Commit Graph

1235 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
9140e58024 Get right key for PAC krbtgt verification.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19643 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 19:34:27 +00:00
Love Hörnquist Åstrand
809368fb9e spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19641 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 18:52:45 +00:00
Love Hörnquist Åstrand
61c32aa510 Include <windc_plugin.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19632 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:39:12 +00:00
Love Hörnquist Åstrand
023089fbf8 Include windc.c and use windc_plugin.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19631 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:38:44 +00:00
Love Hörnquist Åstrand
11c02517ae Call callbacks for emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19630 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:37:52 +00:00
Love Hörnquist Åstrand
9f55326054 Call callbacks for emulating a Windows Domain Controller.
Move the some of the log related stuff to its own function.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:37:12 +00:00
Love Hörnquist Åstrand
69bd8c0b81 Init callbacks for emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19628 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:35:31 +00:00
Love Hörnquist Åstrand
4dd8ec3489 Rename the init function to windc instead of pac.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19627 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:35:07 +00:00
Love Hörnquist Åstrand
03adfc4ceb Callbacks specific to emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19626 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:34:04 +00:00
Love Hörnquist Åstrand
f74250eb28 Handle kx509 requests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19553 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:35 +00:00
Love Hörnquist Åstrand
3ce7195579 Listen to 9878 if kca is turned on.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19552 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:00 +00:00
Love Hörnquist Åstrand
6d254afa9f Include <kx509_asn1.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19551 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:08:15 +00:00
Love Hörnquist Åstrand
c4b7508854 code to parse [kdc]enable-kx509
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19550 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:07:35 +00:00
Love Hörnquist Åstrand
95207976c0 add enable_kx509
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19549 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:56 +00:00
Love Hörnquist Åstrand
2aff6e5795 add kx509.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19548 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:18 +00:00
Love Hörnquist Åstrand
3572041050 Kx509server (external certificate genration).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19545 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:03:53 +00:00
Love Hörnquist Åstrand
837f65e1e9 Remove <digest_asn.h>, its already included in headers.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19538 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 17:03:51 +00:00
Love Hörnquist Åstrand
98e01a4744 Return session key for the NTLMv2 case too
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19533 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 14:40:46 +00:00
Love Hörnquist Åstrand
fb1c8392d1 Prefix internal symbol with _kdc_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19507 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 17:18:14 +00:00
Love Hörnquist Åstrand
450b14e4e3 add digests_allowed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19506 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:24:27 +00:00
Love Hörnquist Åstrand
bcd0cbcf14 return NTLM2 targetinfo structure.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19504 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:14:43 +00:00
Love Hörnquist Åstrand
b54d2595c5 Parse digest acl's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19500 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:49:34 +00:00
Love Hörnquist Åstrand
f424d5432c forward decl;
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19499 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:48:04 +00:00
Love Hörnquist Åstrand
b592e99683 Add digest acl's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19498 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:47:11 +00:00
Love Hörnquist Åstrand
44c3c7620b Add ntlm v2 processing, more verbose logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19497 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 11:30:06 +00:00
Love Hörnquist Åstrand
7576da2827 reorder to show slot here ntlmv2 code will be placed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19475 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 17:27:17 +00:00
Love Hörnquist Åstrand
c40b4081cf Announce that we support key exchange and add bits to detect when it
wasn't used.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19470 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 07:32:40 +00:00
Love Hörnquist Åstrand
fadaad6712 Set error code on wrong lm.length.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19466 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:46:53 +00:00
Love Hörnquist Åstrand
96145a7a51 Add support for generating NTLM2 session security answer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19463 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:19:46 +00:00
Love Hörnquist Åstrand
f280e31a6b Unwrap the NTLM session key and return it to the server.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19422 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-18 21:19:47 +00:00
Love Hörnquist Åstrand
be40e72015 Support NTLM verification, note that the KDC does no NTLM packet
parsing, its all done by the client side, the KDC just calculate and
verify the digest and return the result to the service.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:33:26 +00:00
Love Hörnquist Åstrand
ffada79bc7 Include <heimntlm.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19373 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:22:19 +00:00
Love Hörnquist Åstrand
95936540f6 libkdc needs libheimntlm.la
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19371 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:17:50 +00:00
Love Hörnquist Åstrand
c7d5dd6b32 Less verbose error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19304 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:12:00 +00:00
Love Hörnquist Åstrand
ed5e62f11c Return error codes on failure, improve error reporting.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:03:46 +00:00
Love Hörnquist Åstrand
e1bac0567e (_kdc_as_rep): add AD-INITAL-VERIFIED-CAS to the encrypted ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:24:10 +00:00
Love Hörnquist Åstrand
8300ee6ee2 (_kdc_add_inital_verified_cas): new function, adds an empty (for now)
AD_INITIAL_VERIFIED_CAS to tell the clients that we vouches for the CA.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19261 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:21:11 +00:00
Love Hörnquist Åstrand
9fed7e931e (_kdc_tkt_add_if_relevant_ad): use _kdc_tkt_add_if_relevant_ad to add the SignedPath.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:16:03 +00:00
Love Hörnquist Åstrand
eb2670591c (_kdc_tkt_add_if_relevant_ad): new function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19259 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:15:20 +00:00
Love Hörnquist Åstrand
85bcc19262 (_kdc_pk_rd_padata): leak less memory for ExternalPrincipalIdentifiers
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19250 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 13:10:21 +00:00
Love Hörnquist Åstrand
24ce3844d0 update (c)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19248 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:31:09 +00:00
Love Hörnquist Åstrand
a36abf458c Remove unused function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:25:47 +00:00
Love Hörnquist Åstrand
528e4e53e7 Parse and use PA-PK-AS-REQ.trustedCertifiers
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19244 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 12:21:02 +00:00
Love Hörnquist Åstrand
65d743807c Add comment that the anchors in the signed data really should be the
trust anchors of the client.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 10:42:41 +00:00
Love Hörnquist Åstrand
487bcca4e2 Use strcspn to remove \n from fgets result. Prompted by change by Ray
Lai of OpenBSD via Björn Sandell.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19213 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-04 23:36:36 +00:00
Love Hörnquist Åstrand
c264018278 Add LIB_pkinit to pacify AIX
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19188 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-29 07:39:58 +00:00
Love Hörnquist Åstrand
5b304e5f20 Need better code in the DH parameter rejection case, add comment to
that effect.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19165 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-28 03:41:55 +00:00
Love Hörnquist Åstrand
772ed07a25 Reply KRB5KRB_ERR_RESPONSE_TOO_BIG for too large packets when using
datagram based transports.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19163 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:17:58 +00:00
Love Hörnquist Åstrand
6ff3e7477d Pass down datagram_reply to _kdc_tgs_rep.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19162 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:16:09 +00:00
Love Hörnquist Åstrand
480aff7f9b (_kdc_pk_rd_padata): Pick up supportedCMSTypes and pass in into
hx509_cms_create_signed_1 via hx509_peer_info blob.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19125 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-26 16:38:51 +00:00