71d3953a5b
Help solaris make even more.
Love Hörnquist Åstrand
2006-11-12 20:14:33 +00:00
ed1a5f6565
Help solaris make.
Love Hörnquist Åstrand
2006-11-12 20:13:54 +00:00
c16f8fcd4e
Add plugin api.
Love Hörnquist Åstrand
2006-11-12 20:06:52 +00:00
51bdcbd088
Use the resolve plugin interface.
Love Hörnquist Åstrand
2006-11-12 20:05:20 +00:00
b28a485ef3
Test resolve plugin
Love Hörnquist Åstrand
2006-11-12 19:10:11 +00:00
79e58fd503
Add plugin interface for resolving that is API compatible with MITs version.
Love Hörnquist Åstrand
2006-11-12 19:00:03 +00:00
d4c6410532
Add first version of the plugin interface.
Love Hörnquist Åstrand
2006-11-12 18:58:41 +00:00
6d50466262
Spelling.
Love Hörnquist Åstrand
2006-11-12 17:30:48 +00:00
eed9f58be4
x
Love Hörnquist Åstrand
2006-11-12 17:00:26 +00:00
7ee6102353
Build PAC code.
Love Hörnquist Åstrand
2006-11-12 08:41:00 +00:00
cffffb6192
Test signing.
Love Hörnquist Åstrand
2006-11-12 08:38:10 +00:00
bfb5987861
Add code to sign PACs, only arcfour for now.
Love Hörnquist Åstrand
2006-11-12 08:37:27 +00:00
bb7a02e9b0
Add struct krb5_pac.
Love Hörnquist Åstrand
2006-11-12 08:33:07 +00:00
af6f4e7d8b
x
Love Hörnquist Åstrand
2006-11-10 07:51:24 +00:00
7eaec81548
PAC testing.
Love Hörnquist Åstrand
2006-11-10 07:47:04 +00:00
33b12f5ffd
Sprinkle error strings.
Love Hörnquist Åstrand
2006-11-10 07:36:48 +00:00
ce3af21b1e
Verify LOGON_NAME.
Love Hörnquist Åstrand
2006-11-10 07:22:55 +00:00
fd4e210f07
remove include $(srcdir)/Makefile-digest.am for now
Love Hörnquist Åstrand
2006-11-10 07:07:21 +00:00
f0f70a35b2
x
Love Hörnquist Åstrand
2006-11-10 03:38:45 +00:00
204ec47405
(_kdc_pk_check_client): drop client_princ as an argument
Love Hörnquist Åstrand
2006-11-10 03:37:43 +00:00
21ef9de7e6
(_kdc_as_rep): drop client_princ from _kdc_pk_check_client since its not valid in canonicalize case
Love Hörnquist Åstrand
2006-11-10 03:36:32 +00:00
290f195ef3
x
Love Hörnquist Åstrand
2006-11-10 03:32:11 +00:00
53eeb7198a
Try better guessing what is mech we are going to select by looking harder at the input_token, idea from Luke Howard's mechglue branch.
Love Hörnquist Åstrand
2006-11-10 03:30:12 +00:00
4aa34c791e
x
Love Hörnquist Åstrand
2006-11-10 02:54:51 +00:00
aab73a4b3d
(swrap_sendto): fail on to unknown si->type
Love Hörnquist Åstrand
2006-11-10 02:54:12 +00:00
22a8c87461
libgssapi_la_OBJECTS: add depency on gkrb5_err.h
Love Hörnquist Åstrand
2006-11-10 01:24:16 +00:00
ed1e1a5b9e
x
Love Hörnquist Åstrand
2006-11-10 01:07:43 +00:00
98e6018ae2
add GSS_KRB5_SET_ALLOWABLE_ENCTYPES_X
Love Hörnquist Åstrand
2006-11-10 01:05:34 +00:00
b402bc547b
Use int32_t for enctypes for now.
Love Hörnquist Åstrand
2006-11-10 01:00:30 +00:00
c4b2189f09
Implement gss_krb5_set_allowable_enctypes
Love Hörnquist Åstrand
2006-11-10 00:57:27 +00:00
75ecdd2c1e
GSS_KRB5_S_
Love Hörnquist Åstrand
2006-11-10 00:39:50 +00:00
edbd07c470
Include <gkrb5_err.h>.
Love Hörnquist Åstrand
2006-11-10 00:36:40 +00:00
67070a0b2f
Add gss_krb5_set_allowable_enctypes.
Love Hörnquist Åstrand
2006-11-10 00:29:12 +00:00
a26200a62a
Build and install gkrb5_err.h
Love Hörnquist Åstrand
2006-11-10 00:15:43 +00:00
4fc98d8003
Move the GSS_KRB5_S error here.
Love Hörnquist Åstrand
2006-11-09 23:52:17 +00:00
0ecd46f127
x
Love Hörnquist Åstrand
2006-11-09 21:45:21 +00:00
1e488b93d1
Document krb5_c_keylength.
