - Convert a string to a delta time value.","krb5_string_to_enctype - Convert a string to an encryption type.","krb5_string_to_key","krb5_string_to_salttype - Convert a string to a salt type.","krb5_string_to_timestamp - Convert a string to a timestamp.","krb5_timeofday - Retrieve the current time with context specific time offset adjustment.","krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.","krb5_timestamp_to_string - Convert a timestamp to a string.","krb5_tkt_creds_free - Free a TGS request context.","krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.","krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.","krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.","krb5_tkt_creds_init - Create a context to get credentials from a KDC\u2019s Ticket Granting Service.","krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.","krb5_unmarshal_credentials - Deserialize a krb5_creds object.","krb5_unparse_name - Convert a krb5_principal structure to a string representation.","krb5_unparse_name_ext - Convert krb5_principal structure to string and length.","krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.","krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.","krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.","krb5_use_enctype","krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.","krb5_verify_checksum","krb5_verify_init_creds - Verify initial credentials against a keytab.","krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.","krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.","krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.","krb5_vset_error_message - Set an extended error message for an error code using a va_list.","krb5_vwrap_error_message - Add a prefix to a different error code\u2019s message using a va_list.","krb5_wrap_error_message - Add a prefix to a different error code\u2019s message.","Complete reference - API and datatypes","ADDRTYPE_ADDRPORT","ADDRTYPE_CHAOS","ADDRTYPE_DDP","ADDRTYPE_INET","ADDRTYPE_INET6","ADDRTYPE_IPPORT","ADDRTYPE_ISO","ADDRTYPE_IS_LOCAL","ADDRTYPE_NETBIOS","ADDRTYPE_XNS","AD_TYPE_EXTERNAL","AD_TYPE_FIELD_TYPE_MASK","AD_TYPE_REGISTERED","AD_TYPE_RESERVED","AP_OPTS_ETYPE_NEGOTIATION","AP_OPTS_MUTUAL_REQUIRED","AP_OPTS_RESERVED","AP_OPTS_USE_SESSION_KEY","AP_OPTS_USE_SUBKEY","AP_OPTS_WIRE_MASK","CKSUMTYPE_CMAC_CAMELLIA128","CKSUMTYPE_CMAC_CAMELLIA256","CKSUMTYPE_CRC32","CKSUMTYPE_DESCBC","CKSUMTYPE_HMAC_MD5_ARCFOUR","CKSUMTYPE_HMAC_SHA1_96_AES128","CKSUMTYPE_HMAC_SHA1_96_AES256","CKSUMTYPE_HMAC_SHA1_DES3","CKSUMTYPE_HMAC_SHA256_128_AES128","CKSUMTYPE_HMAC_SHA384_192_AES256","CKSUMTYPE_MD5_HMAC_ARCFOUR","CKSUMTYPE_NIST_SHA","CKSUMTYPE_RSA_MD4","CKSUMTYPE_RSA_MD4_DES","CKSUMTYPE_RSA_MD5","CKSUMTYPE_RSA_MD5_DES","CKSUMTYPE_SHA1","ENCTYPE_AES128_CTS_HMAC_SHA1_96","ENCTYPE_AES128_CTS_HMAC_SHA256_128","ENCTYPE_AES256_CTS_HMAC_SHA1_96","ENCTYPE_AES256_CTS_HMAC_SHA384_192","ENCTYPE_ARCFOUR_HMAC","ENCTYPE_ARCFOUR_HMAC_EXP","ENCTYPE_CAMELLIA128_CTS_CMAC","ENCTYPE_CAMELLIA256_CTS_CMAC","ENCTYPE_DES3_CBC_ENV","ENCTYPE_DES3_CBC_RAW","ENCTYPE_DES3_CBC_SHA","ENCTYPE_DES3_CBC_SHA1","ENCTYPE_DES_CBC_CRC","ENCTYPE_DES_CBC_MD4","ENCTYPE_DES_CBC_MD5","ENCTYPE_DES_CBC_RAW","ENCTYPE_DES_HMAC_SHA1","ENCTYPE_DSA_SHA1_CMS","ENCTYPE_MD5_RSA_CMS","ENCTYPE_NULL","ENCTYPE_RC2_CBC_ENV","ENCTYPE_RSA_ENV","ENCTYPE_RSA_ES_OAEP_ENV","ENCTYPE_SHA1_RSA_CMS","ENCTYPE_UNKNOWN","KDC_OPT_ALLOW_POSTDATE","KDC_OPT_CANONICALIZE","KDC_OPT_CNAME_IN_ADDL_TKT","KDC_OPT_DISABLE_TRANSITED_CHECK","KDC_OPT_ENC_TKT_IN_SKEY","KDC_OPT_FORWARDABLE","KDC_OPT_FORWARDED","KDC_OPT_POSTDATED","KDC_OPT_PROXIABLE","KDC_OPT_PROXY","KDC_OPT_RENEW","KDC_OPT_RENEWABLE","KDC_OPT_RENEWABLE_OK","KDC_OPT_REQUEST_ANONYMOUS","KDC_OPT_VALIDATE","KDC_TKT_COMMON_MASK","KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","KRB5_ANONYMOUS_PRINCSTR","KRB5_ANONYMOUS_REALMSTR","KRB5_AP_REP","KRB5_AP_REQ","KRB5_AS_REP","KRB5_AS_REQ","KRB5_AUTHDATA_AND_OR","KRB5_AUTHDATA_AP_OPTIONS","KRB5_AUTHDATA_AUTH_INDICATOR","KRB5_AUTHDATA_CAMMAC","KRB5_AUTHDATA_ETYPE_NEGOTIATION","KRB5_AUTHDATA_FX_ARMOR","KRB5_AUTHDATA_IF_RELEVANT","KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","KRB5_AUTHDATA_KDC_ISSUED","KRB5_AUTHDATA_MANDATORY_FOR_KDC","KRB5_AUTHDATA_OSF_DCE","KRB5_AUTHDATA_SESAME","KRB5_AUTHDATA_SIGNTICKET","KRB5_AUTHDATA_WIN2K_PAC","KRB5_AUTH_CONTEXT_DO_SEQUENCE","KRB5_AUTH_CONTEXT_DO_TIME","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","KRB5_AUTH_CONTEXT_PERMIT_ALL","KRB5_AUTH_CONTEXT_RET_SEQUENCE","KRB5_AUTH_CONTEXT_RET_TIME","KRB5_AUTH_CONTEXT_USE_SUBKEY","KRB5_CRED","KRB5_CRYPTO_TYPE_CHECKSUM","KRB5_CRYPTO_TYPE_DATA","KRB5_CRYPTO_TYPE_EMPTY","KRB5_CRYPTO_TYPE_HEADER","KRB5_CRYPTO_TYPE_PADDING","KRB5_CRYPTO_TYPE_SIGN_ONLY","KRB5_CRYPTO_TYPE_STREAM","KRB5_CRYPTO_TYPE_TRAILER","KRB5_CYBERSAFE_SECUREID","KRB5_DOMAIN_X500_COMPRESS","KRB5_ENCPADATA_REQ_ENC_PA_REP","KRB5_ERROR","KRB5_FAST_REQUIRED","KRB5_GC_CACHED","KRB5_GC_CANONICALIZE","KRB5_GC_CONSTRAINED_DELEGATION","KRB5_GC_FORWARDABLE","KRB5_GC_NO_STORE","KRB5_GC_NO_TRANSIT_CHECK","KRB5_GC_USER_USER","KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","KRB5_GET_INIT_CREDS_OPT_PROXIABLE","KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","KRB5_GET_INIT_CREDS_OPT_SALT","KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","KRB5_INIT_CONTEXT_KDC","KRB5_INIT_CONTEXT_SECURE","KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","KRB5_INT16_MAX","KRB5_INT16_MIN","KRB5_INT32_MAX","KRB5_INT32_MIN","KRB5_KEYUSAGE_AD_ITE","KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","KRB5_KEYUSAGE_AD_MTE","KRB5_KEYUSAGE_AD_SIGNEDPATH","KRB5_KEYUSAGE_APP_DATA_CKSUM","KRB5_KEYUSAGE_APP_DATA_ENCRYPT","KRB5_KEYUSAGE_AP_REP_ENCPART","KRB5_KEYUSAGE_AP_REQ_AUTH","KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","KRB5_KEYUSAGE_AS_REP_ENCPART","KRB5_KEYUSAGE_AS_REQ","KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","KRB5_KEYUSAGE_CAMMAC","KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","KRB5_KEYUSAGE_FAST_ENC","KRB5_KEYUSAGE_FAST_FINISHED","KRB5_KEYUSAGE_FAST_REP","KRB5_KEYUSAGE_FAST_REQ_CHKSUM","KRB5_KEYUSAGE_GSS_TOK_MIC","KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","KRB5_KEYUSAGE_IAKERB_FINISHED","KRB5_KEYUSAGE_KDC_REP_TICKET","KRB5_KEYUSAGE_KRB_CRED_ENCPART","KRB5_KEYUSAGE_KRB_ERROR_CKSUM","KRB5_KEYUSAGE_KRB_PRIV_ENCPART","KRB5_KEYUSAGE_KRB_SAFE_CKSUM","KRB5_KEYUSAGE_PA_AS_FRESHNESS","KRB5_KEYUSAGE_PA_FX_COOKIE","KRB5_KEYUSAGE_PA_OTP_REQUEST","KRB5_KEYUSAGE_PA_PKINIT_KX","KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","KRB5_KEYUSAGE_PA_SAM_RESPONSE","KRB5_KEYUSAGE_SPAKE","KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AUTH","KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","KRB5_KPASSWD_ACCESSDENIED","KRB5_KPASSWD_AUTHERROR","KRB5_KPASSWD_BAD_VERSION","KRB5_KPASSWD_HARDERROR","KRB5_KPASSWD_INITIAL_FLAG_NEEDED","KRB5_KPASSWD_MALFORMED","KRB5_KPASSWD_SOFTERROR","KRB5_KPASSWD_SUCCESS","KRB5_LRQ_ALL_ACCT_EXPTIME","KRB5_LRQ_ALL_LAST_INITIAL","KRB5_LRQ_ALL_LAST_RENEWAL","KRB5_LRQ_ALL_LAST_REQ","KRB5_LRQ_ALL_LAST_TGT","KRB5_LRQ_ALL_LAST_TGT_ISSUED","KRB5_LRQ_ALL_PW_EXPTIME","KRB5_LRQ_NONE","KRB5_LRQ_ONE_ACCT_EXPTIME","KRB5_LRQ_ONE_LAST_INITIAL","KRB5_LRQ_ONE_LAST_RENEWAL","KRB5_LRQ_ONE_LAST_REQ","KRB5_LRQ_ONE_LAST_TGT","KRB5_LRQ_ONE_LAST_TGT_ISSUED","KRB5_LRQ_ONE_PW_EXPTIME","KRB5_NT_ENTERPRISE_PRINCIPAL","KRB5_NT_ENT_PRINCIPAL_AND_ID","KRB5_NT_MS_PRINCIPAL","KRB5_NT_MS_PRINCIPAL_AND_ID","KRB5_NT_PRINCIPAL","KRB5_NT_SMTP_NAME","KRB5_NT_SRV_HST","KRB5_NT_SRV_INST","KRB5_NT_SRV_XHST","KRB5_NT_UID","KRB5_NT_UNKNOWN","KRB5_NT_WELLKNOWN","KRB5_NT_X500_PRINCIPAL","KRB5_PAC_ATTRIBUTES_INFO","KRB5_PAC_CLIENT_CLAIMS","KRB5_PAC_CLIENT_INFO","KRB5_PAC_CREDENTIALS_INFO","KRB5_PAC_DELEGATION_INFO","KRB5_PAC_DEVICE_CLAIMS","KRB5_PAC_DEVICE_INFO","KRB5_PAC_LOGON_INFO","KRB5_PAC_PRIVSVR_CHECKSUM","KRB5_PAC_REQUESTOR","KRB5_PAC_SERVER_CHECKSUM","KRB5_PAC_TICKET_CHECKSUM","KRB5_PAC_UPN_DNS_INFO","KRB5_PADATA_AFS3_SALT","KRB5_PADATA_AP_REQ","KRB5_PADATA_AS_CHECKSUM","KRB5_PADATA_AS_FRESHNESS","KRB5_PADATA_ENCRYPTED_CHALLENGE","KRB5_PADATA_ENC_SANDIA_SECURID","KRB5_PADATA_ENC_TIMESTAMP","KRB5_PADATA_ENC_UNIX_TIME","KRB5_PADATA_ETYPE_INFO","KRB5_PADATA_ETYPE_INFO2","KRB5_PADATA_FOR_USER","KRB5_PADATA_FX_COOKIE","KRB5_PADATA_FX_ERROR","KRB5_PADATA_FX_FAST","KRB5_PADATA_GET_FROM_TYPED_DATA","KRB5_PADATA_NONE","KRB5_PADATA_OSF_DCE","KRB5_PADATA_OTP_CHALLENGE","KRB5_PADATA_OTP_PIN_CHANGE","KRB5_PADATA_OTP_REQUEST","KRB5_PADATA_PAC_OPTIONS","KRB5_PADATA_PAC_REQUEST","KRB5_PADATA_PKINIT_KX","KRB5_PADATA_PK_AS_REP","KRB5_PADATA_PK_AS_REP_OLD","KRB5_PADATA_PK_AS_REQ","KRB5_PADATA_PK_AS_REQ_OLD","KRB5_PADATA_PW_SALT","KRB5_PADATA_REDHAT_IDP_OAUTH2","KRB5_PADATA_REFERRAL","KRB5_PADATA_S4U_X509_USER","KRB5_PADATA_SAM_CHALLENGE","KRB5_PADATA_SAM_CHALLENGE_2","KRB5_PADATA_SAM_REDIRECT","KRB5_PADATA_SAM_RESPONSE","KRB5_PADATA_SAM_RESPONSE_2","KRB5_PADATA_SESAME","KRB5_PADATA_SPAKE","KRB5_PADATA_SVR_REFERRAL_INFO","KRB5_PADATA_TGS_REQ","KRB5_PADATA_USE_SPECIFIED_KVNO","KRB5_PRINCIPAL_COMPARE_CASEFOLD","KRB5_PRINCIPAL_COMPARE_ENTERPRISE","KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","KRB5_PRINCIPAL_COMPARE_UTF8","KRB5_PRINCIPAL_PARSE_ENTERPRISE","KRB5_PRINCIPAL_PARSE_IGNORE_REALM","KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","KRB5_PRINCIPAL_PARSE_NO_REALM","KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","KRB5_PRINCIPAL_UNPARSE_DISPLAY","KRB5_PRINCIPAL_UNPARSE_NO_REALM","KRB5_PRINCIPAL_UNPARSE_SHORT","KRB5_PRIV","KRB5_PROMPT_TYPE_NEW_PASSWORD","KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","KRB5_PROMPT_TYPE_PASSWORD","KRB5_PROMPT_TYPE_PREAUTH","KRB5_PVNO","KRB5_REALM_BRANCH_CHAR","KRB5_RECVAUTH_BADAUTHVERS","KRB5_RECVAUTH_SKIP_VERSION","KRB5_REFERRAL_REALM","KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","KRB5_RESPONDER_OTP_FORMAT_DECIMAL","KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","KRB5_RESPONDER_QUESTION_OTP","KRB5_RESPONDER_QUESTION_PASSWORD","KRB5_RESPONDER_QUESTION_PKINIT","KRB5_SAFE","KRB5_SAM_MUST_PK_ENCRYPT_SAD","KRB5_SAM_SEND_ENCRYPTED_SAD","KRB5_SAM_USE_SAD_AS_KEY","KRB5_TC_MATCH_2ND_TKT","KRB5_TC_MATCH_AUTHDATA","KRB5_TC_MATCH_FLAGS","KRB5_TC_MATCH_FLAGS_EXACT","KRB5_TC_MATCH_IS_SKEY","KRB5_TC_MATCH_KTYPE","KRB5_TC_MATCH_SRV_NAMEONLY","KRB5_TC_MATCH_TIMES","KRB5_TC_MATCH_TIMES_EXACT","KRB5_TC_NOTICKET","KRB5_TC_OPENCLOSE","KRB5_TC_SUPPORTED_KTYPES","KRB5_TGS_NAME","KRB5_TGS_NAME_SIZE","KRB5_TGS_REP","KRB5_TGS_REQ","KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","KRB5_WELLKNOWN_NAMESTR","LR_TYPE_INTERPRETATION_MASK","LR_TYPE_THIS_SERVER_ONLY","MAX_KEYTAB_NAME_LEN","MSEC_DIRBIT","MSEC_VAL_MASK","SALT_TYPE_AFS_LENGTH","SALT_TYPE_NO_LENGTH","THREEPARAMOPEN","TKT_FLG_ANONYMOUS","TKT_FLG_ENC_PA_REP","TKT_FLG_FORWARDABLE","TKT_FLG_FORWARDED","TKT_FLG_HW_AUTH","TKT_FLG_INITIAL","TKT_FLG_INVALID","TKT_FLG_MAY_POSTDATE","TKT_FLG_OK_AS_DELEGATE","TKT_FLG_POSTDATED","TKT_FLG_PRE_AUTH","TKT_FLG_PROXIABLE","TKT_FLG_PROXY","TKT_FLG_RENEWABLE","TKT_FLG_TRANSIT_POLICY_CHECKED","VALID_INT_BITS","VALID_UINT_BITS","krb5 simple macros","krb524_convert_creds_kdc","krb524_init_ets","krb5_const","krb5_princ_component","krb5_princ_name","krb5_princ_realm","krb5_princ_set_realm","krb5_princ_set_realm_data","krb5_princ_set_realm_length","krb5_princ_size","krb5_princ_type","krb5_roundup","krb5_x","krb5_xc","krb5 types and structures","krb5_address","krb5_addrtype","krb5_ap_rep","krb5_ap_rep_enc_part","krb5_ap_req","krb5_auth_context","krb5_authdata","krb5_authdatatype","krb5_authenticator","krb5_boolean","krb5_cc_cursor","krb5_ccache","krb5_cccol_cursor","krb5_checksum","krb5_cksumtype","krb5_const_pointer","krb5_const_principal","krb5_context","krb5_cred","krb5_cred_enc_part","krb5_cred_info","krb5_creds","krb5_crypto_iov","krb5_cryptotype","krb5_data","krb5_deltat","krb5_enc_data","krb5_enc_kdc_rep_part","krb5_enc_tkt_part","krb5_encrypt_block","krb5_enctype","krb5_error","krb5_error_code","krb5_expire_callback_func","krb5_flags","krb5_get_init_creds_opt","krb5_gic_opt_pa_data","krb5_init_creds_context","krb5_int16","krb5_int32","krb5_kdc_rep","krb5_kdc_req","krb5_key","krb5_keyblock","krb5_keytab","krb5_keytab_entry","krb5_keyusage","krb5_kt_cursor","krb5_kvno","krb5_last_req_entry","krb5_magic","krb5_mk_req_checksum_func","krb5_msgtype","krb5_octet","krb5_pa_data","krb5_pa_pac_req","krb5_pa_server_referral_data","krb5_pa_svr_referral_data","krb5_pac","krb5_pointer","krb5_post_recv_fn","krb5_pre_send_fn","krb5_preauthtype","krb5_principal","krb5_principal_data","krb5_prompt","krb5_prompt_type","krb5_prompter_fct","krb5_pwd_data","krb5_rcache","krb5_replay_data","krb5_responder_context","krb5_responder_fn","krb5_responder_otp_challenge","krb5_responder_otp_tokeninfo","krb5_responder_pkinit_challenge","krb5_responder_pkinit_identity","krb5_response","krb5_ticket","krb5_ticket_times","krb5_timestamp","krb5_tkt_authent","krb5_tkt_creds_context","krb5_trace_callback","krb5_trace_info","krb5_transited","krb5_typed_data","krb5_ui_2","krb5_ui_4","krb5_verify_init_creds_opt","passwd_phrase_element","Year 2038 considerations for uses of krb5_timestamp","Credential cache","Supported date and time formats","Kerberos V5 concepts","keytab","replay cache","stash file","Organization of the source directory","Doing the build","Building Kerberos V5","Options to configure","osconf.hin","How to build this documentation from the source","Copyright","Credential cache file format","KDC cookie format","PKINIT freshness tokens","Protocols and file formats","Keytab file format","Replay cache file format","MIT Kerberos Documentation (1.20.1)","MIT Kerberos defaults","MIT Kerberos features","MIT Kerberos License information","Credential cache selection interface (ccselect)","PKINIT certificate authorization interface (certauth)","Client preauthentication interface (clpreauth)","General plugin concepts","GSSAPI mechanism interface","Host-to-realm interface (hostrealm)","For plugin module developers","Internal pluggable interfaces","kadmin authorization interface (kadm5_auth)","KADM5 hook interface (kadm5_hook)","KDC policy interface (kdcpolicy)","KDC preauthentication interface (kdcpreauth)","Local authorization interface (localauth)","Server location interface (locate)","Configuration interface (profile)","Password quality interface (pwqual)","Resources","For users","Password management","Ticket management","User commands","kdestroy","kinit","klist","kpasswd","krb5-config","ksu","kswitch","kvno","sclient","User config files",".k5identity",".k5login","kerberos",titleterms:{"boolean":59,"byte":112,117,119,121,296,"default":14,28,36,135,136,145,156,210,227,303,305,306,347,377,378,895,898,899,915,"export":43,"function":118,219,257,363,364,375,380,381,386,"import":43,"new":108,149,236,302,322,339,944,"null":91,"public":48,787,802,"return":53,58,95,96,97,111,112,116,136,210,261,266,312,332,337,367,370,"switch":34,160,"while":41,Adding:14,15,23,DES:14,DNS:15,38,Doing:902,For:30,45,924,935,One:46,TGS:378,399,400,401,402,404,THE:944,The:14,32,36,Using:15,902,abbrevi:896,about:23,32,absolut:896,acceptor:43,access:936,account:35,166,936,acl:19,34,acquir:15,271,272,275,276,277,278,279,401,ad_type_extern:432,ad_type_field_type_mask:433,ad_type_regist:434,ad_type_reserv:435,add:34,302,333,346,417,419,420,add_entri:11,add_mkei:6,add_polici:3,23,add_princip:3,23,addit:31,126,224,350,address:25,52,53,54,62,64,82,172,198,240,332,addrtype_addrport:422,addrtype_chao:423,addrtype_ddp:424,addrtype_inet6:426,addrtype_inet:425,addrtype_ipport:427,addrtype_is_loc:429,addrtype_iso:428,addrtype_netbio:430,addrtype_xn:431,adjust:396,admin:39,41,administr:1,23,30,34,advanc:13,advic:32,38,aead:43,100,103,288,290,against:414,alia:192,all:332,alloc:106,212,214,219,236,allow:55,167,244,allow_weak_crypto:55,also:2,3,4,5,6,7,8,9,10,11,12,19,20,21,939,940,941,942,943,944,945,946,947,949,950,951,alter:895,ani:165,anonym:37,46,57,58,241,anoth:179,answer:369,372,373,ap_opts_etype_negoti:436,ap_opts_mutual_requir:437,ap_opts_reserv:438,ap_opts_use_session_kei:439,ap_opts_use_subkei:440,ap_opts_wire_mask:441,api:44,48,421,906,appdefault:21,59,60,applic:14,15,32,38,45,55,archiv:934,argument:92,ark:6,armor:246,247,arrai:98,114,130,172,198,200,204,211,220,263,295,299,325,337,ask:253,asn:185,assign:200,218,attack:25,attribut:43,338,auth:62,63,64,65,67,68,69,71,72,73,74,76,77,79,80,81,82,84,85,86,87,88,89,90,authdata:925,authent:16,23,41,65,78,200,944,author:28,37,173,184,189,195,319,320,322,412,919,925,926,930,944,951,autoconf:902,avail:23,awai:26,back:17,22,background:0,899,backup:17,behavior:19,38,berkelei:24,between:44,binari:902,block:95,buffer:333,335,337,bug:951,build:57,91,92,93,902,903,906,built:285,cach:71,85,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,246,250,251,265,383,895,899,908,913,918,call:48,callback:46,63,80,245,386,cannot:41,canonic:38,194,242,capath:21,caus:79,ccach:138,247,895,ccselect:21,918,cert:41,certauth:21,919,certif:37,41,338,919,cf2:107,chain:41,challeng:365,chang:23,166,169,243,936,change_password:3,23,channel:934,check:165,167,284,313,checksum:63,80,81,96,109,110,111,113,114,127,129,130,170,204,294,295,298,299,390,choos:26,cipher:79,95,106,108,cksumtype_cmac_camellia128:442,cksumtype_cmac_camellia256:443,cksumtype_crc32:444,cksumtype_descbc:445,cksumtype_hmac_md5_arcfour:446,cksumtype_hmac_sha1_96_aes128:447,cksumtype_hmac_sha1_96_aes256:448,cksumtype_hmac_sha1_des3:449,cksumtype_hmac_sha256_128_aes128:450,cksumtype_hmac_sha384_192_aes256:451,cksumtype_md5_hmac_arcfour:452,cksumtype_nist_sha:453,cksumtype_rsa_md4:454,cksumtype_rsa_md4_d:455,cksumtype_rsa_md5:456,cksumtype_rsa_md5_d:457,cksumtype_sha1:458,clean:902,clear:171,clear_list:11,client:15,29,33,37,132,303,336,375,898,920,clock:15,167,close:133,304,clpreauth:21,920,code:228,346,379,417,418,419,420,collect:161,162,163,164,165,895,collis:109,combin:107,command:3,5,6,11,938,common:12,commonli:904,compar:52,105,348,349,350,362,compat:26,complet:421,compon:349,comput:104,107,113,294,concept:897,921,conf:20,21,34,59,60,config:943,948,configur:15,18,22,26,28,29,33,34,35,36,37,39,141,155,262,282,283,904,908,932,connect:41,62,consider:36,894,constrain:43,contain:165,189,313,366,content:18,31,181,203,206,209,216,217,903,924,context:62,63,64,65,67,68,69,71,72,73,74,76,77,78,79,80,81,82,84,85,86,87,88,89,90,171,179,205,262,263,266,268,269,270,271,272,273,274,275,282,365,366,373,377,396,399,400,401,402,403,944,contribut:0,conveni:48,convert:49,50,51,56,125,126,170,187,192,193,344,345,347,374,390,391,392,394,395,397,398,406,407,408,409,cooki:909,copi:134,172,173,174,175,176,177,178,179,180,181,182,183,293,copyright:907,correct:15,count:93,291,297,creat:5,6,23,34,37,41,78,149,268,269,275,282,286,329,330,338,403,944,create_polici:5,cred:223,323,325,354,credenti:15,41,43,46,51,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,220,235,236,237,238,240,241,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,264,267,270,271,272,273,274,275,276,277,278,279,323,325,330,382,383,400,401,403,414,415,416,895,908,918,cross:23,current:167,396,cursor:162,308,daemon:34,dai:410,data:58,99,100,101,102,103,104,124,173,184,189,195,198,200,209,286,287,288,289,290,320,322,365,412,925,databas:3,14,17,23,24,34,39,925,datatyp:421,date:23,896,db2:24,dbdefault:20,dbmodul:20,dce:328,358,decis:39,declar:803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,decod:185,355,368,371,decrement:291,decrypt:99,100,287,288,357,358,359,376,defin:36,del_str:3,deleg:43,delet:23,delete_entri:11,delete_polici:3,23,delete_princip:3,23,delta:391,deprec:48,787,deriv:101,descript:2,3,4,5,6,7,8,9,10,11,12,19,939,940,941,942,943,944,945,946,947,949,950,951,deseri:405,destroi:5,6,23,137,937,destroy_polici:5,determin:160,319,develop:43,45,924,dictionari:25,differ:23,44,419,420,direct:387,directli:48,directori:901,902,904,discoveri:39,document:0,896,906,914,domain_realm:21,dump:6,23,duplic:138,307,durat:896,dure:41,each:34,edit:34,effect:944,element:114,130,195,295,299,empti:280,338,encod:320,324,339,encrypt:20,26,41,97,102,103,104,105,111,115,118,128,192,193,211,244,261,289,290,327,328,378,392,enctyp:26,115,117,124,229,286,292,296,enctype_aes128_cts_hmac_sha1_96:459,enctype_aes128_cts_hmac_sha256_128:460,enctype_aes256_cts_hmac_sha1_96:461,enctype_aes256_cts_hmac_sha384_192:462,enctype_arcfour_hmac:463,enctype_arcfour_hmac_exp:464,enctype_camellia128_cts_cmac:465,enctype_camellia256_cts_cmac:466,enctype_des3_cbc_env:467,enctype_des3_cbc_raw:468,enctype_des3_cbc_sha1:470,enctype_des3_cbc_sha:469,enctype_des_cbc_crc:471,enctype_des_cbc_md4:472,enctype_des_cbc_md5:473,enctype_des_cbc_raw:474,enctype_des_hmac_sha1:475,enctype_dsa_sha1_cm:476,enctype_md5_rsa_cm:477,enctype_nul:478,enctype_rc2_cbc_env:479,enctype_rsa_env:480,enctype_rsa_es_oaep_env:481,enctype_sha1_rsa_cm:482,enctype_unknown:483,end:22,entri:139,150,217,302,310,313,314,316,318,908,912,environ:2,3,4,5,6,7,8,9,10,11,12,27,904,939,940,941,942,944,945,946,947,951,epoch:410,error:12,41,171,179,212,213,228,273,346,355,379,417,418,419,420,etc:38,event:386,387,everi:158,exampl:10,11,15,19,23,46,904,943,949,950,exchang:41,404,execut:944,exist:166,264,313,expans:21,expir:41,245,extend:171,179,228,379,418,extens:43,fact:916,fail:34,41,fast:238,246,247,248,featur:904,916,field:64,83,84,97,209,384,385,file:8,18,20,21,23,32,33,34,282,387,900,908,911,912,913,939,940,941,945,946,948,fill:98,114,295,find:132,195,fine:904,finish:139,firewal:15,flag:66,83,142,157,238,241,242,243,248,249,255,345,350,408,409,format:23,185,223,323,324,325,326,327,328,331,409,896,908,909,911,912,913,forward:223,249,free:61,106,162,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,237,270,291,334,367,370,399,frequent:41,48,fresh:37,910,from:14,15,23,26,59,60,62,63,64,65,66,67,68,69,71,72,73,74,76,77,124,141,142,150,151,153,179,229,238,262,263,264,266,267,272,273,274,286,293,310,314,315,316,335,336,343,361,389,401,402,403,906,921,full:143,389,gener:37,62,115,117,119,121,124,213,265,296,389,915,921,get:15,41,46,63,118,141,145,164,169,223,224,228,231,235,260,263,264,267,273,279,306,310,311,317,403,404,get_init_cr:46,get_polici:3,23,get_princip:3,23,get_str:3,getdat:896,given:365,grant:403,936,gssapi:28,43,922,guid:31,handl:133,138,304,307,317,333,334,337,338,339,has:41,header:98,908,heimdal:44,hin:905,histori:3,14,23,951,hit:291,hook:380,381,927,host:17,28,32,34,41,231,332,923,hostnam:39,194,hostrealm:21,923,how:906,http:29,ident:21,372,ignor:349,includ:253,300,301,increment:23,34,297,indic:16,inform:15,21,23,336,899,917,initi:41,43,46,78,108,147,165,235,236,237,238,240,241,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,270,271,272,273,274,275,276,277,278,279,280,414,415,initialcredenti:242,input:101,250,361,instal:31,33,34,902,904,944,instanc:36,instruct:944,interact:46,interfac:21,48,332,918,919,920,922,923,925,926,927,928,929,930,931,932,933,intern:802,925,interoper:916,interpos:922,iov:43,98,114,130,295,299,irc:934,iter:163,its:161,k5ident:949,k5login:950,k5srvutil:2,kadm5:19,927,kadm5_auth:21,926,kadm5_hook:21,927,kadmin:3,23,926,kadmind:4,921,kdb5_ldap_util:5,kdb5_util:6,kdb:925,kdc:14,20,28,34,35,37,39,41,229,253,264,267,273,279,380,381,403,404,909,915,921,928,929,kdc_opt_allow_postd:484,kdc_opt_canonic:485,kdc_opt_cname_in_addl_tkt:486,kdc_opt_disable_transited_check:487,kdc_opt_enc_tkt_in_skei:488,kdc_opt_forward:489,490,kdc_opt_postd:491,kdc_opt_proxi:492,493,kdc_opt_renew:494,495,kdc_opt_renewable_ok:496,kdc_opt_request_anonym:497,kdc_opt_valid:498,kdc_tkt_common_mask:499,kdcdefault:20,kdcissu:320,412,kdcpolici:928,kdcpreauth:21,929,kdestroi:937,939,kei:14,23,26,67,68,90,99,101,102,107,110,111,112,115,124,125,126,217,235,261,286,287,288,289,290,291,294,295,296,297,298,299,302,303,304,305,306,310,311,312,314,315,316,317,318,376,912,kerbero:0,15,17,22,23,34,39,44,49,50,51,52,127,128,166,231,285,897,903,914,915,916,917,925,937,951,keyblock:67,72,73,76,86,88,99,100,102,103,113,114,129,130,180,181,286,293,keyboard:361,keysalt:20,keytab:15,32,34,38,276,307,308,313,414,898,912,kinit:937,940,kldap:24,klist:937,941,klmdb:24,known:163,kpasswd:942,kprop:7,41,kpropd:8,kproplog:9,krb524_convert_creds_kdc:788,krb524_init_et:789,krb5:21,34,48,59,60,205,219,268,269,282,787,802,943,krb5_425_conv_princip:49,krb5_524_conv_princip:50,krb5_524_convert_cr:51,krb5_address:803,krb5_address_compar:52,krb5_address_ord:53,krb5_address_search:54,krb5_addrtyp:804,krb5_allow_weak_crypto:55,krb5_altauth_att_challenge_respons:500,krb5_aname_to_localnam:56,krb5_anonymous_princip:57,krb5_anonymous_princstr:501,krb5_anonymous_realm:58,krb5_anonymous_realmstr:502,krb5_ap_rep:503,805,krb5_ap_rep_enc_part:199,806,krb5_ap_req:504,807,krb5_appdefault_boolean:59,krb5_appdefault_str:60,krb5_as_rep:505,krb5_as_req:506,krb5_auth_con_fre:61,krb5_auth_con_genaddr:62,krb5_auth_con_get_checksum_func:63,krb5_auth_con_getaddr:64,krb5_auth_con_getauthent:65,krb5_auth_con_getflag:66,krb5_auth_con_getkei:67,krb5_auth_con_getkey_k:68,krb5_auth_con_getlocalseqnumb:69,krb5_auth_con_getlocalsubkei:70,krb5_auth_con_getrcach:71,krb5_auth_con_getrecvsubkei:72,krb5_auth_con_getrecvsubkey_k:73,krb5_auth_con_getremoteseqnumb:74,krb5_auth_con_getremotesubkei:75,krb5_auth_con_getsendsubkei:76,krb5_auth_con_getsendsubkey_k:77,krb5_auth_con_init:78,krb5_auth_con_initivector:79,krb5_auth_con_set_checksum_func:80,krb5_auth_con_set_req_cksumtyp:81,krb5_auth_con_setaddr:82,krb5_auth_con_setflag:83,krb5_auth_con_setport:84,krb5_auth_con_setrcach:85,krb5_auth_con_setrecvsubkei:86,krb5_auth_con_setrecvsubkey_k:87,krb5_auth_con_setsendsubkei:88,krb5_auth_con_setsendsubkey_k:89,krb5_auth_con_setuseruserkei:90,krb5_auth_context:61,66,83,808,krb5_auth_context_do_sequ:521,krb5_auth_context_do_tim:522,krb5_auth_context_generate_local_addr:523,krb5_auth_context_generate_local_full_addr:524,krb5_auth_context_generate_remote_addr:525,krb5_auth_context_generate_remote_full_addr:526,krb5_auth_context_permit_al:527,krb5_auth_context_ret_sequ:528,krb5_auth_context_ret_tim:529,krb5_auth_context_use_subkei:530,krb5_authdata:809,krb5_authdata_and_or:507,krb5_authdata_ap_opt:508,krb5_authdata_auth_ind:509,krb5_authdata_cammac:510,krb5_authdata_etype_negoti:511,krb5_authdata_fx_armor:512,krb5_authdata_if_relev:513,krb5_authdata_initial_verified_ca:514,krb5_authdata_kdc_issu:515,krb5_authdata_mandatory_for_kdc:516,krb5_authdata_osf_dc:517,krb5_authdata_sesam:518,krb5_authdata_signticket:519,krb5_authdata_win2k_pac:520,krb5_authdatatyp:810,krb5_authent:174,201,811,krb5_boolean:812,krb5_build_princip:91,krb5_build_principal_alloc_va:92,krb5_build_principal_ext:93,krb5_build_principal_va:94,krb5_c_block_siz:95,krb5_c_checksum_length:96,krb5_c_crypto_length:97,krb5_c_crypto_length_iov:98,krb5_c_decrypt:99,krb5_c_decrypt_iov:100,krb5_c_derive_prfplu:101,krb5_c_encrypt:102,krb5_c_encrypt_iov:103,krb5_c_encrypt_length:104,krb5_c_enctype_compar:105,krb5_c_free_stat:106,krb5_c_fx_cf2_simpl:107,krb5_c_init_st:106,108,krb5_c_is_coll_proof_cksum:109,krb5_c_is_keyed_cksum:110,krb5_c_keyed_checksum_typ:111,krb5_c_keylength:112,krb5_c_make_checksum:113,krb5_c_make_checksum_iov:114,krb5_c_make_random_kei:115,krb5_c_padding_length:116,krb5_c_prf:117,krb5_c_prf_length:118,krb5_c_prfplu:119,krb5_c_random_add_entropi:120,krb5_c_random_make_octet:121,krb5_c_random_os_entropi:122,krb5_c_random_se:123,krb5_c_random_to_kei:124,krb5_c_string_to_kei:125,krb5_c_string_to_key_with_param:126,krb5_c_valid_cksumtyp:127,krb5_c_valid_enctyp:128,krb5_c_verify_checksum:129,krb5_c_verify_checksum_iov:130,krb5_calculate_checksum:131,krb5_cc_cache_match:132,krb5_cc_close:133,krb5_cc_copy_cr:134,krb5_cc_cursor:813,krb5_cc_default:135,krb5_cc_default_nam:136,krb5_cc_destroi:137,krb5_cc_dup:138,krb5_cc_end_seq_get:139,krb5_cc_gen_new:140,krb5_cc_get_config:141,krb5_cc_get_flag:142,krb5_cc_get_full_nam:143,krb5_cc_get_nam:144,krb5_cc_get_princip:145,krb5_cc_get_typ:146,krb5_cc_initi:147,krb5_cc_move:148,krb5_cc_new_uniqu:149,krb5_cc_next_cr:150,krb5_cc_remove_cr:151,krb5_cc_resolv:152,krb5_cc_retrieve_cr:153,krb5_cc_select:154,krb5_cc_set_config:155,krb5_cc_set_default_nam:156,krb5_cc_set_flag:157,krb5_cc_start_seq_get:158,krb5_cc_store_cr:159,krb5_cc_support_switch:160,krb5_cc_switch:161,krb5_ccach:814,krb5_cccol_cursor:815,krb5_cccol_cursor_fre:162,krb5_cccol_cursor_new:163,krb5_cccol_cursor_next:164,krb5_cccol_have_cont:165,krb5_change_password:166,krb5_check_clockskew:167,krb5_checksum:175,202,203,816,krb5_checksum_s:168,krb5_chpw_messag:169,krb5_cksumtyp:817,krb5_cksumtype_to_str:170,krb5_clear_error_messag:171,krb5_const:790,krb5_const_point:818,krb5_const_princip:819,krb5_context:176,378,385,820,krb5_copy_address:172,krb5_copy_authdata:173,krb5_copy_authent:174,krb5_copy_checksum:175,krb5_copy_context:176,krb5_copy_cr:177,krb5_copy_data:178,krb5_copy_error_messag:179,krb5_copy_keyblock:180,krb5_copy_keyblock_cont:181,krb5_copy_princip:182,krb5_copy_ticket:183,krb5_cred:177,206,207,321,405,531,821,824,krb5_cred_enc_part:822,krb5_cred_info:823,krb5_crypto_iov:825,krb5_crypto_type_checksum:532,krb5_crypto_type_data:533,krb5_crypto_type_empti:534,krb5_crypto_type_head:535,krb5_crypto_type_pad:536,krb5_crypto_type_sign_onli:537,krb5_crypto_type_stream:538,krb5_crypto_type_trail:539,krb5_cryptotyp:826,krb5_cybersafe_secureid:540,krb5_data:178,208,209,827,krb5_decode_authdata_contain:184,krb5_decode_ticket:185,krb5_decrypt:186,krb5_deltat:828,krb5_deltat_to_str:187,krb5_domain_x500_compress:541,krb5_eblock_enctyp:188,krb5_enc_data:829,krb5_enc_kdc_rep_part:830,krb5_enc_tkt_part:831,krb5_encode_authdata_contain:189,krb5_encpadata_req_enc_pa_rep:542,krb5_encrypt:190,krb5_encrypt_block:832,krb5_encrypt_s:191,krb5_enctyp:833,krb5_enctype_to_nam:192,krb5_enctype_to_str:193,krb5_error:543,834,krb5_error_cod:835,krb5_expand_hostnam:194,krb5_expire_callback_func:836,krb5_fast_requir:544,krb5_find_authdata:195,krb5_finish_kei:196,krb5_finish_random_kei:197,krb5_flag:837,krb5_free_address:198,krb5_free_ap_rep_enc_part:199,krb5_free_authdata:200,krb5_free_authent:201,krb5_free_checksum:202,krb5_free_checksum_cont:203,krb5_free_cksumtyp:204,krb5_free_context:205,krb5_free_cr:207,krb5_free_cred_cont:206,krb5_free_data:208,krb5_free_data_cont:209,krb5_free_default_realm:210,krb5_free_enctyp:211,krb5_free_error:212,krb5_free_error_messag:213,krb5_free_host_realm:214,krb5_free_keyblock:215,krb5_free_keyblock_cont:216,krb5_free_keytab_entry_cont:217,krb5_free_princip:218,krb5_free_str:219,krb5_free_tgt_cr:220,krb5_free_ticket:221,krb5_free_unparsed_nam:222,krb5_fwd_tgt_cred:223,krb5_gc_cach:545,krb5_gc_canonic:546,krb5_gc_constrained_deleg:547,krb5_gc_forward:548,krb5_gc_no_stor:549,krb5_gc_no_transit_check:550,krb5_gc_user_us:551,krb5_get_credenti:224,krb5_get_credentials_renew:225,krb5_get_credentials_valid:226,krb5_get_default_realm:210,227,krb5_get_error_messag:213,228,krb5_get_etype_info:229,krb5_get_fallback_host_realm:230,krb5_get_host_realm:214,231,krb5_get_in_tkt_with_keytab:232,krb5_get_in_tkt_with_password:233,krb5_get_in_tkt_with_skei:234,krb5_get_init_creds_keytab:235,krb5_get_init_creds_opt:838,krb5_get_init_creds_opt_address_list:552,krb5_get_init_creds_opt_alloc:236,krb5_get_init_creds_opt_anonym:553,krb5_get_init_creds_opt_canonic:554,krb5_get_init_creds_opt_chg_pwd_prmpt:555,krb5_get_init_creds_opt_etype_list:556,krb5_get_init_creds_opt_forward:557,krb5_get_init_creds_opt_fre:237,krb5_get_init_creds_opt_get_fast_flag:238,krb5_get_init_creds_opt_init:239,krb5_get_init_creds_opt_preauth_list:558,krb5_get_init_creds_opt_proxi:559,krb5_get_init_creds_opt_renew_lif:560,krb5_get_init_creds_opt_salt:561,krb5_get_init_creds_opt_set_address_list:240,krb5_get_init_creds_opt_set_anonym:241,krb5_get_init_creds_opt_set_canonic:242,krb5_get_init_creds_opt_set_change_password_prompt:243,krb5_get_init_creds_opt_set_etype_list:244,krb5_get_init_creds_opt_set_expire_callback:245,krb5_get_init_creds_opt_set_fast_ccach:246,krb5_get_init_creds_opt_set_fast_ccache_nam:247,krb5_get_init_creds_opt_set_fast_flag:248,krb5_get_init_creds_opt_set_forward:249,krb5_get_init_creds_opt_set_in_ccach:250,krb5_get_init_creds_opt_set_out_ccach:251,krb5_get_init_creds_opt_set_pa:252,krb5_get_init_creds_opt_set_pac_request:253,krb5_get_init_creds_opt_set_preauth_list:254,krb5_get_init_creds_opt_set_proxi:255,krb5_get_init_creds_opt_set_renew_lif:256,krb5_get_init_creds_opt_set_respond:257,krb5_get_init_creds_opt_set_salt:258,krb5_get_init_creds_opt_set_tkt_lif:259,krb5_get_init_creds_opt_tkt_lif:562,krb5_get_init_creds_password:260,krb5_get_permitted_enctyp:261,krb5_get_profil:262,krb5_get_prompt_typ:263,krb5_get_renewed_cr:264,krb5_get_server_rcach:265,krb5_get_time_offset:266,krb5_get_validated_cr:267,krb5_gic_opt_pa_data:839,krb5_init_context:268,krb5_init_context_kdc:563,krb5_init_context_profil:269,krb5_init_context_secur:564,krb5_init_creds_context:840,krb5_init_creds_fre:270,krb5_init_creds_get:271,krb5_init_creds_get_cr:272,krb5_init_creds_get_error:273,krb5_init_creds_get_tim:274,krb5_init_creds_init:275,krb5_init_creds_set_keytab:276,krb5_init_creds_set_password:277,krb5_init_creds_set_servic:278,krb5_init_creds_step:279,krb5_init_creds_step_flag_continu:565,krb5_init_keyblock:280,krb5_init_random_kei:281,krb5_init_secure_context:282,krb5_int16:841,krb5_int16_max:566,krb5_int16_min:567,krb5_int32:842,krb5_int32_max:568,krb5_int32_min:569,krb5_is_config_princip:283,krb5_is_referral_realm:284,krb5_is_thread_saf:285,krb5_k_create_kei:286,krb5_k_decrypt:287,krb5_k_decrypt_iov:288,krb5_k_encrypt:289,krb5_k_encrypt_iov:290,krb5_k_free_kei:291,krb5_k_key_enctyp:292,krb5_k_key_keyblock:293,krb5_k_make_checksum:294,krb5_k_make_checksum_iov:295,krb5_k_prf:296,krb5_k_reference_kei:297,krb5_k_verify_checksum:298,krb5_k_verify_checksum_iov:299,krb5_kdc_rep:843,krb5_kdc_req:844,krb5_kdc_sign_ticket:300,krb5_kdc_verify_ticket:301,krb5_kei:286,292,293,845,krb5_keyblock:215,216,280,846,krb5_keytab:847,krb5_keytab_entri:848,krb5_keyusag:849,krb5_keyusage_ad_it:570,krb5_keyusage_ad_kdcissued_cksum:571,krb5_keyusage_ad_mt:572,krb5_keyusage_ad_signedpath:573,krb5_keyusage_ap_rep_encpart:576,krb5_keyusage_ap_req_auth:577,krb5_keyusage_ap_req_auth_cksum:578,krb5_keyusage_app_data_cksum:574,krb5_keyusage_app_data_encrypt:575,krb5_keyusage_as_rep_encpart:579,krb5_keyusage_as_req:580,krb5_keyusage_as_req_pa_enc_t:581,krb5_keyusage_cammac:582,krb5_keyusage_enc_challenge_cli:583,krb5_keyusage_enc_challenge_kdc:584,krb5_keyusage_fast_enc:585,krb5_keyusage_fast_finish:586,krb5_keyusage_fast_rep:587,krb5_keyusage_fast_req_chksum:588,krb5_keyusage_gss_tok_m:589,krb5_keyusage_gss_tok_wrap_integ:590,krb5_keyusage_gss_tok_wrap_priv:591,krb5_keyusage_iakerb_finish:592,krb5_keyusage_kdc_rep_ticket:593,krb5_keyusage_krb_cred_encpart:594,krb5_keyusage_krb_error_cksum:595,krb5_keyusage_krb_priv_encpart:596,krb5_keyusage_krb_safe_cksum:597,krb5_keyusage_pa_as_fresh:598,krb5_keyusage_pa_fx_cooki:599,krb5_keyusage_pa_otp_request:600,krb5_keyusage_pa_pkinit_kx:601,krb5_keyusage_pa_s4u_x509_user_repli:602,krb5_keyusage_pa_s4u_x509_user_request:603,krb5_keyusage_pa_sam_challenge_cksum:604,krb5_keyusage_pa_sam_challenge_trackid:605,krb5_keyusage_pa_sam_respons:606,krb5_keyusage_spak:607,krb5_keyusage_tgs_rep_encpart_sesskei:608,krb5_keyusage_tgs_rep_encpart_subkei:609,krb5_keyusage_tgs_req_ad_sesskei:610,krb5_keyusage_tgs_req_ad_subkei:611,krb5_keyusage_tgs_req_auth:612,krb5_keyusage_tgs_req_auth_cksum:613,krb5_kpasswd_accessdeni:614,krb5_kpasswd_autherror:615,krb5_kpasswd_bad_vers:616,krb5_kpasswd_harderror:617,krb5_kpasswd_initial_flag_need:618,krb5_kpasswd_malform:619,krb5_kpasswd_softerror:620,krb5_kpasswd_success:621,krb5_kt_add_entri:302,krb5_kt_client_default:303,krb5_kt_close:304,krb5_kt_cursor:850,krb5_kt_default:305,krb5_kt_default_nam:306,krb5_kt_dup:307,krb5_kt_end_seq_get:308,krb5_kt_free_entri:309,krb5_kt_get_entri:310,krb5_kt_get_nam:311,krb5_kt_get_typ:312,krb5_kt_have_cont:313,krb5_kt_next_entri:314,krb5_kt_read_service_kei:315,krb5_kt_remove_entri:316,krb5_kt_resolv:317,krb5_kt_start_seq_get:318,krb5_kuserok:319,krb5_kvno:851,krb5_last_req_entri:852,krb5_lrq_all_acct_exptim:622,krb5_lrq_all_last_initi:623,krb5_lrq_all_last_renew:624,krb5_lrq_all_last_req:625,krb5_lrq_all_last_tgt:626,krb5_lrq_all_last_tgt_issu:627,krb5_lrq_all_pw_exptim:628,krb5_lrq_none:629,krb5_lrq_one_acct_exptim:630,krb5_lrq_one_last_initi:631,krb5_lrq_one_last_renew:632,krb5_lrq_one_last_req:633,krb5_lrq_one_last_tgt:634,krb5_lrq_one_last_tgt_issu:635,krb5_lrq_one_pw_exptim:636,krb5_magic:853,krb5_make_authdata_kdc_issu:320,krb5_marshal_credenti:321,krb5_merge_authdata:322,krb5_mk_1cred:323,krb5_mk_error:324,krb5_mk_ncred:325,krb5_mk_priv:326,krb5_mk_rep:327,krb5_mk_rep_dc:328,krb5_mk_req:329,krb5_mk_req_checksum_func:854,krb5_mk_req_extend:330,krb5_mk_safe:331,krb5_msgtype:855,krb5_nt_ent_principal_and_id:638,krb5_nt_enterprise_princip:637,krb5_nt_ms_princip:639,krb5_nt_ms_principal_and_id:640,krb5_nt_princip:641,krb5_nt_smtp_name:642,krb5_nt_srv_hst:643,krb5_nt_srv_inst:644,krb5_nt_srv_xhst:645,krb5_nt_uid:646,krb5_nt_unknown:647,krb5_nt_wellknown:648,krb5_nt_x500_princip:649,krb5_octet:856,krb5_os_localaddr:332,krb5_pa_data:857,krb5_pa_pac_req:858,krb5_pa_server_referral_data:859,krb5_pa_svr_referral_data:860,krb5_pac:861,krb5_pac_add_buff:333,krb5_pac_attributes_info:650,krb5_pac_client_claim:651,krb5_pac_client_info:652,krb5_pac_credentials_info:653,krb5_pac_delegation_info:654,krb5_pac_device_claim:655,krb5_pac_device_info:656,krb5_pac_fre:334,krb5_pac_get_buff:335,krb5_pac_get_client_info:336,krb5_pac_get_typ:337,krb5_pac_init:338,krb5_pac_logon_info:657,krb5_pac_pars:339,krb5_pac_privsvr_checksum:658,krb5_pac_requestor:659,krb5_pac_server_checksum:660,krb5_pac_sign:340,krb5_pac_sign_ext:341,krb5_pac_ticket_checksum:661,krb5_pac_upn_dns_info:662,krb5_pac_verifi:342,krb5_pac_verify_ext:343,krb5_padata_afs3_salt:663,krb5_padata_ap_req:664,krb5_padata_as_checksum:665,krb5_padata_as_fresh:666,krb5_padata_enc_sandia_securid:668,krb5_padata_enc_timestamp:669,krb5_padata_enc_unix_tim:670,krb5_padata_encrypted_challeng:667,krb5_padata_etype_info2:672,krb5_padata_etype_info:671,krb5_padata_for_us:673,krb5_padata_fx_cooki:674,krb5_padata_fx_error:675,krb5_padata_fx_fast:676,krb5_padata_get_from_typed_data:677,krb5_padata_non:678,krb5_padata_osf_dc:679,krb5_padata_otp_challeng:680,krb5_padata_otp_pin_chang:681,krb5_padata_otp_request:682,krb5_padata_pac_opt:683,krb5_padata_pac_request:684,krb5_padata_pk_as_rep:686,krb5_padata_pk_as_rep_old:687,krb5_padata_pk_as_req:688,krb5_padata_pk_as_req_old:689,krb5_padata_pkinit_kx:685,krb5_padata_pw_salt:690,krb5_padata_redhat_idp_oauth2:691,krb5_padata_referr:692,krb5_padata_s4u_x509_us:693,krb5_padata_sam_challeng:694,krb5_padata_sam_challenge_2:695,krb5_padata_sam_redirect:696,krb5_padata_sam_respons:697,krb5_padata_sam_response_2:698,krb5_padata_sesam:699,krb5_padata_spak:700,krb5_padata_svr_referral_info:701,krb5_padata_tgs_req:702,krb5_padata_use_specified_kvno:703,krb5_parse_nam:344,krb5_parse_name_flag:345,krb5_pointer:862,krb5_post_recv_fn:863,krb5_pre_send_fn:864,krb5_preauthtyp:865,krb5_prepend_error_messag:346,krb5_princ_compon:791,krb5_princ_nam:792,krb5_princ_realm:793,krb5_princ_set_realm:794,krb5_princ_set_realm_data:795,krb5_princ_set_realm_length:796,krb5_princ_siz:797,krb5_princ_typ:798,krb5_princip:344,345,406,407,408,409,866,krb5_principal2salt:347,krb5_principal_compar:348,krb5_principal_compare_any_realm:349,krb5_principal_compare_casefold:704,krb5_principal_compare_enterpris:705,krb5_principal_compare_flag:350,krb5_principal_compare_ignore_realm:706,krb5_principal_compare_utf8:707,krb5_principal_data:867,krb5_principal_parse_enterpris:708,krb5_principal_parse_ignore_realm:709,krb5_principal_parse_no_def_realm:710,krb5_principal_parse_no_realm:711,krb5_principal_parse_require_realm:712,krb5_principal_unparse_displai:713,krb5_principal_unparse_no_realm:714,krb5_principal_unparse_short:715,krb5_priv:716,krb5_process_kei:351,krb5_prompt:868,krb5_prompt_typ:869,krb5_prompt_type_new_password:717,krb5_prompt_type_new_password_again:718,krb5_prompt_type_password:719,krb5_prompt_type_preauth:720,krb5_prompter_fct:870,krb5_prompter_posix:352,krb5_pvno:721,krb5_pwd_data:871,krb5_random_kei:353,krb5_rcach:872,krb5_rd_cred:354,krb5_rd_error:355,krb5_rd_priv:356,krb5_rd_rep:357,krb5_rd_rep_dc:358,krb5_rd_req:359,krb5_rd_safe:360,krb5_read_error:212,krb5_read_password:361,krb5_realm_branch_char:722,krb5_realm_compar:362,krb5_recvauth:363,krb5_recvauth_badauthv:723,krb5_recvauth_skip_vers:724,krb5_recvauth_vers:364,krb5_referral_realm:284,725,krb5_replay_data:873,krb5_responder_context:874,krb5_responder_fn:875,krb5_responder_get_challeng:365,krb5_responder_list_quest:366,krb5_responder_otp_challeng:876,krb5_responder_otp_challenge_fre:367,krb5_responder_otp_flags_collect_pin:726,krb5_responder_otp_flags_collect_token:727,krb5_responder_otp_flags_nextotp:728,krb5_responder_otp_flags_separate_pin:729,krb5_responder_otp_format_alphanumer:730,krb5_responder_otp_format_decim:731,krb5_responder_otp_format_hexadecim:732,krb5_responder_otp_get_challeng:367,368,krb5_responder_otp_set_answ:369,krb5_responder_otp_tokeninfo:877,krb5_responder_pkinit_challeng:878,krb5_responder_pkinit_challenge_fre:370,krb5_responder_pkinit_flags_token_user_pin_count_low:733,krb5_responder_pkinit_flags_token_user_pin_final_tri:734,krb5_responder_pkinit_flags_token_user_pin_lock:735,krb5_responder_pkinit_get_challeng:370,371,krb5_responder_pkinit_ident:879,krb5_responder_pkinit_set_answ:372,krb5_responder_question_otp:368,369,736,krb5_responder_question_password:737,krb5_responder_question_pkinit:371,372,738,krb5_responder_set_answ:373,krb5_respons:880,krb5_roundup:799,krb5_safe:739,krb5_salttype_to_str:374,krb5_sam_must_pk_encrypt_sad:740,krb5_sam_send_encrypted_sad:741,krb5_sam_use_sad_as_kei:742,krb5_sendauth:212,375,krb5_server_decrypt_ticket_keytab:376,krb5_set_default_realm:377,krb5_set_default_tgs_enctyp:378,krb5_set_error_messag:379,krb5_set_kdc_recv_hook:380,krb5_set_kdc_send_hook:381,krb5_set_password:382,krb5_set_password_using_ccach:383,krb5_set_principal_realm:384,krb5_set_real_tim:385,krb5_set_trace_callback:386,krb5_set_trace_filenam:387,krb5_sname_match:388,krb5_sname_to_princip:389,krb5_string_to_cksumtyp:390,krb5_string_to_deltat:391,krb5_string_to_enctyp:392,krb5_string_to_kei:393,krb5_string_to_salttyp:394,krb5_string_to_timestamp:395,krb5_tc_match_2nd_tkt:743,krb5_tc_match_authdata:744,krb5_tc_match_flag:745,krb5_tc_match_flags_exact:746,krb5_tc_match_is_skei:747,krb5_tc_match_ktyp:748,krb5_tc_match_srv_nameonli:749,krb5_tc_match_tim:750,krb5_tc_match_times_exact:751,krb5_tc_noticket:752,krb5_tc_openclos:753,krb5_tc_supported_ktyp:754,krb5_tgs_name:755,krb5_tgs_name_s:756,krb5_tgs_rep:757,krb5_tgs_req:758,krb5_ticket:183,881,krb5_ticket_tim:882,krb5_timeofdai:396,krb5_timestamp:883,894,krb5_timestamp_to_sfstr:397,krb5_timestamp_to_str:398,krb5_tkt_authent:884,krb5_tkt_creds_context:885,krb5_tkt_creds_fre:399,krb5_tkt_creds_get:400,krb5_tkt_creds_get_cr:401,krb5_tkt_creds_get_tim:402,krb5_tkt_creds_init:403,krb5_tkt_creds_step:404,krb5_tkt_creds_step_flag_continu:759,krb5_trace_callback:886,krb5_trace_info:887,krb5_transit:888,krb5_typed_data:889,krb5_ui_2:890,krb5_ui_4:891,krb5_unmarshal_credenti:405,krb5_unparse_nam:406,krb5_unparse_name_ext:407,krb5_unparse_name_flag:408,krb5_unparse_name_flags_ext:409,krb5_us_timeofdai:410,krb5_use_enctyp:411,krb5_verify_authdata_kdc_issu:412,krb5_verify_checksum:413,krb5_verify_init_cr:414,krb5_verify_init_creds_opt:892,krb5_verify_init_creds_opt_ap_req_nofail:760,krb5_verify_init_creds_opt_init:415,krb5_verify_init_creds_opt_set_ap_req_nofail:416,krb5_vprepend_error_messag:417,krb5_vset_error_messag:418,krb5_vwrap_error_messag:419,krb5_wellknown_namestr:761,krb5_wrap_error_messag:420,krb5_x:800,krb5_xc:801,krb5kdc:10,krb:107,223,323,325,326,331,354,355,356,360,krb_ap_rep:327,328,357,358,krb_ap_req:329,330,359,krb_error:324,krbtgt:14,23,ksu:944,kswitch:945,ktadd:3,15,ktremov:3,15,ktutil:11,kvno:946,last:273,ldap:23,24,ldapsearch:38,legaci:14,48,length:93,96,97,98,104,112,118,407,lib:901,libdefault:21,librari:205,268,269,282,285,licens:917,lifetim:256,259,lightn:24,like:915,line:5,6,link:42,list:5,11,20,23,41,54,92,111,173,261,322,366,916,934,list_mkei:6,list_polici:3,5,23,list_princip:3,23,list_request:3,11,lndir:902,load:6,local:56,69,82,84,319,930,localauth:21,930,locat:28,247,931,lock:3,lockout:35,log:20,41,319,921,login:28,lr_type_interpretation_mask:762,lr_type_this_server_onli:763,machin:33,macro:787,mail:934,make:161,man:906,manag:936,937,manipul:47,map:24,39,master:14,23,match:284,388,max_keytab_name_len:764,mechan:28,922,member:803,805,806,807,809,811,816,819,821,822,823,824,825,827,829,830,831,832,834,838,839,843,844,846,848,852,857,858,859,860,866,867,868,871,873,876,877,878,879,880,881,882,884,887,888,889,892,893,memori:24,214,merg:322,messag:12,43,97,169,171,179,213,223,228,323,324,325,326,327,328,329,330,331,346,354,355,356,357,358,359,360,379,417,418,419,420,mic:43,migrat:26,mismatch:38,mit:0,23,44,914,915,916,917,modifi:5,23,modify_polici:3,5,23,modify_princip:3,23,modul:19,24,28,921,922,924,most:179,904,move:148,msec_dirbit:765,msec_val_mask:766,multithread:285,name:38,39,43,56,91,92,93,135,136,143,144,149,152,156,192,194,231,306,311,344,345,347,366,373,387,389,895,899,904,negoex:922,next:150,164,279,314,404,note:939,number:69,74,116,object:23,178,265,321,405,obtain:400,903,937,octet:116,offset:266,385,396,older:26,one:179,372,onli:282,onto:39,opaqu:287,288,289,290,294,295,296,298,299,open:265,openldap:22,38,oper:23,99,100,102,103,113,114,129,130,287,288,289,290,294,295,296,298,299,optimist:258,option:3,4,5,6,7,8,9,10,20,21,23,46,157,236,237,238,240,241,242,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,397,415,904,939,940,941,942,943,944,945,946,order:53,organ:901,osconf:905,other:36,otp:20,36,output:118,251,397,over:163,overrid:38,55,377,overview:23,pac:253,300,301,333,334,335,336,337,338,339,342,343,packag:904,906,pad:98,116,397,page:906,934,paramet:21,126,364,pars:47,357,358,359,passwd_phrase_el:893,password:23,46,125,126,166,169,243,260,277,352,361,382,383,933,936,path:915,pepper:107,perform:35,permit:261,pin:46,pkinit:20,21,37,46,910,919,place:100,103,288,290,pluggabl:925,plugin:21,28,921,924,polici:23,928,port:39,84,possibl:194,228,300,301,343,post:380,pre:381,preauthent:36,40,252,254,258,920,929,precomput:92,prefix:346,417,419,420,prepar:158,163,prerequisit:903,previous:106,prf:101,119,primari:34,161,princip:15,23,34,35,38,47,49,50,56,57,91,92,93,132,145,154,182,218,222,278,283,319,344,345,347,348,349,350,362,382,383,384,388,389,908,priv:326,356,privileg:23,338,procedur:14,process:139,356,360,profil:28,55,262,269,932,program:1,904,prompt:243,263,352,prompter:46,proof:109,propag:23,34,39,915,properti:937,protocol:363,364,375,911,provis:38,proxi:29,proxiabl:255,pseudo:117,118,119,121,296,purge_mkei:6,purgekei:3,pwqual:21,933,qualiti:933,936,question:46,365,366,369,372,373,quick:916,quit:3,11,random:115,117,118,119,121,124,296,rare:48,read:158,336,354,361,read_kt:11,realm:20,21,23,28,39,58,210,227,231,343,349,362,377,384,923,receiv:72,73,86,87,380,recent:179,refer:31,291,297,421,906,refus:41,reject:41,rel:187,releas:308,906,remot:74,82,84,remov:14,15,151,316,rename_princip:3,renew:256,264,replai:71,85,265,899,913,replic:35,replica:34,39,915,represent:222,406,request:26,279,399,400,401,402,404,requir:416,944,resolv:135,152,303,305,resourc:934,respond:46,257,365,366,373,restor:23,restrict:240,951,result:169,retir:14,retriev:23,59,60,64,65,66,67,68,69,71,72,73,74,76,77,142,143,144,146,150,153,227,229,238,262,272,274,292,293,314,315,318,335,365,396,401,402,410,revers:38,rfc:101,119,risk:25,rout:41,rpc:328,358,s2kparam:229,s4u:43,safe:331,360,salt:229,258,347,374,394,salt_type_afs_length:767,salt_type_no_length:768,sampl:20,21,sclient:947,search:54,sec:410,section:20,21,59,60,secur:17,32,38,909,944,see:2,3,4,5,6,7,8,9,10,11,12,19,20,21,939,940,941,942,943,944,945,946,947,949,950,951,seen:41,select:26,154,918,send:76,77,88,89,381,sendauth:41,363,364,375,separ:902,sequenc:69,74,sequenti:139,158,318,seri:139,serial:321,server:14,15,32,41,154,265,363,364,931,servic:14,23,26,38,39,194,278,315,389,403,session:26,67,68,90,261,set:55,80,81,82,83,84,85,86,87,88,89,90,156,157,169,240,241,242,243,244,245,246,247,248,249,250,251,254,255,256,257,258,259,277,323,378,379,380,381,382,383,384,385,416,418,set_str:3,setup:35,shell:38,944,should:48,side:944,sign:300,320,signatur:300,301,simpl:787,906,sinc:410,singl:323,902,site:906,size:95,skew:15,167,socket:62,softwar:903,some:32,101,sourc:901,906,spake:40,909,specif:38,97,115,117,124,296,396,specifi:21,53,54,112,127,128,132,149,153,269,276,278,343,376,377,382,386,387,sserver:12,ssh:38,start:34,318,stash:6,23,900,stashsrvpw:5,state:35,79,106,108,storag:200,218,store:43,155,159,198,string:60,91,93,107,125,126,170,187,193,210,219,222,344,345,374,390,391,392,394,395,397,398,406,407,408,409,strong:14,struct:368,371,structur:20,21,61,66,83,142,174,175,176,177,183,199,201,202,203,206,207,208,209,215,216,220,236,292,293,344,378,385,406,407,408,409,415,802,subkei:72,73,76,77,86,87,88,89,sun:23,suppli:252,330,support:14,41,100,103,160,285,288,290,896,synchron:400,synopsi:2,3,4,5,6,7,8,9,10,11,12,939,940,941,942,943,944,945,946,947,syntax:19,system:410,904,915,tabdump:6,tabl:217,235,302,303,304,305,306,310,311,312,314,315,316,317,318,376,tarbal:906,target:944,termin:91,test:35,109,110,283,285,388,902,tgt:223,thi:332,896,906,threeparamopen:769,ticket:23,185,221,224,253,256,259,274,300,301,376,402,403,937,time:46,167,187,266,274,385,391,396,402,410,896,timestamp:167,395,397,398,tkt_flg_anonym:770,tkt_flg_enc_pa_rep:771,tkt_flg_forward:772,773,tkt_flg_hw_auth:774,tkt_flg_initi:775,tkt_flg_invalid:776,tkt_flg_may_postd:777,tkt_flg_ok_as_deleg:778,tkt_flg_postdat:779,tkt_flg_pre_auth:780,tkt_flg_proxi:782,tkt_flg_proxiabl:781,tkt_flg_renew:783,tkt_flg_transit_policy_check:784,token:36,37,43,910,tool:895,topic:13,trace:41,386,387,trailer:98,tree:902,trivial:909,troubleshoot:41,42,tune:904,tutori:42,two:52,105,107,322,348,349,350,362,type:14,20,24,26,36,41,43,81,96,97,105,109,110,111,118,127,128,144,146,149,160,170,192,193,204,211,244,254,261,263,312,337,374,378,390,392,394,802,895,899,904,uniqu:149,unix:32,33,915,unlock:3,unpars:339,unset:241,242,243,249,255,unwrap:184,412,updat:23,906,update_princ_encrypt:6,upgrad:14,usabl:111,usag:14,use:79,154,265,276,895,use_mkei:6,used:48,896,904,user:46,319,352,935,938,948,uses:894,using:91,92,93,99,101,102,119,194,235,260,264,269,271,282,287,289,330,376,382,383,400,417,418,419,902,util:901,va_list:417,418,419,valid:127,128,130,267,299,354,valid_int_bit:785,valid_uint_bit:786,valu:59,60,141,155,187,335,367,370,391,variabl:26,27,92,904,951,variou:42,verif:41,415,416,936,verifi:46,127,128,129,298,301,342,343,412,414,version:364,909,via:101,view:5,937,view_polici:5,web:906,934,whether:109,110,160,283,285,388,416,whitepap:42,wiki:934,within:167,902,without:906,work:15,wrap:43,189,write_kt:11,year:894,your:15,936,zero:209,291}})
\ No newline at end of file
+Search.setIndex({docnames:"about","admin/admin_commands/index","admin/admin_commands/k5srvutil","admin/admin_commands/kadmin_local","admin/admin_commands/kadmind","admin/admin_commands/kdb5_ldap_util","admin/admin_commands/kdb5_util","admin/admin_commands/kprop","admin/admin_commands/kpropd","admin/admin_commands/kproplog","admin/admin_commands/krb5kdc","admin/admin_commands/ktutil","admin/admin_commands/sserver","admin/advanced/index","admin/advanced/retiring-des","admin/appl_servers","admin/auth_indicator","admin/backup_host","admin/conf_files/index","admin/conf_files/kadm5_acl","admin/conf_files/kdc_conf","admin/conf_files/krb5_conf","admin/conf_ldap","admin/database","admin/dbtypes","admin/dictionary","admin/enctypes","admin/env_variables","admin/host_config","admin/https","admin/index","admin/install","admin/install_appl_srv","admin/install_clients","admin/install_kdc","admin/lockout","admin/otp","admin/pkinit","admin/princ_dns","admin/realm_config","admin/spake","admin/troubleshoot","admin/various_envs","appdev/gssapi","appdev/h5l_mit_apidiff","appdev/index","appdev/init_creds","appdev/princ_handle","appdev/refs/api/index","appdev/refs/api/krb5_425_conv_principal","appdev/refs/api/krb5_524_conv_principal","appdev/refs/api/krb5_524_convert_creds","appdev/refs/api/krb5_address_compare","appdev/refs/api/krb5_address_order","appdev/refs/api/krb5_address_search","appdev/refs/api/krb5_allow_weak_crypto","appdev/refs/api/krb5_aname_to_localname","appdev/refs/api/krb5_anonymous_principal","appdev/refs/api/krb5_anonymous_realm","appdev/refs/api/krb5_appdefault_boolean","appdev/refs/api/krb5_appdefault_string","appdev/refs/api/krb5_auth_con_free","appdev/refs/api/krb5_auth_con_genaddrs","appdev/refs/api/krb5_auth_con_get_checksum_func","appdev/refs/api/krb5_auth_con_getaddrs","appdev/refs/api/krb5_auth_con_getauthenticator","appdev/refs/api/krb5_auth_con_getflags","appdev/refs/api/krb5_auth_con_getkey","appdev/refs/api/krb5_auth_con_getkey_k","appdev/refs/api/krb5_auth_con_getlocalseqnumber","appdev/refs/api/krb5_auth_con_getlocalsubkey","appdev/refs/api/krb5_auth_con_getrcache","appdev/refs/api/krb5_auth_con_getrecvsubkey","appdev/refs/api/krb5_auth_con_getrecvsubkey_k","appdev/refs/api/krb5_auth_con_getremoteseqnumber","appdev/refs/api/krb5_auth_con_getremotesubkey","appdev/refs/api/krb5_auth_con_getsendsubkey","appdev/refs/api/krb5_auth_con_getsendsubkey_k","appdev/refs/api/krb5_auth_con_init","appdev/refs/api/krb5_auth_con_initivector","appdev/refs/api/krb5_auth_con_set_checksum_func","appdev/refs/api/krb5_auth_con_set_req_cksumtype","appdev/refs/api/krb5_auth_con_setaddrs","appdev/refs/api/krb5_auth_con_setflags","appdev/refs/api/krb5_auth_con_setports","appdev/refs/api/krb5_auth_con_setrcache","appdev/refs/api/krb5_auth_con_setrecvsubkey","appdev/refs/api/krb5_auth_con_setrecvsubkey_k","appdev/refs/api/krb5_auth_con_setsendsubkey","appdev/refs/api/krb5_auth_con_setsendsubkey_k","appdev/refs/api/krb5_auth_con_setuseruserkey","appdev/refs/api/krb5_build_principal","appdev/refs/api/krb5_build_principal_alloc_va","appdev/refs/api/krb5_build_principal_ext","appdev/refs/api/krb5_build_principal_va","appdev/refs/api/krb5_c_block_size","appdev/refs/api/krb5_c_checksum_length","appdev/refs/api/krb5_c_crypto_length","appdev/refs/api/krb5_c_crypto_length_iov","appdev/refs/api/krb5_c_decrypt","appdev/refs/api/krb5_c_decrypt_iov","appdev/refs/api/krb5_c_derive_prfplus","appdev/refs/api/krb5_c_encrypt","appdev/refs/api/krb5_c_encrypt_iov","appdev/refs/api/krb5_c_encrypt_length","appdev/refs/api/krb5_c_enctype_compare","appdev/refs/api/krb5_c_free_state","appdev/refs/api/krb5_c_fx_cf2_simple","appdev/refs/api/krb5_c_init_state","appdev/refs/api/krb5_c_is_coll_proof_cksum","appdev/refs/api/krb5_c_is_keyed_cksum","appdev/refs/api/krb5_c_keyed_checksum_types","appdev/refs/api/krb5_c_keylengths","appdev/refs/api/krb5_c_make_checksum","appdev/refs/api/krb5_c_make_checksum_iov","appdev/refs/api/krb5_c_make_random_key","appdev/refs/api/krb5_c_padding_length","appdev/refs/api/krb5_c_prf","appdev/refs/api/krb5_c_prf_length","appdev/refs/api/krb5_c_prfplus","appdev/refs/api/krb5_c_random_add_entropy","appdev/refs/api/krb5_c_random_make_octets","appdev/refs/api/krb5_c_random_os_entropy","appdev/refs/api/krb5_c_random_seed","appdev/refs/api/krb5_c_random_to_key","appdev/refs/api/krb5_c_string_to_key","appdev/refs/api/krb5_c_string_to_key_with_params","appdev/refs/api/krb5_c_valid_cksumtype","appdev/refs/api/krb5_c_valid_enctype","appdev/refs/api/krb5_c_verify_checksum","appdev/refs/api/krb5_c_verify_checksum_iov","appdev/refs/api/krb5_calculate_checksum","appdev/refs/api/krb5_cc_cache_match","appdev/refs/api/krb5_cc_close","appdev/refs/api/krb5_cc_copy_creds","appdev/refs/api/krb5_cc_default","appdev/refs/api/krb5_cc_default_name","appdev/refs/api/krb5_cc_destroy","appdev/refs/api/krb5_cc_dup","appdev/refs/api/krb5_cc_end_seq_get","appdev/refs/api/krb5_cc_gen_new","appdev/refs/api/krb5_cc_get_config","appdev/refs/api/krb5_cc_get_flags","appdev/refs/api/krb5_cc_get_full_name","appdev/refs/api/krb5_cc_get_name","appdev/refs/api/krb5_cc_get_principal","appdev/refs/api/krb5_cc_get_type","appdev/refs/api/krb5_cc_initialize","appdev/refs/api/krb5_cc_move","appdev/refs/api/krb5_cc_new_unique","appdev/refs/api/krb5_cc_next_cred","appdev/refs/api/krb5_cc_remove_cred","appdev/refs/api/krb5_cc_resolve","appdev/refs/api/krb5_cc_retrieve_cred","appdev/refs/api/krb5_cc_select","appdev/refs/api/krb5_cc_set_config","appdev/refs/api/krb5_cc_set_default_name","appdev/refs/api/krb5_cc_set_flags","appdev/refs/api/krb5_cc_start_seq_get","appdev/refs/api/krb5_cc_store_cred","appdev/refs/api/krb5_cc_support_switch","appdev/refs/api/krb5_cc_switch","appdev/refs/api/krb5_cccol_cursor_free","appdev/refs/api/krb5_cccol_cursor_new","appdev/refs/api/krb5_cccol_cursor_next","appdev/refs/api/krb5_cccol_have_content","appdev/refs/api/krb5_change_password","appdev/refs/api/krb5_check_clockskew","appdev/refs/api/krb5_checksum_size","appdev/refs/api/krb5_chpw_message","appdev/refs/api/krb5_cksumtype_to_string","appdev/refs/api/krb5_clear_error_message","appdev/refs/api/krb5_copy_addresses","appdev/refs/api/krb5_copy_authdata","appdev/refs/api/krb5_copy_authenticator","appdev/refs/api/krb5_copy_checksum","appdev/refs/api/krb5_copy_context","appdev/refs/api/krb5_copy_creds","appdev/refs/api/krb5_copy_data","appdev/refs/api/krb5_copy_error_message","appdev/refs/api/krb5_copy_keyblock","appdev/refs/api/krb5_copy_keyblock_contents","appdev/refs/api/krb5_copy_principal","appdev/refs/api/krb5_copy_ticket","appdev/refs/api/krb5_decode_authdata_container","appdev/refs/api/krb5_decode_ticket","appdev/refs/api/krb5_decrypt","appdev/refs/api/krb5_deltat_to_string","appdev/refs/api/krb5_eblock_enctype","appdev/refs/api/krb5_encode_authdata_container","appdev/refs/api/krb5_encrypt","appdev/refs/api/krb5_encrypt_size","appdev/refs/api/krb5_enctype_to_name","appdev/refs/api/krb5_enctype_to_string","appdev/refs/api/krb5_expand_hostname","appdev/refs/api/krb5_find_authdata","appdev/refs/api/krb5_finish_key","appdev/refs/api/krb5_finish_random_key","appdev/refs/api/krb5_free_addresses","appdev/refs/api/krb5_free_ap_rep_enc_part","appdev/refs/api/krb5_free_authdata","appdev/refs/api/krb5_free_authenticator","appdev/refs/api/krb5_free_checksum","appdev/refs/api/krb5_free_checksum_contents","appdev/refs/api/krb5_free_cksumtypes","appdev/refs/api/krb5_free_context","appdev/refs/api/krb5_free_cred_contents","appdev/refs/api/krb5_free_creds","appdev/refs/api/krb5_free_data","appdev/refs/api/krb5_free_data_contents","appdev/refs/api/krb5_free_default_realm","appdev/refs/api/krb5_free_enctypes","appdev/refs/api/krb5_free_error","appdev/refs/api/krb5_free_error_message","appdev/refs/api/krb5_free_host_realm","appdev/refs/api/krb5_free_keyblock","appdev/refs/api/krb5_free_keyblock_contents","appdev/refs/api/krb5_free_keytab_entry_contents","appdev/refs/api/krb5_free_principal","appdev/refs/api/krb5_free_string","appdev/refs/api/krb5_free_tgt_creds","appdev/refs/api/krb5_free_ticket","appdev/refs/api/krb5_free_unparsed_name","appdev/refs/api/krb5_fwd_tgt_creds","appdev/refs/api/krb5_get_credentials","appdev/refs/api/krb5_get_credentials_renew","appdev/refs/api/krb5_get_credentials_validate","appdev/refs/api/krb5_get_default_realm","appdev/refs/api/krb5_get_error_message","appdev/refs/api/krb5_get_etype_info","appdev/refs/api/krb5_get_fallback_host_realm","appdev/refs/api/krb5_get_host_realm","appdev/refs/api/krb5_get_in_tkt_with_keytab","appdev/refs/api/krb5_get_in_tkt_with_password","appdev/refs/api/krb5_get_in_tkt_with_skey","appdev/refs/api/krb5_get_init_creds_keytab","appdev/refs/api/krb5_get_init_creds_opt_alloc","appdev/refs/api/krb5_get_init_creds_opt_free","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_init","appdev/refs/api/krb5_get_init_creds_opt_set_address_list","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_pa","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life","appdev/refs/api/krb5_get_init_creds_opt_set_responder","appdev/refs/api/krb5_get_init_creds_opt_set_salt","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life","appdev/refs/api/krb5_get_init_creds_password","appdev/refs/api/krb5_get_permitted_enctypes","appdev/refs/api/krb5_get_profile","appdev/refs/api/krb5_get_prompt_types","appdev/refs/api/krb5_get_renewed_creds","appdev/refs/api/krb5_get_server_rcache","appdev/refs/api/krb5_get_time_offsets","appdev/refs/api/krb5_get_validated_creds","appdev/refs/api/krb5_init_context","appdev/refs/api/krb5_init_context_profile","appdev/refs/api/krb5_init_creds_free","appdev/refs/api/krb5_init_creds_get","appdev/refs/api/krb5_init_creds_get_creds","appdev/refs/api/krb5_init_creds_get_error","appdev/refs/api/krb5_init_creds_get_times","appdev/refs/api/krb5_init_creds_init","appdev/refs/api/krb5_init_creds_set_keytab","appdev/refs/api/krb5_init_creds_set_password","appdev/refs/api/krb5_init_creds_set_service","appdev/refs/api/krb5_init_creds_step","appdev/refs/api/krb5_init_keyblock","appdev/refs/api/krb5_init_random_key","appdev/refs/api/krb5_init_secure_context","appdev/refs/api/krb5_is_config_principal","appdev/refs/api/krb5_is_referral_realm","appdev/refs/api/krb5_is_thread_safe","appdev/refs/api/krb5_k_create_key","appdev/refs/api/krb5_k_decrypt","appdev/refs/api/krb5_k_decrypt_iov","appdev/refs/api/krb5_k_encrypt","appdev/refs/api/krb5_k_encrypt_iov","appdev/refs/api/krb5_k_free_key","appdev/refs/api/krb5_k_key_enctype","appdev/refs/api/krb5_k_key_keyblock","appdev/refs/api/krb5_k_make_checksum","appdev/refs/api/krb5_k_make_checksum_iov","appdev/refs/api/krb5_k_prf","appdev/refs/api/krb5_k_reference_key","appdev/refs/api/krb5_k_verify_checksum","appdev/refs/api/krb5_k_verify_checksum_iov","appdev/refs/api/krb5_kdc_sign_ticket","appdev/refs/api/krb5_kdc_verify_ticket","appdev/refs/api/krb5_kt_add_entry","appdev/refs/api/krb5_kt_client_default","appdev/refs/api/krb5_kt_close","appdev/refs/api/krb5_kt_default","appdev/refs/api/krb5_kt_default_name","appdev/refs/api/krb5_kt_dup","appdev/refs/api/krb5_kt_end_seq_get","appdev/refs/api/krb5_kt_free_entry","appdev/refs/api/krb5_kt_get_entry","appdev/refs/api/krb5_kt_get_name","appdev/refs/api/krb5_kt_get_type","appdev/refs/api/krb5_kt_have_content","appdev/refs/api/krb5_kt_next_entry","appdev/refs/api/krb5_kt_read_service_key","appdev/refs/api/krb5_kt_remove_entry","appdev/refs/api/krb5_kt_resolve","appdev/refs/api/krb5_kt_start_seq_get","appdev/refs/api/krb5_kuserok","appdev/refs/api/krb5_make_authdata_kdc_issued","appdev/refs/api/krb5_marshal_credentials","appdev/refs/api/krb5_merge_authdata","appdev/refs/api/krb5_mk_1cred","appdev/refs/api/krb5_mk_error","appdev/refs/api/krb5_mk_ncred","appdev/refs/api/krb5_mk_priv","appdev/refs/api/krb5_mk_rep","appdev/refs/api/krb5_mk_rep_dce","appdev/refs/api/krb5_mk_req","appdev/refs/api/krb5_mk_req_extended","appdev/refs/api/krb5_mk_safe","appdev/refs/api/krb5_os_localaddr","appdev/refs/api/krb5_pac_add_buffer","appdev/refs/api/krb5_pac_free","appdev/refs/api/krb5_pac_get_buffer","appdev/refs/api/krb5_pac_get_client_info","appdev/refs/api/krb5_pac_get_types","appdev/refs/api/krb5_pac_init","appdev/refs/api/krb5_pac_parse","appdev/refs/api/krb5_pac_sign","appdev/refs/api/krb5_pac_sign_ext","appdev/refs/api/krb5_pac_verify","appdev/refs/api/krb5_pac_verify_ext","appdev/refs/api/krb5_parse_name","appdev/refs/api/krb5_parse_name_flags","appdev/refs/api/krb5_prepend_error_message","appdev/refs/api/krb5_principal2salt","appdev/refs/api/krb5_principal_compare","appdev/refs/api/krb5_principal_compare_any_realm","appdev/refs/api/krb5_principal_compare_flags","appdev/refs/api/krb5_process_key","appdev/refs/api/krb5_prompter_posix","appdev/refs/api/krb5_random_key","appdev/refs/api/krb5_rd_cred","appdev/refs/api/krb5_rd_error","appdev/refs/api/krb5_rd_priv","appdev/refs/api/krb5_rd_rep","appdev/refs/api/krb5_rd_rep_dce","appdev/refs/api/krb5_rd_req","appdev/refs/api/krb5_rd_safe","appdev/refs/api/krb5_read_password","appdev/refs/api/krb5_realm_compare","appdev/refs/api/krb5_recvauth","appdev/refs/api/krb5_recvauth_version","appdev/refs/api/krb5_responder_get_challenge","appdev/refs/api/krb5_responder_list_questions","appdev/refs/api/krb5_responder_otp_challenge_free","appdev/refs/api/krb5_responder_otp_get_challenge","appdev/refs/api/krb5_responder_otp_set_answer","appdev/refs/api/krb5_responder_pkinit_challenge_free","appdev/refs/api/krb5_responder_pkinit_get_challenge","appdev/refs/api/krb5_responder_pkinit_set_answer","appdev/refs/api/krb5_responder_set_answer","appdev/refs/api/krb5_salttype_to_string","appdev/refs/api/krb5_sendauth","appdev/refs/api/krb5_server_decrypt_ticket_keytab","appdev/refs/api/krb5_set_default_realm","appdev/refs/api/krb5_set_default_tgs_enctypes","appdev/refs/api/krb5_set_error_message","appdev/refs/api/krb5_set_kdc_recv_hook","appdev/refs/api/krb5_set_kdc_send_hook","appdev/refs/api/krb5_set_password","appdev/refs/api/krb5_set_password_using_ccache","appdev/refs/api/krb5_set_principal_realm","appdev/refs/api/krb5_set_real_time","appdev/refs/api/krb5_set_trace_callback","appdev/refs/api/krb5_set_trace_filename","appdev/refs/api/krb5_sname_match","appdev/refs/api/krb5_sname_to_principal","appdev/refs/api/krb5_string_to_cksumtype","appdev/refs/api/krb5_string_to_deltat","appdev/refs/api/krb5_string_to_enctype","appdev/refs/api/krb5_string_to_key","appdev/refs/api/krb5_string_to_salttype","appdev/refs/api/krb5_string_to_timestamp","appdev/refs/api/krb5_timeofday","appdev/refs/api/krb5_timestamp_to_sfstring","appdev/refs/api/krb5_timestamp_to_string","appdev/refs/api/krb5_tkt_creds_free","appdev/refs/api/krb5_tkt_creds_get","appdev/refs/api/krb5_tkt_creds_get_creds","appdev/refs/api/krb5_tkt_creds_get_times","appdev/refs/api/krb5_tkt_creds_init","appdev/refs/api/krb5_tkt_creds_step","appdev/refs/api/krb5_unmarshal_credentials","appdev/refs/api/krb5_unparse_name","appdev/refs/api/krb5_unparse_name_ext","appdev/refs/api/krb5_unparse_name_flags","appdev/refs/api/krb5_unparse_name_flags_ext","appdev/refs/api/krb5_us_timeofday","appdev/refs/api/krb5_use_enctype","appdev/refs/api/krb5_verify_authdata_kdc_issued","appdev/refs/api/krb5_verify_checksum","appdev/refs/api/krb5_verify_init_creds","appdev/refs/api/krb5_verify_init_creds_opt_init","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail","appdev/refs/api/krb5_vprepend_error_message","appdev/refs/api/krb5_vset_error_message","appdev/refs/api/krb5_vwrap_error_message","appdev/refs/api/krb5_wrap_error_message","appdev/refs/index","appdev/refs/macros/ADDRTYPE_ADDRPORT","appdev/refs/macros/ADDRTYPE_CHAOS","appdev/refs/macros/ADDRTYPE_DDP","appdev/refs/macros/ADDRTYPE_INET","appdev/refs/macros/ADDRTYPE_INET6","appdev/refs/macros/ADDRTYPE_IPPORT","appdev/refs/macros/ADDRTYPE_ISO","appdev/refs/macros/ADDRTYPE_IS_LOCAL","appdev/refs/macros/ADDRTYPE_NETBIOS","appdev/refs/macros/ADDRTYPE_XNS","appdev/refs/macros/AD_TYPE_EXTERNAL","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK","appdev/refs/macros/AD_TYPE_REGISTERED","appdev/refs/macros/AD_TYPE_RESERVED","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED","appdev/refs/macros/AP_OPTS_RESERVED","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY","appdev/refs/macros/AP_OPTS_USE_SUBKEY","appdev/refs/macros/AP_OPTS_WIRE_MASK","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256","appdev/refs/macros/CKSUMTYPE_CRC32","appdev/refs/macros/CKSUMTYPE_DESCBC","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR","appdev/refs/macros/CKSUMTYPE_NIST_SHA","appdev/refs/macros/CKSUMTYPE_RSA_MD4","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES","appdev/refs/macros/CKSUMTYPE_RSA_MD5","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES","appdev/refs/macros/CKSUMTYPE_SHA1","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1","appdev/refs/macros/ENCTYPE_DES_CBC_CRC","appdev/refs/macros/ENCTYPE_DES_CBC_MD4","appdev/refs/macros/ENCTYPE_DES_CBC_MD5","appdev/refs/macros/ENCTYPE_DES_CBC_RAW","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS","appdev/refs/macros/ENCTYPE_NULL","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV","appdev/refs/macros/ENCTYPE_RSA_ENV","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS","appdev/refs/macros/ENCTYPE_UNKNOWN","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE","appdev/refs/macros/KDC_OPT_CANONICALIZE","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY","appdev/refs/macros/KDC_OPT_FORWARDABLE","appdev/refs/macros/KDC_OPT_FORWARDED","appdev/refs/macros/KDC_OPT_POSTDATED","appdev/refs/macros/KDC_OPT_PROXIABLE","appdev/refs/macros/KDC_OPT_PROXY","appdev/refs/macros/KDC_OPT_RENEW","appdev/refs/macros/KDC_OPT_RENEWABLE","appdev/refs/macros/KDC_OPT_RENEWABLE_OK","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS","appdev/refs/macros/KDC_OPT_VALIDATE","appdev/refs/macros/KDC_TKT_COMMON_MASK","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR","appdev/refs/macros/KRB5_AP_REP","appdev/refs/macros/KRB5_AP_REQ","appdev/refs/macros/KRB5_AS_REP","appdev/refs/macros/KRB5_AS_REQ","appdev/refs/macros/KRB5_AUTHDATA_AND_OR","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE","appdev/refs/macros/KRB5_AUTHDATA_SESAME","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY","appdev/refs/macros/KRB5_CRED","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP","appdev/refs/macros/KRB5_ERROR","appdev/refs/macros/KRB5_FAST_REQUIRED","appdev/refs/macros/KRB5_GC_CACHED","appdev/refs/macros/KRB5_GC_CANONICALIZE","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION","appdev/refs/macros/KRB5_GC_FORWARDABLE","appdev/refs/macros/KRB5_GC_NO_STORE","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK","appdev/refs/macros/KRB5_GC_USER_USER","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_INT16_MAX","appdev/refs/macros/KRB5_INT16_MIN","appdev/refs/macros/KRB5_INT32_MAX","appdev/refs/macros/KRB5_INT32_MIN","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION","appdev/refs/macros/KRB5_KPASSWD_HARDERROR","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED","appdev/refs/macros/KRB5_KPASSWD_MALFORMED","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR","appdev/refs/macros/KRB5_KPASSWD_SUCCESS","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME","appdev/refs/macros/KRB5_LRQ_NONE","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_PRINCIPAL","appdev/refs/macros/KRB5_NT_SMTP_NAME","appdev/refs/macros/KRB5_NT_SRV_HST","appdev/refs/macros/KRB5_NT_SRV_INST","appdev/refs/macros/KRB5_NT_SRV_XHST","appdev/refs/macros/KRB5_NT_UID","appdev/refs/macros/KRB5_NT_UNKNOWN","appdev/refs/macros/KRB5_NT_WELLKNOWN","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS","appdev/refs/macros/KRB5_PAC_CLIENT_INFO","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS","appdev/refs/macros/KRB5_PAC_DEVICE_INFO","appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM","appdev/refs/macros/KRB5_PAC_LOGON_INFO","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM","appdev/refs/macros/KRB5_PAC_REQUESTOR","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO","appdev/refs/macros/KRB5_PADATA_AFS3_SALT","appdev/refs/macros/KRB5_PADATA_AP_REQ","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2","appdev/refs/macros/KRB5_PADATA_FOR_USER","appdev/refs/macros/KRB5_PADATA_FX_COOKIE","appdev/refs/macros/KRB5_PADATA_FX_ERROR","appdev/refs/macros/KRB5_PADATA_FX_FAST","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA","appdev/refs/macros/KRB5_PADATA_NONE","appdev/refs/macros/KRB5_PADATA_OSF_DCE","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST","appdev/refs/macros/KRB5_PADATA_PKINIT_KX","appdev/refs/macros/KRB5_PADATA_PK_AS_REP","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD","appdev/refs/macros/KRB5_PADATA_PW_SALT","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2","appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY","appdev/refs/macros/KRB5_PADATA_REFERRAL","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2","appdev/refs/macros/KRB5_PADATA_SESAME","appdev/refs/macros/KRB5_PADATA_SPAKE","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO","appdev/refs/macros/KRB5_PADATA_TGS_REQ","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT","appdev/refs/macros/KRB5_PRIV","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH","appdev/refs/macros/KRB5_PVNO","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION","appdev/refs/macros/KRB5_REFERRAL_REALM","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT","appdev/refs/macros/KRB5_SAFE","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA","appdev/refs/macros/KRB5_TC_MATCH_FLAGS","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY","appdev/refs/macros/KRB5_TC_MATCH_KTYPE","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY","appdev/refs/macros/KRB5_TC_MATCH_TIMES","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT","appdev/refs/macros/KRB5_TC_NOTICKET","appdev/refs/macros/KRB5_TC_OPENCLOSE","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES","appdev/refs/macros/KRB5_TGS_NAME","appdev/refs/macros/KRB5_TGS_NAME_SIZE","appdev/refs/macros/KRB5_TGS_REP","appdev/refs/macros/KRB5_TGS_REQ","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY","appdev/refs/macros/MAX_KEYTAB_NAME_LEN","appdev/refs/macros/MSEC_DIRBIT","appdev/refs/macros/MSEC_VAL_MASK","appdev/refs/macros/SALT_TYPE_AFS_LENGTH","appdev/refs/macros/SALT_TYPE_NO_LENGTH","appdev/refs/macros/THREEPARAMOPEN","appdev/refs/macros/TKT_FLG_ANONYMOUS","appdev/refs/macros/TKT_FLG_ENC_PA_REP","appdev/refs/macros/TKT_FLG_FORWARDABLE","appdev/refs/macros/TKT_FLG_FORWARDED","appdev/refs/macros/TKT_FLG_HW_AUTH","appdev/refs/macros/TKT_FLG_INITIAL","appdev/refs/macros/TKT_FLG_INVALID","appdev/refs/macros/TKT_FLG_MAY_POSTDATE","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE","appdev/refs/macros/TKT_FLG_POSTDATED","appdev/refs/macros/TKT_FLG_PRE_AUTH","appdev/refs/macros/TKT_FLG_PROXIABLE","appdev/refs/macros/TKT_FLG_PROXY","appdev/refs/macros/TKT_FLG_RENEWABLE","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED","appdev/refs/macros/VALID_INT_BITS","appdev/refs/macros/VALID_UINT_BITS","appdev/refs/macros/index","appdev/refs/macros/krb524_convert_creds_kdc","appdev/refs/macros/krb524_init_ets","appdev/refs/macros/krb5_const","appdev/refs/macros/krb5_princ_component","appdev/refs/macros/krb5_princ_name","appdev/refs/macros/krb5_princ_realm","appdev/refs/macros/krb5_princ_set_realm","appdev/refs/macros/krb5_princ_set_realm_data","appdev/refs/macros/krb5_princ_set_realm_length","appdev/refs/macros/krb5_princ_size","appdev/refs/macros/krb5_princ_type","appdev/refs/macros/krb5_roundup","appdev/refs/macros/krb5_x","appdev/refs/macros/krb5_xc","appdev/refs/types/index","appdev/refs/types/krb5_address","appdev/refs/types/krb5_addrtype","appdev/refs/types/krb5_ap_rep","appdev/refs/types/krb5_ap_rep_enc_part","appdev/refs/types/krb5_ap_req","appdev/refs/types/krb5_auth_context","appdev/refs/types/krb5_authdata","appdev/refs/types/krb5_authdatatype","appdev/refs/types/krb5_authenticator","appdev/refs/types/krb5_boolean","appdev/refs/types/krb5_cc_cursor","appdev/refs/types/krb5_ccache","appdev/refs/types/krb5_cccol_cursor","appdev/refs/types/krb5_checksum","appdev/refs/types/krb5_cksumtype","appdev/refs/types/krb5_const_pointer","appdev/refs/types/krb5_const_principal","appdev/refs/types/krb5_context","appdev/refs/types/krb5_cred","appdev/refs/types/krb5_cred_enc_part","appdev/refs/types/krb5_cred_info","appdev/refs/types/krb5_creds","appdev/refs/types/krb5_crypto_iov","appdev/refs/types/krb5_cryptotype","appdev/refs/types/krb5_data","appdev/refs/types/krb5_deltat","appdev/refs/types/krb5_enc_data","appdev/refs/types/krb5_enc_kdc_rep_part","appdev/refs/types/krb5_enc_tkt_part","appdev/refs/types/krb5_encrypt_block","appdev/refs/types/krb5_enctype","appdev/refs/types/krb5_error","appdev/refs/types/krb5_error_code","appdev/refs/types/krb5_expire_callback_func","appdev/refs/types/krb5_flags","appdev/refs/types/krb5_get_init_creds_opt","appdev/refs/types/krb5_gic_opt_pa_data","appdev/refs/types/krb5_init_creds_context","appdev/refs/types/krb5_int16","appdev/refs/types/krb5_int32","appdev/refs/types/krb5_kdc_rep","appdev/refs/types/krb5_kdc_req","appdev/refs/types/krb5_key","appdev/refs/types/krb5_keyblock","appdev/refs/types/krb5_keytab","appdev/refs/types/krb5_keytab_entry","appdev/refs/types/krb5_keyusage","appdev/refs/types/krb5_kt_cursor","appdev/refs/types/krb5_kvno","appdev/refs/types/krb5_last_req_entry","appdev/refs/types/krb5_magic","appdev/refs/types/krb5_mk_req_checksum_func","appdev/refs/types/krb5_msgtype","appdev/refs/types/krb5_octet","appdev/refs/types/krb5_pa_data","appdev/refs/types/krb5_pa_pac_req","appdev/refs/types/krb5_pa_server_referral_data","appdev/refs/types/krb5_pa_svr_referral_data","appdev/refs/types/krb5_pac","appdev/refs/types/krb5_pointer","appdev/refs/types/krb5_post_recv_fn","appdev/refs/types/krb5_pre_send_fn","appdev/refs/types/krb5_preauthtype","appdev/refs/types/krb5_principal","appdev/refs/types/krb5_principal_data","appdev/refs/types/krb5_prompt","appdev/refs/types/krb5_prompt_type","appdev/refs/types/krb5_prompter_fct","appdev/refs/types/krb5_pwd_data","appdev/refs/types/krb5_rcache","appdev/refs/types/krb5_replay_data","appdev/refs/types/krb5_responder_context","appdev/refs/types/krb5_responder_fn","appdev/refs/types/krb5_responder_otp_challenge","appdev/refs/types/krb5_responder_otp_tokeninfo","appdev/refs/types/krb5_responder_pkinit_challenge","appdev/refs/types/krb5_responder_pkinit_identity","appdev/refs/types/krb5_response","appdev/refs/types/krb5_ticket","appdev/refs/types/krb5_ticket_times","appdev/refs/types/krb5_timestamp","appdev/refs/types/krb5_tkt_authent","appdev/refs/types/krb5_tkt_creds_context","appdev/refs/types/krb5_trace_callback","appdev/refs/types/krb5_trace_info","appdev/refs/types/krb5_transited","appdev/refs/types/krb5_typed_data","appdev/refs/types/krb5_ui_2","appdev/refs/types/krb5_ui_4","appdev/refs/types/krb5_verify_init_creds_opt","appdev/refs/types/passwd_phrase_element","appdev/y2038","basic/ccache_def","basic/date_format","basic/index","basic/keytab_def","basic/rcache_def","basic/stash_file_def","build/directory_org","build/doing_build","build/index","build/options2configure","build/osconf","build_this","copyright","formats/ccache_file_format","formats/cookie","formats/freshness_token","formats/index","formats/keytab_file_format","formats/rcache_file_format","index","mitK5defaults","mitK5features","mitK5license","plugindev/ccselect","plugindev/certauth","plugindev/clpreauth","plugindev/general","plugindev/gssapi","plugindev/hostrealm","plugindev/index","plugindev/internal","plugindev/kadm5_auth","plugindev/kadm5_hook","plugindev/kdcpolicy","plugindev/kdcpreauth","plugindev/localauth","plugindev/locate","plugindev/profile","plugindev/pwqual","resources","user/index","user/pwd_mgmt","user/tkt_mgmt","user/user_commands/index","user/user_commands/kdestroy","user/user_commands/kinit","user/user_commands/klist","user/user_commands/kpasswd","user/user_commands/krb5-config","user/user_commands/ksu","user/user_commands/kswitch","user/user_commands/kvno","user/user_commands/sclient","user/user_config/index","user/user_config/k5identity","user/user_config/k5login","user/user_config/kerberos",envversion:52,filenames:"about.rst","admin/admin_commands/index.rst","admin/admin_commands/k5srvutil.rst","admin/admin_commands/kadmin_local.rst","admin/admin_commands/kadmind.rst","admin/admin_commands/kdb5_ldap_util.rst","admin/admin_commands/kdb5_util.rst","admin/admin_commands/kprop.rst","admin/admin_commands/kpropd.rst","admin/admin_commands/kproplog.rst","admin/admin_commands/krb5kdc.rst","admin/admin_commands/ktutil.rst","admin/admin_commands/sserver.rst","admin/advanced/index.rst","admin/advanced/retiring-des.rst","admin/appl_servers.rst","admin/auth_indicator.rst","admin/backup_host.rst","admin/conf_files/index.rst","admin/conf_files/kadm5_acl.rst","admin/conf_files/kdc_conf.rst","admin/conf_files/krb5_conf.rst","admin/conf_ldap.rst","admin/database.rst","admin/dbtypes.rst","admin/dictionary.rst","admin/enctypes.rst","admin/env_variables.rst","admin/host_config.rst","admin/https.rst","admin/index.rst","admin/install.rst","admin/install_appl_srv.rst","admin/install_clients.rst","admin/install_kdc.rst","admin/lockout.rst","admin/otp.rst","admin/pkinit.rst","admin/princ_dns.rst","admin/realm_config.rst","admin/spake.rst","admin/troubleshoot.rst","admin/various_envs.rst","appdev/gssapi.rst","appdev/h5l_mit_apidiff.rst","appdev/index.rst","appdev/init_creds.rst","appdev/princ_handle.rst","appdev/refs/api/index.rst","appdev/refs/api/krb5_425_conv_principal.rst","appdev/refs/api/krb5_524_conv_principal.rst","appdev/refs/api/krb5_524_convert_creds.rst","appdev/refs/api/krb5_address_compare.rst","appdev/refs/api/krb5_address_order.rst","appdev/refs/api/krb5_address_search.rst","appdev/refs/api/krb5_allow_weak_crypto.rst","appdev/refs/api/krb5_aname_to_localname.rst","appdev/refs/api/krb5_anonymous_principal.rst","appdev/refs/api/krb5_anonymous_realm.rst","appdev/refs/api/krb5_appdefault_boolean.rst","appdev/refs/api/krb5_appdefault_string.rst","appdev/refs/api/krb5_auth_con_free.rst","appdev/refs/api/krb5_auth_con_genaddrs.rst","appdev/refs/api/krb5_auth_con_get_checksum_func.rst","appdev/refs/api/krb5_auth_con_getaddrs.rst","appdev/refs/api/krb5_auth_con_getauthenticator.rst","appdev/refs/api/krb5_auth_con_getflags.rst","appdev/refs/api/krb5_auth_con_getkey.rst","appdev/refs/api/krb5_auth_con_getkey_k.rst","appdev/refs/api/krb5_auth_con_getlocalseqnumber.rst","appdev/refs/api/krb5_auth_con_getlocalsubkey.rst","appdev/refs/api/krb5_auth_con_getrcache.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_getremoteseqnumber.rst","appdev/refs/api/krb5_auth_con_getremotesubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_init.rst","appdev/refs/api/krb5_auth_con_initivector.rst","appdev/refs/api/krb5_auth_con_set_checksum_func.rst","appdev/refs/api/krb5_auth_con_set_req_cksumtype.rst","appdev/refs/api/krb5_auth_con_setaddrs.rst","appdev/refs/api/krb5_auth_con_setflags.rst","appdev/refs/api/krb5_auth_con_setports.rst","appdev/refs/api/krb5_auth_con_setrcache.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_setsendsubkey.rst","appdev/refs/api/krb5_auth_con_setsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_setuseruserkey.rst","appdev/refs/api/krb5_build_principal.rst","appdev/refs/api/krb5_build_principal_alloc_va.rst","appdev/refs/api/krb5_build_principal_ext.rst","appdev/refs/api/krb5_build_principal_va.rst","appdev/refs/api/krb5_c_block_size.rst","appdev/refs/api/krb5_c_checksum_length.rst","appdev/refs/api/krb5_c_crypto_length.rst","appdev/refs/api/krb5_c_crypto_length_iov.rst","appdev/refs/api/krb5_c_decrypt.rst","appdev/refs/api/krb5_c_decrypt_iov.rst","appdev/refs/api/krb5_c_derive_prfplus.rst","appdev/refs/api/krb5_c_encrypt.rst","appdev/refs/api/krb5_c_encrypt_iov.rst","appdev/refs/api/krb5_c_encrypt_length.rst","appdev/refs/api/krb5_c_enctype_compare.rst","appdev/refs/api/krb5_c_free_state.rst","appdev/refs/api/krb5_c_fx_cf2_simple.rst","appdev/refs/api/krb5_c_init_state.rst","appdev/refs/api/krb5_c_is_coll_proof_cksum.rst","appdev/refs/api/krb5_c_is_keyed_cksum.rst","appdev/refs/api/krb5_c_keyed_checksum_types.rst","appdev/refs/api/krb5_c_keylengths.rst","appdev/refs/api/krb5_c_make_checksum.rst","appdev/refs/api/krb5_c_make_checksum_iov.rst","appdev/refs/api/krb5_c_make_random_key.rst","appdev/refs/api/krb5_c_padding_length.rst","appdev/refs/api/krb5_c_prf.rst","appdev/refs/api/krb5_c_prf_length.rst","appdev/refs/api/krb5_c_prfplus.rst","appdev/refs/api/krb5_c_random_add_entropy.rst","appdev/refs/api/krb5_c_random_make_octets.rst","appdev/refs/api/krb5_c_random_os_entropy.rst","appdev/refs/api/krb5_c_random_seed.rst","appdev/refs/api/krb5_c_random_to_key.rst","appdev/refs/api/krb5_c_string_to_key.rst","appdev/refs/api/krb5_c_string_to_key_with_params.rst","appdev/refs/api/krb5_c_valid_cksumtype.rst","appdev/refs/api/krb5_c_valid_enctype.rst","appdev/refs/api/krb5_c_verify_checksum.rst","appdev/refs/api/krb5_c_verify_checksum_iov.rst","appdev/refs/api/krb5_calculate_checksum.rst","appdev/refs/api/krb5_cc_cache_match.rst","appdev/refs/api/krb5_cc_close.rst","appdev/refs/api/krb5_cc_copy_creds.rst","appdev/refs/api/krb5_cc_default.rst","appdev/refs/api/krb5_cc_default_name.rst","appdev/refs/api/krb5_cc_destroy.rst","appdev/refs/api/krb5_cc_dup.rst","appdev/refs/api/krb5_cc_end_seq_get.rst","appdev/refs/api/krb5_cc_gen_new.rst","appdev/refs/api/krb5_cc_get_config.rst","appdev/refs/api/krb5_cc_get_flags.rst","appdev/refs/api/krb5_cc_get_full_name.rst","appdev/refs/api/krb5_cc_get_name.rst","appdev/refs/api/krb5_cc_get_principal.rst","appdev/refs/api/krb5_cc_get_type.rst","appdev/refs/api/krb5_cc_initialize.rst","appdev/refs/api/krb5_cc_move.rst","appdev/refs/api/krb5_cc_new_unique.rst","appdev/refs/api/krb5_cc_next_cred.rst","appdev/refs/api/krb5_cc_remove_cred.rst","appdev/refs/api/krb5_cc_resolve.rst","appdev/refs/api/krb5_cc_retrieve_cred.rst","appdev/refs/api/krb5_cc_select.rst","appdev/refs/api/krb5_cc_set_config.rst","appdev/refs/api/krb5_cc_set_default_name.rst","appdev/refs/api/krb5_cc_set_flags.rst","appdev/refs/api/krb5_cc_start_seq_get.rst","appdev/refs/api/krb5_cc_store_cred.rst","appdev/refs/api/krb5_cc_support_switch.rst","appdev/refs/api/krb5_cc_switch.rst","appdev/refs/api/krb5_cccol_cursor_free.rst","appdev/refs/api/krb5_cccol_cursor_new.rst","appdev/refs/api/krb5_cccol_cursor_next.rst","appdev/refs/api/krb5_cccol_have_content.rst","appdev/refs/api/krb5_change_password.rst","appdev/refs/api/krb5_check_clockskew.rst","appdev/refs/api/krb5_checksum_size.rst","appdev/refs/api/krb5_chpw_message.rst","appdev/refs/api/krb5_cksumtype_to_string.rst","appdev/refs/api/krb5_clear_error_message.rst","appdev/refs/api/krb5_copy_addresses.rst","appdev/refs/api/krb5_copy_authdata.rst","appdev/refs/api/krb5_copy_authenticator.rst","appdev/refs/api/krb5_copy_checksum.rst","appdev/refs/api/krb5_copy_context.rst","appdev/refs/api/krb5_copy_creds.rst","appdev/refs/api/krb5_copy_data.rst","appdev/refs/api/krb5_copy_error_message.rst","appdev/refs/api/krb5_copy_keyblock.rst","appdev/refs/api/krb5_copy_keyblock_contents.rst","appdev/refs/api/krb5_copy_principal.rst","appdev/refs/api/krb5_copy_ticket.rst","appdev/refs/api/krb5_decode_authdata_container.rst","appdev/refs/api/krb5_decode_ticket.rst","appdev/refs/api/krb5_decrypt.rst","appdev/refs/api/krb5_deltat_to_string.rst","appdev/refs/api/krb5_eblock_enctype.rst","appdev/refs/api/krb5_encode_authdata_container.rst","appdev/refs/api/krb5_encrypt.rst","appdev/refs/api/krb5_encrypt_size.rst","appdev/refs/api/krb5_enctype_to_name.rst","appdev/refs/api/krb5_enctype_to_string.rst","appdev/refs/api/krb5_expand_hostname.rst","appdev/refs/api/krb5_find_authdata.rst","appdev/refs/api/krb5_finish_key.rst","appdev/refs/api/krb5_finish_random_key.rst","appdev/refs/api/krb5_free_addresses.rst","appdev/refs/api/krb5_free_ap_rep_enc_part.rst","appdev/refs/api/krb5_free_authdata.rst","appdev/refs/api/krb5_free_authenticator.rst","appdev/refs/api/krb5_free_checksum.rst","appdev/refs/api/krb5_free_checksum_contents.rst","appdev/refs/api/krb5_free_cksumtypes.rst","appdev/refs/api/krb5_free_context.rst","appdev/refs/api/krb5_free_cred_contents.rst","appdev/refs/api/krb5_free_creds.rst","appdev/refs/api/krb5_free_data.rst","appdev/refs/api/krb5_free_data_contents.rst","appdev/refs/api/krb5_free_default_realm.rst","appdev/refs/api/krb5_free_enctypes.rst","appdev/refs/api/krb5_free_error.rst","appdev/refs/api/krb5_free_error_message.rst","appdev/refs/api/krb5_free_host_realm.rst","appdev/refs/api/krb5_free_keyblock.rst","appdev/refs/api/krb5_free_keyblock_contents.rst","appdev/refs/api/krb5_free_keytab_entry_contents.rst","appdev/refs/api/krb5_free_principal.rst","appdev/refs/api/krb5_free_string.rst","appdev/refs/api/krb5_free_tgt_creds.rst","appdev/refs/api/krb5_free_ticket.rst","appdev/refs/api/krb5_free_unparsed_name.rst","appdev/refs/api/krb5_fwd_tgt_creds.rst","appdev/refs/api/krb5_get_credentials.rst","appdev/refs/api/krb5_get_credentials_renew.rst","appdev/refs/api/krb5_get_credentials_validate.rst","appdev/refs/api/krb5_get_default_realm.rst","appdev/refs/api/krb5_get_error_message.rst","appdev/refs/api/krb5_get_etype_info.rst","appdev/refs/api/krb5_get_fallback_host_realm.rst","appdev/refs/api/krb5_get_host_realm.rst","appdev/refs/api/krb5_get_in_tkt_with_keytab.rst","appdev/refs/api/krb5_get_in_tkt_with_password.rst","appdev/refs/api/krb5_get_in_tkt_with_skey.rst","appdev/refs/api/krb5_get_init_creds_keytab.rst","appdev/refs/api/krb5_get_init_creds_opt_alloc.rst","appdev/refs/api/krb5_get_init_creds_opt_free.rst","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_init.rst","appdev/refs/api/krb5_get_init_creds_opt_set_address_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.rst","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pa.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.rst","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.rst","appdev/refs/api/krb5_get_init_creds_opt_set_responder.rst","appdev/refs/api/krb5_get_init_creds_opt_set_salt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.rst","appdev/refs/api/krb5_get_init_creds_password.rst","appdev/refs/api/krb5_get_permitted_enctypes.rst","appdev/refs/api/krb5_get_profile.rst","appdev/refs/api/krb5_get_prompt_types.rst","appdev/refs/api/krb5_get_renewed_creds.rst","appdev/refs/api/krb5_get_server_rcache.rst","appdev/refs/api/krb5_get_time_offsets.rst","appdev/refs/api/krb5_get_validated_creds.rst","appdev/refs/api/krb5_init_context.rst","appdev/refs/api/krb5_init_context_profile.rst","appdev/refs/api/krb5_init_creds_free.rst","appdev/refs/api/krb5_init_creds_get.rst","appdev/refs/api/krb5_init_creds_get_creds.rst","appdev/refs/api/krb5_init_creds_get_error.rst","appdev/refs/api/krb5_init_creds_get_times.rst","appdev/refs/api/krb5_init_creds_init.rst","appdev/refs/api/krb5_init_creds_set_keytab.rst","appdev/refs/api/krb5_init_creds_set_password.rst","appdev/refs/api/krb5_init_creds_set_service.rst","appdev/refs/api/krb5_init_creds_step.rst","appdev/refs/api/krb5_init_keyblock.rst","appdev/refs/api/krb5_init_random_key.rst","appdev/refs/api/krb5_init_secure_context.rst","appdev/refs/api/krb5_is_config_principal.rst","appdev/refs/api/krb5_is_referral_realm.rst","appdev/refs/api/krb5_is_thread_safe.rst","appdev/refs/api/krb5_k_create_key.rst","appdev/refs/api/krb5_k_decrypt.rst","appdev/refs/api/krb5_k_decrypt_iov.rst","appdev/refs/api/krb5_k_encrypt.rst","appdev/refs/api/krb5_k_encrypt_iov.rst","appdev/refs/api/krb5_k_free_key.rst","appdev/refs/api/krb5_k_key_enctype.rst","appdev/refs/api/krb5_k_key_keyblock.rst","appdev/refs/api/krb5_k_make_checksum.rst","appdev/refs/api/krb5_k_make_checksum_iov.rst","appdev/refs/api/krb5_k_prf.rst","appdev/refs/api/krb5_k_reference_key.rst","appdev/refs/api/krb5_k_verify_checksum.rst","appdev/refs/api/krb5_k_verify_checksum_iov.rst","appdev/refs/api/krb5_kdc_sign_ticket.rst","appdev/refs/api/krb5_kdc_verify_ticket.rst","appdev/refs/api/krb5_kt_add_entry.rst","appdev/refs/api/krb5_kt_client_default.rst","appdev/refs/api/krb5_kt_close.rst","appdev/refs/api/krb5_kt_default.rst","appdev/refs/api/krb5_kt_default_name.rst","appdev/refs/api/krb5_kt_dup.rst","appdev/refs/api/krb5_kt_end_seq_get.rst","appdev/refs/api/krb5_kt_free_entry.rst","appdev/refs/api/krb5_kt_get_entry.rst","appdev/refs/api/krb5_kt_get_name.rst","appdev/refs/api/krb5_kt_get_type.rst","appdev/refs/api/krb5_kt_have_content.rst","appdev/refs/api/krb5_kt_next_entry.rst","appdev/refs/api/krb5_kt_read_service_key.rst","appdev/refs/api/krb5_kt_remove_entry.rst","appdev/refs/api/krb5_kt_resolve.rst","appdev/refs/api/krb5_kt_start_seq_get.rst","appdev/refs/api/krb5_kuserok.rst","appdev/refs/api/krb5_make_authdata_kdc_issued.rst","appdev/refs/api/krb5_marshal_credentials.rst","appdev/refs/api/krb5_merge_authdata.rst","appdev/refs/api/krb5_mk_1cred.rst","appdev/refs/api/krb5_mk_error.rst","appdev/refs/api/krb5_mk_ncred.rst","appdev/refs/api/krb5_mk_priv.rst","appdev/refs/api/krb5_mk_rep.rst","appdev/refs/api/krb5_mk_rep_dce.rst","appdev/refs/api/krb5_mk_req.rst","appdev/refs/api/krb5_mk_req_extended.rst","appdev/refs/api/krb5_mk_safe.rst","appdev/refs/api/krb5_os_localaddr.rst","appdev/refs/api/krb5_pac_add_buffer.rst","appdev/refs/api/krb5_pac_free.rst","appdev/refs/api/krb5_pac_get_buffer.rst","appdev/refs/api/krb5_pac_get_client_info.rst","appdev/refs/api/krb5_pac_get_types.rst","appdev/refs/api/krb5_pac_init.rst","appdev/refs/api/krb5_pac_parse.rst","appdev/refs/api/krb5_pac_sign.rst","appdev/refs/api/krb5_pac_sign_ext.rst","appdev/refs/api/krb5_pac_verify.rst","appdev/refs/api/krb5_pac_verify_ext.rst","appdev/refs/api/krb5_parse_name.rst","appdev/refs/api/krb5_parse_name_flags.rst","appdev/refs/api/krb5_prepend_error_message.rst","appdev/refs/api/krb5_principal2salt.rst","appdev/refs/api/krb5_principal_compare.rst","appdev/refs/api/krb5_principal_compare_any_realm.rst","appdev/refs/api/krb5_principal_compare_flags.rst","appdev/refs/api/krb5_process_key.rst","appdev/refs/api/krb5_prompter_posix.rst","appdev/refs/api/krb5_random_key.rst","appdev/refs/api/krb5_rd_cred.rst","appdev/refs/api/krb5_rd_error.rst","appdev/refs/api/krb5_rd_priv.rst","appdev/refs/api/krb5_rd_rep.rst","appdev/refs/api/krb5_rd_rep_dce.rst","appdev/refs/api/krb5_rd_req.rst","appdev/refs/api/krb5_rd_safe.rst","appdev/refs/api/krb5_read_password.rst","appdev/refs/api/krb5_realm_compare.rst","appdev/refs/api/krb5_recvauth.rst","appdev/refs/api/krb5_recvauth_version.rst","appdev/refs/api/krb5_responder_get_challenge.rst","appdev/refs/api/krb5_responder_list_questions.rst","appdev/refs/api/krb5_responder_otp_challenge_free.rst","appdev/refs/api/krb5_responder_otp_get_challenge.rst","appdev/refs/api/krb5_responder_otp_set_answer.rst","appdev/refs/api/krb5_responder_pkinit_challenge_free.rst","appdev/refs/api/krb5_responder_pkinit_get_challenge.rst","appdev/refs/api/krb5_responder_pkinit_set_answer.rst","appdev/refs/api/krb5_responder_set_answer.rst","appdev/refs/api/krb5_salttype_to_string.rst","appdev/refs/api/krb5_sendauth.rst","appdev/refs/api/krb5_server_decrypt_ticket_keytab.rst","appdev/refs/api/krb5_set_default_realm.rst","appdev/refs/api/krb5_set_default_tgs_enctypes.rst","appdev/refs/api/krb5_set_error_message.rst","appdev/refs/api/krb5_set_kdc_recv_hook.rst","appdev/refs/api/krb5_set_kdc_send_hook.rst","appdev/refs/api/krb5_set_password.rst","appdev/refs/api/krb5_set_password_using_ccache.rst","appdev/refs/api/krb5_set_principal_realm.rst","appdev/refs/api/krb5_set_real_time.rst","appdev/refs/api/krb5_set_trace_callback.rst","appdev/refs/api/krb5_set_trace_filename.rst","appdev/refs/api/krb5_sname_match.rst","appdev/refs/api/krb5_sname_to_principal.rst","appdev/refs/api/krb5_string_to_cksumtype.rst","appdev/refs/api/krb5_string_to_deltat.rst","appdev/refs/api/krb5_string_to_enctype.rst","appdev/refs/api/krb5_string_to_key.rst","appdev/refs/api/krb5_string_to_salttype.rst","appdev/refs/api/krb5_string_to_timestamp.rst","appdev/refs/api/krb5_timeofday.rst","appdev/refs/api/krb5_timestamp_to_sfstring.rst","appdev/refs/api/krb5_timestamp_to_string.rst","appdev/refs/api/krb5_tkt_creds_free.rst","appdev/refs/api/krb5_tkt_creds_get.rst","appdev/refs/api/krb5_tkt_creds_get_creds.rst","appdev/refs/api/krb5_tkt_creds_get_times.rst","appdev/refs/api/krb5_tkt_creds_init.rst","appdev/refs/api/krb5_tkt_creds_step.rst","appdev/refs/api/krb5_unmarshal_credentials.rst","appdev/refs/api/krb5_unparse_name.rst","appdev/refs/api/krb5_unparse_name_ext.rst","appdev/refs/api/krb5_unparse_name_flags.rst","appdev/refs/api/krb5_unparse_name_flags_ext.rst","appdev/refs/api/krb5_us_timeofday.rst","appdev/refs/api/krb5_use_enctype.rst","appdev/refs/api/krb5_verify_authdata_kdc_issued.rst","appdev/refs/api/krb5_verify_checksum.rst","appdev/refs/api/krb5_verify_init_creds.rst","appdev/refs/api/krb5_verify_init_creds_opt_init.rst","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.rst","appdev/refs/api/krb5_vprepend_error_message.rst","appdev/refs/api/krb5_vset_error_message.rst","appdev/refs/api/krb5_vwrap_error_message.rst","appdev/refs/api/krb5_wrap_error_message.rst","appdev/refs/index.rst","appdev/refs/macros/ADDRTYPE_ADDRPORT.rst","appdev/refs/macros/ADDRTYPE_CHAOS.rst","appdev/refs/macros/ADDRTYPE_DDP.rst","appdev/refs/macros/ADDRTYPE_INET.rst","appdev/refs/macros/ADDRTYPE_INET6.rst","appdev/refs/macros/ADDRTYPE_IPPORT.rst","appdev/refs/macros/ADDRTYPE_ISO.rst","appdev/refs/macros/ADDRTYPE_IS_LOCAL.rst","appdev/refs/macros/ADDRTYPE_NETBIOS.rst","appdev/refs/macros/ADDRTYPE_XNS.rst","appdev/refs/macros/AD_TYPE_EXTERNAL.rst","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.rst","appdev/refs/macros/AD_TYPE_REGISTERED.rst","appdev/refs/macros/AD_TYPE_RESERVED.rst","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.rst","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.rst","appdev/refs/macros/AP_OPTS_RESERVED.rst","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.rst","appdev/refs/macros/AP_OPTS_USE_SUBKEY.rst","appdev/refs/macros/AP_OPTS_WIRE_MASK.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.rst","appdev/refs/macros/CKSUMTYPE_CRC32.rst","appdev/refs/macros/CKSUMTYPE_DESCBC.rst","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.rst","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_NIST_SHA.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.rst","appdev/refs/macros/CKSUMTYPE_SHA1.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.rst","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.rst","appdev/refs/macros/ENCTYPE_DES_CBC_CRC.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD4.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD5.rst","appdev/refs/macros/ENCTYPE_DES_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.rst","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.rst","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_NULL.rst","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.rst","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_UNKNOWN.rst","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.rst","appdev/refs/macros/KDC_OPT_CANONICALIZE.rst","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.rst","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.rst","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.rst","appdev/refs/macros/KDC_OPT_FORWARDABLE.rst","appdev/refs/macros/KDC_OPT_FORWARDED.rst","appdev/refs/macros/KDC_OPT_POSTDATED.rst","appdev/refs/macros/KDC_OPT_PROXIABLE.rst","appdev/refs/macros/KDC_OPT_PROXY.rst","appdev/refs/macros/KDC_OPT_RENEW.rst","appdev/refs/macros/KDC_OPT_RENEWABLE.rst","appdev/refs/macros/KDC_OPT_RENEWABLE_OK.rst","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.rst","appdev/refs/macros/KDC_OPT_VALIDATE.rst","appdev/refs/macros/KDC_TKT_COMMON_MASK.rst","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.rst","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.rst","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.rst","appdev/refs/macros/KRB5_AP_REP.rst","appdev/refs/macros/KRB5_AP_REQ.rst","appdev/refs/macros/KRB5_AS_REP.rst","appdev/refs/macros/KRB5_AS_REQ.rst","appdev/refs/macros/KRB5_AUTHDATA_AND_OR.rst","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.rst","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.rst","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.rst","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.rst","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.rst","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.rst","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.rst","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.rst","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.rst","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.rst","appdev/refs/macros/KRB5_AUTHDATA_SESAME.rst","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.rst","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.rst","appdev/refs/macros/KRB5_CRED.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.rst","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.rst","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.rst","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.rst","appdev/refs/macros/KRB5_ERROR.rst","appdev/refs/macros/KRB5_FAST_REQUIRED.rst","appdev/refs/macros/KRB5_GC_CACHED.rst","appdev/refs/macros/KRB5_GC_CANONICALIZE.rst","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.rst","appdev/refs/macros/KRB5_GC_FORWARDABLE.rst","appdev/refs/macros/KRB5_GC_NO_STORE.rst","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.rst","appdev/refs/macros/KRB5_GC_USER_USER.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.rst","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_INT16_MAX.rst","appdev/refs/macros/KRB5_INT16_MIN.rst","appdev/refs/macros/KRB5_INT32_MAX.rst","appdev/refs/macros/KRB5_INT32_MIN.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.rst","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.rst","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.rst","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.rst","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.rst","appdev/refs/macros/KRB5_KPASSWD_HARDERROR.rst","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.rst","appdev/refs/macros/KRB5_KPASSWD_MALFORMED.rst","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.rst","appdev/refs/macros/KRB5_KPASSWD_SUCCESS.rst","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_NONE.rst","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.rst","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_SMTP_NAME.rst","appdev/refs/macros/KRB5_NT_SRV_HST.rst","appdev/refs/macros/KRB5_NT_SRV_INST.rst","appdev/refs/macros/KRB5_NT_SRV_XHST.rst","appdev/refs/macros/KRB5_NT_UID.rst","appdev/refs/macros/KRB5_NT_UNKNOWN.rst","appdev/refs/macros/KRB5_NT_WELLKNOWN.rst","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.rst","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.rst","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_CLIENT_INFO.rst","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.rst","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.rst","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_DEVICE_INFO.rst","appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_LOGON_INFO.rst","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_REQUESTOR.rst","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.rst","appdev/refs/macros/KRB5_PADATA_AFS3_SALT.rst","appdev/refs/macros/KRB5_PADATA_AP_REQ.rst","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.rst","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.rst","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.rst","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.rst","appdev/refs/macros/KRB5_PADATA_FOR_USER.rst","appdev/refs/macros/KRB5_PADATA_FX_COOKIE.rst","appdev/refs/macros/KRB5_PADATA_FX_ERROR.rst","appdev/refs/macros/KRB5_PADATA_FX_FAST.rst","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.rst","appdev/refs/macros/KRB5_PADATA_NONE.rst","appdev/refs/macros/KRB5_PADATA_OSF_DCE.rst","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.rst","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PKINIT_KX.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.rst","appdev/refs/macros/KRB5_PADATA_PW_SALT.rst","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.rst","appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY.rst","appdev/refs/macros/KRB5_PADATA_REFERRAL.rst","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.rst","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.rst","appdev/refs/macros/KRB5_PADATA_SESAME.rst","appdev/refs/macros/KRB5_PADATA_SPAKE.rst","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.rst","appdev/refs/macros/KRB5_PADATA_TGS_REQ.rst","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.rst","appdev/refs/macros/KRB5_PRIV.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.rst","appdev/refs/macros/KRB5_PVNO.rst","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.rst","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.rst","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.rst","appdev/refs/macros/KRB5_REFERRAL_REALM.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.rst","appdev/refs/macros/KRB5_SAFE.rst","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.rst","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.rst","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.rst","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.rst","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.rst","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.rst","appdev/refs/macros/KRB5_TC_MATCH_KTYPE.rst","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.rst","appdev/refs/macros/KRB5_TC_NOTICKET.rst","appdev/refs/macros/KRB5_TC_OPENCLOSE.rst","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.rst","appdev/refs/macros/KRB5_TGS_NAME.rst","appdev/refs/macros/KRB5_TGS_NAME_SIZE.rst","appdev/refs/macros/KRB5_TGS_REP.rst","appdev/refs/macros/KRB5_TGS_REQ.rst","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.rst","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.rst","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.rst","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.rst","appdev/refs/macros/MAX_KEYTAB_NAME_LEN.rst","appdev/refs/macros/MSEC_DIRBIT.rst","appdev/refs/macros/MSEC_VAL_MASK.rst","appdev/refs/macros/SALT_TYPE_AFS_LENGTH.rst","appdev/refs/macros/SALT_TYPE_NO_LENGTH.rst","appdev/refs/macros/THREEPARAMOPEN.rst","appdev/refs/macros/TKT_FLG_ANONYMOUS.rst","appdev/refs/macros/TKT_FLG_ENC_PA_REP.rst","appdev/refs/macros/TKT_FLG_FORWARDABLE.rst","appdev/refs/macros/TKT_FLG_FORWARDED.rst","appdev/refs/macros/TKT_FLG_HW_AUTH.rst","appdev/refs/macros/TKT_FLG_INITIAL.rst","appdev/refs/macros/TKT_FLG_INVALID.rst","appdev/refs/macros/TKT_FLG_MAY_POSTDATE.rst","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.rst","appdev/refs/macros/TKT_FLG_POSTDATED.rst","appdev/refs/macros/TKT_FLG_PRE_AUTH.rst","appdev/refs/macros/TKT_FLG_PROXIABLE.rst","appdev/refs/macros/TKT_FLG_PROXY.rst","appdev/refs/macros/TKT_FLG_RENEWABLE.rst","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.rst","appdev/refs/macros/VALID_INT_BITS.rst","appdev/refs/macros/VALID_UINT_BITS.rst","appdev/refs/macros/index.rst","appdev/refs/macros/krb524_convert_creds_kdc.rst","appdev/refs/macros/krb524_init_ets.rst","appdev/refs/macros/krb5_const.rst","appdev/refs/macros/krb5_princ_component.rst","appdev/refs/macros/krb5_princ_name.rst","appdev/refs/macros/krb5_princ_realm.rst","appdev/refs/macros/krb5_princ_set_realm.rst","appdev/refs/macros/krb5_princ_set_realm_data.rst","appdev/refs/macros/krb5_princ_set_realm_length.rst","appdev/refs/macros/krb5_princ_size.rst","appdev/refs/macros/krb5_princ_type.rst","appdev/refs/macros/krb5_roundup.rst","appdev/refs/macros/krb5_x.rst","appdev/refs/macros/krb5_xc.rst","appdev/refs/types/index.rst","appdev/refs/types/krb5_address.rst","appdev/refs/types/krb5_addrtype.rst","appdev/refs/types/krb5_ap_rep.rst","appdev/refs/types/krb5_ap_rep_enc_part.rst","appdev/refs/types/krb5_ap_req.rst","appdev/refs/types/krb5_auth_context.rst","appdev/refs/types/krb5_authdata.rst","appdev/refs/types/krb5_authdatatype.rst","appdev/refs/types/krb5_authenticator.rst","appdev/refs/types/krb5_boolean.rst","appdev/refs/types/krb5_cc_cursor.rst","appdev/refs/types/krb5_ccache.rst","appdev/refs/types/krb5_cccol_cursor.rst","appdev/refs/types/krb5_checksum.rst","appdev/refs/types/krb5_cksumtype.rst","appdev/refs/types/krb5_const_pointer.rst","appdev/refs/types/krb5_const_principal.rst","appdev/refs/types/krb5_context.rst","appdev/refs/types/krb5_cred.rst","appdev/refs/types/krb5_cred_enc_part.rst","appdev/refs/types/krb5_cred_info.rst","appdev/refs/types/krb5_creds.rst","appdev/refs/types/krb5_crypto_iov.rst","appdev/refs/types/krb5_cryptotype.rst","appdev/refs/types/krb5_data.rst","appdev/refs/types/krb5_deltat.rst","appdev/refs/types/krb5_enc_data.rst","appdev/refs/types/krb5_enc_kdc_rep_part.rst","appdev/refs/types/krb5_enc_tkt_part.rst","appdev/refs/types/krb5_encrypt_block.rst","appdev/refs/types/krb5_enctype.rst","appdev/refs/types/krb5_error.rst","appdev/refs/types/krb5_error_code.rst","appdev/refs/types/krb5_expire_callback_func.rst","appdev/refs/types/krb5_flags.rst","appdev/refs/types/krb5_get_init_creds_opt.rst","appdev/refs/types/krb5_gic_opt_pa_data.rst","appdev/refs/types/krb5_init_creds_context.rst","appdev/refs/types/krb5_int16.rst","appdev/refs/types/krb5_int32.rst","appdev/refs/types/krb5_kdc_rep.rst","appdev/refs/types/krb5_kdc_req.rst","appdev/refs/types/krb5_key.rst","appdev/refs/types/krb5_keyblock.rst","appdev/refs/types/krb5_keytab.rst","appdev/refs/types/krb5_keytab_entry.rst","appdev/refs/types/krb5_keyusage.rst","appdev/refs/types/krb5_kt_cursor.rst","appdev/refs/types/krb5_kvno.rst","appdev/refs/types/krb5_last_req_entry.rst","appdev/refs/types/krb5_magic.rst","appdev/refs/types/krb5_mk_req_checksum_func.rst","appdev/refs/types/krb5_msgtype.rst","appdev/refs/types/krb5_octet.rst","appdev/refs/types/krb5_pa_data.rst","appdev/refs/types/krb5_pa_pac_req.rst","appdev/refs/types/krb5_pa_server_referral_data.rst","appdev/refs/types/krb5_pa_svr_referral_data.rst","appdev/refs/types/krb5_pac.rst","appdev/refs/types/krb5_pointer.rst","appdev/refs/types/krb5_post_recv_fn.rst","appdev/refs/types/krb5_pre_send_fn.rst","appdev/refs/types/krb5_preauthtype.rst","appdev/refs/types/krb5_principal.rst","appdev/refs/types/krb5_principal_data.rst","appdev/refs/types/krb5_prompt.rst","appdev/refs/types/krb5_prompt_type.rst","appdev/refs/types/krb5_prompter_fct.rst","appdev/refs/types/krb5_pwd_data.rst","appdev/refs/types/krb5_rcache.rst","appdev/refs/types/krb5_replay_data.rst","appdev/refs/types/krb5_responder_context.rst","appdev/refs/types/krb5_responder_fn.rst","appdev/refs/types/krb5_responder_otp_challenge.rst","appdev/refs/types/krb5_responder_otp_tokeninfo.rst","appdev/refs/types/krb5_responder_pkinit_challenge.rst","appdev/refs/types/krb5_responder_pkinit_identity.rst","appdev/refs/types/krb5_response.rst","appdev/refs/types/krb5_ticket.rst","appdev/refs/types/krb5_ticket_times.rst","appdev/refs/types/krb5_timestamp.rst","appdev/refs/types/krb5_tkt_authent.rst","appdev/refs/types/krb5_tkt_creds_context.rst","appdev/refs/types/krb5_trace_callback.rst","appdev/refs/types/krb5_trace_info.rst","appdev/refs/types/krb5_transited.rst","appdev/refs/types/krb5_typed_data.rst","appdev/refs/types/krb5_ui_2.rst","appdev/refs/types/krb5_ui_4.rst","appdev/refs/types/krb5_verify_init_creds_opt.rst","appdev/refs/types/passwd_phrase_element.rst","appdev/y2038.rst","basic/ccache_def.rst","basic/date_format.rst","basic/index.rst","basic/keytab_def.rst","basic/rcache_def.rst","basic/stash_file_def.rst","build/directory_org.rst","build/doing_build.rst","build/index.rst","build/options2configure.rst","build/osconf.rst","build_this.rst","copyright.rst","formats/ccache_file_format.rst","formats/cookie.rst","formats/freshness_token.rst","formats/index.rst","formats/keytab_file_format.rst","formats/rcache_file_format.rst","index.rst","mitK5defaults.rst","mitK5features.rst","mitK5license.rst","plugindev/ccselect.rst","plugindev/certauth.rst","plugindev/clpreauth.rst","plugindev/general.rst","plugindev/gssapi.rst","plugindev/hostrealm.rst","plugindev/index.rst","plugindev/internal.rst","plugindev/kadm5_auth.rst","plugindev/kadm5_hook.rst","plugindev/kdcpolicy.rst","plugindev/kdcpreauth.rst","plugindev/localauth.rst","plugindev/locate.rst","plugindev/profile.rst","plugindev/pwqual.rst","resources.rst","user/index.rst","user/pwd_mgmt.rst","user/tkt_mgmt.rst","user/user_commands/index.rst","user/user_commands/kdestroy.rst","user/user_commands/kinit.rst","user/user_commands/klist.rst","user/user_commands/kpasswd.rst","user/user_commands/krb5-config.rst","user/user_commands/ksu.rst","user/user_commands/kswitch.rst","user/user_commands/kvno.rst","user/user_commands/sclient.rst","user/user_config/index.rst","user/user_config/k5identity.rst","user/user_config/k5login.rst","user/user_config/kerberos.rst",objects:{"":{ADDRTYPE_ADDRPORT:422,3,1,"",ADDRTYPE_CHAOS:423,3,1,"",ADDRTYPE_DDP:424,3,1,"",ADDRTYPE_INET6:426,3,1,"",ADDRTYPE_INET:425,3,1,"",ADDRTYPE_IPPORT:427,3,1,"",ADDRTYPE_ISO:428,3,1,"",ADDRTYPE_IS_LOCAL:429,3,1,"",ADDRTYPE_NETBIOS:430,3,1,"",ADDRTYPE_XNS:431,3,1,"",AD_TYPE_EXTERNAL:432,3,1,"",AD_TYPE_FIELD_TYPE_MASK:433,3,1,"",AD_TYPE_REGISTERED:434,3,1,"",AD_TYPE_RESERVED:435,3,1,"",AP_OPTS_ETYPE_NEGOTIATION:436,3,1,"",AP_OPTS_MUTUAL_REQUIRED:437,3,1,"",AP_OPTS_RESERVED:438,3,1,"",AP_OPTS_USE_SESSION_KEY:439,3,1,"",AP_OPTS_USE_SUBKEY:440,3,1,"",AP_OPTS_WIRE_MASK:441,3,1,"",CKSUMTYPE_CMAC_CAMELLIA128:442,3,1,"",CKSUMTYPE_CMAC_CAMELLIA256:443,3,1,"",CKSUMTYPE_CRC32:444,3,1,"",CKSUMTYPE_DESCBC:445,3,1,"",CKSUMTYPE_HMAC_MD5_ARCFOUR:446,3,1,"",CKSUMTYPE_HMAC_SHA1_96_AES128:447,3,1,"",CKSUMTYPE_HMAC_SHA1_96_AES256:448,3,1,"",CKSUMTYPE_HMAC_SHA1_DES3:449,3,1,"",CKSUMTYPE_HMAC_SHA256_128_AES128:450,3,1,"",CKSUMTYPE_HMAC_SHA384_192_AES256:451,3,1,"",CKSUMTYPE_MD5_HMAC_ARCFOUR:452,3,1,"",CKSUMTYPE_NIST_SHA:453,3,1,"",CKSUMTYPE_RSA_MD4:454,3,1,"",CKSUMTYPE_RSA_MD4_DES:455,3,1,"",CKSUMTYPE_RSA_MD5:456,3,1,"",CKSUMTYPE_RSA_MD5_DES:457,3,1,"",CKSUMTYPE_SHA1:458,3,1,"",ENCTYPE_AES128_CTS_HMAC_SHA1_96:459,3,1,"",ENCTYPE_AES128_CTS_HMAC_SHA256_128:460,3,1,"",ENCTYPE_AES256_CTS_HMAC_SHA1_96:461,3,1,"",ENCTYPE_AES256_CTS_HMAC_SHA384_192:462,3,1,"",ENCTYPE_ARCFOUR_HMAC:463,3,1,"",ENCTYPE_ARCFOUR_HMAC_EXP:464,3,1,"",ENCTYPE_CAMELLIA128_CTS_CMAC:465,3,1,"",ENCTYPE_CAMELLIA256_CTS_CMAC:466,3,1,"",ENCTYPE_DES3_CBC_ENV:467,3,1,"",ENCTYPE_DES3_CBC_RAW:468,3,1,"",ENCTYPE_DES3_CBC_SHA1:470,3,1,"",ENCTYPE_DES3_CBC_SHA:469,3,1,"",ENCTYPE_DES_CBC_CRC:471,3,1,"",ENCTYPE_DES_CBC_MD4:472,3,1,"",ENCTYPE_DES_CBC_MD5:473,3,1,"",ENCTYPE_DES_CBC_RAW:474,3,1,"",ENCTYPE_DES_HMAC_SHA1:475,3,1,"",ENCTYPE_DSA_SHA1_CMS:476,3,1,"",ENCTYPE_MD5_RSA_CMS:477,3,1,"",ENCTYPE_NULL:478,3,1,"",ENCTYPE_RC2_CBC_ENV:479,3,1,"",ENCTYPE_RSA_ENV:480,3,1,"",ENCTYPE_RSA_ES_OAEP_ENV:481,3,1,"",ENCTYPE_SHA1_RSA_CMS:482,3,1,"",ENCTYPE_UNKNOWN:483,3,1,"",KDC_OPT_ALLOW_POSTDATE:484,3,1,"",KDC_OPT_CANONICALIZE:485,3,1,"",KDC_OPT_CNAME_IN_ADDL_TKT:486,3,1,"",KDC_OPT_DISABLE_TRANSITED_CHECK:487,3,1,"",KDC_OPT_ENC_TKT_IN_SKEY:488,3,1,"",KDC_OPT_FORWARDABLE:489,3,1,"",KDC_OPT_FORWARDED:490,3,1,"",KDC_OPT_POSTDATED:491,3,1,"",KDC_OPT_PROXIABLE:492,3,1,"",KDC_OPT_PROXY:493,3,1,"",KDC_OPT_RENEW:494,3,1,"",KDC_OPT_RENEWABLE:495,3,1,"",KDC_OPT_RENEWABLE_OK:496,3,1,"",KDC_OPT_REQUEST_ANONYMOUS:497,3,1,"",KDC_OPT_VALIDATE:498,3,1,"",KDC_TKT_COMMON_MASK:499,3,1,"",KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:500,3,1,"",KRB5_ANONYMOUS_PRINCSTR:501,3,1,"",KRB5_ANONYMOUS_REALMSTR:502,3,1,"",KRB5_AP_REP:503,3,1,"",KRB5_AP_REQ:504,3,1,"",KRB5_AS_REP:505,3,1,"",KRB5_AS_REQ:506,3,1,"",KRB5_AUTHDATA_AND_OR:507,3,1,"",KRB5_AUTHDATA_AP_OPTIONS:508,3,1,"",KRB5_AUTHDATA_AUTH_INDICATOR:509,3,1,"",KRB5_AUTHDATA_CAMMAC:510,3,1,"",KRB5_AUTHDATA_ETYPE_NEGOTIATION:511,3,1,"",KRB5_AUTHDATA_FX_ARMOR:512,3,1,"",KRB5_AUTHDATA_IF_RELEVANT:513,3,1,"",KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:514,3,1,"",KRB5_AUTHDATA_KDC_ISSUED:515,3,1,"",KRB5_AUTHDATA_MANDATORY_FOR_KDC:516,3,1,"",KRB5_AUTHDATA_OSF_DCE:517,3,1,"",KRB5_AUTHDATA_SESAME:518,3,1,"",KRB5_AUTHDATA_SIGNTICKET:519,3,1,"",KRB5_AUTHDATA_WIN2K_PAC:520,3,1,"",KRB5_AUTH_CONTEXT_DO_SEQUENCE:521,3,1,"",KRB5_AUTH_CONTEXT_DO_TIME:522,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:523,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:524,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:525,3,1,"",KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:526,3,1,"",KRB5_AUTH_CONTEXT_PERMIT_ALL:527,3,1,"",KRB5_AUTH_CONTEXT_RET_SEQUENCE:528,3,1,"",KRB5_AUTH_CONTEXT_RET_TIME:529,3,1,"",KRB5_AUTH_CONTEXT_USE_SUBKEY:530,3,1,"",KRB5_CRED:531,3,1,"",KRB5_CRYPTO_TYPE_CHECKSUM:532,3,1,"",KRB5_CRYPTO_TYPE_DATA:533,3,1,"",KRB5_CRYPTO_TYPE_EMPTY:534,3,1,"",KRB5_CRYPTO_TYPE_HEADER:535,3,1,"",KRB5_CRYPTO_TYPE_PADDING:536,3,1,"",KRB5_CRYPTO_TYPE_SIGN_ONLY:537,3,1,"",KRB5_CRYPTO_TYPE_STREAM:538,3,1,"",KRB5_CRYPTO_TYPE_TRAILER:539,3,1,"",KRB5_CYBERSAFE_SECUREID:540,3,1,"",KRB5_DOMAIN_X500_COMPRESS:541,3,1,"",KRB5_ENCPADATA_REQ_ENC_PA_REP:542,3,1,"",KRB5_ERROR:543,3,1,"",KRB5_FAST_REQUIRED:544,3,1,"",KRB5_GC_CACHED:545,3,1,"",KRB5_GC_CANONICALIZE:546,3,1,"",KRB5_GC_CONSTRAINED_DELEGATION:547,3,1,"",KRB5_GC_FORWARDABLE:548,3,1,"",KRB5_GC_NO_STORE:549,3,1,"",KRB5_GC_NO_TRANSIT_CHECK:550,3,1,"",KRB5_GC_USER_USER:551,3,1,"",KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:552,3,1,"",KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:553,3,1,"",KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:554,3,1,"",KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:555,3,1,"",KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:556,3,1,"",KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:557,3,1,"",KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:558,3,1,"",KRB5_GET_INIT_CREDS_OPT_PROXIABLE:559,3,1,"",KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:560,3,1,"",KRB5_GET_INIT_CREDS_OPT_SALT:561,3,1,"",KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:562,3,1,"",KRB5_INIT_CONTEXT_KDC:563,3,1,"",KRB5_INIT_CONTEXT_SECURE:564,3,1,"",KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:565,3,1,"",KRB5_INT16_MAX:566,3,1,"",KRB5_INT16_MIN:567,3,1,"",KRB5_INT32_MAX:568,3,1,"",KRB5_INT32_MIN:569,3,1,"",KRB5_KEYUSAGE_AD_ITE:570,3,1,"",KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:571,3,1,"",KRB5_KEYUSAGE_AD_MTE:572,3,1,"",KRB5_KEYUSAGE_AD_SIGNEDPATH:573,3,1,"",KRB5_KEYUSAGE_APP_DATA_CKSUM:574,3,1,"",KRB5_KEYUSAGE_APP_DATA_ENCRYPT:575,3,1,"",KRB5_KEYUSAGE_AP_REP_ENCPART:576,3,1,"",KRB5_KEYUSAGE_AP_REQ_AUTH:577,3,1,"",KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:578,3,1,"",KRB5_KEYUSAGE_AS_REP_ENCPART:579,3,1,"",KRB5_KEYUSAGE_AS_REQ:580,3,1,"",KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:581,3,1,"",KRB5_KEYUSAGE_CAMMAC:582,3,1,"",KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:583,3,1,"",KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:584,3,1,"",KRB5_KEYUSAGE_FAST_ENC:585,3,1,"",KRB5_KEYUSAGE_FAST_FINISHED:586,3,1,"",KRB5_KEYUSAGE_FAST_REP:587,3,1,"",KRB5_KEYUSAGE_FAST_REQ_CHKSUM:588,3,1,"",KRB5_KEYUSAGE_GSS_TOK_MIC:589,3,1,"",KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:590,3,1,"",KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:591,3,1,"",KRB5_KEYUSAGE_IAKERB_FINISHED:592,3,1,"",KRB5_KEYUSAGE_KDC_REP_TICKET:593,3,1,"",KRB5_KEYUSAGE_KRB_CRED_ENCPART:594,3,1,"",KRB5_KEYUSAGE_KRB_ERROR_CKSUM:595,3,1,"",KRB5_KEYUSAGE_KRB_PRIV_ENCPART:596,3,1,"",KRB5_KEYUSAGE_KRB_SAFE_CKSUM:597,3,1,"",KRB5_KEYUSAGE_PA_AS_FRESHNESS:598,3,1,"",KRB5_KEYUSAGE_PA_FX_COOKIE:599,3,1,"",KRB5_KEYUSAGE_PA_OTP_REQUEST:600,3,1,"",KRB5_KEYUSAGE_PA_PKINIT_KX:601,3,1,"",KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:602,3,1,"",KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:603,3,1,"",KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:604,3,1,"",KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:605,3,1,"",KRB5_KEYUSAGE_PA_SAM_RESPONSE:606,3,1,"",KRB5_KEYUSAGE_SPAKE:607,3,1,"",KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:608,3,1,"",KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:609,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:610,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:611,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AUTH:612,3,1,"",KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:613,3,1,"",KRB5_KPASSWD_ACCESSDENIED:614,3,1,"",KRB5_KPASSWD_AUTHERROR:615,3,1,"",KRB5_KPASSWD_BAD_VERSION:616,3,1,"",KRB5_KPASSWD_HARDERROR:617,3,1,"",KRB5_KPASSWD_INITIAL_FLAG_NEEDED:618,3,1,"",KRB5_KPASSWD_MALFORMED:619,3,1,"",KRB5_KPASSWD_SOFTERROR:620,3,1,"",KRB5_KPASSWD_SUCCESS:621,3,1,"",KRB5_LRQ_ALL_ACCT_EXPTIME:622,3,1,"",KRB5_LRQ_ALL_LAST_INITIAL:623,3,1,"",KRB5_LRQ_ALL_LAST_RENEWAL:624,3,1,"",KRB5_LRQ_ALL_LAST_REQ:625,3,1,"",KRB5_LRQ_ALL_LAST_TGT:626,3,1,"",KRB5_LRQ_ALL_LAST_TGT_ISSUED:627,3,1,"",KRB5_LRQ_ALL_PW_EXPTIME:628,3,1,"",KRB5_LRQ_NONE:629,3,1,"",KRB5_LRQ_ONE_ACCT_EXPTIME:630,3,1,"",KRB5_LRQ_ONE_LAST_INITIAL:631,3,1,"",KRB5_LRQ_ONE_LAST_RENEWAL:632,3,1,"",KRB5_LRQ_ONE_LAST_REQ:633,3,1,"",KRB5_LRQ_ONE_LAST_TGT:634,3,1,"",KRB5_LRQ_ONE_LAST_TGT_ISSUED:635,3,1,"",KRB5_LRQ_ONE_PW_EXPTIME:636,3,1,"",KRB5_NT_ENTERPRISE_PRINCIPAL:637,3,1,"",KRB5_NT_ENT_PRINCIPAL_AND_ID:638,3,1,"",KRB5_NT_MS_PRINCIPAL:639,3,1,"",KRB5_NT_MS_PRINCIPAL_AND_ID:640,3,1,"",KRB5_NT_PRINCIPAL:641,3,1,"",KRB5_NT_SMTP_NAME:642,3,1,"",KRB5_NT_SRV_HST:643,3,1,"",KRB5_NT_SRV_INST:644,3,1,"",KRB5_NT_SRV_XHST:645,3,1,"",KRB5_NT_UID:646,3,1,"",KRB5_NT_UNKNOWN:647,3,1,"",KRB5_NT_WELLKNOWN:648,3,1,"",KRB5_NT_X500_PRINCIPAL:649,3,1,"",KRB5_PAC_ATTRIBUTES_INFO:650,3,1,"",KRB5_PAC_CLIENT_CLAIMS:651,3,1,"",KRB5_PAC_CLIENT_INFO:652,3,1,"",KRB5_PAC_CREDENTIALS_INFO:653,3,1,"",KRB5_PAC_DELEGATION_INFO:654,3,1,"",KRB5_PAC_DEVICE_CLAIMS:655,3,1,"",KRB5_PAC_DEVICE_INFO:656,3,1,"",KRB5_PAC_FULL_CHECKSUM:657,3,1,"",KRB5_PAC_LOGON_INFO:658,3,1,"",KRB5_PAC_PRIVSVR_CHECKSUM:659,3,1,"",KRB5_PAC_REQUESTOR:660,3,1,"",KRB5_PAC_SERVER_CHECKSUM:661,3,1,"",KRB5_PAC_TICKET_CHECKSUM:662,3,1,"",KRB5_PAC_UPN_DNS_INFO:663,3,1,"",KRB5_PADATA_AFS3_SALT:664,3,1,"",KRB5_PADATA_AP_REQ:665,3,1,"",KRB5_PADATA_AS_CHECKSUM:666,3,1,"",KRB5_PADATA_AS_FRESHNESS:667,3,1,"",KRB5_PADATA_ENCRYPTED_CHALLENGE:668,3,1,"",KRB5_PADATA_ENC_SANDIA_SECURID:669,3,1,"",KRB5_PADATA_ENC_TIMESTAMP:670,3,1,"",KRB5_PADATA_ENC_UNIX_TIME:671,3,1,"",KRB5_PADATA_ETYPE_INFO2:673,3,1,"",KRB5_PADATA_ETYPE_INFO:672,3,1,"",KRB5_PADATA_FOR_USER:674,3,1,"",KRB5_PADATA_FX_COOKIE:675,3,1,"",KRB5_PADATA_FX_ERROR:676,3,1,"",KRB5_PADATA_FX_FAST:677,3,1,"",KRB5_PADATA_GET_FROM_TYPED_DATA:678,3,1,"",KRB5_PADATA_NONE:679,3,1,"",KRB5_PADATA_OSF_DCE:680,3,1,"",KRB5_PADATA_OTP_CHALLENGE:681,3,1,"",KRB5_PADATA_OTP_PIN_CHANGE:682,3,1,"",KRB5_PADATA_OTP_REQUEST:683,3,1,"",KRB5_PADATA_PAC_OPTIONS:684,3,1,"",KRB5_PADATA_PAC_REQUEST:685,3,1,"",KRB5_PADATA_PKINIT_KX:686,3,1,"",KRB5_PADATA_PK_AS_REP:687,3,1,"",KRB5_PADATA_PK_AS_REP_OLD:688,3,1,"",KRB5_PADATA_PK_AS_REQ:689,3,1,"",KRB5_PADATA_PK_AS_REQ_OLD:690,3,1,"",KRB5_PADATA_PW_SALT:691,3,1,"",KRB5_PADATA_REDHAT_IDP_OAUTH2:692,3,1,"",KRB5_PADATA_REDHAT_PASSKEY:693,3,1,"",KRB5_PADATA_REFERRAL:694,3,1,"",KRB5_PADATA_S4U_X509_USER:695,3,1,"",KRB5_PADATA_SAM_CHALLENGE:696,3,1,"",KRB5_PADATA_SAM_CHALLENGE_2:697,3,1,"",KRB5_PADATA_SAM_REDIRECT:698,3,1,"",KRB5_PADATA_SAM_RESPONSE:699,3,1,"",KRB5_PADATA_SAM_RESPONSE_2:700,3,1,"",KRB5_PADATA_SESAME:701,3,1,"",KRB5_PADATA_SPAKE:702,3,1,"",KRB5_PADATA_SVR_REFERRAL_INFO:703,3,1,"",KRB5_PADATA_TGS_REQ:704,3,1,"",KRB5_PADATA_USE_SPECIFIED_KVNO:705,3,1,"",KRB5_PRINCIPAL_COMPARE_CASEFOLD:706,3,1,"",KRB5_PRINCIPAL_COMPARE_ENTERPRISE:707,3,1,"",KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:708,3,1,"",KRB5_PRINCIPAL_COMPARE_UTF8:709,3,1,"",KRB5_PRINCIPAL_PARSE_ENTERPRISE:710,3,1,"",KRB5_PRINCIPAL_PARSE_IGNORE_REALM:711,3,1,"",KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:712,3,1,"",KRB5_PRINCIPAL_PARSE_NO_REALM:713,3,1,"",KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:714,3,1,"",KRB5_PRINCIPAL_UNPARSE_DISPLAY:715,3,1,"",KRB5_PRINCIPAL_UNPARSE_NO_REALM:716,3,1,"",KRB5_PRINCIPAL_UNPARSE_SHORT:717,3,1,"",KRB5_PRIV:718,3,1,"",KRB5_PROMPT_TYPE_NEW_PASSWORD:719,3,1,"",KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:720,3,1,"",KRB5_PROMPT_TYPE_PASSWORD:721,3,1,"",KRB5_PROMPT_TYPE_PREAUTH:722,3,1,"",KRB5_PVNO:723,3,1,"",KRB5_REALM_BRANCH_CHAR:724,3,1,"",KRB5_RECVAUTH_BADAUTHVERS:725,3,1,"",KRB5_RECVAUTH_SKIP_VERSION:726,3,1,"",KRB5_REFERRAL_REALM:727,3,1,"",KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:728,3,1,"",KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:729,3,1,"",KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:730,3,1,"",KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:731,3,1,"",KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:732,3,1,"",KRB5_RESPONDER_OTP_FORMAT_DECIMAL:733,3,1,"",KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:734,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:735,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:736,3,1,"",KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:737,3,1,"",KRB5_RESPONDER_QUESTION_OTP:738,3,1,"",KRB5_RESPONDER_QUESTION_PASSWORD:739,3,1,"",KRB5_RESPONDER_QUESTION_PKINIT:740,3,1,"",KRB5_SAFE:741,3,1,"",KRB5_SAM_MUST_PK_ENCRYPT_SAD:742,3,1,"",KRB5_SAM_SEND_ENCRYPTED_SAD:743,3,1,"",KRB5_SAM_USE_SAD_AS_KEY:744,3,1,"",KRB5_TC_MATCH_2ND_TKT:745,3,1,"",KRB5_TC_MATCH_AUTHDATA:746,3,1,"",KRB5_TC_MATCH_FLAGS:747,3,1,"",KRB5_TC_MATCH_FLAGS_EXACT:748,3,1,"",KRB5_TC_MATCH_IS_SKEY:749,3,1,"",KRB5_TC_MATCH_KTYPE:750,3,1,"",KRB5_TC_MATCH_SRV_NAMEONLY:751,3,1,"",KRB5_TC_MATCH_TIMES:752,3,1,"",KRB5_TC_MATCH_TIMES_EXACT:753,3,1,"",KRB5_TC_NOTICKET:754,3,1,"",KRB5_TC_OPENCLOSE:755,3,1,"",KRB5_TC_SUPPORTED_KTYPES:756,3,1,"",KRB5_TGS_NAME:757,3,1,"",KRB5_TGS_NAME_SIZE:758,3,1,"",KRB5_TGS_REP:759,3,1,"",KRB5_TGS_REQ:760,3,1,"",KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:761,3,1,"",KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:762,3,1,"",KRB5_WELLKNOWN_NAMESTR:763,3,1,"",LR_TYPE_INTERPRETATION_MASK:764,3,1,"",LR_TYPE_THIS_SERVER_ONLY:765,3,1,"",MAX_KEYTAB_NAME_LEN:766,3,1,"",MSEC_DIRBIT:767,3,1,"",MSEC_VAL_MASK:768,3,1,"",SALT_TYPE_AFS_LENGTH:769,3,1,"",SALT_TYPE_NO_LENGTH:770,3,1,"",THREEPARAMOPEN:771,3,1,"",TKT_FLG_ANONYMOUS:772,3,1,"",TKT_FLG_ENC_PA_REP:773,3,1,"",TKT_FLG_FORWARDABLE:774,3,1,"",TKT_FLG_FORWARDED:775,3,1,"",TKT_FLG_HW_AUTH:776,3,1,"",TKT_FLG_INITIAL:777,3,1,"",TKT_FLG_INVALID:778,3,1,"",TKT_FLG_MAY_POSTDATE:779,3,1,"",TKT_FLG_OK_AS_DELEGATE:780,3,1,"",TKT_FLG_POSTDATED:781,3,1,"",TKT_FLG_PRE_AUTH:782,3,1,"",TKT_FLG_PROXIABLE:783,3,1,"",TKT_FLG_PROXY:784,3,1,"",TKT_FLG_RENEWABLE:785,3,1,"",TKT_FLG_TRANSIT_POLICY_CHECKED:786,3,1,"",VALID_INT_BITS:787,3,1,"",VALID_UINT_BITS:788,3,1,"",krb524_convert_creds_kdc:790,3,1,"",krb524_init_ets:791,3,1,"",krb5_425_conv_principal:49,0,1,"c.krb5_425_conv_principal",krb5_524_conv_principal:50,0,1,"c.krb5_524_conv_principal",krb5_524_convert_creds:51,0,1,"c.krb5_524_convert_creds",krb5_address:805,1,1,"c.krb5_address",krb5_address_compare:52,0,1,"c.krb5_address_compare",krb5_address_order:53,0,1,"c.krb5_address_order",krb5_address_search:54,0,1,"c.krb5_address_search",krb5_addrtype:806,1,1,"c.krb5_addrtype",krb5_allow_weak_crypto:55,0,1,"c.krb5_allow_weak_crypto",krb5_aname_to_localname:56,0,1,"c.krb5_aname_to_localname",krb5_anonymous_principal:57,0,1,"c.krb5_anonymous_principal",krb5_anonymous_realm:58,0,1,"c.krb5_anonymous_realm",krb5_ap_rep:807,1,1,"c.krb5_ap_rep",krb5_ap_rep_enc_part:808,1,1,"c.krb5_ap_rep_enc_part",krb5_ap_req:809,1,1,"c.krb5_ap_req",krb5_appdefault_boolean:59,0,1,"c.krb5_appdefault_boolean",krb5_appdefault_string:60,0,1,"c.krb5_appdefault_string",krb5_auth_con_free:61,0,1,"c.krb5_auth_con_free",krb5_auth_con_genaddrs:62,0,1,"c.krb5_auth_con_genaddrs",krb5_auth_con_get_checksum_func:63,0,1,"c.krb5_auth_con_get_checksum_func",krb5_auth_con_getaddrs:64,0,1,"c.krb5_auth_con_getaddrs",krb5_auth_con_getauthenticator:65,0,1,"c.krb5_auth_con_getauthenticator",krb5_auth_con_getflags:66,0,1,"c.krb5_auth_con_getflags",krb5_auth_con_getkey:67,0,1,"c.krb5_auth_con_getkey",krb5_auth_con_getkey_k:68,0,1,"c.krb5_auth_con_getkey_k",krb5_auth_con_getlocalseqnumber:69,0,1,"c.krb5_auth_con_getlocalseqnumber",krb5_auth_con_getlocalsubkey:70,0,1,"c.krb5_auth_con_getlocalsubkey",krb5_auth_con_getrcache:71,0,1,"c.krb5_auth_con_getrcache",krb5_auth_con_getrecvsubkey:72,0,1,"c.krb5_auth_con_getrecvsubkey",krb5_auth_con_getrecvsubkey_k:73,0,1,"c.krb5_auth_con_getrecvsubkey_k",krb5_auth_con_getremoteseqnumber:74,0,1,"c.krb5_auth_con_getremoteseqnumber",krb5_auth_con_getremotesubkey:75,0,1,"c.krb5_auth_con_getremotesubkey",krb5_auth_con_getsendsubkey:76,0,1,"c.krb5_auth_con_getsendsubkey",krb5_auth_con_getsendsubkey_k:77,0,1,"c.krb5_auth_con_getsendsubkey_k",krb5_auth_con_init:78,0,1,"c.krb5_auth_con_init",krb5_auth_con_initivector:79,0,1,"c.krb5_auth_con_initivector",krb5_auth_con_set_checksum_func:80,0,1,"c.krb5_auth_con_set_checksum_func",krb5_auth_con_set_req_cksumtype:81,0,1,"c.krb5_auth_con_set_req_cksumtype",krb5_auth_con_setaddrs:82,0,1,"c.krb5_auth_con_setaddrs",krb5_auth_con_setflags:83,0,1,"c.krb5_auth_con_setflags",krb5_auth_con_setports:84,0,1,"c.krb5_auth_con_setports",krb5_auth_con_setrcache:85,0,1,"c.krb5_auth_con_setrcache",krb5_auth_con_setrecvsubkey:86,0,1,"c.krb5_auth_con_setrecvsubkey",krb5_auth_con_setrecvsubkey_k:87,0,1,"c.krb5_auth_con_setrecvsubkey_k",krb5_auth_con_setsendsubkey:88,0,1,"c.krb5_auth_con_setsendsubkey",krb5_auth_con_setsendsubkey_k:89,0,1,"c.krb5_auth_con_setsendsubkey_k",krb5_auth_con_setuseruserkey:90,0,1,"c.krb5_auth_con_setuseruserkey",krb5_auth_context:810,1,1,"c.krb5_auth_context",krb5_authdata:811,1,1,"c.krb5_authdata",krb5_authdatatype:812,1,1,"c.krb5_authdatatype",krb5_authenticator:813,1,1,"c.krb5_authenticator",krb5_boolean:814,1,1,"c.krb5_boolean",krb5_build_principal:91,0,1,"c.krb5_build_principal",krb5_build_principal_alloc_va:92,0,1,"c.krb5_build_principal_alloc_va",krb5_build_principal_ext:93,0,1,"c.krb5_build_principal_ext",krb5_build_principal_va:94,0,1,"c.krb5_build_principal_va",krb5_c_block_size:95,0,1,"c.krb5_c_block_size",krb5_c_checksum_length:96,0,1,"c.krb5_c_checksum_length",krb5_c_crypto_length:97,0,1,"c.krb5_c_crypto_length",krb5_c_crypto_length_iov:98,0,1,"c.krb5_c_crypto_length_iov",krb5_c_decrypt:99,0,1,"c.krb5_c_decrypt",krb5_c_decrypt_iov:100,0,1,"c.krb5_c_decrypt_iov",krb5_c_derive_prfplus:101,0,1,"c.krb5_c_derive_prfplus",krb5_c_encrypt:102,0,1,"c.krb5_c_encrypt",krb5_c_encrypt_iov:103,0,1,"c.krb5_c_encrypt_iov",krb5_c_encrypt_length:104,0,1,"c.krb5_c_encrypt_length",krb5_c_enctype_compare:105,0,1,"c.krb5_c_enctype_compare",krb5_c_free_state:106,0,1,"c.krb5_c_free_state",krb5_c_fx_cf2_simple:107,0,1,"c.krb5_c_fx_cf2_simple",krb5_c_init_state:108,0,1,"c.krb5_c_init_state",krb5_c_is_coll_proof_cksum:109,0,1,"c.krb5_c_is_coll_proof_cksum",krb5_c_is_keyed_cksum:110,0,1,"c.krb5_c_is_keyed_cksum",krb5_c_keyed_checksum_types:111,0,1,"c.krb5_c_keyed_checksum_types",krb5_c_keylengths:112,0,1,"c.krb5_c_keylengths",krb5_c_make_checksum:113,0,1,"c.krb5_c_make_checksum",krb5_c_make_checksum_iov:114,0,1,"c.krb5_c_make_checksum_iov",krb5_c_make_random_key:115,0,1,"c.krb5_c_make_random_key",krb5_c_padding_length:116,0,1,"c.krb5_c_padding_length",krb5_c_prf:117,0,1,"c.krb5_c_prf",krb5_c_prf_length:118,0,1,"c.krb5_c_prf_length",krb5_c_prfplus:119,0,1,"c.krb5_c_prfplus",krb5_c_random_add_entropy:120,0,1,"c.krb5_c_random_add_entropy",krb5_c_random_make_octets:121,0,1,"c.krb5_c_random_make_octets",krb5_c_random_os_entropy:122,0,1,"c.krb5_c_random_os_entropy",krb5_c_random_seed:123,0,1,"c.krb5_c_random_seed",krb5_c_random_to_key:124,0,1,"c.krb5_c_random_to_key",krb5_c_string_to_key:125,0,1,"c.krb5_c_string_to_key",krb5_c_string_to_key_with_params:126,0,1,"c.krb5_c_string_to_key_with_params",krb5_c_valid_cksumtype:127,0,1,"c.krb5_c_valid_cksumtype",krb5_c_valid_enctype:128,0,1,"c.krb5_c_valid_enctype",krb5_c_verify_checksum:129,0,1,"c.krb5_c_verify_checksum",krb5_c_verify_checksum_iov:130,0,1,"c.krb5_c_verify_checksum_iov",krb5_calculate_checksum:131,0,1,"c.krb5_calculate_checksum",krb5_cc_cache_match:132,0,1,"c.krb5_cc_cache_match",krb5_cc_close:133,0,1,"c.krb5_cc_close",krb5_cc_copy_creds:134,0,1,"c.krb5_cc_copy_creds",krb5_cc_cursor:815,1,1,"c.krb5_cc_cursor",krb5_cc_default:135,0,1,"c.krb5_cc_default",krb5_cc_default_name:136,0,1,"c.krb5_cc_default_name",krb5_cc_destroy:137,0,1,"c.krb5_cc_destroy",krb5_cc_dup:138,0,1,"c.krb5_cc_dup",krb5_cc_end_seq_get:139,0,1,"c.krb5_cc_end_seq_get",krb5_cc_gen_new:140,0,1,"c.krb5_cc_gen_new",krb5_cc_get_config:141,0,1,"c.krb5_cc_get_config",krb5_cc_get_flags:142,0,1,"c.krb5_cc_get_flags",krb5_cc_get_full_name:143,0,1,"c.krb5_cc_get_full_name",krb5_cc_get_name:144,0,1,"c.krb5_cc_get_name",krb5_cc_get_principal:145,0,1,"c.krb5_cc_get_principal",krb5_cc_get_type:146,0,1,"c.krb5_cc_get_type",krb5_cc_initialize:147,0,1,"c.krb5_cc_initialize",krb5_cc_move:148,0,1,"c.krb5_cc_move",krb5_cc_new_unique:149,0,1,"c.krb5_cc_new_unique",krb5_cc_next_cred:150,0,1,"c.krb5_cc_next_cred",krb5_cc_remove_cred:151,0,1,"c.krb5_cc_remove_cred",krb5_cc_resolve:152,0,1,"c.krb5_cc_resolve",krb5_cc_retrieve_cred:153,0,1,"c.krb5_cc_retrieve_cred",krb5_cc_select:154,0,1,"c.krb5_cc_select",krb5_cc_set_config:155,0,1,"c.krb5_cc_set_config",krb5_cc_set_default_name:156,0,1,"c.krb5_cc_set_default_name",krb5_cc_set_flags:157,0,1,"c.krb5_cc_set_flags",krb5_cc_start_seq_get:158,0,1,"c.krb5_cc_start_seq_get",krb5_cc_store_cred:159,0,1,"c.krb5_cc_store_cred",krb5_cc_support_switch:160,0,1,"c.krb5_cc_support_switch",krb5_cc_switch:161,0,1,"c.krb5_cc_switch",krb5_ccache:816,1,1,"c.krb5_ccache",krb5_cccol_cursor:817,1,1,"c.krb5_cccol_cursor",krb5_cccol_cursor_free:162,0,1,"c.krb5_cccol_cursor_free",krb5_cccol_cursor_new:163,0,1,"c.krb5_cccol_cursor_new",krb5_cccol_cursor_next:164,0,1,"c.krb5_cccol_cursor_next",krb5_cccol_have_content:165,0,1,"c.krb5_cccol_have_content",krb5_change_password:166,0,1,"c.krb5_change_password",krb5_check_clockskew:167,0,1,"c.krb5_check_clockskew",krb5_checksum:818,1,1,"c.krb5_checksum",krb5_checksum_size:168,0,1,"c.krb5_checksum_size",krb5_chpw_message:169,0,1,"c.krb5_chpw_message",krb5_cksumtype:819,1,1,"c.krb5_cksumtype",krb5_cksumtype_to_string:170,0,1,"c.krb5_cksumtype_to_string",krb5_clear_error_message:171,0,1,"c.krb5_clear_error_message",krb5_const:792,3,1,"",krb5_const_pointer:820,1,1,"c.krb5_const_pointer",krb5_const_principal:821,1,1,"c.krb5_const_principal",krb5_context:822,1,1,"c.krb5_context",krb5_copy_addresses:172,0,1,"c.krb5_copy_addresses",krb5_copy_authdata:173,0,1,"c.krb5_copy_authdata",krb5_copy_authenticator:174,0,1,"c.krb5_copy_authenticator",krb5_copy_checksum:175,0,1,"c.krb5_copy_checksum",krb5_copy_context:176,0,1,"c.krb5_copy_context",krb5_copy_creds:177,0,1,"c.krb5_copy_creds",krb5_copy_data:178,0,1,"c.krb5_copy_data",krb5_copy_error_message:179,0,1,"c.krb5_copy_error_message",krb5_copy_keyblock:180,0,1,"c.krb5_copy_keyblock",krb5_copy_keyblock_contents:181,0,1,"c.krb5_copy_keyblock_contents",krb5_copy_principal:182,0,1,"c.krb5_copy_principal",krb5_copy_ticket:183,0,1,"c.krb5_copy_ticket",krb5_cred:823,1,1,"c.krb5_cred",krb5_cred_enc_part:824,1,1,"c.krb5_cred_enc_part",krb5_cred_info:825,1,1,"c.krb5_cred_info",krb5_creds:826,1,1,"c.krb5_creds",krb5_crypto_iov:827,1,1,"c.krb5_crypto_iov",krb5_cryptotype:828,1,1,"c.krb5_cryptotype",krb5_data:829,1,1,"c.krb5_data",krb5_decode_authdata_container:184,0,1,"c.krb5_decode_authdata_container",krb5_decode_ticket:185,0,1,"c.krb5_decode_ticket",krb5_decrypt:186,0,1,"c.krb5_decrypt",krb5_deltat:830,1,1,"c.krb5_deltat",krb5_deltat_to_string:187,0,1,"c.krb5_deltat_to_string",krb5_eblock_enctype:188,0,1,"c.krb5_eblock_enctype",krb5_enc_data:831,1,1,"c.krb5_enc_data",krb5_enc_kdc_rep_part:832,1,1,"c.krb5_enc_kdc_rep_part",krb5_enc_tkt_part:833,1,1,"c.krb5_enc_tkt_part",krb5_encode_authdata_container:189,0,1,"c.krb5_encode_authdata_container",krb5_encrypt:190,0,1,"c.krb5_encrypt",krb5_encrypt_block:834,1,1,"c.krb5_encrypt_block",krb5_encrypt_size:191,0,1,"c.krb5_encrypt_size",krb5_enctype:835,1,1,"c.krb5_enctype",krb5_enctype_to_name:192,0,1,"c.krb5_enctype_to_name",krb5_enctype_to_string:193,0,1,"c.krb5_enctype_to_string",krb5_error:836,1,1,"c.krb5_error",krb5_error_code:837,1,1,"c.krb5_error_code",krb5_expand_hostname:194,0,1,"c.krb5_expand_hostname",krb5_expire_callback_func:838,1,1,"c.krb5_expire_callback_func",krb5_find_authdata:195,0,1,"c.krb5_find_authdata",krb5_finish_key:196,0,1,"c.krb5_finish_key",krb5_finish_random_key:197,0,1,"c.krb5_finish_random_key",krb5_flags:839,1,1,"c.krb5_flags",krb5_free_addresses:198,0,1,"c.krb5_free_addresses",krb5_free_ap_rep_enc_part:199,0,1,"c.krb5_free_ap_rep_enc_part",krb5_free_authdata:200,0,1,"c.krb5_free_authdata",krb5_free_authenticator:201,0,1,"c.krb5_free_authenticator",krb5_free_checksum:202,0,1,"c.krb5_free_checksum",krb5_free_checksum_contents:203,0,1,"c.krb5_free_checksum_contents",krb5_free_cksumtypes:204,0,1,"c.krb5_free_cksumtypes",krb5_free_context:205,0,1,"c.krb5_free_context",krb5_free_cred_contents:206,0,1,"c.krb5_free_cred_contents",krb5_free_creds:207,0,1,"c.krb5_free_creds",krb5_free_data:208,0,1,"c.krb5_free_data",krb5_free_data_contents:209,0,1,"c.krb5_free_data_contents",krb5_free_default_realm:210,0,1,"c.krb5_free_default_realm",krb5_free_enctypes:211,0,1,"c.krb5_free_enctypes",krb5_free_error:212,0,1,"c.krb5_free_error",krb5_free_error_message:213,0,1,"c.krb5_free_error_message",krb5_free_host_realm:214,0,1,"c.krb5_free_host_realm",krb5_free_keyblock:215,0,1,"c.krb5_free_keyblock",krb5_free_keyblock_contents:216,0,1,"c.krb5_free_keyblock_contents",krb5_free_keytab_entry_contents:217,0,1,"c.krb5_free_keytab_entry_contents",krb5_free_principal:218,0,1,"c.krb5_free_principal",krb5_free_string:219,0,1,"c.krb5_free_string",krb5_free_tgt_creds:220,0,1,"c.krb5_free_tgt_creds",krb5_free_ticket:221,0,1,"c.krb5_free_ticket",krb5_free_unparsed_name:222,0,1,"c.krb5_free_unparsed_name",krb5_fwd_tgt_creds:223,0,1,"c.krb5_fwd_tgt_creds",krb5_get_credentials:224,0,1,"c.krb5_get_credentials",krb5_get_credentials_renew:225,0,1,"c.krb5_get_credentials_renew",krb5_get_credentials_validate:226,0,1,"c.krb5_get_credentials_validate",krb5_get_default_realm:227,0,1,"c.krb5_get_default_realm",krb5_get_error_message:228,0,1,"c.krb5_get_error_message",krb5_get_etype_info:229,0,1,"c.krb5_get_etype_info",krb5_get_fallback_host_realm:230,0,1,"c.krb5_get_fallback_host_realm",krb5_get_host_realm:231,0,1,"c.krb5_get_host_realm",krb5_get_in_tkt_with_keytab:232,0,1,"c.krb5_get_in_tkt_with_keytab",krb5_get_in_tkt_with_password:233,0,1,"c.krb5_get_in_tkt_with_password",krb5_get_in_tkt_with_skey:234,0,1,"c.krb5_get_in_tkt_with_skey",krb5_get_init_creds_keytab:235,0,1,"c.krb5_get_init_creds_keytab",krb5_get_init_creds_opt:840,1,1,"c.krb5_get_init_creds_opt",krb5_get_init_creds_opt_alloc:236,0,1,"c.krb5_get_init_creds_opt_alloc",krb5_get_init_creds_opt_free:237,0,1,"c.krb5_get_init_creds_opt_free",krb5_get_init_creds_opt_get_fast_flags:238,0,1,"c.krb5_get_init_creds_opt_get_fast_flags",krb5_get_init_creds_opt_init:239,0,1,"c.krb5_get_init_creds_opt_init",krb5_get_init_creds_opt_set_address_list:240,0,1,"c.krb5_get_init_creds_opt_set_address_list",krb5_get_init_creds_opt_set_anonymous:241,0,1,"c.krb5_get_init_creds_opt_set_anonymous",krb5_get_init_creds_opt_set_canonicalize:242,0,1,"c.krb5_get_init_creds_opt_set_canonicalize",krb5_get_init_creds_opt_set_change_password_prompt:243,0,1,"c.krb5_get_init_creds_opt_set_change_password_prompt",krb5_get_init_creds_opt_set_etype_list:244,0,1,"c.krb5_get_init_creds_opt_set_etype_list",krb5_get_init_creds_opt_set_expire_callback:245,0,1,"c.krb5_get_init_creds_opt_set_expire_callback",krb5_get_init_creds_opt_set_fast_ccache:246,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache",krb5_get_init_creds_opt_set_fast_ccache_name:247,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache_name",krb5_get_init_creds_opt_set_fast_flags:248,0,1,"c.krb5_get_init_creds_opt_set_fast_flags",krb5_get_init_creds_opt_set_forwardable:249,0,1,"c.krb5_get_init_creds_opt_set_forwardable",krb5_get_init_creds_opt_set_in_ccache:250,0,1,"c.krb5_get_init_creds_opt_set_in_ccache",krb5_get_init_creds_opt_set_out_ccache:251,0,1,"c.krb5_get_init_creds_opt_set_out_ccache",krb5_get_init_creds_opt_set_pa:252,0,1,"c.krb5_get_init_creds_opt_set_pa",krb5_get_init_creds_opt_set_pac_request:253,0,1,"c.krb5_get_init_creds_opt_set_pac_request",krb5_get_init_creds_opt_set_preauth_list:254,0,1,"c.krb5_get_init_creds_opt_set_preauth_list",krb5_get_init_creds_opt_set_proxiable:255,0,1,"c.krb5_get_init_creds_opt_set_proxiable",krb5_get_init_creds_opt_set_renew_life:256,0,1,"c.krb5_get_init_creds_opt_set_renew_life",krb5_get_init_creds_opt_set_responder:257,0,1,"c.krb5_get_init_creds_opt_set_responder",krb5_get_init_creds_opt_set_salt:258,0,1,"c.krb5_get_init_creds_opt_set_salt",krb5_get_init_creds_opt_set_tkt_life:259,0,1,"c.krb5_get_init_creds_opt_set_tkt_life",krb5_get_init_creds_password:260,0,1,"c.krb5_get_init_creds_password",krb5_get_permitted_enctypes:261,0,1,"c.krb5_get_permitted_enctypes",krb5_get_profile:262,0,1,"c.krb5_get_profile",krb5_get_prompt_types:263,0,1,"c.krb5_get_prompt_types",krb5_get_renewed_creds:264,0,1,"c.krb5_get_renewed_creds",krb5_get_server_rcache:265,0,1,"c.krb5_get_server_rcache",krb5_get_time_offsets:266,0,1,"c.krb5_get_time_offsets",krb5_get_validated_creds:267,0,1,"c.krb5_get_validated_creds",krb5_gic_opt_pa_data:841,1,1,"c.krb5_gic_opt_pa_data",krb5_init_context:268,0,1,"c.krb5_init_context",krb5_init_context_profile:269,0,1,"c.krb5_init_context_profile",krb5_init_creds_context:842,1,1,"c.krb5_init_creds_context",krb5_init_creds_free:270,0,1,"c.krb5_init_creds_free",krb5_init_creds_get:271,0,1,"c.krb5_init_creds_get",krb5_init_creds_get_creds:272,0,1,"c.krb5_init_creds_get_creds",krb5_init_creds_get_error:273,0,1,"c.krb5_init_creds_get_error",krb5_init_creds_get_times:274,0,1,"c.krb5_init_creds_get_times",krb5_init_creds_init:275,0,1,"c.krb5_init_creds_init",krb5_init_creds_set_keytab:276,0,1,"c.krb5_init_creds_set_keytab",krb5_init_creds_set_password:277,0,1,"c.krb5_init_creds_set_password",krb5_init_creds_set_service:278,0,1,"c.krb5_init_creds_set_service",krb5_init_creds_step:279,0,1,"c.krb5_init_creds_step",krb5_init_keyblock:280,0,1,"c.krb5_init_keyblock",krb5_init_random_key:281,0,1,"c.krb5_init_random_key",krb5_init_secure_context:282,0,1,"c.krb5_init_secure_context",krb5_int16:843,1,1,"c.krb5_int16",krb5_int32:844,1,1,"c.krb5_int32",krb5_is_config_principal:283,0,1,"c.krb5_is_config_principal",krb5_is_referral_realm:284,0,1,"c.krb5_is_referral_realm",krb5_is_thread_safe:285,0,1,"c.krb5_is_thread_safe",krb5_k_create_key:286,0,1,"c.krb5_k_create_key",krb5_k_decrypt:287,0,1,"c.krb5_k_decrypt",krb5_k_decrypt_iov:288,0,1,"c.krb5_k_decrypt_iov",krb5_k_encrypt:289,0,1,"c.krb5_k_encrypt",krb5_k_encrypt_iov:290,0,1,"c.krb5_k_encrypt_iov",krb5_k_free_key:291,0,1,"c.krb5_k_free_key",krb5_k_key_enctype:292,0,1,"c.krb5_k_key_enctype",krb5_k_key_keyblock:293,0,1,"c.krb5_k_key_keyblock",krb5_k_make_checksum:294,0,1,"c.krb5_k_make_checksum",krb5_k_make_checksum_iov:295,0,1,"c.krb5_k_make_checksum_iov",krb5_k_prf:296,0,1,"c.krb5_k_prf",krb5_k_reference_key:297,0,1,"c.krb5_k_reference_key",krb5_k_verify_checksum:298,0,1,"c.krb5_k_verify_checksum",krb5_k_verify_checksum_iov:299,0,1,"c.krb5_k_verify_checksum_iov",krb5_kdc_rep:845,1,1,"c.krb5_kdc_rep",krb5_kdc_req:846,1,1,"c.krb5_kdc_req",krb5_kdc_sign_ticket:300,0,1,"c.krb5_kdc_sign_ticket",krb5_kdc_verify_ticket:301,0,1,"c.krb5_kdc_verify_ticket",krb5_key:847,1,1,"c.krb5_key",krb5_keyblock:848,1,1,"c.krb5_keyblock",krb5_keytab:849,1,1,"c.krb5_keytab",krb5_keytab_entry:850,1,1,"c.krb5_keytab_entry",krb5_keyusage:851,1,1,"c.krb5_keyusage",krb5_kt_add_entry:302,0,1,"c.krb5_kt_add_entry",krb5_kt_client_default:303,0,1,"c.krb5_kt_client_default",krb5_kt_close:304,0,1,"c.krb5_kt_close",krb5_kt_cursor:852,1,1,"c.krb5_kt_cursor",krb5_kt_default:305,0,1,"c.krb5_kt_default",krb5_kt_default_name:306,0,1,"c.krb5_kt_default_name",krb5_kt_dup:307,0,1,"c.krb5_kt_dup",krb5_kt_end_seq_get:308,0,1,"c.krb5_kt_end_seq_get",krb5_kt_free_entry:309,0,1,"c.krb5_kt_free_entry",krb5_kt_get_entry:310,0,1,"c.krb5_kt_get_entry",krb5_kt_get_name:311,0,1,"c.krb5_kt_get_name",krb5_kt_get_type:312,0,1,"c.krb5_kt_get_type",krb5_kt_have_content:313,0,1,"c.krb5_kt_have_content",krb5_kt_next_entry:314,0,1,"c.krb5_kt_next_entry",krb5_kt_read_service_key:315,0,1,"c.krb5_kt_read_service_key",krb5_kt_remove_entry:316,0,1,"c.krb5_kt_remove_entry",krb5_kt_resolve:317,0,1,"c.krb5_kt_resolve",krb5_kt_start_seq_get:318,0,1,"c.krb5_kt_start_seq_get",krb5_kuserok:319,0,1,"c.krb5_kuserok",krb5_kvno:853,1,1,"c.krb5_kvno",krb5_last_req_entry:854,1,1,"c.krb5_last_req_entry",krb5_magic:855,1,1,"c.krb5_magic",krb5_make_authdata_kdc_issued:320,0,1,"c.krb5_make_authdata_kdc_issued",krb5_marshal_credentials:321,0,1,"c.krb5_marshal_credentials",krb5_merge_authdata:322,0,1,"c.krb5_merge_authdata",krb5_mk_1cred:323,0,1,"c.krb5_mk_1cred",krb5_mk_error:324,0,1,"c.krb5_mk_error",krb5_mk_ncred:325,0,1,"c.krb5_mk_ncred",krb5_mk_priv:326,0,1,"c.krb5_mk_priv",krb5_mk_rep:327,0,1,"c.krb5_mk_rep",krb5_mk_rep_dce:328,0,1,"c.krb5_mk_rep_dce",krb5_mk_req:329,0,1,"c.krb5_mk_req",krb5_mk_req_checksum_func:856,1,1,"c.krb5_mk_req_checksum_func",krb5_mk_req_extended:330,0,1,"c.krb5_mk_req_extended",krb5_mk_safe:331,0,1,"c.krb5_mk_safe",krb5_msgtype:857,1,1,"c.krb5_msgtype",krb5_octet:858,1,1,"c.krb5_octet",krb5_os_localaddr:332,0,1,"c.krb5_os_localaddr",krb5_pa_data:859,1,1,"c.krb5_pa_data",krb5_pa_pac_req:860,1,1,"c.krb5_pa_pac_req",krb5_pa_server_referral_data:861,1,1,"c.krb5_pa_server_referral_data",krb5_pa_svr_referral_data:862,1,1,"c.krb5_pa_svr_referral_data",krb5_pac:863,1,1,"c.krb5_pac",krb5_pac_add_buffer:333,0,1,"c.krb5_pac_add_buffer",krb5_pac_free:334,0,1,"c.krb5_pac_free",krb5_pac_get_buffer:335,0,1,"c.krb5_pac_get_buffer",krb5_pac_get_client_info:336,0,1,"c.krb5_pac_get_client_info",krb5_pac_get_types:337,0,1,"c.krb5_pac_get_types",krb5_pac_init:338,0,1,"c.krb5_pac_init",krb5_pac_parse:339,0,1,"c.krb5_pac_parse",krb5_pac_sign:340,0,1,"c.krb5_pac_sign",krb5_pac_sign_ext:341,0,1,"c.krb5_pac_sign_ext",krb5_pac_verify:342,0,1,"c.krb5_pac_verify",krb5_pac_verify_ext:343,0,1,"c.krb5_pac_verify_ext",krb5_parse_name:344,0,1,"c.krb5_parse_name",krb5_parse_name_flags:345,0,1,"c.krb5_parse_name_flags",krb5_pointer:864,1,1,"c.krb5_pointer",krb5_post_recv_fn:865,1,1,"c.krb5_post_recv_fn",krb5_pre_send_fn:866,1,1,"c.krb5_pre_send_fn",krb5_preauthtype:867,1,1,"c.krb5_preauthtype",krb5_prepend_error_message:346,0,1,"c.krb5_prepend_error_message",krb5_princ_component:793,3,1,"",krb5_princ_name:794,3,1,"",krb5_princ_realm:795,3,1,"",krb5_princ_set_realm:796,3,1,"",krb5_princ_set_realm_data:797,3,1,"",krb5_princ_set_realm_length:798,3,1,"",krb5_princ_size:799,3,1,"",krb5_princ_type:800,3,1,"",krb5_principal2salt:347,0,1,"c.krb5_principal2salt",krb5_principal:868,1,1,"c.krb5_principal",krb5_principal_compare:348,0,1,"c.krb5_principal_compare",krb5_principal_compare_any_realm:349,0,1,"c.krb5_principal_compare_any_realm",krb5_principal_compare_flags:350,0,1,"c.krb5_principal_compare_flags",krb5_principal_data:869,1,1,"c.krb5_principal_data",krb5_process_key:351,0,1,"c.krb5_process_key",krb5_prompt:870,1,1,"c.krb5_prompt",krb5_prompt_type:871,1,1,"c.krb5_prompt_type",krb5_prompter_fct:872,1,1,"c.krb5_prompter_fct",krb5_prompter_posix:352,0,1,"c.krb5_prompter_posix",krb5_pwd_data:873,1,1,"c.krb5_pwd_data",krb5_random_key:353,0,1,"c.krb5_random_key",krb5_rcache:874,1,1,"c.krb5_rcache",krb5_rd_cred:354,0,1,"c.krb5_rd_cred",krb5_rd_error:355,0,1,"c.krb5_rd_error",krb5_rd_priv:356,0,1,"c.krb5_rd_priv",krb5_rd_rep:357,0,1,"c.krb5_rd_rep",krb5_rd_rep_dce:358,0,1,"c.krb5_rd_rep_dce",krb5_rd_req:359,0,1,"c.krb5_rd_req",krb5_rd_safe:360,0,1,"c.krb5_rd_safe",krb5_read_password:361,0,1,"c.krb5_read_password",krb5_realm_compare:362,0,1,"c.krb5_realm_compare",krb5_recvauth:363,0,1,"c.krb5_recvauth",krb5_recvauth_version:364,0,1,"c.krb5_recvauth_version",krb5_replay_data:875,1,1,"c.krb5_replay_data",krb5_responder_context:876,1,1,"c.krb5_responder_context",krb5_responder_fn:877,1,1,"c.krb5_responder_fn",krb5_responder_get_challenge:365,0,1,"c.krb5_responder_get_challenge",krb5_responder_list_questions:366,0,1,"c.krb5_responder_list_questions",krb5_responder_otp_challenge:878,1,1,"c.krb5_responder_otp_challenge",krb5_responder_otp_challenge_free:367,0,1,"c.krb5_responder_otp_challenge_free",krb5_responder_otp_get_challenge:368,0,1,"c.krb5_responder_otp_get_challenge",krb5_responder_otp_set_answer:369,0,1,"c.krb5_responder_otp_set_answer",krb5_responder_otp_tokeninfo:879,1,1,"c.krb5_responder_otp_tokeninfo",krb5_responder_pkinit_challenge:880,1,1,"c.krb5_responder_pkinit_challenge",krb5_responder_pkinit_challenge_free:370,0,1,"c.krb5_responder_pkinit_challenge_free",krb5_responder_pkinit_get_challenge:371,0,1,"c.krb5_responder_pkinit_get_challenge",krb5_responder_pkinit_identity:881,1,1,"c.krb5_responder_pkinit_identity",krb5_responder_pkinit_set_answer:372,0,1,"c.krb5_responder_pkinit_set_answer",krb5_responder_set_answer:373,0,1,"c.krb5_responder_set_answer",krb5_response:882,1,1,"c.krb5_response",krb5_roundup:801,3,1,"",krb5_salttype_to_string:374,0,1,"c.krb5_salttype_to_string",krb5_sendauth:375,0,1,"c.krb5_sendauth",krb5_server_decrypt_ticket_keytab:376,0,1,"c.krb5_server_decrypt_ticket_keytab",krb5_set_default_realm:377,0,1,"c.krb5_set_default_realm",krb5_set_default_tgs_enctypes:378,0,1,"c.krb5_set_default_tgs_enctypes",krb5_set_error_message:379,0,1,"c.krb5_set_error_message",krb5_set_kdc_recv_hook:380,0,1,"c.krb5_set_kdc_recv_hook",krb5_set_kdc_send_hook:381,0,1,"c.krb5_set_kdc_send_hook",krb5_set_password:382,0,1,"c.krb5_set_password",krb5_set_password_using_ccache:383,0,1,"c.krb5_set_password_using_ccache",krb5_set_principal_realm:384,0,1,"c.krb5_set_principal_realm",krb5_set_real_time:385,0,1,"c.krb5_set_real_time",krb5_set_trace_callback:386,0,1,"c.krb5_set_trace_callback",krb5_set_trace_filename:387,0,1,"c.krb5_set_trace_filename",krb5_sname_match:388,0,1,"c.krb5_sname_match",krb5_sname_to_principal:389,0,1,"c.krb5_sname_to_principal",krb5_string_to_cksumtype:390,0,1,"c.krb5_string_to_cksumtype",krb5_string_to_deltat:391,0,1,"c.krb5_string_to_deltat",krb5_string_to_enctype:392,0,1,"c.krb5_string_to_enctype",krb5_string_to_key:393,0,1,"c.krb5_string_to_key",krb5_string_to_salttype:394,0,1,"c.krb5_string_to_salttype",krb5_string_to_timestamp:395,0,1,"c.krb5_string_to_timestamp",krb5_ticket:883,1,1,"c.krb5_ticket",krb5_ticket_times:884,1,1,"c.krb5_ticket_times",krb5_timeofday:396,0,1,"c.krb5_timeofday",krb5_timestamp:885,1,1,"c.krb5_timestamp",krb5_timestamp_to_sfstring:397,0,1,"c.krb5_timestamp_to_sfstring",krb5_timestamp_to_string:398,0,1,"c.krb5_timestamp_to_string",krb5_tkt_authent:886,1,1,"c.krb5_tkt_authent",krb5_tkt_creds_context:887,1,1,"c.krb5_tkt_creds_context",krb5_tkt_creds_free:399,0,1,"c.krb5_tkt_creds_free",krb5_tkt_creds_get:400,0,1,"c.krb5_tkt_creds_get",krb5_tkt_creds_get_creds:401,0,1,"c.krb5_tkt_creds_get_creds",krb5_tkt_creds_get_times:402,0,1,"c.krb5_tkt_creds_get_times",krb5_tkt_creds_init:403,0,1,"c.krb5_tkt_creds_init",krb5_tkt_creds_step:404,0,1,"c.krb5_tkt_creds_step",krb5_trace_callback:888,1,1,"c.krb5_trace_callback",krb5_trace_info:889,1,1,"c.krb5_trace_info",krb5_transited:890,1,1,"c.krb5_transited",krb5_typed_data:891,1,1,"c.krb5_typed_data",krb5_ui_2:892,1,1,"c.krb5_ui_2",krb5_ui_4:893,1,1,"c.krb5_ui_4",krb5_unmarshal_credentials:405,0,1,"c.krb5_unmarshal_credentials",krb5_unparse_name:406,0,1,"c.krb5_unparse_name",krb5_unparse_name_ext:407,0,1,"c.krb5_unparse_name_ext",krb5_unparse_name_flags:408,0,1,"c.krb5_unparse_name_flags",krb5_unparse_name_flags_ext:409,0,1,"c.krb5_unparse_name_flags_ext",krb5_us_timeofday:410,0,1,"c.krb5_us_timeofday",krb5_use_enctype:411,0,1,"c.krb5_use_enctype",krb5_verify_authdata_kdc_issued:412,0,1,"c.krb5_verify_authdata_kdc_issued",krb5_verify_checksum:413,0,1,"c.krb5_verify_checksum",krb5_verify_init_creds:414,0,1,"c.krb5_verify_init_creds",krb5_verify_init_creds_opt:894,1,1,"c.krb5_verify_init_creds_opt",krb5_verify_init_creds_opt_init:415,0,1,"c.krb5_verify_init_creds_opt_init",krb5_verify_init_creds_opt_set_ap_req_nofail:416,0,1,"c.krb5_verify_init_creds_opt_set_ap_req_nofail",krb5_vprepend_error_message:417,0,1,"c.krb5_vprepend_error_message",krb5_vset_error_message:418,0,1,"c.krb5_vset_error_message",krb5_vwrap_error_message:419,0,1,"c.krb5_vwrap_error_message",krb5_wrap_error_message:420,0,1,"c.krb5_wrap_error_message",krb5_x:802,3,1,"",krb5_xc:803,3,1,"",passwd_phrase_element:895,1,1,"c.passwd_phrase_element"},krb5_address:{addrtype:805,2,1,"c.krb5_address.addrtype",contents:805,2,1,"c.krb5_address.contents",length:805,2,1,"c.krb5_address.length",magic:805,2,1,"c.krb5_address.magic"},krb5_ap_rep:{enc_part:807,2,1,"c.krb5_ap_rep.enc_part",magic:807,2,1,"c.krb5_ap_rep.magic"},krb5_ap_rep_enc_part:{ctime:808,2,1,"c.krb5_ap_rep_enc_part.ctime",cusec:808,2,1,"c.krb5_ap_rep_enc_part.cusec",magic:808,2,1,"c.krb5_ap_rep_enc_part.magic",seq_number:808,2,1,"c.krb5_ap_rep_enc_part.seq_number",subkey:808,2,1,"c.krb5_ap_rep_enc_part.subkey"},krb5_ap_req:{ap_options:809,2,1,"c.krb5_ap_req.ap_options",authenticator:809,2,1,"c.krb5_ap_req.authenticator",magic:809,2,1,"c.krb5_ap_req.magic",ticket:809,2,1,"c.krb5_ap_req.ticket"},krb5_authdata:{ad_type:811,2,1,"c.krb5_authdata.ad_type",contents:811,2,1,"c.krb5_authdata.contents",length:811,2,1,"c.krb5_authdata.length",magic:811,2,1,"c.krb5_authdata.magic"},krb5_authenticator:{authorization_data:813,2,1,"c.krb5_authenticator.authorization_data",checksum:813,2,1,"c.krb5_authenticator.checksum",client:813,2,1,"c.krb5_authenticator.client",ctime:813,2,1,"c.krb5_authenticator.ctime",cusec:813,2,1,"c.krb5_authenticator.cusec",magic:813,2,1,"c.krb5_authenticator.magic",seq_number:813,2,1,"c.krb5_authenticator.seq_number",subkey:813,2,1,"c.krb5_authenticator.subkey"},krb5_checksum:{checksum_type:818,2,1,"c.krb5_checksum.checksum_type",contents:818,2,1,"c.krb5_checksum.contents",length:818,2,1,"c.krb5_checksum.length",magic:818,2,1,"c.krb5_checksum.magic"},krb5_const_principal:{data:821,2,1,"c.krb5_const_principal.data",length:821,2,1,"c.krb5_const_principal.length",magic:821,2,1,"c.krb5_const_principal.magic",realm:821,2,1,"c.krb5_const_principal.realm",type:821,2,1,"c.krb5_const_principal.type"},krb5_cred:{enc_part2:823,2,1,"c.krb5_cred.enc_part2",enc_part:823,2,1,"c.krb5_cred.enc_part",magic:823,2,1,"c.krb5_cred.magic",tickets:823,2,1,"c.krb5_cred.tickets"},krb5_cred_enc_part:{magic:824,2,1,"c.krb5_cred_enc_part.magic",nonce:824,2,1,"c.krb5_cred_enc_part.nonce",r_address:824,2,1,"c.krb5_cred_enc_part.r_address",s_address:824,2,1,"c.krb5_cred_enc_part.s_address",ticket_info:824,2,1,"c.krb5_cred_enc_part.ticket_info",timestamp:824,2,1,"c.krb5_cred_enc_part.timestamp",usec:824,2,1,"c.krb5_cred_enc_part.usec"},krb5_cred_info:{caddrs:825,2,1,"c.krb5_cred_info.caddrs",client:825,2,1,"c.krb5_cred_info.client",flags:825,2,1,"c.krb5_cred_info.flags",magic:825,2,1,"c.krb5_cred_info.magic",server:825,2,1,"c.krb5_cred_info.server",session:825,2,1,"c.krb5_cred_info.session",times:825,2,1,"c.krb5_cred_info.times"},krb5_creds:{addresses:826,2,1,"c.krb5_creds.addresses",authdata:826,2,1,"c.krb5_creds.authdata",client:826,2,1,"c.krb5_creds.client",is_skey:826,2,1,"c.krb5_creds.is_skey",keyblock:826,2,1,"c.krb5_creds.keyblock",magic:826,2,1,"c.krb5_creds.magic",second_ticket:826,2,1,"c.krb5_creds.second_ticket",server:826,2,1,"c.krb5_creds.server",ticket:826,2,1,"c.krb5_creds.ticket",ticket_flags:826,2,1,"c.krb5_creds.ticket_flags",times:826,2,1,"c.krb5_creds.times"},krb5_crypto_iov:{data:827,2,1,"c.krb5_crypto_iov.data",flags:827,2,1,"c.krb5_crypto_iov.flags"},krb5_data:{data:829,2,1,"c.krb5_data.data",length:829,2,1,"c.krb5_data.length",magic:829,2,1,"c.krb5_data.magic"},krb5_enc_data:{ciphertext:831,2,1,"c.krb5_enc_data.ciphertext",enctype:831,2,1,"c.krb5_enc_data.enctype",kvno:831,2,1,"c.krb5_enc_data.kvno",magic:831,2,1,"c.krb5_enc_data.magic"},krb5_enc_kdc_rep_part:{caddrs:832,2,1,"c.krb5_enc_kdc_rep_part.caddrs",enc_padata:832,2,1,"c.krb5_enc_kdc_rep_part.enc_padata",flags:832,2,1,"c.krb5_enc_kdc_rep_part.flags",key_exp:832,2,1,"c.krb5_enc_kdc_rep_part.key_exp",last_req:832,2,1,"c.krb5_enc_kdc_rep_part.last_req",magic:832,2,1,"c.krb5_enc_kdc_rep_part.magic",msg_type:832,2,1,"c.krb5_enc_kdc_rep_part.msg_type",nonce:832,2,1,"c.krb5_enc_kdc_rep_part.nonce",server:832,2,1,"c.krb5_enc_kdc_rep_part.server",session:832,2,1,"c.krb5_enc_kdc_rep_part.session",times:832,2,1,"c.krb5_enc_kdc_rep_part.times"},krb5_enc_tkt_part:{authorization_data:833,2,1,"c.krb5_enc_tkt_part.authorization_data",caddrs:833,2,1,"c.krb5_enc_tkt_part.caddrs",client:833,2,1,"c.krb5_enc_tkt_part.client",flags:833,2,1,"c.krb5_enc_tkt_part.flags",magic:833,2,1,"c.krb5_enc_tkt_part.magic",session:833,2,1,"c.krb5_enc_tkt_part.session",times:833,2,1,"c.krb5_enc_tkt_part.times",transited:833,2,1,"c.krb5_enc_tkt_part.transited"},krb5_encrypt_block:{crypto_entry:834,2,1,"c.krb5_encrypt_block.crypto_entry",key:834,2,1,"c.krb5_encrypt_block.key",magic:834,2,1,"c.krb5_encrypt_block.magic"},krb5_error:{client:836,2,1,"c.krb5_error.client",ctime:836,2,1,"c.krb5_error.ctime",cusec:836,2,1,"c.krb5_error.cusec",e_data:836,2,1,"c.krb5_error.e_data",error:836,2,1,"c.krb5_error.error",magic:836,2,1,"c.krb5_error.magic",server:836,2,1,"c.krb5_error.server",stime:836,2,1,"c.krb5_error.stime",susec:836,2,1,"c.krb5_error.susec",text:836,2,1,"c.krb5_error.text"},krb5_get_init_creds_opt:{address_list:840,2,1,"c.krb5_get_init_creds_opt.address_list",etype_list:840,2,1,"c.krb5_get_init_creds_opt.etype_list",etype_list_length:840,2,1,"c.krb5_get_init_creds_opt.etype_list_length",flags:840,2,1,"c.krb5_get_init_creds_opt.flags",forwardable:840,2,1,"c.krb5_get_init_creds_opt.forwardable",preauth_list:840,2,1,"c.krb5_get_init_creds_opt.preauth_list",preauth_list_length:840,2,1,"c.krb5_get_init_creds_opt.preauth_list_length",proxiable:840,2,1,"c.krb5_get_init_creds_opt.proxiable",renew_life:840,2,1,"c.krb5_get_init_creds_opt.renew_life",salt:840,2,1,"c.krb5_get_init_creds_opt.salt",tkt_life:840,2,1,"c.krb5_get_init_creds_opt.tkt_life"},krb5_gic_opt_pa_data:{attr:841,2,1,"c.krb5_gic_opt_pa_data.attr",value:841,2,1,"c.krb5_gic_opt_pa_data.value"},krb5_kdc_rep:{client:845,2,1,"c.krb5_kdc_rep.client",enc_part2:845,2,1,"c.krb5_kdc_rep.enc_part2",enc_part:845,2,1,"c.krb5_kdc_rep.enc_part",magic:845,2,1,"c.krb5_kdc_rep.magic",msg_type:845,2,1,"c.krb5_kdc_rep.msg_type",padata:845,2,1,"c.krb5_kdc_rep.padata",ticket:845,2,1,"c.krb5_kdc_rep.ticket"},krb5_kdc_req:{addresses:846,2,1,"c.krb5_kdc_req.addresses",authorization_data:846,2,1,"c.krb5_kdc_req.authorization_data",client:846,2,1,"c.krb5_kdc_req.client",from:846,2,1,"c.krb5_kdc_req.from",kdc_options:846,2,1,"c.krb5_kdc_req.kdc_options",ktype:846,2,1,"c.krb5_kdc_req.ktype",magic:846,2,1,"c.krb5_kdc_req.magic",msg_type:846,2,1,"c.krb5_kdc_req.msg_type",nktypes:846,2,1,"c.krb5_kdc_req.nktypes",nonce:846,2,1,"c.krb5_kdc_req.nonce",padata:846,2,1,"c.krb5_kdc_req.padata",rtime:846,2,1,"c.krb5_kdc_req.rtime",second_ticket:846,2,1,"c.krb5_kdc_req.second_ticket",server:846,2,1,"c.krb5_kdc_req.server",till:846,2,1,"c.krb5_kdc_req.till",unenc_authdata:846,2,1,"c.krb5_kdc_req.unenc_authdata"},krb5_keyblock:{contents:848,2,1,"c.krb5_keyblock.contents",enctype:848,2,1,"c.krb5_keyblock.enctype",length:848,2,1,"c.krb5_keyblock.length",magic:848,2,1,"c.krb5_keyblock.magic"},krb5_keytab_entry:{key:850,2,1,"c.krb5_keytab_entry.key",magic:850,2,1,"c.krb5_keytab_entry.magic",principal:850,2,1,"c.krb5_keytab_entry.principal",timestamp:850,2,1,"c.krb5_keytab_entry.timestamp",vno:850,2,1,"c.krb5_keytab_entry.vno"},krb5_last_req_entry:{lr_type:854,2,1,"c.krb5_last_req_entry.lr_type",magic:854,2,1,"c.krb5_last_req_entry.magic",value:854,2,1,"c.krb5_last_req_entry.value"},krb5_pa_data:{contents:859,2,1,"c.krb5_pa_data.contents",length:859,2,1,"c.krb5_pa_data.length",magic:859,2,1,"c.krb5_pa_data.magic",pa_type:859,2,1,"c.krb5_pa_data.pa_type"},krb5_pa_pac_req:{include_pac:860,2,1,"c.krb5_pa_pac_req.include_pac"},krb5_pa_server_referral_data:{referral_valid_until:861,2,1,"c.krb5_pa_server_referral_data.referral_valid_until",referred_realm:861,2,1,"c.krb5_pa_server_referral_data.referred_realm",rep_cksum:861,2,1,"c.krb5_pa_server_referral_data.rep_cksum",requested_principal_name:861,2,1,"c.krb5_pa_server_referral_data.requested_principal_name",true_principal_name:861,2,1,"c.krb5_pa_server_referral_data.true_principal_name"},krb5_pa_svr_referral_data:{principal:862,2,1,"c.krb5_pa_svr_referral_data.principal"},krb5_principal:{data:868,2,1,"c.krb5_principal.data",length:868,2,1,"c.krb5_principal.length",magic:868,2,1,"c.krb5_principal.magic",realm:868,2,1,"c.krb5_principal.realm",type:868,2,1,"c.krb5_principal.type"},krb5_principal_data:{data:869,2,1,"c.krb5_principal_data.data",length:869,2,1,"c.krb5_principal_data.length",magic:869,2,1,"c.krb5_principal_data.magic",realm:869,2,1,"c.krb5_principal_data.realm",type:869,2,1,"c.krb5_principal_data.type"},krb5_prompt:{hidden:870,2,1,"c.krb5_prompt.hidden",prompt:870,2,1,"c.krb5_prompt.prompt",reply:870,2,1,"c.krb5_prompt.reply"},krb5_pwd_data:{element:873,2,1,"c.krb5_pwd_data.element",magic:873,2,1,"c.krb5_pwd_data.magic",sequence_count:873,2,1,"c.krb5_pwd_data.sequence_count"},krb5_replay_data:{seq:875,2,1,"c.krb5_replay_data.seq",timestamp:875,2,1,"c.krb5_replay_data.timestamp",usec:875,2,1,"c.krb5_replay_data.usec"},krb5_responder_otp_challenge:{service:878,2,1,"c.krb5_responder_otp_challenge.service",tokeninfo:878,2,1,"c.krb5_responder_otp_challenge.tokeninfo"},krb5_responder_otp_tokeninfo:{alg_id:879,2,1,"c.krb5_responder_otp_tokeninfo.alg_id",challenge:879,2,1,"c.krb5_responder_otp_tokeninfo.challenge",flags:879,2,1,"c.krb5_responder_otp_tokeninfo.flags",format:879,2,1,"c.krb5_responder_otp_tokeninfo.format",length:879,2,1,"c.krb5_responder_otp_tokeninfo.length",token_id:879,2,1,"c.krb5_responder_otp_tokeninfo.token_id",vendor:879,2,1,"c.krb5_responder_otp_tokeninfo.vendor"},krb5_responder_pkinit_challenge:{identities:880,2,1,"c.krb5_responder_pkinit_challenge.identities"},krb5_responder_pkinit_identity:{identity:881,2,1,"c.krb5_responder_pkinit_identity.identity",token_flags:881,2,1,"c.krb5_responder_pkinit_identity.token_flags"},krb5_response:{expected_nonce:882,2,1,"c.krb5_response.expected_nonce",magic:882,2,1,"c.krb5_response.magic",message_type:882,2,1,"c.krb5_response.message_type",request_time:882,2,1,"c.krb5_response.request_time",response:882,2,1,"c.krb5_response.response"},krb5_ticket:{enc_part2:883,2,1,"c.krb5_ticket.enc_part2",enc_part:883,2,1,"c.krb5_ticket.enc_part",magic:883,2,1,"c.krb5_ticket.magic",server:883,2,1,"c.krb5_ticket.server"},krb5_ticket_times:{authtime:884,2,1,"c.krb5_ticket_times.authtime",endtime:884,2,1,"c.krb5_ticket_times.endtime",renew_till:884,2,1,"c.krb5_ticket_times.renew_till",starttime:884,2,1,"c.krb5_ticket_times.starttime"},krb5_tkt_authent:{ap_options:886,2,1,"c.krb5_tkt_authent.ap_options",authenticator:886,2,1,"c.krb5_tkt_authent.authenticator",magic:886,2,1,"c.krb5_tkt_authent.magic",ticket:886,2,1,"c.krb5_tkt_authent.ticket"},krb5_trace_info:{message:889,2,1,"c.krb5_trace_info.message"},krb5_transited:{magic:890,2,1,"c.krb5_transited.magic",tr_contents:890,2,1,"c.krb5_transited.tr_contents",tr_type:890,2,1,"c.krb5_transited.tr_type"},krb5_typed_data:{data:891,2,1,"c.krb5_typed_data.data",length:891,2,1,"c.krb5_typed_data.length",magic:891,2,1,"c.krb5_typed_data.magic",type:891,2,1,"c.krb5_typed_data.type"},krb5_verify_init_creds_opt:{ap_req_nofail:894,2,1,"c.krb5_verify_init_creds_opt.ap_req_nofail",flags:894,2,1,"c.krb5_verify_init_creds_opt.flags"},passwd_phrase_element:{magic:895,2,1,"c.passwd_phrase_element.magic",passwd:895,2,1,"c.passwd_phrase_element.passwd",phrase:895,2,1,"c.passwd_phrase_element.phrase"}},objnames:{"0":"c","function","C function","1":"c","type","C type","2":"c","member","C member","3":"py","data","Python data"},objtypes:{"0":"c:function","1":"c:type","2":"c:member","3":"py:data"},terms:{"05pm":898,"0x0000":478,"0x00000001":440,498,522,523,752,755,"0x00000002":436,494,525,529,749,754,"0x00000004":521,524,747,"0x00000008":488,526,528,753,"0x00000010":21,496,527,748,"0x00000020":487,530,746,"0x00000040":751,"0x00000080":745,"0x00000100":750,"0x00000200":756,"0x00008000":497,772,"0x0001":444,471,544,562,726,729,762,"0x00010000":485,773,"0x0002":425,454,472,560,725,728,"0x00020000":486,"0x0003":455,473,"0x0004":445,474,557,730,"0x00040000":780,"0x0005":423,469,"0x0006":431,468,"0x0007":428,456,"0x0008":457,475,559,731,"0x00080000":786,"0x0009":453,476,"0x000a":477,"0x000b":482,"0x000c":449,479,"0x000d":480,"0x000e":458,481,"0x000f":447,467,"0x0010":424,448,470,556,"0x00100000":776,"0x0011":442,459,"0x0012":443,461,"0x0013":450,460,"0x0014":430,451,462,"0x0017":463,"0x0018":426,464,"0x0019":465,"0x001a":466,"0x0020":552,"0x00200000":782,"0x0040":558,"0x00400000":777,"0x0080":561,"0x00800000":495,785,"0x0100":422,555,"0x01000000":778,"0x0101":427,"0x01ff":483,"0x0200":554,"0x02000000":491,781,"0x0400":553,"0x04000000":484,779,"0x08000000":493,784,"0x1":564,565,713,717,721,761,"0x10":712,"0x10000000":492,783,"0x1fff":433,"0x2":563,714,716,719,"0x2000":434,"0x20000000":437,490,742,775,"0x3":720,"0x4":710,715,722,"0x4000":432,"0x40000000":439,489,743,774,"0x54800000":499,"0x7fff":764,768,"0x8":711,"0x8000":429,435,765,767,"0x80000000":438,744,"0xfffffff0":441,"10d":898,"12h":20,34,"1foo":21,"30m":898,"3de":14,"3h30m":939,"4gb":918,"5h30m":942,"76cho3000":919,"8h30":898,"abstract":920,922,928,929,931,935,"boolean":6,20,23,36,48,55,870,894,"break":32,902,"byte":20,43,46,48,99,104,287,311,910,911,912,914,915,924,"case":2,3,6,11,14,19,20,21,23,24,28,38,39,43,46,195,245,280,325,330,350,359,375,389,416,706,897,898,900,919,922,923,924,927,931,932,944,946,951,953,"char":43,46,49,50,56,59,60,91,92,93,94,107,136,141,143,144,146,149,152,155,156,160,166,169,170,187,192,193,194,210,213,214,219,222,223,227,228,230,231,233,235,247,252,260,264,267,277,278,306,311,312,317,319,329,336,344,345,346,352,361,363,365,366,369,372,373,374,375,377,379,382,383,384,387,389,390,391,392,394,395,397,398,406,407,408,409,417,418,419,420,803,829,841,870,872,878,879,881,889,934,"class":3,23,944,"const":43,49,52,53,54,58,59,60,91,92,93,94,99,100,101,102,103,106,107,108,113,114,117,119,120,125,126,129,130,136,141,144,146,149,152,155,156,160,166,169,172,173,174,175,177,178,180,181,183,184,185,188,189,194,195,197,213,214,223,228,231,232,233,234,235,247,252,260,264,265,267,277,278,281,284,286,287,288,289,290,294,298,299,300,301,312,317,319,320,322,324,326,329,331,333,336,339,340,341,342,343,344,345,346,351,352,353,355,356,357,358,359,360,361,365,366,369,372,373,376,377,378,379,382,383,384,387,389,393,405,412,413,417,418,419,420,792,820,821,865,866,872,888,889,934,"default":2,3,4,5,6,7,8,10,11,12,15,19,20,21,22,23,24,26,29,30,32,33,34,35,37,38,39,40,41,43,44,46,48,59,60,78,132,147,148,154,223,229,243,253,265,269,275,278,315,317,345,359,375,383,414,712,898,905,906,907,908,910,918,923,924,925,939,941,942,943,945,946,947,948,952,953,"export":20,34,918,919,923,924,933,934,"final":19,21,112,158,904,911,915,"function":3,6,14,25,29,34,35,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,99,100,101,102,103,104,105,107,113,114,116,117,119,124,125,126,129,130,133,136,137,139,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,245,246,252,254,258,260,261,262,264,265,266,267,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,310,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,368,371,373,376,378,382,383,385,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,856,865,866,870,872,877,903,904,918,919,922,923,924,927,930,931,933,934,"goto":46,"h\u00f6gskola":919,"import":5,6,14,15,17,19,21,23,34,35,918,924,938,"int":43,51,53,56,59,62,91,92,93,94,97,111,116,120,122,166,223,241,242,243,244,249,254,255,279,306,311,345,350,352,361,382,383,404,407,408,409,416,805,811,814,818,829,840,846,848,853,857,859,870,872,873,891,894,923,"long":3,14,15,23,25,26,37,38,39,41,43,99,287,365,366,739,766,897,900,918,919,922,931,934,948,"new":2,3,6,14,20,21,23,24,26,34,35,37,41,43,48,87,89,129,132,138,143,154,160,163,165,166,167,169,172,173,174,175,176,177,178,180,182,183,192,194,195,211,219,229,235,243,245,246,250,253,257,260,262,269,275,280,298,300,301,303,307,313,327,330,336,338,343,344,345,359,365,366,367,368,369,370,371,372,373,380,381,382,383,386,387,399,400,401,402,403,404,407,719,720,897,901,915,918,919,923,924,927,928,931,938,939,942,944,953,"null":19,20,21,43,44,46,48,54,64,92,99,100,102,103,107,113,129,136,141,154,155,156,164,173,195,198,200,203,209,220,223,224,228,230,231,235,240,260,264,267,269,273,275,287,288,289,290,294,298,300,301,315,322,323,325,326,329,330,331,332,336,342,343,344,354,356,359,360,361,363,364,365,366,369,372,375,377,380,381,382,383,386,388,389,397,407,408,409,412,414,793,918,923,932,934,953,"public":21,40,919,927,928,929,930,"return":3,9,12,20,21,22,38,43,46,48,50,52,54,56,57,59,60,69,74,91,92,93,100,103,109,110,119,127,128,133,135,137,141,142,144,145,146,147,148,149,151,152,153,154,155,156,159,161,169,176,189,192,214,223,224,227,228,229,231,235,260,262,263,264,267,268,271,279,282,283,284,288,290,301,302,303,305,306,308,310,311,314,315,316,317,318,320,323,325,330,344,345,352,355,361,365,366,368,371,375,377,378,380,382,383,384,386,388,389,396,398,400,404,406,407,408,409,410,412,414,416,731,865,866,906,918,920,921,922,923,924,925,928,929,931,932,933,934,935,942,946,"short":14,19,21,41,306,900,"static":46,923,934,"switch":14,28,31,43,48,161,897,"true":9,14,20,21,22,23,24,25,26,33,35,36,37,38,40,41,43,52,54,105,109,110,127,128,160,192,245,283,284,285,300,319,343,348,349,350,362,388,416,813,826,860,952,"try":21,25,32,35,38,39,41,43,906,918,938,946,"var":5,8,20,21,23,34,37,901,906,907,917,953,"void":43,46,57,58,59,60,63,80,171,179,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,215,216,218,219,220,221,222,237,239,240,241,242,243,244,245,249,254,255,256,257,258,259,260,270,275,285,291,297,334,339,346,352,367,370,379,380,381,386,399,415,416,417,418,419,420,820,838,856,864,865,866,872,877,888,933,934,"while":3,12,14,15,16,20,21,23,24,34,35,43,46,897,904,923,938,939,946,953,AES:14,15,20,25,906,918,919,AFS:14,AND:919,ARE:919,Added:21,918,948,Adding:17,910,Are:3,23,BUT:919,But:901,CCS:919,CMS:467,476,477,479,480,481,482,918,CTS:14,20,918,DES:13,20,26,41,467,918,DNS:21,25,30,33,34,39,44,333,663,906,918,DNs:5,22,Dis:19,Doing:905,FOR:919,For:3,10,14,16,17,18,19,20,21,22,23,24,26,28,32,33,34,35,36,37,38,39,43,46,99,100,103,142,287,288,290,738,896,897,901,904,905,906,910,911,915,916,917,918,920,921,922,923,924,925,927,928,929,930,931,932,933,934,935,936,938,939,942,945,946,951,953,HAS:919,His:19,ITS:42,919,Its:20,21,910,NFS:938,NOT:5,34,919,Not:20,21,44,51,151,614,897,ONE:5,ORed:151,One:3,20,23,34,36,38,43,342,897,898,938,939,952,SUCH:919,Such:14,37,39,46,TGS:3,20,21,25,26,35,48,224,300,403,759,860,910,918,930,THAT:919,THE:919,TLS:22,29,That:21,904,The:0,3,4,5,6,7,8,9,10,11,12,15,19,20,21,22,23,24,25,26,28,29,31,33,34,35,37,38,39,40,41,43,46,53,62,69,71,74,78,80,91,93,99,100,102,103,113,117,119,121,125,126,129,135,136,138,144,146,148,153,165,166,173,176,189,198,200,217,220,224,228,229,245,248,252,262,268,274,282,286,287,288,289,290,294,296,298,300,305,307,312,315,320,321,322,325,326,331,333,344,345,346,354,356,359,360,365,366,367,368,369,370,371,372,373,376,380,381,382,383,389,398,402,403,405,406,407,408,412,414,420,618,730,738,740,745,746,749,750,752,756,807,813,827,837,850,865,866,870,876,883,896,897,898,900,901,902,903,904,905,906,907,908,910,911,912,914,915,917,918,919,920,921,922,923,924,925,927,928,929,930,931,932,933,934,935,936,938,939,941,942,944,946,948,950,951,952,953,Then:3,6,17,24,34,942,There:20,21,23,34,35,897,904,906,907,910,914,939,These:14,16,20,21,23,26,34,35,37,39,43,733,904,910,918,919,922,924,927,951,953,UCS:918,USE:919,Use:3,22,46,49,65,66,67,68,72,73,76,77,78,83,92,111,115,132,141,143,145,150,153,154,163,164,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,230,231,236,239,261,265,269,272,275,280,286,309,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,340,341,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,439,563,564,837,847,904,906,918,927,941,946,948,Used:447,448,598,599,837,896,946,Uses:2,3,21,Using:3,6,14,25,40,938,WILL:919,WITH:919,With:0,3,6,22,23,39,952,_kerbero:39,_kpasswd:39,_krb5_address:805,_krb5_ap_rep:807,808,_krb5_ap_rep_enc_part:808,_krb5_ap_req:809,_krb5_auth_context:810,_krb5_authdata:811,_krb5_authent:813,_krb5_ccach:816,_krb5_cccol_cursor:817,_krb5_checksum:818,_krb5_context:135,156,822,_krb5_cred:823,826,_krb5_cred_enc_part:824,_krb5_cred_info:825,_krb5_crypto_iov:827,_krb5_data:829,_krb5_enc_data:831,_krb5_enc_kdc_rep_part:832,_krb5_enc_tkt_part:833,_krb5_encrypt_block:834,_krb5_error:836,_krb5_get_init_cr:840,_krb5_get_init_creds_opt:840,_krb5_gic_opt_pa_data:841,_krb5_init_creds_context:842,_krb5_kdc_rep:845,_krb5_kdc_req:846,_krb5_keyblock:848,_krb5_kt:849,_krb5_last_req_entri:854,_krb5_pa_data:859,_krb5_pa_pac_req:860,_krb5_pa_server_referral_data:861,_krb5_pa_svr_referral_data:862,_krb5_prompt:870,_krb5_pwd_data:873,_krb5_responder_otp_challeng:878,_krb5_responder_otp_tokeninfo:879,_krb5_responder_pkinit_challeng:880,_krb5_responder_pkinit_ident:881,_krb5_respons:882,_krb5_ticket:883,_krb5_ticket_tim:884,_krb5_tkt_authent:886,_krb5_tkt_creds_context:887,_krb5_trace_info:889,_krb5_transit:890,_krb5_typed_data:891,_krb5_verify_init_creds_opt:894,_passwd_phrase_el:895,_profile_t:262,269,_tcp:39,_udp:39,abbrevi:904,943,abc:906,953,abi:885,abil:14,368,371,952,abl:15,16,19,20,21,23,25,29,34,35,39,897,902,938,939,946,abort:802,803,933,about:0,14,19,20,22,23,26,31,39,41,43,46,251,901,904,906,908,918,919,922,931,936,939,942,953,abov:6,14,19,21,22,23,25,26,32,34,37,41,43,46,901,906,910,919,923,924,925,939,946,absenc:20,46,absent:942,absolut:20,21,896,900,904,ac02:919,acceler:919,accept:3,4,8,14,15,16,20,21,26,34,38,39,41,151,389,898,900,904,918,919,920,924,933,934,939,942,acceptor:8,918,943,acceptor_cred_handl:43,access:3,4,8,9,14,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,37,39,43,46,897,902,904,912,915,918,922,927,928,930,931,932,937,939,945,946,951,952,accident:918,accommod:46,901,accomplish:23,26,accord:3,19,21,36,38,43,154,167,910,911,917,924,946,948,account:20,21,24,25,28,30,48,56,245,336,897,918,932,937,942,946,950,952,account_expir:245,838,acknowledg:919,acl:3,4,8,18,20,21,22,23,31,917,acl_fil:4,8,19,20,34,acquir:3,6,8,43,48,245,274,402,548,910,918,924,948,acquisit:43,403,across:17,20,21,34,43,928,929,930,938,act:10,19,21,26,901,918,action:4,6,14,901,919,929,activ:3,6,8,14,21,23,25,37,40,169,941,actor:19,actual:6,14,23,26,35,46,98,99,100,102,103,113,129,287,288,289,290,294,298,901,939,actual_mech:43,ad_kdcissu:320,412,ad_typ:195,811,910,ad_type_extern:789,ad_type_field_type_mask:789,ad_type_regist:789,ad_type_reserv:789,add:3,6,9,11,12,14,15,19,20,21,22,23,31,33,36,38,48,300,343,712,898,918,939,add_auth_ind:918,931,add_mkei:14,23,add_polici:23,add_princip:5,14,23,25,37,add_rel:934,added:3,6,14,15,20,23,24,25,26,32,34,38,40,302,740,897,918,921,addent:11,918,adding:3,8,32,41,918,addit:3,18,19,20,21,22,26,29,34,37,38,39,40,43,46,48,301,363,364,414,836,897,901,904,906,908,909,918,919,922,931,936,942,946,953,addition:10,21,36,930,939,addpol:3,23,35,addprinc:3,23,34,37,898,928,addr1:52,53,addr2:52,53,addr:54,232,233,234,332,825,826,832,address1:910,address2:910,address:0,15,20,21,23,24,30,33,38,39,44,48,260,325,326,331,356,359,360,523,524,525,526,805,824,826,833,846,906,910,918,933,939,942,943,address_list:840,addresssanit:918,addrlist:54,addrtyp:429,805,910,addrtype_addrport:789,addrtype_chao:789,addrtype_ddp:789,addrtype_inet6:789,addrtype_inet:789,addrtype_ipport:789,addrtype_is_loc:789,addrtype_iso:789,addrtype_netbio:789,addrtype_xn:789,adjust:14,29,33,34,37,48,100,103,288,290,410,adm:20,22,39,admcil:19,admcilsp:19,admin:3,4,5,8,14,15,16,19,21,22,23,26,32,34,897,906,917,918,928,946,953,admin_serv:3,8,20,21,34,39,adminhost:3,administ:4,15,34,administr:0,2,3,4,5,6,11,14,15,16,18,19,20,21,22,24,25,26,31,32,35,36,38,897,903,916,917,918,919,929,936,938,942,952,953,adminjohndoefoo:21,adtyp:811,advanc:14,30,150,314,918,936,advantag:14,21,26,32,advertis:21,918,919,advic:31,advis:14,919,aead:48,aes128:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,aes256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,aes:3,20,919,aesni:906,919,af_unspec:933,affect:4,19,20,21,26,28,40,126,133,229,918,942,953,afford:32,afs3:14,after:2,3,4,6,10,12,14,21,23,24,25,33,34,35,37,80,98,136,228,272,380,401,885,896,897,902,904,910,911,914,915,918,938,939,946,953,afterward:23,929,again:14,28,33,34,720,901,918,924,938,939,against:2,14,20,21,25,28,34,39,40,46,48,129,298,342,356,359,360,363,412,901,906,918,921,924,945,951,agent:20,agre:919,agreement:919,aklog:55,alexand:919,alg_id:879,algid:738,algorithm:14,26,126,915,918,919,946,alia:3,11,43,48,144,146,312,365,366,alias:3,11,15,22,38,39,918,alic:11,23,28,951,952,all:0,2,3,6,9,14,15,17,18,19,20,21,23,24,25,26,28,29,32,33,34,35,37,38,43,46,48,153,163,164,282,342,359,414,747,748,753,817,827,897,898,901,904,905,909,910,915,918,919,930,932,939,941,943,944,945,946,948,951,953,alloc:43,46,48,61,78,93,98,99,100,102,103,107,115,117,119,121,124,148,280,287,288,289,290,296,355,357,407,827,870,921,923,925,928,932,allow:2,3,4,5,6,8,10,12,14,15,16,17,18,19,20,21,23,24,26,28,29,32,33,34,35,36,37,38,40,41,43,46,48,111,252,279,359,404,407,898,900,902,904,906,908,911,918,919,920,921,922,924,925,926,927,928,929,930,931,932,933,934,935,938,939,942,945,952,allow_des3:21,26,918,allow_dup_skei:3,allow_forward:3,5,allow_postd:3,5,allow_proxi:3,allow_rc4:21,26,918,allow_renew:3,allow_svr:3,23,25,35,40,allow_tgs_req:3,allow_tix:3,allow_weak_crypto:14,21,26,41,48,allowedkeysalt:3,almeida:919,alon:34,923,along:0,36,827,897,906,924,alongsid:34,alphabet:898,alphanumer:21,alreadi:6,14,22,34,36,43,124,333,897,904,906,908,942,946,948,also:15,17,18,22,23,24,25,26,28,29,32,33,34,35,37,38,39,40,43,46,126,342,403,896,897,900,906,908,910,918,919,921,922,924,925,927,928,930,932,934,935,939,alter:14,37,altern:8,15,20,21,22,24,28,34,37,43,500,904,906,917,918,919,942,although:39,900,919,925,935,938,939,altogeth:20,alwai:14,15,20,21,23,24,39,44,51,55,61,63,66,68,71,80,83,139,142,155,365,716,910,914,918,america:919,among:46,amount:20,21,35,39,102,119,121,289,361,905,an2ln:21,932,an2ln_typ:932,analog:15,anam:56,946,anchor:20,21,942,andrea:919,andrew:5,ani:0,3,6,8,9,10,14,15,16,17,19,20,21,23,24,25,26,28,32,34,36,37,38,39,40,41,43,46,48,56,137,147,153,154,156,224,260,268,275,278,279,310,315,359,363,364,404,414,740,837,897,901,902,910,911,915,918,919,920,924,925,932,938,939,942,943,946,952,ank:3,anl:21,annot:16,23,36,918,anonym:3,20,25,28,43,48,501,502,918,939,942,943,anoth:15,17,21,24,32,41,48,101,171,826,897,901,906,910,921,922,928,932,933,939,953,ansi:905,answer:21,46,48,366,731,738,740,876,924,anticip:33,39,anyon:938,952,anyth:21,37,anywai:20,39,46,330,anywher:938,953,ap_opt:329,330,375,809,886,ap_opts_etype_negoti:789,ap_opts_mutual_requir:330,359,375,789,ap_opts_reserv:789,ap_opts_use_session_kei:330,789,ap_opts_use_subkei:330,789,ap_opts_wire_mask:789,ap_req_authdata:195,ap_req_nofail:416,894,ap_req_opt:329,330,359,375,api:0,14,41,43,45,98,100,103,186,188,190,191,196,197,245,250,251,262,281,288,290,351,353,411,740,827,847,897,903,906,918,920,924,931,appdata:21,901,appdefault:48,appear:14,20,21,24,34,37,39,41,46,910,919,923,append:3,20,23,38,387,900,906,915,appl:903,919,appl_vers:363,375,appli:3,10,14,18,19,20,21,23,24,35,41,43,171,919,928,931,939,942,946,950,applic:0,12,16,18,20,21,28,30,31,37,43,46,48,59,60,156,250,329,330,331,363,375,504,528,529,718,741,896,897,900,901,903,906,916,918,919,922,924,927,932,934,938,939,945,949,952,appnam:59,60,approach:43,appropri:6,14,21,23,24,28,29,34,37,39,43,46,154,373,398,920,930,931,942,943,946,approxim:905,918,apputil:903,aprepencpart:807,arbitrari:3,43,arcfour:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,architectur:904,906,archiv:42,905,area:34,46,arg:3,417,418,419,802,803,906,946,arg_keytab:232,235,argument:3,4,6,8,10,14,20,44,46,48,63,80,91,93,245,257,260,263,275,325,326,331,352,354,356,360,386,417,418,419,889,906,918,923,924,932,946,948,argv_pars:919,ari:946,aris:919,armor:20,37,48,229,922,931,942,armor_ccach:942,around:23,906,arrai:3,36,43,46,48,100,103,111,173,240,244,254,288,290,322,332,352,354,821,825,827,832,833,846,868,869,932,934,arrang:23,arriv:901,asan:906,918,asc:905,ascii:6,23,39,910,ask:6,37,39,46,48,738,739,740,922,938,939,942,946,asn:48,911,912,921,aspect:15,28,927,assert:20,43,910,918,924,931,assign:3,19,20,34,39,48,82,84,946,associ:3,4,9,19,20,21,23,35,38,43,537,897,901,910,919,953,assum:14,21,26,34,36,39,43,44,107,124,155,905,918,939,942,953,assumpt:26,asynchron:403,931,athena:3,5,14,15,19,20,21,23,24,28,32,34,906,919,934,938,939,953,athent:260,atom:918,attach:918,attack:2,14,21,23,29,30,32,35,40,46,325,326,331,901,918,942,attempt:0,3,6,20,21,24,29,35,39,43,243,250,414,910,918,946,attr:252,841,attribut:3,5,6,9,16,19,20,21,22,23,24,26,36,37,48,253,650,841,918,919,921,924,931,942,946,audit:918,aug:3,augment:924,august:919,auth:16,20,39,43,48,61,329,330,359,363,364,375,504,811,825,833,auth_context:61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375,auth_gssapi:3,auth_to_loc:21,28,932,auth_to_local_nam:21,28,authdata1:910,authdata2:910,authdata:184,189,224,320,322,412,826,910,918,926,942,943,authdata_plugin:927,authdatum:412,authent:3,5,6,10,12,14,15,20,21,22,24,25,26,29,30,32,34,35,36,37,38,39,40,43,44,46,48,61,62,63,64,66,67,68,69,71,72,73,74,76,77,79,80,81,82,83,84,85,86,87,88,89,90,166,201,223,224,250,322,323,325,326,327,328,329,330,331,336,342,354,356,357,358,359,360,375,437,500,506,615,738,807,809,813,859,876,886,897,900,901,902,903,910,911,915,918,919,921,931,932,939,942,943,949,953,authfrom:174,author:3,19,20,21,48,153,224,253,300,614,746,826,863,918,919,926,941,authoriaz:813,authorit:19,21,154,920,925,928,932,933,authoritykeyidentifi:37,authorization_data:813,833,846,authtim:340,341,342,343,884,910,authtime_out:336,authto:174,authz:846,auto:918,autoconf:903,autodoc:908,autohead:904,autolock:919,autom:904,918,automak:923,automat:3,4,6,8,15,17,23,34,897,900,902,904,915,918,939,941,946,autoreconf:904,avail:3,6,11,12,14,20,21,23,29,34,38,43,46,56,170,187,192,193,227,252,306,310,315,361,368,371,374,398,416,563,823,845,883,897,904,915,920,926,941,943,947,953,avoid:3,14,19,24,38,46,245,906,918,939,awai:14,41,938,939,awar:910,awk:6,back:19,20,23,24,30,39,40,897,906,911,918,924,927,backend:14,906,918,919,background:4,8,10,34,backslash:344,backspac:344,backup:23,30,32,39,902,backward:8,20,21,24,26,34,948,bad:34,135,156,balanc:14,38,39,banner:46,352,872,bar:6,21,basch:919,base:0,3,20,21,22,23,24,25,26,34,37,38,39,43,46,49,59,60,62,91,93,98,117,296,344,388,897,901,908,917,918,919,922,927,931,935,939,942,951,basi:14,18,23,39,basic:934,basicconstraint:37,baz:21,bb463167:42,becaus:6,17,19,20,21,23,24,25,35,37,38,39,41,43,46,251,342,897,904,906,910,914,929,931,934,938,942,952,becom:0,6,14,17,21,23,34,39,136,235,260,275,897,918,938,942,946,beeblebrox:34,been:6,12,14,20,21,23,26,35,124,897,901,915,918,919,924,927,939,943,950,953,beep:939,941,befor:2,3,4,5,6,14,15,20,21,22,23,26,35,37,39,41,44,98,100,103,155,288,290,381,389,827,870,898,901,902,904,919,922,929,931,939,942,beforehand:43,began:14,begin:4,6,15,21,23,28,36,43,91,93,99,100,102,103,203,209,287,288,289,290,344,403,910,921,924,925,934,951,behalf:948,behav:3,43,407,416,896,906,behavior:3,14,20,21,28,39,46,228,414,416,918,923,926,927,932,941,945,950,behind:14,28,being:3,14,20,21,23,29,39,44,46,245,372,740,901,908,951,belong:33,161,below:6,20,21,23,28,36,43,740,903,919,946,benefit:39,berkelei:906,919,besid:15,21,best:14,25,34,38,beta:6,better:23,24,847,918,between:3,9,20,21,23,25,26,29,34,35,41,45,136,158,385,885,897,918,932,939,941,942,beyond:915,922,927,931,953,big:910,911,912,914,924,biggest:14,bin:34,904,906,908,917,946,binari:21,32,906,919,bind:3,5,20,21,22,39,918,945,bind_dn:3,binddn:3,bindir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,bindpwd:3,bison:906,bit:14,20,24,37,46,66,83,142,153,157,359,885,896,910,914,918,921,946,bitwis:151,740,bjaspan:3,blank:951,bleep:3,11,939,952,953,block:14,20,24,48,99,100,102,103,287,288,289,290,918,blocksiz:95,bob:946,952,bodi:846,931,book:15,boot:34,902,bootstrap:21,borrow:939,boston:39,both:3,12,21,22,23,24,26,28,29,36,37,39,40,43,159,245,251,904,918,919,923,946,bourn:34,box:36,brace:21,923,bracket:20,21,28,breviti:911,brian:919,bridg:918,brief:32,903,927,broken:14,906,brother:919,brute:14,23,35,bsd:918,919,btree:6,buffer:3,23,43,48,56,98,99,119,170,187,192,193,279,287,300,301,306,331,336,339,374,397,398,404,407,409,538,827,918,924,buflen:170,187,192,193,374,397,398,bug:0,23,42,903,904,936,build:34,39,41,48,49,136,897,903,906,916,917,918,923,927,945,built:21,24,28,46,48,378,897,904,906,918,924,934,939,945,builtin:906,918,919,bundl:21,919,bunni:39,busi:919,byacc:906,c89:905,cacert:29,37,cach:3,14,15,21,23,28,43,44,48,78,138,140,223,224,229,247,264,267,323,325,326,329,331,356,359,360,375,403,414,522,545,549,755,899,903,906,907,913,917,918,926,939,941,942,943,945,946,947,948,951,953,cache_nam:3,941,942,943,cache_out:132,154,cacheconf:910,cachenam:897,947,cachetyp:918,cacreateseri:37,caddr:825,832,833,cakei:37,california:919,call:14,16,20,21,23,24,28,34,43,46,91,93,100,103,113,120,122,123,125,126,136,156,158,176,228,245,251,261,268,275,279,282,288,290,294,301,308,317,323,380,381,404,827,870,877,896,897,903,904,918,922,923,924,929,931,932,938,946,callback:48,260,275,352,380,381,387,856,870,872,876,918,922,931,933,caller:43,46,71,85,99,100,102,103,117,119,121,136,144,146,245,252,269,279,287,288,289,290,296,301,312,314,330,361,365,366,404,414,827,896,918,925,931,934,camellia128:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,camellia256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,camellia:20,918,can:0,2,3,4,5,6,8,9,10,11,14,15,16,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,36,37,38,39,40,41,43,46,50,56,136,138,154,224,254,271,301,307,331,342,344,366,386,389,400,403,414,416,737,865,866,876,884,896,897,898,900,901,904,905,906,908,910,911,918,920,921,922,923,924,925,927,928,929,930,931,932,933,935,938,939,942,946,950,953,candid:915,946,cannot:3,23,24,25,35,37,43,46,91,93,135,151,260,344,414,885,910,939,942,943,948,canon:4,15,22,23,38,39,192,300,928,932,canonhost_out:194,canonic:15,21,22,33,43,48,301,389,546,918,942,948,capabl:32,918,938,capac:25,capath:20,card:3,20,21,918,care:3,14,19,28,43,927,carefulli:37,carnegi:919,carri:3,25,953,cartoon:34,casio:14,cast:885,896,920,922,923,928,929,930,931,933,935,cat:6,categori:25,caus:3,4,6,14,20,21,24,25,26,34,35,37,38,39,40,43,48,245,247,388,736,897,901,906,918,919,943,947,caution:3,cb_data:386,888,cb_ret:934,cbc:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,cbdata:934,cbrown:953,cc246071:918,cc246091:918,ccach:3,23,41,43,48,132,135,164,224,225,226,232,233,234,246,250,251,264,267,321,329,375,383,403,405,414,817,906,917,920,944,948,ccache_typ:21,ccachenam:906,ccapi:903,919,ccselect:28,918,923,926,933,ccselect_plugin:920,923,ceas:0,6,cell:14,center:10,903,919,953,central:0,cert:16,21,37,cert_fil:948,certain:23,32,236,906,919,948,953,certauth:918,926,certauth_plugin:921,certid:21,certif:3,20,21,29,40,43,48,253,695,912,918,926,948,953,certifi:21,certlabel:21,cf2:48,cflag:906,945,cfr:919,chain:20,21,918,challeng:20,21,40,46,48,366,367,368,370,371,697,700,738,739,876,879,911,918,chang:2,3,6,9,14,15,19,20,21,22,24,25,26,28,33,34,37,39,46,48,78,136,158,245,260,382,383,620,719,896,904,908,910,917,918,919,927,929,935,937,944,946,952,change_password:23,26,change_password_for:382,383,changeov:34,changepw:3,14,23,26,166,245,300,301,382,channel:14,21,36,43,46,325,918,946,charact:3,19,20,21,23,34,38,39,344,397,408,715,944,charg:919,chat:936,check:12,20,21,23,26,28,34,37,43,48,59,60,153,283,356,359,360,550,904,906,908,914,923,934,935,939,943,946,check_a:930,check_tg:930,checkout:908,checksum:3,43,48,104,175,202,203,300,301,329,330,331,333,342,343,532,539,657,659,661,662,666,813,856,912,915,918,924,checksum_typ:818,cheetah:908,chiefli:23,chl:46,367,368,370,chl_out:371,choic:21,38,43,46,250,942,choos:14,22,25,34,38,39,43,902,920,938,942,951,chosen:16,21,22,26,43,46,229,905,911,917,918,920,951,chpass:3,929,chrand:3,chunk:114,295,cipher:14,26,48,99,100,102,103,287,288,289,290,cipher_st:99,100,102,103,287,288,289,290,ciphertext:25,99,100,102,103,104,287,288,289,290,807,831,911,915,circular:23,circumst:20,37,citi:919,ckf_:740,ckfrom:175,cksum:113,129,294,298,413,cksumtyp:81,96,111,113,114,130,170,294,295,299,cksumtype_cmac_camellia128:789,cksumtype_cmac_camellia256:789,cksumtype_crc32:789,cksumtype_descbc:789,cksumtype_hmac_md5_arcfour:789,cksumtype_hmac_sha1_96_aes128:789,cksumtype_hmac_sha1_96_aes256:789,cksumtype_hmac_sha1_des3:789,cksumtype_hmac_sha256_128_aes128:789,cksumtype_hmac_sha384_192_aes256:789,cksumtype_md5_hmac_arcfour:789,cksumtype_nist_sha:789,cksumtype_rsa_md4:789,cksumtype_rsa_md4_d:789,cksumtype_rsa_md5:789,cksumtype_rsa_md5_d:789,cksumtype_sha1:789,cksumtypep:390,ckto:175,claim:651,655,919,clang:918,clarifi:37,clariti:946,clean:23,268,269,386,908,918,934,cleanli:918,cleanup:46,934,clear:3,6,11,15,36,46,48,136,156,377,clearpolici:3,19,cleartext:808,824,832,click:34,client1:37,client2:37,client:3,12,14,16,18,20,21,22,23,25,26,28,31,32,34,35,36,38,39,40,41,43,46,48,145,154,223,224,235,241,242,258,260,264,267,275,276,277,330,333,359,363,403,651,652,740,807,808,813,825,826,833,836,845,846,897,901,903,906,910,911,912,917,918,919,920,921,923,926,928,931,933,939,942,943,945,946,948,951,953,client_aware_channel_bind:21,client_aware_gss_bind:918,client_cert:37,client_kei:918,client_keytab:43,client_princ:46,300,clientauth:21,clientkei:37,clifford:953,clock:21,34,48,267,356,360,898,931,942,clockskew:15,21,359,915,934,942,close:21,32,48,71,85,132,137,138,148,164,167,265,301,307,755,915,929,935,clpreauth:28,926,clpreauth_mymech_initvt:923,clpreauth_plugin:922,cmac:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,cmd_path:946,cname:33,34,38,39,code:0,20,21,23,41,43,46,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,171,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,251,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,730,836,837,865,885,896,903,905,906,918,919,922,923,924,927,929,931,933,934,935,936,coerc:915,coexist:19,collect:21,43,48,132,154,728,729,903,918,920,941,942,943,947,951,953,collis:48,901,colon:5,20,21,28,39,152,344,346,420,953,column:6,com:3,6,9,11,16,20,21,22,23,28,35,37,38,39,41,42,911,912,918,919,938,939,951,952,953,com_err:837,906,918,923,combin:3,8,20,23,26,43,48,254,911,943,come:21,46,359,904,905,938,comma:3,6,10,20,21,command:4,8,9,10,14,15,20,21,22,23,24,26,29,32,34,35,37,41,898,900,903,904,905,906,918,937,938,939,941,944,946,948,953,command_opt:5,6,commenc:34,comment:0,15,21,commerci:21,37,919,commit:9,919,929,common:21,23,25,34,43,906,919,922,938,952,common_appdata:21,commonconfig:21,commonli:8,41,commun:0,21,23,25,29,34,37,43,865,897,903,919,920,936,compani:939,companion:36,compar:47,48,129,298,911,comparison:21,compat:8,20,21,36,43,904,906,918,928,930,948,compil:0,904,905,906,907,918,919,945,946,compile_et:906,complet:5,6,14,20,21,23,39,43,45,158,272,274,359,375,401,402,738,903,906,907,complex:918,compli:919,complic:37,906,compon:19,21,28,37,38,43,46,48,92,93,223,344,345,350,388,645,708,710,763,910,914,918,919,934,939,951,component1:910,914,component2:910,914,compos:37,composit:918,compress:905,compromis:14,17,21,32,897,902,comput:14,20,21,29,43,44,46,48,91,117,129,229,296,298,912,919,922,931,938,939,concaten:731,911,924,concatent:924,concept:916,926,concern:25,35,919,939,concis:934,concret:908,concurr:20,24,condit:37,154,301,918,919,946,conduct:29,conf:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,conf_keyfil:5,conf_req_flag:43,conf_stat:43,confidenti:26,43,918,config:20,21,23,141,155,269,378,903,906,917,918,924,937,940,configur:3,4,5,9,14,16,17,19,20,21,23,24,25,30,31,38,41,43,46,48,50,78,154,167,194,251,261,269,388,414,416,563,564,898,901,903,904,905,907,908,918,923,926,935,939,942,943,946,950,952,953,confirm:2,3,5,6,23,130,299,918,948,conflict:15,28,359,602,603,605,606,924,conform:21,905,918,944,confound:104,confus:919,confusingli:46,confvalid:903,conjunct:948,connect:3,4,5,8,12,20,23,32,34,38,43,48,897,901,918,919,939,consequ:14,consequenti:919,consid:0,14,21,24,33,39,41,342,901,906,910,consider:39,45,consist:21,39,344,900,905,910,911,918,925,932,consol:20,consolid:0,consortium:936,953,constant:46,57,58,727,733,821,constitut:919,constrain:3,333,547,654,918,948,constraint:919,951,construct:0,43,46,277,279,329,404,865,866,918,923,948,consult:21,932,consum:24,896,927,contact:3,7,8,14,20,21,23,29,39,260,897,920,936,949,contain:3,4,5,6,8,9,15,19,20,21,22,23,24,28,29,33,34,37,38,39,41,43,46,48,54,67,72,76,152,154,169,172,173,183,184,195,231,245,247,276,279,300,301,320,330,336,342,344,355,356,357,360,363,365,375,404,414,847,876,889,897,898,900,901,903,904,905,906,907,908,910,911,914,915,919,923,924,933,934,936,938,939,941,942,946,947,948,951,952,953,container_dn:3,container_reference_dn:5,containerdn:3,containerref:5,contempl:919,content:0,6,9,11,12,14,23,27,34,37,43,44,46,48,82,84,124,133,137,147,148,174,175,177,178,180,182,183,198,199,200,201,202,207,208,212,215,221,280,333,334,805,811,818,827,848,859,890,897,910,912,914,919,924,942,943,context:21,41,43,44,46,48,49,50,51,52,53,54,55,56,59,60,61,66,70,75,83,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,172,173,174,175,176,177,178,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,264,265,267,276,277,278,279,280,281,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,367,368,369,370,371,372,375,376,378,379,380,381,382,383,384,385,386,387,388,389,393,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,564,793,794,795,796,797,798,799,800,838,865,866,872,876,888,918,920,922,923,925,931,932,933,context_handl:43,924,contigu:43,continu:2,6,17,34,911,918,919,946,contract:919,contrari:43,46,contribut:101,107,119,916,919,953,contributor:909,919,control:4,14,15,18,19,20,21,22,26,28,34,36,37,38,41,43,46,243,279,404,414,906,907,918,920,925,926,927,930,932,933,934,935,950,convei:14,23,39,43,837,863,918,919,conveni:46,323,368,371,904,convent:39,406,934,convention:953,convers:21,911,convert:14,21,38,43,48,169,258,389,918,951,cooki:599,913,918,931,coordin:924,copi:15,17,23,26,29,32,34,37,41,43,48,86,88,269,272,342,401,902,910,919,927,934,939,946,copyright:903,905,919,953,core:922,927,931,934,936,corpor:919,953,correct:4,10,14,21,23,33,34,41,124,735,897,906,918,919,correctli:12,43,865,866,896,918,938,correspond:6,19,21,37,39,43,44,46,56,152,245,263,342,884,908,911,918,923,924,929,953,corrupt:6,17,918,cost:23,29,906,919,could:0,14,16,17,21,25,28,33,34,35,39,901,918,923,938,939,946,couldn:12,count:3,6,43,48,87,89,111,286,910,914,counter:3,35,countermeasur:32,counterpart:19,33,countri:919,cours:17,courtesan:919,cover:33,cpp:906,cppflag:906,cppopt:906,cpu:40,cpw:3,14,crash:17,21,34,crawdad:919,crawford:919,crc:14,26,creat:3,4,7,12,14,15,19,20,21,22,23,24,26,28,31,32,35,43,47,48,67,72,76,93,113,114,125,126,135,138,172,173,174,175,176,177,178,180,182,183,205,236,262,265,271,294,295,307,308,324,331,345,359,363,364,375,387,400,414,710,897,898,900,904,908,911,915,918,919,920,921,922,924,925,926,928,929,930,931,932,933,934,935,936,938,939,942,create_polici:23,creation:14,21,23,37,911,creativ:919,creativecommon:919,cred:46,48,150,151,153,159,166,232,233,234,235,260,264,267,272,275,321,382,401,403,405,414,531,918,946,cred_handl:43,924,cred_stor:43,cred_usag:43,cred_usage_stor:43,creddata:354,credenti:3,8,12,16,20,21,23,28,33,35,37,45,48,138,166,177,206,207,223,224,229,321,329,333,354,375,402,405,440,549,618,653,747,823,824,825,826,877,896,899,900,901,903,906,913,918,922,924,925,926,931,939,941,942,943,945,946,947,948,951,953,credentials_cach:3,creds_out:354,405,criteria:37,897,critic:46,936,crl:20,21,cron:17,20,34,39,cross:3,20,21,342,343,359,906,910,918,crt:20,21,crypto:14,121,191,903,906,918,919,crypto_entri:834,crypto_test:919,cryptograph:14,43,918,919,cryptographi:14,40,cryptosystem:14,csv:6,918,ctime:808,813,836,cts:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,ctx:43,72,73,76,77,86,87,88,89,171,176,213,228,270,271,272,273,274,275,276,277,278,279,346,365,366,367,368,369,370,371,372,373,379,399,400,401,402,403,404,417,418,419,420,877,ctype:109,110,127,131,168,413,cuba:919,cultur:919,current:2,3,6,8,9,11,14,20,21,22,23,28,39,48,136,179,330,346,356,360,382,440,742,889,897,900,906,910,915,918,922,925,926,931,939,944,951,953,curri:15,curs:906,cursor:48,139,150,158,163,164,314,318,815,817,curv:21,40,cusec:808,813,836,custom:21,908,917,918,921,cut:39,cve:918,cybersaf:540,919,cycl:918,cygnu:664,919,daemon:8,19,20,21,23,31,36,37,38,897,902,918,923,953,daffodil:15,939,dai:3,5,21,23,37,48,396,898,939,953,daili:14,daisi:39,dal:927,damag:897,919,danger:17,946,danilo:919,dash:21,data:3,6,9,14,20,21,22,23,24,26,32,43,44,46,48,63,79,80,98,113,114,117,119,120,121,123,129,130,141,151,153,155,169,178,203,208,212,224,245,253,257,258,260,262,275,294,295,296,298,299,300,323,326,329,330,331,333,335,340,341,352,354,356,359,360,368,371,375,376,380,381,382,383,386,388,393,405,467,479,480,481,537,538,678,722,746,793,794,797,811,813,821,823,826,827,829,832,833,836,838,845,846,856,859,863,865,866,868,869,872,875,877,886,891,897,901,902,906,910,911,912,914,918,919,921,922,923,926,930,931,935,943,data_length:116,data_out:321,data_set:43,databas:2,4,5,6,7,8,9,10,12,15,18,19,20,21,22,26,28,30,31,32,35,37,43,900,902,903,906,907,917,918,919,926,929,931,942,945,946,953,database_modul:20,24,database_nam:20,23,34,datadir:906,datarootdir:906,datatyp:45,date:3,6,8,20,21,23,26,37,167,224,398,832,899,918,datebas:4,david:15,938,939,953,db2:3,6,20,23,35,903,917,918,db3:906,db_185:906,db_arg:3,4,6,8,10,db_header:906,db_lib:906,db_librari:20,22,24,db_module_dir:20,db_princ_arg:3,dbadmin:19,dbdefault:5,dbmatch:21,dbmodul:3,22,23,24,35,dbname:3,6,10,dbutil:919,dce:43,48,641,680,918,dcmd_path:946,deactiv:20,deal:897,919,dealloc:92,925,932,debian:31,918,debug:3,7,8,9,20,28,905,dec:34,35,898,dec_err:324,dec_error:355,decid:34,39,245,939,decim:6,43,910,953,decis:30,919,928,932,953,declar:43,924,decod:21,46,48,159,184,359,910,921,923,decompos:538,decreas:21,900,decrement:48,decrypt:3,35,43,48,79,354,364,827,883,901,918,946,948,dedic:34,default_ccache_nam:21,136,897,953,default_client_keytab_nam:15,21,900,default_cr:43,default_domain:21,default_kdb_fil:907,default_kdc_enctyp:907,default_keytab_nam:21,900,907,default_principal_expir:20,898,default_principal_flag:19,20,918,default_profile_path:907,default_rcache_nam:21,901,default_realm:21,28,33,34,925,934,default_tgs_enctyp:21,26,default_tkt_enctyp:21,26,default_valu:59,60,defccnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,defcktnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,defeat:40,defens:25,defer:43,921,925,928,932,defin:3,12,20,21,33,34,39,43,101,119,228,740,901,906,910,911,923,927,934,935,946,definit:10,16,20,903,919,928,930,defktnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,del_polici:3,delai:24,39,906,918,942,deleg:3,20,21,333,547,654,910,918,939,943,948,delegated_cred_handl:43,delent:11,delet:2,3,5,6,11,19,21,23,151,901,918,919,938,941,946,953,delete_polici:23,delete_princip:23,delimit:21,311,delold:2,14,26,delpol:3,delprinc:3,23,delstr:3,delta:20,48,deltat:187,deltatp:391,demand:414,demonstr:12,14,deni:3,19,25,28,35,928,932,946,denial:21,denot:6,19,898,911,depart:919,depend:25,33,39,43,46,126,365,373,740,876,905,906,917,918,923,935,938,939,deploi:36,37,38,904,deploy:14,24,37,deprec:14,20,26,70,75,94,120,122,123,131,168,186,188,190,191,196,197,225,226,232,233,234,239,281,309,340,341,351,353,393,411,413,918,der:911,921,924,931,der_out:323,325,326,331,deriv:3,6,14,20,25,48,99,100,102,103,113,129,287,288,289,290,294,298,911,915,918,919,944,des3:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,des:14,26,descend:897,901,describ:0,3,14,16,21,23,24,25,28,32,34,37,43,375,406,827,836,837,896,910,919,922,923,924,926,934,939,946,descript:32,39,43,836,903,917,918,920,921,922,925,927,928,929,930,931,932,933,934,935,descriptor:62,363,364,375,deseri:48,design:28,34,46,315,897,901,953,desir:14,15,23,28,43,119,121,250,251,329,906,918,933,946,desired_mech:43,924,desired_nam:43,desired_object:43,desktop:46,dest_ctx:179,destdir:904,destin:32,904,918,destroi:23,43,48,136,147,148,386,414,897,918,920,921,922,925,928,929,930,931,932,933,935,937,941,942,destroy_polici:23,detach:8,detail:10,14,15,22,24,26,28,33,34,36,262,738,897,903,905,918,920,921,922,925,928,929,930,931,932,933,934,935,946,detect:6,8,14,323,325,326,331,356,360,901,906,918,924,determin:3,4,5,6,8,20,21,23,24,28,34,43,48,62,102,105,117,136,154,230,231,261,289,359,385,389,416,889,897,900,901,904,906,911,914,918,921,925,928,932,933,939,953,dev:20,21,41,953,develop:0,904,916,918,919,936,953,devic:3,20,21,46,655,656,devicenam:20,dfl:21,901,953,dget_tgt_via_passwd:946,dict:3,21,dict_fil:4,20,935,dictat:23,dictionari:20,21,23,29,30,34,35,40,918,935,942,did:23,34,223,267,342,939,didn:12,28,differ:3,6,12,21,25,26,28,33,34,37,38,39,43,45,48,107,119,159,265,375,385,865,901,904,906,923,931,932,938,939,942,946,953,diffi:20,21,942,difficult:35,difficulti:38,digest:20,919,digit:898,953,digitalsignatur:21,37,dir:20,21,37,897,906,917,942,953,direct:21,22,23,28,41,48,919,924,934,953,directli:3,18,20,21,23,29,34,43,46,375,618,924,931,942,947,directori:3,5,12,20,21,22,28,33,34,37,169,342,897,901,905,907,908,917,918,938,946,950,951,952,953,dirnam:21,897,dirpath:897,disabl:3,14,20,21,23,24,26,28,34,37,38,39,41,380,381,386,550,901,904,906,918,926,942,950,953,disable_encrypted_timestamp:21,25,40,disable_fresh:37,942,disable_last_success:20,22,35,disable_lockout:20,22,35,disable_pac:20,918,disallow:19,disallow_forward:5,disallow_svr:23,disassoci:4,10,disast:39,disclaim:919,disclosur:19,918,discoveri:25,33,34,918,discuss:34,901,919,927,936,disjoint:0,disk:4,5,6,15,17,24,32,34,46,897,902,905,dispatch:924,displai:2,3,5,9,11,23,37,42,46,245,730,900,910,918,919,942,943,949,display:169,disrupt:14,dist:905,distclean:904,distinct:23,distinguish:5,21,919,distribut:10,903,904,905,906,907,918,919,939,953,distributor:919,divid:915,dll:28,923,924,934,dns:21,906,dns_canonicalize_hostnam:21,38,918,dns_canonicalize_realm:918,dns_lookup_kdc:21,dns_lookup_realm:21,39,dns_uri_lookup:21,39,dnsname:21,doc:22,42,908,document:5,20,21,29,33,34,43,896,904,906,915,918,919,923,936,doe:3,6,8,10,14,20,21,22,23,24,25,26,34,37,38,39,40,43,46,56,119,144,152,160,301,311,313,345,375,389,397,414,897,900,904,906,911,918,919,923,924,925,932,934,938,939,946,doesn:2,6,23,161,897,938,doing:6,23,29,46,918,919,923,942,946,domain:12,15,20,21,33,34,36,37,38,39,918,939,domain_realm:28,33,39,951,don:12,712,715,897,904,906,938,946,953,donat:23,919,done:8,22,23,32,34,39,897,906,922,931,934,946,953,dot:38,doubl:898,down:39,download:8,919,downstream:23,918,downtim:14,doxygen:0,908,dprinc_look_ahead:946,draft:694,697,700,918,drift:15,drop:918,dry:6,dsa:476,dst:148,due:14,19,23,41,dug:919,dugsong:919,dump:4,7,8,17,20,24,34,917,918,dump_fil:4,dumpfil:6,23,906,dumptyp:6,dup:20,duplic:48,826,901,durabl:20,24,durat:3,20,21,884,942,946,dure:3,4,8,17,20,21,23,26,34,35,40,43,352,380,414,719,910,911,918,922,929,939,946,dynam:21,923,926,928,934,e19253:42,e2big:119,e_data:836,931,each:2,3,6,8,10,15,19,20,21,23,24,25,26,28,33,35,37,39,43,44,46,252,263,265,352,755,897,900,902,904,910,911,915,918,919,923,927,928,929,933,938,939,942,943,946,948,951,952,ear:919,earli:14,earlier:20,23,26,34,224,932,earliest:6,153,915,eas:36,easi:14,17,25,35,939,easier:0,14,918,easili:14,34,904,918,eavesdrop:43,eavesdropp:901,ebaa:42,eblock:186,188,190,196,197,281,351,353,393,411,echo:352,361,edata:931,edit:2,11,12,31,906,907,938,editor:0,edt:3,edu:0,3,5,12,14,15,19,20,21,23,24,28,32,34,42,918,919,934,936,938,939,946,educ:33,edwards25519:21,40,919,edwards25519_t:919,effect:14,19,20,21,23,37,39,731,897,901,effici:918,effort:25,eight:33,einval:260,373,390,392,394,395,either:15,20,21,22,23,25,26,34,35,36,37,41,43,44,195,245,253,274,325,326,327,331,402,403,407,731,866,897,904,915,919,923,928,932,939,946,952,eku:20,21,elaps:3,element:43,46,48,189,320,412,827,873,911,elements_stor:43,elimin:14,40,ellipt:40,els:34,923,938,939,946,elsewher:17,emac:906,email:0,642,938,emailprotect:21,embed:678,empti:3,6,19,20,21,23,36,43,46,48,93,229,231,279,345,388,389,404,414,901,906,910,942,enabl:3,4,8,14,15,20,21,22,23,24,25,28,34,36,37,39,40,41,43,55,78,897,905,906,918,921,926,946,953,enable_onli:21,28,enc:3,6,20,199,301,826,918,enc_err:324,enc_errbuf:355,enc_padata:832,enc_part2:376,823,845,883,enc_part:807,823,845,883,enc_tkt:300,301,encdata:911,enckdcreppart:832,enckrbcredpart:825,enclos:20,21,898,encod:21,43,46,48,189,300,323,325,355,541,883,890,910,911,921,924,931,encompass:43,encount:21,34,943,encourag:21,encrypt:2,3,6,14,15,17,21,23,25,29,30,32,34,36,40,43,46,48,79,95,98,99,100,112,113,114,116,124,125,126,129,130,153,229,280,287,288,294,295,298,299,310,315,325,326,357,359,394,480,481,539,599,671,750,808,809,823,825,826,827,832,833,845,846,883,900,901,902,903,907,911,912,918,919,922,924,931,936,943,948,953,encrypted_challeng:21,encrypted_challenge_ind:20,918,encrypted_timestamp:21,enctyp:6,11,14,20,21,23,48,95,97,98,99,101,104,107,111,112,116,118,125,126,192,193,211,224,280,287,310,315,378,411,831,833,846,848,910,914,917,918,922,948,enctype_aes128_cts_hmac_sha1_96:447,789,enctype_aes128_cts_hmac_sha256_128:789,enctype_aes256_cts_hmac_sha1_96:448,789,enctype_aes256_cts_hmac_sha384_192:789,enctype_arcfour_hmac:789,enctype_arcfour_hmac_exp:789,enctype_camellia128_cts_cmac:789,enctype_camellia256_cts_cmac:789,enctype_des3_cbc_env:789,enctype_des3_cbc_raw:789,enctype_des3_cbc_sha1:789,enctype_des3_cbc_sha:789,enctype_des_cbc_crc:789,enctype_des_cbc_md4:789,enctype_des_cbc_md5:789,enctype_des_cbc_raw:789,enctype_des_hmac_sha1:789,enctype_dsa_sha1_cm:789,enctype_md5_rsa_cm:789,enctype_nul:101,229,789,enctype_out:229,enctype_rc2_cbc_env:789,enctype_rsa_env:789,enctype_rsa_es_oaep_env:789,enctype_sha1_rsa_cm:789,enctype_unknown:789,enctypep:392,end:6,20,21,23,24,30,33,34,39,92,93,164,332,825,833,846,884,906,910,914,915,918,927,946,953,endian:910,911,912,914,924,endors:919,endpoint:62,919,endtim:224,884,910,energi:919,enforc:21,enforce_ok_as_deleg:21,918,engin:39,enoent:336,enomem:119,223,231,302,323,325,enough:3,23,26,99,102,167,287,289,766,ensur:14,15,17,20,23,24,25,26,34,37,46,171,865,866,925,932,939,enter:3,5,10,14,23,34,37,325,326,331,361,924,938,939,enterpris:38,43,345,710,918,942,948,entir:3,14,20,39,538,910,931,entiti:43,919,entri:3,8,9,11,12,14,15,19,20,21,22,23,24,26,32,34,35,37,38,39,40,41,43,46,48,153,173,195,198,200,220,245,309,315,320,322,325,326,331,337,352,359,414,832,850,854,897,900,902,911,912,915,918,930,931,939,943,946,entropi:918,enumer:14,26,env:21,37,41,953,envelop:467,479,480,481,environ:14,15,20,21,23,24,26,28,30,34,35,37,38,41,43,56,136,268,269,282,386,387,897,900,901,904,917,918,envvar:21,eperm:928,932,epoch:48,885,equal:15,24,914,918,946,equip:953,equival:20,36,166,382,383,918,erang:336,err_fmt:21,918,erron:41,error:3,20,21,24,34,37,39,43,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,137,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,243,248,260,261,262,264,265,266,267,268,271,272,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,543,615,617,713,714,836,837,865,901,903,906,918,922,923,928,929,931,932,939,948,error_t:919,escal:918,escap:715,especi:15,26,34,38,918,essenti:20,est:35,898,establish:37,43,901,etc:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,etyp:6,229,378,672,918,948,etype_list:244,840,etype_list_length:244,840,euid:21,901,917,evalu:21,even:14,20,21,23,25,28,34,38,39,43,245,388,896,898,901,918,919,942,946,event:39,48,918,919,931,eventu:26,39,everi:20,21,23,32,34,48,318,897,evid:43,evolut:918,exact:22,905,exactli:21,34,153,407,748,749,753,911,946,examin:21,37,922,931,exampl:3,5,6,9,14,15,16,20,21,22,23,24,26,28,32,34,35,37,38,39,41,43,56,100,103,288,290,897,898,901,904,905,918,919,923,934,938,939,942,946,953,exce:896,898,except:3,19,21,23,37,39,43,329,918,919,924,946,excess:904,exchang:34,40,48,224,247,279,363,375,437,877,911,931,exclud:6,17,32,918,exclus:3,915,919,942,946,exec:906,945,946,execprefix:906,execut:3,6,22,34,46,380,905,906,945,exemplari:919,exhaust:32,exist:0,2,3,5,6,14,15,20,21,22,23,26,28,32,34,35,43,46,48,137,147,155,329,330,359,363,364,375,407,414,897,902,910,918,924,942,944,946,exit:3,10,11,897,918,939,943,948,exp:3,20,21,26,37,expand:21,915,918,expans:906,918,expdat:3,expect:14,21,34,41,267,301,342,343,730,908,922,927,939,expected_nonc:882,expens:20,25,35,experi:0,14,39,918,experienc:0,933,experiment:918,expir:2,3,6,15,19,20,21,23,26,33,37,43,46,48,224,243,260,832,884,897,898,901,910,918,939,942,943,946,953,expiri:14,245,918,explain:34,explicit:14,19,21,22,24,28,39,919,explicitli:3,14,19,23,28,34,44,253,906,918,928,929,930,939,expos:3,6,14,46,848,942,946,express:3,21,898,919,extend:20,21,37,48,420,889,924,953,extendedkeyusag:37,extens:37,39,247,908,918,924,extent:919,extern:20,22,43,910,extfil:37,extra:19,39,40,766,905,extra_address:21,extract:3,15,19,34,229,900,918,extrem:3,eytab:3,facil:4,15,20,43,918,facilit:918,factor:21,911,fail:2,3,6,14,15,20,21,23,24,35,38,39,43,46,228,260,279,342,354,404,865,904,906,918,924,925,939,941,946,fail_count:6,failov:39,failur:3,6,14,24,35,46,119,129,130,159,260,298,299,310,407,408,409,918,919,924,933,935,failurecountinterv:3,35,failuretim:3,fake:21,46,fall:39,40,897,918,fallback:3,20,21,38,40,46,918,925,fallback_realm:925,fals:14,20,21,23,26,28,33,36,37,38,39,43,52,54,105,109,110,127,128,160,192,245,283,284,285,319,348,349,350,362,388,416,952,famili:20,186,188,190,191,196,197,250,251,281,351,353,411,933,famou:34,far:37,fashion:26,29,919,946,fast:20,21,25,36,37,48,229,544,599,910,918,922,931,fast_avail:910,fast_ccache_nam:247,faster:25,39,897,904,fatal:154,fdii:939,feasibl:34,featur:24,29,368,371,916,919,936,feb:9,februari:896,fee:919,feedback:0,fellow:919,fenc:923,fences_wicker_initvt:923,fermi:919,fetch:4,5,6,10,11,21,23,71,141,414,918,few:906,938,953,fiat:919,fiction:923,fictiti:939,field:3,6,20,21,35,36,37,39,44,46,48,153,256,310,330,331,343,352,356,357,359,360,412,749,753,889,910,911,914,915,918,922,923,931,935,939,951,file2:901,915,953,file:3,4,5,6,7,9,10,11,12,14,15,16,17,19,22,23,24,28,29,30,31,37,38,39,41,46,48,50,152,262,269,317,321,363,364,375,378,405,755,897,898,899,900,901,903,904,905,906,907,908,916,917,918,919,920,921,922,923,924,925,927,928,929,930,931,932,933,934,935,937,938,939,946,951,952,953,filenam:2,3,5,6,7,8,15,20,21,28,34,36,37,41,43,387,897,901,918,953,filesystem:20,23,34,37,915,917,fill:46,48,50,56,119,121,134,150,152,224,230,231,303,306,311,327,347,357,358,390,391,394,396,397,914,915,923,934,filter:20,21,find:12,21,23,38,39,43,48,50,910,915,918,920,938,939,942,946,fine:39,43,fini:920,921,922,925,928,929,930,931,932,933,finish:48,fip:918,fire:39,firewal:29,39,41,firm:919,first:3,6,9,12,16,19,20,21,22,23,26,28,34,37,38,39,43,44,52,53,93,105,136,228,258,279,300,322,348,349,350,361,362,386,404,763,827,900,901,906,908,910,911,912,914,915,918,919,921,923,924,925,930,932,939,944,946,951,953,fit:311,919,five:3,21,34,898,901,929,944,fix:6,915,918,flag:2,3,5,6,11,14,19,20,21,22,23,25,26,28,33,35,39,40,43,46,48,55,62,69,74,78,151,153,192,269,279,325,326,327,331,343,352,354,356,359,360,363,364,404,728,729,730,731,735,736,737,738,740,747,748,825,826,827,832,833,840,879,894,897,906,918,922,931,939,941,942,943,945,946,flag_rsa_protocol:942,flagnam:19,flat:897,flavor:3,flexibl:21,38,flip:14,flush:934,fmt:346,379,417,418,419,420,fnal:919,folder:21,follow:2,3,6,10,14,15,19,20,21,22,23,24,25,26,28,29,34,35,36,37,38,39,43,62,228,245,248,263,333,344,345,352,359,361,389,408,897,898,900,901,903,904,906,907,910,911,912,914,918,919,923,924,927,934,936,938,939,942,943,945,946,950,951,952,953,foo:3,6,21,23,foobar:39,906,952,fool:25,foot:923,for_us:948,forbid:3,forbidden:21,forc:3,5,8,9,11,14,19,20,21,23,25,26,35,39,40,136,foreground:4,8,forev:3,forget:5,34,156,fork:10,34,946,form:0,3,15,20,21,24,25,28,29,34,39,43,152,317,325,326,331,373,389,642,876,897,902,911,918,919,942,951,953,format:0,3,6,19,20,21,36,39,43,48,321,346,405,406,417,419,420,733,738,740,879,889,897,899,900,901,906,908,912,916,918,923,924,946,948,953,former:388,formul:21,forth:21,forward:3,15,20,21,23,33,34,36,38,43,48,354,531,548,840,918,939,942,943,946,953,found:7,10,12,20,21,23,34,39,59,60,151,153,154,195,301,315,359,906,915,918,938,939,946,947,953,foundat:919,four:21,24,35,40,910,911,912,915,924,946,fqdn:29,fraction:25,frame:910,framework:43,918,919,fred:28,free:46,47,48,49,65,67,72,76,91,93,111,115,141,143,145,150,153,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,236,261,272,275,280,286,310,315,317,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,919,921,923,934,free_ind:921,free_list:925,free_modreq:931,free_restrict:928,free_str:932,934,free_valu:934,freed:44,57,58,61,78,85,106,136,144,146,198,199,200,201,202,204,207,208,210,211,212,215,216,217,218,219,221,222,228,262,312,334,365,366,368,371,865,866,freeli:919,frequent:14,33,38,39,885,938,fresh:0,15,17,20,43,598,913,918,942,946,fri:9,friend:939,friendli:918,friendlier:918,from:0,2,3,4,5,6,7,8,9,10,11,17,19,20,21,22,23,24,25,28,29,32,34,35,37,38,39,41,43,44,46,48,49,93,99,100,101,102,103,113,119,121,129,148,166,169,180,181,183,195,241,245,250,258,269,287,288,289,290,294,298,322,327,330,342,346,352,356,357,358,359,360,375,376,378,380,382,383,414,420,440,832,845,846,897,900,901,904,905,906,910,911,915,916,918,919,920,921,922,924,926,927,929,934,936,938,939,942,944,946,948,951,953,from_mast:8,917,front:20,344,fsanit:906,ftp:32,34,fubar:21,953,fulfil:946,full:4,8,9,14,20,23,39,48,331,657,906,918,927,938,946,fulli:3,15,19,21,23,29,32,34,35,46,942,953,fullname_out:143,fulvio:42,func:63,80,fund:919,fundsxpress:919,furnish:919,further:10,34,901,952,furthermor:14,245,919,futur:21,23,26,37,43,156,228,889,918,925,g10:919,g_accept_sec_context:919,g_acquire_cr:919,g_canon_nam:919,g_compare_nam:919,g_context_tim:919,g_delete_sec_context:919,g_dsp_name:919,g_dsp_statu:919,g_dup_nam:919,g_exp_sec_context:919,g_export_nam:919,g_glue:919,g_imp_nam:919,g_imp_sec_context:919,g_init_sec_context:919,g_initi:919,g_inquire_context:919,g_inquire_cr:919,g_inquire_nam:919,g_process_context:919,g_rel_buff:919,g_rel_cr:919,g_rel_nam:919,g_rel_oid_set:919,g_seal:919,g_sign:919,g_store_cr:919,g_unseal:919,g_userok:919,g_util:919,g_verifi:919,gain:14,25,34,928,930,939,gcc:906,gen_sym:946,gener:2,9,12,14,15,17,19,20,21,23,25,26,32,35,41,43,48,113,125,126,260,283,294,327,330,342,440,523,524,525,526,824,841,856,897,901,903,904,905,906,908,910,918,919,922,926,931,936,939,946,951,generalizedtim:911,generalstr:37,generic_trusted_ca:20,21,gennadi:946,genrsa:37,german:918,get:3,12,14,16,19,20,21,32,33,35,38,39,48,59,60,163,236,254,258,275,906,918,922,925,931,938,939,942,946,953,get_cooki:918,931,get_cr:46,get_princip:23,get_tgt_via_passwd:946,get_valu:934,getaddrinfo:38,getdat:3,5,6,19,gethostnam:38,43,getnameinfo:38,getopt:903,getpol:3,getprinc:3,6,14,26,35,918,getpwuid:3,getrandom:918,getstr:3,getusershel:946,gic_opt:922,give:6,14,23,28,38,904,910,911,919,932,938,939,given:2,3,5,6,8,10,14,20,21,23,28,36,38,39,41,43,46,48,49,59,60,124,135,317,329,389,866,906,910,915,918,919,943,gladman:919,glob:3,6,global:5,19,20,21,22,141,155,918,glorifi:923,glossolalia:14,glue:903,gmbh:919,gmt:898,gnu:904,906,918,919,goal:46,going:20,24,939,good:12,15,23,34,919,938,939,953,googl:919,gotten:939,gov:21,919,govern:23,919,944,gpg:905,gpl:919,grace:942,gracefulli:924,grain:43,grammar:910,914,grant:3,14,19,20,21,23,26,28,34,35,37,39,43,46,48,224,235,260,264,267,760,897,910,918,919,928,932,937,939,942,946,952,gratitud:919,great:19,153,267,752,greater:53,greg:953,groff:0,group:20,21,40,911,919,grow:901,gs2:918,gss:28,903,910,917,918,924,953,gss_:924,gss_accept_sec_context:43,918,924,gss_acquire_cr:43,918,gss_acquire_cred_from:43,918,gss_acquire_cred_impersonate_nam:43,gss_acquire_cred_with_password:918,gss_add_cr:924,gss_add_cred_from:924,gss_add_cred_impersonate_nam:924,gss_add_cred_with_password:924,gss_add_oid_set_memb:924,gss_buffer_desc:43,gss_buffer_set_t:43,gss_buffer_t:43,924,gss_c_accept:43,gss_c_both:43,gss_c_buffer_flag_alloc:43,gss_c_buffer_type_data:43,gss_c_buffer_type_head:43,gss_c_buffer_type_mic_token:43,gss_c_buffer_type_pad:43,gss_c_buffer_type_sign_onli:43,gss_c_buffer_type_stream:43,gss_c_buffer_type_trail:43,gss_c_channel_bound_flag:918,gss_c_dce_styl:43,gss_c_deleg_policy_flag:918,gss_c_inq_negoex_kei:924,gss_c_inq_negoex_verify_kei:924,gss_c_ma_negoex_and_spnego:924,gss_c_no_credenti:43,gss_c_no_nam:43,gss_c_nt_anonym:43,gss_c_nt_export_nam:43,924,gss_c_nt_hostbased_servic:43,gss_c_nt_machine_uid_nam:43,gss_c_nt_string_uid_nam:43,gss_c_nt_user_nam:43,gss_c_null_oid:43,gss_c_qop_default:43,gss_c_sec_context_sasl_ssf:918,gss_const_key_value_set_t:43,gss_create_empty_oid_set:924,gss_cred_id_t:43,924,gss_cred_usage_t:43,gss_ctx_id_t:43,924,gss_display_statu:924,gss_error:43,gss_export_cr:43,gss_export_nam:43,gss_get_mic_iov:43,gss_get_mic_iov_length:43,gss_get_name_attribut:43,gss_import_cr:43,924,gss_import_nam:43,924,gss_import_sec_context:924,gss_init_sec_context:43,gss_inquire_attrs_for_mech:924,gss_inquire_cr:43,gss_inquire_cred_by_oid:43,918,gss_inquire_nam:43,gss_inquire_sec_context_by_oid:918,924,gss_iov:918,gss_iov_buffer_desc:43,gss_iov_buffer_desc_struct:43,gss_iov_buffer_flag_alloc:43,gss_iov_buffer_t:43,gss_iov_buffer_type_data:43,gss_iov_buffer_type_head:43,gss_iov_buffer_type_mic_token:43,gss_iov_buffer_type_pad:43,gss_iov_buffer_type_sign_onli:43,gss_iov_buffer_type_stream:43,gss_iov_buffer_type_trail:43,gss_key_value_element_desc:43,gss_key_value_element_struct:43,gss_key_value_set_desc:43,gss_key_value_set_struct:43,gss_krb5_cred_no_ci_flags_x:918,gss_krb5_get_cred_imperson:43,918,gss_krb5_nt_enterprise_nam:43,918,gss_krb5_nt_principal_nam:43,gss_krb5_nt_x509_cert:43,918,gss_mech_config:28,917,953,gss_mech_interpos:924,gss_name_t:43,924,gss_oid:43,924,gss_oid_set:43,924,gss_qop_t:43,gss_release_iov_buff:43,gss_s_cred_unavail:43,gss_s_duplicate_el:43,gss_s_unavail:43,gss_store_cr:918,gss_store_cred_into:43,gss_unwrap_aead:43,gss_unwrap_iov:43,gss_verify_mic_iov:43,gss_wrap_aead:43,gss_wrap_iov:43,gss_wrap_iov_length:43,gss_wrapex:918,gssapi:15,16,20,21,45,896,897,900,901,903,918,919,920,926,945,953,gssapi_err_gener:919,gssapi_ext:43,924,gssapi_krb5:43,gssapiauthent:28,gssapip_spnego:919,gssapistrictacceptorcheck:38,gssapiv2:43,gssd_pname_to_uid:919,gssi_:924,gssi_import_cred_by_mech:924,gssi_import_name_by_mech:924,gssi_import_sec_context_by_mech:924,gssrpc:919,gssspi_exchange_meta_data:924,gssspi_query_mechanism_info:924,gssspi_query_meta_data:924,guarante:14,guard:901,guess:21,34,918,guest:3,21,guid:15,30,32,926,h5l:21,44,had:6,28,34,37,938,939,952,haddl:85,hand:14,34,handi:34,handl:3,6,14,19,36,43,48,71,132,135,137,139,141,142,143,144,145,146,147,149,150,151,152,153,154,155,157,158,159,161,164,223,224,235,246,250,251,265,276,300,302,303,305,308,310,311,312,313,314,316,318,335,336,342,343,359,403,414,918,919,922,924,927,931,handle_error:43,handle_out_of_space_error:43,happen:3,17,20,34,39,41,939,happi:919,hard:20,23,hardcod:897,900,934,harder:918,hardwar:3,20,34,46,921,931,939,943,harm:901,harvard:919,harwood:953,has:0,3,5,6,12,14,15,17,19,20,21,23,24,25,26,27,28,34,35,37,38,39,43,46,78,124,260,263,279,356,360,388,404,739,897,901,904,905,906,910,914,915,918,919,924,928,929,930,933,938,939,943,946,951,hash:6,21,37,901,911,915,918,hat:692,693,919,953,have:0,2,3,6,8,12,14,15,17,19,20,21,23,24,25,26,28,32,33,34,35,37,38,39,43,46,101,153,230,274,402,897,901,904,905,908,910,911,914,915,918,919,920,922,923,924,927,928,929,931,933,935,938,939,942,946,950,952,953,have_getusershel:946,haven:906,953,hdata:230,head:21,header:6,21,43,48,535,538,809,906,920,921,922,923,925,927,928,929,930,931,932,933,934,935,headernam:906,heim_org:21,heimdal:42,43,45,897,918,held:919,943,hellman:20,21,942,help:21,23,37,901,906,918,934,936,939,945,953,helpdesk:14,henc:12,her:39,939,952,here:0,15,19,20,21,23,28,35,41,43,46,898,906,923,938,939,hereaft:919,herebi:919,hesiod:21,906,919,heurist:21,154,230,920,946,951,hexadecim:6,918,hhmmss:898,hhost:918,hidden:46,352,870,hide:3,942,hierarch:4,21,918,hierarchi:23,high:14,16,24,higher:43,897,908,918,highest:3,6,14,21,310,315,414,highli:905,918,himself:939,hin:905,hint:3,20,149,his:19,23,939,946,952,hist_kvno:6,histor:28,33,896,histori:6,26,906,918,hit:48,946,hmac:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,hold:3,43,78,170,187,192,193,397,398,897,holder:919,hole:32,34,39,914,home:5,21,28,938,946,950,951,952,honor:41,939,hook:48,865,866,918,926,hope:919,hopefulli:35,host01:953,host:3,4,7,8,12,14,15,16,20,21,23,24,25,26,29,30,31,33,36,37,38,39,43,46,48,194,223,230,329,331,388,389,414,643,645,901,904,906,918,926,931,938,939,942,943,946,950,951,952,953,host_based_servic:20,39,host_realm:925,hostaccount:28,hostnam:3,12,15,20,21,23,26,33,34,37,38,41,43,48,329,388,389,906,918,925,948,951,953,hostrealm:28,918,926,hostrealm_plugin:925,hotp:3,hour:5,19,20,23,33,898,938,939,946,953,houston:39,how:14,20,21,23,26,28,32,34,37,39,43,224,416,905,906,916,920,926,933,934,938,942,howev:3,6,14,17,20,21,23,25,32,33,35,37,39,904,919,939,953,html:0,22,42,905,908,918,html_subst:908,htmlsrc:908,http:21,22,25,30,38,39,42,904,905,908,918,919,936,http_anchor:21,29,hudson:953,human:169,898,918,hundr:24,hwauth:20,hxx:919,iakerb:918,icr:43,idea:38,ideal:15,23,34,46,904,ident:3,15,20,22,43,48,361,740,880,881,897,918,922,938,939,942,944,identif:918,919,identifi:4,10,21,28,43,166,265,315,317,733,826,832,847,918,919,924,948,idp:692,iec:905,ietf:918,ignor:3,19,20,21,26,28,43,48,235,260,264,267,269,278,282,342,345,350,359,388,534,708,711,865,901,904,906,910,918,923,951,953,ignore_acceptor_hostnam:21,38,43,illinoi:42,illumin:953,imap:38,906,951,immedi:6,14,21,23,39,918,931,impact:35,impend:46,imperson:918,impl:906,implement:0,14,20,21,23,24,28,29,36,38,40,43,44,46,51,113,119,151,294,382,383,897,904,906,910,912,914,918,919,920,921,922,923,924,925,927,928,929,931,932,933,934,935,936,939,946,953,impli:8,919,implicit:20,impos:928,imposs:23,35,improv:0,14,20,21,35,918,936,in_authdat:173,in_cr:224,225,226,321,330,375,in_data:329,330,375,in_length:131,413,in_tkt_servic:235,260,264,267,inaccess:39,inaccur:21,inaddr:172,inadequ:41,inauthdat1:322,inauthdat2:322,inbuf:356,357,358,359,360,inc:919,939,953,incc:134,incident:919,includ:6,9,15,16,19,20,21,23,24,26,32,33,34,37,38,39,43,48,99,104,144,287,311,325,326,330,331,343,344,359,407,685,813,826,833,846,860,896,897,901,903,906,907,908,910,911,914,918,919,922,923,924,928,930,931,934,938,942,946,953,include_pac:860,includedir:21,906,inclus:919,incom:20,38,924,incompat:904,906,927,incomplet:21,inconsist:24,incorpor:0,20,24,918,incorrect:35,39,735,736,938,939,incorrectli:939,incr:177,increas:20,24,40,100,103,288,290,926,increment:4,8,9,14,19,20,24,31,35,39,48,87,89,325,326,331,915,918,919,indata:178,inde:939,independ:21,26,138,163,245,307,906,index:6,22,29,42,369,905,915,indic:3,6,14,19,20,21,23,26,28,30,36,37,39,41,43,46,154,245,327,728,729,730,731,735,736,737,738,837,897,898,900,901,910,911,912,914,915,918,919,921,922,923,931,939,942,953,indirect:919,individu:9,20,919,939,953,inetd:8,12,34,41,infd:62,infer:91,93,344,influenc:38,info2:918,info:20,34,229,652,654,663,672,826,832,888,918,inform:3,4,6,7,9,11,20,22,23,26,28,33,34,38,39,41,43,46,48,169,185,229,250,251,282,325,327,333,342,364,386,387,416,651,653,655,656,658,740,824,825,863,870,875,889,897,905,906,909,910,911,914,918,922,923,926,927,931,934,936,942,953,infrastructur:21,40,903,904,918,infrequ:918,inherit:938,946,ini:21,init:4,10,920,921,922,925,928,929,930,931,932,933,init_cr:46,initi:3,5,12,14,15,21,22,23,25,26,34,35,38,40,45,48,99,102,115,124,229,269,287,289,336,401,506,877,884,897,900,906,910,918,919,922,923,938,939,942,943,945,946,948,953,initiator_cred_handl:43,inittab:34,initvt:923,inject:25,inop:14,inout:98,99,100,102,103,114,287,288,289,290,295,329,330,359,361,363,364,375,407,inprinc:182,inptr:186,190,input:23,43,48,49,99,100,102,103,107,113,117,119,124,144,194,195,224,287,288,289,290,294,296,352,375,376,403,920,932,935,948,input_assoc_buff:43,input_ccach:942,input_cred_handl:43,input_message_buff:43,input_name_buff:924,input_name_typ:924,input_payload_buff:43,inputlen:104,inquir:3,19,inquiri:19,ins:32,insecur:14,32,39,43,230,insensit:39,350,706,898,insert:25,825,832,insid:15,26,195,911,918,insist:946,inspect:16,380,381,865,866,921,928,930,inspir:918,inst:50,instal:12,14,15,17,21,28,30,32,39,902,905,908,927,941,945,instanc:19,21,23,28,33,35,43,49,50,643,644,901,910,918,923,953,instead:3,4,6,8,14,20,21,23,24,34,37,38,46,239,246,278,309,340,341,342,344,417,419,866,906,918,919,924,931,941,943,946,952,institut:909,919,953,instruct:22,23,34,37,43,906,936,insuffici:223,231,302,323,325,906,int16_t:843,int32_t:844,int_max:787,integ:3,20,21,23,36,37,896,910,911,914,924,integr:26,33,43,46,326,331,356,360,903,905,917,918,919,939,intel:919,intend:3,10,23,41,43,46,352,946,interact:2,3,21,23,39,368,906,intercept:28,924,interest:21,35,901,907,interfac:3,11,14,19,20,23,28,34,46,897,901,903,906,918,923,926,interface_modname_initvt:923,interface_module_initvt:923,interface_plugin:923,interfer:904,intermedi:20,21,23,43,224,910,911,918,939,intern:24,36,41,107,731,847,920,921,922,926,928,929,930,931,933,935,953,internet:38,interoper:37,382,383,897,924,interpos:28,926,interpret:3,36,43,46,152,245,924,942,946,948,interprocess_token:924,interrupt:14,260,919,intersect:26,interv:3,8,23,34,35,896,898,interven:23,intervent:14,26,introduc:3,20,21,921,925,929,930,932,intrud:939,invalid:14,21,23,50,136,139,156,260,301,315,336,939,942,943,invers:914,investig:906,invis:25,invoc:6,41,43,invok:4,8,9,11,12,21,23,24,46,80,136,245,386,924,931,932,933,942,944,946,involv:21,931,iov:48,100,103,288,290,827,918,iov_count:43,iprop:4,8,20,918,919,iprop_en:4,8,20,23,iprop_hdr:919,iprop_listen:20,iprop_logfil:20,23,iprop_master_ulogs:20,23,iprop_port:20,23,iprop_replica_pol:8,20,23,iprop_resync_timeout:20,23,iprop_slave_pol:20,iprop_ulogs:20,ipropd_svc:919,ipv4:38,ipv6:21,38,918,iran:919,is_last_req:245,838,is_skei:153,749,826,910,isi:946,isn:20,23,333,901,904,919,iso:905,isol:39,issu:2,3,14,20,21,23,26,29,32,35,36,37,39,43,46,320,412,884,906,918,922,931,939,942,issuanc:3,issue_pac:918,issuer:21,37,320,412,issueraltnam:37,item:253,731,923,931,iter:3,20,23,24,48,164,359,817,920,934,iterator_cr:934,iterator_fre:934,its:3,4,8,10,14,15,17,20,21,23,24,26,28,29,32,33,34,35,37,38,39,40,41,43,46,48,87,89,92,107,117,203,209,228,269,296,301,356,359,360,381,412,898,909,910,918,919,920,921,922,923,924,931,935,941,942,943,951,itself:3,4,8,10,14,15,20,21,28,43,46,198,199,200,201,202,203,206,207,208,209,212,215,216,221,334,736,826,897,900,902,924,931,939,ivec:186,190,jan:23,januari:896,898,jellinghau:919,jennif:3,938,939,953,jeremi:919,jimi:12,job:8,17,34,39,joeadmin:19,23,32,952,joeuser:953,johndo:21,jqpublic:946,json:3,36,46,368,371,738,740,910,jul:898,juli:898,just:6,14,15,20,21,33,34,43,326,641,897,904,907,922,939,946,952,k5_gic_opt:235,260,k5_random_kei:115,124,k5_vic_opt:415,416,k5ident:21,28,937,950,k5login:21,28,937,938,946,950,k5login_authorit:21,28,952,k5login_directori:21,28,k5srvutil:1,14,26,900,k5user:946,k5wiki:904,918,936,kadm5:3,4,6,18,20,21,23,24,34,903,917,918,919,926,928,kadm5_auth:19,918,926,kadm5_auth_modinfo:928,kadm5_auth_plugin:928,kadm5_auth_restrict:928,kadm5_hook:918,926,kadm5_hook_modinfo:929,kadm5_hook_plugin:929,kadm5_pass_q_:935,kadm:945,kadmin:1,2,4,5,6,8,10,11,12,14,15,16,19,20,21,22,23,24,25,26,32,34,35,37,39,40,166,245,300,301,382,897,898,900,903,918,919,926,929,944,945,953,kadmind:1,3,5,9,19,20,21,22,23,24,26,28,34,39,902,918,926,944,953,kadmind_listen:20,kadmind_port:4,20,34,kaduk:14,kbd5_util:23,kbuild:903,kcm:21,321,405,897,918,919,953,kcm_mach_servic:21,kcm_socket:21,kdb5_err:919,kdb5_ldap_util:1,3,4,10,20,22,23,24,kdb5_util:1,4,7,8,10,11,14,20,22,23,24,26,34,898,903,917,918,953,kdb5_util_path:4,kdb5_util_prog:8,kdb:4,22,23,24,35,903,918,919,926,930,942,945,kdb_convert:919,kdb_log:919,kdc1:39,kdc2:39,kdc:3,4,5,6,8,9,10,11,15,16,17,18,19,21,22,23,24,25,26,29,31,32,33,36,40,43,46,48,101,107,119,166,224,230,235,241,245,247,258,260,269,300,301,333,342,343,414,544,546,563,657,659,738,832,845,846,865,866,884,897,900,902,903,906,907,910,912,913,918,921,922,925,926,927,933,935,939,942,948,953,kdc_cert:37,kdc_default_opt:21,kdc_err_more_preauth_data_requir:918,kdc_listen:20,34,kdc_max_dgram_reply_s:20,kdc_opt_allow_postd:789,kdc_opt_canonic:789,kdc_opt_cname_in_addl_tkt:789,kdc_opt_disable_transited_check:789,kdc_opt_enc_tkt_in_skei:789,kdc_opt_forward:789,kdc_opt_postd:789,kdc_opt_proxi:789,kdc_opt_renew:789,kdc_opt_renewable_ok:21,789,kdc_opt_request_anonym:789,kdc_opt_valid:789,kdc_option:846,kdc_port:20,kdc_princ_nam:37,kdc_princip:37,kdc_principal_seq:37,kdc_tcp_listen:20,34,37,kdc_tcp_listen_backlog:20,kdc_tcp_port:20,kdc_timesync:21,kdc_tkt_common_mask:789,kdcdefault:10,34,37,40,kdcissu:48,kdckei:37,kdclist:34,kdcpolici:918,926,kdcpolicy_plugin:930,kdcpreauth:918,926,kdcpreauth_mymech_initvt:923,kdcpreauth_plugin:931,kdcproxi:29,kdestroi:33,897,918,937,940,942,943,947,948,953,keep:3,9,15,23,35,901,904,905,938,keepkvno:3,keepold:3,14,23,918,kei:2,3,5,6,9,10,11,12,15,16,19,20,21,25,28,32,34,36,37,38,40,41,43,46,48,73,77,87,89,100,103,105,106,108,113,114,117,119,129,130,141,153,155,181,216,224,229,234,258,276,277,280,292,293,300,301,307,308,313,320,325,330,342,343,351,354,359,363,364,412,414,439,440,671,740,750,756,813,825,826,832,833,834,847,848,850,900,901,902,903,906,907,910,911,912,917,918,922,924,931,939,942,943,948,953,kept:3,17,20,23,32,kerb_ap_options_cbt:918,kerber:14,33,34,946,kerbero:2,3,4,5,6,7,8,9,10,11,12,14,18,19,20,21,24,25,26,27,28,30,31,32,33,36,37,38,42,43,45,46,47,48,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,161,162,163,164,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,897,898,901,902,903,904,906,907,909,910,926,929,932,934,936,937,938,941,942,943,944,945,946,947,948,949,950,951,952,kerberos_db:8,kerboro:18,kern:20,kernel:897,903,918,key_data:286,293,key_exp:832,key_stash_fil:6,20,34,keyagr:37,keyblock:48,70,75,90,101,107,115,117,215,216,224,280,281,331,353,359,393,826,910,keyboard:4,6,10,48,keybyt:112,keydata:6,keyencipher:21,37,keyexchang:107,keyfil:6,20,22,keyfilenam:21,keyid:37,keyindex:6,keyinfo:6,26,keylength:112,keylist:11,15,keyprocarg:315,keyr:897,906,918,953,keysalt:2,3,917,keyspac:14,keytab:2,3,7,8,11,12,14,17,21,23,26,28,31,41,43,46,48,304,310,311,312,314,317,318,359,363,364,416,897,899,901,902,906,907,910,913,917,918,942,943,945,946,948,953,keytab_fil:8,942,keytab_nam:943,keytab_out:303,keytabl:850,keytabnam:906,keytyp:10,keyusag:37,keyutil:906,keyword:21,898,kfw:918,kgetcr:918,kile:684,kill:34,kind:38,43,105,897,919,922,924,931,kinit:3,12,15,16,21,22,28,29,33,34,35,37,41,46,897,898,918,922,937,940,941,943,946,947,948,949,953,kiprop:4,8,23,kkdcp:29,39,918,919,klau:919,kldap:20,22,klein:919,klist:14,15,33,897,900,937,940,941,942,946,947,953,klmdb:20,know:21,33,35,37,901,906,924,939,knowledg:0,14,17,414,922,931,known:6,20,23,26,38,43,46,48,152,231,317,647,648,907,918,951,korea:919,kpasswd:3,4,14,15,20,21,23,29,33,918,937,938,940,953,kpasswd_listen:20,kpasswd_port:20,kpasswd_serv:21,29,39,kpclientauth:20,kpkdc:21,kprop:1,4,6,8,15,23,24,34,35,903,917,918,919,953,kprop_path:4,kprop_port:4,917,953,kpropd:1,4,7,9,23,34,41,903,917,918,kpropd_rpc:919,kproplog:1,8,919,kpserverauth:21,37,krb4:918,krb524:21,krb524_convert_creds_kdc:789,krb524_init_et:789,krb524_krb4_disabl:51,krb5:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,281,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,790,791,792,793,794,795,796,797,798,799,800,801,802,803,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,946,947,948,949,950,951,952,953,krb5_425_conv_princip:48,krb5_524_conv_princip:48,krb5_524_convert_cr:48,790,krb5_address:52,53,54,64,82,84,172,198,232,233,234,240,332,804,824,825,826,832,833,840,846,krb5_address_compar:48,krb5_address_ord:48,krb5_address_search:48,krb5_addrtyp:804,805,krb5_allow_weak_crypto:48,krb5_altauth_att_challenge_respons:789,krb5_aname_to_localnam:48,918,932,krb5_anonymous_princip:48,krb5_anonymous_princstr:57,789,krb5_anonymous_realm:48,krb5_anonymous_realmstr:58,789,krb5_ap_rep:789,804,krb5_ap_rep_enc_part:48,357,375,804,krb5_ap_req:789,804,krb5_appdefault_boolean:48,60,krb5_appdefault_str:48,59,krb5_as_rep:789,845,krb5_as_req:789,846,krb5_auth_con_fre:48,78,krb5_auth_con_genaddr:48,82,84,krb5_auth_con_get_checksum_func:48,krb5_auth_con_getaddr:44,48,krb5_auth_con_getauthent:48,krb5_auth_con_getflag:48,krb5_auth_con_getkei:48,krb5_auth_con_getkey_k:48,krb5_auth_con_getlocalseqnumb:48,krb5_auth_con_getlocalsubkei:48,krb5_auth_con_getrcach:48,krb5_auth_con_getrecvsubkei:48,75,krb5_auth_con_getrecvsubkey_k:48,krb5_auth_con_getremoteseqnumb:48,krb5_auth_con_getremotesubkei:48,krb5_auth_con_getsendsubkei:48,70,krb5_auth_con_getsendsubkey_k:48,krb5_auth_con_init:48,61,krb5_auth_con_initivector:48,krb5_auth_con_set_checksum_func:48,krb5_auth_con_set_req_cksumtyp:48,krb5_auth_con_setaddr:44,48,krb5_auth_con_setflag:48,78,krb5_auth_con_setport:44,48,krb5_auth_con_setrcach:48,krb5_auth_con_setrecvsubkei:44,48,krb5_auth_con_setrecvsubkey_k:48,krb5_auth_con_setsendsubkei:44,48,krb5_auth_con_setsendsubkey_k:48,krb5_auth_con_setuseruserkei:48,359,krb5_auth_context:48,62,63,64,65,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,84,85,86,87,88,89,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375,804,856,krb5_auth_context_do_sequ:66,69,74,83,325,326,327,331,356,360,789,krb5_auth_context_do_tim:66,78,83,325,326,331,356,360,789,krb5_auth_context_generate_local_addr:62,789,krb5_auth_context_generate_local_full_addr:62,789,krb5_auth_context_generate_remote_addr:62,789,krb5_auth_context_generate_remote_full_addr:62,789,krb5_auth_context_permit_al:789,krb5_auth_context_ret_sequ:66,83,325,326,327,331,354,356,360,789,krb5_auth_context_ret_tim:66,83,325,326,331,354,356,360,789,krb5_auth_context_use_subkei:789,krb5_authdata:173,184,189,195,200,320,322,412,804,813,826,833,846,krb5_authdata_and_or:789,krb5_authdata_ap_opt:789,krb5_authdata_auth_ind:789,krb5_authdata_cammac:789,krb5_authdata_etype_negoti:789,krb5_authdata_fx_armor:789,krb5_authdata_if_relev:789,krb5_authdata_initial_verified_ca:789,krb5_authdata_kdc_issu:789,krb5_authdata_mandatory_for_kdc:789,krb5_authdata_osf_dc:789,krb5_authdata_sesam:789,krb5_authdata_signticket:789,krb5_authdata_win2k_pac:789,krb5_authdatatyp:184,189,195,804,811,krb5_authent:48,65,804,886,krb5_bad_enctyp:116,286,krb5_boolean:52,54,55,105,109,110,127,128,129,130,160,192,253,283,284,285,298,299,300,319,341,343,348,349,350,362,388,804,826,838,860,krb5_build_princip:46,47,48,92,krb5_build_principal_alloc_va:47,48,91,94,krb5_build_principal_ext:47,48,krb5_build_principal_va:48,krb5_c_:186,188,190,191,196,197,281,351,353,411,krb5_c_block_siz:48,krb5_c_checksum_length:48,168,krb5_c_crypto_length:48,krb5_c_crypto_length_iov:48,krb5_c_decrypt:48,287,krb5_c_decrypt_iov:48,103,288,krb5_c_derive_prfplu:48,918,krb5_c_encrypt:48,krb5_c_encrypt_iov:48,290,krb5_c_encrypt_length:48,102,289,krb5_c_enctype_compar:48,krb5_c_free_stat:48,krb5_c_fx_cf2_simpl:48,krb5_c_init_st:48,krb5_c_is_coll_proof_cksum:48,krb5_c_is_keyed_cksum:48,krb5_c_keyed_checksum_typ:48,krb5_c_keylength:48,124,krb5_c_make_checksum:48,131,294,krb5_c_make_checksum_iov:48,130,295,krb5_c_make_random_kei:48,krb5_c_padding_length:48,krb5_c_prf:48,119,296,krb5_c_prf_length:48,117,krb5_c_prfplu:48,918,krb5_c_random_add_entropi:48,krb5_c_random_make_octet:48,krb5_c_random_os_entropi:48,krb5_c_random_se:48,krb5_c_random_to_kei:48,krb5_c_string_to_kei:48,126,393,krb5_c_string_to_key_with_param:48,krb5_c_valid_cksumtyp:48,krb5_c_valid_enctyp:48,krb5_c_verify_checksum:48,113,294,298,413,krb5_c_verify_checksum_iov:48,114,299,krb5_calculate_checksum:48,krb5_cc_badnam:223,krb5_cc_cache_match:48,krb5_cc_close:48,132,154,164,krb5_cc_copy_cr:48,krb5_cc_cursor:139,150,158,804,krb5_cc_default:48,krb5_cc_default_nam:48,135,156,krb5_cc_destroi:48,krb5_cc_dup:48,krb5_cc_end_seq_get:48,158,krb5_cc_gen_new:48,krb5_cc_get_config:48,krb5_cc_get_flag:48,krb5_cc_get_full_nam:48,krb5_cc_get_nam:48,krb5_cc_get_princip:47,48,krb5_cc_get_typ:48,krb5_cc_initi:48,145,krb5_cc_move:48,krb5_cc_new_uniqu:48,krb5_cc_next_cr:48,139,158,krb5_cc_nosupp:151,krb5_cc_notfound:132,154,165,krb5_cc_remove_cr:48,918,krb5_cc_resolv:48,144,krb5_cc_retrieve_cr:48,151,krb5_cc_select:48,krb5_cc_set_config:44,48,283,krb5_cc_set_default_nam:48,136,krb5_cc_set_flag:48,krb5_cc_start_seq_get:48,139,150,krb5_cc_store_cr:48,krb5_cc_support_switch:48,krb5_cc_switch:48,krb5_ccach:132,133,134,135,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,157,158,159,161,164,223,224,225,226,232,233,234,246,250,251,264,267,329,375,383,403,414,804,krb5_ccache_conf_data:910,krb5_cccol:920,krb5_cccol_cursor:162,163,164,804,krb5_cccol_cursor_fre:48,163,164,krb5_cccol_cursor_new:48,162,164,krb5_cccol_cursor_next:48,162,163,krb5_cccol_have_cont:48,krb5_cccol_last_change_tim:44,krb5_ccselect_moddata:920,krb5_ccselect_vt:923,krb5_certauth_hwauth:921,krb5_certauth_hwauth_pass:921,krb5_change_password:48,169,krb5_check_clockskew:48,krb5_checksum:48,113,129,131,294,298,413,804,813,861,krb5_checksum_s:48,krb5_chpw_fail:260,krb5_chpw_messag:48,krb5_chpw_pwdnull:260,krb5_cksumtyp:81,96,109,110,111,113,114,127,130,131,168,170,204,294,295,299,390,413,804,818,krb5_cksumtype_to_str:48,krb5_clear_error_messag:48,krb5_client_ktnam:15,900,917,953,krb5_clpreauth_moddata:922,krb5_clpreauth_modreq:922,krb5_config:21,34,917,918,953,krb5_config_cantopen:50,krb5_config_notenufspac:56,306,krb5_const:789,krb5_const_point:131,186,190,413,804,krb5_const_princip:50,56,57,141,155,182,283,300,301,310,320,340,341,342,343,347,348,349,350,359,362,388,406,407,408,409,804,krb5_context:46,48,49,50,51,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,171,172,173,174,175,177,178,179,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,379,380,381,382,383,384,386,387,388,389,393,396,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,804,838,856,865,866,872,877,888,918,923,krb5_copy_address:48,krb5_copy_authdata:48,krb5_copy_authent:48,krb5_copy_checksum:48,krb5_copy_context:48,krb5_copy_cr:48,krb5_copy_data:48,865,866,krb5_copy_error_messag:48,krb5_copy_keyblock:48,krb5_copy_keyblock_cont:48,krb5_copy_princip:47,48,krb5_copy_ticket:48,krb5_cred:46,48,51,150,151,153,159,166,220,224,225,226,232,233,234,235,260,264,267,272,323,325,330,354,375,382,401,403,414,789,804,krb5_cred_enc_part:804,823,krb5_cred_info:804,824,krb5_crypto_iov:98,100,103,114,130,288,290,295,299,804,krb5_crypto_typ:97,827,krb5_crypto_type_checksum:114,130,295,299,789,krb5_crypto_type_data:114,130,295,299,789,krb5_crypto_type_empti:789,krb5_crypto_type_head:789,krb5_crypto_type_pad:789,krb5_crypto_type_sign_onli:98,114,130,295,299,789,krb5_crypto_type_stream:789,krb5_crypto_type_trail:789,krb5_cryptotyp:97,804,827,krb5_cybersafe_secureid:789,krb5_data:48,58,59,60,99,100,101,102,103,106,108,113,117,119,120,121,123,124,125,126,129,141,155,166,169,185,223,229,230,258,265,279,284,287,288,289,290,294,296,298,321,323,324,325,326,327,328,329,330,331,333,335,340,341,347,354,355,356,357,358,359,360,364,375,382,383,393,404,405,804,821,826,827,831,836,840,856,861,865,866,868,869,870,882,890,895,krb5_db_entri:921,krb5_decode_authdata_contain:48,189,krb5_decode_ticket:48,krb5_decrypt:48,krb5_deltat:187,235,256,259,260,275,391,804,840,krb5_deltat_badformat:391,krb5_deltat_to_str:48,krb5_domain_x500_compress:789,krb5_eblock_enctyp:48,krb5_enc_data:99,102,287,289,804,807,809,823,845,846,883,krb5_enc_kdc_rep_part:804,845,krb5_enc_tkt_part:300,301,804,883,krb5_encode_authdata_contain:48,184,krb5_encpadata_req_enc_pa_rep:789,krb5_encrypt:48,krb5_encrypt_block:186,188,190,196,197,281,351,353,393,411,804,krb5_encrypt_s:48,krb5_enctyp:95,97,98,101,104,105,111,112,115,116,118,124,125,126,128,188,191,192,193,211,229,232,233,234,244,261,280,292,310,315,378,392,411,804,831,834,840,846,848,krb5_enctype_to_nam:48,krb5_enctype_to_str:48,krb5_end_seq_get:150,krb5_error:212,273,324,355,375,789,804,krb5_error_cod:46,49,50,55,56,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,137,138,139,140,141,142,143,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,186,187,189,190,192,193,194,195,196,197,214,217,223,224,225,226,227,228,229,230,231,232,233,234,235,236,238,245,246,247,248,250,251,252,253,257,260,261,262,264,265,266,267,268,269,271,272,273,274,275,276,277,278,279,280,281,282,286,287,288,289,290,293,294,295,296,298,299,300,301,302,303,304,305,306,307,308,309,310,311,313,314,315,316,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,340,341,342,343,344,345,346,347,351,352,353,354,355,356,357,358,359,360,361,363,364,368,369,371,372,373,374,375,376,377,378,379,382,383,384,385,386,387,389,390,391,392,393,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,804,855,856,865,866,872,877,923,krb5_euid:901,krb5_expand_hostnam:48,krb5_expire_callback_func:245,804,krb5_fast_requir:248,789,krb5_fcc_intern:135,krb5_fences_vt:923,krb5_fences_vtable_v2:923,krb5_find_authdata:48,krb5_finish_kei:48,krb5_finish_random_kei:48,krb5_flag:142,151,153,157,224,225,226,232,233,234,238,248,269,329,330,359,375,403,804,809,825,826,832,833,840,846,879,886,894,krb5_free_address:48,172,332,krb5_free_ap_rep_enc_part:48,357,375,krb5_free_authdata:48,173,195,322,krb5_free_authent:48,65,174,krb5_free_checksum:48,175,krb5_free_checksum_cont:48,113,294,krb5_free_cksumtyp:48,111,krb5_free_context:48,136,176,268,282,krb5_free_cr:48,177,224,375,405,krb5_free_cred_cont:46,48,150,153,272,401,krb5_free_data:48,178,321,krb5_free_data_cont:48,141,229,324,325,326,327,328,329,330,331,335,356,360,krb5_free_default_realm:48,227,krb5_free_enctyp:48,261,krb5_free_error:48,355,375,krb5_free_error_messag:48,228,krb5_free_host_realm:48,230,231,krb5_free_keyblock:48,67,72,76,180,280,315,krb5_free_keyblock_cont:48,115,125,126,181,krb5_free_keytab_entry_cont:48,309,310,krb5_free_princip:46,47,48,49,91,92,93,145,154,182,344,345,389,krb5_free_str:48,143,169,194,krb5_free_tgt_cr:48,354,krb5_free_ticket:48,183,359,363,krb5_free_unparsed_nam:48,406,408,krb5_fwd_tgt_cred:48,krb5_gc:403,krb5_gc_cach:224,789,krb5_gc_canonic:789,krb5_gc_constrained_deleg:789,krb5_gc_forward:789,krb5_gc_no_stor:789,krb5_gc_no_transit_check:789,krb5_gc_user_us:224,789,krb5_generate_seq_numb:327,krb5_get_credenti:48,375,380,381,403,krb5_get_credentials_renew:48,krb5_get_credentials_valid:48,krb5_get_default_realm:48,krb5_get_error_messag:48,837,krb5_get_etype_info:48,918,krb5_get_fallback_host_realm:48,krb5_get_host_realm:48,389,krb5_get_in_tkt_with_keytab:48,krb5_get_in_tkt_with_password:48,krb5_get_in_tkt_with_skei:48,krb5_get_init_cr:234,250,251,krb5_get_init_creds_keytab:48,232,krb5_get_init_creds_opt:46,229,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,275,804,krb5_get_init_creds_opt_address_list:789,krb5_get_init_creds_opt_alloc:46,48,237,239,krb5_get_init_creds_opt_anonym:789,krb5_get_init_creds_opt_canonic:789,krb5_get_init_creds_opt_chg_pwd_prmpt:789,krb5_get_init_creds_opt_etype_list:789,krb5_get_init_creds_opt_forward:789,krb5_get_init_creds_opt_fre:46,48,236,krb5_get_init_creds_opt_get_fast_flag:48,krb5_get_init_creds_opt_init:48,krb5_get_init_creds_opt_preauth_list:789,krb5_get_init_creds_opt_proxi:789,krb5_get_init_creds_opt_renew_lif:789,krb5_get_init_creds_opt_salt:789,krb5_get_init_creds_opt_set_address_list:48,krb5_get_init_creds_opt_set_anonym:46,48,krb5_get_init_creds_opt_set_canonic:48,krb5_get_init_creds_opt_set_change_password_prompt:48,krb5_get_init_creds_opt_set_etype_list:48,229,krb5_get_init_creds_opt_set_expire_callback:48,krb5_get_init_creds_opt_set_fast_ccach:48,krb5_get_init_creds_opt_set_fast_ccache_nam:48,229,246,krb5_get_init_creds_opt_set_fast_flag:48,247,krb5_get_init_creds_opt_set_forward:48,krb5_get_init_creds_opt_set_in_ccach:48,krb5_get_init_creds_opt_set_out_ccach:48,krb5_get_init_creds_opt_set_pa:48,254,krb5_get_init_creds_opt_set_pac_request:48,krb5_get_init_creds_opt_set_preauth_list:48,krb5_get_init_creds_opt_set_proxi:48,krb5_get_init_creds_opt_set_renew_lif:48,krb5_get_init_creds_opt_set_respond:46,48,krb5_get_init_creds_opt_set_salt:48,254,krb5_get_init_creds_opt_set_tkt_lif:46,48,krb5_get_init_creds_opt_tkt_lif:789,krb5_get_init_creds_password:46,48,233,243,245,352,918,krb5_get_permitted_enctyp:48,krb5_get_profil:48,krb5_get_prompt_typ:46,48,krb5_get_renewed_cr:48,225,krb5_get_server_rcach:48,krb5_get_time_offset:48,krb5_get_validated_cr:48,226,krb5_gic_opt_pa_data:804,krb5_init_context:48,205,krb5_init_context_kdc:269,789,krb5_init_context_profil:48,krb5_init_context_secur:269,789,krb5_init_creds_context:270,271,272,273,274,275,276,277,278,279,804,krb5_init_creds_fre:48,275,krb5_init_creds_get:48,272,274,275,krb5_init_creds_get_cr:48,271,krb5_init_creds_get_error:48,krb5_init_creds_get_tim:48,krb5_init_creds_init:48,270,271,279,352,krb5_init_creds_set_keytab:48,krb5_init_creds_set_password:48,krb5_init_creds_set_servic:48,krb5_init_creds_step:48,272,274,275,918,krb5_init_creds_step_flag_continu:279,789,krb5_init_keyblock:48,krb5_init_random_kei:48,krb5_init_secure_context:48,205,268,918,krb5_int16:804,krb5_int16_max:567,789,krb5_int16_min:789,krb5_int32:66,69,74,83,266,363,364,374,385,389,394,410,804,806,808,812,813,819,821,824,828,830,832,835,836,837,839,846,851,854,867,868,869,871,875,879,881,882,885,891,krb5_int32_max:569,789,krb5_int32_min:789,krb5_invalid_princip:50,krb5_is_config_princip:47,48,krb5_is_referral_realm:48,krb5_is_thread_saf:48,krb5_k:847,krb5_k_create_kei:48,krb5_k_decrypt:48,krb5_k_decrypt_iov:48,290,krb5_k_encrypt:48,krb5_k_encrypt_iov:48,288,krb5_k_free_kei:48,68,73,77,286,krb5_k_key_enctyp:48,krb5_k_key_keyblock:48,krb5_k_make_checksum:48,113,krb5_k_make_checksum_iov:48,114,299,krb5_k_prf:48,krb5_k_reference_kei:48,krb5_k_verify_checksum:48,129,krb5_k_verify_checksum_iov:48,130,295,krb5_kdc_profil:10,20,34,917,918,953,krb5_kdc_rep:232,233,234,804,krb5_kdc_req:804,krb5_kdc_sign_ticket:48,340,341,krb5_kdc_unreach:260,krb5_kdc_verify_ticket:48,krb5_kdcpolicy_moddata:930,krb5_kdcpreauth_moddata:931,krb5_kdcpreauth_modreq:931,krb5_kdcrep_modifi:267,krb5_kdcrep_skew:267,krb5_kei:48,68,73,77,87,89,287,288,289,290,291,294,295,296,297,298,299,804,krb5_key_st:847,krb5_keyblock:48,67,70,72,75,76,86,88,90,99,100,101,102,103,106,107,108,113,114,115,117,119,124,125,126,129,130,180,181,234,281,286,293,300,301,315,320,340,341,342,343,351,353,393,412,804,808,813,825,826,832,833,834,850,krb5_keytab:232,235,276,302,303,304,305,307,308,310,311,312,313,314,316,317,318,359,363,364,376,414,804,krb5_keytab_entri:217,302,309,310,314,316,804,krb5_keytab_entry_st:850,krb5_keyusag:99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,804,krb5_keyusage_ad_it:789,krb5_keyusage_ad_kdcissued_cksum:789,krb5_keyusage_ad_mt:789,krb5_keyusage_ad_signedpath:789,krb5_keyusage_ap_rep_encpart:789,krb5_keyusage_ap_req_auth:789,krb5_keyusage_ap_req_auth_cksum:789,krb5_keyusage_app_data_cksum:789,krb5_keyusage_app_data_encrypt:789,krb5_keyusage_as_rep_encpart:789,krb5_keyusage_as_req:789,krb5_keyusage_as_req_pa_enc_t:789,krb5_keyusage_cammac:789,krb5_keyusage_enc_challenge_cli:789,krb5_keyusage_enc_challenge_kdc:789,krb5_keyusage_fast_enc:789,krb5_keyusage_fast_finish:789,krb5_keyusage_fast_rep:789,krb5_keyusage_fast_req_chksum:789,krb5_keyusage_gss_tok_m:789,krb5_keyusage_gss_tok_wrap_integ:789,krb5_keyusage_gss_tok_wrap_priv:789,krb5_keyusage_iakerb_finish:789,krb5_keyusage_kdc_rep_ticket:789,krb5_keyusage_krb_cred_encpart:789,krb5_keyusage_krb_error_cksum:789,krb5_keyusage_krb_priv_encpart:789,krb5_keyusage_krb_safe_cksum:789,krb5_keyusage_pa_as_fresh:789,krb5_keyusage_pa_fx_cooki:789,krb5_keyusage_pa_otp_request:789,krb5_keyusage_pa_pkinit_kx:789,krb5_keyusage_pa_s4u_x509_user_repli:606,789,krb5_keyusage_pa_s4u_x509_user_request:605,789,krb5_keyusage_pa_sam_challenge_cksum:789,krb5_keyusage_pa_sam_challenge_trackid:603,789,krb5_keyusage_pa_sam_respons:602,789,krb5_keyusage_spak:789,krb5_keyusage_tgs_rep_encpart_sesskei:789,krb5_keyusage_tgs_rep_encpart_subkei:789,krb5_keyusage_tgs_req_ad_sesskei:789,krb5_keyusage_tgs_req_ad_subkei:789,krb5_keyusage_tgs_req_auth:789,krb5_keyusage_tgs_req_auth_cksum:789,krb5_kpasswd_accessdeni:789,krb5_kpasswd_autherror:166,789,krb5_kpasswd_bad_vers:789,krb5_kpasswd_harderror:166,789,krb5_kpasswd_initial_flag_need:789,krb5_kpasswd_malform:166,789,krb5_kpasswd_softerror:166,789,krb5_kpasswd_success:166,382,789,krb5_kt_add_entri:48,krb5_kt_client_default:48,krb5_kt_close:48,317,krb5_kt_cursor:308,314,318,804,krb5_kt_default:48,krb5_kt_default_nam:48,krb5_kt_dup:48,krb5_kt_end:314,krb5_kt_end_seq_get:48,318,krb5_kt_free_entri:48,314,krb5_kt_get_entri:48,krb5_kt_get_nam:48,krb5_kt_get_typ:48,krb5_kt_have_cont:48,krb5_kt_name_toolong:311,krb5_kt_next_entri:48,krb5_kt_notfound:313,krb5_kt_nowrit:302,316,krb5_kt_read_service_kei:48,krb5_kt_remove_entri:48,krb5_kt_resolv:48,krb5_kt_start_seq_get:48,308,krb5_ktname:43,900,917,953,krb5_kuserok:47,48,918,932,krb5_kvno:310,315,804,831,850,krb5_last_req_entri:804,832,krb5_libos_badpwdmatch:260,361,krb5_libos_pwdintr:260,krb5_lname_no_tran:932,krb5_lname_notran:56,krb5_lrq_all_acct_exptim:789,krb5_lrq_all_last_initi:789,krb5_lrq_all_last_renew:789,krb5_lrq_all_last_req:789,krb5_lrq_all_last_tgt:789,krb5_lrq_all_last_tgt_issu:789,krb5_lrq_all_pw_exptim:789,krb5_lrq_none:789,krb5_lrq_one_acct_exptim:789,krb5_lrq_one_last_initi:789,krb5_lrq_one_last_renew:789,krb5_lrq_one_last_req:789,krb5_lrq_one_last_tgt:789,krb5_lrq_one_last_tgt_issu:789,krb5_lrq_one_pw_exptim:789,krb5_magic:804,805,807,808,809,811,813,818,821,823,824,825,826,829,831,832,833,834,836,845,846,848,850,854,859,868,869,873,882,883,886,890,891,895,krb5_make_authdata_kdc_issu:48,krb5_marshal_credenti:48,krb5_merge_authdata:48,krb5_mk_1cred:48,krb5_mk_error:48,krb5_mk_ncred:48,323,krb5_mk_priv:48,79,krb5_mk_rep:48,krb5_mk_rep_dc:48,krb5_mk_req:48,80,81,330,krb5_mk_req_checksum_func:63,80,804,krb5_mk_req_extend:48,329,krb5_mk_safe:48,326,krb5_msgtype:503,504,505,506,531,543,718,741,759,760,804,832,845,846,krb5_no_2nd_tkt:267,krb5_no_tkt_suppli:223,267,krb5_nt_ent_principal_and_id:789,krb5_nt_enterprise_princip:789,krb5_nt_ms_princip:789,krb5_nt_ms_principal_and_id:789,krb5_nt_princip:91,93,344,789,krb5_nt_smtp_name:789,krb5_nt_srv_hst:223,389,789,krb5_nt_srv_inst:91,93,344,789,krb5_nt_srv_xhst:789,krb5_nt_uid:789,krb5_nt_unknown:389,789,krb5_nt_wellknown:91,93,344,789,krb5_nt_x500_princip:789,krb5_octet:804,805,811,818,848,859,882,890,891,krb5_os_localaddr:48,krb5_pa_data:804,832,845,846,krb5_pa_pac_req:804,krb5_pa_server_referral_data:804,krb5_pa_svr_referral_data:804,krb5_pac:300,301,333,334,335,336,337,338,339,340,341,342,343,804,krb5_pac_add_buff:48,krb5_pac_attributes_info:789,krb5_pac_client_claim:789,krb5_pac_client_info:333,789,krb5_pac_credentials_info:333,789,krb5_pac_data:863,krb5_pac_delegation_info:333,789,krb5_pac_device_claim:789,krb5_pac_device_info:789,krb5_pac_fre:48,338,339,krb5_pac_full_checksum:789,krb5_pac_get_buff:48,krb5_pac_get_client_info:48,918,krb5_pac_get_typ:48,krb5_pac_init:48,krb5_pac_logon_info:333,789,krb5_pac_pars:48,krb5_pac_privsvr_checksum:333,789,krb5_pac_requestor:789,krb5_pac_server_checksum:333,789,krb5_pac_sign:48,krb5_pac_sign_ext:48,krb5_pac_ticket_checksum:789,krb5_pac_upn_dns_info:333,789,krb5_pac_verifi:48,343,krb5_pac_verify_ext:48,301,krb5_padata_afs3_salt:789,krb5_padata_ap_req:704,789,krb5_padata_as_checksum:789,krb5_padata_as_fresh:789,krb5_padata_enc_sandia_securid:789,krb5_padata_enc_timestamp:789,krb5_padata_enc_unix_tim:789,krb5_padata_encrypted_challeng:789,krb5_padata_etype_info2:789,krb5_padata_etype_info:789,krb5_padata_for_us:789,krb5_padata_fx_cooki:789,krb5_padata_fx_error:789,krb5_padata_fx_fast:789,krb5_padata_get_from_typed_data:789,krb5_padata_non:789,krb5_padata_osf_dc:789,krb5_padata_otp_challeng:789,krb5_padata_otp_pin_chang:789,krb5_padata_otp_request:789,krb5_padata_pac_opt:789,krb5_padata_pac_request:789,krb5_padata_pk_as_rep:789,krb5_padata_pk_as_rep_old:789,krb5_padata_pk_as_req:789,krb5_padata_pk_as_req_old:789,krb5_padata_pkinit_kx:789,krb5_padata_pw_salt:789,krb5_padata_redhat_idp_oauth2:789,krb5_padata_redhat_passkei:789,krb5_padata_referr:789,krb5_padata_s4u_x509_us:789,krb5_padata_sam_challeng:789,krb5_padata_sam_challenge_2:789,krb5_padata_sam_redirect:789,krb5_padata_sam_respons:789,krb5_padata_sam_response_2:789,krb5_padata_sesam:789,krb5_padata_spak:789,krb5_padata_svr_referral_info:789,krb5_padata_tgs_req:789,krb5_padata_use_specified_kvno:789,krb5_parse_nam:46,47,48,345,406,krb5_parse_name_flag:47,48,krb5_plugin_no_handl:925,928,932,933,krb5_plugin_ver_notsupp:923,krb5_plugin_vt:923,krb5_pointer:186,190,197,281,315,353,363,364,375,804,815,852,krb5_post_recv_fn:380,804,krb5_pre_send_fn:381,804,krb5_preauth_fail:260,krb5_preauthtyp:232,233,234,254,804,840,859,krb5_prepend_error_messag:48,417,918,krb5_princ_compon:789,krb5_princ_nam:789,krb5_princ_nomatch:223,267,krb5_princ_realm:789,krb5_princ_set_realm:789,krb5_princ_set_realm_data:789,krb5_princ_set_realm_length:789,krb5_princ_siz:789,793,krb5_princ_typ:789,krb5_princip:46,47,48,49,91,92,93,94,132,145,147,154,182,218,223,229,235,260,264,267,275,315,319,363,364,375,382,383,384,389,412,414,804,813,825,826,832,833,836,845,846,850,861,862,883,krb5_principal2salt:48,krb5_principal_compar:47,48,349,350,388,krb5_principal_compare_any_realm:47,48,krb5_principal_compare_casefold:350,789,krb5_principal_compare_enterpris:350,789,krb5_principal_compare_flag:47,48,krb5_principal_compare_ignore_realm:350,789,krb5_principal_compare_utf8:350,789,krb5_principal_data:47,804,821,868,krb5_principal_parse_enterpris:345,789,krb5_principal_parse_ignore_realm:345,789,krb5_principal_parse_no_def_realm:789,krb5_principal_parse_no_realm:345,789,krb5_principal_parse_require_realm:345,789,krb5_principal_unparse_displai:408,789,krb5_principal_unparse_no_realm:408,789,krb5_principal_unparse_short:408,789,krb5_priv:789,krb5_process_kei:48,krb5_prog_etype_nosupp:378,krb5_prompt:352,804,872,krb5_prompt_typ:263,804,krb5_prompt_type_new_password:263,789,krb5_prompt_type_new_password_again:263,789,krb5_prompt_type_password:263,789,krb5_prompt_type_preauth:263,789,krb5_prompter_fct:260,275,804,krb5_prompter_posix:46,48,krb5_prop:15,34,41,krb5_pvno:789,krb5_pwd_data:804,krb5_pwqual_moddata:935,krb5_random_kei:48,krb5_rc_close:265,krb5_rc_requir:323,325,krb5_rc_st:874,krb5_rcach:71,85,265,804,krb5_rd_cred:48,325,krb5_rd_error:48,krb5_rd_priv:48,79,875,krb5_rd_rep:48,krb5_rd_rep_dc:48,krb5_rd_req:48,krb5_rd_safe:48,875,krb5_read_error:48,krb5_read_password:48,krb5_realm_branch_char:789,krb5_realm_cant_resolv:260,krb5_realm_compar:47,48,krb5_recvauth:48,364,375,krb5_recvauth_badauthv:789,krb5_recvauth_skip_vers:789,krb5_recvauth_vers:48,krb5_referral_realm:48,789,krb5_replay_data:323,325,326,331,354,356,360,804,krb5_responder_context:46,365,366,367,368,369,370,371,372,373,804,877,krb5_responder_context_st:876,krb5_responder_fn:257,804,876,krb5_responder_get_challeng:46,48,366,876,krb5_responder_list_quest:46,48,876,krb5_responder_otp_challeng:46,367,368,804,krb5_responder_otp_challenge_fre:46,48,368,krb5_responder_otp_flags_collect_pin:731,789,krb5_responder_otp_flags_collect_token:789,krb5_responder_otp_flags_nextotp:789,krb5_responder_otp_flags_separate_pin:789,krb5_responder_otp_format_alphanumer:789,krb5_responder_otp_format_decim:789,krb5_responder_otp_format_hexadecim:789,krb5_responder_otp_get_challeng:46,48,krb5_responder_otp_set_answ:46,48,krb5_responder_otp_tokeninfo:804,878,krb5_responder_pkinit_challeng:46,370,371,804,krb5_responder_pkinit_challenge_fre:48,371,krb5_responder_pkinit_flags_token_:740,krb5_responder_pkinit_flags_token_user_pin_count_low:789,krb5_responder_pkinit_flags_token_user_pin_final_tri:789,krb5_responder_pkinit_flags_token_user_pin_lock:789,krb5_responder_pkinit_get_challeng:46,48,krb5_responder_pkinit_ident:804,880,krb5_responder_pkinit_set_answ:46,48,krb5_responder_question_otp:46,48,789,krb5_responder_question_password:46,789,krb5_responder_question_pkinit:46,48,789,krb5_responder_set_answ:46,48,366,876,krb5_respons:804,krb5_roundup:789,krb5_safe:789,krb5_salttype_to_str:48,krb5_sam_must_pk_encrypt_sad:789,krb5_sam_send_encrypted_sad:789,krb5_sam_use_sad_as_kei:789,krb5_sendauth:48,363,krb5_server_decrypt_ticket_keytab:48,krb5_set_default_realm:44,48,krb5_set_default_tgs_enctyp:48,261,krb5_set_error_messag:48,krb5_set_kdc_recv_hook:48,krb5_set_kdc_send_hook:48,krb5_set_password:47,48,169,krb5_set_password_using_ccach:47,48,krb5_set_principal_realm:47,48,krb5_set_real_tim:48,krb5_set_trace_callback:48,krb5_set_trace_filenam:48,krb5_sname_match:47,48,359,krb5_sname_to_princip:47,48,krb5_string_to_cksumtyp:48,krb5_string_to_deltat:48,krb5_string_to_enctyp:48,krb5_string_to_kei:48,krb5_string_to_salttyp:48,krb5_string_to_timestamp:48,krb5_tc_match_2nd_tkt:153,789,krb5_tc_match_authdata:153,789,krb5_tc_match_flag:153,789,krb5_tc_match_flags_exact:153,789,krb5_tc_match_is_skei:153,789,krb5_tc_match_ktyp:153,789,krb5_tc_match_srv_nameonli:153,789,krb5_tc_match_tim:153,789,krb5_tc_match_times_exact:153,789,krb5_tc_noticket:789,krb5_tc_openclos:789,krb5_tc_supported_ktyp:153,789,krb5_tgs_name:789,krb5_tgs_name_s:789,krb5_tgs_rep:789,krb5_tgs_req:789,846,krb5_ticket:48,185,221,359,363,364,376,804,809,823,845,846,886,krb5_ticket_tim:274,402,804,825,826,832,833,krb5_timeofdai:48,krb5_timestamp:45,167,266,336,340,341,342,343,385,395,396,397,398,410,804,808,813,824,832,836,838,846,850,854,861,875,882,884,krb5_timestamp_to_sfstr:48,krb5_timestamp_to_str:48,krb5_tkt_authent:804,krb5_tkt_creds_context:399,400,401,402,403,404,804,krb5_tkt_creds_fre:48,403,krb5_tkt_creds_get:48,401,402,403,krb5_tkt_creds_get_cr:48,400,krb5_tkt_creds_get_tim:48,krb5_tkt_creds_init:48,400,krb5_tkt_creds_step:48,401,402,403,krb5_tkt_creds_step_flag_continu:404,789,krb5_trace:41,386,387,953,krb5_trace_callback:386,804,889,krb5_trace_info:386,804,888,krb5_trace_nosupp:386,387,krb5_transit:804,833,krb5_typed_data:804,krb5_ui_2:804,krb5_ui_4:333,335,337,358,804,808,813,836,875,krb5_unmarshal_credenti:48,krb5_unparse_nam:47,48,407,408,krb5_unparse_name_ext:48,krb5_unparse_name_flag:47,48,krb5_unparse_name_flags_ext:48,krb5_us_timeofdai:48,krb5_use_enctyp:48,krb5_verify_authdata_kdc_issu:48,krb5_verify_checksum:48,krb5_verify_init_cr:46,48,416,krb5_verify_init_creds_opt:46,414,415,416,804,krb5_verify_init_creds_opt_ap_req_nofail:789,krb5_verify_init_creds_opt_init:46,48,414,krb5_verify_init_creds_opt_set_ap_req_nofail:46,48,414,krb5_vprepend_error_messag:48,krb5_vset_error_messag:48,krb5_vwrap_error_messag:48,krb5_wellknown_namestr:789,krb5_wrap_error_messag:48,419,918,krb5_x:789,krb5_xc:789,krb5cc_1984:946,krb5cc_320:939,krb5cc_:917,946,953,krb5cc_p11795:939,krb5cc_ttypa:939,krb5ccname:15,136,897,941,942,943,946,953,krb5kdc:0,1,2,3,4,5,6,7,8,9,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,krb5kdc_err_key_exp:260,krb5kdc_err_more_preauth_data_requir:931,krb5krb_ap_err_skew:167,krb5krb_err_response_too_big:279,404,krb5lib:34,krb5plugin_service_locate_ft:933,krb5rcachedir:901,917,953,krb5rcachenam:901,953,krb5rcachetyp:901,953,krb5srv:39,krb:48,918,919,krb_ap_rep:48,krb_ap_req:48,krb_error:48,375,krbadmin:20,22,krbcanonicalnam:22,krbcontain:20,22,krbcore:936,krbdev:936,krbprincipalnam:22,krbtest:16,23,35,41,911,912,951,krbtgt:3,19,26,37,41,43,278,301,644,757,910,911,912,918,939,948,ksu:919,937,940,953,ksu_opt:946,kswitch:897,937,940,953,ktadd:14,15,23,32,34,900,kth:919,ktid:317,ktrem:3,ktremov:15,ktutil:1,2,900,903,918,ktype:128,232,233,234,261,846,kungliga:919,kv5m_context:135,156,kvno:3,6,11,14,15,16,23,26,29,32,34,41,310,414,831,883,911,918,937,940,lab:5,919,label:21,919,laboratori:919,lack:37,378,918,lag:946,larg:20,23,24,34,36,39,46,100,103,119,288,290,904,918,larger:24,32,37,896,914,918,largest:35,last:3,6,9,20,23,24,35,44,48,173,198,200,220,245,314,322,386,735,854,897,898,921,930,last_fail:6,last_req:832,last_success:6,lastpwd:6,latenc:24,later:3,19,20,21,23,26,33,37,38,39,41,43,136,247,740,896,911,914,918,919,925,932,latest:34,224,884,904,918,939,latter:388,897,launchpad:42,law:919,lawsuit:919,lawyer:919,layer:918,924,927,layout:43,917,lcom_err:945,lcurs:906,ldap:3,4,5,6,10,20,22,35,38,906,918,919,ldap_conns_per_serv:20,ldap_kadmind_dn:5,20,22,ldap_kadmind_sasl_authcid:5,20,ldap_kadmind_sasl_authzid:20,ldap_kadmind_sasl_mech:20,ldap_kadmind_sasl_realm:20,ldap_kdc_dn:5,20,22,ldap_kdc_sasl_authcid:5,20,ldap_kdc_sasl_authzid:20,ldap_kdc_sasl_mech:20,22,ldap_kdc_sasl_realm:20,ldap_kerberos_container_dn:20,22,ldap_serv:20,22,ldap_service_password_fil:20,22,ldapadd:22,ldapi:20,22,24,ldapsasl_nocanon:38,ldapuri:3,5,ldb:906,ldflag:906,ldif:22,ldname:906,ldopt:906,lead:20,946,learn:15,least:15,23,32,34,39,99,102,153,165,287,289,407,735,752,914,928,932,leav:3,14,24,28,32,33,left:20,21,280,912,923,leg:918,legaci:26,46,885,legal:280,946,legitim:25,46,901,946,lehman:919,lehmann:919,len:12,118,337,339,length:3,20,33,43,46,48,91,92,99,100,102,103,116,117,119,124,191,203,209,244,254,260,280,284,287,288,289,290,311,336,339,361,397,738,798,799,805,811,818,821,829,848,859,868,869,879,891,910,911,914,915,924,944,lengthi:918,less:3,20,25,53,897,904,914,915,918,let:99,287,933,952,letter:34,39,939,level:3,5,10,25,37,39,43,904,908,934,liabil:919,liabl:919,lib:37,904,906,917,919,945,libdefault:15,20,26,28,33,34,38,39,40,41,43,44,897,900,901,934,libdir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,libedit:906,libera:936,libev:919,libk5crypto:918,libkadm5:918,libkdb5:921,libkdb_ldap:22,libkeyutil:906,libkrb5:21,28,43,896,918,libkrb5support:918,libpam:42,librari:3,18,20,21,24,26,29,38,41,43,46,48,49,50,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,124,125,126,129,130,132,133,134,135,136,137,138,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,169,171,172,173,174,175,176,177,178,179,180,181,182,183,184,189,194,195,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,227,228,229,230,231,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,283,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,307,308,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,342,343,344,345,346,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,396,399,400,401,402,403,404,405,406,407,408,409,410,412,414,417,418,419,420,865,866,896,897,903,904,906,917,918,919,920,921,922,924,925,926,932,933,934,945,953,libtool:923,libverto:906,931,licens:905,906,909,918,life:3,5,19,23,942,lifetim:3,6,14,21,23,48,153,365,366,752,826,832,897,918,921,930,939,942,946,953,lightn:918,lightweight:903,like:3,6,8,12,14,15,19,21,23,32,33,34,37,38,39,41,43,192,897,901,902,904,906,908,923,927,939,likewis:946,limit:20,23,24,25,34,39,919,946,953,line:0,3,8,10,12,15,19,20,21,23,28,34,35,37,352,905,906,918,919,938,946,948,951,952,953,link:0,30,34,901,904,905,906,908,921,924,945,linkdn:3,linker:906,linux:897,906,918,list:0,2,3,4,6,10,14,15,19,21,23,26,28,32,34,36,39,40,43,46,48,93,153,164,184,189,195,214,230,231,320,378,412,417,418,419,833,876,897,906,907,917,919,921,922,925,931,934,938,939,943,946,951,952,list_mkei:23,list_polici:23,list_princip:23,listen:4,8,10,20,34,39,918,listinfo:936,listpol:3,listprinc:3,liter:923,littl:924,live:6,15,923,lk5crypto:945,lkrb5:945,lmdb:20,23,24,906,918,lname:56,946,lndir:903,905,lnsize_in:56,lnsl:906,load:8,14,17,20,24,34,38,40,906,924,934,load_dump:6,loadabl:20,21,924,loader:906,local0:20,local7:20,local:3,5,8,12,14,15,20,21,22,23,28,32,34,36,39,43,46,48,62,64,80,230,231,325,326,327,329,331,344,356,359,360,389,398,408,523,524,717,898,901,902,903,906,908,910,911,912,917,918,925,926,938,939,942,943,945,946,948,953,local_addr:44,64,82,local_appdata:21,local_port:84,local_realm:946,localauth:918,926,localauth_plugin:932,localedir:906,localfr:28,localhost:15,localhostnam:43,localstatedir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,locat:4,7,8,10,15,19,20,21,22,24,25,29,34,39,41,43,48,897,901,906,907,915,917,918,919,926,934,939,941,942,943,945,946,947,948,953,locate_plugin:933,lock:6,20,23,24,34,35,736,737,915,918,939,lockdown_kei:3,19,918,lockit:3,lockout:3,20,24,25,30,lockout_polici:35,lockoutdur:3,35,lockouttim:3,log:8,9,23,24,26,28,33,34,37,39,46,48,737,897,918,926,938,939,941,946,952,953,log_:20,log_daemon:20,logic:39,918,login:20,21,33,38,41,46,939,946,953,logon:20,333,658,918,logout:939,941,longer:11,19,23,25,33,39,43,49,65,67,68,72,73,76,77,78,91,92,93,111,113,115,120,122,123,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,906,918,939,942,look:0,8,12,15,20,21,23,28,37,38,39,43,389,904,906,923,939,942,946,lookasid:906,lookup:21,22,33,38,39,194,815,906,918,933,lose:6,loss:23,919,lost:17,904,919,lot:39,lower:3,19,21,43,230,934,944,951,lowercas:23,38,901,lowest:21,lpr:20,lr_type:854,lr_type_interpretation_mask:789,lr_type_this_server_onli:789,lrealm:210,227,377,lsocket:906,lss:906,ltd:919,luke:39,luser:319,lxml:908,mac:903,mach:21,919,machin:4,8,12,14,15,17,18,21,31,32,34,37,38,39,897,902,906,938,939,952,953,maco:21,342,897,903,918,919,macro:421,889,946,made:8,21,23,34,41,136,253,269,378,897,918,919,927,929,947,953,magic:135,156,805,807,808,809,811,813,818,821,823,824,825,826,829,831,832,833,834,836,845,846,848,850,854,859,868,869,873,882,883,886,890,891,895,mai:3,6,8,10,11,14,15,19,20,21,22,23,24,25,26,28,33,34,35,36,37,38,39,40,41,43,46,99,107,126,158,195,224,228,229,241,245,258,262,287,330,359,375,380,381,388,389,414,731,847,865,877,889,898,901,904,906,907,910,911,914,915,918,919,922,924,925,927,928,929,930,931,934,936,938,939,941,942,946,951,953,mail:20,897,939,946,951,mailbox:901,mailman:936,main:368,371,936,maintain:0,9,15,20,23,904,906,953,mainten:3,6,23,maj_ver:923,major:43,905,923,make:0,3,6,12,14,15,17,20,21,22,23,25,26,28,32,33,34,35,37,39,41,43,48,112,236,241,250,301,368,371,403,896,904,905,906,908,910,918,919,924,938,942,947,makedepend:903,makefil:904,906,908,malform:166,223,619,910,malici:3,46,malloc:934,man:0,3,21,901,906,918,manag:5,19,23,33,918,934,937,953,mandatori:23,113,114,129,130,294,295,298,299,912,mandir:906,mani:3,17,21,28,35,39,41,927,939,953,manipul:22,23,45,827,900,manner:5,919,manual:0,6,10,15,23,33,34,904,906,918,manual_test:904,map:21,28,33,34,43,906,918,924,925,932,946,951,mapsiz:20,24,marc:919,mark:3,6,20,21,34,342,919,marker:910,918,markup:0,908,marshal:910,911,918,masachusett:953,mask:66,83,142,153,157,masquerad:17,938,939,massachusett:909,919,master:3,4,5,6,10,20,26,34,35,39,41,902,907,917,918,master_kdc:21,39,master_key_nam:5,6,20,master_key_typ:5,6,14,20,34,match:0,2,3,6,15,19,20,21,28,29,33,37,38,43,48,59,60,119,151,153,195,223,224,267,301,310,359,363,375,403,745,746,747,748,749,750,751,753,756,846,897,901,915,917,918,934,948,951,953,materi:14,46,918,919,923,matt:919,matter:17,21,max_keytab_name_len:789,max_lif:6,20,34,max_read:20,24,max_renew_lif:6,max_renewable_lif:20,34,max_renewable_ticket_lif:5,max_ticket_lif:5,maxfailur:3,35,maximum:3,5,6,10,14,15,20,21,23,24,33,39,46,311,361,896,931,939,942,maxlif:3,19,23,maxnumb:3,maxpathlen:766,maxrenewlif:3,5,19,23,maxtktlif:5,23,mcred:153,md4:26,919,md5:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,mdb:24,mean:3,12,14,20,21,23,33,34,37,46,902,907,919,939,946,953,meaning:3,meant:939,measur:25,896,mech:28,917,918,953,mech_typ:924,mechan:3,16,20,21,22,23,36,37,39,40,43,46,154,250,692,693,901,910,911,917,918,922,923,926,931,933,942,953,mechglu:919,924,media:5,21,medvinski:946,meet:951,megabyt:20,24,905,mellon:919,member:20,membership:46,memori:15,41,43,48,93,142,223,231,302,323,325,326,331,356,357,360,414,827,897,900,906,918,923,925,932,memset:46,mention:20,22,919,merchant:919,merg:18,20,48,919,messag:3,8,20,21,24,34,41,48,78,363,375,381,531,538,718,741,807,832,836,845,846,865,866,883,889,901,903,911,918,919,923,938,939,945,946,948,953,message_out:169,message_typ:882,met:919,946,metadata:6,method:21,25,39,230,910,918,920,921,922,923,925,928,929,930,931,932,933,934,935,942,mexico:919,mgluep:919,mic:532,918,mic_token:43,michigan:919,microsecond:266,385,410,808,824,875,910,microsoft:20,21,26,29,42,43,382,452,918,924,microsystem:919,middl:901,might:14,17,23,28,29,34,35,38,39,43,904,906,910,919,923,938,953,migrat:14,23,41,918,miller:919,953,min:3,19,898,min_ver:923,minclass:3,minim:6,14,23,24,918,minimum:3,20,23,33,minlength:3,minlif:3,minor:14,43,905,918,923,924,933,minor_statu:43,924,minu:20,915,minut:5,20,21,23,898,901,938,939,953,mismatch:43,260,342,938,miss:267,908,mission:946,mistak:938,mistakenli:171,mit1:911,mit:3,5,12,14,15,17,19,20,21,24,28,30,31,32,34,38,39,41,43,45,46,896,897,903,905,906,908,909,910,911,912,922,924,926,927,931,934,936,938,939,942,953,mitig:23,25,46,901,918,mitiys4k5:34,mix:939,mk_cmd:906,mk_req:856,mkdir:904,mkei:3,6,mkey_convert:6,mkey_fil:6,mkeynam:5,6,10,mkeytyp:5,6,mkeyvno:5,6,mkvno:6,modbi:6,mode:3,6,8,14,20,41,467,479,730,906,918,942,946,modern:14,15,23,38,918,modestli:40,modif:6,9,19,21,34,919,modifi:3,6,9,18,19,23,25,28,34,40,43,100,103,114,136,144,146,158,288,290,295,312,365,366,866,906,918,919,929,934,942,modify_polici:23,modify_princip:23,26,modnam:21,28,modpol:3,modprinc:3,23,35,37,40,928,modtim:6,modul:3,4,6,20,21,23,35,252,268,906,908,916,917,918,920,921,922,925,927,928,929,930,931,932,933,934,935,942,953,module_nam:21,modulenam:21,modulepath:21,modulo:915,moira:919,mon:3,35,monitor:25,month:898,918,more:6,14,15,19,20,21,22,23,25,29,32,34,35,37,38,39,41,43,46,262,279,344,404,565,738,740,761,889,897,900,901,903,906,907,911,918,925,931,936,938,953,more_preauth_data_requir:922,morn:33,most:2,6,17,20,21,23,24,25,26,28,33,34,37,39,40,41,43,48,154,897,900,901,903,918,922,923,924,939,941,953,mostli:906,move:20,27,34,48,msdn:918,msec_dirbit:789,msec_val_mask:789,msg:213,msg_type:832,845,846,mslsa:897,mssclogin:21,much:14,25,38,153,938,multi:35,37,918,multihom:21,multipl:3,10,14,16,20,21,22,23,24,28,34,35,36,37,39,43,46,847,897,901,904,918,923,924,931,942,951,953,multipli:35,multithread:48,muse:919,must:2,3,7,8,11,14,15,19,20,21,22,23,24,26,28,29,32,33,34,35,36,37,39,43,46,57,58,69,74,78,99,100,102,103,113,117,119,121,125,126,136,146,152,153,158,173,176,195,198,200,220,224,228,241,247,268,270,271,274,275,279,282,287,288,289,290,294,296,312,314,317,322,326,331,345,359,368,371,373,375,402,407,728,729,731,738,740,742,745,746,747,748,749,750,751,752,753,756,827,847,870,897,904,905,906,910,911,912,914,915,918,919,921,923,924,925,928,930,931,932,934,938,939,944,946,948,953,mutabl:847,mutex:847,mutual:34,330,375,437,503,807,942,946,my_cach:946,my_proxi:21,my_respond:46,mydir:897,mydomain:20,mymodul:28,mypreauth:28,myrealm:46,myremotetokentyp:20,name:2,3,4,5,6,8,10,12,14,15,16,19,20,21,22,23,24,28,29,30,32,33,34,36,37,40,46,48,49,50,59,60,141,147,153,155,159,214,222,223,227,230,235,246,247,252,260,264,267,278,300,301,310,315,317,319,320,329,333,336,342,343,350,352,359,362,365,377,382,384,406,407,408,409,412,414,501,638,640,641,642,643,647,652,663,740,751,813,833,862,872,876,883,898,900,905,908,910,911,914,917,918,919,920,923,925,932,933,934,935,939,941,942,943,944,945,946,948,953,name_s:306,name_str:37,name_typ:37,namelen:311,nat:21,23,918,nation:919,nativ:33,368,371,896,906,910,914,917,918,natur:38,naval:919,navi:919,ncsa:42,nctx_out:176,ndnhnmn:898,nearli:3,necessari:3,14,21,22,23,24,33,34,37,39,43,120,122,123,260,343,387,407,922,923,927,938,939,necessarili:14,need:4,6,12,14,15,19,20,21,23,32,33,34,35,37,38,39,40,41,43,46,49,64,65,67,68,72,73,76,77,78,91,92,93,99,100,102,103,111,113,115,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,258,261,265,268,272,275,279,280,282,286,287,288,289,290,294,310,315,317,318,321,322,323,324,325,326,327,328,329,330,331,332,335,336,338,339,344,345,354,355,356,357,359,360,363,364,375,389,401,403,404,405,406,408,565,739,740,761,897,898,903,904,905,906,908,911,918,924,925,927,932,934,936,938,939,942,945,needchang:3,5,neg:28,885,914,neglig:919,negoex:918,926,negoti:910,918,924,neither:3,325,919,942,943,946,nersc:21,net:21,42,netbio:54,netbsd:918,919,netlib:906,netlogon:452,network:3,15,17,21,23,25,29,32,34,38,39,40,43,46,260,375,523,524,525,526,903,906,938,939,952,953,neuman:953,never:3,14,15,17,19,20,23,24,35,100,103,228,288,290,915,938,939,new_message_out:866,new_mkey_fil:6,new_princip:3,new_reply_out:865,866,new_stat:108,newer:6,14,20,23,906,newest:23,newli:3,6,26,37,107,113,125,126,176,294,329,330,359,363,364,375,897,904,918,newlin:344,352,newprinc:3,newpw:166,382,383,next:3,6,17,23,34,35,48,99,100,102,103,287,288,289,290,730,904,910,911,915,918,922,931,939,946,nfs:38,nii:946,nippon:919,nist:21,40,nitem:923,nktype:846,nlgilman:12,nls:918,no_auth_data_requir:3,no_host_referr:20,39,noaddress:21,nofail:46,nofork:4,nokei:3,23,37,non:2,3,14,19,21,23,26,33,37,43,44,99,100,102,103,113,129,130,155,224,241,245,250,269,287,288,289,290,294,298,299,300,315,330,342,359,375,382,383,388,865,910,914,918,942,945,946,nonc:358,824,832,846,918,none:3,20,21,22,26,36,37,57,58,132,273,285,304,369,372,901,911,946,953,nonexist:23,918,noninfring:919,nonrepudi:37,nonzero:21,224,948,noout:37,nopw:3,nor:919,943,946,norandkei:3,norealm:14,20,normal:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,north:919,nosync:20,24,notabl:23,note:3,5,6,14,20,21,23,26,32,34,154,241,245,602,603,605,606,898,904,931,939,942,946,952,953,noth:8,901,notic:17,24,919,notifi:936,novel:919,now:8,14,34,37,39,235,260,275,730,918,939,nowait:8,12,34,nrl:919,nss:919,nt_wellknown:763,ntlm:918,ntt:919,num:9,num_data:98,100,103,114,130,288,290,295,299,num_prompt:352,872,number:2,3,4,5,6,8,9,10,11,12,14,19,20,21,23,24,35,36,37,39,46,48,66,78,80,83,100,103,112,135,156,288,290,310,315,325,326,327,331,337,352,356,358,359,360,521,528,723,738,740,808,827,846,850,875,885,896,898,900,904,906,908,910,911,912,914,918,919,922,931,943,944,945,946,948,numer:6,34,166,382,383,898,918,943,numwork:10,object:3,5,6,20,21,22,23,24,25,28,35,36,43,48,262,269,740,904,906,910,918,919,920,921,922,923,924,925,928,929,930,931,932,933,934,935,observ:25,29,35,obtain:2,3,15,16,17,20,21,23,25,26,33,34,37,43,46,48,80,135,230,258,271,274,329,330,359,375,402,403,414,440,618,837,897,900,906,915,918,919,934,935,937,938,942,946,948,obvious:32,occasion:34,occur:3,6,9,78,342,386,918,occurr:171,octet:48,odd:939,oeap:481,off:15,21,24,25,28,33,35,39,352,361,offer:21,24,40,906,offlin:14,25,942,offset:10,48,410,910,915,often:20,22,23,28,33,38,39,900,927,953,oid:28,43,918,924,oid_op:919,ok_as_deleg:3,ok_to_auth_as_deleg:3,okai:3,939,943,old:2,3,6,14,20,21,23,34,37,243,346,420,918,938,old_cod:419,420,old_princip:3,oldcc:919,older:14,23,918,931,oldest_kvno_to_keep:3,om_uint32:43,924,omit:11,22,28,39,408,716,717,910,914,934,onc:3,6,14,15,21,23,34,43,46,78,361,735,897,901,904,929,933,938,953,one:2,3,5,6,9,15,16,17,19,20,21,23,24,25,26,28,32,34,35,36,37,38,39,40,41,43,46,48,153,165,243,263,264,270,271,275,279,330,333,344,356,360,389,740,897,898,900,901,904,906,907,908,910,911,915,918,920,922,923,925,928,931,932,938,939,942,944,946,947,ones:21,25,34,904,923,939,onli:3,4,6,8,9,10,14,15,18,19,20,21,22,23,26,28,32,33,34,35,38,39,41,43,46,48,54,114,153,224,228,241,245,295,325,361,365,366,545,731,751,862,889,896,897,902,904,906,910,915,918,919,924,925,931,932,934,938,939,942,946,948,951,953,onlin:14,25,onlyrealm:14,20,onto:17,21,32,34,906,924,939,opaqu:48,286,847,918,open:6,21,24,46,48,50,305,315,317,342,387,755,771,901,915,918,919,935,942,openldap:3,5,23,24,30,906,919,openldap_ldapconf:20,opensc:917,openssh:28,38,openssl:21,37,906,918,openvis:3,919,oper:2,3,5,9,10,14,15,19,20,21,22,24,26,28,33,34,35,37,41,43,48,62,119,121,136,156,158,382,383,386,755,837,847,897,903,904,905,906,911,915,917,918,919,928,932,942,946,953,oppos:37,opt:46,229,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,945,optim:906,optimist:20,40,48,254,option1:21,option2:21,option:2,11,12,15,19,22,23,24,28,29,34,35,36,37,39,43,48,59,60,224,225,226,229,232,233,234,235,253,260,269,275,325,326,329,330,331,344,375,403,414,416,546,738,808,809,813,824,825,832,836,840,841,846,884,900,905,918,921,922,923,925,928,930,932,939,953,oracl:42,919,order:3,4,6,14,16,17,19,20,21,22,23,32,33,34,35,37,38,43,46,48,245,738,897,900,901,905,906,910,914,919,920,924,934,953,ordinari:14,904,918,953,ordinarili:2,15,245,org:5,21,22,42,904,905,908,918,919,936,952,953,organ:905,919,orig_hostnam:194,origin:3,14,21,23,39,43,46,906,919,924,osconf:905,osf:680,other:3,4,6,10,14,15,19,20,21,23,24,26,28,34,35,37,38,39,43,46,154,279,310,359,404,644,740,837,896,897,900,903,904,905,906,910,911,914,918,919,922,924,928,929,930,932,933,934,936,938,939,944,946,951,952,othernam:37,otherrealm:21,otherwis:3,6,14,20,21,23,29,33,34,36,37,39,43,49,52,54,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,95,96,97,98,99,100,102,103,104,105,106,107,108,110,111,112,113,114,115,116,117,118,121,124,125,126,129,130,134,142,150,153,157,158,162,163,164,166,170,172,173,174,175,177,178,180,181,182,183,184,185,187,189,192,193,195,217,224,235,236,238,248,260,261,264,265,266,267,271,272,273,274,275,276,277,278,279,280,283,284,285,286,287,288,289,290,294,295,296,298,299,300,301,319,321,322,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,345,347,348,349,350,354,355,356,357,358,359,360,361,362,363,364,374,375,376,385,388,390,391,392,394,395,397,398,400,401,402,403,404,405,414,897,906,911,919,921,923,930,939,942,943,944,946,otp:3,16,25,30,46,368,696,698,699,722,738,917,918,our:20,36,903,904,919,out:3,8,12,21,23,24,33,35,36,37,41,43,49,50,56,59,60,63,64,65,66,67,68,69,71,72,73,74,76,77,78,89,91,92,93,95,96,97,99,101,102,104,105,107,108,111,112,113,115,116,117,118,119,121,124,125,126,129,130,132,134,135,138,141,142,143,145,149,150,152,153,154,158,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,194,195,223,224,227,229,230,231,235,236,238,251,260,261,262,264,265,266,267,268,269,272,273,274,275,279,280,282,286,287,289,294,296,298,299,301,303,305,306,307,308,310,311,314,315,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,335,336,337,338,339,344,345,347,354,355,356,357,358,359,360,361,363,364,368,371,374,375,382,383,389,390,391,392,394,395,396,397,398,401,402,403,404,405,406,408,409,410,412,532,533,535,536,539,897,906,918,919,938,941,948,out_cr:224,225,226,375,out_flag:238,outaddr:172,outag:20,39,outauthdat:322,outbuf:223,327,328,329,330,outcc:134,outcksum:131,outcr:177,outdata:178,outfil:6,outgo:15,924,outlin:0,29,outprinc:182,outptr:186,190,output:3,6,9,15,20,23,26,34,41,43,48,99,100,101,102,103,107,117,119,166,181,224,279,287,288,289,290,296,352,359,361,364,404,866,875,897,908,918,920,921,923,942,943,945,948,953,output_cr:43,output_cred_handl:43,output_message_buff:43,output_nam:924,output_payload_buff:43,outreach:14,outsid:15,897,953,over:0,10,14,15,20,21,23,24,28,32,34,36,38,39,43,46,48,107,113,114,117,155,164,294,295,296,300,301,325,363,375,817,918,920,926,934,938,939,overrid:3,6,10,14,20,21,26,36,48,378,380,381,386,387,865,906,914,918,942,overridden:2,10,11,19,21,901,918,overview:903,overwrit:6,23,384,941,overwrite_cr:43,overwritten:20,827,own:0,3,15,20,21,23,24,25,34,38,381,918,921,923,924,935,938,939,946,952,owner:919,ownership:901,p27:42,pa_as_fresh:912,pa_config_data:910,pa_hardwar:931,pa_real:922,pa_replaces_kei:931,pa_typ:859,910,pa_type_list:922,931,pac:3,20,48,340,341,650,660,685,860,863,918,942,pac_client_info:300,301,336,343,pac_out:301,pac_privsvr_enctyp:3,packag:29,34,904,919,packet:20,25,36,330,918,931,pad:43,48,99,100,103,104,287,288,290,536,915,padata:845,846,922,931,padl:919,page:0,3,21,23,905,906,918,pair:6,20,21,26,841,pam:33,parallel:10,39,904,918,param:49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,paramet:5,6,10,20,28,35,36,43,46,48,169,229,323,325,343,906,907,910,917,918,924,928,931,946,parent:21,39,897,917,pars:3,28,43,45,46,48,235,260,264,267,278,356,360,368,371,903,910,918,part:14,21,23,26,32,41,199,264,267,278,283,301,344,359,384,823,833,845,883,897,902,910,911,915,919,923,924,934,946,953,parti:28,36,43,918,919,953,partial:14,19,23,46,915,particip:21,34,particular:2,11,14,16,17,19,20,21,37,43,46,317,904,906,919,938,939,particularli:14,17,25,39,938,945,partit:39,pass:14,20,21,28,36,43,99,100,102,103,228,250,270,271,275,279,280,282,287,288,289,290,325,368,371,380,381,382,386,387,889,906,924,933,942,946,passcod:669,passiv:25,passkei:693,passwd:5,33,895,919,946,passwd_phrase_el:804,873,password:3,4,5,6,9,10,11,14,15,16,17,19,20,21,22,23,24,25,26,28,29,32,33,34,35,36,37,39,40,43,48,233,245,258,618,620,719,720,721,739,740,897,902,917,918,922,926,937,939,944,946,952,953,password_changing_servic:3,password_expir:245,838,past:3,936,pasword:25,patch:23,path:4,5,8,20,21,22,25,28,29,34,39,359,904,906,908,918,946,953,pathnam:4,8,21,23,24,28,29,37,900,904,907,953,pattern:6,21,28,951,payment:919,pdf:0,pem:16,21,29,37,948,peopl:20,pepper1:107,pepper2:107,pepper:48,per:3,6,9,10,14,18,20,21,23,26,28,36,39,43,46,897,920,922,925,928,929,931,932,933,934,935,perfect:901,perform:3,4,5,6,12,14,19,20,21,22,24,25,26,34,37,38,39,43,46,62,91,250,254,258,359,363,375,382,383,386,416,437,847,897,918,919,928,929,930,939,perhap:3,14,20,23,24,period:6,8,14,17,20,21,23,24,35,939,942,permiss:3,18,19,20,23,34,43,137,147,159,897,918,919,939,permit:3,19,20,21,26,36,48,194,251,356,360,917,918,919,942,952,permitted_enctyp:21,26,persist:21,897,person:17,34,919,938,939,pertain:10,919,pgp:905,936,phase:946,phrase:895,physic:32,39,pick:20,25,37,904,pid:4,8,10,918,pid_fil:4,8,10,piec:35,265,pin:369,372,728,731,735,736,737,738,870,pipermail:936,pkc:21,740,pkcs11:21,906,917,918,919,pkcs11_modnam:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,pkcs12:21,pkinit:3,16,23,25,30,40,41,107,649,687,688,689,690,740,906,913,918,919,926,942,pkinit_allow_upn:20,21,pkinit_anchor:3,20,21,37,942,pkinit_cert_match:3,21,37,918,pkinit_dh_min_bit:20,21,pkinit_eku:21,pkinit_eku_check:20,21,37,pkinit_ident:20,21,37,pkinit_ind:16,20,pkinit_kdc_hostnam:21,37,pkinit_pool:20,21,pkinit_require_crl_check:20,21,pkinit_require_fresh:20,37,pkinit_revok:20,21,pkinit_san:21,place:2,8,14,15,21,26,28,32,33,37,39,43,44,46,48,107,117,229,264,267,279,296,301,336,364,376,404,827,866,906,908,915,921,929,941,946,952,placehold:903,905,plain:911,plaintext:116,533,plan:23,platform:24,885,896,897,904,905,906,918,pleas:0,15,20,738,936,plu:20,939,946,plug:919,pluggabl:21,28,918,923,926,929,934,plugin:3,20,22,903,906,916,917,918,919,934,plugin_base_dir:21,pnl:21,point:3,14,15,21,23,32,34,43,330,407,414,827,897,902,906,918,936,pointer:24,43,44,46,91,135,136,173,198,200,203,209,213,217,220,230,231,256,262,263,322,323,330,332,357,365,366,386,395,407,825,827,832,872,883,920,921,922,923,928,929,931,933,935,pol:3,19,polici:3,4,5,6,16,19,20,21,24,25,34,35,169,359,918,926,927,928,935,939,943,944,policy_nam:5,poll:4,8,20,23,918,pool:14,pop:32,popul:14,24,44,148,915,popular:34,port:3,4,7,8,10,12,15,20,21,23,34,36,41,44,48,62,331,524,526,917,953,portabl:897,portiion:919,portion:21,36,153,266,317,385,410,751,808,813,824,836,875,919,portmapp:23,portnum:10,pose:14,posit:6,19,28,35,885,914,posix:6,885,896,911,912,915,possess:37,939,possibl:3,5,6,14,15,17,20,21,22,24,25,26,32,34,35,37,38,39,43,46,48,93,166,224,740,900,901,906,918,919,922,923,931,936,939,951,post:48,897,936,postdat:3,19,20,267,939,942,943,potenti:14,32,34,46,902,power:20,24,25,39,918,practic:14,21,46,99,287,918,pre:0,16,20,22,43,48,91,260,329,330,359,363,364,375,380,859,908,911,918,919,929,942,pre_auth_typ:232,233,234,preauth:20,672,841,910,918,919,922,931,preauth_list:254,840,preauth_list_length:254,840,preauth_plugin:922,931,preauth_requir:922,931,preauthent:3,16,20,21,23,25,28,30,37,41,46,48,250,722,832,845,846,859,876,910,918,923,926,939,942,943,prebuilt:904,preced:10,14,21,39,914,946,953,precis:33,precomput:48,predefin:39,prefer:3,21,38,43,236,900,901,918,925,preferred_preauth_typ:21,prefix:20,39,48,344,904,906,918,924,945,946,preiniti:117,119,121,296,prepar:48,79,318,403,prepend:39,346,420,906,preprocessor:906,prerequisit:908,preselect:942,presenc:21,910,present:8,14,16,20,21,22,23,28,34,36,37,43,46,165,245,301,325,333,336,345,354,365,366,373,388,618,711,713,714,884,900,901,910,914,915,918,934,939,943,948,953,preserv:6,919,presid:919,pressvr:14,presum:901,prevent:2,3,19,20,21,25,26,29,40,330,521,522,901,918,919,929,938,942,previou:0,3,21,23,34,37,42,44,156,250,261,279,384,404,419,420,910,previous:3,6,23,43,48,904,918,prf:48,118,911,918,primari:3,4,7,8,9,14,17,20,21,23,24,31,35,38,39,41,43,48,145,897,918,920,929,933,935,936,941,942,947,951,953,primarili:24,55,949,primary_kdc:21,princ1:37,348,349,350,362,princ2:37,348,349,350,362,princ:3,6,21,49,50,91,92,93,94,388,793,794,795,796,797,798,799,800,911,princ_flag:6,princ_lockout:6,princ_look_ahead:946,princ_meta:6,princ_nam:37,941,princ_out:154,princ_stringattr:6,princ_tktpolici:6,princip:2,3,4,5,6,7,8,9,10,11,12,14,16,17,19,20,21,22,24,25,26,28,29,30,31,32,33,36,37,40,41,43,45,46,48,78,141,147,148,153,155,159,166,223,229,235,242,260,264,267,275,300,301,310,315,320,329,333,340,341,342,343,359,363,364,375,403,406,407,408,409,412,414,501,641,648,663,707,709,751,763,825,826,832,836,845,846,850,862,897,898,900,901,907,911,912,914,917,918,920,921,927,928,930,931,932,935,938,939,942,943,944,946,947,948,951,952,953,principal_databas:8,principal_nam:37,principal_out:344,345,principal_seq:37,principalnam:918,principl:710,princnam:25,35,40,46,897,princname_out:336,print:3,6,7,8,361,918,945,946,948,printabl:365,373,prior:6,8,14,20,21,23,39,41,43,136,265,919,923,priorit:39,prioriti:14,20,39,230,897,901,920,priv:48,918,privat:21,37,718,906,911,912,918,936,privileg:3,19,34,43,48,253,918,938,952,953,privsvr:300,301,342,343,privsvr_kei:340,341,prng:121,918,probabl:6,12,14,34,904,problem:14,23,330,901,918,936,proce:946,procedur:6,26,32,34,903,904,proceed:23,process:3,4,6,8,9,10,14,15,20,21,23,24,25,34,38,43,46,48,136,154,169,355,414,897,900,901,918,921,922,925,928,929,930,931,933,935,942,953,procur:37,919,produc:6,21,46,104,124,905,915,922,925,931,943,945,product:34,919,prof_no_rel:934,profil:15,18,20,21,48,136,388,897,900,901,903,907,918,919,926,profile_module_init:934,profile_module_init_fn:934,profile_releas:262,profile_vt:934,profit:919,program:2,3,4,6,8,12,15,20,21,23,26,28,30,32,33,34,37,38,39,41,43,46,56,268,378,901,903,904,905,908,910,917,918,919,939,945,946,953,programm:945,programmat:46,progress:14,20,prohibit:3,919,project:0,701,906,918,919,923,953,promot:14,919,prompt2:361,prompt:2,3,5,6,23,34,46,48,260,361,719,720,721,722,870,872,902,918,922,938,939,944,946,prompter:245,260,263,275,352,870,872,877,prone:918,proof:48,939,propag:4,6,7,8,14,17,19,20,21,24,31,35,903,918,919,938,proper:12,23,37,359,904,properli:29,34,37,41,896,906,properti:21,937,propog:8,proponli:4,23,proprietari:36,protect:6,15,25,26,32,35,37,40,43,78,247,326,331,740,847,901,918,protocol:2,3,14,21,23,29,39,43,48,247,301,321,405,674,695,723,832,836,845,846,901,903,916,918,928,939,942,948,953,prototyp:903,923,prove:46,912,922,931,provid:0,3,4,10,15,21,22,23,24,26,28,29,32,34,37,38,39,41,43,46,98,229,359,372,414,896,897,904,906,918,919,921,924,927,930,934,938,946,953,provis:919,proxi:20,21,25,30,36,39,43,918,939,943,proxiabl:3,20,21,48,840,939,942,943,946,proxy_imperson:910,pseudo:48,903,pto:183,ptr:38,43,197,281,339,353,802,803,832,833,883,pty:903,919,publish:38,919,pull:918,punctuat:3,21,34,944,purg:3,6,14,918,purge_mkei:23,purgekei:14,23,37,purpos:10,15,21,23,26,28,34,906,919,942,949,put:4,10,34,344,808,pw_expir:6,pwchang:20,pwd:904,pwexpdat:3,pwexpir:3,19,26,pwqual:28,918,926,pwqual_plugin:935,pwservic:20,python:29,908,918,qop_req:43,qop_stat:43,qualif:21,918,qualifi:3,15,19,21,23,953,qualify_shortnam:21,38,918,qualiti:21,28,918,926,937,queri:3,21,39,43,46,918,question:0,20,39,48,368,371,738,739,740,876,877,936,queue:20,919,quietli:941,quit:6,32,quot:3,6,344,406,408,898,quux:21,r13:6,r18:6,r_address:824,rabbit:39,radiu:20,36,918,randkei:3,14,23,26,34,37,918,random:3,6,14,20,21,23,25,34,48,911,915,918,random_data:124,randomli:2,26,randsourc:120,rang:942,rapidli:15,rare:24,37,898,900,rassen:919,rather:3,4,5,6,10,15,20,21,23,32,38,39,56,279,404,897,904,911,924,942,raw:20,904,rc2:479,rc4:20,26,918,rcach:43,71,85,265,323,325,901,rcache2:901,918,rcmd:21,rcommand:643,rcptr:265,rctmpdir:907,rctx:46,365,366,367,368,369,370,371,372,373,877,rdata_out:323,325,326,331,354,356,360,rdn:21,33,38,43,reach:20,21,24,164,314,915,react:243,read:3,5,6,9,11,20,21,22,23,34,35,37,46,48,250,260,262,318,352,371,414,906,914,918,931,934,938,943,953,readabl:15,21,32,169,898,900,902,918,reader:21,24,readi:6,34,readlin:906,readm:903,905,real:21,350,385,707,946,realiti:0,realloc:44,realm1:10,realm2:10,realm3:10,realm:3,4,5,6,7,8,10,12,14,15,16,19,22,24,25,26,29,30,33,34,36,37,38,40,43,44,46,48,49,50,59,60,91,92,93,94,153,214,230,235,251,260,264,267,278,279,284,300,342,344,345,350,359,388,389,403,404,408,502,708,711,712,713,714,716,717,727,795,796,797,798,813,821,825,833,836,845,846,862,865,866,868,869,883,897,906,907,910,911,912,914,917,918,926,933,935,938,939,942,946,951,952,953,realm_try_domain:21,realmlist:214,realmnam:37,46,realmsp:230,231,reason:14,17,21,24,28,33,39,342,896,910,919,938,939,946,reboot:20,34,902,rebuild:906,908,receiv:3,4,8,9,14,20,21,37,39,41,43,48,223,245,273,325,326,330,331,354,356,360,363,374,375,876,921,922,931,932,935,939,953,recent:2,6,17,20,25,26,37,48,901,912,918,939,recipi:824,919,recogn:3,20,21,37,41,942,951,recognit:918,919,recommend:5,6,15,17,20,21,23,32,34,39,40,43,904,905,906,936,939,941,recomput:136,reconf:903,record:6,10,21,33,34,38,39,901,911,914,915,918,recov:6,918,922,recurs:6,24,918,recv_hook:380,recvauth:363,375,red:692,693,919,953,redhat:918,redirect:21,34,redistribut:919,reduc:14,21,33,100,103,288,290,906,redwood:919,ref:5,refcount:918,refer:3,5,15,19,20,22,23,39,43,45,48,87,89,138,286,307,862,918,919,927,932,946,referenc:22,910,919,referr:20,21,39,230,231,343,389,694,703,727,910,918,925,939,referral_valid_until:861,referred_realm:861,reflect:23,34,100,103,136,158,262,288,290,325,326,331,356,360,911,912,reforward:939,refrain:924,refresh:15,43,910,918,refresh_tim:910,refus:12,14,34,regard:919,regardless:6,19,21,43,regener:908,regent:919,regexp:21,region:43,114,130,295,299,827,regist:4,21,23,28,39,919,926,953,registr:21,regress:904,regul:919,regular:14,21,34,37,43,946,regularli:17,39,reiniti:148,918,reject:12,15,16,20,21,34,166,620,939,reject_bad_transit:20,rekei:14,rel:20,21,48,898,904,910,946,relai:10,relat:4,6,20,21,22,28,29,35,37,39,169,826,918,919,relationship:21,932,releas:0,3,4,6,8,14,15,16,19,20,21,23,24,25,26,33,35,37,38,39,40,41,43,46,48,68,73,77,82,84,91,93,113,125,126,154,163,176,203,209,214,230,231,265,268,282,294,314,318,344,896,897,901,911,912,914,915,918,921,922,923,924,925,927,928,929,930,931,932,942,948,953,relev:34,38,78,195,300,911,reli:15,34,reliabl:24,relianc:21,relinquish:85,remain:3,4,6,14,20,43,44,245,645,896,897,914,915,918,919,929,931,946,rememb:34,37,910,remot:3,4,7,15,20,23,33,38,43,48,62,64,169,223,325,326,331,356,359,360,382,383,525,526,903,918,938,939,946,952,953,remote_addr:44,64,82,359,remote_port:84,remotehost:949,remov:2,3,6,20,23,26,28,37,38,48,155,904,918,929,938,renam:3,906,918,929,rename_sect:934,render:14,904,renew:3,5,6,20,21,23,48,846,884,918,930,939,942,943,946,953,renew_lif:256,840,renew_lifetim:21,renew_til:825,833,884,910,renewable_lif:942,renprinc:3,reorgan:918,rep:185,199,327,328,357,358,807,832,845,860,rep_cksum:861,rep_result:375,repeat:6,20,21,34,847,910,924,repl:357,replac:3,5,21,23,28,34,70,75,94,186,188,190,191,196,197,225,226,232,233,234,281,351,353,411,906,914,918,919,922,942,replai:21,43,48,78,323,325,326,331,354,356,359,360,521,522,875,897,899,907,913,917,918,953,repli:12,26,46,107,245,258,267,279,352,357,358,380,381,404,730,845,865,866,870,911,918,922,931,942,replic:8,34,replica:4,6,7,8,9,14,15,17,20,21,23,31,32,35,41,903,918,replica_datatran:7,34,917,replica_datatrans_hostnam:23,replica_dumpfil:8,replica_host:7,replicahostnam:8,reply_out:866,report:6,38,903,918,936,942,948,repositori:908,repres:3,21,34,43,158,885,896,900,911,919,represent:21,43,48,344,345,398,407,408,813,832,845,846,883,896,910,914,919,representaton:807,reproduc:919,req:21,26,37,245,329,330,359,504,846,req_pac:253,request:3,4,6,8,9,10,14,15,16,19,20,21,22,23,24,25,28,33,35,36,37,38,40,43,46,48,153,166,195,223,224,229,235,241,253,260,267,276,277,330,359,378,403,503,505,506,619,674,695,752,759,760,807,809,832,846,854,898,900,901,910,911,912,918,921,922,924,930,931,936,939,942,946,948,953,request_fini:922,request_init:922,request_tim:882,requested_principal_nam:861,requestor:660,requir:3,4,6,8,9,12,14,15,16,20,21,22,23,24,25,26,28,32,34,35,36,37,38,39,40,43,46,48,98,112,116,117,236,241,247,248,301,323,325,326,331,354,356,360,544,738,862,877,896,897,904,905,906,908,911,918,919,921,924,931,934,939,944,952,953,require_auth:3,16,918,requires_hwauth:3,931,requires_pre_auth:23,requires_preauth:3,5,14,23,25,35,37,40,requires_pwchang:5,requisit:908,research:919,resembl:740,reserv:909,919,reset:3,9,35,46,157,386,918,resid:15,39,46,902,919,951,952,residu:21,39,152,317,897,901,932,934,953,resiz:407,resolut:15,33,38,43,230,918,946,resolv:15,33,48,260,317,897,906,918,943,946,resourc:43,46,904,916,918,respect:3,11,34,82,84,224,344,898,918,919,924,938,respond:4,48,367,368,369,370,371,372,731,738,739,740,876,877,918,931,respons:3,4,37,40,46,85,166,229,245,279,357,404,503,505,543,565,739,759,761,807,846,882,918,919,922,925,931,942,949,953,rest:28,906,restart:12,14,19,20,23,24,34,37,41,restor:6,23,918,restrict:3,5,14,19,21,23,48,224,919,928,930,942,946,restrict_anonymous_to_tgt:20,37,restructuredtext:0,resubmit:942,result:0,14,15,21,23,37,39,40,41,43,46,48,99,102,107,117,124,144,156,158,189,195,228,287,289,296,320,375,376,403,405,406,407,420,906,910,911,915,918,919,920,924,925,930,931,932,939,946,948,result_cod:166,382,383,result_code_str:166,382,383,result_str:166,169,382,383,resum:23,resync:4,9,23,918,resynchron:9,ret:46,347,ret_as_repli:232,233,234,ret_princ:389,ret_valu:59,60,retain:2,3,14,20,23,919,928,930,952,retir:13,23,918,retransmit:906,retri:20,36,38,39,retriev:3,6,23,24,41,43,44,46,48,158,271,310,366,375,400,403,876,918,919,948,return_padata:931,return_pwd:361,retval:49,50,51,53,55,56,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,121,124,125,126,129,130,132,133,134,135,137,139,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,285,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,308,310,311,313,314,315,316,317,318,319,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,373,374,375,376,377,378,382,383,384,385,387,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,923,reus:23,rev:6,24,revers:6,15,21,33,43,919,943,review:905,revis:918,919,revoc:20,21,revok:20,21,35,rfc4120:29,rfc:14,20,21,39,43,48,320,382,383,412,442,443,446,447,448,450,451,458,459,460,461,462,463,464,465,466,511,540,542,600,664,667,668,669,670,671,672,673,675,676,677,678,680,681,682,683,686,687,689,691,698,701,703,705,738,901,910,911,912,915,918,922,924,rhost:223,ricciardi:42,richard:919,ride:20,right:5,19,20,100,103,288,290,827,909,915,919,risk:14,23,26,30,46,rkt:11,rlen:91,92,93,94,rlogin:946,rnd:38,roam:21,robbi:953,robin:15,robust:918,rock:922,931,roll:23,rollback:14,rollov:6,23,root:8,12,14,15,17,19,20,21,32,34,902,906,938,946,951,952,953,rotat:26,38,round:40,918,931,rout:34,routin:21,870,royal:919,royalti:919,rpath:904,906,945,rpc:20,21,23,43,48,616,903,918,919,rpcbind:23,rsa:37,477,480,481,482,919,942,rst:908,rtime:846,rule:3,19,21,23,28,38,39,43,154,946,948,951,952,run:3,4,6,8,9,10,12,14,15,20,21,23,24,26,28,32,33,34,37,39,41,897,904,905,906,908,917,918,941,943,946,953,runstatedir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,runtim:917,s2kparam:48,s2kparams_out:229,s4u2proxi:20,43,910,918,s4u2self:20,43,343,918,948,s4u:918,s4uself:20,s_address:824,safe:28,48,741,896,918,safer:938,safest:939,sai:901,sake:946,sale:919,salt:2,3,6,11,20,23,25,48,125,126,393,840,918,salt_out:229,salt_type_afs_length:789,salt_type_no_length:789,salttyp:6,20,26,374,salttypep:394,sam:696,698,699,918,samba:28,918,same:3,4,5,10,12,19,20,21,23,24,28,36,39,43,52,53,91,101,105,107,136,138,151,155,171,180,228,250,270,271,275,279,307,348,349,350,362,388,847,897,901,906,918,923,924,938,942,946,948,sampl:12,15,22,34,903,919,938,939,946,949,san:20,21,918,sandia:919,sasl:3,5,20,22,38,43,918,sasl_authcid:3,sasl_authzid:3,sasl_mech:3,sasl_nocanon:38,sasl_realm:3,satisfactori:25,save:37,40,66,83,528,529,911,918,931,sbin:8,12,34,906,917,sbindir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,scalar:911,scenario:14,918,schedul:14,23,schema:22,24,scheme:39,sclient:12,937,940,sclogin:20,scope:5,screen:939,screensav:939,script:3,4,10,34,903,904,906,918,search:5,20,21,38,48,151,153,195,224,315,897,904,915,918,941,947,search_scop:5,searchscop:5,sec:48,813,836,898,second:3,10,20,21,23,28,36,37,39,43,44,52,53,105,153,223,228,266,267,322,348,349,350,361,362,385,386,388,410,745,808,824,826,846,875,885,896,898,901,910,911,914,915,923,924,939,942,946,953,second_ticket:826,846,910,secondari:34,secret:3,20,21,36,43,46,850,938,secretari:919,section:3,10,19,22,23,28,33,34,35,37,39,41,43,48,119,320,412,600,681,682,683,901,904,905,910,911,915,918,934,935,946,951,sector:6,secur:3,7,14,15,20,21,23,25,30,31,34,37,39,41,43,46,250,325,564,902,903,918,919,936,939,953,securecooki:911,securid:669,918,sed:906,see:14,15,17,22,23,24,26,28,32,34,35,36,39,43,46,97,99,100,102,103,108,113,114,130,131,168,229,262,287,288,289,290,294,295,299,320,359,393,403,412,413,414,600,738,897,898,901,902,903,904,906,908,909,910,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,934,935,936,938,939,seed:131,331,413,915,seed_length:131,413,seen:901,segment:39,select:6,14,21,23,28,43,46,48,117,296,359,369,897,906,918,924,926,942,946,951,self:21,sell:919,semant:46,semfiajf42:20,send:0,4,15,20,21,23,25,26,32,34,41,48,229,245,325,363,375,380,901,903,906,918,936,938,942,953,send_hook:381,sendauth:12,34,48,sender:325,326,331,356,360,824,sensit:250,sent:6,20,25,36,37,41,43,325,375,381,866,901,904,911,918,931,939,sentenc:34,separ:0,3,5,6,10,16,19,20,21,22,23,24,25,28,39,50,301,344,346,420,731,905,906,911,918,924,934,938,953,seq:875,seq_numb:808,813,seqnumb:69,74,sequenc:25,37,48,66,78,80,83,325,326,327,331,356,358,359,360,521,528,808,813,875,902,910,911,914,924,sequence_count:873,sequenti:48,314,815,seri:48,915,serial:9,43,48,405,918,serv:4,10,21,23,918,server1:5,server:2,3,4,5,6,7,8,9,10,12,16,18,20,21,22,23,24,25,28,29,30,31,34,36,37,38,39,43,46,48,159,166,223,224,264,267,300,301,333,342,343,359,375,382,383,414,504,617,661,730,760,807,825,826,832,836,846,883,897,900,901,903,907,910,917,918,919,920,926,927,939,945,946,948,949,951,server_kei:340,341,server_port:12,server_princ:300,301,server_str:169,serverauth:21,servic:2,3,5,8,10,12,15,16,19,20,21,22,23,24,28,29,31,32,33,34,43,48,166,224,235,245,260,264,267,301,329,330,363,382,414,643,644,645,738,878,897,901,903,910,918,919,920,925,933,939,942,948,951,953,service1:948,service2:948,service_loc:933,service_nam:942,service_passwd:5,sesam:46,701,session:3,14,15,21,23,33,34,43,46,48,224,320,325,330,354,412,439,440,813,825,826,832,833,897,901,918,939,943,948,953,session_enctyp:3,23,918,set:0,3,4,5,6,14,15,16,18,19,20,21,22,23,24,25,26,28,29,31,32,33,34,35,37,38,39,40,41,43,44,46,48,62,68,69,73,74,77,78,98,102,145,153,154,161,164,203,209,224,229,253,279,280,286,289,301,305,317,325,326,331,352,354,356,359,360,361,369,373,377,387,404,407,408,409,420,546,731,747,865,866,876,897,898,901,906,918,921,924,931,932,938,939,941,942,943,946,952,953,set_cooki:918,931,set_str:23,26,36,37,setstr:3,16,setuid:41,918,953,setup:23,34,904,918,sever:3,15,16,20,21,23,24,37,39,897,903,906,910,923,953,sfu:684,sha1:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,sha256:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,sha2:3,20,918,sha384:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,sha:14,20,918,shall:919,share:0,14,21,23,28,46,330,906,923,924,934,938,sharealik:919,sharp:19,she:939,952,shell:3,5,23,34,41,918,938,939,945,951,shorter:21,shortest:192,shortli:33,938,shortnam:21,918,should:0,2,3,4,5,6,10,12,14,15,17,20,21,22,23,24,25,26,28,29,32,33,34,37,38,39,43,46,71,85,144,152,223,245,249,255,269,279,308,317,325,327,330,342,359,361,365,366,404,740,860,865,866,885,896,897,898,902,904,906,910,912,918,919,920,921,922,923,924,928,929,930,931,933,934,935,938,939,942,946,948,953,show:2,6,20,41,870,897,908,917,939,943,shown:20,21,897,shrubberi:42,shutdown:24,sick:919,sid:21,638,639,660,side:23,43,363,375,901,sighup:10,41,sign1:43,sign2:43,sign:3,19,20,21,32,37,41,43,48,896,905,912,914,918,942,953,sign_authdata:918,sign_onli:43,signal:10,signatur:48,412,476,477,482,905,924,934,signedpath:3,20,918,signific:25,35,silent:943,similar:6,21,22,26,29,43,92,105,113,114,126,129,130,246,294,295,296,298,299,326,329,343,345,349,364,407,408,417,419,918,923,933,939,946,similarli:15,344,740,939,simpl:5,12,17,23,107,421,897,901,simplest:28,43,897,904,simpli:28,36,37,40,43,46,739,904,924,938,939,simplifi:251,918,simul:946,simultan:847,sinc:3,12,14,17,21,22,23,37,48,330,735,885,896,910,924,931,952,953,singl:0,3,14,15,20,21,24,26,28,32,34,37,39,40,43,46,48,189,320,345,409,710,897,906,918,931,946,siphash:915,site:15,23,34,39,918,939,942,952,situat:14,20,24,28,39,948,size:9,20,21,23,24,37,41,48,97,98,100,103,114,116,130,186,190,288,290,295,299,361,407,409,827,906,914,915,918,size_return:361,size_t:95,96,98,100,103,104,112,114,116,118,130,131,168,170,186,187,190,191,192,193,280,288,290,295,299,337,339,369,374,397,398,413,sizeof:43,46,934,skei:20,826,skew:48,267,356,360,931,942,skip:22,23,37,414,416,slack:39,slash:344,953,slat:923,slightli:906,slot:11,21,300,915,slotid:21,slower:14,24,small:56,smaller:21,914,smard:21,smart:20,21,918,sms:19,smtp:642,sname:389,948,sni:918,sock_dgram:933,sock_stream:933,socket:20,21,36,48,375,917,933,soft:918,softwar:14,15,21,24,25,28,42,46,906,919,936,solari:31,904,906,918,solaris9ab:42,sole:21,28,solut:34,some:2,3,6,14,20,21,23,24,28,29,31,34,37,38,39,41,46,48,99,151,154,287,389,766,897,898,901,903,904,905,906,907,915,917,918,923,924,927,934,936,938,939,942,951,953,someon:17,21,34,938,939,someprinc:23,someth:12,14,20,38,901,sometim:23,25,38,942,somewhat:37,901,song:919,sophist:46,sort:38,sourc:0,10,22,23,28,34,39,42,43,904,905,906,916,919,923,927,934,936,946,source_cache_nam:946,source_us:946,southern:919,space:3,16,20,24,37,38,56,99,102,117,119,121,287,289,296,306,346,361,407,420,898,905,spake:20,21,25,30,918,919,spake_preauth_group:20,21,40,spake_preauth_ind:20,spake_preauth_kdc_challeng:20,40,sparc:918,spars:915,spawn:4,special:20,23,28,35,43,408,648,715,897,918,919,924,942,specif:3,4,6,8,10,14,18,19,20,21,24,26,34,39,43,48,49,56,155,301,315,317,363,364,410,740,897,898,900,906,908,915,918,919,923,928,933,939,specifi:3,4,5,6,7,8,9,10,11,14,15,16,18,19,20,22,23,28,29,34,36,37,39,43,46,48,92,93,99,100,102,103,113,125,129,224,227,229,235,260,264,267,287,288,289,290,294,298,310,315,318,325,326,331,344,345,356,359,360,375,383,414,752,897,901,906,911,912,918,924,931,939,941,942,943,944,945,946,947,948,953,speed:22,25,sphinx:908,sphinx_arg:908,spi:924,split:3,39,918,spnego:918,919,924,spnego_mech:919,spoof:21,25,39,sprecif:905,spuriou:918,sqlite3:6,sqlite:6,squar:20,21,28,src:22,148,904,906,908,919,src_ctx:179,src_name:43,srcdir:908,srv:21,33,34,39,918,srvtab:11,ss_lib:906,sscope:5,sserver:1,949,ssh:15,33,939,952,953,sshd:21,sshing:953,ssl:29,37,sspi:918,stabl:918,928,929,930,935,stage:14,911,929,stai:3,stale:0,21,26,stamp:6,9,stand:34,standalon:8,41,918,standard:3,6,9,14,20,37,41,43,900,918,919,945,start:0,3,4,6,8,10,14,15,19,20,21,23,24,26,31,37,41,48,825,833,846,884,897,902,904,912,918,939,946,start_realm:910,start_tim:235,260,275,942,starttim:884,910,startup:34,918,stash:3,5,10,14,20,22,23,34,41,899,917,stash_fil:6,stashfilenam:5,6,stashsrvpw:3,20,22,state:6,9,14,20,34,46,48,78,99,100,102,103,287,288,289,290,847,911,917,918,919,920,922,923,925,928,929,931,932,933,934,935,statement:919,statu:3,837,918,919,921,924,943,946,948,stderr:20,953,stdin:352,stdlib:934,stdout:41,352,stduser:23,step:6,14,22,23,34,37,946,steve:953,still:3,4,6,10,14,20,21,23,32,33,34,35,39,148,269,918,942,946,948,stime:836,stockholm:919,stolen:939,stop:4,10,24,923,storag:46,48,57,58,82,84,159,170,187,192,193,280,361,374,398,897,store:2,3,4,5,6,8,14,15,17,20,21,22,23,24,26,34,37,46,48,80,99,100,102,103,224,235,250,287,288,289,290,325,326,330,331,356,359,360,361,407,414,549,731,840,897,900,901,904,907,910,915,918,935,939,942,943,946,948,str:43,strategi:35,strcmp:934,strdup:934,stream:8,12,20,34,36,43,strength:918,strengthen:14,strict:919,strictli:34,string2kei:14,string:3,5,6,16,19,20,21,23,25,26,28,34,36,37,39,43,46,48,101,166,169,192,228,229,258,264,267,278,336,346,365,373,379,382,383,417,418,419,420,738,739,740,821,826,837,868,869,889,897,898,901,906,918,919,921,923,924,931,932,934,942,946,strip_realm:20,36,strlcpy:919,strlen:43,46,strong:16,122,stronger:14,16,21,26,strongest:26,strptime:919,struct:43,48,51,262,269,805,807,808,809,810,811,813,816,817,818,822,823,824,825,826,827,829,831,832,833,834,836,840,841,842,845,846,847,848,849,850,854,859,860,861,862,863,869,870,873,874,875,876,878,879,880,881,882,883,884,886,887,889,890,891,894,895,928,934,structur:43,46,47,48,92,100,103,135,156,169,173,182,212,221,237,240,241,242,243,244,245,249,252,253,254,255,257,258,259,269,275,280,282,288,290,322,324,334,345,355,356,365,368,371,375,389,414,416,421,538,805,811,823,826,827,836,863,883,890,896,922,923,928,930,931,933,studio:918,style:3,21,39,417,418,419,638,640,sub:5,21,903,subcommand:14,subdirectori:21,28,903,908,917,subdomain:21,39,951,subject:0,20,21,23,37,919,subjectalternativenam:21,subjectaltnam:37,subjectkeyidentifi:37,subkei:48,80,325,354,359,808,813,sublicens:919,submit:26,43,subprocess:10,subregion:43,subschema:22,subscrib:936,subsect:16,20,21,22,24,25,28,29,35,37,40,subsequ:9,10,14,24,136,275,279,404,919,subsess:26,330,440,subset:39,903,substanti:919,substhtml:908,substitut:21,34,37,919,subsystem:906,subtag:21,subtre:3,5,20,22,subtree_dn_list:5,succe:20,21,34,43,46,414,succeed:12,34,success:3,6,8,20,24,25,35,46,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,122,124,125,126,129,130,132,133,134,135,137,141,142,144,145,147,148,149,150,152,153,155,156,157,158,159,161,162,163,164,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,286,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,416,621,837,901,922,925,935,946,948,successfulli:3,6,12,35,43,46,245,301,416,865,866,sudan:919,sudden:20,suffici:3,5,14,24,906,suffix:21,28,38,43,906,918,953,suggest:0,245,suit:34,903,904,918,suitabl:6,904,906,918,919,939,summar:943,summari:8,9,sun:919,suncc:906,sunw_dbprop_en:23,sunw_dbprop_master_ulogs:23,sunw_dbprop_slave_pol:23,sunwaadm:42,supersed:10,14,supervisor:10,supplement:20,suppli:3,11,43,46,48,223,245,258,262,267,276,277,278,331,342,372,373,386,735,736,876,906,922,923,931,support:3,4,6,8,10,11,20,21,22,23,24,25,26,37,39,40,43,46,48,153,161,247,253,378,386,387,544,756,897,899,903,904,905,906,910,911,915,918,919,922,923,924,931,936,942,supported_enctyp:14,20,26,34,918,suppos:939,952,suppress:3,6,20,906,918,941,946,948,sure:3,5,12,14,15,22,23,26,33,41,938,939,942,surpris:14,surround:28,surviv:20,897,susec:836,swap:34,39,sweden:919,symbol:6,344,901,904,905,908,917,923,924,symmetri:20,synchron:9,14,15,21,24,34,41,48,271,403,730,918,931,syntact:21,syntax:20,21,37,918,synthes:381,865,synthet:380,910,syria:919,sysadv6:42,sysconfdir:0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,syslog:20,21,34,923,system:3,6,14,15,19,20,21,24,29,32,33,34,35,36,37,38,41,43,46,48,56,136,147,169,282,382,383,385,396,694,697,700,876,897,902,903,904,905,918,919,923,932,936,938,939,941,942,952,953,systest:3,t_mddriver:919,tab:3,6,344,918,tabdump:26,918,tabl:3,6,23,48,276,307,308,313,359,363,414,850,900,903,905,906,908,915,917,918,943,tabular:6,918,tag:20,21,34,910,915,924,tail:34,take:10,14,19,20,21,23,25,26,28,32,39,41,43,46,91,124,126,325,376,731,827,898,915,918,920,929,938,939,946,taken:6,14,39,245,901,915,talk:901,tamper:43,tape:32,tar:904,905,target:19,21,34,43,897,910,918,target_nam:43,target_princip:19,target_principal_nam:946,target_us:946,target_user_login_nam:946,task:14,46,91,tcl:918,tcp:8,10,12,15,20,21,23,29,34,37,39,279,404,918,933,team:936,teardown:904,technet:42,techniqu:40,46,technolog:909,919,953,tekniska:919,telegraph:919,telephon:919,tell:4,10,938,939,945,telnet:21,643,946,temp:21,templat:903,temporari:3,21,34,37,900,901,917,918,953,temporarili:3,ten:33,939,tend:15,term:3,14,23,25,26,37,41,739,897,900,918,919,922,931,948,termin:4,10,48,173,195,220,230,231,240,261,325,352,354,361,366,407,903,934,946,ters:3,test1:3,898,test2:3,898,test3:3,898,test4:898,test:3,9,10,12,14,21,37,48,903,906,908,918,919,942,949,test_html:908,testdir:41,testus:3,texinfo:0,text:6,23,28,36,37,46,169,365,827,836,870,911,945,tgt:3,14,20,23,26,37,46,48,220,342,343,910,911,918,939,946,than:3,4,5,6,10,12,14,15,19,20,21,23,24,25,26,28,32,35,37,38,39,43,53,56,230,279,375,404,897,901,904,911,914,915,918,922,924,938,942,thei:3,6,9,14,15,20,21,28,33,34,37,38,39,41,43,46,229,325,375,731,847,896,897,900,904,906,910,918,931,938,939,950,953,them:3,14,15,20,22,23,24,25,29,32,34,37,39,41,46,82,84,253,330,344,403,731,897,904,906,918,919,923,924,934,939,941,953,themselv:6,theodor:919,theori:919,therebi:952,therefor:22,23,25,39,910,931,thereof:919,thi:0,2,3,4,5,6,8,9,10,11,12,14,15,17,19,20,21,22,23,24,25,26,27,28,32,33,34,35,36,37,38,39,40,41,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,98,99,100,101,102,103,104,105,107,113,114,116,117,119,120,122,123,124,125,126,129,130,133,136,137,139,141,144,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,243,245,246,252,253,254,258,260,261,262,264,265,266,267,270,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,317,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,363,364,368,371,373,375,376,378,380,382,383,385,386,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,728,729,730,731,735,736,737,739,832,850,884,885,896,897,901,902,903,904,905,906,910,911,915,916,917,918,919,920,922,924,926,928,929,930,931,932,934,935,936,938,939,941,942,943,945,946,948,952,953,think:38,923,938,third:21,28,36,37,910,918,919,953,thorough:39,those:3,6,14,19,21,23,25,26,34,39,43,46,906,908,914,918,919,922,924,927,928,931,948,952,953,though:14,904,939,thousand:24,thread:24,847,897,906,918,threadsaf:285,three:14,24,26,35,39,40,375,910,918,939,953,threeparamopen:789,through:15,16,20,21,23,24,28,29,33,34,35,39,46,230,282,386,387,416,910,915,918,929,938,939,throughput:20,24,thu:23,901,906,946,ticket:2,3,5,6,12,14,15,16,19,20,21,22,26,28,33,34,35,36,37,38,39,41,43,46,48,153,159,183,195,223,229,235,247,260,264,267,322,330,333,342,359,363,364,375,545,548,551,652,662,745,760,809,813,823,825,826,832,833,845,846,883,884,886,897,898,910,918,921,922,930,931,936,937,938,941,942,943,946,948,949,952,953,ticket_authdata:195,ticket_flag:5,826,910,ticket_info:824,ticket_lifetim:21,33,tied:929,tightli:14,28,32,902,till:846,time:0,2,3,5,6,9,10,14,15,19,20,21,22,23,24,26,28,34,35,36,37,39,41,43,44,48,136,158,224,228,235,245,260,275,356,359,360,398,735,752,753,808,824,825,826,832,833,846,850,884,896,897,899,901,902,906,907,910,911,915,917,918,919,924,930,938,939,942,943,946,953,time_offset:10,time_rec:43,918,time_req:43,time_t:6,885,896,timeofdai:410,timeout:14,20,36,timeret:396,timestamp:6,11,14,21,25,37,40,48,66,83,325,326,331,336,342,343,356,360,396,522,529,671,824,850,854,875,885,896,900,901,910,911,912,914,915,918,931,943,timestampp:395,titl:903,919,tkt:826,tkt_flg_anonym:789,tkt_flg_enc_pa_rep:789,tkt_flg_forward:789,tkt_flg_hw_auth:789,tkt_flg_initi:789,tkt_flg_invalid:789,tkt_flg_may_postd:789,tkt_flg_ok_as_deleg:789,tkt_flg_postdat:789,tkt_flg_pre_auth:789,tkt_flg_proxi:789,tkt_flg_proxiabl:789,tkt_flg_renew:789,tkt_flg_transit_policy_check:789,tkt_life:259,840,tktpolici:3,5,23,tls:22,tlyu:3,tmp:3,21,34,901,907,917,939,946,953,tmpbuild:904,tmpdir:901,953,tmppolici:5,todd:919,todo:938,togeth:15,token:16,20,21,46,368,598,729,730,731,733,736,737,913,918,924,931,942,token_flag:881,token_id:879,token_len:43,tokenid:738,tokeninfo:369,738,878,toler:21,tom:3,tomorrow:23,too:3,23,56,100,103,119,267,288,290,306,tool:6,23,903,905,918,923,toolkit:903,top:10,39,897,904,905,908,top_srcdir:908,topic:0,30,34,topolog:4,tort:919,tortiou:919,total:20,25,915,942,946,toward:0,23,tr_content:890,tr_type:890,trace:48,889,918,953,trace_log:41,track:3,6,9,35,901,936,trademark:919,tradit:6,35,traffic:29,trail:20,38,946,trailer:43,48,538,transact:24,953,transcript:911,transfer:4,23,37,transform:906,transit:20,21,24,359,541,550,674,695,833,890,939,942,943,948,transitori:14,translat:21,56,918,transmiss:17,transmit:23,43,279,404,918,931,transpar:953,transport:23,39,279,404,travers:6,treat:3,21,36,38,43,54,342,350,709,885,910,942,948,treatment:39,tree:0,22,23,24,34,905,906,908,924,927,934,tri:20,21,25,44,359,414,918,925,trigger:901,trillium:15,32,939,trim:99,287,trip:40,918,931,tripl:14,20,26,918,trivial:25,918,troubl:42,troubleshoot:30,34,true_principal_nam:861,truncat:915,939,trust:20,21,29,37,43,268,942,tryagain:922,tty04:20,tty:5,tune:22,39,tupl:3,turn:8,21,24,33,35,40,352,361,906,946,twice:3,24,34,910,929,938,944,two:3,18,20,21,23,24,26,28,34,35,37,38,48,53,361,898,910,911,914,918,920,924,932,939,942,946,txt:6,34,39,type:2,3,5,6,10,15,16,21,23,25,28,30,32,34,38,39,46,48,91,93,95,98,99,100,102,103,104,108,112,113,114,115,116,124,125,126,129,130,151,152,153,161,163,184,189,195,223,224,229,280,287,288,289,290,294,295,298,299,310,311,315,317,331,333,335,344,389,421,500,541,647,678,750,756,800,813,821,827,832,854,856,859,868,869,883,885,890,891,896,900,904,907,910,911,912,914,915,918,920,922,923,924,927,928,929,930,931,932,933,934,935,938,939,942,943,946,948,952,953,typedef:43,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,typic:4,15,20,21,26,33,38,39,43,46,98,253,908,917,920,922,923,928,929,931,935,942,948,u2u:948,ubuntu:42,918,ucb:946,udp:10,15,20,21,29,39,279,404,918,933,udp_preference_limit:21,uid:21,43,897,901,917,946,952,953,uid_t:43,uidnumb:897,uint16_t:892,uint32_t:885,893,896,uint8_t:858,uint_max:769,770,788,ulog:20,23,umich:919,unabl:17,21,23,unalloc:280,unam:28,unambigu:245,unansw:877,unauthent:32,unavail:23,34,39,unchang:3,14,946,unclean:24,uncommon:901,uncondition:228,906,unconfigur:39,908,undefin:946,under:3,5,6,10,20,21,22,38,155,159,901,904,915,918,919,underli:43,underneath:22,underscor:21,919,understand:46,undertaken:0,unenc_authdata:846,unencapsul:918,unencrypt:32,356,813,823,845,846,unescap:6,unexport:924,unfinish:931,unicod:919,unifi:0,unimpl:923,unimport:910,uninterrupt:14,uniqu:3,43,48,265,414,644,646,897,924,unit:898,919,939,univers:919,unix:6,15,20,21,28,31,36,43,923,924,934,unkei:46,unknown:12,38,41,616,910,948,unless:2,3,6,11,14,19,20,21,26,28,32,34,43,315,386,414,416,901,902,918,932,946,950,unlik:14,23,40,897,901,918,924,939,unlimit:919,unlink:6,unlock:23,35,918,unlockit:3,20,23,24,unmodifi:919,946,unnecessari:23,unpack:905,unpars:43,48,407,409,unpleas:14,unport:919,unprint:3,unqualifi:33,unquot:6,unrecogn:906,unrestrict:32,902,unser:43,unset:43,48,171,953,unsign:91,92,93,94,97,111,116,120,279,311,361,404,407,409,805,811,814,818,829,848,853,857,859,891,896,unspecifi:21,953,unstabl:929,unsuccess:37,unsupport:37,906,unswapp:897,untest:906,until:3,6,14,21,23,43,896,897,901,906,915,918,939,untrust:43,953,unus:149,265,352,375,918,unusu:28,37,unwrap:43,48,updat:2,4,6,8,9,14,20,21,22,24,26,34,35,99,100,102,103,224,287,288,289,290,697,700,906,911,918,927,936,update_princ_encrypt:14,23,update_rel:934,upgrad:21,23,26,34,39,918,upn:20,21,350,637,639,707,918,upon:6,8,946,upper:3,19,39,944,uppercas:21,932,953,upstream:23,906,918,upstreamhostnam:23,uri:3,5,20,21,33,34,39,918,url:20,24,29,39,usa:919,usabl:48,usag:20,21,37,43,99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,847,896,911,912,945,946,usc:946,use:0,3,4,5,6,7,8,14,15,16,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,48,55,78,105,223,236,268,275,315,329,344,359,375,389,403,407,414,865,866,884,896,901,903,904,905,906,908,910,914,917,918,919,920,921,922,923,924,927,931,934,935,936,938,939,942,945,946,948,952,953,use_mkei:14,23,usec:813,824,836,875,used:2,3,4,5,6,7,8,9,10,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,34,36,37,38,39,40,41,43,46,56,81,98,100,103,121,129,144,223,224,227,228,229,235,241,247,248,254,258,260,264,267,277,288,290,298,315,321,325,326,327,329,330,331,344,345,352,356,359,360,375,403,405,414,416,740,825,847,856,866,870,885,896,897,900,901,902,903,910,911,914,915,917,918,919,921,922,923,924,925,931,934,936,939,941,942,943,944,945,946,948,950,951,953,useful:8,9,25,26,33,39,69,74,897,901,906,919,936,945,948,949,953,useless:14,user:0,3,5,6,8,14,15,16,19,20,21,22,23,25,26,33,34,35,36,37,38,39,41,43,48,56,90,136,169,224,227,326,330,331,333,361,551,641,663,730,737,870,897,898,901,903,904,906,908,916,917,918,919,922,935,936,938,939,941,942,944,946,948,951,952,953,user_dn:5,userconfig:21,userdata:326,331,userdata_out:356,360,userid:21,906,usernam:3,12,21,34,36,37,43,319,674,939,942,userok:932,userpolici:5,userprincipalnam:20,uses:2,3,4,14,15,18,19,20,21,22,23,24,26,28,35,36,37,39,40,43,45,101,246,329,382,383,406,417,419,885,897,901,910,911,912,914,918,924,934,944,945,953,using:3,6,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,29,33,34,36,37,38,39,40,41,43,46,48,113,117,125,129,156,228,247,250,267,279,294,298,300,325,327,331,344,354,359,366,375,378,404,618,876,897,900,905,906,908,910,912,915,918,923,924,925,931,932,938,939,942,943,946,948,949,951,952,953,usr:5,8,12,20,21,34,906,908,917,945,946,usual:3,10,12,20,21,23,25,35,37,39,46,99,287,897,900,906,910,923,939,948,953,utc:23,utf:46,350,365,373,709,918,919,util:22,34,39,47,904,906,919,941,953,uucp:20,v4_instance_convert:21,v4_realm:21,v4cred:51,v5cred:51,va_list:48,92,94,vagu:906,val:198,199,200,201,202,203,204,206,207,208,209,211,212,215,218,219,221,222,valid:20,21,23,39,43,48,66,83,109,124,129,153,160,224,235,248,260,269,275,298,301,330,333,342,343,345,350,359,365,366,408,414,884,897,898,903,910,914,918,930,939,942,948,952,953,valid_int_bit:789,valid_uint_bit:789,valu:3,5,6,10,14,16,19,20,21,22,23,24,25,26,28,33,34,36,37,38,39,43,46,48,66,83,117,125,126,136,151,153,156,166,224,245,248,252,263,265,269,296,301,333,368,369,371,375,386,388,397,722,728,729,731,733,738,740,796,797,798,837,841,854,865,866,885,896,897,898,900,901,906,907,908,910,911,912,914,915,918,922,924,931,932,934,939,941,942,943,945,946,951,953,valuabl:46,919,vaniti:38,vararg:91,vari:15,33,905,917,941,942,variabl:2,3,4,5,6,7,8,9,10,11,12,15,16,19,20,21,24,25,28,30,34,35,37,38,39,40,41,43,48,93,136,141,155,269,282,386,387,897,900,901,907,918,934,935,941,942,943,944,946,947,948,949,variad:91,417,419,variant:23,906,918,924,varieti:26,variou:14,30,43,359,903,907,918,939,vendor:738,879,945,verbatim:919,verbos:3,6,23,904,918,942,veri:14,20,21,23,934,verif:20,21,34,43,46,48,414,897,937,939,verifi:5,20,21,23,34,37,43,48,241,356,357,358,359,360,361,901,905,918,922,931,938,939,946,verifier_cred_handl:924,verify_ap_req_nofail:21,versa:37,918,version:0,2,3,5,6,9,10,14,20,23,24,26,29,38,42,43,44,48,155,228,247,310,315,363,375,616,723,821,823,845,850,883,896,900,904,905,906,908,910,912,914,915,918,919,923,929,933,943,945,946,948,949,953,verto:906,919,vesion:321,405,veto:930,via:0,3,6,8,20,21,34,35,46,48,274,386,402,826,918,924,926,946,952,vice:37,918,view:8,23,34,937,view_polici:23,viola:15,virtual:15,21,visibl:14,23,25,918,visit:939,vista:26,918,visual:918,vnder:14,vno:3,14,310,315,850,volum:918,vopt:46,vpath:904,905,vprintf:417,418,419,vtabl:922,923,931,934,vulner:14,23,32,46,918,936,wai:21,23,28,39,43,46,126,236,250,375,896,897,898,900,906,908,918,919,927,932,938,939,951,wait:8,20,23,39,wake:15,walk:6,938,want:3,23,28,34,545,551,904,933,938,939,946,warn:3,23,26,245,908,918,919,warranti:919,wasn:44,weak:14,20,21,26,41,web:34,897,918,week:5,weight:39,well:14,21,23,34,38,43,46,343,648,903,906,918,925,wellknown:37,46,502,763,went:939,were:14,15,21,34,43,414,618,897,918,919,939,what:6,14,19,20,21,26,38,43,901,922,923,931,935,938,939,945,whatev:39,whatsoev:919,when:3,4,6,8,9,10,12,14,15,16,17,20,21,22,23,26,28,29,33,34,36,37,38,39,40,41,43,46,49,65,67,68,72,73,76,77,78,79,85,91,92,93,111,113,115,125,126,132,136,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,228,229,230,231,235,236,250,254,258,260,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,352,354,355,356,357,359,360,361,363,375,389,401,403,405,406,408,738,739,740,897,900,906,908,910,915,917,918,920,924,925,929,932,934,935,936,938,939,941,942,943,945,946,948,951,953,whenev:46,where:3,4,6,7,8,14,15,17,20,21,23,25,28,39,43,46,317,389,896,897,900,901,904,905,906,911,918,923,939,942,946,953,whether:4,6,8,10,14,20,21,26,28,35,36,43,46,48,105,223,241,242,243,245,249,253,255,319,407,905,911,918,919,921,928,935,939,946,which:3,4,5,6,7,8,9,10,11,12,14,15,19,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,126,173,195,229,230,245,250,280,310,330,359,366,368,371,372,884,885,896,897,900,901,903,904,905,906,907,910,911,912,914,915,917,918,919,920,922,923,924,927,928,929,930,931,933,934,935,939,942,945,946,948,951,952,953,whichev:15,whitespac:3,20,21,who:0,5,16,20,25,34,37,938,939,whoami:923,whole:23,37,141,155,342,whom:919,938,whose:3,5,10,17,19,21,34,38,40,43,46,132,217,229,910,914,939,952,wicker:923,wicker_appear:923,wicker_brac:923,wicker_construct:923,wicker_foot:923,wicker_materi:923,wicker_slat:923,wide:21,29,36,wiki:42,904,918,wild:3,wildcard:19,20,918,951,willi:14,willing:20,21,26,win:919,winbind:28,winbind_krb5_loc:28,window:21,26,28,29,42,301,382,383,637,639,685,703,897,901,903,915,918,923,924,934,939,wish:16,21,34,39,43,250,904,905,906,907,919,924,935,938,939,953,with_realm:300,341,343,within:3,15,20,21,24,34,35,39,43,48,132,154,252,261,356,360,365,373,386,847,897,912,918,919,924,942,951,953,without:3,14,19,20,21,23,24,28,32,34,35,36,37,43,133,368,371,538,866,897,901,904,906,915,918,919,938,939,946,953,wkt:11,won:21,37,939,worcest:919,word:21,34,939,work:2,3,4,6,21,23,34,35,36,39,40,43,897,906,918,919,931,932,936,938,939,953,workdai:33,worker:10,24,workflow:14,workstat:46,worri:22,904,953,wors:21,worst:14,worth:32,would:5,6,14,16,17,20,21,23,25,28,32,34,37,38,39,40,43,46,902,918,924,938,939,945,952,953,wrap:23,48,300,320,924,wrapper:889,911,912,wrfile:14,23,writabl:15,34,316,934,write:0,6,8,10,11,20,21,22,23,24,28,34,35,251,352,387,897,915,918,923,934,953,writeabl:302,writer:0,written:3,4,155,850,900,915,919,wrong:35,37,919,939,946,wsgi:29,www:22,42,908,918,x11r6:904,x509:37,918,942,x509_anchor:21,942,x509_proxi:21,x509_proxy_ca:21,x509_user_ident:16,21,942,x86:906,918,x86_64:906,918,xconsortium:904,xml:908,xore:21,359,xst:3,xvm:14,xyz:953,yacc:906,year:23,45,898,918,yes:3,5,23,906,942,yet:6,21,23,26,34,37,38,897,906,927,939,yflag:906,yield:931,you:0,3,5,12,15,16,17,20,21,22,23,24,28,32,33,34,35,37,39,40,41,737,898,902,904,905,906,907,908,919,936,938,939,941,946,953,your:0,12,17,20,21,26,32,33,34,37,39,904,905,906,919,927,937,939,941,950,953,your_princnam:37,your_realmnam:37,yourdir:34,yourself:939,953,yymmddhhmmss:898,yyyi:898,yyyymmddhhmmss:898,zanarotti:46,zephyr:14,919,zero:3,21,24,39,43,44,48,129,130,203,241,245,260,261,284,298,299,310,740,742,865,910,911,914,915,918,923,zone:14,39,898,zonetest:14},titles:"Contributing to the MIT Kerberos Documentation","Administration programs","k5srvutil","kadmin","kadmind","kdb5_ldap_util","kdb5_util","kprop","kpropd","kproplog","krb5kdc","ktutil","sserver","Advanced topics","Retiring DES","Application servers","Authentication indicators","Backups of secure hosts","Configuration Files","kadm5.acl","kdc.conf","krb5.conf","Configuring Kerberos with OpenLDAP back-end","Database administration","Database types","Addressing dictionary attack risks","Encryption types","Environment variables","Host configuration","HTTPS proxy configuration","For administrators","Installation guide","UNIX Application Servers","Installing and configuring UNIX client machines","Installing KDCs","Account lockout","OTP Preauthentication","PKINIT configuration","Principal names and DNS","Realm configuration decisions","SPAKE Preauthentication","Troubleshooting","Various links","Developing with GSSAPI","Differences between Heimdal and MIT Kerberos API","For application developers","Initial credentials","Principal manipulation and parsing","krb5 API","krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.","krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.","krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.","krb5_address_compare - Compare two Kerberos addresses.","krb5_address_order - Return an ordering of the specified addresses.","krb5_address_search - Search a list of addresses for a specified address.","krb5_allow_weak_crypto - Allow the application to override the profile\u2019s allow_weak_crypto setting.","krb5_aname_to_localname - Convert a principal name to a local name.","krb5_anonymous_principal - Build an anonymous principal.","krb5_anonymous_realm - Return an anonymous realm data.","krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.","krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.","krb5_auth_con_free - Free a krb5_auth_context structure.","krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.","krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.","krb5_auth_con_getaddrs - Retrieve address fields from an auth context.","krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.","krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.","krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.","krb5_auth_con_getkey_k - Retrieve the session key from an auth context.","krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.","krb5_auth_con_getlocalsubkey","krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.","krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.","krb5_auth_con_getremotesubkey","krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.","krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.","krb5_auth_con_init - Create and initialize an authentication context.","krb5_auth_con_initivector - Cause an auth context to use cipher state.","krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.","krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.","krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.","krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.","krb5_auth_con_setports - Set local and remote port fields in an auth context.","krb5_auth_con_setrcache - Set the replay cache in an auth context.","krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.","krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.","krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.","krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.","krb5_auth_con_setuseruserkey - Set the session key in an auth context.","krb5_build_principal - Build a principal name using null-terminated strings.","krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.","krb5_build_principal_ext - Build a principal name using length-counted strings.","krb5_build_principal_va","krb5_c_block_size - Return cipher block size.","krb5_c_checksum_length - Return the length of checksums for a checksum type.","krb5_c_crypto_length - Return a length of a message field specific to the encryption type.","krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.","krb5_c_decrypt - Decrypt data using a key (operates on keyblock).","krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).","krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).","krb5_c_encrypt - Encrypt data using a key (operates on keyblock).","krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).","krb5_c_encrypt_length - Compute encrypted data length.","krb5_c_enctype_compare - Compare two encryption types.","krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .","krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.","krb5_c_init_state - Initialize a new cipher state.","krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.","krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.","krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.","krb5_c_keylengths - Return length of the specified key in bytes.","krb5_c_make_checksum - Compute a checksum (operates on keyblock).","krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)","krb5_c_make_random_key - Generate an enctype-specific random encryption key.","krb5_c_padding_length - Return a number of padding octets.","krb5_c_prf - Generate enctype-specific pseudo-random bytes.","krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.","krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.","krb5_c_random_add_entropy","krb5_c_random_make_octets - Generate pseudo-random bytes.","krb5_c_random_os_entropy","krb5_c_random_seed","krb5_c_random_to_key - Generate an enctype-specific key from random data.","krb5_c_string_to_key - Convert a string (such a password) to a key.","krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.","krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.","krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.","krb5_c_verify_checksum - Verify a checksum (operates on keyblock).","krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).","krb5_calculate_checksum","krb5_cc_cache_match - Find a credential cache with a specified client principal.","krb5_cc_close - Close a credential cache handle.","krb5_cc_copy_creds - Copy a credential cache.","krb5_cc_default - Resolve the default credential cache name.","krb5_cc_default_name - Return the name of the default credential cache.","krb5_cc_destroy - Destroy a credential cache.","krb5_cc_dup - Duplicate ccache handle.","krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.","krb5_cc_gen_new","krb5_cc_get_config - Get a configuration value from a credential cache.","krb5_cc_get_flags - Retrieve flags from a credential cache structure.","krb5_cc_get_full_name - Retrieve the full name of a credential cache.","krb5_cc_get_name - Retrieve the name, but not type of a credential cache.","krb5_cc_get_principal - Get the default principal of a credential cache.","krb5_cc_get_type - Retrieve the type of a credential cache.","krb5_cc_initialize - Initialize a credential cache.","krb5_cc_move - Move a credential cache.","krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.","krb5_cc_next_cred - Retrieve the next entry from the credential cache.","krb5_cc_remove_cred - Remove credentials from a credential cache.","krb5_cc_resolve - Resolve a credential cache name.","krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.","krb5_cc_select - Select a credential cache to use with a server principal.","krb5_cc_set_config - Store a configuration value in a credential cache.","krb5_cc_set_default_name - Set the default credential cache name.","krb5_cc_set_flags - Set options flags on a credential cache.","krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.","krb5_cc_store_cred - Store credentials in a credential cache.","krb5_cc_support_switch - Determine whether a credential cache type supports switching.","krb5_cc_switch - Make a credential cache the primary cache for its collection.","krb5_cccol_cursor_free - Free a credential cache collection cursor.","krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.","krb5_cccol_cursor_next - Get the next credential cache in the collection.","krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.","krb5_change_password - Change a password for an existing Kerberos account.","krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.","krb5_checksum_size","krb5_chpw_message - Get a result message for changing or setting a password.","krb5_cksumtype_to_string - Convert a checksum type to a string.","krb5_clear_error_message - Clear the extended error message in a context.","krb5_copy_addresses - Copy an array of addresses.","krb5_copy_authdata - Copy an authorization data list.","krb5_copy_authenticator - Copy a krb5_authenticator structure.","krb5_copy_checksum - Copy a krb5_checksum structure.","krb5_copy_context - Copy a krb5_context structure.","krb5_copy_creds - Copy a krb5_creds structure.","krb5_copy_data - Copy a krb5_data object.","krb5_copy_error_message - Copy the most recent extended error message from one context to another.","krb5_copy_keyblock - Copy a keyblock.","krb5_copy_keyblock_contents - Copy the contents of a keyblock.","krb5_copy_principal - Copy a principal.","krb5_copy_ticket - Copy a krb5_ticket structure.","krb5_decode_authdata_container - Unwrap authorization data.","krb5_decode_ticket - Decode an ASN.1-formatted ticket.","krb5_decrypt","krb5_deltat_to_string - Convert a relative time value to a string.","krb5_eblock_enctype","krb5_encode_authdata_container - Wrap authorization data in a container.","krb5_encrypt","krb5_encrypt_size","krb5_enctype_to_name - Convert an encryption type to a name or alias.","krb5_enctype_to_string - Convert an encryption type to a string.","krb5_expand_hostname - Canonicalize a hostname, possibly using name service.","krb5_find_authdata - Find authorization data elements.","krb5_finish_key","krb5_finish_random_key","krb5_free_addresses - Free the data stored in array of addresses.","krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.","krb5_free_authdata - Free the storage assigned to array of authentication data.","krb5_free_authenticator - Free a krb5_authenticator structure.","krb5_free_checksum - Free a krb5_checksum structure.","krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.","krb5_free_cksumtypes - Free an array of checksum types.","krb5_free_context - Free a krb5 library context.","krb5_free_cred_contents - Free the contents of a krb5_creds structure.","krb5_free_creds - Free a krb5_creds structure.","krb5_free_data - Free a krb5_data structure.","krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.","krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .","krb5_free_enctypes - Free an array of encryption types.","krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .","krb5_free_error_message - Free an error message generated by krb5_get_error_message() .","krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .","krb5_free_keyblock - Free a krb5_keyblock structure.","krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.","krb5_free_keytab_entry_contents - Free the contents of a key table entry.","krb5_free_principal - Free the storage assigned to a principal.","krb5_free_string - Free a string allocated by a krb5 function.","krb5_free_tgt_creds - Free an array of credential structures.","krb5_free_ticket - Free a ticket.","krb5_free_unparsed_name - Free a string representation of a principal.","krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.","krb5_get_credentials - Get an additional ticket.","krb5_get_credentials_renew","krb5_get_credentials_validate","krb5_get_default_realm - Retrieve the default realm.","krb5_get_error_message - Get the (possibly extended) error message for a code.","krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.","krb5_get_fallback_host_realm","krb5_get_host_realm - Get the Kerberos realm names for a host.","krb5_get_in_tkt_with_keytab","krb5_get_in_tkt_with_password","krb5_get_in_tkt_with_skey","krb5_get_init_creds_keytab - Get initial credentials using a key table.","krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.","krb5_get_init_creds_opt_free - Free initial credential options.","krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.","krb5_get_init_creds_opt_init","krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.","krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.","krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initial credential options.","krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.","krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.","krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.","krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.","krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.","krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.","krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.","krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.","krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.","krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.","krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.","krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.","krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.","krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.","krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.","krb5_get_init_creds_password - Get initial credentials using a password.","krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.","krb5_get_profile - Retrieve configuration profile from the context.","krb5_get_prompt_types - Get prompt types array from a context.","krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.","krb5_get_server_rcache - Generate a replay cache object for server use and open it.","krb5_get_time_offsets - Return the time offsets from the os context.","krb5_get_validated_creds - Get validated credentials from the KDC.","krb5_init_context - Create a krb5 library context.","krb5_init_context_profile - Create a krb5 library context using a specified profile.","krb5_init_creds_free - Free an initial credentials context.","krb5_init_creds_get - Acquire credentials using an initial credentials context.","krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.","krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.","krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.","krb5_init_creds_init - Create a context for acquiring initial credentials.","krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.","krb5_init_creds_set_password - Set a password for acquiring initial credentials.","krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.","krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.","krb5_init_keyblock - Initialize an empty krb5_keyblock .","krb5_init_random_key","krb5_init_secure_context - Create a krb5 library context using only configuration files.","krb5_is_config_principal - Test whether a principal is a configuration principal.","krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.","krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.","krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.","krb5_k_decrypt - Decrypt data using a key (operates on opaque key).","krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).","krb5_k_encrypt - Encrypt data using a key (operates on opaque key).","krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).","krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.","krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.","krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.","krb5_k_make_checksum - Compute a checksum (operates on opaque key).","krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)","krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).","krb5_k_reference_key - Increment the reference count on a key.","krb5_k_verify_checksum - Verify a checksum (operates on opaque key).","krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).","krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.","krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.","krb5_kt_add_entry - Add a new entry to a key table.","krb5_kt_client_default - Resolve the default client key table.","krb5_kt_close - Close a key table handle.","krb5_kt_default - Resolve the default key table.","krb5_kt_default_name - Get the default key table name.","krb5_kt_dup - Duplicate keytab handle.","krb5_kt_end_seq_get - Release a keytab cursor.","krb5_kt_free_entry","krb5_kt_get_entry - Get an entry from a key table.","krb5_kt_get_name - Get a key table name.","krb5_kt_get_type - Return the type of a key table.","krb5_kt_have_content - Check if a keytab exists and contains entries.","krb5_kt_next_entry - Retrieve the next entry from the key table.","krb5_kt_read_service_key - Retrieve a service key from a key table.","krb5_kt_remove_entry - Remove an entry from a key table.","krb5_kt_resolve - Get a handle for a key table.","krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.","krb5_kuserok - Determine if a principal is authorized to log in as a local user.","krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.","krb5_marshal_credentials - Serialize a krb5_creds object.","krb5_merge_authdata - Merge two authorization data lists into a new list.","krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.","krb5_mk_error - Format and encode a KRB_ERROR message.","krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.","krb5_mk_priv - Format a KRB-PRIV message.","krb5_mk_rep - Format and encrypt a KRB_AP_REP message.","krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.","krb5_mk_req - Create a KRB_AP_REQ message.","krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.","krb5_mk_safe - Format a KRB-SAFE message.","krb5_os_localaddr - Return all interface addresses for this host.","krb5_pac_add_buffer - Add a buffer to a PAC handle.","krb5_pac_free - Free a PAC handle.","krb5_pac_get_buffer - Retrieve a buffer value from a PAC.","krb5_pac_get_client_info - Read client information from a PAC.","krb5_pac_get_types - Return an array of buffer types in a PAC handle.","krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.","krb5_pac_parse - Unparse an encoded PAC into a new handle.","krb5_pac_sign","krb5_pac_sign_ext","krb5_pac_verify - Verify a PAC.","krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.","krb5_parse_name - Convert a string principal name to a krb5_principal structure.","krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.","krb5_prepend_error_message - Add a prefix to the message for an error code.","krb5_principal2salt - Convert a principal name into the default salt for that principal.","krb5_principal_compare - Compare two principals.","krb5_principal_compare_any_realm - Compare two principals ignoring realm components.","krb5_principal_compare_flags - Compare two principals with additional flags.","krb5_process_key","krb5_prompter_posix - Prompt user for password.","krb5_random_key","krb5_rd_cred - Read and validate a KRB-CRED message.","krb5_rd_error - Decode a KRB-ERROR message.","krb5_rd_priv - Process a KRB-PRIV message.","krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.","krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.","krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.","krb5_rd_safe - Process KRB-SAFE message.","krb5_read_password - Read a password from keyboard input.","krb5_realm_compare - Compare the realms of two principals.","krb5_recvauth - Server function for sendauth protocol.","krb5_recvauth_version - Server function for sendauth protocol with version parameter.","krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.","krb5_responder_list_questions - List the question names contained in the responder context.","krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .","krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.","krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.","krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .","krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.","krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.","krb5_responder_set_answer - Answer a named question in the responder context.","krb5_salttype_to_string - Convert a salt type to a string.","krb5_sendauth - Client function for sendauth protocol.","krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.","krb5_set_default_realm - Override the default realm for the specified context.","krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.","krb5_set_error_message - Set an extended error message for an error code.","krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.","krb5_set_kdc_send_hook - Set a KDC pre-send hook function.","krb5_set_password - Set a password for a principal using specified credentials.","krb5_set_password_using_ccache - Set a password for a principal using cached credentials.","krb5_set_principal_realm - Set the realm field of a principal.","krb5_set_real_time - Set time offset field in a krb5_context structure.","krb5_set_trace_callback - Specify a callback function for trace events.","krb5_set_trace_filename - Specify a file name for directing trace events.","krb5_sname_match - Test whether a principal matches a matching principal.","krb5_sname_to_principal - Generate a full principal name from a service name.","krb5_string_to_cksumtype - Convert a string to a checksum type.","krb5_string_to_deltat - Convert a string to a delta time value.","krb5_string_to_enctype - Convert a string to an encryption type.","krb5_string_to_key","krb5_string_to_salttype - Convert a string to a salt type.","krb5_string_to_timestamp - Convert a string to a timestamp.","krb5_timeofday - Retrieve the current time with context specific time offset adjustment.","krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.","krb5_timestamp_to_string - Convert a timestamp to a string.","krb5_tkt_creds_free - Free a TGS request context.","krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.","krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.","krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.","krb5_tkt_creds_init - Create a context to get credentials from a KDC\u2019s Ticket Granting Service.","krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.","krb5_unmarshal_credentials - Deserialize a krb5_creds object.","krb5_unparse_name - Convert a krb5_principal structure to a string representation.","krb5_unparse_name_ext - Convert krb5_principal structure to string and length.","krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.","krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.","krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.","krb5_use_enctype","krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.","krb5_verify_checksum","krb5_verify_init_creds - Verify initial credentials against a keytab.","krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.","krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.","krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.","krb5_vset_error_message - Set an extended error message for an error code using a va_list.","krb5_vwrap_error_message - Add a prefix to a different error code\u2019s message using a va_list.","krb5_wrap_error_message - Add a prefix to a different error code\u2019s message.","Complete reference - API and datatypes","ADDRTYPE_ADDRPORT","ADDRTYPE_CHAOS","ADDRTYPE_DDP","ADDRTYPE_INET","ADDRTYPE_INET6","ADDRTYPE_IPPORT","ADDRTYPE_ISO","ADDRTYPE_IS_LOCAL","ADDRTYPE_NETBIOS","ADDRTYPE_XNS","AD_TYPE_EXTERNAL","AD_TYPE_FIELD_TYPE_MASK","AD_TYPE_REGISTERED","AD_TYPE_RESERVED","AP_OPTS_ETYPE_NEGOTIATION","AP_OPTS_MUTUAL_REQUIRED","AP_OPTS_RESERVED","AP_OPTS_USE_SESSION_KEY","AP_OPTS_USE_SUBKEY","AP_OPTS_WIRE_MASK","CKSUMTYPE_CMAC_CAMELLIA128","CKSUMTYPE_CMAC_CAMELLIA256","CKSUMTYPE_CRC32","CKSUMTYPE_DESCBC","CKSUMTYPE_HMAC_MD5_ARCFOUR","CKSUMTYPE_HMAC_SHA1_96_AES128","CKSUMTYPE_HMAC_SHA1_96_AES256","CKSUMTYPE_HMAC_SHA1_DES3","CKSUMTYPE_HMAC_SHA256_128_AES128","CKSUMTYPE_HMAC_SHA384_192_AES256","CKSUMTYPE_MD5_HMAC_ARCFOUR","CKSUMTYPE_NIST_SHA","CKSUMTYPE_RSA_MD4","CKSUMTYPE_RSA_MD4_DES","CKSUMTYPE_RSA_MD5","CKSUMTYPE_RSA_MD5_DES","CKSUMTYPE_SHA1","ENCTYPE_AES128_CTS_HMAC_SHA1_96","ENCTYPE_AES128_CTS_HMAC_SHA256_128","ENCTYPE_AES256_CTS_HMAC_SHA1_96","ENCTYPE_AES256_CTS_HMAC_SHA384_192","ENCTYPE_ARCFOUR_HMAC","ENCTYPE_ARCFOUR_HMAC_EXP","ENCTYPE_CAMELLIA128_CTS_CMAC","ENCTYPE_CAMELLIA256_CTS_CMAC","ENCTYPE_DES3_CBC_ENV","ENCTYPE_DES3_CBC_RAW","ENCTYPE_DES3_CBC_SHA","ENCTYPE_DES3_CBC_SHA1","ENCTYPE_DES_CBC_CRC","ENCTYPE_DES_CBC_MD4","ENCTYPE_DES_CBC_MD5","ENCTYPE_DES_CBC_RAW","ENCTYPE_DES_HMAC_SHA1","ENCTYPE_DSA_SHA1_CMS","ENCTYPE_MD5_RSA_CMS","ENCTYPE_NULL","ENCTYPE_RC2_CBC_ENV","ENCTYPE_RSA_ENV","ENCTYPE_RSA_ES_OAEP_ENV","ENCTYPE_SHA1_RSA_CMS","ENCTYPE_UNKNOWN","KDC_OPT_ALLOW_POSTDATE","KDC_OPT_CANONICALIZE","KDC_OPT_CNAME_IN_ADDL_TKT","KDC_OPT_DISABLE_TRANSITED_CHECK","KDC_OPT_ENC_TKT_IN_SKEY","KDC_OPT_FORWARDABLE","KDC_OPT_FORWARDED","KDC_OPT_POSTDATED","KDC_OPT_PROXIABLE","KDC_OPT_PROXY","KDC_OPT_RENEW","KDC_OPT_RENEWABLE","KDC_OPT_RENEWABLE_OK","KDC_OPT_REQUEST_ANONYMOUS","KDC_OPT_VALIDATE","KDC_TKT_COMMON_MASK","KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","KRB5_ANONYMOUS_PRINCSTR","KRB5_ANONYMOUS_REALMSTR","KRB5_AP_REP","KRB5_AP_REQ","KRB5_AS_REP","KRB5_AS_REQ","KRB5_AUTHDATA_AND_OR","KRB5_AUTHDATA_AP_OPTIONS","KRB5_AUTHDATA_AUTH_INDICATOR","KRB5_AUTHDATA_CAMMAC","KRB5_AUTHDATA_ETYPE_NEGOTIATION","KRB5_AUTHDATA_FX_ARMOR","KRB5_AUTHDATA_IF_RELEVANT","KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","KRB5_AUTHDATA_KDC_ISSUED","KRB5_AUTHDATA_MANDATORY_FOR_KDC","KRB5_AUTHDATA_OSF_DCE","KRB5_AUTHDATA_SESAME","KRB5_AUTHDATA_SIGNTICKET","KRB5_AUTHDATA_WIN2K_PAC","KRB5_AUTH_CONTEXT_DO_SEQUENCE","KRB5_AUTH_CONTEXT_DO_TIME","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","KRB5_AUTH_CONTEXT_PERMIT_ALL","KRB5_AUTH_CONTEXT_RET_SEQUENCE","KRB5_AUTH_CONTEXT_RET_TIME","KRB5_AUTH_CONTEXT_USE_SUBKEY","KRB5_CRED","KRB5_CRYPTO_TYPE_CHECKSUM","KRB5_CRYPTO_TYPE_DATA","KRB5_CRYPTO_TYPE_EMPTY","KRB5_CRYPTO_TYPE_HEADER","KRB5_CRYPTO_TYPE_PADDING","KRB5_CRYPTO_TYPE_SIGN_ONLY","KRB5_CRYPTO_TYPE_STREAM","KRB5_CRYPTO_TYPE_TRAILER","KRB5_CYBERSAFE_SECUREID","KRB5_DOMAIN_X500_COMPRESS","KRB5_ENCPADATA_REQ_ENC_PA_REP","KRB5_ERROR","KRB5_FAST_REQUIRED","KRB5_GC_CACHED","KRB5_GC_CANONICALIZE","KRB5_GC_CONSTRAINED_DELEGATION","KRB5_GC_FORWARDABLE","KRB5_GC_NO_STORE","KRB5_GC_NO_TRANSIT_CHECK","KRB5_GC_USER_USER","KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","KRB5_GET_INIT_CREDS_OPT_PROXIABLE","KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","KRB5_GET_INIT_CREDS_OPT_SALT","KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","KRB5_INIT_CONTEXT_KDC","KRB5_INIT_CONTEXT_SECURE","KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","KRB5_INT16_MAX","KRB5_INT16_MIN","KRB5_INT32_MAX","KRB5_INT32_MIN","KRB5_KEYUSAGE_AD_ITE","KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","KRB5_KEYUSAGE_AD_MTE","KRB5_KEYUSAGE_AD_SIGNEDPATH","KRB5_KEYUSAGE_APP_DATA_CKSUM","KRB5_KEYUSAGE_APP_DATA_ENCRYPT","KRB5_KEYUSAGE_AP_REP_ENCPART","KRB5_KEYUSAGE_AP_REQ_AUTH","KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","KRB5_KEYUSAGE_AS_REP_ENCPART","KRB5_KEYUSAGE_AS_REQ","KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","KRB5_KEYUSAGE_CAMMAC","KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","KRB5_KEYUSAGE_FAST_ENC","KRB5_KEYUSAGE_FAST_FINISHED","KRB5_KEYUSAGE_FAST_REP","KRB5_KEYUSAGE_FAST_REQ_CHKSUM","KRB5_KEYUSAGE_GSS_TOK_MIC","KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","KRB5_KEYUSAGE_IAKERB_FINISHED","KRB5_KEYUSAGE_KDC_REP_TICKET","KRB5_KEYUSAGE_KRB_CRED_ENCPART","KRB5_KEYUSAGE_KRB_ERROR_CKSUM","KRB5_KEYUSAGE_KRB_PRIV_ENCPART","KRB5_KEYUSAGE_KRB_SAFE_CKSUM","KRB5_KEYUSAGE_PA_AS_FRESHNESS","KRB5_KEYUSAGE_PA_FX_COOKIE","KRB5_KEYUSAGE_PA_OTP_REQUEST","KRB5_KEYUSAGE_PA_PKINIT_KX","KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","KRB5_KEYUSAGE_PA_SAM_RESPONSE","KRB5_KEYUSAGE_SPAKE","KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AUTH","KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","KRB5_KPASSWD_ACCESSDENIED","KRB5_KPASSWD_AUTHERROR","KRB5_KPASSWD_BAD_VERSION","KRB5_KPASSWD_HARDERROR","KRB5_KPASSWD_INITIAL_FLAG_NEEDED","KRB5_KPASSWD_MALFORMED","KRB5_KPASSWD_SOFTERROR","KRB5_KPASSWD_SUCCESS","KRB5_LRQ_ALL_ACCT_EXPTIME","KRB5_LRQ_ALL_LAST_INITIAL","KRB5_LRQ_ALL_LAST_RENEWAL","KRB5_LRQ_ALL_LAST_REQ","KRB5_LRQ_ALL_LAST_TGT","KRB5_LRQ_ALL_LAST_TGT_ISSUED","KRB5_LRQ_ALL_PW_EXPTIME","KRB5_LRQ_NONE","KRB5_LRQ_ONE_ACCT_EXPTIME","KRB5_LRQ_ONE_LAST_INITIAL","KRB5_LRQ_ONE_LAST_RENEWAL","KRB5_LRQ_ONE_LAST_REQ","KRB5_LRQ_ONE_LAST_TGT","KRB5_LRQ_ONE_LAST_TGT_ISSUED","KRB5_LRQ_ONE_PW_EXPTIME","KRB5_NT_ENTERPRISE_PRINCIPAL","KRB5_NT_ENT_PRINCIPAL_AND_ID","KRB5_NT_MS_PRINCIPAL","KRB5_NT_MS_PRINCIPAL_AND_ID","KRB5_NT_PRINCIPAL","KRB5_NT_SMTP_NAME","KRB5_NT_SRV_HST","KRB5_NT_SRV_INST","KRB5_NT_SRV_XHST","KRB5_NT_UID","KRB5_NT_UNKNOWN","KRB5_NT_WELLKNOWN","KRB5_NT_X500_PRINCIPAL","KRB5_PAC_ATTRIBUTES_INFO","KRB5_PAC_CLIENT_CLAIMS","KRB5_PAC_CLIENT_INFO","KRB5_PAC_CREDENTIALS_INFO","KRB5_PAC_DELEGATION_INFO","KRB5_PAC_DEVICE_CLAIMS","KRB5_PAC_DEVICE_INFO","KRB5_PAC_FULL_CHECKSUM","KRB5_PAC_LOGON_INFO","KRB5_PAC_PRIVSVR_CHECKSUM","KRB5_PAC_REQUESTOR","KRB5_PAC_SERVER_CHECKSUM","KRB5_PAC_TICKET_CHECKSUM","KRB5_PAC_UPN_DNS_INFO","KRB5_PADATA_AFS3_SALT","KRB5_PADATA_AP_REQ","KRB5_PADATA_AS_CHECKSUM","KRB5_PADATA_AS_FRESHNESS","KRB5_PADATA_ENCRYPTED_CHALLENGE","KRB5_PADATA_ENC_SANDIA_SECURID","KRB5_PADATA_ENC_TIMESTAMP","KRB5_PADATA_ENC_UNIX_TIME","KRB5_PADATA_ETYPE_INFO","KRB5_PADATA_ETYPE_INFO2","KRB5_PADATA_FOR_USER","KRB5_PADATA_FX_COOKIE","KRB5_PADATA_FX_ERROR","KRB5_PADATA_FX_FAST","KRB5_PADATA_GET_FROM_TYPED_DATA","KRB5_PADATA_NONE","KRB5_PADATA_OSF_DCE","KRB5_PADATA_OTP_CHALLENGE","KRB5_PADATA_OTP_PIN_CHANGE","KRB5_PADATA_OTP_REQUEST","KRB5_PADATA_PAC_OPTIONS","KRB5_PADATA_PAC_REQUEST","KRB5_PADATA_PKINIT_KX","KRB5_PADATA_PK_AS_REP","KRB5_PADATA_PK_AS_REP_OLD","KRB5_PADATA_PK_AS_REQ","KRB5_PADATA_PK_AS_REQ_OLD","KRB5_PADATA_PW_SALT","KRB5_PADATA_REDHAT_IDP_OAUTH2","KRB5_PADATA_REDHAT_PASSKEY","KRB5_PADATA_REFERRAL","KRB5_PADATA_S4U_X509_USER","KRB5_PADATA_SAM_CHALLENGE","KRB5_PADATA_SAM_CHALLENGE_2","KRB5_PADATA_SAM_REDIRECT","KRB5_PADATA_SAM_RESPONSE","KRB5_PADATA_SAM_RESPONSE_2","KRB5_PADATA_SESAME","KRB5_PADATA_SPAKE","KRB5_PADATA_SVR_REFERRAL_INFO","KRB5_PADATA_TGS_REQ","KRB5_PADATA_USE_SPECIFIED_KVNO","KRB5_PRINCIPAL_COMPARE_CASEFOLD","KRB5_PRINCIPAL_COMPARE_ENTERPRISE","KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","KRB5_PRINCIPAL_COMPARE_UTF8","KRB5_PRINCIPAL_PARSE_ENTERPRISE","KRB5_PRINCIPAL_PARSE_IGNORE_REALM","KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","KRB5_PRINCIPAL_PARSE_NO_REALM","KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","KRB5_PRINCIPAL_UNPARSE_DISPLAY","KRB5_PRINCIPAL_UNPARSE_NO_REALM","KRB5_PRINCIPAL_UNPARSE_SHORT","KRB5_PRIV","KRB5_PROMPT_TYPE_NEW_PASSWORD","KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","KRB5_PROMPT_TYPE_PASSWORD","KRB5_PROMPT_TYPE_PREAUTH","KRB5_PVNO","KRB5_REALM_BRANCH_CHAR","KRB5_RECVAUTH_BADAUTHVERS","KRB5_RECVAUTH_SKIP_VERSION","KRB5_REFERRAL_REALM","KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","KRB5_RESPONDER_OTP_FORMAT_DECIMAL","KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","KRB5_RESPONDER_QUESTION_OTP","KRB5_RESPONDER_QUESTION_PASSWORD","KRB5_RESPONDER_QUESTION_PKINIT","KRB5_SAFE","KRB5_SAM_MUST_PK_ENCRYPT_SAD","KRB5_SAM_SEND_ENCRYPTED_SAD","KRB5_SAM_USE_SAD_AS_KEY","KRB5_TC_MATCH_2ND_TKT","KRB5_TC_MATCH_AUTHDATA","KRB5_TC_MATCH_FLAGS","KRB5_TC_MATCH_FLAGS_EXACT","KRB5_TC_MATCH_IS_SKEY","KRB5_TC_MATCH_KTYPE","KRB5_TC_MATCH_SRV_NAMEONLY","KRB5_TC_MATCH_TIMES","KRB5_TC_MATCH_TIMES_EXACT","KRB5_TC_NOTICKET","KRB5_TC_OPENCLOSE","KRB5_TC_SUPPORTED_KTYPES","KRB5_TGS_NAME","KRB5_TGS_NAME_SIZE","KRB5_TGS_REP","KRB5_TGS_REQ","KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","KRB5_WELLKNOWN_NAMESTR","LR_TYPE_INTERPRETATION_MASK","LR_TYPE_THIS_SERVER_ONLY","MAX_KEYTAB_NAME_LEN","MSEC_DIRBIT","MSEC_VAL_MASK","SALT_TYPE_AFS_LENGTH","SALT_TYPE_NO_LENGTH","THREEPARAMOPEN","TKT_FLG_ANONYMOUS","TKT_FLG_ENC_PA_REP","TKT_FLG_FORWARDABLE","TKT_FLG_FORWARDED","TKT_FLG_HW_AUTH","TKT_FLG_INITIAL","TKT_FLG_INVALID","TKT_FLG_MAY_POSTDATE","TKT_FLG_OK_AS_DELEGATE","TKT_FLG_POSTDATED","TKT_FLG_PRE_AUTH","TKT_FLG_PROXIABLE","TKT_FLG_PROXY","TKT_FLG_RENEWABLE","TKT_FLG_TRANSIT_POLICY_CHECKED","VALID_INT_BITS","VALID_UINT_BITS","krb5 simple macros","krb524_convert_creds_kdc","krb524_init_ets","krb5_const","krb5_princ_component","krb5_princ_name","krb5_princ_realm","krb5_princ_set_realm","krb5_princ_set_realm_data","krb5_princ_set_realm_length","krb5_princ_size","krb5_princ_type","krb5_roundup","krb5_x","krb5_xc","krb5 types and structures","krb5_address","krb5_addrtype","krb5_ap_rep","krb5_ap_rep_enc_part","krb5_ap_req","krb5_auth_context","krb5_authdata","krb5_authdatatype","krb5_authenticator","krb5_boolean","krb5_cc_cursor","krb5_ccache","krb5_cccol_cursor","krb5_checksum","krb5_cksumtype","krb5_const_pointer","krb5_const_principal","krb5_context","krb5_cred","krb5_cred_enc_part","krb5_cred_info","krb5_creds","krb5_crypto_iov","krb5_cryptotype","krb5_data","krb5_deltat","krb5_enc_data","krb5_enc_kdc_rep_part","krb5_enc_tkt_part","krb5_encrypt_block","krb5_enctype","krb5_error","krb5_error_code","krb5_expire_callback_func","krb5_flags","krb5_get_init_creds_opt","krb5_gic_opt_pa_data","krb5_init_creds_context","krb5_int16","krb5_int32","krb5_kdc_rep","krb5_kdc_req","krb5_key","krb5_keyblock","krb5_keytab","krb5_keytab_entry","krb5_keyusage","krb5_kt_cursor","krb5_kvno","krb5_last_req_entry","krb5_magic","krb5_mk_req_checksum_func","krb5_msgtype","krb5_octet","krb5_pa_data","krb5_pa_pac_req","krb5_pa_server_referral_data","krb5_pa_svr_referral_data","krb5_pac","krb5_pointer","krb5_post_recv_fn","krb5_pre_send_fn","krb5_preauthtype","krb5_principal","krb5_principal_data","krb5_prompt","krb5_prompt_type","krb5_prompter_fct","krb5_pwd_data","krb5_rcache","krb5_replay_data","krb5_responder_context","krb5_responder_fn","krb5_responder_otp_challenge","krb5_responder_otp_tokeninfo","krb5_responder_pkinit_challenge","krb5_responder_pkinit_identity","krb5_response","krb5_ticket","krb5_ticket_times","krb5_timestamp","krb5_tkt_authent","krb5_tkt_creds_context","krb5_trace_callback","krb5_trace_info","krb5_transited","krb5_typed_data","krb5_ui_2","krb5_ui_4","krb5_verify_init_creds_opt","passwd_phrase_element","Year 2038 considerations for uses of krb5_timestamp","Credential cache","Supported date and time formats","Kerberos V5 concepts","keytab","replay cache","stash file","Organization of the source directory","Doing the build","Building Kerberos V5","Options to configure","osconf.hin","How to build this documentation from the source","Copyright","Credential cache file format","KDC cookie format","PKINIT freshness tokens","Protocols and file formats","Keytab file format","Replay cache file format","MIT Kerberos Documentation (1.21.1)","MIT Kerberos defaults","MIT Kerberos features","MIT Kerberos License information","Credential cache selection interface (ccselect)","PKINIT certificate authorization interface (certauth)","Client preauthentication interface (clpreauth)","General plugin concepts","GSSAPI mechanism interface","Host-to-realm interface (hostrealm)","For plugin module developers","Internal pluggable interfaces","kadmin authorization interface (kadm5_auth)","KADM5 hook interface (kadm5_hook)","KDC policy interface (kdcpolicy)","KDC preauthentication interface (kdcpreauth)","Local authorization interface (localauth)","Server location interface (locate)","Configuration interface (profile)","Password quality interface (pwqual)","Resources","For users","Password management","Ticket management","User commands","kdestroy","kinit","klist","kpasswd","krb5-config","ksu","kswitch","kvno","sclient","User config files",".k5identity",".k5login","kerberos",titleterms:{"boolean":59,"byte":112,117,119,121,296,"default":14,28,36,135,136,145,156,210,227,303,305,306,347,377,378,897,900,901,917,"export":43,"function":118,219,257,363,364,375,380,381,386,"import":43,"new":108,149,236,302,322,339,946,"null":91,"public":48,789,804,"return":53,58,95,96,97,111,112,116,136,210,261,266,312,332,337,367,370,"switch":34,160,"while":41,Adding:14,15,DES:14,DNS:15,38,Doing:904,For:30,45,926,937,One:46,TGS:378,399,400,401,402,404,THE:946,The:14,32,36,Using:15,904,abbrevi:898,about:32,absolut:898,acceptor:43,access:938,account:35,166,938,acl:19,34,acquir:15,271,272,275,276,277,278,279,401,ad_type_extern:432,ad_type_field_type_mask:433,ad_type_regist:434,ad_type_reserv:435,add:34,302,333,346,417,419,420,add_entri:11,add_mkei:6,add_polici:3,add_princip:3,addit:31,126,224,350,address:25,52,53,54,62,64,82,172,198,240,332,addrtype_addrport:422,addrtype_chao:423,addrtype_ddp:424,addrtype_inet6:426,addrtype_inet:425,addrtype_ipport:427,addrtype_is_loc:429,addrtype_iso:428,addrtype_netbio:430,addrtype_xn:431,adjust:396,admin:39,41,administr:1,23,30,34,advanc:13,advic:32,38,aead:43,100,103,288,290,against:414,alia:192,all:332,alloc:106,212,214,219,236,allow:55,167,244,allow_weak_crypto:55,also:2,3,4,5,6,7,8,9,10,11,12,19,20,21,941,942,943,944,945,946,947,948,949,951,952,953,alter:897,ani:165,anonym:37,46,57,58,241,anoth:179,answer:369,372,373,ap_opts_etype_negoti:436,ap_opts_mutual_requir:437,ap_opts_reserv:438,ap_opts_use_session_kei:439,ap_opts_use_subkei:440,ap_opts_wire_mask:441,api:44,48,421,908,appdefault:21,59,60,applic:14,15,32,38,45,55,archiv:936,argument:92,ark:6,armor:246,247,arrai:98,114,130,172,198,200,204,211,220,263,295,299,325,337,ask:253,asn:185,assign:200,218,attack:25,attribut:43,338,auth:62,63,64,65,67,68,69,71,72,73,74,76,77,79,80,81,82,84,85,86,87,88,89,90,authdata:927,authent:16,23,41,65,78,200,946,author:28,37,173,184,189,195,319,320,322,412,921,927,928,932,946,953,autoconf:904,awai:26,back:17,22,background:0,901,backup:17,behavior:19,38,berkelei:24,between:44,binari:904,block:95,buffer:333,335,337,bug:953,build:57,91,92,93,904,905,908,built:285,cach:71,85,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,246,250,251,265,383,897,901,910,915,920,call:48,callback:46,63,80,245,386,cannot:41,canonic:38,194,242,capath:21,caus:79,ccach:138,247,897,ccselect:21,920,cert:41,certauth:21,921,certif:37,41,338,921,cf2:107,chain:41,challeng:365,chang:23,166,169,243,938,change_password:3,channel:936,check:165,167,284,313,checksum:63,80,81,96,109,110,111,113,114,127,129,130,170,204,294,295,298,299,390,choos:26,cipher:79,95,106,108,cksumtype_cmac_camellia128:442,cksumtype_cmac_camellia256:443,cksumtype_crc32:444,cksumtype_descbc:445,cksumtype_hmac_md5_arcfour:446,cksumtype_hmac_sha1_96_aes128:447,cksumtype_hmac_sha1_96_aes256:448,cksumtype_hmac_sha1_des3:449,cksumtype_hmac_sha256_128_aes128:450,cksumtype_hmac_sha384_192_aes256:451,cksumtype_md5_hmac_arcfour:452,cksumtype_nist_sha:453,cksumtype_rsa_md4:454,cksumtype_rsa_md4_d:455,cksumtype_rsa_md5:456,cksumtype_rsa_md5_d:457,cksumtype_sha1:458,clean:904,clear:171,clear_list:11,client:15,29,33,37,132,303,336,375,900,922,clock:15,167,close:133,304,clpreauth:21,922,code:228,346,379,417,418,419,420,collect:161,162,163,164,165,897,collis:109,combin:107,command:3,5,6,11,940,common:12,commonli:906,compar:52,105,348,349,350,362,compat:26,complet:421,compon:349,comput:104,107,113,294,concept:899,923,conf:20,21,34,59,60,config:945,950,configur:15,18,22,26,28,29,33,34,35,36,37,39,141,155,262,282,283,906,910,934,connect:41,62,consider:36,896,constrain:43,contain:165,189,313,366,content:18,31,181,203,206,209,216,217,905,926,context:62,63,64,65,67,68,69,71,72,73,74,76,77,78,79,80,81,82,84,85,86,87,88,89,90,171,179,205,262,263,266,268,269,270,271,272,273,274,275,282,365,366,373,377,396,399,400,401,402,403,946,contribut:0,conveni:48,convert:49,50,51,56,125,126,170,187,192,193,344,345,347,374,390,391,392,394,395,397,398,406,407,408,409,cooki:911,copi:134,172,173,174,175,176,177,178,179,180,181,182,183,293,copyright:909,correct:15,count:93,291,297,creat:5,6,34,37,41,78,149,268,269,275,282,286,329,330,338,403,946,create_polici:5,cred:223,323,325,354,credenti:15,41,43,46,51,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,220,235,236,237,238,240,241,242,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,264,267,270,271,272,273,274,275,276,277,278,279,323,325,330,382,383,400,401,403,414,415,416,897,910,920,cross:23,current:167,396,cursor:162,308,daemon:34,dai:410,data:58,99,100,101,102,103,104,124,173,184,189,195,198,200,209,286,287,288,289,290,320,322,365,412,927,databas:3,14,17,23,24,34,39,927,datatyp:421,date:898,db2:24,dbdefault:20,dbmodul:20,dce:328,358,decis:39,declar:805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,decod:185,355,368,371,decrement:291,decrypt:99,100,287,288,357,358,359,376,defin:36,del_str:3,deleg:43,delete_entri:11,delete_polici:3,delete_princip:3,delta:391,deprec:48,789,deriv:101,descript:2,3,4,5,6,7,8,9,10,11,12,19,941,942,943,944,945,946,947,948,949,951,952,953,deseri:405,destroi:5,6,137,939,destroy_polici:5,determin:160,319,develop:43,45,926,dictionari:25,differ:23,44,419,420,direct:387,directli:48,directori:903,904,906,discoveri:39,document:0,898,908,916,domain_realm:21,dump:6,23,duplic:138,307,durat:898,dure:41,each:34,edit:34,effect:946,element:114,130,195,295,299,empti:280,338,encod:320,324,339,encrypt:20,26,41,97,102,103,104,105,111,115,118,128,192,193,211,244,261,289,290,327,328,378,392,enctyp:26,115,117,124,229,286,292,296,enctype_aes128_cts_hmac_sha1_96:459,enctype_aes128_cts_hmac_sha256_128:460,enctype_aes256_cts_hmac_sha1_96:461,enctype_aes256_cts_hmac_sha384_192:462,enctype_arcfour_hmac:463,enctype_arcfour_hmac_exp:464,enctype_camellia128_cts_cmac:465,enctype_camellia256_cts_cmac:466,enctype_des3_cbc_env:467,enctype_des3_cbc_raw:468,enctype_des3_cbc_sha1:470,enctype_des3_cbc_sha:469,enctype_des_cbc_crc:471,enctype_des_cbc_md4:472,enctype_des_cbc_md5:473,enctype_des_cbc_raw:474,enctype_des_hmac_sha1:475,enctype_dsa_sha1_cm:476,enctype_md5_rsa_cm:477,enctype_nul:478,enctype_rc2_cbc_env:479,enctype_rsa_env:480,enctype_rsa_es_oaep_env:481,enctype_sha1_rsa_cm:482,enctype_unknown:483,end:22,entri:139,150,217,302,310,313,314,316,318,910,914,environ:2,3,4,5,6,7,8,9,10,11,12,27,906,941,942,943,944,946,947,948,949,953,epoch:410,error:12,41,171,179,212,213,228,273,346,355,379,417,418,419,420,etc:38,event:386,387,everi:158,exampl:10,11,19,46,906,945,951,952,exchang:41,404,execut:946,exist:166,264,313,expans:21,expir:41,245,extend:171,179,228,379,418,extens:43,fact:918,fail:34,41,fast:238,246,247,248,featur:906,918,field:64,83,84,97,209,384,385,file:8,18,20,21,32,33,34,282,387,902,910,913,914,915,941,942,943,947,948,950,fill:98,114,295,find:132,195,fine:906,finish:139,firewal:15,flag:66,83,142,157,238,241,242,243,248,249,255,345,350,408,409,format:185,223,323,324,325,326,327,328,331,409,898,910,911,913,914,915,forward:223,249,free:61,106,162,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,237,270,291,334,367,370,399,frequent:41,48,fresh:37,912,from:14,15,26,59,60,62,63,64,65,66,67,68,69,71,72,73,74,76,77,124,141,142,150,151,153,179,229,238,262,263,264,266,267,272,273,274,286,293,310,314,315,316,335,336,343,361,389,401,402,403,908,923,full:143,389,gener:37,62,115,117,119,121,124,213,265,296,389,917,923,get:15,41,46,63,118,141,145,164,169,223,224,228,231,235,260,263,264,267,273,279,306,310,311,317,403,404,get_init_cr:46,get_polici:3,get_princip:3,get_str:3,getdat:898,given:365,grant:403,938,gssapi:28,43,924,guid:31,handl:133,138,304,307,317,333,334,337,338,339,has:41,header:98,910,heimdal:44,hin:907,histori:3,14,23,953,hit:291,hook:380,381,929,host:17,28,32,34,41,231,332,925,hostnam:39,194,hostrealm:21,925,how:908,http:29,ident:21,372,ignor:349,includ:253,300,301,increment:23,34,297,indic:16,inform:15,21,336,901,919,initi:41,43,46,78,108,147,165,235,236,237,238,240,241,242,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,270,271,272,273,274,275,276,277,278,279,280,414,415,input:101,250,361,instal:31,33,34,904,906,946,instanc:36,instruct:946,interact:46,interfac:21,48,332,920,921,922,924,925,927,928,929,930,931,932,933,934,935,intern:804,927,interoper:918,interpos:924,iov:43,98,114,130,295,299,irc:936,iter:163,its:161,k5ident:951,k5login:952,k5srvutil:2,kadm5:19,929,kadm5_auth:21,928,kadm5_hook:21,929,kadmin:3,928,kadmind:4,923,kdb5_ldap_util:5,kdb5_util:6,kdb:927,kdc:14,20,28,34,35,37,39,41,229,253,264,267,273,279,380,381,403,404,911,917,923,930,931,kdc_opt_allow_postd:484,kdc_opt_canonic:485,kdc_opt_cname_in_addl_tkt:486,kdc_opt_disable_transited_check:487,kdc_opt_enc_tkt_in_skei:488,kdc_opt_forward:489,490,kdc_opt_postd:491,kdc_opt_proxi:492,493,kdc_opt_renew:494,495,kdc_opt_renewable_ok:496,kdc_opt_request_anonym:497,kdc_opt_valid:498,kdc_tkt_common_mask:499,kdcdefault:20,kdcissu:320,412,kdcpolici:930,kdcpreauth:21,931,kdestroi:939,941,kei:14,23,26,67,68,90,99,101,102,107,110,111,112,115,124,125,126,217,235,261,286,287,288,289,290,291,294,295,296,297,298,299,302,303,304,305,306,310,311,312,314,315,316,317,318,376,914,kerbero:0,15,17,22,23,34,39,44,49,50,51,52,127,128,166,231,285,899,905,916,917,918,919,927,939,953,keyblock:67,72,73,76,86,88,99,100,102,103,113,114,129,130,180,181,286,293,keyboard:361,keysalt:20,keytab:15,32,34,38,276,307,308,313,414,900,914,kinit:939,942,kldap:24,klist:939,943,klmdb:24,known:163,kpasswd:944,kprop:7,41,kpropd:8,kproplog:9,krb524_convert_creds_kdc:790,krb524_init_et:791,krb5:21,34,48,59,60,205,219,268,269,282,789,804,945,krb5_425_conv_princip:49,krb5_524_conv_princip:50,krb5_524_convert_cr:51,krb5_address:805,krb5_address_compar:52,krb5_address_ord:53,krb5_address_search:54,krb5_addrtyp:806,krb5_allow_weak_crypto:55,krb5_altauth_att_challenge_respons:500,krb5_aname_to_localnam:56,krb5_anonymous_princip:57,krb5_anonymous_princstr:501,krb5_anonymous_realm:58,krb5_anonymous_realmstr:502,krb5_ap_rep:503,807,krb5_ap_rep_enc_part:199,808,krb5_ap_req:504,809,krb5_appdefault_boolean:59,krb5_appdefault_str:60,krb5_as_rep:505,krb5_as_req:506,krb5_auth_con_fre:61,krb5_auth_con_genaddr:62,krb5_auth_con_get_checksum_func:63,krb5_auth_con_getaddr:64,krb5_auth_con_getauthent:65,krb5_auth_con_getflag:66,krb5_auth_con_getkei:67,krb5_auth_con_getkey_k:68,krb5_auth_con_getlocalseqnumb:69,krb5_auth_con_getlocalsubkei:70,krb5_auth_con_getrcach:71,krb5_auth_con_getrecvsubkei:72,krb5_auth_con_getrecvsubkey_k:73,krb5_auth_con_getremoteseqnumb:74,krb5_auth_con_getremotesubkei:75,krb5_auth_con_getsendsubkei:76,krb5_auth_con_getsendsubkey_k:77,krb5_auth_con_init:78,krb5_auth_con_initivector:79,krb5_auth_con_set_checksum_func:80,krb5_auth_con_set_req_cksumtyp:81,krb5_auth_con_setaddr:82,krb5_auth_con_setflag:83,krb5_auth_con_setport:84,krb5_auth_con_setrcach:85,krb5_auth_con_setrecvsubkei:86,krb5_auth_con_setrecvsubkey_k:87,krb5_auth_con_setsendsubkei:88,krb5_auth_con_setsendsubkey_k:89,krb5_auth_con_setuseruserkei:90,krb5_auth_context:61,66,83,810,krb5_auth_context_do_sequ:521,krb5_auth_context_do_tim:522,krb5_auth_context_generate_local_addr:523,krb5_auth_context_generate_local_full_addr:524,krb5_auth_context_generate_remote_addr:525,krb5_auth_context_generate_remote_full_addr:526,krb5_auth_context_permit_al:527,krb5_auth_context_ret_sequ:528,krb5_auth_context_ret_tim:529,krb5_auth_context_use_subkei:530,krb5_authdata:811,krb5_authdata_and_or:507,krb5_authdata_ap_opt:508,krb5_authdata_auth_ind:509,krb5_authdata_cammac:510,krb5_authdata_etype_negoti:511,krb5_authdata_fx_armor:512,krb5_authdata_if_relev:513,krb5_authdata_initial_verified_ca:514,krb5_authdata_kdc_issu:515,krb5_authdata_mandatory_for_kdc:516,krb5_authdata_osf_dc:517,krb5_authdata_sesam:518,krb5_authdata_signticket:519,krb5_authdata_win2k_pac:520,krb5_authdatatyp:812,krb5_authent:174,201,813,krb5_boolean:814,krb5_build_princip:91,krb5_build_principal_alloc_va:92,krb5_build_principal_ext:93,krb5_build_principal_va:94,krb5_c_block_siz:95,krb5_c_checksum_length:96,krb5_c_crypto_length:97,krb5_c_crypto_length_iov:98,krb5_c_decrypt:99,krb5_c_decrypt_iov:100,krb5_c_derive_prfplu:101,krb5_c_encrypt:102,krb5_c_encrypt_iov:103,krb5_c_encrypt_length:104,krb5_c_enctype_compar:105,krb5_c_free_stat:106,krb5_c_fx_cf2_simpl:107,krb5_c_init_st:106,108,krb5_c_is_coll_proof_cksum:109,krb5_c_is_keyed_cksum:110,krb5_c_keyed_checksum_typ:111,krb5_c_keylength:112,krb5_c_make_checksum:113,krb5_c_make_checksum_iov:114,krb5_c_make_random_kei:115,krb5_c_padding_length:116,krb5_c_prf:117,krb5_c_prf_length:118,krb5_c_prfplu:119,krb5_c_random_add_entropi:120,krb5_c_random_make_octet:121,krb5_c_random_os_entropi:122,krb5_c_random_se:123,krb5_c_random_to_kei:124,krb5_c_string_to_kei:125,krb5_c_string_to_key_with_param:126,krb5_c_valid_cksumtyp:127,krb5_c_valid_enctyp:128,krb5_c_verify_checksum:129,krb5_c_verify_checksum_iov:130,krb5_calculate_checksum:131,krb5_cc_cache_match:132,krb5_cc_close:133,krb5_cc_copy_cr:134,krb5_cc_cursor:815,krb5_cc_default:135,krb5_cc_default_nam:136,krb5_cc_destroi:137,krb5_cc_dup:138,krb5_cc_end_seq_get:139,krb5_cc_gen_new:140,krb5_cc_get_config:141,krb5_cc_get_flag:142,krb5_cc_get_full_nam:143,krb5_cc_get_nam:144,krb5_cc_get_princip:145,krb5_cc_get_typ:146,krb5_cc_initi:147,krb5_cc_move:148,krb5_cc_new_uniqu:149,krb5_cc_next_cr:150,krb5_cc_remove_cr:151,krb5_cc_resolv:152,krb5_cc_retrieve_cr:153,krb5_cc_select:154,krb5_cc_set_config:155,krb5_cc_set_default_nam:156,krb5_cc_set_flag:157,krb5_cc_start_seq_get:158,krb5_cc_store_cr:159,krb5_cc_support_switch:160,krb5_cc_switch:161,krb5_ccach:816,krb5_cccol_cursor:817,krb5_cccol_cursor_fre:162,krb5_cccol_cursor_new:163,krb5_cccol_cursor_next:164,krb5_cccol_have_cont:165,krb5_change_password:166,krb5_check_clockskew:167,krb5_checksum:175,202,203,818,krb5_checksum_s:168,krb5_chpw_messag:169,krb5_cksumtyp:819,krb5_cksumtype_to_str:170,krb5_clear_error_messag:171,krb5_const:792,krb5_const_point:820,krb5_const_princip:821,krb5_context:176,378,385,822,krb5_copy_address:172,krb5_copy_authdata:173,krb5_copy_authent:174,krb5_copy_checksum:175,krb5_copy_context:176,krb5_copy_cr:177,krb5_copy_data:178,krb5_copy_error_messag:179,krb5_copy_keyblock:180,krb5_copy_keyblock_cont:181,krb5_copy_princip:182,krb5_copy_ticket:183,krb5_cred:177,206,207,321,405,531,823,826,krb5_cred_enc_part:824,krb5_cred_info:825,krb5_crypto_iov:827,krb5_crypto_type_checksum:532,krb5_crypto_type_data:533,krb5_crypto_type_empti:534,krb5_crypto_type_head:535,krb5_crypto_type_pad:536,krb5_crypto_type_sign_onli:537,krb5_crypto_type_stream:538,krb5_crypto_type_trail:539,krb5_cryptotyp:828,krb5_cybersafe_secureid:540,krb5_data:178,208,209,829,krb5_decode_authdata_contain:184,krb5_decode_ticket:185,krb5_decrypt:186,krb5_deltat:830,krb5_deltat_to_str:187,krb5_domain_x500_compress:541,krb5_eblock_enctyp:188,krb5_enc_data:831,krb5_enc_kdc_rep_part:832,krb5_enc_tkt_part:833,krb5_encode_authdata_contain:189,krb5_encpadata_req_enc_pa_rep:542,krb5_encrypt:190,krb5_encrypt_block:834,krb5_encrypt_s:191,krb5_enctyp:835,krb5_enctype_to_nam:192,krb5_enctype_to_str:193,krb5_error:543,836,krb5_error_cod:837,krb5_expand_hostnam:194,krb5_expire_callback_func:838,krb5_fast_requir:544,krb5_find_authdata:195,krb5_finish_kei:196,krb5_finish_random_kei:197,krb5_flag:839,krb5_free_address:198,krb5_free_ap_rep_enc_part:199,krb5_free_authdata:200,krb5_free_authent:201,krb5_free_checksum:202,krb5_free_checksum_cont:203,krb5_free_cksumtyp:204,krb5_free_context:205,krb5_free_cr:207,krb5_free_cred_cont:206,krb5_free_data:208,krb5_free_data_cont:209,krb5_free_default_realm:210,krb5_free_enctyp:211,krb5_free_error:212,krb5_free_error_messag:213,krb5_free_host_realm:214,krb5_free_keyblock:215,krb5_free_keyblock_cont:216,krb5_free_keytab_entry_cont:217,krb5_free_princip:218,krb5_free_str:219,krb5_free_tgt_cr:220,krb5_free_ticket:221,krb5_free_unparsed_nam:222,krb5_fwd_tgt_cred:223,krb5_gc_cach:545,krb5_gc_canonic:546,krb5_gc_constrained_deleg:547,krb5_gc_forward:548,krb5_gc_no_stor:549,krb5_gc_no_transit_check:550,krb5_gc_user_us:551,krb5_get_credenti:224,krb5_get_credentials_renew:225,krb5_get_credentials_valid:226,krb5_get_default_realm:210,227,krb5_get_error_messag:213,228,krb5_get_etype_info:229,krb5_get_fallback_host_realm:230,krb5_get_host_realm:214,231,krb5_get_in_tkt_with_keytab:232,krb5_get_in_tkt_with_password:233,krb5_get_in_tkt_with_skei:234,krb5_get_init_creds_keytab:235,krb5_get_init_creds_opt:840,krb5_get_init_creds_opt_address_list:552,krb5_get_init_creds_opt_alloc:236,krb5_get_init_creds_opt_anonym:553,krb5_get_init_creds_opt_canonic:554,krb5_get_init_creds_opt_chg_pwd_prmpt:555,krb5_get_init_creds_opt_etype_list:556,krb5_get_init_creds_opt_forward:557,krb5_get_init_creds_opt_fre:237,krb5_get_init_creds_opt_get_fast_flag:238,krb5_get_init_creds_opt_init:239,krb5_get_init_creds_opt_preauth_list:558,krb5_get_init_creds_opt_proxi:559,krb5_get_init_creds_opt_renew_lif:560,krb5_get_init_creds_opt_salt:561,krb5_get_init_creds_opt_set_address_list:240,krb5_get_init_creds_opt_set_anonym:241,krb5_get_init_creds_opt_set_canonic:242,krb5_get_init_creds_opt_set_change_password_prompt:243,krb5_get_init_creds_opt_set_etype_list:244,krb5_get_init_creds_opt_set_expire_callback:245,krb5_get_init_creds_opt_set_fast_ccach:246,krb5_get_init_creds_opt_set_fast_ccache_nam:247,krb5_get_init_creds_opt_set_fast_flag:248,krb5_get_init_creds_opt_set_forward:249,krb5_get_init_creds_opt_set_in_ccach:250,krb5_get_init_creds_opt_set_out_ccach:251,krb5_get_init_creds_opt_set_pa:252,krb5_get_init_creds_opt_set_pac_request:253,krb5_get_init_creds_opt_set_preauth_list:254,krb5_get_init_creds_opt_set_proxi:255,krb5_get_init_creds_opt_set_renew_lif:256,krb5_get_init_creds_opt_set_respond:257,krb5_get_init_creds_opt_set_salt:258,krb5_get_init_creds_opt_set_tkt_lif:259,krb5_get_init_creds_opt_tkt_lif:562,krb5_get_init_creds_password:260,krb5_get_permitted_enctyp:261,krb5_get_profil:262,krb5_get_prompt_typ:263,krb5_get_renewed_cr:264,krb5_get_server_rcach:265,krb5_get_time_offset:266,krb5_get_validated_cr:267,krb5_gic_opt_pa_data:841,krb5_init_context:268,krb5_init_context_kdc:563,krb5_init_context_profil:269,krb5_init_context_secur:564,krb5_init_creds_context:842,krb5_init_creds_fre:270,krb5_init_creds_get:271,krb5_init_creds_get_cr:272,krb5_init_creds_get_error:273,krb5_init_creds_get_tim:274,krb5_init_creds_init:275,krb5_init_creds_set_keytab:276,krb5_init_creds_set_password:277,krb5_init_creds_set_servic:278,krb5_init_creds_step:279,krb5_init_creds_step_flag_continu:565,krb5_init_keyblock:280,krb5_init_random_kei:281,krb5_init_secure_context:282,krb5_int16:843,krb5_int16_max:566,krb5_int16_min:567,krb5_int32:844,krb5_int32_max:568,krb5_int32_min:569,krb5_is_config_princip:283,krb5_is_referral_realm:284,krb5_is_thread_saf:285,krb5_k_create_kei:286,krb5_k_decrypt:287,krb5_k_decrypt_iov:288,krb5_k_encrypt:289,krb5_k_encrypt_iov:290,krb5_k_free_kei:291,krb5_k_key_enctyp:292,krb5_k_key_keyblock:293,krb5_k_make_checksum:294,krb5_k_make_checksum_iov:295,krb5_k_prf:296,krb5_k_reference_kei:297,krb5_k_verify_checksum:298,krb5_k_verify_checksum_iov:299,krb5_kdc_rep:845,krb5_kdc_req:846,krb5_kdc_sign_ticket:300,krb5_kdc_verify_ticket:301,krb5_kei:286,292,293,847,krb5_keyblock:215,216,280,848,krb5_keytab:849,krb5_keytab_entri:850,krb5_keyusag:851,krb5_keyusage_ad_it:570,krb5_keyusage_ad_kdcissued_cksum:571,krb5_keyusage_ad_mt:572,krb5_keyusage_ad_signedpath:573,krb5_keyusage_ap_rep_encpart:576,krb5_keyusage_ap_req_auth:577,krb5_keyusage_ap_req_auth_cksum:578,krb5_keyusage_app_data_cksum:574,krb5_keyusage_app_data_encrypt:575,krb5_keyusage_as_rep_encpart:579,krb5_keyusage_as_req:580,krb5_keyusage_as_req_pa_enc_t:581,krb5_keyusage_cammac:582,krb5_keyusage_enc_challenge_cli:583,krb5_keyusage_enc_challenge_kdc:584,krb5_keyusage_fast_enc:585,krb5_keyusage_fast_finish:586,krb5_keyusage_fast_rep:587,krb5_keyusage_fast_req_chksum:588,krb5_keyusage_gss_tok_m:589,krb5_keyusage_gss_tok_wrap_integ:590,krb5_keyusage_gss_tok_wrap_priv:591,krb5_keyusage_iakerb_finish:592,krb5_keyusage_kdc_rep_ticket:593,krb5_keyusage_krb_cred_encpart:594,krb5_keyusage_krb_error_cksum:595,krb5_keyusage_krb_priv_encpart:596,krb5_keyusage_krb_safe_cksum:597,krb5_keyusage_pa_as_fresh:598,krb5_keyusage_pa_fx_cooki:599,krb5_keyusage_pa_otp_request:600,krb5_keyusage_pa_pkinit_kx:601,krb5_keyusage_pa_s4u_x509_user_repli:602,krb5_keyusage_pa_s4u_x509_user_request:603,krb5_keyusage_pa_sam_challenge_cksum:604,krb5_keyusage_pa_sam_challenge_trackid:605,krb5_keyusage_pa_sam_respons:606,krb5_keyusage_spak:607,krb5_keyusage_tgs_rep_encpart_sesskei:608,krb5_keyusage_tgs_rep_encpart_subkei:609,krb5_keyusage_tgs_req_ad_sesskei:610,krb5_keyusage_tgs_req_ad_subkei:611,krb5_keyusage_tgs_req_auth:612,krb5_keyusage_tgs_req_auth_cksum:613,krb5_kpasswd_accessdeni:614,krb5_kpasswd_autherror:615,krb5_kpasswd_bad_vers:616,krb5_kpasswd_harderror:617,krb5_kpasswd_initial_flag_need:618,krb5_kpasswd_malform:619,krb5_kpasswd_softerror:620,krb5_kpasswd_success:621,krb5_kt_add_entri:302,krb5_kt_client_default:303,krb5_kt_close:304,krb5_kt_cursor:852,krb5_kt_default:305,krb5_kt_default_nam:306,krb5_kt_dup:307,krb5_kt_end_seq_get:308,krb5_kt_free_entri:309,krb5_kt_get_entri:310,krb5_kt_get_nam:311,krb5_kt_get_typ:312,krb5_kt_have_cont:313,krb5_kt_next_entri:314,krb5_kt_read_service_kei:315,krb5_kt_remove_entri:316,krb5_kt_resolv:317,krb5_kt_start_seq_get:318,krb5_kuserok:319,krb5_kvno:853,krb5_last_req_entri:854,krb5_lrq_all_acct_exptim:622,krb5_lrq_all_last_initi:623,krb5_lrq_all_last_renew:624,krb5_lrq_all_last_req:625,krb5_lrq_all_last_tgt:626,krb5_lrq_all_last_tgt_issu:627,krb5_lrq_all_pw_exptim:628,krb5_lrq_none:629,krb5_lrq_one_acct_exptim:630,krb5_lrq_one_last_initi:631,krb5_lrq_one_last_renew:632,krb5_lrq_one_last_req:633,krb5_lrq_one_last_tgt:634,krb5_lrq_one_last_tgt_issu:635,krb5_lrq_one_pw_exptim:636,krb5_magic:855,krb5_make_authdata_kdc_issu:320,krb5_marshal_credenti:321,krb5_merge_authdata:322,krb5_mk_1cred:323,krb5_mk_error:324,krb5_mk_ncred:325,krb5_mk_priv:326,krb5_mk_rep:327,krb5_mk_rep_dc:328,krb5_mk_req:329,krb5_mk_req_checksum_func:856,krb5_mk_req_extend:330,krb5_mk_safe:331,krb5_msgtype:857,krb5_nt_ent_principal_and_id:638,krb5_nt_enterprise_princip:637,krb5_nt_ms_princip:639,krb5_nt_ms_principal_and_id:640,krb5_nt_princip:641,krb5_nt_smtp_name:642,krb5_nt_srv_hst:643,krb5_nt_srv_inst:644,krb5_nt_srv_xhst:645,krb5_nt_uid:646,krb5_nt_unknown:647,krb5_nt_wellknown:648,krb5_nt_x500_princip:649,krb5_octet:858,krb5_os_localaddr:332,krb5_pa_data:859,krb5_pa_pac_req:860,krb5_pa_server_referral_data:861,krb5_pa_svr_referral_data:862,krb5_pac:863,krb5_pac_add_buff:333,krb5_pac_attributes_info:650,krb5_pac_client_claim:651,krb5_pac_client_info:652,krb5_pac_credentials_info:653,krb5_pac_delegation_info:654,krb5_pac_device_claim:655,krb5_pac_device_info:656,krb5_pac_fre:334,krb5_pac_full_checksum:657,krb5_pac_get_buff:335,krb5_pac_get_client_info:336,krb5_pac_get_typ:337,krb5_pac_init:338,krb5_pac_logon_info:658,krb5_pac_pars:339,krb5_pac_privsvr_checksum:659,krb5_pac_requestor:660,krb5_pac_server_checksum:661,krb5_pac_sign:340,krb5_pac_sign_ext:341,krb5_pac_ticket_checksum:662,krb5_pac_upn_dns_info:663,krb5_pac_verifi:342,krb5_pac_verify_ext:343,krb5_padata_afs3_salt:664,krb5_padata_ap_req:665,krb5_padata_as_checksum:666,krb5_padata_as_fresh:667,krb5_padata_enc_sandia_securid:669,krb5_padata_enc_timestamp:670,krb5_padata_enc_unix_tim:671,krb5_padata_encrypted_challeng:668,krb5_padata_etype_info2:673,krb5_padata_etype_info:672,krb5_padata_for_us:674,krb5_padata_fx_cooki:675,krb5_padata_fx_error:676,krb5_padata_fx_fast:677,krb5_padata_get_from_typed_data:678,krb5_padata_non:679,krb5_padata_osf_dc:680,krb5_padata_otp_challeng:681,krb5_padata_otp_pin_chang:682,krb5_padata_otp_request:683,krb5_padata_pac_opt:684,krb5_padata_pac_request:685,krb5_padata_pk_as_rep:687,krb5_padata_pk_as_rep_old:688,krb5_padata_pk_as_req:689,krb5_padata_pk_as_req_old:690,krb5_padata_pkinit_kx:686,krb5_padata_pw_salt:691,krb5_padata_redhat_idp_oauth2:692,krb5_padata_redhat_passkei:693,krb5_padata_referr:694,krb5_padata_s4u_x509_us:695,krb5_padata_sam_challeng:696,krb5_padata_sam_challenge_2:697,krb5_padata_sam_redirect:698,krb5_padata_sam_respons:699,krb5_padata_sam_response_2:700,krb5_padata_sesam:701,krb5_padata_spak:702,krb5_padata_svr_referral_info:703,krb5_padata_tgs_req:704,krb5_padata_use_specified_kvno:705,krb5_parse_nam:344,krb5_parse_name_flag:345,krb5_pointer:864,krb5_post_recv_fn:865,krb5_pre_send_fn:866,krb5_preauthtyp:867,krb5_prepend_error_messag:346,krb5_princ_compon:793,krb5_princ_nam:794,krb5_princ_realm:795,krb5_princ_set_realm:796,krb5_princ_set_realm_data:797,krb5_princ_set_realm_length:798,krb5_princ_siz:799,krb5_princ_typ:800,krb5_princip:344,345,406,407,408,409,868,krb5_principal2salt:347,krb5_principal_compar:348,krb5_principal_compare_any_realm:349,krb5_principal_compare_casefold:706,krb5_principal_compare_enterpris:707,krb5_principal_compare_flag:350,krb5_principal_compare_ignore_realm:708,krb5_principal_compare_utf8:709,krb5_principal_data:869,krb5_principal_parse_enterpris:710,krb5_principal_parse_ignore_realm:711,krb5_principal_parse_no_def_realm:712,krb5_principal_parse_no_realm:713,krb5_principal_parse_require_realm:714,krb5_principal_unparse_displai:715,krb5_principal_unparse_no_realm:716,krb5_principal_unparse_short:717,krb5_priv:718,krb5_process_kei:351,krb5_prompt:870,krb5_prompt_typ:871,krb5_prompt_type_new_password:719,krb5_prompt_type_new_password_again:720,krb5_prompt_type_password:721,krb5_prompt_type_preauth:722,krb5_prompter_fct:872,krb5_prompter_posix:352,krb5_pvno:723,krb5_pwd_data:873,krb5_random_kei:353,krb5_rcach:874,krb5_rd_cred:354,krb5_rd_error:355,krb5_rd_priv:356,krb5_rd_rep:357,krb5_rd_rep_dc:358,krb5_rd_req:359,krb5_rd_safe:360,krb5_read_error:212,krb5_read_password:361,krb5_realm_branch_char:724,krb5_realm_compar:362,krb5_recvauth:363,krb5_recvauth_badauthv:725,krb5_recvauth_skip_vers:726,krb5_recvauth_vers:364,krb5_referral_realm:284,727,krb5_replay_data:875,krb5_responder_context:876,krb5_responder_fn:877,krb5_responder_get_challeng:365,krb5_responder_list_quest:366,krb5_responder_otp_challeng:878,krb5_responder_otp_challenge_fre:367,krb5_responder_otp_flags_collect_pin:728,krb5_responder_otp_flags_collect_token:729,krb5_responder_otp_flags_nextotp:730,krb5_responder_otp_flags_separate_pin:731,krb5_responder_otp_format_alphanumer:732,krb5_responder_otp_format_decim:733,krb5_responder_otp_format_hexadecim:734,krb5_responder_otp_get_challeng:367,368,krb5_responder_otp_set_answ:369,krb5_responder_otp_tokeninfo:879,krb5_responder_pkinit_challeng:880,krb5_responder_pkinit_challenge_fre:370,krb5_responder_pkinit_flags_token_user_pin_count_low:735,krb5_responder_pkinit_flags_token_user_pin_final_tri:736,krb5_responder_pkinit_flags_token_user_pin_lock:737,krb5_responder_pkinit_get_challeng:370,371,krb5_responder_pkinit_ident:881,krb5_responder_pkinit_set_answ:372,krb5_responder_question_otp:368,369,738,krb5_responder_question_password:739,krb5_responder_question_pkinit:371,372,740,krb5_responder_set_answ:373,krb5_respons:882,krb5_roundup:801,krb5_safe:741,krb5_salttype_to_str:374,krb5_sam_must_pk_encrypt_sad:742,krb5_sam_send_encrypted_sad:743,krb5_sam_use_sad_as_kei:744,krb5_sendauth:212,375,krb5_server_decrypt_ticket_keytab:376,krb5_set_default_realm:377,krb5_set_default_tgs_enctyp:378,krb5_set_error_messag:379,krb5_set_kdc_recv_hook:380,krb5_set_kdc_send_hook:381,krb5_set_password:382,krb5_set_password_using_ccach:383,krb5_set_principal_realm:384,krb5_set_real_tim:385,krb5_set_trace_callback:386,krb5_set_trace_filenam:387,krb5_sname_match:388,krb5_sname_to_princip:389,krb5_string_to_cksumtyp:390,krb5_string_to_deltat:391,krb5_string_to_enctyp:392,krb5_string_to_kei:393,krb5_string_to_salttyp:394,krb5_string_to_timestamp:395,krb5_tc_match_2nd_tkt:745,krb5_tc_match_authdata:746,krb5_tc_match_flag:747,krb5_tc_match_flags_exact:748,krb5_tc_match_is_skei:749,krb5_tc_match_ktyp:750,krb5_tc_match_srv_nameonli:751,krb5_tc_match_tim:752,krb5_tc_match_times_exact:753,krb5_tc_noticket:754,krb5_tc_openclos:755,krb5_tc_supported_ktyp:756,krb5_tgs_name:757,krb5_tgs_name_s:758,krb5_tgs_rep:759,krb5_tgs_req:760,krb5_ticket:183,883,krb5_ticket_tim:884,krb5_timeofdai:396,krb5_timestamp:885,896,krb5_timestamp_to_sfstr:397,krb5_timestamp_to_str:398,krb5_tkt_authent:886,krb5_tkt_creds_context:887,krb5_tkt_creds_fre:399,krb5_tkt_creds_get:400,krb5_tkt_creds_get_cr:401,krb5_tkt_creds_get_tim:402,krb5_tkt_creds_init:403,krb5_tkt_creds_step:404,krb5_tkt_creds_step_flag_continu:761,krb5_trace_callback:888,krb5_trace_info:889,krb5_transit:890,krb5_typed_data:891,krb5_ui_2:892,krb5_ui_4:893,krb5_unmarshal_credenti:405,krb5_unparse_nam:406,krb5_unparse_name_ext:407,krb5_unparse_name_flag:408,krb5_unparse_name_flags_ext:409,krb5_us_timeofdai:410,krb5_use_enctyp:411,krb5_verify_authdata_kdc_issu:412,krb5_verify_checksum:413,krb5_verify_init_cr:414,krb5_verify_init_creds_opt:894,krb5_verify_init_creds_opt_ap_req_nofail:762,krb5_verify_init_creds_opt_init:415,krb5_verify_init_creds_opt_set_ap_req_nofail:416,krb5_vprepend_error_messag:417,krb5_vset_error_messag:418,krb5_vwrap_error_messag:419,krb5_wellknown_namestr:763,krb5_wrap_error_messag:420,krb5_x:802,krb5_xc:803,krb5kdc:10,krb:107,223,323,325,326,331,354,355,356,360,krb_ap_rep:327,328,357,358,krb_ap_req:329,330,359,krb_error:324,krbtgt:14,23,ksu:946,kswitch:947,ktadd:3,ktremov:3,ktutil:11,kvno:948,last:273,ldap:23,24,ldapsearch:38,legaci:14,48,length:93,96,97,98,104,112,118,407,lib:903,libdefault:21,librari:205,268,269,282,285,licens:919,lifetim:256,259,lightn:24,like:917,line:5,6,link:42,list:5,11,20,41,54,92,111,173,261,322,366,918,936,list_mkei:6,list_polici:3,5,list_princip:3,list_request:3,11,lndir:904,load:6,23,local:56,69,82,84,319,932,localauth:21,932,locat:28,247,933,lock:3,lockout:35,log:20,41,319,923,login:28,lr_type_interpretation_mask:764,lr_type_this_server_onli:765,machin:33,macro:789,mail:936,make:161,man:908,manag:938,939,manipul:47,map:24,39,master:14,23,match:284,388,max_keytab_name_len:766,mechan:28,924,member:805,807,808,809,811,813,818,821,823,824,825,826,827,829,831,832,833,834,836,840,841,845,846,848,850,854,859,860,861,862,868,869,870,873,875,878,879,880,881,882,883,884,886,889,890,891,894,895,memori:24,214,merg:322,messag:12,43,97,169,171,179,213,223,228,323,324,325,326,327,328,329,330,331,346,354,355,356,357,358,359,360,379,417,418,419,420,mic:43,migrat:26,mismatch:38,mit:0,23,44,916,917,918,919,modifi:5,modify_polici:3,5,modify_princip:3,modul:19,24,28,923,924,926,most:179,906,move:148,msec_dirbit:767,msec_val_mask:768,multithread:285,name:38,39,43,56,91,92,93,135,136,143,144,149,152,156,192,194,231,306,311,344,345,347,366,373,387,389,897,901,906,negoex:924,next:150,164,279,314,404,note:941,number:69,74,116,object:178,265,321,405,obtain:400,905,939,octet:116,offset:266,385,396,older:26,one:179,372,onli:282,onto:39,opaqu:287,288,289,290,294,295,296,298,299,open:265,openldap:22,38,oper:23,99,100,102,103,113,114,129,130,287,288,289,290,294,295,296,298,299,optimist:258,option:3,4,5,6,7,8,9,10,20,21,46,157,236,237,238,240,241,242,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,397,415,906,941,942,943,944,945,946,947,948,order:53,organ:903,osconf:907,other:36,otp:20,36,output:118,251,397,over:163,overrid:38,55,377,overview:23,pac:253,300,301,333,334,335,336,337,338,339,342,343,packag:906,908,pad:98,116,397,page:908,936,paramet:21,126,364,pars:47,357,358,359,passwd_phrase_el:895,password:46,125,126,166,169,243,260,277,352,361,382,383,935,938,path:917,pepper:107,perform:35,permit:261,pin:46,pkinit:20,21,37,46,912,921,place:100,103,288,290,pluggabl:927,plugin:21,28,923,926,polici:23,930,port:39,84,possibl:194,228,300,301,343,post:380,pre:381,preauthent:36,40,252,254,258,922,931,precomput:92,prefix:346,417,419,420,prepar:158,163,prerequisit:905,previous:106,prf:101,119,primari:34,161,princip:15,23,34,35,38,47,49,50,56,57,91,92,93,132,145,154,182,218,222,278,283,319,344,345,347,348,349,350,362,382,383,384,388,389,910,priv:326,356,privileg:23,338,procedur:14,process:139,356,360,profil:28,55,262,269,934,program:1,906,prompt:243,263,352,prompter:46,proof:109,propag:23,34,39,917,properti:939,protocol:363,364,375,913,provis:38,proxi:29,proxiabl:255,pseudo:117,118,119,121,296,purge_mkei:6,purgekei:3,pwqual:21,935,qualiti:935,938,question:46,365,366,369,372,373,quick:918,quit:3,11,random:115,117,118,119,121,124,296,rare:48,read:158,336,354,361,read_kt:11,realm:20,21,23,28,39,58,210,227,231,343,349,362,377,384,925,receiv:72,73,86,87,380,recent:179,refer:31,291,297,421,908,refus:41,reject:41,rel:187,releas:308,908,remot:74,82,84,remov:14,15,151,316,rename_princip:3,renew:256,264,replai:71,85,265,901,915,replic:35,replica:34,39,917,represent:222,406,request:26,279,399,400,401,402,404,requir:416,946,resolv:135,152,303,305,resourc:936,respond:46,257,365,366,373,restrict:240,953,result:169,retir:14,retriev:59,60,64,65,66,67,68,69,71,72,73,74,76,77,142,143,144,146,150,153,227,229,238,262,272,274,292,293,314,315,318,335,365,396,401,402,410,revers:38,rfc:101,119,risk:25,rout:41,rpc:328,358,s2kparam:229,s4u:43,safe:331,360,salt:229,258,347,374,394,salt_type_afs_length:769,salt_type_no_length:770,sampl:20,21,sclient:949,search:54,sec:410,section:20,21,59,60,secur:17,32,38,911,946,see:2,3,4,5,6,7,8,9,10,11,12,19,20,21,941,942,943,944,945,946,947,948,949,951,952,953,seen:41,select:26,154,920,send:76,77,88,89,381,sendauth:41,363,364,375,separ:904,sequenc:69,74,sequenti:139,158,318,seri:139,serial:321,server:14,15,32,41,154,265,363,364,933,servic:14,26,38,39,194,278,315,389,403,session:26,67,68,90,261,set:55,80,81,82,83,84,85,86,87,88,89,90,156,157,169,240,241,242,243,244,245,246,247,248,249,250,251,254,255,256,257,258,259,277,323,378,379,380,381,382,383,384,385,416,418,set_str:3,setup:35,shell:38,946,should:48,side:946,sign:300,320,signatur:300,301,simpl:789,908,sinc:410,singl:323,904,site:908,size:95,skew:15,167,socket:62,softwar:905,some:32,101,sourc:903,908,spake:40,911,specif:38,97,115,117,124,296,396,specifi:21,53,54,112,127,128,132,149,153,269,276,278,343,376,377,382,386,387,sserver:12,ssh:38,start:34,318,stash:6,902,stashsrvpw:5,state:35,79,106,108,storag:200,218,store:43,155,159,198,string:60,91,93,107,125,126,170,187,193,210,219,222,344,345,374,390,391,392,394,395,397,398,406,407,408,409,strong:14,struct:368,371,structur:20,21,61,66,83,142,174,175,176,177,183,199,201,202,203,206,207,208,209,215,216,220,236,292,293,344,378,385,406,407,408,409,415,804,subkei:72,73,76,77,86,87,88,89,sun:23,suppli:252,330,support:14,41,100,103,160,285,288,290,898,synchron:400,synopsi:2,3,4,5,6,7,8,9,10,11,12,941,942,943,944,945,946,947,948,949,syntax:19,system:410,906,917,tabdump:6,tabl:217,235,302,303,304,305,306,310,311,312,314,315,316,317,318,376,tarbal:908,target:946,termin:91,test:35,109,110,283,285,388,904,tgt:223,thi:332,898,908,threeparamopen:771,ticket:23,185,221,224,253,256,259,274,300,301,376,402,403,939,time:46,167,187,266,274,385,391,396,402,410,898,timestamp:167,395,397,398,tkt_flg_anonym:772,tkt_flg_enc_pa_rep:773,tkt_flg_forward:774,775,tkt_flg_hw_auth:776,tkt_flg_initi:777,tkt_flg_invalid:778,tkt_flg_may_postd:779,tkt_flg_ok_as_deleg:780,tkt_flg_postdat:781,tkt_flg_pre_auth:782,tkt_flg_proxi:784,tkt_flg_proxiabl:783,tkt_flg_renew:785,tkt_flg_transit_policy_check:786,token:36,37,43,912,tool:897,topic:13,trace:41,386,387,trailer:98,tree:904,trivial:911,troubleshoot:41,42,tune:906,tutori:42,two:52,105,107,322,348,349,350,362,type:14,20,24,26,36,41,43,81,96,97,105,109,110,111,118,127,128,144,146,149,160,170,192,193,204,211,244,254,261,263,312,337,374,378,390,392,394,804,897,901,906,uniqu:149,unix:32,33,917,unlock:3,unpars:339,unset:241,242,243,249,255,unwrap:184,412,updat:23,908,update_princ_encrypt:6,upgrad:14,usabl:111,usag:14,use:79,154,265,276,897,use_mkei:6,used:48,898,906,user:46,319,352,937,940,950,uses:896,using:91,92,93,99,101,102,119,194,235,260,264,269,271,282,287,289,330,376,382,383,400,417,418,419,904,util:903,va_list:417,418,419,valid:127,128,130,267,299,354,valid_int_bit:787,valid_uint_bit:788,valu:59,60,141,155,187,335,367,370,391,variabl:26,27,92,906,953,variou:42,verif:41,415,416,938,verifi:46,127,128,129,298,301,342,343,412,414,version:364,911,via:101,view:5,939,view_polici:5,web:908,936,whether:109,110,160,283,285,388,416,whitepap:42,wiki:936,within:167,904,without:908,work:15,wrap:43,189,write_kt:11,year:896,your:15,938,zero:209,291}})
\ No newline at end of file

