7952a0471c
catch EXIT traps
Love Hörnquist Åstrand
2006-12-18 21:40:27 +00:00
d90516957a
turn off dns, enable digest, generate all keys
Love Hörnquist Åstrand
2006-12-18 21:37:20 +00:00
76160f2497
x
Love Hörnquist Åstrand
2006-12-18 21:24:02 +00:00
450f635e88
Calculate the NTLM version 1 "master" key.
Love Hörnquist Åstrand
2006-12-18 21:23:24 +00:00
276d560deb
(heim_ntlm_build_ntlm1_master): calculate the ntlm version 1 "master" key.
Love Hörnquist Åstrand
2006-12-18 21:22:09 +00:00
f280e31a6b
Unwrap the NTLM session key and return it to the server.
Love Hörnquist Åstrand
2006-12-18 21:19:47 +00:00
20e973fda2
Resurect negHints for the acceptor sends first packet.
Love Hörnquist Åstrand
2006-12-18 18:50:15 +00:00
a11517a4d9
Add "windows" versions of the NegTokenInitWin and friends.
Love Hörnquist Åstrand
2006-12-18 18:28:49 +00:00
d2946a3c8e
add --wrapunwrap flag
Love Hörnquist Åstrand
2006-12-18 18:07:15 +00:00
0baf465a7c
x
Love Hörnquist Åstrand
2006-12-18 18:04:33 +00:00
89a05cc5da
test more combination of spnego contexts
Love Hörnquist Åstrand
2006-12-18 18:03:27 +00:00
3ac5851185
x
Love Hörnquist Åstrand
2006-12-18 17:52:48 +00:00
6a8647e1c6
move _gss_spnego_indicate_mechtypelist() to compat.c, use the sequence types of MechTypeList, make add_mech_type() static.
Love Hörnquist Åstrand
2006-12-18 17:52:26 +00:00
acccf21ce2
move _gss_spnego_indicate_mechtypelist() to compat.c
Love Hörnquist Åstrand
2006-12-18 17:51:13 +00:00
2ce12d8caa
Generate sequence code for MechTypeList
Love Hörnquist Åstrand
2006-12-18 17:19:53 +00:00
e0585ffc8d
x
Love Hörnquist Åstrand
2006-12-18 15:42:27 +00:00
363515e856
check that the generated acceptor mechlist is acceptable too
Love Hörnquist Åstrand
2006-12-18 15:42:03 +00:00
826acbd391
Abstract out the initiator filter function, it will be needed for the acceptor too.
Love Hörnquist Åstrand
2006-12-18 15:00:19 +00:00
c11cc5fd1b
Abstract out the initiator filter function, it will be needed for the acceptor too. Remove negHints.
Love Hörnquist Åstrand
2006-12-18 15:00:03 +00:00
33260e362f
x
Love Hörnquist Åstrand
2006-12-18 13:15:30 +00:00
dcdaf46f23
less bash in the automated version.
Love Hörnquist Åstrand
2006-12-18 13:14:08 +00:00
7a8432db0d
ntlm username/password file.
Love Hörnquist Åstrand
2006-12-18 13:12:44 +00:00
2e19f1870d
x
Love Hörnquist Åstrand
2006-12-18 13:06:07 +00:00
b11bcf4bee
add check-spnego
Love Hörnquist Åstrand
2006-12-18 13:06:00 +00:00
a831db29b4
check spnego combinations.
Love Hörnquist Åstrand
2006-12-18 13:05:26 +00:00
ba22a47a93
add _gss_ntlm_allocate_ctx
Love Hörnquist Åstrand
2006-12-18 13:04:07 +00:00
fd0d5b4e0f
Check that the KDC seem to there and answering us, we can't do better then that wen checking if we will accept the credential.
