fae3d127a2
remove krb4 support
2010-11-20 14:38:21 -08:00
aa750c33d1
remove unused variables
2010-11-20 14:13:58 -08:00
65a1ee8163
dont use private prototype
2010-11-20 14:13:31 -08:00
cc42e85e7f
Remove deprecated krb4 kdc components
2010-11-20 14:11:35 -08:00
8f2e0a7010
export internal functions so we dont need private headers
2010-11-20 14:05:54 -08:00
6ce02c45a3
use --one-code-file
2010-11-20 13:52:28 -08:00
09c0c65d6f
remove v4 support for hprop
2010-11-20 13:26:40 -08:00
37fcf33d7c
document hdb_entry_ex
2010-11-18 23:40:09 -08:00
c71d2bf0d3
spelling, From Kaiting Chen <kaitocracy@gmail.com>
2010-11-18 23:25:18 -08:00
387b0fa7ba
Add more required functions to base/version-script.map
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-11 20:43:20 -08:00
79bf21032a
Add new external function krb5_kdc_pkinit_config()
...
This starts up the pkinit configuration and sets some default values,
and is needed in a seperate function so Samba4 can call it from it's
own KDC wrapper.
Andrew Bartlett
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-11 20:42:51 -08:00
712c6209f2
Fix base/version-script.map to match syntax of other version-script.map files
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-11 20:42:04 -08:00
f6f4517eda
first drop of version-script.map
2010-11-10 09:03:52 +01:00
157d60a0eb
heimdal: fixed a shadowed variable warning for error_message
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org >
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-08 22:27:32 -08:00
c54b80f00c
wrap heim_array_filter() in __BLOCKS__
2010-11-08 22:20:59 -08:00
457c2d6d2c
use md4 to verify md4
2010-11-08 14:39:26 -08:00
2e34d7cf6e
heimdal: fixed the use of error_message() in heimdal
...
the lex code in heimdal had a function error_message() which is
confusingly the ame as a core function from the com_err library. This
replaces it with lex_error_message(), and allows Samba4 to have a
stricter check for duplicate symbols between it's components.
Pair-Programmed-With: Andrew Tridgell <tridge@samba.org >
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-08 13:43:25 -08:00
2e31740f62
always check for error token in case of a failure
2010-11-08 13:40:01 -08:00
526aeef0c7
heimdal Add clock-skew handling to DCE-style GSSAPI
...
The clock skew handling was previously only on properly wrapped
GSSAPI, and was skipped for DCE-style. This allows the ASN.1 errors
from the krb5_rd_req to suggest parsing as a kerberos error packet.
Andrew Bartlett
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-08 13:36:52 -08:00
f178458310
use krb5_data_ct_cmp
2010-11-06 20:53:04 +01:00
5a801c8f4a
use krb5_data_ct_cmp
2010-11-06 20:52:53 +01:00
2d1ca83efa
use krb5_data_ct_cmp
2010-11-06 20:52:33 +01:00
15f0adad02
add krb5_data_ct_cmp
2010-11-06 20:36:12 +01:00
0be50bf118
add krb5_data_ct_cmp
2010-11-06 20:36:08 +01:00
341f4a2f23
update help text
2010-11-06 20:26:03 +01:00
55c4979df2
Now pac from christian passes since we make hmac checksums always use the raw key
2010-11-06 20:23:49 +01:00
d6b93cec1e
internal function _krb5_HMAC_MD5_checksum
2010-11-06 20:11:19 +01:00
55ccd5ff9c
use _krb5_enomem and indent
2010-11-06 20:10:26 +01:00
a1f749f4af
add _krb5_enomem
2010-11-06 20:09:07 +01:00
5ab43b8520
plug memory leak
2010-11-06 20:01:02 +01:00
a42b77fb22
heimdal Add handling for PAC signatures over all encryption types
...
There are exceptions from the expected behaviour of 'checksum type
matches key type' that we must deal with here, or else we can't serve
DES-only servers.
Andrew Bartlett
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-06 19:56:48 +01:00
ae948e9932
better help for --no-forward
2010-11-04 18:47:44 -07:00
7d710765b6
make -f mean forwardable
2010-11-04 10:21:33 -07:00
1d9072f026
krb5: reorganise crypto.c
...
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.
Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)
Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
6184422fef
compare the value of the client realm now that it might not be the same pointer
...
fixes the check-delegate test that the new direct hop patch broke
2010-11-01 13:46:56 -07:00
a16f7ea0ab
add missing
...
prototype
2010-10-31 01:09:24 -07:00
a73d30e619
get_cred_kdc_capath() always try direct cross-realm first
2010-10-31 01:04:27 -07:00
344071becb
add missing checks for utmpx struct fields
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-31 00:40:50 -07:00
6f5b42957e
add some more #ifdefs to compile on utmpx only systems
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-31 00:38:41 -07:00
ef90819a9a
rename PTHREADS_LIBADD to PTHREAD_LIBADD
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-31 00:29:54 -07:00
b1bbd18686
fix FreeBSD PTHREAD_LIBADD
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-31 00:28:24 -07:00
501c5ac2fe
sort and add ntlm_err.h
2010-10-30 22:19:29 -07:00
aceab099f2
add ntlm_err.h
2010-10-30 22:18:34 -07:00
6f9a423c0a
add libheimbase.la
2010-10-30 13:59:19 -07:00
a85c548fd1
wait for dead children, and then abandon the live ones
2010-10-30 12:15:04 -07:00
bbe08b7750
use clear_multi, don't call init twice
2010-10-27 22:19:22 -07:00
6d47c862ec
really free memory too
2010-10-27 22:13:04 -07:00
b7ac4c9333
really free memory too
2010-10-27 22:12:30 -07:00
acbdbb753e
plug memory leaks
2010-10-27 22:03:36 -07:00
c71fe8f2cd
spelling
2010-10-27 21:13:47 -07:00
Love Hornquist Astrand