Commit Graph

1146 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
634d0ca86d pass down server entry to verify_pac function, from Andrew Bartlett <abartlet@samba.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19796 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 14:22:04 +00:00
Love Hörnquist Åstrand
e8638c2c7a Check for KRB5_PADATA_PA_PAC_REQUEST to check if we should include the
PAC in the krbtgt.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19689 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 13:27:27 +00:00
Love Hörnquist Åstrand
80ada635f1 (_kdc_as_rep): check if krb5_generate_random_keyblock failes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19686 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 12:54:09 +00:00
Love Hörnquist Åstrand
bee6d08ff3 (tgs_build_reply): check if krb5_generate_random_keyblock failes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19685 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 12:49:45 +00:00
Love Hörnquist Åstrand
8588cd9ebd Scope etype.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19684 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 12:42:51 +00:00
Love Hörnquist Åstrand
6d5bd7a704 (_kdc_as_rep): call windc client access hook.
(_kdc_tkt_add_if_relevant_ad): constify in data argument.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19677 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:14:47 +00:00
Love Hörnquist Åstrand
1571207bc4 More comments add a client_access hook.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19676 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:13:51 +00:00
Love Hörnquist Åstrand
f2b0c0407f Add _kdc_windc_client_access.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19674 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:10:06 +00:00
Love Hörnquist Åstrand
f2807ae2c8 rename functions after export some more pac functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19672 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:02:33 +00:00
Love Hörnquist Åstrand
9b7ae5c640 Resign the PAC in tgsreq if we have a PAC.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19669 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 10:56:23 +00:00
Love Hörnquist Åstrand
794a8dc6db Maybe include <sys/wait.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19658 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 00:15:34 +00:00
Love Hörnquist Åstrand
9140e58024 Get right key for PAC krbtgt verification.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19643 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 19:34:27 +00:00
Love Hörnquist Åstrand
809368fb9e spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19641 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 18:52:45 +00:00
Love Hörnquist Åstrand
61c32aa510 Include <windc_plugin.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19632 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:39:12 +00:00
Love Hörnquist Åstrand
023089fbf8 Include windc.c and use windc_plugin.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19631 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:38:44 +00:00
Love Hörnquist Åstrand
11c02517ae Call callbacks for emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19630 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:37:52 +00:00
Love Hörnquist Åstrand
9f55326054 Call callbacks for emulating a Windows Domain Controller.
Move the some of the log related stuff to its own function.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:37:12 +00:00
Love Hörnquist Åstrand
69bd8c0b81 Init callbacks for emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19628 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:35:31 +00:00
Love Hörnquist Åstrand
4dd8ec3489 Rename the init function to windc instead of pac.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19627 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:35:07 +00:00
Love Hörnquist Åstrand
03adfc4ceb Callbacks specific to emulating a Windows Domain Controller.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19626 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:34:04 +00:00
Love Hörnquist Åstrand
f74250eb28 Handle kx509 requests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19553 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:35 +00:00
Love Hörnquist Åstrand
3ce7195579 Listen to 9878 if kca is turned on.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19552 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:09:00 +00:00
Love Hörnquist Åstrand
6d254afa9f Include <kx509_asn1.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19551 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:08:15 +00:00
Love Hörnquist Åstrand
c4b7508854 code to parse [kdc]enable-kx509
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19550 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:07:35 +00:00
Love Hörnquist Åstrand
95207976c0 add enable_kx509
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19549 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:56 +00:00
Love Hörnquist Åstrand
2aff6e5795 add kx509.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19548 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:06:18 +00:00
Love Hörnquist Åstrand
3572041050 Kx509server (external certificate genration).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19545 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 21:03:53 +00:00
Love Hörnquist Åstrand
837f65e1e9 Remove <digest_asn.h>, its already included in headers.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19538 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 17:03:51 +00:00
Love Hörnquist Åstrand
98e01a4744 Return session key for the NTLMv2 case too
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19533 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-28 14:40:46 +00:00
Love Hörnquist Åstrand
fb1c8392d1 Prefix internal symbol with _kdc_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19507 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 17:18:14 +00:00
Love Hörnquist Åstrand
450b14e4e3 add digests_allowed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19506 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:24:27 +00:00
Love Hörnquist Åstrand
bcd0cbcf14 return NTLM2 targetinfo structure.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19504 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 14:14:43 +00:00
Love Hörnquist Åstrand
b54d2595c5 Parse digest acl's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19500 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:49:34 +00:00
Love Hörnquist Åstrand
f424d5432c forward decl;
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19499 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:48:04 +00:00
Love Hörnquist Åstrand
b592e99683 Add digest acl's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19498 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:47:11 +00:00
Love Hörnquist Åstrand
44c3c7620b Add ntlm v2 processing, more verbose logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19497 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 11:30:06 +00:00
Love Hörnquist Åstrand
7576da2827 reorder to show slot here ntlmv2 code will be placed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19475 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 17:27:17 +00:00
Love Hörnquist Åstrand
c40b4081cf Announce that we support key exchange and add bits to detect when it
wasn't used.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19470 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 07:32:40 +00:00
Love Hörnquist Åstrand
fadaad6712 Set error code on wrong lm.length.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19466 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:46:53 +00:00
Love Hörnquist Åstrand
96145a7a51 Add support for generating NTLM2 session security answer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19463 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-20 00:19:46 +00:00
Love Hörnquist Åstrand
f280e31a6b Unwrap the NTLM session key and return it to the server.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19422 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-18 21:19:47 +00:00
Love Hörnquist Åstrand
be40e72015 Support NTLM verification, note that the KDC does no NTLM packet
parsing, its all done by the client side, the KDC just calculate and
verify the digest and return the result to the service.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:33:26 +00:00
Love Hörnquist Åstrand
ffada79bc7 Include <heimntlm.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19373 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:22:19 +00:00
Love Hörnquist Åstrand
95936540f6 libkdc needs libheimntlm.la
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19371 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-15 21:17:50 +00:00
Love Hörnquist Åstrand
c7d5dd6b32 Less verbose error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19304 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:12:00 +00:00
Love Hörnquist Åstrand
ed5e62f11c Return error codes on failure, improve error reporting.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-10 01:03:46 +00:00
Love Hörnquist Åstrand
e1bac0567e (_kdc_as_rep): add AD-INITAL-VERIFIED-CAS to the encrypted ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:24:10 +00:00
Love Hörnquist Åstrand
8300ee6ee2 (_kdc_add_inital_verified_cas): new function, adds an empty (for now)
AD_INITIAL_VERIFIED_CAS to tell the clients that we vouches for the CA.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19261 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:21:11 +00:00
Love Hörnquist Åstrand
9fed7e931e (_kdc_tkt_add_if_relevant_ad): use _kdc_tkt_add_if_relevant_ad to add the SignedPath.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:16:03 +00:00
Love Hörnquist Åstrand
eb2670591c (_kdc_tkt_add_if_relevant_ad): new function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19259 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-06 21:15:20 +00:00