13ef94d8d7
(dns_find_realm): Fix const warnings, plug memory leak. From: Stefan Metzmacher <metze@samba.org>
Love Hörnquist Åstrand
2005-08-23 08:14:02 +00:00
d0fdf95591
Document what happens with NULL to krb5_config_free_strings (nothing). Mdoc nit.
Love Hörnquist Åstrand
2005-08-23 08:09:34 +00:00
c8426cf5e1
x
Love Hörnquist Åstrand
2005-08-22 20:18:46 +00:00
ded223d98f
(check_for_tgt): Re-order code so it only free the credential if one was returned.
Love Hörnquist Åstrand
2005-08-22 20:18:06 +00:00
683d9e9a7d
x
Love Hörnquist Åstrand
2005-08-22 19:17:01 +00:00
8c05794963
(dns_lookup_int): if we have res_ndestroy, prefeer that before res_nclose
Love Hörnquist Åstrand
2005-08-22 19:16:21 +00:00
4d4bf3ed94
Check for res_ndestroy.
Love Hörnquist Åstrand
2005-08-22 19:14:28 +00:00
6c2304642e
Add KRB5-PADATA-PK-AS-09-BINDING, client send this (with an empty pa-data.padata-value) to tell the KDC that the client support the binding the PA-REP to the AS-REQ packet. This is to fix the problem lack of binding the AS-REQ to the PK-AS-REP in pre PK-INIT-27. The nonce is replaced with a asCheckSum.
Love Hörnquist Åstrand
2005-08-22 19:09:25 +00:00
825cc1ee2a
Fix printing of size_t.
Love Hörnquist Åstrand
2005-08-22 14:05:20 +00:00
96ebe5947e
(hdb_seal_key_mkey): dont double encrypt keys
Love Hörnquist Åstrand
2005-08-19 13:07:06 +00:00
a186871617
provide locking for version entries
Love Hörnquist Åstrand
2005-08-19 13:07:05 +00:00
8822335041
only add krb5EncryptionType for already existing entries or heidmal entries
Love Hörnquist Åstrand
2005-08-19 13:07:04 +00:00
5d847fc33b
provide interface to find avaible databates
Love Hörnquist Åstrand
2005-08-19 13:07:03 +00:00
c373c7f04d
x
Love Hörnquist Åstrand
2005-08-15 11:07:40 +00:00
5731755053
Update prototype for _kdc_pk_mk_pa_reply.
Love Hörnquist Åstrand
2005-08-15 11:07:25 +00:00
3da5ed6a9a
x
Love Hörnquist Åstrand
2005-08-13 08:26:03 +00:00
d78bed5eaa
Save the request buffer so that pre-auth mechanism that needs it can verify the reply.
Love Hörnquist Åstrand
2005-08-13 08:25:32 +00:00
187a29664b
x
Love Hörnquist Åstrand
2005-08-12 13:43:57 +00:00
e890ac91be
Rename logf to avoid shadowing.
Love Hörnquist Åstrand
2005-08-12 13:43:46 +00:00
2d62579361
Rename optind to optidx to avoid shadowing.
Love Hörnquist Åstrand
2005-08-12 13:42:17 +00:00
99d1e51d5a
x
Love Hörnquist Åstrand
2005-08-12 13:32:28 +00:00
9e2b81fa10
Fix the version number for fcc-mit-ticketflags.
Love Hörnquist Åstrand
2005-08-12 13:32:11 +00:00
a20802f00e
Revert previous, I was confused.
Love Hörnquist Åstrand
2005-08-12 13:31:19 +00:00
44e8d45767
x
Love Hörnquist Åstrand
2005-08-12 10:16:39 +00:00
d79c64be70
Document fcc-mit-ticketflags in COMPATIBILITY section.
Love Hörnquist Åstrand
2005-08-12 10:16:28 +00:00
d48840959b
(fcc_store_cred): default to MIT style ticket flags.
Love Hörnquist Åstrand
2005-08-12 10:11:47 +00:00
aa0dc9b533
Switch over logging and comments to -27.
Love Hörnquist Åstrand
2005-08-12 09:21:40 +00:00
329cb0079e
Update prototype for krb5_create_checksum.
Love Hörnquist Åstrand
2005-08-12 09:01:22 +00:00
9c7e1cc84a
Make compile.
