Commit Graph

154 Commits

Author SHA1 Message Date
Love Hornquist Astrand
687db64c56 Patch from Secure Endpoints/Asanka Herath for windows support 2009-12-21 08:45:28 +01:00
Andrew Tridgell
a92eef4668 s4-heimdal: fixed a use-after-free heimdal bug
s4-heimdal: fixed a use-after-free heimdal bug

This caused samba4kinit to segfault on some systems

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-12-07 20:50:31 -08:00
Love Hornquist Astrand
b6ac1e61ff more logging, try harder to not loop 2009-11-22 12:23:48 -08:00
Love Hornquist Astrand
d6f5c959d6 remember the saltings we used in preauth in case the kdc doesn't sent
it back with the ticket.
2009-11-22 09:32:23 -08:00
Love Hornquist Astrand
b7bae0b201 make sure there are splace for storing ETYPE_NULL att the end of the array 2009-09-20 21:57:20 -07:00
Love Hornquist Astrand
20001366aa Better support for kinit -k when client have subset of enctypes compared to KDC
Get the list of enctypes and use that to calculate the list of client supported
enctypes when talking to the KDC, this to make sure that KDC doesn't send
pw-challanges to the client for enctypes that the client software support
but there is no entry in the keytab.
2009-08-30 13:25:38 -07:00
Love Hörnquist Åstrand
d104f3b9d6 Fix logic error when we do client referrals.
Author: andrew bartlett <abartlet@samba.org>

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25283 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-12 18:10:28 +00:00
Love Hörnquist Åstrand
83af77c271 remove code for unsupported option
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25180 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:01:26 +00:00
Love Hörnquist Åstrand
942a821fab remove RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand
488c6c5fbe Don't bother asking for password if there is no prompter.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25121 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-16 08:19:08 +00:00
Love Hörnquist Åstrand
1804a4b104 plug memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25089 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:10:02 +00:00
Love Hörnquist Åstrand
db74868de6 plug memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25088 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-04 17:09:51 +00:00
Love Hörnquist Åstrand
3bbe9c48e1 Adapt to time skew in KRB-ERROR.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-22 17:21:40 +00:00
Love Hörnquist Åstrand
6e8a595828 Try adapt to timeskrew when we are using pre-auth, and if there was a
time skew, try again.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-22 17:21:29 +00:00
Love Hörnquist Åstrand
28230ca61a catch error code
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24848 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:29:20 +00:00
Love Hörnquist Åstrand
0922b9168e client_realm is never read
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24844 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:28:40 +00:00
Love Hörnquist Åstrand
c0f4693926 drop unused return value
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24837 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:27:31 +00:00
Love Hörnquist Åstrand
b7323a8b85 (process_last_request): Process the lr.func even if we have no prompter.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24643 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-07 15:11:36 +00:00
Love Hörnquist Åstrand
2a3d7edf56 anonymous doesn't require service name change
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24615 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:10:21 +00:00
Love Hörnquist Åstrand
dc0f6fef51 follow client realm referals when referrals in on
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-17 21:53:25 +00:00
Love Hörnquist Åstrand
4a73c067fa follow client realm referals
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24335 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-17 21:53:15 +00:00
Love Hörnquist Åstrand
3fec7cc4c0 fix warnings
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24334 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-17 21:53:05 +00:00
Love Hörnquist Åstrand
dffe83d3d6 doxygen.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24331 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-17 21:52:35 +00:00
Love Hörnquist Åstrand
6924ebe480 doxygen fixup
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24274 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:47:34 +00:00
Love Hörnquist Åstrand
dd466c586f process the last request structures
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:45:36 +00:00
Love Hörnquist Åstrand
109ba164cd make compile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24220 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-19 19:51:00 +00:00
Love Hörnquist Åstrand
fc5628d72f add krb5_init_creds_prompt_expire and use
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24219 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-19 19:50:50 +00:00
Love Hörnquist Åstrand
0bbf9d3e6f only set password if we have one, dont free krb-error since it removed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24215 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 05:00:56 +00:00
Love Hörnquist Åstrand
85de455dde support split processing of AS and add support for keytab/keyblock
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24174 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:12:30 +00:00
Love Hörnquist Åstrand
c8d75e3e34 use krb5_get_init_creds_opt_alloc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24074 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 04:54:18 +00:00
Love Hörnquist Åstrand
136c41e4cf truncate the number so it will if in a signed 32bit integer, apples pkinit uses signed int32 for the pkinit nonce
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24053 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-29 19:34:23 +00:00
Love Hörnquist Åstrand
03babea1e3 switch to krb5_clear_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-10-14 02:55:39 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
200afe7d19 N_()ify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23764 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-07 21:19:02 +00:00
Love Hörnquist Åstrand
7fcd266fdd use krb5_set_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 04:32:32 +00:00
Love Hörnquist Åstrand
da8b5d7a22 use krb5_set_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23285 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 03:27:07 +00:00
Love Hörnquist Åstrand
a197d33362 switch to krb5_set_password().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 03:25:18 +00:00
Love Hörnquist Åstrand
fbae90e671 Tell _krb5_extract_ticket that this is an AS-REQ.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22763 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:09:02 +00:00
Love Hörnquist Åstrand
fb540c9646 Move client referral checking to _krb5_extract_ticket().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22749 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:09 +00:00
Love Hörnquist Åstrand
0fd74cc5e4 remove lost bits from using krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22731 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:57 +00:00
Love Hörnquist Åstrand
3d935af61d use krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22727 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:42 +00:00
Love Hörnquist Åstrand
7cac139e10 (krb5_get_init_creds_password): init the creds_opt too. Reported by Hai Zaar.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21931 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-08-27 14:11:55 +00:00
Love Hörnquist Åstrand
2dd77ab1fc update (c)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21428 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-10 12:31:58 +00:00
Love Hörnquist Åstrand
2511fccfe3 Use krb5_sendto_context to talk to KDC.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21061 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 17:56:30 +00:00
Love Hörnquist Åstrand
4446053e7b use the new merged flags field.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-18 00:33:01 +00:00
Love Hörnquist Åstrand
a6b9228d3a (find_pa_data): if there is no list, there is no entry.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20255 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-17 11:30:00 +00:00
Love Hörnquist Åstrand
3d3e828726 Verify client referral data.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20244 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-17 00:08:04 +00:00
Love Hörnquist Åstrand
fbfd45f8e4 Use EXTRACT_TICKET_* flags, support canonicalize.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20228 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-16 03:33:25 +00:00
Love Hörnquist Åstrand
69c37b6cc7 Make sure we don't sent both ENC-TS and PK-INIT pa data, no need to
expose our password protecting our PKCS12 key.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19776 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-09 10:44:59 +00:00