977acdd84d
Always send subkey and assume reply is encrypted using subkey
2009-10-11 09:12:01 -07:00
8e08aa0a15
Use krb5_free_keyblock()
2009-10-11 08:45:51 -07:00
4bab1141d8
syntax error, from Harald Barth
2009-10-06 09:36:18 -07:00
57b40643b9
use server name for referral decision
2009-10-06 07:38:29 -07:00
ceac2815bb
Just use RAND_bytes() for generating random bytes
2009-10-06 06:00:24 -07:00
6d1d17efed
don't canonicalize names that are short then 2 name element
...
Since KDC will probably guess wrong on them, and doing
afs@CLIENT-REALM have too large change of actually working.
2009-10-05 22:07:47 -07:00
d7e7640d46
fix argumentin doxygen
2009-10-05 20:29:37 -07:00
a132ffe757
Simplify krb5_build_authenticator and unexport
2009-10-05 19:52:28 -07:00
cc65dc4e8e
Just make a copy of the cksum instead of trying to work around the
...
fact that its not really copied.
2009-10-05 19:25:46 -07:00
753e2cc925
Check that enctypes are valid/enabled before trying to request them
2009-10-05 19:17:11 -07:00
0d10dfb529
doxygen
2009-10-04 11:33:45 -07:00
b0f73165a7
use krb5_make_principal
2009-10-04 11:29:54 -07:00
dc31556b7d
use krb5_generate_subkey_extended
2009-10-04 11:12:43 -07:00
4f6759157b
move krb5_generate_subkey to deprecated and provide doxygen
2009-10-04 11:02:44 -07:00
615820b0af
move krb5_generate_subkey here and deprecate
2009-10-04 11:02:43 -07:00
100c440153
Handle windows windows LH with interesting content info packets (broken)
2009-10-01 10:38:30 -07:00
18f2c32463
make _krb5_pk_set_user_id update ->cert too
2009-09-29 14:27:47 -07:00
91e067e925
Use hx509_context that build from krb5_context
2009-09-29 13:14:20 -07:00
1e65f30a2d
drop hx509_context in krb5_id
2009-09-29 13:13:51 -07:00
1ac50627e6
add forward decl for hx509_certs_data
2009-09-29 11:29:20 -07:00
a95f16503e
load hx509 context
2009-09-29 11:29:02 -07:00
a610d28727
Add _krb5_get_init_creds_opt_set_pkinit_user_certs
2009-09-29 11:11:04 -07:00
97a511457f
kinit helpers
2009-09-29 11:10:41 -07:00
61cc35b83b
include hx509_context in krb5_context
2009-09-29 09:23:37 -07:00
94cc296741
plug more leaks
2009-09-21 10:08:42 -07:00
76cf97e2b0
free pac after reading it
2009-09-21 09:59:38 -07:00
80c866a4a7
fix valgrind problems
2009-09-21 09:52:28 -07:00
a7d5b2a15e
make zero_ivec unsigned
2009-09-20 22:37:27 -07:00
b7bae0b201
make sure there are splace for storing ETYPE_NULL att the end of the array
2009-09-20 21:57:20 -07:00
e94857ef33
Remove #if 0 code
2009-09-19 14:44:56 -07:00
61a21c6955
catch error from vasprintf
2009-09-19 14:36:06 -07:00
f5a7b42db6
Don't parse realm for names, makes test pass for hosts w/o default realm
2009-09-19 13:43:58 -07:00
32d69c77f4
more doxygen
2009-09-08 11:09:55 -07:00
9120d17eb0
Tell some what servers we tried to talk to
2009-09-07 20:55:05 -07:00
4c06438189
Add _krb5_krbhst_get_realm() to get what realm was used
2009-09-07 20:54:48 -07:00
878eb853df
Add debug_dest member
2009-09-07 20:38:29 -07:00
6770fd45e1
Sprinkle _krb5_debug() for more info about what the framework is actually doing behind our back
2009-09-07 20:22:44 -07:00
5a3630ba00
Add _krb5_log() used for internal logging
2009-09-07 20:22:14 -07:00
c0333682c6
Add logging if its specfied by the configuration file
2009-09-07 20:21:38 -07:00
3c1deaa6c2
move krb5_compare_creds to doxygen
2009-09-06 11:46:03 -07:00
e2cbb2d350
document flags to krb5_compare_creds()
2009-09-06 11:45:25 -07:00
4bcc97bd09
doxygen fix vget_time uses args
2009-09-01 12:44:23 -07:00
30f13f0d5b
doxygen fix get_strings uses ...
2009-09-01 12:43:50 -07:00
9f9783464c
Don't make krb5_ccache point into krb5_context allocated memory
...
Don't make a copy of the krb5_cc_ops into krb5_context and hand that
out to callers of the api, this way its possible to free a krb5_context
w/o invalidating all krb5_ccaches that was allocated using that krb5_context
(also, it saves memory)
2009-09-01 12:22:16 -07:00
20001366aa
Better support for kinit -k when client have subset of enctypes compared to KDC
...
Get the list of enctypes and use that to calculate the list of client supported
enctypes when talking to the KDC, this to make sure that KDC doesn't send
pw-challanges to the client for enctypes that the client software support
but there is no entry in the keytab.
2009-08-30 13:25:38 -07:00
a9cb60d7d5
more drop krb5_unparse_name.3 since its now in doxygen
2009-08-29 12:14:21 -07:00
80816d275e
more doxygen
2009-08-29 12:13:41 -07:00
dce2342816
drop krb5_ticket.3
2009-08-29 01:28:28 -07:00
940f050300
doxygen
2009-08-29 01:26:16 -07:00
13ba2956cc
Check if COM_ERR_BINDDOMAIN_krb5 is defined, if it is, use bindtextdomain()
...
Older versions of compile_et doesn't support gettext/libintl support,
if they don't, there will be no such symbols and we can't load the
text domains for those symbols, so lets skip that.
Pointed out by Guillaume Rousse on heimdal-discuss
2009-08-26 09:02:25 -07:00
Love Hornquist Astrand