oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
25,307 Commits 2 Branches 2 Tags
3b51f94c2b399a5dac115cf03229a600e5d64eda
Commit Graph

14520 Commits

Author SHA1 Message Date
Love Hornquist Astrand
c8b05eef61 (base64_encode): bound input length to /4 of max int and positive 2009-07-30 10:36:39 +02:00
Love Hornquist Astrand
5373d3a869 Allow parsing of cert fail unless HX509_CERTS_UNPROTECT_ALL is set. 2009-07-30 10:20:04 +02:00
Love Hornquist Astrand
1bdf51f26f (strpoolcollect): allow p == NULL, return the empty string (allocated) 2009-07-30 10:08:48 +02:00
Love Hornquist Astrand
0da57a49d7 Make cgetstr() not return allocated memory on failure [CID-170] 2009-07-30 10:04:44 +02:00
Love Hornquist Astrand
90ed2b6790 Check result of calloc [CID-181] 2009-07-30 09:44:44 +02:00
Love Hornquist Astrand
3f802d359f Use right variable [CID-181] 2009-07-30 09:41:42 +02:00
Love Hornquist Astrand
e1ecb6f7a6 Catch uninited variable [CID-182] 2009-07-30 09:40:05 +02:00
Love Hornquist Astrand
ca6e428093 check that we don't pass negative numbers of memset [CID-169] 2009-07-30 07:53:58 +02:00
Love Hornquist Astrand
896391a56b Double free of sp on empty list of creds [CID-183] 2009-07-30 07:46:37 +02:00
Love Hornquist Astrand
a1964f4747 use after free [CID-184] [CID-185] 2009-07-30 07:38:24 +02:00
Love Hornquist Astrand
9581e59bde FORWARD_NULL fixes [CID-163] and friends 2009-07-30 07:36:03 +02:00
Love Hornquist Astrand
b9644d7060 Test on wrong variable 2009-07-30 07:30:27 +02:00
Love Hornquist Astrand
b1dc4dc97e (_hx509_Name_to_string): free memory on failure (that should not happen) [CID 176] 2009-07-30 07:25:36 +02:00
Love Hornquist Astrand
4e516cec33 Pruned to aggressivly 2009-07-29 23:14:44 +02:00
Love Hornquist Astrand
2e1ebf8598 add export/import cred 2009-07-29 23:12:16 +02:00
Love Hornquist Astrand
9b710bed81 store is never read again 2009-07-29 22:37:58 +02:00
Love Hornquist Astrand
fa502c6648 Add support for gss_{import,export}_cred() as requested by metze 
Works for krb5 and SPNEGO mechanisms. Kerberos credentials are passed as
credential cache names, or if there are memory based credentials, inband in the protocol. This means that the credentials buffers must be keep secret.

