2f5d801156
change client access message
2011-07-24 20:24:35 -07:00
dfd7a43e44
change client access message
2011-07-24 20:24:35 -07:00
35d4b23a22
start error codes finish message
2011-07-24 20:24:35 -07:00
580b370e08
make pa-data optional
2011-07-24 20:24:35 -07:00
c6a9bdb140
spelling
2011-07-24 20:24:35 -07:00
5edb5d0275
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00
6a74bba8f9
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00
e372cc6b8a
re-shuffle to make c90 compatible
2011-07-24 20:24:35 -07:00
1af9487bff
got fetch armor key
2011-07-24 20:24:35 -07:00
a1feab396e
more ticket bits
2011-07-24 20:24:35 -07:00
d04289855e
more bits
2011-07-24 20:24:35 -07:00
96299ac2bb
no warnings
2011-07-24 20:24:35 -07:00
c148c2b432
unused key
2011-07-24 20:24:35 -07:00
60c713221d
match draft-preauth-framework-14 better
2011-07-24 20:24:35 -07:00
7d30fc38d7
use METHOD-DATA for type compat in kdc/kerberos5.c
2011-07-24 20:24:35 -07:00
3b034b231d
more bits
2011-07-24 20:24:35 -07:00
22cb2c1a1a
export one more
2011-07-24 20:24:34 -07:00
86c4089df1
export more
2011-07-24 20:24:34 -07:00
7802e24170
first drop of the AS-REQ FAST + krb-error FAST codepath
2011-07-24 20:24:34 -07:00
f2c7370609
announce fx-fast
2011-07-24 20:24:34 -07:00
580ba6aa72
KU bits for fast
2011-07-24 20:24:34 -07:00
a41439d52b
spelling
2011-07-24 20:24:34 -07:00
1879af9e43
Break out fast state, shuffle around state so that as-req is inited earlier
2011-07-24 20:24:34 -07:00
04128ac081
Use reply_key from fast layer.
2011-07-24 20:24:34 -07:00
fd7c870550
add reply reply_key
2011-07-24 20:24:34 -07:00
a5e342f8ba
Add fast_state.
2011-07-24 20:24:34 -07:00
74ec640500
Only free ext on replace
2011-07-24 20:23:30 -07:00
f1c1e1bc6e
remove used variables
2011-07-24 20:05:05 -07:00
2ae9bbb915
update (c)
2011-07-24 20:04:02 -07:00
1a6195153f
start to use KRB5_ENCTYPE_
2011-07-24 20:02:10 -07:00
f102ee7831
compiler warning
2011-07-24 19:56:09 -07:00
f9afd37eed
use add_HDB_Ext_KeySet and plug memory leak
2011-07-24 18:14:25 -07:00
c204f3c5ce
drop dependency
2011-07-24 18:08:52 -07:00
c26da364e8
drop dependency since we need the autoconf to overwrite this
2011-07-24 18:06:33 -07:00
e32186d9de
expore more
2011-07-24 16:15:06 -07:00
8060a561db
switch to KRB5_ENCTYPE
2011-07-24 16:02:22 -07:00
c97322adf2
fix compile warning
2011-07-24 15:46:11 -07:00
8fccb51d49
Merge pull request #12 from nicowilliams/krb5_admin_patches_2nd
...
Krb5 admin patches 2nd
This has all the patches needed for krb5_admind to build and pass most tests, that includes:
- more kadm5 API compatibility (including very basic profile functionality)
- multi-kvno support (useful for key rollovers) (a test for this is included in tests/db/check-kdc)
Unfinished:
- password history (currently uses key history, needs to be separated and use digests)
- policies (only default policy allowed)
- mit kdb changes not tested yet
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 15:41:36 -07:00
1124c4872d
KVNOs are krb5uint32 in RFC4120, make it so
2011-07-24 14:23:45 -07:00
671e231d75
fix warning
2011-07-24 14:09:23 -07:00
2e35198908
Add version-script.map to _DEPENDENCIES.
...
Added to 11 out of 14 directories with map files. Not lib/ntlm,
lib/hcrypto and kdc which have the map file as an explicit dependency
to _OBBJECTS.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 14:07:59 -07:00
f60ec15834
partly unify enctype/keytype since there is only enctypes
2011-07-24 14:03:08 -07:00
16eabf8e4c
add an invalid protection level to the enum
2011-07-24 14:00:23 -07:00
af4aea85ae
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
8f2294e1f9
switch order of type and GSSAPI_LIB_VARIABLE
2011-07-24 13:00:36 -07:00
052c5767fd
fixup type for GSS_C_ATTR_LOCAL_LOGIN_USER
2011-07-24 12:47:55 -07:00
d434bda588
make sure keylen is a multiple of 2
2011-07-24 12:34:51 -07:00
84bc108d8f
lib/krb5: Allow any kvno to match when searching the keytab.
...
Windows does not use a KVNO when it checks it's passwords, and MIT
doesn't check the KVNO when no acceptor identity is specified (looping
over all keys in the keytab).
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org >
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 10:37:40 -07:00
c5db78a3c2
switch to use use_strongest_server_key
...
use the same behavior as 1.4 release.
2011-07-24 10:33:28 -07:00
ae9ac01f3f
Typo
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 10:29:47 -07:00
Love Hornquist Astrand