901bac07e8
Don't need to look check *input_name twice [CID-27].
2009-07-30 14:00:48 +02:00
08256017e4
Don't dereference input_name [CID-27].
2009-07-30 13:59:42 +02:00
0f5f5947aa
make sure client is set before trying to use it [CID-50]
2009-07-30 13:20:00 +02:00
7d8d09f3c0
make compile
2009-07-30 12:56:54 +02:00
e184e053dd
Catch memory allocation failures [CID-61]
2009-07-30 12:56:21 +02:00
a5b015ab7e
Make sure av is freed if its allocated [CID-73]
2009-07-30 12:40:13 +02:00
25b0f731ab
Better handling of memory allocation failure [CID-77]
2009-07-30 12:27:19 +02:00
dc95a7983d
Release ticket on failure [CID-96]
2009-07-30 11:59:15 +02:00
c961189f95
Remove dead code [CID-10]
2009-07-30 10:55:06 +02:00
0d49d0f1c4
Free ticket earlier [CID-108]
2009-07-30 10:39:52 +02:00
c8b05eef61
(base64_encode): bound input length to /4 of max int and positive
2009-07-30 10:36:39 +02:00
5373d3a869
Allow parsing of cert fail unless HX509_CERTS_UNPROTECT_ALL is set.
2009-07-30 10:20:04 +02:00
1bdf51f26f
(strpoolcollect): allow p == NULL, return the empty string (allocated)
2009-07-30 10:08:48 +02:00
0da57a49d7
Make cgetstr() not return allocated memory on failure [CID-170]
2009-07-30 10:04:44 +02:00
90ed2b6790
Check result of calloc [CID-181]
2009-07-30 09:44:44 +02:00
3f802d359f
Use right variable [CID-181]
2009-07-30 09:41:42 +02:00
e1ecb6f7a6
Catch uninited variable [CID-182]
2009-07-30 09:40:05 +02:00
ca6e428093
check that we don't pass negative numbers of memset [CID-169]
2009-07-30 07:53:58 +02:00
896391a56b
Double free of sp on empty list of creds [CID-183]
2009-07-30 07:46:37 +02:00
a1964f4747
use after free [CID-184] [CID-185]
2009-07-30 07:38:24 +02:00
9581e59bde
FORWARD_NULL fixes [CID-163] and friends
2009-07-30 07:36:03 +02:00
b9644d7060
Test on wrong variable
2009-07-30 07:30:27 +02:00
b1dc4dc97e
(_hx509_Name_to_string): free memory on failure (that should not happen) [CID 176]
2009-07-30 07:25:36 +02:00
4e516cec33
Pruned to aggressivly
2009-07-29 23:14:44 +02:00
2e1ebf8598
add export/import cred
2009-07-29 23:12:16 +02:00
9b710bed81
store is never read again
2009-07-29 22:37:58 +02:00
fa502c6648
Add support for gss_{import,export}_cred() as requested by metze
...
Works for krb5 and SPNEGO mechanisms. Kerberos credentials are passed as
credential cache names, or if there are memory based credentials, inband in the protocol. This means that the credentials buffers must be keep secret.
As documented by IBM (they have the wrong prototype though)
and GGF (GSS-API Extensions) back in 2001
2009-07-29 13:36:02 +02:00
e5c42ba42f
rename krb5_storage_from_emem in documentation
2009-07-28 17:51:53 +02:00
565236c603
Add store-cred to the dispatch table
2009-07-28 09:50:05 +02:00
c140f0255c
Implement core of _gsskrb5_store_cred()
2009-07-27 09:42:46 +02:00
de0ae78c4e
Remove dlfcn implementation for AIX since nowadays AIX have dlopen()
...
Also drop license and copyright statement
2009-07-24 04:25:39 +02:00
1dd94e44ba
Switch to macros for c++ extern "C" to please editors that want to autoindent
2009-07-23 19:27:34 +02:00
6d9354edf7
x
2009-07-21 10:29:53 -07:00
ebb3dd62c0
See README.dlfcn for license
2009-07-21 10:29:44 -07:00
7e4854250e
Actually register new plugins and plug a related memory leak
2009-07-19 21:23:56 -07:00
311ce98d85
(hdb_sqlite_rename): make rename work when there is a prefix
2009-07-19 18:42:02 -07:00
bd073cfd72
Limit maxinum retries of BUSY/BLOCK/LOCKED operations to MAX_RETRIES (default 10)
2009-07-19 18:01:51 -07:00
82150be255
allow loading sqlite
2009-07-19 17:58:53 -07:00
51fbbf93e3
(log_file): use strvisx rightly
2009-07-19 17:52:53 -07:00
c7c58feb3f
add NTLM name for hdb layer to make searching diffrently the regular "names"
2009-07-18 10:17:37 -07:00
317d837d0f
krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt deprecated
2009-07-17 20:39:35 -07:00
9211c47a30
Deprecate krb5_get_cred_from_kdc{,_opt} since they are replacement functions
2009-07-17 20:38:32 -07:00
80021f5e05
Make get_cred_kdc_any a private function.
2009-07-17 20:36:42 -07:00
517be51cc5
Test init_sec_context using keytab based credentials
...
Based on problem description from Rick Macklem in [HEIMDAL-197],
problem still not fixed.
2009-07-17 15:57:45 -07:00
8b71d0b93f
Prefer the realm of the user when doing referrals style ISC krb5-get-creds
...
The the realm of the user's principal and prefer that when doing a lookup.
This code still need to be smarter can cache the "initial value" -> positive result
to avoid roundtrips to the KDC.
2009-07-17 15:43:19 -07:00
d4ca938866
Only load plugins once and never unload them
...
Its expensive to load and unload plugins all the time, so lets stop doing that.
Run over the plugin directory and load all plugins and remember them all.
In the future, something should watch the directory and if it changes,
load the new plugins that was put there.
2009-07-17 15:18:00 -07:00
de5110c05a
(krb5_get_kdc_cred): make sure that out_creds points to NULL on failure
2009-07-16 23:54:54 -07:00
d0aadb9a0d
Fix depenencies for test_punycode
...
This only matters in development enviroments and where you run make check.
2009-07-16 22:26:43 -07:00
f8d7804396
More tests for HC_DEPRECATED
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25337 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:44 +00:00
e9cea2daee
More tests for HC_DEPRECATED
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:28:24 +00:00
Love Hornquist Astrand