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/index.html Changed

@@ -12,7 +12,7 @@
 <script type="text/javascript">
 var DOCUMENTATION_OPTIONS = {
 URL_ROOT: '../',
- VERSION: '1.20.1',
+ VERSION: '1.21.1',
 COLLAPSE_INDEX: false,
 FILE_SUFFIX: '.html',
 HAS_SOURCE: true,
@@ -27,7 +27,7 @@
 <link rel="search" title="Search" href="../search.html" />
 <link rel="copyright" title="Copyright" href="../copyright.html" />
 <link rel="next" title="Password management" href="pwd_mgmt.html" />
- <link rel="prev" title="MIT Kerberos Documentation (1.20.1)" href="../index.html" /> 
+ <link rel="prev" title="MIT Kerberos Documentation (1.21.1)" href="../index.html" /> 
 </head>
 <body>
 <div class="header-wrapper">
@@ -40,7 +40,7 @@
 
 <a href="../index.html" title="Full Table of Contents"
 accesskey="C">Contents</a> |
- <a href="../index.html" title="MIT Kerberos Documentation (1.20.1)"
+ <a href="../index.html" title="MIT Kerberos Documentation (1.21.1)"
 accesskey="P">previous</a> |
 <a href="pwd_mgmt.html" title="Password management"
 accesskey="N">next</a> |
@@ -149,14 +149,14 @@
 
 <div class="footer-wrapper">
 <div class="footer" >
- <div class="right" >Release: 1.20.1 
- &copy; <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
+ <div class="right" >Release: 1.21.1 
+ &copy; <a href="../copyright.html">Copyright</a> 1985-2023, MIT.
 </div>
 <div class="left">
 
 <a href="../index.html" title="Full Table of Contents"
 >Contents</a> |
- <a href="../index.html" title="MIT Kerberos Documentation (1.20.1)"
+ <a href="../index.html" title="MIT Kerberos Documentation (1.21.1)"
 >previous</a> |
 <a href="pwd_mgmt.html" title="Password management"
 >next</a> |

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/pwd_mgmt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/pwd_mgmt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/tkt_mgmt.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/tkt_mgmt.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/kdestroy.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/kdestroy.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/kinit.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/kinit.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/klist.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/klist.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/kpasswd.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/kpasswd.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/krb5-config.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/krb5-config.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/ksu.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/ksu.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/kswitch.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/kswitch.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/kvno.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/kvno.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_commands/sclient.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_commands/sclient.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_config/index.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_config/index.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_config/k5identity.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_config/k5identity.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_config/k5login.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_config/k5login.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/html/user/user_config/kerberos.html -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/html/user/user_config/kerberos.html Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/mitK5defaults.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/mitK5defaults.rst Changed

@@ -59,18 +59,19 @@
 operating system, the paths are generally chosen to match the
 operating system's filesystem layout.
 
-==========================  =============  ===========================  ===========================
-Description                 Symbolic name  Custom build path            Typical OS path
-==========================  =============  ===========================  ===========================
-User programs               BINDIR         ``/usr/local/bin``           ``/usr/bin``
-Libraries and plugins       LIBDIR         ``/usr/local/lib``           ``/usr/lib``
-Parent of KDC state dir     LOCALSTATEDIR  ``/usr/local/var``           ``/var``
-Parent of KDC runtime dir   RUNSTATEDIR    ``/usr/local/var/run``       ``/run``
-Administrative programs     SBINDIR        ``/usr/local/sbin``          ``/usr/sbin``
-Alternate krb5.conf dir     SYSCONFDIR     ``/usr/local/etc``           ``/etc``
-Default ccache name         DEFCCNAME      ``FILE:/tmp/krb5cc_%{uid}``  ``FILE:/tmp/krb5cc_%{uid}``
-Default keytab name         DEFKTNAME      ``FILE:/etc/krb5.keytab``    ``FILE:/etc/krb5.keytab``
-==========================  =============  ===========================  ===========================
+==========================  ==============  ===========================  ===========================
+Description                 Symbolic name   Custom build path            Typical OS path
+==========================  ==============  ===========================  ===========================
+User programs               BINDIR          ``/usr/local/bin``           ``/usr/bin``
+Libraries and plugins       LIBDIR          ``/usr/local/lib``           ``/usr/lib``
+Parent of KDC state dir     LOCALSTATEDIR   ``/usr/local/var``           ``/var``
+Parent of KDC runtime dir   RUNSTATEDIR     ``/usr/local/var/run``       ``/run``
+Administrative programs     SBINDIR         ``/usr/local/sbin``          ``/usr/sbin``
+Alternate krb5.conf dir     SYSCONFDIR      ``/usr/local/etc``           ``/etc``
+Default ccache name         DEFCCNAME       ``FILE:/tmp/krb5cc_%{uid}``  ``FILE:/tmp/krb5cc_%{uid}``
+Default keytab name         DEFKTNAME       ``FILE:/etc/krb5.keytab``    ``FILE:/etc/krb5.keytab``
+Default PKCS11 module       PKCS11_MODNAME  ``opensc-pkcs11.so``         ``opensc-pkcs11.so``
+==========================  ==============  ===========================  ===========================
 
 The default client keytab name (DEFCKTNAME) typically defaults to
 ``FILE:/usr/local/var/krb5/user/%{euid}/client.keytab`` for a custom

_service:tar_scm:krb5-1.20.1.tar.gz/doc/mitK5features.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/mitK5features.rst Changed

@@ -642,6 +642,48 @@
 
   - Converted the remaining Tcl tests to Python.
 
+Release 1.21
+
+* User experience:
+
+  - Added a credential cache type providing compatibility with the
+    macOS 11 native credential cache.
+
+* Developer experience:
+
+  - libkadm5 will use the provided krb5_context object to read
+    configuration values, instead of creating its own.
+
+  - Added an interface to retrieve the ticket session key from a GSS
+    context.
+
+* Protocol evolution:
+
+  - The KDC will no longer issue tickets with RC4 or triple-DES
+    session keys unless explicitly configured with the new allow_rc4
+    or allow_des3 variables respectively.
+
+  - The KDC will assume that all services can handle aes256-sha1
+    session keys unless the service principal has a session_enctypes
+    string attribute.
+
+  - Support for PAC full KDC checksums has been added to mitigate an
+    S4U2Proxy privilege escalation attack.
+
+  - The PKINIT client will advertise a more modern set of supported
+    CMS algorithms.
+
+* Code quality:
+
+  - Removed unused code in libkrb5, libkrb5support, and the PKINIT
+    module.
+
+  - Modernized the KDC code for processing TGS requests, the code for
+    encrypting and decrypting key data, the PAC handling code, and the
+    GSS library packet parsing and composition code.
+
+  - Improved the test framework's detection of memory errors in daemon
+    processes when used with asan.
 
 `Pre-authentication mechanisms`

_service:tar_scm:krb5-1.20.1.tar.gz/doc/notice.rst -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/notice.rst Changed

@@ -1,4 +1,4 @@
-Copyright |copy| 1985-2022 by the Massachusetts Institute of Technology.
+Copyright |copy| 1985-2023 by the Massachusetts Institute of Technology.
 
 All rights reserved.
 
@@ -690,6 +690,36 @@
 
 -------------------
 
+    Copyright |copy| 2022 United States Government as represented by the
+    Secretary of the Navy.  All rights reserved.
+
+    Redistribution and use in source and binary forms, with or without
+    modification, are permitted provided that the following conditions
+    are met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in
+      the documentation and/or other materials provided with the
+      distribution.
+
+    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+    FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+    COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+    INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+    (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+    SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+    HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+    STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+    ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+    OF THE POSSIBILITY OF SUCH DAMAGE.
+
+-------------------
+
     Copyright |copy| 1991, 1992, 1994 by Cygnus Support.
 
     Permission to use, copy, modify, and

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/admin.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/admin.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/admin.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/admin.tex Changed

@@ -55,7 +55,7 @@
 
 \title{Kerberos Administration Guide}
 \date{ }
-\release{1.20.1}
+\release{1.21.1}
 \author{MIT}
 \newcommand{\sphinxlogo}{\vbox{}}
 \renewcommand{\releasename}{Release}
@@ -623,7 +623,7 @@
 Once your KDCs are set up and running, you are ready to use
 {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} to load principals for your users, hosts, and other
 services into the Kerberos database.  This procedure is described
-fully in {\hyperref\detokenize{admin/database:add-mod-del-princs}{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}.
+fully in {\hyperref\detokenize{admin/database:principals}{\sphinxcrossref{\DUrole{std,std-ref}{Principals}}}}.
 
 You may occasionally want to use one of your replica KDCs as the
 primary.  This might happen if you are upgrading the primary KDC, or
@@ -770,7 +770,7 @@
 
 In order to generate a keytab for a host, the host must have a
 principal in the Kerberos database.  The procedure for adding hosts to
-the database is described fully in {\hyperref\detokenize{admin/database:add-mod-del-princs}{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}.  (See
+the database is described fully in {\hyperref\detokenize{admin/database:principals}{\sphinxcrossref{\DUrole{std,std-ref}{Principals}}}}.  (See
 {\hyperref\detokenize{admin/install_kdc:replica-host-key}{\sphinxcrossref{\DUrole{std,std-ref}{Create host keytabs for replica KDCs}}}} for a brief description.)  The keytab is
 generated by running {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} and issuing the {\hyperref\detokenize{admin/admin_commands/kadmin_local:ktadd}{\sphinxcrossref{\DUrole{std,std-ref}{ktadd}}}}
 command.
@@ -976,6 +976,18 @@
 \label{\detokenize{admin/conf_files/krb5_conf:libdefaults}}\label{\detokenize{admin/conf_files/krb5_conf:id1}}
 The libdefaults section may contain any of the following relations:
 \begin{description}
+\item{\sphinxstylestrong{allow\_des3}} \leavevmode
+Permit the KDC to issue tickets with des3-cbc-sha1 session keys.
+In future releases, this flag will allow des3-cbc-sha1 to be used
+at all.  The default value for this tag is false.  (Added in
+release 1.21.)
+
+\item{\sphinxstylestrong{allow\_rc4}} \leavevmode
+Permit the KDC to issue tickets with arcfour-hmac session keys.
+In future releases, this flag will allow arcfour-hmac to be used
+at all.  The default value for this tag is false.  (Added in
+release 1.21.)
+
 \item{\sphinxstylestrong{allow\_weak\_crypto}} \leavevmode
 If this flag is set to false, then weak encryption types (as noted
 in {\hyperref\detokenize{admin/conf_files/kdc_conf:encryption-types}{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}) will be filtered
@@ -1936,7 +1948,7 @@
 All keyword/values are optional.  \sphinxstyleemphasis{modname} specifies the location
 of a library implementing PKCS \#11.  If a value is encountered
 with no keyword, it is assumed to be the \sphinxstyleemphasis{modname}.  If no
-module-name is specified, the default is \sphinxcode{opensc-pkcs11.so}.
+module-name is specified, the default is {\hyperref\detokenize{mitK5defaults:paths}{\sphinxcrossref{\DUrole{std,std-ref}{PKCS11\_MODNAME}}}}.
 \sphinxcode{slotid=} and/or \sphinxcode{token=} may be specified to force the use of
 a particular smard card reader or token if there is more than one
 available.  \sphinxcode{certid=} and/or \sphinxcode{certlabel=} may be specified to
@@ -3998,822 +4010,103 @@
 commands and options.
 
 
-\section{kadmin options}
-\label{\detokenize{admin/database:kadmin-options}}
-You can invoke {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} or kadmin.local with any of the
-following options:
-
-\sphinxstylestrong{kadmin}
-{}\sphinxstylestrong{-O}\textbar{}\sphinxstylestrong{-N}{}
-{}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{}
-{}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{}
-{}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{}
-{}{}\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}{}\textbar{}{}\sphinxstylestrong{-k} {}\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}{}{}\textbar{}\sphinxstylestrong{-n}{}
-{}\sphinxstylestrong{-w} \sphinxstyleemphasis{password}{}
-{}\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{}:\sphinxstyleemphasis{port}{}{}
-{}command args…{}
-
-\sphinxstylestrong{kadmin.local}
-{}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{}
-{}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{}
-{}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{}
-{}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{}
-{}\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …{}
-{}\sphinxstylestrong{-m}{}
-{}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{}
-{}command args…{}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}} \leavevmode
-Use \sphinxstyleemphasis{realm} as the default database realm.
-
-\item{\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}} \leavevmode
-Use \sphinxstyleemphasis{principal} to authenticate.  Otherwise, kadmin will append
-\sphinxcode{/admin} to the primary principal name of the default ccache,
-the value of the \sphinxstylestrong{USER} environment variable, or the username as
-obtained with getpwuid, in order of preference.
-
-\item{\sphinxstylestrong{-k}} \leavevmode
-Use a keytab to decrypt the KDC response instead of prompting for
-a password.  In this case, the default principal will be
-\sphinxcode{host/hostname}.  If there is no keytab specified with the
-\sphinxstylestrong{-t} option, then the default keytab will be used.
-
-\item{\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}} \leavevmode
-Use \sphinxstyleemphasis{keytab} to decrypt the KDC response.  This can only be used
-with the \sphinxstylestrong{-k} option.
-
-\item{\sphinxstylestrong{-n}} \leavevmode
-Requests anonymous processing.  Two types of anonymous principals
-are supported.  For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure \sphinxstylestrong{pkinit\_anchors} in the client’s
-{\hyperref\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.  Then use the \sphinxstylestrong{-n} option with a principal
-of the form \sphinxcode{@REALM} (an empty principal name followed by the
-at-sign and a realm name).  If permitted by the KDC, an anonymous
-ticket will be returned.  A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm.  For this mode, use \sphinxcode{kinit
--n} with a normal principal name.  If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal.  As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.
-
-\item{\sphinxstylestrong{-c} \sphinxstyleemphasis{credentials\_cache}} \leavevmode
-Use \sphinxstyleemphasis{credentials\_cache} as the credentials cache.  The cache
-should contain a service ticket for the \sphinxcode{kadmin/admin} or
-\sphinxcode{kadmin/ADMINHOST} (where \sphinxstyleemphasis{ADMINHOST} is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-\DUrole{xref,std,std-ref}{kinit(1)} program.  If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.
-
-\item{\sphinxstylestrong{-w} \sphinxstyleemphasis{password}} \leavevmode
-Use \sphinxstyleemphasis{password} instead of prompting for one.  Use this option with
-care, as it may expose the password to other users on the system
-via the process list.
-
-\item{\sphinxstylestrong{-q} \sphinxstyleemphasis{query}} \leavevmode
-Perform the specified query and then exit.
-
-\item{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}} \leavevmode
-Specifies the name of the KDC database.  This option does not
-apply to the LDAP database module.
-
-\item{\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{}:\sphinxstyleemphasis{port}{}} \leavevmode
-Specifies the admin server which kadmin should contact.
-
-\item{\sphinxstylestrong{-m}} \leavevmode
-If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.
-
-\item{\sphinxstylestrong{-e} “\sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …”} \leavevmode
-Sets the keysalt list to be used for any new keys created.  See
-{\hyperref\detokenize{admin/conf_files/kdc_conf:keysalt-lists}{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of possible
-values.
-
-\item{\sphinxstylestrong{-O}} \leavevmode
-Force use of old AUTH\_GSSAPI authentication flavor.
-
-\item{\sphinxstylestrong{-N}} \leavevmode
-Prevent fallback to AUTH\_GSSAPI authentication flavor.
-
-\item{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}} \leavevmode
-Specifies the database specific arguments.  See the next section
-for supported options.
-
-\end{description}
-
-
-\section{Date Format}
-\label{\detokenize{admin/database:date-format}}
-For the supported date-time formats see \DUrole{xref,std,std-ref}{getdate} section
-in \DUrole{xref,std,std-ref}{datetime}.
-
-
 \section{Principals}
-\label{\detokenize{admin/database:principals}}
+\label{\detokenize{admin/database:principals}}\label{\detokenize{admin/database:id1}}
 Each entry in the Kerberos database contains a Kerberos principal and
 the attributes and policies associated with that principal.
 
-
-\subsection{Adding, modifying and deleting principals}
-\label{\detokenize{admin/database:add-mod-del-princs}}\label{\detokenize{admin/database:adding-modifying-and-deleting-principals}}
 To add a principal to the database, use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{add\_principal} command.
-
-To modify attributes of a principal, use the kadmin
-\sphinxstylestrong{modify\_principal} command.
-
-To delete a principal, use the kadmin \sphinxstylestrong{delete\_principal} command.
-
-
-\subsection{add\_principal}
-\label{\detokenize{admin/database:add-principal}}\begin{quote}
-
-\sphinxstylestrong{add\_principal} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{newprinc}
-\end{quote}
-
-Creates the principal \sphinxstyleemphasis{newprinc}, prompting twice for a password.  If
-no password policy is specified with the \sphinxstylestrong{-policy} option, and the
-policy named \sphinxcode{default} is assigned to the principal if it exists.
-However, creating a policy named \sphinxcode{default} will not automatically
-assign this policy to previously existing principals.  This policy
-assignment can be suppressed with the \sphinxstylestrong{-clearpolicy} option.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Aliases: \sphinxstylestrong{addprinc}, \sphinxstylestrong{ank}
-
-Options:
-\begin{description}
-\item{\sphinxstylestrong{-expire} \sphinxstyleemphasis{expdate}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The expiration date of the principal.
-
-\item{\sphinxstylestrong{-pwexpire} \sphinxstyleemphasis{pwexpdate}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The password expiration date.
-
-\item{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{maxlife}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum ticket life
-for the principal.
-
-\item{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{maxrenewlife}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum renewable
-life of tickets for the principal.
-
-\item{\sphinxstylestrong{-kvno} \sphinxstyleemphasis{kvno}} \leavevmode
-The initial key version number.
-
-\item{\sphinxstylestrong{-policy} \sphinxstyleemphasis{policy}} \leavevmode
-The password policy used by this principal.  If not specified, the
-policy \sphinxcode{default} is used if it exists (unless \sphinxstylestrong{-clearpolicy}
-is specified).
-
-\item{\sphinxstylestrong{-clearpolicy}} \leavevmode
-Prevents any policy from being assigned when \sphinxstylestrong{-policy} is not
-specified.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_postdated}} \leavevmode
-\sphinxstylestrong{-allow\_postdated} prohibits this principal from obtaining
-postdated tickets.  \sphinxstylestrong{+allow\_postdated} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_forwardable}} \leavevmode
-\sphinxstylestrong{-allow\_forwardable} prohibits this principal from obtaining
-forwardable tickets.  \sphinxstylestrong{+allow\_forwardable} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_renewable}} \leavevmode
-\sphinxstylestrong{-allow\_renewable} prohibits this principal from obtaining
-renewable tickets.  \sphinxstylestrong{+allow\_renewable} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_proxiable}} \leavevmode
-\sphinxstylestrong{-allow\_proxiable} prohibits this principal from obtaining
-proxiable tickets.  \sphinxstylestrong{+allow\_proxiable} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_dup\_skey}} \leavevmode
-\sphinxstylestrong{-allow\_dup\_skey} disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-\sphinxstylestrong{+allow\_dup\_skey} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{requires\_preauth}} \leavevmode
-\sphinxstylestrong{+requires\_preauth} requires this principal to preauthenticate
-before being allowed to kinit.  \sphinxstylestrong{-requires\_preauth} clears this
-flag.  When \sphinxstylestrong{+requires\_preauth} is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{requires\_hwauth}} \leavevmode
-\sphinxstylestrong{+requires\_hwauth} requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
-\sphinxstylestrong{-requires\_hwauth} clears this flag.  When \sphinxstylestrong{+requires\_hwauth} is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{ok\_as\_delegate}} \leavevmode
-\sphinxstylestrong{+ok\_as\_delegate} sets the \sphinxstylestrong{okay as delegate} flag on tickets
-issued with this principal as the service.  Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service.  \sphinxstylestrong{-ok\_as\_delegate} clears this
-flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_svr}} \leavevmode
-\sphinxstylestrong{-allow\_svr} prohibits the issuance of service tickets for this
-principal.  In release 1.17 and later, user-to-user service
-tickets are still allowed unless the \sphinxstylestrong{-allow\_dup\_skey} flag is
-also set.  \sphinxstylestrong{+allow\_svr} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_tgs\_req}} \leavevmode
-\sphinxstylestrong{-allow\_tgs\_req} specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-\sphinxstylestrong{+allow\_tgs\_req} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{allow\_tix}} \leavevmode
-\sphinxstylestrong{-allow\_tix} forbids the issuance of any tickets for this
-principal.  \sphinxstylestrong{+allow\_tix} clears this flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{needchange}} \leavevmode
-\sphinxstylestrong{+needchange} forces a password change on the next initial
-authentication to this principal.  \sphinxstylestrong{-needchange} clears this
-flag.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{password\_changing\_service}} \leavevmode
-\sphinxstylestrong{+password\_changing\_service} marks this principal as a password
-change service principal.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{ok\_to\_auth\_as\_delegate}} \leavevmode
-\sphinxstylestrong{+ok\_to\_auth\_as\_delegate} allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{no\_auth\_data\_required}} \leavevmode
-\sphinxstylestrong{+no\_auth\_data\_required} prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.
-
-\item{\{-\textbar{}+\}\sphinxstylestrong{lockdown\_keys}} \leavevmode
-\sphinxstylestrong{+lockdown\_keys} prevents keys for this principal from leaving
-the KDC via kadmind.  The chpass and extract operations are denied
-for a principal with this attribute.  The chrand operation is
-allowed, but will not return the new keys.  The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.
-
-\item{\sphinxstylestrong{-randkey}} \leavevmode
-Sets the key of the principal to a random value.
-
-\item{\sphinxstylestrong{-nokey}} \leavevmode
-Causes the principal to be created with no key.  New in release
-1.12.
-
-\item{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}} \leavevmode
-Sets the password of the principal to the specified string and
-does not prompt for a password.  Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.
-
-\item{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…} \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal.  See {\hyperref\detokenize{admin/conf_files/kdc_conf:keysalt-lists}{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_princ\_args}} \leavevmode
-Indicates database-specific options.  The options for the LDAP
-database module are:
-\begin{description}
-\item{\sphinxstylestrong{-x dn=}\sphinxstyleemphasis{dn}} \leavevmode
-Specifies the LDAP object that will contain the Kerberos
-principal being created.
-
-\item{\sphinxstylestrong{-x linkdn=}\sphinxstyleemphasis{dn}} \leavevmode
-Specifies the LDAP object to which the newly created Kerberos
-principal object will point.
-
-\item{\sphinxstylestrong{-x containerdn=}\sphinxstyleemphasis{container\_dn}} \leavevmode
-Specifies the container object under which the Kerberos
-principal is to be created.
-
-\item{\sphinxstylestrong{-x tktpolicy=}\sphinxstyleemphasis{policy}} \leavevmode
-Associates a ticket policy to the Kerberos principal.
-
-\end{description}
-
-\begin{sphinxadmonition}{note}{Note:}\begin{itemize}
-\item {} 
-The \sphinxstylestrong{containerdn} and \sphinxstylestrong{linkdn} options cannot be
-specified with the \sphinxstylestrong{dn} option.
-
-\item {} 
-If the \sphinxstyleemphasis{dn} or \sphinxstyleemphasis{containerdn} options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.
-
-\item {} 
-\sphinxstyleemphasis{dn} and \sphinxstyleemphasis{containerdn} should be within the subtrees or
-principal container configured in the realm.
-
-\end{itemize}
-\end{sphinxadmonition}
-
-\end{description}
-
-Example:
+\sphinxstylestrong{add\_principal} command.  User principals should usually be created
+with the \sphinxcode{+requires\_preauth -allow\_svr} options to help mitigate
+dictionary attacks (see {\hyperref\detokenize{admin/dictionary:dictionary}{\sphinxcrossref{\DUrole{std,std-ref}{Addressing dictionary attack risks}}}}):
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{jennifer}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
+\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}svr} \PYG{n}{alice}
+\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{alice@KRBTEST.COM}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
+\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{alice@KRBTEST.COM}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
 \end{sphinxVerbatim}
 
+User principals which will authenticate with {\hyperref\detokenize{admin/pkinit:pkinit}{\sphinxcrossref{\DUrole{std,std-ref}{PKINIT configuration}}}} should
+instead by created with the \sphinxcode{-nokey} option:
+\begin{quote}
 
-\subsection{modify\_principal}
-\label{\detokenize{admin/database:modify-principal}}\begin{quote}
-
-\sphinxstylestrong{modify\_principal} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Modifies the specified principal, changing the fields as specified.
-The options to \sphinxstylestrong{add\_principal} also apply to this command, except
-for the \sphinxstylestrong{-randkey}, \sphinxstylestrong{-pw}, and \sphinxstylestrong{-e} options.  In addition, the
-option \sphinxstylestrong{-clearpolicy} will clear the current policy of a principal.
-
-This command requires the \sphinxstyleemphasis{modify} privilege.
-
-Alias: \sphinxstylestrong{modprinc}
-
-Options (in addition to the \sphinxstylestrong{addprinc} options):
-\begin{description}
-\item{\sphinxstylestrong{-unlock}} \leavevmode
-Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.
-
-\end{description}
-
-
-\subsection{delete\_principal}
-\label{\detokenize{admin/database:delete-principal}}\begin{quote}
-
-\sphinxstylestrong{delete\_principal} {}\sphinxstylestrong{-force}{} \sphinxstyleemphasis{principal}
+kadmin: addprinc -nokey alice
 \end{quote}
 
-Deletes the specified \sphinxstyleemphasis{principal} from the database.  This command
-prompts for deletion, unless the \sphinxstylestrong{-force} option is given.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delprinc}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:examples}}
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{dn}\PYG{o}{=}\PYG{n}{cn}\PYG{o}{=}\PYG{n}{jennifer}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{n}{jennifer}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=}\PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{containerdn}\PYG{o}{=}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{linkdn}\PYG{o}{=}\PYG{n}{cn}\PYG{o}{=}\PYG{n}{david}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{n}{david}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=}\PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If you want to associate a ticket policy to a principal, all you need
-to do is:
+Service principals can be created with the \sphinxcode{-nokey} option;
+long-term keys will be added when a keytab is generated:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{tktpolicy}\PYG{o}{=}\PYG{n}{userpolicy} \PYG{n}{david}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{modified}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
+\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{nokey} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
+\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{n}{foo}\PYG{o}{.}\PYG{n}{keytab} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
+\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
+\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
 \end{sphinxVerbatim}
 
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called “stduser”, with a temporary
-password (which you want the user to change immediately), you would
-type the following:
+To modify attributes of an existing principal, use the kadmin
+\sphinxstylestrong{modify\_principal} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{david} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1/1/2000 12:01am EST}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{policy} \PYG{n}{stduser} \PYG{o}{+}\PYG{n}{needchange}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal}
-\PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}  \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
+\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{n}{tomorrow} \PYG{n}{alice}
+\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{alice@KRBTEST.COM}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{modified}\PYG{o}{.}
 \end{sphinxVerbatim}
 
-If you want to delete a principal:
+To delete a principal, use the kadmin \sphinxstylestrong{delete\_principal} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-kadmin: delprinc jennifer
-Are you sure you want to delete the principal
-\PYGZdq{}jennifer@ATHENA.MIT.EDU\PYGZdq{}? (yes/no): yes
-Principal \PYGZdq{}jennifer@ATHENA.MIT.EDU\PYGZdq{} deleted.
-Make sure that you have removed this principal from
-all ACLs before reusing.
-kadmin:
+kadmin: delprinc alice
+Are you sure you want to delete the principal \PYGZdq{}alice@KRBTEST.COM\PYGZdq{}? (yes/no): yes
+Principal \PYGZdq{}alice@KRBTEST.COM\PYGZdq{} deleted.
+Make sure that you have removed this principal from all ACLs before reusing.
 \end{sphinxVerbatim}
 
+To change a principal’s password, use the kadmin \sphinxstylestrong{change\_password}
+command.  Password changes made through kadmin are subject to the same
+password policies as would apply to password changes made through
+\DUrole{xref,std,std-ref}{kpasswd(1)}.
 
-\subsection{Retrieving information about a principal}
-\label{\detokenize{admin/database:retrieving-information-about-a-principal}}
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{get\_principal} command.
+To view the attributes of a principal, use the kadmin{}`
+\sphinxstylestrong{get\_principal} command.
 
 To generate a listing of principals, use the kadmin
 \sphinxstylestrong{list\_principals} command.
 
 
-\subsection{get\_principal}
-\label{\detokenize{admin/database:get-principal}}\begin{quote}
-
-\sphinxstylestrong{get\_principal} {}\sphinxstylestrong{-terse}{} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Gets the attributes of principal.  With the \sphinxstylestrong{-terse} option, outputs
-fields as quoted tab-separated strings.
-
-This command requires the \sphinxstylestrong{inquire} privilege, or that the principal
-running the the program to be the same as the one being listed.
-
-Alias: \sphinxstylestrong{getprinc}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{Principal}\PYG{p}{:} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{}\PYG{n}{never}\PYG{p}{}
-\PYG{n}{Last} \PYG{n}{password} \PYG{n}{change}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996}
-\PYG{n}{Password} \PYG{n}{expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{}\PYG{n}{never}\PYG{p}{}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{7} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Last} \PYG{n}{modified}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996} \PYG{p}{(}\PYG{n}{bjaspan}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{)}
-\PYG{n}{Last} \PYG{n}{successful} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{}\PYG{n}{never}\PYG{p}{}
-\PYG{n}{Last} \PYG{n}{failed} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{}\PYG{n}{never}\PYG{p}{}
-\PYG{n}{Failed} \PYG{n}{password} \PYG{n}{attempts}\PYG{p}{:} \PYG{l+m+mi}{0}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192}
-\PYG{n}{MKey}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}
-\PYG{n}{Attributes}\PYG{p}{:}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{p}{}\PYG{n}{none}\PYG{p}{}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{systest}
-\PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}   \PYG{l+m+mi}{3}    \PYG{l+m+mi}{86400}     \PYG{l+m+mi}{604800}    \PYG{l+m+mi}{1}
-\PYG{l+m+mi}{785926535} \PYG{l+m+mi}{753241234} \PYG{l+m+mi}{785900000}
-\PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}     \PYG{l+m+mi}{786100034} \PYG{l+m+mi}{0}    \PYG{l+m+mi}{0}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{list\_principals}
-\label{\detokenize{admin/database:list-principals}}\begin{quote}
-
-\sphinxstylestrong{list\_principals} {}\sphinxstyleemphasis{expression}{}
-\end{quote}
-
-Retrieves all or some principal names.  \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{}{}}.  All principal names matching the expression are
-printed.  If no expression is provided, all principal names are
-printed.  If the expression does not contain an \sphinxcode{@} character, an
-\sphinxcode{@} character followed by the local realm is appended to the
-expression.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Alias: \sphinxstylestrong{listprincs}, \sphinxstylestrong{get\_principals}, \sphinxstylestrong{getprincs}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:}  \PYG{n}{listprincs} \PYG{n}{test}\PYG{o}{*}
-\PYG{n}{test3}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test2}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test1}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{testuser}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Changing passwords}
-\label{\detokenize{admin/database:changing-passwords}}
-To change a principal’s password use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{change\_password} command.
-
-
-\subsection{change\_password}
-\label{\detokenize{admin/database:change-password}}\begin{quote}
-
-\sphinxstylestrong{change\_password} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Changes the password of \sphinxstyleemphasis{principal}.  Prompts for a new password if
-neither \sphinxstylestrong{-randkey} or \sphinxstylestrong{-pw} is specified.
-
-This command requires the \sphinxstylestrong{changepw} privilege, or that the
-principal running the program is the same as the principal being
-changed.
-
-Alias: \sphinxstylestrong{cpw}
-
-The following options are available:
-\begin{description}
-\item{\sphinxstylestrong{-randkey}} \leavevmode
-Sets the key of the principal to a random value.
-
-\item{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}} \leavevmode
-Set the password to the specified string.  Using this option in a
-script may expose the password to other users on the system via
-the process list.
-
-\item{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…} \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal.  See {\hyperref\detokenize{admin/conf_files/kdc_conf:keysalt-lists}{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item{\sphinxstylestrong{-keepold}} \leavevmode
-Keeps the existing keys in the database.  This flag is usually not
-necessary except perhaps for \sphinxcode{krbtgt} principals.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{cpw} \PYG{n}{systest}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{changed}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-Password changes through kadmin are subject to the same
-password policies as would apply to password changes through
-\DUrole{xref,std,std-ref}{kpasswd(1)}.
-\end{sphinxadmonition}
-
-
 \section{Policies}
-\label{\detokenize{admin/database:policies}}\label{\detokenize{admin/database:id1}}
+\label{\detokenize{admin/database:id2}}\label{\detokenize{admin/database:policies}}
 A policy is a set of rules governing passwords.  Policies can dictate
 minimum and maximum password lifetimes, minimum number of characters
 and character classes a password must contain, and the number of old
 passwords kept in the database.
 
-
-\subsection{Adding, modifying and deleting policies}
-\label{\detokenize{admin/database:adding-modifying-and-deleting-policies}}
-To add a new policy, use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{add\_policy} command.
-
-To modify attributes of a principal, use the kadmin \sphinxstylestrong{modify\_policy}
-command.
-
-To delete a policy, use the kadmin \sphinxstylestrong{delete\_policy} command.
-
-
-\subsection{add\_policy}
-\label{\detokenize{admin/database:add-policy}}\begin{quote}
-
-\sphinxstylestrong{add\_policy} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Adds a password policy named \sphinxstyleemphasis{policy} to the database.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Alias: \sphinxstylestrong{addpol}
-
-The following options are available:
-\begin{description}
-\item{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{time}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the maximum
-lifetime of a password.
-
-\item{\sphinxstylestrong{-minlife} \sphinxstyleemphasis{time}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the minimum
-lifetime of a password.
-
-\item{\sphinxstylestrong{-minlength} \sphinxstyleemphasis{length}} \leavevmode
-Sets the minimum length of a password.
-
-\item{\sphinxstylestrong{-minclasses} \sphinxstyleemphasis{number}} \leavevmode
-Sets the minimum number of character classes required in a
-password.  The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.
-
-\item{\sphinxstylestrong{-history} \sphinxstyleemphasis{number}} \leavevmode
-Sets the number of past keys kept for a principal.  This option is
-not supported with the LDAP KDC database module.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-maxfailure}}\begin{description}
-\item{\sphinxstylestrong{-maxfailure} \sphinxstyleemphasis{maxnumber}} \leavevmode
-Sets the number of authentication failures before the principal is
-locked.  Authentication failures are only tracked for principals
-which require preauthentication.  The counter of failed attempts
-resets to 0 after a successful attempt to authenticate.  A
-\sphinxstyleemphasis{maxnumber} value of 0 (the default) disables lockout.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-failurecountinterval}}\begin{description}
-\item{\sphinxstylestrong{-failurecountinterval} \sphinxstyleemphasis{failuretime}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the allowable time
-between authentication failures.  If an authentication failure
-happens after \sphinxstyleemphasis{failuretime} has elapsed since the previous
-failure, the number of authentication failures is reset to 1.  A
-\sphinxstyleemphasis{failuretime} value of 0 (the default) means forever.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-lockoutduration}}\begin{description}
-\item{\sphinxstylestrong{-lockoutduration} \sphinxstyleemphasis{lockouttime}} \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing.  A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with \sphinxcode{modprinc -unlock}.
-
-\item{\sphinxstylestrong{-allowedkeysalts}} \leavevmode
-Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys.  See
-{\hyperref\detokenize{admin/conf_files/kdc_conf:keysalt-lists}{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only.  To clear the allowed key/salt policy use
-a value of ‘-‘.
-
-\end{description}
-
-Example:
+To add a new policy, use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{add\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{add\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{2 days}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{minlength} \PYG{l+m+mi}{5} \PYG{n}{guests}
-\PYG{n}{kadmin}\PYG{p}{:}
+\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addpol} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 year}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{history} \PYG{l+m+mi}{3} \PYG{n}{stduser}
 \end{sphinxVerbatim}
 
+To modify attributes of a principal, use the kadmin \sphinxstylestrong{modify\_policy}
+command.  To delete a policy, use the kadmin \sphinxstylestrong{delete\_policy}
+command.
 
-\subsection{modify\_policy}
-\label{\detokenize{admin/database:modify-policy}}\begin{quote}
-
-\sphinxstylestrong{modify\_policy} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Modifies the password policy named \sphinxstyleemphasis{policy}.  Options are as described
-for \sphinxstylestrong{add\_policy}.
-
-This command requires the \sphinxstylestrong{modify} privilege.
-
-Alias: \sphinxstylestrong{modpol}
-
-
-\subsection{delete\_policy}
-\label{\detokenize{admin/database:delete-policy}}\begin{quote}
-
-\sphinxstylestrong{delete\_policy} {}\sphinxstylestrong{-force}{} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Deletes the password policy named \sphinxstyleemphasis{policy}.  Prompts for confirmation
-before deletion.  The command will fail if the policy is in use by any
-principals.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delpol}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-kadmin: del\PYGZus{}policy guests
-Are you sure you want to delete the policy \PYGZdq{}guests\PYGZdq{}?
-(yes/no): yes
-kadmin:
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-You must cancel the policy from \sphinxstyleemphasis{all} principals before
-deleting it.  The \sphinxstyleemphasis{delete\_policy} command will fail if the policy
-is in use by any principals.
-\end{sphinxadmonition}
-
-
-\subsection{Retrieving policies}
-\label{\detokenize{admin/database:retrieving-policies}}
-To retrieve a policy, use the {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{get\_policy} command.
-
-You can retrieve the list of policies with the kadmin
-\sphinxstylestrong{list\_policies} command.
-
-
-\subsection{get\_policy}
-\label{\detokenize{admin/database:get-policy}}\begin{quote}
-
-\sphinxstylestrong{get\_policy} {} \sphinxstylestrong{-terse} {} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Displays the values of the password policy named \sphinxstyleemphasis{policy}.  With the
-\sphinxstylestrong{-terse} flag, outputs the fields as quoted strings separated by
-tabs.
-
-This command requires the \sphinxstylestrong{inquire} privilege.
-
-Alias: \sphinxstylestrong{getpol}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{n}{admin}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{n}{admin}
-\PYG{n}{Maximum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{180} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{length}\PYG{p}{:} \PYG{l+m+mi}{6}
-\PYG{n}{Minimum} \PYG{n}{number} \PYG{n}{of} \PYG{n}{password} \PYG{n}{character} \PYG{n}{classes}\PYG{p}{:} \PYG{l+m+mi}{2}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{old} \PYG{n}{keys} \PYG{n}{kept}\PYG{p}{:} \PYG{l+m+mi}{5}
-\PYG{n}{Reference} \PYG{n}{count}\PYG{p}{:} \PYG{l+m+mi}{17}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{admin}
-\PYG{n}{admin}     \PYG{l+m+mi}{15552000}  \PYG{l+m+mi}{0}    \PYG{l+m+mi}{6}    \PYG{l+m+mi}{2}    \PYG{l+m+mi}{5}    \PYG{l+m+mi}{17}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.
-
-
-\subsection{list\_policies}
-\label{\detokenize{admin/database:list-policies}}\begin{quote}
+To associate a policy with a principal, use the kadmin
+\sphinxstylestrong{modify\_principal} command with the \sphinxstylestrong{-policy} option:
+\begin{quote}
 
-\sphinxstylestrong{list\_policies} {}\sphinxstyleemphasis{expression}{}
+kadmin: modprinc -policy stduser alice
+Principal “\sphinxhref{mailto:alice@KRBTEST.COM}{alice@KRBTEST.COM}” modified.
 \end{quote}
 
-Retrieves all or some policy names.  \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{}{}}.  All policy names matching the expression are
-printed.  If no expression is provided, all existing policy names are
-printed.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Aliases: \sphinxstylestrong{listpols}, \sphinxstylestrong{get\_policies}, \sphinxstylestrong{getpols}.
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:}  \PYG{n}{listpols}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n+nb}{dict}\PYG{o}{\PYGZhy{}}\PYG{n}{only}
-\PYG{n}{once}\PYG{o}{\PYGZhy{}}\PYG{n}{a}\PYG{o}{\PYGZhy{}}\PYG{n+nb}{min}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-
-\PYG{n}{kadmin}\PYG{p}{:}  \PYG{n}{listpols} \PYG{n}{t}\PYG{o}{*}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Policies and principals}
-\label{\detokenize{admin/database:policies-and-principals}}
-Policies can be applied to principals as they are created by using
-the \sphinxstylestrong{-policy} flag to {\hyperref\detokenize{admin/admin_commands/kadmin_local:add-principal}{\sphinxcrossref{\DUrole{std,std-ref}{add\_principal}}}}. Existing principals can
-be modified by using the \sphinxstylestrong{-policy} or \sphinxstylestrong{-clearpolicy} flag to
-{\hyperref\detokenize{admin/admin_commands/kadmin_local:modify-principal}{\sphinxcrossref{\DUrole{std,std-ref}{modify\_principal}}}}.
+A principal entry may be associated with a nonexistent policy, either
+because the policy did not exist at the time of associated or was
+deleted afterwards.  kadmin will warn when associated a principal with
+a nonexistent policy, and will annotate the policy name with “{}does
+not exist{}” in the \sphinxstylestrong{get\_principal} output.
 
 
 \subsection{Updating the history key}
@@ -4842,7 +4135,7 @@
 
 
 \section{Privileges}
-\label{\detokenize{admin/database:privileges}}\label{\detokenize{admin/database:id2}}
+\label{\detokenize{admin/database:privileges}}\label{\detokenize{admin/database:id3}}
 Administrative privileges for the Kerberos database are stored in the
 file {\hyperref\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}.
 
@@ -4860,238 +4153,77 @@
 \section{Operations on the Kerberos database}
 \label{\detokenize{admin/database:db-operations}}\label{\detokenize{admin/database:operations-on-the-kerberos-database}}
 The {\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} command is the primary tool for administrating
-the Kerberos database.
-
-\sphinxstylestrong{kdb5\_util}
-{}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{}
-{}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{}
-{}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{}
-{}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{}
-{}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{}
-{}\sphinxstylestrong{-m}{}
-{}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{}
-{}\sphinxstylestrong{-P} \sphinxstyleemphasis{password}{}
-{}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{}
-\sphinxstyleemphasis{command} {}\sphinxstyleemphasis{command\_options}{}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}} \leavevmode
-specifies the Kerberos realm of the database.
-
-\item{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}} \leavevmode
-specifies the name under which the principal database is stored;
-by default the database is that listed in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.  The
-password policy database and lock files are also derived from this
-value.
-
-\item{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}} \leavevmode
-specifies the key type of the master key in the database.  The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}} \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1.  Note that 0 is not allowed.
-
-\item{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}} \leavevmode
-principal name for the master key in the database.  If not
-specified, the name is determined by the \sphinxstylestrong{master\_key\_name}
-variable in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item{\sphinxstylestrong{-m}} \leavevmode
-specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.
-
-\item{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stash\_file}} \leavevmode
-specifies the stash filename of the master database password.  If
-not specified, the filename is determined by the
-\sphinxstylestrong{key\_stash\_file} variable in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}} \leavevmode
-specifies the master database password.  Using this option may
-expose the password to other users on the system via the process
-list.
-
-\item{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}} \leavevmode
-specifies database-specific options.  See {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for
-supported options.
-
-\end{description}
+the Kerberos database when using the DB2 or LMDB modules (see
+{\hyperref\detokenize{admin/dbtypes:dbtypes}{\sphinxcrossref{\DUrole{std,std-ref}{Database types}}}}).  Creating a database is described in
+{\hyperref\detokenize{admin/install_kdc:create-db}{\sphinxcrossref{\DUrole{std,std-ref}{Create the KDC database}}}}.
 
+To create a stash file using the master password (because the database
+was not created with one using the \sphinxcode{create -s} flag, or after
+restoring from a backup which did not contain the stash file), use the
+kdb5\_util \sphinxstylestrong{stash} command:
 
-\subsection{Dumping a Kerberos database to a file}
-\label{\detokenize{admin/database:dumping-a-kerberos-database-to-a-file}}
-To dump a Kerberos database into a file, use the {\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}
-\sphinxstylestrong{dump} command on one of the KDCs.
-\begin{quote}
-
-\sphinxstylestrong{dump} {}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{}
-{}\sphinxstylestrong{-verbose}{} {}\sphinxstylestrong{-mkey\_convert}{} {}\sphinxstylestrong{-new\_mkey\_file}
-\sphinxstyleemphasis{mkey\_file}{} {}\sphinxstylestrong{-rev}{} {}\sphinxstylestrong{-recurse}{} {}\sphinxstyleemphasis{filename}
-{}\sphinxstyleemphasis{principals}…{}{}
-\end{quote}
-
-Dumps the current Kerberos and KADM5 database into an ASCII file.  By
-default, the database is dumped in current format, “kdb5\_util
-load\_dump version 7”.  If filename is not specified, or is the string
-“-“, the dump is sent to standard output.  Options:
-\begin{description}
-\item{\sphinxstylestrong{-b7}} \leavevmode
-causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5\_util
-load\_dump version 4”).  This was the dump format produced on
-releases prior to 1.2.2.
-
-\item{\sphinxstylestrong{-r13}} \leavevmode
-causes the dump to be in the Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”).  This was the dump format produced on
-releases prior to 1.8.
-
-\item{\sphinxstylestrong{-r18}} \leavevmode
-causes the dump to be in the Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”).  This was the dump format produced on
-releases prior to 1.11.
-
-\item{\sphinxstylestrong{-verbose}} \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item{\sphinxstylestrong{-mkey\_convert}} \leavevmode
-prompts for a new master key.  This new master key will be used to
-re-encrypt principal key data in the dumpfile.  The principal keys
-themselves will not be changed.
-
-\item{\sphinxstylestrong{-new\_mkey\_file} \sphinxstyleemphasis{mkey\_file}} \leavevmode
-the filename of a stash file.  The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile.  The key
-data in the database will not be changed.
-
-\item{\sphinxstylestrong{-rev}} \leavevmode
-dumps in reverse order.  This may recover principals that do not
-dump normally, in cases where database corruption has occurred.
-
-\item{\sphinxstylestrong{-recurse}} \leavevmode
-causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred.  In cases of such
-corruption, this option will probably retrieve more principals
-than the \sphinxstylestrong{-rev} option will.
+\fvset{hllines={, ,}}%
+\begin{sphinxVerbatim}commandchars=\\\{\}
+\PYGZdl{} kdb5\PYGZus{}util stash
+kdb5\PYGZus{}util: Cannot find/read stored master key while reading master key
+kdb5\PYGZus{}util: Warning: proceeding without master key
+Enter KDC database master key:  \PYGZlt{}= Type the KDC database master password.
+\end{sphinxVerbatim}
 
-\DUrole{versionmodified}{Changed in version 1.15: }Release 1.15 restored the functionality of the \sphinxstylestrong{-recurse}
-option.
+To destroy a database, use the kdb5\_util destroy command:
 
-\DUrole{versionmodified}{Changed in version 1.5: }The \sphinxstylestrong{-recurse} option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.
+\fvset{hllines={, ,}}%
+\begin{sphinxVerbatim}commandchars=\\\{\}
+\PYGZdl{} kdb5\PYGZus{}util destroy
+Deleting KDC database stored in \PYGZsq{}/var/krb5kdc/principal\PYGZsq{}, are you sure?
+(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
+OK, deleting database \PYGZsq{}/var/krb5kdc/principal\PYGZsq{}...
+** Database \PYGZsq{}/var/krb5kdc/principal\PYGZsq{} destroyed.
+\end{sphinxVerbatim}
 
-\end{description}
 
+\subsection{Dumping and loading a Kerberos database}
+\label{\detokenize{admin/database:dumping-and-loading-a-kerberos-database}}\label{\detokenize{admin/database:restore-from-dump}}
+To dump a Kerberos database into a text file for backup or transfer
+purposes, use the {\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{dump} command on one of the
+KDCs:
 
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id3}}
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{n}{dumpfile}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}util dump dumpfile
 
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kbd5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{history}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{changepw}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kbd5\PYGZus{}util dump \PYGZhy{}verbose dumpfile
+kadmin/admin@ATHENA.MIT.EDU
+krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
+kadmin/history@ATHENA.MIT.EDU
+K/M@ATHENA.MIT.EDU
+kadmin/changepw@ATHENA.MIT.EDU
 \end{sphinxVerbatim}
 
-If you specify which principals to dump, you must use the full
-principal, as in the following example:
+You may specify which principals to dump, using full principal names
+including realm:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile} \PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}util dump \PYGZhy{}verbose someprincs K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
+kadmin/admin@ATHENA.MIT.EDU
+K/M@ATHENA.MIT.EDU
 \end{sphinxVerbatim}
 
-Otherwise, the principals will not match those in the database and
-will not be dumped:
+To restore a Kerberos database dump from a file, use the
+{\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{load} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile} \PYG{n}{K}\PYG{o}{/}\PYG{n}{M} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}util load dumpfile
 \end{sphinxVerbatim}
 
-If you do not specify a dump file, kdb5\_util will dump the database to
-the standard output.
-
-
-\subsection{Restoring a Kerberos database from a dump file}
-\label{\detokenize{admin/database:restore-from-dump}}\label{\detokenize{admin/database:restoring-a-kerberos-database-from-a-dump-file}}
-To restore a Kerberos database dump from a file, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{load} command on one of the KDCs.
-\begin{quote}
-
-\sphinxstylestrong{load} {}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{} {}\sphinxstylestrong{-hash}{}
-{}\sphinxstylestrong{-verbose}{} {}\sphinxstylestrong{-update}{} \sphinxstyleemphasis{filename}
-\end{quote}
-
-Loads a database dump from the named file into the named database.  If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate.  Unless
-the \sphinxstylestrong{-update} option is given, \sphinxstylestrong{load} creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database.  Note that when using the LDAP KDC
-database module, the \sphinxstylestrong{-update} flag is required.
-
-Options:
-\begin{description}
-\item{\sphinxstylestrong{-b7}} \leavevmode
-requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5\_util load\_dump version 4”).  This was the dump format
-produced on releases prior to 1.2.2.
-
-\item{\sphinxstylestrong{-r13}} \leavevmode
-requires the database to be in Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”).  This was the dump format produced on
-releases prior to 1.8.
-
-\item{\sphinxstylestrong{-r18}} \leavevmode
-requires the database to be in Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”).  This was the dump format produced on
-releases prior to 1.11.
-
-\item{\sphinxstylestrong{-hash}} \leavevmode
-stores the database in hash format, if using the DB2 database
-type.  If this option is not specified, the database will be
-stored in btree format.  This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.
-
-\item{\sphinxstylestrong{-verbose}} \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item{\sphinxstylestrong{-update}} \leavevmode
-records from the dump file are added to or updated in the existing
-database.  Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.
-
-\end{description}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id4}}
-To dump a single principal and later load it, updating the database:
+To update an existing database with a partial dump file containing
+only some principals, use the \sphinxcode{-update} flag:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{n}{dumpfile} \PYG{n}{principal}\PYG{n+nd}{@REALM}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{load} \PYG{o}{\PYGZhy{}}\PYG{n}{update} \PYG{n}{dumpfile}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}util load \PYGZhy{}update someprincs
 \end{sphinxVerbatim}
 
 \begin{sphinxadmonition}{note}{Note:}
@@ -5099,92 +4231,6 @@
 given, \sphinxstyleemphasis{kdb5\_util} will overwrite the existing database.
 \end{sphinxadmonition}
 
-\begin{sphinxadmonition}{note}{Note:}
-Using kdb5\_util to dump and reload the principal database is
-only necessary when upgrading from versions of krb5 prior
-to 1.2.0—newer versions will use the existing database as-is.
-\end{sphinxadmonition}
-
-
-\subsection{Creating a stash file}
-\label{\detokenize{admin/database:create-stash}}\label{\detokenize{admin/database:creating-a-stash-file}}
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as {\hyperref\detokenize{admin/admin_commands/kadmind:kadmind-8}{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}, {\hyperref\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}}, and
-{\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}.
-
-To create a stash file, use the {\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{stash} command.
-\begin{quote}
-
-\sphinxstylestrong{stash} {}\sphinxstylestrong{-f} \sphinxstyleemphasis{keyfile}{}
-\end{quote}
-
-Stores the master principal’s keys in a stash file.  The \sphinxstylestrong{-f}
-argument can be used to override the \sphinxstyleemphasis{keyfile} specified in
-{\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsubsection{Example}
-\label{\detokenize{admin/database:example}}\begin{quote}
-
-shell\% kdb5\_util stash
-kdb5\_util: Cannot find/read stored master key while reading master key
-kdb5\_util: Warning: proceeding without master key
-Enter KDC database master key:  \textless{}= Type the KDC database master password.
-shell\%
-\end{quote}
-
-If you do not specify a stash file, kdb5\_util will stash the key in
-the file specified in your {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file.
-
-
-\subsection{Creating and destroying a Kerberos database}
-\label{\detokenize{admin/database:creating-and-destroying-a-kerberos-database}}
-If you need to create a new Kerberos database, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{create} command.
-\begin{quote}
-
-\sphinxstylestrong{create} {}\sphinxstylestrong{-s}{}
-\end{quote}
-
-Creates a new database.  If the \sphinxstylestrong{-s} option is specified, the stash
-file is also created.  This command fails if the database already
-exists.  If the command is successful, the database is opened just as
-if it had already existed when the program was first run.
-
-If you need to destroy the current Kerberos database, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{destroy} command.
-\begin{quote}
-
-\sphinxstylestrong{destroy} {}\sphinxstylestrong{-f}{}
-\end{quote}
-
-Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation.  With
-the \sphinxstylestrong{-f} argument, does not prompt the user.
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id5}}
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-shell\PYGZpc{} kdb5\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU create \PYGZhy{}s
-Loading random data
-Initializing database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{} for realm \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{},
-master key name \PYGZsq{}K/M@ATHENA.MIT.EDU\PYGZsq{}
-You will be prompted for the database Master Password.
-It is important that you NOT FORGET this password.
-Enter KDC database master key:  \PYGZlt{}= Type the master password.
-Re\PYGZhy{}enter KDC database master key to verify:  \PYGZlt{}= Type it again.
-shell\PYGZpc{}
-
-shell\PYGZpc{} kdb5\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU destroy
-Deleting KDC database stored in \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)?  \PYGZlt{}= yes
-OK, deleting database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{}...
-** Database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{} destroyed.
-shell\PYGZpc{}
-\end{sphinxVerbatim}
-
 
 \subsection{Updating the master key}
 \label{\detokenize{admin/database:updating-master-key}}\label{\detokenize{admin/database:updating-the-master-key}}
@@ -5260,480 +4306,120 @@
 
 \section{Operations on the LDAP database}
 \label{\detokenize{admin/database:operations-on-the-ldap-database}}\label{\detokenize{admin/database:ops-on-ldap}}
-The {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} is the primary tool for administrating
-the Kerberos LDAP database.  It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
+The {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} command is the primary tool for
+administrating the Kerberos database when using the LDAP module.
+Creating an LDAP Kerberos database is describe in {\hyperref\detokenize{admin/conf_ldap:conf-ldap}{\sphinxcrossref{\DUrole{std,std-ref}{Configuring Kerberos with OpenLDAP back-end}}}}.
 
-\sphinxstylestrong{kdb5\_ldap\_util}
-{}\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn} {}\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}{}{}
-{}\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}{}
-\sphinxstylestrong{command}
-{}\sphinxstyleemphasis{command\_options}{}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}} \leavevmode
-Specifies the realm to be operated on.
-
-\item{\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn}} \leavevmode
-Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.
-
-\item{\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}} \leavevmode
-Specifies the password of \sphinxstyleemphasis{user\_dn}.  This option is not
-recommended.
-
-\item{\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}} \leavevmode
-Specifies the URI of the LDAP server.
-
-\end{description}
-
-By default, kdb5\_ldap\_util operates on the default realm (as specified
-in {\hyperref\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8){}` would given the
-parameters in {\hyperref\detokenize{admin/conf_files/kdc_conf:dbdefaults}{\sphinxcrossref{\DUrole{std,std-ref}{{}dbdefaults{}}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsection{Creating a Kerberos realm}
-\label{\detokenize{admin/database:creating-a-kerberos-realm}}\label{\detokenize{admin/database:ldap-create-realm}}
-If you need to create a new realm, use the {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{create} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{create}
-{}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{}
-{}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{}
-{}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{}
-{}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{}
-{}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{}
-{}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{}
-{}\sphinxstylestrong{-m\textbar{}-P} \sphinxstyleemphasis{password}\textbar{}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{}
-{}\sphinxstylestrong{-s}{}
-{}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{}
-{}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{}
-{}\sphinxstyleemphasis{ticket\_flags}{}
-\end{quote}
-
-Creates realm in directory. Options:
-\begin{description}
-\item{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}} \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm.  The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}).
-
-\item{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}} \leavevmode
-Specifies the scope for searching the principals under the
-subtree.  The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}} \leavevmode
-Specifies the DN of the container object in which the principals
-of a realm will be created.  If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.
-
-\item{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}} \leavevmode
-Specifies the key type of the master key in the database.  The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}} \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1.  Note that 0 is not allowed.
-
-\item{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}} \leavevmode
-Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-\sphinxstylestrong{master\_key\_name} variable in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item{\sphinxstylestrong{-m}} \leavevmode
-Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.
-
-\item{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}} \leavevmode
-Specifies the master database password. This option is not
-recommended.
-
-\item{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}} \leavevmode
-Specifies the stash file of the master database password.
-
-\item{\sphinxstylestrong{-s}} \leavevmode
-Specifies that the stash file is to be created.
-
-\item{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item{\sphinxstyleemphasis{ticket\_flags}} \leavevmode
-Specifies global ticket flags for the realm.  Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
+To view a list of realms in the LDAP database, use the kdb5\_ldap\_util
+\sphinxstylestrong{list} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{subtrees} \PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{sscope} \PYG{n}{SUB}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Initializing} \PYG{n}{database} \PYG{k}{for} \PYG{n}{realm} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{ATHENA.MIT.EDU}\PYG{l+s+s1}{\PYGZsq{}}
-\PYG{n}{You} \PYG{n}{will} \PYG{n}{be} \PYG{n}{prompted} \PYG{k}{for} \PYG{n}{the} \PYG{n}{database} \PYG{n}{Master} \PYG{n}{Password}\PYG{o}{.}
-\PYG{n}{It} \PYG{o+ow}{is} \PYG{n}{important} \PYG{n}{that} \PYG{n}{you} \PYG{n}{NOT} \PYG{n}{FORGET} \PYG{n}{this} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key} \PYG{n}{to} \PYG{n}{verify}\PYG{p}{:}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util list
+KRBTEST.COM
 \end{sphinxVerbatim}
 
-
-\subsection{Modifying a Kerberos realm}
-\label{\detokenize{admin/database:ldap-mod-realm}}\label{\detokenize{admin/database:modifying-a-kerberos-realm}}
-If you need to modify a realm, use the {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{modify} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{modify}
-{}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{}
-{}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{}
-{}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{}
-{}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{}
-{}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{}
-{}\sphinxstyleemphasis{ticket\_flags}{}
-\end{quote}
-
-Modifies the attributes of a realm.  Options:
-\begin{description}
-\item{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}} \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm.  The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}).  This list replaces the existing list.
-
-\item{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}} \leavevmode
-Specifies the scope for searching the principals under the
-subtrees.  The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn} Specifies the DN of the} \leavevmode
-container object in which the principals of a realm will be
-created.
-
-\item{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item{\sphinxstyleemphasis{ticket\_flags}} \leavevmode
-Specifies global ticket flags for the realm.  Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
+To modify the attributes of a realm, use the kdb5\_ldap\_util \sphinxstylestrong{modify}
+command.  For example, to change the default realm’s maximum ticket
+life:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
-    \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{modify} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util modify \PYGZhy{}maxtktlife \PYGZdq{}10 hours\PYGZdq{}
 \end{sphinxVerbatim}
 
-
-\subsection{Destroying a Kerberos realm}
-\label{\detokenize{admin/database:destroying-a-kerberos-realm}}
-If you need to destroy a Kerberos realm, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{destroy} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{destroy} {}\sphinxstylestrong{-f}{}
-\end{quote}
-
-Destroys an existing realm. Options:
-\begin{description}
-\item{\sphinxstylestrong{-f}} \leavevmode
-If specified, will not prompt the user for confirmation.
-
-\end{description}
-
-Example:
+To display the attributes of a realm, use the kdb5\_ldap\_util \sphinxstylestrong{view}
+command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-shell\PYGZpc{} kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU \PYGZhy{}D cn=admin,o=org \PYGZhy{}H
-    ldaps://ldap\PYGZhy{}server1.mit.edu destroy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-Deleting KDC database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-OK, deleting database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}...
-shell\PYGZpc{}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util view
+               Realm Name: KRBTEST.COM
+      Maximum Ticket Life: 0 days 00:10:00
 \end{sphinxVerbatim}
 
-
-\subsection{Retrieving information about a Kerberos realm}
-\label{\detokenize{admin/database:retrieving-information-about-a-kerberos-realm}}
-If you need to display the attributes of a realm, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{view} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{view}
-\end{quote}
-
-Displays the attributes of a realm.
-
-Example:
+To remove a realm from the LDAP database, destroying its contents, use
+the kdb5\_ldap\_util \sphinxstylestrong{destroy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Realm} \PYG{n}{Name}\PYG{p}{:} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{users}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{servers}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{SearchScope}\PYG{p}{:} \PYG{n}{ONE}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util destroy
+Deleting KDC database of \PYGZsq{}KRBTEST.COM\PYGZsq{}, are you sure?
+(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
+OK, deleting database of \PYGZsq{}KRBTEST.COM\PYGZsq{}...
+** Database of \PYGZsq{}KRBTEST.COM\PYGZsq{} destroyed.
 \end{sphinxVerbatim}
 
 
-\subsection{Listing available Kerberos realms}
-\label{\detokenize{admin/database:listing-available-kerberos-realms}}
-If you need to display the list of the realms, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{list} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{list}
-\end{quote}
-
-Lists the names of realms under the container.
-
-Example:
+\subsection{Ticket Policy operations}
+\label{\detokenize{admin/database:ticket-policy-operations}}
+Unlike the DB2 and LMDB modules, the LDAP module supports ticket
+policy objects, which can be associated with principals to restrict
+maximum ticket lifetimes and set mandatory principal flags.  Ticket
+policy objects are distinct from the password policies described
+earlier on this page, and are chiefly managed through kdb5\_ldap\_util
+rather than kadmin.  To create a new ticket policy, use the
+kdb5\_ldap\_util \sphinxstylestrong{create\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
-    \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n+nb}{list}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{OPENLDAP}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{MEDIA}\PYG{o}{\PYGZhy{}}\PYG{n}{LAB}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util create\PYGZus{}policy \PYGZhy{}maxrenewlife \PYGZdq{}2 days\PYGZdq{} users
 \end{sphinxVerbatim}
 
-
-\subsection{Stashing service object’s password}
-\label{\detokenize{admin/database:stashing-service-object-s-password}}\label{\detokenize{admin/database:stash-ldap}}
-The {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{stashsrvpw} command allows an
-administrator to store the password of service object in a file.  The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-\begin{quote}
-
-\sphinxstylestrong{stashsrvpw}
-{}\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}{}
-\sphinxstyleemphasis{name}
-\end{quote}
-
-Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server.  Options:
-\begin{description}
-\item{\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}} \leavevmode
-Specifies the complete path of the service password file. By
-default, \sphinxcode{/usr/local/var/service\_passwd} is used.
-
-\item{\sphinxstyleemphasis{name}} \leavevmode
-Specifies the name of the object whose password is to be stored.
-If {\hyperref\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} or {\hyperref\detokenize{admin/admin_commands/kadmind:kadmind-8}{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} are configured for
-simple binding, this should be the distinguished name it will
-use as given by the \sphinxstylestrong{ldap\_kdc\_dn} or \sphinxstylestrong{ldap\_kadmind\_dn}
-variable in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.  If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the \sphinxstylestrong{ldap\_kdc\_sasl\_authcid} or
-\sphinxstylestrong{ldap\_kadmind\_sasl\_authcid} variable.
-
-\end{description}
-
-Example:
+To associate a ticket policy with a principal, use the
+{\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{modify\_principal} (or \sphinxstylestrong{add\_principal}) command
+with the \sphinxstylestrong{-x tktpolicy=}\sphinxstyleemphasis{policy} option:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{stashsrvpw} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{home}\PYG{o}{/}\PYG{n}{andrew}\PYG{o}{/}\PYG{n}{conf\PYGZus{}keyfile}
-    \PYG{n}{cn}\PYG{o}{=}\PYG{n}{service}\PYG{o}{\PYGZhy{}}\PYG{n}{kdc}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
+\PYGZdl{} kadmin.local modprinc \PYGZhy{}x tktpolicy=users alice
 \end{sphinxVerbatim}
 
-
-\subsection{Ticket Policy operations}
-\label{\detokenize{admin/database:ticket-policy-operations}}
-
-\subsubsection{Creating a Ticket Policy}
-\label{\detokenize{admin/database:creating-a-ticket-policy}}
-To create a new ticket policy in directory , use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{create\_policy} command.  Ticket policy
-objects are created under the realm container.
-\begin{quote}
-
-\sphinxstylestrong{create\_policy}
-{}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{}
-{}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{}
-{}\sphinxstyleemphasis{ticket\_flags}{}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Creates a ticket policy in the directory.  Options:
-\begin{description}
-\item{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals.
-
-\item{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}} \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals.
-
-\item{\sphinxstyleemphasis{ticket\_flags}} \leavevmode
-Specifies the ticket flags.  If this option is not specified, by
-default, no restriction will be set by the policy.  Allowable
-flags are documented in the description of the \sphinxstylestrong{add\_principal}
-command in {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\item{\sphinxstyleemphasis{policy\_name}} \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
+To remove a ticket policy reference from a principal, use the same
+command with an empty \sphinxstyleemphasis{policy}:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 day}\PYG{l+s+s2}{\PYGZdq{}}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 week}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{+}\PYG{n}{needchange}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}forwardable} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
+\PYGZdl{} kadmin.local modprinc \PYGZhy{}x tktpolicy= alice
 \end{sphinxVerbatim}
 
-
-\subsubsection{Modifying a Ticket Policy}
-\label{\detokenize{admin/database:modifying-a-ticket-policy}}
-To modify a ticket policy in directory, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{modify\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{modify\_policy}
-{}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{}
-{}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{}
-{}\sphinxstyleemphasis{ticket\_flags}{}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Modifies the attributes of a ticket policy.  Options are same as for
-\sphinxstylestrong{create\_policy}.
-
-Example:
+To list the existing ticket policy objects, use the kdb5\_ldap\_util
+\sphinxstylestrong{list\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
-    \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{modify\PYGZus{}policy}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{60 minutes}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{10 hours}\PYG{l+s+s2}{\PYGZdq{}}
-    \PYG{o}{+}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{\PYGZhy{}}\PYG{n}{requires\PYGZus{}preauth} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util list\PYGZus{}policy
+users
 \end{sphinxVerbatim}
 
-
-\subsubsection{Retrieving Information About a Ticket Policy}
-\label{\detokenize{admin/database:retrieving-information-about-a-ticket-policy}}
-To display the attributes of a ticket policy, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{view\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{view\_policy}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Displays the attributes of the named ticket policy.
-
-Example:
+To modify the attributes of a ticket policy object, use the
+kdb5\_ldap\_util \sphinxstylestrong{modify\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view\PYGZus{}policy} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Ticket} \PYG{n}{policy}\PYG{p}{:} \PYG{n}{tktpolicy}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util modify\PYGZus{}policy \PYGZhy{}allow\PYGZus{}svr +requires\PYGZus{}preauth users
 \end{sphinxVerbatim}
 
-
-\subsubsection{Destroying a Ticket Policy}
-\label{\detokenize{admin/database:destroying-a-ticket-policy}}
-To destroy an existing ticket policy, use the {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{destroy\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{destroy\_policy}
-{}\sphinxstylestrong{-force}{}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Destroys an existing ticket policy.  Options:
-\begin{description}
-\item{\sphinxstylestrong{-force}} \leavevmode
-Forces the deletion of the policy object.  If not specified, the
-user will be prompted for confirmation before deleting the policy.
-
-\item{\sphinxstyleemphasis{policy\_name}} \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
+To view the attributes of a ticket policy object, use the
+kdb5\_ldap\_util \sphinxstylestrong{view\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}D cn=admin,o=org \PYGZhy{}H ldaps://ldap\PYGZhy{}server1.mit.edu
-    \PYGZhy{}r ATHENA.MIT.EDU destroy\PYGZus{}policy tktpolicy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-This will delete the policy object \PYGZsq{}tktpolicy\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-** policy object \PYGZsq{}tktpolicy\PYGZsq{} deleted.
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util view\PYGZus{}policy users
+            Ticket policy: users
+   Maximum renewable life: 2 days 00:00:00
+             Ticket flags: REQUIRES\PYGZus{}PRE\PYGZus{}AUTH DISALLOW\PYGZus{}SVR
 \end{sphinxVerbatim}
 
-
-\subsubsection{Listing available Ticket Policies}
-\label{\detokenize{admin/database:listing-available-ticket-policies}}
-To list the name of ticket policies in a realm, use the
-{\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{list\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{list\_policy}
-\end{quote}
-
-Lists ticket policies.
-
-Example:
+To destroy an ticket policy object, use the kdb5\_ldap\_util
+\sphinxstylestrong{destroy\_policy} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-    \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{list\PYGZus{}policy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{tktpolicy}
-\PYG{n}{tmppolicy}
-\PYG{n}{userpolicy}
+\PYGZdl{} kdb5\PYGZus{}ldap\PYGZus{}util destroy\PYGZus{}policy users
+This will delete the policy object \PYGZsq{}users\PYGZsq{}, are you sure?
+(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
+** policy object \PYGZsq{}users\PYGZsq{} deleted.
 \end{sphinxVerbatim}
 
 
@@ -5981,7 +4667,7 @@
 
 
 \chapter{Database types}
-\label{\detokenize{admin/dbtypes::doc}}\label{\detokenize{admin/dbtypes:database-types}}
+\label{\detokenize{admin/dbtypes::doc}}\label{\detokenize{admin/dbtypes:database-types}}\label{\detokenize{admin/dbtypes:dbtypes}}
 A Kerberos database can be implemented with one of three built-in
 database providers, called KDB modules.  Software which incorporates
 the MIT krb5 KDC may also provide its own KDB module.  The following
@@ -6183,15 +4869,15 @@
 The policy parameters related to account lockout are:
 \begin{itemize}
 \item {} 
-{\hyperref\detokenize{admin/database:policy-maxfailure}{\sphinxcrossref{\DUrole{std,std-ref}{maxfailure}}}}: the number of failed attempts
+{\hyperref\detokenize{admin/admin_commands/kadmin_local:policy-maxfailure}{\sphinxcrossref{\DUrole{std,std-ref}{maxfailure}}}}: the number of failed attempts
 before the principal is locked out
 
 \item {} 
-{\hyperref\detokenize{admin/database:policy-failurecountinterval}{\sphinxcrossref{\DUrole{std,std-ref}{failurecountinterval}}}}: the
+{\hyperref\detokenize{admin/admin_commands/kadmin_local:policy-failurecountinterval}{\sphinxcrossref{\DUrole{std,std-ref}{failurecountinterval}}}}: the
 allowable interval between failed attempts
 
 \item {} 
-{\hyperref\detokenize{admin/database:policy-lockoutduration}{\sphinxcrossref{\DUrole{std,std-ref}{lockoutduration}}}}: the amount of time
+{\hyperref\detokenize{admin/admin_commands/kadmin_local:policy-lockoutduration}{\sphinxcrossref{\DUrole{std,std-ref}{lockoutduration}}}}: the amount of time
 a principal is locked out for
 
 \end{itemize}
@@ -6433,13 +5119,11 @@
 \end{sphinxVerbatim}
 
 \item {} 
-Create the realm using {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} (see
-{\hyperref\detokenize{admin/database:ldap-create-realm}{\sphinxcrossref{\DUrole{std,std-ref}{Creating a Kerberos realm}}}}):
+Create the realm using {\hyperref\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}:
+\begin{quote}
 
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{subtrees} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{users}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{o}{\PYGZhy{}}\PYG{n}{s}
-\end{sphinxVerbatim}
+kdb5\_ldap\_util create -subtrees ou=users,dc=example,dc=com -s
+\end{quote}
 
 Use the \sphinxstylestrong{-subtrees} option if the principals are to exist in a
 separate subtree from the realm container.  Before executing the
@@ -6490,9 +5174,9 @@
 If you need to install the Kerberos V5 programs on an application
 server, please refer to the Kerberos V5 Installation Guide.  Once you
 have installed the software, you need to add that host to the Kerberos
-database (see {\hyperref\detokenize{admin/database:add-mod-del-princs}{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}), and generate a keytab for
-that host, that contains the host’s key.  You also need to make sure
-the host’s clock is within your maximum clock skew of the KDCs.
+database (see {\hyperref\detokenize{admin/database:principals}{\sphinxcrossref{\DUrole{std,std-ref}{Principals}}}}), and generate a keytab for that host,
+that contains the host’s key.  You also need to make sure the host’s
+clock is within your maximum clock skew of the KDCs.
 
 
 \section{Keytabs}
@@ -6512,121 +5196,27 @@
 \subsection{Adding principals to keytabs}
 \label{\detokenize{admin/appl_servers:adding-principals-to-keytabs}}\label{\detokenize{admin/appl_servers:add-princ-kt}}
 To generate a keytab, or to add a principal to an existing keytab, use
-the \sphinxstylestrong{ktadd} command from kadmin.
-
-
-\subsection{ktadd}
-\label{\detokenize{admin/appl_servers:ktadd}}\begin{quote}
-
-\begin{DUlineblock}{0em}
-\item \sphinxstylestrong{ktadd} {}options{} \sphinxstyleemphasis{principal}
-\item \sphinxstylestrong{ktadd} {}options{} \sphinxstylestrong{-glob} \sphinxstyleemphasis{princ-exp}
-\end{DUlineblock}
-\end{quote}
-
-Adds a \sphinxstyleemphasis{principal}, or all principals matching \sphinxstyleemphasis{princ-exp}, to a
-keytab file.  Each principal’s keys are randomized in the process.
-The rules for \sphinxstyleemphasis{princ-exp} are described in the \sphinxstylestrong{list\_principals}
-command.
-
-This command requires the \sphinxstylestrong{inquire} and \sphinxstylestrong{changepw} privileges.
-With the \sphinxstylestrong{-glob} form, it also requires the \sphinxstylestrong{list} privilege.
-
-The options are:
-\begin{description}
-\item{\sphinxstylestrong{-k{}eytab{}} \sphinxstyleemphasis{keytab}} \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file.  Otherwise, the default keytab is
-used.
-
-\item{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…} \leavevmode
-Uses the specified keysalt list for setting the new keys of the
-principal.  See {\hyperref\detokenize{admin/conf_files/kdc_conf:keysalt-lists}{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item{\sphinxstylestrong{-q}} \leavevmode
-Display less verbose information.
-
-\item{\sphinxstylestrong{-norandkey}} \leavevmode
-Do not randomize the keys. The keys and their version numbers stay
-unchanged.  This option cannot be specified in combination with the
-\sphinxstylestrong{-e} option.
-
-\end{description}
-
-An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.
-
-Alias: \sphinxstylestrong{xst}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,}
-     \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab}
-     \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/appl_servers:examples}}
-Here is a sample session, using configuration files that enable only
-AES encryption:
+the \sphinxstylestrong{ktadd} command from kadmin.  Here is a sample session, using
+configuration files that enable only AES encryption:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
 \PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
 \PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
 \PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
 
 
 \subsection{Removing principals from keytabs}
 \label{\detokenize{admin/appl_servers:removing-principals-from-keytabs}}
 To remove a principal from an existing keytab, use the kadmin
-\sphinxstylestrong{ktremove} command.
-
-
-\subsection{ktremove}
-\label{\detokenize{admin/appl_servers:ktremove}}\begin{quote}
-
-\sphinxstylestrong{ktremove} {}options{} \sphinxstyleemphasis{principal} {}\sphinxstyleemphasis{kvno} \textbar{} \sphinxstyleemphasis{all} \textbar{} \sphinxstyleemphasis{old}{}
-\end{quote}
-
-Removes entries for the specified \sphinxstyleemphasis{principal} from a keytab.  Requires
-no permissions, since this does not require database access.
-
-If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed.  Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.
-
-The options are:
-\begin{description}
-\item{\sphinxstylestrong{-k{}eytab{}} \sphinxstyleemphasis{keytab}} \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file.  Otherwise, the default keytab is
-used.
-
-\item{\sphinxstylestrong{-q}} \leavevmode
-Display less verbose information.
-
-\end{description}
-
-Alias: \sphinxstylestrong{ktrem}
-
-Example:
+\sphinxstylestrong{ktremove} command:
 
 \fvset{hllines={, ,}}%
 \begin{sphinxVerbatim}commandchars=\\\{\}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktremove} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{n+nb}{all}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab}
-     \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
+\PYG{n}{kadmin}\PYG{p}{:}  \PYG{n}{ktremove} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
+\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
+\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
 \end{sphinxVerbatim}
 
 
@@ -7045,7 +5635,7 @@
 these backups are stored as secure as your KDCs, and to encrypt its
 transmission across your network.)  Then if your database becomes
 corrupted, you can load the most recent dump onto the primary KDC.
-(See {\hyperref\detokenize{admin/database:restore-from-dump}{\sphinxcrossref{\DUrole{std,std-ref}{Restoring a Kerberos database from a dump file}}}}.)
+(See {\hyperref\detokenize{admin/database:restore-from-dump}{\sphinxcrossref{\DUrole{std,std-ref}{Dumping and loading a Kerberos database}}}}.)
 
 
 \chapter{PKINIT configuration}
@@ -7888,12 +6478,15 @@
 The KDC chooses the session key enctype by taking the intersection of
 its \sphinxstylestrong{permitted\_enctypes} list, the list of long-term keys for the
 most recent kvno of the service, and the client’s requested list of
-enctypes.
+enctypes.  Starting in krb5-1.21, all services are assumed to support
+aes256-cts-hmac-sha1-96; also, des3-cbc-sha1 and arcfour-hmac session
+keys will not be issued by default.
 
 Starting in krb5-1.11, it is possible to set a string attribute on a
 service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal.  See {\hyperref\detokenize{admin/admin_commands/kadmin_local:set-string}{\sphinxcrossref{\DUrole{std,std-ref}{set\_string}}}}
-in {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for details.
+issue for service tickets for that principal, overriding the service’s
+long-term keys and the assumption of aes256-cts-hmac-sha1-96 support.
+See {\hyperref\detokenize{admin/admin_commands/kadmin_local:set-string}{\sphinxcrossref{\DUrole{std,std-ref}{set\_string}}}} in {\hyperref\detokenize{admin/admin_commands/kadmin_local:kadmin-1}{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for details.
 
 
 \section{Choosing enctypes for a service}
@@ -7925,6 +6518,20 @@
 acceptable risk for your environment and the weak enctypes are
 required for backward compatibility.
 
+\item{\sphinxstylestrong{allow\_des3}} \leavevmode
+was added in release 1.21 and defaults to \sphinxstyleemphasis{false}.  Unless this
+flag is set to \sphinxstyleemphasis{true}, the KDC will not issue tickets with
+des3-cbc-sha1 session keys.  In a future release, this flag will
+control whether des3-cbc-sha1 is permitted in similar fashion to
+weak enctypes.
+
+\item{\sphinxstylestrong{allow\_rc4}} \leavevmode
+was added in release 1.21 and defaults to \sphinxstyleemphasis{false}.  Unless this
+flag is set to \sphinxstyleemphasis{true}, the KDC will not issue tickets with
+arcfour-hmac session keys.  In a future release, this flag will
+control whether arcfour-hmac is permitted in similar fashion to
+weak enctypes.
+
 \item{\sphinxstylestrong{permitted\_enctypes}} \leavevmode
 controls the set of enctypes that a service will permit for
 session keys and for ticket and authenticator encryption.  The KDC
@@ -8293,7 +6900,7 @@
 
 
 \subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-synopsis-end}}\label{\detokenize{admin/admin_commands/kadmin_local:description}}
+\label{\detokenize{admin/admin_commands/kadmin_local:description}}
 kadmin and kadmin.local are command-line interfaces to the Kerberos V5
 administration system.  They provide nearly identical functionalities;
 the difference is that kadmin.local directly accesses the KDC
@@ -8400,7 +7007,7 @@
 for supported options.
 
 \end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-options-end}}
+
 Starting with release 1.14, if any command-line arguments remain after
 the options, they will be treated as a single query to be executed.
 This mode of operation is intended for scripts and behaves differently
@@ -8710,10 +7317,10 @@
 \PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:add-principal-end}}
+
 
 \subsubsection{modify\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:add-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id2}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id2}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal}}\begin{quote}
 
 \sphinxstylestrong{modify\_principal} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8735,10 +7342,10 @@
 to its password policy) so that it can successfully authenticate.
 
 \end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal-end}}
+
 
 \subsubsection{rename\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id3}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id3}}\begin{quote}
 
 \sphinxstylestrong{rename\_principal} {}\sphinxstylestrong{-force}{} \sphinxstyleemphasis{old\_principal} \sphinxstyleemphasis{new\_principal}
 \end{quote}
@@ -8751,10 +7358,9 @@
 
 Alias: \sphinxstylestrong{renprinc}
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal-end}}
 
 \subsubsection{delete\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:id4}}\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id4}}\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal}}\begin{quote}
 
 \sphinxstylestrong{delete\_principal} {}\sphinxstylestrong{-force}{} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8766,10 +7372,9 @@
 
 Alias: \sphinxstylestrong{delprinc}
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal-end}}
 
 \subsubsection{change\_password}
-\label{\detokenize{admin/admin_commands/kadmin_local:id5}}\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:change-password}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id5}}\label{\detokenize{admin/admin_commands/kadmin_local:change-password}}\begin{quote}
 
 \sphinxstylestrong{change\_password} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8814,10 +7419,10 @@
 \PYG{n}{Password} \PYG{k}{for} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{changed}\PYG{o}{.}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:change-password-end}}
+
 
 \subsubsection{purgekeys}
-\label{\detokenize{admin/admin_commands/kadmin_local:id6}}\label{\detokenize{admin/admin_commands/kadmin_local:change-password-end}}\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id6}}\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys}}\begin{quote}
 
 \sphinxstylestrong{purgekeys} {}\sphinxstylestrong{-all}\textbar{}\sphinxstylestrong{-keepkvno} \sphinxstyleemphasis{oldest\_kvno\_to\_keep}{} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8830,10 +7435,9 @@
 
 This command requires the \sphinxstylestrong{modify} privilege.
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys-end}}
 
 \subsubsection{get\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id7}}\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:get-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id7}}\begin{quote}
 
 \sphinxstylestrong{get\_principal} {}\sphinxstylestrong{-terse}{} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8873,10 +7477,10 @@
 \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}     \PYG{l+m+mi}{786100034} \PYG{l+m+mi}{0}    \PYG{l+m+mi}{0}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-principal-end}}
+
 
 \subsubsection{list\_principals}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id8}}\label{\detokenize{admin/admin_commands/kadmin_local:list-principals}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id8}}\label{\detokenize{admin/admin_commands/kadmin_local:list-principals}}\begin{quote}
 
 \sphinxstylestrong{list\_principals} {}\sphinxstyleemphasis{expression}{}
 \end{quote}
@@ -8904,10 +7508,10 @@
 \PYG{n}{testuser}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:list-principals-end}}
+
 
 \subsubsection{get\_strings}
-\label{\detokenize{admin/admin_commands/kadmin_local:id9}}\label{\detokenize{admin/admin_commands/kadmin_local:get-strings}}\label{\detokenize{admin/admin_commands/kadmin_local:list-principals-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:get-strings}}\label{\detokenize{admin/admin_commands/kadmin_local:id9}}\begin{quote}
 
 \sphinxstylestrong{get\_strings} \sphinxstyleemphasis{principal}
 \end{quote}
@@ -8918,10 +7522,9 @@
 
 Alias: \sphinxstylestrong{getstrs}
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-strings-end}}
 
 \subsubsection{set\_string}
-\label{\detokenize{admin/admin_commands/kadmin_local:id10}}\label{\detokenize{admin/admin_commands/kadmin_local:set-string}}\label{\detokenize{admin/admin_commands/kadmin_local:get-strings-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id10}}\label{\detokenize{admin/admin_commands/kadmin_local:set-string}}\begin{quote}
 
 \sphinxstylestrong{set\_string} \sphinxstyleemphasis{principal} \sphinxstyleemphasis{name} \sphinxstyleemphasis{value}
 \end{quote}
@@ -8955,6 +7558,15 @@
 is in the same format as those used by the \sphinxstylestrong{pkinit\_cert\_match}
 option in {\hyperref\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.  (New in release 1.16.)
 
