Commit Graph

  • af60336dcb make the aes and sha1 checksum types match draft-ietf-krb-wg-crypto-05 Love Hörnquist Åstrand 2003-06-22 03:34:47 +00:00
  • e6d88d56dc x Love Hörnquist Åstrand 2003-06-21 22:31:57 +00:00
  • b5984d2675 (v5_convert): rename one of the two c to cred4 Love Hörnquist Åstrand 2003-06-21 22:31:09 +00:00
  • d58be4c531 x Love Hörnquist Åstrand 2003-06-21 05:46:44 +00:00
  • de13634e69 add a test for aes kcrypto encrypted data Love Hörnquist Åstrand 2003-06-21 05:45:52 +00:00
  • edd4885b10 clean up AES code to use a structure instead of a key array (_krb5_AES_string_to_default_iterator): set to 4096 as described in aes draft -04 (derive_key): always remove the key->schedule since its will contain the wrong (parent key) info Love Hörnquist Åstrand 2003-06-21 05:41:55 +00:00
  • 7d2d92fb04 add aes256 test vectors from Ken Raeburn Love Hörnquist Åstrand 2003-06-18 21:42:44 +00:00
  • 0ab40473f3 add more kdc's to the example Love Hörnquist Åstrand 2003-06-18 03:17:03 +00:00
  • c36bc39594 use int2HDBFlags/HDBFlags2int From: Alberto Patino <jalbertop@aranea.com.mx>, Luke Howard <lukeh@PADL.COM> Pointed out by Andrew Bartlett of Samba Love Hörnquist Åstrand 2003-06-17 12:53:16 +00:00
  • 72879d5be6 x Love Hörnquist Åstrand 2003-06-17 04:37:20 +00:00
  • b981c8861d remove freebsd comment, don't use debug pthread stubs by default Love Hörnquist Åstrand 2003-06-17 04:36:12 +00:00
  • efeea68d77 (man_MANS): drop krb5_free_addresses.3 Love Hörnquist Åstrand 2003-06-17 04:24:32 +00:00
  • 27ad8297dc all this is documented in krb5_address.3 Love Hörnquist Åstrand 2003-06-17 04:23:17 +00:00
  • 58f2cf9375 add krb5_{de,en}code_ETYPE_INFO2 Love Hörnquist Åstrand 2003-06-17 04:21:23 +00:00
  • 4644344231 add _krb5_AES_string_to_default_iterator add krb5_string_to_key_salt_opaque() fix keylengh for keytype_aes256 Love Hörnquist Åstrand 2003-06-17 04:20:18 +00:00
  • 04ed8c312b x Love Hörnquist Åstrand 2003-06-17 04:10:04 +00:00
  • 5b4a741593 reorder code so sequence numbers can can be used Love Hörnquist Åstrand 2003-06-17 04:08:20 +00:00
  • d4114c6097 remove unused function, indent, add gssapi_msg_order_f that filter gss flags to gss_msg_order flags Love Hörnquist Åstrand 2003-06-17 04:05:13 +00:00
  • 9c54d3fe2d add sequence number verifier Love Hörnquist Åstrand 2003-06-17 04:01:44 +00:00
  • 289d0b0f9b prototypes for gssapi_{encode_om_uint32,decode_om_uint32} add sequence number verifier prototypes Love Hörnquist Åstrand 2003-06-17 04:00:58 +00:00
  • d31ef7cb79 destroy sequence number verifier Love Hörnquist Åstrand 2003-06-17 03:59:28 +00:00
  • 532c716e88 remember to free data use sequence number verifier Love Hörnquist Åstrand 2003-06-17 03:58:43 +00:00
  • 090bb1f54b don't clear output_token twice remember to free data use sequence number verifier Love Hörnquist Åstrand 2003-06-17 03:57:49 +00:00
