Commit Graph

66 Commits

Author SHA1 Message Date
Jelmer Vernooij
1ad64fe599 hdb.h: Include krb5.h first, so hdb.h can be included standalone.
This makes it a bit easier to find libhdb in e.g. configure tests and
is consistent with the main header files for the other Heimdal
libraries, none of which has any prerequisite other headers.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-01-03 11:51:09 +01:00
Love Hornquist Astrand
6c6726d76c drop hdb_fetch 2010-11-28 11:46:46 -08:00
Love Hornquist Astrand
8ece8672ae kvno is krb5_kvno not unsigned 2010-11-28 11:19:15 -08:00
Andrew Bartlett
f469fc6d49 heimdal Add support for extracting a particular KVNO from the database
This should allow master key rollover.

(but the real reason is to allow multiple krbtgt accounts, as used by
Active Directory to implement RODC support)

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-11-28 09:52:54 -08:00
Love Hornquist Astrand
37fcf33d7c document hdb_entry_ex 2010-11-18 23:40:09 -08:00
Love Hornquist Astrand
c71d2bf0d3 spelling, From Kaiting Chen <kaitocracy@gmail.com> 2010-11-18 23:25:18 -08:00
Andrew Bartlett
0e128912af s4:heimdal Add hooks to check with the DB before we allow s4u2self
This allows us to resolve multiple forms of a name, allowing for
example machine$@REALM to get an S4U2Self ticket for
host/machine@REALM.

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-09-26 15:11:05 -07:00
Karolin Seeger
260e19ac09 s4-heimdal: Fix typo in comment.
Karolin

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-09-26 15:06:58 -07:00
Love Hornquist Astrand
83e2a17c0f document more assumptions about hdb_rename 2010-03-21 14:56:57 -07:00
Love Hornquist Astrand
70835f3119 add hdb_get_realms 2009-11-22 06:34:29 -08:00
Love Hornquist Astrand
39a751d6fb expose hdb_interface_version 2009-10-13 09:35:39 -07:00
Love Hornquist Astrand
ff87429593 Make LDAP code fetch less attributes from LDAP server when KDC is asking
Johan Gadsjö did a awesome analysis of the LDAP access pattens
and sent us a patch that reduced the calls the ldap server by 4
times as many. The patch was adopted and change to avoid compile
time depencies and make the determination runtime instead. Thanks!
2009-10-03 13:20:41 -07:00
Andrew Bartlett
f8c121b282 Add support for user principal names in certificates [HEIMDAL-602]
This extends the PKINIT code in Heimdal to ask the HDB layer if the
User Principal Name name in the certificate is an alias (perhaps just
by case change) of the name given in the AS-REQ.  (This was a TODO in
the Heimdal KDC)

The testsuite is extended to test this behaviour, and the other PKINIT
certficate (using the standard method to specify a principal name in a
certificate) is updated to use a Administrator (not administrator).
(This fixes the kinit test).
2009-08-04 09:34:58 +02:00
Love Hörnquist Åstrand
45ef83f6fd add hdb_check_constrained_delegation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:26:25 +00:00
Love Hörnquist Åstrand
5c104ef172 add ->hdb_password and ->hdb_auth_status
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25298 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:25:29 +00:00
Love Hörnquist Åstrand
a28a9a1b30 comment about hdb_capability_flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25296 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 04:24:48 +00:00
Love Hörnquist Åstrand
ba04bad361 From Andrew Bartlet via heimdal-bugs@h5l.org
s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups

    The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail
    list user principal name) in an AS-REQ.  Evidence from the wild
    (Win2k8 reportadely) indicates that this is instead valid for all
    types of requests.

    While this is now handled in heimdal/kdc/misc.c, a flag is now defined
    in Heimdal's hdb so that we can take over this handling in future (once we start
    using a system Heimdal, and if we find out there is more to be done
    here).

