Commit Graph

2001 Commits

Author SHA1 Message Date
Andrew Bartlett 5cc4d5d2bd heimdal Use a seperate krb5_auth_context for the delegated credentials
This makes it much more clear that the timestamp written here is not
used in mutual authentication.

Andrew Bartlett

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-02 20:47:12 -07:00
Love Hornquist Astrand d05098b950 New drop with windows code from Secure Endpoints/Asanka 2010-09-14 10:08:03 -07:00
Love Hornquist Astrand ad0c3839b5 clean better 2010-09-14 09:29:35 -07:00
Asanka Herath c372b0aa37 Windows: Fix exports for libgssapi 2010-09-14 08:03:38 -04:00
Asanka Herath 8b378cec73 Windows: Revised exports for libgssapi 2010-08-20 16:56:20 -04:00
Asanka Herath 08b297b785 Windows: Rename libgssapi.dll -> gssapi.dll 2010-08-20 13:14:15 -04:00
Asanka Herath d98fd799c3 GSSAPI_DEPRECATED needs to be before the return type 2010-08-20 13:14:11 -04:00
Asanka Herath 5dcc605f6b Fix calling conventions for Windows 2010-08-20 13:14:10 -04:00
Asanka Herath ba44354336 Windows: Check exported symbols
During a test run, cross check the Windows exports list against the
version-script files.  For the test to pass, all symbols on either
list should be accounted for.

If there are symbols that are specific to Windows or symbols that are
not included on Windows, they should be annotated in the .def file as
follows:

    ;!  non_windows_symbol

    	common_symbol

        windows_only_symbol ;!
2010-08-20 13:06:55 -04:00
Asanka Herath cdcdc5cad5 Windows: Version information for binaries 2010-08-20 13:06:54 -04:00
Asanka Herath d83611238a Windows: Build a single heimdal.dll
Heimdal.dll is a combination of libasn1, libwind, libhcrypto, libhx509
and libkrb5.
2010-08-20 13:06:54 -04:00
Asanka Herath ea4d8dbfdb Windows: Use EXEPREP and DLLPREP macros for processing binaries
Once DLLs and EXEs are built, they need to have their manifests
processed and signed.  These steps are encapsulated in the EXEPREP and
DLLPREP Makefile macros.  Use them instead of invoking each processing
macro individually.
2010-08-20 13:04:06 -04:00
Asanka Herath e9160dbcfa Support parallelized builds on Windows 2010-08-20 13:03:32 -04:00
Love Hornquist Astrand 95e0827926 add gss_get_name_attribute 2010-08-02 21:15:56 -07:00
Love Hornquist Astrand 84731dcc41 add gss_inquire_name 2010-08-02 21:09:14 -07:00
Love Hornquist Astrand 083b8b63ee oids no longer compare to GSS_C_NO_OID 2010-07-22 23:21:44 -07:00
Love Hornquist Astrand 1021099f3d rename external so that they can be included in array and struct initializer 2010-07-22 20:47:04 -07:00
Love Hornquist Astrand 86b8f64b6e doxygen fixes 2010-06-14 20:39:04 -07:00
Love Hornquist Astrand 2b1645aa08 catch error from as.*printf 2010-05-30 13:44:41 -07:00
Love Hornquist Astrand a7e8f05c9b Check the GSS-API checksum exists before trying to use it [CVE-2010-1321]
This was introduced by checking the Kerberos 5 checksum as a
alternative to the 8003 checksum.

