oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
27,257 Commits 2 Branches 2 Tags
a952dc2c522d44128b29609d324bba2068dc1593
Commit Graph

192 Commits

Author SHA1 Message Date
Roland C. Dowdeswell
a952dc2c52 Add -F to kinit for compatibility with MIT Kerberos. 2013-02-02 05:42:05 +08:00
Roland C. Dowdeswell
3ea8da179a Fix renewal/refresh logic when kinit is provided with a command. 
1.  in ticket_lifetime() calculate the remaining lifetime
	    of the ticket rather than the requested lifetime.

	2.  in renew_func(), attempt to renew if the tickets are
	    renewable rather than only if --renewable is specified.

	3.  fix the call to renew_validate() in renew_func() to
	    specify renewable tickets if the original tickets are
	    renewable rather than only if --renewable is specified.

	4.  stop printing constant warnings to the terminal about
	    how tickets cannot be obtained if they expire, cannot
	    be renewed and we can't non-interactively obtain fresh
	    ones.  We limit it to a single warning.

	5.  after the tickets expire, we backoff the requests to
	    obtain fresh tickets exponentially.
 2012-10-17 01:32:43 +08:00
Roland C. Dowdeswell
635f5ef5b4 Make kinit print ``Password incorrect'' if it gets KRB5_GET_IN_TKT_LOOP. 2012-03-06 09:28:31 +00:00
Roland C. Dowdeswell
cc47c8fa7b Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues. 
We turn on a few extra warnings and fix the fallout that occurs
when building with --enable-developer.  Note that we get different
warnings on different machines and so this will be a work in
progress.  So far, we have built on NetBSD/amd64 5.99.64 (which
uses gcc 4.5.3) and Ubuntu 10.04.3 LTS (which uses gcc 4.4.3).

Notably, we fixed

	1.  a lot of missing structure initialisers,

	2.  unchecked return values for functions that glibc
	    marks as __attribute__((warn-unused-result)),

	3.  made minor modifications to slc and asn1_compile
	    which can generate code which generates warnings,
	    and

	4.  a few stragglers here and there.

We turned off the extended warnings for many programs in appl/ as
they are nearing the end of their useful lifetime, e.g.  rsh, rcp,
popper, ftp and telnet.

Interestingly, glibc's strncmp() macro needed to be worked around
whereas the function calls did not.