  • 25fd1be6bc export and rename encode_om_uint32/decode_om_uint32 and start to use them Love Hörnquist Åstrand 2003-06-17 03:49:26 +00:00
  • 5fcd007d78 x Love Hörnquist Åstrand 2003-06-14 19:51:08 +00:00
  • 371bd41866 prefix glob symbols with rk_ Love Hörnquist Åstrand 2003-06-14 19:49:49 +00:00
  • 573d4b592b x Johan Danielsson 2003-06-13 12:08:27 +00:00
  • bc6e02716a (gss_adat): fix name allocation bug Johan Danielsson 2003-06-13 12:08:21 +00:00
  • 52e18010ee x Johan Danielsson 2003-06-09 12:28:55 +00:00
  • 6095e1876b can't have sequence.c in two different places Johan Danielsson 2003-06-09 12:28:40 +00:00
  • e393de2f14 check rollover, print summery Love Hörnquist Åstrand 2003-06-06 19:41:16 +00:00
  • dce2ccba07 x Love Hörnquist Åstrand 2003-06-06 16:13:57 +00:00
  • 83d5b4e6b7 x Love Hörnquist Åstrand 2003-06-06 16:05:49 +00:00
  • 04f964bbdb Point out that slave needs /var/heimdal directory and masterkey From: Mans Nilsson <mansaxel@sunet.se> Love Hörnquist Åstrand 2003-06-06 15:43:33 +00:00
  • 93d56af0ae (sub_wrap_size): gss_wrap_size_limit() has req_output_size and max_input_size around the wrong way -- it returns the output token size for a given input size, rather than the maximum input size for a given output token size. Love Hörnquist Åstrand 2003-06-05 23:09:13 +00:00
  • a250f3a1da x Love Hörnquist Åstrand 2003-06-05 20:57:06 +00:00
  • 8084f0f69c add prototypes for sequence.c Love Hörnquist Åstrand 2003-06-05 20:56:38 +00:00
  • c669a661db (libgssapi_la_SOURCES): add sequence.c (test_sequence): build Love Hörnquist Åstrand 2003-06-05 20:41:56 +00:00
  • f24cb76b05 sequence number checks, order and replay Love Hörnquist Åstrand 2003-06-05 20:40:50 +00:00
  • 63b7fe118d (gss_accept_sec_context): make sure time is returned in seconds from now, not in kerberos time Love Hörnquist Åstrand 2003-06-03 15:25:41 +00:00
  • a704e2f3f4 (gss_aquire_cred): make sure time is returned in seconds from now, not in kerberos time Love Hörnquist Åstrand 2003-06-03 15:24:29 +00:00
  • f6870509a7 (init_auth): if the cred is expired before we tries to create a token, fail so the peer doesn't need reject us (*): make sure time is returned in seconds from now, not in kerberos time (repl_mutual): remember to unlock the context mutex Love Hörnquist Åstrand 2003-06-03 15:22:58 +00:00
  • a2408d7675 (gss_context_time): remove unused variable Love Hörnquist Åstrand 2003-06-03 15:08:00 +00:00
  • ee6c2cbd71 make sure minor_status is always set, pointed out by Luke Howard <lukeh@PADL.COM> Love Hörnquist Åstrand 2003-06-03 14:58:51 +00:00
  • 12c0ce6a3b x Love Hörnquist Åstrand 2003-06-02 21:49:11 +00:00
  • b95d33b7a5 add manpage for: krb5_get_in_cred, krb5_get_in_tkt, krb5_get_in_tkt_with_keytab, krb5_get_in_tkt_with_password, krb5_get_in_tkt_with_skey Love Hörnquist Åstrand 2003-06-02 21:46:27 +00:00
