ba22a47a93
add _gss_ntlm_allocate_ctx
Love Hörnquist Åstrand
2006-12-18 13:04:07 +00:00
fd0d5b4e0f
Check that the KDC seem to there and answering us, we can't do better then that wen checking if we will accept the credential.
Love Hörnquist Åstrand
2006-12-18 13:03:45 +00:00
ae966fe266
return GSS_S_UNAVAILABLE
Love Hörnquist Åstrand
2006-12-18 13:02:25 +00:00
02620cbb4e
add _gss_free_oid, reverse of _gss_copy_oid
Love Hörnquist Åstrand
2006-12-18 13:01:40 +00:00
62270350bc
try harder to handle names better. handle missing acceptor and initator creds better (ie dont propose/accept mech that there are no credentials for) split NegTokenInit and NegTokenResp in acceptor
Love Hörnquist Åstrand
2006-12-18 12:59:50 +00:00
471a5b53bb
Its very sad, but NegHints its are not part of the NegTokenInit, this makes SPNEGO acceptor life a lot harder.
Love Hörnquist Åstrand
2006-12-18 12:56:30 +00:00
38434e8f3c
update (c)
Love Hörnquist Åstrand
2006-12-17 22:53:39 +00:00
782482710f
(krb5_ret_principal): Fix a bug in the malloc failure part, noticed by Arnaud Lacombe in NetBSD coverity scan.
Love Hörnquist Åstrand
2006-12-17 22:49:37 +00:00
846ad516e0
x
Love Hörnquist Åstrand
2006-12-16 08:32:18 +00:00
b51a41e7d1
Allocate the buffer from the right length.
Love Hörnquist Åstrand
2006-12-16 08:31:47 +00:00
19c390a027
less bash in the test script
Love Hörnquist Åstrand
2006-12-15 23:03:37 +00:00
9f3d48b8c1
x
Love Hörnquist Åstrand
2006-12-15 23:03:01 +00:00
27e4d94eb2
test more combinations of names
Love Hörnquist Åstrand
2006-12-15 23:02:32 +00:00
7e1c31e8c2
(init_sec_context): Tell the other side what domain we think we are talking to.
Love Hörnquist Åstrand
2006-12-15 22:50:58 +00:00
af03eba4a5
free username and password
Love Hörnquist Åstrand
2006-12-15 22:49:13 +00:00
0ccb9c8444
(_gss_ntlm_release_name): free name.
Love Hörnquist Åstrand
2006-12-15 22:48:13 +00:00
7ccd5835db
store username and password in the ntlm_ctx
Love Hörnquist Åstrand
2006-12-15 22:47:31 +00:00
d53618b20e
Use the target_name to figure out what username/password to use
Love Hörnquist Åstrand
2006-12-15 22:44:14 +00:00
77666a423c
ntlm username and password file
Love Hörnquist Åstrand
2006-12-15 22:42:13 +00:00
c3c1fa1aaa
(_gss_ntlm_import_name): add support for GSS_C_NT_HOSTBASED_SERVICE names
Love Hörnquist Åstrand
2006-12-15 22:24:18 +00:00
1babec8943
Add ntlm_name.
Love Hörnquist Åstrand
2006-12-15 22:23:13 +00:00
f9e109b613
x
Love Hörnquist Åstrand
2006-12-15 21:37:09 +00:00
be40e72015
Support NTLM verification, note that the KDC does no NTLM packet parsing, its all done by the client side, the KDC just calculate and verify the digest and return the result to the service.
Love Hörnquist Åstrand
2006-12-15 21:33:26 +00:00
30cf3d7d07
x
Love Hörnquist Åstrand
2006-12-15 21:27:42 +00:00
eb71c96ac0
if the user have a kadmin/admin initial ticket, don't ask for password, just use the credential instead.
Love Hörnquist Åstrand
2006-12-15 21:27:12 +00:00
5703c13dc7
add ntlm-server-init
Love Hörnquist Åstrand
2006-12-15 21:24:20 +00:00
d615ca6727
kdigest depends on libheimntlm.la
Love Hörnquist Åstrand
2006-12-15 21:23:05 +00:00
ffada79bc7
Include <heimntlm.h>.
