Commit Graph

127 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
d46e99e899 Use unsigned where appropriate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22866 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-07 18:50:12 +00:00
Love Hörnquist Åstrand
2dd8a03423 Make server referral work.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22761 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:55 +00:00
Love Hörnquist Åstrand
090f16f717 better error message, try to handle server referrals slightly better.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22760 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:51 +00:00
Love Hörnquist Åstrand
5d35e96f9f check no server referral, don't use stringent length tests since
encryption layer does padding for us...


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22755 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:32 +00:00
Love Hörnquist Åstrand
d3d7661043 More bits for server referral.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22748 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:05 +00:00
Love Hörnquist Åstrand
e1cb28d159 Make working with client referrals.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22747 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:01 +00:00
Love Hörnquist Åstrand
c3e55c1f54 Try moving referrals checking into _krb5_extract_ticket().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22740 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:34 +00:00
Love Hörnquist Åstrand
dc0a5d69f2 Use EXTRACT_TICKET_* flags.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20226 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-16 03:31:50 +00:00
Love Hörnquist Åstrand
c7b54c3372 Adapt to signature change of _krb5_principalname2krb5_principal.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-06 17:06:30 +00:00
Love Hörnquist Åstrand
e0645d20a6 Make compile.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18201 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-02 11:57:36 +00:00
Love Hörnquist Åstrand
204118e4d1 Always use the kdc_flags in the right bit order.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18200 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-02 11:54:45 +00:00
Love Hörnquist Åstrand
625f4bf27f rename index to i to avoid shadowing
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15389 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-15 02:53:20 +00:00
Love Hörnquist Åstrand
69b55bfa0b use private version of principalname
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14423 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-12-29 18:56:43 +00:00
Love Hörnquist Åstrand
00fd1e3851 (krb5_get_in_cred): clear pointer after freeing data
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14353 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-11-13 21:08:17 +00:00
Love Hörnquist Åstrand
8190ec78b2 (set_ptypes): make ptypes const
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14020 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-07-02 18:41:51 +00:00
Love Hörnquist Åstrand
91351971f7 add KRB5_LIB_FUNCTION to all exported functions
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13863 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-05-25 21:46:46 +00:00
Love Hörnquist Åstrand
a74d87717c (krb5_get_in_cred): abort on internal asn1 encode error
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13304 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-02-03 17:03:42 +00:00
Love Hörnquist Åstrand
70f79440e5 (init_as_req): don't realloc data before the loop, add_padata() will
handle that itself


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12843 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-18 00:38:59 +00:00
Love Hörnquist Åstrand
bc32f47208 (krb5_get_in_tkt): for compatibility with with the mit implemtation,
don't free `creds' argument when done, its up the the caller to do
that, also allow a NULL ccache.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12561 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-08-17 15:52:01 +00:00
Love Hörnquist Åstrand
0bfbd66582 (make_pa_enc_timestamp): make sure first argument to krb5_us_timeofday
have correct type


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12211 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-05-06 05:45:46 +00:00
Jacques A. Vidrine
6710968492 [Dug this out of an email I sent November 2002.]
Currently, if the AS exchange uses PA-ENC-TIMESTAMP, a Heimdal client
will transmit the AS-REQ with one PA-ENC-TIMESTAMP for every supported
encryption type.  This is bad because:

   (1) An eavesdropper collecting this information for dictionary
       attacks will have his life made easier, since he can use
       DES (rather than a stronger crypto system).
   (2) Waste of CPU cycles on client.
   (3) (Maybe) cryptanalysis is assisted by capturing ciphtertexts
       that are known to be the same plaintext encrypted with the
       same key in several algorithms (though the confounder confounds
       this).

The KDC provides the list of etypes supported in PA-ETYPE-INFO in the
KRB-ERROR reply ... let's use the first one, eh?