Love Hörnquist Åstrand
2005-08-12 08:58:10 +00:00
f7aeb827d3
Implement verification of asChecksum, now client side code is using -27 of the pk-init draft.
Love Hörnquist Åstrand
2005-08-12 08:53:00 +00:00
f03c6de773
update prototype for _kdc_as_rep
Love Hörnquist Åstrand
2005-08-12 08:46:39 +00:00
77d146c528
Pass down the request buffer to _kdc_as_rep().
Love Hörnquist Åstrand
2005-08-12 08:25:48 +00:00
fa2d2092a7
(_kdc_as_rep): Pass down the request buffer to _kdc_pk_mk_pa_reply.
Love Hörnquist Åstrand
2005-08-12 08:24:50 +00:00
d8b8b146cc
Fill in asChecksum, we now implements -27 in the KDC.
Love Hörnquist Åstrand
2005-08-12 08:17:13 +00:00
a28f99c821
x
Love Hörnquist Åstrand
2005-08-11 20:48:44 +00:00
abf82fc886
Remove structure that is never used (sneaked in the large TL_DATA patch).
Love Hörnquist Åstrand
2005-08-11 20:48:30 +00:00
1246a22076
Implement KADM5_LAST_PWD_CHANGE.
Love Hörnquist Åstrand
2005-08-11 20:43:43 +00:00
be4a48e5aa
Rename password-quality to verify-password-quality.
Love Hörnquist Åstrand
2005-08-11 20:41:30 +00:00
a76cd62f8b
Indent.
Love Hörnquist Åstrand
2005-08-11 20:33:57 +00:00
d333ca3000
x
Love Hörnquist Åstrand
2005-08-11 20:11:19 +00:00
8acefbf5a0
Update (c).
Love Hörnquist Åstrand
2005-08-11 17:12:13 +00:00
655b8bc34d
x
Love Hörnquist Åstrand
2005-08-11 15:28:36 +00:00
d1f924e1ac
x
Love Hörnquist Åstrand
2005-08-11 14:10:04 +00:00
432fc6a9b3
Add more options that was missing.
Love Hörnquist Åstrand
2005-08-11 14:09:38 +00:00
c118d0562a
Allocation is done on CONTEXT tags.
Love Hörnquist Åstrand
2005-08-11 14:07:21 +00:00
2a9eb0e77c
Use krb5_set_password instead of krb5_change_password.
Love Hörnquist Åstrand
2005-08-11 14:04:17 +00:00
bcca488212
x
Love Hörnquist Åstrand
2005-08-11 14:02:58 +00:00
1723574114
Add tests/Makefile and tests/db/Makefile.
Love Hörnquist Åstrand
2005-08-11 14:02:05 +00:00
5bda1a5590
test loading and dumping of the database
Love Hörnquist Åstrand
2005-08-11 13:59:59 +00:00
80eb20c8d3
New ASN.1 compiler
Love Hörnquist Åstrand
2005-08-11 13:58:02 +00:00
1a6b0f9b73
x
Love Hörnquist Åstrand
2005-08-11 13:55:34 +00:00
e478a72278
Avoid shadowing exp().
Love Hörnquist Åstrand
2005-08-11 13:53:24 +00:00
f2cd11a998
Parse extensions.
Love Hörnquist Åstrand
2005-08-11 13:52:26 +00:00
ea0c11825c
Include <hex.h>.
Love Hörnquist Åstrand
2005-08-11 13:49:08 +00:00
0de0d9727e
Extend struct field_name to have a subvalue and a extra_mask. Use that to implement printing of KADM5_TL_DATA options and fix a dependency bug (keys needed principal to print the salting).
Love Hörnquist Åstrand
2005-08-11 13:44:34 +00:00
496cd1f19a
x
Love Hörnquist Åstrand
2005-08-11 13:40:56 +00:00
75a6af0377
Set and clear password where appropriate.
Love Hörnquist Åstrand
2005-08-11 13:40:35 +00:00
0b99ddc9b2
Operation modifies tl_data.
Love Hörnquist Åstrand
2005-08-11 13:38:58 +00:00
4c01f36c26
(kadm5_log_replay_modify): Check return values of malloc(), replace all extensions.
Love Hörnquist Åstrand
2005-08-11 13:38:24 +00:00
8669df7f34
Make BAD_TL_TYPE error more helpful.