+\item{\sphinxstylestrong{pac\_privsvr\_enctype}} \leavevmode
+Forces the encryption type of the PAC KDC checksum buffers to the
+specified encryption type for tickets issued to this server, by
+deriving a key from the local krbtgt key if it is of a different
+encryption type.  It may be necessary to set this value to
+“aes256-sha1” on the cross-realm krbtgt entry for an Active
+Directory realm when using aes-sha2 keys on the local krbtgt
+entry.
+
 \end{description}
 
 This command requires the \sphinxstylestrong{modify} privilege.
@@ -8968,10 +7580,10 @@
 \PYG{n}{set\PYGZus{}string} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{session\PYGZus{}enctypes} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}
 \PYG{n}{set\PYGZus{}string} \PYG{n}{user}\PYG{n+nd}{@FOO}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{otp} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{}\PYG{l+s+s2}{\PYGZob{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{type}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{:}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{hotp}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{,}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{username}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{:}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{al}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZcb{}}\PYG{l+s+s2}{\PYGZdq{}}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:set-string-end}}
+
 
 \subsubsection{del\_string}
-\label{\detokenize{admin/admin_commands/kadmin_local:set-string-end}}\label{\detokenize{admin/admin_commands/kadmin_local:del-string}}\label{\detokenize{admin/admin_commands/kadmin_local:id11}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:del-string}}\label{\detokenize{admin/admin_commands/kadmin_local:id11}}\begin{quote}
 
 \sphinxstylestrong{del\_string} \sphinxstyleemphasis{principal} \sphinxstyleemphasis{key}
 \end{quote}
@@ -8982,10 +7594,9 @@
 
 Alias: \sphinxstylestrong{delstr}
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:del-string-end}}
 
 \subsubsection{add\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:id12}}\label{\detokenize{admin/admin_commands/kadmin_local:del-string-end}}\label{\detokenize{admin/admin_commands/kadmin_local:add-policy}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id12}}\label{\detokenize{admin/admin_commands/kadmin_local:add-policy}}\begin{quote}
 
 \sphinxstylestrong{add\_policy} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{policy}
 \end{quote}
@@ -9063,10 +7674,10 @@
 \PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{add\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{2 days}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{minlength} \PYG{l+m+mi}{5} \PYG{n}{guests}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:add-policy-end}}
+
 
 \subsubsection{modify\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:id13}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:add-policy-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id13}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy}}\begin{quote}
 
 \sphinxstylestrong{modify\_policy} {}\sphinxstyleemphasis{options}{} \sphinxstyleemphasis{policy}
 \end{quote}
@@ -9078,10 +7689,9 @@
 
 Alias: \sphinxstylestrong{modpol}
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy-end}}
 
 \subsubsection{delete\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id14}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:id14}}\begin{quote}
 
 \sphinxstylestrong{delete\_policy} {}\sphinxstylestrong{-force}{} \sphinxstyleemphasis{policy}
 \end{quote}
@@ -9103,10 +7713,10 @@
 (yes/no): yes
 kadmin:
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy-end}}
+
 
 \subsubsection{get\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:get-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:id15}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:get-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:id15}}\begin{quote}
 
 \sphinxstylestrong{get\_policy} {} \sphinxstylestrong{-terse} {} \sphinxstyleemphasis{policy}
 \end{quote}
@@ -9141,10 +7751,9 @@
 With the LDAP KDC database module, the reference count field is not
 meaningful.
 
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-policy-end}}
 
 \subsubsection{list\_policies}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:list-policies}}\label{\detokenize{admin/admin_commands/kadmin_local:id16}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:list-policies}}\label{\detokenize{admin/admin_commands/kadmin_local:id16}}\begin{quote}
 
 \sphinxstylestrong{list\_policies} {}\sphinxstyleemphasis{expression}{}
 \end{quote}
@@ -9174,10 +7783,10 @@
 \PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:list-policies-end}}
+
 
 \subsubsection{ktadd}
-\label{\detokenize{admin/admin_commands/kadmin_local:ktadd}}\label{\detokenize{admin/admin_commands/kadmin_local:list-policies-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id17}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:ktadd}}\label{\detokenize{admin/admin_commands/kadmin_local:id17}}\begin{quote}
 
 \begin{DUlineblock}{0em}
 \item \sphinxstylestrong{ktadd} {}options{} \sphinxstyleemphasis{principal}
@@ -9230,10 +7839,10 @@
      \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab}
 \PYG{n}{kadmin}\PYG{p}{:}
 \end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:ktadd-end}}
+
 
 \subsubsection{ktremove}
-\label{\detokenize{admin/admin_commands/kadmin_local:id18}}\label{\detokenize{admin/admin_commands/kadmin_local:ktremove}}\label{\detokenize{admin/admin_commands/kadmin_local:ktadd-end}}\begin{quote}
+\label{\detokenize{admin/admin_commands/kadmin_local:id18}}\label{\detokenize{admin/admin_commands/kadmin_local:ktremove}}\begin{quote}
 
 \sphinxstylestrong{ktremove} {}options{} \sphinxstyleemphasis{principal} {}\sphinxstyleemphasis{kvno} \textbar{} \sphinxstyleemphasis{all} \textbar{} \sphinxstyleemphasis{old}{}
 \end{quote}
@@ -9272,7 +7881,7 @@
 
 
 \subsubsection{lock}
-\label{\detokenize{admin/admin_commands/kadmin_local:ktremove-end}}\label{\detokenize{admin/admin_commands/kadmin_local:lock}}
+\label{\detokenize{admin/admin_commands/kadmin_local:lock}}
 Lock database exclusively.  Use with extreme caution!  This command
 only works with the DB2 KDC database module.
 
@@ -11457,6 +10066,15 @@
 \sphinxcode{FILE:/etc/krb5.keytab}
 \\
 \hline
+Default PKCS11 module
+&
+PKCS11\_MODNAME
+&
+\sphinxcode{opensc-pkcs11.so}
+&
+\sphinxcode{opensc-pkcs11.so}
+\\
+\hline
 \end{tabulary}
 \par
 \sphinxattableend\end{savenotes}

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/appdev.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/appdev.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/appdev.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/appdev.tex Changed

@@ -55,7 +55,7 @@
 
 \title{Kerberos Application Developer Guide}
 \date{ }
-\release{1.20.1}
+\release{1.21.1}
 \author{MIT}
 \newcommand{\sphinxlogo}{\vbox{}}
 \renewcommand{\releasename}{Release}
@@ -2345,8 +2345,8 @@
 This function may be used to request anonymous credentials from the KDC by setting \sphinxstyleemphasis{anonymous} to non-zero. Note that anonymous credentials are only a request; clients must verify that credentials are anonymous if that is a requirement.
 
 
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_canonicalize -  Set or unset the canonicalize flag in initialcredential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize:krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_canonicalize (C function)}
+\subsubsection{krb5\_get\_init\_creds\_opt\_set\_canonicalize -  Set or unset the canonicalize flag in initial credential options.}
+\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize:krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_canonicalize (C function)}
 
 \begin{fulllineitems}
 \phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize:c.krb5_get_init_creds_opt_set_canonicalize}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_canonicalize}}{{\hyperref\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ canonicalize}}{}
@@ -21849,6 +21849,32 @@
 \sphinxattableend\end{savenotes}
 
 
+\subsubsection{KRB5\_PAC\_FULL\_CHECKSUM}
+\label{\detokenize{appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM:krb5-pac-full-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM:krb5-pac-full-checksum}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM::doc}}\index{KRB5\_PAC\_FULL\_CHECKSUM (built-in variable)}
+
+\begin{fulllineitems}
+\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_FULL_CHECKSUM:KRB5_PAC_FULL_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_PAC\_FULL\_CHECKSUM}}
+\end{fulllineitems}
+
+
+KDC full checksum.
+
+
+\begin{savenotes}\sphinxattablestart
+\centering
+\begin{tabulary}{\linewidth}t{|T|T|}
+\hline
+
+\sphinxcode{KRB5\_PAC\_FULL\_CHECKSUM}
+&
+\sphinxcode{19}
+\\
+\hline
+\end{tabulary}
+\par
+\sphinxattableend\end{savenotes}
+
+
 \subsubsection{KRB5\_PADATA\_AFS3\_SALT}
 \label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT:krb5-padata-afs3-salt}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT:krb5-padata-afs3-salt-data}}\index{KRB5\_PADATA\_AFS3\_SALT (built-in variable)}
 
@@ -22847,6 +22873,32 @@
 \\
 \hline
 \end{tabulary}
+\par
+\sphinxattableend\end{savenotes}
+
+
+\subsubsection{KRB5\_PADATA\_REDHAT\_PASSKEY}
+\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY:krb5-padata-redhat-passkey}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY:krb5-padata-redhat-passkey-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY::doc}}\index{KRB5\_PADATA\_REDHAT\_PASSKEY (built-in variable)}
+
+\begin{fulllineitems}
+\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_PASSKEY:KRB5_PADATA_REDHAT_PASSKEY}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_REDHAT\_PASSKEY}}
+\end{fulllineitems}
+
+
+Red Hat Passkey mechanism.
+
+
+\begin{savenotes}\sphinxattablestart
+\centering
+\begin{tabulary}{\linewidth}t{|T|T|}
+\hline
+
+\sphinxcode{KRB5\_PADATA\_REDHAT\_PASSKEY}
+&
+\sphinxcode{153}
+\\
+\hline
+\end{tabulary}
 \par
 \sphinxattableend\end{savenotes}

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/basic.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/basic.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/basic.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/basic.tex Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/build.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/build.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/build.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/build.tex Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/plugindev.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/plugindev.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/plugindev.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/plugindev.tex Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/user.pdf -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/user.pdf Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/pdf/user.tex -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/pdf/user.tex Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/tools/__pycache__/docmodel.cpython-36.pyc -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/tools/__pycache__/docmodel.cpython-36.pyc Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/tools/__pycache__/doxybuilder_funcs.cpython-36.pyc -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/tools/__pycache__/doxybuilder_funcs.cpython-36.pyc Changed

_service:tar_scm:krb5-1.20.1.tar.gz/doc/tools/__pycache__/doxybuilder_types.cpython-36.pyc -> _service:tar_scm:krb5-1.21.1.tar.gz/doc/tools/__pycache__/doxybuilder_types.cpython-36.pyc Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/aclocal.m4 -> _service:tar_scm:krb5-1.21.1.tar.gz/src/aclocal.m4 Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/appl/sample/sserver/sserver.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/appl/sample/sserver/sserver.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/appl/simple/client/sim_client.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/appl/simple/client/sim_client.c Changed

@@ -29,14 +29,17 @@
 * This program performs no useful function.
 */
 
-#include <k5-int.h>
+#include <krb5.h>
 #include "com_err.h"
 
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
+#include <stdio.h>
+#include <string.h>
+#include <errno.h>
 #include <netdb.h>
-#include <ctype.h>
+#include <getopt.h>
 #ifdef HAVE_UNISTD_H
 #include <unistd.h>
 #endif
@@ -66,7 +69,6 @@
 int flags = 0; /* flags for sendto() */
 struct servent *serv;
 struct hostent *host;
- char *cp;
 #ifdef BROKEN_STREAMS_SOCKETS
 char my_hostnameMAXHOSTNAMELEN;
 #endif
@@ -85,7 +87,7 @@
 krb5_error_code retval;
 krb5_data packet, inbuf;
 krb5_ccache ccdef;
- krb5_address addr, *portlocal_addr;
+ krb5_address addr;
 
 krb5_context context;
 krb5_auth_context auth_context = NULL;
@@ -202,8 +204,9 @@
 exit(1);
 }
 
- if ((retval = krb5_mk_req(context, &auth_context, 0, service, hostname,
- &inbuf, ccdef, &packet))) {
+ retval = krb5_mk_req(context, &auth_context, AP_OPTS_USE_SUBKEY, service,
+ hostname, &inbuf, ccdef, &packet);
+ if (retval) {
 com_err(progname, retval, "while preparing AP_REQ");
 exit(1);
 }
@@ -251,20 +254,6 @@
 exit(1);
 }
 
- /* THIS IS UGLY */
- if ((retval = krb5_gen_portaddr(context, &addr,
- (krb5_pointer) &c_sock.sin_port,
- &portlocal_addr))) {
- com_err(progname, retval, "while generating port address");
- exit(1);
- }
-
- if ((retval = krb5_gen_replay_name(context,portlocal_addr,
- "_sim_clt",&cp))) {
- com_err(progname, retval, "while generating replay cache name");
- exit(1);
- }
-
 /* Make the safe message */
 inbuf.data = message;
 inbuf.length = strlen(message);

_service:tar_scm:krb5-1.20.1.tar.gz/src/build-tools/krb5-config.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/build-tools/krb5-config.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/clients/ksu/authorization.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/clients/ksu/authorization.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/clients/kvno/kvno.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/clients/kvno/kvno.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/config/ac-archive/README -> _service:tar_scm:krb5-1.21.1.tar.gz/src/config/ac-archive/README Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/config/ac-archive/ax_pthread.m4 -> _service:tar_scm:krb5-1.21.1.tar.gz/src/config/ac-archive/ax_pthread.m4 Changed

@@ -14,20 +14,24 @@
 # flags that are needed. (The user can also force certain compiler
 # flags/libs to be tested by setting these environment variables.)
 #
-# Also sets PTHREAD_CC to any special C compiler that is needed for
-# multi-threaded programs (defaults to the value of CC otherwise). (This
-# is necessary on AIX to use the special cc_r compiler alias.)
+# Also sets PTHREAD_CC and PTHREAD_CXX to any special C compiler that is
+# needed for multi-threaded programs (defaults to the value of CC
+# respectively CXX otherwise). (This is necessary on e.g. AIX to use the
+# special cc_r/CC_r compiler alias.)
 #
 # NOTE: You are assumed to not only compile your program with these flags,
 # but also to link with them as well. For example, you might link with
 # $PTHREAD_CC $CFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS
+# $PTHREAD_CXX $CXXFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS
 #
 # If you are only building threaded programs, you may wish to use these
 # variables in your default LIBS, CFLAGS, and CC:
 #
 # LIBS="$PTHREAD_LIBS $LIBS"
 # CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
+# CXXFLAGS="$CXXFLAGS $PTHREAD_CFLAGS"
 # CC="$PTHREAD_CC"
+# CXX="$PTHREAD_CXX"
 #
 # In addition, if the PTHREAD_CREATE_JOINABLE thread-attribute constant
 # has a nonstandard name, this macro defines PTHREAD_CREATE_JOINABLE to
@@ -55,6 +59,7 @@
 #
 # Copyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>
 # Copyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>
+# Copyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>
 #
 # This program is free software: you can redistribute it and/or modify it
 # under the terms of the GNU General Public License as published by the
@@ -82,7 +87,7 @@
 # modified version of the Autoconf Macro, you may extend this special
 # exception to the GPL to apply to your modified version as well.
 
-#serial 24
+#serial 31
 
 AU_ALIAS(ACX_PTHREAD, AX_PTHREAD)
 AC_DEFUN(AX_PTHREAD, 
@@ -104,6 +109,7 @@
 ax_pthread_save_CFLAGS="$CFLAGS"
 ax_pthread_save_LIBS="$LIBS"
 AS_IF(test "x$PTHREAD_CC" != "x", CC="$PTHREAD_CC")
+ AS_IF(test "x$PTHREAD_CXX" != "x", CXX="$PTHREAD_CXX")
 CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
 LIBS="$PTHREAD_LIBS $LIBS"
 AC_MSG_CHECKING(for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS)
@@ -123,10 +129,12 @@
 # (e.g. DEC) have both -lpthread and -lpthreads, where one of the
 # libraries is broken (non-POSIX).
 
-# Create a list of thread flags to try. Items starting with a "-" are
-# C compiler flags, and other items are library names, except for "none"
-# which indicates that we try without any flags at all, and "pthread-config"
-# which is a program returning the flags for the Pth emulation library.
+# Create a list of thread flags to try. Items with a "," contain both
+# C compiler flags (before ",") and linker flags (after ","). Other items
+# starting with a "-" are C compiler flags, and remaining items are
+# library names, except for "none" which indicates that we try without
+# any flags at all, and "pthread-config" which is a program returning
+# the flags for the Pth emulation library.
 
 ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config"
 
@@ -194,14 +202,47 @@
 # that too in a future libc.) So we'll check first for the
 # standard Solaris way of linking pthreads (-mt -lpthread).
 
- ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags"
+ ax_pthread_flags="-mt,-lpthread pthread $ax_pthread_flags"
 ;;
 esac
 
+# Are we compiling with Clang?
+
+AC_CACHE_CHECK(whether $CC is Clang,
+ ax_cv_PTHREAD_CLANG,
+ ax_cv_PTHREAD_CLANG=no
+ # Note that Autoconf sets GCC=yes for Clang as well as GCC
+ if test "x$GCC" = "xyes"; then
+ AC_EGREP_CPP(AX_PTHREAD_CC_IS_CLANG,
+ /* Note: Clang 2.7 lacks __clang_a-z+__ */
+# if defined(__clang__) && defined(__llvm__)
+ AX_PTHREAD_CC_IS_CLANG
+# endif
+ ,
+ ax_cv_PTHREAD_CLANG=yes)
+ fi
+ )
+ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
+
+
 # GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC)
 
+# Note that for GCC and Clang -pthread generally implies -lpthread,
+# except when -nostdlib is passed.
+# This is problematic using libtool to build C++ shared libraries with pthread:
+# 1 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25460
+# 2 https://bugzilla.redhat.com/show_bug.cgi?id=661333
+# 3 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468555
+# To solve this, first try -pthread together with -lpthread for GCC
+
 AS_IF(test "x$GCC" = "xyes",
- ax_pthread_flags="-pthread -pthreads $ax_pthread_flags")
+ ax_pthread_flags="-pthread,-lpthread -pthread -pthreads $ax_pthread_flags")
+
+# Clang takes -pthread (never supported any other flag), but we'll try with -lpthread first
+
+AS_IF(test "x$ax_pthread_clang" = "xyes",
+ ax_pthread_flags="-pthread,-lpthread -pthread")
+
 
 # The presence of a feature test macro requesting re-entrant function
 # definitions is, on some systems, a strong hint that pthreads support is
@@ -224,25 +265,86 @@
 ax_pthread_check_cond=0,
 ax_pthread_check_cond="!defined($ax_pthread_check_macro)")
 
-# Are we compiling with Clang?
 
-AC_CACHE_CHECK(whether $CC is Clang,
- ax_cv_PTHREAD_CLANG,
- ax_cv_PTHREAD_CLANG=no
- # Note that Autoconf sets GCC=yes for Clang as well as GCC
- if test "x$GCC" = "xyes"; then
- AC_EGREP_CPP(AX_PTHREAD_CC_IS_CLANG,
- /* Note: Clang 2.7 lacks __clang_a-z+__ */
-# if defined(__clang__) && defined(__llvm__)
- AX_PTHREAD_CC_IS_CLANG
-# endif
- ,
- ax_cv_PTHREAD_CLANG=yes)
- fi
- )
-ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
+if test "x$ax_pthread_ok" = "xno"; then
+for ax_pthread_try_flag in $ax_pthread_flags; do
+
+ case $ax_pthread_try_flag in
+ none)
+ AC_MSG_CHECKING(whether pthreads work without any flags)
+ ;;
+
+ *,*)
+ PTHREAD_CFLAGS=`echo $ax_pthread_try_flag | sed "s/^$.*$,$.*$$/\1/"`
+ PTHREAD_LIBS=`echo $ax_pthread_try_flag | sed "s/^$.*$,$.*$$/\2/"`
+ AC_MSG_CHECKING(whether pthreads work with "$PTHREAD_CFLAGS" and "$PTHREAD_LIBS")
+ ;;
+
+ -*)
+ AC_MSG_CHECKING(whether pthreads work with $ax_pthread_try_flag)
+ PTHREAD_CFLAGS="$ax_pthread_try_flag"
+ ;;
+
+ pthread-config)
+ AC_CHECK_PROG(ax_pthread_config, pthread-config, yes, no)
+ AS_IF(test "x$ax_pthread_config" = "xno", continue)
+ PTHREAD_CFLAGS="`pthread-config --cflags`"
+ PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`"
+ ;;
+
+ *)
+ AC_MSG_CHECKING(for the pthreads library -l$ax_pthread_try_flag)
+ PTHREAD_LIBS="-l$ax_pthread_try_flag"
+ ;;
+ esac
+
+ ax_pthread_save_CFLAGS="$CFLAGS"
+ ax_pthread_save_LIBS="$LIBS"
+ CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
+ LIBS="$PTHREAD_LIBS $LIBS"
+
+ # Check for various functions. We must include pthread.h,
+ # since some functions may be macros. (On the Sequent, we
+ # need a special flag -Kthread to make this header compile.)
+ # We check for pthread_join because it is in -lpthread on IRIX
+ # while pthread_create is in libc. We check for pthread_attr_init
+ # due to DEC craziness with -lpthreads. We check for
+ # pthread_cleanup_push because it is one of the few pthread
+ # functions on Solaris that doesn't have a non-functional libc stub.
+ # We try pthread_create on general principles.
+
+ AC_LINK_IFELSE(AC_LANG_PROGRAM(#include <pthread.h>
+# if $ax_pthread_check_cond
+# error "$ax_pthread_check_macro must be defined"
+# endif
+ static void *some_global = NULL;
+ static void routine(void *a)
+ {
+ /* To avoid any unused-parameter or
+ unused-but-set-parameter warning. */
+ some_global = a;
+ }
+ static void *start_routine(void *a) { return a; },
+ pthread_t th; pthread_attr_t attr;
+ pthread_create(&th, 0, start_routine, 0);
+ pthread_join(th, 0);
+ pthread_attr_init(&attr);
+ pthread_cleanup_push(routine, 0);
+ pthread_cleanup_pop(0) /* ; */),
+ ax_pthread_ok=yes,
+ )
+
+ CFLAGS="$ax_pthread_save_CFLAGS"
+ LIBS="$ax_pthread_save_LIBS"
+
+ AC_MSG_RESULT($ax_pthread_ok)
+ AS_IF(test "x$ax_pthread_ok" = "xyes", break)
+
+ PTHREAD_LIBS=""
+ PTHREAD_CFLAGS=""
+done
+fi
 
-ax_pthread_clang_warning=no
 
 # Clang needs special handling, because older versions handle the -pthread
 # option in a rather... idiosyncratic way
@@ -261,11 +363,6 @@
 # -pthread does define _REENTRANT, and while the Darwin headers
 # ignore this macro, third-party headers might not.)
 
- PTHREAD_CFLAGS="-pthread"
- PTHREAD_LIBS=
-
- ax_pthread_ok=yes
-
 # However, older versions of Clang make a point of warning the user
 # that, in an invocation where only linking and no compilation is
 # taking place, the -pthread option has no effect ("argument unused
@@ -294,7 +391,7 @@
 # step
 ax_pthread_save_ac_link="$ac_link"
 ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g'
- ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"`
+ ax_pthread_link_step=`AS_ECHO("$ac_link") | sed "$ax_pthread_sed"`
 ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)"
 ax_pthread_save_CFLAGS="$CFLAGS"
 for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do
@@ -320,78 +417,7 @@
 
 fi # $ax_pthread_clang = yes
 
-if test "x$ax_pthread_ok" = "xno"; then
-for ax_pthread_try_flag in $ax_pthread_flags; do
-
- case $ax_pthread_try_flag in
- none)
- AC_MSG_CHECKING(whether pthreads work without any flags)
- ;;
-
- -mt,pthread)
- AC_MSG_CHECKING(whether pthreads work with -mt -lpthread)
- PTHREAD_CFLAGS="-mt"
- PTHREAD_LIBS="-lpthread"
- ;;
-
- -*)
- AC_MSG_CHECKING(whether pthreads work with $ax_pthread_try_flag)
- PTHREAD_CFLAGS="$ax_pthread_try_flag"
- ;;
 
- pthread-config)
- AC_CHECK_PROG(ax_pthread_config, pthread-config, yes, no)
- AS_IF(test "x$ax_pthread_config" = "xno", continue)
- PTHREAD_CFLAGS="`pthread-config --cflags`"
- PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`"
- ;;
-
- *)
- AC_MSG_CHECKING(for the pthreads library -l$ax_pthread_try_flag)
- PTHREAD_LIBS="-l$ax_pthread_try_flag"
- ;;
- esac
-
- ax_pthread_save_CFLAGS="$CFLAGS"
- ax_pthread_save_LIBS="$LIBS"
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- LIBS="$PTHREAD_LIBS $LIBS"
-
- # Check for various functions. We must include pthread.h,
- # since some functions may be macros. (On the Sequent, we
- # need a special flag -Kthread to make this header compile.)
- # We check for pthread_join because it is in -lpthread on IRIX
- # while pthread_create is in libc. We check for pthread_attr_init
- # due to DEC craziness with -lpthreads. We check for
- # pthread_cleanup_push because it is one of the few pthread
- # functions on Solaris that doesn't have a non-functional libc stub.
- # We try pthread_create on general principles.
-
- AC_LINK_IFELSE(AC_LANG_PROGRAM(#include <pthread.h>
-# if $ax_pthread_check_cond
-# error "$ax_pthread_check_macro must be defined"
-# endif
- static void routine(void *a) { a = 0; }
- static void *start_routine(void *a) { return a; },
- pthread_t th; pthread_attr_t attr;
- pthread_create(&th, 0, start_routine, 0);
- pthread_join(th, 0);
- pthread_attr_init(&attr);
- pthread_cleanup_push(routine, 0);
- pthread_cleanup_pop(0) /* ; */),
- ax_pthread_ok=yes,
- )
-
- CFLAGS="$ax_pthread_save_CFLAGS"
- LIBS="$ax_pthread_save_LIBS"
-
- AC_MSG_RESULT($ax_pthread_ok)
- AS_IF(test "x$ax_pthread_ok" = "xyes", break)
-
- PTHREAD_LIBS=""
- PTHREAD_CFLAGS=""
-done
-fi
 
 # Various other checks:
 if test "x$ax_pthread_ok" = "xyes"; then
@@ -438,7 +464,8 @@
 AC_CACHE_CHECK(for PTHREAD_PRIO_INHERIT,
 ax_cv_PTHREAD_PRIO_INHERIT,
 AC_LINK_IFELSE(AC_LANG_PROGRAM(#include <pthread.h>,
- int i = PTHREAD_PRIO_INHERIT;),
+ int i = PTHREAD_PRIO_INHERIT;
+ return i;),
 ax_cv_PTHREAD_PRIO_INHERIT=yes,
 ax_cv_PTHREAD_PRIO_INHERIT=no)
 )
@@ -460,18 +487,28 @@
 #handle absolute path differently from PATH based program lookup
 AS_CASE("x$CC",
 x/*,
- AS_IF(AS_EXECUTABLE_P(${CC}_r),PTHREAD_CC="${CC}_r"),
- AC_CHECK_PROGS(PTHREAD_CC,${CC}_r,$CC)))
+ 
+			 AS_IF(AS_EXECUTABLE_P(${CC}_r),PTHREAD_CC="${CC}_r")
+			 AS_IF(test "x${CXX}" != "x", AS_IF(AS_EXECUTABLE_P(${CXX}_r),PTHREAD_CXX="${CXX}_r"))
+			 ,
+ 
+			 AC_CHECK_PROGS(PTHREAD_CC,${CC}_r,$CC)
+			 AS_IF(test "x${CXX}" != "x", AC_CHECK_PROGS(PTHREAD_CXX,${CXX}_r,$CXX))
+			 
+ )
+ )
 ;;
 esac
 fi
 fi
 
 test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
+test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX"
 
 AC_SUBST(PTHREAD_LIBS)
 AC_SUBST(PTHREAD_CFLAGS)
 AC_SUBST(PTHREAD_CC)
+AC_SUBST(PTHREAD_CXX)
 
 # Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND:
 if test "x$ax_pthread_ok" = "xyes"; then

_service:tar_scm:krb5-1.20.1.tar.gz/src/config/config.guess -> _service:tar_scm:krb5-1.21.1.tar.gz/src/config/config.guess Changed

@@ -1,10 +1,10 @@
 #! /bin/sh
 # Attempt to guess a canonical system name.
-# Copyright 1992-2022 Free Software Foundation, Inc.
+# Copyright 1992-2023 Free Software Foundation, Inc.
 
 # shellcheck disable=SC2006,SC2268 # see below for rationale
 
-timestamp='2022-01-09'
+timestamp='2023-01-01'
 
 # This file is free software; you can redistribute it and/or modify it
 # under the terms of the GNU General Public License as published by
@@ -60,7 +60,7 @@
 GNU config.guess ($timestamp)
 
 Originally written by Per Bothner.
-Copyright 1992-2022 Free Software Foundation, Inc.
+Copyright 1992-2023 Free Software Foundation, Inc.
 
 This is free software; see the source for copying conditions. There is NO
 warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
@@ -966,6 +966,12 @@
 	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/-(.*//'`
 	GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC
 	;;
+ x86_64:Mmanagarm:*:*|i?86:Mmanagarm:*:*)
+	GUESS="$UNAME_MACHINE-pc-managarm-mlibc"
+	;;
+ *:Mmanagarm:*:*)
+	GUESS="$UNAME_MACHINE-unknown-managarm-mlibc"
+	;;
 *:Minix:*:*)
 	GUESS=$UNAME_MACHINE-unknown-minix
 	;;
@@ -1036,7 +1042,7 @@
 k1om:Linux:*:*)
 	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
 	;;
- loongarch32:Linux:*:* | loongarch64:Linux:*:* | loongarchx32:Linux:*:*)
+ loongarch32:Linux:*:* | loongarch64:Linux:*:*)
 	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
 	;;
 m32r*:Linux:*:*)
@@ -1151,16 +1157,27 @@
 	;;
 x86_64:Linux:*:*)
 	set_cc_for_build
+	CPU=$UNAME_MACHINE
 	LIBCABI=$LIBC
 	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	 if (echo '#ifdef __ILP32__'; echo IS_X32; echo '#endif') | \
-		(CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		grep IS_X32 >/dev/null
-	 then
-		LIBCABI=${LIBC}x32
-	 fi
+	 ABI=64
+	 sed 's/^	 //' << EOF > "$dummy.c"
+	 #ifdef __i386__
+	 ABI=x86
+	 #else
+	 #ifdef __ILP32__
+	 ABI=x32
+	 #endif
+	 #endif
+EOF
+	 cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
+	 eval "$cc_set_abi"
+	 case $ABI in
+		x86) CPU=i686 ;;
+		x32) LIBCABI=${LIBC}x32 ;;
+	 esac
 	fi
-	GUESS=$UNAME_MACHINE-pc-linux-$LIBCABI
+	GUESS=$CPU-pc-linux-$LIBCABI
 	;;
 xtensa*:Linux:*:*)
 	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
@@ -1367,8 +1384,11 @@
 BePC:Haiku:*:*)	# Haiku running on Intel PC compatible.
 	GUESS=i586-pc-haiku
 	;;
- x86_64:Haiku:*:*)
-	GUESS=x86_64-unknown-haiku
+ ppc:Haiku:*:*)	# Haiku running on Apple PowerPC
+	GUESS=powerpc-apple-haiku
+	;;
+ *:Haiku:*:*)	# Haiku modern gcc (not bound by BeOS compat)
+	GUESS=$UNAME_MACHINE-unknown-haiku
 	;;
 SX-4:SUPER-UX:*:*)
 	GUESS=sx4-nec-superux$UNAME_RELEASE

_service:tar_scm:krb5-1.20.1.tar.gz/src/config/config.sub -> _service:tar_scm:krb5-1.21.1.tar.gz/src/config/config.sub Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/config/win-pre.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/config/win-pre.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/configure -> _service:tar_scm:krb5-1.21.1.tar.gz/src/configure Changed

@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for Kerberos 5 1.20.1.
+# Generated by GNU Autoconf 2.69 for Kerberos 5 1.21.1.
 #
 # Report bugs to <krb5-bugs@mit.edu>.
 #
@@ -584,8 +584,8 @@
 # Identity of this package.
 PACKAGE_NAME='Kerberos 5'
 PACKAGE_TARNAME='krb5'
-PACKAGE_VERSION='1.20.1'
-PACKAGE_STRING='Kerberos 5 1.20.1'
+PACKAGE_VERSION='1.21.1'
+PACKAGE_STRING='Kerberos 5 1.21.1'
 PACKAGE_BUGREPORT='krb5-bugs@mit.edu'
 PACKAGE_URL=''
 
@@ -627,9 +627,11 @@
 #endif"
 
 ac_subst_vars='LTLIBOBJS
+PKCS11_MODNAME
 DEFCKTNAME
 DEFKTNAME
 DEFCCNAME
+MACOS_FRAMEWORK
 OSX
 GROFF
 VERTO_VERSION
@@ -764,6 +766,7 @@
 THREAD_SUPPORT
 PTHREAD_CFLAGS
 PTHREAD_LIBS
+PTHREAD_CXX
 PTHREAD_CC
 ax_pthread_config
 EGREP
@@ -924,7 +927,8 @@
 VERTO_LIBS
 DEFCCNAME
 DEFKTNAME
-DEFCKTNAME'
+DEFCKTNAME
+PKCS11_MODNAME'
 
 
 # Initialize some variables set by options.
@@ -1475,7 +1479,7 @@
 # Omit some internal or obsolete options to make the list less imposing.
 # This message is too long to be a string in the A/UX 3.1 sh.
 cat <<_ACEOF
-\`configure' configures Kerberos 5 1.20.1 to adapt to many kinds of systems.
+\`configure' configures Kerberos 5 1.21.1 to adapt to many kinds of systems.
 
 Usage: $0 OPTION... VAR=VALUE...
 
@@ -1546,7 +1550,7 @@
 
 if test -n "$ac_init_help"; then
 case $ac_init_help in
- short | recursive ) echo "Configuration of Kerberos 5 1.20.1:";;
+ short | recursive ) echo "Configuration of Kerberos 5 1.21.1:";;
 esac
 cat <<\_ACEOF
 
@@ -1637,6 +1641,8 @@
 DEFCCNAME Default ccache name
 DEFKTNAME Default keytab name
 DEFCKTNAME Default client keytab name
+ PKCS11_MODNAME
+ Default PKCS11 module name
 
 Use these variables to override the choices made by `configure' or to help
 it to find libraries and programs with nonstandard names/locations.
@@ -1704,7 +1710,7 @@
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
 cat <<\_ACEOF
-Kerberos 5 configure 1.20.1
+Kerberos 5 configure 1.21.1
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -2455,7 +2461,7 @@
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by Kerberos 5 $as_me 1.20.1, which was
+It was created by Kerberos 5 $as_me 1.21.1, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
 $ $0 $@
@@ -6241,6 +6247,9 @@
 if test "x$PTHREAD_CC" != "x"; then :
 CC="$PTHREAD_CC"
 fi
+ if test "x$PTHREAD_CXX" != "x"; then :
+ CXX="$PTHREAD_CXX"
+fi
 CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
 LIBS="$PTHREAD_LIBS $LIBS"
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS" >&5
@@ -6284,10 +6293,12 @@
 # (e.g. DEC) have both -lpthread and -lpthreads, where one of the
 # libraries is broken (non-POSIX).
 
-# Create a list of thread flags to try. Items starting with a "-" are
-# C compiler flags, and other items are library names, except for "none"
-# which indicates that we try without any flags at all, and "pthread-config"
-# which is a program returning the flags for the Pth emulation library.
+# Create a list of thread flags to try. Items with a "," contain both
+# C compiler flags (before ",") and linker flags (after ","). Other items
+# starting with a "-" are C compiler flags, and remaining items are
+# library names, except for "none" which indicates that we try without
+# any flags at all, and "pthread-config" which is a program returning
+# the flags for the Pth emulation library.
 
 ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config"
 
@@ -6363,38 +6374,9 @@
 # that too in a future libc.) So we'll check first for the
 # standard Solaris way of linking pthreads (-mt -lpthread).
 
- ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags"
- ;;
-esac
-
-# GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC)
-
-if test "x$GCC" = "xyes"; then :
- ax_pthread_flags="-pthread -pthreads $ax_pthread_flags"
-fi
-
-# The presence of a feature test macro requesting re-entrant function
-# definitions is, on some systems, a strong hint that pthreads support is
-# correctly enabled
-
-case $host_os in
- darwin* | hpux* | linux* | osf* | solaris*)
- ax_pthread_check_macro="_REENTRANT"
- ;;
-
- aix*)
- ax_pthread_check_macro="_THREAD_SAFE"
- ;;
-
- *)
- ax_pthread_check_macro="--"
+ ax_pthread_flags="-mt,-lpthread pthread $ax_pthread_flags"
 ;;
 esac
-if test "x$ax_pthread_check_macro" = "x--"; then :
- ax_pthread_check_cond=0
-else
- ax_pthread_check_cond="!defined($ax_pthread_check_macro)"
-fi
 
 # Are we compiling with Clang?
 
@@ -6427,107 +6409,51 @@
 $as_echo "$ax_cv_PTHREAD_CLANG" >&6; }
 ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
 
-ax_pthread_clang_warning=no
 
-# Clang needs special handling, because older versions handle the -pthread
-# option in a rather... idiosyncratic way
+# GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC)
 
-if test "x$ax_pthread_clang" = "xyes"; then
+# Note that for GCC and Clang -pthread generally implies -lpthread,
+# except when -nostdlib is passed.
+# This is problematic using libtool to build C++ shared libraries with pthread:
+# 1 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25460
+# 2 https://bugzilla.redhat.com/show_bug.cgi?id=661333
+# 3 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468555
+# To solve this, first try -pthread together with -lpthread for GCC
 
- # Clang takes -pthread; it has never supported any other flag
+if test "x$GCC" = "xyes"; then :
+ ax_pthread_flags="-pthread,-lpthread -pthread -pthreads $ax_pthread_flags"
+fi
 
- # (Note 1: This will need to be revisited if a system that Clang
- # supports has POSIX threads in a separate library. This tends not
- # to be the way of modern systems, but it's conceivable.)
+# Clang takes -pthread (never supported any other flag), but we'll try with -lpthread first
 
- # (Note 2: On some systems, notably Darwin, -pthread is not needed
- # to get POSIX threads support; the API is always present and
- # active. We could reasonably leave PTHREAD_CFLAGS empty. But
- # -pthread does define _REENTRANT, and while the Darwin headers
- # ignore this macro, third-party headers might not.)
-
- PTHREAD_CFLAGS="-pthread"
- PTHREAD_LIBS=
+if test "x$ax_pthread_clang" = "xyes"; then :
+ ax_pthread_flags="-pthread,-lpthread -pthread"
+fi
 
- ax_pthread_ok=yes
 
- # However, older versions of Clang make a point of warning the user
- # that, in an invocation where only linking and no compilation is
- # taking place, the -pthread option has no effect ("argument unused
- # during compilation"). They expect -pthread to be passed in only
- # when source code is being compiled.
- #
- # Problem is, this is at odds with the way Automake and most other
- # C build frameworks function, which is that the same flags used in
- # compilation (CFLAGS) are also used in linking. Many systems
- # supported by AX_PTHREAD require exactly this for POSIX threads
- # support, and in fact it is often not straightforward to specify a
- # flag that is used only in the compilation phase and not in
- # linking. Such a scenario is extremely rare in practice.
- #
- # Even though use of the -pthread flag in linking would only print
- # a warning, this can be a nuisance for well-run software projects
- # that build with -Werror. So if the active version of Clang has
- # this misfeature, we search for an option to squash it.
+# The presence of a feature test macro requesting re-entrant function
+# definitions is, on some systems, a strong hint that pthreads support is
+# correctly enabled
 
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread" >&5
-$as_echo_n "checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread... " >&6; }
-if ${ax_cv_PTHREAD_CLANG_NO_WARN_FLAG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown
- # Create an alternate version of $ac_link that compiles and
- # links in two steps (.c -> .o, .o -> exe) instead of one
- # (.c -> exe), because the warning occurs only in the second
- # step
- ax_pthread_save_ac_link="$ac_link"
- ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g'
- ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"`
- ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)"
- ax_pthread_save_CFLAGS="$CFLAGS"
- for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do
- if test "x$ax_pthread_try" = "xunknown"; then :
- break
-fi
- CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS"
- ac_link="$ax_pthread_save_ac_link"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-int main(void){return 0;}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_link="$ax_pthread_2step_ac_link"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-int main(void){return 0;}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- break
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
+case $host_os in
+ darwin* | hpux* | linux* | osf* | solaris*)
+ ax_pthread_check_macro="_REENTRANT"
+ ;;
 
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
- done
- ac_link="$ax_pthread_save_ac_link"
- CFLAGS="$ax_pthread_save_CFLAGS"
- if test "x$ax_pthread_try" = "x"; then :
- ax_pthread_try=no
-fi
- ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try"
+ aix*)
+ ax_pthread_check_macro="_THREAD_SAFE"
+ ;;
 
+ *)
+ ax_pthread_check_macro="--"
+ ;;
+esac
+if test "x$ax_pthread_check_macro" = "x--"; then :
+ ax_pthread_check_cond=0
+else
+ ax_pthread_check_cond="!defined($ax_pthread_check_macro)"
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&5
-$as_echo "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&6; }
 
- case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in
- no | unknown) ;;
- *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;;
- esac
-
-fi # $ax_pthread_clang = yes
 
 if test "x$ax_pthread_ok" = "xno"; then
 for ax_pthread_try_flag in $ax_pthread_flags; do
@@ -6538,11 +6464,11 @@
 $as_echo_n "checking whether pthreads work without any flags... " >&6; }
 ;;
 
- -mt,pthread)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with -mt -lpthread" >&5
-$as_echo_n "checking whether pthreads work with -mt -lpthread... " >&6; }
- PTHREAD_CFLAGS="-mt"
- PTHREAD_LIBS="-lpthread"
+ *,*)
+ PTHREAD_CFLAGS=`echo $ax_pthread_try_flag | sed "s/^$.*$,$.*$$/\1/"`
+ PTHREAD_LIBS=`echo $ax_pthread_try_flag | sed "s/^$.*$,$.*$$/\2/"`
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with \"$PTHREAD_CFLAGS\" and \"$PTHREAD_LIBS\"" >&5
+$as_echo_n "checking whether pthreads work with \"$PTHREAD_CFLAGS\" and \"$PTHREAD_LIBS\"... " >&6; }
 ;;
 
 -*)
@@ -6625,7 +6551,13 @@
 # if $ax_pthread_check_cond
 # error "$ax_pthread_check_macro must be defined"
 # endif
- static void routine(void *a) { a = 0; }
+ static void *some_global = NULL;
+ static void routine(void *a)
+ {
+ /* To avoid any unused-parameter or
+ unused-but-set-parameter warning. */
+ some_global = a;
+ }
 static void *start_routine(void *a) { return a; }
 int
 main ()
@@ -6660,6 +6592,104 @@
 done
 fi
 
+
+# Clang needs special handling, because older versions handle the -pthread
+# option in a rather... idiosyncratic way
+
+if test "x$ax_pthread_clang" = "xyes"; then
+
+ # Clang takes -pthread; it has never supported any other flag
+
+ # (Note 1: This will need to be revisited if a system that Clang
+ # supports has POSIX threads in a separate library. This tends not
+ # to be the way of modern systems, but it's conceivable.)
+
+ # (Note 2: On some systems, notably Darwin, -pthread is not needed
+ # to get POSIX threads support; the API is always present and
+ # active. We could reasonably leave PTHREAD_CFLAGS empty. But
+ # -pthread does define _REENTRANT, and while the Darwin headers
+ # ignore this macro, third-party headers might not.)
+
+ # However, older versions of Clang make a point of warning the user
+ # that, in an invocation where only linking and no compilation is
+ # taking place, the -pthread option has no effect ("argument unused
+ # during compilation"). They expect -pthread to be passed in only
+ # when source code is being compiled.
+ #
+ # Problem is, this is at odds with the way Automake and most other
+ # C build frameworks function, which is that the same flags used in
+ # compilation (CFLAGS) are also used in linking. Many systems
+ # supported by AX_PTHREAD require exactly this for POSIX threads
+ # support, and in fact it is often not straightforward to specify a
+ # flag that is used only in the compilation phase and not in
+ # linking. Such a scenario is extremely rare in practice.
+ #
+ # Even though use of the -pthread flag in linking would only print
+ # a warning, this can be a nuisance for well-run software projects
+ # that build with -Werror. So if the active version of Clang has
+ # this misfeature, we search for an option to squash it.
+
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread" >&5
+$as_echo_n "checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread... " >&6; }
+if ${ax_cv_PTHREAD_CLANG_NO_WARN_FLAG+:} false; then :
+ $as_echo_n "(cached) " >&6
+else
+ ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown
+ # Create an alternate version of $ac_link that compiles and
+ # links in two steps (.c -> .o, .o -> exe) instead of one
+ # (.c -> exe), because the warning occurs only in the second
+ # step
+ ax_pthread_save_ac_link="$ac_link"
+ ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g'
+ ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"`
+ ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)"
+ ax_pthread_save_CFLAGS="$CFLAGS"
+ for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do
+ if test "x$ax_pthread_try" = "xunknown"; then :
+ break
+fi
+ CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS"
+ ac_link="$ax_pthread_save_ac_link"
+ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h. */
+int main(void){return 0;}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+ ac_link="$ax_pthread_2step_ac_link"
+ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h. */
+int main(void){return 0;}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+ break
+fi
+rm -f core conftest.err conftest.$ac_objext \
+ conftest$ac_exeext conftest.$ac_ext
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+ conftest$ac_exeext conftest.$ac_ext
+ done
+ ac_link="$ax_pthread_save_ac_link"
+ CFLAGS="$ax_pthread_save_CFLAGS"
+ if test "x$ax_pthread_try" = "x"; then :
+ ax_pthread_try=no
+fi
+ ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try"
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&5
+$as_echo "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&6; }
+
+ case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in
+ no | unknown) ;;
+ *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;;
+ esac
+
+fi # $ax_pthread_clang = yes
+
+
+
 # Various other checks:
 if test "x$ax_pthread_ok" = "xyes"; then
 ax_pthread_save_CFLAGS="$CFLAGS"
@@ -6741,6 +6771,7 @@
 main ()
 {
 int i = PTHREAD_PRIO_INHERIT;
+ return i;
 ;
 return 0;
 }
@@ -6777,11 +6808,19 @@
 #handle absolute path differently from PATH based program lookup
 case "x$CC" in #(
 x/*) :
- if as_fn_executable_p ${CC}_r; then :
+
+			 if as_fn_executable_p ${CC}_r; then :
 PTHREAD_CC="${CC}_r"
-fi ;; #(
+fi
+			 if test "x${CXX}" != "x"; then :
+ if as_fn_executable_p ${CXX}_r; then :
+ PTHREAD_CXX="${CXX}_r"
+fi
+fi
+			 ;; #(
 *) :
- for ac_prog in ${CC}_r
+
+			 for ac_prog in ${CC}_r
 do
 # Extract the first word of "$ac_prog", so it can be a program name with args.
 set dummy $ac_prog; ac_word=$2
@@ -6823,8 +6862,56 @@
 test -n "$PTHREAD_CC" && break
 done
 test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
- ;;
-esac ;; #(
+
+			 if test "x${CXX}" != "x"; then :
+ for ac_prog in ${CXX}_r
+do
+ # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_PTHREAD_CXX+:} false; then :
+ $as_echo_n "(cached) " >&6
+else
+ if test -n "$PTHREAD_CXX"; then
+ ac_cv_prog_PTHREAD_CXX="$PTHREAD_CXX" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+ IFS=$as_save_IFS
+ test -z "$as_dir" && as_dir=.
+ for ac_exec_ext in '' $ac_executable_extensions; do
+ if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+ ac_cv_prog_PTHREAD_CXX="$ac_prog"
+ $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+ break 2
+ fi
+done
+ done
+IFS=$as_save_IFS
+
+fi
+fi
+PTHREAD_CXX=$ac_cv_prog_PTHREAD_CXX
+if test -n "$PTHREAD_CXX"; then
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PTHREAD_CXX" >&5
+$as_echo "$PTHREAD_CXX" >&6; }
+else
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+ test -n "$PTHREAD_CXX" && break
+done
+test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX"
+
+fi
+
+ ;;
+esac
+ ;; #(
 *) :
 ;;
 esac
@@ -6834,6 +6921,8 @@
 fi
 
 test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
+test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX"
+
 
 
 
@@ -7043,7 +7132,7 @@
 
 
 
-KRB5_VERSION=1.20.1
+KRB5_VERSION=1.21.1
 
 
 
@@ -8666,8 +8755,8 @@
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-
 fi
+
 { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_inet6" >&5
 $as_echo "$krb5_cv_inet6" >&6; }
 if test "$krb5_cv_inet6" = no && test "$ac_cv_func_inet_ntop" = yes; then
@@ -12105,48 +12194,6 @@
 
 
 PKINIT=yes
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for CMS_get0_content in -lcrypto" >&5
-$as_echo_n "checking for CMS_get0_content in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_CMS_get0_content+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char CMS_get0_content ();
-int
-main ()
-{
-return CMS_get0_content ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_crypto_CMS_get0_content=yes
-else
- ac_cv_lib_crypto_CMS_get0_content=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_CMS_get0_content" >&5
-$as_echo "$ac_cv_lib_crypto_CMS_get0_content" >&6; }
-if test "x$ac_cv_lib_crypto_CMS_get0_content" = xyes; then :
-
-$as_echo "#define HAVE_OPENSSL_CMS 1" >>confdefs.h
-
-fi
-
 elif test "$k5_cv_openssl_version_okay" = no && test "$enable_pkinit" = yes; then
 as_fn_error $? "Version of OpenSSL is too old; cannot enable PKINIT." "$LINENO" 5
 else
@@ -13057,11 +13104,37 @@
 fi
 
 
-# For KCM lib/krb5/ccache to build KCM Mach RPC support for macOS only.
+# Determine the default macOS ccache type and whether to build the KCM
+# Mach RPC support.
+MACOS_FRAMEWORK=
 case $host in
-*-*-darwin* | *-*-rhapsody*) OSX=osx ;;
-*) OSX=no ;;
+*-*-darwin0-9.* | *-*-darwin10.*)
+ # Use the normal default cache type for macOS 10.6 (Darwin 10) and
+ # prior. Build the KCM Mach RPC support.
+ OSX=osx
+ ;;
+*-*-darwin*)
+ # macOS 10.6 (Darwin 11) uses the KCM type by default. macOS 11
+ # (Darwin 20) uses an xpc-based cache type called XCACHE by default.
+ # We can access either of these collections via a macos-specific
+ # implementation of the API cache type. Build the KCM Mach RPC
+ # support.
+ OSX=osx
+ macos_defccname=API:
+ MACOS_FRAMEWORK="-framework Kerberos"
+ ;;
+*)
+ # This is not macOS; do not build the Mach RPC support and use the
+ # normal default cache type.
+ OSX=no
+ ;;
 esac
+if test "$macos_defccname" = API:; then
+
+$as_echo "#define USE_CCAPI_MACOS 1" >>confdefs.h
+
+fi
+
 
 
 # Build-time default ccache, keytab, and client keytab names. These
@@ -13092,17 +13165,9 @@
 	fi
 fi
 if test "${DEFCCNAME+set}" != set; then
-	case $host in
-	*-*-darwin0-9.* | *-*-darwin10.*)
-		# Use the normal default for macOS 10.6 (Darwin 10) and prior.
-		;;
-	*-*-darwin*)
-		# For macOS 10.7 (Darwin 11) and later, the native ccache uses
-		# the KCM daemon.
-		DEFCCNAME=KCM:
-		;;
-	esac
-	if test "${DEFCCNAME+set}" != set; then
+	if test "${macos_defccname+set}" = set; then
+		DEFCCNAME=$macos_defccname
+	else
 		DEFCCNAME=FILE:/tmp/krb5cc_%{uid}
 	fi
 fi
@@ -13143,6 +13208,18 @@
 _ACEOF
 
 
+
+if test "${PKCS11_MODNAME+set}" != set; then
+	PKCS11_MODNAME=opensc-pkcs11.so
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: Default PKCS11 module name: $PKCS11_MODNAME" >&5
+$as_echo "$as_me: Default PKCS11 module name: $PKCS11_MODNAME" >&6;}
+
+cat >>confdefs.h <<_ACEOF
+#define PKCS11_MODNAME "$PKCS11_MODNAME"
+_ACEOF
+
+
 ac_config_files="$ac_config_files build-tools/krb5-config"
 
 ac_config_files="$ac_config_files build-tools/kadm-server.pc build-tools/kadm-client.pc build-tools/kdb.pc build-tools/krb5.pc build-tools/krb5-gssapi.pc build-tools/mit-krb5.pc build-tools/mit-krb5-gssapi.pc build-tools/gssrpc.pc"
@@ -13765,7 +13842,7 @@
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by Kerberos 5 $as_me 1.20.1, which was
+This file was extended by Kerberos 5 $as_me 1.21.1, which was
 generated by GNU Autoconf 2.69. Invocation command line was
 
 CONFIG_FILES = $CONFIG_FILES
@@ -13827,7 +13904,7 @@
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/\\""\`\$/\\\\&/g'`"
 ac_cs_version="\\
-Kerberos 5 config.status 1.20.1
+Kerberos 5 config.status 1.21.1
 configured by $0, generated by GNU Autoconf 2.69,
 with options \\"\$ac_cs_config\\"

_service:tar_scm:krb5-1.20.1.tar.gz/src/configure.ac -> _service:tar_scm:krb5-1.21.1.tar.gz/src/configure.ac Changed

@@ -1145,7 +1145,6 @@
   K5_GEN_MAKEFILE(plugins/preauth/pkinit)
   K5_GEN_MAKEFILE(tests/softpkcs11)
   PKINIT=yes
-  AC_CHECK_LIB(crypto, CMS_get0_content, AC_DEFINE(HAVE_OPENSSL_CMS, 1, Define if OpenSSL supports cms.))
 elif test "$k5_cv_openssl_version_okay" = no && test "$enable_pkinit" = yes; then
   AC_MSG_ERROR(Version of OpenSSL is too old; cannot enable PKINIT.)
 else
@@ -1406,12 +1405,39 @@
 fi
 AC_SUBST(localedir)
 
-# For KCM lib/krb5/ccache to build KCM Mach RPC support for macOS only.
-case $host in
-*-*-darwin* | *-*-rhapsody*) OSX=osx ;;
-*)                           OSX=no ;;
-esac
+# Determine the default macOS ccache type and whether to build the KCM
+# Mach RPC support.
+MACOS_FRAMEWORK=
+dnl The outer brackets around the case statement prevent m4 from
+dnl eating the brackets in the glob patterns, but also prevent us from
+dnl using AC_DEFINE within the body.
+case $host in
+*-*-darwin0-9.* | *-*-darwin10.*)
+  # Use the normal default cache type for macOS 10.6 (Darwin 10) and
+  # prior.  Build the KCM Mach RPC support.
+  OSX=osx
+  ;;
+*-*-darwin*)
+  # macOS 10.6 (Darwin 11) uses the KCM type by default.  macOS 11
+  # (Darwin 20) uses an xpc-based cache type called XCACHE by default.
+  # We can access either of these collections via a macos-specific
+  # implementation of the API cache type.  Build the KCM Mach RPC
+  # support.
+  OSX=osx
+  macos_defccname=API:
+  MACOS_FRAMEWORK="-framework Kerberos"
+  ;;
+*)
+  # This is not macOS; do not build the Mach RPC support and use the
+  # normal default cache type.
+  OSX=no
+  ;;
+esac
+if test "$macos_defccname" = API:; then
+  AC_DEFINE(USE_CCAPI_MACOS, 1, Define to build macOS CCAPI client)
+fi
 AC_SUBST(OSX)
+AC_SUBST(MACOS_FRAMEWORK)
 
 # Build-time default ccache, keytab, and client keytab names.  These
 # can be given as variable arguments DEFCCNAME, DEFKTNAME, and
@@ -1435,20 +1461,10 @@
 		: "${DEFCKTNAME=`$with_krb5_config --defcktname`}"
 	fi
 fi
-dnl The outer brackets around the case statement prevent m4 from eating the
-dnl brackets in the glob patterns.
 if test "${DEFCCNAME+set}" != set; then
-	case $host in
-	*-*-darwin0-9.* | *-*-darwin10.*)
-		# Use the normal default for macOS 10.6 (Darwin 10) and prior.
-		;;
-	*-*-darwin*)
-		# For macOS 10.7 (Darwin 11) and later, the native ccache uses
-		# the KCM daemon.
-		DEFCCNAME=KCM:
-		;;
-	esac
-	if test "${DEFCCNAME+set}" != set; then
+	if test "${macos_defccname+set}" = set; then
+		DEFCCNAME=$macos_defccname
+	else
 		DEFCCNAME=FILE:/tmp/krb5cc_%{uid}
 	fi
 fi
@@ -1467,6 +1483,14 @@
 AC_DEFINE_UNQUOTED(DEFCKTNAME, "$DEFCKTNAME",
                    Define to default client keytab name)
 
+AC_ARG_VAR(PKCS11_MODNAME, Default PKCS11 module name)
+if test "${PKCS11_MODNAME+set}" != set; then
+	PKCS11_MODNAME=opensc-pkcs11.so
+fi
+AC_MSG_NOTICE(Default PKCS11 module name: $PKCS11_MODNAME)
+AC_DEFINE_UNQUOTED(PKCS11_MODNAME, "$PKCS11_MODNAME",
+                   Default PKCS11 module name)
+
 AC_CONFIG_FILES(build-tools/krb5-config, chmod +x build-tools/krb5-config)
 AC_CONFIG_FILES(build-tools/kadm-server.pc
 	build-tools/kadm-client.pc

_service:tar_scm:krb5-1.20.1.tar.gz/src/doc/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/doc/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/adm_proto.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/adm_proto.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/autoconf.h.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/autoconf.h.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/k5-buf.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-buf.h Changed

@@ -35,8 +35,9 @@
  * fixed or dynamic buffer without the need to check for a failure at each step
  * (and without aborting on malloc failure).  If an allocation failure occurs
  * or the fixed buffer runs out of room, the buffer will be set to an error
- * state which can be detected with k5_buf_status.  Data in a buffer is
- * terminated with a zero byte so that it can be used as a C string.
+ * state which can be detected with k5_buf_status.  Data in a buffer is not
+ * automatically terminated with a zero byte; call k5_buf_cstring() to use the
+ * contents as a C string.
  *
  * k5buf structures are usually stack-allocated.  Do not put k5buf structure
  * pointers into public APIs.  It is okay to reference the data and len fields
@@ -58,7 +59,7 @@
 
 /* Initialize a k5buf using a fixed-sized, existing buffer.  SPACE must be
  * more than zero, or an assertion failure will result. */
-void k5_buf_init_fixed(struct k5buf *buf, char *data, size_t space);
+void k5_buf_init_fixed(struct k5buf *buf, void *data, size_t space);
 
 /* Initialize a k5buf using an internally allocated dynamic buffer. */
 void k5_buf_init_dynamic(struct k5buf *buf);
@@ -73,7 +74,8 @@
 /* Add a counted series of bytes to BUF. */
 void k5_buf_add_len(struct k5buf *buf, const void *data, size_t len);
 
-/* Add sprintf-style formatted data to BUF. */
+/* Add sprintf-style formatted data to BUF.  For a fixed-length buffer this
+ * operation will fail if there isn't room for a zero terminator. */
 void k5_buf_add_fmt(struct k5buf *buf, const char *fmt, ...)
 #if !defined(__cplusplus) && (__GNUC__ > 2)
     __attribute__((__format__(__printf__, 2, 3)))
@@ -88,6 +90,10 @@
 #endif
     ;
 
+/* Without changing the length of buf, ensure that there is a zero byte after
+ * buf.data and return it.  Return NULL on error. */
+char *k5_buf_cstring(struct k5buf *buf);
+
 /* Extend the length of buf by len and return a pointer to the reserved space,
  * to be filled in by the caller.  Return NULL on error. */
 void *k5_buf_get_space(struct k5buf *buf, size_t len);
@@ -109,6 +115,12 @@
 void k5_buf_free(struct k5buf *buf);
 
 static inline void
+k5_buf_add_byte(struct k5buf *buf, uint8_t val)
+{
+    k5_buf_add_len(buf, &val, 1);
+}
+
+static inline void
 k5_buf_add_uint16_be(struct k5buf *buf, uint16_t val)
 {
     void *p = k5_buf_get_space(buf, 2);

_service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-der.h Added

@@ -0,0 +1,149 @@
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* include/k5-der.h - Distinguished Encoding Rules (DER) declarations */
+/*
+ * Copyright (C) 2023 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * Most ASN.1 encoding and decoding is done using the table-driven framework in
+ * libkrb5. When that is not an option, these helpers can be used to encode
+ * and decode simple types.
+ */
+
+#ifndef K5_DER_H
+#define K5_DER_H
+
+#include <stdint.h>
+#include <stdbool.h>
+#include "k5-buf.h"
+#include "k5-input.h"
+
+/* Return the number of bytes needed to encode len as a DER encoding length. */
+static inline size_t
+k5_der_len_len(size_t len)
+{
+ size_t llen;
+
+ if (len < 128)
+ return 1;
+ llen = 1;
+ while (len > 0) {
+ len >>= 8;
+ llen++;
+ }
+ return llen;
+}
+
+/* Return the number of bytes needed to encode a DER value (with identifier
+ * byte and length) for a given contents length. */
+static inline size_t
+k5_der_value_len(size_t contents_len)
+{
+ return 1 + k5_der_len_len(contents_len) + contents_len;
+}
+
+/* Add a DER identifier byte (composed by the caller, including the ASN.1
+ * class, tag, and constructed bit) and length. */
+static inline void
+k5_der_add_taglen(struct k5buf *buf, uint8_t idbyte, size_t len)
+{
+ uint8_t *p;
+ size_t llen = k5_der_len_len(len);
+
+ p = k5_buf_get_space(buf, 1 + llen);
+ if (p == NULL)
+ return;
+ *p++ = idbyte;
+ if (len < 128) {
+ *p = len;
+ } else {
+ *p = 0x80 | (llen - 1);
+ /* Encode the length bytes backwards so the most significant byte is
+ * first. */
+ p += llen;
+ while (len > 0) {
+ *--p = len & 0xFF;
+ len >>= 8;
+ }
+ }
+}
+
+/* Add a DER value (identifier byte, length, and contents). */
+static inline void
+k5_der_add_value(struct k5buf *buf, uint8_t idbyte, const void *contents,
+ size_t len)
+{
+ k5_der_add_taglen(buf, idbyte, len);
+ k5_buf_add_len(buf, contents, len);
+}
+
+/*
+ * If the next byte in in matches idbyte and the subsequent DER length is
+ * valid, advance in past the value, set *contents_out to the value contents,
+ * and return true. Otherwise return false. Only set an error on in if the
+ * next bytes matches idbyte but the ensuing length is invalid. contents_out
+ * may be aliased to in; it will only be written to on successful decoding of a
+ * value.
+ */
+static inline bool
+k5_der_get_value(struct k5input *in, uint8_t idbyte,
+ struct k5input *contents_out)
+{
+ uint8_t lenbyte, i;
+ size_t len;
+ const void *bytes;
+
+ /* Do nothing if in is empty or the next byte doesn't match idbyte. */
+ if (in->status || in->len == 0 || *in->ptr != idbyte)
+ return false;
+
+ /* Advance past the identifier byte and decode the length. */
+ (void)k5_input_get_byte(in);
+ lenbyte = k5_input_get_byte(in);
+ if (lenbyte < 128) {
+ len = lenbyte;
+ } else {
+ len = 0;
+ for (i = 0; i < (lenbyte & 0x7F); i++) {
+ if (len > (SIZE_MAX >> 8)) {
+ k5_input_set_status(in, EOVERFLOW);
+ return false;
+ }
+ len = (len << 8) | k5_input_get_byte(in);
+ }
+ }
+
+ bytes = k5_input_get_bytes(in, len);
+ if (bytes == NULL)
+ return false;
+ k5_input_init(contents_out, bytes, len);
+ return true;
+}
+
+#endif /* K5_DER_H */

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/k5-int.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-int.h Changed

@@ -180,6 +180,8 @@
  * matches the variable name.  Keep these alphabetized. */
 #define KRB5_CONF_ACL_FILE                     "acl_file"
 #define KRB5_CONF_ADMIN_SERVER                 "admin_server"
+#define KRB5_CONF_ALLOW_DES3                   "allow_des3"
+#define KRB5_CONF_ALLOW_RC4                    "allow_rc4"
 #define KRB5_CONF_ALLOW_WEAK_CRYPTO            "allow_weak_crypto"
 #define KRB5_CONF_AUTH_TO_LOCAL                "auth_to_local"
 #define KRB5_CONF_AUTH_TO_LOCAL_NAMES          "auth_to_local_names"
@@ -1238,6 +1240,8 @@
     struct _kdb_log_context *kdblog_context;
 
     krb5_boolean allow_weak_crypto;
+    krb5_boolean allow_des3;
+    krb5_boolean allow_rc4;
     krb5_boolean ignore_acceptor_hostname;
     krb5_boolean enforce_ok_as_delegate;
     enum dns_canonhost dns_canonicalize_hostname;
@@ -2324,6 +2328,15 @@
     return (krb5_deltat)((uint32_t)a - (uint32_t)b);
 }
 
+/* Return (end - start) as an unsigned 32-bit value, or 0 if start > end. */
+static inline uint32_t
+ts_interval(krb5_timestamp start, krb5_timestamp end)
+{
+    if ((uint32_t)start > (uint32_t)end)
+        return 0;
+    return (uint32_t)end - (uint32_t)start;
+}
+
 /* Increment a timestamp by a signed 32-bit interval, without relying on
  * undefined behavior. */
 static inline krb5_timestamp

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/k5-trace.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-trace.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/k5-unicode.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-unicode.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/k5-utf8.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/k5-utf8.h Changed

@@ -73,9 +73,6 @@
 typedef uint16_t krb5_ucs2;
 typedef uint32_t krb5_ucs4;
 
-int krb5int_utf8_to_ucs2(const char *p, krb5_ucs2 *out);
-size_t krb5int_ucs2_to_utf8(krb5_ucs2 c, char *buf);
-
 int krb5int_utf8_to_ucs4(const char *p, krb5_ucs4 *out);
 size_t krb5int_ucs4_to_utf8(krb5_ucs4 c, char *buf);
 
@@ -96,49 +93,6 @@
 int k5_utf8_to_utf16le(const char *utf8, uint8_t **utf16_out,
 size_t *nbytes_out);
 
-/* returns the number of bytes in the UTF-8 string */
-size_t krb5int_utf8_bytes(const char *);
-/* returns the number of UTF-8 characters in the string */
-size_t krb5int_utf8_chars(const char *);
-/* returns the number of UTF-8 characters in the counted string */
-size_t krb5int_utf8c_chars(const char *, size_t);
-/* returns the length (in bytes) of the UTF-8 character */
-int krb5int_utf8_offset(const char *);
-/* returns the length (in bytes) indicated by the UTF-8 character */
-int krb5int_utf8_charlen(const char *);
-
-/* returns the length (in bytes) indicated by the UTF-8 character
- * also checks that shortest possible encoding was used
- */
-int krb5int_utf8_charlen2(const char *);
-
-/* copies a UTF-8 character and returning number of bytes copied */
-int krb5int_utf8_copy(char *, const char *);
-
-/* returns pointer of next UTF-8 character in string */
-char *krb5int_utf8_next( const char *);
-/* returns pointer of previous UTF-8 character in string */
-char *krb5int_utf8_prev( const char *);
-
-/* primitive ctype routines -- not aware of non-ascii characters */
-int krb5int_utf8_isascii( const char *);
-int krb5int_utf8_isalpha( const char *);
-int krb5int_utf8_isalnum( const char *);
-int krb5int_utf8_isdigit( const char *);
-int krb5int_utf8_isxdigit( const char *);
-int krb5int_utf8_isspace( const char *);
-
-/* span characters not in set, return bytes spanned */
-size_t krb5int_utf8_strcspn( const char* str, const char *set);
-/* span characters in set, return bytes spanned */
-size_t krb5int_utf8_strspn( const char* str, const char *set);
-/* return first occurrence of character in string */
-char *krb5int_utf8_strchr( const char* str, const char *chr);
-/* return first character of set in string */
-char *krb5int_utf8_strpbrk( const char* str, const char *set);
-/* reentrant tokenizer */
-char *krb5int_utf8_strtok( char* sp, const char* sep, char **last);
-
 /* Optimizations */
 extern const char krb5int_utf8_lentab128;
 extern const char krb5int_utf8_mintab32;
@@ -157,38 +111,10 @@
 (krb5int_utf8_mintabKRB5_UTF8_BV(p) & 0x1f & (p)1)) ? \
 l : 0)
 
-#define KRB5_UTF8_OFFSET(p) (KRB5_UTF8_ISASCII(p) \
- ? 1 : krb5int_utf8_offset((p)) )
-
-#define KRB5_UTF8_COPY(d,s) (KRB5_UTF8_ISASCII(s) \
- ? (*(d) = *(s), 1) : krb5int_utf8_copy((d),(s)))
-
-#define KRB5_UTF8_NEXT(p) (KRB5_UTF8_ISASCII(p) \
- ? (char *)(p)+1 : krb5int_utf8_next((p)))
-
-#define KRB5_UTF8_INCR(p) ((p) = KRB5_UTF8_NEXT(p))
-
-/* For symmetry */
-#define KRB5_UTF8_PREV(p) (krb5int_utf8_prev((p)))
-#define KRB5_UTF8_DECR(p) ((p)=KRB5_UTF8_PREV((p)))
-
 /*
 * these macros assume 'x' is an ASCII x
 * and assume the "C" locale
 */
-#define KRB5_ASCII(c) (!((c) & 0x80))
-#define KRB5_SPACE(c) ((c) == ' ' || (c) == '\t' || (c) == '\n')
-#define KRB5_DIGIT(c) ((c) >= '0' && (c) <= '9')
-#define KRB5_LOWER(c) ((c) >= 'a' && (c) <= 'z')
 #define KRB5_UPPER(c) ((c) >= 'A' && (c) <= 'Z')
-#define KRB5_ALPHA(c) (KRB5_LOWER(c) || KRB5_UPPER(c))
-#define KRB5_ALNUM(c) (KRB5_ALPHA(c) || KRB5_DIGIT(c))
-
-#define KRB5_LDH(c) (KRB5_ALNUM(c) || (c) == '-')
-
-#define KRB5_HEXLOWER(c) ((c) >= 'a' && (c) <= 'f')
-#define KRB5_HEXUPPER(c) ((c) >= 'A' && (c) <= 'F')
-#define KRB5_HEX(c) (KRB5_DIGIT(c) || \
- KRB5_HEXLOWER(c) || KRB5_HEXUPPER(c))
 
 #endif /* K5_UTF8_H */

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/kdb.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/kdb.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/krb5/certauth_plugin.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/krb5/certauth_plugin.h Changed

@@ -35,7 +35,7 @@
 *
 * The certauth pluggable interface currently has only one supported major
 * version, which is 1. Major version 1 has a current minor version number of
- * 1.
+ * 2.
 *
 * certauth plugin modules should define a function named
 * certauth_<modulename>_initvt, matching the signature:
@@ -79,6 +79,13 @@
 krb5_certauth_moddata *moddata_out);
 
 /*
+ * Optional: Initialize module data. Supersedes init if present.
+ */
+typedef krb5_error_code
+(*krb5_certauth_init_ex_fn)(krb5_context context, const char *const *realmlist,
+ krb5_certauth_moddata *moddata_out);
+
+/*
 * Optional: Clean up the module data.
 */
 typedef void
@@ -132,6 +139,10 @@
 krb5_certauth_fini_fn fini;
 krb5_certauth_authorize_fn authorize;
 krb5_certauth_free_indicator_fn free_ind;
+ /* Minor version 1 ends here. */
+
+ krb5_certauth_init_ex_fn init_ex;
+ /* Minor version 2 ends here. */
 } *krb5_certauth_vtable;
 
 #endif /* KRB5_CERTAUTH_PLUGIN_H */

_service:tar_scm:krb5-1.20.1.tar.gz/src/include/krb5/krb5.hin -> _service:tar_scm:krb5-1.21.1.tar.gz/src/include/krb5/krb5.hin Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kadmin/cli/getdate.y -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kadmin/cli/getdate.y Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kadmin/dbutil/tdumputil.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kadmin/dbutil/tdumputil.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kadmin/server/auth_acl.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kadmin/server/auth_acl.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/dispatch.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/dispatch.c Changed

@@ -33,8 +33,7 @@
 #include <arpa/inet.h>
 #include <string.h>
 
-static krb5_error_code make_too_big_error(kdc_realm_t *kdc_active_realm,
- krb5_data **out);
+static krb5_error_code make_too_big_error(kdc_realm_t *realm, krb5_data **out);
 
 struct dispatch_state {
 loop_respond_fn respond;
@@ -51,13 +50,12 @@
 {
 loop_respond_fn oldrespond = state->respond;
 void *oldarg = state->arg;
- kdc_realm_t *kdc_active_realm = state->active_realm;
 
 if (state->is_tcp == 0 && response &&
 response->length > (unsigned int)max_dgram_reply_size) {
- krb5_free_data(kdc_context, response);
+ krb5_free_data(NULL, response);
 response = NULL;
- code = make_too_big_error(kdc_active_realm, &response);
+ code = make_too_big_error(state->active_realm, &response);
 if (code)
 krb5_klog_syslog(LOG_ERR, "error constructing "
 "KRB_ERR_RESPONSE_TOO_BIG error: %s",
@@ -178,8 +176,9 @@
 }
 
 static krb5_error_code
-make_too_big_error(kdc_realm_t *kdc_active_realm, krb5_data **out)
+make_too_big_error(kdc_realm_t *realm, krb5_data **out)
 {
+ krb5_context context = realm->realm_context;
 krb5_error errpkt;
 krb5_error_code retval;
 krb5_data *scratch;
@@ -187,11 +186,11 @@
 *out = NULL;
 memset(&errpkt, 0, sizeof(errpkt));
 
- retval = krb5_us_timeofday(kdc_context, &errpkt.stime, &errpkt.susec);
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
 if (retval)
 return retval;
 errpkt.error = KRB_ERR_RESPONSE_TOO_BIG;
- errpkt.server = tgs_server;
+ errpkt.server = realm->realm_tgsprinc;
 errpkt.client = NULL;
 errpkt.text.length = 0;
 errpkt.text.data = 0;
@@ -200,7 +199,7 @@
 scratch = malloc(sizeof(*scratch));
 if (scratch == NULL)
 return ENOMEM;
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
 if (retval) {
 free(scratch);
 return retval;

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/do_as_req.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/do_as_req.c Changed

@@ -76,8 +76,8 @@
 
 static krb5_error_code
 prepare_error_as(struct kdc_request_state *, krb5_kdc_req *, krb5_db_entry *,
- krb5_keyblock *, int, krb5_pa_data **, krb5_boolean,
- krb5_principal, krb5_data **, const char *);
+ krb5_keyblock *, krb5_error_code, krb5_pa_data **,
+ krb5_boolean, krb5_principal, krb5_data **, const char *);
 
 /* Determine the key-expiration value according to RFC 4120 section 5.4.2. */
 static krb5_timestamp
@@ -193,13 +193,14 @@
 static void
 finish_process_as_req(struct as_req_state *state, krb5_error_code errcode)
 {
+ kdc_realm_t *realm = state->active_realm;
+ krb5_context context = realm->realm_context;
 krb5_keyblock *as_encrypting_key = NULL;
 krb5_data *response = NULL;
 const char *emsg = 0;
 int did_log = 0;
 loop_respond_fn oldrespond;
 void *oldarg;
- kdc_realm_t *kdc_active_realm = state->active_realm;
 krb5_audit_state *au_state = state->au_state;
 krb5_keyblock *replaced_reply_key = NULL;
 
@@ -214,14 +215,14 @@
 
 state->ticket_reply.enc_part2 = &state->enc_tkt_reply;
 
- errcode = check_kdcpolicy_as(kdc_context, state->request, state->client,
+ errcode = check_kdcpolicy_as(context, state->request, state->client,
 state->server, state->auth_indicators,
 state->kdc_time, &state->enc_tkt_reply.times,
 &state->status);
 if (errcode)
 goto egress;
 
- errcode = get_first_current_key(kdc_context, state->server,
+ errcode = get_first_current_key(context, state->server,
 &state->server_keyblock);
 if (errcode) {
 state->status = "FINDING_SERVER_KEY";
@@ -247,7 +248,7 @@
 /* Fetch the padata info to be returned (do this before
 * authdata to handle possible replacement of reply key
 */
- errcode = return_padata(kdc_context, &state->rock, state->req_pkt,
+ errcode = return_padata(context, &state->rock, state->req_pkt,
 state->request, &state->reply,
 &state->client_keyblock, &state->pa_context);
 if (errcode) {
@@ -266,7 +267,7 @@
 if (state->rock.replaced_reply_key)
 replaced_reply_key = &state->client_keyblock;
 
- errcode = handle_authdata(kdc_active_realm, state->c_flags, state->client,
+ errcode = handle_authdata(realm, state->c_flags, state->client,
 state->server, NULL, state->local_tgt,
 &state->local_tgt_key, &state->client_keyblock,
 &state->server_keyblock, NULL,
@@ -280,19 +281,18 @@
 goto egress;
 }
 
- errcode = check_indicators(kdc_context, state->server,
- state->auth_indicators);
+ errcode = check_indicators(context, state->server, state->auth_indicators);
 if (errcode) {
 state->status = "HIGHER_AUTHENTICATION_REQUIRED";
 goto egress;
 }
 
- errcode = krb5_encrypt_tkt_part(kdc_context, &state->server_keyblock,
+ errcode = krb5_encrypt_tkt_part(context, &state->server_keyblock,
 &state->ticket_reply);
 if (errcode)
 goto egress;
 
- errcode = kau_make_tkt_id(kdc_context, &state->ticket_reply,
+ errcode = kau_make_tkt_id(context, &state->ticket_reply,
 &au_state->tkt_out_id);
 if (errcode)
 goto egress;
@@ -313,7 +313,7 @@
 &as_encrypting_key);
 if (errcode)
 goto egress;
- errcode = return_enc_padata(kdc_context, state->req_pkt, state->request,
+ errcode = return_enc_padata(context, state->req_pkt, state->request,
 as_encrypting_key, state->server,
 &state->reply_encpart, FALSE);
 if (errcode) {
@@ -323,10 +323,9 @@
 
 if (kdc_fast_hide_client(state->rstate))
 state->reply.client = (krb5_principal)krb5_anonymous_principal();
- errcode = krb5_encode_kdc_rep(kdc_context, KRB5_AS_REP,
- &state->reply_encpart, 0,
- as_encrypting_key,
- &state->reply, &response);
+ errcode = krb5_encode_kdc_rep(context, KRB5_AS_REP, &state->reply_encpart,
+ 0, as_encrypting_key, &state->reply,
+ &response);
 if (state->client_key != NULL)
 state->reply.enc_part.kvno = state->client_key->key_data_kvno;
 if (errcode)
@@ -338,7 +337,7 @@
 state->reply.enc_part.ciphertext.length);
 free(state->reply.enc_part.ciphertext.data);
 
- log_as_req(kdc_context, state->local_addr, state->remote_addr,
+ log_as_req(context, state->local_addr, state->remote_addr,
 state->request, &state->reply, state->client, state->cname,
 state->server, state->sname, state->kdc_time, 0, 0, 0);
 did_log = 1;
@@ -349,18 +348,18 @@
 
 au_state->status = state->status;
 au_state->reply = &state->reply;
- kau_as_req(kdc_context,
- (errcode || state->preauth_err) ? FALSE : TRUE, au_state);
+ kau_as_req(context, (errcode || state->preauth_err) ? FALSE : TRUE,
+ au_state);
 kau_free_kdc_req(au_state);
 
- free_padata_context(kdc_context, state->pa_context);
+ free_padata_context(context, state->pa_context);
 if (as_encrypting_key)
- krb5_free_keyblock(kdc_context, as_encrypting_key);
+ krb5_free_keyblock(context, as_encrypting_key);
 if (errcode)
- emsg = krb5_get_error_message(kdc_context, errcode);
+ emsg = krb5_get_error_message(context, errcode);
 
 if (state->status) {
- log_as_req(kdc_context, state->local_addr, state->remote_addr,
+ log_as_req(context, state->local_addr, state->remote_addr,
 state->request, &state->reply, state->client,
 state->cname, state->server, state->sname, state->kdc_time,
 state->status, errcode, emsg);
@@ -371,10 +370,6 @@
 state->status = emsg;
 }
 if (errcode != KRB5KDC_ERR_DISCARD) {
- errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > KRB_ERR_MAX)
- errcode = KRB_ERR_GENERIC;
-
 errcode = prepare_error_as(state->rstate, state->request,
 state->local_tgt, &state->local_tgt_key,
 errcode, state->e_data,
@@ -387,40 +382,39 @@
 }
 
 if (emsg)
- krb5_free_error_message(kdc_context, emsg);
+ krb5_free_error_message(context, emsg);
 if (state->enc_tkt_reply.authorization_data != NULL)
- krb5_free_authdata(kdc_context,
- state->enc_tkt_reply.authorization_data);
+ krb5_free_authdata(context, state->enc_tkt_reply.authorization_data);
 if (state->local_tgt_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->local_tgt_key);
+ krb5_free_keyblock_contents(context, &state->local_tgt_key);
 if (state->server_keyblock.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->server_keyblock);
+ krb5_free_keyblock_contents(context, &state->server_keyblock);
 if (state->client_keyblock.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->client_keyblock);
+ krb5_free_keyblock_contents(context, &state->client_keyblock);
 if (state->reply.padata != NULL)
- krb5_free_pa_data(kdc_context, state->reply.padata);
+ krb5_free_pa_data(context, state->reply.padata);
 if (state->reply_encpart.enc_padata)
- krb5_free_pa_data(kdc_context, state->reply_encpart.enc_padata);
+ krb5_free_pa_data(context, state->reply_encpart.enc_padata);
 
 if (state->cname != NULL)
 free(state->cname);
 if (state->sname != NULL)
 free(state->sname);
- krb5_db_free_principal(kdc_context, state->client);
- krb5_db_free_principal(kdc_context, state->server);
- krb5_db_free_principal(kdc_context, state->local_tgt_storage);
+ krb5_db_free_principal(context, state->client);
+ krb5_db_free_principal(context, state->server);
+ krb5_db_free_principal(context, state->local_tgt_storage);
 if (state->session_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->session_key);
+ krb5_free_keyblock_contents(context, &state->session_key);
 if (state->ticket_reply.enc_part.ciphertext.data != NULL) {
 memset(state->ticket_reply.enc_part.ciphertext.data , 0,
 state->ticket_reply.enc_part.ciphertext.length);
 free(state->ticket_reply.enc_part.ciphertext.data);
 }
 
- krb5_free_pa_data(kdc_context, state->e_data);
- krb5_free_data(kdc_context, state->inner_body);
+ krb5_free_pa_data(context, state->e_data);
+ krb5_free_data(context, state->inner_body);
 kdc_free_rstate(state->rstate);
- krb5_free_kdc_req(kdc_context, state->request);
+ krb5_free_kdc_req(context, state->request);
 k5_free_data_ptr_list(state->auth_indicators);
 assert(did_log != 0);
 
@@ -475,9 +469,10 @@
 void
 process_as_req(krb5_kdc_req *request, krb5_data *req_pkt,
 const krb5_fulladdr *local_addr,
- const krb5_fulladdr *remote_addr, kdc_realm_t *kdc_active_realm,
+ const krb5_fulladdr *remote_addr, kdc_realm_t *realm,
 verto_ctx *vctx, loop_respond_fn respond, void *arg)
 {
+ krb5_context context = realm->realm_context;
 krb5_error_code errcode;
 krb5_data encoded_req_body;
 krb5_enctype useenctype;
@@ -495,9 +490,9 @@
 state->req_pkt = req_pkt;
 state->local_addr = local_addr;
 state->remote_addr = remote_addr;
- state->active_realm = kdc_active_realm;
+ state->active_realm = realm;
 
- errcode = kdc_make_rstate(kdc_active_realm, &state->rstate);
+ errcode = kdc_make_rstate(realm, &state->rstate);
 if (errcode != 0) {
 (*respond)(arg, errcode, NULL);
 free(state);
@@ -505,7 +500,7 @@
 }
 
 /* Initialize audit state. */
- errcode = kau_init_kdc_req(kdc_context, state->request, remote_addr,
+ errcode = kau_init_kdc_req(context, state->request, remote_addr,
 &au_state);
 if (errcode) {
 (*respond)(arg, errcode, NULL);
@@ -522,9 +517,9 @@
 }
 
 /* Seed the audit trail with the request ID and basic information. */
- kau_as_req(kdc_context, TRUE, au_state);
+ kau_as_req(context, TRUE, au_state);
 
- errcode = krb5_timeofday(kdc_context, &state->kdc_time);
+ errcode = krb5_timeofday(context, &state->kdc_time);
 if (errcode)
 goto errout;
 
@@ -541,7 +536,7 @@
 }
 if (state->inner_body == NULL) {
 /* Not a FAST request; copy the encoded request body. */
- errcode = krb5_copy_data(kdc_context, &encoded_req_body,
+ errcode = krb5_copy_data(context, &encoded_req_body,
 &state->inner_body);
 if (errcode)
 goto errout;
@@ -558,9 +553,9 @@
 errcode = KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN;
 goto errout;
 }
- if ((errcode = krb5_unparse_name(kdc_context,
- state->request->client,
- &state->cname)))
+ errcode = krb5_unparse_name(context, state->request->client,
+ &state->cname);
+ if (errcode)
 goto errout;
 limit_string(state->cname);
 
@@ -569,9 +564,9 @@
 errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
 goto errout;
 }
- if ((errcode = krb5_unparse_name(kdc_context,
- state->request->server,
- &state->sname)))
+ errcode = krb5_unparse_name(context, state->request->server,
+ &state->sname);
+ if (errcode)
 goto errout;
 limit_string(state->sname);
 
@@ -579,7 +574,7 @@
 if (isflagset(state->request->kdc_options, KDC_OPT_CANONICALIZE) ||
 state->request->client->type == KRB5_NT_ENTERPRISE_PRINCIPAL)
 setflag(state->c_flags, KRB5_KDB_FLAG_REFERRAL_OK);
- errcode = lookup_client(kdc_context, state->request, state->c_flags,
+ errcode = lookup_client(context, state->request, state->c_flags,
 &state->client);
 if (errcode == KRB5_KDB_CANTLOCK_DB)
 errcode = KRB5KDC_ERR_SVC_UNAVAILABLE;
@@ -598,7 +593,7 @@
 
 au_state->stage = SRVC_PRINC;
 
- errcode = krb5_db_get_principal(kdc_context, state->request->server, 0,
+ errcode = krb5_db_get_principal(context, state->request->server, 0,
 &state->server);
 if (errcode == KRB5_KDB_CANTLOCK_DB)
 errcode = KRB5KDC_ERR_SVC_UNAVAILABLE;
@@ -620,7 +615,7 @@
 goto errout;
 }
 
- errcode = get_local_tgt(kdc_context, &state->request->server->realm,
+ errcode = get_local_tgt(context, &state->request->server->realm,
 state->server, &state->local_tgt,
 &state->local_tgt_storage, &state->local_tgt_key);
 if (errcode) {
@@ -632,30 +627,29 @@
 
 au_state->stage = VALIDATE_POL;
 
- if ((errcode = validate_as_request(kdc_active_realm,
- state->request, state->client,
- state->server, state->kdc_time,
- &state->status, &state->e_data))) {
- errcode += ERROR_TABLE_BASE_krb5;
+ errcode = validate_as_request(realm, state->request, state->client,
+ state->server, state->kdc_time,
+ &state->status, &state->e_data);
+ if (errcode)
 goto errout;
- }
 
 au_state->stage = ISSUE_TKT;
 
 /*
 * Select the keytype for the ticket session key.
 */
- if ((useenctype = select_session_keytype(kdc_active_realm, state->server,
- state->request->nktypes,
- state->request->ktype)) == 0) {
+ useenctype = select_session_keytype(context, state->server,
+ state->request->nktypes,
+ state->request->ktype);
+ if (useenctype == 0) {
 /* unsupported ktype */
 state->status = "BAD_ENCRYPTION_TYPE";
 errcode = KRB5KDC_ERR_ETYPE_NOSUPP;
 goto errout;
 }
 
- if ((errcode = krb5_c_make_random_key(kdc_context, useenctype,
- &state->session_key)))
+ errcode = krb5_c_make_random_key(context, useenctype, &state->session_key);
+ if (errcode)
 goto errout;
 
 /*
@@ -700,14 +694,13 @@
 else
 state->enc_tkt_reply.times.starttime = state->kdc_time;
 
- kdc_get_ticket_endtime(kdc_active_realm,
- state->enc_tkt_reply.times.starttime,
+ kdc_get_ticket_endtime(realm, state->enc_tkt_reply.times.starttime,
 kdc_infinity, state->request->till, state->client,
 state->server, &state->enc_tkt_reply.times.endtime);
 
- kdc_get_ticket_renewtime(kdc_active_realm, state->request, NULL,
- state->client, state->server,
- &state->enc_tkt_reply);
+ kdc_get_ticket_renewtime(realm, state->request, NULL, state->client,
+ state->server, &state->enc_tkt_reply.flags,
+ &state->enc_tkt_reply.times);
 
 /*
 * starttime is optional, and treated as authtime if not present.
@@ -723,17 +716,16 @@
 /* If anonymous requests are being used, adjust the realm of the client
 * principal. */
 if (isflagset(state->request->kdc_options, KDC_OPT_REQUEST_ANONYMOUS)) {
- if (!krb5_principal_compare_any_realm(kdc_context,
- state->request->client,
+ if (!krb5_principal_compare_any_realm(context, state->request->client,
 krb5_anonymous_principal())) {
 errcode = KRB5KDC_ERR_BADOPTION;
 /* Anonymous requested but anonymous principal not used.*/
 state->status = "VALIDATE_ANONYMOUS_PRINCIPAL";
 goto errout;
 }
- krb5_free_principal(kdc_context, state->request->client);
+ krb5_free_principal(context, state->request->client);
 state->request->client = NULL;
- errcode = krb5_copy_principal(kdc_context, krb5_anonymous_principal(),
+ errcode = krb5_copy_principal(context, krb5_anonymous_principal(),
 &state->request->client);
 if (errcode)
 goto errout;
@@ -741,8 +733,8 @@
 setflag(state->client->attributes, KRB5_KDB_REQUIRES_PRE_AUTH);
 }
 
- errcode = select_client_key(kdc_context, state->client,
- state->request->ktype, state->request->nktypes,
+ errcode = select_client_key(context, state->client, state->request->ktype,
+ state->request->nktypes,
 &state->client_keyblock, &state->client_key);
 if (errcode) {
 state->status = "DECRYPT_CLIENT_KEY";
@@ -752,7 +744,7 @@
 state->rock.client_key = state->client_key;
 state->rock.client_keyblock = &state->client_keyblock;
 
- errcode = kdc_fast_read_cookie(kdc_context, state->rstate, state->request,
+ errcode = kdc_fast_read_cookie(context, state->rstate, state->request,
 state->local_tgt, &state->local_tgt_key);
 if (errcode) {
 state->status = "READ_COOKIE";
@@ -763,10 +755,9 @@
 * Check the preauthentication if it is there.
 */
 if (state->request->padata) {
- check_padata(kdc_context, &state->rock, state->req_pkt,
- state->request, &state->enc_tkt_reply, &state->pa_context,
- &state->e_data, &state->typed_e_data, finish_preauth,
- state);
+ check_padata(context, &state->rock, state->req_pkt, state->request,
+ &state->enc_tkt_reply, &state->pa_context, &state->e_data,
+ &state->typed_e_data, finish_preauth, state);
 } else
 finish_preauth(state, 0);
 return;
@@ -778,15 +769,15 @@
 static krb5_error_code
 prepare_error_as(struct kdc_request_state *rstate, krb5_kdc_req *request,
 krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
- int error, krb5_pa_data **e_data_in,
+ krb5_error_code code, krb5_pa_data **e_data_in,
 krb5_boolean typed_e_data, krb5_principal canon_client,
 krb5_data **response, const char *status)
 {
+ krb5_context context = rstate->realm_data->realm_context;
 krb5_error errpkt;
 krb5_error_code retval;
 krb5_data *scratch = NULL, *e_data_asn1 = NULL, *fast_edata = NULL;
 krb5_pa_data **e_data = NULL, *cookie = NULL;
- kdc_realm_t *kdc_active_realm = rstate->realm_data;
 size_t count;
 
 errpkt.magic = KV5M_ERROR;
@@ -799,21 +790,20 @@
 if (e_data == NULL)
 return ENOMEM;
 memcpy(e_data, e_data_in, count * sizeof(*e_data));
- retval = kdc_fast_make_cookie(kdc_context, rstate, local_tgt,
- local_tgt_key, request->client,
- &cookie);
+ retval = kdc_fast_make_cookie(context, rstate, local_tgt,
+ local_tgt_key, request->client, &cookie);
 e_datacount = cookie;
 }
 
 errpkt.ctime = 0;
 errpkt.cusec = 0;
 
- retval = krb5_us_timeofday(kdc_context, &errpkt.stime, &errpkt.susec);
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
 if (retval)
 goto cleanup;
- errpkt.error = error;
+ errpkt.error = errcode_to_protocol(code);
 errpkt.server = request->server;
- errpkt.client = (error == KDC_ERR_WRONG_REALM) ? canon_client :
+ errpkt.client = (code == KRB5KDC_ERR_WRONG_REALM) ? canon_client :
 request->client;
 errpkt.text = string2data((char *)status);
 
@@ -828,8 +818,8 @@
 } else
 errpkt.e_data = empty_data();
 
- retval = kdc_fast_handle_error(kdc_context, rstate, request, e_data,
- &errpkt, &fast_edata);
+ retval = kdc_fast_handle_error(context, rstate, request, e_data, &errpkt,
+ &fast_edata);
 if (retval)
 goto cleanup;
 if (fast_edata != NULL)
@@ -840,7 +830,7 @@
 goto cleanup;
 if (kdc_fast_hide_client(rstate) && errpkt.client != NULL)
 errpkt.client = (krb5_principal)krb5_anonymous_principal();
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
 if (retval)
 goto cleanup;
 
@@ -848,8 +838,8 @@
 scratch = NULL;
 
 cleanup:
- krb5_free_data(kdc_context, fast_edata);
- krb5_free_data(kdc_context, e_data_asn1);
+ krb5_free_data(context, fast_edata);
+ krb5_free_data(context, e_data_asn1);
 free(scratch);
 free(e_data);
 if (cookie != NULL)

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/do_tgs_req.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/do_tgs_req.c Changed

@@ -69,743 +69,134 @@
 #include "adm_proto.h"
 #include <ctype.h>
 
-static krb5_error_code
-find_alternate_tgs(kdc_realm_t *, krb5_principal, krb5_db_entry **,
- const char**);
-
-static krb5_error_code
-prepare_error_tgs(struct kdc_request_state *, krb5_kdc_req *,krb5_ticket *,int,
- krb5_principal,krb5_data **,const char *, krb5_pa_data **);
-
-static krb5_error_code
-decrypt_2ndtkt(kdc_realm_t *, krb5_kdc_req *, krb5_flags, krb5_db_entry *,
- krb5_keyblock *, const krb5_ticket **, krb5_pac *,
- krb5_db_entry **, krb5_keyblock **, const char **);
-
-static krb5_error_code
-gen_session_key(kdc_realm_t *, krb5_kdc_req *, krb5_db_entry *,
- krb5_keyblock *, const char **);
-
-static krb5_int32
-find_referral_tgs(kdc_realm_t *, krb5_kdc_req *, krb5_principal *);
-
-static krb5_error_code
-db_get_svc_princ(krb5_context, krb5_principal, krb5_flags,
- krb5_db_entry **, const char **);
-
-static krb5_error_code
-search_sprinc(kdc_realm_t *, krb5_kdc_req *, krb5_flags,
- krb5_db_entry **, const char **);
-
-/*ARGSUSED*/
-krb5_error_code
-process_tgs_req(krb5_kdc_req *request, krb5_data *pkt,
- const krb5_fulladdr *from, kdc_realm_t *kdc_active_realm,
- krb5_data **response)
-{
- krb5_keyblock * subkey = 0;
- krb5_keyblock *header_key = NULL;
- krb5_keyblock *stkt_server_key = NULL;
- krb5_keyblock *subject_key;
- krb5_db_entry *server = NULL;
- krb5_db_entry *stkt_server = NULL;
- krb5_db_entry *subject_server;
- krb5_kdc_rep reply;
- krb5_enc_kdc_rep_part reply_encpart;
- krb5_ticket ticket_reply, *header_ticket = 0;
- const krb5_ticket *stkt = NULL;
- krb5_enc_tkt_part enc_tkt_reply;
- int newtransited = 0;
- krb5_error_code retval = 0;
- krb5_keyblock server_keyblock, *encrypting_key;
- krb5_timestamp kdc_time, authtime = 0;
- krb5_keyblock session_key, local_tgt_key;
- krb5_keyblock *reply_key = NULL;
- krb5_principal cprinc = NULL, sprinc = NULL, altcprinc = NULL;
- krb5_principal stkt_authdata_client = NULL;
- krb5_last_req_entry *nolrarray2, nolrentry;
- int errcode;
- const char *status = 0;
- krb5_enc_tkt_part *header_enc_tkt = NULL; /* TGT */
- krb5_enc_tkt_part *subject_tkt = NULL; /* TGT or evidence ticket */
- krb5_db_entry *client = NULL, *header_server = NULL;
- krb5_db_entry *local_tgt, *local_tgt_storage = NULL;
- krb5_pa_s4u_x509_user *s4u_x509_user = NULL; /* protocol transition request */
- krb5_authdata **kdc_issued_auth_data = NULL; /* auth data issued by KDC */
- unsigned int c_flags = 0, s_flags = 0; /* client/server KDB flags */
- krb5_boolean is_referral, is_crossrealm;
- const char *emsg = NULL;
- krb5_kvno ticket_kvno = 0;
- struct kdc_request_state *state = NULL;
- krb5_pa_data *pa_tgs_req; /*points into request*/
- krb5_data scratch;
- krb5_pa_data **e_data = NULL;
- krb5_audit_state *au_state = NULL;
- krb5_data **auth_indicators = NULL;
- krb5_pac header_pac = NULL, stkt_pac = NULL, subject_pac;
-
- memset(&reply, 0, sizeof(reply));
- memset(&reply_encpart, 0, sizeof(reply_encpart));
- memset(&ticket_reply, 0, sizeof(ticket_reply));
- memset(&enc_tkt_reply, 0, sizeof(enc_tkt_reply));
- memset(&server_keyblock, 0, sizeof(server_keyblock));
- memset(&local_tgt_key, 0, sizeof(local_tgt_key));
- session_key.contents = NULL;
-
- /* Save pointer to client-requested service principal, in case of
- * errors before a successful call to search_sprinc(). */
- sprinc = request->server;
-
- if (request->msg_type != KRB5_TGS_REQ) {
- krb5_free_kdc_req(kdc_context, request);
- return KRB5_BADMSGTYPE;
- }
-
- errcode = kdc_make_rstate(kdc_active_realm, &state);
- if (errcode != 0)
- goto cleanup;
-
- /* Initialize audit state. */
- errcode = kau_init_kdc_req(kdc_context, request, from, &au_state);
- if (errcode)
- goto cleanup;
-
- /* Seed the audit trail with the request ID and basic information. */
- kau_tgs_req(kdc_context, TRUE, au_state);
-
- errcode = kdc_process_tgs_req(kdc_active_realm,
- request, from, pkt, &header_ticket,
- &header_server, &header_key, &subkey,
- &pa_tgs_req);
- if (header_ticket && header_ticket->enc_part2)
- cprinc = header_ticket->enc_part2->client;
-
- if (errcode) {
- status = "PROCESS_TGS";
- goto cleanup;
- }
-
- if (!header_ticket) {
- errcode = KRB5_NO_TKT_SUPPLIED; /* XXX? */
- goto cleanup;
- }
- errcode = kau_make_tkt_id(kdc_context, header_ticket,
- &au_state->tkt_in_id);
- if (errcode)
- goto cleanup;
-
- scratch.length = pa_tgs_req->length;
- scratch.data = (char *) pa_tgs_req->contents;
- errcode = kdc_find_fast(&request, &scratch, subkey,
- header_ticket->enc_part2->session, state, NULL);
- /* Reset sprinc because kdc_find_fast() can replace request. */
- sprinc = request->server;
- if (errcode !=0) {
- status = "FIND_FAST";
- goto cleanup;
- }
- if (sprinc == NULL) {
- status = "NULL_SERVER";
- errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
- goto cleanup;
- }
-
- errcode = get_local_tgt(kdc_context, &sprinc->realm, header_server,
- &local_tgt, &local_tgt_storage, &local_tgt_key);
- if (errcode) {
- status = "GET_LOCAL_TGT";
- goto cleanup;
- }
-
- errcode = get_verified_pac(kdc_context, header_ticket->enc_part2,
- header_server->princ, header_key, local_tgt,
- &local_tgt_key, &header_pac);
- if (errcode) {
- status = "HEADER_PAC";
- goto cleanup;
- }
-
- /* Ignore (for now) the request modification due to FAST processing. */
- au_state->request = request;
+struct tgs_req_info {
+ /* The decoded request. Ownership is transferred to this structure. This
+ * will be replaced with the inner FAST body if present. */
+ krb5_kdc_req *req;
 
 /*
- * Pointer to the encrypted part of the header ticket, which may be
- * replaced to point to the encrypted part of the evidence ticket
- * if constrained delegation is used. This simplifies the number of
- * special cases for constrained delegation.
+ * The decrypted authentication header ticket from the request's
+ * PA-TGS-REQ, the KDB entry for its server, its encryption key, the
+ * PA-TGS-REQ subkey if present, and the decoded and verified header ticket
+ * PAC if present.
 */
- header_enc_tkt = header_ticket->enc_part2;
+ krb5_ticket *header_tkt;
+ krb5_db_entry *header_server;
+ krb5_keyblock *header_key;
+ krb5_keyblock *subkey;
+ krb5_pac header_pac;
 
 /*
- * We've already dealt with the AP_REQ authentication, so we can
- * use header_ticket freely. The encrypted part (if any) has been
- * decrypted with the session key.
+ * If a second ticket is present and this is a U2U or S4U2Proxy request,
+ * the decoded and verified PAC if present, the KDB entry for the second
+ * ticket server server, and the key used to decrypt the second ticket.
 */
-
- au_state->stage = SRVC_PRINC;
-
- /* XXX make sure server here has the proper realm...taken from AP_REQ
- header? */
-
- if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE))
- setflag(s_flags, KRB5_KDB_FLAG_REFERRAL_OK);
-
- errcode = search_sprinc(kdc_active_realm, request, s_flags, &server,
- &status);
- if (errcode != 0)
- goto cleanup;
- sprinc = server->princ;
-
- /* If we got a cross-realm TGS which is not the requested server, we are
- * issuing a referral (or alternate TGT, which we treat similarly). */
- is_referral = is_cross_tgs_principal(server->princ) &&
- !krb5_principal_compare(kdc_context, request->server, server->princ);
-
- au_state->stage = VALIDATE_POL;
-
- if ((errcode = krb5_timeofday(kdc_context, &kdc_time)))
- goto cleanup;
-
- is_crossrealm = !data_eq(header_server->princ->realm, sprinc->realm);
- if (is_crossrealm)
- setflag(c_flags, KRB5_KDB_FLAG_CROSS_REALM);
- if (is_referral)
- setflag(c_flags, KRB5_KDB_FLAG_ISSUING_REFERRAL);
-
- /* Check for protocol transition */
- errcode = kdc_process_s4u2self_req(kdc_active_realm, request, server,
- subkey, header_enc_tkt->session,
- &s4u_x509_user, &client, &status);
- if (s4u_x509_user != NULL || errcode != 0) {
- if (s4u_x509_user != NULL)
- au_state->s4u2self_user = s4u_x509_user->user_id.user;
- au_state->status = status;
- kau_s4u2self(kdc_context, errcode ? FALSE : TRUE, au_state);
- au_state->s4u2self_user = NULL;
- if (errcode)
- goto cleanup;
- }
- if (s4u_x509_user != NULL)
- setflag(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION);
-
- /* For user-to-user and S4U2Proxy requests, decrypt the second ticket. */
- errcode = decrypt_2ndtkt(kdc_active_realm, request, c_flags, local_tgt,
- &local_tgt_key, &stkt, &stkt_pac, &stkt_server,
- &stkt_server_key, &status);
- if (errcode)
- goto cleanup;
-
- retval = validate_tgs_request(kdc_active_realm, request, server,
- header_ticket, header_pac, stkt, stkt_pac,
- stkt_server, kdc_time, s4u_x509_user,
- client, is_crossrealm, is_referral,
- &status, &e_data);
- if (retval) {
- if (retval == KDC_ERR_POLICY || retval == KDC_ERR_BADOPTION)
- au_state->violation = PROT_CONSTRAINT;
- errcode = retval + ERROR_TABLE_BASE_krb5;
- goto cleanup;
- }
-
- if (isflagset(request->kdc_options, KDC_OPT_CNAME_IN_ADDL_TKT)) {
- /* Do constrained delegation protocol and authorization checks. */
- setflag(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION);
-
- errcode = kdc_process_s4u2proxy_req(kdc_active_realm, c_flags,
- request, header_pac,
- stkt->enc_part2, stkt_pac,
- stkt_server, stkt_server_key,
- header_ticket->enc_part2->client,
- server, &stkt_authdata_client,
- &status);
- if (errcode == KDC_ERR_POLICY || errcode == KDC_ERR_BADOPTION)
- au_state->violation = PROT_CONSTRAINT;
- else if (errcode)
- au_state->violation = LOCAL_POLICY;
- au_state->status = status;
- retval = kau_make_tkt_id(kdc_context, stkt, &au_state->evid_tkt_id);
- if (retval) {
- errcode = retval;
- goto cleanup;
- }
- kau_s4u2proxy(kdc_context, errcode ? FALSE : TRUE, au_state);
- if (errcode)
- goto cleanup;
-
- assert(krb5_is_tgs_principal(header_ticket->server));
- }
-
- au_state->stage = ISSUE_TKT;
-
- errcode = gen_session_key(kdc_active_realm, request, server, &session_key,
- &status);
- if (errcode)
- goto cleanup;
+ krb5_pac stkt_pac;
+ krb5_db_entry *stkt_server;
+ krb5_keyblock *stkt_server_key;
+ /* For cross-realm S4U2Proxy requests, the client principal retrieved from
+ * stkt_pac. */
+ krb5_principal stkt_pac_client;
+
+ /* Storage for the local TGT KDB entry for the service realm if that isn't
+ * the header server. */
+ krb5_db_entry *local_tgt_storage;
+ /* The decrypted first key of the local TGT entry. */
+ krb5_keyblock local_tgt_key;
+
+ /* The server KDB entry. Normally the requested server, but for referral
+ * and alternate TGS replies this will be a cross-realm TGT entry. */
+ krb5_db_entry *server;
 
 /*
- * subject_tkt will refer to the evidence ticket (for constrained
- * delegation) or the TGT. The distinction from header_enc_tkt is
- * necessary because the TGS signature only protects some fields:
- * the others could be forged by a malicious server.
+ * The subject client KDB entry for an S4U2Self request, or the header
+ * ticket client KDB entry for other requests. NULL if
+ * NO_AUTH_DATA_REQUIRED is set on the server KDB entry and this isn't an
+ * S4U2Self request, or if the client is in another realm and the KDB
+ * cannot map its principal name.
 */
+ krb5_db_entry *client;
 
- if (isflagset(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)) {
- subject_tkt = stkt->enc_part2;
- subject_pac = stkt_pac;
- subject_server = stkt_server;
- subject_key = stkt_server_key;
- } else {
- subject_tkt = header_enc_tkt;
- subject_pac = header_pac;
- subject_server = header_server;
- subject_key = header_key;
- }
- authtime = subject_tkt->times.authtime;
-
- /* Extract and check auth indicators from the subject ticket, except for
- * S4U2Self requests (where the client didn't authenticate). */
- if (s4u_x509_user == NULL) {
- errcode = get_auth_indicators(kdc_context, subject_tkt, local_tgt,
- &local_tgt_key, &auth_indicators);
- if (errcode) {
- status = "GET_AUTH_INDICATORS";
- goto cleanup;
- }
+ /* The decoded S4U2Self padata from the request, if present. */
+ krb5_pa_s4u_x509_user *s4u2self;
 
- errcode = check_indicators(kdc_context, server, auth_indicators);
- if (errcode) {
- status = "HIGHER_AUTHENTICATION_REQUIRED";
- goto cleanup;
- }
- }
+ /* Authentication indicators retrieved from the header ticket, for
+ * non-S4U2Self requests. */
+ krb5_data **auth_indicators;
 
- if (is_referral)
- ticket_reply.server = server->princ;
- else
- ticket_reply.server = request->server; /* XXX careful for realm... */
+ /* Storage for a transited list with the header TGT realm added, if that
+ * realm is different from the client and server realm. */
+ krb5_data new_transited;
 
- enc_tkt_reply.flags = get_ticket_flags(request->kdc_options, client,
- server, header_enc_tkt);
- enc_tkt_reply.times.starttime = 0;
+ /* The KDB flags applicable to this request (a subset of {CROSS_REALM,
+ * ISSUING_REFERRAL, PROTOCOL_TRANSITION, CONSTRAINED_DELEGATION}). */
+ unsigned int flags;
 
- if (s4u_x509_user != NULL && !is_referral) {
- /* Check if we need to suppress the forwardable ticket flag. */
- errcode = s4u2self_forwardable(kdc_context, server, &enc_tkt_reply);
- if (errcode)
- goto cleanup;
- }
+ /* Booleans for two of the above flags, for convenience. */
+ krb5_boolean is_referral;
+ krb5_boolean is_crossrealm;
 
- /* don't use new addresses unless forwarded, see below */
+ /* The authtime of subject_tkt. On early failures this may be 0. */
+ krb5_timestamp authtime;
 
- enc_tkt_reply.caddrs = header_enc_tkt->caddrs;
- /* noaddrarray0 = 0; */
- reply_encpart.caddrs = 0;/* optional...don't put it in */
- reply_encpart.enc_padata = NULL;
+ /* The following fields are (or contain) alias pointers and should not be
+ * freed. */
 
- /*
- * It should be noted that local policy may affect the
- * processing of any of these flags. For example, some
- * realms may refuse to issue renewable tickets
- */
+ /* The transited list implied by the request, aliasing new_transited or the
+ * header ticket transited field. */
+ krb5_transited transited;
 
- if (isflagset(request->kdc_options, KDC_OPT_FORWARDED) ||
- isflagset(request->kdc_options, KDC_OPT_PROXY)) {
+ /* Alias to the decrypted second ticket within req, if one applies to this
+ * request. */
+ const krb5_ticket *stkt;
 
- /* include new addresses in ticket & reply */
+ /* Alias to stkt for S4U2Proxy requests, header_tkt otherwise. */
+ krb5_enc_tkt_part *subject_tkt;
 
- enc_tkt_reply.caddrs = request->addresses;
- reply_encpart.caddrs = request->addresses;
- }
+ /* Alias to local_tgt_storage or header_server. */
+ krb5_db_entry *local_tgt;
 
- if (isflagset(request->kdc_options, KDC_OPT_POSTDATED))
- enc_tkt_reply.times.starttime = request->from;
- else
- enc_tkt_reply.times.starttime = kdc_time;
-
- if (isflagset(request->kdc_options, KDC_OPT_VALIDATE)) {
- assert(isflagset(c_flags, KRB5_KDB_FLAGS_S4U) == 0);
- /* BEWARE of allocation hanging off of ticket & enc_part2, it belongs
- to the caller */
- ticket_reply = *(header_ticket);
- enc_tkt_reply = *(header_ticket->enc_part2);
- enc_tkt_reply.authorization_data = NULL;
- clear(enc_tkt_reply.flags, TKT_FLG_INVALID);
- }
-
- if (isflagset(request->kdc_options, KDC_OPT_RENEW)) {
- krb5_timestamp old_starttime;
- krb5_deltat old_life;
-
- assert(isflagset(c_flags, KRB5_KDB_FLAGS_S4U) == 0);
- /* BEWARE of allocation hanging off of ticket & enc_part2, it belongs
- to the caller */
- ticket_reply = *(header_ticket);
- enc_tkt_reply = *(header_ticket->enc_part2);
- enc_tkt_reply.authorization_data = NULL;
-
- old_starttime = enc_tkt_reply.times.starttime ?
- enc_tkt_reply.times.starttime : enc_tkt_reply.times.authtime;
- old_life = ts_delta(enc_tkt_reply.times.endtime, old_starttime);
-
- enc_tkt_reply.times.starttime = kdc_time;
- enc_tkt_reply.times.endtime =
- ts_min(header_ticket->enc_part2->times.renew_till,
- ts_incr(kdc_time, old_life));
- } else {
- /* not a renew request */
- enc_tkt_reply.times.starttime = kdc_time;
-
- kdc_get_ticket_endtime(kdc_active_realm, enc_tkt_reply.times.starttime,
- header_enc_tkt->times.endtime, request->till,
- client, server, &enc_tkt_reply.times.endtime);
- }
-
- kdc_get_ticket_renewtime(kdc_active_realm, request, header_enc_tkt, client,
- server, &enc_tkt_reply);
-
- errcode = check_kdcpolicy_tgs(kdc_context, request, server, header_ticket,
- auth_indicators, kdc_time,
- &enc_tkt_reply.times, &status);
- if (errcode)
- goto cleanup;
-
- /*
- * Set authtime to be the same as header or evidence ticket's
- */
- enc_tkt_reply.times.authtime = authtime;
-
- /* starttime is optional, and treated as authtime if not present.
- so we can nuke it if it matches */
- if (enc_tkt_reply.times.starttime == enc_tkt_reply.times.authtime)
- enc_tkt_reply.times.starttime = 0;
-
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- altcprinc = s4u_x509_user->user_id.user;
- } else if (isflagset(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)) {
- /* kdc_process_s4u2proxy_req() only allows cross-realm requests if
- * stkt_authdata_client is set. */
- altcprinc = is_crossrealm ? stkt_authdata_client : subject_tkt->client;
- } else {
- altcprinc = NULL;
- }
- if (isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY)) {
- encrypting_key = stkt->enc_part2->session;
- } else {
- errcode = get_first_current_key(kdc_context, server, &server_keyblock);
- if (errcode) {
- status = "FINDING_SERVER_KEY";
- goto cleanup;
- }
- encrypting_key = &server_keyblock;
- }
-
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- /*
- * For consistency with Active Directory, don't allow authorization
- * data to be disabled if S4U2Self is requested. The server likely
- * needs a PAC to inspect or for an S4U2Proxy operation, even if it
- * doesn't need authorization data in tickets received from clients.
- */
- clear(server->attributes, KRB5_KDB_NO_AUTH_DATA_REQUIRED);
- }
- if (isflagset(server->attributes, KRB5_KDB_NO_AUTH_DATA_REQUIRED) == 0) {
- /* If we are not doing protocol transition, try to look up the subject
- * principal so that KDB modules can add additional authdata. */
- if (!isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- setflag(c_flags, KRB5_KDB_FLAG_CLIENT);
- /* Map principals from foreign (possibly non-AD) realms */
- setflag(c_flags, KRB5_KDB_FLAG_MAP_PRINCIPALS);
-
- assert(client == NULL); /* should not have been set already */
-
- errcode = krb5_db_get_principal(kdc_context, subject_tkt->client,
- c_flags, &client);
- }
- }
-
- if (isflagset(c_flags, KRB5_KDB_FLAGS_S4U) && !is_referral)
- enc_tkt_reply.client = altcprinc;
- else
- enc_tkt_reply.client = header_enc_tkt->client;
-
- enc_tkt_reply.session = &session_key;
- enc_tkt_reply.transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
- enc_tkt_reply.transited.tr_contents = empty_string; /* equivalent of "" */
-
- /*
- * Only add the realm of the presented tgt to the transited list if
- * it is different than the server realm (cross-realm) and it is different
- * than the realm of the client (since the realm of the client is already
- * implicitly part of the transited list and should not be explicitly
- * listed).
- */
- if (!is_crossrealm ||
- krb5_realm_compare(kdc_context, header_ticket->server,
- enc_tkt_reply.client)) {
- /* tgt issued by local realm or issued by realm of client */
- enc_tkt_reply.transited = header_enc_tkt->transited;
- } else {
- /* tgt issued by some other realm and not the realm of the client */
- /* assemble new transited field into allocated storage */
- if (header_enc_tkt->transited.tr_type !=
- KRB5_DOMAIN_X500_COMPRESS) {
- status = "VALIDATE_TRANSIT_TYPE";
- errcode = KRB5KDC_ERR_TRTYPE_NOSUPP;
- goto cleanup;
- }
- memset(&enc_tkt_reply.transited, 0, sizeof(enc_tkt_reply.transited));
- enc_tkt_reply.transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
- if ((errcode =
- add_to_transited(&header_enc_tkt->transited.tr_contents,
- &enc_tkt_reply.transited.tr_contents,
- header_ticket->server,
- enc_tkt_reply.client,
- request->server))) {
- status = "ADD_TO_TRANSITED_LIST";
- goto cleanup;
- }
- newtransited = 1;
- }
- if (!isflagset (request->kdc_options, KDC_OPT_DISABLE_TRANSITED_CHECK)) {
- errcode = kdc_check_transited_list (kdc_active_realm,
- &enc_tkt_reply.transited.tr_contents,
- krb5_princ_realm (kdc_context, header_enc_tkt->client),
- krb5_princ_realm (kdc_context, request->server));
- if (errcode == 0) {
- setflag (enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED);
- } else {
- log_tgs_badtrans(kdc_context, cprinc, sprinc,
- &enc_tkt_reply.transited.tr_contents, errcode);
- }
- } else
- krb5_klog_syslog(LOG_INFO, _("not checking transit path"));
- if (kdc_active_realm->realm_reject_bad_transit &&
- !isflagset(enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED)) {
- errcode = KRB5KDC_ERR_POLICY;
- status = "BAD_TRANSIT";
- au_state->violation = LOCAL_POLICY;
- goto cleanup;
- }
+ /* For either kind of S4U request, an alias to the requested client
+ * principal name. */
+ krb5_principal s4u_cprinc;
 
- errcode = handle_authdata(kdc_active_realm, c_flags, client, server,
- subject_server, local_tgt, &local_tgt_key,
- subkey != NULL ? subkey :
- header_ticket->enc_part2->session,
- encrypting_key, subject_key, NULL, pkt, request,
- altcprinc, subject_pac, subject_tkt,
- &auth_indicators, &enc_tkt_reply);
- if (errcode) {
- krb5_klog_syslog(LOG_INFO, _("TGS_REQ : handle_authdata (%d)"),
- errcode);
- status = "HANDLE_AUTHDATA";
- goto cleanup;
- }
+ /* An alias to the client principal name we should issue the ticket for
+ * (either header_tkt->enc_part2->client or s4u_cprinc). */
+ krb5_principal tkt_client;
 
- ticket_reply.enc_part2 = &enc_tkt_reply;
+ /* The client principal of the PA-TGS-REQ header ticket. On early failures
+ * this may be NULL. */
+ krb5_principal cprinc;
 
- /* If we are doing user-to-user authentication, encrypt the ticket using
- * the session key of the second ticket. */
- if (isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY)) {
- ticket_kvno = 0;
- ticket_reply.enc_part.enctype = stkt->enc_part2->session->enctype;
- kau_u2u(kdc_context, TRUE, au_state);
- } else {
- ticket_kvno = current_kvno(server);
- }
+ /* The canonicalized request server principal or referral/alternate TGT.
+ * On early failures this may be the requested server instead. */
+ krb5_principal sprinc;
 
- errcode = krb5_encrypt_tkt_part(kdc_context, encrypting_key,
- &ticket_reply);
- if (errcode)
- goto cleanup;
- ticket_reply.enc_part.kvno = ticket_kvno;
- /* Start assembling the response */
- au_state->stage = ENCR_REP;
- reply.msg_type = KRB5_TGS_REP;
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION) &&
- krb5int_find_pa_data(kdc_context, request->padata,
- KRB5_PADATA_S4U_X509_USER) != NULL) {
- errcode = kdc_make_s4u2self_rep(kdc_context,
- subkey,
- header_ticket->enc_part2->session,
- s4u_x509_user,
- &reply,
- &reply_encpart);
- if (errcode)
- au_state->status = status;
- kau_s4u2self(kdc_context, errcode ? FALSE : TRUE, au_state);
- if (errcode)
- goto cleanup;
- }
-
- reply.client = enc_tkt_reply.client;
- reply.enc_part.kvno = 0;/* We are using the session key */
- reply.ticket = &ticket_reply;
-
- reply_encpart.session = &session_key;
- reply_encpart.nonce = request->nonce;
-
- /* copy the time fields */
- reply_encpart.times = enc_tkt_reply.times;
-
- nolrentry.lr_type = KRB5_LRQ_NONE;
- nolrentry.value = 0;
- nolrentry.magic = 0;
- nolrarray0 = &nolrentry;
- nolrarray1 = 0;
- reply_encpart.last_req = nolrarray; /* not available for TGS reqs */
- reply_encpart.key_exp = 0;/* ditto */
- reply_encpart.flags = enc_tkt_reply.flags;
- reply_encpart.server = ticket_reply.server;
+};
 
- /* use the session key in the ticket, unless there's a subsession key
- in the AP_REQ */
- reply.enc_part.enctype = subkey ? subkey->enctype :
- header_ticket->enc_part2->session->enctype;
- errcode = kdc_fast_response_handle_padata(state, request, &reply,
- subkey ? subkey->enctype : header_ticket->enc_part2->session->enctype);
- if (errcode)
- goto cleanup;
- errcode =kdc_fast_handle_reply_key(state,
- subkey?subkey:header_ticket->enc_part2->session, &reply_key);
- if (errcode)
- goto cleanup;
- errcode = return_enc_padata(kdc_context, pkt, request,
- reply_key, server, &reply_encpart,
- is_referral &&
- isflagset(s_flags, KRB5_KDB_FLAG_REFERRAL_OK));
- if (errcode) {
- status = "KDC_RETURN_ENC_PADATA";
- goto cleanup;
- }
-
- errcode = kau_make_tkt_id(kdc_context, &ticket_reply, &au_state->tkt_out_id);
- if (errcode)
- goto cleanup;
-
- if (kdc_fast_hide_client(state))
- reply.client = (krb5_principal)krb5_anonymous_principal();
- errcode = krb5_encode_kdc_rep(kdc_context, KRB5_TGS_REP, &reply_encpart,
- subkey ? 1 : 0,
- reply_key,
- &reply, response);
- if (!errcode)
- status = "ISSUE";
-
- memset(ticket_reply.enc_part.ciphertext.data, 0,
- ticket_reply.enc_part.ciphertext.length);
- free(ticket_reply.enc_part.ciphertext.data);
- /* these parts are left on as a courtesy from krb5_encode_kdc_rep so we
- can use them in raw form if needed. But, we don't... */
- memset(reply.enc_part.ciphertext.data, 0,
- reply.enc_part.ciphertext.length);
- free(reply.enc_part.ciphertext.data);
-
-cleanup:
- if (status == NULL)
- status = "UNKNOWN_REASON";
- krb5_free_keyblock_contents(kdc_context, &server_keyblock);
- if (reply_key)
- krb5_free_keyblock(kdc_context, reply_key);
- if (stkt_server_key)
- krb5_free_keyblock(kdc_context, stkt_server_key);
- if (errcode)
- emsg = krb5_get_error_message (kdc_context, errcode);
-
- if (au_state != NULL) {
- au_state->status = status;
- if (!errcode)
- au_state->reply = &reply;
- kau_tgs_req(kdc_context, errcode ? FALSE : TRUE, au_state);
- kau_free_kdc_req(au_state);
- }
-
- log_tgs_req(kdc_context, from, request, &reply, cprinc,
- sprinc, altcprinc, authtime,
- c_flags, status, errcode, emsg);
- if (errcode) {
- krb5_free_error_message (kdc_context, emsg);
- emsg = NULL;
- }
-
- if (errcode && state != NULL) {
- int got_err = 0;
- if (status == 0) {
- status = krb5_get_error_message (kdc_context, errcode);
- got_err = 1;
- }
- errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > KRB_ERR_MAX)
- errcode = KRB_ERR_GENERIC;
-
- retval = prepare_error_tgs(state, request, header_ticket, errcode,
- (server != NULL) ? server->princ : NULL,
- response, status, e_data);
- if (got_err) {
- krb5_free_error_message (kdc_context, status);
- status = 0;
- }
- }
-
- if (header_ticket != NULL)
- krb5_free_ticket(kdc_context, header_ticket);
- if (request != NULL)
- krb5_free_kdc_req(kdc_context, request);
- if (state)
- kdc_free_rstate(state);
- krb5_db_free_principal(kdc_context, server);
- krb5_db_free_principal(kdc_context, stkt_server);
- krb5_db_free_principal(kdc_context, header_server);
- krb5_db_free_principal(kdc_context, client);
- krb5_db_free_principal(kdc_context, local_tgt_storage);
- if (local_tgt_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &local_tgt_key);
- if (session_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &session_key);
- if (newtransited)
- free(enc_tkt_reply.transited.tr_contents.data);
- if (s4u_x509_user != NULL)
- krb5_free_pa_s4u_x509_user(kdc_context, s4u_x509_user);
- if (kdc_issued_auth_data != NULL)
- krb5_free_authdata(kdc_context, kdc_issued_auth_data);
- if (subkey != NULL)
- krb5_free_keyblock(kdc_context, subkey);
- if (header_key != NULL)
- krb5_free_keyblock(kdc_context, header_key);
- if (reply.padata)
- krb5_free_pa_data(kdc_context, reply.padata);
- if (reply_encpart.enc_padata)
- krb5_free_pa_data(kdc_context, reply_encpart.enc_padata);
- if (enc_tkt_reply.authorization_data != NULL)
- krb5_free_authdata(kdc_context, enc_tkt_reply.authorization_data);
- krb5_free_pa_data(kdc_context, e_data);
- k5_free_data_ptr_list(auth_indicators);
- krb5_pac_free(kdc_context, header_pac);
- krb5_pac_free(kdc_context, stkt_pac);
- krb5_free_principal(kdc_context, stkt_authdata_client);
-
- return retval;
-}
+static krb5_error_code
+db_get_svc_princ(krb5_context, krb5_principal, krb5_flags,
+ krb5_db_entry **, const char **);
 
 static krb5_error_code
-prepare_error_tgs (struct kdc_request_state *state,
- krb5_kdc_req *request, krb5_ticket *ticket, int error,
- krb5_principal canon_server,
- krb5_data **response, const char *status,
- krb5_pa_data **e_data)
+prepare_error_tgs(struct kdc_request_state *state, krb5_kdc_req *request,
+ krb5_ticket *ticket, krb5_error_code code,
+ krb5_principal canon_server, krb5_data **response,
+ const char *status, krb5_pa_data **e_data)
 {
+ krb5_context context = state->realm_data->realm_context;
 krb5_error errpkt;
 krb5_error_code retval = 0;
 krb5_data *scratch, *e_data_asn1 = NULL, *fast_edata = NULL;
- kdc_realm_t *kdc_active_realm = state->realm_data;
 
 errpkt.magic = KV5M_ERROR;
 errpkt.ctime = 0;
 errpkt.cusec = 0;
 
- if ((retval = krb5_us_timeofday(kdc_context, &errpkt.stime,
- &errpkt.susec)))
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
+ if (retval)
 return(retval);
- errpkt.error = error;
+ errpkt.error = errcode_to_protocol(code);
 errpkt.server = request->server;
 if (ticket && ticket->enc_part2)
 errpkt.client = ticket->enc_part2->client;
@@ -831,22 +222,22 @@
 } else
 errpkt.e_data = empty_data();
 
- retval = kdc_fast_handle_error(kdc_context, state, request, e_data,
+ retval = kdc_fast_handle_error(context, state, request, e_data,
 &errpkt, &fast_edata);
 if (retval) {
 free(scratch);
 free(errpkt.text.data);
- krb5_free_data(kdc_context, e_data_asn1);
+ krb5_free_data(context, e_data_asn1);
 return retval;
 }
 if (fast_edata)
 errpkt.e_data = *fast_edata;
 if (kdc_fast_hide_client(state) && errpkt.client != NULL)
 errpkt.client = (krb5_principal)krb5_anonymous_principal();
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
 free(errpkt.text.data);
- krb5_free_data(kdc_context, e_data_asn1);
- krb5_free_data(kdc_context, fast_edata);
+ krb5_free_data(context, e_data_asn1);
+ krb5_free_data(context, fast_edata);
 if (retval)
 free(scratch);
 else
@@ -864,11 +255,11 @@
 * key.
 */
 static krb5_error_code
-decrypt_2ndtkt(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_flags flags, krb5_db_entry *local_tgt,
- krb5_keyblock *local_tgt_key, const krb5_ticket **stkt_out,
- krb5_pac *pac_out, krb5_db_entry **server_out,
- krb5_keyblock **key_out, const char **status)
+decrypt_2ndtkt(krb5_context context, krb5_kdc_req *req, krb5_flags flags,
+ krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+ const krb5_ticket **stkt_out, krb5_pac *pac_out,
+ krb5_db_entry **server_out, krb5_keyblock **key_out,
+ const char **status)
 {
 krb5_error_code retval;
 krb5_db_entry *server = NULL;
@@ -886,19 +277,19 @@
 return 0;
 
 stkt = req->second_ticket0;
- retval = kdc_get_server_key(kdc_context, stkt, flags, TRUE,
- &server, &key, &kvno);
+ retval = kdc_get_server_key(context, stkt, flags, TRUE, &server, &key,
+ &kvno);
 if (retval != 0) {
 *status = "2ND_TKT_SERVER";
 goto cleanup;
 }
- retval = krb5_decrypt_tkt_part(kdc_context, key, stkt);
+ retval = krb5_decrypt_tkt_part(context, key, stkt);
 if (retval != 0) {
 *status = "2ND_TKT_DECRYPT";
 goto cleanup;
 }
- retval = get_verified_pac(kdc_context, stkt->enc_part2, server->princ,
- key, local_tgt, local_tgt_key, pac_out);
+ retval = get_verified_pac(context, stkt->enc_part2, server, key, local_tgt,
+ local_tgt_key, pac_out);
 if (retval != 0) {
 *status = "2ND_TKT_PAC";
 goto cleanup;
@@ -910,14 +301,14 @@
 key = NULL;
 
 cleanup:
- krb5_db_free_principal(kdc_context, server);
- krb5_free_keyblock(kdc_context, key);
+ krb5_db_free_principal(context, server);
+ krb5_free_keyblock(context, key);
 return retval;
 }
 
 static krb5_error_code
-get_2ndtkt_enctype(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_enctype *useenctype, const char **status)
+get_2ndtkt_enctype(krb5_kdc_req *req, krb5_enctype *useenctype,
+ const char **status)
 {
 krb5_enctype etype;
 krb5_ticket *stkt = req->second_ticket0;
@@ -938,9 +329,8 @@
 }
 
 static krb5_error_code
-gen_session_key(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_db_entry *server, krb5_keyblock *skey,
- const char **status)
+gen_session_key(krb5_context context, krb5_kdc_req *req, krb5_db_entry *server,
+ krb5_keyblock *skey, const char **status)
 {
 krb5_error_code retval;
 krb5_enctype useenctype = 0;
@@ -955,15 +345,13 @@
 * to anything else.
 */
 if (req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
- retval = get_2ndtkt_enctype(kdc_active_realm, req, &useenctype,
- status);
+ retval = get_2ndtkt_enctype(req, &useenctype, status);
 if (retval != 0)
 return retval;
 }
 if (useenctype == 0) {
- useenctype = select_session_keytype(kdc_active_realm, server,
- req->nktypes,
- req->ktype);
+ useenctype = select_session_keytype(context, server,
+ req->nktypes, req->ktype);
 }
 if (useenctype == 0) {
 /* unsupported ktype */
@@ -971,7 +359,7 @@
 return KRB5KDC_ERR_ETYPE_NOSUPP;
 }
 
- return krb5_c_make_random_key(kdc_context, useenctype, skey);
+ return krb5_c_make_random_key(context, useenctype, skey);
 }
 
 /*
@@ -980,7 +368,7 @@
 * some intermediate realm.
 */
 static krb5_error_code
-find_alternate_tgs(kdc_realm_t *kdc_active_realm, krb5_principal princ,
+find_alternate_tgs(krb5_context context, krb5_principal princ,
 krb5_db_entry **server_ptr, const char **status)
 {
 krb5_error_code retval;
@@ -990,29 +378,26 @@
 
 *server_ptr = NULL;
 assert(is_cross_tgs_principal(princ));
- if ((retval = krb5_walk_realm_tree(kdc_context,
- krb5_princ_realm(kdc_context, princ),
- krb5_princ_component(kdc_context, princ, 1),
- &plist, KRB5_REALM_BRANCH_CHAR))) {
+ retval = krb5_walk_realm_tree(context, &princ->realm, &princ->data1,
+ &plist, KRB5_REALM_BRANCH_CHAR);
+ if (retval)
 goto cleanup;
- }
 /* move to the end */
 for (pl2 = plist; *pl2; pl2++);
 
 /* the first entry in this array is for krbtgt/local@local, so we
 ignore it */
 while (--pl2 > plist) {
- tmp = *krb5_princ_realm(kdc_context, *pl2);
- krb5_princ_set_realm(kdc_context, *pl2,
- krb5_princ_realm(kdc_context, princ));
- retval = db_get_svc_princ(kdc_context, *pl2, 0, &server, status);
- krb5_princ_set_realm(kdc_context, *pl2, &tmp);
+ tmp = *krb5_princ_realm(context, *pl2);
+ krb5_princ_set_realm(context, *pl2, &princ->realm);
+ retval = db_get_svc_princ(context, *pl2, 0, &server, status);
+ krb5_princ_set_realm(context, *pl2, &tmp);
 if (retval == KRB5_KDB_NOENTRY)
 continue;
 else if (retval)
 goto cleanup;
 
- log_tgs_alt_tgt(kdc_context, server->princ);
+ log_tgs_alt_tgt(context, server->princ);
 *server_ptr = server;
 server = NULL;
 goto cleanup;
@@ -1023,8 +408,8 @@
 if (retval != 0)
 *status = "UNKNOWN_SERVER";
 
- krb5_free_realm_tree(kdc_context, plist);
- krb5_db_free_principal(kdc_context, server);
+ krb5_free_realm_tree(context, plist);
+ krb5_db_free_principal(context, server);
 return retval;
 }
 
@@ -1051,12 +436,12 @@
 * TGT. The caller checks whether the hostname component looks like a FQDN.
 */
 static krb5_boolean
-is_referral_req(kdc_realm_t *kdc_active_realm, krb5_kdc_req *request)
+is_referral_req(kdc_realm_t *realm, krb5_kdc_req *request)
 {
 krb5_boolean ret = FALSE;
 char *stype = NULL;
- char *hostbased = kdc_active_realm->realm_hostbased;
- char *no_referral = kdc_active_realm->realm_no_referral;
+ char *hostbased = realm->realm_hostbased;
+ char *no_referral = realm->realm_no_referral;
 
 if (!(request->kdc_options & KDC_OPT_CANONICALIZE))
 return FALSE;
@@ -1064,13 +449,13 @@
 if (request->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY)
 return FALSE;
 
- if (krb5_princ_size(kdc_context, request->server) != 2)
+ if (request->server->length != 2)
 return FALSE;
 
- stype = data2string(krb5_princ_component(kdc_context, request->server, 0));
+ stype = data2string(&request->server->data0);
 if (stype == NULL)
 return FALSE;
- switch (krb5_princ_type(kdc_context, request->server)) {
+ switch (request->server->type) {
 case KRB5_NT_UNKNOWN:
 /* Allow referrals for NT-UNKNOWN principals, if configured. */
 if (!in_list(hostbased, stype) && !in_list(hostbased, "*"))
@@ -1096,18 +481,18 @@
 * principal.
 */
 static krb5_int32
-find_referral_tgs(kdc_realm_t *kdc_active_realm, krb5_kdc_req *request,
+find_referral_tgs(kdc_realm_t *realm, krb5_kdc_req *request,
 krb5_principal *krbtgt_princ)
 {
+ krb5_context context = realm->realm_context;
 krb5_error_code retval = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
 char **realms = NULL, *hostname = NULL;
 krb5_data srealm = request->server->realm;
 
- if (!is_referral_req(kdc_active_realm, request))
+ if (!is_referral_req(realm, request))
 goto cleanup;
 
- hostname = data2string(krb5_princ_component(kdc_context,
- request->server, 1));
+ hostname = data2string(&request->server->data1);
 if (hostname == NULL) {
 retval = ENOMEM;
 goto cleanup;
@@ -1115,10 +500,10 @@
 /* If the hostname doesn't contain a '.', it's not a FQDN. */
 if (strchr(hostname, '.') == NULL)
 goto cleanup;
- retval = krb5_get_host_realm(kdc_context, hostname, &realms);
+ retval = krb5_get_host_realm(context, hostname, &realms);
 if (retval) {
 /* no match found */
- kdc_err(kdc_context, retval, "unable to find realm of host");
+ kdc_err(context, retval, "unable to find realm of host");
 goto cleanup;
 }
 /* Don't return a referral to the empty realm or the service realm. */
@@ -1127,11 +512,11 @@
 retval = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
 goto cleanup;
 }
- retval = krb5_build_principal(kdc_context, krbtgt_princ,
+ retval = krb5_build_principal(context, krbtgt_princ,
 srealm.length, srealm.data,
 "krbtgt", realms0, (char *)0);
 cleanup:
- krb5_free_host_realm(kdc_context, realms);
+ krb5_free_host_realm(context, realms);
 free(hostname);
 
 return retval;
@@ -1154,9 +539,10 @@
 }
 
 static krb5_error_code
-search_sprinc(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+search_sprinc(kdc_realm_t *realm, krb5_kdc_req *req,
 krb5_flags flags, krb5_db_entry **server, const char **status)
 {
+ krb5_context context = realm->realm_context;
 krb5_error_code ret;
 krb5_principal princ = req->server;
 krb5_principal reftgs = NULL;
@@ -1168,21 +554,21 @@
 if (!allow_referral)
 flags &= ~KRB5_KDB_FLAG_REFERRAL_OK;
 
- ret = db_get_svc_princ(kdc_context, princ, flags, server, status);
+ ret = db_get_svc_princ(context, princ, flags, server, status);
 if (ret == 0 || ret != KRB5_KDB_NOENTRY || !allow_referral)
 goto cleanup;
 
 if (!is_cross_tgs_principal(req->server)) {
- ret = find_referral_tgs(kdc_active_realm, req, &reftgs);
+ ret = find_referral_tgs(realm, req, &reftgs);
 if (ret != 0)
 goto cleanup;
- ret = db_get_svc_princ(kdc_context, reftgs, flags, server, status);
+ ret = db_get_svc_princ(context, reftgs, flags, server, status);
 if (ret == 0 || ret != KRB5_KDB_NOENTRY)
 goto cleanup;
 
 princ = reftgs;
 }
- ret = find_alternate_tgs(kdc_active_realm, princ, server, status);
+ ret = find_alternate_tgs(context, princ, server, status);
 
 cleanup:
 if (ret != 0 && ret != KRB5KDC_ERR_SVC_UNAVAILABLE) {
@@ -1190,6 +576,653 @@
 if (*status == NULL)
 *status = "LOOKING_UP_SERVER";
 }
- krb5_free_principal(kdc_context, reftgs);
+ krb5_free_principal(context, reftgs);
+ return ret;
+}
+
+/*
+ * Transfer ownership of *reqptr to *t and fill *t with information about the
+ * request. Decode the PA-TGS-REQ header ticket and the second ticket if
+ * applicable, and decode and verify their PACs if present. Decode and verify
+ * the S4U2Self request pa-data if present. Extract authentication indicators
+ * from the subject ticket. Construct the transited list implied by the
+ * request.
+ */
+static krb5_error_code
+gather_tgs_req_info(kdc_realm_t *realm, krb5_kdc_req **reqptr, krb5_data *pkt,
+ const krb5_fulladdr *from,
+ struct kdc_request_state *fast_state,
+ krb5_audit_state *au_state, struct tgs_req_info *t,
+ const char **status)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_pa_data *pa_tgs_req;
+ unsigned int s_flags;
+ krb5_enc_tkt_part *header_enc;
+ krb5_data d;
+
+ /* Transfer ownership of *reqptr to *t. */
+ t->req = *reqptr;
+ *reqptr = NULL;
+
+ if (t->req->msg_type != KRB5_TGS_REQ)
+ return KRB5_BADMSGTYPE;
+
+ /* Initially set t->sprinc to the outer request server, for logging of
+ * early failures. */
+ t->sprinc = t->req->server;
+
+ /* Read the PA-TGS-REQ authenticator and decrypt the header ticket. */
+ ret = kdc_process_tgs_req(realm, t->req, from, pkt, &t->header_tkt,
+ &t->header_server, &t->header_key, &t->subkey,
+ &pa_tgs_req);
+ if (t->header_tkt != NULL && t->header_tkt->enc_part2 != NULL)
+ t->cprinc = t->header_tkt->enc_part2->client;
+ if (ret) {
+ *status = "PROCESS_TGS";
+ return ret;
+ }
+ ret = kau_make_tkt_id(context, t->header_tkt, &au_state->tkt_in_id);
+ if (ret)
+ return ret;
+ header_enc = t->header_tkt->enc_part2;
+
+ /* If PA-FX-FAST-REQUEST padata is present, replace t->req with the inner
+ * request body. */
+ d = make_data(pa_tgs_req->contents, pa_tgs_req->length);
+ ret = kdc_find_fast(&t->req, &d, t->subkey, header_enc->session,
+ fast_state, NULL);
+ if (ret) {
+ *status = "FIND_FAST";
+ return ret;
+ }
+ /* Reset t->sprinc for the inner body and check it. */
+ t->sprinc = t->req->server;
+ if (t->sprinc == NULL) {
+ *status = "NULL_SERVER";
+ return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
+ }
+
+ /* The header ticket server is usually a TGT, but if it is not, fetch the
+ * local TGT for the realm. Get the decrypted first local TGT key. */
+ ret = get_local_tgt(context, &t->sprinc->realm, t->header_server,
+ &t->local_tgt, &t->local_tgt_storage,
+ &t->local_tgt_key);
+ if (ret) {
+ *status = "GET_LOCAL_TGT";
+ return ret;
+ }
+
+ /* Decode and verify the header ticket PAC. */
+ ret = get_verified_pac(context, header_enc, t->header_server,
+ t->header_key, t->local_tgt, &t->local_tgt_key,
+ &t->header_pac);
+ if (ret) {
+ *status = "HEADER_PAC";
+ return ret;
+ }
+
+ au_state->request = t->req;
+ au_state->stage = SRVC_PRINC;
+
+ /* Look up the server principal entry, or a referral/alternate TGT. Reset
+ * t->sprinc to the canonical server name (its final value). */
+ s_flags = (t->req->kdc_options & KDC_OPT_CANONICALIZE) ?
+ KRB5_KDB_FLAG_REFERRAL_OK : 0;
+ ret = search_sprinc(realm, t->req, s_flags, &t->server, status);
+ if (ret)
+ return ret;
+ t->sprinc = t->server->princ;
+
+ /* If we got a cross-realm TGS which is not the requested server, we are
+ * issuing a referral (or alternate TGT, which we treat similarly). */
+ if (is_cross_tgs_principal(t->server->princ) &&
+ !krb5_principal_compare(context, t->req->server, t->server->princ))
+ t->flags |= KRB5_KDB_FLAG_ISSUING_REFERRAL;
+
+ /* Mark the request as cross-realm if the header ticket server is not from
+ * this realm. */
+ if (!data_eq(t->header_server->princ->realm, t->sprinc->realm))
+ t->flags |= KRB5_KDB_FLAG_CROSS_REALM;
+
+ t->is_referral = (t->flags & KRB5_KDB_FLAG_ISSUING_REFERRAL);
+ t->is_crossrealm = (t->flags & KRB5_KDB_FLAG_CROSS_REALM);
+
+ /* If S4U2Self padata is present, read it to get the requested principal
+ * name. Look up the requested client if it is in this realm. */
+ ret = kdc_process_s4u2self_req(context, t->req, t->server, t->subkey,
+ header_enc->session, &t->s4u2self,
+ &t->client, status);
+ if (t->s4u2self != NULL || ret) {
+ if (t->s4u2self != NULL)
+ au_state->s4u2self_user = t->s4u2self->user_id.user;
+ au_state->status = *status;
+ kau_s4u2self(context, !ret, au_state);
+ au_state->s4u2self_user = NULL;
+ }
+ if (ret)
+ return ret;
+ if (t->s4u2self != NULL) {
+ t->flags |= KRB5_KDB_FLAG_PROTOCOL_TRANSITION;
+ t->s4u_cprinc = t->s4u2self->user_id.user;
+
+ /*
+ * For consistency with Active Directory, don't allow authorization
+ * data to be disabled if S4U2Self is requested. The requesting
+ * service likely needs a PAC for an S4U2Proxy operation, even if it
+ * doesn't need authorization data in tickets received from clients.
+ */
+ t->server->attributes &= ~KRB5_KDB_NO_AUTH_DATA_REQUIRED;
+ }
+
+ /* For U2U or S4U2Proxy requests, decrypt the second ticket and read its
+ * PAC. */
+ ret = decrypt_2ndtkt(context, t->req, t->flags, t->local_tgt,
+ &t->local_tgt_key, &t->stkt, &t->stkt_pac,
+ &t->stkt_server, &t->stkt_server_key, status);
+ if (ret)
+ return ret;
+
+ /* Determine the subject ticket and set the authtime for logging. For
+ * S4U2Proxy requests determine the requested client principal. */
+ if (t->req->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
+ t->flags |= KRB5_KDB_FLAG_CONSTRAINED_DELEGATION;
+ ret = kau_make_tkt_id(context, t->stkt, &au_state->evid_tkt_id);
+ if (ret)
+ return ret;
+ if (t->is_crossrealm) {
+ /* For cross-realm S4U2PROXY requests, the second ticket is a
+ * cross TGT with the requested client principal in its PAC. */
+ if (t->stkt_pac == NULL ||
+ get_pac_princ_with_realm(context, t->stkt_pac,
+ &t->stkt_pac_client, NULL) != 0) {
+ au_state->status = *status = "RBCD_PAC_PRINC";
+ au_state->violation = PROT_CONSTRAINT;
+ kau_s4u2proxy(context, FALSE, au_state);
+ return KRB5KDC_ERR_BADOPTION;
+ }
+ t->s4u_cprinc = t->stkt_pac_client;
+ } else {
+ /* Otherwise the requested client is the evidence ticket client. */
+ t->s4u_cprinc = t->stkt->enc_part2->client;
+ }
+ t->subject_tkt = t->stkt->enc_part2;
+ } else {
+ t->subject_tkt = header_enc;
+ }
+ t->authtime = t->subject_tkt->times.authtime;
+
+ /* For final S4U requests (either type) the issued ticket will be for the
+ * requested name; otherwise it will be for the header ticket client. */
+ t->tkt_client = ((t->flags & KRB5_KDB_FLAGS_S4U) && !t->is_referral) ?
+ t->s4u_cprinc : header_enc->client;
+
+ if (t->s4u2self == NULL) {
+ /* Extract auth indicators from the subject ticket. Skip this for
+ * S4U2Self requests as the subject didn't authenticate. */
+ ret = get_auth_indicators(context, t->subject_tkt, t->local_tgt,
+ &t->local_tgt_key, &t->auth_indicators);
+ if (ret) {
+ *status = "GET_AUTH_INDICATORS";
+ return ret;
+ }
+
+ if (!(t->server->attributes & KRB5_KDB_NO_AUTH_DATA_REQUIRED)) {
+ /* Try to look up the subject principal so that KDB modules can add
+ * additional authdata. Ask the KDB to map foreign principals. */
+ assert(t->client == NULL);
+ (void)krb5_db_get_principal(context, t->subject_tkt->client,
+ t->flags | KRB5_KDB_FLAG_CLIENT |
+ KRB5_KDB_FLAG_MAP_PRINCIPALS,
+ &t->client);
+ }
+ }
+
+ /*
+ * Compute the transited list implied by the request. Use the existing
+ * transited list if the realm of the header ticket server is the same as
+ * the subject or server realm.
+ */
+ if (!t->is_crossrealm ||
+ data_eq(t->header_tkt->server->realm, t->tkt_client->realm)) {
+ t->transited = header_enc->transited;
+ } else {
+ if (header_enc->transited.tr_type != KRB5_DOMAIN_X500_COMPRESS) {
+ *status = "VALIDATE_TRANSIT_TYPE";
+ return KRB5KDC_ERR_TRTYPE_NOSUPP;
+ }
+ ret = add_to_transited(&header_enc->transited.tr_contents,
+ &t->new_transited, t->header_tkt->server,
+ t->tkt_client, t->req->server);
+ if (ret) {
+ *status = "ADD_TO_TRANSITED_LIST";
+ return ret;
+ }
+ t->transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
+ t->transited.tr_contents = t->new_transited;
+ }
+
+ return 0;
+}
+
+/* Fill in *times_out with the times of the ticket to be issued. Set the
+ * TKT_FLG_RENEWABLE bit in *tktflags if the ticket will be renewable. */
+static void
+compute_ticket_times(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_timestamp kdc_time, krb5_flags *tktflags,
+ krb5_ticket_times *times)
+{
+ krb5_timestamp hstarttime;
+ krb5_deltat hlife;
+ krb5_ticket_times *htimes = &t->header_tkt->enc_part2->times;
+
+ if (t->req->kdc_options & KDC_OPT_VALIDATE) {
+ /* Validation requests preserve the header ticket times. */
+ *times = *htimes;
+ return;
+ }
+
+ /* Preserve the authtime from the subject ticket. */
+ times->authtime = t->authtime;
+
+ times->starttime = (t->req->kdc_options & KDC_OPT_POSTDATED) ?
+ t->req->from : kdc_time;
+
+ if (t->req->kdc_options & KDC_OPT_RENEW) {
+ /* Give the new ticket the same lifetime as the header ticket, but no
+ * later than the renewable end time. */
+ hstarttime = htimes->starttime ? htimes->starttime : htimes->authtime;
+ hlife = ts_delta(htimes->endtime, hstarttime);
+ times->endtime = ts_min(htimes->renew_till,
+ ts_incr(times->starttime, hlife));
+ } else {
+ kdc_get_ticket_endtime(realm, times->starttime, htimes->endtime,
+ t->req->till, t->client, t->server,
+ &times->endtime);
+ }
+
+ kdc_get_ticket_renewtime(realm, t->req, t->header_tkt->enc_part2,
+ t->client, t->server, tktflags, times);
+
+ /* starttime is optional, and treated as authtime if not present.
+ * so we can omit it if it matches. */
+ if (times->starttime == times->authtime)
+ times->starttime = 0;
+}
+
+/* Check the request in *t against semantic protocol constraints and local
+ * policy. Determine flags and times for the ticket to be issued. */
+static krb5_error_code
+check_tgs_req(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_audit_state *au_state, krb5_flags *tktflags,
+ krb5_ticket_times *times, const char **status,
+ krb5_pa_data ***e_data)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_timestamp kdc_time;
+
+ au_state->stage = VALIDATE_POL;
+
+ ret = krb5_timeofday(context, &kdc_time);
+ if (ret)
+ return ret;
+
+ ret = check_tgs_constraints(realm, t->req, t->server, t->header_tkt,
+ t->header_pac, t->stkt, t->stkt_pac,
+ t->stkt_server, kdc_time, t->s4u2self,
+ t->client, t->is_crossrealm, t->is_referral,
+ status, e_data);
+ if (ret) {
+ au_state->violation = PROT_CONSTRAINT;
+ return ret;
+ }
+
+ ret = check_tgs_policy(realm, t->req, t->server, t->header_tkt,
+ t->header_pac, t->stkt, t->stkt_pac,
+ t->stkt_pac_client, t->stkt_server, kdc_time,
+ t->is_crossrealm, t->is_referral, status, e_data);
+ if (ret) {
+ au_state->violation = LOCAL_POLICY;
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION) {
+ au_state->status = *status;
+ kau_s4u2proxy(context, FALSE, au_state);
+ }
+ return ret;
+ }
+
+ /* Check auth indicators from the subject ticket, except for S4U2Self
+ * requests (where the client didn't authenticate). */
+ if (t->s4u2self == NULL) {
+ ret = check_indicators(context, t->server, t->auth_indicators);
+ if (ret) {
+ *status = "HIGHER_AUTHENTICATION_REQUIRED";
+ return ret;
+ }
+ }
+
+ *tktflags = get_ticket_flags(t->req->kdc_options, t->client, t->server,
+ t->header_tkt->enc_part2);
+ compute_ticket_times(realm, t, kdc_time, tktflags, times);
+
+ /* For S4U2Self requests, check if we need to suppress the forwardable
+ * ticket flag. */
+ if (t->s4u2self != NULL && !t->is_referral) {
+ ret = s4u2self_forwardable(context, t->server, tktflags);
+ if (ret)
+ return ret;
+ }
+
+ /* Consult kdcpolicy modules, giving them a chance to modify the times of
+ * the issued ticket. */
+ ret = check_kdcpolicy_tgs(context, t->req, t->server, t->header_tkt,
+ t->auth_indicators, kdc_time, times, status);
+ if (ret)
+ return ret;
+
+ if (!(t->req->kdc_options & KDC_OPT_DISABLE_TRANSITED_CHECK)) {
+ /* Check the transited path for the issued ticket and set the
+ * transited-policy-checked flag if successful. */
+ ret = kdc_check_transited_list(context, &t->transited.tr_contents,
+ &t->subject_tkt->client->realm,
+ &t->req->server->realm);
+ if (ret) {
+ /* Log the transited-check failure and continue. */
+ log_tgs_badtrans(context, t->cprinc, t->sprinc,
+ &t->transited.tr_contents, ret);
+ } else {
+ *tktflags |= TKT_FLG_TRANSIT_POLICY_CHECKED;
+ }
+ } else {
+ krb5_klog_syslog(LOG_INFO, _("not checking transit path"));
+ }
+
+ /* By default, reject the request if the transited path was not checked
+ * successfully. */
+ if (realm->realm_reject_bad_transit &&
+ !(*tktflags & TKT_FLG_TRANSIT_POLICY_CHECKED)) {
+ *status = "BAD_TRANSIT";
+ au_state->violation = LOCAL_POLICY;
+ return KRB5KDC_ERR_POLICY;
+ }
+
+ return 0;
+}
+
+/* Construct a response issuing a ticket for the request in *t, using tktflags
+ * and *times for the ticket flags and times. */
+static krb5_error_code
+tgs_issue_ticket(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_flags tktflags, krb5_ticket_times *times, krb5_data *pkt,
+ const krb5_fulladdr *from,
+ struct kdc_request_state *fast_state,
+ krb5_audit_state *au_state, const char **status,
+ krb5_data **response)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_keyblock session_key = { 0 }, server_key = { 0 };
+ krb5_keyblock *ticket_encrypting_key, *subject_key;
+ krb5_keyblock *initial_reply_key, *fast_reply_key = NULL;
+ krb5_enc_tkt_part enc_tkt_reply = { 0 };
+ krb5_ticket ticket_reply = { 0 };
+ krb5_enc_kdc_rep_part reply_encpart = { 0 };
+ krb5_kdc_rep reply = { 0 };
+ krb5_pac subject_pac;
+ krb5_db_entry *subject_server;
+ krb5_enc_tkt_part *header_enc_tkt = t->header_tkt->enc_part2;
+ krb5_last_req_entry nolrentry = { KV5M_LAST_REQ_ENTRY, KRB5_LRQ_NONE, 0 };
+ krb5_last_req_entry *nolrarray2 = { &nolrentry, NULL };
+
+ au_state->stage = ISSUE_TKT;
+
+ ret = gen_session_key(context, t->req, t->server, &session_key, status);
+ if (ret)
+ goto cleanup;
+
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION) {
+ subject_pac = t->stkt_pac;
+ subject_server = t->stkt_server;
+ subject_key = t->stkt_server_key;
+ } else {
+ subject_pac = t->header_pac;
+ subject_server = t->header_server;
+ subject_key = t->header_key;
+ }
+
+ initial_reply_key = (t->subkey != NULL) ? t->subkey :
+ t->header_tkt->enc_part2->session;
+
+ if (t->req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
+ /* For user-to-user, encrypt the ticket with the second ticket's
+ * session key. */
+ ticket_encrypting_key = t->stkt->enc_part2->session;
+ } else {
+ /* Otherwise encrypt the ticket with the server entry's first long-term
+ * key. */
+ ret = get_first_current_key(context, t->server, &server_key);
+ if (ret) {
+ *status = "FINDING_SERVER_KEY";
+ goto cleanup;
+ }
+ ticket_encrypting_key = &server_key;
+ }
+
+ if (t->req->kdc_options & (KDC_OPT_VALIDATE | KDC_OPT_RENEW)) {
+ /* Copy the whole header ticket except for authorization data. */
+ ticket_reply = *t->header_tkt;
+ enc_tkt_reply = *t->header_tkt->enc_part2;
+ enc_tkt_reply.authorization_data = NULL;
+ } else {
+ if (t->req->kdc_options & (KDC_OPT_FORWARDED | KDC_OPT_PROXY)) {
+ /* Include the requested addresses in the ticket and reply. */
+ enc_tkt_reply.caddrs = t->req->addresses;
+ reply_encpart.caddrs = t->req->addresses;
+ } else {
+ /* Use the header ticket addresses and omit them from the reply. */
+ enc_tkt_reply.caddrs = header_enc_tkt->caddrs;
+ reply_encpart.caddrs = NULL;
+ }
+
+ ticket_reply.server = t->is_referral ? t->sprinc : t->req->server;
+ }
+
+ enc_tkt_reply.flags = tktflags;
+ enc_tkt_reply.times = *times;
+ enc_tkt_reply.client = t->tkt_client;
+ enc_tkt_reply.session = &session_key;
+ enc_tkt_reply.transited = t->transited;
+
+ ret = handle_authdata(realm, t->flags, t->client, t->server,
+ subject_server, t->local_tgt, &t->local_tgt_key,
+ initial_reply_key, ticket_encrypting_key,
+ subject_key, NULL, pkt, t->req, t->s4u_cprinc,
+ subject_pac, t->subject_tkt, &t->auth_indicators,
+ &enc_tkt_reply);
+ if (ret) {
+ krb5_klog_syslog(LOG_INFO, _("TGS_REQ : handle_authdata (%d)"), ret);
+ *status = "HANDLE_AUTHDATA";
+ goto cleanup;
+ }
+
+ ticket_reply.enc_part2 = &enc_tkt_reply;
+
+ ret = krb5_encrypt_tkt_part(context, ticket_encrypting_key, &ticket_reply);
+ if (ret)
+ goto cleanup;
+
+ if (t->req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
+ ticket_reply.enc_part.kvno = 0;
+ kau_u2u(context, TRUE, au_state);
+ } else {
+ ticket_reply.enc_part.kvno = current_kvno(t->server);
+ }
+
+ au_state->stage = ENCR_REP;
+
+ if (t->s4u2self != NULL &&
+ krb5int_find_pa_data(context, t->req->padata,
+ KRB5_PADATA_S4U_X509_USER) != NULL) {
+ /* Add an S4U2Self response to the encrypted padata (skipped if the
+ * request only included PA-FOR-USER padata). */
+ ret = kdc_make_s4u2self_rep(context, t->subkey,
+ t->header_tkt->enc_part2->session,
+ t->s4u2self, &reply, &reply_encpart);
+ if (ret)
+ goto cleanup;
+ }
+
+ reply_encpart.session = &session_key;
+ reply_encpart.nonce = t->req->nonce;
+ reply_encpart.times = enc_tkt_reply.times;
+ reply_encpart.last_req = nolrarray;
+ reply_encpart.key_exp = 0;
+ reply_encpart.flags = enc_tkt_reply.flags;
+ reply_encpart.server = ticket_reply.server;
+
+ reply.msg_type = KRB5_TGS_REP;
+ reply.client = enc_tkt_reply.client;
+ reply.ticket = &ticket_reply;
+ reply.enc_part.kvno = 0;
+ reply.enc_part.enctype = initial_reply_key->enctype;
+ ret = kdc_fast_response_handle_padata(fast_state, t->req, &reply,
+ initial_reply_key->enctype);
+ if (ret)
+ goto cleanup;
+ ret = kdc_fast_handle_reply_key(fast_state, initial_reply_key,
+ &fast_reply_key);
+ if (ret)
+ goto cleanup;
+ ret = return_enc_padata(context, pkt, t->req, fast_reply_key, t->server,
+ &reply_encpart,
+ t->is_referral &&
+ (t->req->kdc_options & KDC_OPT_CANONICALIZE));
+ if (ret) {
+ *status = "KDC_RETURN_ENC_PADATA";
+ goto cleanup;
+ }
+
+ ret = kau_make_tkt_id(context, &ticket_reply, &au_state->tkt_out_id);
+ if (ret)
+ goto cleanup;
+
+ if (kdc_fast_hide_client(fast_state))
+ reply.client = (krb5_principal)krb5_anonymous_principal();
+ ret = krb5_encode_kdc_rep(context, KRB5_TGS_REP, &reply_encpart,
+ t->subkey != NULL, fast_reply_key, &reply,
+ response);
+ if (ret)
+ goto cleanup;
+
+ log_tgs_req(context, from, t->req, &reply, t->cprinc, t->sprinc,
+ t->s4u_cprinc, t->authtime, t->flags, "ISSUE", 0, NULL);
+ au_state->status = "ISSUE";
+ au_state->reply = &reply;
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)
+ kau_s4u2proxy(context, TRUE, au_state);
+ kau_tgs_req(context, TRUE, au_state);
+ au_state->reply = NULL;
+
+cleanup:
+ zapfree(ticket_reply.enc_part.ciphertext.data,
+ ticket_reply.enc_part.ciphertext.length);
+ zapfree(reply.enc_part.ciphertext.data, reply.enc_part.ciphertext.length);
+ krb5_free_pa_data(context, reply.padata);
+ krb5_free_pa_data(context, reply_encpart.enc_padata);
+ krb5_free_authdata(context, enc_tkt_reply.authorization_data);
+ krb5_free_keyblock_contents(context, &session_key);
+ krb5_free_keyblock_contents(context, &server_key);
+ krb5_free_keyblock(context, fast_reply_key);
+ return ret;
+}
+
+static void
+free_req_info(krb5_context context, struct tgs_req_info *t)
+{
+ krb5_free_kdc_req(context, t->req);
+ krb5_free_ticket(context, t->header_tkt);
+ krb5_db_free_principal(context, t->header_server);
+ krb5_free_keyblock(context, t->header_key);
+ krb5_free_keyblock(context, t->subkey);
+ krb5_pac_free(context, t->header_pac);
+ krb5_pac_free(context, t->stkt_pac);
+ krb5_db_free_principal(context, t->stkt_server);
+ krb5_free_keyblock(context, t->stkt_server_key);
+ krb5_db_free_principal(context, t->local_tgt_storage);
+ krb5_free_keyblock_contents(context, &t->local_tgt_key);
+ krb5_db_free_principal(context, t->server);
+ krb5_db_free_principal(context, t->client);
+ krb5_free_pa_s4u_x509_user(context, t->s4u2self);
+ krb5_free_principal(context, t->stkt_pac_client);
+ k5_free_data_ptr_list(t->auth_indicators);
+ krb5_free_data_contents(context, &t->new_transited);
+}
+
+krb5_error_code
+process_tgs_req(krb5_kdc_req *request, krb5_data *pkt,
+ const krb5_fulladdr *from, kdc_realm_t *realm,
+ krb5_data **response)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ struct tgs_req_info t = { 0 };
+ struct kdc_request_state *fast_state = NULL;
+ krb5_audit_state *au_state = NULL;
+ krb5_pa_data **e_data = NULL;
+ krb5_flags tktflags;
+ krb5_ticket_times times = { 0 };
+ const char *emsg = NULL, *status = NULL;
+
+ ret = kdc_make_rstate(realm, &fast_state);
+ if (ret)
+ goto cleanup;
+ ret = kau_init_kdc_req(context, request, from, &au_state);
+ if (ret)
+ goto cleanup;
+ kau_tgs_req(context, TRUE, au_state);
+
+ ret = gather_tgs_req_info(realm, &request, pkt, from, fast_state, au_state,
+ &t, &status);
+ if (ret)
+ goto cleanup;
+
+ ret = check_tgs_req(realm, &t, au_state, &tktflags, &times, &status,
+ &e_data);
+ if (ret)
+ goto cleanup;
+
+ ret = tgs_issue_ticket(realm, &t, tktflags, &times, pkt, from, fast_state,
+ au_state, &status, response);
+ if (ret)
+ goto cleanup;
+
+cleanup:
+ if (status == NULL)
+ status = "UNKNOWN_REASON";
+
+ if (ret) {
+ emsg = krb5_get_error_message(context, ret);
+ log_tgs_req(context, from, t.req, NULL, t.cprinc, t.sprinc,
+ t.s4u_cprinc, t.authtime, t.flags, status, ret, emsg);
+ krb5_free_error_message(context, emsg);
+
+ if (au_state != NULL) {
+ au_state->status = status;
+ kau_tgs_req(context, FALSE, au_state);
+ }
+ }
+
+ if (ret && fast_state != NULL) {
+ ret = prepare_error_tgs(fast_state, t.req, t.header_tkt, ret,
+ (t.server != NULL) ? t.server->princ : NULL,
+ response, status, e_data);
+ }
+
+ krb5_free_kdc_req(context, request);
+ kdc_free_rstate(fast_state);
+ kau_free_kdc_req(au_state);
+ free_req_info(context, &t);
+ krb5_free_pa_data(context, e_data);
 return ret;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/fast_util.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/fast_util.c Changed

@@ -39,53 +39,53 @@
     krb5_auth_context authcontext = NULL;
     krb5_ticket *ticket = NULL;
     krb5_keyblock *subkey = NULL;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
+    kdc_realm_t *realm = state->realm_data;
+    krb5_context context = realm->realm_context;
 
     assert(armor->armor_type == KRB5_FAST_ARMOR_AP_REQUEST);
-    krb5_clear_error_message(kdc_context);
-    retval = krb5_auth_con_init(kdc_context, &authcontext);
+    krb5_clear_error_message(context);
+    retval = krb5_auth_con_init(context, &authcontext);
+    /*disable replay cache*/
     if (retval == 0)
-        retval = krb5_auth_con_setflags(kdc_context,
-                                        authcontext, 0); /*disable replay cache*/
+        retval = krb5_auth_con_setflags(context, authcontext, 0);
     if (retval == 0)
-        retval = krb5_rd_req(kdc_context, &authcontext, &armor->armor_value,
-                             NULL /*server*/, kdc_active_realm->realm_keytab,
+        retval = krb5_rd_req(context, &authcontext, &armor->armor_value,
+                             NULL /*server*/, realm->realm_keytab,
                              NULL, &ticket);
     if (retval != 0) {
-        const char * errmsg = krb5_get_error_message(kdc_context, retval);
-        k5_setmsg(kdc_context, retval, _("%s while handling ap-request armor"),
+        const char * errmsg = krb5_get_error_message(context, retval);
+        k5_setmsg(context, retval, _("%s while handling ap-request armor"),
                   errmsg);
-        krb5_free_error_message(kdc_context, errmsg);
+        krb5_free_error_message(context, errmsg);
     }
     if (retval == 0) {
-        if (!krb5_principal_compare_any_realm(kdc_context,
-                                              tgs_server,
+        if (!krb5_principal_compare_any_realm(context, realm->realm_tgsprinc,
                                               ticket->server)) {
-            k5_setmsg(kdc_context, KRB5KDC_ERR_SERVER_NOMATCH,
+            k5_setmsg(context, KRB5KDC_ERR_SERVER_NOMATCH,
                       _("ap-request armor for something other than the local "
                         "TGS"));
             retval = KRB5KDC_ERR_SERVER_NOMATCH;
         }
     }
     if (retval == 0) {
-        retval = krb5_auth_con_getrecvsubkey(kdc_context, authcontext, &subkey);
+        retval = krb5_auth_con_getrecvsubkey(context, authcontext, &subkey);
         if (retval != 0 || subkey == NULL) {
-            k5_setmsg(kdc_context, KRB5KDC_ERR_POLICY,
+            k5_setmsg(context, KRB5KDC_ERR_POLICY,
                       _("ap-request armor without subkey"));
             retval = KRB5KDC_ERR_POLICY;
         }
     }
     if (retval == 0)
-        retval = krb5_c_fx_cf2_simple(kdc_context,
+        retval = krb5_c_fx_cf2_simple(context,
                                       subkey, "subkeyarmor",
                                       ticket->enc_part2->session, "ticketarmor",
                                       &state->armor_key);
     if (ticket)
-        krb5_free_ticket(kdc_context, ticket);
+        krb5_free_ticket(context, ticket);
     if (subkey)
-        krb5_free_keyblock(kdc_context, subkey);
+        krb5_free_keyblock(context, subkey);
     if (authcontext)
-        krb5_auth_con_free(kdc_context, authcontext);
+        krb5_auth_con_free(context, authcontext);
     return retval;
 }
 
@@ -94,24 +94,24 @@
                    const krb5_fast_response *response,
                    krb5_data **fx_fast_reply)
 {
+    krb5_context context = state->realm_data->realm_context;
     krb5_error_code retval = 0;
     krb5_enc_data encrypted_reply;
     krb5_data *encoded_response = NULL;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
 
     assert(state->armor_key);
     retval = encode_krb5_fast_response(response, &encoded_response);
     if (retval== 0)
-        retval = krb5_encrypt_helper(kdc_context, state->armor_key,
+        retval = krb5_encrypt_helper(context, state->armor_key,
                                      KRB5_KEYUSAGE_FAST_REP,
                                      encoded_response, &encrypted_reply);
     if (encoded_response)
-        krb5_free_data(kdc_context, encoded_response);
+        krb5_free_data(context, encoded_response);
     encoded_response = NULL;
     if (retval == 0) {
         retval = encode_krb5_pa_fx_fast_reply(&encrypted_reply,
                                               fx_fast_reply);
-        krb5_free_data_contents(kdc_context, &encrypted_reply.ciphertext);
+        krb5_free_data_contents(context, &encrypted_reply.ciphertext);
     }
     return retval;
 }
@@ -131,6 +131,7 @@
               struct kdc_request_state *state,
               krb5_data **inner_body_out)
 {
+    krb5_context context = state->realm_data->realm_context;
     krb5_error_code retval = 0;
     krb5_pa_data *fast_padata;
     krb5_data scratch, plaintext, *inner_body = NULL;
@@ -140,15 +141,14 @@
     krb5_checksum *cksum;
     krb5_boolean cksum_valid;
     krb5_keyblock empty_keyblock;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
 
     if (inner_body_out != NULL)
         *inner_body_out = NULL;
     scratch.data = NULL;
-    krb5_clear_error_message(kdc_context);
+    krb5_clear_error_message(context);
     memset(&empty_keyblock, 0, sizeof(krb5_keyblock));
-    fast_padata = krb5int_find_pa_data(kdc_context,
-                                       request->padata, KRB5_PADATA_FX_FAST);
+    fast_padata = krb5int_find_pa_data(context, request->padata,
+                                       KRB5_PADATA_FX_FAST);
     if (fast_padata !=  NULL){
         scratch.length = fast_padata->length;
         scratch.data = (char *) fast_padata->contents;
@@ -158,14 +158,14 @@
             case KRB5_FAST_ARMOR_AP_REQUEST:
                 if (tgs_subkey) {
                     retval = KRB5KDC_ERR_PREAUTH_FAILED;
-                    k5_setmsg(kdc_context, retval,
+                    k5_setmsg(context, retval,
                               _("Ap-request armor not permitted with TGS"));
                     break;
                 }
                 retval = armor_ap_request(state, fast_armored_req->armor);
                 break;
             default:
-                k5_setmsg(kdc_context, KRB5KDC_ERR_PREAUTH_FAILED,
+                k5_setmsg(context, KRB5KDC_ERR_PREAUTH_FAILED,
                           _("Unknown FAST armor type %d"),
                           fast_armored_req->armor->armor_type);
                 retval = KRB5KDC_ERR_PREAUTH_FAILED;
@@ -173,13 +173,13 @@
         }
         if (retval == 0 && !state->armor_key) {
             if (tgs_subkey)
-                retval = krb5_c_fx_cf2_simple(kdc_context,
+                retval = krb5_c_fx_cf2_simple(context,
                                               tgs_subkey, "subkeyarmor",
                                               tgs_session, "ticketarmor",
                                               &state->armor_key);
             else {
                 retval = KRB5KDC_ERR_PREAUTH_FAILED;
-                k5_setmsg(kdc_context, retval,
+                k5_setmsg(context, retval,
                           _("No armor key but FAST armored request present"));
             }
         }
@@ -188,8 +188,7 @@
             plaintext.data = k5alloc(plaintext.length, &retval);
         }
         if (retval == 0) {
-            retval = krb5_c_decrypt(kdc_context,
-                                    state->armor_key,
+            retval = krb5_c_decrypt(context, state->armor_key,
                                     KRB5_KEYUSAGE_FAST_ENC, NULL,
                                     &fast_armored_req->enc_part,
                                     &plaintext);
@@ -199,8 +198,7 @@
                 retval = fetch_asn1_field((unsigned char *)plaintext.data,
                                           1, 2, &scratch);
                 if (retval == 0) {
-                    retval = krb5_copy_data(kdc_context, &scratch,
-                                            &inner_body);
+                    retval = krb5_copy_data(context, &scratch, &inner_body);
                 }
             }
             if (plaintext.data)
@@ -208,19 +206,19 @@
         }
         cksum = &fast_armored_req->req_checksum;
         if (retval == 0)
-            retval = krb5_c_verify_checksum(kdc_context, state->armor_key,
+            retval = krb5_c_verify_checksum(context, state->armor_key,
                                             KRB5_KEYUSAGE_FAST_REQ_CHKSUM,
                                             checksummed_data, cksum,
                                             &cksum_valid);
         if (retval == 0 && !cksum_valid) {
             retval = KRB5KRB_AP_ERR_MODIFIED;
-            k5_setmsg(kdc_context, retval,
+            k5_setmsg(context, retval,
                       _("FAST req_checksum invalid; request modified"));
         }
         if (retval == 0) {
             if (!krb5_c_is_keyed_cksum(cksum->checksum_type)) {
                 retval = KRB5KDC_ERR_POLICY;
-                k5_setmsg(kdc_context, retval,
+                k5_setmsg(context, retval,
                           _("Unkeyed checksum used in fast_req"));
             }
         }
@@ -231,7 +229,7 @@
         if (retval == 0) {
             state->fast_options = fast_req->fast_options;
             fast_req->req_body->msg_type = request->msg_type;
-            krb5_free_kdc_req( kdc_context, request);
+            krb5_free_kdc_req(context, request);
             *requestptr = fast_req->req_body;
             fast_req->req_body = NULL;
         }
@@ -240,11 +238,11 @@
         *inner_body_out = inner_body;
         inner_body = NULL;
     }
-    krb5_free_data(kdc_context, inner_body);
+    krb5_free_data(context, inner_body);
     if (fast_req)
-        krb5_free_fast_req( kdc_context, fast_req);
+        krb5_free_fast_req(context, fast_req);
     if (fast_armored_req)
-        krb5_free_fast_armored_req(kdc_context, fast_armored_req);
+        krb5_free_fast_armored_req(context, fast_armored_req);
     return retval;
 }
 
@@ -264,12 +262,12 @@
 void
 kdc_free_rstate (struct kdc_request_state *s)
 {
-    kdc_realm_t *kdc_active_realm = s->realm_data;
-
+    if (s == NULL)
+        return;
     if (s->armor_key)
-        krb5_free_keyblock(kdc_context, s->armor_key);
+        krb5_free_keyblock(s->realm_data->realm_context, s->armor_key);
     if (s->strengthen_key)
-        krb5_free_keyblock(kdc_context, s->strengthen_key);
+        krb5_free_keyblock(s->realm_data->realm_context, s->strengthen_key);
     k5_zapfree_pa_data(s->in_cookie_padata);
     k5_zapfree_pa_data(s->out_cookie_padata);
     free(s);
@@ -280,6 +278,7 @@
                                 krb5_kdc_req *request,
                                 krb5_kdc_rep *rep, krb5_enctype enctype)
 {
+    krb5_context context = state->realm_data->realm_context;
     krb5_error_code retval = 0;
     krb5_fast_finished finish;
     krb5_fast_response fast_response;
@@ -289,14 +288,13 @@
     krb5_cksumtype cksumtype = CKSUMTYPE_RSA_MD5;
     krb5_pa_data *empty_padata = {NULL};
     krb5_keyblock *strengthen_key = NULL;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
 
     if (!state->armor_key)
         return 0;
     memset(&finish, 0, sizeof(finish));
-    retval = krb5_init_keyblock(kdc_context, enctype, 0, &strengthen_key);
+    retval = krb5_init_keyblock(context, enctype, 0, &strengthen_key);
     if (retval == 0)
-        retval = krb5_c_make_random_key(kdc_context, enctype, strengthen_key);
+        retval = krb5_c_make_random_key(context, enctype, strengthen_key);
     if (retval == 0) {
         state->strengthen_key = strengthen_key;
         strengthen_key = NULL;
@@ -316,16 +314,15 @@
     if (retval == 0 && pa == NULL)
         retval = ENOMEM;
     if (retval == 0)
-        retval = krb5_us_timeofday(kdc_context, &finish.timestamp, &finish.usec);
+        retval = krb5_us_timeofday(context, &finish.timestamp, &finish.usec);
     if (retval == 0)
         retval = encode_krb5_ticket(rep->ticket, &encoded_ticket);
     if (retval == 0)
-        retval = krb5int_c_mandatory_cksumtype(kdc_context,
+        retval = krb5int_c_mandatory_cksumtype(context,
                                                state->armor_key->enctype,
                                                &cksumtype);
     if (retval == 0)
-        retval = krb5_c_make_checksum(kdc_context, cksumtype,
-                                      state->armor_key,
+        retval = krb5_c_make_checksum(context, cksumtype, state->armor_key,
                                       KRB5_KEYUSAGE_FAST_FINISHED,
                                       encoded_ticket, &finish.ticket_checksum);
     if (retval == 0)
@@ -335,7 +332,7 @@
         pa0.length = encrypted_reply->length;
         pa0.contents = (unsigned char *)  encrypted_reply->data;
         pa_array0 = &pa0;
-        krb5_free_pa_data(kdc_context, rep->padata);
+        krb5_free_pa_data(context, rep->padata);
         rep->padata = pa_array;
         pa_array = NULL;
         free(encrypted_reply);
@@ -347,13 +344,13 @@
     if (pa_array)
         free(pa_array);
     if (encrypted_reply)
-        krb5_free_data(kdc_context, encrypted_reply);
+        krb5_free_data(context, encrypted_reply);
     if (encoded_ticket)
-        krb5_free_data(kdc_context, encoded_ticket);
+        krb5_free_data(context, encoded_ticket);
     if (strengthen_key != NULL)
-        krb5_free_keyblock(kdc_context, strengthen_key);
+        krb5_free_keyblock(context, strengthen_key);
     if (finish.ticket_checksum.contents)
-        krb5_free_checksum_contents(kdc_context, &finish.ticket_checksum);
+        krb5_free_checksum_contents(context, &finish.ticket_checksum);
     return retval;
 }
 
@@ -379,7 +376,6 @@
     krb5_pa_data *outer_pa3;
     krb5_pa_data **inner_pa = NULL;
     size_t size = 0;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
 
     *fast_edata_out = NULL;
     memset(outer_pa, 0, sizeof(outer_pa));
@@ -421,9 +417,9 @@
     }
     retval = encode_krb5_padata_sequence(outer_pa, fast_edata_out);
     if (encrypted_reply)
-        krb5_free_data(kdc_context, encrypted_reply);
+        krb5_free_data(context, encrypted_reply);
     if (encoded_fx_error)
-        krb5_free_data(kdc_context, encoded_fx_error);
+        krb5_free_data(context, encoded_fx_error);
     return retval;
 }
 
@@ -432,16 +428,15 @@
                           krb5_keyblock *existing_key,
                           krb5_keyblock **out_key)
 {
+    krb5_context context = state->realm_data->realm_context;
     krb5_error_code retval = 0;
-    kdc_realm_t *kdc_active_realm = state->realm_data;
 
     if (state->armor_key)
-        retval = krb5_c_fx_cf2_simple(kdc_context,
+        retval = krb5_c_fx_cf2_simple(context,
                                       state->strengthen_key, "strengthenkey",
-                                      existing_key,
-                                      "replykey", out_key);
+                                      existing_key, "replykey", out_key);
     else
-        retval = krb5_copy_keyblock(kdc_context, existing_key, out_key);
+        retval = krb5_copy_keyblock(context, existing_key, out_key);
     return retval;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_audit.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_audit.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_authdata.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_authdata.c Changed

@@ -459,22 +459,22 @@
  * method can alter the auth indicator list.
  */
 static krb5_error_code
-handle_pac(kdc_realm_t *kdc_active_realm, unsigned int flags,
-           krb5_db_entry *client, krb5_db_entry *server,
-           krb5_db_entry *subject_server, krb5_db_entry *local_tgt,
-           krb5_keyblock *local_tgt_key, krb5_keyblock *server_key,
-           krb5_keyblock *subject_key, krb5_keyblock *replaced_reply_key,
-           krb5_enc_tkt_part *subject_tkt, krb5_pac subject_pac,
-           krb5_kdc_req *req, krb5_const_principal altcprinc,
-           krb5_timestamp authtime, krb5_enc_tkt_part *enc_tkt_reply,
-           krb5_data ***auth_indicators)
+handle_pac(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+           krb5_db_entry *server, krb5_db_entry *subject_server,
+           krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+           krb5_keyblock *server_key, krb5_keyblock *subject_key,
+           krb5_keyblock *replaced_reply_key, krb5_enc_tkt_part *subject_tkt,
+           krb5_pac subject_pac, krb5_kdc_req *req,
+           krb5_const_principal altcprinc, krb5_timestamp authtime,
+           krb5_enc_tkt_part *enc_tkt_reply, krb5_data ***auth_indicators)
 {
+    krb5_context context = realm->realm_context;
     krb5_error_code ret;
-    krb5_context context = kdc_context;
     krb5_pac new_pac = NULL;
     krb5_const_principal pac_client = NULL;
     krb5_boolean with_realm, is_as_req = (req->msg_type == KRB5_AS_REQ);
     krb5_db_entry *signing_tgt;
+    krb5_keyblock *privsvr_key = NULL;
 
     /* Don't add a PAC or auth indicators if the server disables authdata. */
     if (server->attributes & KRB5_KDB_NO_AUTH_DATA_REQUIRED)
@@ -485,7 +485,7 @@
      * or for an AS-REQ if the client requested not to get one, or for a
      * TGS-REQ if the subject ticket didn't contain one.
      */
-    if (kdc_active_realm->realm_disable_pac ||
+    if (realm->realm_disable_pac ||
         (enc_tkt_reply->flags & TKT_FLG_ANONYMOUS) ||
         (is_as_req && !include_pac_p(context, req)) ||
         (!is_as_req && subject_pac == NULL)) {
@@ -556,8 +556,11 @@
         with_realm = FALSE;
     }
 
+    ret = pac_privsvr_key(context, server, local_tgt_key, &privsvr_key);
+    if (ret)
+        goto cleanup;
     ret = krb5_kdc_sign_ticket(context, enc_tkt_reply, new_pac, server->princ,
-                               pac_client, server_key, local_tgt_key,
+                               pac_client, server_key, privsvr_key,
                                with_realm);
     if (ret)
         goto cleanup;
@@ -566,24 +569,25 @@
 
 cleanup:
     krb5_pac_free(context, new_pac);
+    krb5_free_keyblock(context, privsvr_key);
     return ret;
 }
 
 krb5_error_code
-handle_authdata(kdc_realm_t *kdc_active_realm, unsigned int flags,
-                krb5_db_entry *client, krb5_db_entry *server,
-                krb5_db_entry *subject_server, krb5_db_entry *local_tgt,
-                krb5_keyblock *local_tgt_key, krb5_keyblock *client_key,
-                krb5_keyblock *server_key, krb5_keyblock *subject_key,
-                krb5_keyblock *replaced_reply_key, krb5_data *req_pkt,
-                krb5_kdc_req *req, krb5_const_principal altcprinc,
-                krb5_pac subject_pac, krb5_enc_tkt_part *enc_tkt_req,
-                krb5_data ***auth_indicators, krb5_enc_tkt_part *enc_tkt_reply)
+handle_authdata(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+                krb5_db_entry *server, krb5_db_entry *subject_server,
+                krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+                krb5_keyblock *client_key, krb5_keyblock *server_key,
+                krb5_keyblock *subject_key, krb5_keyblock *replaced_reply_key,
+                krb5_data *req_pkt, krb5_kdc_req *req,
+                krb5_const_principal altcprinc, krb5_pac subject_pac,
+                krb5_enc_tkt_part *enc_tkt_req, krb5_data ***auth_indicators,
+                krb5_enc_tkt_part *enc_tkt_reply)
 {
+    krb5_context context = realm->realm_context;
     kdcauthdata_handle *h;
     krb5_error_code ret = 0;
     size_t i;
-    krb5_context context = kdc_active_realm->realm_context;
 
     if (req->msg_type == KRB5_TGS_REQ &&
         req->authorization_data.ciphertext.data != NULL) {
@@ -616,8 +620,8 @@
             return ret;
     }
 
-    return handle_pac(kdc_active_realm, flags, client, server, subject_server,
-                      local_tgt, local_tgt_key, server_key, subject_key,
+    return handle_pac(realm, flags, client, server, subject_server, local_tgt,
+                      local_tgt_key, server_key, subject_key,
                       replaced_reply_key, enc_tkt_req, subject_pac, req,
                       altcprinc, enc_tkt_reply->times.authtime, enc_tkt_reply,
                       auth_indicators);

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_log.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_log.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_preauth.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_preauth.c Changed

@@ -873,7 +873,7 @@
 struct hint_state {
     kdc_hint_respond_fn respond;
     void *arg;
-    kdc_realm_t *realm;
+    krb5_context context;
 
     krb5_kdcpreauth_rock rock;
     krb5_kdc_req *request;
@@ -888,14 +888,14 @@
 static void
 hint_list_finish(struct hint_state *state, krb5_error_code code)
 {
+    krb5_context context = state->context;
     kdc_hint_respond_fn oldrespond = state->respond;
     void *oldarg = state->arg;
-    kdc_realm_t *kdc_active_realm = state->realm;
 
     /* Add a freshness token if a preauth module requested it and the client
      * request indicates support for it. */
     if (!code)
-        code = add_freshness_token(kdc_context, state->rock, &state->pa_data);
+        code = add_freshness_token(context, state->rock, &state->pa_data);
 
     if (!code) {
         if (state->pa_data == NULL) {
@@ -908,7 +908,7 @@
         state->pa_data = NULL;
     }
 
-    krb5_free_pa_data(kdc_context, state->pa_data);
+    krb5_free_pa_data(context, state->pa_data);
     free(state);
     (*oldrespond)(oldarg);
 }
@@ -945,8 +945,8 @@
 static void
 hint_list_next(struct hint_state *state)
 {
+    krb5_context context = state->context;
     preauth_system *ap = state->ap;
-    kdc_realm_t *kdc_active_realm = state->realm;
 
     if (ap->type == -1) {
         hint_list_finish(state, 0);
@@ -960,7 +960,7 @@
 
     state->pa_type = ap->type;
     if (ap->get_edata) {
-        ap->get_edata(kdc_context, state->request, &callbacks, state->rock,
+        ap->get_edata(context, state->request, &callbacks, state->rock,
                       ap->moddata, ap->type, finish_get_edata, state);
     } else
         finish_get_edata(state, 0, NULL);
@@ -976,7 +976,7 @@
                       krb5_pa_data ***e_data_out, kdc_hint_respond_fn respond,
                       void *arg)
 {
-    kdc_realm_t *kdc_active_realm = rock->rstate->realm_data;
+    krb5_context context = rock->rstate->realm_data->realm_context;
     struct hint_state *state;
 
     *e_data_out = NULL;
@@ -991,7 +991,7 @@
     state->arg = arg;
     state->request = request;
     state->rock = rock;
-    state->realm = rock->rstate->realm_data;
+    state->context = context;
     state->e_data_out = e_data_out;
     state->pa_data = NULL;
     state->ap = preauth_systems;
@@ -1000,7 +1000,7 @@
     if (k5_add_empty_pa_data(&state->pa_data, KRB5_PADATA_FX_FAST) != 0)
         goto error;
 
-    if (add_etype_info(kdc_context, rock, &state->pa_data) != 0)
+    if (add_etype_info(context, rock, &state->pa_data) != 0)
         goto error;
 
     hint_list_next(state);
@@ -1008,7 +1008,7 @@
 
 error:
     if (state != NULL)
-        krb5_free_pa_data(kdc_context, state->pa_data);
+        krb5_free_pa_data(context, state->pa_data);
     free(state);
     (*respond)(arg);
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_util.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_util.c Changed

@@ -68,8 +68,7 @@
 const int vague_errors = 0;
 #endif
 
-static krb5_error_code kdc_rd_ap_req(kdc_realm_t *kdc_active_realm,
-                                     krb5_ap_req *apreq,
+static krb5_error_code kdc_rd_ap_req(kdc_realm_t *realm, krb5_ap_req *apreq,
                                      krb5_auth_context auth_context,
                                      krb5_db_entry **server,
                                      krb5_keyblock **tgskey);
@@ -142,14 +141,13 @@
 
 /* If a header ticket is decrypted, *ticket_out is filled in even on error. */
 krb5_error_code
-kdc_process_tgs_req(kdc_realm_t *kdc_active_realm,
-                    krb5_kdc_req *request, const krb5_fulladdr *from,
-                    krb5_data *pkt, krb5_ticket **ticket_out,
-                    krb5_db_entry **krbtgt_ptr,
-                    krb5_keyblock **tgskey,
-                    krb5_keyblock **subkey,
+kdc_process_tgs_req(kdc_realm_t *realm, krb5_kdc_req *request,
+                    const krb5_fulladdr *from, krb5_data *pkt,
+                    krb5_ticket **ticket_out, krb5_db_entry **krbtgt_ptr,
+                    krb5_keyblock **tgskey, krb5_keyblock **subkey,
                     krb5_pa_data **pa_tgs_req)
 {
+    krb5_context context = realm->realm_context;
     krb5_pa_data        * tmppa;
     krb5_ap_req         * apreq;
     krb5_error_code       retval;
@@ -166,8 +164,7 @@
     *krbtgt_ptr = NULL;
     *tgskey = NULL;
 
-    tmppa = krb5int_find_pa_data(kdc_context,
-                                 request->padata, KRB5_PADATA_AP_REQ);
+    tmppa = krb5int_find_pa_data(context, request->padata, KRB5_PADATA_AP_REQ);
     if (!tmppa)
         return KRB5KDC_ERR_PADATA_TYPE_NOSUPP;
 
@@ -184,44 +181,46 @@
         goto cleanup;
     }
 
-    if ((retval = krb5_auth_con_init(kdc_context, &auth_context)))
+    retval = krb5_auth_con_init(context, &auth_context);
+    if (retval)
         goto cleanup;
 
     /* Don't use a replay cache. */
-    if ((retval = krb5_auth_con_setflags(kdc_context, auth_context, 0)))
+    retval = krb5_auth_con_setflags(context, auth_context, 0);
+    if (retval)
         goto cleanup;
 
-    if ((retval = krb5_auth_con_setaddrs(kdc_context, auth_context, NULL,
-                                         from->address)) )
+    retval = krb5_auth_con_setaddrs(context, auth_context, NULL,
+                                    from->address);
+    if (retval)
         goto cleanup_auth_context;
 
-    retval = kdc_rd_ap_req(kdc_active_realm,
-                           apreq, auth_context, &krbtgt, tgskey);
+    retval = kdc_rd_ap_req(realm, apreq, auth_context, &krbtgt, tgskey);
     if (retval)
         goto cleanup_auth_context;
 
-    if ((retval = krb5_auth_con_getrecvsubkey(kdc_context,
-                                              auth_context, subkey)))
+    retval = krb5_auth_con_getrecvsubkey(context, auth_context, subkey);
+    if (retval)
         goto cleanup_auth_context;
 
-    if ((retval = krb5_auth_con_getauthenticator(kdc_context, auth_context,
-                                                 &authenticator)))
+    retval = krb5_auth_con_getauthenticator(context, auth_context,
+                                            &authenticator);
+    if (retval)
         goto cleanup_auth_context;
 
-    retval = krb5_find_authdata(kdc_context,
-                                ticket->enc_part2->authorization_data,
+    retval = krb5_find_authdata(context, ticket->enc_part2->authorization_data,
                                 authenticator->authorization_data,
                                 KRB5_AUTHDATA_FX_ARMOR, &authdata);
     if (retval != 0)
         goto cleanup_authenticator;
     if (authdata&& authdata0) {
-        k5_setmsg(kdc_context, KRB5KDC_ERR_POLICY,
+        k5_setmsg(context, KRB5KDC_ERR_POLICY,
                   "ticket valid only as FAST armor");
         retval = KRB5KDC_ERR_POLICY;
-        krb5_free_authdata(kdc_context, authdata);
+        krb5_free_authdata(context, authdata);
         goto cleanup_authenticator;
     }
-    krb5_free_authdata(kdc_context, authdata);
+    krb5_free_authdata(context, authdata);
 
 
     /* Check for a checksum */
@@ -240,10 +239,10 @@
      */
     if (pkt && (fetch_asn1_field((unsigned char *) pkt->data,
                                  1, 4, &scratch1) >= 0)) {
-        if (comp_cksum(kdc_context, &scratch1, ticket, his_cksum)) {
+        if (comp_cksum(context, &scratch1, ticket, his_cksum)) {
             if (!(retval = encode_krb5_kdc_req_body(request, &scratch)))
-                retval = comp_cksum(kdc_context, scratch, ticket, his_cksum);
-            krb5_free_data(kdc_context, scratch);
+                retval = comp_cksum(context, scratch, ticket, his_cksum);
+            krb5_free_data(context, scratch);
             if (retval)
                 goto cleanup_authenticator;
         }
@@ -254,14 +253,14 @@
     krbtgt = NULL;
 
 cleanup_authenticator:
-    krb5_free_authenticator(kdc_context, authenticator);
+    krb5_free_authenticator(context, authenticator);
 
 cleanup_auth_context:
-    krb5_auth_con_free(kdc_context, auth_context);
+    krb5_auth_con_free(context, auth_context);
 
 cleanup:
     if (retval != 0) {
-        krb5_free_keyblock(kdc_context, *tgskey);
+        krb5_free_keyblock(context, *tgskey);
         *tgskey = NULL;
     }
     if (apreq->ticket->enc_part2 != NULL) {
@@ -269,8 +268,8 @@
         *ticket_out = apreq->ticket;
         apreq->ticket = NULL;
     }
-    krb5_free_ap_req(kdc_context, apreq);
-    krb5_db_free_principal(kdc_context, krbtgt);
+    krb5_free_ap_req(context, apreq);
+    krb5_db_free_principal(context, krbtgt);
     return retval;
 }
 
@@ -287,10 +286,11 @@
  */
 static
 krb5_error_code
-kdc_rd_ap_req(kdc_realm_t *kdc_active_realm,
-              krb5_ap_req *apreq, krb5_auth_context auth_context,
-              krb5_db_entry **server, krb5_keyblock **tgskey)
+kdc_rd_ap_req(kdc_realm_t *realm, krb5_ap_req *apreq,
+              krb5_auth_context auth_context, krb5_db_entry **server,
+              krb5_keyblock **tgskey)
 {
+    krb5_context context = realm->realm_context;
     krb5_error_code     retval;
     krb5_enctype        search_enctype = apreq->ticket->enc_part.enctype;
     krb5_boolean        match_enctype = 1;
@@ -309,7 +309,7 @@
         match_enctype = 0;
     }
 
-    retval = kdc_get_server_key(kdc_context, apreq->ticket, 0, match_enctype,
+    retval = kdc_get_server_key(context, apreq->ticket, 0, match_enctype,
                                 server, NULL, NULL);
     if (retval)
         return retval;
@@ -317,22 +317,20 @@
     *tgskey = NULL;
     kvno = apreq->ticket->enc_part.kvno;
     do {
-        krb5_free_keyblock(kdc_context, *tgskey);
-        retval = find_server_key(kdc_context,
-                                 *server, search_enctype, kvno, tgskey, &kvno);
+        krb5_free_keyblock(context, *tgskey);
+        retval = find_server_key(context, *server, search_enctype, kvno,
+                                 tgskey, &kvno);
         if (retval)
             continue;
 
         /* Make the TGS key available to krb5_rd_req_decoded_anyflag() */
-        retval = krb5_auth_con_setuseruserkey(kdc_context, auth_context,
-                                              *tgskey);
+        retval = krb5_auth_con_setuseruserkey(context, auth_context, *tgskey);
         if (retval)
             return retval;
 
-        retval = krb5_rd_req_decoded_anyflag(kdc_context, &auth_context, apreq,
+        retval = krb5_rd_req_decoded_anyflag(context, &auth_context, apreq,
                                              apreq->ticket->server,
-                                             kdc_active_realm->realm_keytab,
-                                             NULL, NULL);
+                                             realm->realm_keytab, NULL, NULL);
 
         /* If the ticket was decrypted, don't try any more keys. */
         if (apreq->ticket->enc_part2 != NULL)
@@ -520,6 +518,62 @@
     return ret;
 }
 
