| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14522 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14452 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14292 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
Heimdal interop
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14215 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
rather than trying all acceptable enctypes in a loop.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13989 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* k5seal.c (make_seal_token_v1): Cleanup code for mic
tokens. Essentially revert code to Sam's 10/25 code, with one
correction - allocation of data_ptr - use msglen and not tmsglen.
Additionally, do not rely on malloc(0) being non-NULL.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13907 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
Now tested and working against win2k ldap server; wrap and unwrap
of encrypted and unencrypted data tested.
So far no test of getmic or verify_mic.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13870 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
pertaining to case when signing message only. Fixes buffer
overflows as found by gssapi dejagnu testsuite.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13868 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
than raw enctype
* Deal with GSSAPI key usage in microsoft translation
* Add rc4 gssapi mechanism; works with itself, not tested against
* Windows yet
* Refactor large chunks of k5seal.c to make code more readable for
debugging
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13859 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13828 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
$(OBJEXT). Change a couple of UNIX rules to not trigger incorrectly on
Windows. Rebuild dependencies.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13801 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
don't worry about restoring them when importing new versions of code.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13792 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
FAR/NEAR specs
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13786 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
unrecognized options properly. [krb5-libs/738]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13778 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13775 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
returns from krb5_rd_cred more sanely.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13768 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13734 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13725 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13651 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13647 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
variable set but never used.
* ser_sctx.c (kg_queue_internalize): Ditto
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13640 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13556 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
shadow local variable ptr.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13484 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* util_crypt.c (kg_encrypt, kg_decrypt): Use free() instead of
krb5_free_data_contents().
* util_cksum.c (kg_checksum_channel_bindings): Make sure that
returned memory is allocated with xmalloc() so that caller can use
xfree() on it.
* k5unseal.c (kg_unseal_v1): Use krb5_free_data_contents()
instead of xfree().
* k5seal.c (make_seal_token_v1): Use krb5_free_data_contents()
instead of xfree().
* init_sec_context.c (make_ap_req_v1): Use xfree() instead of
free() to be consistent with xmalloc() usage. Use
krb5_free_data_contents() instead of xfree().
* disp_name.c (krb5_gss_display_name): Use
krb5_free_unparsed_name() instead of xfree().
* add_cred.c (krb5_gss_add_cred): Use xfree() instead of free() to
be consistent with xmalloc() usage.
* accept_sec_context.c (krb5_gss_accept_sec_context): Remove
variables that were effectively unused. Use
krb5_free_data_contents() instead of xfree() where appropriate.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13482 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5int-cc_default() prototype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13420 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
init_sec_context.c inq_cred.c: Cast const gss_OID to gss_OID for
gssapi functions which are not speced with const in the RFC.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13360 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
that was set but never used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13288 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
assignments in conditionals.
* k5seal.c (make_seal_token_v1): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13260 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
variable.
* util_ctxsetup.c (kg2_parse_token): Fix erroneous assignment in
conditional. (code not used in current tree).
* util_seed.c, util_seqnum.c, util_crypt.c, util_cksum.c: Cleanup
up assignments in conditionals.
* ser_sctx.c (kg_queue_internalize): Get rid of unused variable.
* gssapiP_krb5.h: Renable prototype for krb5_gss_release_oid() as
code is back (since 1996).
* k5unseal.c (kg_unseal_v1): Declare internal function static.
* init_sec_context.c (make_ap_req_v2): Comment out non-referenced
function.
* gssapi_krb5.c: Include k5-int.h for krb5_ser_* prototypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13241 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
lrandom to prevent shadowing of global function.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13186 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12889 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12888 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
prototype. Don't use too-big numbers even as placeholders.
* accept_sec_context.c (rd_and_store_for_creds): After creating an auth
context, set flags to require sequence numbers.
(krb5_gss_accept_sec_context): Likewise.
* init_sec_context.c (krb5_gss_init_sec_context): Likewise.
(thanks to assar for noticing this)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12887 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12722 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
occurs after the auth_context is established, but before the
krb5_gss_ctx_id_rec is established, release our pointer to the
replay cache and invoke krb5_auth_con_free(). (krb5-libs/855)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12721 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12715 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
assignment from the test.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12714 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_cc_get_name() return const char *.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12710 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
GCC_S_NO_CHANNEL_BINDINGS is set by the server, skip over the
bindings sent from the client. RFC-1964 indicates that the
client's channel bindings are always sent in checksum field and
need to be accounted for, evn if the server does not care.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12664 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* accept_sec_context.c: krb5_gss_accept_sec_context()
It has been determined by Martin Rex that Windows 2000 is incapable
of supporting channel bindings. This caused us to examine the
various RFCs affecting FTP GSSAPI to determine whether or not
channel bindings were a MUST for implementation of the FTP GSSAPI
protocol. It was determined that the channel binding facility as
described in RFC2743 is optional. Therefore, we cannot assume
that all clients or servers will support it. The code was updated
to allow GSS_C_NO_CHANNEL_BINDINGS when specified by either the
client or server to indicate that channel bindings will not be
used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12645 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12502 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12471 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(from Nathan Neulinger <nneul@umr.edu>)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12332 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12331 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
* acquire_cred.c: Changed to use krb5int_cc_default. This function
supports the Kerberos Login Library and pops up a dialog if the cache does
not contain valid tickets. This is used to automatically get a tgt before
obtaining service tickets. Note that this should be an internal function
because callers don't expect krb5_cc_default to pop up a dialog!
(We found this out the hard way :-)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12293 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
wrap_size_limit() to deal with integrity wrap tokens properly.
The rfc1964 mech always pads and confounds regardless of whether
confidentiality is requested.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12155 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11969 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11884 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11882 dc483132-0cff-0310-8789-dd5450dbe970
|