Andrew Bartlett
f8c121b282
Add support for user principal names in certificates [HEIMDAL-602]
...
This extends the PKINIT code in Heimdal to ask the HDB layer if the
User Principal Name name in the certificate is an alias (perhaps just
by case change) of the name given in the AS-REQ. (This was a TODO in
the Heimdal KDC)
The testsuite is extended to test this behaviour, and the other PKINIT
certficate (using the standard method to specify a principal name in a
certificate) is updated to use a Administrator (not administrator).
(This fixes the kinit test).
2009-08-04 09:34:58 +02:00
Love Hornquist Astrand
147184381e
Check for NUL in the middle of the string
2009-08-04 00:57:35 +02:00
Love Hornquist Astrand
0d2e1a1692
1.3.0pre1
2009-08-03 16:21:02 +02:00
Love Hornquist Astrand
3cebc3767f
add more test to test_acquire_cred that removes the need of test_init_creds.c
2009-08-03 13:05:36 +02:00
Love Hornquist Astrand
8669bc5209
test more combinations
2009-08-03 12:46:49 +02:00
Love Hornquist Astrand
e6c2a70678
Indent some more
2009-08-03 12:10:07 +02:00
Love Hornquist Astrand
b2129c0751
Indent the patch from Andrew and make it compile again
2009-08-03 10:54:44 +02:00
Love Hornquist Astrand
ada7c73176
Indent the patch from Andrew and make it compile again
2009-08-03 10:50:50 +02:00
Love Hornquist Astrand
788480d28a
heimdal Extend the 'hdb as a keytab' code [HEIMDAL-600]
...
This extends the hdb_keytab code to allow enumeration of all the keys.
The plan is to allow ktutil's copy command to copy from Samba4's
hdb_samba4 into a file-based keytab used in wireshark.
From Andrew Bartlett
2009-08-03 10:43:22 +02:00
Love Hornquist Astrand
99a05b37ca
Add missing ',' between parameters [HEIMDAL-599]
...
From Michael Hammer of Gentoo, make this work with autoconf-2.64
2009-08-03 09:52:17 +02:00
Love Hornquist Astrand
296ebb00ba
x
2009-07-31 14:15:13 +02:00
Love Hornquist Astrand
7b662b1fb5
x
2009-07-31 10:20:32 +02:00
Love Hornquist Astrand
44d0637328
x
2009-07-31 10:15:29 +02:00
Love Hornquist Astrand
01b53ac015
x
2009-07-31 07:29:09 +02:00
Love Hornquist Astrand
ff89a727d4
Fix bounced condition
2009-07-30 19:19:35 +02:00
Love Hornquist Astrand
4d200dd2d5
Clean the list in a simpler way
2009-07-30 18:56:23 +02:00
Love Hornquist Astrand
20d4cca179
Make skip-ing work again, so that tests passes again
2009-07-30 18:55:45 +02:00
Love Hornquist Astrand
ce28389265
Failed to open sockets.
2009-07-30 15:53:39 +02:00
Love Hornquist Astrand
20a06042da
require local
2009-07-30 15:52:22 +02:00
Love Hornquist Astrand
856b8484c3
ignore different
2009-07-30 15:41:02 +02:00
Love Hornquist Astrand
ae58266705
More doxygen.
2009-07-30 15:36:25 +02:00
Love Hornquist Astrand
c97cc4647c
rename kcm_protos to kcm-protos.h
2009-07-30 15:03:28 +02:00
Love Hornquist Astrand
b10f885c59
Rename login_protos.h to login-protos.h
2009-07-30 14:48:37 +02:00
Love Hornquist Astrand
11024751a5
make compile
2009-07-30 14:25:12 +02:00
Love Hornquist Astrand
00658426b2
c->c_name always set
2009-07-30 14:20:22 +02:00
Love Hornquist Astrand
98b23aa4c7
(sendrequest) local must be set [CID-45]
2009-07-30 14:17:45 +02:00
Love Hornquist Astrand
30b87b0633
Dont look too careful on local [CID-23]
2009-07-30 14:16:20 +02:00
Love Hornquist Astrand
3608b815b4
Don't bother checking usage of minor_status [CID-23]
2009-07-30 14:01:57 +02:00
Love Hornquist Astrand
901bac07e8
Don't need to look check *input_name twice [CID-27].
2009-07-30 14:00:48 +02:00
Love Hornquist Astrand
08256017e4
Don't dereference input_name [CID-27].
2009-07-30 13:59:42 +02:00
Love Hornquist Astrand
705e50b079
Check name before using it [CID-43]
2009-07-30 13:48:39 +02:00
Love Hornquist Astrand
a4df44985d
use default princial if none is set [CID-48]
2009-07-30 13:22:46 +02:00
Love Hornquist Astrand
0f5f5947aa
make sure client is set before trying to use it [CID-50]
2009-07-30 13:20:00 +02:00
Love Hornquist Astrand
a1e127a3a8
Make sure we don't use negative indexing [CID-57]
2009-07-30 13:10:59 +02:00
Love Hornquist Astrand
c9bb8ba35f
Fail on parse error instead of craching [CID-58]
2009-07-30 13:08:54 +02:00
Love Hornquist Astrand
8490e8fd34
make compile
2009-07-30 13:04:30 +02:00
Love Hornquist Astrand
e977f1cf2f
You don't exists [CID-60]
2009-07-30 13:03:27 +02:00
Love Hornquist Astrand
fab281f465
(setnmap): make sure strchr returned a string [CID-65]
2009-07-30 13:00:34 +02:00
Love Hornquist Astrand
7d8d09f3c0
make compile
2009-07-30 12:56:54 +02:00
Love Hornquist Astrand
e184e053dd
Catch memory allocation failures [CID-61]
2009-07-30 12:56:21 +02:00
Love Hornquist Astrand
3af78ea3fb
out of memory [CID-63]
2009-07-30 12:53:50 +02:00
Love Hornquist Astrand
4674f2dc6c
Better length checks [CID-67]
2009-07-30 12:50:01 +02:00
Love Hornquist Astrand
a5b015ab7e
Make sure av is freed if its allocated [CID-73]
2009-07-30 12:40:13 +02:00
Love Hornquist Astrand
f3cf321660
Fail harder (exit) in case of failure [CID-76]
2009-07-30 12:32:23 +02:00
Love Hornquist Astrand
25b0f731ab
Better handling of memory allocation failure [CID-77]
2009-07-30 12:27:19 +02:00
Love Hornquist Astrand
60c9bca968
Free new_key_data in case of failure [CID-78]
2009-07-30 12:10:14 +02:00
Love Hornquist Astrand
149edc15f7
Free krb5_auth_context [CID-95]
2009-07-30 12:03:33 +02:00
Love Hornquist Astrand
dc95a7983d
Release ticket on failure [CID-96]
2009-07-30 11:59:15 +02:00
Love Hornquist Astrand
b2aaf4f306
free auth_context on close [CID-97]
2009-07-30 11:55:42 +02:00
Love Hornquist Astrand
2127d8d6bc
free auth_context on close [CID-98]
2009-07-30 11:19:15 +02:00
