b72a303e66
add various enctype related function here
Love Hörnquist Åstrand
2004-03-20 11:58:58 +00:00
32f34ae898
add krb5_cksumtype_valid krb5_cksumtype_valid
Love Hörnquist Åstrand
2004-03-20 11:43:10 +00:00
9e2d1ab3e1
real return values for krb5_{enctype,cksumtype}_valid
Love Hörnquist Åstrand
2004-03-20 11:41:14 +00:00
9585e0ae3c
add some functions and descriptions
Love Hörnquist Åstrand
2004-03-20 11:20:29 +00:00
63e65776e7
move out non krb5_c functions
Love Hörnquist Åstrand
2004-03-20 11:18:14 +00:00
2e96955fda
document krb5_auth_con_generatelocalsubkey
Love Hörnquist Åstrand
2004-03-20 11:09:51 +00:00
c4d325a9be
document krb5_krbhst_init_flags
Love Hörnquist Åstrand
2004-03-20 11:03:39 +00:00
94e9280b53
document krb5_kt_default_modify_name
Love Hörnquist Åstrand
2004-03-20 10:54:23 +00:00
ccf6692dfc
document krb5_add_et_list
Love Hörnquist Åstrand
2004-03-20 07:22:20 +00:00
db2202e310
document krb524_convert_creds_kdc, krb524_convert_creds_kdc_ccache
Love Hörnquist Åstrand
2004-03-20 07:20:07 +00:00
306532398c
document krb5_acl_match_*
Love Hörnquist Åstrand
2004-03-20 07:17:05 +00:00
0a03b1f94b
test unknown acl format specifier
Love Hörnquist Åstrand
2004-03-20 07:09:46 +00:00
5765269557
test generatic acl code
Love Hörnquist Åstrand
2004-03-20 07:06:48 +00:00
4b69fa3283
plug memory leak on file matching make it not fall over when no non matching acl make fnmatch matching useful by switching arguments
Love Hörnquist Åstrand
2004-03-20 07:05:46 +00:00
08d9c002c9
add --builtin-hdb command
Love Hörnquist Åstrand
2004-03-19 20:09:43 +00:00
525c7fe95d
(hdb_list_builtin): return a list of builtin backends
Love Hörnquist Åstrand
2004-03-19 20:08:28 +00:00
c5a4b17e45
x
Love Hörnquist Åstrand
2004-03-19 16:32:15 +00:00
f5e1c0e302
include Luke Howard of PADL.COM ldap hdb documentation
Love Hörnquist Åstrand
2004-03-19 16:32:07 +00:00
cb69d1b872
x
Love Hörnquist Åstrand
2004-03-19 15:07:15 +00:00
ec3cd13d0c
fix bugs in examples, add more restrictions, use example.com as an example. From: Pavel Ferdan <xferdan@informatics.muni.cz>
Love Hörnquist Åstrand
2004-03-19 15:06:30 +00:00
8177991133
x
Love Hörnquist Åstrand
2004-03-19 14:58:39 +00:00
2d09789c2f
add gss_krb5_get_tkt_flags
Love Hörnquist Åstrand
2004-03-19 14:58:29 +00:00
dc9d8165e6
add ticket_flags.c
Love Hörnquist Åstrand
2004-03-19 14:56:04 +00:00
043c5a4e67
Get ticket-flags from acceptor ticket From: Luke Howard <lukeh@PADL.COM>
Love Hörnquist Åstrand
2004-03-19 14:55:50 +00:00
b7036067de
document gss_krb5_get_tkt_flags
Love Hörnquist Åstrand
2004-03-19 14:54:26 +00:00
6a6c66ca2b
x
Love Hörnquist Åstrand
2004-03-18 15:20:50 +00:00
1c7bbef22a
x
Johan Danielsson
2004-03-18 07:22:54 +00:00
4385cd757d
add a bunch of Li and document [kadmin] password_lifetime; from Henry B. Hotz
Johan Danielsson
2004-03-18 07:22:44 +00:00
fadbd9dc4a
need to filter out if/else/endif too
Johan Danielsson
2004-03-16 16:30:00 +00:00
e5d57f4517
x
Love Hörnquist Åstrand
2004-03-15 18:20:21 +00:00
1aedcbce16
(krb5_destroy): free allocated memory, not something else
Love Hörnquist Åstrand
2004-03-15 18:19:01 +00:00
dd631f5292
x
Love Hörnquist Åstrand
2004-03-14 16:52:20 +00:00
a6e1755f25
(main): setpag if there is krb4 OR krb5 support
Love Hörnquist Åstrand
2004-03-14 16:50:13 +00:00
816f8ee982
x
