oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
20,812 Commits 2 Branches 2 Tags
90b68a672a75792cbe47ee4a181a003e68eefb74
Commit Graph

1156 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
35a6f8ed22 Pick up request_log from [kdc]kdc-request-log. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20951 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-07 03:08:39 +00:00
Love Hörnquist Åstrand
44e3c4e620 Option to save the request to disk. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20950 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-07 03:07:42 +00:00
Love Hörnquist Åstrand
7e2f36b1d6 (krb5_kdc_save_request): save request to file. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20949 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-07 03:07:04 +00:00
Love Hörnquist Åstrand
01d0aa7e38 Update kdc time. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20948 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-07 02:20:45 +00:00
Love Hörnquist Åstrand
c42a34c36d (krb5_kdc_process*): dont update _kdc_time automagicly. 
(krb5_kdc_update_time): set or get current kdc-time.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20947 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-07 02:20:10 +00:00
Love Hörnquist Åstrand
6f787893cd (_kdc_pk_rd_padata): accept both pkcs-7 and pkauthdata as the signeddata oid 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20943 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-06 22:14:36 +00:00
Love Hörnquist Åstrand
3d7fc2b1e7 (_kdc_pk_rd_padata): Try to log what went wrong. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20942 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-06 22:03:20 +00:00
Love Hörnquist Åstrand
a7169a17a6 Use oid_id_pkcs7_data for pkinit-9 encKey reply to match windows DC 
behavior better.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20927 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-05 17:23:44 +00:00
Love Hörnquist Åstrand
f48ceb510e (digest ntlm): provide log entires by setting ret to an error. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20877 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-04 04:07:26 +00:00
Love Hörnquist Åstrand
ceb434a58b In case of OCSP verification failure, referash every 5 min. In case of 
success, refreash 2 min before expiring or faster.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20812 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-03 03:35:32 +00:00
Love Hörnquist Åstrand
da1be13db5 Handle the ms san in a propper way, still cheat with the realm name. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20748 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-31 17:31:43 +00:00
Love Hörnquist Åstrand
1c488f05de If _kdc_pk_check_client failes, bail out directly and hand the error back to the client. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20742 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-31 17:15:15 +00:00
Love Hörnquist Åstrand
6da3d7025b More logging for pk-init client mismatch. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20736 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-31 16:45:21 +00:00
Love Hörnquist Åstrand
4d85d882e1 Also add a KRB5_PADATA_PK_AS_REQ_WIN for windows pk-init (-9) to make MIT clients happy. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20734 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-31 16:00:37 +00:00
Love Hörnquist Åstrand
60df0e8122 Force des3 for win2k. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20703 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-30 18:41:59 +00:00
Love Hörnquist Åstrand
2c99856c1c Add wrapping to ContentInfo wrapping to COMPAT_WIN2K. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20701 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-30 18:33:36 +00:00
Love Hörnquist Åstrand
26c0e3189d catch failures from _krb5_principalname2krb5_principal 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20697 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-30 14:32:26 +00:00
Love Hörnquist Åstrand
dcf2f42e79 Allow matching by MS UPN SAN, note that this delta doesn't deal with 
case of realm.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20690 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-05-30 13:37:44 +00:00
Love Hörnquist Åstrand
628db42656 rename windc_init to krb5_kdc_windc_init 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20559 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-24 16:00:07 +00:00
Love Hörnquist Åstrand
7e6b98aa96 version script for libkdc 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20551 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-24 11:45:04 +00:00
Love Hörnquist Åstrand
f892256e21 version script for libkdc 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20550 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-24 11:43:54 +00:00
Love Hörnquist Åstrand
ea47402577 Use krb5_kdc_get_config and just fill in what the users wanted differently. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20533 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-23 07:47:56 +00:00
Love Hörnquist Åstrand
ef7201572e Make the default configuration fetch info from the krb5.conf. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20532 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-23 07:46:57 +00:00
Love Hörnquist Åstrand
7ba2b2006c rename des to hcrypto 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20466 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-20 08:29:05 +00:00
Love Hörnquist Åstrand
6f469b4af4 remove code that depend on kerberos 4 library 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20456 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 20:29:42 +00:00
Love Hörnquist Åstrand
7a339bab7d revert 20447, it doesnt pass the regression tests, exports too much 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20454 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 20:21:51 +00:00
Love Hörnquist Åstrand
0c2182a3ba Call out to Heimdal's krb5.conf processing to configure many aspects 
of KDC behaviour.  This should allow PKINIT to be turned on and
managed with reasonable sanity.

