af60336dcb
make the aes and sha1 checksum types match draft-ietf-krb-wg-crypto-05
Love Hörnquist Åstrand
2003-06-22 03:34:47 +00:00
e6d88d56dc
x
Love Hörnquist Åstrand
2003-06-21 22:31:57 +00:00
b5984d2675
(v5_convert): rename one of the two c to cred4
Love Hörnquist Åstrand
2003-06-21 22:31:09 +00:00
d58be4c531
x
Love Hörnquist Åstrand
2003-06-21 05:46:44 +00:00
de13634e69
add a test for aes kcrypto encrypted data
Love Hörnquist Åstrand
2003-06-21 05:45:52 +00:00
edd4885b10
clean up AES code to use a structure instead of a key array (_krb5_AES_string_to_default_iterator): set to 4096 as described in aes draft -04 (derive_key): always remove the key->schedule since its will contain the wrong (parent key) info
Love Hörnquist Åstrand
2003-06-21 05:41:55 +00:00
7d2d92fb04
add aes256 test vectors from Ken Raeburn
Love Hörnquist Åstrand
2003-06-18 21:42:44 +00:00
0ab40473f3
add more kdc's to the example
Love Hörnquist Åstrand
2003-06-18 03:17:03 +00:00
c36bc39594
use int2HDBFlags/HDBFlags2int From: Alberto Patino <jalbertop@aranea.com.mx>, Luke Howard <lukeh@PADL.COM> Pointed out by Andrew Bartlett of Samba
Love Hörnquist Åstrand
2003-06-17 12:53:16 +00:00
72879d5be6
x
Love Hörnquist Åstrand
2003-06-17 04:37:20 +00:00
b981c8861d
remove freebsd comment, don't use debug pthread stubs by default
Love Hörnquist Åstrand
2003-06-17 04:36:12 +00:00
efeea68d77
(man_MANS): drop krb5_free_addresses.3
Love Hörnquist Åstrand
2003-06-17 04:24:32 +00:00
27ad8297dc
all this is documented in krb5_address.3
Love Hörnquist Åstrand
2003-06-17 04:23:17 +00:00
58f2cf9375
add krb5_{de,en}code_ETYPE_INFO2
Love Hörnquist Åstrand
2003-06-17 04:21:23 +00:00
4644344231
add _krb5_AES_string_to_default_iterator add krb5_string_to_key_salt_opaque() fix keylengh for keytype_aes256
Love Hörnquist Åstrand
2003-06-17 04:20:18 +00:00
04ed8c312b
x
Love Hörnquist Åstrand
2003-06-17 04:10:04 +00:00
5b4a741593
reorder code so sequence numbers can can be used
Love Hörnquist Åstrand
2003-06-17 04:08:20 +00:00
d4114c6097
remove unused function, indent, add gssapi_msg_order_f that filter gss flags to gss_msg_order flags
Love Hörnquist Åstrand
2003-06-17 04:05:13 +00:00
9c54d3fe2d
add sequence number verifier
Love Hörnquist Åstrand
2003-06-17 04:01:44 +00:00
289d0b0f9b
prototypes for gssapi_{encode_om_uint32,decode_om_uint32} add sequence number verifier prototypes
Love Hörnquist Åstrand
2003-06-17 04:00:58 +00:00
d31ef7cb79
destroy sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:59:28 +00:00
532c716e88
remember to free data use sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:58:43 +00:00
090bb1f54b
don't clear output_token twice remember to free data use sequence number verifier
Love Hörnquist Åstrand
2003-06-17 03:57:49 +00:00
25fd1be6bc
export and rename encode_om_uint32/decode_om_uint32 and start to use them
Love Hörnquist Åstrand
2003-06-17 03:49:26 +00:00
5fcd007d78
x
Love Hörnquist Åstrand
2003-06-14 19:51:08 +00:00
371bd41866
prefix glob symbols with rk_
Love Hörnquist Åstrand
2003-06-14 19:49:49 +00:00
573d4b592b
x
Johan Danielsson
2003-06-13 12:08:27 +00:00
bc6e02716a
(gss_adat): fix name allocation bug
Johan Danielsson
2003-06-13 12:08:21 +00:00
52e18010ee
x
Johan Danielsson
2003-06-09 12:28:55 +00:00
6095e1876b
can't have sequence.c in two different places
Johan Danielsson
2003-06-09 12:28:40 +00:00
dce2ccba07
x
Love Hörnquist Åstrand
2003-06-06 16:13:57 +00:00
83d5b4e6b7
x
Love Hörnquist Åstrand
2003-06-06 16:05:49 +00:00
04f964bbdb
Point out that slave needs /var/heimdal directory and masterkey From: Mans Nilsson <mansaxel@sunet.se>
Love Hörnquist Åstrand
2003-06-06 15:43:33 +00:00
93d56af0ae
(sub_wrap_size): gss_wrap_size_limit() has req_output_size and max_input_size around the wrong way -- it returns the output token size for a given input size, rather than the maximum input size for a given output token size.
