Commit Graph

268 Commits

Author SHA1 Message Date
Johan Danielsson
5c600d0ba3 Somewhat fix the etype usage. The list sent by the client is used to
select wich key to encrypt the kdc rep with (in case of as-req), and
with the server info to select the session key type. The server key
the ticket is encrypted is based purely on the keys in the database.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3533 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-22 18:28:07 +00:00
Assar Westerlund
a8948e7362 typo
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3474 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-12 23:02:32 +00:00
Assar Westerlund
e985fef005 remove unneeded cast
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3470 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-11 05:46:26 +00:00
Johan Danielsson
b792574729 Don't replace transited field.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3466 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-10 19:40:40 +00:00
Johan Danielsson
ec242eb9f5 Fixes for cross-realm, including (but not limited to):
* allow client to be non-existant (should probably check for "local realm")

* if server isn't found and it is a request for a krbtgt, try to find
  a realm on the way to the requested realm

* update the transited encoding iff client-realm != server-realm != tgt-realm


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3463 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-10 19:26:09 +00:00
Assar Westerlund
3e4d63e8d6 increase the arbitrary limit from 1024 to 8192
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3449 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-09 05:47:40 +00:00
Assar Westerlund
8a85f87b89 (set_salt_padata): new function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3407 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-07 20:29:19 +00:00
Johan Danielsson
b293e5caea Check invalid flag.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3402 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-07 12:33:40 +00:00
Johan Danielsson
53f897d164 new salt format
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3319 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-31 19:35:37 +00:00
Johan Danielsson
d0762252d8 Zero and just free ap-req once.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3130 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-24 12:04:33 +00:00
Johan Danielsson
6d2ac84132 Include kvno in ticket.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3078 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-21 18:48:38 +00:00
Johan Danielsson
01d2b6f067 Fix for old clients passing 0 for `no endtime'.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3002 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-15 14:58:36 +00:00
Johan Danielsson
61717cbfd4 kdc-req-body->till is optional.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2989 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-15 01:47:32 +00:00
Johan Danielsson
9fc1e6b189 Return error code from tgs_check_authenticator
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2977 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-14 22:09:29 +00:00
Johan Danielsson
298e9fe013 Fix endtime in reply.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2976 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-14 20:48:39 +00:00
Assar Westerlund
5320df337c (as_rep): fix flags checks
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2900 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-11 03:35:26 +00:00
Johan Danielsson
906f00e4d3 More fixes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2892 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-11 01:51:25 +00:00
Johan Danielsson
111a4dbdad Fix some uninitialized memory accesses.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2891 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-11 01:42:21 +00:00
Johan Danielsson
4fefc7ceaf free_key -> hdb_free_key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2843 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-09 00:18:50 +00:00
Assar Westerlund
109f0aa2bf try to a little more careful when freeing data
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2830 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-08 22:51:21 +00:00
Assar Westerlund
1b7207ecfd look at `kdc_warn_pwexpire' before returning last-req of type 6
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2752 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-07 22:39:35 +00:00
Assar Westerlund
f503ad1ffb include last-req's of type 6 and 7, if applicable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2724 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-07 20:16:14 +00:00
Johan Danielsson
a0464f4b20 Make context global.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2701 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-04 18:20:36 +00:00
Assar Westerlund
b99e1eba67 fix new calls to `kdc_log'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2685 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-01 16:14:08 +00:00
Assar Westerlund
c525d3a77f Check the valid times on client and server.
Check the password expiration.
Check the require_preauth flag.
Send an lr_type == 6 with pw_end.
Set key.expiration to min(valid_end, pw_end)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2676 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-01 15:27:27 +00:00
Johan Danielsson
584eb44cb9 Pass context to kdc_log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2664 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-08-01 14:47:43 +00:00
Assar Westerlund
086e08d76c (tgs_rep2): make sure we also have an defined `client' to return as
part of the KRB-ERROR


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2631 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-25 15:34:18 +00:00
Assar Westerlund
17557f3c06 (as_rep): Use `METHOD-DATA' when sending KRB5KDC_ERR_PREAUTH_REQUIRED,
not PA-DATA.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2610 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-24 08:13:45 +00:00
Johan Danielsson
b07396da72 Unseal keys from database before use.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2599 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-24 07:43:56 +00:00
Johan Danielsson
a0a44dfa19 Rename require_enc_timestamp to require_preauth
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2573 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-24 04:35:16 +00:00
Assar Westerlund
1e0b764c46 more logging
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2556 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-23 06:24:00 +00:00
Johan Danielsson
dfe65c8320 Update to use new db format. Better checking of flags and such. More
logging.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2523 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-23 02:11:03 +00:00
Assar Westerlund
11ba6d3e52 Check `require_enc_timestamp'
malloc space for starttime and renew_till


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2494 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-20 14:23:50 +00:00
Johan Danielsson
05ce3fa9b0 Try all valid pa-datas in as_rep before giving up. Send back an empty
pa-data if the client has the v4 flag set.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2472 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-19 08:01:00 +00:00
Johan Danielsson
83be2a4912 Rewritten flags parsing, it now might work to get forwarded and
renewed tickets.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2418 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-17 23:05:10 +00:00
Johan Danielsson
77165c77f9 Don't overwrite flags.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2400 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-17 10:24:18 +00:00
Johan Danielsson
f097a12adf Conditionalize pa-enc-timestamp.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2397 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-16 22:56:30 +00:00
Johan Danielsson
5a32a5c8e7 Add copyright notice.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2389 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-16 21:40:05 +00:00
Johan Danielsson
0b1ef9e65d Free ticket and ap_req in tgs_rep2.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2382 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-16 19:57:46 +00:00
Johan Danielsson
e658d6ad40 Split tgs_rep in smaller functions. Add better error handing. Do some
logging.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2349 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-16 01:25:35 +00:00
Assar Westerlund
0fe09b54ab use `max_skew'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2304 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-14 14:39:52 +00:00
Assar Westerlund
563467dcf2 keep up with changing data structures
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2300 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-14 12:42:45 +00:00
Assar Westerlund
38c1e82455 (tgs_rep): support keyed checksums
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2250 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-13 07:25:10 +00:00
Johan Danielsson
4ff77d547b Remove most of the most common memory leaks.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2223 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-13 00:52:39 +00:00
Assar Westerlund
a3ac676494 check if the pre-auth was decrypted properly.
set the `pre_authent' flag


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2214 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-12 21:32:03 +00:00
Johan Danielsson
178fdcf35a Reset name_type before db lookup.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2210 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-12 20:50:42 +00:00
Johan Danielsson
1dc38a03cb Check authenticator checksum type.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2197 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-12 15:13:24 +00:00
Johan Danielsson
7391e922bb Check authenticator. Even more generalized keytype functionality.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2090 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-09 04:06:17 +00:00
Johan Danielsson
628b7ae46d Use more general etype functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2077 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-09 00:40:27 +00:00
Assar Westerlund
667ab186b3 copy data that will be freed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2057 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-07-08 23:20:34 +00:00