Commit Graph

21706 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
cdef379a85 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22762 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:58 +00:00
Love Hörnquist Åstrand
2dd8a03423 Make server referral work.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22761 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:55 +00:00
Love Hörnquist Åstrand
090f16f717 better error message, try to handle server referrals slightly better.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22760 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:51 +00:00
Love Hörnquist Åstrand
70a94ea7d9 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22759 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:47 +00:00
Love Hörnquist Åstrand
526b428c75 Make work for constrained delegation and impersonation.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22758 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:43 +00:00
Love Hörnquist Åstrand
70f23b007a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22757 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:39 +00:00
Love Hörnquist Åstrand
def5e96e15 Ident.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22756 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:35 +00:00
Love Hörnquist Åstrand
5d35e96f9f check no server referral, don't use stringent length tests since
encryption layer does padding for us...


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22755 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:32 +00:00
Love Hörnquist Åstrand
e69ef1185c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22754 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:28 +00:00
Love Hörnquist Åstrand
4ac470d33e Match name in ClientCanonicalizedNames with -10
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:24 +00:00
Love Hörnquist Åstrand
2f09ac3a2f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22752 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:20 +00:00
Love Hörnquist Åstrand
967fc11320 (_krb5_principal_compare_PrincipalName): new function to compare a
principal to a PrincipalName.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22751 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:17 +00:00
Love Hörnquist Åstrand
53a6738517 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22750 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:13 +00:00
Love Hörnquist Åstrand
fb540c9646 Move client referral checking to _krb5_extract_ticket().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22749 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:09 +00:00
Love Hörnquist Åstrand
d3d7661043 More bits for server referral.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22748 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:05 +00:00
Love Hörnquist Åstrand
e1cb28d159 Make working with client referrals.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22747 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:08:01 +00:00
Love Hörnquist Åstrand
07479ebcde x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22746 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:57 +00:00
Love Hörnquist Åstrand
e27db7b9b4 Match name in ClientCanonicalizedNames with -10
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22745 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:54 +00:00
Love Hörnquist Åstrand
28b73ab194 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22744 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:50 +00:00
Love Hörnquist Åstrand
e33ec47aaf Try moving referrals checking into _krb5_extract_ticket().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22743 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:46 +00:00
Love Hörnquist Åstrand
940435a608 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22742 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:43 +00:00
Love Hörnquist Åstrand
eca9feff87 add referral-valid-until
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22741 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:39 +00:00
Love Hörnquist Åstrand
c3e55c1f54 Try moving referrals checking into _krb5_extract_ticket().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22740 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:34 +00:00
Love Hörnquist Åstrand
424eede709 Rename tgs_build_referral to build_server_referral since it can be
used for AS-REQ too.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22739 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:31 +00:00
Love Hörnquist Åstrand
99a3df5a8a Try client side guessing too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22738 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:27 +00:00
Love Hörnquist Åstrand
1da2a3782e Add code to check PA_ServerReferralData.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22737 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:22 +00:00
Love Hörnquist Åstrand
5aaf35765e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22736 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:17 +00:00
Love Hörnquist Åstrand
203a4ad7f1 Send SERVER-REFERRAL data in rep.padata instead of auth_data in ticket.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22735 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:13 +00:00
Love Hörnquist Åstrand
d6845ca8a4 kill trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22734 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:09 +00:00
Love Hörnquist Åstrand
294999cc14 kill trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22733 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:05 +00:00
Love Hörnquist Åstrand
b0aae2d071 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22732 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:07:01 +00:00
Love Hörnquist Åstrand
0fd74cc5e4 remove lost bits from using krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22731 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:57 +00:00
Love Hörnquist Åstrand
31411663b5 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22730 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:53 +00:00
Love Hörnquist Åstrand
f57e7c4d5f Better referrals support, use canonicalize flag.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22729 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:50 +00:00
Love Hörnquist Åstrand
9ae2936124 use krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22728 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:46 +00:00
Love Hörnquist Åstrand
3d935af61d use krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22727 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:42 +00:00
Love Hörnquist Åstrand
457dbdfb8b use krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22726 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:38 +00:00
Love Hörnquist Åstrand
ba287b247d add krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22725 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:34 +00:00
Love Hörnquist Åstrand
de57423148 add krb5_principal_set_realm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22724 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:30 +00:00
Love Hörnquist Åstrand
a86c4ec9ab Insecure tgs referrals.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22723 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:26 +00:00
Love Hörnquist Åstrand
6f69a2b8f9 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22722 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:22 +00:00
Love Hörnquist Åstrand
5586e24dd3 More verbose checks, disable check that no longer works with referrals.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22721 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:18 +00:00
Love Hörnquist Åstrand
03092c3e9a Fix [domain_realm] section.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22720 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:12 +00:00
Love Hörnquist Åstrand
756ead1cd9 Find_cred to try krb5_cc_retrieve_cred first, remove comment.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22719 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:08 +00:00
Love Hörnquist Åstrand
1e5e118bcf Fix error message to match function called.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22718 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:04 +00:00
Love Hörnquist Åstrand
92e7251a36 Refactor code to flatten the call-tree.
Make the ticket request in the TGS-REQ inherit the address-ness of the
krbtgt if the address is not specified in the function call.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22717 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:06:00 +00:00
Love Hörnquist Åstrand
cd06f67cdb x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22716 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:05:56 +00:00
Love Hörnquist Åstrand
c3d816441f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22715 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:05:52 +00:00
Love Hörnquist Åstrand
e5baf09800 Dont try key usage KRB5_KU_AP_REQ_AUTH for TGS-REQ. This drop
compatibility with pre 0.3d KDCs.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22714 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:05:49 +00:00
Love Hörnquist Åstrand
50901132f0 Also check KDCOptions->canonicalize when looking for referrals requests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22713 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-24 12:05:45 +00:00