Love Hörnquist Åstrand
6815452550
Added certificate revoke information from configuration file.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17054 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-12 13:21:46 +00:00
Johan Danielsson
125128ed5c
use exactly six X:es with mkstemp
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17003 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 09:55:12 +00:00
Love Hörnquist Åstrand
145960cda9
Add pool of certificates to help certificate path building for clients
...
sending incomplete path in the signedData.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16856 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-30 03:12:06 +00:00
Love Hörnquist Åstrand
2716c51d68
Default to use DH when fetching keys.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16381 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-12 12:43:01 +00:00
Love Hörnquist Åstrand
bef3d96fb7
avoid shadowing variables
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15543 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 07:29:03 +00:00
Love Hörnquist Åstrand
ac8c82785c
s/optind/optidx/
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15541 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 07:14:58 +00:00
Love Hörnquist Åstrand
54f8d95f72
(main): catch KRB5_CONFIG_BADFORMAT from krb5_init_context
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15369 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-14 00:14:43 +00:00
Love Hörnquist Åstrand
ea7df6b1e6
krb5_get_init_creds_opt_set_pkinit
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15042 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-04-30 16:17:04 +00:00
Love Hörnquist Åstrand
5ed2d6418f
add forward declaration of krb5_krb_auth_data
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14902 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-04-23 20:29:16 +00:00
Love Hörnquist Åstrand
98f267a220
widen lifetime/renewal warning text field, also make use of
...
unparse_time_approx, no need to be specific to the second when ticket
needs to be renewed or their lifetime.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14644 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-03-15 23:08:35 +00:00
Love Hörnquist Åstrand
af89d92dfe
(get_new_tickets): only complain about ticket renewable lifetime when
...
the user asked for a specific renewable lifetime
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14356 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-11-18 03:39:22 +00:00
Love Hörnquist Åstrand
c4cacd7a06
adapt to new signature of krb5_get_init_creds_opt_set_pkinit
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14295 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-07 10:20:41 +00:00
Johan Danielsson
5e83b93a1e
make sure we don't always get renewable creds
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14229 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-09-14 14:40:10 +00:00
Love Hörnquist Åstrand
5cb42dc81b
move "setpag if (argc < 1)" to common path
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13851 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-05-14 20:00:19 +00:00
Johan Danielsson
ed962c1a41
print some diagnostics if the exec fails
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13835 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-05-06 11:50:33 +00:00
Johan Danielsson
26457b7135
replace krb5_free_creds_contents by krb5_free_cred_contents
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13790 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-25 19:25:35 +00:00
Love Hörnquist Åstrand
8bc1b3e836
merge certificate/private_key to a user_id
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13724 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-16 00:40:21 +00:00
Love Hörnquist Åstrand
2bf6c25dcd
its PAC not PAQ
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13653 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-30 15:41:04 +00:00
Love Hörnquist Åstrand
11b133e1c5
adapt to signature change of krb5_get_init_creds_opt_set_pkinit
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13609 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-21 22:34:13 +00:00
Love Hörnquist Åstrand
9197bbb0c8
rename ca_dir to pkinit/x509_anchors since its more like that language
...
in RFC3280
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13494 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-09 21:06:10 +00:00
Love Hörnquist Åstrand
5ca59aff01
when running kinit with a subprocess, fetch new tickets after half the
...
