Taylor R Campbell
fd77c4000d
Ensure all calls to getaddrinfo are headed by a block_dns check.
...
If block_dns is set, call getaddrinfo with AI_NUMERICHOST set and
AI_CANONNAME clear.
Some paths may not have set AI_CANONNAME, but it's easier to audit
this way when the getaddrinfo prelude is uniform across call sites,
and the compiler can optimize it away.
2024-01-08 10:22:02 -06:00
Jeffrey Altman
d80a1b9556
kdc: hprop propagate_database do not leak 'server'
...
Change-Id: I0b2b6343134603ecffb6cd827d0828463378cff4
2022-01-23 22:25:43 -05:00
Jeffrey Altman
a3f4a0bf0b
kdc: hprop check return code if local realm
...
If 'local_realm' is true, must protect against failure
of krb5_get_default_realm() and krb5_principal_set_realm().
Otherwise, the wrong realm might be used.
Change-Id: Ib7a92559da1ac062c71228c5530106a13d836d53
2022-01-23 21:59:13 -05:00
Luke Howard
0e8c4ccc6e
hdb: eliminate hdb_entry_ex
...
Remove hdb_entry_ex and revert to the original design of hdb_entry (except with
an additional context member in hdb_entry which is managed by the free_entry
method in HDB).
2022-01-15 18:54:57 +11:00
Love Hornquist Astrand
1d84562886
add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping
2013-10-15 12:40:39 +02:00
Love Hornquist Astrand
0570fbf9fd
don't double free fd
2012-11-27 21:58:05 -08:00
Love Hornquist Astrand
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
f5f9014c90
Warning fixes from Christos Zoulas
...
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
Asanka C. Herath
880d728e02
Un-const as necessary to silence compiler warnings
2010-11-24 15:33:07 -05:00
Love Hornquist Astrand
cc42e85e7f
Remove deprecated krb4 kdc components
2010-11-20 14:11:35 -08:00
Love Hornquist Astrand
09c0c65d6f
remove v4 support for hprop
2010-11-20 13:26:40 -08:00
Love Hornquist Astrand
dde9ae659b
drop RCSID
2010-03-16 12:50:09 -07:00
Russ Allbery
01d54cacc9
Allow weak crypto in hprop
...
hprop may be decrypting an old database encrypted with a DES master
key, in which case it shouldn't fail because DES is disabled by default.
This could permit weak enctypes to be used when authenticating to a
remote hpropd, although stronger enctypes are still preferred.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-01-27 21:57:32 -08:00
Asanka Herath
b191b1e12f
Make kdc build on windows
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2009-11-24 22:19:37 -08:00
Love Hornquist Astrand
c01177976c
use krb5_warn
2009-11-03 23:49:04 -08:00
Love Hörnquist Åstrand
7f6001e81c
disable deprecated warning since this module uses 425 function and we
...
don't want warnings for that.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25096 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:11:26 +00:00
Love Hörnquist Åstrand
1033b89779
make comile
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25048 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:05:28 +00:00
Love Hörnquist Åstrand
51d0f65fb8
use krb5_cc_new_unique, use constants for cache types
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25041 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:04:01 +00:00
Love Hörnquist Åstrand
6937d41a02
remove trailing whitespace
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898
switch to utf8 encoding of all files
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
9ae2936124
use krb5_principal_set_realm
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22728 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:46 +00:00
Love Hörnquist Åstrand
8d40c2994b
check return value of alloc functions, from Charles Longeau
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21745 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-31 16:11:25 +00:00
Love Hörnquist Åstrand
6f469b4af4
remove code that depend on kerberos 4 library
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20456 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-19 20:29:42 +00:00
Love Hörnquist Åstrand
7a01a70ac2
(propagate_database): on any failure, drop the connection to the peer
...
and try next one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-21 20:48:40 +00:00
Love Hörnquist Åstrand
ed5e62f11c
Return error codes on failure, improve error reporting.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:03:46 +00:00
Love Hörnquist Åstrand
ece5f9603e
Make krb5_get_init_creds_opt_free take a context argument.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19078 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-20 18:12:41 +00:00
Love Hörnquist Åstrand
5800a9f897
(main): make sure type doesn't need to be set
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17012 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 21:41:14 +00:00
Love Hörnquist Åstrand
54f35ca241
(main): remove dead code.
...
Coverity NetBSD CID#633
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17008 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 14:00:57 +00:00
Love Hörnquist Åstrand
0c2369acd0
Wrap hdb_entry with hdb_entry_ex, patch originally from Andrew Bartlet
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-12 12:40:12 +00:00
Love Hörnquist Åstrand
80e3a7bc53
Use the _krb5_krb_life_to_time function from libkrb5 instead of
...
including our own here too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15828 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-28 14:13:53 +00:00
Love Hörnquist Åstrand
7132a9b084
Merge in the libkdc/kdc configuration split from Andrew Bartlet <abartlet@samba.org>
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15529 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 01:03:35 +00:00
Love Hörnquist Åstrand
90930940d1
include kerberos 4 headers here
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-04-24 13:48:37 +00:00
Johan Danielsson
26457b7135
replace krb5_free_creds_contents by krb5_free_cred_contents
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13790 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-25 19:25:35 +00:00
Love Hörnquist Åstrand
0540f13b86
prefix all struct HDB elements with hdb_
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12880 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-19 00:25:35 +00:00
Love Hörnquist Åstrand
5d190295aa
add context argument to krb5_get_init_creds_opt_alloc
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12783 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-08 15:28:20 +00:00
Love Hörnquist Åstrand
3779c3d612
use DES_KEY_SZ instead of sizeof(des_block)
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12745 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-03 03:12:32 +00:00
Love Hörnquist Åstrand
d1bbbff72f
use krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
...
compare a uint32_t with 0xffffffff instead of -1
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12735 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-03 00:17:09 +00:00
Johan Danielsson
03b00835b5
set AP_OPTS_USE_SUBKEY
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11374 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 18:19:41 +00:00
Johan Danielsson
fc4f2a6921
constify
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-04-18 10:18:50 +00:00
Assar Westerlund
c597d7cb0f
printf size_t correctly
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10737 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-09-23 05:13:17 +00:00
Johan Danielsson
4526cd826e
more free's
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10721 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-09-18 09:37:33 +00:00
Assar Westerlund
d0cf56e249
(usage): clarify a tiny bit
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10356 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-19 16:29:35 +00:00
Johan Danielsson
f2b24f8055
remove v4 master key handling; remove old v4-db and ka-db flags; add
...
defaults for v4_realm and afs_cell
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10312 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-11 19:30:48 +00:00
Johan Danielsson
f18cc03cc0
missed to commit these
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10227 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-02 19:14:58 +00:00
Johan Danielsson
2b67390d1d
always include kaserver support
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10215 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-02 16:32:19 +00:00
Assar Westerlund
67422a6b02
s/[gs]et_progname/[gs]etprogname/
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9704 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-02-20 01:44:56 +00:00
Assar Westerlund
28160c99b9
printf format fixes
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9672 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-02-12 17:13:13 +00:00
Assar Westerlund
9451280638
(v4_get_masterkey): check kdb_verify_master_key properly
...
(kdb_prop): decrypt key properly
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-02-05 03:40:00 +00:00
Assar Westerlund
d2ae43cdc4
handle building with KRB4
...
always try to decrypt v4 data with the master key
leave it up to the v5 how to encrypt with that master key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9628 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-02-05 03:05:31 +00:00
Assar Westerlund
57de673572
fix a typo and check some more return values
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9620 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-01-30 17:07:39 +00:00