45b9139cc4
if we are using db1 or db3 (really 3,4,5), when we will need LIB_db_create, otherwise use LIB_NDBM
2011-06-19 11:20:48 -07:00
5a25df7851
set HEIMDAL_LOCALEDIR for librfc3961.la too
2011-06-19 11:02:27 -07:00
4337582a64
add missing break, quiet clang analyzer
2011-06-19 10:28:51 -07:00
3048545de3
Windows: Use Software/Heimdal registry key for Heimdal specific configuration
...
The 'plugin_dir' value is Heimdal specific. So keep it in the
Software/Heimdal registry key. The Software/Kerberos registry key
will also be loaded and will contain generic Kerberos configuration.
2011-06-15 01:55:19 -04:00
b8ddbe73c4
quite down clang analyzer warnings for the generate asn1 code
2011-06-14 22:29:49 -07:00
63565137d3
don't set i = 0, its never read
2011-06-14 21:57:34 -07:00
7dccddc6fb
count number of enctypes too
2011-06-14 21:44:23 -07:00
0f489b7b28
unexport krb5_init_etype, remove duplicate code
2011-06-14 21:08:52 -07:00
016193ac6a
Added manpage documentation for krb5_{as, tgs}_enctypes.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
2fbad6432b
Initial support for default_{as, tgs}_etypes.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
256cf6ea12
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
481fe133b2
Also added preauth-use-strongest-session-key krb5.conf kdc parameter, similar to {as, tgs}-use-strongest-session-key. The latter two control ticket session key enctype selection in the AS and TGS cases, respectively, while the former controls PA-ETYPE-INFO2 enctype selection in the AS case.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
a7a8a7e95c
Initial patch to add as-use-strongest-session-key and same for tgs krb5.conf parameters for the KDC. These control the session key enctype selection algorithm for the AS and TGS respectively: if TRUE then they prefer the strongest enctype supported by the client, the KDC and the target principal, else they prefer the first enctype fromt he client's list that is also supported by the KDC and the target principal.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
e72940c962
more frameworks for test_name
2011-06-13 21:19:10 -07:00
3c725a465e
Initialize zero before using it in unwrap_des().
...
Heimdal since fc702a97f5lha@h5l.org >
2011-06-13 21:18:07 -07:00
ade3d65e73
more limits
2011-05-22 20:57:30 -07:00
8b1b47035d
Switch to krb5_enomem
2011-05-22 20:43:31 -07:00
5829bfe476
add LIB_heimbase
2011-05-22 17:28:24 -07:00
48a91b7fc5
change prefix ETYPE_ to KRB5_ENCTYPE_ and provide compat symbols
2011-05-22 14:06:40 -07:00
3564726537
support NT_USER_NAME for real
2011-05-22 13:02:08 -07:00
9dc505a721
cred is no longer a name, handle that
2011-05-22 13:01:32 -07:00
26085dfbc0
allocate enough memory
2011-05-21 13:25:24 -07:00
58ffee93b7
allow GSS_C_NT_USER_NAME too
2011-05-21 13:07:22 -07:00
58ea513056
fix error message
2011-05-21 12:11:04 -07:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
97df66c0a0
Put Nd argument after Nd macro.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:27 -07:00
db8e287e41
Use "Fl Fl" for long options.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:14 -07:00
79ff133ae9
make gss_acquire_cred_ext private
2011-05-20 14:31:08 +02:00
9cf61bc762
add mech/compat.h for distribution
2011-05-19 00:02:06 -07:00
c7c22aef44
clean slc-lex.c
2011-05-18 22:15:49 -07:00
e4580fe4cc
add glue for krb5_einval
2011-05-18 22:00:37 -07:00
4c063f2955
quite const warning
2011-05-18 22:00:20 -07:00
c6c32a431f
provide _krb5_einval and _krb5_debug_backtrace that will ease figuring out when it happens
2011-05-18 21:59:56 -07:00
492492e42a
use new function krb5_einval instead of returning EINVAL directly
2011-05-18 21:59:23 -07:00
3ada607635
Final fixes from Christos Zoulas
2011-05-18 21:58:57 -07:00
f51c82c245
link gssapi to heimbase.dll on windows
...
Change-Id: I4635dcdfd0a50353b27d1a4c22f09931ae6b6117
2011-05-19 00:32:53 -04:00
18b76b6236
fcache: prevent null pointer dereference
...
Validate krb5_ccache and krb5_cc_cursor inputs
before use. Avoid null pointer dereference which
can occur if an application fails to properly check
return codes.
Change-Id: I8023808936e60cc7b8e57a062106cfcdc51ee7d7
2011-05-18 10:20:09 -04:00
305596d9ad
Rename subsystem_DEPRECATED to subsystem_DEPRECATED_FUNCTION(X)
...
Start to explain what the replacement function is.
Generate the #define/#undef logic in generated header files.
Use gcc style where the deprecation warning is after the prototype.
2011-05-17 23:12:51 -07:00
9ed040da38
fix compile warning
2011-05-17 23:01:40 -07:00
5774dcfbd8
actually return datum with real content
2011-05-17 21:54:32 -07:00
f78cb2ca4b
Only include myflags if we use HAVE_DB3
2011-05-17 21:48:33 -07:00
01f0a1f509
move tsearch.c to autodetection for libroken.la
2011-05-17 21:47:02 -07:00
4c7ba73439
Default to false(?), at least default to something.
2011-05-17 21:22:45 -07:00
1c10632690
Add define for ret
2011-05-17 21:21:20 -07:00
9b07f0e847
Include <heimbase.h>.
2011-05-17 21:21:07 -07:00
b01fe66069
Use right variable with comparing lengths. Patch orignally from Jaideep Padhye
2011-05-17 21:17:59 -07:00
aaa4400942
Apply missing function modifiers
...
GSSAPI_CALLCONV, GSSAPI_LIB_FUNC, GSSAPI_LIB_CALL as appropriate
Change-Id: I5198cfc7dd665bdc064aa0e613dac7db7465e2b9
2011-05-17 14:02:49 -04:00
87aad6a13a
Add NO_LOCALNAME
...
The pname to uid functionality at present assumes there is
an implementation of getpwnam() and that the local user
identifier is an integer. On Windows, the local user identifier
is a SId. Add NO_LOCALNAME as a build option so that Windows
(for now) can build without providing a getpwnam() implementation.
Change-Id: I04cfd6d2cd52e6228733f1da1dab420b453e6566
2011-05-17 13:56:37 -04:00
dbbf89bccf
Add Luke's new gss functionality to Windows
...
Change-Id: I0109e0e5a3d819428ac0a81aafa26b812c8a9206
2011-05-17 13:52:35 -04:00
217ada7a06
use const consistently for acquire_cred
...
Change-Id: I000d954267efa16439e19b0604c660f3c5be791c
2011-05-17 13:51:12 -04:00
Love Hörnquist Åstrand