From nobody Tue Jan 20 13:41:47 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dwT5F0KBNz6Pb9s for ; Tue, 20 Jan 2026 13:41:53 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dwT5D6vCRz3nBn for ; Tue, 20 Jan 2026 13:41:52 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768916513; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=qRXd5yd/hCeHvlh2VaP9QMrlzyOvyIy0QBbst31s0X8=; b=Ui+S4JIdbOxTg4IjkgC4gusdzclRPpEuz8YnDsFe0frPfYAk1HBJ5DzrOeXDd6xlxgsb5w 0COmkG2OI36oW2KkJT51LqyzptVE4dSiBZgXTutf4pvehnA1kssgVVHboL8jGjH2Goz1pd iLNYqZnEhtAIPUxfHvLIJbaGMZKY6HLFWG5GWh9SqYqT418uZg3F2cUdfbOeOw9H/Rwen3 9am679SDlxGfuW+mZNccwwvmQy3BIJIiDzL6G57pW4tGyFUgAM3DiWn/ZROID17jnFPc/K 5VvDzE7pMDqvW9RVI5JYAiQ/Jd+Guk0Z98BGEWIX+E/LV93TnM5+r0ieogqdvQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768916512; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=qRXd5yd/hCeHvlh2VaP9QMrlzyOvyIy0QBbst31s0X8=; b=C+X2QCek9SXncmYa/F5lKBMoYSPJuFVEoFr4lbaaBLdsReQrOGM83Hm5RY89YOegqaeA5Z nQcrz0QxwqUAnxOZqV/MJcTIAf9CV3ilvOt2MICCw2kI73M4CACM6qliNo0FGm0UsjkfZC ydZF4FI2+caBPo6244T73jQ21rBWubT5Mf45maUEVZcEdvT/05ds9x29PvVNpILV7hijN/ b4kfIwIZlnTfRGjLfIhIpHpoT9KWXtM21BWma0vYzbtzntUMbD1Aln8r8q8TMiv1gYvf05 JjLV/jWCunufCJnkdvdY3GhC5898+MjDE9yrEvGrfJTtWv0jEi6DHJY5s1xsyA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768916512; a=rsa-sha256; cv=none; b=yI/Gj0h0cz1C2sQtBB9NxMNLOTNCmxZFBI8as4WKtw3m0Kmxogzu3TQmDK+kVpNJGyDv10 L8W6eY1zL0860dGABfyliJBK/fegEctQhzljlUCyEajNL5BuG5mABKap/SB1QPDOiUa10G PR4v4UByQeMPX5Pi/SD0pVXWJv/zxp6qL5uY8TOgtVHy1iVy+T1YcuXSltdsXMbLvkgS5f d5kRgTRgvOd8sHEKLPifqHHRObTs56PqxsJulpCBEyf5bu/Me+wiN4P2Qhm8fl8n07CF6w KZ3uNKpG/oi43jecQkIci20f7AzfZbZ9S8AMMvItsjkm4aGIvoSaiOAfGGpAhw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dwT5D6Rp5z1JNP for ; Tue, 20 Jan 2026 13:41:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 89b7 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 20 Jan 2026 13:41:47 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Cy Schubert Subject: git: 1876de606eb8 - main - krb5: Expose missing symbols List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: cy X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 1876de606eb876b7a97beccfe6fcc89e60a72a25 Auto-Submitted: auto-generated Date: Tue, 20 Jan 2026 13:41:47 +0000 Message-Id: <696f861b.89b7.312a8d05@gitrepo.freebsd.org> The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/src/commit/?id=1876de606eb876b7a97beccfe6fcc89e60a72a25 commit 1876de606eb876b7a97beccfe6fcc89e60a72a25 Author: Cy Schubert AuthorDate: 2025-12-18 00:50:44 +0000 Commit: Cy Schubert CommitDate: 2026-01-20 13:41:02 +0000 krb5: Expose missing symbols Add symbols found in the port but not in base. This requires replacing a shared libkrb5profile.so with libkrb5profile.a (with -fPIC so it can be used by shared libraries). We do this by making libkrb5profile INTERNALLIB. Base currently has libkrb5profile in a shared library. The patch moves those functions to the various "consumer" libraries as the port does. Symbols that should be in the other libraries are in libkrb5profile.so. This is causing some ports issues. PR: 291695 Reported by: michaelo, markj, Chris Inacio Tested by: michaelo Fixes: ae07a5805b19 Reviewed by: michaelo (previous version) MFC after: 2 weeks Differential revision: https://reviews.freebsd.org/D54323 --- ObsoleteFiles.inc | 4 + krb5/lib/apputils/Makefile | 1 + krb5/lib/crypto/Makefile | 3 +- krb5/lib/crypto/version.map | 59 ++ krb5/lib/gssapi/Makefile | 3 +- krb5/lib/gssapi/version.map | 308 ++++++++ krb5/lib/kadm5clnt/Makefile | 3 +- krb5/lib/kadm5clnt/version.map | 36 + krb5/lib/kadm5srv/Makefile | 3 +- krb5/lib/kadm5srv/version.map | 29 + krb5/lib/kadmin_common/Makefile | 1 + krb5/lib/kdb/Makefile | 3 +- krb5/lib/kdb/version.map | 27 + krb5/lib/kprop_util/Makefile | 1 + krb5/lib/krad/Makefile | 1 + krb5/lib/krad/version.map | 11 + krb5/lib/krb5/Makefile | 5 +- krb5/lib/krb5/version.map | 1196 ++++++++++++++++++++++++++++++ krb5/lib/rpc/Makefile | 1 + krb5/lib/rpc/version.map | 28 + krb5/libexec/kadmind/Makefile | 3 +- krb5/libexec/kdc/Makefile | 1 + krb5/libexec/kprop/Makefile | 3 +- krb5/libexec/kpropd/Makefile | 3 +- krb5/libexec/kproplog/Makefile | 3 +- krb5/plugins/audit/Makefile | 1 + krb5/plugins/k5tls/Makefile | 3 +- krb5/plugins/kdb/db2/Makefile | 3 +- krb5/plugins/kdb/db2/version.map | 148 ++++ krb5/plugins/preauth/otp/Makefile | 3 +- krb5/plugins/preauth/otp/version.map | 3 + krb5/plugins/preauth/pkinit/Makefile | 3 +- krb5/plugins/preauth/pkinit/version.map | 128 ++++ krb5/plugins/preauth/spake/Makefile | 3 +- krb5/plugins/preauth/spake/version.map | 22 + krb5/plugins/preauth/test/Makefile | 3 +- krb5/plugins/preauth/test/version.map | 2 + krb5/usr.bin/gss-client/Makefile | 3 +- krb5/usr.bin/kadmin/Makefile | 3 +- krb5/usr.bin/kdestroy/Makefile | 3 +- krb5/usr.bin/kinit/Makefile | 3 +- krb5/usr.bin/klist/Makefile | 3 +- krb5/usr.bin/kpasswd/Makefile | 3 +- krb5/usr.bin/ksu/Makefile | 1 + krb5/usr.bin/kswitch/Makefile | 3 +- krb5/usr.bin/ktutil/Makefile | 3 +- krb5/usr.bin/kvno/Makefile | 3 +- krb5/usr.bin/sclient/Makefile | 3 +- krb5/usr.bin/sim_client/Makefile | 3 +- krb5/usr.sbin/gss-server/Makefile | 3 +- krb5/usr.sbin/kadmin.local/Makefile | 3 +- krb5/usr.sbin/kdb5_util/Makefile | 3 +- krb5/usr.sbin/sim_server/Makefile | 3 +- krb5/usr.sbin/sserver/Makefile | 3 +- krb5/util/et/version.map | 2 + krb5/util/profile/Makefile | 4 +- krb5/util/profile/version.map | 74 -- krb5/util/support/version.map | 5 + krb5/util/verto/version.map | 7 + lib/libpam/modules/pam_krb5/Makefile | 1 + lib/libpam/modules/pam_ksu/Makefile | 1 + share/mk/src.libnames.mk | 2 +- tools/build/depend-cleanup.sh | 9 + tools/build/mk/OptionalObsoleteFiles.inc | 2 - 64 files changed, 2103 insertions(+), 111 deletions(-) diff --git a/ObsoleteFiles.inc b/ObsoleteFiles.inc index 8f44feb757e5..5231cbb3fe13 100644 --- a/ObsoleteFiles.inc +++ b/ObsoleteFiles.inc @@ -51,6 +51,10 @@ # xargs -n1 | sort | uniq -d; # done +# 20260120: Made libkrb5profile INTERNALLIB +OLD_LIBS+=usr/lib/libkrb5profile.so.122 +OLD_FILES+=usr/lib/libkrb5profile.so + # 20260114: remove ncurses html documentation OLD_FILES+=usr/share/doc/ncurses/hackguide.html OLD_FILES+=usr/share/doc/ncurses/ncurses-intro.html diff --git a/krb5/lib/apputils/Makefile b/krb5/lib/apputils/Makefile index 1a79b3800863..38491579a619 100644 --- a/krb5/lib/apputils/Makefile +++ b/krb5/lib/apputils/Makefile @@ -22,6 +22,7 @@ SRCS= net-server.c \ CFLAGS+=-I${KRB5_DIR}/lib/apputils \ -I${KRB5_DIR}/include \ -I${KRB5_SRCTOP}/include \ + -I${KRB5_OBJTOP}/util/profile \ -I${.OBJDIR} .include diff --git a/krb5/lib/crypto/Makefile b/krb5/lib/crypto/Makefile index 9521b48f020c..a130a858cfa4 100644 --- a/krb5/lib/crypto/Makefile +++ b/krb5/lib/crypto/Makefile @@ -41,6 +41,7 @@ CFLAGS+=-I${.CURDIR:H:H}/include \ -I${KRB5_DIR}/lib/crypto/builtin/md5 \ -I${KRB5_DIR}/lib/crypto/builtin/sha1 \ -I${KRB5_DIR}/lib/crypto/builtin/sha2 \ - -I${SRCTOP}/crypto/openssl/include + -I${SRCTOP}/crypto/openssl/include \ + -I${KRB5_OBJTOP}/util/profile .include diff --git a/krb5/lib/crypto/version.map b/krb5/lib/crypto/version.map index 702abf195db0..4cb528537201 100644 --- a/krb5/lib/crypto/version.map +++ b/krb5/lib/crypto/version.map @@ -106,5 +106,64 @@ k5crypto_3_MIT { k5_enctype_to_ssf; krb5int_c_deprecated_enctype; krb5_c_checksum_length; + k5_derive_random_rfc3961; + k5_des_fixup_key_parity; + k5_iov_cursor_get; + k5_iov_cursor_init; + k5_iov_cursor_put; + k5_rand2key_des3; + k5_rand2key_direct; + k5_sp800_108_counter_hmac; + k5_sp800_108_feedback_cmac; + krb5_decrypt_data; + krb5_random_confounder; + krb5int_MD4Final; + krb5int_MD4Init; + krb5int_MD4Update; + krb5int_aes2_crypto_length; + krb5int_aes2_prf; + krb5int_aes2_string_to_key; + krb5int_aes_crypto_length; + krb5int_aes_string_to_key; + krb5int_arcfour_crypto_length; + krb5int_arcfour_decrypt; + krb5int_arcfour_encrypt; + krb5int_arcfour_prf; + krb5int_arcfour_string_to_key; + krb5int_arcfour_translate_usage; + krb5int_c_iov_decrypt_stream; + krb5int_c_locate_iov; + krb5int_c_padding_length; + krb5int_camellia_crypto_length; + krb5int_camellia_string_to_key; + krb5int_cksumtypes_list; + krb5int_default_free_state; + krb5int_derive_keyblock; + krb5int_des_init_state; + krb5int_des_prf; + krb5int_dk_checksum; + krb5int_dk_cmac_checksum; + krb5int_dk_cmac_decrypt; + krb5int_dk_cmac_encrypt; + krb5int_dk_cmac_prf; + krb5int_dk_crypto_length; + krb5int_dk_decrypt; + krb5int_dk_encrypt; + krb5int_dk_prf; + krb5int_dk_string_to_key; + krb5int_enctypes_list; + krb5int_etm_checksum; + krb5int_etm_decrypt; + krb5int_etm_encrypt; + krb5int_hash_sha1; + krb5int_hmac_keyblock; + krb5int_hmacmd5_checksum; + krb5int_pbkdf2_hmac; + krb5int_raw_crypto_length; + krb5int_raw_decrypt; + krb5int_raw_encrypt; + krb5int_unkeyed_checksum; + mit_des_fixup_key_parity; + unsupported_etypes; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/gssapi/Makefile b/krb5/lib/gssapi/Makefile index a434b29a2dfb..eca8dd6ffde9 100644 --- a/krb5/lib/gssapi/Makefile +++ b/krb5/lib/gssapi/Makefile @@ -43,7 +43,8 @@ CFLAGS+=${DEFINES} \ -I${KRB5_OBJTOP}/lib/gssapi \ -I${KRB5_OBJTOP}/lib \ -I${KRB5_DIR}/include \ - -I${KRB5_SRCTOP}/include + -I${KRB5_SRCTOP}/include \ + -I${KRB5_OBJTOP}/util/profile .include diff --git a/krb5/lib/gssapi/version.map b/krb5/lib/gssapi/version.map index 42f32cc55edf..e6358e8226fe 100644 --- a/krb5/lib/gssapi/version.map +++ b/krb5/lib/gssapi/version.map @@ -172,5 +172,313 @@ gssapi_krb5_2_MIT { gss_add_cred_from; gss_store_cred_into; gssint_g_seqstate_init; + GSS_C_INQ_ODBC_SESSION_KEY; + et_ggss_error_table; + et_k5g_error_table; + generic_gss_add_buffer_set_member; + generic_gss_add_oid_set_member; + generic_gss_copy_oid; + generic_gss_copy_oid_set; + generic_gss_create_empty_buffer_set; + generic_gss_create_empty_oid_set; + generic_gss_display_mech_attr; + generic_gss_oid_compose; + generic_gss_oid_decompose; + generic_gss_oid_to_str; + generic_gss_release_buffer; + generic_gss_release_buffer_set; + generic_gss_release_oid; + generic_gss_release_oid_set; + generic_gss_str_to_oid; + generic_gss_test_oid_set_member; + gss_krb5int_ccache_name; + gss_krb5int_copy_ccache; + gss_krb5int_export_lucid_sec_context; + gss_krb5int_extract_authtime_from_sec_context; + gss_krb5int_extract_authz_data_from_sec_context; + gss_krb5int_free_lucid_sec_context; + gss_krb5int_get_cred_impersonator; + gss_krb5int_get_tkt_flags; + gss_krb5int_import_cred; + gss_krb5int_initialize_library; + gss_krb5int_inq_odbc_session_key; + gss_krb5int_inq_sspi_session_key; + gss_krb5int_lib_fini; + gss_krb5int_lib_init; + gss_krb5int_make_seal_token_v3_iov; + gss_krb5int_register_acceptor_identity; + gss_krb5int_rotate_left; + gss_krb5int_sec_context_sasl_ssf; + gss_krb5int_set_allowable_enctypes; + gss_krb5int_set_cred_rcache; + gss_krb5int_unseal_v3_iov; + gss_ma_known_attrs; + gss_mech_set_spnego; + gss_mech_spnego; + gss_spnegoint_lib_fini; + gss_spnegoint_lib_init; + gssint_convert_name_to_union_name; + gssint_create_copy_buffer; + gssint_create_union_context; + gssint_delete_internal_sec_context; + gssint_display_internal_name; + gssint_export_internal_name; + gssint_g_display_com_err_status; + gssint_g_display_major_status; + gssint_g_get_token_header; + gssint_g_make_string_buffer; + gssint_g_make_token_header; + gssint_g_seqstate_check; + gssint_g_seqstate_externalize; + gssint_g_seqstate_free; + gssint_g_seqstate_internalize; + gssint_g_seqstate_size; + gssint_g_token_size; + gssint_g_verify_token_header; + gssint_get_mech_type; + gssint_get_mechanism; + gssint_get_mechanism_cred; + gssint_get_modOptions; + gssint_get_public_oid; + gssint_import_internal_name; + gssint_krb5_keytab_lock; + gssint_make_public_oid_set; + gssint_mecherrmap_destroy; + gssint_mecherrmap_get; + gssint_mecherrmap_init; + gssint_mecherrmap_map; + gssint_mecherrmap_map_errcode; + gssint_mechglue_initialize_library; + gssint_register_mechinfo; + gssint_release_internal_name; + gssint_select_mech_type; + gssint_unwrap_aead; + gssint_wrap_aead; + gssspi_exchange_meta_data; + gssspi_query_mechanism_info; + gssspi_query_meta_data; + iakerb_gss_accept_sec_context; + iakerb_gss_acquire_cred; + iakerb_gss_acquire_cred_from; + iakerb_gss_acquire_cred_with_password; + iakerb_gss_context_time; + iakerb_gss_delete_sec_context; + iakerb_gss_export_sec_context; + iakerb_gss_get_mic; + iakerb_gss_get_mic_iov; + iakerb_gss_get_mic_iov_length; + iakerb_gss_import_name; + iakerb_gss_import_sec_context; + iakerb_gss_init_sec_context; + iakerb_gss_inquire_context; + iakerb_gss_inquire_sec_context_by_oid; + iakerb_gss_process_context_token; + iakerb_gss_pseudo_random; + iakerb_gss_set_sec_context_option; + iakerb_gss_unwrap; + iakerb_gss_unwrap_iov; + iakerb_gss_verify_mic; + iakerb_gss_verify_mic_iov; + iakerb_gss_wrap; + iakerb_gss_wrap_iov; + iakerb_gss_wrap_iov_length; + iakerb_gss_wrap_size_limit; + iakerb_make_finished; + iakerb_verify_finished; + initialize_ggss_error_table; + initialize_k5g_error_table; + kg_acceptor_princ; + kg_all_mechs; + kg_allocate_iov; + kg_arcfour_docrypt; + kg_arcfour_docrypt_iov; + kg_caller_provided_ccache_name; + kg_checksum_channel_bindings; + kg_compare_name; + kg_compose_deleg_cred; + kg_confounder_size; + kg_cred_resolve; + kg_cred_set_initial_refresh; + kg_cred_time_to_refresh; + kg_ctx_externalize; + kg_ctx_internalize; + kg_ctx_size; + kg_decrypt; + kg_decrypt_iov; + kg_duplicate_name; + kg_encrypt; + kg_encrypt_inplace; + kg_encrypt_iov; + kg_fixup_padding_iov; + kg_get_ccache_name; + kg_get_defcred; + kg_get_seq_num; + kg_init_name; + kg_integ_only_iov; + kg_iov_msglen; + kg_kdc_flag_mutex; + kg_locate_header_iov; + kg_locate_iov; + kg_make_checksum_iov_v1; + kg_make_checksum_iov_v3; + kg_make_confounder; + kg_make_seed; + kg_make_seq_num; + kg_release_iov; + kg_release_name; + kg_seal; + kg_seal_iov; + kg_seal_iov_length; + kg_set_ccache_name; + kg_setup_keys; + kg_sync_ccache_name; + kg_translate_flag_iov; + kg_unseal_iov; + kg_value_from_cred_store; + kg_verify_checksum_iov_v3; + kg_verify_checksum_v1; + kg_verify_checksum_v3; + kg_verify_mic_v1; + krb5_gss_accept_sec_context; + krb5_gss_accept_sec_context_ext; + krb5_gss_acquire_cred; + krb5_gss_acquire_cred_from; + krb5_gss_acquire_cred_impersonate_name; + krb5_gss_acquire_cred_with_password; + krb5_gss_canonicalize_name; + krb5_gss_compare_name; + krb5_gss_context_time; + krb5_gss_convert_static_mech_oid; + krb5_gss_delete_error_info; + krb5_gss_delete_name_attribute; + krb5_gss_delete_sec_context; + krb5_gss_display_name; + krb5_gss_display_status; + krb5_gss_duplicate_name; + krb5_gss_export_cred; + krb5_gss_export_name; + krb5_gss_export_name_composite; + krb5_gss_export_sec_context; + krb5_gss_get_error_message; + krb5_gss_get_mic; + krb5_gss_get_mic_iov; + krb5_gss_get_mic_iov_length; + krb5_gss_get_name_attribute; + krb5_gss_import_cred; + krb5_gss_import_name; + krb5_gss_import_sec_context; + krb5_gss_indicate_mechs; + krb5_gss_init_context; + krb5_gss_init_sec_context; + krb5_gss_init_sec_context_ext; + krb5_gss_inquire_context; + krb5_gss_inquire_cred; + krb5_gss_inquire_cred_by_mech; + krb5_gss_inquire_name; + krb5_gss_inquire_names_for_mech; + krb5_gss_inquire_sec_context_by_oid; + krb5_gss_internal