Luke Howard
7717cb71c3
tests: check TGS with GSS pre-authentication
...
Validate we can actually get a service ticket when GSS-API pre-authentication
is used, this exercises synthetic client validation.
2021-12-18 15:09:38 +11:00
Nicolas Williams
3da32ef699
Revert "kinit: Try anon PKINIT armored FAST when possible"
...
This reverts commit 313caed18a
2021-12-15 10:18:39 -06:00
Nicolas Williams
313caed18a
kinit: Try anon PKINIT armored FAST when possible
2021-12-14 17:32:20 +11:00
Luke Howard
49f3f5bd99
kdc: support for GSS-API pre-authentication
...
Add support for GSS-API pre-authentication to the KDC, using a simplified
variation of draft-perez-krb-wg-gss-preauth-02 that encodes GSS-API context
tokens directly in PADATA, and uses FX-COOKIE for state management.
More information on the protocol and implementation may be found in
lib/gssapi/preauth/README.md.
2021-08-12 17:37:01 +10:00
Quanah Gibson-Mount
7c16ce3457
Minor typo/grammar fixes
2017-03-10 15:47:43 -05:00
Nicolas Williams
2027aa11ed
Use --detach in tests to avoid waiting
2016-12-07 19:52:29 -06:00
Love Hörnquist Åstrand
4c98e27eda
call hdb_auth_status when password is wrong in the ENC-CHAL case too, thanks Andrew Bartlett for pointing this out
2015-04-28 08:54:24 -07:00
Love Hornquist Astrand
3484432cc5
clean log between test, dump log on failure
2013-07-19 14:53:22 +02:00
Love Hornquist Astrand
fdfe696821
if no db, don't check FAST
2013-06-05 20:33:29 -07:00
Love Hornquist Astrand
4ebfd6b818
make sure logs are truncated
2012-10-07 11:11:17 -07:00
Love Hörnquist Åstrand
a48768fc26
sprinkle more comments
2011-07-24 22:33:49 -07:00
Love Hornquist Astrand
03e73522a3
better status message
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
2991ed7e77
check for FAST
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
13eeb30a1d
Create a request structure
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
17d5f8d19e
make AS work with FAST
2011-07-24 20:24:36 -07:00