Love Hörnquist Åstrand
2003-06-05 23:09:13 +00:00
a250f3a1da
x
Love Hörnquist Åstrand
2003-06-05 20:57:06 +00:00
8084f0f69c
add prototypes for sequence.c
Love Hörnquist Åstrand
2003-06-05 20:56:38 +00:00
f24cb76b05
sequence number checks, order and replay
Love Hörnquist Åstrand
2003-06-05 20:40:50 +00:00
63b7fe118d
(gss_accept_sec_context): make sure time is returned in seconds from now, not in kerberos time
Love Hörnquist Åstrand
2003-06-03 15:25:41 +00:00
a704e2f3f4
(gss_aquire_cred): make sure time is returned in seconds from now, not in kerberos time
Love Hörnquist Åstrand
2003-06-03 15:24:29 +00:00
f6870509a7
(init_auth): if the cred is expired before we tries to create a token, fail so the peer doesn't need reject us (*): make sure time is returned in seconds from now, not in kerberos time (repl_mutual): remember to unlock the context mutex
Love Hörnquist Åstrand
2003-06-03 15:22:58 +00:00
eb49552f69
Fix unlock/destroy macros for the non-threaded cases to work. Fix typo.
Assar Westerlund
2003-05-28 20:13:36 +00:00
3301945901
x
Johan Danielsson
2003-05-27 22:00:03 +00:00
5ce268bf83
Fix encoding of "unsigned" integers. If MSB is set, we need to pad with a zero byte.
Johan Danielsson
2003-05-27 21:59:52 +00:00
ca77d81243
some more mdoc fixes
Love Hörnquist Åstrand
2003-05-27 13:51:10 +00:00
9b1f44032a
x
Love Hörnquist Åstrand
2003-05-27 10:06:37 +00:00
cb73a5dde8
(LDAP__connect): bind sasl "EXTERNAL" to ldap connection (LDAP_store): remove superfluous argument to asprintf
Love Hörnquist Åstrand
2003-05-27 10:03:54 +00:00
68ba8507a5
revert previous
Love Hörnquist Åstrand
2003-05-26 21:59:54 +00:00
c17d918b00
remove again, not yet
Love Hörnquist Åstrand
2003-05-26 21:58:30 +00:00
cb584f6348
pacify mdoclink
Love Hörnquist Åstrand
2003-05-26 21:56:28 +00:00
ea7714fd49
x
Love Hörnquist Åstrand
2003-05-26 14:09:30 +00:00
0caadd8b18
pacify mdoclint
Love Hörnquist Åstrand
2003-05-26 14:09:04 +00:00
b74d060a00
document diffrences between mit and heimdal krb5_cc_gen_new ccache -> credential cache s/[\t ]+$//
Love Hörnquist Åstrand
2003-05-26 12:50:02 +00:00
7e9cb35e62
x
Love Hörnquist Åstrand
2003-05-21 18:11:50 +00:00
cd2de2c7a6
x
Love Hörnquist Åstrand
2003-05-21 16:36:06 +00:00
24ed2fa8bb
(gss_adat): remove poking inside the delegated handle, also fixes problem where to much memory was allocated
Love Hörnquist Åstrand
2003-05-21 15:05:49 +00:00
59c5cdf594
(gss_userok): remove poking inside the delegated handle
Love Hörnquist Åstrand
2003-05-21 15:04:27 +00:00
6ab45444b7
x
Love Hörnquist Åstrand
2003-05-21 14:52:47 +00:00
42f3fc029a
- do some basic locking (no reference counting so contexts can be removed while still used) - don't export gss_ctx_id_t_desc_struct and gss_cred_id_t_desc_struct - make sure all lifetime are returned in seconds left until expired, not in unix epoch
Love Hörnquist Åstrand
2003-05-21 14:52:14 +00:00
a626def4cd
document argument lifetime_rec to function gss_inquire_context
Love Hörnquist Åstrand
2003-05-21 14:47:55 +00:00
e6992a52e1
s/FROM KERBEROS5/FROM krb5
Love Hörnquist Åstrand
2003-05-21 13:43:28 +00:00
ee39ef2d2a
draft-ietf-krb-wg-kerberos-set-passwd-00.txt
Love Hörnquist Åstrand
2003-05-20 21:57:22 +00:00
5762de90e3
(typetype): sort
Love Hörnquist Åstrand
2003-05-20 18:45:43 +00:00
bd85856ef6
-= add parser/generate glue for UTF8String and NULL (DER primitive encode/decode functions missing) - handle parsing of DEFAULT and, ...
