oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
27,253 Commits 2 Branches 2 Tags
dff11de56b702a99a3273bce3c3f1b452afcb92d
Commit Graph

27253 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Love Hornquist Astrand
8badb652c6 drop __restrict to please old compilers 2011-09-21 17:34:51 +02:00
Jeffrey Altman
63b3cb9749 Windows: fallback to PROV_RNG if no PROV_RSA_FULL 
Heimdal can be executed in environments in which the user
account profile is not loaded.  In such environments it is
not possible to use PROV_RSA_FULL as it stores required
data within the profile.  Instead, fallback to PROV_RNG which
does not store data within the profile and can be used to access
secure random number generator routines.

Change-Id: If600246f39645ed6bf5af0dd237f5adfddcf6c0c
 2011-09-20 16:17:42 -04:00
Jeffrey Altman
9081ab775f Windows: include KAFS when building kuser 
if NO_AFS is not defined include the KAFS library when
building kuser.   the KAFS library does not yet build on
Windows but will in the future.

Change-Id: If2a6c7279d6166cc0f4c49d36f3fa54ad7d19d87
 2011-09-20 16:16:09 -04:00
Love Hornquist Astrand
6272abb227 sleep some extra time before killing java pid so it will have a chance 
write it's stdout to disk
 2011-09-19 11:10:51 +02:00
Love Hornquist Astrand
a2256e00d8 use __deprecated__ 2011-09-19 11:10:51 +02:00
Luke Howard
46d89ed0f4 small build fix for 2010 VC compiler 2011-09-12 20:41:29 +10:00
Luke Howard
775a452313 some Windows build fixes 2011-09-12 20:11:36 +10:00
Love Hornquist Astrand
57d468518f fix __has_extension macro to take an argument 2011-09-11 18:30:45 +02:00
Love Hornquist Astrand
4b0087fd4a use __has_extension(attribute_deprecated_with_message) if it exists 2011-09-09 14:16:48 +02:00
Love Hornquist Astrand
977227fc29 update (c) 2011-09-09 11:17:08 +02:00
Love Hornquist Astrand
b94080696a indent 2011-09-09 10:31:46 +02:00
Andrew Bartlett
714d166d04 heimdal: Try to handle the PAC checking when we are in a cross-realm environment 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2011-09-09 10:20:52 +02:00
chas williams - CONTRACTOR
b118610a9c hcrypto: var name current conflicts with linux kernel 
on a big endian machine, usage of this file in the kernel
is somewhat troublesome since the linux kernel already has
a well known global/#define called current.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2011-09-09 10:08:34 +02:00
Love Hornquist Astrand
c63d6e516f use __sync_swap if we have it 2011-09-09 10:03:28 +02:00
Love Hornquist Astrand
f1a6f9a9fa remove warning, remove forward declaration by moving the function up, ident 2011-09-02 05:20:47 -07:00
Harald Barth
38df403d45 Move common code to krb5_unsupported_enctype() and make error message contain string instead of error number 
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
 2011-09-02 05:15:47 -07:00
Love Hornquist Astrand
d931fd0a22 Free handle when done so that we don't leak memory 
Memory leak reported by Craig Ruff
 2011-08-31 11:46:37 -07:00
Love Hornquist Astrand
8861329d81 loop so that we can capture memory leaks 2011-08-31 11:45:47 -07:00
Love Hornquist Astrand
e5ce363778 list both des-cbc-crc and des-cbc-md5 entries 2011-08-31 09:13:37 -07:00
Love Hornquist Astrand
f7821b793d also check for des-cbc-md5 while at it 2011-08-30 23:20:04 -07:00
Love Hörnquist Åstrand
5c262dd3d3 set COMPILE_ET to the found binary at the end if we are using it 2011-08-28 16:19:19 -07:00
Love Hörnquist Åstrand
