| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
| |
delegation (forwarding) of credentials.
init_sec_context.c (make_ap_req): Add support for sending delegated
credentials. Misc lint cleanups.
accept_sec_context.c (krb5_gss_accept_sec_context): Add support for
accepting delegated credentials. Misc lint cleanups.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7281 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
dirty work of forwarding TGT's.
rd_cred.c (krb5_rd_cred_basic): Clean up memory allocation discpline
to remove memory leaks.
mk_cred.c (krb5_mk_ncred_basic, krb5_mk_ncred, krb5_mk_1cred): Clean
up memory allocation discpline to remove memory leaks.
init_ctx.c (krb5_get_tgs_ktypes): Clean up parsing of the etype list.
Don't overrun the string containing the etype list.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7280 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
returns a list of krb5 addresses. (This is basically a glue routine
that converts the result of gethostbyname() to krb5 addresses.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7277 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
to read and write two byte integers from the wire.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7276 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
included by gssapi.h.
gssapi.h: Add a #ifndef _MACINTOSH around include of <sys/types.h>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7275 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7271 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7269 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
| |
getenv() from the C library.
* Makefile.in: New file: setenv.c --- provides routines for
setting the environment.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7266 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
we're being called from the gssapi code, which doesn't have access to
the sender or receive address information, don't check the sender
address, since it won't be available.
* rd_cred.c (decrypt_credencdata): When calling krb5_rd_credd(), if
the keyblock is null, just copy the encoded structure from the
"ciphertext" part of the structure and decode it.
* mk_cred.c (encrypt_credencpart): When calling krb5_mk_cred(), if the
keyblock is NULL, don't encrypt it; just encode it and leave it in the
ciphertext area of the structure.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7264 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
when it's really a format error in the credentials cache file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7248 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7247 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
error code is no longer used in sendauth). Added KRB5_CC_FORMAT for
indicating a problem in the credentials cache format.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7246 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7245 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
there's a symbolic link lurking about. (We should do an exclusive
open then, but there's no such thing in stdio.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7244 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
add the O_EXCL open flag, to prevent O_CREAT from following a symbolic
link.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7243 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
executables, so that we can more easily use purify.
* hst_realm.c (krb5_get_host_realm): Eliminate memory leak; realm was
already being allocated by the profile library; no reason to
reallocate it again.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7241 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
allocated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7240 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
read_password should use this function.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7239 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
if syslog() isn't available.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7238 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* t_kdb.c (add_principal): Remove mkvno
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7234 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7231 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7225 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7224 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7223 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7220 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
to set the enctype of the keyblock if the keyblock had it
set to ENCTYPE_UNKNOWN.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7210 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
the entire key. The second 3-DES CBC encryption of the block
should use an ivec of the last cipher block.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
resolve but these are sufficient to remove the ugly hack where the key is
passed to krb5_rd_req() in the user-to-user field of the auth_context.
These functions do NOT need to be built on the Macintosh or Windows systems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
* kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey():
Functions for associating a master key (krb5_encrypt_block *)
to a krb5_db_context. Currently it associates it to the
krb5_context and will be fixed once the krb5_db_context
is better defined (Post 1.0).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
NULL, simply read in the enctype from the stash file and
don't try to check it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
folded result twice in the folded key. [Courtesy Uri Blumenthal]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
loop over the input flag strings for displaying help messages (i.e.
modent in krb5_edit).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
(for configurable paths support).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* configure.in: Pass krb5 library version number to Makefile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
credentials that are matching a supported application keytype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
krb5_set_default_tgs_ktypes(context, ktypes)
This routine sets the default application session key types to be used.
krb5_get_tgs_ktypes(context, principal, &ktypes)
This routine gets the session key types to be used with "principal".
At the moment, this only uses the krb5_set_default_tgs_ktypes values
or those specified in libdefaults/default_tgs_enctypes (krb5.conf).
It is envisioned that this may later support per-host/per-realm lookup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
TGT session key types and application session key types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
key type.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
should be done using the session key and its encryption system, not the
ticket's encryption system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7157 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7156 dc483132-0cff-0310-8789-dd5450dbe970
|