summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* 2001-10-29 Jeff Altman <jaltman@columbia.edu>Jeffrey Altman2001-10-294-5/+26
| | | | | | | * Makefile.in - Windows configuration for src/lib/crypto/arcfour directory git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13872 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in - added dependency info for hmac_md5.cJeffrey Altman2001-10-292-1/+13
| | | | | | | Fixed typo $(OUTP)hmac_md5.c -> $(OUTPRE)hmac_md5.c which prevented builds on Windows. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13871 dc483132-0cff-0310-8789-dd5450dbe970
* * Use right key usage for seal without encryption.Sam Hartman2001-10-272-1/+5
| | | | | | | | Now tested and working against win2k ldap server; wrap and unwrap of encrypted and unencrypted data tested. So far no test of getmic or verify_mic. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13870 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: Mark as unused the test passes that won'tTom Yu2001-10-272-32/+51
| | | | | | | accomplish anything due to disabling of SUPPORT_DESMD5 in the code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13869 dc483132-0cff-0310-8789-dd5450dbe970
* * k5seal.c (make_seal_token_v1): Correct errors in codeEzra Peisach2001-10-262-5/+15
| | | | | | | pertaining to case when signing message only. Fixes buffer overflows as found by gssapi dejagnu testsuite. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13868 dc483132-0cff-0310-8789-dd5450dbe970
* * rcp.exp, rsh_exp (stop_rsh_daemon): Do not close a process andEzra Peisach2001-10-263-2/+9
| | | | | | | | then look for eof. Some versions of expect go through a full timeout in this scenario and others return immediately. New order: kill process, expect eof, close, and then wait. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13866 dc483132-0cff-0310-8789-dd5450dbe970
* * string_to_key.c (krb5_arcfour_string_to_key): Cleanup variablesEzra Peisach2001-10-262-4/+12
| | | | | | defined but not used. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13865 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h: Do not use "usage" in argument names inEzra Peisach2001-10-262-2/+7
| | | | | | krb5_keyhash_provider functions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13864 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add KRB5_GETSOCKNAME_ARGSEzra Peisach2001-10-262-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13863 dc483132-0cff-0310-8789-dd5450dbe970
* * schpw.c (process_chpw_request): Use GETSOCKNAME_ARG3_TYPEEzra Peisach2001-10-262-1/+10
| | | | | | instead of int as argument to getsockname(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13862 dc483132-0cff-0310-8789-dd5450dbe970
* * dump.c (dump_db): Pass krb5_boolean instead of char * asEzra Peisach2001-10-262-1/+8
| | | | | | argument to kb5_db_fetch_mkey(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13861 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_xdr.c (krb5_encode_princ_contents): Use krb5_ui_2 instead ofEzra Peisach2001-10-262-1/+6
| | | | | | krb5_int16 for key_data_length. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13860 dc483132-0cff-0310-8789-dd5450dbe970
* * Expose some rc4 crypto routines through the accessor mechanism; cleaner ↵Sam Hartman2001-10-2614-198/+425
| | | | | | | | | | | | than raw enctype * Deal with GSSAPI key usage in microsoft translation * Add rc4 gssapi mechanism; works with itself, not tested against * Windows yet * Refactor large chunks of k5seal.c to make code more readable for debugging git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13859 dc483132-0cff-0310-8789-dd5450dbe970
* * loadv4.c (fixup_database): Don't set SUPPORT_DESMD5 anymoreTom Yu2001-10-252-23/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13858 dc483132-0cff-0310-8789-dd5450dbe970
* * do_as_req.c (process_as_req: Treat SUPPORT_DESMD5 as if it wereTom Yu2001-10-254-8/+21
| | | | | | | | | | | | | | always cleared. * do_tgs_req.c (process_tgs_req): Treat SUPPORT_DESMD5 as if it were always cleared. * kdc_util.c (select_session_keytype): Don't issue session key enctype that is not in permitted_enctypes. (dbentry_supports_enctype): For now, always treat SUPPORT_DESMD5 as if it were cleared. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13857 dc483132-0cff-0310-8789-dd5450dbe970
* * svr_principal.c (kadm5_decrypt_key): For now, coerce enctype ofTom Yu2001-10-252-0/+12
| | | | | | output keyblock in case we got a match on a similar enctype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13856 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_xdr.c (krb5_dbe_search_enctype): Filter out enctypes thatTom Yu2001-10-253-2/+31
| | | | | | | | | | aren't in permitted_enctypes. This prevents the KDC from issuing a ticket whose enctype that it won't accept. * keytab.c (krb5_ktkdb_get_entry): For now, coerce enctype of output keyblock in case we got a match on a similar enctype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13855 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_err.et: Add KRB5_KDB_NO_PERMITTED_KEY,Tom Yu2001-10-252-0/+8
