summaryrefslogtreecommitdiffstats
path: root/source4/heimdal/lib
Commit message (Collapse)AuthorAgeFilesLines
* s4:heimdal: regerenate filesStefan Metzmacher2010-02-089-173/+218
| | | | | | | Andrew using cp like in commit ca12e7bc8ff4a91f2044c0a60550fec902e97a78 is wrong as that removes #include "config.h" and breaks the build on AIX. metze
* heimdal: work around differences between GNU and XSI strerror_r()Andrew Tridgell2009-12-141-2/+10
| | | | | This is a fairly ugly workaround, but then again, strerror_r() is a very ugly mess.
* s4-heimdal: fixed a use-after-free heimdal bugAndrew Tridgell2009-12-081-0/+1
| | | | This caused samba4kinit to segfault on some systems
* krb5: Fix leaked hx509_context pointerKamen Mazdrashki2009-12-081-0/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:heimdal: import lorikeet-heimdal-200911170333 (commit ↵Andrew Bartlett2009-11-179-25/+8
| | | | | | | | | | b532c294d974cead40a1183c71be644c6ccc2832) This fixes up connections to Windows 2003, because the previous import had a broken arcfour-hmac-md5 implementation (fixed in Heimdal 316fc6ff8ffb0cbb1ef3689685e9977c37405bc4) Andrew Bartlett
* s4:heimdal Import generated files from heimdal treeAndrew Bartlett2009-11-139-827/+1185
| | | | We should be able to rebuild these, but a cp is easier :-)
* s4:heimdal: import lorikeet-heimdal-200911122202 (commit ↵Andrew Bartlett2009-11-1350-484/+936
| | | | 9291fd2d101f3eecec550178634faa94ead3e9a1)
* s4:heimdal: import lorikeet-heimdal-200909210500 (commit ↵Andrew Bartlett2009-11-13132-2079/+3967
| | | | 290db8d23647a27c39b97c189a0b2ef6ec21ca69)
* heimdal - hdb/ext.c - fix a "shadows variable" warningMatthias Dieter Wallnöfer2009-10-211-4/+4
| | | | | Renamed the variable "str" in the nested block to "str2" to prevent the collision with "str" in the main function block.
* s4:heimdal A real fix for bug 6801Andrew Bartlett2009-10-141-3/+3
| | | | | | | The issue was that we would free the entry after the database, not knowing that the entry was a talloc child of the database. Andrew Bartlett
* heimdal - fix various warningsMatthias Dieter Wallnöfer2009-10-036-21/+21
| | | | | | | | | - Shadowed variables - "const" related warnings - Parameter names which shadow function declarations - Non-void functions which have no return value (patch also ported upstream)
* s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_credStefan Metzmacher2009-09-181-0/+1
| | | | metze
* s4:heimdal: import lorikeet-heimdal-200908052208 (commit ↵Andrew Bartlett2009-08-0631-114/+30
| | | | | | | | | | | | | 370a73a74199a5a55188340906e15fd795f67a74) This removes some of the portability changes made to code under heimdal/ If these are still required, then we will re-add them with code under heimdal_build/ (so that we can simply 'drop in' future heimdal releases). Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200908050050 (commit ↵Andrew Bartlett2009-08-0544-346/+1090
| | | | | | | | | | | 8714779fa7376fd9f7761587639e68b48afc8c9c) This also adds a new hdb-glue.c file, to cope with Heimdal's uncondtional enabling of SQLITE. (Very reasonable, but not required for Samba4's use). Andrew Bartlett
* s4:kerberos Add support for user principal names in certificatesAndrew Bartlett2009-07-281-1/+6
| | | | | | | | | | | | | | This extends the PKINIT code in Heimdal to ask the HDB layer if the User Principal Name name in the certificate is an alias (perhaps just by case change) of the name given in the AS-REQ. (This was a TODO in the Heimdal KDC) The testsuite is extended to test this behaviour, and the other PKINIT certficate (using the standard method to specify a principal name in a certificate) is updated to use a Administrator (not administrator). (This fixes the kinit test). Andrew Bartlett
* s4:heimdal Extend the 'hdb as a keytab' codeAndrew Bartlett2009-07-271-4/+145
