oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
27,704 Commits 2 Branches 2 Tags
31be932fe83d74ffe1c353e035c981dd91756728
Commit Graph

41 Commits

Author SHA1 Message Date
Viktor Dukhovni
bb895bdd90 Fix k5login_authoritative 
In the previous implementation when .k5login or .k5login.d existed
and k5login_authoritative was false, no further plugins were tried.
Also when k5login_authoritative was true and .k5login did not match,
the directory was never tried.
 2014-01-08 21:46:06 -05:00
Viktor Dukhovni
a825143e73 The k5login_directory parameter and SYSTEM-K5LOGIN[:directory] are supposed to be directories, not path templates with %{luser} substitution 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2013-04-24 16:25:59 -07:00
Jeffrey Altman
8257cc2232 Plugin functions should be KRB5_LIB_CALL 
Plugin functions should be KRB5_LIB_CALL for speed on Windows.

Change-Id: Iaa4dcf73fd2e29e3f95feede5217eac4eaded4e2
 2012-03-13 23:56:11 -04:00
Nicolas Williams
6dd66df594 Make master build on Windows 
Add strtoll()/strtoull() to lib/roken
    Add stdint.h to lib/roken (Windows only)
    Add logic to detect whether to use lib/roken's stdint.h based on
        Visual Studio version
    Add include of stdint.h in generated ASN.1 code
    Export missing symbols for 64-bit integers in lib/asn1
    Export missing symbols for FAST
    Add missing sources to kdc/NTMakefile
    Fix issue in kuserok
    Fix bsearch issues
 2012-01-17 12:10:14 -06:00
Nicolas Williams
4630ef1bdc Fix kuserok.c:check_owner_file(), make tests/kdc/check-authz run 2011-12-14 18:01:35 -06:00
Love Hornquist Astrand
d453899462 split user and dir, use rk_getpwnam_r 2011-12-12 21:53:41 -08:00
Love Hornquist Astrand
167084b3e7 ident 2011-12-12 21:28:52 -08:00
Nicolas Williams
3109770484 Address code review comments (use _krb5_homedir_access()) 2011-12-10 14:06:09 -06:00
Nicolas Williams
b9f8e6d956 Add DENY rule for krb5_kuserok() and update manpage 2011-12-08 13:34:02 -06:00
Nicolas Williams
ad7e54d698 Generalize token expansion to allow for context-specific tokens 2011-12-08 13:33:37 -06:00
Nicolas Williams
6aec02f979 Make krb5_kuserok() pluggable and add features (including MIT config compat) 2011-12-08 13:33:36 -06:00
Love Hornquist Astrand
1b88a3b6c7 Only does implicit matching for first component, reported by Harry Coin 2011-10-14 00:33:57 +02:00
Love Hornquist Astrand
0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
aa7385ea96 propper quoting for doxygen 2010-06-14 20:39:40 -07:00
Asanka Herath
154de6b3a3 krb5_kuserok() only does the local principal test on Windows 
Remove the other tests for now.  The file and directory access checks must be
made against the respective DACLs.
 2010-05-26 10:38:39 -04:00
Love Hornquist Astrand
f3ea26c759 remove unused variable 2010-01-08 12:58:20 +01:00
Asanka Herath
a0ae9f5a0e Merge remote branch 'h-github/master' into win32-port2 
* h-github/master: (64 commits)
  refix socket wrappers with rk_
  Patch from Secure Endpoints/Asanka Herath for windows support
  unset KRB5CCNAME
  its really just LIBADD more most of them
  correct quoting
  Use -lpthread for modern freebsd instead
  clean KRB5CCNAME and KRB5_CONFIG, require test to reset them
  more up ${env_setup}
  use PTHREADS_LIBADD for freebsd6 and newer
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  switch to PTHREADS_LIBADD
  log what the error string say too
  More debug logging
  sprinkle more 'echo "test failed"'
  sprinkle 'echo "test failed"'
  use calloc(), indent more prettier
  in sh, equal compare is really = for strings, not ==
  Check for duplicates, already loaded mechs
  ...

Conflicts (resolved):
	lib/krb5/auth_context.c
	lib/krb5/changepw.c
	lib/krb5/context.c
	lib/krb5/error_string.c
	lib/krb5/kuserok.c
	lib/krb5/libkrb5-exports.def.in
	lib/krb5/net_write.c
	lib/krb5/store_fd.c
	lib/krb5/test_cc.c
	lib/roken/strerror_r.c
 2009-12-21 13:44:00 -05:00
Love Hornquist Astrand
687db64c56 Patch from Secure Endpoints/Asanka Herath for windows support 2009-12-21 08:45:28 +01:00
Love Hornquist Astrand
2204b852a7 Merge branch 'master' into wip/win32-port2 2009-11-24 21:46:10 -08:00
Asanka Herath
d00f9984a5 Make roken build on windows 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2009-11-24 21:42:02 -08:00
Asanka Herath
b1063ea8fc Initial Windows port 2009-11-24 10:11:14 -08:00
Love Hornquist Astrand
850f9be110 fix docxygen errors 2009-08-19 16:35:14 -07:00
Love Hornquist Astrand
90bbf03216 Document krb5_kuserok() 2009-08-18 13:25:30 +02:00
Love Hörnquist Åstrand
942a821fab remove RCSID 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
ffd78392d3 close-on-exec 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23449 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-07-27 12:09:39 +00:00
Love Hörnquist Åstrand
326478ac32 (check_directory): use passed directory name 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16048 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-09-09 10:33:33 +00:00
Love Hörnquist Åstrand
23f6210e8f (krb5_kuserok): use POSIX_GETPWNAM_R instead of HAVE_GETPWNAM_R 
From: Dave Love <d.love@dl.ac.uk>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15103 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-09 15:41:45 +00:00
Johan Danielsson
67b2fd15f7 check the user's ~/.k5login.d directory for access files, all of which 
is handled like the regular ~/.k5login


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15083 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-05-04 12:11:22 +00:00
Love Hörnquist Åstrand
dd3ec19f74 use asprintf to avoid truncating pathnames 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14856 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-04-19 18:59:46 +00:00
Love Hörnquist Åstrand
796e0562a0 use getpwnamn_r if it exists 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14842 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2005-04-19 05:23:42 +00:00
Johan Danielsson
8964d4ead4 if a .k5login file exist, don't give implicit rights to anyone; also 
check owner/mode of .k5login


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14132 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-08-19 15:31:40 +00:00
Love Hörnquist Åstrand
91351971f7 add KRB5_LIB_FUNCTION to all exported functions 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13863 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-05-25 21:46:46 +00:00
Love Hörnquist Åstrand
175d6d3dbf (krb5_kuserok): preserve old behviour of function and return FALSE 
when there isn't a local account for `luser'.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11707 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-03-13 19:53:43 +00:00
Jacques A. Vidrine
d29f4a9e27 Use strcspn to convert the newline to NUL in fgets results. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11462 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-09-16 17:32:11 +00:00
Johan Danielsson
c5b916ca6f remove advertising clause 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7464 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1999-12-02 17:05:13 +00:00
Assar Westerlund
0d3b242182 (krb5_kuserok): use `krb5_get_default_realms' 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7047 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1999-09-28 02:26:39 +00:00
Johan Danielsson
5a32a5c8e7 Add copyright notice. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2389 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1997-07-16 21:40:05 +00:00
Assar Westerlund
bf07fd8e27 something 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1983 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1997-07-06 21:36:45 +00:00
Assar Westerlund
e41b631fb9 new file 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1978 ec53bebd-3082-4978-b11e-865c3cabbd6b
 1997-07-06 21:05:20 +00:00