oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Commit Graph

  • 01ef38b743 kdc: add sample GSS preauth authorization plugin Luke Howard 2021-08-31 07:58:07 +00:00
  • 7818f44659 gss_preauth: Fix build race Nicolas Williams 2021-08-29 13:50:39 -05:00
  • f43dbb1d25 gss_preauth: fix header dependency Luke Howard 2021-08-28 16:35:05 +10:00
  • f551ae3d82 gss_preauth: remove gss_preauth.h Luke Howard 2021-08-27 19:51:32 +10:00
  • ed1ef5d776 asn1: correctly check gmtime_s() return value Luke Howard 2021-08-27 16:08:54 +10:00
  • 774f50b28b gss: move GSS pre-auth helpers to convenience lib Luke Howard 2021-08-27 14:20:01 +10:00
  • 773802aecf kdc: fix _kdc_set_e_text argument in previous commit Luke Howard 2021-08-27 15:11:54 +10:00
  • 892a1ffcaa kdc: KRB5KDC_ERR_{C,S}_PRINCIPAL_UNKNOWN if missing field Luke Howard 2021-08-27 11:44:21 +10:00
  • 0417114794 kdc: validate sname in TGS-REQ Luke Howard 2021-08-27 11:42:48 +10:00
  • a5378daa6c Revert "gss: Fix leak of output_token in GSS PA" Nicolas Williams 2021-08-26 01:06:33 -05:00
  • e6283e2d3f hx509: For times before 2050 use UTCTime (fix pasto) Nicolas Williams 2021-08-25 22:49:14 -05:00
  • 041907d517 gss: Fix leak of output_token in GSS PA Nicolas Williams 2021-08-25 22:53:33 -05:00
  • 6f21611755 Avoid -Werror=address by skipping pointless _mg_buffer_zero() Andrew Bartlett 2021-08-26 11:22:46 +12:00
  • 3f7972e6be hx509: Use preferred attribute string types Nicolas Williams 2021-08-25 17:00:12 -05:00
  • f425e116b5 hx509: For times before 2050 use UTCTime Nicolas Williams 2021-08-25 16:48:10 -05:00
  • edf259dac9 asn1: Update comment in rfc2459.asn1 Nicolas Williams 2021-08-25 15:42:24 -05:00
  • 75449e1071 gss: Fix build for GSS preauth helpers Nicolas Williams 2021-08-25 15:41:35 -05:00
  • 76624dd4eb krb5: export krb5_set_log_dest() Luke Howard 2021-08-17 12:42:43 +10:00
  • b3511c145c gss: check for NULL before calling dlclose() Luke Howard 2021-08-19 10:39:58 +00:00
  • a56c3ad819 krb5: fix prototype in pa_gss_finish() Luke Howard 2021-08-18 08:17:04 +10:00
  • 1cdc9d5f3c krb5: export krb5_init_creds_step() Luke Howard 2021-08-16 22:41:52 +10:00
  • 576ce5d663 kdc: remove unused label in _kdc_gss_mk_pa_reply() Luke Howard 2021-08-15 20:55:31 +10:00
  • 5fb3cc998e kdc: check gcp != NULL Luke Howard 2021-08-15 16:29:21 +10:00
  • 386b8d328a kdc: refactor/improve error handling in GSS pa Luke Howard 2021-08-15 16:06:08 +10:00
  • a2538aeb38 kdc: fix leak in previous commit Luke Howard 2021-08-15 15:51:05 +10:00
  • df9e74b292 kdc: allow GSS error tokens in PA reply Luke Howard 2021-08-15 15:39:58 +10:00
  • 432fe0ad56 krb5: treat KRB5_NT_SRV_HST and KRB5_NT_SRV_INST identically Luke Howard 2021-08-15 15:03:19 +10:00
  • 95d553e009 krb5: improve krb5 to GSS name conversion Luke Howard 2021-08-15 14:47:11 +10:00
  • 939cdbe4ad krb5: always canonicalize GSS federated name Luke Howard 2021-08-15 13:50:21 +10:00
  • e840681451 krb5: try GSS_KRB5_NT_PRINCIPAL_NAME first for PA Luke Howard 2021-08-15 09:36:35 +10:00
  • f73f08eef1 kdc: ensure GSS-API pre-auth acceptor name is TGS Luke Howard 2021-08-15 09:12:13 +10:00
  • b8112ac562 hx509: Build libhx509template and hxtool with it Nicolas Williams 2021-07-12 17:01:06 -05:00
  • df4b09f8af asn1: Also pretty-print cert policies Nicolas Williams 2021-08-09 11:15:41 -05:00
  • 7db298668b kdc: fix pa_gss_authorize_cb calling convention Luke Howard 2021-08-12 18:13:45 +10:00