+/* If server has a pac_privsvr_enctype attribute and it differs from tgt_key's
+ * enctype, derive a key of the specified enctype.  Otherwise copy tgt_key. */
+krb5_error_code
+pac_privsvr_key(krb5_context context, krb5_db_entry *server,
+                const krb5_keyblock *tgt_key, krb5_keyblock **key_out)
+{
+    krb5_error_code ret;
+    char *attrval = NULL;
+    krb5_enctype privsvr_enctype;
+    krb5_data prf_input = string2data("pac_privsvr");
+
+    ret = krb5_dbe_get_string(context, server, KRB5_KDB_SK_PAC_PRIVSVR_ENCTYPE,
+                              &attrval);
+    if (ret)
+        return ret;
+    if (attrval == NULL)
+        return krb5_copy_keyblock(context, tgt_key, key_out);
+
+    ret = krb5_string_to_enctype(attrval, &privsvr_enctype);
+    if (ret) {
+        k5_setmsg(context, ret, _("Invalid pac_privsvr_enctype value %s"),
+                  attrval);
+        goto cleanup;
+    }
+
+    if (tgt_key->enctype == privsvr_enctype) {
+        ret = krb5_copy_keyblock(context, tgt_key, key_out);
+    } else {
+        ret = krb5_c_derive_prfplus(context, tgt_key, &prf_input,
+                                    privsvr_enctype, key_out);
+    }
+
+cleanup:
+    krb5_dbe_free_string(context, attrval);
+    return ret;
+}
+
+/* Try verifying a ticket's PAC using a privsvr key either equal to or derived
+ * from tgt_key, respecting the server's pac_privsvr_enctype value if set. */
+static krb5_error_code
+try_verify_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
+               krb5_db_entry *server, krb5_keyblock *server_key,
+               const krb5_keyblock *tgt_key, krb5_pac *pac_out)
+{
+    krb5_error_code ret;
+    krb5_keyblock *privsvr_key;
+
+    ret = pac_privsvr_key(context, server, tgt_key, &privsvr_key);
+    if (ret)
+        return ret;
+    ret = krb5_kdc_verify_ticket(context, enc_tkt, server->princ, server_key,
+                                 privsvr_key, pac_out);
+    krb5_free_keyblock(context, privsvr_key);
+    return ret;
+}
+
 /*
  * If a PAC is present in enc_tkt, verify it and place it in *pac_out.  sprinc
  * is the canonical name of the server principal entry used to decrypt enc_tkt.
@@ -528,7 +582,7 @@
  */
 krb5_error_code
 get_verified_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
-                 krb5_const_principal sprinc, krb5_keyblock *server_key,
+                 krb5_db_entry *server, krb5_keyblock *server_key,
                  krb5_db_entry *tgt, krb5_keyblock *tgt_key, krb5_pac *pac_out)
 {
     krb5_error_code ret;
@@ -540,13 +594,13 @@
     *pac_out = NULL;
 
     /* For local or cross-realm TGTs we only check the server signature. */
-    if (krb5_is_tgs_principal(sprinc)) {
-        return krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
-                                      NULL, pac_out);
+    if (krb5_is_tgs_principal(server->princ)) {
+        return krb5_kdc_verify_ticket(context, enc_tkt, server->princ,
+                                      server_key, NULL, pac_out);
     }
 
-    ret = krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
-                                 tgt_key, pac_out);
+    ret = try_verify_pac(context, enc_tkt, server, server_key, tgt_key,
+                         pac_out);
     if (ret != KRB5KRB_AP_ERR_MODIFIED && ret != KRB5_BAD_ENCTYPE)
         return ret;
 
@@ -559,8 +613,8 @@
         ret = krb5_dbe_decrypt_key_data(context, NULL, kd, &old_key, NULL);
         if (ret)
             return ret;
-        ret = krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
-                                     &old_key, pac_out);
+        ret = try_verify_pac(context, enc_tkt, server, server_key, &old_key,
+                             pac_out);
         krb5_free_keyblock_contents(context, &old_key);
         if (!ret)
             return 0;
@@ -627,15 +681,6 @@
 }
 
 
-/* XXX!  This is a temporary place-holder */
-
-krb5_error_code
-check_hot_list(krb5_ticket *ticket)
-{
-    return 0;
-}
-
-
 /* Convert an API error code to a protocol error code. */
 int
 errcode_to_protocol(krb5_error_code code)
@@ -649,31 +694,25 @@
 /* Return -1 if the AS or TGS request is disallowed due to KDC policy on
  * anonymous tickets. */
 int
-check_anon(kdc_realm_t *kdc_active_realm,
-           krb5_principal client, krb5_principal server)
+check_anon(kdc_realm_t *realm, krb5_principal client, krb5_principal server)
 {
     /* If restrict_anon is set, reject requests from anonymous clients to
      * server principals other than local TGTs. */
-    if (kdc_active_realm->realm_restrict_anon &&
-        krb5_principal_compare_any_realm(kdc_context, client,
+    if (realm->realm_restrict_anon &&
+        krb5_principal_compare_any_realm(realm->realm_context, client,
                                          krb5_anonymous_principal()) &&
         !is_local_tgs_principal(server))
         return -1;
     return 0;
 }
 
-/*
- * Routines that validate a AS request; checks a lot of things.  :-)
- *
- * Returns a Kerberos protocol error number, which is _not_ the same
- * as a com_err error number!
- */
-int
-validate_as_request(kdc_realm_t *kdc_active_realm,
-                    krb5_kdc_req *request, krb5_db_entry *client,
-                    krb5_db_entry *server, krb5_timestamp kdc_time,
-                    const char **status, krb5_pa_data ***e_data)
+krb5_error_code
+validate_as_request(kdc_realm_t *realm, krb5_kdc_req *request,
+                    krb5_db_entry *client, krb5_db_entry *server,
+                    krb5_timestamp kdc_time, const char **status,
+                    krb5_pa_data ***e_data)
 {
+    krb5_context context = realm->realm_context;
     krb5_error_code ret;
 
     /*
@@ -681,16 +720,16 @@
      */
     if (request->kdc_options & AS_INVALID_OPTIONS) {
         *status = "INVALID AS OPTIONS";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /* The client must not be expired */
     if (client->expiration && ts_after(kdc_time, client->expiration)) {
         *status = "CLIENT EXPIRED";
         if (vague_errors)
-            return(KRB_ERR_GENERIC);
+            return KRB5KRB_ERR_GENERIC;
         else
-            return(KDC_ERR_NAME_EXP);
+            return KRB5KDC_ERR_NAME_EXP;
     }
 
     /* The client's password must not be expired, unless the server is
@@ -699,15 +738,15 @@
         !isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
         *status = "CLIENT KEY EXPIRED";
         if (vague_errors)
-            return(KRB_ERR_GENERIC);
+            return KRB5KRB_ERR_GENERIC;
         else
-            return(KDC_ERR_KEY_EXP);
+            return KRB5KDC_ERR_KEY_EXP;
     }
 
     /* The server must not be expired */
     if (server->expiration && ts_after(kdc_time, server->expiration)) {
         *status = "SERVICE EXPIRED";
-        return(KDC_ERR_SERVICE_EXP);
+        return KRB5KDC_ERR_SERVICE_EXP;
     }
 
     /*
@@ -717,7 +756,7 @@
     if (isflagset(client->attributes, KRB5_KDB_REQUIRES_PWCHANGE) &&
         !isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
         *status = "REQUIRED PWCHANGE";
-        return(KDC_ERR_KEY_EXP);
+        return KRB5KDC_ERR_KEY_EXP;
     }
 
     /* Client and server must allow postdating tickets */
@@ -726,39 +765,36 @@
         (isflagset(client->attributes, KRB5_KDB_DISALLOW_POSTDATED) ||
          isflagset(server->attributes, KRB5_KDB_DISALLOW_POSTDATED))) {
         *status = "POSTDATE NOT ALLOWED";
-        return(KDC_ERR_CANNOT_POSTDATE);
+        return KRB5KDC_ERR_CANNOT_POSTDATE;
     }
 
     /* Check to see if client is locked out */
     if (isflagset(client->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
         *status = "CLIENT LOCKED OUT";
-        return(KDC_ERR_CLIENT_REVOKED);
+        return KRB5KDC_ERR_CLIENT_REVOKED;
     }
 
     /* Check to see if server is locked out */
     if (isflagset(server->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
         *status = "SERVICE LOCKED OUT";
-        return(KDC_ERR_S_PRINCIPAL_UNKNOWN);
+        return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
     }
 
     /* Check to see if server is allowed to be a service */
     if (isflagset(server->attributes, KRB5_KDB_DISALLOW_SVR)) {
         *status = "SERVICE NOT ALLOWED";
-        return(KDC_ERR_MUST_USE_USER2USER);
+        return KRB5KDC_ERR_MUST_USE_USER2USER;
     }
 
-    if (check_anon(kdc_active_realm, client->princ, request->server) != 0) {
+    if (check_anon(realm, client->princ, request->server) != 0) {
         *status = "ANONYMOUS NOT ALLOWED";
-        return(KDC_ERR_POLICY);
+        return KRB5KDC_ERR_POLICY;
     }
 
     /* Perform KDB module policy checks. */
-    ret = krb5_db_check_policy_as(kdc_context, request, client, server,
-                                  kdc_time, status, e_data);
-    if (ret && ret != KRB5_PLUGIN_OP_NOTSUPP)
-        return errcode_to_protocol(ret);
-
-    return 0;
+    ret = krb5_db_check_policy_as(context, request, client, server, kdc_time,
+                                  status, e_data);
+    return (ret == KRB5_PLUGIN_OP_NOTSUPP) ? 0 : ret;
 }
 
 /*
@@ -773,6 +809,10 @@
 {
     krb5_flags flags;
 
+    /* Validation and renewal TGS requests preserve the header ticket flags. */
+    if ((reqflags & (KDC_OPT_VALIDATE | KDC_OPT_RENEW)) && header_enc != NULL)
+        return header_enc->flags & ~TKT_FLG_INVALID;
+
     /* Indicate support for encrypted padata (RFC 6806), and set flags based on
      * request options and the header ticket. */
     flags = OPTS2FLAGS(reqflags) | TKT_FLG_ENC_PA_REP;
@@ -993,7 +1033,7 @@
 
 /* Return true if we believe server can support enctype as a session key. */
 static krb5_boolean
-dbentry_supports_enctype(kdc_realm_t *kdc_active_realm, krb5_db_entry *server,
+dbentry_supports_enctype(krb5_context context, krb5_db_entry *server,
                          krb5_enctype enctype)
 {
     krb5_error_code     retval;
@@ -1004,12 +1044,11 @@
     krb5_boolean        in_list;
 
     /* Look up the supported session key enctypes list in the KDB. */
-    retval = krb5_dbe_get_string(kdc_context, server,
-                                 KRB5_KDB_SK_SESSION_ENCTYPES,
+    retval = krb5_dbe_get_string(context, server, KRB5_KDB_SK_SESSION_ENCTYPES,
                                  &etypes_str);
     if (retval == 0 && etypes_str != NULL && *etypes_str != '\0') {
         /* Pass a fake profile key for tracing of unrecognized tokens. */
-        retval = krb5int_parse_enctype_list(kdc_context, "KDB-session_etypes",
+        retval = krb5int_parse_enctype_list(context, "KDB-session_etypes",
                                             etypes_str, default_enctypes,
                                             &etypes);
         if (retval == 0 && etypes != NULL && etypes0) {
@@ -1023,8 +1062,12 @@
     free(etypes_str);
     free(etypes);
 
+    /* Assume every server without a session_enctypes attribute supports
+     * aes256-cts-hmac-sha1-96. */
+    if (enctype == ENCTYPE_AES256_CTS_HMAC_SHA1_96)
+        return TRUE;
     /* Assume the server supports any enctype it has a long-term key for. */
-    return !krb5_dbe_find_enctype(kdc_context, server, enctype, -1, 0, &datap);
+    return !krb5_dbe_find_enctype(context, server, enctype, -1, 0, &datap);
 }
 
 /*
@@ -1033,7 +1076,7 @@
  * requested, and what the KDC and the application server can support.
  */
 krb5_enctype
-select_session_keytype(kdc_realm_t *kdc_active_realm, krb5_db_entry *server,
+select_session_keytype(krb5_context context, krb5_db_entry *server,
                        int nktypes, krb5_enctype *ktype)
 {
     int         i;
@@ -1042,10 +1085,20 @@
         if (!krb5_c_valid_enctype(ktypei))
             continue;
 
-        if (!krb5_is_permitted_enctype(kdc_context, ktypei))
+        if (!krb5_is_permitted_enctype(context, ktypei))
+            continue;
+
+        /*
+         * Prevent these deprecated enctypes from being used as session keys
+         * unless they are explicitly allowed.  In the future they will be more
+         * comprehensively disabled and eventually removed.
+         */
+        if (ktypei == ENCTYPE_DES3_CBC_SHA1 && !context->allow_des3)
+            continue;
+        if (ktypei == ENCTYPE_ARCFOUR_HMAC && !context->allow_rc4)
             continue;
 
-        if (dbentry_supports_enctype(kdc_active_realm, server, ktypei))
+        if (dbentry_supports_enctype(context, server, ktypei))
             return ktypei;
     }
 
@@ -1138,7 +1191,7 @@
         k5_buf_add_fmt(&buf, "%s%s(%ld)", i ? ", " : "", name, (long)ktypei);
     }
     k5_buf_add(&buf, "}");
-    return buf.data;
+    return k5_buf_cstring(&buf);
 }
 
 char *
@@ -1167,7 +1220,7 @@
     }
 
     k5_buf_add(&buf, "}");
-    return buf.data;
+    return k5_buf_cstring(&buf);
 }
 
 static krb5_error_code
@@ -1246,8 +1299,7 @@
  * Legacy protocol transition (Windows 2003 and above)
  */
 static krb5_error_code
-kdc_process_for_user(kdc_realm_t *kdc_active_realm,
-                     krb5_pa_data *pa_data,
+kdc_process_for_user(krb5_context context, krb5_pa_data *pa_data,
                      krb5_keyblock *tgs_session,
                      krb5_pa_s4u_x509_user **s4u_x509_user,
                      const char **status)
@@ -1265,22 +1317,22 @@
         return code;
     }
 
-    code = verify_for_user_checksum(kdc_context, tgs_session, for_user);
+    code = verify_for_user_checksum(context, tgs_session, for_user);
     if (code) {
         *status = "INVALID_S4U2SELF_CHECKSUM";
-        krb5_free_pa_for_user(kdc_context, for_user);
+        krb5_free_pa_for_user(context, for_user);
         return code;
     }
 
     *s4u_x509_user = calloc(1, sizeof(krb5_pa_s4u_x509_user));
     if (*s4u_x509_user == NULL) {
-        krb5_free_pa_for_user(kdc_context, for_user);
+        krb5_free_pa_for_user(context, for_user);
         return ENOMEM;
     }
 
     (*s4u_x509_user)->user_id.user = for_user->user;
     for_user->user = NULL;
-    krb5_free_pa_for_user(kdc_context, for_user);
+    krb5_free_pa_for_user(context, for_user);
 
     return 0;
 }
@@ -1496,14 +1548,11 @@
  * local, look up the client and set *princ_ptr to its DB entry.
  */
 krb5_error_code
-kdc_process_s4u2self_req(kdc_realm_t *kdc_active_realm,
-                         krb5_kdc_req *request,
+kdc_process_s4u2self_req(krb5_context context, krb5_kdc_req *request,
                          const krb5_db_entry *server,
-                         krb5_keyblock *tgs_subkey,
-                         krb5_keyblock *tgs_session,
+                         krb5_keyblock *tgs_subkey, krb5_keyblock *tgs_session,
                          krb5_pa_s4u_x509_user **s4u_x509_user,
-                         krb5_db_entry **princ_ptr,
-                         const char **status)
+                         krb5_db_entry **princ_ptr, const char **status)
 {
     krb5_error_code             code;
     krb5_pa_data                *pa_data;
@@ -1512,27 +1561,19 @@
 
     *princ_ptr = NULL;
 
-    pa_data = krb5int_find_pa_data(kdc_context,
-                                   request->padata, KRB5_PADATA_S4U_X509_USER);
+    pa_data = krb5int_find_pa_data(context, request->padata,
+                                   KRB5_PADATA_S4U_X509_USER);
     if (pa_data != NULL) {
-        code = kdc_process_s4u_x509_user(kdc_context,
-                                         request,
-                                         pa_data,
-                                         tgs_subkey,
-                                         tgs_session,
-                                         s4u_x509_user,
-                                         status);
+        code = kdc_process_s4u_x509_user(context, request, pa_data, tgs_subkey,
+                                         tgs_session, s4u_x509_user, status);
         if (code != 0)
             return code;
     } else {
-        pa_data = krb5int_find_pa_data(kdc_context,
-                                       request->padata, KRB5_PADATA_FOR_USER);
+        pa_data = krb5int_find_pa_data(context, request->padata,
+                                       KRB5_PADATA_FOR_USER);
         if (pa_data != NULL) {
-            code = kdc_process_for_user(kdc_active_realm,
-                                        pa_data,
-                                        tgs_session,
-                                        s4u_x509_user,
-                                        status);
+            code = kdc_process_for_user(context, pa_data, tgs_session,
+                                        s4u_x509_user, status);
             if (code != 0)
                 return code;
         } else
@@ -1542,17 +1583,16 @@
 
     if (data_eq(server->princ->realm, id->user->realm)) {
         if (id->subject_cert.length != 0) {
-            code = krb5_db_get_s4u_x509_principal(kdc_context,
+            code = krb5_db_get_s4u_x509_principal(context,
                                                   &id->subject_cert, id->user,
                                                   KRB5_KDB_FLAG_CLIENT,
                                                   &princ);
             if (code == 0 && id->user->length == 0) {
-                krb5_free_principal(kdc_context, id->user);
-                code = krb5_copy_principal(kdc_context, princ->princ,
-                                           &id->user);
+                krb5_free_principal(context, id->user);
+                code = krb5_copy_principal(context, princ->princ, &id->user);
             }
         } else {
-            code = krb5_db_get_principal(kdc_context, id->user,
+            code = krb5_db_get_principal(context, id->user,
                                          KRB5_KDB_FLAG_CLIENT, &princ);
         }
         if (code == KRB5_KDB_NOENTRY) {
@@ -1578,7 +1618,7 @@
  * S4U2Self tickets according to MS-SFU 3.2.5.1.2. */
 krb5_error_code
 s4u2self_forwardable(krb5_context context, krb5_db_entry *server,
-                     krb5_enc_tkt_part *tkt)
+                     krb5_flags *tktflags)
 {
     krb5_error_code ret;
 
@@ -1590,114 +1630,27 @@
      * targets for traditional S4U2Proxy. */
     ret = krb5_db_check_allowed_to_delegate(context, NULL, server, NULL);
     if (!ret)
-        tkt->flags &= ~TKT_FLG_FORWARDABLE;
+        *tktflags &= ~TKT_FLG_FORWARDABLE;
 
     if (ret == KRB5KDC_ERR_BADOPTION || ret == KRB5_PLUGIN_OP_NOTSUPP)
         return 0;
     return ret;
 }
 
-/*
- * Determine if an S4U2Proxy request is authorized.  Set **stkt_ad_info to the
- * KDB authdata handle for the second ticket if the KDB module supplied one.
- * Set *stkt_authdata_client to the subject client name if the KDB module
- * supplied one; it must do so for a cross-realm request to be authorized.
- */
-krb5_error_code
-kdc_process_s4u2proxy_req(kdc_realm_t *kdc_active_realm, unsigned int flags,
-                          krb5_kdc_req *request, krb5_pac header_pac,
-                          const krb5_enc_tkt_part *t2enc, krb5_pac t2_pac,
-                          const krb5_db_entry *server,
-                          krb5_keyblock *server_key,
-                          krb5_const_principal server_princ,
-                          const krb5_db_entry *proxy,
-                          krb5_principal *stkt_pac_client,
-                          const char **status)
-{
-    krb5_error_code errcode;
-    krb5_boolean support_rbcd;
-    krb5_principal client_princ = t2enc->client, t2_pac_princ = NULL;
-
-    *stkt_pac_client = NULL;
-
-    /* Check if the client supports resource-based constrained delegation. */
-    errcode = kdc_get_pa_pac_rbcd(kdc_context, request->padata, &support_rbcd);
-    if (errcode)
-        return errcode;
-
-    /* For an RBCD final request, recover the reply ticket client name from
-     * the evidence ticket PAC. */
-    if (flags & KRB5_KDB_FLAG_CROSS_REALM) {
-        if (get_pac_princ_with_realm(kdc_context, t2_pac, &t2_pac_princ,
-                                     NULL) != 0) {
-            *status = "RBCD_PAC_PRINC";
-            errcode = KRB5KDC_ERR_BADOPTION;
-            goto done;
-        }
-        client_princ = t2_pac_princ;
-    }
-
-    /* If both are in the same realm, try allowed_to_delegate first. */
-    if (krb5_realm_compare(kdc_context, server->princ, request->server)) {
-
-        errcode = krb5_db_check_allowed_to_delegate(kdc_context, client_princ,
-                                                    server, request->server);
-        if (errcode != KRB5KDC_ERR_BADOPTION &&
-            errcode != KRB5_PLUGIN_OP_NOTSUPP)
-            goto done;
-
-        /* Fall back to resource-based constrained-delegation. */
-    }
-
-    if (!support_rbcd) {
-        *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
-        errcode = KRB5KDC_ERR_BADOPTION;
-        goto done;
-    }
-
-    /* If we are issuing a referral, the KDC in the resource realm will check
-     * if delegation is allowed. */
-    if (isflagset(flags, KRB5_KDB_FLAG_ISSUING_REFERRAL)) {
-        errcode = 0;
-        goto done;
-    }
-
-    errcode = krb5_db_allowed_to_delegate_from(kdc_context, client_princ,
-                                               server_princ, header_pac,
-                                               proxy);
-    if (errcode == KRB5_PLUGIN_OP_NOTSUPP) {
-        *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
-        errcode = KRB5KDC_ERR_BADOPTION;
-        goto done;
-    } else if (errcode) {
-        *status = "NOT_ALLOWED_TO_DELEGATE";
-        goto done;
-    }
-
-    *stkt_pac_client = t2_pac_princ;
-    t2_pac_princ = NULL;
-
-done:
-    krb5_free_principal(kdc_context, t2_pac_princ);
-    return errcode;
-}
-
 krb5_error_code
-kdc_check_transited_list(kdc_realm_t *kdc_active_realm,
-                         const krb5_data *trans,
-                         const krb5_data *realm1,
-                         const krb5_data *realm2)
+kdc_check_transited_list(krb5_context context, const krb5_data *trans,
+                         const krb5_data *realm1, const krb5_data *realm2)
 {
     krb5_error_code             code;
 
     /* Check against the KDB module.  Treat this answer as authoritative if the
      * method is supported and doesn't explicitly pass control. */
-    code = krb5_db_check_transited_realms(kdc_context, trans, realm1, realm2);
+    code = krb5_db_check_transited_realms(context, trans, realm1, realm2);
     if (code != KRB5_PLUGIN_OP_NOTSUPP && code != KRB5_PLUGIN_NO_HANDLE)
         return code;
 
     /* Check using krb5.conf capaths or hierarchical relationships. */
-    return krb5_check_transited_list(kdc_context, trans, realm1, realm2);
+    return krb5_check_transited_list(context, trans, realm1, realm2);
 }
 
 krb5_boolean
@@ -1715,12 +1668,9 @@
 }
 
 void
-kdc_get_ticket_endtime(kdc_realm_t *kdc_active_realm,
-                       krb5_timestamp starttime,
-                       krb5_timestamp endtime,
-                       krb5_timestamp till,
-                       krb5_db_entry *client,
-                       krb5_db_entry *server,
+kdc_get_ticket_endtime(kdc_realm_t *realm, krb5_timestamp starttime,
+                       krb5_timestamp endtime, krb5_timestamp till,
+                       krb5_db_entry *client, krb5_db_entry *server,
                        krb5_timestamp *out_endtime)
 {
     krb5_timestamp until;
@@ -1741,26 +1691,28 @@
         life = min(life, client->max_life);
     if (server->max_life != 0)
         life = min(life, server->max_life);
-    if (kdc_active_realm->realm_maxlife != 0)
-        life = min(life, kdc_active_realm->realm_maxlife);
+    if (realm->realm_maxlife != 0)
+        life = min(life, realm->realm_maxlife);
 
     *out_endtime = ts_incr(starttime, life);
 }
 
 /*
- * Set tkt->renew_till to the requested renewable lifetime as modified by
- * policy.  Set the TKT_FLG_RENEWABLE flag if we set a nonzero renew_till.
- * client and tgt may be NULL.
+ * Set times->renew_till to the requested renewable lifetime as modified by
+ * policy.  Set the TKT_FLG_RENEWABLE bit in *tktflags if we set a nonzero
+ * renew_till.  *times must be filled in except for renew_till.  client and tgt
+ * may be NULL.
  */
 void
 kdc_get_ticket_renewtime(kdc_realm_t *realm, krb5_kdc_req *request,
                          krb5_enc_tkt_part *tgt, krb5_db_entry *client,
-                         krb5_db_entry *server, krb5_enc_tkt_part *tkt)
+                         krb5_db_entry *server, krb5_flags *tktflags,
+                         krb5_ticket_times *times)
 {
     krb5_timestamp rtime, max_rlife;
 
-    clear(tkt->flags, TKT_FLG_RENEWABLE);
-    tkt->times.renew_till = 0;
+    *tktflags &= ~TKT_FLG_RENEWABLE;
+    times->renew_till = 0;
 
     /* Don't issue renewable tickets if the client or server don't allow it,
      * or if this is a TGS request and the TGT isn't renewable. */
@@ -1775,7 +1727,7 @@
     if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE))
         rtime = request->rtime ? request->rtime : kdc_infinity;
     else if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE_OK) &&
-             ts_after(request->till, tkt->times.endtime))
+             ts_after(request->till, times->endtime))
         rtime = request->till;
     else
         return;
@@ -1786,16 +1738,16 @@
     max_rlife = min(server->max_renewable_life, realm->realm_maxrlife);
     if (client != NULL)
         max_rlife = min(max_rlife, client->max_renewable_life);
-    rtime = ts_min(rtime, ts_incr(tkt->times.starttime, max_rlife));
+    rtime = ts_min(rtime, ts_incr(times->starttime, max_rlife));
 
     /* If the client only specified renewable-ok, don't issue a renewable
      * ticket unless the truncated renew time exceeds the ticket end time. */
     if (!isflagset(request->kdc_options, KDC_OPT_RENEWABLE) &&
-        !ts_after(rtime, tkt->times.endtime))
+        !ts_after(rtime, times->endtime))
         return;
 
-    setflag(tkt->flags, TKT_FLG_RENEWABLE);
-    tkt->times.renew_till = rtime;
+    *tktflags |= TKT_FLG_RENEWABLE;
+    times->renew_till = rtime;
 }
 
 /**

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/kdc_util.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/kdc_util.h Changed

@@ -36,7 +36,6 @@
 #include "realm_data.h"
 #include "reqstate.h"
 
-krb5_error_code check_hot_list (krb5_ticket *);
 krb5_boolean krb5_is_tgs_principal (krb5_const_principal);
 krb5_boolean is_cross_tgs_principal(krb5_const_principal);
 krb5_boolean is_local_tgs_principal(krb5_const_principal);
@@ -78,21 +77,29 @@
               krb5_db_entry *candidate, krb5_db_entry **alias_out,
               krb5_db_entry **storage_out, krb5_keyblock *kb_out);
 
-int
+krb5_error_code
 validate_as_request (kdc_realm_t *, krb5_kdc_req *, krb5_db_entry *,
                      krb5_db_entry *, krb5_timestamp,
                      const char **, krb5_pa_data ***);
 
-int
-validate_tgs_request(kdc_realm_t *kdc_active_realm,
-                     krb5_kdc_req *request, krb5_db_entry *server,
-                     krb5_ticket *ticket, krb5_pac pac,
-                     const krb5_ticket *stkt, krb5_pac stkt_pac,
-                     krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
-                     krb5_pa_s4u_x509_user *s4u_x509_user,
-                     krb5_db_entry *s4u2self_client,
-                     krb5_boolean is_crossrealm, krb5_boolean is_referral,
-                     const char **status, krb5_pa_data ***e_data);
+krb5_error_code
+check_tgs_constraints(kdc_realm_t *realm, krb5_kdc_req *request,
+                      krb5_db_entry *server, krb5_ticket *ticket, krb5_pac pac,
+                      const krb5_ticket *stkt, krb5_pac stkt_pac,
+                      krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
+                      krb5_pa_s4u_x509_user *s4u_x509_user,
+                      krb5_db_entry *s4u2self_client,
+                      krb5_boolean is_crossrealm, krb5_boolean is_referral,
+                      const char **status, krb5_pa_data ***e_data);
+
+krb5_error_code
+check_tgs_policy(kdc_realm_t *realm, krb5_kdc_req *request,
+                 krb5_db_entry *server, krb5_ticket *ticket,
+                 krb5_pac pac, const krb5_ticket *stkt, krb5_pac stkt_pac,
+                 krb5_principal stkt_pac_client, krb5_db_entry *stkt_server,
+                 krb5_timestamp kdc_time, krb5_boolean is_crossrealm,
+                 krb5_boolean is_referral, const char **status,
+                 krb5_pa_data ***e_data);
 
 krb5_flags
 get_ticket_flags(krb5_flags reqflags, krb5_db_entry *client,
@@ -106,10 +113,8 @@
 fetch_asn1_field (unsigned char *, unsigned int, unsigned int, krb5_data *);
 
 krb5_enctype
-select_session_keytype (kdc_realm_t *kdc_active_realm,
-                        krb5_db_entry *server,
-                        int nktypes,
-                        krb5_enctype *ktypes);
+select_session_keytype (krb5_context context, krb5_db_entry *server,
+                        int nktypes, krb5_enctype *ktypes);
 
 void limit_string (char *name);
 
@@ -226,24 +231,16 @@
                     krb5_data ***indicators_out);
 
 krb5_error_code
-handle_authdata (kdc_realm_t *kdc_active_realm,
-                 unsigned int flags,
-                 krb5_db_entry *client,
-                 krb5_db_entry *server,
-                 krb5_db_entry *subject_server,
-                 krb5_db_entry *local_tgt,
-                 krb5_keyblock *local_tgt_key,
-                 krb5_keyblock *client_key,
-                 krb5_keyblock *server_key,
-                 krb5_keyblock *header_key,
-                 krb5_keyblock *replaced_reply_key,
-                 krb5_data *req_pkt,
-                 krb5_kdc_req *request,
-                 krb5_const_principal altcprinc,
-                 krb5_pac subject_pac,
-                 krb5_enc_tkt_part *enc_tkt_request,
-                 krb5_data ***auth_indicators,
-                 krb5_enc_tkt_part *enc_tkt_reply);
+handle_authdata(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+                krb5_db_entry *server, krb5_db_entry *subject_server,
+                krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+                krb5_keyblock *client_key, krb5_keyblock *server_key,
+                krb5_keyblock *header_key, krb5_keyblock *replaced_reply_key,
+                krb5_data *req_pkt, krb5_kdc_req *request,
+                krb5_const_principal altcprinc, krb5_pac subject_pac,
+                krb5_enc_tkt_part *enc_tkt_request,
+                krb5_data ***auth_indicators,
+                krb5_enc_tkt_part *enc_tkt_reply);
 
 /* replay.c */
 krb5_error_code kdc_init_lookaside(krb5_context context);
@@ -256,8 +253,12 @@
 void reset_for_hangup(void *);
 
 krb5_error_code
+pac_privsvr_key(krb5_context context, krb5_db_entry *server,
+                const krb5_keyblock *tgt_key, krb5_keyblock **key_out);
+
+krb5_error_code
 get_verified_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
-                 krb5_const_principal sprinc, krb5_keyblock *server_key,
+                 krb5_db_entry *server, krb5_keyblock *server_key,
                  krb5_db_entry *tgt, krb5_keyblock *tgt_key,
                  krb5_pac *pac_out);
 
@@ -278,18 +279,15 @@
                   krb5_boolean is_referral);
 
 krb5_error_code
-kdc_process_s4u2self_req (kdc_realm_t *kdc_active_realm,
-                          krb5_kdc_req *request,
-                          const krb5_db_entry *server,
-                          krb5_keyblock *tgs_subkey,
-                          krb5_keyblock *tgs_session,
-                          krb5_pa_s4u_x509_user **s4u2self_req,
-                          krb5_db_entry **princ_ptr,
-                          const char **status);
+kdc_process_s4u2self_req(krb5_context context, krb5_kdc_req *request,
+                         const krb5_db_entry *server,
+                         krb5_keyblock *tgs_subkey, krb5_keyblock *tgs_session,
+                         krb5_pa_s4u_x509_user **s4u2self_req,
+                         krb5_db_entry **princ_ptr, const char **status);
 
 krb5_error_code
 s4u2self_forwardable(krb5_context context, krb5_db_entry *server,
-                     krb5_enc_tkt_part *enc_tkt);
+                     krb5_flags *tktflags);
 
 krb5_error_code
 kdc_make_s4u2self_rep (krb5_context context,
@@ -300,35 +298,20 @@
                        krb5_enc_kdc_rep_part *reply_encpart);
 
 krb5_error_code
-kdc_process_s4u2proxy_req(kdc_realm_t *kdc_active_realm, unsigned int flags,
-                          krb5_kdc_req *request, krb5_pac header_pac,
-                          const krb5_enc_tkt_part *t2enc, krb5_pac t2_pac,
-                          const krb5_db_entry *server,
-                          krb5_keyblock *server_key,
-                          krb5_const_principal server_princ,
-                          const krb5_db_entry *proxy,
-                          krb5_principal *stkt_ad_client,
-                          const char **status);
-
-krb5_error_code
-kdc_check_transited_list (kdc_realm_t *kdc_active_realm,
-                          const krb5_data *trans,
-                          const krb5_data *realm1,
-                          const krb5_data *realm2);
+kdc_check_transited_list(krb5_context context, const krb5_data *trans,
+                         const krb5_data *realm1, const krb5_data *realm2);
 
 void
-kdc_get_ticket_endtime(kdc_realm_t *kdc_active_realm,
-                       krb5_timestamp now,
-                       krb5_timestamp endtime,
-                       krb5_timestamp till,
-                       krb5_db_entry *client,
-                       krb5_db_entry *server,
+kdc_get_ticket_endtime(kdc_realm_t *realm, krb5_timestamp now,
+                       krb5_timestamp endtime, krb5_timestamp till,
+                       krb5_db_entry *client, krb5_db_entry *server,
                        krb5_timestamp *out_endtime);
 
 void
 kdc_get_ticket_renewtime(kdc_realm_t *realm, krb5_kdc_req *request,
                          krb5_enc_tkt_part *tgt, krb5_db_entry *client,
-                         krb5_db_entry *server, krb5_enc_tkt_part *tkt);
+                         krb5_db_entry *server, krb5_flags *tktflags,
+                         krb5_ticket_times *times);
 
 void
 log_as_req(krb5_context context,
@@ -545,8 +528,8 @@
 /* Copy appropriate header ticket flags to new ticket. */
 #define COPY_TKT_FLAGS(x) (x & TGS_COPIED_FLAGS_MASK)
 
-int check_anon(kdc_realm_t *kdc_active_realm,
-               krb5_principal client, krb5_principal server);
+int check_anon(kdc_realm_t *realm, krb5_principal client,
+               krb5_principal server);
 int errcode_to_protocol(krb5_error_code code);
 
 char *data2string(krb5_data *d);

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/main.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/main.c Changed

@@ -608,7 +608,7 @@
     krb5_boolean        def_restrict_anon;
     char                *def_udp_listen = NULL;
     char                *def_tcp_listen = NULL;
-    krb5_pointer        aprof = NULL;
+    krb5_pointer        aprof = kcontext->profile;
     const char          *hierarchy3;
     char                *no_referral = NULL;
     char                *hostbased = NULL;
@@ -617,40 +617,38 @@
 
     extern char *optarg;
 
-    if (!krb5_aprof_init(DEFAULT_KDC_PROFILE, KDC_PROFILE_ENV, &aprof)) {
-        hierarchy0 = KRB5_CONF_KDCDEFAULTS;
-        hierarchy1 = KRB5_CONF_KDC_LISTEN;
-        hierarchy2 = (char *) NULL;
-        if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen)) {
-            hierarchy1 = KRB5_CONF_KDC_PORTS;
-            if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen))
-                def_udp_listen = NULL;
-        }
-        hierarchy1 = KRB5_CONF_KDC_TCP_LISTEN;
-        if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen)) {
-            hierarchy1 = KRB5_CONF_KDC_TCP_PORTS;
-            if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen))
-                def_tcp_listen = NULL;
-        }
-        hierarchy1 = KRB5_CONF_KDC_MAX_DGRAM_REPLY_SIZE;
-        if (krb5_aprof_get_int32(aprof, hierarchy, TRUE, &max_dgram_reply_size))
-            max_dgram_reply_size = MAX_DGRAM_SIZE;
-        if (tcp_listen_backlog_out != NULL) {
-            hierarchy1 = KRB5_CONF_KDC_TCP_LISTEN_BACKLOG;
-            if (krb5_aprof_get_int32(aprof, hierarchy, TRUE,
-                                     tcp_listen_backlog_out))
-                *tcp_listen_backlog_out = DEFAULT_TCP_LISTEN_BACKLOG;
-        }
-        hierarchy1 = KRB5_CONF_RESTRICT_ANONYMOUS_TO_TGT;
-        if (krb5_aprof_get_boolean(aprof, hierarchy, TRUE, &def_restrict_anon))
-            def_restrict_anon = FALSE;
-        hierarchy1 = KRB5_CONF_NO_HOST_REFERRAL;
-        if (krb5_aprof_get_string_all(aprof, hierarchy, &no_referral))
-            no_referral = 0;
-        hierarchy1 = KRB5_CONF_HOST_BASED_SERVICES;
-        if (krb5_aprof_get_string_all(aprof, hierarchy, &hostbased))
-            hostbased = 0;
+    hierarchy0 = KRB5_CONF_KDCDEFAULTS;
+    hierarchy1 = KRB5_CONF_KDC_LISTEN;
+    hierarchy2 = NULL;
+    if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen)) {
+        hierarchy1 = KRB5_CONF_KDC_PORTS;
+        if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen))
+            def_udp_listen = NULL;
+    }
+    hierarchy1 = KRB5_CONF_KDC_TCP_LISTEN;
+    if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen)) {
+        hierarchy1 = KRB5_CONF_KDC_TCP_PORTS;
+        if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen))
+            def_tcp_listen = NULL;
+    }
+    hierarchy1 = KRB5_CONF_KDC_MAX_DGRAM_REPLY_SIZE;
+    if (krb5_aprof_get_int32(aprof, hierarchy, TRUE, &max_dgram_reply_size))
+        max_dgram_reply_size = MAX_DGRAM_SIZE;
+    if (tcp_listen_backlog_out != NULL) {
+        hierarchy1 = KRB5_CONF_KDC_TCP_LISTEN_BACKLOG;
+        if (krb5_aprof_get_int32(aprof, hierarchy, TRUE,
+                                 tcp_listen_backlog_out))
+            *tcp_listen_backlog_out = DEFAULT_TCP_LISTEN_BACKLOG;
     }
+    hierarchy1 = KRB5_CONF_RESTRICT_ANONYMOUS_TO_TGT;
+    if (krb5_aprof_get_boolean(aprof, hierarchy, TRUE, &def_restrict_anon))
+        def_restrict_anon = FALSE;
+    hierarchy1 = KRB5_CONF_NO_HOST_REFERRAL;
+    if (krb5_aprof_get_string_all(aprof, hierarchy, &no_referral))
+        no_referral = 0;
+    hierarchy1 = KRB5_CONF_HOST_BASED_SERVICES;
+    if (krb5_aprof_get_string_all(aprof, hierarchy, &hostbased))
+        hostbased = 0;
 
     if (def_udp_listen == NULL) {
         def_udp_listen = strdup(DEFAULT_KDC_UDP_PORTLIST);
@@ -836,8 +834,6 @@
         free(hostbased);
     if (no_referral)
         free(no_referral);
-    if (aprof)
-        krb5_aprof_finish(aprof);
 
     return;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/realm_data.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/realm_data.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/t_ndr.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/t_ndr.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kdc/tgs_policy.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kdc/tgs_policy.c Changed

@@ -64,21 +64,21 @@
 
 static const struct tgsflagrule tgsflagrules = {
     { KDC_OPT_FORWARDED, TKT_FLG_FORWARDABLE,
-      "TGT NOT FORWARDABLE", KDC_ERR_BADOPTION },
+      "TGT NOT FORWARDABLE", KRB5KDC_ERR_BADOPTION },
     { KDC_OPT_PROXY, TKT_FLG_PROXIABLE,
-      "TGT NOT PROXIABLE", KDC_ERR_BADOPTION },
+      "TGT NOT PROXIABLE", KRB5KDC_ERR_BADOPTION },
     { (KDC_OPT_ALLOW_POSTDATE | KDC_OPT_POSTDATED), TKT_FLG_MAY_POSTDATE,
-      "TGT NOT POSTDATABLE", KDC_ERR_BADOPTION },
+      "TGT NOT POSTDATABLE", KRB5KDC_ERR_BADOPTION },
     { KDC_OPT_VALIDATE, TKT_FLG_INVALID,
-      "VALIDATE VALID TICKET", KDC_ERR_BADOPTION },
+      "VALIDATE VALID TICKET", KRB5KDC_ERR_BADOPTION },
     { KDC_OPT_RENEW, TKT_FLG_RENEWABLE,
-      "TICKET NOT RENEWABLE", KDC_ERR_BADOPTION }
+      "TICKET NOT RENEWABLE", KRB5KDC_ERR_BADOPTION }
 };
 
 /*
  * Some TGS-REQ options require that the ticket have corresponding flags set.
  */
-static int
+static krb5_error_code
 check_tgs_opts(krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
 {
     size_t i;
@@ -98,7 +98,7 @@
     if (isflagset(tkt->enc_part2->flags, TKT_FLG_INVALID) &&
         !isflagset(req->kdc_options, KDC_OPT_VALIDATE)) {
         *status = "TICKET NOT VALID";
-        return KRB_AP_ERR_TKT_NYV;
+        return KRB5KRB_AP_ERR_TKT_NYV;
     }
 
     return 0;
@@ -106,17 +106,17 @@
 
 static const struct tgsflagrule svcdenyrules = {
     { KDC_OPT_RENEWABLE, KRB5_KDB_DISALLOW_RENEWABLE,
-      "NON-RENEWABLE TICKET", KDC_ERR_POLICY },
+      "NON-RENEWABLE TICKET", KRB5KDC_ERR_POLICY },
     { KDC_OPT_ALLOW_POSTDATE, KRB5_KDB_DISALLOW_POSTDATED,
-      "NON-POSTDATABLE TICKET", KDC_ERR_CANNOT_POSTDATE },
+      "NON-POSTDATABLE TICKET", KRB5KDC_ERR_CANNOT_POSTDATE },
     { KDC_OPT_ENC_TKT_IN_SKEY, KRB5_KDB_DISALLOW_DUP_SKEY,
-      "DUP_SKEY DISALLOWED", KDC_ERR_POLICY }
+      "DUP_SKEY DISALLOWED", KRB5KDC_ERR_POLICY }
 };
 
 /*
  * A service principal can forbid some TGS-REQ options.
  */
-static int
+static krb5_error_code
 check_tgs_svc_deny_opts(krb5_kdc_req *req, krb5_db_entry *server,
                         krb5_ticket *tkt, krb5_timestamp kdc_time,
                         const char **status)
@@ -140,24 +140,24 @@
 /*
  * A service principal can deny all TGS-REQs for it.
  */
-static int
+static krb5_error_code
 check_tgs_svc_deny_all(krb5_kdc_req *req, krb5_db_entry *server,
                        krb5_ticket *tkt, krb5_timestamp kdc_time,
                        const char **status)
 {
     if (server->attributes & KRB5_KDB_DISALLOW_ALL_TIX) {
         *status = "SERVER LOCKED OUT";
-        return KDC_ERR_S_PRINCIPAL_UNKNOWN;
+        return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
     }
     if ((server->attributes & KRB5_KDB_DISALLOW_SVR) &&
         !(req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY)) {
         *status = "SERVER NOT ALLOWED";
-        return KDC_ERR_MUST_USE_USER2USER;
+        return KRB5KDC_ERR_MUST_USE_USER2USER;
     }
     if (server->attributes & KRB5_KDB_DISALLOW_TGT_BASED) {
         if (krb5_is_tgs_principal(tkt->server)) {
             *status = "TGT BASED NOT ALLOWED";
-            return KDC_ERR_POLICY;
+            return KRB5KDC_ERR_POLICY;
         }
     }
     return 0;
@@ -166,7 +166,7 @@
 /*
  * A service principal can require certain TGT flags.
  */
-static int
+static krb5_error_code
 check_tgs_svc_reqd_flags(krb5_kdc_req *req, krb5_db_entry *server,
                          krb5_ticket *tkt,
                          krb5_timestamp kdc_time, const char **status)
@@ -174,30 +174,30 @@
     if (server->attributes & KRB5_KDB_REQUIRES_HW_AUTH) {
         if (!(tkt->enc_part2->flags & TKT_FLG_HW_AUTH)) {
             *status = "NO HW PREAUTH";
-            return KRB_ERR_GENERIC;
+            return KRB5KRB_ERR_GENERIC;
         }
     }
     if (server->attributes & KRB5_KDB_REQUIRES_PRE_AUTH) {
         if (!(tkt->enc_part2->flags & TKT_FLG_PRE_AUTH)) {
             *status = "NO PREAUTH";
-            return KRB_ERR_GENERIC;
+            return KRB5KRB_ERR_GENERIC;
         }
     }
     return 0;
 }
 
-static int
+static krb5_error_code
 check_tgs_svc_time(krb5_kdc_req *req, krb5_db_entry *server, krb5_ticket *tkt,
                    krb5_timestamp kdc_time, const char **status)
 {
     if (server->expiration && ts_after(kdc_time, server->expiration)) {
         *status = "SERVICE EXPIRED";
-        return KDC_ERR_SERVICE_EXP;
+        return KRB5KDC_ERR_SERVICE_EXP;
     }
     return 0;
 }
 
-static int
+static krb5_error_code
 check_tgs_svc_policy(krb5_kdc_req *req, krb5_db_entry *server,
                      krb5_ticket *tkt, krb5_timestamp kdc_time,
                      const char **status)
@@ -217,7 +217,7 @@
 /*
  * Check header ticket timestamps against the current time.
  */
-static int
+static krb5_error_code
 check_tgs_times(krb5_kdc_req *req, krb5_ticket_times *times,
                 krb5_timestamp kdc_time, const char **status)
 {
@@ -229,7 +229,7 @@
         starttime = times->starttime ? times->starttime : times->authtime;
         if (ts_after(starttime, kdc_time)) {
             *status = "NOT_YET_VALID";
-            return KRB_AP_ERR_TKT_NYV;
+            return KRB5KRB_AP_ERR_TKT_NYV;
         }
     }
     /*
@@ -239,46 +239,47 @@
     if ((req->kdc_options & KDC_OPT_RENEW) &&
         ts_after(kdc_time, times->renew_till)) {
         *status = "TKT_EXPIRED";
-        return KRB_AP_ERR_TKT_EXPIRED;
+        return KRB5KRB_AP_ERR_TKT_EXPIRED;
     }
     return 0;
 }
 
 /* Check for local user tickets issued by foreign realms.  This check is
  * skipped for S4U2Self requests. */
-static int
+static krb5_error_code
 check_tgs_lineage(krb5_db_entry *server, krb5_ticket *tkt,
                   krb5_boolean is_crossrealm, const char **status)
 {
     if (is_crossrealm && data_eq(tkt->enc_part2->client->realm,
                                  server->princ->realm)) {
         *status = "INVALID LINEAGE";
-        return KDC_ERR_POLICY;
+        return KRB5KDC_ERR_POLICY;
     }
     return 0;
 }
 
-static int
-check_tgs_s4u2self(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+static krb5_error_code
+check_tgs_s4u2self(kdc_realm_t *realm, krb5_kdc_req *req,
                    krb5_db_entry *server, krb5_ticket *tkt, krb5_pac pac,
                    krb5_timestamp kdc_time,
                    krb5_pa_s4u_x509_user *s4u_x509_user, krb5_db_entry *client,
                    krb5_boolean is_crossrealm, krb5_boolean is_referral,
                    const char **status, krb5_pa_data ***e_data)
 {
+    krb5_context context = realm->realm_context;
     krb5_db_entry empty_server = { 0 };
 
     /* If the server is local, check that the request is for self. */
     if (!is_referral &&
-        !is_client_db_alias(kdc_context, server, tkt->enc_part2->client)) {
+        !is_client_db_alias(context, server, tkt->enc_part2->client)) {
         *status = "INVALID_S4U2SELF_REQUEST_SERVER_MISMATCH";
-        return KRB_AP_ERR_BADMATCH;
+        return KRB5KRB_AP_ERR_BADMATCH;
     }
 
     /* S4U2Self requests must use options valid for AS requests. */
     if (req->kdc_options & AS_INVALID_OPTIONS) {
         *status = "INVALID S4U2SELF OPTIONS";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /*
@@ -298,13 +299,13 @@
         /* This could happen if the requesting server no longer exists, and we
          * found a referral instead.  Treat this as a server lookup failure. */
         *status = "LOOKING_UP_SERVER";
-        return KDC_ERR_S_PRINCIPAL_UNKNOWN;
+        return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
     }
     if (client != NULL && is_crossrealm && !is_referral) {
         /* A local server should not need a cross-realm TGT to impersonate
          * a local principal. */
         *status = "NOT_CROSS_REALM_REQUEST";
-        return KDC_ERR_C_PRINCIPAL_UNKNOWN; /* match Windows error */
+        return KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN; /* match Windows error */
     }
     if (client == NULL && !is_crossrealm) {
         /*
@@ -313,7 +314,7 @@
          * follow referrals back to us.
          */
         *status = "S4U2SELF_CLIENT_NOT_OURS";
-        return KDC_ERR_POLICY; /* match Windows error */
+        return KRB5KDC_ERR_POLICY; /* match Windows error */
     }
     if (client == NULL && s4u_x509_user->user_id.user->length == 0) {
         /*
@@ -322,35 +323,34 @@
          * the subject-certificate field.
          */
         *status = "INVALID_XREALM_S4U2SELF_REQUEST";
-        return KDC_ERR_POLICY; /* match Windows error */
+        return KRB5KDC_ERR_POLICY; /* match Windows error */
     }
 
     /* The header ticket PAC must be present. */
     if (pac == NULL) {
         *status = "S4U2SELF_NO_PAC";
-        return KDC_ERR_TGT_REVOKED;
+        return KRB5KDC_ERR_TGT_REVOKED;
     }
 
     if (client != NULL) {
         /* The header ticket PAC must be for the impersonator. */
-        if (krb5_pac_verify(kdc_context, pac, tkt->enc_part2->times.authtime,
+        if (krb5_pac_verify(context, pac, tkt->enc_part2->times.authtime,
                             tkt->enc_part2->client, NULL, NULL) != 0) {
             *status = "S4U2SELF_LOCAL_PAC_CLIENT";
-            return KDC_ERR_BADOPTION;
+            return KRB5KDC_ERR_BADOPTION;
         }
 
         /* Validate the client policy.  Use an empty server principal to bypass
          * server policy checks. */
-        return validate_as_request(kdc_active_realm, req, client,
-                                   &empty_server, kdc_time, status, e_data);
+        return validate_as_request(realm, req, client, &empty_server, kdc_time,
+                                   status, e_data);
     } else {
         /* The header ticket PAC must be for the subject, with realm. */
-        if (krb5_pac_verify_ext(kdc_context, pac,
-                                tkt->enc_part2->times.authtime,
+        if (krb5_pac_verify_ext(context, pac, tkt->enc_part2->times.authtime,
                                 s4u_x509_user->user_id.user, NULL, NULL,
                                 TRUE) != 0) {
             *status = "S4U2SELF_FOREIGN_PAC_CLIENT";
-            return KDC_ERR_BADOPTION;
+            return KRB5KDC_ERR_BADOPTION;
         }
     }
 
@@ -420,8 +420,8 @@
     return result;
 }
 
-static int
-check_tgs_s4u2proxy(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+static krb5_error_code
+check_tgs_s4u2proxy(krb5_context context, krb5_kdc_req *req,
                     krb5_db_entry *server, krb5_ticket *tkt, krb5_pac pac,
                     const krb5_ticket *stkt, krb5_pac stkt_pac,
                     krb5_db_entry *stkt_server, krb5_boolean is_crossrealm,
@@ -430,35 +430,35 @@
     /* A forwardable second ticket must be present in the request. */
     if (stkt == NULL) {
         *status = "NO_2ND_TKT";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
     if (!(stkt->enc_part2->flags & TKT_FLG_FORWARDABLE)) {
         *status = "EVIDENCE_TKT_NOT_FORWARDABLE";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /* Constrained delegation is mutually exclusive with renew/forward/etc.
      * (and therefore requires the header ticket to be a TGT). */
     if (req->kdc_options & (NON_TGT_OPTION | KDC_OPT_ENC_TKT_IN_SKEY)) {
         *status = "INVALID_S4U2PROXY_OPTIONS";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /* Can't get a TGT (otherwise it would be unconstrained delegation). */
     if (krb5_is_tgs_principal(req->server)) {
         *status = "NOT_ALLOWED_TO_DELEGATE";
-        return KDC_ERR_POLICY;
+        return KRB5KDC_ERR_POLICY;
     }
 
     /* The header ticket PAC must be present and for the impersonator. */
     if (pac == NULL) {
         *status = "S4U2PROXY_NO_HEADER_PAC";
-        return KDC_ERR_TGT_REVOKED;
+        return KRB5KDC_ERR_TGT_REVOKED;
     }
-    if (krb5_pac_verify(kdc_context, pac, tkt->enc_part2->times.authtime,
+    if (krb5_pac_verify(context, pac, tkt->enc_part2->times.authtime,
                         tkt->enc_part2->client, NULL, NULL) != 0) {
         *status = "S4U2PROXY_HEADER_PAC";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /*
@@ -470,24 +470,23 @@
 
     if (stkt_pac == NULL) {
         *status = "S4U2PROXY_NO_STKT_PAC";
-        return KRB_AP_ERR_MODIFIED;
+        return KRB5KRB_AP_ERR_MODIFIED;
     }
     if (!is_crossrealm) {
         /* For an initial or same-realm request, the second ticket server and
          * header ticket client must be the same principal. */
-        if (!is_client_db_alias(kdc_context, stkt_server,
+        if (!is_client_db_alias(context, stkt_server,
                                 tkt->enc_part2->client)) {
             *status = "EVIDENCE_TICKET_MISMATCH";
-            return KDC_ERR_SERVER_NOMATCH;
+            return KRB5KDC_ERR_SERVER_NOMATCH;
         }
 
         /* The second ticket client and PAC client are the subject, and must
          * match. */
-        if (krb5_pac_verify(kdc_context, stkt_pac,
-                            stkt->enc_part2->times.authtime,
+        if (krb5_pac_verify(context, stkt_pac, stkt->enc_part2->times.authtime,
                             stkt->enc_part2->client, NULL, NULL) != 0) {
             *status = "S4U2PROXY_LOCAL_STKT_PAC";
-            return KDC_ERR_BADOPTION;
+            return KRB5KDC_ERR_BADOPTION;
         }
 
     } else {
@@ -499,54 +498,107 @@
          */
         if (is_referral || !is_cross_tgs_principal(stkt_server->princ) ||
             !data_eq(stkt_server->princ->data1, server->princ->realm) ||
-            !krb5_principal_compare(kdc_context, stkt->enc_part2->client,
+            !krb5_principal_compare(context, stkt->enc_part2->client,
                                     tkt->enc_part2->client)) {
             *status = "XREALM_EVIDENCE_TICKET_MISMATCH";
-            return KDC_ERR_BADOPTION;
+            return KRB5KDC_ERR_BADOPTION;
         }
 
         /* The second ticket PAC must be present and for the impersonated
          * client, with delegation info. */
         if (stkt_pac == NULL ||
-            verify_deleg_pac(kdc_context, stkt_pac, stkt->enc_part2,
+            verify_deleg_pac(context, stkt_pac, stkt->enc_part2,
                              req->server) != 0) {
             *status = "S4U2PROXY_CROSS_STKT_PAC";
-            return KDC_ERR_BADOPTION;
+            return KRB5KDC_ERR_BADOPTION;
         }
     }
 
     return 0;
 }
 
-static int
-check_tgs_u2u(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
-              const krb5_ticket *stkt, krb5_db_entry *server,
-              const char **status)
+/* Check the KDB policy for a final RBCD request. */
+static krb5_error_code
+check_s4u2proxy_policy(krb5_context context, krb5_kdc_req *req,
+                       krb5_principal desired_client,
+                       krb5_principal impersonator_name,
+                       krb5_db_entry *impersonator, krb5_pac impersonator_pac,
+                       krb5_principal resource_name, krb5_db_entry *resource,
+                       krb5_boolean is_crossrealm, krb5_boolean is_referral,
+                       const char **status)
+{
+    krb5_error_code ret;
+    krb5_boolean support_rbcd, policy_denial = FALSE;
+
+    /* Check if the client supports resource-based constrained delegation. */
+    ret = kdc_get_pa_pac_rbcd(context, req->padata, &support_rbcd);
+    if (ret)
+        return ret;
+
+    if (is_referral) {
+        if (!support_rbcd) {
+            /* The client must support RBCD for a referral to be useful. */
+            *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
+            return KRB5KDC_ERR_BADOPTION;
+        }
+        /* Policy will be checked in the resource realm. */
+        return 0;
+    }
+
+    /* Try resource-based authorization if the client supports RBCD. */
+    if (support_rbcd) {
+        ret = krb5_db_allowed_to_delegate_from(context, desired_client,
+                                               impersonator_name,
+                                               impersonator_pac, resource);
+        if (ret == KRB5KDC_ERR_BADOPTION)
+            policy_denial = TRUE;
+        else if (ret != KRB5_PLUGIN_OP_NOTSUPP)
+            return ret;
+    }
+
+    /* Try traditional authorization if the requestor is in this realm. */
+    if (!is_crossrealm) {
+        ret = krb5_db_check_allowed_to_delegate(context, desired_client,
+                                                impersonator, resource_name);
+        if (ret == KRB5KDC_ERR_BADOPTION)
+            policy_denial = TRUE;
+        else if (ret != KRB5_PLUGIN_OP_NOTSUPP)
+            return ret;
+    }
+
+    *status = policy_denial ? "NOT_ALLOWED_TO_DELEGATE" :
+        "UNSUPPORTED_S4U2PROXY_REQUEST";
+    return KRB5KDC_ERR_BADOPTION;
+}
+
+static krb5_error_code
+check_tgs_u2u(krb5_context context, krb5_kdc_req *req, const krb5_ticket *stkt,
+              krb5_db_entry *server, const char **status)
 {
     /* A second ticket must be present in the request. */
     if (stkt == NULL) {
         *status = "NO_2ND_TKT";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
 
     /* The second ticket must be a TGT to the server realm. */
     if (!is_local_tgs_principal(stkt->server) ||
         !data_eq(stkt->server->data1, server->princ->realm)) {
         *status = "2ND_TKT_NOT_TGS";
-        return KDC_ERR_POLICY;
+        return KRB5KDC_ERR_POLICY;
     }
 
     /* The second ticket client must match the requested server. */
-    if (!is_client_db_alias(kdc_context, server, stkt->enc_part2->client)) {
+    if (!is_client_db_alias(context, server, stkt->enc_part2->client)) {
         *status = "2ND_TKT_MISMATCH";
-        return KDC_ERR_SERVER_NOMATCH;
+        return KRB5KDC_ERR_SERVER_NOMATCH;
     }
 
     return 0;
 }
 
 /* Validate the PAC of a non-S4U TGS request, if one is present. */
-static int
+static krb5_error_code
 check_normal_tgs_pac(krb5_context context, krb5_enc_tkt_part *enc_tkt,
                      krb5_pac pac, krb5_db_entry *server,
                      krb5_boolean is_crossrealm, const char **status)
@@ -568,7 +620,7 @@
         return 0;
 
     *status = "HEADER_PAC";
-    return KDC_ERR_BADOPTION;
+    return KRB5KDC_ERR_BADOPTION;
 }
 
 /*
@@ -576,19 +628,19 @@
  * checks that are peculiar to these cases.  (e.g., ticket service principal
  * matches requested service principal)
  */
-static int
-check_tgs_nontgt(kdc_realm_t *kdc_active_realm,
-                 krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
+static krb5_error_code
+check_tgs_nontgt(krb5_context context, krb5_kdc_req *req, krb5_ticket *tkt,
+                 const char **status)
 {
-    if (!krb5_principal_compare(kdc_context, tkt->server, req->server)) {
+    if (!krb5_principal_compare(context, tkt->server, req->server)) {
         *status = "SERVER DIDN'T MATCH TICKET FOR RENEW/FORWARD/ETC";
-        return KDC_ERR_SERVER_NOMATCH;
+        return KRB5KDC_ERR_SERVER_NOMATCH;
     }
     /* Cannot proxy ticket granting tickets. */
     if ((req->kdc_options & KDC_OPT_PROXY) &&
         krb5_is_tgs_principal(req->server)) {
         *status = "CAN'T PROXY TGT";
-        return KDC_ERR_BADOPTION;
+        return KRB5KDC_ERR_BADOPTION;
     }
     return 0;
 }
@@ -597,37 +649,34 @@
  * Do some checks for a normal TGS-REQ (where the ticket service must be a TGS
  * principal).
  */
-static int
-check_tgs_tgt(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
-              krb5_ticket *tkt, const char **status)
+static krb5_error_code
+check_tgs_tgt(krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
 {
     /* Make sure it's a TGS principal. */
     if (!krb5_is_tgs_principal(tkt->server)) {
         *status = "BAD TGS SERVER NAME";
-        return KRB_AP_ERR_NOT_US;
+        return KRB5KRB_AP_ERR_NOT_US;
     }
     /* TGS principal second component must match service realm. */
-    if (!data_eq(*krb5_princ_component(kdc_context, tkt->server, 1),
-                 *krb5_princ_realm(kdc_context, req->server))) {
+    if (!data_eq(tkt->server->data1, req->server->realm)) {
         *status = "BAD TGS SERVER INSTANCE";
-        return KRB_AP_ERR_NOT_US;
+        return KRB5KRB_AP_ERR_NOT_US;
     }
     return 0;
 }
 
-int
-validate_tgs_request(kdc_realm_t *kdc_active_realm,
-                     krb5_kdc_req *request, krb5_db_entry *server,
-                     krb5_ticket *ticket, krb5_pac pac,
-                     const krb5_ticket *stkt, krb5_pac stkt_pac,
-                     krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
-                     krb5_pa_s4u_x509_user *s4u_x509_user,
-                     krb5_db_entry *s4u2self_client,
-                     krb5_boolean is_crossrealm, krb5_boolean is_referral,
-                     const char **status, krb5_pa_data ***e_data)
+krb5_error_code
+check_tgs_constraints(kdc_realm_t *realm, krb5_kdc_req *request,
+                      krb5_db_entry *server, krb5_ticket *ticket, krb5_pac pac,
+                      const krb5_ticket *stkt, krb5_pac stkt_pac,
+                      krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
+                      krb5_pa_s4u_x509_user *s4u_x509_user,
+                      krb5_db_entry *s4u2self_client,
+                      krb5_boolean is_crossrealm, krb5_boolean is_referral,
+                      const char **status, krb5_pa_data ***e_data)
 {
+    krb5_context context = realm->realm_context;
     int errcode;
-    krb5_error_code ret;
 
     /* Depends only on request and ticket. */
     errcode = check_tgs_opts(request, ticket, status);
@@ -640,28 +689,18 @@
     if (errcode != 0)
         return errcode;
 
-    errcode = check_tgs_svc_policy(request, server, ticket, kdc_time, status);
-    if (errcode != 0)
-        return errcode;
-
     if (request->kdc_options & NON_TGT_OPTION)
-        errcode = check_tgs_nontgt(kdc_active_realm, request, ticket, status);
+        errcode = check_tgs_nontgt(context, request, ticket, status);
     else
-        errcode = check_tgs_tgt(kdc_active_realm, request, ticket, status);
+        errcode = check_tgs_tgt(request, ticket, status);
     if (errcode != 0)
         return errcode;
 
-    /* Check the hot list */
-    if (check_hot_list(ticket)) {
-        *status = "HOT_LIST";
-        return(KRB_AP_ERR_REPEAT);
-    }
-
     if (s4u_x509_user != NULL) {
-        errcode = check_tgs_s4u2self(kdc_active_realm, request, server, ticket,
-                                     pac, kdc_time, s4u_x509_user,
-                                     s4u2self_client, is_crossrealm,
-                                     is_referral, status, e_data);
+        errcode = check_tgs_s4u2self(realm, request, server, ticket, pac,
+                                     kdc_time, s4u_x509_user, s4u2self_client,
+                                     is_crossrealm, is_referral, status,
+                                     e_data);
     } else {
         errcode = check_tgs_lineage(server, ticket, is_crossrealm, status);
     }
@@ -669,36 +708,64 @@
         return errcode;
 
     if (request->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
-        errcode = check_tgs_u2u(kdc_active_realm, request, stkt, server,
-                                status);
+        errcode = check_tgs_u2u(context, request, stkt, server, status);
         if (errcode != 0)
             return errcode;
     }
 
     if (request->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
-        errcode = check_tgs_s4u2proxy(kdc_active_realm, request, server,
-                                      ticket, pac, stkt, stkt_pac, stkt_server,
+        errcode = check_tgs_s4u2proxy(context, request, server, ticket, pac,
+                                      stkt, stkt_pac, stkt_server,
                                       is_crossrealm, is_referral, status);
         if (errcode != 0)
             return errcode;
     } else if (s4u_x509_user == NULL) {
-        errcode = check_normal_tgs_pac(kdc_context, ticket->enc_part2, pac,
-                                       server, is_crossrealm, status);
+        errcode = check_normal_tgs_pac(context, ticket->enc_part2, pac, server,
+                                       is_crossrealm, status);
         if (errcode != 0)
             return errcode;
     }
 
-    if (check_anon(kdc_active_realm, ticket->enc_part2->client,
-                   request->server) != 0) {
+    return 0;
+}
+
+krb5_error_code
+check_tgs_policy(kdc_realm_t *realm, krb5_kdc_req *request,
+                 krb5_db_entry *server, krb5_ticket *ticket,
+                 krb5_pac pac, const krb5_ticket *stkt, krb5_pac stkt_pac,
+                 krb5_principal stkt_pac_client, krb5_db_entry *stkt_server,
+                 krb5_timestamp kdc_time, krb5_boolean is_crossrealm,
+                 krb5_boolean is_referral, const char **status,
+                 krb5_pa_data ***e_data)
+{
+    krb5_context context = realm->realm_context;
+    int errcode;
+    krb5_error_code ret;
+    krb5_principal desired_client;
+
+    errcode = check_tgs_svc_policy(request, server, ticket, kdc_time, status);
+    if (errcode != 0)
+        return errcode;
+
+    if (request->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
+        desired_client = (stkt_pac_client != NULL) ? stkt_pac_client :
+            stkt->enc_part2->client;
+        errcode = check_s4u2proxy_policy(context, request, desired_client,
+                                         ticket->enc_part2->client,
+                                         stkt_server, pac, request->server,
+                                         server, is_crossrealm, is_referral,
+                                         status);
+        if (errcode != 0)
+            return errcode;
+    }
+
+    if (check_anon(realm, ticket->enc_part2->client, request->server) != 0) {
         *status = "ANONYMOUS NOT ALLOWED";
-        return(KDC_ERR_POLICY);
+        return KRB5KDC_ERR_POLICY;
     }
 
     /* Perform KDB module policy checks. */
-    ret = krb5_db_check_policy_tgs(kdc_context, request, server, ticket,
-                                   status, e_data);
-    if (ret && ret != KRB5_PLUGIN_OP_NOTSUPP)
-        return errcode_to_protocol(ret);
-
-    return 0;
+    ret = krb5_db_check_policy_tgs(context, request, server, ticket, status,
+                                   e_data);
+    return (ret == KRB5_PLUGIN_OP_NOTSUPP) ? 0 : ret;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/kprop/kpropd.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kprop/kpropd.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/kprop/kproplog.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/kprop/kproplog.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/crypto/builtin/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/crypto/builtin/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/crypto/openssl/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/crypto/openssl/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/generic/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/generic/deps Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/generic/gssapiP_generic.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/generic/gssapiP_generic.h Changed

@@ -54,38 +54,6 @@
 (((o1)->length == (o2)->length) && \
 (memcmp((o1)->elements, (o2)->elements, (o1)->length) == 0))
 
-/* this code knows that an int on the wire is 32 bits. The type of
- num should be at least this big, or the extra shifts may do weird
- things */
-
-#define TWRITE_INT(ptr, num, bigend) \
- if (bigend) store_32_be(num, ptr); else store_32_le(num, ptr); \
- (ptr) += 4;
-
-#define TWRITE_INT16(ptr, num, bigend) \
- if (bigend) store_16_be((num)>>16, ptr); else store_16_le(num, ptr); \
- (ptr) += 2;
-
-#define TREAD_INT(ptr, num, bigend) \
- (num) = ((bigend) ? load_32_be(ptr) : load_32_le(ptr)); \
- (ptr) += 4;
-
-#define TREAD_INT16(ptr, num, bigend) \
- (num) = ((bigend) ? (load_16_be(ptr) << 16) : load_16_le(ptr)); \
- (ptr) += 2;
-
-#define TWRITE_STR(ptr, str, len) \
- memcpy((ptr), (str), (len)); \
- (ptr) += (len);
-
-#define TREAD_STR(ptr, str, len) \
- (str) = (ptr); \
- (ptr) += (len);
-
-#define TWRITE_BUF(ptr, buf, bigend) \
- TWRITE_INT((ptr), (buf).length, (bigend)); \
- TWRITE_STR((ptr), (buf).value, (buf).length);
-
 /** malloc wrappers; these may actually do something later */
 
 #define xmalloc(n) malloc(n)
@@ -153,8 +121,8 @@
 
 unsigned int g_token_size (const gss_OID_desc * mech, unsigned int body_size);
 
-void g_make_token_header (const gss_OID_desc * mech, unsigned int body_size,
- unsigned char **buf, int tok_type);
+void g_make_token_header (struct k5buf *buf, const gss_OID_desc *mech,
+ size_t body_size, int tok_type);
 
 /* flags for g_verify_token_header() */
 #define G_VFY_TOKEN_HDR_WRAPPER_REQUIRED 0x01

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/generic/gssapi_ext.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/generic/gssapi_ext.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/generic/gssapi_generic.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/generic/gssapi_generic.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/generic/util_token.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/generic/util_token.c Changed

@@ -22,6 +22,7 @@
 */
 
 #include "gssapiP_generic.h"
+#include "k5-der.h"
 #ifdef HAVE_MEMORY_H
 #include <memory.h>
 #endif
@@ -31,131 +32,33 @@
 * $Id$
 */
 
-/* XXXX this code currently makes the assumption that a mech oid will
- never be longer than 127 bytes. This assumption is not inherent in
- the interfaces, so the code can be fixed if the OSI namespace
- balloons unexpectedly. */
-
-/*
- * Each token looks like this:
- * 0x60 tag for APPLICATION 0, SEQUENCE
- * (constructed, definite-length)
- * <length> possible multiple bytes, need to parse/generate
- * 0x06 tag for OBJECT IDENTIFIER
- * <moid_length> compile-time constant string (assume 1 byte)
- * <moid_bytes> compile-time constant string
- * <inner_bytes> the ANY containing the application token
- * bytes 0,1 are the token type
- * bytes 2,n are the token data
- *
- * Note that the token type field is a feature of RFC 1964 mechanisms and
- * is not used by other GSSAPI mechanisms. As such, a token type of -1
- * is interpreted to mean that no token type should be expected or
- * generated.
- *
- * For the purposes of this abstraction, the token "header" consists of
- * the sequence tag and length octets, the mech OID DER encoding, and the
- * first two inner bytes, which indicate the token type. The token
- * "body" consists of everything else.
- */
-static unsigned int
-der_length_size(int length)
-{
- if (length < (1<<7))
- return(1);
- else if (length < (1<<8))
- return(2);
-#if INT_MAX == 0x7fff
- else
- return(3);
-#else
- else if (length < (1<<16))
- return(3);
- else if (length < (1<<24))
- return(4);
- else
- return(5);
-#endif
-}
-
-static void
-der_write_length(unsigned char **buf, int length)
-{
- if (length < (1<<7)) {
- *(*buf)++ = (unsigned char) length;
- } else {
- *(*buf)++ = (unsigned char) (der_length_size(length)+127);
-#if INT_MAX > 0x7fff
- if (length >= (1<<24))
- *(*buf)++ = (unsigned char) (length>>24);
- if (length >= (1<<16))
- *(*buf)++ = (unsigned char) ((length>>16)&0xff);
-#endif
- if (length >= (1<<8))
- *(*buf)++ = (unsigned char) ((length>>8)&0xff);
- *(*buf)++ = (unsigned char) (length&0xff);
- }
-}
-
-/* returns decoded length, or < 0 on failure. Advances buf and
- decrements bufsize */
-
-static int
-der_read_length(unsigned char **buf, int *bufsize)
-{
- unsigned char sf;
- int ret;
-
- if (*bufsize < 1)
- return(-1);
- sf = *(*buf)++;
- (*bufsize)--;
- if (sf & 0x80) {
- if ((sf &= 0x7f) > ((*bufsize)-1))
- return(-1);
- if (sf > sizeof(int))
- return (-1);
- ret = 0;
- for (; sf; sf--) {
- ret = (ret<<8) + (*(*buf)++);
- (*bufsize)--;
- }
- } else {
- ret = sf;
- }
-
- return(ret);
-}
-
-/* returns the length of a token, given the mech oid and the body size */
-
+/* Return the length of an RFC 4121 token with RFC 2743 token framing, given
+ * the mech oid and the body size (without the two-byte RFC 4121 token ID). */
 unsigned int
 g_token_size(const gss_OID_desc * mech, unsigned int body_size)
 {
- /* set body_size to sequence contents size */
- body_size += 4 + (unsigned int)mech->length; /* NEED overflow check */
- return(1 + der_length_size(body_size) + body_size);
-}
+ size_t mech_der_len = k5_der_value_len(mech->length);
 
-/* fills in a buffer with the token header. The buffer is assumed to
- be the right size. buf is advanced past the token header */
+ return k5_der_value_len(mech_der_len + 2 + body_size);
+}
 
+/*
+ * Add RFC 2743 generic token framing to buf with room left for body_size bytes
+ * in the sequence to be added by the caller. If tok_type is not -1, add it as
+ * a two-byte RFC 4121 token identifier after the framing and include room for
+ * it in the sequence.
+ */
 void
-g_make_token_header(
- const gss_OID_desc * mech,
- unsigned int body_size,
- unsigned char **buf,
- int tok_type)
+g_make_token_header(struct k5buf *buf, const gss_OID_desc *mech,
+ size_t body_size, int tok_type)
 {
- *(*buf)++ = 0x60;
- der_write_length(buf, ((tok_type == -1) ? 2 : 4) + mech->length + body_size);
- *(*buf)++ = 0x06;
- *(*buf)++ = (unsigned char) mech->length;
- TWRITE_STR(*buf, mech->elements, mech->length);
- if (tok_type != -1) {
- *(*buf)++ = (unsigned char) ((tok_type>>8)&0xff);
- *(*buf)++ = (unsigned char) (tok_type&0xff);
- }
+ size_t tok_len = (tok_type == -1) ? 0 : 2;
+ size_t seq_len = k5_der_value_len(mech->length) + body_size + tok_len;
+
+ k5_der_add_taglen(buf, 0x60, seq_len);
+ k5_der_add_value(buf, 0x06, mech->elements, mech->length);
+ if (tok_type != -1)
+ k5_buf_add_uint16_be(buf, tok_type);
 }
 
 /*
@@ -176,54 +79,30 @@
 unsigned int toksize_in,
 int flags)
 {
- unsigned char *buf = *buf_in;
- int seqsize;
+ struct k5input in, mech_der;
 gss_OID_desc toid;
- int toksize = toksize_in;
 
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- if (*buf++ != 0x60) {
- if (flags & G_VFY_TOKEN_HDR_WRAPPER_REQUIRED)
- return(G_BAD_TOK_HEADER);
- buf--;
- toksize++;
- goto skip_wrapper;
+ k5_input_init(&in, *buf_in, toksize_in);
+
+ if (k5_der_get_value(&in, 0x60, &in)) {
+ if (in.ptr + in.len != *buf_in + toksize_in)
+ return G_BAD_TOK_HEADER;
+ if (!k5_der_get_value(&in, 0x06, &mech_der))
+ return G_BAD_TOK_HEADER;
+ toid.elements = (uint8_t *)mech_der.ptr;
+ toid.length = mech_der.len;
+ if (!g_OID_equal(&toid, mech))
+ return G_WRONG_MECH;
+ } else if (flags & G_VFY_TOKEN_HDR_WRAPPER_REQUIRED) {
+ return G_BAD_TOK_HEADER;
 }
 
- if ((seqsize = der_read_length(&buf, &toksize)) < 0)
- return(G_BAD_TOK_HEADER);
-
- if (seqsize != toksize)
- return(G_BAD_TOK_HEADER);
-
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- if (*buf++ != 0x06)
- return(G_BAD_TOK_HEADER);
-
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- toid.length = *buf++;
-
- if ((toksize-=toid.length) < 0)
- return(G_BAD_TOK_HEADER);
- toid.elements = buf;
- buf+=toid.length;
-
- if (! g_OID_equal(&toid, mech))
- return G_WRONG_MECH;
-skip_wrapper:
 if (tok_type != -1) {
- if ((toksize-=2) < 0)
- return(G_BAD_TOK_HEADER);
-
- if ((*buf++ != ((tok_type>>8)&0xff)) ||
- (*buf++ != (tok_type&0xff)))
- return(G_WRONG_TOKID);
+ if (k5_input_get_uint16_be(&in) != tok_type)
+ return in.status ? G_BAD_TOK_HEADER : G_WRONG_TOKID;
 }
- *buf_in = buf;
- *body_size = toksize;
 
+ *buf_in = (uint8_t *)in.ptr;
+ *body_size = in.len;
 return 0;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/accept_sec_context.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/accept_sec_context.c Changed

@@ -353,8 +353,8 @@
         *mech_type = ctx->mech_used;
 
     if (time_rec) {
-        *time_rec = ts_delta(ctx->krb_times.endtime, now) +
-            ctx->k5_context->clockskew;
+        *time_rec = ts_interval(ts_incr(now, -ctx->k5_context->clockskew),
+                                ctx->krb_times.endtime);
     }
 
     /* Never return GSS_C_DELEG_FLAG since we don't support DCE credential
@@ -657,7 +657,6 @@
 {
     krb5_context context;
     unsigned char *ptr;
-    char *sptr;
     krb5_gss_cred_id_t cred = 0;
     krb5_data ap_rep, ap_req;
     krb5_error_code code;
@@ -684,6 +683,7 @@
     krb5_enctype negotiated_etype;
     krb5_authdata_context ad_context = NULL;
     krb5_ap_req *request = NULL;
+    struct k5buf buf;
 
     code = krb5int_accessor (&kaccess, KRB5INT_ACCESS_VERSION);
     if (code) {
@@ -787,16 +787,13 @@
     } else if (code == G_BAD_TOK_HEADER) {
         /* DCE style not encapsulated */
         ap_req.length = input_token->length;
-        ap_req.data = input_token->value;
         mech_used = gss_mech_krb5;
         no_encap = 1;
     } else {
         major_status = GSS_S_DEFECTIVE_TOKEN;
         goto fail;
     }
-
-    sptr = (char *) ptr;
-    TREAD_STR(sptr, ap_req.data, ap_req.length);
+    ap_req.data = (char *)ptr;
 
     /* construct the sender_addr */
 
@@ -1009,7 +1006,6 @@
     /* generate an AP_REP if necessary */
 
     if (ctx->gss_flags & GSS_C_MUTUAL_FLAG) {
-        unsigned char * ptr3;
         krb5_int32 seq_temp;
         int cfx_generate_subkey;
 
@@ -1114,18 +1110,16 @@
         ctx->established = 1;
 
         token.length = g_token_size(mech_used, ap_rep.length);
-
-        if ((token.value = (unsigned char *) gssalloc_malloc(token.length))
-            == NULL) {
+        token.value = gssalloc_malloc(token.length);
+        if (token.value == NULL) {
             major_status = GSS_S_FAILURE;
             code = ENOMEM;
             goto fail;
         }
-        ptr3 = token.value;
-        g_make_token_header(mech_used, ap_rep.length,
-                            &ptr3, KG_TOK_CTX_AP_REP);
-
-        TWRITE_STR(ptr3, ap_rep.data, ap_rep.length);
+        k5_buf_init_fixed(&buf, token.value, token.length);
+        g_make_token_header(&buf, mech_used, ap_rep.length, KG_TOK_CTX_AP_REP);
+        k5_buf_add_len(&buf, ap_rep.data, ap_rep.length);
+        assert(buf.len == token.length);
 
         ctx->established = 1;
 
@@ -1152,8 +1146,10 @@
 
     /* Add the maximum allowable clock skew as a grace period for context
      * expiration, just as we do for the ticket. */
-    if (time_rec)
-        *time_rec = ts_delta(ctx->krb_times.endtime, now) + context->clockskew;
+    if (time_rec) {
+        *time_rec = ts_interval(ts_incr(now, -context->clockskew),
+                                ctx->krb_times.endtime);
+    }
 
     if (ret_flags)
         *ret_flags = ctx->gss_flags;
@@ -1218,7 +1214,6 @@
          (request->ap_options & AP_OPTS_MUTUAL_REQUIRED) ||
          major_status == GSS_S_CONTINUE_NEEDED)) {
         unsigned int tmsglen;
-        int toktype;
 
         /*
          * The client is expecting a response, so we can send an
@@ -1240,17 +1235,16 @@
             goto done;
 
         tmsglen = scratch.length;
-        toktype = KG_TOK_CTX_ERROR;
 
         token.length = g_token_size(mech_used, tmsglen);
         token.value = gssalloc_malloc(token.length);
         if (!token.value)
             goto done;
+        k5_buf_init_fixed(&buf, token.value, token.length);
+        g_make_token_header(&buf, mech_used, tmsglen, KG_TOK_CTX_ERROR);
+        k5_buf_add_len(&buf, scratch.data, scratch.length);
+        assert(buf.len == token.length);
 
-        ptr = token.value;
-        g_make_token_header(mech_used, tmsglen, &ptr, toktype);
-
-        TWRITE_STR(ptr, scratch.data, scratch.length);
         krb5_free_data_contents(context, &scratch);
 
         *output_token = token;

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/acquire_cred.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/acquire_cred.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/context_time.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/context_time.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/deps Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/gssapiP_krb5.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/gssapiP_krb5.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/gssapi_krb5.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/gssapi_krb5.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/iakerb.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/iakerb.c Changed

@@ -23,14 +23,13 @@
 * or implied warranty.
 */
 #include "k5-int.h"
+#include "k5-der.h"
 #include "gssapiP_krb5.h"
 
 /*
 * IAKERB implementation
 */
 
-extern int gssint_get_der_length(unsigned char **, OM_uint32, unsigned int*);
-
 enum iakerb_state {
 IAKERB_AS_REQ, /* acquiring ticket with initial creds */
 IAKERB_TGS_REQ, /* acquiring ticket with TGT */
@@ -172,11 +171,11 @@
 {
 krb5_error_code code;
 krb5_iakerb_header *iah = NULL;
- unsigned int bodysize, lenlen;
- int length;
- unsigned char *ptr;
+ unsigned int bodysize;
+ uint8_t *body;
 int flags = 0;
 krb5_data data;
+ struct k5input in, seq;
 
 if (token == GSS_C_NO_BUFFER || token->length == 0) {
 code = KRB5_BAD_MSIZE;
@@ -186,32 +185,20 @@
 if (initialContextToken)
 flags |= G_VFY_TOKEN_HDR_WRAPPER_REQUIRED;
 
- ptr = token->value;
-
- code = g_verify_token_header(gss_mech_iakerb,
- &bodysize, &ptr,
- IAKERB_TOK_PROXY,
- token->length, flags);
+ body = token->value;
+ code = g_verify_token_header(gss_mech_iakerb, &bodysize, &body,
+ IAKERB_TOK_PROXY, token->length, flags);
 if (code != 0)
 goto cleanup;
 
- data.data = (char *)ptr;
-
- if (bodysize-- == 0 || *ptr++ != 0x30 /* SEQUENCE */) {
+ /* Find the end of the DER sequence tag and decode it (with the tag) as the
+ * IAKERB jeader. */
+ k5_input_init(&in, body, bodysize);
+ if (!k5_der_get_value(&in, 0x30, &seq)) {
 code = ASN1_BAD_ID;
 goto cleanup;
 }
-
- length = gssint_get_der_length(&ptr, bodysize, &lenlen);
- if (length < 0 || bodysize - lenlen < (unsigned int)length) {
- code = KRB5_BAD_MSIZE;
- goto cleanup;
- }
- data.length = 1 /* SEQUENCE */ + lenlen + length;
-
- ptr += length;
- bodysize -= (lenlen + length);
-
+ data = make_data(body, seq.ptr + seq.len - body);
 code = decode_krb5_iakerb_header(&data, &iah);
 if (code != 0)
 goto cleanup;
@@ -226,9 +213,8 @@
 iah->cookie = NULL;
 }
 
- request->data = (char *)ptr;
- request->length = bodysize;
-
+ /* The remainder of the token body is the request. */
+ *request = make_data((uint8_t *)in.ptr, in.len);
 assert(request->data + request->length ==
 (char *)token->value + token->length);
 
@@ -254,7 +240,7 @@
 krb5_data *data = NULL;
 char *p;
 unsigned int tokenSize;
- unsigned char *q;
+ struct k5buf buf;
 
 token->value = NULL;
 token->length = 0;
@@ -288,24 +274,22 @@
 else
 tokenSize = 2 + data->length;
 
- token->value = q = gssalloc_malloc(tokenSize);
- if (q == NULL) {
+ token->value = gssalloc_malloc(tokenSize);
+ if (token->value == NULL) {
 code = ENOMEM;
 goto cleanup;
 }
 token->length = tokenSize;
+ k5_buf_init_fixed(&buf, token->value, token->length);
 
 if (initialContextToken) {
- g_make_token_header(gss_mech_iakerb, data->length, &q,
+ g_make_token_header(&buf, gss_mech_iakerb, data->length,
 IAKERB_TOK_PROXY);
 } else {
- store_16_be(IAKERB_TOK_PROXY, q);
- q += 2;
+ k5_buf_add_uint16_be(&buf, IAKERB_TOK_PROXY);
 }
- memcpy(q, data->data, data->length);
- q += data->length;
-
- assert(q == (unsigned char *)token->value + token->length);
+ k5_buf_add_len(&buf, data->data, data->length);
+ assert(buf.len == token->length);
 
 cleanup:
 krb5_free_data(ctx->k5c, data);

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/init_sec_context.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/init_sec_context.c Changed

@@ -246,14 +246,14 @@
 {
     krb5_error_code code;
     krb5_int32 con_flags;
-    unsigned char *ptr;
     struct gss_checksum_data *data = cksum_data;
     krb5_data credmsg;
     unsigned int junk;
     krb5_data *finished = NULL;
     krb5_key send_subkey;
+    struct k5buf buf;
 
-    data->checksum_data.data = 0;
+    data->checksum_data = empty_data();
     credmsg.data = 0;
     /* build the checksum field */
 
@@ -291,18 +291,12 @@
                request */
             data->ctx->gss_flags &= ~(GSS_C_DELEG_FLAG |
                                       GSS_C_DELEG_POLICY_FLAG);
-
-            data->checksum_data.length = 24;
         } else {
             if (credmsg.length+28 > KRB5_INT16_MAX) {
                 code = KRB5KRB_ERR_FIELD_TOOLONG;
                 goto cleanup;
             }
-
-            data->checksum_data.length = 28+credmsg.length;
         }
-    } else {
-        data->checksum_data.length = 24;
     }
 #ifdef CFX_EXERCISE
     if (data->ctx->auth_context->keyblock != NULL
@@ -335,40 +329,35 @@
         }
 
         krb5_k_free_key(context, key);
-        data->checksum_data.length += 8 + finished->length;
     }
 
-    data->checksum_data.length += junk;
-
     /* now allocate a buffer to hold the checksum data and
        (maybe) KRB_CRED msg */
-
-    if ((data->checksum_data.data =
-         (char *) xmalloc(data->checksum_data.length)) == NULL) {
-        code = ENOMEM;
-        goto cleanup;
+    k5_buf_init_dynamic(&buf);
+    k5_buf_add_uint32_le(&buf, data->md5.length);
+    k5_buf_add_len(&buf, data->md5.contents, data->md5.length);
+    k5_buf_add_uint32_le(&buf, data->ctx->gss_flags);
+    if (credmsg.data != NULL) {
+        k5_buf_add_uint16_le(&buf, KRB5_GSS_FOR_CREDS_OPTION);
+        k5_buf_add_uint16_le(&buf, credmsg.length);
+        k5_buf_add_len(&buf, credmsg.data, credmsg.length);
     }
+    if (data->exts->iakerb.conv != NULL) {
+        k5_buf_add_uint32_be(&buf, KRB5_GSS_EXTS_IAKERB_FINISHED);
+        k5_buf_add_uint32_be(&buf, finished->length);
+        k5_buf_add_len(&buf, finished->data, finished->length);
+    }
+    while (junk--)
+        k5_buf_add_byte(&buf, 'i');
 
-    ptr = (unsigned char *)data->checksum_data.data;
-
-    TWRITE_INT(ptr, data->md5.length, 0);
-    TWRITE_STR(ptr, data->md5.contents, data->md5.length);
-    TWRITE_INT(ptr, data->ctx->gss_flags, 0);
+    code = k5_buf_status(&buf);
+    if (code)
+        goto cleanup;
 
-    if (credmsg.data) {
-        TWRITE_INT16(ptr, KRB5_GSS_FOR_CREDS_OPTION, 0);
-        TWRITE_INT16(ptr, credmsg.length, 0);
-        TWRITE_STR(ptr, credmsg.data, credmsg.length);
-    }
-    if (data->exts->iakerb.conv) {
-        TWRITE_INT(ptr, KRB5_GSS_EXTS_IAKERB_FINISHED, 1);
-        TWRITE_INT(ptr, finished->length, 1);
-        TWRITE_STR(ptr, finished->data, finished->length);
-    }
-    if (junk)
-        memset(ptr, 'i', junk);
+    data->checksum_data = make_data(buf.data, buf.len);
     *out = &data->checksum_data;
     code = 0;
+
 cleanup:
     krb5_free_data_contents(context, &credmsg);
     krb5_free_data(context, finished);
@@ -393,9 +382,9 @@
     struct gss_checksum_data cksum_struct;
     krb5_checksum md5;
     krb5_data ap_req;
-    unsigned char *ptr;
     unsigned char *t;
     unsigned int tlen;
+    struct k5buf buf;
 
     k5_mutex_assert_locked(&cred->lock);
     ap_req.data = 0;
@@ -447,19 +436,15 @@
     } else {
         /* allocate space for the token */
         tlen = g_token_size((gss_OID) mech_type, ap_req.length);
-
-        if ((t = (unsigned char *) gssalloc_malloc(tlen)) == NULL) {
+        t = gssalloc_malloc(tlen);
+        if (t == NULL) {
             code = ENOMEM;
             goto cleanup;
         }
-
-        /* fill in the buffer */
-        ptr = t;
-
-        g_make_token_header(mech_type, ap_req.length,
-                            &ptr, KG_TOK_CTX_AP_REQ);
-
-        TWRITE_STR(ptr, ap_req.data, ap_req.length);
+        k5_buf_init_fixed(&buf, t, tlen);
+        g_make_token_header(&buf, mech_type, ap_req.length, KG_TOK_CTX_AP_REQ);
+        k5_buf_add_len(&buf, ap_req.data, ap_req.length);
+        assert(buf.len == tlen);
 
         /* pass it back */
 
@@ -664,7 +649,7 @@
     if (time_rec) {
         if ((code = krb5_timeofday(context, &now)))
             goto cleanup;
-        *time_rec = ts_delta(ctx->krb_times.endtime, now);
+        *time_rec = ts_interval(now, ctx->krb_times.endtime);
     }
 
     /* set the other returns */
@@ -730,7 +715,6 @@
 {
     OM_uint32 major_status;
     unsigned char *ptr;
-    char *sptr;
     krb5_data ap_rep;
     krb5_ap_rep_enc_part *ap_rep_data;
     krb5_timestamp now;
@@ -779,7 +763,6 @@
     if (ctx->gss_flags & GSS_C_DCE_STYLE) {
         /* Raw AP-REP */
         ap_rep.length = input_token->length;
-        ap_rep.data = (char *)input_token->value;
     } else if (g_verify_token_header(ctx->mech_used,
                                      &(ap_rep.length),
                                      &ptr, KG_TOK_CTX_AP_REP,
@@ -791,9 +774,7 @@
 
             /* Handle a KRB_ERROR message from the server */
 
-            sptr = (char *) ptr;           /* PC compiler bug */
-            TREAD_STR(sptr, ap_rep.data, ap_rep.length);
-
+            ap_rep.data = (char *)ptr;
             code = krb5_rd_error(context, &ap_rep, &krb_error);
             if (code)
                 goto fail;
@@ -808,9 +789,7 @@
             return(GSS_S_DEFECTIVE_TOKEN);
         }
     }
-
-    sptr = (char *) ptr;                      /* PC compiler bug */
-    TREAD_STR(sptr, ap_rep.data, ap_rep.length);
+    ap_rep.data = (char *)ptr;
 
     /* decode the ap_rep */
     if ((code = krb5_rd_rep(context, ctx->auth_context, &ap_rep,
@@ -878,7 +857,7 @@
     if (time_rec) {
         if ((code = krb5_timeofday(context, &now)))
             goto fail;
-        *time_rec = ts_delta(ctx->krb_times.endtime, now);
+        *time_rec = ts_interval(now, ctx->krb_times.endtime);
     }
 
     if (ret_flags)

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/inq_context.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/inq_context.c Changed

@@ -95,8 +95,8 @@
 krb5_error_code code;
 krb5_gss_ctx_id_rec *ctx;
 krb5_gss_name_t initiator, acceptor;
- krb5_timestamp now;
- krb5_deltat lifetime;
+ krb5_timestamp now, start;
+ OM_uint32 lifetime;
 
 if (initiator_name)
 *initiator_name = (gss_name_t) NULL;
@@ -120,11 +120,8 @@
 
 /* Add the maximum allowable clock skew as a grace period for context
 * expiration, just as we do for the ticket during authentication. */
- lifetime = ts_delta(ctx->krb_times.endtime, now);
- if (!ctx->initiate)
- lifetime += context->clockskew;
- if (lifetime < 0)
- lifetime = 0;
+ start = ctx->initiate ? now : ts_incr(now, -context->clockskew);
+ lifetime = ts_interval(start, ctx->krb_times.endtime);
 
 if (initiator_name) {
 code = kg_duplicate_name(context,
@@ -189,58 +186,95 @@
 return GSS_S_COMPLETE;
 }
 
-OM_uint32
-gss_krb5int_inq_session_key(
- OM_uint32 *minor_status,
- const gss_ctx_id_t context_handle,
- const gss_OID desired_object,
- gss_buffer_set_t *data_set)
+/* Add two buffers to data_set giving the contents and enctype of key. */
+static OM_uint32
+inq_session_key_result(OM_uint32 *minor_status, krb5_key key,
+ gss_buffer_set_t *data_set)
 {
- krb5_gss_ctx_id_rec *ctx;
- krb5_key key;
 gss_buffer_desc keyvalue, keyinfo;
- OM_uint32 major_status, minor;
+ OM_uint32 major, tmpmin;
 unsigned char oid_bufGSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH + 6;
 gss_OID_desc oid;
 
- ctx = (krb5_gss_ctx_id_rec *) context_handle;
- key = ctx->have_acceptor_subkey ? ctx->acceptor_subkey : ctx->subkey;
-
 keyvalue.value = key->keyblock.contents;
 keyvalue.length = key->keyblock.length;
-
- major_status = generic_gss_add_buffer_set_member(minor_status, &keyvalue, data_set);
- if (GSS_ERROR(major_status))
+ major = generic_gss_add_buffer_set_member(minor_status, &keyvalue,
+ data_set);
+ if (GSS_ERROR(major))
 goto cleanup;
 
 oid.elements = oid_buf;
 oid.length = sizeof(oid_buf);
-
- major_status = generic_gss_oid_compose(minor_status,
- GSS_KRB5_SESSION_KEY_ENCTYPE_OID,
- GSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH,
- key->keyblock.enctype,
- &oid);
- if (GSS_ERROR(major_status))
+ major = generic_gss_oid_compose(minor_status,
+ GSS_KRB5_SESSION_KEY_ENCTYPE_OID,
+ GSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH,
+ key->keyblock.enctype, &oid);
+ if (GSS_ERROR(major))
 goto cleanup;
 
 keyinfo.value = oid.elements;
 keyinfo.length = oid.length;
-
- major_status = generic_gss_add_buffer_set_member(minor_status, &keyinfo, data_set);
- if (GSS_ERROR(major_status))
+ major = generic_gss_add_buffer_set_member(minor_status, &keyinfo,
+ data_set);
+ if (GSS_ERROR(major))
 goto cleanup;
 
 return GSS_S_COMPLETE;
 
 cleanup:
 if (*data_set != GSS_C_NO_BUFFER_SET) {
- if ((*data_set)->count != 0)
- memset((*data_set)->elements0.value, 0, (*data_set)->elements0.length);
- gss_release_buffer_set(&minor, data_set);
+ if ((*data_set)->count != 0) {
+ zap((*data_set)->elements0.value,
+ (*data_set)->elements0.length);
+ }
+ gss_release_buffer_set(&tmpmin, data_set);
 }
 
- return major_status;
+ return major;
+}
+
+OM_uint32
+gss_krb5int_inq_sspi_session_key(OM_uint32 *minor_status,
+ const gss_ctx_id_t context_handle,
+ const gss_OID desired_object,
+ gss_buffer_set_t *data_set)
+{
+ krb5_gss_ctx_id_t ctx = (krb5_gss_ctx_id_t)context_handle;
+ krb5_key key;
+
+ if (ctx->terminated || !ctx->established) {
+ *minor_status = KG_CTX_INCOMPLETE;
+ return GSS_S_NO_CONTEXT;
+ }
+ key = ctx->have_acceptor_subkey ? ctx->acceptor_subkey : ctx->subkey;
+ return inq_session_key_result(minor_status, key, data_set);
+}
+
+OM_uint32
+gss_krb5int_inq_odbc_session_key(OM_uint32 *minor_status,
+ const gss_ctx_id_t context_handle,
+ const gss_OID desired_object,
+ gss_buffer_set_t *data_set)
+{
+ OM_uint32 major;
+ krb5_error_code ret;
+ krb5_gss_ctx_id_t ctx = (krb5_gss_ctx_id_t)context_handle;
+ krb5_key key;
+
+ if (ctx->terminated || !ctx->established) {
+ *minor_status = KG_CTX_INCOMPLETE;
+ return GSS_S_NO_CONTEXT;
+ }
+
+ ret = krb5_auth_con_getkey_k(ctx->k5_context, ctx->auth_context, &key);
+ if (ret) {
+ *minor_status = ret;
+ return GSS_S_FAILURE;
+ }
+
+ major = inq_session_key_result(minor_status, key, data_set);
+ krb5_k_free_key(ctx->k5_context, key);
+ return major;
 }
 
 OM_uint32

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/inq_cred.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/inq_cred.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/k5seal.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/k5seal.c Changed

@@ -78,11 +78,11 @@
 * tlen is the length of the token
 * including header. */
 unsigned int conflen=0, tmsglen, tlen, msglen;
- unsigned char *t, *ptr;
+ unsigned char *t, *metadata, *checksum, *payload;
 unsigned char *plain;
 unsigned char pad;
 krb5_keyusage sign_usage = KG_USAGE_SIGN;
-
+ struct k5buf buf;
 
 assert((!do_encrypt) || (toktype == KG_TOK_SEAL_MSG));
 /* create the token buffer */
@@ -108,31 +108,37 @@
 msglen = text->length;
 pad = 0;
 }
- tlen = g_token_size((gss_OID) oid, 14+cksum_size+tmsglen);
 
- if ((t = (unsigned char *) gssalloc_malloc(tlen)) == NULL)
+ tlen = g_token_size(oid, 14 + cksum_size + tmsglen);
+ t = gssalloc_malloc(tlen);
+ if (t == NULL)
 return(ENOMEM);
+ k5_buf_init_fixed(&buf, t, tlen);
 
 /*** fill in the token */
 
- ptr = t;
- g_make_token_header(oid, 14+cksum_size+tmsglen, &ptr, toktype);
+ g_make_token_header(&buf, oid, 14 + cksum_size + tmsglen, toktype);
+ metadata = k5_buf_get_space(&buf, 14);
+ checksum = k5_buf_get_space(&buf, cksum_size);
+ payload = k5_buf_get_space(&buf, tmsglen);
+ assert(metadata != NULL && checksum != NULL && payload != NULL);
+ assert(buf.len == tlen);
 
 /* 0..1 SIGN_ALG */
- store_16_le(signalg, &ptr0);
+ store_16_le(signalg, &metadata0);
 
 /* 2..3 SEAL_ALG or Filler */
 if ((toktype == KG_TOK_SEAL_MSG) && do_encrypt) {
- store_16_le(sealalg, &ptr2);
+ store_16_le(sealalg, &metadata2);
 } else {
 /* No seal */
- ptr2 = 0xff;
- ptr3 = 0xff;
+ metadata2 = 0xFF;
+ metadata3 = 0xFF;
 }
 
 /* 4..5 Filler */
- ptr4 = 0xff;
- ptr5 = 0xff;
+ metadata4 = 0xFF;
+ metadata5 = 0xFF;
 
 /* pad the plaintext, encrypt if needed, and stick it in the token */
 
@@ -183,8 +189,9 @@
 gssalloc_free(t);
 return(ENOMEM);
 }
- (void) memcpy(data_ptr, ptr-2, 8);
- (void) memcpy(data_ptr+8, plain, msglen);
+ /* Checksum over the token ID, metadata bytes, and plaintext. */
+ memcpy(data_ptr, metadata - 2, 8);
+ memcpy(data_ptr + 8, plain, msglen);
 plaind.length = 8 + msglen;
 plaind.data = data_ptr;
 code = krb5_k_make_checksum(context, md5cksum.checksum_type, seq,
@@ -204,10 +211,10 @@
 */
 if (md5cksum.length != cksum_size)
 abort ();
- memcpy (ptr+14, md5cksum.contents, md5cksum.length);
+ memcpy(checksum, md5cksum.contents, md5cksum.length);
 break;
 case SGN_ALG_HMAC_MD5:
- memcpy (ptr+14, md5cksum.contents, cksum_size);
+ memcpy(checksum, md5cksum.contents, cksum_size);
 break;
 }
 
@@ -215,8 +222,9 @@
 
 /* create the seq_num */
 
- if ((code = kg_make_seq_num(context, seq, direction?0:0xff,
- (krb5_ui_4)*seqnum, ptr+14, ptr+6))) {
+ code = kg_make_seq_num(context, seq, direction?0:0xff,
+ (krb5_ui_4)*seqnum, checksum, metadata + 6);
+ if (code) {
 xfree (plain);
 gssalloc_free(t);
 return(code);
@@ -240,10 +248,8 @@
 assert (enc_key->length == 16);
 for (i = 0; i <= 15; i++)
 ((char *) enc_key->contents)i ^=0xf0;
- code = kg_arcfour_docrypt (enc_key, 0,
- bigend_seqnum, 4,
- plain, tmsglen,
- ptr+14+cksum_size);
+ code = kg_arcfour_docrypt(enc_key, 0, bigend_seqnum, 4, plain,
+ tmsglen, payload);
 krb5_free_keyblock (context, enc_key);
 if (code)
 {
@@ -254,10 +260,9 @@
 }
 break;
 default:
- if ((code = kg_encrypt(context, enc, KG_USAGE_SEAL, NULL,
- (krb5_pointer) plain,
- (krb5_pointer) (ptr+cksum_size+14),
- tmsglen))) {
+ code = kg_encrypt(context, enc, KG_USAGE_SEAL, NULL, plain,
+ payload, tmsglen);
+ if (code) {
 xfree(plain);
 gssalloc_free(t);
 return(code);
@@ -265,7 +270,7 @@
 }
 }else {
 if (tmsglen)
- memcpy(ptr+14+cksum_size, plain, tmsglen);
+ memcpy(payload, plain, tmsglen);
 }
 xfree(plain);

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/k5sealiov.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/k5sealiov.c Changed

@@ -44,9 +44,10 @@
     krb5_checksum cksum;
     size_t k5_headerlen = 0, k5_trailerlen = 0;
     size_t data_length = 0, assoc_data_length = 0;
-    size_t tmsglen = 0, tlen;
-    unsigned char *ptr;
+    size_t tmsglen = 0, cnflen = 0, tlen;
+    uint8_t *metadata, *checksum, *confounder;
     krb5_keyusage sign_usage = KG_USAGE_SIGN;
+    struct k5buf buf;
 
     md5cksum.length = cksum.length = 0;
     md5cksum.contents = cksum.contents = NULL;
@@ -65,17 +66,15 @@
         trailer->buffer.length = 0;
 
     /* Determine confounder length */
-    if (toktype == KG_TOK_WRAP_MSG || conf_req_flag)
-        k5_headerlen = kg_confounder_size(context, ctx->enc->keyblock.enctype);
-
-    /* Check padding length */
     if (toktype == KG_TOK_WRAP_MSG) {
         size_t k5_padlen = (ctx->sealalg == SEAL_ALG_MICROSOFT_RC4) ? 1 : 8;
         size_t gss_padlen;
         size_t conf_data_length;
 
+        cnflen = kg_confounder_size(context, ctx->enc->keyblock.enctype);
+
         kg_iov_msglen(iov, iov_count, &data_length, &assoc_data_length);
-        conf_data_length = k5_headerlen + data_length - assoc_data_length;
+        conf_data_length = cnflen + data_length - assoc_data_length;
 
         if (k5_padlen == 1)
             gss_padlen = 1; /* one byte to indicate one byte of padding */
@@ -103,7 +102,7 @@
         }
 
         if (ctx->gss_flags & GSS_C_DCE_STYLE)
-            tmsglen = k5_headerlen; /* confounder length */
+            tmsglen = cnflen; /* confounder length */
         else
             tmsglen = conf_data_length + padding->buffer.length;
     }
@@ -111,7 +110,7 @@
     /* Determine token size */
     tlen = g_token_size(ctx->mech_used, 14 + ctx->cksum_size + tmsglen);
 
-    k5_headerlen += tlen - tmsglen;
+    k5_headerlen = cnflen + tlen - tmsglen;
 
     if (header->type & GSS_IOV_BUFFER_FLAG_ALLOCATE)
         code = kg_allocate_iov(header, k5_headerlen);
@@ -122,24 +121,28 @@
 
     header->buffer.length = k5_headerlen;
 
-    ptr = (unsigned char *)header->buffer.value;
-    g_make_token_header(ctx->mech_used, 14 + ctx->cksum_size + tmsglen, &ptr, toktype);
+    k5_buf_init_fixed(&buf, header->buffer.value, k5_headerlen);
+    g_make_token_header(&buf, ctx->mech_used, 14 + ctx->cksum_size + tmsglen,
+                        toktype);
+    metadata = k5_buf_get_space(&buf, 14);
+    checksum = k5_buf_get_space(&buf, ctx->cksum_size);
+    assert(metadata != NULL && checksum != NULL);
 
     /* 0..1 SIGN_ALG */
-    store_16_le(ctx->signalg, &ptr0);
+    store_16_le(ctx->signalg, &metadata0);
 
     /* 2..3 SEAL_ALG or Filler */
     if (toktype == KG_TOK_WRAP_MSG && conf_req_flag) {
-        store_16_le(ctx->sealalg, &ptr2);
+        store_16_le(ctx->sealalg, &metadata2);
     } else {
         /* No seal */
-        ptr2 = 0xFF;
-        ptr3 = 0xFF;
+        metadata2 = 0xFF;
+        metadata3 = 0xFF;
     }
 
     /* 4..5 Filler */
-    ptr4 = 0xFF;
-    ptr5 = 0xFF;
+    metadata4 = 0xFF;
+    metadata5 = 0xFF;
 
     /* pad the plaintext, encrypt if needed, and stick it in the token */
 
@@ -163,8 +166,10 @@
     md5cksum.length = k5_trailerlen;
 
     if (k5_headerlen != 0 && toktype == KG_TOK_WRAP_MSG) {
+        confounder = k5_buf_get_space(&buf, cnflen);
+        assert(confounder != NULL);
         code = kg_make_confounder(context, ctx->enc->keyblock.enctype,
-                                  ptr + 14 + ctx->cksum_size);
+                                  confounder);
         if (code != 0)
             goto cleanup;
     }
@@ -180,16 +185,16 @@
     switch (ctx->signalg) {
     case SGN_ALG_HMAC_SHA1_DES3_KD:
         assert(md5cksum.length == ctx->cksum_size);
-        memcpy(ptr + 14, md5cksum.contents, md5cksum.length);
+        memcpy(checksum, md5cksum.contents, md5cksum.length);
         break;
     case SGN_ALG_HMAC_MD5:
-        memcpy(ptr + 14, md5cksum.contents, ctx->cksum_size);
+        memcpy(checksum, md5cksum.contents, ctx->cksum_size);
         break;
     }
 
     /* create the seq_num */
     code = kg_make_seq_num(context, ctx->seq, ctx->initiate ? 0 : 0xFF,
-                           (OM_uint32)ctx->seq_send, ptr + 14, ptr + 6);
+                           (OM_uint32)ctx->seq_send, checksum, metadata + 6);
     if (code != 0)
         goto cleanup;

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/s4u_gss_glue.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/s4u_gss_glue.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/krb5/util_cksum.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/krb5/util_cksum.c Changed

@@ -33,9 +33,7 @@
     gss_channel_bindings_t cb;
     krb5_checksum *cksum;
 {
-    size_t len;
-    char *buf = 0;
-    char *ptr;
+    struct k5buf buf;
     size_t sumlen;
     krb5_data plaind;
     krb5_error_code code;
@@ -59,36 +57,28 @@
         return(0);
     }
 
-    /* create the buffer to checksum into */
-
-    len = (sizeof(krb5_int32)*5+
-           cb->initiator_address.length+
-           cb->acceptor_address.length+
-           cb->application_data.length);
-
-    if ((buf = (char *) xmalloc(len)) == NULL)
-        return(ENOMEM);
-
-    /* helper macros.  This code currently depends on a long being 32
-       bits, and htonl dtrt. */
-
-    ptr = buf;
-
-    TWRITE_INT(ptr, cb->initiator_addrtype, 0);
-    TWRITE_BUF(ptr, cb->initiator_address, 0);
-    TWRITE_INT(ptr, cb->acceptor_addrtype, 0);
-    TWRITE_BUF(ptr, cb->acceptor_address, 0);
-    TWRITE_BUF(ptr, cb->application_data, 0);
+    k5_buf_init_dynamic(&buf);
+    k5_buf_add_uint32_le(&buf, cb->initiator_addrtype);
+    k5_buf_add_uint32_le(&buf, cb->initiator_address.length);
+    k5_buf_add_len(&buf, cb->initiator_address.value,
+                   cb->initiator_address.length);
+    k5_buf_add_uint32_le(&buf, cb->acceptor_addrtype);
+    k5_buf_add_uint32_le(&buf, cb->acceptor_address.length);
+    k5_buf_add_len(&buf, cb->acceptor_address.value,
+                   cb->acceptor_address.length);
+    k5_buf_add_uint32_le(&buf, cb->application_data.length);
+    k5_buf_add_len(&buf, cb->application_data.value,
+                   cb->application_data.length);
+    code = k5_buf_status(&buf);
+    if (code)
+        return code;
 
     /* checksum the data */
 
-    plaind.length = len;
-    plaind.data = buf;
-
+    plaind = make_data(buf.data, buf.len);
     code = krb5_c_make_checksum(context, CKSUMTYPE_RSA_MD5, 0, 0,
                                 &plaind, cksum);
-    if (buf)
-        xfree(buf);
+    k5_buf_free(&buf);
     return code;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/mechglue/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/mechglue/deps Changed

@@ -192,6 +192,7 @@
   $(BUILDTOP)/include/gssapi/gssapi_ext.h $(COM_ERR_DEPS) \
   $(srcdir)/../generic/gssapiP_generic.h $(srcdir)/../generic/gssapi_ext.h \
   $(srcdir)/../generic/gssapi_generic.h $(top_srcdir)/include/k5-buf.h \
+  $(top_srcdir)/include/k5-der.h $(top_srcdir)/include/k5-input.h \
   $(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-thread.h \
   ../generic/gssapi_err_generic.h g_glue.c mechglue.h \
   mglueP.h
@@ -208,7 +209,8 @@
   $(BUILDTOP)/include/gssapi/gssapi_alloc.h $(BUILDTOP)/include/gssapi/gssapi_ext.h \
   $(COM_ERR_DEPS) $(srcdir)/../generic/gssapiP_generic.h \
   $(srcdir)/../generic/gssapi_ext.h $(srcdir)/../generic/gssapi_generic.h \
-  $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-platform.h \
+  $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-der.h \
+  $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-platform.h \
   $(top_srcdir)/include/k5-thread.h ../generic/gssapi_err_generic.h \
   g_imp_name.c mechglue.h mglueP.h
 g_imp_sec_context.so g_imp_sec_context.po $(OUTPRE)g_imp_sec_context.$(OBJEXT): \

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/mechglue/g_encapsulate_token.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/mechglue/g_encapsulate_token.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/mechglue/g_glue.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/mechglue/g_glue.c Changed

@@ -23,6 +23,7 @@
 */
 
 #include "mglueP.h"
+#include "k5-der.h"
 #include <stdio.h>
 #ifdef HAVE_STDLIB_H
 #include <stdlib.h>
@@ -38,219 +39,24 @@
 * This file contains the support routines for the glue layer.
 */
 
-/*
- * get_der_length: Givin a pointer to a buffer that contains a DER encoded
- * length, decode the length updating the buffer to point to the character
- * after the DER encoding. The parameter bytes will point to the number of
- * bytes that made up the DER encoding of the length originally pointed to
- * by the buffer. Note we return -1 on error.
- */
-int
-gssint_get_der_length(unsigned char **buf, unsigned int buf_len, unsigned int *bytes)
+/* Retrieve the mechanism OID from an RFC 2743 InitialContextToken. Place
+ * the result into *oid_out, aliasing memory from token. */
+OM_uint32 gssint_get_mech_type_oid(gss_OID oid_out, gss_buffer_t token)
 {
- /* p points to the beginning of the buffer */
- unsigned char *p = *buf;
- int length, new_length;
- unsigned int octets;
-
- if (buf_len < 1)
-	return (-1);
-
- /* We should have at least one byte */
- *bytes = 1;
-
- /*
- * If the High order bit is not set then the length is just the value
- * of *p.
- */
- if (*p < 128) {
-	*buf = p+1;	/* Advance the buffer */
-	return (*p);		/* return the length */
- }
-
- /*
- * if the High order bit is set, then the low order bits represent
- * the number of bytes that contain the DER encoding of the length.
- */
+ struct k5input in;
 
- octets = *p++ & 0x7f;
- *bytes += octets;
-
- /* See if the supplied buffer contains enough bytes for the length. */
- if (octets > buf_len - 1)
-	return (-1);
-
- /*
- * Calculate a multibyte length. The length is encoded as an
- * unsigned integer base 256.
- */
- for (length = 0; octets; octets--) {
-	new_length = (length << 8) + *p++;
-	if (new_length < length) /* overflow */
-	 return (-1);
-	length = new_length;
- }
-
- *buf = p; /* Advance the buffer */
-
- return (length);
-}
-
-/*
- * der_length_size: Return the number of bytes to encode a given length.
- */
-unsigned int
-gssint_der_length_size(unsigned int len)
-{
- int i;
-
- if (len < 128)
-	return (1);
-
- for (i = 0; len; i++) {
-	len >>= 8;
- }
-
- return (i+1);
-}
-
-/*
- * put_der_length: Encode the supplied length into the buffer pointed to
- * by buf. max_length represents the maximum length of the buffer pointed
- * to by buff. We will advance buf to point to the character after the newly
- * DER encoded length. We return 0 on success or -l it the length cannot
- * be encoded in max_len characters.
- */
-int
-gssint_put_der_length(unsigned int length, unsigned char **buf, unsigned int max_len)
-{
- unsigned char *s, *p;
- unsigned int buf_len = 0;
- int i, first;
-
- /* Oops */
- if (buf == 0 || max_len < 1)
-	return (-1);
-
- s = *buf;
-
- /* Single byte is the length */
- if (length < 128) {
-	*s++ = length;
-	*buf = s;
-	return (0);
- }
-
- /* First byte contains the number of octets */
- p = s + 1;
-
- /* Running total of the DER encoding length */
- buf_len = 0;
-
- /*
- * Encode MSB first. We do the encoding by setting a shift
- * factor to MSO_BIT (24 for 32 bit words) and then shifting the length
- * by the factor. We then encode the resulting low order byte.
- * We subtract 8 from the shift factor and repeat to ecnode the next
- * byte. We stop when the shift factor is zero or we've run out of
- * buffer to encode into.
- */
- first = 0;
- for (i = MSO_BIT; i >= 0 && buf_len <= max_len; i -= 8) {
-	unsigned int v;
-	v = (length >> i) & 0xff;
-	if ((v) || first) {
-	 buf_len += 1;
-	 *p++ = v;
-	 first = 1;
-	}
- }
- if (i >= 0)			/* buffer overflow */
-	return (-1);
-
- /*
- * We go back now and set the first byte to be the length with
- * the high order bit set.
- */
- *s = buf_len | 0x80;
- *buf = p;
-
- return (0);
-}
-
-
-/*
- * glue routine for get_mech_type
- *
- */
-
-OM_uint32 gssint_get_mech_type_oid(OID, token)
- gss_OID		OID;
- gss_buffer_t	token;
-{
- unsigned char * buffer_ptr;
- size_t buflen, lenbytes, length, oidlen;
-
- /*
- * This routine reads the prefix of "token" in order to determine
- * its mechanism type. It assumes the encoding suggested in
- * Appendix B of RFC 1508. This format starts out as follows :
- *
- * tag for APPLICATION 0, Sequenceconstructed, definite length
- * length of remainder of token
- * tag of OBJECT IDENTIFIER
- * length of mechanism OID
- * encoding of mechanism OID
- * <the rest of the token>
- *
- * Numerically, this looks like :
- *
- * 0x60
- * <length> - could be multiple bytes
- * 0x06
- * <length> - assume only one byte, hence OID length < 127
- * <mech OID bytes>
- *
- * The routine fills in the OID value and returns an error as necessary.
- */
-
-	if (OID == NULL)
-		return (GSS_S_CALL_INACCESSIBLE_WRITE);
-
-	if ((token == NULL) || (token->value == NULL))
-	return (GSS_S_DEFECTIVE_TOKEN);
-
- /* Skip past the APP/Sequnce byte and the token length */
-
- buffer_ptr = (unsigned char *) token->value;
- buflen = token->length;
-
- if (buflen < 2 || *buffer_ptr++ != 0x60)
+ if (oid_out == NULL)
+	return (GSS_S_CALL_INACCESSIBLE_WRITE);
+ if (token == NULL || token->value == NULL)
 	return (GSS_S_DEFECTIVE_TOKEN);
- length = *buffer_ptr++;
- buflen -= 2;
-
-	/* check if token length is null */
-	if (length == 0)
-	 return (GSS_S_DEFECTIVE_TOKEN);
-
- if (length & 0x80) {
-	lenbytes = length & 0x7f;
-	if (lenbytes > 4 || lenbytes > buflen)
-	 return (GSS_S_DEFECTIVE_TOKEN);
-	buffer_ptr += lenbytes;
-	buflen -= lenbytes;
- }
 
- if (buflen < 2 || *buffer_ptr++ != 0x06)
+ k5_input_init(&in, token->value, token->length);
+ if (!k5_der_get_value(&in, 0x60, &in))
 	return (GSS_S_DEFECTIVE_TOKEN);
- oidlen = *buffer_ptr++;
- buflen -= 2;
- if (oidlen > 0x7f || oidlen > buflen)
+ if (!k5_der_get_value(&in, 0x06, &in))
 	return (GSS_S_DEFECTIVE_TOKEN);
-
- OID->length = oidlen;
- OID->elements = (void *) buffer_ptr;
+ oid_out->length = in.len;
+ oid_out->elements = (uint8_t *)in.ptr;
 return (GSS_S_COMPLETE);
 }
 
@@ -425,12 +231,8 @@
 gss_mechanism mech;
 gss_buffer_desc dispName;
 gss_OID nameOid;
- unsigned char *buf = NULL;
- const unsigned char tokId = "\x04\x01";
- const unsigned int tokIdLen = 2;
- const int mechOidLenLen = 2, mechOidTagLen = 1, nameLenLen = 4;
- int mechOidDERLen = 0;
- int mechOidLen = 0;
+ int mech_der_len = 0;
+ struct k5buf buf;
 
 mech = gssint_get_mechanism(mech_type);
 if (!mech)
@@ -481,52 +283,24 @@
 	return (status);
 }
 
- /* determine the size of the buffer needed */
- mechOidDERLen = gssint_der_length_size(mech_type->length);
- name_buf->length = tokIdLen + mechOidLenLen +
-	mechOidTagLen + mechOidDERLen +
-	mech_type->length +
-	nameLenLen + dispName.length;
- if ((name_buf->value = (void*)gssalloc_malloc(name_buf->length)) ==
-	(void*)NULL) {
+ /* Allocate space and prepare a buffer. */
+ mech_der_len = k5_der_value_len(mech_type->length);
+ name_buf->length = 2 + 2 + mech_der_len + 4 + dispName.length;
+ name_buf->value = gssalloc_malloc(name_buf->length);
+ if (name_buf->value == NULL) {
 	name_buf->length = 0;
 	(void) gss_release_buffer(&status, &dispName);
 	return (GSS_S_FAILURE);
 }
-
- /* now create the name ..... */
- buf = (unsigned char *)name_buf->value;
- (void) memset(name_buf->value, 0, name_buf->length);
- (void) memcpy(buf, tokId, tokIdLen);
- buf += tokIdLen;
-
- /* spec allows only 2 bytes for the mech oid length */
- mechOidLen = mechOidDERLen + mechOidTagLen + mech_type->length;
- store_16_be(mechOidLen, buf);
- buf += 2;
-
- /*
- * DER Encoding of mech OID contains OID Tag (0x06), length and
- * mech OID value
- */
- *buf++ = 0x06;
- if (gssint_put_der_length(mech_type->length, &buf,
-		 (name_buf->length - tokIdLen -2)) != 0) {
-	name_buf->length = 0;
-	free(name_buf->value);
-	(void) gss_release_buffer(&status, &dispName);
-	return (GSS_S_FAILURE);
- }
-
- (void) memcpy(buf, mech_type->elements, mech_type->length);
- buf += mech_type->length;
-
- /* spec designates the next 4 bytes for the name length */
- store_32_be(dispName.length, buf);
- buf += 4;
-
- /* for the final ingredient - add the name from gss_display_name */
- (void) memcpy(buf, dispName.value, dispName.length);
+ k5_buf_init_fixed(&buf, name_buf->value, name_buf->length);
+
+ /* Assemble the name. */
+ k5_buf_add_len(&buf, "\x04\x01", 2);
+ k5_buf_add_uint16_be(&buf, mech_der_len);
+ k5_der_add_value(&buf, 0x06, mech_type->elements, mech_type->length);
+ k5_buf_add_uint32_be(&buf, dispName.length);
+ k5_buf_add_len(&buf, dispName.value, dispName.length);
+ assert(buf.len == name_buf->length);
 
 /* release the buffer obtained from gss_display_name */
 (void) gss_release_buffer(minor_status, &dispName);

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/mechglue/g_imp_name.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/mechglue/g_imp_name.c Changed

@@ -28,6 +28,7 @@
 */
 
 #include "mglueP.h"
+#include "k5-der.h"
 #include <stdio.h>
 #ifdef HAVE_STDLIB_H
 #include <stdlib.h>
@@ -181,13 +182,6 @@
 return (major_status);
 }
 
-/*
- * GSS export name constants
- */
-static const unsigned int expNameTokIdLen = 2;
-static const unsigned int mechOidLenLen = 2;
-static const unsigned int nameTypeLenLen = 2;
-
 static OM_uint32
 importExportName(minor, unionName, inputNameType)
 OM_uint32 *minor;
@@ -196,59 +190,31 @@
 {
 gss_OID_desc mechOid;
 gss_buffer_desc expName;
- unsigned char *buf;
 gss_mechanism mech;
- OM_uint32 major, mechOidLen, nameLen, curLength;
- unsigned int bytes;
+ OM_uint32 major, mechOidLen, nameLen;
+ uint8_t b2;
+ const uint8_t *name;
+ struct k5input in, oid, old_format;
 
 expName.value = unionName->external_name->value;
 expName.length = unionName->external_name->length;
+ k5_input_init(&in, expName.value, expName.length);
 
- curLength = expNameTokIdLen + mechOidLenLen;
- if (expName.length < curLength)
+ if (k5_input_get_byte(&in) != 0x04)
 	return (GSS_S_DEFECTIVE_TOKEN);
-
- buf = (unsigned char *)expName.value;
- if (buf0 != 0x04)
-	return (GSS_S_DEFECTIVE_TOKEN);
- if (buf1 != 0x01 && buf1 != 0x02) /* allow composite names */
+ b2 = k5_input_get_byte(&in);
+ if (b2 != 0x01 && b2 != 0x02) /* allow composite names */
 	return (GSS_S_DEFECTIVE_TOKEN);
 
- buf += expNameTokIdLen;
+ mechOidLen = k5_input_get_uint16_be(&in);
 
- /* extract the mechanism oid length */
- mechOidLen = (*buf++ << 8);
- mechOidLen |= (*buf++);
- curLength += mechOidLen;
- if (expName.length < curLength)
+ if (!k5_der_get_value(&in, 0x06, &oid))
 	return (GSS_S_DEFECTIVE_TOKEN);
- /*
- * The mechOid itself is encoded in DER format, OID Tag (0x06)
- * length and the value of mech_OID
- */
- if (*buf++ != 0x06)
-	return (GSS_S_DEFECTIVE_TOKEN);
-
- /*
- * mechoid Length is encoded twice; once in 2 bytes as
- * explained in RFC2743 (under mechanism independent exported
- * name object format) and once using DER encoding
- *
- * We verify both lengths.
- */
-
- mechOid.length = gssint_get_der_length(&buf,
-				 (expName.length - curLength), &bytes);
- mechOid.elements = (void *)buf;
-
- /*
- * 'bytes' is the length of the DER length, '1' is for the DER
- * tag for OID
- */
- if ((bytes + mechOid.length + 1) != mechOidLen)
+ /* Verify that mechOidLen is consistent with the DER OID length. */
+ if (mechOidLen != k5_der_value_len(oid.len))
 	return (GSS_S_DEFECTIVE_TOKEN);
-
- buf += mechOid.length;
+ mechOid.length = oid.len;
+ mechOid.elements = (uint8_t *)oid.ptr;
 if ((mech = gssint_get_mechanism(&mechOid)) == NULL)
 	return (GSS_S_BAD_MECH);
 
@@ -297,21 +263,11 @@
 * that included a null terminator which was counted in the
 * display name gss_buffer_desc.
 */
- curLength += 4;		/* 4 bytes for name len */
- if (expName.length < curLength)
-	return (GSS_S_DEFECTIVE_TOKEN);
 
 /* next 4 bytes in the name are the name length */
- nameLen = load_32_be(buf);
- buf += 4;
-
- /*
- * we use < here because bad code in rpcsec_gss rounds up exported
- * name token lengths and pads with nulls, otherwise != would be
- * appropriate
- */
- curLength += nameLen; /* this is the total length */
- if (expName.length < curLength)
+ nameLen = k5_input_get_uint32_be(&in);
+ name = k5_input_get_bytes(&in, nameLen);
+ if (name == NULL)
 	return (GSS_S_DEFECTIVE_TOKEN);
 
 /*
@@ -324,29 +280,19 @@
 * and length) there's the name itself, though null-terminated;
 * this null terminator should also not be there, but it is.
 */
- if (nameLen > 0 && *buf == '\0') {
+ if (nameLen > 0 && *name == '\0') {
 	OM_uint32 nameTypeLen;
-	/* next two bytes are the name oid */
-	if (nameLen < nameTypeLenLen)
-	 return (GSS_S_DEFECTIVE_TOKEN);
-
-	nameLen -= nameTypeLenLen;
 
-	nameTypeLen = (*buf++) << 8;
-	nameTypeLen |= (*buf++);
-
-	if (nameLen < nameTypeLen)
+	/* Skip the name type. */
+	k5_input_init(&old_format, name, nameLen);
+	nameTypeLen = k5_input_get_uint16_be(&old_format);
+	if (k5_input_get_bytes(&old_format, nameTypeLen) == NULL)
 	 return (GSS_S_DEFECTIVE_TOKEN);
-
-	buf += nameTypeLen;
-	nameLen -= nameTypeLen;
-
-	/*
-	 * adjust for expected null terminator that should
-	 * really not be there
-	 */
-	if (nameLen > 0 && *(buf + nameLen - 1) == '\0')
-	 nameLen--;
+	/* Remove a null terminator if one is present. */
+	if (old_format.len > 0 && old_format.ptrold_format.len - 1 == 0)
+	 old_format.len--;
+	name = old_format.ptr;
+	nameLen = old_format.len;
 }
 
 /*
@@ -365,7 +311,7 @@
 *	 IDN is thrown in with Kerberos V extensions).
 */
 expName.length = nameLen;
- expName.value = nameLen ? (void *)buf : NULL;
+ expName.value = nameLen ? (uint8_t *)name : NULL;
 if (mech->gssspi_import_name_by_mech) {
 	major = mech->gssspi_import_name_by_mech(minor, &mechOid, &expName,
 						 GSS_C_NULL_OID,

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/mechglue/mglueP.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/mechglue/mglueP.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/spnego/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/spnego/deps Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/spnego/negoex_util.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/spnego/negoex_util.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/gssapi/spnego/spnego_mech.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/gssapi/spnego/spnego_mech.c Changed

@@ -60,40 +60,24 @@
 /* #pragma ident	"@(#)spnego_mech.c	1.7	04/09/28 SMI" */
 
 #include	<k5-int.h>
+#include	<k5-der.h>
 #include	<krb5.h>
 #include	<mglueP.h>
 #include	"gssapiP_spnego.h"
 #include	<gssapi_err_generic.h>
 
 
-#undef g_token_size
-#undef g_verify_token_header
-#undef g_make_token_header
-
 #define HARD_ERROR(v) ((v) != GSS_S_COMPLETE && (v) != GSS_S_CONTINUE_NEEDED)
 typedef const gss_OID_desc *gss_OID_const;
 
-/* der routines defined in libgss */
-extern unsigned int gssint_der_length_size(unsigned int);
-extern int gssint_get_der_length(unsigned char **, unsigned int,
-				 unsigned int*);
-extern int gssint_put_der_length(unsigned int, unsigned char **, unsigned int);
-
-
 /* private routines for spnego_mechanism */
 static spnego_token_t make_spnego_token(const char *);
 static gss_buffer_desc make_err_msg(const char *);
-static int g_token_size(gss_OID_const, unsigned int);
-static int g_make_token_header(gss_OID_const, unsigned int,
-			 unsigned char **, unsigned int);
-static int g_verify_token_header(gss_OID_const, unsigned int *,
-				 unsigned char **,
-				 int, unsigned int);
-static int g_verify_neg_token_init(unsigned char **, unsigned int);
-static gss_OID get_mech_oid(OM_uint32 *, unsigned char **, size_t);
-static gss_buffer_t get_input_token(unsigned char **, unsigned int);
-static gss_OID_set get_mech_set(OM_uint32 *, unsigned char **, unsigned int);
-static OM_uint32 get_req_flags(unsigned char **, OM_uint32, OM_uint32 *);
+static int verify_token_header(struct k5input *, gss_OID_const);
+static gss_OID get_mech_oid(OM_uint32 *minor_status, struct k5input *);
+static gss_buffer_t get_octet_string(struct k5input *);
+static gss_OID_set get_mech_set(OM_uint32 *, struct k5input *);
+static OM_uint32 get_req_flags(struct k5input *, OM_uint32 *);
 static OM_uint32 get_available_mechs(OM_uint32 *, gss_name_t, gss_cred_usage_t,
 				 gss_const_key_value_set_t,
 				 gss_cred_id_t *, gss_OID_set *,
@@ -103,9 +87,6 @@
 static void release_spnego_ctx(spnego_gss_ctx_id_t *);
 static spnego_gss_ctx_id_t create_spnego_ctx(int);
 static int put_mech_set(gss_OID_set mechSet, gss_buffer_t buf);
-static int put_input_token(unsigned char **, gss_buffer_t, unsigned int);
-static int put_mech_oid(unsigned char **, gss_OID_const, unsigned int);
-static int put_negResult(unsigned char **, OM_uint32, unsigned int);
 
 static OM_uint32
 process_mic(OM_uint32 *, gss_buffer_t, spnego_gss_ctx_id_t,
@@ -150,8 +131,6 @@
 
 static gss_OID
 negotiate_mech(spnego_gss_ctx_id_t, gss_OID_set, OM_uint32 *);
-static int
-g_get_tag_and_length(unsigned char **, int, unsigned int, unsigned int *);
 
 static int
 make_spnego_tokenInit_msg(spnego_gss_ctx_id_t,
@@ -159,8 +138,8 @@
 			gss_buffer_t,
 			OM_uint32, gss_buffer_t, send_token_flag,
 			gss_buffer_t);
-static int
-make_spnego_tokenTarg_msg(OM_uint32, gss_OID, gss_buffer_t,
+static OM_uint32
+make_spnego_tokenTarg_msg(uint8_t, gss_OID, gss_buffer_t,
 			gss_buffer_t, send_token_flag,
 			gss_buffer_t);
 
@@ -169,8 +148,8 @@
 		 gss_OID_set *, OM_uint32 *, gss_buffer_t *,
 		 gss_buffer_t *);
 static OM_uint32
-get_negTokenResp(OM_uint32 *, unsigned char *, unsigned int,
-		 OM_uint32 *, gss_OID *, gss_buffer_t *, gss_buffer_t *);
+get_negTokenResp(OM_uint32 *, struct k5input *, OM_uint32 *, gss_OID *,
+		 gss_buffer_t *, gss_buffer_t *);
 
 static int
 is_kerb_mech(gss_OID oid);
@@ -189,7 +168,6 @@
 static gss_OID_desc negoex_mech = { NEGOEX_OID_LENGTH, NEGOEX_OID };
 
 static int make_NegHints(OM_uint32 *, gss_buffer_t *);
-static int put_neg_hints(unsigned char **, gss_buffer_t, unsigned int);
 static OM_uint32
 acc_ctx_hints(OM_uint32 *, spnego_gss_cred_id_t, gss_buffer_t *, OM_uint32 *,
 	 send_token_flag *, spnego_gss_ctx_id_t *);
@@ -720,15 +698,15 @@
 	 send_token_flag *tokflag)
 {
 	OM_uint32 ret, tmpmin;
-	unsigned char *ptr;
 	gss_OID supportedMech = GSS_C_NO_OID;
+	struct k5input in;
 
 	*acc_negState = UNSPECIFIED;
 	*tokflag = ERROR_TOKEN_SEND;
 
-	ptr = buf->value;
-	ret = get_negTokenResp(minor_status, ptr, buf->length, acc_negState,
-			 &supportedMech, responseToken, mechListMIC);
+	k5_input_init(&in, buf->value, buf->length);
+	ret = get_negTokenResp(minor_status, &in, acc_negState, &supportedMech,
+			 responseToken, mechListMIC);
 	if (ret != GSS_S_COMPLETE)
 		goto cleanup;
 
@@ -1179,33 +1157,6 @@
 	{ 9, "\052\206\110\202\367\022\001\002\002" };
 
 /*
- * verify that the input token length is not 0. If it is, just return.
- * If the token length is greater than 0, der encode as a sequence
- * and place in buf_out, advancing buf_out.
- */
-
-static int
-put_neg_hints(unsigned char **buf_out, gss_buffer_t input_token,
-	 unsigned int buflen)
-{
-	int ret;
-
-	/* if token length is 0, we do not want to send */
-	if (input_token->length == 0)
-		return (0);
-
-	if (input_token->length > buflen)
-		return (-1);
-
-	*(*buf_out)++ = SEQUENCE;
-	if ((ret = gssint_put_der_length(input_token->length, buf_out,
-			 input_token->length)))
-		return (ret);
-	TWRITE_STR(*buf_out, input_token->value, input_token->length);
-	return (0);
-}
-
-/*
 * NegHints ::= SEQUENCE {
 * hintName 0 GeneralString OPTIONAL,
 * hintAddress 1 OCTET STRING OPTIONAL
@@ -1221,42 +1172,28 @@
 make_NegHints(OM_uint32 *minor_status, gss_buffer_t *outbuf)
 {
 	OM_uint32 major_status;
-	unsigned int tlen = 0;
-	unsigned int hintNameSize = 0;
-	unsigned char *ptr;
-	unsigned char *t;
+	size_t hint_len, tlen;
+	uint8_t *t;
 	const char *hintname = "not_defined_in_RFC4178@please_ignore";
 	const size_t hintname_len = strlen(hintname);
+	struct k5buf buf;
 
 	*outbuf = GSS_C_NO_BUFFER;
 	major_status = GSS_S_FAILURE;
 
-	/* Length of DER encoded GeneralString */
-	tlen = 1 + gssint_der_length_size(hintname_len) + hintname_len;
-	hintNameSize = tlen;
-
-	/* Length of DER encoded hintName */
-	tlen += 1 + gssint_der_length_size(hintNameSize);
+	hint_len = k5_der_value_len(hintname_len);
+	tlen = k5_der_value_len(hint_len);
 
 	t = gssalloc_malloc(tlen);
 	if (t == NULL) {
 		*minor_status = ENOMEM;
 		goto errout;
 	}
+	k5_buf_init_fixed(&buf, t, tlen);
 
-	ptr = t;
-
-	*ptr++ = CONTEXT | 0x00; /* hintName identifier */
-	if (gssint_put_der_length(hintNameSize,
-				 &ptr, tlen - (int)(ptr-t)))
-		goto errout;
-
-	*ptr++ = GENERAL_STRING;
-	if (gssint_put_der_length(hintname_len, &ptr, tlen - (int)(ptr-t)))
-		goto errout;
-
-	memcpy(ptr, hintname, hintname_len);
-	ptr += hintname_len;
+	k5_der_add_taglen(&buf, CONTEXT | 0x00, hint_len);
+	k5_der_add_value(&buf, GENERAL_STRING, hintname, hintname_len);
+	assert(buf.len == tlen);
 
 	*outbuf = (gss_buffer_t)malloc(sizeof(gss_buffer_desc));
 	if (*outbuf == NULL) {
@@ -1264,7 +1201,7 @@
 		goto errout;
 	}
 	(*outbuf)->value = (void *)t;
-	(*outbuf)->length = ptr - t;
+	(*outbuf)->length = tlen;
 
 	t = NULL; /* don't free */
 
@@ -1431,8 +1368,7 @@
 {
 	OM_uint32 ret, tmpmin;
 	gss_OID supportedMech;
-	unsigned int len;
-	unsigned char *ptr, *bufstart;
+	struct k5input in;
 
 	ret = GSS_S_DEFECTIVE_TOKEN;
 	*negState = REJECT;
@@ -1441,27 +1377,18 @@
 	*return_token = ERROR_TOKEN_SEND;
 	*responseToken = *mechListMIC = GSS_C_NO_BUFFER;
 
-	ptr = bufstart = buf->value;
-#define REMAIN (buf->length - (ptr - bufstart))
-	if (REMAIN == 0 || REMAIN > INT_MAX)
-		return GSS_S_DEFECTIVE_TOKEN;
+	k5_input_init(&in, buf->value, buf->length);
 
-	/*
-	 * Attempt to work with old Sun SPNEGO.
-	 */
-	if (*ptr == HEADER_ID) {
-		ret = g_verify_token_header(gss_mech_spnego,
-					 &len, &ptr, 0, REMAIN);
+	/* Attempt to work with old Sun SPNEGO. */
+	if (in.len > 0 && *in.ptr == HEADER_ID) {
+		ret = verify_token_header(&in, gss_mech_spnego);
 		if (ret) {
 			*minstat = ret;
 			return GSS_S_DEFECTIVE_TOKEN;
 		}
 	}
-	if (*ptr != (CONTEXT | 0x01)) {
-		return GSS_S_DEFECTIVE_TOKEN;
-	}
-	ret = get_negTokenResp(minstat, ptr, REMAIN,
-			 negState, &supportedMech,
+
+	ret = get_negTokenResp(minstat, &in, negState, &supportedMech,
 			 responseToken, mechListMIC);
 	if (ret != GSS_S_COMPLETE)
 		goto cleanup;
@@ -1484,7 +1411,6 @@
 		generic_gss_release_oid(&tmpmin, &supportedMech);
 	}
 	return ret;
-#undef REMAIN
 }
 
 /*
@@ -3329,34 +3255,24 @@
 /* following are token creation and reading routines */
 
 /*
- * If buff_in is not pointing to a MECH_OID, then return NULL and do not
- * advance the buffer, otherwise, decode the mech_oid from the buffer and
- * place in gss_OID.
+ * If in contains a tagged OID encoding, return a copy of the contents as a
+ * gss_OID and advance in past the encoding. Otherwise return NULL and do not
+ * advance in.
 */
 static gss_OID
-get_mech_oid(OM_uint32 *minor_status, unsigned char **buff_in, size_t length)
+get_mech_oid(OM_uint32 *minor_status, struct k5input *in)
 {
-	OM_uint32	status;
-	gss_OID_desc 	toid;
-	gss_OID		mech_out = NULL;
-	unsigned int	bytes;
-	int		oid_length;
-
-	if (length < 1 || **buff_in != MECH_OID)
-		return (NULL);
-	(*buff_in)++;
-	length--;
+	struct k5input oidrep;
+	OM_uint32 status;
+	gss_OID_desc oid;
+	gss_OID mech_out = NULL;
 
-	oid_length = gssint_get_der_length(buff_in, length, &bytes);
-	if (oid_length < 0 || length - bytes < (size_t)oid_length)
+	if (!k5_der_get_value(in, MECH_OID, &oidrep))
 		return (NULL);
 
-	toid.length = oid_length;
-	toid.elements = *buff_in;
-	*buff_in += toid.length;
-
-	status = generic_gss_copy_oid(minor_status, &toid, &mech_out);
-
+	oid.length = oidrep.len;
+	oid.elements = (uint8_t *)oidrep.ptr;
+	status = generic_gss_copy_oid(minor_status, &oid, &mech_out);
 	if (status != GSS_S_COMPLETE) {
 		map_errcode(minor_status);
 		mech_out = NULL;
@@ -3366,42 +3282,24 @@
 }
 
 /*
- * der encode the given mechanism oid into buf_out, advancing the
- * buffer pointer.
- */
-
-static int
-put_mech_oid(unsigned char **buf_out, gss_OID_const mech, unsigned int buflen)
-{
-	if (buflen < mech->length + 2)
-		return (-1);
-	*(*buf_out)++ = MECH_OID;
-	*(*buf_out)++ = (unsigned char) mech->length;
-	memcpy(*buf_out, mech->elements, mech->length);
-	*buf_out += mech->length;
-	return (0);
-}
-
-/*
- * verify that buff_in points to an octet string, if it does not,
- * return NULL and don't advance the pointer. If it is an octet string
- * decode buff_in into a gss_buffer_t and return it, advancing the
- * buffer pointer.
+ * If in contains a tagged octet string encoding, return a copy of the contents
+ * as a gss_buffer_t and advance in past the encoding. Otherwise return NULL
+ * and do not advance in.
 */
 static gss_buffer_t
-get_input_token(unsigned char **buff_in, unsigned int buff_length)
+get_octet_string(struct k5input *in)
 {
 	gss_buffer_t input_token;
-	unsigned int len;
+	struct k5input ostr;
 
-	if (g_get_tag_and_length(buff_in, OCTET_STRING, buff_length, &len) < 0)
+	if (!k5_der_get_value(in, OCTET_STRING, &ostr))
 		return (NULL);
 
 	input_token = (gss_buffer_t)malloc(sizeof (gss_buffer_desc));
 	if (input_token == NULL)
 		return (NULL);
 
-	input_token->length = len;
+	input_token->length = ostr.len;
 	if (input_token->length > 0) {
 		input_token->value = gssalloc_malloc(input_token->length);
 		if (input_token->value == NULL) {
@@ -3409,85 +3307,49 @@
 			return (NULL);
 		}
 
-		memcpy(input_token->value, *buff_in, input_token->length);
+		memcpy(input_token->value, ostr.ptr, input_token->length);
 	} else {
 		input_token->value = NULL;
 	}
-	*buff_in += input_token->length;
 	return (input_token);
 }
 
 /*
- * verify that the input token length is not 0. If it is, just return.
- * If the token length is greater than 0, der encode as an octet string
- * and place in buf_out, advancing buf_out.
- */
-
-static int
-put_input_token(unsigned char **buf_out, gss_buffer_t input_token,
-		unsigned int buflen)
-{
-	int ret;
-
-	/* if token length is 0, we do not want to send */
-	if (input_token->length == 0)
-		return (0);
-
-	if (input_token->length > buflen)
-		return (-1);
-
-	*(*buf_out)++ = OCTET_STRING;
-	if ((ret = gssint_put_der_length(input_token->length, buf_out,
-			 input_token->length)))
-		return (ret);
-	TWRITE_STR(*buf_out, input_token->value, input_token->length);
-	return (0);
-}
-
-/*
 * verify that buff_in points to a sequence of der encoding. The mech
 * set is the only sequence of encoded object in the token, so if it is
 * a sequence of encoding, decode the mechset into a gss_OID_set and
 * return it, advancing the buffer pointer.
 */
 static gss_OID_set
-get_mech_set(OM_uint32 *minor_status, unsigned char **buff_in,
-	 unsigned int buff_length)
+get_mech_set(OM_uint32 *minor_status, struct k5input *in)
 {
 	gss_OID_set returned_mechSet;
-	OM_uint32 major_status;
-	int length;
-	unsigned int bytes;
-	OM_uint32 set_length;
-	unsigned char		*start;
-	int i;
+	OM_uint32 major_status, tmpmin;
+	struct k5input seq;
 
-	if (buff_length < 1 || **buff_in != SEQUENCE_OF)
+	if (!k5_der_get_value(in, SEQUENCE_OF, &seq))
 		return (NULL);
 
-	start = *buff_in;
-	(*buff_in)++;
-
-	length = gssint_get_der_length(buff_in, buff_length - 1, &bytes);
-	if (length < 0 || buff_length - 1 - bytes < (unsigned int)length)
-		return NULL;
-
 	major_status = gss_create_empty_oid_set(minor_status,
 						&returned_mechSet);
 	if (major_status != GSS_S_COMPLETE)
 		return (NULL);
 
-	for (set_length = 0, i = 0; set_length < (unsigned int)length; i++) {
-		gss_OID_desc *temp = get_mech_oid(minor_status, buff_in,
-			buff_length - (*buff_in - start));
-		if (temp == NULL)
-			break;
+	while (!seq.status && seq.len > 0) {
+		gss_OID_desc *oid = get_mech_oid(minor_status, &seq);
+
+		if (oid == NULL) {
+			gss_release_oid_set(&tmpmin, &returned_mechSet);
+			return (NULL);
+		}
 
 		major_status = gss_add_oid_set_member(minor_status,
-						 temp, &returned_mechSet);
-		if (major_status == GSS_S_COMPLETE)
-			set_length += returned_mechSet->elementsi.length +2;
-		generic_gss_release_oid(minor_status, &temp);
+						 oid, &returned_mechSet);
+		generic_gss_release_oid(minor_status, &oid);
+		if (major_status != GSS_S_COMPLETE) {
+			gss_release_oid_set(&tmpmin, &returned_mechSet);
+			return (NULL);
+		}
 	}
 
 	return (returned_mechSet);
@@ -3497,74 +3359,48 @@
 * Encode mechSet into buf.
 */
 static int
-put_mech_set(gss_OID_set mechSet, gss_buffer_t buf)
+put_mech_set(gss_OID_set mechSet, gss_buffer_t buffer_out)
 {
-	unsigned char *ptr;
-	unsigned int i;
-	unsigned int tlen, ilen;
+	uint8_t *ptr;
+	size_t ilen, tlen, i;
+	struct k5buf buf;
+
+	ilen = 0;
+	for (i = 0; i < mechSet->count; i++)
+	 ilen += k5_der_value_len(mechSet->elementsi.length);
+	tlen = k5_der_value_len(ilen);
 
-	tlen = ilen = 0;
-	for (i = 0; i < mechSet->count; i++) {
-		/*
-		 * 0x06 DER LEN OID
-		 */
-		ilen += 1 +
-			gssint_der_length_size(mechSet->elementsi.length) +
-			mechSet->elementsi.length;
-	}
-	/*
-	 * 0x30 DER LEN
-	 */
-	tlen = 1 + gssint_der_length_size(ilen) + ilen;
 	ptr = gssalloc_malloc(tlen);
 	if (ptr == NULL)
 		return -1;
+	k5_buf_init_fixed(&buf, ptr, tlen);
 
-	buf->value = ptr;
-	buf->length = tlen;
-#define REMAIN (buf->length - ((unsigned char *)buf->value - ptr))
-
-	*ptr++ = SEQUENCE_OF;
-	if (gssint_put_der_length(ilen, &ptr, REMAIN) < 0)
-		return -1;
+	k5_der_add_taglen(&buf, SEQUENCE_OF, ilen);
 	for (i = 0; i < mechSet->count; i++) {
-		if (put_mech_oid(&ptr, &mechSet->elementsi, REMAIN) < 0) {
-			return -1;
-		}
+		k5_der_add_value(&buf, MECH_OID,
+				 mechSet->elementsi.elements,
+				 mechSet->elementsi.length);
 	}
+	assert(buf.len == tlen);
+
+	buffer_out->value = ptr;
+	buffer_out->length = tlen;
 	return 0;
-#undef REMAIN
 }
 
-/*
- * Verify that buff_in is pointing to a BIT_STRING with the correct
- * length and padding for the req_flags. If it is, decode req_flags
- * and return them, otherwise, return NULL.
- */
+/* Decode SPNEGO request flags from the DER encoding of a bit string and set
+ * them in *ret_flags. */
 static OM_uint32
-get_req_flags(unsigned char **buff_in, OM_uint32 bodysize,
-	 OM_uint32 *req_flags)
+get_req_flags(struct k5input *in, OM_uint32 *req_flags)
 {
-	unsigned int len;
-
-	if (bodysize < 1 || **buff_in != (CONTEXT | 0x01))
-		return (0);
-
-	if (g_get_tag_and_length(buff_in, (CONTEXT | 0x01),
-				 bodysize, &len) < 0 || len != 4)
-		return GSS_S_DEFECTIVE_TOKEN;
-
-	if (*(*buff_in)++ != BIT_STRING)
+	if (in->status || in->len != 4 ||
+	 k5_input_get_byte(in) != BIT_STRING ||
+	 k5_input_get_byte(in) != BIT_STRING_LENGTH ||
+	 k5_input_get_byte(in) != BIT_STRING_PADDING)
 		return GSS_S_DEFECTIVE_TOKEN;
 
-	if (*(*buff_in)++ != BIT_STRING_LENGTH)
-		return GSS_S_DEFECTIVE_TOKEN;
-
-	if (*(*buff_in)++ != BIT_STRING_PADDING)
-		return GSS_S_DEFECTIVE_TOKEN;
-
-	*req_flags = (OM_uint32) (*(*buff_in)++ >> 1);
-	return (0);
+	*req_flags = k5_input_get_byte(in) >> 1;
+	return GSS_S_COMPLETE;
 }
 
 static OM_uint32
@@ -3577,9 +3413,7 @@
 		 gss_buffer_t *mechListMIC)
 {
 	OM_uint32 err;
-	unsigned char *ptr, *bufstart;
-	unsigned int len;
-	gss_buffer_desc tmpbuf;
+	struct k5input in, seq, field;
 
 	*minor_status = 0;
 	der_mechSet->length = 0;
@@ -3588,148 +3422,101 @@
 	*req_flags = 0;
 	*mechtok = *mechListMIC = GSS_C_NO_BUFFER;
 
-	ptr = bufstart = buf->value;
-	if ((buf->length - (ptr - bufstart)) > INT_MAX)
-		return GSS_S_FAILURE;
-#define REMAIN (buf->length - (ptr - bufstart))
+	k5_input_init(&in, buf->value, buf->length);
 
-	err = g_verify_token_header(gss_mech_spnego,
-				 &len, &ptr, 0, REMAIN);
-	if (err) {
-		*minor_status = err;
-		map_errcode(minor_status);
-		return GSS_S_FAILURE;
-	}
-	*minor_status = g_verify_neg_token_init(&ptr, REMAIN);
-	if (*minor_status) {
-		map_errcode(minor_status);
-		return GSS_S_FAILURE;
-	}
+	/* Advance past the framing header. */
+	err = verify_token_header(&in, gss_mech_spnego);
+	if (err)
+		return GSS_S_DEFECTIVE_TOKEN;
 
-	/* alias into input_token */
-	tmpbuf.value = ptr;
-	tmpbuf.length = REMAIN;
-	*mechSet = get_mech_set(minor_status, &ptr, REMAIN);
-	if (*mechSet == NULL)
-		return GSS_S_FAILURE;
+	/* Advance past the 0 tag for the NegotiationToken choice. */
+	if (!k5_der_get_value(&in, CONTEXT, &seq))
+		return GSS_S_DEFECTIVE_TOKEN;
 
-	tmpbuf.length = ptr - (unsigned char *)tmpbuf.value;
-	der_mechSet->value = gssalloc_malloc(tmpbuf.length);
+	/* Advance past the SEQUENCE tag. */
+	if (!k5_der_get_value(&seq, SEQUENCE, &seq))
+		return GSS_S_DEFECTIVE_TOKEN;
+
+	/* Get the contents of the mechTypes field. Reject an empty field here
+	 * since we musn't allocate a zero-length buffer in the next step. */
+	if (!k5_der_get_value(&seq, CONTEXT, &field) || field.len == 0)
+		return GSS_S_DEFECTIVE_TOKEN;
+
+	/* Store a copy of the contents for MIC computation. */
+	der_mechSet->value = gssalloc_malloc(field.len);
 	if (der_mechSet->value == NULL)
 		return GSS_S_FAILURE;
-	memcpy(der_mechSet->value, tmpbuf.value, tmpbuf.length);
-	der_mechSet->length = tmpbuf.length;
+	memcpy(der_mechSet->value, field.ptr, field.len);
+	der_mechSet->length = field.len;
 
-	err = get_req_flags(&ptr, REMAIN, req_flags);
-	if (err != GSS_S_COMPLETE) {
-		return err;
+	/* Decode the contents into an OID set. */
+	*mechSet = get_mech_set(minor_status, &field);
+	if (*mechSet == NULL)
+		return GSS_S_FAILURE;
+
+	if (k5_der_get_value(&seq, CONTEXT | 0x01, &field)) {
+		err = get_req_flags(&field, req_flags);
+		if (err != GSS_S_COMPLETE)
+			return err;
 	}
-	if (g_get_tag_and_length(&ptr, (CONTEXT | 0x02),
-				 REMAIN, &len) >= 0) {
-		*mechtok = get_input_token(&ptr, len);
-		if (*mechtok == GSS_C_NO_BUFFER) {
+
+	if (k5_der_get_value(&seq, CONTEXT | 0x02, &field)) {
+		*mechtok = get_octet_string(&field);
+		if (*mechtok == GSS_C_NO_BUFFER)
 			return GSS_S_FAILURE;
-		}
 	}
-	if (g_get_tag_and_length(&ptr, (CONTEXT | 0x03),
-				 REMAIN, &len) >= 0) {
-		*mechListMIC = get_input_token(&ptr, len);
-		if (*mechListMIC == GSS_C_NO_BUFFER) {
+
+	if (k5_der_get_value(&seq, CONTEXT | 0x03, &field)) {
+		*mechListMIC = get_octet_string(&field);
+		if (*mechListMIC == GSS_C_NO_BUFFER)
 			return GSS_S_FAILURE;
-		}
 	}
-	return GSS_S_COMPLETE;
-#undef REMAIN
+
+	return seq.status ? GSS_S_DEFECTIVE_TOKEN : GSS_S_COMPLETE;
 }
 
+/* Decode a NegotiationToken of type negTokenResp. */
 static OM_uint32
-get_negTokenResp(OM_uint32 *minor_status,
-		 unsigned char *buf, unsigned int buflen,
-		 OM_uint32 *negState,
-		 gss_OID *supportedMech,
-		 gss_buffer_t *responseToken,
-		 gss_buffer_t *mechListMIC)
+get_negTokenResp(OM_uint32 *minor_status, struct k5input *in,
+		 OM_uint32 *negState, gss_OID *supportedMech,
+		 gss_buffer_t *responseToken, gss_buffer_t *mechListMIC)
 {
-	unsigned char *ptr, *bufstart;
-	unsigned int len;
-	int tmplen;
-	unsigned int tag, bytes;
+	struct k5input seq, field, en;
 
 	*negState = UNSPECIFIED;
 	*supportedMech = GSS_C_NO_OID;
 	*responseToken = *mechListMIC = GSS_C_NO_BUFFER;
-	ptr = bufstart = buf;
-#define REMAIN (buflen - (ptr - bufstart))
 
-	if (g_get_tag_and_length(&ptr, (CONTEXT | 0x01), REMAIN, &len) < 0)
+	/* Advance past the 1 tag for the NegotiationToken choice. */
+	if (!k5_der_get_value(in, CONTEXT | 0x01, &seq))
 		return GSS_S_DEFECTIVE_TOKEN;
-	if (*ptr++ == SEQUENCE) {
-		tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
-		if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
-			return GSS_S_DEFECTIVE_TOKEN;
-	}
-	if (REMAIN < 1)
-		tag = 0;
-	else
-		tag = *ptr++;
-
-	if (tag == CONTEXT) {
-		tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
-		if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
-			return GSS_S_DEFECTIVE_TOKEN;
 
-		if (g_get_tag_and_length(&ptr, ENUMERATED,
-					 REMAIN, &len) < 0)
-			return GSS_S_DEFECTIVE_TOKEN;
+	/* Advance seq past the SEQUENCE tag (historically this code allows the
+	 * tag to be missing). */
+	(void)k5_der_get_value(&seq, SEQUENCE, &seq);
 
-		if (len != ENUMERATION_LENGTH)
+	if (k5_der_get_value(&seq, CONTEXT, &field)) {
+		if (!k5_der_get_value(&field, ENUMERATED, &en))
 			return GSS_S_DEFECTIVE_TOKEN;
-
-		if (REMAIN < 1)
-			return GSS_S_DEFECTIVE_TOKEN;
-		*negState = *ptr++;
-
-		if (REMAIN < 1)
-			tag = 0;
-		else
-			tag = *ptr++;
-	}
-	if (tag == (CONTEXT | 0x01)) {
-		tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
-		if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
+		if (en.len != ENUMERATION_LENGTH)
 			return GSS_S_DEFECTIVE_TOKEN;
+		*negState = *en.ptr;
+	}
 
-		*supportedMech = get_mech_oid(minor_status, &ptr, REMAIN);
+	if (k5_der_get_value(&seq, CONTEXT | 0x01, &field)) {
+		*supportedMech = get_mech_oid(minor_status, &field);
 		if (*supportedMech == GSS_C_NO_OID)
 			return GSS_S_DEFECTIVE_TOKEN;
+	}
 
-		if (REMAIN < 1)
-			tag = 0;
-		else
-			tag = *ptr++;
-	}
-	if (tag == (CONTEXT | 0x02)) {
-		tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
-		if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
-			return GSS_S_DEFECTIVE_TOKEN;
-
-		*responseToken = get_input_token(&ptr, REMAIN);
+	if (k5_der_get_value(&seq, CONTEXT | 0x02, &field)) {
+		*responseToken = get_octet_string(&field);
 		if (*responseToken == GSS_C_NO_BUFFER)
 			return GSS_S_DEFECTIVE_TOKEN;
+	}
 
-		if (REMAIN < 1)
-			tag = 0;
-		else
-			tag = *ptr++;
-	}
-	if (tag == (CONTEXT | 0x03)) {
-		tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
-		if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
-			return GSS_S_DEFECTIVE_TOKEN;
-
-		*mechListMIC = get_input_token(&ptr, REMAIN);
-		if (*mechListMIC == GSS_C_NO_BUFFER)
-			return GSS_S_DEFECTIVE_TOKEN;
+	if (k5_der_get_value(&seq, CONTEXT | 0x04, &field)) {
+		*mechListMIC = get_octet_string(&field);
 
 /* Handle Windows 2000 duplicate response token */
 if (*responseToken &&
@@ -3743,25 +3530,8 @@
 			*mechListMIC = NULL;
 		}
 	}
-	return GSS_S_COMPLETE;
-#undef REMAIN
-}
 
-/*
- * der encode the passed negResults as an ENUMERATED type and
- * place it in buf_out, advancing the buffer.
- */
-
-static int
-put_negResult(unsigned char **buf_out, OM_uint32 negResult,
-	 unsigned int buflen)
-{
-	if (buflen < 3)
-		return (-1);
-	*(*buf_out)++ = ENUMERATED;
-	*(*buf_out)++ = ENUMERATION_LENGTH;
-	*(*buf_out)++ = (unsigned char) negResult;
-	return (0);
+	return seq.status ? GSS_S_DEFECTIVE_TOKEN : GSS_S_COMPLETE;
 }
 
 /*
@@ -3845,22 +3615,15 @@
 * Use DER rules, definite length method per RFC 2478
 */
 static int
-make_spnego_tokenInit_msg(spnego_gss_ctx_id_t spnego_ctx,
-			 int negHintsCompat,
-			 gss_buffer_t mechListMIC, OM_uint32 req_flags,
-			 gss_buffer_t data, send_token_flag sendtoken,
+make_spnego_tokenInit_msg(spnego_gss_ctx_id_t spnego_ctx, int negHintsCompat,
+			 gss_buffer_t mic, OM_uint32 req_flags,
+			 gss_buffer_t token, send_token_flag sendtoken,
 			 gss_buffer_t outbuf)
 {
-	int ret = 0;
-	unsigned int tlen, dataLen = 0;
-	unsigned int negTokenInitSize = 0;
-	unsigned int negTokenInitSeqSize = 0;
-	unsigned int negTokenInitContSize = 0;
-	unsigned int rspTokenSize = 0;
-	unsigned int mechListTokenSize = 0;
-	unsigned int micTokenSize = 0;
-	unsigned char *t;
-	unsigned char *ptr;
+	size_t f0len, f2len, f3len, fields_len, seq_len, choice_len;
+	size_t mech_len, framed_len;
+	uint8_t *t;
+	struct k5buf buf;
 
 	if (outbuf == GSS_C_NO_BUFFER)
 		return (-1);
@@ -3868,141 +3631,66 @@
 	outbuf->length = 0;
 	outbuf->value = NULL;
 
-	/* calculate the data length */
-
-	/*
-	 * 0xa0 DER LEN mechTypes
-	 */
-	mechListTokenSize = 1 +
-		gssint_der_length_size(spnego_ctx->DER_mechTypes.length) +
-		spnego_ctx->DER_mechTypes.length;
-	dataLen += mechListTokenSize;
-
-	/*
-	 * If a token from gss_init_sec_context exists,
-	 * add the length of the token + the ASN.1 overhead
-	 */
-	if (data != NULL) {
-		/*
-		 * Encoded in final output as:
-		 * 0xa2 DER LEN 0x04 DER LEN DATA
-		 * -----s--------|--------s2----------
-		 */
-		rspTokenSize = 1 +
-			gssint_der_length_size(data->length) +
-			data->length;
-		dataLen += 1 + gssint_der_length_size(rspTokenSize) +
-			rspTokenSize;
-	}
-
-	if (mechListMIC) {
-		/*
-		 * Encoded in final output as:
-		 * 0xa3 DER LEN 0x04 DER LEN DATA
-		 *	--s-- -----tlen------------
-		 */
-		micTokenSize = 1 +
-			gssint_der_length_size(mechListMIC->length) +
-			mechListMIC->length;
-		dataLen += 1 +
-			gssint_der_length_size(micTokenSize) +
-			micTokenSize;
-	}
-
-	/*
-	 * Add size of DER encoding
-	 * SEQUENCE { MechTypeList | ReqFLags | Token | mechListMIC } 
-	 * 0x30 DER_LEN data
-	 *
-	 */
-	negTokenInitContSize = dataLen;
-	negTokenInitSeqSize = 1 + gssint_der_length_size(dataLen) + dataLen;
-	dataLen = negTokenInitSeqSize;
-
-	/*
-	 * negTokenInitSize indicates the bytes needed to
-	 * hold the ASN.1 encoding of the entire NegTokenInit
-	 * SEQUENCE.
-	 * 0xa0 DER_LEN + data
-	 *
-	 */
-	negTokenInitSize = 1 +
-		gssint_der_length_size(negTokenInitSeqSize) +
-		negTokenInitSeqSize;
-
-	tlen = g_token_size(gss_mech_spnego, negTokenInitSize);
-
-	t = (unsigned char *) gssalloc_malloc(tlen);
-
-	if (t == NULL) {
+	/* Calculate the length of each field and the total fields length. */
+	fields_len = 0;
+	/* mechTypes 0 MechTypeList, previously assembled in spnego_ctx */
+	f0len = spnego_ctx->DER_mechTypes.length;
+	fields_len += k5_der_value_len(f0len);
+	if (token != NULL) {
+		/* mechToken 2 OCTET STRING OPTIONAL */
+		f2len = k5_der_value_len(token->length);
+		fields_len += k5_der_value_len(f2len);
+	}
+	if (mic != GSS_C_NO_BUFFER) {
+		/* mechListMIC 3 OCTET STRING OPTIONAL */
+		f3len = k5_der_value_len(mic->length);
+		fields_len += k5_der_value_len(f3len);
+	}
+
+	/* Calculate the length of the sequence and choice. */
+	seq_len = k5_der_value_len(fields_len);
+	choice_len = k5_der_value_len(seq_len);
+
+	/* Calculate the framed token length. */
+	mech_len = k5_der_value_len(gss_mech_spnego->length);
+	framed_len = k5_der_value_len(mech_len + choice_len);
+
+	/* Allocate space and prepare a buffer. */
+	t = gssalloc_malloc(framed_len);
+	if (t == NULL)
 		return (-1);
-	}
+	k5_buf_init_fixed(&buf, t, framed_len);
 
-	ptr = t;
+	/* Add generic token framing. */
+	k5_der_add_taglen(&buf, HEADER_ID, mech_len + choice_len);
+	k5_der_add_value(&buf, MECH_OID, gss_mech_spnego->elements,
+			 gss_mech_spnego->length);
 
-	/* create the message */
-	if ((ret = g_make_token_header(gss_mech_spnego, negTokenInitSize,
-			 &ptr, tlen)))
-		goto errout;
+	/* Add NegotiationToken choice tag and NegTokenInit sequence tag. */
+	k5_der_add_taglen(&buf, CONTEXT | 0x00, seq_len);
+	k5_der_add_taglen(&buf, SEQUENCE, fields_len);
 
-	*ptr++ = CONTEXT; /* NegotiationToken identifier */
-	if ((ret = gssint_put_der_length(negTokenInitSeqSize, &ptr, tlen)))
-		goto errout;
+	/* Add the already-encoded mechanism list as mechTypes. */
+	k5_der_add_value(&buf, CONTEXT | 0x00, spnego_ctx->DER_mechTypes.value,
+			 spnego_ctx->DER_mechTypes.length);
 
-	*ptr++ = SEQUENCE;
-	if ((ret = gssint_put_der_length(negTokenInitContSize, &ptr,
-					 tlen - (int)(ptr-t))))
-		goto errout;
-
-	*ptr++ = CONTEXT | 0x00; /* MechTypeList identifier */
-	if ((ret = gssint_put_der_length(spnego_ctx->DER_mechTypes.length,
-					 &ptr, tlen - (int)(ptr-t))))
-		goto errout;
-
-	/* We already encoded the MechSetList */
-	(void) memcpy(ptr, spnego_ctx->DER_mechTypes.value,
-		 spnego_ctx->DER_mechTypes.length);
-
-	ptr += spnego_ctx->DER_mechTypes.length;
-
-	if (data != NULL) {
-		*ptr++ = CONTEXT | 0x02;
-		if ((ret = gssint_put_der_length(rspTokenSize,
-				&ptr, tlen - (int)(ptr - t))))
-			goto errout;
-
-		if ((ret = put_input_token(&ptr, data,
-			tlen - (int)(ptr - t))))
-			goto errout;
-	}
-
-	if (mechListMIC != GSS_C_NO_BUFFER) {
-		*ptr++ = CONTEXT | 0x03;
-		if ((ret = gssint_put_der_length(micTokenSize,
-				&ptr, tlen - (int)(ptr - t))))
-			goto errout;
-
-		if (negHintsCompat) {
-			ret = put_neg_hints(&ptr, mechListMIC,
-					 tlen - (int)(ptr - t));
-			if (ret)
-				goto errout;
-		} else if ((ret = put_input_token(&ptr, mechListMIC,
-				tlen - (int)(ptr - t))))
-			goto errout;
+	if (token != NULL) {
+		k5_der_add_taglen(&buf, CONTEXT | 0x02, f2len);
+		k5_der_add_value(&buf, OCTET_STRING, token->value,
+				 token->length);
 	}
 
-errout:
-	if (ret != 0) {
-		if (t)
-			free(t);
-		t = NULL;
-		tlen = 0;
+	if (mic != GSS_C_NO_BUFFER) {
+		uint8_t id = negHintsCompat ? SEQUENCE : OCTET_STRING;
+		k5_der_add_taglen(&buf, CONTEXT | 0x03, f3len);
+		k5_der_add_value(&buf, id, mic->value, mic->length);
 	}
-	outbuf->length = tlen;
-	outbuf->value = (void *) t;
 
-	return (ret);
+	assert(buf.len == framed_len);
+	outbuf->length = framed_len;
+	outbuf->value = t;
+
+	return (0);
 }
 
 /*
@@ -4010,413 +3698,106 @@
 * gss_accept_sec_context and eventually up to the application program
 * and over to the client.
 */
-static int
-make_spnego_tokenTarg_msg(OM_uint32 status, gss_OID mech_wanted,
-			 gss_buffer_t data, gss_buffer_t mechListMIC,
+static OM_uint32
+make_spnego_tokenTarg_msg(uint8_t status, gss_OID mech_wanted,
+			 gss_buffer_t token, gss_buffer_t mic,
 			 send_token_flag sendtoken,
 			 gss_buffer_t outbuf)
 {
-	unsigned int tlen = 0;
-	unsigned int ret = 0;
-	unsigned int NegTokenTargSize = 0;
-	unsigned int NegTokenSize = 0;
-	unsigned int rspTokenSize = 0;
-	unsigned int micTokenSize = 0;
-	unsigned int dataLen = 0;
-	unsigned char *t;
-	unsigned char *ptr;
+	size_t f0len, f1len, f2len, f3len, fields_len, seq_len, choice_len;
+	uint8_t *t;
+	struct k5buf buf;
 
 	if (outbuf == GSS_C_NO_BUFFER)
 		return (GSS_S_DEFECTIVE_TOKEN);
 	if (sendtoken == INIT_TOKEN_SEND && mech_wanted == GSS_C_NO_OID)
-	 return (GSS_S_DEFECTIVE_TOKEN);
+		return (GSS_S_DEFECTIVE_TOKEN);
 
 	outbuf->length = 0;
 	outbuf->value = NULL;
 
-	/*
-	 * ASN.1 encoding of the negResult
-	 * ENUMERATED type is 3 bytes
-	 * ENUMERATED TAG, Length, Value,
-	 * Plus 2 bytes for the CONTEXT id and length.
-	 */
-	dataLen = 5;
-
-	/*
-	 * calculate data length
-	 *
-	 * If this is the initial token, include length of
-	 * mech_type and the negotiation result fields.
-	 */
+	/* Calculate the length of each field and the total fields length. */
+	fields_len = 0;
+	/* negState 0 ENUMERATED { ... } OPTIONAL */
+	f0len = k5_der_value_len(1);
+	fields_len += k5_der_value_len(f0len);
 	if (sendtoken == INIT_TOKEN_SEND) {
-		int mechlistTokenSize;
-		/*
-		 * 1 byte for the CONTEXT ID(0xa0),
-		 * 1 byte for the OID ID(0x06)
-		 * 1 byte for OID Length field
-		 * Plus the rest... (OID Length, OID value)
-		 */
-		mechlistTokenSize = 3 + mech_wanted->length +
-			gssint_der_length_size(mech_wanted->length);
-
-		dataLen += mechlistTokenSize;
-	}
-	if (data != NULL && data->length > 0) {
-		/* Length of the inner token */
-		rspTokenSize = 1 + gssint_der_length_size(data->length) +
-			data->length;
-
-		dataLen += rspTokenSize;
-
-		/* Length of the outer token */
-		dataLen += 1 + gssint_der_length_size(rspTokenSize);
-	}
-	if (mechListMIC != NULL) {
-
-		/* Length of the inner token */
-		micTokenSize = 1 + gssint_der_length_size(mechListMIC->length) +
-			mechListMIC->length;
-
-		dataLen += micTokenSize;
-
-		/* Length of the outer token */
-		dataLen += 1 + gssint_der_length_size(micTokenSize);
-	}
-	/*
-	 * Add size of DER encoded:
-	 * NegTokenTarg SEQUENCE of
-	 * NegResult0 ENUMERATED {
-	 *	accept_completed(0),
-	 *	accept_incomplete(1),
-	 *	reject(2) }
-	 * supportedMech 1 MechType OPTIONAL,
-	 * responseToken 2 OCTET STRING OPTIONAL,
-	 * mechListMIC 3 OCTET STRING OPTIONAL
-	 *
-	 * size = data->length + MechListMic + SupportedMech len +
-	 *	Result Length + ASN.1 overhead
-	 */
-	NegTokenTargSize = dataLen;
-	dataLen += 1 + gssint_der_length_size(NegTokenTargSize);
-
-	/*
-	 * NegotiationToken CHOICE {
-	 * negTokenInit 0	 NegTokenInit,
-	 * negTokenTarg 1	 NegTokenTarg }
-	 */
-	NegTokenSize = dataLen;
-	dataLen += 1 + gssint_der_length_size(NegTokenSize);
+		/* supportedMech 1 MechType OPTIONAL */
+		f1len = k5_der_value_len(mech_wanted->length);
+		fields_len += k5_der_value_len(f1len);
+	}
+	if (token != NULL && token->length > 0) {
+		/* mechToken 2 OCTET STRING OPTIONAL */
+		f2len = k5_der_value_len(token->length);
+		fields_len += k5_der_value_len(f2len);
+	}
+	if (mic != NULL) {
+		/* mechListMIC 3 OCTET STRING OPTIONAL */
+		f3len = k5_der_value_len(mic->length);
+		fields_len += k5_der_value_len(f3len);
+	}
+
+	/* Calculate the length of the sequence and choice. */
+	seq_len = k5_der_value_len(fields_len);
+	choice_len = k5_der_value_len(seq_len);
+
+	/* Allocate space and prepare a buffer. */
+	t = gssalloc_malloc(choice_len);
+	if (t == NULL)
+		return (GSS_S_DEFECTIVE_TOKEN);
+	k5_buf_init_fixed(&buf, t, choice_len);
 
-	tlen = dataLen;
-	t = (unsigned char *) gssalloc_malloc(tlen);
+	/* Add the choice tag and begin the sequence. */
+	k5_der_add_taglen(&buf, CONTEXT | 0x01, seq_len);
+	k5_der_add_taglen(&buf, SEQUENCE, fields_len);
+
+	/* Add the negState field. */
+	k5_der_add_taglen(&buf, CONTEXT | 0x00, f0len);
+	k5_der_add_value(&buf, ENUMERATED, &status, 1);
 
-	if (t == NULL) {
-		ret = GSS_S_DEFECTIVE_TOKEN;
-		goto errout;
+	if (sendtoken == INIT_TOKEN_SEND) {
+		/* Add the supportedMech field. */
+		k5_der_add_taglen(&buf, CONTEXT | 0x01, f1len);
+		k5_der_add_value(&buf, MECH_OID, mech_wanted->elements,
+				 mech_wanted->length);
 	}
 
-	ptr = t;
-
-	/*
-	 * Indicate that we are sending CHOICE 1
-	 * (NegTokenTarg)
-	 */
-	*ptr++ = CONTEXT | 0x01;
-	if (gssint_put_der_length(NegTokenSize, &ptr, dataLen) < 0) {
-		ret = GSS_S_DEFECTIVE_TOKEN;
-		goto errout;
-	}
-	*ptr++ = SEQUENCE;
-	if (gssint_put_der_length(NegTokenTargSize, &ptr,
-				 tlen - (int)(ptr-t)) < 0) {
-		ret = GSS_S_DEFECTIVE_TOKEN;
-		goto errout;
+	if (token != NULL && token->length > 0) {
+		/* Add the mechToken field. */
+		k5_der_add_taglen(&buf, CONTEXT | 0x02, f2len);
+		k5_der_add_value(&buf, OCTET_STRING, token->value,
+				 token->length);
 	}
 
-	/*
-	 * First field of the NegTokenTarg SEQUENCE
-	 * is the ENUMERATED NegResult.
-	 */
-	*ptr++ = CONTEXT;
-	if (gssint_put_der_length(3, &ptr,
-				 tlen - (int)(ptr-t)) < 0) {
-		ret = GSS_S_DEFECTIVE_TOKEN;
-		goto errout;
-	}
-	if (put_negResult(&ptr, status, tlen - (int)(ptr - t)) < 0) {
-		ret = GSS_S_DEFECTIVE_TOKEN;
-		goto errout;
-	}
-	if (sendtoken == INIT_TOKEN_SEND) {
-		/*
-		 * Next, is the Supported MechType
-		 */
-		*ptr++ = CONTEXT | 0x01;
-		if (gssint_put_der_length(mech_wanted->length + 2,
-					 &ptr,
-					 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-		if (put_mech_oid(&ptr, mech_wanted,
-				 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-	}
-	if (data != NULL && data->length > 0) {
-		*ptr++ = CONTEXT | 0x02;
-		if (gssint_put_der_length(rspTokenSize, &ptr,
-					 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-		if (put_input_token(&ptr, data,
-				 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-	}
-	if (mechListMIC != NULL) {
-		*ptr++ = CONTEXT | 0x03;
-		if (gssint_put_der_length(micTokenSize, &ptr,
-					 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-		if (put_input_token(&ptr, mechListMIC,
-				 tlen - (int)(ptr - t)) < 0) {
-			ret = GSS_S_DEFECTIVE_TOKEN;
-			goto errout;
-		}
-	}
-	ret = GSS_S_COMPLETE;
-errout:
-	if (ret != GSS_S_COMPLETE) {
-		if (t)
-			free(t);
-	} else {
-		outbuf->length = ptr - t;
-		outbuf->value = (void *) t;
+	if (mic != NULL) {
+		/* Add the mechListMIC field. */
+		k5_der_add_taglen(&buf, CONTEXT | 0x03, f3len);
+		k5_der_add_value(&buf, OCTET_STRING, mic->value, mic->length);
 	}
 
-	return (ret);
-}
+	assert(buf.len == choice_len);
+	outbuf->length = choice_len;
+	outbuf->value = t;
 
-/* determine size of token */
-static int
-g_token_size(gss_OID_const mech, unsigned int body_size)
-{
-	int hdrsize;
-
-	/*
-	 * Initialize the header size to the
-	 * MECH_OID byte + the bytes needed to indicate the
-	 * length of the OID + the OID itself.
-	 *
-	 * 0x06 MECHLENFIELD MECHDATA
-	 */
-	hdrsize = 1 + gssint_der_length_size(mech->length) + mech->length;
-
-	/*
-	 * Now add the bytes needed for the initial header
-	 * token bytes:
-	 * 0x60 + DER_LEN + HDRSIZE
-	 */
-	hdrsize += 1 + gssint_der_length_size(body_size + hdrsize);
-
-	return (hdrsize + body_size);
-}
-
-/*
- * generate token header.
- *
- * Use DER Definite Length method per RFC2478
- * Use of indefinite length encoding will not be compatible
- * with Microsoft or others that actually follow the spec.
- */
-static int
-g_make_token_header(gss_OID_const mech,
-		 unsigned int body_size,
-		 unsigned char **buf,
-		 unsigned int totallen)
-{
-	int ret = 0;
-	unsigned int hdrsize;
-	unsigned char *p = *buf;
-
-	hdrsize = 1 + gssint_der_length_size(mech->length) + mech->length;
-
-	*(*buf)++ = HEADER_ID;
-	if ((ret = gssint_put_der_length(hdrsize + body_size, buf, totallen)))
-		return (ret);
-
-	*(*buf)++ = MECH_OID;
-	if ((ret = gssint_put_der_length(mech->length, buf,
-			 totallen - (int)(p - *buf))))
-		return (ret);
-	TWRITE_STR(*buf, mech->elements, mech->length);
 	return (0);
 }
 
-/*
- * NOTE: This checks that the length returned by
- * gssint_get_der_length() is not greater than the number of octets
- * remaining, even though gssint_get_der_length() already checks, in
- * theory.
- */
+/* Advance in past the APPLICATION 0 tag and thisMech field of an
+ * InitialContextToken encoding, checking that thisMech matches mech. */
 static int
-g_get_tag_and_length(unsigned char **buf, int tag,
-		 unsigned int buflen, unsigned int *outlen)
+verify_token_header(struct k5input *in, gss_OID_const mech)
 {
-	unsigned char *ptr = *buf;
-	int ret = -1; /* pessimists, assume failure ! */
-	unsigned int encoded_len;
-	int tmplen = 0;
-
-	*outlen = 0;
-	if (buflen > 1 && *ptr == tag) {
-		ptr++;
-		tmplen = gssint_get_der_length(&ptr, buflen - 1,
-						&encoded_len);
-		if (tmplen < 0) {
-			ret = -1;
-		} else if ((unsigned int)tmplen > buflen - (ptr - *buf)) {
-			ret = -1;
-		} else
-			ret = 0;
-	}
-	*outlen = tmplen;
-	*buf = ptr;
-	return (ret);
-}
-
-static int
-g_verify_neg_token_init(unsigned char **buf_in, unsigned int cur_size)
-{
-	unsigned char *buf = *buf_in;
-	unsigned char *endptr = buf + cur_size;
-	int seqsize;
-	int ret = 0;
-	unsigned int bytes;
-
-	/*
-	 * Verify this is a NegotiationToken type token
-	 * - check for a0(context specific identifier)
-	 * - get length and verify that enoughd ata exists
-	 */
-	if (g_get_tag_and_length(&buf, CONTEXT, cur_size, &bytes) < 0)
-		return (G_BAD_TOK_HEADER);
-
-	cur_size = bytes; /* should indicate bytes remaining */
-
-	/*
-	 * Verify the next piece, it should identify this as
-	 * a strucure of type NegTokenInit.
-	 */
-	if (*buf++ == SEQUENCE) {
-		if ((seqsize = gssint_get_der_length(&buf, cur_size, &bytes)) < 0)
-			return (G_BAD_TOK_HEADER);
-		/*
-		 * Make sure we have the entire buffer as described
-		 */
-		if (seqsize > endptr - buf)
-			return (G_BAD_TOK_HEADER);
-	} else {
-		return (G_BAD_TOK_HEADER);
-	}
+	gss_OID_desc oid;
+	struct k5input field;
 
-	cur_size = seqsize; /* should indicate bytes remaining */
-
-	/*
-	 * Verify that the first blob is a sequence of mechTypes
-	 */
-	if (*buf++ == CONTEXT) {
-		if ((seqsize = gssint_get_der_length(&buf, cur_size, &bytes)) < 0)
-			return (G_BAD_TOK_HEADER);
-		/*
-		 * Make sure we have the entire buffer as described
-		 */
-		if (seqsize > endptr - buf)
-			return (G_BAD_TOK_HEADER);
-	} else {
-		return (G_BAD_TOK_HEADER);
-	}
-
-	/*
-	 * At this point, *buf should be at the beginning of the
-	 * DER encoded list of mech types that are to be negotiated.
-	 */
-	*buf_in = buf;
-
-	return (ret);
-
-}
-
-/* verify token header. */
-static int
-g_verify_token_header(gss_OID_const mech,
-		 unsigned int *body_size,
-		 unsigned char **buf_in,
-		 int tok_type,
-		 unsigned int toksize)
-{
-	unsigned char *buf = *buf_in;
-	int seqsize;
-	gss_OID_desc toid;
-	int ret = 0;
-	unsigned int bytes;
-
-	if (toksize-- < 1)
-		return (G_BAD_TOK_HEADER);
-
-	if (*buf++ != HEADER_ID)
-		return (G_BAD_TOK_HEADER);
-
-	if ((seqsize = gssint_get_der_length(&buf, toksize, &bytes)) < 0)
-		return (G_BAD_TOK_HEADER);
-
-	if ((seqsize + bytes) != toksize)
+	if (!k5_der_get_value(in, HEADER_ID, in))
 		return (G_BAD_TOK_HEADER);
-
-	if (toksize-- < 1)
+	if (!k5_der_get_value(in, MECH_OID, &field))
 		return (G_BAD_TOK_HEADER);
 
-
-	if (*buf++ != MECH_OID)
-		return (G_BAD_TOK_HEADER);
-
-	if (toksize-- < 1)
-		return (G_BAD_TOK_HEADER);
-
-	toid.length = *buf++;
-
-	if (toksize < toid.length)
-		return (G_BAD_TOK_HEADER);
-	else
-		toksize -= toid.length;
-
-	toid.elements = buf;
-	buf += toid.length;
-
-	if (!g_OID_equal(&toid, mech))
-		ret = G_WRONG_MECH;
-
-	/*
-	 * G_WRONG_MECH is not returned immediately because it's more important
-	 * to return G_BAD_TOK_HEADER if the token header is in fact bad
-	 */
-	if (toksize < 2)
-		return (G_BAD_TOK_HEADER);
-	else
-		toksize -= 2;
-
-	if (!ret) {
-		*buf_in = buf;
-		*body_size = toksize;
-	}
-
-	return (ret);
+	oid.length = field.len;
+	oid.elements = (uint8_t *)field.ptr;
+	return g_OID_equal(&oid, mech) ? 0 : G_WRONG_MECH;
 }
 
 /*

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/admin.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/admin.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/alt_prof.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/alt_prof.c Changed

@@ -50,52 +50,6 @@
 }
 
 /*
- * krb5_aprof_init()        - Initialize alternate profile context.
- *
- * Parameters:
- *        fname             - default file name of the profile.
- *        envname           - environment variable which can override fname
- *        acontextp         - Pointer to opaque context for alternate profile
- *
- * Returns:
- *        error codes from profile_init()
- */
-krb5_error_code
-krb5_aprof_init(char *fname, char *envname, krb5_pointer *acontextp)
-{
-    krb5_error_code ret;
-    profile_t profile;
-    const char *kdc_config;
-    char **filenames;
-    int i;
-    struct k5buf buf;
-
-    ret = krb5_get_default_config_files(&filenames);
-    if (ret)
-        return ret;
-    if (envname == NULL || (kdc_config = secure_getenv(envname)) == NULL)
-        kdc_config = fname;
-    k5_buf_init_dynamic(&buf);
-    if (kdc_config)
-        k5_buf_add(&buf, kdc_config);
-    for (i = 0; filenamesi != NULL; i++) {
-        if (buf.len > 0)
-            k5_buf_add(&buf, ":");
-        k5_buf_add(&buf, filenamesi);
-    }
-    krb5_free_config_files(filenames);
-    if (k5_buf_status(&buf) != 0)
-        return ENOMEM;
-    profile = (profile_t) NULL;
-    ret = profile_init_path(buf.data, &profile);
-    k5_buf_free(&buf);
-    if (ret)
-        return ret;
-    *acontextp = profile;
-    return 0;
-}
-
-/*
  * krb5_aprof_getvals()     - Get values from alternate profile.
  *
  * Parameters:
@@ -345,22 +299,6 @@
 }
 
 /*
- * krb5_aprof_finish()      - Finish alternate profile context.
- *
- * Parameter:
- *        acontext          - opaque context for alternate profile.
- *
- * Returns:
- *        0 on success, something else on failure.
- */
-krb5_error_code
-krb5_aprof_finish(krb5_pointer acontext)
-{
-    profile_release(acontext);
-    return 0;
-}
-
-/*
  * Returns nonzero if it found something to copy; the caller may still need to
  * check the output field or mask to see if the copy (allocation) was
  * successful.  Returns zero if nothing was found to copy, and thus the caller
@@ -510,8 +448,8 @@
                                         kadm5_config_params *params_in,
                                         kadm5_config_params *params_out)
 {
-    char *filename, *envname, *lrealm, *svalue, *sp, *ep, *tp;
-    krb5_pointer aprofile = 0;
+    char *lrealm, *svalue, *sp, *ep, *tp;
+    krb5_pointer aprofile = context->profile;
     const char *hierarchy4;
     krb5_int32 ivalue;
     kadm5_config_params params, empty_params;
@@ -543,25 +481,6 @@
         params.kvno = params_in->kvno;
         params.mask |= KADM5_CONFIG_KVNO;
     }
-    /*
-     * XXX These defaults should to work on both client and
-     * server.  kadm5_get_config_params can be implemented as a
-     * wrapper function in each library that provides correct
-     * defaults for NULL values.
-     */
-    if (use_kdc_config) {
-        filename = DEFAULT_KDC_PROFILE;
-        envname = KDC_PROFILE_ENV;
-    } else {
-        filename = DEFAULT_PROFILE_PATH;
-        envname = "KRB5_CONFIG";
-    }
-    if (context->profile_secure == TRUE)
-        envname = NULL;
-
-    ret = krb5_aprof_init(filename, envname, &aprofile);
-    if (ret)
-        goto cleanup;
 
     /* Initialize realm parameters. */
     hierarchy0 = KRB5_CONF_REALMS;
@@ -814,7 +733,6 @@
     *params_out = params;
 
 cleanup:
-    krb5_aprof_finish(aprofile);
     if (ret) {
         kadm5_free_config_params(context, &params);
         params_out->mask = 0;

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/clnt/libkadm5clnt_mit.exports -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/clnt/libkadm5clnt_mit.exports Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/kadm_rpc_xdr.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/kadm_rpc_xdr.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/logger.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/logger.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kadm5/srv/libkadm5srv_mit.exports -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kadm5/srv/libkadm5srv_mit.exports Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kdb/decrypt_key.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kdb/decrypt_key.c Changed

@@ -1,7 +1,7 @@
 /* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
 /* lib/kdb/decrypt_key.c */
 /*
- * Copyright 1990,1991 by the Massachusetts Institute of Technology.
+ * Copyright 1990,1991,2023 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
@@ -52,88 +52,84 @@
 #include "k5-int.h"
 #include "kdb.h"
 
-/*
- * Decrypt a key from storage in the database. "eblock" is used
- * to decrypt the key in "in" into "out"; the storage pointed to by "out"
- * is allocated before use.
- */
-
+/* Decrypt key_data, putting the result into dbkey_out and (if not null)
+ * keysalt_out. */
 krb5_error_code
-krb5_dbe_def_decrypt_key_data( krb5_context context,
- const krb5_keyblock * mkey,
- const krb5_key_data * key_data,
- krb5_keyblock * dbkey,
- krb5_keysalt * keysalt)
+krb5_dbe_def_decrypt_key_data(krb5_context context, const krb5_keyblock *mkey,
+ const krb5_key_data *kd,
+ krb5_keyblock *dbkey_out,
+ krb5_keysalt *keysalt_out)
 {
- krb5_error_code retval = 0;
- krb5_int16 tmplen;
- krb5_octet * ptr;
- krb5_enc_data cipher;
- krb5_data plain;
+ krb5_error_code ret;
+ int16_t keylen;
+ krb5_enc_data cipher;
+ krb5_data plain = empty_data();
+ krb5_keyblock kb = { 0 };
+ krb5_keysalt salt = { 0 };
 
- if (!mkey)
- return KRB5_KDB_BADSTORED_MKEY;
- ptr = key_data->key_data_contents0;
+ memset(dbkey_out, 0, sizeof(*dbkey_out));
+ if (keysalt_out != NULL)
+ memset(keysalt_out, 0, sizeof(*keysalt_out));
 
- if (ptr) {
- krb5_kdb_decode_int16(ptr, tmplen);
- ptr += 2;
+ if (mkey == NULL)
+ return KRB5_KDB_BADSTORED_MKEY;
 
- if (tmplen < 0)
+ if (kd->key_data_contents0 != NULL && kd->key_data_length0 >= 2) {
+ keylen = load_16_le(kd->key_data_contents0);
+ if (keylen < 0)
 return EINVAL;
 cipher.enctype = ENCTYPE_UNKNOWN;
- cipher.ciphertext.length = key_data->key_data_length0-2;
- cipher.ciphertext.data = (char *) ptr;
- plain.length = key_data->key_data_length0-2;
- if ((plain.data = malloc(plain.length)) == NULL)
- return(ENOMEM);
-
- if ((retval = krb5_c_decrypt(context, mkey, 0 /* XXX */, 0,
- &cipher, &plain))) {
- free(plain.data);
- return retval;
- }
+ cipher.ciphertext = make_data(kd->key_data_contents0 + 2,
+ kd->key_data_length0 - 2);
+ ret = alloc_data(&plain, kd->key_data_length0 - 2);
+ if (ret)
+ goto cleanup;
 
- /* tmplen is the true length of the key. plain.data is the
- plaintext data length, but it may be padded, since the
- old-style etypes didn't store the real length. I can check
- to make sure that there are enough bytes, but I can't do
- any better than that. */
+ ret = krb5_c_decrypt(context, mkey, 0, 0, &cipher, &plain);
+ if (ret)
+ goto cleanup;
 
- if ((unsigned int) tmplen > plain.length) {
- free(plain.data);
- return(KRB5_CRYPTO_INTERNAL);
+ /* Make sure the plaintext has at least as many bytes as the true ke
+ * length (it may have more due to padding). */
+ if ((unsigned int)keylen > plain.length) {
+ ret = KRB5_CRYPTO_INTERNAL;
+ if (ret)
+ goto cleanup;
 }
 
- dbkey->magic = KV5M_KEYBLOCK;
- dbkey->enctype = key_data->key_data_type0;
- dbkey->length = tmplen;
- dbkey->contents = (krb5_octet *) plain.data;
+ kb.magic = KV5M_KEYBLOCK;
+ kb.enctype = kd->key_data_type0;
+ kb.length = keylen;
+ kb.contents = (uint8_t *)plain.data;
+ plain = empty_data();
 }
 
- /* Decode salt data */
- if (keysalt) {
- if (key_data->key_data_ver == 2) {
- keysalt->type = key_data->key_data_type1;
- if ((keysalt->data.length = key_data->key_data_length1)) {
- if (!(keysalt->data.data=(char *)malloc(keysalt->data.length))){
- if (key_data->key_data_contents0) {
- free(dbkey->contents);
- dbkey->contents = 0;
- dbkey->length = 0;
- }
- return ENOMEM;
- }
- memcpy(keysalt->data.data, key_data->key_data_contents1,
- (size_t) keysalt->data.length);
- } else
- keysalt->data.data = (char *) NULL;
+ /* Decode salt data. */
+ if (keysalt_out != NULL) {
+ if (kd->key_data_ver == 2) {
+ salt.type = kd->key_data_type1;
+ salt.data.length = kd->key_data_length1;
+ if (kd->key_data_length1 > 0) {
+ ret = alloc_data(&salt.data, kd->key_data_length1);
+ if (ret)
+ goto cleanup;
+ memcpy(salt.data.data, kd->key_data_contents1,
+ salt.data.length);
+ }
 } else {
- keysalt->type = KRB5_KDB_SALTTYPE_NORMAL;
- keysalt->data.data = (char *) NULL;
- keysalt->data.length = 0;
+ salt.type = KRB5_KDB_SALTTYPE_NORMAL;
 }
 }
 
- return retval;
+ *dbkey_out = kb;
+ if (keysalt_out != NULL)
+ *keysalt_out = salt;
+ memset(&kb, 0, sizeof(kb));
+ memset(&salt, 0, sizeof(salt));
+
+cleanup:
+ zapfree(plain.data, plain.length);
+ krb5_free_keyblock_contents(context, &kb);
+ free(salt.data.data);
+ return ret;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/kdb/encrypt_key.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/kdb/encrypt_key.c Changed

@@ -1,7 +1,7 @@
 /* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
 /* lib/kdb/encrypt_key.c */
 /*
- * Copyright 1990,1991 by the Massachusetts Institute of Technology.
+ * Copyright 1990,1991,2023 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
@@ -53,81 +53,62 @@
 #include "kdb.h"
 
 /*
- * Encrypt a key for storage in the database. "eblock" is used
- * to encrypt the key in "in" into "out"; the storage pointed to by "out"
- * is allocated before use.
+ * Encrypt dbkey for storage in the database, putting the result into
+ * key_data_out.
 */
-
 krb5_error_code
-krb5_dbe_def_encrypt_key_data( krb5_context context,
- const krb5_keyblock * mkey,
- const krb5_keyblock * dbkey,
- const krb5_keysalt * keysalt,
- int keyver,
- krb5_key_data * key_data)
+krb5_dbe_def_encrypt_key_data(krb5_context context, const krb5_keyblock *mkey,
+ const krb5_keyblock *dbkey,
+ const krb5_keysalt *keysalt, int keyver,
+ krb5_key_data *key_data_out)
 {
- krb5_error_code retval;
- krb5_octet * ptr;
- size_t len;
- int i;
- krb5_data plain;
- krb5_enc_data cipher;
-
- for (i = 0; i < key_data->key_data_ver; i++) {
- free(key_data->key_data_contentsi);
- key_data->key_data_contentsi = NULL;
- }
-
- key_data->key_data_ver = 1;
- key_data->key_data_kvno = keyver;
+ krb5_error_code ret;
+ size_t clen;
+ krb5_data plain;
+ krb5_enc_data cipher;
+ krb5_key_data kd = { 0 };
 
- /*
- * The First element of the type/length/contents
- * fields is the key type/length/contents
- */
- if ((retval = krb5_c_encrypt_length(context, mkey->enctype, dbkey->length,
- &len)))
- return(retval);
+ memset(key_data_out, 0, sizeof(*key_data_out));
 
- ptr = malloc(2 + len);
- if (ptr == NULL)
- return(ENOMEM);
+ kd.key_data_ver = 1;
+ kd.key_data_kvno = keyver;
 
- key_data->key_data_type0 = dbkey->enctype;
- key_data->key_data_length0 = 2 + len;
- key_data->key_data_contents0 = ptr;
+ ret = krb5_c_encrypt_length(context, mkey->enctype, dbkey->length, &clen);
+ if (ret)
+ goto cleanup;
 
- krb5_kdb_encode_int16(dbkey->length, ptr);
- ptr += 2;
+ /* The first element of the type/length/contents fields is the key
+ * type/length/contents. */
+ kd.key_data_type0 = dbkey->enctype;
+ kd.key_data_length0 = 2 + clen;
+ kd.key_data_contents0 = k5alloc(kd.key_data_length0, &ret);
+ if (kd.key_data_contents0 == NULL)
+ goto cleanup;
+ store_16_le(dbkey->length, kd.key_data_contents0);
 
- plain.length = dbkey->length;
- plain.data = (char *) dbkey->contents;
+ plain = make_data(dbkey->contents, dbkey->length);
+ cipher.ciphertext = make_data(kd.key_data_contents0 + 2, clen);
+ ret = krb5_c_encrypt(context, mkey, 0, 0, &plain, &cipher);
+ if (ret)
+ goto cleanup;
 
- cipher.ciphertext.length = len;
- cipher.ciphertext.data = (char *) ptr;
-
- if ((retval = krb5_c_encrypt(context, mkey, /* XXX */ 0, 0,
- &plain, &cipher))) {
- free(key_data->key_data_contents0);
- return retval;
- }
-
- /* After key comes the salt in necessary */
- if (keysalt) {
- if (keysalt->type > 0) {
- key_data->key_data_ver++;
- key_data->key_data_type1 = keysalt->type;
- if ((key_data->key_data_length1 = keysalt->data.length) != 0) {
- key_data->key_data_contents1 = malloc(keysalt->data.length);
- if (key_data->key_data_contents1 == NULL) {
- free(key_data->key_data_contents0);
- return ENOMEM;
- }
- memcpy(key_data->key_data_contents1, keysalt->data.data,
- (size_t) keysalt->data.length);
- }
+ /* The second element of each array is the salt, if necessary. */
+ if (keysalt != NULL && keysalt->type > 0) {
+ kd.key_data_ver++;
+ kd.key_data_type1 = keysalt->type;
+ kd.key_data_length1 = keysalt->data.length;
+ if (keysalt->data.length > 0) {
+ kd.key_data_contents1 = k5memdup(keysalt->data.data,
+ keysalt->data.length, &ret);
+ if (kd.key_data_contents1 == NULL)
+ goto cleanup;
 }
 }
 
- return retval;
+ *key_data_out = kd;
+ memset(&kd, 0, sizeof(kd));
+
+cleanup:
+ krb5_dbe_free_key_data_contents(context, &kd);
+ return ret;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/Makefile.in Changed

@@ -2,11 +2,9 @@
 BUILDTOP=$(REL)..$(S)..$(S)..
 SUBDIRS = # ccapi
 WINSUBDIRS = ccapi
-##WIN32##DEFINES = -DUSE_CCAPI -DUSE_CCAPI_V3
+##WIN32##DEFINES = -DUSE_CCAPI
 
-LOCALINCLUDES = -I$(srcdir)$(S)ccapi -I$(srcdir) -I. $(WIN_INCLUDES)
-
-##DOS##WIN_INCLUDES = -I$(top_srcdir)\windows\lib
+LOCALINCLUDES = -I$(srcdir)$(S)ccapi -I$(srcdir) -I.
 