| | | | | | | KRB5_KDB_NO_MATCHING_KEY for libkdb so we can return something other than ENOENT (which was Just Wrong). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13854 dc483132-0cff-0310-8789-dd5450dbe970
* Remove autoconf 2.13 from source tree. We require at least 2.13 now -Ezra Peisach2001-10-2558-42575/+0
| | | | | | and users to have the execuable in their path. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13848 dc483132-0cff-0310-8789-dd5450dbe970
* * reconf: Require autoconf 2.13. Remove support for local autoconfEzra Peisach2001-10-252-30/+31
| | | | | | tree. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13847 dc483132-0cff-0310-8789-dd5450dbe970
* * rsh.exp (rsh_test): Add stop_rsh_daemon before invokingEzra Peisach2001-10-252-1/+7
| | | | | | start_rsh_daemon again to prevent running out of ptys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13846 dc483132-0cff-0310-8789-dd5450dbe970
* * t_encrypt.c: Argument to krb5_c_encrypt_length must be size_tEzra Peisach2001-10-242-2/+13
| | | | | | | instead of int (which is the length in krb5_data) or unaligned access occurs on Dec OSF machines. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13845 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add optional argument to AC_DEFINE to provideEzra Peisach2001-10-243-11/+16
| | | | | | | | comment in generated header file. * acconfig.h: Remove int32_t and u_int32_t, handled by configure.in git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13843 dc483132-0cff-0310-8789-dd5450dbe970
* * db-config.h.in: Remove unnecessary definitions for includingEzra Peisach2001-10-242-12/+6
| | | | | | | db.h header file. These include WORDS_BIGENDIAN, ssize_t, u_short, int8_t, u_int8_t, int16_t, u_int16_t, int32_t. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13842 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Use of AC_DEFINE modified to include thirdEzra Peisach2001-10-242-5/+15
| | | | | | | argument - the comment for the generated header file so that acconfig.h can be cleaned up. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13841 dc483132-0cff-0310-8789-dd5450dbe970
* * aclocal.m4: Require 2.13 of autoconf.Ezra Peisach2001-10-243-63/+43
| | | | | | | | | | | | | | | | | | (DECLARE_SYS_ERRLIST, CHECK_SIGPROCMASK, CHECK_DIRENT, CHECK_WAIT_TYPE, CHECK_SIGNALS, KRB5_SIGTYPE, KRB5_AC_CHECK_INET6, HAVE_YYLINENO, KRB5_SOCKADDR_SA_LEN, AC_HEADER_STDARG, KRB5_AC_NEED_LIBGEN, KRB5_AC_ENABLE_DNS): Use of AC_DEFINE modified to provide comment for autoheader generated file. * acconfig.h: Remove ANSI_STDIO, NO_YYLINENO, POSIX_FILE_LOCKS, POSIX_SIGTYPE, POSIX_TERMIOS, USE_DIRENT_H, WAIT_USES_INT, krb5_sigtype, HAVE_STDARG_H, HAVE_VARARGS_H, HAV_REGCOMP, HAVE_SA_LEN, HAVE_SOCKLEN_T, KRB5_ATHENA_COMPAT, KRB5_KRB4_COMPAT, KRB5_DNS_LOOKUP, KRB5_DNS_LOOKUP_KDC, KRB5_DNS_LOOKUP_REALM, KRB5_USE_INET6, MEMMOVE, memmove, mkstemp and strerror. All replaced by use of third argument to AC_DEFINE. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13840 dc483132-0cff-0310-8789-dd5450dbe970
* * arcfour.h: Declare krb5int_enc_arcfour extern so that multipleEzra Peisach2001-10-242-3/+10
| | | | | | copies are not generated (etypes.c, and arcfour.c). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13839 dc483132-0cff-0310-8789-dd5450dbe970
* * kadmin.exp: Corrected a couple of unimportant typos. Added proceduresMitchell Berger2001-10-242-4/+321
| | | | | | | | | | kadmin_addpol, kadmin_delpol, kadmin_listpols, kadmin_modpol, and kadmin_showpol, which provide the tools with which to perform policy tests. Added some basic policy operations to the tests of basic kadmin functions. Added a test case to exercise the kadmind crash that used to occur when the history number of a policy was decreased. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13838 dc483132-0cff-0310-8789-dd5450dbe970
* * rcp.exp (stop_rsh_daemon): Call "expect eof" to drain pty bufferTom Yu2001-10-243-0/+11
| | | | | | | | | and avoid deadlock. * rsh.exp (stop_rsh_daemon, rsh_test): Call "expect eof" to drain pty buffer and avoid deadlock. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13837 dc483132-0cff-0310-8789-dd5450dbe970
* * default.exp: Add support for setting SUPPORT_DESMD5 flag on theTom Yu2001-10-242-19/+161
| | | | | | | | | | | | | | TGT principal. Add test pass des.md5-tgt for exercising enctype similarity inconsistency. Add test pass des.no-kdc-md5 for exercising failure to constrain session key issuance to permitted_enctypes. Pepper the code with null calls to expect_after to prevent misfiring of expect_after clauses. (setup_srvtab): Look for some possible error cases to avoid timing out. (setup_root_shell): Restore timeout so we don't wait 5 minutes in other places. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13836 dc483132-0cff-0310-8789-dd5450dbe970
* Handle inlines in ansi-compatible mannerSam Hartman2001-10-232-8/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13835 dc483132-0cff-0310-8789-dd5450dbe970
* * Add usage to verify in keyhash checksSam Hartman2001-10-234-2/+9