  • 95339c1068 gss: fix Windows preauth build issues Luke Howard 2021-08-12 18:09:40 +10:00
  • 3302b38e53 gss: fix Windows preauth build issues Luke Howard 2021-08-12 17:57:17 +10:00
  • 49f3f5bd99 kdc: support for GSS-API pre-authentication Luke Howard 2021-07-29 12:56:10 +10:00
  • 15c82996a4 windows: add /td sha256 argument to signtool Luke Howard 2021-08-12 15:50:22 +10:00
  • 6e3bc8341c doc: make intermediate Windows help directory Luke Howard 2021-08-12 15:49:04 +10:00
  • 89ff0eb462 asn1: ensure template generator includes ASN1CALL Luke Howard 2021-08-12 15:48:03 +10:00
  • 3a9e7346cc gss: cast HEIM_ERR_EOF to OM_uint32 before check (2) Luke Howard 2021-08-12 09:20:22 +10:00
  • 3f4d894dd3 gss: cast HEIM_ERR_EOF to OM_uint32 before check Luke Howard 2021-08-12 09:18:22 +10:00
  • 2f4619fbbd cf: check for undefined variables Luke Howard 2021-08-11 23:31:38 +10:00
  • 1175fa0435 gss: don't include mech_locl.h in spnego Luke Howard 2021-08-11 19:11:38 +10:00
  • 0c74bec235 krb5: pass realm to _krb5_make_fast_ap_fxarmor() Luke Howard 2021-08-11 19:05:19 +10:00
  • ab3d52e1a2 base: use correct calling convention for log_file() Luke Howard 2021-08-11 18:53:06 +10:00
  • b216697924 kdc: use anonymous, not empty, cname when hiding Luke Howard 2021-08-11 12:20:52 +10:00
  • b510b90239 krb5: export krb5_time_abs for test_time Luke Howard 2021-08-10 20:47:44 +10:00
  • a27a3af0c2 gss: store_spnego_context(): remove redundant overflow check Luke Howard 2021-08-10 20:11:35 +10:00
  • d34700b4d9 krb5: add extra sanity check in pk_verify_sign() Luke Howard 2021-08-10 16:24:49 +10:00
  • ef1d63a997 kinit: add --pk-anon-fast-armor option Luke Howard 2021-08-05 22:07:47 +10:00
  • 43858eaf9b gss: add oid/buffer storage helpers to mechglue Luke Howard 2021-08-10 10:15:08 +10:00
  • 490173b417 gss: free exported context buffer after use in store_negoex_auth_mech() Luke Howard 2021-08-10 09:02:20 +10:00
  • c953bc5e79 krb5: reintroduce deprecated krb5_addlog_func() Luke Howard 2021-08-09 23:27:22 +10:00
  • d5b6869dc7 Allow KDC to always return the salt in the PA-ETYPE-INFO[2] Andrew Bartlett 2021-06-23 14:02:38 +12:00
  • f538f0e5c2 krb5: use new krb5_time_abs() function Luke Howard 2021-08-09 14:48:04 +10:00
  • 57a1a66348 krb5: default to client realm in _krb5_get_krbtgt Luke Howard 2021-08-09 14:45:12 +10:00
  • 8a4ce9950f krb5: add krb5_time_abs() function Luke Howard 2021-08-09 14:44:16 +10:00
  • 3587b8c08c Allow _gss_string_to_oid() without HAVE_DLOPEN Andrew Bartlett 2021-08-09 11:45:53 +12:00
  • ab8d4f508e roken: fix dependency typo - s/vin_h/vis_h/ Luke Howard 2021-08-08 19:54:25 +10:00
  • f86fccb344 gss: add split token test to check-negoex Luke Howard 2021-08-08 18:15:31 +10:00
  • 06232dfcce gss: fix import/export of accumulating contexts Luke Howard 2021-08-08 14:45:13 +10:00
  • 3b1f9f0a3f gss: error out in test_context if unknown OID Luke Howard 2021-08-08 13:45:03 +10:00
  • 18c18d84b1 gss: merge gss_name_to_oid and gss_mg_name_to_oid Luke Howard 2021-08-08 11:28:32 +10:00
  • 5966c00701 gss: add gss_mg_name_to_oid internal API Luke Howard 2021-08-08 10:34:28 +10:00
  • 65651c8106 krb5: mask should be uint64_t, not size_t Luke Howard 2021-08-07 19:25:02 +10:00
  • 9d16808515 krb5: mask integers to avoid unnecessary expansion Luke Howard 2021-08-07 19:17:55 +10:00