From Andrew Bartlet



git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20447 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 18:22:41 +00:00
Love Hörnquist Åstrand
87e6051ddc (main): free the message when done with it. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20434 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 14:00:32 +00:00
Love Hörnquist Åstrand
97e369f300 don't check size since that currently leaks memory 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20430 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 10:33:30 +00:00
Love Hörnquist Åstrand
760ffa0e99 Spelling, from raga <raga@comcast.net> via Bjorn Sandell. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20316 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-11 11:53:20 +00:00
Love Hörnquist Åstrand
9fe7e832c7 Return the same error codes as a windows KDC. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20279 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-22 02:05:53 +00:00
Love Hörnquist Åstrand
81a108b1d0 Make handling of replying e_data more generic, from metze. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20277 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-22 02:01:12 +00:00
Love Hörnquist Åstrand
21ddb4aee9 Fix (string const and shadow) warnings, from metze. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20276 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-22 01:50:37 +00:00
Love Hörnquist Åstrand
937df31de8 Select a session enctype from the list of the crypto systems supported 
enctype, is supported by the client and is one of the enctype of the
enctype of the krbtgt.

The later is used as a hint what enctype all KDC are supporting to
make sure a newer version of KDC wont generate a session enctype that
and older version of a KDC in the same realm can't decrypt.

But if the KDC admin is paranoid and doesn't want to have "no the
best" enctypes on the krbtgt, lets save the best pick from the client
list and hope that that will work for any other KDCs.

Reported by metze.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20271 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-22 01:21:46 +00:00
Love Hörnquist Åstrand
7a01a70ac2 (propagate_database): on any failure, drop the connection to the peer 
and try next one.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20268 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-21 20:48:40 +00:00
Love Hörnquist Åstrand
45ebb9c7f2 Only check service key for cross realm PACs. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20265 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-18 08:34:36 +00:00
Love Hörnquist Åstrand
126ea0e595 Don't check PACs on cross realm requests. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20254 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-17 07:52:01 +00:00
Love Hörnquist Åstrand
b0e9eb4583 switch some "return ret" to "goto out". 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20243 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-17 00:06:03 +00:00
Love Hörnquist Åstrand
6e6d429311 Pass down canonicalize request to hdb layer, sign client referrals. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20242 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-17 00:04:54 +00:00
Love Hörnquist Åstrand
f37c85ba61 pass extra flags for detached signatures. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20171 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-03 22:47:25 +00:00
Love Hörnquist Åstrand
4ac442a884 Remove debug output. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20149 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-03 07:06:24 +00:00
Love Hörnquist Åstrand
3bb7b20169 Fix ms-chap-v2 get_masterkey 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20144 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-02 22:26:38 +00:00
Love Hörnquist Åstrand
e4d855f06d Fix ms-chap-v2 mutual response auth code. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20143 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-02 22:15:52 +00:00
Love Hörnquist Åstrand
1290d1bb74 Add get_master from RFC 3079 3.4 for MS-CHAP-V2 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20140 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-02 21:27:21 +00:00
Love Hörnquist Åstrand
3ce495d26e Use right size, from Klas Lindfors. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20133 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-02 20:51:37 +00:00
Love Hörnquist Åstrand
01ad941e9b First version from kllin. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20131 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-02 20:48:23 +00:00
Love Hörnquist Åstrand
abcd0e9de6 Better logging and return status = FALSE when checksum doesn't match. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20120 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-01 20:28:49 +00:00
Love Hörnquist Åstrand
0fdc34167b Check the digest response in the KDC. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20118 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-01 20:19:53 +00:00
Love Hörnquist Åstrand
e786c4d432 Add support for MS-CHAP v2. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20114 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-01 18:15:56 +00:00
Love Hörnquist Åstrand
b097b3a816 don't verify identifier in CHAP, its the client that chooses it. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20087 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-01-31 12:21:21 +00:00