Commit Graph

17318 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
dfcd435953 (krb5_kdc_default_config): default to all bits set to zero.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:52:53 +00:00
Love Hörnquist Åstrand
2efd79caef (configure): Add enable_digest, default off
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:51:40 +00:00
Love Hörnquist Åstrand
7ae6f1fbd6 (krb5_kdc_configuration): Add enable_digest
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17910 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:51:15 +00:00
Love Hörnquist Åstrand
1bdc073a65 Include <digest_asn1.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:46:48 +00:00
Love Hörnquist Åstrand
c84978ea6d (krb5_kerberos_enctypes): new function, returns the list of Kerberos
encryption types sorted in order of most preferred to least preferred
encryption type.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:43:15 +00:00
Love Hörnquist Åstrand
3ffb120454 (_kdc_get_preferred_key): new function, Use the order list of
preferred encryption types and sort the available keys and return the
most preferred key.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17907 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:40:56 +00:00
Love Hörnquist Åstrand
fb086a0312 Adapt to the new sigature of _kdc_find_keys().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17906 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:33:53 +00:00
Love Hörnquist Åstrand
c97d034ed3 Handle session key etype separately from the tgt etype, now the krbtgt
can be a aes-only key without the need to support not-as-good etypes
for the krbtgt.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17905 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 08:33:09 +00:00
Love Hörnquist Åstrand
599d3cf216 Change _kdc_db_fetch() to return the database pointer too if needed by
the consumer.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17904 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:45:16 +00:00
Love Hörnquist Åstrand
03f49a749f Add --kerberos-realm, add client request command.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17903 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:36:41 +00:00
Love Hörnquist Åstrand
37129f204b Use the krb5_digest api. Return useful errorstring on no-existant command.
Add client request command.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17902 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:36:19 +00:00
Love Hörnquist Åstrand
17f00ca951 Add digest glue.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17901 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:31:14 +00:00
Love Hörnquist Åstrand
b68aa0068d (krb5_digest_set_authentication_user): use krb5_principal
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17900 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:30:38 +00:00
Love Hörnquist Åstrand
c45391adce Add digest support to the client side.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17899 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:25:48 +00:00
Love Hörnquist Åstrand
eb9c693880 Add digest.c to libkrb5.so
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17898 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:25:05 +00:00
Love Hörnquist Åstrand
aeb27f8bbe Add some missing fields needed for digest.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17897 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-23 11:24:24 +00:00
Love Hörnquist Åstrand
d102ff65ec add test for chap
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17896 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-22 14:33:14 +00:00
Love Hörnquist Åstrand
34db0b7e88 save the passwords
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17895 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-22 14:32:46 +00:00
Love Hörnquist Åstrand
4897675c5c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17894 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-21 12:06:53 +00:00
Love Hörnquist Åstrand
49ea5b409d Remove empty lines for picky awks
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17893 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-21 12:05:48 +00:00
Love Hörnquist Åstrand
258668b591 add realm to server-init
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17892 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-21 10:15:45 +00:00
Love Hörnquist Åstrand
c2a13c1cd3 Tweak to make consisten and more easier to use.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17891 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-21 09:21:21 +00:00
Love Hörnquist Åstrand
bd969fac52 (krb5_rd_rep): free krb5_ap_rep_enc_part on error and set return pointer to NULL
(krb5_free_ap_rep_enc_part): permit freeing of NULL


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17890 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-21 09:19:22 +00:00
Love Hörnquist Åstrand
324d6e3209 unbreak tagging, add identifier.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17889 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 12:56:12 +00:00
Love Hörnquist Åstrand
31a81a1f96 use the secret digestkey, not the public session key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17888 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 11:24:37 +00:00
Love Hörnquist Åstrand
59e7b22985 Fill in more how this is supposed to work.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17887 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 11:23:50 +00:00
Love Hörnquist Åstrand
4afabfdf3a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17886 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 10:48:46 +00:00
Love Hörnquist Åstrand
c37191e06e Frontend for remote digest service in KDC
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17885 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 10:44:40 +00:00
Love Hörnquist Åstrand
3b766317e8 Document krb5_{ret,store}_stringnl functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17884 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 08:41:09 +00:00
Love Hörnquist Åstrand
2d2f459f74 Add krb5_{ret,store}_stringnl functions, stores/retrieves a \n
terminated string.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17883 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 08:39:13 +00:00
Love Hörnquist Åstrand
3d8e85ad37 Default to address-less tickets.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17882 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 08:36:55 +00:00
Love Hörnquist Åstrand
0679c60ddd (krb5_get_init_creds_opt_get_error): clear error string on error.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17881 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-18 08:36:02 +00:00
Love Hörnquist Åstrand
343cb164c8 If seteuid() failes, break out of the function. Prompted by MIT advisory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17879 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:50:40 +00:00
Love Hörnquist Åstrand
847a99a0ec Check return values from setuid, prompted by MIT
advisory.  Thanks to Tom Yu at MIT, and Michael Calmer and Marcus
Meissner at SUSE.  Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17878 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:43:58 +00:00
Love Hörnquist Åstrand
cd67e721c3 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17877 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:31:30 +00:00
Love Hörnquist Åstrand
b42ab99857 Check for seteuid failure, prompted by MIT advisory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17876 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:31:02 +00:00
Love Hörnquist Åstrand
fd6204f302 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17875 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:09:34 +00:00
Love Hörnquist Åstrand
f1e2dae0f6 Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:08:46 +00:00
Love Hörnquist Åstrand
7160948ea6 Add comment by seteuid call isn't not needed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17873 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:06:11 +00:00
Love Hörnquist Åstrand
7154d3b11d Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17872 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:03:26 +00:00
Love Hörnquist Åstrand
702b7b61f4 rename command to supported-mechanisms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17871 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 14:54:05 +00:00
Love Hörnquist Åstrand
7b226efc09 rename command to supported-mechanisms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17870 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 14:48:58 +00:00
Love Hörnquist Åstrand
f60c032c64 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17869 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 02:37:29 +00:00
Love Hörnquist Åstrand
d88a0c2607 Make gss objects depend on the slc built gss-commands.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17868 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 02:37:08 +00:00
Love Hörnquist Åstrand
feb36e2e72 Add the slc file gss-commands.in to gss program
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17867 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-21 09:06:52 +00:00
Love Hörnquist Åstrand
5a4d04ed30 remove aes-192
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17866 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 21:37:17 +00:00
Love Hörnquist Åstrand
0cc87e8758 Remove more CMS bits.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17865 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 21:37:16 +00:00
Love Hörnquist Åstrand
45445f0304 make chap work too (needed for eap-md5)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17864 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 13:33:43 +00:00
Love Hörnquist Åstrand
36a68f2522 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17863 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 11:23:25 +00:00
Love Hörnquist Åstrand
80e3f2716a Remove CMS symmetric encryption support.
Add DigestProtocol.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17862 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 11:23:07 +00:00