Love Hörnquist Åstrand
2004-03-14 16:43:37 +00:00
b5cdf72e01
(gss_acquire_cred): check usage before even bothering to process it, add both keytab and initial tgt if requested
Love Hörnquist Åstrand
2004-03-14 16:42:39 +00:00
1e4a6015a7
support cfx, try to handle acceptor asserted subkey
Love Hörnquist Åstrand
2004-03-14 16:38:46 +00:00
f3dbe53b49
support cfx
Love Hörnquist Åstrand
2004-03-14 16:36:30 +00:00
73518e4282
handle changed signature of gssapi_msg_order_create
Love Hörnquist Åstrand
2004-03-14 16:33:00 +00:00
b521a2fb43
(krb5_mk_rep): if KRB5_AUTH_CONTEXT_USE_SUBKEY is set send subkey (generate if needed)
Love Hörnquist Åstrand
2004-03-14 16:16:58 +00:00
e3042fc389
add KRB5_AUTH_CONTEXT_USE_SUBKEY
Love Hörnquist Åstrand
2004-03-14 16:14:16 +00:00
2588cbdf67
enforce AcceptorSubkey
Love Hörnquist Åstrand
2004-03-14 16:11:59 +00:00
0fad3bb6c6
add dummy use_64 argument to gssapi_msg_order_create
Love Hörnquist Åstrand
2004-03-14 14:17:26 +00:00
1ad028847b
add partial support for CFX
Love Hörnquist Åstrand
2004-03-14 14:15:56 +00:00
b7f5b8d93a
(noinst_PROGRAMS) += test_cred
Love Hörnquist Åstrand
2004-03-14 13:49:33 +00:00
8fcc3f5f47
fix comment
Love Hörnquist Åstrand
2004-03-14 13:44:47 +00:00
ec4ebceca9
gssapi credential testing
Love Hörnquist Åstrand
2004-03-14 13:39:31 +00:00
ea42ef5261
clean up error handling, plug memory leaks, and free memory in error path, assume realloc(NULL, ...) works, factor out common code, indent
Love Hörnquist Åstrand
2004-03-14 12:38:48 +00:00
86731c301b
x
Love Hörnquist Åstrand
2004-03-12 09:00:37 +00:00
1e0d125761
understand [password_quality] spelling
Love Hörnquist Åstrand
2004-03-12 09:00:12 +00:00
bd31b8f01f
document --canonicalize
Love Hörnquist Åstrand
2004-03-12 07:34:04 +00:00
f6774ea083
add --canonicalize
Love Hörnquist Åstrand
2004-03-12 07:30:19 +00:00
1cb5134603
x
Love Hörnquist Åstrand
2004-03-10 13:31:44 +00:00
385e248573
x
Love Hörnquist Åstrand
2004-03-09 23:06:06 +00:00
82f29d3611
x
Love Hörnquist Åstrand
2004-03-09 22:38:53 +00:00
72ca40b845
add missing req argument to pk_mk_pa_reply
Love Hörnquist Åstrand
2004-03-09 22:34:18 +00:00
d263741bef
update prototype for pk_mk_pa_reply
Love Hörnquist Åstrand
2004-03-09 22:18:57 +00:00
dc86c0f0f9
(pk_mk_pa_reply): add hdb_entry
Love Hörnquist Åstrand
2004-03-09 22:16:40 +00:00
b92b16c0a7
x
Love Hörnquist Åstrand
2004-03-09 22:01:26 +00:00
b7907c6862
pass client hdb_entry to pk_check_client
Love Hörnquist Åstrand
2004-03-09 22:00:37 +00:00
9197bbb0c8
rename ca_dir to pkinit/x509_anchors since its more like that language in RFC3280
Love Hörnquist Åstrand
2004-03-09 21:06:10 +00:00
3036c59b11
x
Love Hörnquist Åstrand
2004-03-09 19:53:17 +00:00
ed64621d8e
document [libdefaults]fcc-mit-ticketflags=boolean
Love Hörnquist Åstrand
2004-03-09 19:48:53 +00:00
7df5fa555f
x
Love Hörnquist Åstrand
2004-03-09 17:40:25 +00:00
cd4be77fc7
(fcc_store_cred): use [libdefaults]fcc-mit-ticketflags=boolean to decide what format to write the fcc in. Default to mit version (aka heimdal 0.7)
Love Hörnquist Åstrand
2004-03-09 17:40:05 +00:00
a73db09513
add _krb5_store_creds_heimdal_0_7 and _krb5_store_creds_heimdal_pre_0_7 that store the creds in just that format make krb5_store_creds default to mit format
Love Hörnquist Åstrand
2004-03-09 17:34:59 +00:00
