9999cdae9d
x
Love Hörnquist Åstrand
2003-07-19 10:12:02 +00:00
4759161b72
x
Love Hörnquist Åstrand
2003-07-19 09:58:50 +00:00
0d992fb664
add ftp_do_gss_bindings
Love Hörnquist Åstrand
2003-07-19 09:58:18 +00:00
2dfba1b25c
fix mdoc bug
Love Hörnquist Åstrand
2003-07-19 09:57:08 +00:00
3df6ae565f
document --no-gss-bindings
Love Hörnquist Åstrand
2003-07-19 09:54:27 +00:00
6e46d232bf
Optionally support gss bindings, client does it by default, server not. This is to make it work for clients behind NAT.
Love Hörnquist Åstrand
2003-07-19 09:51:15 +00:00
579b0037e6
(args): add gss-bindings (main): set ftp_do_gss_bindings to 1 to make client use them
Love Hörnquist Åstrand
2003-07-19 09:49:28 +00:00
5c9001d9a1
(args): add gss-bindings
Love Hörnquist Åstrand
2003-07-19 09:48:17 +00:00
295027f2e9
document --gss-bindings
Love Hörnquist Åstrand
2003-07-19 09:47:25 +00:00
0a0729dd08
add krb5_c_ functions
Love Hörnquist Åstrand
2003-07-19 09:17:15 +00:00
150ffb9adb
support passing in NULL as the cipher_state/ivec
Love Hörnquist Åstrand
2003-07-19 07:40:53 +00:00
0cfe6c3513
add test for krb5_c_encrypt_length and krb5_c_decrypt
Love Hörnquist Åstrand
2003-07-19 07:40:02 +00:00
fa8baf4a62
x
Love Hörnquist Åstrand
2003-07-19 07:35:36 +00:00
ea7327e39d
(wrapped_length/wrapped_length_derived): when calculating the length of the encrypted data, use the keyed checksum length if the enctype supports a keyed checksum. This only matter for aes, for all other enctypes the key and unkeyed checksum have the same length.
Love Hörnquist Åstrand
2003-07-19 07:34:12 +00:00
8c720307bc
krb5_c encryption glue
Love Hörnquist Åstrand
2003-07-19 06:52:54 +00:00
144d4010c3
first version of krb5_c encryption glue
Love Hörnquist Åstrand
2003-07-18 22:00:21 +00:00
d8b9601aae
x
Love Hörnquist Åstrand
2003-07-18 08:05:56 +00:00
c4bf55656b
update pointer to luke ldap documentation
Love Hörnquist Åstrand
2003-07-18 08:04:58 +00:00
41e7cd2af1
(hdb_create): check for dynamic backend after static to avoid warning from dynamic backend when using a known static backend
Love Hörnquist Åstrand
2003-07-18 08:03:07 +00:00
7bafce13ca
(LDAP_store): log what principal/dn failed
Love Hörnquist Åstrand
2003-07-17 22:45:12 +00:00
48ed204b65
x
Love Hörnquist Åstrand
2003-07-16 14:46:58 +00:00
dd752eed03
don't return value in void function
Love Hörnquist Åstrand
2003-07-16 14:46:46 +00:00
3f12b14e68
(krb5_compare_creds): if client is specified in the mcreds, check that too
Love Hörnquist Åstrand
2003-07-15 17:53:48 +00:00
99c86fa5f3
x
Love Hörnquist Åstrand
2003-07-15 14:06:39 +00:00
283630104a
prefix libasn1 types with heim_
Love Hörnquist Åstrand
2003-07-15 14:05:49 +00:00
939b444ca3
prefix typedef\'s and structs with heim_
Love Hörnquist Åstrand
2003-07-15 13:57:32 +00:00
72c26c7cce
x
Love Hörnquist Åstrand
2003-07-15 12:56:59 +00:00
801e3f9334
(do_afslog): is cell is unset, set it "<default cell>" for error printing
Love Hörnquist Åstrand
2003-07-15 12:56:00 +00:00
b48c005971
x
Love Hörnquist Åstrand
2003-07-15 12:40:04 +00:00
11f5550fe8
unconditionally set KRBTKFILE
Love Hörnquist Åstrand
2003-07-15 12:38:46 +00:00
294cccfdf3
avoid unnecessary setting of variable
Love Hörnquist Åstrand
2003-07-13 15:41:17 +00:00
6c76352a76
x
Love Hörnquist Åstrand
2003-07-11 15:41:52 +00:00
beca19cb05
AIX have broken res_nsearch() in 5.1 (5.0 also ?) so just don't use res_nsearch on AIX
Love Hörnquist Åstrand
2003-07-11 15:41:40 +00:00
4650161189
x
Love Hörnquist Åstrand
2003-07-06 23:43:37 +00:00
6afd02e701
XXX inline COMPILE since automake wont add it
Love Hörnquist Åstrand
2003-07-06 23:42:56 +00:00
431abedcbb
x
Love Hörnquist Åstrand
2003-07-06 23:37:35 +00:00
3026b3bd70
(verify_krb5): use krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:36:28 +00:00
1b0fb56912
(check_for_tgt): use krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:35:43 +00:00
64ac54bd79
(proto): use krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:33:13 +00:00
e00dc96279
(krb5_to4): use krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:31:49 +00:00
63711b92db
(init_tgs_req): in case of error, don't free in the req_body addresses since they where pass in by caller (find_cred): use krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:28:34 +00:00
91f5bdc308
document krb5_cc_clear_mcred
Love Hörnquist Åstrand
2003-07-06 23:24:59 +00:00
80b7b535a2
(krb5_cc_clear_mcred): new function, clear a krb5_creds to use with krb5_cc_retrieve_cred
Love Hörnquist Åstrand
2003-07-06 23:23:05 +00:00
a7fa272ee4
x
Love Hörnquist Åstrand
2003-07-03 13:38:42 +00:00
715020f048
Add probing from the server that the client is still there, also make the client check that the server is probing.