| | | | | | * Include appropriate run flags for make check at top level git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13834 dc483132-0cff-0310-8789-dd5450dbe970
* Add Heimdal compatible aliases for rc4Sam Hartman2001-10-232-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13833 dc483132-0cff-0310-8789-dd5450dbe970
* * Tie in Microsoft rc4 cipher and make it buildSam Hartman2001-10-2323-44/+488
| | | | | | | | * Add hmac-md5-rc4 keyed hash and appropriate glue * Give keyed hash verify function access to usage argument * Add simplistic crypto system test to make check git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13832 dc483132-0cff-0310-8789-dd5450dbe970
* Include usage argument in keyed hash provider callsSam Hartman2001-10-229-5/+31
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13830 dc483132-0cff-0310-8789-dd5450dbe970
* In directories building libraries, generate dependencies for .so/.po files tooKen Raeburn2001-10-2041-536/+550
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13828 dc483132-0cff-0310-8789-dd5450dbe970
* avoid name conflicts with glibKen Raeburn2001-10-202-0/+38
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13827 dc483132-0cff-0310-8789-dd5450dbe970
* Ignore salt for arc4 string2key per Microsoft specSam Hartman2001-10-192-11/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13825 dc483132-0cff-0310-8789-dd5450dbe970
* * arcfour.c (krb5_arcfour_decrypt): Return error if salt cannot be allocatedSam Hartman2001-10-192-9/+51
| | | | | | | | | | | | (krb5_arcfour_encrypt): Only memset bits of key to known value on export-grade crypto * arcfour.c (arcfour_translate_usage): Attempt to implement based on draft-brezak-win2k-krb-rc4-hmac-03. Several usages remain unclear. Make 40-bit string not unsigned to avoid warning (krb5_arcfour_encrypt krb5_arcfour_decrypt): cast to avoid pointer warnings git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13824 dc483132-0cff-0310-8789-dd5450dbe970
* Don't crash if .k[5]login file ownership is wrong. Patch from Emily ↵Ken Raeburn2001-10-192-3/+11
| | | | | | Ratliff, ratliff@austin.ibm.com git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13822 dc483132-0cff-0310-8789-dd5450dbe970
* * sane_hostname.c (pty_make_sane_hostname): Do not declare addrbufEzra Peisach2001-10-182-1/+6
| | | | | | twice, shadowing the first declaration. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13819 dc483132-0cff-0310-8789-dd5450dbe970
* Patches contributed by David E. Cross" <crossd@cs.rpi.edu> to addSam Hartman2001-10-185-0/+482
| | | | | | | | | RC4-hmac support. This directory is taken from a diff at a url posted to krbdev with krb5int_hash_md5 substituted for krb5_hash_md5 so that the code would compile. krb5int_enc_arcfour has been substituted for krb5_enc_arcfour as well. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13818 dc483132-0cff-0310-8789-dd5450dbe970
* better version of last changeKen Raeburn2001-10-171-13/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13817 dc483132-0cff-0310-8789-dd5450dbe970
* * locate_kdc.c (add_host_to_list): If sa_len field exists and is zero, try toKen Raeburn2001-10-173-6/+66
| | | | | | | | fill it in. Another AIX 4.3.3 bug workaround. * sendto_kdc.c (krb5_sendto_kdc) [DEBUG]: More fprintf calls for tracing. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13816 dc483132-0cff-0310-8789-dd5450dbe970
* Provide a little bit of usage info. More error-checkingDanilo Almeida2001-10-172-16/+45
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13815 dc483132-0cff-0310-8789-dd5450dbe970
* * def-check.pl: New file. Not currently used by any automaticKen Raeburn2001-10-172-1/+187
| | | | | | | processes. Checks krb5.hin against krb5_32.def for consistency; might work with other .h/.def files but hasn't been tested. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13814 dc483132-0cff-0310-8789-dd5450dbe970
* * svr_principal.c (add_to_history): If the policy a principal uses hasMitchell Berger2001-10-162-0/+46
| | | | | | | | | | | | | been changed to hold a lesser number of history entries than it did before, extract the correct number and value of old keys from the history array into a newly allocated array of the proper size. Failing to do this made kadmind vulnerable to a crash upon changing such a principal's password. Original patch written by Matt Crawford, with a few changes. [Fixes krb5-admin/929] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13813 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5_32.def: Add krb5_kt_* functions: krb5_kt_close,Danilo Almeida2001-10-162-0/+13
| | | | | | | krb5_kt_get_entry, krb5_kt_get_name, krb5_kt_get_type, krb5_kt_start_seq_get, krb5_kt_next_entry, and krb5_kt_end_seq_get. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13812 dc483132-0cff-0310-8789-dd5450dbe970
* Add KRB5_CALLCONV to krb5_kt_get_typeDanilo Almeida2001-10-164-2/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13811 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_util.c (ktypes2str, rep_etypes2str): Clean up somewhatTom Yu2001-10-132-15/+34
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13808 dc483132-0cff-0310-8789-dd5450dbe970