Love Hörnquist Åstrand
2006-12-15 21:22:19 +00:00
4e85483d75
libheimntlm.la needs to be built after libkrb5.la
Love Hörnquist Åstrand
2006-12-15 21:21:05 +00:00
95936540f6
libkdc needs libheimntlm.la
Love Hörnquist Åstrand
2006-12-15 21:17:50 +00:00
647f758a6d
just run autoreconf -i -f
Love Hörnquist Åstrand
2006-12-15 21:15:45 +00:00
73958d8f1e
x
Love Hörnquist Åstrand
2006-12-15 20:19:02 +00:00
fddc9395e5
Check that ntlm works.
Love Hörnquist Åstrand
2006-12-15 20:18:35 +00:00
ef6b5a7236
Make compile.
Love Hörnquist Åstrand
2006-12-15 20:12:20 +00:00
471b9aabbc
allow testing of ntlm.
Love Hörnquist Åstrand
2006-12-15 20:09:19 +00:00
8f687061ab
add __gss_ntlm_initialize
Love Hörnquist Åstrand
2006-12-15 20:08:25 +00:00
5ba324eae7
(handle_type3): verify that the kdc approved of the ntlm exchange too
Love Hörnquist Åstrand
2006-12-15 20:06:54 +00:00
93482a2b67
Add the builtin ntlm mech
Love Hörnquist Åstrand
2006-12-15 20:05:43 +00:00
25e6be673b
NTLM test app.
Love Hörnquist Åstrand
2006-12-15 20:04:50 +00:00
e4ac6bf6ed
Add detection of NTLMSSP.
Love Hörnquist Åstrand
2006-12-15 20:04:14 +00:00
a9a686862d
add ntlm mech oid
Love Hörnquist Åstrand
2006-12-15 20:02:54 +00:00
792c38eaf4
Switch OID to the ms ntlmssp oid
Love Hörnquist Åstrand
2006-12-15 20:01:48 +00:00
6bb820f1db
hook in ntlm
Love Hörnquist Åstrand
2006-12-15 19:46:12 +00:00
b42eac1f4a
(AC_CONFIG_FILES): add lib/ntlm/Makefile
Love Hörnquist Åstrand
2006-12-15 19:45:27 +00:00
164fc106aa
add forward declaration for krb5_ntlm
Love Hörnquist Åstrand
2006-12-15 19:17:32 +00:00
df50d13193
API to authenticate ntlm requests.
Love Hörnquist Åstrand
2006-12-15 19:16:32 +00:00
a102876012
Add ntlm files.
Love Hörnquist Åstrand
2006-12-15 19:15:16 +00:00
ac906bd5fa
Add bits for handling NTLM.
Love Hörnquist Åstrand
2006-12-15 19:13:39 +00:00
aac9035b3d
Catch more error errors.
Love Hörnquist Åstrand
2006-12-15 18:49:08 +00:00
5f27c2cd3a
x
Love Hörnquist Åstrand
2006-12-15 16:49:10 +00:00
0c000a62f7
Support "iteration" of file credential caches by giving the user back the default file credential cache and only that.
Love Hörnquist Åstrand
2006-12-15 16:48:28 +00:00
8e567798a7
Expand the default root for some of the cc type names.
Love Hörnquist Åstrand
2006-12-15 16:46:51 +00:00
2ba004edf0
x
Love Hörnquist Åstrand
2006-12-15 16:40:51 +00:00
0188d9ca47
Check after a credential to use.
Love Hörnquist Åstrand
2006-12-15 16:40:28 +00:00
fbb7a0e925
Don't fail, mech glue layer can't stand that.
Love Hörnquist Åstrand
2006-12-15 16:33:19 +00:00
b6821fa5e6
x
Love Hörnquist Åstrand
2006-12-15 11:55:09 +00:00
3b401bbfd4
Use internal version of rk_unvis
Love Hörnquist Åstrand
2006-12-15 11:54:48 +00:00
626f6539b8
Always include rk_ versions.
Love Hörnquist Åstrand
2006-12-15 11:54:11 +00:00
9e02cddfb9
add strsvis rename.
Love Hörnquist Åstrand
2006-12-15 11:53:09 +00:00
8040c1e1ae
Include rk_versions.
Love Hörnquist Åstrand
2006-12-15 11:49:22 +00:00
c8c01f91e4
Remove unvis prototypes, use internal version of rk_strsvisx.
Love Hörnquist Åstrand
2006-12-15 11:44:29 +00:00
539b1fbdaf
x
Love Hörnquist Åstrand
2006-12-15 00:24:20 +00:00
cff09df66a
prefix unvis functions with rk_, and prototypes.
Love Hörnquist Åstrand
2006-12-15 00:22:20 +00:00
9333410f18
Fix argument for unvis and strsvisx.
