-
19b6c47f72
Handle 1DES enctype similarity in MIT HDB
Nicolas Williams
2011-11-04 15:34:00 -05:00
-
8586d9f88e
Fix enctype selection issues for PAC and other authz-data signatures
Nicolas Williams
2011-11-08 19:54:45 -06:00
-
40a7d4b62f
More fixes for -Werror (GCC 4.6 catches more stuff)
Nicolas Williams
2011-11-02 23:18:55 -05:00
-
3bebbe5323
Fixes to make Heimdal -Wall -Werror clean
Nicolas Williams
2011-11-02 21:39:07 -05:00
-
9c830f5237
indent
Love Hörnquist Åstrand
2011-10-31 22:10:09 -07:00
-
877df213eb
make sure we don't use stack content, don't count on that unsigned value can be negative
Love Hörnquist Åstrand
2011-10-31 22:05:42 -07:00
-
2e2b5daf7a
send output to /dev/null
Love Hörnquist Åstrand
2011-10-31 21:27:51 -07:00
-
f3709535ea
make make rules silent
Love Hornquist Astrand
2011-10-31 09:49:56 -07:00
-
5835c81e6c
make the test tell what they do, disable LOCALDOMAIN tests
Love Hornquist Astrand
2011-10-31 09:06:10 -07:00
-
c353962428
Oops, mismerge in principal.c
Nicolas Williams
2011-10-31 00:29:36 -05:00
-
104bb8ef53
Fix unitialized HDB_extension problem (specifically the mandatory field)
Nicolas Williams
2011-10-31 00:20:05 -05:00
-
7da9d7d75f
Fix memory leak in name canon rule iterator
Nicolas Williams
2011-10-31 00:15:07 -05:00
-
c8f1a6f0a0
don't install hcrypto unless we build them
Love Hörnquist Åstrand
2011-10-30 19:51:59 -07:00
-
483afb3390
avoid compile warning
Love Hornquist Astrand
2011-10-29 19:14:14 -07:00
-
6436cd99b7
remove lex_classic_input(void) prototype
Love Hornquist Astrand
2011-10-29 19:13:04 -07:00
-
42e6fb794d
avoid const warning
Love Hornquist Astrand
2011-10-29 19:10:20 -07:00
-
1192120b86
Fix 64-bit warnings in name canon rules code
Nicolas Williams
2011-10-29 16:48:56 -05:00
-
1fe4d77846
remove getprogname.c
Love Hörnquist Åstrand
2011-10-28 20:36:40 -07:00
-
a57988153e
indent
Love Hörnquist Åstrand
2011-10-28 20:08:08 -07:00
-
f06e684ece
recover lost check-kdc.in
Love Hörnquist Åstrand
2011-10-28 20:03:20 -07:00
-
f1e7d2ccba
allow checksum type NULL since des3-cbc-null uses it (gss-api mech)
Love Hörnquist Åstrand
2011-10-28 19:54:02 -07:00
-
f0fb8b1bef
merge error
Love Hörnquist Åstrand
2011-10-28 19:34:35 -07:00
-
b4972bd4f0
no longer need getprogname()
Love Hörnquist Åstrand
2011-10-28 19:31:05 -07:00
-
3570802d59
use getprogname if we have, otherwise punt, remove roken dependency
Love Hörnquist Åstrand
2011-10-28 19:30:55 -07:00
-
1a1bd736c0
merge support for FAST in as-req codepath
Love Hörnquist Åstrand
2011-10-28 19:25:48 -07:00
-
-
3a393427e9
krb5_principal_compare() can't return errors...
