LICENSE0Individual source code files are copyright MIT, CygnusSupport, OpenVision, Oracle, Sun Soft, FundsXpress, andothers.Project Athena, Athena, Athena MUSE, Discuss,Hesiod, Kerberos, Moira, and Zephyr are trademarks ofthe Massachusetts Institute of Technology (MIT). Nocommercial use of these trademarks may be madewithout prior written permission of MIT.“Commercial use” means use of a name in a product orother for-profit manner. It does NOT prevent a commercialfirm from referring to the MIT trademarks in order toconvey information (although in doing so, recognition oftheir trademark status should be given).The following copyright and permission notice applies tothe OpenVision Kerberos Administration system locatedin kadmin/create, kadmin/dbutil, kadmin/passwd, kadmin/server, lib/kadm5, and portions of lib/rpc:Copyright, OpenVision Technologies, Inc., 1996, AllRights ReservedWARNING: Retrieving the OpenVision KerberosAdministration system source code, as described below,indicates your acceptance of the following terms. If youdo not agree to the following terms, do not retrieve theOpenVision Kerberos administration system.You may freely use and distribute the Source Codeand Object Code compiled from it, with or withoutmodification, but this Source Code is provided to you“AS IS” EXCLUSIVE OF ANY WARRANTY, INCLUDING,WITHOUT LIMITATION, ANY WARRANTIES OFMERCHANTABILITY OR FITNESS FOR A PARTICULARPURPOSE, OR ANY OTHER WARRANTY, WHETHEREXPRESS OR IMPLIED. IN NO EVENT WILL OPENVISIONHAVE ANY LIABILITY FOR ANY LOST PROFITS, LOSS OFDATA OR COSTS OF PROCUREMENT OF SUBSTITUTEGOODS OR SERVICES, OR FOR ANY SPECIAL,INDIRECT, OR CONSEQUENTIAL DAMAGES ARISINGOUT OF THIS AGREEMENT, INCLUDING, WITHOUTLIMITATION, THOSE RESULTING FROM THE USE OFTHE SOURCE CODE, OR THE FAILURE OF THE SOURCECODE TO PERFORM, OR FOR ANY OTHER REASON.OpenVision retains all copyrights in the donated SourceCode. OpenVision also retains copyright to derivativeworks of the Source Code, whether created byOpenVision or by a third party. The OpenVision copyrightnotice must be preserved if derivative works are madebased on the donated Source Code.OpenVision Technologies, Inc. has donated thisKerberos Administration system to MIT for inclusionin the standard Kerberos 5 distribution. This donationunderscores our commitment to continuing Kerberostechnology development and our gratitude for thevaluable work which has been performed by MIT andthe Kerberos community.Portions contributed by Matt Crawford @fnal.gov> were work performed at Fermi National AcceleratorLaboratory, which is operated by Universities ResearchAssociation, Inc., under contract DE-AC02-76CHO3000with the U.S. Department of Energy.The implementation of the Yarrow pseudo-random numbergenerator in src/lib/crypto/yarrow has the followingcopyright:Copyright 2000 by Zero-Knowledge Systems, Inc.Permission to use, copy, modify, distribute, and sell thissoftware and its documentation for any purpose is herebygranted without fee, provided that the above copyrightnotice appear in all copies and that both that copyrightnotice and this permission notice appear in supportingdocumentation, and that the name of Zero-KnowledgeSystems, Inc. not be used in advertising or publicitypertaining to distribution of the software without specific,written prior permission. Zero-Knowledge Systems, Inc.makes no representations about the suitability of thissoftware for any purpose. It is provided “as is” withoutexpress or implied warranty.ZERO-KNOWLEDGE SYSTEMS, INC. DISCLAIMS ALLWARRANTIES WITH REGARD TO THIS SOFTWARE,INCLUDING ALL IMPLIED WARRANTIES OFMERCHANTABILITY AND FITNESS, IN NO EVENT SHALLZERO-KNOWLEDGE SYSTEMS, INC. BE LIABLE FOR ANYSPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES ORANY DAMAGES WHATSOEVER RESULTING FROM LOSSOF USE, DATA OR PROFITS, WHETHER IN AN ACTIONOF CONTRACT, NEGLIGENCE OR OTHER TORTUOUSACTION, ARISING OUT OF OR IN CONNECTION WITHTHE USE OR PERFORMANCE OF THIS SOFTWARE.The implementation of the AES encryption algorithm insrc/lib/crypto/aes has the following copyright:Copyright (c) 2001, Dr Brian Gladman @gladman.uk.net>, Worcester, UK.All rights reserved.LICENSE TERMSThe free distribution and use of this software in bothsource and binary form is allowed (with or withoutchanges) provided that:1. distributions of this source code include the abovecopyright notice, this list of conditions and thefollowing disclaimer;2. distributions in binary form include the abovecopyright notice, this list of conditions and thefollowing disclaimer in the documentation and/orother associated materials;3. the copyright holder’s name is not used to endorseproducts built using this software without specificwritten permission.DISCLAIMERThis software is provided “as is” with no explcit or impliedwarranties in respect of any properties, including, but notlimited to, correctness and fitness for purpose.The implementation of the RPCSEC_GSS authenticationflavor in src/lib/rpc has the following copyright:Copyright (c) 2000 The Regents of the University ofMichigan.All rights reserved.Copyright (c) 2000 Dug Song @UMICH.EDU>.All rights reserved, all wrongs reversed.Redistribution and use in source and binary