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11646 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-02-16 06:41:25 +00:00
Johan Danielsson
ddc308c36f use ASN1_MALLOC_ENCODE
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11372 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 16:26:05 +00:00
Johan Danielsson
34a237bf21 only set kdc_sec_offset if looking at an initial ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11329 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-02 17:10:18 +00:00
Johan Danielsson
2c8ad9127f (krb5_init_etype): constify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-04-18 09:11:39 +00:00
Assar Westerlund
9f1c66fe5f use krb5_enctype consistently. From Ben Harris <bjh21@netbsd.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10804 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-01-06 23:10:06 +00:00
Johan Danielsson
e935d25883 (init_as_req): treat no addresses as wildcard
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-02 22:30:48 +00:00
Assar Westerlund
a7337f4e48 (krb5_get_in_cred): clear error string when preauth was required and
we retry


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10004 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-05-27 23:53:25 +00:00
Assar Westerlund
d27aa3b62e add some krb5_{set,clear}_error_string
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9937 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-05-14 06:14:52 +00:00
Assar Westerlund
0cb28a090c (krb5_get_in_cred): set error strings for a few more errors
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9878 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-05-10 15:28:36 +00:00
Assar Westerlund
13758276e2 (krb5_get_in_cred): set some sensible error strings for errors
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9848 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-05-07 05:28:34 +00:00
Assar Westerlund
accdd87f82 check return value from krb5_crypto_init
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8975 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-08-18 06:50:26 +00:00
Johan Danielsson
def1f13529 pa_* -> KRB5_PADATA_*
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8401 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-19 15:28:48 +00:00
Assar Westerlund
9c74183667 (_krb5_extract_ticket): new parameter to determine whetever to ignore
client name of not.  always copy client name from kdc.  fix callers.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8014 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-03-04 15:57:38 +00:00
Assar Westerlund
209565763c update to new prototype of krb5_timeofday
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7857 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-02-06 05:20:51 +00:00
Assar Westerlund
db67429c81 (add_padata): change types to make everything work out
(krb5_get_in_cred): remove const to make types match


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7740 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-01-06 20:36:28 +00:00
Johan Danielsson
c5b916ca6f remove advertising clause
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7464 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-12-02 17:05:13 +00:00
Assar Westerlund
4e5a924e40 (krb5_get_in_cred): generate preauthentication information if we get
back ERR_PREAUTH_REQUIRED


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7358 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-11-12 16:12:52 +00:00
Assar Westerlund
fb7bb330b4 type correctness
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6728 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-08-04 17:20:11 +00:00
Assar Westerlund
849381ffe0 (add_padat): encrypt pre-auth data with all enctypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6411 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-07-04 15:42:35 +00:00
Assar Westerlund
5a2a11f6e6 (krb5_init_etype): error check malloc properly
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6399 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-07-03 02:33:32 +00:00
Assar Westerlund
f4893f23f7 (init_as_req): interpret `addrs' being an empty sit of list as to not
ask for any addresses.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6168 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-05-09 08:49:20 +00:00
Assar Westerlund
f4020ed93d (add_padata): loop over all enctypes instead of just taking the first
one.  fix all callers.  From "Brandon S. Allbery KF8NH"
<allbery@kf8nh.apk.net>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5987 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-04-19 10:26:01 +00:00
Johan Danielsson
25271eab9d (init_as_req): pass context to krb5_get_all_client_addrs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5840 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-04-01 18:25:20 +00:00
Assar Westerlund
4128fd5a71 (krb5_get_in_cred): be more careful about freeing memory
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5754 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-03-24 22:26:42 +00:00
Assar Westerlund
ef4e99052c (krb5_init_etype): etypes are now `int'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5367 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-02-15 21:04:46 +00:00
Johan Danielsson
aaae186ab9 merge new-crypto branch
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5332 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-02-11 21:03:59 +00:00
Johan Danielsson
5ab42022ca Rename PA-KEY-INFO -> ETYPE-INFO.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4618 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-03-21 00:48:46 +00:00
Johan Danielsson
e247ceb526 Remove unused variables.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4513 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-03-01 04:58:52 +00:00
Assar Westerlund
a616058c86 (_krb5_extract_ticket): if time difference is larger than max_skew,
return KRB5KRB_AP_ERR_SKEW


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4387 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-02-12 04:19:15 +00:00
Johan Danielsson
440bf6aeb6 Use krb5_decode_Enc{AS,TGS}RepPart.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4363 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-01-31 16:31:51 +00:00