tickets lifetime
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13465 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-07 21:17:53 +00:00
Love Hörnquist Åstrand
e96991c20e
(renew_validate): if renewable_flag and not time specifed, use "1 month"
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13267 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-01-13 10:09:50 +00:00
Love Hörnquist Åstrand
554c582f3e
make -9 work again
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13228 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-18 19:33:15 +00:00
Love Hörnquist Åstrand
c5919960a3
(main): return the return value from simple_execvp
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13162 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-01 13:09:30 +00:00
Love Hörnquist Åstrand
7d8cc56531
don't use PKINIT DH per default since its too slow
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13160 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-26 02:41:53 +00:00
Love Hörnquist Åstrand
346d1a2643
add flag to make it work with dh
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13155 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-25 11:02:09 +00:00
Love Hörnquist Åstrand
80c1204118
XXX add some "struct foo;" glue for pkinit structures that isn't used
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13139 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 23:45:47 +00:00
Love Hörnquist Åstrand
ceffd3f0a4
add [appdefaults]kinit/pkinit-ca-dir
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13100 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 19:23:51 +00:00
Love Hörnquist Åstrand
237ff82b29
add pkinit support
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13094 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:56:38 +00:00
Love Hörnquist Åstrand
f2fe7866d3
When running kinit in "fork mode" do pagsh independent of krb4, also
...
always do krb4 setup of cc. Always try to destroy the v4 cc.
all boolean --{,no-}request-pac that will request pac or not
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12960 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 12:21:42 +00:00
Love Hörnquist Åstrand
f5104e0d11
don't get v4 tickets by default
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12894 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-21 13:15:34 +00:00
Love Hörnquist Åstrand
5d190295aa
add context argument to krb5_get_init_creds_opt_alloc
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12783 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-08 15:28:20 +00:00
Love Hörnquist Åstrand
54fc57ccb5
s/des_read_pw_string/UI_UTIL_read_pw_string/
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-03 09:37:03 +00:00
Love Hörnquist Åstrand
ae9f3656f7
use krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12733 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-02 23:45:38 +00:00
Love Hörnquist Åstrand
71635344e5
write out v4 credential caches with _krb5_krb_tf_setup
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12408 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-06-28 21:02:36 +00:00
Johan Danielsson
7eb7222d36
add -A as an alias for --no-addresses
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12393 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-06-23 11:38:22 +00:00
Love Hörnquist Åstrand
77299ee4c7
get token even if there isn't v4 support
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-05-08 18:51:36 +00:00
Johan Danielsson
03a7ed8ec5
(do_524init): free principals
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11422 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-09 22:17:53 +00:00
Johan Danielsson
19ae5f062f
(do_v4_fallback): don't use krb_get_pw_in_tkt2 since it might not
...
exist, and we don't actually care about the key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11184 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-08-21 12:21:31 +00:00
Johan Danielsson
406ec954e9
print a notice if the returned ticket life/renew is different from the
...
requested
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11044 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-07-01 16:23:56 +00:00
Johan Danielsson
5021c1b2c2
add command line switch for extra addresses
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10971 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-05-07 09:21:06 +00:00
Assar Westerlund
5e75a6ed64
allow specification of afslog in krb5.conf, noted by jhutz@cs.cmu.edu
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10755 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-09-29 15:59:08 +00:00
Johan Danielsson
f8a8bcf466
get v4_tickets by default
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10624 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-09-02 16:57:32 +00:00
Johan Danielsson
df4581e760
use appdefaults for everything. defaults are now as in kauth.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10612 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-08-31 10:01:31 +00:00
Assar Westerlund
a5bcd83ab5
(renew_validate): invert condition correctly. get v4 tickets if we
...
succeed renewing
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10361 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-19 16:54:42 +00:00
Assar Westerlund
45de301338
re-do some of the v4 fallbacks:
...
look at get-tokens flag
do not print extra errors
do not try to do 524 if we got tickets from a v4 server
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10281 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-06 14:37:38 +00:00
Johan Danielsson
453092b9a8
make this compile without krb4 support
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10225 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-02 19:12:22 +00:00
Assar Westerlund
ae2453241d
remove extra clearing of password and some redundant code
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10206 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-06-29 17:39:11 +00:00
Johan Danielsson
73436cba4f
move ticket conversion code to separate function, and call that from a
...
couple of places, like when renewing a ticket; also add a flag for
just converting a ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10203 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-06-29 16:57:04 +00:00
Assar Westerlund
b7eeb7eb8d
(main): dereference result from krb5_princ_realm. from Thomas Nystrom
...
<thn@saeab.se >
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10124 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-06-19 09:02:32 +00:00