summaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* gssapiP_krb5.h (KRB5_GSS_FOR_CREDS_OPTION): New constant added forTheodore Tso1996-01-103-77/+252
| | | | | | | | | | | | delegation (forwarding) of credentials. init_sec_context.c (make_ap_req): Add support for sending delegated credentials. Misc lint cleanups. accept_sec_context.c (krb5_gss_accept_sec_context): Add support for accepting delegated credentials. Misc lint cleanups. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7281 dc483132-0cff-0310-8789-dd5450dbe970
* fwd_tgt.c (krb5_fwd_tgt_creds): New function which handles all of theTheodore Tso1996-01-106-68/+227
| | | | | | | | | | | | | | | dirty work of forwarding TGT's. rd_cred.c (krb5_rd_cred_basic): Clean up memory allocation discpline to remove memory leaks. mk_cred.c (krb5_mk_ncred_basic, krb5_mk_ncred, krb5_mk_1cred): Clean up memory allocation discpline to remove memory leaks. init_ctx.c (krb5_get_tgs_ktypes): Clean up parsing of the etype list. Don't overrun the string containing the etype list. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7280 dc483132-0cff-0310-8789-dd5450dbe970
* hostaddr.c (krb5_os_hostaddr): New function which takes a hostname andTheodore Tso1996-01-053-0/+90
| | | | | | | returns a list of krb5 addresses. (This is basically a glue routine that converts the result of gethostbyname() to krb5 addresses.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7277 dc483132-0cff-0310-8789-dd5450dbe970
* gssapiP_generic.h (TWRITE_INT16, TREAD_INT16): Added new macrosTheodore Tso1996-01-052-0/+13
| | | | | | to read and write two byte integers from the wire. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7276 dc483132-0cff-0310-8789-dd5450dbe970
* gssapiP_generic.h: Don't include <sys/types.h> since it's alreadyTheodore Tso1996-01-053-3/+9
| | | | | | | | included by gssapi.h. gssapi.h: Add a #ifndef _MACINTOSH around include of <sys/types.h> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7275 dc483132-0cff-0310-8789-dd5450dbe970
* Always include <fcntl.h> instead of checking for <sys/fcntl.h>Richard Basch1996-01-041-3/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7271 dc483132-0cff-0310-8789-dd5450dbe970
* Always include <fcntl.h> instead of checking for <sys/fcntl.h>Richard Basch1996-01-046-17/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7269 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for presense of setenv(), unsetenv(), andTheodore Tso1996-01-044-1/+190
| | | | | | | | | getenv() from the C library. * Makefile.in: New file: setenv.c --- provides routines for setting the environment. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7266 dc483132-0cff-0310-8789-dd5450dbe970
* * rd_cred.c (krb5_rd_cred_basic): When the keyblock is NULL, assumeTheodore Tso1996-01-043-25/+67
| | | | | | | | | | | | | | | | we're being called from the gssapi code, which doesn't have access to the sender or receive address information, don't check the sender address, since it won't be available. * rd_cred.c (decrypt_credencdata): When calling krb5_rd_credd(), if the keyblock is null, just copy the encoded structure from the "ciphertext" part of the structure and decode it. * mk_cred.c (encrypt_credencpart): When calling krb5_mk_cred(), if the keyblock is NULL, don't encrypt it; just encode it and leave it in the ciphertext area of the structure. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7264 dc483132-0cff-0310-8789-dd5450dbe970
* Use KRB5_CC_FORMAT as an error code instead of KRB5_CCACHE_BADVNO,Theodore Tso1995-12-214-8/+14
| | | | | | when it's really a format error in the credentials cache file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7248 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed typo (missing comma) in fileTheodore Tso1995-12-211-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7247 dc483132-0cff-0310-8789-dd5450dbe970
* Changed KRB5_SENDAUTH_MUTUAL_FAILED to KRB5_MUTUAL_FAILED (since theTheodore Tso1995-12-212-1/+10
| | | | | | | error code is no longer used in sendauth). Added KRB5_CC_FORMAT for indicating a problem in the credentials cache format. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7246 dc483132-0cff-0310-8789-dd5450dbe970
* Change use of KRB5_SENDAUTH_MUTUAL_FAILED to KRB5_MUTUAL_FAILEDTheodore Tso1995-12-212-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7245 dc483132-0cff-0310-8789-dd5450dbe970
