f74250eb28
Handle kx509 requests.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19553 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:35 +00:00
3ce7195579
Listen to 9878 if kca is turned on.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19552 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:00 +00:00
6d254afa9f
Include <kx509_asn1.h>.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19551 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:08:15 +00:00
c4b7508854
code to parse [kdc]enable-kx509
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19550 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:07:35 +00:00
95207976c0
add enable_kx509
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19549 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:56 +00:00
2aff6e5795
add kx509.c
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19548 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:18 +00:00
3572041050
Kx509server (external certificate genration).
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19545 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:03:53 +00:00
837f65e1e9
Remove <digest_asn.h>, its already included in headers.h
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19538 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 17:03:51 +00:00
98e01a4744
Return session key for the NTLMv2 case too
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19533 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 14:40:46 +00:00
fb1c8392d1
Prefix internal symbol with _kdc_.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19507 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 17:18:14 +00:00
450b14e4e3
add digests_allowed
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19506 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:24:27 +00:00
bcd0cbcf14
return NTLM2 targetinfo structure.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19504 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:14:43 +00:00
b54d2595c5
Parse digest acl's
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19500 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:49:34 +00:00
f424d5432c
forward decl;
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19499 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:48:04 +00:00
b592e99683
Add digest acl's
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19498 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:47:11 +00:00
44c3c7620b
Add ntlm v2 processing, more verbose logging.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19497 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 11:30:06 +00:00
7576da2827
reorder to show slot here ntlmv2 code will be placed.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19475 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 17:27:17 +00:00
c40b4081cf
Announce that we support key exchange and add bits to detect when it
...
wasn't used.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19470 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 07:32:40 +00:00
fadaad6712
Set error code on wrong lm.length.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19466 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:46:53 +00:00
96145a7a51
Add support for generating NTLM2 session security answer.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19463 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:19:46 +00:00
f280e31a6b
Unwrap the NTLM session key and return it to the server.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19422 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-18 21:19:47 +00:00
be40e72015
Support NTLM verification, note that the KDC does no NTLM packet
...
parsing, its all done by the client side, the KDC just calculate and
verify the digest and return the result to the service.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:33:26 +00:00
ffada79bc7
Include <heimntlm.h>.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19373 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:22:19 +00:00
95936540f6
libkdc needs libheimntlm.la
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19371 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:17:50 +00:00
c7d5dd6b32
Less verbose error message.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19304 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:12:00 +00:00
ed5e62f11c
Return error codes on failure, improve error reporting.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:03:46 +00:00
e1bac0567e
(_kdc_as_rep): add AD-INITAL-VERIFIED-CAS to the encrypted ticket
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:24:10 +00:00
8300ee6ee2
(_kdc_add_inital_verified_cas): new function, adds an empty (for now)
...
AD_INITIAL_VERIFIED_CAS to tell the clients that we vouches for the CA.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19261 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:21:11 +00:00
9fed7e931e
(_kdc_tkt_add_if_relevant_ad): use _kdc_tkt_add_if_relevant_ad to add the SignedPath.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:16:03 +00:00
eb2670591c
(_kdc_tkt_add_if_relevant_ad): new function.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19259 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:15:20 +00:00
85bcc19262
(_kdc_pk_rd_padata): leak less memory for ExternalPrincipalIdentifiers
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19250 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 13:10:21 +00:00
24ce3844d0
update (c)
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19248 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:31:09 +00:00
a36abf458c
Remove unused function.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:25:47 +00:00
528e4e53e7
Parse and use PA-PK-AS-REQ.trustedCertifiers
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19244 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:21:02 +00:00
65d743807c
Add comment that the anchors in the signed data really should be the
...
trust anchors of the client.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 10:42:41 +00:00
487bcca4e2
Use strcspn to remove \n from fgets result. Prompted by change by Ray
...
Lai of OpenBSD via Björn Sandell.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19213 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-04 23:36:36 +00:00
c264018278
Add LIB_pkinit to pacify AIX
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19188 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-29 07:39:58 +00:00
5b304e5f20
Need better code in the DH parameter rejection case, add comment to
...
that effect.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19165 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-28 03:41:55 +00:00
772ed07a25
Reply KRB5KRB_ERR_RESPONSE_TOO_BIG for too large packets when using
...
datagram based transports.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19163 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:17:58 +00:00
6ff3e7477d
Pass down datagram_reply to _kdc_tgs_rep.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19162 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:16:09 +00:00
480aff7f9b
(_kdc_pk_rd_padata): Pick up supportedCMSTypes and pass in into
...
hx509_cms_create_signed_1 via hx509_peer_info blob.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19125 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-26 16:38:51 +00:00
ddfe47e5e1
Update hx509_cms_create_signed_1.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19120 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-26 15:50:48 +00:00
c4cd047939
Make all pkinit options prefixed with pkinit_
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19089 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-21 19:57:33 +00:00
b9624a871d
Use KRB5_KU_OTHER_CKSUM for the impersonate checksum.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19081 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-21 05:14:43 +00:00
ece5f9603e
Make krb5_get_init_creds_opt_free take a context argument.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19078 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-20 18:12:41 +00:00
8466eac79d
revert the enable-pkinit change, and make it consistant with all other
...
other enable- options
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19075 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-19 04:16:49 +00:00
5b7701514e
Make all pkinit options prefixed with pkinit_
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19069 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-17 22:27:01 +00:00
61623b636c
Make app pkinit options prefixed with pkinit_
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19068 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-17 22:20:25 +00:00
204ec47405
(_kdc_pk_check_client): drop client_princ as an argument
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18984 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-10 03:37:43 +00:00
21ef9de7e6
(_kdc_as_rep): drop client_princ from _kdc_pk_check_client since its
...
not valid in canonicalize case
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18983 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-10 03:36:32 +00:00
Love Hörnquist Åstrand