Love Hörnquist Åstrand
2005-08-11 13:31:42 +00:00
dad0c94ffe
Expose KADM5_TL_DATA options to the client.
Love Hörnquist Åstrand
2005-08-11 13:29:54 +00:00
eb232f60ee
Merge in KADM5_TL_DATA in the database.
Love Hörnquist Åstrand
2005-08-11 13:28:22 +00:00
753fb8e651
Operations modify extensions, mark that with TL_DATA.
Love Hörnquist Åstrand
2005-08-11 13:22:36 +00:00
a2dc9e2463
Add more TL types (password and extension).
Love Hörnquist Åstrand
2005-08-11 13:20:28 +00:00
1dd8eea802
Build extensions.
Love Hörnquist Åstrand
2005-08-11 13:18:53 +00:00
6a53664484
Print extensions.
Love Hörnquist Åstrand
2005-08-11 13:18:09 +00:00
bc0fb267bd
x
Love Hörnquist Åstrand
2005-08-10 08:41:19 +00:00
067af5ca8e
Expose the crypto operations on the master key.
Love Hörnquist Åstrand
2005-08-10 08:41:03 +00:00
4f3db39a0d
even more bits, not done yet
Love Hörnquist Åstrand
2005-08-10 07:03:54 +00:00
0e7425528b
x
Love Hörnquist Åstrand
2005-08-09 21:34:51 +00:00
e6cee493ed
(_kdc_as_rep): preserve the error code in the ENC-TS case. From: Andrew Bartlett <abartlet@samba.org>
Love Hörnquist Åstrand
2005-08-09 21:34:36 +00:00
07e7b59fab
(tgs_rep2): only needs to log "Failed to verify authenticator" once, its already done by tgs_check_authenticator().
Love Hörnquist Åstrand
2005-08-09 21:25:40 +00:00
d63614824b
Indent strings.
Love Hörnquist Åstrand
2005-08-09 21:18:09 +00:00
ee163963c6
(log_timestamp): avoid shadow warnings From: Andrew Bartlett <abartlet@samba.org>
Love Hörnquist Åstrand
2005-08-09 21:14:25 +00:00
a4b7d96497
Add krb5_verify_opt_alloc and krb5_verify_opt_free.
Love Hörnquist Åstrand
2005-08-09 16:32:38 +00:00
4e9c85d51c
Document krb5_verify_opt_alloc and krb5_verify_opt_free.
Love Hörnquist Åstrand
2005-08-09 16:29:31 +00:00
73b0fc1428
x
Love Hörnquist Åstrand
2005-08-09 09:31:52 +00:00
8443e8221a
(DB_open): catch errors from the d->open calls instead of letting them slip though to d->cursor. Bug repport from Andrew Bartlett <abartlet@samba.org>
Love Hörnquist Åstrand
2005-08-09 09:28:39 +00:00
235d18238c
x
Love Hörnquist Åstrand
2005-08-08 13:37:24 +00:00
cac19c86e7
Fix printing of /etc/issue{,.net}.
Love Hörnquist Åstrand
2005-08-08 13:37:04 +00:00
44c8c17c29
make writenet take const void * and size_t, abort if size it too large
Love Hörnquist Åstrand
2005-08-08 13:36:16 +00:00
33ec7be97f
Fix ansi c warning.
Love Hörnquist Åstrand
2005-08-08 13:35:39 +00:00
da3079056e
no need to typecast argument to writenet
Love Hörnquist Åstrand
2005-08-08 13:35:04 +00:00
671b1a284f
make writenet take const void * and size_t
Love Hörnquist Åstrand
2005-08-08 13:34:26 +00:00
efa4a809cb
x
Love Hörnquist Åstrand
2005-08-08 12:32:12 +00:00
9db7cfbc36
(do_login): only do krb4_get_afs_tokens if we have done v4 authentication or done a 5to4 conversion of tickets. This is to avoid delays on a realm that only support Kerberos 5 and drop Kerberos 4 requests.
Love Hörnquist Åstrand
2005-08-08 12:31:57 +00:00
6a76da5c65
x
Love Hörnquist Åstrand
2005-08-05 09:31:54 +00:00
dbdabdf1f9
sprinkel more const
Love Hörnquist Åstrand
2005-08-05 09:31:35 +00:00