Love Hörnquist Åstrand
2003-07-03 13:36:09 +00:00
33222471b9
x
Love Hörnquist Åstrand
2003-07-02 17:52:38 +00:00
af5f43acee
x
Love Hörnquist Åstrand
2003-06-30 12:08:12 +00:00
a1a43053f6
(find_dynamic_method): if there isn't a prefix, don't load anything
Love Hörnquist Åstrand
2003-06-30 10:34:05 +00:00
271e76e634
x
Johan Danielsson
2003-06-29 18:51:51 +00:00
4a9b3f573a
* don't ever print sign for unsigned conversions * don't break when right justifying a number past the end of the buffer * handle zero precision and the value zero more correctly
Johan Danielsson
2003-06-29 18:51:30 +00:00
76192475cc
x
Love Hörnquist Åstrand
2003-06-29 12:11:25 +00:00
1efa899c5a
Dynamic backend loading, based on patch from Luke Howard <lukeh@PADL.COM>
Love Hörnquist Åstrand
2003-06-29 12:10:00 +00:00
c12e22c5ee
add struct hdb_so_method and HDB_INTERFACE_VERSION
Love Hörnquist Åstrand
2003-06-29 12:08:34 +00:00
310984c158
(krb5_mk_req_internal): when using arcfour-hmac-md5, use an unkeyed checksum (rsa-md5), since Microsoft calculates the keyed checksum with the subkey of the authenticator.
Love Hörnquist Åstrand
2003-06-28 21:05:12 +00:00
71635344e5
write out v4 credential caches with _krb5_krb_tf_setup
Love Hörnquist Åstrand
2003-06-28 21:02:36 +00:00
bd7246b6cb
add _krb5_krb_tf_setup
Love Hörnquist Åstrand
2003-06-28 20:59:59 +00:00
068acbc06a
(_krb5_krb_tf_setup): create/append v4 credential to a new krb4 ticket file
Love Hörnquist Åstrand
2003-06-28 20:56:41 +00:00
161f45a45d
x
Johan Danielsson
2003-06-27 15:41:23 +00:00
b6a7633851
put Nd argument in double quotes since it contains more than 9 words; from wiz
Johan Danielsson
2003-06-27 15:40:03 +00:00
89d6ba401a
x
Love Hörnquist Åstrand
2003-06-25 23:58:01 +00:00
3fef574a4e
(make_keys): add aes support
Love Hörnquist Åstrand
2003-06-25 23:56:58 +00:00
05881f3847
x
Love Hörnquist Åstrand
2003-06-25 23:36:46 +00:00
356775a1a0
fix off by one in the aes case, pointed out by Ken Raeburn
Love Hörnquist Åstrand
2003-06-25 23:36:17 +00:00
809afeb35f
add missing " within #if 0, from stefan sokoll <stefansokoll@yahoo.de>
Love Hörnquist Åstrand
2003-06-25 15:02:17 +00:00
e8f85cac18
x
Love Hörnquist Åstrand
2003-06-24 05:13:42 +00:00
5979907af6
improve krb5_set_real_time text
Love Hörnquist Åstrand
2003-06-24 05:12:43 +00:00
f6ef3a180e
improve comment for krb5_set_real_time
Love Hörnquist Åstrand
2003-06-24 05:09:42 +00:00
941db3c501
x
Johan Danielsson
2003-06-23 11:40:25 +00:00
c5b09ec10c
document -A
Johan Danielsson
2003-06-23 11:39:49 +00:00
7eb7222d36
add -A as an alias for --no-addresses
Johan Danielsson
2003-06-23 11:38:22 +00:00
4b37d153b9
(krb5_get_forwarded_creds): pass in a krb5_timestamp to krb5_us_timeofday
Love Hörnquist Åstrand
2003-06-22 20:49:49 +00:00
f02872a9c1
(krb5_mk_error): pass in a krb5_timestamp to krb5_us_timeofday
Love Hörnquist Åstrand
2003-06-22 20:47:14 +00:00
ca8c289837
(krb5_set_real_time): fix comment and make it work
Love Hörnquist Åstrand
2003-06-22 20:35:27 +00:00
9448a346db
