2ffaba9401
kdc: sign ticket using Windows PAC
...
Split Windows PAC signing and verification logic, as the signing has to be when
the ticket is ready.
Create sign and verify the PAC KDC signature if the plugin did not, allowing
for S4U2Proxy to work, instead of KRB5SignedPath.
Use the header key to verify PAC server signature, as the same key used to
encrypt/decrypt the ticket should be used for PAC server signature, like U2U
tickets are signed witht the tgt session-key and not with the longterm key,
and so krbtgt should be no different and the header key should be used.
Lookup the delegated client in DB instead of passing the delegator DB entry.
Add PAC ticket-signatures and related functions.
Note: due to the change from KRB5SignedPath to PAC, S4U2Proxy requests
against new KDC will not work if the evidence ticket was acquired from
an old KDC, and vide versa.
Closes : #767
2021-09-19 13:25:27 +10:00
544515931b
tests: default verify_pac to true in test_ap-req
2021-09-19 13:00:21 +10:00
f4fcf8767c
tests: fix a typo in test_ap_req
2021-09-19 13:00:04 +10:00
575c67806b
Add bx509d
2019-12-04 21:34:44 -06:00
2287c250b2
Revert "Revert "Fix tests/plugin/windc.c""
...
windc doesn't link against libkdc, so it doesn't need to check its instance;
however, we will continue to export kdc_get_instance() from libkdc in case
other windc plugins do link against it.
2019-01-05 10:55:13 +11:00
e776e6c5ed
Revert "Fix tests/plugin/windc.c"
...
Will fix by exporting kdc_get_instance() from libkdc.
2019-01-05 10:47:42 +11:00
9b39978ddd
Fix tests/plugin/windc.c
2019-01-04 11:26:28 -06:00
e739c4d0c2
windc: update test windc plugin to use new load SPI
2019-01-04 15:17:20 +11:00
7c16ce3457
Minor typo/grammar fixes
2017-03-10 15:47:43 -05:00
2027aa11ed
Use --detach in tests to avoid waiting
2016-12-07 19:52:29 -06:00
dbf9750989
Tests: set db-dir so tests don't use /var/heimdal
2016-02-26 01:04:31 -06:00
407fcf35fc
update client_access
2011-07-24 20:24:39 -07:00
75987ebbae
update to match plugin abi
2011-07-23 11:59:06 -07:00
7aaba443bc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
d91e772a0e
adopt syntax
2010-11-28 10:46:26 -08:00
86da42df1d
abstract out --no-afslog and --no-unlog
2010-06-01 14:42:16 -07:00
c6bbdb545b
First drop of Windows build infrastructure from Secure Endpoints
2009-11-24 12:12:53 -08:00
dd133f88ca
make compile w/o warning, fixup from abartletts patch
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25309 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:07:16 +00:00
42178773ca
use test_apreq
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24564 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-31 22:10:50 +00:00
6937d41a02
remove trailing whitespace
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
e172367898
switch to utf8 encoding of all files
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
68c7f7560e
Update to match new API for windc interface.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22702 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-22 22:20:29 +00:00
6ea6147d09
empty messages.log
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21857 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-08-08 06:59:36 +00:00
cc4333b758
remove cvs ignore files
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-09 03:09:59 +00:00
ea808c9c0e
use diffrent port, 49188, and hope that it isnt used, help on solaris where the help services runs on port 8888
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20202 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-08 00:59:47 +00:00
d5852aaa48
remove files created by tests
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19846 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-11 10:44:01 +00:00
1e9aabbe3d
Add check to verify the windc module as loaded.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19806 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 19:02:24 +00:00
f0bfd625d0
Update to validate function signature change.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19800 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 15:29:03 +00:00
a31d3796ee
EXTRA_DIST += krb5.conf.in
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19701 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 19:44:44 +00:00
8b11693d77
test explicit requested pac and explicit negative requested pac.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19688 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 13:23:35 +00:00
4e8c37cad5
Add client_access.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19675 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:10:58 +00:00
1901f0475a
Verify PAC on server end too.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19673 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:06:57 +00:00
d9d0379273
test tgs-req
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19645 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 19:38:14 +00:00
fa71fa1c67
log that the function is called.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19644 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 19:35:48 +00:00
6ce63327d4
test WinDC PAC functionallity
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19633 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-03 15:40:33 +00:00
Isaac Boukris