oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
14,886 Commits 2 Branches 2 Tags
09d3315e85e6392e49138bb7ec8531aeee6ec839
Commit Graph

7415 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
2d1b36a743 (_krb5_pk_rd_pa_reply): non non asn1 decoding errors, fail. Make sure 
we free memory on error.
(pk_verify_chain_standard): make sure we provide good errors.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15190 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 18:49:05 +00:00
Love Hörnquist Åstrand
d90f956e94 (pk_verify_chain_standard): store better error message in the context 
for certificate errors.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15188 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 18:27:15 +00:00
Love Hörnquist Åstrand
577e88be43 add pkinit and password quailty check options 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15187 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 18:15:20 +00:00
Love Hörnquist Åstrand
c0817d7f3b (krb5_kt_free_entry): zero out content of all krb5_free_x_content like 
functions to make sure data doesnt get reused, idea from Wynn Wilkes
<wwilkes@vintela.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15185 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 14:04:45 +00:00
Love Hörnquist Åstrand
0ec6d0d363 (process_pa_data_to_md): add comment that the caller always free 
out_md; remove comment about memory, it doesn't happen.
(init_cred_loop): free ctx->as_req.padata when its reset (From Wynn
Wilkes <wwilkes@vintela.com>), move a comment close the the code


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15178 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 07:42:06 +00:00
Love Hörnquist Åstrand
db975c9c97 (fkt_remove_entry): need to call krb5_kt_free_entry after each 
krb5_kt_next_entry.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15177 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 04:13:18 +00:00
Love Hörnquist Åstrand
1ed2143174 (fkt_remove_entry): need to call krb5_kt_free_entry after each 
fkt_next_entry_int. From: Wynn Wilkes <wwilkes@vintela.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15176 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-19 04:11:34 +00:00
Love Hörnquist Åstrand
4a5b9202fb s/sizeo/sizeof/ 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15175 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 10:06:16 +00:00
Love Hörnquist Åstrand
efd0eb5184 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15174 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 09:55:29 +00:00
Love Hörnquist Åstrand
5802e5f856 use english spelling of March 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15173 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 09:54:53 +00:00
Love Hörnquist Åstrand
71fc6141d5 TESTS += test_keytab 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15172 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 05:08:29 +00:00
Love Hörnquist Åstrand
db19fc890c (krb4_kt_remove_entry): plug memory leak, avoid crashing on empty keytab 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15171 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 05:03:30 +00:00
Love Hörnquist Åstrand
46c23b1852 document behavior of krb5_kt_remove_entry 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15170 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:49:15 +00:00
Love Hörnquist Åstrand
ed2c4b3694 (mkt_remove_entry): check if there isn't any entries in the keytab 
before removing any since that leads to bad pointer arithmetic and
crashing. From: Wynn Wilkes <wwilkes@vintela.com>.
Make the function return KRB5_KT_NOTFOUND if the entry wasn't in the
keytab (just like the filebased keytab).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15169 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:44:40 +00:00
Love Hörnquist Åstrand
f97a50a117 test memory corruption in MEMORY keytab 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15168 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:38:30 +00:00
Love Hörnquist Åstrand
e84fad2e0e zero out content of all krb5_free_x_content like functions to make sure data doesnt get reused, idea from Wynn Wilkes <wwilkes@vintela.com> 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15167 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:21:57 +00:00
Love Hörnquist Åstrand
b926505f3f document KRB5_GC_EXPIRED_OK 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15166 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:07:38 +00:00
Love Hörnquist Åstrand
485b61db15 add krb5_cc_new_unique 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15165 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-18 04:05:17 +00:00
Love Hörnquist Åstrand
fd9149ac7d (fcc_get_first): check return value from malloc, memset the structure, 
make sure cursor doesn't point to freed memory on failure.
From: Wynn Wilkes <wwilkes@vintela.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15164 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 17:46:46 +00:00
Love Hörnquist Åstrand
d84fcc39fe update (c), .Dd 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15162 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 14:19:11 +00:00
Love Hörnquist Åstrand
e238fb8fde document KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15161 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 14:18:47 +00:00
Love Hörnquist Åstrand
6c3ab75789 Remove expired credentials, based on patches and comments from Anders 
Magnusson <ragge@ltu.se> and Wynn Wilkes <wwilkes@vintela.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15160 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 11:48:06 +00:00
Johan Danielsson
5fb1d21f44 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15159 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 09:09:52 +00:00
Johan Danielsson
2b08f81bbf only link with dblib if we need it 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15158 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 09:09:49 +00:00
Johan Danielsson
1b8f47a97e add test_readenv 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15157 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 09:03:40 +00:00
Johan Danielsson
d1683c4b12 test for read_environment() 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15156 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 09:02:57 +00:00
Johan Danielsson
3b147c4bdd eliminate duplicates 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15155 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 09:02:32 +00:00
Love Hörnquist Åstrand
faa3d66323 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15152 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 08:17:11 +00:00
Love Hörnquist Åstrand
c226c11008 (init_auth): set KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED (for java 
compatibility), also while here, use krb5_auth_con_addflags


