Love Hornquist Astrand
2daeea4feb
handle error code from size_too_large more correct
2011-09-22 16:36:52 +02:00
Love Hornquist Astrand
f1a6f9a9fa
remove warning, remove forward declaration by moving the function up, ident
2011-09-02 05:20:47 -07:00
Harald Barth
38df403d45
Move common code to krb5_unsupported_enctype() and make error message contain string instead of error number
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-09-02 05:15:47 -07:00
Love Hornquist Astrand
e5ce363778
list both des-cbc-crc and des-cbc-md5 entries
2011-08-31 09:13:37 -07:00
Love Hörnquist Åstrand
11ac82ecf2
no more krb4
2011-08-10 09:21:32 -07:00
Love Hörnquist Åstrand
4a43975270
drop unused KRB4 bits
2011-07-30 14:14:52 -07:00
Love Hörnquist Åstrand
0ed83cebd3
disable old deprecated enctypes
2011-07-30 12:11:08 -07:00
Love Hörnquist Åstrand
b6fc70019e
better error message
2011-07-24 22:33:39 -07:00
Love Hörnquist Åstrand
0941d6dbce
add constant for WELLKNOWN:ORG.H5L realm
2011-07-24 21:29:27 -07:00
Linus Nordberg
bebb50797f
Add krb5_init_creds symbols needed by kinit.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
888780c9e7
add fast symbols
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
e9053800f1
add Fast cookie
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
242d7e1602
comment
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
5d1ae998f9
"better" error codes
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
067072f81e
complete KrbFastFinished message work
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
b6d5637b61
fill in more bits
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
7635eee8c4
simplify
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
04c7dd7cee
start completion of KrbFastFinished
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
91df0a8120
add _krb5_fast_cf2
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
19e572db60
add krb5_process_last_request
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
b73d402a47
export process last request
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
01993e8d76
remove to strict usage
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
a01520cb50
validate KRB5_PADATA_REQ_ENC_PA_REP
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
adf772865c
new use of _krb5_extract_ticket
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
aaf9594429
new use of _krb5_extract_ticket
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
f76cf44d82
add KRB5_ANON_REALM
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
d9b36b3155
add fast.c
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
7b398263da
Partial FAST
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
0ca5e44955
shared key for _krb5_fast_armor_key
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
8e65528f84
disable none
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
2e8b550e7b
punt if caller passed us a crypto object, we didn't find a keyed checksum type
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
7c55029060
Add fast armor bits
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
16d16588d2
move back init_as_req when building packet
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
7bc5fe72fb
more keyusage
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
91fce795af
add more key usage for fast
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
c148c2b432
unused key
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
580ba6aa72
KU bits for fast
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
1879af9e43
Break out fast state, shuffle around state so that as-req is inited earlier
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
04128ac081
Use reply_key from fast layer.
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
fd7c870550
add reply reply_key
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
a5e342f8ba
Add fast_state.
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
8060a561db
switch to KRB5_ENCTYPE
2011-07-24 16:02:22 -07:00
Love Hörnquist Åstrand
8fccb51d49
Merge pull request #12 from nicowilliams/krb5_admin_patches_2nd
...
Krb5 admin patches 2nd
This has all the patches needed for krb5_admind to build and pass most tests, that includes:
- more kadm5 API compatibility (including very basic profile functionality)
- multi-kvno support (useful for key rollovers) (a test for this is included in tests/db/check-kdc)
Unfinished:
- password history (currently uses key history, needs to be separated and use digests)
- policies (only default policy allowed)
- mit kdb changes not tested yet
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 15:41:36 -07:00
Love Hörnquist Åstrand
671e231d75
fix warning
2011-07-24 14:09:23 -07:00
Linus Nordberg
2e35198908
Add version-script.map to _DEPENDENCIES.
...
Added to 11 out of 14 directories with map files. Not lib/ntlm,
lib/hcrypto and kdc which have the map file as an explicit dependency
to _OBBJECTS.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 14:07:59 -07:00
Love Hörnquist Åstrand
f60ec15834
partly unify enctype/keytype since there is only enctypes
2011-07-24 14:03:08 -07:00
Andrew Bartlett
84bc108d8f
lib/krb5: Allow any kvno to match when searching the keytab.
...
Windows does not use a KVNO when it checks it's passwords, and MIT
doesn't check the KVNO when no acceptor identity is specified (looping
over all keys in the keytab).
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org >
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 10:37:40 -07:00
Love Hörnquist Åstrand
4bff0fbb31
check for NULL as argument to krb5_{prepend,set}_error_message functions
2011-07-23 12:06:01 -07:00
Love Hörnquist Åstrand
fb8c65a8c2
better logging
2011-07-23 11:44:42 -07:00
Love Hörnquist Åstrand
12403a31ce
sprinkle more windows files
2011-07-23 11:18:21 -07:00
