Viktor Dukhovni 840dc40574 Refine name canonicalization ...

When storing credentials whose ticket principal is not equal to the
requested principal, store the ticket under both names not only when
the original realm is the referral realm, but more generally for any
difference at all.  This matches MIT behaviour.

Allow explicit name_canon rules to specify a realm to go with the
canonicalized hostname, if that realm is empty the effect is the
same "use-referrals"

Also fix segfault when no creds and debugging

2016-06-09 01:13:15 -04:00

..

acache.c

only perform dir separator normalization for file paths

2015-01-07 14:43:19 -05:00

acl.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

add_et_list.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

addr_families.c

ipv6 loopbacks fix for GNU libc getaddrinfo()

2015-01-25 13:51:41 -07:00

aes-test.c

Make OpenSSL an hcrypto backend proper

2016-04-15 00:16:17 -05:00

an2ln_plugin.h

Plugin functions should be KRB5_LIB_CALL

2012-03-13 23:56:11 -04:00

aname_to_localname.c

Add missing #include in aname_to_localname.c

2015-04-14 17:10:26 -05:00

appdefault.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

asn1_glue.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

auth_context.c

remember to free auth_data

2013-07-18 14:58:54 +02:00

build_ap_req.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

build_auth.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

cache.c

Ensure newly allocated ccache handles are zeroed

2016-06-02 02:40:50 -04:00

ccache_plugin.h

Generalize MSLSA ccache type to a plug-in based ccache type

2010-09-18 23:50:38 -04:00

changepw.c

Don't use %zu

2013-10-04 18:58:31 -04:00

codec.c

Rename subsystem_DEPRECATED to subsystem_DEPRECATED_FUNCTION(X)

2011-05-17 23:12:51 -07:00

config_file.c

YFS Coverity 11034

2015-04-21 22:18:09 -04:00

config_reg.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

constants.c

handle creation of DIR caches

2013-04-29 22:54:11 -07:00

context.c

Do not search system paths for non-ccapi plugins

2016-06-09 01:13:14 -04:00

convert_creds.c

Rename subsystem_DEPRECATED to subsystem_DEPRECATED_FUNCTION(X)

2011-05-17 23:12:51 -07:00

copy_host_realm.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

crc.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

creds.c

Add guard in krb5_free_creds()

2015-03-24 11:49:58 -05:00

crypto-aes.c

Provide support for enctype aliases for ease of use.

2012-03-06 09:34:43 +00:00

crypto-algs.c

prefix internal structures with _krb5_

2011-03-12 13:50:39 -08:00

crypto-arcfour.c

arcfour-hmac-md5 is weak

2014-12-01 15:41:12 -08:00

crypto-des3.c

Fix 1DES/3DES cast bug and build

2016-04-19 13:40:46 -05:00

crypto-des-common.c

Fix 1DES/3DES cast bug and build

2016-04-19 13:40:46 -05:00

crypto-des.c

Fix 1DES/3DES cast bug and build

2016-04-19 13:40:46 -05:00

crypto-evp.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

crypto-null.c

Provide support for enctype aliases for ease of use.

2012-03-06 09:34:43 +00:00

crypto-pk.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

crypto-rand.c

Completely remove RAND_egd support

2015-10-06 15:44:47 +02:00

crypto-stubs.c

krb5_context: embed mutex in structure

2016-04-10 17:05:07 -05:00

crypto.c

Fix KRB-FX-CF2 for enctypes with non-dense keyspaces

2014-03-16 22:57:13 -05:00

crypto.h

Make OpenSSL an hcrypto backend proper

2016-04-15 00:16:17 -05:00

data.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

db_plugin.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

db_plugin.h

Plugin functions should be KRB5_LIB_CALL

2012-03-13 23:56:11 -04:00

dcache.c

ISPATHSEP and ISTILDE macros; Windows portability

2013-09-10 22:31:38 -04:00

deprecated.c

krb5_context: embed mutex in structure

2016-04-10 17:05:07 -05:00

derived-key-test.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

digest.c

quel 64bit warnings, fixup implicit encoding for template, fix spelling

2013-06-03 21:46:20 -07:00

dll.c

Fix Windows build

2016-04-16 16:58:08 -05:00

doxygen.c

Add doxygen and source comments to some functions of the krb5 API

2012-05-09 08:15:42 +02:00

eai_to_heim_errno.c

Change #elseif to #elif.

