Commit Graph

7040 Commits

Author SHA1 Message Date
Johan Danielsson
cf7d2c2fb1 add flag to enforce transited policy
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13035 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 11:09:59 +00:00
Love Hörnquist Åstrand
b446b9833f (krb5_domain_x500_decode): set *num_realms to zero not num_realms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13033 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 10:16:39 +00:00
Johan Danielsson
88e4f61f85 (krb5_decrypt_ticket): try to verify transited realms, unless the
transited-policy-checked flag is set


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:43:30 +00:00
Johan Danielsson
df034198d5 (krb5_domain_x500_decode): handle zero length tr data;
(krb5_check_transited): new function that does more useful stuff


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13025 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:41:27 +00:00
Johan Danielsson
e7a40f2d44 get capath info from [capaths] section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13024 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:40:14 +00:00
Johan Danielsson
7bfff16231 krb5_princ_realm -> krb5_principal_get_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13023 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:38:53 +00:00
Johan Danielsson
744bd74233 krb5_princ_realm -> krb5_principal_get_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13022 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:14:02 +00:00
Johan Danielsson
8ad04cfa43 Sleep forever waiting for lock. Previous method doesn't work well with
a large number of clients accessing the cache at the same time, and
there is no simple way to add a timeout to the lock.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13019 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-16 09:06:39 +00:00
Love Hörnquist Åstrand
002f25a217 print the error value krb5_init_context failed with
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13001 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:33:40 +00:00
Love Hörnquist Åstrand
c5bd98ca49 (krb5_config_parse_file_debug): punt if there is binding before a
section declaration. Bug found by Arkadiusz Miskiewicz <arekm@pld-linux.org>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12999 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:20:46 +00:00
Johan Danielsson
41d0b9d1bd (erase_file): revert a change in previous; if the ccache is a symlink,
kdestroy should remove it


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12995 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:03:12 +00:00
Johan Danielsson
14bfec3d54 implement locking
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12993 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 12:21:15 +00:00
Love Hörnquist Åstrand
da037fa13e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12987 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-10 01:10:01 +00:00
Love Hörnquist Åstrand
d804698297 test program for verifying password quality function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12986 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-10 01:09:10 +00:00
Love Hörnquist Åstrand
0c7a5a4563 add some help function that is common between ENC_TS and SAM2
free the etype{,2}-infos on failure
move the pa counter into krb5_get_init_creds_ctx


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12984 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 07:48:51 +00:00
Love Hörnquist Åstrand
e31cf630fd x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12983 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 04:09:43 +00:00
Love Hörnquist Åstrand
535b4f1e94 If its a MEMORY cc, make a copy. We need to do this since now
gss_release_cred will destroy the cred. This should be really be
solved a better way.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12982 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 04:08:57 +00:00
Love Hörnquist Åstrand
9b8678e016 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12979 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 01:02:14 +00:00
Love Hörnquist Åstrand
ced74c3564 (gss_release_cred): if its a mcc, destroy it rather the just release it
Found by: "Zi-Bin Yang" <zbyang@decru.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12977 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 00:51:46 +00:00
Love Hörnquist Åstrand
7c51fd6e95 (acquire_initiator_cred): use kret instead of ret where appropriate
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12976 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 00:37:04 +00:00
Love Hörnquist Åstrand
911c773668 add flag --warn-mit-syntax that warns for mit syntax is used and just
ignore the mit syntax when its used


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12969 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-06 19:27:35 +00:00
Love Hörnquist Åstrand
bae73d1a95 parse [kdc]use_2b and [gssapi]
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12968 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-06 19:15:04 +00:00
Love Hörnquist Åstrand
309a5a11fb x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12967 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-05 00:16:34 +00:00
Love Hörnquist Åstrand
7d3afe0d9b let t and n match zero or more whitespaces
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12964 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-04 05:15:29 +00:00
Love Hörnquist Åstrand
2b0cf9b3eb add BOOLEAN
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12962 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 23:49:41 +00:00
Love Hörnquist Åstrand
803a7c3db6 (_krb5_krb_dest_tkt): unlink v4 token
(get_krb4_cc_name): move out from _krb5_krb_tf_setup
(_krb5_krb_tf_setup): adapt to allocated filename instead of static filename