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15151 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 08:15:30 +00:00
Love Hörnquist Åstrand
2dd7796261 (krb5_get_forwarded_creds): honor 
KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED and create unencrypted
(ENCTYPE_NULL) credentials. for use with old mit server and java based
ones as they can't handle encrypted KRB-CRED. Note that the option
needs to turned on because if the consumer sends the KRB-CRED in clear
bad things will happen.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15150 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 08:12:29 +00:00
Love Hörnquist Åstrand
682ff3fef0 (krb5_init_context): register krb5_javakt_ops 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15149 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 08:08:28 +00:00
Love Hörnquist Åstrand
d5cfe0c7fd KRB5_GC_EXPIRED_OK: expired credentials is ok to return from 
krb5_get_credentials.
KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED: make forward credentials be
unencrypted, for compatibility with mit kerberos and java kerberos.
krb5_javakt_ops: export


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15148 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-17 08:06:30 +00:00
Love Hörnquist Åstrand
f9ca795602 Add new keytab file format JAVA14 that doesn't the use extended kvnos, 
as hinted, this is needed for Java's Kerberos implementation.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15147 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 21:13:42 +00:00
Love Hörnquist Åstrand
c745decaa9 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15145 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:54:09 +00:00
Love Hörnquist Åstrand
00bd45ed01 check allocation errors 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15144 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:53:34 +00:00
Love Hörnquist Åstrand
10c8d0da80 check allocation errors correctly 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15143 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:52:54 +00:00
Love Hörnquist Åstrand
e4e9f2151f catch buffer overrun and check allocation errors 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15142 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:52:36 +00:00
Love Hörnquist Åstrand
ebbd19bcac include <err.h> 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15141 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:51:47 +00:00
Love Hörnquist Åstrand
877fe34c1b use strlcpy 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15140 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-16 08:42:45 +00:00
Love Hörnquist Åstrand
07dc909772 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15137 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 10:57:31 +00:00
Love Hörnquist Åstrand
f07d4690f6 (_kadm5_c_init_context): fix memory leak in case of failure 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15136 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 10:57:13 +00:00
Love Hörnquist Åstrand
b21b5c89b5 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15135 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 08:05:21 +00:00
Love Hörnquist Åstrand
c2d9c8331b use unsigned char to avoid signess warning 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15134 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 08:04:51 +00:00
Love Hörnquist Åstrand
136b3dc3cd (AES_cbc_encrypt): use unsigned char to avoid signess warning 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15133 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 08:00:09 +00:00
Love Hörnquist Åstrand
834a97a1df x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15132 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 07:42:19 +00:00
Love Hörnquist Åstrand
2b2439af68 (issuid): change the #ifdef order to avoid unreachable code warning. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15131 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-13 07:42:03 +00:00
Love Hörnquist Åstrand
570ef02561 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15130 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-11 13:04:23 +00:00
Love Hörnquist Åstrand
052dd71f3d Get daemon declared on Solaris (it's in unistd.h but masked by a 
feature test), just to avoid a warning, since it has int args.
Include err.h unconditionally, since it's always supplied.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15129 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-11 13:04:04 +00:00
Love Hörnquist Åstrand
c4ec6e6212 x 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15119 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-10 22:20:55 +00:00
Love Hörnquist Åstrand
31aba91bb4 Include <stdlib.h>. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15118 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-10 22:19:01 +00:00