 ##DOS##BUILDTOP = ..\..\..
 ##DOS##PREFIXDIR=ccache
@@ -27,6 +25,7 @@
 
 
 STLIBOBJS= \
+	ccapi_util.o \
 	ccbase.o \
 	cccopy.o \
 	cccursor.o \
@@ -37,6 +36,7 @@
 	ccselect_hostname.o \
 	ccselect_k5identity.o \
 	ccselect_realm.o \
+	cc_api_macos.o \
 	cc_dir.o \
 	cc_retr.o \
 	cc_file.o \
@@ -46,7 +46,8 @@
 	ccfns.o \
 	$(KCMRPC_OBJ)
 
-OBJS=	$(OUTPRE)ccbase.$(OBJEXT) \
+OBJS=	$(OUTPRE)ccapi_util.$(OBJEXT) \
+	$(OUTPRE)ccbase.$(OBJEXT) \
 	$(OUTPRE)cccopy.$(OBJEXT) \
 	$(OUTPRE)cccursor.$(OBJEXT) \
 	$(OUTPRE)ccdefault.$(OBJEXT) \
@@ -56,6 +57,7 @@
 	$(OUTPRE)ccselect_hostname.$(OBJEXT) \
 	$(OUTPRE)ccselect_k5identity.$(OBJEXT) \
 	$(OUTPRE)ccselect_realm.$(OBJEXT) \
+	$(OUTPRE)cc_api_macos.$(OBJEXT) \
 	$(OUTPRE)cc_dir.$(OBJEXT) \
 	$(OUTPRE)cc_retr.$(OBJEXT) \
 	$(OUTPRE)cc_file.$(OBJEXT) \
@@ -65,7 +67,8 @@
 	$(OUTPRE)ccfns.$(OBJEXT) \
 	$(MSLSA_OBJ)
 
-SRCS=	$(srcdir)/ccbase.c \
+SRCS=	$(srcdir)/ccapi_util.c \
+	$(srcdir)/ccbase.c \
 	$(srcdir)/cccopy.c \
 	$(srcdir)/cccursor.c \
 	$(srcdir)/ccdefault.c \
@@ -75,6 +78,7 @@
 	$(srcdir)/ccselect_hostname.c \
 	$(srcdir)/ccselect_k5identity.c \
 	$(srcdir)/ccselect_realm.c \
+	$(srcdir)/cc_api_macos.c \
 	$(srcdir)/cc_dir.c \
 	$(srcdir)/cc_retr.c \
 	$(srcdir)/cc_file.c \

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/cc-int.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/cc-int.h Changed

_service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/cc_api_macos.c Added

@@ -0,0 +1,727 @@
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/cc_api_macos.c - Native MacOS X ccache code */
+/*
+ * Copyright (C) 2022 United States Government as represented by the
+ * Secretary of the Navy.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This ccache module provides compatibility with the default native ccache
+ * type for macOS, by linking against the native Kerberos framework and calling
+ * the CCAPI stubs. Due to workarounds for specific behaviors of the CCAPI
+ * stubs, this implementation is separate from the API ccache implementation
+ * used on Windows.
+ */
+
+#include "k5-int.h"
+#include "cc-int.h"
+#include "ccapi_util.h"
+#include <CredentialsCache.h>
+
+#ifdef USE_CCAPI_MACOS
+
+#include <sys/utsname.h>
+#include <xpc/xpc.h>
+
+const krb5_cc_ops krb5_api_macos_ops;
+
+struct api_macos_cache_data {
+ char *residual;
+ cc_context_t cc_context;
+ cc_ccache_t cache;
+};
+
+struct api_macos_ptcursor {
+ krb5_boolean first;
+ char *primary;
+ cc_context_t cc_context;
+ cc_ccache_iterator_t iter;
+};
+
+/* Map a CCAPI error code to a com_err code. */
+static krb5_error_code
+ccerr2mit(uint32_t err)
+{
+ switch (err) {
+ case ccNoError:
+ return 0;
+ case ccIteratorEnd:
+ return KRB5_CC_END;
+ case ccErrNoMem:
+ return ENOMEM;
+ case ccErrCCacheNotFound:
+ return KRB5_FCC_NOFILE;
+ default:
+ return KRB5_FCC_INTERNAL;
+ }
+}
+
+/* Construct a ccache handle for residual. Use cc_context if it is not null,
+ * or initialize a new one if it is. */
+static krb5_error_code
+make_cache(const char *residual, cc_context_t cc_context,
+ krb5_ccache *ccache_out)
+{
+ krb5_ccache cache = NULL;
+ char *residual_copy = NULL;
+ struct api_macos_cache_data *data = NULL;
+ uint32_t err;
+
+ *ccache_out = NULL;
+
+ if (cc_context == NULL) {
+ err = cc_initialize(&cc_context, ccapi_version_max, NULL, NULL);
+ if (err != ccNoError)
+ return KRB5_FCC_INTERNAL;
+ }
+
+ cache = malloc(sizeof(*cache));
+ if (cache == NULL)
+ goto oom;
+
+ data = calloc(1, sizeof(*data));
+ if (data == NULL)
+ goto oom;
+
+ residual_copy = strdup(residual);
+ if (residual_copy == NULL)
+ goto oom;
+
+ data->residual = residual_copy;
+ data->cc_context = cc_context;
+ cache->ops = &krb5_api_macos_ops;
+ cache->data = data;
+ cache->magic = KV5M_CCACHE;
+ *ccache_out = cache;
+ return 0;
+
+oom:
+ free(cache);
+ free(data);
+ free(residual_copy);
+ if (cc_context)
+ cc_context_release(cc_context);
+ return ENOMEM;
+}
+
+static uint32_t
+open_cache(struct api_macos_cache_data *data)
+{
+ if (data->cache != NULL)
+ return ccNoError;
+ return cc_context_open_ccache(data->cc_context, data->residual,
+ &data->cache);
+}
+
+static const char *
+api_macos_get_name(krb5_context context, krb5_ccache ccache)
+{
+ struct api_macos_cache_data *data = ccache->data;
+
+ return data->residual;
+}
+
+/*
+ * We would like to use cc_context_get_default_ccache_name() for this, but that
+ * doesn't work on macOS if the default cache name is set by the environment or
+ * configuration. So we have to do what the underlying macOS Heimdal API cache
+ * type does to fetch the primary name.
+ *
+ * For macOS 11 (Darwin 20) and later, implement just enough of the XCACHE
+ * protocol to fetch the primary UUID. For earlier versions, query the KCM
+ * daemon.
+ */
+static krb5_error_code
+get_primary_name(krb5_context context, char **name_out)
+{
+ krb5_error_code ret;
+ xpc_connection_t conn = NULL;
+ xpc_object_t request = NULL, reply = NULL;
+ const uint8_t *uuid;
+ uint64_t flags = XPC_CONNECTION_MACH_SERVICE_PRIVILEGED;
+ char uuidstr37, *end;
+ struct utsname un;
+ long release;
+
+ *name_out = NULL;
+
+ if (uname(&un) == 0) {
+ release = strtol(un.release, &end, 10);
+ if (end != un.release && release < 20) {
+ /* Query the KCM daemon for macOS 10 and earlier. */
+ ret = k5_kcm_primary_name(context, name_out);
+ goto cleanup;
+ }
+ }
+
+ conn = xpc_connection_create_mach_service("com.apple.GSSCred", NULL,
+ flags);
+ if (conn == NULL) {
+ ret = ENOMEM;
+ goto cleanup;
+ }
+ xpc_connection_set_event_handler(conn, ^(xpc_object_t o){ ; });
+ xpc_connection_resume(conn);
+
+ request = xpc_dictionary_create(NULL, NULL, 0);
+ if (request == NULL) {
+ ret = ENOMEM;
+ goto cleanup;
+ }
+ xpc_dictionary_set_string(request, "command", "default");
+ xpc_dictionary_set_string(request, "mech", "kHEIMTypeKerberos");
+
+ reply = xpc_connection_send_message_with_reply_sync(conn, request);
+ if (reply == NULL || xpc_get_type(reply) == XPC_TYPE_ERROR) {
+ ret = KRB5_CC_IO;
+ goto cleanup;
+ }
+
+ uuid = xpc_dictionary_get_uuid(reply, "default");
+ if (uuid == NULL) {
+ ret = KRB5_CC_IO;
+ goto cleanup;
+ }
+ uuid_unparse(uuid, uuidstr);
+
+ *name_out = strdup(uuidstr);
+ ret = (*name_out == NULL) ? ENOMEM : 0;
+
+cleanup:
+ if (request != NULL)
+ xpc_release(request);
+ if (reply != NULL)
+ xpc_release(reply);
+ if (conn != NULL)
+ xpc_connection_cancel(conn);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_resolve(krb5_context context, krb5_ccache *cache_out,
+ const char *residual)
+{
+ krb5_error_code ret;
+ char *primary = NULL;
+
+ if (*residual == '\0') {
+ ret = get_primary_name(context, &primary);
+ if (ret)
+ return ret;
+ residual = primary;
+ }
+ ret = make_cache(residual, NULL, cache_out);
+ free(primary);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_gen_new(krb5_context context, krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ uint32_t err;
+ cc_context_t cc_context = NULL;
+ cc_ccache_t cc_ccache = NULL;
+ cc_string_t cachename = NULL;
+ struct api_macos_cache_data *data;
+
+ *cache_out = NULL;
+
+ err = cc_initialize(&cc_context, ccapi_version_max, NULL, NULL);
+ if (err)
+ goto cleanup;
+
+ err = cc_context_create_new_ccache(cc_context, cc_credentials_v5, "",
+ &cc_ccache);
+ if (err)
+ goto cleanup;
+
+ err = cc_ccache_get_name(cc_ccache, &cachename);
+ if (err)
+ goto cleanup;
+
+ ret = make_cache(cachename->data, cc_context, cache_out);
+ cc_context = NULL;
+ if (!ret) {
+ data = (*cache_out)->data;
+ data->cache = cc_ccache;
+ cc_ccache = NULL;
+ }
+
+cleanup:
+ if (cc_context != NULL)
+ cc_context_release(cc_context);
+ if (cc_ccache != NULL)
+ cc_ccache_release(cc_ccache);
+ return err ? KRB5_FCC_INTERNAL : 0;
+}
+
+static krb5_error_code
+api_macos_initialize(krb5_context context, krb5_ccache cache,
+ krb5_principal princ)
+{
+ krb5_error_code ret;
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ char *princstr = NULL, *prefix_name = NULL;
+
+ /* Apple's cc_context_create_ccache() requires a name with type prefix. */
+ if (asprintf(&prefix_name, "API:%s", data->residual) < 0)
+ return ENOMEM;
+
+ ret = krb5_unparse_name(context, princ, &princstr);
+ if (ret) {
+ free(prefix_name);
+ return ret;
+ }
+
+ if (data->cache != NULL) {
+ cc_ccache_release(data->cache);
+ data->cache = NULL;
+ }
+
+ err = cc_context_create_ccache(data->cc_context, prefix_name,
+ cc_credentials_v5, princstr,
+ &data->cache);
+ krb5_free_unparsed_name(context, princstr);
+ free(prefix_name);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_close(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+
+ if (data->cache != NULL)
+ cc_ccache_release(data->cache);
+ cc_context_release(data->cc_context);
+ free(data->residual);
+ free(data);
+ free(cache);
+ return 0;
+}
+
+static krb5_error_code
+api_macos_destroy(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+
+ open_cache(data);
+ if (data->cache != NULL) {
+ cc_ccache_destroy(data->cache);
+ data->cache = NULL;
+ }
+ return api_macos_close(context, cache);
+}
+
+static krb5_error_code
+api_macos_store(krb5_context context, krb5_ccache cache, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ cc_credentials_union *c_un = NULL;
+ krb5_error_code ret;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ ret = k5_krb5_to_ccapi_creds(context, creds, &c_un);
+ if (ret)
+ return ret;
+ err = cc_ccache_store_credentials(data->cache, c_un);
+ k5_release_ccapi_cred(c_un);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_retrieve(krb5_context context, krb5_ccache cache,
+ krb5_flags whichfields, krb5_creds *mcreds,
+ krb5_creds *creds)
+{
+ return k5_cc_retrieve_cred_default(context, cache, whichfields,
+ mcreds, creds);
+}
+
+static krb5_error_code
+api_macos_get_princ(krb5_context context, krb5_ccache cache,
+ krb5_principal *princ)
+{
+ struct api_macos_cache_data *data = cache->data;
+ krb5_error_code ret;
+ uint32_t err;
+ cc_string_t outprinc;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_get_principal(data->cache, cc_credentials_v5, &outprinc);
+ if (err)
+ return ccerr2mit(err);
+ ret = krb5_parse_name(context, outprinc->data, princ);
+ cc_string_release(outprinc);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_start_seq_get(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ cc_credentials_iterator_t iter;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_new_credentials_iterator(data->cache, &iter);
+ if (err)
+ return ccerr2mit(err);
+
+ *cursor = (krb5_cc_cursor)iter;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_next_cred(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ krb5_error_code ret;
+ cc_credentials_iterator_t iter = (cc_credentials_iterator_t) *cursor;
+ cc_credentials_t acreds;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_credentials_iterator_next(iter, &acreds);
+ if (!err) {
+ ret = k5_ccapi_to_krb5_creds(context, acreds->data, creds);
+ cc_credentials_release(acreds);
+ } else {
+ ret = ccerr2mit(err);
+ }
+ return ret;
+}
+
+static krb5_error_code
+api_macos_end_seq_get(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor)
+{
+ cc_credentials_iterator_t iter = *cursor;
+
+ cc_credentials_iterator_release(iter);
+ *cursor = NULL;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_remove_cred(krb5_context context, krb5_ccache cache,
+ krb5_flags flags, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ krb5_error_code ret = 0;
+ cc_credentials_iterator_t iter = NULL;
+ cc_credentials_t acreds;
+ krb5_creds mcreds;
+ krb5_boolean match;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_new_credentials_iterator(data->cache, &iter);
+ if (err)
+ return ccerr2mit(err);
+
+ for (;;) {
+ err = cc_credentials_iterator_next(iter, &acreds);
+ if (err)
+ break;
+
+ ret = k5_ccapi_to_krb5_creds(context, acreds->data, &mcreds);
+ if (ret) {
+ cc_credentials_release(acreds);
+ break;
+ }
+
+ match = krb5int_cc_creds_match_request(context, flags, creds, &mcreds);
+ krb5_free_cred_contents(context, &mcreds);
+ if (match)
+ err = cc_ccache_remove_credentials(data->cache, acreds);
+ cc_credentials_release(acreds);
+ if (err)
+ break;
+ }
+
+ cc_credentials_iterator_release(iter);
+
+ if (ret)
+ return ret;
+ if (err != ccIteratorEnd)
+ return ccerr2mit(err);
+ return 0;
+}
+
+static krb5_error_code
+api_macos_set_flags(krb5_context context, krb5_ccache cache, krb5_flags flags)
+{
+ return 0;
+}
+
+static krb5_error_code
+api_macos_get_flags(krb5_context context, krb5_ccache cache, krb5_flags *flags)
+{
+ *flags = 0;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_new(krb5_context context, krb5_cc_ptcursor *ptcursor_out)
+{
+ krb5_cc_ptcursor ptcursor = NULL;
+ struct api_macos_ptcursor *apt = NULL;
+
+ apt = malloc(sizeof(*apt));
+ if (apt == NULL)
+ return ENOMEM;
+ apt->first = TRUE;
+ apt->primary = NULL;
+ apt->cc_context = NULL;
+ apt->iter = NULL;
+
+ ptcursor = malloc(sizeof(*ptcursor));
+ if (ptcursor == NULL) {
+ free(apt);
+ return ENOMEM;
+ }
+
+ ptcursor->ops = &krb5_api_macos_ops;
+ ptcursor->data = apt;
+ *ptcursor_out = ptcursor;
+ return 0;
+}
+
+/* Create a cache object and open it to ensure that it exists in the
+ * collection. If it does not, return success but set *cache_out to NULL. */
+static krb5_error_code
+make_open_cache(const char *residual, krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ krb5_ccache cache;
+ uint32_t err;
+
+ *cache_out = NULL;
+
+ ret = make_cache(residual, NULL, &cache);
+ if (ret)
+ return ret;
+
+ err = open_cache(cache->data);
+ if (err) {
+ api_macos_close(NULL, cache);
+ return (err == ccErrCCacheNotFound) ? 0 : ccerr2mit(err);
+ }
+
+ *cache_out = cache;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_next(krb5_context context, krb5_cc_ptcursor ptcursor,
+ krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ uint32_t err;
+ struct api_macos_ptcursor *apt = ptcursor->data;
+ const char *defname, *defresidual;
+ cc_ccache_t cache;
+ cc_string_t residual;
+ struct api_macos_cache_data *data;
+
+ *cache_out = NULL;
+
+ defname = krb5_cc_default_name(context);
+ if (defname == NULL || strncmp(defname, "API:", 4) != 0)
+ return 0;
+ defresidual = defname + 4;
+
+ /* If the default cache name is a subsidiary cache, yield that cache if it
+ * exists and stop. */
+ if (*defresidual != '\0') {
+ if (!apt->first)
+ return 0;
+ apt->first = FALSE;
+ return make_open_cache(defresidual, cache_out);
+ }
+
+ if (apt->first) {
+ apt->first = FALSE;
+
+ /* Prepare to iterate over the collection. */
+ err = cc_initialize(&apt->cc_context, ccapi_version_max, NULL, NULL);
+ if (err)
+ return KRB5_FCC_INTERNAL;
+ err = cc_context_new_ccache_iterator(apt->cc_context, &apt->iter);
+ if (err)
+ return KRB5_FCC_INTERNAL;
+
+ /* Yield the primary cache first if it exists. */
+ ret = get_primary_name(context, &apt->primary);
+ if (ret)
+ return ret;
+ ret = make_open_cache(apt->primary, cache_out);
+ if (ret || *cache_out != NULL)
+ return ret;
+ }
+
+ for (;;) {
+ err = cc_ccache_iterator_next(apt->iter, &cache);
+ if (err)
+ return (err == ccIteratorEnd) ? 0 : ccerr2mit(err);
+
+ err = cc_ccache_get_name(cache, &residual);
+ if (err) {
+ cc_ccache_release(cache);
+ return ccerr2mit(err);
+ }
+
+ /* Skip the primary cache since we yielded it first. */
+ if (strcmp(residual->data, apt->primary) != 0)
+ break;
+ }
+
+ ret = make_cache(residual->data, NULL, cache_out);
+ cc_string_release(residual);
+ if (ret) {
+ cc_ccache_release(cache);
+ return ret;
+ }
+ data = (*cache_out)->data;
+ data->cache = cache;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_free(krb5_context context, krb5_cc_ptcursor *ptcursor)
+{
+ struct api_macos_ptcursor *apt = (*ptcursor)->data;
+
+ if (apt != NULL) {
+ if (apt->iter != NULL)
+ cc_ccache_iterator_release(apt->iter);
+ if (apt->cc_context != NULL)
+ cc_context_release(apt->cc_context);
+ free(apt->primary);
+ free(apt);
+ }
+
+ free(*ptcursor);
+ *ptcursor = NULL;
+
+ return 0;
+}
+
+static krb5_error_code
+api_macos_lock(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_lock(data->cache, cc_lock_write, cc_lock_block);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_unlock(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_unlock(data->cache);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_switch_to(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_set_default(data->cache);
+ return ccerr2mit(err);
+}
+
+const krb5_cc_ops krb5_api_macos_ops = {
+ 0,
+ "API",
+ api_macos_get_name,
+ api_macos_resolve,
+ api_macos_gen_new,
+ api_macos_initialize,
+ api_macos_destroy,
+ api_macos_close,
+ api_macos_store,
+ api_macos_retrieve,
+ api_macos_get_princ,
+ api_macos_start_seq_get,
+ api_macos_next_cred,
+ api_macos_end_seq_get,
+ api_macos_remove_cred,
+ api_macos_set_flags,
+ api_macos_get_flags,
+ api_macos_ptcursor_new,
+ api_macos_ptcursor_next,
+ api_macos_ptcursor_free,
+ NULL, /* move */
+ NULL, /* wasdefault */
+ api_macos_lock,
+ api_macos_unlock,
+ api_macos_switch_to,
+};
+
+#endif /* TARGET_OS_MAC */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/cc_kcm.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/cc_kcm.c Changed

@@ -720,6 +720,23 @@
     return ((struct kcm_cache_data *)cache->data)->residual;
 }
 
+/* Fetch the primary name within the collection.  The result is only valid for
+ * the lifetime of req and should not be freed. */
+static krb5_error_code
+get_primary_name(krb5_context context, struct kcmreq *req, struct kcmio *io,
+                 const char **name_out)
+{
+    krb5_error_code ret;
+
+    *name_out = NULL;
+
+    kcmreq_init(req, KCM_OP_GET_DEFAULT_CACHE, NULL);
+    ret = kcmio_call(context, io, req);
+    if (ret)
+        return ret;
+    return kcmreq_get_name(req, name_out);
+}
+
 static krb5_error_code KRB5_CALLCONV
 kcm_resolve(krb5_context context, krb5_ccache *cache_out, const char *residual)
 {
@@ -735,11 +752,7 @@
         goto cleanup;
 
     if (*residual == '\0') {
-        kcmreq_init(&req, KCM_OP_GET_DEFAULT_CACHE, NULL);
-        ret = kcmio_call(context, io, &req);
-        if (ret)
-            goto cleanup;
-        ret = kcmreq_get_name(&req, &defname);
+        ret = get_primary_name(context, &req, io, &defname);
         if (ret)
             goto cleanup;
         residual = defname;
@@ -754,6 +767,31 @@
     return ret;
 }
 
+krb5_error_code
+k5_kcm_primary_name(krb5_context context, char **name_out)
+{
+    krb5_error_code ret;
+    struct kcmreq req = EMPTY_KCMREQ;
+    struct kcmio *io = NULL;
+    const char *name;
+
+    *name_out = NULL;
+
+    ret = kcmio_connect(context, &io);
+    if (ret)
+        goto cleanup;
+    ret = get_primary_name(context, &req, io, &name);
+    if (ret)
+        goto cleanup;
+    *name_out = strdup(name);
+    ret = (*name_out == NULL) ? ENOMEM : 0;
+
+cleanup:
+    kcmio_close(io);
+    kcmreq_free(&req);
+    return ret;
+}
+
 static krb5_error_code KRB5_CALLCONV
 kcm_gen_new(krb5_context context, krb5_ccache *cache_out)
 {

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/cc_keyring.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/cc_keyring.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi/deps Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc.c Changed

@@ -33,8 +33,8 @@
 
 #include "k5-int.h"
 #include "../cc-int.h"
+#include "../ccapi_util.h"
 #include "stdcc.h"
-#include "stdcc_util.h"
 #include "string.h"
 #include <stdio.h>
 
@@ -57,12 +57,8 @@
 #define SHOW_DEBUG(buf)
 #endif
 
-#ifdef USE_CCAPI_V3
 cc_context_t gCntrlBlock = NULL;
 cc_int32 gCCVersion = 0;
-#else
-apiCB *gCntrlBlock = NULL;
-#endif
 
 /*
 * declare our global object wanna-be
@@ -72,7 +68,6 @@
 krb5_cc_ops krb5_cc_stdcc_ops = {
 0,
 "API",
-#ifdef USE_CCAPI_V3
 krb5_stdccv3_get_name,
 krb5_stdccv3_resolve,
 krb5_stdccv3_generate_new,
@@ -96,28 +91,6 @@
 krb5_stdccv3_lock,
 krb5_stdccv3_unlock,
 krb5_stdccv3_switch_to,
-#else
- krb5_stdcc_get_name,
- krb5_stdcc_resolve,
- krb5_stdcc_generate_new,
- krb5_stdcc_initialize,
- krb5_stdcc_destroy,
- krb5_stdcc_close,
- krb5_stdcc_store,
- krb5_stdcc_retrieve,
- krb5_stdcc_get_principal,
- krb5_stdcc_start_seq_get,
- krb5_stdcc_next_cred,
- krb5_stdcc_end_seq_get,
- krb5_stdcc_remove,
- krb5_stdcc_set_flags,
- krb5_stdcc_get_flags,
- NULL,
- NULL,
- NULL,
- NULL,
- NULL,
-#endif
 };
 
 #if defined(_WIN32)
@@ -153,7 +126,6 @@
 
 static const struct err_xlate err_xlate_table =
 {
-#ifdef USE_CCAPI_V3
 { ccIteratorEnd, KRB5_CC_END },
 { ccErrBadParam, KRB5_FCC_INTERNAL },
 { ccErrNoMem, KRB5_CC_NOMEM },
@@ -182,25 +154,6 @@
 { ccErrTimeOffsetNotSet, KRB5_FCC_INTERNAL },
 { ccErrBadInternalMessage, KRB5_FCC_INTERNAL },
 { ccErrNotImplemented, KRB5_FCC_INTERNAL },
-#else
- { CC_BADNAME, KRB5_CC_BADNAME },
- { CC_NOTFOUND, KRB5_CC_NOTFOUND },
- { CC_END, KRB5_CC_END },
- { CC_IO, KRB5_CC_IO },
- { CC_WRITE, KRB5_CC_WRITE },
- { CC_NOMEM, KRB5_CC_NOMEM },
- { CC_FORMAT, KRB5_CC_FORMAT },
- { CC_WRITE, KRB5_CC_WRITE },
- { CC_LOCKED, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_BAD_API_VERSION, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_NO_EXIST, KRB5_FCC_NOFILE },
- { CC_NOT_SUPP, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_BAD_PARM, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_ATTACH, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_RELEASE, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_FULL, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CRED_VERSION, KRB5_FCC_INTERNAL /* XXX */ },
-#endif
 { 0, 0 }
 };
 
@@ -209,13 +162,8 @@
 {
 const struct err_xlate *p;
 
-#ifdef USE_CCAPI_V3
 if (err == ccNoError)
 return 0;
-#else
- if (err == CC_NOERROR)
- return 0;
-#endif
 
 for (p = err_xlate_table; p->cc_err; p++) {
 if (err == p->cc_err)
@@ -226,8 +174,6 @@
 }
 
 
-#ifdef USE_CCAPI_V3
-
 static krb5_error_code stdccv3_get_timeoffset (krb5_context in_context,
 cc_ccache_t in_ccache)
 {
@@ -518,7 +464,7 @@
 
 if (!err) {
 /* copy the fields from the almost identical structures */
- err = copy_krb5_creds_to_cc_cred_union (context, creds, &cred_union);
+ err = k5_krb5_to_ccapi_creds (context, creds, &cred_union);
 }
 
 if (!err) {
@@ -529,7 +475,7 @@
 cache_changed();
 }
 
- if (cred_union) { cred_union_release (cred_union); }
+ if (cred_union) { k5_release_ccapi_cred (cred_union); }
 
 return cc_err_xlate (err);
 }
@@ -591,7 +537,7 @@
 err = cc_credentials_iterator_next (iterator, &credentials);
 
 if (!err && (credentials->data->version == cc_credentials_v5)) {
- copy_cc_cred_union_to_krb5_creds(context, credentials->data, creds);
+ err = k5_ccapi_to_krb5_creds (context, credentials->data, creds);
 break;
 }
 }
@@ -841,8 +787,7 @@
 if (!err && (credentials->data->version == cc_credentials_v5)) {
 krb5_creds creds;
 
- err = copy_cc_cred_union_to_krb5_creds(context,
- credentials->data, &creds);
+ err = k5_ccapi_to_krb5_creds (context, credentials->data, &creds);
 
 if (!err) {
 found = krb5int_cc_creds_match_request(context,
@@ -1072,574 +1017,4 @@
 return cc_err_xlate(err);
 }
 
-#else /* !USE_CCAPI_V3 */
-
-static krb5_error_code stdcc_setup(krb5_context context,
- stdccCacheDataPtr ccapi_data)
-{
- int err;
-
- /* make sure the API has been initialized */
- if (gCntrlBlock == NULL) {
-#ifdef CC_API_VER2
- err = cc_initialize(&gCntrlBlock, CC_API_VER_2, NULL, NULL);
-#else
- err = cc_initialize(&gCntrlBlock, CC_API_VER_1, NULL, NULL);
-#endif
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
- }
-
- /*
- * No ccapi_data structure, so we don't need to make sure the
- * ccache exists.
- */
- if (!ccapi_data)
- return 0;
-
- /*
- * The ccache already exists
- */
- if (ccapi_data->NamedCache)
- return 0;
-
- err = cc_open(gCntrlBlock, ccapi_data->cache_name,
- CC_CRED_V5, 0L, &ccapi_data->NamedCache);
- if (err == CC_NOTFOUND)
- err = CC_NO_EXIST;
- if (err == CC_NOERROR)
- return 0;
-
- ccapi_data->NamedCache = NULL;
- return cc_err_xlate(err);
-}
-
-void krb5_stdcc_shutdown()
-{
- if (gCntrlBlock)
- cc_shutdown(&gCntrlBlock);
- gCntrlBlock = NULL;
-}
-
-/*
- * -- generate_new --------------------------------
- *
- * create a new cache with a unique name, corresponds to creating a
- * named cache iniitialize the API here if we have to.
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_generate_new
-(krb5_context context, krb5_ccache *id )
-{
- krb5_ccache newCache = NULL;
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = NULL;
- char *name = NULL;
- cc_time_t change_time;
- int err;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- retval = KRB5_CC_NOMEM;
- if (!(newCache = (krb5_ccache) malloc(sizeof(struct _krb5_ccache))))
- goto errout;
- if (!(ccapi_data = (stdccCacheDataPtr)malloc(sizeof(stdccCacheData))))
- goto errout;
- if (!(name = malloc(256)))
- goto errout;
-
- /* create a unique name */
- cc_get_change_time(gCntrlBlock, &change_time);
- snprintf(name, 256, "gen_new_cache%d", change_time);
-
- /* create the new cache */
- err = cc_create(gCntrlBlock, name, name, CC_CRED_V5, 0L,
- &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- retval = cc_err_xlate(err);
- goto errout;
- }
-
- /* setup some fields */
- newCache->ops = &krb5_cc_stdcc_ops;
- newCache->data = ccapi_data;
- ccapi_data->cache_name = name;
-
- /* return a pointer to the new cache */
- *id = newCache;
-
- return 0;
-
-errout:
- if (newCache)
- free(newCache);
- if (ccapi_data)
- free(ccapi_data);
- if (name)
- free(name);
- return retval;
-}
-
-/*
- * resolve
- *
- * create a new cache with the name stored in residual
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_resolve
-(krb5_context context, krb5_ccache *id , const char *residual )
-{
- krb5_ccache newCache = NULL;
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
- krb5_error_code retval;
- char *cName = NULL;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- retval = KRB5_CC_NOMEM;
- if (!(newCache = (krb5_ccache) malloc(sizeof(struct _krb5_ccache))))
- goto errout;
-
- if (!(ccapi_data = (stdccCacheDataPtr)malloc(sizeof(stdccCacheData))))
- goto errout;
-
- if (!(cName = strdup(residual)))
- goto errout;
-
- newCache->ops = &krb5_cc_stdcc_ops;
- newCache->data = ccapi_data;
- ccapi_data->cache_name = cName;
-
- err = cc_open(gCntrlBlock, cName, CC_CRED_V5, 0L,
- &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- ccapi_data->NamedCache = NULL;
- if (err != CC_NO_EXIST) {
- retval = cc_err_xlate(err);
- goto errout;
- }
- }
-
- /* return new cache structure */
- *id = newCache;
-
- return 0;
-
-errout:
- if (newCache)
- free(newCache);
- if (ccapi_data)
- free(ccapi_data);
- if (cName)
- free(cName);
- return retval;
-}
-
-/*
- * initialize
- *
- * initialize the cache, check to see if one already exists for this
- * principal if not set our principal to this principal. This
- * searching enables ticket sharing
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_initialize
-(krb5_context context, krb5_ccache id, krb5_principal princ)
-{
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
- char *cName = NULL;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- /* test id for null */
- if (id == NULL) return KRB5_CC_NOMEM;
-
- if ((retval = krb5_unparse_name(context, princ, &cName)))
- return retval;
-
- ccapi_data = id->data;
-
-
- if (ccapi_data->NamedCache)
- cc_close(gCntrlBlock, &ccapi_data->NamedCache);
-
- err = cc_create(gCntrlBlock, ccapi_data->cache_name, cName,
- CC_CRED_V5, 0L, &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- krb5_free_unparsed_name(context, cName);
- return cc_err_xlate(err);
- }
-
- krb5_free_unparsed_name(context, cName);
- cache_changed();
-
- return cc_err_xlate(err);
-}
-
-/*
- * store
- *
- * store some credentials in our cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_store
-(krb5_context context, krb5_ccache id, krb5_creds *creds )
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
- cred_union *cu = NULL;
- int err;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- /* copy the fields from the almost identical structures */
- dupK5toCC(context, creds, &cu);
-
- /*
- * finally store the credential
- * store will copy (that is duplicate) everything
- */
- err = cc_store(gCntrlBlock,
- ((stdccCacheDataPtr)(id->data))->NamedCache, *cu);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* free the cred union using our local version of cc_free_creds()
- since we allocated it locally */
- err = krb5int_free_cc_cred_union(&cu);
-
- cache_changed();
- return err;
-}
-
-/*
- * start_seq_get
- *
- * begin an iterator call to get all of the credentials in the cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_start_seq_get
-(krb5_context context, krb5_ccache id , krb5_cc_cursor *cursor )
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
- int err;
- ccache_cit *iterator;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
-#ifdef CC_API_VER2
- err = cc_seq_fetch_creds_begin(gCntrlBlock, ccapi_data->NamedCache,
- &iterator);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
- *cursor = iterator;
-#else
- /* all we have to do is initialize the cursor */
- *cursor = NULL;
-#endif
- return 0;
-}
-
-/*
- * next cred
- *
- * - get the next credential in the cache as part of an iterator call
- * - this maps to call to cc_seq_fetch_creds
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_next_cred
-(krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor,
- krb5_creds *creds)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
- int err;
- cred_union *credU = NULL;
- ccache_cit *iterator;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
-#ifdef CC_API_VER2
- iterator = *cursor;
- if (iterator == 0)
- return KRB5_CC_END;
- err = cc_seq_fetch_creds_next(gCntrlBlock, &credU, iterator);
-
- if (err == CC_END) {
- cc_seq_fetch_creds_end(gCntrlBlock, &iterator);
- *cursor = 0;
- }
-#else
- err = cc_seq_fetch_creds(gCntrlBlock, ccapi_data->NamedCache,
- &credU, (ccache_cit **)cursor);
-#endif
-
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* copy data (with translation) */
- dupCCtoK5(context, credU->cred.pV5Cred, creds);
-
- /* free our version of the cred - okay to use cc_free_creds() here
- because we got it from the CCache library */
- cc_free_creds(gCntrlBlock, &credU);
-
- return 0;
-}
-
-
-/*
- * retrieve
- *
- * - try to find a matching credential in the cache
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_retrieve(context, id, whichfields, mcreds, creds)
- krb5_context context;
- krb5_ccache id;
- krb5_flags whichfields;
- krb5_creds *mcreds;
- krb5_creds *creds;
-{
- return k5_cc_retrieve_cred_default(context, id, whichfields, mcreds,
- creds);
-}
-
-/*
- * end seq
- *
- * just free up the storage associated with the cursor (if we could)
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_end_seq_get
-(krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
-#ifndef CC_API_VER2
- cred_union *credU = NULL;
-#endif
-
- ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- if (*cursor == NULL)
- return 0;
-
-#ifdef CC_API_VER2
- err = cc_seq_fetch_creds_end(gCntrlBlock, (ccache_cit **)cursor);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-#else
- /*
- * Finish calling cc_seq_fetch_creds to clear out the cursor
- */
- while (*cursor) {
- err = cc_seq_fetch_creds(gCntrlBlock, ccapi_data->NamedCache,
- &credU, (ccache_cit **)cursor);
- if (err)
- break;
-
- /* okay to call cc_free_creds() here because we got credU from CCache lib */
- cc_free_creds(gCntrlBlock, &credU);
- }
-#endif
-
- return(0);
-}
-
-/*
- * close
- *
- * - free our pointers to the NC
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_close(krb5_context context, krb5_ccache id)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- /* free it */
-
- if (ccapi_data) {
- if (ccapi_data->cache_name)
- free(ccapi_data->cache_name);
- if (ccapi_data->NamedCache)
- cc_close(gCntrlBlock, &ccapi_data->NamedCache);
- free(ccapi_data);
- id->data = NULL;
- }
- free(id);
-
- return 0;
-}
-
-/*
- * destroy
- *
- * - free our storage and the cache
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_destroy (krb5_context context, krb5_ccache id)
-{
- int err;
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, ccapi_data))) {
- return retval;
- }
-
- /* free memory associated with the krb5_ccache */
- if (ccapi_data) {
- if (ccapi_data->cache_name)
- free(ccapi_data->cache_name);
- if (ccapi_data->NamedCache) {
- /* destroy the named cache */
- err = cc_destroy(gCntrlBlock, &ccapi_data->NamedCache);
- retval = cc_err_xlate(err);
- cache_changed();
- }
- free(ccapi_data);
- id->data = NULL;
- }
- free(id);
-
- /* If the cache does not exist when we tried to destroy it,
- that's fine. That means someone else destroyed it since
- we resolved it. */
- if (retval == KRB5_FCC_NOFILE)
- return 0;
- return retval;
-}
-
-/*
- * getname
- *
- * - return the name of the named cache
- */
-const char * KRB5_CALLCONV krb5_stdcc_get_name
-(krb5_context context, krb5_ccache id )
-{
- stdccCacheDataPtr ccapi_data = id->data;
-
- if (!ccapi_data)
- return 0;
-
- return (ccapi_data->cache_name);
-}
-
-
-/* get_principal
- *
- * - return the principal associated with the named cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_principal
-(krb5_context context, krb5_ccache id , krb5_principal *princ)
-{
- int err;
- char *name = NULL;
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- /* another wrapper */
- err = cc_get_principal(gCntrlBlock, ccapi_data->NamedCache,
- &name);
-
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* turn it into a krb principal */
- err = krb5_parse_name(context, name, princ);
-
- cc_free_principal(gCntrlBlock, &name);
-
- return err;
-}
-
-/*
- * set_flags
- *
- * - currently a NOP since we don't store any flags in the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_set_flags
-(krb5_context context, krb5_ccache id , krb5_flags flags)
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- return 0;
-}
-
-/*
- * get_flags
- *
- * - currently a NOP since we don't store any flags in the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_flags
-(krb5_context context, krb5_ccache id , krb5_flags *flags)
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- return 0;
-}
-
-/*
- * remove
- *
- * - remove the specified credentials from the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_remove
-(krb5_context context, krb5_ccache id,
- krb5_flags flags, krb5_creds *creds)
-{
- cred_union *cu = NULL;
- int err;
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data))) {
- if (retval == KRB5_FCC_NOFILE)
- return 0;
- return retval;
- }
-
- /* convert to a cred union */
- dupK5toCC(context, creds, &cu);
-
- /* remove it */
- err = cc_remove_cred(gCntrlBlock, ccapi_data->NamedCache, *cu);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* free the cred union using our local version of cc_free_creds()
- since we allocated it locally */
- err = krb5int_free_cc_cred_union(&cu);
- cache_changed();
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- return 0;
-}
-#endif /* !USE_CCAPI_V3 */
-
 #endif /* defined(_WIN32) || defined(USE_CCAPI) */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi/stdcc.h Changed

@@ -7,15 +7,7 @@
 #include "k5-int.h" /* loads krb5.h */
 #include "../cc-int.h"
 
-#ifdef USE_CCAPI_V3
 #include <CredentialsCache.h>
-#else
-#if defined(_WIN32)
-#include "cacheapi.h"
-#else
-#include <CredentialsCache2.h>
-#endif
-#endif
 
 #define kStringLiteralLen 255
 
@@ -27,11 +19,7 @@
 */
 typedef struct _stdccCacheData {
 char *cache_name;
-#ifdef USE_CCAPI_V3
 cc_ccache_t NamedCache;
-#else
- ccache_p *NamedCache;
-#endif
 } stdccCacheData, *stdccCacheDataPtr;
 
 
@@ -39,8 +27,6 @@
 
 void krb5_stdcc_shutdown(void);
 
-#ifdef USE_CCAPI_V3
-
 krb5_error_code KRB5_CALLCONV krb5_stdccv3_close
 (krb5_context, krb5_ccache id );
 
@@ -116,60 +102,6 @@
 
 krb5_error_code KRB5_CALLCONV krb5_stdccv3_switch_to
 (krb5_context context, krb5_ccache id);
-#else
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_close
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_destroy
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_end_seq_get
-(krb5_context, krb5_ccache id , krb5_cc_cursor *cursor );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_generate_new
-(krb5_context, krb5_ccache *id );
-
-const char * KRB5_CALLCONV krb5_stdcc_get_name
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_principal
-(krb5_context, krb5_ccache id , krb5_principal *princ );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_initialize
-(krb5_context, krb5_ccache id , krb5_principal princ );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_next_cred
-(krb5_context,
- krb5_ccache id ,
- krb5_cc_cursor *cursor ,
- krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_resolve
-(krb5_context, krb5_ccache *id , const char *residual );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_retrieve
-(krb5_context,
- krb5_ccache id ,
- krb5_flags whichfields ,
- krb5_creds *mcreds ,
- krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_start_seq_get
-(krb5_context, krb5_ccache id , krb5_cc_cursor *cursor );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_store
-(krb5_context, krb5_ccache id , krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_set_flags
-(krb5_context, krb5_ccache id , krb5_flags flags );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_flags
-(krb5_context, krb5_ccache id , krb5_flags *flags );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_remove
-(krb5_context, krb5_ccache id , krb5_flags flags, krb5_creds *creds);
-#endif
 
 #endif /* defined(_WIN32) || defined(USE_CCAPI) */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccapi/winccld.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi/winccld.h Changed

@@ -7,62 +7,13 @@
 #ifndef KRB5_WINCCLD_H_
 #define KRB5_WINCCLD_H_
 
-#ifdef USE_CCAPI_V3
 #include <CredentialsCache.h>
-#else
-
-#ifndef CC_API_VER2
-#define CC_API_VER2
-#endif
-
-#include "cacheapi.h"
-#endif
 
-#ifdef USE_CCAPI_V3
 typedef CCACHE_API cc_int32 (*FP_cc_initialize) (
 cc_context_t* outContext,
 cc_int32 inVersion,
 cc_int32* outSupportedVersion,
 char const** outVendor);
-#else
-typedef cc_int32 (*FP_cc_initialize)(apiCB**, const cc_int32,
- cc_int32*, const char**);
-typedef cc_int32 (*FP_cc_shutdown)(apiCB**);
-typedef cc_int32 (*FP_cc_get_change_time)(apiCB*, cc_time_t*);
-typedef cc_int32 (*FP_cc_create)(apiCB*, const char*, const char*,
- const enum cc_cred_vers, const cc_int32, ccache_p**);
-typedef cc_int32 (*FP_cc_open)(apiCB*, const char*, const enum cc_cred_vers,
- const cc_int32, ccache_p**);
-typedef cc_int32 (*FP_cc_close)(apiCB*, ccache_p**);
-typedef cc_int32 (*FP_cc_destroy)(apiCB*, ccache_p**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs)(apiCB*, ccache_p**, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_begin)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_next)(apiCB*, ccache_p**, ccache_cit*);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_end)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_get_NC_info)(apiCB*, struct _infoNC***);
-typedef cc_int32 (*FP_cc_free_NC_info)(apiCB*, struct _infoNC***);
-typedef cc_int32 (*FP_cc_get_name)(apiCB*, const ccache_p*, char**);
-typedef cc_int32 (*FP_cc_set_principal)(apiCB*, const ccache_p*,
- const enum cc_cred_vers, const char*);
-typedef cc_int32 (*FP_cc_get_principal)(apiCB*, ccache_p*, char**);
-typedef cc_int32 (*FP_cc_get_cred_version)(apiCB*, const ccache_p*,
- enum cc_cred_vers*);
-typedef cc_int32 (*FP_cc_lock_request)(apiCB*, const ccache_p*,
- const cc_int32);
-typedef cc_int32 (*FP_cc_store)(apiCB*, const ccache_p*, const cred_union);
-typedef cc_int32 (*FP_cc_remove_cred)(apiCB*, const ccache_p*,
- const cred_union);
-typedef cc_int32 (*FP_cc_seq_fetch_creds)(apiCB*, const ccache_p*,
- cred_union**, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_begin)(apiCB*, const ccache_p*,
- ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_next)(apiCB*, cred_union**,
- ccache_cit*);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_end)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_free_principal)(apiCB*, char**);
-typedef cc_int32 (*FP_cc_free_name)(apiCB*, char** name);
-typedef cc_int32 (*FP_cc_free_creds)(apiCB*, cred_union** pCred);
-#endif
 
 #ifdef KRB5_WINCCLD_C_
 typedef struct _FUNC_INFO {
@@ -78,58 +29,10 @@
 #endif
 
 DECL_FUNC_PTR(cc_initialize);
-#ifndef USE_CCAPI_V3
-DECL_FUNC_PTR(cc_shutdown);
-DECL_FUNC_PTR(cc_get_change_time);
-DECL_FUNC_PTR(cc_create);
-DECL_FUNC_PTR(cc_open);
-DECL_FUNC_PTR(cc_close);
-DECL_FUNC_PTR(cc_destroy);
-DECL_FUNC_PTR(cc_get_name);
-DECL_FUNC_PTR(cc_set_principal);
-DECL_FUNC_PTR(cc_get_principal);
-DECL_FUNC_PTR(cc_get_cred_version);
-DECL_FUNC_PTR(cc_store);
-DECL_FUNC_PTR(cc_remove_cred);
-#ifdef CC_API_VER2
-DECL_FUNC_PTR(cc_seq_fetch_creds_begin);
-DECL_FUNC_PTR(cc_seq_fetch_creds_next);
-DECL_FUNC_PTR(cc_seq_fetch_creds_end);
-#else
-DECL_FUNC_PTR(cc_seq_fetch_creds);
-#endif
-DECL_FUNC_PTR(cc_free_principal);
-DECL_FUNC_PTR(cc_free_name);
-DECL_FUNC_PTR(cc_free_creds);
-#endif
 
 #ifdef KRB5_WINCCLD_C_
 FUNC_INFO krbcc_fi = {
 MAKE_FUNC_INFO(cc_initialize),
-#ifndef USE_CCAPI_V3
- MAKE_FUNC_INFO(cc_shutdown),
- MAKE_FUNC_INFO(cc_get_change_time),
- MAKE_FUNC_INFO(cc_create),
- MAKE_FUNC_INFO(cc_open),
- MAKE_FUNC_INFO(cc_close),
- MAKE_FUNC_INFO(cc_destroy),
- MAKE_FUNC_INFO(cc_get_name),
- MAKE_FUNC_INFO(cc_set_principal),
- MAKE_FUNC_INFO(cc_get_principal),
- MAKE_FUNC_INFO(cc_get_cred_version),
- MAKE_FUNC_INFO(cc_store),
- MAKE_FUNC_INFO(cc_remove_cred),
-#ifdef CC_API_VER2
- MAKE_FUNC_INFO(cc_seq_fetch_creds_begin),
- MAKE_FUNC_INFO(cc_seq_fetch_creds_next),
- MAKE_FUNC_INFO(cc_seq_fetch_creds_end),
-#else
- MAKE_FUNC_INFO(cc_seq_fetch_creds),
-#endif
- MAKE_FUNC_INFO(cc_free_principal),
- MAKE_FUNC_INFO(cc_free_name),
- MAKE_FUNC_INFO(cc_free_creds),
-#endif
 END_FUNC_INFO
 };
 #undef MAKE_FUNC_INFO
@@ -137,30 +40,6 @@
 #else
 
 #define cc_initialize pcc_initialize
-#ifndef USE_CCAPI_V3
-#define cc_shutdown pcc_shutdown
-#define cc_get_change_time pcc_get_change_time
-#define cc_create pcc_create
-#define cc_open pcc_open
-#define cc_close pcc_close
-#define cc_destroy pcc_destroy
-#define cc_get_name pcc_get_name
-#define cc_set_principal pcc_set_principal
-#define cc_get_principal pcc_get_principal
-#define cc_get_cred_version pcc_get_cred_version
-#define cc_store pcc_store
-#define cc_remove_cred pcc_remove_cred
-#ifdef CC_API_VER2
-#define cc_seq_fetch_creds_begin pcc_seq_fetch_creds_begin
-#define cc_seq_fetch_creds_next pcc_seq_fetch_creds_next
-#define cc_seq_fetch_creds_end pcc_seq_fetch_creds_end
-#else
-#define cc_seq_fetch_creds pcc_seq_fetch_creds
-#endif
-#define cc_free_principal pcc_free_principal
-#define cc_free_name pcc_free_name
-#define cc_free_creds pcc_free_creds
-#endif
 #endif
 
 #undef DECL_FUNC_PTR

_service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi_util.c Added

@@ -0,0 +1,425 @@
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/ccapi_util.c - conversion functions for CCAPI creds */
+/*
+ * Copyright (C) 2022 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include "cc-int.h"
+#include "ccapi_util.h"
+
+#if defined(USE_CCAPI) || defined(USE_CCAPI_MACOS)
+
+static void
+free_cc_data_list(cc_data **list)
+{
+ size_t i;
+
+ for (i = 0; list != NULL && listi != NULL; i++) {
+ free(listi->data);
+ free(listi);
+ }
+ free(list);
+}
+
+static krb5_error_code
+cc_data_list_to_addresses(krb5_context context, cc_data **list,
+ krb5_address ***addrs_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ krb5_address **addrs = NULL;
+
+ *addrs_out = NULL;
+ if (list == NULL)
+ return 0;
+
+ for (count = 0; listcount; count++);
+ addrs = k5calloc(count + 1, sizeof(*addrs), &ret);
+ if (addrs == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ addrsi = k5alloc(sizeof(*addrsi), &ret);
+ if (addrsi == NULL)
+ goto cleanup;
+
+ addrsi->contents = k5memdup(listi->data, listi->length, &ret);
+ if (addrsi->contents == NULL)
+ goto cleanup;
+ addrsi->length = listi->length;
+ addrsi->addrtype = listi->type;
+ addrsi->magic = KV5M_ADDRESS;
+ }
+
+ *addrs_out = addrs;
+ addrs = NULL;
+
+cleanup:
+ krb5_free_addresses(context, addrs);
+ return ret;
+}
+
+static krb5_error_code
+cc_data_list_to_authdata(krb5_context context, cc_data **list,
+ krb5_authdata ***authdata_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ krb5_authdata **authdata = NULL;
+
+ *authdata_out = NULL;
+ if (list == NULL)
+ return 0;
+
+ for (count = 0; listcount; count++);
+ authdata = k5calloc(count + 1, sizeof(*authdata), &ret);
+ if (authdata == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ authdatai = k5alloc(sizeof(*authdatai), &ret);
+ if (authdatai == NULL)
+ goto cleanup;
+
+ authdatai->contents = k5memdup(listi->data, listi->length, &ret);
+ if (authdatai->contents == NULL)
+ goto cleanup;
+ authdatai->length = listi->length;
+ authdatai->ad_type = listi->type;
+ authdatai->magic = KV5M_AUTHDATA;
+ }
+
+ *authdata_out = authdata;
+ authdata = NULL;
+
+cleanup:
+ krb5_free_authdata(context, authdata);
+ return ret;
+}
+
+static krb5_error_code
+addresses_to_cc_data_list(krb5_context context, krb5_address **addrs,
+ cc_data ***list_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ cc_data **list = NULL;
+
+ *list_out = NULL;
+ if (addrs == NULL)
+ return 0;
+
+ for (count = 0; addrscount; count++);
+ list = k5calloc(count + 1, sizeof(*list), &ret);
+ if (list == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ listi = k5alloc(sizeof(*listi), &ret);
+ if (listi == NULL)
+ goto cleanup;
+
+ listi->data = k5memdup(addrsi->contents, addrsi->length, &ret);
+ if (listi->data == NULL)
+ goto cleanup;
+ listi->length = addrsi->length;
+ listi->type = addrsi->addrtype;
+ }
+
+ *list_out = list;
+ list = NULL;
+
+cleanup:
+ free_cc_data_list(list);
+ return ret;
+}
+
+static krb5_error_code
+authdata_to_cc_data_list(krb5_context context, krb5_authdata **authdata,
+ cc_data ***list_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ cc_data **list = NULL;
+
+ *list_out = NULL;
+ if (authdata == NULL)
+ return 0;
+
+ for (count = 0; authdatacount; count++);
+ list = k5calloc(count + 1, sizeof(*list), &ret);
+ if (list == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ listi = k5alloc(sizeof(*listi), &ret);
+ if (listi == NULL)
+ goto cleanup;
+
+ listi->data = k5memdup(authdatai->contents, authdatai->length,
+ &ret);
+ if (listi->data == NULL)
+ goto cleanup;
+ listi->length = authdatai->length;
+ listi->type = authdatai->ad_type;
+ }
+
+ *list_out = list;
+ list = NULL;
+
+cleanup:
+ free_cc_data_list(list);
+ return ret;
+}
+
+krb5_error_code
+k5_ccapi_to_krb5_creds(krb5_context context,
+ const cc_credentials_union *ccapi_cred,
+ krb5_creds *cred_out)
+{
+ krb5_error_code ret;
+ cc_credentials_v5_t *cv5 = NULL;
+ krb5_principal client = NULL;
+ krb5_principal server = NULL;
+ char *ticket_data = NULL;
+ char *second_ticket_data = NULL;
+ uint8_t *keyblock_contents = NULL;
+ krb5_address **addresses = NULL;
+ krb5_authdata **authdata = NULL;
+
+ if (ccapi_cred->version != cc_credentials_v5)
+ return KRB5_CC_NOT_KTYPE;
+
+ cv5 = ccapi_cred->credentials.credentials_v5;
+
+ ret = krb5_parse_name(context, cv5->client, &client);
+ if (ret)
+ goto cleanup;
+ ret = krb5_parse_name(context, cv5->server, &server);
+ if (ret)
+ goto cleanup;
+
+ if (cv5->keyblock.length > 0) {
+ keyblock_contents = k5memdup(cv5->keyblock.data, cv5->keyblock.length,
+ &ret);
+ if (keyblock_contents == NULL)
+ goto cleanup;
+ }
+
+ if (cv5->ticket.length > 0) {
+ ticket_data = k5memdup(cv5->ticket.data, cv5->ticket.length, &ret);
+ if (ticket_data == NULL)
+ goto cleanup;
+ }
+
+ if (cv5->second_ticket.length > 0) {
+ second_ticket_data = k5memdup(cv5->second_ticket.data,
+ cv5->second_ticket.length, &ret);
+ if (second_ticket_data == NULL)
+ goto cleanup;
+ }
+
+ ret = cc_data_list_to_addresses(context, cv5->addresses, &addresses);
+ if (ret)
+ goto cleanup;
+
+ ret = cc_data_list_to_authdata(context, cv5->authdata, &authdata);
+ if (ret)
+ goto cleanup;
+
+ cred_out->client = client;
+ cred_out->server = server;
+ client = server = NULL;
+
+ cred_out->keyblock.magic = KV5M_KEYBLOCK;
+ cred_out->keyblock.enctype = cv5->keyblock.type;
+ cred_out->keyblock.length = cv5->keyblock.length;
+ cred_out->keyblock.contents = keyblock_contents;
+ keyblock_contents = NULL;
+
+ cred_out->times.authtime = cv5->authtime;
+ cred_out->times.starttime = cv5->starttime;
+ cred_out->times.endtime = cv5->endtime;
+ cred_out->times.renew_till = cv5->renew_till;
+ cred_out->is_skey = cv5->is_skey;
+ cred_out->ticket_flags = cv5->ticket_flags;
+
+ cred_out->ticket = make_data(ticket_data, cv5->ticket.length);
+ cred_out->second_ticket = make_data(second_ticket_data,
+ cv5->second_ticket.length);
+ ticket_data = second_ticket_data = NULL;
+
+ cred_out->addresses = addresses;
+ addresses = NULL;
+
+ cred_out->authdata = authdata;
+ authdata = NULL;
+
+ cred_out->magic = KV5M_CREDS;
+
+cleanup:
+ krb5_free_principal(context, client);
+ krb5_free_principal(context, server);
+ krb5_free_addresses(context, addresses);
+ krb5_free_authdata(context, authdata);
+ free(keyblock_contents);
+ free(ticket_data);
+ free(second_ticket_data);
+ return ret;
+}
+
+krb5_error_code
+k5_krb5_to_ccapi_creds(krb5_context context, krb5_creds *cred,
+ cc_credentials_union **ccapi_cred_out)
+{
+ krb5_error_code ret;
+ cc_credentials_union *cred_union = NULL;
+ cc_credentials_v5_t *cv5 = NULL;
+ char *client = NULL, *server = NULL;
+ uint8_t *ticket_data = NULL, *second_ticket_data = NULL;
+ uint8_t *keyblock_data = NULL;
+ cc_data **addr_list = NULL, **authdata_list = NULL;
+
+ cred_union = k5alloc(sizeof(*cred_union), &ret);
+ if (cred_union == NULL)
+ goto cleanup;
+
+ cv5 = k5alloc(sizeof(*cv5), &ret);
+ if (cv5 == NULL)
+ goto cleanup;
+
+ ret = krb5_unparse_name(context, cred->client, &client);
+ if (ret)
+ goto cleanup;
+ ret = krb5_unparse_name(context, cred->server, &server);
+ if (ret)
+ goto cleanup;
+
+ if (cred->keyblock.length > 0) {
+ keyblock_data = k5memdup(cred->keyblock.contents,
+ cred->keyblock.length, &ret);
+ if (keyblock_data == NULL)
+ goto cleanup;
+ }
+
+ if (cred->ticket.length > 0) {
+ ticket_data = k5memdup0(cred->ticket.data, cred->ticket.length, &ret);
+ if (ticket_data == NULL)
+ goto cleanup;
+ }
+
+ if (cred->second_ticket.length > 0) {
+ second_ticket_data = k5memdup0(cred->second_ticket.data,
+ cred->second_ticket.length, &ret);
+ if (second_ticket_data == NULL)
+ goto cleanup;
+ }
+
+ ret = addresses_to_cc_data_list(context, cred->addresses, &addr_list);
+ if (ret)
+ goto cleanup;
+
+ ret = authdata_to_cc_data_list(context, cred->authdata, &authdata_list);
+ if (ret)
+ goto cleanup;
+
+ cv5->client = client;
+ cv5->server = server;
+ client = server = NULL;
+
+ cv5->keyblock.type = cred->keyblock.enctype;
+ cv5->keyblock.length = cred->keyblock.length;
+ cv5->keyblock.data = keyblock_data;
+ keyblock_data = NULL;
+
+ cv5->authtime = cred->times.authtime;
+ cv5->starttime = cred->times.starttime;
+ cv5->endtime = cred->times.endtime;
+ cv5->renew_till = cred->times.renew_till;
+ cv5->is_skey = cred->is_skey;
+ cv5->ticket_flags = cred->ticket_flags;
+
+ cv5->ticket.length = cred->ticket.length;
+ cv5->ticket.data = ticket_data;
+ cv5->second_ticket.length = cred->second_ticket.length;
+ cv5->second_ticket.data = second_ticket_data;
+ ticket_data = second_ticket_data = NULL;
+
+ cv5->addresses = addr_list;
+ addr_list = NULL;
+
+ cv5->authdata = authdata_list;
+ authdata_list = NULL;
+
+ cred_union->version = cc_credentials_v5;
+ cred_union->credentials.credentials_v5 = cv5;
+ cv5 = NULL;
+
+ *ccapi_cred_out = cred_union;
+ cred_union = NULL;
+
+cleanup:
+ free_cc_data_list(addr_list);
+ free_cc_data_list(authdata_list);
+ free(keyblock_data);
+ free(ticket_data);
+ free(second_ticket_data);
+ krb5_free_unparsed_name(context, client);
+ krb5_free_unparsed_name(context, server);
+ free(cv5);
+ free(cred_union);
+ return ret;
+}
+
+void
+k5_release_ccapi_cred(cc_credentials_union *ccapi_cred)
+{
+ cc_credentials_v5_t *cv5;
+
+ if (ccapi_cred == NULL)
+ return;
+ if (ccapi_cred->version != cc_credentials_v5)
+ return;
+ if (ccapi_cred->credentials.credentials_v5 == NULL)
+ return;
+
+ cv5 = ccapi_cred->credentials.credentials_v5;
+
+ free(cv5->client);
+ free(cv5->server);
+ free(cv5->keyblock.data);
+ free(cv5->ticket.data);
+ free(cv5->second_ticket.data);
+ free_cc_data_list(cv5->addresses);
+ free_cc_data_list(cv5->authdata);
+ free(cv5);
+ free(ccapi_cred);
+}
+
+#endif /* defined(USE_CCAPI) */

_service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccapi_util.h Added

@@ -0,0 +1,50 @@
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/ccapi_util.c - conversion declarations for CCAPI creds */
+/*
+ * Copyright (C) 2021 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef CCAPI_UTIL_H
+#define CCAPI_UTIL_H
+
+#include <CredentialsCache.h>
+
+krb5_error_code
+k5_ccapi_to_krb5_creds(krb5_context context,
+ const cc_credentials_union *ccapi_cred,
+ krb5_creds *cred_out);
+
+krb5_error_code
+k5_krb5_to_ccapi_creds(krb5_context context, krb5_creds *cred,
+ cc_credentials_union **ccapi_cred_out);
+
+void
+k5_release_ccapi_cred(cc_credentials_union *ccapi_cred);
+
+#endif /* CCAPI_UTIL_H */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/ccbase.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/ccbase.c Changed

@@ -51,7 +51,7 @@
 #define NEXT &cc_lcc_entry
 #endif
 
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
 extern const krb5_cc_ops krb5_cc_stdcc_ops;
 static struct krb5_cc_typelist cc_stdcc_entry = { &krb5_cc_stdcc_ops, NEXT };
 #undef NEXT
@@ -87,6 +87,12 @@
 #define NEXT &cc_kcm_entry
 #endif /* not _WIN32 */
 
+#ifdef USE_CCAPI_MACOS
+extern const krb5_cc_ops krb5_api_macos_ops;
+static struct krb5_cc_typelist cc_macos_entry = { &krb5_api_macos_ops, NEXT };
+#undef NEXT
+#define NEXT &cc_macos_entry
+#endif /* USE_CCAPI_MACOS */
 
 #define INITIAL_TYPEHEAD (NEXT)
 static struct krb5_cc_typelist *cc_typehead = INITIAL_TYPEHEAD;
@@ -562,7 +568,7 @@
 #ifdef USE_KEYRING_CCACHE
     k5_cc_mutex_lock(context, &krb5int_krcc_mutex);
 #endif
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
     ret = krb5_stdccv3_context_lock(context);
     if (ret) {
         k5_cc_mutex_unlock(context, &krb5int_mcc_mutex);
@@ -587,7 +593,7 @@
     k5_mutex_lock(&cc_typelist_lock);
 
     /* unlock each type in the opposite order */
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
     krb5_stdccv3_context_unlock(context);
 #endif
 #ifdef USE_KEYRING_CCACHE
@@ -621,7 +627,7 @@
 #ifdef USE_KEYRING_CCACHE
     k5_cc_mutex_force_unlock(&krb5int_krcc_mutex);
 #endif
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
     krb5_stdccv3_context_unlock(NULL);
 #endif
     k5_cc_mutex_force_unlock(&krb5int_mcc_mutex);

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/ccache/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/ccache/deps Changed

@@ -1,6 +1,18 @@
 #
 # Generated makefile dependencies follow.
 #
+ccapi_util.so ccapi_util.po $(OUTPRE)ccapi_util.$(OBJEXT): \
+  $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
+  $(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
+  $(COM_ERR_DEPS) $(top_srcdir)/include/CredentialsCache.h \
+  $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
+  $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+  $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+  $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+  $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/krb5.h \
+  $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
+  $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
+  cc-int.h ccapi_util.c ccapi_util.h
 ccbase.so ccbase.po $(OUTPRE)ccbase.$(OBJEXT): $(BUILDTOP)/include/autoconf.h \
   $(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
   $(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \
@@ -112,6 +124,18 @@
   $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/ccselect_plugin.h \
   $(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
   $(top_srcdir)/include/socket-utils.h cc-int.h ccselect_realm.c
+cc_api_macos.so cc_api_macos.po $(OUTPRE)cc_api_macos.$(OBJEXT): \
+  $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
+  $(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
+  $(COM_ERR_DEPS) $(top_srcdir)/include/CredentialsCache.h \
+  $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
+  $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+  $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+  $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+  $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/krb5.h \
+  $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
+  $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
+  cc-int.h cc_api_macos.c ccapi_util.h
 cc_dir.so cc_dir.po $(OUTPRE)cc_dir.$(OBJEXT): $(BUILDTOP)/include/autoconf.h \
   $(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
   $(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/authdata.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/authdata.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/chpw.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/chpw.c Changed

@@ -393,6 +393,7 @@
     uint64_t password_days;
     const char *p;
     struct k5buf buf;
+    char *msg;
 
     *msg_out = NULL;
     if (data->length != AD_POLICY_INFO_LENGTH)
@@ -462,13 +463,13 @@
                        (int)password_days);
     }
 
-    if (k5_buf_status(&buf) != 0)
+    msg = k5_buf_cstring(&buf);
+    if (msg == NULL)
         return ENOMEM;
-
-    if (buf.len > 0)
-        *msg_out = buf.data;
+    if (*msg != '\0')
+        *msg_out = msg;
     else
-        k5_buf_free(&buf);
+        free(msg);
     return 0;
 }
 
@@ -477,7 +478,6 @@
                   char **message_out)
 {
     krb5_error_code ret;
-    krb5_data *string;
     char *msg;
 
     *message_out = NULL;
@@ -493,11 +493,10 @@
     /* If server_string contains a valid UTF-8 string, return that. */
     if (server_string->length > 0 &&
         memchr(server_string->data, 0, server_string->length) == NULL &&
-        krb5int_utf8_normalize(server_string, &string,
-                               KRB5_UTF8_APPROX) == 0) {
-        *message_out = string->data; /* already null terminated */
-        free(string);
-        return 0;
+        k5_utf8_validate(server_string)) {
+        *message_out = k5memdup0(server_string->data, server_string->length,
+                                 &ret);
+        return (*message_out == NULL) ? ENOMEM : 0;
     }
 
     /* server_string appears invalid, so try to be helpful. */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/deltat.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/deltat.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/deps Changed

@@ -704,13 +704,14 @@
   $(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
   $(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \
   $(top_srcdir)/include/k5-err.h $(top_srcdir)/include/k5-gmt_mktime.h \
-  $(top_srcdir)/include/k5-int-pkinit.h $(top_srcdir)/include/k5-int.h \
-  $(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-plugin.h \
-  $(top_srcdir)/include/k5-thread.h $(top_srcdir)/include/k5-trace.h \
-  $(top_srcdir)/include/k5-utf8.h $(top_srcdir)/include/krb5.h \
-  $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
-  $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
-  authdata.h int-proto.h pac.c
+  $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-int-pkinit.h \
+  $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+  $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+  $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/k5-utf8.h \
+  $(top_srcdir)/include/krb5.h $(top_srcdir)/include/krb5/authdata_plugin.h \
+  $(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
+  $(top_srcdir)/include/socket-utils.h authdata.h int-proto.h \
+  pac.c
 pac_sign.so pac_sign.po $(OUTPRE)pac_sign.$(OBJEXT): \
   $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
   $(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/get_in_tkt.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/get_in_tkt.c Changed

@@ -1522,7 +1522,7 @@
 void *expire_data;
 krb5_timestamp pw_exp, acct_exp, now;
 krb5_boolean is_last_req;
- krb5_deltat delta;
+ uint32_t interval;
 char ts256, banner1024;
 
 if (as_reply == NULL || as_reply->enc_part2 == NULL)
@@ -1553,8 +1553,8 @@
 ret = krb5_timeofday(context, &now);
 if (ret != 0)
 return;
- if (!is_last_req &&
- (ts_after(now, pw_exp) || ts_delta(pw_exp, now) > 7 * 24 * 60 * 60))
+ interval = ts_interval(now, pw_exp);
+ if (!is_last_req && (!interval || interval > 7 * 24 * 60 * 60))
 return;
 
 if (!prompter)
@@ -1564,41 +1564,49 @@
 if (ret != 0)
 return;
 
- delta = ts_delta(pw_exp, now);
- if (delta < 3600) {
+ if (interval < 3600) {
 snprintf(banner, sizeof(banner),
 _("Warning: Your password will expire in less than one hour "
 "on %s"), ts);
- } else if (delta < 86400 * 2) {
+ } else if (interval < 86400 * 2) {
 snprintf(banner, sizeof(banner),
 _("Warning: Your password will expire in %d hour%s on %s"),
- delta / 3600, delta < 7200 ? "" : "s", ts);
+ interval / 3600, interval < 7200 ? "" : "s", ts);
 } else {
 snprintf(banner, sizeof(banner),
 _("Warning: Your password will expire in %d days on %s"),
- delta / 86400, ts);
+ interval / 86400, ts);
 }
 
 /* PROMPTER_INVOCATION */
 (*prompter)(context, data, 0, banner, 0, 0);
 }
 
-/* Display a warning via the prompter if des3-cbc-sha1 was used for either the
- * reply key or the session key. */
+/* Display a warning via the prompter if a deprecated enctype was used for
+ * either the reply key or the session key. */
 static void
-warn_des3(krb5_context context, krb5_init_creds_context ctx,
- krb5_enctype as_key_enctype)
+warn_deprecated(krb5_context context, krb5_init_creds_context ctx,
+ krb5_enctype as_key_enctype)
 {
- const char *banner;
+ krb5_enctype etype;
+ char encbuf128, banner256;
 
- if (as_key_enctype != ENCTYPE_DES3_CBC_SHA1 &&
- ctx->cred.keyblock.enctype != ENCTYPE_DES3_CBC_SHA1)
- return;
 if (ctx->prompter == NULL)
 return;
 
- banner = _("Warning: encryption type des3-cbc-sha1 used for "
- "authentication is weak and will be disabled");
+ if (krb5int_c_deprecated_enctype(as_key_enctype))
+ etype = as_key_enctype;
+ else if (krb5int_c_deprecated_enctype(ctx->cred.keyblock.enctype))
+ etype = ctx->cred.keyblock.enctype;
+ else
+ return;
+
+ if (krb5_enctype_to_name(etype, FALSE, encbuf, sizeof(encbuf)) != 0)
+ return;
+ snprintf(banner, sizeof(banner),
+ _("Warning: encryption type %s used for authentication is "
+ "deprecated and will be disabled"), encbuf);
+
 /* PROMPTER_INVOCATION */
 (*ctx->prompter)(context, ctx->prompter_data, NULL, banner, 0, NULL);
 }
@@ -1849,7 +1857,7 @@
 ctx->complete = TRUE;
 warn_pw_expiry(context, ctx->opt, ctx->prompter, ctx->prompter_data,
 ctx->in_tkt_service, ctx->reply);
- warn_des3(context, ctx, encrypting_key.enctype);
+ warn_deprecated(context, ctx, encrypting_key.enctype);
 
 cleanup:
 krb5_free_pa_data(context, kdc_padata);

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/gic_keytab.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/gic_keytab.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/init_ctx.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/init_ctx.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/kerrs.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/kerrs.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/pac.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/pac.c Changed

@@ -27,84 +27,77 @@
 #include "k5-int.h"
 #include "int-proto.h"
 #include "authdata.h"
+#include "k5-input.h"
 
 #define MAX_BUFFERS 4096
 
-/* draft-brezak-win2k-krb-authz-00 */
-
 /*
- * Add a buffer to the provided PAC and update header.
+ * Add a buffer containing data to pac's metadata and encoding. If zerofill is
+ * true, data->data must be NULL and the buffer will be zero-filled with length
+ * data->length.
 */
 krb5_error_code
-k5_pac_add_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- const krb5_data *data,
- krb5_boolean zerofill,
- krb5_data *out_data)
+k5_pac_add_buffer(krb5_context context, krb5_pac pac, uint32_t type,
+ const krb5_data *data, krb5_boolean zerofill,
+ krb5_data *data_out)
 {
- PACTYPE *header;
+ struct k5_pac_buffer *nbufs;
 size_t header_len, i, pad = 0;
- char *pac_data;
+ char *ndata, *bufdata;
 
 assert((data->data == NULL) == zerofill);
 
- /* Check there isn't already a buffer of this type */
- if (k5_pac_locate_buffer(context, pac, type, NULL) == 0) {
+ /* Check for an existing buffer of this type. */
+ if (k5_pac_locate_buffer(context, pac, type, NULL) == 0)
 return EEXIST;
- }
 
- header = (PACTYPE *)realloc(pac->pac,
- sizeof(PACTYPE) +
- (pac->pac->cBuffers * sizeof(PAC_INFO_BUFFER)));
- if (header == NULL) {
+ if (pac->nbuffers >= MAX_BUFFERS)
+ return ERANGE;
+ nbufs = realloc(pac->buffers, (pac->nbuffers + 1) * sizeof(*pac->buffers));
+ if (nbufs == NULL)
 return ENOMEM;
- }
- pac->pac = header;
+ pac->buffers = nbufs;
 
- header_len = PACTYPE_LENGTH + (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + pac->nbuffers * PAC_INFO_BUFFER_LENGTH;
 
 if (data->length % PAC_ALIGNMENT)
 pad = PAC_ALIGNMENT - (data->length % PAC_ALIGNMENT);
-
- pac_data = realloc(pac->data.data,
- pac->data.length + PAC_INFO_BUFFER_LENGTH + data->length + pad);
- if (pac_data == NULL) {
+ ndata = realloc(pac->data.data,
+ pac->data.length + PAC_INFO_BUFFER_LENGTH +
+ data->length + pad);
+ if (ndata == NULL)
 return ENOMEM;
- }
- pac->data.data = pac_data;
+ pac->data.data = ndata;
 
- /* Update offsets of existing buffers */
- for (i = 0; i < pac->pac->cBuffers; i++)
- pac->pac->Buffersi.Offset += PAC_INFO_BUFFER_LENGTH;
+ /* Update the offsets of existing buffers. */
+ for (i = 0; i < pac->nbuffers; i++)
+ pac->buffersi.offset += PAC_INFO_BUFFER_LENGTH;
 
- /* Make room for new PAC_INFO_BUFFER */
+ /* Make room for the new buffer's metadata. */
 memmove(pac->data.data + header_len + PAC_INFO_BUFFER_LENGTH,
 pac->data.data + header_len,
 pac->data.length - header_len);
 memset(pac->data.data + header_len, 0, PAC_INFO_BUFFER_LENGTH);
 
- /* Initialise new PAC_INFO_BUFFER */
- pac->pac->Buffersi.ulType = type;
- pac->pac->Buffersi.cbBufferSize = data->length;
- pac->pac->Buffersi.Offset = pac->data.length + PAC_INFO_BUFFER_LENGTH;
- assert((pac->pac->Buffersi.Offset % PAC_ALIGNMENT) == 0);
+ /* Initialize the new buffer. */
+ pac->buffersi.type = type;
+ pac->buffersi.size = data->length;
+ pac->buffersi.offset = pac->data.length + PAC_INFO_BUFFER_LENGTH;
+ assert((pac->buffersi.offset % PAC_ALIGNMENT) == 0);
 
- /* Copy in new PAC data and zero padding bytes */
+ /* Copy in new PAC data and zero padding bytes. */
+ bufdata = pac->data.data + pac->buffersi.offset;
 if (zerofill)
- memset(pac->data.data + pac->pac->Buffersi.Offset, 0, data->length);
+ memset(bufdata, 0, data->length);
 else
- memcpy(pac->data.data + pac->pac->Buffersi.Offset, data->data, data->length);
-
- memset(pac->data.data + pac->pac->Buffersi.Offset + data->length, 0, pad);
+ memcpy(bufdata, data->data, data->length);
+ memset(bufdata + data->length, 0, pad);
 
- pac->pac->cBuffers++;
+ pac->nbuffers++;
 pac->data.length += PAC_INFO_BUFFER_LENGTH + data->length + pad;
 
- if (out_data != NULL) {
- out_data->data = pac->data.data + pac->pac->Buffersi.Offset;
- out_data->length = data->length;
- }
+ if (data_out != NULL)
+ *data_out = make_data(bufdata, data->length);
 
 pac->verified = FALSE;
 
@@ -112,9 +105,7 @@
 }
 
 krb5_error_code KRB5_CALLCONV
-krb5_pac_add_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
+krb5_pac_add_buffer(krb5_context context, krb5_pac pac, uint32_t type,
 const krb5_data *data)
 {
 return k5_pac_add_buffer(context, pac, type, data, FALSE, NULL);
@@ -124,32 +115,29 @@
 * Free a PAC
 */
 void KRB5_CALLCONV
-krb5_pac_free(krb5_context context,
- krb5_pac pac)
+krb5_pac_free(krb5_context context, krb5_pac pac)
 {
 if (pac != NULL) {
 zapfree(pac->data.data, pac->data.length);
- free(pac->pac);
+ free(pac->buffers);
 zapfree(pac, sizeof(*pac));
 }
 }
 
 krb5_error_code
-k5_pac_locate_buffer(krb5_context context,
- const krb5_pac pac,
- krb5_ui_4 type,
- krb5_data *data)
+k5_pac_locate_buffer(krb5_context context, const krb5_pac pac, uint32_t type,
+ krb5_data *data_out)
 {
- PAC_INFO_BUFFER *buffer = NULL;
+ struct k5_pac_buffer *buffer = NULL;
 size_t i;
 
 if (pac == NULL)
 return EINVAL;
 
- for (i = 0; i < pac->pac->cBuffers; i++) {
- if (pac->pac->Buffersi.ulType == type) {
+ for (i = 0; i < pac->nbuffers; i++) {
+ if (pac->buffersi.type == type) {
 if (buffer == NULL)
- buffer = &pac->pac->Buffersi;
+ buffer = &pac->buffersi;
 else
 return EINVAL;
 }
@@ -158,12 +146,11 @@
 if (buffer == NULL)
 return ENOENT;
 
- assert(buffer->Offset + buffer->cbBufferSize <= pac->data.length);
+ assert(buffer->offset < pac->data.length);
+ assert(buffer->size <= pac->data.length - buffer->offset);
 
- if (data != NULL) {
- data->length = buffer->cbBufferSize;
- data->data = pac->data.data + buffer->Offset;
- }
+ if (data_out != NULL)
+ *data_out = make_data(pac->data.data + buffer->offset, buffer->size);
 
 return 0;
 }
@@ -172,23 +159,20 @@
 * Find a buffer and copy data into output
 */
 krb5_error_code KRB5_CALLCONV
-krb5_pac_get_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- krb5_data *data)
+krb5_pac_get_buffer(krb5_context context, krb5_pac pac, uint32_t type,
+ krb5_data *data_out)
 {
 krb5_data d;
 krb5_error_code ret;
 
 ret = k5_pac_locate_buffer(context, pac, type, &d);
- if (ret != 0)
+ if (ret)
 return ret;
 
- data->data = k5memdup(d.data, d.length, &ret);
- if (data->data == NULL)
+ data_out->data = k5memdup(d.data, d.length, &ret);
+ if (data_out->data == NULL)
 return ret;
- data->length = d.length;
-
+ data_out->length = d.length;
 return 0;
 }
 
@@ -196,183 +180,160 @@
 * Return an array of the types of data in the PAC
 */
 krb5_error_code KRB5_CALLCONV
-krb5_pac_get_types(krb5_context context,
- krb5_pac pac,
- size_t *len,
- krb5_ui_4 **types)
+krb5_pac_get_types(krb5_context context, krb5_pac pac, size_t *len_out,
+ uint32_t **types_out)
 {
 size_t i;
 
- *types = (krb5_ui_4 *)malloc(pac->pac->cBuffers * sizeof(krb5_ui_4));
- if (*types == NULL)
+ *types_out = calloc(pac->nbuffers, sizeof(*types_out));
+ if (*types_out == NULL)
 return ENOMEM;
 
- *len = pac->pac->cBuffers;
+ *len_out = pac->nbuffers;
 
- for (i = 0; i < pac->pac->cBuffers; i++)
- (*types)i = pac->pac->Buffersi.ulType;
+ for (i = 0; i < pac->nbuffers; i++)
+ (*types_out)i = pac->buffersi.type;
 
 return 0;
 }
 
-/*
- * Initialize PAC
- */
 krb5_error_code KRB5_CALLCONV
-krb5_pac_init(krb5_context context,
- krb5_pac *ppac)
+krb5_pac_init(krb5_context context, krb5_pac *pac_out)
 {
+ krb5_error_code ret;
 krb5_pac pac;
 
- pac = (krb5_pac)malloc(sizeof(*pac));
- if (pac == NULL)
- return ENOMEM;
+ *pac_out = NULL;
 
- pac->pac = (PACTYPE *)malloc(sizeof(PACTYPE));
- if (pac->pac == NULL) {
- free(pac);
+ pac = malloc(sizeof(*pac));
+ if (pac == NULL)
 return ENOMEM;
- }
 
- pac->pac->cBuffers = 0;
- pac->pac->Version = 0;
+ pac->nbuffers = 0;
+ pac->buffers = NULL;
+ pac->version = 0;
 
 pac->data.length = PACTYPE_LENGTH;
- pac->data.data = calloc(1, pac->data.length);
+ pac->data.data = k5alloc(pac->data.length, &ret);
 if (pac->data.data == NULL) {
- krb5_pac_free(context, pac);
- return ENOMEM;
+ free(pac);
+ return ret;
 }
 
 pac->verified = FALSE;
 
- *ppac = pac;
-
+ *pac_out = pac;
 return 0;
 }
 
 static krb5_error_code
-k5_pac_copy(krb5_context context,
- krb5_pac src,
- krb5_pac *dst)
+copy_pac(krb5_context context, krb5_pac src, krb5_pac *dst_out)
 {
- size_t header_len;
- krb5_ui_4 cbuffers;
- krb5_error_code code;
+ krb5_error_code ret;
 krb5_pac pac;
 
- cbuffers = src->pac->cBuffers;
- if (cbuffers != 0)
- cbuffers--;
+ *dst_out = NULL;
 
- header_len = sizeof(PACTYPE) + cbuffers * sizeof(PAC_INFO_BUFFER);
-
- pac = (krb5_pac)malloc(sizeof(*pac));
+ pac = k5alloc(sizeof(*pac), &ret);
 if (pac == NULL)
- return ENOMEM;
+ goto fail;
 
- pac->pac = k5memdup(src->pac, header_len, &code);
- if (pac->pac == NULL) {
- free(pac);
- return code;
- }
+ pac->buffers = k5memdup(src->buffers,
+ src->nbuffers * sizeof(*pac->buffers), &ret);
+ if (pac->buffers == NULL)
+ goto fail;
 
- code = krb5int_copy_data_contents(context, &src->data, &pac->data);
- if (code != 0) {
- free(pac->pac);
- free(pac);
- return ENOMEM;
- }
+ ret = krb5int_copy_data_contents(context, &src->data, &pac->data);
+ if (ret)
+ goto fail;
 
+ pac->nbuffers = src->nbuffers;
+ pac->version = src->version;
 pac->verified = src->verified;
- *dst = pac;
 
+ *dst_out = pac;
 return 0;
+
+fail:
+ krb5_pac_free(context, pac);
+ return ret;
 }
 
-/*
- * Parse the supplied data into the PAC allocated by this function
- */
+/* Parse the supplied data into an allocated PAC. */
 krb5_error_code KRB5_CALLCONV
-krb5_pac_parse(krb5_context context,
- const void *ptr,
- size_t len,
+krb5_pac_parse(krb5_context context, const void *ptr, size_t len,
 krb5_pac *ppac)
 {
 krb5_error_code ret;
 size_t i;
- const unsigned char *p = (const unsigned char *)ptr;
 krb5_pac pac;
 size_t header_len;
- krb5_ui_4 cbuffers, version;
+ uint32_t nbuffers, version;
+ struct k5input in;
+ char *ndata;
 
 *ppac = NULL;
 
- if (len < PACTYPE_LENGTH)
- return ERANGE;
-
- cbuffers = load_32_le(p);
- p += 4;
- version = load_32_le(p);
- p += 4;
+ k5_input_init(&in, ptr, len);
 
- if (version != 0)
+ nbuffers = k5_input_get_uint32_le(&in);
+ version = k5_input_get_uint32_le(&in);
+ if (in.status || version != 0)
 return EINVAL;
 
- if (cbuffers < 1 || cbuffers > MAX_BUFFERS)
+ if (nbuffers < 1 || nbuffers > MAX_BUFFERS)
 return ERANGE;
 
- header_len = PACTYPE_LENGTH + (cbuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + (nbuffers * PAC_INFO_BUFFER_LENGTH);
 if (len < header_len)
 return ERANGE;
 
 ret = krb5_pac_init(context, &pac);
- if (ret != 0)
+ if (ret)
 return ret;
 
- pac->pac = (PACTYPE *)realloc(pac->pac,
- sizeof(PACTYPE) + ((cbuffers - 1) * sizeof(PAC_INFO_BUFFER)));
- if (pac->pac == NULL) {
- krb5_pac_free(context, pac);
- return ENOMEM;
- }
+ pac->buffers = k5calloc(nbuffers, sizeof(*pac->buffers), &ret);
+ if (ret)
+ goto fail;
 
- pac->pac->cBuffers = cbuffers;
- pac->pac->Version = version;
+ pac->nbuffers = nbuffers;
+ pac->version = version;
 
- for (i = 0; i < pac->pac->cBuffers; i++) {
- PAC_INFO_BUFFER *buffer = &pac->pac->Buffersi;
+ for (i = 0; i < nbuffers; i++) {
+ struct k5_pac_buffer *buffer = &pac->buffersi;
 
- buffer->ulType = load_32_le(p);
- p += 4;
- buffer->cbBufferSize = load_32_le(p);
- p += 4;
- buffer->Offset = load_64_le(p);
- p += 8;
+ buffer->type = k5_input_get_uint32_le(&in);
+ buffer->size = k5_input_get_uint32_le(&in);
+ buffer->offset = k5_input_get_uint64_le(&in);
 
- if (buffer->Offset % PAC_ALIGNMENT) {
- krb5_pac_free(context, pac);
- return EINVAL;
+ if (in.status || buffer->offset % PAC_ALIGNMENT) {
+ ret = EINVAL;
+ goto fail;
 }
- if (buffer->Offset < header_len || buffer->Offset > len ||
- buffer->cbBufferSize > len - buffer->Offset) {
- krb5_pac_free(context, pac);
- return ERANGE;
+ if (buffer->offset < header_len || buffer->offset > len ||
+ buffer->size > len - buffer->offset) {
+ ret = ERANGE;
+ goto fail;
 }
 }
 
- pac->data.data = realloc(pac->data.data, len);
- if (pac->data.data == NULL) {
+ ndata = realloc(pac->data.data, len);
+ if (ndata == NULL) {
 krb5_pac_free(context, pac);
 return ENOMEM;
 }
- memcpy(pac->data.data, ptr, len);
+ pac->data.data = ndata;
+ memcpy(ndata, ptr, len);
 
 pac->data.length = len;
 
 *ppac = pac;
 
 return 0;
+
+fail:
+ krb5_pac_free(context, pac);
+ return ret;
 }
 
 static krb5_error_code
@@ -396,17 +357,15 @@
 }
 
 krb5_error_code KRB5_CALLCONV
-krb5_pac_get_client_info(krb5_context context,
- const krb5_pac pac,
- krb5_timestamp *authtime_out,
- char **princname_out)
+krb5_pac_get_client_info(krb5_context context, const krb5_pac pac,
+ krb5_timestamp *authtime_out, char **princname_out)
 {
 krb5_error_code ret;
 krb5_data client_info;
 char *pac_princname;
 unsigned char *p;
 krb5_timestamp pac_authtime;
- krb5_ui_2 pac_princname_length;
+ uint16_t pac_princname_length;
 uint64_t pac_nt_authtime;
 
 if (authtime_out != NULL)
@@ -415,7 +374,7 @@
 
 ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_CLIENT_INFO,
 &client_info);
- if (ret != 0)
+ if (ret)
 return ret;
 
 if (client_info.length < PAC_CLIENT_INFO_LENGTH)
@@ -428,7 +387,7 @@
 p += 2;
 
 ret = k5_time_to_seconds_since_1970(pac_nt_authtime, &pac_authtime);
- if (ret != 0)
+ if (ret)
 return ret;
 
 if (client_info.length < PAC_CLIENT_INFO_LENGTH + pac_princname_length ||
@@ -436,7 +395,7 @@
 return ERANGE;
 
 ret = k5_utf16le_to_utf8(p, pac_princname_length, &pac_princname);
- if (ret != 0)
+ if (ret)
 return ret;
 
 if (authtime_out != NULL)
@@ -447,10 +406,8 @@
 }
 
 krb5_error_code
-k5_pac_validate_client(krb5_context context,
- const krb5_pac pac,
- krb5_timestamp authtime,
- krb5_const_principal principal,
+k5_pac_validate_client(krb5_context context, const krb5_pac pac,
+ krb5_timestamp authtime, krb5_const_principal principal,
 krb5_boolean with_realm)
 {
 krb5_error_code ret;
@@ -460,7 +417,7 @@
 
 ret = krb5_pac_get_client_info(context, pac, &pac_authtime,
 &pac_princname);
- if (ret != 0)
+ if (ret)
 return ret;
 
 flags = KRB5_PRINCIPAL_UNPARSE_DISPLAY;
@@ -468,7 +425,7 @@
 flags |= KRB5_PRINCIPAL_UNPARSE_NO_REALM;
 
 ret = krb5_unparse_name_flags(context, principal, flags, &princname);
- if (ret != 0) {
+ if (ret) {
 free(pac_princname);
 return ret;
 }
@@ -482,20 +439,22 @@
 return ret;
 }
 
+/* Zero out the signature in a copy of the PAC data. */
 static krb5_error_code
-zero_signature(krb5_context context, const krb5_pac pac, krb5_ui_4 type,
+zero_signature(krb5_context context, const krb5_pac pac, uint32_t type,
 krb5_data *data)
 {
- PAC_INFO_BUFFER *buffer = NULL;
+ struct k5_pac_buffer *buffer = NULL;
 size_t i;
 
 assert(type == KRB5_PAC_SERVER_CHECKSUM ||
- type == KRB5_PAC_PRIVSVR_CHECKSUM);
+ type == KRB5_PAC_PRIVSVR_CHECKSUM ||
+ type == KRB5_PAC_FULL_CHECKSUM);
 assert(data->length >= pac->data.length);
 
- for (i = 0; i < pac->pac->cBuffers; i++) {
- if (pac->pac->Buffersi.ulType == type) {
- buffer = &pac->pac->Buffersi;
+ for (i = 0; i < pac->nbuffers; i++) {
+ if (pac->buffersi.type == type) {
+ buffer = &pac->buffersi;
 break;
 }
 }
@@ -503,16 +462,15 @@
 if (buffer == NULL)
 return ENOENT;
 
- if (buffer->Offset + buffer->cbBufferSize > pac->data.length)
- return ERANGE;
-
- if (buffer->cbBufferSize < PAC_SIGNATURE_DATA_LENGTH)
+ if (buffer->size < PAC_SIGNATURE_DATA_LENGTH)
 return KRB5_BAD_MSIZE;
+ if (buffer->size > pac->data.length ||
+ buffer->offset > pac->data.length - buffer->size)
+ return ERANGE;
 
- /* Zero out the data portion of the checksum only */
- memset(data->data + buffer->Offset + PAC_SIGNATURE_DATA_LENGTH,
- 0,
- buffer->cbBufferSize - PAC_SIGNATURE_DATA_LENGTH);
+ /* Within the copy, zero out the data portion of the checksum only. */
+ memset(data->data + buffer->offset + PAC_SIGNATURE_DATA_LENGTH, 0,
+ buffer->size - PAC_SIGNATURE_DATA_LENGTH);
 
 return 0;
 }
@@ -530,7 +488,7 @@
 size_t cksumlen;
 
 ret = k5_pac_locate_buffer(context, pac, buffer_type, &buffer);
- if (ret != 0)
+ if (ret)
 return ret;
 if (buffer.length < PAC_SIGNATURE_DATA_LENGTH)
 return KRB5_BAD_MSIZE;
@@ -557,17 +515,18 @@
 }
 
 static krb5_error_code
-verify_server_checksum(krb5_context context, const krb5_pac pac,
- const krb5_keyblock *server)
+verify_pac_checksums(krb5_context context, const krb5_pac pac,
+ krb5_boolean expect_full_checksum,
+ const krb5_keyblock *server, const krb5_keyblock *privsvr)
 {
 krb5_error_code ret;
- krb5_data copy; /* PAC with zeroed checksums */
+ krb5_data copy, server_checksum;
 
+ /* Make a copy of the PAC with zeroed out server and privsvr checksums. */
 ret = krb5int_copy_data_contents(context, &pac->data, &copy);
 if (ret)
 return ret;
 
- /* Zero out both checksum buffers */
 ret = zero_signature(context, pac, KRB5_PAC_SERVER_CHECKSUM, &copy);
 if (ret)
 goto cleanup;
@@ -575,32 +534,46 @@
 if (ret)
 goto cleanup;
 
- ret = verify_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server,
- KRB5_KEYUSAGE_APP_DATA_CKSUM, &copy);
+ if (server != NULL) {
+ /* Verify the server checksum over the PAC copy. */
+ ret = verify_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, &copy);
+ }
 
-cleanup:
- free(copy.data);
- return ret;
-}
+ if (privsvr != NULL && expect_full_checksum) {
+ /* Zero the full checksum buffer in the copy and verify the full
+ * checksum over the copy with all three checksums zeroed. */
+ ret = zero_signature(context, pac, KRB5_PAC_FULL_CHECKSUM, &copy);
+ if (ret)
+ goto cleanup;
+ ret = verify_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM, privsvr,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, &copy);
+ if (ret)
+ goto cleanup;
+ }
 
-static krb5_error_code
-verify_kdc_checksum(krb5_context context, const krb5_pac pac,
- const krb5_keyblock *privsvr)
-{
- krb5_error_code ret;
- krb5_data server_checksum;
+ if (privsvr != NULL) {
+ /* Verify the privsvr checksum over the server checksum. */
+ ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
+ &server_checksum);
+ if (ret)
+ return ret;
+ if (server_checksum.length < PAC_SIGNATURE_DATA_LENGTH)
+ return KRB5_BAD_MSIZE;
+ server_checksum.data += PAC_SIGNATURE_DATA_LENGTH;
+ server_checksum.length -= PAC_SIGNATURE_DATA_LENGTH;
 
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- &server_checksum);
- if (ret)
- return ret;
- if (server_checksum.length < PAC_SIGNATURE_DATA_LENGTH)
- return KRB5_BAD_MSIZE;
- server_checksum.data += PAC_SIGNATURE_DATA_LENGTH;
- server_checksum.length -= PAC_SIGNATURE_DATA_LENGTH;
+ ret = verify_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, &server_checksum);
+ if (ret)
+ goto cleanup;
+ }
 
- return verify_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr,
- KRB5_KEYUSAGE_APP_DATA_CKSUM, &server_checksum);
+ pac->verified = TRUE;
+
+cleanup:
+ free(copy.data);
+ return ret;
 }
 
 /* Per MS-PAC 2.8.3, tickets encrypted to TGS and password change principals
@@ -625,20 +598,24 @@
 krb5_error_code ret;
 krb5_pac pac = NULL;
 krb5_data *recoded_tkt = NULL;
- krb5_authdata **authdata, *orig, **ifrel = NULL, **recoded_ifrel = NULL;
+ krb5_authdata **authdata = enc_tkt->authorization_data;
+ krb5_authdata *orig, **ifrel = NULL, **recoded_ifrel = NULL;
 uint8_t z = 0;
 krb5_authdata zpac = { KV5M_AUTHDATA, KRB5_AUTHDATA_WIN2K_PAC, 1, &z };
+ krb5_boolean is_service_tkt;
 size_t i, j;
 
 *pac_out = NULL;
 
+ if (authdata == NULL)
+ return 0;
+
 /*
 * Find the position of the PAC in the ticket authdata. ifrel will be the
 * decoded AD-IF-RELEVANT container at position i containing a PAC, and j
 * will be the offset within the container.
 */
- authdata = enc_tkt->authorization_data;
- for (i = 0; authdata != NULL && authdatai != NULL; i++) {
+ for (i = 0; authdatai != NULL; i++) {
 if (authdatai->ad_type != KRB5_AUTHDATA_IF_RELEVANT)
 continue;
 
@@ -660,7 +637,7 @@
 }
 
 /* Stop and return successfully if we didn't find a PAC. */
- if (ifrel == NULL) {
+ if (authdatai == NULL) {
 ret = 0;
 goto cleanup;
 }
@@ -669,7 +646,8 @@
 if (ret)
 goto cleanup;
 
- if (privsvr != NULL && k5_pac_should_have_ticket_signature(server_princ)) {
+ is_service_tkt = k5_pac_should_have_ticket_signature(server_princ);
+ if (privsvr != NULL && is_service_tkt) {
 /* To check the PAC ticket signatures, re-encode the ticket with the
 * PAC contents replaced by a single zero. */
 orig = ifrelj;
@@ -693,8 +671,9 @@
 goto cleanup;
 }
 
- ret = krb5_pac_verify_ext(context, pac, enc_tkt->times.authtime, NULL,
- server, privsvr, FALSE);
+ ret = verify_pac_checksums(context, pac, is_service_tkt, server, privsvr);
+ if (ret)
+ goto cleanup;
 
 *pac_out = pac;
 pac = NULL;
@@ -730,27 +709,19 @@
 {
 krb5_error_code ret;
 
- if (server != NULL) {
- ret = verify_server_checksum(context, pac, server);
- if (ret != 0)
- return ret;
- }
-
- if (privsvr != NULL) {
- ret = verify_kdc_checksum(context, pac, privsvr);
- if (ret != 0)
+ if (server != NULL || privsvr != NULL) {
+ ret = verify_pac_checksums(context, pac, FALSE, server, privsvr);
+ if (ret)
 return ret;
 }
 
 if (principal != NULL) {
 ret = k5_pac_validate_client(context, pac, authtime,
 principal, with_realm);
- if (ret != 0)
+ if (ret)
 return ret;
 }
 
- pac->verified = TRUE;
-
 return 0;
 }
 
@@ -762,36 +733,32 @@
 };
 
 static krb5_error_code
-mspac_init(krb5_context kcontext, void **plugin_context)
+mspac_init(krb5_context context, void **plugin_context)
 {
 *plugin_context = NULL;
 return 0;
 }
 
 static void
-mspac_flags(krb5_context kcontext,
- void *plugin_context,
- krb5_authdatatype ad_type,
- krb5_flags *flags)
+mspac_flags(krb5_context context, void *plugin_context,
+ krb5_authdatatype ad_type, krb5_flags *flags)
 {
 *flags = AD_USAGE_TGS_REQ;
 }
 
 static void
-mspac_fini(krb5_context kcontext, void *plugin_context)
+mspac_fini(krb5_context context, void *plugin_context)
 {
 return;
 }
 
 static krb5_error_code
-mspac_request_init(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void **request_context)
+mspac_request_init(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void **request_context)
 {
 struct mspac_context *pacctx;
 
- pacctx = (struct mspac_context *)malloc(sizeof(*pacctx));
+ pacctx = malloc(sizeof(*pacctx));
 if (pacctx == NULL)
 return ENOMEM;
 
@@ -803,22 +770,18 @@
 }
 
 static krb5_error_code
-mspac_import_authdata(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_authdata **authdata,
- krb5_boolean kdc_issued,
+mspac_import_authdata(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_authdata **authdata, krb5_boolean kdc_issued,
 krb5_const_principal kdc_issuer)
 {
- krb5_error_code code;
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 
 if (kdc_issued)
 return EINVAL;
 
 if (pacctx->pac != NULL) {
- krb5_pac_free(kcontext, pacctx->pac);
+ krb5_pac_free(context, pacctx->pac);
 pacctx->pac = NULL;
 }
 
@@ -826,19 +789,14 @@
 assert((authdata0->ad_type & AD_TYPE_FIELD_TYPE_MASK) ==
 KRB5_AUTHDATA_WIN2K_PAC);
 
- code = krb5_pac_parse(kcontext, authdata0->contents,
- authdata0->length, &pacctx->pac);
-
- return code;
+ return krb5_pac_parse(context, authdata0->contents, authdata0->length,
+ &pacctx->pac);
 }
 
 static krb5_error_code
-mspac_export_authdata(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_flags usage,
- krb5_authdata ***out_authdata)
+mspac_export_authdata(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_flags usage, krb5_authdata ***authdata_out)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 krb5_error_code code;
@@ -859,9 +817,9 @@
 }
 authdata1 = NULL;
 
- code = krb5int_copy_data_contents(kcontext, &pacctx->pac->data, &data);
+ code = krb5int_copy_data_contents(context, &pacctx->pac->data, &data);
 if (code != 0) {
- krb5_free_authdata(kcontext, authdata);
+ krb5_free_authdata(context, authdata);
 return code;
 }
 
@@ -872,31 +830,28 @@
 
 authdata1 = NULL;
 
- *out_authdata = authdata;
+ *authdata_out = authdata;
 
 return 0;
 }
 
 static krb5_error_code
-mspac_verify(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- const krb5_auth_context *auth_context,
- const krb5_keyblock *key,
+mspac_verify(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ const krb5_auth_context *auth_context, const krb5_keyblock *key,
 const krb5_ap_req *req)
 {
- krb5_error_code code;
+ krb5_error_code ret;
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 
 if (pacctx->pac == NULL)
 return EINVAL;
 
- code = krb5_pac_verify(kcontext, pacctx->pac,
- req->ticket->enc_part2->times.authtime,
- req->ticket->enc_part2->client, key, NULL);
- if (code != 0)
- TRACE_MSPAC_VERIFY_FAIL(kcontext, code);
+ ret = krb5_pac_verify(context, pacctx->pac,
+ req->ticket->enc_part2->times.authtime,
+ req->ticket->enc_part2->client, key, NULL);
+ if (ret)
+ TRACE_MSPAC_VERIFY_FAIL(context, ret);
 
 /*
 * If the above verification failed, don't fail the whole authentication,
@@ -909,17 +864,13 @@
 }
 
 static void
-mspac_request_fini(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context)
+mspac_request_fini(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 
 if (pacctx != NULL) {
- if (pacctx->pac != NULL)
- krb5_pac_free(kcontext, pacctx->pac);
-
+ krb5_pac_free(context, pacctx->pac);
 free(pacctx);
 }
 }
@@ -927,10 +878,10 @@
 #define STRLENOF(x) (sizeof((x)) - 1)
 
 static struct {
- krb5_ui_4 type;
+ uint32_t type;
 krb5_data attribute;
 } mspac_attribute_types = {
- { (krb5_ui_4)-1, { KV5M_DATA, STRLENOF("urn:mspac:"),
+ { (uint32_t)-1, { KV5M_DATA, STRLENOF("urn:mspac:"),
 "urn:mspac:" } },
 { KRB5_PAC_LOGON_INFO, { KV5M_DATA,
 STRLENOF("urn:mspac:logon-info"),
@@ -958,7 +909,7 @@
 #define MSPAC_ATTRIBUTE_COUNT (sizeof(mspac_attribute_types)/sizeof(mspac_attribute_types0))
 
 static krb5_error_code
-mspac_type2attr(krb5_ui_4 type, krb5_data *attr)
+mspac_type2attr(uint32_t type, krb5_data *attr)
 {
 unsigned int i;
 
@@ -973,7 +924,7 @@
 }
 
 static krb5_error_code
-mspac_attr2type(const krb5_data *attr, krb5_ui_4 *type)
+mspac_attr2type(const krb5_data *attr, uint32_t *type)
 {
 unsigned int i;
 
@@ -1000,54 +951,48 @@
 }
 
 static krb5_error_code
-mspac_get_attribute_types(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_data **out_attrs)
+mspac_get_attribute_types(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_data **attrs_out)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 unsigned int i, j;
 krb5_data *attrs;
- krb5_error_code code;
+ krb5_error_code ret;
 
 if (pacctx->pac == NULL)
 return ENOENT;
 
- attrs = calloc(1 + pacctx->pac->pac->cBuffers + 1, sizeof(krb5_data));
+ attrs = calloc(1 + pacctx->pac->nbuffers + 1, sizeof(krb5_data));
 if (attrs == NULL)
 return ENOMEM;
 
 j = 0;
 
 /* The entire PAC */
- code = krb5int_copy_data_contents(kcontext,
- &mspac_attribute_types0.attribute,
- &attrsj++);
- if (code != 0) {
- free(attrs);
- return code;
- }
+ ret = krb5int_copy_data_contents(context,
+ &mspac_attribute_types0.attribute,
+ &attrsj++);
+ if (ret)
+ goto fail;
 
 /* PAC buffers */
- for (i = 0; i < pacctx->pac->pac->cBuffers; i++) {
+ for (i = 0; i < pacctx->pac->nbuffers; i++) {
 krb5_data attr;
 
- code = mspac_type2attr(pacctx->pac->pac->Buffersi.ulType, &attr);
- if (code == 0) {
- code = krb5int_copy_data_contents(kcontext, &attr, &attrsj++);
- if (code != 0) {
- krb5int_free_data_list(kcontext, attrs);
- return code;
- }
+ ret = mspac_type2attr(pacctx->pac->buffersi.type, &attr);
+ if (!ret) {
+ ret = krb5int_copy_data_contents(context, &attr, &attrsj++);
+ if (ret)
+ goto fail;
 } else {
 int length;
 
 length = asprintf(&attrsj.data, "urn:mspac:%d",
- pacctx->pac->pac->Buffersi.ulType);
+ pacctx->pac->buffersi.type);
 if (length < 0) {
- krb5int_free_data_list(kcontext, attrs);
- return ENOMEM;
+ ret = ENOMEM;
+ goto fail;
 }
 attrsj++.length = length;
 }
@@ -1055,26 +1000,25 @@
 attrsj.data = NULL;
 attrsj.length = 0;
 
- *out_attrs = attrs;
+ *attrs_out = attrs;
 
 return 0;
+
+fail:
+ krb5int_free_data_list(context, attrs);
+ return ret;
 }
 
 static krb5_error_code
-mspac_get_attribute(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- const krb5_data *attribute,
- krb5_boolean *authenticated,
- krb5_boolean *complete,
- krb5_data *value,
- krb5_data *display_value,
- int *more)
+mspac_get_attribute(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ const krb5_data *attribute, krb5_boolean *authenticated,
+ krb5_boolean *complete, krb5_data *value,
+ krb5_data *display_value, int *more)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_ui_4 type;
+ krb5_error_code ret;
+ uint32_t type;
 
 if (display_value != NULL) {
 display_value->data = NULL;
@@ -1086,85 +1030,78 @@
 
 /* If it didn't verify, pretend it didn't exist. */
 if (!pacctx->pac->verified) {
- TRACE_MSPAC_DISCARD_UNVERF(kcontext);
+ TRACE_MSPAC_DISCARD_UNVERF(context);
 return ENOENT;
 }
 
- code = mspac_attr2type(attribute, &type);
- if (code != 0)
- return code;
+ ret = mspac_attr2type(attribute, &type);
+ if (ret)
+ return ret;
 
 /* -1 is a magic type that refers to the entire PAC */
- if (type == (krb5_ui_4)-1) {
+ if (type == (uint32_t)-1) {
 if (value != NULL)
- code = krb5int_copy_data_contents(kcontext,
- &pacctx->pac->data,
- value);
+ ret = krb5int_copy_data_contents(context, &pacctx->pac->data,
+ value);
 else
- code = 0;
+ ret = 0;
 } else {
 if (value != NULL)
- code = krb5_pac_get_buffer(kcontext, pacctx->pac, type, value);
+ ret = krb5_pac_get_buffer(context, pacctx->pac, type, value);
 else
- code = k5_pac_locate_buffer(kcontext, pacctx->pac, type, NULL);
+ ret = k5_pac_locate_buffer(context, pacctx->pac, type, NULL);
 }
- if (code == 0) {
+ if (!ret) {
 *authenticated = pacctx->pac->verified;
 *complete = TRUE;
 }
 
 *more = 0;
 
- return code;
+ return ret;
 }
 
 static krb5_error_code
-mspac_set_attribute(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_boolean complete,
- const krb5_data *attribute,
+mspac_set_attribute(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_boolean complete, const krb5_data *attribute,
 const krb5_data *value)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_ui_4 type;
+ krb5_error_code ret;
+ uint32_t type;
 
 if (pacctx->pac == NULL)
 return ENOENT;
 
- code = mspac_attr2type(attribute, &type);
- if (code != 0)
- return code;
+ ret = mspac_attr2type(attribute, &type);
+ if (ret)
+ return ret;
 
 /* -1 is a magic type that refers to the entire PAC */
- if (type == (krb5_ui_4)-1) {
+ if (type == (uint32_t)-1) {
 krb5_pac newpac;
 
- code = krb5_pac_parse(kcontext, value->data, value->length, &newpac);
- if (code != 0)
- return code;
+ ret = krb5_pac_parse(context, value->data, value->length, &newpac);
+ if (ret)
+ return ret;
 
- krb5_pac_free(kcontext, pacctx->pac);
+ krb5_pac_free(context, pacctx->pac);
 pacctx->pac = newpac;
 } else {
- code = krb5_pac_add_buffer(kcontext, pacctx->pac, type, value);
+ ret = krb5_pac_add_buffer(context, pacctx->pac, type, value);
 }
 
- return code;
+ return ret;
 }
 
 static krb5_error_code
-mspac_export_internal(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_boolean restrict_authenticated,
- void **ptr)
+mspac_export_internal(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_boolean restrict_authenticated, void **ptr)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
+ krb5_error_code ret;
 krb5_pac pac;
 
 *ptr = NULL;
@@ -1175,57 +1112,48 @@
 if (restrict_authenticated && (pacctx->pac->verified) == FALSE)
 return ENOENT;
 
- code = krb5_pac_parse(kcontext, pacctx->pac->data.data,
- pacctx->pac->data.length, &pac);
- if (code == 0) {
+ ret = krb5_pac_parse(context, pacctx->pac->data.data,
+ pacctx->pac->data.length, &pac);
+ if (!ret) {
 pac->verified = pacctx->pac->verified;
 *ptr = pac;
 }
 
- return code;
+ return ret;
 }
 
 static void
-mspac_free_internal(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- void *ptr)
+mspac_free_internal(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context, void *ptr)
 {
 if (ptr != NULL)
- krb5_pac_free(kcontext, (krb5_pac)ptr);
+ krb5_pac_free(context, (krb5_pac)ptr);
 
 return;
 }
 
 static krb5_error_code
-mspac_size(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- size_t *sizep)
+mspac_size(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context, size_t *sizep)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 
- *sizep += sizeof(krb5_int32);
+ *sizep += sizeof(int32_t);
 
 if (pacctx->pac != NULL)
 *sizep += pacctx->pac->data.length;
 
- *sizep += sizeof(krb5_int32);
+ *sizep += sizeof(int32_t);
 
 return 0;
 }
 
 static krb5_error_code
-mspac_externalize(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_octet **buffer,
- size_t *lenremain)
+mspac_externalize(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_octet **buffer, size_t *lenremain)
 {
- krb5_error_code code = 0;
+ krb5_error_code ret = 0;
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
 size_t required = 0;
 krb5_octet *bp;
@@ -1235,19 +1163,16 @@
 remain = *lenremain;
 
 if (pacctx->pac != NULL) {
- mspac_size(kcontext, context, plugin_context,
- request_context, &required);
+ mspac_size(context, actx, plugin_context, request_context, &required);
 
 if (required <= remain) {
- krb5_ser_pack_int32((krb5_int32)pacctx->pac->data.length,
- &bp, &remain);
+ krb5_ser_pack_int32(pacctx->pac->data.length, &bp, &remain);
 krb5_ser_pack_bytes((krb5_octet *)pacctx->pac->data.data,
 (size_t)pacctx->pac->data.length,
 &bp, &remain);
- krb5_ser_pack_int32((krb5_int32)pacctx->pac->verified,
- &bp, &remain);
+ krb5_ser_pack_int32(pacctx->pac->verified, &bp, &remain);
 } else {
- code = ENOMEM;
+ ret = ENOMEM;
 }
 } else {
 krb5_ser_pack_int32(0, &bp, &remain); /* length */
@@ -1257,21 +1182,18 @@
 *buffer = bp;
 *lenremain = remain;
 
- return code;
+ return ret;
 }
 
 static krb5_error_code
-mspac_internalize(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_octet **buffer,
- size_t *lenremain)
+mspac_internalize(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_octet **buffer, size_t *lenremain)
 {
 struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_int32 ibuf;
- krb5_octet *bp;
+ krb5_error_code ret;
+ int32_t ibuf;
+ uint8_t *bp;
 size_t remain;
 krb5_pac pac = NULL;
 
@@ -1279,33 +1201,31 @@
 remain = *lenremain;
 
 /* length */
- code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
- if (code != 0)
- return code;
+ ret = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
+ if (ret)
+ return ret;
 
 if (ibuf != 0) {
- code = krb5_pac_parse(kcontext, bp, ibuf, &pac);
- if (code != 0)
- return code;
+ ret = krb5_pac_parse(context, bp, ibuf, &pac);
+ if (ret)
+ return ret;
 
 bp += ibuf;
 remain -= ibuf;
 }
 
 /* verified */
- code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
- if (code != 0) {
- krb5_pac_free(kcontext, pac);
- return code;
+ ret = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
+ if (ret) {
+ krb5_pac_free(context, pac);
+ return ret;
 }
 
- if (pac != NULL) {
+ if (pac != NULL)
 pac->verified = (ibuf != 0);
- }
 
- if (pacctx->pac != NULL) {
- krb5_pac_free(kcontext, pacctx->pac);
- }
+ if (pacctx->pac != NULL)
+ krb5_pac_free(context, pacctx->pac);
 
 pacctx->pac = pac;
 
@@ -1316,24 +1236,21 @@
 }
 
 static krb5_error_code
-mspac_copy(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- void *dst_plugin_context,
- void *dst_request_context)
+mspac_copy(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ void *dst_plugin_context, void *dst_request_context)
 {
 struct mspac_context *srcctx = (struct mspac_context *)request_context;
 struct mspac_context *dstctx = (struct mspac_context *)dst_request_context;
- krb5_error_code code = 0;
+ krb5_error_code ret = 0;
 
 assert(dstctx != NULL);
 assert(dstctx->pac == NULL);
 
 if (srcctx->pac != NULL)
- code = k5_pac_copy(kcontext, srcctx->pac, &dstctx->pac);
+ ret = copy_pac(context, srcctx->pac, &dstctx->pac);
 
- return code;
+ return ret;
 }
 
 static krb5_authdatatype mspac_ad_types = { KRB5_AUTHDATA_WIN2K_PAC, 0 };

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/pac_sign.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/pac_sign.c Changed

@@ -31,16 +31,13 @@
 /* draft-brezak-win2k-krb-authz-00 */
 
 static krb5_error_code
-k5_insert_client_info(krb5_context context,
- krb5_pac pac,
- krb5_timestamp authtime,
- krb5_const_principal principal,
- krb5_boolean with_realm)
+insert_client_info(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, krb5_boolean with_realm)
 {
 krb5_error_code ret;
 krb5_data client_info;
 char *princ_name_utf8 = NULL;
- unsigned char *princ_name_utf16 = NULL, *p;
+ uint8_t *princ_name_utf16 = NULL, *p;
 size_t princ_name_utf16_len = 0;
 uint64_t nt_authtime;
 int flags = 0;
@@ -60,12 +57,12 @@
 }
 
 ret = krb5_unparse_name_flags(context, principal, flags, &princ_name_utf8);
- if (ret != 0)
+ if (ret)
 goto cleanup;
 
 ret = k5_utf8_to_utf16le(princ_name_utf8, &princ_name_utf16,
 &princ_name_utf16_len);
- if (ret != 0)
+ if (ret)
 goto cleanup;
 
 client_info.length = PAC_CLIENT_INFO_LENGTH + princ_name_utf16_len;
@@ -73,10 +70,10 @@
 
 ret = k5_pac_add_buffer(context, pac, KRB5_PAC_CLIENT_INFO,
 &client_info, TRUE, &client_info);
- if (ret != 0)
+ if (ret)
 goto cleanup;
 
- p = (unsigned char *)client_info.data;
+ p = (uint8_t *)client_info.data;
 
 /* copy in authtime converted to a 64-bit NT time */
 k5_seconds_since_1970_to_time(authtime, &nt_authtime);
@@ -99,26 +96,23 @@
 }
 
 static krb5_error_code
-k5_insert_checksum(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- const krb5_keyblock *key,
- krb5_cksumtype *cksumtype)
+insert_checksum(krb5_context context, krb5_pac pac, krb5_ui_4 type,
+ const krb5_keyblock *key, krb5_cksumtype *cksumtype)
 {
 krb5_error_code ret;
 size_t len;
 krb5_data cksumdata;
 
 ret = krb5int_c_mandatory_cksumtype(context, key->enctype, cksumtype);
- if (ret != 0)
+ if (ret)
 return ret;
 
 ret = krb5_c_checksum_length(context, *cksumtype, &len);
- if (ret != 0)
+ if (ret)
 return ret;
 
 ret = k5_pac_locate_buffer(context, pac, type, &cksumdata);
- if (ret == 0) {
+ if (!ret) {
 /*
 * If we're resigning PAC, make sure we can fit checksum
 * into existing buffer
@@ -132,10 +126,9 @@
 cksumdata.length = PAC_SIGNATURE_DATA_LENGTH + len;
 cksumdata.data = NULL;
 
- ret = k5_pac_add_buffer(context, pac,
- type, &cksumdata,
- TRUE, &cksumdata);
- if (ret != 0)
+ ret = k5_pac_add_buffer(context, pac, type, &cksumdata, TRUE,
+ &cksumdata);
+ if (ret)
 return ret;
 }
 
@@ -147,134 +140,136 @@
 
 /* in-place encoding of PAC header */
 static krb5_error_code
-k5_pac_encode_header(krb5_context context, krb5_pac pac)
+encode_header(krb5_context context, krb5_pac pac)
 {
 size_t i;
 unsigned char *p;
 size_t header_len;
 
- header_len = PACTYPE_LENGTH +
- (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + (pac->nbuffers * PAC_INFO_BUFFER_LENGTH);
 assert(pac->data.length >= header_len);
 
- p = (unsigned char *)pac->data.data;
+ p = (uint8_t *)pac->data.data;
 
- store_32_le(pac->pac->cBuffers, p);
+ store_32_le(pac->nbuffers, p);
 p += 4;
- store_32_le(pac->pac->Version, p);
+ store_32_le(pac->version, p);
 p += 4;
 
- for (i = 0; i < pac->pac->cBuffers; i++) {
- PAC_INFO_BUFFER *buffer = &pac->pac->Buffersi;
+ for (i = 0; i < pac->nbuffers; i++) {
+ struct k5_pac_buffer *buffer = &pac->buffersi;
 
- store_32_le(buffer->ulType, p);
+ store_32_le(buffer->type, p);
 p += 4;
- store_32_le(buffer->cbBufferSize, p);
+ store_32_le(buffer->size, p);
 p += 4;
- store_64_le(buffer->Offset, p);
+ store_64_le(buffer->offset, p);
 p += 8;
 
- assert((buffer->Offset % PAC_ALIGNMENT) == 0);
- assert(buffer->Offset + buffer->cbBufferSize <= pac->data.length);
- assert(buffer->Offset >= header_len);
+ assert((buffer->offset % PAC_ALIGNMENT) == 0);
+ assert(buffer->size < pac->data.length);
+ assert(buffer->offset <= pac->data.length - buffer->size);
+ assert(buffer->offset >= header_len);
 
- if (buffer->Offset % PAC_ALIGNMENT ||
- buffer->Offset + buffer->cbBufferSize > pac->data.length ||
- buffer->Offset < header_len)
+ if (buffer->offset % PAC_ALIGNMENT ||
+ buffer->size > pac->data.length ||
+ buffer->offset > pac->data.length - buffer->size ||
+ buffer->offset < header_len)
 return ERANGE;
 }
 
 return 0;
 }
 
-krb5_error_code KRB5_CALLCONV
-krb5_pac_sign(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
- krb5_const_principal principal, const krb5_keyblock *server_key,
- const krb5_keyblock *privsvr_key, krb5_data *data)
+/* Find the buffer of type buftype in pac and write within it a checksum of
+ * type cksumtype over data. Set *cksum_out to the checksum. */
+static krb5_error_code
+compute_pac_checksum(krb5_context context, krb5_pac pac, uint32_t buftype,
+ const krb5_keyblock *key, krb5_cksumtype cksumtype,
+ const krb5_data *data, krb5_data *cksum_out)
 {
- return krb5_pac_sign_ext(context, pac, authtime, principal, server_key,
- privsvr_key, FALSE, data);
+ krb5_error_code ret;
+ krb5_data buf;
+ krb5_crypto_iov iov2;
+
+ ret = k5_pac_locate_buffer(context, pac, buftype, &buf);
+ if (ret)
+ return ret;
+
+ assert(buf.length > PAC_SIGNATURE_DATA_LENGTH);
+ *cksum_out = make_data(buf.data + PAC_SIGNATURE_DATA_LENGTH,
+ buf.length - PAC_SIGNATURE_DATA_LENGTH);
+ iov0.flags = KRB5_CRYPTO_TYPE_DATA;
+ iov0.data = *data;
+ iov1.flags = KRB5_CRYPTO_TYPE_CHECKSUM;
+ iov1.data = *cksum_out;
+ return krb5_c_make_checksum_iov(context, cksumtype, key,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, iov, 2);
 }
 
-krb5_error_code KRB5_CALLCONV
-krb5_pac_sign_ext(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
- krb5_const_principal principal,
- const krb5_keyblock *server_key,
- const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
- krb5_data *data)
+static krb5_error_code
+sign_pac(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
+ krb5_boolean is_service_tkt, krb5_data *data)
 {
 krb5_error_code ret;
- krb5_data server_cksum, privsvr_cksum;
+ krb5_data full_cksum, server_cksum, privsvr_cksum;
 krb5_cksumtype server_cksumtype, privsvr_cksumtype;
- krb5_crypto_iov iov2;
 
 data->length = 0;
 data->data = NULL;
 
 if (principal != NULL) {
- ret = k5_insert_client_info(context, pac, authtime, principal,
- with_realm);
- if (ret != 0)
+ ret = insert_client_info(context, pac, authtime, principal,
+ with_realm);
+ if (ret)
 return ret;
 }
 
- /* Create zeroed buffers for both checksums */
- ret = k5_insert_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- server_key, &server_cksumtype);
- if (ret != 0)
- return ret;
-
- ret = k5_insert_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
- privsvr_key, &privsvr_cksumtype);
- if (ret != 0)
+ /* Create zeroed buffers for all checksums. */
+ ret = insert_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server_key,
+ &server_cksumtype);
+ if (ret)
 return ret;
-
- /* Now, encode the PAC header so that the checksums will include it */
- ret = k5_pac_encode_header(context, pac);
- if (ret != 0)
+ ret = insert_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr_key,
+ &privsvr_cksumtype);
+ if (ret)
 return ret;
+ if (is_service_tkt) {
+ ret = insert_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM,
+ privsvr_key, &privsvr_cksumtype);
+ if (ret)
+ return ret;
+ }
 
- /* Generate the server checksum over the entire PAC */
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- &server_cksum);
- if (ret != 0)
+ /* Encode the PAC header so that the checksums will include it. */
+ ret = encode_header(context, pac);
+ if (ret)
 return ret;
 
- assert(server_cksum.length > PAC_SIGNATURE_DATA_LENGTH);
-
- iov0.flags = KRB5_CRYPTO_TYPE_DATA;
- iov0.data = pac->data;
-
- iov1.flags = KRB5_CRYPTO_TYPE_CHECKSUM;
- iov1.data.data = server_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov1.data.length = server_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
+ if (is_service_tkt) {
+ /* Generate a full KDC checksum over the whole PAC. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM,
+ privsvr_key, privsvr_cksumtype,
+ &pac->data, &full_cksum);
+ if (ret)
+ return ret;
+ }
 
- ret = krb5_c_make_checksum_iov(context, server_cksumtype,
- server_key, KRB5_KEYUSAGE_APP_DATA_CKSUM,
- iov, sizeof(iov)/sizeof(iov0));
- if (ret != 0)
+ /* Generate the server checksum over the whole PAC, including the full KDC
+ * checksum if we added one. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM,
+ server_key, server_cksumtype, &pac->data,
+ &server_cksum);
+ if (ret)
 return ret;
 
- /* Generate the privsvr checksum over the server checksum buffer */
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
+ /* Generate the privsvr checksum over the server checksum buffer. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
+ privsvr_key, privsvr_cksumtype, &server_cksum,
 &privsvr_cksum);
- if (ret != 0)
- return ret;
-
- assert(privsvr_cksum.length > PAC_SIGNATURE_DATA_LENGTH);
-
- iov0.flags = KRB5_CRYPTO_TYPE_DATA;
- iov0.data.data = server_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov0.data.length = server_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
-
- iov1.flags = KRB5_CRYPTO_TYPE_CHECKSUM;
- iov1.data.data = privsvr_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov1.data.length = privsvr_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
-
- ret = krb5_c_make_checksum_iov(context, privsvr_cksumtype,
- privsvr_key, KRB5_KEYUSAGE_APP_DATA_CKSUM,
- iov, sizeof(iov)/sizeof(iov0));
- if (ret != 0)
+ if (ret)
 return ret;
 
 data->data = k5memdup(pac->data.data, pac->data.length, &ret);
@@ -283,11 +278,31 @@
 data->length = pac->data.length;
 
 memset(pac->data.data, 0,
- PACTYPE_LENGTH + (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH));
+ PACTYPE_LENGTH + (pac->nbuffers * PAC_INFO_BUFFER_LENGTH));
 
 return 0;
 }
 
+krb5_error_code KRB5_CALLCONV
+krb5_pac_sign(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_data *data)
+{
+ return sign_pac(context, pac, authtime, principal, server_key,
+ privsvr_key, FALSE, FALSE, data);
+}
+
+krb5_error_code KRB5_CALLCONV
+krb5_pac_sign_ext(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal,
+ const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
+ krb5_data *data)
+{
+ return sign_pac(context, pac, authtime, principal, server_key, privsvr_key,
+ with_realm, FALSE, data);
+}
+
 /* Add a signature over der_enc_tkt in privsvr to pac. der_enc_tkt should be
 * encoded with a dummy PAC authdata element containing a single zero byte. */
 static krb5_error_code
@@ -300,8 +315,8 @@
 krb5_crypto_iov iov2;
 
 /* Create zeroed buffer for checksum. */
- ret = k5_insert_checksum(context, pac, KRB5_PAC_TICKET_CHECKSUM,
- privsvr, &ticket_cksumtype);
+ ret = insert_checksum(context, pac, KRB5_PAC_TICKET_CHECKSUM, privsvr,
+ &ticket_cksumtype);
 if (ret)
 return ret;
 
@@ -359,6 +374,7 @@
 krb5_error_code ret;
 krb5_data *der_enc_tkt = NULL, pac_data = empty_data();
 krb5_authdata **list, *pac_ad;
+ krb5_boolean is_service_tkt;
 size_t count;
 
 /* Reallocate space for another authdata element in enc_tkt. */
@@ -377,7 +393,8 @@
 memmove(list + 1, list, (count + 1) * sizeof(*list));
 list0 = pac_ad;
 
- if (k5_pac_should_have_ticket_signature(server_princ)) {
+ is_service_tkt = k5_pac_should_have_ticket_signature(server_princ);
+ if (is_service_tkt) {
 ret = encode_krb5_enc_tkt_part(enc_tkt, &der_enc_tkt);
 if (ret)
 goto cleanup;
@@ -388,9 +405,8 @@
 goto cleanup;
 }
 
- ret = krb5_pac_sign_ext(context, pac, enc_tkt->times.authtime,
- client_princ, server, privsvr, with_realm,
- &pac_data);
+ ret = sign_pac(context, pac, enc_tkt->times.authtime, client_princ, server,
+ privsvr, with_realm, is_service_tkt, &pac_data);
 if (ret)
 goto cleanup;

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/preauth2.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/preauth2.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/preauth_otp.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/preauth_otp.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/t_pac.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/t_pac.c Changed

@@ -607,78 +607,102 @@
 
 static const krb5_keyblock ticket_sig_krbtgt_key = {
     0, ENCTYPE_AES256_CTS_HMAC_SHA1_96,
-    32, U("\x7a\x58\x98\xd2\xaf\xa6\xaf\xc0\x6a\xce\x06\x04\x4b\xc2\x70\x84"
-          "\x9b\x8e\x0a\x6c\x4c\x07\xdc\x6f\xbb\x48\x43\xe1\xd2\xaa\x97\xf7")
+    32, U("\x03\x73\x81\xEC\x43\x96\x7B\xC2\xAC\x3D\xF5\x2A\xAE\x95\xA6\x8E"
+          "\xBE\x24\x58\xDB\xCE\x52\x28\x20\xAF\x5E\xB7\x04\xA2\x22\x71\x4F")
 };
 
 static const krb5_keyblock ticket_sig_server_key = {
-    0, ENCTYPE_ARCFOUR_HMAC,
-    16, U("\xed\x23\x11\x20\x7a\x21\x44\x20\xbf\xc0\x8d\x36\xf7\xf6\xb2\x3e")
+    0, ENCTYPE_AES256_CTS_HMAC_SHA1_96,
+    32, U("\x11\x4A\x84\xE3\x14\x8F\xAA\xB1\xFA\x7B\x53\x51\xB2\x8A\xC2\xF1"
+          "\xFD\x19\x6D\x61\xE0\xF3\xF2\x3E\x1F\xDB\xD3\xC1\x79\x7D\xC1\xEE")
 };
 
+/* A ticket issued by an Active Directory KDC (Windows Server 2022), containing
+ * a PAC with a full checksum. */
 static const krb5_data ticket_data = {
-    .length = 972, .data =
-    "\x61\x82\x03\xC8\x30\x82\x03\xC4\xA0\x03\x02\x01\x05\xA1\x0A\x1B"
-    "\x08\x43\x44\x4F\x4D\x2E\x43\x4F\x4D\xA2\x0F\x30\x0D\xA0\x03\x02"
-    "\x01\x01\xA1\x06\x30\x04\x1B\x02\x73\x31\xA3\x82\x03\x9E\x30\x82"
-    "\x03\x9A\xA0\x03\x02\x01\x17\xA1\x03\x02\x01\x03\xA2\x82\x03\x8C"
-    "\x04\x82\x03\x88\x44\x31\x61\x20\x17\xC9\xFE\xBC\xAC\x46\xB5\x77"
-    "\xE9\x68\x04\x4C\x9B\x31\x91\x0C\xC1\xD4\xDD\xEF\xC7\x34\x20\x08"
-    "\x90\x91\xE8\x79\xE0\xB5\x03\x26\xA4\x65\xDE\xEC\x47\x03\x2A\x8F"
-    "\x61\xE7\x4D\x38\x5A\x42\x95\x5A\xF9\x2F\x41\x2C\x2A\x6E\x60\xA1"
-    "\xEB\x51\xB3\xBD\x4C\x00\x41\x2A\x44\x76\x08\x37\x1A\x51\xFD\x65"
-    "\x67\x7E\xBF\x3D\x90\x86\xE3\x9A\x54\x6B\x67\xA8\x08\x7A\x73\xCC"
-    "\xC3\xB7\x4B\xD5\x5C\x3A\x14\x6C\xC1\x5F\x54\x4B\x92\x55\xB4\xB7"
-    "\x92\x23\x3F\x53\x89\x47\x8E\x1F\x8B\xB9\xDB\x3B\x93\xE8\x70\xE4"
-    "\x24\xB8\x9D\xF0\x0E\x35\x28\xF8\x7A\x27\x5D\xF7\x25\x97\x9C\xF5"
-    "\x9F\x9F\x64\x04\xF2\xA3\xAB\x11\x15\xB6\xDA\x18\xD6\x46\xD5\xE6"
-    "\xB8\x08\xDE\x0A\x62\xFD\xF8\xAA\x52\x90\xD9\x67\x29\xB2\xCD\x06"
-    "\xB6\xB0\x50\x2B\x3F\x0F\xA3\xA5\xBF\xAA\x6E\x40\x03\xD6\x5F\x02"
-    "\xBC\xD8\x18\x47\x97\x09\xD7\xE4\x96\x3B\xCB\xEB\x92\x2C\x3C\x49"
-    "\xFF\x1F\x71\xE0\x52\x94\x0F\x8B\x9F\xB8\x2A\xBB\x9C\xE2\xA3\xDD"
-    "\x38\x89\xE2\xB1\x0B\x9E\x1F\x7A\xB3\xE3\xD2\xB0\x94\xDC\x87\xBE"
-    "\x37\xA6\xD3\xB3\x29\x35\x9A\x72\xC3\x7A\xF1\xA9\xE6\xC5\xD1\x26"
-    "\x83\x65\x44\x17\xBA\x55\xA8\x5E\x94\x26\xED\xE9\x8A\x93\x11\x5D"
-    "\x7E\x20\x1B\x9C\x15\x9E\x13\x37\x03\x4D\xDD\x99\x51\xD8\x66\x29"
-    "\x6A\xB9\xFB\x49\xFE\x52\x78\xDA\x86\x85\xA9\xA3\xB9\xEF\xEC\xAD"
-    "\x35\xA6\x8D\xAC\x0F\x75\x22\xBB\x0B\x49\x1C\x13\x52\x40\xC9\x52"
-    "\x69\x09\x54\xD1\x0F\x94\x3F\x22\x48\x67\xB0\x96\x28\xAA\xE6\x28"
-    "\xD9\x0C\x08\xEF\x51\xED\x15\x5E\xA2\x53\x59\xA5\x03\xB4\x06\x20"
-    "\x3D\xCC\xB4\xC5\xF8\x8C\x73\x67\xA3\x21\x3D\x19\xCD\xD4\x12\x28"
-    "\xD2\x93\xDE\x0D\xF0\x71\x10\x50\xD6\x33\x35\x04\x11\x64\x43\x39"
-    "\xC3\xDF\x96\xE3\x66\xE3\x85\xCA\xE7\x67\x14\x3A\xF0\x43\xAA\xBB"
-    "\xD4\x1D\xB5\x24\xB5\x74\x90\x25\xA7\x87\x7E\xDB\xD3\x83\x8A\x3A"
-    "\x69\xA8\x2D\xAF\xB7\xB8\xF3\xDC\x13\xAF\x45\x61\x3F\x59\x39\x7E"
-    "\x69\xDE\x0C\x04\xF1\x10\x6B\xB4\x56\xFA\x21\x9F\x72\x2B\x60\x86"
-    "\xE3\x23\x0E\xC4\x51\xF6\xBE\xD8\xE1\x5F\xEE\x73\x4C\x17\x4C\x2C"
-    "\x1B\xFB\x9F\x1F\x7A\x3B\x07\x5B\x8E\xF1\x01\xAC\xD6\x30\x94\x8A"
-    "\x5D\x22\x6F\x08\xCE\xED\x5E\xB6\xDB\x86\x8C\x87\xEB\x8D\x91\xFF"
-    "\x0A\x86\x30\xBD\xC0\xF8\x25\xE7\xAE\x24\x35\xF2\xFC\xE5\xFD\x1B"
-    "\xB0\x05\x4A\xA3\xE5\xEB\x2E\x05\xAD\x99\x67\x49\x87\xE6\xB3\x87"
-    "\x82\xA4\x59\xA7\x6E\xDD\xF2\xB6\x66\xE8\xF7\x70\xF5\xBD\xC9\x0E"
-    "\xFA\x9C\x79\x84\xD4\x9B\x05\x0E\xBB\xF5\xDB\xEF\xFC\xCC\x26\xF2"
-    "\x93\xCF\xD2\x04\x3C\xA9\x2C\x65\x42\x97\x86\xD8\x38\x0A\x1E\xF6"
-    "\xD6\xCA\x30\xB5\x1A\xEC\xFB\xBA\x3B\x84\x57\xB0\xFD\xFB\xE6\xBC"
-    "\xF2\x76\xF6\x4C\xBB\xAB\xB1\x31\xA1\x27\x7C\xE6\xE6\x81\xB6\xCE"
-    "\x84\x86\x40\xB6\x40\x33\xC4\xF8\xB4\x15\xCF\xAA\xA5\x51\x78\xB9"
-    "\x8B\x50\x25\xB2\x88\x86\x96\x72\x8C\x71\x4D\xB5\x3A\x94\x86\x77"
-    "\x0E\x95\x9B\x16\x93\xEF\x3A\x11\x79\xBA\x83\xF7\x74\xD3\x8D\xBA"
-    "\x15\xE1\x2C\x04\x57\xA8\x92\x1E\x9D\x00\x8E\x20\xFD\x30\x70\xE7"
-    "\xF5\x65\x2F\x19\x0C\x94\xBA\x03\x71\x12\x96\xCD\xC8\xB4\x96\xDB"
-    "\xCE\x19\xC2\xDF\x3C\xC2\xF6\x3D\x53\xED\x98\xA5\x41\x72\x2A\x22"
-    "\x7B\xF3\x2B\x17\x6C\xE1\x39\x7D\xAE\x9B\x11\xF9\xC1\xA6\x9E\x9F"
-    "\x89\x3C\x12\xAA\x94\x74\xA7\x4F\x70\xE8\xB9\xDE\x04\xF0\x9D\x39"
-    "\x24\x2D\x92\xE8\x46\x2D\x2E\xF0\x40\x66\x1A\xD9\x27\xF9\x98\xF1"
-    "\x81\x1D\x70\x62\x63\x30\x6D\xCD\x84\x04\x5F\xFA\x83\xD3\xEC\x8D"
-    "\x86\xFB\x40\x61\xC1\x8A\x45\xFF\x7B\xD9\xD4\x18\x61\x7F\x51\xE3"
-    "\xFC\x1E\x18\xF0\xAF\xC6\x18\x2C\xE1\x6D\x5D\xF9\x62\xFC\x20\xA3"
-    "\xB2\x8A\x5F\xE5\xBB\x29\x0F\x99\x63\x07\x88\x38\x3A\x3B\x73\x2A"
-    "\x6D\xDA\x3D\xA8\x0D\x8F\x56\x41\x89\x82\xE5\xB8\x61\x00\x64\x7D"
-    "\x17\x0C\xCE\x03\x55\x8F\xF4\x5B\x0D\x50\xF2\xEB\x05\x67\xBE\xDB"
-    "\x7B\x75\xC5\xEA\xA1\xAB\x1D\xB0\x3C\x6D\x42\x08\x0B\x9A\x45\x20"
-    "\xA8\x8F\xE5\x67\x47\x30\xDE\x93\x5F\x43\x05\xEB\xA8\x2D\x80\xF5"
-    "\x1A\xB8\x4A\x4E\x42\x2D\x0B\x7A\xDC\x46\x20\x2D\x13\x17\xDD\x4B"
-    "\x94\x96\xAA\x1F\x06\x0C\x1F\x62\x07\x9C\x40\xA1"
+    .length = 1307, .data =
+    "\x61\x82\x05\x17\x30\x82\x05\x13\xA0\x03\x02\x01\x05\xA1\x0F\x1B"
+    "\x0D\x57\x32\x30\x32\x32\x2D\x4C\x37\x2E\x42\x41\x53\x45\xA2\x2A"
+    "\x30\x28\xA0\x03\x02\x01\x01\xA1\x21\x30\x1F\x1B\x04\x63\x69\x66"
+    "\x73\x1B\x17\x77\x32\x30\x32\x32\x2D\x31\x31\x38\x2E\x77\x32\x30"
+    "\x32\x32\x2D\x6C\x37\x2E\x62\x61\x73\x65\xA3\x82\x04\xCD\x30\x82"
+    "\x04\xC9\xA0\x03\x02\x01\x12\xA1\x03\x02\x01\x05\xA2\x82\x04\xBB"
+    "\x04\x82\x04\xB7\x44\x5C\x7B\x5A\x3F\x2E\xA3\x50\x34\xDE\xB0\x69"
+    "\x23\x2D\x47\x89\x2C\xC0\xA3\xF9\xDD\x70\xAA\xA5\x1E\xFE\x74\xE5"
+    "\x19\xA2\x4F\x65\x6C\x9E\x00\xB4\x60\x00\x7C\x0C\x29\x43\x31\x99"
+    "\x77\x02\x73\xED\xB9\x40\xF5\xD2\xD1\xC9\x20\x0F\xE3\x38\xF9\xCC"
+    "\x5E\x2A\xBD\x1F\x91\x66\x1A\xD8\x2A\x80\x3C\x2C\x00\x3C\x1E\xC9"
+    "\x2A\x29\x19\x19\x96\x18\x54\x03\x97\x8F\x1D\x5F\xDB\xE9\x66\x68"
+    "\xCD\xB1\xD5\x00\x35\x69\x49\x45\xF1\x6A\x78\x7B\x37\x71\x87\x14"
+    "\x1C\x98\x4D\x69\xCB\x1B\xD8\xF5\xA3\xD8\x53\x4A\x75\x76\x62\xBA"
+    "\x6C\x3F\xEA\x8B\x97\x21\xCA\x8A\x46\x4B\x38\xDA\x09\x9F\x5A\xC8"
+    "\x38\xFF\x34\x97\x5B\xA2\xE5\xBA\xC9\x87\x17\xD8\x08\x05\x7A\x83"
+    "\x04\xD6\x02\x8E\x9B\x18\xB6\x40\x1A\xF7\x47\x25\x24\x3E\x37\x1E"
+    "\xF6\xC1\x3A\x1F\xCA\xB3\x43\x5A\xAE\x94\x83\x31\xAF\xFB\xEE\xED"
+    "\x46\x71\xEF\xE2\x37\x37\x15\xFE\x1B\x0B\x9E\xF8\x3E\x0C\x43\x96"
+    "\xB6\x0A\x04\x78\xF8\x5E\xAA\x33\x1F\xE2\x07\x5A\x8D\xC4\x4E\x32"
+    "\x6D\xD6\xA0\xC5\xEA\x3D\x12\x59\xD4\x41\x40\x4E\xA1\xD8\xBE\xED"
+    "\x17\xCB\x68\xCC\x59\xCB\x53\xB2\x0E\x58\x8A\xA9\x33\x7F\x6F\x2B"
+    "\x37\x89\x08\x44\xBA\xC7\x67\x17\xBB\x91\xF7\xC3\x0F\x00\xF8\xAA"
+    "\xA1\x33\xA6\x08\x47\xCA\xFA\xE8\x49\x27\x45\x46\xF1\xC1\xC3\x5F"
+    "\xE2\x45\x0A\x7D\x64\x52\x8C\x2E\xE1\xDE\xFF\xB2\x64\xEC\x69\x98"
+    "\x15\xDF\x9E\xB1\xEB\xD6\x9D\x08\x06\x4E\x73\xC1\x0B\x71\x21\x05"
+    "\x9E\xBC\xA2\x17\xCF\xB3\x70\xF4\xEF\xB8\x69\xA9\x94\x27\xFD\x5E"
+    "\x72\xB1\x2D\xD2\x20\x1B\x57\x80\xAB\x38\x97\xCF\x22\x68\x4F\xB8"
+    "\xB7\x17\x53\x25\x67\x0B\xED\xD1\x58\x20\x0D\x45\xF9\x09\xFA\xE7"
+    "\x61\x3E\xDB\xC2\x59\x7B\x3A\x3B\x59\x81\x51\xAA\xA4\x81\xF4\x96"
+    "\x3B\xE1\x6F\x6F\xF4\x8E\x68\x9E\xBA\x1E\x0F\xF2\x44\x68\x11\xFC"
+    "\x2B\x5F\xBE\xF2\xEA\x07\x80\xB9\xCA\x9E\x41\xBD\x2F\x81\xF5\x11"
+    "\x2A\x12\xF3\x4F\xD6\x12\x16\x0F\x21\x90\xF1\xD3\x1E\xF1\xA4\x94"
+    "\x46\xEA\x30\xF3\x84\x06\xC1\xA4\x51\xFC\x43\x35\xBD\xEF\x4D\x89"
+    "\x1D\xA5\x44\xB2\x69\xC4\x0F\xBF\x86\x01\x08\x44\x77\xD5\xB4\xB7"
+    "\x5C\x3F\xA7\xD4\x2F\x39\x73\x85\x88\xEE\xB1\x64\x1D\x80\x6C\xEE"
+    "\x6E\x31\x90\x92\x0D\xA1\xB7\xC4\x5C\xCC\xEE\x91\xC8\xCB\x11\x2D"
+    "\x4A\x1A\x7D\x43\x8F\xEB\x60\x09\xED\x1B\x07\x58\xBE\xBC\xBD\x29"
+    "\xF3\xB3\xA3\x4F\xC5\x8A\x30\x33\xB9\xA9\x9F\x43\x08\x27\x15\xC4"
+    "\x9C\x5D\x8E\xBD\x5C\x05\xC6\x05\x9C\x87\x60\x08\x1E\xE2\x52\xB8"
+    "\x45\x8D\x28\xB6\x2C\x15\x46\x74\x9F\x0E\xAA\x6B\x70\x3A\x2A\x55"
+    "\x45\x26\xB2\x58\x4D\x35\xA6\xF1\x96\xBE\x60\xB2\x71\x7B\xF8\x54"
+    "\xB9\x90\x21\x8E\xB9\x0F\x35\x98\x5E\x88\xEB\x1A\x53\xB4\x59\x7F"
+    "\xAF\x69\x1C\x61\x67\xF4\xF6\xBD\xAC\x24\xCD\xB7\xA9\x67\xE8\xA1"
+    "\x83\x85\x5F\x11\x74\x1F\xF7\x4C\x78\x36\xEF\x50\x74\x88\x58\x4B"
+    "\x1A\x9F\x84\x9A\x9A\x05\x92\xEC\x1D\xD5\xF3\xC4\x95\x51\x28\xE2"
+    "\x3F\x32\x87\xB2\xFD\x21\x27\x66\xE4\x6B\x85\x2F\xDC\x7B\xC0\x22"
+    "\xEB\x7A\x94\x20\x5A\x7B\xD3\x7A\xB9\x5B\xF8\x1A\x5A\x84\x4E\xA1"
+    "\x73\x41\x53\xD2\x60\xF7\x7C\xEE\x68\x59\x85\x80\xFC\x3D\x70\x4B"
+    "\x04\x32\xE7\xF2\xFD\xBD\xB3\xD9\x21\xE2\x37\x56\xA2\x16\xCC\xDE"
+    "\x8A\xD3\xBC\x71\xEF\x58\x19\x0E\x45\x8A\x5B\x53\xD6\x77\x30\x6A"
+    "\xA7\xF8\x68\x06\x4E\x07\xCA\xCE\x30\xD7\x35\xAB\x1A\xC7\x18\xD4"
+    "\xC6\x2F\x1A\xFF\xE9\x7A\x94\x0B\x76\x5E\x7E\x29\x0C\xE6\xD3\x3B"
+    "\x5B\x44\x96\xA8\xF1\x29\x23\x95\xD9\x79\xB3\x39\xFC\x76\xED\xE1"
+    "\x1E\x67\x4E\xF7\xE8\x7B\x7A\x12\x9E\xD8\x4B\x35\x09\x0A\xF2\xC1"
+    "\x63\x5B\xEE\xFD\x2A\xC2\xA6\x66\x30\x3C\x1F\x95\xAF\x65\x22\x95"
+    "\x14\x1D\xF5\xD5\xDC\x38\x79\x35\x1C\xCD\x24\x47\xE0\xFD\x08\xC8"
+    "\xF4\x15\x55\x9F\xD9\xC7\xAC\x3F\x67\xB3\x4F\xEB\x26\x7C\x8E\xD6"
+    "\x74\xB3\x0A\xCD\xE7\xFA\xBE\x7E\xA3\x3E\xEC\x61\x50\x77\x52\x56"
+    "\xCF\x90\x5D\x48\xFB\xD4\x2C\x6C\x61\x8B\xDD\x2B\xF5\x92\x1F\x30"
+    "\xBF\x3F\x80\x0D\x31\xDB\xB2\x0B\x7D\x84\xE3\xA6\x42\x7F\x00\x38"
+    "\x44\x02\xC5\xB8\xD9\x58\x29\x9D\x68\x5C\x32\x8B\x76\xAE\xED\x15"
+    "\xF9\x7C\xAE\x7B\xB6\x8E\xD6\x54\x24\xFF\xFA\x87\x05\xEF\x15\x08"
+    "\x5E\x4B\x21\xA2\x2F\x49\xE7\x0F\xC3\xD0\xB9\x49\x22\xEF\xD5\xCA"
+    "\xB2\x11\xF2\x17\xB6\x77\x24\x68\x76\xB2\x07\xF8\x0A\x73\xDD\x65"
+    "\x9C\x75\x64\xF7\xA1\xC6\x23\x08\x84\x72\x3E\x54\x2E\xEB\x9B\x40"
+    "\xA6\x83\x87\xEB\xB5\x00\x40\x4F\xE1\x72\x2A\x59\x3A\x06\x60\x29"
+    "\x7E\x25\x2F\xD8\x80\x40\x8C\x59\xCA\xCF\x8E\x44\xE4\x2D\x84\x7E"
+    "\xCB\xFD\x1E\x3B\xD5\xFF\x9A\xB9\x66\x93\x6D\x5E\xC8\xB7\x13\x26"
+    "\xD6\x38\x1B\x2B\xE1\x87\x96\x05\xD5\xF3\xAB\x68\xF7\x12\x62\x2C"
+    "\x58\xC1\xC9\x85\x3C\x72\xF1\x26\xEE\xC0\x09\x5F\x1D\x4B\xAC\x01"
+    "\x41\xC8\x12\xF8\xF3\x93\x43\x41\xFF\xEC\x0B\x80\xE2\xEE\x20\x85"
+    "\x25\xCD\x6C\x30\x8C\x0D\x24\x2E\xBA\x19\xEA\x28\x7F\xCF\xD5\x10"
+    "\x5C\xE9\xB2\x9D\x5F\x16\xE4\xC0\xF3\xCC\xD9\x68\x4A\x05\x08\x70"
+    "\x17\x26\xC8\x5C\x4A\xBF\x94\x6A\x0E\xD5\xDA\x67\x47\x4B\xAF\x44"
+    "\xE3\x94\xAA\x05\xDB\xA2\x49\x74\xFA\x5C\x69\xAB\x44\xB7\xF7\xBA"
+    "\xAE\x7A\x23\x87\xEB\x54\x7E\x80\xF1\x5B\x60\xA5\x93\xE5\xD4\x24"
+    "\x84\xF7\x0A\x16\x10\xBE\xE9\x4D\xD8\x6B\x15\x40\x5D\x74\xDA\x1B"
+    "\xFF\x2E\x4D\x17\x9D\x35\xF7\x0D\xCF\x66\x38\x0D\x8A\xE4\xDD\x6B"
+    "\xE1\x0F\x1F\xBD\xFD\x4F\x30\x37\x3F\x96\xB4\x92\x54\xD3\x9A\x7A"
+    "\xD1\x5B\x5B\xA9\x54\x16\xE6\x24\xAB\xD4\x23\x39\x7D\xD2\xC7\x09"
+    "\xFA\xD4\x86\x55\x4D\x60\xC2\x87\x67\x6B\xE6"
 };
 
 static void
@@ -686,7 +710,7 @@
 {
     krb5_error_code ret;
     krb5_ticket *ticket;
-    krb5_principal sprinc;
+    krb5_principal cprinc, sprinc;
     krb5_authdata **authdata1, **authdata2;
     krb5_pac pac, pac2, pac3;
     uint32_t *list;
@@ -701,7 +725,13 @@
     if (ret)
         err(context, ret, "while decrypting ticket");
 
-    ret = krb5_parse_name(context, "s1@CDOM.COM", &sprinc);
+    ret = krb5_parse_name(context, "administrator@W2022-L7.BASE", &cprinc);
+    if (ret)
+        err(context, ret, "krb5_parse_name");
+
+    ret = krb5_parse_name(context,
+                          "cifs/w2022-118.w2022-l7.base@W2022-L7.BASE",
+                          &sprinc);
     if (ret)
         err(context, ret, "krb5_parse_name");
 
@@ -713,7 +743,7 @@
 
     /* In this test, the server is also the client. */
     ret = krb5_pac_verify(context, pac, ticket->enc_part2->times.authtime,
-                          ticket->server, NULL, NULL);
+                          cprinc, NULL, NULL);
     if (ret)
         err(context, ret, "while verifying PAC client info");
 
@@ -722,7 +752,7 @@
     ticket->enc_part2->authorization_data = NULL;
 
     ret = krb5_kdc_sign_ticket(context, ticket->enc_part2, pac, sprinc,
-                               sprinc, &ticket_sig_server_key,
+                               cprinc, &ticket_sig_server_key,
                                &ticket_sig_krbtgt_key, FALSE);
     if (ret)
         err(context, ret, "while signing ticket");
@@ -781,6 +811,7 @@
     krb5_pac_free(context, pac);
     krb5_pac_free(context, pac2);
     krb5_pac_free(context, pac3);
+    krb5_free_principal(context, cprinc);
     krb5_free_principal(context, sprinc);
     krb5_free_ticket(context, ticket);
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/krb/x-deltat.y -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/krb/x-deltat.y Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/os/dnsglue.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/os/dnsglue.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/os/dnssrv.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/os/dnssrv.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/os/expand_path.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/os/expand_path.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/os/localauth_rule.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/os/localauth_rule.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/os/trace.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/os/trace.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/unicode/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/deps -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/unicode/deps Changed

@@ -5,11 +5,11 @@
   $(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
   $(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(srcdir)/ucdata/ucdata.h \
   $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
-  $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
-  $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
-  $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
-  $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/k5-unicode.h \
-  $(top_srcdir)/include/k5-utf8.h $(top_srcdir)/include/krb5.h \
-  $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
-  $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
-  ucstr.c
+  $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-input.h \
+  $(top_srcdir)/include/k5-int-pkinit.h $(top_srcdir)/include/k5-int.h \
+  $(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-plugin.h \
+  $(top_srcdir)/include/k5-thread.h $(top_srcdir)/include/k5-trace.h \
+  $(top_srcdir)/include/k5-unicode.h $(top_srcdir)/include/k5-utf8.h \
+  $(top_srcdir)/include/krb5.h $(top_srcdir)/include/krb5/authdata_plugin.h \
+  $(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
+  $(top_srcdir)/include/socket-utils.h ucstr.c

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/ucdata.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/unicode/ucdata/ucdata.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucdata/ucgendat.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/unicode/ucdata/ucgendat.c Changed

@@ -485,8 +485,8 @@
          * Shift the decomps up by one if the codes don't match.
          */
         for (j = *pdecomps_used; j > i; j--)
-          (void) memcpy((char *) &(*pdecomps)j, (char *) &(*pdecomps)j - 1,
-                        sizeof(_decomp_t));
+          (void) memmove((char *) &(*pdecomps)j, (char *) &(*pdecomps)j - 1,
+                         sizeof(_decomp_t));
     }
 
     /*
@@ -509,8 +509,8 @@
 
     (*pdecomps)i.code = code;
     (*pdecomps)i.used = dectmp_size;
-    (void) memcpy((char *) (*pdecomps)i.decomp, (char *) dectmp,
-                  sizeof(krb5_ui_4) * dectmp_size);
+    (void) memmove((char *) (*pdecomps)i.decomp, (char *) dectmp,
+                   sizeof(krb5_ui_4) * dectmp_size);
 
     /*
      * NOTICE: This needs changing later so it is more general than simply
@@ -549,8 +549,8 @@
          * Shift the array up by one.
          */
         for (j = title_used; j > i; j--)
-          (void) memcpy((char *) &titlej, (char *) &titlej - 1,
-                        sizeof(_case_t));
+          (void) memmove((char *) &titlej, (char *) &titlej - 1,
+                         sizeof(_case_t));
     }
 
     titlei.key = cases2;    /* Title */
@@ -596,8 +596,8 @@
          * Shift the array up by one.
          */
         for (j = upper_used; j > i; j--)
-          (void) memcpy((char *) &upperj, (char *) &upperj - 1,
-                        sizeof(_case_t));
+          (void) memmove((char *) &upperj, (char *) &upperj - 1,
+                         sizeof(_case_t));
     }
 
     upperi.key = cases0;    /* Upper */
@@ -643,8 +643,8 @@
          * Shift the array up by one.
          */
         for (j = lower_used; j > i; j--)
-          (void) memcpy((char *) &lowerj, (char *) &lowerj - 1,
-                        sizeof(_case_t));
+          (void) memmove((char *) &lowerj, (char *) &lowerj - 1,
+                         sizeof(_case_t));
     }
 
     loweri.key = cases1;    /* Lower */

_service:tar_scm:krb5-1.20.1.tar.gz/src/lib/krb5/unicode/ucstr.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/lib/krb5/unicode/ucstr.c Changed

@@ -18,11 +18,12 @@
 #include "k5-int.h"
 #include "k5-utf8.h"
 #include "k5-unicode.h"
+#include "k5-input.h"
 #include "ucdata/ucdata.h"
 
 #include <ctype.h>
 
-int
+static int
 krb5int_ucstrncmp(
 		 const krb5_unicode * u1,
 		 const krb5_unicode * u2,
@@ -39,7 +40,7 @@
 return 0;
 }
 
-int
+static int
 krb5int_ucstrncasecmp(
 		 const krb5_unicode * u1,
 		 const krb5_unicode * u2,
@@ -59,246 +60,34 @@
 return 0;
 }
 
-krb5_unicode *
-krb5int_ucstrnchr(
-		 const krb5_unicode * u,
-		 size_t n,
-		 krb5_unicode c)
-{
- for (; 0 < n; ++u, --n) {
-	if (*u == c) {
-	 return (krb5_unicode *) u;
-	}
- }
-
- return NULL;
-}
-
-krb5_unicode *
-krb5int_ucstrncasechr(
-		 const krb5_unicode * u,
-		 size_t n,
-		 krb5_unicode c)
-{
- c = uctolower(c);
- for (; 0 < n; ++u, --n) {
-	if ((krb5_unicode) uctolower(*u) == c) {
-	 return (krb5_unicode *) u;
-	}
- }
-
- return NULL;
-}
-
-void
-krb5int_ucstr2upper(
-		 krb5_unicode * u,
-		 size_t n)
+/* Return true if data contains valid UTF-8 sequences. */
+krb5_boolean
+k5_utf8_validate(const krb5_data *data)
 {
- for (; 0 < n; ++u, --n) {
-	*u = uctoupper(*u);
- }
+ struct k5input in;
+ int len, tmplen, i;
+ const uint8_t *bytes;
+
+ k5_input_init(&in, data->data, data->length);
+ while (!in.status && in.len > 0) {
+	len = KRB5_UTF8_CHARLEN(in.ptr);
+	if (len < 1 || len > 4)
+	 return FALSE;
+	bytes = k5_input_get_bytes(&in, len);
+	if (bytes == NULL)
+	 return FALSE;
+	if (KRB5_UTF8_CHARLEN2(bytes, tmplen) != len)
+	 return FALSE;
+	for (i = 1; i < len; i++) {
+	 if ((bytesi & 0xc0) != 0x80)
+		return FALSE;
+	}
+ }
+ return !in.status;
 }
 
-#define TOUPPER(c) (islower(c) ? toupper(c) : (c))
 #define TOLOWER(c) (isupper(c) ? tolower(c) : (c))
 
-krb5_error_code
-krb5int_utf8_normalize(
-		 const krb5_data * data,
-		 krb5_data ** newdataptr,
-		 unsigned flags)
-{
- int i, j, len, clen, outpos = 0, ucsoutlen, outsize;
- char *out = NULL, *outtmp, *s;
- krb5_ucs4 *ucs = NULL, *p, *ucsout = NULL;
- krb5_data *newdata;
- krb5_error_code retval = 0;
-
- static unsigned char mask = {
- 0, 0x7f, 0x1f, 0x0f, 0x07, 0x03, 0x01};
-
- unsigned casefold = flags & KRB5_UTF8_CASEFOLD;
- unsigned approx = flags & KRB5_UTF8_APPROX;
-
- *newdataptr = NULL;
-
- s = data->data;
- len = data->length;
-
- newdata = malloc(sizeof(*newdata));
- if (newdata == NULL)
-	return ENOMEM;
-
- /*
- * Should first check to see if string is already in proper normalized
- * form. This is almost as time consuming as the normalization though.
- */
-
- /* finish off everything up to character before first non-ascii */
- if (KRB5_UTF8_ISASCII(s)) {
-	if (casefold) {
-	 outsize = len + 7;
-	 out = malloc(outsize);
-	 if (out == NULL) {
-		retval = ENOMEM;
-		goto cleanup;
-	 }
-
-	 for (i = 1; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
-		outoutpos++ = TOLOWER(si - 1);
-	 }
-	 if (i == len) {
-		outoutpos++ = TOLOWER(slen - 1);
-		goto cleanup;
-	 }
-	} else {
-	 for (i = 1; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
-		/* empty */
-	 }
-
-	 if (i == len) {
-		newdata->length = len;
-		newdata->data = k5memdup0(s, len, &retval);
-		if (newdata->data == NULL)
-		 goto cleanup;
-		*newdataptr = newdata;
-		return 0;
-	 }
-	 outsize = len + 7;
-	 out = malloc(outsize);
-	 if (out == NULL) {
-		retval = ENOMEM;
-		goto cleanup;
-	 }
-	 outpos = i - 1;
-	 memcpy(out, s, outpos);
-	}
- } else {
-	outsize = len + 7;
-	out = malloc(outsize);
-	if (out == NULL) {
-	 retval = ENOMEM;
-	 goto cleanup;
-	}
-	i = 0;
- }
-
- p = ucs = malloc(len * sizeof(*ucs));
- if (ucs == NULL) {
-	retval = ENOMEM;
-	goto cleanup;
- }
- /* convert character before first non-ascii to ucs-4 */
- if (i > 0) {
-	*p = casefold ? TOLOWER(si - 1) : si - 1;
-	p++;
- }
- /* si is now first non-ascii character */
- for (;;) {
-	/* si is non-ascii */
-	/* convert everything up to next ascii to ucs-4 */
-	while (i < len) {
-	 clen = KRB5_UTF8_CHARLEN2(s + i, clen);
-	 if (clen == 0) {
-		retval = KRB5_ERR_INVALID_UTF8;
-		goto cleanup;
-	 }
-	 if (clen == 1) {
-		/* ascii */
-		break;
-	 }
-	 *p = si & maskclen;
-	 i++;
-	 for (j = 1; j < clen; j++) {
-		if ((si & 0xc0) != 0x80) {
-		 retval = KRB5_ERR_INVALID_UTF8;
-		 goto cleanup;
-		}
-		*p <<= 6;
-		*p |= si & 0x3f;
-		i++;
-	 }
-	 if (casefold) {
-		*p = uctolower(*p);
-	 }
-	 p++;
-	}
-	/* normalize ucs of length p - ucs */
-	uccompatdecomp(ucs, p - ucs, &ucsout, &ucsoutlen);
-	if (approx) {
-	 for (j = 0; j < ucsoutlen; j++) {
-		if (ucsoutj < 0x80) {
-		 outoutpos++ = ucsoutj;
-		}
-	 }
-	} else {
-	 ucsoutlen = uccanoncomp(ucsout, ucsoutlen);
-	 /* convert ucs to utf-8 and store in out */
-	 for (j = 0; j < ucsoutlen; j++) {
-		/*
-		 * allocate more space if not enough room for 6 bytes and
-		 * terminator
-		 */
-		if (outsize - outpos < 7) {
-		 outsize = ucsoutlen - j + outpos + 6;
-		 outtmp = realloc(out, outsize);
-		 if (outtmp == NULL) {
-			retval = ENOMEM;
-			goto cleanup;
-		 }
-		 out = outtmp;
-		}
-		outpos += krb5int_ucs4_to_utf8(ucsoutj, &outoutpos);
-	 }
-	}
-
-	free(ucsout);
-	ucsout = NULL;
-
-	if (i == len) {
-	 break;
-	}
-
-	/* Allocate more space in out if necessary */
-	if (len - i >= outsize - outpos) {
-	 outsize += 1 + ((len - i) - (outsize - outpos));
-	 outtmp = realloc(out, outsize);
-	 if (outtmp == NULL) {
-		retval = ENOMEM;
-		goto cleanup;
-	 }
-	 out = outtmp;
-	}
-	/* si is ascii */
-	/* finish off everything up to char before next non-ascii */
-	for (i++; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
-	 outoutpos++ = casefold ? TOLOWER(si - 1) : si - 1;
-	}
-	if (i == len) {
-	 outoutpos++ = casefold ? TOLOWER(slen - 1) : slen - 1;
-	 break;
-	}
-	/* convert character before next non-ascii to ucs-4 */
-	*ucs = casefold ? TOLOWER(si - 1) : si - 1;
-	p = ucs + 1;
- }
-
-cleanup:
- free(ucs);
- free(ucsout);
- if (retval) {
-	free(out);
-	free(newdata);
-	return retval;
- }
- outoutpos = '\0';
- newdata->data = out;
- newdata->length = outpos;
- *newdataptr = newdata;
- return 0;
-}
-
 /* compare UTF8-strings, optionally ignore casing */
 /* slow, should be optimized */
 int

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/Makefile.in Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/k5identity.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/k5identity.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/k5login.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/k5login.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/k5srvutil.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/k5srvutil.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kadm5.acl.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kadm5.acl.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kadmin.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kadmin.man Changed

@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KADMIN" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.21.1" "MIT Kerberos"
 .SH NAME
 kadmin \- Kerberos V5 database administration program
 .
@@ -715,6 +715,15 @@
 principal during PKINIT authentication.  The matching expression
 is in the same format as those used by the \fBpkinit_cert_match\fP
 option in krb5.conf(5)\&.  (New in release 1.16.)
+.TP
+\fBpac_privsvr_enctype\fP
+Forces the encryption type of the PAC KDC checksum buffers to the
+specified encryption type for tickets issued to this server, by
+deriving a key from the local krbtgt key if it is of a different
+encryption type.  It may be necessary to set this value to
+"aes256\-sha1" on the cross\-realm krbtgt entry for an Active
+Directory realm when using aes\-sha2 keys on the local krbtgt
+entry.
 .UNINDENT
 .sp
 This command requires the \fBmodify\fP privilege.
@@ -1085,6 +1094,6 @@
 .SH AUTHOR
 MIT
 .SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
 .\" Generated by docutils manpage writer.
 .

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kadmind.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kadmind.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kdb5_ldap_util.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kdb5_ldap_util.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kdb5_util.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kdb5_util.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kdc.conf.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kdc.conf.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kdestroy.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kdestroy.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kerberos.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kerberos.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kinit.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kinit.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/klist.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/klist.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kpasswd.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kpasswd.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kprop.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kprop.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kpropd.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kpropd.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kproplog.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kproplog.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/krb5-config.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/krb5-config.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/krb5.conf.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/krb5.conf.man Changed

@@ -1,6 +1,6 @@
 .\" Man page generated from reStructuredText.
 .
-.TH "KRB5.CONF" "5" " " "1.20.1" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.21.1" "MIT Kerberos"
 .SH NAME
 krb5.conf \- Kerberos configuration file
 .
@@ -178,6 +178,18 @@
 The libdefaults section may contain any of the following relations:
 .INDENT 0.0
 .TP
+\fBallow_des3\fP
+Permit the KDC to issue tickets with des3\-cbc\-sha1 session keys.
+In future releases, this flag will allow des3\-cbc\-sha1 to be used
+at all.  The default value for this tag is false.  (Added in
+release 1.21.)
+.TP
+\fBallow_rc4\fP
+Permit the KDC to issue tickets with arcfour\-hmac session keys.
+In future releases, this flag will allow arcfour\-hmac to be used
+at all.  The default value for this tag is false.  (Added in
+release 1.21.)
+.TP
 \fBallow_weak_crypto\fP
 If this flag is set to false, then weak encryption types (as noted
 in Encryption_types in kdc.conf(5)) will be filtered
@@ -1148,7 +1160,7 @@
 All keyword/values are optional.  \fImodname\fP specifies the location
 of a library implementing PKCS #11.  If a value is encountered
 with no keyword, it is assumed to be the \fImodname\fP\&.  If no
-module\-name is specified, the default is \fBopensc\-pkcs11.so\fP\&.
+module\-name is specified, the default is \fB@PKCS11MOD@\fP\&.
 \fBslotid=\fP and/or \fBtoken=\fP may be specified to force the use of
 a particular smard card reader or token if there is more than one
 available.  \fBcertid=\fP and/or \fBcertlabel=\fP may be specified to
@@ -1488,6 +1500,6 @@
 .SH AUTHOR
 MIT
 .SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
 .\" Generated by docutils manpage writer.
 .

