Commit Graph

27070 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand 9fa3112645 drop krb4 2011-08-10 09:25:29 -07:00
Love Hörnquist Åstrand 7cb8e7f742 no more krb4 2011-08-10 09:24:43 -07:00
Love Hörnquist Åstrand 24332f87a0 no more krb4 2011-08-10 09:22:52 -07:00
Love Hörnquist Åstrand 11ac82ecf2 no more krb4 2011-08-10 09:21:32 -07:00
Love Hörnquist Åstrand ee58c256f4 remove krb4 bits 2011-08-10 09:16:51 -07:00
Love Hörnquist Åstrand c9e37efbe1 try get spelling right 2011-07-30 14:27:32 -07:00
Love Hörnquist Åstrand 51ccb02b82 some more stuff 2011-07-30 14:19:45 -07:00
Love Hörnquist Åstrand fc3b4fcd3e drop unused KRB4 bits 2011-07-30 14:17:09 -07:00
Love Hörnquist Åstrand 646906538b drop unused KRB4 bits 2011-07-30 14:15:14 -07:00
Love Hörnquist Åstrand 4a43975270 drop unused KRB4 bits 2011-07-30 14:14:52 -07:00
Love Hörnquist Åstrand 378f34b4be Always to CANON for tgs 2011-07-30 13:43:00 -07:00
Love Hörnquist Åstrand 63672067ea add nob for [kadmin]allow_self_change_password 2011-07-30 12:34:40 -07:00
Love Hörnquist Åstrand 0ed83cebd3 disable old deprecated enctypes 2011-07-30 12:11:08 -07:00
Stefan Metzmacher c98d9f4387 kdc: fix comparision between krb5uint32 and (unsigned int)
We don't need a cast in that case.

Before commit 1124c4872d
(KVNOs are krb5uint32 in RFC4120, make it so),
we compared krb5int32 casted to size_t with unsigned int,
which resulted in the following problem:

Casting krb5int32 to (size_t) is wrong, as sizeof(int)==4 != sizeof(size_t)== 8.

If you cast negative int values to size_t you'll get this:

int ival = -5000; // 0xFFFFEC78
size_t sval = (size_t)ival; // this will be 0xFFFFFFFFFFFFEC78

So we better compare while casting to (unsigned int).

This is important for Active Directory RODC support,
which adds a random number into the higher 16-bits of the
32-bit kvno value.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:57:01 -07:00
Stefan Metzmacher 57300e1482 kuser/kinit: make it possible to use --windows option on its own
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Andrew Bartlett 880a98df1a kdc: Build ticket with the canonical server name
We need to use the name that the HDB entry returned, otherwise we
will not canonicalise the reply if requested.

Andrew Bartlett

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher 83a22ce18f kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ to the hdb layer
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher 272d7511ca lib/hdb: add HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ flags
This will be used to indicate to the backend if a fetch is for
an AS REQ or TGS REQ. Samba needs to take some action in the
HDB_F_FOR_TGS_REQ case and always canonicalize the principal
names, even without HDB_F_CANON.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Stefan Metzmacher 7995bbcb24 kdc: only pass HDB_F_CANON if the client specified b->kdc_options.canonicalize
metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-30 11:56:46 -07:00
Jeffrey Altman c9d24dffde Windows: 1.5.99 Pre-release
Change-Id: Ie0d307888b68e19ffd46041729a27c4be2ed27fb
2011-07-27 20:04:31 -04:00
Jeffrey Altman c2426d56c1 Windows: install kswitch.exe and klist.exe
kswitch.exe and klist.exe are kcc.exe installed and copied
under the alternate names.  The installer script was missing
the required DestinationProperty to specify where the
destination files were to be placed.

Change-Id: Ia1e826a038459b1631f8452f8d7ef6f7ca02abac
2011-07-27 19:55:28 -04:00
Jeffrey Altman c3f6a65da2 slc: correct 'min_args' and 'max_args' processing
The 'min_args' and 'max_args' values were ignored whenever
an 'argument' value was not present as a child of the 'command'.
'argument' values are often specified as children of the 'option'
value when more than one 'option' is an argument.

This patchset counts the number of 'argument' values specified
under a 'command' regardless of the level at which it appears.
If there are any 'argument' values, the 'min_args' and 'max_args'
are used to generate validation code for the 'command'.

Change-Id: Idc6129b4ff29914ac990f693b4dba51a30bdc971
2011-07-27 19:55:28 -04:00
Love Hörnquist Åstrand 5fc3d6fffa spelling 2011-07-27 08:28:44 -07:00
Love Hörnquist Åstrand 13341e4276 generate sequence for HDB-Ext-KeySet and Keys 2011-07-26 20:19:21 -07:00
Love Hörnquist Åstrand 5732d85e29 generate sequence for HDB-Ext-KeySet and Keys 2011-07-26 20:18:57 -07:00
Love Hörnquist Åstrand 8b7e31c301 plug memory leak 2011-07-26 20:15:33 -07:00
Love Hörnquist Åstrand 80f0f6fa11 plug memory leak 2011-07-26 20:14:53 -07:00
Love Hörnquist Åstrand 990e1f30e7 add KDCFastState.expected-pa-types 2011-07-24 22:49:40 -07:00
Love Hörnquist Åstrand 7dac559e8c kdc bits 2011-07-24 22:45:55 -07:00
Love Hörnquist Åstrand 263157903a kcm bits 2011-07-24 22:44:21 -07:00
Love Hörnquist Åstrand 6fefb328e3 x 2011-07-24 22:39:48 -07:00
Love Hörnquist Åstrand 61f69ea5b1 spelling 2011-07-24 22:36:27 -07:00
Love Hörnquist Åstrand 5a31cf1a52 spelling 2011-07-24 22:36:21 -07:00
Love Hörnquist Åstrand a48768fc26 sprinkle more comments 2011-07-24 22:33:49 -07:00
Love Hörnquist Åstrand b6fc70019e better error message 2011-07-24 22:33:39 -07:00
Love Hörnquist Åstrand 086477a9b5 disable operation ofn fast cookie principal 2011-07-24 21:31:48 -07:00
Love Hörnquist Åstrand 0941d6dbce add constant for WELLKNOWN:ORG.H5L realm 2011-07-24 21:29:27 -07:00
Love Hörnquist Åstrand fb5e32e0f6 goto out 2011-07-24 21:23:53 -07:00
Love Hörnquist Åstrand f0371bb2ee fast cookie expiration 2011-07-24 21:21:39 -07:00
Love Hörnquist Åstrand 46f285bcc9 encode fast state in the fast cookie 2011-07-24 21:16:42 -07:00
Love Hörnquist Åstrand 7f6f4206c6 make compile after rebase 2011-07-24 20:24:40 -07:00
Love Hörnquist Åstrand 721c5634d5 make compile after rebase 2011-07-24 20:24:39 -07:00
Linus Nordberg 12203f0fab s/krb5_decode_EncryptedData/krb5_decrypt_EncryptedData/1.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-24 20:24:39 -07:00
Linus Nordberg bebb50797f Add krb5_init_creds symbols needed by kinit.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand 888780c9e7 add fast symbols 2011-07-24 20:24:39 -07:00
Linus Nordberg 294c2786fa Fix typo.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand e9053800f1 add Fast cookie 2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand 1a8f7caf86 add Fast cookie 2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand 6b942e6ec2 free fast cookie 2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand 72308645a2 fast cookie 2011-07-24 20:24:39 -07:00