oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
29,690 Commits 2 Branches 2 Tags
526317e80e6d54b51cc7c71726090ce85d56c02c
Commit Graph

36 Commits

Author SHA1 Message Date
Isaac Boukris
2ffaba9401 kdc: sign ticket using Windows PAC 
Split Windows PAC signing and verification logic, as the signing has to be when
the ticket is ready.

Create sign and verify the PAC KDC signature if the plugin did not, allowing
for S4U2Proxy to work, instead of KRB5SignedPath.

Use the header key to verify PAC server signature, as the same key used to
encrypt/decrypt the ticket should be used for PAC server signature, like U2U
tickets are signed witht the tgt session-key and not with the longterm key,
and so krbtgt should be no different and the header key should be used.

Lookup the delegated client in DB instead of passing the delegator DB entry.

Add PAC ticket-signatures and related functions.

Note: due to the change from KRB5SignedPath to PAC, S4U2Proxy requests
against new KDC will not work if the evidence ticket was acquired from
an old KDC, and vide versa.

Closes: #767
 2021-09-19 13:25:27 +10:00
Isaac Boukris
544515931b tests: default verify_pac to true in test_ap-req 2021-09-19 13:00:21 +10:00
Isaac Boukris
f4fcf8767c tests: fix a typo in test_ap_req 2021-09-19 13:00:04 +10:00
Nicolas Williams
575c67806b Add bx509d 2019-12-04 21:34:44 -06:00
Luke Howard
2287c250b2 Revert "Revert "Fix tests/plugin/windc.c"" 
windc doesn't link against libkdc, so it doesn't need to check its instance;
however, we will continue to export kdc_get_instance() from libkdc in case
other windc plugins do link against it.
 2019-01-05 10:55:13 +11:00
Luke Howard
e776e6c5ed Revert "Fix tests/plugin/windc.c" 
Will fix by exporting kdc_get_instance() from libkdc.
 2019-01-05 10:47:42 +11:00
Nicolas Williams
9b39978ddd Fix tests/plugin/windc.c 2019-01-04 11:26:28 -06:00
Luke Howard
e739c4d0c2 windc: update test windc plugin to use new load SPI 2019-01-04 15:17:20 +11:00
Quanah Gibson-Mount
7c16ce3457 Minor typo/grammar fixes 2017-03-10 15:47:43 -05:00
Nicolas Williams
2027aa11ed Use --detach in tests to avoid waiting 2016-12-07 19:52:29 -06:00
Nicolas Williams
dbf9750989 Tests: set db-dir so tests don't use /var/heimdal 2016-02-26 01:04:31 -06:00
Love Hörnquist Åstrand
407fcf35fc update client_access 2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
75987ebbae update to match plugin abi 2011-07-23 11:59:06 -07:00
Love Hörnquist Åstrand
7aaba443bc add NTMakefile and windows directories 2011-07-17 12:16:59 -07:00
Love Hornquist Astrand
0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
d91e772a0e adopt syntax 2010-11-28 10:46:26 -08:00
Love Hornquist Astrand
86da42df1d abstract out --no-afslog and --no-unlog 2010-06-01 14:42:16 -07:00
Love Hornquist Astrand
c6bbdb545b First drop of Windows build infrastructure from Secure Endpoints 2009-11-24 12:12:53 -08:00
Love Hörnquist Åstrand
dd133f88ca make compile w/o warning, fixup from abartletts patch 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25309 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-07-05 05:07:16 +00:00
Love Hörnquist Åstrand
42178773ca use test_apreq 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24564 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-01-31 22:10:50 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
68c7f7560e Update to match new API for windc interface. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22702 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-03-22 22:20:29 +00:00
Love Hörnquist Åstrand
6ea6147d09 empty messages.log 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21857 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-08-08 06:59:36 +00:00
Love Hörnquist Åstrand
cc4333b758 remove cvs ignore files 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21026 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-09 03:09:59 +00:00
Love Hörnquist Åstrand
ea808c9c0e use diffrent port, 49188, and hope that it isnt used, help on solaris where the help services runs on port 8888 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20202 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-08 00:59:47 +00:00
Love Hörnquist Åstrand
d5852aaa48 remove files created by tests 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19846 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-11 10:44:01 +00:00
Love Hörnquist Åstrand
1e9aabbe3d Add check to verify the windc module as loaded. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19806 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-10 19:02:24 +00:00
Love Hörnquist Åstrand
f0bfd625d0 Update to validate function signature change. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19800 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-10 15:29:03 +00:00
Love Hörnquist Åstrand
a31d3796ee EXTRA_DIST += krb5.conf.in 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19701 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-04 19:44:44 +00:00
Love Hörnquist Åstrand
8b11693d77 test explicit requested pac and explicit negative requested pac. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19688 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-04 13:23:35 +00:00
Love Hörnquist Åstrand
4e8c37cad5 Add client_access. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19675 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-04 11:10:58 +00:00
Love Hörnquist Åstrand
1901f0475a Verify PAC on server end too. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19673 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-04 11:06:57 +00:00
Love Hörnquist Åstrand
d9d0379273 test tgs-req 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19645 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-03 19:38:14 +00:00
Love Hörnquist Åstrand
fa71fa1c67 log that the function is called. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19644 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-03 19:35:48 +00:00
Love Hörnquist Åstrand
6ce63327d4 test WinDC PAC functionallity 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19633 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-03 15:40:33 +00:00