Love Hörnquist Åstrand
2006-11-09 21:27:59 +00:00
6326a9272e
Add krb5_c_keylength.
Love Hörnquist Åstrand
2006-11-09 21:24:16 +00:00
a84d691b26
Almost enough code to do PAC parsing and verification, missing in the unix2NTTIME and ucs2 corner. The later will be adressed by finally adding libwind.
Love Hörnquist Åstrand
2006-11-09 02:55:17 +00:00
3be9d131ea
x
Love Hörnquist Åstrand
2006-11-08 23:11:41 +00:00
e91161433a
Add gsskrb5_set_default_realm.
Love Hörnquist Åstrand
2006-11-08 23:11:03 +00:00
1d743b581c
x
Love Hörnquist Åstrand
2006-11-08 23:07:35 +00:00
d72c44110c
Support GSS_KRB5_SET_DEFAULT_REALM_X.
Love Hörnquist Åstrand
2006-11-08 23:06:42 +00:00
6c70ad3bff
add GSS_KRB5_SET_DEFAULT_REALM_X
Love Hörnquist Åstrand
2006-11-08 23:01:01 +00:00
a0c377d2fd
Add gsskrb5_set_default_realm.
Love Hörnquist Åstrand
2006-11-08 22:55:56 +00:00
6ef56c55f0
document krb5_[gs]et_max_time_skew
Love Hörnquist Åstrand
2006-11-08 18:56:47 +00:00
e6e22c2bbd
Remove support dumping to a kerberos 4 database.
Love Hörnquist Åstrand
2006-11-08 18:48:36 +00:00
6740e9a944
Use EGREP.
Love Hörnquist Åstrand
2006-11-08 15:56:23 +00:00
1dd1e1d2be
Use EGREP.
Love Hörnquist Åstrand
2006-11-08 14:56:49 +00:00
2c0779168f
x
Love Hörnquist Åstrand
2006-11-08 02:58:19 +00:00
adeeb5222e
rename krb5_[gs]et_time_wrap to krb5_[gs]et_max_time_skew
Love Hörnquist Åstrand
2006-11-08 02:56:28 +00:00
69eaa1a026
use krb5_get_time_wrap
Love Hörnquist Åstrand
2006-11-08 02:51:46 +00:00
f46e738880
Check that authtime is sane, From Andrew Bartlet
Love Hörnquist Åstrand
2006-11-08 02:49:40 +00:00
0ed5fc55f9
_gsskrb5_extract_authz_data_from_sec_context no longer used, bye bye
Love Hörnquist Åstrand
2006-11-08 02:42:50 +00:00
785e4c09a4
x
Love Hörnquist Åstrand
2006-11-08 00:30:51 +00:00
0868717d3c
Add krb5_storage_from_readonly_mem that is safe to use on const/readonly buffers (it doesn't support write).
Love Hörnquist Åstrand
2006-11-07 23:02:53 +00:00
9b4cecc20f
x
Love Hörnquist Åstrand
2006-11-07 22:16:28 +00:00
c978e4fb68
No depenency of the krb5 gssapi mech.
Love Hörnquist Åstrand
2006-11-07 22:15:52 +00:00
3dd9bbd06d
(gsskrb5_extract_authtime_from_sec_context): use _gsskrb5_decode_om_uint32 From Andrew Bartlet
Love Hörnquist Åstrand
2006-11-07 22:03:29 +00:00
79be8d802d
Add dummy gss_krb5_set_allowable_enctypes for now.
Love Hörnquist Åstrand
2006-11-07 21:57:47 +00:00
0b2f6c4188
Add GSS_KRB5_SET_ALLOWABLE_ENCTYPES_X.
Love Hörnquist Åstrand
2006-11-07 21:05:03 +00:00
425b04dbb4
x
Love Hörnquist Åstrand
2006-11-07 20:04:46 +00:00
4fc6a5e397
Include <roken.h> for compatiblity.
Love Hörnquist Åstrand
2006-11-07 19:53:40 +00:00
145d124f97
x
Love Hörnquist Åstrand
2006-11-07 19:27:09 +00:00
c284a8900a
x
Love Hörnquist Åstrand
2006-11-07 19:19:28 +00:00
2cba3dc5ce
Test mutual contexts and a commited out dce-style test
Love Hörnquist Åstrand
2006-11-07 19:06:49 +00:00
4806754426
Use IS_DCE_STYLE flag. There is no padding in DCE-STYLE, don't try to use to. From Andrew Bartlett.
Love Hörnquist Åstrand
2006-11-07 19:05:16 +00:00
cc68fac9fe
test wrap/unwrap, add flag for dce-style and mutual auth, also support multi-roundtrip sessions
Love Hörnquist Åstrand
2006-11-07 19:02:54 +00:00
893d903659
Add IS_DCE_STYLE macro.