Love Hörnquist Åstrand
2006-12-15 00:21:03 +00:00
2e061ed271
ntlm gssapi module, only support context building
Love Hörnquist Åstrand
2006-12-14 12:17:34 +00:00
ba7418d3aa
(GSS_KRB5_SET_DEFAULT_REALM_X): don't fail on success. Bug report from Stefan Metzmacher.
Love Hörnquist Åstrand
2006-12-14 11:02:16 +00:00
bd8a68ab42
x
Love Hörnquist Åstrand
2006-12-14 10:50:25 +00:00
7bf56b0e3f
(free_paid): free the krb5_data structure too. Bug report from Stefan Metzmacher.
Love Hörnquist Åstrand
2006-12-14 10:49:56 +00:00
64c371dbfb
x
Love Hörnquist Åstrand
2006-12-13 20:41:50 +00:00
dce35b5529
add simple parser test app
Love Hörnquist Åstrand
2006-12-13 20:41:38 +00:00
91cf711cb7
x
Love Hörnquist Åstrand
2006-12-13 20:26:40 +00:00
bea7ea3c62
Provide some prototypes for the rk_vis functions.
Love Hörnquist Åstrand
2006-12-13 20:26:23 +00:00
ba29865749
inital version of a NTLM library, only handles ntml version 1 and ascii strings for now
Love Hörnquist Åstrand
2006-12-13 20:12:58 +00:00
3e591d8e66
x
Love Hörnquist Åstrand
2006-12-13 10:34:28 +00:00
fa438f7ca1
(init_auth): only turn on GSS_C_CONF_FLAG and GSS_C_INT_FLAG if the caller requseted it.
Love Hörnquist Åstrand
2006-12-13 10:33:20 +00:00
d31c63863f
Read the appdefault configration before we try to use the flags. Bug reported by Ingemar Nilsson.
Love Hörnquist Åstrand
2006-12-12 16:35:41 +00:00
f594e615ea
prefix digest commands with digest-
Love Hörnquist Åstrand
2006-12-12 12:48:09 +00:00
3fea7004b2
x
Love Hörnquist Åstrand
2006-12-12 12:24:06 +00:00
d7f223ff70
prefix digest commands with digest_
Love Hörnquist Åstrand
2006-12-12 12:23:54 +00:00
5cb68077c7
prefix digest commands with digest-
Love Hörnquist Åstrand
2006-12-12 12:23:00 +00:00
f91432b111
remove stuff that should have be commited yet
Love Hörnquist Åstrand
2006-12-11 21:27:52 +00:00
4a37d22a51
drop include
Love Hörnquist Åstrand
2006-12-11 19:40:19 +00:00
d70dc49b06
x
Love Hörnquist Åstrand
2006-12-11 19:39:54 +00:00
1872e0488a
(libgssapi_la_OBJECTS): depends on gssapi_asn1.h spnego_asn1.h.
Love Hörnquist Åstrand
2006-12-11 19:38:25 +00:00
b25a73eff1
x
Love Hörnquist Åstrand
2006-12-11 19:13:26 +00:00
ebcbf5f119
(print_certificate): print serial number.
Love Hörnquist Åstrand
2006-12-11 19:13:10 +00:00
b15afd6054
x
Love Hörnquist Åstrand
2006-12-11 19:08:07 +00:00
05a31a062b
(no): add S=stateOrProvinceName
Love Hörnquist Åstrand
2006-12-11 19:03:44 +00:00
a6f5b0d0ac
Prefix getifaddrs functions with rk_
Love Hörnquist Åstrand
2006-12-11 18:59:31 +00:00
3fa3fa004c
Prefix strvis functions with rk_ and do symbol renaming.
Love Hörnquist Åstrand
2006-12-11 18:58:15 +00:00
a548a4cd91
prefix strvis functions with rk_
Love Hörnquist Åstrand
2006-12-11 18:54:03 +00:00
7d15657340
x
Love Hörnquist Åstrand
2006-12-11 18:50:08 +00:00
db6202c4f0
Install extra posix headers in <roken/...> to avoid dup headers.
Love Hörnquist Åstrand
2006-12-11 18:49:51 +00:00
59238c7f99
Remember to p11_put_session in the failure cases too.
Love Hörnquist Åstrand
2006-12-11 18:42:42 +00:00
c7d5dd6b32
Less verbose error message.
Love Hörnquist Åstrand
2006-12-10 01:12:00 +00:00
Love Hörnquist Åstrand