Love Hörnquist Åstrand
1a1bd736c0
merge support for FAST in as-req codepath
2011-10-28 19:25:48 -07:00
Stefan Metzmacher
83a22ce18f
kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ to the hdb layer
...
metze
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-30 11:56:46 -07:00
Love Hörnquist Åstrand
61f69ea5b1
spelling
2011-07-24 22:36:27 -07:00
Love Hörnquist Åstrand
5a31cf1a52
spelling
2011-07-24 22:36:21 -07:00
Love Hörnquist Åstrand
46f285bcc9
encode fast state in the fast cookie
2011-07-24 21:16:42 -07:00
Love Hörnquist Åstrand
721c5634d5
make compile after rebase
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
6b942e6ec2
free fast cookie
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
b00f1ceeb9
should use hide_client_names
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
57b96a269e
different logging
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
b6e56322f3
Check if message too large
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
035afb17db
use et, ek from r->
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
4d63c98125
Break out PAC generation
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
94157d4410
dont pass req buffer to _kdc_encode_reply
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
b8c168e565
check return length
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
9a21fddb70
use kdc_request_t for add_enc_pa_req
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
6319f31ecf
break out KRB5_PADATA_REQ_ENC_PA_REP
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
1e048065c1
switch to _kdc_r_log
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
68bd6f63e8
move PKINIT to a preauth mech too
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
07342aa138
Add and use _kdc_set_e_text()
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
13eeb30a1d
Create a request structure
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
0332787e0f
Hide client name of privacy reasons
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
17d5f8d19e
make AS work with FAST
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
6c31f5a95f
free ac after its used
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
a2bcf8bbdd
break out mk_error
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
04983dfd94
Preserve outer error
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
4561012998
fix up to update kdc_db_fetch
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
79703dc3cc
memory management
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
8eb256ea00
send enc challange in KDC reply
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
7151d4e66c
partial handling of ENC-CHALLANGE
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
7d1a059f9e
comment why we add cookie
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
1fac725de4
send cookie on error and send right error message
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
deed0642d0
Handle ticket checksum
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
bcbcc67ab7
try handle finished message, ticket processing missing
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
35d4b23a22
start error codes finish message
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
c6a9bdb140
spelling
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
6a74bba8f9
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
e372cc6b8a
re-shuffle to make c90 compatible
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
1af9487bff
got fetch armor key
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
a1feab396e
more ticket bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
d04289855e
more bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
96299ac2bb
no warnings
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
3b034b231d
more bits
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
7802e24170
first drop of the AS-REQ FAST + krb-error FAST codepath
2011-07-24 20:24:34 -07:00
Love Hornquist Astrand
f2c7370609
announce fx-fast
2011-07-24 20:24:34 -07:00
Love Hörnquist Åstrand
e9e4f99f01
add missing space in log message
2011-06-14 22:00:25 -07:00
Nicolas Williams
c06d5ebfda
Fixes to patches that add *use-strong* parameters.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
481fe133b2
Also added preauth-use-strongest-session-key krb5.conf kdc parameter, similar to {as, tgs}-use-strongest-session-key. The latter two control ticket session key enctype selection in the AS and TGS cases, respectively, while the former controls PA-ETYPE-INFO2 enctype selection in the AS case.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Nicolas Williams
a7a8a7e95c
Initial patch to add as-use-strongest-session-key and same for tgs krb5.conf parameters for the KDC. These control the session key enctype selection algorithm for the AS and TGS respectively: if TRUE then they prefer the strongest enctype supported by the client, the KDC and the target principal, else they prefer the first enctype fromt he client's list that is also supported by the KDC and the target principal.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-06-14 20:35:19 -07:00
Love Hornquist Astrand
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Jeffrey Altman
6850d6a65f
avoid uninit variable and unreachable code warnings
...
most of these warnings are not problems because of ample
use of abort() calls. However, the large number of warnings
makes it difficult to identify real problems. Initialize
the variables to shut up the compilers.
Change-Id: I8477c11b17c7b6a7d9074c721fdd2d7303b186a8
2011-05-17 12:02:16 -04:00
