oysteikt/heimdal
0
0
Fork 0
Code Issues 4 Pull Requests Releases Activity

Commit Graph

  • 113cf794d6 x Love Hörnquist Åstrand 2003-11-06 01:34:19 +00:00
  • bb7c2ec23c checksum the header last in MIC token, update to -03 From: Luke Howard <lukeh@padl.com> Love Hörnquist Åstrand 2003-11-06 01:27:50 +00:00
  • 24bcc161e3 x Love Hörnquist Åstrand 2003-10-29 23:12:02 +00:00
  • c12de88181 x Johan Danielsson 2003-10-27 11:16:21 +00:00
  • 7448fcfe7c document capaths section Johan Danielsson 2003-10-27 11:14:55 +00:00
  • 5bfcbbf79b x Johan Danielsson 2003-10-22 18:48:54 +00:00
  • ed1bc5a928 make sure that the server realm and the krbtgt second component are identical; get rpath from the capaths section Johan Danielsson 2003-10-22 18:48:20 +00:00
  • 3cedc78b77 document recent changes Johan Danielsson 2003-10-22 18:45:56 +00:00
  • 1461770557 change logic for when to check transited policy to a tri-state model involving per principal flags (to be implemented) Johan Danielsson 2003-10-22 18:22:24 +00:00
  • 3ddd0c11e7 change enforce_transited_policy to a tri-state variable Johan Danielsson 2003-10-22 18:19:11 +00:00
  • da5f054d77 x Love Hörnquist Åstrand 2003-10-22 06:08:38 +00:00
  • 731fab1b47 (krb5_domain_x500_encode): always zero out encoding to make sure it have a defined value on failure Love Hörnquist Åstrand 2003-10-22 06:04:35 +00:00
  • 2e4e601571 x Love Hörnquist Åstrand 2003-10-21 23:08:50 +00:00
  • 4cd19e3fe3 (krb5_domain_x500_encode): if num_realms == 0, set encoding and return (avoids malloc(0)), check return value for malloc Love Hörnquist Åstrand 2003-10-21 23:06:50 +00:00
  • f052cd93b0 spelling, From: Tracy Di Marco White Love Hörnquist Åstrand 2003-10-21 21:34:32 +00:00
  • fbf5812618 x Johan Danielsson 2003-10-21 16:58:00 +00:00
  • fb3910cc5a (fix_transited_encoding): always print cross-realm information Johan Danielsson 2003-10-21 16:56:32 +00:00
  • ff498fb097 x Love Hörnquist Åstrand 2003-10-21 14:53:17 +00:00
  • d18d7cea84 (fix_transited_encoding): set transited type Love Hörnquist Åstrand 2003-10-21 14:53:02 +00:00
  • a49cebb033 fix capaths example Johan Danielsson 2003-10-21 13:32:45 +00:00
  • d3c94dd68e ize->ise Johan Danielsson 2003-10-21 13:27:48 +00:00
  • da0880581b [capaths] section Johan Danielsson 2003-10-21 11:59:16 +00:00
  • f56c8320eb x Johan Danielsson 2003-10-21 11:57:37 +00:00
  • 74f0967ff7 document enforce-transited-policy Johan Danielsson 2003-10-21 11:22:52 +00:00
  • 357e4592b9 always check transited policy if flag set either globally or on principal Johan Danielsson 2003-10-21 11:16:43 +00:00
  • 8505970b33 add flag to always check transited policy Johan Danielsson 2003-10-21 11:10:44 +00:00
  • cf7d2c2fb1 add flag to enforce transited policy Johan Danielsson 2003-10-21 11:09:59 +00:00
  • ca242c590b x Love Hörnquist Åstrand 2003-10-21 10:16:59 +00:00
  • b446b9833f (krb5_domain_x500_decode): set *num_realms to zero not num_realms Love Hörnquist Åstrand 2003-10-21 10:16:39 +00:00
  • d4a13c5877 x Love Hörnquist Åstrand 2003-10-21 08:04:13 +00:00
  • 378fc043da add --no-transit-check Love Hörnquist Åstrand 2003-10-21 08:03:36 +00:00
  • ef9f43076b x Love Hörnquist Åstrand 2003-10-21 06:24:58 +00:00
  • 1193f2ca59 describe Transit policy Love Hörnquist Åstrand 2003-10-21 06:21:03 +00:00
  • ae0a37f393 x Johan Danielsson 2003-10-20 16:45:38 +00:00
  • 5d138af639 (fix_transited_encoding): also verify with policy, unless asked not to Johan Danielsson 2003-10-20 16:45:28 +00:00
  • 88e4f61f85 (krb5_decrypt_ticket): try to verify transited realms, unless the transited-policy-checked flag is set Johan Danielsson 2003-10-20 16:43:30 +00:00
  • df034198d5 (krb5_domain_x500_decode): handle zero length tr data; (krb5_check_transited): new function that does more useful stuff Johan Danielsson 2003-10-20 16:41:27 +00:00