forms, withor without modification, are permitted provided that thefollowing conditions are met:1. Redistributions of source code must retain theabove copyright notice, this list of conditions and thefollowing disclaimer.2. Redistributions in binary form must reproduce theabove copyright notice, this list of conditions and thefollowing disclaimer in the documentation and/or othermaterials provided with the distribution.3. Neither the name of the University nor the names ofits contributors may be used to endorse or promoteproducts derived from this software without specificprior written permission.THIS SOFTWARE IS PROVIDED “AS IS” AND ANYEXPRESS OR IMPLIED WARRANTIES, INCLUDING,BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OFMERCHANTABILITY AND FITNESS FOR A PARTICULARPURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THEREGENTS OR CONTRIBUTORS BE LIABLE FOR ANYDIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOTLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODSOR SERVICES; LOSS OF USE, DATA, OR PROFITS; ORBUSINESS INTERRUPTION) HOWEVER CAUSED AND ONANY THEORY OF LIABILITY, WHETHER IN CONTRACT,STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCEOR OTHERWISE) ARISING IN ANY WAY OUT OF THEUSE OF THIS SOFTWARE, EVEN IF ADVISED OF THEPOSSIBILITY OF SUCH DAMAGE.AcknowledgmentsAppreciation Time!!!! There are far too many people totry to thank them all; many people have contributed tothe development of Kerberos V5. This is only a partiallisting....Thanks to Kevin Coffman and the CITI group at theUniversity of Michigan for providing patches forimplementing RPCSEC_GSS authentication in the RPClibrary.Thanks to Derrick Schommer for reporting multiplememory leaks.Thanks to Quanah Gibson-Mount of Stanford Universityfor helping exercise the thread support code.Thanks to Michael Tautschnig for reporting the heap bufferoverflow inthe password history mechanism. [MITKRB5-SA-2004-004]Thanks to Wyllys Ingersoll for finding a buffer-size problemin theRPCSEC_GSS implementation.Thanks to the members of the Kerberos V5 developmentteam at MIT, both past and present: Danilo Almeida, JeffreyAltman, Jay Berkenbilt, Richard Basch, Mitch Berger, JohnCarr, Don Davis, Alexandra Ellwood, Nancy Gilman, MattHancher, Sam Hartman, Paul Hill, Marc Horowitz, EvaJacobus, Miroslav Jurisic, Barry Jaspan, Geoffrey King,John Kohl, Peter Litwack, Scott McGuire, Kevin Mitchell,Cliff Neuman, Paul Park, Ezra Peisach, Chris Provenzano,Ken Raeburn, Jon Rochlis, Jeff Schiller, Jen Selby, BradThompson, Harry Tsai, Ted Ts’o, Marshall Vale, Tom Yu.Very special thanks go to Marshall Vale, our departingteam leader.Over the past few years, Marshall has been extremelyvaluable to us as mentor, advisor, manager, and friend.Marshall’s devotion as a champion of Kerberos has helpedour team immensely through many trials and hardships.We will miss him tremendously, and we wish him the bestin his future endeavors.n Exhibit-UCopyright (c) 1989 The Regents of the University ofCalifornia.All rights reserved.This code is derived from software contributed to Berkeleyby Mike Muuss.Redistribution and use in source and binary forms, withor without modification, are permitted provided that thefollowing conditions are met:1. Redistributions of source code must retain theabove copyright notice, this list of conditions and thefollowing disclaimer.2. Redistributions in binary form must reproduce theabove copyright notice, this list of conditions and thefollowing disclaimer in the documentation and/or othermaterials provided with the distribution.3. All advertising materials mentioning features oruse of this software must display the followingacknowledgement:This product includes software developed by theUniversity of California, Berkeley and its contributors.4. Neither the name of the University nor the names ofits contributors may be used to endorse or promoteproducts derived from this software without specificprior written permission.THIS SOFTWARE IS PROVIDED BY THE REGENTS ANDCONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIEDWARRANTIES, INCLUDING, BUT NOT LIMITED TO, THEIMPLIED WARRANTIES OF MERCHANTABILITY ANDFITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORSBE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OFSUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVERCAUSED AND ON ANY THEORY OF LIABILITY, WHETHERIN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDINGNEGLIGENCE OR OTHERWISE) ARISING IN ANY WAYOUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISEDOF THE POSSIBILITY OF SUCH DAMAGE.License Information for the SoftwareUsed in the UnitAbout GPL (GNU-General PublicLicense), LGPL (GNU Lesser GeneralPublic License) LicenseThis product uses GPL/LGPL software and softwaremade by other companies.After you purchase this product, you may procure,modify or distribute the source code of the GPL/LGPL software that is used in the product.DENON provides the source code based on theGPL and LPGL licenses at the actual cost upon yourrequest to our customer service center. However,note that we make no guarantees concerning thesource code. Please also understand that we donot offer support for the contents of the sourcecode.