Love Hörnquist Åstrand
2006-12-18 13:03:45 +00:00
ae966fe266
return GSS_S_UNAVAILABLE
Love Hörnquist Åstrand
2006-12-18 13:02:25 +00:00
02620cbb4e
add _gss_free_oid, reverse of _gss_copy_oid
Love Hörnquist Åstrand
2006-12-18 13:01:40 +00:00
62270350bc
try harder to handle names better. handle missing acceptor and initator creds better (ie dont propose/accept mech that there are no credentials for) split NegTokenInit and NegTokenResp in acceptor
Love Hörnquist Åstrand
2006-12-18 12:59:50 +00:00
471a5b53bb
Its very sad, but NegHints its are not part of the NegTokenInit, this makes SPNEGO acceptor life a lot harder.
Love Hörnquist Åstrand
2006-12-18 12:56:30 +00:00
38434e8f3c
update (c)
Love Hörnquist Åstrand
2006-12-17 22:53:39 +00:00
782482710f
(krb5_ret_principal): Fix a bug in the malloc failure part, noticed by Arnaud Lacombe in NetBSD coverity scan.
Love Hörnquist Åstrand
2006-12-17 22:49:37 +00:00
846ad516e0
x
Love Hörnquist Åstrand
2006-12-16 08:32:18 +00:00
b51a41e7d1
Allocate the buffer from the right length.
Love Hörnquist Åstrand
2006-12-16 08:31:47 +00:00
19c390a027
less bash in the test script
Love Hörnquist Åstrand
2006-12-15 23:03:37 +00:00
9f3d48b8c1
x
Love Hörnquist Åstrand
2006-12-15 23:03:01 +00:00
27e4d94eb2
test more combinations of names
Love Hörnquist Åstrand
2006-12-15 23:02:32 +00:00
7e1c31e8c2
(init_sec_context): Tell the other side what domain we think we are talking to.
Love Hörnquist Åstrand
2006-12-15 22:50:58 +00:00
af03eba4a5
free username and password
Love Hörnquist Åstrand
2006-12-15 22:49:13 +00:00
0ccb9c8444
(_gss_ntlm_release_name): free name.
Love Hörnquist Åstrand
2006-12-15 22:48:13 +00:00
7ccd5835db
store username and password in the ntlm_ctx
Love Hörnquist Åstrand
2006-12-15 22:47:31 +00:00
d53618b20e
Use the target_name to figure out what username/password to use
Love Hörnquist Åstrand
2006-12-15 22:44:14 +00:00
77666a423c
ntlm username and password file
Love Hörnquist Åstrand
2006-12-15 22:42:13 +00:00
c3c1fa1aaa
(_gss_ntlm_import_name): add support for GSS_C_NT_HOSTBASED_SERVICE names
Love Hörnquist Åstrand
2006-12-15 22:24:18 +00:00
1babec8943
Add ntlm_name.
Love Hörnquist Åstrand
2006-12-15 22:23:13 +00:00
f9e109b613
x
Love Hörnquist Åstrand
2006-12-15 21:37:09 +00:00
be40e72015
Support NTLM verification, note that the KDC does no NTLM packet parsing, its all done by the client side, the KDC just calculate and verify the digest and return the result to the service.
Love Hörnquist Åstrand
2006-12-15 21:33:26 +00:00
30cf3d7d07
x
Love Hörnquist Åstrand
2006-12-15 21:27:42 +00:00
eb71c96ac0
if the user have a kadmin/admin initial ticket, don't ask for password, just use the credential instead.
Love Hörnquist Åstrand
2006-12-15 21:27:12 +00:00
5703c13dc7
add ntlm-server-init
Love Hörnquist Åstrand
2006-12-15 21:24:20 +00:00
d615ca6727
kdigest depends on libheimntlm.la
Love Hörnquist Åstrand
2006-12-15 21:23:05 +00:00
ffada79bc7
Include <heimntlm.h>.
Love Hörnquist Åstrand
2006-12-15 21:22:19 +00:00
4e85483d75
libheimntlm.la needs to be built after libkrb5.la
Love Hörnquist Åstrand
2006-12-15 21:21:05 +00:00
95936540f6
libkdc needs libheimntlm.la
Love Hörnquist Åstrand
2006-12-15 21:17:50 +00:00
647f758a6d
just run autoreconf -i -f
Love Hörnquist Åstrand
2006-12-15 21:15:45 +00:00
73958d8f1e
x
Love Hörnquist Åstrand
2006-12-15 20:19:02 +00:00
fddc9395e5
Check that ntlm works.
