Commit Graph

1296 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
1530060a84 Assume old client if it doesn't send supportedCMSTypes.
Add error message.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25167 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:16:40 +00:00
Love Hörnquist Åstrand
5baf2e3d1a Simplify datagram_reply
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25132 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-25 16:26:10 +00:00
Love Hörnquist Åstrand
4aa92f9db1 Less empty if statements.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25120 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-16 08:17:26 +00:00
Love Hörnquist Åstrand
27316b9a1f use krb5_principal_get_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25111 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-16 08:01:40 +00:00
Love Hörnquist Åstrand
98e7ac2226 spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25099 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:50:54 +00:00
Love Hörnquist Åstrand
542528a7ce try to clean up ckey handling, esp when there is no ckey
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25098 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:50:39 +00:00
Love Hörnquist Åstrand
b8071a368c spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25097 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:50:08 +00:00
Love Hörnquist Åstrand
7f6001e81c disable deprecated warning since this module uses 425 function and we
don't want warnings for that.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25096 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:11:26 +00:00
Love Hörnquist Åstrand
01cf29a91a disable deprecated warning since this module uses 425 function and we
don't want warnings for that.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25095 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:11:15 +00:00
Love Hörnquist Åstrand
792da8685d don't leak memory
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25084 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:08:56 +00:00
Love Hörnquist Åstrand
1033b89779 make comile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25048 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:05:28 +00:00
Love Hörnquist Åstrand
7c97293c1e rename S4U2SELF to FOR_USER
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25044 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:04:33 +00:00
Love Hörnquist Åstrand
51d0f65fb8 use krb5_cc_new_unique, use constants for cache types
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25041 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:04:01 +00:00
Love Hörnquist Åstrand
27e41bf7d6 If the client sent more then 10 EDI, don't bother looking more then 10
of performance reasons.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25002 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 19:49:09 +00:00
Love Hörnquist Åstrand
eb81f54da8 Flatten the reply
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25001 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 19:48:55 +00:00
Love Hörnquist Åstrand
6b95eec5c9 new signature for _kdc_pk_rd_padata
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25000 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:05:00 +00:00
Love Hörnquist Åstrand
1d0eb4dad8 add proxy bit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24999 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:04:50 +00:00
Love Hörnquist Åstrand
dd3405112f rename client_params and set proxy cert bit on the right context
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24994 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:04:00 +00:00
Love Hörnquist Åstrand
5ee06ffbff Make one verify context per client, this way we can add our own trust
anchors for each client, so that self registed/special certificate are
allowed as trust anchors.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24987 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:02:44 +00:00
Love Hörnquist Åstrand
4205308775 Always generate session key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24975 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-28 17:08:31 +00:00
Love Hörnquist Åstrand
f4f623e7d8 comment on what to add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24942 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:36:58 +00:00
Love Hörnquist Åstrand
033c14110f simplify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24941 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:36:47 +00:00
Love Hörnquist Åstrand
3aa4a14ef3 move generation of session key to preauth hook.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24940 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:36:36 +00:00
Love Hörnquist Åstrand
eb32e1f0ff add generation of session key here
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24939 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:36:26 +00:00
Love Hörnquist Åstrand
7665dbc0be openlog failed, exit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24922 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-22 17:23:54 +00:00
Love Hörnquist Åstrand
9eedf9e4f3 don't set unused variables
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24873 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:34:06 +00:00
Love Hörnquist Åstrand
a4b0d218d9 make db NULL to make it not pass undefined value to hdb_print_entry().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24862 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:31:41 +00:00
Love Hörnquist Åstrand
143101e825 better printing of keyex mech
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24704 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:14:07 +00:00
Love Hörnquist Åstrand
985e9f898d mrore DH bits
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24697 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:12:55 +00:00
Love Hörnquist Åstrand
b86374c262 Implement ECDH in the KDC.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24695 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:12:36 +00:00
Love Hörnquist Åstrand
11876749d4 more bits for ECDH
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24688 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 04:17:05 +00:00
Love Hörnquist Åstrand
b370260466 Abstract out use of DH
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24687 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 04:16:54 +00:00
Love Hörnquist Åstrand
4aebfb78c0 Remove extra anonymous check.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24600 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:07:52 +00:00
Love Hörnquist Åstrand
3bea35ccc5 Disable anonymous code.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24598 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:07:32 +00:00
Love Hörnquist Åstrand
c1e6b65501 use is_anonymous(), extra new argument to _krb5_pk_load_id()
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24593 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:06:42 +00:00
Love Hörnquist Åstrand
c8dfcede53 intern export is_anonymous()
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24592 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:06:32 +00:00
Love Hörnquist Åstrand
64748478da Move the check client/anonoymous logic to pkinit.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24578 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:04:08 +00:00
Love Hörnquist Åstrand
7f61137222 Use HX509_CMS_VS_ALLOW_ZERO_SIGNER for anonymous requests.
Move the check client/anonoymous logic here

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24577 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:03:58 +00:00
Love Hörnquist Åstrand
cc20011567 deny non valid use of anonymous requests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24574 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:03:27 +00:00
Love Hörnquist Åstrand
c1bfc5bd1d Only send etype-info{,2} for the enctype we selected.
Process pkinit anon requests.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24569 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:02:34 +00:00
Love Hörnquist Åstrand
b744467bb7 Check windc access after check_flags.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24566 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:01:55 +00:00
Love Hörnquist Åstrand
6561b13ccb Verify flags after the user been required to prove its identity * with
in a preauth mech, matches windows AD behavior.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24563 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-31 22:10:37 +00:00
Love Hörnquist Åstrand
065ff8fae9 collect enctype printing into one statement
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24560 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-31 21:07:13 +00:00
Love Hörnquist Åstrand
9ec7eb49c4 force submodules to claim the package
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24531 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:30:59 +00:00
Love Hörnquist Åstrand
2ba9e9214c force submodules to claim the package
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24530 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:30:42 +00:00
Love Hörnquist Åstrand
5ca7ee453e drop name
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24529 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:30:25 +00:00
Love Hörnquist Åstrand
ab94b8cc72 drop name
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24528 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:30:02 +00:00
Love Hörnquist Åstrand
8d3b69871c fix length bits
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24527 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:19:48 +00:00
Love Hörnquist Åstrand
c74df06f20 fix length bits
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24526 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:19:27 +00:00
Love Hörnquist Åstrand
2437f18d3b add krb5_kdc_service
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24492 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:08:35 +00:00