2012-01-10 22:54:50 +01:00

enomem.c

krb5_enomem to separate source file

2012-07-02 11:33:18 -04:00

error_string.c

krb5_context: embed mutex in structure

2016-04-10 17:05:07 -05:00

expand_hostname.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

expand_path.c

only perform dir separator normalization for file paths

2015-01-07 14:43:19 -05:00

fast.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

fcache.c

krb5: pricipal -> principal

2016-04-10 17:05:07 -05:00

free_host_realm.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

free.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

generate_seq_number.c

accept >= 0 and valid return codes from RAND_bytes due to broken engine from the isc bind implementation, reported by Sam Liddicott

2010-09-01 21:00:07 -07:00

generate_subkey.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

get_addrs.c

heimdal: Fix CID 241943 Uninitialized pointer read

2014-03-24 23:07:51 -05:00

get_cred.c

Refine name canonicalization

2016-06-09 01:13:15 -04:00

get_default_principal.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

get_default_realm.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

get_for_creds.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

get_host_realm.c

krb5: DNS TXT records test for invalid gTLD

2016-04-10 17:05:07 -05:00

get_in_tkt.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

get_port.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

heim_err.et

intruduce krb5_generate_random() that can fail and return an error, check for it at krb5_context creation time

2013-10-21 08:22:02 -07:00

init_creds_pw.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

init_creds.c

s4-heimdal: fix krb5_get_init_creds_opt_set_process_last_req().

2015-06-17 17:41:26 -05:00

k524_err.et

…

kcm.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

kcm.h

glue in some more functions

2011-03-12 19:29:00 -08:00

kerberos.8

Move kadmin and ktutil to /usr/bin.

2014-06-09 23:36:23 +02:00

keyblock.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

keytab_any.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

keytab_file.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

keytab_keyfile.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

keytab_memory.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

keytab.c

Revamp name canonicalization code

2015-03-24 11:49:58 -05:00

krb5_425_conv_principal.3

…

krb5_acl_match_file.3

…

krb5_aname_to_localname.3

…

krb5_appdefault.3

…

krb5_auth_context.3

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

krb5_c_make_checksum.3

Fix some typos.

2014-04-25 02:42:17 +02:00

krb5_ccapi.h

…

krb5_check_transited.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_create_checksum.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_creds.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_digest.3

Fix some typos.

2014-04-25 02:42:17 +02:00

krb5_eai_to_heim_errno.3

…

krb5_encrypt.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_err.et

add NO_ACCEPTABLE_KDF

2013-10-15 11:52:37 +02:00

krb5_find_padata.3

…

krb5_generate_random_block.3

…

krb5_get_all_client_addrs.3

…

krb5_get_credentials.3

krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt deprecated

2009-07-17 20:39:35 -07:00

krb5_get_creds.3

(patch) man page syntax errors

2015-05-26 16:03:00 +02:00

krb5_get_forwarded_creds.3

…

krb5_get_in_cred.3

Fixes from NetBSD via Thomas Klausner and Roland C. Dowdeswell

2011-05-04 21:31:10 -07:00

krb5_get_init_creds.3

krb5: pricipal -> principal

2016-04-10 17:05:07 -05:00

krb5_get_krbhst.3

…

krb5_getportbyname.3

…

krb5_init_context.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_is_thread_safe.3

Mandoc and spelling fixes from Thomas Klausner

2011-04-29 20:37:33 -07:00

krb5_krbhst_init.3

…

krb5_locl.h

lib/krb5: krb5_locl.h do not replicate roken.h

2016-04-17 17:19:53 -05:00

krb5_mk_req.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

krb5_mk_safe.3

…

krb5_openlog.3

…

krb5_parse_name.3

Various manpages: Remove references to Kerberos 4.

2014-04-28 01:03:10 +02:00

krb5_principal.3

Various manpages: Remove references to Kerberos 4.

