Commit Graph

1783 Commits

Author SHA1 Message Date
Love Hornquist Astrand
2b1645aa08 catch error from as.*printf 2010-05-30 13:44:41 -07:00
Love Hornquist Astrand
a7e8f05c9b Check the GSS-API checksum exists before trying to use it [CVE-2010-1321]
This was introduced by checking the Kerberos 5 checksum as a
alternative to the 8003 checksum.

Thanks to MIT Kerberos and Shawn Emery for forwarding this issue
2010-05-26 11:53:31 -05:00
Love Hornquist Astrand
b7c0365677 fix documentation 2010-04-08 15:36:27 -07:00
Love Hornquist Astrand
312f4f9bd6 GSS_C_NO_OID matches nothing, not even it-self, document function 2010-03-30 11:18:49 -07:00
Love Hornquist Astrand
aaf310f99e constify 2010-03-23 20:20:51 -07:00
Love Hornquist Astrand
53024a5a22 start to document gss_import_name 2010-02-21 23:21:58 +01:00
Love Hornquist Astrand
521098738c document gss_release_name 2010-02-21 23:21:43 +01:00
Love Hornquist Astrand
3ddb2af8d5 more flags and stuff 2010-02-13 17:41:33 -08:00
Love Hornquist Astrand
33e9da40b4 *** empty log message *** 2010-02-13 17:39:08 -08:00
Love Hornquist Astrand
61d6c3b9c5 add flags in gssapi_context_flags 2010-02-13 17:38:56 -08:00
Love Hornquist Astrand
53f7c6be92 more refs 2010-02-13 17:28:29 -08:00
Love Hornquist Astrand
57332c9b7d gssapi_mechs_intro 2010-02-13 17:28:13 -08:00
Love Hornquist Astrand
b7581f5dcb document more about mechs 2010-02-13 17:27:14 -08:00
Love Hornquist Astrand
96852bdc79 list contants for mechs 2010-02-13 17:23:09 -08:00
Love Hornquist Astrand
84b58b78b6 start of documention of gss_init_sec_context 2010-02-13 17:14:46 -08:00
Love Hornquist Astrand
609e8dd156 reset GSS_C_DELEG_FLAG when there is no consumer 2010-01-19 21:22:53 +00:00
Love Hornquist Astrand
102087bd67 export GSS_KRB5_CRED_NO_CI_FLAGS_X, needed by samba 2010-01-02 17:48:26 +01:00
Asanka Herath
a0ae9f5a0e Merge remote branch 'h-github/master' into win32-port2
* h-github/master: (64 commits)
  refix socket wrappers with rk_
  Patch from Secure Endpoints/Asanka Herath for windows support
  unset KRB5CCNAME
  its really just LIBADD more most of them
  correct quoting
  Use -lpthread for modern freebsd instead
  clean KRB5CCNAME and KRB5_CONFIG, require test to reset them
  more up ${env_setup}
  use PTHREADS_LIBADD for freebsd6 and newer
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  switch to PTHREADS_LIBADD
  log what the error string say too
  More debug logging
  sprinkle more 'echo "test failed"'
  sprinkle 'echo "test failed"'
  use calloc(), indent more prettier
  in sh, equal compare is really = for strings, not ==
  Check for duplicates, already loaded mechs
  ...

Conflicts (resolved):
	lib/krb5/auth_context.c
	lib/krb5/changepw.c
	lib/krb5/context.c
	lib/krb5/error_string.c
	lib/krb5/kuserok.c
	lib/krb5/libkrb5-exports.def.in
	lib/krb5/net_write.c
	lib/krb5/store_fd.c
	lib/krb5/test_cc.c
	lib/roken/strerror_r.c
2009-12-21 13:44:00 -05:00
Asanka Herath
349915e438 Fix comment 2009-12-21 13:09:26 -05:00
Love Hornquist Astrand
eadb8838cb use calloc(), indent more prettier 2009-12-14 21:40:16 -08:00
Love Hornquist Astrand
a740ee89bc Check for duplicates, already loaded mechs 2009-12-14 17:16:59 -08:00
Love Hornquist Astrand
9f5772050b Match old code and use krb5_sname_to_principal on the imported name for acquire cred.
Reported by Jan Rekorajski
2009-12-13 22:55:36 -08:00
Love Hornquist Astrand
5b7780b997 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:35:18 -08:00
Love Hornquist Astrand
c402cda0a4 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:30:06 -08:00
Love Hornquist Astrand
5a23717814 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:29:48 -08:00
Asanka Herath
9227b99979 (lib/gssapi) Add missing dependencies to NTMakefile 2009-12-01 01:50:44 -05:00
Love Hornquist Astrand
01a1e1baef check that gss_krb5_set_allowable_enctypes works 2009-11-30 17:19:13 -08:00
Love Hornquist Astrand
c6bbdb545b First drop of Windows build infrastructure from Secure Endpoints 2009-11-24 12:12:53 -08:00
Asanka Herath
988792b3f7 Build system update for lib/gssapi and new exports.def 2009-11-24 10:18:19 -08:00
Asanka Herath
ce7d784648 Avoid using 'interface' as a variable name 2009-11-24 10:11:16 -08:00
Asanka Herath
72537c1f83 Update gssapi/NTMakefile 2009-11-24 10:11:16 -08:00
Asanka Herath
b1063ea8fc Initial Windows port 2009-11-24 10:11:14 -08:00
Love Hornquist Astrand
f66206220a add context to gss_context_query_attributes(), make oid const 2009-11-22 12:31:00 -08:00
Love Hornquist Astrand
dcf7dc9a93 make oid const 2009-11-22 12:30:37 -08:00
Love Hornquist Astrand
bff407bc9a add context to gss_context_query_attributes() 2009-11-22 12:30:24 -08:00
Love Hornquist Astrand
aa7f658e16 add more depencies 2009-11-21 23:09:50 -08:00
Love Hornquist Astrand
ab1b87b557 drop RCSID 2009-11-14 11:15:57 -08:00
Love Hornquist Astrand
de0102fa0c drop RCSID 2009-11-14 11:14:56 -08:00
Love Hornquist Astrand
a4881ea0d6 [HEIMDAL-646] malloc(0) checks for AIX 2009-10-11 18:04:43 -07:00
Love Hornquist Astrand
75a61b8842 krb5_build_authenticator is private 2009-10-05 22:09:23 -07:00
Love Hornquist Astrand
a132ffe757 Simplify krb5_build_authenticator and unexport 2009-10-05 19:52:28 -07:00
Love Hornquist Astrand
9e13b309d9 use krb5_make_principal 2009-10-04 11:29:43 -07:00
Love Hornquist Astrand
13d580409a Set default realm, makes test pass for hosts w/o default realm 2009-09-19 13:58:00 -07:00
Love Hornquist Astrand
914417c5c8 Remove unused structure 2009-09-19 13:55:34 -07:00
Stefan Metzmacher
103cc941eb gssapi/krb5: set cred_handle in _gsskrb5_import_cred
metze

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2009-09-18 14:29:50 -07:00
Love Hornquist Astrand
3d7488398a abstract out depenecy tracking for tools 2009-09-16 05:40:55 -07:00
Love Hornquist Astrand
dc4e8669ea Abstract out asn1_compile and slc 2009-09-16 00:12:13 -07:00
Love Hornquist Astrand
d890db78a8 Drop RCSID 2009-09-10 09:06:18 -07:00
Love Hornquist Astrand
a0b4f918a8 doxygen 2009-09-10 09:03:43 -07:00
Love Hornquist Astrand
16b4ddcf14 document gss_release_cred 2009-09-06 12:18:14 -07:00