implement krb5_set_real_time, used by SAMBA, requested by Luke Howard <lukeh@PADL.COM>
Love Hörnquist Åstrand
2003-06-22 20:26:47 +00:00
8aa0cd793c
x
Love Hörnquist Åstrand
2003-06-22 04:17:36 +00:00
af60336dcb
make the aes and sha1 checksum types match draft-ietf-krb-wg-crypto-05
Love Hörnquist Åstrand
2003-06-22 03:34:47 +00:00
e6d88d56dc
x
Love Hörnquist Åstrand
2003-06-21 22:31:57 +00:00
b5984d2675
(v5_convert): rename one of the two c to cred4
Love Hörnquist Åstrand
2003-06-21 22:31:09 +00:00
d58be4c531
x
Love Hörnquist Åstrand
2003-06-21 05:46:44 +00:00
de13634e69
add a test for aes kcrypto encrypted data
Love Hörnquist Åstrand
2003-06-21 05:45:52 +00:00
edd4885b10
clean up AES code to use a structure instead of a key array (_krb5_AES_string_to_default_iterator): set to 4096 as described in aes draft -04 (derive_key): always remove the key->schedule since its will contain the wrong (parent key) info
Love Hörnquist Åstrand
2003-06-21 05:41:55 +00:00
7d2d92fb04
add aes256 test vectors from Ken Raeburn
Love Hörnquist Åstrand
2003-06-18 21:42:44 +00:00
0ab40473f3
add more kdc's to the example
Love Hörnquist Åstrand
2003-06-18 03:17:03 +00:00
c36bc39594
use int2HDBFlags/HDBFlags2int From: Alberto Patino <jalbertop@aranea.com.mx>, Luke Howard <lukeh@PADL.COM> Pointed out by Andrew Bartlett of Samba
Love Hörnquist Åstrand
2003-06-17 12:53:16 +00:00
72879d5be6
x
Love Hörnquist Åstrand
2003-06-17 04:37:20 +00:00
b981c8861d
remove freebsd comment, don't use debug pthread stubs by default
Love Hörnquist Åstrand
2003-06-17 04:36:12 +00:00
efeea68d77
(man_MANS): drop krb5_free_addresses.3
Love Hörnquist Åstrand
2003-06-17 04:24:32 +00:00
27ad8297dc
all this is documented in krb5_address.3
Love Hörnquist Åstrand
2003-06-17 04:23:17 +00:00
58f2cf9375
add krb5_{de,en}code_ETYPE_INFO2
Love Hörnquist Åstrand
2003-06-17 04:21:23 +00:00
4644344231
add _krb5_AES_string_to_default_iterator add krb5_string_to_key_salt_opaque() fix keylengh for keytype_aes256
Love Hörnquist Åstrand
2003-06-17 04:20:18 +00:00
04ed8c312b
x
Love Hörnquist Åstrand
2003-06-17 04:10:04 +00:00
5b4a741593
reorder code so sequence numbers can can be used
Love Hörnquist Åstrand
2003-06-17 04:08:20 +00:00
d4114c6097
remove unused function, indent, add gssapi_msg_order_f that filter gss flags to gss_msg_order flags
Love Hörnquist Åstrand
2003-06-17 04:05:13 +00:00
9c54d3fe2d
add sequence number verifier
Love Hörnquist Åstrand
2003-06-17 04:01:44 +00:00
289d0b0f9b
prototypes for gssapi_{encode_om_uint32,decode_om_uint32} add sequence number verifier prototypes
Love Hörnquist Åstrand
2003-06-17 04:00:58 +00:00
d31ef7cb79
destroy sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:59:28 +00:00
532c716e88
remember to free data use sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:58:43 +00:00
090bb1f54b
don't clear output_token twice remember to free data use sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:57:49 +00:00
25fd1be6bc
export and rename encode_om_uint32/decode_om_uint32 and start to use them
Love Hörnquist Åstrand
2003-06-17 03:49:26 +00:00