  • 6554dc69b0 gss: allow partial accept context export in SPNEGO Luke Howard 2021-08-05 07:57:40 +10:00
  • fe426f7a28 fix type s/MUTAL/MUTUAL/ in gssapi/krb5 Roland C. Dowdeswell 2021-08-04 22:09:18 +01:00
  • 3a6229f64a gss_accept_sec_context: support reassembling split tokens. Roland C. Dowdeswell 2021-08-02 22:55:47 +01:00
  • 80f3194a76 gssapi/krb5/{export,import}_sec_context: make smaller tokens. Roland C. Dowdeswell 2021-08-02 22:55:40 +01:00
  • a2cfd2a25c gssapi/krb5/{export,import}_sec_context: fix for init_sec_ctx Roland C. Dowdeswell 2021-08-02 22:55:33 +01:00
  • 81a8b5069e krb5_storage: add a packed integer type as an endian. Roland C. Dowdeswell 2021-08-02 22:55:25 +01:00
  • 6ccb21827b gss-token: initialise input buffer to empty Roland C. Dowdeswell 2021-08-03 21:10:42 +01:00
  • 0cb54fa69e kdc: fix typo in moduli file loading error message Robbie Harwood 2021-08-06 13:03:25 -04:00
  • 7188969371 krb5: add krb5_store_bytes() Luke Howard 2021-08-06 19:32:10 +10:00
  • 4e359bd5ce krb5: add krb5_store_datalen() Luke Howard 2021-08-06 19:21:12 +10:00
  • 8330e45444 gss: set GSS_C_CHANNEL_BOUND_FLAG for SAnon Luke Howard 2021-08-06 13:21:07 +10:00
  • d83321fdf3 Add channel-bindings tests Isaac Boukris 2020-05-17 23:47:46 +02:00
  • f84a98bd5f Add client_aware_channel_bindings option Isaac Boukris 2020-05-17 18:27:41 +02:00
  • a4527a28a3 Implement KERB_AP_OPTIONS_CBT (server side) Isaac Boukris 2020-04-21 20:12:21 +02:00
  • 51ce4c8d15 gssapi: add channel-bound return flag Isaac Boukris 2020-04-21 19:14:26 +02:00
  • 33fccb8bbe heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account is locked out Andrew Bartlett 2021-06-30 21:57:28 +12:00
  • f03983b64d HEIMDAL: Require armor_server to be a krbtgt name, not just a server name Andrew Bartlett 2021-06-08 14:59:09 +12:00
  • 61f1be93e3 kdc: Provide flag to hint to KDC that this is a FAST key lookup Andrew Bartlett 2018-09-20 16:36:18 -07:00
  • 5ba7f270eb kdc: return revoked error if principal locked out Luke Howard 2021-08-06 12:33:13 +10:00
  • 75829cad18 Avoid -Werror=strict-overflow on in rk_dns_srv_order() Andrew Bartlett 2021-07-06 13:10:16 +12:00
  • 034bc1649d gss: avoid overflow in gss_inquire_cred() Luke Howard 2021-08-06 12:22:09 +10:00
  • 5a56198161 hdb: fix leaks in alias handling Luke Howard 2021-08-05 16:05:45 +10:00
  • 510ee92c11 gss: treat empty cred store as GSS_C_NO_CRED_STORE Luke Howard 2021-08-05 15:46:12 +10:00
  • 3604497fda kdc: zero KDCFastState padata before free Luke Howard 2021-08-04 17:41:01 +10:00
  • 04e3ea4307 kdc: don't leak FAST req_body checksum buffer Luke Howard 2021-08-03 17:20:21 +10:00
  • d672e49231 gss: don't leak NTLM cred on failure Luke Howard 2021-08-02 17:09:09 +10:00
  • 73224fef5a gss: zero spnego mechanism token error buffer Luke Howard 2021-08-02 15:54:38 +10:00
  • 33cc416e36 hx509: don't leak context default_trust_anchors Luke Howard 2021-08-02 15:12:52 +10:00
  • 221c295d5d gss: honor GM_USE_MG_NAME in gss_accept_sec_context() Luke Howard 2021-08-01 21:41:03 +10:00
  • b8728cae14 asn1: GSER is RFC3641, not RFC2641 Luke Howard 2021-07-09 20:04:56 +10:00
  • f72627c3f0 gss: make IS_DCE_STYLE an inline function Luke Howard 2021-07-08 00:00:44 +10:00
  • 0dd1900308 gss: fix regression in rc4-hmac krb5 DCE unwrap Luke Howard 2021-07-07 23:51:06 +10:00
  • c6df77a2cb Initialise err in hdb_create() Andrew Bartlett 2021-06-30 16:12:07 +12:00