_release_oid; + krb5_gss_map_name_to_any; + krb5_gss_oid_array; + krb5_gss_process_context_token; + krb5_gss_pseudo_random; + krb5_gss_release_any_name_mapping; + krb5_gss_release_cred; + krb5_gss_release_name; + krb5_gss_release_oid; + krb5_gss_save_error_info; + krb5_gss_save_error_message; + krb5_gss_save_error_string; + krb5_gss_set_name_attribute; + krb5_gss_set_sec_context_option; + krb5_gss_store_cred; + krb5_gss_store_cred_into; + krb5_gss_unwrap; + krb5_gss_unwrap_iov; + krb5_gss_validate_cred; + krb5_gss_validate_cred_1; + krb5_gss_verify_mic; + krb5_gss_verify_mic_iov; + krb5_gss_wrap; + krb5_gss_wrap_iov; + krb5_gss_wrap_iov_length; + krb5_gss_wrap_size_limit; + krb5int_gss_use_kdc_context; + negoex_accept; + negoex_add_auth_mech; + negoex_add_exchange_message; + negoex_add_nego_message; + negoex_add_verify_message; + negoex_add_verify_no_key_alert; + negoex_common_auth_schemes; + negoex_delete_auth_mech; + negoex_init; + negoex_locate_alert_message; + negoex_locate_auth_scheme; + negoex_locate_exchange_message; + negoex_locate_nego_message; + negoex_locate_verify_message; + negoex_parse_token; + negoex_prep_context_for_negoex; + negoex_prep_context_for_spnego; + negoex_random; + negoex_release_context; + negoex_restrict_auth_schemes; + negoex_select_auth_mech; + spnego_gss_accept_sec_context; + spnego_gss_acquire_cred; + spnego_gss_acquire_cred_from; + spnego_gss_acquire_cred_impersonate_name; + spnego_gss_acquire_cred_with_password; + spnego_gss_compare_name; + spnego_gss_complete_auth_token; + spnego_gss_context_time; + spnego_gss_delete_name_attribute; + spnego_gss_delete_sec_context; + spnego_gss_display_name; + spnego_gss_display_name_ext; + spnego_gss_display_status; + spnego_gss_duplicate_name; + spnego_gss_export_cred; + spnego_gss_export_name_composite; + spnego_gss_export_sec_context; + spnego_gss_get_mic; + spnego_gss_get_mic_iov; + spnego_gss_get_mic_iov_length; + spnego_gss_get_name_attribute; + spnego_gss_import_cred; + spnego_gss_import_name; + spnego_gss_import_sec_context; + spnego_gss_init_sec_context; + spnego_gss_inquire_attrs_for_mech; + spnego_gss_inquire_context; + spnego_gss_inquire_cred; + spnego_gss_inquire_cred_by_oid; + spnego_gss_inquire_mech_for_saslname; + spnego_gss_inquire_name; + spnego_gss_inquire_names_for_mech; + spnego_gss_inquire_saslname_for_mech; + spnego_gss_inquire_sec_context_by_oid; + spnego_gss_localname; + spnego_gss_map_name_to_any; + spnego_gss_process_context_token; + spnego_gss_pseudo_random; + spnego_gss_release_any_name_mapping; + spnego_gss_release_cred; + spnego_gss_release_name; + spnego_gss_set_cred_option; + spnego_gss_set_name_attribute; + spnego_gss_set_neg_mechs; + spnego_gss_set_sec_context_option; + spnego_gss_unwrap; + spnego_gss_unwrap_aead; + spnego_gss_unwrap_iov; + spnego_gss_verify_mic; + spnego_gss_verify_mic_iov; + spnego_gss_wrap; + spnego_gss_wrap_aead; + spnego_gss_wrap_iov; + spnego_gss_wrap_iov_length; + spnego_gss_wrap_size_limit; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/kadm5clnt/Makefile b/krb5/lib/kadm5clnt/Makefile index ef01a5f779e3..27546a87949e 100644 --- a/krb5/lib/kadm5clnt/Makefile +++ b/krb5/lib/kadm5clnt/Makefile @@ -35,7 +35,8 @@ CFLAGS+=-I${KRB5_DIR}/lib \ -I${KRB5_DIR}/include \ -I${KRB5_OBJTOP}/include/krb5_private \ -I${KRB5_SRCTOP}/include \ - -I${KRB5_OBJTOP}/lib + -I${KRB5_OBJTOP}/lib \ + -I${KRB5_OBJTOP}/util/profile INCSDIR=${INCLUDEDIR}/kadm5 INCS= admin.h \ diff --git a/krb5/lib/kadm5clnt/version.map b/krb5/lib/kadm5clnt/version.map index bb3feb11cff1..4343dbd9f04e 100644 --- a/krb5/lib/kadm5clnt/version.map +++ b/krb5/lib/kadm5clnt/version.map @@ -117,5 +117,41 @@ kadm5clnt_mit_12_MIT { kadm5_init_iprop; xdr_calias_arg; kadm5_create_alias; + chpass_principal3_2; + chpass_principal_2; + chrand_principal3_2; + chrand_principal_2; + create_alias_2; + create_policy_2; + create_principal3_2; + create_principal_2; + delete_policy_2; + delete_principal_2; + et_ovk_error_table; + et_ovku_error_table; + get_policy_2; + get_pols_2; + get_principal_2; + get_principal_keys_2; + get_princs_2; + get_privs_2; + get_strings_2; + init_2; + initialize_ovk_error_table; + initialize_ovku_error_table; + krb5_aprof_get_string_all; + modify_policy_2; + modify_principal_2; + purgekeys_2; + rename_principal_2; + set_string_2; + setkey_principal3_2; + setkey_principal4_2; + setkey_principal_2; + xdr_gstrings_arg; + xdr_gstrings_ret; + xdr_krb5_string_attr; + xdr_purgekeys_arg; + xdr_sstring_arg; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/kadm5srv/Makefile b/krb5/lib/kadm5srv/Makefile index 9eecd20ca822..826a9edad25a 100644 --- a/krb5/lib/kadm5srv/Makefile +++ b/krb5/lib/kadm5srv/Makefile @@ -41,7 +41,8 @@ CFLAGS+=-I${KRB5_DIR}/lib \ -I${KRB5_OBJTOP}/lib \ -I${KRB5_OBJTOP}/lib/gssapi \ -I${KRB5_DIR}/lib/gssapi/krb5 \ - -I${KRB5_DIR}/lib/gssapi/generic + -I${KRB5_DIR}/lib/gssapi/generic \ + -I${KRB5_OBJTOP}/util/profile CWARNFLAGS.gcc+=-Wno-alloc-size-larger-than GEN_KADM_ERR= kadm_err.et diff --git a/krb5/lib/kadm5srv/version.map b/krb5/lib/kadm5srv/version.map index 4eb5ba7c3ead..d8dc8cfe0b0d 100644 --- a/krb5/lib/kadm5srv/version.map +++ b/krb5/lib/kadm5srv/version.map @@ -136,5 +136,34 @@ kadm5srv_mit_12_MIT { kadm5_init_iprop; xdr_calias_arg; kadm5_create_alias; + destroy_pwqual; + et_ovk_error_table; + et_ovku_error_table; + init_pwqual; + initialize_ovk_error_table; + initialize_ovku_error_table; + k5_kadm5_hook_alias; + k5_kadm5_hook_chpass; + k5_kadm5_hook_create; + k5_kadm5_hook_free_handles; + k5_kadm5_hook_load; + k5_kadm5_hook_modify; + k5_kadm5_hook_remove; + k5_kadm5_hook_rename; + k5_pwqual_check; + k5_pwqual_free_handles; + k5_pwqual_load; + k5_pwqual_name; + kadm5_get_admin_service_name; + kdb_free_keyblocks; + kdb_get_active_mkey; + kdb_get_entry; + kdb_get_hist_key; + master_keyblock; + pwqual_dict_initvt; + pwqual_empty_initvt; + pwqual_hesiod_initvt; + pwqual_princ_initvt; + xdr_kadm5_key_data; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/kadmin_common/Makefile b/krb5/lib/kadmin_common/Makefile index 9eed31bc94f3..926a7b266c05 100644 --- a/krb5/lib/kadmin_common/Makefile +++ b/krb5/lib/kadmin_common/Makefile @@ -27,6 +27,7 @@ CFLAGS+=-I${KRB5_DIR}/lib/krad \ -I${KRB5_SRCTOP}/include \ -I${KRB5_DIR}/util \ -I${KRB5_OBJTOP}/util \ + -I${KRB5_OBJTOP}/util/profile \ -I${.OBJDIR} CLEANFILES= kadmin_ct.c ktutil_ct.c diff --git a/krb5/lib/kdb/Makefile b/krb5/lib/kdb/Makefile index 80039ad83502..52087f9cd389 100644 --- a/krb5/lib/kdb/Makefile +++ b/krb5/lib/kdb/Makefile @@ -37,7 +37,8 @@ CFLAGS+=${DEFINES} \ -I${KRB5_DIR}/lib/kdb \ -I${KRB5_OBJTOP}/lib/kdb \ -I${KRB5_DIR}/include \ - -I${KRB5_SRCTOP}/include + -I${KRB5_SRCTOP}/include \ + -I${KRB5_OBJTOP}/util/profile ADB_ERR= adb_err.et ADB_ERR_C= ${ADB_ERR:S/.et$/.c/} diff --git a/krb5/lib/kdb/version.map b/krb5/lib/kdb/version.map index 54a093ff72bc..4a0b0d3df1b7 100644 --- a/krb5/lib/kdb/version.map +++ b/krb5/lib/kdb/version.map @@ -110,5 +110,32 @@ kdb5_10_MIT { krb5_dbe_sort_key_data; krb5_dbe_make_alias_entry; krb5_dbe_read_alias; + et_adb_error_table; + initialize_adb_error_table; + krb5_db_def_fetch_mkey; + krb5_db_def_rename_principal; + krb5_db_load_module; + krb5_dbe_def_cpw; + krb5_dbe_def_search_enctype; + krb5_dbe_delete_tl_data; + krb5_dbe_free_tl_data; + krb5_def_fetch_mkey_list; + krb5int_delete_principal_no_log; + krb5int_put_principal_no_log; + ulog_conv_2dbentry; + ulog_conv_2logentry; + xdr_kdb_sno_t; + xdr_kdb_ulog_t; + xdr_kdbe_attr_type_t; + xdr_kdbe_data_t; + xdr_kdbe_key_t; + xdr_kdbe_princ_t; + xdr_kdbe_pw_hist_t; + xdr_kdbe_t; + xdr_kdbe_time_t; + xdr_kdbe_tl_t; + xdr_kdbe_val_t; + xdr_update_status_t; + xdr_utf8str_t; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/kprop_util/Makefile