d500ee7ef2 compile_et is uppercase 2011-08-28 16:08:44 -07:00
Love Hornquist Astrand
3b11e03327 also override compile_et program with using --with-cross-tools 2011-08-27 13:37:12 -07:00
Love Hornquist Astrand
885e53c51a acceptor glue 2011-08-10 17:25:25 -07:00
Love Hornquist Astrand
d3b5bc36fe support ipv6 and don't use channelbindings 2011-08-10 17:25:09 -07:00
Love Hornquist Astrand
960b5d4c5b include jgssapi_server.c 2011-08-10 17:24:20 -07:00
Love Hornquist Astrand
ed573ce9fa test java gssapi server 2011-08-10 17:24:01 -07:00
Love Hornquist Astrand
86243ab19f more java (server) tests 2011-08-10 17:23:35 -07:00
Love Hörnquist Åstrand
d8ae7b5a35 drop krb4 2011-08-10 09:28:16 -07:00
Love Hörnquist Åstrand
4c639408e6 drop krb4 2011-08-10 09:27:48 -07:00
Love Hörnquist Åstrand
308d15615e drop krb4 2011-08-10 09:27:14 -07:00
Love Hörnquist Åstrand
47fee3d056 drop krb4 2011-08-10 09:26:31 -07:00
Love Hörnquist Åstrand
1828443089 drop krb4 2011-08-10 09:26:20 -07:00
Love Hörnquist Åstrand
9fa3112645 drop krb4 2011-08-10 09:25:29 -07:00
Love Hörnquist Åstrand
7cb8e7f742 no more krb4 2011-08-10 09:24:43 -07:00
Love Hörnquist Åstrand
24332f87a0 no more krb4 2011-08-10 09:22:52 -07:00
Love Hörnquist Åstrand
11ac82ecf2 no more krb4 2011-08-10 09:21:32 -07:00
Love Hörnquist Åstrand
ee58c256f4 remove krb4 bits 2011-08-10 09:16:51 -07:00
Love Hörnquist Åstrand
c9e37efbe1 try get spelling right 2011-07-30 14:27:32 -07:00
Love Hörnquist Åstrand
51ccb02b82 some more stuff 2011-07-30 14:19:45 -07:00
Love Hörnquist Åstrand
fc3b4fcd3e drop unused KRB4 bits 2011-07-30 14:17:09 -07:00
Love Hörnquist Åstrand
646906538b drop unused KRB4 bits 2011-07-30 14:15:14 -07:00
Love Hörnquist Åstrand
4a43975270 drop unused KRB4 bits 2011-07-30 14:14:52 -07:00
Love Hörnquist Åstrand
378f34b4be Always to CANON for tgs 2011-07-30 13:43:00 -07:00
Love Hörnquist Åstrand
63672067ea add nob for [kadmin]allow_self_change_password 2011-07-30 12:34:40 -07:00
Love Hörnquist Åstrand
0ed83cebd3 disable old deprecated enctypes 2011-07-30 12:11:08 -07:00
Stefan Metzmacher
c98d9f4387 kdc: fix comparision between krb5uint32 and (unsigned int) 
We don't need a cast in that case.

Before commit 1124c4872d
(KVNOs are krb5uint32 in RFC4120, make it so),
we compared krb5int32 casted to size_t with unsigned int,
which resulted in the following problem:

Casting krb5int32 to (size_t) is wrong, as sizeof(int)==4 != sizeof(size_t)== 8.

If you cast negative int values to size_t you'll get this:

int ival = -5000; // 0xFFFFEC78
size_t sval = (size_t)ival; // this will be 0xFFFFFFFFFFFFEC78

So we better compare while casting to (unsigned int).

This is important for Active Directory RODC support,
which adds a random number into the higher 16-bits of the
32-bit kvno value.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2011-07-30 11:57:01 -07:00
Stefan Metzmacher
57300e1482 kuser/kinit: make it possible to use --windows option on its own 
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2011-07-30 11:56:46 -07:00
Andrew Bartlett
880a98df1a kdc: Build ticket with the canonical server name 
We need to use the name that the HDB entry returned, otherwise we
will not canonicalise the reply if requested.

Andrew Bartlett

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2011-07-30 11:56:46 -07:00
Stefan Metzmacher
83a22ce18f kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ to the hdb layer 
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2011-07-30 11:56:46 -07:00