    Andrew

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25293 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 03:16:35 +00:00
Love Hörnquist Åstrand
e6b3f6f796 document hdb__ functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25083 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 17:45:01 +00:00
Love Hörnquist Åstrand
6fac16450a doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25081 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 17:22:10 +00:00
Love Hörnquist Åstrand
f90c2b8194 don't use hdb_dbc.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24974 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-28 17:08:21 +00:00
Love Hörnquist Åstrand
7cbcadcb21 document
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24973 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-28 17:08:10 +00:00
Love Hörnquist Åstrand
037366a584 document part of hdb.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24972 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-28 17:07:58 +00:00
Love Hörnquist Åstrand
1dd8ec4fe7 Provide a more standard way to produce hdb plugins. From Andrew Bartlett
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24030 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-12 04:19:00 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
8d8507fbf8 move static path into local headers that are not installed to prepare for configure-time relocations. Prompted by Hai Zaars FHS thread on heimdal-discuss
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22198 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-07 13:09:25 +00:00
Love Hörnquist Åstrand
2af7094535 Forward declaration for struct hdb_dbinfo;
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20535 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-23 07:49:16 +00:00
Love Hörnquist Åstrand
f8217f8b04 Add HDB_F_CANON.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-17 00:02:38 +00:00
Love Hörnquist Åstrand
0db21e2b07 Bump hdb interface version to 4.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17328 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-28 07:37:11 +00:00
Love Hörnquist Åstrand
47d79a7568 Break out the that we request from principal from the entry and pass
it in as a seprate argument. Add more flags to ->hdb_get(). Re-indent.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17305 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 10:59:32 +00:00
Love Hörnquist Åstrand
0c2369acd0 Wrap hdb_entry with hdb_entry_ex, patch originally from Andrew Bartlet
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-12 12:40:12 +00:00
Love Hörnquist Åstrand
475b015e3c Update (c).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15877 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-11 13:16:44 +00:00
Love Hörnquist Åstrand
848bf1b529 Update interface version (and indent).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15876 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-11 13:16:29 +00:00
Love Hörnquist Åstrand
0540f13b86 prefix all struct HDB elements with hdb_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12880 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-19 00:25:35 +00:00
Love Hörnquist Åstrand
c12e22c5ee add struct hdb_so_method and HDB_INTERFACE_VERSION
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12410 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-06-29 12:08:34 +00:00
Johan Danielsson
bea226bd5e add key usage
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8613 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-07-08 16:03:59 +00:00
Johan Danielsson
0e3158a838 rewrite master key handling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8546 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-07-05 13:08:13 +00:00
Assar Westerlund
145d713bee (HDB): add dbc for db3
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8354 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-07 21:20:54 +00:00
Assar Westerlund
7438732940 right
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8330 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-06 23:41:50 +00:00
Assar Westerlund
116da12727 (struct HDB): add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8329 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-06 23:40:16 +00:00
Johan Danielsson
c5b916ca6f remove advertising clause
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7464 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-12-02 17:05:13 +00:00
Johan Danielsson
819529b1c0 hdb_kt_ops
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6872 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-08-26 13:08:16 +00:00
Johan Danielsson
1736b19ebe add master_key_version to struct hdb, update prototypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6087 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-05-03 16:50:19 +00:00
Johan Danielsson
5b473763a4 prototype for `hdb_set_master_keyfile'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5391 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-02-20 15:07:00 +00:00
Assar Westerlund
07b396914c update prototypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5360 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-02-13 17:50:53 +00:00
Assar Westerlund
2032781fa8 rename delete -> remove
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5241 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-11-23 11:54:22 +00:00
Assar Westerlund
dfb589f3b0 more prototypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3755 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-11-02 04:09:46 +00:00
Assar Westerlund
1c7c304b6c (struct HDB): add open', master_key*', and `destroy'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3625 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-10-16 04:12:51 +00:00
Johan Danielsson
4763026f1f protos
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3368 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-03 20:14:25 +00:00
Johan Danielsson
1fe7690453 protos
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3365 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-09-03 18:19:25 +00:00