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12958 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 12:03:03 +00:00
Love Hörnquist Åstrand
cbb6dc1b85 add _krb5_krb_dest_tkt and TKT_ROOT
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12957 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 12:01:47 +00:00
Love Hörnquist Åstrand
d5acb83777 (*) send PA_PAC_REQUEST when the user have requested either use PAC or
not use PAC, if the option not set from the user, leave it up to the
kdc to decide.
(init_creds_loop): clear error string on success


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12956 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 11:53:48 +00:00
Love Hörnquist Åstrand
d341945ac0 add krb5_get_init_creds_opt_set_paq_request
break out common part of extended opt functions to require_ext_opt


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12955 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 11:51:42 +00:00
Love Hörnquist Åstrand
989e429cda add enum krb5_get_init_creds_req_pac
and use it in struct _krb5_get_init_creds_opt_private


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12954 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 11:50:32 +00:00
Love Hörnquist Åstrand
a358b88c42 document krb5_principal_{get,set}_type
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12950 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 04:58:00 +00:00
Love Hörnquist Åstrand
5e2f96156f add krb5_principal_set_type
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12949 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 04:52:06 +00:00
Love Hörnquist Åstrand
97d37d8057 (krb5_rd_req): always free keyblock since its alway used
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12947 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 00:39:21 +00:00
Love Hörnquist Åstrand
adaa1fb814 add SAM types and PAC_REQUEST
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 00:33:20 +00:00
Love Hörnquist Åstrand
e01dbe09dd add more preauth types, add PA-PAC-REQUEST
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12945 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 00:31:01 +00:00
Love Hörnquist Åstrand
8b8bcb8c9b add boolan support
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12944 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-03 00:28:29 +00:00
Love Hörnquist Åstrand
9aaf686b2a (setpw_send_request): free ap_req_data on failure
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12942 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-02 14:39:22 +00:00
Love Hörnquist Åstrand
bb2f366b8f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 18:58:06 +00:00
Love Hörnquist Åstrand
cf4d77c610 (krb5_afslog_uid_home): be even more friendly to the user and fetch
context and id ourself


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 18:55:01 +00:00
Love Hörnquist Åstrand
2b7e870bf4 (init_cred_loop): handle KRB5KRB_ERR_RESPONSE_TOO_BIG and loop again,
this time requesting LARGE_MSG from send to kdc, and if this is the
second time bail out; try to free memory


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12930 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 18:05:27 +00:00
Love Hörnquist Åstrand
bce36e1e1e (krb5_sendto_kdc_flags): new function, and then implement the order
krb5_sendto_kdc* function with this function.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12929 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 17:39:53 +00:00
Love Hörnquist Åstrand
9f1541abe3 (krb5_krbhst_init_flags): new function, use it and adapt callers
(krbhst_get_default_proto): new function, returns udp, or in case
large_msg was requested for the krb5_krbhst_data, use tcp.
(*): if the flag KD_LARGE_MSG was set on the krb5_krbhst_data, avoid
using udp, use krbhst_get_default_proto


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12928 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 17:38:18 +00:00
Love Hörnquist Åstrand
fb67a350b5 flags for krb5_krbhst_init_flags (and krb5_send_to_kdc_flags)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12927 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 17:33:50 +00:00
Love Hörnquist Åstrand
c1cf2654de x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 10:49:11 +00:00
Love Hörnquist Åstrand
d4500b9840 spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-30 10:47:58 +00:00
Love Hörnquist Åstrand
740e4a08a6 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-23 12:13:38 +00:00
Love Hörnquist Åstrand
13ade7c50c (afslog_uid_int): just belive that realm hint the user passed us
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12917 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-23 12:13:28 +00:00
Love Hörnquist Åstrand
e894162147 Add support for AFS when using Kerberos 5,
From: Sergio.Gelato@astro.su.se


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-23 10:55:41 +00:00
Love Hörnquist Åstrand
29f526b115 (krb5_rd_req): if we have a keyblock in auth context, use that
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12914 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-23 10:43:50 +00:00
Love Hörnquist Åstrand
ff3a43e965 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-23 10:08:43 +00:00