summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Rename "Leash" to "MIT Kerberos"Kevin Wasserman2012-08-277-19/+20
| | | | | | | | | | | In the executable name and many GUI elements. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7292 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- clean up 'About' dialogKevin Wasserman2012-08-273-9/+37
| | | | | | | | | | | | By default, hide the debug list of loaded modules; change LeashView.cpp and recompile to get the list. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7291 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW update copyright date (2012) for all modulesKevin Wasserman2012-08-271-1/+1
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7290 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW WiX installer update copyright noticeKevin Wasserman2012-08-271-1/+1
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7289 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Remove copyright/version from Get Tickets dialogKevin Wasserman2012-08-272-158/+0
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7288 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- add 'Options' categoryKevin Wasserman2012-08-271-1/+1
| | | | | | | | | | | | Move 'View' and 'Options' panels from Home to Options category. Rename to 'View Options' and 'Ticket Options' respectively. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7287 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Use bold for entire row for default principalKevin Wasserman2012-08-272-32/+46
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7286 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Rename 'Get Ticket' to 'MIT Kerberos: Get Ticket'Kevin Wasserman2012-08-272-4/+4
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7284 queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- abbreviate durationsKevin Wasserman2012-08-241-14/+4
| | | | | | | | | | | Map days -> d; hours -> h; minutes -> m Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7285 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Change 'Get Ticket' to 'MIT Kerberos: Get Ticket'Kevin Wasserman2012-08-242-7/+7
| | | | | | | | | | | Also improve string copy safety. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7284 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Rename and move 'Clear Principal History'Kevin Wasserman2012-08-241-2/+2
| | | | | | | | | | | Move it closer to the Principal edit box and rename to 'Clear History' Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7283 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Merge forwardable/proxiable in Get Tickets dialogKevin Wasserman2012-08-242-6/+4
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7282 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Update kfw ribbon button graphicsKevin Wasserman2012-08-241-1/+1
| | | | | | | | | | | Integrate bmp's from ui team. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7281 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- show ticket flagsKevin Wasserman2012-08-241-1/+46
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7280 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- update expand/collapse icon renderingKevin Wasserman2012-08-241-10/+23
| | | | | | | | | Use DrawThemeBackground() to draw the icons from the explorer treeview. ticket: 7279 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix leashdll code to search for existing ticketsKevin Wasserman2012-08-241-275/+120
| | | | | | | | | | | | | When we have a desired principal, search the entire credential cache collection for existing tickets for that principal before using a prompter. If no principal is specified, check only the default cache. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7278 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Use file mapping to marshall message dataKevin Wasserman2012-08-242-49/+126
| | | | | | | | | | | | | GlobalAlloc() is no longer supported for this purpose. Also split out leash message marshalling code into a separate function acquire_tkt_send_message_leash and improve string copy safety. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7276 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Set kfw GUI read-only princ flag when appropriateKevin Wasserman2012-08-241-0/+3
| | | | | | | | | | | | | When receiving a request to obtain tickets (from another process), if a particular principal is requested, set the read-only flag to prevent the user from changing the principal. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7275 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Add 'read-only principal' flagKevin Wasserman2012-08-242-18/+20
| | | | | | | | | | | | | Reserve the high-order 16 bits of dlgtype for flags. Add DLGFLAG_READONLY_PRINC. When specified, the get tickets dialog does not allow the user to change the principal. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7274 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Send kfw 'obtain ticket' messages to main frameKevin Wasserman2012-08-242-18/+4
| | | | | | | | | | | | | | | Previous versions of kfw would attempt to send 'obtain tickets' messages directly to the 'view' window by sending to the first child of the main frame. But with the ribbon UI, the ribbon toolbar is now the first child, so that method no longer works. Instead we now send the message to the main frame and the main frame forwards to the active view. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7273 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix 'renewable' checkbox textKevin Wasserman2012-08-241-2/+2
| | | | | | | | | | | fix 'renwable' typo and pad size. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7272 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix ribbon breakageKevin Wasserman2012-08-242-3/+3
| | | | | | | | | | | Controls were accidentally broken when moved Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7271 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Add Forget Principals to Get Tickets dialogKevin Wasserman2012-08-248-14/+35
| | | | | | | | | | | | | | | And remove remnants of it from the "more" panel. Clear the registry key that stores the principal list. Also clear the autocomplete strings on the active control. [kaduk@mit.edu: squashed commits and rewrote commit message.] ticket: 7269 (new) subject: forget principals functionality queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- add 'More' PanelKevin Wasserman2012-08-245-3/+17
| | | | | | | | | | | 'Import Tickets', 'Export Tickets', and 'Forget Principals' buttons. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7268 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Combine username and realm in get tickets dialogKevin Wasserman2012-08-242-141/+36
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7266 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix NSIS uninstall to work with UACKevin Wasserman2012-08-241-115/+192
| | | | | | | | | | | Use ShellExecuteEx() to elevate privilege if CreateProcess() fails. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7265 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW auto-complete supportKevin Wasserman2012-08-243-0/+600