Nicolas Williams
2011-10-27 22:57:02 -05:00
-
c433fefb23
Fix contributewd by Roland Dowdeswell for 64-bit bug in name canon patches
Nicolas Williams
2011-10-27 17:33:02 -05:00
-
0b6639dcce
Fix makefile bug for name canon testing
Nicolas Williams
2011-10-20 23:07:04 -05:00
-
612e5c2a12
Test name canon rules via GSS and put kdc tests last
Nicolas Williams
2011-10-20 22:56:46 -05:00
-
ce04492b36
Fix silly bug in krb5_get_credentials_with_flags()
Nicolas Williams
2011-10-20 19:14:09 -05:00
-
9c8ceada75
Fix test bug, add test of DNS resolver searchlist name canon rule
Nicolas Williams
2011-10-20 18:23:40 -05:00
-
8fde93e3fb
Initial name canon rules tests (just kgetcred)
Nicolas Williams
2011-10-20 17:45:44 -05:00
-
5c54736678
Removed "weak" option and implemented use-referrals/no-referrals
Nicolas Williams
2011-10-20 13:50:54 -05:00
-
c764ad95e5
Document name canonicalization rules
Nicolas Williams
2011-10-20 13:36:13 -05:00
-
e1be4482ac
Improve kgetcred support for name canon rules and document
Nicolas Williams
2011-10-20 13:16:34 -05:00
-
f4471b11d6
Call krb5_set_error_message() and don't clobber ret in debug code
Nicolas Williams
2011-10-20 12:56:12 -05:00
-
248e1eb772
Cleanups: s/\<assert\>/heim_assert/
Nicolas Williams
2011-10-20 12:43:24 -05:00
-
9f5a43084c
Cleanups: s/ENOMEM/krb5_enomem(context)/
Nicolas Williams
2011-10-20 12:38:32 -05:00
-
2f03603d6b
Cleanups: s/krb5int_/_krb5_/ and moved priv stuff from krb5.h
Nicolas Williams
2011-10-20 12:25:41 -05:00
-
001fc24102
Removed vestiges of no-reverse-lookup/reverse-lookup option that was never implemented
Nicolas Williams
2011-10-20 02:23:55 -05:00
-
a5e77c578e
Deferred hostname canon using name canon rules
Nicolas Williams
2011-10-15 19:29:54 -05:00
-
587cf45846
add @anchor
Love Hornquist Astrand
2011-10-20 22:09:16 +02:00
-
b1012edee3
add krb5_auth_con_getsendsubkey
Love Hornquist Astrand
2011-10-19 21:11:12 +02:00
-
fed3050bc0
use ` instead of $( to please legacy solaris /bin/sh
Love Hornquist Astrand
2011-10-19 11:36:18 +02:00
-
33f717edb2
Only set msg in case we have one, from Rangar Sundblad
Love Hornquist Astrand
2011-10-19 04:58:22 +02:00
-
6bcdba3a38
Fix autogen.sh to be portable and fail when autoreconf fails
Nicolas Williams
2011-10-17 16:27:58 -05:00
-
d56bb35a50
Fix autogen.sh to be more portable and to fail when autoreconf fails
Nicolas Williams
2011-10-17 15:47:50 -05:00
-
f7efe9516f
more references
Love Hornquist Astrand
2011-10-14 14:58:29 +02:00
-
7b77de50a0
kadmin modify --pkinit-acl example
Love Hornquist Astrand
2011-10-14 14:53:50 +02:00
-
28563373a8
more documentation about pkinit
Love Hornquist Astrand
2011-10-14 14:49:00 +02:00
-
1b88a3b6c7
Only does implicit matching for first component, reported by Harry Coin
Love Hornquist Astrand
2011-10-14 00:33:57 +02:00
-
d6474982e5
document kdc options
Love Hornquist Astrand
2011-10-12 15:37:24 +02:00
-
c2be6a8580
we have @subsection Configure the KDC, let remove the XXX
Love Hornquist Astrand
2011-10-12 15:29:59 +02:00
-
f574312ce1
remove kaserver ref
Love Hornquist Astrand
2011-10-12 12:34:56 +02:00
-
a061e7b22f
remove kaserver ref
Love Hornquist Astrand
2011-10-12 12:34:42 +02:00
-
8192b9ed35
remove refernces to kerberos 4 and kaserver
Love Hornquist Astrand
2011-10-12 12:25:10 +02:00
-
4c6976a6bd
Fix check-des
Nicolas Williams
2011-10-12 01:15:13 -05:00
-
12cd2c9cbd
Fix TGS ticket enc-part key selection
Nicolas Williams
2011-10-11 23:57:58 -05:00
-
8aceafc430
moved to lib/gssapi/oid.txt
Love Hornquist Astrand
2011-10-03 15:52:35 +02:00
-
f48061bda7
check localname attr authenticated
Luke Howard
2011-10-08 12:23:25 +11:00
-
07777511d1
implement gss_localname
Luke Howard
2011-10-08 12:15:09 +11:00
-
1b03abb250
This should be the final fix for enctype 0 issues (tested)
