Commit Graph

26428 Commits

Author SHA1 Message Date
Love Hornquist Astrand
177122d8b9 use krb5_get_error_message for logging 2011-03-12 13:23:07 -08:00
Love Hornquist Astrand
c05773d443 drop gss_name_any since it removed from the draft 2011-03-12 12:50:59 -08:00
Love Hornquist Astrand
4248882381 drop gss_name_any since it removed from the draft 2011-03-12 12:49:42 -08:00
Love Hornquist Astrand
fbf5cff0ac Patch from Luke Howard to allow dynamic gss_mo 2011-03-12 12:45:53 -08:00
Luke Howard
2b2ab30f53 Add naming extension SPIs
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-03-12 12:35:43 -08:00
Luke Howard
6ffdb884e8 Add naming extension SPIs
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-03-12 12:30:41 -08:00
Love Hornquist Astrand
b59a20bc1f clarify documentation 2011-03-12 11:37:13 -08:00
Love Hornquist Astrand
ef045438c9 no support for semaphores w/o pthreads 2011-03-12 11:37:13 -08:00
Stefan Metzmacher
a02402bb19 HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_request() and _kdc_tgs_rep()
metze

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-03-12 11:37:13 -08:00
Love Hornquist Astrand
cb2aa28c7d Include <heimbase.h> 2011-03-12 11:37:12 -08:00
Love Hornquist Astrand
642b748a88 https://github.com/heimdal/heimdal/pull/7
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-03-04 02:00:07 -08:00
Martin von Gagern
2caea73cef Make prim static to prevent its being exported.
Having that symbol exported clobbers the namespace and makes other
apps fail, most notably pdftex. I don't believe that the symbol is in
fact intended for public use. Fixes http://bugs.gentoo.org/357235 .
2011-03-03 18:27:54 +01:00
Luke Howard
65ebfb5712 Merge branch 'master' of github.com:heimdal/heimdal
Conflicts:
	lib/gssapi/gssapi/gssapi.h
	lib/gssapi/mech/gss_mech_switch.c
2011-02-28 10:21:31 +11:00
Love Hornquist Astrand
1ec5eff475 bump version of libgssapi, from Eray Aslan 2011-02-26 13:10:06 -08:00
Jelmer Vernooij
e380769729 kdc.h: Include hdb.h first, so kdc.h can be included standalone.
This makes it a bit easier to find libhdb in e.g. configure tests and
is consistent with the main header files for the other Heimdal
libraries, none of which has any prerequisite other headers.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-02-26 13:06:15 -08:00
Derrick Brashear
c5d0acb859 Correct "not newer" etypes per RFC 4121
Section 1 of RFC 4121 describes behavior which
    applies when using "newer" etypes, then goes on in
    table form to list etypes which are not newer.
    While it specifies it is ok to use new token formats
    when both initiator and acceptor are known to handle them,
    this code makes no such verification, and encoded an
    incorrect set of etypes as "not newer". Correct the list.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-02-24 19:22:25 -08:00
Jelmer Vernooij
a7b851fad0 gitignore: Ignore generated binaries.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-02-23 19:47:48 -08:00
Jelmer Vernooij
36ade8b509 hx509: Make various functions used by Samba public.
* hx509_cert_public_encrypt
* hx509_parse_private_key
* hx509_private_key_assign_rsa
* hx509_private_key_free
* hx509_private_key_private_decrypt
* hx509_private_key_init
* hx509_private_key2SPKI
* hx509_request_get_name
* hx509_request_get_SubjectPublicKeyInfo
* hx509_request_free
* hx509_request_init
* hx509_request_set_name
* hx509_request_set_SubjectPublicKeyInfo

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-02-23 19:47:28 -08:00
Andrew Bartlett
6ee82593ec heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as well
This fixes Win2003 domain logons against Samba4, which need a
canonicalised reply, and helpfully do set that flag.

