Commit Graph

12474 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
3882d8ca5f Don't require timestamp to be set on delegated token, its already
protected by the outer token (and windows doesn't alway send it)
Pointed out by Zi-Bin Yang <zbyang@decru.com> on heimdal-discuss


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13128 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-22 22:42:16 +00:00
Love Hörnquist Åstrand
f00c4ac492 (receive_loop): when seeking over the entries we already have, skip
over the trailer.
From: Jeffrey Hutzelman <jhutz@cmu.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13126 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-19 03:21:31 +00:00
Love Hörnquist Åstrand
b2d9a55c02 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13125 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-18 23:20:30 +00:00
Love Hörnquist Åstrand
ef7b3a72f6 (main): parse kdc.conf
From: Jeffrey Hutzelman <jhutz@cmu.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13124 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-18 23:19:26 +00:00
Love Hörnquist Åstrand
43d74c9d79 (TESTS): add test_crypto
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13120 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-15 07:04:17 +00:00
Love Hörnquist Åstrand
1c791de2da time crypto operations
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13119 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-15 06:49:20 +00:00
Love Hörnquist Åstrand
210a5b92a6 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13118 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-14 16:30:48 +00:00
Love Hörnquist Åstrand
82fa1ca07c typo, Bruno Rohee <bruno@rohee.com>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13117 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-14 16:29:22 +00:00
Love Hörnquist Åstrand
8f3b927b5f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13115 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-14 03:13:33 +00:00
Love Hörnquist Åstrand
00c0fe1ebb fix {} error, pointed out by Liqiang Zhu
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13114 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-14 03:11:23 +00:00
Love Hörnquist Åstrand
155a667009 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13111 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-10 15:43:20 +00:00
Love Hörnquist Åstrand
33b781c6f6 Sequence number should be stored in bigendian order
From: Luke Howard <lukeh@padl.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13110 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-10 15:40:36 +00:00
Love Hörnquist Åstrand
f0e00bfd8d (krb5_verify_ap_req2): krb5_free_ticket free the ticket now, rewrite
error handling to handle that


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13108 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 01:28:01 +00:00
Love Hörnquist Åstrand
bc935dd347 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13107 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 01:22:46 +00:00
Love Hörnquist Åstrand
711b17e252 (gss_delete_sec_context): don't free ticket, krb5_free_ticket does that now
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13105 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 01:17:13 +00:00
Love Hörnquist Åstrand
3d146065c3 (krb5_free_ticket): free the ticket itself to match mit behavior,
pointed out by Derrick Brashear


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13102 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 00:53:12 +00:00
Love Hörnquist Åstrand
52330937a3 krb5_free_ticket free the whole ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13101 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 00:48:40 +00:00
Love Hörnquist Åstrand
c8d290d46d add krb5_padata_add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13098 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:36:35 +00:00
Love Hörnquist Åstrand
5e15b4e031 krb5_context_data.pkinit_win2k_compatible
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13097 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:34:54 +00:00
Love Hörnquist Åstrand
8260bb511d add pkinit.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13096 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:32:47 +00:00
Love Hörnquist Åstrand
61cd5b101e add support for pkinit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13093 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:52:07 +00:00
Love Hörnquist Åstrand
bb6a4a2b80 rename krb5_pk_init_openssl_ctx to krb5_pk_init_ctx
fix win2k error handling