We have not yet tried this on 32 bit platforms, so there will be
a few more warnings when we do.
 2012-02-20 19:45:41 +00:00
Roland C. Dowdeswell
df73c96b74 Populate creds in get_new_tickets before actually using it. 
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2012-01-29 20:58:12 -08:00
Love Hörnquist Åstrand
1a1bd736c0 merge support for FAST in as-req codepath 2011-10-28 19:25:48 -07:00
Stefan Metzmacher
57300e1482 kuser/kinit: make it possible to use --windows option on its own 
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2011-07-30 11:56:46 -07:00
Love Hornquist Astrand
8a5c96e680 process last request and pass in server name 2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
3f0a3c4795 Add fast armor bits 2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
f5f9014c90 Warning fixes from Christos Zoulas 
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
 2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
8f2e0a7010 export internal functions so we dont need private headers 2010-11-20 14:05:54 -08:00
Love Hornquist Astrand
ae948e9932 better help for --no-forward 2010-11-04 18:47:44 -07:00
Love Hornquist Astrand
7d710765b6 make -f mean forwardable 2010-11-04 10:21:33 -07:00
Love Hornquist Astrand
a6f9dfc5ad drop krb4 2010-03-16 20:43:24 -07:00
Love Hornquist Astrand
b48abe2e0d default to forwardable, use keychain password, handle krb5_cc_switch 2009-11-22 09:54:22 -08:00
Love Hornquist Astrand
2a369fc7fe Capture failures from krb5_cc_get_principal() 
Reported by Guillaume Rousse
 2009-10-08 08:19:05 -07:00
Love Hornquist Astrand
ba8b14ebbc use krb5_make_principal 2009-10-04 11:29:29 -07:00
Love Hornquist Astrand
175111efd7 Make renewstr const char * to avoid const warning 
Based on a report from Matthias Dieter Wallnöfer.
 2009-10-03 11:37:38 -07:00
Love Hornquist Astrand
16cb4ae495 make --pk-enterprise work again 2009-09-29 13:14:50 -07:00
Love Hornquist Astrand
a49d9f3376 use _krb5_get_init_creds_opt_set_pkinit_user_certs 2009-09-29 10:49:08 -07:00
Love Hörnquist Åstrand
abd00160ec use krb5_principal_get_realm 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25113 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-04-16 08:04:59 +00:00
Love Hörnquist Åstrand
2de7c28777 use krb5_cc_new_unique, use constants for cache types 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25064 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-04-03 04:08:19 +00:00
Love Hörnquist Åstrand
72f134d145 add change-defaults 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24934 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-03-25 15:35:31 +00:00
Love Hörnquist Åstrand
1403866cae add struct _krb5_krb_auth_data; 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24798 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-22 23:28:47 +00:00
Love Hörnquist Åstrand
c1f55e1376 fix --pk-enterprise to not alias -C 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24634 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-07 04:06:02 +00:00
Love Hörnquist Åstrand
be5c7fd7b0 use _krb5_pk_enterprise_cert 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24617 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-04 22:10:41 +00:00
Love Hörnquist Åstrand
a41a93379a hack in enterprise name support 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24614 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-04 22:10:11 +00:00
Love Hörnquist Åstrand
962802b047 make --anonymous only take realm. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24608 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-04 22:09:11 +00:00
Love Hörnquist Åstrand
22016ebfec make anonymous work 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24601 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-02-04 22:08:01 +00:00
Love Hörnquist Åstrand
04de679306 less warnings 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24391 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-01-25 00:36:29 +00:00
Love Hörnquist Åstrand
e478543524 move rcsid, make afs optional, make ntlm optional 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24366 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-01-25 00:32:21 +00:00
Love Hörnquist Åstrand
d31a29f9e3 add enterprise flag 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24232 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-01-11 21:40:43 +00:00
Love Hörnquist Åstrand
5f8965a381 build on heimdal-smaller 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23981 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-10-26 18:25:12 +00:00
Love Hörnquist Åstrand
f537ed70c6 switch to krb5_clear_error_message 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23918 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-10-14 02:56:58 +00:00
Love Hörnquist Åstrand
fe1a976ae2 new krb5_cc_cache_match 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23905 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-10-13 03:03:21 +00:00
Love Hörnquist Åstrand
62da1e8ff9 select heimdal_kuser as text domain 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23835 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-14 11:54:13 +00:00
Love Hörnquist Åstrand
326718e312 i18n kinit 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23824 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:45:20 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
5ec36048aa allow setting referrals flag 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23676 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-08-25 02:33:55 +00:00
Love Hörnquist Åstrand
55b7603443 pass extra argument to krb5_cc_[gs]et_config. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23418 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-07-26 18:36:48 +00:00
Love Hörnquist Åstrand
d855d2aafa add --ok-as-delegate and --windows flags 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23401 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-07-26 18:29:18 +00:00
Love Hörnquist Åstrand
4af9c1c89e Use krb5_cc_set_config. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23394 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-07-26 18:26:22 +00:00
Love Hörnquist Åstrand
9e76ac04d0 Use krb5_cc_move to make an atomic switch of the cred cache. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22116 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-12-03 21:22:58 +00:00
Love Hörnquist Åstrand
5fed824f37 its vs it\'s etc. From Bjorn Sandell 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22071 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-11-14 20:04:50 +00:00
Love Hörnquist Åstrand
22e0c28f45 krb5-v4compat.h defines prototypes for v4 (semiprivate functions) in 
libkrb5, don't include krb5-private.h any longer.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21483 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-07-10 16:40:46 +00:00
Love Hörnquist Åstrand
fd1ec14122 Add --ntlm-domain that store the ntlm cred for this domain if the 
Kerberos password auth worked.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20517 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-22 10:42:26 +00:00
Love Hörnquist Åstrand
0d1b4d2de9 remove code that depend on kerberos 4 library 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20458 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-19 20:41:27 +00:00
Love Hörnquist Åstrand
09495e7722 KRB5KDC_ERR_PREAUTH_FAILED is also a password failed. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20278 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-02-22 02:04:38 +00:00