Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | s4:auth/gensec_gssapi: add "gensec_gssapi:requested_life_time" option | Stefan Metzmacher | 2012-05-17 | 1 | -1/+6 |
| | | | | metze | ||||
* | s4:auth/gensec: implement gensec_gssapi_expire_time() | Stefan Metzmacher | 2012-05-17 | 1 | -0/+13 |
| | | | | metze | ||||
* | s4:auth/gensec_gssapi: add missing 'break' statements | Stefan Metzmacher | 2012-05-17 | 1 | -0/+2 |
| | | | | metze | ||||
* | s4:auth/gensec_gssapi: remember the expire time | Stefan Metzmacher | 2012-05-17 | 2 | -2/+9 |
| | | | | metze | ||||
* | s4:auth: remove unused auth_server.c | Stefan Metzmacher | 2012-05-15 | 2 | -245/+0 |
| | | | | metze | ||||
* | s4-auth: Use smb_krb5_make_pac_checksum. | Andreas Schneider | 2012-05-08 | 1 | -54/+24 |
| | | | | Signed-off-by: Simo Sorce <idra@samba.org> | ||||
* | s4:auth/kerberos: don't do tracing in MIT build | Alexander Bokovoy | 2012-05-04 | 1 | -17/+0 |
| | | | | Signed-off-by: Simo Sorce <idra@samba.org> | ||||
* | auth-session: MIT doesn't have import/export cred yet | Simo Sorce | 2012-05-04 | 1 | -3/+5 |
| | | | | | | | For now let's just loose this functionality with the MIT build. gss_import/export_cred should be availa ble when MIT 1.11 is released and this code is used only in some proxy scenario. Not normally needed for common configurations. | ||||
* | s4-auth-krb: Make srv_keytab.c build against MIT Kerberos | Simo Sorce | 2012-05-04 | 1 | -8/+11 |
| | |||||
* | Fix incompatible assignment warning | Simo Sorce | 2012-05-04 | 1 | -1/+1 |
| | |||||
* | Fix compiler warning | Simo Sorce | 2012-05-04 | 1 | -1/+1 |
| | |||||
* | s4-auth-krb: Use compat code to initialize keyblock contents | Simo Sorce | 2012-05-04 | 1 | -1/+1 |
| | |||||
* | s4-auth-krb: Disable code in MIT build | Simo Sorce | 2012-05-04 | 1 | -1/+4 |
| | | | | | | Unfortunately these functions are not available in MIT and there is no easy workaround or compat funciton I can see at this stage. Will fix properly once MIT gets the necessary functions or if another workaround can be found. | ||||
* | Move keytab_copy to krb5samba lib | Simo Sorce | 2012-05-04 | 2 | -231/+1 |
| | | | | | This is a helper fucntion that uses purely krb5 code, so it belongs to krb5samba which is the krb5 wrapper for samba. | ||||
* | Fix keytab_copy to compile with MIT librariues too | Simo Sorce | 2012-05-04 | 1 | -10/+12 |
| | |||||
* | keytab_copy: Fix style, whitespaces | Simo Sorce | 2012-05-04 | 1 | -8/+17 |
| | |||||
* | kerberos_pac: Fix code to work with MIT too | Simo Sorce | 2012-05-04 | 1 | -3/+3 |
| | |||||
* | s4-auth-krb: smb_rd_req_return_stuff is used only in gensec_krb5 | Simo Sorce | 2012-05-04 | 5 | -2/+13 |
| | | | | | | | Make it clearly a gensec_krb5 accessory file. This function should never be used anywhere else. This function was copied out from the Heimdal tree and is kept in a separate file for clarity and to keep the original license boilerplate. | ||||
* | Split normal kinit from s4u2 flavored kinit | Simo Sorce | 2012-05-04 | 1 | -7/+21 |
| | | | | | | | This makes it simpler to slowly integrate MIT support and also amkes it somewhat clearer what operation is really requested. The 24u2 part is really only used by the cifs proxy code so we can temporarily disable it in the MIT build w/o major consequences. | ||||
* | Move kerberos_kinit_password_cc to krb5samba lib | Simo Sorce | 2012-05-04 | 3 | -427/+1 |
| | |||||
* | Move kerberos_kinit_keyblock_cc to krb5samba lib | Simo Sorce | 2012-05-04 | 2 | -55/+0 |
| | | | | | Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not available. | ||||
* | krb-init: define out heimdal specific stuff in mitkrb build | Simo Sorce | 2012-05-04 | 1 | -3/+12 |
| | |||||
* | s4-auth-krb: avoid useless condition | Simo Sorce | 2012-05-04 | 1 | -1/+1 |
| | | | | Code bails out with ENOMEM 2 lines a bove if config_file is NULL anyways | ||||
* | lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into ↵ | Alexander Bokovoy | 2012-04-25 | 3 | -4/+3 |
| | | | | | | | | | | | | | | lib/replace/system/gssapi.h With waf build include directories are defined by dependencies specified to subsystems. Without proper dependency <gssapi/gssapi.h> cannot be found for embedded Heimdal builds when there are no system-wide gssapi/gssapi.h available. Split out GSSAPI header includes in a separate replacement header and use that explicitly where needed. Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104 | ||||
* | Make krb5 wrapper library common so they can be used all over | Simo Sorce | 2012-04-23 | 2 | -4/+5 |
| | |||||
