Commit Graph

92 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
503266c4a3 use json to drive kdc-tester 2011-11-21 20:34:35 -08:00
Love Hörnquist Åstrand
f0371bb2ee fast cookie expiration 2011-07-24 21:21:39 -07:00
Love Hörnquist Åstrand
72308645a2 fast cookie 2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
68bd6f63e8 move PKINIT to a preauth mech too 2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
13eeb30a1d Create a request structure 2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
71c6fa48f6 bonjour_announce 2009-11-22 00:26:57 -08:00
Love Hornquist Astrand
6fada85f78 if the UDP packet is truncated, return too packet large 2009-09-16 16:06:11 -07:00
Love Hornquist Astrand
3634423f36 Allow specifying runing user and chroot() enviroment
Allow the admin to switch the user the kdc is running under and
specify the chroot() directory to run in.

Please note you need a very special setup to get this working.
2009-07-16 22:15:26 -07:00
Love Hörnquist Åstrand
506b98d110 Patch from Andrew bartlett via heimdal-bugs@h5l.org
kdc Allow a password change when the password is expired

    This requires a rework on Heimdal's windc plugin layer, as we want
    full control over what tickets Heimdal will issue.  (In particular, in
    case our requirements become more complex in future).

    The original problem was that Heimdal's check would permit the ticket,
    but Samba would then deny it, not knowing it was for kadmin/changepw

    Andrew Bartlett

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25294 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 03:16:46 +00:00
Love Hörnquist Åstrand
37adb33d31 make digest and kx509 optional, wrap detach
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24419 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-25 00:41:00 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
0b448d3e3d add KDC_LOG_FILE
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 23:49:41 +00:00
Love Hörnquist Åstrand
1902040622 extern for request_log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20954 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:30:15 +00:00
Love Hörnquist Åstrand
7a339bab7d revert 20447, it doesnt pass the regression tests, exports too much
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20454 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-19 20:21:51 +00:00
Love Hörnquist Åstrand
0c2182a3ba Call out to Heimdal's krb5.conf processing to configure many aspects
of KDC behaviour.  This should allow PKINIT to be turned on and
managed with reasonable sanity.

From Andrew Bartlet



git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20447 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-19 18:22:41 +00:00
Love Hörnquist Åstrand
fb1c8392d1 Prefix internal symbol with _kdc_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19507 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 17:18:14 +00:00
Love Hörnquist Åstrand
f424d5432c forward decl;
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19499 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-26 12:48:04 +00:00
Love Hörnquist Åstrand
d2a057331a Remove private prototypes and instead include <kdc-private.h>.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16373 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-12-12 12:23:33 +00:00
Love Hörnquist Åstrand
5731755053 Update prototype for _kdc_pk_mk_pa_reply.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-15 11:07:25 +00:00
Love Hörnquist Åstrand
f03c6de773 update prototype for _kdc_as_rep
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-08-12 08:46:39 +00:00
Love Hörnquist Åstrand
9af7efed48 prefix pkinit symbols with _kdc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15544 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 15:37:24 +00:00
Love Hörnquist Åstrand
de92125f9d adapt pkinit code to libkdc split
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15540 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 04:42:59 +00:00
Love Hörnquist Åstrand
c66de52520 indent, remove dup prototypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15533 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 05:27:23 +00:00
Love Hörnquist Åstrand
7a3fc5e663 Don't pollute namespace, generate public headerfile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15532 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 01:54:49 +00:00
Love Hörnquist Åstrand
7132a9b084 Merge in the libkdc/kdc configuration split from Andrew Bartlet <abartlet@samba.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15529 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 01:03:35 +00:00
Love Hörnquist Åstrand
e54c17af6b move all Kerberos 4 related stuff to one place
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14899 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-04-23 19:52:51 +00:00
Love Hörnquist Åstrand
a26804c1a9 enable_pkinit_princ_in_cert
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13991 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-06-24 14:35:33 +00:00
Love Hörnquist Åstrand
e6dca71033 update prototype for pk_initialize
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13725 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-16 09:00:18 +00:00
Love Hörnquist Åstrand
d263741bef update prototype for pk_mk_pa_reply
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13498 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-09 22:18:57 +00:00
Love Hörnquist Åstrand
b7907c6862 pass client hdb_entry to pk_check_client
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13495 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-09 22:00:37 +00:00
Love Hörnquist Åstrand
962356b65c add prototypes for pkinit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13142 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 04:15:55 +00:00
Johan Danielsson
3ddd0c11e7 change enforce_transited_policy to a tri-state variable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13069 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-22 18:19:11 +00:00
Johan Danielsson
8505970b33 add flag to always check transited policy
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13036 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 11:10:44 +00:00
Love Hörnquist Åstrand
89542e627c 524 is independent of kerberos 4, so move out from #ifdef KRB4
enable_v4_cross_realm since 524 needs it


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11829 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-18 00:23:06 +00:00
Assar Westerlund
8e42028a0a (enable_v4_cross_realm): add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11807 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-17 05:36:20 +00:00
Love Hörnquist Åstrand
ccdf3df70e move out krb/524 protos from under #ifdef KRB4
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11572 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-14 05:44:38 +00:00
Johan Danielsson
a2434c987d remove old encrypt_v4_ticket prototype
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11559 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-12-08 18:27:40 +00:00
Johan Danielsson
8ef0cefbd8 update protos
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11125 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-08-19 12:18:07 +00:00
Johan Danielsson
d1927c345d make port_str const
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10924 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-04-18 10:17:49 +00:00
Assar Westerlund
aad564d1c2 re-write the handling of crypto libraries. try to use the one of
openssl's libcrypto or krb4's libdes that has all the required
functionality (md4, md5, sha1, des, rc4).  if there is no such
library, the included lib/des is built.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10519 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-08-22 20:30:33 +00:00
Johan Danielsson
0e1cd9e55f fix prototype for get_des_key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10499 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-08-17 07:49:23 +00:00
Johan Danielsson
2b67390d1d always include kaserver support
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10215 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-07-02 16:32:19 +00:00
Assar Westerlund
2b908e60eb add a define for des_new_random_key when using openssl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10185 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-06-24 00:04:11 +00:00
Assar Westerlund
d4263fdf0d adapt to new db_fetch, and try to print useful error messages when it fails
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9600 ec53bebd-3082-4978-b11e-865c3cabbd6b
2001-01-30 01:44:08 +00:00
Johan Danielsson
5793cb0646 add macro constants for kdc.conf, and kdc.log
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9048 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-09-10 19:27:04 +00:00
Assar Westerlund
66a76923b5 add printf attributes on kdc_log*
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9035 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-09-10 14:45:06 +00:00
Assar Westerlund
93c798134c update prototypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9034 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-09-10 14:18:44 +00:00
Johan Danielsson
20b47f2dd6 proto
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8473 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-28 11:51:53 +00:00
Johan Danielsson
b0d08b7f04 add options to enable/disable v4 and 524 requests
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8340 ec53bebd-3082-4978-b11e-865c3cabbd6b
2000-06-07 09:51:19 +00:00