  • e7a40f2d44 get capath info from [capaths] section Johan Danielsson 2003-10-20 16:40:14 +00:00
  • 7bfff16231 krb5_princ_realm -> krb5_principal_get_realm Johan Danielsson 2003-10-20 16:38:53 +00:00
  • 744bd74233 krb5_princ_realm -> krb5_principal_get_realm Johan Danielsson 2003-10-20 16:14:02 +00:00
  • beba4ef8f9 x Johan Danielsson 2003-10-16 09:06:54 +00:00
  • 8ad04cfa43 Sleep forever waiting for lock. Previous method doesn't work well with a large number of clients accessing the cache at the same time, and there is no simple way to add a timeout to the lock. Johan Danielsson 2003-10-16 09:06:39 +00:00
  • 76e1e376c4 count IP v4/v6 requests now that my kdc supports v6 Love Hörnquist Åstrand 2003-10-14 15:25:34 +00:00
  • 175541b3c3 x Johan Danielsson 2003-10-14 12:32:54 +00:00
  • 3a36f7c6db mkstemp formats must end in exactly six X's Johan Danielsson 2003-10-14 12:32:39 +00:00
  • aa2d4b02ae get branch from CVS/Tag Johan Danielsson 2003-10-14 12:08:10 +00:00
  • 9c33463fd1 handle requests to forward non-forwardable ticket and HTTP requests Love Hörnquist Åstrand 2003-10-14 11:21:43 +00:00
  • dfbc07b034 instead of the cryptic "Request:" use "HTTP request:" Love Hörnquist Åstrand 2003-10-14 11:02:33 +00:00
  • 2ded4d8b29 x Love Hörnquist Åstrand 2003-10-13 14:21:14 +00:00
  • 29fbd6bdbd old pk-cross foo Johan Danielsson 2003-10-13 14:20:33 +00:00
  • 2aaa9a193e x Love Hörnquist Åstrand 2003-10-13 13:33:52 +00:00
  • 002f25a217 print the error value krb5_init_context failed with Love Hörnquist Åstrand 2003-10-13 13:33:40 +00:00
  • 45f0c7d705 x Love Hörnquist Åstrand 2003-10-13 13:21:16 +00:00
  • c5bd98ca49 (krb5_config_parse_file_debug): punt if there is binding before a section declaration. Bug found by Arkadiusz Miskiewicz <arekm@pld-linux.org> Love Hörnquist Åstrand 2003-10-13 13:20:46 +00:00
  • 3d11618b33 move automake options to configure.in, and depend on automake 1.7 Johan Danielsson 2003-10-13 13:14:48 +00:00
  • 2ba1b2759a x Johan Danielsson 2003-10-13 13:03:17 +00:00
  • 41d0b9d1bd (erase_file): revert a change in previous; if the ccache is a symlink, kdestroy should remove it Johan Danielsson 2003-10-13 13:03:12 +00:00
  • dcc546f00e x Johan Danielsson 2003-10-13 12:21:38 +00:00
  • 14bfec3d54 implement locking Johan Danielsson 2003-10-13 12:21:15 +00:00
  • 0cad850aac (print_tickets): bail out if krb5_cc_next_cred returns error other than KRB5_CC_END Johan Danielsson 2003-10-12 15:57:42 +00:00
  • a5cffb7aa7 x Johan Danielsson 2003-10-10 15:52:30 +00:00
  • 0ea5fcd9db (pop_init): change call to authentication function, from a ?: construct (which toubles some versions of gcc) to if; from Björn Grönvall Johan Danielsson 2003-10-10 15:52:18 +00:00
  • da037fa13e x Love Hörnquist Åstrand 2003-10-10 01:10:01 +00:00
  • d804698297 test program for verifying password quality function Love Hörnquist Åstrand 2003-10-10 01:09:10 +00:00
  • 56b5ee6031 x Love Hörnquist Åstrand 2003-10-07 07:49:03 +00:00
  • 0c7a5a4563 add some help function that is common between ENC_TS and SAM2 free the etype{,2}-infos on failure move the pa counter into krb5_get_init_creds_ctx Love Hörnquist Åstrand 2003-10-07 07:48:51 +00:00
  • e31cf630fd x Love Hörnquist Åstrand 2003-10-07 04:09:43 +00:00
  • 535b4f1e94 If its a MEMORY cc, make a copy. We need to do this since now gss_release_cred will destroy the cred. This should be really be solved a better way. Love Hörnquist Åstrand 2003-10-07 04:08:57 +00:00
  • 9b8678e016 x Love Hörnquist Åstrand 2003-10-07 01:02:14 +00:00
  • ced74c3564 (gss_release_cred): if its a mcc, destroy it rather the just release it Found by: "Zi-Bin Yang" <zbyang@decru.com> Love Hörnquist Åstrand 2003-10-07 00:51:46 +00:00
