Commit Graph

48 Commits

Author SHA1 Message Date
Roland C. Dowdeswell
0da84c0c3a Add require-pwchange flag to HDB and honour it if present in mit-db:. 2012-02-27 10:19:54 +00:00
Nicolas Williams
dfc7ec92fa Make kadm5_lock() and unlock work, and add kadmin commands for them.
The libkadm5 functions hdb_open() and close around all HDB ops.  This
meant the previous implementation of kadm5_lock() and unlock would
always result in a core dump.  Now we hdb_open() for write in
kadm5_lock() and hdb_close() in kadm5_unlock(), with all kadm5_s_*()
functions now not opening nor closing the HDB when the server context
keep_open flag is set.

Also, there's now kadmin(8) lock and unlock commands.  These are there
primarily as a way to test the kadm5_lock()/unlock() operations, but
MIT's kadmin.local also has lock/unlock commands, and these can be
useful for scripting (though they require much care).
2011-07-22 21:07:48 -05:00
Nicolas Williams
e7ea698366 Fixed dumb bug that caused keys to not accumulate in history. 2011-07-22 16:06:01 -05:00
Nicolas Williams
7e0a801e28 Changed decrypt key history logic and added HDB_F_ALL_KVNOS. 2011-07-22 16:05:21 -05:00
Nicolas Williams
a04721b737 Added basic policy support, w/ policy names listed in krb5.conf 2011-07-22 16:05:21 -05:00
Nicolas Williams
b45ac85b65 Add support for fetching old keys via kadm5 API. 2011-07-22 16:04:51 -05:00
Love Hornquist Astrand
0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
f5f9014c90 Warning fixes from Christos Zoulas
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
965836509b switch to hdb_fetch_kvno 2010-11-28 11:43:02 -08:00
Asanka Herath
b1063ea8fc Initial Windows port 2009-11-24 10:11:14 -08:00
Love Hornquist Astrand
75aebbf616 [HEIMDAL-646] malloc(0) checks for AIX 2009-10-11 17:32:38 -07:00
Love Hornquist Astrand
ff87429593 Make LDAP code fetch less attributes from LDAP server when KDC is asking
Johan Gadsjö did a awesome analysis of the LDAP access pattens
and sent us a patch that reduced the calls the ldap server by 4
times as many. The patch was adopted and change to avoid compile
time depencies and make the determination runtime instead. Thanks!
2009-10-03 13:20:41 -07:00
Love Hörnquist Åstrand
63a9b03afb its ok to not have a password
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25216 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-21 21:37:31 +00:00
Love Hörnquist Åstrand
7afb1de424 catch failure
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25202 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-09 14:21:19 +00:00
Love Hörnquist Åstrand
5d65692492 comment out unsupported options
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25182 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:01:51 +00:00
Love Hörnquist Åstrand
2767e8f372 Send the PK-INIT acl to the client in TL-data, from Henry B. Hotz.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24039 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-12 04:23:03 +00:00
Love Hörnquist Åstrand
8cf907f08a switch to krb5_clear_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-10-14 02:55:55 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
8d40c2994b check return value of alloc functions, from Charles Longeau
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21745 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-31 16:11:25 +00:00
Love Hörnquist Åstrand
f85c99c51b (kadm5_s_get_principal): use right context
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20299 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-11 11:11:46 +00:00
Love Hörnquist Åstrand
aa1680d459 add support to get aliases
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20237 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-16 23:54:34 +00:00
Love Hörnquist Åstrand
0e5d5e7f5e Add KRB5_KDB_ALLOW_DIGEST
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 10:49:46 +00:00
Love Hörnquist Åstrand
6b69db8936 (kadm5_s_get_principal): Add KRB5_KDB_ALLOW_KERBEROS4
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17650 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-14 18:33:02 +00:00
Love Hörnquist Åstrand
b8a9917e8a (kadm5_s_get_principal): Add trusted_for_delegation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-06 21:29:13 +00:00
Love Hörnquist Åstrand
cb704efeeb Rename u_intXX_t to uintXX_t
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17445 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-05 10:37:46 +00:00
Love Hörnquist Åstrand
eea5f34855 Pass in HDB_F_GET_ANY to all ->hdb fetch to hint what entries we are looking for
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17313 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 11:18:52 +00:00
Love Hörnquist Åstrand
5f22b44baa Break out the that we request from principal from the entry and pass
it in as a separate argument.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17310 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 11:09:30 +00:00
Love Hörnquist Åstrand
3148e9f3b0 (kadm5_s_get_principal): memset hdb_entry_ex before use
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16392 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-13 11:33:59 +00:00
Love Hörnquist Åstrand
0c2369acd0 Wrap hdb_entry with hdb_entry_ex, patch originally from Andrew Bartlet
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16378 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-12 12:40:12 +00:00
Love Hörnquist Åstrand
723085bc25 (kadm5_s_get_principal): clear error string
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16041 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-09-08 11:24:45 +00:00
Love Hörnquist Åstrand
1246a22076 Implement KADM5_LAST_PWD_CHANGE.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-11 20:43:43 +00:00
Love Hörnquist Åstrand
dad0c94ffe Expose KADM5_TL_DATA options to the client.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15884 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-11 13:29:54 +00:00
Love Hörnquist Åstrand
f6c9db26bd (kadm5_s_get_principal): set KRB5_KDB_OK_AS_DELEGATE
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15311 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-05-30 20:43:14 +00:00
Love Hörnquist Åstrand
0540f13b86 prefix all struct HDB elements with hdb_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12880 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-09-19 00:25:35 +00:00
Johan Danielsson
328af4c318 pa_* -> KRB5_PADATA_*
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8409 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-19 16:11:31 +00:00
Assar Westerlund
c46407cd43 (kadm5_s_get_principal): set life, rlife to INT_MAX as a fallback.
handle not having any creator.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8214 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-05-12 15:25:23 +00:00
Assar Westerlund
9eebdaa7b2 fix typo
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7679 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-12-26 19:38:23 +00:00
Assar Westerlund
65884f91ed (kadm5_s_get_principal): handle modified_by->principal == NULL
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7674 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-12-26 13:51:14 +00:00
Johan Danielsson
c5b916ca6f remove advertising clause
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7464 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-12-02 17:05:13 +00:00
Johan Danielsson
c3e59002fe add flags to fetch and store; seal keys before logging
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6097 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-05-03 17:09:58 +00:00
Assar Westerlund
59ae5c5cc5 (kadm5_s_get_principal): braces fix
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5566 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-03-17 02:04:00 +00:00
Johan Danielsson
aaae186ab9 merge new-crypto branch
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5332 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-02-11 21:03:59 +00:00
Assar Westerlund
8d3edfa6b9 (kadm5_s_get_principal): always return an error if the principal
wasn't found.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@5301 ec53bebd-3082-4978-b11e-865c3cabbd6b
1999-01-30 18:22:58 +00:00
Assar Westerlund
991b2fac2d (kadm5_s_get_principal): handle an empty salt
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4635 ec53bebd-3082-4978-b11e-865c3cabbd6b
1998-03-21 13:42:20 +00:00
Johan Danielsson
0e9fb80fbb Return values.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3780 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-11-05 23:23:12 +00:00
Johan Danielsson
e90e20ddfd Set correct n_key_data.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3734 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-11-01 02:45:50 +00:00
Johan Danielsson
68d77a285f Beginning of a kadm5-library
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3662 ec53bebd-3082-4978-b11e-865c3cabbd6b
1997-10-25 06:19:27 +00:00