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13092 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:49:02 +00:00
Love Hörnquist Åstrand
acc61addac make compile again
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13091 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:46:58 +00:00
Love Hörnquist Åstrand
f955c2a095 add the opaque krb5_pk_init_ctx to _krb5_get_init_creds_opt_private
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13090 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:42:03 +00:00
Love Hörnquist Åstrand
0c7a0277a1 PKINIT patch from Daniel Kouril and Petr Holub, I removed the
dependency on valicert asn1 parser, remove smartcard and globus
support (for now). Work to be done on this: DH support, Globus
support, Smartcard support, windows support (MS implements -09 of the
draft), verify that it conforms the new draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13089 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:32:11 +00:00
Love Hörnquist Åstrand
d56cb05fe8 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13088 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-07 23:19:30 +00:00
Love Hörnquist Åstrand
c066dfa9e4 spelling, partly from jmc <jmc@prioris.mini.pw.edu.pl>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13087 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-07 23:18:02 +00:00
Love Hörnquist Åstrand
48a9c79e8f (copy_oid): copy all components
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13084 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-07 07:39:43 +00:00
Love Hörnquist Åstrand
113cf794d6 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13083 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-06 01:34:19 +00:00
Love Hörnquist Åstrand
bb7c2ec23c checksum the header last in MIC token, update to -03
From: Luke Howard <lukeh@padl.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13082 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-06 01:27:50 +00:00
Johan Danielsson
7448fcfe7c document capaths section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13077 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-27 11:14:55 +00:00
Love Hörnquist Åstrand
731fab1b47 (krb5_domain_x500_encode): always zero out encoding to make sure it
have a defined value on failure


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13066 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-22 06:04:35 +00:00
Love Hörnquist Åstrand
4cd19e3fe3 (krb5_domain_x500_encode): if num_realms == 0, set encoding and return
(avoids malloc(0)), check return value for malloc


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13062 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 23:06:50 +00:00
Johan Danielsson
da0880581b [capaths] section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13040 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 11:59:16 +00:00
Johan Danielsson
cf7d2c2fb1 add flag to enforce transited policy
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13035 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 11:09:59 +00:00
Love Hörnquist Åstrand
b446b9833f (krb5_domain_x500_decode): set *num_realms to zero not num_realms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13033 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 10:16:39 +00:00
Johan Danielsson
88e4f61f85 (krb5_decrypt_ticket): try to verify transited realms, unless the
transited-policy-checked flag is set


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:43:30 +00:00
Johan Danielsson
df034198d5 (krb5_domain_x500_decode): handle zero length tr data;
(krb5_check_transited): new function that does more useful stuff


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13025 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:41:27 +00:00
Johan Danielsson
e7a40f2d44 get capath info from [capaths] section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13024 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:40:14 +00:00
Johan Danielsson
7bfff16231 krb5_princ_realm -> krb5_principal_get_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13023 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:38:53 +00:00
Johan Danielsson
744bd74233 krb5_princ_realm -> krb5_principal_get_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13022 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:14:02 +00:00
Johan Danielsson
8ad04cfa43 Sleep forever waiting for lock. Previous method doesn't work well with
a large number of clients accessing the cache at the same time, and
there is no simple way to add a timeout to the lock.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13019 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-16 09:06:39 +00:00
Love Hörnquist Åstrand
002f25a217 print the error value krb5_init_context failed with
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13001 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:33:40 +00:00
Love Hörnquist Åstrand
c5bd98ca49 (krb5_config_parse_file_debug): punt if there is binding before a
section declaration. Bug found by Arkadiusz Miskiewicz <arekm@pld-linux.org>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12999 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:20:46 +00:00
Johan Danielsson
41d0b9d1bd (erase_file): revert a change in previous; if the ccache is a symlink,
kdestroy should remove it


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12995 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 13:03:12 +00:00
Johan Danielsson
14bfec3d54 implement locking
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12993 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-13 12:21:15 +00:00
Love Hörnquist Åstrand
da037fa13e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12987 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-10 01:10:01 +00:00
Love Hörnquist Åstrand
d804698297 test program for verifying password quality function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12986 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-10 01:09:10 +00:00
Love Hörnquist Åstrand
0c7a5a4563 add some help function that is common between ENC_TS and SAM2
free the etype{,2}-infos on failure
move the pa counter into krb5_get_init_creds_ctx


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12984 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 07:48:51 +00:00
Love Hörnquist Åstrand
e31cf630fd x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12983 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-07 04:09:43 +00:00