  • 7c51fd6e95 (acquire_initiator_cred): use kret instead of ret where appropriate Love Hörnquist Åstrand 2003-10-07 00:37:04 +00:00
  • d4baa1906c spelling Love Hörnquist Åstrand 2003-10-06 21:02:15 +00:00
  • ed4fb3aa84 x Love Hörnquist Åstrand 2003-10-06 20:47:15 +00:00
  • 0da0d41d6a (do_getticket): if times data is shorter then 8 byte, request is mailformed. Love Hörnquist Åstrand 2003-10-06 20:39:28 +00:00
  • 4ba454b93f (do_authenticate): if request length is less then 8, its a bad request and fail. Pointed out by Marco Foglia <marco@foglia.org> Love Hörnquist Åstrand 2003-10-06 20:22:07 +00:00
  • 911c773668 add flag --warn-mit-syntax that warns for mit syntax is used and just ignore the mit syntax when its used Love Hörnquist Åstrand 2003-10-06 19:27:35 +00:00
  • bae73d1a95 parse [kdc]use_2b and [gssapi] Love Hörnquist Åstrand 2003-10-06 19:15:04 +00:00
  • 309a5a11fb x Love Hörnquist Åstrand 2003-10-05 00:16:34 +00:00
  • 565b767d29 x Love Hörnquist Åstrand 2003-10-04 05:44:46 +00:00
  • b44cea4ef2 (str2time_t): allow whitespace between date and time From: Bob Beck <beck@cvs.openbsd.org> and adharw@yahoo.com Love Hörnquist Åstrand 2003-10-04 05:36:29 +00:00
  • 7d3afe0d9b let t and n match zero or more whitespaces Love Hörnquist Åstrand 2003-10-04 05:15:29 +00:00
  • 7a45372a17 x Love Hörnquist Åstrand 2003-10-04 00:30:34 +00:00
  • 2b0cf9b3eb add BOOLEAN Love Hörnquist Åstrand 2003-10-03 23:49:41 +00:00
  • 04daad6bca x Love Hörnquist Åstrand 2003-10-03 12:22:43 +00:00
  • f2fe7866d3 When running kinit in "fork mode" do pagsh independent of krb4, also always do krb4 setup of cc. Always try to destroy the v4 cc. Love Hörnquist Åstrand 2003-10-03 12:21:42 +00:00
  • cdeab003ac (check_for_tgt): set client as part of the pattern/match cred Love Hörnquist Åstrand 2003-10-03 12:18:44 +00:00
  • 803a7c3db6 (_krb5_krb_dest_tkt): unlink v4 token (get_krb4_cc_name): move out from _krb5_krb_tf_setup (_krb5_krb_tf_setup): adapt to allocated filename instead of static filename Love Hörnquist Åstrand 2003-10-03 12:03:03 +00:00
  • cbb6dc1b85 add _krb5_krb_dest_tkt and TKT_ROOT Love Hörnquist Åstrand 2003-10-03 12:01:47 +00:00
  • d5acb83777 (*) send PA_PAC_REQUEST when the user have requested either use PAC or not use PAC, if the option not set from the user, leave it up to the kdc to decide. (init_creds_loop): clear error string on success Love Hörnquist Åstrand 2003-10-03 11:53:48 +00:00
  • d341945ac0 add krb5_get_init_creds_opt_set_paq_request break out common part of extended opt functions to require_ext_opt Love Hörnquist Åstrand 2003-10-03 11:51:42 +00:00
  • 989e429cda add enum krb5_get_init_creds_req_pac and use it in struct _krb5_get_init_creds_opt_private Love Hörnquist Åstrand 2003-10-03 11:50:32 +00:00
  • 3af232862a (islocalrealm): exact match is also fine Love Hörnquist Åstrand 2003-10-03 11:16:09 +00:00
  • 11d8f82808 handle some more failure lines Love Hörnquist Åstrand 2003-10-03 10:28:52 +00:00
  • c32350eb60 some diffrences between Heimdal and MIT Kerberos in the API Love Hörnquist Åstrand 2003-10-03 05:00:50 +00:00
  • a358b88c42 document krb5_principal_{get,set}_type Love Hörnquist Åstrand 2003-10-03 04:58:00 +00:00
  • 5e2f96156f add krb5_principal_set_type Love Hörnquist Åstrand 2003-10-03 04:52:06 +00:00
  • b40d499bb7 add Setting up DNS Love Hörnquist Åstrand 2003-10-03 04:03:36 +00:00
  • 97d37d8057 (krb5_rd_req): always free keyblock since its alway used Love Hörnquist Åstrand 2003-10-03 00:39:21 +00:00
  • adaa1fb814 add SAM types and PAC_REQUEST Love Hörnquist Åstrand 2003-10-03 00:33:20 +00:00
  • e01dbe09dd add more preauth types, add PA-PAC-REQUEST Love Hörnquist Åstrand 2003-10-03 00:31:01 +00:00