Specifically, they need that realm in krbtgt/realm@realm that these
both match exactly in the reply.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Feb 17 06:40:53 CET 2011 on sn-devel-104

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-02-23 19:46:21 -08:00
Love Hornquist Astrand
1f59fe0edf move up internal framework to avoid using already installed frameworks 2011-02-12 09:49:35 -08:00
Love Hornquist Astrand
8704b871ff add enc-pa-rep(15) to ticket flags 2011-02-06 16:35:36 -08:00
Love Hornquist Astrand
2fb63b37e7 add KRB5_KU_AS_REQ 2011-02-06 16:35:10 -08:00
Love Hornquist Astrand
fb29123dfd add KRB5-PADATA-REQ-ENC-PA-REP 2011-02-06 16:28:48 -08:00
Love Hornquist Astrand
9c7c6eadd3 add Jaideep Padhye and sort 2011-02-02 21:38:02 -08:00
Love Hornquist Astrand
7e1ba19fda setup cfx context, found by Jaideep Padhye 2011-02-02 21:37:26 -08:00
Love Hornquist Astrand
b746f1ce34 add _kdc_db_fetch and _kdc_free_ent for digest-service 2011-01-30 12:12:30 -08:00
Andrew Tridgell
9e1d467534 s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY
this e_data field in a kerberos error packet tells windows to do clock
skew recovery.

See [MS-KILE] 2.2.1 KERB-ERROR-DATA

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-30 11:26:31 -08:00
Matthieu Patou
8ce821c387 heimdal: make some private key manipulation function public
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-26 12:03:50 -08:00
Matthieu Patou
4c507594d3 heimdal: make hx509_cert_public_encrypt public
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-26 12:03:35 -08:00
Andrew Bartlett
995d305f8c lib/com_err only use error_message for the exported libcom_err
This avoids using the same function name in compile_et internally

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-26 12:00:32 -08:00
Jelmer Vernooij
5ff461d0af kcc: Add explicitly link against LIB_readline.
Fixes linking when using binutils-gold (used by e.g. Ubuntu natty).

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-25 17:52:53 -08:00
Love Hornquist Astrand
4be5db6a32 define GSS_IOV_BUFFER_FLAG_ALLOCATE and friends 2011-01-18 16:49:03 +01:00
Love Hornquist Astrand
49ca1a40fa export hx509_find_private_alg 2011-01-12 17:49:12 +01:00
Matthieu Patou
d083ae19af export hx509_private_key_ops
export hx509_private_key_ops

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-12 17:45:17 +01:00
Luke Howard
4304e719a6 Add SPI for dynamically loading mechanism object information 2011-01-09 22:16:18 +11:00
Luke Howard
45cd381f53 Cleanup API-as-SPI compatibility layer 2011-01-09 22:05:27 +11:00
Luke Howard
f52d919a50 Fix incorrect argument order 2011-01-09 21:24:07 +11:00
Luke Howard
728fd7cad2 Merge branch 'master' of github.com:heimdal/heimdal 2011-01-05 15:49:15 +11:00
Luke Howard
21c5987018 Rename GSS_IOV_BUFFER_TYPE_FLAG to GSS_IOV_BUFFER_FLAG
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-03 13:22:57 +01:00
Luke Howard
0b4f6bbfc2 Use RTLD_GROUP
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-03 13:21:47 +01:00
Luke Howard
5b47a8816d MIT SASL/attribute introspection SPI compat 2011-01-03 22:51:51 +11:00
Luke Howard
95cabf578c Rename GSS_IOV_BUFFER_TYPE_FLAG to GSS_IOV_BUFFER_FLAG 2011-01-03 22:13:20 +11:00
Love Hornquist Astrand
9427bcc22e log more version numbers 2011-01-03 12:12:18 +01:00
Jelmer Vernooij
1ad64fe599 hdb.h: Include krb5.h first, so hdb.h can be included standalone.
This makes it a bit easier to find libhdb in e.g. configure tests and
is consistent with the main header files for the other Heimdal
libraries, none of which has any prerequisite other headers.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-03 11:51:09 +01:00
Luke Howard
cace66a435 Add naming extension SPIs 2011-01-03 14:45:07 +11:00
Luke Howard
77121ec58c Use RTLD_GROUP 2011-01-03 14:05:47 +11:00
Luke Howard
098148ac20 MIT SPI compat 2011-01-02 20:30:57 +11:00
Jelmer Vernooij
1bc55fab42 Explicitly link against required libraries.
This breaks on some newer systems which enable --as-needed by default.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-12-19 22:50:00 -08:00
Jelmer Vernooij
0c7e233195 base: Make heim_cmp global, as it is used by test_base.
"make checK" breaks without this symbol.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-12-19 22:49:41 -08:00
Love Hornquist Astrand
fbf5673e77 add Donald Norwood, our wiki master 2010-12-19 22:46:43 -08:00