2014-04-28 01:03:10 +02:00

krb5_rcache.3

…

krb5_rd_error.3

…

krb5_rd_safe.3

…

krb5_set_default_realm.3

krb5_set_default_realm.3 man page update

2013-10-06 16:01:46 -04:00

krb5_set_password.3

…

krb5_string_to_key.3

Mandoc and spelling fixes from Thomas Klausner

2011-04-29 20:37:33 -07:00

krb5_timeofday.3

…

krb5_verify_init_creds.3

…

krb5_verify_user.3

…

krb5-plugin.7

Fix some typos.

2014-04-25 02:42:17 +02:00

krb5-v4compat.h

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

krb5.conf.5

Various fixes in kfb5.conf man page:

2016-04-28 15:50:48 +05:30

krb5.h

Add start_realm cc config

2015-04-14 11:27:21 -05:00

krb5.moduli

…

krb524_convert_creds_kdc.3

Mandoc and spelling fixes from Thomas Klausner

2011-04-29 20:37:33 -07:00

krb_err.et

…

krbhst-test.c

remove RCSID

2009-05-04 06:17:40 +00:00

krbhst.c

lib/krb5: fix srv_find_realm invalid gTLD test

2016-04-13 18:52:55 -05:00

kuserok_plugin.h

rename KRB5_PLUGIN_KUSEROK since kuserok is a little bit too common

2012-10-07 11:28:28 -07:00

kuserok.c

only perform dir separator normalization for file paths

2015-01-07 14:43:19 -05:00

libkrb5-exports.def.in

Two-phase HDB commit via iprop log, + GC for log

2016-02-26 00:55:33 -06:00

locate_plugin.h

rewrite send to kdc to be more agressive, try kdcs in paralell and easier to configure behavior

2013-02-10 19:02:52 -08:00

log.c

Add --debug option to kgetcred

2015-04-13 16:59:20 -05:00

Makefile.am

Use OpenSSL include path as needed

2016-05-07 05:29:12 -04:00

mcache.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

misc.c

heimdal: Fix the build on FreeBSD

2014-03-24 23:07:49 -05:00

mit_glue.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

mk_error.c

lib/krb5: add krb5_mk_error_ext() helper function

2015-07-31 17:30:23 +12:00

mk_priv.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

mk_rep.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

mk_req_ext.c

libkrb5: Add missing KRB5_LIB_FUNCTION/KRB5_LIB_CALL

2013-06-22 21:17:32 -04:00

mk_req.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

mk_safe.c

avoid uninit variable and unreachable code warnings

2011-05-17 12:02:16 -04:00

n-fold-test.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

n-fold.c

Further improvements to lib/krb5/n-fold.c:

2013-02-14 16:46:40 +08:00

net_read.c

Add doxygen and source comments to some functions of the krb5 API

2012-05-09 08:15:42 +02:00

net_write.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

NTMakefile

Make OpenSSL an hcrypto backend proper

2016-04-15 00:16:17 -05:00

pac.c

Merge pull request #154 from metze-samba/heimdal-for-upstream

2016-05-14 22:32:13 +12:00

padata.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

parse-name-test.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

pcache.c

Fix typo in lib/krb5/pcache.c

2013-09-12 13:32:22 -05:00

pkinit-ec.c

fixup pkinit-ec.c (kdc and lib/krb5) includes

2016-04-17 17:10:08 -05:00

pkinit.c

Make OpenSSL an hcrypto backend proper

2016-04-15 00:16:17 -05:00

plugin.c

improve resolve_origin readability

2014-02-04 23:20:11 -05:00

principal.c

Refine name canonicalization

2016-06-09 01:13:15 -04:00

prog_setup.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

prompter_posix.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

rd_cred.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

rd_error.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

rd_priv.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

rd_rep.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

rd_req.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

rd_safe.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

read_message.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

recvauth.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

replay.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

salt-aes.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

salt-arcfour.c

Better error messages when UTF8 conversion fails

2013-04-26 00:05:53 -07:00

salt-des3.c

Fix 1DES/3DES cast bug and build

2016-04-19 13:40:46 -05:00

salt-des.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

salt.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

scache.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

send_to_kdc_plugin.h

rewrite send to kdc to be more agressive, try kdcs in paralell and easier to configure behavior

2013-02-10 19:02:52 -08:00

send_to_kdc.c

coverity 1164162

2015-04-19 15:04:16 -05:00

sendauth.c

Document some GSS-API functions and fix some spelling errors. No code changes.

