Commit Graph

20 Commits

Author SHA1 Message Date
Nicolas Williams
57f1545a46 Add support for writing to KDB and dumping HDB to MIT KDB dump format
Before this change Heimdal could read KDBs.  Now it can write to
    them too.

    Heimdal can now also dump HDBs (including KDBs) in MIT format, which
    can then be imported with kdb5_util load.

    This is intended to help in migrations from MIT to Heimdal by
    allowing migrations from Heimdal to MIT so that it is possible
    to rollback from Heimdal to MIT should there be any issues.  The
    idea is to allow a) running Heimdal kdc/kadmind with a KDB, or
    b) running Heimdal with an HDB converted from a KDB and then
    rollback by dumping the HDB and loading a KDB.

    Note that not all TL data types are supported, only two: last
    password change and modify-by.  This is the minimum necessary.
    PKINIT users may need to add support for KRB5_TL_USER_CERTIFICATE,
    and for databases with K/M history we may need to add KRB5_TL_MKVNO
    support.

    Support for additional TL data types can be added in
    lib/hdb/hdb-mitdb.c:_hdb_mdb_value2entry() and
    lib/hdb/print.c:entry2mit_string_int().
2012-05-03 14:24:18 -05:00
Nicolas Williams
c2ec368c36 Add HDB extension for storing policy regarding what historic keys may be used for 2011-07-22 16:06:00 -05:00
Love Hornquist Astrand
f5f9014c90 Warning fixes from Christos Zoulas
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
dd34c02329 spelling, from Tollef Fog Heen via Brian May of Debian 2010-04-11 16:36:15 -07:00
Love Hornquist Astrand
daa2048fd8 simplify? 2009-11-22 12:51:52 -08:00
Love Hornquist Astrand
610737fe90 don't shadow variables, from Matthias Wallnöfer 2009-10-21 20:23:19 -07:00
Love Hörnquist Åstrand
5a9dd54e95 drop RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25319 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:09:16 +00:00
Love Hörnquist Åstrand
4b25c7c880 add hdb_entry_get_pkinit_cert
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24996 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:04:20 +00:00
Love Hörnquist Åstrand
cdc2b37670 switch to krb5_clear_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-10-14 02:56:07 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
7fcd266fdd use krb5_set_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 04:32:32 +00:00
Love Hörnquist Åstrand
6a64e4d44c provide better error string for the common failure case.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21113 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 12:59:32 +00:00
Love Hörnquist Åstrand
9f106cf20a add simple alias support to the database backends
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20236 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-16 23:52:29 +00:00
Love Hörnquist Åstrand
69883abf62 Prefix der primitives with der_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18460 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-14 10:16:45 +00:00
Love Hörnquist Åstrand
00c5c484a9 Prefix der primitives with der_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18459 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-14 10:12:16 +00:00
Love Hörnquist Åstrand
5575d427b3 Add hdb_entry_get_pkinit_hash().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:18:50 +00:00
Love Hörnquist Åstrand
5022bbcee3 (hdb_entry_get_ConstrainedDelegACL): new function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17608 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 19:56:44 +00:00
Love Hörnquist Åstrand
a6b897ef0d (hdb_replace_extension): set error message on failure, not success.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17227 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-25 10:20:22 +00:00
Love Hörnquist Åstrand
406caf3df5 HDB extensions access glue.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-11 20:49:31 +00:00