Commit Graph

13793 Commits

Author SHA1 Message Date
Love Hornquist Astrand 82150be255 allow loading sqlite 2009-07-19 17:58:53 -07:00
Love Hornquist Astrand 51fbbf93e3 (log_file): use strvisx rightly 2009-07-19 17:52:53 -07:00
Love Hornquist Astrand c7c58feb3f add NTLM name for hdb layer to make searching diffrently the regular "names" 2009-07-18 10:17:37 -07:00
Love Hornquist Astrand 317d837d0f krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt deprecated 2009-07-17 20:39:35 -07:00
Love Hornquist Astrand 9211c47a30 Deprecate krb5_get_cred_from_kdc{,_opt} since they are replacement functions 2009-07-17 20:38:32 -07:00
Love Hornquist Astrand 80021f5e05 Make get_cred_kdc_any a private function. 2009-07-17 20:36:42 -07:00
Love Hornquist Astrand 517be51cc5 Test init_sec_context using keytab based credentials
Based on problem description from Rick Macklem in [HEIMDAL-197],
problem still not fixed.
2009-07-17 15:57:45 -07:00
Love Hornquist Astrand 8b71d0b93f Prefer the realm of the user when doing referrals style ISC krb5-get-creds
The the realm of the user's principal and prefer that when doing a lookup.
This code still need to be smarter can cache the "initial value" -> positive result
to avoid roundtrips to the KDC.
2009-07-17 15:43:19 -07:00
Love Hornquist Astrand d4ca938866 Only load plugins once and never unload them
Its expensive to load and unload plugins all the time, so lets stop doing that.
Run over the plugin directory and load all plugins and remember them all.
In the future, something should watch the directory and if it changes,
load the new plugins that was put there.
2009-07-17 15:18:00 -07:00
Love Hornquist Astrand de5110c05a (krb5_get_kdc_cred): make sure that out_creds points to NULL on failure 2009-07-16 23:54:54 -07:00
Love Hornquist Astrand d0aadb9a0d Fix depenencies for test_punycode
This only matters in development enviroments and where you run make check.
2009-07-16 22:26:43 -07:00
Love Hörnquist Åstrand f8d7804396 More tests for HC_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25337 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:44 +00:00
Love Hörnquist Åstrand e9cea2daee More tests for HC_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:24 +00:00
Love Hörnquist Åstrand 6c56033e6f improve msft compiler case
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25335 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:12 +00:00
Love Hörnquist Åstrand 6a85bbcc65 More tests for KRB5_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25334 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:27:52 +00:00
Love Hörnquist Åstrand 57e31f7593 More tests for GSSAPI_DEPRECATED
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25333 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:27:37 +00:00
Love Hörnquist Åstrand 2b54af87e9 Add paranoid printing using strvisx.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25332 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 23:31:55 +00:00
Love Hörnquist Åstrand de5f912e02 Contributed by Andrew Bartlett:
When Samba4's 'fake' GSSAPI client contacts Windows 2008, and does not
request AP_MUTUAL_REQUIRED, it does not elicit a response packet.

We had previously assumed it was unconditional.  Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25328 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:18:00 +00:00
Love Hörnquist Åstrand 6a24e13678 Use hdb_get_dbinfo() to find the realms.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25326 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:17:30 +00:00
Love Hörnquist Åstrand 8eb14db155 remove unused variable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25323 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:16:21 +00:00
Love Hörnquist Åstrand 9807194527 check for NULL pointer not no NULL pointer...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25321 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-08 00:07:05 +00:00
Love Hörnquist Åstrand d3f16452e0 make compile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25320 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:20:10 +00:00
Love Hörnquist Åstrand 5a9dd54e95 drop RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25319 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:09:16 +00:00
Love Hörnquist Åstrand 6aa38c372c Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25318 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:09:04 +00:00
Love Hörnquist Åstrand ef92d8485a Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25317 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:48 +00:00
Love Hörnquist Åstrand a18db94691 Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:36 +00:00
Love Hörnquist Åstrand af77ace518 Push enterprise support into the bdblayer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25315 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:26 +00:00
Love Hörnquist Åstrand 48a0f6d995 reset iteration query before continuing.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25314 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:15 +00:00
Love Hörnquist Åstrand e02d83174c set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25313 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:08:05 +00:00
Love Hörnquist Åstrand 4ff6ed4652 set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25312 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:07:52 +00:00
Love Hörnquist Åstrand 54b5beeb98 set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25311 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:07:41 +00:00
Love Hörnquist Åstrand 4beac004a1 set hdb_capability_flags = 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25310 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-05 05:07:30 +00:00
Love Hörnquist Åstrand 45ef83f6fd add hdb_check_constrained_delegation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:26:25 +00:00
Love Hörnquist Åstrand e28e7b2c45 check for hdb->hdb_password
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25301 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:26:12 +00:00
Love Hörnquist Åstrand 5c104ef172 add ->hdb_password and ->hdb_auth_status
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25298 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:25:29 +00:00
Love Hörnquist Åstrand f65f1f26ef add HDBFlags: locked-out
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25297 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:25:01 +00:00
Love Hörnquist Åstrand a28a9a1b30 comment about hdb_capability_flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25296 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:24:48 +00:00
Love Hörnquist Åstrand ba04bad361 From Andrew Bartlet via heimdal-bugs@h5l.org
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups

    The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail
    list user principal name) in an AS-REQ.  Evidence from the wild
    (Win2k8 reportadely) indicates that this is instead valid for all
    types of requests.

    While this is now handled in heimdal/kdc/misc.c, a flag is now defined
    in Heimdal's hdb so that we can take over this handling in future (once we start
    using a system Heimdal, and if we find out there is more to be done
    here).

    Andrew

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25293 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 03:16:35 +00:00
Love Hörnquist Åstrand 012eae7f34 rename gssapi/ntlm/digest.c to kdc.c since that is what its talking too
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25292 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 03:16:21 +00:00
Love Hörnquist Åstrand 90ac3afd08 hostname is not_defined_in_RFC4178@please_ignore
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25291 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-28 21:12:38 +00:00
Love Hörnquist Åstrand 8be9f44602 rename find_buffer
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25289 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:56 +00:00
Love Hörnquist Åstrand 2ca3492e42 remove stream bits for now
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25288 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:37 +00:00
Love Hörnquist Åstrand 769f86eb33 start of unpack stream if there is one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25287 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:02 +00:00
Love Hörnquist Åstrand c99b2003e2 Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
Love Hörnquist Åstrand 4c302b52f8 remove unused type
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25285 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-17 18:10:59 +00:00
Love Hörnquist Åstrand 74af14affc disable code
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25284 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-12 19:05:42 +00:00
Love Hörnquist Åstrand d104f3b9d6 Fix logic error when we do client referrals.
Author: andrew bartlett <abartlet@samba.org>

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25283 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-12 18:10:28 +00:00
Love Hörnquist Åstrand 1f42785746 plug memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25282 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-08 22:02:25 +00:00
Love Hörnquist Åstrand bc07938965 (emem_trunc): if offset is NULL, free all memory
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25281 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-08 21:57:56 +00:00
Love Hörnquist Åstrand 47ebb62930 Release p2, valgrind output from Andrew Bartlett
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25280 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-08 21:57:45 +00:00