Love Hörnquist Åstrand
2006-12-15 20:18:35 +00:00
ef6b5a7236
Make compile.
Love Hörnquist Åstrand
2006-12-15 20:12:20 +00:00
471b9aabbc
allow testing of ntlm.
Love Hörnquist Åstrand
2006-12-15 20:09:19 +00:00
8f687061ab
add __gss_ntlm_initialize
Love Hörnquist Åstrand
2006-12-15 20:08:25 +00:00
5ba324eae7
(handle_type3): verify that the kdc approved of the ntlm exchange too
Love Hörnquist Åstrand
2006-12-15 20:06:54 +00:00
93482a2b67
Add the builtin ntlm mech
Love Hörnquist Åstrand
2006-12-15 20:05:43 +00:00
25e6be673b
NTLM test app.
Love Hörnquist Åstrand
2006-12-15 20:04:50 +00:00
e4ac6bf6ed
Add detection of NTLMSSP.
Love Hörnquist Åstrand
2006-12-15 20:04:14 +00:00
a9a686862d
add ntlm mech oid
Love Hörnquist Åstrand
2006-12-15 20:02:54 +00:00
792c38eaf4
Switch OID to the ms ntlmssp oid
Love Hörnquist Åstrand
2006-12-15 20:01:48 +00:00
6bb820f1db
hook in ntlm
Love Hörnquist Åstrand
2006-12-15 19:46:12 +00:00
b42eac1f4a
(AC_CONFIG_FILES): add lib/ntlm/Makefile
Love Hörnquist Åstrand
2006-12-15 19:45:27 +00:00
164fc106aa
add forward declaration for krb5_ntlm
Love Hörnquist Åstrand
2006-12-15 19:17:32 +00:00
df50d13193
API to authenticate ntlm requests.
Love Hörnquist Åstrand
2006-12-15 19:16:32 +00:00
a102876012
Add ntlm files.
Love Hörnquist Åstrand
2006-12-15 19:15:16 +00:00
ac906bd5fa
Add bits for handling NTLM.
Love Hörnquist Åstrand
2006-12-15 19:13:39 +00:00
aac9035b3d
Catch more error errors.
Love Hörnquist Åstrand
2006-12-15 18:49:08 +00:00
5f27c2cd3a
x
Love Hörnquist Åstrand
2006-12-15 16:49:10 +00:00
0c000a62f7
Support "iteration" of file credential caches by giving the user back the default file credential cache and only that.
Love Hörnquist Åstrand
2006-12-15 16:48:28 +00:00
8e567798a7
Expand the default root for some of the cc type names.
Love Hörnquist Åstrand
2006-12-15 16:46:51 +00:00
2ba004edf0
x
Love Hörnquist Åstrand
2006-12-15 16:40:51 +00:00
0188d9ca47
Check after a credential to use.
Love Hörnquist Åstrand
2006-12-15 16:40:28 +00:00
fbb7a0e925
Don't fail, mech glue layer can't stand that.
Love Hörnquist Åstrand
2006-12-15 16:33:19 +00:00
b6821fa5e6
x
Love Hörnquist Åstrand
2006-12-15 11:55:09 +00:00
3b401bbfd4
Use internal version of rk_unvis
Love Hörnquist Åstrand
2006-12-15 11:54:48 +00:00
626f6539b8
Always include rk_ versions.
Love Hörnquist Åstrand
2006-12-15 11:54:11 +00:00
9e02cddfb9
add strsvis rename.
Love Hörnquist Åstrand
2006-12-15 11:53:09 +00:00
8040c1e1ae
Include rk_versions.
Love Hörnquist Åstrand
2006-12-15 11:49:22 +00:00
c8c01f91e4
Remove unvis prototypes, use internal version of rk_strsvisx.
Love Hörnquist Åstrand
2006-12-15 11:44:29 +00:00