93039e0e86
x
Love Hörnquist Åstrand
2004-03-09 17:13:36 +00:00
9107f84073
(krb5_ret_creds): Runtime detect the what is the higher bits of the bitfield
Love Hörnquist Åstrand
2004-03-09 17:13:23 +00:00
52ca7f03b3
x
Love Hörnquist Åstrand
2004-03-08 19:30:46 +00:00
4ccc9ed53b
(krb5_store_creds): add disabled code that store the ticket flags in reverse order (bitswap32): new function
Love Hörnquist Åstrand
2004-03-08 19:27:42 +00:00
ac134c6bf0
(krb5_ret_creds): if the higher ticket flags are set, its a mit cache, reverse the bits, bug pointed out by Sergio Gelato <Sergio.Gelato@astro.su.se>
Love Hörnquist Åstrand
2004-03-08 18:49:12 +00:00
3fabe949fa
x
Love Hörnquist Åstrand
2004-03-07 23:15:08 +00:00
5eff423047
document password-quality
Love Hörnquist Åstrand
2004-03-07 23:14:02 +00:00
9023be3478
add prototype for password_quality
Love Hörnquist Åstrand
2004-03-07 23:09:15 +00:00
f955d60539
add password-quality/pwq command
Love Hörnquist Åstrand
2004-03-07 23:05:12 +00:00
511b038cd6
kadmin_SOURCES += pw_quality.c
Love Hörnquist Åstrand
2004-03-07 23:03:16 +00:00
cd5f65d118
test run the password quality function
Love Hörnquist Åstrand
2004-03-07 23:02:04 +00:00
1ac5cd4aa5
x
Love Hörnquist Åstrand
2004-03-07 22:44:49 +00:00
dd88e2f3fb
(kadm5_s_create_principal): remove old XXX command and related code, _kadm5_set_keys will do all this now
Love Hörnquist Åstrand
2004-03-07 22:43:46 +00:00
a0390fc0ee
drop structures for message formats, no longer used
Love Hörnquist Åstrand
2004-03-07 22:30:57 +00:00
44428fe1de
x
Love Hörnquist Åstrand
2004-03-07 22:27:31 +00:00
4f690bbc3d
x
Love Hörnquist Åstrand
2004-03-07 22:05:59 +00:00
2220d2a312
use macro for HDB * -> LDAP *
Love Hörnquist Åstrand
2004-03-07 22:04:39 +00:00
565649502f
x
Love Hörnquist Åstrand
2004-03-07 21:24:12 +00:00
5ca59aff01
when running kinit with a subprocess, fetch new tickets after half the tickets lifetime
Love Hörnquist Åstrand
2004-03-07 21:17:53 +00:00
103cb19803
spelling
Love Hörnquist Åstrand
2004-03-07 21:03:00 +00:00
12289e8b96
(default_etypes): avoid using disabled enctypes (set_etypes): avoid using disabled enctypes
Love Hörnquist Åstrand
2004-03-07 20:59:39 +00:00
75e129b9e4
framework for * Using LDAP to store the database:: * Using Samba LDAP password database::
Love Hörnquist Åstrand
2004-03-07 18:49:32 +00:00
2b2320a169
x
Love Hörnquist Åstrand
2004-03-07 17:41:15 +00:00
c5fd7d3102
Intergrate Heimdal's hdb-ldap and the Samba password database. From: Andrew Bartlett <abartlet@samba.org>
Love Hörnquist Åstrand
2004-03-07 17:38:48 +00:00
c617bcd29c
x
Love Hörnquist Åstrand
2004-03-07 17:25:30 +00:00
f1b20f9982
document new behavior
Love Hörnquist Åstrand
2004-03-07 17:24:58 +00:00
7a0e97dd31
even if kx failes, start anyway From: Harald Barth <haba@pdc.kth.se>
Love Hörnquist Åstrand
2004-03-07 17:22:06 +00:00
888ded8039
x
Love Hörnquist Åstrand
2004-03-07 17:11:14 +00:00
288ae5fc9a
add --disable-DES
Love Hörnquist Åstrand
2004-03-07 17:10:46 +00:00
c0e634f6c4
document --detach and --disable-DES
Love Hörnquist Åstrand
2004-03-07 17:10:14 +00:00
15af520f64
check if enctype is disabled before using it
Love Hörnquist Åstrand
2004-03-07 17:06:01 +00:00
49d345d693
add support for disabling checksum/encryption types
Love Hörnquist Åstrand
2004-03-07 17:04:59 +00:00