| | | | | | | | | | | | | | | | Use the registry to store and retrieve principals for auto-complete. Remember principals from successful autentications. TODO: combine realm/username in principal; 'remember principal' checkbox; reset button; add to support 'change password' dialog as well. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> [kaduk@mit.edu: style cleanup, copyright/license on new file.] ticket: 7264 (new) queue: kfw target_version: 1.10.4 tags: pullup
* C++ safety for leashdll.hKevin Wasserman2012-08-241-0/+7
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7270 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Minor fixes for leashwin.hKevin Wasserman2012-08-241-0/+8
| | | | | | | | | | | | -explicitly include krb5.h (for krb5_timestamp) -add extern "C" scope for c++ compatibility Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7267 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Remove psapi.dll from installerKevin Wasserman2012-08-242-7/+1
| | | | | | | | | | | psapi.dll is a standard windows component; no need for kfw to redistribute. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7263 (new) queue: kfw target_version: 1.10.4 tags: pullup
* KfW GUI -- renew selected principalsKevin Wasserman2012-08-241-5/+99
| | | | | | | | | | | | | The renew button should act on the current selection. -auto-renew still only renews default ccache -renew doesn't work for UAC-limited MSLSA Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7262 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Update ribbon tooltip textBen Kaduk2012-08-241-13/+13
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7261 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Add leak tracking support to LeashKevin Wasserman2012-08-241-0/+12
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7260 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Add defines for debug builds in win-pre.inKevin Wasserman2012-08-241-0/+4
| | | | | | | | | | | define DEBUG and _CRTDBG_MAP_ALLOC except for NODEBUG builds Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7259 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Remove ID_ABOUT, add ID_IMPORT_TICKETSKevin Wasserman2012-08-242-3/+4
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7258 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix tooltips for ribbonKevin Wasserman2012-08-241-3/+17
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7257 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Tooltip text fixesKevin Wasserman2012-08-241-12/+13
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7256 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Set fCachesTicket=TRUE when no credentialsKevin Wasserman2012-08-241-1/+2
| | | | | | | | | | | | It is not really clear this is correct, but neither was the previous behavior. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7255 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Do not be over-restrictive in the presence of UACKevin Wasserman2012-08-241-39/+4
| | | | | | | | | | | | | | | | | | We used to explicitly check if a process was UAC-limited and deny all access to the TGT in that case; however, this makes the MSLSA cache effectively useless. Do not try to outsmart UAC, and let it do its own checking -- this allows UAC-limited access to the MSLSA ccache, which should mean read-write access to service tickets, and write-only access to the TGT. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> [kaduk@mit.edu: delete instead of comment out, move comment.] ticket: 7254 (new) queue: kfw target_version: 1.10.4 tags: pullup
* kfw support for multiple identitiesKevin Wasserman2012-08-2417-1332/+1658
| | | | | | | | | | | | | | | | | | | | We need a sense of what the default identity is, then, with a way to set it and list it. The memory management model changes some, as well. Use a bold font to indicate the current default identity in the GUI; while here use an italic font for expired credentials. In the process, rip out some krb4 remenants, and remove ancient code conditional on the lack of KRB5_TC_NOTICKET. Define USE_MESSAGE_BOX when building leash and use MessageBox(). [kaduk@mit.edu: adjust for style, flesh out commit message.] ticket: 7253 (new) queue: kfw target_version: 1.10.4 tags: pullup
* kfw get tickets dialog tweaksKevin Wasserman2012-08-242-18/+16
| | | | | | | | | | | | | "Options" button -> "Advanced Settings" "Renew Till" -> "Renew Until" "Kerberos 5 Options" -> "Flag this ticket as" Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7252 (new) queue: kfw target_version: 1.10.4 tags: pullup
* kfw remove status barKevin Wasserman2012-08-244-6/+16
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7251 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Only create toolbar when not using ribbon UIKevin Wasserman2012-08-241-6/+8
| | | | | | | | | | | When we do create the toolbar, dock it. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7250 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Use ListView; add ViewColumn abstractionKevin Wasserman2012-08-244-277/+139
| | | | | | | | | | | | | | | | Punting FormView since we really only need ListCtrl and using ListView makes the header column and window resizing work. The ViewColumn abstraction eliminates some copy/paste code blocks. HDN_ITEMCHANGED tracks user changes to column widths. Remove CTreeCtrl-related code. Also remove some unused code that was generating warnings. Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7249 (new) queue: kfw target_version: 1.10.4 tags: pullup
* kfw implement ribbon UIKevin Wasserman2012-08-245-8/+43
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7248 (new) queue: kfw target_version: 1.10.4 tags: pullup
* kfw "Initialize Ticket" -> "Get Ticket"Kevin Wasserman2012-08-242-6/+7
| | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7247 (new) queue: kfw target_version: 1.10.4 tags: pullup
* MSVC-generated updates to support ribbon UIKevin Wasserman2012-08-244-8/+21
| | | | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> [kaduk@mit.edu: manually tweak to remove gratuitious churn] ticket: 7246 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Update leash icon and button graphicsKevin Wasserman2012-08-2413-4/+4
| | | | | | | | | | | Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> [kaduk@mit.edu: While here, remove now-unused doghead icons.] ticket: 7245 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Prep for KfW conversion to ribbon toolbarKevin Wasserman2012-08-248-77/+19
| | | | | | | | | | | | | | | Upgrade classes: CWinApp->CWinAppEx, CFrameWnd->CFrameWndEx, CStatusBar->CMFCStatusBar, CToolBar->CMFCToolBar. Call AfxOleInit() from CLeashApp::InitInstance() Do not call LoadBarState() (crashes) or GetToolBarCtrl() (no longer exists) Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com> ticket: 7244 (new) queue: kfw target_version: 1.10.4 tags: pullup
* Fix portability, printf bugs in preauth_otp.cGreg Hudson2012-08-241-3/+1
| | | | | | unistd.h is not available on Windows and isn't needed for this file, so don't include it. Two arguments to asprintf in choose_token() were reversed.