b8ce309acb
Permit TESTMechType array to initialize on Windows (C89)
...
Change-Id: I3c006b9c45f29b129ad6f5102792c1e912bd9c8e
2011-07-21 11:36:31 -04:00
f79183821f
sprinkle doxygen and kode more like the rest of the code base
2011-07-19 21:29:19 -07:00
77c8ef2c06
krb5_free_default_realm() from mit_glue.c needs to be exported to be useful.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-19 21:25:47 -07:00
3ef06de67b
Fix a couple of bugs in krb5_c_valid_enctype():
...
1. on errors, it appears to core dump, and
2. the sense of the return code is inverted from the
MIT implementation.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-19 21:25:15 -07:00
7aaba443bc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
9bff431435
sizeof is used incorrectly in DES3_random_to_key()
...
from OpenBSD via Jonathan Gray <jsg@goblin.cx >
2011-07-13 23:16:06 -07:00
49cead6a58
Merge pull request #11 from asankah/master
...
Updates from Asanka to complete the Heimdal on Windows install package. Plugins in Software/Heimdal; customizable 32-bit tools directory in multi-platform installer; Feature Tree view; and updated version number.
2011-06-20 13:26:52 -07:00
45b9139cc4
if we are using db1 or db3 (really 3,4,5), when we will need LIB_db_create, otherwise use LIB_NDBM
2011-06-19 11:20:48 -07:00
5a25df7851
set HEIMDAL_LOCALEDIR for librfc3961.la too
2011-06-19 11:02:27 -07:00
4337582a64
add missing break, quiet clang analyzer
2011-06-19 10:28:51 -07:00
3048545de3
Windows: Use Software/Heimdal registry key for Heimdal specific configuration
...
The 'plugin_dir' value is Heimdal specific. So keep it in the
Software/Heimdal registry key. The Software/Kerberos registry key
will also be loaded and will contain generic Kerberos configuration.
2011-06-15 01:55:19 -04:00
b8ddbe73c4
quite down clang analyzer warnings for the generate asn1 code
2011-06-14 22:29:49 -07:00
63565137d3
don't set i = 0, its never read
2011-06-14 21:57:34 -07:00
7dccddc6fb
count number of enctypes too
2011-06-14 21:44:23 -07:00
0f489b7b28
unexport krb5_init_etype, remove duplicate code
2011-06-14 21:08:52 -07:00
016193ac6a
Added manpage documentation for krb5_{as, tgs}_enctypes.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
2fbad6432b
Initial support for default_{as, tgs}_etypes.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
256cf6ea12
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
481fe133b2
Also added preauth-use-strongest-session-key krb5.conf kdc parameter, similar to {as, tgs}-use-strongest-session-key. The latter two control ticket session key enctype selection in the AS and TGS cases, respectively, while the former controls PA-ETYPE-INFO2 enctype selection in the AS case.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
a7a8a7e95c
Initial patch to add as-use-strongest-session-key and same for tgs krb5.conf parameters for the KDC. These control the session key enctype selection algorithm for the AS and TGS respectively: if TRUE then they prefer the strongest enctype supported by the client, the KDC and the target principal, else they prefer the first enctype fromt he client's list that is also supported by the KDC and the target principal.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
e72940c962
more frameworks for test_name
2011-06-13 21:19:10 -07:00
3c725a465e
Initialize zero before using it in unwrap_des().
...
Heimdal since fc702a97f5lha@h5l.org >
2011-06-13 21:18:07 -07:00
ade3d65e73
more limits
2011-05-22 20:57:30 -07:00
8b1b47035d
Switch to krb5_enomem
2011-05-22 20:43:31 -07:00
5829bfe476
add LIB_heimbase
2011-05-22 17:28:24 -07:00
48a91b7fc5
change prefix ETYPE_ to KRB5_ENCTYPE_ and provide compat symbols
2011-05-22 14:06:40 -07:00
3564726537
support NT_USER_NAME for real
2011-05-22 13:02:08 -07:00
9dc505a721
cred is no longer a name, handle that
2011-05-22 13:01:32 -07:00
26085dfbc0
allocate enough memory
2011-05-21 13:25:24 -07:00
58ffee93b7
allow GSS_C_NT_USER_NAME too
2011-05-21 13:07:22 -07:00
58ea513056
fix error message
2011-05-21 12:11:04 -07:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
97df66c0a0
Put Nd argument after Nd macro.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:27 -07:00
db8e287e41
Use "Fl Fl" for long options.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:14 -07:00
79ff133ae9
make gss_acquire_cred_ext private
2011-05-20 14:31:08 +02:00
9cf61bc762
add mech/compat.h for distribution
2011-05-19 00:02:06 -07:00
c7c22aef44
clean slc-lex.c
2011-05-18 22:15:49 -07:00
e4580fe4cc
add glue for krb5_einval
2011-05-18 22:00:37 -07:00
4c063f2955
quite const warning
2011-05-18 22:00:20 -07:00
c6c32a431f
provide _krb5_einval and _krb5_debug_backtrace that will ease figuring out when it happens
2011-05-18 21:59:56 -07:00
492492e42a
use new function krb5_einval instead of returning EINVAL directly
2011-05-18 21:59:23 -07:00
3ada607635
Final fixes from Christos Zoulas
2011-05-18 21:58:57 -07:00
f51c82c245
link gssapi to heimbase.dll on windows
...
Change-Id: I4635dcdfd0a50353b27d1a4c22f09931ae6b6117
2011-05-19 00:32:53 -04:00
18b76b6236
fcache: prevent null pointer dereference
...
Validate krb5_ccache and krb5_cc_cursor inputs
before use. Avoid null pointer dereference which
can occur if an application fails to properly check
return codes.
Change-Id: I8023808936e60cc7b8e57a062106cfcdc51ee7d7
2011-05-18 10:20:09 -04:00
305596d9ad
Rename subsystem_DEPRECATED to subsystem_DEPRECATED_FUNCTION(X)
...
Start to explain what the replacement function is.
Generate the #define/#undef logic in generated header files.
Use gcc style where the deprecation warning is after the prototype.
2011-05-17 23:12:51 -07:00
9ed040da38
fix compile warning
2011-05-17 23:01:40 -07:00
5774dcfbd8
actually return datum with real content
2011-05-17 21:54:32 -07:00
f78cb2ca4b
Only include myflags if we use HAVE_DB3
2011-05-17 21:48:33 -07:00
01f0a1f509
move tsearch.c to autodetection for libroken.la
2011-05-17 21:47:02 -07:00
4c7ba73439
Default to false(?), at least default to something.
2011-05-17 21:22:45 -07:00
Jeffrey Altman