Commit Graph

27243 Commits

Author SHA1 Message Date
Love Hornquist Astrand
b94080696a indent 2011-09-09 10:31:46 +02:00
Andrew Bartlett
714d166d04 heimdal: Try to handle the PAC checking when we are in a cross-realm environment
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-09-09 10:20:52 +02:00
chas williams - CONTRACTOR
b118610a9c hcrypto: var name current conflicts with linux kernel
on a big endian machine, usage of this file in the kernel
is somewhat troublesome since the linux kernel already has
a well known global/#define called current.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-09-09 10:08:34 +02:00
Love Hornquist Astrand
c63d6e516f use __sync_swap if we have it 2011-09-09 10:03:28 +02:00
Love Hornquist Astrand
f1a6f9a9fa remove warning, remove forward declaration by moving the function up, ident 2011-09-02 05:20:47 -07:00
Harald Barth
38df403d45 Move common code to krb5_unsupported_enctype() and make error message contain string instead of error number
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2011-09-02 05:15:47 -07:00
Love Hornquist Astrand
d931fd0a22 Free handle when done so that we don't leak memory
Memory leak reported by Craig Ruff
2011-08-31 11:46:37 -07:00
Love Hornquist Astrand
8861329d81 loop so that we can capture memory leaks 2011-08-31 11:45:47 -07:00
Love Hornquist Astrand
e5ce363778 list both des-cbc-crc and des-cbc-md5 entries 2011-08-31 09:13:37 -07:00
Love Hornquist Astrand
f7821b793d also check for des-cbc-md5 while at it 2011-08-30 23:20:04 -07:00
Love Hörnquist Åstrand
5c262dd3d3 set COMPILE_ET to the found binary at the end if we are using it 2011-08-28 16:19:19 -07:00
Love Hörnquist Åstrand
d500ee7ef2 compile_et is uppercase 2011-08-28 16:08:44 -07:00
Love Hornquist Astrand
3b11e03327 also override compile_et program with using --with-cross-tools 2011-08-27 13:37:12 -07:00
Love Hornquist Astrand
885e53c51a acceptor glue 2011-08-10 17:25:25 -07:00
Love Hornquist Astrand
d3b5bc36fe support ipv6 and don't use channelbindings 2011-08-10 17:25:09 -07:00
Love Hornquist Astrand
960b5d4c5b include jgssapi_server.c 2011-08-10 17:24:20 -07:00
Love Hornquist Astrand
ed573ce9fa test java gssapi server 2011-08-10 17:24:01 -07:00
Love Hornquist Astrand
86243ab19f more java (server) tests 2011-08-10 17:23:35 -07:00
Love Hörnquist Åstrand
d8ae7b5a35 drop krb4 2011-08-10 09:28:16 -07:00
Love Hörnquist Åstrand
4c639408e6 drop krb4 2011-08-10 09:27:48 -07:00
Love Hörnquist Åstrand
308d15615e drop krb4 2011-08-10 09:27:14 -07:00
Love Hörnquist Åstrand
47fee3d056 drop krb4 2011-08-10 09:26:31 -07:00
Love Hörnquist Åstrand
1828443089 drop krb4 2011-08-10 09:26:20 -07:00
Love Hörnquist Åstrand
9fa3112645 drop krb4 2011-08-10 09:25:29 -07:00
Love Hörnquist Åstrand
7cb8e7f742 no more krb4 2011-08-10 09:24:43 -07:00
Love Hörnquist Åstrand
24332f87a0 no more krb4 2011-08-10 09:22:52 -07:00
Love Hörnquist Åstrand
11ac82ecf2 no more krb4 2011-08-10 09:21:32 -07:00
Love Hörnquist Åstrand
ee58c256f4 remove krb4 bits 2011-08-10 09:16:51 -07:00
Love Hörnquist Åstrand
c9e37efbe1 try get spelling right 2011-07-30 14:27:32 -07:00
Love Hörnquist Åstrand
51ccb02b82 some more stuff 2011-07-30 14:19:45 -07:00
Love Hörnquist Åstrand
fc3b4fcd3e drop unused KRB4 bits 2011-07-30 14:17:09 -07:00
Love Hörnquist Åstrand
646906538b drop unused KRB4 bits 2011-07-30 14:15:14 -07:00
Love Hörnquist Åstrand
4a43975270 drop unused KRB4 bits 2011-07-30 14:14:52 -07:00
Love Hörnquist Åstrand
378f34b4be Always to CANON for tgs 2011-07-30 13:43:00 -07:00
Love Hörnquist Åstrand
63672067ea add nob for [kadmin]allow_self_change_password 2011-07-30 12:34:40 -07:00
Love Hörnquist Åstrand
0ed83cebd3 disable old deprecated enctypes 2011-07-30 12:11:08 -07:00
Stefan Metzmacher
c98d9f4387 kdc: fix comparision between krb5uint32 and (unsigned int)
We don't need a cast in that case.