Love Hörnquist Åstrand
2006-11-07 17:57:43 +00:00
1a7ec40448
(init_auth): There is no OID wrapping on the reply token. From Andrew Bartlett
Love Hörnquist Åstrand
2006-11-07 17:40:01 +00:00
9956ae0200
Catch error string from hx509_cms_verify_signed. Check for id-pKKdcEkuOID and warn if its not there.
Love Hörnquist Åstrand
2006-11-07 17:24:57 +00:00
dcb53a0099
Sprinkle error strings.
Love Hörnquist Åstrand
2006-11-07 17:19:17 +00:00
a04ab012c3
Add more krb5_rd_req_out_get functions.
Love Hörnquist Åstrand
2006-11-07 17:11:31 +00:00
3dced0866c
(gsskrb5_acceptor_start): use krb5_rd_req_ctx
Love Hörnquist Åstrand
2006-11-07 14:52:05 +00:00
b38b62d51a
(gsskrb5_get_subkey): return the per message token subkey
Love Hörnquist Åstrand
2006-11-07 14:41:35 +00:00
439286c150
check if there is any key at all
Love Hörnquist Åstrand
2006-11-07 14:34:35 +00:00
3a849ff08d
x
Love Hörnquist Åstrand
2006-11-07 00:20:20 +00:00
ef33b12686
krb5_rd_req_{in,out}_ctx.
Love Hörnquist Åstrand
2006-11-07 00:17:42 +00:00
3c84029aba
(krb5_rd_req_ctx): Add context all singing-all dancing version of the krb5_rd_req and implement krb5_rd_req and krb5_rd_req_with_keyblock using it.
Love Hörnquist Åstrand
2006-11-07 00:13:58 +00:00
8e0530bcee
Set more error strings, use right enum for acceptor subkey. From Andrew Bartlett.
Love Hörnquist Åstrand
2006-11-06 18:21:23 +00:00
d3938b5abb
(krb5_ticket_get_authorization_data_type): unbreak.
Love Hörnquist Åstrand
2006-11-06 17:57:18 +00:00
7dc5946f3c
Fix extraction of authz data from the AuthorizationData sequence:
Love Hörnquist Åstrand
2006-11-06 17:53:58 +00:00
6c898c9c9f
x
Love Hörnquist Åstrand
2006-11-06 17:36:25 +00:00
7ca637df72
x
Love Hörnquist Åstrand
2006-11-06 17:16:10 +00:00
16679f8174
A few fixes to have Heimdal pass the make check under socket_wrapper.
Love Hörnquist Åstrand
2006-11-06 17:12:34 +00:00
fc9d24c7de
x
Love Hörnquist Åstrand
2006-11-05 00:50:49 +00:00
acaa0b8655
Test gsskrb5_extract_service_keyblock, needed in PAC valication. From Andrew Bartlett
Love Hörnquist Åstrand
2006-11-05 00:46:21 +00:00
15ffd5b195
Add keyblock extraction functions, set more errorstrings
Love Hörnquist Åstrand
2006-11-05 00:35:32 +00:00
d3eeb37f3d
Add gsskrb5_extract_authz_data_from_sec_context and keyblock extraction functions.
Love Hörnquist Åstrand
2006-11-05 00:23:01 +00:00
51c7ede9d6
Add extraction of keyblock function, from Andrew Bartlett.
Love Hörnquist Åstrand
2006-11-05 00:06:09 +00:00
e4947d8944
Add GSS_KRB5_GET_SERVICE_KEYBLOCK_X
Love Hörnquist Åstrand
2006-11-05 00:03:15 +00:00
62430a07d1
x
Love Hörnquist Åstrand
2006-11-04 23:55:26 +00:00
343b2cb1c2
(hx509_query_match_cmp_func): return 0
Love Hörnquist Åstrand
2006-11-04 23:43:24 +00:00
159fc828ab
add context variable to cmp function.
Love Hörnquist Åstrand
2006-11-04 23:31:41 +00:00
c226612caa
(hx509_query_match_cmp_func): allow setting the match function.
Love Hörnquist Åstrand
2006-11-04 23:27:49 +00:00
6cf72f998b
(_kdc_as_rep): More verbose time skew logging.
Love Hörnquist Åstrand
2006-11-04 17:05:28 +00:00
23e43c8e78
x
Love Hörnquist Åstrand
2006-11-04 03:41:23 +00:00
ccbbd474e1
Rename various routines and constants from canonize to canonicalize. From Andrew Bartlett
Love Hörnquist Åstrand
2006-11-04 03:34:57 +00:00
b15281a864
Add krb5_[gs]et_time_wrap
Love Hörnquist Åstrand
2006-11-04 03:27:47 +00:00
c9ccbb40f2
Rename various routines and constants from canonize to canonicalize. From Andrew Bartlett
Love Hörnquist Åstrand
2006-11-04 03:20:57 +00:00