Thanks to MIT Kerberos and Shawn Emery for forwarding this issue
2010-05-26 11:53:31 -05:00
Love Hornquist Astrand b7c0365677 fix documentation 2010-04-08 15:36:27 -07:00
Love Hornquist Astrand 312f4f9bd6 GSS_C_NO_OID matches nothing, not even it-self, document function 2010-03-30 11:18:49 -07:00
Love Hornquist Astrand aaf310f99e constify 2010-03-23 20:20:51 -07:00
Love Hornquist Astrand 53024a5a22 start to document gss_import_name 2010-02-21 23:21:58 +01:00
Love Hornquist Astrand 521098738c document gss_release_name 2010-02-21 23:21:43 +01:00
Love Hornquist Astrand 3ddb2af8d5 more flags and stuff 2010-02-13 17:41:33 -08:00
Love Hornquist Astrand 33e9da40b4 *** empty log message *** 2010-02-13 17:39:08 -08:00
Love Hornquist Astrand 61d6c3b9c5 add flags in gssapi_context_flags 2010-02-13 17:38:56 -08:00
Love Hornquist Astrand 53f7c6be92 more refs 2010-02-13 17:28:29 -08:00
Love Hornquist Astrand 57332c9b7d gssapi_mechs_intro 2010-02-13 17:28:13 -08:00
Love Hornquist Astrand b7581f5dcb document more about mechs 2010-02-13 17:27:14 -08:00
Love Hornquist Astrand 96852bdc79 list contants for mechs 2010-02-13 17:23:09 -08:00
Love Hornquist Astrand 84b58b78b6 start of documention of gss_init_sec_context 2010-02-13 17:14:46 -08:00
Love Hornquist Astrand 609e8dd156 reset GSS_C_DELEG_FLAG when there is no consumer 2010-01-19 21:22:53 +00:00
Love Hornquist Astrand 102087bd67 export GSS_KRB5_CRED_NO_CI_FLAGS_X, needed by samba 2010-01-02 17:48:26 +01:00
Asanka Herath a0ae9f5a0e Merge remote branch 'h-github/master' into win32-port2
* h-github/master: (64 commits)
  refix socket wrappers with rk_
  Patch from Secure Endpoints/Asanka Herath for windows support
  unset KRB5CCNAME
  its really just LIBADD more most of them
  correct quoting
  Use -lpthread for modern freebsd instead
  clean KRB5CCNAME and KRB5_CONFIG, require test to reset them
  more up ${env_setup}
  use PTHREADS_LIBADD for freebsd6 and newer
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  add PTHREAD_LIBADD
  switch to PTHREADS_LIBADD
  log what the error string say too
  More debug logging
  sprinkle more 'echo "test failed"'
  sprinkle 'echo "test failed"'
  use calloc(), indent more prettier
  in sh, equal compare is really = for strings, not ==
  Check for duplicates, already loaded mechs
  ...

Conflicts (resolved):
	lib/krb5/auth_context.c
	lib/krb5/changepw.c
	lib/krb5/context.c
	lib/krb5/error_string.c
	lib/krb5/kuserok.c
	lib/krb5/libkrb5-exports.def.in
	lib/krb5/net_write.c
	lib/krb5/store_fd.c
	lib/krb5/test_cc.c
	lib/roken/strerror_r.c
2009-12-21 13:44:00 -05:00
Asanka Herath 349915e438 Fix comment 2009-12-21 13:09:26 -05:00
Love Hornquist Astrand eadb8838cb use calloc(), indent more prettier 2009-12-14 21:40:16 -08:00
Love Hornquist Astrand a740ee89bc Check for duplicates, already loaded mechs 2009-12-14 17:16:59 -08:00
Love Hornquist Astrand 9f5772050b Match old code and use krb5_sname_to_principal on the imported name for acquire cred.
Reported by Jan Rekorajski
2009-12-13 22:55:36 -08:00
Love Hornquist Astrand 5b7780b997 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:35:18 -08:00
Love Hornquist Astrand c402cda0a4 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:30:06 -08:00
Love Hornquist Astrand 5a23717814 use krb5_auth_con_getremoteseqnumber 2009-12-04 21:29:48 -08:00
Asanka Herath 9227b99979 (lib/gssapi) Add missing dependencies to NTMakefile 2009-12-01 01:50:44 -05:00
Love Hornquist Astrand 01a1e1baef check that gss_krb5_set_allowable_enctypes works 2009-11-30 17:19:13 -08:00
Love Hornquist Astrand c6bbdb545b First drop of Windows build infrastructure from Secure Endpoints 2009-11-24 12:12:53 -08:00
Asanka Herath 988792b3f7 Build system update for lib/gssapi and new exports.def 2009-11-24 10:18:19 -08:00
Asanka Herath ce7d784648 Avoid using 'interface' as a variable name 2009-11-24 10:11:16 -08:00
Asanka Herath 72537c1f83 Update gssapi/NTMakefile 2009-11-24 10:11:16 -08:00
Asanka Herath b1063ea8fc Initial Windows port 2009-11-24 10:11:14 -08:00