c55b53060b
build test_kcred
Love Hörnquist Åstrand
2005-10-26 11:30:12 +00:00
b742a50cf7
Document gss_krb5_import_ccache
Love Hörnquist Åstrand
2005-10-26 11:29:34 +00:00
780dc8dd41
Sort and add gss_krb5_import_ccache.
Love Hörnquist Åstrand
2005-10-26 11:26:55 +00:00
8980a47d4a
x
Love Hörnquist Åstrand
2005-10-26 11:25:34 +00:00
a5755046b4
(_gssapi_krb5_ccache_lifetime): break out code used to extract lifetime from a credential cache
Love Hörnquist Åstrand
2005-10-26 11:25:16 +00:00
fc4f134e26
Add _gssapi_krb5_ccache_lifetime, used to extract lifetime from a credential cache.
Love Hörnquist Åstrand
2005-10-26 11:23:48 +00:00
4084884d71
add gss_krb5_import_ccache, reverse of gss_krb5_copy_ccache
Love Hörnquist Åstrand
2005-10-26 11:22:13 +00:00
afd104d9cd
test gss_krb5_import_ccache
Love Hörnquist Åstrand
2005-10-26 11:19:41 +00:00
abc2b55034
x
Love Hörnquist Åstrand
2005-10-26 10:17:15 +00:00
a95dbf7a69
Add variable INSTALL_CATPAGES that controls if cat pages are installed, defaults to true. From Johnny Lam <jlam@pkgsrc.org>.
Love Hörnquist Åstrand
2005-10-26 10:16:50 +00:00
65447e1a4b
Install krb5_set_password.3, Johnny Lam <jlam@pkgsrc.org>
Love Hörnquist Åstrand
2005-10-26 09:08:18 +00:00
9319b9dce1
Fix mdoc for krb5_encrypt_EncryptedData, Johnny Lam <jlam@pkgsrc.org>
Love Hörnquist Åstrand
2005-10-26 08:50:09 +00:00
b62b7a569e
More verbose errors.
Love Hörnquist Åstrand
2005-10-25 19:41:32 +00:00
8586ef823b
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-25 10:55:21 +00:00
74a52646aa
add missing }
Love Hörnquist Åstrand
2005-10-22 21:13:53 +00:00
e07d2b2d06
x
Love Hörnquist Åstrand
2005-10-22 17:18:07 +00:00
d448f74010
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 17:17:44 +00:00
af8272f96c
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 17:09:06 +00:00
8b804c1012
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 16:57:04 +00:00
36b34169c8
x
Love Hörnquist Åstrand
2005-10-22 15:08:17 +00:00
4863ea9553
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 15:07:48 +00:00
4232beb6e4
x
Love Hörnquist Åstrand
2005-10-22 14:19:01 +00:00
e5dc0153d3
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 14:18:19 +00:00
5f70cc361a
x
Love Hörnquist Åstrand
2005-10-22 13:16:07 +00:00
9dccedb6d3
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 13:15:43 +00:00
f74a40ff85
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 12:49:00 +00:00
993ae3a82f
(_krb5_dh_group_ok): if not enough bits are generated from the DH groups, fail.
Love Hörnquist Åstrand
2005-10-21 17:18:38 +00:00
3bfded2697
(get_dh_param): Pass down config so this function can check pkinit_dh_min_bits
Love Hörnquist Åstrand
2005-10-21 17:14:19 +00:00
b2698d9dc7
Fill in pkinit_dh_min_bits from configuration file.
Love Hörnquist Åstrand
2005-10-21 17:11:59 +00:00
2e2d62a9e5
Add pkinit_dh_min_bits to krb5_kdc_configuration.
Love Hörnquist Åstrand
2005-10-21 17:11:21 +00:00
9acc8d9033
x
Love Hörnquist Åstrand
2005-10-21 16:38:01 +00:00
b3da510397
x
Love Hörnquist Åstrand
2005-10-21 12:44:33 +00:00
bc4a1da9c6
(acquire_initiator_cred): use krb5_cc_cache_match to find a matching creditial cache, if that failes, fallback to the default cache.
Love Hörnquist Åstrand
2005-10-21 12:44:08 +00:00
19a7595ae2
x
Love Hörnquist Åstrand
2005-10-20 16:57:27 +00:00
256cf0f403
Remove untested patch that sneaked in.
Love Hörnquist Åstrand
2005-10-20 14:59:20 +00:00
8de40c5202
Add k_hasafs_recheck.