  • 40c34b190f *** empty log message *** Assar Westerlund 2003-05-28 20:13:57 +00:00
  • eb49552f69 Fix unlock/destroy macros for the non-threaded cases to work. Fix typo. Assar Westerlund 2003-05-28 20:13:36 +00:00
  • 3301945901 x Johan Danielsson 2003-05-27 22:00:03 +00:00
  • 5ce268bf83 Fix encoding of "unsigned" integers. If MSB is set, we need to pad with a zero byte. Johan Danielsson 2003-05-27 21:59:52 +00:00
  • ca77d81243 some more mdoc fixes Love Hörnquist Åstrand 2003-05-27 13:51:10 +00:00
  • 9b1f44032a x Love Hörnquist Åstrand 2003-05-27 10:06:37 +00:00
  • cb73a5dde8 (LDAP__connect): bind sasl "EXTERNAL" to ldap connection (LDAP_store): remove superfluous argument to asprintf Love Hörnquist Åstrand 2003-05-27 10:03:54 +00:00
  • 68ba8507a5 revert previous Love Hörnquist Åstrand 2003-05-26 21:59:54 +00:00
  • c17d918b00 remove again, not yet Love Hörnquist Åstrand 2003-05-26 21:58:30 +00:00
  • cb584f6348 pacify mdoclink Love Hörnquist Åstrand 2003-05-26 21:56:28 +00:00
  • ea7714fd49 x Love Hörnquist Åstrand 2003-05-26 14:09:30 +00:00
  • 0caadd8b18 pacify mdoclint Love Hörnquist Åstrand 2003-05-26 14:09:04 +00:00
  • b74d060a00 document diffrences between mit and heimdal krb5_cc_gen_new ccache -> credential cache s/[\t ]+$// Love Hörnquist Åstrand 2003-05-26 12:50:02 +00:00
  • 7e9cb35e62 x Love Hörnquist Åstrand 2003-05-21 18:11:50 +00:00
  • cd2de2c7a6 x Love Hörnquist Åstrand 2003-05-21 16:36:06 +00:00
  • f4aad918ec *** empty log message *** Love Hörnquist Åstrand 2003-05-21 16:02:19 +00:00
  • d2db6a97db (proto): start to use gss_krb5_copy_ccache Love Hörnquist Åstrand 2003-05-21 15:16:14 +00:00
  • 74ede60132 (proto): comment out gss_ctx_id_t groveling for now Love Hörnquist Åstrand 2003-05-21 15:15:34 +00:00
  • 7e2042b4cf (gss_userok): release delegated cred handle Love Hörnquist Åstrand 2003-05-21 15:08:48 +00:00
  • 24ed2fa8bb (gss_adat): remove poking inside the delegated handle, also fixes problem where to much memory was allocated Love Hörnquist Åstrand 2003-05-21 15:05:49 +00:00
  • 59c5cdf594 (gss_userok): remove poking inside the delegated handle Love Hörnquist Åstrand 2003-05-21 15:04:27 +00:00
  • 6ab45444b7 x Love Hörnquist Åstrand 2003-05-21 14:52:47 +00:00
  • 42f3fc029a - do some basic locking (no reference counting so contexts can be removed while still used) - don't export gss_ctx_id_t_desc_struct and gss_cred_id_t_desc_struct - make sure all lifetime are returned in seconds left until expired, not in unix epoch Love Hörnquist Åstrand 2003-05-21 14:52:14 +00:00
  • a626def4cd document argument lifetime_rec to function gss_inquire_context Love Hörnquist Åstrand 2003-05-21 14:47:55 +00:00
  • e6992a52e1 s/FROM KERBEROS5/FROM krb5 Love Hörnquist Åstrand 2003-05-21 13:43:28 +00:00
  • b29a7e40a2 add missing structures uncomment CHOICE stantments Love Hörnquist Åstrand 2003-05-21 12:25:59 +00:00