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/krb5kdc.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/krb5kdc.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/ksu.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/ksu.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kswitch.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kswitch.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/ktutil.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/ktutil.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/kvno.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/kvno.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/sclient.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/sclient.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/man/sserver.man -> _service:tar_scm:krb5-1.21.1.tar.gz/src/man/sserver.man Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/patchlevel.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/patchlevel.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/db2/adb_openclose.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/db2/adb_openclose.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/db2/libdb2/hash/hash_page.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/db2/libdb2/hash/hash_page.c Changed

@@ -72,7 +72,6 @@
 static int32_t	 add_bigptr __P((HTAB *, ITEM_INFO *, indx_t));
 static u_int32_t *fetch_bitmap __P((HTAB *, int32_t));
 static u_int32_t first_free __P((u_int32_t));
-static indx_t	 next_realkey __P((PAGE16 *, indx_t));
 static u_int16_t overflow_page __P((HTAB *));
 static void	 page_init __P((HTAB *, PAGE16 *, db_pgno_t, u_int8_t));
 static indx_t	 prev_realkey __P((PAGE16 *, indx_t));
@@ -249,27 +248,6 @@
 }
 
 /*
- * Returns the index of the next non-bigkey pair after n on the page.
- * Returns -1 if there are no more non-big things on the page.
- */
-static indx_t
-#ifdef __STDC__
-next_realkey(PAGE16 * pagep, indx_t n)
-#else
-next_realkey(pagep, n)
-	PAGE16 *pagep;
-	u_int32_t n;
-#endif
-{
-	indx_t i;
-
-	for (i = n + 1; i < NUM_ENT(pagep); i++)
-		if (KEY_OFF(pagep, i) != BIGPAIR)
-			return (i);
-	return (-1);
-}
-
-/*
 * Returns the index of the previous non-bigkey pair after n on the page.
 * Returns n if there are no previous non-big things on the page.
 */
@@ -305,7 +283,7 @@
 	PAGE16 *pagep;
 	indx_t ndx;
 	short check_ndx;
-	int16_t delta, len, next_key;
+	int16_t delta, len;
 	int32_t n;
 	u_int8_t *src, *dest;
 
@@ -376,10 +354,6 @@
 	/* Adjust the offsets. */
 	for (n = ndx; n < NUM_ENT(pagep) - 1; n++)
 		if (KEY_OFF(pagep, (n + 1)) != BIGPAIR) {
-			next_key = next_realkey(pagep, n);
-#ifdef DEBUG
-			assert(next_key != -1);
-#endif
 			KEY_OFF(pagep, n) = KEY_OFF(pagep, (n + 1)) + delta;
 			DATA_OFF(pagep, n) = DATA_OFF(pagep, (n + 1)) + delta;
 		} else {

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c Changed

@@ -135,20 +135,17 @@
     time_t now;
     int mask = 0;
     krb5_error_code retval = 0;
-    krb5_boolean no_msg = FALSE;
-
-    krb5_boolean print_usage = FALSE;
     char *me = progname;
 
     time(&now);
     if (!strcmp(argv*i, "-maxtktlife")) {
         if (++(*i) > argc-1)
-            goto err_usage;
+            return 0;
         date = get_date(argv*i);
         if (date == (time_t)(-1)) {
             retval = EINVAL;
             com_err(me, retval, _("while providing time specification"));
-            goto err_nomsg;
+            return 0;
         }
         rparams->max_life = date-now;
         mask |= LDAP_REALM_MAXTICKETLIFE;
@@ -157,13 +154,13 @@
 
     else if (!strcmp(argv*i, "-maxrenewlife")) {
         if (++(*i) > argc-1)
-            goto err_usage;
+            return 0;
 
         date = get_date(argv*i);
         if (date == (time_t)(-1)) {
             retval = EINVAL;
             com_err(me, retval, _("while providing time specification"));
-            goto err_nomsg;
+            return 0;
         }
         rparams->max_renewable_life = date-now;
         mask |= LDAP_REALM_MAXRENEWLIFE;
@@ -173,7 +170,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_POSTDATED;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_forwardable")) {
@@ -183,7 +180,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_FORWARDABLE;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_renewable")) {
@@ -192,7 +189,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_RENEWABLE;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_proxiable")) {
@@ -201,7 +198,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_PROXIABLE;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_dup_skey")) {
@@ -210,7 +207,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_DUP_SKEY;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     }
@@ -221,7 +218,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_PRE_AUTH);
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "requires_hwauth")) {
@@ -230,7 +227,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_HW_AUTH);
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_svr")) {
@@ -239,7 +236,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_SVR;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_tgs_req")) {
@@ -248,7 +245,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_TGT_BASED;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "allow_tix")) {
@@ -257,7 +254,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags |= KRB5_KDB_DISALLOW_ALL_TIX;
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "needchange")) {
@@ -266,7 +263,7 @@
         else if (*(argv*i) == '-')
             rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_PWCHANGE);
         else
-            goto err_usage;
+            return 0;
 
         mask |= LDAP_REALM_KRBTICKETFLAGS;
     } else if (!strcmp((argv*i + 1), "password_changing_service")) {
@@ -275,15 +272,10 @@
         else if (*(argv*i) == '-')
             rparams->tktflags &= (int)(~KRB5_KDB_PWCHANGE_SERVICE);
         else
-            goto err_usage;
+            return 0;
 
         mask |=LDAP_REALM_KRBTICKETFLAGS;
     }
-err_usage:
-    print_usage = TRUE;
-
-err_nomsg:
-    no_msg = TRUE;
 
     return mask;
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/kdb/test/kdb_test.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/kdb/test/kdb_test.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_clnt.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_clnt.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_constants.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_constants.c Changed

@@ -32,9 +32,14 @@
 
 #include "pkinit.h"
 
-/* statically declare OID constants for all three algorithms */
-static char sha1_oid8 = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x01};
+/* RFC 8636 id-pkinit-kdf-ah-sha1: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha1(1) */
+static char sha1_oid8 = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x01 };
+/* RFC 8636 id-pkinit-kdf-ah-sha256: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha256(2) */
 static char sha256_oid8 = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x02 };
+/* RFC 8636 id-pkinit-kdf-ah-sha512: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha512(3) */
 static char sha512_oid8 = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x03 };
 
 const krb5_data sha1_id = { KV5M_DATA, sizeof(sha1_oid), sha1_oid };
@@ -48,6 +53,30 @@
     NULL
 };
 
+/* RFC 4055 sha256WithRSAEncryption: iso(1) member-body(2) us(840)
+ * rsadsi(113549) pkcs(1) 1 11 */
+static char sha256WithRSAEncr_oid9 = {
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b
+};
+/* RFC 4055 sha256WithRSAEncryption: iso(1) member-body(2) us(840)
+ * rsadsi(113549) pkcs(1) 1 13 */
+static char sha512WithRSAEncr_oid9 = {
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0d
+};
+
+const krb5_data sha256WithRSAEncr_id = {
+    KV5M_DATA, sizeof(sha256WithRSAEncr_oid), sha256WithRSAEncr_oid
+};
+const krb5_data sha512WithRSAEncr_id = {
+    KV5M_DATA, sizeof(sha512WithRSAEncr_oid), sha512WithRSAEncr_oid
+};
+
+krb5_data const * const supported_cms_algs = {
+    &sha512WithRSAEncr_id,
+    &sha256WithRSAEncr_id,
+    NULL
+};
+
 /* RFC 2412 section E.2 (well-known group 2) parameters, DER-encoded as
  * DomainParameters (RFC 3279 section 2.3.3). */
 static const uint8_t o1024 = {

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto.h Changed

@@ -132,9 +132,6 @@
 	int cms_msg_type,				/* IN
 		    specifies CMS_SIGN_CLIENT for client-side CMS message
 		    and CMS_SIGN_SERVER for kdc-side */
-	int include_certchain,				/* IN
-		    specifies where certificates field in SignedData
-		    should contain certificate path */
 	unsigned char *auth_pack,			/* IN
 		    contains DER encoded AuthPack (CMS_SIGN_CLIENT)
 		    or DER encoded DHRepInfo (CMS_SIGN_SERVER) */
@@ -192,9 +189,6 @@
 	pkinit_req_crypto_context req_cryptoctx,	/* IN */
 	pkinit_identity_crypto_context id_cryptoctx,	/* IN */
 	krb5_preauthtype pa_type,			/* IN */
-	int include_certchain,				/* IN
-		    specifies whether the certificates field in
-		    SignedData should contain certificate path */
 	unsigned char *key_pack,			/* IN
 		    contains DER encoded ReplyKeyPack */
 	unsigned int key_pack_len,			/* IN
@@ -620,6 +614,10 @@
  */
 extern krb5_data const * const supported_kdf_alg_ids;
 
+/* CMS signature algorithms supported by this implementation, in order of
+ * decreasing preference. */
+extern krb5_data const * const supported_cms_algs;
+
 krb5_error_code
 crypto_encode_der_cert(krb5_context context, pkinit_req_crypto_context reqctx,
 		       uint8_t **der_out, size_t *der_len);

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c Changed

@@ -147,43 +147,6 @@
 pkcs11err(int err);
 
 
-#ifdef HAVE_OPENSSL_CMS
-/* Use CMS support present in OpenSSL. */
-#include <openssl/cms.h>
-#define pkinit_CMS_get0_content_signed(_cms) CMS_get0_content(_cms)
-#define pkinit_CMS_get0_content_data(_cms) CMS_get0_content(_cms)
-#define pkinit_CMS_free1_crls(_sk_x509crl) \
- sk_X509_CRL_pop_free((_sk_x509crl), X509_CRL_free)
-#define pkinit_CMS_free1_certs(_sk_x509) \
- sk_X509_pop_free((_sk_x509), X509_free)
-#define pkinit_CMS_SignerInfo_get_cert(_cms,_si,_x509_pp) \
- CMS_SignerInfo_get0_algs(_si,NULL,_x509_pp,NULL,NULL)
-#else
-/* Fake up CMS support using PKCS7. */
-#define pkinit_CMS_free1_crls(_stack_of_x509crls) /* Don't free these */
-#define pkinit_CMS_free1_certs(_stack_of_x509certs) /* Don't free these */
-#define CMS_NO_SIGNER_CERT_VERIFY PKCS7_NOVERIFY
-#define CMS_NOATTR PKCS7_NOATTR
-#define CMS_ContentInfo PKCS7
-#define CMS_SignerInfo PKCS7_SIGNER_INFO
-#define d2i_CMS_ContentInfo d2i_PKCS7
-#define CMS_get0_type(_p7) ((_p7)->type)
-#define pkinit_CMS_get0_content_signed(_p7) (&((_p7)->d.sign->contents->d.other->value.octet_string))
-#define pkinit_CMS_get0_content_data(_p7) (&((_p7)->d.other->value.octet_string))
-#define CMS_set1_signers_certs(_p7,_stack_of_x509,_uint)
-#define CMS_get0_SignerInfos PKCS7_get_signer_info
-#define stack_st_CMS_SignerInfo stack_st_PKCS7_SIGNER_INFO
-#undef sk_CMS_SignerInfo_value
-#define sk_CMS_SignerInfo_value sk_PKCS7_SIGNER_INFO_value
-#define CMS_get0_eContentType(_p7) (_p7->d.sign->contents->type)
-#define CMS_verify PKCS7_verify
-#define CMS_get1_crls(_p7) (_p7->d.sign->crl)
-#define CMS_get1_certs(_p7) (_p7->d.sign->cert)
-#define CMS_ContentInfo_free(_p7) PKCS7_free(_p7)
-#define pkinit_CMS_SignerInfo_get_cert(_p7,_si,_x509_pp) \
- (*_x509_pp) = PKCS7_cert_from_signer_info(_p7,_si)
-#endif
-
 #if OPENSSL_VERSION_NUMBER < 0x10100000L
 
 /* 1.1 standardizes constructor and destructor names, renaming
@@ -1541,7 +1504,6 @@
 pkinit_req_crypto_context req_cryptoctx,
 pkinit_identity_crypto_context id_cryptoctx,
 int cms_msg_type,
- int include_certchain,
 unsigned char *data,
 unsigned int data_len,
 unsigned char **signed_data,
@@ -1586,49 +1548,46 @@
 goto cleanup;
 
 if (id_cryptoctx->my_certs != NULL) {
- /* create a cert chain that has at least the signer's certificate */
+ X509_STORE *certstore = NULL;
+ X509_STORE_CTX *certctx;
+ STACK_OF(X509) *certstack = NULL;
+ char bufDN_BUF_LEN;
+ unsigned int i = 0, size = 0;
+
+ /* create a cert chain */
 if ((cert_stack = sk_X509_new_null()) == NULL)
 goto cleanup;
 
 cert = sk_X509_value(id_cryptoctx->my_certs, id_cryptoctx->cert_index);
- if (!include_certchain) {
- pkiDebug("only including signer's certificate\n");
- sk_X509_push(cert_stack, X509_dup(cert));
- } else {
- /* create a cert chain */
- X509_STORE *certstore = NULL;
- X509_STORE_CTX *certctx;
- STACK_OF(X509) *certstack = NULL;
- char bufDN_BUF_LEN;
- unsigned int i = 0, size = 0;
 
- if ((certstore = X509_STORE_new()) == NULL)
- goto cleanup;
- pkiDebug("building certificate chain\n");
- X509_STORE_set_verify_cb(certstore, openssl_callback);
- certctx = X509_STORE_CTX_new();
- if (certctx == NULL)
- goto cleanup;
- X509_STORE_CTX_init(certctx, certstore, cert,
- id_cryptoctx->intermediateCAs);
- X509_STORE_CTX_trusted_stack(certctx, id_cryptoctx->trustedCAs);
- if (!X509_verify_cert(certctx)) {
- retval = oerr_cert(context, 0, certctx,
- _("Failed to verify own certificate"));
- goto cleanup;
- }
- certstack = X509_STORE_CTX_get1_chain(certctx);
- size = sk_X509_num(certstack);
- for(i = 0; i < size - 1; i++) {
- X509 *x = sk_X509_value(certstack, i);
- X509_NAME_oneline(X509_get_subject_name(x), buf, sizeof(buf));
- TRACE_PKINIT_CERT_CHAIN_NAME(context, (int)i, buf);
- sk_X509_push(cert_stack, X509_dup(x));
- }
- X509_STORE_CTX_free(certctx);
- X509_STORE_free(certstore);
- sk_X509_pop_free(certstack, X509_free);
+ certstore = X509_STORE_new();
+ if (certstore == NULL)
+ goto cleanup;
+ pkiDebug("building certificate chain\n");
+ X509_STORE_set_verify_cb(certstore, openssl_callback);
+ certctx = X509_STORE_CTX_new();
+ if (certctx == NULL)
+ goto cleanup;
+ X509_STORE_CTX_init(certctx, certstore, cert,
+ id_cryptoctx->intermediateCAs);
+ X509_STORE_CTX_trusted_stack(certctx, id_cryptoctx->trustedCAs);
+ if (!X509_verify_cert(certctx)) {
+ retval = oerr_cert(context, 0, certctx,
+ _("Failed to verify own certificate"));
+ goto cleanup;
 }
+ certstack = X509_STORE_CTX_get1_chain(certctx);
+ size = sk_X509_num(certstack);
+ for (i = 0; i < size - 1; i++) {
+ X509 *x = sk_X509_value(certstack, i);
+ X509_NAME_oneline(X509_get_subject_name(x), buf, sizeof(buf));
+ TRACE_PKINIT_CERT_CHAIN_NAME(context, (int)i, buf);
+ sk_X509_push(cert_stack, X509_dup(x));
+ }
+ X509_STORE_CTX_free(certctx);
+ X509_STORE_free(certstore);
+ sk_X509_pop_free(certstack, X509_free);
+
 p7s->cert = cert_stack;
 
 /* fill-in PKCS7_SIGNER_INFO */
@@ -1901,7 +1860,7 @@
 if (is_signed && !OBJ_cmp(type, oid)) {
 unsigned char *d;
 *is_signed = 0;
- octets = pkinit_CMS_get0_content_data(cms);
+ octets = CMS_get0_content(cms);
 if (!octets || ((*octets)->type != V_ASN1_OCTET_STRING)) {
 retval = KRB5KDC_ERR_PREAUTH_FAILED;
 krb5_set_error_message(context, retval,
@@ -1956,13 +1915,13 @@
 goto cleanup;
 *is_signed = 0;
 /* We cannot use CMS_dataInit because there may be no digest */
- octets = pkinit_CMS_get0_content_signed(cms);
+ octets = CMS_get0_content(cms);
 if (octets)
 out = BIO_new_mem_buf((*octets)->data, (*octets)->length);
 if (out == NULL)
 goto cleanup;
 } else {
- pkinit_CMS_SignerInfo_get_cert(cms, si, &x);
+ CMS_SignerInfo_get0_algs(si, NULL, &x, NULL, NULL);
 if (x == NULL)
 goto cleanup;
 
@@ -2102,15 +2061,10 @@
 goto cleanup;
 out = BIO_new(BIO_s_mem());
 if (CMS_verify(cms, NULL, store, NULL, out, flags) == 0) {
- unsigned long err = ERR_peek_error();
- switch(ERR_GET_REASON(err)) {
- case PKCS7_R_DIGEST_FAILURE:
- retval = KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED;
- break;
- case PKCS7_R_SIGNATURE_FAILURE:
- default:
+ if (ERR_peek_last_error() == CMS_R_VERIFICATION_FAILURE)
 retval = KRB5KDC_ERR_INVALID_SIG;
- }
+ else
+ retval = KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED;
 (void)oerr(context, retval, _("Failed to verify CMS message"));
 goto cleanup;
 }
@@ -2187,11 +2141,11 @@
 X509_STORE_free(store);
 if (cms != NULL) {
 if (signerCerts != NULL)
- pkinit_CMS_free1_certs(signerCerts);
+ sk_X509_pop_free(signerCerts, X509_free);
 if (idctx->intermediateCAs != NULL && signerCerts)
 sk_X509_free(intermediateCAs);
 if (signerRevoked != NULL)
- pkinit_CMS_free1_crls(signerRevoked);
+ sk_X509_CRL_pop_free(signerRevoked, X509_CRL_free);
 if (idctx->revoked != NULL && signerRevoked)
 sk_X509_CRL_free(revoked);
 CMS_ContentInfo_free(cms);
@@ -2212,7 +2166,6 @@
 pkinit_req_crypto_context reqctx,
 pkinit_identity_crypto_context idctx,
 krb5_preauthtype pa_type,
- int include_certchain,
 unsigned char *key_pack,
 unsigned int key_pack_len,
 unsigned char **out,
@@ -2228,8 +2181,8 @@
 const EVP_CIPHER *cipher = NULL;
 
 retval = cms_signeddata_create(context, plgctx, reqctx, idctx,
- CMS_ENVEL_SERVER, include_certchain,
- key_pack, key_pack_len, &signed_data,
+ CMS_ENVEL_SERVER, key_pack, key_pack_len,
+ &signed_data,
 (unsigned int *)&signed_data_len);
 if (retval) {
 pkiDebug("failed to create pkcs7 signed data\n");
@@ -4453,7 +4406,6 @@
 {
 struct k5buf buf;
 int n = 0;
- char *ret;
 
 k5_buf_init_dynamic(&buf);
 k5_buf_add(&buf, "PKCS11:");
@@ -4478,12 +4430,7 @@
 k5_buf_add_fmt(&buf, "%sslotid=%ld", n++ ? ":" : "",
 (long)idopts->slotid);
 }
- if (k5_buf_status(&buf) == 0)
- ret = strdup(buf.data);
- else
- ret = NULL;
- k5_buf_free(&buf);
- return ret;
+ return k5_buf_cstring(&buf);
 }
 
 static krb5_error_code
@@ -5475,37 +5422,38 @@
 pkinit_plg_crypto_context plg_cryptoctx,
 pkinit_req_crypto_context req_cryptoctx,
 pkinit_identity_crypto_context id_cryptoctx,
- krb5_algorithm_identifier ***oids)
+ krb5_algorithm_identifier ***algs_out)
 {
+ krb5_error_code ret;
+ krb5_algorithm_identifier **algs = NULL;
+ size_t i, count;
 
- krb5_error_code retval = ENOMEM;
- krb5_algorithm_identifier **loids = NULL;
- krb5_data des3oid = {0, 8, "\x2A\x86\x48\x86\xF7\x0D\x03\x07" };
+ *algs_out = NULL;
 
- *oids = NULL;
- loids = malloc(2 * sizeof(krb5_algorithm_identifier *));
- if (loids == NULL)
- goto cleanup;
- loids1 = NULL;
- loids0 = malloc(sizeof(krb5_algorithm_identifier));
- if (loids0 == NULL) {
- free(loids);
- goto cleanup;
- }
- retval = pkinit_copy_krb5_data(&loids0->algorithm, &des3oid);
- if (retval) {
- free(loids0);
- free(loids);
+ /* Count supported OIDs and allocate list (including null terminator). */
+ for (count = 0; supported_cms_algscount != NULL; count++);
+ algs = k5calloc(count + 1, sizeof(*algs), &ret);
+ if (algs == NULL)
 goto cleanup;
+
+ /* Add an algorithm identifier for each OID, with no parameters. */
+ for (i = 0; i < count; i++) {
+ algsi = k5alloc(sizeof(*algsi), &ret);
+ if (algsi == NULL)
+ goto cleanup;
+ ret = krb5int_copy_data_contents(context, supported_cms_algsi,
+ &algsi->algorithm);
+ if (ret)
+ goto cleanup;
+ algsi->parameters = empty_data();
 }
- loids0->parameters.length = 0;
- loids0->parameters.data = NULL;
 
- *oids = loids;
- retval = 0;
-cleanup:
+ *algs_out = algs;
+ algs = NULL;
 
- return retval;
+cleanup:
+ free_krb5_algorithm_identifiers(&algs);
+ return ret;
 }
 
 krb5_error_code

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto_openssl.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_crypto_openssl.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/plugins/preauth/pkinit/pkinit_srv.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/plugins/preauth/pkinit/pkinit_srv.c Changed

@@ -863,7 +863,7 @@
 
         retval = cms_signeddata_create(context, plgctx->cryptoctx,
                                        reqctx->cryptoctx, plgctx->idctx,
-                                       CMS_SIGN_SERVER, 1,
+                                       CMS_SIGN_SERVER,
                                        (unsigned char *)
                                        encoded_dhkey_info->data,
                                        encoded_dhkey_info->length,
@@ -917,7 +917,7 @@
         rep->choice = choice_pa_pk_as_rep_encKeyPack;
         retval = cms_envelopeddata_create(context, plgctx->cryptoctx,
                                           reqctx->cryptoctx, plgctx->idctx,
-                                          padata->pa_type, 1,
+                                          padata->pa_type,
                                           (unsigned char *)
                                           encoded_key_pack->data,
                                           encoded_key_pack->length,
@@ -1400,7 +1400,8 @@
 }
 
 static krb5_error_code
-load_certauth_plugins(krb5_context context, certauth_handle **handle_out)
+load_certauth_plugins(krb5_context context, const char *const *realmnames,
+                      certauth_handle **handle_out)
 {
     krb5_error_code ret;
     krb5_plugin_initvt_fn *modules = NULL, *mod;
@@ -1440,20 +1441,21 @@
         if (h == NULL)
             goto cleanup;
 
-        ret = (*mod)(context, 1, 1, (krb5_plugin_vtable)&h->vt);
+        ret = (*mod)(context, 1, 2, (krb5_plugin_vtable)&h->vt);
         if (ret) {
             TRACE_CERTAUTH_VTINIT_FAIL(context, ret);
             free(h);
             continue;
         }
         h->moddata = NULL;
-        if (h->vt.init != NULL) {
+        if (h->vt.init_ex != NULL)
+            ret = h->vt.init_ex(context, realmnames, &h->moddata);
+        else if (h->vt.init != NULL)
             ret = h->vt.init(context, &h->moddata);
-            if (ret) {
-                TRACE_CERTAUTH_INIT_FAIL(context, h->vt.name, ret);
-                free(h);
-                continue;
-            }
+        if (ret) {
+            TRACE_CERTAUTH_INIT_FAIL(context, h->vt.name, ret);
+            free(h);
+            continue;
         }
         listcount++ = h;
         listcount = NULL;
@@ -1516,7 +1518,7 @@
         goto errout;
     }
 
-    retval = load_certauth_plugins(context, &certauth_modules);
+    retval = load_certauth_plugins(context, realmnames, &certauth_modules);
     if (retval)
         goto errout;

_service:tar_scm:krb5-1.20.1.tar.gz/src/po/Makefile.in -> _service:tar_scm:krb5-1.21.1.tar.gz/src/po/Makefile.in Changed

_service:tar_scm:krb5-1.21.1.tar.gz/src/po/ka.po Added

@@ -0,0 +1,9188 @@
+# Georgian translation for Kerberos.
+# Copyright (C) 2022 MIT
+# This file is distributed under the same license as the mit-krb5 package.
+# Temuri Doghonadze <temuri.doghonadze@gmail.com>, 2022.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: mit-krb5 1.21-prerelease\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2022-04-26 17:09-0400\n"
+"PO-Revision-Date: 2022-11-09 08:11+0100\n"
+"Last-Translator: Temuri Doghonadze <temuri.doghonadze@gmail.com>\n"
+"Language-Team: Georgian <(nothing)>\n"
+"Language: ka\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Poedit 3.2\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:52
+#, c-format
+msgid "Usage: %s -A -q -c cache_name -p princ_name\n"
+msgstr "გამოყენება: %s -A -q -c ქეშის_სახელი -p პრინც_სახელი\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:54
+#, c-format
+msgid "\t-A destroy all credential caches in collection\n"
+msgstr "\t-A კოლექციაში ავტორიზაციის დეტალების ყველა ქეშის განადგურება\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:55
+#, c-format
+msgid "\t-q quiet mode\n"
+msgstr "\t-q ჩუმი რეჟიმი\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:56
+#: ../../src/clients/kswitch/kswitch.c:42
+#, c-format
+msgid "\t-c specify name of credentials cache\n"
+msgstr "\t-c ავტორიზაციის დეტალების ქეშის სახელის მითითება\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:57
+#, c-format
+msgid "\t-p specify principal name within collection\n"
+msgstr "\t-p კოლექციაში პრინციპალის სახელის მითითება \n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:71
+#: ../../src/clients/kdestroy/kdestroy.c:165
+msgid "while listing credential caches"
+msgstr "ავტორიზაციის დეტალების ქეშების ჩამოთვლისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:78
+#, c-format
+msgid "Other credential caches present, use -A to destroy all\n"
+msgstr ""
+"არსებობს სხვა ავტორიზაიცის დეტალის ქეშებიც. გასანადგურებლად გამოიყენეთ -A\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:110
+#: ../../src/clients/kinit/kinit.c:332 ../../src/clients/ksu/main.c:296
+#, c-format
+msgid "Only one -c option allowed\n"
+msgstr "-c პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:118
+#, c-format
+msgid "Only one -p option allowed\n"
+msgstr "-p პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:125
+#: ../../src/clients/kinit/kinit.c:360 ../../src/clients/klist/klist.c:178
+#, c-format
+msgid "Kerberos 4 is no longer supported\n"
+msgstr ""
+"Kerberos 4 უკვე მხარდაუჭერელია\n"
+"\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:138
+#, c-format
+msgid "-A option is exclusive with -p option\n"
+msgstr "-A პარამეტრი ექსკლუზიურად -p -სთან ერთად უნდა იქნას გამოყენებული\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:150
+#: ../../src/clients/klist/klist.c:241 ../../src/clients/ksu/main.c:135
+#: ../../src/clients/ksu/main.c:141 ../../src/clients/kswitch/kswitch.c:94
+#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:929
+#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1058
+msgid "while initializing krb5"
+msgstr "krb5-ის ინიციალიზაციისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:157
+#: ../../src/clients/klist/klist.c:248
+msgid "while setting default cache name"
+msgstr "ნაგულისხმები ქეშის სახელის დაყენებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:172
+msgid "composing ccache name"
+msgstr "ccache-ს სახელის შედგენა"
+
+#: ../../src/clients/kdestroy/kdestroy.c:177
+#, c-format
+msgid "while destroying cache %s"
+msgstr "ქეშის (%s) განადგურებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:190
+#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:311
+#: ../../src/clients/kvno/kvno.c:517 ../../src/kadmin/cli/keytab.c:373
+#: ../../src/kadmin/dbutil/kdb5_util.c:544
+#, c-format
+msgid "while parsing principal name %s"
+msgstr "პრინციპალის სახელის (%s) დამუშავებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:196
+#, c-format
+msgid "while finding cache for %s"
+msgstr "%s-სთვის ქეშის ძებნისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:204
+#: ../../src/clients/klist/klist.c:462
+msgid "while resolving ccache"
+msgstr "ccache-ის ამოხსნისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:211 ../../src/clients/ksu/main.c:1026
+msgid "while destroying cache"
+msgstr "ქეშის განადგურებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:214
+#, c-format
+msgid "Ticket cache NOT destroyed!\n"
+msgstr "ბილეთის ქეში არ განადგურებულა!\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:216
+#, c-format
+msgid "Ticket cache %cNOT%c destroyed!\n"
+msgstr "ბილეთის ქეში %cNOT%c განადგურებულა!\n"
+
+#: ../../src/clients/kinit/kinit.c:143
+#, c-format
+msgid ""
+"Usage: %s -V -l lifetime -s start_time -r renewable_life\n"
+"\t-f | -F -p | -P -n -a | -A -C -E\n"
+"\t--request-pac | --no-request-pac\n"
+"\t-v -R -k -i|-t keytab_file -c cachename\n"
+"\t-S service_name -I input_ccache -T ticket_armor_cache\n"
+"\t-X <attribute>=<value> principal\n"
+"\n"
+msgstr ""
+"Usage: %s -V -l lifetime -s start_time -r renewable_life\n"
+"\t-f | -F -p | -P -n -a | -A -C -E\n"
+"\t--request-pac | --no-request-pac\n"
+"\t-v -R -k -i|-t keytab_ფაილი -c ქეშისსახელი\n"
+"\t-S სერვისის_სახელი -I შეყვანის_ccache -T ბილეთის_armor_cache\n"
+"\t-X <ატრიბუტი>=<მნიშვნელობა> პრინციპალი\n"
+"\n"
+
+#: ../../src/clients/kinit/kinit.c:153
+#, c-format
+msgid "\t-V verbose\n"
+msgstr "\t-V დამატებითი შეტყობინებები\n"
+
+#: ../../src/clients/kinit/kinit.c:154
+#, c-format
+msgid "\t-l lifetime\n"
+msgstr "\t-l სიცოცხლისდრო\n"
+
+#: ../../src/clients/kinit/kinit.c:155
+#, c-format
+msgid "\t-s start time\n"
+msgstr "\t-s გაშვების დრო\n"
+
+#: ../../src/clients/kinit/kinit.c:156
+#, c-format
+msgid "\t-r renewable lifetime\n"
+msgstr "\t-r განახლებადი სიცოცხლის დრო\n"
+
+#: ../../src/clients/kinit/kinit.c:157
+#, c-format
+msgid "\t-f forwardable\n"
+msgstr "\t-f გადაგზავნადი\n"
+
+#: ../../src/clients/kinit/kinit.c:158
+#, c-format
+msgid "\t-F not forwardable\n"
+msgstr "\t-F არაგადაგზავნადი\n"
+
+#: ../../src/clients/kinit/kinit.c:159
+#, c-format
+msgid "\t-p proxiable\n"
+msgstr "\t-p პროქსირებადი\n"
+
+#: ../../src/clients/kinit/kinit.c:160
+#, c-format
+msgid "\t-P not proxiable\n"
+msgstr "\t-P არაპროქსირებადი\n"
+
+#: ../../src/clients/kinit/kinit.c:161
+#, c-format
+msgid "\t-n anonymous\n"
+msgstr "\t-n ანონიმური\n"
+
+#: ../../src/clients/kinit/kinit.c:162
+#, c-format
+msgid "\t-a include addresses\n"
+msgstr "\t-a მისამართების ჩათვლით\n"
+
+#: ../../src/clients/kinit/kinit.c:163
+#, c-format
+msgid "\t-A do not include addresses\n"
+msgstr "\t-A მისამართები არ ჩაითვლება\n"
+
+#: ../../src/clients/kinit/kinit.c:164
+#, c-format
+msgid "\t-v validate\n"
+msgstr "\t-v გადამოწმება\n"
+
+#: ../../src/clients/kinit/kinit.c:165
+#, c-format
+msgid "\t-R renew\n"
+msgstr "\t-R განახლება\n"
+
+#: ../../src/clients/kinit/kinit.c:166
+#, c-format
+msgid "\t-C canonicalize\n"
+msgstr "\t-C კანონიკალიზაცია\n"
+
+#: ../../src/clients/kinit/kinit.c:167
+#, c-format
+msgid "\t-E client is enterprise principal name\n"
+msgstr "\t-E კლიენტი საწარმოო პრინციპალის სახელია\n"
+
+#: ../../src/clients/kinit/kinit.c:168
+#, c-format
+msgid "\t-k use keytab\n"
+msgstr "\t-k keytab-ის გამოყენება\n"
+
+#: ../../src/clients/kinit/kinit.c:169
+#, c-format
+msgid "\t-i use default client keytab (with -k)\n"
+msgstr "\t-i კლიენტის ნაგულისხმები keytab -ის გამოყენება (-k-ით)\n"
+
+#: ../../src/clients/kinit/kinit.c:170
+#, c-format
+msgid "\t-t filename of keytab to use\n"
+msgstr "\t-t keytab -ის ფაილის სახელი\n"
+
+#: ../../src/clients/kinit/kinit.c:171
+#, c-format
+msgid "\t-c Kerberos 5 cache name\n"
+msgstr "\t-c Kerberos 5 -ის ქეშის სახელი\n"
+
+#: ../../src/clients/kinit/kinit.c:172
+#, c-format
+msgid "\t-S service\n"
+msgstr "\t-S სერვისი\n"
+
+#: ../../src/clients/kinit/kinit.c:173
+#, c-format
+msgid "\t-I input credential cache\n"
+msgstr "\t-I შეყვანის ავტორიზაციის დეტალების ქეში\n"
+
+#: ../../src/clients/kinit/kinit.c:174
+#, c-format
+msgid "\t-T armor credential cache\n"
+msgstr "\t-T აბჯრის ავტორიზაციის ქეში\n"
+
+#: ../../src/clients/kinit/kinit.c:175
+#, c-format
+msgid "\t-X <attribute>=<value>\n"
+msgstr "\t-X <ატრიბუტი>=<მნიშვნელობა>\n"
+
+#: ../../src/clients/kinit/kinit.c:177
+#, c-format
+msgid "\t--{,no}-request-pac request KDC include/exclude a PAC\n"
+msgstr "\t--{,no}-request-pac KDC -ში PAC -ის ჩასმა/ამოღების მოთხოვნა\n"
+
+#: ../../src/clients/kinit/kinit.c:250 ../../src/clients/kinit/kinit.c:258
+#, c-format
+msgid "Bad lifetime value %s\n"
+msgstr "სიცოცხლის დროის არასწორი მნიშვნელობა %s\n"
+
+#: ../../src/clients/kinit/kinit.c:292
+#, c-format
+msgid "Bad start time value %s\n"
+msgstr "დაწყების დროის არასწორი მნიშვნელობა %s\n"
+
+#: ../../src/clients/kinit/kinit.c:310
+#, c-format
+msgid "Only one -t option allowed.\n"
+msgstr "-t პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kinit/kinit.c:318
+#, c-format
+msgid "Only one armor_ccache\n"
+msgstr "მხოლოდ ერთი armor_ccache\n"
+
+#: ../../src/clients/kinit/kinit.c:340
+#, c-format
+msgid "Only one -I option allowed\n"
+msgstr "-l პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kinit/kinit.c:349
+msgid "while adding preauth option"
+msgstr "preauth პარამეტრის დამატებისას"
+
+#: ../../src/clients/kinit/kinit.c:375
+#, c-format
+msgid "Only one of -f and -F allowed\n"
+msgstr "-f და -F პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:379
+#, c-format
+msgid "Only one of -p and -P allowed\n"
+msgstr "-p და -P პარამეტრებიდან მხოლოდ ერთი უნდა იყოს მითითებული\n"
+
+#: ../../src/clients/kinit/kinit.c:383
+#, c-format
+msgid "Only one of --request-pac and --no-request-pac allowed\n"
+msgstr ""
+"--request-pac და --no-request-pac პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის "
+"მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:388
+#, c-format
+msgid "Only one of -a and -A allowed\n"
+msgstr "-a და -A პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:392
+#, c-format
+msgid "Only one of -t and -i allowed\n"
+msgstr "-t და -i პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:398
+#, c-format
+msgid "keytab specified, forcing -k\n"
+msgstr "keytab მითითებულია. -k ნაძალადევია\n"
+
+#: ../../src/clients/kinit/kinit.c:401 ../../src/clients/klist/klist.c:216
+#, c-format
+msgid "Extra arguments (starting with \"%s\").\n"
+msgstr "დამატებითი არგუმენტები (\"%s\"-ით დაწყებული).\n"
+
+#: ../../src/clients/kinit/kinit.c:427
+msgid "while initializing Kerberos 5 library"
+msgstr "kerberos5 ბიბლიოთეკის ინიციალიზაციისას"
+
+#: ../../src/clients/kinit/kinit.c:435 ../../src/clients/kinit/kinit.c:578
+#, c-format
+msgid "resolving ccache %s"
+msgstr "ccache-ის (%s) ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:440
+#, c-format
+msgid "Using specified cache: %s\n"
+msgstr "გამოიყენება მითითებული ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:448
+msgid "while getting default ccache"
+msgstr "ნაგულისხმები ccache-ის მიღებისას"
+
+#: ../../src/clients/kinit/kinit.c:462 ../../src/clients/kinit/kinit.c:530
+#: ../../src/clients/kpasswd/kpasswd.c:30 ../../src/clients/ksu/main.c:249
+#, c-format
+msgid "when parsing name %s"
+msgstr "სახელის (%s) დამუშავებისას"
+
+#: ../../src/clients/kinit/kinit.c:470 ../../src/kadmin/dbutil/kdb5_util.c:309
+#: ../../src/kprop/kprop.c:157
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:395
+msgid "while getting default realm"
+msgstr "ნაგულისხმები რეალმის მიღებისას"
+
+#: ../../src/clients/kinit/kinit.c:481
+msgid "while building principal"
+msgstr "პრინციპალის აგებისას"
+
+#: ../../src/clients/kinit/kinit.c:489
+msgid "When resolving the default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის ამოხსნისას"
+
+#: ../../src/clients/kinit/kinit.c:496
+msgid "When determining client principal name from keytab"
+msgstr "კლიენტის პრინციპალის keytab-დან დადგენისას"
+
+#: ../../src/clients/kinit/kinit.c:505
+msgid "when creating default server principal name"
+msgstr "ნაგულისხმები სერვერის პრინციპალის სახელის შექმნისას"
+
+#: ../../src/clients/kinit/kinit.c:525 ../../src/clients/kpasswd/kpasswd.c:43
+#, c-format
+msgid "Unable to identify user\n"
+msgstr "მომხმარებლის იდენტიფიკაცია შეუძლებელია\n"
+
+#: ../../src/clients/kinit/kinit.c:539 ../../src/clients/kswitch/kswitch.c:113
+#, c-format
+msgid "while searching for ccache for %s"
+msgstr "ccache-ში %s-ის ძებნისას"
+
+#: ../../src/clients/kinit/kinit.c:545
+#, c-format
+msgid "Using existing cache: %s\n"
+msgstr "არსებული ქეშის გამოყენება: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:554
+msgid "while generating new ccache"
+msgstr "ახალი ccache-ის გენერირებისას"
+
+#: ../../src/clients/kinit/kinit.c:558
+#, c-format
+msgid "Using new cache: %s\n"
+msgstr "გამოიყენება ახალი ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:570
+#, c-format
+msgid "Using default cache: %s\n"
+msgstr "გამოიყენება ნაგულისხმები ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:583
+#, c-format
+msgid "Using specified input cache: %s\n"
+msgstr "გამოიყენება შეყვანის მითითებული ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:590 ../../src/clients/ksu/krb_auth_su.c:160
+msgid "when unparsing name"
+msgstr "სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/kinit/kinit.c:594
+#, c-format
+msgid "Using principal: %s\n"
+msgstr "გამოიყენება პრინციპალი: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:677
+msgid "getting local addresses"
+msgstr "ლოკალური მისამართების მიღება"
+
+#: ../../src/clients/kinit/kinit.c:701
+#, c-format
+msgid "while setting up KDB keytab for realm %s"
+msgstr "რეალმისთვის (%s) KBD keytab-ის მორგებისას"
+
+#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:508
+#, c-format
+msgid "resolving keytab %s"
+msgstr "keytab-ის (%s) ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:715
+#, c-format
+msgid "Using keytab: %s\n"
+msgstr "გამოიყენება kytab: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:719
+msgid "resolving default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:729
+#, c-format
+msgid "while setting '%s'='%s'"
+msgstr "დაყენებისას '%s'='%s'"
+
+#: ../../src/clients/kinit/kinit.c:734
+#, c-format
+msgid "PA Option %s = %s\n"
+msgstr "PA პარამეტრი %s = %s\n"
+
+#: ../../src/clients/kinit/kinit.c:775
+msgid "getting initial credentials"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღება"
+
+#: ../../src/clients/kinit/kinit.c:778
+msgid "validating credentials"
+msgstr "ავტორიზაციის დეტალების გადამოწმება"
+
+#: ../../src/clients/kinit/kinit.c:781
+msgid "renewing credentials"
+msgstr "ავტორიზაციის დეტალების განახლება"
+
+#: ../../src/clients/kinit/kinit.c:789
+#, c-format
+msgid "%s: Password incorrect while %s\n"
+msgstr "%s: %s-ისას პაროლი არასწორია\n"
+
+#: ../../src/clients/kinit/kinit.c:792
+#, c-format
+msgid "while %s"
+msgstr "%s-სას"
+
+#: ../../src/clients/kinit/kinit.c:803
+msgid "when creating temporary cache"
+msgstr "დროებითი ქეშის შექმნისას"
+
+#: ../../src/clients/kinit/kinit.c:807
+#, c-format
+msgid "Initialized cache\n"
+msgstr "ქეში ინიციალიზებულია\n"
+
+#: ../../src/clients/kinit/kinit.c:811
+msgid "while storing credentials"
+msgstr "ავტორიზაციის დეტალების დამახსოვრებისას"
+
+#: ../../src/clients/kinit/kinit.c:816
+#, c-format
+msgid "while saving to cache %s"
+msgstr "ქეშში (%s) შენახვისას"
+
+#: ../../src/clients/kinit/kinit.c:822
+#, c-format
+msgid "Stored credentials\n"
+msgstr "დამახსოვრებული ავტორიზაციის დეტალები\n"
+
+#: ../../src/clients/kinit/kinit.c:828
+msgid "while switching to new ccache"
+msgstr "ახალ ccache-ზე გადართვისას"
+
+#: ../../src/clients/kinit/kinit.c:885
+#, c-format
+msgid "Authenticated to Kerberos v5\n"
+msgstr "Kerberos v5-თან ავტორიზაცია წარმატებულია\n"
+
+#: ../../src/clients/klist/klist.c:85
+#, c-format
+msgid ""
+"Usage: %s -e -V -c -l -A -d -f -s -a -n -k -i -t "
+"-K -C name\n"
+msgstr ""
+"გამოყენება: %s -e -V -c -l -A -d -f -s -a -n -k -i "
+"-t -K -C სახელი\n"
+
+#: ../../src/clients/klist/klist.c:88
+#, c-format
+msgid "\t-c specifies credentials cache\n"
+msgstr "\t-c მიუთითებს ავტორიზაციის დეტალების ქეშს\n"
+
+#: ../../src/clients/klist/klist.c:89
+#, c-format
+msgid "\t-k specifies keytab\n"
+msgstr "\t-k keytab-ის მითითება\n"
+
+#: ../../src/clients/klist/klist.c:90
+#, c-format
+msgid "\t (Default is credentials cache)\n"
+msgstr "\t (ნაგულისხმებია ავტორიზაციის დეტალების ქეში)\n"
+
+#: ../../src/clients/klist/klist.c:91
+#, c-format
+msgid "\t-i uses default client keytab if no name given\n"
+msgstr ""
+"\t-i თუ სახელი მითითებული არაა, ნაგულისხმები კლიენტის keytab -ის გამოყენება\n"
+
+#: ../../src/clients/klist/klist.c:92
+#, c-format
+msgid "\t-l lists credential caches in collection\n"
+msgstr "\t-l კოლექციაში ავტორიზაციის დეტალების ქეშების ჩამონათვალის გამოტანა\n"
+
+#: ../../src/clients/klist/klist.c:93
+#, c-format
+msgid "\t-A shows content of all credential caches\n"
+msgstr "\t-A ყველა ავტორიზაციის დეტალის ქეშის შემცველობის გამოტანა\n"
+
+#: ../../src/clients/klist/klist.c:94
+#, c-format
+msgid "\t-e shows the encryption type\n"
+msgstr "\t-e დაშიფვრის ტიპის ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:95
+#, c-format
+msgid "\t-V shows the Kerberos version and exits\n"
+msgstr "\t-V Kerberos -ის ვერსიის გამოტანა და გასვლა\n"
+
+#: ../../src/clients/klist/klist.c:96
+#, c-format
+msgid "\toptions for credential caches:\n"
+msgstr "\tპარამეტრები ავტორიზაციის დეტალების ქეშებისთვის:\n"
+
+#: ../../src/clients/klist/klist.c:97
+#, c-format
+msgid "\t\t-d shows the submitted authorization data types\n"
+msgstr "\t\t-d აჩვენებს გადაცემულ ავტორიზაციის მონაცემების ტიპებს\n"
+
+#: ../../src/clients/klist/klist.c:99
+#, c-format
+msgid "\t\t-f shows credentials flags\n"
+msgstr "\t\t-f ავტორიზაციის დეტალების ალმების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:100
+#, c-format
+msgid "\t\t-s sets exit status based on valid tgt existence\n"
+msgstr "\t\t-s სწორი სამიზნის არსებობისას გასვლის სტატუსის დაყენება\n"
+
+#: ../../src/clients/klist/klist.c:102
+#, c-format
+msgid "\t\t-a displays the address list\n"
+msgstr "\t\t-a მისამართების სიის ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:103
+#, c-format
+msgid "\t\t\t-n do not reverse-resolve\n"
+msgstr "\t\t\t-n უკუ-ამოხსნა არ მოხდება\n"
+
+#: ../../src/clients/klist/klist.c:104
+#, c-format
+msgid "\toptions for keytabs:\n"
+msgstr "\tkeytab-ის პარამეტრები:\n"
+
+#: ../../src/clients/klist/klist.c:105
+#, c-format
+msgid "\t\t-t shows keytab entry timestamps\n"
+msgstr "\t\t-t keytab -ის ჩანაწერების დროის შტამპების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:106
+#, c-format
+msgid "\t\t-K shows keytab entry keys\n"
+msgstr "\t\t-K keytab ჩანაწერის გასაღებების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:107
+#, c-format
+msgid "\t\t-C includes configuration data entries\n"
+msgstr "\t\t-C კონფიგურაციის მონაცემების ჩანაწერების ჩათვლა\n"
+
+#: ../../src/clients/klist/klist.c:225
+#, c-format
+msgid "%s version %s\n"
+msgstr "%s ვერსია %s\n"
+
+#: ../../src/clients/klist/klist.c:278
+msgid "while getting default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:284
+msgid "while getting default keytab"
+msgstr "ნაგულისხმები keytab-ის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:290 ../../src/kadmin/cli/keytab.c:103
+#, c-format
+msgid "while resolving keytab %s"
+msgstr "keytab-ის (%s) ამოხსნისას"
+
+#: ../../src/clients/klist/klist.c:297 ../../src/kadmin/cli/keytab.c:87
+msgid "while getting keytab name"
+msgstr "keytab-ის სახელის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:305 ../../src/kadmin/cli/keytab.c:422
+msgid "while starting keytab scan"
+msgstr "keytab-ის სკანირების გაშვებისას"
+
+#: ../../src/clients/klist/klist.c:328 ../../src/clients/klist/klist.c:484
+#: ../../src/clients/ksu/ccache.c:455 ../../src/kadmin/dbutil/dump.c:487
+#: ../../src/kadmin/dbutil/tabdump.c:549
+msgid "while unparsing principal name"
+msgstr "პრინციპალის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:350 ../../src/kadmin/cli/keytab.c:466
+msgid "while scanning keytab"
+msgstr "keytab-ის სკანირებისას"
+
+#: ../../src/clients/klist/klist.c:355 ../../src/kadmin/cli/keytab.c:471
+msgid "while ending keytab scan"
+msgstr "keytab-ის სკანირების დასრულებისას"
+
+#: ../../src/clients/klist/klist.c:372 ../../src/clients/klist/klist.c:435
+msgid "while listing ccache collection"
+msgstr "ccache-ის კოლექციის ჩამოთვლისას"
+
+#: ../../src/clients/klist/klist.c:411
+msgid "(Expired)"
+msgstr "(ვადაგასულია)"
+
+#: ../../src/clients/klist/klist.c:488
+#, c-format
+msgid ""
+"Ticket cache: %s:%s\n"
+"Default principal: %s\n"
+"\n"
+msgstr ""
+"ბილეთების ქეში: %s:%s\n"
+"ნაგულისხმები პრინციპალი: %s\n"
+"\n"
+
+#: ../../src/clients/klist/klist.c:500
+msgid "while starting to retrieve tickets"
+msgstr "ბილეთების მიღების დაწყებისას"
+
+#: ../../src/clients/klist/klist.c:514
+msgid "while finishing ticket retrieval"
+msgstr "ბილეთების მიღების დასრულებისას"
+
+#: ../../src/clients/klist/klist.c:519
+msgid "while retrieving a ticket"
+msgstr "ბილეთის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:674 ../../src/clients/ksu/ccache.c:440
+#: ../../src/kprop/kpropd.c:1205 ../../src/kprop/kpropd.c:1270
+msgid "while unparsing client name"
+msgstr "კლიენტის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:679 ../../src/clients/ksu/ccache.c:445
+#: ../../src/kprop/kprop.c:191
+msgid "while unparsing server name"
+msgstr "სერვერის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:710 ../../src/clients/ksu/ccache.c:470
+#, c-format
+msgid "\tfor client %s"
+msgstr "\tკლიენტისთვის %s"
+
+#: ../../src/clients/klist/klist.c:722 ../../src/clients/ksu/ccache.c:479
+msgid "renew until "
+msgstr "განაახლეთ ვადამდე "
+
+#: ../../src/clients/klist/klist.c:734 ../../src/clients/ksu/ccache.c:489
+#, c-format
+msgid "Flags: %s"
+msgstr "ალმები: %s"
+
+#: ../../src/clients/klist/klist.c:749
+#, c-format
+msgid "Etype (skey, tkt): %s, "
+msgstr "Etype (skey, ბლთ): %s, "
+
+#: ../../src/clients/klist/klist.c:761
+#, c-format
+msgid "AD types: "
+msgstr "AD ტიპები: "
+
+#: ../../src/clients/klist/klist.c:777
+#, c-format
+msgid "\tAddresses: (none)\n"
+msgstr "\tმისამართები: (არცერთი)\n"
+
+#: ../../src/clients/klist/klist.c:779
+#, c-format
+msgid "\tAddresses: "
+msgstr "\tმისამართები: "
+
+#: ../../src/clients/klist/klist.c:797
+msgid "while unparsing ticket server name"
+msgstr "ბილეთის სერვერის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:800
+#, c-format
+msgid "\tTicket server: %s\n"
+msgstr "\tბილეთის სერვერი: %s\n"
+
+#: ../../src/clients/klist/klist.c:828 ../../src/clients/klist/klist.c:838
+#, c-format
+msgid "broken address (type %d length %d)"
+msgstr "არასწორი მისამართი (ტიპი %d სიგრძე %d)"
+
+#: ../../src/clients/klist/klist.c:847
+#, c-format
+msgid "unknown addrtype %d"
+msgstr "მისამართის უცნობი ტიპი %d"
+
+#: ../../src/clients/klist/klist.c:856
+#, c-format
+msgid "unprintable address (type %d, error %d %s)"
+msgstr "მისამართის დაბეჭდვა შეუძლებელია (ტიპი %d, შეცდომა %d %s)"
+
+#: ../../src/clients/kpasswd/kpasswd.c:13 ../../src/lib/krb5/krb/gic_pwd.c:288
+msgid "Enter new password"
+msgstr "შეიყვანეთ ახალი პაროლი"
+
+#: ../../src/clients/kpasswd/kpasswd.c:14 ../../src/lib/krb5/krb/gic_pwd.c:296
+msgid "Enter it again"
+msgstr "შეიყვანეთ კიდევ ერთხელ"
+
+#: ../../src/clients/kpasswd/kpasswd.c:34
+#, c-format
+msgid "Unable to identify user from password file\n"
+msgstr "მომხმარების იდენტიფიკაცია პაროლის ფაილიდან შეუძლებელია\n"
+
+#: ../../src/clients/kpasswd/kpasswd.c:64
+#, c-format
+msgid "usage: %s principal\n"
+msgstr "გამოყენება: %s პრინციპალი\n"
+
+#: ../../src/clients/kpasswd/kpasswd.c:72
+msgid "initializing kerberos library"
+msgstr "kerberos -ის ბიბლიოთეკის ინიციალიზაცია"
+
+#: ../../src/clients/kpasswd/kpasswd.c:77
+msgid "allocating krb5_get_init_creds_opt"
+msgstr "krb5_get_init_creds_opt-ის გამოყოფა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:93
+msgid "opening default ccache"
+msgstr "ნაგულისხმები ccache-ის გახსნა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:98
+msgid "getting principal from ccache"
+msgstr "ccache-დან პრინციპალის მიღება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:103
+msgid "while setting FAST ccache"
+msgstr "ccache-ზე FAST-ის დაყენებისას"
+
+#: ../../src/clients/kpasswd/kpasswd.c:109
+msgid "closing ccache"
+msgstr "ccache-ის დახურვა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:117
+msgid "parsing client name"
+msgstr "კლიენტის სახელის დამუშავება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:135
+msgid "Password incorrect while getting initial ticket"
+msgstr "საწყისი ბილეთის მიღებისას პაროლი არასწორია"
+
+#: ../../src/clients/kpasswd/kpasswd.c:137
+msgid "getting initial ticket"
+msgstr "საწყისი ბილეთის მიღება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:147
+msgid "while reading password"
+msgstr "პაროლის კითხვისას"
+
+#: ../../src/clients/kpasswd/kpasswd.c:155
+msgid "changing password"
+msgstr "პაროლის შეცვლა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:175
+#: ../lib/kadm5/chpass_util_strings.c:30
+#, c-format
+msgid "Password changed.\n"
+msgstr "პაროლი შეიცვალა.\n"
+
+#: ../../src/clients/ksu/authorization.c:352
+#, c-format
+msgid ""
+"Error: bad entry - %s in %s file, must be either full path or just the cmd "
+"name\n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, ან სრული ბილიკი უნდა იყოს, ან "
+"მხოლოდ ბრძანების სახელი\n"
+
+#: ../../src/clients/ksu/authorization.c:360
+#, c-format
+msgid ""
+"Error: bad entry - %s in %s file, since %s is just the cmd name, CMD_PATH "
+"must be defined \n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, რადგან %s უბრალოდ ბრძანების "
+"სახელია, CMD_PATH აღწერილი უნდა იყოს \n"
+
+#: ../../src/clients/ksu/authorization.c:375
+#, c-format
+msgid "Error: bad entry - %s in %s file, CMD_PATH contains no paths \n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, CMD_PATH ბილიკებს არ შეიცავს \n"
+
+#: ../../src/clients/ksu/authorization.c:384
+#, c-format
+msgid "Error: bad path %s in CMD_PATH for %s must start with '/' \n"
+msgstr ""
+"შეცდომა: არასწორი ბილიკი %s CMD_PATH -ში %s -სთვის '/' -ით უნდა იწყებოდეს \n"
+
+#: ../../src/clients/ksu/authorization.c:500
+msgid "Error: not found -> "
+msgstr "შეცდომა: ვერ ვიპოვე -> "
+
+#: ../../src/clients/ksu/authorization.c:706
+#, c-format
+msgid "home directory name `%s' too long, can't search for .k5login\n"
+msgstr ""
+"საწყისი საქაღალდის სახელი '%s' ძალიან გრძელია. .k5login-მდე ვერ მივედი\n"
+
+#: ../../src/clients/ksu/ccache.c:358
+#, c-format
+msgid "home directory path for %s too long\n"
+msgstr "საწყისი საქაღალდის ბილიკი %s-სთვის ძალიან გრძელია\n"
+
+#: ../../src/clients/ksu/ccache.c:451
+msgid "while retrieving principal name"
+msgstr "პრინციპალის სახელის მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:57
+#: ../../src/clients/ksu/krb_auth_su.c:62
+msgid "while copying client principal"
+msgstr "კლიენტის პრინციპალის კოპირებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:69
+msgid "while creating tgt for local realm"
+msgstr "ლოკალური რეალმისთვის სამიზნის შექმნსიას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:84
+msgid "while retrieving creds from cache"
+msgstr "ქეშიდან ავტ.დეტ-ების მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:95
+msgid "while switching to target uid"
+msgstr "სამიზნე uid-ზე გადართვისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:100
+#, c-format
+msgid ""
+"WARNING: Your password may be exposed if you enter it here and are logged \n"
+msgstr ""
+"გაფრთხილება: თქვენი პაროლი შეიძლება გამოჩნდეს, თუ აქ აკრეფთ და ის ჟურნალშიც "
+"შეინახება\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:102
+#, c-format
+msgid " in remotely using an unsecure (non-encrypted) channel. \n"
+msgstr " დაუცველი (არადაშიფრული) არხის გამოყენებაში. \n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:114 ../../src/clients/ksu/main.c:481
+msgid "while reclaiming root uid"
+msgstr "root-ის uid-ის გამოთხოვისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:121
+#, c-format
+msgid "does not have any appropriate tickets in the cache.\n"
+msgstr "ქეშში შესაბამისი ბილეთები არ გაგაჩნიათ.\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:133
+msgid "while verifying ticket for server"
+msgstr "სერვერისთვის ბილეთის გადამოწმებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:167
+msgid "while getting time of day"
+msgstr "დროის მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:171
+#, c-format
+msgid "Kerberos password for %s: "
+msgstr "Kerberos -ის პაროლი %s-სთვის: "
+
+#: ../../src/clients/ksu/krb_auth_su.c:175
+#, c-format
+msgid "principal name %s too long for internal buffer space\n"
+msgstr "პრინციპალის სახელი %s ძალიან გრძელია შიდა ბუფერის სივრცისთვის\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:184
+#, c-format
+msgid "while reading password for '%s'\n"
+msgstr "'%s'-სთვის პაროლის წაკითხვისას\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:190
+#, c-format
+msgid "No password given\n"
+msgstr "პაროლი მითითებული არაა\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:203
+#, c-format
+msgid "%s: Password incorrect\n"
+msgstr "%s: პაროლი არასწორია\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:205
+msgid "while getting initial credentials"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:225
+#: ../../src/clients/ksu/krb_auth_su.c:239
+#, c-format
+msgid " %s while unparsing name\n"
+msgstr " %s სახელის დამუშავების გაუქმებისას\n"
+
+#: ../../src/clients/ksu/main.c:69
+#, c-format
+msgid ""
+"Usage: %s target user -n principal -c source cachename -k -r time "
+"-p|-P -f|-F -l lifetime -zZ -q -e command args... -a "
+"args... \n"
+msgstr ""
+"გამოყენება: %s სამიზნე მომხმარებელი -n პრინციპალი -c საწყისი ქეშის "
+"სახელი -k -r დრო -p|-P -f|-F -l სიცოცხლის დრო -zZ -q -e "
+"ბრძანება არგუმენტები... -a არგუმენტები... \n"
+
+#: ../../src/clients/ksu/main.c:151
+msgid ""
+"program name too long - quitting to avoid triggering system logging bugs"
+msgstr ""
+"პროგრამის სახელი ძალიან გრძელია - მუშაობის დასრულება სისტემის ჟურნალის "
+"შეცდომების აღძვრის თავიდან ასაცილებლად"
+
+#: ../../src/clients/ksu/main.c:177
+msgid "while allocating memory"
+msgstr "მეხსიერების გამოყოფისას"
+
+#: ../../src/clients/ksu/main.c:190
+msgid "while setting euid to source user"
+msgstr "საწყის მომხმარებელზე euid-ის დაყენებისას"
+
+#: ../../src/clients/ksu/main.c:201 ../../src/clients/ksu/main.c:242
+#, c-format
+msgid "Bad lifetime value (%s hours?)\n"
+msgstr "სიცოცხლის დროის არასწორი მნიშვნელობა (%s საათი?)\n"
+
+#: ../../src/clients/ksu/main.c:213 ../../src/clients/ksu/main.c:304
+msgid "when gathering parameters"
+msgstr "პარამეტრების შეგროვებისას"
+
+#: ../../src/clients/ksu/main.c:263
+#, c-format
+msgid "-z option is mutually exclusive with -Z.\n"
+msgstr "-z ორმხრივად გამორიცხავს -Z -ის მითითებას.\n"
+
+#: ../../src/clients/ksu/main.c:271
+#, c-format
+msgid "-Z option is mutually exclusive with -z.\n"
+msgstr "-Z ორმხრივად გამორიცხავს -z -ის მითითებას.\n"
+
+#: ../../src/clients/ksu/main.c:284
+#, c-format
+msgid "while looking for credentials cache %s"
+msgstr "ავტორიზაციის ქეშში (%s) ძებნისას"
+
+#: ../../src/clients/ksu/main.c:290
+#, c-format
+msgid "malformed credential cache name %s\n"
+msgstr "არასწორად ფორმირებული ავტორიზაციის დეტალების ქეშის სახელი %s\n"
+
+#: ../../src/clients/ksu/main.c:348
+#, c-format
+msgid "ksu: who are you?\n"
+msgstr "ksu: ვინ ბრძანდებით?\n"
+
+#: ../../src/clients/ksu/main.c:352
+#, c-format
+msgid "Your uid doesn't match your passwd entry?!\n"
+msgstr "თქვენი uid -ი passwd ფაილის ჩანაწერს არ ემთხვევა?!\n"
+
+#: ../../src/clients/ksu/main.c:367
+#, c-format
+msgid "ksu: unknown login %s\n"
+msgstr "ksu: უცნობი მომხმარებელი %s\n"
+
+#: ../../src/clients/ksu/main.c:387
+msgid "while getting source cache"
+msgstr "საწყისი ქეშის მიღებისას"
+
+#: ../../src/clients/ksu/main.c:396
+msgid "while selecting the best principal"
+msgstr "საუკეთესო პრინციპალის არჩევისას"
+
+#: ../../src/clients/ksu/main.c:404
+msgid "while returning to source uid after finding best principal"
+msgstr "საუკეთესო პრინციპალის არჩევის შემდეგ საწყის uid-ზე დაბრუნებისას"
+
+#: ../../src/clients/ksu/main.c:424
+#, c-format
+msgid "account %s: authorization failed\n"
+msgstr "ანგარიში %s: ავტორიზაციის შეცდომა\n"
+
+#: ../../src/clients/ksu/main.c:459
+msgid "while parsing temporary name"
+msgstr "დროებითი სახელის დამუშავებისას"
+
+#: ../../src/clients/ksu/main.c:464
+msgid "while creating temporary cache"
+msgstr "დროებითი ქეშის შექმნისას"
+
+#: ../../src/clients/ksu/main.c:470 ../../src/clients/ksu/main.c:710
+#, c-format
+msgid "while copying cache %s to %s"
+msgstr "ქეშის %s-დან %s-მდე კოპირებისას"
+
+#: ../../src/clients/ksu/main.c:488
+#, c-format
+msgid ""
+"WARNING: Your password may be exposed if you enter it here and are logged\n"
+msgstr ""
+"გაფრთხილება: თქვენი პაროლი შეიძლება გამოჩნდეს, თუ აქ აკრეფთ და ის ჟურნალშიც "
+"შეინახება\n"
+
+#: ../../src/clients/ksu/main.c:490
+#, c-format
+msgid " in remotely using an unsecure (non-encrypted) channel.\n"
+msgstr " დაუცველი (არადაშიფრული) არხის გამოყენებაში.\n"
+
+#: ../../src/clients/ksu/main.c:496
+#, c-format
+msgid "Goodbye\n"
+msgstr "ნახვამდის\n"
+
+#: ../../src/clients/ksu/main.c:500
+#, c-format
+msgid "Could not get a tgt for "
+msgstr "სამიზნის მიღება შეუძლებელია "
+
+#: ../../src/clients/ksu/main.c:522
+#, c-format
+msgid "Authentication failed.\n"
+msgstr "ავთენტიკაციის შეცდომა.\n"
+
+#: ../../src/clients/ksu/main.c:530
+msgid "When unparsing name"
+msgstr "სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/ksu/main.c:534
+#, c-format
+msgid "Authenticated %s\n"
+msgstr "ავთენტიფიცირებული %s\n"
+
+#: ../../src/clients/ksu/main.c:541
+msgid "while switching to target for authorization check"
+msgstr "ავთორიზაციის შემოწმებისთვის სამიზნის გადართვისას"
+
+#: ../../src/clients/ksu/main.c:548
+msgid "while checking authorization"
+msgstr "ავტორიზაციის შემოწმებისას"
+
+#: ../../src/clients/ksu/main.c:554
+msgid "while switching back from target after authorization check"
+msgstr "ავტორიზაციის შემოწმების შემდეგ სამიზნეზე დაბრუნებისას"
+
+#: ../../src/clients/ksu/main.c:561
+#, c-format
+msgid "Account %s: authorization for %s for execution of\n"
+msgstr "ანგარიში %s: ავტორიზაცია %s-სთვის, რომ შესრულდეს\n"
+
+#: ../../src/clients/ksu/main.c:563
+#, c-format
+msgid " %s successful\n"
+msgstr " %s წარმატებულია\n"
+
+#: ../../src/clients/ksu/main.c:569
+#, c-format
+msgid "Account %s: authorization for %s successful\n"
+msgstr "ანგარიში %s: ავტორიზაცია %s-სთვის წარმატებულია\n"
+
+#: ../../src/clients/ksu/main.c:581
+#, c-format
+msgid "Account %s: authorization for %s for execution of %s failed\n"
+msgstr "ანგარიში %s: ავტორიზაციის შეცდომა %s-სთვის, %s-ის შესასრულებლად\n"
+
+#: ../../src/clients/ksu/main.c:589
+#, c-format
+msgid "Account %s: authorization of %s failed\n"
+msgstr "ანგარიშის %s: %s-ის ავტორიზაციის შეცდომა\n"
+
+#: ../../src/clients/ksu/main.c:604
+msgid "while calling cc_filter"
+msgstr "cc_filter-ის გამოძახებისას"
+
+#: ../../src/clients/ksu/main.c:612
+msgid "while erasing target cache"
+msgstr "სამიზნე ქეშის წაშლისას"
+
+#: ../../src/clients/ksu/main.c:632
+#, c-format
+msgid "ksu: permission denied (shell).\n"
+msgstr "ksu: წვდომა აკრძალულია (გარსი).\n"
+
+#: ../../src/clients/ksu/main.c:641
+#, c-format
+msgid "ksu: couldn't set environment variable USER\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: USER\n"
+
+#: ../../src/clients/ksu/main.c:647
+#, c-format
+msgid "ksu: couldn't set environment variable HOME\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: HOME\n"
+
+#: ../../src/clients/ksu/main.c:652
+#, c-format
+msgid "ksu: couldn't set environment variable SHELL\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: SHELL\n"
+
+#: ../../src/clients/ksu/main.c:663
+#, c-format
+msgid "ksu: initgroups failed.\n"
+msgstr "ksu: initgroups -ის შეცდომა.\n"
+
+#: ../../src/clients/ksu/main.c:668
+#, c-format
+msgid "Leaving uid as %s (%ld)\n"
+msgstr "UID-ი დარჩება %s (%ld)\n"
+
+#: ../../src/clients/ksu/main.c:671
+#, c-format
+msgid "Changing uid to %s (%ld)\n"
+msgstr "UID-ის შეცვლა %s-ზე (%ld)\n"
+
+#: ../../src/clients/ksu/main.c:697
+msgid "while getting name of target ccache"
+msgstr "სამიზნე ccache-ის სახელის მიღებისას"
+
+#: ../../src/clients/ksu/main.c:717
+#, c-format
+msgid "%s does not have correct permissions for %s, %s aborted"
+msgstr "%s-ს %s-სთვის სწორი წვდომები არ გააჩნია. %s ავარიულად დასრულდა"
+
+#: ../../src/clients/ksu/main.c:738
+#, c-format
+msgid "Internal error: command %s did not get resolved\n"
+msgstr "შიდა შეცდომა: ბრძანება %s\n"
+
+#: ../../src/clients/ksu/main.c:755 ../../src/clients/ksu/main.c:791
+#, c-format
+msgid "while trying to execv %s"
+msgstr "%s-ის execv-ისას"
+
+#: ../../src/clients/ksu/main.c:781
+msgid "while calling waitpid"
+msgstr "waitpid-ის გამოძახებისას"
+
+#: ../../src/clients/ksu/main.c:786
+msgid "while trying to fork."
+msgstr "fork-ის მცდელობისას."
+
+#: ../../src/clients/ksu/main.c:836
+msgid "while reading cache name from ccache"
+msgstr "ქეშის სახელის ccache-დან წაკითხვისას"
+
+#: ../../src/clients/ksu/main.c:842
+#, c-format
+msgid "ksu: couldn't set environment variable %s\n"
+msgstr "ksu: შეცდომა გარემოს ცვლადის დაყენებისას %s\n"
+
+#: ../../src/clients/ksu/main.c:868
+msgid "while resetting target ccache name"
+msgstr "სამიზნის ccache-ის სახელის საწყის მნიშვნელობაზე დაყენებისას"
+
+#: ../../src/clients/ksu/main.c:882
+msgid "while determining target ccache name"
+msgstr "სამიზნის ccache-ის სახელის დადგენისას"
+
+#: ../../src/clients/ksu/main.c:921
+msgid "while generating part of the target ccache name"
+msgstr "სამიზნე ccache-ის სახელის ნაწილის გენერირებისას"
+
+#: ../../src/clients/ksu/main.c:927
+msgid "while allocating memory for the target ccache name"
+msgstr "სამიზნე ccache-ის სახელისთვის მეხსიერების გამოყოფისას"
+
+#: ../../src/clients/ksu/main.c:946
+msgid "while creating new target ccache"
+msgstr "ახალი სამიზნე ccache-ის შექმნისას"
+
+#: ../../src/clients/ksu/main.c:952
+msgid "while initializing target cache"
+msgstr "სამიზნე ქეშის ინიციალიზაციისას"
+
+#: ../../src/clients/ksu/main.c:992
+#, c-format
+msgid "terminal name %s too long\n"
+msgstr "საბოლოო სახელი %s ძალიან გრძელია\n"
+
+#: ../../src/clients/ksu/main.c:1020
+msgid "while changing to target uid for destroying ccache"
+msgstr "ccache-ის გასანადგურებლად სამიზნე uid-ზე გადართვისას"
+
+#: ../../src/clients/kswitch/kswitch.c:41
+#, c-format
+msgid "Usage: %s {-c cache_name | -p principal}\n"
+msgstr "გამოყენება: %s {-c ქეშის სახელი | -p პრინციპალი}\n"
+
+#: ../../src/clients/kswitch/kswitch.c:43
+#, c-format
+msgid "\t-p specify name of principal\n"
+msgstr "\t-p მიუთითეთ პრინციპალის სახელი\n"
+
+#: ../../src/clients/kswitch/kswitch.c:66
+#, c-format
+msgid "Only one -c or -p option allowed\n"
+msgstr "-p და -c პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kswitch/kswitch.c:85
+#, c-format
+msgid "One of -c or -p must be specified\n"
+msgstr "-p და -c პარამეტრებიდან მხოლოდ ერთი მათგანიუნდა იყოს მითითებული\n"
+
+#: ../../src/clients/kswitch/kswitch.c:101
+#, c-format
+msgid "while resolving %s"
+msgstr "%s-ის ამოხსნისას"
+
+#: ../../src/clients/kswitch/kswitch.c:122
+msgid "while switching to credential cache"
+msgstr "ავტორიზაციის დეტალების ქეშის გადართვისას"
+
+#: ../../src/clients/kvno/kvno.c:44
+#, c-format
+msgid ""
+"usage: %s -c ccache -e etype -k keytab -q -u | -S sname\n"
+"\t{-F cert_file | {-I | -U} for_user} -P | --u2u ccache\n"
+"\t--cached-only --no-store --out-cache service1 service2 ...\n"
+msgstr ""
+"გამოყენება: %s -c ccache -e etype -k keytab -q -u | -S sname\n"
+"\t{-F სერტ_ფაილი | {-I | -U} მომხმარებლისთვის} -P | --u2u ccache\n"
+"\t--cached-only --no-store --out-cache სერვისი1 სერვისი2 ...\n"
+
+#: ../../src/clients/kvno/kvno.c:117 ../../src/clients/kvno/kvno.c:125
+#, c-format
+msgid "Options -u and -S are mutually exclusive\n"
+msgstr "-u და -S ურთიერთგამომრიცხავი პარამეტრებია\n"
+
+#: ../../src/clients/kvno/kvno.c:159
+#, c-format
+msgid "Options --u2u and -I|-U|-F are mutually exclusive\n"
+msgstr "--u2u და -I|-U|-F ურთიერთგამომრიცხავი პარამეტრებია\n"
+
+#: ../../src/clients/kvno/kvno.c:165
+#, c-format
+msgid ""
+"Option -P (constrained delegation) requires option -I|-U|-F (protocol "
+"transition)\n"
+msgstr ""
+"პარამეტრს -P (შეზღუდული დელეგაცია) -I|-U|-F პარამეტრებიდან ერთერთი "
+"(პროტოკოლის გადაცემა) ესაჭიროება\n"
+
+#: ../../src/clients/kvno/kvno.c:240
+msgid "No begin line not found"
+msgstr "ხაზის დასაწყისი ნაპოვნი არაა"
+
+#: ../../src/clients/kvno/kvno.c:252
+msgid "No end line found"
+msgstr "ხაზის ბოლო ნაპოვნი არაა"
+
+#: ../../src/clients/kvno/kvno.c:263
+msgid "Unexpected header line"
+msgstr "მოულოდნელი თავსართის საზი"
+
+#: ../../src/clients/kvno/kvno.c:273
+msgid "Invalid base64"
+msgstr "არასწორი base64"
+
+#: ../../src/clients/kvno/kvno.c:319
+#, c-format
+msgid "while formatting parsed principal name for '%s'"
+msgstr "'%s'-სთვის დამუშავებული პრინციპალის სახელის ფორმატირებისას"
+
+#: ../../src/clients/kvno/kvno.c:333
+msgid "client and server principal names must match"
+msgstr "კლიენტისა და სერვერის პრინციპალის სახელები უნდა ემთხვეოდეს"
+
+#: ../../src/clients/kvno/kvno.c:349
+#, c-format
+msgid "while getting credentials for %s"
+msgstr "%s-სთვის ავტორიზაციის დეტალების მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:356
+#, c-format
+msgid "while decoding ticket for %s"
+msgstr "%s-სთვის ბილეთის დეკოდირებისას"
+
+#: ../../src/clients/kvno/kvno.c:367
+#, c-format
+msgid "while decrypting ticket for %s"
+msgstr "%s-სთვის ბილეთის გაშიფვრისას"
+
+#: ../../src/clients/kvno/kvno.c:371
+#, c-format
+msgid "%s: kvno = %d, keytab entry valid\n"
+msgstr "%s: kvno = %d, keytab -ის ჩანაწერი არასწორია \n"
+
+#: ../../src/clients/kvno/kvno.c:376
+#, c-format
+msgid "%s: kvno = %d\n"
+msgstr "%s: kvno = %d\n"
+
+#: ../../src/clients/kvno/kvno.c:391
+#, c-format
+msgid "%s: constrained delegation failed"
+msgstr "%s: შეზღუდული დელეგირების შეცდომა"
+
+#: ../../src/clients/kvno/kvno.c:474 ../../src/kadmin/cli/kadmin.c:311
+msgid "while initializing krb5 library"
+msgstr "krb5-ის ბიბლიოთეკის ინიციალიზაციისას"
+
+#: ../../src/clients/kvno/kvno.c:481
+msgid "while converting etype"
+msgstr "etype-ის გარდაქმნისას"
+
+#: ../../src/clients/kvno/kvno.c:493
+msgid "while opening ccache"
+msgstr "ccache-ის გახნისას"
+
+#: ../../src/clients/kvno/kvno.c:500
+msgid "while resolving output ccache"
+msgstr "გამოტანის ccache-ის ამოხსნისას"
+
+#: ../../src/clients/kvno/kvno.c:525
+#, c-format
+msgid "while reading certificate file %s"
+msgstr "ფაილისთვის %s სერტიფიკატის წაკითხვისას"
+
+#: ../../src/clients/kvno/kvno.c:535
+#, c-format
+msgid "while getting user-to-user ticket from %s"
+msgstr "მომხმარებლიდან-მომხმარებლამდე ბილეთის %s-სგან მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:544
+msgid "while getting client principal name"
+msgstr "კლიენტის პრინციპალის სახელის მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:551
+msgid "while creating temporary output ccache"
+msgstr "დროებითი გამოტანის ccache-ის შექმნისას"
+
+#: ../../src/clients/kvno/kvno.c:565
+msgid "while initializing output ccache"
+msgstr "გამოტანის ccache-ის ინიციალიზაციისას"
+
+#: ../../src/clients/kvno/kvno.c:575
+msgid "while storing creds in output ccache"
+msgstr "ავტორიზაციის დეტალების გამოტანის ccache-ში შენახვისას"
+
+#: ../../src/clients/kvno/kvno.c:586
+msgid "while writing output ccache"
+msgstr "გამოტანის ccache-ის შენახვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:103
+#, c-format
+msgid ""
+"Usage: %s -r realm -p principal -q query clnt|local args\n"
+" command args...\n"
+"\tclnt args: -s admin_server:port -c ccache|-k -t keytab|-n -"
+"O | -N\n"
+"\tlocal args: -x db_args* -d dbname -e \"enc:salt ...\" -m -w "
+"password where,\n"
+"\t-x db_args* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"გამოყენება: %s -r რეალმი -p პრინციპალი -q მოთხოვნა კლიენტი|ლოკალური "
+"არგუმენტები\n"
+" ბრძანების არგუმენტები...\n"
+"\tკლიენტის არგუმენტები: -s ადმინ_სერვერი:პორტი -c ccache|-k -t "
+"keytab|-n -O | -N\n"
+"\tლოკალური არგუმენტები: -x ბაზის_არგუმენტები* -d ბაზსსახელი -e \"შიფრი:"
+"მარილი ...\" -m -w პაროლი სად,\n"
+"\t-x ბაზის_არგუმენტები* - ბაზის ნებისმიერი პარამეტრი.\n"
+"\t\t\tმხარდაჭერილი არგუმენტებისთვის მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/cli/kadmin.c:164
+#, c-format
+msgid "Invalid date specification \"%s\".\n"
+msgstr "არასწორი მონაცემების სპეციფიკაცია \"%s\".\n"
+
+#: ../../src/kadmin/cli/kadmin.c:192
+#, c-format
+msgid "Interval specification \"%s\" is in the past.\n"
+msgstr "ინტერვალის სპეციფიკაცია \"%s\" წარსულშია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:322 ../../src/kadmin/cli/kadmin.c:361
+#, c-format
+msgid "%s: Cannot initialize. Not enough memory\n"
+msgstr "%s: ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:380 ../../src/kadmin/cli/kadmin.c:840
+#: ../../src/kadmin/cli/kadmin.c:1109 ../../src/kadmin/cli/kadmin.c:1630
+#: ../../src/kadmin/cli/keytab.c:148 ../../src/kadmin/dbutil/kdb5_util.c:559
+#, c-format
+msgid "while parsing keysalts %s"
+msgstr "keysalt %s-ის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:403
+#, c-format
+msgid "%s: -q is exclusive with command-line query"
+msgstr "%s: -q ბრძანების სტრიქონიდან გამოთხოვისთვის ექსკლუზიურია"
+
+#: ../../src/kadmin/cli/kadmin.c:411
+#, c-format
+msgid "%s: unable to get default realm\n"
+msgstr "%s: ნაგულისხმები რეალმის მიღების შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:431
+msgid "while opening default credentials cache"
+msgstr "ნაგულისხმები ავტორიზაციის დეტალების ქეშის გახსნისას"
+
+#: ../../src/kadmin/cli/kadmin.c:437
+#, c-format
+msgid "while opening credentials cache %s"
+msgstr "ავტორიზაციის დეტალების ქეშის (%s) გახსნისას"
+
+#: ../../src/kadmin/cli/kadmin.c:459 ../../src/kadmin/cli/kadmin.c:513
+#: ../../src/kadmin/cli/kadmin.c:521 ../../src/kadmin/cli/kadmin.c:528
+#, c-format
+msgid "%s: out of memory\n"
+msgstr "%s: არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:468 ../../src/kadmin/cli/kadmin.c:483
+#: ../../src/kprop/kpropd.c:677
+msgid "while canonicalizing principal name"
+msgstr "პრინციპალის სახელის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:477
+msgid "creating host service principal"
+msgstr "ჰოსტის სერვისის პრინციპალის შექმნა"
+
+#: ../../src/kadmin/cli/kadmin.c:490
+#, c-format
+msgid "%s: unable to canonicalize principal\n"
+msgstr "%s: პრინციპალის კანონიკალიზაციის შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:533
+#, c-format
+msgid "%s: unable to figure out a principal name\n"
+msgstr "%s: პრინციპალის სახელის გარკვევის შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:540
+msgid "while setting up logging"
+msgstr "ჟურნალის მორგებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:549
+#, c-format
+msgid "Authenticating as principal %s with existing credentials.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, არსებული ავტორიზაციის დეტალებით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:555
+#, c-format
+msgid "Authenticating as principal %s with password; anonymous requested.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, პაროლით: ანონიმური მოთხოვნილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:562
+#, c-format
+msgid "Authenticating as principal %s with keytab %s.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, keytab-ით %s.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:565
+#, c-format
+msgid "Authenticating as principal %s with default keytab.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, ნაგულისხმები keytab-ით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:572
+#, c-format
+msgid "Authenticating as principal %s with password.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, პაროლით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:580 ../../src/kprop/kpropd.c:722
+#, c-format
+msgid "while initializing %s interface"
+msgstr "%s ინტერფეისის ინიციალიზაციისას"
+
+#: ../../src/kadmin/cli/kadmin.c:595
+#, c-format
+msgid "while closing ccache %s"
+msgstr "ccache -ის (%s) დახურვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:601
+msgid "while mapping update log"
+msgstr "განახლების ჟურნალის მიბმიბსას"
+
+#: ../../src/kadmin/cli/kadmin.c:617
+msgid "while unlocking locked database"
+msgstr "დაბლოკილიბაზის განბლოკვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:626
+msgid "Administration credentials NOT DESTROYED.\n"
+msgstr "ადმინისტრატორის ავტორიზაციის დეტალები არ განადგურებულა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:675
+msgid "usage: delete_principal -force principal\n"
+msgstr "გამოყენება: delete_principal -force პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:680 ../../src/kadmin/cli/kadmin.c:859
+msgid "while parsing principal name"
+msgstr "პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:686 ../../src/kadmin/cli/kadmin.c:865
+#: ../../src/kadmin/cli/kadmin.c:1218 ../../src/kadmin/cli/kadmin.c:1343
+#: ../../src/kadmin/cli/kadmin.c:1413 ../../src/kadmin/cli/kadmin.c:1853
+#: ../../src/kadmin/cli/kadmin.c:1897 ../../src/kadmin/cli/kadmin.c:1943
+#: ../../src/kadmin/cli/kadmin.c:1983
+msgid "while canonicalizing principal"
+msgstr "პრინციპალის სახელის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:690
+#, c-format
+msgid "Are you sure you want to delete the principal \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ პრინციპალი \"%s\"-ის საბოლოოდ წაშლა "
+"(yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:694
+#, c-format
+msgid "Principal \"%s\" not deleted\n"
+msgstr "პრინციპალი \"%s\" არ წაშლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:701
+#, c-format
+msgid "while deleting principal \"%s\""
+msgstr "პრინციპალი \"%s\"-ის წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:704
+#, c-format
+msgid "Principal \"%s\" deleted.\n"
+msgstr "პრინციპალი \"%s\" წაიშალა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:705
+msgid ""
+"Make sure that you have removed this principal from all ACLs before "
+"reusing.\n"
+msgstr ""
+"დარწმუნდით, რომ თავიდან გამოყენებამდე პრინციპალი ყველა ACL-დან წაშალეთ\n"
+
+#: ../../src/kadmin/cli/kadmin.c:722
+msgid "usage: rename_principal -force old_principal new_principal\n"
+msgstr ""
+"გამოყენება: rename_principal -force ძველი_პრინციპალი ახალი_პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:729
+msgid "while parsing old principal name"
+msgstr "ძველი პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:735
+msgid "while parsing new principal name"
+msgstr "ახალი პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:741
+msgid "while canonicalizing old principal"
+msgstr "ძველი პრინციპალის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:747
+msgid "while canonicalizing new principal"
+msgstr "ახალი პრინციპალის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:751
+#, c-format
+msgid ""
+"Are you sure you want to rename the principal \"%s\" to \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ, პრინციპალის სახელის \"%s\"-დან %s-მდე "
+"გადარქმევა (yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:755
+#, c-format
+msgid "Principal \"%s\" not renamed\n"
+msgstr "პრინციპალი '%s\"-ის სახელი არ შეცვლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:762
+#, c-format
+msgid "while renaming principal \"%s\" to \"%s\""
+msgstr "პრინციპალის სახელის \"%s\"-დან \"%s\"-მდე გადარქმევისას"
+
+#: ../../src/kadmin/cli/kadmin.c:766
+#, c-format
+msgid "Principal \"%s\" renamed to \"%s\".\n"
+msgstr "პრინციპალი \"%s\" -ის სახელი \"%s\"-ზე შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:767
+msgid ""
+"Make sure that you have removed the old principal from all ACLs before "
+"reusing.\n"
+msgstr ""
+"დარწმუნდით, რომ თავიდან გამოყენებამდე ძველი პრინციპალი ყველა ACL-დან "
+"წაშალეთ\n"
+
+#: ../../src/kadmin/cli/kadmin.c:782
+msgid ""
+"usage: change_password -randkey -keepold -e keysaltlist -pw password "
+"principal\n"
+msgstr ""
+"გამოყენება: change_password -randkey -keepold -e keysaltlist -pw "
+"პაროლი პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:808
+msgid "change_password: missing db argument"
+msgstr "change_password: ბაზის არგუმენტის გაერშე"
+
+#: ../../src/kadmin/cli/kadmin.c:814
+msgid "change_password: Not enough memory\n"
+msgstr "change_password: არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:822
+msgid "change_password: missing password arg"
+msgstr "change_password: აკლია პაროლის არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:833
+msgid "change_password: missing keysaltlist arg"
+msgstr "change_password: აკლია keysaltlist არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:844
+#, c-format
+msgid "unrecognized option %s"
+msgstr "უცნობი პარამეტრი %s"
+
+#: ../../src/kadmin/cli/kadmin.c:851
+msgid "missing principal name"
+msgstr "აკლია პრინციპალის სახელი"
+
+#: ../../src/kadmin/cli/kadmin.c:853
+msgid "too many arguments"
+msgstr "მეტისმეტად ბევრი არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:877 ../../src/kadmin/cli/kadmin.c:914
+#, c-format
+msgid "while changing password for \"%s\"."
+msgstr "\"%s\"-სთვის პაროლის ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:880 ../../src/kadmin/cli/kadmin.c:917
+#, c-format
+msgid "Password for \"%s\" changed.\n"
+msgstr "%s-ის პაროლი შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:886 ../../src/kadmin/cli/kadmin.c:1294
+#, c-format
+msgid "while randomizing key for \"%s\"."
+msgstr "\"%s\"-ის გასაღების რანდომიზებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:889
+#, c-format
+msgid "Key for \"%s\" randomized.\n"
+msgstr "\"%s\"-ის გასაღები რანდომიზებულია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:894 ../../src/kadmin/cli/kadmin.c:1254
+#, c-format
+msgid "Enter password for principal \"%s\""
+msgstr "შეყვანეთ პაროლი პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:896 ../../src/kadmin/cli/kadmin.c:1256
+#, c-format
+msgid "Re-enter password for principal \"%s\""
+msgstr "ხელახლა შეიყვანეთ პაროლი პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:901 ../../src/kadmin/cli/kadmin.c:1260
+#, c-format
+msgid "while reading password for \"%s\"."
+msgstr "%s-ის პაროლის წაკითხვისას."
+
+#: ../../src/kadmin/cli/kadmin.c:955
+msgid "Not enough memory\n"
+msgstr "არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:985 ../../src/kadmin/dbutil/kdb5_util.c:591
+msgid "while getting time"
+msgstr "დროის მიღებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1126 ../../src/kadmin/cli/kadmin.c:1337
+#: ../../src/kadmin/cli/kadmin.c:1408 ../../src/kadmin/cli/kadmin.c:1847
+#: ../../src/kadmin/cli/kadmin.c:1891 ../../src/kadmin/cli/kadmin.c:1937
+#: ../../src/kadmin/cli/kadmin.c:1977
+msgid "while parsing principal"
+msgstr "პრინციპალის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1135
+msgid "usage: add_principal options principal\n"
+msgstr "გამოყენება: add_principal პარამეტრები პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1136 ../../src/kadmin/cli/kadmin.c:1160
+#: ../../src/kadmin/cli/kadmin.c:1653
+msgid "\toptions are:\n"
+msgstr "\tპარამეტრებია:\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1137
+msgid ""
+"\t\t-randkey|-nokey -x db_princ_args* -expire expdate -pwexpire "
+"pwexpdate -maxlife maxtixlife\n"
+"\t\t-kvno kvno -policy policy -clearpolicy\n"
+"\t\t-pw password -maxrenewlife maxrenewlife\n"
+"\t\t-e keysaltlist\n"
+"\t\t{+|-}attribute\n"
+msgstr ""
+"\t\t-randkey|-nokey -x ბაზის_პრინც_არგუმენტები* -expire ვადის_თარიღი -"
+"pwexpire პაროლის_ვადა -maxlife maxtixlife\n"
+"\t\t-kvno kvno -policy პოლიტიკა -clearpolicy\n"
+"\t\t-pw პაროლი -maxrenewlife maxrenewlife\n"
+"\t\t-e გასაღების_მარილის_სია\n"
+"\t\t{+|-}ატრიბუტი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1142 ../../src/kadmin/cli/kadmin.c:1165
+msgid "\tattributes are:\n"
+msgstr "\tატრიბუტებია:\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1143 ../../src/kadmin/cli/kadmin.c:1166
+msgid ""
+"\t\tallow_postdated allow_forwardable allow_tgs_req allow_renewable\n"
+"\t\tallow_proxiable allow_dup_skey allow_tix requires_preauth\n"
+"\t\trequires_hwauth needchange allow_svr password_changing_service\n"
+"\t\tok_as_delegate ok_to_auth_as_delegate no_auth_data_required\n"
+"\t\tlockdown_keys\n"
+"\n"
+"where,\n"
+"\t-x db_princ_args* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"\t\tallow_postdated allow_forwardable allow_tgs_req allow_renewable\n"
+"\t\tallow_proxiable allow_dup_skey allow_tix requires_preauth\n"
+"\t\trequires_hwauth needchange allow_svr password_changing_service\n"
+"\t\tok_as_delegate ok_to_auth_as_delegate no_auth_data_required\n"
+"\t\tlockdown_keys\n"
+"\n"
+"სადაც,\n"
+"\t-x ბაზის_პრინციპული_არგუმენტები* - ბაზისთვის გადაცემული არგუმენტები.\n"
+"\t\t\tმხარდაჭერილი არგუმენტების სანახავად მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1159
+msgid "usage: modify_principal options principal\n"
+msgstr "გამოყენება: modify_principal პარამეტრები პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1161
+msgid ""
+"\t\t-x db_princ_args* -expire expdate -pwexpire pwexpdate -maxlife "
+"maxtixlife\n"
+"\t\t-kvno kvno -policy policy -clearpolicy\n"
+"\t\t-maxrenewlife maxrenewlife -unlock {+|-}attribute\n"
+msgstr ""
+"\t\t-x ბაზის_პრინციპული_არგუმენტები* -expire ვადა -pwexpire "
+"პაროლის_ვადა -maxlife maxtixlife\n"
+"\t\t-kvno kvno -policy პოლიტიკა -clearpolicy\n"
+"\t\t-maxrenewlife maxrenewlife -unlock {+|-}ატრიბუტი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1225 ../../src/kadmin/cli/kadmin.c:1366
+#, c-format
+msgid "WARNING: policy \"%s\" does not exist\n"
+msgstr "გაფრთხილება: პოლიტიკა \"%s\" არ არსებობს\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1232
+#, c-format
+msgid "No policy specified for %s; assigning \"default\"\n"
+msgstr "%s-სთვის პოლიტიკა მითითებული არაა. \"ნაგულისხმების\" მინიჭება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1238
+#, c-format
+msgid "No policy specified for %s; defaulting to no policy\n"
+msgstr ""
+"%s-სთვის პოლიტიკა მითიტებული არაა. ნაგულისხმებად პოლიტიკა მინიჭებული არ "
+"იქნება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1280
+#, c-format
+msgid "Admin server does not support -nokey while creating \"%s\"\n"
+msgstr "ადმინის სერვერს \"%s\"-ის შექმნისას -nokey -ის მხარდაჭერა არ გააჩნია\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1302
+#, c-format
+msgid "while clearing DISALLOW_ALL_TIX for \"%s\"."
+msgstr "\"%s\"-სთვის DISALLOW_ALL_TIX -ის გასუფთავებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1349
+#, c-format
+msgid "while getting \"%s\"."
+msgstr "\"%s\"-ის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1375
+#, c-format
+msgid "while modifying \"%s\"."
+msgstr "\"%s\"-ის ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1379
+#, c-format
+msgid "Principal \"%s\" modified.\n"
+msgstr "პრინციპალი \"%s\" შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1400
+msgid "usage: get_principal -terse principal\n"
+msgstr "გამოყენება: get_principal -terse პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1419
+#, c-format
+msgid "while retrieving \"%s\"."
+msgstr "\"%s\"-ის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1424 ../../src/kadmin/cli/kadmin.c:1429
+msgid "while unparsing principal"
+msgstr "პრინციპალის დამუშავების გაუქმებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1433
+#, c-format
+msgid "Principal: %s\n"
+msgstr "პრინციპალი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1434
+#, c-format
+msgid "Expiration date: %s\n"
+msgstr "ვადის თარიღი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1435 ../../src/kadmin/cli/kadmin.c:1437
+#: ../../src/kadmin/cli/kadmin.c:1440 ../../src/kadmin/cli/kadmin.c:1448
+msgid "never"
+msgstr "არასდროს"
+
+#: ../../src/kadmin/cli/kadmin.c:1436
+#, c-format
+msgid "Last password change: %s\n"
+msgstr "პაროლის ბოლო ცვლილება: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1438
+#, c-format
+msgid "Password expiration date: %s\n"
+msgstr "პაროლის ამოწურვის ვადა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1441
+#, c-format
+msgid "Maximum ticket life: %s\n"
+msgstr "ბილეთის მაქსიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1442
+#, c-format
+msgid "Maximum renewable life: %s\n"
+msgstr "მაქსიმალური განახლებადი სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1444
+#, c-format
+msgid "Last modified: %s (%s)\n"
+msgstr "ბოლო ცვლილება: %s (%s)\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1446
+#, c-format
+msgid "Last successful authentication: %s\n"
+msgstr "ბოლო წარმატებული ავთენტიკაცია: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1452
+#, c-format
+msgid "Failed password attempts: %d\n"
+msgstr "პაროლის წარუმატებელი მცდელობები: %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1454
+#, c-format
+msgid "Number of keys: %d\n"
+msgstr "გასაღებების რაოდენობა: %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1462
+#, c-format
+msgid "<Encryption type 0x%x>"
+msgstr "<შიფრაციის ტიპი 0x%x>"
+
+#: ../../src/kadmin/cli/kadmin.c:1474
+#, c-format
+msgid "<Salt type 0x%x>"
+msgstr "<მარილის ტიპი 0x%x>"
+
+#: ../../src/kadmin/cli/kadmin.c:1480
+#, c-format
+msgid "MKey: vno %d\n"
+msgstr "MKey: vno %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1482
+#, c-format
+msgid "Attributes:"
+msgstr "ატრიბუტები:"
+
+#: ../../src/kadmin/cli/kadmin.c:1485
+msgid "while printing flags"
+msgstr "ალმების გამოტანისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1494
+msgid "none"
+msgstr "არცერთი"
+
+#: ../../src/kadmin/cli/kadmin.c:1496
+msgid " does not exist"
+msgstr " არ არსებობს"
+
+#: ../../src/kadmin/cli/kadmin.c:1497
+#, c-format
+msgid "Policy: %s%s\n"
+msgstr "პოლიტიკა: %s%s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1533
+msgid "usage: get_principals expression\n"
+msgstr "გამოყენება: get_principals გამოსახულება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1538 ../../src/kadmin/cli/kadmin.c:1789
+msgid "while retrieving list."
+msgstr "სიის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1643
+#, c-format
+msgid "%s: parser lost count!\n"
+msgstr "%s: დამმუშავებელმა სათვალავი დაკარგა!\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1652
+#, c-format
+msgid "usage; %s options policy\n"
+msgstr "გამოყენება; %s პარამეტრები პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1654
+msgid ""
+"\t\t-maxlife time -minlife time -minlength length\n"
+"\t\t-minclasses number -history number\n"
+"\t\t-maxfailure number -failurecountinterval time\n"
+"\t\t-allowedkeysalts keysalts\n"
+msgstr ""
+"\t\t-maxlife დრო -minlife დრო -minlength სიგრძე\n"
+"\t\t-minclasses რიცხვი -history რიცხვი\n"
+"\t\t-maxfailure რიცხვი -failurecountinterval დრო\n"
+"\t\t-allowedkeysalts keysalts\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1658
+msgid "\t\t-lockoutduration time\n"
+msgstr "\t\t-lockoutduration დრო\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1677
+#, c-format
+msgid "while creating policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") შექმნისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1698
+#, c-format
+msgid "while modifying policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1710
+msgid "usage: delete_policy -force policy\n"
+msgstr "გამოყენება: delete_policy -force პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1714
+#, c-format
+msgid "Are you sure you want to delete the policy \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ პოლიკიტიკს \"%s\" საბოლოოდ წაშლა? "
+"(yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:1718
+#, c-format
+msgid "Policy \"%s\" not deleted.\n"
+msgstr "პოლიტიკა \"%s\" არ წაშლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1724
+#, c-format
+msgid "while deleting policy \"%s\""
+msgstr "პოლიტიკის \"%s\" წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1736
+msgid "usage: get_policy -terse policy\n"
+msgstr "გამოყენება: get_policy -terse პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1741
+#, c-format
+msgid "while retrieving policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1746
+#, c-format
+msgid "Policy: %s\n"
+msgstr "პოლიტიკა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1747
+#, c-format
+msgid "Maximum password life: %s\n"
+msgstr "პაროლის მაქსიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1748
+#, c-format
+msgid "Minimum password life: %s\n"
+msgstr "პაროლის მინიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1749
+#, c-format
+msgid "Minimum password length: %ld\n"
+msgstr "პაროლის მინიმალური სიგრძე: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1750
+#, c-format
+msgid "Minimum number of password character classes: %ld\n"
+msgstr "პაროლის სიმბოლოების კლასების მინიმალური რიცხვი: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1752
+#, c-format
+msgid "Number of old keys kept: %ld\n"
+msgstr "დამახსოვრებული ძველი გასაღებები: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1753
+#, c-format
+msgid "Maximum password failures before lockout: %lu\n"
+msgstr "დაბლოკვამდე პაროლის არასწორად შეყვანების რაოდენობა: %lu\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1755
+#, c-format
+msgid "Password failure count reset interval: %s\n"
+msgstr "პაროლის არასწორად შეყვანისას დაბლოკვის განბლოკვის ინტერვალი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1757
+#, c-format
+msgid "Password lockout duration: %s\n"
+msgstr "პაროლის დაბლოკვის ხანგრძლივობა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1760
+#, c-format
+msgid "Allowed key/salt types: %s\n"
+msgstr "მარილის/გასაღების დასაშვები ტიპები: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1784
+msgid "usage: get_policies expression\n"
+msgstr "გამოყენება: get_policies გამოსახულება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1806
+msgid "usage: get_privs\n"
+msgstr "გამოყენება: get_privs\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1811
+msgid "while retrieving privileges"
+msgstr "პრივილეგიების მიღებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1814
+#, c-format
+msgid "current privileges:"
+msgstr "მიმდინარე პრივილეგიები:"
+
+#: ../../src/kadmin/cli/kadmin.c:1840
+msgid "usage: purgekeys -all|-keepkvno oldest_kvno_to_keep principal\n"
+msgstr ""
+"გამოყენება: purgekeys -all|-keepkvno უძველესი_დასატოვებელი_kvno "
+"პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1860
+#, c-format
+msgid "while purging keys for principal \"%s\""
+msgstr "პრინციპალისთვის \"%s\" გასაღებების წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1865
+#, c-format
+msgid "All keys for principal \"%s\" removed.\n"
+msgstr "პრინციპალისთვის \"%s\" ყველა გასაღები წაშლილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1867
+#, c-format
+msgid "Old keys for principal \"%s\" purged.\n"
+msgstr "პრინციპალისთვის \"%s\" ძველი გასაღებები წაშლილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1884
+msgid "usage: get_strings principal\n"
+msgstr "გამოყენება: get_strings პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1904
+#, c-format
+msgid "while getting attributes for principal \"%s\""
+msgstr "ატრიბუტების მიღებისას პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:1909
+#, c-format
+msgid "(No string attributes.)\n"
+msgstr "(სტრიქონული ატრიბუტების გარეშე.)\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1928
+msgid "usage: set_string principal key value\n"
+msgstr "გამოყენება: set_string პრინციპალი გასაღები მნიშვნელობა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1950
+#, c-format
+msgid "while setting attribute on principal \"%s\""
+msgstr "პრინციპალზე (\"%s\") ატრიბუტის დაყენებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1954
+#, c-format
+msgid "Attribute set for principal \"%s\".\n"
+msgstr "პრინციპალზე (\"%s\") ატრიბუტი დაყენებულია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1969
+msgid "usage: del_string principal key\n"
+msgstr "გამოყენება: del_string პრინციპალი გასაღები\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1990
+#, c-format
+msgid "while deleting attribute from principal \"%s\""
+msgstr "პრინციპალიდან (\"%s\") ატრიბუტის წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1994
+#, c-format
+msgid "Attribute removed from principal \"%s\".\n"
+msgstr "პრინციპალიდან (\"%s\") ატრიბუტი წაშლილია\n"
+
+#: ../../src/kadmin/cli/keytab.c:55
+#, c-format
+msgid ""
+"Usage: ktadd -keytab keytab -q -e keysaltlist -norandkey "
+"principal | -glob princ-exp ...\n"
+msgstr ""
+"გამოყენება: ktadd -keytab keytab -q -e გასაღებისმარილებისსია -"
+"norandkey პრინციპალი | -glob princ-exp ...\n"
+
+#: ../../src/kadmin/cli/keytab.c:62
+#, c-format
+msgid ""
+"Usage: ktremove -keytab keytab -q principal kvno|\"all\"|\"old\"\n"
+msgstr ""
+"გამოყენება: ktremove -keytab keytab -q პრინციპალი kvno|\"all\"(ყველა)|"
+"\"old\"(ძველი)\n"
+
+#: ../../src/kadmin/cli/keytab.c:76 ../../src/kadmin/cli/keytab.c:97
+msgid "while creating keytab name"
+msgstr "keytab-ის სახელის შექმნისას"
+
+#: ../../src/kadmin/cli/keytab.c:81
+msgid "while opening default keytab"
+msgstr "ნაგულისხმები keytab-ის გახსნისას"
+
+#: ../../src/kadmin/cli/keytab.c:165
+#, c-format
+msgid "cannot specify keysaltlist when not changing key\n"
+msgstr "როცა გასაღბს არ ცვლით, keysaltlist-ს ვერ მიუთითებთ\n"
+
+#: ../../src/kadmin/cli/keytab.c:181
+#, c-format
+msgid "while expanding expression \"%s\"."
+msgstr "გამოსახულების (\"%s\") გაფართოებისას."
+
+#: ../../src/kadmin/cli/keytab.c:200 ../../src/kadmin/cli/keytab.c:240
+msgid "while closing keytab"
+msgstr "keytab-ის დახურვისას"
+
+#: ../../src/kadmin/cli/keytab.c:314
+#, c-format
+msgid "while parsing -add principal name %s"
+msgstr "-add პრინციპალის სახელის %s დამუშავებისას"
+
+#: ../../src/kadmin/cli/keytab.c:328
+#, c-format
+msgid "%s: Principal %s does not exist.\n"
+msgstr "%s: პრინციპალი %s არ არსებობს.\n"
+
+#: ../../src/kadmin/cli/keytab.c:331
+#, c-format
+msgid "while changing %s's key"
+msgstr "%s-ის გასაღების შეცვლისას"
+
+#: ../../src/kadmin/cli/keytab.c:343
+msgid "while adding key to keytab"
+msgstr "გასაღების keytab-ში ჩამატებისას"
+
+#: ../../src/kadmin/cli/keytab.c:348
+#, c-format
+msgid ""
+"Entry for principal %s with kvno %d, encryption type %s added to keytab %s.\n"
+msgstr ""
+"ჩანაწერი პრინციპალისთვის %s kvno-ით %d, დაშიფვრის ტიპი %s დამატებულია keytab-"
+"ში %s.\n"
+
+#: ../../src/kadmin/cli/keytab.c:396
+#, c-format
+msgid "%s: Keytab %s does not exist.\n"
+msgstr "%s: Keytab-ი %s არ არსებობს.\n"
+
+#: ../../src/kadmin/cli/keytab.c:400
+#, c-format
+msgid "%s: No entry for principal %s exists in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s keytab-ში %s ჩანაწერი არ არსებობს\n"
+
+#: ../../src/kadmin/cli/keytab.c:404
+#, c-format
+msgid "%s: No entry for principal %s with kvno %d exists in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s kvno-ით %d, keytab-ში %s ჩანაწერი არ არსებობს\n"
+
+#: ../../src/kadmin/cli/keytab.c:410
+msgid "while retrieving highest kvno from keytab"
+msgstr "keytab-დან უმაღლესი kvno-ის მიღებისას"
+
+#: ../../src/kadmin/cli/keytab.c:443
+msgid "while temporarily ending keytab scan"
+msgstr "keytab-ის სკანირების დროებით დასრულებისას"
+
+#: ../../src/kadmin/cli/keytab.c:448
+msgid "while deleting entry from keytab"
+msgstr "keytab-დან ჩანაწერის წაშლისას"
+
+#: ../../src/kadmin/cli/keytab.c:453
+msgid "while restarting keytab scan"
+msgstr "keytab-ის სკანირების თავიდან გაშვებისას"
+
+#: ../../src/kadmin/cli/keytab.c:459
+#, c-format
+msgid "Entry for principal %s with kvno %d removed from keytab %s.\n"
+msgstr "ჩანაწერი პრინციპალისთვის %s kvno-ით %d წაშლილია keytab-დან %s.\n"
+
+#: ../../src/kadmin/cli/keytab.c:481
+#, c-format
+msgid "%s: There is only one entry for principal %s in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s keytab-ში %s მხოლოდ ერთი ჩანაწერი არსებობს\n"
+
+#: ../../src/kadmin/cli/ss_wrapper.c:53 ../../src/kadmin/ktutil/ktutil.c:58
+msgid "creating invocation"
+msgstr "ჩაწოდების შექმნა"
+
+#: ../../src/kadmin/dbutil/dump.c:165
+msgid "while allocating temporary filename dump"
+msgstr "დროებითი ფაილის სახელის დამპის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/dump.c:176
+msgid "while renaming dump file into place"
+msgstr "დამპის ფაილის ადგილზე სახელის გადარქმევისას"
+
+#: ../../src/kadmin/dbutil/dump.c:196
+msgid "while allocating dump_ok filename"
+msgstr "dump_ok ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/dump.c:202
+#, c-format
+msgid "while creating 'ok' file, '%s'"
+msgstr "'ok' ფაილის შექმნისას, '%s'"
+
+#: ../../src/kadmin/dbutil/dump.c:207
+#, c-format
+msgid "while locking 'ok' file, '%s'"
+msgstr "'ok' ფაილის დაბლოკვისას. '%s'"
+
+#: ../../src/kadmin/dbutil/dump.c:260 ../../src/kadmin/dbutil/dump.c:289
+#, c-format
+msgid "%s: regular expression error: %s\n"
+msgstr "%s: რეგულარული გამოსახულების შეცდომა: %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:272
+#, c-format
+msgid "%s: regular expression match error: %s\n"
+msgstr "%s: რეგულარული გამოსახულების დამთხვევის შეცდომა: %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:373
+#, c-format
+msgid "%s: tagged data list inconsistency for %s (counted %d, stored %d)\n"
+msgstr ""
+"%s ჭდის მქონე მონაცემების სია არათანამიმდევრულია %s-სთვის (დათვლილია %d, "
+"დამახსოვრებულია %d)\n"
+
+#: ../../src/kadmin/dbutil/dump.c:495
+#, c-format
+msgid "while converting %s to new master key"
+msgstr "%s -ის ახალ მთავარ გასაღებზე გადაყვანისას"
+
+#: ../../src/kadmin/dbutil/dump.c:516
+#, c-format
+msgid "%s(%d): %s\n"
+msgstr "%s(%d): %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:559
+#, c-format
+msgid "%s(%d): ignoring trash at end of line: "
+msgstr "%s(%d): ბოლოში ნაგავი იგნორირებულია: "
+
+#: ../../src/kadmin/dbutil/dump.c:622
+msgid "cannot read tagged data type and length"
+msgstr "ჭდის მქონე მონაცემების ტიპის და სიგრძის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:626
+msgid "data type or length overflowed"
+msgstr "მონაცემების ტიპი ან სიგრძე გადავსებულია"
+
+#: ../../src/kadmin/dbutil/dump.c:633
+msgid "cannot read tagged data contents"
+msgstr "ჭდის მქონე მონაცემების შემცველობის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:666
+msgid "cannot match size tokens"
+msgstr "კოდის ზომები არ ემთხვევა"
+
+#: ../../src/kadmin/dbutil/dump.c:672
+msgid "cannot allocate principal (too large)"
+msgstr "პრინციპალის გამოყოფის შეცდომა (ძალიან დიდია)"
+
+#: ../../src/kadmin/dbutil/dump.c:681
+msgid "cannot allocate tl_data (too large)"
+msgstr "tl_data-ის გამოყოფის შეცდომა (ძალიან დიდია)"
+
+#: ../../src/kadmin/dbutil/dump.c:690
+msgid "invalid key_data size"
+msgstr "key_data-ის არასწორი ზომა"
+
+#: ../../src/kadmin/dbutil/dump.c:707
+msgid "cannot read name string"
+msgstr "სახელის სტრიქონის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:712
+#, c-format
+msgid "while parsing name %s"
+msgstr "სახელის (%s) დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:720
+msgid "cannot read principal attributes"
+msgstr "პრინციპალის ატრიბუტების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:773
+msgid "cannot read key size and version"
+msgstr "გასაღების ზომისა და ვერსიის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:777
+msgid "unsupported key_data_ver version"
+msgstr "key_data_ver -ის მხარდაუჭერელი ვერსია"
+
+#: ../../src/kadmin/dbutil/dump.c:781
+msgid "invalid kvno"
+msgstr "არასწორი kvno"
+
+#: ../../src/kadmin/dbutil/dump.c:792
+msgid "cannot read key type and length"
+msgstr "გასაღების ტიპისა და სიგრძის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:798
+msgid "cannot read key data"
+msgstr "გასაღების მონაცემების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:808
+msgid "cannot read extra data"
+msgstr "დამატებითი მონაცემების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:817
+#, c-format
+msgid "while storing %s"
+msgstr "%s-ის შენახვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:856 ../../src/kadmin/dbutil/dump.c:895
+#: ../../src/kadmin/dbutil/dump.c:941 ../../src/kadmin/dbutil/dump.c:960
+#, c-format
+msgid "cannot parse policy (%d read)\n"
+msgstr "პოლიტიკის დამუშავების შეცდომა (%d წაკითხულია)\n"
+
+#: ../../src/kadmin/dbutil/dump.c:864 ../../src/kadmin/dbutil/dump.c:903
+#: ../../src/kadmin/dbutil/dump.c:981
+msgid "while creating policy"
+msgstr "პოლიტიკის შექმნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:868
+#, c-format
+msgid "created policy %s\n"
+msgstr "შეიქმნა პოლიტიკა %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1018
+#, c-format
+msgid "unknown record type \"%s\"\n"
+msgstr "ჩანაწერის უცნობი ტიპი \"%s\"\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1129
+#, c-format
+msgid "%s: Unknown iprop dump version %d\n"
+msgstr "%s: iprop-ის დამპის უცნობი ვერსია %d\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1207 ../../src/kadmin/dbutil/dump.c:1443
+#, c-format
+msgid "OV dump format not supported\n"
+msgstr "OV დამპის ფორმატი მხარდაუჭერელია\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1229 ../../src/kadmin/dbutil/dump.c:1455
+#, c-format
+msgid "Iprop not enabled\n"
+msgstr "Iprop ჩართული არაა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1266
+msgid "Conditional dump is an undocumented option for use only for iprop dumps"
+msgstr ""
+"პირობითი დამპი არადოკუმენტირებული პარამეტრია, რომელიც მხოლოდ iprop-ის "
+"დამპებისთვის გამოიყენება"
+
+#: ../../src/kadmin/dbutil/dump.c:1279
+msgid "Database not currently opened!"
+msgstr "ბაზა ამჟამად ღია არაა!"
+
+#: ../../src/kadmin/dbutil/dump.c:1293 ../../src/kadmin/dbutil/kdb5_stash.c:116
+#: ../../src/kadmin/dbutil/kdb5_util.c:445
+msgid "while reading master key"
+msgstr "მთავარი გასაღების წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1299
+msgid "while verifying master key"
+msgstr "მთავარი გასაღების გადამოწმებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1318 ../../src/kadmin/dbutil/dump.c:1328
+msgid "while reading new master key"
+msgstr "ახალი მთავარი გასაღების წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1322
+#, c-format
+msgid "Please enter new master key....\n"
+msgstr "შეიყვანეთ ახალი მთავარი გასაღები...\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1346
+#, c-format
+msgid "while opening %s for writing"
+msgstr "%s-ის ჩასაწერად გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1361
+msgid "while reading update log header"
+msgstr "განახლების ჟურნალის თავსართის წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1376 ../../src/kadmin/dbutil/dump.c:1384
+#, c-format
+msgid "performing %s dump"
+msgstr "მიმდინარეობს %s-ის დამპი"
+
+#: ../../src/kadmin/dbutil/dump.c:1414
+#, c-format
+msgid "%s: error processing line %d of %s\n"
+msgstr "%s: შეცდომა %d ხაზის დამუშავებისას, %s-დან\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1464
+msgid "while parsing options"
+msgstr "პარამეტრების დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1479
+#, c-format
+msgid "while opening %s"
+msgstr "\"%s\"-ის გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1484 ../../src/kadmin/dbutil/dump.c:1580
+msgid "standard input"
+msgstr "სტანდარტული შეყვანა"
+
+#: ../../src/kadmin/dbutil/dump.c:1489
+#, c-format
+msgid "%s: can't read dump header in %s\n"
+msgstr "%s: %s-ში დამპის თავსართის წაკითხვის შეცდომა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1497 ../../src/kadmin/dbutil/dump.c:1511
+#, c-format
+msgid "%s: dump header bad in %s\n"
+msgstr "%s: დამპის არასწორი თავსართი %s-ში\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1520
+#, c-format
+msgid "Could not open iprop ulog\n"
+msgstr "შეცდომა iprop ulog-ის გახსნისას\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1525
+#, c-format
+msgid "%s: dump version %s can only be loaded with the -update flag\n"
+msgstr "%s: დამპის ვერსია %s მხოლოდ -update ალმით შეიძლება ჩაიტვირთოს\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1534 ../../src/kadmin/dbutil/dump.c:1539
+msgid "computing parameters for database"
+msgstr "ბაზისთვის პარამეტრების გამოთვლა"
+
+#: ../../src/kadmin/dbutil/dump.c:1545
+msgid "while creating database"
+msgstr "ბაზის შექმნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1554
+msgid "while opening database"
+msgstr "ბაზის გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1564
+msgid "while permanently locking database"
+msgstr "ბაზის სამუდამოდ დაბლოკვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1582
+#, c-format
+msgid "%s: %s restore failed\n"
+msgstr "%s: %s აღდგენის შეცდომა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1587
+msgid "while unlocking database"
+msgstr "ბაზის განბლოკვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1597 ../../src/kadmin/dbutil/dump.c:1616
+msgid "while reinitializing update log"
+msgstr "განახლების ჟურნალის თავიდან ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1607
+msgid "while making newly loaded database live"
+msgstr "ახლად ჩატვირთული ბაზის სამუშაო რეჟიმში გადართვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1623
+msgid "while writing update log header"
+msgstr "განახლების ჟურნალის თავსართის ჩაწერისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1637
+#, c-format
+msgid "while deleting bad database %s"
+msgstr "ცუდი ბაზის (%s) წაშლისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:79
+msgid "while looking up the Kerberos configuration"
+msgstr "kerberos-ის კონფიგურაციის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:105
+msgid "while initializing the Kerberos admin interface"
+msgstr "kerberos-ის ადმინისტრირების ინტერფეისის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:197
+msgid "while appending realm to principal"
+msgstr "რეალმის პრინციპალზე მიწერისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:203
+msgid "while parsing admin principal name"
+msgstr "ადმინის პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:215
+#, c-format
+msgid "while creating principal %s"
+msgstr "პრინციპალი \"%s\"-ის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:186
+#: ../../src/kadmin/dbutil/kdb5_util.c:389
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:574
+msgid "while setting up master key name"
+msgstr "მთავარი გასაღების სახელის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:197
+#, c-format
+msgid ""
+"Initializing database '%s' for realm '%s',\n"
+"master key name '%s'\n"
+msgstr ""
+"ბაზის (\"%s\") ინიციალიზაცია რეალმისთვის '%s'.\n"
+"მთავარი გასაღებს სახელია '%s'\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:202
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:483
+#, c-format
+msgid "You will be prompted for the database Master Password.\n"
+msgstr "ბაზის მთავარ პაროლს შეგეკითხებით.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:203
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:255
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:484
+#, c-format
+msgid "It is important that you NOT FORGET this password.\n"
+msgstr "ძალიან მნიშვნელოვანია, რომ ეს პაროლი *არასდროს დაგავიწყდეთ*.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:209
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:261
+msgid "while creating new master key"
+msgstr "ახალი მთავარი გასაღების შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:217
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:494
+msgid "while reading master key from keyboard"
+msgstr "მთავარი გასაღების კლავიატურიდან წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:227
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:280
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:586
+msgid "while calculating master key salt"
+msgstr "მთავარი გასაღების მარილის გამოთვლისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:235
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:289
+#: ../../src/kadmin/dbutil/kdb5_util.c:431
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:598
+msgid "while transforming master key from password"
+msgstr "მთავარი გასაღების პაროლიდან გარდაქმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:245
+msgid "while initializing random key generator"
+msgstr "შემთხვევითი რიცხვების გენერატორის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:250
+#, c-format
+msgid "while creating database '%s'"
+msgstr "ბაზის (\"%s\") შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:268
+msgid "while creating update log"
+msgstr "განახლების ჟურნალის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:279
+msgid "while initializing update log"
+msgstr "განახლების ჟურნალის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:294
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:610
+msgid "while adding entries to the database"
+msgstr "ბაზაში ჩანაწერების დამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:322
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:333
+#: ../../src/kadmin/dbutil/kdb5_stash.c:133
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:635
+msgid "while storing key"
+msgstr "გასაღების შენახვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:323
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:334
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:636
+#, c-format
+msgid "Warning: couldn't stash master key.\n"
+msgstr "გაფრთხილება: მთავარი გასაღების მოგროვების შეცდომა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:69
+#, c-format
+msgid "Deleting KDC database stored in '%s', are you sure?\n"
+msgstr ""
+"წაიშლება KDC-ის ბაზა, დამახსოვრებული '%s'-ში. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:71
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1111
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:360
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1442
+#, c-format
+msgid "(type 'yes' to confirm)? "
+msgstr "(დასადასტურებლად აკრიფეთ 'yes' (დიახ)? "
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:78
+#, c-format
+msgid "OK, deleting database '%s'...\n"
+msgstr "კარგი, მიმდინარეობს ბაზის წაშლა '%s'...\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:83
+#, c-format
+msgid "deleting database '%s'"
+msgstr "ბაზის წაშლა '%s'..."
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:92
+#, c-format
+msgid "** Database '%s' destroyed.\n"
+msgstr "** ბაზა '%s' განადგურდა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:223
+#, c-format
+msgid "%s is an invalid enctype"
+msgstr "%s არასწორი enctype-ა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:245
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:421
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:564
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:941
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1102
+#, c-format
+msgid "while getting master key principal %s"
+msgstr "მთავარი გასაღების პრინციპალის (%s) მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:251
+#, c-format
+msgid "Creating new master key for master key principal '%s'\n"
+msgstr "ახალი მთავარი გასაღების დამატება მთავარი პრინციპალისთვის '%s'\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:254
+#, c-format
+msgid "You will be prompted for a new database Master Password.\n"
+msgstr "ბაზის ახალ მთავარ პაროლს შეგეკითხებით.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:270
+msgid "while reading new master key from keyboard"
+msgstr "ახალი მთავარი გასაღების კლავიატურიდან წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:299
+msgid "adding new master key to master principal"
+msgstr "ახალი მთავარი გასაღების მთავარი პრინციპალისთვის დამატება"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:305
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:390
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:806
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1305
+msgid "while getting current time"
+msgstr "მიმდინარე დროის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:312
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:522
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1312
+msgid "while updating the master key principal modification time"
+msgstr "მთავარი გასაღების პრინციპალის ცვლილების დროის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:319
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:530
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1322
+msgid "while adding master key entry to the database"
+msgstr "მთავარი გასაღების ჩანაწერის ბაზაში ჩამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:371
+msgid "0 is an invalid KVNO value"
+msgstr "0 KVNO-ის არასწორი მნიშვნელობაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:382
+#, c-format
+msgid "%d is an invalid KVNO value"
+msgstr "%d KVNO-ის არასწორი მნიშვნელობაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:398
+#, c-format
+msgid "could not parse date-time string '%s'"
+msgstr "თარითი-დროის სტრიქონის \"%s\" დამუშავების შეცდომა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:430
+msgid "while looking up active version of master key"
+msgstr "მთავარი გასაღების აქტიური ვერსიის მოძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:469
+msgid "while adding new master key"
+msgstr "ახალი მთავარი გასაღების დამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:507
+msgid "there must be one master key currently active"
+msgstr "მიმდინარე დროს ერთი მთავარი გასაღები ყოველთვის უნდა იყოს აქტიური"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:515
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1291
+msgid "while updating actkvno data for master principal entry"
+msgstr "მთავარი პრინციპალის ცანაწერის actkvno-ის მონაცემების განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:556
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:903
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1072
+msgid "master keylist not initialized"
+msgstr "მთავარი keylist ინიციალიზებული არაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:572
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:949
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1199
+msgid "while looking up active kvno list"
+msgstr "აქტიური kvno-ის სიის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:580
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:957
+msgid "while looking up active master key"
+msgstr "აქტიური მთავარი გასაღების ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:592
+msgid "while getting enctype description"
+msgstr "enctype-ის აღწერის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:609
+#, c-format
+msgid "KVNO: %d, Enctype: %s, Active on: %s *\n"
+msgstr "KVNO: %d, Enctype: %s, აქტიურია: %s *\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:614
+#, c-format
+msgid "KVNO: %d, Enctype: %s, Active on: %s\n"
+msgstr "KVNO: %d, Enctype: %s, აქტიურია: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:618
+#, c-format
+msgid "KVNO: %d, Enctype: %s, No activate time set\n"
+msgstr "KVNO: %d, Enctype: %s, აქტივირების დრო მითითებული არაა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:623
+msgid "asprintf could not allocate enough memory to hold output"
+msgstr ""
+"asprintf -ის შეცდომა გამოტანის შეკავებისთვის საკმარისი მეხსიერების "
+"გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:756
+msgid "getting string representation of principal name"
+msgstr "კლიენტის პრინციპალის სახელის სტრიქონის სახით მიღება"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:780
+#, c-format
+msgid "determining master key used for principal '%s'"
+msgstr "პრინციპალისთვის (%s) გამოყენებული მთავარი გასაღების განსაზღვრა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:786
+#, c-format
+msgid "would skip: %s\n"
+msgstr "გამოვტოვებდი: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:788
+#, c-format
+msgid "skipping: %s\n"
+msgstr "გამოტოვება: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:794
+#, c-format
+msgid "would update: %s\n"
+msgstr "განვაახლებდი: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:798
+#, c-format
+msgid "updating: %s\n"
+msgstr "განახლება: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:802
+#, c-format
+msgid "error re-encrypting key for principal '%s'"
+msgstr "შეცდომა პრინციპალისთვის ('%s') გასაღების თავიდან დაშიფვრისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:813
+#, c-format
+msgid "while updating principal '%s' modification time"
+msgstr "პრინციპალის (%s) ცვლილების დროის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:820
+#, c-format
+msgid "while updating principal '%s' key data in the database"
+msgstr "ბააში პრინციპალის (%s) გასაღების მონაცემების განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:852
+#, c-format
+msgid ""
+"\n"
+"(type 'yes' to confirm)? "
+msgstr ""
+"\n"
+"(დასადასტურებლად აკრიფეთ 'yes' (დიახ)? "
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:914
+#, c-format
+msgid "converting glob pattern '%s' to regular expression"
+msgstr "გლობის შაბლონის (%s) რეგულარულ გამოსახულებად გარდაქმნა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:932
+#, c-format
+msgid "error compiling converted regexp '%s'"
+msgstr "გარდაქმნილი რეგულარული გამოსახულების (%s) კომპილაციის შეცდომა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:965
+#, c-format
+msgid "Re-encrypt all keys not using master key vno %u?"
+msgstr ""
+"გადავშიფრო ყველა გასაღები, რომელიც მთავარ გასაღებს vno %u -ს არ იყენებს?"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:967
+#, c-format
+msgid "OK, doing nothing.\n"
+msgstr "კარგი, არაფერს ვაკეთებ.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:973
+#, c-format
+msgid "Principals whose keys WOULD BE re-encrypted to master key vno %u:\n"
+msgstr ""
+"პრინციპალები, რომლის გასაღებებიც გადაშიფვრადია მთავარი გასაღებით vno %u: \n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:976
+#, c-format
+msgid ""
+"Principals whose keys are being re-encrypted to master key vno %u if "
+"necessary:\n"
+msgstr ""
+"პრინციპალები, რომლის გასაღებებიც, საჭიროების შემთხვევაში, გადაიშიფრება "
+"მთავარი გასაღებით vno %u:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:992
+msgid "trying to process principal database"
+msgstr "პრინციპალის ბაზის დამუშავების მცდელობა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:996
+#, c-format
+msgid "%u principals processed: %u would be updated, %u already current\n"
+msgstr "დამუშავებულია %u პრინციპალი: %u განახლებადია, %u უკვე განახლებულია\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1000
+#, c-format
+msgid "%u principals processed: %u updated, %u already current\n"
+msgstr "დამუშავებულია %u პრინციპალი: %u განახლებულია, %u უკვე მიმდინარეა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1109
+#, c-format
+msgid ""
+"Will purge all unused master keys stored in the '%s' principal, are you "
+"sure?\n"
+msgstr ""
+"ყველა გამოუყენებელი მთავარი გასაღები, დამახსოვრებული %s პრინციპალში, "
+"წაიშლება. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1120
+#, c-format
+msgid "OK, purging unused master keys from '%s'...\n"
+msgstr ""
+"კარგი. მიმდინარეობს გამოუყენებელი მთავარი გასაღებების %s-დან წაშლა...\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1128
+#, c-format
+msgid "There is only one master key which can not be purged.\n"
+msgstr "არსებობს მხოლოდ ერთი მთავარი გასაღები და მისი წაშლა აკრძალულია.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1137
+msgid "while allocating args.kvnos"
+msgstr "args.kvnos -ის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1153
+msgid "while finding master keys in use"
+msgstr "გამოყენებული მთავარი გასაღებების ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1162
+#, c-format
+msgid "Would purge the following master key(s) from %s:\n"
+msgstr "%s-დან შემდეგი მთავარი გასაღებები წაიშლება:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1165
+#, c-format
+msgid "Purging the following master key(s) from %s:\n"
+msgstr "%s-დან შემდეგი მთავარი გასაღებების წაშლა:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1177
+msgid "master key stash file needs updating, command aborting"
+msgstr ""
+"მთავარი გასაღების შესაგროვებელ ფაილს განახლება სჭირდება. ბრძანების მუშაობის "
+"დასასრული"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1183
+#, c-format
+msgid "KVNO: %d\n"
+msgstr "KVNO: %d\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1188
+#, c-format
+msgid "All keys in use, nothing purged.\n"
+msgstr "ყველა გასაღები გამოიყენება. არაფერი წაშლილა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1193
+#, c-format
+msgid "%d key(s) would be purged.\n"
+msgstr "წაიშლებოდა %d გასაღები.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1206
+msgid "while looking up mkey aux data list"
+msgstr "mkey-ის დამატებითი მონაცემების სიის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1214
+msgid "while allocating key_data"
+msgstr "key_data-ის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1299
+msgid "while updating mkey_aux data for master principal entry"
+msgstr ""
+"mkey_aux-ის მონაცემების მხოლოდ მთავარი პრინციპალის ჩანაწერის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1326
+#, c-format
+msgid "%d key(s) purged.\n"
+msgstr "%d გასაღები წაიშალა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:97
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:542
+#, c-format
+msgid "while setting up enctype %d"
+msgstr "enctype %d-ის მორგებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:123
+msgid "while getting master key list"
+msgstr "მთავარი გასაღებების სიის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:127
+#, c-format
+msgid "Using existing stashed keys to update stash file.\n"
+msgstr ""
+"არშებული მოგროვებული გასაღებების გამოყენება დაგროვების ფაილის გასაახლებლად.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:80
+#, c-format
+msgid ""
+"Usage: kdb5_util -r realm -d dbname -k mkeytype -kv mkeyVNO\n"
+"\t -M mkeyname -m -sf stashfilename -P password\n"
+"\t -x db_args* cmd cmd_options\n"
+"\tcreate -s\n"
+"\tdestroy -f\n"
+"\tstash -f keyfile\n"
+"\tdump -b7|-r13|-r18 -verbose\n"
+"\t -mkey_convert -new_mkey_file mkey_file\n"
+"\t -rev -recurse filename princs...\n"
+"\tload -b7|-r13|-r18 -hash -verbose -update filename\n"
+"\tark -e etype_list principal\n"
+"\tadd_mkey -e etype -s\n"
+"\tuse_mkey kvno time\n"
+"\tlist_mkeys\n"
+msgstr ""
+"გამოყენება: kdb5_util -r რეალმი -d ბაზის_სახელი -k mkeytype -kv "
+"mkeyVNO\n"
+"\t -M mkeyname -m -sf შესაგროვებელიფაილი -P პაროლი\n"
+"\t -x ბაზის_პარამეტრები* ბრძნბ ბრძანების_პარამეტრები\n"
+"\tcreate -s\n"
+"\tdestroy -f\n"
+"\tstash -f keyfile\n"
+"\tdump -b7|-r13|-r18 -verbose\n"
+"\t -mkey_convert -new_mkey_file mkey_file\n"
+"\t -rev -recurse ფაილსი სახელი პრინციპალები...\n"
+"\tload -b7|-r13|-r18 -hash -verbose -update ფაილის სახელი\n"
+"\tark -e etype_list პრინციპალი\n"
+"\tadd_mkey -e etype -s\n"
+"\tuse_mkey kvno დრო\n"
+"\tlist_mkeys\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:99
+#, c-format
+msgid ""
+"\tupdate_princ_encryption -f -n -v princ-pattern\n"
+"\tpurge_mkeys -f -n -v\n"
+"\ttabdump -H -c -e -n -o outfile dumptype\n"
+"\n"
+"where,\n"
+"\t-x db_args* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"\tupdate_princ_encryption -f -n -v princ-pattern\n"
+"\tpurge_mkeys -f -n -v\n"
+"\ttabdump -H -c -e -n -o outfile dumptype\n"
+"\n"
+"სადაც,\n"
+"\t-x ბაზის_არგუმენტები* - ბაზის არგუმენტების ნებისმიერი რაოდენობა\n"
+"\t\t\tმარდაჭერილი არგუმენტების სანახავად მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:215
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:264
+msgid "while initializing Kerberos code"
+msgstr "kerberos-ის კოდის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:221
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:271
+msgid "while creating sub-command arguments"
+msgstr "ქვებრძანების არგუმენტის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:239
+msgid "while parsing command arguments"
+msgstr "ბრძანების არგუმენტების დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:245
+#: ../../src/kadmin/dbutil/kdb5_util.c:252
+msgid "while parsing command arguments\n"
+msgstr "ბრძანების არგუმენტების დამუშავებისას\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:263
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:295
+msgid "while setting default realm name"
+msgstr "ნაგულისხმები რეალმის სახელის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:302
+#, c-format
+msgid ": %s is an invalid enctype"
+msgstr ": %s არასწორი enctype-ა"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:276
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:311
+#, c-format
+msgid ": %s is an invalid mkeyVNO"
+msgstr ": %s არასწორი mkeyVNO -ია"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:319
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:435
+msgid "while retrieving configuration parameters"
+msgstr "კონფიგურაციის პარამეტრების მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:378
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:849
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1457
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:568
+msgid "while initializing database"
+msgstr "ბაზის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:395
+msgid "while retrieving master entry"
+msgstr "მთავარი ჩანაწერის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:414
+msgid "while calculated master key salt"
+msgstr "მთავარი გასაღების მარილის გამოთვლისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:446
+msgid "Warning: proceeding without master key"
+msgstr "გაფრთხილება: ვაგრძელებ მთავარი გასაღების გარეშე"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:464
+msgid "while seeding random number generator"
+msgstr "შემთხვევითი რიცხვების გენერატორის თესლის გადაცემისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:474
+#, c-format
+msgid "%s: Could not map log\n"
+msgstr "%s: ჟურნალის მიბმის შეცომა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:503
+msgid "while closing database"
+msgstr "ბაზის დახურვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:550
+#, c-format
+msgid "while fetching principal %s"
+msgstr "პრინციპალის (%s) გამოთხოვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:573
+msgid "while finding mkey"
+msgstr "mkey-ის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:598
+msgid "while setting changetime"
+msgstr "changetime-ის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:606
+#, c-format
+msgid "while saving principal %s"
+msgstr "პრინციპალის (%s) შენახვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:610
+#, c-format
+msgid "%s changed\n"
+msgstr "%s შეიცვალა\n"
+
+#: ../../src/kadmin/dbutil/tabdump.c:573
+#, c-format
+msgid "opening %s for writing"
+msgstr "%s-ის ჩასაწერად გახსნა"
+
+#: ../../src/kadmin/dbutil/tabdump.c:655
+msgid "performing tabular dump"
+msgstr "მიმდინარეობს ტაბულარული დამპი"
+
+#: ../../src/kadmin/ktutil/ktutil.c:73
+#, c-format
+msgid "%s: invalid arguments\n"
+msgstr "%s: არასწორი არგუმენტები\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:78
+msgid "while freeing ktlist"
+msgstr "ktlist-ის გათავისუფლებისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:89
+#, c-format
+msgid "%s: must specify keytab to read\n"
+msgstr "%s: წასაკითხი keytab -ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:94
+#, c-format
+msgid "while reading keytab \"%s\""
+msgstr "keytab-ის (%s) კითხვისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:101
+#, c-format
+msgid "%s: reading srvtabs is no longer supported\n"
+msgstr "%s: srvtabs -ების წაკითხვა მხარდაჭერილი აღარაა\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:112
+#, c-format
+msgid "%s: must specify keytab to write\n"
+msgstr "%s: ჩასაწერი keytab -ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:117
+#, c-format
+msgid "while writing keytab \"%s\""
+msgstr "keytab-ის \"%s\" ჩაწერისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:124
+#, c-format
+msgid "%s: writing srvtabs is no longer supported\n"
+msgstr "%s: srvtabs -ების ჩაწერა მხარდაჭერილი აღარაა\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:171
+#, c-format
+msgid ""
+"usage: %s (-key | -password) -p principal -k kvno -e enctype -f|-s salt\n"
+msgstr ""
+"გამოყენება: %s (-key | -პაროლი) -p პრინციპალი -k kvno -e enctype -f|-s "
+"მარილი\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:176
+#, c-format
+msgid "enctype must be specified if not using -f\n"
+msgstr "თუ -f -ს არ იყენებთ, enctype-ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:183
+msgid "while adding new entry"
+msgstr "ახალი ჩანაწერის დამატებისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:193
+#, c-format
+msgid "%s: must specify entry to delete\n"
+msgstr "%s: წასაშლელი ჩანაწერის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:198
+#, c-format
+msgid "while deleting entry %d"
+msgstr "%d ჩანაწერის წაშლისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:226
+#, c-format
+msgid "%s: usage: %s -t -k -e\n"
+msgstr "%s: გამოყენება: %s -t -k -e\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:265
+msgid "While converting enctype to string"
+msgstr "Enctype-ის სტრიქონად გარდაქმნისას"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:196
+#, c-format
+msgid "Password for %.1000s"
+msgstr "პაროლი %.1000s"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:214
+#, c-format
+msgid "Key for %s (hex): "
+msgstr "გასაღები %s -სთვის (თექვსმეტობითი): "
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:226
+#, c-format
+msgid "addent: Error reading key.\n"
+msgstr "addent: გასაღების წაკითხვის შეცდომა.\n"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:234
+#, c-format
+msgid "addent: Illegal character in key.\n"
+msgstr "addent: გასაღები დაუშვებელ სიმბოლოს შეიცავს.\n"
+
+#: ../../src/kadmin/server/auth_acl.c:240
+#, c-format
+msgid "%s: invalid restrictions: %s"
+msgstr "%s: არასწორი შეზღუდვა: %s"
+
+#: ../../src/kadmin/server/auth_acl.c:288
+#, c-format
+msgid "Unrecognized ACL operation '%c' in %s"
+msgstr "ACL -ის უცნობი ოპერაცია'%c' -ი %s-ში"
+
+#: ../../src/kadmin/server/auth_acl.c:296
+#, c-format
+msgid "Cannot parse client principal '%s'"
+msgstr "კლიენტის პრინციპალის (%s) დამუშავების შეცდომა"
+
+#: ../../src/kadmin/server/auth_acl.c:304
+#, c-format
+msgid "Cannot parse target principal '%s'"
+msgstr "სამიზნის პრინციპალის (%s) დამუშავების შეცდომა"
+
+#: ../../src/kadmin/server/auth_acl.c:400
+#, c-format
+msgid "%s while opening ACL file %s"
+msgstr "%s ACL ფაილის (%s) გახსნისას"
+
+#: ../../src/kadmin/server/auth_acl.c:403
+#, c-format
+msgid "Cannot open %s: %s"
+msgstr "%s-ის გახსნის შეცდომა: %s"
+
+#: ../../src/kadmin/server/auth_acl.c:419
+#: ../../src/kadmin/server/auth_acl.c:422
+#, c-format
+msgid "%s: syntax error at line %d <%.10s...>"
+msgstr "%s: სინტაქსის შეცდომა ხაზზე %d <%.10s...>"
+
+#: ../../src/kadmin/server/ipropd_svc.c:49
+#, c-format
+msgid "Unauthorized request: %s, client=%s, service=%s, addr=%s"
+msgstr "არაავტორიზებული მოთხოვნა: %s, კლიენტი=%s, სერვისი=%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:50
+#: ../../src/kadmin/server/ipropd_svc.c:224
+#, c-format
+msgid "Request: %s, %s, %s, client=%s, service=%s, addr=%s"
+msgstr "მოთხოვნა: %s, %s, %s, კლიენტი=%s, სერვისი=%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:164
+#: ../../src/kadmin/server/ipropd_svc.c:281
+#, c-format
+msgid "%s: server handle is NULL"
+msgstr "%s: სერვერის დამმუშავებელი ნულოვანია"
+
+#: ../../src/kadmin/server/ipropd_svc.c:174
+#: ../../src/kadmin/server/ipropd_svc.c:294
+#, c-format
+msgid "%s: setup_gss_names failed"
+msgstr "%s: setup_gss_names -ის შეცდომა"
+
+#: ../../src/kadmin/server/ipropd_svc.c:182
+#: ../../src/kadmin/server/ipropd_svc.c:303
+#, c-format
+msgid "%s: out of memory recording principal names"
+msgstr "%s: არასაკმარისი მეხსიერება პრინციპალის სახელების ჩაწერისას"
+
+#: ../../src/kadmin/server/ipropd_svc.c:207
+#, c-format
+msgid "%s; Incoming SerialNo=%lu; Outgoing SerialNo=%lu"
+msgstr "%s; შემომავალი SerialNo=%lu; გამავალი SerialNo=%lu"
+
+#: ../../src/kadmin/server/ipropd_svc.c:213
+#, c-format
+msgid "%s; Incoming SerialNo=%lu; Outgoing SerialNo=N/A"
+msgstr "%s; შემომავალი SerialNo=%lu; გამავალი SerialNo=N/A"
+
+#: ../../src/kadmin/server/ipropd_svc.c:324
+#, c-format
+msgid "%s: getclhoststr failed"
+msgstr "%s: getclhoststr -ის შეცდომა"
+
+#: ../../src/kadmin/server/ipropd_svc.c:346
+#, c-format
+msgid "%s: cannot construct kdb5 util dump string too long; out of memory"
+msgstr ""
+"%s kdb5 პროგრამის დამპის სტრიქონის აგების შეცდომა: ის ძალიან დიდია: "
+"არასაკმარისი მეხსიერება"
+
+#: ../../src/kadmin/server/ipropd_svc.c:366
+#, c-format
+msgid "%s: fork failed: %s"
+msgstr "%s: განტოტვის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:378
+#, c-format
+msgid "%s: popen failed: %s"
+msgstr "%s: popen -ის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:392
+#, c-format
+msgid "%s: pclose(popen) failed: %s"
+msgstr "%s: pclose(popen) -ის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:412
+#, c-format
+msgid "%s: exec failed: %s"
+msgstr "%s: შესრულების შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:428
+#, c-format
+msgid "Request: %s, spawned resync process %d, client=%s, service=%s, addr=%s"
+msgstr ""
+"მოთხოვნა: %s, გაჩენილი რესინქრონიზაციის პროცესი %d, კლიენტი=%s, სერვისი=%s, "
+"მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:490
+#: ../../src/kadmin/server/kadm_rpc_svc.c:299
+#, c-format
+msgid "check_rpcsec_auth: failed inquire_context, stat=%u"
+msgstr "check_rpcsec_auth: inquire_context-ის შეცდომა, სტატ=%u"
+
+#: ../../src/kadmin/server/ipropd_svc.c:520
+#: ../../src/kadmin/server/kadm_rpc_svc.c:328
+#, c-format
+msgid "bad service principal %.*s%s"
+msgstr "არასწორი სერვისის პრინციპალი %.*s%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:543
+#, c-format
+msgid "authentication attempt failed: %s, RPC authentication flavor %d"
+msgstr "ავთენტიკაციის მცდელობა წარუმატებელია: %s RPC ავთენტიკაციის ტიპი %d"
+
+#: ../../src/kadmin/server/ipropd_svc.c:577
+#, c-format
+msgid "RPC unknown request: %d (%s)"
+msgstr "RPC უცნობი მოთხოვნა: %d (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:585
+#, c-format
+msgid "RPC svc_getargs failed (%s)"
+msgstr "RPC svc_getargs -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:595
+#, c-format
+msgid "RPC svc_sendreply failed (%s)"
+msgstr "RPC svc_sendreply -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:601
+#, c-format
+msgid "RPC svc_freeargs failed (%s)"
+msgstr "RPC svc_freeargs -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/kadm_rpc_svc.c:349
+#, c-format
+msgid "gss_to_krb5_name: failed display_name status %d"
+msgstr "gss_to_krb5_name: display_name -ის არასწორი სტატუსი%d"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:82
+#, c-format
+msgid ""
+"Usage: kadmind -x db_args* -r realm -m -nofork -port port-number\n"
+"\t\t-proponly -p path-to-kdb5_util -F dump-file\n"
+"\t\t-K path-to-kprop -k kprop-port -P pid_file\n"
+"\n"
+"where,\n"
+"\t-x db_args* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"გამოყენება: kadmind -x ბაზის_არგუმენტები* -r რეალმი -m -nofork -"
+"port პორტის-ნომერი\n"
+"\t\t-proponly -p ბილიკი kdb5_util-მდე -F დამპის_ფაილი\n"
+"\t\t-K ბილიკი-kprop-მდე -k kprop-ის-პორტი -P pid_ფაილი\n"
+"\n"
+"სადაც,\n"
+"\t-x ბაზის_არგუმენტები* - ბაზის არგუმენტების ნებისმიერი რაოდენობა.\n"
+"\t\t\tთითოეული ბაზის მიერ მხარდაჭერილი არგუმენტების სანახავად იხილეთ მათი "
+"დოკუმენტაცია \n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:106
+#, c-format
+msgid "%s: %s while %s, aborting\n"
+msgstr "%s: %s-ი %s-სას, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:108
+#, c-format
+msgid "%s while %s, aborting\n"
+msgstr "%s-ი %s-სას, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:110
+#, c-format
+msgid "%s: %s, aborting\n"
+msgstr "%s: %s, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:111
+#, c-format
+msgid "%s, aborting"
+msgstr "%s, ავარიული დასასრული"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:278
+#, c-format
+msgid ""
+"WARNING! Forged/garbled request: %s, claimed client = %.*s%s, server = %.*s"
+"%s, addr = %s"
+msgstr ""
+"გაფრთხილება! ყალბი/შექმნილი მოთხოვნა: %s, ნამტკიცები კლიენტი = %.*s%s, "
+"სერვერი = %.*s%s, მისამართი = %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:284
+#, c-format
+msgid ""
+"WARNING! Forged/garbled request: %d, claimed client = %.*s%s, server = %.*s"
+"%s, addr = %s"
+msgstr ""
+"გაფრთხილება! ყალბი/შექმნილი მოთხოვნა: %d, ნამტკიცები კლიენტი = %.*s%s, "
+"სერვერი = %.*s%s, მისამართი = %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:298
+#, c-format
+msgid "Miscellaneous RPC error: %s, %s"
+msgstr "სხვადასხვა RPC შეცდომა: %s, %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:314
+#, c-format
+msgid "%s Cannot decode status %d"
+msgstr "%s სტატუსის გაშიფვრა შეუძლებელია %d"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:332
+#, c-format
+msgid "Authentication attempt failed: %s, GSS-API error strings are:"
+msgstr ""
+"ავთენტიკაციის მცდელობა წარუმატებელია: %s, GSS-API-ის შეცდომის სტრიქონებია:"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:337
+msgid " GSS-API error strings complete."
+msgstr " GSS-API -ის შეცდომის სრული სტრიქონები."
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:375
+#, c-format
+msgid "%s: cannot initialize. Not enough memory\n"
+msgstr "%s: ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:443
+#, c-format
+msgid "%s: %s while initializing context, aborting\n"
+msgstr "%s: %s კონტექსტის ინიციალიზაციისას. სამუშაოს დასრულება\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:454
+#: ../../src/kadmin/server/ovsec_kadmd.c:523
+msgid "initializing"
+msgstr "ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:458
+msgid "getting config parameters"
+msgstr "კონფიგურაციის პარამეტრების მიღება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:460
+msgid "Missing required realm configuration"
+msgstr "აკლია რეალმის კონფიგურაციის საჭირო პარამეტრები"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:462
+msgid "Missing required ACL file configuration"
+msgstr "აკლია ACL ფაილის აუცილებელი კონფიგურაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:464
+msgid "-proponly can only be used when iprop_enable is true"
+msgstr ""
+"-proponly -ის გამოყენება მხოლოდ მაშინ შეგიძლიათ, როცა iprop_enable ჭეშმარიტია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:470
+msgid "initializing network"
+msgstr "ქსელის ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:475
+msgid "Cannot build GSSAPI auth names"
+msgstr "GSSAPI-ის ავთენტიკაციის სახელების აგება შეუძლებელია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:479
+msgid "Cannot set up KDB keytab"
+msgstr "KDB Keytab-ის მორგების შეცდომა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:482
+msgid "Cannot set GSSAPI authentication names"
+msgstr "GSSAPI-ის ავთენტიკაციის სახელების დაყენება შეუძლებელია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:499
+msgid "Cannot initialize GSSAPI service name"
+msgstr "GSSAPI-ის სერვისის სახელის ინიციალიზაციის შეცდომა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:504
+msgid "initializing ACL file"
+msgstr "acl ფაილის ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:512
+msgid "spawning daemon process"
+msgstr "დემონის პროცესის გაშვება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:516
+msgid "creating PID file"
+msgstr "pid ფაილის შექმნა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:530
+msgid "mapping update log"
+msgstr "განახლების ჟურნალის მიბმა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:534
+#, c-format
+msgid "%s: create IPROP svc (PROG=%d, VERS=%d)\n"
+msgstr "%s: IPROP სერვისის შექმნა (პროგ=%d, ვერს=%d)\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:542
+msgid "starting"
+msgstr "გაშვება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1040
+#, c-format
+msgid "%s: starting...\n"
+msgstr "%s: გაშვება...\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:547
+msgid "finished, exiting"
+msgstr "დასასრული. გავდივარ"
+
+#: ../../src/kadmin/server/schpw.c:273
+#, c-format
+msgid "setpw request from %s by %.*s%s for %.*s%s: %s"
+msgstr "setpw მოთხოვნა %s-ი %.*s%s-სგან %.*s%s: %s-სთვის"
+
+#: ../../src/kadmin/server/schpw.c:278
+#, c-format
+msgid "chpw request from %s for %.*s%s: %s"
+msgstr "chpw მოთხოვნა %s-ი %.*s%s: %s-სთვის"
+
+#: ../../src/kadmin/server/schpw.c:446
+#, c-format
+msgid "chpw: Couldn't open admin keytab %s"
+msgstr "chpw: ადმინის keytab-ის გახსნის შეცდომა %s"
+
+#: ../../src/kadmin/server/server_stubs.c:396
+#, c-format
+msgid ""
+"Unauthorized request: %s, %.*s%s, client=%.*s%s, service=%.*s%s, addr=%s"
+msgstr ""
+"არაავტორიზებული მოთხოვნა: %s, %.*s%s, კლიენტი=%.*s%s, სერვისი=%.*s%s, "
+"მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:417
+#: ../../src/kadmin/server/server_stubs.c:695
+#: ../../src/kadmin/server/server_stubs.c:1570
+msgid "success"
+msgstr "წარმატება"
+
+#: ../../src/kadmin/server/server_stubs.c:427
+#, c-format
+msgid "Request: %s, %.*s%s, %s, client=%.*s%s, service=%.*s%s, addr=%s"
+msgstr "მოთხოვნა: %s, %.*s%s, %s, კლიენტი=%.*s%s, სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:675
+#, c-format
+msgid ""
+"Unauthorized request: kadm5_rename_principal, %.*s%s to %.*s%s, client=%.*s"
+"%s, service=%.*s%s, addr=%s"
+msgstr ""
+"არაავტორიზებული მოთხოვნა: kadm5_rename_principal, %.*s%s to %.*s%s, კლიენტი="
+"%.*s%s, სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:690
+#, c-format
+msgid ""
+"Request: kadm5_rename_principal, %.*s%s to %.*s%s, %s, client=%.*s%s, "
+"service=%.*s%s, addr=%s"
+msgstr ""
+"მოთხოვნა: kadm5_rename_principal, %.*s%s to %.*s%s, %s, კლიენტი=%.*s%s, "
+"სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:1566
+#, c-format
+msgid ""
+"Request: kadm5_init, %.*s%s, %s, client=%.*s%s, service=%.*s%s, addr=%s, "
+"vers=%d, flavor=%d"
+msgstr ""
+"მოთხოვნა: kadm5_init, %.*s%s, %s, კლიენტი=%.*s%s, სერვისი=%.*s%s, მისამართი="
+"%s, vers=%d, ტიპი=%d"
+
+#: ../../src/kdc/do_as_req.c:277
+#, c-format
+msgid "AS_REQ : handle_authdata (%d)"
+msgstr "AS_REQ : handle_authdata (%d)"
+
+#: ../../src/kdc/do_tgs_req.c:581
+msgid "not checking transit path"
+msgstr "ტრანზიტის ბილიკი არ შემოწმდება"
+
+#: ../../src/kdc/do_tgs_req.c:598
+#, c-format
+msgid "TGS_REQ : handle_authdata (%d)"
+msgstr "TGS_REQ : handle_authdata (%d)"
+
+#: ../../src/kdc/fast_util.c:56
+#, c-format
+msgid "%s while handling ap-request armor"
+msgstr "%s ap-request -ის ჯავშნის დამუშავებისას"
+
+#: ../../src/kdc/fast_util.c:65
+msgid "ap-request armor for something other than the local TGS"
+msgstr "ap-request -ის ჯავშანი რამისთვის, TGS-ის გარდა"
+
+#: ../../src/kdc/fast_util.c:74
+msgid "ap-request armor without subkey"
+msgstr "ap-request -ის ჯავშანი subkey-ის გარეშე"
+
+#: ../../src/kdc/fast_util.c:162
+msgid "Ap-request armor not permitted with TGS"
+msgstr "Ap-request -ის ჯავშანი ნებადაურთველია TGS-თან ერთად"
+
+#: ../../src/kdc/fast_util.c:169
+#, c-format
+msgid "Unknown FAST armor type %d"
+msgstr "უცნობი FAST ჯავშნის ტიპი %d"
+
+#: ../../src/kdc/fast_util.c:183
+msgid "No armor key but FAST armored request present"
+msgstr "ჯავშნის გასაღები არ არსებობს, მაგრამ FAST დაჯავშნული მოთხოვნა - კი"
+
+#: ../../src/kdc/fast_util.c:218
+msgid "FAST req_checksum invalid; request modified"
+msgstr "FAST req_checksum არასწორია. მოთხოვნა შეიცვალა"
+
+#: ../../src/kdc/fast_util.c:224
+msgid "Unkeyed checksum used in fast_req"
+msgstr "Fast_req-ში გამოყენებული საკონტროლო ჯამი გასაღების გარეშეა"
+
+#: ../../src/kdc/kdc_audit.c:110
+#, c-format
+msgid "audit plugin %s failed to open. error=%i"
+msgstr "აუდიტის დამატების %s გახსნა შეუძლებელია. შეცდომა=%i"
+
+#: ../../src/kdc/kdc_authdata.c:78
+#, c-format
+msgid "while loading authdata module %s"
+msgstr "authdata მოდულის (%s) ჩატვირთვისას"
+
+#: ../../src/kdc/kdc_log.c:83
+#, c-format
+msgid "AS_REQ (%s) %s: ISSUE: authtime %u, %s, %s for %s"
+msgstr "AS_REQ (%s) %s: პრობლემა: authtime %u, %s, %s-ი %s-სთვის"
+
+#: ../../src/kdc/kdc_log.c:91
+#, c-format
+msgid "AS_REQ (%s) %s: %s: %s for %s%s%s"
+msgstr "AS_REQ (%s) %s: %s: %s-ი %s%s%s-თვის"
+
+#: ../../src/kdc/kdc_log.c:153
+#, c-format
+msgid "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s for %s%s%s"
+msgstr "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s -ი %s%s%s-თვის"
+
+#: ../../src/kdc/kdc_log.c:162
+#, c-format
+msgid "... PROTOCOL-TRANSITION s4u-client=%s"
+msgstr "... PROTOCOL-TRANSITION s4u-client=%s"
+
+#: ../../src/kdc/kdc_log.c:166
+#, c-format
+msgid "... CONSTRAINED-DELEGATION s4u-client=%s"
+msgstr "... CONSTRAINED-DELEGATION s4u-client=%s"
+
+#: ../../src/kdc/kdc_log.c:170
+#, c-format
+msgid "TGS_REQ %s: %s: authtime %u, %s for %s, 2nd tkt client %s"
+msgstr "TGS_REQ %s: %s: authtime %u, %s for %s, მეორე ბილეთის კლიენტი %s"
+
+#: ../../src/kdc/kdc_log.c:203
+#, c-format
+msgid "bad realm transit path from '%s' to '%s' via '%.*s%s'"
+msgstr "არასწორი რეალმის გადაცემის ბილიკი '%s'-დან '%s'-მდე '%.*s%s'-ის გავლით"
+
+#: ../../src/kdc/kdc_log.c:209
+#, c-format
+msgid "unexpected error checking transit from '%s' to '%s' via '%.*s%s': %s"
+msgstr ""
+"შეცდომა გადაცემის შემოწმებისას: '%s' -ი '%s' -მდე '%.*s%s': %s-ის გავლით"
+
+#: ../../src/kdc/kdc_log.c:227
+msgid "TGS_REQ: issuing alternate <un-unparsable> TGT"
+msgstr "TGS_REQ: გამოიცემა ალტერნატიული <დაუმუშავებლადი> TGT"
+
+#: ../../src/kdc/kdc_log.c:230
+#, c-format
+msgid "TGS_REQ: issuing TGT %s"
+msgstr "TGS_REQ: გამოცემა: TGT %s"
+
+#: ../../src/kdc/kdc_preauth.c:215
+#, c-format
+msgid "preauth %s failed to initialize: %s"
+msgstr "პრეავტორიზაციის (%s) ინიციალიზაციის შეცდომა: %s"
+
+#: ../../src/kdc/kdc_preauth.c:226
+#, c-format
+msgid "preauth %s failed to setup loop: %s"
+msgstr "პრეავტორიზაციის (%s) შეცდომა მარყუჟის აწყობისას: %s"
+
+#: ../../src/kdc/kdc_preauth.c:903
+#, c-format
+msgid "%spreauth required but hint list is empty"
+msgstr "%sპრეავტორიზაცია აუცილებელია, მაგრამ მითითებების სია ცარიელია"
+
+#: ../../src/kdc/kdc_preauth_ec.c:74
+msgid "Encrypted Challenge used outside of FAST tunnel"
+msgstr "დაშიფრული გამოწვევა FAST გვირაბის გარეთ გამოიყენება"
+
+#: ../../src/kdc/kdc_preauth_ec.c:117
+msgid "Incorrect password in encrypted challenge"
+msgstr "დაშიფრული გამოწვევის არასწორი პაროლი"
+
+#: ../../src/kdc/kdc_util.c:182
+msgid "TGS_REQ: SESSION KEY or MUTUAL"
+msgstr "TGS_REQ: SESSION KEY ან MUTUAL"
+
+#: ../../src/kdc/kdc_util.c:380
+#, c-format
+msgid "TGS_REQ: UNKNOWN SERVER: server='%s'"
+msgstr "TGS_REQ: უცნობი სერვერი: სერვერი='%s'"
+
+#: ../../src/kdc/kdc_util.c:842
+#, c-format
+msgid "Required auth indicators not present in ticket: %s"
+msgstr "ავთენტიკაციის აუცილებელი ინდიკატორები არ არსებობს ბილეთში: %s"
+
+#: ../../src/kdc/main.c:225
+#, c-format
+msgid "Requested master password enctype %s in %s is DEPRECATED!\n"
+msgstr "მოთხოვნილი მთავარი პაროლის დაშიფვრის ტიპი %s-ი %s-ში მოძველებულია!\n"
+
+#: ../../src/kdc/main.c:241
+#, c-format
+msgid "while getting context for realm %s"
+msgstr "რეალმისთვისთვის (%s) შემცველობის მიღებისას"
+
+#: ../../src/kdc/main.c:348
+#, c-format
+msgid "while setting default realm to %s"
+msgstr "ნაგულისხმები რეალმის %s-ზე დაყენებისას"
+
+#: ../../src/kdc/main.c:356
+#, c-format
+msgid "while initializing database for realm %s"
+msgstr "რეალმისთვის (%s) ბაზის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:365
+#, c-format
+msgid "while setting up master key name %s for realm %s"
+msgstr "მთავარი გასაღების სახელის (%s) რეალმისთვის (%s) მორგებისას"
+
+#: ../../src/kdc/main.c:378
+#, c-format
+msgid "while fetching master key %s for realm %s"
+msgstr "მთავარი გასაღების (%s) რეალმისთვის (%s) გამოთხოვისას"
+
+#: ../../src/kdc/main.c:387
+#, c-format
+msgid "Stash file %s uses DEPRECATED enctype %s!\n"
+msgstr "Stash ფაილი %s მოძველებულ enctype %s-ს იყენებს!\n"
+
+#: ../../src/kdc/main.c:394
+#, c-format
+msgid "while fetching master keys list for realm %s"
+msgstr "რეალმისთვის (%s) მთავარი გასაღებების სიის მიღებისას"
+
+#: ../../src/kdc/main.c:403
+#, c-format
+msgid "while resolving kdb keytab for realm %s"
+msgstr "რეალმისთვის (%s) kdb keytab-ის ამოხსნისას"
+
+#: ../../src/kdc/main.c:412
+#, c-format
+msgid "while building TGS name for realm %s"
+msgstr "რეალმისტვის (%s) TGS -ის სახელის აგებისას"
+
+#: ../../src/kdc/main.c:502
+#, c-format
+msgid "creating %d worker processes"
+msgstr "%d დამხმარე პროცესის შექმნა"
+
+#: ../../src/kdc/main.c:512
+msgid "Unable to reinitialize main loop"
+msgstr "მთავარი მარყუჟის თავიდან ინიციალიზაცია შეუძლებელია"
+
+#: ../../src/kdc/main.c:517
+#, c-format
+msgid "Unable to initialize signal handlers in pid %d"
+msgstr "PID-ში %d სიგნალების დამმუშავებლის ინიციალიზაციის შეცდომა"
+
+#: ../../src/kdc/main.c:547
+#, c-format
+msgid "worker %ld exited with status %d"
+msgstr "დამხმარე პროცესმა %ld მუშაობა სტატუსით %d დაასრულა"
+
+#: ../../src/kdc/main.c:571
+#, c-format
+msgid "signal %d received in supervisor"
+msgstr "სიგნალი %d მიღებულია სუპერვაიზორში"
+
+#: ../../src/kdc/main.c:583
+#, c-format
+msgid ""
+"usage: %s -x db_args* -d dbpathname -r dbrealmname\n"
+"\t\t-T time_offset -m -k masterenctype\n"
+"\t\t-M masterkeyname -p port -P pid_file\n"
+"\t\t-n -w numworkers /\n"
+"\n"
+"where,\n"
+"\t-x db_args* - Any number of database specific arguments.\n"
+"\t\t\tLook at each database module documentation for \t\t\tsupported "
+"arguments\n"
+msgstr ""
+"გამოყენება: %s -x ბაზის_არგუმენტები* -d ბაზისბილიკისსახელი -r "
+"ბაზისნამდვილისახელი\n"
+"\t\t-T დროის_წანაცვლება -m -k მთავარიდაშიფვრისტიპი\n"
+"\t\t-M მთავარიგასაღებისსახელი -p პორტი -P pid_ფაილი\n"
+"\t\t-n -w დამხმ_პროცეს_რაოდენობა /\n"
+"\n"
+"სადაც,\n"
+"\t-x ბაზის_არგუმენტები* - ბაზის არგუმენტების ნებისმიერი რაოდენობა\n"
+"\t\t\tმხარდაჭერილი არგუმენტების სიისთვის \t\t\tბაზის დოკუმენტაციას მიმართეთ\n"
+
+#: ../../src/kdc/main.c:658 ../../src/kdc/main.c:665 ../../src/kdc/main.c:780
+#, c-format
+msgid " KDC cannot initialize. Not enough memory\n"
+msgstr " KDC-ის ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:684 ../../src/kdc/main.c:727 ../../src/kdc/main.c:738
+#, c-format
+msgid "%s: KDC cannot initialize. Not enough memory\n"
+msgstr "%s: KDC-ის ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:704 ../../src/kdc/main.c:817
+#, c-format
+msgid "%s: cannot initialize realm %s - see log file for details\n"
+msgstr ""
+"%s: რეალმის %s ინიციალიზაცია შეუძლებელია- დეტალებისთვის იხილეთ ჟურნალის "
+"ფაილი\n"
+
+#: ../../src/kdc/main.c:715
+#, c-format
+msgid "%s: cannot initialize realm %s. Not enough memory\n"
+msgstr "%s: რეალმის (%s) ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:766
+#, c-format
+msgid "invalid enctype %s"
+msgstr "არასწორი enctype %s"
+
+#: ../../src/kdc/main.c:805
+msgid "while attempting to retrieve default realm"
+msgstr "ნაგულისხმები რეალმის მიღების მცდელობისას"
+
+#: ../../src/kdc/main.c:807
+#, c-format
+msgid "%s: %s, attempting to retrieve default realm\n"
+msgstr "%s: %s, ნაგულისხმები რეალმის მიღების მცდელობა\n"
+
+#: ../../src/kdc/main.c:915
+#, c-format
+msgid "%s: cannot get memory for realm list\n"
+msgstr "%s: რეალმის სიისთვის მეხსიერების მიღების შეცდომა\n"
+
+#: ../../src/kdc/main.c:950
+msgid "while initializing lookaside cache"
+msgstr "გვერდზე გახედვის ქეშის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:958
+msgid "while creating main loop"
+msgstr "მთავარი მარყუჟის შექმნისას"
+
+#: ../../src/kdc/main.c:967
+msgid "while loading KDC policy plugin"
+msgstr "kdc-ის პოლიტიკის დამატების ჩატვირთვისას"
+
+#: ../../src/kdc/main.c:992
+msgid "while initializing signal handlers"
+msgstr "სიგნალის დამმუშავებლების ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:1000
+msgid "while initializing network"
+msgstr "ქსელის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:1010
+msgid "while detaching from tty"
+msgstr "tty-დან მოხსნისას"
+
+#: ../../src/kdc/main.c:1016
+msgid "while creating PID file"
+msgstr "pid ფაილის შექმნისას"
+
+#: ../../src/kdc/main.c:1024
+msgid "creating worker processes"
+msgstr "მიმდინარეობს დამხმარე პროცესების შექმნა"
+
+#: ../../src/kdc/main.c:1034
+msgid "while loading audit plugin module(s)"
+msgstr "აუდიტის დამატების მოდულების ჩატვირთვისას"
+
+#: ../../src/kdc/main.c:1038
+msgid "commencing operation"
+msgstr "ოპერაციის დასაწყისი"
+
+#: ../../src/kdc/main.c:1046
+msgid "shutting down"
+msgstr "მიმდინარეობს გამორთვა"
+
+#: ../../src/kdc/policy.c:230
+#, c-format
+msgid "while loading policy module %s"
+msgstr "პოლიტიკის მოდულის (%s) ჩატვირთვისას"
+
+#: ../../src/kprop/kprop.c:85
+#, c-format
+msgid ""
+"\n"
+"Usage: %s -r realm -f file -d -P port -s keytab replica_host\n"
+"\n"
+msgstr ""
+"\n"
+"გამოყენება: %s -r რეალმი -f ფაილი -d -P პორტი -s keytab "
+"რეპლიკის_ჰოსტი\n"
+"\n"
+
+#: ../../src/kprop/kprop.c:115
+#, c-format
+msgid "Database propagation to %s: SUCCEEDED\n"
+msgstr "ბაზის %s-მდე გავრცელება: წარმატებულია\n"
+
+#: ../../src/kprop/kprop.c:176
+msgid "while setting client principal name"
+msgstr "კლიენტის პრინციპალის სახელის დაყენებისას"
+
+#: ../../src/kprop/kprop.c:185
+msgid "while setting server principal name"
+msgstr "სერვერის პრინციპალის სახელის დაყენებისას"
+
+#: ../../src/kprop/kprop.c:198
+msgid "while resolving keytab"
+msgstr "keytab-ის ამოხსნისას"
+
+#: ../../src/kprop/kprop.c:206
+msgid "while getting initial credentials\n"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღებისას\n"
+
+#: ../../src/kprop/kprop.c:242
+msgid "while creating socket"
+msgstr "სოკეტის შეერთებისას"
+
+#: ../../src/kprop/kprop.c:262
+msgid "while connecting to server"
+msgstr "სერვერთან მიერთებისას"
+
+#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1195
+msgid "while getting local socket address"
+msgstr "ლოკალური სოკეტის მისამართის მიღებისას"
+
+#: ../../src/kprop/kprop.c:274
+msgid "while converting local address"
+msgstr "ლოკალური მისამართის გარდაქმნისას"
+
+#: ../../src/kprop/kprop.c:296
+msgid "in krb5_auth_con_setaddrs"
+msgstr "krb5_auth_con_setaddrs-ში"
+
+#: ../../src/kprop/kprop.c:304
+msgid "while authenticating to server"
+msgstr "სერვერთან ავთენტიკაციისას"
+
+#: ../../src/kprop/kprop.c:308 ../../src/kprop/kprop.c:506
+#: ../../src/kprop/kpropd.c:1515
+#, c-format
+msgid "Generic remote error: %s\n"
+msgstr "ზოგადი დაშორებული შეცდომა: %s\n"
+
+#: ../../src/kprop/kprop.c:314 ../../src/kprop/kprop.c:512
+msgid "signalled from server"
+msgstr "სიგნალი სერვერიდან"
+
+#: ../../src/kprop/kprop.c:316 ../../src/kprop/kprop.c:514
+#, c-format
+msgid "Error text from server: %s\n"
+msgstr "შეცდომის ტექსტი სერვერიდან: %s\n"
+
+#: ../../src/kprop/kprop.c:344
+#, c-format
+msgid "allocating database file name '%s'"
+msgstr "ბაზის ფაილის სახელის ('%s') გამოყოფა"
+
+#: ../../src/kprop/kprop.c:350
+#, c-format
+msgid "while trying to open %s"
+msgstr "%s-ის გახსნის მცდელობისას"
+
+#: ../../src/kprop/kprop.c:357
+msgid "database locked"
+msgstr "ბაზა დაბლოკილია"
+
+#: ../../src/kprop/kprop.c:360 ../../src/kprop/kpropd.c:552
+#, c-format
+msgid "while trying to lock '%s'"
+msgstr "'%s'-ის დაბლოკვისას"
+
+#: ../../src/kprop/kprop.c:364 ../../src/kprop/kprop.c:372
+#, c-format
+msgid "while trying to stat %s"
+msgstr "%s-ის აღმოჩენის მცდელობისას"
+
+#: ../../src/kprop/kprop.c:368
+msgid "while trying to malloc data_ok_fn"
+msgstr "data_ok_fn-ის malloc-ის მცდელობიას"
+
+#: ../../src/kprop/kprop.c:377
+#, c-format
+msgid "'%s' more recent than '%s'."
+msgstr "'%s' უფრო ახალია, ვიდრე '%s'."
+
+#: ../../src/kprop/kprop.c:393
+#, c-format
+msgid "while unlocking database '%s'"
+msgstr "ბაზის ('%s') განბლოკვისას"
+
+#: ../../src/kprop/kprop.c:425 ../../src/kprop/kprop.c:426
+msgid "while encoding database size"
+msgstr "ბაზის ზომის დაშიფვრისას"
+
+#: ../../src/kprop/kprop.c:434
+msgid "while sending database size"
+msgstr "ბაზის ზომის გაგზავნისას"
+
+#: ../../src/kprop/kprop.c:444
+msgid "while allocating i_vector"
+msgstr "i_vector-ის გამოყოფისას"
+
+#: ../../src/kprop/kprop.c:467
+#, c-format
+msgid "while sending database block starting at %<PRIu64>"
+msgstr "ბაზის ბლოკის, რომელიც %<PRIu64>-ზე იწყება, გაგზავნისას"
+
+#: ../../src/kprop/kprop.c:477
+msgid "Premature EOF found for database file!"
+msgstr "ბაზის ფაილში აღმოჩენილია ნაადრევი EOF!"
+
+#: ../../src/kprop/kprop.c:490
+msgid "while reading response from server"
+msgstr "შეცდომა სერვერის პასუხის წაკიხვისას"
+
+#: ../../src/kprop/kprop.c:501
+msgid "while decoding error response from server"
+msgstr "სერვერის შეცდომის შეტყობინების დეკოდირებისას"
+
+#: ../../src/kprop/kprop.c:531
+msgid "malformed sent database size message"
+msgstr "არასწორად გაგზავნილი ბაზის ზომის შეტყობინება"
+
+#: ../../src/kprop/kprop.c:535
+#, c-format
+msgid "Kpropd sent database size %<PRIu64>, expecting %<PRIu64>"
+msgstr "Kpropd გაგზავნილი ბაზის ზომა %<PRIu64>, მოველოდი %<PRIu64>"
+
+#: ../../src/kprop/kprop.c:581
+msgid "while allocating filename for update_last_prop_file"
+msgstr "update_last_prop_file-სთვის ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kprop/kprop.c:586
+#, c-format
+msgid "while creating 'last_prop' file, '%s'"
+msgstr "'last_prop' ფაილის შექმნისას, '%s'"
+
+#: ../../src/kprop/kpropd.c:171
+#, c-format
+msgid ""
+"\n"
+"Usage: %s -r realm -s keytab -d -D -S\n"
+"\t-f replica_file -F kerberos_db_file \n"
+"\t-p kdb5_util_pathname -x db_args* -P port\n"
+"\t-a acl_file -A admin_server --pid-file=pid_file\n"
+msgstr ""
+"\n"
+"გამოყენება: %s -r რეალმი -s keytab -d -D -S\n"
+"\t-f რეპლიკის_ფაილი -F kerberos_ის_ბაზის_ფაილი \n"
+"\t-p kdb5_პროგრამის_ბილიკი -x ბაზის_არგუმენტები* -P პორტი\n"
+"\t-a acl_ფაილი -A ადმინ_სერვერი --pid-file=pid_ფაილი\n"
+
+#: ../../src/kprop/kpropd.c:231
+#, c-format
+msgid "Killing fullprop child (%d)\n"
+msgstr "Fullprop შვილის მოკვლა (%d)\n"
+
+#: ../../src/kprop/kpropd.c:260
+msgid "while checking if stdin is a socket"
+msgstr "შემოწმებისას, წარმოადგენს თუ არა stdin სოკეტს"
+
+#: ../../src/kprop/kpropd.c:278
+#, c-format
+msgid "ready\n"
+msgstr "მზადაა\n"
+
+#: ../../src/kprop/kpropd.c:284
+#, c-format
+msgid "Could not write pid file %s: %s"
+msgstr "PID ფაილში (%s) ჩაწერის შეცდომა: %s"
+
+#: ../../src/kprop/kpropd.c:296
+#, c-format
+msgid "Could not open /dev/null: %s"
+msgstr "/dev/null-ის გასნის შეცდომა: %s"
+
+#: ../../src/kprop/kpropd.c:303
+#, c-format
+msgid "Could not dup the inetd socket: %s"
+msgstr "შეცდომა inetd-ის სოკეტის გახნისას: %s"
+
+#: ../../src/kprop/kpropd.c:338 ../../src/kprop/kpropd.c:351
+msgid "do_iprop failed.\n"
+msgstr "do_iprop -ის შეცდომა.\n"
+
+#: ../../src/kprop/kpropd.c:390
+#, c-format
+msgid "getaddrinfo: %s\n"
+msgstr "getaddrinfo: %s\n"
+
+#: ../../src/kprop/kpropd.c:396
+msgid "while obtaining socket"
+msgstr "სოკეტის მიღებისას"
+
+#: ../../src/kprop/kpropd.c:402
+msgid "while setting SO_REUSEADDR option"
+msgstr "პარამეტრის SO_REUSEADDR დაყენებისას"
+
+#: ../../src/kprop/kpropd.c:410
+msgid "while unsetting IPV6_V6ONLY option"
+msgstr "პარამეტრის IPV6_V6ONLY დაყენებისას"
+
+#: ../../src/kprop/kpropd.c:415
+msgid "while binding listener socket"
+msgstr "მომსმენ სოკეტთან მიბმისას"
+
+#: ../../src/kprop/kpropd.c:426
+#, c-format
+msgid "waiting for a kprop connection\n"
+msgstr "kprop მიერთების მოლოდინი\n"
+
+#: ../../src/kprop/kpropd.c:432
+msgid "while accepting connection"
+msgstr "შერთების მიღებისას"
+
+#: ../../src/kprop/kpropd.c:438
+msgid "while forking"
+msgstr "განტოტვისას"
+
+#: ../../src/kprop/kpropd.c:453
+#, c-format
+msgid "waitpid() failed to wait for doit() (%d %s)\n"
+msgstr "waitpid() ვერ დაელოდა doit()-ს (%d %s)\n"
+
+#: ../../src/kprop/kpropd.c:457
+msgid "while waiting to receive database"
+msgstr "ბაზის მიღების მოლოდინისას"
+
+#: ../../src/kprop/kpropd.c:461
+#, c-format
+msgid "Database load process for full propagation completed.\n"
+msgstr "ბაზის ჩატვირთვის პროცესი სრულად გავრცელებისთვის დასრულებულია.\n"
+
+#: ../../src/kprop/kpropd.c:499
+#, c-format
+msgid ""
+"%s: Standard input does not appear to be a network socket.\n"
+"\t(Not run from inetd, and missing the -S option?)\n"
+msgstr ""
+"%s: სტანდარტული შეყვანა ქსელის სოკეტს არ წააგავს.\n"
+"\t(არაა გაშვებული inetd-დან და აკლია -S პარამეტრი?)\n"
+
+#: ../../src/kprop/kpropd.c:512
+msgid "while attempting setsockopt (SO_KEEPALIVE)"
+msgstr "setsockopt (SO_KEEPALIVE)-ის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:517
+#, c-format
+msgid "Connection from %s"
+msgstr "შეერთება %s -დან"
+
+#: ../../src/kprop/kpropd.c:537
+#, c-format
+msgid "Rejected connection from unauthorized principal %s\n"
+msgstr "მიერთება უარყოფილია არაავტორიზებული პრინციპალისთვის %s\n"
+
+#: ../../src/kprop/kpropd.c:541
+#, c-format
+msgid "Rejected connection from unauthorized principal %s"
+msgstr "მიერთება უარყოფილია არაავტორიზებული პრინციპალისთვის %s"
+
+#: ../../src/kprop/kpropd.c:558
+#, c-format
+msgid "while opening database file, '%s'"
+msgstr "ბაზის ფაილის, '%s', გახსნისას"
+
+#: ../../src/kprop/kpropd.c:564
+#, c-format
+msgid "while renaming %s to %s"
+msgstr "სახელის \"%s\"-დან \"%s\"-მდე გადარქმევისას"
+
+#: ../../src/kprop/kpropd.c:570
+#, c-format
+msgid "while downgrading lock on '%s'"
+msgstr "'%s'-ზე ბლოკის დაქვეითებისას"
+
+#: ../../src/kprop/kpropd.c:577
+#, c-format
+msgid "while unlocking '%s'"
+msgstr "'%s'-ის განბლოკვისას"
+
+#: ../../src/kprop/kpropd.c:589
+msgid "while sending # of received bytes"
+msgstr "მიღებული ბაიტების #-ის გაგზავნისას"
+
+#: ../../src/kprop/kpropd.c:595
+msgid "while trying to close database file"
+msgstr "ბაზის ფაილის დახურვის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:650
+#, c-format
+msgid "Incremental propagation enabled\n"
+msgstr "ინკრემენტული გავრცელება ჩართულია\n"
+
+#: ../../src/kprop/kpropd.c:659
+#, c-format
+msgid "%s: unable to get kiprop host based service name for realm %s\n"
+msgstr ""
+"%s: რეალმისთვის (%s) kipropz-ის ჰოსტზე ბაზირებული სერვისის სახელის მიღების "
+"შეცდომა\n"
+
+#: ../../src/kprop/kpropd.c:669
+msgid "while trying to construct host service principal"
+msgstr "ჰოსტის სერვისის პრინციპალის აშენების მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:686
+#, c-format
+msgid "Initializing kadm5 as client %s\n"
+msgstr "Kadm5-ის, როგორც %s კლიენტის ინიციალიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:700
+#, c-format
+msgid "kadm5 initialization failed!\n"
+msgstr "kadm5 -ის ინიციალიზაციის შეცდომა!\n"
+
+#: ../../src/kprop/kpropd.c:709
+msgid "while attempting to connect to primary KDC ... retrying"
+msgstr "ძირითად KDC-სთან მიერთების მცდელობისას ... თავიდან ცდა"
+
+#: ../../src/kprop/kpropd.c:713
+#, c-format
+msgid "Sleeping %d seconds to re-initialize kadm5 (RPC ERROR)\n"
+msgstr "%d -წამიანი ძილი kadm5-ის რეინიციალიზაციისთვის (RPC-ის შეცდომა)\n"
+
+#: ../../src/kprop/kpropd.c:729
+#, c-format
+msgid "while initializing %s interface, retrying"
+msgstr "%s ინტერფეისის ინიციალიზაციისას. თავიდან ცდა"
+
+#: ../../src/kprop/kpropd.c:733
+#, c-format
+msgid "Sleeping %d seconds to re-initialize kadm5 (krb5kdc not running?)\n"
+msgstr ""
+"%d -წამიანი ძილი kadm5-ის რეინიციალიზაციისთვის (გაშვებულია თუ არა krb4kdc?)\n"
+
+#: ../../src/kprop/kpropd.c:743
+#, c-format
+msgid "kadm5 initialization succeeded\n"
+msgstr "kadm5 -ის ინიციალიზაცია წარმატებულია\n"
+
+#: ../../src/kprop/kpropd.c:765
+msgid "reading update log header"
+msgstr "განახლების ჟურნალის თავსართის წაკთხვა"
+
+#: ../../src/kprop/kpropd.c:776
+#, c-format
+msgid "Calling iprop_get_updates_1 (sno=%u sec=%u usec=%u)\n"
+msgstr ""
+"მიმდინარეობს iprop_get_updates_1-ის გამოძახება (sno=%u sec=%u usec=%u)\n"
+
+#: ../../src/kprop/kpropd.c:786
+msgid "iprop_get_updates call failed"
+msgstr "iprop_get_updates -ის გამოძახების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:792
+#, c-format
+msgid "Reinitializing iprop because get updates failed\n"
+msgstr ""
+"განახლებების მიღების შეცდომის გამო მიმდინარეობს iprop-ის რეინიციალიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:813
+#, c-format
+msgid "Still waiting for full resync\n"
+msgstr "სრულ რესინქრონიზაციას ჯერ კიდევ ველოდები\n"
+
+#: ../../src/kprop/kpropd.c:818
+#, c-format
+msgid "Full resync needed\n"
+msgstr "საჭიროა სრული რესინქრონიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:819
+msgid "kpropd: Full resync needed."
+msgstr "kpropd: საჭიროა სრული რესინქრონიზაცია."
+
+#: ../../src/kprop/kpropd.c:824
+msgid "iprop_full_resync call failed"
+msgstr "iprop_full_resync -ის გამოძახების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:835
+#, c-format
+msgid "Full resync request granted\n"
+msgstr "სრული ხელახალი სინქრონიზაციის მოთხოვნა დაკმაყოფილებულია\n"
+
+#: ../../src/kprop/kpropd.c:836
+msgid "Full resync request granted."
+msgstr "სრული ხელახალი სინქრონიზაციის მოთხოვნა დაკმაყოფილებულია."
+
+#: ../../src/kprop/kpropd.c:845
+#, c-format
+msgid "Exponential backoff\n"
+msgstr "ექსპონენტური დაბრუნება\n"
+
+#: ../../src/kprop/kpropd.c:851
+#, c-format
+msgid "Full resync permission denied\n"
+msgstr "სრული რესინქრონიზაციის წვდომა აკრძალულია\n"
+
+#: ../../src/kprop/kpropd.c:852
+msgid "Full resync, permission denied."
+msgstr "სრული რესინქრონიზაცია, წვდომა აკრძალულია."
+
+#: ../../src/kprop/kpropd.c:857
+#, c-format
+msgid "Full resync error from primary\n"
+msgstr ""
+"სრული რესინქრონიზაციის შეცდომა ძირითადიდან\n"
+"\n"
+
+#: ../../src/kprop/kpropd.c:858
+msgid " Full resync, error returned from primary KDC."
+msgstr " სრული რესინქრონიზაცია, ძირითადმა KDC-მა შეცდომა დააბრუნა."
+
+#: ../../src/kprop/kpropd.c:866
+#, c-format
+msgid "Full resync invalid result from primary\n"
+msgstr "სრული რექსინქრონიზაცია. არასწორი პასუხი ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:868
+msgid "Full resync, invalid return from primary KDC."
+msgstr "სრული რესინქრონიზაცია. არასწორი პასუხი ძირითადი KDC-დან."
+
+#: ../../src/kprop/kpropd.c:884
+#, c-format
+msgid "Got incremental updates (sno=%u sec=%u usec=%u)\n"
+msgstr "მიღებულია ინკრემენტული განახლებები (sno=%u sec=%u usec=%u)\n"
+
+#: ../../src/kprop/kpropd.c:896
+#, c-format
+msgid "ulog_replay failed (%s), updates not registered\n"
+msgstr "ulog_replay -ის შეცდომა (%s), განახლებები არ დარეგისტრირებულა\n"
+
+#: ../../src/kprop/kpropd.c:899
+#, c-format
+msgid "ulog_replay failed (%s), updates not registered."
+msgstr "ulog_replay -ის შეცდომა (%s), განახლებები არ დარეგისტრირებულა."
+
+#: ../../src/kprop/kpropd.c:908
+#, c-format
+msgid "Incremental updates: %d updates / %lu us"
+msgstr "ინკრემენტული განახლებები: %d განახლება / %lu მწმ"
+
+#: ../../src/kprop/kpropd.c:911
+#, c-format
+msgid "Incremental updates: %d updates / %lu us\n"
+msgstr "ინკრემენტული განახლებები: %d განახლება / %lu მწმ\n"
+
+#: ../../src/kprop/kpropd.c:919
+#, c-format
+msgid "get_updates permission denied\n"
+msgstr "get_updates წვდომა აკრძალულია\n"
+
+#: ../../src/kprop/kpropd.c:920
+msgid "get_updates, permission denied."
+msgstr "get_updates წვდომა აკრძალულია."
+
+#: ../../src/kprop/kpropd.c:925
+#, c-format
+msgid "get_updates error from primary\n"
+msgstr "get_updates შეცდომა ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:927
+msgid "get_updates, error returned from primary KDC."
+msgstr "get_updates, ძირითადმა KDC-მა შეცდომა დააბრუნა."
+
+#: ../../src/kprop/kpropd.c:935
+#, c-format
+msgid "get_updates primary busy; backoff\n"
+msgstr "get_updates მთავარიდ აკავებულია; დაბრუნება\n"
+
+#: ../../src/kprop/kpropd.c:944
+#, c-format
+msgid "KDC is synchronized with primary.\n"
+msgstr "KDC სინქრონიზებულია ძირითადთან.\n"
+
+#: ../../src/kprop/kpropd.c:953
+#, c-format
+msgid "get_updates invalid result from primary\n"
+msgstr "get_updates არასწორი პასუხი ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:956
+msgid "get_updates, invalid return from primary KDC."
+msgstr "get_updates, არასწორი პასუხი ძირითადი KDC -დან."
+
+#: ../../src/kprop/kpropd.c:971
+#, c-format
+msgid "Busy signal received from primary, backoff for %d secs\n"
+msgstr "მთავარიდან მიღებულია დაკავებულობის სიგნალი. დაბრუნება %d წამით\n"
+
+#: ../../src/kprop/kpropd.c:978
+#, c-format
+msgid "Waiting for %d seconds before checking for updates again\n"
+msgstr "%d წამის მოლოდინი განახლებების თავის შემოწმებამდე\n"
+
+#: ../../src/kprop/kpropd.c:989
+#, c-format
+msgid "ERROR returned by primary, bailing\n"
+msgstr "მთავარმა შეცდომა დააბრუნა, დანებება\n"
+
+#: ../../src/kprop/kpropd.c:990
+msgid "ERROR returned by primary KDC, bailing.\n"
+msgstr "მთავარმა KDC-მა შეცდომა დააბრუნა. დანებება.\n"
+
+#: ../../src/kprop/kpropd.c:1108
+msgid "copying db args"
+msgstr "ბაზის არგუმენტების კოპირება"
+
+#: ../../src/kprop/kpropd.c:1133
+msgid "Unable to get default realm"
+msgstr "ნაგულისხმები რეალმის მიღების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:1140
+msgid "Unable to set default realm"
+msgstr "ნაგულისხმები რეალმის დაყენების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:1150
+msgid "while trying to construct my service name"
+msgstr "ჩემი სერვისის სახელის აწყობის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:1157
+msgid "while allocating filename for temp file"
+msgstr "დროებითი ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kprop/kpropd.c:1165
+msgid "while initializing"
+msgstr "ინიციალიზაციისას"
+
+#: ../../src/kprop/kpropd.c:1173
+msgid "Unable to map log!\n"
+msgstr "ჟურნალის მიბმის შეცდომა!\n"
+
+#: ../../src/kprop/kpropd.c:1215
+#, c-format
+msgid "Error in krb5_auth_con_ini: %s"
+msgstr "შეცდომა krb5_auth_con_ini-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1223
+#, c-format
+msgid "Error in krb5_auth_con_setflags: %s"
+msgstr "შეცდომა krb5_auth_con_setflags-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1236
+#, c-format
+msgid "Error in krb5_auth_con_setaddrs: %s"
+msgstr "შეცდომა krb5_auth_con_setaddrs-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1244
+#, c-format
+msgid "Error in krb5_kt_resolve: %s"
+msgstr "შეცდომა krb5_kt_resolve-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1253
+#, c-format
+msgid "Error in krb5_recvauth: %s"
+msgstr "შეცდომა krb5_recvauth -ში: %s"
+
+#: ../../src/kprop/kpropd.c:1260
+#, c-format
+msgid "Error in krb5_copy_prinicpal: %s"
+msgstr "შეცდომა krb5_copy_prinicpal-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1277
+msgid "while unparsing ticket etype"
+msgstr "ბილეთის etype-ის დამუშავების გაუქმებისას"
+
+#: ../../src/kprop/kpropd.c:1281
+#, c-format
+msgid "authenticated client: %s (etype == %s)\n"
+msgstr "კლიენტი ავტორიზებულია: %s (etype == %s)\n"
+
+#: ../../src/kprop/kpropd.c:1361
+msgid "while reading size of database from client"
+msgstr "კლიენტიდან ბაზის ზომის კითხვისას"
+
+#: ../../src/kprop/kpropd.c:1371
+msgid "while decoding database size from client"
+msgstr "კლიენტიდან ბაზის ზომის დეკოდირებისას"
+
+#: ../../src/kprop/kpropd.c:1379
+msgid "malformed database size message from client"
+msgstr "კლიენტიდან მიღებული ბაზის ზომის შეტყობინება არასწორია"
+
+#: ../../src/kprop/kpropd.c:1391
+msgid "while initializing i_vector"
+msgstr "i_vector-ის ინიციალიზაციისას"
+
+#: ../../src/kprop/kpropd.c:1396
+#, c-format
+msgid "Full propagation transfer started.\n"
+msgstr "სრული გავრცელების გადაცემა დაწყებულია.\n"
+
+#: ../../src/kprop/kpropd.c:1450
+#, c-format
+msgid "Full propagation transfer finished.\n"
+msgstr "სრული გავრცელების გადაცემა დასრულდა.\n"
+
+#: ../../src/kprop/kpropd.c:1510
+msgid "while decoding error packet from client"
+msgstr "კლიენტიდან მიღებული შეცდომის პაკეტის დეკოდირებისას"
+
+#: ../../src/kprop/kpropd.c:1519
+msgid "signaled from server"
+msgstr "სიგნალი სერვერიდან"
+
+#: ../../src/kprop/kpropd.c:1521
+#, c-format
+msgid "Error text from client: %s\n"
+msgstr "შეცდომის ტექსტი კლიენტიდან: %s\n"
+
+#: ../../src/kprop/kpropd.c:1570
+#, c-format
+msgid "while trying to fork %s"
+msgstr "%s-ის განტოტვისას"
+
+#: ../../src/kprop/kpropd.c:1574
+#, c-format
+msgid "while trying to exec %s"
+msgstr "%s-ის exec-ის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:1581
+#, c-format
+msgid "while waiting for %s"
+msgstr "%s-ის მოლოდინისას"
+
+#: ../../src/kprop/kpropd.c:1587
+#, c-format
+msgid "%s load terminated"
+msgstr "%s-ის ჩატვირთვა შეწყვეტილია"
+
+#: ../../src/kprop/kpropd.c:1593
+#, c-format
+msgid "%s returned a bad exit status (%d)"
+msgstr "%s -მა გასვლის არასწორი სტატუსი დააბრუნა (%d)"
+
+#: ../../src/kprop/kproplog.c:29
+#, c-format
+msgid ""
+"\n"
+"Usage: %s -h -v -v -e num\n"
+"\t%s -R\n"
+"\n"
+msgstr ""
+"\n"
+"გამოყენება: %s -h -v -v -e რიცხვი\n"
+"\t%s -R\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:112
+#, c-format
+msgid ""
+"\n"
+"Couldn't allocate memory"
+msgstr ""
+"\n"
+"მეხსიერების გამოყოფის შეცდომა"
+
+#: ../../src/kprop/kproplog.c:206
+#, c-format
+msgid "\t\tAttribute flags\n"
+msgstr "\t\tატრიბუტის ალმები\n"
+
+#: ../../src/kprop/kproplog.c:211
+#, c-format
+msgid "\t\tMaximum ticket life\n"
+msgstr "\t\tბილეთის მაქსიმალური სიცოცხლე\n"
+
+#: ../../src/kprop/kproplog.c:216
+#, c-format
+msgid "\t\tMaximum renewable life\n"
+msgstr "\t\tმაქსიმალური განახლებადი სიცოცხლე\n"
+
+#: ../../src/kprop/kproplog.c:221
+#, c-format
+msgid "\t\tPrincipal expiration\n"
+msgstr "\t\tპრინციპალის ვადა\n"
+
+#: ../../src/kprop/kproplog.c:226
+#, c-format
+msgid "\t\tPassword expiration\n"
+msgstr "\t\tპაროლის ვადა\n"
+
+#: ../../src/kprop/kproplog.c:231
+#, c-format
+msgid "\t\tLast successful auth\n"
+msgstr "\t\tბოლო წარმატებული ავთენტიკაცია\n"
+
+#: ../../src/kprop/kproplog.c:236
+#, c-format
+msgid "\t\tLast failed auth\n"
+msgstr "\t\tბოლო წარუმატებელი ავთენტიკაცია\n"
+
+#: ../../src/kprop/kproplog.c:241
+#, c-format
+msgid "\t\tFailed passwd attempt\n"
+msgstr "\t\tწარუმატებელი პაროლის მცდელობა\n"
+
+#: ../../src/kprop/kproplog.c:246
+#, c-format
+msgid "\t\tPrincipal\n"
+msgstr "\t\tპრინციპალი\n"
+
+#: ../../src/kprop/kproplog.c:251
+#, c-format
+msgid "\t\tKey data\n"
+msgstr "\t\tგასაღების შემცველობა\n"
+
+#: ../../src/kprop/kproplog.c:258
+#, c-format
+msgid "\t\tTL data\n"
+msgstr "\t\tTL -ის მონაცემები\n"
+
+#: ../../src/kprop/kproplog.c:265
+#, c-format
+msgid "\t\tLength\n"
+msgstr "\t\tსიგრძე\n"
+
+#: ../../src/kprop/kproplog.c:270
+#, c-format
+msgid "\t\tPassword last changed\n"
+msgstr "\t\tპაროლი ბოლოს შეიცვალა\n"
+
+#: ../../src/kprop/kproplog.c:275
+#, c-format
+msgid "\t\tModifying principal\n"
+msgstr "\t\tპრინციპალის შეცვლა\n"
+
+#: ../../src/kprop/kproplog.c:280
+#, c-format
+msgid "\t\tModification time\n"
+msgstr "\t\tცვლილების დრო\n"
+
+#: ../../src/kprop/kproplog.c:285
+#, c-format
+msgid "\t\tModified where\n"
+msgstr "\t\tცვლილების ადგილი\n"
+
+#: ../../src/kprop/kproplog.c:290
+#, c-format
+msgid "\t\tPassword policy\n"
+msgstr "\t\tპაროლის პოლიტიკა\n"
+
+#: ../../src/kprop/kproplog.c:295
+#, c-format
+msgid "\t\tPassword policy switch\n"
+msgstr "\t\tპაროლის პოლიტიკის გადართვა\n"
+
+#: ../../src/kprop/kproplog.c:300
+#, c-format
+msgid "\t\tPassword history KVNO\n"
+msgstr "\t\tპაროლის ისტორია KVNO\n"
+
+#: ../../src/kprop/kproplog.c:305
+#, c-format
+msgid "\t\tPassword history\n"
+msgstr "\t\tპაროლის ისტორია\n"
+
+#: ../../src/kprop/kproplog.c:339
+#, c-format
+msgid ""
+"Corrupt update entry\n"
+"\n"
+msgstr ""
+"დაზიანებული ჩანაწერის განახლება\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:344
+#, c-format
+msgid "Update Entry\n"
+msgstr "ჩანაწერის განახლება\n"
+
+#: ../../src/kprop/kproplog.c:346
+#, c-format
+msgid "\tUpdate serial # : %u\n"
+msgstr "\tსერიალის განახლება # : %u\n"
+
+#: ../../src/kprop/kproplog.c:350
+#, c-format
+msgid "\tDummy entry\n"
+msgstr "\tცარიელი ჩანაწერი\n"
+
+#: ../../src/kprop/kproplog.c:358
+#, c-format
+msgid ""
+"Entry data decode failure\n"
+"\n"
+msgstr ""
+"ჩანაწერის მონაცემების დეკოდირების შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:362
+#, c-format
+msgid "\tUpdate operation : "
+msgstr "\tოპერაციის განახლება : "
+
+#: ../../src/kprop/kproplog.c:364
+#, c-format
+msgid "Delete\n"
+msgstr "წაშლა\n"
+
+#: ../../src/kprop/kproplog.c:366
+#, c-format
+msgid "Add\n"
+msgstr "დამატება\n"
+
+#: ../../src/kprop/kproplog.c:370
+#, c-format
+msgid ""
+"Could not allocate principal name\n"
+"\n"
+msgstr ""
+"პრინციპალის სახელის გამოყოფის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:376
+#, c-format
+msgid "\tUpdate principal : %s\n"
+msgstr "\tპრინციალის განახლება : %s\n"
+
+#: ../../src/kprop/kproplog.c:378
+#, c-format
+msgid "\tUpdate size : %u\n"
+msgstr "\tგანახლების ზომა : %u\n"
+
+#: ../../src/kprop/kproplog.c:379
+#, c-format
+msgid "\tUpdate committed : %s\n"
+msgstr "\tგანახლება გადაცემულია : %s\n"
+
+#: ../../src/kprop/kproplog.c:383
+#, c-format
+msgid "\tUpdate time stamp : None\n"
+msgstr "\tგანახლების დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:385
+#, c-format
+msgid "\tUpdate time stamp : %s"
+msgstr "\tგანახლების დროის შტამპი : %s"
+
+#: ../../src/kprop/kproplog.c:389
+#, c-format
+msgid "\tAttributes changed : %d\n"
+msgstr "\tატრიბუტები შეიცვალა : %d\n"
+
+#: ../../src/kprop/kproplog.c:462
+#, c-format
+msgid ""
+"Unable to initialize Kerberos\n"
+"\n"
+msgstr ""
+"Kerberos-ის ინიციალიზაციის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:469
+#, c-format
+msgid ""
+"Couldn't read database_name\n"
+"\n"
+msgstr ""
+"შეცდომა database_name-ის წაკითხვისას\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:473
+#, c-format
+msgid ""
+"\n"
+"Kerberos update log (%s)\n"
+msgstr ""
+"\n"
+"Kerberos -ის განახლების ჟურნალი (%s)\n"
+
+#: ../../src/kprop/kproplog.c:477 ../../src/kprop/kproplog.c:493
+#, c-format
+msgid ""
+"Unable to map log file %s\n"
+"\n"
+msgstr ""
+"ჟურნალის ფაილის %s მიბმის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:482
+#, c-format
+msgid ""
+"Couldn't reinitialize ulog file %s\n"
+"\n"
+msgstr ""
+"შეცდომა ulog ფაილის %s რეინიციალიზაციისას\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:486
+#, c-format
+msgid "Reinitialized the ulog.\n"
+msgstr "Ulog-ის რეინიციალიზაცია წარმატებულია.\n"
+
+#: ../../src/kprop/kproplog.c:499
+#, c-format
+msgid ""
+"Corrupt header log, exiting\n"
+"\n"
+msgstr ""
+"ჟურნალის თავსართი დაზიანებულია. გასვლა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:503
+#, c-format
+msgid "Update log dump :\n"
+msgstr "განახლების ჟურნალის დამპი :\n"
+
+#: ../../src/kprop/kproplog.c:504
+#, c-format
+msgid "\tLog version # : %u\n"
+msgstr "\tჟურნალის ვერსია # : %u\n"
+
+#: ../../src/kprop/kproplog.c:505
+#, c-format
+msgid "\tLog state : "
+msgstr "\tჟურნალის მდგომარეობა : "
+
+#: ../../src/kprop/kproplog.c:508
+#, c-format
+msgid "Stable\n"
+msgstr "სტაბილური\n"
+
+#: ../../src/kprop/kproplog.c:511
+#, c-format
+msgid "Unstable\n"
+msgstr "არასტაბილური\n"
+
+#: ../../src/kprop/kproplog.c:514
+#, c-format
+msgid "Corrupt\n"
+msgstr "დაზიანებული\n"
+
+#: ../../src/kprop/kproplog.c:517
+#, c-format
+msgid "Unknown state: %d\n"
+msgstr "უცნობი მდგომარეობა: %d\n"
+
+#: ../../src/kprop/kproplog.c:520
+#, c-format
+msgid "\tEntry block size : %u\n"
+msgstr "\tჩანაწერის ბლოკის ზომა : %u\n"
+
+#: ../../src/kprop/kproplog.c:521
+#, c-format
+msgid "\tNumber of entries : %u\n"
+msgstr "\tჩანაწერების რაოდენობა : %u\n"
+
+#: ../../src/kprop/kproplog.c:524
+#, c-format
+msgid "\tLast serial # : None\n"
+msgstr "\tბოლო სერიული # : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:527
+#, c-format
+msgid "\tFirst serial # : None\n"
+msgstr "\tპირველი სერიული # : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:529
+#, c-format
+msgid "\tFirst serial # : "
+msgstr "\tპირველი სერიული # : "
+
+#: ../../src/kprop/kproplog.c:533
+#, c-format
+msgid "\tLast serial # : "
+msgstr "\tბოლო სერიული # : "
+
+#: ../../src/kprop/kproplog.c:538
+#, c-format
+msgid "\tLast time stamp : None\n"
+msgstr "\tბოლო დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:541
+#, c-format
+msgid "\tFirst time stamp : None\n"
+msgstr "\tპირველი დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:543
+#, c-format
+msgid "\tFirst time stamp : %s"
+msgstr "\tპირველი დროის შტამპი : %s"
+
+#: ../../src/kprop/kproplog.c:547
+#, c-format
+msgid "\tLast time stamp : %s\n"
+msgstr "\tბოლო დროის შტამპი : %s\n"
+
+#: ../../src/lib/apputils/net-server.c:231
+msgid "Got signal to request exit"
+msgstr "მიღებულია სიგნალი გასვლის მოთხოვნისთვის"
+
+#: ../../src/lib/apputils/net-server.c:245
+msgid "Got signal to reset"
+msgstr "მიღებულია სიგნალი საწყის მნიშვნელობებზე დასაბრუნებლად"
+
+#: ../../src/lib/apputils/net-server.c:311
+#, c-format
+msgid "Invalid port %d"
+msgstr "არასწორი პორტი %d"
+
+#: ../../src/lib/apputils/net-server.c:324
+#, c-format
+msgid "Removing address %s since wildcard address is being added"
+msgstr "მისამართი %s წაიშლება, რადგან საჭიროა ვაილდკარდი მისმართის დამატება"
+
+#: ../../src/lib/apputils/net-server.c:331
+msgid "Address already added to server"
+msgstr "მისამართი სერვერზე უკვე დამატებულია"
+
+#: ../../src/lib/apputils/net-server.c:494
+#, c-format
+msgid "closing down fd %d"
+msgstr "fd %d-ის დახურვა"
+
+#: ../../src/lib/apputils/net-server.c:508
+#, c-format
+msgid "descriptor %d closed but still in svc_fdset"
+msgstr "დესკრიპტორი %d დახურულია, მაგრამ ჯერ კიდევ svc_fdset -შია"
+
+#: ../../src/lib/apputils/net-server.c:534
+msgid "cannot create io event"
+msgstr "io მოვლენის შექმნის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:539
+msgid "cannot save event"
+msgstr "მოვლენის შენახვის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:559
+#, c-format
+msgid "file descriptor number %d too high"
+msgstr "ფაილის დესკრიპტორის ნომერი %d ძალიან მაღალია"
+
+#: ../../src/lib/apputils/net-server.c:566
+msgid "cannot allocate storage for connection info"
+msgstr "შეერთების ინფორმაციისთვის საცავის გამოყოფის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:601
+#, c-format
+msgid "Cannot create TCP server socket on %s"
+msgstr "%s-ზე TCP სერვერის სოკეტის შექმნა შეუძლებელია"
+
+#: ../../src/lib/apputils/net-server.c:610
+#, c-format
+msgid "TCP socket fd number %d (for %s) too high"
+msgstr "TCP სოკეტის fd -ის ნომერი %d (%s-სთვის) ძალიან მაღალია"
+
+#: ../../src/lib/apputils/net-server.c:617
+#, c-format
+msgid "Cannot enable SO_REUSEADDR on fd %d"
+msgstr "SO_REUSEADDR-ის დაყენების შეცდომა fd-ზე %d"
+
+#: ../../src/lib/apputils/net-server.c:622
+#, c-format
+msgid "setsockopt(%d,IPV6_V6ONLY,1) failed"
+msgstr "setsockopt(%d,IPV6_V6ONLY,1) -ის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:625
+#, c-format
+msgid "setsockopt(%d,IPV6_V6ONLY,1) worked"
+msgstr "setsockopt(%d,IPV6_V6ONLY,1) მუშაობს"
+
+#: ../../src/lib/apputils/net-server.c:628
+msgid "no IPV6_V6ONLY socket option support"
+msgstr "სოკეტს IPV6_V6ONLY პარამეტრის მხარდაჭერა არ გააჩნია"
+
+#: ../../src/lib/apputils/net-server.c:634
+#, c-format
+msgid "Cannot bind server socket on %s"
+msgstr "სერვერის სოკეტზე მიბმის შეცდომა %s-ზე"
+
+#: ../../src/lib/apputils/net-server.c:704
+#, c-format
+msgid "Setting up %s socket for address %s"
+msgstr "%s სოკეტის მორგება მისამართისთვის %s"
+
+#: ../../src/lib/apputils/net-server.c:717
+#, c-format
+msgid "Cannot listen on %s server socket on %s"
+msgstr "%s სერვერის სოკეტზე მოსმენის შეცდომა %s-ზე"
+
+#: ../../src/lib/apputils/net-server.c:726
+#, c-format
+msgid "cannot set listening %s socket on %s non-blocking"
+msgstr "მოსმენის %s სოკეტის %s არაბლოკირებადზე დაყენების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:734
+#, c-format
+msgid "cannot set SO_LINGER on %s socket on %s"
+msgstr "%s სოკეტზე %s-ზე SO_LINGER-ის დაყენების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:741
+#, c-format
+msgid "Setting pktinfo on socket %s"
+msgstr "სოკეტზე %s pktinfo-ის დაყენება"
+
+#: ../../src/lib/apputils/net-server.c:746
+#, c-format
+msgid "Cannot request packet info for UDP socket address %s port %d"
+msgstr ""
+"UDP სოკეტის მისამართის %s პორტის %d პაკეტის ინფორმაციის მოთხოვნის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:748
+msgid ""
+"System does not support pktinfo yet binding to a wildcard address. Packets "
+"are not guaranteed to return on the received address."
+msgstr ""
+"სისტემას pktinfo-ის ვაილდკარდ მისამართზე მიბმის მხარდაჭერა არ გააჩნია. "
+"გარანტია, რომ პაკეტები მიმღებ მისამართზე დაბრუნდება, არ არსებობს."
+
+#: ../../src/lib/apputils/net-server.c:760
+msgid "Error attempting to add verto event"
+msgstr "შეცდომა verto მოვლენის დამატების მცდელობისას"
+
+#: ../../src/lib/apputils/net-server.c:769
+#, c-format
+msgid "Cannot create RPC service: %s"
+msgstr "RPC სერვისის შექმნის შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:779
+#, c-format
+msgid "Cannot register RPC service: %s"
+msgstr "RPC სერვისის რეგისტრაციის შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:823
+msgid "No addresses added to the net server"
+msgstr "Net სერვერზე მისამართი არ დამატებულა"
+
+#: ../../src/lib/apputils/net-server.c:842
+#, c-format
+msgid "Failed getting address info (for %s): %s"
+msgstr "%s-სთვის მისამართის ინფორმაციის მიღების შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:872
+#, c-format
+msgid "Failed setting up a %s socket (for %s)"
+msgstr "%s სოკეტის მორგებისას (%s-სთვის)"
+
+#: ../../src/lib/apputils/net-server.c:913
+msgid "setting up network..."
+msgstr "ქსელის მორგება..."
+
+#: ../../src/lib/apputils/net-server.c:916
+msgid "Error setting up network"
+msgstr "ქსელის მორგების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:919
+#, c-format
+msgid "set up %d sockets"
+msgstr "მორგებულია %d სოკეტი"
+
+#: ../../src/lib/apputils/net-server.c:922
+msgid "no sockets set up?"
+msgstr "სოკეტები ჩართული არაა?"
+
+#: ../../src/lib/apputils/net-server.c:985
+#: ../../src/lib/apputils/net-server.c:1039
+msgid "while dispatching (udp)"
+msgstr "გაგზავნისას (udp)"
+
+#: ../../src/lib/apputils/net-server.c:1014
+#, c-format
+msgid "while sending reply to %s/%s from %s"
+msgstr "%s/%s -სთვის %s-დან პასუხის გაგზავნისას"
+
+#: ../../src/lib/apputils/net-server.c:1019
+#, c-format
+msgid "short reply write %d vs %d\n"
+msgstr "მოკლე პასუხის ჩაწერა %d-ი %d-ის წინააღმდეგ\n"
+
+#: ../../src/lib/apputils/net-server.c:1064
+msgid "while receiving from network"
+msgstr "ქსელიდან მიღებისას"
+
+#: ../../src/lib/apputils/net-server.c:1107
+msgid "too many connections"
+msgstr "მეტისმეტად ბევრი მიერთება"
+
+#: ../../src/lib/apputils/net-server.c:1125
+#, c-format
+msgid "dropping %s fd %d from %s"
+msgstr "%s fd-ის მოცილება %d-ი %s-დან"
+
+#: ../../src/lib/apputils/net-server.c:1195
+#, c-format
+msgid "allocating buffer for new TCP session from %s"
+msgstr "%s-დან მიღებული სესიისთვის ბუფერის გამოყოფა"
+
+#: ../../src/lib/apputils/net-server.c:1227
+msgid "while dispatching (tcp)"
+msgstr "გაგზავნისას (tcp)"
+
+#: ../../src/lib/apputils/net-server.c:1259
+msgid "error allocating tcp dispatch private!"
+msgstr "tcp გასაგზავნი პირის გამოყოფის შეცდომა!"
+
+#: ../../src/lib/apputils/net-server.c:1306
+#, c-format
+msgid "TCP client %s wants %lu bytes, cap is %lu"
+msgstr "TCP კლიენტს %s სურს %lu ბაიტი, ზღვარია %lu"
+
+#: ../../src/lib/apputils/net-server.c:1314
+#, c-format
+msgid "error constructing KRB_ERR_FIELD_TOOLONG error! %s"
+msgstr "შეცდომა KRB_ERR_FIELD_TOOLONG შეცდომის აწყოებისას! %s"
+
+#: ../../src/lib/apputils/net-server.c:1353
+#, c-format
+msgid "getsockname failed: %s"
+msgstr "getsockname -ის შეცდომა: %s"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:43
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:165
+msgid "A required input parameter could not be read"
+msgstr "აუცილებელი შეყვანის პარამეტრის წაკითხვა შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:44
+msgid "A required input parameter could not be written"
+msgstr "აუცილებელი შეყვანის პარამეტრის ჩაწერა შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:45
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:175
+msgid "A parameter was malformed"
+msgstr "პარამეტრი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:48
+msgid "calling error"
+msgstr "გამოძახების შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:59
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:195
+msgid "An unsupported mechanism was requested"
+msgstr "მოთხოვნილი მექანიზმი მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:60
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:199
+msgid "An invalid name was supplied"
+msgstr "მიწოდებული სახელი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:61
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:203
+msgid "A supplied name was of an unsupported type"
+msgstr "მითითებული სახელის ტიპი მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:62
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:208
+msgid "Incorrect channel bindings were supplied"
+msgstr "მიწოდებული არხების მიბმა არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:63
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:179
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:274
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:334
+msgid "An invalid status code was supplied"
+msgstr "მიწოდებული სტატუსის კოდი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:64
+msgid "A token had an invalid signature"
+msgstr "კოდის ხელმოწერა არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:65
+msgid "No credentials were supplied"
+msgstr "ავტორიზაციის დეტალები მიწოდებული არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:66
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:223
+msgid "No context has been established"
+msgstr "კონტექსტი აწყობილი არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:67
+msgid "A token was invalid"
+msgstr "კოდი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:68
+msgid "A credential was invalid"
+msgstr "ავტორიზაციის დეტალები არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:69
+msgid "The referenced credentials have expired"
+msgstr "მიმართული ავტორიზაციის დეტალები ვადაგასულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:70
+msgid "The context has expired"
+msgstr "კონტექსტი ვადაგასულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:71
+msgid "Miscellaneous failure"
+msgstr "სხვადასხვა შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:72
+msgid "The quality-of-protection requested could not be provided"
+msgstr "მოთხოვნილი quality-of-protection -ის მიწოდება შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:73
+msgid "The operation is forbidden by the local security policy"
+msgstr "ოპერაცია ლოკალური უსაფრთხოების პოლიტიკის მიერაა აკრძალული"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:74
+msgid "The operation or option is not available"
+msgstr "ოპერაცია ან პარამეტრი ხელმისაწვდომი არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:77
+msgid "routine error"
+msgstr "ქვეპროგრამის შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:89
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:311
+msgid "The routine must be called again to complete its function"
+msgstr "მისი ფუნქციის დასასრულებლად ქვეპროგრამა კიდევ ერთხელ უნდა გამოიძახოთ"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:90
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:316
+msgid "The token was a duplicate of an earlier token"
+msgstr "ეს კოდი ძველი კოდის ასლს წარმოადგენდა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:91
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:321
+msgid "The token's validity period has expired"
+msgstr "კოდის ვარგისიანობის ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:92
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:325
+msgid "A later token has already been processed"
+msgstr "უფრო ახალი კოდი უკვე დამუშავდა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:95
+msgid "supplementary info code"
+msgstr "დამატებითი ინფორმაციის კოდი"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:106
+#: ../lib/krb5/error_tables/krb5_err.c:23
+msgid "No error"
+msgstr "შეცდომის გარეშე"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:107
+#, c-format
+msgid "Unknown %s (field = %d)"
+msgstr "უცნობი %s (ველი = %d)"
+
+#: ../../src/lib/gssapi/krb5/acquire_cred.c:148
+#, c-format
+msgid "No key table entry found matching %s"
+msgstr "%s-ის შესაბამისი გასაღების ცხრილის ჩანაწერი არ არსებობს"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:161
+msgid "The routine completed successfully"
+msgstr "ქვეპროგრამა წარმატებით დასრულდა"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:170
+msgid "A required output parameter could not be written"
+msgstr "გამოტანის აუცილებელი პარამეტრის ჩაწერა შეუძლებელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:212
+msgid "A token had an invalid Message Integrity Check (MIC)"
+msgstr "კოდის *შეტყობინების მთლიანობის შემოწმება\" (MIC) არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:217
+msgid ""
+"No credentials were supplied, or the credentials were unavailable or "
+"inaccessible"
+msgstr "ავტორიზაციის დეტალები მიწოდებული არაა, ან ისინი მიუწვდომელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:227
+msgid "Invalid token was supplied"
+msgstr "მიწოდებული კოდი არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:231
+msgid "Invalid credential was supplied"
+msgstr "მიწოდებული ავტორიზაციის დეტალები არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:235
+msgid "The referenced credential has expired"
+msgstr "მიმართვის ავტორიზაციის დეტალების ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:239
+msgid "The referenced context has expired"
+msgstr "მიმართვის კონტექსტის ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:243
+msgid "Unspecified GSS failure. Minor code may provide more information"
+msgstr ""
+"GSS-ის უცნობი შეცდომა. მცირე კოდს დამატებითი ინფორმაციის მოწოდება შეუძლია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:248
+msgid "The quality-of-protection (QOP) requested could not be provided"
+msgstr "მოთხოვნილი quality-of-protection -ის (QOP) მიწოდება შეუძლებელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:253
+msgid "The operation is forbidden by local security policy"
+msgstr "ოპერაცია ლოკალური უსაფრთხოების პოლიტიკის მიერაა აკრძალული"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:258
+msgid "The operation or option is not available or unsupported"
+msgstr "ოპერაცია ან პარამეტრი ხელმიუწვდომელი ან მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:263
+msgid "The requested credential element already exists"
+msgstr "ავტორიზაციის დეტალების ელემენტი უკვე არსებობს"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:268
+msgid "The provided name was not mechanism specific (MN)"
+msgstr "მოწოდებული სახელი მექანიზმზე მიბმული (MN) არაა"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:329
+msgid "An expected per-message token was not received"
+msgstr "თითოეული შეტყობინების მოსალოდნელი კოდი მიღებული არაა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1824
+msgid "SPNEGO cannot find mechanisms to negotiate"
+msgstr "SPNEGO -მა მოსალაპარაკებელი მექანიზმები ვერ იპოვა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1826
+msgid "SPNEGO failed to acquire creds"
+msgstr "SPNEGO ავტ.დეტალების მიღების შეცდომა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1828
+msgid "SPNEGO acceptor did not select a mechanism"
+msgstr "SPNEGO აქსეპტორმა მექანიზმი არ აირჩია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1830
+msgid "SPNEGO failed to negotiate a mechanism"
+msgstr "SPNEGO -მა მექანიზმის შეთანხმება ვერ შეძლო"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1832
+msgid "SPNEGO acceptor did not return a valid token"
+msgstr "SPNEGO აქსეპტორმა სწორი კოდი არ დააბრუნა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1834
+msgid "Invalid NegoEx signature"
+msgstr "არასწორი NegoEx ხელმოწერია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1836
+msgid "Invalid NegoEx message type"
+msgstr "არასწორი NegoEx შეტყობინების ტიპი"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1838
+msgid "Invalid NegoEx message size"
+msgstr "არასწორი NegoEx შეტყობინების ზომა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1840
+msgid "Invalid NegoEx conversation ID"
+msgstr "არასწორი NegoEx საუბრის ID"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1842
+msgid "NegoEx authentication scheme not found"
+msgstr "NegoEx -ის ავთენტიკაციის სქემა ნაპოვნი არაა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1844
+msgid "Missing NegoEx negotiate message"
+msgstr "NegoEx-ის მოლაპარაკების შეტყობინება ვერ ვიპოვე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1846
+msgid "Missing NegoEx authentication protocol request message"
+msgstr "NegoEx -ის ავთენტიკაციის პროტოკოლის მოთხოვნის შეტყობინება ვერ ვიპოვე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1848
+msgid "No mutually supported NegoEx authentication schemes"
+msgstr "ორმხრივად მხარდაჭერილი NegoEx-ის ავთენტიკაციის სქემების გარეშე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1850
+msgid "No NegoEx verify key"
+msgstr "NegoEx -ის გასაღების გადამოწმების გარეშე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1852
+msgid "Unknown NegoEx checksum scheme"
+msgstr "NegoEx -ის საკონტროლო ჯამის უცნობი სქემა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1854
+msgid "Invalid NegoEx checksum"
+msgstr "NegoEx -ის საკონტროლო ჯამი არასწორია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1856
+msgid "Unsupported critical NegoEx extension"
+msgstr "მხარდაუჭერელი კრიტიკული NegoEx -ის გაფართოება"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1858
+msgid "Unsupported NegoEx version"
+msgstr "NegoEx -ის მხარდაუჭერელი ვერსია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1860
+msgid "NegoEx message out of sequence"
+msgstr "NegoEx -ის შეტყობინება მიმდევრობის გარეთაა"
+
+#: ../../src/lib/kadm5/logger.c:54
+#, c-format
+msgid "%s: cannot parse <%s>\n"
+msgstr "%s: <%s>-ის დამუშავების შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:55
+#, c-format
+msgid "%s: warning - logging entry syntax error\n"
+msgstr "%s: გაფრთხილება - ჟურნალის ჩანაწერის სინტაქსის შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:56
+#, c-format
+msgid "%s: error writing to %s\n"
+msgstr "%s: %s-ში ჩაწერის შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:57
+#, c-format
+msgid "%s: error writing to %s device\n"
+msgstr "%s: შეცდომა %s მოწყობილობაში ჩაწერისას\n"
+
+#: ../../src/lib/kadm5/logger.c:59
+msgid "EMERGENCY"
+msgstr "გადაუდებელი"
+
+#: ../../src/lib/kadm5/logger.c:60
+msgid "ALERT"
+msgstr "განგაში"
+
+#: ../../src/lib/kadm5/logger.c:61
+msgid "CRITICAL"
+msgstr "კრიტიკული"
+
+#: ../../src/lib/kadm5/logger.c:62
+msgid "Error"
+msgstr "შეცდომა"
+
+#: ../../src/lib/kadm5/logger.c:63
+msgid "Warning"
+msgstr "ყურადღება"
+
+#: ../../src/lib/kadm5/logger.c:64
+msgid "Notice"
+msgstr "გაფრთხილება"
+
+#: ../../src/lib/kadm5/logger.c:65
+msgid "info"
+msgstr "ინფო"
+
+#: ../../src/lib/kadm5/logger.c:66
+msgid "debug"
+msgstr "გამართვა"
+
+#: ../../src/lib/kadm5/logger.c:784
+#, c-format
+msgid "Couldn't open log file %s: %s\n"
+msgstr "ჟურნალის ფაილის (%s) გახსნის შეცდომა: %s\n"
+
+#: ../../src/lib/kadm5/srv/kadm5_hook.c:120
+#, c-format
+msgid "kadm5_hook %s failed postcommit %s: %s"
+msgstr "kadm5_hook %s postcommit-ის შეცდომა %s: %s"
+
+#: ../../src/lib/kadm5/srv/pwqual_dict.c:106
+msgid "No dictionary file specified, continuing without one."
+msgstr "ლექსიკონის ფაილი მითითებული არაა. მის გარეშე გავაგრძელებ."
+
+#: ../../src/lib/kadm5/srv/pwqual_dict.c:113
+#, c-format
+msgid "WARNING! Cannot find dictionary file %s, continuing without one."
+msgstr "გაფრთხილება! ლექსიკონი %s ვერ ვიპოვე. მის გარეშე გავაგრძელებ."
+
+#: ../../src/lib/kadm5/srv/pwqual_empty.c:42
+msgid "Empty passwords are not allowed"
+msgstr "ცარიელი პაროლები დაუშვებელია"
+
+#: ../../src/lib/kadm5/srv/pwqual_hesiod.c:114
+msgid "Password may not match user information."
+msgstr "პაროლი არ შეიძლება მომხმარებლის ინფორმაციას ემთხვეოდეს."
+
+#: ../../src/lib/kadm5/srv/pwqual_princ.c:54
+msgid "Password may not match principal name"
+msgstr "პაროლი არ შეიძლება პრინციპალის სახელს შეიცავდეს"
+
+#: ../../src/lib/kadm5/srv/server_kdb.c:197
+msgid "History entry contains no key data"
+msgstr "ისტორიის ჩანაწერი გასაღების მონაცემებს არ შეიცავს"
+
+#: ../../src/lib/kadm5/srv/server_misc.c:128
+#, c-format
+msgid "password quality module %s rejected password for %s: %s"
+msgstr "პაროლის ხარისხის მოდულმა %s %s-ის პაროლი უარყო: %s"
+
+#: ../../src/lib/kdb/kdb5.c:216
+msgid "No default realm set; cannot initialize KDB"
+msgstr "ნაგულისხმები რეალმი დაყენებული არაა. KDB-ის ინიციალიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:370
+#, c-format
+msgid "Unable to find requested database type: %s"
+msgstr "მოთხოვნილი ბაზის ტიპის პოვნა შეუძლებელია: %s"
+
+#: ../../src/lib/kdb/kdb5.c:450 ../lib/krb5/error_tables/kdb5_err.c:55
+msgid "Unable to find requested database type"
+msgstr "მოთხოვნილი ბაზის ტიპის პოვნა შეუძლებელია"
+
+#: ../../src/lib/kdb/kdb5.c:458
+msgid "plugin symbol 'kdb_function_table' lookup failed"
+msgstr "დამატების სიმბოლოს 'kdb_function_table' -ის მოძებნის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:466
+#, c-format
+msgid ""
+"Unable to load requested database module '%s': plugin symbol "
+"'kdb_function_table' not found"
+msgstr ""
+"მოთხოვნილი ბაზის მოდულის '%s' ჩატვირთვის შეცდომა: დამატების სიმბოლო "
+"'kdb_function_table' ვერ ვიპოვე"
+
+#: ../../src/lib/kdb/kdb5.c:604
+msgid "Cannot initialize database library"
+msgstr "ბაზის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:1770
+#, c-format
+msgid "Illegal version number for KRB5_TL_MKEY_AUX %d\n"
+msgstr "KRB5_TL_MKEY_AUX -ის ვერსიის არასწორი ნომერი %d\n"
+
+#: ../../src/lib/kdb/kdb5.c:1942
+#, c-format
+msgid "Illegal version number for KRB5_TL_ACTKVNO %d\n"
+msgstr "KRB5_TL_ACTKVNO -ის ვერსიის არასწორი ნომერი %d\n"
+
+#: ../../src/lib/kdb/kdb_default.c:137
+#, c-format
+msgid "keyfile (%s) is not a regular file: %s"
+msgstr "keyfile (%s) ჩვეულებრივი ფაილი არაა: %s"
+
+#: ../../src/lib/kdb/kdb_default.c:150
+msgid "Could not create temp keytab file name."
+msgstr "დროებითი keytab ფაილის სახელის შექმნის შეცდომა."
+
+#: ../../src/lib/kdb/kdb_default.c:175
+#, c-format
+msgid "Temporary stash file already exists: %s."
+msgstr "დროებითი Stash ფაილი უკვე არსებობს: %s."
+
+#: ../../src/lib/kdb/kdb_default.c:203
+#, c-format
+msgid "rename of temporary keyfile (%s) to (%s) failed: %s"
+msgstr "დროებითი keyfile-ის (%s)-ის სახელის (%s)-ზე გადარქმევის შეცდომა: %s"
+
+#: ../../src/lib/kdb/kdb_default.c:388
+#, c-format
+msgid "Can not fetch master key (error: %s)."
+msgstr "მთავარი გასაღების მოთხოვნის შეცდომა (შეცდომა: %s)"
+
+#: ../../src/lib/kdb/kdb_default.c:456
+msgid "Unable to decrypt latest master key with the provided master key\n"
+msgstr ""
+"მიწოდებული მთავარი გასაღებით უახლესი მთავარი გასაღების გაშიფვრა შეუძლებელია\n"
+
+#: ../../src/lib/kdb/kdb_log.c:87
+msgid "could not sync ulog update to disk"
+msgstr "ulog-ის განახლების დისკთან სინქრონიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb_log.c:101
+msgid "could not sync ulog header to disk"
+msgstr "ulog-ის თავსართის დისკთან სინქრონიზაციის შეცდომა"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:122
+#, c-format
+msgid "Subsidiary cache path %s has no parent directory"
+msgstr "შვილობილი ქეშის ბილიკს %s მშობელი საქაღალდე არ გააჩნია"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:128
+#, c-format
+msgid "Subsidiary cache path %s filename does not begin with \"tkt\""
+msgstr "შვილობილი ქეშის ბილიკის %s ფაილის სახელი \"tkt\"-ით არ იწყება"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:169
+#, c-format
+msgid "%s contains invalid filename"
+msgstr "%s არასწორ ფაილის სახელს შეიცავს"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:229
+#, c-format
+msgid "Credential cache directory %s does not exist"
+msgstr "ავტორიზაციის დეტალების ქეშის საქაღალდე %s არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:235
+#, c-format
+msgid "Credential cache directory %s exists but is not a directory"
+msgstr ""
+"ავტორიზაციის დეტალების ქეშის საქაღალდე %s არსებობს, მაგრამ საქაღალდე არაა"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:400
+msgid ""
+"Can't create new subsidiary cache because default cache is not a directory "
+"collection"
+msgstr ""
+"ახალი შვილობილი ქეშის შექმნა შეუძლებელია იმიტომ, რომ ნაგულისხმები ქეში "
+"საქაღალდეების კოლექციას არ წარმოადგენს"
+
+#: ../../src/lib/krb5/ccache/cc_kcm.c:908
+#, c-format
+msgid "Credentials cache 'KCM:%s' not found"
+msgstr "ავტორიზაციის დეტალების ქეში 'KCM:%s' ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/ccache/cc_keyring.c:1149
+msgid ""
+"Can't create new subsidiary cache because default cache is already a "
+"subsidiary"
+msgstr ""
+"ახალი შვილობილი ქეშის შექმნა შეუძლებელია იმიტომ, რომ ნაგულისხმები ქეში უკვე "
+"შვილობილია"
+
+#: ../../src/lib/krb5/ccache/cc_keyring.c:1217
+#, c-format
+msgid "Credentials cache keyring '%s' not found"
+msgstr "ავტორიზაციის დეტალების ბრელოკი '%s' არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:207
+#, c-format
+msgid "Can't find client principal %s in cache collection"
+msgstr "კლიენტის პრინციპალი %s ქეშის კოლექციაში არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:270
+msgid "No Kerberos credentials available"
+msgstr "Kerberos-ის ავტორიზაციის დეტალები ხელმიუწვდომელია"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:276
+#, c-format
+msgid "No Kerberos credentials available (default cache: %s)"
+msgstr "Kerberos-ის ავტორიზაციის დეტალები მიუწვდომელია (ნაგულისხმები ქეში: %s)"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:389
+#, c-format
+msgid "No key table entry found for %s"
+msgstr "გასაღებების ცხრილის ჩანაწერი %s-სთვის არ არსებობს"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:537
+#: ../../src/lib/krb5/keytab/kt_file.c:570
+msgid "Cannot change keytab with keytab iterators active"
+msgstr "Keytab-ის შეცვლა, თუ keutab-ის იტერაცია ჩართულია, შეუძლებელია"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:757
+#, c-format
+msgid "Key table file '%s' not found"
+msgstr "გასაღებების ცხრილის ფაილი \"%s\" არ არსებობს"
+
+#: ../../src/lib/krb5/keytab/ktfns.c:129
+#, c-format
+msgid "Keytab %s is nonexistent or empty"
+msgstr "Keytab %s არ არსებობს ან ცარიელია"
+
+#: ../../src/lib/krb5/krb/chpw.c:250
+msgid "Malformed request error"
+msgstr "არასწორი მოთხოვნის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:253 ../lib/krb5/error_tables/kdb5_err.c:58
+msgid "Server error"
+msgstr "სერვერის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:256
+msgid "Authentication error"
+msgstr "ავთენტიკაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:259
+msgid "Password change rejected"
+msgstr "პაროლის შეცვლა უარყოფილია"
+
+#: ../../src/lib/krb5/krb/chpw.c:262
+msgid "Access denied"
+msgstr "წვდომა აკრძალულია"
+
+#: ../../src/lib/krb5/krb/chpw.c:265
+msgid "Wrong protocol version"
+msgstr "არასწორი პროტოკოლის ვერსია"
+
+#: ../../src/lib/krb5/krb/chpw.c:268
+msgid "Initial password required"
+msgstr "საჭიროა საწყისი პაროლი"
+
+#: ../../src/lib/krb5/krb/chpw.c:271
+msgid "Success"
+msgstr "წარმატება"
+
+#: ../../src/lib/krb5/krb/chpw.c:274 ../lib/krb5/error_tables/krb5_err.c:257
+msgid "Password change failed"
+msgstr "პაროლის შეცვლის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:431
+msgid ""
+"The password must include numbers or symbols. Don't include any part of "
+"your name in the password."
+msgstr ""
+"პაროლი რიცხვები ან სიმბოლოებს აუცილებლად უნდა შეიცავდეს. თქვენს სახელს "
+"პაროლის ნურც ერთ ნაწილს ნუ მიაწერთ."
+
+#: ../../src/lib/krb5/krb/chpw.c:437
+#, c-format
+msgid "The password must contain at least %d character."
+msgid_plural "The password must contain at least %d characters."
+msgstr0 "პაროლი მინიმუმ %d სიმბოლოს უნდა შეიცავდეს ."
+msgstr1 "პაროლი მინიმუმ %d სიმბოლოს უნდა შეიცავდეს ."
+
+#: ../../src/lib/krb5/krb/chpw.c:446
+#, c-format
+msgid "The password must be different from the previous password."
+msgid_plural "The password must be different from the previous %d passwords."
+msgstr0 "ახალი პაროლი წინასგან უნდა განსხვავდებოდეს."
+msgstr1 "ახალი პაროლი წინა %d პაროლისგან უნდა განსხვავდებოდეს."
+
+#: ../../src/lib/krb5/krb/chpw.c:458
+#, c-format
+msgid "The password can only be changed once a day."
+msgid_plural "The password can only be changed every %d days."
+msgstr0 "პაროლი მხოლოდ დღეში ერთხელ შეგიძლიათ შეცვალოთ."
+msgstr1 "პაროლი მხოლოდ %d დღეში ერთხელ შეგიძლიათ შეცვალოთ."
+
+#: ../../src/lib/krb5/krb/chpw.c:504
+msgid "Try a more complex password, or contact your administrator."
+msgstr "სცადეთ უფრო რთული პაროლი ან დაუკავშირდით ადმინისტრატორს."
+
+#: ../../src/lib/krb5/krb/fast.c:216
+msgid "Error constructing AP-REQ armor"
+msgstr "შეცდომა AP-REQ აბჯრის აწყობისას"
+
+#: ../../src/lib/krb5/krb/fast.c:394
+msgid "Failed to decrypt FAST reply"
+msgstr "შეცდომა FAST პასუხის გაშიფვრისას"
+
+#: ../../src/lib/krb5/krb/fast.c:400
+msgid "nonce modified in FAST response: KDC response modified"
+msgstr "მითითებულ დროს შესწორება FAST პასუხში: KDC-ის პასუხი შეიცვალა"
+
+#: ../../src/lib/krb5/krb/fast.c:466
+msgid "Expecting FX_ERROR pa-data inside FAST container"
+msgstr "FAST კონტენერში FX_ERROR pa-data-ს მოველოდი"
+
+#: ../../src/lib/krb5/krb/fast.c:537
+msgid "FAST response missing finish message in KDC reply"
+msgstr "KDC-ის გამოხმაურებაში FAST პასუხს დასრულების შეტყობინება აკლია"
+
+#: ../../src/lib/krb5/krb/fast.c:550
+msgid "Ticket modified in KDC reply"
+msgstr "KDC-ის პასუხში ბილეთი შეიცვალა"
+
+#: ../../src/lib/krb5/krb/gc_via_tkt.c:198
+#, c-format
+msgid "KDC returned error string: %.*s"
+msgstr "KDC -ის მიერ დაბრუნებული შეცდომის სტრიქონი: %.*s"
+
+#: ../../src/lib/krb5/krb/gc_via_tkt.c:207
+#, c-format
+msgid "Server %s not found in Kerberos database"
+msgstr "სერვერი %s Kerberos-ის ბაზაში არ არსებობს"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:202
+msgid "Reply has wrong form of session key for anonymous request"
+msgstr "პასუხს ანონიმური მოთხოვნისთვის სესიის გასაღების არასწორი ფორმა გააჩნია"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1570
+#, c-format
+msgid "Warning: Your password will expire in less than one hour on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა ერთ საათზე ნაკლებში, %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1574
+#, c-format
+msgid "Warning: Your password will expire in %d hour%s on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა %d საათში%s %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1578
+#, c-format
+msgid "Warning: Your password will expire in %d days on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა %d დღეში, %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1600
+msgid ""
+"Warning: encryption type des3-cbc-sha1 used for authentication is weak and "
+"will be disabled"
+msgstr ""
+"გაფრთხილება: ავთენტიკაციისთვის გამოყენებული დაშიფვრის ტიპი des3-cbc-sha1 "
+"სუსტია და გაითიშება"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1844
+msgid "Failed to store credentials"
+msgstr "ავტორიზაციის დეტალების დამახსოვრების შეცდომა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1939
+#, c-format
+msgid "Client '%s' not found in Kerberos database"
+msgstr "კლიენტი '%s' Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/krb/gic_keytab.c:225
+#, c-format
+msgid "Keytab contains no suitable keys for %s"
+msgstr "Keytab-ი %s-სთვის შესაბამის გასაღებებს არ შეიცავს"
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:75
+#, c-format
+msgid "Password for %s"
+msgstr "პაროლი \"%s\" -სთვის"
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:301
+msgid "Password expired. You must change it now."
+msgstr "პაროლის ვადა ამოიწურა. ის ახლავე უნდა შეცვალოთ."
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:320 ../../src/lib/krb5/krb/gic_pwd.c:324
+#, c-format
+msgid "%s. Please try again."
+msgstr "%s. თავიდან სცადეთ."
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:365
+#, c-format
+msgid "%.*s%s%s. Please try again.\n"
+msgstr "%.*s%s%s. თავიდან სცადეთ.\n"
+
+#: ../../src/lib/krb5/krb/parse.c:202
+#, c-format
+msgid "Principal %s is missing required realm"
+msgstr "პრინციპალს %s აუცილებელი რეალმი არ გააჩნია"
+
+#: ../../src/lib/krb5/krb/parse.c:214
+#, c-format
+msgid "Principal %s has realm present"
+msgstr "პრინციპალს %s რეალმი გააჩნია"
+
+#: ../../src/lib/krb5/krb/plugin.c:169
+#, c-format
+msgid "Invalid module specifier %s"
+msgstr "მოდულის არასწორი მიმთითებელი %s"
+
+#: ../../src/lib/krb5/krb/plugin.c:416
+#, c-format
+msgid "Could not find %s plugin module named '%s'"
+msgstr "%s დამატების მოდული, სახელით '%s' ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/krb/preauth2.c:309
+msgid "krb5_init_creds calls must use same library context"
+msgstr ""
+"krb5_init_creds -ის გამოძახებებმა იგივე ბიბლიოთეკის კონტექსტი უნდა გამოიყენონ"
+
+#: ../../src/lib/krb5/krb/preauth2.c:717
+msgid "Pre-authentication failed"
+msgstr "პრე-ავთენტიკაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/preauth2.c:1046
+msgid "Unable to initialize preauth context"
+msgstr "პრეავთენტიკაციის კონტექსტის ინციალიზაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/preauth2.c:1059
+#, c-format
+msgid "Preauth module %s"
+msgstr "Preauth მოდული %s"
+
+#: ../../src/lib/krb5/krb/preauth_encts.c:71
+msgid "Encrypted timestamp is disabled"
+msgstr "დაშიფრული დროის შტამპი გათიშულია"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:514
+msgid "Please choose from the following:\n"
+msgstr "აირჩიეთ შემდეგი სიიდან:\n"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:516
+msgid "Vendor:"
+msgstr "მომწოდებელი:"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:525
+msgid "Enter #"
+msgstr "შეიყვანეთ #"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:561
+msgid "OTP Challenge:"
+msgstr "OTP გამოწვევა:"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:590
+msgid "OTP Token PIN"
+msgstr "OTP კოდის PIN"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:704
+msgid "OTP value doesn't match any token formats"
+msgstr "OTP-ის მნიშვნელობა კოდის არც ერთ ფორმატს არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:771
+msgid "Enter OTP Token Value"
+msgstr "შეიყვანეთ OTP კოდის მნიშვნელობა"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:917
+msgid "No supported tokens"
+msgstr "მხარდაჭერილი კოდების გარეშე"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:49
+msgid "Challenge for Enigma Logic mechanism"
+msgstr "გამოწვევა Enigma Logic მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:53
+msgid "Challenge for Digital Pathways mechanism"
+msgstr "გამოწვევა Digital Pathways მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:57
+msgid "Challenge for Activcard mechanism"
+msgstr "გამოწვევა Activcard მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:60
+msgid "Challenge for Enhanced S/Key mechanism"
+msgstr "გამოწვევა გაფართოებული S/Key მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:63
+msgid "Challenge for Traditional S/Key mechanism"
+msgstr "გამოწვევა ტრადიციული S/Key მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:66
+#: ../../src/lib/krb5/krb/preauth_sam2.c:69
+msgid "Challenge for Security Dynamics mechanism"
+msgstr "გამოწვევა Security Dynamics მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:72
+msgid "Challenge from authentication server"
+msgstr "გამოწვევა ავთენტიკაციის სერვერიდან"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:164
+msgid "SAM Authentication"
+msgstr "SAM ავთენტიკაცია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:146
+#, c-format
+msgid "Cannot find key for %s kvno %d in keytab"
+msgstr "შეცდომა გასაღების მოძებნისას %s kvno %d Keytab-ში"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:151
+#, c-format
+msgid "Cannot find key for %s kvno %d in keytab (request ticket server %s)"
+msgstr ""
+"Keytab-ში %s kvno %d-სთვის გასაღები ვერ ვიპოვე (მოთხოვნის ბილეთის სერვერი %s)"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:176
+#, c-format
+msgid "Cannot decrypt ticket for %s using keytab key for %s"
+msgstr ""
+"%s-სთვის ბილეთის გაშიფვრა keytab-ის %s-სთვის განკუთვნილი გასაღებით "
+"შეუძლებელია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:198
+#, c-format
+msgid "Server principal %s does not match request ticket server %s"
+msgstr "სერვერის პრინციპალი %s ბილეთების სერვერს %s არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:227
+msgid "No keys in keytab"
+msgstr "Keytab-ში გასაღებები არაა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:230
+#, c-format
+msgid "Server principal %s does not match any keys in keytab"
+msgstr "სერვერის პრინციპალი %s keytab-ის არც ერთ გასაღებს არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:237
+#, c-format
+msgid ""
+"Request ticket server %s found in keytab but does not match server principal "
+"%s"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s keytab-ში არსებობს, მაგრამ სერვერის პრინციპალს "
+"%s არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:242
+#, c-format
+msgid "Request ticket server %s not found in keytab (ticket kvno %d)"
+msgstr "მოთხოვნილი ბილეთის სერვერი %s keytab-ში ვერ ვიპოვე (ბილეთის kvno %d)"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:248
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d not found in keytab; ticket is likely out "
+"of date"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d keytab-ში ვერ ვიპოვე. ბილეთი, როგორც "
+"ჩანს, ვადაგასულია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:253
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d not found in keytab; keytab is likely out "
+"of date"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d keytab-ში ვერ ვიპოვე. keytab-ი, როგორც "
+"ჩანს, ვადაგასულია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:262
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d found in keytab but not with enctype %s"
+msgstr ""
+"მოთხოვნილი ბილეთის სერვერი %s kvno %d keytab-ში ვიპოვე, მაგრამ მისი enctype "
+"%s არაა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:267
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d enctype %s found in keytab but cannot "
+"decrypt ticket"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d enctype %s keytab-ში ვიპოვე, მაგრამ "
+"ბილეთის გაშიფვრა შეუძლებელია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:884
+#, c-format
+msgid "Encryption type %s not permitted"
+msgstr "დაშიფვრის ტიპი %s დაუშვებელია"
+
+#: ../../src/lib/krb5/krb/s4u_creds.c:1043
+msgid "Realm specified but S4U2Proxy must use referral realm"
+msgstr ""
+"რეალმი მითითებულია, მაგრამ S4U2Proxy -მა მიმართული რეალმი უნდა გამოიყენოს"
+
+#: ../../src/lib/krb5/os/expand_path.c:316
+#, c-format
+msgid "Can't find username for uid %lu"
+msgstr "მომხმარებლის სახელის პოვნა uid %lu-სთვის შეუძლებელია"
+
+#: ../../src/lib/krb5/os/expand_path.c:405
+#: ../../src/lib/krb5/os/expand_path.c:421
+msgid "Invalid token"
+msgstr "არასწორი კოდი"
+
+#: ../../src/lib/krb5/os/expand_path.c:506
+msgid "variable missing }"
+msgstr "ცვლადს აკლია }"
+
+#: ../../src/lib/krb5/os/locate_kdc.c:818
+#, c-format
+msgid "Cannot find KDC for realm \"%.*s\""
+msgstr "შეცდომა KDC -ის ძებნისას რეალმისთვის \"%.*s\""
+
+#: ../../src/lib/krb5/os/sendto_kdc.c:519
+#, c-format
+msgid "Cannot contact any KDC for realm '%.*s'"
+msgstr "შეცდომა ყველა KDC-სთან მიერთებისას რეალმისთვის '%.*s'"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:245
+#: ../../src/plugins/kdb/db2/kdb_db2.c:819
+#, c-format
+msgid "Unsupported argument \"%s\" for db2"
+msgstr "DB2-ის მხარდაუჭერელი არგუმენტი \"%s\""
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:387
+#, c-format
+msgid "Cannot open DB2 database '%s'"
+msgstr "შეცდომა DB2-ის ბაზის '%s' გახსნისას"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:989
+msgid "Recursive iteration is not supported for hash databases"
+msgstr "ჰეშ-ბაზებისთვის რეკურსიული იტერაცია მხარდაუჭერელია"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:996
+msgid "Recursive iteration not supported in this version of libdb"
+msgstr "Libdb-ის ამ ვერსიაში რეკურსიული იტერაცია მხარდაჭერილი არაა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:69
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:859
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1060
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
+msgid "while reading kerberos container information"
+msgstr "kerberos-ის კონტეინერის ინფორმაციის წაკითხვსას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:129
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:143
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:504
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:518
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:150
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:165
+msgid "while providing time specification"
+msgstr "დროის სპეციფიკაციის მიწოდებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:304
+msgid "while creating policy object"
+msgstr "პოლიტიკის ობიექტის შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:279
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1475
+msgid "while reading realm information"
+msgstr "რეალმის ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:348
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:407
+msgid "while destroying policy object"
+msgstr "პოლიტიკის ობიექტის განადგურებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:358
+#, c-format
+msgid "This will delete the policy object '%s', are you sure?\n"
+msgstr "ეს წაშლის პოლიტიკის ობიექტს '%s'. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:473
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:663
+msgid "while modifying policy object"
+msgstr "პოლიტიკის ობიექტის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:487
+#, c-format
+msgid "while reading information of policy '%s'"
+msgstr "პოლიტიკის \"%s\" ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:692
+msgid "while viewing policy"
+msgstr "პოლიტიკის დათვალიერებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:701
+#, c-format
+msgid "while viewing policy '%s'"
+msgstr "პოლიტიკის ('%s') დათვალიერებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:835
+msgid "while listing policy objects"
+msgstr "პოლიტიკის ობიექტების ჩამოთვლიას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:419
+#, c-format
+msgid "for subtree while creating realm '%s'"
+msgstr "ქვეხისთვის რეალმის '%s' შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:431
+#, c-format
+msgid "for container reference while creating realm '%s'"
+msgstr "კონტეინერის მიმართვისთვის რეალმის ('%s') შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:456
+#, c-format
+msgid "invalid search scope while creating realm '%s'"
+msgstr "ძებნის არასწორი დიაპაზონი რეალმის '%s' შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:795
+#, c-format
+msgid "'%s' is an invalid option\n"
+msgstr "'%s' არასწორი პარამეტრია \n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:479
+#, c-format
+msgid "Initializing database for realm '%s'\n"
+msgstr "ბაზის ინიციალიზაცია რეალმისთვის '%s'\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:503
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:664
+#, c-format
+msgid "while creating realm '%s'"
+msgstr "რეალმის \"%s\" შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:523
+#, c-format
+msgid "Enter DN of Kerberos container: "
+msgstr "შეიყვანეთ Kerberos-ის კონტეინერის DN: "
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:558
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:866
+#, c-format
+msgid "while reading information of realm '%s'"
+msgstr "რეალმის '%s' ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:702
+msgid "while reading Kerberos container information"
+msgstr "kerberos-ის კონტეინერის ინფორმაციის წაკითხვსას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:745
+#, c-format
+msgid "for subtree while modifying realm '%s'"
+msgstr "ქვეხისთვის რეალმის '%s' ცვლილებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:756
+#, c-format
+msgid "for container reference while modifying realm '%s'"
+msgstr "კონტეინერის მიმართვისთვის რეალმის ('%s') ცვლილებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:784
+#, c-format
+msgid "specified for search scope while modifying information of realm '%s'"
+msgstr "მითითებულია ძებნის დიაპაზონისთვის რეალმის '%s' ინფორმაციის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:823
+#, c-format
+msgid "while modifying information of realm '%s'"
+msgstr "რეალმის '%s' ინფორმაციის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:912
+msgid "Realm Name"
+msgstr "რეალმის სახელი"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+msgid "Subtree"
+msgstr "ქვეხე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:918
+msgid "Principal Container Reference"
+msgstr "პრინციპალის კონტეინერის მიმართვა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:925
+msgid "SearchScope"
+msgstr "ძებნისდიაპაზონი"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+msgid "Invalid !"
+msgstr "არასწორია !"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:930
+msgid "KDC Services"
+msgstr "KDC სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:945
+msgid "Admin Services"
+msgstr "ადმინის სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:960
+msgid "Passwd Services"
+msgstr "Passwd -ის სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:976
+msgid "Maximum Ticket Life"
+msgstr "ბილეთის მაქსიმალური სიცოცხლე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:981
+msgid "Maximum Renewable Life"
+msgstr "მაქსიმალური განახლებადი სიცოცხლე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:988
+msgid "Ticket flags"
+msgstr "ბილეთის ალმები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1067
+msgid "while listing realms"
+msgstr "რეალმების სიის გამოტანისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1399
+msgid "while adding entries to database"
+msgstr "ბაზაში ჩანაწერების დამატებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1440
+#, c-format
+msgid "Deleting KDC database of '%s', are you sure?\n"
+msgstr "წაიშლება '%s'-ის KDC-ის ბაზა. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1451
+#, c-format
+msgid "OK, deleting database of '%s'...\n"
+msgstr "კარგი, მიმდინარეობს ბაზის წაშლა '%s'...\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1484
+#, c-format
+msgid "deleting database of '%s'"
+msgstr "%s-ის ბაზის წაშლა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1489
+#, c-format
+msgid "** Database of '%s' destroyed.\n"
+msgstr "** ბაზა '%s' განადგურდა.\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:79
+msgid "ldap_service_password_file not configured"
+msgstr "ldap_service_password_file მორგებული არაა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:124
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:131
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:141
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:169
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:239
+msgid "while setting service object password"
+msgstr "სერვისის ობიექტის პაროლის დაყენებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:148
+msgid "while getting service password filename"
+msgstr "სერვისის პაროლის ფაილის სახელის მიღებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:161
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:481
+#, c-format
+msgid "Password for \"%s\""
+msgstr "პაროლი \"%s\" -სთვის"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:164
+#, c-format
+msgid "Re-enter password for \"%s\""
+msgstr "ხელახლა შეიყვანეთ ახალი პაროლი \"%s\"-სთვის"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:175
+#, c-format
+msgid "%s: Invalid password\n"
+msgstr "%s: არასწორი პაროლი\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:185
+msgid "Failed to convert the password to hexadecimal"
+msgstr "პაროლის თექვსმეტობითში გადაყვანის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:195
+#, c-format
+msgid "Failed to open file %s: %s"
+msgstr "ფაილის (%s) გახსნა შეუძლებელია: %s"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:217
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:259
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:295
+msgid "Failed to write service object password to file"
+msgstr "სერვისის ობიექტის პაროლის ფაილში ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:223
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:280
+msgid "Error reading service object password file"
+msgstr "შეცდომა სერვისის ობიეტქის პაროლის ფაილის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:248
+#, c-format
+msgid "Error creating file %s"
+msgstr "ფაილის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:105
+#, c-format
+msgid ""
+"Usage: kdb5_ldap_util -D user_dn -w passwd -H ldapuri -r realm\n"
+"\tcmd cmd_options\n"
+"create -subtrees subtree_dn_list -sscope search_scope\n"
+"\t\t-containerref container_reference_dn\n"
+"\t\t-m|-P password|-sf stashfilename -s\n"
+"\t\t-k mkeytype -kv mkeyVNO -M mkeyname\n"
+"\t\t-maxtktlife max_ticket_life\n"
+"\t\t-maxrenewlife max_renewable_ticket_life ticket_flags\n"
+"modify -subtrees subtree_dn_list -sscope search_scope\n"
+"\t\t-containerref container_reference_dn\n"
+"\t\t-maxtktlife max_ticket_life\n"
+"\t\t-maxrenewlife max_renewable_ticket_life ticket_flags\n"
+"view\n"
+"destroy -f\n"
+"list\n"
+"stashsrvpw -f filename service_dn\n"
+"create_policy -maxtktlife max_ticket_life\n"
+"\t\t-maxrenewlife max_renewable_ticket_life ticket_flags policy\n"
+"modify_policy -maxtktlife max_ticket_life\n"
+"\t\t-maxrenewlife max_renewable_ticket_life ticket_flags policy\n"
+"view_policy policy\n"
+"destroy_policy -force policy\n"
+"list_policy\n"
+msgstr ""
+"გამოყენება: kdb5_ldap_util -D მომხმარებლის_dn -w პაროლი -H ldapuri -r "
+"რეალმი\n"
+"\tბრძანება ბრძანებისპარამეტრები\n"
+"create -subtrees ქვეხის_dn_ის_სია\t -sscope ძებნის_დიაპაზონი\n"
+"\t\t-containerref კონტეინერის_მიმართვის_dn\n"
+"\t\t-m|-P პაროლი|-sf stash_ფაილისსახელი -s\n"
+"\t\t-k mkeytype -kv mkeyVNO -M mგასაღებისსახელი\n"
+"\t\t-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ\n"
+"\t\t-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ "
+"ბილეთის_ალმები\n"
+"modify -subtrees ქვეხის_dn_ის_სია -sscope ძებნის_დიაპაზონი\n"
+"\t\t-containerref კონტეინერის_მიმართვის_dn\n"
+"\t\t-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ\n"
+"\t\t-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ "
+"ბილეთის_ალმები\n"
+"view\n"
+"destroy -f\n"
+"list\n"
+"stashsrvpw -f ფაილისსახელი სერვისის_dn\n"
+"create_policy -maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ\n"
+"\t\t-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ "
+"ბილეთის_ალმები პოლიტიკა\n"
+"modify_policy -maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ\n"
+"\t\t-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ "
+"ბილეთის_ალმები პოლიტიკა\n"
+"view_policy პოლიტიკა\n"
+"destroy_policy -force პოლიტიკა\n"
+"list_policy\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:329
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:337
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:345
+msgid "while reading ldap parameters"
+msgstr "ldap-ის პარამეტრების წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:443
+msgid "while initializing error handling"
+msgstr "შეცდომების დამუშავებლის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:451
+msgid "while initializing ldap handle"
+msgstr "ldap-ის დამმუშავებლის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:465
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:474
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:487
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:529
+msgid "while retrieving ldap configuration"
+msgstr "ldap-ის კონფიგურაციის მიღებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:504
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:511
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:520
+msgid "while initializing server list"
+msgstr "სერვერების სიის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:551
+msgid "while setting up lib handle"
+msgstr "ბიბლიოთეკის დამმუშავებლის მორგებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:560
+msgid "while reading ldap configuration"
+msgstr "ldap-ის კონფიგურაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:68
+msgid "Unable to read Kerberos container"
+msgstr "Kerberos-ის კონტეინერის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:73
+msgid "Unable to read Realm"
+msgstr "რეალმის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:214
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_create.c:71
+msgid "Error processing LDAP DB params"
+msgstr "შეცდომა LDAP DB-ის პარამეტრების დამუშავებისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:220
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_create.c:77
+msgid "Error reading LDAP server params"
+msgstr "შეცდომა LDAP სერვერის პარამეტრების წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:64
+msgid "LDAP bind dn value missing"
+msgstr "LDAP-ის მისამაგრებელი DN-ის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:69
+msgid "LDAP bind password value missing"
+msgstr "LDAP-ის მისამაგრებელი პაროლის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:78
+msgid "Error reading password from stash"
+msgstr "Stash ფაილიდან პაროლის წაიკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:85
+msgid "Service password length is zero"
+msgstr "სერვისის პაროლის სიგრძე ნულოვანია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:145
+#, c-format
+msgid "Cannot bind to LDAP server '%s' with SASL mechanism '%s': %s"
+msgstr "LDAP სერვერთან '%s' SASL მექანიზმით '%s' მიბმის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:158
+#, c-format
+msgid "Cannot bind to LDAP server '%s' as '%s': %s"
+msgstr "შეცდომა LDAP სერვერთან '%s' მიბმისას, როგორც '%s': %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:183
+#, c-format
+msgid "Cannot create LDAP handle for '%s': %s"
+msgstr "'%s'-სთვის LDAP დამმუშავებლის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:56
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:67
+msgid "Error reading kerberos container location from krb5.conf"
+msgstr "Krb5.conf-დან Kerbreros-ის კონტეინერის მდებარეობის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:75
+msgid "Kerberos container location not specified"
+msgstr "Kerberos-ის კონტეინერის მდებარეობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:56
+#, c-format
+msgid "Error reading '%s' attribute: %s"
+msgstr "შეცდომა %s ატრიბუტის წაკითხვისას: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:219
+msgid "KDB module requires -update argument"
+msgstr "KDB მოდულისთვის -update არგუმენტი აუცილებელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:225
+#, c-format
+msgid "'%s' value missing"
+msgstr "'%s' მნიშვნელობა აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:283
+#, c-format
+msgid "unknown option '%s'"
+msgstr "უცნობი პარამეტრი '%s'"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:343
+msgid "Minimum connections required per server is 2"
+msgstr "თითოეულ სერვერთან მიერთების მინიმალური რაოდენობა ორის ტოლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:160
+msgid "Default realm not set"
+msgstr "ნაგულისხმები რეალმი დაყენებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:264
+msgid "DN information missing"
+msgstr "DN ინფორმაცია აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:476
+msgid "dn information missing"
+msgstr "dn ინფორმაცია აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:137
+msgid "Principal does not belong to realm"
+msgstr "პრინციპალი რეალმს არ ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:305
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:314
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:322
+#, c-format
+msgid "%s option not supported"
+msgstr "%s პარამეტრი მხარდაუჭერელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:329
+#, c-format
+msgid "unknown option: %s"
+msgstr "უცნობი პარამეტრი: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:336
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:343
+#, c-format
+msgid "%s option value missing"
+msgstr "%s პარამეტრის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:676
+msgid "DN is out of the realm subtree"
+msgstr "DN რეალმის ქვეხის გარეთაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:708
+msgid "ldap object is already kerberized"
+msgstr "ldap ობიექტი უკვე kerberos-ის მართვის ქვეშაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:803
+msgid "Principal does not belong to the default realm"
+msgstr "პრინციპალი ნაგულისხმებ რეალმს არ ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:869
+#, c-format
+msgid ""
+"operation can not continue, more than one entry with principal name \"%s\" "
+"found"
+msgstr ""
+"ოპერაციის გაგრძელება შეუძლებელია. ნაპოვნია პრინციპალის სახელის \"%s\" მქონე "
+"ერთზე მეტი ჩანაწერი"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:928
+#, c-format
+msgid "'%s' not found"
+msgstr "'%s' არ არსებობს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:992
+#, c-format
+msgid ""
+"link information can not be set/updated as the kerberos principal belongs to "
+"an ldap object"
+msgstr ""
+"ბმულის ინფორმაციის დაყენება/განახლება შეუძლებელია, რადგან kerberos-ის "
+"პრინციპალი ldap ობიექტს ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1007
+#, c-format
+msgid "Failed getting object references"
+msgstr "ობიექტის მიმართვის მიღების შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1014
+#, c-format
+msgid "kerberos principal is already linked to a ldap object"
+msgstr "kerberos-ის პრინციპალი ldap ობიექტზე უკვე მიბმულია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1340
+msgid "ticket policy object value: "
+msgstr "ბილეტის პოლიტიკის ობიექტის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1388
+#, c-format
+msgid "Principal delete failed (trying to replace entry): %s"
+msgstr "პრინციპალის წაშლის შეცდომა (ჩანაწერის ჩანაცვლებისას): %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1398
+#, c-format
+msgid "Principal add failed: %s"
+msgstr "პრინციპალის დამატების შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1436
+#, c-format
+msgid "User modification failed: %s"
+msgstr "მომხმარებლის ცვლილების შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1510
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:294
+msgid "Error reading ticket policy"
+msgstr "ბილეტის პოლიტიკის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1640
+msgid "unable to decode stored principal key data"
+msgstr "დამახსოვრებული პრინციპალის გასაღების მონაცემების გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1698
+msgid "unable to decode stored principal pw history"
+msgstr "დამახსოვრებული პრინციპალის პაროლის ისტორიის გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:223
+msgid "Realm information not available"
+msgstr "რეალმის ინფორმაცია მიუწვდომელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:306
+#, c-format
+msgid "Realm Delete FAILED: %s"
+msgstr "რეალმის წაშლის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:386
+msgid "subtree value: "
+msgstr "ქვეხის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:403
+msgid "container reference value: "
+msgstr "შემცველობის მითითების მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:486
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:549
+msgid "Kerberos Container information is missing"
+msgstr "Kerberos -ის კონტეიერის ინფორმაცია არ არსებობს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:498
+msgid "Invalid Kerberos container DN"
+msgstr "არასწორი Kerberos-ის შემცველი DN"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:514
+#, c-format
+msgid "Kerberos Container create FAILED: %s"
+msgstr "Kerberos-ის კონტეინერის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:557
+#, c-format
+msgid "Kerberos Container delete FAILED: %s"
+msgstr "Kerberos-ის კონტეინერის წაშლის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:633
+msgid "realm object value: "
+msgstr "რეალმის ობიექტის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:48
+msgid "Not a hexadecimal password"
+msgstr "თექვსმეტობით პაროლს არ წარმოადგენს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:55
+msgid "Password corrupt"
+msgstr "პაროლი დაზიანებულია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:78
+#, c-format
+msgid "Cannot open LDAP password file '%s': %s"
+msgstr "შეცდომა LDAP-ის პაროლის ფაილის ('%s') გახსნისას: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:108
+#, c-format
+msgid "Bind DN entry '%s' missing in LDAP password file '%s'"
+msgstr "მისაბმელი DN-ის ჩანაწერი '%s' LDAP პაროლებს ფაილში '%s' ვერ ვიპოვე"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:66
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:142
+msgid "Ticket Policy Name missing"
+msgstr "აკლია ბილეთის პოლიტიკის სახელი"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:154
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:231
+msgid "ticket policy object: "
+msgstr "ბილეთის პოლიტიკის ობიექტი: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:219
+msgid "Ticket Policy Object information missing"
+msgstr "აკლია ბილეთის პოლიტიკის ობიექტის ინფორმაცია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:311
+msgid "Ticket Policy Object DN missing"
+msgstr "აკლია ბილეთის პოლიტიკის ობიექტის DN"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:338
+msgid "Delete Failed: One or more Principals associated with the Ticket Policy"
+msgstr ""
+"წაშლის შეცდომა: ბილეთის პოლიტიკასთან ერთი ან მეტი პრინციპალია ასოცირებული"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:447
+msgid "Error reading container object"
+msgstr "შემცველი ობიექტის გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:132
+#, c-format
+msgid "%s (path: %s): %s"
+msgstr "%s (ბილიკი: %s): %s"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:164
+#, c-format
+msgid "Unsupported argument \"%s\" for LMDB"
+msgstr "LMDB-ის მხარდაუჭერელი არგუმენტი '%s'"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:294
+msgid "LMDB environment open failure"
+msgstr "LMDB გარემოს გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:319
+msgid "LMDB read failure"
+msgstr "LMDB გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:394
+msgid "LMDB write failure"
+msgstr "LMDB ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:418
+msgid "LMDB delete failure"
+msgstr "LMDB წაშლის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:521
+#, c-format
+msgid "LMDB file %s does not exist"
+msgstr "LMDB ფაილი %s არ არსებობს"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:566
+msgid "LMDB open failure"
+msgstr "LMDB გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:593
+#, c-format
+msgid "LMDB file %s already exists"
+msgstr "LMDB ფაილი %s უკვე არსებობს"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:658
+msgid "LMDB create error"
+msgstr "LMDB შექმნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:676
+#, c-format
+msgid "Could not unlink %s"
+msgstr "ბმის %s მოხსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:760
+#, c-format
+msgid "Unsupported argument \"%s\" for lmdb"
+msgstr "მხარდაუჭერელი არგუმენტი \"%s\" lmdb-სთვის"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:806
+msgid "LMDB lockout write failure"
+msgstr "LMDB-ის ბლოკის ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:882
+msgid "LMDB principal iteration failure"
+msgstr "LMDB პრინციპალის იტერაციის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:985
+msgid "LMDB policy iteration failure"
+msgstr "LMDB პოლიტიკის იტერაციის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:1016
+msgid "LMDB transaction commit failure"
+msgstr "LMDB ტრანზაქციის გადაცემის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:1115
+msgid "LMDB lockout update failure"
+msgstr "LMDB -ის ბლოკის განახლების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_clnt.c:1088
+msgid "No pkinit_anchors supplied"
+msgstr "\"pkinit_anchors\" მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:957
+#, c-format
+msgid "%s: %s"
+msgstr "%s: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:987
+#, c-format
+msgid "%s (depth %d): %s"
+msgstr "%s (სიღრმე %d): %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1230
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4180
+msgid "Pass phrase for"
+msgstr "საკვანძო ფრაზა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1516
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1526
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1784
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1794
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2271
+msgid "Failed to DER encode PKCS7"
+msgstr "PKCS7-ის DER-ით დაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1617
+msgid "Failed to verify own certificate"
+msgstr "საკუთარი სერტიფიკატის გადამოწმების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1768
+msgid "Failed to add digest attribute"
+msgstr "დაიჯესტის ატრიბუტის დამატების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1890
+msgid "Failed to decode CMS message"
+msgstr "შეცდომა CMS-შეტყობინების დეკოდირებისას"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1908
+msgid "Invalid pkinit packet: octet string expected"
+msgstr "არასწორი pkinit პაკეტი: მოველოდი ოქტეტ სტრიქონს"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1926
+msgid "wrong oid\n"
+msgstr "არასწორი oid\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2078
+msgid "Failed to verify received certificate"
+msgstr "მიღებული სერტიფიკატის გადამოწმება შეუძლებელია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2114
+msgid "Failed to verify CMS message"
+msgstr "CMS შეტყობინების გადამოწმება შეუძლებელია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2259
+msgid "Failed to encrypt PKCS7 object"
+msgstr "PKCS7 ობიექტის დაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2317
+msgid "Failed to decode PKCS7"
+msgstr "PKCS7-ის გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2333
+msgid "Failed to decrypt PKCS7 message"
+msgstr "PKCS7 შეტყობინების გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2756
+msgid "Failed to fetch SSKDF"
+msgstr "SSKDF-ის გამოთხოვის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2763
+msgid "Failed to instantiate SSKDF"
+msgstr "SSKDF-ის კონკრეტული მაგალითის მოყვანის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2776
+msgid "Failed to derive key using SSKDF"
+msgstr "შეცდომა SSKDF-ის საშუალებით გასაღების მიღებისას"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2838
+msgid "Failed to compute digest"
+msgstr "დაიჯესტის გამოთვლის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4300
+#, c-format
+msgid "Cannot read certificate file '%s'"
+msgstr "სერტიფიკატის ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4308
+#, c-format
+msgid "Cannot read key file '%s'"
+msgstr "გასაღების ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5165
+#, c-format
+msgid "Cannot open file '%s'"
+msgstr "ფაილის გახსნის შეცდომა: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5172
+#, c-format
+msgid "Cannot read file '%s'"
+msgstr "ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:415
+#, c-format
+msgid "Unsupported type while processing '%s'\n"
+msgstr "არასწორი ტიპი '%s'-ის დამუშავებისას\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:451
+msgid "Internal error parsing X509_user_identity\n"
+msgstr "შიდა შეცდომა X509_user_identity-ის დამუშავებისას\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:552
+msgid "No user identity options specified"
+msgstr "მომხმარებლის იდენტიფიკაციის პარამეტრები მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:403
+#, c-format
+msgid "PKINIT: no freshness token, rejecting auth from %s"
+msgstr "PKINIT: კოდი მოძველებულია. ავთენტიკაცია %s -დან უარყოფილია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:407
+#, c-format
+msgid "PKINIT: freshness token received from %s"
+msgstr "PKINIT: ახალი კოდი მიღებულია წყაროდან: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:409
+#, c-format
+msgid "PKINIT: no freshness token received from %s"
+msgstr "PKINIT: %s-დან ახალი კოდი მიღებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:512
+msgid "Pkinit request not signed, but client not anonymous."
+msgstr "Pkinit მოთხოვნა ხელმოწერილი არაა, მაგრამ კლიენტი ანონიმური არაა."
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:546
+msgid "Anonymous pkinit without DH public value not supported."
+msgstr "ანონიმური pkinit-ი DH-ის საჯარო მნიშვნელობის გარეშე მხარდაუჭერელია."
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1083
+#, c-format
+msgid "No pkinit_identity supplied for realm %s"
+msgstr "\"pkinit_identity\" რეალმისთვის %s მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1094
+#, c-format
+msgid "No pkinit_anchors supplied for realm %s"
+msgstr "\"pkinit_anchors\" რეალმისთვის %s მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1114
+#, c-format
+msgid "OCSP is not supported: (realm: %s)"
+msgstr "OCSP მხარდაუჭერელია: (რეალმი: %s)"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1515
+msgid "No realms configured correctly for pkinit support"
+msgstr ""
+"\"pkinit\"-ის მხარდაჭერისთვის სწორად მორგებული რეალმები აღმოჩენილი არაა"
+
+#: ../../src/plugins/preauth/spake/groups.c:237
+msgid "No SPAKE preauth groups configured"
+msgstr "SPAKE პრეავთენტიკაციის ჯგუფები მითითებული არაა"
+
+#: ../../src/plugins/preauth/spake/groups.c:257
+#, c-format
+msgid "SPAKE challenge group not a permitted group: %s"
+msgstr "SPAKE გამოწვევის ჯგუფი ნებადართულ ჯგუფს არ წარმოადგენს: %s"
+
+#: ../../src/plugins/preauth/spake/spake_kdc.c:533
+msgid "Unknown SPAKE request type"
+msgstr "SPAKE-ის მოთხოვნის უცნობი ტიპი"
+
+#: ../../src/util/support/errors.c:77
+msgid "Kerberos library initialization failure"
+msgstr "Kerberos -ის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../../src/util/support/errors.c:83
+msgid "Error code translation unavailable"
+msgstr "შეცდომის კოდის თარგმანი მიუწვდომელია"
+
+#: ../../src/util/support/errors.c:92
+#, c-format
+msgid "error %ld"
+msgstr "შეცდომა %ld"
+
+#: ../../src/util/support/plugins.c:200
+#, c-format
+msgid "unable to find plugin %s: %s"
+msgstr "დამატების პოვნის შეცდომა %s: %s"
+
+#: ../../src/util/support/plugins.c:288
+msgid "unknown failure"
+msgstr "უცნობი შეცდომა"
+
+#: ../../src/util/support/plugins.c:291
+#, c-format
+msgid "unable to load plugin %s: %s"
+msgstr "დამატების ჩატვირთვის შეცდომა %s: %s"
+
+#: ../../src/util/support/plugins.c:314
+#, c-format
+msgid "unable to load DLL %s"
+msgstr "dll-ის ჩატვირთვის შეცდომა %s"
+
+#: ../../src/util/support/plugins.c:330
+#, c-format
+msgid "plugin unavailable: %s"
+msgstr "დამატება ხელმიუწვდომელია: %s"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:23
+msgid "No @ in SERVICE-NAME name string"
+msgstr "SERVICE-NAME სახელი-სტრიქონში @ არ არსებობს"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:24
+msgid "STRING-UID-NAME contains nondigits"
+msgstr "STRING-UID-NAME არაციფრულ მონაცემებს შეიცავს"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:25
+msgid "UID does not resolve to username"
+msgstr "UID-ი მომხმარებლის სახელში არ ითარგმნება"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:26
+msgid "Validation error"
+msgstr "შემოწმების შეცდომა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:27
+msgid "Couldn't allocate gss_buffer_t data"
+msgstr "შეცდომა gss_buffer_t-ის მონაცემების გამოყოფისას"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:28
+msgid "Message context invalid"
+msgstr "შეტყობინების კონტექსტი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:29
+msgid "Buffer is the wrong size"
+msgstr "ბუფერს არასწორი ზომა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:30
+msgid "Credential usage type is unknown"
+msgstr "ავტორიზაციის დეტალების გამოყენების ტიპი უცნობია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:31
+msgid "Unknown quality of protection specified"
+msgstr "მითითებულია დაცვის ხარისხი უცნობია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:32
+msgid "Local host name could not be determined"
+msgstr "ლოკალური ჰოსტის სახელის დადგენა შეუძლებელია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:33
+msgid "Hostname in SERVICE-NAME string could not be canonicalized"
+msgstr "SERVICE-NAME სტრიქონში ჰოსტის სახელის კანონიკალიზება შეუძლებელია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:34
+msgid "Mechanism is incorrect"
+msgstr "მექანიზმი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:35
+msgid "Token header is malformed or corrupt"
+msgstr "კოდის თავსართი არასწორი ან დაზიანებულია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:36
+msgid "Packet was replayed in wrong direction"
+msgstr "პაკეტის გადაცემის მისამართი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:37
+msgid "Token is missing data"
+msgstr "კოდს მონაცემები აკლია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:38
+msgid "Token was reflected"
+msgstr "კოდი აირეკლა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:39
+msgid "Received token ID does not match expected token ID"
+msgstr "მიღებული კოდის ID მოსალოდნელი კოდის ID-ს არ ემთხვევა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:40
+msgid "The given credential's usage does not match the requested usage"
+msgstr ""
+"მითითებული ავტორიზაციის დეტალების გამოყენება მოთხოვნილ გამოყენებას არ "
+"ემთხვევა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:41
+msgid "Storing of acceptor credentials is not supported by the mechanism"
+msgstr ""
+"აქსეპტორის ავტორიზაციის დეტალების დამახსოვრება მექანიზმის მიერ მხარდაჭერილი "
+"არაა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:42
+msgid "Storing of non-default credentials is not supported by the mechanism"
+msgstr ""
+"არანაგულისხმები ავტორიზაციის დეტალების დამახსოვრება მექანიზმის მიერ "
+"მხარდაჭერილი არაა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:23
+msgid "Principal in credential cache does not match desired name"
+msgstr ""
+"ავტორიზაციის დეტალების ქეშში არსებული პრინციპალი სასურველ სახელს არ ემთხვევა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:24
+msgid "No principal in keytab matches desired name"
+msgstr "Keytab-ში არც ერთი პრინციპალი სასურველ სახელს არ ემთხვევა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:25
+msgid "Credential cache has no TGT"
+msgstr "ავტორიზაციის დეტალების ქეშს TGT არ გააჩნია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:26
+msgid "Authenticator has no subkey"
+msgstr "ავთენტიკატორს ქვეგასაღები არ გააჩნია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:27
+msgid "Context is already fully established"
+msgstr "კონტექსტი უკვე სრულად აწყობილია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:28
+msgid "Unknown signature type in token"
+msgstr "კოდში არსებული ხელმოწერის ტიპი უცნობია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:29
+msgid "Invalid field length in token"
+msgstr "კოდში ველის არასწორი სიგრძე"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:30
+msgid "Attempt to use incomplete security context"
+msgstr "არასრული უსაფრთხოების კონტექსტის გამოყენების მცდელობა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:31
+msgid "Bad magic number for krb5_gss_ctx_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_ctx_id_t-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:32
+msgid "Bad magic number for krb5_gss_cred_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_cred_id_t-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:33
+msgid "Bad magic number for krb5_gss_enc_desc"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_enc_desc-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:34
+msgid "Sequence number in token is corrupt"
+msgstr "კოდში მიმდევრობის ნომერი არასწორია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:35
+msgid "Credential cache is empty"
+msgstr "ავტორიზაციის დეტალების ქეში ცარიელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:36
+msgid "Acceptor and Initiator share no checksum types"
+msgstr "აქცეპტანტის და ინიციატორის საკონტროლო ჯამის ტიპები განსხვავდება"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:37
+msgid "Requested lucid context version not supported"
+msgstr "მოთხოვნილი lucid-ის კონტექსტის ვერსია მხარდაუჭერელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:38
+msgid "PRF input too long"
+msgstr "PRF შეყვანა ძალიან გრძელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:39
+msgid "Bad magic number for iakerb_ctx_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი iakerb_ctx_id_t -სთვის"
+
+#: ../lib/kadm5/chpass_util_strings.c:23
+msgid "while getting policy info."
+msgstr "პოლიტიკის ინფორმაციის მიღებისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:24
+msgid "while getting principal info."
+msgstr "პრინციპალის ინფორმაციის მიღებისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:25
+msgid "New passwords do not match - password not changed.\n"
+msgstr "ახალი პაროლები არ ემთხვევა - პაროლი არ შეცვლილა.\n"
+
+#: ../lib/kadm5/chpass_util_strings.c:26
+msgid "New password"
+msgstr "ახალი პაროლი"
+
+#: ../lib/kadm5/chpass_util_strings.c:27
+msgid "New password (again)"
+msgstr "ახალი პაროლი(თავიდან)"
+
+#: ../lib/kadm5/chpass_util_strings.c:28
+msgid ""
+"You must type a password. Passwords must be at least one character long.\n"
+msgstr ""
+"პაროლის აკრეფა აუცილებელია. პაროლი მინიმუმ ერთი სიმბოლოს სიგრძის უნდა იყოს.\n"
+
+#: ../lib/kadm5/chpass_util_strings.c:29
+msgid "yet no policy set! Contact your system security administrator."
+msgstr ""
+"პოლიტიკა ჯერ დაყენებული არაა! დაუკავშირდით თქვენი სისტემის უსაფრთხოების "
+"ადმინისტრატორს."
+
+#: ../lib/kadm5/chpass_util_strings.c:31
+msgid ""
+"New password was found in a dictionary of possible passwords and\n"
+"therefore may be easily guessed. Please choose another password.\n"
+"See the kpasswd man page for help in choosing a good password."
+msgstr ""
+"ახალი პაროლი შესაძლო პაროლების ლექსიკონშია აღმოჩენილი და\n"
+"ამიტომ შეიძლება ადვილად გაარტყან. აირჩიეთ სხვა პაროლი.\n"
+"კარგი პაროლის შედგენაში დასახმარებლად იხილეთ kpasswd-ის man გვერდი."
+
+#: ../lib/kadm5/chpass_util_strings.c:32
+msgid "Password not changed."
+msgstr "პაროლი არ შეცვლილა."
+
+#: ../lib/kadm5/chpass_util_strings.c:33
+#, c-format
+msgid ""
+"New password is too short.\n"
+"Please choose a password which is at least %d characters long."
+msgstr ""
+"ახალი პაროლი მეტისმეტად მოკლეა.\n"
+"გთხოვთ, აირჩიოთ პაროლი, რომელიც სულ ცოტა %d სიმბოლოს შეიცავს."
+
+#: ../lib/kadm5/chpass_util_strings.c:34
+#, c-format
+msgid ""
+"New password does not have enough character classes.\n"
+"The character classes are:\n"
+"\t- lower-case letters,\n"
+"\t- upper-case letters,\n"
+"\t- digits,\n"
+"\t- punctuation, and\n"
+"\t- all other characters (e.g., control characters).\n"
+"Please choose a password with at least %d character classes."
+msgstr ""
+"ახალ პაროლს სიმბოლოს საკმარისი კლასები არ გააჩნია.\n"
+"სიმბოლოს კლასებია:\n"
+"\t- დაბალი რეგისტრის სიმბოლოები (პატარა ასოები),\n"
+"\t- მაღალი რეგისტრის სიმბოლოები (დიდი ასოები),\n"
+"\t- ციფრები,\n"
+"\t- პუნქტუაციის ნიშნები და\n"
+"\t- სხვა ყველა სიმბოლო (მაგ: კონტროლის სიმბოლოები).\n"
+"შეიყვანეთ პაროლი, რომელიც, ყველაზე ცოტა, %d სიმბოლოს კლასს შეიცავს."
+
+#: ../lib/kadm5/chpass_util_strings.c:35
+#, c-format
+msgid ""
+"Password cannot be changed because it was changed too recently.\n"
+"Please wait until %s before you change it.\n"
+"If you need to change your password before then, contact your system\n"
+"security administrator."
+msgstr ""
+"პაროლს ვერ შეცვლით, რადგან ის სულ ცოტა ხნის წინ შეიცვალა.\n"
+"მოითმინეთ %s-მდე, სანამ მისი შეცვლის უფლება გექნებათ.\n"
+"თუ გჭირდებათ, რომ პაროლი მითითებულ თარიღამდე შეცვალოთ,\n"
+"თქვენს უსაფრთხოების ადმინისტრატორს დაუკავშირდით."
+
+#: ../lib/kadm5/chpass_util_strings.c:36
+msgid "New password was used previously. Please choose a different password."
+msgstr "ახალი პაროლი უკვე იყო გამოყენებული. აირჩიეთ სხვა პაროლი."
+
+#: ../lib/kadm5/chpass_util_strings.c:37
+msgid "while trying to change password."
+msgstr "პაროლის შეცვლის მცდელობისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:38
+msgid "while reading new password."
+msgstr "ახალი პაროლის წაკითხვისას."
+
+#: ../lib/kadm5/kadm_err.c:23
+msgid "Operation failed for unspecified reason"
+msgstr "ოპერაცია მიუთითებელი მიზეზით ავარიულად დასრულდა"
+
+#: ../lib/kadm5/kadm_err.c:24
+msgid "Operation requires ``get'' privilege"
+msgstr "ოპერაციას \"get\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:25
+msgid "Operation requires ``add'' privilege"
+msgstr "ოპერაციას \"add\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:26
+msgid "Operation requires ``modify'' privilege"
+msgstr "ოპერაციას \"modify\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:27
+msgid "Operation requires ``delete'' privilege"
+msgstr "ოპერაციას \"delete\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:28
+msgid "Insufficient authorization for operation"
+msgstr "ოპერაციისთვის არასაკმარისი ავტორიზაცია"
+
+#: ../lib/kadm5/kadm_err.c:29 ../lib/kdb/adb_err.c:29
+msgid "Database inconsistency detected"
+msgstr "აღმოჩენილია ბაზის არამდგრადობა"
+
+#: ../lib/kadm5/kadm_err.c:30 ../lib/kdb/adb_err.c:24
+msgid "Principal or policy already exists"
+msgstr "პრინციპალი ან პოლიტიკა უკვე არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:31
+msgid "Communication failure with server"
+msgstr "სერვერთან ურთიერთობის შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:32
+msgid "No administration server found for realm"
+msgstr "რეალმისთვის ადმინისტრირების სერვერი ვერ ვიპოვე"
+
+#: ../lib/kadm5/kadm_err.c:33
+msgid "Password history principal key version mismatch"
+msgstr "პაროლის ისტორიის პრინციპალის გასაღების ვერსია არ ემთხვევა"
+
+#: ../lib/kadm5/kadm_err.c:34
+msgid "Connection to server not initialized"
+msgstr "სერვერთან მიერთება ინიციალიზებული არაა"
+
+#: ../lib/kadm5/kadm_err.c:35
+msgid "Principal does not exist"
+msgstr "პრინციპალი არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:36
+msgid "Policy does not exist"
+msgstr "პოლიტიკა არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:37
+msgid "Invalid field mask for operation"
+msgstr "ველის ნიღაბი ოპერაციისთვის არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:38
+msgid "Invalid number of character classes"
+msgstr "სიმბოლოს კლასების არასწორი რაოდენობა"
+
+#: ../lib/kadm5/kadm_err.c:39
+msgid "Invalid password length"
+msgstr "არასწორი პაროლის სიგრძე"
+
+#: ../lib/kadm5/kadm_err.c:40
+msgid "Illegal policy name"
+msgstr "პოლიტიკის დაუშვებელი სახელი"
+
+#: ../lib/kadm5/kadm_err.c:41
+msgid "Illegal principal name"
+msgstr "პრინციპალის დაუშვებელი სახელი"
+
+#: ../lib/kadm5/kadm_err.c:42
+msgid "Invalid auxiliary attributes"
+msgstr "არასწორი დამხმარე ატრიბუტები"
+
+#: ../lib/kadm5/kadm_err.c:43
+msgid "Invalid password history count"
+msgstr "არასწორი პაროლის ისტორიის რაოდენობა"
+
+#: ../lib/kadm5/kadm_err.c:44
+msgid "Password minimum life is greater than password maximum life"
+msgstr "პაროლის მინიმალური სიცოცხლე მაქსიმალურ სიცოცხლეზე დიდია"
+
+#: ../lib/kadm5/kadm_err.c:45
+msgid "Password is too short"
+msgstr "პაროლი ძალიან მოკლეა"
+
+#: ../lib/kadm5/kadm_err.c:46
+msgid "Password does not contain enough character classes"
+msgstr "პაროლი სიმბოლოების საკმარის კლასებს არ შეიცავს"
+
+#: ../lib/kadm5/kadm_err.c:47
+msgid "Password is in the password dictionary"
+msgstr "პაროლი პაროლების ლექსიკონშია"
+
+#: ../lib/kadm5/kadm_err.c:48
+msgid "Cannot reuse password"
+msgstr "პაროლს თავიდან ვერ გამოიყენებთ"
+
+#: ../lib/kadm5/kadm_err.c:49
+msgid "Current password's minimum life has not expired"
+msgstr "მიმდინარე პაროლის სიცოცხლის მინიმალური ვადა არ ამოწურულა"
+
+#: ../lib/kadm5/kadm_err.c:50 ../lib/krb5/error_tables/kdb5_err.c:67
+msgid "Policy is in use"
+msgstr "პოლიტიკა უკვე გამოიყენება"
+
+#: ../lib/kadm5/kadm_err.c:51
+msgid "Connection to server already initialized"
+msgstr "სერვერამდე მიერთება უკვე ინიციალიზებულია"
+
+#: ../lib/kadm5/kadm_err.c:52
+msgid "Incorrect password"
+msgstr "არასწორი პაროლი"
+
+#: ../lib/kadm5/kadm_err.c:53
+msgid "Cannot change protected principal"
+msgstr "დაცული პრინციპალის შეცვლა შეუძლებელია"
+
+#: ../lib/kadm5/kadm_err.c:54
+msgid "Programmer error! Bad Admin server handle"
+msgstr "პროგრამისტის შეცდომა! ადმინისტრირების სერვერის დამმუშავებელი არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:55
+msgid "Programmer error! Bad API structure version"
+msgstr "პროგრამისტის შეცდომა! API-ის სტრუქტურის ვერსია არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:56
+msgid ""
+"API structure version specified by application is no longer supported (to "
+"fix, recompile application against current KADM5 API header files and "
+"libraries)"
+msgstr ""
+"API-ის სტრუქტურის ვერსია, რომელიც აპლიკაციას სჭირდება, მხარდაჭერილი აღარაა "
+"(პრობლემის გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 "
+"API-ის თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:57
+msgid ""
+"API structure version specified by application is unknown to libraries (to "
+"fix, obtain current KADM5 API header files and libraries and recompile "
+"application)"
+msgstr ""
+"API-ის სტრუქტურის ვერსია, რომელიც აპლიკაციას სჭირდება, უცნობია (პრობლემის "
+"გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 API-ის "
+"თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:58
+msgid "Programmer error! Bad API version"
+msgstr "პროგრამისტის შეცდომა! API-ის ვერსია არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:59
+msgid ""
+"API version specified by application is no longer supported by libraries (to "
+"fix, update application to adhere to current API version and recompile)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, მხარდაჭერილი აღარაა (პრობლემის "
+"გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 API-ის "
+"თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:60
+msgid ""
+"API version specified by application is no longer supported by server (to "
+"fix, update application to adhere to current API version and recompile)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, სერვერის მიერ მხარდაჭერილი "
+"აღარაა (პრობლემის გამოსასწორებლად აპლიკაციის განახლება, რომ მიმდინარე KADM5 "
+"API-ის თავსართის ფაილებისა და ბიბლიოთეკების იყენებდეს და აპლიკაციის თავიდან "
+"კომპილაციაა საჭირო)"
+
+#: ../lib/kadm5/kadm_err.c:61
+msgid ""
+"API version specified by application is unknown to libraries (to fix, obtain "
+"current KADM5 API header files and libraries and recompile application)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, უცნობია. (პრობლემის "
+"გამოსასწორებლად გადმოწერეთ მიმდინარე KADM5 API-ის თავსართის ფაილები და "
+"ბიბლიოთეკები და აპლიკაცია თავიდან დააკომპილეთ)"
+
+#: ../lib/kadm5/kadm_err.c:62
+msgid ""
+"API version specified by application is unknown to server (to fix, obtain "
+"and install newest KADM5 Admin Server)"
+msgstr ""
+"API-ს ვერსია, რომელიც აპლიკაციას სჭირდება, სერვერისთვის უცნობია (პრობლემის "
+"გამოსასწორებლად KADM5 ადმინ სერვერის უახლესი ვერსიის დაყენებაა საჭირო)"
+
+#: ../lib/kadm5/kadm_err.c:63
+msgid "Database error! Required KADM5 principal missing"
+msgstr "ბაზის შეცდომა! აუცილებელი KADM5 პრინციპალი არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:64
+msgid "The salt type of the specified principal does not support renaming"
+msgstr ""
+"მითითებული პრინციპალის მარილის ტიპს სახელის გადარქმევის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/kadm5/kadm_err.c:65
+msgid "Illegal configuration parameter for remote KADM5 client"
+msgstr "არასწორი კონფიგურაციის პარამეტრი დაშორებული KADM5 კლიენტისთვის"
+
+#: ../lib/kadm5/kadm_err.c:66
+msgid "Illegal configuration parameter for local KADM5 client"
+msgstr "არასწორი კონფიგურაციის პარამეტრი ლოკალური KADM5 კლიენტისთვის"
+
+#: ../lib/kadm5/kadm_err.c:67
+msgid "Operation requires ``list'' privilege"
+msgstr "ოპერაციას \"list\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:68
+msgid "Operation requires ``change-password'' privilege"
+msgstr "ოპერაციას \"change-password\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:69
+msgid "GSS-API (or Kerberos) error"
+msgstr "GSS-API-ის (ან Kerberos-ის) შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:70
+msgid "Programmer error! Illegal tagged data list type"
+msgstr "პროგრამისტის შეცდომა! ჭდის მქონე მონაცემების სიის ტიპი არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:71
+msgid "Required parameters in kdc.conf missing"
+msgstr "შეცდომა kdc.conf-ში საჭირო პარამეტრების ძებნისას"
+
+#: ../lib/kadm5/kadm_err.c:72
+msgid "Bad krb5 admin server hostname"
+msgstr "Krb5-ის ადმინისტრირების სერვერის არასწორი ჰოსტის სახელი"
+
+#: ../lib/kadm5/kadm_err.c:73
+msgid "Operation requires ``set-key'' privilege"
+msgstr "ოპერაციას \"set-key\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:74
+msgid "Multiple values for single or folded enctype"
+msgstr "ერთი ან დაკეცილი enctype-ის მრავალი მნიშვნელობა"
+
+#: ../lib/kadm5/kadm_err.c:75
+msgid "Invalid enctype for setv4key"
+msgstr "Setv4key-ის არასწორი enctype"
+
+#: ../lib/kadm5/kadm_err.c:76
+msgid "Mismatched enctypes for setkey3"
+msgstr "Setkey3-თვის შეუთავსებელი enctype-ები"
+
+#: ../lib/kadm5/kadm_err.c:77
+msgid "Missing parameters in krb5.conf required for kadmin client"
+msgstr "Krb5.conf-ში kadmin-ის კლიენტისთვის აუცილებელი პარამეტრები არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:78 ../lib/kdb/adb_err.c:30
+msgid "XDR encoding error"
+msgstr "XDR კოდირების შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:79
+msgid "Cannot resolve network address for admin server in requested realm"
+msgstr ""
+"მოთხოვნის რეალმში ადმინის სერვერისთვის ქსელის მისამართის ამოხსნის შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:80
+msgid "Unspecified password quality failure"
+msgstr "პაროლის ხარისხის მიუთითებელი შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:81
+msgid "Invalid key/salt tuples"
+msgstr "არასწორი გასაღები/მარილის კორტეჟები"
+
+#: ../lib/kadm5/kadm_err.c:82
+msgid "Invalid multiple or duplicate kvnos in setkey operation"
+msgstr "Setkey ოპერაციაში არასწორი მრავალი ან დუბლირებული ოპერაციაა აღმოჩენილი"
+
+#: ../lib/kadm5/kadm_err.c:83
+msgid "Operation requires ``extract-keys'' privilege"
+msgstr "ოპერაციას \"extract-keys\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:84
+msgid "Principal keys are locked down"
+msgstr "პრინციპალის გასაღებები დაბლოკილია"
+
+#: ../lib/kadm5/kadm_err.c:85
+msgid "Operation requires initial ticket"
+msgstr "ოპერაციას საწყისი გასაღები ესაჭიროება"
+
+#: ../lib/kdb/adb_err.c:23
+msgid "No Error"
+msgstr "შეცდომის გარეშე"
+
+#: ../lib/kdb/adb_err.c:25
+msgid "Principal or policy does not exist"
+msgstr "პოლიტიკა ან პრინციპალი არ არსებობს"
+
+#: ../lib/kdb/adb_err.c:26
+msgid "Database not initialized"
+msgstr "ბაზა ინიციალიზებული არაა"
+
+#: ../lib/kdb/adb_err.c:27
+msgid "Invalid policy name"
+msgstr "პოლიტიკის დაუშვებელი სახელი"
+
+#: ../lib/kdb/adb_err.c:28
+msgid "Invalid principal name"
+msgstr "პრინციპალის დაუშვებელი სახელი"
+
+#: ../lib/kdb/adb_err.c:31
+msgid "Failure!"
+msgstr "შეცდომა!"
+
+#: ../lib/kdb/adb_err.c:32
+msgid "Bad lock mode"
+msgstr "დაბლოკვის არასწორი რეჟიმი"
+
+#: ../lib/kdb/adb_err.c:33
+msgid "Cannot lock database"
+msgstr "ბაზის დაბლოკვა შეუძლებელია"
+
+#: ../lib/kdb/adb_err.c:34
+msgid "Database not locked"
+msgstr "ბაზა დაბლოკილი არაა"
+
+#: ../lib/kdb/adb_err.c:35
+msgid "KADM5 administration database lock file missing"
+msgstr "KADM5 ადმინისტრირების ბაზის ბლოკის ფაილი ვერ ვიპოვე"
+
+#: ../lib/kdb/adb_err.c:36
+msgid "Insufficient permission to lock file"
+msgstr "თქვენი წვდომები ფაილის დასაბლოკად საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:23
+msgid "Plugin does not support interface version"
+msgstr "დამატებას ინტერფეისის ვერსიის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:24
+msgid "Invalid module specifier"
+msgstr "მოდულის არასწორი მიმთითებელი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:25
+msgid "Plugin module name not found"
+msgstr "დამატების მოდულის სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:26
+msgid "The KDC should discard this request"
+msgstr "KDC-ს უნდა მოეცილებინა ეს მოთხოვნა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:27
+msgid "Can't create new subsidiary cache"
+msgstr "დამხმარე ქეშის შექმნის შეცდომა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:28
+msgid "Invalid keyring anchor name"
+msgstr "არასწორი ბრელოკის სამაგრის სახელი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:29
+msgid "Unknown keyring collection version"
+msgstr "ბრელოკის კოლექციის უცნობი ვერსია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:30
+msgid "Invalid UID in persistent keyring name"
+msgstr "არასწორი UID-ი მუდმივი ბრელოკის სახელში"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:31
+msgid "Malformed reply from KCM daemon"
+msgstr "KCM დემონის არასწორად ჩამოყალიბებული პასუხი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:32
+msgid "Mach RPC error communicating with KCM daemon"
+msgstr "Mac RPC-ის შეცდომა KCM დემონთან ურთიერთობისას"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:33
+msgid "KCM daemon reply too big"
+msgstr "KCM დემონის პასუხი ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:34
+msgid "No KCM server found"
+msgstr "KCM სერვერი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:35
+msgid "Authorize and set hw-authent ticket flag"
+msgstr "ავტორიზაცია და hw-authent ბილეთის ალმის დაყენება"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:36
+msgid "Set hw-authent ticket flag but do not authorize"
+msgstr "\"hw-authent\" ალმის დაყენება, მაგრამ ავტორიზაციის გარეშე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:24
+msgid "Client's entry in database has expired"
+msgstr "ბაზაში კლიენტის ჩანაწერი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:25
+msgid "Server's entry in database has expired"
+msgstr "ბაზაში სერვერის ჩანაწერი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:26
+msgid "Requested protocol version not supported"
+msgstr "მოთხოვნილი პროტოკოლის ვერსია მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:27
+msgid "Client's key is encrypted in an old master key"
+msgstr "კლიენტის გასაღები ძველი მთავარი გასაღებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:28
+msgid "Server's key is encrypted in an old master key"
+msgstr "სერვერის გასაღები ძველი მთავარი გასაღებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:29
+msgid "Client not found in Kerberos database"
+msgstr "კლიენტი Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:30
+msgid "Server not found in Kerberos database"
+msgstr "სერვერი Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:31
+msgid "Principal has multiple entries in Kerberos database"
+msgstr "პრინციპალს Kerberos-ის ბაზაში ერთზე მეტი ჩანაწერი გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:32
+msgid "Client or server has a null key"
+msgstr "სერვერის ან კლიენტის გასაღები ნულოვანია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:33
+msgid "Ticket is ineligible for postdating"
+msgstr "ბილეთი მორიგი რიცხვით ჩაწერისთვის შეუფერებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:34
+msgid "Requested effective lifetime is negative or too short"
+msgstr "მოთხოვნილი ეფექტური სიცოცხლის დრო უარყოფითი ან მეტისმეტად მოკლეა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:35
+msgid "KDC policy rejects request"
+msgstr "KDC პოლიტიკა მოთხოვნას უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:36
+msgid "KDC can't fulfill requested option"
+msgstr "KDC მოთხოვნილი პარამეტრის შევსება შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:37
+msgid "KDC has no support for encryption type"
+msgstr "KDC -ს დაშიფვრის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:38
+msgid "KDC has no support for checksum type"
+msgstr "KDC -ს საკონტროლო ჯამის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:39
+msgid "KDC has no support for padata type"
+msgstr "KDC -ს padata ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:40
+msgid "KDC has no support for transited type"
+msgstr "KDC -ს transited ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:41
+msgid "Client's credentials have been revoked"
+msgstr "კლიენტის ავტორიზაციის დეტალები გაუქმდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:42
+msgid "Credentials for server have been revoked"
+msgstr "სერვერის ავტორიზაციის დეტალები გაუქმდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:43
+msgid "TGT has been revoked"
+msgstr "TGT გაუქმებულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:44
+msgid "Client not yet valid - try again later"
+msgstr "კლიენტი ჯერ არასწორია - მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:45
+msgid "Server not yet valid - try again later"
+msgstr "სერვერი ჯერ არასწორია - მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:46
+msgid "Password has expired"
+msgstr "პაროლს ვადა გაუვიდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:47
+msgid "Preauthentication failed"
+msgstr "პრეავთენტიკაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:48
+msgid "Additional pre-authentication required"
+msgstr "დამატებითი პრე-ავთენტიკაცია აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:49
+msgid "Requested server and ticket don't match"
+msgstr "მოთხოვნილი სერვერი და ბილეთი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:50
+msgid "Server principal valid for user2user only"
+msgstr "სერვერის პრინციპალი მხოლოდ მომხმარებლიდან მომხმარებლამდეა ძალაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:51
+msgid "KDC policy rejects transited path"
+msgstr "KDC-ის პოლიტიკა ტრანზიტულ ბილიკს უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:52
+msgid "A service is not available that is required to process the request"
+msgstr "მოთხოვნის დასამუშავებლად საჭირო სერვისი ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:53
+msgid "KRB5 error code 30"
+msgstr "KRB5 შეცდომის კოდი 30"
+
+#: ../lib/krb5/error_tables/krb5_err.c:54
+msgid "Decrypt integrity check failed"
+msgstr "გაშიფვრის მთლიანობის შემოწმების შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:55
+msgid "Ticket expired"
+msgstr "ბილეთი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:56
+msgid "Ticket not yet valid"
+msgstr "ბილეთი ჯერ არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:57
+msgid "Request is a replay"
+msgstr "პასუხის მოთხოვნა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:58
+msgid "The ticket isn't for us"
+msgstr "ბილეტი ჩვენთვის არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:59
+msgid "Ticket/authenticator don't match"
+msgstr "ბილეთი/ავთენტიკატორი არ ემთხვევიან"
+
+#: ../lib/krb5/error_tables/krb5_err.c:60
+msgid "Clock skew too great"
+msgstr "საათის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:61
+msgid "Incorrect net address"
+msgstr "არასწორი ქსელური მისამართი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:62
+msgid "Protocol version mismatch"
+msgstr "პროტოკოლის ვერსია არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:63
+msgid "Invalid message type"
+msgstr "შეტყობინების არასწორი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:64
+msgid "Message stream modified"
+msgstr "შეტყობინების ნაკადი შეიცვალა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:65
+msgid "Message out of order"
+msgstr "შეტყობინება რიგს გარეთაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:66
+msgid "Illegal cross-realm ticket"
+msgstr "არასწორი რეალმთშორისი ბილეთი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:67
+msgid "Key version is not available"
+msgstr "გასაღების ვერსია მიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:68
+msgid "Service key not available"
+msgstr "სერვერის გასაღები ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:69
+#: ../lib/krb5/error_tables/krb5_err.c:181
+msgid "Mutual authentication failed"
+msgstr "ორმხრივი ავთენტიკაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:70
+msgid "Incorrect message direction"
+msgstr "შეტყობინების არასწორი მიმართულება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:71
+msgid "Alternative authentication method required"
+msgstr "ალტერნატიული ავთენტიკაციის მეთოდი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:72
+msgid "Incorrect sequence number in message"
+msgstr "მიმდევრობის არასწორი რიცხვი შეტყობინებაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:73
+msgid "Inappropriate type of checksum in message"
+msgstr "საკონტროლო ჯამის შეუთავსებელი ტიპი შეტყობინებაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:74
+msgid "Policy rejects transited path"
+msgstr "პოლიტიკა ტრანზიტულ ბილიკს უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:75
+msgid "Response too big for UDP, retry with TCP"
+msgstr "პასუხი UDP-სთვის ძალიან დიდია. TCP-ით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:76
+msgid "KRB5 error code 53"
+msgstr "KRB5 შეცდომის კოდი 53"
+
+#: ../lib/krb5/error_tables/krb5_err.c:77
+msgid "KRB5 error code 54"
+msgstr "KRB5 შეცდომის კოდი 54"
+
+#: ../lib/krb5/error_tables/krb5_err.c:78
+msgid "KRB5 error code 55"
+msgstr "KRB5 შეცდომის კოდი 55"
+
+#: ../lib/krb5/error_tables/krb5_err.c:79
+msgid "KRB5 error code 56"
+msgstr "KRB5 შეცდომის კოდი 56"
+
+#: ../lib/krb5/error_tables/krb5_err.c:80
+msgid "KRB5 error code 57"
+msgstr "KRB5 შეცდომის კოდი 57"
+
+#: ../lib/krb5/error_tables/krb5_err.c:81
+msgid "KRB5 error code 58"
+msgstr "KRB5 შეცდომის კოდი 58"
+
+#: ../lib/krb5/error_tables/krb5_err.c:82
+msgid "KRB5 error code 59"
+msgstr "KRB5 შეცდომის კოდი 59"
+
+#: ../lib/krb5/error_tables/krb5_err.c:83
+msgid "Generic error (see e-text)"
+msgstr "ზოგადი შეცდომა (იხილეთ e-text)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:84
+msgid "Field is too long for this implementation"
+msgstr "ამ განხორციელებისთვის ველი ძალიან გრძელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:85
+msgid "Client not trusted"
+msgstr "კლიენტი სანდო არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:86
+msgid "KDC not trusted"
+msgstr "KDC სანდო არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:87
+msgid "Invalid signature"
+msgstr "არასწორი ხელმოწერა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:88
+msgid "Key parameters not accepted"
+msgstr "გასაღების პარამეტრები მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:89
+msgid "Certificate mismatch"
+msgstr "სერტიფიკატები არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:90
+msgid "No ticket granting ticket"
+msgstr "ბილეთის მიმნიჭებელი ბილეთის გარეშე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:91
+msgid "Realm not local to KDC"
+msgstr "რეალმი KDC-სთვის ლოკალური არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:92
+msgid "User to user required"
+msgstr "მომხმარებლისდან მომხმარებლამდე აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:93
+msgid "Can't verify certificate"
+msgstr "სერტიფიკატის შემოწმება შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:94
+msgid "Invalid certificate"
+msgstr "არასწორი სერტიფიკატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:95
+msgid "Revoked certificate"
+msgstr "გაუქმებული სერტიფიკატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:96
+msgid "Revocation status unknown"
+msgstr "გაუქმების სტატუსი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:97
+msgid "Revocation status unavailable"
+msgstr "გაუქმების სტატუსი მიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:98
+msgid "Client name mismatch"
+msgstr "კლიენტის სახელი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:99
+msgid "KDC name mismatch"
+msgstr "KDC-ის სახელი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:100
+msgid "Inconsistent key purpose"
+msgstr "გასაღების დანიშნულება არამდგრადია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:101
+msgid "Digest in certificate not accepted"
+msgstr "სერტიფიკატის დაიჯესტი მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:102
+msgid "Checksum must be included"
+msgstr "საკონტროლო ჯამის ქონა აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:103
+msgid "Digest in signed-data not accepted"
+msgstr "ხელმოწერილ-მონაცემებში გამოყენებული დაიჯესტი მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:104
+msgid "Public key encryption not supported"
+msgstr "საჯარო გასაღების დაშიფვრა მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:105
+msgid "KRB5 error code 82"
+msgstr "KRB5 შეცდომის კოდი 82"
+
+#: ../lib/krb5/error_tables/krb5_err.c:106
+msgid "KRB5 error code 83"
+msgstr "KRB5 შეცდომის კოდი 83"
+
+#: ../lib/krb5/error_tables/krb5_err.c:107
+msgid "KRB5 error code 84"
+msgstr "KRB5 შეცდომის კოდი 84"
+
+#: ../lib/krb5/error_tables/krb5_err.c:108
+msgid "The IAKERB proxy could not find a KDC"
+msgstr "IAKERB პროქსიმ KDC ვერ იპოვა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:109
+msgid "The KDC did not respond to the IAKERB proxy"
+msgstr "KDC-მა IAKERB პროქსის არ უპასუხა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:110
+msgid "KRB5 error code 87"
+msgstr "KRB5 შეცდომის კოდი 87"
+
+#: ../lib/krb5/error_tables/krb5_err.c:111
+msgid "KRB5 error code 88"
+msgstr "KRB5 შეცდომის კოდი 88"
+
+#: ../lib/krb5/error_tables/krb5_err.c:112
+msgid "KRB5 error code 89"
+msgstr "KRB5 შეცდომის კოდი 89"
+
+#: ../lib/krb5/error_tables/krb5_err.c:113
+msgid "Preauthentication expired"
+msgstr "პრეავთენტიკაცია ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:114
+msgid "More preauthentication data is required"
+msgstr "აუცილებელია პრეავთენტიკაციის მონაცემები"
+
+#: ../lib/krb5/error_tables/krb5_err.c:115
+msgid "KRB5 error code 92"
+msgstr "KRB5 შეცდომის კოდი 92"
+
+#: ../lib/krb5/error_tables/krb5_err.c:116
+msgid "An unsupported critical FAST option was requested"
+msgstr "მოთხოვნილია მხარდაუჭერელი კრიტიკული FAST პარამეტრი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:117
+msgid "KRB5 error code 94"
+msgstr "KRB5 შეცდომის კოდი 94"
+
+#: ../lib/krb5/error_tables/krb5_err.c:118
+msgid "KRB5 error code 95"
+msgstr "KRB5 შეცდომის კოდი 95"
+
+#: ../lib/krb5/error_tables/krb5_err.c:119
+msgid "KRB5 error code 96"
+msgstr "KRB5 შეცდომის კოდი 96"
+
+#: ../lib/krb5/error_tables/krb5_err.c:120
+msgid "KRB5 error code 97"
+msgstr "KRB5 შეცდომის კოდი 97"
+
+#: ../lib/krb5/error_tables/krb5_err.c:121
+msgid "KRB5 error code 98"
+msgstr "KRB5 შეცდომის კოდი 98"
+
+#: ../lib/krb5/error_tables/krb5_err.c:122
+msgid "KRB5 error code 99"
+msgstr "KRB5 შეცდომის კოდი 99"
+
+#: ../lib/krb5/error_tables/krb5_err.c:123
+msgid "No acceptable KDF offered"
+msgstr "დამაკმაყოფილებელი KDF შემოთავაზებული არ ყოფილა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:124
+msgid "KRB5 error code 101"
+msgstr "KRB5 შეცდომის კოდი 101"
+
+#: ../lib/krb5/error_tables/krb5_err.c:125
+msgid "KRB5 error code 102"
+msgstr "KRB5 შეცდომის კოდი 102"
+
+#: ../lib/krb5/error_tables/krb5_err.c:126
+msgid "KRB5 error code 103"
+msgstr "KRB5 შეცდომის კოდი 103"
+
+#: ../lib/krb5/error_tables/krb5_err.c:127
+msgid "KRB5 error code 104"
+msgstr "KRB5 შეცდომის კოდი 104"
+
+#: ../lib/krb5/error_tables/krb5_err.c:128
+msgid "KRB5 error code 105"
+msgstr "KRB5 შეცდომის კოდი 105"
+
+#: ../lib/krb5/error_tables/krb5_err.c:129
+msgid "KRB5 error code 106"
+msgstr "KRB5 შეცდომის კოდი 106"
+
+#: ../lib/krb5/error_tables/krb5_err.c:130
+msgid "KRB5 error code 107"
+msgstr "KRB5 შეცდომის კოდი 107"
+
+#: ../lib/krb5/error_tables/krb5_err.c:131
+msgid "KRB5 error code 108"
+msgstr "KRB5 შეცდომის კოდი 108"
+
+#: ../lib/krb5/error_tables/krb5_err.c:132
+msgid "KRB5 error code 109"
+msgstr "KRB5 შეცდომის კოდი 109"
+
+#: ../lib/krb5/error_tables/krb5_err.c:133
+msgid "KRB5 error code 110"
+msgstr "KRB5 შეცდომის კოდი 110"
+
+#: ../lib/krb5/error_tables/krb5_err.c:134
+msgid "KRB5 error code 111"
+msgstr "KRB5 შეცდომის კოდი 111"
+
+#: ../lib/krb5/error_tables/krb5_err.c:135
+msgid "KRB5 error code 112"
+msgstr "KRB5 შეცდომის კოდი 112"
+
+#: ../lib/krb5/error_tables/krb5_err.c:136
+msgid "KRB5 error code 113"
+msgstr "KRB5 შეცდომის კოდი 113"
+
+#: ../lib/krb5/error_tables/krb5_err.c:137
+msgid "KRB5 error code 114"
+msgstr "KRB5 შეცდომის კოდი 114"
+
+#: ../lib/krb5/error_tables/krb5_err.c:138
+msgid "KRB5 error code 115"
+msgstr "KRB5 შეცდომის კოდი 115"
+
+#: ../lib/krb5/error_tables/krb5_err.c:139
+msgid "KRB5 error code 116"
+msgstr "KRB5 შეცდომის კოდი 116"
+
+#: ../lib/krb5/error_tables/krb5_err.c:140
+msgid "KRB5 error code 117"
+msgstr "KRB5 შეცდომის კოდი 117"
+
+#: ../lib/krb5/error_tables/krb5_err.c:141
+msgid "KRB5 error code 118"
+msgstr "KRB5 შეცდომის კოდი 118"
+
+#: ../lib/krb5/error_tables/krb5_err.c:142
+msgid "KRB5 error code 119"
+msgstr "KRB5 შეცდომის კოდი 119"
+
+#: ../lib/krb5/error_tables/krb5_err.c:143
+msgid "KRB5 error code 120"
+msgstr "KRB5 შეცდომის კოდი 120"
+
+#: ../lib/krb5/error_tables/krb5_err.c:144
+msgid "KRB5 error code 121"
+msgstr "KRB5 შეცდომის კოდი 121"
+
+#: ../lib/krb5/error_tables/krb5_err.c:145
+msgid "KRB5 error code 122"
+msgstr "KRB5 შეცდომის კოდი 122"
+
+#: ../lib/krb5/error_tables/krb5_err.c:146
+msgid "KRB5 error code 123"
+msgstr "KRB5 შეცდომის კოდი 123"
+
+#: ../lib/krb5/error_tables/krb5_err.c:147
+msgid "KRB5 error code 124"
+msgstr "KRB5 შეცდომის კოდი 124"
+
+#: ../lib/krb5/error_tables/krb5_err.c:148
+msgid "KRB5 error code 125"
+msgstr "KRB5 შეცდომის კოდი 125"
+
+#: ../lib/krb5/error_tables/krb5_err.c:149
+msgid "KRB5 error code 126"
+msgstr "KRB5 შეცდომის კოდი 126"
+
+#: ../lib/krb5/error_tables/krb5_err.c:150
+msgid "KRB5 error code 127"
+msgstr "KRB5 შეცდომის კოდი 127"
+
+#: ../lib/krb5/error_tables/krb5_err.c:151
+#: ../lib/krb5/error_tables/kdb5_err.c:23
+msgid "$Id$"
+msgstr "$Id$"
+
+#: ../lib/krb5/error_tables/krb5_err.c:152
+msgid "Invalid flag for file lock mode"
+msgstr "ფაილის დაბლოკვის რეჟიმის არასწორი ალამი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:153
+msgid "Cannot read password"
+msgstr "პაროლის წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:154
+msgid "Password mismatch"
+msgstr "პაროლი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:155
+msgid "Password read interrupted"
+msgstr "პაროლის წაკითხვა შეწყვეტილია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:156
+msgid "Illegal character in component name"
+msgstr "კომპონენტის სახელი დაუშვებელ სიმბოლოს შეიცავს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:157
+msgid "Malformed representation of principal"
+msgstr "პრინციპალის წარმოდგენა არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:158
+msgid "Can't open/find Kerberos configuration file"
+msgstr "Kernberos-ის კონფიგურაციის ფაილის გახსნის/პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:159
+msgid "Improper format of Kerberos configuration file"
+msgstr "Kerberos-ის კონფიგურაციის ფაილის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:160
+msgid "Insufficient space to return complete information"
+msgstr "სრული ინფორმაციის დასაბრუნებლად ადგილი საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:161
+msgid "Invalid message type specified for encoding"
+msgstr "კოდირებისთვის მითითებული შეტყობინების ტიპი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:162
+msgid "Credential cache name malformed"
+msgstr "არასწორად ფორმირებული ავტორიზაციის დეტალების ქეშის სახელი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:163
+msgid "Unknown credential cache type"
+msgstr "ავტორიზაციის დეტალების ქეშის არასწორი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:164
+msgid "Matching credential not found"
+msgstr "შესაბამისი ავტორიზაციის დეტალები ნაპოვნი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:165
+msgid "End of credential cache reached"
+msgstr "მივაღწიეთ ავტორიზაციის დეტალების ქეშის ბოლოს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:166
+msgid "Request did not supply a ticket"
+msgstr "მოთხოვნას ბილეთი არ მოუწოდებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:167
+msgid "Wrong principal in request"
+msgstr "მოთხოვნაში მითითებული პრინციპალი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:168
+msgid "Ticket has invalid flag set"
+msgstr "ბილეთზე დაყენებული ალმები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:169
+msgid "Requested principal and ticket don't match"
+msgstr "მოთხოვნილი პრინციპალი და ბილეთი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:170
+msgid "KDC reply did not match expectations"
+msgstr "KDC-ის პასუხი მოსალოდნელს არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:171
+msgid "Clock skew too great in KDC reply"
+msgstr "KDC-ის პასუხისთვის საათის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:172
+msgid "Client/server realm mismatch in initial ticket request"
+msgstr ""
+"ბილეთის საწყის მოთხოვნაში კლიენტისა და სერვერის რეალმები ერთმანეთს არ "
+"ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:173
+msgid "Program lacks support for encryption type"
+msgstr "პროგრამას დაშიფვრის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:174
+msgid "Program lacks support for key type"
+msgstr "პროგრამას გასაღების ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:175
+msgid "Requested encryption type not used in message"
+msgstr "შეტყობინებაში მოთხოვნილი დაშიფვრის ტიპი არ გამოიყენება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:176
+msgid "Program lacks support for checksum type"
+msgstr "პროგრამას საკონტროლო ჯამის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:177
+msgid "Cannot find KDC for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის KDC ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:178
+msgid "Kerberos service unknown"
+msgstr "Kerberos -ის უცნობი სერვისი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:179
+msgid "Cannot contact any KDC for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის ვერც ერთ KDC-ს ვერ დავუკავშირდი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:180
+msgid "No local name found for principal name"
+msgstr "პრინციპალის სახელისთვის ლოკალური სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:182
+msgid "Replay cache type is already registered"
+msgstr "საპასუხო ქეშის ტიპი უკვე რეგისტრირებულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:183
+msgid "No more memory to allocate (in replay cache code)"
+msgstr "გამოსაყოფი მეხსიერება არ არსებობს (პასუხის ქეშის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:184
+msgid "Replay cache type is unknown"
+msgstr "პასუხის ქეშის ტიპი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:185
+msgid "Generic unknown RC error"
+msgstr "ზოგადი უცნობი RC შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:186
+msgid "Message is a replay"
+msgstr "შეტყობინება პასუხია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:187
+msgid "Replay cache I/O operation failed"
+msgstr "პასუხის ქეშთან მიმოცვლის ოპერაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:188
+msgid "Replay cache type does not support non-volatile storage"
+msgstr "პასუხის ქეშის ტიპს არააქროლადი საცავის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:189
+msgid "Replay cache name parse/format error"
+msgstr "პასუხის ქეშის სახელის დამუშავების/ფორმატის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:190
+msgid "End-of-file on replay cache I/O"
+msgstr "ფაილის-ბოლო პასუხის ქეშთან მიმოცვლისას"
+
+#: ../lib/krb5/error_tables/krb5_err.c:191
+msgid "No more memory to allocate (in replay cache I/O code)"
+msgstr "გამოსაყოფი მეხსიერება არ არსებობს (პასუხის ქეშთან მიმოცვლის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:192
+msgid "Permission denied in replay cache code"
+msgstr "პასუხის ქეშის კოდის წვდომა აკრძალულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:193
+msgid "I/O error in replay cache i/o code"
+msgstr "მიმოცვლის შეცდომა პასუხის ქეშის მიმოცვლის კოდში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:194
+msgid "Generic unknown RC/IO error"
+msgstr "ზოგადი უცნობი RC/IO შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:195
+msgid "Insufficient system space to store replay information"
+msgstr "პასუხის ინფორმაციის დასამახსოვრებლად სისტემური ადგილი საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:196
+msgid "Can't open/find realm translation file"
+msgstr "რეალმის თარგმნის ფაილის გახსნის/პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:197
+msgid "Improper format of realm translation file"
+msgstr "რეალმის თარგმანის ფაილის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:198
+msgid "Can't open/find lname translation database"
+msgstr "Lname-ის თარგმანის ბაზის პოვნის/გახსნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:199
+msgid "No translation available for requested principal"
+msgstr "მოთხოვნილი პრინციპალისთვის თარგმანი არ არსებობს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:200
+msgid "Improper format of translation database entry"
+msgstr "თარგმანის ბაზის ჩანაწერის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:201
+msgid "Cryptosystem internal error"
+msgstr "კრიპტოსისტემის შიდა შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:202
+msgid "Key table name malformed"
+msgstr "გასაღების ცხრილის სახელი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:203
+msgid "Unknown Key table type"
+msgstr "გასაღების ცხრილის უცნობი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:204
+msgid "Key table entry not found"
+msgstr "გასაღების ცხრილის ჩანაწერი ვერ ვპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:205
+msgid "End of key table reached"
+msgstr "მიღწეულია გასაღების ცხრილის ბოლო"
+
+#: ../lib/krb5/error_tables/krb5_err.c:206
+msgid "Cannot write to specified key table"
+msgstr "მითითებული გასაღების ცხრილში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:207
+msgid "Error writing to key table"
+msgstr "გასაღებების ცხრილში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:208
+msgid "Cannot find ticket for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის ბილეთის პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:209
+msgid "DES key has bad parity"
+msgstr "DES გასაღებსი არასწორი პარიტეტი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:210
+msgid "DES key is a weak key"
+msgstr "DES გასაღები სუსტია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:211
+msgid "Bad encryption type"
+msgstr "არასწორი დაშიფვრის ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:212
+msgid "Key size is incompatible with encryption type"
+msgstr "გასაღების ზომა დაშიფვრის ტიპთან შეუთავსებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:213
+msgid "Message size is incompatible with encryption type"
+msgstr "შეტყობინების ზომა დაშიფვრის ტიპთან შეუთავსებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:214
+msgid "Credentials cache type is already registered."
+msgstr "ავტორიზაციის დეტალების ქეშის ტიპი უკვე რეგისტრირებულია."
+
+#: ../lib/krb5/error_tables/krb5_err.c:215
+msgid "Key table type is already registered."
+msgstr "გასაღებების ცხრილის ტიპი უკვე რეგისტრირებულია."
+
+#: ../lib/krb5/error_tables/krb5_err.c:216
+msgid "Credentials cache I/O operation failed"
+msgstr "ავტორიზაციის დეტალების ქეშთან მიმოცვლის ოპერაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:217
+msgid "Credentials cache permissions incorrect"
+msgstr "ავტორიზაციის დეტალების ქეშის წვდომები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:218
+msgid "No credentials cache found"
+msgstr "ავტორიზაციის დეტალების ქეში არ არსებობს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:219
+msgid "Internal credentials cache error"
+msgstr "შიდა ავტორიზაციის დეტალების ქეშის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:220
+msgid "Error writing to credentials cache"
+msgstr "ავტორიზაციის დეტალების ქეშში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:221
+msgid "No more memory to allocate (in credentials cache code)"
+msgstr "გამოსაყოფი მეხსიერება აღარ დარჩა (ავტორიზაციის დეტალების ქეშის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:222
+msgid "Bad format in credentials cache"
+msgstr "არასწორი ფორმატი ავტორიზაციის დეტალების ქეშში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:223
+msgid "No credentials found with supported encryption types"
+msgstr "მხარდაჭერილი დაშიფვრის ტიპების მქონე ავტორიზაციის დეტალები ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:224
+msgid "Invalid KDC option combination (library internal error)"
+msgstr "KDC-ის პარამეტრების არასწორი კომბინაცია (ბიბლიოთეკის შიდა შეცდომა)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:225
+msgid "Request missing second ticket"
+msgstr "მოთხოვნას მეორე ბილეთი აკლია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:226
+msgid "No credentials supplied to library routine"
+msgstr "ბიბლიოთეკის ქვეპროგრამისთვის ავტორიზაციის დეტალები მიწოდებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:227
+msgid "Bad sendauth version was sent"
+msgstr "გაგზავნილი sendauth ვერსია არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:228
+msgid "Bad application version was sent (via sendauth)"
+msgstr "აპლიკაციის გაგზავნილი ვერსია არასწორია (sendauth-ით)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:229
+msgid "Bad response (during sendauth exchange)"
+msgstr "არასწორი პასუხი (sendauth-ით გაცვლისას)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:230
+msgid "Server rejected authentication (during sendauth exchange)"
+msgstr "სერვერმა ავტორიზაცია უარყო (sendauth-ით გაცვლისას)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:231
+msgid "Unsupported preauthentication type"
+msgstr "პრეავთენტიკაციის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:232
+msgid "Required preauthentication key not supplied"
+msgstr "პრეავთენტიკაცის გასაღების მიწოდება აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:233
+msgid "Generic preauthentication failure"
+msgstr "პრეავთენტიკაციის ზოგადი შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:234
+msgid "Unsupported replay cache format version number"
+msgstr "პასუხის ქეშის ფორმატის ვერსიის ნომერი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:235
+msgid "Unsupported credentials cache format version number"
+msgstr "ავტორიზაციის დეტალების ქეშის ფორმატის ვერსიის არასწორი ნომერი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:236
+msgid "Unsupported key table format version number"
+msgstr "გასაღებების ცხრილის ფორმატის ვერსიის არასწორი ნომერი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:237
+msgid "Program lacks support for address type"
+msgstr "პროგრამას მისამართის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:238
+msgid "Message replay detection requires rcache parameter"
+msgstr "შეტყობინებაზე პასუხის აღმოჩენას rcache პარამეტრი სჭირდება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:239
+msgid "Hostname cannot be canonicalized"
+msgstr "ჰოსტის სახელის კანონიკალიზება სეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:240
+msgid "Cannot determine realm for host"
+msgstr "ჰოსტისთვის რეალმის დადგენის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:241
+msgid "Conversion to service principal undefined for name type"
+msgstr "სერვისის პრინციპალზე გარდაქმნა სახელის ტიისთვის შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:242
+msgid "Initial Ticket response appears to be Version 4 error"
+msgstr "საწყისი ბილეთის პასუხი მეოთხე ვერსიის შეცდომას წააგავს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:243
+msgid "Cannot resolve network address for KDC in requested realm"
+msgstr "მოთხოვნილ რეალმში KDC-ის ქსელური მისამართის ამოხსნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:244
+msgid "Requesting ticket can't get forwardable tickets"
+msgstr "მომთხოვნი ბილეთები გადამისამართებადი ბილეთები ვერ იქნება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:245
+msgid "Bad principal name while trying to forward credentials"
+msgstr "ავტორიზაციის დეტალების გადაგზავნისას პრინციპალის სახელი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:246
+msgid "Looping detected inside krb5_get_in_tkt"
+msgstr "Krb5_get_in_tkt_ის შიგნით მარყუჟი ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:247
+msgid "Configuration file does not specify default realm"
+msgstr "კონფიგურაციის ფაილში ნაგულისხმები რეალმი მითითებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:248
+msgid "Bad SAM flags in obtain_sam_padata"
+msgstr "არასწორი SAM ალმები obtain_sam_padata-ში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:249
+msgid "Invalid encryption type in SAM challenge"
+msgstr "არასწორი დაშიფვრის ტიპი SAM გამოწვევაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:250
+msgid "Missing checksum in SAM challenge"
+msgstr "SAM გამოწვევაში საკონტროლო ჯამი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:251
+msgid "Bad checksum in SAM challenge"
+msgstr "არასწორი საკონტროლო ჯამი SAM გამოწვევაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:252
+msgid "Keytab name too long"
+msgstr "Keytab -ის სახელი ძალიან გრძელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:253
+msgid "Key version number for principal in key table is incorrect"
+msgstr "პრინციპალისთვის გასაღებების ცხრილში გასაღების ვერსიის ნომერი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:254
+msgid "This application has expired"
+msgstr "ეს აპლიკაცია ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:255
+msgid "This Krb5 library has expired"
+msgstr "ეს Krb5 ბიბლიოთეკა ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:256
+msgid "New password cannot be zero length"
+msgstr "ახალი პაროლი ნულოვანი სიგრძის ვერ იქნება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:258
+msgid "Bad format in keytab"
+msgstr "Keytab-ის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:259
+msgid "Encryption type not permitted"
+msgstr "დაშიფვრის ტიპი დაუშვებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:260
+msgid "No supported encryption types (config file error?)"
+msgstr "მხარდაჭერილი დაშიფვრის ტიპების გარეშე (კონფიგურაციის ფაილის შეცდომა?)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:261
+msgid "Program called an obsolete, deleted function"
+msgstr "პროგრამამ მოძველებული, წაშლილი ფუნქცია გამოიძახა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:262
+msgid "unknown getaddrinfo failure"
+msgstr "getaddrinfo-ის უცნობი შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:263
+msgid "no data available for host/domain name"
+msgstr "ჰოსტის/დომენის სახელისთვის მონაცემები ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:264
+msgid "host/domain name not found"
+msgstr "ჰოსტის/დომენის სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:265
+msgid "service name unknown"
+msgstr "სერვისის სახელი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:266
+msgid "Cannot determine realm for numeric host address"
+msgstr "რიცხვითი ჰოსტის მისამართისთვის რეალმის განსაზღვრის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:267
+msgid "Invalid key generation parameters from KDC"
+msgstr "KDC-დან მიღებული გასაღების გენერაციის პარამეტრები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:268
+msgid "service not available"
+msgstr "სერვისი ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:269
+msgid "Ccache function not supported: read-only ccache type"
+msgstr ""
+"Ccache-ის ფუნქცია განხორციელებული არაა: ccache-ის ტიპი მხოლოდ წაკითხვადია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:270
+msgid "Ccache function not supported: not implemented"
+msgstr "Ccache-ის ფუნქცია განხორციელებული არაა: განხორციელებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:271
+msgid "Invalid format of Kerberos lifetime or clock skew string"
+msgstr ""
+"Kerberos-ის სიცოცხლის დროის არასწორი ფორმატი ან დროის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:272
+msgid "Supplied data not handled by this plugin"
+msgstr "მოწოდებული მონაცემები ამ დამატების მიერ არ მუშავდება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:273
+msgid "Plugin does not support the operation"
+msgstr "დამატებას ამ ოპერაციის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:274
+msgid "Invalid UTF-8 string"
+msgstr "არასწორი UTF-8 სტრიქონი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:275
+msgid "FAST protected pre-authentication required but not supported by KDC"
+msgstr ""
+"FAST-ით დაცული პრე-ავთენტიკაცია აუცილებელია, მაგრამ მხარდაუჭერელია KDC-ის "
+"მიერ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:276
+msgid "Auth context must contain local address"
+msgstr "ავთენტიკაციის კონტექსტისთვის ლოკალური მისამართი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:277
+msgid "Auth context must contain remote address"
+msgstr "ავთენტიკაციის კონტექსტისთვის დაშორებული მისამართი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:278
+msgid "Tracing unsupported"
+msgstr "ტრეისინგი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:24
+msgid "Entry already exists in database"
+msgstr "ჩანაწერის ბაზაში უფრო არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:25
+msgid "Database store error"
+msgstr "ბაზის შენახვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:26
+msgid "Database read error"
+msgstr "ბაზის წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:27
+msgid "Insufficient access to perform requested operation"
+msgstr "არასაკმარისი წვდომები მოთხოვნილი ქმედების განსახორციელებლად"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:28
+msgid "No such entry in the database"
+msgstr "ბაზაში ასეთი ჩანაწერი არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:29
+msgid "Illegal use of wildcard"
+msgstr "ვაილდ კარდის არასწორი გამოყენება"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:30
+msgid "Database is locked or in use--try again later"
+msgstr "ბაზა დაბლოკილია ან გამოიყენება--მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:31
+msgid "Database was modified during read"
+msgstr "ბაზა წაკითხვისას შეიცვალა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:32
+msgid "Database record is incomplete or corrupted"
+msgstr "ბაზის ჩანაწერი დაუსრულებელი ან დაზიანებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:33
+msgid "Attempt to lock database twice"
+msgstr "ბაზის ორჯერ დაბლოკვის მცდელობა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:34
+msgid "Attempt to unlock database when not locked"
+msgstr "ბაზის, რომელიც დაბლოკილი არაა, განბლოკვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:35
+msgid "Invalid kdb lock mode"
+msgstr "KDB-ის ბლოკირებს არასწორი რეჟიმი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:36
+msgid "Database has not been initialized"
+msgstr "ბაზა ინიციალიზებული არაა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:37
+msgid "Database has already been initialized"
+msgstr "ბაზა უკვე ინიციალიზებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:38
+msgid "Bad direction for converting keys"
+msgstr "გასაღებების გარდაქმნის არასწორი მიმართულება"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:39
+msgid "Cannot find master key record in database"
+msgstr "ბაზაში მთავარი გასაღების ჩანაწერის პოვნა შეუძლებელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:40
+msgid "Master key does not match database"
+msgstr "მთავარი გასაღები ბაზას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:41
+msgid "Key size in database is invalid"
+msgstr "ბაზაში ჩაწერილი გასაღების ზომა არასწორია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:42
+msgid "Cannot find/read stored master key"
+msgstr "დამახსოვრებული მთავარი გასაღების პოვნის/წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:43
+msgid "Stored master key is corrupted"
+msgstr "დამახსოვრებული მთავარი გასაღები დაზიანებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:44
+msgid "Cannot find active master key"
+msgstr "აქტიური მთავარი გასაღების პოვნა შეუძლებელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:45
+msgid "KVNO of new master key does not match expected value"
+msgstr "ახალი მთავარი გასაღების KVNO მოსალოდნელ მნიშვნელობას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:46
+msgid "Stored master key is not current"
+msgstr "დამახსოვერებული მთავარი გასაღები მიმდინარე არაა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:47
+msgid "Insufficient access to lock database"
+msgstr "არასაკმარისი წვდომები ბაზის დასაბლოკად"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:48
+msgid "Database format error"
+msgstr "ბაზის ფორმატის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:49
+msgid "Unsupported version in database entry"
+msgstr "ბაზის ჩანაწერის მხარდაუჭერელი ვერსია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:50
+msgid "Unsupported salt type"
+msgstr "მარილის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:51
+msgid "Unsupported encryption type"
+msgstr "დაშიფვრის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:52
+msgid "Bad database creation flags"
+msgstr "ბაზის შექმნის არასწორი ალმები"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:53
+msgid "No matching key in entry having a permitted enctype"
+msgstr "ჩანაწერში დაშვებული enctype-ის მქონე გასრები არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:54
+msgid "No matching key in entry"
+msgstr "ჩანაწერში შესაბამისი გასაღები არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:56
+msgid "Database type not supported"
+msgstr "ბაზის ტიპი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:57
+msgid "Database library failed to initialize"
+msgstr "ბაზის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:59
+msgid "Unable to access Kerberos database"
+msgstr "შეცდომა Kerberos-ის ბაზასთან წვდომისას"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:60
+msgid "Kerberos database internal error"
+msgstr "Kerberos-ის ბაზის შიდა შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:61
+msgid "Kerberos database constraints violated"
+msgstr "დარღვეულია Kerberos-ის ბაზის შეზღუდვები"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:62
+msgid "Update log conversion error"
+msgstr "განახლების ჟურნალის გარდაქმნის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:63
+msgid "Update log is unstable"
+msgstr "განახლების ჟურნალი არასტაბილურია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:64
+msgid "Update log is corrupt"
+msgstr "განახლების ჟურნალი დაზიანებული"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:65
+msgid "Generic update log error"
+msgstr "განახლების ჟურნალის საერთო შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:66
+msgid "Database module does not match KDC version"
+msgstr "ბაზის მოდული KDC-ის ვერსიას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:68
+msgid "Too much string mapping data"
+msgstr "მეტისმეტად ბევრი სტრიქონების გადაბმის მონაცემები"
+
+#: ../lib/krb5/error_tables/asn1_err.c:23
+msgid "ASN.1 failed call to system time library"
+msgstr "ASN.1 -ის შეცდომა სისტემური დროის ბიბლიოთეკის გამოძახებისას"
+
+#: ../lib/krb5/error_tables/asn1_err.c:24
+msgid "ASN.1 structure is missing a required field"
+msgstr "ASN.1 -ის სტრუქტურას აუცილებელი ველი აკლია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:25
+msgid "ASN.1 unexpected field number"
+msgstr "ASN.1 ველის მოულოდნელი ნომერი"
+
+#: ../lib/krb5/error_tables/asn1_err.c:26
+msgid "ASN.1 type numbers are inconsistent"
+msgstr "ASN.1 ტიპის ნომრები არამდგრადია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:27
+msgid "ASN.1 value too large"
+msgstr "ASN.1 მნიშვნელობა ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:28
+msgid "ASN.1 encoding ended unexpectedly"
+msgstr "ASN.1 დაშიფვრა მოულოდნელად დასრულდა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:29
+msgid "ASN.1 identifier doesn't match expected value"
+msgstr "ASN.1 იდენტიფიკატორი მოსალოდნელ მნიშვნელობას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:30
+msgid "ASN.1 length doesn't match expected value"
+msgstr "ASN.1 სიგრძე მოსალოდნელ მნიშვნელობას არ ემთხევა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:31
+msgid "ASN.1 badly-formatted encoding"
+msgstr "ASN.1 ცუდი ფორმატის მქონე დაშიფვრა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:32
+msgid "ASN.1 parse error"
+msgstr "ASN.1 დამუშავების შეცდომა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:33
+msgid "ASN.1 bad return from gmtime"
+msgstr "ASN.1 არასწორი დაბრუნება gmtime-დან"
+
+#: ../lib/krb5/error_tables/asn1_err.c:34
+msgid "ASN.1 indefinite encoding"
+msgstr "ASN.1 დაუდგენელი დაშიფვრა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:35
+msgid "ASN.1 missing expected EOC"
+msgstr "ASN.1 აკლია მოსალოდნელი EOC"
+
+#: ../lib/krb5/error_tables/asn1_err.c:36
+msgid "ASN.1 object omitted in sequence"
+msgstr "ASN.1 მიმდევრობაში ობიექტი ამოღებულია"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:23
+msgid "Kerberos V5 magic number table"
+msgstr "Kerberos V5 ჯადოსნური რიცხვების ცხრილი"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:24
+msgid "Bad magic number for krb5_principal structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_principal"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:25
+msgid "Bad magic number for krb5_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:26
+msgid "Bad magic number for krb5_keyblock structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keyblock"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:27
+msgid "Bad magic number for krb5_checksum structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_checksum"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:28
+msgid "Bad magic number for krb5_encrypt_block structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_encrypt_block"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:29
+msgid "Bad magic number for krb5_enc_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:30
+msgid "Bad magic number for krb5_cryptosystem_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cryptosystem_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:31
+msgid "Bad magic number for krb5_cs_table_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cs_table_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:32
+msgid "Bad magic number for krb5_checksum_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_checksum_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:33
+msgid "Bad magic number for krb5_authdata structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_authdata"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:34
+msgid "Bad magic number for krb5_transited structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_tansited"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:35
+msgid "Bad magic number for krb5_enc_tkt_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_tkt_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:36
+msgid "Bad magic number for krb5_ticket structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ticket"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:37
+msgid "Bad magic number for krb5_authenticator structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_authenticator"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:38
+msgid "Bad magic number for krb5_tkt_authent structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_tkt_authent"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:39
+msgid "Bad magic number for krb5_creds structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_creds"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:40
+msgid "Bad magic number for krb5_last_req_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_last_req_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:41
+msgid "Bad magic number for krb5_pa_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:42
+msgid "Bad magic number for krb5_kdc_req structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_kdc_req"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:43
+msgid "Bad magic number for krb5_enc_kdc_rep_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_kdc_rep_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:44
+msgid "Bad magic number for krb5_kdc_rep structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_kdc_rep"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:45
+msgid "Bad magic number for krb5_error structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_error"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:46
+msgid "Bad magic number for krb5_ap_req structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_req"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:47
+msgid "Bad magic number for krb5_ap_rep structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_rep"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:48
+msgid "Bad magic number for krb5_ap_rep_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_rep_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:49
+msgid "Bad magic number for krb5_response structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_response"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:50
+msgid "Bad magic number for krb5_safe structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_safe"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:51
+msgid "Bad magic number for krb5_priv structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_priv"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:52
+msgid "Bad magic number for krb5_priv_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_priv_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:53
+msgid "Bad magic number for krb5_cred structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:54
+msgid "Bad magic number for krb5_cred_info structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred_info"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:55
+msgid "Bad magic number for krb5_cred_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:56
+msgid "Bad magic number for krb5_pwd_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_pwd_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:57
+msgid "Bad magic number for krb5_address structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_address"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:58
+msgid "Bad magic number for krb5_keytab_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keytab_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:59
+msgid "Bad magic number for krb5_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:60
+msgid "Bad magic number for krb5_os_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_os_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:61
+msgid "Bad magic number for krb5_alt_method structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_alt_method"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:62
+msgid "Bad magic number for krb5_etype_info_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_etype_info_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:63
+msgid "Bad magic number for krb5_db_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_db_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:64
+msgid "Bad magic number for krb5_auth_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_auth_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:65
+msgid "Bad magic number for krb5_keytab structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keytab"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:66
+msgid "Bad magic number for krb5_rcache structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_rcache"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:67
+msgid "Bad magic number for krb5_ccache structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ccache"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:68
+msgid "Bad magic number for krb5_preauth_ops"
+msgstr "არასწორი ჯადოსნური რიცხვი krb_preauth_ops -სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:69
+msgid "Bad magic number for krb5_sam_challenge"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_challenge-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:70
+msgid "Bad magic number for krb5_sam_challenge_2"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_challenge_2-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:71
+msgid "Bad magic number for krb5_sam_key"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_key-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:72
+#: ../lib/krb5/error_tables/kv5m_err.c:73
+msgid "Bad magic number for krb5_enc_sam_response_enc"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_enc_sam_reponse_enc-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:74
+msgid "Bad magic number for krb5_sam_response"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_response-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:75
+msgid "Bad magic number for krb5_sam_response 2"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_response 2-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:76
+msgid "Bad magic number for krb5_predicted_sam_response"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_predicted_sam_reponse-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:77
+msgid "Bad magic number for passwd_phrase_element"
+msgstr "არასწორი ჯადოსნური რიცხვი passwd_phrase_element-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:78
+msgid "Bad magic number for GSSAPI OID"
+msgstr "არასწორი ჯადოსნური რიცხვი GSSAPI OID-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:79
+msgid "Bad magic number for GSSAPI QUEUE"
+msgstr "არასწორი ჯადოსნური რიცხვი GSSAPI QUEUE-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:80
+msgid "Bad magic number for fast armored request"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი დაჯავშნული მოთხოვნისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:81
+msgid "Bad magic number for FAST request"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი მოთხოვნისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:82
+msgid "Bad magic number for FAST response"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი პასუხისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:83
+msgid "Bad magic number for krb5_authdata_context"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_authdata_context-სთვის"
+
+#: ../lib/krb5/error_tables/krb524_err.c:23
+msgid "Cannot convert V5 keyblock"
+msgstr "გადაყვანა შეუძლებელია V5 keyblock"
+
+#: ../lib/krb5/error_tables/krb524_err.c:24
+msgid "Cannot convert V5 address information"
+msgstr "გადაყვანა შეუძლებელია V5 მისამართის ინფორმაცია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:25
+msgid "Cannot convert V5 principal"
+msgstr "გადაყვანა შეუძლებელია V5 პრინციპალი"
+
+#: ../lib/krb5/error_tables/krb524_err.c:26
+msgid "V5 realm name longer than V4 maximum"
+msgstr "V5 რეალმის სახელი V4-ის მაქსიმუმზე გრძელია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:27
+msgid "Kerberos V4 error"
+msgstr "Kerberos V4 -ის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb524_err.c:28
+msgid "Encoding too large"
+msgstr "დაშიფვრა ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:29
+msgid "Decoding out of data"
+msgstr "დეკოდერს მონაცემები არ ყოფნის"
+
+#: ../lib/krb5/error_tables/krb524_err.c:30
+msgid "Service not responding"
+msgstr "სერვისი არ პასუხობს"
+
+#: ../lib/krb5/error_tables/krb524_err.c:31
+msgid "Kerberos version 4 support is disabled"
+msgstr "Kerberos ვერსია 4 -ის მხარდაჭერა გათიშულია"