b/krb5/lib/kprop_util/Makefile index aaaeb969058d..d29f17e20b65 100644 --- a/krb5/lib/kprop_util/Makefile +++ b/krb5/lib/kprop_util/Makefile @@ -21,6 +21,7 @@ SRCS= kprop_util.c CFLAGS+=-I${KRB5_DIR}/lib/krad \ -I${KRB5_DIR}/include \ -I${KRB5_SRCTOP}/include \ + -I${KRB5_OBJTOP}/util/profile \ -I${.OBJDIR} .include diff --git a/krb5/lib/krad/Makefile b/krb5/lib/krad/Makefile index 36074dff1296..17cd4f8142b5 100644 --- a/krb5/lib/krad/Makefile +++ b/krb5/lib/krad/Makefile @@ -27,6 +27,7 @@ SRCS= attr.c \ CFLAGS+=-I${KRB5_DIR}/lib/krad \ -I${KRB5_DIR}/include \ -I${KRB5_SRCTOP}/include \ + -I${KRB5_OBJTOP}/util/profile \ -I${.OBJDIR} .include diff --git a/krb5/lib/krad/version.map b/krb5/lib/krad/version.map index a18fa4665e50..6ffe589a4226 100644 --- a/krb5/lib/krad/version.map +++ b/krb5/lib/krad/version.map @@ -23,5 +23,16 @@ krad_0_MIT { krad_client_new; krad_client_free; krad_client_send; + kr_attr_decode; + kr_attr_encode; + kr_attr_valid; + kr_attrset_decode; + kr_attrset_encode; + kr_remote_cancel; + kr_remote_cancel_all; + kr_remote_equals; + kr_remote_free; + kr_remote_new; + kr_remote_send; }; HIDDEN { local: __*; _rest*; _save*; *; }; diff --git a/krb5/lib/krb5/Makefile b/krb5/lib/krb5/Makefile index b3587cf58c2b..b232a8a3e6ee 100644 --- a/krb5/lib/krb5/Makefile +++ b/krb5/lib/krb5/Makefile @@ -51,7 +51,10 @@ CFLAGS+=${DEFINES} \ -I${KRB5_DIR}/util/profile \ -I${KRB5_DIR}/include \ -I${KRB5_SRCTOP}/include \ - -I${KRB5_DIR} + -I${KRB5_DIR} \ + -I${KRB5_OBJTOP}/util/profile + +LDFLAGS+=-Wl,--error-limit=0 MANGROUPS= KRB5 KRB5= k5identity.5 \ diff --git a/krb5/lib/krb5/version.map b/krb5/lib/krb5/version.map index 3de2fdd879d0..924737afcedc 100644 --- a/krb5/lib/krb5/version.map +++ b/krb5/lib/krb5/version.map @@ -634,5 +634,1201 @@ krb5_3_MIT { k5_addr_directional_init; k5_print_addr; k5_print_addr_port; + _krb5_use_dns_kdc; + _krb5_use_dns_realm; + anon_princ; + aux_info_address_1_untagged; + aux_info_authdata_1_untagged; + aux_info_authdata_types; + aux_info_bitstring_data; + aux_info_checksum_1_untagged; + aux_info_der_data; + aux_info_etype_info2_1_def_untagged; + aux_info_etype_info_1_def_untagged; + aux_info_etype_list; + aux_info_gstring_data; + aux_info_keyblock_1_untagged; + aux_info_oid_data; + aux_info_ostring_data; + aux_info_pa_data_2_untagged; + aux_info_pa_pk_as_rep; + aux_info_pa_spake; + aux_info_princname_1_untagged; + aux_info_req_body_8_untagged; + aux_info_spake_support_0_untagged; + aux_info_typed_data_1_untagged; + aux_info_utf8_data; + ccselect_hostname_initvt; + ccselect_k5identity_initvt; + ccselect_realm_initvt; + clpreauth_encrypted_challenge_initvt; + clpreauth_encrypted_timestamp_initvt; + clpreauth_otp_initvt; + clpreauth_sam2_initvt; + decode_krb5_auth_pack; + decode_krb5_checksum; + decode_krb5_etype_list; + decode_krb5_kdc_dh_key_info; + decode_krb5_pa_pk_as_rep; + decode_krb5_pa_pk_as_req; + decode_krb5_principal_name; + decode_krb5_reply_key_pack; + decode_krb5_safe_with_body; + decode_krb5_td_dh_parameters; + decode_krb5_td_trusted_certifiers; + encode_krb5_auth_pack; + encode_krb5_etype_list; + encode_krb5_fast_req; + encode_krb5_kdc_dh_key_info; + encode_krb5_pa_fx_fast_request; + encode_krb5_pa_pac_req; + encode_krb5_pa_pk_as_rep; + encode_krb5_pa_pk_as_req; + encode_krb5_reply_key_pack; + encode_krb5_safe_with_body; + encode_krb5_setpw_req; + encode_krb5_td_dh_parameters; + encode_krb5_td_trusted_certifiers; + et_k5e1_error_table; + et_prof_error_table; + hostrealm_dns_initvt; + hostrealm_domain_initvt; + hostrealm_profile_initvt; + hostrealm_registry_initvt; + initialize_prof_error_table; + interface_names; + k5_asn1_decode_atype; + k5_asn1_decode_bitstring; + k5_asn1_