2012-09-27 14:26:29 -07:00

set_default_realm.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

sock_principal.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

store_emem.c

Introduce and apply krb5_storage_from_socket

2014-02-04 23:20:08 -05:00

store_fd.c

krb5_storage_free(): preserve errno

2016-02-26 00:55:30 -06:00

store_mem.c

Introduce and apply krb5_storage_from_socket

2014-02-04 23:20:08 -05:00

store_sock.c

krb5_storage_free(): preserve errno

2016-02-26 00:55:30 -06:00

store-int.c

Add krb5_ret/store_[u]int64()

2016-02-26 00:55:30 -06:00

store-int.h

Add krb5_storage_fsync().

2012-05-28 13:14:55 +01:00

store-test.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

store.c

krb5_storage_free(NULL) should work

2016-02-29 19:13:09 -06:00

string-to-key-test.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

test_acl.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_addr.c

remove prefix zeros

2010-09-18 14:45:33 -07:00

test_alname.c

Add -Wshadow and deal with the warnings.

2012-02-21 11:17:55 +00:00

test_ap-req.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_canon.c

Initial name canon rules tests (just kgetcred)

2011-10-22 14:54:26 -05:00

test_cc.c

Test improved fcc_remove_cred()

2013-09-12 12:14:40 -05:00

test_config_strings.cfg

Revert use of backslash as an escape for double quote in config strings

2010-12-03 01:12:31 -05:00

test_config.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_crypto_wrapping.c

Don't bother test with testing weak enctypes if not supported in library

2009-08-18 15:56:29 +02:00

test_crypto.c

tests on Windows

2015-03-21 15:44:48 -04:00

test_expand_toks.c

only perform dir separator normalization for file paths

2015-01-07 14:43:19 -05:00

test_forward.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_fx.c

test_fx: enable weak crypto

2014-04-29 11:04:21 -06:00

test_get_addrs.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_gic.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_hostname.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_keytab.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_kuserok.c

Fix use after free in test_kuserok.c

2015-03-24 11:50:04 -05:00

test_mem.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_pac.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_pkinit_dh2key.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_pknistkdf.c

fix sizeof

2011-12-03 13:02:28 -08:00

test_plugin.c

Fix lib/krb5/test_plugin.c test

2016-04-15 10:27:07 -05:00

test_prf.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_princ.c

catch error from as.*printf

2010-05-30 13:37:07 -07:00

test_renew.c

remove RCSID

2009-05-04 06:17:40 +00:00

test_rfc3961.c

krb5: reorganise crypto.c

2010-11-03 11:12:24 +00:00

test_set_kvno0.c

Initial test of x-realm TGT w/ kvno 0 and key rollover

2011-11-15 21:53:34 -06:00

test_store.c

Make test_store.c build w/o warnings and run

2012-07-15 00:55:08 -05:00

test_time.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

test_x500.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

ticket.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

time.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00

transited.c

More complete logging of capths violations

2014-03-15 00:04:20 -04:00

verify_init.c

Allow krb5_verify_init_creds() to take NULL opt arg.

2012-12-22 00:23:18 +08:00

verify_krb5_conf-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

verify_krb5_conf.8

Problem with .Nm, From Jeremy C. Reed.

2009-04-25 16:27:19 +00:00

verify_krb5_conf.c

verify_krb5_conf: add missing entries

2014-02-14 23:41:09 -05:00

verify_user.c

Use krb5_enomem() more consistently in lib/krb5.

2013-02-13 16:15:00 +08:00

version-script.map

Two-phase HDB commit via iprop log, + GC for log

2016-02-26 00:55:33 -06:00

version.c

add back krb5_version and krb5_long_version to libkrb5, hide them in libvers

2009-12-07 21:16:43 -08:00

warn.c

More fixes for -Werror (GCC 4.6 catches more stuff)

2011-11-02 23:20:55 -05:00

write_message.c

Patch from Secure Endpoints/Asanka Herath for windows support

2009-12-21 08:45:28 +01:00