| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
| |
supported, return an error; can't satisfy both TC_SUPPORTED_KTYPES and
TC_MATCH_KTYPE that way. Delete unused arguments CCACHE and OUT_CREDS; fix
callers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12636 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
prototype.
* t_ser.c (ser_eblock_test): ifdef out old eblock serialization
test which is no longer called. (see 1999-09-01 ChangeLog)
* t_kerb.c: Cast argument to fprintf to long to agree with format
string.
* t_deltat.c: If MIN is defined, undef before redefined as 60.
* str_conv.c: Provide strptime prototype if the system header
files fail to provide a prototype.
* int-proto.h: Add prototype for krb5_libdefault_boolean()
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12555 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12502 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* get_in_tkt.c (_krb5_conf_boolean): Declare as taking a const char *
* str_conv.c (krb5_timestamp_to_string): Work around gcc's warning
that %c format in strftime might return only two digits for the
year.
* mk_safe.c, rd_rep.c, send_tgs.c: Remove unused goto label.
* kdc_rep_dc.c (krb5_kdc_rep_decrypt_proc): Remove code with no
effect.
* init_ctx.c: Make krb5_brand[] look used.
* chpw.c, decode_kdc.c, decrypt_tk.c, enc_helper.c, get_creds.c,
get_in_tkt.c, gic_keytab.c, gic_pwd.c, preauth2.c, vfy_increds.c:
Add parentheses around assignment used as truth value
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12483 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
send_tgs.c: Remove unused variable.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12457 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(from Nathan Neulinger <nneul@umr.edu>)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12332 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12331 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
* sendauth.c, fwd_tgt.c: Changed to use krb5int_cc_default. This function
supports the Kerberos Login Library and pops up a dialog if the cache does
not contain valid tickets. This is used to automatically get a tgt before
obtaining service tickets. Note that this should be an internal function
because callers don't expect krb5_cc_default to pop up a dialog!
(We found this out the hard way :-)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12291 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
* Added new source file appdefault.c
Implements new public functions
krb5_appdefault_string
krb5_appdefault_boolean
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12261 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
* gic_pwd.c (krb5_init_creds_password) added code to return to login library if
the password is expired (login library handles this error appropriately).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12201 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
libdefault_boolean; it somehow got missed earlier.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12156 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
* gic_pwd.c (krb5_get_init_creds_keytab), gic_pwd.c (krb5_get_init_creds_password)
when determining whether or not to retry with a "master kdc" do not retry if
the return value from the first attempt was KRB5_REALM_CANT_RESOLV. Also, do
not overwrite the return code if the return value from the access to the "master
kdc" was KRB5_REALM_CANT_RESOLV.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12154 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In 1.0.6, the code was altered to provide a fallback mechanism to
try the "master" kdc's in case the normal kdc's did not have the
most up to date password information. The original implementation
had significant conflicts with the use of DNS SRV records. In
addition, it often performed a lot of unneeded work.
The new code still performs a fallback to the "master" kdc but
only does the computation of the "master kdc list" if we are
in fact going to attempt to use a master.
For DNS SRV we introduce a new _kerberos-master.<proto>.<REALM>
record to list the master kdc's and the priorities to be used
when contacting a master. This allows for a multi-tiered implementation.
---
The other change is local to krb/get_in_tkt.c. In preparation for
adding public krb5_appdefault_boolean and krb5_appdefault_string
functions, the static functions by that name in get_in_tkt.c are
renamed to krb5_libdefault_xxxxx since they currently access the
[libdefault] section of the code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12137 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12118 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
data is ignored under get_in_tkt interface.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12104 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
use krb5_const instead of const. Under ultrix they are not the same.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12101 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
avoid returning garbage on error returns
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12097 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
from Matt Crawford
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12077 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
and generate a salt from the principal name if found; use the password and salt
to generate a key. Provide timestamp if nonce is zero, regardless of preauth
mode. (Patch from Chas Williams.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12045 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the correct type, do continue and ask for the password anyways. (Patch from
Chas Williams, PR krb5-libs/730.)
* preauth2.c (pa_sam): If no sam_flags were set, return KRB5_PREAUTH_BAD_TYPE,
because we don't currently handle that case.
* preauth2.c (pa_sam): Remove unused variable use_sam_key.
(SAMDATA): Cast first result to int, which is what sprintf needs.