Before commit 1124c4872d
(KVNOs are krb5uint32 in RFC4120, make it so),
we compared krb5int32 casted to size_t with unsigned int,
which resulted in the following problem:

Casting krb5int32 to (size_t) is wrong, as sizeof(int)==4 != sizeof(size_t)== 8.

If you cast negative int values to size_t you'll get this:

int ival = -5000; // 0xFFFFEC78
size_t sval = (size_t)ival; // this will be 0xFFFFFFFFFFFFEC78

So we better compare while casting to (unsigned int).

This is important for Active Directory RODC support,
which adds a random number into the higher 16-bits of the
32-bit kvno value.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:57:01 -07:00
Stefan Metzmacher
57300e1482 kuser/kinit: make it possible to use --windows option on its own
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Andrew Bartlett
880a98df1a kdc: Build ticket with the canonical server name
We need to use the name that the HDB entry returned, otherwise we
will not canonicalise the reply if requested.

Andrew Bartlett

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher
83a22ce18f kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ to the hdb layer
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher
272d7511ca lib/hdb: add HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ flags
This will be used to indicate to the backend if a fetch is for
an AS REQ or TGS REQ. Samba needs to take some action in the
HDB_F_FOR_TGS_REQ case and always canonicalize the principal
names, even without HDB_F_CANON.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher
7995bbcb24 kdc: only pass HDB_F_CANON if the client specified b->kdc_options.canonicalize
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Jeffrey Altman
c9d24dffde Windows: 1.5.99 Pre-release
Change-Id: Ie0d307888b68e19ffd46041729a27c4be2ed27fb
2011-07-27 20:04:31 -04:00
Jeffrey Altman
c2426d56c1 Windows: install kswitch.exe and klist.exe
kswitch.exe and klist.exe are kcc.exe installed and copied
under the alternate names.  The installer script was missing
the required DestinationProperty to specify where the
destination files were to be placed.

Change-Id: Ia1e826a038459b1631f8452f8d7ef6f7ca02abac
2011-07-27 19:55:28 -04:00
Jeffrey Altman
c3f6a65da2 slc: correct 'min_args' and 'max_args' processing
The 'min_args' and 'max_args' values were ignored whenever
an 'argument' value was not present as a child of the 'command'.
'argument' values are often specified as children of the 'option'
value when more than one 'option' is an argument.

This patchset counts the number of 'argument' values specified
under a 'command' regardless of the level at which it appears.
If there are any 'argument' values, the 'min_args' and 'max_args'
are used to generate validation code for the 'command'.

Change-Id: Idc6129b4ff29914ac990f693b4dba51a30bdc971
2011-07-27 19:55:28 -04:00
Love Hörnquist Åstrand
5fc3d6fffa spelling 2011-07-27 08:28:44 -07:00
Love Hörnquist Åstrand
13341e4276 generate sequence for HDB-Ext-KeySet and Keys 2011-07-26 20:19:21 -07:00
Love Hörnquist Åstrand
5732d85e29 generate sequence for HDB-Ext-KeySet and Keys 2011-07-26 20:18:57 -07:00
Love Hörnquist Åstrand
8b7e31c301 plug memory leak 2011-07-26 20:15:33 -07:00
Love Hörnquist Åstrand
80f0f6fa11 plug memory leak 2011-07-26 20:14:53 -07:00