Love Hörnquist Åstrand
2005-10-20 14:53:01 +00:00
156ee39478
(k_hasafs_recheck): new function, allow rechecking if AFS client have started now, internaly it resets the internal state from k_hasafs() and retry retry the probing. The problem with calling k_hasaf() is that is plays around with signals, and that cases problem for some systems/applications.
Love Hörnquist Åstrand
2005-10-20 14:52:18 +00:00
ffd449e518
x
Love Hörnquist Åstrand
2005-10-20 13:38:32 +00:00
92c8cf86bc
x
Love Hörnquist Åstrand
2005-10-20 09:30:11 +00:00
8a06dac4ff
Add option to require binding between reply and response.
Love Hörnquist Åstrand
2005-10-20 09:29:19 +00:00
186339cc52
x
Love Hörnquist Åstrand
2005-10-19 21:30:23 +00:00
3c3052ff5f
Text about Kerberos errors.
Love Hörnquist Åstrand
2005-10-19 21:30:07 +00:00
b6574254f4
x
Love Hörnquist Åstrand
2005-10-19 21:16:04 +00:00
79146c3e71
Try both ReplyKey and ReplyKey-Win2k for the Windows case to support the updated -09 protocol (using asChecksum). Tell KDC we support this by sending KRB5-PADATA-PK-AS-09-BINDING in the pa-data.
Love Hörnquist Åstrand
2005-10-19 21:15:41 +00:00
2c6670fb89
x
Love Hörnquist Åstrand
2005-10-19 20:26:59 +00:00
b381016877
x
Love Hörnquist Åstrand
2005-10-19 17:36:48 +00:00
42ec2bd7b5
Test copy FILE -> FILE, and MEMORY -> MEMORY too.
Love Hörnquist Åstrand
2005-10-19 17:36:09 +00:00
9d8ec6711a
Test krb5_cc_copy_cache and krb5_cc_cache_match.
Love Hörnquist Åstrand
2005-10-19 17:31:39 +00:00
cc7855865c
(krb5_cc_cache_match): add function that iterates over all credential caches for a user and returns a match.
Love Hörnquist Åstrand
2005-10-19 17:30:40 +00:00
4107ec5557
Catch error returned by ->hdb_unlock. From Henry B. Hotz
Love Hörnquist Åstrand
2005-10-19 13:51:40 +00:00
af61e047fd
x
Love Hörnquist Åstrand
2005-10-19 07:40:49 +00:00
0a2f9014cc
Fix all prototypes, they got krb5_context argument wrong.
Love Hörnquist Åstrand
2005-10-19 07:39:01 +00:00
959cc8f926
Update .Dd and (c)
Love Hörnquist Åstrand
2005-10-19 07:37:27 +00:00
4269d4e6dc
Add krb5_cc_start_seq_get and an example.
Love Hörnquist Åstrand
2005-10-19 07:35:19 +00:00
91cb866ce3
Nits in the credential cache text.
Love Hörnquist Åstrand
2005-10-18 20:17:55 +00:00
2f0477a0b5
Try to explain krb5_ccache, krb5_principal and errors.
Love Hörnquist Åstrand
2005-10-18 20:11:25 +00:00
94b82109d3
x
Love Hörnquist Åstrand
2005-10-18 11:15:29 +00:00
6fcc9f4922
Specify that krb5_unparse_name sets name to NULL on failure.
Love Hörnquist Åstrand
2005-10-16 10:42:17 +00:00
7e25d8fb09
remove dump_config as there's a --dumpconfig for verify_krb5_conf now
Johan Danielsson
2005-10-13 15:44:21 +00:00
45d2b74ced
Add example how to use krb5_get_credentials.
Love Hörnquist Åstrand
2005-10-13 14:24:49 +00:00
8592c8225b
Clarifiying comment.
Love Hörnquist Åstrand
2005-10-13 03:30:14 +00:00
ac5ccfb7d6
x
Love Hörnquist Åstrand
2005-10-12 15:20:55 +00:00
5a5905fef1
Add gssapi_krb5_set_status and gssapi_krb5_clear_status
Love Hörnquist Åstrand
2005-10-12 15:20:37 +00:00
144885d37f
x
Love Hörnquist Åstrand
2005-10-12 12:52:55 +00:00
e42d007ce9
Rename private to opt_private.
Love Hörnquist Åstrand
2005-10-12 12:45:27 +00:00
296d9d6457
rename element private to opt_private to make c++ picky compilers less upset.
Love Hörnquist Åstrand
2005-10-12 12:41:04 +00:00
5d64a49fa7
(krb5_get_init_creds_opt): rename element private to opt_private to make cpp picky compilers less upset.