| | | | | | | | | | | | This extends the hdb_keytab code to allow enumeration of all the keys. The plan is to allow ktutil's copy command to copy from Samba4's hdb_samba4 into a file-based keytab used in wireshark. One day, with a few more hacks, we might even make this a loadable module that can be used directly... Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200907162216 (commit ↵Andrew Bartlett2009-07-175-6/+38
| | | | | | | | | | | d09910d6803aad96b52ee626327ee55b14ea0de8) This includes in particular changes to the KDC to resolve bug 6272, originally by Matthieu Patou <mat+Informatique.Samba@matws.net>. We need to sort the AuthorizationData elements to put the PAC first, or else WinXP breaks when browsed from Win2k8. Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200907152325 (commit ↵Andrew Bartlett2009-07-1664-565/+1151
| | | | 2bef9cd5378c01e9c2a74d6221761883bd11a5c5)
* s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIREDAndrew Bartlett2009-07-161-1/+4
| | | | | | | | We had previously assumed it was unconditional. Samba3 didn't mind very much, but Samba4's samba3-like client did, and the behaviour differed to Win2008 behaviour. Andrew Bartlett
* s4:heimdal: readd heimdal/lib/asn1/asn1parse.y which was parse.y before the ↵Stefan Metzmacher2009-07-069-175/+1185
| | | | | | | | | | last import Also commit the regenerated files for systems without yacc and lex. This fixes the build with automatic dependecies for me. metze
* heimdal: don't include <ifaddrs.h> without knowing it's thereBjörn Jacke2009-07-031-0/+2
| | | | this is 73dbbe0d54 re-added. abartlet, please pick this to lorikeet.
* s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2009-06-301-2/+4
| | | | | | | | | | | | | | The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200906080040 (commit ↵Andrew Bartlett2009-06-12296-5419/+8144
| | | | | | | | | | | 904d0124b46eed7a8ad6e5b73e892ff34b6865ba) Also including the supporting changes required to pass make test A number of heimdal functions and constants have changed since we last imported a tree (for the better, but inconvenient for us). Andrew Bartlett
* s4:heimdal: fix build on FreeBSDBjörn Jacke2009-06-081-0/+3
| | | | | | | | | | Patch from Timur I. Bakeyev sent to samba-technical: Heimdal requires openpty() presence. FreeBSD has in in standard libc, so autodetection works, but compilation fails, as declaration of this function is missing. This patch adds proper header detection and inclusion for openpty().
* Fix the build. Looks like no one ever compiled this on a systemJeremy Allison2009-02-241-0/+12
| | | | | with a libintl.h before. Jeremy.
* Start fixing Solaris build failures.Jeremy Allison2009-02-241-1/+1
| | | | Jeremy.
* heimdal: void functions should not return a valueStefan Metzmacher2009-01-311-1/+1
| | | | metze
* heimdal:hdb: always include "config.h" firstStefan Metzmacher2009-01-301-0/+4
| | | | metze
* heimdal:camellia: include roken.hStefan Metzmacher2009-01-302-0/+4
| | | | metze
* heimdal:roken: arg_match_long() should return a valueStefan Metzmacher2009-01-301-0/+3
| | | | | | This should fix a build problem on IRIX. metze
* heimdal:roken: arg_printusage() should not try to return a value.Stefan Metzmacher2009-01-301-2/+2
| | | | | | This should fix problems with the IRIX build. metze
* heimdal:camellia-ntt.c: include config.h as first headerStefan Metzmacher2009-01-301-0/+3
| | | | metze
* heimdal: don't include <sys/cdefs.h> without knowing it's thereStefan Metzmacher2009-01-301-0/+2
| | | | metze
* heimdal: don't include <ifaddrs.h> without knowing it's thereStefan Metzmacher2009-01-301-0/+2
| | | | metze
* Use standard heimdal function for finding interfaces - libreplace provides ↵Jelmer Vernooij2008-11-021-0/+292
| | | | support for the underlying functions now.
* s4: import lorikeet-heimdal-200810271034Stefan Metzmacher2008-10-28386-11035/+12632
| | | | metze
* Make sure prototypes are always included, make some functions static andJelmer Vernooij2008-10-201-3/+3
| | | | remove some unused functions.