* In the case of SCC_OPEN_AND_ERASE, unlink the filename first, in caseTheodore Tso1995-12-212-0/+13
| | | | | | | there's a symbolic link lurking about. (We should do an exclusive open then, but there's no such thing in stdio.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7244 dc483132-0cff-0310-8789-dd5450dbe970
* In the case of FCC_OPEN_AND_ERASE, unlink the old filename, and thenTheodore Tso1995-12-212-1/+9
| | | | | | | add the O_EXCL open flag, to prevent O_CREAT from following a symbolic link. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7243 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (t_an_to_ln): Use $(LD) instead of $(CC) to link finalTheodore Tso1995-12-213-33/+32
| | | | | | | | | | executables, so that we can more easily use purify. * hst_realm.c (krb5_get_host_realm): Eliminate memory leak; realm was already being allocated by the profile library; no reason to reallocate it again. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7241 dc483132-0cff-0310-8789-dd5450dbe970
* Missing parenthesis meant that wrong number of bytes was beingTheodore Tso1995-12-202-1/+7
| | | | | | allocated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7240 dc483132-0cff-0310-8789-dd5450dbe970
* New function for doing generic tty input and output. EventuallyTheodore Tso1995-12-203-0/+171
| | | | | | read_password should use this function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7239 dc483132-0cff-0310-8789-dd5450dbe970
* Don't drag in syslog.c if vsyslog() is not defined. Only drag it inTheodore Tso1995-12-192-2/+6
| | | | | | if syslog() isn't available. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7238 dc483132-0cff-0310-8789-dd5450dbe970
* * keytab.c (krb5_ktkdb_resolve): Fix castingEzra Peisach1995-12-183-13/+16
| | | | | | * t_kdb.c (add_principal): Remove mkvno git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7234 dc483132-0cff-0310-8789-dd5450dbe970
* * t_verify.c: Added an n-fold testRichard Basch1995-12-141-0/+36
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7231 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in : Remove subdirectory dbChris Provenzano1995-12-132-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7225 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in : Move db keytab routines to lib/kdbChris Provenzano1995-12-132-2/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7224 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in, keytab.c : Move db keytab routines hereChris Provenzano1995-12-133-0/+124
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7223 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_xdr.c : Remove mkvno for krb5_db_entryChris Provenzano1995-12-132-10/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7220 dc483132-0cff-0310-8789-dd5450dbe970
* * fetch_mkey: Changed krb5_db_fetch_mkey() such that it will only tryRichard Basch1995-12-121-1/+1
| | | | | | | to set the enctype of the keyblock if the keyblock had it set to ENCTYPE_UNKNOWN. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7210 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_str2ky.c: Updated to include some of the randomness throughoutRichard Basch1995-12-121-7/+3
| | | | | | | the entire key. The second 3-DES CBC encryption of the block should use an ivec of the last cipher block. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up repository - don't check in configure add .Sanitize and .cvsignoreEzra Peisach1995-12-123-1009/+38
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205 dc483132-0cff-0310-8789-dd5450dbe970
* New directory for the kdb keytab functions. Currently there is only get andChris Provenzano1995-12-124-0/+1156
| | | | | | | | resolve but these are sufficient to remove the ugly hack where the key is passed to krb5_rd_req() in the user-to-user field of the auth_context. These functions do NOT need to be built on the Macintosh or Windows systems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in : Added subdirectory dbChris Provenzano1995-12-122-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_dbm.c : Move the krb5_db_context to include/krb5/kdb_dbc.h.Chris Provenzano1995-12-122-79/+113
| | | | | | | | | | * kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey(): Functions for associating a master key (krb5_encrypt_block *) to a krb5_db_context. Currently it associates it to the krb5_context and will be fixed once the krb5_db_context is better defined (Post 1.0). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201 dc483132-0cff-0310-8789-dd5450dbe970
* * fetch_mkey.c: If the keyblock is initialized with an enctype ofRichard Basch1995-12-121-1/+3
| | | | | | | NULL, simply read in the enctype from the stash file and don't try to check it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_str2ky.c: Revised 3-DES String-To-Key algorithm to encrypt theRichard Basch1995-12-121-1/+8
| | | | | | folded result twice in the folded key. [Courtesy Uri Blumenthal] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194 dc483132-0cff-0310-8789-dd5450dbe970
* Add new routine krb5_input_flag_to_string to allow an application toEzra Peisach1995-12-102-0/+16
| | | | | | | loop over the input flag strings for displaying help messages (i.e. modent in krb5_edit). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recvauth to this library so that krb4 can depend on krb5Ezra Peisach1995-12-065-0/+392
| | | | | | (for configurable paths support). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177 dc483132-0cff-0310-8789-dd5450dbe970
* Commit the removal or compat_recv.oEzra Peisach1995-12-061-302/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recv.c to krb5utilEzra Peisach1995-12-062-2/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175 dc483132-0cff-0310-8789-dd5450dbe970
* Removed krb4 dependency in building shared libraryEzra Peisach1995-12-062-9/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Shared library depends on krb5 library nowEzra Peisach1995-12-063-3/+15
| | | | | | * configure.in: Pass krb5 library version number to Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173 dc483132-0cff-0310-8789-dd5450dbe970
* krb5 is built before krb4. Add krb5util libraryEzra Peisach1995-12-062-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172 dc483132-0cff-0310-8789-dd5450dbe970
* Added support for matching against a supported app. session key typeRichard Basch1995-12-053-0/+81
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170 dc483132-0cff-0310-8789-dd5450dbe970
* When searching for cached credentials, make sure we are also looking forRichard Basch1995-12-051-1/+1
| | | | | | credentials that are matching a supported application keytype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169 dc483132-0cff-0310-8789-dd5450dbe970
* Added two new routines for multiple encryption type support:Richard Basch1995-12-051-13/+131
| | | | | | | | | | | | krb5_set_default_tgs_ktypes(context, ktypes) This routine sets the default application session key types to be used. krb5_get_tgs_ktypes(context, principal, &ktypes) This routine gets the session key types to be used with "principal". At the moment, this only uses the krb5_set_default_tgs_ktypes values or those specified in libdefaults/default_tgs_enctypes (krb5.conf). It is envisioned that this may later support per-host/per-realm lookup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168 dc483132-0cff-0310-8789-dd5450dbe970
* Serialize / de-serialize the context structure, which now includes bothRichard Basch1995-12-051-15/+49
| | | | | | TGT session key types and application session key types. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166 dc483132-0cff-0310-8789-dd5450dbe970
* Instead of using the TGT session key type, use the application sessionRichard Basch1995-12-051-1/+1
| | | | | | key type. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165 dc483132-0cff-0310-8789-dd5450dbe970
* The wrong encryption system was being initialized. The response to the mk_reqRichard Basch1995-12-051-2/+2
| | | | | | | should be done using the session key and its encryption system, not the ticket's encryption system. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-053-618/+670
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-052-1/+2
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed the description of the algorithm in the commentRichard Basch1995-12-021-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7157 dc483132-0cff-0310-8789-dd5450dbe970
* XOR the last byte of weak keys with 0xf0, according to specRichard Basch1995-12-022-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7156 dc483132-0cff-0310-8789-dd5450dbe970