Commit Graph

25977 Commits

Author SHA1 Message Date
Love Hornquist Astrand
65a1ee8163 dont use private prototype 2010-11-20 14:13:31 -08:00
Love Hornquist Astrand
cc42e85e7f Remove deprecated krb4 kdc components 2010-11-20 14:11:35 -08:00
Love Hornquist Astrand
8f2e0a7010 export internal functions so we dont need private headers 2010-11-20 14:05:54 -08:00
Love Hornquist Astrand
6ce02c45a3 use --one-code-file 2010-11-20 13:52:28 -08:00
Love Hornquist Astrand
09c0c65d6f remove v4 support for hprop 2010-11-20 13:26:40 -08:00
Love Hornquist Astrand
37fcf33d7c document hdb_entry_ex 2010-11-18 23:40:09 -08:00
Love Hornquist Astrand
c71d2bf0d3 spelling, From Kaiting Chen <kaitocracy@gmail.com> 2010-11-18 23:25:18 -08:00
Andrew Bartlett
387b0fa7ba Add more required functions to base/version-script.map
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-11 20:43:20 -08:00
Andrew Bartlett
79bf21032a Add new external function krb5_kdc_pkinit_config()
This starts up the pkinit configuration and sets some default values,
and is needed in a seperate function so Samba4 can call it from it's
own KDC wrapper.

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-11 20:42:51 -08:00
Andrew Bartlett
712c6209f2 Fix base/version-script.map to match syntax of other version-script.map files
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-11 20:42:04 -08:00
Love Hornquist Astrand
f6f4517eda first drop of version-script.map 2010-11-10 09:03:52 +01:00
Andrew Tridgell
157d60a0eb heimdal: fixed a shadowed variable warning for error_message
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-08 22:27:32 -08:00
Love Hornquist Astrand
c54b80f00c wrap heim_array_filter() in __BLOCKS__ 2010-11-08 22:20:59 -08:00
Love Hornquist Astrand
457c2d6d2c use md4 to verify md4 2010-11-08 14:39:26 -08:00
Andrew Bartlett
2e34d7cf6e heimdal: fixed the use of error_message() in heimdal
the lex code in heimdal had a function error_message() which is
confusingly the ame as a core function from the com_err library. This
replaces it with lex_error_message(), and allows Samba4 to have a
stricter check for duplicate symbols between it's components.

Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-08 13:43:25 -08:00
Love Hornquist Astrand
2e31740f62 always check for error token in case of a failure 2010-11-08 13:40:01 -08:00
Andrew Bartlett
526aeef0c7 heimdal Add clock-skew handling to DCE-style GSSAPI
The clock skew handling was previously only on properly wrapped
GSSAPI, and was skipped for DCE-style.  This allows the ASN.1 errors
from the krb5_rd_req to suggest parsing as a kerberos error packet.

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-08 13:36:52 -08:00
Love Hornquist Astrand
f178458310 use krb5_data_ct_cmp 2010-11-06 20:53:04 +01:00
Love Hornquist Astrand
5a801c8f4a use krb5_data_ct_cmp 2010-11-06 20:52:53 +01:00
Love Hornquist Astrand
2d1ca83efa use krb5_data_ct_cmp 2010-11-06 20:52:33 +01:00
Love Hornquist Astrand
15f0adad02 add krb5_data_ct_cmp 2010-11-06 20:36:12 +01:00
Love Hornquist Astrand
0be50bf118 add krb5_data_ct_cmp 2010-11-06 20:36:08 +01:00
Love Hornquist Astrand
341f4a2f23 update help text 2010-11-06 20:26:03 +01:00
Love Hornquist Astrand
55c4979df2 Now pac from christian passes since we make hmac checksums always use the raw key 2010-11-06 20:23:49 +01:00
Love Hornquist Astrand
d6b93cec1e internal function _krb5_HMAC_MD5_checksum 2010-11-06 20:11:19 +01:00
Love Hornquist Astrand
55ccd5ff9c use _krb5_enomem and indent 2010-11-06 20:10:26 +01:00
Love Hornquist Astrand
a1f749f4af add _krb5_enomem 2010-11-06 20:09:07 +01:00
Love Hornquist Astrand
5ab43b8520 plug memory leak 2010-11-06 20:01:02 +01:00
Andrew Bartlett
a42b77fb22 heimdal Add handling for PAC signatures over all encryption types
There are exceptions from the expected behaviour of 'checksum type
matches key type' that we must deal with here, or else we can't serve
DES-only servers.

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-06 19:56:48 +01:00
Love Hornquist Astrand
ae948e9932 better help for --no-forward 2010-11-04 18:47:44 -07:00
Love Hornquist Astrand
7d710765b6 make -f mean forwardable 2010-11-04 10:21:33 -07:00
Simon Wilkinson
1d9072f026 krb5: reorganise crypto.c
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.

Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)

Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
Love Hornquist Astrand
6184422fef compare the value of the client realm now that it might not be the same pointer
fixes the check-delegate test that the new direct hop patch broke
2010-11-01 13:46:56 -07:00
Love Hornquist Astrand
a16f7ea0ab add missing
prototype
2010-10-31 01:09:24 -07:00
Asanka C. Herath
a73d30e619 get_cred_kdc_capath() always try direct cross-realm first 2010-10-31 01:04:27 -07:00
Joerg Pulz
344071becb add missing checks for utmpx struct fields
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-31 00:40:50 -07:00
Joerg Pulz
6f5b42957e add some more #ifdefs to compile on utmpx only systems
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-31 00:38:41 -07:00
Joerg Pulz
ef90819a9a rename PTHREADS_LIBADD to PTHREAD_LIBADD
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-31 00:29:54 -07:00
Joerg Pulz
b1bbd18686 fix FreeBSD PTHREAD_LIBADD
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-31 00:28:24 -07:00
Love Hornquist Astrand
501c5ac2fe sort and add ntlm_err.h 2010-10-30 22:19:29 -07:00
Love Hornquist Astrand
aceab099f2 add ntlm_err.h 2010-10-30 22:18:34 -07:00
Love Hornquist Astrand
6f9a423c0a add libheimbase.la 2010-10-30 13:59:19 -07:00
Love Hornquist Astrand
a85c548fd1 wait for dead children, and then abandon the live ones 2010-10-30 12:15:04 -07:00
Love Hornquist Astrand
bbe08b7750 use clear_multi, don't call init twice 2010-10-27 22:19:22 -07:00
Love Hornquist Astrand
6d47c862ec really free memory too 2010-10-27 22:13:04 -07:00
Love Hornquist Astrand
b7ac4c9333 really free memory too 2010-10-27 22:12:30 -07:00
Love Hornquist Astrand
acbdbb753e plug memory leaks 2010-10-27 22:03:36 -07:00
Love Hornquist Astrand
c71fe8f2cd spelling 2010-10-27 21:13:47 -07:00
Love Hornquist Astrand
e334f05ab5 spelling 2010-10-27 21:13:31 -07:00
Love Hornquist Astrand
2eae1a1d30 spelling 2010-10-27 21:09:41 -07:00