Nicolas Williams
c06d5ebfda
Fixes to patches that add *use-strong* parameters.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
8ada355954
Forgot to default use_strongest_server_key...
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
76a192b906
Forgot to default preauth_use_strongest_session_key...
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
256cf6ea12
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
481fe133b2
Also added preauth-use-strongest-session-key krb5.conf kdc parameter, similar to {as, tgs}-use-strongest-session-key. The latter two control ticket session key enctype selection in the AS and TGS cases, respectively, while the former controls PA-ETYPE-INFO2 enctype selection in the AS case.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
a7a8a7e95c
Initial patch to add as-use-strongest-session-key and same for tgs krb5.conf parameters for the KDC. These control the session key enctype selection algorithm for the AS and TGS respectively: if TRUE then they prefer the strongest enctype supported by the client, the KDC and the target principal, else they prefer the first enctype fromt he client's list that is also supported by the KDC and the target principal.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Love Hörnquist Åstrand
ec35b8d4a2
add option to disable --disable-heimdal-documentation
2011-06-14 20:33:44 -07:00
Love Hörnquist Åstrand
4a6fa9a979
distribute version-script.map
2011-06-14 07:18:32 -07:00
Love Hörnquist Åstrand
277bec06e7
simplify error printing, context contains error
2011-06-14 07:11:43 -07:00
Love Hörnquist Åstrand
40a53bae5f
Don't build ppc any more, don't have a compiler for that any more
2011-06-13 21:23:23 -07:00
Love Hörnquist Åstrand
e72940c962
more frameworks for test_name
2011-06-13 21:19:10 -07:00
ghudson@MIT.EDU
3c725a465e
Initialize zero before using it in unwrap_des().
...
Heimdal since fc702a97f5lha@h5l.org >
2011-06-13 21:18:07 -07:00
Love Hörnquist Åstrand
9c040227a5
1.5pre2
2011-06-13 20:29:47 -07:00
Love Hornquist Astrand
ade3d65e73
more limits
2011-05-22 20:57:30 -07:00
Love Hornquist Astrand
9d4addf9c1
fix preferences
2011-05-22 20:47:32 -07:00
Love Hornquist Astrand
8b1b47035d
Switch to krb5_enomem
2011-05-22 20:43:31 -07:00
Love Hörnquist Åstrand
5829bfe476
add LIB_heimbase
2011-05-22 17:28:24 -07:00
Love Hörnquist Åstrand
27f3d822cf
Maybe include <sys/types.h> and <sys/select.h>
2011-05-22 17:14:29 -07:00
Love Hörnquist Åstrand
b019c085bd
handle leaks excluded
2011-05-22 14:26:59 -07:00
Love Hörnquist Åstrand
48a91b7fc5
change prefix ETYPE_ to KRB5_ENCTYPE_ and provide compat symbols
2011-05-22 14:06:40 -07:00
Love Hornquist Astrand
3564726537
support NT_USER_NAME for real
2011-05-22 13:02:08 -07:00
Love Hornquist Astrand
9dc505a721
cred is no longer a name, handle that
2011-05-22 13:01:32 -07:00
Love Hornquist Astrand
12c3c12160
pass in client name
2011-05-22 13:01:00 -07:00
Love Hornquist Astrand
9a5019156c
remove debug and don't check targetname since it doesn't really matter
2011-05-21 13:27:57 -07:00
Love Hornquist Astrand
5564106268
use client-amel
2011-05-21 13:25:51 -07:00
Love Hornquist Astrand
26085dfbc0
allocate enough memory
2011-05-21 13:25:24 -07:00
Love Hornquist Astrand
58ffee93b7
allow GSS_C_NT_USER_NAME too
2011-05-21 13:07:22 -07:00
Love Hornquist Astrand
cb7cbbb906
add more people that have contributed
2011-05-21 12:23:47 -07:00
Love Hornquist Astrand
58ea513056
fix error message
2011-05-21 12:11:04 -07:00
Love Hornquist Astrand
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
25e86d6f4d
check for execinfo.h and backtrace()
2011-05-21 11:55:21 -07:00
Thomas Klausner
97df66c0a0
Put Nd argument after Nd macro.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:27 -07:00
Thomas Klausner
3772533acd
Convert to UTF-8.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:21 -07:00
Thomas Klausner
db8e287e41
Use "Fl Fl" for long options.
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-05-21 11:54:14 -07:00
Love Hornquist Astrand
05a432aaed
let try to exclude __CFInitialize
2011-05-20 08:42:29 -07:00
Luke Howard
79ff133ae9
make gss_acquire_cred_ext private
2011-05-20 14:31:08 +02:00
Love Hornquist Astrand
9cf61bc762
add mech/compat.h for distribution
2011-05-19 00:02:06 -07:00
Love Hornquist Astrand
72fe85c267
fix enum vs int warning
2011-05-18 22:30:46 -07:00
Love Hornquist Astrand
1745da3636
fix const warning
2011-05-18 22:28:54 -07:00
Love Hornquist Astrand
c7c22aef44
clean slc-lex.c
2011-05-18 22:15:49 -07:00
Love Hornquist Astrand
e4580fe4cc
add glue for krb5_einval
2011-05-18 22:00:37 -07:00
Love Hornquist Astrand
4c063f2955
quite const warning
2011-05-18 22:00:20 -07:00
Love Hornquist Astrand
c6c32a431f
provide _krb5_einval and _krb5_debug_backtrace that will ease figuring out when it happens
2011-05-18 21:59:56 -07:00
Love Hornquist Astrand
492492e42a
use new function krb5_einval instead of returning EINVAL directly
2011-05-18 21:59:23 -07:00
Love Hornquist Astrand
3ada607635
Final fixes from Christos Zoulas
2011-05-18 21:58:57 -07:00
Love Hornquist Astrand
9af798f09f
sort, add Roland and Christos.
2011-05-18 21:57:46 -07:00
Jeffrey Altman
5523e33a9f
windows: update README
...
provide additional details about the windows build system
Change-Id: I5196b8e743f3cc969e02f5954bdc6ff91c45e7f1
2011-05-19 00:32:54 -04:00
Jeffrey Altman
c591fb466f
windows: merge module directory selection
...
permit an alternative location for the merge module
directory to be specified.
Change-Id: I911aca232132111c8378a75ff1f4ed63c59e9044
2011-05-19 00:32:53 -04:00
Jeffrey Altman
f51c82c245
link gssapi to heimbase.dll on windows
...
Change-Id: I4635dcdfd0a50353b27d1a4c22f09931ae6b6117
2011-05-19 00:32:53 -04:00
Love Hornquist Astrand
7da5085f07
introduce heim_builtin_expect
2011-05-18 21:23:47 -07:00
