| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
| |
* Makefile.in - Windows configuration for src/lib/crypto/arcfour
directory
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13872 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
Fixed typo $(OUTP)hmac_md5.c -> $(OUTPRE)hmac_md5.c which prevented
builds on Windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13871 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
Now tested and working against win2k ldap server; wrap and unwrap
of encrypted and unencrypted data tested.
So far no test of getmic or verify_mic.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13870 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
accomplish anything due to disabling of SUPPORT_DESMD5 in the
code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13869 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
pertaining to case when signing message only. Fixes buffer
overflows as found by gssapi dejagnu testsuite.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13868 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
then look for eof. Some versions of expect go through a full
timeout in this scenario and others return immediately. New order:
kill process, expect eof, close, and then wait.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13866 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
defined but not used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13865 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_keyhash_provider functions.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13864 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13863 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
instead of int as argument to getsockname().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13862 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
argument to kb5_db_fetch_mkey().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13861 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_int16 for key_data_length.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13860 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
than raw enctype
* Deal with GSSAPI key usage in microsoft translation
* Add rc4 gssapi mechanism; works with itself, not tested against
* Windows yet
* Refactor large chunks of k5seal.c to make code more readable for
debugging
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13859 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13858 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
always cleared.
* do_tgs_req.c (process_tgs_req): Treat SUPPORT_DESMD5 as if it
were always cleared.
* kdc_util.c (select_session_keytype): Don't issue session key
enctype that is not in permitted_enctypes.
(dbentry_supports_enctype): For now, always treat SUPPORT_DESMD5
as if it were cleared.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13857 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
output keyblock in case we got a match on a similar enctype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13856 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
aren't in permitted_enctypes. This prevents the KDC from issuing
a ticket whose enctype that it won't accept.
* keytab.c (krb5_ktkdb_get_entry): For now, coerce enctype of
output keyblock in case we got a match on a similar enctype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13855 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
KRB5_KDB_NO_MATCHING_KEY for libkdb so we can return something
other than ENOENT (which was Just Wrong).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13854 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
and users to have the execuable in their path.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13848 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
tree.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13847 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
start_rsh_daemon again to prevent running out of ptys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13846 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
instead of int (which is the length in krb5_data) or unaligned
access occurs on Dec OSF machines.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13845 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
comment in generated header file.
* acconfig.h: Remove int32_t and u_int32_t, handled by configure.in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13843 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
db.h header file. These include WORDS_BIGENDIAN, ssize_t, u_short,
int8_t, u_int8_t, int16_t, u_int16_t, int32_t.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13842 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
argument - the comment for the generated header file so that
acconfig.h can be cleaned up.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13841 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(DECLARE_SYS_ERRLIST, CHECK_SIGPROCMASK, CHECK_DIRENT,
CHECK_WAIT_TYPE, CHECK_SIGNALS, KRB5_SIGTYPE, KRB5_AC_CHECK_INET6,
HAVE_YYLINENO, KRB5_SOCKADDR_SA_LEN, AC_HEADER_STDARG,
KRB5_AC_NEED_LIBGEN, KRB5_AC_ENABLE_DNS): Use of AC_DEFINE
modified to provide comment for autoheader generated file.
* acconfig.h: Remove ANSI_STDIO, NO_YYLINENO, POSIX_FILE_LOCKS,
POSIX_SIGTYPE, POSIX_TERMIOS, USE_DIRENT_H, WAIT_USES_INT,
krb5_sigtype, HAVE_STDARG_H, HAVE_VARARGS_H, HAV_REGCOMP,
HAVE_SA_LEN, HAVE_SOCKLEN_T, KRB5_ATHENA_COMPAT, KRB5_KRB4_COMPAT,
KRB5_DNS_LOOKUP, KRB5_DNS_LOOKUP_KDC, KRB5_DNS_LOOKUP_REALM,
KRB5_USE_INET6, MEMMOVE, memmove, mkstemp and strerror. All
replaced by use of third argument to AC_DEFINE.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13840 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
copies are not generated (etypes.c, and arcfour.c).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13839 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
kadmin_addpol, kadmin_delpol, kadmin_listpols, kadmin_modpol, and
kadmin_showpol, which provide the tools with which to perform policy
tests. Added some basic policy operations to the tests of basic
kadmin functions. Added a test case to exercise the kadmind crash
that used to occur when the history number of a policy was decreased.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13838 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
and avoid deadlock.
* rsh.exp (stop_rsh_daemon, rsh_test): Call "expect eof" to drain
pty buffer and avoid deadlock.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13837 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
TGT principal. Add test pass des.md5-tgt for exercising enctype
similarity inconsistency. Add test pass des.no-kdc-md5 for
exercising failure to constrain session key issuance to
permitted_enctypes. Pepper the code with null calls to
expect_after to prevent misfiring of expect_after clauses.
(setup_srvtab): Look for some possible error cases to avoid timing
out.
(setup_root_shell): Restore timeout so we don't wait 5 minutes in
other places.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13836 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13835 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
* Include appropriate run flags for make check at top level
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13834 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13833 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
* Add hmac-md5-rc4 keyed hash and appropriate glue
* Give keyed hash verify function access to usage argument
* Add simplistic crypto system test to make check
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13832 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13830 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13828 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13827 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13825 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
(krb5_arcfour_encrypt): Only memset bits of key to known value
on export-grade crypto
* arcfour.c (arcfour_translate_usage): Attempt to implement based
on draft-brezak-win2k-krb-rc4-hmac-03. Several usages remain unclear.
Make 40-bit string not unsigned to avoid warning
(krb5_arcfour_encrypt krb5_arcfour_decrypt): cast to avoid
pointer warnings
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13824 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
Ratliff, ratliff@austin.ibm.com
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13822 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
twice, shadowing the first declaration.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13819 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
RC4-hmac support. This directory is taken from a diff at a url posted
to krbdev with krb5int_hash_md5 substituted for krb5_hash_md5 so that
the code would compile.
krb5int_enc_arcfour has been substituted for krb5_enc_arcfour as well.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13818 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13817 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
fill it in. Another AIX 4.3.3 bug workaround.
* sendto_kdc.c (krb5_sendto_kdc) [DEBUG]: More fprintf calls for tracing.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13816 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13815 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
processes. Checks krb5.hin against krb5_32.def for consistency;
might work with other .h/.def files but hasn't been tested.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13814 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
been changed to hold a lesser number of history entries than it did
before, extract the correct number and value of old keys from the
history array into a newly allocated array of the proper size. Failing
to do this made kadmind vulnerable to a crash upon changing such a
principal's password. Original patch written by Matt Crawford, with
a few changes.
[Fixes krb5-admin/929]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13813 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
krb5_kt_get_entry, krb5_kt_get_name, krb5_kt_get_type,
krb5_kt_start_seq_get, krb5_kt_next_entry, and krb5_kt_end_seq_get.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13812 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13811 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13808 dc483132-0cff-0310-8789-dd5450dbe970
|