decode_bool; + k5_asn1_decode_bytestring; + k5_asn1_decode_generaltime; + k5_asn1_decode_int; + k5_asn1_decode_uint; + k5_asn1_encode_atype; + k5_asn1_encode_bitstring; + k5_asn1_encode_bool; + k5_asn1_encode_bytestring; + k5_asn1_encode_generaltime; + k5_asn1_encode_int; + k5_asn1_encode_uint; + k5_asn1_full_decode; + k5_asn1_full_encode; + k5_atype_ad_kdc_issued; + k5_atype_ad_kdcissued_0; + k5_atype_ad_kdcissued_0_untagged; + k5_atype_ad_kdcissued_1; + k5_atype_ad_kdcissued_1_untagged; + k5_atype_ad_kdcissued_2; + k5_atype_ad_kdcissued_2_untagged; + k5_atype_ad_kdcissued_3; + k5_atype_ad_kdcissued_3_untagged; + k5_atype_address; + k5_atype_address_0; + k5_atype_address_0_untagged; + k5_atype_address_1; + k5_atype_address_1_untagged; + k5_atype_address_ptr; + k5_atype_algid_0; + k5_atype_algid_1; + k5_atype_algorithm_identifier; + k5_atype_ap_rep; + k5_atype_ap_rep_0; + k5_atype_ap_rep_1; + k5_atype_ap_rep_2; + k5_atype_ap_rep_2_untagged; + k5_atype_ap_rep_enc_part; + k5_atype_ap_rep_enc_part_0; + k5_atype_ap_rep_enc_part_0_untagged; + k5_atype_ap_rep_enc_part_1; + k5_atype_ap_rep_enc_part_1_untagged; + k5_atype_ap_rep_enc_part_2; + k5_atype_ap_rep_enc_part_2_untagged; + k5_atype_ap_rep_enc_part_3; + k5_atype_ap_rep_enc_part_3_untagged; + k5_atype_ap_rep_msg_type; + k5_atype_ap_req; + k5_atype_ap_req_0; + k5_atype_ap_req_1; + k5_atype_ap_req_2; + k5_atype_ap_req_2_untagged; + k5_atype_ap_req_3; + k5_atype_ap_req_3_untagged; + k5_atype_ap_req_4; + k5_atype_ap_req_4_untagged; + k5_atype_ap_req_msg_type; + k5_atype_as_rep; + k5_atype_as_req; + k5_atype_as_req_2; + k5_atype_as_req_encode; + k5_atype_as_req_msg_type; + k5_atype_auth_data; + k5_atype_auth_data_ptr; + k5_atype_auth_pack; + k5_atype_auth_pack_0; + k5_atype_auth_pack_0_untagged; + k5_atype_auth_pack_1; + k5_atype_auth_pack_1_untagged; + k5_atype_auth_pack_2; + k5_atype_auth_pack_2_untagged; + k5_atype_auth_pack_3; + k5_atype_auth_pack_3_untagged; + k5_atype_auth_pack_4; + k5_atype_auth_pack_4_untagged; + k5_atype_authdata_0; + k5_atype_authdata_0_untagged; + k5_atype_authdata_1; + k5_atype_authdata_1_untagged; + k5_atype_authdata_elt; + k5_atype_authdata_elt_ptr; + k5_atype_authdata_elt_type; + k5_atype_authdata_elt_type_0; + k5_atype_authdata_types; + k5_atype_authenticator; + k5_atype_authenticator_0; + k5_atype_authenticator_1; + k5_atype_authenticator_1_untagged; + k5_atype_authenticator_2; + k5_atype_authenticator_2_untagged; + k5_atype_authenticator_3; + k5_atype_authenticator_3_untagged; + k5_atype_authenticator_4; + k5_atype_authenticator_4_untagged; + k5_atype_authenticator_5; + k5_atype_authenticator_5_untagged; + k5_atype_authenticator_6; + k5_atype_authenticator_6_untagged; + k5_atype_authenticator_7; + k5_atype_authenticator_7_untagged; + k5_atype_authenticator_8; + k5_atype_authenticator_8_untagged; + k5_atype_bitstring_data; + k5_atype_cammac; + k5_atype_cammac_0; + k5_atype_cammac_0_untagged; + k5_atype_cammac_1; + k5_atype_cammac_1_untagged; + k5_atype_cammac_2; + k5_atype_cammac_2_untagged; + k5_atype_cammac_3; + k5_atype_cammac_3_untagged; + k5_atype_checksum; + k5_atype_checksum_0; + k5_atype_checksum_0_untagged; + k5_atype_checksum_1; + k5_atype_checksum_1_untagged; + k5_atype_checksum_ptr; + k5_atype_cred_0; + k5_atype_cred_1; + k5_atype_cred_2; + k5_atype_cred_2_untagged; + k5_atype_cred_3; + k5_atype_cred_3_untagged; + k5_atype_cred_info; + k5_atype_cred_info_0; + k5_atype_cred_info_0_untagged; + k5_atype_cred_info_1; + k5_atype_cred_info_10; + k5_atype_cred_info_10_untagged; + k5_atype_cred_info_1_untagged; + k5_atype_cred_info_2; + k5_atype_cred_info_2_untagged; + k5_atype_cred_info_3; + k5_atype_cred_info_3_untagged; + k5_atype_cred_info_4; + k5_atype_cred_info_4_untagged; + k5_atype_cred_info_5; + k5_atype_cred_info_5_untagged; *** 2018 LINES SKIPPED ***