* | For now just disable this Heindal specific stuff in the MIT build | Simo Sorce | 2012-04-23 | 5 | -3/+29 |
| | |||||
* | Make krb5 context initialization not heimdal specific | Simo Sorce | 2012-04-23 | 2 | -22/+54 |
| | | | | | Turn the logging data to an opaque pointer. Ifdef code and use MIT logging function when built against system MIT. | ||||
* | Fix Error messages | Simo Sorce | 2012-04-19 | 1 | -4/+2 |
| | |||||
* | s4-auth: Make sure ldb context is initialized even if not passed by Python code | Alexander Bokovoy | 2012-04-14 | 1 | -1/+1 |
| | | | | | Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Sat Apr 14 00:21:00 CEST 2012 on sn-devel-104 | ||||
* | srv_keytab: Pass krb5_context directly, it's all we use anyways. | Simo Sorce | 2012-04-12 | 1 | -16/+11 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | auth-krb: Move pac related util functions in a single place. | Simo Sorce | 2012-04-12 | 3 | -0/+3 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | auth-krb: Make functions static. | Simo Sorce | 2012-04-12 | 1 | -0/+71 |
| | | | | | | | The remaining gssapi_parse functions were used exclusively in gensec_krb5. Move them there and make them static. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | auth-krb: Nove oid packet check to gensec_util. | Simo Sorce | 2012-04-12 | 2 | -43/+3 |
| | | | | | | | | This is clearly a utiliy function generic to gensec. Also the 3 callers had identical implementations. Provide a generic implementation for all of them and avoid duplicating the code everywhere. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Remove dependency on credentials too. | Simo Sorce | 2012-04-12 | 2 | -11/+5 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Remove unneded dependency on kerberos_util. | Simo Sorce | 2012-04-12 | 3 | -40/+54 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Simplify salt_princ handling. | Simo Sorce | 2012-04-12 | 4 | -287/+187 |
| | | | | | | | | This allows us to make parse_principal static in kerbeors_util again and avoid a silly game where we alloc containers and set destrcutors only to release the whole thing at the end of the function. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Move function to db-glue.c and make it static. | Simo Sorce | 2012-04-12 | 2 | -20/+0 |
| | | | | | | | kerberos_enctype_to_bitmap is not used anywhere else, so just move it there and make it static, one less dependency to worry about. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Move keytab functions in a separate file. | Simo Sorce | 2012-04-12 | 4 | -707/+749 |
| | | | | | | Confine ldb dependency. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Streamline and cleanup code to make it readable. | Simo Sorce | 2012-04-12 | 1 | -190/+256 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: streamline and rename enctype functions | Simo Sorce | 2012-04-12 | 1 | -11/+12 |
| | | | | better express what is being done in the function name. | ||||
* | s4-auth-krb: Make kerberos_enctype_bitmap_to_enctype static. | Simo Sorce | 2012-04-12 | 2 | -3/+1 |
| | | | | | | It's a helper function not used anywhere else. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Make kerberos_enctype_bitmap_to_enctypes static. | Simo Sorce | 2012-04-12 | 1 | -1/+7 |
| | | | | | | It is not used anywhere else. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Move function into more appropriate header. | Simo Sorce | 2012-04-12 | 1 | -0/+8 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4-auth-krb: Make impersonate_principal_from_credentials static. | Simo Sorce | 2012-04-12 | 1 | -0/+1 |
| | | | | | | It's not used anywhere else. Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | gensec_gssapi: keep private header file close to the actual code | Simo Sorce | 2012-04-12 | 2 | -1/+70 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | krb5_wrap: remove duplicate declaration and dead ifdef | Simo Sorce | 2012-04-12 | 1 | -4/+0 |
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> | ||||
* | s4:auth/gensec/schannel: initialize struct schannel_state to zero | Stefan Metzmacher | 2012-03-02 | 1 | -2/+1 |
| | | | | metze | ||||
* | s4:auth/gensec/schannel: make a copy of netlogon_creds_CredentialState in ↵ | Stefan Metzmacher | 2012-03-02 | 1 | -1/+8 |
| | | | | | | | | the client This is really a copy for the lifetime of the rpc connection. metze | ||||
* | auth: Rename some elements of auth4_context | Andrew Bartlett | 2012-02-24 | 1 | -3/+3 |
| | | | | | | These operate on NTLM authentication, so make that clear. Andrew Bartlett | ||||
* | pygensec: Fix whitespace. | Jelmer Vernooij | 2012-02-18 | 1 | -8/+8 |
| |