Nicolas Williams
2011-10-06 00:55:54 -05:00
-
e15cabe10a
Fix for enctype 0 / length 0 keys in MIT HDB backend was incomplete
Nicolas Williams
2011-10-05 17:50:26 -05:00
-
3d6f86af27
Fix segfault in hdb-mitdb when princ have salt
Nicolas Williams
2011-10-02 23:07:34 -05:00
-
ee7340860a
remove classic input
Love Hornquist Astrand
2011-10-02 17:23:26 +02:00
-
391bce7ca2
lets try classic input() too
Love Hornquist Astrand
2011-10-02 13:46:28 +02:00
-
49b471f1a2
Heimdal 1.5.1
Love Hornquist Astrand
2011-10-02 13:26:37 +02:00
-
923f3a434f
free krb5_storage when dne
Love Hornquist Astrand
2011-09-30 12:44:34 +02:00
-
3c0e9b8fd1
dont use bool since its c99
Love Hornquist Astrand
2011-09-30 11:49:01 +02:00
-
b76f6f1e93
add more people
Love Hornquist Astrand
2011-09-29 13:58:23 +02:00
-
a1738def66
solaris want's _XOPEN_SOURCE set to 600, From Ragnar Sundblad
Love Hornquist Astrand
2011-09-29 13:57:24 +02:00
-
240b298e61
Simplify base/section rules, patch from David R Boldt
Love Hornquist Astrand
2011-09-29 13:51:27 +02:00
-
1de3db5678
Make getpwnam_r() check work on Ubuntu
Nicolas Williams
2011-09-27 17:32:11 -05:00
-
4ae39ce0b3
Added one more export to libheimbase -- needed by tests
Nicolas Williams
2011-09-27 16:29:11 -05:00
-
cdceea1b3e
Revert "A simple (but wrong?) fix for Solaris build issues"
Nicolas Williams
2011-09-27 16:05:34 -05:00
-
e927695a5d
Better fix for the Solaris getpwnam_r() build issue
Nicolas Williams
2011-09-27 16:05:03 -05:00
-
cbf126bede
Permit NULL context to krb5_get_error_message()
Jeffrey Altman
2011-09-27 14:21:22 -04:00
-
03df77d491
link with heimbase
Love Hornquist Astrand
2011-09-27 19:40:10 +02:00
-
6a7f2a5b2e
A simple (but wrong?) fix for Solaris build issues
Nicolas Williams
2011-09-27 01:59:44 -05:00
-
c3936f72c3
Test for hdb-mitdb, including an MIT KDB file.
Nicolas Williams
2011-09-26 16:16:05 -05:00
-
308be3a9e2
Don't export tests from library, reported in bug from Tom Payeire
Love Hornquist Astrand
2011-09-26 17:53:13 +02:00
-
f1df66341e
quote to make solaris sh apply, patch from Tom Payeire
Love Hornquist Astrand
2011-09-26 17:50:45 +02:00
-
0595af118e
document KRB5_CONFIG
Love Hornquist Astrand
2011-09-26 14:59:30 +02:00
-
e138bed4c7
export error functions
Love Hornquist Astrand
2011-09-26 09:29:14 +02:00
-
777b24fbb5
add krb5_is_enctype_weak
Love Hornquist Astrand
2011-09-26 08:47:32 +02:00
-
9a127beb26
Windows: set default ccache to registry
Jeffrey Altman
2011-09-26 02:00:13 -04:00
-
132693df5a
Add _krb5_store_string_to_reg_value() for Windows
Jeffrey Altman
2011-09-26 01:58:29 -04:00
-
d6bff3199d
add cache type column to kswitch output
Jeffrey Altman
2011-09-26 01:56:14 -04:00
-
91a9a11b75
avoid use of vasnprintf in base/error.c
Jeffrey Altman
2011-09-26 01:53:25 -04:00
-
3854e64a4a
include weak etypes in default etype list if allow_weak_crypto
Jeffrey Altman
2011-09-26 01:44:16 -04:00
-
00773b4119
test verify_mic is both directions
Love Hornquist Astrand
2011-09-25 20:38:17 +02:00
-
f910d2174b
Disable java gssapi tests because of 7077640 and 7077646
Love Hornquist Astrand
2011-09-25 20:24:26 +02:00
-
d9dc7c9761
try read message in java code too
Love Hornquist Astrand
2011-09-25 19:40:02 +02:00
-
c94f299fc8
add heim_error_t
Love Hornquist Astrand
2011-09-25 19:03:23 +02:00
-
d3f85af92c
move deprecated function to deprecated.c
Love Hornquist Astrand
2011-09-25 19:03:11 +02:00
-
0793246e99
use heim_error_t
Love Hornquist Astrand
2011-09-25 19:00:01 +02:00
-
7e36705ee3
use heim_error_t
Love Hornquist Astrand
2011-09-25 18:59:42 +02:00
-
9f46874cfb
add heimbase.la
Love Hornquist Astrand
2011-09-25 18:59:10 +02:00
-
0b02f05a19
error_buf is gone
Love Hornquist Astrand
2011-09-25 17:49:06 +02:00
-
d64eb50f72
filter out kvno
Love Hornquist Astrand
2011-09-25 16:44:45 +02:00