Commit Graph

24517 Commits

Author SHA1 Message Date
Love Hornquist Astrand
6d9354edf7 x 2009-07-21 10:29:53 -07:00
Love Hornquist Astrand
ebb3dd62c0 See README.dlfcn for license 2009-07-21 10:29:44 -07:00
Love Hornquist Astrand
5bb9a31a9a make work again and remove debug info 2009-07-19 21:34:26 -07:00
Love Hornquist Astrand
7e4854250e Actually register new plugins and plug a related memory leak 2009-07-19 21:23:56 -07:00
Love Hornquist Astrand
330fd7645d Always ask for principal (KADM5_PRINCIPAL)
The protocol for "get principal" does not support not sending
principal, so when the caller doesn't add KADM5_PRINCIPAL to the mask,
lets add it for them.

Reported by Henry.B.Hotz@jpl.nasa.gov in [HEIMDAL-588]
2009-07-19 21:01:20 -07:00
Love Hornquist Astrand
17de01f523 Check that get -o pkinit-acl works. 2009-07-19 20:57:47 -07:00
Love Hornquist Astrand
311ce98d85 (hdb_sqlite_rename): make rename work when there is a prefix 2009-07-19 18:42:02 -07:00
Love Hornquist Astrand
bd073cfd72 Limit maxinum retries of BUSY/BLOCK/LOCKED operations to MAX_RETRIES (default 10) 2009-07-19 18:01:51 -07:00
Love Hornquist Astrand
4895349431 allow testing sqlite hdb backend 2009-07-19 17:59:23 -07:00
Love Hornquist Astrand
82150be255 allow loading sqlite 2009-07-19 17:58:53 -07:00
Love Hornquist Astrand
51fbbf93e3 (log_file): use strvisx rightly 2009-07-19 17:52:53 -07:00
Love Hornquist Astrand
c7c58feb3f add NTLM name for hdb layer to make searching diffrently the regular "names" 2009-07-18 10:17:37 -07:00
Love Hornquist Astrand
317d837d0f krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt deprecated 2009-07-17 20:39:35 -07:00
Love Hornquist Astrand
9211c47a30 Deprecate krb5_get_cred_from_kdc{,_opt} since they are replacement functions 2009-07-17 20:38:32 -07:00
Love Hornquist Astrand
80021f5e05 Make get_cred_kdc_any a private function. 2009-07-17 20:36:42 -07:00
Love Hornquist Astrand
517be51cc5 Test init_sec_context using keytab based credentials
Based on problem description from Rick Macklem in [HEIMDAL-197],
problem still not fixed.
2009-07-17 15:57:45 -07:00
Love Hornquist Astrand
8b71d0b93f Prefer the realm of the user when doing referrals style ISC krb5-get-creds
The the realm of the user's principal and prefer that when doing a lookup.
This code still need to be smarter can cache the "initial value" -> positive result
to avoid roundtrips to the KDC.
2009-07-17 15:43:19 -07:00
Love Hornquist Astrand
d4ca938866 Only load plugins once and never unload them
Its expensive to load and unload plugins all the time, so lets stop doing that.
Run over the plugin directory and load all plugins and remember them all.
In the future, something should watch the directory and if it changes,
load the new plugins that was put there.
2009-07-17 15:18:00 -07:00
Love Hornquist Astrand
de5110c05a (krb5_get_kdc_cred): make sure that out_creds points to NULL on failure 2009-07-16 23:54:54 -07:00
Love Hornquist Astrand
5d152d70eb Indent 2009-07-16 22:56:59 -07:00
Love Hornquist Astrand
d0aadb9a0d Fix depenencies for test_punycode
This only matters in development enviroments and where you run make check.
2009-07-16 22:26:43 -07:00
Love Hornquist Astrand
3c053a2e09 fix up the paranoid code to make it work with ipv6. 2009-07-16 22:21:59 -07:00
Love Hornquist Astrand
3634423f36 Allow specifying runing user and chroot() enviroment
Allow the admin to switch the user the kdc is running under and
specify the chroot() directory to run in.

Please note you need a very special setup to get this working.
2009-07-16 22:15:26 -07:00
Love Hörnquist Åstrand
2076c1c93e Add PAC to the first entry in the array since Windows and samba3 expects it there.
The problem was found by Matthieu Patou, whom also created the first
patch which I changed to look what the current code looks like.

History is tracked in [HEIMDAL-582].

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25338 ec53bebd-3082-4978-b11e-865c3cabbd6b
switch-from-svn-to-git
2009-07-16 18:28:56 +00:00
Love Hörnquist Åstrand
f8d7804396 More tests for HC_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25337 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:44 +00:00
Love Hörnquist Åstrand
e9cea2daee More tests for HC_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:24 +00:00
Love Hörnquist Åstrand
6c56033e6f improve msft compiler case
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25335 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:12 +00:00
Love Hörnquist Åstrand
6a85bbcc65 More tests for KRB5_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25334 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:27:52 +00:00
Love Hörnquist Åstrand
57e31f7593 More tests for GSSAPI_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25333 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:27:37 +00:00
Love Hörnquist Åstrand
2b54af87e9 Add paranoid printing using strvisx.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25332 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 23:31:55 +00:00
Love Hörnquist Åstrand
d07832d6d7 rename ruserpass to ruserpassword to not collide with uclibc, prompted by [HEIMDAL-534]
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25331 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 23:07:07 +00:00
Love Hörnquist Åstrand
29fc07df5b add paranoid check for PORT and EPRT, make it default
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25330 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:18:25 +00:00
Love Hörnquist Åstrand
16b76d5cc0 add paranoid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25329 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:18:13 +00:00
Love Hörnquist Åstrand
de5f912e02 Contributed by Andrew Bartlett:
When Samba4's 'fake' GSSAPI client contacts Windows 2008, and does not
request AP_MUTUAL_REQUIRED, it does not elicit a response packet.

We had previously assumed it was unconditional.  Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25328 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:18:00 +00:00
Love Hörnquist Åstrand
452483e61c Have two realms in the configuration file so that kpasswdd works with both of them.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25327 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:17:47 +00:00
Love Hörnquist Åstrand
6a24e13678 Use hdb_get_dbinfo() to find the realms.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25326 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:17:30 +00:00
Love Hörnquist Åstrand
9dcdb2c02c Test two realms.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25325 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:17:17 +00:00
Love Hörnquist Åstrand
aa5b66d1e8 plug a memory leak.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25324 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:16:49 +00:00
Love Hörnquist Åstrand
8eb14db155 remove unused variable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25323 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:16:21 +00:00
Love Hörnquist Åstrand
6f23451ef8 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25322 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-08 00:07:19 +00:00
Love Hörnquist Åstrand
9807194527 check for NULL pointer not no NULL pointer...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25321 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-08 00:07:05 +00:00
Love Hörnquist Åstrand
d3f16452e0 make compile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25320 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:20:10 +00:00
Love Hörnquist Åstrand
5a9dd54e95 drop RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25319 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:09:16 +00:00
Love Hörnquist Åstrand
6aa38c372c Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25318 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:09:04 +00:00
Love Hörnquist Åstrand
ef92d8485a Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25317 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:48 +00:00
Love Hörnquist Åstrand
a18db94691 Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:36 +00:00
Love Hörnquist Åstrand
af77ace518 Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25315 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:26 +00:00
Love Hörnquist Åstrand
48a0f6d995 reset iteration query before continuing.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25314 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:15 +00:00
Love Hörnquist Åstrand
e02d83174c set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25313 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:05 +00:00
Love Hörnquist Åstrand
4ff6ed4652 set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25312 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:07:52 +00:00