As documented by IBM (they have the wrong prototype though)
and GGF (GSS-API Extensions) back in 2001
 2009-07-29 13:36:02 +02:00
Love Hornquist Astrand
e5c42ba42f rename krb5_storage_from_emem in documentation 2009-07-28 17:51:53 +02:00
Love Hornquist Astrand
565236c603 Add store-cred to the dispatch table 2009-07-28 09:50:05 +02:00
Love Hornquist Astrand
c140f0255c Implement core of _gsskrb5_store_cred() 2009-07-27 09:42:46 +02:00
Love Hornquist Astrand
de0ae78c4e Remove dlfcn implementation for AIX since nowadays AIX have dlopen() 
Also drop license and copyright statement
 2009-07-24 04:25:39 +02:00
Love Hornquist Astrand
1dd94e44ba Switch to macros for c++ extern "C" to please editors that want to autoindent 2009-07-23 19:27:34 +02:00
Love Hornquist Astrand
6d9354edf7 x 2009-07-21 10:29:53 -07:00
Love Hornquist Astrand
ebb3dd62c0 See README.dlfcn for license 2009-07-21 10:29:44 -07:00
Love Hornquist Astrand
7e4854250e Actually register new plugins and plug a related memory leak 2009-07-19 21:23:56 -07:00
Love Hornquist Astrand
311ce98d85 (hdb_sqlite_rename): make rename work when there is a prefix 2009-07-19 18:42:02 -07:00
Love Hornquist Astrand
bd073cfd72 Limit maxinum retries of BUSY/BLOCK/LOCKED operations to MAX_RETRIES (default 10) 2009-07-19 18:01:51 -07:00
Love Hornquist Astrand
82150be255 allow loading sqlite 2009-07-19 17:58:53 -07:00
Love Hornquist Astrand
51fbbf93e3 (log_file): use strvisx rightly 2009-07-19 17:52:53 -07:00
Love Hornquist Astrand
c7c58feb3f add NTLM name for hdb layer to make searching diffrently the regular "names" 2009-07-18 10:17:37 -07:00
Love Hornquist Astrand
317d837d0f krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt deprecated 2009-07-17 20:39:35 -07:00
Love Hornquist Astrand
9211c47a30 Deprecate krb5_get_cred_from_kdc{,_opt} since they are replacement functions 2009-07-17 20:38:32 -07:00
Love Hornquist Astrand
80021f5e05 Make get_cred_kdc_any a private function. 2009-07-17 20:36:42 -07:00
Love Hornquist Astrand
517be51cc5 Test init_sec_context using keytab based credentials 
Based on problem description from Rick Macklem in [HEIMDAL-197],
problem still not fixed.
 2009-07-17 15:57:45 -07:00
Love Hornquist Astrand
8b71d0b93f Prefer the realm of the user when doing referrals style ISC krb5-get-creds 
The the realm of the user's principal and prefer that when doing a lookup.
This code still need to be smarter can cache the "initial value" -> positive result
to avoid roundtrips to the KDC.
 2009-07-17 15:43:19 -07:00
Love Hornquist Astrand
d4ca938866 Only load plugins once and never unload them 
Its expensive to load and unload plugins all the time, so lets stop doing that.
Run over the plugin directory and load all plugins and remember them all.
In the future, something should watch the directory and if it changes,
load the new plugins that was put there.
 2009-07-17 15:18:00 -07:00
Love Hornquist Astrand
de5110c05a (krb5_get_kdc_cred): make sure that out_creds points to NULL on failure 2009-07-16 23:54:54 -07:00
Love Hornquist Astrand
d0aadb9a0d Fix depenencies for test_punycode 
This only matters in development enviroments and where you run make check.
 2009-07-16 22:26:43 -07:00
Love Hörnquist Åstrand
f8d7804396 More tests for HC_DEPRECATED 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25337 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-16 18:28:44 +00:00
Love Hörnquist Åstrand
e9cea2daee More tests for HC_DEPRECATED 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25336 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-16 18:28:24 +00:00
Love Hörnquist Åstrand
6c56033e6f improve msft compiler case 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25335 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-16 18:28:12 +00:00
Love Hörnquist Åstrand
6a85bbcc65 More tests for KRB5_DEPRECATED 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25334 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-16 18:27:52 +00:00
Love Hörnquist Åstrand
57e31f7593 More tests for GSSAPI_DEPRECATED 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25333 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-16 18:27:37 +00:00
Love Hörnquist Åstrand
2b54af87e9 Add paranoid printing using strvisx. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25332 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-15 23:31:55 +00:00
Love Hörnquist Åstrand
de5f912e02 Contributed by Andrew Bartlett: 
When Samba4's 'fake' GSSAPI client contacts Windows 2008, and does not
request AP_MUTUAL_REQUIRED, it does not elicit a response packet.

We had previously assumed it was unconditional.  Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25328 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-15 22:18:00 +00:00
Love Hörnquist Åstrand
6a24e13678 Use hdb_get_dbinfo() to find the realms. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25326 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-15 22:17:30 +00:00
Love Hörnquist Åstrand
8eb14db155 remove unused variable 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25323 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-15 22:16:21 +00:00
Love Hörnquist Åstrand
9807194527 check for NULL pointer not no NULL pointer... 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25321 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-08 00:07:05 +00:00
Love Hörnquist Åstrand
d3f16452e0 make compile 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25320 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-05 05:20:10 +00:00
Love Hörnquist Åstrand
5a9dd54e95 drop RCSID 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25319 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-05 05:09:16 +00:00