  • ee39ef2d2a draft-ietf-krb-wg-kerberos-set-passwd-00.txt Love Hörnquist Åstrand 2003-05-20 21:57:22 +00:00
  • 5762de90e3 (typetype): sort Love Hörnquist Åstrand 2003-05-20 18:45:43 +00:00
  • bd85856ef6 -= add parser/generate glue for UTF8String and NULL (DER primitive encode/decode functions missing) - handle parsing of DEFAULT and, ... Love Hörnquist Åstrand 2003-05-20 18:42:10 +00:00
  • 37502b25c3 fix errors found with mdoclint Love Hörnquist Åstrand 2003-05-16 22:39:26 +00:00
  • aac29a35a4 x Love Hörnquist Åstrand 2003-05-16 22:24:02 +00:00
  • ec8cfb3623 add missing argument to mutex_init Love Hörnquist Åstrand 2003-05-16 22:23:48 +00:00
  • 08b804844a test gss_add_cred more then once Love Hörnquist Åstrand 2003-05-16 22:23:16 +00:00
  • ae8c33299f x Love Hörnquist Åstrand 2003-05-16 20:45:23 +00:00
  • 8b3ba5532c protect the random initiator with a mutex Love Hörnquist Åstrand 2003-05-16 20:44:55 +00:00
  • 3064229aaf protect the mcc_head with a mutex Love Hörnquist Åstrand 2003-05-16 20:43:36 +00:00
  • 2b842fe389 include heim_threads.h Love Hörnquist Åstrand 2003-05-16 20:42:59 +00:00
  • cec7e2f443 wrapper macros for thread synchronization primitives Love Hörnquist Åstrand 2003-05-16 20:41:46 +00:00
  • 4f3bc07635 x Love Hörnquist Åstrand 2003-05-15 18:54:35 +00:00
  • 18cf43dc28 Add all Kerberos principal function to one manpage, add a few more principal function to it, remove old now dup manpages Love Hörnquist Åstrand 2003-05-15 18:52:42 +00:00
  • 0a03b3cf20 x Love Hörnquist Åstrand 2003-05-15 15:11:53 +00:00
  • fa3611d0b1 (recv_conn): pass pointer to sockaddr, not pointer to pointer Love Hörnquist Åstrand 2003-05-15 15:10:57 +00:00
  • e3fc3df5ad (recv_conn): get sizeof of the sockaddr_storage, not the sockaddr pointer Love Hörnquist Åstrand 2003-05-15 14:37:13 +00:00
  • 26562bff74 x Love Hörnquist Åstrand 2003-05-15 13:54:28 +00:00
  • 91f5196857 (recv_conn): if getnameinfo failes, send error to client (and syslog) Love Hörnquist Åstrand 2003-05-15 13:54:12 +00:00
  • 5cff8a331b x Love Hörnquist Åstrand 2003-05-14 22:18:46 +00:00
  • f6df5674ea sort sections, from netbsd Love Hörnquist Åstrand 2003-05-14 22:13:00 +00:00
  • 617325e153 .Sh EXAMPLE -> .Sh EXAMPLES, from netbsd Love Hörnquist Åstrand 2003-05-14 22:11:04 +00:00
  • 3eb988218b .Sh EXAMPLE -> .Sh EXAMPLES, sort sections, from netbsd Love Hörnquist Åstrand 2003-05-14 22:10:28 +00:00
  • a515bf6f94 .Sh EXAMPLE -> .Sh EXAMPLES, mdoc fixes, from netbsd Love Hörnquist Åstrand 2003-05-14 22:09:16 +00:00
  • 58023b2fd9 add .Os, from NetBSD Love Hörnquist Åstrand 2003-05-14 22:07:51 +00:00
  • 27a1cca3e5 sort sections, from netbsd Love Hörnquist Åstrand 2003-05-14 22:06:54 +00:00
  • 30ea393f82 compatability -> compatibility, from netbsd Love Hörnquist Åstrand 2003-05-14 22:03:20 +00:00
  • 45b32a1abb spelling, from netbsd Love Hörnquist Åstrand 2003-05-14 21:56:40 +00:00