Love Hornquist Astrand
35d4b23a22
start error codes finish message
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
580b370e08
make pa-data optional
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
c6a9bdb140
spelling
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
5edb5d0275
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
6a74bba8f9
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
e372cc6b8a
re-shuffle to make c90 compatible
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
1af9487bff
got fetch armor key
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
a1feab396e
more ticket bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
d04289855e
more bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
96299ac2bb
no warnings
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
c148c2b432
unused key
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
60c713221d
match draft-preauth-framework-14 better
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
7d30fc38d7
use METHOD-DATA for type compat in kdc/kerberos5.c
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
3b034b231d
more bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
22cb2c1a1a
export one more
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
86c4089df1
export more
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
7802e24170
first drop of the AS-REQ FAST + krb-error FAST codepath
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
f2c7370609
announce fx-fast
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
580ba6aa72
KU bits for fast
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
a41439d52b
spelling
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
1879af9e43
Break out fast state, shuffle around state so that as-req is inited earlier
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
04128ac081
Use reply_key from fast layer.
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
fd7c870550
add reply reply_key
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
a5e342f8ba
Add fast_state.
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
74ec640500
Only free ext on replace
2011-07-24 20:23:30 -07:00
Love Hörnquist Åstrand
f1c1e1bc6e
remove used variables
2011-07-24 20:05:05 -07:00
Love Hörnquist Åstrand
2ae9bbb915
update (c)
2011-07-24 20:04:02 -07:00
Love Hörnquist Åstrand
1a6195153f
start to use KRB5_ENCTYPE_
2011-07-24 20:02:10 -07:00
Love Hörnquist Åstrand
f102ee7831
compiler warning
2011-07-24 19:56:09 -07:00
Love Hörnquist Åstrand
f9afd37eed
use add_HDB_Ext_KeySet and plug memory leak
2011-07-24 18:14:25 -07:00
Love Hörnquist Åstrand
c204f3c5ce
drop dependency
2011-07-24 18:08:52 -07:00
Love Hörnquist Åstrand
c26da364e8
drop dependency since we need the autoconf to overwrite this
2011-07-24 18:06:33 -07:00
Love Hörnquist Åstrand
e32186d9de
expore more
2011-07-24 16:15:06 -07:00
Love Hörnquist Åstrand
8060a561db
switch to KRB5_ENCTYPE
2011-07-24 16:02:22 -07:00
Love Hörnquist Åstrand
c97322adf2
fix compile warning
2011-07-24 15:46:11 -07:00
Love Hörnquist Åstrand
8fccb51d49
Merge pull request #12 from nicowilliams/krb5_admin_patches_2nd
...
Krb5 admin patches 2nd
This has all the patches needed for krb5_admind to build and pass most tests, that includes:
- more kadm5 API compatibility (including very basic profile functionality)
- multi-kvno support (useful for key rollovers) (a test for this is included in tests/db/check-kdc)
Unfinished:
- password history (currently uses key history, needs to be separated and use digests)
- policies (only default policy allowed)
- mit kdb changes not tested yet
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 15:41:36 -07:00
Love Hörnquist Åstrand
1124c4872d
KVNOs are krb5uint32 in RFC4120, make it so
2011-07-24 14:23:45 -07:00
Love Hörnquist Åstrand
671e231d75
fix warning
2011-07-24 14:09:23 -07:00
Linus Nordberg
2e35198908
Add version-script.map to _DEPENDENCIES.
...
Added to 11 out of 14 directories with map files. Not lib/ntlm,
lib/hcrypto and kdc which have the map file as an explicit dependency
to _OBBJECTS.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 14:07:59 -07:00
Love Hörnquist Åstrand
f60ec15834
partly unify enctype/keytype since there is only enctypes
2011-07-24 14:03:08 -07:00
Love Hörnquist Åstrand
16eabf8e4c
add an invalid protection level to the enum
2011-07-24 14:00:23 -07:00
Love Hörnquist Åstrand
af4aea85ae
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
Love Hörnquist Åstrand
8f2294e1f9
switch order of type and GSSAPI_LIB_VARIABLE
2011-07-24 13:00:36 -07:00
Love Hörnquist Åstrand
052c5767fd
fixup type for GSS_C_ATTR_LOCAL_LOGIN_USER
2011-07-24 12:47:55 -07:00
Love Hörnquist Åstrand
d434bda588
make sure keylen is a multiple of 2
2011-07-24 12:34:51 -07:00
Andrew Bartlett
84bc108d8f
lib/krb5: Allow any kvno to match when searching the keytab.
...
Windows does not use a KVNO when it checks it's passwords, and MIT
doesn't check the KVNO when no acceptor identity is specified (looping
over all keys in the keytab).
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org >
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 10:37:40 -07:00
Love Hörnquist Åstrand
c5db78a3c2
switch to use use_strongest_server_key
...
use the same behavior as 1.4 release.
2011-07-24 10:33:28 -07:00
Marc Balmer
ae9ac01f3f
Typo
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 10:29:47 -07:00
Nicolas Williams
a7717ae4f9
Use heim_assert() instead of assert()
2011-07-24 11:10:37 -05:00
Nicolas Williams
11c54cd6c8
Protect against negative n_ks_tuple values and against randkey returning negative n_keys
2011-07-24 11:08:58 -05:00