* Add samba4kpasswd and rkpty binariesAndrew Bartlett2008-10-202-0/+402
| | | | | | | | smaba4kpasswd will be used to test the kpasswdd componet of the KDC (which is up until now untested), and rkpty is an expect-like wrapper we can use to blackbox that utility. Andrew Bartlett
* Rename hdb_ldb to hdb_samba4 and load as a plugin into the kdc.Andrew Bartlett2008-09-292-14/+34
| | | | | | | | | | This avoids one more custom patch to the Heimdal code, and provides a more standard way to produce hdb plugins in future. I've renamed from hdb_ldb to hdb_samba4 as it really is not generic ldb. Andrew Bartlett
* Merge krb5_cksumtype_to_enctype from Heimdal svn -r 23719Andrew Bartlett2008-09-031-32/+70
| | | | (This used to be commit cc1df3c002e6af25add3c8ae20e7efc2ab6f2fa8)
* Don't wipe the PAC checksums, the caller may actually need them.Andrew Bartlett2008-08-281-14/+0
| | | | (This used to be commit 9db5a966fce0b71a0d2167b4aff70cc081abc1cc)
* heimdal: add missing heimdal/lib/hcrypto/{evp-aes-cts.c,evp-hcrypto.c}, sorry...Stefan Metzmacher2008-08-262-0/+453
| | | | | metze (This used to be commit 0c4227e45d6b8e31a0219358042318e9d2a0b36d)
* heimdal: import heimdal's trunk svn rev 23697 + lorikeet-heimdal patchesStefan Metzmacher2008-08-26438-1899/+2659
| | | | | | | This is based on f56a3b1846c7d462542f2e9527f4d0ed8a34748d in my heimdal-wip repo. metze (This used to be commit 467a1f2163a63cdf1a4c83a69473db50e8794f53)
* heimdal_build: autogenerate the heimdal private/proto headersStefan Metzmacher2008-08-2610-8445/+0
| | | | | | | | Now it's possible to just use a plain heimdal tree in source/heimdal/ without any pregenerated files. metze (This used to be commit da333ca7113f78eeacab4f93b401f075114c7d88)
* heimdal_build: autogenerate table files in heimdal/lib/wind/Stefan Metzmacher2008-08-2632-26563/+46056
| | | | | metze (This used to be commit f4cfba26aebb18fecdb50478bec9c07d4910ab3b)
* heimdal: remove unused old filesStefan Metzmacher2008-08-262-509/+0
| | | | | metze (This used to be commit 94cef56212d7d7c1150aea760dba24bda7190442)
* heimdal_build: add a fake sqlite keytab implementationStefan Metzmacher2008-08-261-2/+0
| | | | | | | This remove a difference against lorikeet-heimdal. metze (This used to be commit 4314df3561dfe60228db0af220549300b0137c85)
* Revert "gsskrb5: add support for DCE_STYLE and des and des3 keys"Stefan Metzmacher2008-08-262-64/+22
| | | | | | | | | This reverts commit 86848dd0f217774faed81af8fbf68618013e20a1. This should come back via a merge from heimdal's trunk later. metze (This used to be commit 585e5360e2d9f722e80850eb86c3d4253530e8ba)
* Revert "gsskrb5: always return an acceptor subkey"Stefan Metzmacher2008-08-261-18/+4
| | | | | | | | | | This reverts commit 6a8b07c39558f240b89e833ecba15d8b9fc020e8. This isn't strictly needed and will come back in the next merge from heimdal's trunk. metze (This used to be commit 8ed040c8c4bed082ab74ab267090b35bb57db3f3)
* Revert "krb5: always generate the acceptor subkey as the same enctype as the ↵Stefan Metzmacher2008-08-141-3/+0
| | | | | | | | | | | | used service key" This reverts commit dbb94133e0313cae933d261af0bf1210807a6d11. As we fixed gensec_gssapi to only return a session key when it's have the correct session key, this hack isn't needed anymore. metze (This used to be commit 697cd1896bccaa55ee422f17d9312d787ca699ed)
generated by cgit (git 2.34.1) at 2025-09-25 22:16:57 +0000