Love Hörnquist Åstrand
2005-10-12 12:39:28 +00:00
d29fd79920
x
Johan Danielsson
2005-10-12 09:48:39 +00:00
a703774dcd
document -x
Johan Danielsson
2005-10-12 09:48:31 +00:00
930f8ed46a
implement cprotect (from MIT)
Johan Danielsson
2005-10-12 09:46:56 +00:00
bc8df2efca
add -x (encrypt) option; implement cprotect (from MIT); make sure we CCC if switching to clear-text command channel
Johan Danielsson
2005-10-12 09:46:42 +00:00
8e29e3cb6f
if doing command line encryption (-x), ignore prot commands in .netrc
Johan Danielsson
2005-10-12 09:44:24 +00:00
0ef51c20cf
add -x (encrypt) option
Johan Danielsson
2005-10-12 09:42:47 +00:00
4bd45a62b8
x
Love Hörnquist Åstrand
2005-10-12 07:25:54 +00:00
72fabc6c6b
(spnego_reply): Don't pass back raw Kerberos errors, use GSS-API errors instead.
Love Hörnquist Åstrand
2005-10-12 07:25:18 +00:00
a2eac30736
Add gssapi_krb5_clear_status, gssapi_krb5_set_status for handling error messages.
Love Hörnquist Åstrand
2005-10-12 07:23:03 +00:00
5bf49e3df3
Don't install krb5.moduli for now.
Love Hörnquist Åstrand
2005-10-09 09:33:13 +00:00
66baee8800
(_krb5_krbhost_info_move): new function (_krb5_free_krbhst_info): expose to internal use
Love Hörnquist Åstrand
2005-10-08 15:40:50 +00:00
740f6b5deb
add Q for group 14
Love Hörnquist Åstrand
2005-10-08 15:39:42 +00:00
57bcc0c4e3
x
Love Hörnquist Åstrand
2005-10-08 15:35:16 +00:00
ffa6f55bd4
Prepare to pass down a krb5_krbhst_info into the pre-auth mechs
Love Hörnquist Åstrand
2005-10-08 15:34:53 +00:00
6b484c39a5
Inline short functions, share more code, rename COMPAT_27 to COMPAT_IETF, pass down a krb5_krbhst_info for verification of KDC info, and general cleaning up.
Love Hörnquist Åstrand
2005-10-08 15:32:14 +00:00
be13646074
Remove pk-init-19 support.
Love Hörnquist Åstrand
2005-10-08 08:49:40 +00:00
6f745de7ff
HDB extensions
Love Hörnquist Åstrand
2005-10-07 13:13:37 +00:00
0f0b587308
x
Love Hörnquist Åstrand
2005-10-07 12:20:27 +00:00
c3c4927a70
Install krb5.moduli in sysconfdir.
Love Hörnquist Åstrand
2005-10-07 12:20:11 +00:00
92c70eb57b
Describe format.
Love Hörnquist Åstrand
2005-10-07 12:19:10 +00:00
d392e84793
moduli file
Love Hörnquist Åstrand
2005-10-07 12:17:49 +00:00
3c93988850
rename moduli file to SYSCONFDIR "/krb5.moduli"
Love Hörnquist Åstrand
2005-10-07 12:08:02 +00:00
2ba37a88dd
Add forward declaration for krb5_dh_moduli. Add define for MODULI_FILE.
Love Hörnquist Åstrand
2005-10-07 11:44:49 +00:00
f961f7f538
Fix comment
Love Hörnquist Åstrand
2005-10-07 11:02:15 +00:00
1ef128fbff
Removing PK-INIT-19 support.
Love Hörnquist Åstrand
2005-10-07 11:00:05 +00:00
0915d6890b
(_krb5_dh_group_ok): return DH group name on success. (krb5_get_init_creds_opt_set_pkinit): use moduli file if it exists
Love Hörnquist Åstrand
2005-10-07 10:40:52 +00:00
b1fffa7079
Save DH group name and print it on success.
Love Hörnquist Åstrand
2005-10-07 10:40:00 +00:00
ff2f0da2df
(_krb5_dh_group_ok): if q is zero, ignore it.
Love Hörnquist Åstrand
2005-10-07 08:59:27 +00:00
776512783d
Check dh group parameters from client.
Love Hörnquist Åstrand
2005-10-07 08:57:51 +00:00
0fa6eefd9f
x
Love Hörnquist Åstrand
2005-10-07 08:56:15 +00:00
fcc233ae04
x
Love Hörnquist Åstrand
2005-10-07 08:55:50 +00:00
e3eff997f9
x
Love Hörnquist Åstrand
2005-10-07 08:55:28 +00:00