Love Hörnquist Åstrand
2003-05-20 18:42:10 +00:00
37502b25c3
fix errors found with mdoclint
Love Hörnquist Åstrand
2003-05-16 22:39:26 +00:00
aac29a35a4
x
Love Hörnquist Åstrand
2003-05-16 22:24:02 +00:00
ec8cfb3623
add missing argument to mutex_init
Love Hörnquist Åstrand
2003-05-16 22:23:48 +00:00
08b804844a
test gss_add_cred more then once
Love Hörnquist Åstrand
2003-05-16 22:23:16 +00:00
ae8c33299f
x
Love Hörnquist Åstrand
2003-05-16 20:45:23 +00:00
8b3ba5532c
protect the random initiator with a mutex
Love Hörnquist Åstrand
2003-05-16 20:44:55 +00:00
3064229aaf
protect the mcc_head with a mutex
Love Hörnquist Åstrand
2003-05-16 20:43:36 +00:00
2b842fe389
include heim_threads.h
Love Hörnquist Åstrand
2003-05-16 20:42:59 +00:00
cec7e2f443
wrapper macros for thread synchronization primitives
Love Hörnquist Åstrand
2003-05-16 20:41:46 +00:00
4f3bc07635
x
Love Hörnquist Åstrand
2003-05-15 18:54:35 +00:00
18cf43dc28
Add all Kerberos principal function to one manpage, add a few more principal function to it, remove old now dup manpages
Love Hörnquist Åstrand
2003-05-15 18:52:42 +00:00
0a03b3cf20
x
Love Hörnquist Åstrand
2003-05-15 15:11:53 +00:00
fa3611d0b1
(recv_conn): pass pointer to sockaddr, not pointer to pointer
Love Hörnquist Åstrand
2003-05-15 15:10:57 +00:00
e3fc3df5ad
(recv_conn): get sizeof of the sockaddr_storage, not the sockaddr pointer
Love Hörnquist Åstrand
2003-05-15 14:37:13 +00:00
26562bff74
x
Love Hörnquist Åstrand
2003-05-15 13:54:28 +00:00
91f5196857
(recv_conn): if getnameinfo failes, send error to client (and syslog)
Love Hörnquist Åstrand
2003-05-15 13:54:12 +00:00
5cff8a331b
x
Love Hörnquist Åstrand
2003-05-14 22:18:46 +00:00
f6df5674ea
sort sections, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:13:00 +00:00
617325e153
.Sh EXAMPLE -> .Sh EXAMPLES, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:11:04 +00:00
3eb988218b
.Sh EXAMPLE -> .Sh EXAMPLES, sort sections, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:10:28 +00:00
a515bf6f94
.Sh EXAMPLE -> .Sh EXAMPLES, mdoc fixes, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:09:16 +00:00
58023b2fd9
add .Os, from NetBSD
Love Hörnquist Åstrand
2003-05-14 22:07:51 +00:00
27a1cca3e5
sort sections, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:06:54 +00:00
30ea393f82
compatability -> compatibility, from netbsd
Love Hörnquist Åstrand
2003-05-14 22:03:20 +00:00
45b32a1abb
spelling, from netbsd
Love Hörnquist Åstrand
2003-05-14 21:56:40 +00:00