_service:tar_scm:krb5-1.20.1.tar.gz/src/po/mit-krb5.pot -> _service:tar_scm:krb5-1.21.1.tar.gz/src/po/mit-krb5.pot Changed

@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: mit-krb5 1.20.1\n"
+"Project-Id-Version: mit-krb5 1.21.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2022-11-11 18:04-0500\n"
+"POT-Creation-Date: 2023-07-10 16:43-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -79,8 +79,8 @@
 #: ../../src/clients/kdestroy/kdestroy.c:150
 #: ../../src/clients/klist/klist.c:241 ../../src/clients/ksu/main.c:135
 #: ../../src/clients/ksu/main.c:141 ../../src/clients/kswitch/kswitch.c:94
-#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:929
-#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1058
+#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:925
+#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1059
 msgid "while initializing krb5"
 msgstr ""
 
@@ -99,8 +99,8 @@
 msgstr ""
 
 #: ../../src/clients/kdestroy/kdestroy.c:190
-#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:311
-#: ../../src/clients/kvno/kvno.c:517 ../../src/kadmin/cli/keytab.c:373
+#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:316
+#: ../../src/clients/kvno/kvno.c:522 ../../src/kadmin/cli/keytab.c:373
 #: ../../src/kadmin/dbutil/kdb5_util.c:544
 #, c-format
 msgid "while parsing principal name %s"
@@ -424,7 +424,7 @@
 msgid "while setting up KDB keytab for realm %s"
 msgstr ""
 
-#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:508
+#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:513
 #, c-format
 msgid "resolving keytab %s"
 msgstr ""
@@ -668,7 +668,7 @@
 msgstr ""
 
 #: ../../src/clients/klist/klist.c:674 ../../src/clients/ksu/ccache.c:440
-#: ../../src/kprop/kpropd.c:1205 ../../src/kprop/kpropd.c:1270
+#: ../../src/kprop/kpropd.c:1206 ../../src/kprop/kpropd.c:1271
 msgid "while unparsing client name"
 msgstr ""
 
@@ -1270,92 +1270,92 @@
 msgid "Unexpected header line"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:273
+#: ../../src/clients/kvno/kvno.c:278
 msgid "Invalid base64"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:319
+#: ../../src/clients/kvno/kvno.c:324
 #, c-format
 msgid "while formatting parsed principal name for '%s'"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:333
+#: ../../src/clients/kvno/kvno.c:338
 msgid "client and server principal names must match"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:349
+#: ../../src/clients/kvno/kvno.c:354
 #, c-format
 msgid "while getting credentials for %s"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:356
+#: ../../src/clients/kvno/kvno.c:361
 #, c-format
 msgid "while decoding ticket for %s"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:367
+#: ../../src/clients/kvno/kvno.c:372
 #, c-format
 msgid "while decrypting ticket for %s"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:371
+#: ../../src/clients/kvno/kvno.c:376
 #, c-format
 msgid "%s: kvno = %d, keytab entry valid\n"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:376
+#: ../../src/clients/kvno/kvno.c:381
 #, c-format
 msgid "%s: kvno = %d\n"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:391
+#: ../../src/clients/kvno/kvno.c:396
 #, c-format
 msgid "%s: constrained delegation failed"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:474 ../../src/kadmin/cli/kadmin.c:311
+#: ../../src/clients/kvno/kvno.c:479 ../../src/kadmin/cli/kadmin.c:311
 msgid "while initializing krb5 library"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:481
+#: ../../src/clients/kvno/kvno.c:486
 msgid "while converting etype"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:493
+#: ../../src/clients/kvno/kvno.c:498
 msgid "while opening ccache"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:500
+#: ../../src/clients/kvno/kvno.c:505
 msgid "while resolving output ccache"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:525
+#: ../../src/clients/kvno/kvno.c:530
 #, c-format
 msgid "while reading certificate file %s"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:535
+#: ../../src/clients/kvno/kvno.c:540
 #, c-format
 msgid "while getting user-to-user ticket from %s"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:544
+#: ../../src/clients/kvno/kvno.c:549
 msgid "while getting client principal name"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:551
+#: ../../src/clients/kvno/kvno.c:556
 msgid "while creating temporary output ccache"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:565
+#: ../../src/clients/kvno/kvno.c:570
 msgid "while initializing output ccache"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:575
+#: ../../src/clients/kvno/kvno.c:580
 msgid "while storing creds in output ccache"
 msgstr ""
 
-#: ../../src/clients/kvno/kvno.c:586
+#: ../../src/clients/kvno/kvno.c:591
 msgid "while writing output ccache"
 msgstr ""
 
@@ -2458,7 +2458,7 @@
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:186
 #: ../../src/kadmin/dbutil/kdb5_util.c:389
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:574
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:566
 msgid "while setting up master key name"
 msgstr ""
 
@@ -2470,14 +2470,14 @@
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:202
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:483
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:475
 #, c-format
 msgid "You will be prompted for the database Master Password.\n"
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:203
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:255
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:484
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:476
 #, c-format
 msgid "It is important that you NOT FORGET this password.\n"
 msgstr ""
@@ -2488,20 +2488,20 @@
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:217
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:494
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:486
 msgid "while reading master key from keyboard"
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:227
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:280
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:586
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:578
 msgid "while calculating master key salt"
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:235
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:289
 #: ../../src/kadmin/dbutil/kdb5_util.c:431
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:598
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:590
 msgid "while transforming master key from password"
 msgstr ""
 
@@ -2523,20 +2523,20 @@
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:294
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:610
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:602
 msgid "while adding entries to the database"
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:322
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:333
 #: ../../src/kadmin/dbutil/kdb5_stash.c:133
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:635
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:627
 msgid "while storing key"
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_create.c:323
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:334
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:636
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:628
 #, c-format
 msgid "Warning: couldn't stash master key.\n"
 msgstr ""
@@ -2549,7 +2549,7 @@
 #: ../../src/kadmin/dbutil/kdb5_destroy.c:71
 #: ../../src/kadmin/dbutil/kdb5_mkey.c:1111
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:360
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1442
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1434
 #, c-format
 msgid "(type 'yes' to confirm)? "
 msgstr ""
@@ -2947,8 +2947,8 @@
 msgstr ""
 
 #: ../../src/kadmin/dbutil/kdb5_util.c:378
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:849
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1457
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:841
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1449
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:568
 msgid "while initializing database"
 msgstr ""
@@ -3396,7 +3396,7 @@
 msgid "starting"
 msgstr ""
 
-#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1040
+#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1036
 #, c-format
 msgid "%s: starting...\n"
 msgstr ""
@@ -3458,21 +3458,21 @@
 "vers=%d, flavor=%d"
 msgstr ""
 
-#: ../../src/kdc/do_as_req.c:277
+#: ../../src/kdc/do_as_req.c:278
 #, c-format
 msgid "AS_REQ : handle_authdata (%d)"
 msgstr ""
 
-#: ../../src/kdc/do_tgs_req.c:581
+#: ../../src/kdc/do_tgs_req.c:938
 msgid "not checking transit path"
 msgstr ""
 
-#: ../../src/kdc/do_tgs_req.c:598
+#: ../../src/kdc/do_tgs_req.c:1044
 #, c-format
 msgid "TGS_REQ : handle_authdata (%d)"
 msgstr ""
 
-#: ../../src/kdc/fast_util.c:56
+#: ../../src/kdc/fast_util.c:57
 #, c-format
 msgid "%s while handling ap-request armor"
 msgstr ""
@@ -3498,11 +3498,11 @@
 msgid "No armor key but FAST armored request present"
 msgstr ""
 
-#: ../../src/kdc/fast_util.c:218
+#: ../../src/kdc/fast_util.c:216
 msgid "FAST req_checksum invalid; request modified"
 msgstr ""
 
-#: ../../src/kdc/fast_util.c:224
+#: ../../src/kdc/fast_util.c:222
 msgid "Unkeyed checksum used in fast_req"
 msgstr ""
 
@@ -3526,41 +3526,41 @@
 msgid "AS_REQ (%s) %s: %s: %s for %s%s%s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:153
+#: ../../src/kdc/kdc_log.c:154
 #, c-format
 msgid "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s for %s%s%s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:162
+#: ../../src/kdc/kdc_log.c:163
 #, c-format
 msgid "... PROTOCOL-TRANSITION s4u-client=%s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:166
+#: ../../src/kdc/kdc_log.c:167
 #, c-format
 msgid "... CONSTRAINED-DELEGATION s4u-client=%s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:170
+#: ../../src/kdc/kdc_log.c:171
 #, c-format
 msgid "TGS_REQ %s: %s: authtime %u, %s for %s, 2nd tkt client %s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:203
+#: ../../src/kdc/kdc_log.c:204
 #, c-format
 msgid "bad realm transit path from '%s' to '%s' via '%.*s%s'"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:209
+#: ../../src/kdc/kdc_log.c:210
 #, c-format
 msgid "unexpected error checking transit from '%s' to '%s' via '%.*s%s': %s"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:227
+#: ../../src/kdc/kdc_log.c:228
 msgid "TGS_REQ: issuing alternate <un-unparsable> TGT"
 msgstr ""
 
-#: ../../src/kdc/kdc_log.c:230
+#: ../../src/kdc/kdc_log.c:231
 #, c-format
 msgid "TGS_REQ: issuing TGT %s"
 msgstr ""
@@ -3588,16 +3588,21 @@
 msgid "Incorrect password in encrypted challenge"
 msgstr ""
 
-#: ../../src/kdc/kdc_util.c:182
+#: ../../src/kdc/kdc_util.c:179
 msgid "TGS_REQ: SESSION KEY or MUTUAL"
 msgstr ""
 
-#: ../../src/kdc/kdc_util.c:380
+#: ../../src/kdc/kdc_util.c:378
 #, c-format
 msgid "TGS_REQ: UNKNOWN SERVER: server='%s'"
 msgstr ""
 
-#: ../../src/kdc/kdc_util.c:842
+#: ../../src/kdc/kdc_util.c:541
+#, c-format
+msgid "Invalid pac_privsvr_enctype value %s"
+msgstr ""
+
+#: ../../src/kdc/kdc_util.c:882
 #, c-format
 msgid "Required auth indicators not present in ticket: %s"
 msgstr ""
@@ -3690,86 +3695,86 @@
 "arguments\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:658 ../../src/kdc/main.c:665 ../../src/kdc/main.c:780
+#: ../../src/kdc/main.c:656 ../../src/kdc/main.c:663 ../../src/kdc/main.c:778
 #, c-format
 msgid " KDC cannot initialize. Not enough memory\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:684 ../../src/kdc/main.c:727 ../../src/kdc/main.c:738
+#: ../../src/kdc/main.c:682 ../../src/kdc/main.c:725 ../../src/kdc/main.c:736
 #, c-format
 msgid "%s: KDC cannot initialize. Not enough memory\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:704 ../../src/kdc/main.c:817
+#: ../../src/kdc/main.c:702 ../../src/kdc/main.c:815
 #, c-format
 msgid "%s: cannot initialize realm %s - see log file for details\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:715
+#: ../../src/kdc/main.c:713
 #, c-format
 msgid "%s: cannot initialize realm %s. Not enough memory\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:766
+#: ../../src/kdc/main.c:764
 #, c-format
 msgid "invalid enctype %s"
 msgstr ""
 
-#: ../../src/kdc/main.c:805
+#: ../../src/kdc/main.c:803
 msgid "while attempting to retrieve default realm"
 msgstr ""
 
-#: ../../src/kdc/main.c:807
+#: ../../src/kdc/main.c:805
 #, c-format
 msgid "%s: %s, attempting to retrieve default realm\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:915
+#: ../../src/kdc/main.c:911
 #, c-format
 msgid "%s: cannot get memory for realm list\n"
 msgstr ""
 
-#: ../../src/kdc/main.c:950
+#: ../../src/kdc/main.c:946
 msgid "while initializing lookaside cache"
 msgstr ""
 
-#: ../../src/kdc/main.c:958
+#: ../../src/kdc/main.c:954
 msgid "while creating main loop"
 msgstr ""
 
-#: ../../src/kdc/main.c:967
+#: ../../src/kdc/main.c:963
 msgid "while loading KDC policy plugin"
 msgstr ""
 
-#: ../../src/kdc/main.c:992
+#: ../../src/kdc/main.c:988
 msgid "while initializing signal handlers"
 msgstr ""
 
-#: ../../src/kdc/main.c:1000
+#: ../../src/kdc/main.c:996
 msgid "while initializing network"
 msgstr ""
 
-#: ../../src/kdc/main.c:1010
+#: ../../src/kdc/main.c:1006
 msgid "while detaching from tty"
 msgstr ""
 
-#: ../../src/kdc/main.c:1016
+#: ../../src/kdc/main.c:1012
 msgid "while creating PID file"
 msgstr ""
 
-#: ../../src/kdc/main.c:1024
+#: ../../src/kdc/main.c:1020
 msgid "creating worker processes"
 msgstr ""
 
-#: ../../src/kdc/main.c:1034
+#: ../../src/kdc/main.c:1030
 msgid "while loading audit plugin module(s)"
 msgstr ""
 
-#: ../../src/kdc/main.c:1038
+#: ../../src/kdc/main.c:1034
 msgid "commencing operation"
 msgstr ""
 
-#: ../../src/kdc/main.c:1045
+#: ../../src/kdc/main.c:1041
 msgid "shutting down"
 msgstr ""
 
@@ -3815,7 +3820,7 @@
 msgid "while connecting to server"
 msgstr ""
 
-#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1195
+#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1196
 msgid "while getting local socket address"
 msgstr ""
 
@@ -3832,7 +3837,7 @@
 msgstr ""
 
 #: ../../src/kprop/kprop.c:308 ../../src/kprop/kprop.c:506
-#: ../../src/kprop/kpropd.c:1515
+#: ../../src/kprop/kpropd.c:1516
 #, c-format
 msgid "Generic remote error: %s\n"
 msgstr ""
@@ -4282,133 +4287,133 @@
 msgid "ERROR returned by primary KDC, bailing.\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1108
+#: ../../src/kprop/kpropd.c:1109
 msgid "copying db args"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1133
+#: ../../src/kprop/kpropd.c:1134
 msgid "Unable to get default realm"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1140
+#: ../../src/kprop/kpropd.c:1141
 msgid "Unable to set default realm"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1150
+#: ../../src/kprop/kpropd.c:1151
 msgid "while trying to construct my service name"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1157
+#: ../../src/kprop/kpropd.c:1158
 msgid "while allocating filename for temp file"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1165
+#: ../../src/kprop/kpropd.c:1166
 msgid "while initializing"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1173
+#: ../../src/kprop/kpropd.c:1174
 msgid "Unable to map log!\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1215
+#: ../../src/kprop/kpropd.c:1216
 #, c-format
 msgid "Error in krb5_auth_con_ini: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1223
+#: ../../src/kprop/kpropd.c:1224
 #, c-format
 msgid "Error in krb5_auth_con_setflags: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1236
+#: ../../src/kprop/kpropd.c:1237
 #, c-format
 msgid "Error in krb5_auth_con_setaddrs: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1244
+#: ../../src/kprop/kpropd.c:1245
 #, c-format
 msgid "Error in krb5_kt_resolve: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1253
+#: ../../src/kprop/kpropd.c:1254
 #, c-format
 msgid "Error in krb5_recvauth: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1260
+#: ../../src/kprop/kpropd.c:1261
 #, c-format
 msgid "Error in krb5_copy_prinicpal: %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1277
+#: ../../src/kprop/kpropd.c:1278
 msgid "while unparsing ticket etype"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1281
+#: ../../src/kprop/kpropd.c:1282
 #, c-format
 msgid "authenticated client: %s (etype == %s)\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1361
+#: ../../src/kprop/kpropd.c:1362
 msgid "while reading size of database from client"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1371
+#: ../../src/kprop/kpropd.c:1372
 msgid "while decoding database size from client"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1379
+#: ../../src/kprop/kpropd.c:1380
 msgid "malformed database size message from client"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1391
+#: ../../src/kprop/kpropd.c:1392
 msgid "while initializing i_vector"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1396
+#: ../../src/kprop/kpropd.c:1397
 #, c-format
 msgid "Full propagation transfer started.\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1450
+#: ../../src/kprop/kpropd.c:1451
 #, c-format
 msgid "Full propagation transfer finished.\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1510
+#: ../../src/kprop/kpropd.c:1511
 msgid "while decoding error packet from client"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1519
+#: ../../src/kprop/kpropd.c:1520
 msgid "signaled from server"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1521
+#: ../../src/kprop/kpropd.c:1522
 #, c-format
 msgid "Error text from client: %s\n"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1570
+#: ../../src/kprop/kpropd.c:1571
 #, c-format
 msgid "while trying to fork %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1574
+#: ../../src/kprop/kpropd.c:1575
 #, c-format
 msgid "while trying to exec %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1581
+#: ../../src/kprop/kpropd.c:1582
 #, c-format
 msgid "while waiting for %s"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1587
+#: ../../src/kprop/kpropd.c:1588
 #, c-format
 msgid "%s load terminated"
 msgstr ""
 
-#: ../../src/kprop/kpropd.c:1593
+#: ../../src/kprop/kpropd.c:1594
 #, c-format
 msgid "%s returned a bad exit status (%d)"
 msgstr ""
@@ -5157,79 +5162,79 @@
 msgid "An expected per-message token was not received"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1824
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1750
 msgid "SPNEGO cannot find mechanisms to negotiate"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1826
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1752
 msgid "SPNEGO failed to acquire creds"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1828
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1754
 msgid "SPNEGO acceptor did not select a mechanism"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1830
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1756
 msgid "SPNEGO failed to negotiate a mechanism"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1832
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1758
 msgid "SPNEGO acceptor did not return a valid token"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1834
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1760
 msgid "Invalid NegoEx signature"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1836
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1762
 msgid "Invalid NegoEx message type"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1838
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1764
 msgid "Invalid NegoEx message size"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1840
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1766
 msgid "Invalid NegoEx conversation ID"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1842
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1768
 msgid "NegoEx authentication scheme not found"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1844
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1770
 msgid "Missing NegoEx negotiate message"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1846
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1772
 msgid "Missing NegoEx authentication protocol request message"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1848
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1774
 msgid "No mutually supported NegoEx authentication schemes"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1850
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1776
 msgid "No NegoEx verify key"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1852
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1778
 msgid "Unknown NegoEx checksum scheme"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1854
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1780
 msgid "Invalid NegoEx checksum"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1856
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1782
 msgid "Unsupported critical NegoEx extension"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1858
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1784
 msgid "Unsupported NegoEx version"
 msgstr ""
 
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1860
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1786
 msgid "NegoEx message out of sequence"
 msgstr ""
 
@@ -5285,7 +5290,7 @@
 msgid "debug"
 msgstr ""
 
-#: ../../src/lib/kadm5/logger.c:784
+#: ../../src/lib/kadm5/logger.c:785
 #, c-format
 msgid "Couldn't open log file %s: %s\n"
 msgstr ""
@@ -5430,7 +5435,7 @@
 "collection"
 msgstr ""
 
-#: ../../src/lib/krb5/ccache/cc_kcm.c:908
+#: ../../src/lib/krb5/ccache/cc_kcm.c:946
 #, c-format
 msgid "Credentials cache 'KCM:%s' not found"
 msgstr ""
@@ -5516,34 +5521,34 @@
 msgid "Password change failed"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/chpw.c:431
+#: ../../src/lib/krb5/krb/chpw.c:432
 msgid ""
 "The password must include numbers or symbols. Don't include any part of "
 "your name in the password."
 msgstr ""
 
-#: ../../src/lib/krb5/krb/chpw.c:437
+#: ../../src/lib/krb5/krb/chpw.c:438
 #, c-format
 msgid "The password must contain at least %d character."
 msgid_plural "The password must contain at least %d characters."
 msgstr0 ""
 msgstr1 ""
 
-#: ../../src/lib/krb5/krb/chpw.c:446
+#: ../../src/lib/krb5/krb/chpw.c:447
 #, c-format
 msgid "The password must be different from the previous password."
 msgid_plural "The password must be different from the previous %d passwords."
 msgstr0 ""
 msgstr1 ""
 
-#: ../../src/lib/krb5/krb/chpw.c:458
+#: ../../src/lib/krb5/krb/chpw.c:459
 #, c-format
 msgid "The password can only be changed once a day."
 msgid_plural "The password can only be changed every %d days."
 msgstr0 ""
 msgstr1 ""
 
-#: ../../src/lib/krb5/krb/chpw.c:504
+#: ../../src/lib/krb5/krb/chpw.c:503
 msgid "Try a more complex password, or contact your administrator."
 msgstr ""
 
@@ -5585,37 +5590,38 @@
 msgid "Reply has wrong form of session key for anonymous request"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1570
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1569
 #, c-format
 msgid "Warning: Your password will expire in less than one hour on %s"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1574
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1573
 #, c-format
 msgid "Warning: Your password will expire in %d hour%s on %s"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1578
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1577
 #, c-format
 msgid "Warning: Your password will expire in %d days on %s"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1600
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1607
+#, c-format
 msgid ""
-"Warning: encryption type des3-cbc-sha1 used for authentication is weak and "
-"will be disabled"
+"Warning: encryption type %s used for authentication is deprecated and will "
+"be disabled"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1844
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1852
 msgid "Failed to store credentials"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1939
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1947
 #, c-format
 msgid "Client '%s' not found in Kerberos database"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/gic_keytab.c:225
+#: ../../src/lib/krb5/krb/gic_keytab.c:221
 #, c-format
 msgid "Keytab contains no suitable keys for %s"
 msgstr ""
@@ -5659,19 +5665,19 @@
 msgid "Could not find %s plugin module named '%s'"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth2.c:309
+#: ../../src/lib/krb5/krb/preauth2.c:313
 msgid "krb5_init_creds calls must use same library context"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth2.c:717
+#: ../../src/lib/krb5/krb/preauth2.c:721
 msgid "Pre-authentication failed"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth2.c:1046
+#: ../../src/lib/krb5/krb/preauth2.c:1050
 msgid "Unable to initialize preauth context"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth2.c:1059
+#: ../../src/lib/krb5/krb/preauth2.c:1063
 #, c-format
 msgid "Preauth module %s"
 msgstr ""
@@ -5688,27 +5694,27 @@
 msgid "Vendor:"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:525
+#: ../../src/lib/krb5/krb/preauth_otp.c:526
 msgid "Enter #"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:561
+#: ../../src/lib/krb5/krb/preauth_otp.c:562
 msgid "OTP Challenge:"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:590
+#: ../../src/lib/krb5/krb/preauth_otp.c:591
 msgid "OTP Token PIN"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:704
+#: ../../src/lib/krb5/krb/preauth_otp.c:705
 msgid "OTP value doesn't match any token formats"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:771
+#: ../../src/lib/krb5/krb/preauth_otp.c:772
 msgid "Enter OTP Token Value"
 msgstr ""
 
-#: ../../src/lib/krb5/krb/preauth_otp.c:917
+#: ../../src/lib/krb5/krb/preauth_otp.c:918
 msgid "No supported tokens"
 msgstr ""
 
@@ -5866,9 +5872,9 @@
 msgstr ""
 
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:69
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:859
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1060
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:851
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1052
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1459
 msgid "while reading kerberos container information"
 msgstr ""
 
@@ -5876,8 +5882,8 @@
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:143
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:504
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:518
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:150
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:165
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:147
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:162
 msgid "while providing time specification"
 msgstr ""
 
@@ -5887,7 +5893,7 @@
 msgstr ""
 
 #: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:279
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1475
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
 msgid "while reading realm information"
 msgstr ""
 
@@ -5924,142 +5930,142 @@
 msgid "while listing policy objects"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:419
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:411
 #, c-format
 msgid "for subtree while creating realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:431
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:423
 #, c-format
 msgid "for container reference while creating realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:456
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:448
 #, c-format
 msgid "invalid search scope while creating realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:795
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:463
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:787
 #, c-format
 msgid "'%s' is an invalid option\n"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:479
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
 #, c-format
 msgid "Initializing database for realm '%s'\n"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:503
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:664
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:495
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:656
 #, c-format
 msgid "while creating realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:523
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:515
 #, c-format
 msgid "Enter DN of Kerberos container: "
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:558
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:866
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:550
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:858
 #, c-format
 msgid "while reading information of realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:702
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:694
 msgid "while reading Kerberos container information"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:745
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:737
 #, c-format
 msgid "for subtree while modifying realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:756
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:748
 #, c-format
 msgid "for container reference while modifying realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:784
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:776
 #, c-format
 msgid "specified for search scope while modifying information of realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:823
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:815
 #, c-format
 msgid "while modifying information of realm '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:912
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:904
 msgid "Realm Name"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:907
 msgid "Subtree"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:918
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:910
 msgid "Principal Container Reference"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:925
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:917
 msgid "SearchScope"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
 msgid "Invalid !"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:930
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:922
 msgid "KDC Services"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:945
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:937
 msgid "Admin Services"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:960
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:952
 msgid "Passwd Services"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:976
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:968
 msgid "Maximum Ticket Life"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:981
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:973
 msgid "Maximum Renewable Life"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:988
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:980
 msgid "Ticket flags"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1067
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1059
 msgid "while listing realms"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1399
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1391
 msgid "while adding entries to database"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1440
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1432
 #, c-format
 msgid "Deleting KDC database of '%s', are you sure?\n"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1451
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1443
 #, c-format
 msgid "OK, deleting database of '%s'...\n"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1484
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1476
 #, c-format
 msgid "deleting database of '%s'"
 msgstr ""
 
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1489
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1481
 #, c-format
 msgid "** Database of '%s' destroyed.\n"
 msgstr ""
@@ -6535,101 +6541,101 @@
 msgid "No pkinit_anchors supplied"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:957
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:920
 #, c-format
 msgid "%s: %s"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:987
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:950
 #, c-format
 msgid "%s (depth %d): %s"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1230
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4180
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1193
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4133
 msgid "Pass phrase for"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1516
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1526
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1784
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1794
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2271
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1479
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1489
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1743
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1753
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2224
 msgid "Failed to DER encode PKCS7"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1617
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1576
 msgid "Failed to verify own certificate"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1768
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1727
 msgid "Failed to add digest attribute"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1890
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1849
 msgid "Failed to decode CMS message"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1908
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1867
 msgid "Invalid pkinit packet: octet string expected"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1926
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1885
 msgid "wrong oid\n"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2078
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2037
 msgid "Failed to verify received certificate"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2114
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2068
 msgid "Failed to verify CMS message"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2259
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2212
 msgid "Failed to encrypt PKCS7 object"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2317
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2270
 msgid "Failed to decode PKCS7"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2333
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2286
 msgid "Failed to decrypt PKCS7 message"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2756
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2709
 msgid "Failed to fetch SSKDF"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2763
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2716
 msgid "Failed to instantiate SSKDF"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2776
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2729
 msgid "Failed to derive key using SSKDF"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2838
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2791
 msgid "Failed to compute digest"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4300
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4253
 #, c-format
 msgid "Cannot read certificate file '%s'"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4308
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4261
 #, c-format
 msgid "Cannot read key file '%s'"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5165
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5112
 #, c-format
 msgid "Cannot open file '%s'"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5172
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5119
 #, c-format
 msgid "Cannot read file '%s'"
 msgstr ""
@@ -6685,7 +6691,7 @@
 msgid "OCSP is not supported: (realm: %s)"
 msgstr ""
 
-#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1514
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1516
 msgid "No realms configured correctly for pkinit support"
 msgstr ""
 
@@ -6715,28 +6721,27 @@
 msgid "error %ld"
 msgstr ""
 
-#: ../../src/util/support/plugins.c:201
-#, c-format
-msgid "unable to find plugin %s: %s"
-msgstr ""
-
-#: ../../src/util/support/plugins.c:291
+#: ../../src/util/support/plugins.c:94 ../../src/util/support/plugins.c:116
 msgid "unknown failure"
 msgstr ""
 
-#: ../../src/util/support/plugins.c:294
+#: ../../src/util/support/plugins.c:96
 #, c-format
 msgid "unable to load plugin %s: %s"
 msgstr ""
 
-#: ../../src/util/support/plugins.c:317
+#: ../../src/util/support/plugins.c:142
 #, c-format
 msgid "unable to load DLL %s"
 msgstr ""
 
-#: ../../src/util/support/plugins.c:333
+#: ../../src/util/support/plugins.c:166
 #, c-format
-msgid "plugin unavailable: %s"
+msgid "unable to get DLL Symbol: %s"
+msgstr ""
+
+#: ../../src/util/support/plugins.c:190
+msgid "plugin loading unavailable"
 msgstr ""
 
 #: ../lib/gssapi/generic/gssapi_err_generic.c:23

_service:tar_scm:krb5-1.20.1.tar.gz/src/prototype/prototype.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/prototype/prototype.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/prototype/prototype.h -> _service:tar_scm:krb5-1.21.1.tar.gz/src/prototype/prototype.h Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/gssapi/t_client_keytab.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/gssapi/t_client_keytab.py Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/gssapi/t_enctypes.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/gssapi/t_enctypes.py Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/t_authdata.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/t_authdata.py Changed

@@ -1,9 +1,10 @@
 from k5test import *
 
-# Load the sample KDC authdata module.
+# Load the sample KDC authdata module.  Allow renewable tickets.
 greet_path = os.path.join(buildtop, 'plugins', 'authdata', 'greet_server',
                           'greet_server.so')
-conf = {'plugins': {'kdcauthdata': {'module': 'greet:' + greet_path}}}
+conf = {'realms': {'$realm': {'max_life': '20h', 'max_renewable_life': '20h'}},
+        'plugins': {'kdcauthdata': {'module': 'greet:' + greet_path}}}
 realm = K5Realm(krb5_conf=conf)
 
 # With no requested authdata, we expect to see PAC (128) in an
@@ -11,7 +12,7 @@
 # container.
 mark('baseline authdata')
 out = realm.run('./adata', realm.host_princ)
-if '?128: 6, 7, 10, 16' not in out or '^-42: Hello' not in out:
+if '?128: 6, 7, 10, 16, 19' not in out or '^-42: Hello' not in out:
     fail('expected authdata not seen for basic request')
 
 # Requested authdata is copied into the ticket, with KDC-only types
@@ -49,6 +50,20 @@
 if '128:' not in out or  '^-42: Hello' not in out or ' -3: test' not in out:
     fail('expected authdata not seen for cross-realm TGT request')
 
+mark('pac_privsvr_enctype')
+# Change the privsvr enctype and make sure we can still verify the PAC
+# on a service ticket in a TGS request.
+realm.run(kadminl, 'setstr', realm.host_princ,
+           'pac_privsvr_enctype', 'aes128-sha1')
+realm.kinit(realm.user_princ, password('user'),
+            '-S', realm.host_princ, '-r', '1h')
+realm.kinit(realm.user_princ, None, '-S', realm.host_princ, '-R')
+# Remove the attribute and make sure the previously-issued service
+# ticket PAC no longer verifies.
+realm.run(kadminl, 'delstr', realm.host_princ, 'pac_privsvr_enctype')
+realm.kinit(realm.user_princ, None, '-S', realm.host_princ, '-R',
+            expected_code=1, expected_msg='Message stream modified')
+
 realm.stop()
 
 if not pkinit_enabled:
@@ -243,7 +258,7 @@
 if '+97: indcl' not in out or 'inds1' in out:
     fail('correct auth-indicator not seen for S4U2Proxy req')
 # Make sure a PAC with an S4U_DELEGATION_INFO(11) buffer is included.
-if '?128: 1, 6, 7, 10, 11, 16' not in out:
+if '?128: 1, 6, 7, 10, 11, 16, 19' not in out:
     fail('PAC with delegation info not seen for S4U2Proxy req')
 
 # Get another S4U2Proxy ticket including request-authdata.

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/t_ccache.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/t_ccache.py Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/t_etype_info.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/t_etype_info.py Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/t_keyrollover.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/t_keyrollover.py Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/tests/t_sesskeynego.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/tests/t_sesskeynego.py Changed

@@ -25,6 +25,8 @@
         'default_tkt_enctypes': 'aes128-cts',
         'default_tgs_enctypes': 'rc4-hmac,aes128-cts'}}
 conf4 = {'libdefaults': {'permitted_enctypes': 'aes256-cts'}}
+conf5 = {'libdefaults': {'allow_rc4': 'true'}}
+conf6 = {'libdefaults': {'allow_des3': 'true'}}
 # Test with client request and session_enctypes preferring aes128, but
 # aes256 long-term key.
 realm = K5Realm(krb5_conf=conf1, create_host=False, get_creds=False)
@@ -54,10 +56,12 @@
            'aes128-cts,aes256-cts')
 test_kvno(realm, 'aes128-cts-hmac-sha1-96', 'aes256-cts-hmac-sha1-96')
 
-# 3b: Negotiate rc4-hmac session key when principal only has aes256 long-term.
+# 3b: Skip RC4 (as the KDC does not allow it for session keys by
+# default) and negotiate aes128-cts session key, with only an aes256
+# long-term service key.
 realm.run(kadminl, 'setstr', 'server', 'session_enctypes',
            'rc4-hmac,aes128-cts,aes256-cts')
-test_kvno(realm, 'DEPRECATED:arcfour-hmac', 'aes256-cts-hmac-sha1-96')
+test_kvno(realm, 'aes128-cts-hmac-sha1-96', 'aes256-cts-hmac-sha1-96')
 realm.stop()
 
 # 4: Check that permitted_enctypes is a default for session key enctypes.
@@ -67,4 +71,24 @@
           expected_trace=('etypes requested in TGS request: aes256-cts',))
 realm.stop()
 
+# 5: allow_rc4 permits negotiation of rc4-hmac session key.
+realm = K5Realm(krb5_conf=conf5, create_host=False, get_creds=False)
+realm.run(kadminl, 'addprinc', '-randkey', '-e', 'aes256-cts', 'server')
+realm.run(kadminl, 'setstr', 'server', 'session_enctypes', 'rc4-hmac')
+test_kvno(realm, 'DEPRECATED:arcfour-hmac', 'aes256-cts-hmac-sha1-96')
+realm.stop()
+
+# 6: allow_des3 permits negotiation of des3-cbc-sha1 session key.
+realm = K5Realm(krb5_conf=conf6, create_host=False, get_creds=False)
+realm.run(kadminl, 'addprinc', '-randkey', '-e', 'aes256-cts', 'server')
+realm.run(kadminl, 'setstr', 'server', 'session_enctypes', 'des3-cbc-sha1')
+test_kvno(realm, 'DEPRECATED:des3-cbc-sha1', 'aes256-cts-hmac-sha1-96')
+realm.stop()
+
+# 7: default config negotiates aes256-sha1 session key for RC4-only service.
+realm = K5Realm(create_host=False, get_creds=False)
+realm.run(kadminl, 'addprinc', '-randkey', '-e', 'rc4-hmac', 'server')
+test_kvno(realm, 'aes256-cts-hmac-sha1-96', 'DEPRECATED:arcfour-hmac')
+realm.stop()
+
 success('sesskeynego')

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/et/et_c.awk -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/et/et_c.awk Changed

@@ -82,8 +82,7 @@
 
 	# figure out: table_number_base=table_number*256
 	tab_base_low = tab_base_low * 256
-	tab_base_high = (tab_base_high * 256) + \
-			int(tab_base_low / mod_base)
+	tab_base_high = (tab_base_high * 256) + int(tab_base_low / mod_base)
 	tab_base_low = tab_base_low % mod_base
 
 	if (table_number > 128*256*256) {
@@ -203,14 +202,12 @@
 	print "#include <com_err.h>" > outfile
 	print "" > outfile
 	if (tab_base_high == 0) {
-	 print "const struct error_table et_" table_name "_error_table = { text, " \
-		sprintf("%dL, %d };", tab_base_sign*tab_base_low, \
-		table_item_count) > outfile
+	 base = sprintf("%dL", tab_base_sign * tab_base_low)
 	} else {
-	 print "const struct error_table et_" table_name "_error_table = { text, " \
-		sprintf("%d%06dL, %d };", tab_base_sign*tab_base_high, \
-		tab_base_low, table_item_count) > outfile
+	 base = sprintf("%d%06dL", tab_base_sign * tab_base_high, tab_base_low)
 	}
+	ints = sprintf("%s, %d", base, table_item_count)
+	print "const struct error_table et_" table_name "_error_table = { text, " ints " };" > outfile
 	print "" > outfile
 	print "#if !defined(_WIN32)" > outfile
 	print "void initialize_" table_name "_error_table (void)" > outfile

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/et/et_h.awk -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/et/et_h.awk Changed

@@ -81,8 +81,7 @@
 
 	# figure out: table_number_base=table_number*256
 	tab_base_low = tab_base_low * 256
-	tab_base_high = (tab_base_high * 256) + \
-			int(tab_base_low / mod_base)
+	tab_base_high = (tab_base_high * 256) + int(tab_base_low / mod_base)
 	tab_base_low = tab_base_low % mod_base
 
 	if (table_number > 128*256*256) {
@@ -119,11 +118,9 @@
 /^ \t*(error_code|ec) \t+A-Z_0-9+,/ {
 	tag=substr($2,1,length($2)-1)
 	if (curr_high == 0) {
-		printf "#define %-40s (%dL)\n", tag, \
-			curr_sign*curr_low > outfile
+		printf "#define %-40s (%dL)\n", tag, curr_sign*curr_low > outfile
 	} else {
-		printf "#define %-40s (%d%06dL)\n", tag, curr_high*curr_sign, \
-			curr_low > outfile
+		printf "#define %-40s (%d%06dL)\n", tag, curr_high*curr_sign, curr_low > outfile
 	}
 	curr_low += curr_sign;
 	if (curr_low >= mod_base) {
@@ -142,14 +139,11 @@
 	    exit 1
 	}
 	if (tab_base_high == 0) {
-		print "#define ERROR_TABLE_BASE_" table_name " (" \
-			sprintf("%d", tab_base_sign*tab_base_low) \
-			"L)" > outfile
+		base = sprintf("%dL", tab_base_sign * tab_base_low)
 	} else {
-		print "#define ERROR_TABLE_BASE_" table_name " (" \
-			sprintf("%d%06d", tab_base_sign*tab_base_high, \
-			tab_base_low) "L)" > outfile
+		base = sprintf("%d%06dL", tab_base_sign * tab_base_high, tab_base_low)
 	}
+	print "#define ERROR_TABLE_BASE_" table_name " (" base ")" > outfile
 	print "" > outfile
 	print "extern const struct error_table et_" table_name "_error_table;" > outfile
 	print "" > outfile

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/export-check.pl -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/export-check.pl Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/k5test.py -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/k5test.py Changed

@@ -414,7 +414,10 @@
         print("*** Last mark: %s" % _last_mark)
     if _last_cmd:
         print("*** Last command (#%d): %s" % (_cmd_index - 1, _last_cmd))
-    if _last_cmd_output:
+    if _failed_daemon_output:
+        print('*** Output of failed daemon:')
+        sys.stdout.write(_failed_daemon_output)
+    elif _last_cmd_output:
         print("*** Output of last command:")
         sys.stdout.write(_last_cmd_output)
     if _current_pass:
@@ -426,7 +429,7 @@
 
 def success(msg):
     global _success
-    _check_daemons()
+    _stop_daemons()
     output('*** Success: %s\n' % msg)
     _success = True
 
@@ -447,7 +450,7 @@
 def skip_rest(whatmsg, whymsg):
     global _success
     skipped(whatmsg, whymsg)
-    _check_daemons()
+    _stop_daemons()
     _success = True
     sys.exit(0)
 
@@ -503,8 +506,8 @@
         sys.stdout.flush()
         sys.stdin.readline()
     for proc in _daemons:
-        if _check_daemon(proc) is None:
-            os.kill(proc.pid, signal.SIGTERM)
+        os.kill(proc.pid, signal.SIGTERM)
+        _check_daemon(proc)
     if not _success:
         print
         if not verbose:
@@ -833,65 +836,56 @@
     return proc
 
 
-# Check a daemon's status prior to terminating it.  Display its return
-# code if it already exited, and display any output it has generated.
-# Return the daemon's exit status or None if it is still running.
+# Await a daemon process's exit status and display it if it isn't
+# successful.  Display any output it generated after the sentinel.
+# Return the daemon's exit status (0 if it terminated with SIGTERM).
 def _check_daemon(proc):
-    exited = False
-    code = proc.poll()
-    if code is not None:
+    global _failed_daemon_output
+    code = proc.wait()
+    # If a daemon doesn't catch SIGTERM (like gss-server), treat it as
+    # a normal exit.
+    if code == -signal.SIGTERM:
+        code = 0
+    if code != 0:
         output('*** Daemon pid %d exited with code %d\n' % (proc.pid, code))
 
-    flags = fcntl.fcntl(proc.stdout, fcntl.F_GETFL)
-    fcntl.fcntl(proc.stdout, fcntl.F_SETFL, flags | os.O_NONBLOCK)
-    try:
-        out = proc.stdout.read()
-    except:
-        return
-
+    out, err = proc.communicate()
+    if code != 0:
+        _failed_daemon_output = out
     output('*** Daemon pid %d output:\n' % proc.pid)
     output(out)
+
     return code
 
 
-# Check all tracked daemon processes.  If any daemons already exited,
-# remove them from the list (so we don't try to terminate them again).
-# If any daemons exited with an error, fail out.
-def _check_daemons():
-    exited = 
+# Terminate all active daemon processes.  Fail out if any of them
+# exited unsuccessfully.
+def _stop_daemons():
+    global _daemons
     daemon_error = False
     for proc in _daemons:
+        os.kill(proc.pid, signal.SIGTERM)
         code = _check_daemon(proc)
-        if code is not None:
-            exited.append(proc)
-            if code != 0:
-                daemon_error = True
-
-    for proc in exited:
-        _daemons.remove(proc)
-
+        if code != 0:
+            daemon_error = True
+    _daemons = 
     if daemon_error:
         fail('One or more daemon processes exited with an error')
 
 
-def stop_daemon(proc):
-    code = _check_daemon(proc)
-    if code is not None:
-        _daemons.remove(proc)
-        if code != 0:
-            fail('Daemon process %d exited early' % proc.pid)
-    else:
-        output('*** Terminating process %d\n' % proc.pid)
-        os.kill(proc.pid, signal.SIGTERM)
-        proc.wait()
-        _daemons.remove(proc)
-
-
+# Wait for a daemon process to exit.  Fail out if it exits
+# unsuccessfully.
 def await_daemon_exit(proc):
-    code = proc.wait()
+    code = _check_daemon(proc)
     _daemons.remove(proc)
     if code != 0:
-        fail('Daemon process %d exited with status %d' % (proc.pid, code))
+        fail('Daemon exited unsuccessfully')
+
+
+# Terminate one daemon process.  Fail out if it exits unsuccessfully.
+def stop_daemon(proc):
+    os.kill(proc.pid, signal.SIGTERM)
+    return await_daemon_exit(proc)
 
 
 class K5Realm(object):
@@ -1346,14 +1340,14 @@
 
     # Exercise the DES3 enctype.
     ('des3', None,
-     {'libdefaults': {'permitted_enctypes': 'des3'}},
+     {'libdefaults': {'permitted_enctypes': 'des3 aes256-sha1'}},
      {'realms': {'$realm': {
                     'supported_enctypes': 'des3-cbc-sha1:normal',
                     'master_key_type': 'des3-cbc-sha1'}}}),
 
     # Exercise the arcfour enctype.
     ('arcfour', None,
-     {'libdefaults': {'permitted_enctypes': 'rc4'}},
+     {'libdefaults': {'permitted_enctypes': 'rc4 aes256-sha1'}},
      {'realms': {'$realm': {
                     'supported_enctypes': 'arcfour-hmac:normal',
                     'master_key_type': 'arcfour-hmac'}}}),
@@ -1404,6 +1398,7 @@
 _last_mark = None
 _last_cmd = None
 _last_cmd_output = None
+_failed_daemon_output = None
 buildtop = _find_buildtop()
 srctop = _find_srctop()
 plugins = os.path.join(buildtop, 'plugins')

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/profile/prof_get.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/profile/prof_get.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/json.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/json.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/k5buf.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/k5buf.c Changed

@@ -73,13 +73,13 @@
 
 if (buf->buftype == K5BUF_ERROR)
 return 0;
- if (buf->space - 1 - buf->len >= len) /* Enough room already. */
+ if (buf->space - buf->len >= len) /* Enough room already. */
 return 1;
 if (buf->buftype == K5BUF_FIXED) /* Can't resize a fixed buffer. */
 goto error_exit;
 assert(buf->buftype == K5BUF_DYNAMIC || buf->buftype == K5BUF_DYNAMIC_ZAP);
 new_space = buf->space * 2;
- while (new_space - buf->len - 1 < len) {
+ while (new_space - buf->len < len) {
 if (new_space > SIZE_MAX / 2)
 goto error_exit;
 new_space *= 2;
@@ -90,7 +90,6 @@
 if (new_data == NULL)
 goto error_exit;
 memcpy(new_data, buf->data, buf->len);
- new_databuf->len = '\0';
 zap(buf->data, buf->len);
 free(buf->data);
 } else {
@@ -112,14 +111,13 @@
 }
 
 void
-k5_buf_init_fixed(struct k5buf *buf, char *data, size_t space)
+k5_buf_init_fixed(struct k5buf *buf, void *data, size_t space)
 {
 assert(space > 0);
 buf->buftype = K5BUF_FIXED;
 buf->data = data;
 buf->space = space;
 buf->len = 0;
- *endptr(buf) = '\0';
 }
 
 void
@@ -133,7 +131,6 @@
 return;
 }
 buf->len = 0;
- *endptr(buf) = '\0';
 }
 
 void
@@ -158,7 +155,6 @@
 if (len > 0)
 memcpy(endptr(buf), data, len);
 buf->len += len;
- *endptr(buf) = '\0';
 }
 
 void
@@ -195,7 +191,7 @@
 
 if (r >= 0) {
 /* snprintf correctly told us how much space is required. */
- if (!ensure_space(buf, r))
+ if (!ensure_space(buf, r + 1))
 return;
 remaining = buf->space - buf->len;
 r = vsnprintf(endptr(buf), remaining, fmt, ap);
@@ -214,8 +210,8 @@
 return;
 }
 if (ensure_space(buf, r)) {
- /* Copy the temporary string into buf, including terminator. */
- memcpy(endptr(buf), tmp, r + 1);
+ /* Copy the temporary string into buf. */
+ memcpy(endptr(buf), tmp, r);
 buf->len += r;
 }
 if (buf->buftype == K5BUF_DYNAMIC_ZAP)
@@ -233,13 +229,21 @@
 va_end(ap);
 }
 
+char *
+k5_buf_cstring(struct k5buf *buf)
+{
+ if (!ensure_space(buf, 1))
+ return NULL;
+ *endptr(buf) = '\0';
+ return buf->data;
+}
+
 void *
 k5_buf_get_space(struct k5buf *buf, size_t len)
 {
 if (!ensure_space(buf, len))
 return NULL;
 buf->len += len;
- *endptr(buf) = '\0';
 return endptr(buf) - len;
 }
 
@@ -250,7 +254,6 @@
 return;
 assert(len <= buf->len);
 buf->len = len;
- *endptr(buf) = '\0';
 }
 
 int

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/libkrb5support-fixed.exports -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/libkrb5support-fixed.exports Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/plugins.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/plugins.c Changed

@@ -29,16 +29,6 @@
 #if USE_DLOPEN
 #include <dlfcn.h>
 #endif
-#include <sys/types.h>
-#ifdef HAVE_SYS_STAT_H
-#include <sys/stat.h>
-#endif
-#ifdef HAVE_SYS_PARAM_H
-#include <sys/param.h>
-#endif
-#ifdef HAVE_UNISTD_H
-#include <unistd.h>
-#endif
 
 #if USE_DLOPEN
 #ifdef RTLD_GROUP
@@ -68,16 +58,6 @@
 #endif
 #endif
 
-#if USE_DLOPEN && USE_CFBUNDLE
-#include <CoreFoundation/CoreFoundation.h>
-
-/* Currently CoreFoundation only exists on the Mac so we just use
- * pthreads directly to avoid creating empty function calls on other
- * platforms. If a thread initializer ever gets created in the common
- * plugin code, move this there */
-static pthread_mutex_t krb5int_bundle_mutex = PTHREAD_MUTEX_INITIALIZER;
-#endif
-
 #include <stdarg.h>
 static void Tprintf (const char *fmt, ...)
 {
@@ -90,374 +70,193 @@
 }
 
 struct plugin_file_handle {
-#if USE_DLOPEN
+#if defined(USE_DLOPEN)
 void *dlhandle;
-#endif
-#ifdef _WIN32
- HMODULE hinstPlugin;
-#endif
-#if !defined (USE_DLOPEN) && !defined (_WIN32)
+#elif defined(_WIN32)
+ HMODULE module;
+#else
 char dummy;
 #endif
 };
 
-#ifdef _WIN32
-struct dirent {
- long d_ino; /* inode (always 1 in WIN32) */
- off_t d_off; /* offset to this dirent */
- unsigned short d_reclen; /* length of d_name */
- char d_name_MAX_FNAME+1; /* filename (null terminated) */
-};
-
-typedef struct {
- intptr_t handle; /* _findfirst/_findnext handle */
- short offset; /* offset into directory */
- short finished; /* 1 if there are not more files */
- struct _finddata_t fileinfo;/* from _findfirst/_findnext */
- char *dir; /* the dir we are reading */
- struct dirent dent; /* the dirent to return */
-} DIR;
+#if defined(USE_DLOPEN)
 
-DIR * opendir(const char *dir)
+static long
+open_plugin_dlfcn(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
 {
- DIR *dp;
- char *filespec;
- intptr_t handle;
- int index;
-
- filespec = malloc(strlen(dir) + 2 + 1);
- strcpy(filespec, dir);
- index = strlen(filespec) - 1;
- if (index >= 0 && (filespecindex == '/' || filespecindex == '\\'))
- filespecindex = '\0';
- strcat(filespec, "/*");
-
- dp = (DIR *)malloc(sizeof(DIR));
- dp->offset = 0;
- dp->finished = 0;
- dp->dir = strdup(dir);
-
- if ((handle = _findfirst(filespec, &(dp->fileinfo))) < 0) {
- if (errno == ENOENT)
- dp->finished = 1;
- else {
- free(filespec);
- free(dp->dir);
- free(dp);
- return NULL;
- }
+ const char *e;
+
+ h->dlhandle = dlopen(filename, PLUGIN_DLOPEN_FLAGS);
+ if (h->dlhandle == NULL) {
+ e = dlerror();
+ if (e == NULL)
+ e = _("unknown failure");
+ Tprintf("dlopen(%s): %s\n", filename, e);
+ k5_set_error(ep, ENOENT, _("unable to load plugin %s: %s"),
+ filename, e);
+ return ENOENT;
 }
-
- dp->handle = handle;
- free(filespec);
-
- return dp;
+ return 0;
 }
+#define open_plugin open_plugin_dlfcn
 
-struct dirent * readdir(DIR *dp)
+static long
+get_sym_dlfcn(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
 {
- if (!dp || dp->finished) return NULL;
-
- if (dp->offset != 0) {
- if (_findnext(dp->handle, &(dp->fileinfo)) < 0) {
- dp->finished = 1;
- return NULL;
- }
+ const char *e;
+
+ if (h->dlhandle == NULL)
+ return ENOENT;
+ *sym_out = dlsym(h->dlhandle, csymname);
+ if (*sym_out == NULL) {
+ e = dlerror();
+ if (e == NULL)
+ e = _("unknown failure");
+ Tprintf("dlsym(%s): %s\n", csymname, e);
+ k5_set_error(ep, ENOENT, "%s", e);
+ return ENOENT;
 }
- dp->offset++;
-
- strncpy(dp->dent.d_name, dp->fileinfo.name, _MAX_FNAME);
- dp->dent.d_ino = 1;
- dp->dent.d_reclen = (unsigned short)strlen(dp->dent.d_name);
- dp->dent.d_off = dp->offset;
-
- return &(dp->dent);
-}
-
-int closedir(DIR *dp)
-{
- if (!dp) return 0;
- _findclose(dp->handle);
- free(dp->dir);
- free(dp);
-
 return 0;
 }
-#endif
+#define get_sym get_sym_dlfcn
 
-long KRB5_CALLCONV
-krb5int_open_plugin (const char *filepath, struct plugin_file_handle **h, struct errinfo *ep)
+static void
+close_plugin_dlfcn(struct plugin_file_handle *h)
 {
- long err = 0;
- struct plugin_file_handle *htmp = NULL;
- int got_plugin = 0;
-#if defined(USE_CFBUNDLE) || defined(_WIN32)
- struct stat statbuf;
-
- if (!err) {
- if (stat (filepath, &statbuf) < 0) {
- err = errno;
- Tprintf ("stat(%s): %s\n", filepath, strerror (err));
- k5_set_error(ep, err, _("unable to find plugin %s: %s"),
- filepath, strerror(err));
- }
- }
-#endif
-
- if (!err) {
- htmp = calloc (1, sizeof (*htmp)); /* calloc initializes ptrs to NULL */
- if (htmp == NULL) { err = ENOMEM; }
- }
-
-#if USE_DLOPEN
- if (!err
-#if USE_CFBUNDLE
- && ((statbuf.st_mode & S_IFMT) == S_IFREG
- || (statbuf.st_mode & S_IFMT) == S_IFDIR)
-#endif /* USE_CFBUNDLE */
- ) {
- void *handle = NULL;
-
-#if USE_CFBUNDLE
- char executablepathMAXPATHLEN;
-
- if ((statbuf.st_mode & S_IFMT) == S_IFDIR) {
- int lock_err = 0;
- CFStringRef pluginString = NULL;
- CFURLRef pluginURL = NULL;
- CFBundleRef pluginBundle = NULL;
- CFURLRef executableURL = NULL;
-
- /* Lock around CoreFoundation calls since objects are refcounted
- * and the refcounts are not thread-safe. Using pthreads directly
- * because this code is Mac-specific */
- lock_err = pthread_mutex_lock(&krb5int_bundle_mutex);
- if (lock_err) { err = lock_err; }
-
- if (!err) {
- pluginString = CFStringCreateWithCString (kCFAllocatorDefault,
- filepath,
- kCFStringEncodingASCII);
- if (pluginString == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- pluginURL = CFURLCreateWithFileSystemPath (kCFAllocatorDefault,
- pluginString,
- kCFURLPOSIXPathStyle,
- true);
- if (pluginURL == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- pluginBundle = CFBundleCreate (kCFAllocatorDefault, pluginURL);
- if (pluginBundle == NULL) { err = ENOENT; } /* XXX need better error */
- }
-
- if (!err) {
- executableURL = CFBundleCopyExecutableURL (pluginBundle);
- if (executableURL == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- if (!CFURLGetFileSystemRepresentation (executableURL,
- true, /* absolute */
- (UInt8 *)executablepath,
- sizeof (executablepath))) {
- err = ENOMEM;
- }
- }
-
- if (!err) {
- /* override the path the caller passed in */
- filepath = executablepath;
- }
-
- if (executableURL != NULL) { CFRelease (executableURL); }
- if (pluginBundle != NULL) { CFRelease (pluginBundle); }
- if (pluginURL != NULL) { CFRelease (pluginURL); }
- if (pluginString != NULL) { CFRelease (pluginString); }
-
- /* unlock after CFRelease calls since they modify refcounts */
- if (!lock_err) { pthread_mutex_unlock (&krb5int_bundle_mutex); }
- }
-#endif /* USE_CFBUNDLE */
-
- if (!err) {
- handle = dlopen(filepath, PLUGIN_DLOPEN_FLAGS);
- if (handle == NULL) {
- const char *e = dlerror();
- if (e == NULL)
- e = _("unknown failure");
- Tprintf ("dlopen(%s): %s\n", filepath, e);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, _("unable to load plugin %s: %s"),
- filepath, e);
- }
- }
+ if (h->dlhandle != NULL)
+ dlclose(h->dlhandle);
+}
+#define close_plugin close_plugin_dlfcn
 
- if (!err) {
- got_plugin = 1;
- htmp->dlhandle = handle;
- handle = NULL;
- }
+#elif defined(_WIN32)
 
- if (handle != NULL) { dlclose (handle); }
+static long
+open_plugin_win32(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
+{
+ h->module = LoadLibrary(filename);
+ if (h == NULL) {
+ Tprintf("Unable to load dll: %s\n", filename);
+ k5_set_error(ep, ENOENT, _("unable to load DLL %s"), filename);
+ return ENOENT;
 }
-#endif /* USE_DLOPEN */
-
-#ifdef _WIN32
- if (!err && (statbuf.st_mode & S_IFMT) == S_IFREG) {
- HMODULE handle = NULL;
+ return 0;
+}
+#define open_plugin open_plugin_win32
 
- handle = LoadLibrary(filepath);
- if (handle == NULL) {
- Tprintf ("Unable to load dll: %s\n", filepath);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, _("unable to load DLL %s"), filepath);
- }
+static long
+get_sym_win32(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
+{
+ LPVOID lpMsgBuf;
+ DWORD dw;
 
- if (!err) {
- got_plugin = 1;
- htmp->hinstPlugin = handle;
- handle = NULL;
+ if (h->module == NULL)
+ return ENOENT;
+ *sym_out = GetProcAddress(h->module, csymname);
+ if (*sym_out == NULL) {
+ Tprintf("GetProcAddress(%s): %i\n", csymname, GetLastError());
+ dw = GetLastError();
+ if (FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER |
+ FORMAT_MESSAGE_FROM_SYSTEM,
+ NULL, dw, MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
+ (LPTSTR)&lpMsgBuf, 0, NULL)) {
+ k5_set_error(ep, ENOENT, _("unable to get DLL Symbol: %s"),
+ (char *)lpMsgBuf);
+ LocalFree(lpMsgBuf);
 }
-
- if (handle != NULL)
- FreeLibrary(handle);
- }
-#endif
-
- if (!err && !got_plugin) {
- err = ENOENT; /* no plugin or no way to load plugins */
- k5_set_error(ep, err, _("plugin unavailable: %s"), strerror(err));
+ return ENOENT;
 }
+ return 0;
+}
+#define get_sym get_sym_win32
 
- if (!err) {
- *h = htmp;
- htmp = NULL; /* h takes ownership */
- }
+static void
+close_plugin_win32(struct plugin_file_handle *h)
+{
+ if (h->module != NULL)
+ FreeLibrary(h->module);
+}
+#define close_plugin close_plugin_win32
 
- free(htmp);
+#else
 
- return err;
+static long
+open_plugin_dummy(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
+{
+ k5_set_error(ep, ENOENT, _("plugin loading unavailable"));
+ return ENOENT;
 }
+#define open_plugin open_plugin_dummy
 
 static long
-krb5int_get_plugin_sym (struct plugin_file_handle *h,
- const char *csymname, int isfunc, void **ptr,
- struct errinfo *ep)
+get_sym_dummy(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
 {
- long err = 0;
- void *sym = NULL;
+ return ENOENT;
+}
+#define get_sym get_sym_dummy
+
+static void
+close_plugin_dummy(struct plugin_file_handle *h)
+{
+}
+#define close_plugin close_plugin_dummy
 
-#if USE_DLOPEN
- if (!err && !sym && (h->dlhandle != NULL)) {
- /* XXX Do we need to add a leading "_" to the symbol name on any
- modern platforms? */
- sym = dlsym (h->dlhandle, csymname);
- if (sym == NULL) {
- const char *e = dlerror (); /* XXX copy and save away */
- if (e == NULL)
- e = "unknown failure";
- Tprintf ("dlsym(%s): %s\n", csymname, e);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, "%s", e);
- }
- }
 #endif
 
-#ifdef _WIN32
- LPVOID lpMsgBuf;
- DWORD dw;
+long KRB5_CALLCONV
+krb5int_open_plugin(const char *filename,
+ struct plugin_file_handle **handle_out, struct errinfo *ep)
+{
+ long ret;
+ struct plugin_file_handle *h;
 
- if (!err && !sym && (h->hinstPlugin != NULL)) {
- sym = GetProcAddress(h->hinstPlugin, csymname);
- if (sym == NULL) {
- const char *e = "unable to get dll symbol"; /* XXX copy and save away */
- Tprintf ("GetProcAddress(%s): %i\n", csymname, GetLastError());
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, "%s", e);
-
- dw = GetLastError();
- if (FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER |
- FORMAT_MESSAGE_FROM_SYSTEM,
- NULL,
- dw,
- MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
- (LPTSTR) &lpMsgBuf,
- 0, NULL )) {
-
- fprintf (stderr, "unable to get dll symbol, %s\n", (LPCTSTR)lpMsgBuf);
- LocalFree(lpMsgBuf);
- }
- }
- }
-#endif
+ *handle_out = NULL;
 
- if (!err && (sym == NULL)) {
- err = ENOENT; /* unimplemented */
- }
+ h = calloc(1, sizeof(*h));
+ if (h == NULL)
+ return ENOMEM;
 
- if (!err) {
- *ptr = sym;
+ ret = open_plugin(h, filename, ep);
+ if (ret) {
+ free(h);
+ return ret;
 }
 
- return err;
+ *handle_out = h;
+ return 0;
 }
 
 long KRB5_CALLCONV
-krb5int_get_plugin_data (struct plugin_file_handle *h, const char *csymname,
- void **ptr, struct errinfo *ep)
+krb5int_get_plugin_data(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
 {
- return krb5int_get_plugin_sym (h, csymname, 0, ptr, ep);
+ return get_sym(h, csymname, sym_out, ep);
 }
 
 long KRB5_CALLCONV
-krb5int_get_plugin_func (struct plugin_file_handle *h, const char *csymname,
- void (**ptr)(), struct errinfo *ep)
+krb5int_get_plugin_func(struct plugin_file_handle *h, const char *csymname,
+ void (**sym_out)(), struct errinfo *ep)
 {
 void *dptr = NULL;
- long err = krb5int_get_plugin_sym (h, csymname, 1, &dptr, ep);
- if (!err) {
- /* Cast function pointers to avoid code duplication */
- *ptr = (void (*)()) dptr;
- }
- return err;
+ long ret = get_sym(h, csymname, &dptr, ep);
+
+ if (!ret)
+ *sym_out = (void (*)())dptr;
+ return ret;
 }
 
 void KRB5_CALLCONV
 krb5int_close_plugin (struct plugin_file_handle *h)
 {
-#if USE_DLOPEN
- if (h->dlhandle != NULL) { dlclose(h->dlhandle); }
-#endif
-#ifdef _WIN32
- if (h->hinstPlugin != NULL) { FreeLibrary(h->hinstPlugin); }
-#endif
- free (h);
+ close_plugin(h);
+ free(h);
 }
 
-/* autoconf docs suggest using this preference order */
-#if HAVE_DIRENT_H || USE_DIRENT_H
-#include <dirent.h>
-#define NAMELEN(D) strlen((D)->d_name)
-#else
-#ifndef _WIN32
-#define dirent direct
-#define NAMELEN(D) ((D)->d->namlen)
-#else
-#define NAMELEN(D) strlen((D)->d_name)
-#endif
-#if HAVE_SYS_NDIR_H
-# include <sys/ndir.h>
-#elif HAVE_SYS_DIR_H
-# include <sys/dir.h>
-#elif HAVE_NDIR_H
-# include <ndir.h>
-#endif
-#endif
-
 static long
 krb5int_plugin_file_handle_array_init (struct plugin_file_handle ***harray)
 {
@@ -619,42 +418,36 @@
 if (handle != NULL) { krb5int_close_plugin (handle); }
 }
 } else {
- /* load all plugins in each directory */
- DIR *dir = opendir (dirnamesi);
+ char **fnames = NULL;
+ int j;
 
- while (dir != NULL && !err) {
- struct dirent *d = NULL;
+ err = k5_dir_filenames(dirnamesi, &fnames);
+ for (j = 0; !err && fnamesj != NULL; j++) {
 char *filepath = NULL;
 struct plugin_file_handle *handle = NULL;
 
- d = readdir (dir);
- if (d == NULL) { break; }
-
- if ((strcmp (d->d_name, ".") == 0) ||
- (strcmp (d->d_name, "..") == 0)) {
+ if (strcmp(fnamesj, ".") == 0 ||
+ strcmp(fnamesj, "..") == 0)
 continue;
- }
 
- if (!err) {
- int len = NAMELEN (d);
- if (asprintf(&filepath, "%s/%*s", dirnamesi, len, d->d_name) < 0) {
- filepath = NULL;
- err = ENOMEM;
- }
+ if (asprintf(&filepath, "%s/%s", dirnamesi, fnamesj) < 0) {
+ filepath = NULL;
+ err = ENOMEM;
 }
 
- if (!err) {
- if (krb5int_open_plugin (filepath, &handle, ep) == 0) {
- err = krb5int_plugin_file_handle_array_add (&h, &count, handle);
- if (!err) { handle = NULL; } /* h takes ownership */
- }
+ if (!err && krb5int_open_plugin(filepath, &handle, ep) == 0) {
+ err = krb5int_plugin_file_handle_array_add(&h, &count,
+ handle);
+ if (!err)
+ handle = NULL; /* h takes ownership */
 }
 
 free(filepath);
- if (handle != NULL) { krb5int_close_plugin (handle); }
+ if (handle != NULL)
+ krb5int_close_plugin(handle);
 }
 
- if (dir != NULL) { closedir (dir); }
+ k5_free_filenames(fnames);
 }
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/t_k5buf.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/t_k5buf.c Changed

@@ -50,7 +50,6 @@
     } else {
         fail_if(buf->space == 0, name);
         fail_if(buf->len >= buf->space, name);
-        fail_if(((char *)buf->data)buf->len != 0, name);
     }
 }
 
@@ -65,14 +64,14 @@
     k5_buf_add_len(&buf, "world", 5);
     check_buf(&buf, "basic fixed");
     fail_if(buf.data == NULL || buf.len != 11, "basic fixed");
-    fail_if(strcmp(buf.data, "Hello world") != 0, "basic fixed");
+    fail_if(memcmp(buf.data, "Hello world", 11) != 0, "basic fixed");
 
     k5_buf_init_dynamic(&buf);
     k5_buf_add_len(&buf, "Hello", 5);
     k5_buf_add(&buf, " world");
     check_buf(&buf, "basic dynamic");
     fail_if(buf.data == NULL || buf.len != 11, "basic dynamic");
-    fail_if(strcmp(buf.data, "Hello world") != 0, "basic dynamic");
+    fail_if(memcmp(buf.data, "Hello world", 11) != 0, "basic dynamic");
     k5_buf_free(&buf);
 }
 
@@ -141,7 +140,7 @@
     /* Cause a fixed-sized buffer overflow. */
     k5_buf_init_fixed(&buf, storage, sizeof(storage));
     k5_buf_add(&buf, "12345");
-    k5_buf_add(&buf, "12345");
+    k5_buf_add(&buf, "123456");
     check_buf(&buf, "overflow 1");
     fail_if(buf.buftype != K5BUF_ERROR, "overflow 1");
 
@@ -161,7 +160,7 @@
 
     /* Cause an overflow and then perform actions afterwards. */
     k5_buf_init_fixed(&buf, storage, sizeof(storage));
-    k5_buf_add(&buf, "1");
+    k5_buf_add(&buf, "12");
     fail_if(buf.buftype != K5BUF_ERROR, "error");
     check_buf(&buf, "error");
     k5_buf_add(&buf, "test");
@@ -184,7 +183,7 @@
     k5_buf_truncate(&buf, 7);
     check_buf(&buf, "truncate");
     fail_if(buf.data == NULL || buf.len != 7, "truncate");
-    fail_if(strcmp(buf.data, "abcdefg") != 0, "truncate");
+    fail_if(memcmp(buf.data, "abcdefg", 7) != 0, "truncate");
     k5_buf_free(&buf);
 }
 
@@ -222,7 +221,7 @@
     k5_buf_add_fmt(&buf, " %d ", 3);
     check_buf(&buf, "fmt 1");
     fail_if(buf.data == NULL || buf.len != 6, "fmt 1");
-    fail_if(strcmp(buf.data, "foo 3 ") != 0, "fmt 1");
+    fail_if(memcmp(buf.data, "foo 3 ", 6) != 0, "fmt 1");
 
     /* Overflow the same buffer with formatted text. */
     k5_buf_add_fmt(&buf, "%d%d%d%d", 1, 2, 3, 4);
@@ -235,14 +234,14 @@
     k5_buf_add_fmt(&buf, " %d ", 3);
     check_buf(&buf, "fmt 3");
     fail_if(buf.data == NULL || buf.len != 6, "fmt 3");
-    fail_if(strcmp(buf.data, "foo 3 ") != 0, "fmt 3");
+    fail_if(memcmp(buf.data, "foo 3 ", 6) != 0, "fmt 3");
 
     /* Format more text into the same buffer, causing a big resize. */
     k5_buf_add_fmt(&buf, "%s", data);
     check_buf(&buf, "fmt 4");
     fail_if(buf.space != 2048, "fmt 4");
     fail_if(buf.data == NULL || buf.len != 1029, "fmt 4");
-    fail_if(strcmp((char *)buf.data + 6, data) != 0, "fmt 4");
+    fail_if(memcmp((char *)buf.data + 6, data, 1023) != 0, "fmt 4");
     k5_buf_free(&buf);
 }

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/t_utf8.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/t_utf8.c Changed

@@ -49,13 +49,13 @@
 #endif
 
 /*
- * len is 0 for invalid encoding prefixes (krb5int_utf8_charlen2() partially
+ * len is 0 for invalid encoding prefixes (KRB5_UTF8_CHARLEN2() partially
  * enforces the validity of the first two bytes, based on masking the second
  * byte.  It doesn't check whether bit 6 is 0, though, and doesn't catch the
  * range between U+110000 and U+13FFFF).
  *
  * ucs is 0 for invalid encodings (including ones with valid prefixes according
- * to krb5int_utf8_charlen2(); krb5int_utf8_to_ucs4() will still fail on them
+ * to KRB5_UTF8_CHARLEN2(); krb5int_utf8_to_ucs4() will still fail on them
  * because it checks more things.)  Code points above U+10FFFF are excluded by
  * the actual test code and remain in the table for possibly testing the old
  * implementation that didn't exclude them.
@@ -129,7 +129,7 @@
     int len, status = 0;
     krb5_ucs4 u = 0;
 
-    len = krb5int_utf8_charlen2(t->p);
+    len = KRB5_UTF8_CHARLEN2(t->p, len);
     if (len != t->len) {
         printf("expected len=%d, got len=%d\n", t->len, len);
         status = 1;

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/utf8.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/utf8.c Changed

@@ -53,50 +53,6 @@
 #include "supp-int.h"
 
 /*
- * return the number of bytes required to hold the
- * NULL-terminated UTF-8 string NOT INCLUDING the
- * termination.
- */
-size_t krb5int_utf8_bytes(const char *p)
-{
- size_t bytes;
-
- for (bytes = 0; pbytes; bytes++)
- ;
-
- return bytes;
-}
-
-size_t krb5int_utf8_chars(const char *p)
-{
- /* could be optimized and could check for invalid sequences */
- size_t chars = 0;
-
- for ( ; *p ; KRB5_UTF8_INCR(p))
- chars++;
-
- return chars;
-}
-
-size_t krb5int_utf8c_chars(const char *p, size_t length)
-{
- /* could be optimized and could check for invalid sequences */
- size_t chars = 0;
- const char *end = p + length;
-
- for ( ; p < end; KRB5_UTF8_INCR(p))
- chars++;
-
- return chars;
-}
-
-/* return offset to next character */
-int krb5int_utf8_offset(const char *p)
-{
- return KRB5_UTF8_NEXT(p) - p;
-}
-
-/*
 * Returns length indicated by first byte.
 */
 const char krb5int_utf8_lentab = {
@@ -109,14 +65,6 @@
 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3,
 4, 4, 4, 4, 4, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
 
-int krb5int_utf8_charlen(const char *p)
-{
- if (!(*p & 0x80))
- return 1;
-
- return krb5int_utf8_lentab*(const unsigned char *)p ^ 0x80;
-}
-
 /*
 * Make sure the UTF-8 char used the shortest possible encoding
 * returns charlen if valid, 0 if not.
@@ -147,18 +95,6 @@
 (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00 };
 #undef c
 
-int krb5int_utf8_charlen2(const char *p)
-{
- int i = KRB5_UTF8_CHARLEN(p);
-
- if (i > 2) {
- if (!(krb5int_utf8_mintab*p & 0x1f & p1))
- i = 0;
- }
-
- return i;
-}
-
 /*
 * Convert a UTF8 character to a UCS4 character. Return 0 on success,
 * -1 on failure.
@@ -194,17 +130,6 @@
 return 0;
 }
 
-int krb5int_utf8_to_ucs2(const char *p, krb5_ucs2 *out)
-{
- krb5_ucs4 ch;
-
- *out = 0;
- if (krb5int_utf8_to_ucs4(p, &ch) == -1 || ch > 0xFFFF)
- return -1;
- *out = (krb5_ucs2) ch;
- return 0;
-}
-
 /* conv UCS-4 to UTF-8 */
 size_t krb5int_ucs4_to_utf8(krb5_ucs4 c, char *buf)
 {
@@ -241,271 +166,3 @@
 
 return len;
 }
-
-size_t krb5int_ucs2_to_utf8(krb5_ucs2 c, char *buf)
-{
- return krb5int_ucs4_to_utf8((krb5_ucs4)c, buf);
-}
-
-/*
- * Advance to the next UTF-8 character
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-char *krb5int_utf8_next(const char *p)
-{
- int i;
- const unsigned char *u = (const unsigned char *) p;
-
- if (KRB5_UTF8_ISASCII(u)) {
- return (char *) &p1;
- }
-
- for (i = 1; i < 6; i++) {
- if ((ui & 0xc0) != 0x80) {
- return (char *) &pi;
- }
- }
-
- return (char *) &pi;
-}
-
-/*
- * Advance to the previous UTF-8 character
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-char *krb5int_utf8_prev(const char *p)
-{
- int i;
- const unsigned char *u = (const unsigned char *) p;
-
- for (i = -1; i>-6 ; i--) {
- if ((ui & 0xc0 ) != 0x80) {
- return (char *) &pi;
- }
- }
-
- return (char *) &pi;
-}
-
-/*
- * Copy one UTF-8 character from src to dst returning
- * number of bytes copied.
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-int krb5int_utf8_copy(char* dst, const char *src)
-{
- int i;
- const unsigned char *u = (const unsigned char *) src;
-
- dst0 = src0;
-
- if (KRB5_UTF8_ISASCII(u)) {
- return 1;
- }
-
- for (i=1; i<6; i++) {
- if ((ui & 0xc0) != 0x80) {
- return i;
- }
- dsti = srci;
- }
-
- return i;
-}
-
-#ifndef UTF8_ALPHA_CTYPE
-/*
- * UTF-8 ctype routines
- * Only deals with characters < 0x80 (ie: US-ASCII)
- */
-
-int krb5int_utf8_isascii(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- return KRB5_ASCII(c);
-}
-
-int krb5int_utf8_isdigit(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_DIGIT( c );
-}
-
-int krb5int_utf8_isxdigit(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_HEX(c);
-}
-
-int krb5int_utf8_isspace(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- switch(c) {
- case ' ':
- case '\t':
- case '\n':
- case '\r':
- case '\v':
- case '\f':
- return 1;
- }
-
- return 0;
-}
-
-/*
- * These are not needed by the C SDK and are
- * not "good enough" for general use.
- */
-int krb5int_utf8_isalpha(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_ALPHA(c);
-}
-
-int krb5int_utf8_isalnum(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_ALNUM(c);
-}
-#endif
-
-
-/*
- * UTF-8 string routines
- */
-
-/* like strchr() */
-char *krb5int_utf8_strchr(const char *str, const char *chr)
-{
- krb5_ucs4 chs, ch;
-
- if (krb5int_utf8_to_ucs4(chr, &ch) == -1)
- return NULL;
- for ( ; *str != '\0'; KRB5_UTF8_INCR(str)) {
- if (krb5int_utf8_to_ucs4(str, &chs) == 0 && chs == ch)
- return (char *)str;
- }
-
- return NULL;
-}
-
-/* like strcspn() but returns number of bytes, not characters */
-size_t krb5int_utf8_strcspn(const char *str, const char *set)
-{
- const char *cstr, *cset;
- krb5_ucs4 chstr, chset;
-
- for (cstr = str; *cstr != '\0'; KRB5_UTF8_INCR(cstr)) {
- for (cset = set; *cset != '\0'; KRB5_UTF8_INCR(cset)) {
- if (krb5int_utf8_to_ucs4(cstr, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- return cstr - str;
- }
- }
-
- return cstr - str;
-}
-
-/* like strspn() but returns number of bytes, not characters */
-size_t krb5int_utf8_strspn(const char *str, const char *set)
-{
- const char *cstr, *cset;
- krb5_ucs4 chstr, chset;
-
- for (cstr = str; *cstr != '\0'; KRB5_UTF8_INCR(cstr)) {
- for (cset = set; ; KRB5_UTF8_INCR(cset)) {
- if (*cset == '\0')
- return cstr - str;
- if (krb5int_utf8_to_ucs4(cstr, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- break;
- }
- }
-
- return cstr - str;
-}
-
-/* like strpbrk(), replaces strchr() as well */
-char *krb5int_utf8_strpbrk(const char *str, const char *set)
-{
- const char *cset;
- krb5_ucs4 chstr, chset;
-
- for ( ; *str != '\0'; KRB5_UTF8_INCR(str)) {
- for (cset = set; *cset != '\0'; KRB5_UTF8_INCR(cset)) {
- if (krb5int_utf8_to_ucs4(str, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- return (char *)str;
- }
- }
-
- return NULL;
-}
-
-/* like strtok_r(), not strtok() */
-char *krb5int_utf8_strtok(char *str, const char *sep, char **last)
-{
- char *begin;
- char *end;
-
- if (last == NULL)
- return NULL;
-
- begin = str ? str : *last;
-
- begin += krb5int_utf8_strspn(begin, sep);
-
- if (*begin == '\0') {
- *last = NULL;
- return NULL;
- }
-
- end = &beginkrb5int_utf8_strcspn(begin, sep);
-
- if (*end != '\0') {
- char *next = KRB5_UTF8_NEXT(end);
- *end = '\0';
- end = next;
- }
-
- *last = end;
-
- return begin;
-}

_service:tar_scm:krb5-1.20.1.tar.gz/src/util/support/utf8_conv.c -> _service:tar_scm:krb5-1.21.1.tar.gz/src/util/support/utf8_conv.c Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/windows/installer/wix/config.wxi -> _service:tar_scm:krb5-1.21.1.tar.gz/src/windows/installer/wix/config.wxi Changed

_service:tar_scm:krb5-1.20.1.tar.gz/src/windows/version.rc -> _service:tar_scm:krb5-1.21.1.tar.gz/src/windows/version.rc Changed

Changes of Revision 9