(pa_salt): Delete unused variable ret.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12012 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12009 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12006 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
Rename "sam_passcode" field to "sam_sad". Add data to predicted-sam-response
structure, in part to (prepare to) help with replay detection.
Fix some memory allocation problems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12005 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
and revert call sites.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11970 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
recognized enctypes are found in the config file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11949 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11948 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11900 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11877 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
that one can override CFLAGS from the command line without losing CPP
search patchs and defines. Some associated Makefile cleanup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11876 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
(Noticed by Derrick Brashear.) Delete about a dozen duplicate entries.
* str_conv.c (dt_output_donly, dt_output_dhms, dt_output_hms,
sftime_default_fmt): Replace char arrays with macros, so gcc can do better
format-string checking.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11859 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11853 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* init_ctx.c (get_profile_etype_list): Update name of the des3 entry in the
default etype list.
* init_ctx.c (get_profile_etype_list): New argument DESONLY; if set, ignore any
ktype values other than NULL, DES_CBC_CRC, and DES_CBC_MD5.
(krb5_get_default_in_tkt_ktypes, krb5_get_tgs_ktypes): Set it.
(krb5_get_permitted_enctypes): Don't set it.
* fwd_tgt.c (krb5_fwd_tgt_creds): Use KRB5_TC_SUPPORTED_KTYPES when calling
krb5_cc_retrieve_cred.
* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Ditto.
* get_creds.c (krb5_get_credentials_core): Set that flag.
(krb5_get_credentials): Check for KRB5_CC_NOT_KTYPE error return.
* t_ser.c (main): Disable eblock serialization test, since the code it tests
was disabled nearly a year ago.
* str_conv.c (krb5_timestamp_to_sfstring): Don't pass extra argument to
sprintf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11779 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
Added call to free cipherpw.data. cipherpw.data is allocated
by krb5_mk_priv and passed back. Since cipherpw is never
passed back, krb5_mk_chpw_req should free it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11648 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* chpw.c (krb5_mk_chpw_req):
Added call to free cipherpw.data. cipherpw.data is allocated
by krb5_mk_priv and passed back. Since cipherpw is never
passed back, krb5_mk_chpw_req should free it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11647 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
(It is because we need to have the ccapi stuff loaded before trying
to get the OS-specific context initialization where we figure out
default cache names and such.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11625 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to free string allocated by profile_get_string.
(krb5_init_context): Use a real context for krb5_win_ccdll_load.
* get_in_tkt.c (krb5_appdefault_string):
* conv_princ.c (krb5_425_conv_principal): Use profile_free_list
to free values allocated by profile_get_values.
* get_in_tkt.c (_krb5_conf_boolean, krb5_appdefault_boolean):
Rename krb5_conf_boolean to _krb5_conf_boolean to denote that
it is not public so that folks outside the libraries won't
be tempted to use it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11624 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
trying to dereference it, in case lower-level routine failed to assign
a value to it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11619 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11593 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
so that the function may be used in other modules.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11585 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
ciphertext if there is an error; this prevents stuff farther up
from freeing freed memory.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11531 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
targets, in case higher-level code retains pointers into the context structure.
From Jeffrey Altman.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11523 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
kkrb5_win_ccdll_load so that it can register the FILE ccache type if
using ccapi (so that the FILE ccache type will always work).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11440 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11432 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
krb5_free_sam_response, krb5_free_sam_response_contents,
krb5_free_predicted_sam_response,
krb5_free_predicted_sam_response_contents,
krb5_free_enc_sam_response_enc,
krb5_free_enc_sam_response_enc_contents, krb5_free_pa_enc_ts): Added
new functions. Part of patches from [krb5-kdc/662]
gic_pwd.c (krb5_get_init_creds_password): Add new argument to calls to
the prompter function. Part of patches from [krb5-kdc/662].
preauth2.c (pa_enc_timestamp, pa_sam): Update calls to new prompter
function. [krb5-kdc/662].
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11349 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krbcc32.dll under windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11333 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
destined to be returned to avoid freeing it. Also,
unconditionally free credspout if it's non-NULL so that if someone
doesn't pass in a ticket and doesn't give us a non-NULL out_creds,
we don't leak it. [krb5-libs/699]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11249 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
to buildtop and thisconfigdir, respectively.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11087 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11008 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
|