Commit Graph

83 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
4ad305a90c Drop unused variable.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-21 15:18:37 +00:00
Love Hörnquist Åstrand
6c4ad61bd4 disable anonyous tgs requests
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-21 14:48:42 +00:00
Love Hörnquist Åstrand
85acea1b76 Don't check PAC on cross realm for now.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21258 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-21 14:11:01 +00:00
Love Hörnquist Åstrand
247866e443 Constify.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21041 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-10 06:21:12 +00:00
Love Hörnquist Åstrand
45ebb9c7f2 Only check service key for cross realm PACs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-18 08:34:36 +00:00
Love Hörnquist Åstrand
126ea0e595 Don't check PACs on cross realm requests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20254 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-17 07:52:01 +00:00
Love Hörnquist Åstrand
82f3dca5ec Rename keys to be more obvious what they do.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19809 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 19:43:35 +00:00
Love Hörnquist Åstrand
7e21610a7c Pass down server entry to verify_pac function.
from Andrew Bartlett <abartlet@samba.org>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19797 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 15:22:11 +00:00
Love Hörnquist Åstrand
bee6d08ff3 (tgs_build_reply): check if krb5_generate_random_keyblock failes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19685 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 12:49:45 +00:00
Love Hörnquist Åstrand
8588cd9ebd Scope etype.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19684 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 12:42:51 +00:00
Love Hörnquist Åstrand
f2807ae2c8 rename functions after export some more pac functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19672 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:02:33 +00:00
Love Hörnquist Åstrand
9b7ae5c640 Resign the PAC in tgsreq if we have a PAC.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19669 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 10:56:23 +00:00
Love Hörnquist Åstrand
9140e58024 Get right key for PAC krbtgt verification.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19643 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 19:34:27 +00:00
Love Hörnquist Åstrand
11c02517ae Call callbacks for emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19630 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:37:52 +00:00
Love Hörnquist Åstrand
9fed7e931e (_kdc_tkt_add_if_relevant_ad): use _kdc_tkt_add_if_relevant_ad to add the SignedPath.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:16:03 +00:00
Love Hörnquist Åstrand
772ed07a25 Reply KRB5KRB_ERR_RESPONSE_TOO_BIG for too large packets when using
datagram based transports.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19163 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:17:58 +00:00
Love Hörnquist Åstrand
b9624a871d Use KRB5_KU_OTHER_CKSUM for the impersonate checksum.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19081 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-21 05:14:43 +00:00
Love Hörnquist Åstrand
87500b6c61 (check_KRB5SignedPath): free KRB5SignedPath on successful completion
too, not just the error cases.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-22 15:54:37 +00:00
Love Hörnquist Åstrand
69883abf62 Prefix der primitives with der_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18460 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-14 10:16:45 +00:00
Love Hörnquist Åstrand
8b981cc040 (tgs_parse_request): set cusec, not csec from auth->cusec.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18366 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 06:51:57 +00:00
Love Hörnquist Åstrand
c7b54c3372 Adapt to signature change of _krb5_principalname2krb5_principal.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-06 17:06:30 +00:00
Love Hörnquist Åstrand
cafd935d88 Check the adtkt in the constrained delegation case too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18101 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-18 17:30:19 +00:00
Love Hörnquist Åstrand
2db346fb7d Add signing and checking of tickets to s4u2self works securely.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18074 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-11 13:39:13 +00:00
Love Hörnquist Åstrand
687cb26c9e Remove _kdc_find_etype(), its no longer used.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 11:52:29 +00:00
Love Hörnquist Åstrand
fb086a0312 Adapt to the new sigature of _kdc_find_keys().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17906 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:33:53 +00:00
Love Hörnquist Åstrand
599d3cf216 Change _kdc_db_fetch() to return the database pointer too if needed by
the consumer.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17904 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:45:16 +00:00
Love Hörnquist Åstrand
ce5ef410ee (tgs_build_reply): when checking for removed principals, check the
second component of the krbtgt, otherwise cross realm wont work.
Prompted by report from Mattias Amnefelt.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17806 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-06 15:38:31 +00:00
Love Hörnquist Åstrand
fb9ab0b9d9 (tgs_build_reply): add constrained delegation.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17625 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-06 16:35:26 +00:00
Love Hörnquist Åstrand
a060a07f20 Add impersonation.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17622 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-06 15:07:46 +00:00
Love Hörnquist Åstrand
e030c0d5e1 Split up the reverse cross krbtgt check and local clien must exists test.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17603 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 17:43:03 +00:00
Love Hörnquist Åstrand
23478bc157 Plug old memory leaks, unify all goto's.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17602 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 16:40:14 +00:00
Love Hörnquist Åstrand
cb7d1402f1 Split tgs_rep2 into tgs_parse_request and tgs_build_reply.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17600 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 13:17:42 +00:00
Love Hörnquist Åstrand
379d35fc8f split out krb5 tgs req to make it easier to reorganize the code.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17598 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 11:15:20 +00:00